Edit tour

Windows Analysis Report
https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading

Overview

General Information

Sample URL:	https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading
Analysis ID:	589678
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Changes security center settings (notifications, updates, antivirus, firewall)

Found evasive API chain checking for user administrative privileges

Queries the volume information (name, serial number etc) of a device

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

May sleep (evasive loops) to hinder dynamic analysis

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Uses code obfuscation techniques (call, push, ret)

Creates files inside the system directory

PE file contains sections with non-standard names

Detected potential crypto function

Found potential string decryption / allocating functions

Sample execution stops while process was sleeping (likely an evasion)

Contains functionality to check the parent process ID (often done to detect debuggers and analysis systems)

Found evasive API chain (may stop execution after checking a module file name)

Contains functionality to dynamically determine API calls

Found dropped PE file which has not been started or loaded

Contains functionality which may be used to detect a debugger (GetProcessHeap)

PE file contains executable resources (Code or Archives)

Enables debug privileges

Creates a DirectInput object (often for capturing keystrokes)

Drops files with a non-matching file extension (content does not match file extension)

AV process strings found (often used to terminate AV products)

PE file contains an invalid checksum

PE file contains strange resources

Drops PE files

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries disk information (often used to detect virtual machines)

Uses Microsoft's Enhanced Cryptographic Provider

PE file overlay found

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5872 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1904 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 6072 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6208 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 6984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6220 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 6640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6192 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 3432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6244 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5252 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3924 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 1292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3796 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 4208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3940 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5956 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3900 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 4432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=none --enable-audio-service-sandbox --mojo-platform-channel-handle=2200 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 1248 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3300 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 3780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2264 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2204 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 4600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3376 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 3556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2172 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5240 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3544 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5204 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3900 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3992 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

DropboxInstaller (1).exe (PID: 6352 cmdline: "C:\Users\user\Downloads\DropboxInstaller (1).exe" MD5: 96D1044856B6E12A79CC88731DBF309D)

DropboxUpdate.exe (PID: 3588 cmdline: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ" MD5: 8AD76E0B347BB690697535CE95B1C656)

chrome.exe (PID: 3768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5712 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 3116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5784 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 6416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6628 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6640 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=none --enable-audio-service-sandbox --mojo-platform-channel-handle=4800 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 4908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5688 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 3152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=4296 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 4076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=1508 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=4280 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

svchost.exe (PID: 1028 cmdline: c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 6680 cmdline: C:\Windows\System32\svchost.exe -k NetworkService -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

SgrmBroker.exe (PID: 6480 cmdline: C:\Windows\system32\SgrmBroker.exe MD5: D3170A3F3A9626597EEE1888686E3EA6)

svchost.exe (PID: 3204 cmdline: c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc MD5: 32569E403279B3FD2EDB7EBD036273FA)

MpCmdRun.exe (PID: 4872 cmdline: "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable MD5: A267555174BFA53844371226F482B86B)

conhost.exe (PID: 4868 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

svchost.exe (PID: 6516 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 476 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 6412 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 4596 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 2136 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

cleanup

Sigma Signatures

There are no malicious signatures, click here to show all signatures.

Source: File created

Author: frack113: Data: EventID: 11, Image: C:\Users\user\Downloads\DropboxInstaller (1).exe, ProcessId: 6352, TargetFilename: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe

Source: Process started

Author: frack113: Data: Command: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ", CommandLine: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ", CommandLine|base64offset|contains: )eq, Image: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe, ParentCommandLine: "C:\Users\user\Downloads\DropboxInstaller (1).exe" , ParentImage: C:\Users\user\Downloads\DropboxInstaller (1).exe, ParentProcessId: 6352, ProcessCommandLine: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ", ProcessId: 3588

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe

Code function: 43_2_01341FA1 CryptQueryObject,CertEnumCertificatesInStore,CertEnumCertificatesInStore,CertCloseStore,

43_2_01341FA1

Source: unknown	HTTPS traffic detected: 162.125.248.18:443 -> 192.168.2.3:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.82.210.154:443 -> 192.168.2.3:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.82.210.154:443 -> 192.168.2.3:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.82.210.154:443 -> 192.168.2.3:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.3:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.3:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.3:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.3:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.3:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.3:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.3:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.3:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.3:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.3:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.13:443 -> 192.168.2.3:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.13:443 -> 192.168.2.3:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.13:443 -> 192.168.2.3:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.13:443 -> 192.168.2.3:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.3:50035 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Source:	Binary string: goopdateres_unsigned_zh-TW.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, goopdateres_zh-TW.dll.35.dr
Source:	Binary string: goopdateres_unsigned_ms.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_ms.dll.35.dr
Source:	Binary string: mi_exe_stub.pdbT source: DropboxInstaller (1).exe, 00000023.00000000.465795476.000000000003D000.00000002.00000001.01000000.00000005.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmp, Unconfirmed 384737.crdownload.1.dr, Unconfirmed 238730.crdownload.1.dr, Unconfirmed 361642.crdownload.1.dr, de8171a1-8253-4ec4-bff4-0606b038fb48.tmp.1.dr, Unconfirmed 998509.crdownload.1.dr
Source:	Binary string: goopdateres_unsigned_ru.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_ru.dll.35.dr
Source:	Binary string: goopdateres_unsigned_it.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: goopdateres_unsigned_de.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_de.dll.35.dr
Source:	Binary string: goopdateres_unsigned_ja.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: goopdateres_unsigned_sv.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_sv.dll.35.dr
Source:	Binary string: goopdateres_unsigned_es.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_es.dll.35.dr
Source:	Binary string: goopdateres_unsigned_th.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_th.dll.35.dr
Source:	Binary string: goopdateres_unsigned_fr.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_fr.dll.35.dr
Source:	Binary string: goopdateres_unsigned_uk.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_uk.dll.35.dr
Source:	Binary string: DropboxUpdateOnDemand_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdateOnDemand.exe.35.dr
Source:	Binary string: goopdateres_unsigned_nl.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_nl.dll.35.dr
Source:	Binary string: goopdateres_unsigned_ko.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_ko.dll.35.dr
Source:	Binary string: DropboxUpdateBroker_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdateBroker.exe.35.dr
Source:	Binary string: DropboxUpdateOnDemand_unsigned.pdb`(pT source: DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdateOnDemand.exe.35.dr
Source:	Binary string: goopdateres_unsigned_no.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_no.dll.35.dr
Source:	Binary string: psmachine_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, psmachine.dll.35.dr
Source:	Binary string: DropboxUpdate_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmp, DropboxUpdate.exe, 0000002B.00000000.523031947.0000000001351000.00000002.00000001.01000000.00000006.sdmp, DropboxUpdate.exe.35.dr, DropboxUpdate.exe.43.dr, DropboxCrashHandler.exe.35.dr
Source:	Binary string: goopdateres_unsigned_pl.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: psuser_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, psuser.dll.35.dr
Source:	Binary string: goopdate_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.535950135.000000006E79C000.00000002.00000001.01000000.00000007.sdmp, goopdate.dll.35.dr
Source:	Binary string: goopdateres_unsigned_da.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_da.dll.35.dr
Source:	Binary string: goopdateres_unsigned_en.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, goopdateres_en.dll.35.dr
Source:	Binary string: goopdateres_unsigned_es-419.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_es-419.dll.35.dr
Source:	Binary string: npDropboxUpdate3_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, npDropboxUpdate3.dll.35.dr
Source:	Binary string: mi_exe_stub.pdb source: DropboxInstaller (1).exe, 00000023.00000000.465795476.000000000003D000.00000002.00000001.01000000.00000005.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmp, Unconfirmed 384737.crdownload.1.dr, Unconfirmed 238730.crdownload.1.dr, Unconfirmed 361642.crdownload.1.dr, de8171a1-8253-4ec4-bff4-0606b038fb48.tmp.1.dr, Unconfirmed 998509.crdownload.1.dr
Source:	Binary string: goopdateres_unsigned_pt-BR.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_pt-BR.dll.35.dr
Source:	Binary string: goopdateres_unsigned_zh-CN.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_zh-CN.dll.35.dr
Source:	Binary string: goopdateres_unsigned_id.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_id.dll.35.dr
Source:	Binary string: DropboxUpdateBroker_unsigned.pdb`(pT source: DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdateBroker.exe.35.dr

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.67.116
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.67.116
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.67.116
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.200
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 20.199.120.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.199.120.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.199.120.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.199.120.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.199.120.85

Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532063075.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533107620.0000000001706000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr, psuser.dll.35.dr, DropboxUpdateBroker.exe.35.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crtR3
Source: DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crtX3
Source: DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingC
Source: DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532063075.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532909890.0000000001700000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crtF3
Source: DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crtp2
Source: svchost.exe, 0000000D.00000002.534990046.000001FB1BC5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: svchost.exe, 0000000D.00000002.534990046.000001FB1BC5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digi
Source: DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCerg
Source: DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAss
Source: DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRo
Source: DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr, psuser.dll.35.dr, DropboxUpdateBroker.exe.35.dr, goopdateres_id.dll.35.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532063075.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533107620.0000000001706000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl3
Source: DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl_
Source: DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crld
Source: DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crlm=
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr, psuser.dll.35.dr, DropboxUpdateBroker.exe.35.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crlhttp://crl4.digicert.com/sha2-assured-cs-g1.crl
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532063075.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr, psuser.dll.35.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532063075.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533107620.0000000001706000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.R
Source: DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr, psuser.dll.35.dr, DropboxUpdateBroker.exe.35.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crlb/M
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532063075.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532909890.0000000001700000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: svchost.exe, 0000000D.00000003.446564559.000001FB1BD06000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000D.00000003.446463864.000001FB1BD02000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt0
Source: svchost.exe, 0000000D.00000002.535918305.000001FB1BCF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/
Source: svchost.exe, 0000000D.00000002.535918305.000001FB1BCF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/.dll
Source: svchost.exe, 0000000D.00000002.535918305.000001FB1BCF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/E
Source: svchost.exe, 0000000D.00000002.535918305.000001FB1BCF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/dll
Source: svchost.exe, 0000000D.00000003.458307237.000001FB1BD06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxv
Source: svchost.exe, 0000000D.00000002.531180776.000000D5C0F7B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvY8
Source: svchost.exe, 0000000D.00000003.429205162.000001FB1BD06000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000D.00000003.453443182.000001FB1BD1C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000D.00000003.429338150.000001FB1BD0A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFU
Source: svchost.exe, 0000000D.00000003.475922718.000001FB1BD02000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000D.00000003.475993613.000001FB1BD06000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000D.00000003.489221515.000001FB1BD0A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlahttp://e
Source: svchost.exe, 0000000D.00000003.489077275.000001FB1BCB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewuriu
Source: svchost.exe, 0000000D.00000003.453443182.000001FB1BD1C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000D.00000003.429338150.000001FB1BD0A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com:80
Source: svchost.exe, 0000000D.00000003.458307237.000001FB1BD06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com:80(
Source: svchost.exe, 0000000D.00000003.489077275.000001FB1BCB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com:80/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12M
Source: pnacl_public_x86_64_pnacl_sz_nexe.1.dr	String found in binary or memory: http://llvm.org/):
Source: DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com
Source: DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxL
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532063075.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533107620.0000000001706000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr, psuser.dll.35.dr, DropboxUpdateBroker.exe.35.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532063075.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532909890.0000000001700000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr	String found in binary or memory: http://ocsp.digicert.com0O
Source: DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.comK5
Source: DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.comQ4
Source: DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.comX4
Source: DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.como5
Source: DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.comy5
Source: svchost.exe, 00000009.00000002.337692787.000002641C813000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.bingmapsportal.com
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532063075.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000002.531032283.0000000001257000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr, psuser.dll.35.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.535950135.000000006E79C000.00000002.00000001.01000000.00000007.sdmp, goopdate.dll.35.dr	String found in binary or memory: http://www.dropbox.com/robots.txthttps://www.dropbox.com/robots.txthttp://www.dropbox.com/intl/en_AL
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://accounts.google.com
Source: craw_window.js.1.dr	String found in binary or memory: https://accounts.google.com/MergeSession
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://apis.google.com
Source: svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://appexmapsappupdate.blob.core.windows.net
Source: pnacl_public_x86_64_libcrt_platform_a.1.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-clang.git
Source: pnacl_public_x86_64_libcrt_platform_a.1.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
Source: DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.535950135.000000006E79C000.00000002.00000001.01000000.00000007.sdmp, goopdate.dll.35.dr	String found in binary or memory: https://client.dropbox.com/client/updates/crashesGOOGLE_UPDATE_NO_CRASH_HANDLERClientCustomDatalang
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, npDropboxUpdate3.dll.35.dr	String found in binary or memory: https://client.dropbox.com/client/updates/pingshttps://client.dropbox.com/client/updates/serviceNetC
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.1.dr, manifest.json.1.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: pnacl_public_x86_64_ld_nexe.1.dr	String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry
Source: pnacl_public_x86_64_ld_nexe.1.dr	String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry%s:
Source: svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
Source: svchost.exe, 00000009.00000002.337932816.000002641C85C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/JsonFilter/VenueMaps/data/
Source: svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Locations
Source: svchost.exe, 00000009.00000002.337901462.000002641C84E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Routes/
Source: svchost.exe, 00000009.00000002.337932816.000002641C85C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Traffic/Incidents/
Source: svchost.exe, 00000009.00000002.337968293.000002641C86A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.333659453.000002641C867000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Transit/Stops/
Source: svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/mapcontrol/logging.ashx
Source: svchost.exe, 00000009.00000002.337815965.000002641C846000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336005332.000002641C83F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
Source: svchost.exe, 00000009.00000002.337932816.000002641C85C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/
Source: svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Locations
Source: svchost.exe, 00000009.00000002.337901462.000002641C84E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/
Source: svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Driving
Source: svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Transit
Source: svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Walking
Source: svchost.exe, 00000009.00000002.337922021.000002641C853000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336585771.000002641C851000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Transit/Schedules/
Source: svchost.exe, 00000009.00000002.337922021.000002641C853000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336585771.000002641C851000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
Source: svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/mapcontrol/logging.ashx
Source: svchost.exe, 00000009.00000002.337932816.000002641C85C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336585771.000002641C851000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
Source: DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.535950135.000000006E79C000.00000002.00000001.01000000.00000007.sdmp, goopdate.dll.35.dr	String found in binary or memory: https://dl-debug.dropbox.com/send_update_manager_traceCheckDelay
Source: DropboxInstaller (3).exe_Zone.Identifier.42.dr	String found in binary or memory: https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_p
Source: a35f1be9-0273-49cb-9f7c-f8f26ec6888e.tmp.3.dr, e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, 8158790d-66e5-442e-a139-94c1179da69c.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://dns.google
Source: svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
Source: svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
Source: svchost.exe, 00000009.00000002.337932816.000002641C85C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
Source: svchost.exe, 00000009.00000002.337951427.000002641C865000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336585771.000002641C851000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.t
Source: svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
Source: svchost.exe, 00000009.00000002.337901462.000002641C84E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://fonts.googleapis.com
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://fonts.gstatic.com
Source: craw_background.js.1.dr, craw_window.js.1.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://ogs.google.com
Source: manifest.json0.1.dr, craw_window.js.1.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://play.google.com
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr	String found in binary or memory: https://r2---sn-5hnedn7s.gvt1.com
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr	String found in binary or memory: https://redirector.gvt1.com
Source: manifest.json0.1.dr, craw_window.js.1.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://ssl.gstatic.com
Source: svchost.exe, 00000009.00000002.337901462.000002641C84E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
Source: svchost.exe, 00000009.00000002.337901462.000002641C84E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000002.337692787.000002641C813000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
Source: svchost.exe, 00000009.00000003.336483004.000002641C856000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
Source: svchost.exe, 00000009.00000002.337789797.000002641C83D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
Source: svchost.exe, 00000009.00000002.337815965.000002641C846000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336005332.000002641C83F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.tiles.ditu.live.com/tiles/gen
Source: craw_background.js.1.dr, craw_window.js.1.dr	String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: goopdateres_nl.dll.35.dr	String found in binary or memory: https://www.digicert.com/CP
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532063075.00000000012BE000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531827009.000000000129C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529386593.000000000127F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533107620.0000000001706000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (3).exe_Zone.Identifier.42.dr	String found in binary or memory: https://www.dropbox.com/
Source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr, psuser.dll.35.dr, DropboxUpdateBroker.exe.35.dr, goopdateres_id.dll.35.dr	String found in binary or memory: https://www.dropbox.com/0
Source: History Provider Cache.1.dr	String found in binary or memory: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e2
Source: History Provider Cache.1.dr	String found in binary or memory: https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading2
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://www.google.com
Source: manifest.json0.1.dr	String found in binary or memory: https://www.google.com/
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.1.dr	String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: craw_background.js.1.dr, craw_window.js.1.dr, e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	String found in binary or memory: https://www.gstatic.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: global traffic	HTTP traffic detected: GET /v8.0/oemdiscovery?oemId=&scmId=&phoneManufacturerName=&smBiosManufacturerName=VMware%2C+Inc.&phoneDeviceModel=&smBiosDm=VMware7%2C1 HTTP/1.1Accept-Encoding: gzip, deflateAccept: /TASIGNORE: YESMS-PreciseDeviceFamilyVersion: 2814750890000385User-Agent: WindowsStore/11712.1001.23.0MS-CV: PWmD5nlzJ06OwWqE.1Accept-Language: en-USHost: storeedgefd.dsx.mp.microsoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-85.0.4183.121Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D
Source: global traffic	HTTP traffic detected: GET /hstsping HTTP/1.1Host: dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en
Source: global traffic	HTTP traffic detected: GET /?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.com HTTP/1.1Host: consent.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en
Source: global traffic	HTTP traffic detected: GET /s/opensans/v28/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-aliveOrigin: https://www.dropbox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.googleapis.com/css?family=Open+Sans:100,200,300,400,600,700&subset=latin,latin-extAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /download?plat=win HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=eAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: application/signed-exchange;v=b3;q=0.9,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR
Source: global traffic	HTTP traffic detected: GET /installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A HTTP/1.1Host: dl-web.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en
Source: global traffic	HTTP traffic detected: GET /site/v3/3401/59514/1/1/2/2/104138?consent=0&regulationid=0&regulationconsenttypeid=1 HTTP/1.1Host: l.evidon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/3401/59514/1/4/2/2/104138?consent=0&regulationid=0&regulationconsenttypeid=1 HTTP/1.1Host: l.evidon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hstsping HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dropbox.com
Source: global traffic	HTTP traffic detected: GET /crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&ctry=US&time=20220316T000740Z&lc=en-US&pl=en-US&idtp=mid&uid=4388269c-b420-4134-ac19-bc7ca8a19ac1&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=c8f4abf77b9a4b77be92fd8712d6f69a&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1428887&metered=false&nettype=ethernet&npid=sc-338388&oemName=alktsh%2C%20Inc.&oemid=alktsh%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=alktsh7%2C1&tl=2&tsu=1428887&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=228864&fs=81919&sc=7X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: 5pW2cEx6TUOkwRbp.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&ctry=US&time=20220316T000740Z&lc=en-US&pl=en-US&idtp=mid&uid=4388269c-b420-4134-ac19-bc7ca8a19ac1&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=08262a759e044406a135669deeaad927&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1428887&metered=false&nettype=ethernet&npid=sc-280815&oemName=alktsh%2C%20Inc.&oemid=alktsh%2C%20Inc.&ossku=Professional&smBiosDm=alktsh7%2C1&tl=2&tsu=1428887&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=228864&fs=81919&sc=7X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: 5pW2cEx6TUOkwRbp.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&ctry=US&time=20220316T000740Z&lc=en-US&pl=en-US&idtp=mid&uid=4388269c-b420-4134-ac19-bc7ca8a19ac1&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=70e290a6531e4915aa5a0392e768e149&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1428887&metered=false&nettype=ethernet&npid=sc-338387&oemName=alktsh%2C%20Inc.&oemid=alktsh%2C%20Inc.&ossku=Professional&rver=2&sc-mode=0&smBiosDm=alktsh7%2C1&tl=2&tsu=1428887&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=228864&fs=81919&sc=7X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: 5pW2cEx6TUOkwRbp.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /download?plat=win HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=eAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A HTTP/1.1Host: dl-web.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /site/v3/3401/59514/1/11/2/2/104138?consent=0&regulationid=0&regulationconsenttypeid=1 HTTP/1.1Host: l.evidon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site/v3/3401/59514/1/3/2/2/104138?consent=1&regulationid=0&regulationconsenttypeid=1 HTTP/1.1Host: l.evidon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&ctry=US&time=20220316T000813Z&lc=en-US&pl=en-US&idtp=mid&uid=4388269c-b420-4134-ac19-bc7ca8a19ac1&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=98eb9db253974c178b365f70e2231507&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1428887&metered=false&nettype=ethernet&npid=sc-338387&oemName=alktsh%2C%20Inc.&oemid=alktsh%2C%20Inc.&ossku=Professional&rver=2&sc-mode=0&smBiosDm=alktsh7%2C1&tl=2&tsu=1428887&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: cid=WW_128000000003097169_EN-US,WW_128000000002535069_EN-US,WW_128000000002144149_EN-US&chs=0&imp=0&chf=0&ds=228864&fs=81919&sc=7X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: 5pW2cEx6TUOkwRbp.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWwzJe?ver=9031 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWOVPV?ver=22fc HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWwPgW?ver=b6b3 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4xocL?ver=897f HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWPh04?ver=a482 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /download?plat=win HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=eAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A HTTP/1.1Host: dl-web.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWP8kk?ver=8c62 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4xocM?ver=8a5d HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWwSiV?ver=a3e6 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWwzKo?ver=215f HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RWP0UC?ver=2f44 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4Fies?ver=7654 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE4Fu2J?ver=29af HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /download?plat=win HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=eAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A HTTP/1.1Host: dl-web.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}

Source: unknown	HTTPS traffic detected: 162.125.248.18:443 -> 192.168.2.3:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.82.210.154:443 -> 192.168.2.3:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.82.210.154:443 -> 192.168.2.3:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.82.210.154:443 -> 192.168.2.3:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.3:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.3:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.3:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.3:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.3:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.3:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.67.82.211:443 -> 192.168.2.3:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.151:443 -> 192.168.2.3:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.3:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.3:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.13:443 -> 192.168.2.3:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.13:443 -> 192.168.2.3:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.13:443 -> 192.168.2.3:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.13:443 -> 192.168.2.3:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.3:50035 version: TLS 1.2

Source: DropboxInstaller (1).exe, 00000023.00000002.531384487.000000000082A000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: <HOOK MODULE="DDRAW.DLL" FUNCTION="DirectDrawCreateEx"/>

Source: C:\Windows\System32\svchost.exe

File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Jump to behavior

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_00033C83	35_2_00033C83
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_00039CD8	35_2_00039CD8
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_00038318	35_2_00038318
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_0003A581	35_2_0003A581
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_0003A98D	35_2_0003A98D
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_0003A1AD	35_2_0003A1AD
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_0003ADAD	35_2_0003ADAD
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_01343135	43_2_01343135
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_0134798C	43_2_0134798C
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_01343DEA	43_2_01343DEA
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_013439DE	43_2_013439DE
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_01344754	43_2_01344754
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_0134360A	43_2_0134360A
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_0134420A	43_2_0134420A

Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe

Code function: String function: 01344EA0 appears 36 times

Source: goopdateres_nl.dll.35.dr	Static PE information: Resource name: RT_STRING type: 370 XA sysV executable not stripped
Source: goopdateres_no.dll.35.dr	Static PE information: Resource name: RT_STRING type: DOS executable (COM, 0x8C-variant)
Source: goopdateres_sv.dll.35.dr	Static PE information: Resource name: RT_STRING type: iAPX 286 executable small model (COFF) not stripped
Source: goopdateres_da.dll.35.dr	Static PE information: Resource name: RT_STRING type: x86 executable not stripped

Source: Unconfirmed 998509.crdownload.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: Unconfirmed 361642.crdownload.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: Unconfirmed 384737.crdownload.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: Unconfirmed 238730.crdownload.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: DropboxUpdate.exe.35.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: DropboxCrashHandler.exe.35.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: DropboxUpdateBroker.exe.35.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: DropboxUpdateOnDemand.exe.35.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: goopdate.dll.35.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: DropboxUpdate.exe.43.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: de8171a1-8253-4ec4-bff4-0606b038fb48.tmp.1.dr

Static PE information: Data appended to the last section found

Source: de8171a1-8253-4ec4-bff4-0606b038fb48.tmp.1.dr

Static PE information: Section: .rsrc ZLIB complexity 0.999041904199

Source: C:\Windows\System32\svchost.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1904 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6208 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6220 /prefetch:8
Source: unknown	Process created: C:\Windows\System32\svchost.exe c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6192 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6244 /prefetch:8
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k NetworkService -p
Source: unknown	Process created: C:\Windows\System32\SgrmBroker.exe C:\Windows\system32\SgrmBroker.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3924 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3796 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3940 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3900 /prefetch:8
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=none --enable-audio-service-sandbox --mojo-platform-channel-handle=2200 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3300 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2264 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2204 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3376 /prefetch:8
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2172 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3544 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3900 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3992 /prefetch:8
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Windows Defender\MpCmdRun.exe "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Users\user\Downloads\DropboxInstaller (1).exe "C:\Users\user\Downloads\DropboxInstaller (1).exe"
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5712 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5784 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6628 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6640 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=none --enable-audio-service-sandbox --mojo-platform-channel-handle=4800 /prefetch:8
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Process created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5688 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=4296 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=1508 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=4280 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1904 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k NetworkService -p	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2264 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6208 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6220 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6192 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6244 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\System32\svchost.exe c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2264 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3924 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3796 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3940 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3900 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=none --enable-audio-service-sandbox --mojo-platform-channel-handle=2200 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3300 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2264 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2204 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3376 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2264 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2172 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3544 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3900 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3992 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Users\user\Downloads\DropboxInstaller (1).exe "C:\Users\user\Downloads\DropboxInstaller (1).exe"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5712 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5784 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6628 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6640 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=none --enable-audio-service-sandbox --mojo-platform-channel-handle=4800 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5688 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=4296 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=1508 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=4280 /prefetch:8	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Windows Defender\MpCmdRun.exe "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable	Jump to behavior
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Process created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ"	Jump to behavior

Source: C:\Windows\System32\svchost.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Family,VirtualizationFirmwareEnabled FROM Win32_Processor

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-62312A32-16F0.pma

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\36fe8ef6-9a87-4dc3-8eb1-92f7325bdaf1.tmp

Jump to behavior

Source: classification engine

Classification label: mal48.evad.win@98/168@20/15

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe

Code function: 35_2_00031E7F GetCurrentProcessId,CreateToolhelp32Snapshot,_memset,Process32FirstW,CloseHandle,Process32NextW,

35_2_00031E7F

Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\Dropbox{567EDB56-FF4F-4850-B1F4-992864DC7948}
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\Dropbox{6E8D9200-0F55-4328-A477-50D38A739277}
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Mutant created: \Sessions\1\BaseNamedObjects\_Dropbox_Update_logging_mutex_C:ProgramDataDropboxUpdateLogDropboxUpdate.log-2022-03-16-00-09-18-555-3588
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:4868:120:WilError_01

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe

Code function: 35_2_00031791 _memset,GetTempFileNameW,FindResourceW,FindResourceW,FindResourceW,LoadResource,LockResource,CreateFileW,SizeofResource,SetFilePointerEx,CloseHandle,

35_2_00031791

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe

Command line argument: DllEntry

43_2_013415D8

Source: C:\Windows\System32\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Source:	Binary string: goopdateres_unsigned_zh-TW.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, goopdateres_zh-TW.dll.35.dr
Source:	Binary string: goopdateres_unsigned_ms.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_ms.dll.35.dr
Source:	Binary string: mi_exe_stub.pdbT source: DropboxInstaller (1).exe, 00000023.00000000.465795476.000000000003D000.00000002.00000001.01000000.00000005.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmp, Unconfirmed 384737.crdownload.1.dr, Unconfirmed 238730.crdownload.1.dr, Unconfirmed 361642.crdownload.1.dr, de8171a1-8253-4ec4-bff4-0606b038fb48.tmp.1.dr, Unconfirmed 998509.crdownload.1.dr
Source:	Binary string: goopdateres_unsigned_ru.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_ru.dll.35.dr
Source:	Binary string: goopdateres_unsigned_it.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: goopdateres_unsigned_de.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_de.dll.35.dr
Source:	Binary string: goopdateres_unsigned_ja.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: goopdateres_unsigned_sv.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_sv.dll.35.dr
Source:	Binary string: goopdateres_unsigned_es.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_es.dll.35.dr
Source:	Binary string: goopdateres_unsigned_th.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_th.dll.35.dr
Source:	Binary string: goopdateres_unsigned_fr.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_fr.dll.35.dr
Source:	Binary string: goopdateres_unsigned_uk.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_uk.dll.35.dr
Source:	Binary string: DropboxUpdateOnDemand_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdateOnDemand.exe.35.dr
Source:	Binary string: goopdateres_unsigned_nl.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_nl.dll.35.dr
Source:	Binary string: goopdateres_unsigned_ko.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_ko.dll.35.dr
Source:	Binary string: DropboxUpdateBroker_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdateBroker.exe.35.dr
Source:	Binary string: DropboxUpdateOnDemand_unsigned.pdb`(pT source: DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdateOnDemand.exe.35.dr
Source:	Binary string: goopdateres_unsigned_no.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_no.dll.35.dr
Source:	Binary string: psmachine_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, psmachine.dll.35.dr
Source:	Binary string: DropboxUpdate_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmp, DropboxUpdate.exe, 0000002B.00000000.523031947.0000000001351000.00000002.00000001.01000000.00000006.sdmp, DropboxUpdate.exe.35.dr, DropboxUpdate.exe.43.dr, DropboxCrashHandler.exe.35.dr
Source:	Binary string: goopdateres_unsigned_pl.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: psuser_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, psuser.dll.35.dr
Source:	Binary string: goopdate_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.535950135.000000006E79C000.00000002.00000001.01000000.00000007.sdmp, goopdate.dll.35.dr
Source:	Binary string: goopdateres_unsigned_da.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_da.dll.35.dr
Source:	Binary string: goopdateres_unsigned_en.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, goopdateres_en.dll.35.dr
Source:	Binary string: goopdateres_unsigned_es-419.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_es-419.dll.35.dr
Source:	Binary string: npDropboxUpdate3_unsigned.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, npDropboxUpdate3.dll.35.dr
Source:	Binary string: mi_exe_stub.pdb source: DropboxInstaller (1).exe, 00000023.00000000.465795476.000000000003D000.00000002.00000001.01000000.00000005.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmp, Unconfirmed 384737.crdownload.1.dr, Unconfirmed 238730.crdownload.1.dr, Unconfirmed 361642.crdownload.1.dr, de8171a1-8253-4ec4-bff4-0606b038fb48.tmp.1.dr, Unconfirmed 998509.crdownload.1.dr
Source:	Binary string: goopdateres_unsigned_pt-BR.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_pt-BR.dll.35.dr
Source:	Binary string: goopdateres_unsigned_zh-CN.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_zh-CN.dll.35.dr
Source:	Binary string: goopdateres_unsigned_id.pdb source: DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, goopdateres_id.dll.35.dr
Source:	Binary string: DropboxUpdateBroker_unsigned.pdb`(pT source: DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdateBroker.exe.35.dr

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_00035F01 push ecx; ret	35_2_00035F14
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_0134B915 push ecx; ret	43_2_0134B928
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_01344EE5 push ecx; ret	43_2_01344EF8

Source: DropboxUpdate.exe.35.dr	Static PE information: section name: .text/DE
Source: DropboxCrashHandler.exe.35.dr	Static PE information: section name: .text/DE
Source: psmachine.dll.35.dr	Static PE information: section name: .orpc
Source: psuser.dll.35.dr	Static PE information: section name: .orpc
Source: DropboxUpdate.exe.43.dr	Static PE information: section name: .text/DE

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe

Code function: 35_2_00036A73 LoadLibraryA,GetProcAddress,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,

35_2_00036A73

Source: Unconfirmed 238730.crdownload.1.dr	Static PE information: real checksum: 0xa8a4a should be: 0xa8a0f
Source: de8171a1-8253-4ec4-bff4-0606b038fb48.tmp.1.dr	Static PE information: real checksum: 0xa8a4a should be: 0x88ef8
Source: Unconfirmed 361642.crdownload.1.dr	Static PE information: real checksum: 0xa8a4a should be: 0xa8a0f
Source: Unconfirmed 384737.crdownload.1.dr	Static PE information: real checksum: 0xa8a4a should be: 0xa8a0f
Source: Unconfirmed 998509.crdownload.1.dr	Static PE information: real checksum: 0xa8a4a should be: 0xa8a0f

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 998509.crdownload	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 361642.crdownload	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 384737.crdownload	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 238730.crdownload	Jump to dropped file

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_pl.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\psuser.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	File created: C:\Program Files (x86)\Dropbox\Update\1.3.541.1\DropboxUpdate.exe	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_id.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_no.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdate.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ko.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_sv.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_fr.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\DropboxInstaller (3).exe (copy)	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\DropboxInstaller (1).exe (copy)	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_es-419.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 238730.crdownload	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_en.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_pt-BR.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\de8171a1-8253-4ec4-bff4-0606b038fb48.tmp	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_uk.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 998509.crdownload	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\psmachine.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_de.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 361642.crdownload	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdateBroker.exe	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxCrashHandler.exe	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ms.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_da.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_zh-CN.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_th.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_es.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ru.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_it.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_zh-TW.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\npDropboxUpdate3.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_nl.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 384737.crdownload	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ja.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	File created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdateOnDemand.exe	Jump to dropped file

Malware Analysis System Evasion

Found evasive API chain checking for user administrative privileges

Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe

Check user administrative privileges: IsUserAndAdmin, DecisionNode

graph_43-7398

Source: C:\Windows\System32\svchost.exe TID: 1320

Thread sleep time: -30000s >= -30000s

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe

Code function: 35_2_00031E7F GetCurrentProcessId,CreateToolhelp32Snapshot,_memset,Process32FirstW,CloseHandle,Process32NextW,

35_2_00031E7F

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep	graph_35-5717
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Evasive API call chain: GetModuleFileName,DecisionNodes,ExitProcess	graph_35-6051
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep	graph_43-6708

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\psuser.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_pl.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_id.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_no.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ko.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_sv.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_fr.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_es-419.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_pt-BR.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_uk.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\psmachine.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_de.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdateBroker.exe	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxCrashHandler.exe	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_da.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ms.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_zh-CN.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_th.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ru.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_it.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_zh-TW.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\npDropboxUpdate3.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_nl.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ja.dll	Jump to dropped file
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdateOnDemand.exe	Jump to dropped file

Source: C:\Windows\System32\svchost.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Family,VirtualizationFirmwareEnabled FROM Win32_Processor

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Windows\System32\svchost.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT HypervisorPresent FROM Win32_ComputerSystem

Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe

API call chain: ExitProcess graph end node

graph_35-6053

Source: svchost.exe, 0000000D.00000002.534990046.000001FB1BC5F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: "@Hyper-V RAW
Source: svchost.exe, 0000000D.00000002.532299046.000001FB16629000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000D.00000002.534951762.000001FB1BC52000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: svchost.exe, 00000006.00000002.532780857.00000222C1629000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe

Code function: 35_2_000388DE IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

35_2_000388DE

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe

Code function: 35_2_00031E7F GetCurrentProcessId,CreateToolhelp32Snapshot,_memset,Process32FirstW,CloseHandle,Process32NextW,

35_2_00031E7F

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe

35_2_00036A73

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe

Code function: 35_2_0003CA4C GetProcessHeap,

35_2_0003CA4C

Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_00038A43 __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	35_2_00038A43
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_000388DE IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	35_2_000388DE
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_00034AF8 SetUnhandledExceptionFilter,	35_2_00034AF8
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: 35_2_0003634A _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	35_2_0003634A
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_0134497A _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	43_2_0134497A
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_0134656E SetUnhandledExceptionFilter,	43_2_0134656E
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_0134A800 __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,__amsg_exit,	43_2_0134A800
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: 43_2_01345ADA IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	43_2_01345ADA

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Process created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ"
Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Process created: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ"			Jump to behavior

Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe	Code function: GetLocaleInfoA,		35_2_0003BB1C
Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	Code function: GetLocaleInfoA,		43_2_0134AA75

Source: C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe

Code function: 35_2_000360AC GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

35_2_000360AC

Source: C:\Users\user\Downloads\DropboxInstaller (1).exe

Code function: 35_2_000311B9 _memset,GetVersionExW,

35_2_000311B9

Lowering of HIPS / PFW / Operating System Security Settings

Changes security center settings (notifications, updates, antivirus, firewall)

Source: C:\Windows\System32\svchost.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center cval

Jump to behavior

Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecNotificationQuery - ROOT\SecurityCenter : SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'AntiVirusProduct' OR TargetInstance ISA 'FirewallProduct' OR TargetInstance ISA 'AntiSpywareProduct'
Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::CreateInstanceEnum - ROOT\SecurityCenter2 : FirewallProduct
Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::CreateInstanceEnum - ROOT\SecurityCenter2 : AntiVirusProduct
Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::CreateInstanceEnum - ROOT\SecurityCenter2 : AntiSpywareProduct

Source: svchost.exe, 0000000C.00000002.531286374.000001ECDDC40000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: (@V%ProgramFiles%\Windows Defender\MsMpeng.exe
Source: svchost.exe, 0000000C.00000002.531307255.000001ECDDD02000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Files%\Windows Defender\MsMpeng.exe
Source: svchost.exe, 0000000C.00000002.531307255.000001ECDDD02000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	31 Windows Management Instrumentation	Path Interception	1 Process Injection	23 Masquerading	1 Input Capture	1 System Time Discovery	Remote Services	1 Input Capture	Exfiltration Over Other Network Medium	21 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	12 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Disable or Modify Tools	LSASS Memory	81 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	Exfiltration Over Bluetooth	1 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	12 Native API	Logon Script (Windows)	Logon Script (Windows)	4 Virtualization/Sandbox Evasion	Security Account Manager	4 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	3 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Process Injection	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	4 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 Account Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	2 Obfuscated Files or Information	Cached Domain Credentials	1 Remote System Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	1 Software Packing	DCSync	45 System Information Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading	0%	Virustotal		Browse
https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading	0%	Avira URL Cloud	safe

Dropped Files

Source	Detection	Scanner	Link
C:\Program Files (x86)\Dropbox\Update\1.3.541.1\DropboxUpdate.exe	0%	Virustotal	Browse
C:\Program Files (x86)\Dropbox\Update\1.3.541.1\DropboxUpdate.exe	0%	Metadefender	Browse
C:\Program Files (x86)\Dropbox\Update\1.3.541.1\DropboxUpdate.exe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxCrashHandler.exe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxCrashHandler.exe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdateBroker.exe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdateBroker.exe	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://crl3.digi	0%	URL Reputation	safe
http://edgedl.me.gvt0	0%	Avira URL Cloud	safe
https://dns.google	0%	URL Reputation	safe
http://crl.ver)	0%	Avira URL Cloud	safe
https://dynamic.t	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
gstaticadssl.l.google.com	216.58.215.227	true	false	high
consent.dropbox.com	65.9.96.54	true	false	high
accounts.google.com	142.250.203.109	true	false	high
edge-block-www-env.dropbox-dns.com	162.125.65.15	true	false	unknown
dropbox.com	162.125.248.18	true	false	high
www-env.dropbox-dns.com	162.125.65.18	true	false	unknown
client-env.dropbox-dns.com	162.125.65.13	true	false	unknown
privacycollector-prod-evidon-1122372851.us-east-1.elb.amazonaws.com	3.210.49.210	true	false	high
clients.l.google.com	216.58.215.238	true	false	high
googlehosted.l.googleusercontent.com	172.217.168.33	true	false	high
clients2.googleusercontent.com	unknown	unknown	false	high
c.evidon.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
client.dropbox.com	unknown	unknown	false	high
dl-web.dropbox.com	unknown	unknown	false	high
l.evidon.com	unknown	unknown	false	high
www.dropbox.com	unknown	unknown	false	high
cfl.dropboxstatic.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.dropbox.com/ccpa_iframe	false	high
https://dropbox.com/hstsping	false	high
https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.com	false	high
https://l.evidon.com/site/v3/3401/59514/1/3/2/2/104138?consent=1&regulationid=0&regulationconsenttypeid=1	false	high
https://www.dropbox.com/log/ux_analytics	false	high
https://l.evidon.com/site/v3/3401/59514/1/4/2/2/104138?consent=0&regulationid=0&regulationconsenttypeid=1	false	high
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx	false	high
https://www.dropbox.com/2/client_metrics/record	false	high
https://l.evidon.com/site/v3/3401/59514/1/1/2/2/104138?consent=0&regulationid=0&regulationconsenttypeid=1	false	high
https://www.dropbox.com/2/megaphone_chat/get_best_chat_campaigns	false	high
https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading	false	high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false	high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false	high
https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.com	false	high
https://www.dropbox.com/log_js_sw_data	false	high
https://l.evidon.com/site/v3/3401/59514/1/11/2/2/104138?consent=0&regulationid=0&regulationconsenttypeid=1	false	high
https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e	false	high
https://www.dropbox.com/alternate_wtl_browser_performance_info	false	high
https://www.dropbox.com/alternate_wtl	false	high
https://www.dropbox.com/download?plat=win	false	high
https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://dev.ditu.live.com/REST/v1/Routes/	svchost.exe, 00000009.00000002.337901462.000002641C84E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/REST/v1/Routes/Driving	svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/images/cleardot.gif	craw_window.js.1.dr	false		high
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx	svchost.exe, 00000009.00000002.337901462.000002641C84E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.ditu.live.com/REST/v1/Traffic/Incidents/	svchost.exe, 00000009.00000002.337932816.000002641C85C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_p	DropboxInstaller (3).exe_Zone.Identifier.42.dr	false		high
https://play.google.com	e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	false		high
https://t0.tiles.ditu.live.com/tiles/gen	svchost.exe, 00000009.00000002.337815965.000002641C846000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336005332.000002641C83F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/REST/v1/Routes/Walking	svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dl-debug.dropbox.com/send_update_manager_traceCheckDelay	DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.535950135.000000006E79C000.00000002.00000001.01000000.00000007.sdmp, goopdate.dll.35.dr	false		high
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=	svchost.exe, 00000009.00000002.337922021.000002641C853000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336585771.000002641C851000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.dropbox.com/robots.txthttps://www.dropbox.com/robots.txthttp://www.dropbox.com/intl/en_AL	DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.535950135.000000006E79C000.00000002.00000001.01000000.00000007.sdmp, goopdate.dll.35.dr	false		high
https://sandbox.google.com/payments/v4/js/integrator.js	manifest.json0.1.dr, craw_window.js.1.dr	false		high
http://crl3.digi	DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e2	History Provider Cache.1.dr	false		high
https://www.dropbox.com/	DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (3).exe_Zone.Identifier.42.dr	false		high
https://accounts.google.com/MergeSession	craw_window.js.1.dr	false		high
https://dev.ditu.live.com/mapcontrol/logging.ashx	svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/	svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com	e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	false		high
http://edgedl.me.gvt0	svchost.exe, 0000000D.00000003.446564559.000001FB1BD06000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000D.00000003.446463864.000001FB1BD02000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://dev.virtualearth.net/REST/v1/Transit/Schedules/	svchost.exe, 00000009.00000002.337922021.000002641C853000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336585771.000002641C851000.00000004.00000020.00020000.00000000.sdmp	false		high
https://accounts.google.com	e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	false		high
https://apis.google.com	e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	false		high
https://www.google.com/accounts/OAuthLogin?issueuberauth=1	craw_window.js.1.dr	false		high
http://www.bingmapsportal.com	svchost.exe, 00000009.00000002.337692787.000002641C813000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www-googleapis-staging.sandbox.google.com	craw_background.js.1.dr, craw_window.js.1.dr	false		high
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/	svchost.exe, 00000009.00000002.337901462.000002641C84E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://clients2.google.com	e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	false		high
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx	svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading2	History Provider Cache.1.dr	false		high
https://dns.google	a35f1be9-0273-49cb-9f7c-f8f26ec6888e.tmp.3.dr, e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, 8158790d-66e5-442e-a139-94c1179da69c.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	false	URL Reputation: safe	unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	craw_background.js.1.dr, craw_window.js.1.dr	false		high
https://www.google.com/intl/en-US/chrome/blank.html	craw_background.js.1.dr	false		high
https://ogs.google.com	e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	false		high
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=	svchost.exe, 00000009.00000003.336483004.000002641C856000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.ditu.live.com/REST/v1/Transit/Stops/	svchost.exe, 00000009.00000002.337968293.000002641C86A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.333659453.000002641C867000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/REST/v1/Routes/	svchost.exe, 00000009.00000002.337901462.000002641C84E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://payments.google.com/payments/v4/js/integrator.js	manifest.json0.1.dr, craw_window.js.1.dr	false		high
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git	pnacl_public_x86_64_libcrt_platform_a.1.dr	false		high
http://crl.ver)	svchost.exe, 0000000D.00000002.534990046.000001FB1BC5F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?	svchost.exe, 00000009.00000002.337932816.000002641C85C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336585771.000002641C851000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=	svchost.exe, 00000009.00000002.337901462.000002641C84E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000002.337692787.000002641C813000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/images/x2.gif	craw_window.js.1.dr	false		high
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=	svchost.exe, 00000009.00000002.337815965.000002641C846000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336005332.000002641C83F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/REST/v1/Locations	svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/mapcontrol/logging.ashx	svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	false		high
http://llvm.org/):	pnacl_public_x86_64_pnacl_sz_nexe.1.dr	false		high
https://www.google.com/images/dot2.gif	craw_window.js.1.dr	false		high
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=	svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/	svchost.exe, 00000009.00000002.337932816.000002641C85C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://code.google.com/p/nativeclient/issues/entry%s:	pnacl_public_x86_64_ld_nexe.1.dr	false		high
https://dynamic.t	svchost.exe, 00000009.00000002.337951427.000002641C865000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336585771.000002641C851000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://code.google.com/p/nativeclient/issues/entry	pnacl_public_x86_64_ld_nexe.1.dr	false		high
https://dev.virtualearth.net/REST/v1/Routes/Transit	svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	false		high
https://client.dropbox.com/client/updates/pingshttps://client.dropbox.com/client/updates/serviceNetC	DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, npDropboxUpdate3.dll.35.dr	false		high
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen	svchost.exe, 00000009.00000002.337789797.000002641C83D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.dropbox.com/0	DropboxInstaller (1).exe, 00000023.00000003.470561503.0000000002651000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470665321.00000000026F5000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000003.470597923.0000000002696000.00000004.00000800.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531326674.00000000004BF000.00000004.00000010.00020000.00000000.sdmp, DropboxInstaller (1).exe, 00000023.00000002.531348752.00000000004F2000.00000004.00000010.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000003.529258372.000000000129F000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534482352.00000000047E0000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531601414.000000000128C000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.533697047.0000000002DB0000.00000002.00000001.00040000.0000000A.sdmp, DropboxUpdate.exe, 0000002B.00000003.529467059.0000000001265000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.534503167.0000000004930000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.531945599.00000000012AB000.00000004.00000020.00020000.00000000.sdmp, DropboxUpdateHelper.msi.35.dr, goopdateres_uk.dll.35.dr, npDropboxUpdate3.dll.35.dr, DropboxUpdate.exe.35.dr, Unconfirmed 384737.crdownload.1.dr, psuser.dll.35.dr, DropboxUpdateBroker.exe.35.dr, goopdateres_id.dll.35.dr	false		high
https://clients2.googleusercontent.com	e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp.3.dr, f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp.3.dr	false		high
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=	svchost.exe, 00000009.00000002.337932816.000002641C85C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://client.dropbox.com/client/updates/crashesGOOGLE_UPDATE_NO_CRASH_HANDLERClientCustomDatalang	DropboxInstaller (1).exe, 00000023.00000003.468533927.0000000002500000.00000004.00000800.00020000.00000000.sdmp, DropboxUpdate.exe, 0000002B.00000002.535950135.000000006E79C000.00000002.00000001.01000000.00000007.sdmp, goopdate.dll.35.dr	false		high
https://dev.ditu.live.com/REST/v1/Locations	svchost.exe, 00000009.00000003.335892743.000002641C860000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/	manifest.json0.1.dr	false		high
https://chromium.googlesource.com/a/native_client/pnacl-clang.git	pnacl_public_x86_64_libcrt_platform_a.1.dr	false		high
https://clients2.google.com/service/update2/crx	manifest.json0.1.dr, manifest.json.1.dr	false		high
https://dev.ditu.live.com/REST/v1/JsonFilter/VenueMaps/data/	svchost.exe, 00000009.00000002.337932816.000002641C85C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=	svchost.exe, 00000009.00000003.336183008.000002641C85A000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.125.65.15	edge-block-www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
162.125.65.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
216.58.215.238	clients.l.google.com	United States	15169	GOOGLEUS	false
216.58.215.227	gstaticadssl.l.google.com	United States	15169	GOOGLEUS	false
162.125.248.18	dropbox.com	United States	19679	DROPBOXUS	false
65.9.96.54	consent.dropbox.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.168.33	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
3.210.49.210	privacycollector-prod-evidon-1122372851.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.203.109	accounts.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.1
192.168.2.4
192.168.2.3
192.168.2.5
127.0.0.1

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	589678
Start date and time:	2022-03-15 16:06:04 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 11m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	49
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.evad.win@98/168@20/15
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 99.8% (good quality ratio 95.4%) Quality average: 83.8% Quality standard deviation: 25.8%
HCA Information:	Successful, ratio: 100% Number of executed functions: 31 Number of non-executed functions: 31
Cookbook Comments:	Adjust boot time Enable AMSI

Warnings

Exclude process from analysis (whitelisted): BackgroundTransferHost.exe, HxTsr.exe, RuntimeBroker.exe, backgroundTaskHost.exe
Excluded IPs from analysis (whitelisted): 23.211.6.115, 142.250.203.110, 142.250.203.99, 74.125.100.168, 34.104.35.123, 104.16.99.29, 104.16.100.29, 172.217.168.10, 23.50.105.57, 69.192.160.56, 173.222.108.210, 20.54.89.106, 40.125.122.176, 20.54.110.249, 52.242.101.226
Excluded domains from analysis (whitelisted): store-images.s-microsoft.com-c.edgekey.net, clientservices.googleapis.com, r2---sn-5hnedn7s.gvt1.com, cfl.dropboxstatic.com.cdn.cloudflare.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, arc.msn.com, wildcard.evidon.com.edgekey.net, e12564.dspb.akamaiedge.net, redirector.gvt1.com, consumer-displaycatalogrp-aks2aks-europe.md.mp.microsoft.com.akadns.net, update.googleapis.com, sls.update.microsoft.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, www.gstatic.com, prod.fs.microsoft.com.akadns.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, e12841.d.akamaiedge.net, fonts.gstatic.com, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, neu-displaycatalogrp.frontdoor.bigcatalog.commerce.microsoft.com, ctldl.windowsupdate.com, e1723.g.akamaiedge.net, r2.sn-5hnedn7s.gvt1.com, edgedl.me.gvt1.com, store-images.s-micro
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Report size getting too big, too many NtWriteFile calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
17:07:46	API Interceptor	2x Sleep call for process: svchost.exe modified
17:08:42	API Interceptor	1x Sleep call for process: MpCmdRun.exe modified
17:09:22	Task Scheduler	Run new task: DropboxUpdateTaskMachineCore path: C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe s>/c
17:09:22	Task Scheduler	Run new task: DropboxUpdateTaskMachineUA path: C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe s>/ua /installsource scheduler

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Program Files (x86)\Dropbox\Update\1.3.541.1\DropboxUpdate.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	130320
Entropy (8bit):	5.912334440798352
Encrypted:	false
SSDEEP:	3072:SvZOOxLE4GTnQcyL2QltfWLgo/iE+DiV7X5pbwmjNBOfoXcz:SwOxLEbTQXLz
MD5:	8AD76E0B347BB690697535CE95B1C656
SHA1:	10D2622A3965D21215A953ED924D01788A9805ED
SHA-256:	7655221B493047C61285E1DE78807D0584920B0D14D150E2487DA9728B1926F3
SHA-512:	35FBDA7F05865B3A50454DBA5BA3738EB8A5FD6D2EEA5E9415D8D517811D51C50CCA6C7B47A5B19F1FF1F4101567137FE18805F4F740289456DA1FF2AF682504
Malicious:	false
Antivirus:	Antivirus: Virustotal, Detection: 0%, Browse Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......t...0..0..0..9.g.#..9.q.Y..9.v......v.3......7..0..J..9.x.2....f.1..0.e.'..9.c.1..Rich0..................PE..L...$/[a.....................,.......N............@..........................0............@.................................l9..P....P..(............................................................-..@...............d....7.......................text...m........................... ..`.data....-..........................@....text/DE\1.......2..................@..@.rsrc...(....P......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	451603
Entropy (8bit):	5.009711072558331
Encrypted:	false
SSDEEP:	12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ
MD5:	A78AD14E77147E7DE3647E61964C0335
SHA1:	CECC3DD41F4CEA0192B24300C71E1911BD4FCE45
SHA-256:	0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
SHA-512:	DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101
Malicious:	false
Reputation:	low
Preview:	BDic.... ....6...."..Z..4g....6.2...{/...3...5....AF 1363.AF nm.AF pt.AF n1.AF p.AF tc.AF SM.AF M.AF S.AF MS.AF MNR.AF GDS.AF MNT.AF MH.AF MR.AF SZMR.AF MJ.AF MT.AF MY.AF MRZ.AF MN.AF MG.AF RM.AF N.AF MV.AF XM.AF DSM.AF SD.AF G.AF R.AF MNX.AF MRS.AF MD.AF MNRB.AF B.AF ZSMR.AF PM.AF SMNGJ.AF SMN.AF ZMR.AF SMGB.AF MZR.AF GM.AF SMR.AF SMDG.AF RMZ.AF ZM.AF MDG.AF MDT.AF SMNXT.AF SDY.AF LSDG.AF LGDS.AF GLDS.AF UY.AF U.AF DSGNX.AF GNDSX.AF DSG.AF Y.AF GS.AF IEMS.AF YP.AF ZGDRS.AF XGNVDS.AF UT.AF GNDS.AF GVDS.AF MYPS.AF XGNDS.AF TPRY.AF MDSG.AF ZGSDR.AF DYSG.AF PMYTNS.AF AGDS.AF DRZGS.AF PY.AF GSPMDY.AF EGVDS.AF SL.AF GNXDS.AF DSBG.AF IM.AF I.AF MDGS.AF SMY.AF DSGN.AF DSLG.AF GMDS.AF MDSBG.AF SGD.AF IY.AF P.AF DSMG.AF BLZGDRS.AF TR.AF AGSD.AF ZGBDRSL.AF PTRY.AF ASDGV.AF ASM.AF ICANGSD.AF ICAM.AF IKY.AF AMS.AF PMYTRS.AF BZGVDRS.AF SDRBZG.AF GVMDS.AF PSM.AF DGLS.AF GNVXDS.AF AGDSL.AF DGS.AF XDSGNV.AF BZGDRS.AF AM.AF AS.AF A.AF LDSG.AF AGVDS.AF SDG.AF LDSMG.AF EDSMG.AF EY.AF DRSMZG.AF PRYT.AF LZ

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0xde92a246, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	786432
Entropy (8bit):	0.25057338612365876
Encrypted:	false
SSDEEP:	384:s+W0StseCJ48EApW0StseCJ48E2rTSjlK/ebmLerYSRSY1J2:zSB2nSB2RSjlK/+mLesOj1J2
MD5:	56A5129B7243B54E5488D2E884ABFC19
SHA1:	34815265433D6E166020EA8226B16E3D0F378ED8
SHA-256:	8CB2F762AF48EAF413627CF7A53759404B688878FB1EC4F6B83B9AEFB9E0D58A
SHA-512:	721EB633D20DCEB45D9F611C01D1BC43ACA51D8E73DE2A84C554C796C569EC4AD1F8E84A4E6D1C7958441A9966D0FB2A1434C40BD47E85FC192186F1F0343206
Malicious:	false
Reputation:	low
Preview:	..F... ................e.f.3...w........................&..........w.......z..h.(..............................3...w...........................................................................................................B...........@...................................................................................................... ........3...w........................................................................................................................................................................................................................................a......z.}................o.z......z..........................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\22425499-ab09-4fb3-a093-70eb4a853927.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	190513
Entropy (8bit):	6.0451772713522605
Encrypted:	false
SSDEEP:	3072:ckbxcacr8TVQwplPcYBTbIZ5Hgiss8GP4FcbXafIB0u1GOJmA3iuR9:ckdcacrKnPBTczHgXaqfIlUOoSiuR9
MD5:	C9A6C641A30D91278A1DB398FF7B3128
SHA1:	86B9BEAA87EA5E0B9B60E63014C9AC9FCF515A59
SHA-256:	E868C11769B129BE18BA442DA7B34FE18E021EEA0B62C4FB6BC821374C4107F9
SHA-512:	77ED38BC4FA2D6F736FDA221B51955DB5B8AB93F2BD01362C7989A92D88149A75FA0EEFD7D56F7B5E66EE103B8ED0445B5621E250AD5B3EBFC19F5C42F438374
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.647389238945292e+12,"network":1.64736044e+12,"ticks":125903756.0,"uncertainty":4679548.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13291230639260917"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\user\AppData\Local\Google\Chrome\User Data\26920145-1d84-4d96-b09c-9b7cd6b38769.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	190513
Entropy (8bit):	6.045178004980999
Encrypted:	false
SSDEEP:	3072:Jkbxcacr8TVQwplPcYBTbIZ5Hgiss8GP4FcbXafIB0u1GOJmA3iuR9:JkdcacrKnPBTczHgXaqfIlUOoSiuR9
MD5:	3DD4CBBF0532BFD53FF9339B570AA021
SHA1:	BFECA3CD99ADDD60C0E91D9C761DAB8989038579
SHA-256:	7098830CDD2C0173986784A13B254DEBC660A963E35C3297FD032CD23FFB2790
SHA-512:	01FF77FE153BB38E78345E9B05E06F5AF111F196F7CD6025BB249D6CD7A500D10F74CCEA2FE4B48FF11ACA3ECFAB6633865D64EDB060A2C3C3DC7FA19E3768FA
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.647389238945292e+12,"network":1.64736044e+12,"ticks":125903756.0,"uncertainty":4679548.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13291230639260917"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\user\AppData\Local\Google\Chrome\User Data\350346af-c6f4-4134-a5db-a374fbb70df0.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	198986
Entropy (8bit):	6.074167795793608
Encrypted:	false
SSDEEP:	3072:QhZkbxcacr8TVQwplPcYBTbIZ5Hgiss8GP4FcbXafIB0u1GOJmA3iuR9:eZkdcacrKnPBTczHgXaqfIlUOoSiuR9
MD5:	45373943A357EEB35351FAD5ECB4F835
SHA1:	A4E0D3CEF67517FB71926C930FD4D52E5102C411
SHA-256:	4D41B5EDBF57DE287E6C388BAB2F762802EB68CE6B065CE8364BFE89E0F231F2
SHA-512:	1203A569E4CB316ABD420533CCEE6DD399312B6BAA16F5A23D12AADAE8217DF88716AA6E977A441D4937B7140BBFF203AA06ECBB7E71FAFFACDB3835C68305FD
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.647389238945292e+12,"network":1.64736044e+12,"ticks":125903756.0,"uncertainty":4679548.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016607996"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\user\AppData\Local\Google\Chrome\User Data\37cf7758-b7ec-4082-b14a-77ab87beec42.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	198986
Entropy (8bit):	6.074168419672354
Encrypted:	false
SSDEEP:	3072:QIWkbxcacr8TVQwplPcYBTbIZ5Hgiss8GP4FcbXafIB0u1GOJmA3iuR9:PWkdcacrKnPBTczHgXaqfIlUOoSiuR9
MD5:	3106C838462BA10CD443E91823A0CAC8
SHA1:	CCE3595D533C503554AA56741C0D5F43B4AA6761
SHA-256:	1DAB286EC6EBFE4F2312B06D644F522A9DFC62E78AB4C4E4A82E053E2823043F
SHA-512:	214770A6E84232D5BA3F5A7CAC44F80405E187CAFE8C704A48A650A584C36ECF1C3125A036C8750EC7B24B74F6242B01C31F75BC378459785AF88A84F2EB4075
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.647389238945292e+12,"network":1.64736044e+12,"ticks":125903756.0,"uncertainty":4679548.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016607996"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\user\AppData\Local\Google\Chrome\User Data\3bf99f51-d396-4ac8-9210-0741faccf0ba.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	113048
Entropy (8bit):	3.7504222268727334
Encrypted:	false
SSDEEP:	384:u78hNJ3wiSXeAvfV8ixENBrKvlf3mpn+HL46GxK1rgEh+YBuxP2mvTeX9rj7yrg9:IRyqN19l1CsengE3XkkCnufKSjpfS
MD5:	6C957B90B8E0A3964CFA0325B90A8E6E
SHA1:	3363384CBAB15D0FBCCD50EDA83925EE5C8D5F85
SHA-256:	E92FDE7700CCFEB75E40F6E26659391A3009BCC6D64D14ACA06DEBDC4C3F1CD0
SHA-512:	D77B68F6DDC78DF27997EF767A5FB294D7B0AA6655C96015DAAA91C6EFEE0C1E553E7C6B21552D94EFD21A51686F2F774F84925C99147D1440948EF836F5DDB1
Malicious:	false
Reputation:	low
Preview:	...................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....V8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\60216e20-a499-4cee-9b1b-5317638571f1.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	190513
Entropy (8bit):	6.045178004980999
Encrypted:	false
SSDEEP:	3072:Jkbxcacr8TVQwplPcYBTbIZ5Hgiss8GP4FcbXafIB0u1GOJmA3iuR9:JkdcacrKnPBTczHgXaqfIlUOoSiuR9
MD5:	3DD4CBBF0532BFD53FF9339B570AA021
SHA1:	BFECA3CD99ADDD60C0E91D9C761DAB8989038579
SHA-256:	7098830CDD2C0173986784A13B254DEBC660A963E35C3297FD032CD23FFB2790
SHA-512:	01FF77FE153BB38E78345E9B05E06F5AF111F196F7CD6025BB249D6CD7A500D10F74CCEA2FE4B48FF11ACA3ECFAB6633865D64EDB060A2C3C3DC7FA19E3768FA
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.647389238945292e+12,"network":1.64736044e+12,"ticks":125903756.0,"uncertainty":4679548.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13291230639260917"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\user\AppData\Local\Google\Chrome\User Data\6d24d896-99bd-41ce-a97a-1bb1b074cdeb.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	198986
Entropy (8bit):	6.074166541577627
Encrypted:	false
SSDEEP:	3072:WhZkbxcacr8TVQwplPcYBTbIZ5Hgiss8GP4FcbXafIB0u1GOJmA3iuR9:8ZkdcacrKnPBTczHgXaqfIlUOoSiuR9
MD5:	CE8BC2E5776F2FE265184B58ED7ED4C1
SHA1:	A27875162F85B11A35ADF59DE117390399946BF0
SHA-256:	CB3348B4A3058C96E784D34DB2263DC918282C69C79818734A28E0183894E6C4
SHA-512:	C7B136FB691AE05725D4E36DA368E3E5A4AFCBF7DD864B5F7F18E86BEA726C4C0A4B7A42BEF239C2A0192E22A4FA359667D04CF003C782115F4ECB17FA886CBE
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.647389238945292e+12,"network":1.64736044e+12,"ticks":125903756.0,"uncertainty":4679548.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13291230639260917"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	3.254162526001658
Encrypted:	false
SSDEEP:	3:FkXft0xE1n:+ftIE1n
MD5:	BD4642AD6C750A12D912B20BCB92E14D
SHA1:	C549F0F48FDD4FBC62E51AC26D7E185160CE2123
SHA-256:	4FD71FE78DFE203137C89C9FB0734358FF432F2BC83338112DC7B830F9B30F2C
SHA-512:	04410D12EF327614C3AF1251C9906BFEB2977211A7F53CBB08A8C01F9465A382CD001E51AB936A0D196D359F1DECDDAEAF5E7D1DBD49CE5F4FF91BF5C332B6CF
Malicious:	false
Reputation:	low
Preview:	sdPC....................s}.....M..2.!..%

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\000001.dbtmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\000002.dbtmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Xv:1qIF/
MD5:	206702161F94C5CD39FADD03F4014D98
SHA1:	BD8BFC144FB5326D21BD1531523D9FB50E1B600A
SHA-256:	1005A525006F148C86EFCBFB36C6EAC091B311532448010F70F7DE9A68007167
SHA-512:	0AF09F26941B11991C750D1A2B525C39A8970900E98CBA96FD1B55DBF93FEE79E18B8AAB258F48B4F7BDA40D059629BC7770D84371235CDB1352A4F17F80E145
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000002.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\06f4a26a-8f04-4ed0-9690-6f1747457442.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	19603
Entropy (8bit):	5.56003158041974
Encrypted:	false
SSDEEP:	384:jfVtdLl3wXg1kXqKf/pUZNCgVLH2HfDRrUzHGikzMAwJ45:RLlqg1kXqKf/pUZNCgVLH2HfFrUTGik7
MD5:	261B54D542FD0271FEDB5DBEB4B75B78
SHA1:	B322BBD76118EB2BAB8C27489A5ACEBB864A97BA
SHA-256:	597A24A50AA4E5EFAB7C4BCC755D4046F1F10E7F1CE9FBA5095CB9B6779ADB47
SHA-512:	AE96DA7550243B79F7253A28BFFCB61E25BC007E1A83684E9252B790CE24B21F9F323901D9EA858089C7567A01ED9B4C161EA0FD0E528FC1FAA53EA7C7DF264D
Malicious:	false
Reputation:	low
Preview:	{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13291862836228529","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0a05326a-ee22-4f37-bbca-c4f550011321.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	modified
Size (bytes):	19604
Entropy (8bit):	5.560081627918094
Encrypted:	false
SSDEEP:	384:jfVtdLl3wXg1kXqKf/pUZNCgVLH2HfDRrUzHGzkzMAdJ4a:RLlqg1kXqKf/pUZNCgVLH2HfFrUTGzkZ
MD5:	03F65AB34DC25AAE1834E511D7062947
SHA1:	E073454DD7A4F60C6E5F6F8A6C7E511EE824C3AC
SHA-256:	C213DCA24B11E424389BA10BA925F2FB33E5F9B5519E1A89F1A6CCFA0A6DD92A
SHA-512:	4899A257AB6A12FB802D366B115253E9DB2B1221E828F4B182F3C8D77C1786FC15F919581F58BC1EE4C61285D33A2A093F1D06FA5F9828274553DD2E6D8CE11F
Malicious:	false
Reputation:	low
Preview:	{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13291862836228529","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0fb85146-b940-4b72-88f5-f8cd8c97785e.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2fcee894-aa6e-49ea-af7b-fcabd6c461ec.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5141
Entropy (8bit):	4.987990014307776
Encrypted:	false
SSDEEP:	96:n3CgWV9pcKIK0ok0JCKL8NkuS1YbOTQVuwn:n3Cx9pc0j4KUkZY
MD5:	538405B3780594A8FFA7BDE2B8741876
SHA1:	418A6B2626B0794EFA27A315C17FAD94FFDA1A1C
SHA-256:	110E92B863C0BF3337DD717A3D5160726F926911A67309948C1272C6826103D0
SHA-512:	35E974FC3924B9EC9F4EB8C72EF5638DCD9FCA0A0649696A12D66885A016B86190D20FB463169BAB11745250082F81DACDB818DCA9D9E1875D1517FE3448404C
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13291862837084384","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\530dc9fa-564f-4f57-9ab0-5711d8430d14.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5167
Entropy (8bit):	4.994419489920041
Encrypted:	false
SSDEEP:	96:n3CgoV9pcKIK0ok0JCKL8Kk6MHfbOTQVuwn:n3C99pc0j4KLk6Q
MD5:	D3202CC815038AF3412701DF27691ABA
SHA1:	B7A9EC0515C8D077767CE7525FA96F288A1BEC42
SHA-256:	4A7E84EBC18B2041BB729A22C7D8ABD276989B38B1F0B82EA74F4D6529955580
SHA-512:	73C514FE8A282875A63C933365021D1EB914A4AEF1F63F6E519B239FAB5DACBD1264ACFD4AB403F819671567BB9978154FD0D92C6AC45EA352926566D8B46461
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13291862837084384","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\838149bb-36c8-4ca2-a66b-f4e8f9b41bf8.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	17340
Entropy (8bit):	5.570369666534106
Encrypted:	false
SSDEEP:	384:jfVtMLl3wXg1kXqKf/pUZNCgVLH2HfDRrUPMA5J4rf:YLlqg1kXqKf/pUZNCgVLH2HfFrUZJcf
MD5:	CB485904FAF64BC02D3F564677943455
SHA1:	AD22524A2A88C4A19E678C780C91048D5C41DB05
SHA-256:	C6E684AD195A3B24303F0E56E50B8BC6C300ECE48DF6D9E2E6D6CA14C1311E97
SHA-512:	1E1BB4F19855AB78429708B6390F518292A9ABAA7433AFD3AA51FA56C4A294C4DBC63A07C272310314AE822981BF504E1DD383A9DA2D40986CDFC3614D604210
Malicious:	false
Reputation:	low
Preview:	{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13291862836228529","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8ee8b2c3-1896-40a8-b024-1c92f7e220b0.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	17514
Entropy (8bit):	5.573157219832323
Encrypted:	false
SSDEEP:	384:jfVtdLl3wXg1kXqKf/pUZNCgVLH2HfDRrUckzMAtCJ4Lut:RLlqg1kXqKf/pUZNCgVLH2HfFrUck4J1
MD5:	E61FAEB0F32F51DABD55D635C84364D5
SHA1:	F213171293F54EFBE603224E1DF8EBC4C7B8D876
SHA-256:	E4B22F4184CAA196489B6157B5A842FD5F6B5A0C868CA344FCF68B0AC4C78D6B
SHA-512:	1533C4826757CE93655779FFFDEBA3102BCC30F79FBC3F36F842D9723D590650EE5BE741A28BF07AF2CF2C7B697436E7F8170EBFAD041B1F2C075EB51AE7F71B
Malicious:	false
Reputation:	low
Preview:	{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13291862836228529","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8fc76a96-7398-4890-a158-b2e7c15a5773.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5167
Entropy (8bit):	4.994419489920041
Encrypted:	false
SSDEEP:	96:n3CgoV9pcKIK0ok0JCKL8Kk6MHfbOTQVuwn:n3C99pc0j4KLk6Q
MD5:	D3202CC815038AF3412701DF27691ABA
SHA1:	B7A9EC0515C8D077767CE7525FA96F288A1BEC42
SHA-256:	4A7E84EBC18B2041BB729A22C7D8ABD276989B38B1F0B82EA74F4D6529955580
SHA-512:	73C514FE8A282875A63C933365021D1EB914A4AEF1F63F6E519B239FAB5DACBD1264ACFD4AB403F819671567BB9978154FD0D92C6AC45EA352926566D8B46461
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13291862837084384","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\CURRENT (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Xv:1qIF/
MD5:	206702161F94C5CD39FADD03F4014D98
SHA1:	BD8BFC144FB5326D21BD1531523D9FB50E1B600A
SHA-256:	1005A525006F148C86EFCBFB36C6EAC091B311532448010F70F7DE9A68007167
SHA-512:	0AF09F26941B11991C750D1A2B525C39A8970900E98CBA96FD1B55DBF93FEE79E18B8AAB258F48B4F7BDA40D059629BC7770D84371235CDB1352A4F17F80E145
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000002.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	11217
Entropy (8bit):	6.069602775336632
Encrypted:	false
SSDEEP:	192:GbylJnlTwGB7V9Hne4qasKxXItmLG48gcLg/PkI:Gb+nldByaFx4toj8VEPT
MD5:	90F880064A42B29CCFF51FE5425BF1A3
SHA1:	6A3CAE3996E9FFF653A1DDF731CED32B2BE2ACBF
SHA-256:	965203D541E442C107DBC6D5B395168123D0397559774BEAE4E5B9ABC44EF268
SHA-512:	D9CBFCD865356F19A57954F8FD952CAF3D31B354112766C41892D1EF40BD2533682D4EC3F4DA0E59A5397364F67A484B45091BA94E6C69ED18AB681403DFD3F3
Malicious:	false
Reputation:	low
Preview:	{"file_hashes":[{"block_hashes":["A+1PYW3V6CJbBuQ7aqrgYhyH3bT8PKyBXp3hN2slpI0=","WSOpQRkYTHjPSlG9Zif2a7TNhy43NDcG1Zg5Nv0UbH0=","jDctR8ImG5KZrQKm4kDjUB7FokSJfjo/pmvFowRVlaY=","LPxhhJiuU0lprt0T6flpS7TkaDg7MocrbmzO65xH6RI=","nZ9zLb2By96AkKXALRM+C0Eu11XUjPiMXEKjiCPdtHE=","wifibc1QfMBN2jrtUtLgsCefvuceTpAatmLvul11RJA=","dHjWlSIIdjj7MWqg3T8MG58RuuqRXk32vqi/13JqEgA=","zd3DV7dbvfNvx1hdhU01fW5ily52DLN0CFL/ADaEeTI=","DpjXcO85FFFY9KJFPkGNfFUtdQIOsGwO5jUckiUwY14=","gqid6l1+mk/6yWgUECRofI9lMipXgXh2jEN2+CxmPE0=","prDB91X2Mmfg/M/txVMITWBmEGbOGjqBTP7CMjYqdHs=","yLPAqV4gqoyS/zFkEt3Cn2j0q2v9QOSthVFfWn8EzCM=","EPQ3jzdrLkAHyvf3920B5Y3aAkO1IJdn/UtbnAmq6T0=","+oOc6ca+ChKUpTu+oa2ZRxRE+wG3QJmuYWEvYCs40NI=","3mBGNAiRlTANEQkqzU3TEi+5wJ0ubR5uwtS4/9OOM7w=","1A9NNawxuhu95H5eThvf1rewJ4QQWhhPNxJXO1C/n68=","E3vWLQxzmj+e5QxYbUscllJ5n0ITpw5JBHV1Kph3/KM=","i3I8ghdTF9c1ZXNBZmvsID+DV4gxBVN27rj9wsMtRpg=","R8B8qYabnMSlLPhrtu0hGYrHn3llsMHqBbi70gkIjEE=","rhlzuEvv2KRAFMms896xFwkNgPrw6WvmgPn6xrBSa2Y=","LAMXv6sRb0VZrY34aVXF3Fftxs

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	38
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	3:FQxlXNQxlX:qTCT
MD5:	51A2CBB807F5085530DEC18E45CB8569
SHA1:	7AD88CD3DE5844C7FC269C4500228A630016AB5B
SHA-256:	1C43A1BDA1E458863C46DFAE7FB43BFB3E27802169F37320399B1DD799A819AC
SHA-512:	B643A8FA75EDA90C89AB98F79D4D022BB81F1F62F50ED4E5440F487F22D1163671EC3AE73C4742C11830214173FF2935C785018318F4A4CAD413AE4EEEF985DF
Malicious:	false
Reputation:	low
Preview:	.f.5................f.5...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	372
Entropy (8bit):	5.263894936174445
Encrypted:	false
SSDEEP:	6:mGro7XCjyq2PWXp+N23iKKdK25+Xqx8chI+IFUtqVNGrws1ZmwYVNGr4jRkwOWXc:prwSOva5KkTXfchI3FUtrrws1/xr4F5M
MD5:	FC9ACC6CFB5938E6A78B924A6F979C06
SHA1:	D1A38DBB3AAE7E49A364FE02418925B9FEF2C93F
SHA-256:	340753C483CE34AF0F32792BBBF512E719352505AF4ABD14EFCCE3DC7209C568
SHA-512:	A210C5A78DDFE8D135C1443FC4F92120767AF8D8AC67BDC531D89AEBA35C860022D23ED50BBAE1DB7CBDEDBECBB1E523A5CB795FEC76AED10DDD8ADCBC47E616
Malicious:	false
Reputation:	low
Preview:	2022/03/15-17:07:36.763 12c0 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/MANIFEST-000001.2022/03/15-17:07:36.806 12c0 Recovering log #3.2022/03/15-17:07:36.807 12c0 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	372
Entropy (8bit):	5.263894936174445
Encrypted:	false
SSDEEP:	6:mGro7XCjyq2PWXp+N23iKKdK25+Xqx8chI+IFUtqVNGrws1ZmwYVNGr4jRkwOWXc:prwSOva5KkTXfchI3FUtrrws1/xr4F5M
MD5:	FC9ACC6CFB5938E6A78B924A6F979C06
SHA1:	D1A38DBB3AAE7E49A364FE02418925B9FEF2C93F
SHA-256:	340753C483CE34AF0F32792BBBF512E719352505AF4ABD14EFCCE3DC7209C568
SHA-512:	A210C5A78DDFE8D135C1443FC4F92120767AF8D8AC67BDC531D89AEBA35C860022D23ED50BBAE1DB7CBDEDBECBB1E523A5CB795FEC76AED10DDD8ADCBC47E616
Malicious:	false
Reputation:	low
Preview:	2022/03/15-17:07:36.763 12c0 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/MANIFEST-000001.2022/03/15-17:07:36.806 12c0 Recovering log #3.2022/03/15-17:07:36.807 12c0 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1221
Entropy (8bit):	5.703447355319536
Encrypted:	false
SSDEEP:	24:8iZbBdbXaDatWLYMQNhM5jigOetV6GWZdn9RBSiOM8Ymxzm73tdnLzFC:/JBhtWLkNhnergdnBSDxK7pC
MD5:	ACBFC3DF856F139025177B4DA5D0C6C2
SHA1:	7CF4AF31C4CFE80D0B6461D2470FC82BE8A5E79A
SHA-256:	D7A62C48B9A46BFF884868FFB1F2FC392E104F69A3FC331D5B1C99227FF238D7
SHA-512:	4C424BC2DBEA2BEA6CBF0A43636ED74282493FD33EDD3DBEB344D99B7EE5463D3B6C79AB61B96EE4A21E831F1D3E6B9EF2A67CFC8E2883DE883BBEBDC03106D2
Malicious:	false
Reputation:	low
Preview:	............"......aadw7qsxxuegtgmtkad6s..com..download..downloading..dropbox..https..l..noilvcbczsldg..www..20000747..20011264..ad..camp..e..email..lcebr..oref..tk........20000747......20011264......aadw7qsxxuegtgmtkad6s......ad......camp......com......download......downloading......dropbox......e......email......https......l......lcebr......noilvcbczsldg......oref......tk......www..2.........0.........1........2.........4.........6.........7.........a.............b..........c...........d.............e............f........g..........h........i..........k.........l.............m...........n..........o.............p..........q........r..........s..........t..........u........v........w...........x.........z...:............................................................................................................................................................................B............ ......Ihttps://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading2.Download

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.dropbox.com_0.indexeddb.leveldb\000001.dbtmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.dropbox.com_0.indexeddb.leveldb\CURRENT (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.dropbox.com_0.indexeddb.leveldb\MANIFEST-000001

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	4.142914673354254
Encrypted:	false
SSDEEP:	3:Fdb+4Ll:Zl
MD5:	3FD11FF447C1EE23538DC4D9724427A3
SHA1:	1335E6F71CC4E3CF7025233523B4760F8893E9C9
SHA-256:	720A78803B84CBCC8EB204D5CF8EA6EE2F693BE0AB2124DDF2B81455DE02A3ED
SHA-512:	10A3BD3813014EB6F8C2993182E1FA382D745372F8921519E1D25F70D76F08640E84CB8D0B554CCD329A6B4E6DE6872328650FEFA91F98C3C0CFC204899EE824
Malicious:	false
Reputation:	low
Preview:	........idb_cmp1......

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\MANIFEST-000001

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PGP\011Secret Key -
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Reputation:	low
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	4.8920783862452915
Encrypted:	false
SSDEEP:	48:Y2TntwXGDH3qz5szGsYRLsFnosri/sy7s5AMHpsH+TyDYhbD:JTnOXGDHazciU2jDGsANhH
MD5:	C79EE457C71CAFC975E87D50A11C5866
SHA1:	D0B7E7FE31E9A2601B767AE7CAEFC467BEC632ED
SHA-256:	F78CB53EB0D9E1792F7D48866BECD3B24EA23D3A2B3D2D7EBDB276BD62AC5921
SHA-512:	0547E0B5FC0C572D5B0D399AB008B24C75D7FF00D790500140CD0B94ACD38E601B543CA8869254076DCD5F8C0514FCA21387350C4FB733DFC8655B8D5E483139
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://www.google.com","supports_spdy":true},{"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"isolation":[],"server":"https://play.google.com","supports_spdy":true},{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://www.googleapis.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13294454840651332","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://redirector.gvt1.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13294454840678206","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.google.com","supports_spdy":true},{"al

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5167
Entropy (8bit):	4.994419489920041
Encrypted:	false
SSDEEP:	96:n3CgoV9pcKIK0ok0JCKL8Kk6MHfbOTQVuwn:n3C99pc0j4KLk6Q
MD5:	D3202CC815038AF3412701DF27691ABA
SHA1:	B7A9EC0515C8D077767CE7525FA96F288A1BEC42
SHA-256:	4A7E84EBC18B2041BB729A22C7D8ABD276989B38B1F0B82EA74F4D6529955580
SHA-512:	73C514FE8A282875A63C933365021D1EB914A4AEF1F63F6E519B239FAB5DACBD1264ACFD4AB403F819671567BB9978154FD0D92C6AC45EA352926566D8B46461
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13291862837084384","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	19604
Entropy (8bit):	5.560081627918094
Encrypted:	false
SSDEEP:	384:jfVtdLl3wXg1kXqKf/pUZNCgVLH2HfDRrUzHGzkzMAdJ4a:RLlqg1kXqKf/pUZNCgVLH2HfFrUTGzkZ
MD5:	03F65AB34DC25AAE1834E511D7062947
SHA1:	E073454DD7A4F60C6E5F6F8A6C7E511EE824C3AC
SHA-256:	C213DCA24B11E424389BA10BA925F2FB33E5F9B5519E1A89F1A6CCFA0A6DD92A
SHA-512:	4899A257AB6A12FB802D366B115253E9DB2B1221E828F4B182F3C8D77C1786FC15F919581F58BC1EE4C61285D33A2A093F1D06FA5F9828274553DD2E6D8CE11F
Malicious:	false
Reputation:	low
Preview:	{"download":{"always_open_pdf_externally":true,"directory_upgrade":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13291862836228529","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\8158790d-66e5-442e-a139-94c1179da69c.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.985305467053914
Encrypted:	false
SSDEEP:	6:YHpoNXR8+eq7JdV5qQlsDHF4xj70PpqQEsDHF4R8HLJ2AVQBR70S7PMVKJw1K3Ky:YHO8sdBsB6MAsBdLJlyH7E4f3K33y
MD5:	C401B619D9D8E0ADABC25A47EE49CFBA
SHA1:	C9D3B816DD3FBCD98E9C0A32CEC7B501EFC0BBDA
SHA-256:	8F5D75F5EF9876E8D30CE477509F735B50C4D87DBEDB433BE8EDBE6D4B3CB82F
SHA-512:	BC12F16CB95CB0AD708C6BBD005EF863A8552613E612F1084086E0F8262752E1B5144D044F0D141CE8462CC33343C36B517A5CC778751680485D8F88FB51B862
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248543490879170","port":443,"protocol_str":"quic"},{"advertised_versions":[73],"expiration":"13248543490879171","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.985305467053914
Encrypted:	false
SSDEEP:	6:YHpoNXR8+eq7JdV5qQlsDHF4xj70PpqQEsDHF4R8HLJ2AVQBR70S7PMVKJw1K3Ky:YHO8sdBsB6MAsBdLJlyH7E4f3K33y
MD5:	C401B619D9D8E0ADABC25A47EE49CFBA
SHA1:	C9D3B816DD3FBCD98E9C0A32CEC7B501EFC0BBDA
SHA-256:	8F5D75F5EF9876E8D30CE477509F735B50C4D87DBEDB433BE8EDBE6D4B3CB82F
SHA-512:	BC12F16CB95CB0AD708C6BBD005EF863A8552613E612F1084086E0F8262752E1B5144D044F0D141CE8462CC33343C36B517A5CC778751680485D8F88FB51B862
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248543490879170","port":443,"protocol_str":"quic"},{"advertised_versions":[73],"expiration":"13248543490879171","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.954960881489904
Encrypted:	false
SSDEEP:	12:YHO8sdvBVSsB6M/BVSsBdLJlyH7E4f3K33y:YXsdvjX6gjXdL3yH7n/iy
MD5:	F4FEFEEEC722772F9DC0FCE1B52D79B5
SHA1:	00EECFA3B37113D30E7D43BE4383C540F3D93D4D
SHA-256:	D33E13C12004A700F246D8C73709114A881609D658E045D54DE36874728D07F0
SHA-512:	41E61EC89366800FD5F4DD704E53B47DE29411B9088B46349A0A350758D08569C14DCC70CF8D6A6FE6D049CB6D32F2B091153E8148A1B5857BD7AF13492071BE
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248543498399332","port":443,"protocol_str":"quic"},{"advertised_versions":[73],"expiration":"13248543498399332","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\a35f1be9-0273-49cb-9f7c-f8f26ec6888e.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.954960881489904
Encrypted:	false
SSDEEP:	12:YHO8sdvBVSsB6M/BVSsBdLJlyH7E4f3K33y:YXsdvjX6gjXdL3yH7n/iy
MD5:	F4FEFEEEC722772F9DC0FCE1B52D79B5
SHA1:	00EECFA3B37113D30E7D43BE4383C540F3D93D4D
SHA-256:	D33E13C12004A700F246D8C73709114A881609D658E045D54DE36874728D07F0
SHA-512:	41E61EC89366800FD5F4DD704E53B47DE29411B9088B46349A0A350758D08569C14DCC70CF8D6A6FE6D049CB6D32F2B091153E8148A1B5857BD7AF13492071BE
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248543498399332","port":443,"protocol_str":"quic"},{"advertised_versions":[73],"expiration":"13248543498399332","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Rv:1qIFJ
MD5:	6752A1D65B201C13B62EA44016EB221F
SHA1:	58ECF154D01A62233ED7FB494ACE3C3D4FFCE08B
SHA-256:	0861415CADA612EA5834D56E2CF1055D3E63979B69EB71D32AE9AE394D8306CD
SHA-512:	9CFD838D3FB570B44FC3461623AB2296123404C6C8F576B0DE0AABD9A6020840D4C9125EB679ED384170DBCAAC2FA30DC7FA9EE5B77D6DF7C344A0AA030E0389
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000004.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Rv:1qIFJ
MD5:	6752A1D65B201C13B62EA44016EB221F
SHA1:	58ECF154D01A62233ED7FB494ACE3C3D4FFCE08B
SHA-256:	0861415CADA612EA5834D56E2CF1055D3E63979B69EB71D32AE9AE394D8306CD
SHA-512:	9CFD838D3FB570B44FC3461623AB2296123404C6C8F576B0DE0AABD9A6020840D4C9125EB679ED384170DBCAAC2FA30DC7FA9EE5B77D6DF7C344A0AA030E0389
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000004.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e9936462-c5f3-4249-acc2-4db76fb03c4e.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	4.8920783862452915
Encrypted:	false
SSDEEP:	48:Y2TntwXGDH3qz5szGsYRLsFnosri/sy7s5AMHpsH+TyDYhbD:JTnOXGDHazciU2jDGsANhH
MD5:	C79EE457C71CAFC975E87D50A11C5866
SHA1:	D0B7E7FE31E9A2601B767AE7CAEFC467BEC632ED
SHA-256:	F78CB53EB0D9E1792F7D48866BECD3B24EA23D3A2B3D2D7EBDB276BD62AC5921
SHA-512:	0547E0B5FC0C572D5B0D399AB008B24C75D7FF00D790500140CD0B94ACD38E601B543CA8869254076DCD5F8C0514FCA21387350C4FB733DFC8655B8D5E483139
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://www.google.com","supports_spdy":true},{"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"isolation":[],"server":"https://play.google.com","supports_spdy":true},{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://www.googleapis.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13294454840651332","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://redirector.gvt1.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13294454840678206","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.google.com","supports_spdy":true},{"al

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f88da8e6-1cc7-49aa-bd41-175fcd141475.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4219
Entropy (8bit):	4.871684703914691
Encrypted:	false
SSDEEP:	48:YXsJjMH+5s7YMHBKsvxMHVzspxMHbsIHt/soBDysKqnsllzMHpDCLsWJMHLsNuMg:RG+ZGJG+GTTD7IGpD+G7Gp2GnG4GVhH
MD5:	EDC4A4E22003A711AEF67FAED28DB603
SHA1:	977E551B9ED5F60D018C030B0B4AA2E33B954556
SHA-256:	DD2C9F43F622F801FCC213CDE8E3E90EF1D0D26665AE675449A94CEC7EB1D453
SHA-512:	84D3930579FD73C7D86144D5CDC636436955BA79759273C740D2D72BC4847F2F7F165BBCA3EB2E4DFB01777D6A5F141623278C1BF74615C5A491092CE3FD1602
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[],"expiration":"13248543677350473","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543677350474","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31344},"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31656},"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501454993","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501454994","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":39369},"server":"https://www.googleapis.com","supports_spdy":true},

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	106
Entropy (8bit):	3.138546519832722
Encrypted:	false
SSDEEP:	3:tbloIlrJ5ldQxl7aXVdJiG6R0RlAl:tbdlrnQxZaHIGi0R6l
MD5:	DE9EF0C5BCC012A3A1131988DEE272D8
SHA1:	FA9CCBDC969AC9E1474FCE773234B28D50951CD8
SHA-256:	3615498FBEF408A96BF30E01C318DAC2D5451B054998119080E7FAAC5995F590
SHA-512:	CEA946EBEADFE6BE65E33EDFF6C68953A84EC2E2410884E12F406CAC1E6C8A0793180433A7EF7CE097B24EA78A1FDBB4E3B3D9CDF1A827AB6FF5605DA3691724
Malicious:	false
Reputation:	low
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e...e.x.e.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.8150724101159437
Encrypted:	false
SSDEEP:	3:Yx7:4
MD5:	C422F72BA41F662A919ED0B70E5C3289
SHA1:	AAD27C14B27F56B6E7C744A8EC5B1A7D767D7632
SHA-256:	02E71EB4C587FEB7EE00CE8600F97411C2774C2FC34CB95B92D5538E7F30DA59
SHA-512:	86010ED2B2EEBDCC5A8A076B37703669C294C6D1BFAAEA963E26A9C94B81B4C53EC765D9425E5B616159C43923F800A891F9B903659575DF02F8845521F8DC46
Malicious:	false
Reputation:	low
Preview:	85.0.4183.121

C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	190513
Entropy (8bit):	6.0451776415526695
Encrypted:	false
SSDEEP:	3072:Pkbxcacr8TVQwplPcYBTbIZ5Hgiss8GP4FcbXafIB0u1GOJmA3iuR9:PkdcacrKnPBTczHgXaqfIlUOoSiuR9
MD5:	B100963838AE2DF57BBB356D1EF6F033
SHA1:	F1B512E15F13B3ABDFEFB75E420EA256730D637F
SHA-256:	B918CE43FC1CC10973322810FE17B7A7016EEA0FE7B58C934E403D86A2F3AD09
SHA-512:	3B692547B527BA7CD87AF20F781C931FAD18388D93EC957D2CB99A726C9C55C84AF7C136CE53A4533E4CBD21CC020038C576A3080689002F149C5FE7818895BF
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.647389238945292e+12,"network":1.64736044e+12,"ticks":125903756.0,"uncertainty":4679548.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13291230639260917"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	113048
Entropy (8bit):	3.7504222268727334
Encrypted:	false
SSDEEP:	384:u78hNJ3wiSXeAvfV8ixENBrKvlf3mpn+HL46GxK1rgEh+YBuxP2mvTeX9rj7yrg9:IRyqN19l1CsengE3XkkCnufKSjpfS
MD5:	6C957B90B8E0A3964CFA0325B90A8E6E
SHA1:	3363384CBAB15D0FBCCD50EDA83925EE5C8D5F85
SHA-256:	E92FDE7700CCFEB75E40F6E26659391A3009BCC6D64D14ACA06DEBDC4C3F1CD0
SHA-512:	D77B68F6DDC78DF27997EF767A5FB294D7B0AA6655C96015DAAA91C6EFEE0C1E553E7C6B21552D94EFD21A51686F2F774F84925C99147D1440948EF836F5DDB1
Malicious:	false
Reputation:	low
Preview:	...................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....V8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\a0686aac-7fbe-4278-9938-e05afeac6575.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	101588
Entropy (8bit):	3.7513350060420447
Encrypted:	false
SSDEEP:	384:e78hNJ3wijAvfV8ixENBrKvlf3mpn+HL46GxK1rgDFBuxPWF+rj7yrgdmIDA/h1J:8yqN19ZeCsenJE3o3nufK1jpZS
MD5:	24D36B977BDD1DBDCBCCEE3585C72117
SHA1:	01678536C3AB01B0D99BE43789AE7ED2D89DC4BB
SHA-256:	A03D2CA230D33B85050CEEFDE9DF758A51BD03B9B3E375705A97B9B72A922577
SHA-512:	71DC455004B43FA29327017D563CCF7FBC6A17799B9EDAA41C25700B32FDBB630DF5F11A3650424F695CAA9D23BFF9FB68E9D127A3B8DC4755781B6D358FE6AE
Malicious:	false
Reputation:	low
Preview:	..................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....V8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\b2ad7fea-84ee-41e4-afb8-4d0669cafb9b.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	109668
Entropy (8bit):	3.750211144515055
Encrypted:	false
SSDEEP:	384:q78hNJ3wijAvfV8ixENBrKvlf3mpn+HL46GxK1rgEh+YBuxPWvTeX9rj7yrgdmIV:oyqN1941CsenJE3XtkCnufK1jpfl
MD5:	D1C7A7C2077EACDF8EDB9F09B28B0EFF
SHA1:	16806A72A91353083043FF92A0705740E6029512
SHA-256:	320CDAC77B19DCCE34E265E6CD83D5EFEC96595D4A23D0E82417E7F805571C3B
SHA-512:	7A87BA53C747D773C62CB2837E0FD6D83C26E9B52383DFD772AF5184FE32B1EC19ED47CA2FE379AFB2883488E0C918FBC0AE6DB788D8B1FE39314D16D29CA200
Malicious:	false
Reputation:	low
Preview:	`..................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....V8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\b57593aa-0f3d-4159-b48c-c7f8c0253551.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	99604
Entropy (8bit):	3.7507209489569084
Encrypted:	false
SSDEEP:	384:S78hNJ3wifvoxENBrKvlf3mpn+HL46GxK1rgDFBuxPWF+rj7yrgdmIDA/h15COfl:RqN19ZeCsenJE3o3nufK1jpZA
MD5:	79398C4E44BD97DFC48AA88E50A41AD9
SHA1:	BE5CB8AA56C3C0A4523FCE8C427DBFE5BC0DA684
SHA-256:	5DF3D3E75DB24755C3060ABC61BC2349AD2DCB246DF1B05D4EF93F17FE21DA23
SHA-512:	29D618E00ECCC10810E3AC6B1399D8B68E2F243378AE007D18D9C324EB17ACD0AEF21ACF9A96ACD6E1AA512ACFFA34941ACC7E7C34B10914D5E7D52532282098
Malicious:	false
Reputation:	low
Preview:	...................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....V8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\b86fc34e-8b13-4db4-a9eb-2ce3c9f400f9.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	190513
Entropy (8bit):	6.0451776415526695
Encrypted:	false
SSDEEP:	3072:Pkbxcacr8TVQwplPcYBTbIZ5Hgiss8GP4FcbXafIB0u1GOJmA3iuR9:PkdcacrKnPBTczHgXaqfIlUOoSiuR9
MD5:	B100963838AE2DF57BBB356D1EF6F033
SHA1:	F1B512E15F13B3ABDFEFB75E420EA256730D637F
SHA-256:	B918CE43FC1CC10973322810FE17B7A7016EEA0FE7B58C934E403D86A2F3AD09
SHA-512:	3B692547B527BA7CD87AF20F781C931FAD18388D93EC957D2CB99A726C9C55C84AF7C136CE53A4533E4CBD21CC020038C576A3080689002F149C5FE7818895BF
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.647389238945292e+12,"network":1.64736044e+12,"ticks":125903756.0,"uncertainty":4679548.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13291230639260917"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\user\AppData\Local\Google\Chrome\User Data\d4108ea5-870d-47c0-8f59-8d66359fde21.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	198986
Entropy (8bit):	6.074168419672354
Encrypted:	false
SSDEEP:	3072:QIWkbxcacr8TVQwplPcYBTbIZ5Hgiss8GP4FcbXafIB0u1GOJmA3iuR9:PWkdcacrKnPBTczHgXaqfIlUOoSiuR9
MD5:	3106C838462BA10CD443E91823A0CAC8
SHA1:	CCE3595D533C503554AA56741C0D5F43B4AA6761
SHA-256:	1DAB286EC6EBFE4F2312B06D644F522A9DFC62E78AB4C4E4A82E053E2823043F
SHA-512:	214770A6E84232D5BA3F5A7CAC44F80405E187CAFE8C704A48A650A584C36ECF1C3125A036C8750EC7B24B74F6242B01C31F75BC378459785AF88A84F2EB4075
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.647389238945292e+12,"network":1.64736044e+12,"ticks":125903756.0,"uncertainty":4679548.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016607996"},"plugins":{"metadata":{"adobe-flash-player":{"displ

C:\Users\user\AppData\Local\Google\Chrome\User Data\ec4f0f27-69de-4dff-ab2f-30c7c0bd89dd.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	102308
Entropy (8bit):	3.7513304551824147
Encrypted:	false
SSDEEP:	384:478hNJ3wijAvfV8ixENBrKvlf3mpn+HL46GxK1rgDFBuxPWF+rj7yrgdmI82A/hn:qyqN19ZsCsenJE3o3nufK1jpZ6
MD5:	43FA76D282EE6119012E0DA51F0EE0EE
SHA1:	425E2F3C9FC5A00B40D80B3C66B350EF9218AC62
SHA-256:	20EA077E6A07C53BA7E872A1D540EBF99CD890CC7112C19EE5A55BF69831D011
SHA-512:	1505AED31319B82260793E5635E2577163AE0E8E0886202C2B284D844EDE4297728F4799D078047E09193B69B2AECE527F334360DA3A700EAA465574A8C3F925
Malicious:	false
Reputation:	low
Preview:	...................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....V8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Temp\36fe8ef6-9a87-4dc3-8eb1-92f7325bdaf1.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	248531
Entropy (8bit):	7.963657412635355
Encrypted:	false
SSDEEP:	3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
MD5:	541F52E24FE1EF9F8E12377A6CCAE0C0
SHA1:	189898BB2DCAE7D5A6057BC2D98B8B450AFAEBB6
SHA-256:	81E3A4D43A73699E1B7781723F56B8717175C536685C5450122B30789464AD82
SHA-512:	D779D78A15C5EFCA51EBD6B96A7CCB6D718741BDF7D9A37F53B2EB4B98AA1A78BC4CFA57D6E763AAB97276C8F9088940AC0476690D4D46023FF4BF52F3326C88
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L\|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.\|1..n.<Fb..f..Q1.....s..2..{.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-eu...b.........\..F!...b...l5....zJ.q.......L].....w[T0.6....E.....r..%Z.vFm.9..5!,.~g5...;.t...']....+A.....u....k...e..&..l.6r[yU...%..f.......N..V.....<+.....l..}.{...z...)y.n..'..).....,.b....5.08K%..O.g..D.S.F5o..<(....>....\f..X..I..2."l...w....7f\|.~.c.4.E.......0..0....H............0.......).'..b.$w\$.q&.]zF_2..;...?.U,...W..L1.2...R..#....W.....c1k.$W..$.J....+M!.Hz.n`U.I)N.\|b.l....{.K@]6.LlP/....](.A..................I...).H....IQ.y.;MG.d..ix..#f.Z$\|..\|.?...0K...t"i..s...Y..%.Ky....0...{.!+.~v.;....J.....Z....).(6..@?v.;~..2..c....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. .0...\|!..A..L.+.=...kP.!.1..

C:\Users\user\AppData\Local\Temp\5872_548865713\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	3034
Entropy (8bit):	5.876664552417901
Encrypted:	false
SSDEEP:	48:p/hEc9q0S+UTKYM43z8nqMsfWRUWEADM/W9n7lqFkakzcVTGkcYTPi6zM:RGcg5z/jjjHgUnV278+aWLy4
MD5:	8B6C3E16DFBF5FD1C9AC2267801DB38E
SHA1:	F5CADC5914DF858C96C189B092BC89C29407BBAA
SHA-256:	FD986A547D9585E98F451B87CA85DEB4B61EE540C6FAC678D7BEDABF04653095
SHA-512:	37048EF8FADF62A26CAEC6EE90AC192429AB1E99424E5C68FACA90C0DAD68642C761FDCAC03FC38FA930841F91FA145A6943EC7F168D4F2FA426F1F092C2F502
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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

C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_pnacl_json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	507
Entropy (8bit):	4.68252584617246
Encrypted:	false
SSDEEP:	12:TjLJ7qaVgPPd8bdzQBXefosmc5T9+n6e1Cetm1JXcAwA:TJ7jViPOd8wfHmZ6RP15
MD5:	35D5F285F255682477F4C50E93299146
SHA1:	FB58813C4D785412F05962CD379434669DE79C2B
SHA-256:	5424C7B084EC4C8BA0A9C69683E5EE88C325BA28564112CC941CD22E392D8433
SHA-512:	59DF2D5F2684FACC80C72F9C4B7E280F705776076C9D843534F772D5A3D578BEE04289AEE81320F23FB4D743F3969EDF5BA53FEBBAC8A4D27F3BC53BCF271C3E
Malicious:	false
Reputation:	low
Preview:	{. "COMMENT": [. "This file serves as a template for the resource info description used by ", . "the NaCl Chrome plugin. It is kept in the NaCl repository to prevent ", . "hard-coding of NaCl-specific information inside the Chrome repository.". ], . "abi-version": 1, . "pnacl-arch": "x86-64", . "pnacl-ld-name": "ld.nexe", . "pnacl-llc-name": "pnacl-llc.nexe", . "pnacl-sz-name": "pnacl-sz.nexe", . "pnacl-version": "5dfe030a71ca66e72c5719ef5034c2ed24706c43".}

C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
Category:	dropped
Size (bytes):	2712
Entropy (8bit):	3.4025803725190906
Encrypted:	false
SSDEEP:	48:b/5D5V5PK82aTS6aTTw0Do1DttoyDNsEA:b/hbVic1ZtLDNsE
MD5:	604FF8F351A88E7A1DBD7C836378AE86
SHA1:	9D8D89AE9F13D6306E619A4EAAD51EDE91A5F9F3
SHA-256:	947E64BE43E821562CE894F1AFCC3D09CD7FF614C107FC94250CD3EA5C943302
SHA-512:	85B1EDA4C473E00034EE627B7ABB894A77E521BC6A91A91A4A3744CA7511CB0AF10B9723D9ECC2CE3378DD70B659DF842D8C11875958CB77070CF01EC0A15840
Malicious:	false
Reputation:	low
Preview:	.ELF..............>.................................@.....@.......................................PH.......,$J.l=....J.$<A[..@.A...M..A..ffffff..................PH......,$J.l=....J.$<A[..D..A...M..A..ffffff..................PH..1..,$J.l=....J.$<A[.......A...M..A..ffffff..................PH..SP..h.........fff...................h.........fff.............J.$<[.,$J.l=....J.$<.....f.....................................................................................................................................................................................NaCl....x86-64...........zR..x......................@....C....C.........8.......@....C....C.........T.......@....C....C.........p.......`....C....C..B...... .......................<...............@.......X.......................t........................clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pna

C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
Category:	dropped
Size (bytes):	2776
Entropy (8bit):	3.5335802354066246
Encrypted:	false
SSDEEP:	48:b/5D5V5ej5ej5PjDdaTS6aTTw6DV1DtFouoyDOsTy:b/hbEEVJB1ZFhLDOsT
MD5:	88C08CD63DE9EA244F70BFC53BBCADF6
SHA1:	8F38A113A66B18BAA02E2C995099CF1145A29DAA
SHA-256:	127F903CC986466AA5A13C17DFDD37AC99762F81A794180339069F48986BC7A3
SHA-512:	78D2500493A65A23D101EC2420DC5F0CE8C75EFAC425C28547121643E4FB568E9D827EF2C0F7068159E043C86B986F29BF92C6BADC675F160B63C7B3512EB95F
Malicious:	false
Reputation:	low
Preview:	.ELF..............>.....................X...........@.....@.......................................PH.......,$J.l=....J.$<A[..@.A...M..A..ffffff..................PH......,$J.l=....J.$<A[..D..A...M..A..ffffff..................PH..1..,$J.l=....J.$<A[.......A...M..A..ffffff..................PH..,$J.l=....J.$<A[f........A...M..A..ffffff..................PH..,$J.l=....J.$<A[f........A...M..A..ffffff..................PH..SP..h.........fff.............J.$<[.,$J.l=....J.$<.....f.K...............`.......P.......................z...................................NaCl....x86-64...clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f)............zR..x......................@....C....C.........8.......@....C....C.........T.......@....C....C.........p.......@....C....C.................@....C....C.................@...

C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
Category:	dropped
Size (bytes):	1520
Entropy (8bit):	2.799960074375893
Encrypted:	false
SSDEEP:	12:Bvx/ekjlM/NQQmTfR9yp9396QQmTfR9C6wRqD8MTDDw7lEOkSbfuEAXwX6BX2U8b:bDjO/NbmT3296bmT3Twk8qDwh7b7CD8
MD5:	75E79F5DB777862140B04CC6861C84A7
SHA1:	4DB7BDC80206765461AC68CEC03CE28689BBEE0C
SHA-256:	74E8885B87ED185E6811C23942FD9BD1FBAC9115768849AF95A9DECF6644B2EA
SHA-512:	FE3F86E926759E71494F2060C4ED3C883EBCAF20CB129A5AD7F142766C33FAB10B5FABC3C7C938E0E895E27EA0AC03CBFE8D0EEABF5300A4AD07F67FD96CC253
Malicious:	false
Reputation:	low
Preview:	.ELF..............>.................................@.....@.........................NaCl....x86-64.......clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f)...text..comment..bss..group..note.GNU-stack..eh_frame..shstrtab..strtab..symtab..data..note.NaCl.ABI.x86-64.......................................................!................................................................................................................................................................................................../../../pnacl/support/crtend.c.__EH_FRAME_END__...............................................................................................@...............................................................H.......................................P.......................H...............................

C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377, stripped
Category:	dropped
Size (bytes):	2163864
Entropy (8bit):	6.07050487397106
Encrypted:	false
SSDEEP:	24576:HPHonIwYZJ0ykwVO7Owf31yJKzCtxO8RSV4lY+PbeHVxCtjFV4lBNeSAmfGqa+A7:HvSMRwf3SKmlY+PyPvnM2Gq+
MD5:	0BB967D2E99BE65C05A646BC67734833
SHA1:	220A41A326F85081A74C4BB7C5F4E115D1B4B960
SHA-256:	C6C2D0C2FC3E38A9BFA19C78066439C2F745393F1FD1C49C3C6777F697222C76
SHA-512:	8EF8689E00E4B210A30444D18ED6247F364995ABEB2FD272064C3AF671EEDB4D9B8B67CA56F72FEBF8F56896D4EA7EC4B10CB445FFA1C710C1F312E9DA0E4896
Malicious:	false
Antivirus:	Antivirus: Virustotal, Detection: 0%, Browse Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	.ELF..............>..... .......@.........!.........@.8...@......................................................................................................................................................{......W...............................................@.......@...............P.td.....h.......h.......h......4b......4b..............Q.td................................................................NaCl....x86-64..............GNU.u.S.:j..,w...u...#w.......?......Y@.......@......1@......B@......P@.....@X@.....``@......h@.....pp@.....H.@.......@.......@.......@.......@.......@....`..@.......@.......A.......A......................p................@..............?.......A.........5.....?5.5...?.5.....?......P9..............PC.......?......0@................aCoc...?..`.(..?.y.P.D.?<.s..O.u......$@.......@...............@........................................ ... ....... .......@...`...`...`...`...................`...`...`...`...`...`...`...................................`...

C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	current ar archive
Category:	dropped
Size (bytes):	40552
Entropy (8bit):	4.127255967843258
Encrypted:	false
SSDEEP:	768:xlP+1fzyUNVU5LmKxeOnjpD5eA/eUnUUxvT:xlP+1ryYMTekpD5eAWjuvT
MD5:	0CE951B216FCF76F754C9A845700F042
SHA1:	6F99A259C0C8DAD5AD29EE983D35B6A0835D8555
SHA-256:	7A1852EA4BB14A2A623521FA53F41F02F8BA3052046CF1AA0903CFAD0D1E1A7B
SHA-512:	7C2F9BF90EB1F43C17B4E14A077759FA9DC62A7239890975B2D6FD543B31289DC3B49AE456CA73B98DE9AC372034F340C708D23D9D3AAB05CCBDABDC56A6314E
Malicious:	false
Reputation:	low
Preview:	!<arch>./ 0 0 0 0 624 `...................,...8...Z(..e...e...t...t...y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`..y`........................fmod.fmodf.memcmp.memcpy.memmove.memset.__nacl_read_tp.__pnacl_init_irt.longjmp.setjmp.__Sz_fptosi_f32_i64.__Sz_fptosi_f64_i64.__Sz_fptoui_f32_i32.__Sz_fptoui_f32_i64.__Sz_fptoui_f64_i32.__Sz_fptoui_f64_i64.__Sz_sitofp_i64_f32.__Sz_sitofp_i64_f64.__Sz_uitofp_i32_f32.__Sz_uitofp_i32_f64.__Sz_uitofp_i64_f32.__Sz_uitofp_i64_f64.nacl_tp_tdb_offset.nacl_tp_tls_offset.__Sz_bitcast_16xi1_i16.__Sz_bitcast_8xi1_i8.__Sz_bitcast_i16_16xi1.__Sz_bitcast_i8_8xi1.__Sz_fptoui_4xi32_f32.__Sz_uitofp_4xi32_4xf32..e_fmod.o/ 0 0 0 644 2792 `..ELF..............>.....................(...........@.....@.......................................PH..AVAUATSfI.~.M..I.. E....@.A......D..D1.......8fI.~.M.....I.. E..A......D..D..t.D....D..f....D..=....r...Y...^.[A\A]A^..@..,$J.l=....J.$<A[A...M..

C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	current ar archive
Category:	dropped
Size (bytes):	132784
Entropy (8bit):	3.6998481247844937
Encrypted:	false
SSDEEP:	384:Hf0mOXYmeKzQUIdedRFvT5p1Ee2HyAlL3O4:Hf7OXdmWRJT5p1R2HyAhO4
MD5:	C37CA2EB468E6F05A4E37DF6E6020D0F
SHA1:	EA787E5EADFB488632EC60D8B80B555796FA9FE9
SHA-256:	C1483ED423FEE15D86E8B5D698B2CDAB89186CE7FF9C4E3D5F3F961FD80D7C6E
SHA-512:	01281DE92B281FB29E1ACA96AA64B740B65CC3A9097307827F0D8DB9E1C164C56AFCDFA0BF138EA670A596D55CE2C8D722760744E9FC9343BB6514417BF333BA
Malicious:	false
Reputation:	low
Preview:	!<arch>./ 0 0 0 0 942 `....;...\|.......4...x..#...-...4l..E...M...U...]...n...u...~X...4.......................L......................t...p...............`......"...*...1...:...D...K...T...\...d...r\|..\|0.......x...........L.......\...8..........................__clzti2.__compilerrt_fmax.__compilerrt_fmaxf.__compilerrt_logb.__compilerrt_logbf.__ctzti2.__divdc3.__divdi3.__divmoddi4.__divmodsi4.__divsc3.__divsi3.__divti3.__fixdfdi.__fixdfsi.__fixdfti.__fixsfdi.__fixsfsi.__fixsfti.__fixunsdfdi.__fixunsdfsi.__fixunsdfti.__fixunssfdi.__fixunssfsi.__fixunssfti.__floatdidf.__floatdisf.__floatsidf.__floatsisf.__floattidf.__floattisf.__floatundidf.__floatundisf.__floatunsidf.__floatunsisf.__floatuntidf.__floatuntisf.compilerrt_abort_impl.__moddi3.__modsi3.__modti3.__muldc3.__muloti4.__mulsc3.__multi3.__popcountdi2.__popcountsi2.__popcountti2.__powidf2.__powisf2.__udivdi3.__udivmoddi4.__udivmodsi4.__udivmodti4.__udivsi3.__udivti3.__umoddi3.__umodsi3.

C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	current ar archive
Category:	dropped
Size (bytes):	13514
Entropy (8bit):	3.8217211433441904
Encrypted:	false
SSDEEP:	192:uU9v4pXizdrEuxwk3vp20tprpdSGFwDqO:P9v4palvvc0tpFdSGFwmO
MD5:	4E8BEDA73EB7BD99528BF62B7835A3FA
SHA1:	DC0F263A7B2A649D11FF7B56FE9CFAC44F946036
SHA-256:	6B835FD48DF505EB336FF6518CE7B93BB0ED854DADAA5C1EEED48D420291F62C
SHA-512:	46116B8BABC719676D68FD40D2AC82F38A3D13D8A482ADFC6FC32A99170AC3420E52CC33242CCD0FA723ABF4FA5EDBB9CE16A09C729BF04AE4AFBB2F67A1E38B
Malicious:	false
Reputation:	low
Preview:	!<arch>./ 0 0 0 0 94 `................._pnacl_wrapper_start.__pnacl_real_irt_query_func.__pnacl_wrap_irt_query_func..shim_entry.o/ 0 0 0 644 7392 `..ELF..............>..................... ...........@.....@.........................NaCl....x86-64..................................A.L....A.L...D...........D....A.....t+.. u..t"..A.D..........A... .....A.D...........f..D..<.......................Q.......................V.......................clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f).../../ppapi/native_client/src/untrusted/pnacl_irt_shim/shim_entry.c./mnt/data/b/build/slave/sdk/build/src/out_pnacl/x64.NACL_STARTUP_FINI.NACL_STARTUP_ENVC.NACL_STARTUP_ARGC.NACL_STARTUP_ARGV.NaClStartupInfoIndex.unsigned int.size_t.char.TYPE_na

C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	current ar archive
Category:	dropped
Size (bytes):	2078
Entropy (8bit):	3.21751839673526
Encrypted:	false
SSDEEP:	24:MOcpdhWE5O/bZbmT3296bmT3TwQwDnvD/+R3:MHuECdaTS6aTTwXDvD/+l
MD5:	F950F89D06C45E63CE9862BE59E937C9
SHA1:	9CFAD34139CC428CE0C07A869C15B71A9632365D
SHA-256:	945B1C8A1666CBF05E8B8941B70D9D044BAAFB59B006F728F8995072DE7C4C40
SHA-512:	F9AFBB800A875EDCC63DEA4986179E73632B3182951A99C8B3D37DB454EFD7CC7192ECA5AC87514918A858BAD6DAEAB59548CA2E90EADA9900EF5B9F08E62CFC
Malicious:	false
Reputation:	low
Preview:	!<arch>./ 0 0 0 0 30 `........._pnacl_wrapper_start..// 20 `.dummy_shim_entry.o/./0 0 0 0 644 1840 `..ELF..............>.................................@.....@.......................................PH..,$J.l=....J.$<.....f..D......................................NaCl....x86-64...clang version 3.7.0 (https://chromium.googlesource.com/a/native_client/pnacl-clang.git ce163fdd0f16b4481e5cf77a16d45e9b4dc8300e) (https://chromium.googlesource.com/a/native_client/pnacl-llvm.git 7251d5b59fca15195c94a3a7da70f0081724448f)............zR..x...................... ....C....C..... .........................rela.text..comment..bss..group..note.GNU-stack..rela.eh_frame..shstrtab..strtab..symtab..data..note.NaCl.ABI.x86-64.....................................................................................................................................................

C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce, stripped
Category:	dropped
Size (bytes):	14091416
Entropy (8bit):	5.928868737447095
Encrypted:	false
SSDEEP:	196608:tKVqXp3Qev4dg6ilfHM8KLM2J3jqjnkZ:uqufB
MD5:	9B159191C29E766EBBF799FA951C581B
SHA1:	D1D4BBC63AB5FC1E4A54EB7B82095A6F2CE535EE
SHA-256:	2F4A3A0730142C5EE4FA2C05D27A5DEFC18886A382D45F5DB254B61B28ED642B
SHA-512:	0B4FF60B5428F81B8B1BCF3328CF80CBD88D8CE5E8BDBC236B06D5A54E7CF26168A3ABB348D87423DA613AB3F0B4D9B37CB5180804839F1CA158EC2B315DDF00
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	.ELF..............>..... .......@...................@.8...@...............$.....................................................................................................................!.......!......'......G...............................................@.......@...............P.td............................D.......D...............Q.td................................................................NaCl....x86-64..............GNU.0.m=F>k....&...i........................0C......0C..0C..0E..............0C......0E.-DT.!.?.-DT.!.........................?........-DT.!...-DT.!.?.......?......................?..............?."..."..."..."......@.......`...................... ...@...`...................... ...@...`...................... ...@...`...................... ...@...`.......................................`... ...@...`...........`...`.......@...@....... ....1..`3.. 4..`-..`-...:...:...F..@H..`H...H...F...F...G...H.. H...F..@G...I.. I..@I..@G...G...I...I...J...G..`I..

C:\Users\user\AppData\Local\Temp\5872_548865713\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9, stripped
Category:	dropped
Size (bytes):	1901720
Entropy (8bit):	5.955741933854651
Encrypted:	false
SSDEEP:	12288:gXqUSpBjwQO2o8k+7zjidg4euCAauOILffvCpGy4Wh3BTFmHpq82K2/KsvPyla9d:gafZwcOdNe2auOepCBTFmJq3Kf8ksr
MD5:	9DC3172630E525854B232FF71499D77C
SHA1:	0082C58EDCE3769E90DB48E7C26090CE706AD434
SHA-256:	6AA1DA6C264E0AF4E32A004F4076C7557C6AC6D9C38B0C5DE97302D83FA248C3
SHA-512:	9E9584241A39EED1463D7D4C1B26AE570B839AA315778FF3400C61341EBA43B630307DE9F1532A265CA82EA69BDEA03EC9D963E59A18569C02DA8285449870FE
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	.ELF..............>..... .......@...................@.8...@.............................................................................................0.......0................................................Y......................................................@.......@...............P.td....t^......t^......t^.......W.......W..............Q.td................................................................NaCl....x86-64..............GNU.K..J.'..b......<S...`...`... ...@...@.......@.............................................Y@......................p................@.......?..............?.......A.........5.....?5.5...?.5.....?......P9..............PC.......?......0@................aCoc...?..`.(..?.y.P.D.?<.s..O.u......$@.......@...............@`...`.......@.................................................. ...`... ... .......`................... ... ...@...`.......................@... Z...[...[...e.......... ...@... ...@...`........0...0...2..`4.. 6...7...9...~...~...z...{...{..

C:\Users\user\AppData\Local\Temp\5872_548865713\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.928261499316817
Encrypted:	false
SSDEEP:	3:STDLGswXEVBcVdBiTDt3zLsW:SPLGLErcVdBiDtf3
MD5:	C00BCE97F21B1AD61EB9B8CD001795EE
SHA1:	8E0392FF3DB267D847711C3F4E0D7468060E1535
SHA-256:	59F06F04230E32E8BC839F45B984D31D611930427B631C963D09E7064A602363
SHA-512:	9930E44A6ECC62505DBADCEED5E05645909FF09816FB12AAC0414E6D2830AC09758366C3B7D4EDD7839C87EB16DFA4C66D8981AE6237D408B37135C3506F4CD2
Malicious:	false
Reputation:	low
Preview:	1.6f6bc93dcd62dc251850d2ff458fda96083ceb7fbe8eeb11248b8485ef2aea23

C:\Users\user\AppData\Local\Temp\5872_548865713\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	573
Entropy (8bit):	4.859567579783832
Encrypted:	false
SSDEEP:	12:BLqG6yDJmL4mLDlG9hQ181G46XzrXc+EFfNqpaiOc+T5NqXIOclNqXL:BkylmL4mLDlJ18116XsRNqtZeNqXIZlE
MD5:	1863B86D0863199AFDA179482032945F
SHA1:	36F56692E12F2A1EFCA7736C236A8D776B627A86
SHA-256:	F14E451CE2314D29087B8AD0309A1C8B8E81D847175EF46271E0EB49B4F84DC5
SHA-512:	836556F3D978A89D3FC1F07FCED2732A17E314ED6A021737F087E32A69BFA46FD706EBBDFD3607FF42EDCB75DC463C29B9D9D2F122504F567BB95844F579831B
Malicious:	false
Reputation:	low
Preview:	{."update_url": "https://clients2.google.com/service/update2/crx",.. "description": "Portable Native Client Translator Multi-CRX",. "name": "PNaCl Translator Multi-CRX",. "manifest_version": 2,. "minimum_chrome_version": "30.0.0.0",. "version": "0.57.44.2492",. "platforms": [. {. "nacl_arch": "x86-32",. "sub_package_path": "_platform_specific/x86_32/". },. {. "nacl_arch": "x86-64",. "sub_package_path": "_platform_specific/x86_64/". },. {. "nacl_arch": "arm",. "sub_package_path": "_platform_specific/arm/". }. ].}.

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxCrashHandler.exe

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	130320
Entropy (8bit):	5.910888230586073
Encrypted:	false
SSDEEP:	3072:LZOOxLE4GTn5cyC2QltfW0csbeoq/OZHr1F/MKHBdSrEmcv:cOxLEbTT07v
MD5:	05BC63B645F81838D3454546D5968C29
SHA1:	0E095429822DD0FFDA4126810DB8647634AEE2DE
SHA-256:	5F93D0BC8249F7FED886F180CE8EE8711DECEE588F223E15803695F13057C8D2
SHA-512:	78EBE5F840A11D2DD9592E146462AA25DFEE4387A1EF008799C39EB022D3776379E74B5C2FEC2BA4B15EDDC70367E85C75DEC586F9C4650F0DD4C7132DF3C8C8
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......t...0..0..0..9.g.#..9.q.Y..9.v......v.3......7..0..J..9.x.2....f.1..0.e.'..9.c.1..Rich0..................PE..L...u.\a.....................,.......N............@..........................0.......h....@.................................l9..P....P..(............................................................-..@...............d....7.......................text...m........................... ..`.data....-..........................@....text/DE\1.......2..................@..@.rsrc...(....P......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	130320
Entropy (8bit):	5.912334440798352
Encrypted:	false
SSDEEP:	3072:SvZOOxLE4GTnQcyL2QltfWLgo/iE+DiV7X5pbwmjNBOfoXcz:SwOxLEbTQXLz
MD5:	8AD76E0B347BB690697535CE95B1C656
SHA1:	10D2622A3965D21215A953ED924D01788A9805ED
SHA-256:	7655221B493047C61285E1DE78807D0584920B0D14D150E2487DA9728B1926F3
SHA-512:	35FBDA7F05865B3A50454DBA5BA3738EB8A5FD6D2EEA5E9415D8D517811D51C50CCA6C7B47A5B19F1FF1F4101567137FE18805F4F740289456DA1FF2AF682504
Malicious:	true
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......t...0..0..0..9.g.#..9.q.Y..9.v......v.3......7..0..J..9.x.2....f.1..0.e.'..9.c.1..Rich0..................PE..L...$/[a.....................,.......N............@..........................0............@.................................l9..P....P..(............................................................-..@...............d....7.......................text...m........................... ..`.data....-..........................@....text/DE\1.......2..................@..@.rsrc...(....P......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdateBroker.exe

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	75024
Entropy (8bit):	5.872813943968416
Encrypted:	false
SSDEEP:	768:qFbwKvIIfEr5EJFQp18EMUpVP2Z6lxxSXBNQlhgtfWdwicDGyhj:qFbwk6WQfAUDPX2QlhgtfW2n
MD5:	E7F9A39D39B38F8A86A5E90217E104C7
SHA1:	36710B93FD3A06D8AE6ACE2AFBF34F594318D4F1
SHA-256:	C127EFCCFCAB11B690C0B20CEC2573E5C9614803F56DABF405A6BC0AA3CD91B6
SHA-512:	0F675C6692ECE430FA70A79028CFE9721244BE4797B99142856928121A5B6DE0A22CC135A2E5A2C604539C82127C8CB951C85CF617FDCC34D12881685471C165
Malicious:	false
Antivirus:	Antivirus: Metadefender, Detection: 0%, Browse Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........P..>...>...>.......>.......>...E...>...?...>.......>.......>......>.......>.Rich..>.........PE..L...@.\a.................d..........h.............@..........................@............@.................................D...<.......@g...................0......0...................................@............................................text....c.......d.................. ..`.rdata...............h..............@..@.data...............................@....rsrc...@g.......h..................@..@.reloc.......0......................@..B........................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdateHelper.msi

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Dropbox Update Helper, Author: Dropbox, Inc., Keywords: Installer, Comments: Copyright: Dropbox, Inc. 2015 (Omaha Copyright Google Inc.), Template: Intel;1033, Revision Number: {02185A56-547D-47E9-AC9B-F762BAB0AD0F}, Create Time/Date: Wed Oct 6 00:35:24 2021, Last Saved Time/Date: Wed Oct 6 00:35:24 2021, Number of Pages: 300, Number of Words: 0, Name of Creating Application: Windows Installer XML Toolset (3.9.1208.0), Security: 2
Category:	dropped
Size (bytes):	24576
Entropy (8bit):	5.867900597863516
Encrypted:	false
SSDEEP:	384:Px5Pey3M5IC0ioXvsSkAoeDGscDlUhVYoXNXYpktL43o:veWMmCEsgDGVRUhu2dYpUH
MD5:	3EC1257BF283127910F4D4840074350B
SHA1:	3B8A38FD6571D2F4C2BAD22F08621A4016E05DF8
SHA-256:	D7D96D7754BD2D2F6A3C4D8D8F11ECA998F999FF9E7CFB718D52DD84089E5350
SHA-512:	57C31B414CEBA5839BC2958B2B3F3DA38ACACB7762BDAA37969B385037C3BB6A348A097F8E328AA68393319A18DF87FAA4572054A55282A95C1867DD369349AF
Malicious:	false
Reputation:	low
Preview:	......................>.......................(...........'...................................................................................................................................................................................................................................................................................................................................................................................................................................................................NameTableColumnIdentifier_ValidationValueNPropertyId_SummaryInformationDescriptionSetCategoryKeyTableMaxValueNullableKeyColumnMinValueName of tableName of columnY;NWhether the column is nullableYMinimum value allowedMaximum value allowedFor foreign key, Name of table to which data must linkColumn to which foreign key connectsText;Formatted;Template;Condition;Guid;Path;Version;Language;Identifier;Binary;UpperCase;LowerCase;Filename;Paths;AnyPath;WildCardFilename;RegPath;CustomSource;P

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdateOnDemand.exe

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	75024
Entropy (8bit):	5.872052737057273
Encrypted:	false
SSDEEP:	768:Dib4KvIIfEr5EJFQp18EMUpVP2/6lFxSXBNQ2hgtfWdwiGDGibHhq:Dib4k6WQfAUDPZaQ2hgtfW2Pc
MD5:	0CFC4BCF3E5FD704B27C4AAE02712651
SHA1:	13423456653ADE9CA572ACAEC6423D2569365293
SHA-256:	961D1D7C062B09DC5C0ADE68B79B0A6321C99ACFD0AAC3218E7EB797902058F4
SHA-512:	73A0586A788246A6EBF83E17FD753A92D155A856D1DEC8A1C7BDB5A798036924EDFA6AD9BF636E785A10596ED3001FF6B6ACB5503CD2BCD4AB9C62B426500FDF
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........P..>...>...>.......>.......>...E...>...?...>.......>.......>......>.......>.Rich..>.........PE..L...A.\a.................d..........h.............@..........................@......?Y....@.................................D...<.......@g...................0......0...................................@............................................text....c.......d.................. ..`.rdata...............h..............@..@.data...............................@....rsrc...@g.......h..................@..@.reloc.......0......................@..B........................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdate.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1127696
Entropy (8bit):	6.556517229991223
Encrypted:	false
SSDEEP:	24576:dSdRTqk0NaWi6CKOGTbjy//YAZQL+K2tpJrtVka:MdRTqk0NceTbjfMVK0JrtVp
MD5:	B76C21A1D18FB2E75D0314583D8D3C1C
SHA1:	5AEC97DEF8D3FB77D8F6445DB804B7D40F7D3B4C
SHA-256:	C51B2ED581E4CEDCD41F9B5BBC527CA796582974EBB2BC5636BFF63D0B9745EE
SHA-512:	78460C039EDDC5E66E37FABD02DCDED25BF3C78388FBDE2333930C6032D993B0FCA935BB304F90375BD2DE04F058B7545AC3009395CB14C00638B64434FF883C
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......@#..B...B...B..#....B.......B...:..B...:..NB...:...B..#....B..#....B...B..w@...:...B...:...B.......B...B...B...:...B..Rich.B..........PE..L.....\a...........!................).....................................................@..........................:..Q.......................................x.......................................@....................... ....................text............................... ..`.rdata...z.......\|..................@..@.data.......@...T...0..............@....rsrc...............................@..@.reloc..Z............H..............@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_da.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	30992
Entropy (8bit):	5.514888279506457
Encrypted:	false
SSDEEP:	384:tn9XpDshgWIPuEQCsufL51kw9J+BT0DGsakh+:x9XNZWI6CsYV+yDGGh+
MD5:	9E4B06DC59430A183B9EBF104539C2F2
SHA1:	DFB631FEA3919BCB1128573438CF7B68BEBB479D
SHA-256:	555EAA75E22300FAFE0BE43426F6DE77AF1F90CD4EA3AEE61A8A8618BDB2186F
SHA-512:	47C20AFB9531B78AE44754DD2FD9830BE3FC4477BA00454EF3911971589D09B0EEF3473A702A242F4B24B43471149895FE44959A82C1D37EA2C3D1507942B845
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L...S.\a...........!.........X......`........ ............................................@.............................D...x...(.... ..`U...........^...............................................................................................text...$........................... ..`.rsrc...`U... ...V..................@..@.reloc...............\..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_de.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	34064
Entropy (8bit):	5.370430758421185
Encrypted:	false
SSDEEP:	384:FCo9XpDshgWIPuEQCn6g+1KfK9Y3uLSDpQDGsGh8h:R9XNZWI6Cnx+1KfK9YpVQDGvh8h
MD5:	AC596BCA3F84CA6EFB401533AEFEC303
SHA1:	4B3BE88255BCA0A90C565E8CA8E057ED327BE1F3
SHA-256:	8484A5DCE6969DCCBE5F9DEA40DC993299FF49BC0A03AAC02CA8E98BBD26DF5E
SHA-512:	54BC4A651B400D8E6048F9B9643E01962BF2CB7BD058036630DF4AB132D85B587C43094DB808B8A7CE1AE4472FA0D50C152F4470901ACD8C414A9FDC842FCDA1
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L...i.\a...........!.........d......`........ ......................................].....@.............................D...x...(.... ..xa...........j...............................................................................................text...$........................... ..`.rsrc...xa... ...b..................@..@.reloc...............h..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_en.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	29968
Entropy (8bit):	5.531587890083878
Encrypted:	false
SSDEEP:	384:+C9XpDshgWIPuEQCwUPagyyyRJLaDGs0Hhnls:x9XNZWI6Cw6agyySJuDGfHhls
MD5:	A0BBED6A29C44029F11B9309E748E315
SHA1:	B1D1B705E54C3D787C2E1C647992DD550869AE7C
SHA-256:	B3652B60FD79C64D73317E04630585D759E17A75F35306A66E18E0442754F1FD
SHA-512:	EE9C391F0633337898737EFB1AEEC9E3B216DCFCFFB406761A3E82689E56EA34A02A353356475B0DCBC70BD817B96BAA2C79D850D7B86508FBEAC99574B50A9A
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........T......`........ ............................................@.............................D...x...(.... ..HP...........Z...............................................................................................text...$........................... ..`.rsrc...HP... ...R..................@..@.reloc...............X..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_es-419.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	32016
Entropy (8bit):	5.4246506327842505
Encrypted:	false
SSDEEP:	384:4qij59XpDshgWIPuEQC3xA+/yedz9yeJUDGss3hE:4qy9XNZWI6C3xv/lzw7DGD3hE
MD5:	39F0A9FC31392CF3FAB3CEC5E06709E6
SHA1:	659D5DCFA04AD7EDE16C4B8AF6891F2077315E03
SHA-256:	9284FE719865DCAD14EABD01670FB8EDC3B4D8AFB57AAA178EC80FEF77CDB218
SHA-512:	A06032C415D81E7E2399ADA75C7BFB0617E593ED8D119F191B0EE7DF774D2DF3E911FC0A3CDBB0C0B2B552C33F4C49A002DF49ABA54AC0645677E13983756DC5
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........\......d........ ......................................v.....@.............................H...\|...(.... ...X...........b...............................................................................................text...(........................... ..`.rsrc....X... ...Z..................@..@.reloc...............`..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_es.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	31504
Entropy (8bit):	5.4624531765792455
Encrypted:	false
SSDEEP:	384:gV9XpDshgWIPuEQCD1DrLLWS27adtHDGsGhM:I9XNZWI6CD1XL/27avHDG1hM
MD5:	B70BFA2F802A74DB3D34225EDCE272B1
SHA1:	02E1999EAC311617B21815F095CEACBBB50E3B4F
SHA-256:	7A8F3B8728A9606E1AE06EBC71F204DD584E448A76C7C75818D0CEF058B3B861
SHA-512:	D00192A061584928CCE03AEE434D14B526983C6E0171D88C64743635810FDBCC6D2173C0F8CF816180AB3B223562DB1B62617B28E73F6290EB1A19EF013EF23D
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........Z......`........ ............................................@.............................D...x...(.... ...V...........`...............................................................................................text...$........................... ..`.rsrc....V... ...X..................@..@.reloc...............^..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_fr.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	33040
Entropy (8bit):	5.4346528975022075
Encrypted:	false
SSDEEP:	384:Yy9XpDshgWIPuEQCLxVdPtF0IK9qMhGxUDGsIhdo:n9XNZWI6CL/dPts9wODGjh+
MD5:	7E2593A5B1193CB60DA8F4FB9237AF6C
SHA1:	7B5D36553F6FD1B83CCD49960F248709AC75D6EA
SHA-256:	CA6CF735B516DB990F2A01FF3DEDFAC1F2C6C4456713A2A42F1576A1D1BBE3C3
SHA-512:	1A322ABF3563CA1945E226FE5F6D442FC876FC4D1FC999910F5BDB5D42D871FD178D3AA6E1904BD1E4CBC39796C4748AF17DC5E006B8514AC10140FC7816E3D8
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........`......`........ ...........................................@.............................D...x...(.... ...]...........f...............................................................................................text...$........................... ..`.rsrc....]... ...^..................@..@.reloc...............d..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_id.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	29968
Entropy (8bit):	5.550255085468995
Encrypted:	false
SSDEEP:	384:zQ9XpDshgWIPuEQCL+lHDWq6elDoWoRncvCPHlU6jmDGsQhm:09XNZWI6CLkbEvuRDGjhm
MD5:	93D22E99B3E90226228EDD2BB95C58E1
SHA1:	E1F56954DD24E8708791D3D42582073765119F7B
SHA-256:	044B04DDEA2E1A6EAA08E6AA99F307B25FEC712FAE95DA47075DD19AE211E2C2
SHA-512:	5DD5E534EB4BD98510B5A51BDA644DEC37E37B4995F464991389CD4D4859BDDC518ECB5C73944E06FF89C773916608BBE768BFDD5ECD79F7265E2C3FB01D47E0
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........T......`........ ......................................x.....@.............................D...x...(.... ...P...........Z...............................................................................................text...$........................... ..`.rsrc....P... ...R..................@..@.reloc...............X..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_it.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	32016
Entropy (8bit):	5.422731618259161
Encrypted:	false
SSDEEP:	384:ob9XpDshgWIPuEQC5OoQr0mhz48sOVxDGsmh6bSF:W9XNZWI6C52r0mhzICxDGdhRF
MD5:	F51704729F8819FB9FDADAE60B0179B5
SHA1:	2FA4BE65C45FF9D5A7AEC339F73DDE7F5FC140BB
SHA-256:	1AD2FFDB797E6DC7E861D9DE31F6A8E879D572243014DF52813D6DE29660A9BC
SHA-512:	6DC79B956AB2EB2F89C5988012C9B11B8DBF70D7F58FABA0E1D1149ABFE7AF410EDBE6EF1ED9484E025950F34D128857C46FF3CF22AE086CEB118A9E2D47E88F
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........\......`........ ...........................................@.............................D...x...(.... ...X...........b...............................................................................................text...$........................... ..`.rsrc....X... ...Z..................@..@.reloc...............`..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ja.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25872
Entropy (8bit):	6.327916803225968
Encrypted:	false
SSDEEP:	384:jG9XpDshgWIPuEQCTMm9uttlSa/9sWdDGsXhxi:K9XNZWI6CTfyOWdDGCh8
MD5:	4393D3E360F10DE3C720EB1407C22C52
SHA1:	0C6F0D621100B2BC4C27E5A6109C1ED25A7F2665
SHA-256:	52074D5BDF7AB48EC51544734E5A2720DA3856362D3A4C5A62B5F9AD6826C2A7
SHA-512:	C920A86827CB7756F9D358417E6A0AB6D8FB409131C7B9A809F55A6B29B60E1FBA558B2289A3F723C23FACBC0BC26AF7FAE642D2999B8CE3D302844637D97954
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........D......`........ ............................................@.............................D...x...(.... ...A...........J.......p.......................................................................................text...$........................... ..`.rsrc....A... ...B..................@..@.reloc.......p.......H..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ko.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25872
Entropy (8bit):	6.353283943402898
Encrypted:	false
SSDEEP:	384:sgD9XpDshgWIPuEQCgZgEFzcZhvt01ANY+UslmzkB3rXmNZYB5HhYKWvk/uqDGsP:f9XNZWI6CgWecZDPkWfB/FDGuhow
MD5:	0CD8DA9AB32A78BD1B532F53F0D67CD5
SHA1:	4D81DEB2CF172B5017B43FC38D174D470FFF0509
SHA-256:	C6120447E83B9B10CED1DCA584303BD126E84EFD1FC99960CBBC6CBE44A36035
SHA-512:	E69655DCE4A5B5806CE4FF2D2D113F959477AF7CD11D89672B6B1060C12DB9BD4AD10ACB223D061BF2B2CFCA97010A4FD67431449BDDC87382245EA6FBCCB30A
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........D......`........ .......................................L....@.............................D...x...(.... ...@...........J.......p.......................................................................................text...$........................... ..`.rsrc....@... ...B..................@..@.reloc.......p.......H..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ms.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	29968
Entropy (8bit):	5.562942865438027
Encrypted:	false
SSDEEP:	384:EE9XpDshgWIPuEQCULHYV7ZZgZuG3yK6jFJHgcO/2WfdqJBAQCRNDKxDGsVhY0f:V9XNZWI6CUUqDz4DGuhY0f
MD5:	F7ECF555127CAAD71B63CE1CAD0CA1E1
SHA1:	613BBE7D5C30470E4BA12ECEAD10F445FAC162D7
SHA-256:	FB98A1297D85ADDD79F6AC26FC541AE88B33B23841BB804D2FE8FE6733E29A5A
SHA-512:	01EC9C016F66D200A8AEBD290CDA4DC3725CBEFF336C53E04E08E51E94A93E078C58DC5507CE6FB3D6D377446172C86B35126CB5C8829E0A4FDFD4FCF0B5BCD6
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........T......`........ ............................................@.............................D...x...(.... ...Q...........Z...............................................................................................text...$........................... ..`.rsrc....Q... ...R..................@..@.reloc...............X..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_nl.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	32528
Entropy (8bit):	5.398153513481302
Encrypted:	false
SSDEEP:	384:e749XpDshgWIPuEQCon+BYUEz8BxUUNOwDGs+8hqc:C49XNZWI6CozlQEGTDGx8hT
MD5:	0CFF8C4EC9BC41072EA003B90DB0640F
SHA1:	3902E7E6E0E50363615551B3904AE48E8C794C6C
SHA-256:	33A8C6531B389B4891A48D117E9290E98D6D618AEE6D2FDF050C97187E1F373B
SHA-512:	D36E08B93D0B7A89347DFC74BAD3619A7618945D7B04F99F95D1048E1774543DB293B200CB6DF8C56AD23E04F883AA7F216B600743E115CB2C6F556B53A7956D
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........^......`........ ......................................@.....@.............................D...x...(.... ..0Z...........d...............................................................................................text...$........................... ..`.rsrc...0Z... ...\..................@..@.reloc...............b..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_no.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	30992
Entropy (8bit):	5.497384114564379
Encrypted:	false
SSDEEP:	384:hhKaq6Kaq6Kafv/Pe9XpDshgWIPuEQClKR/IGDMsiKVtkDGsuhI:+9XNZWI6ClYtDviKVeDGBhI
MD5:	047CEB0FCE949062CA7DB0103D19AFE6
SHA1:	7DC29673680A8D6E75D61B44B7DF60A56F83E261
SHA-256:	50C4578E56749020C0C98A08C624C3BBF815BB6EB03C83F8CCD52D5B84D735E9
SHA-512:	A43BB0DDA26BF29A08596C8DB51B213BCC10E893F699FC5B7108DE794C6394B2730017EEB937FCB18AB20A6764F5D416D82F374E8D0E5E914B7318185E18377D
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........X......`........ ......................................!.....@.............................D...x...(.... ..`T...........^...............................................................................................text...$........................... ..`.rsrc...`T... ...V..................@..@.reloc...............\..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_pl.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	32016
Entropy (8bit):	5.517625702270571
Encrypted:	false
SSDEEP:	384:Js9XpDshgWIPuEQCIJzL7bHNzcjANLsMnZyDGscho:S9XNZWI6CIhTLZ4DG1ho
MD5:	531E3189C79CB6119D5609D3651D7459
SHA1:	F925CF00EB24473111867B38F3FA6B3F2DADEE49
SHA-256:	52F3B479B621D05041B9E46CBA459AA67C3F2526442EAC04FCC62F6C776F75EF
SHA-512:	304E1872E66876DF11234E9FE500B2038937C1F91031E9328EBA2D36100BE70A622303A6D203849F547C2BB5C5FF6E08A3E2AF808DFC87380C4E6F1AD5E046BD
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........\......`........ ......................................7.....@.............................D...x...(.... ...X...........b...............................................................................................text...$........................... ..`.rsrc....X... ...Z..................@..@.reloc...............`..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_pt-BR.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	30992
Entropy (8bit):	5.506114099023115
Encrypted:	false
SSDEEP:	384:OSq9XpDshgWIPuEQCeqClFEZnK+J1uDGsFhmW:Bq9XNZWI6CepnEZHgDGCh7
MD5:	6DFDFF4AAC2403CEA3F8809661A9035B
SHA1:	696456635D2D4757A88A609B663C878716453921
SHA-256:	1C85599C08B45D1DEE9EBCD469FC772C6986407620424AAF4A57AAA3A62AF157
SHA-512:	0810274B151D98B5B237C82BD41FA9895B778A0544C488A4CB1330C38EC18ACFF577FA4D249A7CBDC367B5D0B34F7A86CC4A9248199217E324677C3DB4DAE219
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........X......d........ ......................................w-....@.............................G...\|...(.... .. U...........^...............................................................................................text...'........................... ..`.rsrc... U... ...V..................@..@.reloc...............\..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_ru.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	31504
Entropy (8bit):	5.866654199387397
Encrypted:	false
SSDEEP:	384:+99XpDshgWIPuEQCX4aKN+5N+JnYOk3oyq3Lbq9DYNdDdHt/ymsDGsHRthaY6:m9XNZWI6CXxjoyHZmnNsDG0ThG
MD5:	AE89644F5B9B4E1619E1AF704F5ACB1E
SHA1:	3E25227F896C4E9E671082EAB57DD1BE1F6505CC
SHA-256:	F65C7DB7AE8B49FA94AA5C8F7D7ECCFDA532CEC1CB12666ECBDA83E3BF5FAA36
SHA-512:	F9920F2764CF51B617239C850AC089F47969DD2852B5F04D26F2F785506DEEA49A27D34EE7758E7D8D3FE5C4097EDBED49DFC958C0F8BD454B9481FA2BD6379E
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........Z......`........ ............................................@.............................D...x...(.... ...V...........`...............................................................................................text...$........................... ..`.rsrc....V... ...X..................@..@.reloc...............^..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_sv.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	30992
Entropy (8bit):	5.523498063355396
Encrypted:	false
SSDEEP:	384:qe9XpDshgWIPuEQC1GnD3ciot2QQEgzJDGsWhaM:d9XNZWI6C1aciotgEoDG9h9
MD5:	84AEEAEF761B433A9BA88B37FC58EE3D
SHA1:	D41A87BD3C3A04634F87DAFC984BDC2469E00DC5
SHA-256:	D6C5A288176921695B429ACF6B7DED0A08B2AA24E4D40713BF1011FE4F5614D5
SHA-512:	DE645FD82A849CEBF9448B8266311F3990A17D327045DB24F52DC6541C4A2E2ED57C0D3472C4E046AC47A2D3287F43A501590B73055628BAD72DD4C53687BEFC
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........X......`........ ............................................@.............................D...x...(.... ...U...........^...............................................................................................text...$........................... ..`.rsrc....U... ...V..................@..@.reloc...............\..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_th.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	29456
Entropy (8bit):	6.009550338540249
Encrypted:	false
SSDEEP:	768:o49XNZWI6CdgRUkGGq2aaLxo2qQ5wDGnAhC:o49XThBdgRUkGGq2aaLxoZQpp
MD5:	02C30BBCEA8F44B83098B84B5B50BFE0
SHA1:	BACC471726335B71CDACE4FF64AD9C80BEC3803F
SHA-256:	993F8075E864363DF79C3AAE38CCD3499B94062F75EA623C5DD915BCC0030D1D
SHA-512:	95EC4E582EAE2A46DB88B9E8DF8A448F883D5A3A710B35EC48740F65B644820FC133C6187CE943FB363CE793FF3E974F288087422DBBF4D2CD89E824C982FE5A
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........R......`........ ............................................@.............................D...x...(.... ...N...........X.......p.......................................................................................text...$........................... ..`.rsrc....N... ...P..................@..@.reloc.......p.......V..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_uk.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	30480
Entropy (8bit):	5.931057373312929
Encrypted:	false
SSDEEP:	384:iv9XpDshgWIPuEQCHbQb0sS5kU40ryH5oHXmUzdkPhTDGsOhq:Y9XNZWI6CH8voHSTDGnhq
MD5:	C5E320C3A1D35B3D11CF97364BB4BA40
SHA1:	2095C994AFA95FC30DAE9A1BA80FA037397F092C
SHA-256:	A8A69F5C30FDF0F58B266E8B337E7437DB747325EBA1DD5DE532F8AC4D58ADB2
SHA-512:	B48993BDDBF00D4AD93D4A1069881A1B3989F112DA13177228CE10F8F27F0DBE3185A0C814C596978CF57E9F8767A68DD366A07DEC100BAECC6DD07587987751
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........V......`........ ............................................@.............................D...x...(.... ...S...........\...............................................................................................text...$........................... ..`.rsrc....S... ...T..................@..@.reloc...............Z..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_zh-CN.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	23312
Entropy (8bit):	6.39950563334999
Encrypted:	false
SSDEEP:	192:RlUxjOUpYFSshl2OEKIWGRPw9FEQomUGPrwPmw+nz6QEoMDWpHso7EyBZHGVprUa:Ri9XpDshgWIPuEQCGPrKPDDGsbAhsX
MD5:	AA6267D08AD0B8BB0CDE91CE42B2229F
SHA1:	C411640E2018FBD283E9A855B8EF220FAF78E2F4
SHA-256:	9EE519B069A3E18D3D2086F61232B70F51C316E377D671E5BF8A113BE3C02C65
SHA-512:	16A14E33933AC5C396CD894CA0480A4794B184B5A4F302CE54AB8B9A8B68477EB96DF096BDDB80BBB7BDA7FFE9CFFD8DA4DE7E0305C4488160D59ED33EEC874A
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........:......d........ ...............................p......}.....@.............................G...\|...(.... ...6...........@.......`.......................................................................................text...'........................... ..`.rsrc....6... ...8..................@..@.reloc.......`.......>..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\goopdateres_zh-TW.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	23312
Entropy (8bit):	6.410816733538156
Encrypted:	false
SSDEEP:	384:Fe9XpDshgWIPuEQCZJi6ql73inVv0WGsDGsgQhRI:09XNZWI6CZIl7nrsDGshRI
MD5:	A96056DE0862B1EAE06A8AEA0D381BCD
SHA1:	47E514E09C09605D5C4D6A688FE0B8F2CDE1705B
SHA-256:	10FFDB4FD3B56CF2C57DB832CDA650CEA625D2B010FFB7CF1F162DE3DD8FF089
SHA-512:	2040458CE96C61E2F8CC9C96AE01A865DCE2436849F4AC2AD1D9436EE7376167D88FCDE97FCA1CCC12234FE93AD90568E85D754E7E75B5D61C08260DCF55E915
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................>.....&..... .....%....Rich...........................PE..L.....\a...........!.........:......d........ ...............................p.......a....@.............................G...\|...(.... ..(6...........@.......`.......................................................................................text...'........................... ..`.rsrc...(6... ...8..................@..@.reloc.......`.......>..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\npDropboxUpdate3.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	278800
Entropy (8bit):	6.385118125610601
Encrypted:	false
SSDEEP:	6144:4PwLmdnZKeYfb0x87wtJwV/t+ZTg2U1zZcQP:9LeKeYD0CwtJwV/tJZZFP
MD5:	F88D436AEEAD1665C6A672192433A89C
SHA1:	9D011634A85FA5BA3A10F9E4D45B708B2136F3CB
SHA-256:	148C3270AEB4E2153127F4E1A3AA2C25C9FE4FDD832C56E9EC66424AAF2C2EBD
SHA-512:	595A26349B53C3BB67876CDE98D12744910647E4BFD2DA8C56C4931525385049193776405084E89D41A2DE210AAB2F462B07A5613257D2ADC54B837D861535E9
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......R.dt...'...'...'..'...'..'S..'..'...'1eg'...'1eq'7..'...'..'..'...'..'...'..'...'..'...'Rich...'................PE..L...-.\a...........!................n........................................p......pp....@......................... ........u.......................&...........'...................................i..@............................................text...o........................... ..`.rdata.. ...........................@..@.data....M......."..................@....rsrc...............................@..@.reloc...f.......h..................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\psmachine.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	213776
Entropy (8bit):	6.383006669244057
Encrypted:	false
SSDEEP:	3072:Z4nEvkwaGLWtiSSztEbQ9VPfPGyam4O4cK7QXrQssMUuv/zQWD+T:Z3cfiSSBEbwVPfeyzqBsXLsMGT
MD5:	58A39BF4AF127033C99C1DC6893708E2
SHA1:	3E5C8D40C08E061DC31AD2A49E7D4DEFFB70AEF6
SHA-256:	C809694ABF354093F364D9E2965303732AD043B9A41B7C049433151FD63746A5
SHA-512:	50F00CB98CEE2123EC9FDC1D0AC8A5C1D9F56E6AF9EC016EA422D06DDCA5AD590D01A7A7813751502BF9B99FFAC73A04D731CDFE1F12DDD99C3BA54B84DF5384
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............M...M...M.rMX..M.uM...M.dM...M.$.M...M.$.M...M...M...M.{M...M.cM...M.eM...M..fM...M.`M...MRich...M........................PE..L...H.\a...........!.........j......................................................5.....@......................... ...................pR...........(.......P..,... ................................\|..@............................................text...=........................... ..`.orpc...\........................... ..`.rdata.............................@..@.data....L......."...x..............@....rsrc...pR.......T..................@..@.reloc..>8...P...:..................@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\psuser.dll

Download File

Process:	C:\Users\user\Downloads\DropboxInstaller (1).exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	213776
Entropy (8bit):	6.382568729958503
Encrypted:	false
SSDEEP:	3072:H4nsPkwaGLWtiSSztEbQ9VPfPGyam4PUQK7QXrQmsMUuv/zQWN+J:HvcfiSSBEbwVPfeyzbdsXVsMUJ
MD5:	068CB722B5142C2C740A02E461CE5C57
SHA1:	797B36ED501C11655110323D9B54A9DC1C1E32B6
SHA-256:	43EF470F0F1C83132FE28BAC0C3F5E5B054A464F03E25EF5F3827E45B0B4B219
SHA-512:	39FF37175F2DA570FC282077A17374AE7DDF19459DBE4CB932C6250614FA7733EE65021152EF4CE00A76ED887CAD70329BF2FCF5D1B43EBFB3A78421D924A64B
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............M...M...M.rMX..M.uM...M.dM...M.$.M...M.$.M...M...M...M.{M...M.cM...M.eM...M..fM...M.`M...MRich...M........................PE..L...P.\a...........!.........j......................................................_.....@......................... ...................pR...........(.......P..,... ................................\|..@............................................text...=........................... ..`.orpc...\........................... ..`.rdata.............................@..@.data....L......."...x..............@....rsrc...pR.......T..................@..@.reloc..>8...P...:..................@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\adfb688f-aeab-4c88-a138-661afb34915b.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Temp\chrome_BITS_5872_797321815\0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx (copy)

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	6760942
Entropy (8bit):	7.967022493507665
Encrypted:	false
SSDEEP:	196608:t9+jC/EDtY24xYzXBXqn+uPo7NKP0XSGagLKhzi0:tkjCQm1xOXBGSK8iGaOKhz3
MD5:	B92BBCFD3C31F799C5863D78154DB555
SHA1:	86B1B058E1E7D2F1F35E830DB446B59E15670E5E
SHA-256:	6F6BC93DCD62DC251850D2FF458FDA96083CEB7FBE8EEB11248B8485EF2AEA23
SHA-512:	38BE0C179619C045A321D1FA2C67DDA8419A33075A87F548FEED9A858F5BA19B5B980C53D4A3BB5B745C7CE566B53773785AA1F7677E37DD5793CCAE76E83787
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L\|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.\|1..n.<Fb..f..Q1.....s..2..{.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-eu...b..........>l...j.`...........H1._.."..0.!.........S....Shg..J..k.R..u.7..l...C8...T...`...C..M.c....i.kd..6..[...y...,.e.....(.b...\tZ.........&.#.......C.._I>....BX...4.H....=..d.......^2..?.Q.5.4(.4..F?..,1gI...n......l...W.b.1L.e..I..%q..@......0..0....H............0........9...$.~...d1.....K.~.....#xs#%a...X..G..!y..C....D.x1.YL..)N.....\|<...F.PM.u.`...\|.K..c....M_....; r......s..A ..ov..Q...........l..J..:.b.nW. .1.`.c$.a.....\|I..].[.I....`NI.Y5...0l..}l.......>.O2.....).....w..I...w.....t...o.0...@........Z...~......[0Y0....H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...G0E. nP..-...>..h...U...1C...

C:\Users\user\AppData\Local\Temp\chrome_BITS_5872_797321815\BIT3BD8.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	6760942
Entropy (8bit):	7.967022493507665
Encrypted:	false
SSDEEP:	196608:t9+jC/EDtY24xYzXBXqn+uPo7NKP0XSGagLKhzi0:tkjCQm1xOXBGSK8iGaOKhz3
MD5:	B92BBCFD3C31F799C5863D78154DB555
SHA1:	86B1B058E1E7D2F1F35E830DB446B59E15670E5E
SHA-256:	6F6BC93DCD62DC251850D2FF458FDA96083CEB7FBE8EEB11248B8485EF2AEA23
SHA-512:	38BE0C179619C045A321D1FA2C67DDA8419A33075A87F548FEED9A858F5BA19B5B980C53D4A3BB5B745C7CE566B53773785AA1F7677E37DD5793CCAE76E83787
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L\|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.\|1..n.<Fb..f..Q1.....s..2..{.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-eu...b..........>l...j.`...........H1._.."..0.!.........S....Shg..J..k.R..u.7..l...C8...T...`...C..M.c....i.kd..6..[...y...,.e.....(.b...\tZ.........&.#.......C.._I>....BX...4.H....=..d.......^2..?.Q.5.4(.4..F?..,1gI...n......l...W.b.1L.e..I..%q..@......0..0....H............0........9...$.~...d1.....K.~.....#xs#%a...X..G..!y..C....D.x1.YL..)N.....\|<...F.PM.u.`...\|.K..c....M_....; r......s..A ..ov..Q...........l..J..:.b.nW. .1.`.c$.a.....\|I..].[.I....`NI.Y5...0l..}l.......>.O2.....).....w..I...w.....t...o.0...@........Z...~......[0Y0....H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...G0E. nP..-...>..h...U...1C...

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\36fe8ef6-9a87-4dc3-8eb1-92f7325bdaf1.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	248531
Entropy (8bit):	7.963657412635355
Encrypted:	false
SSDEEP:	3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
MD5:	541F52E24FE1EF9F8E12377A6CCAE0C0
SHA1:	189898BB2DCAE7D5A6057BC2D98B8B450AFAEBB6
SHA-256:	81E3A4D43A73699E1B7781723F56B8717175C536685C5450122B30789464AD82
SHA-512:	D779D78A15C5EFCA51EBD6B96A7CCB6D718741BDF7D9A37F53B2EB4B98AA1A78BC4CFA57D6E763AAB97276C8F9088940AC0476690D4D46023FF4BF52F3326C88
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0...........\7c.<........Fto.8.2'5..qk...%....2...C.F.9.#..e.xQ.......[...L\|....3>/....u.:T.7...(.yM...?V.<?........1.a...O?d.....A.H..'.MpB..T.m..Vn Ip..>k.\|1..n.<Fb..f..Q1.....s..2..{.6....Pp....obM..1.......b1.......(.u^.'z......v.F.W.X4."-eu...b.........\..F!...b...l5....zJ.q.......L].....w[T0.6....E.....r..%Z.vFm.9..5!,.~g5...;.t...']....+A.....u....k...e..&..l.6r[yU...%..f.......N..V.....<+.....l..}.{...z...)y.n..'..).....,.b....5.08K%..O.g..D.S.F5o..<(....>....\f..X..I..2."l...w....7f\|.~.c.4.E.......0..0....H............0.......).'..b.$w\$.q&.]zF_2..;...?.U,...W..L1.2...R..#....W.....c1k.$W..$.J....+M!.Hz.n`U.I)N.\|b.l....{.K@]6.LlP/....](.A..................I...).H....IQ.y.;MG.d..ix..#f.Z$\|..\|.?...0K...t"i..s...Y..%.Ky....0...{.!+.~v.;....J.....Z....).(6..@?v.;~..2..c....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. .0...\|!..A..L.+.=...kP.!.1..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\bg\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	796
Entropy (8bit):	4.864931792423268
Encrypted:	false
SSDEEP:	12:1HEJMLkSlwZGGMLkSlwZ+WYpU34f145Gb+dgoxTyO8ZpU34f1L0frhmJ03OyZnLt:1HE7n4gn8WYpYrbhz8ZpotHOGAOf6aD
MD5:	6F8E288A9AD5B1ED8633B430E2B4D4CA
SHA1:	F671D3D4BEFA431D1946D706F4192D44E29B6F08
SHA-256:	A114E2783D0E9B12155017323BA70838F0F82A71C7EE8DC1F115AE36991241F8
SHA-512:	0F87F3F0D115B872288949E59ACD3CD41B1FBC64A622D8FDA6D71FAFC5A900D92ADFBB0E7EB926F2A8759BBAA0896D48728FB719BBF5EF54AC21027328F7700C
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "........ . ... ........ .. Chrome".. },.. "app_name": {.. "message": "........ . ... ........ .. Chrome".. },.. "craw_app_unavailable": {.. "message": "........... .... ...... .. .............".. },.. "craw_connect_to_network": {.. "message": "...., ........ .. . ......".. },.. "iap_unavailable": {.. "message": "........... .... ...... .. .......... ....... .. .........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "...., ...... . Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	675
Entropy (8bit):	4.536753193530313
Encrypted:	false
SSDEEP:	12:1HEJ0gbbGG0gbb+WYpU34g3YbiLO+dgyGFoO8ZpU34+puiPmb03OyZnLAOfTYABk:1HE5baib6WYpm31Lt0Z8Zp8pxOGAOfKD
MD5:	1FDAFC926391BD580B655FBAF46ED260
SHA1:	C95743C3F43B2B099FEBEBC5BD850F0C20E820AC
SHA-256:	C67898B67F9C9209EAFDA6532B62D5789863CFB855998DD6A70E7775316CEC20
SHA-512:	39D95D45C5746DA3BAA7AE6A3344EA17D7A7C3569C2A56959FF119261DA08C747A320FCF701AC72B8DBDBF8BF06FD8B239017A282CDDA444F3826D4EC672CBB4
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Sistema de pagaments de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagaments de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Ara mateix aquesta aplicaci. no est. disponible.".. },.. "craw_connect_to_network": {.. "message": "Connecteu-vos a una xarxa.".. },.. "iap_unavailable": {.. "message": "La funci. Pagaments a l'aplicaci. no est. disponible actualment.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Inicieu la sessi. a Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	641
Entropy (8bit):	4.698608127109193
Encrypted:	false
SSDEEP:	12:1HEJfZGGfZ+WYpU34OBh+dgN/O8ZpU34j05U03OyZnLAOfTYWc:1HEl4G8WYpdt8Zpq5TOGAOfW
MD5:	76DEC64ED1556180B452A13C83171883
SHA1:	CFB1E56FD587BCDC459C1D9A683B71F9849058F9
SHA-256:	32290D69A90E6BAAC428B10382C99221B12773BB9A184F3B93DFB48A4F6D7A40
SHA-512:	5230A217968D5DC463E2E92D704544311A721E5CEF65C3125CBD8DEB9C0293D3BFB5C820A6011ABF77095FDEE7DAF67D541DC202B0C9CDB0908CBB85D84885CB
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "app_name": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplikace v sou.asn. dob. nen. dostupn..".. },.. "craw_connect_to_network": {.. "message": "P.ipojte se pros.m k s.ti.".. },.. "iap_unavailable": {.. "message": "Platby v aplikaci aktu.ln. nejsou k dispozici.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "P.ihlaste se do Chromu.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	624
Entropy (8bit):	4.5289746475384565
Encrypted:	false
SSDEEP:	12:1HEJJMKKFZGGJMKKFZ+WYpU34OHu+dgxlCZO8ZpU34J4Wu03OyZnLAOfTYzD:1HErMKfqMKVWYpM6lL8ZpDNOGAOfiD
MD5:	238B97A36E411E42FF37CEFAF2927ED1
SHA1:	4E47AC90BA24C8F4724D9293FA40CFD4ADA66FE0
SHA-256:	4977D4A053542FF66967FAED6B06585DD70E68E20BFEB533B66FE3287F9655D9
SHA-512:	FD0742D47B5F5AB9AAD9B4C3D57F63CB693E060EECE123A72036C6E92156D099495C7E9E9CC6DC83EEBCDDCC4B4C81FB47E4C9559DA3EBA024780FFF10C53E0A
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Betalinger i Chrome Webshop".. },.. "app_name": {.. "message": "Betalinger i Chrome Webshop".. },.. "craw_app_unavailable": {.. "message": "Appen er ikke tilg.ngelig i .jeblikket.".. },.. "craw_connect_to_network": {.. "message": "Opret forbindelse til et netv.rk.".. },.. "iap_unavailable": {.. "message": "Betaling i appen er ikke tilg.ngelig i .jeblikket.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Log ind p. Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	651
Entropy (8bit):	4.583694000020627
Encrypted:	false
SSDEEP:	12:1HEJQ1ZGGQ1Z+WYpU34pCEMT+dgJMlCTO8ZpU34p6FK603OyZnLAOfTYJ6K:1HEzWWYp3Bewv8Zp7k4OGAOfQj
MD5:	6B3E916E8C1991AA0453CBA00FEDCAAA
SHA1:	D6366D15912E40CA107FD42BFE9579C3336A51F9
SHA-256:	A62FFAB910E31531758EEE48B2CC71A8857BEC3021DEAD50B668CBA3C8667053
SHA-512:	87EA4311B61F29543B13F3E17DFA919D0C320B4FE370CC152E0B1514BCA79B0ABB526DDCF08621D6EBFA48923EE8FB4C667EFB120A72BD9583EEBEE7BFB80552
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Web Store-Zahlungen".. },.. "app_name": {.. "message": "Chrome Web Store-Zahlungen".. },.. "craw_app_unavailable": {.. "message": "Die App ist momentan nicht verf.gbar.".. },.. "craw_connect_to_network": {.. "message": "Bitte stellen Sie eine Verbindung zu einem Netzwerk her.".. },.. "iap_unavailable": {.. "message": "In-App-Zahlungen sind momentan nicht m.glich.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Bitte melden Sie sich in Chrome an.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	787
Entropy (8bit):	4.973349962793468
Encrypted:	false
SSDEEP:	24:1HEw+aZ+6WYpbWZe80A08ZpCGyDVWlOGAOf+XD:WguYpCZnpEZbGoD
MD5:	05C437A322C1148B5F78B2F341339147
SHA1:	AB53003A678E44A170E73711FBD9949833BBF3AA
SHA-256:	A052C32B4FCAC61152EB0ADB2C260FB6A8256AD104AA0013DB93E9798D41A070
SHA-512:	C36CB9202A34356DD06D377E2A088F428D0B8EBE7D2E54F8380485E9D94A0598D7F651C1E7A2FD55BE481D49C02B0812F2BA335E08611EC85EE0BD60784A6B40
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "........ ... Chrome Web Store".. },.. "app_name": {.. "message": "........ ... Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": ". ........ .... .. ..... ... ..... ..........".. },.. "craw_connect_to_network": {.. "message": ".......... .. ... .......".. },.. "iap_unavailable": {.. "message": ".. ........ ..... ......... ... ..... ..... .. ...... ...........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": ".......... ... Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	593
Entropy (8bit):	4.483686991119526
Encrypted:	false
SSDEEP:	12:1HEJ6GG6+WYpU34OuFpR+dgGfFZO8ZpU34aEGFpR03OyZnLAOfTYdD:1HEVSWYpVp0JS8Zp5KpaOGAOfuD
MD5:	91F5BC87FD478A007EC68C4E8ADF11AC
SHA1:	D07DD49E4EF3B36DAD7D038B7E999AE850C5BEF6
SHA-256:	92F1246C21DD5FD7266EBFD65798C61E403D01A816CC3CF780DB5C8AA2E3D9C9
SHA-512:	FDC2A29B04E67DDBBD8FB6E8D2443E46BADCB2B2FB3A850BBD6198CDCCC32EE0BD8A9769D929FEEFE84D1015145E6664AB5FEA114DF5A864CF963BF98A65FFD9
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Web Store Payments".. },.. "app_name": {.. "message": "Chrome Web Store Payments".. },.. "craw_app_unavailable": {.. "message": "App currently unavailable.".. },.. "craw_connect_to_network": {.. "message": "Please connect to a network.".. },.. "iap_unavailable": {.. "message": "In-App Payments is currently unavailable.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Please sign into Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\en_GB\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	593
Entropy (8bit):	4.483686991119526
Encrypted:	false
SSDEEP:	12:1HEJ6GG6+WYpU34OuFpR+dgGfFZO8ZpU34aEGFpR03OyZnLAOfTYdD:1HEVSWYpVp0JS8Zp5KpaOGAOfuD
MD5:	91F5BC87FD478A007EC68C4E8ADF11AC
SHA1:	D07DD49E4EF3B36DAD7D038B7E999AE850C5BEF6
SHA-256:	92F1246C21DD5FD7266EBFD65798C61E403D01A816CC3CF780DB5C8AA2E3D9C9
SHA-512:	FDC2A29B04E67DDBBD8FB6E8D2443E46BADCB2B2FB3A850BBD6198CDCCC32EE0BD8A9769D929FEEFE84D1015145E6664AB5FEA114DF5A864CF963BF98A65FFD9
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Web Store Payments".. },.. "app_name": {.. "message": "Chrome Web Store Payments".. },.. "craw_app_unavailable": {.. "message": "App currently unavailable.".. },.. "craw_connect_to_network": {.. "message": "Please connect to a network.".. },.. "iap_unavailable": {.. "message": "In-App Payments is currently unavailable.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Please sign into Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	661
Entropy (8bit):	4.450938335136508
Encrypted:	false
SSDEEP:	12:1HEJHlbGGHlb+WYpU34ubdDH+dgxbFxTO8ZpU34lPbdlVo03OyZnLAOfTY6xjD:1HEvaC6WYpcDeEFxq8ZpNl5OGAOffD
MD5:	82719BD3999AD66193A9B0BB525F97CD
SHA1:	41194D511F1ACC16C1CA828AC81C18C8C6B47287
SHA-256:	4DB9B2721E625C18B9E05C04B31AF5D9694712F1CAAF6219ABE34BB08E5DB1C7
SHA-512:	D4C49B43427799B6292CEED11CACB1D76F7CE43EBF402B43B638A6EB2B414ED0981E386CB8CDF0B51D1BD9552934FE25B2F6392266BB73D8C9A691F65BCE0128
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Esta aplicaci.n no est. disponible en este momento.".. },.. "craw_connect_to_network": {.. "message": "Con.ctate a una red.".. },.. "iap_unavailable": {.. "message": "Los pagos en la aplicaci.n no est.n disponibles en este momento.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Inicia sesi.n en Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	637
Entropy (8bit):	4.47253983486615
Encrypted:	false
SSDEEP:	12:1HEJHlbGGHlb+WYpU34ubdDH+dgxbFxTO8ZpU34GLO03OyZnLAOfTYiJD:1HEvaC6WYpcDeEFxq8Zp4LlOGAOfvD
MD5:	6B2583D8D1C147E36A69A88009CBEBC7
SHA1:	4D4DEEB4BE6AA0181825F3371A761ABC5B4D5937
SHA-256:	6659BC3705311D7641A73995DCFEA80C7734F2F4EBBC3787B3892A240348324F
SHA-512:	37F0DBFCC1B5A2B8E4C92C49D2D9DEEF25616421350324F57E0149A45A6CCB437F5E3CBE97412C4B5DBBF2593783C7DF71E9C25A851AEAE6E4764C545723FA53
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "app_name": {.. "message": "Sistema de pagos de Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Esta aplicaci.n no est. disponible en este momento.".. },.. "craw_connect_to_network": {.. "message": "Con.ctate a una red.".. },.. "iap_unavailable": {.. "message": "En este momento, Pagos En-Apps no est. disponible.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Accede a Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	595
Entropy (8bit):	4.467205425399467
Encrypted:	false
SSDEEP:	12:1HEJfPGGGfPG+WYpU34Ze7z+dgrW9O8ZpU34ZwZz03OyZnLAOfTYgoLIR:1HEdvqlWYpTeObk8ZpT/OGAOfuLIR
MD5:	CFF6CB76EC724B17C1BC920726CB35A7
SHA1:	14ED068251D65A840F00C05409D705259D329FFC
SHA-256:	C85800BF45942FCC7FD6B1DF929C25F9CC2A977A6678966BD03D4B6B69889AFD
SHA-512:	53D7D01BB30C0306DE65A79FD9551D2E8C1F71F4F45F71906B009071CB3E0F231E6A50FDD78773E9B4DE94085BC7B97F829842FA21A89A2080D33458B745C46F
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome'i veebipoe maksed".. },.. "app_name": {.. "message": "Chrome'i veebipoe maksed".. },.. "craw_app_unavailable": {.. "message": "Rakendus pole praegu saadaval.".. },.. "craw_connect_to_network": {.. "message": "Looge .hendus v.rguga.".. },.. "iap_unavailable": {.. "message": "Rakendusesisesed maksed ei ole praegu saadaval.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Logige Chrome'i sisse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	647
Entropy (8bit):	4.595421267152647
Encrypted:	false
SSDEEP:	12:1HEJRuzGGRuz+WYpU34ujSBu+dgYO8ZpU34J+Bu03OyZnLAOfTY5HN:1HEFcWYpPNa8ZpD+FOGAOfEHN
MD5:	3A01FEE829445C482D1721FF63153D16
SHA1:	F3EAAADDC03F943FC88B30B67F534AA13E3336DD
SHA-256:	0BDE54B20845124113383B6EB81E43A0F05E4EB0C44BEE3C1DFAC4CC5FEC2836
SHA-512:	3B92B6C86D30FD36AA3CEFF8773BA60C3FC5CC19C693540137044C5838A5503895C770C0336A4D0A3DB5E42F3FB36274D8D3F85B9DCA2F3EC0E974FDDB0BEAD8
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Web Storen maksut".. },.. "app_name": {.. "message": "Chrome Web Storen maksut".. },.. "craw_app_unavailable": {.. "message": "Sovellus ei ole t.ll. hetkell. k.ytett.viss..".. },.. "craw_connect_to_network": {.. "message": "Muodosta verkkoyhteys.".. },.. "iap_unavailable": {.. "message": "Sovelluksen sis.iset maksut eiv.t ole t.ll. hetkell. k.ytett.viss..".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Kirjaudu sis..n Chromeen.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	658
Entropy (8bit):	4.5231229502550745
Encrypted:	false
SSDEEP:	12:1HEJADlbGGADlb+WYpU34hTUT+dgHfZAFFZO8ZpU34hTjzeT03OyZnLAOfTYHfvF:1HEYah6WYp7TUSoxOS8Zp7TOsOGAOfqV
MD5:	57AF5B654270A945BDA8053A83353A06
SHA1:	EEEF7A4F869F97CF471A05D345E74F982D15E167
SHA-256:	EC002ED92359F67818B49455DFC579E140368E6A004080AF022FD4F57F6B03F2
SHA-512:	5F0AE839FCF3F4EA48FF41A76655AE0F3821564AFD5D42FBB9FBB9A38E8D8F7BB5E9B6F71064588CD441261F644095A44A755C134CE546D506D9A21E488BAF52
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Mga Pagbabayad sa Chrome Web Store".. },.. "app_name": {.. "message": "Mga Pagbabayad sa Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Kasalukuyang hindi available ang app.".. },.. "craw_connect_to_network": {.. "message": "Mangyaring kumonekta sa isang network.".. },.. "iap_unavailable": {.. "message": "Kasalukuyang hindi available ang Mga Pagbabayad na In-App.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Mangyaring mag-sign in sa Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	677
Entropy (8bit):	4.552569602149629
Encrypted:	false
SSDEEP:	12:1HEJALf/nbGGALf/nb+WYpU34Owdgbyb+dgdQjO8ZpU34ITQpGnbyb03OyZnLAO8:1HE4Hna1Hn6WYpNdgpY8ZpSTQwnBOGAh
MD5:	8D11C90F44A6585B57B933AB38D1FFF8
SHA1:	3F9D44EA8807069A32AACA2AAAD02FD892E6CC90
SHA-256:	599491F8C52B945C16C441ADF45BFD45AFAE046DA07757D97C56AF4DE75ED3B5
SHA-512:	D7EF7F5AD7EF1A1595825D79B69E2B1E988AD3CF1F3881496FCCD30F241E4E9C6E457F9F5D0F855DE3536DB7A40C3E1C55946B50D3F556F4A35285066A0CD6F7
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Paiements via le Chrome.Web.Store".. },.. "app_name": {.. "message": "Paiements via le Chrome.Web.Store".. },.. "craw_app_unavailable": {.. "message": "Application indisponible pour le moment.".. },.. "craw_connect_to_network": {.. "message": "Veuillez vous connecter . un r.seau.".. },.. "iap_unavailable": {.. "message": "Les paiements via l'application ne sont pas disponibles pour le moment.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Veuillez vous connecter . Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	835
Entropy (8bit):	4.791154467711985
Encrypted:	false
SSDEEP:	24:1HEs07J0JWYp9vnCSVLP8Zp6CsOGAOf8SLm:Wh7qgYp1CMLUph1GiSLm
MD5:	E376D757C8FD66AC70A7D2D49760B94E
SHA1:	1525C5B1312D409604F097768503298EC440CC4D
SHA-256:	8106D98C4F8DA16DB698444409558E29CC96735E188BFA303C333A5D99231C1D
SHA-512:	673F3F259AF2946E4F49BBED14A2A70D44BF9FDA9D7A71DC9172BA9B7B3C7F7062B16D29682B638D485B0520ED6F99E7A735F28C7C719B539559005B69FA7555
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome ... ..... ......".. },.. "app_name": {.. "message": "Chrome ... ..... ......".. },.. "craw_app_unavailable": {.. "message": "......... .. ... ...... .... ...".. },.. "craw_connect_to_network": {.. "message": "..... ....... .. ...... .....".. },.. "iap_unavailable": {.. "message": "..-.. ...... ... ...... .... ...".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "..... Chrome ... .... .. .....".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	618
Entropy (8bit):	4.56999230891419
Encrypted:	false
SSDEEP:	12:1HEJGiimxmbZGGGiimxmbZ+WYpU34OBOEuhopIO+dgcapZO8ZpU34GiiZrMrQphK:1HE4H4TH8WYpNjTta28ZpQVLP0SOGAOK
MD5:	8185D0490C86363602A137F9A261CC50
SHA1:	5BD933B874441CEACB9201CCC941FF67BAED6DC0
SHA-256:	A2B2EC359A9DD9DCCCE02859CE1E738BD30FAA4A05F1DC522893FFDF722BBC15
SHA-512:	D7629978FC031EA5F716F9C1065FB2FEAB48C15F10CD68830DC966FA1002C03DDC7ACDE314C7D075F9F3A0A68552A6ACBCCDEE24CF20B6C3DD1BCE6562D0396E
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pla.anja u web-trgovini Chrome".. },.. "app_name": {.. "message": "Pla.anja u web-trgovini Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplikacija trenuta.no nije dostupna.".. },.. "craw_connect_to_network": {.. "message": "Pove.ite se s mre.om.".. },.. "iap_unavailable": {.. "message": "Pla.anje u aplikaciji trenuta.no nije dostupno.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prijavite se na Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	683
Entropy (8bit):	4.675370843321512
Encrypted:	false
SSDEEP:	12:1HEJVJiGGVJi+WYpU34Hpo9O+dgMmfgijO8ZpU34Huo9O03OyZnLAOfTYBIAYm:1HEVrk5WYpQzTUg/8ZpwoXOGAOfYIAd
MD5:	85609CF8623582A8376C206556ED2131
SHA1:	1E16EB70DB5E59BB684866FF3E3925C2DEF25A12
SHA-256:	32A249749F12ADB6A220BF9ADC272C7E5D9AD5497A38B0086D961E3ABA17FBC6
SHA-512:	27883430865D3CFA6EDFE8C6CE1442BD96150B5CE520CCF7D556A330CAA6392C712B47BD86F7350E174876BC681F6DEC94D1312402655B0AF90883A2899EC78B
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Internetes .ruh.z Fizet.si rendszere".. },.. "app_name": {.. "message": "Chrome Internetes .ruh.z Fizet.si rendszere".. },.. "craw_app_unavailable": {.. "message": "Az alkalmaz.s jelenleg nem .rhet. el.".. },.. "craw_connect_to_network": {.. "message": "K.rj.k, csatlakozzon egy h.l.zathoz.".. },.. "iap_unavailable": {.. "message": "Az alkalmaz.son bel.li fizet.s jelenleg nem .rhet. el.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Jelentkezzen be a Chrome-ba.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	604
Entropy (8bit):	4.465685261172395
Encrypted:	false
SSDEEP:	12:1HEJs25bGGs25b+WYpU34ORBHAeSJ+dgkmO8ZpU34s22C/SzFAs03OyZnLAOfTYR:1HEBaA6WYpaHFH8ZptOYOGAOf2D
MD5:	EAB2B946D1232AB98137E760954003AA
SHA1:	60BDC2937905B311D2C9844DF2D639D7AC9F7F67
SHA-256:	C6E8800450602DE0F39FE9F6854472383813FB454B08ABAE7E25A9167CE004C3
SHA-512:	970FEC9A9EF0BAF7F693C4C5977F3B47914579C5B5414FCE9DBB5E4574659A5BB9AD2DE0CC886B368F49C019785AF7D2D7FE82F71341F039EADC399ED776CA12
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pembayaran Chrome Webstore".. },.. "app_name": {.. "message": "Pembayaran Chrome Webstore".. },.. "craw_app_unavailable": {.. "message": "Aplikasi tidak tersedia saat ini.".. },.. "craw_connect_to_network": {.. "message": "Sambungkan ke jaringan.".. },.. "iap_unavailable": {.. "message": "Pembayaran Dalam Aplikasi saat ini tidak tersedia.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Harap masuk ke Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	603
Entropy (8bit):	4.479418964635223
Encrypted:	false
SSDEEP:	12:1HEJsqd/bGGsqd/b+WYpU34OcX4+dgUvIO8ZpU34vq703OyZnLAOfTYsD:1HEXd/aKd/6WYpZrv58ZpskOGAOfzD
MD5:	A328EEF5E841E0C72D3CD7366899C5C8
SHA1:	2851ED658385804E87911643F5A4200B1FB26E13
SHA-256:	CD891C45F7586FB4A2514205A11F260E4A6D4482FA03D901909DD9F57BE0536D
SHA-512:	E47297896E981774EC3B59D41B89D6BA9333F6B4435EB9727D8645A46B10C7D408ADE06844871FA757382FBE7E645276449DB7B1B23BC59C9A71A5CB5A5ECC57
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pagamenti Chrome Web Store".. },.. "app_name": {.. "message": "Pagamenti Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "App al momento non disponibile.".. },.. "craw_connect_to_network": {.. "message": "Collegati a una rete.".. },.. "iap_unavailable": {.. "message": "La funzione Pagamenti In-App non . al momento disponibile.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Accedi a Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	697
Entropy (8bit):	5.20469020877498
Encrypted:	false
SSDEEP:	12:1HEJ07uGG07u+WYpU34DB+dgnsVztO8ZpU34MwiB03OyZnLAOfTYmSH:1HEcnDNWYp1kxU8Zp2wiqOGAOfpSH
MD5:	9B3A5D473C3F2BBFAEECE94A07A940B8
SHA1:	61BACA342CF766BBA15C7B4D892A0E7DAC9405AA
SHA-256:	706312A4A2AEF3317223F141EB2B82685345B7EED444F16BB4DF3A272716DA1F
SHA-512:	94F6FEE9A11BD890AB8211C98D1CC142348961EBCF756F66477A3E3A76519804B70BE0AE4E551739F8AFE32D7ADE6EDE04EF6B9B9EED03E3A857E6058EEDD4C6
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome ........".. },.. "app_name": {.. "message": "Chrome ........".. },.. "craw_app_unavailable": {.. "message": ".................".. },.. "craw_connect_to_network": {.. "message": "................".. },.. "iap_unavailable": {.. "message": ".......................".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Chrome ............".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	631
Entropy (8bit):	5.160315577642469
Encrypted:	false
SSDEEP:	12:1HEJ1GG1+WYpU34K3aT+dgh8d0HTO8ZpU34KaNkaT03OyZnLAOfTY/YeHx:1HEajWYpc3aSl0Hq8Zpc6kasOGAOfyYA
MD5:	9F6B4D82A70C74CA751E2EAE70FAB5CF
SHA1:	0534F125FFCE8222277CF2BE3401C59DAF9217F8
SHA-256:	D1467B8D037114403E8F4EFC52E88C4A7FEB96126BE4CFF883FEFF1084EF7E68
SHA-512:	ED9319830314385D09C06F62EE34186E8CA576C857981205E4468A28B3ACD2AB03384E77B866032C324ABDD97A56EFD08E2D6E0C79D563578B3EC52517819BD8
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome . ... ..".. },.. "app_name": {.. "message": "Chrome . ... ..".. },.. "craw_app_unavailable": {.. "message": ".. .. ... . .....".. },.. "craw_connect_to_network": {.. "message": "..... ......".. },.. "iap_unavailable": {.. "message": ".. .. ... ... . .....".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Chrome. .......".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	665
Entropy (8bit):	4.66839186029557
Encrypted:	false
SSDEEP:	12:1HEJpqHnkGGpqHnk+WYpU346M+dgV6O8ZpU34WzSWz03OyZnLAOfTYx:1HELqHtKqHPWYpM3A8ZpwGzOGAOfg
MD5:	4CA644F875606986A9898D04BDAE3EA5
SHA1:	722A10569E93975129D67FBDB75B537D9D622AD1
SHA-256:	7C311AB751D840D750C11553C083785813E079C1D464FE568A98C9E3EF3DB96C
SHA-512:	E575E3D0622F5BD4B6C0EE79128A1B1F1882195670139D1983F4377D847141B8FB8EBB8BCED82AF3A220ED07D3577AFBE085BADC0E9C7678292B80E3EC5D3444
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": ".Chrome. internetin.s parduotuv.s mok.jimo sistema".. },.. "app_name": {.. "message": ".Chrome. internetin.s parduotuv.s mok.jimo sistema".. },.. "craw_app_unavailable": {.. "message": "Programa .iuo metu negalima.".. },.. "craw_connect_to_network": {.. "message": "Prisijunkite prie tinklo.".. },.. "iap_unavailable": {.. "message": "Mok.jimai programoje .iuo metu negalimi.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prisijunkite prie .Chrome..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	671
Entropy (8bit):	4.631774066483956
Encrypted:	false
SSDEEP:	12:1HEJFhVbGGFhVb+WYpU34wDoz+dgGedBO8ZpU34wF03OyZnLAOfTYGYID:1HENQKkWYp2Doy/em8Zp2WOGAOfRYID
MD5:	C5CE2C51391EAFD3DA9E4C71549A3C28
SHA1:	1F67FF6EF6E90C0CE3AAF56ED543A3EFD381574D
SHA-256:	1FA1DF2CA8516DEF490FB8484E9AA498ACFF80EEF5C9258FFE42D3678E6C7DED
SHA-512:	C85F6281E682F52BC2147DEA7E2F3BB4DC48D98BADA8687B05C6C7271C78EA7F5431CD51671A4184C9AE004FC53C016E3C594697F483195CCBA08A93821EEF70
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome interneta veikala maks.jumu sist.ma".. },.. "app_name": {.. "message": "Chrome interneta veikala maks.jumu sist.ma".. },.. "craw_app_unavailable": {.. "message": "Lietotne pagaid.m nav pieejama.".. },.. "craw_connect_to_network": {.. "message": "L.dzu, izveidojiet savienojumu ar t.klu.".. },.. "iap_unavailable": {.. "message": "Maks.jumi lietotn.s pa.laik nav pieejami.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "L.dzu, pierakstieties p.rl.k. Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\nb\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	624
Entropy (8bit):	4.555032032637389
Encrypted:	false
SSDEEP:	12:1HEJhiOGGhiO+WYpU34OHSN+dgFjdGFZO8ZpU34JgdN03OyZnLAOfTYiD:1HEDiHIitWYpCYJ8ZpD1OGAOfRD
MD5:	93C459A23BC6953FF744C35920CD2AF9
SHA1:	162F884972103A08ADB616A7EB3598431A2924C5
SHA-256:	2CD700AEB57D89C2E73333D0702556EE3FF3863516170F85669BC680FCBDC4E0
SHA-512:	F76E6E8D8499306883C3EC1E774F7E8BB6B601096DA5A14D17D3E7D5732829542041E42B7350466589291ADCC83FB065FD591B4E20CFCF8EDC586E128ECBFCB5
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Nettmarked-betalinger".. },.. "app_name": {.. "message": "Chrome Nettmarked-betalinger".. },.. "craw_app_unavailable": {.. "message": "Appen er utilgjengelig for .yeblikket.".. },.. "craw_connect_to_network": {.. "message": "Du m. koble til et nettverk.".. },.. "iap_unavailable": {.. "message": "Betaling i app er ikke tilgjengelig for .yeblikket.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Du m. logge p. Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	615
Entropy (8bit):	4.4715318546237315
Encrypted:	false
SSDEEP:	12:1HEJJQGkbGGJQGkb+WYpU34OQKJT+dgiXUmvFZO8ZpU34g7JT03OyZnLAOfTYMD:1HErxkaqxk6WYptndXI8ZpTOGAOfbD
MD5:	7A8F9D0249C680F64DEC7650A432BD57
SHA1:	53477198AEE389F6580921B4876719B400A23CA1
SHA-256:	92BE7C2DC9CFBE5A65E9CE6488D364C8D7EC19E7B67A31E4D43C1CB2B169671C
SHA-512:	969AB979546A741C0F3EDBEEB21BABA375FA8870D4FB9248CDD4C305736E332E10CAB7B64C5C078E60EC0CD73848101B390BE8F44B89C310058AF4C1CA3C8AA7
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Betalingen via Chrome Web Store".. },.. "app_name": {.. "message": "Betalingen via Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "App momenteel niet beschikbaar.".. },.. "craw_connect_to_network": {.. "message": "Maak verbinding met een netwerk.".. },.. "iap_unavailable": {.. "message": "In-app-betalingen is momenteel niet beschikbaar.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Log in bij Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	636
Entropy (8bit):	4.646901997539488
Encrypted:	false
SSDEEP:	12:1HEJbiVbGGbiVb+WYpU34OBHlBi9+dgQUg6O8ZpU34bdbfiIu03OyZnLAOfTYR5k:1HE5iVauiV6WYpIAYr8ZpxFiaOGAOfIC
MD5:	0E6194126AFCCD1E3098D276A7400175
SHA1:	E8127B905A640B1C46362FA6E1127BE172F4A40F
SHA-256:	E2699F98C511B18A2AFB82EAE9A4804B646C4FF1077D80E77C17A3943A6373C2
SHA-512:	A71F7C7BFBBF1E37E699601AF2E095C56CBA91F90CB7556477DF31D01B83ADFB1271E1775C9BA299FF6875BBFC2B6AB47488CC88E33DEF2F6F2E0E5AC687B777
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "P.atno.ci w sklepie Chrome Web Store".. },.. "app_name": {.. "message": "P.atno.ci w sklepie Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Aplikacja jest obecnie niedost.pna.".. },.. "craw_connect_to_network": {.. "message": "Po..cz si. z sieci..".. },.. "iap_unavailable": {.. "message": "P.atno.ci w ramach aplikacji s. teraz niedost.pne.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Zaloguj si. w Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	636
Entropy (8bit):	4.515158874306633
Encrypted:	false
SSDEEP:	12:1HEJsc/bGGsc/b+WYpU34OLw+dgn/KzO8ZpU34FjIBMwGRO03OyZnLAOfTYN+KcY:1HEb/a8/6WYp4mZ8Zp7cKlOGAOf2tD
MD5:	86A2B91FA18B867209024C522ED665D5
SHA1:	63DEC245637818C76655E01FCB6D59784BC7184E
SHA-256:	6374880FDD1F8AF1EE8AEA6A06B73BE0AB265AFCEB4FE6F08BDE3B3989264B21
SHA-512:	DA6DBDE5028756421C2904F605632EE98831A25A1247E6238A931629B94CE8A00FD76F4235F118D2167304BD60F2C06B2AD78E54FF6CE53F8C38DF8C7B5AFCE4
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pagamentos da Chrome Web Store".. },.. "app_name": {.. "message": "Pagamentos da Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Aplicativo indispon.vel no momento.".. },.. "craw_connect_to_network": {.. "message": "Conecte-se a uma rede.".. },.. "iap_unavailable": {.. "message": "No momento, os Pagamentos no aplicativo n.o est.o dispon.veis.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Fa.a login no Google Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	622
Entropy (8bit):	4.526171498622949
Encrypted:	false
SSDEEP:	12:1HEJsZUkbGGsZUkb+WYpU34OAE+dgqxKzO8ZpU34rEpBfvPO03OyZnLAOfTYLD:1HEmUka5Uk6WYpFvdxZ8ZpSTnPlOGAOS
MD5:	750A4800EDB93FBE56495963F9FB3B94
SHA1:	8BFB915488A4EB3CB33D68E2E59F1F8447DB7D61
SHA-256:	C1C94F65FABAF17DEF98A8587711A56D61B1E5607500E9B01F2824DB109F9E83
SHA-512:	2AEDEF5793406221BE76AF22031CE8C30AB5FAEAED09BB394C153E2EBE990C89C1A2A73B40D8A92842641AFCA8C77FFD808A2058602D3646FD8DAE2844406F24
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pagamentos via Chrome Web Store".. },.. "app_name": {.. "message": "Pagamentos via Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Aplica..o atualmente indispon.vel.".. },.. "craw_connect_to_network": {.. "message": "Ligue-se a uma rede.".. },.. "iap_unavailable": {.. "message": "Os Pagamentos na app est.o atualmente indispon.veis.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Inicie sess.o no Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	641
Entropy (8bit):	4.61125938671415
Encrypted:	false
SSDEEP:	12:1HEJqJrJZGGqJrJZ+WYpU344HIx2Z+dgrVPlZO8ZpU34qT7hI3O03OyZnLAOfTYU:1HEC4D8WYpKow8WV68ZpKhoOGAOfoVGD
MD5:	98D43E4B1054A65DF3FA3CC40AB6FB6D
SHA1:	46E0A21C4DA2BB5D4D8F837AE211C1B6FA26E7E2
SHA-256:	113A13900CBA62FE8AED06751971C23A80A99B47F9BE219CF884D57DB19611D9
SHA-512:	A76DC53912A4F46714926B9EA2B22E909540E447F61F6DD72607AB7B3BB5D4A9B39E525B04C33AEC53BA813D14AC1FB5827275B2524E52B693E83171E1CD1466
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pl..i prin Magazinul web Chrome".. },.. "app_name": {.. "message": "Pl..i prin Magazinul web Chrome".. },.. "craw_app_unavailable": {.. "message": ".n prezent, aplica.ia nu este disponibil..".. },.. "craw_connect_to_network": {.. "message": "Conecteaz.-te la o re.ea.".. },.. "iap_unavailable": {.. "message": "Pl..ile .n aplica.ie nu sunt disponibile momentan.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Conecteaz.-te la Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	744
Entropy (8bit):	4.918620852166656
Encrypted:	false
SSDEEP:	12:1HEJ7OJHZMSl3ZGG7OJHZMSl3Z+WYpU34zWJ2F+dgVtLSv/TO8ZpU347NWjT03On:1HElOJHZMq4uOJHZMq8WYpdWJ/YGHq8m
MD5:	DB2EDF1465946C06BD95C71A1E13AE64
SHA1:	FB4F3ECE9ECECEBBC6CA2A592A15FB9C1FDFB811
SHA-256:	FBAF22CE6E16DE174CED8CB5EA3098CCA1C3426A2111FF33BD3E64DA64ED67AB
SHA-512:	4E0CF00BAEF1757548DEB17BBE1AF55770A0A0F7351779EF55C7DEFA6D112D0227B8865C2C22E0EC62E6E2F1C8E1632A2D0CE6828D25C5ABBF143C990116F632
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "......... ....... ........-........ Chrome".. },.. "app_name": {.. "message": "......... ....... ........-........ Chrome".. },.. "craw_app_unavailable": {.. "message": ".......... ...........".. },.. "craw_connect_to_network": {.. "message": "............ . .....".. },.. "iap_unavailable": {.. "message": "....... ..... .......... ...........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "....... . Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	647
Entropy (8bit):	4.640777810668463
Encrypted:	false
SSDEEP:	12:1HEJfZGGfZ+WYpU34ORO+dgmmCO8ZpU34yH7u2Z03OyZnLAOfTYCUAi0D:1HEl4G8WYpetPmD8ZpcH7aOGAOfzUeD
MD5:	8DF215D1EFBDABB175CCDD68ED8DCB0A
SHA1:	2B374462137A38589A73FDD00A84CBDC7E50F9F4
SHA-256:	7FA16AF97E6CFC52EC6008EB679D3F30E7E0C24F9EF2D18A9228EAF4DED9D63B
SHA-512:	C0E623343BDAEB4731800D183B59F2FCFE285F0C7153EC99641FD84F2F2DCFE47D21E73F3D28B1240340453C5668EB0AFFBE087AAB62F1C88CD2A40CC44E599D
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "app_name": {.. "message": "Platby Internetov.ho obchodu Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplik.cia moment.lne nie je dostupn..".. },.. "craw_connect_to_network": {.. "message": "Pripojte sa k sieti.".. },.. "iap_unavailable": {.. "message": "Platby v aplik.cii moment.lne nie s. k dispoz.cii.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prihl.ste sa do prehliada.a Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	617
Entropy (8bit):	4.5101656584816885
Encrypted:	false
SSDEEP:	12:1HEJGcyvmbZGGGcyvmbZ+WYpU34OBOEtf+dgca1ZO8ZpU34GcQArERff03OyZnLh:1HE4cyY4TcyY8WYpNoWa1w8ZpQcQ6AfK
MD5:	3943FA2A647AECEDFD685408B27139EE
SHA1:	0129DD19D28373359530B3B477FE8A9279DABB7D
SHA-256:	18AFF072EE0DF7C3495045435C752A805606E6D5D462EF2321C443F1773F4B3A
SHA-512:	42E62B3855611FF2E1D39C11404CB1A09825EE4CA6A8ACB3FF538B4574388F549E3BD79137DD4DC128A8DC44DD270D7D878E4AAD20DA8250A5C25297B0DEC09D
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Pla.ila v spletni trgovini Chrome".. },.. "app_name": {.. "message": "Pla.ila v spletni trgovini Chrome".. },.. "craw_app_unavailable": {.. "message": "Aplikacija trenutno ni na voljo.".. },.. "craw_connect_to_network": {.. "message": "Pove.ite se z omre.jem.".. },.. "iap_unavailable": {.. "message": "Pla.ila v aplikacijah trenutno niso na voljo.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Prijavite se v Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	743
Entropy (8bit):	4.913927107235852
Encrypted:	false
SSDEEP:	12:1HEJssbdOGGssbdO+WYpU347xBP+dgcucO8ZpU34s1muP03OyZnLAOfTYzDYD:1HEKsb59sbTWYplx4Xud8Zpy1mNOGAOv
MD5:	D485DF17F085B6A37125694F85646FD0
SHA1:	24D51D8642CDC6EFD5D8D7A4430232D8CDE25108
SHA-256:	7FFDE34C58E7C376C042DE64DEF6481DAE32BE8B70F0B18EDF536290CBE0C818
SHA-512:	0DDECFD860E99290B6C3AAA04F510272AE081CF2D93ED5832D9D6378EC9D36177FFBE213471247FB94721EA34A83E7665669200047091D0FDE134E3D763217E7
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "....... . Chrome ...-..........".. },.. "app_name": {.. "message": "....... . Chrome ...-..........".. },.. "craw_app_unavailable": {.. "message": ".......... .. ........ ...........".. },.. "craw_connect_to_network": {.. "message": "........ .. .......".. },.. "iap_unavailable": {.. "message": "....... . .......... .. ........ ...........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "......... .. . Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	630
Entropy (8bit):	4.52964089437422
Encrypted:	false
SSDEEP:	12:1HEJJMkbGGJMkb+WYpU34OACwz+dgNPGFZO8ZpU34JgpXLSb03OyZnLAOfTYLdID:1HErMkaqMk6WYpTOcb8ZpDgdZOGAOf8Y
MD5:	D372B8204EB743E16F45C7CBD3CAAF37
SHA1:	C96C57219D292B01016B37DCF82E7C79AD0DD1E8
SHA-256:	B8BA77E0089B0676545EC16D32468B727812B444F90B33A7A5B748E6C36C4388
SHA-512:	33640529E0D5DCC5CA4BDB0615A2818E8D26C6FCB7B3474C08AC3EB67B9DB40E1F0A79954ED20728CD47A686D2533DCBC76ABCBDB917F8530C8DE8BBA687352E
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Betalning via Chrome Web Store".. },.. "app_name": {.. "message": "Betalning via Chrome Web Store".. },.. "craw_app_unavailable": {.. "message": "Appen .r inte tillg.nglig f.r tillf.llet.".. },.. "craw_connect_to_network": {.. "message": "Anslut till ett n.tverk.".. },.. "iap_unavailable": {.. "message": "Betalning i appen .r inte tillg.ngligt f.r n.rvarande.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Logga in i Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	945
Entropy (8bit):	4.801079428724355
Encrypted:	false
SSDEEP:	24:1HEKa1dDa1/WYp6UFi72SmlG8ZpyactrW2SAOGAOfvSLD:WK2DNYp6U4y3bpyLxwGFW
MD5:	83E2D1E97791A4B2C5C69926EFB629C9
SHA1:	429600425CB0F196DDD717F940E94DBD8BFF2837
SHA-256:	2FECA577F43D97BAEEA464741D585892103585208FD0A935B810A03BDCE83C88
SHA-512:	60A5928DAA8CB4341487F477C56B5A98B83EDE50E5F4F55A802E01FDDAB86F3E795D391953D3D9214552D14D3F58C5A183693C613720FC12FC387D7B8F9B9AB6
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "............... Chrome .........".. },.. "app_name": {.. "message": "............... Chrome .........".. },.. "craw_app_unavailable": {.. "message": ".............................".. },.. "craw_connect_to_network": {.. "message": ".........................".. },.. "iap_unavailable": {.. "message": "...............................................".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "................. Chrome".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	631
Entropy (8bit):	4.710869622361971
Encrypted:	false
SSDEEP:	12:1HEJ9Y8GG9Y8+WYpU34wWT+dgGb0GO8ZpU34wryd7T03OyZnLAOfTYGbPKG:1HE0jWYpyRnG8Zpyr/OGAOfFPn
MD5:	2CEAE0567B6BB1D240BBAD690A98CA3B
SHA1:	5944346FBD4A0797B13223895995CAB58E9ECD23
SHA-256:	A7CB86F30C9C31FE5540282C308BA96ADB4EC16EF98C87129EB88105E5BEF5FC
SHA-512:	108A07C6D03D7178E8D0FFEF5349E0249A898D864964FED8757BD8A08BC1C6D9613F2A6C01AA34A6606127D1C6CE14C229FA02586677DBB060B85E3E845950E1
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome Web Ma.azas. .demeleri".. },.. "app_name": {.. "message": "Chrome Web Ma.azas. .demeleri".. },.. "craw_app_unavailable": {.. "message": "Uygulama .u anda kullan.lam.yor.".. },.. "craw_connect_to_network": {.. "message": "L.tfen bir a.a ba.lan.n.".. },.. "iap_unavailable": {.. "message": "Uygulama ..i .demeler .u anda kullan.lamaz.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "L.tfen Chrome'da oturum a..n.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	720
Entropy (8bit):	4.977397623063544
Encrypted:	false
SSDEEP:	12:1HEJ7wILkSlXZGG7wILkSlXZ+WYpU34zb1Oy2P+dgSV1EjiTO8ZpU347qtfP2CTW:1HElwEkK4uwEkK8WYpd/dTV1e8Zptq5S
MD5:	AB0B56120E6B38C42CC3612BE948EF50
SHA1:	8B3F520E5713D9F116D68E71DAEED1F6E8D74629
SHA-256:	68ABA284751EB9C856032062EF9B1651E2A1E5CE5FDA0977FFC97D63BA7BED9E
SHA-512:	CD852A58217F739C1CD58567FF432D31A7AD3F68C884ABBA1DA95799BCD1545C6A5D3B06F319681C12B78AD0A709828DE4B22736316F148D21F5DB76A5BCCBEF
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "....... ...-........ Chrome".. },.. "app_name": {.. "message": "....... ...-........ Chrome".. },.. "craw_app_unavailable": {.. "message": "........ ......... ...........".. },.. "craw_connect_to_network": {.. "message": "............. .. .......".. },.. "iap_unavailable": {.. "message": "....... ..... ........ ..... .. .........".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "........ . Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	695
Entropy (8bit):	4.855375139026009
Encrypted:	false
SSDEEP:	12:1HEJMAZrSFZGGMAZrSFZ+WYpU34WFHoz+dgdklzoO8ZpU34NFHoz03OyZnLAOfTU:1HEI4B8WYpAKytFZ8ZpXKMOGAOfd6D
MD5:	7EBB677FEAD8557D3676505225A7249A
SHA1:	F161B4B6001AEAEAB246FF8987F4D992B48D47BE
SHA-256:	051F96ED874C11C4A13589B5F68964E4F5B03B52DDA223D56524F2CA23760C04
SHA-512:	74FD267CF7E299FB8E7054605C3F651F057F676FF865082FA24F4916755456768DB0DA62DBC515D829B48AB1F9CFC8AD3E841DCBF1F194D5CB14C5335A192A0D
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Thanh to.n tr.n c.a h.ng Chrome tr.c tuy.n".. },.. "app_name": {.. "message": "Thanh to.n tr.n c.a h.ng Chrome tr.c tuy.n".. },.. "craw_app_unavailable": {.. "message": ".ng d.ng hi.n kh.ng kh. d.ng.".. },.. "craw_connect_to_network": {.. "message": "Vui l.ng k.t n.i v.i m.ng.".. },.. "iap_unavailable": {.. "message": "Thanh to.n trong .ng d.ng hi.n kh.ng kh. d.ng.".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "Vui l.ng ..ng nh.p v.o Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	595
Entropy (8bit):	5.210259193489374
Encrypted:	false
SSDEEP:	12:1HEJ01GG01+WYpU34zeHz+dgfO8ZpU34YKiO03OyZnLAOfTYB6U:1HEpIWYpISv8Zp+JOGAOfa6U
MD5:	BB73BF561BB79F89D9BF7C67C5AE5C65
SHA1:	2FADD3A1959B29C44830033A35C637D0311A8C9C
SHA-256:	D804F2A040D21D7511EFD5213D8E1721D64964A1A0DBB48E21622CEEDC9D967E
SHA-512:	627D44CEF1FE5C5ABD598BD47FF5E22B9EFC1CF98DDE3868FA9E5896C134A0C9C055AC34EDDADAE56B6690E51AEA89965D38F770552A85C732CC796795DC68D2
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome .........".. },.. "app_name": {.. "message": "Chrome .........".. },.. "craw_app_unavailable": {.. "message": ".........".. },.. "craw_connect_to_network": {.. "message": ".......".. },.. "iap_unavailable": {.. "message": "............".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "... Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	634
Entropy (8bit):	5.386215984611281
Encrypted:	false
SSDEEP:	12:1HEJ2j62GG2j62+WYpU34m7T+dgc8nOO8ZpU34mvIO03OyZnLAOfTYAuH:1HEuSZCWYpsStwP8ZpROGAOfCH
MD5:	5FF50C673CC0C661D615F0CFD0E6DCA0
SHA1:	60DFF98DEAB9C4746B288BDD9C94B3BCAE5EAA85
SHA-256:	C6F8C640F3353A7B9B1432A0C139C1AEEC40133800E6C9B467B63991AD660308
SHA-512:	361D62D91F4931C5F34092C9F2C6A5323D5EEB82A24E7ABE11F7817D8D66341C0ECAD4DCB4B10873920C8D6A3CC9F5704889E178EB2549001A9F62BEDF6C8019
Malicious:	false
Reputation:	low
Preview:	{.. "app_description": {.. "message": "Chrome ............".. },.. "app_name": {.. "message": "Chrome ............".. },.. "craw_app_unavailable": {.. "message": ".............".. },.. "craw_connect_to_network": {.. "message": "......".. },.. "iap_unavailable": {.. "message": "................".. },.. "jwt_retrieve_failed": {.. "message": "The transaction could not be completed.".. },.. "please_sign_in": {.. "message": "... Chrome.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	7780
Entropy (8bit):	5.791315351651491
Encrypted:	false
SSDEEP:	192:RktDNJ2UzsL5KcASyoH+CouKP/iNGRo/oRHMIT:AZQflcsU
MD5:	0834821960CB5C6E9D477AEF649CB2E4
SHA1:	7D25F027D7CEE9E94E9CBDEE1F9220C8D20A1588
SHA-256:	52A24FA2FB3BCB18D9D8571AE385C4A830FF98CE4C18384D40A84EA7F6BA7F69
SHA-512:	9AEAFC3ECE295678242D81D71804E370900A6D4C6A618C5A81CACD869B84346FEAC92189E01718A7BB5C8226E9BE88B063D2ECE7CB0C84F17BB1AF3C5B1A3FC4
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJfbG9jYWxlcy9iZy9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiZHUtdGRPdUNWcmxDY254Q0poRkg2NXpLU05vb1RiUE56bDNHbzdRMGJ3SSJ9LHsicGF0aCI6Il9sb2NhbGVzL2NhL21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJ6ZGtWaF9XdkxJWlhkck5xWHBvSHNRMGh1ZGtSM2d1QlMzb2VsTEZLNklVIn0seyJwYXRoIjoiX2xvY2FsZXMvY3MvbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6Ik9nUkNIZlVoam9xOU93NHFfaEhvTTQxNzNMelJyYkVpUVdsRXNRSzhscFkifSx7InBhdGgiOiJfbG9jYWxlcy9kYS9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiN2JVWW1LYkhQUUNRMXBGcmUzTHJySEhwWk9xN1c2Zk5hT0laWmdKUERTTSJ9LHsicGF0aCI6Il9sb2NhbGVzL2RlL21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJOV3FkU3Rfc1NFMm9KT2VuSUZtM0pMRm9iOGtBZ3ZTa3RtZGpCRGJWazdBIn0seyJwYXRoIjoiX2xvY2FsZXMvZWwvbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6ImgyaEZ0YUJoLXJQUEtoUm00QkFWM0VEZmhFbnh5MElGOVhYT3Z0aHhlNjAifSx7InBhdGgiOiJfbG9jYWxlcy9lbi9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoid0pSZDFmM3NxMERFVTJHLXd

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\craw_background.js

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	544643
Entropy (8bit):	5.385396177420207
Encrypted:	false
SSDEEP:	6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
MD5:	6EEBED29E6A6301E92A9B8B347807F5F
SHA1:	65DFB69B650560551110B33DCBA50B25E5B876DE
SHA-256:	04CD9494B0ED83924DAD12202630B20D053D9E2819C8E826A386C814CC0A1697
SHA-512:	FEDE6DB31F2AD242E7BC7B52A8859BA7F466A0B920A8DADCB32DCFB5B2A2742E98B767FF22E0C5BC5C11FEC021240AA9E458486C9039EB4EBE5CF6AF7BE97BF2
Malicious:	false
Reputation:	low
Preview:	/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var d,e=e\|\|{};e.scope={};e.arrayIteratorImpl=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};e.arrayIterator=function(a){return{next:e.arrayIteratorImpl(a)}};e.ASSUME_ES5=!1;e.ASSUME_NO_NATIVE_MAP=!1;e.ASSUME_NO_NATIVE_SET=!1;e.SIMPLE_FROUND_POLYFILL=!1;e.ISOLATE_POLYFILLS=!1;e.FORCE_POLYFILL_PROMISE=!1;e.FORCE_POLYFILL_PROMISE_WHEN_NO_UNHANDLED_REJECTION=!1;.e.defineProperty=e.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};e.getGlobal=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");};e.global=e.getGlobal(this);.e.IS_SYMBOL_NATIVE="func

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\craw_window.js

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	261316
Entropy (8bit):	5.444466092380538
Encrypted:	false
SSDEEP:	3072:I5vU7I6s2M9duIWFCbmYJ4tnFWdqpMad2vywhIp81QFv9F9nNsZgiDdOFlV/mZmc:I5vqFCb2p8Gx9FNNsZ9Dd/ceR
MD5:	1709B6F00A136241185161AA3DF46A06
SHA1:	33DA7D262FFED1A5C2D85B7390E9DBC830CBE494
SHA-256:	5721A4B3F8E09C869A629EFFD350B51C9D46F0AC136717D4DB6265C0EE6F9AC8
SHA-512:	26835B4C050F53AD2DDB84469DF9A84BBB2786A655AB52DFC20B54BEDCB81D1ECD789198D5B7D8B940242E5CEAC818A177444D402397AE82C203438C4B1D19CB
Malicious:	false
Reputation:	low
Preview:	/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var b,k=k\|\|{};k.scope={};k.createTemplateTagFirstArg=function(a){return a.raw=a};k.createTemplateTagFirstArgWithRaw=function(a,c){a.raw=c;return a};k.arrayIteratorImpl=function(a){var c=0;return function(){return c<a.length?{done:!1,value:a[c++]}:{done:!0}}};k.arrayIterator=function(a){return{next:k.arrayIteratorImpl(a)}};k.makeIterator=function(a){var c="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return c?c.call(a):k.arrayIterator(a)};.k.arrayFromIterator=function(a){for(var c,d=[];!(c=a.next()).done;)d.push(c.value);return d};k.arrayFromIterable=function(a){return a instanceof Array?a:k.arrayFromIterator(k.makeIterator(a))};k.ASSUME_ES5=!1;k.ASSUME_NO_NATIVE_MAP=!1;k.ASSUME_NO_NATIVE_SET=!1;k.SIMPLE_FROUND_POLYFILL=!1;k.ISOLATE_POLYFILLS=!1;k.FORCE_POLYFILL_PROMISE=!1;k.FORCE_POLYFILL_PROMISE_WHEN_NO_UNHANDLED_REJECTION=!1;.k.objectCreate=k.ASSUME_ES5\|\|"function"==typeof Object.cre

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\css\craw_window.css

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1741
Entropy (8bit):	4.912380256743454
Encrypted:	false
SSDEEP:	24:LalZ74H+rMwJHwIodHRmxt3jiu1iu1RDpfeWlMl548wJHwDwCapt/VMYXj8Eq27K:Z+rMm71le88S1tWYXmrVZFH
MD5:	67BF9AABE17541852F9DDFF8245096CD
SHA1:	A4AC74DD258E8E0689034FAA1B15A5C7C56DC3BB
SHA-256:	10DFBD2D98950B79EE12F6B8E3885AABE31543048DE56AD4FC0A5E34D0D9D4EC
SHA-512:	298FA132C6F122798FDB9BC6DE8024915147ADC20355B56A92F0ED9ACCE4549BE6E7F42212E07DCA166E31624D4E66E299565845D4BA1C51CA935050641B61FE
Malicious:	false
Reputation:	low
Preview:	html, body {. margin: 0;. overflow: hidden;.}..webview {. width: 100%;. height: 100%;. min-height: 100%;. position: absolute;.}...craw_overlay {. position: absolute;.. left: 0;. top: 0;. right: 0;. bottom: 0;.. background-color: white;.. -webkit-transition: opacity 250ms linear;.. display: -webkit-flex;. -webkit-flex-direction: column;. -webkit-flex: 1 0%;. -webkit-align-items: center;. -webkit-justify-content: center;.. -webkit-app-region: drag;.}...craw_overlay img {. margin: 16px;.}..#loading_overlay {. opacity: 1;.}..#offline_overlay {. opacity: 0;. display: none;.}..#offline_overlay > img {. -webkit-filter: saturate(0%);.}..#offline_overlay > span {. font-family: 'Open Sans', 'Deja Vu Sans', Arial, sans-serif;. font-size: 15px;. line-height: 21px;. color: #8d8d8d;. display: block;.}..#loading_splash {. width: 128px;. height: 128px;.}..#drag_overlay {. position: absolute;. left: 0;. top: 0;. right: 0;. bottom: 0;. pointer-events: none;. -webkit

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\html\craw_window.html

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	810
Entropy (8bit):	4.723481385335562
Encrypted:	false
SSDEEP:	12:hYenuEJIig5fRpvV4AEdN2sAAuzg/7RwQuLYpUH9KfRnQBGgZKy3QGgjPSWZDQL:hYeLJKTVNEuLAuzg/twQucpS9bj3
MD5:	34A839BC40DEBC746BBD181D9EF9310C
SHA1:	8B4EAA74D31EED5B0BABA3CA5460201F6B10DA46
SHA-256:	BB8742615E4CD996AE5D0200E443AE6A6F0B473255F03AFFDB8FB4660DE4554D
SHA-512:	EE81E5509CBC2CB2B6C834224688C1E1B1AA9AA3866C52F8EAED040D5C390653C52D8D681E2E2CF62906643962ABAC823D5B622385B983B21E0DCCAFDF281EFF
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>. <head>. <link href="/css/craw_window.css" rel="stylesheet">. <script src="/craw_window.js"></script>. </head>. <body>. <webview></webview>. <div class="craw_overlay" id="loading_overlay">. <img src="/images/icon_128.png" />. <img src="/images/flapper.gif" />. </div>. <div class="craw_overlay" id="offline_overlay">. <img src="/images/icon_128.png" />. <span id="app_unavailable"></span>. <span id="connect_to_network"></span>. </div>. <div id="drag_overlay"></div>. <div id="top_bar">. <div id='close_button'>. <img src='/images/topbar_floating_button_close.png'/>. </div>. <div id='maximize_button'>. <img src='/images/topbar_floating_button_maximize.png'/>. </div>. </div>. </body>.</html>.

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\images\flapper.gif

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 30 x 30
Category:	dropped
Size (bytes):	70364
Entropy (8bit):	7.119902236613185
Encrypted:	false
SSDEEP:	768:g5TXOSBAqNIPmA8NcjCWdM0VFMJEwavTeElfWupav5TXg7wV+irIPny9MTVQHydi:g5KSmiIPmAhZWiMsDfWug7DmqM6HybkF
MD5:	398ABB308EEBC355DA70BCE907B22E29
SHA1:	CFFB77B8A1724B8F81D98C6D6AD0071D10162252
SHA-256:	2B73533F47A99FFEA9CC405FFAFA9C4C53623F62487AEBFBA415945120B22040
SHA-512:	FC7A56FC8A61A582161874B54ADBAD30A84840190008EDB0B6FBF84F91393CA58E988E3FE446F11A0C3C691C18249B93AEC2904B3D0C4F0857D79034F662385A
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................!.......!..NETSCAPE2.0.....,.............9.:.h0.bT(6.!l.&..("gk..JL1.[....o. .(:..B(.6."...Z.CUyh0.....j.C.z8..S....2.T'...Q..4 g\|]$ueW.NyQ.IoL!AoF#9h>7.0t..%..,.@.m4..7..!.......,.............9.:.h0.bT(6.!l.&..("gk..JL1.[....o. .(:..B(.6."...Z.CUyh0.....j.C.z8..S....2.T'...Q..4 g\|]$ueW.NyQ.IoL!AoF#9h>7.0t..%..,.@.m4..7..!.......,............................................................................................................'..w=.....\.)._6.k..OF...n.#\~"....2b3..I.)..eu.Q.`.e......gr.?>.s.I0.....@.~.Tr.[8.+.,.;..EE....S.*f.....,.....B8/D..;.9.q......ukC...r.I.....j......BGY...o2J....+O4....X4.....cH%7....I.....0H!.!.....!.,.............................................................................................................................................................................................................p8.a$....hh@.4....X,A.0L..(....JX.j...,..........z.X.Q....jB.d....B..

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\images\icon_128.png

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4364
Entropy (8bit):	7.915848007375225
Encrypted:	false
SSDEEP:	96:YjlLDJjTvXUtNvX8dgb9HT6y8nviyHG5iCRYtIP:YtNTfUzvX8KM+MGRsIP
MD5:	4DBC9F9E6F5A08D299BAC9E54DF07694
SHA1:	BB38F5DE34B1E0BE1109220BA55271087A4D9EA5
SHA-256:	91C2718DD23B4356D71F88F6146868369033291086DF327534546DFA459BEB0E
SHA-512:	A5F2B1F47502836130D8083F757B7773C1E1CB36B76AD298CC29AB2B428C8002D2F15BD839838FC326DAC3681C2F48AB25A3E7631D33726C4B25E8EC14170912
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>a.....IDATx..yp.....gF#.:,[H.l.l..8...`/.k....,!a7Km...E...Te..T.....J...p....%.(....+...3....eY.e...L.o...5....h4...\....{?....~.u.`0.....`0.....`0.....`.Y......[(.......).4....ai..w38.+....Bf././..]...{......8...3.....3W~OJ.. /...u6V.C..U.0.+._=.c..9.X.?....L....S@.L...m.0..>.C...L\|TF.p5..f4M.,.V....8..a.<...RP..@)E,..E"...h.....!...-....,I..T..........m..._[[{w{{....{.^......M.x..h4.h.....\.R.E....j).7.....h4.A.E....,. ...iii.Vj?2...=/.B.FK9P..@)=Rj..D".Y...2.B..x.}0...&J...2.......f.O..e.H.....!.J)'I..R....B............QJ;K..L...L.l".L~mhh.R.@).FFF~.L&...~.B.......u.........}.....~.....f..yUU...........^M...6......].,w.e..~.!$.C.R.....E(%e9.,....k..@...W8.........@...........O..@%.~..@.S..P.....`Tp...."...?ME..c......s...`..S1...7.b..aNE..k...3.yP.}.Ch.}......B..........IPE..C.<....T....k......Z..o_......g........P..A=y.J.)h..@.q.-.].AU.4...F.M.....y%B]+ .\.~..9......:..=...r.....E].o...F..P........i...\|....

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\images\icon_16.png

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	558
Entropy (8bit):	7.505638146035601
Encrypted:	false
SSDEEP:	12:6v/7vyVgSKYsfFzXxXsrPfA+b0YX+5IOUWCQKznuow7:6yVnKYsfFzhXsrIq0YXmgQGn6
MD5:	FB9C46EA81AD3E456D90D58697C12C06
SHA1:	5FC450F7D73CCFAC8F0D818CB3392BA4D91B69DE
SHA-256:	016CA659BA080E194FBFC0929602B16506ED60AA6019FAA51410C4FD93B583E8
SHA-512:	ADD810EE9EB7CAEC505B5FD90A1F184CE39D8F8C689DCC240F188FE353B9575489492E07D572A3B1C11A1555CE66AFCA5134903E4C1AA3D54BC7C5ED3E65B50C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....IDAT8...Mk.Q...;... .....F..QW.....F....J.?.w..7~......'.Q..B]... .QS...M&_w..b&.\|`......p...f.?.D$.y^..........y...\..Z..t6..oRj.@&.u..G.qN).t.-V.>(.N.Ep]wFk.60o.]0.`Y..cT..Y.Tb.`DF.d..s.Z..E..9.4._C.._...%..*.^....4.l...Y..X..R..../...Wj+w0[.].._B.k.${.\.>.%...........lz .w.ALxo.2;..a...".p..S..&..uXS...<..6..[..zD.._.N+w.WbM7ye6X<...'(,=.r}........$f..5..P....k..."..8.s.<zgSm@.....).Y.....:e..\|.....F...I..A$.....T?.....m....8.........N...z.....V..vd.h'....C.?.....H.;]..C.M.....9.b......IEND.B`.

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\images\topbar_floating_button.png

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	160
Entropy (8bit):	5.475799237015411
Encrypted:	false
SSDEEP:	3:yionv//thPl3xWrA4RthwkBDsTBZtnAkx/RPJDmV7bScsP4a9zln94FptVp:6v/lhPKM4nDspnAkZJNmgPdln2TTp
MD5:	8803665A6328D23CC1014A7B0E9BE295
SHA1:	9DA6EE729D5A6E9F30658B8EC954710F107A641F
SHA-256:	D5F9234DC36E7FFA85F35B2359A4F82276F8395EFA76E4553507EA990B27FC6C
SHA-512:	ECD9E71B8BA1ED8BD4CA5A0936CB66A83611C4ABCBDA76C250F4CDF4AD80320212E8F5EEB79A38910718F8346ECC1AD580A3FA835EC2B22BE497F36899FB5930
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...BIDATx...Q..0......2...(p...~Z.}'.>I%O...V!s..................../...`.<..`.....IEND.B`.

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\images\topbar_floating_button_close.png

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	252
Entropy (8bit):	6.512071394066515
Encrypted:	false
SSDEEP:	6:6v/lhPKM4nDsp7q1hKVlomsj9rxKNgtmN0VZ+GFYep:6v/7iMXVq1ylxemNgtmKVnYM
MD5:	0599DFD9107C7647F27E69331B0A7D75
SHA1:	3198C0A5F34DB67F91A0035DBC297354CBC95525
SHA-256:	131817CD9311C03DF22D769DD2AD7FA2E6E9558863A89F7E5E1657424031A937
SHA-512:	0076ACB9D6A886BD987876E49495038F9388B292A9EFE5C9093CCA64CA3692E3A5D24E35172C7697F6AAE34B86CA217EE59C003423E46D9499BD27EC7D77A649
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...... ..Pp.X....H...b@...\|.^LC_.E.BP+......X.P..........q..~..p/. ..s.....%D^...$......@.!...<...).?.4{.k.G3...4..[cH..0..l.8.!r..m.R..{..........`.f...#.x.....IEND.B`.

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\images\topbar_floating_button_hover.png

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	160
Entropy (8bit):	5.423186859407619
Encrypted:	false
SSDEEP:	3:yionv//thPl3xWrA4RthwkBDsTBZtnAkx/9lVtEHxrPLyN+ltNPhv/l2up:6v/lhPKM4nDspnAkZHVtERrPLygltNPn
MD5:	7CB6B9DC1A30F63B8BD976924B75AD96
SHA1:	0C40B0C496D2F2B5F2021C117EC8610AC03AB469
SHA-256:	721B7AAA9A42A54A349881615A12E3A26983ACA48E173FD2F66E66AA0D725735
SHA-512:	4764937364E355956B242B84010AC56102536D2AACBE4227F0E88E4DE7AB468571957EA6C33012539156E5349AE4F777115615AE3361F60ADDF9CD227424F76A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...BIDATx...A..0...+B.z.s...*.....$.<u..[...................h.......C.CA).....IEND.B`.

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\images\topbar_floating_button_maximize.png

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.8155898293424775
Encrypted:	false
SSDEEP:	3:yionv//thPl3xWrA4RthwkBDsTBZttd//HmnFz1P/ZjXlUTqyCIc30ItK1p:6v/lhPKM4nDsptF/HOP/ZjXlUeyCo/p
MD5:	232CE72808B60CBE0F4FA788A76523DF
SHA1:	721A9C98C835D2CD734153BBE07833C6637ECD68
SHA-256:	AFA4EA944CBDEC8543242E627EF46D5BFD3766DCAC664E7E50CDEEF2B352740C
SHA-512:	4048EEA5A78DD569521C488C4CE4F7B77AC0454C92EE9107A81A1B3AF91A4EE036039AC1A0A6B8DD26B12E7F1595DB80B7FAA7B6A25D9032BF385528A81A8654
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...HIDATx......0.CQS.......~..."..........m.v+Sq....<!...M8m...'...@$..0....E........IEND.B`.

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\images\topbar_floating_button_pressed.png

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	160
Entropy (8bit):	5.46068685940762
Encrypted:	false
SSDEEP:	3:yionv//thPl3xWrA4RthwkBDsTBZtnAkx/9lVtEXIyN+ltN1/lsg1p:6v/lhPKM4nDspnAkZHVtEZgltN1eup
MD5:	E0862317407F2D54C85E12945799413B
SHA1:	FA557F8F761A04C41C9A4BA81994E43C6C275DBB
SHA-256:	5C10CE0589EB115600F77381130B70AE0B7B3752614D86D4C89E857658AA222B
SHA-512:	07CB69327961FD0019BEF8EF7590B5524905AC373A815F73F6D9E0B26840929F919A96CAA977D4B5656704DACD0F352D568FB3997F80EE6BB94C95B58839DBFE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...BIDATx...A..0...+B..@wu...*.....$.<u..[...................h.........M..x(....IEND.B`.

C:\Users\user\AppData\Local\Temp\scoped_dir5872_892649189\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1322
Entropy (8bit):	5.449026004350873
Encrypted:	false
SSDEEP:	24:1HEis7ViC/yox/fiqeUoLFlmF1s80FKrGfd0d3NZNZx1Fq7eY7nfj1B:WL7V2opiV1mvs8rxTZRczhB
MD5:	01334FB9D092AF2AA46C4185E405C627
SHA1:	47AD3C0E82362FFE5B881DF8D71D6F79AB7F5796
SHA-256:	F52714812D68C577A445169D11E84DF6751C2D6886BC429643072BB5D61C6C27
SHA-512:	888D96ADB7A847ABE472145258C8C46950EB2FA3BA7D596C2E90A17C8FB06FD0155C56CC8ABA5D076D89368417464BCB2D236F9E40E53241950A01F9F8ED548F
Malicious:	false
Reputation:	low
Preview:	{.. "app": {.. "background": {.. "scripts": [ "craw_background.js" ].. }.. },.. "default_locale": "en",.. "description": "__MSG_APP_DESCRIPTION__",.. "display_in_launcher": false,.. "display_in_new_tab_page": false,.. "icons": {.. "128": "images/icon_128.png",.. "16": "images/icon_16.png".. },.. "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrKfMnLqViEyokd1wk57FxJtW2XXpGXzIHBzv9vQI/01UsuP0IV5/lj0wx7zJ/xcibUgDeIxobvv9XD+zO1MdjMWuqJFcKuSS4Suqkje6u+pMrTSGOSHq1bmBVh0kpToN8YoJs/P/yrRd7FEtAXTaFTGxQL4C385MeXSjaQfiRiQIDAQAB",.. "manifest_version": 2,.. "minimum_chrome_version": "29",.. "name": "__MSG_APP_NAME__",.. "oauth2": {.. "auto_approve": true,.. "client_id": "203784468217.apps.googleusercontent.com",.. "scopes": [ "https://www.googleapis.com/auth/sierra", "https://www.googleapis.com/auth/sierrasandbox", "https://www.googleapis.com/auth/chromewebstore", "https://www.googleapis.com/auth/chromewebstore.readonly" ].. },.

C:\Users\user\Downloads\DropboxInstaller (1).exe (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	655232
Entropy (8bit):	7.8512658659128505
Encrypted:	false
SSDEEP:	12288:T/iSuQlVuMwPhSPKPPyolrUVXMxERWh4VdeSP6rScScc4QE1tSSgDQ:T/i0HuZYKPPyotUVXvG4VdeSP6rtSUQm
MD5:	96D1044856B6E12A79CC88731DBF309D
SHA1:	49F699AB627A9D767A68A4DFD8E3F6AA956CE0AE
SHA-256:	2A9EBC4044EF67535790F210FF5080E19571D9893227B223107DC66850BEDA19
SHA-512:	C500B78ABBF2F356954A2ECCD0BC2DCA7A76BE0372ED987D82B16902E0CBD4ACEADFC9093121EED1A502FCE6C5AC1772785B2044EE33205690268B81E0005F58
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L.h.........................G.......-.........../^}....................................Rich............PE..L...q.\a..................... .......J............@.................................J.....@.....................................x.... ..`............................................................................................................text.............................. ..`.rdata..b*.......,..................@..@.data...............................@....rsrc...`.... ......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\DropboxInstaller (1).exe:Zone.Identifier

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	396
Entropy (8bit):	5.704108085097829
Encrypted:	false
SSDEEP:	6:qY33Atj4GLHav14Fokm+ygOXPlDsbZPUcTwoXQiOYhgwPq8q/nuEvdVCgRxj+1zc:LAtjX2JgOXY5YiOYGWDmn9dDyzhBhaf
MD5:	9DB92220FCAE777D1E7AA428ED786F36
SHA1:	03486613BB438541C6A082C868FCF0AB9DC79891
SHA-256:	B3B85A898922B40707AC70844847A5B1047D3D07AFEF597C4C276BDC15DF2E2F
SHA-512:	0C7179B9C626545538242D8A84D5420239C58D697C718B0E862713854504A26EC7B779571C01683ED412A5DC06D51702D25B5AD6F963A8E673AB8C585FCA88B8
Malicious:	false
Reputation:	low
Preview:	[ZoneTransfer]..ZoneId=3..ReferrerUrl=https://www.dropbox.com/..HostUrl=https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A..

C:\Users\user\Downloads\DropboxInstaller (3).exe (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	655232
Entropy (8bit):	7.8512658659128505
Encrypted:	false
SSDEEP:	12288:T/iSuQlVuMwPhSPKPPyolrUVXMxERWh4VdeSP6rScScc4QE1tSSgDQ:T/i0HuZYKPPyotUVXvG4VdeSP6rtSUQm
MD5:	96D1044856B6E12A79CC88731DBF309D
SHA1:	49F699AB627A9D767A68A4DFD8E3F6AA956CE0AE
SHA-256:	2A9EBC4044EF67535790F210FF5080E19571D9893227B223107DC66850BEDA19
SHA-512:	C500B78ABBF2F356954A2ECCD0BC2DCA7A76BE0372ED987D82B16902E0CBD4ACEADFC9093121EED1A502FCE6C5AC1772785B2044EE33205690268B81E0005F58
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L.h.........................G.......-.........../^}....................................Rich............PE..L...q.\a..................... .......J............@.................................J.....@.....................................x.... ..`............................................................................................................text.............................. ..`.rdata..b*.......,..................@..@.data...............................@....rsrc...`.... ......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\DropboxInstaller (3).exe:Zone.Identifier

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	396
Entropy (8bit):	5.704108085097829
Encrypted:	false
SSDEEP:	6:qY33Atj4GLHav14Fokm+ygOXPlDsbZPUcTwoXQiOYhgwPq8q/nuEvdVCgRxj+1zc:LAtjX2JgOXY5YiOYGWDmn9dDyzhBhaf
MD5:	9DB92220FCAE777D1E7AA428ED786F36
SHA1:	03486613BB438541C6A082C868FCF0AB9DC79891
SHA-256:	B3B85A898922B40707AC70844847A5B1047D3D07AFEF597C4C276BDC15DF2E2F
SHA-512:	0C7179B9C626545538242D8A84D5420239C58D697C718B0E862713854504A26EC7B779571C01683ED412A5DC06D51702D25B5AD6F963A8E673AB8C585FCA88B8
Malicious:	false
Reputation:	low
Preview:	[ZoneTransfer]..ZoneId=3..ReferrerUrl=https://www.dropbox.com/..HostUrl=https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A..

C:\Users\user\Downloads\Unconfirmed 238730.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	655232
Entropy (8bit):	7.8512658659128505
Encrypted:	false
SSDEEP:	12288:T/iSuQlVuMwPhSPKPPyolrUVXMxERWh4VdeSP6rScScc4QE1tSSgDQ:T/i0HuZYKPPyotUVXvG4VdeSP6rtSUQm
MD5:	96D1044856B6E12A79CC88731DBF309D
SHA1:	49F699AB627A9D767A68A4DFD8E3F6AA956CE0AE
SHA-256:	2A9EBC4044EF67535790F210FF5080E19571D9893227B223107DC66850BEDA19
SHA-512:	C500B78ABBF2F356954A2ECCD0BC2DCA7A76BE0372ED987D82B16902E0CBD4ACEADFC9093121EED1A502FCE6C5AC1772785B2044EE33205690268B81E0005F58
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L.h.........................G.......-.........../^}....................................Rich............PE..L...q.\a..................... .......J............@.................................J.....@.....................................x.... ..`............................................................................................................text.............................. ..`.rdata..b*.......,..................@..@.data...............................@....rsrc...`.... ......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\Unconfirmed 361642.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	655232
Entropy (8bit):	7.8512658659128505
Encrypted:	false
SSDEEP:	12288:T/iSuQlVuMwPhSPKPPyolrUVXMxERWh4VdeSP6rScScc4QE1tSSgDQ:T/i0HuZYKPPyotUVXvG4VdeSP6rtSUQm
MD5:	96D1044856B6E12A79CC88731DBF309D
SHA1:	49F699AB627A9D767A68A4DFD8E3F6AA956CE0AE
SHA-256:	2A9EBC4044EF67535790F210FF5080E19571D9893227B223107DC66850BEDA19
SHA-512:	C500B78ABBF2F356954A2ECCD0BC2DCA7A76BE0372ED987D82B16902E0CBD4ACEADFC9093121EED1A502FCE6C5AC1772785B2044EE33205690268B81E0005F58
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L.h.........................G.......-.........../^}....................................Rich............PE..L...q.\a..................... .......J............@.................................J.....@.....................................x.... ..`............................................................................................................text.............................. ..`.rdata..b*.......,..................@..@.data...............................@....rsrc...`.... ......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\Unconfirmed 384737.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	655232
Entropy (8bit):	7.8512658659128505
Encrypted:	false
SSDEEP:	12288:T/iSuQlVuMwPhSPKPPyolrUVXMxERWh4VdeSP6rScScc4QE1tSSgDQ:T/i0HuZYKPPyotUVXvG4VdeSP6rtSUQm
MD5:	96D1044856B6E12A79CC88731DBF309D
SHA1:	49F699AB627A9D767A68A4DFD8E3F6AA956CE0AE
SHA-256:	2A9EBC4044EF67535790F210FF5080E19571D9893227B223107DC66850BEDA19
SHA-512:	C500B78ABBF2F356954A2ECCD0BC2DCA7A76BE0372ED987D82B16902E0CBD4ACEADFC9093121EED1A502FCE6C5AC1772785B2044EE33205690268B81E0005F58
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L.h.........................G.......-.........../^}....................................Rich............PE..L...q.\a..................... .......J............@.................................J.....@.....................................x.... ..`............................................................................................................text.............................. ..`.rdata..b*.......,..................@..@.data...............................@....rsrc...`.... ......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\Unconfirmed 998509.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	655232
Entropy (8bit):	7.8512658659128505
Encrypted:	false
SSDEEP:	12288:T/iSuQlVuMwPhSPKPPyolrUVXMxERWh4VdeSP6rScScc4QE1tSSgDQ:T/i0HuZYKPPyotUVXvG4VdeSP6rtSUQm
MD5:	96D1044856B6E12A79CC88731DBF309D
SHA1:	49F699AB627A9D767A68A4DFD8E3F6AA956CE0AE
SHA-256:	2A9EBC4044EF67535790F210FF5080E19571D9893227B223107DC66850BEDA19
SHA-512:	C500B78ABBF2F356954A2ECCD0BC2DCA7A76BE0372ED987D82B16902E0CBD4ACEADFC9093121EED1A502FCE6C5AC1772785B2044EE33205690268B81E0005F58
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L.h.........................G.......-.........../^}....................................Rich............PE..L...q.\a..................... .......J............@.................................J.....@.....................................x.... ..`............................................................................................................text.............................. ..`.rdata..b*.......,..................@..@.data...............................@....rsrc...`.... ......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\de8171a1-8253-4ec4-bff4-0606b038fb48.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	524288
Entropy (8bit):	7.943315496967746
Encrypted:	false
SSDEEP:	12288:T/iSuQlVuMwPhSPKPPyolrUVXMxERWh4VdeSP6rScScc4QEO:T/i0HuZYKPPyotUVXvG4VdeSP6rtS3
MD5:	04DEF5B256A7EF40D7FA07D769D7B156
SHA1:	92DF5C44F1F7F0A999752C934BC7B69EF8F33775
SHA-256:	5CB15F722D279A2E99551D2ADC1AFD2FCD10CFA86D6BB95B5BC69B9539B79356
SHA-512:	F7614984485C3E6BC220812ED4E3353AFD459B191CE09CEDB57811881DCD0306768E41386718EF9F3DA01C30535216DA6721A5060EFFB203A249F47F31C262EB
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L.h.........................G.......-.........../^}....................................Rich............PE..L...q.\a..................... .......J............@.................................J.....@.....................................x.... ..`............................................................................................................text.............................. ..`.rdata..b*.......,..................@..@.data...............................@....rsrc...`.... ......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Reputation:	low
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log

Download File

Process:	C:\Program Files\Windows Defender\MpCmdRun.exe
File Type:	Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
Category:	modified
Size (bytes):	9062
Entropy (8bit):	3.16195050109503
Encrypted:	false
SSDEEP:	192:cY+38+DJl+ibJ6+ioJJ+i3N+WtT+E9tD+Ett3d+E3zc+3:j+s+v+b+P+m+0+Q+q+7+3
MD5:	840AC254E1B98C0DFFFD91FB9A25CB9B
SHA1:	5338BB80F49C5183F198CB353890FC8BC3F1C164
SHA-256:	4CBD61B01953F0C29344ABA09F98072CE04170FE1CB7175DFCDCE554905F4975
SHA-512:	3148B9BBA6B2A1A9303DC879F88571D01E76888248F37E3E6E7989884B90D769A57784617F7D47FD67DBD0131E510C79D492DD1ED3EE7BF3B6222965A479820A
Malicious:	false
Reputation:	low
Preview:	..........-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.....M.p.C.m.d.R.u.n.:. .C.o.m.m.a.n.d. .L.i.n.e.:. .".C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.W.i.n.d.o.w.s. .D.e.f.e.n.d.e.r.\.m.p.c.m.d.r.u.n...e.x.e.". .-.w.d.e.n.a.b.l.e..... .S.t.a.r.t. .T.i.m.e.:. .. T.h.u. .. J.u.n. .. 2.7. .. 2.0.1.9. .0.1.:.2.9.:.4.9.........M.p.E.n.s.u.r.e.P.r.o.c.e.s.s.M.i.t.i.g.a.t.i.o.n.P.o.l.i.c.y.:. .h.r. .=. .0.x.1.....W.D.E.n.a.b.l.e.....E.R.R.O.R.:. .M.p.W.D.E.n.a.b.l.e.(.T.R.U.E.). .f.a.i.l.e.d. .(.8.0.0.7.0.4.E.C.).....M.p.C.m.d.R.u.n.:. .E.n.d. .T.i.m.e.:. .. T.h.u. .. J.u.n. .. 2.7. .. 2.0.1.9. .0.1.:.2.9.:.4.9.....-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.............-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 15, 2022 17:07:05.768376112 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.774487972 CET	49673	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:07:05.839041948 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.864953995 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.864986897 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865005970 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865021944 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865037918 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865052938 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865066051 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865068913 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865083933 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865101099 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865117073 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865118980 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865135908 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865153074 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865165949 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865181923 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865184069 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865197897 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865215063 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865231037 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865247011 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865247011 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865262032 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865274906 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865278006 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865293980 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865305901 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865309000 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865325928 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865333080 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865341902 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865358114 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865359068 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865390062 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865406036 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865411043 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865422964 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865437984 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865454912 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865459919 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865470886 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865488052 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865492105 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865504980 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865520954 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865520000 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865537882 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865554094 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865560055 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865571022 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865586996 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865592957 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865601063 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865617037 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865623951 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865634918 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865650892 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865659952 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865668058 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865679026 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865689993 CET	443	49706	20.40.129.122	192.168.2.3
Mar 15, 2022 17:07:05.865717888 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:05.865752935 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:06.026258945 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.026704073 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.026891947 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.027015924 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.027137995 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.027167082 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.027350903 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.027453899 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.027554035 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.049833059 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050023079 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050081015 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050096989 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050148010 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050203085 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050215006 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050267935 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050354958 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050425053 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050437927 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050448895 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050483942 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050496101 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050507069 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050518036 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050554037 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050565958 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050615072 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050683022 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050697088 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050710917 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050797939 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050810099 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050820112 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050831079 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.050864935 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.050920010 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051007032 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051032066 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051069975 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051119089 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051131010 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051171064 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051182985 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051270008 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051311016 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051357031 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051378965 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.051407099 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051455975 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051470041 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051481009 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051508904 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051554918 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051590919 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051632881 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051645041 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051675081 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.051739931 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:06.109183073 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:07:06.109328032 CET	49694	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:10.327231884 CET	49711	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:07:10.328378916 CET	49706	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:10.328511953 CET	49707	443	192.168.2.3	20.40.129.122
Mar 15, 2022 17:07:15.467771053 CET	49673	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:07:18.929760933 CET	49753	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:18.929821968 CET	443	49753	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:18.929949045 CET	49753	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:18.930577040 CET	49754	443	192.168.2.3	142.250.203.109
Mar 15, 2022 17:07:18.930614948 CET	443	49754	142.250.203.109	192.168.2.3
Mar 15, 2022 17:07:18.930732012 CET	49754	443	192.168.2.3	142.250.203.109
Mar 15, 2022 17:07:18.931952953 CET	49753	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:18.932022095 CET	443	49753	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:18.932571888 CET	49754	443	192.168.2.3	142.250.203.109
Mar 15, 2022 17:07:18.932590961 CET	443	49754	142.250.203.109	192.168.2.3
Mar 15, 2022 17:07:18.948935032 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:18.949042082 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:18.949285030 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:18.964519978 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:18.964561939 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:18.971822977 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:18.971882105 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:18.971975088 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:18.972807884 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:18.972829103 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:18.985567093 CET	443	49754	142.250.203.109	192.168.2.3
Mar 15, 2022 17:07:18.989520073 CET	443	49753	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:18.999902010 CET	49754	443	192.168.2.3	142.250.203.109
Mar 15, 2022 17:07:18.999929905 CET	443	49754	142.250.203.109	192.168.2.3
Mar 15, 2022 17:07:19.000813961 CET	49753	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:19.000853062 CET	443	49753	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:19.001046896 CET	443	49754	142.250.203.109	192.168.2.3
Mar 15, 2022 17:07:19.001183033 CET	49754	443	192.168.2.3	142.250.203.109
Mar 15, 2022 17:07:19.001491070 CET	443	49753	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:19.001617908 CET	49753	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:19.002592087 CET	443	49753	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:19.002713919 CET	49753	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:19.046725035 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:19.047455072 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:19.123397112 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:19.165354013 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:19.316936970 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:19.316972017 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:19.317243099 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:19.317272902 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:19.318442106 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:19.318459988 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:19.318582058 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:19.318953037 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:19.318979979 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:19.319057941 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.346631050 CET	49754	443	192.168.2.3	142.250.203.109
Mar 15, 2022 17:07:20.346822977 CET	443	49754	142.250.203.109	192.168.2.3
Mar 15, 2022 17:07:20.347050905 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.347269058 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.347351074 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:20.347438097 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:20.347496033 CET	49753	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:20.347661972 CET	443	49753	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:20.348591089 CET	49754	443	192.168.2.3	142.250.203.109
Mar 15, 2022 17:07:20.348619938 CET	443	49754	142.250.203.109	192.168.2.3
Mar 15, 2022 17:07:20.350248098 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.350310087 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:20.350502968 CET	49753	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:20.350528955 CET	443	49753	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:20.386042118 CET	443	49753	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:20.386153936 CET	49753	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:20.386163950 CET	443	49753	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:20.386260986 CET	49753	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:20.420094013 CET	49753	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:20.420139074 CET	443	49753	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:20.423450947 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.423472881 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:20.424104929 CET	443	49754	142.250.203.109	192.168.2.3
Mar 15, 2022 17:07:20.424181938 CET	49754	443	192.168.2.3	142.250.203.109
Mar 15, 2022 17:07:20.427974939 CET	49754	443	192.168.2.3	142.250.203.109
Mar 15, 2022 17:07:20.428005934 CET	443	49754	142.250.203.109	192.168.2.3
Mar 15, 2022 17:07:20.523471117 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.560424089 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.723324060 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:20.764238119 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.764262915 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:20.789046049 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.789330959 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:20.789381981 CET	443	49756	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:20.789453030 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.789520025 CET	49756	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.826586962 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:20.870198965 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.117746115 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.117819071 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.117829084 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:21.141732931 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.141747952 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.141813993 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.141832113 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.141844988 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.142303944 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:21.142330885 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.142383099 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.142398119 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:21.150983095 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.150996923 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.151036978 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.151051044 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.151067972 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.151079893 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.151079893 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:21.151106119 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.151164055 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:21.162925959 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.162945032 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.162966967 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.162988901 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.163006067 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.163017035 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.163078070 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:21.163146973 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:21.165622950 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.165632963 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.165746927 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:21.180314064 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:21.180596113 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.180653095 CET	443	49757	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:21.180720091 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:21.180772066 CET	49757	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:21.784001112 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:21.784065008 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:21.784179926 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:21.784524918 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:21.784540892 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:21.795959949 CET	49775	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:21.795999050 CET	443	49775	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:21.796081066 CET	49775	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:21.796947002 CET	49775	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:21.796967030 CET	443	49775	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:21.843213081 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:21.851658106 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:21.851710081 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:21.853461981 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:21.853591919 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:21.880398989 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:21.880654097 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:21.923029900 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:21.923069000 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:22.023224115 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:22.590553045 CET	443	49775	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:22.590953112 CET	49775	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:22.590972900 CET	443	49775	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:22.592899084 CET	443	49775	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:22.593084097 CET	49775	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:22.602725983 CET	49775	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:22.602950096 CET	443	49775	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:22.603496075 CET	49775	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:22.603514910 CET	443	49775	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:22.723042965 CET	49775	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:22.867700100 CET	443	49775	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:22.881177902 CET	49775	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:22.881483078 CET	443	49775	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:22.881539106 CET	443	49775	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:22.881587982 CET	49775	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:22.881624937 CET	49775	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:22.986143112 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:22.986218929 CET	443	49816	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:22.986335993 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:22.986658096 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:22.986671925 CET	443	49816	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.062315941 CET	443	49816	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.070558071 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.070596933 CET	443	49816	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.071018934 CET	443	49816	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.071962118 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.072053909 CET	443	49816	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.072866917 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.072901011 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.072917938 CET	443	49816	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.085560083 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.085575104 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.085639000 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.086519957 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.086529970 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.165467024 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.175133944 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.175163031 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.177355051 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.177428961 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.181297064 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.181524038 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.182761908 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.182776928 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.209526062 CET	49821	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.209575891 CET	443	49821	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.209678888 CET	49821	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.216900110 CET	49821	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.216932058 CET	443	49821	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.240094900 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.240272045 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.240293980 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.240367889 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.242611885 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.242650986 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.242671967 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.242690086 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.242719889 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.242770910 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.242786884 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.242799997 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.245090961 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.245119095 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.245134115 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.245173931 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.245189905 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.245224953 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.246797085 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.246891022 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.246906042 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.247612953 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.247678041 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.247689962 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.270075083 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.270143986 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.270159960 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.270198107 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.270272017 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.270303965 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.270319939 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.270365000 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.271246910 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.271363020 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.272164106 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.272277117 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.276319027 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.276379108 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.276475906 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.276504040 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.276535034 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.276566029 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.281827927 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.281927109 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.281933069 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.281984091 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.281992912 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.282036066 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.284132957 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.284259081 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.284271955 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.284324884 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.285298109 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.286879063 CET	49819	443	192.168.2.3	65.9.96.54
Mar 15, 2022 17:07:23.286906958 CET	443	49819	65.9.96.54	192.168.2.3
Mar 15, 2022 17:07:23.292674065 CET	443	49816	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.293016911 CET	443	49821	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.302105904 CET	49821	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.302148104 CET	443	49821	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.302603006 CET	443	49821	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.305205107 CET	49821	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.305428028 CET	443	49821	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.306440115 CET	49821	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.306473017 CET	49821	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.306494951 CET	443	49821	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.462244987 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.462296009 CET	443	49816	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.543921947 CET	443	49821	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.544117928 CET	49821	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.562695980 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.901015997 CET	49821	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.901349068 CET	443	49821	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.901408911 CET	443	49821	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.901458979 CET	49821	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.901493073 CET	49821	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.902694941 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.907097101 CET	443	49816	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.907217979 CET	443	49816	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:23.907224894 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:23.907274961 CET	49816	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.130430937 CET	49822	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.130500078 CET	443	49822	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.130609989 CET	49822	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.130968094 CET	49822	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.130990028 CET	443	49822	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.131330013 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.151892900 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.152007103 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.152055979 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.152086020 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.152102947 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.152141094 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.152153969 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.152206898 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.152252913 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.152256012 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.152266026 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.152318954 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.152334929 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.152836084 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.152877092 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.152961969 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.152981997 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.153127909 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.154016972 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.169037104 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.169086933 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.169183969 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.169205904 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.169262886 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.169426918 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.170665026 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.170712948 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.170768023 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.170784950 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.170839071 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.171865940 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.173083067 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.173130989 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.173175097 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.173192024 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.173244953 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.174325943 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.175477028 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.175523996 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.175561905 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.175581932 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.175631046 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.176665068 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.177820921 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.177867889 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.177913904 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.177937031 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.177988052 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.179023981 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.180179119 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.180231094 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.180274963 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.180296898 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.180347919 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.180373907 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.180499077 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.207592010 CET	443	49822	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.208146095 CET	49822	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.208178043 CET	443	49822	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.208724976 CET	443	49822	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.209656000 CET	49822	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.209804058 CET	443	49822	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.210129023 CET	49822	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.235488892 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.235542059 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.235667944 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.236951113 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.236965895 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.237893105 CET	49774	443	192.168.2.3	216.58.215.227
Mar 15, 2022 17:07:24.237931013 CET	443	49774	216.58.215.227	192.168.2.3
Mar 15, 2022 17:07:24.250204086 CET	443	49822	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.288791895 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.289542913 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.289572954 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.290041924 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.290921926 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.291070938 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.302943945 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.346177101 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.431576014 CET	443	49822	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.434376955 CET	49822	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.434412956 CET	443	49822	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.434494019 CET	49822	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.460063934 CET	49829	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.460098982 CET	443	49829	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.460179090 CET	49829	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.460702896 CET	49829	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.460716963 CET	443	49829	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.518992901 CET	49831	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.519042015 CET	443	49831	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.519181967 CET	49831	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.519731998 CET	49831	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.519746065 CET	443	49831	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.529340982 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.529392004 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.529476881 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.529856920 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.529869080 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.539455891 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.539509058 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.539618969 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.539817095 CET	443	49829	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.539880037 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.539895058 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.540087938 CET	49829	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.540111065 CET	443	49829	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.540656090 CET	443	49829	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.541409969 CET	49829	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.541539907 CET	443	49829	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.541753054 CET	49829	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.541784048 CET	49829	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.541791916 CET	443	49829	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.551172018 CET	49836	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.551207066 CET	443	49836	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.551314116 CET	49836	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.551675081 CET	49836	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.551688910 CET	443	49836	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.578491926 CET	49837	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:24.578538895 CET	443	49837	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:24.578759909 CET	49837	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:24.580313921 CET	49837	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:24.580332041 CET	443	49837	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:24.598404884 CET	443	49831	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.604470968 CET	49831	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.604501963 CET	443	49831	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.604980946 CET	443	49831	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.605498075 CET	49831	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.605601072 CET	443	49831	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.605956078 CET	49831	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.605972052 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.605976105 CET	49831	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.605992079 CET	443	49831	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.606185913 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.606199026 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.607727051 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.607814074 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.608385086 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.608467102 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.608617067 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.608633995 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.608644962 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.621301889 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.621638060 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.621675014 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.622823000 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.622915983 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.622932911 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.622983932 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.628726959 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.628899097 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.628952980 CET	443	49836	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.629013062 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.629031897 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.629725933 CET	49836	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.629755974 CET	443	49836	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.630187988 CET	443	49836	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.630916119 CET	49836	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.631026030 CET	443	49836	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.631470919 CET	49836	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.631515980 CET	49836	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.631527901 CET	443	49836	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.654191017 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.665383101 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.665543079 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.698827982 CET	49838	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:24.698869944 CET	443	49838	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:24.698960066 CET	49838	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:24.699409962 CET	49838	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:24.699424028 CET	443	49838	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:24.723577023 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.737922907 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.737974882 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.738027096 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.738053083 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.738071918 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.738105059 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.738110065 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.738126993 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.758910894 CET	443	49829	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.759082079 CET	49829	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.764204979 CET	49829	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.764261007 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.764477015 CET	443	49829	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.764554024 CET	443	49829	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.764568090 CET	49829	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.764622927 CET	49829	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.791934967 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.791975975 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.792112112 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.792134047 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.800474882 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.800502062 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.800550938 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.800570011 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.800582886 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.800616980 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.800637960 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.800676107 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.829691887 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.829766989 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.829807997 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.830815077 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.830972910 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.831012964 CET	443	49832	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.831033945 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.831067085 CET	49832	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.849252939 CET	443	49836	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.849417925 CET	49836	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.851377010 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.851398945 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.851427078 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.851439953 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.851515055 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.851536989 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.851558924 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.854007959 CET	49836	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.854252100 CET	443	49836	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.854295969 CET	443	49836	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.854348898 CET	49836	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.854422092 CET	49836	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.857547045 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.857582092 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.857590914 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.857623100 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.857647896 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.857657909 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.857702017 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.857726097 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.857748032 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.857793093 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.865854025 CET	443	49831	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.865952969 CET	49831	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.866946936 CET	49831	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.867115021 CET	443	49831	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.867152929 CET	443	49831	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.867254972 CET	49831	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.867275000 CET	49831	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.880745888 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.880767107 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.880784988 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.880836010 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.880841017 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.880861998 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.880884886 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.880887032 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.880918980 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.880950928 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.891673088 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.891686916 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.891730070 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.891740084 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.891776085 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.891823053 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.891835928 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.894560099 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.894578934 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.894619942 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.894649029 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.894669056 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.894687891 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.905981064 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.906033039 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.906042099 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.906074047 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.906084061 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.906106949 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.906140089 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.913446903 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.913461924 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.913481951 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.913490057 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.913553953 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.913584948 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.913606882 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.920269966 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.920383930 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.920411110 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.920433044 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.920459032 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.920476913 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.920485020 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.920501947 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.920519114 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.925983906 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.926017046 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.926084042 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.926126003 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.926148891 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.926191092 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.930382967 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.930413961 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.930519104 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.930546045 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.930577993 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.934717894 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.934773922 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.934828043 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.934860945 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.934890032 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.938430071 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.938488960 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.938560963 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.938591957 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.938610077 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.939694881 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.939713955 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.939760923 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.939775944 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.939799070 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.939846039 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.939851999 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.939872026 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.939876080 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.939886093 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.939909935 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.942014933 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.942048073 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.942193031 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.942223072 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.942320108 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.942338943 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.942399979 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.942420959 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.942467928 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.944953918 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.944969893 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.945080042 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.945348978 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.945373058 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.945442915 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.945468903 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.945482969 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.945523977 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.945702076 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.945759058 CET	443	49824	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:24.945791006 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.945826054 CET	49824	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:24.948528051 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.948556900 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.948616028 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.948647976 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.948673964 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.951607943 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.951642990 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.951744080 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.951771021 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.951786995 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.954986095 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.955024958 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.955120087 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.955151081 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.955164909 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.957396984 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.957426071 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.957510948 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.957536936 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.959897995 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.959918976 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.959997892 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.960033894 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.960056067 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.962436914 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.962456942 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.962558031 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.962583065 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.965065956 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.965091944 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.965173960 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.965205908 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.965224981 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.966628075 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.966655970 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.966799021 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.966821909 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.967494965 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.967514038 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.967607975 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.967628002 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.969276905 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.969296932 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.969383955 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.969409943 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.971013069 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.971031904 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.971117973 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.971153021 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.972773075 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.972794056 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.972901106 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.972925901 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.974476099 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.974494934 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.974565029 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.974589109 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.974622965 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.975513935 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.975533962 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.975590944 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.975622892 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.975651026 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.977035046 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.977054119 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.977150917 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.977174997 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.978857994 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.978882074 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.978952885 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.978975058 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.978991032 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.979825974 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.979851007 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.979899883 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.979918003 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.979948044 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.981568098 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.981592894 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.981703043 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.981725931 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.982429028 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.982451916 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.982537031 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.982562065 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.982589006 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.984126091 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.984147072 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.984235048 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.984262943 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.985169888 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.985193014 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.985275984 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.985300064 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.985320091 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.986212015 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.986238956 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.986340046 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.986362934 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.986385107 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.987209082 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.987231016 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.987346888 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.987384081 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.987417936 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.988385916 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.988414049 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.988522053 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.988548994 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.989898920 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.989927053 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.990011930 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.990035057 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.990053892 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.991004944 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.991035938 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.991121054 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.991148949 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.991167068 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.991616964 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.991651058 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.991702080 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.991725922 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.991770029 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.992763996 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.992801905 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.992876053 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:24.992896080 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:24.992922068 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:25.009499073 CET	49841	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.009553909 CET	443	49841	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.009629965 CET	49841	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.011126041 CET	49841	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.011147022 CET	443	49841	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.018985033 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:25.025933981 CET	443	49837	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.026241064 CET	49837	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.026278019 CET	443	49837	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.027899981 CET	443	49837	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.028014898 CET	49837	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.029885054 CET	49837	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.030035973 CET	443	49837	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.030200005 CET	49837	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.030226946 CET	443	49837	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.087258101 CET	443	49841	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.087738037 CET	49841	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.087765932 CET	443	49841	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.088051081 CET	443	49841	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.088495970 CET	49841	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.088563919 CET	443	49841	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.088988066 CET	49841	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.089004040 CET	49841	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.089014053 CET	443	49841	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.133301020 CET	443	49838	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.133810043 CET	49838	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.133851051 CET	443	49838	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.137260914 CET	443	49838	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.137366056 CET	49838	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.138297081 CET	49838	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.138562918 CET	49838	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.138577938 CET	443	49838	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.139573097 CET	443	49838	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.164091110 CET	49837	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.174283981 CET	443	49837	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.174382925 CET	443	49837	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.174483061 CET	49837	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.192280054 CET	49837	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.192312956 CET	443	49837	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.283997059 CET	443	49838	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.284178019 CET	49838	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.314470053 CET	443	49841	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.314582109 CET	49841	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.321633101 CET	49841	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.321924925 CET	443	49841	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.321983099 CET	443	49841	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.322006941 CET	49841	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.322035074 CET	49841	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.341968060 CET	49838	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:25.342005014 CET	443	49838	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:25.352404118 CET	49842	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.352461100 CET	443	49842	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.352569103 CET	49842	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.353485107 CET	49842	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.353503942 CET	443	49842	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.424995899 CET	49844	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.425045967 CET	443	49844	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.425144911 CET	49844	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.425772905 CET	49844	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.425798893 CET	443	49844	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.432485104 CET	443	49842	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.432914019 CET	49842	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.432955027 CET	443	49842	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.433243036 CET	443	49842	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.433973074 CET	49842	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.434070110 CET	443	49842	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.434566021 CET	49842	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.434662104 CET	49842	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.434670925 CET	443	49842	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.447520971 CET	49845	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.447581053 CET	443	49845	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.447650909 CET	49845	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.448702097 CET	49845	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.448738098 CET	443	49845	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.465380907 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.465423107 CET	443	49847	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.465487003 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.466558933 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.466574907 CET	443	49847	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.493479013 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.493515015 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.493594885 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.494293928 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.494309902 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.496221066 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.496262074 CET	443	49849	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.496346951 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.496649981 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.496666908 CET	443	49849	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.501704931 CET	443	49844	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.502245903 CET	49844	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.502274990 CET	443	49844	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.502587080 CET	443	49844	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.503050089 CET	49844	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.503144979 CET	443	49844	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.503302097 CET	49844	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.503391981 CET	49844	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.503407955 CET	443	49844	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.525266886 CET	443	49845	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.528415918 CET	49845	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.528445005 CET	443	49845	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.529385090 CET	443	49845	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.531187057 CET	49845	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.531472921 CET	443	49845	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.531677961 CET	49845	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.531716108 CET	49845	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.531874895 CET	443	49845	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.543193102 CET	443	49847	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.543567896 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.543596983 CET	443	49847	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.544680119 CET	443	49847	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.544785976 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.545351028 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.545504093 CET	443	49847	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.546088934 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.546113014 CET	443	49847	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.546149015 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.546225071 CET	443	49847	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.570760965 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.571557999 CET	443	49849	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.572145939 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.572180033 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.572376966 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.572407961 CET	443	49849	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.573492050 CET	443	49849	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.573642969 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.574038982 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.574333906 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.595582008 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.595856905 CET	443	49849	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.596257925 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.596420050 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.597367048 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.597393990 CET	443	49849	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.597403049 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.597735882 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.597759008 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.597786903 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.597863913 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.624217987 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.638186932 CET	443	49849	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.654184103 CET	443	49842	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.654290915 CET	49842	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.722304106 CET	443	49844	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.722445965 CET	49844	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.741866112 CET	49851	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:25.741923094 CET	443	49851	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:25.742026091 CET	49851	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:25.742485046 CET	49851	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:25.742510080 CET	443	49851	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:25.750000000 CET	443	49845	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.750113010 CET	49845	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.760966063 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.802222013 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.804259062 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.805526972 CET	49842	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.806005001 CET	443	49842	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.806091070 CET	49842	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.806091070 CET	443	49842	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.806160927 CET	49842	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.806432962 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.806474924 CET	443	49852	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.806567907 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.808459997 CET	49844	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.808675051 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.808721066 CET	443	49844	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.808762074 CET	443	49844	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.808773041 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.808834076 CET	49844	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.808855057 CET	49844	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.810255051 CET	443	49849	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.810384035 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.820923090 CET	49853	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.820966959 CET	443	49853	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.821048021 CET	49853	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.832482100 CET	49845	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.832843065 CET	443	49845	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.832922935 CET	443	49845	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.832973003 CET	49845	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.833040953 CET	49845	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.833247900 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.833298922 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.833395958 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.833978891 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.834005117 CET	443	49852	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.836002111 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.836297035 CET	443	49849	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.836350918 CET	443	49849	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.836390972 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.836427927 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.836462021 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.836472988 CET	49849	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.836519003 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.837944031 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.838325024 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.838398933 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.838402987 CET	443	49848	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.838471889 CET	49848	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.839147091 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.839202881 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.839286089 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.839700937 CET	49853	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.839728117 CET	443	49853	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.842442036 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.842478991 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.846441031 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.846477032 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.848090887 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.848157883 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.890474081 CET	443	49847	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.890571117 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.895642996 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.895883083 CET	443	49847	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.895941973 CET	443	49847	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.895979881 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.896019936 CET	49847	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.896835089 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.896887064 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.896987915 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.897622108 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.897646904 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.911325932 CET	443	49852	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.915285110 CET	443	49853	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.919552088 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.922629118 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.925909042 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:25.962553978 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.962584019 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:25.969842911 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:25.969949961 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:25.970006943 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:25.973850965 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.006702900 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.006728888 CET	443	49852	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.006875992 CET	49853	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.006907940 CET	443	49853	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.007306099 CET	443	49853	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.007304907 CET	443	49852	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.009890079 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.009911060 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.010200977 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.010241032 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.010790110 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.010818958 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.011250019 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.011280060 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.011424065 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.011445999 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.011523008 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.012264013 CET	49853	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.012379885 CET	443	49853	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.012554884 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.012618065 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.012623072 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.012623072 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.012648106 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.012681961 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.012842894 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.012861013 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.012908936 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.013258934 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.013408899 CET	443	49852	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.014875889 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.015003920 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.020051956 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.020278931 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.021924973 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.022217989 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.023333073 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.023540020 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.032995939 CET	49853	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.033041000 CET	49853	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.033073902 CET	443	49853	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.034846067 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.034881115 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.034969091 CET	443	49852	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.035289049 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.035304070 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.035474062 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.035536051 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.035659075 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.035757065 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.035923958 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.035968065 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.036072016 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.036098957 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.036870003 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.036886930 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.036995888 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.037060976 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.037406921 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.037436008 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.037456036 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.037508965 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.037590981 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.037606955 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.037704945 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.039900064 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.040024996 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.040045977 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.040065050 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.040826082 CET	49834	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:26.040853024 CET	443	49834	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:26.078202009 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.082206011 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.125437021 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.243256092 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.243352890 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.246596098 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.247009993 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.247088909 CET	443	49857	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.247111082 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.247155905 CET	49857	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.247456074 CET	49860	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.247505903 CET	443	49860	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.247602940 CET	49860	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.250019073 CET	49860	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.250066996 CET	443	49860	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.250552893 CET	443	49853	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.250643015 CET	49853	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.259946108 CET	49853	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.260323048 CET	443	49853	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.260397911 CET	443	49853	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.260409117 CET	49853	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.260457039 CET	49853	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.260941029 CET	49861	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.260982037 CET	443	49861	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.261065006 CET	49861	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.263128996 CET	49861	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.263153076 CET	443	49861	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.271007061 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.271104097 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.271126032 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.272757053 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.272866964 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.273521900 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.273773909 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.273843050 CET	443	49858	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.273859978 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.273931026 CET	49858	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.275274992 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.275495052 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.275532007 CET	443	49856	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.275579929 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.275635004 CET	49856	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.323704958 CET	443	49852	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.323841095 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.326529980 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.326771975 CET	443	49852	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.326838970 CET	443	49852	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.326857090 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.326890945 CET	49852	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.328464031 CET	443	49860	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.331463099 CET	49860	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.331509113 CET	443	49860	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.331825972 CET	443	49860	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.343810081 CET	443	49861	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.346148014 CET	49860	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.346333981 CET	443	49860	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.346604109 CET	49861	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.346632957 CET	443	49861	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.347173929 CET	443	49861	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.348932981 CET	49861	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.349091053 CET	443	49861	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.349870920 CET	49860	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.349905968 CET	49860	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.349940062 CET	443	49860	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.350550890 CET	49861	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.350595951 CET	49861	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.350617886 CET	443	49861	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.528966904 CET	443	49851	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:26.529181004 CET	49851	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:26.549850941 CET	49851	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:26.549895048 CET	443	49851	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:26.550334930 CET	443	49851	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:26.550398111 CET	49851	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:26.563600063 CET	443	49860	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.563682079 CET	49860	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.566431046 CET	49851	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:26.570370913 CET	443	49861	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.570460081 CET	49861	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.610187054 CET	443	49851	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:26.638659954 CET	49860	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.638956070 CET	443	49860	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.639017105 CET	443	49860	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.639036894 CET	49860	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.639091969 CET	49860	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.654467106 CET	49861	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.654781103 CET	443	49861	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.654838085 CET	443	49861	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.654890060 CET	49861	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:26.826317072 CET	443	49851	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:26.826493025 CET	49851	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:26.865293980 CET	49851	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:26.865772963 CET	443	49851	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:26.865854025 CET	443	49851	162.125.248.18	192.168.2.3
Mar 15, 2022 17:07:26.865868092 CET	49851	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:26.865906954 CET	49851	443	192.168.2.3	162.125.248.18
Mar 15, 2022 17:07:26.995898008 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:26.996049881 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:27.039761066 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:27.040025949 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:27.040076971 CET	443	49855	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:27.040118933 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:27.040153027 CET	49855	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:30.637403965 CET	49865	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:30.637464046 CET	443	49865	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:30.637569904 CET	49865	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:30.638071060 CET	49865	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:30.638106108 CET	443	49865	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:30.714840889 CET	443	49865	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:30.717410088 CET	49865	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:30.717474937 CET	443	49865	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:30.718146086 CET	443	49865	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:30.718920946 CET	49865	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:30.719052076 CET	443	49865	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:30.733499050 CET	49865	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:30.733541965 CET	49865	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:30.733592033 CET	443	49865	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:30.981050014 CET	443	49865	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:30.981273890 CET	49865	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:31.469341040 CET	49865	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:31.469682932 CET	443	49865	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:31.469753981 CET	443	49865	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:31.469791889 CET	49865	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:31.469820976 CET	49865	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:33.272408962 CET	49866	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:33.272469044 CET	443	49866	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:33.272578001 CET	49866	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:33.272898912 CET	49866	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:33.272924900 CET	443	49866	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:33.350040913 CET	443	49866	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:33.387418985 CET	49866	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:33.387459993 CET	443	49866	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:33.388354063 CET	443	49866	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:33.390753031 CET	49866	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:33.390958071 CET	443	49866	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:33.391372919 CET	49866	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:33.391402006 CET	49866	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:33.391441107 CET	443	49866	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:33.607182026 CET	443	49866	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:33.607209921 CET	443	49866	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:33.607333899 CET	49866	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.006182909 CET	49866	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.006469011 CET	443	49866	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.006529093 CET	443	49866	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.006539106 CET	49866	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.006572008 CET	49866	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.409471989 CET	49870	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.409517050 CET	443	49870	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.409647942 CET	49870	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.410298109 CET	49870	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.410324097 CET	443	49870	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.488194942 CET	443	49870	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.488816977 CET	49870	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.488853931 CET	443	49870	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.491777897 CET	443	49870	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.492563963 CET	49870	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.493019104 CET	443	49870	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.493364096 CET	49870	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.493396997 CET	49870	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.493406057 CET	443	49870	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.702239990 CET	443	49870	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.910192013 CET	443	49870	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.910334110 CET	49870	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.911746025 CET	49870	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.912208080 CET	443	49870	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.912281990 CET	443	49870	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:34.912332058 CET	49870	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:34.912369013 CET	49870	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:36.458076954 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.458117008 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.458200932 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.458420038 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.458431959 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.526648045 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.527045965 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.527087927 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.527579069 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.527671099 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.528465986 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.528558016 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.530371904 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.530519962 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.530555010 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.550928116 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.551023960 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.551040888 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.551069021 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.551121950 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.551124096 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.551146030 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.551189899 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.552177906 CET	443	49875	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:36.552201986 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:36.552249908 CET	49875	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:38.006622076 CET	49877	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:38.006659985 CET	443	49877	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:38.006745100 CET	49877	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:38.007194042 CET	49877	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:38.007209063 CET	443	49877	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:38.087491989 CET	443	49877	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:38.088021994 CET	49877	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:38.088053942 CET	443	49877	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:38.088339090 CET	443	49877	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:38.089349985 CET	49877	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:38.089493990 CET	443	49877	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:38.090257883 CET	49877	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:38.090306044 CET	49877	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:38.090313911 CET	443	49877	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:38.301971912 CET	443	49877	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:38.302063942 CET	49877	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:38.303102016 CET	49877	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:38.303407907 CET	443	49877	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:38.303453922 CET	443	49877	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:38.303483963 CET	49877	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:38.303528070 CET	49877	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:40.192012072 CET	49881	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:40.192064047 CET	443	49881	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:40.192158937 CET	49881	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:40.198471069 CET	49881	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:40.198502064 CET	443	49881	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:40.247087002 CET	49882	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:40.247128010 CET	443	49882	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:40.247200966 CET	49882	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:40.328042984 CET	49882	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:40.328087091 CET	443	49882	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:40.341444969 CET	443	49881	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:40.341583014 CET	49881	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:40.462157011 CET	443	49882	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:40.462320089 CET	49882	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:41.270863056 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:41.270940065 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:41.271047115 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:41.271492958 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:41.271526098 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:41.404289007 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:41.404403925 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.278426886 CET	49881	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.278460026 CET	443	49881	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.278778076 CET	443	49881	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.278853893 CET	49881	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.279081106 CET	49882	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.279098988 CET	443	49882	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.279459953 CET	443	49882	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.279562950 CET	49882	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.307775021 CET	49882	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.307882071 CET	443	49882	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.309746027 CET	49881	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.309832096 CET	443	49881	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.369105101 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.369141102 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.369430065 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.369484901 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.369826078 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.369856119 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.432331085 CET	443	49881	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.432358027 CET	443	49881	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.432426929 CET	443	49881	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.432430983 CET	49881	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.432485104 CET	49881	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.444317102 CET	443	49882	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.444345951 CET	443	49882	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.444390059 CET	49882	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.444406986 CET	443	49882	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.444422007 CET	443	49882	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.444430113 CET	49882	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.444466114 CET	49882	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.530147076 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.530190945 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.530211926 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.530236959 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.530261040 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.530302048 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.530337095 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.572329998 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.572428942 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.572483063 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.572571039 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.598335028 CET	49881	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.598371983 CET	443	49881	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.617723942 CET	49882	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.617759943 CET	443	49882	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:42.618608952 CET	49883	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:07:42.618629932 CET	443	49883	20.82.210.154	192.168.2.3
Mar 15, 2022 17:07:43.486498117 CET	49888	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.486541033 CET	443	49888	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.486629009 CET	49888	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.487021923 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.487060070 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.487138033 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.487380028 CET	49888	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.487386942 CET	443	49888	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.487621069 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.487629890 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.563776016 CET	443	49888	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.564034939 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.564150095 CET	49888	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.564177990 CET	443	49888	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.564306974 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.564327955 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.564513922 CET	443	49888	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.564733028 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.565177917 CET	49888	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.565275908 CET	443	49888	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.565628052 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.565742016 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.565922976 CET	49888	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.606198072 CET	443	49888	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.665349007 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.810312033 CET	443	49888	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:43.925333977 CET	49888	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:43.925370932 CET	443	49888	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:44.025351048 CET	49888	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:44.104129076 CET	49888	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:44.104661942 CET	443	49888	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:44.104749918 CET	443	49888	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:44.104775906 CET	49888	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:44.104821920 CET	49888	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:44.312033892 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.312072992 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.312150955 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.312437057 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.312447071 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.392452002 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.393971920 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.394023895 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.394854069 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.408672094 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.408937931 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.410748005 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.458188057 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.689430952 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.761703014 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.761739016 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.761915922 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.761945009 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.761987925 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.762022972 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.796283960 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.796303034 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.796385050 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.796417952 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.796438932 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.796447039 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.796461105 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.796516895 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.796530008 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.796597958 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.796618938 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.828202963 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.828222036 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.828257084 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.828264952 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.828270912 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.828299999 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.828344107 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.828356981 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.828412056 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.853322029 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.853343964 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.853360891 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.853425026 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.853446960 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.853485107 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.853509903 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.853581905 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.871772051 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.871792078 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.871817112 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.871886969 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.871949911 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.871998072 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.872014999 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.872044086 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.872059107 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.886264086 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.886281013 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.886390924 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.886425972 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.886466980 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.886483908 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.886502028 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.886527061 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.902358055 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.902385950 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.902467012 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.902492046 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.902508020 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.902549982 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.908128023 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.908205032 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.908224106 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.908248901 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.908268929 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.908283949 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.908298016 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.908310890 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.908351898 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.932434082 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.932466984 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.932648897 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.932694912 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.932713985 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.942435026 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.942555904 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.942579985 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.942606926 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.943190098 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.943209887 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.952730894 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.952745914 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.952760935 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.952840090 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.952920914 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.952936888 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.952976942 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.961479902 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.961493969 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.961509943 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.961581945 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.961654902 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.961673975 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.961690903 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.970139980 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.970227957 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.970264912 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.970283985 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.970299006 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.970314026 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.970330954 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.970339060 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.970350027 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.977813959 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.977838039 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.977890968 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.977925062 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.977945089 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.977968931 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.985687017 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.985711098 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.985753059 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.985824108 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.985838890 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.985867023 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.992553949 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.992578030 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.992626905 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.992661953 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.992676973 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.992705107 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:44.999811888 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.999835014 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.999900103 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:44.999984980 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.000013113 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.000047922 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.006320000 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.006345987 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.006433010 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.006504059 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.006521940 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.006536007 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.012612104 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.012636900 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.012759924 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.012784004 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.012804985 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.018507004 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.018529892 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.018642902 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.018668890 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.018699884 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.025818110 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.025842905 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.025964975 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.025998116 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.026017904 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.031332970 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.031356096 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.031467915 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.031488895 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.036720037 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.036744118 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.036783934 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.036895037 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.036917925 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.036931992 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.040440083 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.040465117 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.040590048 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.040620089 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.046705008 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.046731949 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.046853065 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.046897888 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.050455093 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.050479889 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.050522089 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.050592899 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.050611019 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.050636053 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.055309057 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.055335999 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.055453062 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.055479050 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.059493065 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.059520006 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.059638977 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.059658051 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.063874960 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.063903093 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.063947916 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.064018011 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.064033031 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.064058065 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.067647934 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.067672014 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.067832947 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.067850113 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.071959019 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.071990967 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.072124004 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.072166920 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.072189093 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.075187922 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.075210094 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.075293064 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.075314999 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.075345039 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.080744982 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.080768108 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.080905914 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.080928087 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.080945969 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.082643032 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.082664967 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.082772017 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.082796097 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.082823992 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.086385965 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.086410999 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.086597919 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.086611032 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.086618900 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.088229895 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.088253021 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.088390112 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.088397980 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.088411093 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.091686964 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.091708899 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.091835976 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215092897 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215143919 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215171099 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215218067 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215238094 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215257883 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215275049 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215322971 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215336084 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215352058 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215364933 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215384960 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215392113 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215409994 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215423107 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215440035 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215449095 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215466976 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215480089 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215501070 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215511084 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215528965 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215542078 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215553999 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215574026 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215593100 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.215612888 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215629101 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.215671062 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.235598087 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.244436979 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.244723082 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.244772911 CET	443	49890	162.125.65.15	192.168.2.3
Mar 15, 2022 17:07:45.244807005 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:45.244843960 CET	49890	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:07:49.161647081 CET	49896	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.161710024 CET	443	49896	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.161807060 CET	49896	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.163234949 CET	49896	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.163266897 CET	443	49896	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.448965073 CET	443	49896	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.449426889 CET	49896	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.449450970 CET	443	49896	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.449867964 CET	443	49896	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.450342894 CET	49896	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.450459957 CET	443	49896	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.450510025 CET	49896	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.494182110 CET	443	49896	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.578825951 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.578862906 CET	443	49899	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.578943968 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.579262972 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.579274893 CET	443	49899	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.626028061 CET	49896	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.776216030 CET	443	49896	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.776357889 CET	443	49896	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.776432037 CET	49896	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.780092955 CET	49896	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.780118942 CET	443	49896	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.866204023 CET	443	49899	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.925518036 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.982147932 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.982199907 CET	443	49899	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.983089924 CET	443	49899	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.991941929 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.992377043 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:49.992387056 CET	443	49899	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:49.992758036 CET	443	49899	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:50.125853062 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:50.190206051 CET	443	49899	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:50.190357924 CET	443	49899	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:50.190438032 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:50.195272923 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:50.195314884 CET	443	49899	3.210.49.210	192.168.2.3
Mar 15, 2022 17:07:50.195331097 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:50.195385933 CET	49899	443	192.168.2.3	3.210.49.210
Mar 15, 2022 17:07:53.001372099 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:53.001391888 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:53.001447916 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:53.042190075 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:53.274481058 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:53.274533987 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:53.274564028 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:53.275602102 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:53.275877953 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:53.275927067 CET	443	49889	162.125.65.18	192.168.2.3
Mar 15, 2022 17:07:53.275964975 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:53.275985003 CET	49889	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:07:56.114773035 CET	80	49693	93.184.220.29	192.168.2.3
Mar 15, 2022 17:07:56.114970922 CET	49693	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:07:56.547657967 CET	49699	443	192.168.2.3	23.203.67.116
Mar 15, 2022 17:07:56.565985918 CET	443	49699	23.203.67.116	192.168.2.3
Mar 15, 2022 17:07:56.566040993 CET	443	49699	23.203.67.116	192.168.2.3
Mar 15, 2022 17:07:56.566132069 CET	49699	443	192.168.2.3	23.203.67.116
Mar 15, 2022 17:07:56.566173077 CET	49699	443	192.168.2.3	23.203.67.116
Mar 15, 2022 17:07:56.951669931 CET	80	49692	93.184.220.29	192.168.2.3
Mar 15, 2022 17:07:56.951905012 CET	49692	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:07:57.138061047 CET	49701	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:57.138258934 CET	49702	443	192.168.2.3	131.253.33.200
Mar 15, 2022 17:07:58.043191910 CET	80	49697	93.184.220.29	192.168.2.3
Mar 15, 2022 17:07:58.043320894 CET	49697	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:07:59.558689117 CET	49715	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.609874964 CET	443	49715	20.199.120.85	192.168.2.3
Mar 15, 2022 17:07:59.667063951 CET	49915	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.667114019 CET	443	49915	20.199.120.85	192.168.2.3
Mar 15, 2022 17:07:59.667206049 CET	49915	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.668293953 CET	49915	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.668320894 CET	443	49915	20.199.120.85	192.168.2.3
Mar 15, 2022 17:07:59.737236977 CET	49715	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.771131992 CET	443	49915	20.199.120.85	192.168.2.3
Mar 15, 2022 17:07:59.771236897 CET	49915	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.780863047 CET	49915	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.780883074 CET	443	49915	20.199.120.85	192.168.2.3
Mar 15, 2022 17:07:59.781218052 CET	443	49915	20.199.120.85	192.168.2.3
Mar 15, 2022 17:07:59.782211065 CET	49915	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.782279968 CET	49915	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.782289028 CET	443	49915	20.199.120.85	192.168.2.3
Mar 15, 2022 17:07:59.782593966 CET	49915	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.813572884 CET	443	49915	20.199.120.85	192.168.2.3
Mar 15, 2022 17:07:59.813653946 CET	443	49915	20.199.120.85	192.168.2.3
Mar 15, 2022 17:07:59.813740015 CET	49915	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.814019918 CET	49915	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:07:59.814045906 CET	443	49915	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:06.943934917 CET	49924	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:08:06.943979025 CET	443	49924	20.199.120.182	192.168.2.3
Mar 15, 2022 17:08:06.944077015 CET	49924	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:08:06.945152998 CET	49924	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:08:06.945172071 CET	443	49924	20.199.120.182	192.168.2.3
Mar 15, 2022 17:08:07.070885897 CET	443	49924	20.199.120.182	192.168.2.3
Mar 15, 2022 17:08:07.071007967 CET	49924	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:08:07.625371933 CET	49924	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:08:07.625405073 CET	443	49924	20.199.120.182	192.168.2.3
Mar 15, 2022 17:08:07.625792980 CET	443	49924	20.199.120.182	192.168.2.3
Mar 15, 2022 17:08:07.627000093 CET	49924	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:08:07.627074003 CET	49924	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:08:07.627084970 CET	443	49924	20.199.120.182	192.168.2.3
Mar 15, 2022 17:08:07.627242088 CET	49924	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:08:07.670202017 CET	443	49924	20.199.120.182	192.168.2.3
Mar 15, 2022 17:08:07.680497885 CET	443	49924	20.199.120.182	192.168.2.3
Mar 15, 2022 17:08:07.680603981 CET	443	49924	20.199.120.182	192.168.2.3
Mar 15, 2022 17:08:07.680722952 CET	49924	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:08:07.690833092 CET	49924	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:08:07.690872908 CET	443	49924	20.199.120.182	192.168.2.3
Mar 15, 2022 17:08:13.112615108 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.112683058 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.112701893 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.112716913 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.112833977 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.115293980 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.152421951 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.152468920 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.158194065 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.158231020 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.174530983 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.174588919 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.174750090 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.181591988 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.181627989 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.223531961 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.223721981 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.228457928 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.228636026 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.244395971 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.244539022 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.384999990 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.385044098 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.385186911 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.386137009 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.386152029 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.422662973 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.422842979 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.566083908 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.566124916 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.566226959 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.655050039 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.655080080 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.689960957 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:13.690146923 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:13.797249079 CET	49934	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:08:13.797298908 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:13.797425032 CET	49934	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:08:13.797807932 CET	49934	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:08:13.797827005 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:13.925959110 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:13.926033020 CET	49934	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:08:13.937402964 CET	49934	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:08:13.937443972 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:14.010320902 CET	49934	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:08:14.010339975 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:14.045059919 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.045094013 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.045367956 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.045468092 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.046533108 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.046789885 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.046905041 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.046931982 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.046938896 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.047028065 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.047158003 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.047166109 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.047363043 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.047446966 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.047543049 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.049485922 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.049510956 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.049731016 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.049766064 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.049784899 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.050777912 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.050810099 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.051177979 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.051264048 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.052577019 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.065174103 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.065207005 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.065229893 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.065256119 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.065298080 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.065310001 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.065382957 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.066020012 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.066090107 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.066116095 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.066135883 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.066163063 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.066184998 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.066210032 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.066236019 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.066255093 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.066288948 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.068088055 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.068121910 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.068265915 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.068273067 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.068300962 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.068348885 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.068375111 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.068958044 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.069019079 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.069056988 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.069117069 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.069122076 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.069123030 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.069196939 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.069201946 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.069222927 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.069247961 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.069276094 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.069303036 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.069958925 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.070030928 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.070046902 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.070060015 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.070115089 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.070406914 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.070434093 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.070513964 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.070530891 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.070544004 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.070724964 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.070733070 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.071008921 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.071043968 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.071168900 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.071193933 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.071217060 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.071326971 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.071815968 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.071840048 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.071922064 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.071943045 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.071981907 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.071984053 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.072019100 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.072020054 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.072084904 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.072118998 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.072134018 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.072170019 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.072185993 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.072865963 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.072890997 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.073007107 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.073020935 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.073055983 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.073074102 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.073550940 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.073646069 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.073864937 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.073904991 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.073961020 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.074023008 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.074031115 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.074095011 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.074150085 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.074215889 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.074244022 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.074280024 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.074304104 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.074321032 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.074374914 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.074429035 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.075048923 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.075072050 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.075211048 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.075233936 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.075264931 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.075294018 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.075314999 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.075314999 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.075387001 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.075444937 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.075453043 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.075520039 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.075643063 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.075757027 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.076198101 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.076225042 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.076338053 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.076347113 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.076375961 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.076410055 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.080604076 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.080636024 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.080841064 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.080862999 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.080929041 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.081206083 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.081316948 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.092811108 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.092845917 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.092966080 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.093008995 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.093035936 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.093074083 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.093127012 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.093139887 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.093182087 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.093219042 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.093225002 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.093456984 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.093477011 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.093494892 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.093584061 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.093668938 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.093694925 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.093707085 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.093730927 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.093796015 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.093805075 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.093837023 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.093866110 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.094053030 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.094146967 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.094389915 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.094439030 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.094471931 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.094547987 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.094582081 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.094609976 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.094620943 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.094635010 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.094724894 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.094738960 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.094758034 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.094759941 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.094791889 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.094805002 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.094844103 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.094851017 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.094901085 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.094949007 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.094978094 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.095412016 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.095534086 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.095568895 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.095676899 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.096261978 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.096287012 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.096350908 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.096390009 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.096420050 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.096436977 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.096529007 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.096546888 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.096565962 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.096586943 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.096590042 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.096604109 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.096692085 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.096704960 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.096756935 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.097296953 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.097326040 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.097395897 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.097419977 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.097429991 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.097511053 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.097711086 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.097745895 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.097759008 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.097884893 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.097899914 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.097971916 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.099558115 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.099649906 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.099714041 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.099729061 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.099767923 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.099795103 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.101234913 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.101341009 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.110502958 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.110557079 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.110761881 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.110786915 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.110855103 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.110934019 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.111042023 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.112128019 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.112133980 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.112169027 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.112175941 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.112380981 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.112385988 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.112394094 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.112406015 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.112442970 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.112519026 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.112520933 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.112556934 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.112607002 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.112647057 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.112783909 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.112812042 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.112917900 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.112940073 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.112967014 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.113001108 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.113013983 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.113082886 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.113092899 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.113132000 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.113162041 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.113442898 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.113470078 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.113588095 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.113598108 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.113662958 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.113914013 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.114034891 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.114131927 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.114255905 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.114366055 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.114399910 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.114531994 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.114542007 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.114643097 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.115533113 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.115583897 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.115667105 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.115686893 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.115704060 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.115709066 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.115811110 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.115832090 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.115871906 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.115874052 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.115906000 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.115972042 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.115999937 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.116090059 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.116090059 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.116101027 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.116120100 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.116173983 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.116187096 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.116199017 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.116240025 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.116247892 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.116281986 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.116312027 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.116328001 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.116354942 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.116372108 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.116400003 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.116843939 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.116857052 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.117033958 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.117053032 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.117341995 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.117368937 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.117476940 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.117487907 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.117523909 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.117571115 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.117594004 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.117643118 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.117733955 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.117748022 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.117799997 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.117832899 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.117935896 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.117959023 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.118036032 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.118046999 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.118107080 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.118148088 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.118257999 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.118462086 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.118542910 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.118566990 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.118597984 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.118654013 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.118668079 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.118702888 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.118730068 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.119079113 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.119107962 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.119153976 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.119266033 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.119307041 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.119318008 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.119323969 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.119333982 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.119421005 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.119434118 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.119462967 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.119469881 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.119471073 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.119497061 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.119512081 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.119604111 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.119612932 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.119661093 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.119986057 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.120084047 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.120505095 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.120536089 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.120615959 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.120621920 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.120678902 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.120693922 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.120735884 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.120809078 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.120831966 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.120853901 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.120896101 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.120937109 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.120986938 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.121057034 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.121068001 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.121129036 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.121161938 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.121243954 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.121268034 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.121372938 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.121402979 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.121510029 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.121587992 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.121594906 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.121637106 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.121650934 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.121710062 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.121740103 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.121747971 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.121840954 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.121941090 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.122056961 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.122287035 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.122330904 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.122436047 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.122448921 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.122478008 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.122514009 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.122560978 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.122581959 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.122657061 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.122669935 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.122735977 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.123207092 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.123260975 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.123290062 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.123323917 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.123445988 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.123456955 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.123523951 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.123560905 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.123593092 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.123660088 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.123673916 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.123735905 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.123783112 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.124068975 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.124171972 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.124341011 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.124465942 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.124588966 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.124634027 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.124695063 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.124710083 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.124720097 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.124749899 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.124813080 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.124876022 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.124967098 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.124996901 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.125072956 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.125081062 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.125125885 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.125190020 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.125387907 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.125463963 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.125694036 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.125730991 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.125807047 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.125819921 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.125845909 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.125874043 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.126419067 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.126535892 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.126558065 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.126585960 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.126626015 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.126652956 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.126698017 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.126709938 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.126827002 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.126840115 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.126874924 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.126883030 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.126899004 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.126923084 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.126981974 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.126990080 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.127003908 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.127044916 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.127094984 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.127098083 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.127134085 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.127192974 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.127202034 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.127237082 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.127263069 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.127460957 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.127569914 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.128000975 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.128034115 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.128170967 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.128184080 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.128192902 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.128231049 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.128304005 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.128324032 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.128372908 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.128390074 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.128411055 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.128436089 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.128726006 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.128755093 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.128817081 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.128844023 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.128860950 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.128947973 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.128951073 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.129102945 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.129108906 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.129148006 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.129241943 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.129266024 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.129277945 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.129311085 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.129342079 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.130106926 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130126953 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130228043 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.130239010 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130280018 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.130297899 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.130346060 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130372047 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130419970 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130423069 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.130439043 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130446911 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130487919 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.130496979 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130578041 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.130589008 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130611897 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.130634069 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.130660057 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.130863905 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130897045 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.130945921 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.131007910 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.131017923 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.131082058 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.132646084 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:14.132677078 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:14.132709026 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:14.132751942 CET	49934	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:08:14.132814884 CET	49934	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:08:14.132826090 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:14.132886887 CET	49934	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:08:14.136687994 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.136739016 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.136878014 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.136898994 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.136955023 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.136982918 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.138520956 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.138694048 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.139175892 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.139200926 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.139326096 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.139350891 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.139415026 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.140160084 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.140312910 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.143750906 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.143789053 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.143893003 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.143910885 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.143970013 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.143984079 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.144052982 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.144083023 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.144146919 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.144170046 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.144191027 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.144221067 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.144543886 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.144573927 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.144695044 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.144702911 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.144727945 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.144779921 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.144781113 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.144881010 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.144896030 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.144939899 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.144969940 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.144998074 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145030022 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145106077 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.145117044 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145174980 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.145199060 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145201921 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.145232916 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145304918 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.145318031 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145350933 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.145385027 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.145543098 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145565033 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145646095 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.145661116 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145684958 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145704031 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.145733118 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.145795107 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.145814896 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145893097 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.145905018 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.145973921 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.146354914 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146400928 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146490097 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.146503925 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146538019 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.146559000 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.146672964 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146702051 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146740913 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146754026 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.146761894 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146773100 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146775007 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146783113 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146831036 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146857023 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.146872044 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146874905 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.146877050 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.146888971 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.146971941 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.146986961 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.146991014 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.147253036 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.147309065 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.147347927 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.147360086 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.147403002 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.147409916 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.147435904 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.147464991 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.147634983 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.147674084 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.147691011 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.147742987 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.147752047 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.147806883 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.147862911 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.147867918 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.147921085 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.147949934 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.148010015 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.148026943 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.148040056 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.148075104 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.148439884 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.148477077 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.148574114 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.148597956 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.148619890 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.148667097 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.148679972 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.148732901 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.148794889 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.148974895 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.148997068 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.149060011 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.149074078 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.149100065 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.149192095 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.149591923 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.149651051 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.149741888 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.149770021 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.149785995 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.149838924 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.149877071 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.149878979 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.149895906 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.149979115 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.150005102 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.150024891 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.150043964 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.150082111 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.150080919 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.150125980 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.150180101 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.150190115 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.150211096 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.150252104 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.150305033 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.150542021 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.150577068 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.150636911 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.150652885 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.150691032 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.150712013 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.150799990 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.150917053 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.152098894 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.152132988 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.152195930 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.152316093 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.152333975 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.152344942 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.152349949 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.152390957 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.173970938 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:14.174101114 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:14.174216032 CET	49934	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:08:14.174802065 CET	49934	443	192.168.2.3	20.82.210.154
Mar 15, 2022 17:08:14.174824953 CET	443	49934	20.82.210.154	192.168.2.3
Mar 15, 2022 17:08:14.184887886 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.184928894 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.185041904 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.185054064 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.185086966 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.185139894 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.193478107 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.193532944 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.193603992 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.193624020 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.193659067 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.193666935 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.193681955 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.193702936 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.193743944 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.193763971 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.193802118 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.193808079 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.193844080 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.193869114 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.193872929 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.193967104 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.213066101 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213099957 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213224888 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213289976 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.213315964 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213330030 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.213397980 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.213466883 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213515043 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213561058 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.213579893 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213614941 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.213637114 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213640928 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.213656902 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213696003 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213725090 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213733912 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.213809013 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.213823080 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.213869095 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215030909 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215068102 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215164900 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215188026 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215240955 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215270042 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215290070 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215331078 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215339899 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215378046 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215420008 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215504885 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215557098 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215601921 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215620041 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215634108 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215640068 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215666056 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215670109 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215682983 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215712070 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215754986 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215766907 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215785980 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215831995 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215869904 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215894938 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215948105 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215954065 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215964079 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.215982914 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.215986967 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216032028 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216042995 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216068029 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216084003 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216116905 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216125965 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216145992 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216146946 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216175079 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216178894 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216197014 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216226101 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216254950 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216279984 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216285944 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216296911 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216315031 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216351032 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216370106 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216435909 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216481924 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216507912 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216552019 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216561079 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216578960 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216592073 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216607094 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216634035 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216643095 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216660023 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.216680050 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.216730118 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.221173048 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.221225023 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.221302032 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.221323967 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.221354008 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.221364975 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.221374035 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.221394062 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.221425056 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.221430063 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.221461058 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.221470118 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.221498013 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.221527100 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.221657038 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.221733093 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.222296000 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.222335100 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.222382069 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.222395897 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.222445965 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.222655058 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.222690105 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.222728968 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.222739935 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.222793102 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.222800016 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.222825050 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.222863913 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.222887993 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.222923040 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.222955942 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.222994089 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223004103 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223031044 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223036051 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223057032 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223064899 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223081112 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223093987 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223140001 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223150015 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223187923 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223198891 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223208904 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223234892 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223267078 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223287106 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223351955 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223418951 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223428011 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223448038 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223450899 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223473072 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223479033 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223498106 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223511934 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223527908 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223552942 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223582983 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223665953 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223717928 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223753929 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223800898 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223814964 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223839998 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223858118 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223876953 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223881006 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223895073 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.223926067 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223963022 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.223978043 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.224065065 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.224097013 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.224132061 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.224169970 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.224180937 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.224196911 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.224204063 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.224224091 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.224232912 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.224250078 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.224276066 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.224309921 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.224319935 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.224374056 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.286032915 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.286070108 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.286236048 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.286302090 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.286391020 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.286577940 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.286614895 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.286669970 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.286683083 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.286701918 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.286746979 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.286783934 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.287257910 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.287290096 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.287369967 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.287399054 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.287417889 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.287451982 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.288301945 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.288333893 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.288383007 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.288430929 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.288458109 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.288496017 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.288521051 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.289262056 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.289294004 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.289330006 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.289344072 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.289371014 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.289397001 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.290656090 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.290690899 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.290735006 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.290747881 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.290812016 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.402187109 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.402287006 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.422204018 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.422302008 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.426198006 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.426301956 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.430198908 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.430315971 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.498215914 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.498385906 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.603027105 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.603046894 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603065968 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603239059 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.603254080 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603274107 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603283882 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603427887 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.603440046 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603458881 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603471994 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603554010 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.603568077 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603606939 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.603617907 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603676081 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.603684902 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603746891 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.603756905 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603770018 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603825092 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.603838921 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603888988 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.603890896 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603925943 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.603962898 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.603979111 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.604032993 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.604046106 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.604068041 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.604104042 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.604115009 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.604185104 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.604196072 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.604244947 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.604254961 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.604315042 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.604366064 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.605946064 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.606139898 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.608829021 CET	49933	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.608875990 CET	443	49933	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.630192995 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.630304098 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.634211063 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.634416103 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.638205051 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.638288975 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.710192919 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.710333109 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.970195055 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.970216990 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970227003 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970354080 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.970364094 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970387936 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970478058 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.970484018 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970494986 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970503092 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970530987 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.970537901 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970624924 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.970633030 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970643997 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970732927 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.970741034 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970755100 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970762968 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970853090 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.970860958 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970873117 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970968008 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.970976114 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.970988035 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.971003056 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.971030951 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.971085072 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.971101999 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.971137047 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.971143007 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.971178055 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.971184015 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.971193075 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.971221924 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.971333981 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.971338034 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.971340895 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.971364975 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.971381903 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.971431017 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.971496105 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.972521067 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.972533941 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.972640038 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.972843885 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.972858906 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.972881079 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.972897053 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.972997904 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.973006010 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973016024 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973109961 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.973119020 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973128080 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973249912 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.973257065 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973265886 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973274946 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973289967 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.973295927 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973392010 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.973407984 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973423004 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973432064 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973562002 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.973570108 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973582983 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973701000 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.973707914 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973716021 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.973743916 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.973790884 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.977299929 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.977313995 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.977329016 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.977468014 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.977474928 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.977483034 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.977613926 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.977622032 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.977637053 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.977648020 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.977772951 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.977778912 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.977792025 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.977946043 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.977952957 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.977961063 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.977976084 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.978002071 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.978007078 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.978126049 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.978132963 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.978142977 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.978199005 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.978256941 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.978831053 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.978841066 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.978977919 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.979235888 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.979244947 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.979262114 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.979274988 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.979429007 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.979438066 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.979453087 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.979465008 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.979594946 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.979602098 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.979615927 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.979696989 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.979707956 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.979831934 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.979840040 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.979856014 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.979887962 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.980010033 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.980750084 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:14.980760098 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:14.980880976 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.009330034 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.009355068 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.009377003 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.009391069 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.009469986 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.009480000 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.009593010 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.009602070 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.009620905 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.009634018 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.009763956 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.009773016 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.009797096 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.009809017 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.009814024 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.009876966 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.009953022 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.010848045 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.010863066 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.011255980 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.011476040 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.011481047 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.011542082 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.016782999 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.032598019 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.033195019 CET	49932	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.033222914 CET	443	49932	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.046195030 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.046267986 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.078203917 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.078377962 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.142198086 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.142275095 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.183969021 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.183995962 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.184012890 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.184067965 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.184076071 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.184137106 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.184143066 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.184170961 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.184175968 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.184250116 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.184254885 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.184314013 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.184319973 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.184370995 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.184376001 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.184427023 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.184480906 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.186062098 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.186245918 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.187133074 CET	49929	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.187146902 CET	443	49929	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.380863905 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.380904913 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.380954027 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381122112 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.381130934 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381144047 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381284952 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.381293058 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381303072 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381319046 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381397963 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.381403923 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381439924 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.381445885 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381458998 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381505013 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.381510973 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381581068 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.381587029 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381649017 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.381654978 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381664038 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381738901 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.381772995 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.381831884 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.381839991 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.382395029 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.382405996 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.382425070 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.382430077 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.382440090 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.382602930 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.382611036 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.382626057 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.382838011 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.382852077 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.382941008 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.382946968 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.382966995 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.383203983 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.385359049 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.385376930 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.385396004 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.385498047 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.385725021 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.385730982 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.385761976 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.385910988 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.385917902 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.385932922 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.385986090 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.385993004 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386073112 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.386079073 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386095047 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386135101 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.386141062 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386148930 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386229038 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.386239052 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386256933 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386287928 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.386296034 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386399984 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.386408091 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386419058 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386434078 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386516094 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.386523962 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386573076 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.386579990 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.386657953 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.387249947 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.387260914 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.387274981 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.387291908 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.387387991 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.387393951 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.387552023 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.387564898 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.387589931 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.387788057 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.387798071 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.387814045 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.387830019 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.387933016 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.387943029 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.388021946 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.388031006 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.388053894 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.388101101 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.388107061 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.388231039 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.388240099 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.388318062 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.388329029 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.388354063 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.388417006 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.389034033 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.389064074 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.389219999 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.389344931 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.389358997 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.389389038 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.389413118 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.389619112 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.389632940 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.389658928 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.389683008 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.389859915 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.389868975 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.389900923 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.389938116 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.389946938 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.389955997 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.390141964 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.390152931 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.390204906 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.390222073 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.390495062 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.390506029 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.390531063 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.390548944 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.390769958 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.390780926 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.390813112 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.390820026 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.390974998 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.392535925 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.432426929 CET	49931	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.432462931 CET	443	49931	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.612394094 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.612435102 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.612463951 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.612581968 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.612591028 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.612601995 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.612665892 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.612670898 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.612728119 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.612731934 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.612785101 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.612792015 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.612808943 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.612835884 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.612840891 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.612915039 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.612924099 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.612936974 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:15.613018990 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.615180016 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.615402937 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.616388083 CET	49930	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:15.616410017 CET	443	49930	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:17.478122950 CET	49938	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.478185892 CET	443	49938	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.478333950 CET	49938	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.479315996 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.479378939 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.479470968 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.483935118 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.483988047 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.484319925 CET	49938	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.484354973 CET	443	49938	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.560137987 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.560384035 CET	443	49938	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.560755014 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.560786963 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.561069012 CET	49938	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.561104059 CET	443	49938	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.561562061 CET	443	49938	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.562124968 CET	49938	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.562366009 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.562469006 CET	443	49938	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.562745094 CET	49938	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.562808990 CET	443	49938	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.563354969 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.563541889 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.627857924 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.780570030 CET	443	49938	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.866554022 CET	49938	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.866588116 CET	443	49938	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.964665890 CET	49938	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.965014935 CET	443	49938	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.965086937 CET	443	49938	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:17.965109110 CET	49938	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.965138912 CET	49938	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:17.967489004 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:17.967534065 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:17.967645884 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:17.967927933 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:17.967948914 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.026849985 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.027590036 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.027637005 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.028048992 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.028666973 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.028774023 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.028958082 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.070204973 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.313746929 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.372924089 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.430639982 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.430670977 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.430699110 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.430767059 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.430809021 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.430825949 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.430850983 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.430913925 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.460243940 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.460272074 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.460355997 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.460382938 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.460437059 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.460458994 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.460467100 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.460494995 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.504138947 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.504182100 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.504215956 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.504236937 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.504291058 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.533973932 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.534013033 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.534061909 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.534087896 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.534111977 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.534132004 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.561086893 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.561126947 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.561258078 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.561288118 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.561342001 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.584682941 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.584726095 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.584880114 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.584949970 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.584997892 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.609374046 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.609420061 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.609497070 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.609529972 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.609550953 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.609579086 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.629797935 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.629843950 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.629929066 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.629961014 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.629981041 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.630012035 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.650060892 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.650105953 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.650262117 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.650311947 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.650365114 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.662964106 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.663003922 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.663135052 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.663172007 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.663224936 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.676677942 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.676728964 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.676906109 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.676958084 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.677011013 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.688327074 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.688366890 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.688522100 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.688568115 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.688628912 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.700341940 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.700381994 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.700532913 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.700591087 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.700645924 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.710517883 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.710558891 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.710762978 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.710813046 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.710871935 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.721232891 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.721292019 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.721335888 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.721364021 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.721401930 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.721436977 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.730036974 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.730074883 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.730237007 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.730278969 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.730329037 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.739979029 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.740015984 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.740147114 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.740175962 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.740228891 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.749461889 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.749500990 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.749619007 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.749650002 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.749989986 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.757232904 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.757272959 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.757414103 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.757452965 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.757510900 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.766998053 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.767035961 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.767168045 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.767213106 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.767260075 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.774265051 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.774305105 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.774410963 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.774454117 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.774502039 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.782646894 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.782685995 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.782840967 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.782893896 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.782946110 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.790278912 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.790318966 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.790445089 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.790483952 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.790537119 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.796921968 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.796968937 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.797121048 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.797161102 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.797226906 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.803646088 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.803694963 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.803847075 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.803886890 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.803949118 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.810261011 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.810307980 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.810492039 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.810539961 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.810605049 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.815661907 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.815707922 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.815881968 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.815920115 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.815973997 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.822432995 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.822484970 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.822623968 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.822659969 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.822766066 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.826718092 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.826759100 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.826935053 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.826968908 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.827029943 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.827038050 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.837239981 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.837274075 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.837393045 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.837433100 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.838278055 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.838310957 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.838375092 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.838393927 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.838438034 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.843028069 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.843064070 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.843163967 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.843199968 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.843228102 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.848936081 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.848969936 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.849015951 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.849050999 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.849080086 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.853451967 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.853493929 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.853600979 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.853641987 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.853662014 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.857249022 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.857285976 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.857326984 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.857355118 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.857374907 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.862387896 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.862432957 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.862538099 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.862575054 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.862597942 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.866071939 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.866106987 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:18.866152048 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:18.866202116 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.074212074 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.265924931 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.494195938 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.494272947 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.870464087 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.870491028 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870506048 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870528936 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870544910 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870559931 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870573044 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.870580912 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870596886 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870640039 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.870647907 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870659113 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870675087 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870687962 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.870697975 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870723009 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870733976 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870742083 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.870758057 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870769024 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870783091 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870796919 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.870801926 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870826960 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.870836973 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.870882034 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.876233101 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.876368999 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:19.876454115 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.965708971 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.968164921 CET	49940	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:08:19.968197107 CET	443	49940	162.125.65.15	192.168.2.3
Mar 15, 2022 17:08:20.357824087 CET	49941	443	192.168.2.3	20.199.120.151
Mar 15, 2022 17:08:20.357881069 CET	443	49941	20.199.120.151	192.168.2.3
Mar 15, 2022 17:08:20.357954025 CET	49941	443	192.168.2.3	20.199.120.151
Mar 15, 2022 17:08:20.359879017 CET	49941	443	192.168.2.3	20.199.120.151
Mar 15, 2022 17:08:20.359905958 CET	443	49941	20.199.120.151	192.168.2.3
Mar 15, 2022 17:08:20.463546991 CET	443	49941	20.199.120.151	192.168.2.3
Mar 15, 2022 17:08:20.463676929 CET	49941	443	192.168.2.3	20.199.120.151
Mar 15, 2022 17:08:20.466635942 CET	49941	443	192.168.2.3	20.199.120.151
Mar 15, 2022 17:08:20.466653109 CET	443	49941	20.199.120.151	192.168.2.3
Mar 15, 2022 17:08:20.467828035 CET	443	49941	20.199.120.151	192.168.2.3
Mar 15, 2022 17:08:20.470083952 CET	49941	443	192.168.2.3	20.199.120.151
Mar 15, 2022 17:08:20.482471943 CET	49941	443	192.168.2.3	20.199.120.151
Mar 15, 2022 17:08:20.482495070 CET	443	49941	20.199.120.151	192.168.2.3
Mar 15, 2022 17:08:20.482692957 CET	49941	443	192.168.2.3	20.199.120.151
Mar 15, 2022 17:08:20.514235020 CET	443	49941	20.199.120.151	192.168.2.3
Mar 15, 2022 17:08:20.514785051 CET	443	49941	20.199.120.151	192.168.2.3
Mar 15, 2022 17:08:20.514869928 CET	49941	443	192.168.2.3	20.199.120.151
Mar 15, 2022 17:08:20.531188011 CET	49941	443	192.168.2.3	20.199.120.151
Mar 15, 2022 17:08:20.531244993 CET	443	49941	20.199.120.151	192.168.2.3
Mar 15, 2022 17:08:23.000027895 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:23.000058889 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:23.000097036 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:23.042188883 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:23.219715118 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:23.219789982 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:23.219862938 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:23.222089052 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:23.222448111 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:23.222517014 CET	443	49939	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:23.222524881 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:23.222626925 CET	49939	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:25.545799017 CET	49946	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:25.545821905 CET	443	49946	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:25.545902967 CET	49946	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:25.546201944 CET	49946	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:25.546216965 CET	443	49946	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:25.622636080 CET	443	49946	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:25.625027895 CET	49946	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:25.625067949 CET	443	49946	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:25.625592947 CET	443	49946	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:25.628810883 CET	49946	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:25.628839970 CET	49946	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:25.628844976 CET	49946	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:25.628922939 CET	443	49946	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:25.629070997 CET	443	49946	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:25.672871113 CET	49946	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:25.857566118 CET	443	49946	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:25.857700109 CET	49946	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:25.859077930 CET	49946	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:25.859339952 CET	443	49946	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:25.859409094 CET	49946	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:26.703226089 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:26.703277111 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:26.703378916 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:26.703890085 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:26.703903913 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:26.779371977 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:26.800379992 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:26.800410986 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:26.801048994 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:26.803523064 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:26.803708076 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:26.804097891 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:26.804117918 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:26.804138899 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:27.018045902 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:27.018071890 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:27.018588066 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:27.018614054 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:27.067446947 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:27.416601896 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:27.416989088 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:27.417071104 CET	443	49950	162.125.65.18	192.168.2.3
Mar 15, 2022 17:08:27.417113066 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:27.417149067 CET	49950	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:08:33.587816000 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.587888002 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.587980032 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.603773117 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.603806019 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.640018940 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.640141010 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.641937971 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.644387960 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.644542933 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.713182926 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.713215113 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.713392973 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.713408947 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.713504076 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.714684963 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.714732885 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.714783907 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.714798927 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.714849949 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.714870930 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.714901924 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.714911938 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.714967012 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.716813087 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.716865063 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.716944933 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.716958046 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.716972113 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.717097998 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.717469931 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.717509031 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.717902899 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.724040985 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.724065065 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.729470968 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.729510069 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.729628086 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.729650974 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.729722977 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.731184959 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.731216908 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.731359959 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.731370926 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.731443882 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.732671022 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.732702017 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.732800961 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.732809067 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.732889891 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.744941950 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.745035887 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.746345043 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.746377945 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.746443987 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.746459961 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.746476889 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.746503115 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.747549057 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.747576952 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.747633934 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.747653008 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.747679949 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.747705936 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.748370886 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.748435974 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.749464035 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.749519110 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.749629021 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.749649048 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.749715090 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.751365900 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.751394987 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.751466036 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.751492023 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.751511097 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.751569986 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.752279997 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.752360106 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.753354073 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.753398895 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.753456116 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.753472090 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.753516912 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.753521919 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.755247116 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.755279064 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.755342960 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.755364895 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.755384922 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.755394936 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.755405903 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.755414009 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.755439997 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.755470991 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.757316113 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.757370949 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.757390022 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.757412910 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.757433891 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.757452011 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.757534981 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.759076118 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.759170055 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.761837959 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.761873960 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.761926889 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.761951923 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.761971951 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.761980057 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.762000084 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.762007952 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.762036085 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.762140036 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.763726950 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.763808966 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.763830900 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.763845921 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.763873100 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.763894081 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.764729977 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.764775038 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.764807940 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.764820099 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.764853954 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.764873028 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.765506983 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.765588999 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.766956091 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.766993999 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.767045975 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.767070055 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.767074108 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.767129898 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.767846107 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.767903090 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.767915964 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.767926931 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.767961979 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.767981052 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.768563032 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.768656969 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.769259930 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.769340992 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.769354105 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.769370079 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.769402981 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.769423008 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.770422935 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.770486116 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.770508051 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.770520926 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.770549059 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.770570040 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.771219969 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.771298885 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.772197008 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.772238016 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.772274017 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.772284031 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.772329092 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.772346020 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.773065090 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.773102045 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.773149967 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.773155928 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.773205996 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.773228884 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.773288012 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.774755955 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.774786949 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.774854898 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.774871111 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.774913073 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.775192022 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.775222063 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.775294065 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.775306940 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.775350094 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.775356054 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.775996923 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.776073933 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.776984930 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.777017117 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.777089119 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.777106047 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.777115107 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.777143955 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.777936935 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.777966976 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.778004885 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.778019905 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.778048992 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.778057098 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.778073072 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.778220892 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.780196905 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.804903984 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.805017948 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.834117889 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.834218979 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.834249020 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.834266901 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.834290028 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.834314108 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.834361076 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.834367990 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.834407091 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.835648060 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.835702896 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.835758924 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.835774899 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.835798025 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.835813999 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.835845947 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.837618113 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.837686062 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.837737083 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.837750912 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.837764978 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.837795973 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.850249052 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.850311041 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.850375891 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.850394011 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.850418091 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.850442886 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.850447893 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.850452900 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.850477934 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.850512981 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.852128029 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.852175951 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.852240086 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.852262974 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.852319956 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.852340937 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.852984905 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.853032112 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.853076935 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.853085995 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.853255033 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.865555048 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.865746975 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.866991997 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.867024899 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.867125034 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.867142916 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.867199898 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.868189096 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.868237019 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.868349075 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.868356943 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.868483067 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.869138956 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.869334936 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.870268106 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.870309114 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.870371103 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.870383978 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.870405912 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.870455027 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.872195959 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.872235060 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.872330904 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.872339010 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.872347116 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.873090029 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.873132944 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.873213053 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.874245882 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.874283075 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.874344110 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.874351978 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.874372959 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.874401093 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.876162052 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.876205921 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.876301050 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.876310110 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.876352072 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.876374006 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.881978989 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.882189989 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.882468939 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.882503033 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.882581949 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.882592916 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.882626057 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.882644892 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.884306908 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.884337902 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.884409904 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.884435892 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.884453058 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.884490967 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.884522915 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.886126041 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.886183023 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.886251926 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.886271954 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.886284113 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.886421919 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.887001991 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.887029886 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.887123108 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.887135983 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.887193918 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.887836933 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.887933969 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.889261007 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.889293909 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.889365911 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.889375925 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.889429092 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.889455080 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.890294075 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.890332937 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.890399933 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.890412092 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.890443087 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.890467882 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.891086102 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.891180038 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.891740084 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.891773939 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.891835928 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.891841888 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.891869068 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.891894102 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.892539024 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.892574072 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.892628908 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.892636061 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.892678976 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.892698050 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.893639088 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.893737078 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.894557953 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.894594908 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.894655943 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.894661903 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.894687891 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.894709110 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.895543098 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.895582914 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.895629883 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.895637035 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.895651102 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.895693064 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.895754099 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.895759106 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.895806074 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.896574974 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.896610975 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.896655083 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.896683931 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.896692038 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.896740913 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.896747112 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.896791935 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:33.986186028 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:33.989151955 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.025865078 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.025913000 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.026010036 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.080995083 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.081034899 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.109272957 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.109316111 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.109472036 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.110222101 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.110244036 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.117127895 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.117257118 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.120318890 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.138787985 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.138899088 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.144650936 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.145133972 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.162911892 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.165169001 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.165213108 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.190392017 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.190428019 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.190454006 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.190525055 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.190540075 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.190570116 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.190593004 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.191843033 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.191869974 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.191946030 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.191962957 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.191977024 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.192002058 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.192023993 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.194078922 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.194114923 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.194212914 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.194211960 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.194230080 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.194245100 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.194304943 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.194322109 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.206634045 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.206685066 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.206763983 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.206779003 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.206799984 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.206824064 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.206856966 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.206861019 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.206877947 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.206902027 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.208188057 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.208226919 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.208323002 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.208334923 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.208403111 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.209692955 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.209732056 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.209825039 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.209836960 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.209853888 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.210572004 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.210691929 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.210704088 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.210752010 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.219424963 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.219468117 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.219568014 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.219597101 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.219613075 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.219676018 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.219690084 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.219739914 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.221637964 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.221668959 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.221749067 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.221786022 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.221812963 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.221832991 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.222440958 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.222834110 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.222872019 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.222978115 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.223000050 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.223021984 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.223109007 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.223143101 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.223208904 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.223256111 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.223268032 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.223308086 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.223330021 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.224492073 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.224551916 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.224615097 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.224622965 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.224669933 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.224692106 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.225326061 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.225449085 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.226366997 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.226402044 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.226485968 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.226492882 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.226505041 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.228224993 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.228257895 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.228322029 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.228328943 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.228363991 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.228408098 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.229115963 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.229240894 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.230192900 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.230225086 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.230289936 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.230298042 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.230329037 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.230365992 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.231924057 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.231969118 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.232155085 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.232189894 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.232266903 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.232275963 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.232310057 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.232323885 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.232350111 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.232381105 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.234294891 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.234332085 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.234466076 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.234473944 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.234536886 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.235271931 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.235308886 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.235375881 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.235400915 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.235416889 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.235431910 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.235443115 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.235450983 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.235491991 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.235529900 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.237787008 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.237818956 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.237911940 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.237935066 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.237958908 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.237984896 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.238590956 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.238627911 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.238694906 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.238708019 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.238739014 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.238759995 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.239223957 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.239260912 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.239334106 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.239343882 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.239357948 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.239442110 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.239449978 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.239495993 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.240961075 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.240992069 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.241069078 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.241076946 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.241120100 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.242029905 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.242063999 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.242110968 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.242115974 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.242141962 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.242158890 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.242906094 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.243052959 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.244128942 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.244154930 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.244164944 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.244198084 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.244282007 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.244302988 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.244317055 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.244362116 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.245001078 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.245033979 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.245090961 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.245102882 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.245130062 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.245145082 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.245163918 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.245172024 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.245210886 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.245246887 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.246412039 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.246438026 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.246517897 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.246531010 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.246553898 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.247402906 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.247435093 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.247503996 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.247515917 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.247531891 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.247567892 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.248193026 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.248265982 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.249411106 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.249444962 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.249530077 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.249545097 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.249561071 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.249610901 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.250377893 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.250408888 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.250492096 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.250500917 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.250514984 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.250518084 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.250566006 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.250601053 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.250725985 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.250854969 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.251404047 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.251430988 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.251533985 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.251560926 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.251575947 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.251627922 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.251688957 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.251729012 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.251734972 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.251759052 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.251780987 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.251807928 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.252648115 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.252684116 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.252768993 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.252789021 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.252841949 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.252859116 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.252896070 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.252976894 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.253024101 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.253077030 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.253127098 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.253153086 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.253176928 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.253696918 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.253729105 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.253762960 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.253827095 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.253846884 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.253866911 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.253904104 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.253947973 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.254519939 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.254550934 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.254635096 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.254652023 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.254666090 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.255570889 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.255580902 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.255642891 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.255697966 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.255717039 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.255727053 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.255786896 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.255809069 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.255815029 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.256637096 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.256709099 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.256892920 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.256913900 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.257065058 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.257623911 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.257750988 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.258568048 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.258639097 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.258729935 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.258749008 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.258795977 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.258816957 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.260471106 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.260521889 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.260612965 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.260627985 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.260641098 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.260657072 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.260723114 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.266932964 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.267004967 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.267061949 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.267086029 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.267118931 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.268171072 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.268224001 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.268301964 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.268320084 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.268332005 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.268342972 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.268376112 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.268407106 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.270004988 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.270047903 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.270167112 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.270194054 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.270214081 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.270757914 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.270812035 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.270872116 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.270891905 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.270904064 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.270939112 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.271634102 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.271752119 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.272857904 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.272902966 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.272995949 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.273032904 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.273050070 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.273304939 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.273801088 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.273854017 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.273910999 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.273929119 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.273957014 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.273968935 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.273979902 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.273993015 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.274008989 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.274046898 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.274967909 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.275007963 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.275078058 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.275089979 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.275115967 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.275132895 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.276009083 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.276062012 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.276122093 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.276135921 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.276185989 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.276191950 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.277075052 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.277179003 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.277271986 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.277308941 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.277390003 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.277400970 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.277411938 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.277446032 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.278310061 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.278386116 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.278445005 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.278465033 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.278517962 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.278548956 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.279066086 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.279108047 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.279189110 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.279253006 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.280009985 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.280070066 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.280111074 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.280133009 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.280148029 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.280683994 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.280689955 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.280704975 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.280720949 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.280751944 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.280767918 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.280781984 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.280808926 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.280821085 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.280855894 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.281510115 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.281586885 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.281770945 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.281840086 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.281877995 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.281891108 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.281927109 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.281956911 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.282782078 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.282855034 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.282901049 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.282923937 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.282941103 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.282974958 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.283441067 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.283516884 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.283586979 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.283674955 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.283684015 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.283739090 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.283771038 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.283783913 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.284152985 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.284245014 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.315687895 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.315722942 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.315749884 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.315836906 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.315850973 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.315866947 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.315921068 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.315929890 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.315970898 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.315979004 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.315995932 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316023111 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.316034079 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316056967 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316134930 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.316148996 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316184044 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316193104 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.316198111 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316261053 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.316270113 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316282988 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316368103 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.316380024 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316395044 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316411018 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316445112 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.316452980 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316498995 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.316508055 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316534042 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316584110 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.316592932 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316606998 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316622972 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.316632986 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316699982 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.316711903 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316728115 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.316736937 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.317089081 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.317109108 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.317126036 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.317192078 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.318370104 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.318393946 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.318490982 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.318733931 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.318753004 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.318775892 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.318793058 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.318878889 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.318892956 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.318908930 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.318922997 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319184065 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.319204092 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319221973 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319230080 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319328070 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.319340944 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319359064 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319443941 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.319452047 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319463968 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319488049 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.319494009 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319577932 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.319586039 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319600105 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319608927 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319657087 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.319705963 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.319714069 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.319772005 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.320167065 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.320183039 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320202112 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320211887 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320308924 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.320317984 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320334911 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320403099 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.320410967 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320420980 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320452929 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.320460081 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320503950 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.320511103 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320532084 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320554018 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.320573092 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320612907 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.320621014 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320662022 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.320668936 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320710897 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.320720911 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.320755005 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.320813894 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.321459055 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.321477890 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.321504116 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.321611881 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.321893930 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.321907997 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.321929932 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.321953058 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.322067976 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.322082996 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.322118044 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.322132111 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.322226048 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.322247028 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.322267056 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.322277069 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.322283983 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.322366953 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.322376966 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.322431087 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.322441101 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.322499990 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.326858044 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.326888084 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.326917887 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.327178955 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.353598118 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.353646040 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.353679895 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.353791952 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.353813887 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.353863955 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.355030060 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.355074883 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.355129957 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.355168104 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.355182886 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.355226040 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.355259895 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.357023954 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.357062101 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.357122898 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.357139111 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.357168913 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.357192039 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.366908073 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.366936922 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.366975069 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.367000103 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.367079020 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.367090940 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.367167950 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.367178917 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.367225885 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.367233038 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.367258072 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.367280006 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.367372036 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.367382050 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.367407084 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.367422104 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.367428064 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.367471933 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.367501020 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.367579937 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.368344069 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.368355989 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.368417978 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.368701935 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.369290113 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.369740963 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.369771004 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.369817972 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.369853020 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.369882107 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.369896889 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.369930029 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.370187998 CET	49956	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.370208979 CET	443	49956	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.371400118 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.371447086 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.371572971 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.371592999 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.371607065 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.371745110 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.372978926 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.373014927 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.373219013 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.373234034 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.374123096 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.374222040 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.374236107 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.374277115 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.374311924 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.386377096 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.386413097 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.386539936 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.386617899 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.386657000 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.386678934 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.386739969 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.386785984 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.387538910 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.387685061 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.388185978 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.388221025 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.388317108 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.388339043 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.388375998 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.388407946 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.390110016 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.390141010 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.390264988 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.390290976 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.391033888 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.391166925 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.391191006 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.392175913 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.392203093 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.392319918 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.392345905 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.392373085 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.392431974 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.394283056 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.394309998 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.394351006 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.394474983 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.394500017 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.394570112 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.399687052 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.399713993 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.399763107 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.399806976 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.399873018 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.399899960 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.399930954 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.399955034 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.400012016 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.401503086 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.401531935 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.401653051 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.401674986 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.402245045 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.402266026 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.402349949 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.402370930 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.402403116 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.402426958 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.402924061 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.403033018 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.404505014 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.404548883 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.404783964 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.404804945 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.404854059 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.405359030 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.405380011 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.405474901 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.405493021 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.405523062 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.405541897 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.406066895 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.406157970 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.406770945 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.406795025 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.406905890 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.406922102 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.406980991 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.407655954 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.407686949 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.407768011 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.407783985 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.407994986 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.408000946 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.408669949 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.408783913 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.409698009 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.409724951 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.409780025 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.409797907 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.409830093 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.409861088 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.410664082 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.410700083 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.410762072 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.410800934 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.410818100 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.410861015 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.410897970 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.411911011 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.411936998 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.412026882 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.412049055 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.412069082 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.412718058 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.412744045 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.412821054 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.412837029 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.412892103 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.412931919 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.413516998 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.413630009 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.413759947 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.413781881 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.413847923 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.413870096 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.413901091 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.413928986 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.414766073 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.414791107 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.414859056 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.414880037 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.414896011 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.414936066 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.415608883 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.415661097 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.415705919 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.415721893 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.415747881 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.415771961 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.466186047 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.466273069 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.490205050 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.490571022 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.622210979 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.626302004 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.674189091 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.674303055 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.834193945 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.834300995 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:34.918222904 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:34.918344975 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:35.034831047 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:35.036490917 CET	49957	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:35.036514044 CET	443	49957	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:35.110264063 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:35.110424042 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:35.270241976 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:35.270447969 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:35.750221968 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:35.750300884 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:35.942224026 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:35.942285061 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:36.106201887 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:36.106311083 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.065535069 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.065567970 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.065591097 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.065654039 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.065665960 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.065695047 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.065709114 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.065730095 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.065740108 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.065748930 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.065952063 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.065964937 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.065984964 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.066051006 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.066092014 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.072829008 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.072966099 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.073715925 CET	49958	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.073750973 CET	443	49958	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.186227083 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.186259985 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.186278105 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.186367989 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.186378956 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.186393976 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.186451912 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.186464071 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.186527014 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.186536074 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.186592102 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.186602116 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.186614037 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.186620951 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.186669111 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.186702967 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.188299894 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.188368082 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.189075947 CET	49959	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.189095974 CET	443	49959	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366000891 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366031885 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366070032 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366137981 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366188049 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366206884 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366221905 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366233110 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366302013 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366317034 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366336107 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366345882 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366358995 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366369963 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366379023 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366395950 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366404057 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366422892 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366430044 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366481066 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366499901 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366519928 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366530895 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366543055 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366584063 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366594076 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366628885 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366641998 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366672993 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366698027 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366720915 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366722107 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366739035 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366803885 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366821051 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366833925 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366848946 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366868973 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.366916895 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.366942883 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.367002010 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.367024899 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.367046118 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.367058039 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.367072105 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.367115974 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.367146969 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.367180109 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.367855072 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.367875099 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.367976904 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368067980 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368083000 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368107080 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368123055 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368185043 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368199110 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368243933 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368264914 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368269920 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368285894 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368298054 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368309021 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368324995 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368350029 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368362904 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368381977 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368397951 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368417025 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368427992 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368459940 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368472099 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368510962 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368522882 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368551016 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368562937 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368581057 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368592024 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368634939 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368650913 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368688107 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.368705034 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368774891 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.368815899 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369232893 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369256973 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369287968 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369381905 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369402885 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369438887 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369455099 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369481087 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369496107 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369504929 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369563103 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369579077 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369597912 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369625092 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369637966 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369657993 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369682074 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369692087 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369743109 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369759083 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369800091 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369817019 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369898081 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369914055 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369940996 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.369954109 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.369965076 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.370003939 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.370038033 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.370646000 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.370666027 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.370702028 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.370723963 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.370769024 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.370784998 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.370793104 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.370853901 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.370871067 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.370904922 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.370918036 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.370929003 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.370948076 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.370997906 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371011972 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371047974 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371062040 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371078968 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371150017 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371166945 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371201038 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371213913 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371234894 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371268988 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371283054 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371334076 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371352911 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371392965 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371429920 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371464968 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371471882 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371488094 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371494055 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371509075 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371526957 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371545076 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371556997 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371584892 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371611118 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371630907 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371654987 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371659040 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371678114 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371682882 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371716976 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371722937 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371747017 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.371759892 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.371843100 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:37.372138977 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.372149944 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.372155905 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.372823954 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.401418924 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.403420925 CET	49960	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:37.403453112 CET	443	49960	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:39.849087954 CET	49965	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:08:39.849126101 CET	443	49965	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:39.849225998 CET	49965	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:08:39.850497007 CET	49965	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:08:39.850518942 CET	443	49965	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:40.034257889 CET	443	49965	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:40.034370899 CET	49965	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:08:40.037374973 CET	49965	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:08:40.037389040 CET	443	49965	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:40.037775993 CET	443	49965	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:40.039335966 CET	49965	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:08:40.039438963 CET	49965	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:08:40.039446115 CET	443	49965	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:40.039635897 CET	49965	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:08:40.082180977 CET	443	49965	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:40.082375050 CET	443	49965	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:40.082442045 CET	443	49965	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:40.082499981 CET	49965	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:08:40.082600117 CET	49965	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:08:40.082612991 CET	443	49965	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:54.147088051 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.147130966 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.147228956 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.147531986 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.147551060 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.189532042 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.189666986 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.200198889 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.200221062 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.202194929 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.202209949 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.279189110 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.279233932 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.279274940 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.279300928 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.279328108 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.279342890 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.279405117 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.279413939 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.283790112 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.283849955 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.283925056 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.283941984 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.283972979 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.283994913 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.284020901 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.284096956 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.284122944 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.284159899 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.284193039 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.284204960 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.284257889 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.284262896 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.297835112 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.297874928 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.297944069 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.297956944 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.298008919 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.298012972 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.298325062 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.298434973 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.302903891 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.302937031 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.303049088 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.303062916 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.303077936 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.303103924 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.307900906 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.307936907 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.308012962 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.308043003 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.308058023 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.308092117 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.308124065 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.320624113 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.320663929 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.320807934 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.320823908 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.320882082 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.321469069 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.321501017 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.321568012 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.321604013 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.321613073 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.321744919 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.323474884 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.323509932 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.323590040 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.323600054 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.323652029 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.325407028 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.325443983 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.325504065 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.325535059 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.325545073 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.325592041 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.327748060 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.327784061 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.327830076 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.327840090 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.327869892 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.327891111 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.329612017 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.329648972 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.329729080 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.329736948 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.329781055 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.330048084 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.330142975 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.332988024 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.333025932 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.333102942 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.333112955 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.333137035 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.333240032 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.333834887 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.333868980 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.333944082 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.333950996 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.333993912 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.334012032 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.334779978 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.334876060 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.336596012 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.336631060 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.336700916 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.336711884 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.336740017 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.336752892 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.339128971 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.339163065 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.339235067 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.339245081 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.339283943 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.339312077 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.339541912 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.339620113 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.340858936 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.340888023 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.340962887 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.340975046 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.340997934 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.341023922 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.342386007 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.342410088 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.342484951 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.342494011 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.342526913 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.342546940 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.343045950 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.343132973 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.344453096 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.344480038 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.344552040 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.344561100 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.344638109 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.344666958 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.345943928 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.345973015 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.346035957 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.346055031 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.346076012 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.346113920 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.346134901 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.347577095 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.347609043 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.347676039 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.347692013 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.347718954 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.347762108 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.348512888 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.348542929 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.348604918 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.348622084 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.348643064 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.348656893 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.348730087 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.350393057 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.350425959 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.350507975 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.350522995 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.350543976 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.350568056 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.351264000 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.351334095 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.351371050 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.351372957 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.351402998 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.351421118 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.552736998 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.552784920 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.552896023 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.553808928 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.553836107 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.589293957 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.589370012 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.600423098 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.603888988 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.603950024 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.673986912 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.674016953 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.674041986 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.674098969 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.674125910 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.674135923 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.674177885 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.675446033 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.675476074 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.675523043 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.675529957 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.675539970 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.675573111 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.675609112 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.677413940 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.677443027 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.677484035 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.677495003 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.677536011 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.690116882 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.690155029 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.690208912 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.690224886 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.690252066 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.690258026 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.690285921 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.690291882 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.690326929 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.690361023 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.692158937 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.692193985 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.692256927 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.692269087 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.692281961 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.692305088 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.692967892 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.693002939 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.693058968 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.693072081 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.693098068 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.693120003 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.705691099 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.705847025 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.706955910 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.707005024 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.707089901 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.707106113 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.707149982 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.707154989 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.707997084 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.708040953 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.708098888 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.708111048 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.708159924 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.708200932 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.709130049 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.709244967 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.710259914 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.710321903 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.710390091 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.710402966 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.710414886 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.710468054 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.712002993 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.712063074 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.712141991 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.712157965 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.712191105 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.712213993 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.712917089 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.713036060 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.714008093 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.714061975 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.714132071 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.714143038 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.714191914 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.714199066 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.715941906 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.715992928 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.716101885 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.716111898 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.716123104 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.716147900 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.716202021 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.716236115 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.722198963 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.722265005 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.722354889 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.722382069 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.722440958 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.722507954 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.723668098 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.723726034 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.723807096 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.723824978 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.723858118 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.723860979 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.723987103 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.723994970 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.725765944 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.725835085 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.725923061 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.725959063 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.725975990 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.726010084 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.726423025 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.726489067 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.726521969 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.726541042 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.726557970 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.726615906 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.727266073 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.727380991 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.728797913 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.728867054 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.728955030 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.728975058 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.729017019 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.729341984 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.729598999 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.729643106 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.729721069 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.729736090 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.729747057 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.729782104 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.730479956 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.730602980 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.731092930 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.731153011 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.731250048 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.731267929 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.731281996 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.731312037 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.732928038 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.732988119 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.733057022 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.733073950 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.733110905 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.733135939 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.733428955 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.733541965 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.734338999 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.734405041 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.734457016 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.734478951 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.734498024 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.734529018 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.735227108 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.735271931 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.735311031 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.735322952 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.735361099 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.735387087 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.736027956 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.736134052 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.736151934 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.736185074 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:54.736206055 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:54.736247063 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:55.140777111 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:55.148113012 CET	49966	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:55.148153067 CET	443	49966	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:55.495075941 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:55.496860027 CET	49967	443	192.168.2.3	80.67.82.211
Mar 15, 2022 17:08:55.496907949 CET	443	49967	80.67.82.211	192.168.2.3
Mar 15, 2022 17:08:57.554474115 CET	80	49693	93.184.220.29	192.168.2.3
Mar 15, 2022 17:08:57.554569006 CET	49693	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:08:58.395559072 CET	80	49692	93.184.220.29	192.168.2.3
Mar 15, 2022 17:08:58.395765066 CET	49692	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:08:59.482913971 CET	80	49697	93.184.220.29	192.168.2.3
Mar 15, 2022 17:08:59.483047962 CET	49697	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:08:59.548777103 CET	49715	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:08:59.579050064 CET	443	49715	20.199.120.85	192.168.2.3
Mar 15, 2022 17:08:59.640491009 CET	49715	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:06.566078901 CET	49968	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:09:06.566126108 CET	443	49968	20.199.120.182	192.168.2.3
Mar 15, 2022 17:09:06.566387892 CET	49968	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:09:06.567516088 CET	49968	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:09:06.567538977 CET	443	49968	20.199.120.182	192.168.2.3
Mar 15, 2022 17:09:06.679717064 CET	443	49968	20.199.120.182	192.168.2.3
Mar 15, 2022 17:09:06.679864883 CET	49968	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:09:06.682957888 CET	49968	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:09:06.682991028 CET	443	49968	20.199.120.182	192.168.2.3
Mar 15, 2022 17:09:06.683418989 CET	443	49968	20.199.120.182	192.168.2.3
Mar 15, 2022 17:09:06.685771942 CET	49968	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:09:06.685873032 CET	49968	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:09:06.685885906 CET	443	49968	20.199.120.182	192.168.2.3
Mar 15, 2022 17:09:06.686067104 CET	49968	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:09:06.715432882 CET	443	49968	20.199.120.182	192.168.2.3
Mar 15, 2022 17:09:06.715540886 CET	443	49968	20.199.120.182	192.168.2.3
Mar 15, 2022 17:09:06.715619087 CET	49968	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:09:06.715841055 CET	49968	443	192.168.2.3	20.199.120.182
Mar 15, 2022 17:09:06.715866089 CET	443	49968	20.199.120.182	192.168.2.3
Mar 15, 2022 17:09:08.215806007 CET	49969	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.215852022 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.216038942 CET	49969	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.216159105 CET	49970	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.216175079 CET	443	49970	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.216231108 CET	49970	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.217196941 CET	49970	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.217222929 CET	443	49970	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.218044996 CET	49969	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.218069077 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.293458939 CET	443	49970	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.295766115 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.316644907 CET	49969	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.316685915 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.317038059 CET	49970	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.317090988 CET	443	49970	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.317701101 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.318065882 CET	443	49970	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.318519115 CET	49969	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.318839073 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.319289923 CET	49970	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.320235014 CET	443	49970	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.324492931 CET	49969	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.324589014 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.360802889 CET	49970	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.526338100 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.566525936 CET	49969	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:08.566557884 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:08.608037949 CET	49969	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:09.525487900 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:09.525635004 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:09.525710106 CET	49969	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:09.549443960 CET	49969	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:09.549480915 CET	443	49969	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:09.645778894 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:09.645848036 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.645929098 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:09.646198034 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:09.646214962 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.724383116 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.738673925 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:09.738722086 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.739655972 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.740228891 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:09.740406036 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.740468025 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:09.782210112 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.869184971 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:09.976752043 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.987325907 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.987345934 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.987416029 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.987430096 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.987443924 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.987519979 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:09.987549067 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.987560987 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:09.987581015 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:09.987591982 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.010837078 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.010864973 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.010915995 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.010929108 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.010942936 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.010956049 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.011022091 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.011063099 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.011076927 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.021215916 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.021250963 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.021331072 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.021343946 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.021363020 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.021377087 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.021410942 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.021433115 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.021440029 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.021445036 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.021451950 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.021461964 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.030473948 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.030498981 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.030529976 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.030587912 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.030643940 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.030678988 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.030699968 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.037120104 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.037138939 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.037157059 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.037183046 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.037278891 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.037312031 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.037329912 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.044833899 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.044920921 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.044960976 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.044970036 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.044994116 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.045022011 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.045030117 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.045052052 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.050801992 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.050909042 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.050930023 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.050968885 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.050980091 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.051037073 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.051042080 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.055402040 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.055435896 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.055473089 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.055499077 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.055532932 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.055542946 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.055581093 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.055811882 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.055854082 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.058821917 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.058854103 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.058892012 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.058903933 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.058954954 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.062305927 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.062356949 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.062458038 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.062484980 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.062500000 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.062539101 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.065289974 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.065345049 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.065428972 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.065453053 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.065481901 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.065496922 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.068733931 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.068787098 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.068876028 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.068900108 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.068933010 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.068948030 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.071027040 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.071083069 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.071177959 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.071201086 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.071228981 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.071270943 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.073710918 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.073741913 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.073857069 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.073879957 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.073935986 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.076406002 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.076436996 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.076545954 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.076565027 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.076627970 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.079744101 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.079781055 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.079899073 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.079921961 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.079972029 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.082340956 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.082417965 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.082485914 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.082511902 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.082529068 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.082566023 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.083802938 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.083837032 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.083931923 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.083955050 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.083971977 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.084007025 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.085591078 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.085632086 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.085730076 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.085761070 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.085884094 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.085954905 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.087492943 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.087524891 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.087635040 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.087671041 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.087738991 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.089098930 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.089129925 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.089210987 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.089243889 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.089262962 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.089287043 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.090856075 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.090888023 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.090969086 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.090986967 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.091006041 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.091027975 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.092679977 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.092715979 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.092797995 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.092818022 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.092838049 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.092864037 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.094451904 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.094492912 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.094579935 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.094611883 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.094630003 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.094657898 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.095515966 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.095561981 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.095638037 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.095655918 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.095674038 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.095705032 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.097244024 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.097290993 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.097369909 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.097394943 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.097414970 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.097450018 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.098618984 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.098664045 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.098742008 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.098766088 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.098786116 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.098818064 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.099900961 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.099944115 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.100022078 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.100043058 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.100068092 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.100728035 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.100795031 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.100837946 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.100876093 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.100893021 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.100913048 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.100939989 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.100955963 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.101670980 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.101710081 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.101758003 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.101783991 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.101798058 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.103602886 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.103647947 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.103702068 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.103734016 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.103751898 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.104490995 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.104532003 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.104581118 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.104603052 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.104604959 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.105377913 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.105418921 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.105463982 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.105489016 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.105504036 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.106395960 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.106452942 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.106498003 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.106527090 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.106544018 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.107281923 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.107326031 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.107373953 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.107404947 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.107425928 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.110899925 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.110958099 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.111069918 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.111100912 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.318192959 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.447957039 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.447990894 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448005915 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448060989 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448070049 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448074102 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448116064 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448127031 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448137999 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448144913 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448154926 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448170900 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448180914 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448189020 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448206902 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448218107 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448220968 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448231936 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448246002 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448259115 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448298931 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448307991 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448331118 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448302031 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448338032 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448415995 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448438883 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448456049 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448472977 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448482990 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448489904 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448493958 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448498011 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448501110 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448503971 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448543072 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.448550940 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:10.448582888 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.693712950 CET	49692	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:09:10.693744898 CET	49693	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:09:10.709758043 CET	80	49692	93.184.220.29	192.168.2.3
Mar 15, 2022 17:09:10.710278034 CET	49692	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:09:10.712491035 CET	80	49693	93.184.220.29	192.168.2.3
Mar 15, 2022 17:09:10.712656021 CET	49693	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:09:10.757641077 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:10.883601904 CET	443	49694	131.253.33.200	192.168.2.3
Mar 15, 2022 17:09:11.108773947 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:11.108891964 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:11.109011889 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:11.496836901 CET	80	49697	93.184.220.29	192.168.2.3
Mar 15, 2022 17:09:11.496926069 CET	49697	80	192.168.2.3	93.184.220.29
Mar 15, 2022 17:09:12.956929922 CET	49971	443	192.168.2.3	162.125.65.15
Mar 15, 2022 17:09:12.956995010 CET	443	49971	162.125.65.15	192.168.2.3
Mar 15, 2022 17:09:19.279062986 CET	49970	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:19.279433012 CET	443	49970	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:19.279495955 CET	443	49970	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:19.279508114 CET	49970	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:19.279545069 CET	49970	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.015873909 CET	49987	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.015918016 CET	443	49987	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:23.016031981 CET	49987	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.016683102 CET	49987	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.016695976 CET	443	49987	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:23.093961000 CET	443	49987	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:23.094409943 CET	49987	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.094455957 CET	443	49987	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:23.095218897 CET	443	49987	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:23.095702887 CET	49987	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.095913887 CET	443	49987	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:23.096237898 CET	49987	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.096291065 CET	443	49987	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:23.096314907 CET	49987	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.125350952 CET	49988	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.125406981 CET	443	49988	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.125504017 CET	49988	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.126435995 CET	49988	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.126458883 CET	443	49988	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.138211012 CET	443	49987	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:23.202095985 CET	443	49988	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.202259064 CET	49988	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.211116076 CET	49988	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.211149931 CET	443	49988	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.211443901 CET	443	49988	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.249274969 CET	49988	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.249541044 CET	443	49988	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.249587059 CET	443	49988	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.249660969 CET	49988	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.249701023 CET	49988	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.254601955 CET	49990	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.254652023 CET	443	49990	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.254782915 CET	49990	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.254983902 CET	49990	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.254997969 CET	443	49990	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.303976059 CET	443	49987	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:23.304120064 CET	49987	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.304752111 CET	49987	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.304924011 CET	443	49987	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:23.304980040 CET	443	49987	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:23.304999113 CET	49987	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.305032015 CET	49987	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:23.309241056 CET	49991	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.309273005 CET	443	49991	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.309382915 CET	49991	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.310513020 CET	49991	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.310524940 CET	443	49991	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.330384016 CET	443	49990	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.334983110 CET	49990	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.335021019 CET	443	49990	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.341166019 CET	49990	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.341474056 CET	443	49990	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.341514111 CET	443	49990	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.341608047 CET	49990	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.341973066 CET	49990	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.388014078 CET	443	49991	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.388195992 CET	49991	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.389780045 CET	49991	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.389801025 CET	443	49991	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.390201092 CET	443	49991	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.415453911 CET	49991	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.415780067 CET	443	49991	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.415834904 CET	443	49991	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.415991068 CET	49991	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.416019917 CET	49991	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.419105053 CET	49992	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.419153929 CET	443	49992	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.419253111 CET	49992	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.419433117 CET	49992	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.419449091 CET	443	49992	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.499098063 CET	443	49992	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.503038883 CET	49992	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.503071070 CET	443	49992	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.506756067 CET	49992	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.507078886 CET	443	49992	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.507121086 CET	443	49992	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:23.507181883 CET	49992	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:23.507230043 CET	49992	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:27.335545063 CET	50004	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:27.335594893 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.335712910 CET	50004	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:27.336015940 CET	50004	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:27.336044073 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.416291952 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.416661024 CET	50004	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:27.416696072 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.417099953 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.417835951 CET	50004	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:27.417964935 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.418195963 CET	50004	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:27.418241024 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.418593884 CET	50004	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:27.418638945 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.636357069 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.636394978 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.636604071 CET	50004	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:27.636639118 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.637484074 CET	50004	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:27.637769938 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.637836933 CET	443	50004	162.125.65.18	192.168.2.3
Mar 15, 2022 17:09:27.637882948 CET	50004	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:27.637919903 CET	50004	443	192.168.2.3	162.125.65.18
Mar 15, 2022 17:09:28.509327888 CET	50007	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.509365082 CET	443	50007	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.509553909 CET	50007	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.511631012 CET	50007	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.511655092 CET	443	50007	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.528054953 CET	50008	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.528101921 CET	443	50008	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.528239965 CET	50008	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.529645920 CET	50008	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.529661894 CET	443	50008	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.587903023 CET	443	50007	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.588582993 CET	50007	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.588613033 CET	443	50007	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.591875076 CET	50007	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.592116117 CET	443	50007	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.592160940 CET	443	50007	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.592209101 CET	50007	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.592236042 CET	50007	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.602397919 CET	50010	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.602447033 CET	443	50010	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.602545023 CET	50010	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.603256941 CET	50010	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.603275061 CET	443	50010	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.604899883 CET	443	50008	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.608642101 CET	50008	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.608664989 CET	443	50008	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.612186909 CET	50008	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.612477064 CET	443	50008	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.612518072 CET	443	50008	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.612565041 CET	50008	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.612605095 CET	50008	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.616182089 CET	50011	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.616214991 CET	443	50011	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.616283894 CET	50011	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.617029905 CET	50011	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.617046118 CET	443	50011	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.678987026 CET	443	50010	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.679563046 CET	50010	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.679590940 CET	443	50010	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.682725906 CET	50010	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.682948112 CET	443	50010	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.682985067 CET	443	50010	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.683029890 CET	50010	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.683079958 CET	50010	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.692519903 CET	443	50011	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.695606947 CET	50011	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.695635080 CET	443	50011	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.698954105 CET	50011	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.699227095 CET	443	50011	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.699265003 CET	443	50011	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.699328899 CET	50011	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.699366093 CET	50011	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.952634096 CET	50012	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.952677011 CET	443	50012	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:28.952768087 CET	50012	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.953870058 CET	50012	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:28.953887939 CET	443	50012	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.033838034 CET	443	50012	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.033926010 CET	50012	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.036303043 CET	50012	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.036318064 CET	443	50012	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.036640882 CET	443	50012	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.087631941 CET	50012	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.136049032 CET	50012	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.136305094 CET	443	50012	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.136344910 CET	443	50012	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.136415005 CET	50012	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.136432886 CET	50012	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.147280931 CET	50013	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.147320032 CET	443	50013	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.147402048 CET	50013	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.147835970 CET	50013	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.147851944 CET	443	50013	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.224345922 CET	443	50013	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.226099014 CET	50013	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.226124048 CET	443	50013	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.229665041 CET	50013	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.229837894 CET	443	50013	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.229866982 CET	443	50013	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:29.229933023 CET	50013	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:29.229969978 CET	50013	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.247884035 CET	50027	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.247963905 CET	443	50027	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.248126030 CET	50027	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.248373032 CET	50027	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.248410940 CET	443	50027	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.326353073 CET	443	50027	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.327476978 CET	50027	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.327537060 CET	443	50027	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.330921888 CET	50027	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.331211090 CET	443	50027	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.331242085 CET	443	50027	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.331422091 CET	50027	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.331485987 CET	50027	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.335696936 CET	50028	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.335731983 CET	443	50028	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.335894108 CET	50028	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.336056948 CET	50028	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.336071014 CET	443	50028	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.414470911 CET	443	50028	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.415213108 CET	50028	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.415262938 CET	443	50028	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.418556929 CET	50028	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.418927908 CET	443	50028	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.419003963 CET	443	50028	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.419173002 CET	50028	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.419193029 CET	50028	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.459614992 CET	50029	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.459641933 CET	443	50029	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.459769964 CET	50029	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.460227966 CET	50029	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.460239887 CET	443	50029	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.540680885 CET	443	50029	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.540982008 CET	50029	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.545245886 CET	50029	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.545284033 CET	443	50029	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.546119928 CET	443	50029	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.558607101 CET	50029	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.559000969 CET	443	50029	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.559062958 CET	443	50029	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.559201002 CET	50029	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.559252977 CET	50029	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.561671972 CET	50030	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.561712027 CET	443	50030	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.564775944 CET	50030	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.564934015 CET	50030	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.564954042 CET	443	50030	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.641638041 CET	443	50030	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.645282984 CET	50030	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.645314932 CET	443	50030	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.648549080 CET	50030	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.648839951 CET	443	50030	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.648899078 CET	443	50030	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:34.649008036 CET	50030	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:34.649029970 CET	50030	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:37.003803015 CET	50035	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:37.003855944 CET	443	50035	20.199.120.85	192.168.2.3
Mar 15, 2022 17:09:37.004018068 CET	50035	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:37.004697084 CET	50035	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:37.004719973 CET	443	50035	20.199.120.85	192.168.2.3
Mar 15, 2022 17:09:37.130731106 CET	443	50035	20.199.120.85	192.168.2.3
Mar 15, 2022 17:09:37.130832911 CET	50035	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:37.132819891 CET	50035	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:37.132832050 CET	443	50035	20.199.120.85	192.168.2.3
Mar 15, 2022 17:09:37.133331060 CET	443	50035	20.199.120.85	192.168.2.3
Mar 15, 2022 17:09:37.134227037 CET	50035	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:37.134289026 CET	50035	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:37.134296894 CET	443	50035	20.199.120.85	192.168.2.3
Mar 15, 2022 17:09:37.134408951 CET	50035	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:37.175646067 CET	443	50035	20.199.120.85	192.168.2.3
Mar 15, 2022 17:09:37.175904036 CET	443	50035	20.199.120.85	192.168.2.3
Mar 15, 2022 17:09:37.176073074 CET	50035	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:37.176302910 CET	50035	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:37.176333904 CET	443	50035	20.199.120.85	192.168.2.3
Mar 15, 2022 17:09:37.176351070 CET	50035	443	192.168.2.3	20.199.120.85
Mar 15, 2022 17:09:39.672794104 CET	50037	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.672844887 CET	443	50037	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.672951937 CET	50037	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.673177004 CET	50037	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.673190117 CET	443	50037	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.749167919 CET	443	50037	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.753242016 CET	50037	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.753273964 CET	443	50037	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.756743908 CET	50037	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.756990910 CET	443	50037	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.757039070 CET	443	50037	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.757102966 CET	50037	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.757144928 CET	50037	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.760226011 CET	50038	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.760253906 CET	443	50038	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.760385990 CET	50038	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.760714054 CET	50038	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.760724068 CET	443	50038	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.810643911 CET	443	50038	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.812201023 CET	50038	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.812228918 CET	443	50038	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.818412066 CET	50038	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.818687916 CET	443	50038	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.818738937 CET	443	50038	162.125.65.13	192.168.2.3
Mar 15, 2022 17:09:39.818913937 CET	50038	443	192.168.2.3	162.125.65.13
Mar 15, 2022 17:09:39.818937063 CET	50038	443	192.168.2.3	162.125.65.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 15, 2022 17:07:05.696544886 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:06.465905905 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:18.848598957 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:18.849358082 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:18.864675045 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:18.881984949 CET	63332	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:18.883323908 CET	49327	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:18.884562016 CET	58981	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:18.903914928 CET	53	58981	8.8.8.8	192.168.2.3
Mar 15, 2022 17:07:18.908003092 CET	53	49327	8.8.8.8	192.168.2.3
Mar 15, 2022 17:07:18.909285069 CET	53	63332	8.8.8.8	192.168.2.3
Mar 15, 2022 17:07:19.601501942 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:19.605140924 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:19.621517897 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:20.355490923 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:20.356998920 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:20.373565912 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:21.484728098 CET	52985	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:21.778594017 CET	50778	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:21.794554949 CET	53	50778	8.8.8.8	192.168.2.3
Mar 15, 2022 17:07:23.015387058 CET	55151	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:23.035289049 CET	53	55151	8.8.8.8	192.168.2.3
Mar 15, 2022 17:07:23.074028969 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:23.075227022 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:23.076206923 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:23.824232101 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:23.827240944 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:23.827266932 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:24.310663939 CET	64996	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:24.436899900 CET	53816	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:24.457701921 CET	53	53816	8.8.8.8	192.168.2.3
Mar 15, 2022 17:07:24.553045034 CET	52096	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:24.571557045 CET	53	52096	8.8.8.8	192.168.2.3
Mar 15, 2022 17:07:24.578632116 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:24.578677893 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:24.578681946 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:25.377531052 CET	52098	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:25.407350063 CET	443	52098	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:25.407830954 CET	52098	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:25.423319101 CET	60640	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:25.437671900 CET	443	52098	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:25.437699080 CET	443	52098	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:25.437714100 CET	443	52098	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:25.437727928 CET	443	52098	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:25.438090086 CET	52098	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:25.440068960 CET	52098	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:25.492080927 CET	52098	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:25.493998051 CET	52098	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:25.531537056 CET	443	52098	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:25.532702923 CET	52098	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:25.550321102 CET	443	52098	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:25.550364971 CET	443	52098	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:25.550420046 CET	443	52098	216.58.215.238	192.168.2.3
Mar 15, 2022 17:07:25.550946951 CET	52098	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:25.596817970 CET	52098	443	192.168.2.3	216.58.215.238
Mar 15, 2022 17:07:25.619555950 CET	49844	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:25.637744904 CET	53	49844	8.8.8.8	192.168.2.3
Mar 15, 2022 17:07:26.214582920 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:26.752351999 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:26.965984106 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:27.508059025 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:27.719048023 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:27.763606071 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:28.266036034 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:28.500384092 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:29.266020060 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:07:36.429924965 CET	52581	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:07:36.457019091 CET	53	52581	8.8.8.8	192.168.2.3
Mar 15, 2022 17:07:39.002626896 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.032196999 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.040213108 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.069109917 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.069143057 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.069159985 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.069178104 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.103548050 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.115729094 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.119340897 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.119369984 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.119386911 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.119402885 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.133044958 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.133126974 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.133683920 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.133984089 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.178282022 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.178832054 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.178878069 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.178915977 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.178950071 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.178982019 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.179012060 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.179044008 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.179075956 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.179105997 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.179137945 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.179168940 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.179199934 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.179203033 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.179265022 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.179320097 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.179389954 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.179442883 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.180330992 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.180841923 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.180897951 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.180947065 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.181991100 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.182609081 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.182683945 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.182785034 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.184192896 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.184231997 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.184267044 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.184413910 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.184484005 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.186048031 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.186085939 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.186119080 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.186285019 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.187709093 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.187772989 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.187969923 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.189297915 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.189338923 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.189480066 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.190958977 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.190998077 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.191109896 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.192704916 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.192738056 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.192811966 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.192833900 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.192976952 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.194835901 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.194875002 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.194905043 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.195602894 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.196562052 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.196588039 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.197616100 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.197639942 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.199032068 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:39.202056885 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.202244043 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:39.202418089 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.018959045 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.037867069 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.037895918 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.037913084 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.037931919 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.037949085 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.037966013 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.037983894 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.038000107 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.038017035 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.038033962 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.038048983 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.038064957 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.038080931 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.038099051 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.039005995 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.039026022 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.039042950 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.039061069 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.040529013 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.040553093 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.040570021 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.040586948 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.040602922 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.040621042 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.042012930 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.042033911 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.042052031 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.042068005 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.043435097 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.043458939 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.043477058 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.043493032 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.043509960 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.043526888 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.045367002 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.045392036 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.045409918 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.045427084 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.045444965 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.045460939 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.045696020 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.045752048 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.045809031 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.045875072 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.045949936 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046009064 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046067953 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046125889 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046190023 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046257973 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046314001 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046371937 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046432972 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046490908 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046547890 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046610117 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.046787977 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.046808958 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.046824932 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.046842098 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.046858072 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.046875000 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.047622919 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.047770023 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.047828913 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.048969984 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.048994064 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.049011946 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.049029112 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.049043894 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.049062014 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.050689936 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.050712109 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.050729990 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.050746918 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.050764084 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.050781012 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.051481962 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.051918030 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.052099943 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.052169085 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.052238941 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.052303076 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.052386999 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.052411079 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.052418947 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.052428961 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.052452087 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.052469015 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.052484989 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.052751064 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.054482937 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.054514885 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.054533005 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.054549932 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.054567099 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.059294939 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.062484980 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.062515020 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.062530994 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.062547922 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.062565088 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.062616110 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.063168049 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.063189983 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.064837933 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:43.067635059 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:43.074469090 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.566829920 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.585792065 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.585855961 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.585896015 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.585944891 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.585984945 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586024046 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586061954 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586102962 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586143017 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586250067 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586314917 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586359024 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586399078 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586436987 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586476088 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586514950 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586566925 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586613894 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586649895 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.586692095 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587011099 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.587232113 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.587378979 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587421894 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587464094 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587502003 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587577105 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587615013 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587652922 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587691069 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587730885 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587771893 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587811947 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587850094 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587888956 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.587929010 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.588458061 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.588881969 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.588923931 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.588963985 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.589006901 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.589045048 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.589083910 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.589123964 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.589163065 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.589201927 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.589242935 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.589282990 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.589323997 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.589407921 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.589621067 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.591260910 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591310978 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591348886 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591389894 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591429949 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591470003 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591511011 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591552019 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591593027 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591634035 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591671944 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591711044 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591749907 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591793060 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591834068 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591871023 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591911077 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.591949940 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.592133999 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.592340946 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.593431950 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593478918 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593518972 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593559027 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593607903 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593647003 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593686104 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593727112 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593770981 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593791962 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.593815088 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593847990 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593879938 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593918085 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593956947 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.593997955 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.594034910 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.594074965 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.594114065 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.594150066 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.601289034 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.603897095 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.603956938 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.603996992 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.604037046 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.604075909 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.604115009 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.604156971 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.604196072 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.604237080 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.604279041 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.605427980 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:07:50.608073950 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:07:50.614346027 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:00.254991055 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:08:01.018652916 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:08:01.784339905 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:08:05.505795002 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.524920940 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.524969101 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.524996996 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525027990 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525058031 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525087118 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525115013 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525142908 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525172949 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525202990 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525233984 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525264978 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525296926 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525327921 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525357008 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525387049 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525415897 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525446892 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525476933 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525505066 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525536060 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.525563002 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526109934 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526146889 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526189089 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526220083 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526252031 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526278973 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526309013 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526339054 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526366949 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526395082 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526422024 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526452065 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526479959 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526510000 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526535988 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526563883 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.526979923 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.527201891 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.527499914 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.527647972 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527677059 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527703047 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527730942 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527760029 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527786016 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527813911 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527844906 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527870893 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527898073 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527924061 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527949095 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.527973890 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.528002024 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.528028965 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.528059006 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.528085947 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.528114080 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.528538942 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.528804064 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.528991938 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.529345036 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529376984 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529407978 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529436111 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529460907 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529489994 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529515982 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529544115 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529568911 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529594898 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529623985 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529653072 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529678106 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529704094 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529731989 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529756069 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529779911 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.529784918 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529812098 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.529980898 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.530472994 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530508041 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530531883 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530558109 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530585051 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530608892 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530632019 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530658007 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530683041 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530709028 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530734062 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530759096 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530786037 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.530812025 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532269955 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.532589912 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532625914 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532650948 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532675982 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532704115 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532727957 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532753944 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532783031 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532810926 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532836914 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532862902 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532885075 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532911062 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532937050 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532963037 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.532989025 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533015966 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533044100 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533071995 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533097029 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533123970 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533149004 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533174992 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533200026 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533915043 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533946991 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533973932 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.533998966 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.534025908 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.534054041 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.534080982 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.534107924 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.534132957 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.534159899 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.534574986 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.534848928 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.535118103 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.541785002 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.544012070 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544050932 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544079065 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544106960 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544131994 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544162035 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544188976 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544218063 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544250965 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544276953 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544302940 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544329882 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544357061 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544384003 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544411898 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.544435978 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.545295954 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:05.545475960 CET	443	52584	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:05.555741072 CET	52584	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:16.879281998 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:08:17.616936922 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:08:18.367988110 CET	137	137	192.168.2.3	192.168.2.255
Mar 15, 2022 17:08:25.521661043 CET	54205	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:08:25.542026997 CET	53	54205	8.8.8.8	192.168.2.3
Mar 15, 2022 17:08:36.415494919 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.415771961 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.457617044 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.458050013 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.459988117 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460024118 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460048914 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460072994 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460097075 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460119009 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460144043 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460166931 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460191011 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460215092 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460237980 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460359097 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.460385084 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.461354017 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.461391926 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.461420059 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.461446047 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.461471081 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.461497068 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.462794065 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.462824106 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.462847948 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.462872028 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.462894917 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.464677095 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.464708090 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.464735031 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.464759111 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.464782953 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.464804888 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.464828968 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.465810061 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.465843916 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.465867996 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.492861986 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.493130922 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.493256092 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.493299007 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.493375063 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.493463993 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.493877888 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.493968964 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.494048119 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.494244099 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.494416952 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.494502068 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.495672941 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.495889902 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.495961905 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.496026039 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.496088028 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.496148109 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.496216059 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.498303890 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.509408951 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.509561062 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.510309935 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.510566950 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.512450933 CET	443	54212	172.217.168.33	192.168.2.3
Mar 15, 2022 17:08:36.569374084 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.569427967 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:08:36.569514990 CET	54212	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:07.695635080 CET	138	138	192.168.2.3	192.168.2.255
Mar 15, 2022 17:09:09.582938910 CET	62701	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:09:09.602358103 CET	53	62701	8.8.8.8	192.168.2.3
Mar 15, 2022 17:09:23.097470999 CET	61555	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:09:23.118340015 CET	53	61555	8.8.8.8	192.168.2.3
Mar 15, 2022 17:09:23.285486937 CET	62547	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:09:23.304622889 CET	53	62547	8.8.8.8	192.168.2.3
Mar 15, 2022 17:09:27.310940027 CET	51557	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:09:27.334707022 CET	53	51557	8.8.8.8	192.168.2.3
Mar 15, 2022 17:09:28.927297115 CET	51658	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:09:28.947520018 CET	53	51658	8.8.8.8	192.168.2.3
Mar 15, 2022 17:09:34.433885098 CET	63083	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:09:34.455272913 CET	53	63083	8.8.8.8	192.168.2.3
Mar 15, 2022 17:09:40.247381926 CET	58819	53	192.168.2.3	8.8.8.8
Mar 15, 2022 17:09:40.266429901 CET	53	58819	8.8.8.8	192.168.2.3
Mar 15, 2022 17:09:40.269314051 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.269572973 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.312222958 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.312769890 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.314738989 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.314790964 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.314852953 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.314881086 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.314909935 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.314938068 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.314966917 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.314994097 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.315022945 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.315053940 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.315083027 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.315268040 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.315294981 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.315336943 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.315388918 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.315432072 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.315834999 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.316293001 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.316330910 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.316535950 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.318072081 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.318113089 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.318335056 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.320203066 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.320245028 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.320274115 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.320584059 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.322340965 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.322355986 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.322369099 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.322573900 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.322613001 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.324228048 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.324270964 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.324584007 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.325508118 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.325565100 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.325805902 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.327311039 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.327356100 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.327672958 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.328567982 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.328629017 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.328845024 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.330240965 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.330276012 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.330463886 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.331862926 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.331909895 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.331934929 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.331959963 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.332197905 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.332252026 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.333188057 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.333223104 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.333431959 CET	58820	443	192.168.2.3	172.217.168.33
Mar 15, 2022 17:09:40.333525896 CET	443	58820	172.217.168.33	192.168.2.3
Mar 15, 2022 17:09:40.360320091 CET	58820	443	192.168.2.3	172.217.168.33

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Mar 15, 2022 17:07:18.881984949 CET	192.168.2.3	8.8.8.8	0x2491	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:18.883323908 CET	192.168.2.3	8.8.8.8	0x6803	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:18.884562016 CET	192.168.2.3	8.8.8.8	0x4b7a	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:21.484728098 CET	192.168.2.3	8.8.8.8	0x8794	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:21.778594017 CET	192.168.2.3	8.8.8.8	0x5bd	Standard query (0)	dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:23.015387058 CET	192.168.2.3	8.8.8.8	0xb3bc	Standard query (0)	consent.dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:24.310663939 CET	192.168.2.3	8.8.8.8	0xd131	Standard query (0)	c.evidon.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:24.436899900 CET	192.168.2.3	8.8.8.8	0xbc59	Standard query (0)	dl-web.dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:24.553045034 CET	192.168.2.3	8.8.8.8	0x8f30	Standard query (0)	l.evidon.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:25.423319101 CET	192.168.2.3	8.8.8.8	0x65a0	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:25.619555950 CET	192.168.2.3	8.8.8.8	0x4d54	Standard query (0)	dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:36.429924965 CET	192.168.2.3	8.8.8.8	0xdab8	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:08:25.521661043 CET	192.168.2.3	8.8.8.8	0x7245	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:09.582938910 CET	192.168.2.3	8.8.8.8	0x176f	Standard query (0)	dl-web.dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:23.097470999 CET	192.168.2.3	8.8.8.8	0xd205	Standard query (0)	client.dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:23.285486937 CET	192.168.2.3	8.8.8.8	0xb031	Standard query (0)	client.dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:27.310940027 CET	192.168.2.3	8.8.8.8	0xa82	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:28.927297115 CET	192.168.2.3	8.8.8.8	0xa9a4	Standard query (0)	client.dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:34.433885098 CET	192.168.2.3	8.8.8.8	0x573d	Standard query (0)	client.dropbox.com	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:40.247381926 CET	192.168.2.3	8.8.8.8	0xc76b	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Mar 15, 2022 17:07:18.903914928 CET	8.8.8.8	192.168.2.3	0x4b7a	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:07:18.903914928 CET	8.8.8.8	192.168.2.3	0x4b7a	No error (0)	www-env.dropbox-dns.com		162.125.65.18	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:18.908003092 CET	8.8.8.8	192.168.2.3	0x6803	No error (0)	accounts.google.com		142.250.203.109	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:18.909285069 CET	8.8.8.8	192.168.2.3	0x2491	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:07:18.909285069 CET	8.8.8.8	192.168.2.3	0x2491	No error (0)	clients.l.google.com		216.58.215.238	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:21.507891893 CET	8.8.8.8	192.168.2.3	0x8794	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:07:21.720391989 CET	8.8.8.8	192.168.2.3	0x3b5	No error (0)	gstaticadssl.l.google.com		216.58.215.227	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:21.794554949 CET	8.8.8.8	192.168.2.3	0x5bd	No error (0)	dropbox.com		162.125.248.18	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:23.035289049 CET	8.8.8.8	192.168.2.3	0xb3bc	No error (0)	consent.dropbox.com		65.9.96.54	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:23.035289049 CET	8.8.8.8	192.168.2.3	0xb3bc	No error (0)	consent.dropbox.com		65.9.96.109	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:23.035289049 CET	8.8.8.8	192.168.2.3	0xb3bc	No error (0)	consent.dropbox.com		65.9.96.74	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:23.035289049 CET	8.8.8.8	192.168.2.3	0xb3bc	No error (0)	consent.dropbox.com		65.9.96.28	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:24.336848021 CET	8.8.8.8	192.168.2.3	0xd131	No error (0)	c.evidon.com	wildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:07:24.457701921 CET	8.8.8.8	192.168.2.3	0xbc59	No error (0)	dl-web.dropbox.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:07:24.457701921 CET	8.8.8.8	192.168.2.3	0xbc59	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.65.15	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:24.571557045 CET	8.8.8.8	192.168.2.3	0x8f30	No error (0)	l.evidon.com	privacycollector-prod-evidon-1122372851.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:07:24.571557045 CET	8.8.8.8	192.168.2.3	0x8f30	No error (0)	privacycollector-prod-evidon-1122372851.us-east-1.elb.amazonaws.com		3.210.49.210	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:24.571557045 CET	8.8.8.8	192.168.2.3	0x8f30	No error (0)	privacycollector-prod-evidon-1122372851.us-east-1.elb.amazonaws.com		34.203.235.14	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:24.571557045 CET	8.8.8.8	192.168.2.3	0x8f30	No error (0)	privacycollector-prod-evidon-1122372851.us-east-1.elb.amazonaws.com		54.161.40.243	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:25.444406986 CET	8.8.8.8	192.168.2.3	0x65a0	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:07:25.637744904 CET	8.8.8.8	192.168.2.3	0x4d54	No error (0)	dropbox.com		162.125.248.18	A (IP address)	IN (0x0001)
Mar 15, 2022 17:07:36.457019091 CET	8.8.8.8	192.168.2.3	0xdab8	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:07:36.457019091 CET	8.8.8.8	192.168.2.3	0xdab8	No error (0)	googlehosted.l.googleusercontent.com		172.217.168.33	A (IP address)	IN (0x0001)
Mar 15, 2022 17:08:25.542026997 CET	8.8.8.8	192.168.2.3	0x7245	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:08:25.542026997 CET	8.8.8.8	192.168.2.3	0x7245	No error (0)	www-env.dropbox-dns.com		162.125.65.18	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:09.602358103 CET	8.8.8.8	192.168.2.3	0x176f	No error (0)	dl-web.dropbox.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:09:09.602358103 CET	8.8.8.8	192.168.2.3	0x176f	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.65.15	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:23.118340015 CET	8.8.8.8	192.168.2.3	0xd205	No error (0)	client.dropbox.com	client-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:09:23.118340015 CET	8.8.8.8	192.168.2.3	0xd205	No error (0)	client-env.dropbox-dns.com		162.125.65.13	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:23.304622889 CET	8.8.8.8	192.168.2.3	0xb031	No error (0)	client.dropbox.com	client-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:09:23.304622889 CET	8.8.8.8	192.168.2.3	0xb031	No error (0)	client-env.dropbox-dns.com		162.125.65.13	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:27.334707022 CET	8.8.8.8	192.168.2.3	0xa82	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:09:27.334707022 CET	8.8.8.8	192.168.2.3	0xa82	No error (0)	www-env.dropbox-dns.com		162.125.65.18	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:28.947520018 CET	8.8.8.8	192.168.2.3	0xa9a4	No error (0)	client.dropbox.com	client-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:09:28.947520018 CET	8.8.8.8	192.168.2.3	0xa9a4	No error (0)	client-env.dropbox-dns.com		162.125.65.13	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:34.455272913 CET	8.8.8.8	192.168.2.3	0x573d	No error (0)	client.dropbox.com	client-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:09:34.455272913 CET	8.8.8.8	192.168.2.3	0x573d	No error (0)	client-env.dropbox-dns.com		162.125.65.13	A (IP address)	IN (0x0001)
Mar 15, 2022 17:09:40.266429901 CET	8.8.8.8	192.168.2.3	0xc76b	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Mar 15, 2022 17:09:40.266429901 CET	8.8.8.8	192.168.2.3	0xc76b	No error (0)	googlehosted.l.googleusercontent.com		172.217.168.33	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

storeedgefd.dsx.mp.microsoft.com

accounts.google.com

www.dropbox.com

clients2.google.com

https:

dropbox.com

consent.dropbox.com

fonts.gstatic.com

dl-web.dropbox.com

l.evidon.com

clients2.googleusercontent.com

arc.msn.com

img-prod-cms-rt-microsoft-com.akamaized.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49716	69.192.161.195	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Direction	Data
2022-03-15 16:07:03 UTC	OUT	GET /v8.0/oemdiscovery?oemId=&scmId=&phoneManufacturerName=&smBiosManufacturerName=VMware%2C+Inc.&phoneDeviceModel=&smBiosDm=VMware7%2C1 HTTP/1.1 Accept-Encoding: gzip, deflate Accept: / TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814750890000385 User-Agent: WindowsStore/11712.1001.23.0 MS-CV: PWmD5nlzJ06OwWqE.1 Accept-Language: en-US Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2022-03-15 16:07:03 UTC	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: WESTEUROPE_Legacy00000U_1.0.0.0 MS-CV: RclWzvGpQ0eZ0rhz.1.0 Expires: Tue, 15 Mar 2022 16:07:03 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 15 Mar 2022 16:07:03 GMT Content-Length: 143 Connection: close
2022-03-15 16:07:03 UTC	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 33 2e 4f 65 6d 44 69 73 63 6f 76 65 72 79 52 65 73 70 6f 6e 73 65 42 6f 64 79 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 4f 65 6d 49 64 22 3a 22 56 4d 57 41 52 45 22 7d Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V3.OemDiscoveryResponseBody, Microsoft.Marketplace.Storefront.Contracts","OemId":"VMWARE"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49754	142.250.203.109	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:20 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-03-15 16:07:20 UTC	1	OUT	Data Raw: 20 Data Ascii:
2022-03-15 16:07:20 UTC	4	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 15 Mar 2022 16:07:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: script-src 'report-sample' 'nonce-sMuQFcvksR63VG3T+UpIzA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'nonce-sMuQFcvksR63VG3T+UpIzA' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-03-15 16:07:20 UTC	6	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2022-03-15 16:07:20 UTC	6	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49822	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:24 UTC	202	OUT	GET /download?plat=win HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR
2022-03-15 16:07:24 UTC	204	IN	HTTP/1.1 302 Found Cache-Control: no-cache,no-cache, no-store Content-Security-Policy: sandbox Location: https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:23 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 407 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0d4053a7edcc48589f5c502b06cd25be Connection: close
2022-03-15 16:07:24 UTC	205	IN	Data Raw: 33 30 32 20 46 6f 75 6e 64 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 73 3a 2f 2f 64 6c 2d 77 65 62 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 69 6e 73 74 61 6c 6c 65 72 3f 61 75 74 68 65 6e 74 69 63 6f 64 65 5f 73 69 67 6e 3d 54 72 75 65 26 62 75 69 6c 64 5f 6e 6f 3d 31 34 33 2e 34 2e 34 31 36 31 26 6a 75 6e 6f 3d 54 72 75 65 26 6a 75 6e 6f 5f 75 73 65 5f 70 72 6f 67 72 61 6d 5f 66 69 6c 65 73 3d 54 72 75 65 26 70 6c 61 74 3d 77 69 6e 26 74 61 67 3d 65 79 4a 55 51 55 64 54 49 6a 6f 69 5a 55 70 35 63 6c 5a 70 63 45 39 4d 55 7a 64 50 65 6b 30 74 54 48 6f 77 65 46 4a 7a 62 45 6c 33 54 6c 52 42 4d 6b 34 33 51 7a 42 4f 52 45 30 77 54 56 52 4a 4d 55 35 4d 54 58 64 4f 65 6d 4d 77 54 58 70 6a 4d 45 35 69 55 54 42 Data Ascii: 302 FoundThe resource was found at https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTB

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49824	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:24 UTC	203	OUT	GET /ccpa_iframe HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: application/signed-exchange;v=b3;q=0.9,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR
2022-03-15 16:07:24 UTC	214	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-ancestors 'self' https://.dropbox.com https://dropbox-stage.adobebasic.com https://.dropboxforum.com https://.hellosign.com https://hellosign-prod.webflow.io https://.staging-hellosign.com https://.qa-hellosign.com https://.dev-hellosign.com https://.hellofax.com https://.staging-hellofax.com https://.qa-hellofax.com https://.dev-hellofax.com https://docsend.com https://.docsend.com https://docsendstaging.wpengine.com https://docsenddev.wpengine.com https://.docsend.local https://www.docsendlocal.com https://ducksend.com https://platsend.com https://parrotsend.com https://dogesend.com https://yeetsend.com https://codsend.com https://ottersend.com https://.ducksend.com https://.platsend.com https://.parrotsend.com https://.dogesend.com https://.yeetsend.com https://.codsend.com https://.ottersend.com https://dropbox.tech https://dropbox-stg.tech https://capture-stage.netlify.app https://replay-stage.netlify.app ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:24 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3285b298e650476caec19e2088a638e4 Connection: close Transfer-Encoding: chunked
2022-03-15 16:07:24 UTC	217	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 35 6a 4e 74 5a 76 4e 67 6d 52 55 48 62 41 78 4d 55 4f 41 46 22 3e 0a 77 69 6e 64 6f 77 2e 5f 67 6f 63 68 5f 20 3d 20 7b 7d 3b 0a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 65 6c 6d 20 3d Data Ascii: 4000<!DOCTYPE html><html class="maestro" lang="en" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml"><head><script nonce="5jNtZvNgmRUHbAxMUOAF">window._goch_ = {};window.addEventListener('click', function(event) { 'use strict'; for (var elm =
2022-03-15 16:07:24 UTC	233	IN	Data Raw: 50 55 49 64 6c 65 0d 0a Data Ascii: PUIdle
2022-03-15 16:07:24 UTC	236	IN	Data Raw: 34 30 30 30 0d 0a 4d 6f 6e 69 74 6f 72 3b 73 74 61 72 74 56 69 73 69 62 69 6c 69 74 79 57 61 74 63 68 65 72 28 29 3b 63 6f 6e 73 74 20 43 4c 49 45 4e 54 5f 48 41 4e 44 4c 45 44 5f 51 55 45 52 59 5f 50 41 52 41 4d 53 3d 7b 72 6f 6c 65 3a 21 30 2c 65 6d 61 69 6c 5f 6a 75 73 74 5f 76 65 72 69 66 69 65 64 3a 21 30 2c 65 6d 61 69 6c 5f 6a 75 73 74 5f 76 65 72 69 66 69 65 64 5f 61 6e 64 5f 63 68 61 6e 67 65 64 3a 21 30 2c 6f 72 65 66 3a 21 30 2c 61 6c 77 61 79 73 5f 73 68 6f 77 5f 70 72 6f 67 72 65 73 73 62 61 72 3a 21 30 2c 66 72 6f 6d 5f 73 63 6c 5f 73 79 6e 63 5f 6d 6f 64 61 6c 3a 21 30 7d 3b 6c 65 74 20 6a 73 53 74 6f 70 77 61 74 63 68 3b 66 75 6e 63 74 69 6f 6e 20 72 65 67 69 73 74 65 72 45 6e 73 65 6d 62 6c 65 53 74 6f 70 77 61 74 63 68 28 29 7b 6a 73 53 Data Ascii: 4000Monitor;startVisibilityWatcher();const CLIENT_HANDLED_QUERY_PARAMS={role:!0,email_just_verified:!0,email_just_verified_and_changed:!0,oref:!0,always_show_progressbar:!0,from_scl_sync_modal:!0};let jsStopwatch;function registerEnsembleStopwatch(){jsS
2022-03-15 16:07:24 UTC	252	IN	Data Raw: 65 6e 74 73 2f 64 0d 0a 32 36 30 33 0d 0a 72 6f 70 7a 6f 6e 65 22 3a 20 22 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 64 72 6f 70 7a 6f 6e 65 22 2c 20 22 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 67 6c 6f 62 61 6c 5f 68 65 61 64 65 72 22 3a 20 22 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 67 6c 6f 62 61 6c 5f 68 65 61 64 65 72 22 2c 20 22 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 68 6f 6f 6b 73 22 3a 20 22 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 68 6f 6f 6b 73 22 2c 20 22 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 69 63 6f 6e Data Ascii: ents/d2603ropzone": "prod_assets_web_modules/dig-components/dropzone", "dig-components/global_header": "prod_assets_web_modules/dig-components/global_header", "dig-components/hooks": "prod_assets_web_modules/dig-components/hooks", "dig-components/icon
2022-03-15 16:07:24 UTC	272	IN	Data Raw: 31 66 35 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 35 6a 4e 74 5a 76 4e 67 6d 52 55 48 62 41 78 4d 55 4f 41 46 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 65 6e 73 65 6d 62 6c 65 5f 61 70 70 73 68 65 6c 6c 2e 6a 73 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 66 6c 61 73 68 2d 70 61 67 65 6c 65 74 22 2c 20 22 73 74 61 72 74 2d 31 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 73 65 74 75 70 50 6c 61 63 65 68 6f 6c 64 65 72 28 22 70 61 67 65 6c 65 74 2d 31 22 2c 20 7b 22 6e 61 6d 65 22 Data Ascii: 1f5<script type="text/javascript" nonce="5jNtZvNgmRUHbAxMUOAF"> /* global: ensemble is from ensemble_appshell.js */ ensemble.processChunk("flash-pagelet", "start-1", function() { ensemble.setupPlaceholder("pagelet-1", {"name"
2022-03-15 16:07:24 UTC	340	IN	Data Raw: 32 63 31 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 35 6a 4e 74 5a 76 4e 67 6d 52 55 48 62 41 78 4d 55 4f 41 46 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 66 6c 61 73 68 2d 70 61 67 65 6c 65 74 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 6f 64 75 6c 65 73 2f 63 6f 6e 73 74 61 6e 74 73 2f 70 61 67 65 5f Data Ascii: 2c1<script type="text/javascript" nonce="5jNtZvNgmRUHbAxMUOAF"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("flash-pagelet", "const_module-1", function(){ensemble.defineConstModule("modules/constants/page_
2022-03-15 16:07:24 UTC	460	IN	Data Raw: 34 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 35 6a 4e 74 5a 76 4e 67 6d 52 55 48 62 41 78 4d 55 4f 41 46 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 20 63 6f 6d 65 73 20 66 72 6f 6d 20 74 68 65 0a 20 20 20 20 20 20 20 20 20 20 20 66 61 6b 65 5f 72 65 71 75 69 72 65 5f 73 6e 69 70 70 65 74 20 28 75 69 2f 70 61 67 65 2f 73 63 72 69 70 74 5f 74 61 67 73 2e 70 79 29 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c Data Ascii: 4000<script type="text/javascript" nonce="5jNtZvNgmRUHbAxMUOAF"> /* global: ensemble is from dws-ensemble-appshell. / / global: configureRequire comes from the fake_require_snippet (ui/page/script_tags.py) */ ensembl
2022-03-15 16:07:24 UTC	492	IN	Data Raw: 61 63 6b 42 61 73 0d 0a 63 30 65 0d 0a 65 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 22 2c 20 22 65 78 63 65 70 74 69 6f 6e 4d 6f 64 75 6c 65 22 3a 20 6e 75 6c 6c 7d 2c 20 5b 5b 5b 5b 22 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 63 6c 6f 63 6b 22 2c 20 22 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 65 78 65 63 75 74 6f 72 22 2c 20 22 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 69 6e 64 65 78 22 2c 20 22 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 69 6e 73 74 61 6e 74 22 2c 20 22 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 69 6e 74 65 72 6e 61 6c 22 2c 20 22 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 6d 65 74 72 69 63 73 22 2c 20 22 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 6d 65 74 72 69 63 73 5f Data Ascii: ackBasc0eeUrl": "https://www.dropboxstatic.com/static/", "exceptionModule": null}, [[[["apex-metrics/clock", "apex-metrics/executor", "apex-metrics/index", "apex-metrics/instant", "apex-metrics/internal", "apex-metrics/metrics", "apex-metrics/metrics_
2022-03-15 16:07:24 UTC	498	IN	Data Raw: 31 33 33 39 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 35 6a 4e 74 5a 76 4e 67 6d 52 55 48 62 41 78 4d 55 4f 41 46 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 65 6e 73 65 6d 62 6c 65 5f 61 70 70 73 68 65 6c 6c 2e 6a 73 20 2a 2f 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 20 63 6f 6d 65 73 20 66 72 6f 6d 20 74 68 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 61 6b 65 5f 72 65 71 75 69 72 65 5f 73 6e 69 70 70 65 74 20 28 75 69 2f 70 61 67 65 2f 73 63 72 69 70 74 5f 74 61 67 73 2e 70 79 29 20 2a 2f 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 Data Ascii: 1339<script type="text/javascript" nonce="5jNtZvNgmRUHbAxMUOAF"> /* global: ensemble is from ensemble_appshell.js / / global: configureRequire comes from the fake_require_snippet (ui/page/script_tags.py) / / globa

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.3	49829	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:24 UTC	206	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 686 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR
2022-03-15 16:07:24 UTC	207	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5f 73 63 72 69 70 74 5f 6c 6f 61 64 65 64 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 73 63 72 69 70 74 5f 69 64 25 32 32 25 33 41 25 32 32 65 76 69 64 6f 6e 2d 73 65 74 74 69 6e 67 73 25 32 32 25 32 43 25 32 32 73 63 72 69 70 74 5f 75 72 6c 25 32 32 25 33 41 25 32 32 25 32 46 25 32 46 63 2e 65 76 69 64 6f 6e 2e 63 6f 6d 25 32 46 73 69 74 65 6e 6f 74 69 63 65 25 32 46 33 34 30 31 25 32 46 64 72 6f 70 62 6f 78 25 32 46 73 65 74 74 69 6e 67 73 2e 6a 73 25 32 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=privacy_consent_script_loaded&extra_params=%7B%22script_id%22%3A%22evidon-settings%22%2C%22script_url%22%3A%22%2F%2Fc.evidon.com%2Fsitenotice%2F3401%2Fdropbox%2Fsettings.js%22%2C%22visit_id%22%3A%227730430
2022-03-15 16:07:24 UTC	233	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:24 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a708f8b82d70440d8e104f243927cb9b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.3	49831	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:24 UTC	208	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 680 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR
2022-03-15 16:07:24 UTC	209	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5f 73 63 72 69 70 74 5f 6c 6f 61 64 65 64 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 73 63 72 69 70 74 5f 69 64 25 32 32 25 33 41 25 32 32 65 76 69 64 6f 6e 2d 6e 6f 74 69 63 65 25 32 32 25 32 43 25 32 32 73 63 72 69 70 74 5f 75 72 6c 25 32 32 25 33 41 25 32 32 25 32 46 25 32 46 63 2e 65 76 69 64 6f 6e 2e 63 6f 6d 25 32 46 73 69 74 65 6e 6f 74 69 63 65 25 32 46 65 76 69 64 6f 6e 2d 73 69 74 65 6e 6f 74 69 63 65 2d 74 61 67 2e 6a 73 25 32 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 39 32 36 31 35 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=privacy_consent_script_loaded&extra_params=%7B%22script_id%22%3A%22evidon-notice%22%2C%22script_url%22%3A%22%2F%2Fc.evidon.com%2Fsitenotice%2Fevidon-sitenotice-tag.js%22%2C%22visit_id%22%3A%227730430992615
2022-03-15 16:07:24 UTC	304	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:24 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 114d743533274245b2258533661b64e1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.3	49832	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:24 UTC	209	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 685 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR
2022-03-15 16:07:24 UTC	210	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5f 73 63 72 69 70 74 5f 6c 6f 61 64 65 64 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 73 63 72 69 70 74 5f 69 64 25 32 32 25 33 41 25 32 32 65 76 69 64 6f 6e 2d 6c 61 6e 67 75 61 67 65 25 32 32 25 32 43 25 32 32 73 63 72 69 70 74 5f 75 72 6c 25 32 32 25 33 41 25 32 32 25 32 46 25 32 46 63 2e 65 76 69 64 6f 6e 2e 63 6f 6d 25 32 46 73 69 74 65 6e 6f 74 69 63 65 25 32 46 33 34 30 31 25 32 46 74 72 61 6e 73 6c 61 74 69 6f 6e 73 25 32 46 65 6e 2e 6a 73 25 32 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=privacy_consent_script_loaded&extra_params=%7B%22script_id%22%3A%22evidon-language%22%2C%22script_url%22%3A%22%2F%2Fc.evidon.com%2Fsitenotice%2F3401%2Ftranslations%2Fen.js%22%2C%22visit_id%22%3A%2277304309
2022-03-15 16:07:24 UTC	266	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 7 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:24 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5cb266aca7fc4db8b7274b0681247bff Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.3	49834	162.125.65.15	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:24 UTC	211	OUT	GET /installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A HTTP/1.1 Host: dl-web.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en
2022-03-15 16:07:24 UTC	288	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=0 Content-Disposition: attachment; filename=DropboxInstaller.exe Content-Security-Policy: sandbox Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 72 X-Webkit-Csp: sandbox Content-Type: application/x-msdos-program Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:24 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 67b0608398f649f38e9480db9fd8a8d7 Connection: close Transfer-Encoding: chunked
2022-03-15 16:07:24 UTC	289	IN	Data Raw: 34 30 30 30 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4c f9 68 83 08 98 06 d0 08 98 06 d0 08 98 06 d0 01 e0 93 d0 18 98 06 d0 01 e0 85 d0 47 98 06 d0 01 e0 82 d0 2d 98 06 d0 01 e0 8c d0 0e 98 06 d0 2f 5e 7d d0 03 98 06 d0 08 98 07 d0 7f 98 06 d0 16 ca 92 d0 09 98 06 d0 08 98 91 d0 1d 98 06 d0 01 e0 97 d0 09 98 06 d0 52 69 63 68 08 98 06 d0 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 71 e0 5c 61 00 00 00 00 00 Data Ascii: 4000MZ@!L!This program cannot be run in DOS mode.$LhG-/^}RichPELq\a
2022-03-15 16:07:24 UTC	307	IN	Data Raw: 3b b5 d0 01 00 00 0f 84 42 fe ff ff c1 e8 18 88 04 32 46 e9 1b fe ff ff 8b ff 55 8b ec 83 3d c8 0c 41 00 01 75 05 e8 d1 06 00 00 ff 75 08 e8 1e 05 00 00 68 ff 00 00 00 e8 60 02 00 00 59 59 5d c3 6a 58 68 60 ed 40 00 e8 82 15 00 00 33 f6 89 75 fc 8d 45 98 50 ff 15 f8 d0 40 00 6a fe 5f 89 7d fc b8 4d 5a 00 00 66 39 05 00 00 40 00 75 38 a1 3c 00 40 00 81 b8 00 00 40 00 50 45 00 00 75 27 b9 0b 01 00 00 66 39 88 18 00 40 00 75 19 83 b8 74 00 40 00 0e 76 10 33 c9 39 b0 e8 00 40 00 0f 95 c1 89 4d e4 eb 03 89 75 e4 33 db 43 53 e8 e8 14 00 00 59 85 c0 75 08 6a 1c e8 58 ff ff ff 59 e8 49 13 00 00 85 c0 75 08 6a 10 e8 47 ff ff ff 59 e8 dc 0e 00 00 89 5d fc e8 80 0c 00 00 85 c0 7d 08 6a 1b e8 5f 01 00 00 59 ff 15 00 d1 40 00 a3 18 19 41 00 e8 2d 0b 00 00 a3 c0 0c 41 Data Ascii: ;B2FU=Auuh`YY]jXh`@3uEP@j_}MZf9@u8<@@PEu'f9@ut@v39@Mu3CSYujXYIujGY]}j_Y@A-A
2022-03-15 16:07:24 UTC	323	IN	Data Raw: 02 f3 c3 e9 18 2e 00 00 cc cc cc 53 56 57 8b 54 24 10 8b 44 24 14 8b 4c 24 18 55 52 50 51 51 68 80 89 40 00 64 ff 35 00 00 00 00 a1 f8 09 41 00 33 c4 89 44 24 08 64 89 25 00 00 00 00 8b 44 24 30 8b 58 08 8b 4c 24 2c 33 19 8b 70 0c 83 fe fe 74 3b 8b 54 24 34 83 fa fe 74 04 3b f2 76 2e 8d 34 76 8d 5c b3 10 8b 0b 89 48 0c 83 7b 04 00 75 cc 68 01 01 00 00 8b 43 08 e8 be 2f 00 00 b9 01 00 00 00 8b 43 08 e8 d0 2f 00 00 eb b0 64 8f 05 00 00 00 00 83 c4 18 5f 5e 5b c3 8b 4c 24 04 f7 41 04 06 00 00 00 b8 01 00 00 00 74 33 8b 44 24 08 8b 48 08 33 c8 e8 3e ff ff ff 55 8b 68 18 ff 70 0c ff 70 10 ff 70 14 e8 3e ff ff ff 83 c4 0c 5d 8b 44 24 08 8b 54 24 10 89 02 b8 03 00 00 00 c3 55 8b 4c 24 08 8b 29 ff 71 1c ff 71 18 ff 71 28 e8 15 ff ff ff 83 c4 0c 5d c2 04 00 55 56 Data Ascii: .SVWT$D$L$URPQQh@d5A3D$d%D$0XL$,3pt;T$4t;v.4v\H{uhC/C/d_^[L$At3D$H3>Uhppp>]D$T$UL$)qqq(]UV
2022-03-15 16:07:24 UTC	339	IN	Data Raw: 0c eb 09 83 66 04 00 eb 03 89 46 04 5f 8b c6 5e 5b 5d c2 04 00 83 79 08 00 c7 01 c0 e3 40 00 74 09 ff 71 04 e8 1d ad ff ff 59 c3 8b 41 04 85 c0 75 05 b8 c8 e3 40 00 c3 8b ff 55 8b ec 56 8b f1 e8 d0 ff ff ff f6 45 08 01 74 07 56 e8 a1 fc ff ff 59 8b c6 5e 5d c2 04 00 8b ff 51 c7 01 e0 e3 40 00 e8 6f 00 00 00 59 c3 8b ff 55 8b ec 56 8b f1 e8 e3 ff ff ff f6 45 08 01 74 07 56 e8 70 fc ff ff 59 8b c6 5e 5d c2 04 00 8b ff 55 8b ec 83 ec 20 8b 45 08 56 57 6a 08 59 be e4 e3 40 00 8d 7d e0 f3 a5 89 45 f8 8b 45 0c 5f 89 45 fc 5e 85 c0 74 0c f6 00 08 74 07 c7 45 f4 00 40 99 01 8d 45 f4 50 ff 75 f0 ff 75 e4 ff 75 e0 ff 15 3c d1 40 00 c9 c2 08 00 6a 0c 68 68 f0 40 00 e8 fd 94 ff ff 6a 0e e8 42 99 ff ff 59 83 65 fc 00 8b 75 08 8b 4e 04 85 c9 74 2f a1 7c 17 41 00 ba 78 Data Ascii: fF_^[]y@tqYAu@UVEtVY^]Q@oYUVEtVpY^]U EVWjY@}EE_E^ttE@EPuuu<@jhh@jBYeuNt/\|Ax
2022-03-15 16:07:24 UTC	348	IN	Data Raw: 34 30 30 30 0d 0a 34 f7 00 00 22 f7 00 00 0c f7 00 00 44 f7 00 00 00 00 00 00 0e f3 00 00 20 f3 00 00 2e f3 00 00 3a f3 00 00 4a f3 00 00 60 f3 00 00 7a f3 00 00 92 f3 00 00 ac f3 00 00 c2 f3 00 00 d2 f3 00 00 ec f3 00 00 fe f3 00 00 0c f4 00 00 24 f4 00 00 32 f4 00 00 3e f4 00 00 4c f4 00 00 56 f4 00 00 6e f4 00 00 7e f4 00 00 94 f4 00 00 ac f4 00 00 ba f4 00 00 c8 f4 00 00 d6 f4 00 00 e2 f4 00 00 fc f4 00 00 0c f5 00 00 22 f5 00 00 3c f5 00 00 54 f5 00 00 6c f5 00 00 06 f3 00 00 94 f5 00 00 b0 f5 00 00 c4 f5 00 00 d4 f5 00 00 fc f5 00 00 08 f6 00 00 12 f6 00 00 1e f6 00 00 30 f6 00 00 3c f6 00 00 4c f6 00 00 5a f6 00 00 66 f6 00 00 72 f6 00 00 84 f6 00 00 94 f6 00 00 aa f6 00 00 ba f6 00 00 cc f6 00 00 e8 f9 00 00 cc f9 00 00 f2 f2 00 00 d4 f2 00 00 c2 Data Ascii: 40004"D .:J`z$2>LVn~"<Tl0<LZfr
2022-03-15 16:07:24 UTC	364	IN	Data Raw: 99 ef 0e 7a 69 4e 0d 0a Data Ascii: ziN
2022-03-15 16:07:24 UTC	364	IN	Data Raw: 34 30 30 30 0d 0a db 46 6b 9d 97 5c a7 17 b6 ca 9a a8 13 a2 7f 73 76 94 ce 93 60 a9 2a cb f3 04 3f 8a 7e e8 59 0e 9c 99 c6 7f a2 4b 60 6d 27 b9 e8 cc 59 7f 23 44 8b da 35 c5 bf c3 f6 bb 99 f5 66 ea b5 f5 1d 1e d9 c2 7c 84 f7 74 bf 74 1a 10 e8 05 a5 f0 f6 ea 8a 38 70 c0 23 cc eb 20 fc 04 47 c7 db 79 dc af 23 a1 95 37 21 c5 2a 02 7f 15 de 02 d4 ce dd 36 1d 07 d5 85 29 4f 91 00 28 ec aa 7b ab 7f 82 02 97 6c 95 cc 4f 86 c1 13 97 67 cd da 2e d5 e9 e9 6f 19 12 cd 29 5d a8 3b 10 f8 c4 c8 d1 49 b5 4f c5 60 b1 f7 bd 38 5b 56 ba af c6 e8 f8 f5 78 2b 27 3f d5 37 70 36 45 3a 61 ed 6f de d1 0e 80 f0 65 f9 ed 38 91 ff 0f 4f 07 1d f5 e8 51 97 26 30 df 32 ec b8 fb 30 65 a8 60 58 c1 d7 5a ff ce fe f9 05 48 9b c1 7a 3d c5 8e 50 37 97 79 ba 8c 8c 94 3e 20 a0 a3 b1 4d d1 f5 Data Ascii: 4000Fk\sv`?~YK`m'Y#D5f\|tt8p# Gy#7!6)O({lOg.o)];IO`8[Vx+'?7p6E:aoe8OQ&020e`XZHz=P7y> M
2022-03-15 16:07:24 UTC	380	IN	Data Raw: 20 73 25 0a aa 5a 0d 0a 34 30 30 30 0d 0a 8d 5c 1a b9 28 a1 99 02 2b 9a c8 e7 ec b4 c0 f1 81 df 77 39 a4 96 1d 19 c3 94 37 e6 fb 93 64 63 3d da fb d4 94 75 36 ca f4 a7 25 b1 bc 80 62 8a 8f d2 70 b0 e6 c7 72 c3 cf 0a 7a b4 6e 5d 14 1b bc 45 7b a0 94 08 e5 f7 a9 18 a7 d0 bf 99 fa 14 67 75 82 af 42 0a 20 db 7f de 46 09 f3 77 ba 59 9d 39 cd 17 8c af 97 07 9d a4 09 4f 98 a9 fb 58 88 ed 2e 47 77 d5 98 71 23 c6 e9 d4 67 94 7d 4d ce 66 1b 7b d5 51 0a f5 3d 74 a1 20 e1 d8 06 7b c4 d9 06 e2 06 ca e8 0b ef 76 bf f6 60 00 39 da ca f9 9e 2a 80 75 d6 c1 e5 90 f1 86 f1 48 72 6a d6 d0 bd 55 61 e7 ce 38 2b 4c 42 4d 2b 63 15 c5 7e 60 37 ad f6 a3 ac 09 9a b1 39 8c 19 b2 61 2e 72 90 3c 28 49 58 41 a3 b1 96 ac ec be bd f6 e9 f6 ed 58 25 97 92 68 a0 2f 5d 78 44 88 97 ac 0f 25 Data Ascii: s%Z4000\(+w97dc=u6%bprzn]E{guB FwY9OX.Gwq#g}Mf{Q=t {v`9*uHrjUa8+LBM+c~`79a.r<(IXAX%h/]xD%
2022-03-15 16:07:24 UTC	396	IN	Data Raw: d8 62 c2 5a 21 2b 30 56 2f 21 af 06 c6 fc 0d 0a 34 30 30 30 0d 0a 1f 05 a2 d7 d2 75 89 b2 19 3c 5d e3 7a 07 e4 f3 0e c7 9e 9d d3 c0 93 ab 85 0e ca ff d9 9c 89 e4 82 7a bd d6 1a fe df 31 f6 52 f0 e7 be 7e 62 6e 35 fc 66 14 79 da 98 dc ab 4c 26 1b 3f 1a 72 8d 0a 65 7c 00 93 d8 a2 6e 7f 50 40 65 c9 e9 e3 45 c3 bc fa ca 19 2b 1f 54 9a 97 46 cd b0 98 03 1f 6c 22 6f 1c fa 1b b4 cd d8 2f cf 95 0d 9d c6 d6 2c a0 c7 c7 6f 41 61 b6 ad af a7 d3 8d f3 03 66 93 5e ca 82 5c e5 ca 11 cd ba 59 a5 40 3a 91 24 ae c9 b6 8e 01 6f a1 f0 d2 41 61 a3 f7 a2 98 2d fe 64 89 41 5b 11 5c 80 d2 9b f2 b6 07 71 d6 9b 21 db 0d a6 20 5e 87 3c b7 6d 6b 36 18 ff 07 01 a4 78 35 53 b4 e0 c8 6e fb 38 79 b5 38 07 d8 c2 c5 b6 4e 85 b0 b6 14 c7 92 11 a0 5f b0 40 bf 98 c7 c3 b0 85 99 d0 38 d7 a5 Data Ascii: bZ!+0V/!4000u<]zz1R~bn5fyL&?re\|nP@eE+TFl"o/,oAaf^\Y@:$oAa-dA[\q! ^<mk6x5Sn8y8N_@8
2022-03-15 16:07:24 UTC	412	IN	Data Raw: e7 bb bb 7e 70 cf 54 7f d0 db d4 ef 7e ce b3 4a 00 ce 0f f0 a2 2e 0d 0a 34 30 30 30 0d 0a 37 eb fe c9 cd 07 e0 cf 46 e3 bb 76 d8 22 03 b2 92 61 12 60 6a 50 76 11 9d 18 7d 1e 0d 56 e7 fa 4d 0f 0c 65 ff 3d e0 12 d5 0a 47 18 80 d6 e1 d7 db c9 ba 88 b6 b8 96 f3 df d3 06 e8 6e 4e 95 0d 0f 53 84 92 6f 18 8f fe a4 e6 a1 b8 43 ab 97 e3 1e ff 5f ef a1 2e f7 70 b6 9b 52 76 4b 57 ac ef b4 ac 7b bf 9e 76 35 93 0d be 14 e7 1e 55 7f 24 a7 12 7e c6 bf 95 5d 80 7b fa 20 6e a5 d9 12 72 a8 26 4c 86 ef 6b 3d bf c6 b6 49 42 46 58 7c aa cd 6b 6a 3b 3d 05 63 6a 16 50 24 e4 6e 48 56 1c 10 2b ca cc 4b 39 a6 8d 2b bc 28 95 97 92 4a 44 a3 58 7b 04 44 91 1c cd fc 58 05 ee db 1d 0b 98 c9 8c 1e 80 2e 3c 31 0e 5b 66 ee 4b f6 bd b2 45 84 1f c1 80 67 3b 0d ee 9b 2f 45 d9 3d 5a 50 34 68 Data Ascii: ~pT~J.40007Fv"a`jPv}VMe=GnNSoC_.pRvKW{v5U$~]{ nr&Lk=IBFX\|kj;=cjP$nHV+K9+(JDX{DX.<1[fKEg;/E=ZP4h
2022-03-15 16:07:24 UTC	428	IN	Data Raw: 3e 8f 1b 10 a7 b9 a7 40 13 60 79 a7 6d 1f d5 b0 3a a0 4c 77 f4 1a 40 b3 a0 21 7b b1 63 04 0d 0a Data Ascii: >@`ym:Lw@!{c
2022-03-15 16:07:24 UTC	428	IN	Data Raw: 34 30 30 30 0d 0a 74 5c ee e5 28 21 10 90 83 bd 97 88 ad 59 27 4b 8f 3d a7 48 2c 78 9f 46 d7 9d 10 c3 82 3d 4f a5 97 8f 4a 80 bd 10 f8 aa f2 d5 61 a4 9d 00 90 ea ce 58 ce 56 42 5e 4c dc ba 6d 00 24 47 e5 e0 1e f1 64 c2 9b fc 85 7b d9 76 e9 ef 11 c9 74 6b 70 6e b3 d5 fb ec fa 9d 8a 12 9b 79 63 06 07 a9 33 f5 08 e2 06 d9 1d f4 bd f6 0c ac 78 b5 f3 aa 2b 99 94 d2 c0 d2 71 68 49 3f 55 b7 44 03 7a b8 90 fd aa ac 7c 41 fe 20 be 10 39 b2 bb ce 50 e1 13 e9 c5 2f 06 ed f5 d5 c4 1f c1 36 ec bb 9d 82 d5 aa 97 34 b7 2d cb ae 7a 85 42 00 21 6e 48 17 2e 85 7f cc c7 d7 9a 31 b7 1a f9 ed 7a 69 a7 34 dd 2d 87 53 b5 7f fd 94 7a 95 38 37 3e 7b b9 2a 28 3a ff e6 2e 1f d6 4a 6e a3 9a 77 71 15 cd 22 21 a6 4b 4c f9 9b 34 e8 c0 7a 0f 97 69 d6 c5 78 c9 37 12 5e a2 0d 21 ce 16 bf Data Ascii: 4000t\(!Y'K=H,xF=OJaXVB^Lm$Gd{vtkpnyc3x+qhI?UDz\|A 9P/64-zB!nH.1zi4-Sz87>{*(:.Jnwq"!KL4zix7^!
2022-03-15 16:07:24 UTC	444	IN	Data Raw: ba b6 18 37 c5 9a 0d 0a 34 30 30 30 0d 0a bd 2b 8b 03 3a 9e b2 ab 94 79 d1 74 bc ae ba 12 9b c4 80 f3 a0 2a 65 e1 38 de a3 f1 0e 98 d2 43 08 e5 62 95 24 21 a6 96 d7 4d aa 19 45 05 2f d1 62 18 75 e5 91 1b b7 35 27 7a de 67 31 94 87 32 7b dc 5d df 22 bb 2f b1 74 2d 5d 3c 90 bb fe 2c f2 32 8e 11 4c 7f 36 67 d2 33 a7 b1 a3 8e eb 4e bb 42 2d 16 bb 99 c2 66 0f 7e e6 bd be 57 23 6d 03 97 a7 55 f3 3b a3 09 bb 8d 2e 8c d5 95 52 2f ad 0d c7 74 eb b4 cf 52 5a 7b 65 08 a8 64 cd 2c 66 48 97 d4 64 48 21 80 6b e6 eb 68 dc 64 bf 63 66 5f e2 b7 ec 8d a7 4b 71 77 77 e9 ba 64 0a 1b 5e 6f 0c ac 9c 56 6d fa 95 45 cf fa 68 7f cd 7e 66 cb 19 6b dc d4 6e e1 35 a6 51 a3 1a 7e f3 b1 b0 77 fd 53 dd 9d b6 ff e3 52 4d 44 bd ac 3f 6f 04 c1 e3 87 6b f5 91 4e 79 dc f4 43 66 63 1c 34 b1 Data Ascii: 74000+:yt*e8Cb$!ME/bu5'zg12{]"/t-]<,2L6g3NB-f~W#mU;.R/tRZ{ed,fHdH!khdcf_Kqwwd^oVmEh~fkn5Q~wSRMD?okNyCfc4
2022-03-15 16:07:24 UTC	476	IN	Data Raw: 85 22 67 12 58 44 f3 ce b5 cf ee 5b 93 20 0d 0a 34 30 30 30 0d 0a 77 f3 20 df 55 06 b2 bf e2 e9 46 c3 f6 5d 8c cf 5a 81 a8 d3 5f 47 40 6c ab 6c f1 8f ef 52 9d ac 28 d3 6f a4 cf f7 46 80 d7 cc 82 fe e2 1f 6a 7f af 45 eb 69 31 66 e8 e8 6d 50 c2 d9 ed 54 66 4b bb 82 b5 73 8b 2a 76 15 2b 79 62 8b fd cf 49 4f cd e9 ce 51 02 44 32 5b 64 ce 05 32 52 d3 46 86 89 1e 23 24 de c1 1e 7c a7 81 60 92 d6 80 d8 6a a9 90 13 88 ea 87 43 67 f3 01 22 ae 07 72 6a 36 65 cb 45 41 74 3d 1c 99 67 91 17 7a 64 29 b2 fc 5e 07 17 db c9 0c 43 45 fd 1a f3 0f ac ca dd f7 58 f8 94 37 12 43 b4 83 26 dc 55 a9 f8 ef e8 2d 91 85 c0 79 34 d6 5b 0d 09 88 0c 0b 8a 5d 05 a3 d5 6e dd 61 b2 c3 44 29 0f b1 a0 f7 40 dd d3 96 e8 d9 82 f3 fc 69 84 e3 9e 03 ac 52 81 40 95 7f 6e 29 2f 50 40 06 70 93 90 Data Ascii: "gXD[ 4000w UF]Z_G@llR(oFjEi1fmPTfKs*v+ybIOQD2[d2RF#$\|`jCg"rj6eEAt=gzd)^CEX7C&U-y4[]naD)@iR@n)/P@p
2022-03-15 16:07:24 UTC	503	IN	Data Raw: c6 76 b9 e8 8c 21 0b ce c9 6a 81 c7 98 1c 4e 77 ad 4e fa 64 ad 1f 0d 0a 34 30 30 30 0d 0a 47 5b 37 96 a6 81 73 56 50 7c c4 23 e4 28 20 e7 45 12 e7 5b ba 80 e0 c8 ee 56 f6 28 bc 3a 1f 24 d9 c0 2a 33 87 a6 6f 2e 22 6a 93 d1 43 e3 5b f2 5e b5 1e 37 f2 e7 1c 16 c3 be 4e cc 9c 1a d3 b7 5f f6 e4 96 e1 0e 99 f3 bb 8f 36 be 75 89 5f 9b b8 71 a3 28 3f 11 34 29 6d 17 b1 d2 51 fd 57 ad 94 5f d7 35 8f ec b6 a8 c3 1f de b3 0c df 28 86 b2 da a8 a5 6b d1 cb af d6 ad da 47 e7 ed 05 51 f4 0a 79 cd f6 98 b9 23 68 83 4d aa 2e 0d 59 c3 eb 5a 3f 5f 4f 8e 40 19 fd 3f 1f 6f 6a d1 75 89 8b b4 46 f2 43 5a 02 19 c9 eb 5c fd a4 37 e7 b2 f7 b7 2e ec 5c 39 ea 22 61 d9 a1 33 f8 f6 d6 53 fe c7 98 71 28 94 05 2c 71 fe 7f e2 c7 a2 3d 2e 2b 23 25 ff 8f 61 51 f1 a5 bf a6 47 b9 6b a1 d0 b2 Data Ascii: v!jNwNd4000G[7sVP\|#( E[V(:$*3o."jC[^7N_6u_q(?4)mQW_5(kGQy#hM.YZ?_O@?ojuFCZ\7.\9"a3Sq(,q=.+#%aQGk
2022-03-15 16:07:24 UTC	519	IN	Data Raw: c5 a0 a3 5d 6f 1a 1f e1 ef 92 91 90 5b d1 5f 48 97 14 b8 43 e4 b5 eb 9f 43 02 ab 1c 66 13 0d 0a 34 30 30 30 0d 0a 1f 35 e0 7a cd 18 9a c2 e5 c2 de 57 48 e2 39 8e d1 c5 5a a0 62 63 c9 df 0f bf 2a 06 71 a5 7a c8 16 3f 78 fc b3 e6 51 79 94 04 8a a5 f5 59 bf 69 89 d1 e1 d1 e5 f8 bb c5 96 f8 90 5a 2f 67 bf e0 dc 11 75 2f e7 37 43 5a c4 e6 4d 44 92 99 f2 6d b2 7d 4c 3a 87 76 57 e8 24 a0 14 1e 24 4a 68 70 33 03 02 c2 b1 5e ed 2b 18 47 ea dd 14 73 e8 f0 0d 47 e1 97 c6 7c b7 43 96 88 fa b9 2b 7f e1 81 c2 d7 49 6f 1f 59 cb fe a8 5d cb 80 53 01 5a 96 ca aa 75 27 69 2d 5d 06 f1 82 b7 9e b7 5d 22 63 a0 b5 6b 72 f8 70 50 51 72 76 0b c2 41 c2 bb 46 23 e7 c5 48 34 da 8f 0f 2b 19 87 3e 00 1b 4f 2a 09 02 25 43 c6 87 61 f0 f7 e3 fa 85 59 35 c2 cf b2 2f 57 76 32 c6 57 98 a5 Data Ascii: ]o[_HCCf40005zWH9Zbcqz?xQyYiZ/gu/7CZMDm}L:vW$$Jhp3^+GsG\|C+IoY]SZu'i-]]"ckrpPQrvAF#H4+>O%CaY5/Wv2W
2022-03-15 16:07:24 UTC	535	IN	Data Raw: 08 c4 64 23 62 e2 c2 3b be 65 6d bc 6e 4c 61 a7 9c 1b 13 d7 7b a0 09 4c 4b a3 22 89 04 a3 38 5e 31 05 f3 37 db 21 0d 0a 34 30 30 30 0d 0a fd 5d 64 0e e4 c0 8b 07 ee 1d 31 4c 7e 56 22 80 1e 71 62 4d 98 5c e4 bb 4b fb 5c b4 87 44 12 07 b2 ae c1 e0 5c d3 3c 16 83 4e f5 22 22 f5 a3 51 f9 6a 9d 9f dd 92 bf 60 7e dc 03 b8 c1 79 65 f5 fa ae 5e 22 cc f0 1a 54 f3 31 3c a8 3d a4 e6 5b 09 25 52 62 f9 10 e9 3c ce 36 2c 87 5f 56 6a 5d a2 8d d8 6c 38 44 a3 ed 62 fc f6 6a 8f 0f 47 91 6d 21 ad fe 7e 9c cf 34 68 f1 71 02 3d 9d 24 73 db 83 8c fa 15 47 d6 2d f3 43 8a 3e 88 20 64 ec c4 82 89 2d 4a 63 c2 c2 45 cf 8f 23 a5 53 47 e6 33 e7 76 1a d3 7b a1 86 06 4c 32 a4 6e 7f 9a 9e e9 a8 93 c7 05 7b 84 19 ed 72 41 74 8c 85 19 49 ba 2d 97 62 97 4d ec 64 a8 2b dc fc 01 a9 62 e5 55 Data Ascii: d#b;emnLa{LK"8^17!4000]d1L~V"qbM\K\D\<N""Qj`~ye^"T1<=[%Rb<6,_Vj]l8DbjGm!~4hq=$sG-C> d-JcE#SG3v{L2n{rAtI-bMd+bU
2022-03-15 16:07:24 UTC	551	IN	Data Raw: 96 c3 e7 7b 8f a6 ab f8 09 78 75 ff d3 ca 16 fd b8 e1 31 92 e1 38 da e4 cf 8b 45 05 1b d7 ae da 66 6f 3e dc 16 e9 d6 e8 be 1d 0a 8c 64 88 0d 0a 34 30 30 30 0d 0a 4d 21 d9 2b 99 85 36 b3 12 e3 3c 72 56 d3 96 37 25 c5 28 3d 6c 6a 01 dc d9 b9 17 3c 27 52 b1 e2 d0 96 9d 94 3d 33 95 c2 49 49 35 d7 99 65 a4 7b 5e c9 d3 69 8d ba 64 8f 25 6f 6c 40 91 f4 45 8b 3f 67 40 fc 05 8a 75 20 5b 9c 25 d6 fc a2 35 1c fa 74 c0 39 34 8c ea 51 4b db 48 23 13 dd 73 9e 9c d6 8c 7e 5d 30 cd e9 ca f9 d9 e3 ac c5 65 60 4f 4a 25 b0 bc 68 87 ff 9d 71 1d 9d f6 ff 73 29 4c 7a b5 3b 5a 1c c5 8b f1 4a 67 ed bb de 2b e5 f2 bc d6 44 38 3c 98 b9 e8 d8 da 8d f8 fd fa 44 1e 53 ca 3e f1 32 e5 e9 05 8c 62 48 67 33 e5 de 42 36 96 a9 6a c7 4b a1 a4 fb c4 89 83 a0 b6 e5 68 e2 2e 99 ce 0b 72 34 e4 Data Ascii: {xu18Efo>d4000M!+6<rV7%(=lj<'R=3II5e{^id%ol@E?g@u [%5t94QKH#s~]0e`OJ%hqs)Lz;ZJg+D8<DS>2bHg3B6jKh.r4
2022-03-15 16:07:24 UTC	567	IN	Data Raw: 93 11 68 7b cb c3 7f fe 33 49 fe 97 5f fe 2a a0 3e da da 9c 5d d4 86 b8 3d 13 02 3f 3b 38 9b d0 2e c7 87 04 d0 9c 60 8d 80 52 fe d5 14 50 8e 44 c9 11 d6 f7 a0 25 0d 0a 34 30 30 30 0d 0a e1 53 de b7 cb 25 7f bf 0f 71 bd 95 c1 c6 2f ab 4e dc 45 8b df 8e 62 33 a1 5c c9 2c 27 86 e4 bd 1a 4c 1f 22 3c 05 1b b1 c7 66 8e b0 f7 6b 89 ec 2e 12 b7 b4 3b 6b ff c5 b9 d1 c8 d1 7a a7 1e c9 b6 91 60 b4 a0 c9 94 87 e4 e1 01 f9 ce 12 dd 4a 1a fa a6 b8 9e 34 f8 ab aa a2 ca cc 85 a1 46 86 af 4e 19 70 e5 c3 87 1d 07 6a 6c 70 b1 9d ac 61 1d 47 28 78 06 fe 5f a0 2a ba 42 f6 4b c6 65 1a d1 b7 be ac ab 40 9c cc fa be b8 5f 68 61 7b c1 e0 ea 2a b7 6b 80 e7 ad ca f3 7c 56 49 e6 08 c9 79 7a 7c 7e 2d e3 36 dc 90 48 2b 5e 04 f0 38 07 92 3c 3e dd ab 2e a6 79 4a 8c 7c 18 ff 6f 02 e8 a3 Data Ascii: h{3I_>]=?;8.`RPD%4000S%q/NEb3\,'L"<fk.;kz`J4FNpjlpaG(x_BKe@_ha{*k\|VIyz\|~-6H+^8<>.yJ\|o
2022-03-15 16:07:24 UTC	583	IN	Data Raw: 15 97 ea 08 3c 77 0d 9e d2 14 82 cb a6 18 86 d7 60 42 7e eb 2d 1b 54 c6 03 3a 99 6d a7 69 27 a0 d1 50 9d 56 a0 dd 8b 6f f1 94 47 af 1e ca 55 80 fd 9c 19 eb 85 fa af 16 31 36 ac 13 1c d8 0d 0a 34 30 30 30 0d 0a cd f8 b3 dd 93 3e e0 c7 7e 9e d7 9f 53 fc 61 4d 76 19 a1 cb fe 70 2f c1 27 d8 b3 19 67 bd 01 31 66 5c 78 09 32 56 16 7c 9a d1 42 64 25 39 89 92 58 85 08 6c 1b 8c ad 24 02 6f b0 5c 61 49 01 b8 5d 4d 14 34 e4 62 1e b2 e4 2d a6 e4 a3 dd 7f 22 fc 38 a8 b5 7a 3b 7f c4 94 69 50 89 38 50 4a fe 8b 2a fb 79 b8 7d 7c da 5e 9c 33 a7 55 aa b6 12 05 30 fc 34 6f 41 82 5f 98 29 2a 10 71 71 fd 9c a3 e5 65 dd 2c e7 26 c7 e2 b7 30 a0 8c 62 f1 ca 71 a1 23 6b 4b c8 af 4f d3 5d 10 5f 13 55 73 df 1f 48 83 ca 8b d4 55 76 40 25 7d 52 3e 44 68 d8 33 20 c4 d8 62 57 be 6b f3 Data Ascii: <w`B~-T:mi'PVoGU164000>~SaMvp/'g1f\x2V\|Bd%9Xl$o\aI]M4b-"8z;iP8PJy}\|^3U04oA_)qqe,&0bq#kKO]_UsHUv@%}R>Dh3 bWk
2022-03-15 16:07:24 UTC	599	IN	Data Raw: c9 73 db 1d a9 af 53 0a e4 58 11 bc 4c 42 f3 98 2d 20 7d 3e 7b 6e ca 1b 0b 89 43 dc 01 93 13 2a 52 9c fd 3b 03 32 38 91 59 d1 7e 37 eb 8f 56 75 7e f5 55 9b 8e 39 f9 09 ad 37 a5 da eb b9 ae 37 6d eb 08 92 18 59 0d 0a 34 30 30 30 0d 0a 05 9a 6a db 8a b8 ca af 86 80 bb 37 2d 91 5b 6b 3b 9a 5e 5a 52 ee d7 88 e3 65 00 2a df b7 aa 0d 27 dc 9b 20 ae 17 b6 45 2d 0a 84 30 e6 e0 31 96 6b 89 7a ba d2 48 f6 70 08 f3 3d b9 16 c1 a6 9b b5 c3 ba 08 5f f8 0c a7 59 95 c6 0a fb fd c4 da f8 8c 8a b1 ac 3f 9d d4 f1 71 00 c3 74 96 49 02 d7 97 99 68 b4 5d d1 d9 6d b9 12 84 ed 21 f4 46 8e 81 8d f9 2a f4 11 41 28 73 15 f9 ac 37 66 96 d5 b7 3f 7b 20 1a a2 b7 5b b6 3d 86 3a be 61 b8 1e e5 e4 d3 d4 5d b4 d8 36 09 41 81 df 0c 2e 0f c5 56 d2 04 97 8f f8 21 0b a6 b0 32 b4 87 ee 3e 24 Data Ascii: sSXLB- }>{nCR;28Y~7Vu~U977mY4000j7-[k;^ZRe' E-01kzHp=_Y?qtIh]m!F*A(s7f?{ [=:a]6A.V!2>$
2022-03-15 16:07:24 UTC	615	IN	Data Raw: 09 8d 28 7d 69 64 b4 69 a2 8d e4 a7 c0 d1 01 29 e7 93 d0 1e aa 9f d1 bd 16 be c0 b9 61 08 4e 45 ab a6 94 18 b1 53 5a a9 49 55 87 7d e4 09 70 9c 27 f6 85 60 05 7d 3b 41 08 37 de d3 6a e7 a1 d8 bc 35 73 94 56 49 44 6e f6 cb 63 57 7f 45 0d 0a 34 30 30 30 0d 0a 1e 55 c3 2a ff 47 7e 8c b2 7f f3 05 53 80 e7 67 90 54 80 4e 71 d5 a4 45 b2 4f 4e fc b2 b0 70 b5 00 9f 05 68 e0 bc 04 b0 6a a1 62 08 15 b5 90 94 c7 6a 91 ee e4 3f 1b 93 22 94 9d 0e be 16 4f b7 c0 5c 57 fa 43 f2 c0 69 00 e4 dd 8a ea 34 1b 5c 99 62 36 83 a5 68 ff 6f e6 00 a7 68 f7 71 64 42 c6 1c a1 be 4f 87 56 34 bb 8c ef 70 a1 3a 83 56 a1 78 44 6f bb ed 42 ec c2 04 77 88 23 f8 56 41 34 83 51 fd 8d c5 ae f9 41 82 98 49 f0 39 21 ab be 5d ea a3 00 31 64 8a f9 56 53 02 4e e2 28 4d 10 19 f9 d0 55 b5 c6 9f 46 Data Ascii: (}idi)aNESZIU}p'`};A7j5sVIDncWE4000U*G~SgTNqEONphjbj?"O\WCi4\b6hohqdBOV4p:VxDoBw#VA4QAI9!]1dVSN(MUF
2022-03-15 16:07:24 UTC	631	IN	Data Raw: 5c bf ae d5 4b 2b 18 a3 68 d6 22 5d 81 2e cd 8a ae 75 3f ab 26 f7 fc 0d 77 b7 6f b8 7f e1 ad de 9c 74 06 b0 03 bc 6c e6 b4 17 e7 af ca e9 3c 55 97 5a 75 9d 7c c9 b9 a3 11 18 75 19 50 13 1e b5 72 e5 7e ee 77 43 d1 d9 a6 55 d7 cc 5b de 7d 99 19 54 4a 89 10 c2 0d 0a 34 30 30 30 0d 0a 38 ad f6 79 14 d3 d6 56 77 fd 9d a3 72 8f 05 31 f0 a4 41 44 61 cb c5 3d 81 06 f5 39 90 e6 4d f0 71 ce aa 98 c5 93 97 bc f9 4b 72 4c d8 96 79 50 ee 70 b2 47 08 99 78 1b be a3 43 48 2c 7d 27 48 23 a1 2f b3 bf 79 ae 2e 71 0c 95 30 46 12 92 53 8c 39 f4 1c 85 d8 5d 43 b0 19 8c 94 4c 86 0e 1d 0d ba cf 57 eb 40 8b 0c f4 17 1b 59 2b f3 95 d6 e4 ea b0 c0 62 35 c8 b5 bb bb 22 52 5c 64 94 6c a4 70 98 3e 12 85 08 5c 44 f3 27 11 a0 25 8f b7 19 3e 61 e4 bd ec 81 9e 7e 08 b9 f0 10 9e ef 8c be Data Ascii: \K+h"].u?&wotl<UZu\|uPr~wCU[}TJ40008yVwr1ADa=9MqKrLyPpGxCH,}'H#/y.q0FS9]CLW@Y+b5"R\dlp>\D'%>a~
2022-03-15 16:07:24 UTC	647	IN	Data Raw: 9f c1 31 71 86 d5 43 f7 33 d2 56 c5 fc b2 4b 78 62 de 99 8e 2c de 84 42 b0 60 72 bd 72 5d cb e8 9f 5c 85 1a ed 19 56 d0 f6 99 0a 75 ef 15 92 81 5c 7e 57 c1 6e ce 57 d7 7a 7f 9f 79 54 86 43 c1 0d 87 30 9d ca 18 16 fc 29 f6 a1 58 7f 46 46 56 c1 79 83 88 1e 8e 8c ca 25 2f 1a be 49 f9 0d 0a 34 30 30 30 0d 0a 4a f0 6f 90 21 69 93 3d ee 0c bb f8 65 9a f5 49 03 d7 2f f1 f9 e5 65 52 eb 02 a7 f3 3b 83 66 16 8d ee 77 1b 5d 38 c6 28 2f d2 a7 07 99 34 36 3c be 08 80 92 15 4c 64 58 7d 7e 90 3d 4c c2 a2 1f e2 b6 e1 b4 39 c0 58 79 3f 20 5d f9 4f 90 cf 00 4f e2 3c 7e a7 0f 64 18 6b f6 6f 69 3f 61 33 07 10 26 b1 bb ec dc f4 7a 24 40 ba 31 11 1c 45 53 46 b1 87 bb 5e 90 10 19 93 70 d9 40 4f fe c3 6b fe fc 3b 58 6e 92 47 00 e9 b3 f2 87 27 97 ce 20 82 6d 59 c8 18 53 d0 5c 16 Data Ascii: 1qC3VKxb,B`rr]\Vu\~WnWzyTC0)XFFVy%/I4000Jo!i=eI/eR;fw]8(/46<LdX}~=L9Xy? ]OO<~dkoi?a3&z$@1ESF^p@Ok;XnG' mYS\
2022-03-15 16:07:24 UTC	663	IN	Data Raw: ce e1 0c 3b 80 cd a4 e4 28 30 db 12 48 88 56 5e 93 81 47 b0 e5 6c 48 93 3b 86 97 f1 0e 4e ad 27 f5 19 bf 99 2c 10 d6 b6 47 50 0b 95 72 fb da 53 f8 f0 a0 11 cf 0e df ec a2 86 56 e4 69 2d 7a 3b ba a7 b8 fe 50 9c a2 3a 41 08 31 9e d3 50 d8 76 1e cd b5 e6 18 20 2a c3 58 ca 68 f7 f0 31 1a fa 99 cb da 59 09 f9 0d 0a 34 30 30 30 0d 0a 91 2b 6b a2 40 c0 d3 b7 a8 0b dc 40 83 ee 8c c6 aa 17 8c af 7f e2 f0 d4 ee 7f 43 ae 3e 8d aa a0 3c 94 d1 37 fc 7b 53 e1 e2 74 a7 4d 6f 66 11 6c a9 d4 ea 5e d8 f6 d1 41 f1 bf 68 88 81 b8 bd 16 2b 79 32 ed ab b5 41 3a f7 4e 3c 77 f0 72 8c 8d 60 d8 70 39 47 db f3 45 37 64 ed b4 8c ff 1a 11 2f 2b a8 8d c6 4b aa e6 4b e0 44 0e df ad 41 eb 43 13 57 5e 79 48 ea b7 da df 07 5d 63 04 5c b6 4b a0 42 02 55 0e e6 2b 96 b6 9f 3c e1 ee f4 3f d0 Data Ascii: ;(0HV^GlH;N',GPrSVi-z;P:A1Pv *Xh1Y4000+k@@C><7{StMofl^Ah+y2A:N<wr`p9GE7d/+KKDACW^yH]c\KBU+<?
2022-03-15 16:07:24 UTC	679	IN	Data Raw: 88 df 07 9e 8c e6 c8 d6 2e 2b fa 26 b2 6b b7 c5 82 32 32 15 de 79 93 33 43 ab bc 70 ab 14 0a a0 4a 82 18 c5 81 40 cf b5 6c e6 94 83 a0 cc ae 8b d9 a6 a3 3b 4c 7c 1c ea ef d4 93 a9 66 fa b9 6e c8 67 17 e0 a3 fe cd 5d f1 d2 97 05 6d 63 2e 81 9d c5 7e 29 0b d9 df 5b d3 22 70 3b 6b b8 34 59 12 89 8e aa 20 7c 27 5b 46 9e 5d f2 f2 29 0d 0a 34 30 30 30 0d 0a 23 fd f8 fd b1 db ce 8b c0 bf 35 7f ea c2 c9 29 85 1c 81 29 5b a5 fe 04 66 ca 17 19 fd c5 ab 3d af aa 41 32 3d 4c ea 39 3b e8 47 30 cd 41 a5 f5 2a af d4 b3 bc f1 03 1b b8 9e 2f 9e 96 d4 09 3d c9 92 1d cd c7 13 5e 14 53 89 b2 f7 5a b8 c9 2a fa b3 8f e7 bb 76 23 37 37 bf ce 5e 27 55 28 a7 38 c3 1b 0f f6 8e 0c 0b f9 3a ce 14 42 95 90 ee ab bb 4e d3 ab bd 17 ac 99 33 6f 0e 20 63 04 93 45 d6 f4 28 7a 5c f8 66 52 Data Ascii: .+&k22y3CpJ@l;L\|fng]mc.~)["p;k4Y \|'[F])4000#5))[f=A2=L9;G0A/=^SZv#77^'U(8:BN3o cE(z\fR
2022-03-15 16:07:24 UTC	695	IN	Data Raw: 7e 70 4a 7f 6f c0 26 c6 66 8d 7d 27 8a 03 72 6a 46 a9 c3 c0 c5 71 78 38 56 24 02 26 19 34 21 c7 d4 fe 53 48 c9 1a f8 2e 1a a0 e3 89 8c 91 b7 9b 72 1e e3 5d 6a c6 cd d1 3d 53 55 1a fa 9c f2 18 3e 64 ef 4d f9 c3 14 0e ac 14 e7 90 81 98 2d 53 05 dd 7b c5 2b 77 0b dd 94 a5 37 0d 9c e6 15 ad c1 fc aa 95 ac cc e7 c2 64 f2 02 62 d7 01 40 ed 3d f5 28 29 ab 54 0d 0a 34 30 30 30 0d 0a 90 cf de 65 4f 0a 87 71 63 f8 df 57 6f f5 b2 d2 a2 ff 23 6b 58 f6 50 31 52 ea 93 b6 1d a9 18 07 3e 34 9f ba 78 9e db 4f 70 10 04 b7 55 94 8a 4a 24 87 de 53 0c 47 86 c0 41 7e c7 86 a4 2f 30 48 8e 88 88 ba 25 0b 11 15 84 8a f8 86 94 75 c7 8b 63 d0 fb bc f0 77 8f 1d fc 7a a7 5d 50 b8 dc f7 fa 80 f7 99 85 b6 2c 96 22 c3 df 7a a5 17 b4 a2 5f dc 11 88 de 59 10 9b eb 31 6e b1 1d fc 53 6b 01 Data Ascii: ~pJo&f}'rjFqx8V$&4!SH.r]j=SU>dM-S{+w7db@=()T4000eOqcWo#kXP1R>4xOpUJ$SGA~/0H%ucwz]P,"z_Y1nSk
2022-03-15 16:07:24 UTC	711	IN	Data Raw: b2 56 cd 33 4c 73 db cf f2 0e 8f 33 4b e7 e3 42 0c 62 48 e4 fb 71 d4 76 e2 33 e3 f7 28 e8 64 b9 68 bd f7 24 f4 ee 3e 02 0c 70 b8 3e 70 b5 f3 8d 3b f5 de 3d c1 95 11 3c 7a 77 04 7d 41 a2 df 61 af 9b 35 48 6a 9d 37 23 c7 3e fb f2 a5 e0 e4 34 ed 74 8d c1 49 fd c3 01 b8 87 0e 27 1f 9e ec d0 0a 5e c9 fe cc 7c 3d 63 1e cf 5a 24 cf 2e ce 01 6c 00 39 24 54 08 1e 2b 52 92 51 cd 97 db 0d 0a 34 30 30 30 0d 0a 0b 25 eb 1d f8 ca 95 4e 0c f9 e3 02 93 e1 d9 1f e5 18 34 67 08 9d 96 24 63 2a 89 a1 ef 80 d2 df 16 cd 9d ff b0 3a f0 9a c9 cb 26 a6 5a 24 57 e4 95 87 80 c3 bf 9a 6d ad cf cd 40 6d 71 68 71 4a 11 81 ec 97 22 70 31 fc 1e ac 6f 44 d2 b0 b0 cb c7 ab bc 9f 57 94 ce ed df 67 b9 82 5b f6 ba 3c 83 1c c0 d6 df ce 9a ab 6b e9 95 56 c9 0d 1e c6 12 90 c7 13 d0 01 26 b3 79 Data Ascii: V3Ls3KBbHqv3(dh$>p>p;=<zw}Aa5Hj7#>4tI'^\|=cZ$.l9$T+RQ4000%N4g$c*:&Z$Wm@mqhqJ"p1oDWg[<kV&y
2022-03-15 16:07:24 UTC	727	IN	Data Raw: 79 d1 81 67 4c ab b4 b5 29 ef f3 08 33 1f 4c c5 5f 43 a5 a9 78 eb 32 e1 be 3e 00 d7 b6 67 0d 07 b5 bd 3a ca be df 53 5a d0 12 ef 2c 5d b3 ed d7 c9 ab fc 42 d0 64 31 9f ef 19 51 00 f0 9c 8f 1e c7 88 cb 62 c9 0c ad e2 41 a0 8f 23 aa ec 26 09 46 4c 3e 7c c9 da 67 2b 0e aa 23 94 54 cd b5 2f 85 3e e3 9a 65 18 c4 e1 4e fe de 2e 7e 32 89 08 3b f7 2d fd 85 74 e2 00 3b 3d 6f f4 aa a6 1a 27 8b 38 d0 c1 50 43 0d 0a 34 30 30 30 0d 0a b1 2e b7 c0 cd 70 17 f7 b7 63 58 96 01 80 80 3e 85 3c 05 43 e9 4d ba 1e ff 13 be a0 cf ef d0 b3 a9 37 f9 ed 57 75 b0 68 e4 38 f6 ff 35 7b 51 40 3a a7 6f cf 35 1d 0e eb 06 e1 48 78 83 7b 37 8f 57 a3 97 34 ae 01 99 1f c7 75 ef 8d 0d 91 71 be e1 18 8e cc 2c 8b 14 e8 56 f5 02 ce 70 b8 38 af 9f 1d 05 2d 43 33 6a d9 5d 41 4a 14 9e 19 f0 e5 6d Data Ascii: ygL)3L_Cx2>g:SZ,]Bd1QbA#&FL>\|g+#T/>eN.~2;-t;=o'8PC4000.pcX><CM7Wuh85{Q@:o5Hx{7W4uq,Vp8-C3j]AJm
2022-03-15 16:07:24 UTC	743	IN	Data Raw: 5f 0c d2 cd 8d bf 92 09 69 b6 8e da 58 10 89 e0 ab cc 93 5c 44 c9 03 6d b0 b9 1a 57 cc 83 74 e7 a7 f0 32 6a 44 f6 f1 f1 c6 ab ed ce ca 73 f0 a9 56 3e e8 6d fa 73 5e 12 52 7a 46 26 94 54 e9 0d 04 6e 73 2d 09 78 fe 5d 6a 47 9d 58 0c 05 7d 59 a6 97 9f 39 7d ae 2c d0 52 39 05 82 a5 cf ab 0f 0b dc e9 7f 2f 77 7c c7 92 37 04 6c 69 48 1f 88 72 57 01 df 8a 91 fe e4 96 58 e0 34 3b 5d 21 63 19 c8 ad af 4a 90 f5 57 ee 18 3c 4e 12 09 0d 0a 34 30 30 30 0d 0a 38 a1 48 9b 87 54 ce 88 c5 9f 6b a8 4b dd f7 e0 99 a6 36 dd 6e ae d9 ae 81 c2 20 bb 12 1e 30 a2 1e 0e 4f 65 49 87 b2 8f e8 3e dc 70 05 f3 c3 ba b1 02 45 91 93 a4 5f 11 ff 8a 68 ef 85 5b d6 ab 70 5d 93 ef 56 77 65 df e6 ce 44 09 bd 20 3f cd bf 3a 9f 70 52 c8 9c 02 67 20 5b 05 28 e4 ff d1 24 79 3e bd 34 a2 5e dc 56 Data Ascii: _iX\DmWt2jDsV>ms^RzF&Tns-x]jGX}Y9},R9/w\|7liHrWX4;]!cJW<N40008HTkK6n 0OeI>pE_h[p]VweD ?:pRg [($y>4^V
2022-03-15 16:07:24 UTC	759	IN	Data Raw: c7 d7 ff 05 01 4a e3 34 3b 1f 49 16 78 c9 d2 74 63 ed 2e d6 61 25 3a 34 42 35 dc 36 48 4b 60 16 ac 3a 91 83 5c 72 92 23 88 c4 d8 d8 79 a2 76 ce b8 8d bf 49 39 0f e8 ca b5 3f 24 bc a3 ee 9c f5 43 c1 74 4a 5f 59 08 85 9b 3e 74 ff 64 07 5f 61 4d e0 43 90 98 75 59 f4 cf e5 95 d1 b8 fd ff a8 5d 41 e5 e9 84 f0 07 02 a2 1f 86 36 5c b9 5c 59 6b 64 a0 2f 03 28 1b f7 c1 13 ff 04 b7 f0 17 16 8b eb aa d5 aa 7c 2f 20 59 ef ff 40 b4 4d 60 9c 84 01 72 c8 9c b9 0d 0a 34 30 30 30 0d 0a dc 53 a5 05 75 3f fd f2 64 e0 77 7c 48 b2 e9 7b ef da f2 7c 7a c2 42 88 a3 6c d4 3f 08 76 ef 8c a6 ae 52 8e 74 9c e4 c1 0e 58 e8 75 2a 44 c1 32 3b 11 58 68 3b 61 42 aa 49 40 26 59 42 5d a3 59 37 3f 50 98 8e d0 90 a9 a5 0c ed 83 9a 3a 8d d3 e8 48 6e 0c 4d 2c 6b 50 aa 0e 83 99 b8 03 e5 2f 83 Data Ascii: J4;Ixtc.a%:4B56HK`:\r#yvI9?$CtJ_Y>td_aMCuY]A6\\Ykd/(\|/ Y@M`r4000Su?dw\|H{\|zBl?vRtXu*D2;Xh;aBI@&YB]Y7?P:HnM,kP/
2022-03-15 16:07:24 UTC	775	IN	Data Raw: 5c 99 ab 7a 33 d1 bd 0c 29 19 b6 77 e4 46 84 10 6e 2a a3 ce b3 51 fb 93 f4 48 5d fb 7c a8 23 d8 45 2e 7b 50 98 c2 48 a9 3c 21 17 55 ee 15 fb 3e 74 22 99 f3 f6 d0 56 03 ad 37 6f e2 7d 58 33 6e 4b dc cf 7b 4d e8 bc c2 f9 e6 3d da 39 11 c6 7c 45 d4 98 42 ac 69 ac 8b 09 06 92 cb 86 cf 33 1a 6d 16 b2 47 38 95 07 ce b4 4c 2c 4f 32 dd 96 9a 9b b4 37 51 f4 d2 b2 b7 b8 d3 8a 10 a3 52 de 15 c0 cc 5d f2 69 c4 73 f4 a9 5a 5e 50 3c e0 7e 17 d9 8a 50 fb 87 ea 84 3c 7a 44 9a 59 aa bb 0d 0a 34 30 30 30 0d 0a a3 09 27 10 07 2d 8e 87 d6 e9 79 8f 2b ad 44 9e 12 81 02 48 3b 80 18 db 34 e1 e6 c0 5b 70 27 08 2f 8d 1c 28 7b 75 cb e9 90 5a 9c 49 0a 18 bd c2 0b 8c 98 29 fb 96 47 19 2a a1 ec 7b 93 bf cb 45 f5 bb de ee a4 47 17 03 2c 56 1d da 34 45 56 d0 7b f8 a2 93 38 d2 b7 04 b0 Data Ascii: \z3)wFnQH]\|#E.{PH<!U>t"V7o}X3nK{M=9\|EBi3mG8L,O27QR]isZ^P<~P<zDY4000'-y+DH;4[p'/({uZI)G{EG,V4EV{8
2022-03-15 16:07:24 UTC	791	IN	Data Raw: be df 22 74 64 7a 6d 94 8b d9 fb ed 66 58 56 47 a2 af 0a c5 2e 97 17 ba 48 ee 2b 7a e2 9f 70 da b0 b1 fb 6f c6 47 7e f3 67 d1 5f f0 66 b8 3f e4 d5 4d 22 9a 96 59 f0 1b ae 12 41 4f fe 52 45 17 e5 9c b9 31 ab d8 4b da 46 a6 dd ab 06 a8 db c7 a7 5d 1e 1a 89 44 05 46 62 a1 eb a5 f2 81 e3 0e 2e 78 96 b2 90 5c 3c f5 28 97 e9 49 36 ff d1 60 f7 fa 3e 0c 9b 68 3d ad 81 e7 cc e4 b6 6c 17 df 2e 91 41 c6 4d 7a 58 3a ec 87 29 45 3a 16 0f a6 34 16 93 0e b3 2f 56 28 e1 65 12 28 4f d3 b2 e5 36 bb 8d 76 a9 eb 0d 0a 34 30 30 30 0d 0a fa 6d a5 8f 48 bd cf 32 f3 21 be bc 07 fd 20 85 7a 6c 8e 2b 4d 29 29 62 ad 0d 16 f2 15 ae b1 3a 4c 87 75 e6 ad ee c8 96 0b d4 11 26 99 78 0c 75 92 a6 eb 9a 65 71 91 44 be 04 b0 1c 52 f2 0a 22 e7 de 6f ec 9d b5 d0 44 43 b2 60 46 ce 98 26 46 59 Data Ascii: "tdzmfXVG.H+zpoG~g_f?M"YAORE1KF]DFb.x\<(I6`>h=l.AMzX:)E:4/V(e(O6v4000mH2! zl+M))b:Lu&xueqDR"oDC`F&FY
2022-03-15 16:07:24 UTC	807	IN	Data Raw: 5b 73 b9 f0 2e 6a d1 e2 94 82 99 f9 34 b5 89 90 52 84 80 cd 01 6a 2c b0 0e 4e e1 c6 6d 51 65 f2 76 76 8d 74 7a 25 14 c2 50 17 08 d3 d5 4c ab 34 cc 9c 44 fe 39 1f 27 63 80 83 ca 8c ee 9e 28 7a 97 09 6b 3d 4a ee cb de 98 47 b5 9e da 87 81 5c 57 24 13 a5 47 d0 28 97 27 c4 02 ae f5 02 66 8d 3f f4 7d 2d e9 2c 02 6b de f8 88 a1 8d 89 7c f0 93 5c c6 9c 04 e9 be 46 41 10 0d 46 8e 29 09 61 b7 ca 7b e9 48 44 96 12 bc 17 91 87 59 9b bf 02 32 82 0e 6e 9c 5e ce eb 75 89 43 b8 03 04 61 3a 24 3c aa 90 29 fd d6 fe 83 89 53 65 44 a0 0d 0a 34 30 30 30 0d 0a bc f0 e6 d0 86 bb 81 fa d9 e2 96 e8 84 ad 24 c5 1f a1 d1 6a f1 0c b8 b1 14 b0 bc 91 63 2a 8a f7 13 a7 58 de 04 cd 63 fb d5 74 d7 9f 98 04 36 f7 ff 39 16 dd 0f eb 9b b0 7e 4b 2d 6a 2d 54 12 7b 6e ad eb 10 85 72 b5 46 2d Data Ascii: [s.j4Rj,NmQevvtz%PL4D9'c(zk=JG\W$G('f?}-,k\|\FAF)a{HDY2n^uCa:$<)SeD4000$jc*Xct69~K-j-T{nrF-
2022-03-15 16:07:24 UTC	823	IN	Data Raw: 03 46 5a 7b 81 18 56 ca 85 22 5f 9d 28 cd 47 5b 8e 15 16 37 01 04 33 a1 a7 70 d3 83 02 1a 7b 16 aa 5d 09 cc c4 5c 20 25 cf 6a 7e f3 bc 88 6b 00 b5 3f 44 71 61 57 17 c2 6a d2 93 aa cd ee e0 04 7d 9c 97 d0 78 0a 2c e0 6c ad 7a 53 af 07 db 43 69 58 b8 65 4d 69 a0 01 cc f8 a7 99 4b da 7a 8f a8 58 89 3f a0 79 15 01 46 d4 e6 61 42 d2 e6 c0 46 89 2b a5 3e ff da ca 28 d1 43 a8 b0 ef 3e fb 1e 95 d6 7c 2e ca bb 45 87 0b ca cc cd 5b 94 30 98 b7 4e ac 46 fc 91 09 e4 27 43 33 d6 c0 97 ae 03 bf 9d 4f 0d 37 49 d5 8f 49 c3 09 55 6e b0 4a 2f d4 49 02 43 c8 0d 0a Data Ascii: FZ{V"_(G[73p{]\ %j~k?DqaWj}x,lzSCiXeMiKzX?yFaBF+>(C>\|.E[0NF'C3O7IIUnJ/IC
2022-03-15 16:07:24 UTC	823	IN	Data Raw: 34 30 30 30 0d 0a f6 6b 2a 68 a1 e1 0b 8d 1c da 92 39 9e c6 86 0d 7f 07 3f 2c 96 8f 00 2b 3b 6f 9a e5 57 f0 1e 1c 41 ce 6b fd 4c a8 de 4d 25 46 ba 31 a8 c9 16 31 1c e4 e8 69 24 da 71 78 cf 07 d6 c3 dc e6 de 60 dc ec 4a b0 b7 ca c5 2b 1e 87 b7 24 80 f9 85 6e 3a cc 0c 30 6f 94 11 7a d5 7d 2f c8 5a 49 f4 71 e8 3c 90 36 23 bd 3a 74 cb d3 e8 93 91 48 8c 77 51 15 8a 71 99 6d e2 13 06 7e 93 cb ce fb 5c 8a 90 93 46 e6 85 09 16 ab 83 53 28 0b de 41 b1 41 f2 5c d1 6a 81 6e ec 97 6e f2 b3 de 29 ed 5d eb 8d ca c8 e4 65 6f 61 1e 50 3a 12 61 10 9e 3d cc 7d 93 99 59 da 86 76 46 69 1a b1 0d 9d e7 67 c4 d7 7f a1 9c c8 98 fe 01 53 8c 91 e7 71 ea b2 dc 8d 13 c6 a7 b4 42 cf 27 87 90 32 de 48 9e 76 91 e5 69 9b e4 49 ab 7e 3f 35 c3 a1 e9 c0 9f c0 1f b9 19 60 32 7c 0a c8 8c d8 Data Ascii: 4000k*h9?,+;oWAkLM%F11i$qx`J+$n:0oz}/ZIq<6#:tHwQqm~\FS(AA\jnn)]eoaP:a=}YvFigSqB'2HviI~?5`2\|
2022-03-15 16:07:24 UTC	839	IN	Data Raw: 56 91 4d 35 25 eb 0d 0a 34 30 30 30 0d 0a 0e 62 e7 9b a0 03 a6 c4 9f ae d1 e0 4b b7 9d 05 3f c0 17 c3 76 fc 64 d1 9d b3 9e 2a 47 54 7e d0 66 e5 3e 7b 12 2e fb 1b 9b 1e bf b8 08 fe e9 e7 3d 9c 0f b2 99 30 09 db 8f 6d 72 4c 58 bf 9e f2 38 0f d0 c4 bc e2 1c 00 18 7c 9c 87 58 c7 16 a0 60 cd 02 c3 dc 31 b2 fc 3a ec 60 12 dd 5e be bb 76 02 bd a9 3a be 02 96 aa 35 7f b2 cb 56 5f 72 c8 a6 4f 9f 6e 53 01 15 9f 79 59 87 59 a1 16 c2 1b ed 89 84 3e 27 d0 d6 92 73 0a 45 6c cf a5 72 0d f7 63 ea db e5 35 71 a4 a7 3f 2d 36 be fa 7d 7c f6 fc ba 9e d8 f3 67 fd 81 99 8e ab 69 ac 19 e6 74 79 b3 88 d9 e6 dd e7 8f 53 ab 73 97 9b 3f 11 34 f1 3c a3 7b 87 4f ae 23 e0 5d e6 8d 52 df 3e 0b cf dc aa 1f d9 09 4d e1 19 b2 81 7f 55 db e7 84 12 0d 0c 71 80 09 8a 9b 2b 4a 02 4c 70 c8 0e Data Ascii: VM5%4000bK?vd*GT~f>{.=0mrLX8\|X`1:`^v:5V_rOnSyYY>'sElrc5q?-6}\|gitySs?4<{O#]R>MUq+JLp
2022-03-15 16:07:24 UTC	855	IN	Data Raw: 17 96 3e f1 f7 de 3c 6a a7 8c c6 b9 cd 31 0d 0a 34 30 30 30 0d 0a 34 3a 5a f0 c7 d9 35 9b ab 47 f4 da 33 83 67 10 4b 23 63 20 c4 db ca fa 36 49 c2 7d 6f f5 64 f7 ff e6 74 86 d1 21 7f 87 22 8e 32 78 55 8c ff 89 2f 5c a5 e4 62 60 48 31 35 ce 6a 17 0d 7f 3c 97 a3 5c 43 6d 22 db 5a 52 d5 0f 58 2b f4 7c 4a 21 c3 2e 91 a8 56 a1 23 8b 74 8f 8d da 73 60 93 e4 f9 c5 7e ce a7 4b d9 b2 58 a8 47 6b b9 b7 2e 29 2b 84 bc 2d fc e1 be b1 79 fc 85 2f 9f 56 b1 04 34 5d e3 fd 81 57 8e 7f 97 e3 98 2a 9f 59 b8 4c b5 59 f7 45 0b c3 e9 21 02 20 2c a4 5e 32 51 91 41 2b 3a 08 0f c7 d0 e0 48 c1 04 85 71 e5 67 a4 37 8b f1 97 41 5e ee a4 e2 84 aa 7a d3 e9 fc 62 34 b4 d2 97 a0 bd 86 2b 61 b6 26 bf d9 62 2d 76 fd c8 f8 41 78 b9 cd b8 02 1e e4 fc cb b7 4f ec 65 dd 28 f9 b5 60 41 9a 49 Data Ascii: ><j140004:Z5G3gK#c 6I}odt!"2xU/\b`H15j<\Cm"ZRX+\|J!.V#ts`~KXGk.)+-y/V4]W*YLYE! ,^2QA+:Hqg7A^zb4+a&b-vAxOe(`AI
2022-03-15 16:07:24 UTC	871	IN	Data Raw: 44 99 de 53 75 3c 82 25 ed 57 a9 43 a1 5b 57 db a1 e6 29 1c 9d 1e 0d 0a Data Ascii: DSu<%WC[W)
2022-03-15 16:07:24 UTC	871	IN	Data Raw: 34 30 30 30 0d 0a 43 c9 33 f8 1e 13 5e 11 7b ba 5a 11 88 cf d4 e2 92 6b ce 80 cf 8e 90 bf 38 c0 6e be cf 1e 59 c7 c4 f7 ce 13 c9 e6 3a b3 b9 56 5f 9f aa ea 1a d6 c3 b9 c5 6a a1 e2 e5 2b fa ee 06 df e6 cd c3 b1 32 53 b0 52 53 f0 73 58 33 39 39 15 1d 4b e1 94 6a 32 27 23 dc 30 93 bf 08 46 54 3a 5b 84 0a 6a ef 17 23 f5 00 3f e0 9a fd f1 80 f7 cd bf af d2 6e ce 85 47 11 30 aa 63 9f 14 05 6d 49 e5 8f 07 69 52 6f f7 a2 2d 8d 53 48 a7 43 20 c3 d0 c2 20 ee 6a 8b 77 52 7a ab dd 0d b4 3b 4f 52 57 dd 20 da 24 d5 e1 db 89 e7 bd 92 db 26 8f 8c b8 d0 de 59 37 8f a9 3a f7 dc 52 bb 77 92 af 62 a9 08 cb 0e 6a 1a 1f dd 00 30 b8 b4 18 cd a3 b5 8b 85 2c ca 00 e3 d3 48 57 8d c9 cc ae 55 01 8a b0 03 96 35 86 d3 71 ac 44 e1 10 5c 7c 9c 75 2a 67 f2 15 25 a4 1f 67 38 c0 a1 72 45 Data Ascii: 4000C3^{Zk8nY:V_j+2SRSsX399Kj2'#0FT:[j#?nG0cmIiRo-SHC jwRz;ORW $&Y7:Rwbj0,HWU5qD\\|u*g%g8rE
2022-03-15 16:07:24 UTC	887	IN	Data Raw: 1f 31 eb 94 99 3b 0d 0a 34 30 30 30 0d 0a df 9f 2a cd c8 11 e0 15 4c bb d2 96 eb 5b d0 92 e7 99 bd 78 a5 76 d2 fc 15 19 c5 d1 c9 45 ab 58 3c 0a 2c 33 24 01 b8 1a d5 2d ae 3b ae 37 21 e5 2a 2a 19 8f e0 5d c1 d3 b9 a8 f7 6f 89 43 05 79 54 aa 92 68 d2 51 35 75 f3 44 83 75 a9 8c 37 6a 0c 5a 10 42 28 7e 75 a1 fe 3a c5 20 b7 63 b9 d9 1c f8 9f 3a fb 20 a1 f0 55 47 4e 6d bf 25 ec ef a6 13 29 f1 10 19 cf 55 2c 1e 7a 35 a6 6f 2d 27 b3 39 08 52 62 73 07 bc a0 0f f9 9d ff 90 fc d5 70 f1 9b 46 23 18 d1 8f 55 df 66 d5 65 e0 57 f0 b9 c3 7a 44 40 b1 e5 c5 6e 5c 19 fc 64 f4 53 fe 54 83 84 e4 8e 6e c2 76 82 4d 11 d3 2d 07 3e 6a 53 fd 34 4b 4a 4b 0b c4 e2 60 6f 09 ea 7c ac 50 fb 4f d8 24 f9 af 76 b7 a0 7f 34 0a 05 51 9d de e6 93 d6 8e b2 bf 4d ab e9 11 7e 8b b7 f4 99 86 13 Data Ascii: 1;4000L[xvEX<,3$-;7!*]oCyThQ5uDu7jZB(~u: c: UGNm%)U,z5o-'9RbspF#UfeWzD@n\dSTnvM->jS4KJK`o\|PO$v4QM~
2022-03-15 16:07:24 UTC	903	IN	Data Raw: 95 98 f8 0c 71 97 fe ee 52 c3 54 97 f8 8c 0d 0a 34 30 30 30 0d 0a c5 c0 d9 46 f7 49 b0 dd 33 0d 5f ea 03 b1 4c 0a 9a 36 3a 33 06 a1 e9 67 8c 32 bd 18 a8 d1 aa d0 18 6b 42 91 4f 9a 89 23 4a 27 0c cd eb e1 7a 40 ba 89 e5 43 69 92 b4 3c 37 12 7e 4f 97 a7 fc 72 89 1e 60 e7 e0 db 89 e1 cb d3 d0 ef 55 92 d5 4f a8 3f b4 1f 25 8d 6c 0e bb 8a 67 5b 02 a6 bc fe 21 95 0e 0b 25 ba b7 ac f5 18 96 02 94 c2 5f d7 2b d2 83 ba 15 77 e2 86 5c b2 29 fd a8 2c 77 ee 28 1b 7d 0c 84 22 d4 5c fe 54 d6 d8 f8 d8 d0 59 78 47 df ed 2f 6a 84 3c 91 19 e3 0c 7b 6d 1a ac 4a ad 2a 18 c6 57 3f d2 6a 0d 2d d4 ad e6 07 3a 8b 19 5e 95 46 7a 51 1a b6 4a a8 42 2d b6 04 61 4d 24 02 4f c8 62 c4 77 37 c4 10 6f d4 92 ff 9b d4 5f 20 a2 8c f3 46 b0 f6 17 41 68 88 1c cf 36 34 af fd 84 14 6b 2b 82 24 Data Ascii: qRT4000FI3_L6:3g2kBO#J'z@Ci<7~Or`UO?%lg[!%_+w\),w(}"\TYxG/j<{mJ*W?j-:^FzQJB-aM$Obw7o_ FAh64k+$
2022-03-15 16:07:24 UTC	919	IN	Data Raw: 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff 0d 0a Data Ascii: aaaaa
2022-03-15 16:07:24 UTC	919	IN	Data Raw: 34 30 30 30 0d 0a fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe Data Ascii: 4000aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
2022-03-15 16:07:24 UTC	935	IN	Data Raw: 00 00 00 00 00 00 0d 0a Data Ascii:
2022-03-15 16:07:24 UTC	935	IN	Data Raw: 34 30 30 30 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 5a 50 4c 54 45 00 61 fe 3d 86 fb c9 d9 f4 6c a2 f9 b9 d0 f5 7b ab f8 10 6a fd 1f 73 fc f7 f5 f2 d8 e2 f3 8b b4 f7 5c 98 f9 e7 eb f3 9a bd f6 2e 7c fc a9 c6 f6 4d 8f fa c8 d9 f4 aa c7 f6 e8 ec f3 8a b4 f7 6d a1 f9 e7 ec f3 5d 98 f9 3e 86 fb 0f 6a fd 7c ab f8 4e 8f fa Data Ascii: 4000PNGIHDRkXTZPLTEa=l{js\.\|Mm]>j\|N
2022-03-15 16:07:24 UTC	951	IN	Data Raw: 6c 00 61 00 72 00 0d 0a 33 66 38 30 0d 0a 20 00 6d 00 65 00 64 00 69 00 61 00 6e 00 74 00 65 00 20 00 22 00 45 00 6a 00 65 00 63 00 75 00 74 00 61 00 72 00 20 00 63 00 6f 00 6d 00 6f 00 22 00 20 00 65 00 6e 00 20 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 20 00 58 00 50 00 20 00 79 00 20 00 76 00 65 00 72 00 73 00 69 00 6f 00 6e 00 65 00 73 00 20 00 61 00 6e 00 74 00 65 00 72 00 69 00 6f 00 72 00 65 00 73 00 2e 00 33 00 4e 00 6f 00 20 00 73 00 65 00 20 00 70 00 75 00 65 00 64 00 65 00 6e 00 20 00 65 00 78 00 74 00 72 00 61 00 65 00 72 00 20 00 6c 00 6f 00 73 00 20 00 61 00 72 00 63 00 68 00 69 00 76 00 6f 00 73 00 20 00 64 00 65 00 20 00 6c 00 61 00 20 00 61 00 70 00 6c 00 69 00 63 00 61 00 63 00 69 00 f3 00 6e 00 2e 00 6b 00 43 00 6f 00 6e 00 73 00 75 Data Ascii: lar3f80 mediante "Ejecutar como" en Windows XP y versiones anteriores.3No se pueden extraer los archivos de la aplicacin.kConsu

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.3	49836	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:24 UTC	212	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 674 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR
2022-03-15 16:07:24 UTC	213	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5f 73 63 72 69 70 74 5f 6c 6f 61 64 65 64 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 73 63 72 69 70 74 5f 69 64 25 32 32 25 33 41 25 32 32 65 76 69 64 6f 6e 2d 74 68 65 6d 65 73 25 32 32 25 32 43 25 32 32 73 63 72 69 70 74 5f 75 72 6c 25 32 32 25 33 41 25 32 32 25 32 46 25 32 46 63 2e 65 76 69 64 6f 6e 2e 63 6f 6d 25 32 46 73 69 74 65 6e 6f 74 69 63 65 25 32 46 33 34 30 31 25 32 46 73 6e 74 68 65 6d 65 73 2e 6a 73 25 32 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 39 32 36 31 35 35 31 31 25 32 32 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=privacy_consent_script_loaded&extra_params=%7B%22script_id%22%3A%22evidon-themes%22%2C%22script_url%22%3A%22%2F%2Fc.evidon.com%2Fsitenotice%2F3401%2Fsnthemes.js%22%2C%22visit_id%22%3A%227730430992615511%22
2022-03-15 16:07:24 UTC	269	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:24 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c0848243d50f4b218c6c36d63851fc8b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.3	49837	3.210.49.210	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:25 UTC	967	OUT	GET /site/v3/3401/59514/1/1/2/2/104138?consent=0&regulationid=0&regulationconsenttypeid=1 HTTP/1.1 Host: l.evidon.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-03-15 16:07:25 UTC	970	IN	HTTP/1.1 204 No Content Date: Tue, 15 Mar 2022 16:07:25 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.3	49841	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:25 UTC	967	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 587 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:25 UTC	969	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 39 32 36 31 35 35 31 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 25 32 32 25 32 43 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A2%2C%22visit_id%22%3A%227730430992615511%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22adf96df2db9141a086fb94199a62964e%22%2C
2022-03-15 16:07:25 UTC	970	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 7 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0d9497eb3e85405aba1158935be03082 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.3	49838	3.210.49.210	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:25 UTC	969	OUT	GET /site/v3/3401/59514/1/4/2/2/104138?consent=0&regulationid=0&regulationconsenttypeid=1 HTTP/1.1 Host: l.evidon.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-03-15 16:07:25 UTC	970	IN	HTTP/1.1 204 No Content Date: Tue, 15 Mar 2022 16:07:25 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49756	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:20 UTC	1	OUT	GET /l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-03-15 16:07:20 UTC	6	IN	HTTP/1.1 302 Found Cache-Control: no-cache,no-cache, no-store Content-Security-Policy: sandbox Location: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; expires=Sun, 14 Mar 2027 16:07:20 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; Domain=dropbox.com; expires=Fri, 14 Mar 2025 16:07:20 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; expires=Fri, 14 Mar 2025 16:07:20 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=_BmkctLc_M; expires=Fri, 14 Mar 2025 16:07:20 GMT; HttpOnly; Path=/; SameSite=strict; Secure Set-Cookie: locale=en; Domain=dropbox.com; expires=Sun, 14 Mar 2027 16:07:20 GMT; Path=/; SameSite=None; Secure Set-Cookie: ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; Domain=www.dropbox.com; expires=Wed, 16 Mar 2022 16:07:20 GMT; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:20 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 171 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9fb96930750448eaa245a7a6a564fc46 Connection: close
2022-03-15 16:07:20 UTC	8	IN	Data Raw: 33 30 32 20 46 6f 75 6e 64 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 69 6e 67 3f 5f 61 64 3d 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 26 5f 63 61 6d 70 3d 4c 43 45 42 52 26 5f 74 6b 3d 65 6d 61 69 6c 26 6f 72 65 66 3d 65 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 302 FoundThe resource was found at https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.3	49842	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:25 UTC	973	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 647 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:25 UTC	975	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5f 69 66 72 61 6d 65 5f 6c 6f 61 64 65 64 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 25 32 32 32 33 34 37 25 32 32 25 32 43 25 32 32 69 66 72 61 6d 65 5f 75 72 69 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 6e 73 65 6e 74 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 32 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 39 32 36 31 35 35 31 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=privacy_consent_iframe_loaded&extra_params=%7B%22total_time%22%3A%222347%22%2C%22iframe_uri%22%3A%22https%3A%2F%2Fconsent.dropbox.com%22%2C%22visit_id%22%3A%227730430992615511%22%2C%22request_seq%22%3A0%2C
2022-03-15 16:07:25 UTC	992	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 07ca05b623da4bc8ae0237f60d28bc8b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.3	49844	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:25 UTC	975	OUT	POST /alternate_wtl_browser_performance_info HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 702 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:25 UTC	977	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 72 65 66 65 72 72 65 72 3d 26 6e 61 76 69 67 61 74 69 6f 6e 5f 73 74 61 72 74 3d 31 36 34 37 33 38 39 32 33 36 37 36 30 26 75 6e 6c 6f 61 64 5f 65 76 65 6e 74 5f 73 74 61 72 74 3d 30 26 75 6e 6c 6f 61 64 5f 65 76 65 6e 74 5f 65 6e 64 3d 30 26 72 65 64 69 72 65 63 74 5f 73 74 61 72 74 3d 31 36 34 37 33 38 39 32 33 36 38 31 39 26 72 65 64 69 72 65 63 74 5f 65 6e 64 3d 31 36 34 37 33 38 39 32 34 31 30 37 37 26 66 65 74 63 68 5f 73 74 61 72 74 3d 31 36 34 37 33 38 39 32 34 31 30 37 37 26 64 6f 6d 61 69 6e 5f 6c 6f 6f 6b 75 70 5f 73 74 61 72 74 3d 31 36 34 37 33 38 39 32 34 31 30 37 37 26 64 6f 6d 61 69 6e 5f 6c 6f 6f 6b 75 70 5f Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&referrer=&navigation_start=1647389236760&unload_event_start=0&unload_event_end=0&redirect_start=1647389236819&redirect_end=1647389241077&fetch_start=1647389241077&domain_lookup_start=1647389241077&domain_lookup_
2022-03-15 16:07:25 UTC	995	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 9 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d01d85f34ed0438f8373357b5336a20b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.3	49845	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:25 UTC	977	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 560 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:25 UTC	978	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 77 65 62 5f 74 69 6d 69 6e 67 5f 6c 6f 67 67 65 72 25 32 32 25 33 41 25 37 42 25 32 32 70 72 6f 63 65 73 73 5f 6e 61 76 5f 74 69 6d 69 6e 67 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22web_timing_logger%22%3A%7B%22process_nav_timing%22%3A%7B%22name%22%3A%2
2022-03-15 16:07:25 UTC	998	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 9 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c729664f335e4889b0ea1001a6c4d10c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.3	49847	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:25 UTC	979	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 5260 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:25 UTC	980	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 72 65 73 6f 75 72 63 65 73 5f 70 65 72 63 65 6e 74 5f 74 72 61 6e 73 66 65 72 72 65 64 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 5f 63 73 73 5f 63 6f 75 6e 74 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22resources_percent_transferred%22%3A%7B%22total_css_count%22%3A%7B%22nam
2022-03-15 16:07:25 UTC	1007	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 9 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 774bb97fafcd4dccaaa211e670de0c66 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.3	49849	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:25 UTC	985	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 742 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:25 UTC	987	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 70 65 72 66 6f 72 6d 61 6e 63 65 5f 6d 61 72 6b 73 25 32 32 25 33 41 25 37 42 25 32 32 6c 6f 61 64 5f 65 6e 64 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6c 6f 61 64 5f 65 6e 64 25 Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22performance_marks%22%3A%7B%22load_end%22%3A%7B%22name%22%3A%22load_end%
2022-03-15 16:07:25 UTC	1004	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 7 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b77f15716d274e939cd2c2e480538269 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.3	49848	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:25 UTC	987	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 3803 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:25 UTC	988	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 62 72 6f 77 73 65 72 5f 70 65 72 66 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 76 69 67 61 74 69 6f 6e 5f 73 74 61 72 74 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6e 61 76 69 67 61 Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22browser_perf%22%3A%7B%22navigation_start%22%3A%7B%22name%22%3A%22naviga
2022-03-15 16:07:25 UTC	1001	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0cbe43ea5213491581f7f11c814d4e86 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.3	49853	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:26 UTC	1010	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1425 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:26 UTC	1011	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 63 75 6d 75 6c 61 74 69 76 65 5f 63 70 75 5f 74 69 6d 65 25 32 32 25 33 41 25 37 42 25 32 32 63 70 75 5f 62 65 66 6f 72 65 5f 6c 6f 61 64 5f 65 6e 64 5f 64 75 65 5f 74 6f 5f 64 77 73 25 32 32 25 33 41 25 37 42 25 Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22cumulative_cpu_time%22%3A%7B%22cpu_before_load_end_due_to_dws%22%3A%7B%
2022-03-15 16:07:26 UTC	1153	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 9 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9941e80e4b964cd28c90987ccc38c4b2 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.3	49852	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:26 UTC	1012	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 750 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:26 UTC	1014	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 69 6e 69 74 5f 72 65 61 63 74 25 32 32 25 33 41 25 37 42 25 32 32 44 6f 77 6e 6c 6f 61 64 69 6e 67 56 69 65 77 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 44 6f 77 6e 6c 6f 61 64 69 Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22init_react%22%3A%7B%22DownloadingView%22%3A%7B%22name%22%3A%22Downloadi
2022-03-15 16:07:26 UTC	1161	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 7 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7c0d6617621a40168183066f6d065ba2 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.3	49855	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:26 UTC	1014	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 115464 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:26 UTC	1016	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 72 65 73 6f 75 72 63 65 5f 69 6e 69 74 5f 74 69 6d 65 6c 69 6e 65 25 32 32 25 33 41 25 37 42 25 32 32 6f 76 65 72 68 65 61 64 2e 6a 73 6f 6e 5f 6c 6f 61 64 65 72 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22resource_init_timeline%22%3A%7B%22overhead.json_loader%22%3A%7B%22name%
2022-03-15 16:07:26 UTC	1032	OUT	Data Raw: 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 6d 6f 64 75 6c 65 73 25 32 46 63 6c 65 61 6e 25 32 46 64 62 6d 6f 64 61 6c 5f 73 74 61 63 6b 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 78 65 63 43 62 2e 6d 6f 64 75 6c 65 73 25 32 46 63 6c 65 61 6e 25 32 46 64 62 6d 6f 64 61 6c 5f 73 74 61 63 6b 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 35 35 38 34 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 31 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 Data Ascii: parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.modules%2Fclean%2Fdbmodal_stack%22%3A%7B%22name%22%3A%22execCb.modules%2Fclean%2Fdbmodal_stack%22%2C%22start_time%22%3A5584%2C%22total_time%22%3A1%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTi
2022-03-15 16:07:26 UTC	1048	OUT	Data Raw: 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 6f 64 75 6c 65 73 25 32 46 63 6c 65 61 6e 25 32 46 6d 65 74 72 69 63 73 25 32 46 63 6f 69 6e 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 6f 64 75 6c 65 73 25 32 46 63 6c 65 61 6e 25 32 46 6d 65 74 72 69 63 73 25 32 46 63 6f 69 6e 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 35 36 33 36 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 31 31 30 30 30 30 25 32 32 25 37 44 25 32 43 Data Ascii: 1%7D%2C%22overhead.modules%2Fclean%2Fmetrics%2Fcoin%22%3A%7B%22name%22%3A%22overhead.modules%2Fclean%2Fmetrics%2Fcoin%22%2C%22start_time%22%3A5636%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22110000%22%7D%2C
2022-03-15 16:07:26 UTC	1064	OUT	Data Raw: 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 6d 6f 64 75 6c 65 73 25 32 46 63 6c 65 61 6e 25 32 46 6d 65 74 72 69 63 73 25 32 46 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 78 65 63 43 62 2e 6d 6f 64 75 6c 65 73 25 32 46 63 6c 65 61 6e 25 32 46 6d 65 74 72 69 63 73 25 32 46 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 35 36 34 34 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 Data Ascii: 2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.modules%2Fclean%2Fmetrics%2Finstrumentation%22%3A%7B%22name%22%3A%22execCb.modules%2Fclean%2Fmetrics%2Finstrumentation%22%2C%22start_time%22%3A5644%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22a
2022-03-15 16:07:26 UTC	1080	OUT	Data Raw: 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 32 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 6f 64 75 6c 65 73 25 32 46 63 6c 65 61 6e 25 32 46 72 65 61 63 74 25 32 46 63 6f 6d 70 6f 6e 65 6e 74 73 25 32 46 63 73 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 6f 64 75 6c 65 73 25 32 46 63 6c 65 61 6e 25 32 46 72 65 61 63 74 25 32 46 63 6f 6d 70 6f 6e 65 6e 74 73 25 32 46 63 73 73 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 Data Ascii: notations%22%3A%7B%22totalTimeNs%22%3A%22200000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.modules%2Fclean%2Freact%2Fcomponents%2Fcss%22%3A%7B%22name%22%3A%22overhead.modules%2Fclean%2Freact%2Fcomponents%2Fcss%22%2C%22start_time%22%3A
2022-03-15 16:07:26 UTC	1096	OUT	Data Raw: 6f 6e 73 65 6e 74 5f 70 6c 61 74 66 6f 72 6d 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 6f 64 75 6c 65 73 25 32 46 63 6c 65 61 6e 25 32 46 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 25 32 46 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5f 70 6c 61 74 66 6f 72 6d 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 36 32 32 35 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 31 31 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e Data Ascii: onsent_platform%22%3A%7B%22name%22%3A%22overhead.modules%2Fclean%2Fprivacy_consent%2Fprivacy_consent_platform%22%2C%22start_time%22%3A6225%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22110000%22%7D%2C%22paren
2022-03-15 16:07:26 UTC	1133	OUT	Data Raw: 41 25 32 32 34 39 30 35 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 25 32 46 69 63 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 78 65 63 43 62 2e 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 25 32 46 69 63 6f 6e 73 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 36 33 39 34 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 Data Ascii: A%224905000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.prod_assets_web_modules%2Fdig-components%2Ficons%22%3A%7B%22name%22%3A%22execCb.prod_assets_web_modules%2Fdig-components%2Ficons%22%2C%22start_time%22%3A6394%2C%22total_time%22%3A0%
2022-03-15 16:07:26 UTC	1149	OUT	Data Raw: 74 5f 74 69 6d 65 25 32 32 25 33 41 36 35 38 39 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 32 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 61 6e 6f 6e 2d 32 31 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 78 65 63 43 62 2e 61 6e 6f 6e 2d 32 31 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 36 35 38 39 25 32 Data Ascii: t_time%22%3A6589%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%2220000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.anon-21%22%3A%7B%22name%22%3A%22execCb.anon-21%22%2C%22start_time%22%3A6589%2
2022-03-15 16:07:26 UTC	1175	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 57 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2d04304cee814f7ea15ec187e0a3abcd Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.3	49856	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:26 UTC	1112	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 16013 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:26 UTC	1113	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 72 65 73 6f 75 72 63 65 5f 74 69 6d 65 6c 69 6e 65 25 32 32 25 33 41 25 37 42 25 32 32 63 73 73 25 32 46 6d 61 69 6e 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 63 73 73 25 32 46 6d Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22resource_timeline%22%3A%7B%22css%2Fmain%22%3A%7B%22name%22%3A%22css%2Fm
2022-03-15 16:07:26 UTC	1158	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 9 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 98f82dbadc0a4544bd4fbff787872c03 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49753	216.58.215.238	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:20 UTC	1	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfm X-Goog-Update-Updater: chromecrx-85.0.4183.121 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-03-15 16:07:20 UTC	2	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-RpB1a0uNKjIvTjqwyMcEew' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 15 Mar 2022 16:07:20 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5552 X-Daystart: 32840 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-03-15 16:07:20 UTC	3	IN	Data Raw: 35 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 35 35 32 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 32 38 34 30 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 51e<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5552" elapsed_seconds="32840"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2022-03-15 16:07:20 UTC	4	IN	Data Raw: 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 2e 63 72 78 22 20 66 70 3d 22 31 2e 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 61 70 Data Ascii: mhkkegccagdldgiimedpiccmgmieda.crx" fp="1.81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app><ap
2022-03-15 16:07:20 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.3	49858	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:26 UTC	1128	OUT	POST /alternate_wtl HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1523 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:26 UTC	1130	OUT	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 5f 74 79 70 65 3d 6e 61 76 69 67 61 74 65 26 73 65 72 76 65 72 5f 72 65 71 75 65 73 74 5f 73 74 61 72 74 5f 74 69 6d 65 3d 31 36 34 37 33 36 30 34 34 30 39 38 35 26 65 78 74 72 61 5f 63 6f 6c 75 6d 6e 73 3d 25 37 42 25 32 32 6c 6f 67 5f 73 6f 75 72 63 65 25 32 32 25 33 41 25 32 32 6c 6f 61 64 5f 65 6e 64 25 32 32 25 32 43 25 32 32 73 75 62 74 79 70 65 73 25 32 32 25 33 41 25 32 32 25 37 42 25 35 43 25 32 32 6a 73 5f 70 72 65 6c 6f 61 64 69 6e 67 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 6d 65 74 72 6f 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 73 6a 63 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 61 6d 70 5f 74 74 69 5f 66 6c 6f 77 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 25 35 43 25 32 32 25 37 Data Ascii: navigation_type=navigate&server_request_start_time=1647360440985&extra_columns=%7B%22log_source%22%3A%22load_end%22%2C%22subtypes%22%3A%22%7B%5C%22js_preloading%5C%22%3Anull%2C%5C%22metro%5C%22%3A%5C%22sjc%5C%22%2C%5C%22amp_tti_flow%5C%22%3A%5C%22%5C%22%7
2022-03-15 16:07:26 UTC	1156	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a7c0f8a4d2c64e158f19d8cacb82c223 Connection: close
2022-03-15 16:07:26 UTC	1158	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.3	49857	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:26 UTC	1131	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 740 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:26 UTC	1132	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 6d 61 65 73 74 72 6f 5f 74 72 61 63 69 6e 67 25 32 32 25 33 41 25 37 42 25 32 32 6c 6f 61 64 5f 65 6e 64 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6c 6f 61 64 5f 65 6e 64 25 32 32 Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22maestro_tracing%22%3A%7B%22load_end%22%3A%7B%22name%22%3A%22load_end%22
2022-03-15 16:07:26 UTC	1150	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 7 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6476bec3816c48b6b4062606b5d11091 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.3	3487	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:26 UTC	1164	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 929 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:26 UTC	1165	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 70 61 69 6e 74 25 32 32 25 33 41 25 37 42 25 32 32 66 69 72 73 74 2d 70 61 69 6e 74 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 66 69 72 73 74 2d 70 61 69 6e 74 25 32 32 25 32 43 25 Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22paint%22%3A%7B%22first-paint%22%3A%7B%22name%22%3A%22first-paint%22%2C%
2022-03-15 16:07:26 UTC	1168	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 6 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a883d048e76341959f132121119b1569 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.3	49861	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:26 UTC	1166	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 996 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:26 UTC	1168	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 76 69 73 69 62 69 6c 69 74 79 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 2d 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 2e 76 69 73 69 62 6c 65 2d 74 69 6d 65 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22visibility%22%3A%7B%22total-VisibilityState.visible-time%22%3A%7B%22nam
2022-03-15 16:07:26 UTC	1172	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9b9dfe6131984a8d917c035e91285320 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.3	49851	162.125.248.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:26 UTC	1171	OUT	GET /hstsping HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: dropbox.com
2022-03-15 16:07:26 UTC	1174	IN	HTTP/1.1 204 No Content Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: local Date: Tue, 15 Mar 2022 16:07:26 GMT Server: envoy X-Dropbox-Request-Id: 86d669dc62f84209b6219ed5ec60bbb0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.3	3488	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:30 UTC	1178	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 587 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:30 UTC	1179	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 38 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 39 32 36 31 35 35 31 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 25 32 32 25 32 43 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A8%2C%22visit_id%22%3A%227730430992615511%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22adf96df2db9141a086fb94199a62964e%22%2C
2022-03-15 16:07:30 UTC	1179	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:30 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 60b71d5adb5541f68a95357d4390f63c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.3	49866	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:33 UTC	1183	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 588 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:33 UTC	1184	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 31 30 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 39 32 36 31 35 35 31 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 25 32 32 25 32 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A10%2C%22visit_id%22%3A%227730430992615511%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22adf96df2db9141a086fb94199a62964e%22%2
2022-03-15 16:07:33 UTC	1184	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 7 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:33 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3ffb0c64b36b44efa1f3968620c69cc8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.3	49870	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:34 UTC	1188	OUT	POST /2/megaphone_chat/get_best_chat_campaigns HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 96 X-CSRF-Token: pZXDo3x1XnpXWcY8UK1IFlBj X-Dropbox-Uid: -1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:34 UTC	1189	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 69 6e 67 3f 5f 61 64 3d 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 26 5f 63 61 6d 70 3d 4c 43 45 42 52 26 5f 74 6b 3d 65 6d 61 69 6c 26 6f 72 65 66 3d 65 22 7d Data Ascii: {"url":"https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e"}
2022-03-15 16:07:34 UTC	1189	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Date: Tue, 15 Mar 2022 16:07:34 GMT Pragma: no-cache Server: envoy X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 19 X-Webkit-Csp: sandbox Content-Length: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: eaf1eee6fa6a44b09596b631d5f5cfc2 Connection: close
2022-03-15 16:07:34 UTC	1190	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.3	49875	172.217.168.33	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:36 UTC	1190	OUT	GET /crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-03-15 16:07:36 UTC	1190	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ADPycdvJQTvKSQLNqHX0_5-S7JOmeYK4YajvlrFWRETxYg8ENDuP4H2L2_veZ1XCRpa-dRDQy5jy1krfrXZM0VigIYBTbjueUQ Content-Disposition: attachment; filename="extension_8520_615_0_5.crx" Cross-Origin-Resource-Policy: same-site Accept-Ranges: bytes X-Goog-Hash: crc32c=DxAZGA== Content-Length: 768843 Server: UploadServer Date: Mon, 14 Mar 2022 21:05:52 GMT Expires: Tue, 14 Mar 2023 21:05:52 GMT Cache-Control: public, max-age=31536000 Age: 68504 Last-Modified: Wed, 05 Aug 2020 01:15:29 GMT ETag: 730d2491_a246e948_e80d9c94_d8b3f142_86eb8dd2 Content-Type: application/x-chrome-extension Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close
2022-03-15 16:07:36 UTC	1191	IN	Data Raw: 43 72 32 34 03 00 00 00 18 04 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 8f fb bf 5c 37 63 94 3c b0 ee 01 c4 b5 a6 9a b1 9f 46 74 6f 16 38 a0 32 27 35 dd f0 71 6b 0e dc f6 25 cb b2 ed ea fb 32 d5 af 1e 03 43 03 46 f0 a7 39 db 23 96 1d 65 e5 78 51 f0 84 b0 0e 12 ac 0e 5b dc c9 d6 4c 7c 00 d5 b8 1b 88 33 3e 2f da eb aa f7 1a 75 c2 ae 3a 54 de 37 8f 10 d2 28 e6 84 79 4d 15 b4 f3 bd 3f 56 d3 3c 3f 18 ab fc 2e 05 c0 1e 08 31 b6 61 d0 fd 9f 4f 3f 64 0d 17 93 bc ad 41 c7 48 be 00 27 a8 4d 70 42 92 05 54 a6 6d b8 de 56 6e 20 49 70 ee 10 3e 6b d2 7c 31 bd 1b 6e a4 3c 46 62 9f 08 66 93 f9 2a 51 31 a8 db b5 9d b9 0f 73 e8 a0 09 32 01 e9 7b 2a 8a 36 a0 cf 17 b0 50 70 9d a2 f9 a4 6f 62 4d Data Ascii: Cr240"0H0\7c<Fto82'5qk%2CF9#exQ[L\|3>/u:T7(yM?V<?.1aO?dAH'MpBTmVn Ip>k\|1n<FbfQ1s2{*6PpobM
2022-03-15 16:07:36 UTC	1191	IN	Data Raw: 40 3b f4 9e 6a bc a6 ca cb a3 80 eb 8b 1c a8 07 a9 3d 61 65 c8 c2 d3 30 c2 ff f6 cc 90 8b f9 14 44 55 b1 1f a8 1a 6e 1c 91 f5 6e 12 3b ff 49 70 72 cc a2 1f 51 db 15 1c 81 3a 10 b6 e5 20 3c e2 ad 87 0f d5 1e 80 61 09 59 dc 93 f3 83 96 97 87 7b 65 69 9e cd 12 a8 02 0a a2 01 30 81 9f 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 81 8d 00 30 81 89 02 81 81 00 cd 4d 62 68 3d 9f 5b 4f 7d b2 2b 1b ae 55 af 4b 48 46 28 6e 33 e8 5c 22 d7 dd d8 2c 67 d7 63 0e b5 8a 36 29 13 10 28 dd 45 ed ff 00 55 db fa ff 23 92 69 ad 61 03 e7 3a 04 98 9f 4e 89 fd 0a 1d 0e 50 88 1b a9 78 ef 4f a0 90 ea 28 6d 43 3b 7c eb 35 01 53 ac 7b 6d ea 61 45 78 8d bb 91 5b 7f 98 66 50 af 69 60 85 79 cc c2 35 b1 88 52 02 84 8b 90 76 7f 24 1a cf 2e b4 00 bd 6c 2d 6d ee b5 02 03 01 00 01 12 80 Data Ascii: @;j=ae0DUnn;IprQ: <aY{ei00*H0Mbh=[O}+UKHF(n3\",gc6)(EU#ia:NPxO(mC;\|5S{maEx[fPi`y5Rv$.l-m
2022-03-15 16:07:36 UTC	1193	IN	Data Raw: f6 ad c7 4a cb 2f 1f 77 0d f5 97 97 c5 5f 2f ee 4b 21 c4 5f 5e de 7e 29 ae 9a 3f 8a c1 c7 9b f2 f2 e7 8b 83 8f 77 77 5f 6e 7f 7a f9 f2 f6 fe cb 97 eb 9b bb 17 1f 6a 3b be 58 5f ff fa 72 bd d5 ec cb e2 ea f6 df e5 cd 4b 08 bb 2a 89 5f 1c 0c ee 8a 9b 0f e5 1d 8c 5f ae 3e 17 57 ff bc 38 68 04 57 0f 19 ac 3f 17 b7 b7 70 f1 a6 fc d7 fd a7 9b 72 f3 3c ce 08 06 5e 7d 78 7e fb f1 fa df 70 f1 7f ee ae bf bc b8 bd bf bc fc b4 fe 04 8b 3b 2e cb cd aa 58 57 a2 6a 15 40 46 b0 99 55 06 9e 99 69 25 32 27 d9 60 40 0f c3 54 2a 57 e8 61 24 24 d0 59 30 1d a0 d3 c5 2c ef b6 1e 00 31 f7 64 d3 b3 96 91 0f 99 4e 45 d3 31 4b 63 4d 47 0d f6 3b ea d5 06 08 c9 60 85 f7 ca 04 25 25 9f d1 eb e0 30 31 ee e2 c8 60 5c 26 20 9b 40 82 ca bc 08 da b0 e5 57 6c c7 37 d9 13 d3 66 94 a2 02 c8 Data Ascii: J/w_/K!_^~)?ww_nzj;X_rK__>W8hW?pr<^}x~p;.XWj@FUi%2'`@TWa$$Y0,1dNE1KcMG;`%%01`\& @Wl7f
2022-03-15 16:07:36 UTC	1194	IN	Data Raw: 5d 60 c4 24 86 5a 22 50 76 a3 9d 09 c2 58 61 80 31 5b de 09 1f d7 40 b6 42 55 3d 6c 6f 80 83 85 4c 08 e3 be 83 df 3c 6c 95 58 00 2b 52 42 5c b4 a3 e9 e8 90 f5 00 4c fc b4 1c 95 ad 07 ab 8d 6f 6f 8d 54 81 3a aa a3 88 45 b7 9f db fc b8 cd 34 1c a4 2f c8 d3 56 ad 05 64 e8 c5 c2 1d 97 6b ff e8 92 ca 4d fa c0 82 a0 9b cd 2a c5 b6 b8 32 0a bc d8 f0 a7 fd f9 1d 53 75 85 47 b6 62 5b 97 15 31 5f ec 34 e8 4b 82 df 3b dd f5 26 a3 7f 47 af 7c 4f 33 bc 69 98 32 ae b8 bf d7 fd c4 f6 f6 dd cd f5 fd ea 73 79 fb f1 fa fa 0e db dc 56 69 d7 74 4c 2d f0 51 c0 2e ca 67 19 00 85 20 ac 64 d1 02 96 dd 08 6b 75 1c 99 59 5b 6d c2 d8 10 64 d5 21 60 db 48 3b c1 17 9b 72 85 d9 7a 55 d3 94 b3 da 5b 88 6f ed 83 75 3a 28 eb d8 8e 03 44 7d 1d 23 9d 94 a5 77 f7 49 08 6d 8c f6 c4 ac 17 7b Data Ascii: ]`$Z"PvXa1[@BU=loL<lX+RB\LooT:E4/VdkM*2SuGb[1_4K;&G\|O3i2syVitL-Q.g dkuY[md!`H;rzU[ou:(D}#wIm{
2022-03-15 16:07:36 UTC	1195	IN	Data Raw: 12 a8 5f c5 66 cd c3 99 c5 91 4d 0d 49 77 54 3b 27 68 d1 9c 97 d4 bf 7b 33 52 9b 72 ba 09 24 e6 1f 9c a8 95 56 1a 6f 24 00 7c 40 f9 19 f8 30 37 d3 e6 d4 62 1c 03 d3 94 36 68 11 94 87 e9 3b b5 67 77 22 7d 31 81 0d 1f 30 71 80 3c ec a4 b4 42 54 d1 c3 35 69 38 22 ec 33 e1 aa 6d 2e 51 6d bb 18 e0 59 66 cf 0b 0c 0f 70 d9 d8 d4 a2 fb 54 a1 a3 e3 76 9c 26 87 3b e2 9e 47 db bf 69 0a 4c a8 7a 35 e0 b4 32 78 98 5f f0 c0 fe bf 7b 6e 0d 7a 41 c1 15 1a 87 ac ed aa c2 65 ab 73 76 7b 28 59 ef 09 08 94 0f 15 ea ed f9 b8 9e b5 26 fe 56 14 e4 a7 82 b2 0f 86 9d 94 7e 3c 9c a1 0a eb 03 a7 f1 38 22 a2 f5 35 e6 21 34 3d a9 cb cd 69 05 ec 3e 56 a7 a1 33 e1 bd f6 0a a2 05 c2 86 ed a8 fd 8e 3b 8d 4f df ce 8d 00 86 c8 e0 4e 48 3d 79 a7 f6 2c 3f 1a 0d 97 d3 c9 62 9e 4f 97 c3 a3 a3 Data Ascii: _fMIwT;'h{3Rr$Vo$\|@07b6h;gw"}10q<BT5i8"3m.QmYfpTv&;GiLz52x_{nzAesv{(Y&V~<8"5!4=i>V3;ONH=y,?bO
2022-03-15 16:07:36 UTC	1196	IN	Data Raw: 00 00 00 00 00 19 00 00 00 5f 6c 6f 63 61 6c 65 73 2f 61 72 2f 6d 65 73 73 61 67 65 73 2e 6a 73 6f 6e e5 5c 6d 6f 1b 37 12 fe 2b 3a 5f 3e b4 45 63 f3 75 49 06 ed 01 8a b5 76 b6 b1 25 57 2f 0e 52 04 10 64 5b 4e 82 4b e2 9c ed a0 38 04 fe ef 37 bb e4 7a 87 e2 50 92 d3 24 77 c0 7d 91 e5 5d 71 c8 19 ce cb 33 33 dc fd bc c3 19 b7 ce 2a 5d 70 65 ad 16 4c 73 b3 f3 a4 f7 79 e7 fd f2 e6 66 f1 7a 09 df 77 5e 7d 62 85 5a d4 9f a2 f9 54 b6 f9 14 cd 27 df b9 fb b9 b7 c3 05 97 4e 1b 67 85 11 d2 1a ed 04 a3 a8 08 e9 69 f5 9a 3f ba f9 2c 9a 7f 84 69 fe 51 f5 a7 74 cd 15 db 5d 97 bc fb 2e 16 c9 00 bf 2c 7c 25 2c d7 f5 d0 aa 9b e9 c4 99 ff 51 0f 2d a7 21 2e 0b 74 c3 73 28 fd 02 79 0f 2d 4d 75 4b 53 12 11 6f be f3 cb 20 0c 10 43 61 0d f0 c6 24 77 cc 68 52 16 66 95 48 20 6e Data Ascii: _locales/ar/messages.json\mo7+:_>EcuIv%W/Rd[NK87zP$w}]q33*]peLsyfzw^}bZT'Ngi?,iQt].,\|%,Q-!.ts(y-MuKSo Ca$whRfH n
2022-03-15 16:07:36 UTC	1198	IN	Data Raw: ff 9a df 22 eb 45 29 6c bb 84 d4 3c 08 43 4d 27 72 ab 13 45 df b3 50 27 c7 2a a6 1d 34 06 e5 5b 82 48 b7 65 32 69 9a bf 05 ae 83 51 65 5c 62 f0 98 18 b3 0b 1c 53 71 96 ab d2 75 e0 4c 79 d9 c9 2c 84 df 50 94 40 08 8f 72 ec d9 34 b3 d7 2d 6a 1b dc d8 d2 c6 ba 8f 93 c9 a8 d0 11 b9 41 db 5d 27 d8 c3 46 11 a9 55 58 73 d1 8d 0e 1a e3 af 04 c9 62 08 91 86 3b b3 8b a4 4d 19 09 2e 0a e0 e5 a0 bd cf 2b f3 36 90 3c d5 7e 62 27 09 c5 c1 5c c8 54 99 d3 01 48 ef 23 03 72 71 56 89 38 c5 ce 33 48 36 17 d9 fd 62 43 86 be 9b 6a 30 21 d9 8b d5 5d 8f cb 54 5f a8 33 04 b2 4b ab 5f d8 13 04 7a c8 0e d9 79 0f dd 46 e2 6c 8d 5c d2 34 02 7b 58 ef 24 ae ac 98 8e ed 98 49 8b 2c 4d a2 a0 11 76 34 06 6e 78 9b 22 21 a0 a2 10 2e 75 44 a9 9d 88 a1 ec ea fe 46 da 9e 75 a6 58 b6 b8 34 18 Data Ascii: "E)l<CM'rEP'*4[He2iQe\bSquLy,P@r4-jA]'FUXsb;M.+6<~b'\TH#rqV83H6bCj0!]T_3K_zyFl\4{X$I,Mv4nx"!.uDFuX4

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.3	49877	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:38 UTC	1199	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 589 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:38 UTC	1200	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 31 35 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 39 32 36 31 35 35 31 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 25 32 32 25 32 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A15%2C%22visit_id%22%3A%227730430992615511%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22adf96df2db9141a086fb94199a62964e%22%2
2022-03-15 16:07:38 UTC	1201	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:38 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4ed3beb3ae9b4588822189cc4ff43dd5 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49757	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:20 UTC	8	OUT	GET /downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D
2022-03-15 16:07:21 UTC	9	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 36 X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:20 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 52920 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: adf96df2db9141a086fb94199a62964e Connection: close
2022-03-15 16:07:21 UTC	12	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 65 64 69 61 2d 64 65 73 6b 74 6f 70 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 35 6a 4e 74 5a 76 4e 67 6d 52 55 48 62 41 78 4d 55 4f 41 46 22 3e 0a 77 69 6e 64 6f 77 2e 5f 67 6f 63 68 5f 20 3d 20 7b 7d 3b 0a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 Data Ascii: <!DOCTYPE html><html class="media-desktop" lang="en" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" xmlns:fb="http://ogp.me/ns/fb#"><head><script nonce="5jNtZvNgmRUHbAxMUOAF">window._goch_ = {};window.addEventListener('click', function(event) {
2022-03-15 16:07:21 UTC	28	IN	Data Raw: 65 6e 74 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 63 68 61 74 5f 63 6c 69 65 6e 74 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 69 31 38 6e 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 6c 6f 67 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 5f 70 6c 61 74 66 6f 72 6d 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 70 72 69 76 61 Data Ascii: ent", "modules/clean/privacy_consent/chat_client", "modules/clean/privacy_consent/i18n", "modules/clean/privacy_consent/log", "modules/clean/privacy_consent/marketing_tracker", "modules/clean/privacy_consent/privacy_consent_platform", "modules/clean/priva
2022-03-15 16:07:21 UTC	44	IN	Data Raw: 6c 65 63 74 2d 32 2f 6c 69 62 2f 41 73 79 6e 63 22 2c 20 22 6a 71 75 65 72 79 2d 73 63 72 6f 6c 6c 4e 61 76 22 3a 20 22 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 6a 71 75 65 72 79 2d 73 63 72 6f 6c 6c 4e 61 76 22 2c 20 22 40 76 69 6d 65 6f 2f 70 6c 61 79 65 72 22 3a 20 22 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 40 76 69 6d 65 6f 2f 70 6c 61 79 65 72 22 2c 20 22 72 65 61 63 74 2d 73 63 68 65 6d 61 6f 72 67 22 3a 20 22 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 72 65 61 63 74 2d 73 63 68 65 6d 61 6f 72 67 22 2c 20 22 73 63 68 65 6d 61 2d 64 74 73 22 3a 20 22 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 73 63 68 65 6d 61 2d 64 74 73 22 2c 20 Data Ascii: lect-2/lib/Async", "jquery-scrollNav": "prod_assets_web_modules/jquery-scrollNav", "@vimeo/player": "prod_assets_web_modules/@vimeo/player", "react-schemaorg": "prod_assets_web_modules/react-schemaorg", "schema-dts": "prod_assets_web_modules/schema-dts",
2022-03-15 16:07:21 UTC	60	IN	Data Raw: 65 61 6e 2f 66 6c 75 78 2f 64 69 73 70 61 74 63 68 65 72 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 69 6e 69 74 5f 72 65 61 63 74 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 6a 73 5f 62 61 73 69 63 5f 73 74 6f 70 77 61 74 63 68 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 6a 73 5f 63 6c 69 65 6e 74 5f 73 74 6f 70 77 61 74 63 68 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 6c 61 7a 79 5f 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 6d 65 74 72 69 63 73 2f 61 70 69 76 32 5f 73 69 6e 6b 22 2c 20 22 6d 6f 64 75 6c 65 73 2f 63 6c 65 61 6e 2f 6d 65 74 72 69 63 Data Ascii: ean/flux/dispatcher", "modules/clean/init_react", "modules/clean/js_basic_stopwatch", "modules/clean/js_client_stopwatch", "modules/clean/lazy_marketing_tracker", "modules/clean/marketing_tracker", "modules/clean/metrics/apiv2_sink", "modules/clean/metric

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.3	49882	20.82.210.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:42 UTC	1204	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&ctry=US&time=20220316T000740Z&lc=en-US&pl=en-US&idtp=mid&uid=4388269c-b420-4134-ac19-bc7ca8a19ac1&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=c8f4abf77b9a4b77be92fd8712d6f69a&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1428887&metered=false&nettype=ethernet&npid=sc-338388&oemName=alktsh%2C%20Inc.&oemid=alktsh%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=alktsh7%2C1&tl=2&tsu=1428887&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=228864&fs=81919&sc=7 X-SDK-HW-TOKEN: t=EwDgAppeBAAU+CVBfQcFvEv2DZI9cfqZBAbEzGMAAYuQzl5CVL62HLOkNW5F+VBAbtXmPh4auecjEs9QQitc8U4AKxvnRbzslB6Whz+01+c/bdoF6aIRB4jmmnAGLoiP9s5eGMsnkLaHEbHBBgGaBGunhRWHYYZJMcX4MqHmCRBCwpwPwYkz/nVyANx2Bi4vUmP94ZDrevTLzry7J0KeW00Q6JZFjxfZZQvl2KrlCyw0ZW9KbU77G48qcUCs+18KBJVYUAJU4qAlZaLTrUEHOwW3kQqnxiWvFug0B3oyHpp1VTO+25pUUbwTBd9t2JvSNS8xVUQ7RmEuUpYzKZbSj1L98hEoXIv5xIUP7CHNS40u7MhEvM+wxNGv5H2edoQDZgAACBro/BBmyJt1sAHAQJIL1SrblWb6yagPGHNBbeSQpVgjCnDfante04gL2BZ2Nck7N73+iKnmcarFKdEoez+FFfWvX4Wg4ctJXGNTZ0BjAMwE0w9pTMBMr6YDFyVQE7OfM/s0X6IlQ2jVsKEgAvjdDcjCe6kAx72g1Q6xxaZ0c9OYt98/UZGKBt99mn+v+9zomiC5HfhzSNYTogqUtVWBDjtQe93VCQg1n7NWIJ5KfkChFGUF1l3W8RyBHPT1iVN+ZhaXqFVKJq3R+ysltnTmaB/9aQfNHPdVBJ06j9A8R0Imu1TzHhBIBFddQtkraEnH2l0KRXJWSz022bwTQI8kKGDAuZwjSo7+2HUlY6Kh/HrhGjmJx1+KLMK2Wi2XC3C18GAzUwJm+0jYFQrIIaxTxk5NReDI2XI3HdEnBGZPAjPsYKuGtgk5aMGzGtNkywX4qQBvRTX0vbUG5TB/5f2imh9Kbieg/+IvpXzOQIQa/xswbjVmL67wVkdnEtU6Gl/DHBI3Q/iSZOSZTG0gJ8Q3HUeNjjgvzZjR6mdv2R49iS07LMRJJAd+CRnZ7LB1sl7GzL0L1fCqcRbtF9PYAQ==&p= Cache-Control: no-cache MS-CV: 5pW2cEx6TUOkwRbp.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-03-15 16:07:42 UTC	1214	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 4823 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425158646-T700381849-C128000000002423629+B+P60+S1"},{"BATCH_REDIRECT_STORE":"BWW_128000000002423629_EN-US+P0+S0"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: vmGO/AS8Lz8xs7fvXUyOqJhJfy7IsY/DvIu/+8f80022GtUR1zCZNeN76mREhlBlDNDmRnjAj2IL+ySUnbIh1z2GWpudeHcNd1HuVMpoyWAifyc7c0E4No02dfnMgcn/alKZqICzhh+WOQVMfciFYP4yrO671LZdjEHuzJpQ0wBou+vQlpHNB5sX1YNM8MQG/QZKd4Uq3jaXWimWc4CALPoCG4UpqaFqdvPO7mDbPICW62Jo44AjmTnXuZRAuyTnBTxf71PLvfhEeTvbSbcoN9ZaYSO6MDIIyajcpxnemrapOQWlcu+aEy+ah+FKKzaDH0rRtlTbyxNO3GkziXaQMg== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Tue, 15 Mar 2022 16:07:42 GMT Connection: close
2022-03-15 16:07:42 UTC	1215	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 63 64 6d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 75 67 67 65 73 74 69 6f 6e 73 4f 6e 53 74 61 72 74 5c 22 2c 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 7d 2c 5c 22 70 72 6f 70 65 72 74 69 65 73 5c 22 3a 7b 7d 2c 5c 22 74 72 61 63 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"cdm\",\"u\":\"SubscribedContent\"}],\"ad\":{\"name\":\"SuggestionsOnStart\",\"class\":\"content\",\"collections\":[],\"propertyManifest\":{},\"properties\":{},\"trac

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.3	49881	20.82.210.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:42 UTC	1206	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&ctry=US&time=20220316T000740Z&lc=en-US&pl=en-US&idtp=mid&uid=4388269c-b420-4134-ac19-bc7ca8a19ac1&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=08262a759e044406a135669deeaad927&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1428887&metered=false&nettype=ethernet&npid=sc-280815&oemName=alktsh%2C%20Inc.&oemid=alktsh%2C%20Inc.&ossku=Professional&smBiosDm=alktsh7%2C1&tl=2&tsu=1428887&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=228864&fs=81919&sc=7 X-SDK-HW-TOKEN: t=EwDgAppeBAAU+CVBfQcFvEv2DZI9cfqZBAbEzGMAAYuQzl5CVL62HLOkNW5F+VBAbtXmPh4auecjEs9QQitc8U4AKxvnRbzslB6Whz+01+c/bdoF6aIRB4jmmnAGLoiP9s5eGMsnkLaHEbHBBgGaBGunhRWHYYZJMcX4MqHmCRBCwpwPwYkz/nVyANx2Bi4vUmP94ZDrevTLzry7J0KeW00Q6JZFjxfZZQvl2KrlCyw0ZW9KbU77G48qcUCs+18KBJVYUAJU4qAlZaLTrUEHOwW3kQqnxiWvFug0B3oyHpp1VTO+25pUUbwTBd9t2JvSNS8xVUQ7RmEuUpYzKZbSj1L98hEoXIv5xIUP7CHNS40u7MhEvM+wxNGv5H2edoQDZgAACBro/BBmyJt1sAHAQJIL1SrblWb6yagPGHNBbeSQpVgjCnDfante04gL2BZ2Nck7N73+iKnmcarFKdEoez+FFfWvX4Wg4ctJXGNTZ0BjAMwE0w9pTMBMr6YDFyVQE7OfM/s0X6IlQ2jVsKEgAvjdDcjCe6kAx72g1Q6xxaZ0c9OYt98/UZGKBt99mn+v+9zomiC5HfhzSNYTogqUtVWBDjtQe93VCQg1n7NWIJ5KfkChFGUF1l3W8RyBHPT1iVN+ZhaXqFVKJq3R+ysltnTmaB/9aQfNHPdVBJ06j9A8R0Imu1TzHhBIBFddQtkraEnH2l0KRXJWSz022bwTQI8kKGDAuZwjSo7+2HUlY6Kh/HrhGjmJx1+KLMK2Wi2XC3C18GAzUwJm+0jYFQrIIaxTxk5NReDI2XI3HdEnBGZPAjPsYKuGtgk5aMGzGtNkywX4qQBvRTX0vbUG5TB/5f2imh9Kbieg/+IvpXzOQIQa/xswbjVmL67wVkdnEtU6Gl/DHBI3Q/iSZOSZTG0gJ8Q3HUeNjjgvzZjR6mdv2R49iS07LMRJJAd+CRnZ7LB1sl7GzL0L1fCqcRbtF9PYAQ==&p= Cache-Control: no-cache MS-CV: 5pW2cEx6TUOkwRbp.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-03-15 16:07:42 UTC	1210	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 3041 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116123-T700333390-C128000000001627409+B+P20+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: TvYvO1qjpVb4+LYPl7arWzvPN7TC9usPxA73zQfjZO+YkZFbYFQEp6sbRHQOicypa3UcQ8SJjf8CMweoEcLlDVYVmQOo9zylntNVvFgwKZ72v1qemO5HNsL+Qphv4LHDUie2io1VvecyAU3HSEmiP4XviuwqJjZ6mXPGcZBx5RL+BaFks2L4qceBcONJUSL3wCgQIGeumVIX0Ue0ayHAC+7/+kMIb8UgYd5RvdP4c0w0Z9PfTp38miTK0oK66+1iUxpWgVcIcXqs8lhua1SzU+AiXo5ZV9yWk9GW0lBCapncUvXvH7GlnERS6n/JQfMo++6EnMHOyJ/jAOVVMmrzyw== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Tue, 15 Mar 2022 16:07:42 GMT Connection: close
2022-03-15 16:07:42 UTC	1211	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.3	49883	20.82.210.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:42 UTC	1208	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&ctry=US&time=20220316T000740Z&lc=en-US&pl=en-US&idtp=mid&uid=4388269c-b420-4134-ac19-bc7ca8a19ac1&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=70e290a6531e4915aa5a0392e768e149&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1428887&metered=false&nettype=ethernet&npid=sc-338387&oemName=alktsh%2C%20Inc.&oemid=alktsh%2C%20Inc.&ossku=Professional&rver=2&sc-mode=0&smBiosDm=alktsh7%2C1&tl=2&tsu=1428887&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=228864&fs=81919&sc=7 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: 5pW2cEx6TUOkwRbp.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-03-15 16:07:42 UTC	1220	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 24540 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"3,P425462535-T700374422-C128000000003097169+B+P80+S1,P425056668-T700379701-C128000000002535069+B+P90+S2,P425119424-T700340276-C128000000002144149+B+P20+S3"},{"BATCH_REDIRECT_STORE":"BWW_128000000003097169_EN-US+P0+S0"},{"BATCH_REDIRECT_STORE":"BWW_128000000002535069_EN-US+P0+S0"},{"BATCH_REDIRECT_STORE":"BWW_128000000002144149_EN-US+P0+S0"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: h7h6HzZiJ96j1ARC7P2qJqJCZh5fUK+5gRi19lv7vaJbNNNbNjRq4XhwiruGVOFscgsonrjMR7VTzpD2tUJLY9wZIkezfYDo8drwcVIQ4DXywhAcAFn6WUshh8Zf9gtRS8jkiR0t64UNV/ID3hLR4STsoesUeVqRjV+aGULEiK+083AcaYU7iXx3WyD0lWR1rTPL4iLWq6tvOz1WA0Cdv0483200Ax3pmpMGCfYUyh9VTXO81PTtJBajkdMnEo4T2kWjK5M9exLX7jEkxB2aAhffX2ncrLCokH0cO6jwXRv6UgU7Ai95quzBMEX/Qul98ugUidyomVJ58Ln/8vHG7A== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Tue, 15 Mar 2022 16:07:41 GMT Connection: close
2022-03-15 16:07:42 UTC	1221	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 4c 6f 63 6b 53 63 72 65 65 6e 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6c 61 6e 64 73 63 61 70 65 49 6d 61 67 65 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 69 6d 61 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"LockScreen\",\"propertyManifest\":{\"landscapeImage\":{\"type\":\"ima
2022-03-15 16:07:42 UTC	1236	IN	Data Raw: 36 36 37 34 33 35 26 4c 4f 43 41 4c 49 44 3d 77 3a 34 37 32 44 43 36 30 30 2d 46 45 41 42 2d 45 37 46 38 2d 37 32 30 44 2d 31 45 33 33 46 30 30 46 44 31 45 37 26 44 53 5f 45 56 54 49 44 3d 62 35 31 34 38 64 38 39 35 63 38 37 34 30 33 65 61 62 35 36 35 34 34 32 65 61 64 31 36 35 64 35 26 42 43 4e 54 3d 31 26 50 47 3d 50 43 30 30 30 50 30 46 52 35 2e 30 30 30 30 30 30 30 49 52 53 26 55 4e 49 44 3d 33 33 38 33 38 37 26 4d 41 50 5f 54 49 44 3d 38 45 45 36 37 46 35 37 2d 34 42 46 34 2d 34 34 33 43 2d 41 37 35 46 2d 41 36 30 30 32 44 46 36 39 36 33 44 26 4e 43 54 3d 31 26 50 4e 3d 44 41 36 33 44 46 39 33 2d 33 44 42 43 2d 34 32 41 45 2d 41 35 30 35 2d 42 33 34 39 38 38 36 38 33 41 43 37 26 41 53 49 44 3d 37 30 45 32 39 30 41 36 35 33 31 45 34 39 31 35 41 41 35 Data Ascii: 667435&LOCALID=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&DS_EVTID=b5148d895c87403eab565442ead165d5&BCNT=1&PG=PC000P0FR5.0000000IRS&UNID=338387&MAP_TID=8EE67F57-4BF4-443C-A75F-A6002DF6963D&NCT=1&PN=DA63DF93-3DBC-42AE-A505-B34988683AC7&ASID=70E290A6531E4915AA5

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.3	49888	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:43 UTC	1245	OUT	GET /download?plat=win HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:43 UTC	1246	IN	HTTP/1.1 302 Found Cache-Control: no-cache,no-cache, no-store Content-Security-Policy: sandbox Location: https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:43 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 407 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5d808838b8714292b7a717d10f490a8c Connection: close
2022-03-15 16:07:43 UTC	1247	IN	Data Raw: 33 30 32 20 46 6f 75 6e 64 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 73 3a 2f 2f 64 6c 2d 77 65 62 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 69 6e 73 74 61 6c 6c 65 72 3f 61 75 74 68 65 6e 74 69 63 6f 64 65 5f 73 69 67 6e 3d 54 72 75 65 26 62 75 69 6c 64 5f 6e 6f 3d 31 34 33 2e 34 2e 34 31 36 31 26 6a 75 6e 6f 3d 54 72 75 65 26 6a 75 6e 6f 5f 75 73 65 5f 70 72 6f 67 72 61 6d 5f 66 69 6c 65 73 3d 54 72 75 65 26 70 6c 61 74 3d 77 69 6e 26 74 61 67 3d 65 79 4a 55 51 55 64 54 49 6a 6f 69 5a 55 70 35 63 6c 5a 70 63 45 39 4d 55 7a 64 50 65 6b 30 74 54 48 6f 77 65 46 4a 7a 62 45 6c 33 54 6c 52 42 4d 6b 34 33 51 7a 42 4f 52 45 30 77 54 56 52 4a 4d 55 35 4d 54 58 64 4f 65 6d 4d 77 54 58 70 6a 4d 45 35 69 55 54 42 Data Ascii: 302 FoundThe resource was found at https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTB

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.3	49890	162.125.65.15	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:44 UTC	1248	OUT	GET /installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A HTTP/1.1 Host: dl-web.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:24.942Z","expireDate":"2022-09-16T00:07:24.942Z","consentMonths":6,"categories":{},"userInteracted":false,"numDots":1}
2022-03-15 16:07:44 UTC	1249	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=0 Content-Disposition: attachment; filename=DropboxInstaller.exe Content-Security-Policy: sandbox Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 116 X-Webkit-Csp: sandbox Content-Type: application/x-msdos-program Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:44 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4373c934da5e4610adaa95b2b35802a5 Connection: close Transfer-Encoding: chunked
2022-03-15 16:07:44 UTC	1250	IN	Data Raw: 34 30 30 30 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4c f9 68 83 08 98 06 d0 08 98 06 d0 08 98 06 d0 01 e0 93 d0 18 98 06 d0 01 e0 85 d0 47 98 06 d0 01 e0 82 d0 2d 98 06 d0 01 e0 8c d0 0e 98 06 d0 2f 5e 7d d0 03 98 06 d0 08 98 07 d0 7f 98 06 d0 16 ca 92 d0 09 98 06 d0 08 98 91 d0 1d 98 06 d0 01 e0 97 d0 09 98 06 d0 52 69 63 68 08 98 06 d0 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 71 e0 5c 61 00 00 00 00 00 Data Ascii: 4000MZ@!L!This program cannot be run in DOS mode.$LhG-/^}RichPELq\a
2022-03-15 16:07:44 UTC	1266	IN	Data Raw: 83 3d 10 19 41 00 0d 0a Data Ascii: =A
2022-03-15 16:07:44 UTC	1266	IN	Data Raw: 34 30 30 30 0d 0a 00 74 19 68 10 19 41 00 e8 d3 1a 00 00 59 85 c0 74 0a ff 75 08 ff 15 10 19 41 00 59 e8 0a 1a 00 00 68 dc d1 40 00 68 c8 d1 40 00 e8 a1 ff ff ff 59 59 85 c0 75 42 68 c6 58 40 00 e8 d4 19 00 00 b8 b4 d1 40 00 c7 04 24 c4 d1 40 00 e8 63 ff ff ff 83 3d 14 19 41 00 00 59 74 1b 68 14 19 41 00 e8 7b 1a 00 00 59 85 c0 74 0c 6a 00 6a 02 6a 00 ff 15 14 19 41 00 33 c0 5d c3 6a 18 68 88 ed 40 00 e8 36 12 00 00 6a 08 e8 7b 16 00 00 59 83 65 fc 00 33 db 43 39 1d fc 0c 41 00 0f 84 c5 00 00 00 89 1d f8 0c 41 00 8a 45 10 a2 f4 0c 41 00 83 7d 0c 00 0f 85 9d 00 00 00 ff 35 08 19 41 00 e8 a3 0c 00 00 59 8b f8 89 7d d8 85 ff 74 78 ff 35 04 19 41 00 e8 8e 0c 00 00 59 8b f0 89 75 dc 89 7d e4 89 75 e0 83 ee 04 89 75 dc 3b f7 72 57 e8 6a 0c 00 00 39 06 74 ed 3b Data Ascii: 4000thAYtuAYh@h@YYuBhX@@$@c=AYthA{YtjjjA3]jh@6j{Ye3C9AAEA}5AY}tx5AYu}uu;rWj9t;
2022-03-15 16:07:44 UTC	1282	IN	Data Raw: 08 33 ff 3b df 0f 0d 0a Data Ascii: 3;
2022-03-15 16:07:44 UTC	1282	IN	Data Raw: 34 30 30 30 0d 0a 95 c0 3b c7 75 1d e8 cf d8 ff ff c7 00 16 00 00 00 57 57 57 57 57 e8 57 d8 ff ff 83 c4 14 83 c8 ff eb 53 83 3d e4 17 41 00 03 75 38 6a 04 e8 d5 d6 ff ff 59 89 7d fc 53 e8 dd f1 ff ff 59 89 45 e0 3b c7 74 0b 8b 73 fc 83 ee 09 89 75 e4 eb 03 8b 75 e4 c7 45 fc fe ff ff ff e8 25 00 00 00 39 7d e0 75 10 53 57 ff 35 34 11 41 00 ff 15 cc d0 40 00 8b f0 8b c6 e8 86 d2 ff ff c3 33 ff 8b 5d 08 8b 75 e4 6a 04 e8 a3 d5 ff ff 59 c3 6a 02 e8 a2 be ff ff 59 c3 8b ff 55 8b ec 8b 45 08 85 c0 74 12 83 e8 08 81 38 dd dd 00 00 75 07 50 e8 70 e9 ff ff 59 5d c3 8b ff 55 8b ec 83 ec 14 a1 f8 09 41 00 33 c5 89 45 fc 53 56 33 db 57 8b f1 39 1d 1c 13 41 00 75 38 53 53 33 ff 47 57 68 d4 d9 40 00 68 00 01 00 00 53 ff 15 dc d0 40 00 85 c0 74 08 89 3d 1c 13 41 00 eb Data Ascii: 4000;uWWWWWWS=Au8jY}SYE;tsuuE%9}uSW54A@3]ujYjYUEt8uPpY]UA3ESV3W9Au8SS3GWh@hS@t=A
2022-03-15 16:07:44 UTC	1298	IN	Data Raw: 00 00 00 00 00 00 0d 0a Data Ascii:
2022-03-15 16:07:44 UTC	1298	IN	Data Raw: 34 30 30 30 0d 0a 34 f7 00 00 22 f7 00 00 0c f7 00 00 44 f7 00 00 00 00 00 00 0e f3 00 00 20 f3 00 00 2e f3 00 00 3a f3 00 00 4a f3 00 00 60 f3 00 00 7a f3 00 00 92 f3 00 00 ac f3 00 00 c2 f3 00 00 d2 f3 00 00 ec f3 00 00 fe f3 00 00 0c f4 00 00 24 f4 00 00 32 f4 00 00 3e f4 00 00 4c f4 00 00 56 f4 00 00 6e f4 00 00 7e f4 00 00 94 f4 00 00 ac f4 00 00 ba f4 00 00 c8 f4 00 00 d6 f4 00 00 e2 f4 00 00 fc f4 00 00 0c f5 00 00 22 f5 00 00 3c f5 00 00 54 f5 00 00 6c f5 00 00 06 f3 00 00 94 f5 00 00 b0 f5 00 00 c4 f5 00 00 d4 f5 00 00 fc f5 00 00 08 f6 00 00 12 f6 00 00 1e f6 00 00 30 f6 00 00 3c f6 00 00 4c f6 00 00 5a f6 00 00 66 f6 00 00 72 f6 00 00 84 f6 00 00 94 f6 00 00 aa f6 00 00 ba f6 00 00 cc f6 00 00 e8 f9 00 00 cc f9 00 00 f2 f2 00 00 d4 f2 00 00 c2 Data Ascii: 40004"D .:J`z$2>LVn~"<Tl0<LZfr
2022-03-15 16:07:44 UTC	1314	IN	Data Raw: 99 ef 0e 7a 69 4e 0d 0a Data Ascii: ziN
2022-03-15 16:07:44 UTC	1314	IN	Data Raw: 34 30 30 30 0d 0a db 46 6b 9d 97 5c a7 17 b6 ca 9a a8 13 a2 7f 73 76 94 ce 93 60 a9 2a cb f3 04 3f 8a 7e e8 59 0e 9c 99 c6 7f a2 4b 60 6d 27 b9 e8 cc 59 7f 23 44 8b da 35 c5 bf c3 f6 bb 99 f5 66 ea b5 f5 1d 1e d9 c2 7c 84 f7 74 bf 74 1a 10 e8 05 a5 f0 f6 ea 8a 38 70 c0 23 cc eb 20 fc 04 47 c7 db 79 dc af 23 a1 95 37 21 c5 2a 02 7f 15 de 02 d4 ce dd 36 1d 07 d5 85 29 4f 91 00 28 ec aa 7b ab 7f 82 02 97 6c 95 cc 4f 86 c1 13 97 67 cd da 2e d5 e9 e9 6f 19 12 cd 29 5d a8 3b 10 f8 c4 c8 d1 49 b5 4f c5 60 b1 f7 bd 38 5b 56 ba af c6 e8 f8 f5 78 2b 27 3f d5 37 70 36 45 3a 61 ed 6f de d1 0e 80 f0 65 f9 ed 38 91 ff 0f 4f 07 1d f5 e8 51 97 26 30 df 32 ec b8 fb 30 65 a8 60 58 c1 d7 5a ff ce fe f9 05 48 9b c1 7a 3d c5 8e 50 37 97 79 ba 8c 8c 94 3e 20 a0 a3 b1 4d d1 f5 Data Ascii: 4000Fk\sv`?~YK`m'Y#D5f\|tt8p# Gy#7!6)O({lOg.o)];IO`8[Vx+'?7p6E:aoe8OQ&020e`XZHz=P7y> M
2022-03-15 16:07:44 UTC	1330	IN	Data Raw: 20 73 25 0a aa 5a 0d 0a Data Ascii: s%Z
2022-03-15 16:07:44 UTC	1330	IN	Data Raw: 34 30 30 30 0d 0a 8d 5c 1a b9 28 a1 99 02 2b 9a c8 e7 ec b4 c0 f1 81 df 77 39 a4 96 1d 19 c3 94 37 e6 fb 93 64 63 3d da fb d4 94 75 36 ca f4 a7 25 b1 bc 80 62 8a 8f d2 70 b0 e6 c7 72 c3 cf 0a 7a b4 6e 5d 14 1b bc 45 7b a0 94 08 e5 f7 a9 18 a7 d0 bf 99 fa 14 67 75 82 af 42 0a 20 db 7f de 46 09 f3 77 ba 59 9d 39 cd 17 8c af 97 07 9d a4 09 4f 98 a9 fb 58 88 ed 2e 47 77 d5 98 71 23 c6 e9 d4 67 94 7d 4d ce 66 1b 7b d5 51 0a f5 3d 74 a1 20 e1 d8 06 7b c4 d9 06 e2 06 ca e8 0b ef 76 bf f6 60 00 39 da ca f9 9e 2a 80 75 d6 c1 e5 90 f1 86 f1 48 72 6a d6 d0 bd 55 61 e7 ce 38 2b 4c 42 4d 2b 63 15 c5 7e 60 37 ad f6 a3 ac 09 9a b1 39 8c 19 b2 61 2e 72 90 3c 28 49 58 41 a3 b1 96 ac ec be bd f6 e9 f6 ed 58 25 97 92 68 a0 2f 5d 78 44 88 97 ac 0f 25 87 8d 01 61 24 93 e0 25 Data Ascii: 4000\(+w97dc=u6%bprzn]E{guB FwY9OX.Gwq#g}Mf{Q=t {v`9*uHrjUa8+LBM+c~`79a.r<(IXAX%h/]xD%a$%
2022-03-15 16:07:44 UTC	1346	IN	Data Raw: 2f 21 af 06 c6 fc 0d 0a Data Ascii: /!
2022-03-15 16:07:44 UTC	1346	IN	Data Raw: 34 30 30 30 0d 0a 1f 05 a2 d7 d2 75 89 b2 19 3c 5d e3 7a 07 e4 f3 0e c7 9e 9d d3 c0 93 ab 85 0e ca ff d9 9c 89 e4 82 7a bd d6 1a fe df 31 f6 52 f0 e7 be 7e 62 6e 35 fc 66 14 79 da 98 dc ab 4c 26 1b 3f 1a 72 8d 0a 65 7c 00 93 d8 a2 6e 7f 50 40 65 c9 e9 e3 45 c3 bc fa ca 19 2b 1f 54 9a 97 46 cd b0 98 03 1f 6c 22 6f 1c fa 1b b4 cd d8 2f cf 95 0d 9d c6 d6 2c a0 c7 c7 6f 41 61 b6 ad af a7 d3 8d f3 03 66 93 5e ca 82 5c e5 ca 11 cd ba 59 a5 40 3a 91 24 ae c9 b6 8e 01 6f a1 f0 d2 41 61 a3 f7 a2 98 2d fe 64 89 41 5b 11 5c 80 d2 9b f2 b6 07 71 d6 9b 21 db 0d a6 20 5e 87 3c b7 6d 6b 36 18 ff 07 01 a4 78 35 53 b4 e0 c8 6e fb 38 79 b5 38 07 d8 c2 c5 b6 4e 85 b0 b6 14 c7 92 11 a0 5f b0 40 bf 98 c7 c3 b0 85 99 d0 38 d7 a5 05 05 05 e6 c2 a1 b7 91 48 e6 f4 c7 82 ff d8 f7 Data Ascii: 4000u<]zz1R~bn5fyL&?re\|nP@eE+TFl"o/,oAaf^\Y@:$oAa-dA[\q! ^<mk6x5Sn8y8N_@8H
2022-03-15 16:07:44 UTC	1362	IN	Data Raw: 00 ce 0f f0 a2 2e 0d 0a Data Ascii: .
2022-03-15 16:07:44 UTC	1362	IN	Data Raw: 34 30 30 30 0d 0a 37 eb fe c9 cd 07 e0 cf 46 e3 bb 76 d8 22 03 b2 92 61 12 60 6a 50 76 11 9d 18 7d 1e 0d 56 e7 fa 4d 0f 0c 65 ff 3d e0 12 d5 0a 47 18 80 d6 e1 d7 db c9 ba 88 b6 b8 96 f3 df d3 06 e8 6e 4e 95 0d 0f 53 84 92 6f 18 8f fe a4 e6 a1 b8 43 ab 97 e3 1e ff 5f ef a1 2e f7 70 b6 9b 52 76 4b 57 ac ef b4 ac 7b bf 9e 76 35 93 0d be 14 e7 1e 55 7f 24 a7 12 7e c6 bf 95 5d 80 7b fa 20 6e a5 d9 12 72 a8 26 4c 86 ef 6b 3d bf c6 b6 49 42 46 58 7c aa cd 6b 6a 3b 3d 05 63 6a 16 50 24 e4 6e 48 56 1c 10 2b ca cc 4b 39 a6 8d 2b bc 28 95 97 92 4a 44 a3 58 7b 04 44 91 1c cd fc 58 05 ee db 1d 0b 98 c9 8c 1e 80 2e 3c 31 0e 5b 66 ee 4b f6 bd b2 45 84 1f c1 80 67 3b 0d ee 9b 2f 45 d9 3d 5a 50 34 68 7c cb 32 0e 61 28 fa bb 91 ae 64 21 11 e3 90 a7 56 97 1f 38 cc 19 0f 48 Data Ascii: 40007Fv"a`jPv}VMe=GnNSoC_.pRvKW{v5U$~]{ nr&Lk=IBFX\|kj;=cjP$nHV+K9+(JDX{DX.<1[fKEg;/E=ZP4h\|2a(d!V8H
2022-03-15 16:07:44 UTC	1378	IN	Data Raw: a0 21 7b b1 63 04 0d 0a Data Ascii: !{c
2022-03-15 16:07:44 UTC	1378	IN	Data Raw: 34 30 30 30 0d 0a 74 5c ee e5 28 21 10 90 83 bd 97 88 ad 59 27 4b 8f 3d a7 48 2c 78 9f 46 d7 9d 10 c3 82 3d 4f a5 97 8f 4a 80 bd 10 f8 aa f2 d5 61 a4 9d 00 90 ea ce 58 ce 56 42 5e 4c dc ba 6d 00 24 47 e5 e0 1e f1 64 c2 9b fc 85 7b d9 76 e9 ef 11 c9 74 6b 70 6e b3 d5 fb ec fa 9d 8a 12 9b 79 63 06 07 a9 33 f5 08 e2 06 d9 1d f4 bd f6 0c ac 78 b5 f3 aa 2b 99 94 d2 c0 d2 71 68 49 3f 55 b7 44 03 7a b8 90 fd aa ac 7c 41 fe 20 be 10 39 b2 bb ce 50 e1 13 e9 c5 2f 06 ed f5 d5 c4 1f c1 36 ec bb 9d 82 d5 aa 97 34 b7 2d cb ae 7a 85 42 00 21 6e 48 17 2e 85 7f cc c7 d7 9a 31 b7 1a f9 ed 7a 69 a7 34 dd 2d 87 53 b5 7f fd 94 7a 95 38 37 3e 7b b9 2a 28 3a ff e6 2e 1f d6 4a 6e a3 9a 77 71 15 cd 22 21 a6 4b 4c f9 9b 34 e8 c0 7a 0f 97 69 d6 c5 78 c9 37 12 5e a2 0d 21 ce 16 bf Data Ascii: 4000t\(!Y'K=H,xF=OJaXVB^Lm$Gd{vtkpnyc3x+qhI?UDz\|A 9P/64-zB!nH.1zi4-Sz87>{*(:.Jnwq"!KL4zix7^!
2022-03-15 16:07:44 UTC	1394	IN	Data Raw: ba b6 18 37 c5 9a 0d 0a Data Ascii: 7
2022-03-15 16:07:44 UTC	1394	IN	Data Raw: 34 30 30 30 0d 0a bd 2b 8b 03 3a 9e b2 ab 94 79 d1 74 bc ae ba 12 9b c4 80 f3 a0 2a 65 e1 38 de a3 f1 0e 98 d2 43 08 e5 62 95 24 21 a6 96 d7 4d aa 19 45 05 2f d1 62 18 75 e5 91 1b b7 35 27 7a de 67 31 94 87 32 7b dc 5d df 22 bb 2f b1 74 2d 5d 3c 90 bb fe 2c f2 32 8e 11 4c 7f 36 67 d2 33 a7 b1 a3 8e eb 4e bb 42 2d 16 bb 99 c2 66 0f 7e e6 bd be 57 23 6d 03 97 a7 55 f3 3b a3 09 bb 8d 2e 8c d5 95 52 2f ad 0d c7 74 eb b4 cf 52 5a 7b 65 08 a8 64 cd 2c 66 48 97 d4 64 48 21 80 6b e6 eb 68 dc 64 bf 63 66 5f e2 b7 ec 8d a7 4b 71 77 77 e9 ba 64 0a 1b 5e 6f 0c ac 9c 56 6d fa 95 45 cf fa 68 7f cd 7e 66 cb 19 6b dc d4 6e e1 35 a6 51 a3 1a 7e f3 b1 b0 77 fd 53 dd 9d b6 ff e3 52 4d 44 bd ac 3f 6f 04 c1 e3 87 6b f5 91 4e 79 dc f4 43 66 63 1c 34 b1 33 f4 13 b2 bb 4b 47 a4 Data Ascii: 4000+:yt*e8Cb$!ME/bu5'zg12{]"/t-]<,2L6g3NB-f~W#mU;.R/tRZ{ed,fHdH!khdcf_Kqwwd^oVmEh~fkn5Q~wSRMD?okNyCfc43KG
2022-03-15 16:07:44 UTC	1410	IN	Data Raw: b5 cf ee 5b 93 20 0d 0a Data Ascii: [
2022-03-15 16:07:44 UTC	1410	IN	Data Raw: 34 30 30 30 0d 0a 77 f3 20 df 55 06 b2 bf e2 e9 46 c3 f6 5d 8c cf 5a 81 a8 d3 5f 47 40 6c ab 6c f1 8f ef 52 9d ac 28 d3 6f a4 cf f7 46 80 d7 cc 82 fe e2 1f 6a 7f af 45 eb 69 31 66 e8 e8 6d 50 c2 d9 ed 54 66 4b bb 82 b5 73 8b 2a 76 15 2b 79 62 8b fd cf 49 4f cd e9 ce 51 02 44 32 5b 64 ce 05 32 52 d3 46 86 89 1e 23 24 de c1 1e 7c a7 81 60 92 d6 80 d8 6a a9 90 13 88 ea 87 43 67 f3 01 22 ae 07 72 6a 36 65 cb 45 41 74 3d 1c 99 67 91 17 7a 64 29 b2 fc 5e 07 17 db c9 0c 43 45 fd 1a f3 0f ac ca dd f7 58 f8 94 37 12 43 b4 83 26 dc 55 a9 f8 ef e8 2d 91 85 c0 79 34 d6 5b 0d 09 88 0c 0b 8a 5d 05 a3 d5 6e dd 61 b2 c3 44 29 0f b1 a0 f7 40 dd d3 96 e8 d9 82 f3 fc 69 84 e3 9e 03 ac 52 81 40 95 7f 6e 29 2f 50 40 06 70 93 90 84 6b cd 5a 94 06 bf cf 6a 6a ca 61 c6 c4 14 8a Data Ascii: 4000w UF]Z_G@llR(oFjEi1fmPTfKs*v+ybIOQD2[d2RF#$\|`jCg"rj6eEAt=gzd)^CEX7C&U-y4[]naD)@iR@n)/P@pkZjja
2022-03-15 16:07:44 UTC	1426	IN	Data Raw: ad 4e fa 64 ad 1f 0d 0a Data Ascii: Nd
2022-03-15 16:07:44 UTC	1426	IN	Data Raw: 34 30 30 30 0d 0a 47 5b 37 96 a6 81 73 56 50 7c c4 23 e4 28 20 e7 45 12 e7 5b ba 80 e0 c8 ee 56 f6 28 bc 3a 1f 24 d9 c0 2a 33 87 a6 6f 2e 22 6a 93 d1 43 e3 5b f2 5e b5 1e 37 f2 e7 1c 16 c3 be 4e cc 9c 1a d3 b7 5f f6 e4 96 e1 0e 99 f3 bb 8f 36 be 75 89 5f 9b b8 71 a3 28 3f 11 34 29 6d 17 b1 d2 51 fd 57 ad 94 5f d7 35 8f ec b6 a8 c3 1f de b3 0c df 28 86 b2 da a8 a5 6b d1 cb af d6 ad da 47 e7 ed 05 51 f4 0a 79 cd f6 98 b9 23 68 83 4d aa 2e 0d 59 c3 eb 5a 3f 5f 4f 8e 40 19 fd 3f 1f 6f 6a d1 75 89 8b b4 46 f2 43 5a 02 19 c9 eb 5c fd a4 37 e7 b2 f7 b7 2e ec 5c 39 ea 22 61 d9 a1 33 f8 f6 d6 53 fe c7 98 71 28 94 05 2c 71 fe 7f e2 c7 a2 3d 2e 2b 23 25 ff 8f 61 51 f1 a5 bf a6 47 b9 6b a1 d0 b2 0e 48 44 b3 97 d5 2d 19 4f fa 57 ad 81 7d 9d 25 e3 61 13 ae 5e 91 d9 c1 Data Ascii: 4000G[7sVP\|#( E[V(:$*3o."jC[^7N_6u_q(?4)mQW_5(kGQy#hM.YZ?_O@?ojuFCZ\7.\9"a3Sq(,q=.+#%aQGkHD-OW}%a^
2022-03-15 16:07:44 UTC	1442	IN	Data Raw: 43 02 ab 1c 66 13 0d 0a Data Ascii: Cf
2022-03-15 16:07:44 UTC	1442	IN	Data Raw: 34 30 30 30 0d 0a 1f 35 e0 7a cd 18 9a c2 e5 c2 de 57 48 e2 39 8e d1 c5 5a a0 62 63 c9 df 0f bf 2a 06 71 a5 7a c8 16 3f 78 fc b3 e6 51 79 94 04 8a a5 f5 59 bf 69 89 d1 e1 d1 e5 f8 bb c5 96 f8 90 5a 2f 67 bf e0 dc 11 75 2f e7 37 43 5a c4 e6 4d 44 92 99 f2 6d b2 7d 4c 3a 87 76 57 e8 24 a0 14 1e 24 4a 68 70 33 03 02 c2 b1 5e ed 2b 18 47 ea dd 14 73 e8 f0 0d 47 e1 97 c6 7c b7 43 96 88 fa b9 2b 7f e1 81 c2 d7 49 6f 1f 59 cb fe a8 5d cb 80 53 01 5a 96 ca aa 75 27 69 2d 5d 06 f1 82 b7 9e b7 5d 22 63 a0 b5 6b 72 f8 70 50 51 72 76 0b c2 41 c2 bb 46 23 e7 c5 48 34 da 8f 0f 2b 19 87 3e 00 1b 4f 2a 09 02 25 43 c6 87 61 f0 f7 e3 fa 85 59 35 c2 cf b2 2f 57 76 32 c6 57 98 a5 c6 e7 25 6a 0c 21 dd 95 0f 48 f4 64 a8 aa a2 4f c6 c0 fa 30 32 a0 d8 67 80 87 20 a2 76 6f c6 30 Data Ascii: 40005zWH9Zbcqz?xQyYiZ/gu/7CZMDm}L:vW$$Jhp3^+GsG\|C+IoY]SZu'i-]]"ckrpPQrvAF#H4+>O%CaY5/Wv2W%j!HdO02g vo0
2022-03-15 16:07:44 UTC	1458	IN	Data Raw: 31 05 f3 37 db 21 0d 0a Data Ascii: 17!
2022-03-15 16:07:44 UTC	1458	IN	Data Raw: 34 30 30 30 0d 0a fd 5d 64 0e e4 c0 8b 07 ee 1d 31 4c 7e 56 22 80 1e 71 62 4d 98 5c e4 bb 4b fb 5c b4 87 44 12 07 b2 ae c1 e0 5c d3 3c 16 83 4e f5 22 22 f5 a3 51 f9 6a 9d 9f dd 92 bf 60 7e dc 03 b8 c1 79 65 f5 fa ae 5e 22 cc f0 1a 54 f3 31 3c a8 3d a4 e6 5b 09 25 52 62 f9 10 e9 3c ce 36 2c 87 5f 56 6a 5d a2 8d d8 6c 38 44 a3 ed 62 fc f6 6a 8f 0f 47 91 6d 21 ad fe 7e 9c cf 34 68 f1 71 02 3d 9d 24 73 db 83 8c fa 15 47 d6 2d f3 43 8a 3e 88 20 64 ec c4 82 89 2d 4a 63 c2 c2 45 cf 8f 23 a5 53 47 e6 33 e7 76 1a d3 7b a1 86 06 4c 32 a4 6e 7f 9a 9e e9 a8 93 c7 05 7b 84 19 ed 72 41 74 8c 85 19 49 ba 2d 97 62 97 4d ec 64 a8 2b dc fc 01 a9 62 e5 55 e1 b0 52 fa 16 09 b7 ca e8 2b 8e e5 d8 79 94 2c a3 f7 7e 22 4d 8a 70 41 4d 2d bf 0a ad a1 b4 f1 c6 b6 e2 53 00 c1 0b 35 Data Ascii: 4000]d1L~V"qbM\K\D\<N""Qj`~ye^"T1<=[%Rb<6,_Vj]l8DbjGm!~4hq=$sG-C> d-JcE#SG3v{L2n{rAtI-bMd+bUR+y,~"MpAM-S5
2022-03-15 16:07:44 UTC	1474	IN	Data Raw: be 1d 0a 8c 64 88 0d 0a Data Ascii: d
2022-03-15 16:07:44 UTC	1474	IN	Data Raw: 34 30 30 30 0d 0a 4d 21 d9 2b 99 85 36 b3 12 e3 3c 72 56 d3 96 37 25 c5 28 3d 6c 6a 01 dc d9 b9 17 3c 27 52 b1 e2 d0 96 9d 94 3d 33 95 c2 49 49 35 d7 99 65 a4 7b 5e c9 d3 69 8d ba 64 8f 25 6f 6c 40 91 f4 45 8b 3f 67 40 fc 05 8a 75 20 5b 9c 25 d6 fc a2 35 1c fa 74 c0 39 34 8c ea 51 4b db 48 23 13 dd 73 9e 9c d6 8c 7e 5d 30 cd e9 ca f9 d9 e3 ac c5 65 60 4f 4a 25 b0 bc 68 87 ff 9d 71 1d 9d f6 ff 73 29 4c 7a b5 3b 5a 1c c5 8b f1 4a 67 ed bb de 2b e5 f2 bc d6 44 38 3c 98 b9 e8 d8 da 8d f8 fd fa 44 1e 53 ca 3e f1 32 e5 e9 05 8c 62 48 67 33 e5 de 42 36 96 a9 6a c7 4b a1 a4 fb c4 89 83 a0 b6 e5 68 e2 2e 99 ce 0b 72 34 e4 f2 c0 4a 77 75 ce 7f 52 54 49 38 f4 3f ab ca 1a 8a df 6c c6 f5 66 b5 af 16 6c a4 02 e4 d6 9d 95 ab 22 c5 4d c1 30 d4 46 8c 6e 29 f5 6b ed b6 07 Data Ascii: 4000M!+6<rV7%(=lj<'R=3II5e{^id%ol@E?g@u [%5t94QKH#s~]0e`OJ%hqs)Lz;ZJg+D8<DS>2bHg3B6jKh.r4JwuRTI8?lfl"M0Fn)k
2022-03-15 16:07:44 UTC	1490	IN	Data Raw: c9 11 d6 f7 a0 25 0d 0a Data Ascii: %
2022-03-15 16:07:44 UTC	1490	IN	Data Raw: 34 30 30 30 0d 0a e1 53 de b7 cb 25 7f bf 0f 71 bd 95 c1 c6 2f ab 4e dc 45 8b df 8e 62 33 a1 5c c9 2c 27 86 e4 bd 1a 4c 1f 22 3c 05 1b b1 c7 66 8e b0 f7 6b 89 ec 2e 12 b7 b4 3b 6b ff c5 b9 d1 c8 d1 7a a7 1e c9 b6 91 60 b4 a0 c9 94 87 e4 e1 01 f9 ce 12 dd 4a 1a fa a6 b8 9e 34 f8 ab aa a2 ca cc 85 a1 46 86 af 4e 19 70 e5 c3 87 1d 07 6a 6c 70 b1 9d ac 61 1d 47 28 78 06 fe 5f a0 2a ba 42 f6 4b c6 65 1a d1 b7 be ac ab 40 9c cc fa be b8 5f 68 61 7b c1 e0 ea 2a b7 6b 80 e7 ad ca f3 7c 56 49 e6 08 c9 79 7a 7c 7e 2d e3 36 dc 90 48 2b 5e 04 f0 38 07 92 3c 3e dd ab 2e a6 79 4a 8c 7c 18 ff 6f 02 e8 a3 3c 9c 94 1d c6 e7 fa 9e 1e a7 a3 b4 7d 8d f7 ab 36 e1 bc 6b 8a 8e aa e4 93 28 de 1b 50 76 d0 e4 14 d5 d9 a2 33 46 b9 8e 73 5b f0 a3 e6 b7 9c 75 a2 f6 12 4a 4c 09 03 25 Data Ascii: 4000S%q/NEb3\,'L"<fk.;kz`J4FNpjlpaG(x_BKe@_ha{k\|VIyz\|~-6H+^8<>.yJ\|o<}6k(Pv3Fs[uJL%
2022-03-15 16:07:44 UTC	1506	IN	Data Raw: 31 36 ac 13 1c d8 0d 0a Data Ascii: 16
2022-03-15 16:07:44 UTC	1506	IN	Data Raw: 34 30 30 30 0d 0a cd f8 b3 dd 93 3e e0 c7 7e 9e d7 9f 53 fc 61 4d 76 19 a1 cb fe 70 2f c1 27 d8 b3 19 67 bd 01 31 66 5c 78 09 32 56 16 7c 9a d1 42 64 25 39 89 92 58 85 08 6c 1b 8c ad 24 02 6f b0 5c 61 49 01 b8 5d 4d 14 34 e4 62 1e b2 e4 2d a6 e4 a3 dd 7f 22 fc 38 a8 b5 7a 3b 7f c4 94 69 50 89 38 50 4a fe 8b 2a fb 79 b8 7d 7c da 5e 9c 33 a7 55 aa b6 12 05 30 fc 34 6f 41 82 5f 98 29 2a 10 71 71 fd 9c a3 e5 65 dd 2c e7 26 c7 e2 b7 30 a0 8c 62 f1 ca 71 a1 23 6b 4b c8 af 4f d3 5d 10 5f 13 55 73 df 1f 48 83 ca 8b d4 55 76 40 25 7d 52 3e 44 68 d8 33 20 c4 d8 62 57 be 6b f3 50 00 7e ba 73 57 7d 0e 76 51 a7 3d 30 8e 28 97 b6 ef e2 ef b9 99 86 93 37 8e b6 3b dc ec 94 24 5f 59 40 c6 4e 7d ad 1c ec 83 c6 54 3e 5e 31 bf 9f 54 bf fc 24 d3 b7 d9 75 c1 78 03 ac 7a 87 43 Data Ascii: 4000>~SaMvp/'g1f\x2V\|Bd%9Xl$o\aI]M4b-"8z;iP8PJy}\|^3U04oA_)qqe,&0bq#kKO]_UsHUv@%}R>Dh3 bWkP~sW}vQ=0(7;$_Y@N}T>^1T$uxzC
2022-03-15 16:07:44 UTC	1522	IN	Data Raw: 6d eb 08 92 18 59 0d 0a Data Ascii: mY
2022-03-15 16:07:45 UTC	1522	IN	Data Raw: 34 30 30 30 0d 0a 05 9a 6a db 8a b8 ca af 86 80 bb 37 2d 91 5b 6b 3b 9a 5e 5a 52 ee d7 88 e3 65 00 2a df b7 aa 0d 27 dc 9b 20 ae 17 b6 45 2d 0a 84 30 e6 e0 31 96 6b 89 7a ba d2 48 f6 70 08 f3 3d b9 16 c1 a6 9b b5 c3 ba 08 5f f8 0c a7 59 95 c6 0a fb fd c4 da f8 8c 8a b1 ac 3f 9d d4 f1 71 00 c3 74 96 49 02 d7 97 99 68 b4 5d d1 d9 6d b9 12 84 ed 21 f4 46 8e 81 8d f9 2a f4 11 41 28 73 15 f9 ac 37 66 96 d5 b7 3f 7b 20 1a a2 b7 5b b6 3d 86 3a be 61 b8 1e e5 e4 d3 d4 5d b4 d8 36 09 41 81 df 0c 2e 0f c5 56 d2 04 97 8f f8 21 0b a6 b0 32 b4 87 ee 3e 24 da 73 f7 59 bf a3 20 7a 8d d9 13 2f 16 c8 d2 a4 6b f3 cb c6 87 10 37 9b cd fc 45 18 16 df 79 13 1a c3 1b a5 83 19 91 21 c2 29 f4 3c 17 67 89 cc f0 22 e2 71 3c cc f1 55 38 50 05 fc fa a6 04 2f c8 b7 7c 6e bc c4 a1 bd Data Ascii: 4000j7-[k;^ZRe' E-01kzHp=_Y?qtIh]m!FA(s7f?{ [=:a]6A.V!2>$sY z/k7Ey!)<g"q<U8P/\|n
2022-03-15 16:07:45 UTC	1538	IN	Data Raw: f6 cb 63 57 7f 45 0d 0a Data Ascii: cWE
2022-03-15 16:07:45 UTC	1538	IN	Data Raw: 34 30 30 30 0d 0a 1e 55 c3 2a ff 47 7e 8c b2 7f f3 05 53 80 e7 67 90 54 80 4e 71 d5 a4 45 b2 4f 4e fc b2 b0 70 b5 00 9f 05 68 e0 bc 04 b0 6a a1 62 08 15 b5 90 94 c7 6a 91 ee e4 3f 1b 93 22 94 9d 0e be 16 4f b7 c0 5c 57 fa 43 f2 c0 69 00 e4 dd 8a ea 34 1b 5c 99 62 36 83 a5 68 ff 6f e6 00 a7 68 f7 71 64 42 c6 1c a1 be 4f 87 56 34 bb 8c ef 70 a1 3a 83 56 a1 78 44 6f bb ed 42 ec c2 04 77 88 23 f8 56 41 34 83 51 fd 8d c5 ae f9 41 82 98 49 f0 39 21 ab be 5d ea a3 00 31 64 8a f9 56 53 02 4e e2 28 4d 10 19 f9 d0 55 b5 c6 9f 46 2c 45 01 80 ba 46 b8 5c d2 fd 01 c6 6f b0 bd f8 38 52 50 0c 4f b5 1b d2 43 20 3d 26 6f 16 15 86 ef d0 89 49 28 d5 83 bf 52 7e ab dd bd f2 39 5e ed 0b d1 17 5e 0d fb 08 e0 bb 8b 15 4d 2b 75 39 14 e1 93 3e 51 c3 ee 3a 73 69 95 1c cd 66 21 3e Data Ascii: 4000U*G~SgTNqEONphjbj?"O\WCi4\b6hohqdBOV4p:VxDoBw#VA4QAI9!]1dVSN(MUF,EF\o8RPOC =&oI(R~9^^M+u9>Q:sif!>
2022-03-15 16:07:45 UTC	1554	IN	Data Raw: 19 54 4a 89 10 c2 0d 0a Data Ascii: TJ
2022-03-15 16:07:45 UTC	1554	IN	Data Raw: 34 30 30 30 0d 0a 38 ad f6 79 14 d3 d6 56 77 fd 9d a3 72 8f 05 31 f0 a4 41 44 61 cb c5 3d 81 06 f5 39 90 e6 4d f0 71 ce aa 98 c5 93 97 bc f9 4b 72 4c d8 96 79 50 ee 70 b2 47 08 99 78 1b be a3 43 48 2c 7d 27 48 23 a1 2f b3 bf 79 ae 2e 71 0c 95 30 46 12 92 53 8c 39 f4 1c 85 d8 5d 43 b0 19 8c 94 4c 86 0e 1d 0d ba cf 57 eb 40 8b 0c f4 17 1b 59 2b f3 95 d6 e4 ea b0 c0 62 35 c8 b5 bb bb 22 52 5c 64 94 6c a4 70 98 3e 12 85 08 5c 44 f3 27 11 a0 25 8f b7 19 3e 61 e4 bd ec 81 9e 7e 08 b9 f0 10 9e ef 8c be c7 28 ba 0c 6e 9e 8c 53 6d 7b 1c 92 aa e7 49 75 61 a0 f8 45 84 bc 4c c2 bd c1 e8 b9 84 68 95 d6 7f c1 50 4a b3 39 eb 6e c7 ea 53 cd 84 f6 08 7b 96 65 85 ca d7 67 ca eb 05 f8 f2 aa 75 57 00 22 19 35 fa ed e9 d1 ef df bb 37 1a 5a fd 56 b0 9d 36 98 58 58 85 1d 1d 82 Data Ascii: 40008yVwr1ADa=9MqKrLyPpGxCH,}'H#/y.q0FS9]CLW@Y+b5"R\dlp>\D'%>a~(nSm{IuaELhPJ9nS{eguW"57ZV6XX
2022-03-15 16:07:45 UTC	1570	IN	Data Raw: 25 2f 1a be 49 f9 0d 0a Data Ascii: %/I
2022-03-15 16:07:45 UTC	1570	IN	Data Raw: 34 30 30 30 0d 0a 4a f0 6f 90 21 69 93 3d ee 0c bb f8 65 9a f5 49 03 d7 2f f1 f9 e5 65 52 eb 02 a7 f3 3b 83 66 16 8d ee 77 1b 5d 38 c6 28 2f d2 a7 07 99 34 36 3c be 08 80 92 15 4c 64 58 7d 7e 90 3d 4c c2 a2 1f e2 b6 e1 b4 39 c0 58 79 3f 20 5d f9 4f 90 cf 00 4f e2 3c 7e a7 0f 64 18 6b f6 6f 69 3f 61 33 07 10 26 b1 bb ec dc f4 7a 24 40 ba 31 11 1c 45 53 46 b1 87 bb 5e 90 10 19 93 70 d9 40 4f fe c3 6b fe fc 3b 58 6e 92 47 00 e9 b3 f2 87 27 97 ce 20 82 6d 59 c8 18 53 d0 5c 16 9b 97 56 72 03 3f 13 be 0b 0d 45 0b 24 77 df 65 1d 55 e4 1f 92 d4 80 eb 7f 29 f7 ae 32 9c 76 86 f1 c7 eb 36 9e 04 4e ef 54 93 bc 74 c6 f9 92 75 d8 61 5a 6d ee 82 f9 ff be fa ee bd d0 b8 5c 6c 82 ba 95 1e 61 8a 60 7d be 98 c7 09 78 c6 9e 76 18 0f 85 06 fe 90 f0 70 cc 4d 86 01 bb 1a 30 53 Data Ascii: 4000Jo!i=eI/eR;fw]8(/46<LdX}~=L9Xy? ]OO<~dkoi?a3&z$@1ESF^p@Ok;XnG' mYS\Vr?E$weU)2v6NTtuaZm\la`}xvpM0S
2022-03-15 16:07:45 UTC	1586	IN	Data Raw: 99 cb da 59 09 f9 0d 0a Data Ascii: Y
2022-03-15 16:07:45 UTC	1586	IN	Data Raw: 34 30 30 30 0d 0a 91 2b 6b a2 40 c0 d3 b7 a8 0b dc 40 83 ee 8c c6 aa 17 8c af 7f e2 f0 d4 ee 7f 43 ae 3e 8d aa a0 3c 94 d1 37 fc 7b 53 e1 e2 74 a7 4d 6f 66 11 6c a9 d4 ea 5e d8 f6 d1 41 f1 bf 68 88 81 b8 bd 16 2b 79 32 ed ab b5 41 3a f7 4e 3c 77 f0 72 8c 8d 60 d8 70 39 47 db f3 45 37 64 ed b4 8c ff 1a 11 2f 2b a8 8d c6 4b aa e6 4b e0 44 0e df ad 41 eb 43 13 57 5e 79 48 ea b7 da df 07 5d 63 04 5c b6 4b a0 42 02 55 0e e6 2b 96 b6 9f 3c e1 ee f4 3f d0 7f 50 08 ff 8b b0 32 09 70 e5 3d 19 49 8f 69 bd e4 14 e7 e4 26 42 8c 69 34 26 54 fa b6 67 47 c6 c8 08 88 b8 06 ba 35 85 19 8c ac 19 a0 91 59 ab f3 8a 24 b3 5c 19 8e 1b 38 b2 f3 61 c1 df 7c ca 85 99 76 ff 1e 3e 3b 9f 0f bb 0b e2 15 9d f3 56 91 5f 9e 22 2a 6b 5c 37 08 8c 6f 4f e3 f6 83 41 bf aa cb bb 89 ca e6 82 Data Ascii: 4000+k@@C><7{StMofl^Ah+y2A:N<wr`p9GE7d/+KKDACW^yH]c\KBU+<?P2p=Ii&Bi4&TgG5Y$\8a\|v>;V_"*k\7oOA
2022-03-15 16:07:45 UTC	1602	IN	Data Raw: 46 9e 5d f2 f2 29 0d 0a Data Ascii: F])
2022-03-15 16:07:45 UTC	1602	IN	Data Raw: 34 30 30 30 0d 0a 23 fd f8 fd b1 db ce 8b c0 bf 35 7f ea c2 c9 29 85 1c 81 29 5b a5 fe 04 66 ca 17 19 fd c5 ab 3d af aa 41 32 3d 4c ea 39 3b e8 47 30 cd 41 a5 f5 2a af d4 b3 bc f1 03 1b b8 9e 2f 9e 96 d4 09 3d c9 92 1d cd c7 13 5e 14 53 89 b2 f7 5a b8 c9 2a fa b3 8f e7 bb 76 23 37 37 bf ce 5e 27 55 28 a7 38 c3 1b 0f f6 8e 0c 0b f9 3a ce 14 42 95 90 ee ab bb 4e d3 ab bd 17 ac 99 33 6f 0e 20 63 04 93 45 d6 f4 28 7a 5c f8 66 52 97 0c f9 80 54 b8 aa d8 28 67 a9 85 4e 2b 4e f5 71 d2 bc 4c 41 a7 c5 55 bb 22 fe b0 12 2a 4d 00 af 39 7c 61 28 86 75 32 52 7a c4 ba 14 36 59 cc 0b 9d 63 a0 6e c9 da 68 0f ec a8 65 5f ca 26 d9 34 db 26 9d 13 d7 9a 99 c1 33 7e d9 5f af 1a b6 3e e0 ac 8a 16 73 81 9a 09 e6 2d 3c e1 02 7b 9f 10 be a0 81 1b f5 e7 20 0f f3 68 e4 ae 76 b0 9f Data Ascii: 4000#5))[f=A2=L9;G0A/=^SZv#77^'U(8:BN3o cE(z\fRT(gN+NqLAU"*M9\|a(u2Rz6Ycnhe_&4&3~_>s-<{ hv
2022-03-15 16:07:45 UTC	1618	IN	Data Raw: 3d f5 28 29 ab 54 0d 0a Data Ascii: =()T
2022-03-15 16:07:45 UTC	1618	IN	Data Raw: 34 30 30 30 0d 0a 90 cf de 65 4f 0a 87 71 63 f8 df 57 6f f5 b2 d2 a2 ff 23 6b 58 f6 50 31 52 ea 93 b6 1d a9 18 07 3e 34 9f ba 78 9e db 4f 70 10 04 b7 55 94 8a 4a 24 87 de 53 0c 47 86 c0 41 7e c7 86 a4 2f 30 48 8e 88 88 ba 25 0b 11 15 84 8a f8 86 94 75 c7 8b 63 d0 fb bc f0 77 8f 1d fc 7a a7 5d 50 b8 dc f7 fa 80 f7 99 85 b6 2c 96 22 c3 df 7a a5 17 b4 a2 5f dc 11 88 de 59 10 9b eb 31 6e b1 1d fc 53 6b 01 16 ef 00 45 a6 f3 79 98 6d 10 74 78 52 e8 97 26 77 d2 e0 21 8f bc 44 da 9b 2c 3d 90 cb 12 9d da ae d0 a9 13 fc 48 4b 7a d8 1a 93 22 78 70 af 80 57 f7 c4 d6 d6 41 6e ba fb fd 1b 9c 28 74 ae 47 8d e7 97 26 2a 50 64 d1 7c 6d d2 a9 fc 6e 04 53 97 c0 ad c9 07 04 d5 45 2d 08 4e 45 ef df 66 c0 3a 45 cf a1 91 24 bd 56 e8 5b 4e 18 ca 63 c3 05 17 34 0b 81 71 52 cf 5a Data Ascii: 4000eOqcWo#kXP1R>4xOpUJ$SGA~/0H%ucwz]P,"z_Y1nSkEymtxR&w!D,=HKz"xpWAn(tG&*Pd\|mnSE-NEf:E$V[Nc4qRZ
2022-03-15 16:07:45 UTC	1634	IN	Data Raw: 52 92 51 cd 97 db 0d 0a Data Ascii: RQ
2022-03-15 16:07:45 UTC	1634	IN	Data Raw: 34 30 30 30 0d 0a 0b 25 eb 1d f8 ca 95 4e 0c f9 e3 02 93 e1 d9 1f e5 18 34 67 08 9d 96 24 63 2a 89 a1 ef 80 d2 df 16 cd 9d ff b0 3a f0 9a c9 cb 26 a6 5a 24 57 e4 95 87 80 c3 bf 9a 6d ad cf cd 40 6d 71 68 71 4a 11 81 ec 97 22 70 31 fc 1e ac 6f 44 d2 b0 b0 cb c7 ab bc 9f 57 94 ce ed df 67 b9 82 5b f6 ba 3c 83 1c c0 d6 df ce 9a ab 6b e9 95 56 c9 0d 1e c6 12 90 c7 13 d0 01 26 b3 79 fa 02 01 81 1b 29 55 9f 9d 9c 4a 76 49 79 10 7c 62 2d 28 a5 8e 2f 03 c6 50 ac 3a c0 64 55 dc 57 49 84 a1 62 c4 65 0c b4 95 1f fa 50 c3 72 9d 0f 9f e9 27 89 dd e5 1e 13 90 5e e1 78 01 77 ec 8d 8c 23 8c 43 e9 3a 68 15 7c 82 8f ff b7 f1 6b b6 31 d1 7b c5 5a d9 e4 46 0d c0 10 b4 5a 8d 2d bc 8a a3 69 2e e7 1c 10 cf 07 7b 43 7e 20 1d 77 20 3d e9 8f 8a 16 28 04 aa af 06 5e 36 f7 45 16 60 Data Ascii: 4000%N4g$c*:&Z$Wm@mqhqJ"p1oDWg[<kV&y)UJvIy\|b-(/P:dUWIbePr'^xw#C:h\|k1{ZFZ-i.{C~ w =(^6E`
2022-03-15 16:07:45 UTC	1650	IN	Data Raw: 8b 38 d0 c1 50 43 0d 0a Data Ascii: 8PC
2022-03-15 16:07:45 UTC	1650	IN	Data Raw: 34 30 30 30 0d 0a b1 2e b7 c0 cd 70 17 f7 b7 63 58 96 01 80 80 3e 85 3c 05 43 e9 4d ba 1e ff 13 be a0 cf ef d0 b3 a9 37 f9 ed 57 75 b0 68 e4 38 f6 ff 35 7b 51 40 3a a7 6f cf 35 1d 0e eb 06 e1 48 78 83 7b 37 8f 57 a3 97 34 ae 01 99 1f c7 75 ef 8d 0d 91 71 be e1 18 8e cc 2c 8b 14 e8 56 f5 02 ce 70 b8 38 af 9f 1d 05 2d 43 33 6a d9 5d 41 4a 14 9e 19 f0 e5 6d 87 65 14 8d 81 51 70 a4 6c 83 b6 c6 43 36 34 36 32 69 b6 98 04 1c 1a 10 ab 7d cc 57 82 4b cc 68 83 f6 7c 59 5f af cb 8d b5 1e 9e 95 23 c0 7f cb 3a 59 c6 53 f5 d8 32 86 b4 ee 5e 5a 4d 03 75 b9 3a 9a fd 0a df dc 8b bd 04 a9 c7 de da 95 f4 b6 e6 53 e4 1b 7b 7e 36 05 e6 f4 eb 55 af 62 96 ec a1 80 c4 f5 9f fd c4 a0 ba a7 df b5 d1 a4 8d 7a fe aa 41 e0 b0 0d 2f c7 29 01 e5 a7 10 52 c9 79 92 e9 0e 5d 6c d9 f5 49 Data Ascii: 4000.pcX><CM7Wuh85{Q@:o5Hx{7W4uq,Vp8-C3j]AJmeQplC6462i}WKh\|Y_#:YS2^ZMu:S{~6UbzA/)Ry]lI
2022-03-15 16:07:45 UTC	1666	IN	Data Raw: ee 18 3c 4e 12 09 0d 0a Data Ascii: <N
2022-03-15 16:07:45 UTC	1666	IN	Data Raw: 34 30 30 30 0d 0a 38 a1 48 9b 87 54 ce 88 c5 9f 6b a8 4b dd f7 e0 99 a6 36 dd 6e ae d9 ae 81 c2 20 bb 12 1e 30 a2 1e 0e 4f 65 49 87 b2 8f e8 3e dc 70 05 f3 c3 ba b1 02 45 91 93 a4 5f 11 ff 8a 68 ef 85 5b d6 ab 70 5d 93 ef 56 77 65 df e6 ce 44 09 bd 20 3f cd bf 3a 9f 70 52 c8 9c 02 67 20 5b 05 28 e4 ff d1 24 79 3e bd 34 a2 5e dc 56 26 67 29 3a 14 b1 bc 66 77 2b a5 96 b0 bd d7 d5 4e 32 87 f4 ae 61 ec e2 49 61 c5 5e fc 0c dc af 77 bf 99 a9 ea 58 6b 48 df 13 f4 31 c1 8f ea 95 55 a6 c1 3d 92 d9 1c 62 92 f5 be 35 13 30 53 30 c2 3f f6 4b 0a cf 65 08 0a c5 86 22 0f e5 c0 46 99 dc 84 9f c0 29 d7 66 c7 f0 5c 60 2c 2e 69 5b a9 44 5f 78 8b 03 84 76 44 44 7a 94 50 f2 2f c4 a9 9a 99 39 e7 df 4c a6 a9 ce c0 70 cf 6f b1 8b 03 ca 23 8e f4 d6 82 6f cd 66 13 f8 90 6d 62 fc Data Ascii: 40008HTkK6n 0OeI>pE_h[p]VweD ?:pRg [($y>4^V&g):fw+N2aIa^wXkH1U=b50S0?Ke"F)f\`,.i[D_xvDDzP/9Lpo#ofmb
2022-03-15 16:07:45 UTC	1682	IN	Data Raw: 84 01 72 c8 9c b9 0d 0a Data Ascii: r
2022-03-15 16:07:45 UTC	1682	IN	Data Raw: 34 30 30 30 0d 0a dc 53 a5 05 75 3f fd f2 64 e0 77 7c 48 b2 e9 7b ef da f2 7c 7a c2 42 88 a3 6c d4 3f 08 76 ef 8c a6 ae 52 8e 74 9c e4 c1 0e 58 e8 75 2a 44 c1 32 3b 11 58 68 3b 61 42 aa 49 40 26 59 42 5d a3 59 37 3f 50 98 8e d0 90 a9 a5 0c ed 83 9a 3a 8d d3 e8 48 6e 0c 4d 2c 6b 50 aa 0e 83 99 b8 03 e5 2f 83 e5 b0 7a 3c 77 4b f4 53 43 6d a4 8d b6 05 5d 02 e9 a0 75 9b 49 46 8d 41 cf 59 e0 17 0a 39 36 4a 8b 97 3f 0f 30 7b 12 8b 64 41 eb 0d 43 01 2c 7a bd a0 0d 87 63 c4 0d 92 33 1a 0a 21 2f 0a 2d 84 85 11 7b 4d 74 36 49 3b 86 c1 e7 41 04 d6 c8 2d d9 92 70 00 95 f1 7a e3 f1 6d 54 e7 24 b9 4e 6d 12 a7 56 7f cd 83 4b 6d 14 76 3a 4d bb 60 49 2b 75 0f 07 73 b1 c2 6b 1f 13 b4 97 c1 74 ad 5b 1f 38 f5 c9 7e 06 39 68 24 1c 6e 37 8b ea fa ad 91 12 ed e0 27 d0 c0 37 4b Data Ascii: 4000Su?dw\|H{\|zBl?vRtXu*D2;Xh;aBI@&YB]Y7?P:HnM,kP/z<wKSCm]uIFAY96J?0{dAC,zc3!/-{Mt6I;A-pzmT$NmVKmv:M`I+uskt[8~9h$n7'7K
2022-03-15 16:07:45 UTC	1698	IN	Data Raw: 7a 44 9a 59 aa bb 0d 0a Data Ascii: zDY
2022-03-15 16:07:45 UTC	1698	IN	Data Raw: 34 30 30 30 0d 0a a3 09 27 10 07 2d 8e 87 d6 e9 79 8f 2b ad 44 9e 12 81 02 48 3b 80 18 db 34 e1 e6 c0 5b 70 27 08 2f 8d 1c 28 7b 75 cb e9 90 5a 9c 49 0a 18 bd c2 0b 8c 98 29 fb 96 47 19 2a a1 ec 7b 93 bf cb 45 f5 bb de ee a4 47 17 03 2c 56 1d da 34 45 56 d0 7b f8 a2 93 38 d2 b7 04 b0 73 64 51 73 32 db 87 8f e8 ee 76 09 73 a8 f3 67 71 02 9a 14 95 29 12 47 c7 d3 fc f5 89 ef f3 4f 0b dd 3c fa 84 27 c5 62 f7 1d b0 eb 31 c9 ef ad 29 c7 8e 91 1f c7 d9 67 a7 04 2f 81 fe a4 09 6f 1a f7 ce bb 2e 4b db 32 28 63 03 57 aa 88 8e 0d e7 85 55 2f 3f 59 b3 7d 96 68 e4 b1 25 51 a4 92 2a c9 f2 62 e5 68 12 e4 48 50 b2 83 d1 81 03 96 29 c1 a1 d5 cb 94 dd 92 ed 39 b9 64 34 16 76 11 31 c8 d7 9a 86 b7 7e 00 ab 78 32 13 35 13 e2 4f d6 d7 7e 20 6b 2f e2 c8 5d 68 dd ff b8 76 c4 95 Data Ascii: 4000'-y+DH;4[p'/({uZI)G{EG,V4EV{8sdQs2vsgq)GO<'b1)g/o.K2(cWU/?Y}h%QbhHP)9d4v1~x25O~ k/]hv
2022-03-15 16:07:45 UTC	1714	IN	Data Raw: 36 bb 8d 76 a9 eb 0d 0a Data Ascii: 6v
2022-03-15 16:07:45 UTC	1714	IN	Data Raw: 34 30 30 30 0d 0a fa 6d a5 8f 48 bd cf 32 f3 21 be bc 07 fd 20 85 7a 6c 8e 2b 4d 29 29 62 ad 0d 16 f2 15 ae b1 3a 4c 87 75 e6 ad ee c8 96 0b d4 11 26 99 78 0c 75 92 a6 eb 9a 65 71 91 44 be 04 b0 1c 52 f2 0a 22 e7 de 6f ec 9d b5 d0 44 43 b2 60 46 ce 98 26 46 59 ec f8 f6 9c 8b 45 d9 bc e2 71 41 d4 c0 8d 54 e7 0d b3 9c b2 c5 88 22 1b 9b e8 ec b8 a6 b2 70 51 02 bf 8a 05 59 50 58 29 28 63 07 5d 6a ab 96 b8 93 7e 48 ee af 0e e0 e6 d1 3f 1f 26 20 55 3a 7d 13 5b 66 99 30 09 2e b9 fa a7 19 ef 77 46 9c 47 27 a8 6b dc 13 1f 55 d4 bc 5c c6 b8 e2 a6 00 96 c7 a3 4c bc 94 cc b6 1a 4d 70 66 77 28 fc 0c c1 35 cd 0e 45 f9 6d ed 02 44 e9 db c7 2a 23 b8 17 8c c6 7b 86 46 52 04 2d 18 28 20 72 98 0e 14 d5 28 87 cd 69 91 ad 47 75 04 90 ee ca 70 dd ea b3 75 f9 95 d7 a6 11 86 66 Data Ascii: 4000mH2! zl+M))b:Lu&xueqDR"oDC`F&FYEqAT"pQYPX)(c]j~H?& U:}[f0.wFG'kU\LMpfw(5EmD*#{FR-( r(iGupuf
2022-03-15 16:07:45 UTC	1730	IN	Data Raw: 83 89 53 65 44 a0 0d 0a Data Ascii: SeD
2022-03-15 16:07:45 UTC	1730	IN	Data Raw: 34 30 30 30 0d 0a bc f0 e6 d0 86 bb 81 fa d9 e2 96 e8 84 ad 24 c5 1f a1 d1 6a f1 0c b8 b1 14 b0 bc 91 63 2a 8a f7 13 a7 58 de 04 cd 63 fb d5 74 d7 9f 98 04 36 f7 ff 39 16 dd 0f eb 9b b0 7e 4b 2d 6a 2d 54 12 7b 6e ad eb 10 85 72 b5 46 2d 7f 05 03 0a a1 d1 01 c9 bc 5b 4e 66 e7 ef 20 0e b4 2e 4d 55 b0 10 dd 55 8c cb 5e 76 32 20 08 39 b5 94 06 46 4a ce c7 2c 19 36 c0 2c 58 b4 24 ca d4 fb d6 a4 19 c3 a0 51 83 e8 6e 1f db 0f 06 f3 77 d1 1f b2 6e 5f 64 ee b2 47 15 c0 22 f1 00 d1 3b 04 d5 d0 0f c4 32 9e ad 52 51 dd d9 0f 8c c6 ed bf 91 de d1 bf ba 9c 9e 70 07 ac e6 11 60 17 91 78 46 de f2 e0 01 1f 2a 76 01 7d 4a eb ef fe 9c fb b8 2c 0a 14 dc 6b f6 09 b3 02 ad de 2b 8c 2c 4e 5f e2 de 54 27 d1 9e 1d 09 34 1b cf a1 3a 52 1d 77 64 ae 6c 63 95 07 03 68 0f c0 be 4f 36 Data Ascii: 4000$jcXct69~K-j-T{nrF-[Nf .MUU^v2 9FJ,6,X$Qnwn_dG";2RQp`xFv}J,k+,N_T'4:RwdlchO6
2022-03-15 16:07:45 UTC	1746	IN	Data Raw: 2f d4 49 02 43 c8 0d 0a Data Ascii: /IC
2022-03-15 16:07:45 UTC	1746	IN	Data Raw: 34 30 30 30 0d 0a f6 6b 2a 68 a1 e1 0b 8d 1c da 92 39 9e c6 86 0d 7f 07 3f 2c 96 8f 00 2b 3b 6f 9a e5 57 f0 1e 1c 41 ce 6b fd 4c a8 de 4d 25 46 ba 31 a8 c9 16 31 1c e4 e8 69 24 da 71 78 cf 07 d6 c3 dc e6 de 60 dc ec 4a b0 b7 ca c5 2b 1e 87 b7 24 80 f9 85 6e 3a cc 0c 30 6f 94 11 7a d5 7d 2f c8 5a 49 f4 71 e8 3c 90 36 23 bd 3a 74 cb d3 e8 93 91 48 8c 77 51 15 8a 71 99 6d e2 13 06 7e 93 cb ce fb 5c 8a 90 93 46 e6 85 09 16 ab 83 53 28 0b de 41 b1 41 f2 5c d1 6a 81 6e ec 97 6e f2 b3 de 29 ed 5d eb 8d ca c8 e4 65 6f 61 1e 50 3a 12 61 10 9e 3d cc 7d 93 99 59 da 86 76 46 69 1a b1 0d 9d e7 67 c4 d7 7f a1 9c c8 98 fe 01 53 8c 91 e7 71 ea b2 dc 8d 13 c6 a7 b4 42 cf 27 87 90 32 de 48 9e 76 91 e5 69 9b e4 49 ab 7e 3f 35 c3 a1 e9 c0 9f c0 1f b9 19 60 32 7c 0a c8 8c d8 Data Ascii: 4000k*h9?,+;oWAkLM%F11i$qx`J+$n:0oz}/ZIq<6#:tHwQqm~\FS(AA\jnn)]eoaP:a=}YvFigSqB'2HviI~?5`2\|
2022-03-15 16:07:45 UTC	1762	IN	Data Raw: 56 91 4d 35 25 eb 0d 0a Data Ascii: VM5%
2022-03-15 16:07:45 UTC	1762	IN	Data Raw: 34 30 30 30 0d 0a 0e 62 e7 9b a0 03 a6 c4 9f ae d1 e0 4b b7 9d 05 3f c0 17 c3 76 fc 64 d1 9d b3 9e 2a 47 54 7e d0 66 e5 3e 7b 12 2e fb 1b 9b 1e bf b8 08 fe e9 e7 3d 9c 0f b2 99 30 09 db 8f 6d 72 4c 58 bf 9e f2 38 0f d0 c4 bc e2 1c 00 18 7c 9c 87 58 c7 16 a0 60 cd 02 c3 dc 31 b2 fc 3a ec 60 12 dd 5e be bb 76 02 bd a9 3a be 02 96 aa 35 7f b2 cb 56 5f 72 c8 a6 4f 9f 6e 53 01 15 9f 79 59 87 59 a1 16 c2 1b ed 89 84 3e 27 d0 d6 92 73 0a 45 6c cf a5 72 0d f7 63 ea db e5 35 71 a4 a7 3f 2d 36 be fa 7d 7c f6 fc ba 9e d8 f3 67 fd 81 99 8e ab 69 ac 19 e6 74 79 b3 88 d9 e6 dd e7 8f 53 ab 73 97 9b 3f 11 34 f1 3c a3 7b 87 4f ae 23 e0 5d e6 8d 52 df 3e 0b cf dc aa 1f d9 09 4d e1 19 b2 81 7f 55 db e7 84 12 0d 0c 71 80 09 8a 9b 2b 4a 02 4c 70 c8 0e a7 6c ea 2f 26 e4 5e 2b Data Ascii: 4000bK?vd*GT~f>{.=0mrLX8\|X`1:`^v:5V_rOnSyYY>'sElrc5q?-6}\|gitySs?4<{O#]R>MUq+JLpl/&^+
2022-03-15 16:07:45 UTC	1778	IN	Data Raw: a7 8c c6 b9 cd 31 0d 0a Data Ascii: 1
2022-03-15 16:07:45 UTC	1778	IN	Data Raw: 34 30 30 30 0d 0a 34 3a 5a f0 c7 d9 35 9b ab 47 f4 da 33 83 67 10 4b 23 63 20 c4 db ca fa 36 49 c2 7d 6f f5 64 f7 ff e6 74 86 d1 21 7f 87 22 8e 32 78 55 8c ff 89 2f 5c a5 e4 62 60 48 31 35 ce 6a 17 0d 7f 3c 97 a3 5c 43 6d 22 db 5a 52 d5 0f 58 2b f4 7c 4a 21 c3 2e 91 a8 56 a1 23 8b 74 8f 8d da 73 60 93 e4 f9 c5 7e ce a7 4b d9 b2 58 a8 47 6b b9 b7 2e 29 2b 84 bc 2d fc e1 be b1 79 fc 85 2f 9f 56 b1 04 34 5d e3 fd 81 57 8e 7f 97 e3 98 2a 9f 59 b8 4c b5 59 f7 45 0b c3 e9 21 02 20 2c a4 5e 32 51 91 41 2b 3a 08 0f c7 d0 e0 48 c1 04 85 71 e5 67 a4 37 8b f1 97 41 5e ee a4 e2 84 aa 7a d3 e9 fc 62 34 b4 d2 97 a0 bd 86 2b 61 b6 26 bf d9 62 2d 76 fd c8 f8 41 78 b9 cd b8 02 1e e4 fc cb b7 4f ec 65 dd 28 f9 b5 60 41 9a 49 0d 75 53 c3 b3 29 a3 83 c7 ce fa 6f f7 ed 5f ac Data Ascii: 40004:Z5G3gK#c 6I}odt!"2xU/\b`H15j<\Cm"ZRX+\|J!.V#ts`~KXGk.)+-y/V4]W*YLYE! ,^2QA+:Hqg7A^zb4+a&b-vAxOe(`AIuS)o_
2022-03-15 16:07:45 UTC	1794	IN	Data Raw: a1 e6 29 1c 9d 1e 0d 0a Data Ascii: )
2022-03-15 16:07:45 UTC	1794	IN	Data Raw: 34 30 30 30 0d 0a 43 c9 33 f8 1e 13 5e 11 7b ba 5a 11 88 cf d4 e2 92 6b ce 80 cf 8e 90 bf 38 c0 6e be cf 1e 59 c7 c4 f7 ce 13 c9 e6 3a b3 b9 56 5f 9f aa ea 1a d6 c3 b9 c5 6a a1 e2 e5 2b fa ee 06 df e6 cd c3 b1 32 53 b0 52 53 f0 73 58 33 39 39 15 1d 4b e1 94 6a 32 27 23 dc 30 93 bf 08 46 54 3a 5b 84 0a 6a ef 17 23 f5 00 3f e0 9a fd f1 80 f7 cd bf af d2 6e ce 85 47 11 30 aa 63 9f 14 05 6d 49 e5 8f 07 69 52 6f f7 a2 2d 8d 53 48 a7 43 20 c3 d0 c2 20 ee 6a 8b 77 52 7a ab dd 0d b4 3b 4f 52 57 dd 20 da 24 d5 e1 db 89 e7 bd 92 db 26 8f 8c b8 d0 de 59 37 8f a9 3a f7 dc 52 bb 77 92 af 62 a9 08 cb 0e 6a 1a 1f dd 00 30 b8 b4 18 cd a3 b5 8b 85 2c ca 00 e3 d3 48 57 8d c9 cc ae 55 01 8a b0 03 96 35 86 d3 71 ac 44 e1 10 5c 7c 9c 75 2a 67 f2 15 25 a4 1f 67 38 c0 a1 72 45 Data Ascii: 4000C3^{Zk8nY:V_j+2SRSsX399Kj2'#0FT:[j#?nG0cmIiRo-SHC jwRz;ORW $&Y7:Rwbj0,HWU5qD\\|u*g%g8rE
2022-03-15 16:07:45 UTC	1810	IN	Data Raw: 1f 31 eb 94 99 3b 0d 0a Data Ascii: 1;
2022-03-15 16:07:45 UTC	1810	IN	Data Raw: 34 30 30 30 0d 0a df 9f 2a cd c8 11 e0 15 4c bb d2 96 eb 5b d0 92 e7 99 bd 78 a5 76 d2 fc 15 19 c5 d1 c9 45 ab 58 3c 0a 2c 33 24 01 b8 1a d5 2d ae 3b ae 37 21 e5 2a 2a 19 8f e0 5d c1 d3 b9 a8 f7 6f 89 43 05 79 54 aa 92 68 d2 51 35 75 f3 44 83 75 a9 8c 37 6a 0c 5a 10 42 28 7e 75 a1 fe 3a c5 20 b7 63 b9 d9 1c f8 9f 3a fb 20 a1 f0 55 47 4e 6d bf 25 ec ef a6 13 29 f1 10 19 cf 55 2c 1e 7a 35 a6 6f 2d 27 b3 39 08 52 62 73 07 bc a0 0f f9 9d ff 90 fc d5 70 f1 9b 46 23 18 d1 8f 55 df 66 d5 65 e0 57 f0 b9 c3 7a 44 40 b1 e5 c5 6e 5c 19 fc 64 f4 53 fe 54 83 84 e4 8e 6e c2 76 82 4d 11 d3 2d 07 3e 6a 53 fd 34 4b 4a 4b 0b c4 e2 60 6f 09 ea 7c ac 50 fb 4f d8 24 f9 af 76 b7 a0 7f 34 0a 05 51 9d de e6 93 d6 8e b2 bf 4d ab e9 11 7e 8b b7 f4 99 86 13 08 8f 8d 34 ba d9 5e b5 Data Ascii: 4000L[xvEX<,3$-;7!*]oCyThQ5uDu7jZB(~u: c: UGNm%)U,z5o-'9RbspF#UfeWzD@n\dSTnvM->jS4KJK`o\|PO$v4QM~4^
2022-03-15 16:07:45 UTC	1826	IN	Data Raw: 52 c3 54 97 f8 8c 0d 0a Data Ascii: RT
2022-03-15 16:07:45 UTC	1826	IN	Data Raw: 34 30 30 30 0d 0a c5 c0 d9 46 f7 49 b0 dd 33 0d 5f ea 03 b1 4c 0a 9a 36 3a 33 06 a1 e9 67 8c 32 bd 18 a8 d1 aa d0 18 6b 42 91 4f 9a 89 23 4a 27 0c cd eb e1 7a 40 ba 89 e5 43 69 92 b4 3c 37 12 7e 4f 97 a7 fc 72 89 1e 60 e7 e0 db 89 e1 cb d3 d0 ef 55 92 d5 4f a8 3f b4 1f 25 8d 6c 0e bb 8a 67 5b 02 a6 bc fe 21 95 0e 0b 25 ba b7 ac f5 18 96 02 94 c2 5f d7 2b d2 83 ba 15 77 e2 86 5c b2 29 fd a8 2c 77 ee 28 1b 7d 0c 84 22 d4 5c fe 54 d6 d8 f8 d8 d0 59 78 47 df ed 2f 6a 84 3c 91 19 e3 0c 7b 6d 1a ac 4a ad 2a 18 c6 57 3f d2 6a 0d 2d d4 ad e6 07 3a 8b 19 5e 95 46 7a 51 1a b6 4a a8 42 2d b6 04 61 4d 24 02 4f c8 62 c4 77 37 c4 10 6f d4 92 ff 9b d4 5f 20 a2 8c f3 46 b0 f6 17 41 68 88 1c cf 36 34 af fd 84 14 6b 2b 82 24 dd 27 34 df a2 13 9c 19 60 3e 1f 41 64 89 6b 8a Data Ascii: 4000FI3_L6:3g2kBO#J'z@Ci<7~Or`UO?%lg[!%_+w\),w(}"\TYxG/j<{mJ*W?j-:^FzQJB-aM$Obw7o_ FAh64k+$'4`>Adk
2022-03-15 16:07:45 UTC	1842	IN	Data Raw: 00 ff fe 61 00 ff 0d 0a Data Ascii: a
2022-03-15 16:07:45 UTC	1842	IN	Data Raw: 34 30 30 30 0d 0a fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe Data Ascii: 4000aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
2022-03-15 16:07:45 UTC	1858	IN	Data Raw: 00 00 00 00 00 00 0d 0a Data Ascii:
2022-03-15 16:07:45 UTC	1858	IN	Data Raw: 34 30 30 30 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 5a 50 4c 54 45 00 61 fe 3d 86 fb c9 d9 f4 6c a2 f9 b9 d0 f5 7b ab f8 10 6a fd 1f 73 fc f7 f5 f2 d8 e2 f3 8b b4 f7 5c 98 f9 e7 eb f3 9a bd f6 2e 7c fc a9 c6 f6 4d 8f fa c8 d9 f4 aa c7 f6 e8 ec f3 8a b4 f7 6d a1 f9 e7 ec f3 5d 98 f9 3e 86 fb 0f 6a fd 7c ab f8 4e 8f fa Data Ascii: 4000PNGIHDRkXTZPLTEa=l{js\.\|Mm]>j\|N
2022-03-15 16:07:45 UTC	1874	IN	Data Raw: 6c 00 61 00 72 00 0d 0a 33 66 38 30 0d 0a 20 00 6d 00 65 00 64 00 69 00 61 00 6e 00 74 00 65 00 20 00 22 00 45 00 6a 00 65 00 63 00 75 00 74 00 61 00 72 00 20 00 63 00 6f 00 6d 00 6f 00 22 00 20 00 65 00 6e 00 20 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 20 00 58 00 50 00 20 00 79 00 20 00 76 00 65 00 72 00 73 00 69 00 6f 00 6e 00 65 00 73 00 20 00 61 00 6e 00 74 00 65 00 72 00 69 00 6f 00 72 00 65 00 73 00 2e 00 33 00 4e 00 6f 00 20 00 73 00 65 00 20 00 70 00 75 00 65 00 64 00 65 00 6e 00 20 00 65 00 78 00 74 00 72 00 61 00 65 00 72 00 20 00 6c 00 6f 00 73 00 20 00 61 00 72 00 63 00 68 00 69 00 76 00 6f 00 73 00 20 00 64 00 65 00 20 00 6c 00 61 00 20 00 61 00 70 00 6c 00 69 00 63 00 61 00 63 00 69 00 f3 00 6e 00 2e 00 6b 00 43 00 6f 00 6e 00 73 00 75 Data Ascii: lar3f80 mediante "Ejecutar como" en Windows XP y versiones anteriores.3No se pueden extraer los archivos de la aplicacin.kConsu

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.3	49896	3.210.49.210	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:49 UTC	1890	OUT	GET /site/v3/3401/59514/1/11/2/2/104138?consent=0&regulationid=0&regulationconsenttypeid=1 HTTP/1.1 Host: l.evidon.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-03-15 16:07:49 UTC	1890	IN	HTTP/1.1 204 No Content Date: Tue, 15 Mar 2022 16:07:49 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.3	49899	3.210.49.210	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:49 UTC	1891	OUT	GET /site/v3/3401/59514/1/3/2/2/104138?consent=1&regulationid=0&regulationconsenttypeid=1 HTTP/1.1 Host: l.evidon.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-03-15 16:07:50 UTC	1891	IN	HTTP/1.1 204 No Content Date: Tue, 15 Mar 2022 16:07:50 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.3	49889	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:52 UTC	1892	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 589 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
2022-03-15 16:07:52 UTC	1893	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 33 30 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 39 32 36 31 35 35 31 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 25 32 32 25 32 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A30%2C%22visit_id%22%3A%227730430992615511%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22adf96df2db9141a086fb94199a62964e%22%2
2022-03-15 16:07:53 UTC	1894	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 7 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:52 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ca4c4ee4a9c54b348f6c9430d4645029 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.3	49915	20.199.120.85	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:59 UTC	1897	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 37 64 61 63 65 32 61 35 31 32 63 32 35 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: f27dace2a512c258
2022-03-15 16:07:59 UTC	1897	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-03-15 16:07:59 UTC	1897	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 32 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 37 64 61 63 65 32 61 35 31 32 63 32 35 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 71 36 65 2b 6b 6e 77 50 32 42 35 38 54 79 75 62 68 4e 41 37 55 45 66 43 4b 59 35 70 70 49 38 6d 54 44 4b 64 6f 6e 32 6e 65 48 74 6e 50 70 38 75 53 45 6e 67 56 66 59 64 4b 33 42 69 54 57 79 52 69 2b 52 72 32 2f 32 66 59 70 6a 73 6a 6c 6a 7a 36 65 4b 72 6b 69 41 4b 6e 4b 4b 4e 7a 74 77 41 6b 46 55 30 4f 78 4f 69 57 6d 38 73 56 37 67 66 4c 47 69 41 64 75 54 73 6d 45 5a 30 4c 49 30 76 69 57 71 46 6d 41 78 Data Ascii: ATH 2 CON\DEVICE 1026Context: f27dace2a512c258<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcq6e+knwP2B58TyubhNA7UEfCKY5ppI8mTDKdon2neHtnPp8uSEngVfYdK3BiTWyRi+Rr2/2fYpjsjljz6eKrkiAKnKKNztwAkFU0OxOiWm8sV7gfLGiAduTsmEZ0LI0viWqFmAx
2022-03-15 16:07:59 UTC	1898	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 37 64 61 63 65 32 61 35 31 32 63 32 35 38 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: f27dace2a512c258
2022-03-15 16:07:59 UTC	1898	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-03-15 16:07:59 UTC	1898	IN	Data Raw: 4d 53 2d 43 56 3a 20 43 55 77 75 35 4d 49 2f 55 30 69 6e 4c 6e 70 48 48 49 38 67 4d 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: CUwu5MI/U0inLnpHHI8gMA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.3	49924	20.199.120.182	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:07 UTC	1898	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 62 31 38 63 33 65 33 38 35 34 37 64 64 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 8db18c3e38547dd3
2022-03-15 16:08:07 UTC	1898	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-03-15 16:08:07 UTC	1898	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 32 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 62 31 38 63 33 65 33 38 35 34 37 64 64 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 71 36 65 2b 6b 6e 77 50 32 42 35 38 54 79 75 62 68 4e 41 37 55 45 66 43 4b 59 35 70 70 49 38 6d 54 44 4b 64 6f 6e 32 6e 65 48 74 6e 50 70 38 75 53 45 6e 67 56 66 59 64 4b 33 42 69 54 57 79 52 69 2b 52 72 32 2f 32 66 59 70 6a 73 6a 6c 6a 7a 36 65 4b 72 6b 69 41 4b 6e 4b 4b 4e 7a 74 77 41 6b 46 55 30 4f 78 4f 69 57 6d 38 73 56 37 67 66 4c 47 69 41 64 75 54 73 6d 45 5a 30 4c 49 30 76 69 57 71 46 6d 41 78 Data Ascii: ATH 2 CON\DEVICE 1026Context: 8db18c3e38547dd3<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcq6e+knwP2B58TyubhNA7UEfCKY5ppI8mTDKdon2neHtnPp8uSEngVfYdK3BiTWyRi+Rr2/2fYpjsjljz6eKrkiAKnKKNztwAkFU0OxOiWm8sV7gfLGiAduTsmEZ0LI0viWqFmAx
2022-03-15 16:08:07 UTC	1899	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 62 31 38 63 33 65 33 38 35 34 37 64 64 33 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 8db18c3e38547dd3
2022-03-15 16:08:07 UTC	1899	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-03-15 16:08:07 UTC	1899	IN	Data Raw: 4d 53 2d 43 56 3a 20 58 79 6c 39 38 37 7a 4b 78 6b 79 6e 53 61 49 70 59 66 65 52 6e 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Xyl987zKxkynSaIpYfeRng.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49775	162.125.248.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:22 UTC	63	OUT	GET /hstsping HTTP/1.1 Host: dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en
2022-03-15 16:07:22 UTC	64	IN	HTTP/1.1 204 No Content Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: local Date: Tue, 15 Mar 2022 16:07:22 GMT Server: envoy X-Dropbox-Request-Id: f82cf030aa8147feab1e60f42a2471d8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.3	49934	20.82.210.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:14 UTC	1899	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&ctry=US&time=20220316T000813Z&lc=en-US&pl=en-US&idtp=mid&uid=4388269c-b420-4134-ac19-bc7ca8a19ac1&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=98eb9db253974c178b365f70e2231507&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1428887&metered=false&nettype=ethernet&npid=sc-338387&oemName=alktsh%2C%20Inc.&oemid=alktsh%2C%20Inc.&ossku=Professional&rver=2&sc-mode=0&smBiosDm=alktsh7%2C1&tl=2&tsu=1428887&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: cid=WW_128000000003097169_EN-US,WW_128000000002535069_EN-US,WW_128000000002144149_EN-US&chs=0&imp=0&chf=0&ds=228864&fs=81919&sc=7 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: 5pW2cEx6TUOkwRbp.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-03-15 16:08:14 UTC	3318	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 24587 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"3,P425462535-T700374422-C128000000003097149+B+P80+S1,P425056668-T700379701-C128000000002537669+B+P90+S2,P400090958-T700355890-C128000000002295629+B+P20+S3"},{"BATCH_REDIRECT_STORE":"BWW_128000000003097149_EN-US+P0+S0"},{"BATCH_REDIRECT_STORE":"BWW_128000000002537669_EN-US+P0+S0"},{"BATCH_REDIRECT_STORE":"BWW_128000000002295629_EN-US+P0+S0"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: b/8kBw+sEXtYdNRIU7/B6kp4qZUpNmOEfeB1gx23dAEghHIIpjyYj+2NjXqp5IpTAmcg4EcAiw+Of3Edo9cbMBZA44T2lwwFIqK5mX7k6OeLMdkL5nw2Zl0kMkTRx5vzGBP961ZCUupBNmu8aA0PEb8QSv8CwQHSE7yHjcn91CSvTEYW1ICV5LN29NgdfgeV3t3hxzT16hMMzmCE9x9dv5HWjwTXiaSKrIKaNAJdH3mhMCEjKuC45FBJqmxK9lLckKN3ggdOalL+dk12/O0FWr0ER4FKy2/v+AwTvtlHLRzDlu7XkxgjvJlYtWXdIILFtzyKsSpQ2kfGtlLYp0lbxQ== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Tue, 15 Mar 2022 16:08:13 GMT Connection: close
2022-03-15 16:08:14 UTC	3320	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 4c 6f 63 6b 53 63 72 65 65 6e 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6c 61 6e 64 73 63 61 70 65 49 6d 61 67 65 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 69 6d 61 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"LockScreen\",\"propertyManifest\":{\"landscapeImage\":{\"type\":\"ima
2022-03-15 16:08:14 UTC	3803	IN	Data Raw: 31 38 34 36 41 39 39 30 43 44 46 44 43 30 31 36 46 42 44 26 47 4c 4f 42 41 4c 44 45 56 49 43 45 49 44 3d 36 37 35 35 34 33 32 30 30 34 36 36 37 34 33 35 26 4c 4f 43 41 4c 49 44 3d 77 3a 34 37 32 44 43 36 30 30 2d 46 45 41 42 2d 45 37 46 38 2d 37 32 30 44 2d 31 45 33 33 46 30 30 46 44 31 45 37 26 44 53 5f 45 56 54 49 44 3d 37 38 64 63 61 63 62 39 31 35 31 61 34 34 36 61 38 64 63 64 32 63 33 65 36 61 37 32 35 31 37 65 26 42 43 4e 54 3d 31 26 50 47 3d 50 43 30 30 30 50 30 46 52 35 2e 30 30 30 30 30 30 30 49 52 53 26 55 4e 49 44 3d 33 33 38 33 38 37 26 4d 41 50 5f 54 49 44 3d 31 32 34 37 37 46 38 31 2d 34 37 44 33 2d 34 36 34 39 2d 41 30 45 36 2d 42 37 42 33 42 30 42 33 39 41 31 41 26 4e 43 54 3d 31 26 50 4e 3d 44 41 36 33 44 46 39 33 2d 33 44 42 43 2d 34 32 Data Ascii: 1846A990CDFDC016FBD&GLOBALDEVICEID=6755432004667435&LOCALID=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&DS_EVTID=78dcacb9151a446a8dcd2c3e6a72517e&BCNT=1&PG=PC000P0FR5.0000000IRS&UNID=338387&MAP_TID=12477F81-47D3-4649-A0E6-B7B3B0B39A1A&NCT=1&PN=DA63DF93-3DBC-42

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.3	49933	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:14 UTC	1902	OUT	GET /cms/api/am/imageFileData/RWwzJe?ver=9031 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:14 UTC	1903	IN	HTTP/1.1 200 OK Last-Modified: Sun, 13 Mar 2022 03:53:17 GMT Access-Control-Allow-Origin: * X-Datacenter: northeu X-ActivityId: 53dc2a63-af02-498c-b97a-5188ac84ca5b Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWwzJe?ver=9031 X-Source-Length: 768318 Content-Length: 768318 Cache-Control: public, max-age=215135 Expires: Fri, 18 Mar 2022 03:53:49 GMT Date: Tue, 15 Mar 2022 16:08:14 GMT Connection: close
2022-03-15 16:08:14 UTC	1904	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-03-15 16:08:14 UTC	1935	IN	Data Raw: b2 7f b7 43 47 bb e6 6a 49 10 fd e5 76 53 69 37 7c d4 ef 31 56 4a 24 f9 be 65 aa ec cc df 2d 6a 72 39 35 7b 16 3e 5f ba b4 d6 6a 85 9b fe fb a3 77 f7 7f 86 9d 85 cc 1b b6 fc df c1 4d f3 17 ef 35 1f c5 51 fd df bd f7 29 93 e8 3b e5 6a 8f ef 49 b9 69 b3 2e d8 f6 d3 a1 6d bf 2f f0 55 28 df 52 2f ad 81 a4 db f7 7e 7a 6e ed df f2 d3 e7 a6 ee dd ff 00 2d 29 cb 1a b7 cc df 7d a9 da c2 57 64 9b 9b f8 be e5 58 85 bf 77 fe dd 55 f9 be ed 3a 16 6f 2e a6 d7 36 84 92 35 21 99 7e ea fd fa b5 6b 27 ef 37 47 f2 3d 62 ac cc d2 7c bf c5 5a 56 f7 0d 6a fe 67 f1 ad 73 ca 37 47 6d 2a ab 9b 53 d6 3c 1b e2 25 b0 82 38 64 93 fd bf bf 5d 94 3e 24 d3 17 52 da b2 79 0f fc 12 7f 05 7c ff 00 63 7d b6 7d cb f3 ff 00 d3 3a d0 d4 b5 69 7c 8f 2f ee 7f 1f df fe 1a f0 6b 65 f1 a9 3b f7 3d Data Ascii: CGjIvSi7\|1VJ$e-jr95{>_jwM5Q);jIi.m/U(R/~zn-)}WdXwU:o.65!~k'7G=b\|ZVjgs7Gm*S<%8d]>$Ry\|c}}:i\|/ke;=
2022-03-15 16:08:14 UTC	1951	IN	Data Raw: 2d ca ff 00 27 f0 d5 88 63 a6 ed 55 8e 36 5a 9a 3f 97 fd fa 4f 54 11 8d 81 be 59 3f dd ab 16 f3 6d fd e7 f1 d4 2a bb 7c cd b5 24 75 0f 53 45 b9 bd a3 f8 c3 53 d1 ae bc cb 79 23 74 6f bf 1c 9f 71 ea c7 88 ae ac 6f fc bb eb 3b 7f b2 ca df 7e 0f f0 ae 65 99 56 4a 73 4c df c3 f3 d7 37 b1 8f 32 9c 77 3a 3d bc f9 79 1e ab f2 26 ba b8 fb 47 cb 27 dc a8 e1 ba 58 a4 8d 7c ba 85 9b fd 5d 37 e4 fd dd 6e a2 91 ce e4 db 6c 93 c9 89 64 f9 64 a9 a6 65 69 37 2f dc aa ea df bc a7 49 fe af ff 00 40 a9 2e fd 8b 56 f7 d3 f9 7e 4c 72 6c 46 ad 4b 5f 0e de 5c 4f 1a fc 9f 37 dc f3 2b 06 39 3c a9 37 35 6a 7f 6c 4b 17 dd 92 44 ac a6 a4 9f b8 6f 4e 71 fb 6c f7 2f 00 e9 3a 67 86 6d 64 92 f3 cb 9e f5 93 fd 67 f7 2b ac 87 e2 e6 87 a5 c7 e4 b4 9e 43 c5 5f 32 af 88 ae 62 8f 6a c9 25 55 Data Ascii: -'cU6Z?OTY?m*\|$uSESy#toqo;~eVJsL72w:=y&G'X\|]7nlddei7/I@.V~LrlFK_\O7+9<75jlKDoNql/:gmdg+C_2bj%U
2022-03-15 16:08:14 UTC	2005	IN	Data Raw: ed a4 a1 2b 0b 61 7c b1 e9 4c fb b4 ea 76 da 6c 2e 37 fd 9a 72 ad 2d 27 f1 d6 51 5a 88 6d 14 e6 5d f4 d6 ef 4e 40 39 5a 9b fc 34 e5 6a 3f d9 a9 01 bf fa 05 37 6d 48 df 37 de a6 ee db 4d 22 86 ed a7 2e ea 65 3f 6f b5 2b 0c 6b 53 59 5a a4 db ed 4d 65 fe f5 03 b8 9c d3 36 ed a9 3e ed 27 34 86 98 c6 5a 36 ff 00 7a 9d b7 6f fb 14 6d fe 1a 0a b9 1b 7c d4 dd a9 52 d2 7f b5 45 ac 55 c8 5a 97 9a 7e dd df 35 1b 76 fd da 45 10 ed dd 43 2d 49 b6 86 8e 81 dc 87 ef 51 b7 da a4 db 4d f9 6a 4a 23 5a 19 6a 45 5a 6e dd d4 0c 6b 2d 25 3d bb d1 b7 da 80 23 6a 4a 75 2f cb f7 68 19 1e da 6d 48 d4 dd b4 8a b8 dd be d4 6d f6 a7 d2 35 01 72 3d b4 9c d3 d9 68 a4 c6 33 9a 46 fe f5 49 b7 da 8d bb 69 8e e4 7b 76 fd da 5e 69 76 ed a6 ed dd f7 69 58 a1 28 da d4 bb 7f bd 46 da 00 6e da Data Ascii: +a\|Lvl.7r-'QZm]N@9Z4j?7mH7M".e?o+kSYZMe6>'4Z6zom\|REUZ~5vEC-IQMjJ#ZjEZnk-%=#jJu/hmHm5r=h3FIi{v^iviX(Fn
2022-03-15 16:08:14 UTC	2157	IN	Data Raw: ec 9e 57 99 24 92 79 93 be ff 00 9f e4 fb 8d f4 ae 2a 5e f4 ae ce ba 9a ab 93 dd 48 d2 cc ec df 7e a2 55 ab b7 36 f2 5c 5d 22 a4 7b de 5d bf f8 f5 5a 5d 11 e0 b8 8e 1b ab 84 86 56 ff 00 81 ff 00 e8 35 fd 52 f1 d8 6c 2d 08 4f 11 51 45 34 b7 76 e8 7f 35 bc 06 27 15 88 a9 1a 10 72 69 bd bd 4c ad b4 fe 6a f6 a5 a5 a5 8c 9b 52 4f 3d 37 ec f3 2a 1d 3e d5 af af ad ed 97 fe 5e 26 58 7f 36 ae ea 38 8a 58 8a 4a b5 29 5e 2f 5b a3 cd ad 86 ab 87 aa e8 d5 8d a5 d8 bd e1 ff 00 09 eb 1e 28 9f c9 d2 ac 67 be 7f fa 60 95 0e a3 a0 5f 68 d7 12 43 79 6b 25 a4 ab fc 0f 5e 87 e3 2f 0b ea fe 17 d5 a4 f0 de 9b ab 5d 69 f1 58 3e c7 fb 2a 7f ae 66 c1 f3 1c ff 00 4a e3 f5 e8 7c 51 6b 24 f6 fa a6 ad 3d ed ba ed df e6 6d fb dd bd cd 7e 75 83 e3 28 e3 b3 25 84 a5 4e f4 db b2 7d 7d 4f Data Ascii: W$y^H~U6\]"{]Z]V5Rl-OQE4v5'riLjRO=7>^&X68XJ)^/[(g`_hCyk%^/]iX>*fJ\|Qk$=m~u(%N}}O
2022-03-15 16:08:14 UTC	2173	IN	Data Raw: 79 e4 df ff 00 7c ad 6d 69 7a 85 8e 9b e2 3d 36 3d 4a 4b 19 f7 6e df 04 7f 7e d9 b6 fc ad dc e2 b3 a9 27 27 66 ac 11 51 eb b9 36 87 a7 e9 1a 0d 8d a5 8e 97 a4 dd 4e ea ed b2 ea 79 da 5b 8d cc a5 59 9a 47 ea d5 a8 de 26 be 86 ea 08 63 8e 0b 5b 78 a1 68 61 8f 7b 7d ef ef 7d 4f 7a cd 93 c6 9a 65 e5 8c fa a5 9c ff 00 f1 2c 83 76 c9 27 46 8b 7e d6 f9 8a 2b e1 a4 f9 be 51 59 7a b7 8a 1a d7 52 8e cf 49 92 4d 47 53 96 d1 92 df ec a9 f2 43 f2 ee e3 81 b7 f3 ac 6a 4e af 33 e6 76 77 d4 e8 8c 29 db 43 53 58 b3 b9 b5 83 4d b5 be 92 fa e9 ee ae 17 fd 16 07 d8 f3 7a ee 6d db b6 86 ae 9b e1 4d f6 a7 61 f1 43 42 d1 7c b8 2c bc ab e6 9a 6b 5f b7 49 2f de 8d c7 dd fb bf ce b8 fd 36 e1 ad 7c bb 59 23 f1 06 af ae b5 ba dc 24 f0 79 09 6e 9b 54 ef 8f ef 1f 90 7d 7e 6a b5 f0 e7 Data Ascii: y\|miz=6=JKn~''fQ6Ny[YG&c[xha{}}Oze,v'F~+QYzRIMGSCjN3vw)CSXMzmMaCB\|,k_I/6\|Y#$ynT}~j
2022-03-15 16:08:14 UTC	2237	IN	Data Raw: ba f9 e5 7f 97 fb 8a c5 b8 fd 6b c6 f4 db 39 ec e7 f9 6e ee 9e 5f 96 e3 cb 83 72 45 bb fd aa ea a3 86 cf 5c d4 a4 d4 35 ab ed 49 ef 7e 57 4f 9e 3f ee d6 13 85 38 a3 48 ca a4 de f6 3d 0a 1d 53 4f d5 ad 7c cb ed 0a e9 37 24 93 3c 71 fe ea 57 da a4 26 cf ee a9 3f 35 7a a7 ec 8b e3 e9 fc 51 e2 0b fd 26 3b 48 34 fb 4b 3d 3a 39 ae 23 fb fe 75 ca b6 d0 43 7b f7 fd 2b e6 dd 36 c5 75 6d 4b ec b7 11 c0 e8 df f2 d2 49 db 7b c4 ad fe ad 76 f7 af 7c fd 95 fc 17 a7 c5 f1 42 4b 88 6c 23 b5 75 b7 9a e2 19 ee 92 47 74 e9 fc 27 15 c3 59 d3 6b 96 da bd 8e 85 ed 2e a5 d9 af cc fa f2 c6 3b bf b7 58 43 34 fe 4b b4 bb 1d 36 36 ff 00 f6 7a f4 ac 7b 8d 3f 53 9a 4b f6 be 82 44 b7 ff 00 96 d1 f9 ff 00 e9 13 7f bc 47 ca 83 77 fc 0a af 6e b6 8a d6 4b eb 58 24 fe d3 b5 9a 49 9e 49 3f Data Ascii: k9n_rE\5I~WO?8H=SO\|7$<qW&?5zQ&;H4K=:9#uC{+6umKI{v\|BKl#uGt'Yk.;XC4K66z{?SKDGwnKX$II?
2022-03-15 16:08:14 UTC	2300	IN	Data Raw: 72 90 b2 d4 2b 0e ef f7 2a d7 97 fc 34 d6 56 fb ab f3 d3 52 17 2b 21 91 77 54 6c bb ab 41 6c 67 6f 33 f7 12 3f fc 02 a3 6b 59 6d ff 00 d6 47 22 37 fd 34 ac dd 58 47 79 24 5a a7 37 d0 a2 ab fd ea 6f 97 fc 3f 72 ad 5e 47 f6 0b 5f b5 5d 49 1c 16 fb 37 f9 92 49 f2 6d dd 50 da cc da 94 90 2e 97 1c 7a 8c 5b db ce 9e 47 64 8a 15 5f d5 bf 0a e1 c4 66 b8 3c 24 5c ab 55 4b e6 75 e1 f2 dc 56 2a 7c 94 a0 db f4 23 f2 f7 79 9b a8 db fc 35 d0 78 db c3 77 de 15 d0 ff 00 b4 a3 b0 9e 78 97 fd 73 dd 7c 9e 4b 7f 77 03 2d f7 7d ab ce e6 f8 ad e1 eb 3b 58 ee 1a 09 de e2 5d c8 96 be 7a a7 cc bd b9 eb 5e 63 e2 5c b3 6f 69 f8 33 d0 fe c1 c7 ad e1 f8 a3 ea cf 81 ad ff 00 14 05 db 79 7f 76 ed bf f4 11 5c 5f c5 cb a8 16 c6 ed 9a 08 f7 af dc f3 3e e5 71 be 01 fd ad be 1f 78 3f 4a 93 Data Ascii: r+4VR+!wTlAlgo3?kYmG"74XGy$Z7o?r^G_]I7ImP.z[Gd_f<$\UKuV\|#y5xwxs\|Kw-};X]z^c\oi3yv\_>qx?J
2022-03-15 16:08:14 UTC	2324	IN	Data Raw: 3d 56 8b c1 7a 4a f9 6f f2 26 cf 2f fe 05 5b 52 4c fe 77 fa cd 9f ef fd ff 00 4a e7 3e 0e d8 fd 97 c0 76 b1 3c 8f 3b ab c9 be 49 3e 7d 8d bb 9e 6b a2 9a cf fd 29 d7 cf f9 99 b7 fc 9f 76 be f7 0f cc f0 d4 a4 ba a4 7c 35 6b 46 bd 48 cb a3 67 3f 78 d3 dd 59 cf 04 31 c6 d1 2b fc ef fd f6 f5 35 e7 9a d6 9f 67 f6 e8 35 0f bf 2b 7c 91 22 27 ce 8d fc 5b 6b d4 2f ac db 4f f3 16 de 44 44 95 be e2 27 f7 bd cd 70 9a f4 52 5e 2a 7f ac b6 b7 8a dd 9e 2f 2f f8 d9 5b 6e d0 ab f3 1a f0 b1 b4 f6 e7 57 68 f7 b0 55 3b 6c cf 32 d4 ac 7f b6 75 8b bb 8b 3f b2 c1 76 b7 0a 8f 3c 6f bd f7 22 ee 2b 91 eb dc 0a f0 5f 89 1a 4d b5 bc 17 73 34 f2 5e eb 17 57 7f 3c 71 fc fb 3d 63 4c 93 d3 bb 57 d0 5a d5 8d b5 ae 8f 3d 9a c1 05 ac 51 42 bf bc 9d f6 7c cf f3 73 fd d5 f5 c5 78 df 89 2c e2 Data Ascii: =VzJo&/[RLwJ>v<;I>}k)v\|5kFHg?xY1+5g5+\|"'[k/ODD'pR^*//[nWhU;l2u?v<o"+_Ms4^W<q=cLWZ=QB\|sx,
2022-03-15 16:08:14 UTC	2380	IN	Data Raw: af 99 f6 56 93 63 7d f8 92 34 6f f5 7e a6 b3 f4 fb 3b ad 2e e2 ed 4b cc fa 7c 1b bc ab 58 60 5d a9 9f 7e bd 6a 87 db 22 86 c5 ed 56 ee 3f 36 59 7e cf 2f 91 3f 9a fe 6b 52 e6 92 4a f1 b3 77 fe bd 3b 7e 46 9a 5e c9 9e b5 e1 f5 95 bc 37 04 7e 5c 9f 32 6c f3 37 ae fd b5 4f 54 d3 fc af 3e 38 ff 00 76 ec 9f 2f fb 1e b5 36 87 1c f2 e8 f6 12 79 71 a5 c7 92 be 77 99 fc aa 3d 5a e3 ed 5e 7c 6d 22 6c f9 93 fc f7 af a8 ab 15 ec a2 9f 65 f9 7f c1 3e 5e 8b 7e d6 56 7d 59 c6 6a db 62 4b 35 6b c9 91 95 fe 6d 9f 75 3e ac 7d 5a b9 8f 15 5e 4f 7d 7d 04 72 4f 03 dc 5d 6d ff 00 57 f3 a7 ee b9 6f f8 0d 74 ba 97 d8 e5 86 fe d7 f8 19 fc d4 f3 fe 4f f7 9b fb d5 cc 6a d1 fd aa 08 ee a6 f2 ee b6 bf 94 91 a7 ee 91 db f8 63 e6 be 4a ac b7 49 e8 ff 00 4d 1f f5 e6 7d 55 25 b4 9e ff 00 Data Ascii: Vc}4o~;.K\|X`]~j"V?6Y~/?kRJw;~F^7~\2l7OT>8v/6yqw=Z^\|m"le>^~V}YjbK5kmu>}Z^O}}rO]mWotOjcJIM}U%
2022-03-15 16:08:14 UTC	2483	IN	Data Raw: 2d 5a 48 f7 b3 ec f3 3f 81 37 77 af 62 33 e8 79 12 8a 5a a2 ae a0 b0 5d 47 1a ac 9b 1d be 4a f4 8f 0f ea 56 3e 1f f8 33 a6 c9 a4 dd c7 37 88 2d 75 fd f2 fc 8c 8e 9f 29 fe 2f ee ed db ff 00 7d 57 93 df 33 5b c7 3c 3f b8 9d be e2 49 1b ef ab be 1b f1 04 57 de 1f b4 d3 da c6 3b 25 b0 9a 67 9a 78 df e7 b9 95 bf e5 a7 e0 bf 2d 5d 48 ba 94 db ec 65 17 c9 3f 77 73 d3 7c 55 f1 3a 5d 73 c7 9a 4e bd 67 04 76 5a 85 ad a7 93 34 1f 7d 37 6e 7e 84 fb 57 be 78 27 e2 04 be 37 d2 a0 b7 59 3e c5 ac 6c d9 34 1f af 9c b9 fe 03 fa 57 cb 6b 71 17 d9 64 b7 b3 8f fe 26 6c 8c 89 24 89 fc 5e bb ba f7 ae bb c2 b7 57 9e 1c fe c6 8d bc c7 d4 20 8b 65 c7 f7 26 fe ff 00 3e f5 e6 e2 61 17 49 5b 75 d8 f4 b0 b2 70 aa e4 fa 9f 49 78 7f 49 83 41 ba 9e 6d 26 ff 00 ec b6 97 57 7f 6e 9b ec 3f Data Ascii: -ZH?7wb3yZ]GJV>37-u)/}W3[<?IW;%gx-]He?ws\|U:]sNgvZ4}7n~Wx'7Y>l4Wkqd&l$^W e&>aI[upIxIAm&Wn?
2022-03-15 16:08:14 UTC	2499	IN	Data Raw: a5 d7 85 67 be 8e cf 4b 92 ea 0d 63 fe 5b 49 04 92 3b a4 4a bc 48 db be 63 fd da ea ad 75 86 ba d0 fc bb cb b9 2f 52 df cc fb 25 f4 7b ad d1 27 97 8f 95 54 fe f3 15 a5 e0 df f0 f5 fe b5 39 28 b9 2d 3d a3 6b cf 53 ce 6d fc 79 f1 1b c6 9e 20 d3 6e b4 98 e0 b2 d3 25 b7 fb 44 d0 47 63 be 57 f3 59 d1 5b e6 c7 cf f2 ee eb f8 9a f5 ab ad 2e 2d 06 3d 07 4f bc d7 75 2d 5e ef c9 8e 68 74 ab 59 d6 2f 39 57 87 9e 7f e2 64 dd fc 28 3f 4a e2 fc 13 e1 38 bc 11 e7 da b6 a5 7d e2 bb d9 7c bf b5 c1 3a 46 8e fb 9b 7a 28 e4 f9 7f fe d5 5c d6 a6 f1 66 a9 e2 69 f5 ed 26 c3 40 f0 6a 4b 2a db a4 9a 94 ed 2d db c0 ab b7 ca 54 39 55 ca ff 00 72 ba 65 52 9c af 16 b6 f2 ff 00 80 4f bf 6b dc 77 8a bc 37 e2 cf 88 08 f7 1e 1b b7 b5 b2 b8 bf b7 f2 6d 2e a0 ba de 96 db 65 f9 e5 69 33 cf Data Ascii: gKc[I;JHcu/R%{'T9(-=kSmy n%DGcWY[.-=Ou-^htY/9Wd(?J8}\|:Fz(\fi&@jK*-T9UreROkw7m.ei3
2022-03-15 16:08:14 UTC	2571	IN	Data Raw: 6e ec b7 f7 51 7f 0a b9 f6 39 6d 7c bf 3a 3d 9e 6b ff 00 cb 47 f3 76 6f 5e bc 7f 0e 3e 63 5e 13 bd d9 ee c5 27 bb 33 ec 64 8a de 09 e3 b5 d9 be d6 65 ff 00 56 8a 9f 33 7f b5 53 5c 49 e6 c1 03 2c 11 cf 71 7a ea 9f bc fb 9b 9b ee fb 56 92 d9 cb 67 75 f6 ef b7 da a5 a7 cd 0b c1 26 d7 47 db fe df 6f f7 6a 18 d6 25 8e 75 68 24 82 58 b7 3c 31 ef d9 bf 77 fb 5f ed 2f 4a 56 92 d8 25 ca dd cc fd 43 4b dd 7d 22 db cf 04 16 f1 6d 78 a4 9d 15 1f ef 67 70 3f c5 fe ef fb 6b e9 4e ba ba 6f ec af 2f cf f2 2e 3e e7 9f 22 6f 4f 37 8d db 3d b1 5a 9a f4 9a 64 5f 34 7e 66 f5 86 4f de 6f f9 e1 ef f2 ff 00 17 df f4 ac 9b 1d 41 b5 28 27 5d 3e 38 ec 9e 2f dc a4 12 26 cf 99 b8 dc 5d ff 00 bb b9 1b 77 ad 6e e3 76 d5 f7 30 53 8a dc 6c 30 fd aa 0f b5 43 24 68 f1 4d 1c 2f 24 8e c8 8e Data Ascii: nQ9m\|:=kGvo^>c^'3deV3S\I,qzVgu&Goj%uh$X<1w_/JV%CK}"mxgp?kNo/.>"oO7=Zd_4~fOoA(']>8/&]wnv0Sl0C$hM/$
2022-03-15 16:08:14 UTC	2619	IN	Data Raw: 2b 8f 11 52 ad d2 bd fd 2e 55 38 ad ec 51 f1 a6 92 ab b2 df 4f d3 6d 6e ad ed f7 6f f2 20 f9 d3 fb a4 b9 f9 7f d9 db 5a 1a 4c 7a 1e 93 ae 5a 6a da b5 fc 93 eb 11 42 be 74 72 3b 6c b6 56 e7 ae 71 ff 00 01 15 5b 5e b7 d5 74 77 b4 d4 bc 79 e2 0b 5d 17 c3 0f 32 cc 9a 1d ac 9b e5 f9 bf bf fc 29 c5 6c f8 7f 5c f0 77 89 b5 5f 39 9f 4a d4 1e d7 cc 99 e0 9e 3f 2b fd d5 c6 d2 37 e3 b7 5a e0 a7 46 a7 b5 f7 ac 9e 9b e8 6a e5 1d 74 3a 2d 53 e2 b4 11 5a df ea da 7f fc 79 37 fc 7b f9 7b 5f ce 97 6f dd 5d c7 76 6b 99 f1 16 a1 ad 6a 53 fd b2 48 24 82 56 87 7d bf da 9d 51 21 97 76 ef 9f ca 90 f6 e9 fe f5 72 fe 38 d1 d7 c4 17 1f 67 d0 7c 37 24 76 48 fb 1d 1f fd 1e 2f 5f 91 99 f7 3b 1f a5 53 d1 fc 3b 73 75 e1 f9 16 1f 0d 4e 89 13 b2 43 6b 24 ed 12 26 f5 c7 9d f3 67 a6 2b a6 Data Ascii: +R.U8QOmno ZLzZjBtr;lVq[^twy]2)l\w_9J?+7ZFjt:-SZy7{{_o]vkjSH$V}Q!vr8g\|7$vH/_;S;suNCk$&g+
2022-03-15 16:08:14 UTC	2674	IN	Data Raw: ba 8e 49 df 66 f8 a4 f9 b6 4d b7 a0 cf 71 9f e1 ae 57 c2 fa 87 89 6e 35 59 37 41 63 3d 94 52 b3 bc 10 3e c7 dd d3 9c fd de 6b be d3 fc 58 be 28 f1 a4 70 d8 c7 7d ab e8 96 af 1c d6 f3 c7 3f ee a1 64 5c b7 ee cf de fa d7 a7 5e 6a 16 7e 28 b5 bb ba 9a 7d 0e 14 f3 be 4b 19 d3 64 af b5 7e f7 6d d9 f6 ae 8a 79 7a 97 bd 4e a5 bb 04 ab 5e d1 92 d3 63 e2 9f 14 7c 25 f1 67 c4 1f 17 47 7d a8 5f 49 a4 5a db ba f9 3f 77 e4 65 e3 e5 db 9f 96 b9 9f 1b 7e ce ba d6 bd a9 5a 58 db df c7 3c 5f 72 e3 52 93 f7 48 ff 00 f0 16 e8 9f 85 7d 6d e2 6f 86 f7 9e 28 9e 4b ab 3d 4a d6 d5 7f 82 08 37 6c fd 14 ed ae 27 c5 1f b3 2f c5 1d 49 27 93 41 bb b1 d3 91 b6 ff 00 af f9 13 77 d2 b6 8c f1 f4 a5 18 c3 54 b6 76 33 ab 46 94 d7 34 75 6f cc f1 3f 05 fc 09 d1 7e 16 ea 50 5d 5d 78 c3 4a d4 Data Ascii: IfMqWn5Y7Ac=R>kX(p}?d\^j~(}Kd~myzN^c\|%gG}_IZ?we~ZX<_rRH}mo(K=J7l'/I'AwTv3F4uo?~P]]xJ
2022-03-15 16:08:14 UTC	2714	IN	Data Raw: fd ec bb b7 76 69 06 53 1e a2 b9 df f8 58 50 69 3e 19 dd 67 e2 18 f5 ef b6 5d ec 4b 18 20 92 dd e1 8b fe 99 49 36 3f ef ac 55 cf 10 6a d2 dc 47 69 0e 87 3c ef 2d 9a 2c 29 24 ef fc 2a df 73 7b 65 99 3f bc d5 cb 2c 62 bb 73 97 c8 a8 c6 da 45 19 3e 3c f0 ce af 71 e7 c7 6f e2 5b 5f 0b e9 5f 2d bf ee d3 cd d4 ee 5b ef 13 e6 7f 00 fa 73 51 f8 4f 58 d0 7c 41 a3 ff 00 64 fd 87 58 9e 28 91 a6 fb 55 ab b7 ce ab f7 7e 76 fe 3f bd bb f8 87 ad 6f 59 e9 7a d2 f8 47 fe 27 97 7a 6e a9 a8 4b 77 24 d6 f0 24 1b ed d3 e5 fe 0c e3 7e df a6 2a c6 8f 63 f6 0d 36 35 be bf df b9 d5 12 d6 08 36 22 33 74 8c a2 9d be fd 6a 1d 55 53 dd 8b 36 8c 6d ef 18 7e 07 f0 1f 88 f5 9f 13 4f 7d ae 5d c1 a4 78 72 cd fc eb 18 23 f9 ee 2f 5b fb cf fc 4a 07 fd f5 5d 55 c7 88 a0 8b c4 53 c7 75 77 26 Data Ascii: viSXPi>g]K I6?UjGi<-,)$s{e?,bsE><qo[__-[sQOX\|AdX(U~v?oYzG'znKw$$~c656"3tjUS6m~O}]xr#/[J]USuw&
2022-03-15 16:08:14 UTC	2785	IN	Data Raw: 27 fe 1f a2 d7 51 36 a4 ba 0c 1e 76 9f a6 58 c1 14 b0 f9 d7 12 58 ba bc 48 ab cf 99 2b b6 37 37 cb f7 73 5e d4 23 56 4d 3a 8f 55 fd 6c 79 ef 58 d9 bd ce 57 fe 16 72 eb 9a af f6 3c 92 41 75 7b 6a 9b ee e0 b1 7f 36 58 65 6e 89 e6 e3 6b 63 fb b8 c8 ad 0d 17 4b fb 3d f7 db b5 69 e3 82 d6 e2 1f f4 18 d3 cc 7b 89 9b 76 3f 87 a2 ee fe 2a e3 f5 2f 8d 1a ae 8f 05 de a1 a7 e8 50 5e a5 bd a4 73 5b d8 da bc 1e 6c de 6b 7f 12 a3 6e 56 ff 00 d9 6b aa f1 36 ad 6d ab 78 46 3d 6a fa 38 34 b9 6d 6d 3f d4 5a bb 7d a1 1a 5f f9 63 b6 1e 31 bf 6f 2d d2 9c a8 c6 56 a9 37 7b 0e 33 7c dc a7 03 e1 df 15 78 e2 e3 c7 11 d9 ea 1a 16 95 a7 68 f2 ee 4f 2e 09 e3 be b8 87 fd a9 72 ed b5 82 b0 f9 6a c7 8b 97 c5 16 fe 3c d3 5b 4b f1 45 8f 85 ee 35 2b 76 74 d3 67 b5 de e9 b2 47 cc a5 13 e4 Data Ascii: 'Q6vXXH+77s^#VM:UlyXWr<Au{j6XenkcK=i{v?*/P^s[lknVk6mxF=j84mm?Z}_c1o-V7{3\|xhO.rj<[KE5+vtgG
2022-03-15 16:08:14 UTC	2817	IN	Data Raw: 4e 6b 8d 42 ff 00 c0 77 77 17 9f 61 d6 fc 41 2e e7 7d 4a d2 75 fb bc 62 2d bf c2 a4 75 ae 26 4f 87 33 ac 32 49 7d e1 3d 0f 51 b4 8a dd 5e de ea 74 91 e5 49 7e f6 cd 89 f2 9c 7d 36 d6 6e 9f 79 6d 67 24 eb 67 f6 57 97 7e cf dc 22 a6 cf f8 16 2b 5a 3d 7b 55 59 ec 16 ce ee 3b ab 89 7e 4f b2 c7 74 a9 36 d5 fb df 2b 73 c5 76 ac 6f b6 b7 34 5d d7 6f f8 63 1f 63 18 46 d7 d2 fd 7f e1 c6 fc 42 b3 d1 7f e1 15 b0 b7 d6 35 d8 d3 75 a3 22 79 fa 73 3c 56 cc dc 99 51 55 48 46 03 a5 78 17 89 bc 17 e1 7f 19 43 1c d6 f7 7a fc f1 59 a7 9c f7 d7 49 fe bb 6f f1 ac 7e 5d 7d 0b 7d ae 78 da d6 4f dd c9 3d ae 9f 70 fb de 49 11 51 1f fe 05 fc 55 46 4d 1f 5c d4 23 8e 49 34 d9 e0 4d 9f f3 ea db ff 00 de ff 00 76 b6 ad 39 cb f8 71 69 fa 3f c3 73 37 46 12 5c b2 92 b1 c0 f8 07 52 83 5b Data Ascii: NkBwwaA.}Jub-u&O32I}=Q^tI~}6nymg$gW~"+Z={UY;~Ot6+svo4]occFB5u"ys<VQUHFxCzYIo~]}}xO=pIQUFM\#I4Mv9qi?s7F\R[
2022-03-15 16:08:14 UTC	2873	IN	Data Raw: 24 54 7e 22 d4 20 97 43 bb 5d 2e 0b a8 ed ed f6 ef 82 38 16 27 7f ef 2e e2 7b 75 ab 96 7e 1d d3 ec 27 92 f1 6f e0 7b d9 51 51 fc cd ce 9f 2f fb 15 5f 56 f0 ee 91 e2 68 23 b7 be bf 81 ee 2d e6 df e5 c6 8c 88 ff 00 37 02 a7 da ca 51 54 f7 88 4a 9c ac f9 b7 38 ff 00 f8 52 fa 35 ac 91 f9 d7 f3 a2 b3 ac cd 05 d6 dd f7 2a de 88 bf 35 74 5e 1f f0 5e 91 a3 dd 5f ad bd 84 7a 75 be f5 74 9e 77 f9 f7 7d 3e f7 d2 ae 35 9e 91 6b 04 f7 51 c7 3e cb 5f 91 e4 8e 75 d9 b7 ef 6d cf f7 8f ae 6a 39 3c 61 63 71 6b 04 3a 5e 93 27 db 59 d5 1e ea 49 db 66 e4 6f bb 9c 7d ff 00 f6 45 54 e3 56 51 e6 6f dd 39 95 38 53 b5 ad 73 b6 b5 d0 f4 ad 0f 4d bb d4 35 49 e3 b2 49 61 8d fc f9 d3 64 5b 9b fe 58 c7 dd 9e b8 bf 19 6b 1a 7e 9b e3 18 35 0d 26 38 e0 d1 e2 87 fd 2e 39 e7 5f 35 1b f8 a4 Data Ascii: $T~" C].8'.{u~'o{QQ/_Vh#-7QTJ8R5*5t^^_zutw}>5kQ>_umj9<acqk:^'YIfo}ETVQo98SsM5IIad[Xk~5&8.9_5
2022-03-15 16:08:14 UTC	2960	IN	Data Raw: 9b f8 70 be 9f ad 49 aa 68 3e 2c b5 d0 e0 b7 d2 e3 82 ea df e5 7f 32 f9 36 27 9a db bb 0f f6 6b 53 e3 57 8e 2f 35 9f 11 5a 68 3e 1d f0 f3 ea 92 b2 2c db e0 83 ee 45 b7 0a 19 bf f1 ea cf b5 f1 e4 fe 13 f0 cf fc 54 1f 26 aa c9 b9 2d 6f 9f 7c 5f 2f fb 5e df 5a 50 a7 2e 55 36 b7 db cf e4 62 ea 2e 67 cc df a9 bd ac 5a dd f8 23 43 79 ae a3 b5 81 a2 8a 37 7f 2e 0f f5 cc df de e3 72 f3 e9 8a f3 4f 11 78 eb c6 3a a6 b0 96 fa 4e 8d 74 f1 6f 67 7b a7 4d 88 9b 57 a0 2d de bb 9f 18 6b 97 3f 18 a3 d3 64 d3 7c 4b 6b 6a 92 c2 b0 f9 f1 d8 b2 79 db 79 3e 62 8f e2 fe 55 b5 a1 f8 27 45 b5 9e 3b 5d 4b c7 7a 96 af ff 00 3c 6c 6d 2d 76 3a 6d 6f 9b 73 e7 ee d7 54 68 c6 33 6e 4d 3f 26 ff 00 42 64 9d 46 92 db c8 c1 f0 ed 9e bd af 5f 41 37 89 af e3 f0 ba 4a 8b 0f 99 1f fa df 99 7e Data Ascii: pIh>,26'kSW/5Zh>,ET&-o\|_/^ZP.U6b.gZ#Cy7.rOx:Ntog{MW-k?d\|Kkjyy>bU'E;]Kz<lm-v:mosTh3nM?&BdF_A7J~
2022-03-15 16:08:14 UTC	2992	IN	Data Raw: 1e b9 e2 a8 e0 b7 b5 d4 b5 5d 91 6e 48 6e a0 46 7f df b7 3b 59 97 e5 af 1b db 4a a4 94 61 ee af 25 6f bf 76 75 2f 75 68 b5 f3 3d 7b c3 3a 97 8a b5 6b ab 4f f8 a6 bc f8 ac f6 ef fb 2f c9 13 ab 7a 64 ed c5 49 e2 48 74 fb a9 e4 b7 9b fb 37 48 d6 ef 3e fe fd b1 4a 8b bb e5 5e 3e 5d d5 e0 3f 0c fc 0b e3 1f 09 5d 58 47 75 e3 a9 fc a5 b8 d9 34 93 ee d9 0a ee f4 53 f3 ff 00 bb 5d 17 c6 2d 05 6e 2e af e4 d1 e3 be bd b8 b8 fd f7 da be c4 d1 23 f6 dc b9 e6 34 fa f5 ae aa b2 9c 63 ca bd e5 7b 5d fe 9a 26 89 a7 29 d9 b4 b9 5a 2f 7c 42 59 7c 2f a9 79 97 52 3b fd a3 6c 3e 7c ee be 57 cb d7 e7 fe ed 55 d2 fe 23 69 1a 94 1f 65 b5 be b5 bd 55 4f de fe ed b6 23 2f d4 57 01 f0 e7 e2 c7 c4 1d 07 5c 83 4d 6d 19 fc 5d a1 5b db ec 7b 49 fc bf 91 97 f8 83 38 af 6b b1 d7 34 1b fd Data Ascii: ]nHnF;YJa%ovu/uh={:kO/zdIHt7H>J^>]?]XGu4S]-n.#4c{]&)Z/\|BY\|/yR;l>\|WU#ieUO#/W\Mm][{I8k4
2022-03-15 16:08:14 UTC	3032	IN	Data Raw: fd c7 cf 2f cd fd ec 55 eb 3d 3e 3b c8 f6 ac 9b fc af bf 24 9f dd ff 00 1a 39 d9 9f 2f 31 cd d9 db ea 1a 5e ab 25 8f db fe cb f2 2c 49 04 7b 77 a2 af b7 fc 07 eb 53 35 d5 e4 57 d7 77 97 17 72 5e ca df 72 39 3e 7d 8d fe ed 4d a9 49 67 a6 ea 52 4d 6f 77 23 fd a2 6f 9f cf f2 f7 fc ab fc 5d f1 96 ac 9f 32 06 92 4f 2e 7f 3d fe e7 9f bd 7f bd f3 76 a8 9d e3 7b 09 2e e1 79 70 da b4 92 43 e6 4f 05 a4 50 b6 ff 00 21 3e 7d cd 54 f4 1d 4b 4f d2 61 82 1d 36 d2 e9 fc a7 de fa 95 f7 fc b1 66 c8 f9 9a 4f e9 5d 42 e8 7a 55 bd ac 97 93 6a 52 22 33 b6 f8 e0 dd fd de 05 1f f1 2a 6b 58 3c 9d 26 e9 f6 a7 92 f2 5d 6d de eb ea bb bb 7f 10 6a 84 a4 93 bb fc 48 95 1e 67 7b ea 62 eb 16 71 7d ba 3d 2e 49 e4 79 6d 61 ff 00 59 1b fc 9f 36 38 56 56 f9 f2 ad 56 af 21 55 9e 38 64 b0 8f Data Ascii: /U=>;$9/1^%,I{wS5Wwr^r9>}MIgRMow#o]2O.=v{.ypCOP!>}TKOa6fO]BzUjR"3*kX<&]mjHg{bq}=.IymaY68VVV!U8d
2022-03-15 16:08:14 UTC	3112	IN	Data Raw: f7 aa c6 8b 1e a1 a6 d8 c9 1f 99 be 25 7f 9f cb 45 47 76 f6 1d a9 f3 7b c9 b3 4d 59 5e c6 39 ef f5 8f b2 b5 8d 8c 09 6b ba 69 a3 9d db 7e ed bb b0 3e 6e b4 db af 0a de 6a d7 51 aa c9 05 ac 57 1f 3d dc 91 a7 df 89 7f 87 8a b1 a1 ac b6 1a 95 dc df d9 31 de ea 0c 9b d2 7b a7 59 76 7e 47 e6 f9 7e 5a e8 24 ba 97 c3 36 b7 7a 85 c4 10 23 b4 db 2d bc 84 f9 37 33 73 c6 6a b9 ee 92 96 c6 91 f7 b4 b1 c7 d9 f8 56 c7 c2 ba 94 fa c6 a5 e6 22 79 2d 0c 31 fc de 6e d5 c6 ef ce b9 1b af 0e ea 7a e7 8b b4 6f 10 5a c7 1f fc 4b 6e fe 49 ed 5f ee 7a 61 7f d8 1d 39 fc 2b d4 3c 0b af 4b e3 e9 f5 3b 3f 22 77 fb 2a 35 c3 c7 bf ef ed fe 15 a9 bc 71 aa 58 f8 5e 08 3e d9 a6 c9 a4 7d a3 e7 48 f6 32 3f 7f 98 fd 2b aa 8c ab 51 4a ac 13 b7 47 63 96 71 84 93 8e cb a9 57 58 f8 f1 a6 e9 72 Data Ascii: %EGv{MY^9ki~>njQW=1{Yv~G~Z$6z#-73sjV"y-1nzoZKnI_za9+<K;?"w*5qX^>}H2?+QJGcqWXr
2022-03-15 16:08:14 UTC	3128	IN	Data Raw: bc 4b e2 fc 3e 1d d2 f4 07 fe d2 92 79 f4 ff 00 b9 e6 58 da f9 bf 79 bf 8e 96 22 34 95 68 fb 39 f3 74 b7 53 d2 55 29 d5 a1 cd cc b4 57 39 25 f8 89 ae 78 83 43 92 ea 4b f9 12 de 54 fd f7 96 ff 00 c5 fc 35 e3 96 be 22 d7 ee af a3 b5 b5 49 f5 4b d9 65 64 4f 2e 16 f9 ff 00 e0 5d 2b de 7c 2b e0 35 7f 0c ed d3 7e cb fd 9b 2f ef 7c f8 e0 64 77 fa ad 6c 5b db e9 9e 1c 8f fe 11 fb 5d 5b ec ba 87 94 d7 0f 07 d9 76 3b f6 6a e4 a7 8c a1 86 a9 38 b8 73 7e 96 38 6a c9 54 8c 5c a6 74 5a 87 8b b5 3d 5a 39 ed 61 8e 38 37 22 bb c7 1a 2b cb 4d d1 74 bd 57 52 9e 49 17 c2 f1 c0 ec ea ef 24 9f c6 de eb d2 bd a2 c7 c2 36 d6 bf 32 cf e4 6d ff 00 9e 08 b5 71 b4 38 1a 49 37 4f 3f f7 ff 00 78 f5 b5 4a 2e 7a c9 9f 48 a8 eb ab 3c be eb c3 ba d5 9d d7 f6 a2 d8 58 d9 5d b2 79 5e 66 f6 Data Ascii: K>yXy"4h9tSU)W9%xCKT5"IKedO.]+\|+5~/\|dwl[][v;j8s~8jT\tZ=Z9a87"+MtWRI$62mq8I7O?xJ.zH<X]y^f
2022-03-15 16:08:14 UTC	3191	IN	Data Raw: a5 a4 dd f8 77 43 b1 8e de d1 11 62 97 c9 bb 9e 7b ad 9b 23 f2 fe f4 6a df 7b e6 eb 57 6f b5 0b ef 08 49 ff 00 12 5d 1a 6d 5e e2 5d 31 5f ec 3b 3f d1 f6 ee e3 0a 9f 75 9b fb bc 7c bc d4 d3 69 b7 9e 2a b1 fe d6 d1 74 d9 ed bc 4b 3c 50 fd af 4d be f2 ff 00 d1 a5 56 e8 43 1f e1 cd 29 d7 a7 08 f3 cd ae 57 dd eb f3 db 4f 30 fa cc eb 45 2f b6 bb 7e 85 6f 0f dd 6a b1 79 93 5d 5d c7 05 bc 50 c8 f7 0f bd 9d d3 77 4c 81 fc 0d ed d2 b5 34 dd 4b 50 ba d3 6d 24 b7 d3 7e 79 5f 7c 3f 65 81 bf 7c bf 77 ef 72 15 b6 8f 63 5c ce b5 67 ad 5b fc 42 f0 de 83 1d a5 d5 ed c2 c5 f6 eb b7 b5 f9 e5 9b 6f 0d 1b aa e0 6c f5 ad 6d 4b e1 1e b9 14 3f f1 23 f1 44 96 5a 85 fc b2 3f 91 a8 cf f3 fc cd fd dd b8 d8 3a 7a fc d5 c9 5e b5 24 a1 fb c5 1e 6d 56 ff 00 8e f6 d8 aa 75 2a 4a 72 51 a6 Data Ascii: wCb{#j{WoI]m^]1_;?u\|itK<PMVC)WO0E/~ojy]]PwL4KPm$~y_\|?e\|wrc\g[BolmK?#DZ?:z^$mVuJrQ
2022-03-15 16:08:14 UTC	3255	IN	Data Raw: 00 68 db cb ba de 2b a7 76 4f fb 68 a9 fd ff 00 4a fb a3 c0 f7 90 78 73 47 9e fb 49 fb 55 f6 ab 05 a7 f1 bb 79 5e 53 f1 ce ef 4e f5 e7 e6 3c 35 2e 1f 8b c3 2a 92 9f 36 a9 da df 2d f6 d7 53 d3 96 61 f5 ae 4a 8a 3c b2 8e ef 72 38 7c 3b 16 97 a4 ea 77 0b 04 f7 b7 ad 7d f6 79 7e dc ea 92 db 6d 5f bc aa 87 95 ff 00 66 8f 1d 78 6f 4a f0 1f 84 b4 cb af b7 dd 69 f1 49 6e b0 b4 16 b0 6f fb 4b 2a ec 6d de 9e f5 8b 27 8b 3c 33 61 e3 eb bd 36 69 3f b3 e5 69 b6 45 a8 c0 8a e8 f2 f5 3b 83 7d df 63 5b 53 2a dd 78 76 d2 c6 49 2e 9f 4d 5f b4 45 77 75 1a 37 d9 d1 65 6f 95 99 cf f9 cd 3f de 45 c5 d4 4d 27 67 ea ad f3 fe 99 e2 7b be d2 4d 6d af e2 49 e0 df 14 68 7a a6 81 a2 d9 c7 7d 07 9b 14 57 1f bb b5 4f 35 e1 5d bd 18 74 e5 bf 8a ab cf e1 79 3e 1f f8 2f 52 f1 25 8f d9 75 Data Ascii: h+vOhJxsGIUy^SN<5.6-SaJ<r8\|;w}y~m_fxoJiInoKm'<3a6i?iE;}c[S*xvI.M_Ewu7eo?EM'g{MmIhz}WO5]ty>/R%u
2022-03-15 16:08:14 UTC	3271	IN	Data Raw: ef 7b 65 dd 81 90 47 cb ba a5 f8 37 e3 a5 d7 bc 47 69 6b 63 05 d4 96 9a 6f fa 3e a2 f2 27 c8 f3 ed 6c 7c df fb 2d 47 e2 a9 2e 6f 3c 4d 6b 1e a1 61 6b 6b a3 c5 71 f6 89 7c b9 97 cd 46 5e 57 ee 70 c7 ee f5 ab 92 74 e7 c9 57 47 f9 69 f2 f8 91 31 b4 e9 ca cf 5d 17 fc 03 5a 4b 39 ef 34 ef 15 c3 35 da 5d 45 61 2f 9c 91 c0 8c f2 ba ee c2 86 53 f2 96 f4 ad 5f 10 5b c1 ad fc 27 8e de 6d 17 fb 3f 50 bf 75 85 fc c9 db cd 85 57 9f f8 0b 57 2f ad 5d 78 d6 d7 52 fb 56 9b a2 e8 e9 e1 cd 49 23 79 6e be e4 b3 2e ee 85 47 f1 03 eb 57 be 30 69 36 da 3f 81 34 9d 61 b5 6f f8 46 fc 41 74 ed 0b fd aa 06 95 3d be 54 04 af fb d5 9c 68 ca 72 8c 62 d2 7a 3e f6 f9 2b db f3 3a 69 4a f5 6e 96 be f3 d7 6b 34 79 5d f4 73 ae a4 97 97 12 49 e6 f9 2d fe af e4 ad 4d 37 cf b5 b1 92 ce df fd Data Ascii: {eG7Gikco>'l\|-G.o<Mkakkq\|F^WptWGi1]ZK945]Ea/S_['m?PuWW/]xRVI#yn.GW0i6?4aoFAt=Thrbz>+:iJnk4y]sI-M7
2022-03-15 16:08:14 UTC	3398	IN	Data Raw: ac 68 b6 7a 6f c2 bf 0d 5a de 69 b2 69 d6 97 1a a4 d7 13 41 a7 7c 92 fe e6 3d bb 87 b9 df c5 52 f0 9f c4 bf b6 f8 9b ec ad e1 a8 3c 37 e1 f6 d2 d6 2d 1b fb 46 0f de dc b2 e5 d5 d3 3f c6 ed f3 fc d5 f7 55 2a e2 2a 46 52 84 9f 2d 9d d3 6b 66 9a df ad d7 4e c7 c4 53 92 a3 28 b6 b5 56 66 1f 8b ac ee bc 3f 6f 27 86 f4 97 83 c3 da 86 b6 92 4b 69 75 3a 47 71 0a 6c 93 2d 1e ec 1f 97 77 1c 55 7f 0c dd 78 b7 c3 7a 1f 89 75 4f 0e f8 3d 12 5b 5b b5 78 60 8e fb ed 16 f7 2a b1 fe f6 45 db ea dd f1 5d 5e ad f0 e6 4f 14 78 06 d3 fb 17 46 b1 b5 8a d6 d3 ce b7 9f ed 4c e8 f0 4d 3e e9 65 5f ee 92 db b2 a7 f0 ab 9e 0d b3 8b c5 5e 11 fb 3c 70 4f 6b a8 4b 6d 22 45 27 da bc a7 48 93 9f b9 fc 2d b9 3e ef f7 6b 8e 55 a1 4e 0a 8f 2f 3f bc b9 af bd f4 7a da 5d 6d 6d 6f 6b 3b 1e f6 Data Ascii: hzoZiiA\|=R<7-F?U*FR-kfNS(Vf?o'Kiu:Gql-wUxzuO=[[x`E]^OxFLM>e_^<pOkKm"E'H->kUN/?z]mmok;
2022-03-15 16:08:14 UTC	3414	IN	Data Raw: fe 75 84 77 5a 84 b7 7f 68 fd f6 ed 96 cd ff 00 3c d6 3e 31 4b 2d ca ab e3 e2 e7 1e 59 ef a3 95 ae f6 bf ea 45 4a ca 0e cb 43 eb 96 f1 06 ab 75 e1 9b 45 d4 bc 37 e4 25 fc cb 34 d0 41 3e c7 86 54 63 8d ca bc a3 b0 f4 3f c3 58 fa 95 f5 cd bd db dc 49 a4 df 6a 9f 6c 7f 91 24 ff 00 5b 0c 48 b8 55 de dd f8 fb d4 df 0a c3 a4 7c 46 b4 f0 d6 a5 34 f2 41 ad b3 ac ba cd ac 1b a2 8a f2 26 fe f7 3d 9b a7 f7 be 6a ed d6 48 1b c4 71 c7 6f 3f 91 64 c9 f6 9b 7f 2f 6f 94 8a 8c 46 11 97 a7 cc b5 e5 d6 8f b1 7c 89 6a b4 6b 5d 35 7d 6f 7f f8 06 bc ae 76 77 39 cb 7f 87 2b aa 5f 69 b1 c3 69 7d 65 a1 41 6e d2 a4 92 6d 7b bf 3e 5f bc ac e0 76 ad 3f 0a f8 2f 43 b3 f8 85 a2 e9 33 5a 3b a4 57 76 f7 10 c7 74 ec c9 f2 c8 9f 36 0f f1 a3 73 58 7f 13 3e 27 58 f8 83 c5 5e 17 9a c6 ef fe Data Ascii: uwZh<>1K-YEJCuE7%4A>Tc?XIjl$[HU\|F4A&=jHqo?d/oF\|jk]5}ovw9+_ii}eAnm{>_v?/C3Z;Wvt6sX>'X^
2022-03-15 16:08:14 UTC	3502	IN	Data Raw: b3 ff 00 0f fc b4 07 77 de 5a de d7 3c 49 e1 af 0b e9 ba 93 69 72 41 a7 24 b7 11 c3 77 7d 3a 6f 44 6e 9f 31 fe 15 e3 ef 11 59 b6 fa f6 ae ba 3d be a1 6b f2 5b cb ff 00 1e 93 dd 27 95 2f de d8 16 4c fd c6 7d ad de bc 8b e2 b7 83 7c 75 ad 78 8e c6 3d 36 ee c6 1d 0b 54 b8 9a 67 82 34 58 9d 27 66 fb b7 2a 73 b9 47 6c 57 9f 4e 32 c5 d5 54 eb 49 53 51 5d 5f 4f 2f 32 a5 3e 58 da 2a e7 a4 6b 5f d9 9e 1c be b0 bc 9b 5d 8e 6b d9 6e e4 77 92 4b af 29 26 5e 5b e6 6f ee ec fc da be 7a f8 e5 a7 f8 ab 49 f1 1f fc 24 9e 11 be f1 55 ef 87 3f d7 3c f6 91 ef 8a d9 b6 f1 0c 2e 0e d6 8b d4 71 5d fd e5 8f 85 74 db b8 f4 7b 57 8f 58 f1 42 a6 cd 47 52 48 36 22 7e f3 1c 0e 5b 71 fb a1 07 d6 bd 46 c7 43 9d 7c 23 3d 8c 6e fa 5e 99 14 2d 0b c1 23 ec 78 65 7d 8c 9d 31 f2 ec 39 6e 73 Data Ascii: wZ<IirA$w}:oDn1Y=k['/L}\|ux=6Tg4X'fsGlWN2TISQ]_O/2>Xk_]knwK)&^[ozI$U?<.q]t{WXBGRH6"~[qFC\|#=n^-#xe}19ns
2022-03-15 16:08:14 UTC	3533	IN	Data Raw: 46 b4 5d 78 5f 97 6b de cf d6 fd bc 87 1b d4 93 b3 d5 9e 41 e3 cf 8e 1a 1f 84 2c 6c e4 d4 a7 9f 51 f8 81 14 2a 89 37 ca 89 a6 6d ce 23 75 e7 76 17 f8 7f 1a 8f 4f fd a0 35 1f 0e 68 a9 a8 6a 5a 94 7a dc ba a5 da bd a4 13 fc ee ea 8b d7 fd ce 98 53 fd da f1 1f 19 78 3e cf 43 7d 36 3b ed 36 eb 54 d5 6f ed d6 ed ef af a7 64 fc b1 fc 3e f5 8f e2 cf 19 78 cf c4 1e 19 83 47 d4 2d 34 7b 98 ac dd 5d ef ac 74 e5 4b b7 d8 a7 6a bc 88 3e 6c 66 be e2 8e 47 81 c4 53 82 5a a6 f5 6e da ab fd 9d ec af e9 f8 dc e0 9c ea 46 5d 8f d0 4f 03 fc 4c d0 6f fe 19 7f 6e 6a 1e 21 8e 4b bd 5b 4c b9 6b 89 2e 9f 62 42 cd 19 55 81 17 db a5 64 7c 3b d5 96 1f 87 b6 9a 7d e6 bb 3d 95 c7 88 ed e3 b7 79 27 dd fe aa 19 0a 08 6d f1 c8 e0 d7 c6 5f b3 8f c5 cd 5f c2 fa c4 fa 6d e5 fc 96 5f 68 b6 Data Ascii: F]x_kA,lQ*7m#uvO5hjZzSx>C}6;6Tod>xG-4{]tKj>lfGSZnF]OLonj!K[Lk.bBUd\|;}=y'm__m_h
2022-03-15 16:08:14 UTC	3597	IN	Data Raw: e8 17 1b 75 28 2c b4 4b 84 5b 94 91 dd a2 79 99 1b 7f 9a 8c df 33 31 fb b9 fe 2a e0 d7 cf f1 56 ab e3 3d 5b c8 49 ff 00 d2 23 b7 d3 a3 b5 9d 62 fb 6d 9b 47 b9 9b 67 de 8d d1 c7 0c 6b 73 c4 9e 1b bc fe cd d4 b5 af 1d 78 b2 fb fb 1d a6 85 34 ed 39 12 3d ff 00 27 cd e5 aa 28 ee dd 02 f6 eb 58 5e 2e bc d3 ec ff 00 b7 75 a8 f5 9b 5b 29 55 23 bb 4d 1e fb 6d bd dc 31 4b 1e e4 f2 e3 39 f3 57 fd d3 5e 15 1a 6e f2 70 bc db eb ae 9b 3f bf a7 fc 1b 12 f6 2e e8 3f 0d 63 f1 07 da e4 bc ff 00 97 a8 95 2e ec 6f bf d6 fd dd b8 df 17 fb 35 47 45 f0 1f 87 fe 17 d8 f8 bf 45 d3 60 be d5 2d 7c ab 0d 66 69 e7 45 48 b6 a4 9b 5a 08 ff 00 bc db 1d 99 9a b4 3c 2f e2 e8 2f 7e 1b 47 e2 4b 3b fb 4d 5e 1b 7d b0 dc 41 0b f9 57 76 d2 ee e8 43 1e dd 7e 95 b5 a5 e9 77 3a 8e ad 3d bb 49 22 Data Ascii: u(,K[y31*V=[I#bmGgksx49='(X^.u[)U#Mm1K9W^np?.?c.o5GEE`-\|fiEHZ<//~GK;M^}AWvC~w:=I"
2022-03-15 16:08:14 UTC	3629	IN	Data Raw: cf 4b db cf 0d c7 15 f7 fa 2b 3b ed f3 26 57 f3 23 fe e9 1f 7e be 8d f0 ae bd 2e ad e0 1f 17 e8 f3 4f 1a 45 16 8d 0c b0 c7 bf 7a 5b 7e f0 46 31 f4 dd 9e b9 c5 5c d3 6c 6c 6e 3f e2 7d 75 f6 57 d4 95 24 48 5f ef ba 2c ab b5 f8 ff 00 6a ae 78 8b c2 ba 55 87 80 fc 49 aa 58 c7 1c 17 77 1a 4f 95 34 90 7c 88 f1 45 3c 2e b9 03 8e 3e 6f c2 b8 2a 66 14 f1 56 a7 15 6e 58 cb f1 ba 5f 71 d5 4e 32 4f 53 87 d2 f4 9f 27 e1 ee a5 6f ac 6a d6 37 b1 45 6f 71 6f 6f 3d f6 df f4 99 e1 d9 e5 ed 2f f2 8f 9d b6 9d df f3 ce aa 59 fc 33 f0 3a f8 7d 3c 41 e3 9d 76 49 e5 81 15 12 7b ad 47 7b db 76 55 89 23 fb bc fd d5 ae 93 45 f1 33 5f f8 57 c7 56 eb b1 fc 31 61 a1 ad b5 a3 ec 57 49 a7 f3 53 32 ff 00 df 6f de bc 0b c5 9a 0d cc 3a 6f 88 75 af 10 49 6b a8 f8 7e dd 16 e2 de 44 dc 8f 35 Data Ascii: K+;&W#~.OEz[~F1\lln?}uW$H_,jxUIXwO4\|E<.>o*fVnX_qN2OS'oj7Eoqoo=/Y3:}<AvI{G{vU#E3_WV1aWIS2o:ouIk~D5
2022-03-15 16:08:14 UTC	3636	IN	Data Raw: 7f 0f e8 3a 0f 85 fe 25 78 86 36 d3 67 d6 bc 1f a9 22 ea 8e e9 03 4a f6 ca ac fc 36 de 7e f7 ca 2b 9b f8 85 fb 4c 5c e8 6f 3e 9b e0 1b 0b ef 0a 59 35 c2 dc 3c 9e 7e c7 76 db fd c5 e0 66 be ca 59 a6 37 30 97 d5 a8 53 4e 12 4b 5b 24 92 69 5e fa de f7 be 96 3c 9a 94 97 3c e3 53 68 bd 3c fb 1f 61 f8 7f 45 92 e3 4a 8f 50 9a c1 2d 5e 24 5f de 69 57 5b ec a6 ff 00 69 77 61 97 fd d2 2a 3d 1f e2 36 9e 9a e4 7a 3b 79 96 a8 df f1 e9 07 91 bd e6 dd fc 5f 4f 4a f8 b6 c7 f6 bf f8 91 aa 49 04 37 d0 69 ba a5 bc 4f bd d2 7b 1f bf fe f3 29 ad fd 7b e2 67 88 e3 d7 2c 3c 5d e2 8d 0a eb 4b 4b ad af 69 3d 8a 32 79 2a ad c4 88 de dd b3 5f 11 57 86 71 11 ac dd 4b 24 ff 00 95 fe 4b 43 48 56 a6 d6 8f 54 7b 75 d7 c7 0b 38 f5 b4 d4 24 f1 7c 9a 5e 9b 79 bb fe 25 7a 8d 97 cf b9 5b 1b Data Ascii: :%x6g"J6~+L\o>Y5<~vfY70SNK[$i^<<Sh<aEJP-^$_iW[iwa=6z;y_OJI7iO{){g,<]KKi=2y_WqK$KCHVT{u8$\|^y%z[
2022-03-15 16:08:14 UTC	3692	IN	Data Raw: f7 b7 fa 2c 73 f9 bb 3e 55 e1 9b f8 9a bc ba 95 d4 a0 d4 52 5a c6 fd f4 9a 3b 29 41 47 19 04 bf bd f8 c5 b3 cb bc 1f e2 cf 0e 78 1b 47 d0 bc 47 1e a5 6b a7 dc 5a c3 1a 5c 25 8b fd a2 ee e6 76 6f f5 1e d9 5e a3 1e d9 15 67 4b f0 bf 85 f4 dd 03 5e d4 b5 2b 47 f0 f6 99 ac df 2e a7 77 06 a4 eb f6 87 55 5f dd c3 8f ee 8f 99 c2 f5 cd 78 c7 c3 3f 1d 78 1f e1 e6 a5 3d e6 b1 3c 17 ba b2 ff 00 aa 82 d6 c9 be d0 8c df f4 d1 db 0b ff 00 01 15 ec 5f 10 bc 4d 6b a9 7c 33 b4 f1 45 bd a6 8f 75 69 bd 66 fb 2d d6 d7 74 dd eb 27 f7 c7 f7 71 5e 8e 32 9d 7c 3d 48 c2 9f 35 a6 f7 da f7 d6 cb ee 5a b6 79 54 9b 72 f6 6f a7 e8 9e a7 09 63 71 e0 9f 0b f9 fe 3a fe c6 d4 6f 6d e2 7f 2a 1d 37 52 be 8e 29 5d 5b a4 d0 a7 fc b5 c7 7f 4a f7 6b cf 10 59 f8 b7 e1 cf 84 3c 51 a1 ea b3 e9 fe Data Ascii: ,s>URZ;)AGxGGkZ\%vo^gK^+G.wU_x?x=<_Mk\|3Euif-t'q^2\|=H5ZyTrocq:om*7R)][JkY<Q
2022-03-15 16:08:14 UTC	3708	IN	Data Raw: 77 af 31 b3 f0 ac f2 dd 58 6b 97 5e 0c d4 7e 1c dd 2d c6 fb 49 e7 9d a5 4d df c1 f2 72 77 7d 6b da 7f e1 63 36 87 e2 ed 67 4d d5 2c 74 a4 f1 15 d5 c6 f8 67 82 45 48 9d 5b d5 87 2c e0 f0 7f 88 d6 86 8a ba bd fc 17 d0 cd b3 5a f1 04 bf be 4f f9 65 63 6c bf c1 b5 4f f5 e4 b5 7b f2 c6 d4 c2 ae 58 c2 d7 da f2 6d db 77 d2 d6 df 56 bc 8e 19 a9 4b dd 7a 1d 47 83 7c 1b a1 f8 37 4a b4 6b 18 d2 7d 56 54 de f7 db 15 ee 1f 77 2c cc ff 00 de fc 78 ad a6 b1 b3 9b 4e 9f 50 9a ee 7b 5b 58 be ff 00 97 f2 3e d5 f7 6f e7 58 5a 0e 8b a4 78 46 c6 79 35 8f 14 4f 05 be d6 b8 b8 b5 ba 9d 52 27 66 fb c4 ed ff 00 1c 56 cf c3 ff 00 88 5e 0a f8 87 e0 7f 1d d9 df 49 7d 0f 84 ac 12 de dd ef a7 4d 9f 2c cc eb e6 5b ff 00 b3 b9 7b f1 5f 29 1c 15 4c 7d 67 57 99 ca 3b f3 74 5f d7 97 dd 62 Data Ascii: w1Xk^~-IMrw}kc6gM,tgEH[,ZOeclO{XmwVKzG\|7Jk}VTw,xNP{[X>oXZxFy5OR'fV^I}M,[{_)L}gW;t_b
2022-03-15 16:08:14 UTC	3828	IN	Data Raw: 77 45 71 e5 2a ee db 1f 77 35 ea 9e 38 f8 cd 63 ab 5d 78 92 68 f4 d8 2f 6e 2c 3c 37 60 96 f2 41 f2 4b 67 3c ad ba 59 3f de 56 d8 b5 d7 d8 f8 0f 4f 6f 0c c9 ff 00 14 d5 ab ea 1a a2 7e f6 79 13 7b bf cb 95 da e7 91 f3 d7 cf 9f b4 76 82 bf 0c 7c 2a fe 1d 58 e0 bd f1 04 af 1d f2 5f 40 ff 00 e9 70 ab 2e 1a 1b 8f e2 29 fd ca f3 f0 6b 0d 8e c5 39 42 16 94 b7 ed ae e6 fe d3 d8 ae 57 d0 ed af 3f e1 21 96 c6 7f 1b 68 77 f0 4c 9a a6 b2 b6 9e 65 d3 ec 47 65 8f fe 3e a4 5f 6f 9b f1 a6 fc 0d d0 ee 7c 21 a6 c6 b6 3a 9d af fc 25 7a e5 dc d6 fe 7b dd 2f fc 4b 34 f5 6d c7 e5 76 da 65 99 fb 0e 89 f5 ac df 82 77 5a af c5 5f d9 cf c9 d6 b5 28 df ca f1 64 2e fe 76 d8 bc 9b 34 83 2f e5 80 3f bc 7f ef aa 8f e3 25 bc fe 25 f8 85 77 e2 ef 06 cf 04 fa 2c 50 af 9d 1c 13 c6 9f d9 eb Data Ascii: wEqw58c]xh/n,<7`AKg<Y?VOo~y{v\|X_@p.)k9BW?!hwLeGe>_o\|!:%z{/K4mvewZ_(d.v4/?%%w,P
2022-03-15 16:08:14 UTC	3844	IN	Data Raw: c1 20 2a fa 28 af 03 87 e3 37 87 9b c4 52 43 6b e2 cd 47 c4 ba ac af f2 5a c7 b9 11 3b e7 6a f6 fa d7 5d 6a 98 b8 de b7 23 9c d2 d1 b4 dd b4 b7 4b 24 91 9f bb 19 f2 27 64 7a 37 c3 1f 87 77 5e 1c d5 36 dd 49 1f f6 7a a5 c5 be c8 d3 63 cc b2 fd e6 3e c2 bc 23 5a b3 d3 fc 33 e1 fb b9 af 35 69 ec af 74 eb b9 ac 92 44 81 a5 74 58 9b ee ec 5f 5f ef f6 af 6c f0 7f 8c 35 2f 16 6b 1a 35 c5 9c 9e 4d 93 f9 df 68 49 f6 ef 99 55 5d 46 17 ef 01 be bc 8f e2 d7 80 2c ef be 21 78 97 50 d4 ae e4 87 4d d2 f5 6f b5 dc 41 07 fa d9 a0 95 77 ed 1d 38 f5 af 3b 29 95 69 4a 4b 1d 2b 6a 9e 8b d5 59 fa e8 6f 59 ba 7c 92 ee 9f e9 f9 5d 98 7f f0 9d 78 47 c4 1f 60 b8 f1 97 99 3d c4 ef b1 ed 2c 60 d9 76 8a ab 8d cb 2f dd 6e 7d 6b a1 f8 8d 79 62 de 3e f0 9d e5 9c 1a 8a 45 71 63 1b 5c 58 Data Ascii: *(7RCkGZ;j]j#K$'dz7w^6Izc>#Z35itDtX__l5/k5MhIU]F,!xPMoAw8;)iJK+jYoY\|]xG`=,`v/n}kyb>Eqc\X
2022-03-15 16:08:14 UTC	3860	IN	Data Raw: d9 44 ea 92 c9 6a 9b 36 7b d7 59 a2 f8 7e 0d 5b 43 7b a6 bb d4 7c 3d a6 4e 8c ef 1b ed 4b 87 89 7f e5 aa 28 f9 95 6b 3a b9 96 69 2f de ba bc ad e9 7b 2d be e3 5f ab 2d 61 4d 5d 4a df 3b 1c 47 fc 29 ff 00 87 3a 3c 89 a5 2e 93 3c f7 6d ff 00 2f 53 cd 23 bf cb d7 03 20 57 61 e2 af 0a ea 7e 28 f0 76 85 a2 f8 7e ff 00 fb 11 b4 17 df a5 cf b3 66 cf 9b 38 27 ad 6b 2d d7 80 34 9b bb 09 16 fe 7f 14 5f 7d 9f 65 bc 76 33 fd a1 dd 57 fb ff 00 2f cb ee 4d 79 9e b1 fb 50 5d e9 3a e4 96 76 3e 17 d2 9e 28 a6 d8 f0 4f 7b 27 9b ff 00 7d 63 6f e9 5c 31 a7 9a 62 6a 47 d9 d4 72 71 d5 f3 3d 3e ed 8c 54 3d 8b 73 5a 74 38 ff 00 14 7e ce bf 10 f5 ed 66 fb 54 d7 23 91 2f 6e 1f 7b df 58 a7 da 22 9b 77 f7 95 0e e5 5f c2 be bd f0 6d 8d 8a eb 1f 0d ad f5 49 3f e2 65 a4 db c3 63 17 99 Data Ascii: Dj6{Y~[C{\|=NK(k:i/{-_-aM]J;G):<.<m/S# Wa~(v~f8'k-4_}ev3W/MyP]:v>(O{'}co\1bjGrq=>T=sZt8~fT#/n{X"w_mI?ec
2022-03-15 16:08:14 UTC	3868	IN	Data Raw: 51 6a 5e 46 65 e7 81 74 cd 7a fa fe 1b 1b 4b a4 b8 96 d2 e2 2b 99 3c f6 de ff 00 68 6f de 34 87 f8 c9 fa 56 2f c4 8f 80 3a bf 89 7f e1 1a 6b 3d 59 23 4b 38 63 b4 85 27 4f 91 e3 5d 9c 65 7f dd f4 af 4e 87 54 8a d7 46 83 5a bc 8f 55 4d 3d b6 cc f2 4e 8a 9f 2b 37 5f 5e 6b e7 cf 18 78 36 7f f8 5b 49 26 9b ac cf 3e 99 75 ab 43 35 8e 9d e7 b5 c3 f9 4e db da 45 55 ff 00 56 83 ee fc dc d4 65 75 2b d4 ad 35 56 6d 72 ed 7d 56 ba 04 a3 a2 7b 9d 47 ed 15 f0 7f 4a f1 d7 c4 ad 77 5e d7 b5 64 b2 d0 b4 1b b8 61 b8 81 d3 7f 9c a9 04 64 ee 6c 8e 30 bb 76 ff 00 16 ea c3 f8 53 f1 ea e7 e3 4f c7 af 10 f8 6e 4b 0f 23 c3 8d a4 de be 9f 63 f2 bc 50 cb 0c 7f ba 7e 06 3e ea 61 71 c0 ac df da 9b c7 d7 3e 19 f8 8d e2 bf 26 c6 4b d8 ae 35 66 4f 22 34 f3 51 f6 af f1 af f7 6b 53 f6 59 Data Ascii: Qj^FetzK+<ho4V/:k=Y#K8c'O]eNTFZUM=N+7_^kx6[I&>uC5NEUVeu+5Vmr}V{GJw^dadl0vSOnK#cP~>aq>&K5fO"4QkSY
2022-03-15 16:08:14 UTC	3869	IN	Data Raw: 58 26 ea 24 e3 66 a1 79 24 95 f7 69 6e d9 2e ca aa 49 eb 7d 4f 19 fd b2 3c 4d aa ea 16 be 13 d2 e6 df 3d dc 56 3f 68 be 92 34 d8 ef ba 42 d1 a9 03 fb a9 5d dc 9e 0d d2 af 3f 66 db 1f 1c 69 be 63 bd d6 a7 e4 db cf 22 32 79 d0 24 1b 5b e5 f6 7a e4 3f 69 eb ef ed 8d 63 5d b5 f2 ed 52 2d 3a e3 7c 57 50 6e 6b d4 da a5 76 ed 1f f2 cb f7 7c b7 63 5d 67 c0 dd 7a 51 f0 32 4b 1d 6a 79 24 4d 06 2b db eb 4b 59 3e 78 b6 bc 67 27 fe fb 65 ae 8e 6f 65 93 e1 ea 28 d9 a7 b2 eb cd af f9 7a 13 ca 9d 69 2e 85 ad 5b c1 be 13 d1 fe 17 ff 00 c2 49 a5 eb b9 96 c3 cb b8 b8 8e d5 15 e2 99 b6 f1 b8 75 e7 a5 79 d4 df 11 2f be 20 c1 1c 6b 76 8e d6 e9 be 1f 2f 4b 54 74 db fe da fc db 7f 1a f3 2f 0e dd 5d f8 86 c7 52 d3 a4 82 7b 58 a5 b1 8f ec 33 ef d8 9b 96 44 dc d2 af f1 29 4d ff 00 Data Ascii: X&$fy$in.I}O<M=V?h4B]?fic"2y$[z?ic]R-:\|WPnkv\|c]gzQ2Kjy$M+KY>xg'eoe(zi.[Iuy/ kv/KTt/]R{X3D)M
2022-03-15 16:08:14 UTC	3885	IN	Data Raw: 77 fb 52 4f 33 c4 1a 5d c2 c2 96 37 5f ea 91 97 31 e0 f6 7c fd ee 6b 27 41 fd 92 f5 3f 18 26 ad e2 6f 16 78 fa c7 4b d3 ee 9d 53 fe 25 4f f6 e7 48 97 97 19 f9 63 43 f9 d7 d0 be 20 d3 67 d7 ae 34 dd 42 4f ec b9 ed 35 4b 49 35 6b ed 4a 7b 55 7f 26 da 28 f2 f2 6d fe 29 3e e8 5f f7 eb e2 ab cd 7b c4 7e 38 8e fe d7 fb 4e 79 ac 74 d8 64 fb 26 9c 89 fe 8e 9b 7e 6d 98 1c 7d cf 5e b5 d3 94 d5 c4 d4 8c eb 52 6a 17 7b c9 5e cb 4e 8b bf 9f de 67 56 9a 52 4a 4a e7 ae 4d e0 5f 06 78 2b e2 c7 86 b4 bd 1f 52 bb 7f 0d de 68 71 dd ff 00 6a ea b1 ef fb 67 9b bf 66 cf ee 2f dd 50 d4 eb 8d 7b 51 d7 be 07 f8 96 1b c7 81 3c dd 5a 3d 2e e2 ea 4f e0 68 9b 74 19 c7 f0 ff 00 0d 4e df 0e d7 c2 7e 26 f0 f6 b9 1d bc 9f d9 9a 7f 86 34 e7 48 2f b7 4a 93 5e 4d 6d 96 89 15 ba 63 7e ed a3 Data Ascii: wRO3]7_1\|k'A?&oxKS%OHcC g4BO5KI5kJ{U&(m)>_{~8Nytd&~m}^Rj{^NgVRJJM_x+Rhqjgf/P{Q<Z=.OhtN~&4H/J^Mmc~
2022-03-15 16:08:14 UTC	3901	IN	Data Raw: c5 ef 5f 4b 7c 2d f8 a1 16 8f a1 f8 cf 50 d2 e0 d4 b5 4f b5 5a 7d 9e de c6 ed fc df b4 ef 53 1c 92 cb c7 bf 3d ff 00 87 d6 be 9a be 0e b6 53 53 f7 12 71 d9 3b 59 27 ae 9a 25 65 d4 e6 a2 e1 5e 3f bc 5d ed d6 c7 cc 3a 7d c5 a6 89 ac df 5a c9 e5 ea 09 2b f9 29 3d 8b b6 c9 99 7a b4 6d fc 6b fc eb 42 eb e2 47 87 a1 d4 74 98 ee 3c 21 25 b4 db 56 1b 8b e9 ef 5a 5d 9f 36 1b cb 8f 85 5f f8 16 e3 55 7c 53 e3 9f 16 78 7e ee 0f 0f 2e cc aa aa 24 1f 61 54 95 3b e0 36 dd df ad 7d 53 fb 3e c7 a4 78 df e1 5e 93 aa 6a da 6d ad b5 ee 9b e2 49 ae f5 14 ba 81 7e f2 d9 17 dd cf f0 9d 99 db 5f 49 8c ad 0c 35 2f ac d5 87 34 5a e9 2e ff 00 76 87 3c 69 f3 b6 a2 f6 3d 4f e2 25 9d a4 fe 0e f8 7b 63 1e a5 07 f6 9a ba cb 33 be d4 b8 f2 13 e5 49 71 ee bf 9d 79 ff 00 8f 3c 51 e1 ad 3f Data Ascii: _K\|-POZ}S=SSq;Y'%e^?]:}Z+)=zmkBGt<!%VZ]6_U\|Sx~.$aT;6}S>x^jmI~_I5/4Z.v<i=O%{c3Iqy<Q?
2022-03-15 16:08:14 UTC	3908	IN	Data Raw: c7 d2 b7 3e 08 cd a8 69 be 19 f1 2c 96 f7 7f 62 b7 b7 79 25 bb 9e 04 54 96 68 bc bf bb e6 7d e1 f3 62 b7 75 29 d1 a1 2e 65 a6 9a 79 ea 72 6b 51 c5 2d cf 2f f1 b5 ee a7 e0 df 8a 07 c6 9e 28 b8 f3 ae 25 96 4b 7f 2f 4d 87 64 5e 52 2e c3 17 a8 51 d7 35 f3 ff 00 ed 25 f1 62 5f 8b ff 00 10 3e d9 fe ba ca de 25 b7 b4 f2 7e e6 df f6 7f 1a f6 2f 1e 5a c4 d7 11 ea d6 f7 72 3f f6 dd bb 5b a4 1b f7 ec 94 e0 3f bf 6a cd f8 c1 f0 5f 43 f8 53 af e9 b6 3e 0f d6 a4 d5 35 8b ab 78 ff 00 b5 b4 6b b8 16 58 92 5d bc e1 ff 00 de fe 1e ab fd ea fb 8c 9e a6 1e 8d 4a 75 ab 2b d5 e5 71 5a 59 24 b7 e9 a5 b6 bf e4 61 57 9a 2d a8 ad 3a 9e 23 e2 2d 3e c7 c4 fa b6 9b 65 a4 41 fd 91 61 69 6b 1d bc 49 30 6d f3 4b b7 f7 92 bf fb 4c f5 e9 5f 0e 7e 13 ea 7e 1a 78 35 6b 88 12 eb 4c 96 56 b7 Data Ascii: >i,by%Th}bu).eyrkQ-/(%K/Md^R.Q5%b_>%~/Zr?[?j_CS>5xkX]Ju+qZY$aW-:#->eAaikI0mKL_~~x5kLV
2022-03-15 16:08:14 UTC	3924	IN	Data Raw: 4f 3b ac 5f 7b e6 f2 d8 f7 aa ce 31 72 c2 e1 94 70 f5 1b 9c 9d 95 ad af 7f e9 1c 51 94 a7 37 7d 11 ce db fc 01 f0 16 ad 6b 3f 88 b5 ed 36 e9 2c 6d 65 d8 92 4f 3f d9 e5 bc 65 e0 70 9f c1 59 ff 00 07 fc 23 17 81 b5 cd 5a d7 c3 b7 f6 3f e9 93 37 d9 e0 9f f7 b7 16 db bb 09 76 fd df c2 bd 1b e2 b7 8b 3c 27 a0 e9 b0 6a de 2e 92 7d 3a c9 61 5f ec e8 23 7f f4 bd 43 bf ee ed ff 00 e5 9a 7f d3 47 eb d9 6b c7 fc 37 f1 ab c0 f7 1a fc f7 11 ea d6 be 1d d3 ee 93 63 c1 f6 26 8a e1 d7 fb ad 33 48 4f e9 5c 90 fe d2 ad 86 94 1f 33 85 bd 7c fe 47 67 b1 84 1a 9c dd bf 32 e7 ed 05 f0 e6 cf 52 9b 53 bc b5 be b1 9f 52 97 4e 86 d3 fb 2a 79 da e2 e1 e7 5c 6e 9d 9a 31 b7 72 f6 e7 9a f9 8f c2 ba 1e a7 e1 cf 18 d8 da dd e9 92 5d 5d 2d c2 a4 36 36 af b2 e1 e5 fe 1d 9d f7 6e e8 2b e9 Data Ascii: O;_{1rpQ7}k?6,meO?epY#Z?7v<'j.}:a_#CGk7c&3HO\3\|Gg2RSRN*y\n1r]]-66n+
2022-03-15 16:08:14 UTC	3940	IN	Data Raw: fe f0 fd 0c 93 4f d4 bc 47 f0 af 56 d5 35 0b b8 ef 6e 2e 3c 20 d6 97 72 41 fe a9 ef 2d e7 8f 74 8b fe fa fc f5 87 e0 5d 6a db c2 3a 3f 85 f5 2d 3a c2 d7 ec fa 95 bd bf f6 a5 f3 ce a8 f7 92 5b af 97 14 0b 9f ba db bf f4 0a a5 fb 20 f8 b2 2d 7b e0 ef 8b 3c 37 78 9e 7f fc 49 be dd 6f e5 bf f0 ed d9 20 cf f7 b8 4a df d1 7c 21 e0 5d 6f e1 b4 7a 3c 9a b6 95 63 65 2d f4 77 c8 9f da 2a ef 0b 23 06 6d de 66 df d2 bf 22 c5 50 6a 4f 0d 3d af ad 96 9d 77 4b ef 4b b9 ec ce 4e a4 39 e1 d5 7f 91 e7 bf b4 07 c6 6b 9f 0f f9 fe 15 5b b8 37 df fe f6 df fe 9d 95 f6 15 8d bf bd f3 2f 5f f7 6b 93 87 e2 04 fe 07 f0 8e 9a c9 f6 1b dd 76 d6 e2 de 54 b1 ba 93 f7 b3 49 e7 e5 a4 ff 00 74 26 dc 7e 7d ab 27 f6 b2 f8 1f ae 5c 6b 09 e2 6b 89 2d 2f 74 f9 5e 34 87 55 d1 d3 7d a6 dd bf bb Data Ascii: OGV5n.< rA-t]j:?-:[ -{<7xIo J\|!]oz<ce-w*#mf"PjO=wKKN9k[7/_kvTIt&~}'\kk-/t^4U}
2022-03-15 16:08:14 UTC	3948	IN	Data Raw: a5 58 b9 59 38 df e6 9f fc 39 e4 7f 09 fc 3f 3f c4 6f 0a df 6a 5a a6 b5 75 a0 eb da 5c 2c 8f 7d 3c fb de e5 b7 7c 83 ca fe e9 1f c5 5e 89 f0 17 4f d6 fc 55 e2 3f ec 1d 7b 4d d3 92 58 ac 64 d5 2c 6f a7 b2 f9 e6 da c1 47 cd 9e fb aa ae 9f f0 7b c3 9e 05 f0 ac 7e 0d b8 d4 bf e2 71 2b ad ce a7 75 f2 fd ad f7 7f cb 14 7f e1 54 f6 ad dd 53 c5 1a ac 50 69 ba 4f 87 f5 d9 f4 bb 8b 2b 4f b0 da 5d 41 1a f9 a9 17 fb 5c 7c dd 39 af 94 c5 62 28 4a a4 d4 7e 09 3b 2d 2d 65 dd 3d ed 7e 9b 68 75 d9 4a 94 3d a4 6d 25 ab f4 ba d3 ee fb ae 67 78 8b f6 89 d3 3c 29 e1 2b f9 35 28 e3 b5 f1 15 ad c3 5b c5 63 f3 3a 3e 1b 1e 62 7f 5a f2 1f 0a fc 5a f0 e7 c4 4d 72 ee 6d 5b c5 13 da eb 13 db b4 49 26 ab 6a be 52 37 fc f3 4e 76 a8 ff 00 6b ad 79 8f c6 0f 06 f8 bf 41 be bb 9b c4 50 4d Data Ascii: XY89??ojZu\,}<\|^OU?{MXd,oG{~q+uTSPiO+O]A\\|9b(J~;--e=~huJ=m%gx<)+5([c:>bZZMrm[I&jR7NvkyAPM
2022-03-15 16:08:14 UTC	3964	IN	Data Raw: 84 db ed d3 dd 58 42 b6 9a 8b fd 97 ee 44 ad f3 04 df fc 5e f5 e2 9e 1b f1 56 a5 f0 8f 55 be bc f0 cc f2 27 84 b5 2b 8d 90 ea 5b 3f 7b 6c de 9b 97 fb cb f7 97 b8 af bc c1 d7 ad 1c 34 a9 ba 7c b2 d9 5e f6 9a b7 5f 3f f2 39 31 56 ac a1 53 9a ee ca eb f9 5f 97 91 f4 14 3f 0f 75 3d 4b c5 96 90 de 49 26 a1 a9 5c 58 f9 d6 93 6c d8 89 b7 05 7e 7c 8d bf 2e ea f6 bd 53 50 96 e3 f6 65 9e 49 93 f8 e6 d9 e6 3b 3f cb f8 d7 ce df 0c 7e 26 6a 50 5c 6b ba 2d 9d da 6a 17 b6 11 49 71 63 24 7b 91 ee 76 f2 f1 b6 47 dd c5 7a 7f 84 bc 6b 7d e3 6f d8 f2 ff 00 54 d4 3c cf b4 35 f5 ea 7c ff 00 c1 86 e9 5f 03 88 c3 d7 8d 19 f3 e8 a3 c8 bf f0 29 c6 d6 47 af 46 b4 25 8a a0 ef ef 37 35 f7 41 bd cf 0c 93 e1 8f 80 bc 45 f1 37 c5 1a 66 a9 05 f6 9f 2c fe 5b e9 8f a5 c1 f2 43 3b 60 b9 6f Data Ascii: XBD^VU'+[?{l4\|^_?91VS_?u=KI&\Xl~\|.SPeI;?~&jP\k-jIqc${vGzk}oT<5\|_)GF%75AE7f,[C;`o
2022-03-15 16:08:14 UTC	3980	IN	Data Raw: 9d bf e1 1e fe cb d4 bc ed 92 c9 a5 24 9e 52 2f 6f 94 96 ae cf e1 ef c5 cb 9f 84 ba e2 68 ba 87 97 aa 78 7f c9 f2 66 d3 b5 1f e0 5f ef 26 7e eb 7b 74 35 c8 68 5e 09 f1 d7 83 7c 3a fe 25 f0 f4 f3 c3 e1 d8 be 7b 8f b7 59 6c 47 55 fe 2c 7c c5 a8 f8 ad e1 1f 10 bf 87 34 1f 1e 6a 96 1f 62 b0 d7 93 cd b7 d9 fc 6b ea 05 63 52 8d 2a 95 9d 26 d3 a5 27 a6 b7 6a 5d ac d6 9e 5a b1 d4 a9 ed 6a 39 46 36 ea ad f8 9e 9d 36 a1 f0 df c7 31 dd e9 36 72 26 97 6e d3 47 2c d2 69 ae df 67 9a 26 6f 9b 6d b4 df 34 72 0e ea ae c9 e9 5a 1a 87 c5 41 f0 fb 5c bf 85 b5 29 13 4c b5 75 86 d2 eb ec ab 2c bb 57 ee 6e f5 f9 6b e6 bf 87 1a 93 68 3e 34 f0 f5 f4 89 f6 dd ba 9c 3b fc cf b8 ea 5b 69 4f fb e5 ab d6 bf 68 4f 08 b7 85 fc 4d e2 1d 16 df e4 4b 5b b6 44 ff 00 77 75 72 63 72 da 7f 58 Data Ascii: $R/ohxf_&~{t5h^\|:%{YlGU,\|4jbkcR*&'j]Zj9F6616r&nG,ig&om4rZA\)Lu,Wnkh>4;[iOhOMK[DwurcrX
2022-03-15 16:08:14 UTC	3988	IN	Data Raw: b8 15 36 37 6f be 58 9c fd 6b a1 f8 4b f1 b2 7f 89 90 6a 6d e2 8b 08 3e cf 13 c9 17 ef 2e a0 8a e1 15 fe ec 91 3b 7d d7 1f f7 c9 af 94 af 35 2b 39 75 48 ec 66 d3 6f ae ae 1b fe 59 a2 7c f5 ec 7f 09 7e 06 f8 5f c6 13 f8 87 54 b9 9e eb 57 b0 d2 6d e3 97 fb 2a d7 e4 97 73 7d e8 f7 f4 76 1b 77 05 1d 6b e2 71 99 6e 03 0f 49 d5 70 70 96 8e f6 bf 5e 8a e9 6b 7e ba 1a d1 c4 d4 72 5a 5d 23 ec 5b 5f 11 59 b7 84 ae e3 8a fe 3d 45 34 d9 6d 2e 6d 35 18 1d 5d 26 89 2e 63 57 0c 54 e3 cc 42 7e 65 ff 00 6a bc d3 c5 df 1b af bc 07 3e b3 e1 7d 0e c7 7d de 9c f7 1f 68 92 44 5d 8e cf 27 ee c2 96 fe 10 9f 37 4a f2 5f 84 be 2a b6 d0 fc 69 e2 8f 05 e9 9a ea 47 e1 7f 10 69 cd 2e 97 04 9b a5 d9 3f 98 3c b8 9b 8f dd 49 f2 b6 ef f8 0d 6a 7e d2 ba 2c f7 fe 3b d7 6c e1 8e ea 0b ab a8 Data Ascii: 67oXkKjm>.;}5+9uHfoY\|~_TWms}vwkqnIpp^k~rZ]#[_Y=E4m.m5]&.cWTB~ej>}}hD]'7J_iGi.?<Ij~,;l
2022-03-15 16:08:14 UTC	4004	IN	Data Raw: 32 f1 fe 9b af 4d e1 a8 f5 bd 0a ce 65 47 82 3f 2d 11 d5 5b fe 9a 11 be b3 3f 69 ed 7b 57 d2 fc 41 a2 df 68 b3 cf 3b d9 f8 7a c2 68 bc bf 91 dd 55 7e 6e 3d 4a ff 00 0d 7b 2e 97 f1 02 7f 86 be 18 d3 74 df 11 5d c9 ff 00 09 13 69 df db 33 69 5b 3e 7d 3e d9 9a 35 58 9d bf e7 b1 32 6e 2b fc 3d 2a 60 ea 7f 1e ad e4 9d d7 9a d8 5e c1 46 ea 2e d6 3b eb 8f 07 da 5f c7 fe 95 04 89 12 ff 00 cb 0d eb fc 3f ee d3 6e bc 1f 03 41 3d bd 8d a5 8e 97 14 b0 b2 5f 5d 49 06 fd f0 7f 12 f5 15 e4 3f 1e 3f 6a 46 f8 73 e0 7d 37 56 d2 ed 24 ba ba bf 97 fd 5c ff 00 23 a4 4a db 5f fe 05 9e 95 ca 68 3f b6 2e 91 f1 3a c2 4f 08 dc 5c 4e 9a 67 88 ec 66 d3 2e 35 59 d3 63 e9 93 cd 1e d8 f7 32 e3 72 16 a5 47 09 ed 6d 52 10 97 23 bf bc 92 e9 bd fa af 21 f2 de 4e 37 5c dd 9f 53 3f f6 b0 b8 Data Ascii: 2MeG?-[?i{WAh;zhU~n=J{.t]i3i[>}>5X2n+=*`^F.;_?nA=_]I??jFs}7V$\#J_h?.:O\Ngf.5Yc2rGmR#!N7\S?
2022-03-15 16:08:14 UTC	4020	IN	Data Raw: e2 6a ff 00 b3 37 84 ee ae f4 98 74 eb ad 2f 5c 92 de ee df 67 c8 ff 00 bb 46 f3 19 7f 84 95 ea 3d 6b 17 e3 f5 c7 86 6e 3e 2a 6a 4b aa 69 50 78 a1 ee 9d 5e da c7 ed 4d 12 6e 78 c1 dd ba 3a eb a1 d4 2d 3c 4d f0 17 c4 bb 6c 27 d3 f5 0b 5d 7e 34 be 82 e9 36 3e e6 8b 6a b1 ff 00 68 af 5a 87 e2 17 83 ec 7c 5f e3 89 f6 cf 07 cb a7 da 45 77 e4 4e a9 71 ff 00 1e c9 fb 98 b3 fc 5b 97 9a f9 b8 56 8d 3c 53 aa d7 2e bb 27 e4 bf 0f f3 46 d5 63 ce 9a 8d 9a 76 7f 82 ff 00 23 c1 ef 3e 33 78 17 e1 b6 a5 24 7e 13 f0 2d ad d5 fc 7f ba 4b ad 47 51 9e e2 de 16 ef b5 38 df cf a9 af 28 d4 bc 59 aa f8 d7 c4 52 6a 5a 85 db dd 6a 17 4f f3 bf f4 ff 00 64 7a 57 d3 3e 17 fd 88 6e fc 47 a5 26 ad 75 04 fa 45 bd c5 c3 79 29 7d 1e c7 f2 13 ef 4a c3 f8 58 b7 dc 5e a7 ef 1d a2 b4 3c 23 f0 Data Ascii: j7t/\gF=kn>*jKiPx^Mnx:-<Ml']~46>jhZ\|_EwNq[V<S.'Fcv#>3x$~-KGQ8(YRjZjOdzW>nG&uEy)}JX^<#
2022-03-15 16:08:14 UTC	4027	IN	Data Raw: 1e b5 63 a9 6a 2f e1 cb c7 59 6e 34 77 bd 6d 89 d9 a2 dd fc 35 d4 47 f1 53 c2 5e 28 be f1 0e b9 a5 f8 5f f7 d6 1a 1c d3 3c 91 dd 48 8f b9 a4 48 fc a2 8d bb f8 5b ef 0a f4 27 c3 35 a8 d9 c9 5e 36 e9 6d fb 3b ec 27 52 9e a9 3d 4f 42 97 c2 fa 97 c5 cd 4b 52 9b 5a 83 4e 87 c3 5a 6c bb ed 23 b5 dc 97 d3 33 2f 57 fe e2 ed fc eb 43 c2 3f 08 3c 3f e0 fb 1b 4b 78 ec 27 79 6f ec 5a d1 fc fb a6 74 48 99 b7 e7 6f f7 fd eb c4 fe 1a eb da e7 8f 35 cd 66 fb c2 f3 bd 96 bd 05 bc 9a bd f5 f4 d3 b2 6f b6 8b 19 83 cb 3f 24 82 bb 0b 7f 8e 8d 65 ae 08 7c 49 3c fa 7e 8f 6e f3 22 5f 41 03 3e ff 00 fa 66 a2 bd 0c 56 07 1d 4a 2b 0f 87 76 49 2b c5 79 79 75 bf e3 d9 19 2e 49 3e 66 be 67 65 f1 47 e1 fa f8 aa c5 2f b4 b8 24 d5 2e ac f7 25 a6 9d 3d d7 95 6e 9b 5b 7b 32 20 fb ce 4f ab Data Ascii: cj/Yn4wm5GS^(_<HH['5^6m;'R=OBKRZNZl#3/WC?<?Kx'yoZtHo5fo?$e\|I<~n"_A>fVJ+vI+yyu.I>fgeG/$.%=n[{2 O
2022-03-15 16:08:14 UTC	4043	IN	Data Raw: 16 96 bd 63 6f 25 ac 10 69 7e 1c 58 77 a6 9d a7 4f b2 e2 d9 57 fe 59 94 e3 e7 fa 57 b1 69 3e 05 d3 e5 d6 3f b7 35 48 e4 d5 35 d7 75 95 2e af 9d a5 fb 33 2f 78 81 fb 99 ad 4d 4b 4b 5d 49 3c cb e9 23 82 d2 df 74 d7 13 ce fb 11 17 d5 ab e2 f1 9c 40 eb e2 a9 d6 54 d4 a5 d9 ad 17 a2 ef e6 fe e3 b5 72 d1 a4 e8 e1 f6 7b b7 f1 37 fa 2f 2f bc f9 13 41 f8 a9 a9 f8 7f c3 32 43 a7 ea de 20 82 c9 bf e3 ef 51 d4 b7 5c 3a 32 ff 00 0a b6 76 c7 e9 eb 5d 47 c3 3f 8c 16 3e 25 b4 f2 7c 49 e2 5d f6 8d 77 26 fb 59 d3 7d c5 b6 f8 f6 a9 b6 b8 cf c9 cf 3f f0 1a 83 c7 96 ba 47 ed 1d 7d a9 68 ff 00 0c fc 37 3c f7 16 73 79 5a 8f 88 23 be f2 6d dd 7f bf 70 ad 85 45 f4 63 fd da e4 35 8f 85 be 10 f8 55 e1 59 fe cf 77 75 e3 ff 00 14 5a ff 00 c7 df f6 57 c9 a7 d9 6d 5d c7 2b f7 e5 ff 00 Data Ascii: co%i~XwOWYWi>?5H5u.3/xMKK]I<#t@Tr{7//A2C Q\:2v]G?>%\|I]w&Y}?G}h7<syZ#mpEc5UYwuZWm]+
2022-03-15 16:08:14 UTC	5261	IN	Data Raw: 63 b0 2a a6 2d d1 7f f2 ef 96 5a 76 d6 f7 3b a8 4f da e1 a3 3a 9d da fc 4f a4 3c 51 fb 5e 5b 6b 9a 6b e8 de 16 8e 6d 0b 45 44 ff 00 53 1b ec 67 5f 59 1f ef 3b 57 96 78 8b e2 35 f7 8a 34 64 85 a4 f3 35 3d 4a 5d 9e 67 f1 f9 7d b9 af 2f f1 17 c3 d9 56 47 68 d1 2d a2 57 fd d4 ff 00 6e 5f df 2f 6f 93 aa b1 3d 33 56 3c 1a ba 9e 9b aa 69 8d 34 12 6b 5a 3a ba dc 7f a2 ff 00 c7 c2 2e ec 35 6a f2 bc 2d 95 68 4b 99 ad 75 7f 87 6f 96 86 55 2b 56 97 b9 6b 45 74 5b 7d c7 d9 ff 00 b3 6f 8f 3c 3f a8 ea da 2e 83 62 f0 4d 2d af c9 f6 a4 45 7f 3a 55 53 bf 6f f7 50 63 ef 7f 15 7c 5d f1 c3 4f f2 3e 2f 6b bf f3 c9 b5 69 bf f4 65 7d 1f f0 bf c5 9a 1f c3 ff 00 18 78 22 e2 4d 5a d7 54 b4 b3 8a fd ee 27 b1 f9 e5 f2 9a 77 f2 16 45 ec ca bf 37 b6 ed b5 f3 c7 c5 8d 5a c7 5b f8 9b 77 Data Ascii: c*-Zv;O:O<Q^[kkmEDSg_Y;Wx54d5=J]g}/VGh-Wn_/o=3V<i4kZ:.5j-hKuoU+VkEt[}o<?.bM-E:USoPc\|]O>/kie}x"MZT'wE7Z[w
2022-03-15 16:08:14 UTC	5268	IN	Data Raw: 58 7c 3f 67 79 68 93 42 f3 cd fd f9 36 7c 9b 7f bd ed 5a 16 76 ed e1 5b e8 fc 99 3f d2 36 6f 47 fb ea 9e d5 df 69 7f 0a 64 d0 fc 33 e1 e9 b5 8d 6a 7d 3f fb 71 1a f9 2d 52 16 78 9e cd 1b 03 cc fa f5 af 64 f8 53 fb 27 ab 5f 7f c2 45 e2 8f 10 e9 da a6 85 67 b6 54 b5 d2 a7 6b 89 66 dd f7 23 e9 b5 09 ab c5 66 74 28 c6 4e a4 fd dd 7e 7e 87 45 3a 72 97 c2 8f 25 f8 3f f1 ab 52 f0 37 8b 9f 5c d5 2d 24 d7 ae 36 6c 8a c7 7a c5 16 ef 57 28 3e 65 1f dd ef de be 91 f1 67 ed bc de 12 d2 e3 dd e1 3b ab dd 6b 52 8b cd b7 82 4d c9 6f fe f2 bf f1 27 d3 f3 ae eb c0 3f b3 9d ad ae bf 27 88 2f 1f 4a d2 f4 db 59 bf d1 f4 74 86 3f b3 f9 ab f7 56 59 39 66 f9 ba f7 35 f3 b7 c7 2f 02 eb 96 1e 2e d4 ae 3c 65 77 1f f6 ee a5 b9 ed df 7a ff 00 c7 b7 fc f4 da 33 e5 47 d9 56 be 3e 53 cb Data Ascii: X\|?gyhB6\|Zv[?6oGid3j}?q-RxdS'_EgTkf#ft(N~~E:r%?R7\-$6lzW(>eg;kRMo'?'/JYt?VY9f5/.<ewz3GV>S
2022-03-15 16:08:14 UTC	5284	IN	Data Raw: a5 e8 70 6b d6 ba 64 f6 5a 13 3f d9 d2 77 da ed 34 ac a1 f0 4f fb bf 35 5e b3 f1 34 5a 5f 86 f5 6d 1f 54 bb 9d f4 2b c4 59 ae 2d 7f e5 92 4a 8d fb b9 7f de 1d 3d eb ce 74 e8 3a 91 74 e3 cc a2 f6 dd f6 d2 dd 7f e1 89 69 ca 2e 2d d9 9c 7e 87 25 cc d1 c8 da b4 71 ff 00 65 7d c7 9e 4f e3 ff 00 77 de bd 39 7c 37 7d 61 35 af fc 22 7f 65 7b 2d 4a df ce fb 54 7b a5 f2 7f e9 99 cf 2a 43 57 93 eb 4d 7d 2c c9 71 66 e9 3d 8e df f4 68 63 fb 88 bf ec 57 ad 7c 0f d6 97 54 f0 77 89 6c 6f 1d 2c ae 1b 6a 7e fd fc af 95 94 fc a3 eb 53 99 73 d3 a3 f5 88 5a c9 a4 d7 4d 5d b5 5d d0 e9 c9 41 72 8e b3 f1 86 af 6b e2 09 f4 7f 17 5f ff 00 68 ef 4d ef 24 8f e6 cb 0d 7a d7 87 74 ff 00 09 ea 90 c1 6b af 47 74 9a 55 d3 fe ea ea d6 76 fb 23 cb f8 7d d6 f6 35 f2 1e a9 fd a1 1f 89 12 18 Data Ascii: pkdZ?w4O5^4Z_mT+Y-J=t:ti.-~%qe}Ow9\|7}a5"e{-JT{*CWM},qf=hcW\|Twlo,j~SsZM]]Ark_hM$ztkGtUv#}5
2022-03-15 16:08:14 UTC	5300	IN	Data Raw: d5 fe ef 1f 37 14 51 5f 3d 18 42 9d 29 54 a7 14 a5 19 f2 dd 25 7b 5f a9 f4 35 30 d0 94 29 b6 de b1 bf cd 1d c6 9f f1 53 41 f1 15 8e 9b e0 7f 16 4f 26 a1 e1 f6 48 6c 6d 35 58 f6 fd a3 4f ba 55 03 cc 5f fa 67 bb ef 57 ac 7e c6 3f 0a 75 0f 03 7c 76 f1 9f 86 75 87 47 b8 ba d0 e6 48 ae a3 93 e4 ba 83 cc 47 59 57 fb cb b4 51 45 7c d6 69 4d 50 a4 f0 f0 f8 6a 45 b7 ea 9a d5 76 bd f5 3c aa 3e fc a3 51 ee f9 97 fe 4a d9 cd fc 7a f1 27 89 e5 f8 af e2 8d 5b c3 7e 2b 87 4b d3 ee 1e 34 8a 0d ec ff 00 ba 4f 93 3f 2f dd f6 c5 79 5d bc 77 97 17 71 de 5e 6a 6f 35 bd d6 d4 b8 91 fc c6 47 f9 b9 56 3e f4 51 5c 99 7c af 86 8d 92 4e cb 5b 2b ec b7 76 38 3d a4 db bb 7f d5 cf 6e bc f8 63 e3 1d 43 e2 4f 85 ee be 1f c1 1c fe 1a d2 66 85 2d d3 cf 58 a2 f5 96 42 87 91 bd b7 57 45 f1 Data Ascii: 7Q_=B)T%{_50)SAO&Hlm5XOU_gW~?u\|vuGHGYWQE\|iMPjEv<>QJz'[~+K4O?/y]wq^jo5GV>Q\\|N[+v8=ncCOf-XBWE

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.3	49932	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:14 UTC	1902	OUT	GET /cms/api/am/imageFileData/RWOVPV?ver=22fc HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:14 UTC	1919	IN	HTTP/1.1 200 OK Last-Modified: Mon, 14 Mar 2022 22:24:56 GMT Access-Control-Allow-Origin: * X-Datacenter: northeu X-ActivityId: 90ac80fa-075f-446d-8dd4-2419f28159ba Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWOVPV?ver=22fc X-Source-Length: 1863545 Content-Length: 1863545 Cache-Control: public, max-age=368195 Expires: Sat, 19 Mar 2022 22:24:49 GMT Date: Tue, 15 Mar 2022 16:08:14 GMT Connection: close
2022-03-15 16:08:14 UTC	1920	IN	Data Raw: ff d8 ff e1 17 d3 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 31 3a 31 31 20 30 36 3a 35 37 3a 32 33 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop 21.1 (Windows)2021:11:11 06:57:238"
2022-03-15 16:08:14 UTC	1954	IN	Data Raw: 6a dd bb f4 ce 69 bd db 7d b4 ff 00 da af 4b f9 b6 7f 3f fe 95 36 39 b3 13 1a d7 e5 da 2c ba cb 1a ef 49 ae 73 eb 65 b6 0f 4f ec f5 da 21 db 6d a6 cf d1 63 fa 7f e8 b2 3d 3f d2 a0 d9 ff 00 8a 6a 3e 0e e7 fa 57 f8 5f fc 0f f7 7f e0 55 9e b5 fc c6 6f 3f 44 7d 1f 8f f8 6f f8 1f fd 11 f6 94 de 9a 2e eb ab 56 fe a1 6e 2f 4f 36 b7 75 6c 6b d9 ba b9 36 56 d2 c7 30 1a b1 29 af 73 f7 b5 9f a0 b7 7f e8 e9 d9 ea 7f 37 ef 41 c1 cc 77 50 bf 22 ea 45 ce e9 f4 d2 c7 81 50 71 2f 75 85 cc 6d 55 bd e6 bc bb 76 d6 cb 29 f4 ff 00 c3 fa be a7 fa 1f 56 ff 00 e6 64 ff 00 3b fd 2e ef fa 81 fc c7 fd d6 ff 00 b8 bf f0 fe 92 a9 97 fd 29 9f ce 76 e3 fa 4f f3 38 9f d2 ff 00 ee cf fd cc ff 00 82 f5 50 8d ff 00 04 9d bf 36 f6 2e 35 39 8f 19 14 1a be cb 63 8b 9c c1 ed 8b 24 b5 8f 7d 6d Data Ascii: ji}K?69,IseO!mc=?j>W_Uo?D}o.Vn/O6ulk6V0)s7AwP"EPq/umUv)Vd;.)vO8P6.59c$}m
2022-03-15 16:08:14 UTC	1986	IN	Data Raw: 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 34 35 30 33 30 36 46 35 36 42 32 42 30 30 37 45 45 41 36 35 43 43 34 41 36 44 45 37 43 42 38 33 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 30 3a 35 38 3a 32 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 5f 43 72 6f 70 73 5c 45 64 67 65 Data Ascii: 2-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape450306F56B2B007EEA65CC4A6DE7CB83.psb saved 2016-07-26T10:58:27-07:00 File C:\Users\v-lizagh\MS\Windows10\Edge\_Crops\Edge
2022-03-15 16:08:14 UTC	2021	IN	Data Raw: 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 37 54 31 32 3a 32 33 3a 35 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 2d 47 61 72 64 65 6e 61 50 61 73 73 49 74 61 6c 79 5c 43 72 6f 70 73 5c 42 69 6e 67 2d 61 67 65 5f 49 42 4b 2d 34 30 39 30 31 35 38 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 Data Ascii: aming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2016-07-27T12:23:59-07:00 File C:\Users\v-lizagh\MS\Windows10\Bing-GardenaPassItaly\Crops\Bing-age_IBK-4090158_1920x1080.jp
2022-03-15 16:08:14 UTC	2181	IN	Data Raw: 76 65 72 5c 5f 4d 53 52 65 77 61 72 64 73 5f 41 63 71 75 69 73 69 74 69 6f 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 35 30 37 31 35 33 39 35 5f 31 39 32 30 78 31 30 38 30 35 42 45 37 32 39 44 38 42 39 42 31 36 34 34 36 44 44 34 32 46 45 31 31 41 41 46 37 39 44 45 46 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 39 2d 31 38 54 31 33 3a 30 37 3a 33 35 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 39 2d 32 33 54 31 34 3a 34 32 3a 32 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b Data Ascii: ver\_MSRewards_Acquisition_GettyImages-450715395_1920x10805BE729D8B9B16446DD42FE11AAF79DEF.psb saved 2016-09-18T13:07:35-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2016-09-23T14:42:27-07:00 File Lock
2022-03-15 16:08:14 UTC	2213	IN	Data Raw: 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 36 54 31 31 3a 33 31 3a 30 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 36 54 31 32 3a 34 34 3a 34 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 Data Ascii: 643DF5B579.psb saved 2016-11-16T11:31:04-08:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2016-11-16T12:44:48-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Locks
2022-03-15 16:08:14 UTC	2268	IN	Data Raw: 33 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 42 61 74 63 68 32 5c 5f 43 48 4f 53 45 4e 2d 53 6b 79 70 65 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 5f 53 6b 79 70 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 38 36 36 37 38 39 30 31 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 32 33 54 31 35 3a 34 32 3a 30 32 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 Data Ascii: 37-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\Office-Batch2\_CHOSEN-Skype\Crops\Office_Skype_GettyImages-186678901_1920x1080.psd saved 2016-11-23T15:42:02-08:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved
2022-03-15 16:08:14 UTC	2348	IN	Data Raw: 33 30 38 34 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 33 30 54 31 34 3a 31 33 3a 31 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 4d 53 2d 52 65 77 61 72 64 73 5c 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2d 47 65 6e 65 72 61 6c 5c 4d 6f 76 69 65 73 5c 43 48 4f 53 45 4e 5c 45 64 67 65 2d 4d 53 52 65 77 61 72 64 73 2d 4d 6f 76 69 65 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 38 39 39 32 33 30 38 34 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 33 30 54 31 34 3a 31 35 3a 31 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 Data Ascii: 3084_1920x1080.jpg saved 2017-01-30T14:13:14-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\MS-Rewards\Entertainment-General\Movies\CHOSEN\Edge-MSRewards-Movies_GettyImages-489923084_1920x1080.jpg saved 2017-01-30T14:15:13-08:00 File C:\Us
2022-03-15 16:08:14 UTC	2396	IN	Data Raw: 53 45 4e 5c 4d 53 2d 52 65 77 61 72 64 73 5f 53 74 61 72 62 75 63 6b 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 30 36 32 32 32 32 31 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 38 54 31 31 3a 34 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 53 72 65 77 61 72 64 73 5c 53 74 61 72 62 75 63 6b 73 5c 43 48 4f 53 45 4e 5c 4d 53 2d 52 65 77 61 72 64 73 5f 53 74 61 72 62 75 63 6b 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 31 33 36 35 39 34 35 34 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 38 54 31 31 3a 34 38 3a 35 36 2d 30 38 3a 30 30 26 23 Data Ascii: SEN\MS-Rewards_Starbucks_GettyImages-506222216_1920x1080.jpg saved 2017-02-28T11:44-08:00 File C:\Users\v-lizagh\MS\Windows10\MSrewards\Starbucks\CHOSEN\MS-Rewards_Starbucks_GettyImages-613659454_1920x1080.jpg saved 2017-02-28T11:48:56-08:00&#
2022-03-15 16:08:14 UTC	2467	IN	Data Raw: 2d 30 33 2d 32 37 54 31 31 3a 34 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 53 65 72 76 69 63 69 6e 67 5c 43 48 4f 53 45 4e 5c 52 6f 75 6e 64 32 5c 57 69 6e 64 6f 77 73 53 65 72 76 69 63 69 6e 67 5f 35 30 30 70 78 2d 31 30 30 30 36 39 35 35 39 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 32 37 54 31 31 3a 34 34 3a 33 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 53 65 72 76 69 63 69 6e 67 5c 43 48 4f 53 45 4e 5c 52 6f 75 6e 64 32 5c 57 69 6e 64 6f 77 73 53 65 Data Ascii: -03-27T11:43-07:00 File C:\Users\v-lizagh\MS\Windows10\Windows\Servicing\CHOSEN\Round2\WindowsServicing_500px-100069559_1920x1080.psd saved 2017-03-27T11:44:39-07:00 File C:\Users\v-lizagh\MS\Windows10\Windows\Servicing\CHOSEN\Round2\WindowsSe
2022-03-15 16:08:14 UTC	2539	IN	Data Raw: 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 42 61 74 63 68 32 5c 5f 43 48 4f 53 45 4e 2d 4f 6e 62 6f 61 72 64 69 6e 67 5c 4f 66 66 69 63 65 2d 42 32 2d 4f 6e 62 6f 61 72 64 69 6e 67 5f 35 30 30 70 78 2d 31 35 35 33 30 35 39 31 35 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 32 30 54 31 30 3a 30 32 3a 34 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 42 61 74 63 68 32 5c 5f 43 48 4f 53 45 4e 2d 4f 6e 62 6f 61 72 64 69 6e 67 5c 4f 66 66 69 63 65 2d 42 32 2d 4f 6e 62 6f 61 72 64 69 6e 67 5f 70 31 31 36 36 6d 31 31 35 30 34 30 32 5f 31 39 32 30 78 31 30 Data Ascii: ows10\Office\Office-Batch2\_CHOSEN-Onboarding\Office-B2-Onboarding_500px-155305915_1920x1080.jpg saved 2017-04-20T10:02:49-07:00 File C:\Users\v-lizagh\MS\Windows10\Office\Office-Batch2\_CHOSEN-Onboarding\Office-B2-Onboarding_p1166m1150402_1920x10
2022-03-15 16:08:14 UTC	2555	IN	Data Raw: 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 47 65 6e 65 72 61 6c 2d 53 70 6f 74 6c 69 67 68 74 5f 51 34 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 47 65 6e 65 72 69 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 37 35 37 35 38 37 36 33 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 32 54 31 36 3a 30 38 3a 32 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 47 65 6e 65 72 61 6c 2d 53 70 6f 74 6c 69 67 68 74 5f 51 34 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 47 65 6e 65 72 69 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 37 35 37 35 38 37 36 33 5f 31 39 32 30 Data Ascii: dows10\Office\Office-General-Spotlight_Q4\Crops\OfficeGeneric_GettyImages-175758763_1920x1080.psd saved 2017-05-12T16:08:26-07:00 File C:\Users\v-lizagh\MS\Windows10\Office\Office-General-Spotlight_Q4\Crops\OfficeGeneric_GettyImages-175758763_1920
2022-03-15 16:08:14 UTC	2651	IN	Data Raw: 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 30 36 54 31 32 3a 34 39 3a 33 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 53 72 65 77 61 72 64 73 5c 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2d 47 65 6e Data Ascii: x9;File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-06-06T12:49:37-07:00 File C:\Users\v-lizagh\MS\Windows10\MSrewards\Entertainment-Gen
2022-03-15 16:08:14 UTC	2682	IN	Data Raw: 6f 73 65 6e 5c 57 69 6e 64 6f 77 73 31 30 2d 54 69 70 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 30 36 36 37 31 30 36 32 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 31 33 54 31 38 3a 33 32 3a 35 35 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 57 69 6e 64 6f 77 73 31 30 2d 54 69 70 73 5f 70 33 34 33 6d 31 30 39 33 35 31 39 66 5f 31 39 32 30 78 31 30 38 30 41 36 34 36 32 46 34 42 43 38 37 30 43 38 30 43 35 36 38 34 44 45 38 44 44 33 36 35 32 36 42 33 2e 70 73 62 20 73 61 Data Ascii: osen\Windows10-Tips_GettyImages-106671062_1920x1080.jpg saved 2017-07-13T18:32:55-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Windows10-Tips_p343m1093519f_1920x1080A6462F4BC870C80C5684DE8DD36526B3.psb sa
2022-03-15 16:08:14 UTC	2730	IN	Data Raw: 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 30 33 54 31 36 3a 33 33 3a 33 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 Data Ascii: cover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-08-03T16:33:31-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B
2022-03-15 16:08:14 UTC	2801	IN	Data Raw: 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 51 75 6f 74 65 44 61 79 48 69 73 74 6f 72 79 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 36 36 30 31 33 31 32 39 5f 31 39 32 30 78 31 30 38 30 37 32 34 35 42 31 45 45 32 42 30 45 45 38 34 31 31 42 36 41 43 31 42 34 33 41 43 39 35 44 33 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 32 39 54 31 35 3a 34 37 3a 33 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 6f 72 74 61 6e 61 5c 4d 6f 74 69 76 61 74 69 6f 6e 61 6c 2d 43 61 6d 70 61 69 67 6e 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 51 75 6f 74 65 44 61 Data Ascii: g\Adobe\Adobe Photoshop CC 2017\AutoRecover\_QuoteDayHistory_GettyImages-466013129_1920x10807245B1EE2B0EE8411B6AC1B43AC95D39.psb saved 2017-08-29T15:47:37-07:00 File C:\Users\v-lizagh\MS\Windows10\Cortana\Motivational-Campaign\Chosen\Crops\QuoteDa
2022-03-15 16:08:14 UTC	2825	IN	Data Raw: 70 73 5c 4d 49 54 2d 4d 65 6c 62 6f 75 72 6e 65 43 75 70 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 39 38 32 35 37 34 32 31 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 30 2d 31 32 54 32 31 3a 33 34 3a 33 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 45 6c 53 61 6c 76 61 64 6f 72 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 4d 65 6c 62 6f 75 72 6e 65 43 75 70 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 35 39 32 30 32 39 36 30 35 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 30 2d 31 32 54 32 31 3a 33 36 3a 34 38 2d 30 37 3a 30 30 26 23 78 39 3b Data Ascii: ps\MIT-MelbourneCup_GettyImages-598257421_1920x1080.jpg saved 2017-10-12T21:34:32-07:00 File C:\Users\v-lizagh\MS\Windows10\Edge\ElSalvador\CHOSEN\Crops\MIT-MelbourneCup_shutterstock_592029605_1920x1080.jpg saved 2017-10-12T21:36:48-07:00
2022-03-15 16:08:14 UTC	2905	IN	Data Raw: 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 53 70 6f 74 6c 69 67 68 74 5f 46 59 31 37 5c 5f 43 48 4f 53 45 4e 5c 53 6b 79 70 65 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 2d 53 6b 79 70 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 36 38 33 30 31 34 31 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 31 2d 31 37 54 31 35 3a 35 35 3a 34 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 53 70 6f 74 6c 69 67 68 74 5f 46 59 31 37 5c 5f 43 48 4f 53 45 4e 5c 53 6b 79 70 65 5c 43 72 6f 70 73 5c Data Ascii: 08:00 File C:\Users\v-lizagh\MS\Windows10\Office\Spotlight_FY17\_CHOSEN\Skype\Crops\Office-Skype_GettyImages-168301416_1920x1080.jpg saved 2017-11-17T15:55:47-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\Spotlight_FY17\_CHOSEN\Skype\Crops\
2022-03-15 16:08:14 UTC	2937	IN	Data Raw: 2d 34 38 30 36 34 31 30 37 31 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 34 54 31 33 3a 32 37 3a 30 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 45 64 67 65 47 72 6f 77 74 68 49 6d 61 67 65 73 5c 4c 6f 63 6b 32 30 31 37 5f 42 61 74 63 68 39 5c 43 48 4f 53 45 4e 5c 52 65 70 6c 61 63 65 6d 65 6e 74 73 5c 4c 6f 63 6b 32 30 31 37 2d 42 39 5f 4d 61 6e 67 72 6f 76 65 73 54 75 76 61 6c 75 53 50 61 63 69 66 69 63 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 36 30 31 32 39 35 30 37 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 34 54 31 33 3a 32 Data Ascii: -480641071_1920x1080.jpg saved 2017-12-04T13:27:08-08:00 File C:\Users\v-lizagh\MS\Windows10\BingEdgeGrowthImages\Lock2017_Batch9\CHOSEN\Replacements\Lock2017-B9_MangrovesTuvaluSPacific_GettyImages-560129507_1920x1080.jpg saved 2017-12-04T13:2
2022-03-15 16:08:14 UTC	3016	IN	Data Raw: 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 4d 4d 58 5c 52 4f 55 4e 44 32 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 57 69 6e 64 6f 77 73 4d 4d 58 2d 52 64 32 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 38 36 37 33 30 31 36 37 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 30 34 54 32 32 3a 30 34 3a 35 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 4d 4d 58 5c 52 4f 55 4e 44 32 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 57 69 6e 64 6f 77 73 4d 4d 58 2d 52 64 32 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 30 33 32 39 32 39 31 38 5f 31 39 32 30 78 Data Ascii: lizagh\MS\Windows10\Windows\MMX\ROUND2\_CHOSEN\Crops\WindowsMMX-Rd2_GettyImages-686730167_1920x1080.jpg saved 2018-01-04T22:04:59-08:00 File C:\Users\v-lizagh\MS\Windows10\Windows\MMX\ROUND2\_CHOSEN\Crops\WindowsMMX-Rd2_GettyImages-503292918_1920x
2022-03-15 16:08:14 UTC	3048	IN	Data Raw: 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 30 38 54 31 33 3a 34 39 3a 35 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 68 69 6e 61 5c 50 69 70 61 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 43 68 69 6e 61 2d 50 69 70 61 5f 41 6c 61 6d 79 2d 44 48 36 58 54 52 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 30 38 54 31 33 3a 35 31 3a 34 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 68 69 6e 61 5c 50 69 70 61 5c 43 48 4f 53 45 4e 5c Data Ascii: 20x1080_Landscape.psd opened 2018-02-08T13:49:53-08:00 File C:\Users\v-lizagh\MS\Windows10\China\Pipa\CHOSEN\Crops\China-Pipa_Alamy-DH6XTR_1920x1080.psd saved 2018-02-08T13:51:48-08:00 File C:\Users\v-lizagh\MS\Windows10\China\Pipa\CHOSEN\
2022-03-15 16:08:14 UTC	3080	IN	Data Raw: 76 69 65 73 2d 55 4b 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 41 77 61 72 64 73 53 65 61 73 6f 6e 2d 4d 6f 76 69 65 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 36 38 38 31 37 37 33 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 32 36 54 30 38 3a 34 31 3a 33 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 44 36 31 35 44 35 46 38 38 34 42 44 42 39 37 46 39 38 46 38 45 42 Data Ascii: vies-UK\CHOSEN\Crops\MIT-AwardsSeason-Movies_GettyImages-668817736_1920x1080.jpg saved 2018-02-26T08:41:39-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_LandscapeD615D5F884BDB97F98F8EB
2022-03-15 16:08:14 UTC	3175	IN	Data Raw: 23 78 41 3b 32 30 31 38 2d 30 33 2d 32 31 54 31 37 3a 34 35 3a 32 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 44 36 31 35 44 35 46 38 38 34 42 44 42 39 37 46 39 38 46 38 45 42 46 31 42 32 46 36 35 39 33 35 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 32 31 54 31 38 3a 31 32 3a 34 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 Data Ascii: #xA;2018-03-21T17:45:21-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_LandscapeD615D5F884BDB97F98F8EBF1B2F65935.psb saved 2018-03-21T18:12:41-07:00 File C:\Users\v-lizagh\MS\Window
2022-03-15 16:08:14 UTC	3231	IN	Data Raw: 72 64 66 3a 6c 69 3e 30 43 30 45 31 38 38 36 38 31 31 45 43 41 37 35 43 32 41 31 32 36 38 32 34 34 38 46 38 42 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 31 43 37 33 35 33 43 41 30 37 41 34 44 38 34 30 30 39 41 39 31 32 39 38 42 42 46 37 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 31 46 44 46 34 38 32 32 44 45 33 39 41 36 36 41 33 43 36 32 31 32 36 33 45 36 45 39 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 32 33 44 33 42 35 32 39 46 42 32 44 46 36 42 35 46 30 36 31 32 45 46 46 41 37 43 42 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 43 33 30 39 30 38 37 38 38 38 30 33 42 38 43 30 37 36 32 32 33 30 31 33 32 31 43 35 44 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c Data Ascii: rdf:li>0C0E1886811ECA75C2A12682448F8BCA</rdf:li> <rdf:li>0C1C7353CA07A4D84009A91298BBF788</rdf:li> <rdf:li>0C1FDF4822DE39A66A3C621263E6E95B</rdf:li> <rdf:li>0C23D3B529FB2DF6B5F0612EFFA7CB7F</rdf:li> <rdf:li>0C30908788803B8C07622301321C5DC3</rdf:li> <rdf:l
2022-03-15 16:08:14 UTC	3239	IN	Data Raw: 66 3a 6c 69 3e 31 32 33 36 46 31 45 32 31 43 35 38 34 46 39 38 46 31 33 38 39 38 43 39 30 30 37 36 44 31 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 32 34 36 38 36 43 37 42 46 46 45 36 39 46 44 46 37 33 45 43 37 41 41 45 41 32 43 34 34 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 32 34 37 34 39 34 34 35 34 31 37 32 35 45 44 34 31 36 42 42 37 36 34 36 45 35 43 35 45 42 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 32 35 33 38 46 39 30 42 35 42 39 37 37 30 31 38 37 35 45 44 34 37 31 31 30 44 31 42 38 42 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 32 35 35 36 38 46 31 45 33 32 45 30 37 46 35 34 37 33 36 32 34 41 32 33 46 42 41 32 42 42 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: f:li>1236F1E21C584F98F13898C90076D1F2</rdf:li> <rdf:li>124686C7BFFE69FDF73EC7AAEA2C4448</rdf:li> <rdf:li>12474944541725ED416BB7646E5C5EB1</rdf:li> <rdf:li>12538F90B5B97701875ED47110D1B8B5</rdf:li> <rdf:li>125568F1E32E07F5473624A23FBA2BB1</rdf:li> <rdf:li>
2022-03-15 16:08:14 UTC	3358	IN	Data Raw: 42 32 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 30 35 34 32 34 45 44 33 42 39 43 38 34 41 46 33 30 37 43 35 45 38 42 38 36 43 31 43 30 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 30 36 30 38 34 42 41 34 32 42 31 42 31 43 32 36 39 39 35 44 33 37 44 37 38 44 45 45 44 32 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 30 37 35 44 37 44 44 35 39 43 38 42 34 32 46 32 35 36 42 44 33 34 37 30 45 41 39 32 38 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 30 37 45 30 33 34 46 36 37 36 43 45 42 39 39 36 30 42 45 32 31 32 42 42 43 31 30 44 43 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 30 38 36 31 30 44 38 35 32 45 33 39 32 41 34 36 30 31 43 31 44 36 31 35 45 46 30 42 46 44 38 3c 2f Data Ascii: B21</rdf:li> <rdf:li>205424ED3B9C84AF307C5E8B86C1C0A1</rdf:li> <rdf:li>206084BA42B1B1C26995D37D78DEED2F</rdf:li> <rdf:li>2075D7DD59C8B42F256BD3470EA928F5</rdf:li> <rdf:li>207E034F676CEB9960BE212BBC10DCDF</rdf:li> <rdf:li>208610D852E392A4601C1D615EF0BFD8</
2022-03-15 16:08:14 UTC	3374	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 42 45 32 41 39 43 38 41 38 42 39 43 33 33 35 31 35 39 32 34 46 35 31 32 31 38 36 35 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 43 35 45 34 38 33 42 32 46 31 34 33 37 36 37 33 43 37 39 31 41 44 45 39 39 41 45 43 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 43 42 37 32 43 32 35 37 43 35 35 30 31 37 38 45 41 37 33 41 38 34 44 38 31 42 45 36 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 44 39 45 42 35 43 39 32 42 32 43 35 38 36 33 36 46 34 32 43 33 42 46 43 45 37 35 43 31 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 43 44 46 31 33 36 33 35 45 38 33 46 32 43 44 37 38 31 38 34 44 38 42 41 37 37 39 41 34 37 35 3c 2f 72 64 66 3a 6c Data Ascii: rdf:li> <rdf:li>2CBE2A9C8A8B9C33515924F51218658B</rdf:li> <rdf:li>2CC5E483B2F1437673C791ADE99AEC49</rdf:li> <rdf:li>2CCB72C257C550178EA73A84D81BE6C4</rdf:li> <rdf:li>2CD9EB5C92B2C58636F42C3BFCE75C10</rdf:li> <rdf:li>2CDF13635E83F2CD78184D8BA779A475</rdf:l
2022-03-15 16:08:14 UTC	3478	IN	Data Raw: 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 32 45 45 46 35 37 32 39 36 42 36 37 32 41 35 31 30 37 38 39 36 45 46 34 30 43 36 44 34 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 32 46 44 35 46 33 32 30 30 36 46 43 31 39 33 42 35 34 38 38 32 32 35 46 36 37 35 41 46 42 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 33 30 37 39 37 38 38 32 44 31 39 34 33 32 36 32 46 43 34 35 43 34 33 35 41 41 36 38 34 42 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 33 30 39 39 43 46 45 35 36 37 42 37 30 30 44 38 31 38 33 34 41 42 37 30 35 34 37 38 35 45 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 33 30 41 32 39 37 34 33 36 34 42 36 34 32 32 31 43 31 45 38 37 45 33 43 35 33 36 36 36 41 31 3c 2f 72 64 66 3a 6c 69 3e Data Ascii: f:li> <rdf:li>32EEF57296B672A5107896EF40C6D414</rdf:li> <rdf:li>32FD5F32006FC193B5488225F675AFBC</rdf:li> <rdf:li>330797882D1943262FC45C435AA684BF</rdf:li> <rdf:li>33099CFE567B700D81834AB7054785E9</rdf:li> <rdf:li>330A2974364B64221C1E87E3C53666A1</rdf:li>
2022-03-15 16:08:14 UTC	3565	IN	Data Raw: 39 39 45 43 39 31 37 31 43 44 32 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 30 33 33 41 30 46 31 33 31 30 46 39 36 41 45 39 41 44 38 44 42 32 35 30 43 46 38 34 39 44 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 30 35 35 43 34 39 39 45 46 36 45 36 35 37 30 46 41 44 37 45 42 42 44 39 41 44 44 31 32 34 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 30 35 41 31 30 31 34 45 34 33 46 44 30 36 30 45 37 37 30 31 31 35 30 39 33 30 46 38 36 30 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 30 36 34 42 38 38 33 30 38 38 46 31 38 46 34 42 45 42 32 42 37 41 44 41 39 41 37 31 42 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 30 36 42 43 34 41 32 44 41 37 34 31 30 42 37 37 42 30 31 42 45 31 44 34 Data Ascii: 99EC9171CD23</rdf:li> <rdf:li>4033A0F1310F96AE9AD8DB250CF849D8</rdf:li> <rdf:li>4055C499EF6E6570FAD7EBBD9ADD1240</rdf:li> <rdf:li>405A1014E43FD060E7701150930F8604</rdf:li> <rdf:li>4064B883088F18F4BEB2B7ADA9A71B70</rdf:li> <rdf:li>406BC4A2DA7410B77B01BE1D4
2022-03-15 16:08:14 UTC	3581	IN	Data Raw: 42 42 32 37 38 43 42 30 38 39 31 43 31 42 41 30 30 32 30 43 43 36 44 39 42 30 42 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 38 30 31 35 39 30 33 31 33 30 33 34 33 30 44 36 46 35 39 46 46 32 44 38 41 43 30 33 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 38 31 32 32 37 36 41 32 33 32 42 31 37 33 45 30 35 38 46 43 39 45 31 34 36 37 35 42 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 38 41 44 44 45 39 38 33 45 45 43 30 31 32 38 44 41 36 32 38 30 34 42 34 34 37 35 38 39 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 39 31 41 43 44 31 44 35 35 30 43 34 46 45 36 38 37 46 36 44 43 30 45 34 45 43 44 33 35 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 41 36 35 45 38 34 42 Data Ascii: BB278CB0891C1BA0020CC6D9B0B9</rdf:li> <rdf:li>4D80159031303430D6F59FF2D8AC03F5</rdf:li> <rdf:li>4D812276A232B173E058FC9E14675BD9</rdf:li> <rdf:li>4D8ADDE983EEC0128DA62804B447589C</rdf:li> <rdf:li>4D91ACD1D550C4FE687F6DC0E4ECD357</rdf:li> <rdf:li>4DA65E84B
2022-03-15 16:08:14 UTC	3676	IN	Data Raw: 35 46 30 39 35 31 39 30 30 46 42 39 39 36 44 45 44 30 34 43 30 36 31 30 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 33 46 34 37 45 38 33 37 33 31 45 44 34 37 38 43 41 33 38 30 36 39 43 46 33 44 31 45 36 44 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 33 46 37 39 39 39 30 46 32 46 39 45 41 46 38 39 44 32 41 35 41 33 45 42 32 38 39 45 36 30 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 34 31 41 33 45 31 30 32 39 31 46 45 43 39 36 43 35 44 31 41 41 45 37 42 32 35 41 42 42 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 34 32 36 36 44 34 37 34 45 30 31 42 39 39 37 39 33 44 42 35 42 31 32 37 31 37 32 30 46 32 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 34 33 45 33 38 32 36 46 31 45 Data Ascii: 5F0951900FB996DED04C061074</rdf:li> <rdf:li>53F47E83731ED478CA38069CF3D1E6D8</rdf:li> <rdf:li>53F79990F2F9EAF89D2A5A3EB289E607</rdf:li> <rdf:li>541A3E10291FEC96C5D1AAE7B25ABB41</rdf:li> <rdf:li>54266D474E01B99793DB5B1271720F2B</rdf:li> <rdf:li>543E3826F1E
2022-03-15 16:08:14 UTC	3716	IN	Data Raw: 33 41 33 33 37 43 41 42 41 39 35 39 45 35 32 44 32 39 34 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 32 36 38 46 43 44 39 32 43 46 32 39 30 32 34 35 31 36 30 42 41 37 30 33 42 44 39 34 45 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 32 37 46 32 42 42 34 32 30 46 31 32 33 46 36 39 46 46 38 32 46 32 32 33 41 41 35 41 33 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 32 38 31 34 36 45 36 41 32 31 39 44 38 46 41 37 31 43 32 39 41 45 36 42 33 34 35 38 35 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 32 39 32 30 31 32 32 36 43 33 38 45 34 42 34 33 34 37 34 46 30 34 43 42 41 34 30 31 44 41 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 32 41 38 34 45 38 39 34 32 33 38 44 44 38 43 Data Ascii: 3A337CABA959E52D29411</rdf:li> <rdf:li>6268FCD92CF290245160BA703BD94ED0</rdf:li> <rdf:li>627F2BB420F123F69FF82F223AA5A38B</rdf:li> <rdf:li>628146E6A219D8FA71C29AE6B34585F5</rdf:li> <rdf:li>629201226C38E4B43474F04CBA401DAF</rdf:li> <rdf:li>62A84E894238DD8C
2022-03-15 16:08:14 UTC	3748	IN	Data Raw: 66 3a 6c 69 3e 37 30 33 34 31 36 41 39 45 45 30 30 39 34 42 44 41 46 42 36 43 38 46 42 32 31 41 37 32 32 33 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 36 30 41 38 37 42 42 42 31 36 35 38 38 33 35 43 43 41 38 42 37 41 43 30 43 45 31 33 45 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 36 42 44 46 30 41 31 36 34 45 36 46 30 44 32 37 41 30 44 37 31 31 37 33 43 32 38 41 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 37 37 42 34 36 38 31 42 34 45 32 38 36 38 39 46 36 41 32 41 31 36 31 30 36 43 45 46 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 30 39 37 42 44 38 31 38 42 44 34 44 46 45 31 38 37 30 38 46 41 38 39 37 34 44 46 41 36 37 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: f:li>703416A9EE0094BDAFB6C8FB21A7223D</rdf:li> <rdf:li>7060A87BBB1658835CCA8B7AC0CE13ED</rdf:li> <rdf:li>706BDF0A164E6F0D27A0D71173C28A00</rdf:li> <rdf:li>7077B4681B4E28689F6A2A16106CEF0E</rdf:li> <rdf:li>7097BD818BD4DFE18708FA8974DFA679</rdf:li> <rdf:li>
2022-03-15 16:08:14 UTC	3812	IN	Data Raw: 6c 69 3e 37 36 46 37 45 31 41 43 31 44 43 34 41 39 36 34 45 43 35 32 46 46 44 45 35 43 36 44 44 37 33 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 36 46 42 37 46 39 35 35 43 43 44 46 44 35 36 36 33 32 32 32 34 43 39 31 39 30 41 30 46 39 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 37 30 37 46 31 42 34 41 43 36 43 36 34 39 31 37 45 43 44 30 33 32 45 41 45 31 39 42 46 39 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 37 30 44 39 38 42 35 30 43 36 38 41 38 32 41 32 45 46 42 32 32 44 31 44 42 38 38 39 34 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 37 30 44 44 45 30 32 32 38 34 35 35 42 43 34 39 46 44 41 31 35 34 30 39 44 44 45 37 41 36 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 37 Data Ascii: li>76F7E1AC1DC4A964EC52FFDE5C6DD73D</rdf:li> <rdf:li>76FB7F955CCDFD56632224C9190A0F91</rdf:li> <rdf:li>7707F1B4AC6C64917ECD032EAE19BF9D</rdf:li> <rdf:li>770D98B50C68A82A2EFB22D1DB8894A9</rdf:li> <rdf:li>770DDE0228455BC49FDA15409DDE7A64</rdf:li> <rdf:li>77
2022-03-15 16:08:14 UTC	4059	IN	Data Raw: 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 34 46 30 32 31 33 30 42 37 43 43 33 36 39 37 34 39 33 32 46 39 31 34 42 42 33 46 39 31 34 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 34 46 43 37 34 43 42 44 42 43 35 44 41 46 31 30 46 42 46 38 44 44 34 35 36 46 33 41 36 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 35 30 42 31 39 44 37 43 32 42 39 42 45 37 41 45 46 46 38 42 30 44 36 34 32 34 32 33 37 44 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 35 30 43 46 45 31 45 32 38 33 43 39 43 39 39 30 46 46 35 36 42 45 35 34 45 35 45 35 44 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 35 31 32 31 44 38 34 32 35 34 31 33 37 34 44 38 44 41 43 41 31 46 31 45 45 38 37 37 30 46 46 3c 2f 72 64 Data Ascii: C</rdf:li> <rdf:li>84F02130B7CC36974932F914BB3F9147</rdf:li> <rdf:li>84FC74CBDBC5DAF10FBF8DD456F3A67E</rdf:li> <rdf:li>850B19D7C2B9BE7AEFF8B0D6424237D7</rdf:li> <rdf:li>850CFE1E283C9C990FF56BE54E5E5D0E</rdf:li> <rdf:li>85121D842541374D8DACA1F1EE8770FF</rd
2022-03-15 16:08:14 UTC	4075	IN	Data Raw: 32 38 45 37 33 34 30 44 35 38 33 46 39 44 43 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 34 36 43 37 35 30 41 39 42 30 46 32 36 30 39 35 46 46 34 45 38 42 44 35 38 46 42 38 36 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 35 46 36 33 31 43 35 31 46 38 31 41 35 36 38 35 43 33 44 41 44 39 43 41 45 42 39 31 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 37 46 31 46 42 36 38 45 45 45 44 39 39 44 44 43 37 44 32 39 43 33 37 45 31 45 32 36 39 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 39 34 41 30 41 32 36 39 31 31 34 37 33 37 34 43 38 43 31 36 43 46 33 39 31 38 32 45 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 32 41 33 32 39 34 35 32 36 33 42 41 37 43 43 33 38 31 31 Data Ascii: 28E7340D583F9DC3A</rdf:li> <rdf:li>9246C750A9B0F26095FF4E8BD58FB86A</rdf:li> <rdf:li>925F631C51F81A5685C3DAD9CAEB9138</rdf:li> <rdf:li>927F1FB68EEED99DDC7D29C37E1E269A</rdf:li> <rdf:li>9294A0A2691147374C8C16CF39182E7F</rdf:li> <rdf:li>92A32945263BA7CC3811
2022-03-15 16:08:14 UTC	4123	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 39 32 34 39 41 35 36 33 33 46 33 30 45 41 33 34 46 39 35 33 41 31 31 39 44 31 37 30 31 45 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 39 32 35 34 31 44 31 41 44 35 35 32 30 34 36 39 31 41 42 36 43 42 37 42 45 35 44 38 31 32 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 39 33 30 32 34 31 37 36 34 34 34 42 35 30 34 32 46 41 37 44 41 37 46 36 46 31 38 39 31 30 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 39 33 42 36 43 45 31 44 37 44 32 33 35 45 38 37 43 43 45 36 46 31 33 36 39 43 41 36 31 35 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 39 34 30 42 44 33 38 41 31 37 41 45 34 35 33 37 41 39 30 32 35 38 42 35 30 34 46 46 43 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c Data Ascii: li> <rdf:li>99249A5633F30EA34F953A119D1701E8</rdf:li> <rdf:li>992541D1AD55204691AB6CB7BE5D812F</rdf:li> <rdf:li>993024176444B5042FA7DA7F6F18910D</rdf:li> <rdf:li>993B6CE1D7D235E87CCE6F1369CA6152</rdf:li> <rdf:li>9940BD38A17AE4537A90258B504FFC16</rdf:li> <
2022-03-15 16:08:14 UTC	4139	IN	Data Raw: 39 45 41 46 45 39 34 32 32 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 36 37 44 38 37 44 42 46 36 46 42 32 42 35 32 45 41 39 32 43 37 39 44 43 37 42 31 45 39 44 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 36 38 39 31 42 33 46 45 37 32 43 39 39 42 35 39 46 46 45 46 30 43 44 37 44 33 35 35 33 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 36 39 41 43 45 42 43 30 45 30 33 41 33 46 38 42 37 31 36 31 36 39 43 43 31 43 42 36 37 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 36 39 44 44 31 37 45 45 44 46 38 43 33 32 46 44 31 43 36 46 42 35 43 46 32 45 35 45 34 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 36 39 45 39 31 31 31 45 44 44 32 35 39 44 43 38 39 39 35 31 36 34 39 43 36 32 Data Ascii: 9EAFE94229</rdf:li> <rdf:li>A67D87DBF6FB2B52EA92C79DC7B1E9D1</rdf:li> <rdf:li>A6891B3FE72C99B59FFEF0CD7D3553A8</rdf:li> <rdf:li>A69ACEBC0E03A3F8B716169CC1CB6795</rdf:li> <rdf:li>A69DD17EEDF8C32FD1C6FB5CF2E5E4AD</rdf:li> <rdf:li>A69E9111EDD259DC89951649C62
2022-03-15 16:08:14 UTC	4155	IN	Data Raw: 45 30 32 38 39 42 31 37 42 39 34 33 33 39 32 35 44 33 44 36 35 33 36 34 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 33 42 37 39 37 31 39 36 38 32 35 37 37 32 35 39 46 30 37 46 32 44 43 31 30 37 45 42 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 33 42 37 46 43 34 35 35 37 34 46 31 35 43 34 38 36 33 31 42 45 42 33 34 46 38 46 32 31 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 33 44 30 44 37 37 33 33 37 38 31 45 37 44 41 33 35 36 46 44 43 34 44 33 43 31 39 31 30 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 33 46 44 36 34 34 34 37 36 43 37 46 35 41 44 38 32 38 42 41 34 35 30 36 41 33 39 39 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 34 34 33 39 43 42 39 30 38 30 Data Ascii: E0289B17B9433925D3D65364F5</rdf:li> <rdf:li>B43B79719682577259F07F2DC107EB88</rdf:li> <rdf:li>B43B7FC45574F15C48631BEB34F8F21F</rdf:li> <rdf:li>B43D0D7733781E7DA356FDC4D3C1910F</rdf:li> <rdf:li>B43FD644476C7F5AD828BA4506A399D9</rdf:li> <rdf:li>B4439CB9080
2022-03-15 16:08:14 UTC	4163	IN	Data Raw: 30 39 35 32 32 38 36 32 42 42 43 38 39 32 46 32 38 36 45 46 46 44 43 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 41 41 35 33 35 32 42 39 30 43 44 45 30 38 45 34 44 43 39 45 30 37 45 39 46 30 35 31 31 35 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 41 41 35 33 39 38 46 41 45 39 45 41 30 41 44 30 35 43 37 38 45 38 42 43 45 41 45 42 45 43 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 41 41 42 45 36 39 39 35 41 35 41 45 36 42 32 38 36 34 33 41 31 37 38 39 45 32 30 39 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 41 41 45 36 35 45 34 46 37 32 44 30 38 34 39 42 39 36 43 37 39 33 36 31 38 46 34 42 33 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 41 42 37 35 36 34 44 35 44 30 33 42 Data Ascii: 09522862BBC892F286EFFDCE</rdf:li> <rdf:li>BAA5352B90CDE08E4DC9E07E9F051153</rdf:li> <rdf:li>BAA5398FAE9EA0AD05C78E8BCEAEBEC2</rdf:li> <rdf:li>BAABE6995A5AE6B28643A1789E209255</rdf:li> <rdf:li>BAAE65E4F72D0849B96C793618F4B33F</rdf:li> <rdf:li>BAB7564D5D03B
2022-03-15 16:08:14 UTC	4179	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 41 46 34 35 33 31 34 39 36 38 30 34 36 43 38 45 37 45 39 32 43 43 37 45 31 37 32 46 46 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 41 46 35 35 34 36 42 38 30 32 37 33 42 32 30 41 45 46 41 32 42 35 43 42 34 39 42 31 31 34 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 42 30 41 34 44 46 45 44 30 45 36 31 34 38 35 32 37 42 42 33 41 39 32 30 32 32 45 35 46 34 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 42 31 33 39 44 39 32 41 37 33 34 33 39 45 43 38 42 46 43 30 46 31 46 34 42 33 31 30 37 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 42 32 39 42 35 46 33 46 45 32 32 45 36 32 35 33 36 34 30 34 39 32 41 30 43 43 33 43 41 46 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 Data Ascii: i> <rdf:li>BAF45314968046C8E7E92CC7E172FF80</rdf:li> <rdf:li>BAF5546B80273B20AEFA2B5CB49B1140</rdf:li> <rdf:li>BB0A4DFED0E6148527BB3A92022E5F40</rdf:li> <rdf:li>BB139D92A73439EC8BFC0F1F4B310783</rdf:li> <rdf:li>BB29B5F3FE22E6253640492A0CC3CAF7</rdf:li> <r
2022-03-15 16:08:14 UTC	4195	IN	Data Raw: 36 42 42 46 42 36 32 31 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 38 43 43 46 42 36 30 37 37 33 35 33 36 32 37 45 44 35 37 42 38 45 35 39 34 45 41 30 42 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 38 44 32 35 43 41 42 31 43 44 33 31 44 45 45 32 41 37 37 32 39 36 39 41 30 43 31 32 36 34 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 38 45 32 33 31 39 30 42 42 42 31 38 32 38 35 37 31 41 39 43 39 35 30 37 42 43 36 34 30 46 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 39 30 38 42 45 43 43 33 43 33 44 33 30 31 37 35 44 38 31 46 33 45 43 39 36 34 34 31 39 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 39 30 41 43 34 36 41 44 32 36 43 45 32 33 42 35 32 37 45 33 38 41 41 42 46 43 43 Data Ascii: 6BBFB621F</rdf:li> <rdf:li>C8CCFB6077353627ED57B8E594EA0B39</rdf:li> <rdf:li>C8D25CAB1CD31DEE2A772969A0C1264E</rdf:li> <rdf:li>C8E23190BBB1828571A9C9507BC640F1</rdf:li> <rdf:li>C908BECC3C3D30175D81F3EC96441936</rdf:li> <rdf:li>C90AC46AD26CE23B527E38AABFCC
2022-03-15 16:08:14 UTC	4211	IN	Data Raw: 42 41 32 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 45 43 31 30 43 35 46 38 34 41 32 38 43 44 32 33 44 42 44 32 39 32 37 41 34 37 37 37 43 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 45 44 43 38 46 37 39 33 38 38 41 31 42 32 34 30 36 41 33 41 45 35 33 35 31 36 43 45 45 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 46 33 45 43 38 30 37 38 36 33 46 42 36 44 36 37 34 31 46 32 30 38 44 39 36 35 31 30 33 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 46 37 44 45 41 36 45 42 42 36 46 38 31 31 35 31 35 33 39 36 33 39 30 36 36 34 30 39 37 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 35 46 38 30 39 35 36 35 36 46 39 32 34 37 33 46 38 43 37 35 31 37 42 32 44 33 33 46 37 35 33 3c Data Ascii: BA2B</rdf:li> <rdf:li>D5EC10C5F84A28CD23DBD2927A4777CD</rdf:li> <rdf:li>D5EDC8F79388A1B2406A3AE53516CEE2</rdf:li> <rdf:li>D5F3EC807863FB6D6741F208D9651037</rdf:li> <rdf:li>D5F7DEA6EBB6F811515396390664097D</rdf:li> <rdf:li>D5F8095656F92473F8C7517B2D33F753<
2022-03-15 16:08:14 UTC	4234	IN	Data Raw: 3e 44 43 34 33 41 46 44 31 36 30 34 37 46 31 38 37 38 41 42 32 32 38 36 39 37 30 41 33 33 35 44 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 34 36 36 45 45 32 34 35 32 44 32 32 46 39 39 45 30 35 36 36 39 46 30 44 43 34 31 42 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 35 31 34 46 30 30 30 43 38 35 39 43 44 38 31 35 43 43 33 35 43 39 33 35 37 36 45 35 44 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 36 35 34 31 38 36 37 42 32 45 46 31 43 35 34 46 35 30 39 43 33 35 31 43 32 36 37 39 33 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 36 37 35 33 37 42 35 43 36 34 31 34 41 44 45 33 38 39 35 38 45 42 37 35 46 44 33 36 46 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 36 39 Data Ascii: >DC43AFD16047F1878AB2286970A335DC</rdf:li> <rdf:li>DC466EE2452D22F99E05669F0DC41B0C</rdf:li> <rdf:li>DC514F000C859CD815CC35C93576E5DB</rdf:li> <rdf:li>DC6541867B2EF1C54F509C351C267932</rdf:li> <rdf:li>DC67537B5C6414ADE38958EB75FD36F4</rdf:li> <rdf:li>DC69
2022-03-15 16:08:14 UTC	4258	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 39 37 34 36 46 44 45 31 42 32 30 34 45 38 46 43 31 33 45 44 35 42 38 38 37 42 31 30 37 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 39 37 35 43 32 38 45 32 34 37 41 45 32 35 44 44 43 38 45 38 46 42 46 36 31 42 46 41 38 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 39 37 37 35 41 42 31 46 41 44 34 44 44 34 30 34 46 32 37 35 45 37 33 36 30 42 34 42 43 36 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 39 37 38 46 44 39 31 38 39 37 31 46 44 39 35 30 38 45 34 42 32 41 30 30 32 44 34 31 45 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 39 37 46 33 38 46 42 42 42 30 39 34 45 43 36 39 36 39 44 37 35 41 44 42 41 42 39 33 41 38 37 3c 2f 72 64 66 3a Data Ascii: /rdf:li> <rdf:li>E9746FDE1B204E8FC13ED5B887B107C5</rdf:li> <rdf:li>E975C28E247AE25DDC8E8FBF61BFA814</rdf:li> <rdf:li>E9775AB1FAD4DD404F275E7360B4BC6F</rdf:li> <rdf:li>E978FD918971FD9508E4B2A002D41EAE</rdf:li> <rdf:li>E97F38FBBB094EC6969D75ADBAB93A87</rdf:
2022-03-15 16:08:14 UTC	4274	IN	Data Raw: 32 30 39 38 38 36 39 46 35 35 32 31 33 38 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 34 46 41 30 38 36 35 44 37 41 34 43 31 39 36 34 37 33 46 43 46 45 38 45 41 38 44 46 35 41 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 30 43 45 46 38 35 36 31 34 45 31 39 33 45 38 45 33 43 33 35 42 32 45 34 33 43 45 33 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 30 44 33 38 35 39 35 38 44 37 44 41 30 41 35 34 30 32 35 44 32 32 34 43 44 43 38 44 41 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 30 46 39 31 35 39 39 30 44 42 39 35 43 30 39 32 34 42 43 30 32 37 44 44 31 32 30 44 37 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 35 31 39 35 33 39 46 41 33 44 35 35 39 43 43 43 39 34 31 44 30 Data Ascii: 2098869F552138F</rdf:li> <rdf:li>F4FA0865D7A4C196473FCFE8EA8DF5AC</rdf:li> <rdf:li>F50CEF85614E193E8E3C35B2E43CE35F</rdf:li> <rdf:li>F50D385958D7DA0A54025D224CDC8DA4</rdf:li> <rdf:li>F50F915990DB95C0924BC027DD120D77</rdf:li> <rdf:li>F519539FA3D559CCC941D0
2022-03-15 16:08:14 UTC	4298	IN	Data Raw: 31 36 38 35 43 33 42 46 34 34 34 31 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 42 35 44 38 33 42 41 46 33 37 37 37 43 36 34 37 33 31 34 43 33 39 36 37 41 30 45 43 44 44 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 42 36 41 34 43 42 34 38 37 30 32 45 31 44 30 32 32 35 36 31 38 36 34 44 41 33 44 38 31 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 42 37 42 45 36 39 45 33 37 36 44 43 45 46 31 30 36 43 44 36 31 35 33 38 37 41 37 32 35 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 42 39 41 36 35 45 42 37 36 45 39 34 38 45 36 36 34 30 44 35 41 34 30 30 44 44 30 34 36 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 42 39 43 31 44 42 45 39 35 45 32 39 43 33 32 41 44 33 38 45 36 36 34 Data Ascii: 1685C3BF4441C</rdf:li> <rdf:li>FB5D83BAF3777C647314C3967A0ECDD2</rdf:li> <rdf:li>FB6A4CB48702E1D022561864DA3D81AA</rdf:li> <rdf:li>FB7BE69E376DCEF106CD615387A725F2</rdf:li> <rdf:li>FB9A65EB76E948E6640D5A400DD0463E</rdf:li> <rdf:li>FB9C1DBE95E29C32AD38E664
2022-03-15 16:08:14 UTC	4314	IN	Data Raw: 34 34 30 61 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 33 35 37 30 64 31 33 2d 39 38 39 61 2d 31 31 64 39 2d 61 30 39 36 2d 61 31 38 31 31 30 65 36 39 32 66 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 33 38 31 64 66 36 37 2d 35 34 39 65 2d 36 38 34 62 2d 39 66 38 30 2d 64 33 64 66 37 65 63 32 65 30 33 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 33 64 34 36 31 37 32 2d 30 34 64 64 2d 31 31 37 39 2d 61 39 64 32 2d 38 38 38 36 33 65 31 66 61 37 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 Data Ascii: 440ad</rdf:li> <rdf:li>adobe:docid:photoshop:23570d13-989a-11d9-a096-a18110e692f2</rdf:li> <rdf:li>adobe:docid:photoshop:2381df67-549e-684b-9f80-d3df7ec2e03e</rdf:li> <rdf:li>adobe:docid:photoshop:23d46172-04dd-1179-a9d2-88863e1fa720</rdf:li> <rdf:li>adob
2022-03-15 16:08:14 UTC	4346	IN	Data Raw: 3a 35 32 61 37 35 36 62 38 2d 38 33 30 64 2d 31 31 64 38 2d 39 30 66 30 2d 61 30 65 36 39 35 66 62 31 33 65 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 32 62 39 36 62 65 65 2d 33 33 31 30 2d 31 31 37 39 2d 38 37 39 35 2d 66 61 37 38 31 65 62 65 34 37 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 32 62 64 35 38 37 32 2d 39 39 32 65 2d 31 31 64 39 2d 38 31 64 34 2d 39 62 37 64 30 31 66 39 37 32 32 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 33 34 32 62 66 36 38 2d 30 66 36 37 2d 31 31 64 65 2d 38 63 38 39 2d 61 62 Data Ascii: :52a756b8-830d-11d8-90f0-a0e695fb13e8</rdf:li> <rdf:li>adobe:docid:photoshop:52b96bee-3310-1179-8795-fa781ebe4746</rdf:li> <rdf:li>adobe:docid:photoshop:52bd5872-992e-11d9-81d4-9b7d01f9722d</rdf:li> <rdf:li>adobe:docid:photoshop:5342bf68-0f67-11de-8c89-ab
2022-03-15 16:08:14 UTC	4354	IN	Data Raw: 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 64 32 36 66 65 61 38 2d 34 65 66 35 2d 31 31 64 37 2d 38 37 65 38 2d 64 37 61 64 35 32 34 66 38 65 35 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 64 33 37 62 36 64 34 2d 63 62 39 38 2d 31 31 37 39 2d 62 32 32 34 2d 64 62 65 30 65 32 35 39 65 31 61 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 64 39 34 34 37 62 65 2d 33 63 39 34 2d 31 31 64 61 2d 39 31 31 66 2d 61 38 35 34 66 37 62 39 37 36 63 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f Data Ascii: rdf:li>adobe:docid:photoshop:6d26fea8-4ef5-11d7-87e8-d7ad524f8e5a</rdf:li> <rdf:li>adobe:docid:photoshop:6d37b6d4-cb98-1179-b224-dbe0e259e1aa</rdf:li> <rdf:li>adobe:docid:photoshop:6d9447be-3c94-11da-911f-a854f7b976c7</rdf:li> <rdf:li>adobe:docid:photosho
2022-03-15 16:08:14 UTC	4377	IN	Data Raw: 31 64 61 2d 62 39 35 38 2d 62 34 37 61 63 34 62 36 30 33 30 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 64 34 66 33 37 32 66 2d 65 65 63 33 2d 31 31 65 34 2d 38 65 37 63 2d 66 35 65 62 36 34 32 30 65 63 63 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 64 62 38 36 36 66 62 2d 33 36 35 32 2d 31 31 37 39 2d 38 37 39 35 2d 66 61 37 38 31 65 62 65 34 37 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 39 65 33 34 39 37 66 31 2d 35 66 64 39 2d 31 31 37 38 2d 39 61 35 37 2d 61 62 36 36 65 37 65 66 61 61 38 38 3c 2f 72 64 66 3a Data Ascii: 1da-b958-b47ac4b6030e</rdf:li> <rdf:li>adobe:docid:photoshop:9d4f372f-eec3-11e4-8e7c-f5eb6420ecc9</rdf:li> <rdf:li>adobe:docid:photoshop:9db866fb-3652-1179-8795-fa781ebe4746</rdf:li> <rdf:li>adobe:docid:photoshop:9e3497f1-5fd9-1178-9a57-ab66e7efaa88</rdf:
2022-03-15 16:08:14 UTC	4409	IN	Data Raw: 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 33 33 39 33 64 31 37 2d 33 39 62 65 2d 31 31 65 37 2d 62 33 36 66 2d 66 38 31 66 37 39 39 32 32 33 61 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 33 34 38 31 39 39 35 2d 31 62 65 37 2d 31 31 64 61 2d 62 32 34 63 2d 62 65 32 36 64 62 62 34 32 37 64 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 34 63 63 65 35 31 64 2d 65 34 62 37 2d 31 31 65 36 2d 39 66 33 34 2d 65 30 63 34 65 32 65 62 37 36 35 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 35 37 34 30 31 61 Data Ascii: obe:docid:photoshop:d3393d17-39be-11e7-b36f-f81f799223a6</rdf:li> <rdf:li>adobe:docid:photoshop:d3481995-1be7-11da-b24c-be26dbb427d9</rdf:li> <rdf:li>adobe:docid:photoshop:d4cce51d-e4b7-11e6-9f34-e0c4e2eb765d</rdf:li> <rdf:li>adobe:docid:photoshop:d57401a
2022-03-15 16:08:14 UTC	4433	IN	Data Raw: 38 32 30 64 31 34 66 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 62 36 66 32 66 38 39 2d 64 36 33 35 2d 31 31 65 35 2d 39 63 65 32 2d 39 33 33 37 38 66 30 30 31 35 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 62 38 31 30 62 66 38 2d 33 31 34 32 2d 31 31 37 38 2d 61 33 63 31 2d 64 64 33 65 30 66 33 34 61 65 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 62 39 65 34 61 63 38 2d 65 64 32 37 2d 31 31 37 39 2d 61 62 66 32 2d 62 34 65 61 34 30 34 35 62 36 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 Data Ascii: 820d14ff</rdf:li> <rdf:li>adobe:docid:photoshop:eb6f2f89-d635-11e5-9ce2-93378f001563</rdf:li> <rdf:li>adobe:docid:photoshop:eb810bf8-3142-1178-a3c1-dd3e0f34ae70</rdf:li> <rdf:li>adobe:docid:photoshop:eb9e4ac8-ed27-1179-abf2-b4ea4045b646</rdf:li> <rdf:li>a
2022-03-15 16:08:14 UTC	4473	IN	Data Raw: 37 44 30 30 46 35 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 32 35 43 34 33 35 46 36 30 37 44 45 30 31 31 42 46 37 34 42 36 38 46 32 37 42 37 33 30 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 32 36 42 39 41 33 43 34 46 35 41 44 43 31 31 39 37 34 44 43 42 35 43 42 31 37 34 31 44 32 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 32 38 43 37 45 42 36 33 37 34 33 44 43 31 31 42 43 31 36 41 30 45 35 43 34 32 37 46 33 35 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 32 41 42 35 46 35 33 45 42 41 34 45 34 31 31 38 39 43 38 46 31 34 38 37 33 44 32 44 38 46 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 33 31 44 Data Ascii: 7D00F5A6</rdf:li> <rdf:li>uuid:225C435F607DE011BF74B68F27B73003</rdf:li> <rdf:li>uuid:226B9A3C4F5ADC11974DCB5CB1741D28</rdf:li> <rdf:li>uuid:228C7EB63743DC11BC16A0E5C427F35A</rdf:li> <rdf:li>uuid:22AB5F53EBA4E41189C8F14873D2D8F3</rdf:li> <rdf:li>uuid:231D
2022-03-15 16:08:14 UTC	5308	IN	Data Raw: 38 42 39 30 44 34 32 43 38 42 44 46 31 31 38 33 45 43 39 34 35 44 33 46 34 31 41 38 45 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 37 39 35 33 31 35 31 33 31 30 43 44 46 31 31 38 44 41 43 39 41 32 43 39 44 35 38 44 41 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 37 41 32 32 36 34 31 32 44 45 41 45 30 31 31 38 43 43 46 38 46 41 35 36 46 46 38 44 36 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 37 44 42 44 38 34 45 43 31 36 32 45 30 31 31 38 43 31 36 44 31 42 39 37 41 32 35 36 35 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 38 30 35 35 46 43 42 39 37 41 35 31 31 44 44 41 37 45 32 39 43 30 46 33 36 32 37 30 46 46 42 3c 2f 72 64 66 Data Ascii: 8B90D42C8BDF1183EC945D3F41A8ED</rdf:li> <rdf:li>uuid:57953151310CDF118DAC9A2C9D58DA96</rdf:li> <rdf:li>uuid:57A226412DEAE0118CCF8FA56FF8D6A6</rdf:li> <rdf:li>uuid:57DBD84EC162E0118C16D1B97A256573</rdf:li> <rdf:li>uuid:58055FCB97A511DDA7E29C0F36270FFB</rdf
2022-03-15 16:08:14 UTC	5316	IN	Data Raw: 46 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 30 43 42 35 37 35 32 30 33 38 46 31 31 45 30 42 43 39 44 45 46 42 45 30 36 36 43 44 38 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 30 44 38 35 37 37 41 33 31 42 41 31 31 44 45 42 33 42 43 43 31 34 34 30 36 43 31 37 46 36 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 30 45 39 42 34 35 41 30 41 36 43 44 45 31 31 41 44 36 33 46 36 41 46 32 45 41 35 33 39 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 30 46 46 31 45 42 45 37 42 33 33 44 43 31 31 39 31 35 38 38 32 46 41 42 43 41 45 35 43 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 31 30 44 31 39 46 45 46 Data Ascii: FC4</rdf:li> <rdf:li>uuid:70CB5752038F11E0BC9DEFBE066CD848</rdf:li> <rdf:li>uuid:70D8577A31BA11DEB3BCC14406C17F6A</rdf:li> <rdf:li>uuid:70E9B45A0A6CDE11AD63F6AF2EA539A9</rdf:li> <rdf:li>uuid:70FF1EBE7B33DC11915882FABCAE5CB0</rdf:li> <rdf:li>uuid:710D19FEF
2022-03-15 16:08:14 UTC	5332	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 30 43 41 37 39 37 31 32 35 32 39 44 46 31 31 42 30 45 43 38 33 39 44 30 35 30 35 37 30 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 30 46 33 38 46 38 44 42 41 30 41 45 31 31 31 42 34 36 36 39 38 34 33 31 43 41 30 34 33 42 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 31 37 46 45 32 45 31 43 43 33 46 44 46 31 31 38 46 35 34 42 36 42 45 31 45 38 30 45 41 43 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 31 39 30 34 46 44 32 39 32 37 46 31 31 45 30 38 31 38 46 46 41 44 32 32 36 45 33 30 41 42 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 31 41 32 46 45 45 35 43 39 36 38 31 Data Ascii: /rdf:li> <rdf:li>uuid:A0CA79712529DF11B0EC839D05057066</rdf:li> <rdf:li>uuid:A0F38F8DBA0AE111B46698431CA043B3</rdf:li> <rdf:li>uuid:A17FE2E1CC3FDF118F54B6BE1E80EACF</rdf:li> <rdf:li>uuid:A1904FD2927F11E0818FFAD226E30AB9</rdf:li> <rdf:li>uuid:A1A2FEE5C9681
2022-03-15 16:08:14 UTC	5348	IN	Data Raw: 43 44 41 31 46 39 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 44 46 31 39 37 34 46 32 45 33 38 44 46 31 31 41 46 39 32 42 45 43 45 32 39 37 34 44 31 39 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 31 38 36 44 45 41 38 37 36 36 45 30 31 31 42 41 45 45 38 32 33 30 33 31 31 36 46 44 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 36 38 44 38 36 39 35 39 31 42 44 44 31 31 39 39 34 37 45 30 33 43 35 32 42 45 46 31 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 39 38 30 41 32 31 35 41 45 36 44 45 31 31 39 30 41 45 42 41 46 36 33 33 32 46 43 36 43 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 44 45 41 31 39 Data Ascii: CDA1F93</rdf:li> <rdf:li>uuid:DDF1974F2E38DF11AF92BECE2974D198</rdf:li> <rdf:li>uuid:DE186DEA8766E011BAEE82303116FD2D</rdf:li> <rdf:li>uuid:DE68D869591BDD119947E03C52BEF1B0</rdf:li> <rdf:li>uuid:DE980A215AE6DE1190AEBAF6332FC6C0</rdf:li> <rdf:li>uuid:DEA19
2022-03-15 16:08:14 UTC	5356	IN	Data Raw: 64 3a 46 39 44 45 39 35 35 33 41 39 39 45 31 31 45 31 42 31 45 38 39 45 31 46 30 42 30 38 42 44 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 41 38 30 33 32 42 43 44 38 34 32 44 46 31 31 42 38 32 31 43 45 35 41 31 34 30 41 37 31 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 42 39 44 46 38 42 46 33 35 44 46 44 45 31 31 41 32 39 45 45 34 37 35 45 42 37 42 37 32 32 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 42 43 39 37 36 31 42 30 33 36 33 44 43 31 31 39 46 30 46 43 43 36 30 37 32 39 32 34 30 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 42 44 38 36 33 35 35 44 30 36 36 44 45 31 31 38 36 43 39 41 41 35 43 30 39 36 43 43 30 44 39 3c Data Ascii: d:F9DE9553A99E11E1B1E89E1F0B08BD72</rdf:li> <rdf:li>uuid:FA8032BCD842DF11B821CE5A140A715B</rdf:li> <rdf:li>uuid:FB9DF8BF35DFDE11A29EE475EB7B7228</rdf:li> <rdf:li>uuid:FBC9761B0363DC119F0FCC6072924017</rdf:li> <rdf:li>uuid:FBD86355D066DE1186C9AA5C096CC0D9<
2022-03-15 16:08:14 UTC	5372	IN	Data Raw: 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 43 31 34 38 39 32 36 36 35 38 34 44 37 42 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 43 31 34 42 31 37 36 33 33 38 43 43 44 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 43 31 34 42 38 37 30 37 44 35 37 30 41 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 43 31 34 43 43 33 37 36 32 34 44 32 31 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 Data Ascii: 27</rdf:li> <rdf:li>xmp.did:02801174072068118C1489266584D7B2</rdf:li> <rdf:li>xmp.did:02801174072068118C14B176338CCD7B</rdf:li> <rdf:li>xmp.did:02801174072068118C14B8707D570A5C</rdf:li> <rdf:li>xmp.did:02801174072068118C14CC37624D21CA</rdf:li> <rdf:li>xmp
2022-03-15 16:08:14 UTC	5388	IN	Data Raw: 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 35 46 45 38 31 31 42 33 39 31 42 45 30 36 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 37 41 35 38 33 37 39 41 31 45 33 42 34 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 39 34 43 42 37 36 46 36 43 34 30 32 44 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 45 43 36 44 39 38 46 43 42 42 33 41 34 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 31 31 37 34 30 37 32 30 36 Data Ascii: i>xmp.did:068011740720681195FE811B391BE06C</rdf:li> <rdf:li>xmp.did:068011740720681197A58379A1E3B414</rdf:li> <rdf:li>xmp.did:0680117407206811994CB76F6C402DAA</rdf:li> <rdf:li>xmp.did:06801174072068119EC6D98FCBB3A492</rdf:li> <rdf:li>xmp.did:0680117407206
2022-03-15 16:08:14 UTC	5395	IN	Data Raw: 41 31 36 31 32 37 30 43 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 37 31 46 45 33 32 30 45 39 44 37 32 46 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 38 43 36 39 39 37 32 41 37 30 36 37 39 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 38 43 36 42 30 43 43 39 35 33 38 34 46 31 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 43 31 34 42 39 39 35 30 45 36 44 39 32 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 Data Ascii: A161270C9</rdf:li> <rdf:li>xmp.did:0980117407206811871FE320E9D72FA5</rdf:li> <rdf:li>xmp.did:098011740720681188C69972A70679EF</rdf:li> <rdf:li>xmp.did:098011740720681188C6B0CC95384F1C</rdf:li> <rdf:li>xmp.did:09801174072068118C14B9950E6D9222</rdf:li> <rdf
2022-03-15 16:08:14 UTC	5411	IN	Data Raw: 37 42 35 35 37 38 32 37 36 32 32 36 38 31 31 41 42 30 38 44 31 43 41 36 32 45 36 46 30 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 37 42 41 33 45 42 41 41 39 32 43 45 31 31 31 39 38 38 37 39 38 32 42 33 37 36 35 37 46 42 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 37 42 44 37 39 34 36 31 33 32 30 36 38 31 31 39 39 34 43 45 37 39 41 35 37 35 35 35 41 41 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 37 44 37 37 44 35 33 31 33 32 30 36 38 31 31 39 37 41 35 41 33 39 37 42 45 33 32 45 30 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 37 45 44 32 46 34 43 32 35 32 36 36 38 31 31 39 34 35 37 39 43 35 32 Data Ascii: 7B5578276226811AB08D1CA62E6F08D</rdf:li> <rdf:li>xmp.did:17BA3EBAA92CE1119887982B37657FB1</rdf:li> <rdf:li>xmp.did:17BD794613206811994CE79A57555AA0</rdf:li> <rdf:li>xmp.did:17D77D531320681197A5A397BE32E0EE</rdf:li> <rdf:li>xmp.did:17ED2F4C2526681194579C52
2022-03-15 16:08:14 UTC	5427	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 41 30 30 45 32 32 45 34 38 43 31 31 44 46 42 30 39 39 45 43 41 34 43 45 31 46 43 43 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 41 37 46 41 34 34 37 46 41 43 31 31 45 31 39 35 35 45 42 31 31 39 35 33 39 35 31 32 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 42 30 43 35 44 41 46 31 32 30 36 38 31 31 42 44 34 43 46 34 46 39 43 30 31 45 39 38 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 37 44 45 33 30 41 34 37 44 36 41 31 31 45 30 42 31 42 46 45 43 36 30 38 36 37 33 39 36 42 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 Data Ascii: /rdf:li> <rdf:li>xmp.did:27A00E22E48C11DFB099ECA4CE1FCC73</rdf:li> <rdf:li>xmp.did:27A7FA447FAC11E1955EB11953951227</rdf:li> <rdf:li>xmp.did:27B0C5DAF1206811BD4CF4F9C01E982A</rdf:li> <rdf:li>xmp.did:27DE30A47D6A11E0B1BFEC60867396BF</rdf:li> <rdf:li>xmp.di
2022-03-15 16:08:14 UTC	5562	IN	Data Raw: 32 33 38 32 2d 34 38 37 31 2d 39 39 32 65 2d 30 62 34 34 37 32 65 38 38 35 63 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 62 38 36 66 38 65 61 2d 63 34 65 33 2d 38 35 34 64 2d 62 64 30 30 2d 35 37 32 63 62 39 39 34 34 37 61 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 62 61 63 38 63 61 38 2d 63 62 63 31 2d 62 66 34 39 2d 38 32 37 31 2d 63 36 65 35 30 32 64 36 62 32 61 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 62 61 65 62 30 63 64 2d 33 32 32 65 2d 33 30 34 31 2d 39 63 66 31 2d 33 33 32 32 37 35 35 31 30 61 65 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 62 62 34 36 30 65 61 2d 33 63 35 34 2d 30 61 Data Ascii: 2382-4871-992e-0b4472e885cd</rdf:li> <rdf:li>xmp.did:2b86f8ea-c4e3-854d-bd00-572cb99447af</rdf:li> <rdf:li>xmp.did:2bac8ca8-cbc1-bf49-8271-c6e502d6b2a3</rdf:li> <rdf:li>xmp.did:2baeb0cd-322e-3041-9cf1-332275510aeb</rdf:li> <rdf:li>xmp.did:2bb460ea-3c54-0a
2022-03-15 16:08:14 UTC	5578	IN	Data Raw: 44 43 36 33 38 46 39 46 43 39 35 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 45 32 39 33 34 43 34 30 37 32 30 36 38 31 31 39 32 42 30 45 39 30 44 30 34 38 45 41 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 45 32 41 31 41 45 46 45 43 32 30 36 38 31 31 38 43 31 34 45 43 36 39 39 31 34 43 38 35 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 45 36 36 41 33 33 46 39 31 32 31 36 38 31 31 39 31 30 39 42 31 36 46 38 37 44 31 34 32 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 45 37 44 36 39 32 34 30 39 32 30 36 38 31 31 39 35 46 45 38 41 37 43 39 38 43 31 33 38 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 Data Ascii: DC638F9FC95EE</rdf:li> <rdf:li>xmp.did:3E2934C40720681192B0E90D048EA72C</rdf:li> <rdf:li>xmp.did:3E2A1AEFEC2068118C14EC69914C8563</rdf:li> <rdf:li>xmp.did:3E66A33F912168119109B16F87D14265</rdf:li> <rdf:li>xmp.did:3E7D69240920681195FE8A7C98C1382D</rdf:li>
2022-03-15 16:08:14 UTC	5594	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 38 35 33 45 34 33 37 42 32 30 36 38 31 31 38 30 38 33 44 38 36 43 41 31 35 46 41 46 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 38 39 31 44 42 34 36 39 32 31 36 38 31 31 41 36 31 33 38 45 46 32 43 31 36 38 37 36 46 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 39 46 30 39 42 30 36 39 32 30 36 38 31 31 41 39 45 46 43 33 35 37 44 46 31 45 34 34 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 41 32 35 33 36 31 37 30 32 35 36 38 31 31 39 33 37 35 45 30 39 31 36 39 37 38 33 43 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 44 42 Data Ascii: li> <rdf:li>xmp.did:4D853E437B2068118083D86CA15FAF3B</rdf:li> <rdf:li>xmp.did:4D891DB469216811A6138EF2C16876FC</rdf:li> <rdf:li>xmp.did:4D9F09B069206811A9EFC357DF1E44DE</rdf:li> <rdf:li>xmp.did:4DA25361702568119375E09169783C56</rdf:li> <rdf:li>xmp.did:4DB
2022-03-15 16:08:14 UTC	5602	IN	Data Raw: 32 35 2d 34 30 36 61 2d 37 65 34 32 2d 39 65 33 63 2d 33 39 39 35 36 38 66 64 37 63 65 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 33 39 46 30 39 42 30 36 39 32 30 36 38 31 31 41 39 45 46 43 33 35 37 44 46 31 45 34 34 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 33 41 38 38 42 44 39 44 45 46 33 31 31 45 30 38 31 30 31 43 31 33 43 34 30 42 43 45 31 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 33 45 42 38 32 31 41 36 42 34 32 45 30 31 31 42 30 38 39 46 41 37 35 33 38 35 34 38 42 43 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 33 46 32 46 42 34 44 31 35 32 30 36 38 31 31 38 43 31 34 42 43 43 45 45 Data Ascii: 25-406a-7e42-9e3c-399568fd7ce4</rdf:li> <rdf:li>xmp.did:539F09B069206811A9EFC357DF1E44DE</rdf:li> <rdf:li>xmp.did:53A88BD9DEF311E08101C13C40BCE1A6</rdf:li> <rdf:li>xmp.did:53EB821A6B42E011B089FA7538548BC7</rdf:li> <rdf:li>xmp.did:53F2FB4D152068118C14BCCEE
2022-03-15 16:08:14 UTC	5618	IN	Data Raw: 38 41 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 33 36 35 35 45 43 37 38 35 43 44 45 30 31 31 41 31 33 36 44 36 43 35 43 38 31 45 43 36 45 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 33 37 62 33 30 66 34 2d 32 66 39 63 2d 34 66 37 61 2d 62 34 31 39 2d 65 38 37 33 35 64 63 37 63 37 31 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 33 38 38 38 30 45 38 30 39 32 30 36 38 31 31 39 32 42 30 42 41 41 39 30 34 44 45 30 46 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 33 39 35 42 38 41 35 37 44 32 30 36 38 31 31 39 32 42 30 44 30 41 37 35 38 31 35 46 38 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: 8AA9</rdf:li> <rdf:li>xmp.did:63655EC785CDE011A136D6C5C81EC6E4</rdf:li> <rdf:li>xmp.did:637b30f4-2f9c-4f7a-b419-e8735dc7c71d</rdf:li> <rdf:li>xmp.did:638880E80920681192B0BAA904DE0F8D</rdf:li> <rdf:li>xmp.did:6395B8A57D20681192B0D0A75815F8A6</rdf:li> <rdf:
2022-03-15 16:08:14 UTC	5634	IN	Data Raw: 2d 39 64 32 33 2d 65 34 62 64 32 31 66 66 35 63 65 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 32 35 30 38 38 31 30 46 31 34 45 33 31 31 41 31 31 41 44 42 30 41 44 34 46 30 31 44 43 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 32 41 36 34 41 38 30 37 32 30 36 38 31 31 38 43 31 34 42 38 37 30 37 44 35 37 30 41 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 33 43 41 31 31 34 38 32 32 30 36 38 31 31 38 43 31 34 38 30 34 34 46 35 33 41 30 46 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 32 33 62 35 34 30 61 2d 36 37 38 61 2d 34 32 34 37 2d 38 39 38 32 2d 31 36 36 61 61 39 63 36 34 38 34 65 3c Data Ascii: -9d23-e4bd21ff5ce9</rdf:li> <rdf:li>xmp.did:722508810F14E311A11ADB0AD4F01DCF</rdf:li> <rdf:li>xmp.did:722A64A8072068118C14B8707D570A5C</rdf:li> <rdf:li>xmp.did:723CA114822068118C148044F53A0F87</rdf:li> <rdf:li>xmp.did:723b540a-678a-4247-8982-166aa9c6484e<
2022-03-15 16:08:14 UTC	5642	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 39 41 41 46 46 43 36 30 37 32 30 36 38 31 31 38 43 31 34 41 30 45 42 30 30 45 36 39 43 45 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 39 42 32 44 44 35 42 33 37 32 30 36 38 31 31 38 30 38 33 44 31 37 42 41 31 44 39 37 37 46 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 39 42 33 35 46 33 44 35 32 42 38 31 31 45 30 41 46 44 39 45 34 34 34 34 37 30 46 32 32 44 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 39 43 34 37 44 36 42 39 44 32 30 36 38 31 31 38 30 38 33 46 39 44 33 44 31 30 32 44 37 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 Data Ascii: rdf:li> <rdf:li>xmp.did:79AAFFC6072068118C14A0EB00E69CED</rdf:li> <rdf:li>xmp.did:79B2DD5B372068118083D17BA1D977F3</rdf:li> <rdf:li>xmp.did:79B35F3D52B811E0AFD9E444470F22DA</rdf:li> <rdf:li>xmp.did:79C47D6B9D2068118083F9D3D102D7DD</rdf:li> <rdf:li>xmp.did
2022-03-15 16:08:14 UTC	5658	IN	Data Raw: 2e 64 69 64 3a 38 38 42 41 33 41 30 46 44 45 41 38 45 32 31 31 41 31 41 34 38 31 43 35 33 38 36 42 30 34 46 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 38 45 32 46 41 38 38 30 42 32 30 36 38 31 31 38 46 36 32 46 31 38 39 41 38 38 36 45 43 31 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 38 45 34 44 39 45 33 43 45 32 30 36 38 31 31 39 37 41 35 43 37 36 39 32 36 46 39 35 44 38 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 38 46 34 37 39 30 39 30 38 32 30 36 38 31 31 38 43 31 34 41 45 33 36 46 44 42 30 44 36 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 38 46 36 33 32 39 32 46 34 32 30 36 38 31 31 38 37 Data Ascii: .did:88BA3A0FDEA8E211A1A481C5386B04F7</rdf:li> <rdf:li>xmp.did:88E2FA880B2068118F62F189A886EC1B</rdf:li> <rdf:li>xmp.did:88E4D9E3CE20681197A5C76926F95D8A</rdf:li> <rdf:li>xmp.did:88F47909082068118C14AE36FDB0D67E</rdf:li> <rdf:li>xmp.did:88F63292F420681187
2022-03-15 16:08:14 UTC	5674	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 34 46 44 41 32 44 30 42 32 30 36 38 31 31 42 34 42 43 43 32 41 38 45 42 43 37 38 31 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 35 41 36 38 42 45 30 37 32 30 36 38 31 31 39 32 42 30 45 39 30 44 30 34 38 45 41 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 36 61 39 62 38 38 2d 66 32 33 36 2d 34 61 31 63 2d 61 39 35 33 2d 30 31 66 31 62 38 36 62 62 65 30 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 36 37 66 34 34 63 63 2d 61 32 63 31 2d 38 63 34 64 2d 61 30 35 34 2d 36 34 30 36 35 66 38 63 64 37 66 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: df:li> <rdf:li>xmp.did:964FDA2D0B206811B4BCC2A8EBC78135</rdf:li> <rdf:li>xmp.did:965A68BE0720681192B0E90D048EA72C</rdf:li> <rdf:li>xmp.did:966a9b88-f236-4a1c-a953-01f1b86bbe0e</rdf:li> <rdf:li>xmp.did:967f44cc-a2c1-8c4d-a054-64065f8cd7fb</rdf:li> <rdf:li>
2022-03-15 16:08:14 UTC	5681	IN	Data Raw: 3a 39 61 37 61 62 37 39 35 2d 63 62 38 30 2d 31 31 34 64 2d 38 34 31 33 2d 30 39 33 36 32 66 66 34 62 63 35 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 62 31 37 63 34 32 32 2d 66 66 32 37 2d 34 66 61 37 2d 39 32 37 61 2d 36 33 39 38 63 30 33 33 31 35 37 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 62 37 35 63 36 36 63 2d 33 30 62 62 2d 35 65 34 64 2d 61 39 33 30 2d 62 35 65 32 62 31 34 36 37 39 38 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 62 38 62 62 33 64 31 2d 66 35 61 33 2d 34 61 63 38 2d 39 65 66 61 2d 62 37 31 36 36 62 38 36 33 37 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 62 39 31 33 36 Data Ascii: :9a7ab795-cb80-114d-8413-09362ff4bc57</rdf:li> <rdf:li>xmp.did:9b17c422-ff27-4fa7-927a-6398c033157d</rdf:li> <rdf:li>xmp.did:9b75c66c-30bb-5e4d-a930-b5e2b1467985</rdf:li> <rdf:li>xmp.did:9b8bb3d1-f5a3-4ac8-9efa-b7166b863714</rdf:li> <rdf:li>xmp.did:9b9136
2022-03-15 16:08:14 UTC	5697	IN	Data Raw: 69 64 3a 42 36 36 37 30 39 45 45 37 33 37 42 45 30 31 31 41 46 44 32 39 30 31 33 32 44 30 34 34 45 34 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 36 36 42 31 34 33 32 37 36 36 34 45 30 31 31 42 45 34 31 42 31 35 41 36 41 30 32 39 39 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 36 38 38 30 42 41 31 41 44 32 30 36 38 31 31 38 32 44 34 43 45 42 42 36 42 31 30 43 37 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 36 39 31 46 43 31 38 35 35 32 30 36 38 31 31 39 42 34 37 38 38 43 32 30 42 38 44 35 37 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 36 39 46 31 33 38 37 42 32 32 33 36 38 31 31 42 39 35 36 Data Ascii: id:B66709EE737BE011AFD290132D044E4B</rdf:li> <rdf:li>xmp.did:B66B14327664E011BE41B15A6A029915</rdf:li> <rdf:li>xmp.did:B6880BA1AD20681182D4CEBB6B10C7C6</rdf:li> <rdf:li>xmp.did:B691FC18552068119B4788C20B8D5749</rdf:li> <rdf:li>xmp.did:B69F1387B2236811B956
2022-03-15 16:08:14 UTC	5713	IN	Data Raw: 42 45 36 42 35 43 32 30 36 38 31 31 38 46 36 32 43 37 34 44 31 32 41 35 36 36 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 44 46 31 34 46 33 36 31 39 32 30 36 38 31 31 42 45 39 43 38 38 46 42 34 46 36 44 39 32 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 45 30 42 34 41 30 44 39 36 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 45 31 43 41 33 37 45 38 38 42 45 44 45 31 31 42 46 33 36 39 32 39 31 35 41 35 41 32 45 43 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 45 32 33 45 33 42 30 30 46 32 30 36 38 31 31 38 37 31 46 39 44 41 45 41 46 31 Data Ascii: BE6B5C2068118F62C74D12A566D9</rdf:li> <rdf:li>xmp.did:CDF14F3619206811BE9C88FB4F6D925B</rdf:li> <rdf:li>xmp.did:CE0B4A0D96226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:CE1CA37E88BEDE11BF3692915A5A2ECB</rdf:li> <rdf:li>xmp.did:CE23E3B00F206811871F9DAEAF1
2022-03-15 16:08:14 UTC	5721	IN	Data Raw: 32 30 36 38 31 31 39 32 42 30 42 46 30 39 37 46 37 43 35 37 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 36 46 45 45 34 41 39 45 35 31 33 45 34 31 31 38 30 45 37 43 37 41 34 35 41 43 38 34 46 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 37 30 41 32 43 31 35 31 33 33 39 45 30 31 31 39 31 32 33 42 44 32 33 32 32 30 46 30 45 41 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 37 30 43 38 31 39 37 32 43 32 30 36 38 31 31 39 31 30 39 38 30 35 41 34 35 37 46 42 44 35 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 37 32 38 31 42 35 35 43 33 32 30 36 38 31 31 42 45 33 33 45 44 33 44 43 44 31 32 32 39 38 36 3c Data Ascii: 20681192B0BF097F7C5780</rdf:li> <rdf:li>xmp.did:D6FEE4A9E513E41180E7C7A45AC84F73</rdf:li> <rdf:li>xmp.did:D70A2C151339E0119123BD23220F0EAC</rdf:li> <rdf:li>xmp.did:D70C81972C2068119109805A457FBD57</rdf:li> <rdf:li>xmp.did:D7281B55C3206811BE33ED3DCD122986<
2022-03-15 16:08:14 UTC	5737	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 45 38 39 30 34 39 43 30 41 32 30 36 38 31 31 41 39 36 34 46 36 37 32 31 34 37 33 31 41 46 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 45 39 37 34 41 39 33 35 34 32 33 36 38 31 31 41 44 33 39 42 31 41 36 39 43 31 32 37 46 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 45 42 42 38 30 33 42 30 38 39 36 45 30 31 31 41 38 39 44 39 36 39 33 39 44 31 39 36 42 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 45 42 46 36 38 44 32 39 43 32 33 36 38 31 31 41 36 44 44 42 30 39 35 42 30 31 45 30 42 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 45 45 46 Data Ascii: li> <rdf:li>xmp.did:EE89049C0A206811A964F67214731AFC</rdf:li> <rdf:li>xmp.did:EE974A9354236811AD39B1A69C127F67</rdf:li> <rdf:li>xmp.did:EEBB803B0896E011A89D96939D196B3F</rdf:li> <rdf:li>xmp.did:EEBF68D29C236811A6DDB095B01E0B39</rdf:li> <rdf:li>xmp.did:EEF
2022-03-15 16:08:14 UTC	5753	IN	Data Raw: 30 37 32 30 36 38 31 31 42 36 42 46 45 33 42 37 33 34 31 36 37 35 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 37 46 31 31 37 34 30 37 32 30 36 38 31 31 42 43 43 32 39 42 46 33 44 44 36 35 33 34 45 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 38 35 41 43 39 35 34 37 41 37 44 46 31 31 39 43 46 45 46 39 38 33 38 39 36 34 37 46 35 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 41 45 35 35 38 35 43 30 32 30 36 38 31 31 39 39 34 43 45 38 33 42 42 42 43 38 36 44 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 39 42 33 32 33 35 38 42 36 41 31 45 30 31 31 42 36 31 33 42 35 34 33 37 41 45 44 33 32 41 Data Ascii: 07206811B6BFE3B734167548</rdf:li> <rdf:li>xmp.did:F97F117407206811BCC29BF3DD6534EB</rdf:li> <rdf:li>xmp.did:F985AC9547A7DF119CFEF98389647F58</rdf:li> <rdf:li>xmp.did:F9AE5585C0206811994CE83BBBC86D74</rdf:li> <rdf:li>xmp.did:F9B32358B6A1E011B613B5437AED32A
2022-03-15 16:08:14 UTC	5756	IN	Data Raw: 38 31 31 38 30 38 33 39 42 35 34 33 36 33 43 37 31 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 43 31 41 46 36 45 36 39 45 30 38 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 38 43 36 44 42 34 39 38 32 44 39 30 32 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 41 34 32 45 35 45 32 44 42 35 38 37 42 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 41 36 44 46 36 42 30 35 44 34 31 37 39 42 38 3c 2f 72 64 Data Ascii: 81180839B54363C71C8</rdf:li> <rdf:li>xmp.did:FB7F1174072068118083C1AF6E69E085</rdf:li> <rdf:li>xmp.did:FB7F11740720681188C6DB4982D90274</rdf:li> <rdf:li>xmp.did:FB7F1174072068118A42E5E2DB587B87</rdf:li> <rdf:li>xmp.did:FB7F1174072068118A6DF6B05D4179B8</rd
2022-03-15 16:08:14 UTC	5772	IN	Data Raw: 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 61 34 34 32 37 66 63 2d 62 62 65 34 2d 64 34 34 37 2d 38 38 37 35 2d 62 35 37 65 66 61 66 38 64 63 39 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 61 61 34 31 35 35 61 2d 35 34 61 32 2d 34 64 35 62 2d 62 63 36 33 2d 30 34 37 37 33 64 38 33 65 61 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 61 64 39 37 62 39 32 2d 30 37 37 30 2d 34 31 64 36 2d 39 30 30 61 2d 33 35 62 32 63 39 64 30 37 63 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 62 61 65 39 65 33 64 35 2d 34 62 61 31 2d 34 39 66 63 2d 39 33 37 33 2d 34 62 66 31 36 37 37 63 30 36 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c Data Ascii: <rdf:li>xmp.did:ba4427fc-bbe4-d447-8875-b57efaf8dc9a</rdf:li> <rdf:li>xmp.did:baa4155a-54a2-4d5b-bc63-04773d83ea46</rdf:li> <rdf:li>xmp.did:bad97b92-0770-41d6-900a-35b2c9d07c27</rdf:li> <rdf:li>xmp.did:bae9e3d5-4ba1-49fc-9373-4bf1677c0673</rdf:li> <rdf:l
2022-03-15 16:08:14 UTC	5788	IN	Data Raw: 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 65 32 31 36 64 62 38 2d 34 66 31 33 2d 63 31 34 63 2d 38 32 63 39 2d 65 31 36 30 38 30 63 37 64 30 35 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 65 34 65 37 36 30 66 2d 37 34 34 62 2d 34 30 61 62 2d 62 37 38 66 2d 32 36 35 32 66 32 65 36 63 38 36 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 65 61 31 61 64 66 32 2d 33 39 30 36 2d 39 30 34 39 2d 61 36 36 39 2d 35 35 37 37 30 66 65 64 64 38 64 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 65 65 61 62 63 32 37 62 2d 31 63 36 32 2d 34 39 62 38 2d 62 63 65 62 2d 62 36 64 34 35 62 64 34 34 33 31 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: > <rdf:li>xmp.did:ee216db8-4f13-c14c-82c9-e16080c7d059</rdf:li> <rdf:li>xmp.did:ee4e760f-744b-40ab-b78f-2652f2e6c86e</rdf:li> <rdf:li>xmp.did:eea1adf2-3906-9049-a669-55770fedd8d1</rdf:li> <rdf:li>xmp.did:eeabc27b-1c62-49b8-bceb-b6d45bd44318</rdf:li> <rdf:
2022-03-15 16:08:14 UTC	5793	IN	Data Raw: 63 61 65 31 34 37 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 61 38 66 64 36 61 66 2d 61 37 36 66 2d 34 39 63 64 2d 62 61 65 36 2d 34 66 39 62 35 65 31 32 31 36 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 61 64 65 38 31 31 33 2d 66 62 61 61 2d 34 61 64 63 2d 38 33 37 35 2d 33 35 31 63 35 64 61 36 63 39 35 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 62 33 30 65 30 65 38 2d 34 31 35 65 2d 34 38 38 64 2d 61 39 65 39 2d 33 66 33 33 63 65 37 30 66 33 36 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 62 34 39 30 35 37 32 2d 30 31 66 64 2d 34 32 38 32 2d 61 34 31 39 2d 62 36 36 36 35 32 38 63 31 63 37 31 Data Ascii: cae1478</rdf:li> <rdf:li>xmp.did:fa8fd6af-a76f-49cd-bae6-4f9b5e121686</rdf:li> <rdf:li>xmp.did:fade8113-fbaa-4adc-8375-351c5da6c954</rdf:li> <rdf:li>xmp.did:fb30e0e8-415e-488d-a9e9-3f33ce70f36b</rdf:li> <rdf:li>xmp.did:fb490572-01fd-4282-a419-b666528c1c71
2022-03-15 16:08:14 UTC	5809	IN	Data Raw: e8 30 5a 68 34 4a 68 00 a6 b0 02 dd 69 81 6e 80 0b 74 1a 25 34 18 2d ba 00 2d d0 02 5b a0 02 dd 00 16 e8 00 b7 40 09 6e 80 0b 74 00 96 e8 30 29 a0 d0 2b a0 c0 a6 b6 40 29 ac 34 29 ad 30 4a 68 00 a6 80 0a 68 00 a6 80 0d 00 14 d0 02 53 5b 20 14 d6 00 53 5a 01 4d 00 14 d0 01 4d 00 14 d0 01 4d 06 05 34 1a 14 d0 01 4d 00 14 d0 60 53 41 a1 4d 00 14 d0 01 4d 06 05 34 1a 25 29 a0 c1 69 a0 02 9a d0 0a 6b 0d 0a 68 30 29 a0 02 9a 00 29 a0 02 9a d0 0a 68 00 d0 01 4d 60 05 35 a0 14 d0 01 4d 60 05 35 a0 14 d0 01 4d 00 14 d0 01 4d 00 14 d0 01 4d 00 14 d0 01 4d 00 14 d0 01 4d 00 14 d0 01 4d 00 14 d0 01 4d 00 14 d0 68 53 58 60 53 5a 01 4d 61 a1 4d 06 05 35 a0 1a 00 29 ac 34 35 a0 14 d0 60 53 40 05 34 00 b4 d0 68 94 a6 80 0d 06 0b 4d 00 25 34 01 ff d5 fb 0e 9a f6 cf 28 29 Data Ascii: 0Zh4Jhint%4--[@nt0)+@)4)0JhhS[ SZMMM4M`SAMM4%)ikh0))hM`5M`5MMMMMMMhSX`SZMaM5)45`S@4hM%4()
2022-03-15 16:08:14 UTC	5825	IN	Data Raw: 11 ee b6 8b ad e7 81 b8 1b 78 2e 2e 07 99 79 34 fb 9e ef 4c dc e4 22 48 99 40 58 10 83 ec 04 16 17 c4 6d 59 89 af 6f d3 56 88 50 89 3f 52 57 ee b6 24 bb b6 f1 b6 6d 51 3c 67 ea 1d 25 99 a7 6a c3 1a 21 56 2e ca 05 14 32 9b 68 69 5a f0 ff 00 33 59 48 4d c9 af 83 47 c3 9b 07 1d 22 de 5a 30 e5 11 91 bd a4 b3 03 6a bd fc 14 29 a5 a2 8b 4b 9b 92 f1 d4 9c 2c 9a 9b 78 32 fd a3 75 c6 c1 c7 6c fd d2 39 32 32 f7 09 da 38 a3 81 4b 1a 3c 8c 7f 6c af 5b c4 91 75 19 18 2f 1e 3f a0 09 b5 82 ab 92 e5 b5 ed 1b 86 51 97 0e 69 cc d2 4e cc e6 58 02 22 42 aa 79 5d e9 68 f6 ad 5d ee 6a b1 1c 34 94 53 c0 d6 b4 15 cf 3e f2 7f e9 30 34 89 8e 24 c7 74 fa 69 87 53 39 44 4a da 8e 08 ba ce e0 91 c4 7f 30 6b ee d7 5e 9c b3 9e f8 33 19 70 b7 bf 23 87 2d a3 cb ef 6f 70 63 c3 93 34 bd 1d Data Ascii: x..y4L"H@XmYoVP?RW$mQ<g%j!V.2hiZ3YHMG"Z0j)K,x2ul9228K<l[u/?QiNX"By]h]j4S>04$tiS9DJ0k^3p#-opc4
2022-03-15 16:08:14 UTC	5833	IN	Data Raw: 78 7c 08 ff 00 d7 5d 14 d4 e7 27 3d b6 a8 c1 0e cf 78 a9 e3 ae c4 a0 e4 6e 4f 18 f9 f9 5b 5c 9d cc 49 19 38 f2 07 81 fc c7 23 aa 3a ab 72 46 5d 78 2e 1b 4f 9e c5 29 11 ee 29 63 7f f2 27 15 fe 2b cc 7f 0a eb 86 ff 00 59 af e2 74 57 7f a9 71 c7 9e 2c a8 c4 b0 b0 78 cf 26 53 51 af 3d a8 c3 3a d3 93 ad 35 86 85 34 00 11 a0 02 9a 00 29 a0 02 9a 00 29 a0 02 9a 00 29 a0 02 9a 00 29 a0 02 9a 00 29 a0 04 b7 5a 01 4d 60 0b 6e 80 12 9a 00 2d d0 01 4d 00 14 d0 01 4d 00 14 d0 01 4d 00 2d 34 00 94 d0 02 d3 40 06 80 0a 68 01 34 00 ba 00 4d 00 2e 80 0d 00 1a 00 34 00 68 01 6b a0 03 40 05 74 00 68 00 d0 01 a0 03 40 1f ff d1 fa ae 9a f7 cf 24 29 5d 64 81 e5 93 44 99 07 8d 31 82 68 01 34 00 68 00 d6 80 68 00 d6 00 0d 00 29 04 68 01 34 00 68 01 34 01 e8 12 39 1d 00 7a 13 b8 Data Ascii: x\|]'=xnO[\I8#:rF]x.O))c'+YtWq,x&SQ=:54)))))ZM`n-MMM-4@h4M.4hk@th@$)]dD1h4hh)h4h49z
2022-03-15 16:08:14 UTC	5849	IN	Data Raw: 0b 98 22 55 92 51 1c ed 45 25 4a a0 67 af 13 6a d1 6d 3f 05 e9 d5 d5 b1 04 5a cc 93 79 63 17 c8 e2 ff 00 9c 8d 86 34 8a 28 93 aa b9 75 50 aa 6b 71 1c 4f a5 a3 a4 aa db 71 3a e7 4e 1c a2 cf 28 61 83 b5 c9 3e 2c 78 d8 ae 5e 38 6d 8e d6 25 51 42 71 8d c2 28 eb 65 1f 8f 2b 5a ed 56 cf d4 44 4e e5 62 ac 57 46 03 3e 73 80 e1 6e 5b 58 07 50 45 18 af 1a bf 51 ff 00 2c 75 fc 2d d2 56 92 33 b4 0f e0 d9 a6 9f 2a 39 93 bb 8a cc cc 08 b2 80 85 26 96 52 be e6 e0 aa f4 b9 53 ac 72 d5 12 82 6d 92 1f d1 f0 71 a4 59 a5 8d e3 0d 5f f3 02 da ec 78 73 6a bf 16 af 55 2d 3f a7 53 97 e4 6f d0 e5 83 b6 c5 26 0c b8 d2 61 52 66 9a b2 23 48 1d 68 59 42 f1 52 d2 3f 45 d6 25 8b 6f 26 b2 87 56 6f 32 22 58 3d 47 b6 cf 8a d2 40 15 27 5e e2 b3 4a d5 40 a8 2b 62 20 53 75 a2 da 31 b9 47 4d Data Ascii: "UQE%Jgjm?Zyc4(uPkqOq:N(a>,x^8m%QBq(e+ZVDNbWF>sn[XPEQ,u-V3*9&RSrmqY_xsjU-?So&aRf#HhYBR?E%o&Vo2"X=G@'^J@+b Su1GM
2022-03-15 16:08:14 UTC	5865	IN	Data Raw: 57 77 45 08 2d 14 4b 78 fb c7 3b 63 e7 f3 d9 c6 9a eb 55 f4 39 db f5 2b f0 78 9a e4 c5 3a e4 b4 78 58 32 3c 05 d1 2a 24 65 6e 3d b1 41 71 2e bc e3 f9 38 3b 6b b5 3e 20 e4 67 0f 2a 8f c6 70 e3 5c 79 95 9e 6e da 1c 75 45 b9 91 08 bf f7 98 90 6e 2b 4e 95 20 2a d2 ee 3a e8 d6 99 1b b2 87 b9 e5 6d d9 6e f2 e2 43 26 39 23 da ac 58 fe 43 97 01 ae a2 24 44 92 2b 8e f3 92 18 1e 00 8e 00 fe 3c ce 89 18 f1 f5 17 38 5a 17 25 b9 fa 54 69 07 91 e3 52 46 26 e0 6d 02 b4 e3 c0 ff 00 e3 ff 00 07 59 06 49 e4 c3 2a 2d 41 a3 2f 00 28 6b 4f fc 72 d6 40 d2 77 ed 4c 89 73 a1 a1 0a 6a c3 fb 14 eb 20 d9 3b 63 dd fe 6c 74 62 7d aa 7d a6 9c c6 9d 0a d9 e6 4e d3 a3 09 00 59 38 fb 45 07 13 e8 39 8d 63 01 30 f2 63 c4 eb 0e 11 89 e1 42 38 91 ca e1 f2 d7 d3 45 59 ac 7a b9 00 c9 c2 c6 02 Data Ascii: WwE-Kx;cU9+x:xX2<$en=Aq.8;k> gp\ynuEn+N :mnC&9#XC$D+<8Z%TiRF&mYI-A/(kOr@wLsj ;cltb}}NY8E9c0cB8EYz
2022-03-15 16:08:14 UTC	5872	IN	Data Raw: f3 6d f2 91 b8 4b 16 2c 8a 82 67 04 2b b3 58 ac 40 af c1 82 d4 72 fd 5a 85 b5 c0 49 36 98 99 cc 47 46 3d c7 e1 35 7f fb 9d 4f 00 3a db fc 77 75 dd e6 ec 62 a4 4c e4 5c 40 97 88 03 d7 db cb f1 d4 6f 75 45 2c a5 2a ec e1 16 1d ab c0 d2 45 13 67 ba 84 04 de dc 4a dc 01 21 23 0a 2e 95 b9 5c 78 2f e9 bb 5e 75 be c5 af fc 70 77 d7 4a af f2 c9 73 c1 c2 c5 c5 88 36 12 b2 ac 68 14 1b 54 02 4d 6e 01 7f 50 1f fe 11 5d 72 2a cb 96 74 b7 88 44 34 79 bb 8d a3 b8 b7 c2 8e a2 39 1e e4 50 54 d6 ac 0d 0d 2b 73 32 af b8 f0 d5 89 93 fb 5e c5 9e 93 8c 6c 88 c2 c6 8c 64 76 b9 5b b6 28 ac 09 07 88 77 e2 10 7c ab cf 50 b4 db 05 13 4b 27 ad c6 6c 5c ec c3 34 71 94 82 1f da 12 46 6d 72 c4 9e e9 57 3c 6d e5 ed a7 16 e9 6f 5d 2e 27 01 98 3b ec d1 0c 27 3b ce 68 b6 58 ef f6 80 e1 95 Data Ascii: mK,g+X@rZI6GF=5O:wubL\@ouE,EgJ!#.\x/^upwJs6hTMnP]rtD4y9PT+s2^ldv[(w\|PK'l\4qFmrW<mo].';';hX
2022-03-15 16:08:14 UTC	5888	IN	Data Raw: d3 1a 32 b3 4a c9 75 f7 ad d6 b5 8a c8 9c 64 67 9c 1e e5 c7 ca c7 c1 87 c4 b0 14 65 65 ce ef 24 ae ee 15 20 8a 22 aa 5a c4 f9 2c 40 b1 86 66 32 ca ae dd 56 e9 da f2 64 c6 05 4d cf 1f 6a 78 4e dc c2 2c 38 a3 92 27 69 01 64 9d 80 7e db 46 00 a0 09 db ee b3 da 65 92 bd 6d c5 9b 4a dc e1 82 5e 4e d9 12 c7 b4 61 ce 43 3e 35 8f 47 c8 00 33 bb 44 82 69 26 35 ba e0 6d 91 50 15 3c 07 f3 0d 15 72 cd 67 3f 20 f2 0d bb 6f c1 87 27 2a 14 c7 ce cc 84 98 e5 04 d7 1a 49 16 a2 ea 80 12 5b 2d 5b ff 00 f9 2a 9c 97 4e ab 22 49 5a de f6 dc ed 83 66 83 78 ce 51 26 56 28 ee cc b3 48 43 34 b1 f4 c2 88 c8 18 48 4a db 2b f2 4e 9e 57 31 d6 25 2f 03 4b 48 b2 f8 76 c2 db 5e e1 3c 9b 96 4a cf b8 64 aa 99 6e 6b 4a 06 46 75 92 46 ad 00 0b d4 23 66 09 1f 0a 7e e3 57 50 b3 9c 14 58 c9 df Data Ascii: 2Judgee$ "Z,@f2VdMjxN,8'id~FemJ^NaC>5G3Di&5mP<rg? o'I[-[N"IZfxQ&V(HC4HJ+NW1%/KHv^<JdnkJFuF#f~WPX
2022-03-15 16:08:14 UTC	5904	IN	Data Raw: a9 ff 00 9c fc 22 9f e3 2f 2c 93 da 3e c9 f8 8c 72 07 c8 83 33 22 94 60 d3 48 23 49 6a 68 44 56 15 67 0b ee 24 0f f0 ab 0d 4e ff 00 6f 62 e2 10 d5 fa f4 f3 93 42 c1 c4 4f 13 8a 4d b7 c7 b0 60 86 02 a6 3a 33 14 05 c1 02 b2 4c a1 a4 71 fd 8d 77 af a6 bc ed 97 ee e6 cd b3 b6 b5 eb 84 89 3c 25 cc cb 80 b1 98 99 09 28 64 4a 22 00 0f 3b d8 82 a6 ff 00 cc 1b 54 5b c7 52 82 92 4d e0 f8 fe 46 34 6a 1d cf a8 67 62 18 83 cc 1e 27 aa ad d5 c5 45 00 f7 71 d3 3a b1 3b 22 6b 6e f1 fc 6c 60 4e 2c 24 e4 90 cd 24 b2 af 33 4e 06 f1 5a f0 e4 00 e3 ad 78 42 cc b3 ce 26 6e 24 23 2a 3c 45 0b 3c 7d 4c 59 ab 56 6e 95 01 47 53 0a f4 dc c1 6d 2b e9 66 b9 9b 9e 0b a5 1c 91 90 c1 1e e7 8b f5 89 0d c9 d3 1b 29 5a b0 72 f4 2c cc e7 af a5 cb 0b ba 60 51 6a f5 f4 eb 5d 70 0d e4 97 dd 46 Data Ascii: "/,>r3"`H#IjhDVg$NobBOM`:3Lqw<%(dJ";T[RMF4jgb'Eq:;"knl`N,$$3NZxB&n$#*<E<}LYVnGSm+f)Zr,`Qj]pF
2022-03-15 16:08:14 UTC	5912	IN	Data Raw: 9a 94 d3 2c 60 56 cf 09 04 eb 0a 40 f2 18 8a 51 53 a4 1b 95 12 95 0d c0 da de f3 f2 87 e1 ed ba ed 03 96 54 f8 db 16 df 7e 43 f6 e4 90 bf 69 48 67 67 66 61 f1 ea 61 d4 a4 f0 b1 7d 68 ba 1e 4c e0 4d d2 1d e3 72 c4 77 47 6c 1c 4b 07 02 c1 72 27 36 06 ed 20 06 c8 c3 37 cc 7a fe 1d bf 76 9e 7d 05 8f 53 dc b3 6d db 76 22 c1 90 89 0c 2a c4 22 33 50 9f 45 8c 5d 6d ec 58 7a 74 13 5e b6 ae b9 ec bb 17 ae 08 8c ef 3d c3 de d2 4c 1d 85 e4 94 e2 cb 64 b3 46 5a 90 b5 05 2a 07 17 b4 f4 5a 8b 24 7c cb fb 74 34 ea 8d 4a 46 11 6e 5b aa e3 85 c5 06 48 f2 0a 3c 44 74 08 94 57 9a b0 65 6a 8a bb 5a 3f 5f fc 42 a3 51 7f 92 dc 9e 37 5c a9 e6 2b 04 15 94 41 13 c0 25 26 94 0d db 65 2e 1f 8b ac cc ca af d3 d1 6d 3f 52 e9 90 32 a9 91 be 36 d5 b4 e2 41 b4 8c 48 61 2a 46 41 54 05 20 Data Ascii: ,`V@QST~CiHggfaa}hLMrwGlKr'6 7zv}Smv""3PE]mXzt^=LdFZZ$\|t4JFn[H<DtWejZ?_BQ7\+A%&e.m?R26AHa*FAT
2022-03-15 16:08:14 UTC	5928	IN	Data Raw: 64 b8 74 a8 14 55 fc 56 de 9e 3a eb 44 48 e4 21 c9 57 62 61 35 25 01 a8 52 7d 47 a7 13 ac 90 83 80 90 42 68 b2 56 86 a0 fa 70 f8 f3 1f 86 b6 40 fa 4b ec f7 fd bf ff 00 54 86 1f 20 f2 98 d4 e0 c8 a2 58 b1 4d 41 21 87 43 b5 05 68 fc 29 1b 7c a6 e7 fd 3a f2 77 7d 87 6c 57 fa ff 00 d0 eb a6 b4 b2 ff 00 a1 f4 3e e1 b7 b7 d4 c3 fd 3c 27 7b 1a 30 b1 c2 aa 12 24 0d 50 4d 05 55 d8 2f b6 83 a3 9f 0a f4 f9 cf 2f 07 55 70 b2 4a c3 9d 93 0c 73 61 e5 c5 dc 92 28 e2 67 91 96 d5 73 c4 31 47 e9 ad 94 e4 38 71 aa f0 d6 3b 61 a6 0a b2 e5 15 dc 1c dc 7c 96 97 30 c8 7b 90 ca e0 47 28 52 cc aa 45 42 0a d3 aa ee d2 fa d9 62 f3 7b da 69 49 46 e0 79 81 b7 65 4e 8d 36 44 51 c6 8e 49 60 0d 6d 00 d4 28 63 45 6a 28 f7 56 95 67 66 f4 d3 aa 8a ed f9 1b e0 ee af bd e4 e3 67 63 48 f1 e0 Data Ascii: dtUV:DH!Wba5%R}GBhVp@KT XMA!Ch)\|:w}lW><'{0$PMU//UpJsa(gs1G8q;a\|0{G(REBb{iIFyeN6DQI`m(cEj(VgfgcH
2022-03-15 16:08:14 UTC	5944	IN	Data Raw: 8a 7c 78 ab 72 e0 7b bc 0b 2b c9 09 87 95 87 e3 50 c5 8d 87 19 c6 c4 92 15 65 95 d8 95 a0 36 0b a3 63 72 ab b7 e9 aa 3d d6 dc a3 dc b7 5d b2 3d 30 45 64 66 6e 98 2d 93 b9 ed 79 70 98 23 48 fb b1 46 8c ab c1 80 a2 1a fb 65 af 06 8d 45 ad 50 cb 25 3b 9a d4 28 bb 44 d0 ee 58 42 4c 00 71 8e 44 84 45 18 8c bb 25 fd 75 4b 07 00 c3 85 ed d5 c2 96 c7 6e b1 a7 3e a3 26 a0 e1 b7 60 f9 02 42 f2 ee 39 2d 91 b4 ae 4b df 1c ef 1b 4c a0 8a a8 b8 a0 2d 53 c2 d6 b4 ad 45 16 ee 9d 0d a6 cc 49 a1 ae 7e e3 b6 ef 58 85 1f 19 31 61 7e dc 1d c8 8d c1 55 8f 01 94 a4 06 ba b4 37 b0 65 1d 5d 5a 32 99 a9 a2 6f 3f b1 e0 d8 b3 e2 ca 63 91 1a 13 3b 47 0c 68 91 95 74 54 56 ed d6 d9 1f 81 e1 18 56 ea 0c fa 9f 5e dc 8d 30 41 f8 e6 fb b7 ef 2a 70 36 5d b3 22 48 5c 30 96 6c 89 3f 68 33 71 Data Ascii: \|xr{+Pe6cr=]=0Edfn-yp#HFeEP%;(DXBLqDE%uKn>&`B9-KL-SEI~X1a~U7e]Z2o?c;GhtTVV^0A*p6]"H\0l?h3q
2022-03-15 16:08:14 UTC	5952	IN	Data Raw: 74 c9 91 a5 70 6a e2 27 62 d2 30 01 4a 1e 06 c0 d5 5b 7a ab f1 f5 a6 72 6f 05 a7 6e 18 d8 f8 31 c2 d0 98 26 28 01 86 70 b5 0a 47 c0 16 26 9c 6d 6e 9a 37 c7 96 b1 c1 88 f1 87 ba c7 b7 34 af 91 31 69 dc c7 db 86 1b cc 83 92 80 c7 e6 2c 4f 1b ba 56 bd 5a 69 81 62 46 bb b1 9e 2c e0 d8 58 72 e3 4f 24 a4 4f 2f 60 90 63 1c 9c 14 2a 8a a4 8e a9 0f 50 f7 5a dc b4 c9 e3 26 34 7a da 1b 1e 69 5f 33 30 63 36 6c ce 11 8e 3b 97 99 c2 f0 61 d6 11 c0 e1 c9 49 51 a5 ba 7f b1 b5 1f ee c9 bc cd 8a 67 c7 c8 7c 18 6f 1d b8 58 90 5d 0f b9 64 92 2a 2a 1e 2b 6a f4 fe 2d 5e 1a 2b 68 e0 2c a7 93 d6 24 db aa 62 7e c4 4a 24 c8 46 5e ea 19 67 88 0f 81 70 14 d5 87 32 17 97 b5 f4 26 d0 34 98 e3 1b c8 20 36 af d4 b6 34 a2 40 9f 4e e6 81 f9 05 31 a4 bd bb 54 f3 36 dc b7 7e 35 d3 fb 85 84 Data Ascii: tpj'b0J[zron1&(pG&mn741i,OVZibF,XrO$O/`cPZ&4zi_30c6l;aIQg\|oX]d*+j-^+h,$b~J$F^gp2&4 64@N1T6~5
2022-03-15 16:08:14 UTC	5968	IN	Data Raw: 1e cf 4c 7c 84 cd c8 be 5c 89 0b ac 48 02 90 aa 00 b4 b7 37 fe 76 e4 2b d3 f1 d5 29 ad b5 fa 89 7d 89 3c 17 3d b2 19 ca 8c 77 45 54 40 2e b1 8b 0b 8f 34 15 15 a2 eb d3 d7 57 c1 e7 5e cb 91 fc f7 e3 38 99 40 ec ad 6e 00 12 79 70 0a 07 b8 d7 5d 31 0e 4e 79 95 03 88 67 19 b1 ae 45 8c 8a 47 cd 4a ff 00 66 9d 3e d9 27 1d 70 43 4f 97 24 99 65 e2 3c 51 18 10 a4 85 20 7b 6e 3f cd fd da e5 b5 9b b6 0e b5 54 ab 91 d0 99 e6 c3 49 e7 75 8c 80 0b 10 68 a1 87 3a 57 d2 bf 35 35 7f 12 c8 79 85 92 03 7b c9 84 b9 ca 72 00 53 d5 21 63 c2 30 38 81 ed a7 c4 eb 83 6d d4 c9 dd aa 8e 20 80 87 cd b6 dc d7 31 ed f9 28 f0 82 11 9f df 4e 15 e1 43 fc 2b f1 d7 0d b7 e6 11 d6 b4 be 58 f7 27 7e c2 86 10 22 52 ed 4a 20 1c 3a 8f 25 15 e9 b8 9d 25 ae 90 d5 a3 64 d6 db 95 2d 42 32 32 80 a2 Data Ascii: L\|\H7v+)}<=wET@.4W^8@nyp]1NygEGJf>'pCO$e<Q {n?TIuh:W55y{rS!c08m 1(NC+X'~"RJ :%%d-B22
2022-03-15 16:08:14 UTC	5984	IN	Data Raw: 7f 28 a3 6b ae fb dc 61 64 e7 ae b5 e4 d6 e5 c5 da f7 48 30 20 f1 ec 04 99 62 96 24 69 60 22 69 55 d6 e3 79 76 1e ce 86 a7 0f 9a 97 7a 6b cc 77 b2 6f b3 3a d5 57 83 8e e9 8f ff 00 43 6c c3 6f c8 c9 18 79 3d c6 95 1e 46 a4 c7 ba 00 91 e1 11 15 9a 25 bc d4 2b 1f dd 55 bd e3 b3 81 ad 2b 6b 39 26 ec 91 55 f1 8d c3 7e d9 62 69 b0 f7 1f a8 c0 77 66 60 d0 ab 20 86 82 8e 43 17 ab cc 6e e9 4f de fd ab ae a6 ad 6a 55 e1 a1 15 98 45 8d 9d e6 99 78 ff 00 45 bb 88 d9 a1 4e dc 11 43 35 ac a5 99 5d 5c 02 6d 78 94 f7 0d 5b d0 7e 81 aa 57 5f 5f 02 5a f2 57 f0 bc 26 3b f2 96 5c aa e4 24 94 45 68 64 79 1a ea d5 ac 5b fa 17 e3 77 c3 e0 48 eb ef 04 a0 8a ce d8 b2 23 81 57 33 22 28 41 94 29 8d da 44 92 20 00 29 27 b0 95 46 f4 b5 98 f2 f6 d7 4d d9 3e 10 9d 7f 25 e3 c6 7c 53 0e Data Ascii: (kadH0 b$i`"iUyvzkwo:WCloy=F%+U+k9&U~biwf` CnOjUExENC5]\mx[~W__ZW&;\$Ehdy[wH#W3"(A)D )'FM>%\|S
2022-03-15 16:08:14 UTC	5992	IN	Data Raw: 54 71 af 1e 7a ee 6f e3 59 3c e8 f9 1e 0f ff d0 82 ca f1 0c 2d 9b 26 4c fd 93 21 b0 62 8b 2c 26 45 dd b7 4c 46 2a 4d 55 c1 3d e7 aa f0 55 bb 9d 5a c6 d7 85 5b 3b 72 7d 33 49 70 48 ed d8 fe 3f b7 66 b6 db 36 e1 8b 93 3e 5a af 7d 03 3c d5 94 2b 30 69 65 51 13 04 2d ea 92 32 ab 2f 56 a7 7a b7 98 36 b7 8c 0c 4e e3 b7 e7 e7 37 8e c3 54 c6 db a3 b1 e7 78 e3 85 60 2c 40 0e a8 01 52 0b 74 a5 b5 91 ee b8 de 7d ac f5 b8 ec bc 87 75 30 c9 df 1d c9 f2 1f 00 99 37 09 b2 52 7c 08 a4 b6 28 aa 3b 92 c6 c0 35 19 40 45 56 55 17 74 df c6 a2 ef 75 55 57 b3 c2 06 e3 92 95 e7 5e 3f 9b e6 39 69 b9 ee 82 3c 67 cb 73 16 25 55 62 2c 95 34 9e 50 59 ba 09 f6 dc 7a 51 7f c1 ae fa 6d 54 51 07 33 d7 3e 4a f4 1e 31 91 8f 97 18 cc dd 93 2b 1e 14 58 a5 9a 46 b5 19 6c 1d 28 b7 97 36 28 a8 Data Ascii: TqzoY<-&L!b,&ELF*MU=UZ[;r}3IpH?f6>Z}<+0ieQ-2/Vz6N7Tx`,@Rt}u07R\|(;5@EVUtuUW^?9i<gs%Ub,4PYzQmTQ3>J1+XFl(6(
2022-03-15 16:08:14 UTC	6008	IN	Data Raw: 93 35 d5 3b 42 2b 1e 19 16 ef bb 6d 32 67 bc 4f 0c b9 0c c2 23 21 50 4a 93 d2 fc 07 05 a7 b7 d7 5c 9a 2b 66 a7 d4 eb df 6a d6 d1 e8 5a f6 9f 16 c2 f1 c8 18 c0 2f c8 97 aa 49 5c d5 dd bf 16 e7 4f 80 d7 6d 34 2d 6a 79 67 0d f7 bd 8f f0 42 ee f9 bb 9e e6 24 c2 c5 4b 66 8d d0 d6 9d 25 6b c7 89 d7 36 cb 5a d8 47 4e ba d6 b9 63 d3 b7 1d b3 1c 18 10 2d 2a 58 7a 53 9f 0f e3 ad e9 d5 19 df b3 c9 ff d2 c2 46 ed d8 cf 97 03 3d cc 58 b0 b9 6a 46 8a cc ae 01 02 a1 8a ad a7 82 d0 75 0f f6 75 ce b2 a5 1e c7 0e 09 5f 1d db e6 df 72 3f a7 e3 cc 8a 24 37 59 91 1c 89 19 55 e2 64 47 3f b6 c5 14 fe a0 7e 5f c7 5b 6d 9d 57 12 62 a4 be 4b 8f 8b 78 76 46 cd 91 06 eb 81 9a a5 5d d8 45 8f 2e 3a 98 a6 2a d4 66 79 65 0f 6a 80 8d 41 46 3d 56 22 96 e7 e7 df 67 7c 34 75 aa 75 cc 96 38 Data Ascii: 5;B+m2gO#!PJ\+fjZ/I\Om4-jygB$Kf%k6ZGNc-XzSF=XjFuu_r?$7YUdG?~_[mWbKxvF]E.:fyejAF=V"g\|4uu8
2022-03-15 16:08:14 UTC	6024	IN	Data Raw: 61 2b 4b 9b 22 01 1a a0 a0 e3 c5 ae 63 f8 7c da f3 6c f1 83 d2 ad 63 92 fb e2 7b 7e 3b c6 21 80 b2 98 a2 58 c8 61 c0 53 e0 3f d7 a6 d5 5e c4 f6 da 07 e3 3f 13 61 06 6c 92 b1 6d f2 35 1e 46 2a 15 0f ea 76 27 a4 1d 75 6b 50 ce 6b e4 be 6d 19 38 39 18 71 e4 60 94 7c 69 50 48 92 29 e8 7b b9 15 61 ce ba f6 aa 92 58 3c 8b 4c e4 83 f2 cc bc 28 71 84 39 b2 28 ef dd 12 9a 81 c4 02 4f e2 75 cb ba 12 c9 d5 a1 36 f0 51 fc 43 c4 6d f0 c8 d3 08 d2 45 33 34 4d 28 a8 17 c8 48 60 3e 07 9d ba e7 d7 ab b5 64 e9 db b6 2f 03 df 1a f0 94 f1 f5 c9 9a 67 6c 89 a6 21 9f 92 a9 60 28 aa a8 bd 2a 3f 0d 2d 74 fa 85 b7 4f 03 dd a1 e3 da a2 3b 76 ed 21 c8 9d e6 ee 5c a3 85 08 b8 2b 28 af 05 e5 c7 9e a9 48 ae 18 b7 9b 66 a4 0e 7e 46 d0 37 89 b3 f3 02 f7 99 68 25 64 36 a8 51 55 51 5f cf Data Ascii: a+K"c\|lc{~;!XaS?^?alm5Fv'ukPkm89q`\|iPH){aX<L(q9(Ou6QCmE34M(H`>d/gl!`(?-tO;v!\+(Hf~F7h%d6QUQ_
2022-03-15 16:08:14 UTC	6031	IN	Data Raw: 82 a3 d4 8f 5d 76 57 4a b2 52 72 3d ce ad c1 ef 7c 96 69 31 24 c6 c0 8d 7b 83 a4 51 80 0a 0f 0a f0 ff 00 db fd ba a6 c7 88 aa 13 5a cc d9 95 0d ff 00 61 de b7 5d bd 36 bd a1 a1 8f 2e 23 6a 3b b3 90 80 73 91 cd 59 98 8f 95 5b dd f3 6b 99 eb b5 b0 75 57 65 6b 2d 96 bc f2 9e 2f b2 3c 8a ca d2 43 15 1d 85 11 4b d3 8b 31 1c bf be 83 5d af ff 00 ae a7 15 7f fb 2c 66 7b 5e 01 f3 fd ea 0d f5 93 25 62 ed b8 81 9c 7e ca 1a d1 9d 6d 6a 49 dc 1f e5 1a 91 6e bc f6 9e c6 7a 1d 96 ba 9b 2e db b7 e3 ed 24 45 83 0a 44 18 5c e4 00 38 9f c4 73 27 5e b5 28 a9 c1 e4 5e fd f9 20 77 df ea f9 5b b6 3f f4 94 8c c4 c4 2c f2 97 a3 2a 57 a8 2f 06 e3 ae 6d 97 b3 b6 0e 9d 75 aa af b8 b2 65 e6 7d 38 af 3e 62 87 80 34 1a e8 b5 8e 7a d4 cc bc cf cd a3 dd fc 6b eb 70 f1 e4 97 1c 99 51 d1 Data Ascii: ]vWJRr=\|i1${QZa]6.#j;sY[kuWek-/<CK1],f{^%b~mjInz.$ED\8s'^(^ w[?,*W/mue}8>b4zkpQ
2022-03-15 16:08:14 UTC	6047	IN	Data Raw: 8e 36 0e c2 1f a8 92 69 14 12 69 77 ed 13 c1 fd d6 9f c2 ba 3b 47 26 b5 3c 1c 31 b7 a9 25 dd 27 da 67 8d c6 f3 2a d9 08 75 58 94 b2 8e 22 04 52 cd 22 2f f3 b3 3f 52 ff 00 b3 bd 65 48 76 8c 0d b0 fc 53 7f f3 5c 39 63 f2 2a 42 91 91 f4 ac 8c d8 d9 68 c0 95 7e e2 21 b5 90 f1 b2 ca b3 2f 13 aa 27 d7 8f dc 47 9e 48 bf 1c f1 9d b7 c1 f7 a9 b3 3b b3 e7 c8 50 07 69 c2 06 6e 25 7d ca a8 5a 24 f4 5e ae ae b7 f6 e9 6f 6e dc 9a 94 17 3f eb 18 7b fe ea 71 24 68 e1 92 15 bd 20 af 09 14 f0 b6 8f 68 24 1a 71 5e 1c 7d df 19 3a c2 91 d3 f0 45 6f 36 65 67 c7 0e 32 35 f0 30 59 fb cd 28 8a 31 22 02 10 08 99 7b a1 85 56 ac 5a 3d 32 c2 15 e5 9d 36 4c 9d a7 19 1b 6b d8 0c 2d 6b 91 34 71 51 9a 32 38 b2 94 61 58 d5 4d 4f fa f5 8d fa 9a bf 05 97 0f 2e 4c b8 46 54 ec a7 10 ad 6e 65 Data Ascii: 6iiw;G&<1%'guX"R"/?ReHvS\9cBh~!/'GH;Pin%}Z$^on?{q$h h$q^}:Eo6eg250Y(1"{VZ=26Lk-k4qQ28aXMO.LFTne
2022-03-15 16:08:14 UTC	6063	IN	Data Raw: 33 76 c5 21 02 c4 88 60 78 e2 a0 77 c5 68 ad b8 12 a8 4b 37 47 e2 d6 9a bd 35 b7 89 c8 b6 b7 9f 01 2f 9b 6e 4b 9c db 78 c0 dc b7 2c 69 41 98 40 71 80 e9 02 eb a2 79 00 66 7b 9a 8d dc 34 5a 6b 55 31 96 90 3b 66 54 97 4d 9e 0c 5d fb 08 e6 cc d9 38 78 99 60 9e c6 54 56 32 02 0a b7 b4 b1 00 75 5b 67 55 7e 0d a8 b5 d5 e1 fe e3 27 2b 82 0b 6d db 1b 6e db 9a 7c 8c 7c 9c 3d a3 19 6c 48 03 c6 d0 16 8b a9 67 73 d7 3d 47 f9 8e cf 1b 5b f2 f1 e9 d5 dc b2 58 4c 91 d9 f3 b6 cd c1 e4 dc 3b d2 cd 34 ca d1 f7 9d c8 c7 96 52 a5 99 71 d1 9d 63 2f 61 4a f4 fc 38 dd 70 d4 a1 c6 4a 36 a7 05 43 77 dc 37 02 83 c7 73 77 2e ff 00 93 99 50 c4 31 71 d4 4b 14 05 7a fb cb dc 48 83 58 7a 1a e5 a7 01 f3 70 e8 9a b5 29 60 93 4d 38 92 d9 e3 19 91 e4 b6 44 59 1b ae 3b e2 e0 83 13 ac 6c ab Data Ascii: 3v!`xwhK7G5/nKx,iA@qyf{4ZkU1;fTM]8x`TV2u[gU~'+mn\|\|=lHgs=G[XL;4Rqc/aJ8pJ6Cw7sw.P1qKzHXzp)`M8DY;l
2022-03-15 16:08:14 UTC	6071	IN	Data Raw: 22 45 3c 35 25 8c 8c d2 29 9b 7e d7 b5 65 ee 2f 3e cb 8b 97 fd 63 6f bc 2c 18 a1 22 57 52 a3 92 3b d1 60 65 36 bb 35 6e e5 aa 5a ef ac 3e 18 bd 54 e0 f5 ba 64 ef f9 5f 51 8d b5 c1 8b 82 4e 3a 77 d9 1e 1b 11 5b 84 c8 12 d5 b6 54 e1 ca 4f 89 f6 f1 d6 52 c9 72 16 ab 25 30 f0 53 3f 69 6d 99 21 93 25 a5 8f b6 b9 4d 34 85 5c 86 17 dc 84 91 45 e9 bc 0a 22 91 f3 6a 76 79 92 95 58 82 74 ed b1 e1 ed 6d b0 62 49 1c f3 d9 1e 31 4b 5a f7 62 00 a9 1e c4 e9 a9 08 bd 29 c9 8a 2f 05 9a cb ec 33 c2 82 9d 95 e3 b1 e7 ee f2 63 ee b9 d9 92 65 c7 24 51 47 31 86 48 e0 78 eb 6d ae 63 64 84 1a 11 c5 bb 9d 3e eb eb 4d 75 f6 c7 83 9e 0b be cb 16 e6 f8 2f 04 9b ab 6e 01 a5 b0 24 e6 31 8f 4e 20 47 6c 2b d6 b4 f7 28 eb fe 45 b7 ab 9a d7 96 55 56 0e 9b ae cd b6 ef 39 31 c5 b8 cd 85 36 Data Ascii: "E<5%)~e/>co,"WR;`e65nZ>Td_QN:w[TORr%0S?im!%M4\E"jvyXtmbI1KZb)/3ce$QG1Hxmcd>Mu/n$1N Gl+(EUV916
2022-03-15 16:08:14 UTC	6087	IN	Data Raw: ea dd fc e6 05 e8 74 83 62 c6 c7 c6 8f c7 37 87 19 78 b8 d4 86 17 32 2c 76 d5 c3 46 ac 84 25 ec ad 6a 5b f2 2f 4b 54 5b ae 49 97 27 43 c2 33 4d d3 68 f0 cd d7 c8 a6 c3 10 7d 4e e8 66 52 c7 36 46 0a 4b 3d 18 84 8c 86 73 53 53 17 6e f1 ef 6e 9d 7a 35 77 e9 33 8f c1 c6 d5 7b 71 92 bf e4 de 53 95 e3 db c6 27 8d 6e 13 24 78 98 d2 52 59 36 c2 e8 10 fb 95 c0 5e 71 aa 90 d3 44 81 6f b4 d0 fa 8e 8d 7a 53 af 65 c9 1b ed 69 c1 b5 e7 f8 dc 5e 53 8b 29 d8 f7 21 36 1f 6a 20 f2 21 2c cc 15 49 52 92 03 48 ae 37 48 f5 76 e9 a5 dd 3a e0 6f a3 3a 57 bb 93 8f 88 6e 3b 76 2e d2 d1 ec 78 f2 3c 98 54 c6 c6 dc 5e 5e fc 6e ee 40 e9 40 dd c9 3b 52 31 01 5d 6c a2 dd 72 f4 e9 ad 7c 67 91 55 73 f8 29 d8 f8 38 db 9e e0 f9 5e 67 9a 72 b3 f6 e5 12 21 92 4a 27 75 fa 97 80 32 29 55 5b 5a Data Ascii: tb7x2,vF%j[/KT[I'C3Mh}NfR6FK=sSSnnz5w3{qS'n$xRY6^qDozSei^S)!6j !,IRH7Hv:o:Wn;v.x<T^^n@@;R1]lr\|gUs)8^gr!J'u2)U[Z
2022-03-15 16:08:14 UTC	6103	IN	Data Raw: 10 36 f6 de 87 82 f1 a5 28 1d 7f de fe 3a 8d b9 2b 5e 0e c9 93 36 5a 4a 31 30 d5 1e 55 51 6f 12 54 a1 f7 12 79 9f e2 3f b7 42 c7 21 33 c1 2b e3 1b 76 46 e2 ed 3e 68 56 8e 3a d1 00 a8 66 71 c0 71 23 b7 5a 2f 57 1e 7a cb 26 f8 1a ae 08 47 c5 c8 c5 dc 32 0a c2 ee a8 b7 2a 12 c1 56 35 e6 dd 1e e0 0f b8 37 fb dc 75 54 e1 64 93 cb 3d ee 5e 43 b7 6d f4 c1 84 2c 8a 1d 99 6e e0 a4 13 45 76 7f 52 4f a7 f6 e9 a1 5b 91 5d a3 83 af f4 69 57 0e 18 b1 e5 59 1d 9f da b4 6b 4b 9a 1a f0 f5 d4 7a b4 cb ce 08 dc 8d 9a 7d b1 9e 6c 91 2c 71 c6 59 3d b6 ad 47 21 72 d4 75 7a e9 9d 5b 12 60 83 c0 92 4c 29 d6 68 e4 21 0a 80 55 6e 66 5a f1 2b 56 21 6d e7 ff 00 de e9 e8 e3 91 2d f8 24 67 ce c3 c8 58 db 2a 67 69 64 aa 32 b1 e2 84 f0 53 ca d2 a7 d5 75 5b 24 d1 34 d9 df 37 1d b6 a2 8e Data Ascii: 6(:+^6ZJ10UQoTy?B!3+vF>hV:fqq#Z/Wz&G2V57uTd=^Cm,nEvRO[]iWYkKz}l,qY=G!ruz[`L)h!UnfZ+V!m-$gXgid2Su[$47
2022-03-15 16:08:14 UTC	6111	IN	Data Raw: 11 84 87 a1 09 e4 58 11 cf aa 9d 5f 1a 69 9d bb 0c 94 16 1c 4d ef c9 bc 51 d3 bb bc 4d d8 8b 18 98 17 b9 72 aa 29 b4 c5 db 35 4e 91 fe 65 17 da 7d 35 cb 7a a6 56 b8 21 76 af 3f dc 97 3e 2f a5 9a 47 44 92 39 ab 25 5d 3b 88 e1 ea a8 08 a2 f3 ad 7f 9b f5 69 fa 48 ae c5 8a 5c 34 df a5 fa a9 a7 6f a9 9a 9d a3 09 37 1b 89 5b 09 27 f7 03 2d 15 7f 1b 7d 74 ae a9 14 4e 4a e6 7f 90 e5 f8 d3 49 b2 6e b0 98 26 35 60 1a 33 46 04 d4 76 ca d2 96 7f ec 6d 32 6a eb 91 1c d5 97 7f 11 93 1b 7d c4 89 b0 77 bc 1e e1 55 ee ac ea eb 2d c5 5a e0 aa c5 03 aa 7b 6e af 51 6d 72 b9 5e 0b 2b 49 52 f2 e9 21 8f 72 8a 48 44 79 40 ad ce e1 40 28 4f ca 40 0f 4e 40 d6 f7 fd 35 ae 8a 5d ae 51 ae a9 a2 17 0b 7e 9b 6a 98 ac 4a 93 d5 88 67 85 96 43 c0 dc 39 7e 7c 35 da af 28 e6 88 64 06 f5 91 Data Ascii: X_iMQMr)5Ne}5zV!v?>/GD9%];iH\4o7['-}tNJIn&5`3Fvm2j}wU-Z{nQmr^+IR!rHDy@@(O@N@5]Q~jJgC9~\|5(d
2022-03-15 16:08:14 UTC	6127	IN	Data Raw: de 36 bc a8 e0 c1 c3 72 98 c8 44 92 76 42 85 64 61 43 45 8d 40 0d 72 23 70 02 e5 e9 d1 f1 26 e6 06 56 8c 14 5d 9b 38 f8 f6 5b 3c 52 37 6e 66 59 23 69 40 e9 28 d7 23 5b c4 9f c5 4f e5 e9 a7 7a 6b 75 92 6b 63 ab 2e c3 7e d8 72 fc 85 b7 3d c7 0e 07 6e d2 96 8d cb 5b 39 22 8c 23 ad dd 91 5e 34 0d 75 7d 87 5c 9f 07 55 08 e8 f9 3b 39 65 9a 5f ba 1b 5e 56 e1 2c 39 58 6b 0a a2 c3 10 50 ee 71 a2 8c 04 aa c7 8f 40 55 9d 95 6e 61 27 b3 80 08 6e 75 8d be b3 6b 03 2d d0 f2 47 e7 6c 19 59 fb a4 d8 5e 3e 5b 21 91 55 d9 a7 11 ae 3f 59 bc a2 3a b3 b5 8d 4b 16 d9 99 b9 f0 04 e8 5a fd 4d f9 08 dd 97 67 48 73 73 93 ca b3 d3 0f 19 1d 5e 98 50 89 62 b0 f5 d1 4d 55 c7 3b 78 c6 dc ff 00 73 5d 35 a5 d5 66 b1 ff 00 f5 12 b5 ea de 7f b1 e3 c8 e1 da f6 2d ce 7c 7d b3 32 47 db 1a 34 Data Ascii: 6rDvBdaCE@r#p&V]8[<R7nfY#i@(#[Ozkukc.~r=n[9"#^4u}\U;9e_^V,9XkPq@Una'nuk-GlY^>[!U?Y:KZMgHss^PbMU;xs]5f-\|}2G4
2022-03-15 16:08:14 UTC	6143	IN	Data Raw: 64 e3 05 b1 f6 e9 58 45 dd 2e c4 8e 00 56 ac 05 4f 49 3f 33 6b ad 27 10 8e 5b 59 76 96 4d 7f 57 ff 00 a9 32 06 d3 b6 34 76 44 54 e4 c8 5b a9 14 71 e0 a3 8f 55 28 2b aa 55 fc 8f aa fd d9 3b 2f 8d 76 7c f8 47 5d ce 28 77 c9 23 c6 82 e8 f0 93 8b 9f 6d c1 39 22 fc 03 1f 71 e7 ae bb b5 6c 1c b4 9a 65 f2 73 ca 58 26 c4 93 6c b4 17 75 3e ea 54 23 70 ff 00 d2 ba 4c 44 0d 2e 64 c9 bc 97 cd b2 bc 3b 7c 83 66 9a 12 bb 44 61 42 da 45 e5 29 42 29 f0 1f 03 ae 07 7e ae 0f 46 b4 ee a7 c9 18 bb 9f 8e 6d 59 91 ef b8 f1 7d 56 e5 95 28 6c 70 ac 4a 2d 78 5b c3 db 25 7f 8d 74 8e ca ae 79 63 f5 76 c7 08 d9 7c 7b 74 f2 39 61 1b 97 90 47 16 38 98 ac 38 f8 b1 12 cc b5 3f 39 e1 c7 f0 1a ef a5 ec f2 ff 00 64 79 d7 a5 17 b6 bf bd 8b 86 e1 9e 0c 83 0e 24 bd e9 42 41 e0 0f e3 ae db db Data Ascii: dXE.VOI?3k'[YvMW24vDT[qU(+U;/v\|G](w#m9"qlesX&lu>T#pLD.d;\|fDaBE)B)~FmY}V(lpJ-x[%tycv\|{t9aG88?9dy$BA
2022-03-15 16:08:14 UTC	6151	IN	Data Raw: 34 97 6a ce 3d 06 aa ea a7 d4 95 f2 ad af 70 62 99 18 2e ab 1c 7d 53 46 41 66 95 69 fe 5a fc ab c7 d5 b4 d7 42 6b b2 f2 38 c4 cc c1 c7 c7 8a 3d c4 f6 72 27 8c c8 23 76 01 98 fa 84 15 ea b4 7e 9d 65 52 8c 85 a5 bc 11 59 2a cd 90 bb 60 c3 fa 98 e7 fd d9 0b 80 56 20 3d 80 d4 52 ba 45 8c 0f ce 66 0f 78 5e 1d 2e 47 93 61 6f f3 31 73 8d 8e ea ca 7d 97 b7 00 54 72 52 a3 57 a5 65 91 bd e1 41 3f 27 86 c7 8f ba 9d cb 1c b3 bb 91 21 8e 46 6e dd e3 d5 57 92 ff 00 66 aa f5 43 c6 49 2d d2 a1 9c 7c bb 72 c8 c9 c4 9b 13 6f 0b 36 7d 15 5a 00 03 29 27 e5 6f 50 0f c6 ba 96 eb b7 85 fd 0a e8 a2 59 7c 7a 96 08 f1 e5 7d be 2c 79 22 08 eb 08 bd 14 d4 06 a7 b6 bc 2a 3f 1d 74 c7 b6 0e 69 f7 4f e4 85 db a0 dc 70 31 ba ed 95 ae e4 dd 0d 42 78 2a d0 5a 46 b8 6a ac 8e cb 3a b6 48 49 Data Ascii: 4j=pb.}SFAfiZBk8=r'#v~eRY`V =REfx^.Gao1s}TrRWeA?'!FnWfCI-\|ro6}Z)'oPY\|z},y"?tiOp1Bx*ZFj:HI
2022-03-15 16:08:14 UTC	6167	IN	Data Raw: 6f 5e b5 3b cf 93 21 cc 13 4d 54 0a c6 15 a7 32 0f c3 ff 00 3d 55 bc 93 4b 10 56 f7 5c fc dc 2c f8 92 25 bc 4f 2a a2 a2 8e 25 54 1b cb 1f ec fd 3a e5 b5 9a 67 4d 6a 9a 23 7c 8f c4 71 23 4f ea 9b 87 ee e7 a9 2b 11 95 aa 91 86 e1 70 51 eb c7 ff 00 5d 65 a9 89 63 53 64 b8 5c 19 be d5 e4 5b 77 88 6e d3 78 aa d6 48 1b b9 30 9c 3d c4 ce 47 b4 05 14 40 de 95 d4 2d 83 a1 67 93 6d fb 77 1a e1 61 9c 9c d8 fb 59 f3 00 5a a3 90 f9 55 47 a0 03 ff 00 76 bb 3e b4 2c be 4e 1f b3 36 70 b8 2e b3 ca 91 31 99 c8 f6 d4 93 f0 1a ee 6f 32 70 25 e0 ce 77 7d f0 c9 bc 63 3a 62 bc a5 c3 a4 6c c0 d9 19 a5 7b 8d e8 01 e5 5e 7f 0d 70 5f 64 b3 d1 a6 b8 af 27 bc 6c 8c cf 0b c3 8b 15 15 65 12 4e ef 25 ac 42 46 b2 1b aa b5 04 d1 7e 1c 17 43 b3 a2 0e ab 63 23 7c b3 73 c1 f2 2c 26 6c 62 32 Data Ascii: o^;!MT2=UKV\,%O*%T:gMj#\|q#O+pQ]ecSd\[wnxH0=G@-gmwaYZUGv>,N6p.1o2p%w}c:bl{^p_d'leN%BF~Cc#\|s,&lb2
2022-03-15 16:08:14 UTC	6183	IN	Data Raw: 7f f6 d7 5c 9b 39 93 b3 5e 57 53 33 fb 85 e4 33 bf 81 c3 bc 9c 89 61 cb 92 65 74 66 8c 55 ac ea 47 65 e3 db e1 68 0d cb f3 d7 24 b6 75 24 91 f3 97 96 79 06 2e 7e 79 93 18 4a 26 09 74 ad 29 be 4e e1 1c 49 f8 5c 79 0f 94 68 5a db cb e0 d7 74 b8 3b fd 9a fb 7f 3f 9f ef d0 63 67 c6 62 c2 69 04 99 33 2b 02 e2 2f 94 28 3f a8 8a 1e 1c b8 eb bf 64 27 09 e0 e3 96 d4 9f a0 10 8c 3c 76 62 a8 f6 30 50 80 8a 80 91 ad aa 4d 7d a3 52 b3 48 54 9b 32 8f b8 9f 71 bc 7f 03 71 8b 1f 23 3f 23 03 21 05 0b 44 2f e2 4f 48 e4 d6 dc 7d 6d b6 dd 73 7f 37 83 ad 2e ab 24 cf 9a ee 8b e3 7b 13 cb 8c ab 93 99 24 25 9e a4 00 e6 94 67 62 28 29 f9 5b a4 70 86 aa 6d fe 84 7f da 4d e3 0c 78 fe dc ae 8e af 3b 34 cb 1b 0a 5a 4b 50 85 af 34 1e 9f cb a2 61 98 d3 b2 92 43 cb bc c7 0f 6d de 13 11 Data Ascii: \9^WS33aetfUGeh$u$y.~yJ&t)NI\yhZt;?cgbi3+/(?d'<vb0PM}RHT2qq#?#!D/OH}ms7.${$%gb()[pmMx;4ZKP4aCm
2022-03-15 16:08:14 UTC	6190	IN	Data Raw: af 4e 20 f2 e6 4f 01 1f 6d dc 64 ca 59 12 d9 82 a3 dd c5 98 ad 42 0e 14 02 95 3f e8 d2 5b 67 46 3a a7 74 65 fb d2 3e fd e4 51 ee 3b 5e 4a ae 36 00 91 32 61 50 49 94 b0 a2 ab 8f 68 55 3d 6b 5e af 87 0d 78 db 3d ed b4 7b 34 f6 56 19 85 fd c1 f3 2d d7 6a cd 6c cc 79 02 ee d8 39 01 40 88 0b 52 26 01 95 64 66 e2 e4 db 4b 47 2f 86 b9 1d e0 ed 55 4d 17 8f 12 ca c6 fb 9f e3 18 99 33 a3 9c 38 1b e9 32 31 dc 8a 33 7b bb 85 a8 a4 a5 09 e1 d5 a6 69 b4 4d 38 6f f2 53 be ec 79 d6 07 84 b4 9b 79 45 9f 73 06 39 50 2a 05 8d 55 4a 95 57 04 9b 81 0b 4a f3 1a 95 69 98 2f db 12 64 b8 be 20 de 73 e4 c9 9f 86 7f e4 37 09 83 cb 31 a4 60 2f 39 55 6a c4 9a 51 91 5b d4 e9 9d e3 0f c7 83 3a ce 51 bd 78 fe 5e cb f6 b3 13 2b e8 31 7b 38 b1 4b 53 22 2b cd 2b b3 9a 47 00 ba b5 b5 3a 9d Data Ascii: N OmdYB?[gF:te>Q;^J62aPIhU=k^x={4V-jly9@R&dfKG/UM38213{iM8oSyyEs9P*UJWJi/d s71`/9UjQ[:Qx^+1{8KS"++G:
2022-03-15 16:08:14 UTC	6206	IN	Data Raw: 2d 2d ee b8 36 94 7e 4a f6 cb 27 8a 78 ae f1 26 36 05 9f d7 b3 dc a0 7e 17 02 c6 a5 56 d1 c8 7a eb 9d 42 e3 92 ed 3b 73 c1 6c f2 ed ac ef 2f 1e 02 71 77 74 b4 dc 41 a8 37 52 80 d7 8d ba dd 95 76 70 85 d5 65 55 2c ed e5 d9 19 92 18 76 63 18 92 37 50 54 8a 10 8c 9c d9 81 a5 52 9c f5 d3 b1 bc 54 e7 d6 97 f2 19 9d e3 0f fa 87 f4 f4 96 24 6c 70 0f 6e f0 65 e0 38 74 1a 1b 3f 1d 2b 35 22 8b f7 7e 59 f6 4d 8a 3d d3 6f 2a ad 8b 21 76 47 1c 1a e1 d5 73 b0 24 b3 dd d0 17 d7 52 85 c3 3a 2a d9 9a 79 ee f3 0e 6e db b4 c2 93 cb 36 19 42 ec c2 97 b3 93 5a f1 fe 7f 4d 70 5a d0 76 55 1a 47 80 7d 9a db b7 08 e2 cf f2 28 da 6c ec 82 b3 76 a8 55 15 79 82 ca 29 c4 fc d5 d5 75 69 ec e5 90 dd bb af 06 ff 00 0c 10 40 06 2c 20 47 0c 60 22 aa 80 a3 97 a7 e0 35 ef 2a a3 c3 6d f2 43 Data Ascii: --6~J'x&6~VzB;sl/qwtA7RvpeU,vc7PTRT$lpne8t?+5"~YM=o!vGs$R:yn6BZMpZvUG}(lvUy)ui@, G`"5*mC
2022-03-15 16:08:14 UTC	6222	IN	Data Raw: 62 78 c1 60 1b 7c d8 69 de c3 0f c4 da ea 9c 14 01 cb 86 a9 5d 6d 70 4e db 13 e4 a3 7d cc da b3 b6 f7 c5 61 dd ca db e7 c9 8e 5c 94 17 30 08 84 33 29 03 a6 c2 07 52 bf 4e 92 fa dd 3d cf 25 75 ec 57 c7 05 b1 4e 16 46 2b ee f8 2a a2 39 94 22 32 0a 51 07 25 a5 3a 69 a4 b5 b1 d9 1b 54 e7 ab f0 38 f1 dd a7 1f 1f 1c e6 a2 de f2 70 16 8a b3 01 fc de ba 5d 75 95 26 ec b6 60 77 8d 85 3c db 94 6f 9a 9d bc 64 ab a2 b1 a1 af a5 40 f8 7e 3a ad 69 9f 71 3b 5e 17 b7 92 c0 ab 26 44 a1 d2 b4 26 8c be 94 f8 9d 77 57 2c e1 b6 10 e1 30 5a 30 b2 e4 5a 4a 12 6c 41 d2 6b c8 f1 f5 d7 54 41 cb 32 50 77 3d af c9 33 f7 0c 88 f0 22 8a 00 c4 3a 64 d5 89 03 e1 67 c7 5c 36 ee de 11 e8 57 a5 52 97 fb 1d 3c 9b 77 ce 9b 6b 58 16 3a ee ae 16 26 54 a8 a9 ad 2f 27 e5 5f 9b 50 dd b1 b5 1e 4b Data Ascii: bx`\|i]mpN}a\03)RN=%uWNF+*9"2Q%:iT8p]u&`w<od@~:iq;^&D&wW,0Z0ZJlAkTA2Pw=3":dg\6WR<wkX:&T/'_PK
2022-03-15 16:08:14 UTC	6230	IN	Data Raw: a5 54 89 0d ce 65 c5 c8 7c 75 90 87 98 dc 48 3c 7f 1e 27 86 b2 ee 18 51 4a 3e 58 f3 85 dd 7c f3 ee 5c 18 5e 3f 91 3e 36 d7 b7 48 3b f9 31 31 5a 3f 3b 55 bd 58 f2 3a 65 65 ae 8d ff 00 ba df c4 af 57 76 97 85 c9 f5 7e d9 87 36 d9 8e 8b 3e 4b 4d 21 1c 49 1c 49 f8 6b 2b 29 65 91 b4 37 84 67 b8 9e 33 e4 7b 3f 91 67 79 3e 76 52 3e db 32 81 f4 a2 ad 22 db fa 5b 82 f1 f8 53 52 b7 1c 17 4d 70 8e 89 b9 e3 e5 f9 64 39 5f 54 83 6d ed 19 68 08 ba e0 29 6b fc 06 93 12 34 35 58 3b ee 5e 40 fb be 6c 3f d3 a2 31 6d 8b 59 24 c8 0b 45 0b f1 1f 0a eb 6d 74 f0 85 ad 23 92 7f 03 70 9b 26 22 c4 d7 1d 0d 2e e6 59 69 c1 b4 2b 33 1d 52 23 70 5a 0d eb 2a 59 e4 a7 d3 50 ad 41 e0 df 80 d4 79 65 bf 8a 82 df 87 87 8f b4 62 33 3c 82 28 f8 58 00 00 80 3f 01 cf 5d 75 af 55 2c e5 b5 bb 38 Data Ascii: Te\|uH<'QJ>X\|\^?>6H;11Z?;UX:eeWv~6>KM!IIk+)e7g3{?gy>vR>2"[SRMpd9_Tmh)k45X;^@l?1mY$Emt#p&".Yi+3R#pZ*YPAyeb3<(X?]uU,8
2022-03-15 16:08:14 UTC	6246	IN	Data Raw: 99 5f 21 59 8f 57 79 96 39 16 e3 d0 e0 94 61 1d 57 ab 5d 2a 8e c8 93 b2 4c 90 df 3c ab 61 fe bb 26 e3 83 09 cb c8 2b 71 13 c8 eb 05 5c 05 74 8a 14 b4 51 7d b7 7f 2a 50 74 ea 3f 0b e1 8e ae 88 2f 31 fb 81 b7 f9 2e 26 3e 61 db d3 03 2e 25 ed 5a a3 a4 38 01 41 8d 3e 45 31 a8 a5 1a 9e ef 57 d5 e9 aa 19 27 7c 14 51 8f b7 3e 6f d4 e2 bb ac cc 42 92 aa 42 ba b7 35 e1 c4 13 f1 f9 75 d9 55 07 3b 87 92 c9 e5 de 44 db cc 78 9b 4e e0 40 ec 45 1e 1d 12 3e d8 11 20 e8 50 07 0f 53 d4 7a 9b 4c b5 d7 93 1d 9f 04 4e c5 b8 e0 60 ae 46 d9 0b d8 a0 16 59 dd 41 20 a8 e1 1a a1 21 cb 5e 7d dc 00 51 71 e5 ac d8 d2 46 d1 b1 22 9f 3f 6d 66 db 25 20 c1 27 f9 ea 0a bd 17 88 24 1e a0 78 f1 b9 78 6b 2a fb 70 6b c7 24 c7 88 79 5e 67 86 1c bd b7 69 c8 8e 18 f2 16 9f 55 db 49 32 28 fc a1 Data Ascii: _!YWy9aW]L<a&+q\tQ}Pt?/1.&>a.%Z8A>E1W'\|Q>oBB5uU;DxN@E> PSzLN`FYA !^}QqF"?mf% '$xxk*pk$y^giUI2(
2022-03-15 16:08:14 UTC	6262	IN	Data Raw: 5a e0 6b 57 ee 31 16 50 80 a1 68 4b 36 9d d9 ae 09 f5 4f 92 6d 3c bb 70 db e1 5c 0c b7 0e f0 23 0b 58 b2 5a 1b d3 b9 19 0c 79 dc dc ff 00 8e b5 2e d9 41 30 5b 36 a8 f6 8f 3d c9 c5 c2 c4 78 36 ae dc 2a 24 ef 63 49 3f 74 a8 17 91 20 2e 6e ba e3 d4 55 78 8f 86 b9 ed 4b 53 2f 25 15 d5 b0 68 09 f6 4b 6e ca 8f 23 7d d8 72 bb 2a 3a 20 58 12 d8 97 d5 8b 97 ea e0 82 e9 2a a9 d4 e2 9c 35 c7 f3 da b8 67 42 d6 9f 07 cf f9 5b 76 1a bc f1 44 ed 14 c2 f4 8c c8 d4 34 1e ad 4e 04 d3 e1 af 57 5b 93 8e c9 22 09 f3 72 e2 88 63 e4 3d 63 57 0f e9 d4 00 e0 2b ee e7 ab 41 16 c9 0c cc b9 32 e7 49 7a 0c 6e a0 90 38 10 c0 70 ad dc e8 7a 7e 3a b5 28 ea 89 5e f2 c6 9b 46 e9 89 1e 74 72 23 3a 9b 99 5d 55 85 c4 1f 68 a3 06 e9 ad 2e e9 3c 35 b6 e3 02 d5 e4 b8 4f e2 7b 4e e2 bd ed a5 65 Data Ascii: ZkW1PhK6Om<p\#XZy.A0[6=x6$cI?t .nUxKS/%hKn#}r: X*5gB[vD4NW["rc=cW+A2Izn8pz~:(^Ftr#:]Uh.<5O{Ne
2022-03-15 16:08:14 UTC	6268	IN	Data Raw: 95 0a af 0f 6b 13 fc cd a1 52 0d 76 93 b6 f7 8b b9 41 86 b0 e3 6d 52 34 12 c7 58 5e 54 b2 41 68 01 9d 98 f5 30 ea 1d 54 0b c7 48 b6 eb 78 95 26 ba 5d 78 29 bb 37 88 79 56 fb 9a 9b 68 33 24 b2 d6 35 44 e0 6a dc 01 37 5b d1 4f 52 79 7a ea bd 5a 53 e0 e7 ef 2e 09 cd af c5 b7 2f b6 3b b4 33 bc 51 4f 95 0b 06 fd c5 bc 16 23 8c 52 47 cc 70 34 fc 7f b3 49 57 5d a9 d4 67 57 47 26 df 03 6f 9e 53 99 0f f5 7c 09 5e 28 1d db 2e 18 66 c7 6b 10 b7 4c 60 31 3d 8b 3a 43 a3 2a bf f3 f5 51 7c 5d b7 aa 78 67 a9 ae 8e 38 20 a3 f2 8d b7 64 c8 83 6e dd f0 31 4c 68 5d e1 38 c4 3b aa 02 d7 41 32 c6 40 9d 83 14 bf fc b6 4b 79 91 d3 a3 e3 ec b0 c3 b4 33 2b 93 72 dc 72 67 4c a9 14 7d 4c 79 2c 89 19 0a 23 00 54 ad 15 7f cb 1c ff 00 1f fe cb 5d 54 a7 52 76 b4 9c 9b 67 dc 70 f2 64 cc Data Ascii: kRvAmR4X^TAh0THx&]x)7yVh3$5Dj7[ORyzZS./;3QO#RGp4IW]gWG&oS\|^(.fkL`1=:C*Q\|]xg8 dn1Lh]8;A2@Ky3+rrgL}Ly,#T]TRvgpd
2022-03-15 16:08:14 UTC	6284	IN	Data Raw: f6 39 b0 9f b1 89 38 c8 85 d5 64 98 2c 44 47 75 4a f1 a9 bb b6 07 1e e7 45 7e 5d 4a 64 aa 51 83 3d df f6 3c fd be 5e f0 05 31 c3 b2 b2 a7 10 40 34 04 57 90 3f 1d 5a 97 69 43 21 b2 8a 65 0d 07 93 6e bb 84 c3 2b 2b 21 f3 99 23 11 92 e4 b3 a4 6b c2 da fa 2a 8d 45 d1 0f 5b b2 c3 e3 bb 7e c5 bc f7 24 cb c9 5c 5c b6 57 38 f1 a2 f0 2c 58 2d 25 2d 68 89 69 fe 5d b7 f1 f7 53 52 d9 35 f0 52 99 1d 60 6c 43 04 8c f5 cf 69 71 ac 17 2a c2 ce cb 25 69 6b d5 c7 15 e7 fe 1d 51 6c 7e 0c e8 bc 9e b0 37 4d d4 ee e2 08 e2 06 79 19 22 42 ef db 4a 13 40 09 72 15 49 ad 6b ab f7 5d 64 94 34 e0 84 93 c5 3c c3 3f 71 0f 8d 85 34 8b 91 2c 8c 8c aa 4c 47 ab a9 c4 a0 5a b1 dd ee 90 9a 69 7f c8 ac 72 67 c3 69 25 87 88 6e 3b 0a 5f bf cf 16 22 4f 90 62 6e 96 66 a2 10 ed 20 52 12 a8 45 2c Data Ascii: 98d,DGuJE~]JdQ=<^1@4W?ZiC!en++!#kE[~$\\W8,X-%-hi]SR5R`lCiq%ikQl~7My"BJ@rIk]d4<?q4,LGZirgi%n;_"Obnf RE,
2022-03-15 16:08:14 UTC	6300	IN	Data Raw: b2 ca 1f 79 17 89 ec db 46 1c d8 9f 52 76 fd e2 28 44 ae 8b 23 1f df 24 56 08 a3 74 5b ff 00 69 d4 bb 54 22 72 4b db 50 ae db 49 5b 51 40 f3 63 f2 1d ab 61 dc f0 b2 f0 e0 69 72 a1 8c 77 e6 92 25 80 99 68 0f 42 a3 58 56 3f 6d d4 b2 da b1 8e e3 aa 76 6f 9f d8 5e 89 1a 67 8d f9 97 82 79 41 cd c1 7c 88 b0 f2 72 00 8f 2d a5 35 69 c2 38 6a 45 3d 1a 8d 25 aa af 73 0f 6a f6 97 4c f5 de 25 12 ed 59 82 43 ca fe ca 60 e7 4e 18 19 a3 c4 92 42 5f e8 82 f6 da ea 76 a2 8a eb 88 b1 17 f7 24 94 d5 c9 e5 c7 5c df 35 97 19 2c a8 99 8d f9 47 84 ed fe 1b 38 39 99 2a 32 03 28 fa 3a 86 9c 44 49 b9 c8 8c 59 15 68 78 77 0b 74 fe 3a a6 bd fd b9 46 db 54 70 55 fc f7 2b 6d ce 8b 07 6f c0 9f bb 14 68 66 57 53 51 fb 84 28 8c 1f 78 2a a0 d5 5b f5 72 d7 65 6e fc 90 b5 51 ea 6f 13 d9 e4 Data Ascii: yFRv(D#$Vt[iT"rKPI[Q@cairw%hBXV?mvo^gyA\|r-5i8jE=%sjL%YC`NB_v$\5,G892(:DIYhxwt:FTpU+mohfWSQ(x[renQo
2022-03-15 16:08:14 UTC	6306	IN	Data Raw: 00 7e a5 6d 4d 2e 4e 8a 6c 4d f0 7c ed ba f9 86 e7 82 99 98 6b 9b 3e 4e d6 55 48 9e 64 0a f8 f2 a9 b9 4a b5 05 c2 bf 1a ea 75 70 74 35 2c fa 0b 1b 74 dc f3 fc 67 6b 8f 74 8d 24 c9 71 14 9f b7 ed 0a 38 89 40 25 09 05 7d cb cd 7d 06 ba 6c db 50 71 55 25 66 d1 6e ce d8 f1 f7 93 8b 9e 1e d9 30 c9 64 91 68 09 53 cd 7e 36 1d 17 5d 97 e8 25 2d d5 bf c9 80 7d fd f2 ed a3 c8 31 ff 00 a3 6c 32 2e 56 7c fc 25 8e 33 73 55 78 28 fc 38 eb ca fb 0d 72 8f 5b eb a6 93 4f f6 38 7f da 9f 8f 66 ec 51 6e a9 bd 60 9c 7c f0 56 c9 18 82 e5 08 f6 5a 0f 00 0f 1f c6 ba 7a 3a f6 95 e8 4f 6c c4 32 fb 99 8e b2 c5 36 7e 6b 19 46 34 ae f1 a5 b4 26 d1 ed 50 7d da e7 bf b8 bd 7d bc 15 cd b3 c0 36 8c bd c5 7c aa 75 68 b2 b2 01 08 af 55 1c 7d 00 ae a1 12 a1 96 76 87 83 52 c4 d9 71 76 6d bd Data Ascii: ~mM.NlM\|k>NUHdJupt5,tgkt$q8@%}}lPqU%fn0dhS~6]%-}1l2.V\|%3sUx(8r[O8fQn`\|VZz:Ol26~kF4&P}}6\|uhU}vRqvm
2022-03-15 16:08:14 UTC	6322	IN	Data Raw: 68 e6 c5 35 89 11 82 2b 86 e7 71 f9 81 f8 6a 49 bf ea 5d a2 5b c7 1e 2f b9 78 f3 e3 ce a2 59 49 41 2c 2a 0f 4a 9e 01 bf 15 fc b5 cc ea e6 11 7e c9 2c 9b 1f 81 7d b4 c2 f0 48 1b 1f 1a 49 5b ba 4b 95 2c 4a 2f f8 54 fb 75 e8 6b d7 d7 93 cd d9 b7 b7 05 63 c8 77 46 c6 c9 cb 1b a3 14 c6 8e 40 b1 b3 2d 78 11 c8 0e 5c 0f cd ae 2d 92 d9 dd ae 12 47 ce 5b 4b 6e 3e 5b bc e5 61 43 95 92 30 71 b2 0c af 3c 73 84 a2 3f 00 bd 20 95 3c 09 d5 ec d5 14 89 fc 9c 1f 40 6e 9e 27 b3 67 f8 66 2e cd 26 4b 1e c9 0f 14 ac c0 b3 b0 35 ab 31 f7 57 d4 eb 7b 28 26 aa e4 a9 e3 0c 14 3f d1 3c 6d 50 ee 6d c6 6a 8a 20 f8 96 6d 72 ba 1d 4a d0 69 1b 4f 8f 46 63 5e f4 9d 71 50 8a 70 00 fe 7e ba 29 51 6d 72 07 c8 3c 7a 5c 6d fa 29 0c a5 f0 a6 8c 89 63 26 e5 62 3d b4 5a 7b ab fd ba a5 d4 21 6b Data Ascii: h5+qjI][/xYIA,*J~,}HI[K,J/TukcwF@-x\-G[Kn>[aC0q<s? <@n'gf.&K51W{(&?<mPmj mrJiOFc^qPp~)Qmr<z\m)c&b=Z{!k
2022-03-15 16:08:14 UTC	6338	IN	Data Raw: 06 e9 34 e5 cf 96 ad 7d 55 e5 11 a6 db 70 55 37 4f 31 c2 c0 df f0 f1 b2 92 98 b4 5a 48 41 e1 77 05 20 8f c7 9e a1 84 ce 85 56 d1 db ce 76 9d 93 23 75 c5 dd 33 a7 b8 62 30 73 08 20 06 af b5 8f f8 74 f7 48 5d 6d c4 07 98 6e 39 9b a4 98 9b 76 dd 11 98 e7 74 ca c0 55 12 1f 99 8f e3 f0 d6 4c 99 55 d7 93 41 4f 1e db 31 b0 e1 87 b6 ad 2e 3a 74 02 2b 5a 0e 7f 9e bd 35 ae b1 93 cd 7b 2c de 0c f7 cd 32 b3 b7 3d 85 f1 f6 ca 1c b5 92 c2 cd c8 a9 f7 71 3c 85 35 e5 6d b2 67 a9 aa b0 cc a7 6b dc c7 87 f9 46 16 26 54 df b3 95 11 8c 44 e0 b5 09 e5 46 f5 17 7f 66 93 5b c4 b2 d7 46 9d bd f9 2e 26 e0 d3 6c d9 f3 be 3b 41 8e 26 2e 1c 29 22 be 84 7a ae ba db 93 96 b4 8c a3 e4 0f 2a f1 0c af 29 de d5 76 c5 39 79 b2 49 54 b4 dd 70 ad 7a 89 fe fa ea 34 d9 d6 4e 8b eb 9c 8e b6 2f Data Ascii: 4}UpU7O1ZHAw Vv#u3b0s tH]mn9vtULUAO1.:t+Z5{,2=q<5mgkF&TDFf[F.&l;A&.)"z*)v9yITpz4N/
2022-03-15 16:08:14 UTC	6346	IN	Data Raw: 92 5a ee db 9f 05 57 ed bf 8b ee fb a6 da d9 7e 4b 2f 77 22 59 3b 8a b2 20 12 08 c0 e0 8f c3 96 b9 dd 3b 32 ee fd 49 69 77 1d c7 c3 33 c6 56 7b c6 bb 3d d4 ea e0 e8 a7 95 bc 78 a0 f5 d6 6b 5d 5e 42 ef ba c1 a0 66 ee 8b 3e 5c 19 38 b2 a8 c3 64 00 91 c4 b5 dc ad fe 5d 7a 3b 6d c4 1e 7e ba 61 a7 c9 5b dc b7 2d b7 6a c4 99 26 97 f6 fb 8c b6 b7 02 cc dc 6d 5d 79 d6 69 49 df 4a b6 7c b3 f7 87 c8 be b7 c8 21 45 89 e0 7c 72 ab 11 07 ab e2 b4 a7 1b ab a5 ab c1 6b 28 e4 bb ec 9e 0f bc 79 e6 4a e7 6f 51 36 30 92 20 a4 9b 84 9c 3e 75 f9 7a bd 75 ae 5e 11 9d 92 46 d3 b2 f8 56 c9 b4 ed bd ad 94 2c 79 ac b6 99 6d ab 70 f5 73 ab 57 5a 5f a9 cd 6d 8d bc f0 58 f6 1f 15 c3 89 84 d9 45 67 ce 00 5f 29 00 16 1f c3 5d 14 d5 3c 9c f7 da d7 04 96 7a e3 c0 7b 4a 0f 1e 3c 06 ae d2 Data Ascii: ZW~K/w"Y; ;2Iiw3V{=xk]^Bf>\8d]z;m~a[-j&m]yiIJ\|!E\|rk(yJoQ60 >uzu^FV,ympsWZ_mXEg_)]<z{J<
2022-03-15 16:08:14 UTC	6362	IN	Data Raw: 78 8e 29 33 91 27 c4 86 96 9a 71 51 f1 00 fa 8d 6a d4 c5 7b 57 8e 4d 7b 68 91 24 c7 23 0e 64 65 a0 a3 2f 33 f8 36 bd 9d 78 58 3c 6d 99 7e e4 34 cf db a4 7c 88 ee 20 af 1b 8f af f6 6b 9a f5 73 93 a6 97 51 81 9e f1 0c b1 cf 13 c3 15 42 71 2d 5f 68 1a 2c da 32 89 30 5c a8 b7 d5 60 18 86 4f 6a b7 fa 75 bd bb 87 5e 83 bd a1 72 b2 a1 7b cd a1 4d bc a8 69 f1 d3 d1 36 84 d8 d2 63 9c 6c 71 16 31 84 93 24 a0 dc a3 f8 f3 d5 a9 54 91 2b 5a 59 ff d6 f9 b7 27 32 66 67 39 2e c0 40 02 9e d8 bc 51 7a 89 af 21 5f 53 ee d2 55 c9 ea 33 c4 b2 46 00 9b 16 f5 28 a8 39 d6 d5 63 d3 77 f8 bf 1d 3b 4e 05 4d 49 11 3b cb 16 5b 46 cc d5 75 0c 18 37 00 0f 30 07 2a 0d 4a 70 51 ac 9d b0 77 c8 85 62 b8 db ed 67 2c 6a 78 54 90 7f 56 aa 9b 68 93 69 31 ce 47 92 3b aa 43 89 1a b4 60 15 2e 78 Data Ascii: x)3'qQj{WM{h$#de/36xX<m~4\| ksQBq-_h,20\`Oju^r{Mi6clq1$T+ZY'2fg9.@Qz!_SU3F(9cw;NMI;[Fu70*JpQwbg,jxTVhi1G;C`.x
2022-03-15 16:08:14 UTC	6378	IN	Data Raw: a1 92 62 d9 73 10 ad 18 6a 80 4f 1e 81 e8 35 e9 6b 69 2f c9 e6 ec 4d bf c1 ff d0 f9 77 2f 7e dc 20 0d b4 7d 54 8b 8c ef 71 56 76 31 82 3e 6b 07 36 15 d7 27 c6 b9 3d 8e f0 58 f0 32 72 b0 bc 71 bc 81 f3 27 19 a6 67 45 b1 c5 3b 56 8b 9c d6 f6 37 37 4d bd 1c 3a aa 75 cd 6f e5 d4 bd 5f b6 46 bb 6c ed 9d 8c ab 8d 8d 24 92 48 b7 24 aa 81 cb 31 3c 17 b7 20 6e 9a 7f f1 8f 85 da e9 54 8c b6 45 da 78 26 70 3c 4b 3b 74 ca 6c 6d f5 25 c1 0c 97 4d 90 c6 08 a3 82 3a 1b 2b 1b 13 27 59 14 f9 28 7e 3a 8f cd 0b 19 2b f1 cf 27 7c 2f b4 bb 0e f7 9b 3e 36 2e 56 42 c5 14 6c f0 5d 1d 5a 71 18 15 91 28 8b d0 df f0 91 6e 77 d4 df d9 b2 59 48 df 86 ac 63 91 f6 9f 75 f1 af 20 c6 db 56 68 5a 79 c1 14 9d 92 2e dd 45 48 90 b9 b1 1e 9f cd 77 cb c0 9a 6a eb 72 b2 96 88 bd 7d 59 36 23 f0 Data Ascii: bsjO5ki/Mw/~ }TqVv1>k6'=X2rq'gE;V77M:uo_Fl$H$1< nTEx&p<K;tlm%M:+'Y(~:+'\|/>6.VBl]Zq(nwYHcu VhZy.EHwjr}Y6#
2022-03-15 16:08:14 UTC	6385	IN	Data Raw: c4 b7 38 27 e1 5d 56 97 5e 44 b5 2c f8 31 fd b5 37 ed ab ee 12 66 c9 dd 8f 6b cb 70 67 a9 52 02 a9 25 0b a0 3e 9f dd aa ad d5 e2 4d b6 a6 d1 f5 67 f5 f8 26 db 9b 25 19 1c d0 d0 d7 98 1f 96 bd 1a ed c4 9e 3b d4 d3 83 36 fe 99 2e 4e 52 ef d3 10 d6 dd db b3 83 04 6e 77 0f 5d 78 db 2d 66 e5 1e ce b4 92 ea 32 ce db f2 77 0c 69 16 4e bc 46 35 54 e1 5a 8f ee fe dd 73 cb 65 f0 99 54 8e 07 f1 68 1e 6c 39 29 8b 2b d4 40 69 6a bd 7a 82 95 e5 5d 41 9d 0b 26 89 e1 5b b9 dc 63 33 b9 11 4d 27 00 89 c4 ad 07 ad 46 bd 1f ae fc 9e 6f d8 51 81 c8 c7 cd 9f 71 38 fd 2d 8e a2 e6 2f c5 ab f9 7a 69 2f 2e d0 3d 5a 55 93 d7 f4 96 87 ba 61 90 c6 1a a6 a3 8d 34 ea 98 11 df d4 cc b7 cd 83 2f 33 39 17 6f 46 97 19 e3 61 28 97 e7 3e 8c a0 d3 8e a4 e9 27 4a ba 5c 9b 4f db 0d aa 1d 83 c6 Data Ascii: 8']V^D,17fkpgR%>Mg&%;6.NRnw]x-f2wiNF5TZseThl9)+@ijz]A&[c3M'FoQq8-/zi/.=ZUa4/39oFa(>'J\O
2022-03-15 16:08:14 UTC	6401	IN	Data Raw: b0 ed 30 46 22 31 85 50 4a 81 ea 78 9a eb d8 d3 af a5 56 0f 27 76 ce f6 79 2a df 70 36 cc 9f 2a c5 6c 47 17 63 8e a2 80 db 55 1c ee d4 f6 f6 b7 05 b5 35 51 9f 8e ed fb 76 d3 e3 cf 85 e3 a5 22 77 4e 04 71 00 8e 04 71 f8 69 f5 e1 7e 49 ec cd bf 04 97 db 07 de 21 c3 93 03 7d 01 a6 59 0a a4 8b f3 a7 30 48 f8 eb 75 3c c3 0d e9 72 8e 7b ea e2 6d d0 cd 6a de 81 d8 da 01 e1 4f d3 f8 eb 9b 6d 15 64 be ab 3b 41 8e ed 59 d1 6e f9 0f 26 42 3c 66 5b d1 4b ff 00 98 c0 1a ad 54 f0 e5 af 32 e8 f5 53 2f 9e 1c 73 73 b6 d8 b1 f7 48 9a 68 55 99 16 ad 42 eb 5e 9a fc 29 cb 56 a3 9c 3e 0e 6b a8 ca e4 b1 6e 7e 6f 8f b6 63 20 30 3c 51 c2 40 60 68 6c 51 c0 f1 1c 35 d7 7d aa 21 1c d4 d4 e6 59 37 8d 91 b6 ee 78 6d 95 04 81 e0 98 54 ba 9a 7f 78 e5 a6 49 44 93 72 9c 0d f1 b7 3c 18 f7 Data Ascii: 0F"1PJxV'vyp6lGcU5Qv"wNqqi~I!}Y0Hu<r{mjOmd;AYn&B<f[KT2S/ssHhUB^)V>kn~oc 0<Q@`hlQ5}!Y7xmTxIDr<
2022-03-15 16:08:14 UTC	6417	IN	Data Raw: f8 eb d2 a2 e8 a0 f3 2c fb be c5 43 ee c6 f5 2e c9 b6 4f 97 0c 94 46 5a 30 8c 0b 94 fc a6 df 9b f1 d3 dd 9b a9 1f 2e 6c 7e 55 e5 3b 6e 56 56 e8 f8 39 19 3b 7e 42 88 e5 9a 18 ca 90 07 22 38 7c b5 af 4e a4 da 6a 24 e9 69 a7 c1 f5 7f 89 6e d2 e2 f8 ae 00 cc 32 ac 76 2a 93 3a 85 2e 18 7c 7f d1 eb a4 f9 1c 12 7a fd c3 ed a3 67 db e3 c3 c8 86 07 2f 3c 80 b0 72 84 2a 29 e4 a2 9e ab ac 55 ac 1b 6b 5a 46 be 35 e3 9b 17 89 44 70 30 95 6d a9 96 59 18 d5 dd d8 f5 13 a9 4a 92 ae 59 6d 8f 09 64 45 c8 91 c2 c1 fa 57 95 3f 3d 74 d6 89 e5 9c b6 bb 58 5c 90 5b bc 1b 19 ba 79 14 38 6e 93 d2 78 af c3 4b 6e 8b 23 d7 bb c1 1f 87 91 14 88 d8 f0 44 8d 0d bf b6 4b f2 1f 03 f8 e9 7b a7 84 3f 46 b2 d9 9c ef 1b b6 16 36 76 5c 76 20 9d 42 dc 58 d4 a0 f4 35 3e 9a e3 b6 4e ca 95 84 f3 Data Ascii: ,C.OFZ0.l~U;nVV9;~B"8\|Nj$in2v:.\|zg/<r)UkZF5Dp0mYJYmdEW?=tX\[y8nxKn#DK{?F6v\v BX5>N
2022-03-15 16:08:14 UTC	6425	IN	Data Raw: 9f e1 b8 fb a7 86 6d d9 92 4c 8b f4 cf fb 94 63 59 0b d3 a8 d4 73 e5 eb a6 d7 6b 51 64 8e ca d6 ed 41 eb ed a7 9f c1 e7 b9 13 ed f8 d1 b4 30 42 7f 7f ba ad 71 af 2b 7e 5f 4e 3a ae ab 3b 38 27 b6 8a aa 7c 9a 86 36 4c d0 b1 86 21 6c 48 68 bf 88 f8 eb b6 b6 6b 08 e1 b5 53 cb 26 7f a8 24 68 5a 6a 2f 0a 71 e5 ae cf 93 d4 e3 f8 fd 0a 44 93 aa b4 f9 69 35 f0 42 8c 54 28 e2 59 8f 2f f6 75 c1 19 6c f4 3c 25 02 6e 7b cb c1 b6 7d 5c e7 b5 23 80 91 96 e1 56 23 81 00 f2 d6 6c d9 15 93 69 ae 6d 05 29 7e e4 e2 6c d8 a3 13 2d 08 64 6a 49 21 15 42 c4 fa 53 8e bc fa 6e 85 07 a1 6d 12 e4 ae ef 3e 6f 04 d9 13 66 ab 91 89 8e 00 be 38 4d 6a de 8b ea da e6 bd a5 9d 35 a4 23 46 fb 59 b6 e2 e5 61 b7 93 3d e9 14 b7 3c 46 42 41 22 94 2e ca dc 57 fc 3a f5 7e 9e 8f f7 b3 c9 fb 9b bf Data Ascii: mLcYskQdA0Bq+~_N:;8'\|6L!lHhkS&$hZj/qDi5BT(Y/ul<%n{}\#V#lim)~l-djI!BSnm>of8Mj5#FYa=<FBA".W:~
2022-03-15 16:08:14 UTC	6441	IN	Data Raw: fe 3a b6 cb ab 2f 69 1d 74 75 7e e2 17 65 d9 f7 1c 60 53 35 ab 33 92 cc f4 e0 7e 00 7e 5a e6 ae bb 27 0c ea be ca bc a2 d5 b7 ed b8 ea 2d 9b aa 42 29 c7 8e bb a9 a9 2e 4e 0b ed 6f 82 bf 26 c8 b3 c9 2c 11 90 1d 4d 4b 9f 4a 9a d0 6b 97 e2 96 d2 3a be 58 49 b1 dc bb 44 81 46 5b 16 04 0b 69 f0 d6 bd 4f 93 16 df 06 7b e4 52 c2 d5 fa 34 91 32 f1 65 49 55 24 5a 47 30 f5 5b f9 10 7d 0f a1 d7 2d 92 a9 d9 46 df e8 59 bf ab 61 79 21 18 10 66 76 d9 d0 30 15 e2 a7 d5 78 fc 39 6a ff 00 22 be 13 39 be 37 4c b4 49 47 36 d5 e3 98 af 2c cf 6b 32 da 2f 27 a8 af 2a ea 95 75 d7 c8 8d 5b 63 84 57 db cf 76 e5 c6 32 ca ae 8c 4b 06 b5 4d 01 1c c0 f8 8d 71 bd c9 9d 8b 43 44 36 5f df 5f 0c db 71 05 f3 f7 25 52 2a 9c 6b cf 89 a5 39 0f 5d 74 56 d8 e0 8d b5 39 e4 ba ec be 61 b5 6f 58 Data Ascii: :/itu~e`S53~~Z'-B).No&,MKJk:XIDF[iO{R42eIU$ZG0[}-FYay!fv0x9j"97LIG6,k2/'u[cWv2KMqCD6__q%Rk9]tV9aoX
2022-03-15 16:08:14 UTC	6457	IN	Data Raw: ba 6a ba d5 64 2d da cf 05 17 7e dc 36 dd b6 cc 88 33 15 33 00 75 68 54 82 ce 9e 8a b5 1e d1 f9 70 d7 3b 78 c1 d3 5a bf 26 6f ba f9 d6 1e 46 e5 85 87 8d 34 cf 89 3d 56 59 21 a9 78 fe 35 a7 b8 7f 0d 65 17 32 3d 9c 70 6a 9b 2c 18 cb 84 72 f1 f3 24 7c 55 60 6f 99 54 03 f8 0e 0a 6b f9 eb 1a 5e 05 97 c3 3d 27 9d 6c fb 2e 04 fb b4 b1 81 85 15 43 4b 51 ee 06 84 11 5d 62 b7 e0 d7 46 fc 9d b6 7f 30 db 77 ec 75 c8 c4 06 4c 77 4e f3 4c a2 b1 46 47 ca 5f db 77 f2 e9 3b 1b d4 97 db 3c 74 6e 64 6f 39 cf 21 00 dd 0f 16 14 1e 9c 3f f3 d5 6a 9f 2c 9d ad 18 43 3d ff 00 32 70 6b 08 b1 08 37 d1 6b c0 7e 1a 85 ed 25 a8 92 2a d8 9d ff 00 0e c1 9f 7f 46 69 e3 93 a9 92 76 0a 14 1f 54 34 a8 ff 00 09 d5 68 db c0 97 48 b1 f8 36 eb 85 b9 6c cb b8 e3 cc 33 6e 94 bc 86 c0 4c 61 8f b0 Data Ascii: jd-~633uhTp;xZ&oF4=VY!x5e2=pj,r$\|U`oTk^='l.CKQ]bF0wuLwNLFG_w;<tndo9!?j,C=2pk7k~%*FivT4hH6l3nLa
2022-03-15 16:08:14 UTC	6465	IN	Data Raw: d8 9f 5b 7e 52 35 e5 ee 52 f0 7a ba 5c 24 98 cf 1f 06 4c 8c 4c 5f ea 8c 25 9f 0d 9c f7 87 42 b9 61 4e a5 e5 5d 72 43 68 e9 ec 93 c7 92 e3 e1 71 63 45 8a 10 aa a2 ab 55 89 20 1f e2 75 d5 a6 9e a7 2e fb 7a 13 be 65 24 93 e3 42 d8 d5 25 1c 12 01 e0 cb 4e 22 ba ef dd 7c 1c 3a 29 9c 99 26 36 d7 9b b7 6e ed 91 8e c5 71 e4 6f dc 40 cd 62 01 c4 15 51 c2 b5 e7 5d 78 2e 64 f7 53 50 5b b2 b3 d6 6d b2 73 b4 48 b9 39 9c 2f 4a 81 d4 39 2b 7e 93 af 47 16 ae 19 e7 ff 00 1b 64 63 be 62 e2 ee 51 62 5d 3a 45 90 b4 69 e3 2c 03 8a 7c ab f1 e3 ae 3d ba a5 1d 7a b6 43 78 c1 90 f9 2f db 8c 6f 23 dd 57 b1 21 ef 24 9d 12 23 f1 50 c7 8a d0 f2 a7 3d 72 51 78 3b 6d 6c 4b 35 ad 8f ed 2e c1 e2 fb 1f 6e 1c 71 26 71 8d 81 27 a8 dc 78 9f e3 5d 7a eb 42 eb 2f 93 c7 7f 61 bb 7e 0f 9e fc f7 Data Ascii: [~R5Rz\$LL_%BaN]rChqcEU u.ze$B%N"\|:)&6nqo@bQ]x.dSP[msH9/J9+~GdcbQb]:Ei,\|=zCx/o#W!$#P=rQx;mlK5.nq&q'x]zB/a~
2022-03-15 16:08:14 UTC	6481	IN	Data Raw: 3f 93 f5 0e 7a e8 ab 8c 7a 93 6a 4c a3 ef 1f 90 6f 70 66 6d 79 8b 6f f4 89 02 b0 0b c1 8a 13 52 9f a8 7f b5 ab e8 4b 22 6c fc 1a 57 9a cb b3 6f 5b 5e d8 36 a9 6b 86 ca b3 b2 03 40 c4 8e 28 f4 f9 86 a7 77 d3 f5 1f 5a 76 cb 37 af b3 9e 5f b4 ef fe 3a 70 71 54 a4 98 08 23 78 8d 78 0a 74 b2 93 cd 4e bd 4d 17 4e a7 8f f6 28 d5 e7 d4 ac 79 d9 de 72 b0 86 3e d1 91 24 22 69 6c 3c 01 7a 1f 51 5f 4a 6b c4 dd 67 e0 f6 74 d5 79 0f 1a fb 7b 8b e3 b8 92 cf 15 c9 34 e9 6b 33 31 26 ef 56 af 31 5d 25 6a e2 58 d6 ba 6e 11 48 f2 2f b8 5e 3b f6 ef c8 b0 a5 dd 7f e7 73 a2 05 0b 05 0d 2a a3 73 20 a8 ff 00 f1 b4 fa e6 67 c1 9b 2b 35 8e 0b 8e e1 0e 06 e5 8a fe 5d b2 bb e5 34 d1 9a 8b ed 54 51 d4 aa ca 68 54 8f 87 bb 5e 93 d7 db 28 f3 96 c8 f6 b2 8f 83 bd f8 2f dc 0c 08 1b 75 c9 Data Ascii: ?zzjLopfmyoRK"lWo[^6k@(wZv7_:pqT#xxtNMN(yr>$"il<zQ_Jkgty{4k31&V1]%jXnH/^;s*s g+5]4TQhT^(/u
2022-03-15 16:08:14 UTC	6497	IN	Data Raw: a5 d7 03 bc cf 16 7c c9 b3 e1 39 2f 36 4c 91 84 58 c8 34 1f 06 23 fb b4 cb 06 76 92 3b ed 6f 85 6d 5e 11 3c b9 5b b9 29 9c e6 8b 51 55 50 7f 49 d6 76 ed c9 ad 42 c1 6d f3 8d fe 39 60 a2 4d 00 b5 96 88 e4 2d 7f b7 43 5d 8c af b4 c9 f7 9c fd ab ca 31 e7 cd df 65 c7 ee 6d f2 ac 80 c5 29 26 d5 21 a8 57 e3 e9 c3 58 a8 ea e1 79 19 d9 3e 7c 1d fc d3 6b cf fb bc d8 59 3b 1d 13 6c 68 96 44 69 38 12 bc 98 aa fc 47 c0 eb ae 9e d5 1e 4e 6b 39 2f bf 66 76 3d 97 ed d6 7e 56 36 33 4f 2c 99 71 af 79 d9 81 09 6f 2e 9a 0a 5d 5d 3e bd d9 f7 12 db a6 56 0b 26 e5 bb 60 43 bb 1c 0d cb f7 13 26 a6 18 e4 20 5c 40 e4 bf 13 f8 69 e6 7f 41 55 61 63 93 39 c5 fb 9f e3 7e 30 8d e3 c5 18 99 a5 92 20 b2 0a f6 99 cd 15 89 3f 25 7d 75 5d 75 13 61 f3 bf 9a e1 8c 0f 30 18 d0 98 c3 bd 04 ac Data Ascii: \|9/6LX4#v;om^<[)QUPIvBm9`M-C]1em)&!WXy>\|kY;lhDi8GNk9/fv=~V63O,qyo....V&`C& \@iAUac9~0 ?%}u]ua0
2022-03-15 16:08:14 UTC	6505	IN	Data Raw: 97 71 93 ed 7f b7 5e 51 87 e4 de 05 87 bd 64 02 d2 34 14 94 13 75 cc 38 1f ed 3a 1a 59 fc 1c f9 95 1e 4c e3 7c fb 55 93 e4 7b df f5 69 25 a6 0e 4c 4f 03 42 09 06 84 74 d3 f1 53 e8 da e7 ef 0a 0e 92 af 89 b1 ec 5f 68 b2 1b 0f 6d b2 3d c6 75 29 7b 75 31 af c0 37 26 fc 35 8e f6 b6 5f 83 7a 24 b0 5c b6 2c dd db 25 93 00 67 2c f8 cb 2a c8 3e a0 05 6a 73 64 14 a5 ac be 9a d7 b7 b6 0c f8 fa e4 8a fb 99 06 34 d7 4d 96 17 1b 11 5c d4 c8 2a 09 f4 75 23 f1 d4 1c a7 83 a2 bc 1a 07 86 6c 8f 9d b7 41 b9 6f b5 ef 08 95 1c b5 09 e8 3d 0c a7 e0 47 fe ba 6a a4 f2 f8 23 7b 35 84 45 ef 1e 3b 17 96 ef 10 c8 72 65 86 3c 79 6f 8d a3 00 70 03 93 0f c7 f2 d4 dd a7 08 aa 50 b2 4e ee be 55 8b b5 63 b4 bb 79 56 9c 37 6c 12 2e 62 c3 58 ec 91 aa 8d f2 67 de 4b e4 f1 ee be 39 27 f5 62 Data Ascii: q^Qd4u8:YL\|U{i%LOBtS_hm=u){u17&5_z$\,%g,>jsd4M\u#lAo=Gj#{5E;re<yopPNUcyV7l.bXgK9'b
2022-03-15 16:08:14 UTC	6521	IN	Data Raw: 4b 02 29 43 4e 3f df ab 44 32 7c 8f 36 ad 87 7b dd a5 5c 2c 2a 98 b1 96 eb 07 21 4f d4 7f 1d 4a fb 15 72 ca 56 8d f0 68 fb be 57 dc cd cb c4 b2 70 a2 86 59 36 c2 2d 60 e8 0c 97 1e 06 df 5b 75 cc af 55 68 f0 59 d1 b5 25 4f 64 d9 71 f6 fc 24 ce dc 66 91 fb 68 03 c3 25 51 83 0e 60 0f 50 35 cf b3 dc f0 5e be d5 93 54 ff 00 b3 50 bb 9f dc cc 8c b8 02 f6 63 c6 94 da c3 8d 09 00 5b f8 eb d3 d1 5e ad 1e 56 fb 4a 67 db de 4d bd e6 63 ce 91 61 da 13 8d e5 87 f6 53 55 dd b5 a7 08 96 9d 49 a9 65 62 0c 7c a9 72 84 a4 29 52 0d 19 47 0f c4 1d 70 2a bb 39 3b 9d 95 54 0d 7c 8e 2d dc f0 db 0a ac 61 6b 73 71 20 fa d0 72 d5 2d 5b 2e 04 a5 aa f9 2a d9 a8 fb be dc c7 73 50 d3 02 52 3b c5 45 48 e6 a7 5c d9 f2 74 a8 4f 06 59 87 b1 6e 39 4d 2c 53 20 c8 cc 8d c8 56 53 63 2a 8f 45 Data Ascii: K)CN?D2\|6{\,!OJrVhWpY6-`[uUhY%Odq$fh%Q`P5^TPc[^VJgMcaSUIeb\|r)RGp9;T\|-aksq r-[.sPR;EH\tOYn9M,S VScE
2022-03-15 16:08:14 UTC	6537	IN	Data Raw: 94 b7 1c e9 23 a3 1b a8 b4 fc 57 96 ba 76 bf 6a f5 39 b5 ff 00 26 bc 22 03 12 0c e8 49 dc 23 52 61 c7 62 b2 01 4e 47 e6 e3 f0 d4 f5 d3 12 53 65 b3 04 86 7f 86 61 79 26 62 c9 92 ab 91 84 10 38 e3 ee 27 f1 1e 9a a5 b5 cb 27 5d ae a8 bc 60 78 fe 56 16 d3 f4 78 32 76 51 47 40 50 05 07 c3 86 ba b5 ea b2 ae 19 c7 7d b5 76 96 06 59 b6 7c 36 50 ed 26 48 50 49 73 5a fe 3a db 3e 88 12 ee ca 17 90 6f 7b 8b e5 40 d0 37 ef 3b 80 4f c0 7a 90 35 e4 df 7b 6c f5 69 a2 a9 13 f8 d9 bb 97 8f 31 77 6f aa 85 b8 9b fd c3 f2 23 5d 74 b3 a9 c9 6a ab fe 07 59 5b 96 d9 b8 63 1c da f6 99 45 43 03 c0 9f 81 3c b5 6b 75 b2 92 35 56 ab 83 22 83 6a d9 77 0d ff 00 17 75 8e 69 56 47 9a e9 52 ea 80 ca 7a 5a ba e0 4d 26 7a 4e 60 fa 66 2c b8 a1 81 59 98 10 47 3a eb de 56 49 1f 3e ea db 2b fe Data Ascii: #Wvj9&"I#RabNGSeay&b8'']`xVx2vQG@P}vY\|6P&HPIsZ:>o{@7;Oz5{li1wo#]tjY[cEC<ku5V"jwuiVGRzZM&zN`f,YG:VI>+
2022-03-15 16:08:14 UTC	6544	IN	Data Raw: 1f 54 a1 e5 c7 56 d1 75 5c 33 9b 7d 1d b2 8b 77 8f ee 79 8a 7b 19 d3 c6 d5 66 2b 69 f4 af b7 5d 54 da f8 67 25 f5 ae 51 d7 79 32 4b 57 8c d5 07 20 3f 0d 4b 6b 76 2b ad 2a 95 d8 76 84 dc 0f f5 89 0b 23 28 2b 1c 6e 29 69 f5 3a e6 f8 a7 27 4f cb 1e d3 92 e3 4d 97 23 2c 92 10 91 1a 70 35 2c 34 8a 46 70 56 33 cc 79 f2 c9 b4 43 15 d8 35 ea 84 9b 78 fa f2 d4 2d b5 cc 23 a2 ba f1 2c ae e5 e3 49 e2 4a cf 1c 08 d1 82 6d 8c 03 50 3f 0f 5a ea 6e d9 29 12 8d 2f 65 f2 48 77 2d 93 1c ab 10 8c b4 29 4e a1 f8 1f 55 d7 5a db 35 83 8d ea 8b 49 65 f1 1c 7f e9 d3 06 9e 61 61 62 50 70 f5 f8 9d 76 fd 7a f5 72 d9 c5 f6 2d d9 42 46 80 f9 31 2a 16 04 1f e3 af 6b b1 e3 f5 63 69 33 d2 25 b9 68 78 70 03 53 77 48 a2 a3 65 5b 7d 97 3b 70 a4 21 8f 6c 8f 62 8e 1f c7 5e 66 eb da f8 47 a5 Data Ascii: TVu\3}wy{f+i]Tg%Qy2KW ?Kkv+v#(+n)i:'OM#,p5,4FpV3yC5x-#,IJmP?Zn)/eHw-)NUZ5IeaabPpvzr-BF1kci3%hxpSwHe[};p!lb^fG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.3	49930	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:14 UTC	1902	OUT	GET /cms/api/am/imageFileData/RWwPgW?ver=b6b3 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:14 UTC	1970	IN	HTTP/1.1 200 OK Last-Modified: Sun, 13 Mar 2022 05:35:35 GMT Access-Control-Allow-Origin: * X-Datacenter: northeu X-ActivityId: b8e45160-424c-455f-af87-64d60d5eb40d Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWwPgW?ver=b6b3 X-Source-Length: 637894 Content-Length: 637894 Cache-Control: public, max-age=221254 Expires: Fri, 18 Mar 2022 05:35:48 GMT Date: Tue, 15 Mar 2022 16:08:14 GMT Connection: close
2022-03-15 16:08:14 UTC	1971	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 07 80 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-03-15 16:08:14 UTC	2037	IN	Data Raw: 9f 28 8e 82 3b ea b5 1d e7 fd 34 ae 6d 6e b6 d5 a8 ef 2a 5a b0 ce 82 3b ed df f0 1a 9b ed 95 8b 0d c6 da b0 b3 2f f1 49 50 51 b1 1d c5 3b ce ac d8 ee 17 fe 7a 53 be d8 bf c3 25 20 2e 33 6e a8 5a 4f e1 aa ed 71 fc 4d 50 b5 c5 00 4c d2 54 72 49 f2 6e aa f2 5c 6e fb b4 d6 92 aa c0 4c d2 54 3b aa 36 9b fb bf 7e a3 69 28 02 66 93 f8 a9 be 76 ea 87 75 47 b9 56 98 16 1a 6a 3c ca af bb de 86 93 6d 00 58 f3 bf 79 47 9d fd da af e6 7f 13 53 7c cf 93 75 20 2d 79 d4 79 d5 5f 77 bd 1b bd e9 81 63 ce a4 f3 bf db aa 9e 67 fd f1 47 98 bf bc a0 0b 5e 75 37 75 55 69 36 ff 00 bd 47 9d fb bf 97 ef d0 05 86 92 9a b2 55 7f 3a a3 69 a8 02 e7 9d b6 9b e6 55 3f 33 fb d4 6e dd 40 16 be d1 4d f3 b6 d5 5f 32 8f 33 fe 9a 7c f4 01 6b ed 0b 4d 69 aa 9b 49 47 9d bb e6 a0 0b 0d 25 37 ce Data Ascii: (;4mn*Z;/IPQ;zS% .3nZOqMPLTrIn\nLT;6~i(fvuGVj<mXyGS\|u -yy_wcgG^u7uUi6GU:iU?3n@M_23\|kMiIG%7
2022-03-15 16:08:14 UTC	2053	IN	Data Raw: 5f 2b f8 8b cf b8 be 92 ee 67 ff 00 5b f3 fe f2 bd 4b e3 57 8b ac f5 9f 11 c7 f6 3f 9f ca fb f2 57 13 ac 49 6d 79 3c 72 34 9b e2 44 ff 00 57 5f 7b 81 a3 ec 69 45 24 7c 46 65 8a 8d 7a b2 49 e8 ac 71 7f 7b fd da 6e df e2 ed 57 75 29 ad 84 9b 2d e3 f9 6a 96 ea f5 0f 24 24 6a 6a f6 a1 7b 51 4c a0 ff 00 66 9c cd bb ef 53 68 ac ef 60 b0 7c b4 d5 a7 37 7a 6e 7b d2 bd c0 56 91 56 99 e6 51 26 ff 00 e2 a6 ed 56 4a b5 6b 17 64 0b b6 9b 4e 65 db 1d 0a bb a8 b6 a5 8d dd b6 9c bb be f5 35 bf bb 42 ff 00 b5 4c 09 3e 6f e2 fb b4 6d dd f7 68 59 3f 79 42 ad 4a d0 80 56 a5 ce 69 3e e5 47 bb 6d 0d 36 ee 87 6b 8e ff 00 6a 9b f7 7e 5a 76 da 6b 47 47 32 18 6e f7 a6 b7 cd 4e f2 e9 bb 7f 8a a8 a4 25 3f 6b 35 35 6a 4f f6 6a 5b 13 63 57 b5 3a 3a 23 5d b4 ed b4 e4 23 67 c2 ba 3f f6 Data Ascii: _+g[KW?WImy<r4DW_{iE$\|FezIq{nWu)-j$$jj{QLfSh`\|7zn{VVQ&VJkdNe5BL>omhY?yBJVi>Gm6kj~ZvkGG2nN%?k55jOj[cW::#]#g?
2022-03-15 16:08:14 UTC	2075	IN	Data Raw: 55 99 6a e2 af fd f7 51 cd 1e ef bb 42 03 3d be 6a af 25 5e 92 3f ee d5 79 ab 42 0a 33 2f f0 d4 72 55 a6 a8 64 55 f3 29 a0 2a ed fd de da 8f cb fe ed 5c 65 dd f7 a9 bb 76 fc d5 40 53 ff 00 96 9b 69 ca bb 68 93 6d 37 77 f7 6a 90 03 33 53 5a 6a 8d 9b 6d 47 24 9f bb 93 6d 3e 54 2e 62 46 99 bf e7 9e fa af 34 d5 5d a6 55 fb d5 5e 49 b6 d6 aa 2d 91 cc 39 a6 dd 55 6e 2e 36 fc d5 0c d7 1f f0 0a cd ba ba fd dc 8b 5b 46 17 66 2d d8 b8 da 85 47 26 a0 ad 58 b3 5e 2f 99 fe b3 e7 aa b2 6a 0a bf 37 f7 6b a1 53 32 f6 87 41 25 f2 ac 7f 37 dc aa 2d a8 7f 7a b1 e6 d5 15 63 93 f7 95 83 79 e2 6d b2 7c b2 7c 95 bc 28 36 f4 33 95 55 7b 33 a8 9b 50 db f7 be fd 73 7a e6 a4 b1 47 24 9e 67 c8 bf f2 d2 b2 e6 d7 95 a4 ff 00 59 ff 00 7f 2b 89 f8 81 e2 e8 ac 34 79 f6 c7 24 9f 25 77 51 Data Ascii: UjQB=j%^?yB3/rUdU)*\ev@Sihm7wj3SZjmG$m>T.bF4]U^I-9Un.6[Ff-G&X^/j7kS2A%7-zcym\|\|(63U{3PszG$gY+4y$%wQ
2022-03-15 16:08:14 UTC	2197	IN	Data Raw: f4 af 52 d6 47 86 3f 75 37 ef 52 37 f0 52 7f b3 40 ec 48 ad 49 8f 9b 34 9b b7 52 50 21 59 a9 7c ca 46 a3 6d 20 06 f9 a8 dd 4d 5f f6 69 fc d1 6d 6e 37 a0 8b 46 ea 6e da 7f 35 7b 08 4d d4 33 51 ba 8d d5 16 01 79 a5 e2 9b b6 8d d4 c4 3b e6 5f 9a 8f bb 43 36 fa 1a b3 01 29 77 53 7f d9 a7 33 7e f3 75 0b cc 06 ff 00 e8 54 35 2e df 9b 14 73 48 03 9a fa 47 f6 65 f0 fa e9 da 94 7a 85 e4 9b 22 df bd 2b e7 56 b3 66 82 39 3f bd 5e 91 f0 7f 5a d4 2d fc 47 69 0f 9f 23 c5 fc 11 d7 97 98 c2 55 70 f2 8a 76 3d dc a6 a2 c3 e2 a1 29 2b dc fd 16 66 f3 74 3f b4 5b fd fd 9b d3 cb ac 1b 3f 12 7f 6a 49 f3 79 9b d5 eb 99 d3 7e 2a 69 fa 4e 95 f6 7b a9 e3 47 54 d9 59 f6 3e 3e d2 22 8f ed 0d 26 c7 6f f8 05 7e 56 b0 b5 15 d3 8b 67 eb 32 c5 d3 ba b4 8f 76 d2 64 8a 5b 58 eb 6a 16 5a f2 Data Ascii: RG?u7R7R@HI4RP!Y\|Fm M_imn7Fn5{M3Qy;_C6)wS3~uT5.sHGez"+Vf9?^Z-Gi#Upv=)+ft?[?jIy~*iN{GTY>>"&o~Vg2vd[XjZ
2022-03-15 16:08:14 UTC	2261	IN	Data Raw: d5 f2 f6 d3 7c ba 99 7f dc ff 00 62 a3 6f f6 be e5 05 11 b6 d6 fb d4 7f cf 4d b5 26 df 6a 6c 8b be 99 57 1b b7 f8 69 bb 77 53 9b e5 a3 ef 7f bd 48 63 7f 83 fb 94 da 91 bf d6 7c b4 dd bb a9 58 13 0d b4 dd bf bb f9 a9 cc bb a9 bf 76 91 40 cb 4d db ba 9d 42 af cf b9 a8 01 bf 7a 4d ab 4d dd 4b 4f db ed 40 c8 d6 97 9a 46 5f e2 a7 7f 05 00 35 69 bf ee d4 9b 76 d2 50 03 3f de a1 a9 db 69 29 00 ca 29 cb 4d db ed 41 40 cb 4d fb b4 ed be d4 fa 06 44 06 ea 07 cb 4e db ed 43 77 a0 08 ff 00 f1 ca 6f dd a9 1a 92 91 5c c3 36 d1 fe ed 4b c5 33 fd ea 07 70 55 a6 ed f9 f6 d3 95 7f bb 49 45 86 84 dc ad f3 51 fc 14 ed bf 2e 69 79 a5 6b 05 c6 2a d0 c1 68 66 dd f3 52 b6 dd de d4 0c 45 da b4 2e de f4 32 ff 00 df 34 7d ea 00 56 db bb da 93 ef 7d da 5a 56 56 a0 43 5a 90 7c bc d4 Data Ascii: \|boM&jlWiwSHc\|Xv@MBzMMKO@F_5ivP?i))MA@MDNCwo\6K3pUIEQ.iyk*hfRE.24}V}ZVVCZ\|
2022-03-15 16:08:14 UTC	2332	IN	Data Raw: e2 e9 7f 1d e9 6d 8f 87 ce b1 d8 2c 44 6d 46 2b 99 f5 31 db e6 ae 83 c2 7e 22 5d 1f cf 8e 68 e3 99 3e fa 6f ae 77 6e ea 31 b6 be 9a 74 e3 28 d9 9f 1b 46 ac a8 cd 4e 3b 9d 46 b9 af 41 ac f9 9b a3 d9 2f fc f4 8e b9 7d aa b4 e5 6d df 7a 9b f2 ff 00 15 65 08 28 ae 54 15 6a ca b4 b9 a5 b8 d6 ff 00 59 49 cd 3f 6e da 6e ea d4 c4 4e 69 16 8f bd 4b cd 00 1e c6 9b 4e fe 3a 29 6e 30 e6 9b 4a d4 94 c1 0e e6 99 b6 9d b6 92 80 11 69 cd 46 da 4a 4c 37 13 77 f0 d3 99 76 d2 f3 49 25 30 dc 4a 4d b4 ed b4 bc d4 8c 67 fb 54 6e a5 a4 cd 16 0b 86 d4 a4 dc 77 e2 9d 49 b6 90 c6 b7 7a 29 f4 50 d8 0c 5f f6 68 66 a2 9f 4c 06 2a d2 36 df 91 9a 95 9a 86 dd f7 69 14 37 6f f1 51 22 ed a7 6d f6 a6 fd e9 36 d2 45 21 bf 72 9b fe d5 3b e7 a1 aa ae 50 dd bb 7e 5f 32 8f 93 fe 01 4f e6 93 73 Data Ascii: m,DmF+1~"]h>own1t(FN;FA/}mze(TjYI?nnNiKN:)n0JiFJL7wvI%0JMgTnwIz)P_hfL*6i7oQ"m6E!r;P~_2Os
2022-03-15 16:08:14 UTC	2443	IN	Data Raw: f3 1f e6 6c ee f9 45 63 f8 6f e1 ee 91 e1 54 bb f1 15 c3 cf ab a5 bb ac 36 3f b8 f2 92 e6 7f 65 6f 9a be 82 f1 b5 aa e9 76 3f da 0d 6f b2 e2 57 6d 91 ce ec 9f 5d cb fe 7d ab 91 d5 bc 27 f6 3d 1e 0d 15 be c3 25 c5 9a 49 35 a4 9b 24 77 9a 77 6f e2 fe ea 0e d5 f1 f8 4c e7 1d 97 d3 ab 87 c3 ca ca 7b f5 f4 fd 4f ae c5 e5 98 4c 6d 4a 75 ea c6 f2 8e c7 82 ea d0 c5 2d d5 fc 70 e9 b7 d7 b7 6d 0e f7 93 e5 4f 97 ab 7d ef e1 ff 00 6a bc af fe 12 05 b8 f3 3c c8 e3 81 19 f7 bc 68 9f 25 7b 87 c5 eb 3b e5 8e fe c6 3b b9 11 ee 26 86 de e3 c8 da 88 8b 17 f0 ed fb c4 fd e6 af 21 d4 bc 2b a5 5c 5f 4e d6 f7 72 3c 57 1f be 86 09 27 ff 00 52 be f8 fe 2a f3 a9 4b 56 6d 88 8e b6 47 3f ac 6a 1a ad fc 72 49 1c 92 46 9f 71 e4 8d f6 6f db 59 2d ac 6a 7a 95 f4 6d aa 6a 57 d7 52 af fc Data Ascii: lEcoT6?eov?oWm]}'=%I5$wwoL{OLmJu-pmO}j<h%{;;&!+\_Nr<W'R*KVmG?jrIFqoY-jzmjWR
2022-03-15 16:08:14 UTC	2459	IN	Data Raw: cf 8d df 7b 6f f9 3f bc bf ea d7 15 72 e2 eb 7d d4 71 b4 1b e5 fb f0 ff 00 71 3b 72 3a 54 3a a5 e6 91 e1 7f 0e 5d dd 37 96 91 7c bf eb 13 f7 b3 33 7d cc 77 da 5a ac 35 c4 96 1a 6d 85 e6 a9 25 8d 96 b1 2c 2d 37 97 bd a5 48 76 ff 00 0f d7 fa d7 05 59 4f f8 9f 33 a6 8a 87 c2 cd cf 85 f0 cf 6f f1 2b c4 ad 24 7f e8 8d a5 db a7 97 1f c9 bd bc c3 c7 e5 d6 bd 82 ea 45 b8 fe d2 92 1f 23 ca 6b 46 44 93 66 cf 99 bd 1e bc e7 e0 8e a9 a7 dc 6b 1a d6 a5 0d dc 9a a6 db 48 d2 69 e4 81 52 df cd 66 19 5e 3f 8c 74 db 5d a5 e3 48 3c c8 ec fe 79 6e 9d 51 27 d9 f7 37 49 d3 6f f0 af b7 5a f6 30 ed ac 3a 97 af ea 79 75 ad ed e5 ca bb 7f 99 cf c9 67 16 83 89 35 09 e7 82 d6 d7 e4 77 83 f8 d9 bf 87 fb d8 3f c3 fc 55 cc cd a0 eb 17 97 17 76 f6 37 d7 d0 35 ad da cd 6f 05 aa 2a 5c 4d Data Ascii: {o?r}qq;r:T:]7\|3}wZ5m%,-7HvYO3o+$E#kFDfkHiRf^?t]H<ynQ'7IoZ0:yug5w?Uv75o*\M
2022-03-15 16:08:14 UTC	2523	IN	Data Raw: d5 6d 18 38 af dd ea de 9f 3b 98 ce aa 9d 9c f4 44 3a 4e 9b 79 14 f7 76 72 5d fd 8a f6 28 66 86 fb cb d4 64 f9 db 6e e1 cf f7 06 ff 00 e1 ad 4f 06 f8 7e 5b 5b ab bb 8b 38 e3 79 6d 66 8e c6 1b bf 33 7e c5 f2 c3 ee 1b f9 3f 33 56 e5 ad 9d 9e b1 a5 4f 0c 7f d9 56 56 af 68 d6 2f 75 a7 46 c8 ef 2c 39 79 32 ed ec 31 55 6e b4 dd 32 eb 4d 92 c6 19 2d 5d d5 37 a7 90 8d f2 6e c0 31 6f ee ed c6 ea 23 46 da 27 a7 a9 84 aa 29 3b 6c 47 a6 d8 e9 16 7e 2a d4 b5 8b 5d 37 ed ba 9e a4 ed b2 49 e7 de 93 6c 5d 8c 7a ed d9 bf a6 da bd e1 7f b1 cf a1 dd ea d7 d6 3a 1b da 5a ee 86 6d 62 77 67 95 d9 9b e5 58 d3 00 6d 43 f2 8e 69 da 4e ad 15 d5 8c 17 1a 7d a4 89 15 ac d2 58 bc 76 b6 ab f7 51 7f d5 f3 fc 39 e9 55 e3 d3 59 b5 28 e4 d7 ad 2e ad 74 79 7c b7 78 f6 2a 25 93 3f dd 5d bf Data Ascii: m8;D:Nyvr](fdnO~[[8ymf3~?3VOVVh/uF,9y21Un2M-]7n1o#F');lG~]7Il]z:ZmbwgXmCiN}XvQ9UY(.ty\|x%?]
2022-03-15 16:08:14 UTC	2587	IN	Data Raw: 67 9a b9 53 b3 d1 79 af 39 8e d6 f2 c3 c2 3f 65 d2 e7 8e 7b 8b ad 46 4d 97 56 3f 23 db 4e d2 7c a7 e7 fe 30 fb 56 bb 2d 5b c2 77 37 5e 7a c9 3c 9f 67 b8 86 34 85 20 7f 35 11 51 b2 cc 49 ea c6 b9 df 0d f8 16 cf c1 76 b2 5b d9 eb 57 db 1a e1 ae e6 8e 77 57 d9 2b ff 00 77 8e 3e ef d6 b9 3d a3 8a 6d e8 ff 00 3b ee 74 7b 2e 76 ad b1 0d c4 2b e0 dd 03 c4 3a 7d d4 f2 69 76 ba 96 d7 be be ba 4f b5 dc 42 b1 46 5a 49 15 ba e4 bf 6e c6 ba 8f 0d f8 6e ce ff 00 4d bb d2 74 1b 49 f4 bd 2a 5f 26 6b 8b eb a9 f7 ca ea aa 1b 69 ea df 37 f7 45 68 5e 78 57 45 ba 8f 49 92 e9 1e fb 4f 64 f2 7c c9 37 3f 9c ac df 3b 6d ef 97 ab 91 ea 0b 7f 3c fa 7d ac 72 5a d9 59 cc d0 a4 1b 3e fb 2a 8f 97 de a9 ce ee d2 7e 8b ae d7 ff 00 33 0f 64 e2 f4 39 5f 85 2d ad 6a 5e 15 bf 9b 56 d3 67 d3 Data Ascii: gSy9?e{FMV?#N\|0V-[w7^z<g4 5QIv[WwW+w>=m;t{.v+:}ivOBFZInnMtI_&ki7Eh^xWEIOd\|7?;m<}rZY>~3d9_-j^Vg
2022-03-15 16:08:14 UTC	2667	IN	Data Raw: f6 89 e4 dd f2 45 f5 1f 73 35 5e 4b 3b 35 83 c9 87 66 9d 2b 43 e4 a5 f4 92 7c e8 aa df bc db f8 56 a6 8f a3 e9 56 7e 5e b9 24 76 ae 8b 6e af e6 48 ec ef f3 2f 55 56 3f 7a a8 df 5c 2e 9b a5 cf a9 5d 3d ac da c3 3c 7f 68 b5 b5 4d f2 a4 4d f7 23 5f f6 9b bd 65 ed 1c 96 bf d7 9d fc fa 6c 74 7b 35 1b a9 6a ff 00 af c9 0d d6 bc 27 06 bd 7d 60 ad 3c f3 e8 96 1f 3a 79 0f fb a9 99 7f e5 9e 3f 89 bf bc cc 6a e5 be b5 2c 5a ac f6 f6 fa 94 6e 9a 4c 3f 3f f0 44 8d fe f7 f7 ab 9d f1 17 8b 2f a5 b1 93 ec b6 92 5a e9 fe 73 4d f6 18 df e7 9a 2f bd fc 3f 73 de b1 74 7d 7b 50 d5 3c 4c 96 b1 c1 02 68 ff 00 f1 f0 fe 5d af 9b be 55 f9 54 b8 ea e3 3e 95 0f 11 1e 65 c8 ff 00 ae cb c9 16 b0 fe ee a7 47 1e b9 a8 78 83 56 9f 44 8b 48 8d 26 92 18 e6 6f 3e 6f b3 ad e7 5e 64 cf f0 2d Data Ascii: Es5^K;5f+C\|VV~^$vnH/UV?z\.]=<hMM#_elt{5j'}`<:y?j,ZnL??D/ZsM/?st}{P<Lh]UT>eGxVDH&o>o^d-
2022-03-15 16:08:14 UTC	2762	IN	Data Raw: 8d 2e 24 92 0d 9f ba ff 00 9e 75 e6 3e 3c 6b 1d 73 c4 12 5d 69 fe 63 db ab fe e6 7f e0 f9 7f 86 bd 2b 54 8e 5b 2d 47 52 92 69 24 4d 77 56 9a 44 86 39 d3 7b c2 bb 77 1f 97 a2 d7 9c c9 a2 b6 97 a6 da 5b cd 04 88 8f bb c9 92 4f 9f ea d5 dd 42 2a 49 4a 4f 7d 7f ae df 71 e7 62 26 ec d2 d8 e7 74 bf 0f ae b9 e6 5d 7d cf e0 78 ff 00 b9 56 21 8e db ed db 96 38 ff 00 75 f2 27 97 fd 6a e5 8d f2 e8 3a 6c 92 79 1b 22 95 d9 26 f3 3e 7f 9b d6 b1 ed f5 08 9b cc f2 7e e4 af bf cc 91 3e fb 57 b3 16 92 4b ab 3c 47 a3 33 e6 d7 bf b2 63 fb 74 d0 49 3a 2c cc 91 7f 07 cd d8 57 91 f8 c2 e2 3b c9 3c c9 20 f2 37 fe fb cb 8f fd aa f4 cd 6b 52 b6 b7 8e 3b 56 92 04 97 ef a4 73 ff 00 7b da bc 8f e2 16 ad 67 6b 75 b9 be 4d c9 f2 46 9f 3d 7a 58 4a 73 94 91 e6 e2 6a 59 6a ce 7e d7 c4 56 Data Ascii: .$u><ks]ic+T[-GRi$MwVD9{w[OB*IJO}qb&t]}xV!8u'j:ly"&>~>WK<G3ctI:,W;< 7kR;Vs{gkuMF=zXJsjYj~V
2022-03-15 16:08:14 UTC	2857	IN	Data Raw: 2d 2d 6c ed 23 b5 bb bf 87 7f ee 37 26 f5 fa ff 00 13 51 5d 95 21 1a 4f 95 41 c9 f5 b1 54 e3 15 1d ec 8f cd d6 9a da c3 f7 2d 69 b2 e1 51 b6 56 87 9d 2e a5 04 6b 71 f2 5a 32 7f cb 3a c5 b7 f3 7c c8 1b cb df bf e4 fd e7 f7 ab 6a ea e2 56 93 cb 59 23 7d bf f2 d3 66 cd f5 f4 5a 36 71 47 99 96 34 d8 e7 b8 f2 e3 9a 4d e9 12 7f 73 f8 57 ff 00 ad 5b 52 5e 46 b1 c9 1c 7e 63 be c5 7f 2f fd 9a a7 6b 1b 5c 58 c7 b6 7f 9d 7e 4f dd ff 00 bb 57 21 b7 55 93 cb 8f cc 4f ee 79 9f 72 b1 76 8e ec eb 82 76 b0 5a dd 7d ab cb b7 93 f7 16 5b 3e 48 fe fd 5e ff 00 46 93 cb 5b 78 3e d4 eb fc 7f 73 67 b6 2a bc de 54 36 b2 6d 8f 63 aa 6c fd df f1 ed aa f0 b4 f1 5d 79 da 6c 1b ee ee 13 e7 8d 3f cf cb 59 fb ac d6 dc a8 ea 3c 03 a2 ea 17 1e 2e 82 c6 de 38 11 da 65 df 04 89 bf 62 fe 15 Data Ascii: --l#7&Q]!OAT-iQV.kqZ2:\|jVY#}fZ6qG4MsW[R^F~c/k\X~OW!UOyrvvZ}[>H^F[x>sg*T6mcl]yl?Y<.8eb
2022-03-15 16:08:14 UTC	2913	IN	Data Raw: b4 75 78 d8 65 bd eb d5 35 8d 5b 4f d2 e3 b4 f1 05 ae a5 a7 69 7a ae 93 e6 58 dd c1 05 ae f7 9a 29 5b 3b 79 6d ee db 3a 35 71 3f 0d 7c 33 a7 eb 3a ac 1a 6c da 37 f6 ba 33 b4 af 1d d4 fe 54 5f 77 f8 b2 6b e8 2b 1f 87 3a e5 94 1a d5 bc d0 68 fa 47 f6 b7 96 e9 1d ad aa ef 87 62 e0 61 bf bb fc 5b 7a d7 8d 89 c5 43 4b bb b5 a7 de cf 63 0b 87 9b 8a 69 1c ff 00 85 fc 3b 6d 6f 3c 17 d7 53 cf a8 d9 5e 43 37 9d 07 d8 5a 27 dc ca 5d 66 2d d5 93 ee fc c7 af ad 75 56 b6 b3 f9 10 35 c6 93 75 75 e7 da 36 9d 0c 9a c4 fb 36 5c ca d9 f3 3b e1 36 7c bd 6b 6a c7 4b d4 ff 00 e1 26 bb 8e 69 e7 d4 6d 36 48 97 12 40 9b 1f cd 8a 31 df 1b 42 6e 3e f5 bd ab 78 77 41 b8 b1 b4 91 a0 d5 5e e2 dd 3f d1 e4 91 da 5d f3 ee e8 7f 87 70 6f 6c d7 cf 4a a2 92 6e 36 b6 bb f9 69 d8 f6 a3 49 68 Data Ascii: uxe5[OizX)[;ym:5q?\|3:l73T_wk+:hGba[zCKci;mo<S^C7Z']f-uV5uu66\;6\|kjK&im6H@1Bn>xwA^?]polJn6iIh
2022-03-15 16:08:14 UTC	3000	IN	Data Raw: 08 f4 7d 36 3d 23 c5 77 13 7c 9a 95 f6 e9 ad d2 2f 4b 64 73 b5 7f bb f3 8a de d2 7e 12 ea 17 90 5f f8 8a fa 7b 1f 17 eb 1e 4b 7e e2 3b e8 dd 21 9f 77 f7 97 22 a8 df 58 fc 3e f1 bf 8a bf b1 ef be dd 32 4b b9 e6 f2 2e a4 df bb af cb d4 d7 a2 35 d7 c3 7f 86 ba 04 9a 6d bc 1f 62 b5 54 58 52 e9 fc c7 de df ed 96 3b aa 69 56 9d 48 ca 73 97 a7 f5 63 1e 45 4e a7 2f 43 c3 57 fe 13 3b ad 62 c2 d6 d6 ef 4a f0 d6 b1 f3 43 e7 da 41 f6 89 5f d4 99 e4 ce cf f8 09 a2 bd 7b 49 f8 a5 a0 de 4f 1c 3a 0e ad a3 de db c4 9e 53 c9 e4 6c 44 66 fb b8 5f bf ff 00 02 fd 68 a8 58 9a 9f 6d eb e8 53 54 a5 ac 76 3e 0d d2 ed 6d 96 0f 9b 49 f2 1d 66 f9 e3 fb ff 00 ba ed f4 35 ad ab 49 f6 cb 5f 32 de 38 ec a5 5d a9 fb ba d6 b7 f0 fc f7 b6 30 42 bf be f9 db cd df f7 f6 af 5c d1 1f 83 6f 25 Data Ascii: }6=#w\|/Kds~_{K~;!w"X>2K.5mbTXR;iVHscEN/CW;bJCA_{IO:SlDf_hXmSTv>mIf5I_28]0B\o%
2022-03-15 16:08:14 UTC	3136	IN	Data Raw: 97 e4 f3 24 7f f3 fa 57 8c e5 be 97 7d ee db ff 00 23 b9 e1 94 d5 a5 b7 63 2f e1 cd 8e ab e0 5f f4 78 75 d9 2e 92 5f 93 cb 7b 55 fb bf 8f f1 56 f7 8d 3e 21 78 97 4d ba b4 6d 36 39 2f 77 6d 79 b6 41 26 c4 db f7 b8 5f 96 b2 e6 f9 b5 2f b3 db d8 5d ba 45 f2 79 92 23 7d e5 fb df 7a bd 73 c3 b6 2d a0 d8 e9 ba 95 e7 88 7c 8b 79 51 7f e2 4f 05 af cf b9 ba 6e 6e 8d fe f5 74 61 5d 7a d5 39 63 36 a2 bf ae e8 e3 c4 46 34 e0 e2 ba 9e a1 e0 5f 14 58 f8 ab 47 b4 bc d3 f4 db ab 26 b8 87 e7 9e 74 68 b7 b7 7f bd 5b 1e 30 bc fe c6 d3 63 b8 68 fc f7 95 d5 1f cc 4d e9 b7 e9 59 3a 4c 9a ac 37 db a3 b8 93 cd 68 b6 79 72 6d d8 8b ea 7f da aa 7a 94 73 b4 93 c9 75 3c 8e d6 ff 00 7e 49 fe 7d fb bf bb 5f a0 de 5e cd 26 8f 22 94 1c 5a 4d dc 76 83 75 7d 14 1f eb 23 82 c9 5f e7 fb b1 Data Ascii: $W}#c/_xu._{UV>!xMm69/wmyA&_/]Ey#}zs-\|yQOnnta]z9c6F4_XG&th[0chMY:L7hyrmzsu<~I}_^&"ZMvu}#_
2022-03-15 16:08:14 UTC	3152	IN	Data Raw: ee 13 5e 84 ba 3b 47 04 70 c3 07 f6 74 5b 36 79 7b f7 bf be 6b cc fc 4c df d8 37 50 6a 1a 0f 88 7e cb b7 e7 78 24 4f dd 3a ed cd 72 ff 00 f0 d0 1a 2d e4 71 af 9f e6 3a fc 8f f3 fc ef bb a9 ae 9a 15 a5 46 3c b6 6d f7 5f e6 b5 38 a4 e3 4b 59 da dd 0f 76 8f c4 09 6b 69 06 93 a7 f9 77 4c 9f 72 08 1d 9d ff 00 25 a2 b5 3e 0e b6 87 e2 0f 0e 49 36 8e e9 b1 76 f9 d3 ff 00 1b fc bb bf 87 9a 2b ec 68 60 ea d7 a7 1a b3 a9 ba 5b 74 39 e3 8c 84 6f ec 96 87 cf 72 43 67 7f 24 f0 b4 7f e9 6d f2 3f f0 27 e3 f5 ad 2b 3d 35 56 0f 2f cc f2 12 e1 3f e5 9b fc 9f f7 cd 64 b6 b1 ba 38 23 f2 24 74 d9 f3 cf b3 f8 6a af da af 1a 78 d9 63 f9 3f 83 cc 4a f9 e9 4d 9d 9c b1 dd ee 69 5f 42 d6 b0 48 d6 be 45 eb 2b b3 f9 9f 33 ba 6d f6 ac b6 fb 75 e4 70 33 47 03 c5 fc 71 c8 ec fb db da a1 Data Ascii: ^;Gpt[6y{kL7Pj~x$O:r-q:F<m_8KYvkiwLr%>I6v+h`[t9orCg$m?'+=5V/?d8#$tjxc?JMi_BHE+3mup3Gq
2022-03-15 16:08:14 UTC	3215	IN	Data Raw: 35 1b 55 7f f2 d5 d7 83 bc 6d 28 4b 95 ad d2 ff 00 83 a1 c1 5a 32 a8 dc 1c 2e 8e 8b e1 0e 93 e1 0f 01 a6 9b 79 67 ad 6a 53 db cb f2 6f ba ba f2 91 d7 d4 af 1f 2d 15 b9 1f c3 9f 04 f8 8e 18 ec ee ad 37 fd 95 d5 12 49 1d a2 df 45 77 d2 ad 5e 51 e6 8c b7 f9 99 cf 09 4d 3b 68 8c 7b a6 b6 b3 f2 fe cf 04 70 79 bf 23 c9 23 fc fb bf da 15 97 25 be ab 71 aa ff 00 67 e9 bf 65 fb 6b 6d 7f de 3f c8 eb d7 9f ee 9a 9b 4b b1 83 fb 0e ee ea 69 ee ae 9d 9d be cf 04 6f bf e6 db bb e6 e3 84 15 5d 7e 27 37 85 e7 bb d0 ee 34 dd 3a 0d 56 c2 dd 5d ec 63 be 57 7f 9b b3 48 aa 5b 79 dd f7 3f 3a de 9d 07 51 5e 4b 4d ce 79 57 51 d2 e7 45 a7 e9 37 29 1c 96 6d a9 47 e5 79 cd f6 b8 23 4f 9d 37 7b 8f e1 f7 ac bf f8 44 6f 35 eb e9 24 6d 4a 3b 5b 7d 37 e7 4f 32 e9 53 7b 74 ee 33 fa d7 9e Data Ascii: 5Um(KZ2.ygjSo-7IEw^QM;h{py##%qgekm?Kio]~'74:V]cWH[y?:Q^KMyWQE7)mGy#O7{Do5$mJ;[}7O2S{t3
2022-03-15 16:08:14 UTC	3295	IN	Data Raw: ac ba 7d 8a cf 1b 7f 61 48 f7 1b 37 f9 f2 4f b1 f7 76 ae bb c4 1f 0d ef 3c 25 a3 cf 63 a2 eb b2 5e a7 dc 79 1f cb 47 dc df d2 b9 fd 27 e1 bd f4 b6 b1 da df 5f c0 89 bd 77 cf 27 ce 9b 7a d7 87 8b 95 68 d4 f6 71 4f 4f 4b 2f 9e a7 a5 4a 31 70 bd f4 7a 9d 67 8d 3c 0b aa fc 55 d2 ac 16 6b b9 ec 93 7a ec f2 e7 df b3 fd ac 51 55 e1 5d 23 c1 f2 7d 9e 1f f4 ab 49 7f d7 7e f1 be f5 15 3e d6 84 e4 dd 65 ef 75 f7 af f8 d8 1d 45 4d 28 e9 6f 43 e5 78 5b c6 7f 07 b4 7b 0b 55 bb 8f c5 da ae f5 79 a3 d3 5d ae e1 f3 db f8 76 b8 1b 6b d2 be 0e fc 72 4d 62 78 f5 6f 15 69 b1 e9 77 11 27 93 0c 16 9f 7e 69 5b e5 f9 d7 f8 49 6f 96 b2 7c 65 e2 2d 73 4b d4 bf e2 a6 92 3b 5f b4 5d b7 d9 23 9f fb a9 f7 77 32 0d bf ee d4 7e 13 f1 f7 87 34 df 1c 69 be 66 85 3d d3 ab ff 00 c7 d6 cf 2a Data Ascii: }aH7Ov<%c^yG'_w'zhqOOK/J1pzg<UkzQU]#}I~>euEM(oCx[{Uy]vkrMbxoiw'~i[Io\|e-sK;_]#w2~4if=*
2022-03-15 16:08:14 UTC	3311	IN	Data Raw: 87 58 b6 6d 36 09 2e a3 9e 08 96 e3 7f ee d1 b7 be d5 fe 23 f7 b6 55 ed 27 c5 91 2c 9e 5d bf ce ee 9b fc c8 20 d8 90 ff 00 b3 cf de c5 35 74 75 ba be 8e 46 bf fb 55 c6 cf 92 4d ff 00 73 77 aa d6 86 9f a3 d9 ff 00 6a cf e4 cf b1 fc 9f b3 f9 f2 7d fd df c5 c5 67 c9 39 58 da 30 e5 2b eb 5e 30 8a ea d6 05 f3 f7 ed dc 8f 24 8f f2 6e ff 00 eb d7 3f 6f a7 cb 2d f4 8a b3 c0 e8 d0 ae f8 e3 81 53 e5 ef b4 d4 6d f0 de c6 ff 00 5c dd e4 7d b5 17 e4 fd e3 b3 ef da b9 2b 8e 95 d4 5b fd b3 43 82 0b 5b 5b 48 21 8a 2d a9 b2 44 d9 f7 79 ab 8c 52 57 61 f1 7c 46 a5 bc 76 7a 6e 9b 04 d0 c1 74 92 cb 34 68 9f 23 44 9e 56 dc 9d bc fd e1 58 ba c6 ac b6 1a af d9 74 f8 d2 7b 7b 89 b6 4d e5 a3 79 a9 b9 79 cb 63 e6 fc e8 ba f1 05 f4 af f6 8b e9 e3 be 48 b7 7d 9e 0d 9b d1 19 b8 c0 26 Data Ascii: Xm6.#U',] 5tuFUMswj}g9X0+^0$n?o-Sm\}+[C[[H!-DyRWa\|Fvznt4h#DVXt{{MyycH}&
2022-03-15 16:08:14 UTC	3382	IN	Data Raw: 74 dd 5e de ea 79 21 83 c8 5d ed b2 48 1f 62 7f b5 ea db 8d 5a b1 f0 fc 1a 5e b1 e6 2e 93 25 d6 a7 75 e5 ec f3 f7 4a 9b 7f 8b 3e 9f 35 6c 43 ac 7f c2 2f 75 e4 c7 e7 bf cf bf ec bb 3e 7f 97 d7 fe 05 51 ea 5f 10 2f 3c c9 ee 2e a3 fe ce b7 96 de 49 a1 7f e3 7d bd 6b 55 3e 5d 0d 2d 14 ae cc 96 f0 da dd 5a dd db dc 47 1b db b6 e7 74 fb 88 ff 00 de 1c 76 fe 2a cb d6 34 b8 ad e0 fb 3f da e4 82 28 bf e5 9c 7f 73 6a f1 52 5a f8 92 0d 7a 08 e4 b5 f3 d2 2f b8 91 ce 8c 9b eb 4a cd ad ac e7 91 ae 24 f3 d1 be 47 f3 13 7d 6b f6 5a b8 94 a3 6b a2 8d bd ad e5 d4 f2 5a db c9 3d ec bb f7 a7 97 f3 a7 dd c2 e3 15 6b 4b d2 75 af de 5c 5b da 6c b4 d9 b3 fd 42 cb f3 6d e7 81 c5 49 37 89 96 c2 48 17 45 82 37 75 75 77 92 4d a9 f7 5b ad 37 5e f1 e7 88 ee 2d 7c b9 2f e0 83 4f 8b ef Data Ascii: t^y!]HbZ^.%uJ>5lC/u>Q_/<.I}kU>]-ZGtv*4?(sjRZz/J$G}kZkZ=kKu\[lBmI7HE7uuwM[7^-\|/O
2022-03-15 16:08:14 UTC	3446	IN	Data Raw: 8e d7 49 1e b0 df 61 92 e2 de 09 27 45 99 91 3c c7 d9 f3 32 ed cd 67 1b 2b eb 63 a6 3b 10 eb da 7d b6 b3 e6 46 d2 4e 89 bd 6e 26 ba fe 07 db 5e 7f a4 e8 f6 97 1f 12 23 d4 2c f5 29 fe d0 b6 fb d3 e4 57 f9 7d be bd eb d1 3c 49 62 b7 9a 3c 11 f9 ff 00 65 b7 67 f9 e3 d9 bf e5 5f 7f c6 b0 74 7b 5d 37 49 d4 b5 3b ab 54 91 f6 a4 76 fe 7c 7f 7f 6f f7 57 d6 aa 72 74 e5 db fe 1a e0 e3 cd 63 7b c3 7e 15 b9 b7 9e d2 6f b5 fd a9 ee b7 5c 4d fc 6f b9 b0 07 fc 07 8a e9 b4 9f 0d c5 6b a1 dd b5 ac 92 3d c6 f6 ff 00 4a 9f e7 df 2f 56 93 fc 2a 9f 87 ef 17 fb 3a 4d 4a 4f f4 57 d8 b6 e9 1f f7 17 bd 5a d3 75 c5 5d 2a e3 c9 8e 4b a4 89 f6 3c 7b 3f bb fd da b8 4a 9a 4a fd bf 4b 1a 35 7d 56 c7 3f a6 f8 0e 2d 1a 38 16 ea 4f b5 4b 75 ba 6b 89 24 7d ff 00 2b 74 dc 3b b1 a1 74 99 ed Data Ascii: Ia'E<2g+c;}FNn&^#,)W}<Ib<eg_t{]7I;Tv\|oWrtc{~o\Mok=J/V:MJOWZu]K<{?JJK5}V?-8OKuk$}+t;t
2022-03-15 16:08:14 UTC	3509	IN	Data Raw: c8 f1 e5 c4 5e 20 f0 8e 8d af 78 7f 49 ff 00 84 a3 ec f7 cc f7 70 4f 1e cf 25 7e e7 43 fc 63 ef 57 9b 0c 44 5c a3 09 6a b6 6e fa 79 6a fb fe 87 b5 57 13 19 42 f4 dd a5 db a9 4e c7 e2 46 9f ab 5a c7 a3 ff 00 c2 51 25 ae a1 6f 70 d6 31 40 f0 7c fe 6a 7d ed cc 3e 5f a7 ad 5f 9b 45 d5 75 2b ed 36 e2 6d 5b ed bf 63 dc e9 e7 c1 f3 bb 7b 7f b3 d6 b3 23 f0 9c 56 3a 1e a5 71 a7 c1 6b a4 5e f9 de 6e fb a4 5f df 6d ff 00 9e 9b b3 5d 2c 3f 13 3c 35 2e b9 a6 e8 6d 3c f6 ba ad c2 2d bc 33 ba 6c 85 e5 f4 1d f9 ed 5d 51 a8 a6 ff 00 70 9f a6 ec e6 a5 8b 6d 38 e2 25 6b 9c ff 00 8c ac 75 c6 ff 00 84 7a eb cc b1 b2 d1 6d 61 6b 7b 8b 59 f7 25 c6 df ef 2e ef bd 58 fa 7e 8b a8 35 8c 96 f6 77 f0 69 d7 72 ed 7b 48 df 73 f9 cb fd dd f5 a9 e2 8d 1d bc 02 97 77 1a 84 90 6a eb f6 bd Data Ascii: ^ xIpO%~CcWD\jnyjWBNFZQ%op1@\|j}>__Eu+6m[c{#V:qk^n_m],?<5.m<-3l]Qpm8%kuzmak{Y%.X~5wir{Hswj
2022-03-15 16:08:14 UTC	3549	IN	Data Raw: 2e 9e 48 51 fc b8 de 2b 68 d9 b0 37 33 56 0c de 2a d3 2c 24 9e 4b ef b5 dd 5e cb 12 dc 5d cf 04 1f ea 60 6e 32 e7 9d bf cb bd 69 f8 63 c3 7e 03 bc f0 ee b3 e2 89 20 df 0d e6 e4 99 27 ba df 69 0a f4 f3 07 ab 9e f9 ae 77 46 95 29 3c 4e 25 4b 5b 5b cd df 64 cc b0 b5 f1 15 9f d5 30 ea 28 f2 ef 1b 5f 5e 78 3e d6 7d 43 49 d7 5d de 7d cf 6f f7 5d 7f bd 9d c3 d4 57 3b e1 3f 10 59 fc 5a f8 7b e2 4f 3b 4d 82 0d 76 c2 16 ff 00 45 b1 7d 92 cd ba 45 cb 05 1c 06 cb 75 ae c3 e3 27 c2 36 d4 64 f0 dc da 1d c2 68 ee bf b9 9b cb 75 74 b9 8d bf e5 a2 a7 4d d8 ae cf c2 7f 07 74 af 0f c9 a9 5e 58 f9 10 5d fd 85 a1 96 79 13 e7 99 7c c4 68 e4 3d bf 86 be 9e 8e 2b 07 1c 24 65 17 7a 8f 54 d6 8d 5b a3 f2 7f 79 e4 62 28 54 a1 5b d9 3e 9d 3a 5b b9 e3 ff 00 0e fc 5f e3 6f 80 fe 15 d5 Data Ascii: .HQ+h73V*,$K^]`n2ic~ 'iwF)<N%K[[d0(_^x>}CI]}o]W;?YZ{O;MvE}Eu'6dhutMt^X]y\|h=+$ezT[yb(T[>:[_o
2022-03-15 16:08:14 UTC	3652	IN	Data Raw: e6 f7 e1 fe a5 e1 e9 2c 74 ad 52 fe 5b 76 fd e4 fb bc dd a3 e6 61 1b 11 f2 b0 fb d5 e7 54 9d 1c 3d 78 e1 6b 54 5c cf 74 b7 d7 ba db 7f 33 d3 8e 16 b4 a9 7b 55 1d 3b 9c e7 84 6e 97 c5 fe 1f b7 9a fa d3 4d d3 e5 8a e2 19 66 b1 82 e9 9d df ca 93 e5 96 3f e2 45 ff 00 66 bb 5f 18 7c 3a 97 c2 f6 b7 1e 30 b7 d4 a7 b2 7d 35 2e 2e de 18 21 57 d9 12 6e 20 8e bf ca bc 23 e1 df 83 6f 3e 1e 6b 97 7a 0d e4 7f 6d bd 97 cb 7f f9 69 e6 c2 cf 1e e1 86 ea c1 6b bb f8 d9 f1 8f 59 f8 37 f0 e7 c3 de 1b d1 75 29 13 c4 1a a5 ba ea 37 da 94 ff 00 3b a4 4d ff 00 2c 46 ef 5a ee a9 82 96 2b 13 1a 34 26 b9 1b bf aa 7b da f7 f9 91 85 ab 1a 6e 4e b4 75 47 9e fc 29 f8 c8 9a b6 9d ae ea 3e 3b f1 06 95 e1 af 15 6f 87 53 4b 5b a4 54 6f b2 b7 ee dd 82 e3 ef 15 da 76 e6 bd 93 c4 df 10 2d ae Data Ascii: ,tR[vaT=xkT\t3{U;nMf?Ef_\|:0}5..!Wn #o>kzmikY7u)7;M,FZ+4&{nNuG)>;oSK[Tov-
2022-03-15 16:08:14 UTC	3668	IN	Data Raw: 55 f0 ae 8f e2 4b 7b cd 5b ed b7 b7 56 f7 50 e9 d7 d7 48 c9 76 91 70 d1 fc 9d 15 4e dd db 45 7a d5 16 16 bc 23 3d 13 5e ea 8e de 9a eb 7b 3f f8 6b 9c 74 db 52 b3 28 7c 4a f8 63 79 fd 83 a3 78 b1 67 be d4 25 5d 3b ce 87 47 df f7 e7 dd f3 6d fe e4 7d f6 8a e8 3c 13 ac 6a 4b e1 fd 37 4d be be 8e c9 af 1f ed 1e 64 90 7d 9d 11 be ef 97 f3 fd ea bb 0f 8b 17 45 f8 73 a6 eb 1e 22 d5 a4 49 5a de 3d 8f 62 fb d1 3f 87 e6 6e cc 7f 9d 70 da f7 8c 35 ed 52 0d 37 43 f1 36 bb 06 a9 b6 e1 75 08 67 81 d5 12 15 6e 90 b9 53 b9 88 fb d5 e0 46 8c eb 53 f6 78 8d a0 f4 d3 a7 65 d3 4d ee 7a 95 b1 91 94 6d 18 59 b5 fd 7d e7 17 7d a1 f8 87 4e f8 ed e2 fb 7d 37 53 93 4b b2 b0 9a 49 9f c8 45 74 9a 24 6e 7c c5 3f 2e c1 9a f7 55 d0 7c 47 e2 6f 0e 58 c3 f6 b8 20 97 7b 5b bf f6 76 e8 91 Data Ascii: UK{[VPHvpNEz#=^{?ktR(\|Jcyxg%];Gm}<jK7Md}Es"IZ=b?np5R7C6ugnSFSxeMzmY}}N}7SKIEt$n\|?.U\|GoX {[v
2022-03-15 16:08:14 UTC	3756	IN	Data Raw: 8f 99 97 f8 cd 77 7e 0d d2 fc 7b a0 f8 e3 c6 f1 df 49 03 d9 58 69 31 a6 97 f3 ef 7f 29 e4 75 e0 af dd 7f af fb 35 4b c0 3e 0d f8 7d 0d 8c 17 16 7e 33 fe d1 96 cd 1a ef cc 81 fe 77 da bf dc 3f c5 ed 5d df c2 3f 17 78 7b 5e d2 be 21 78 8b 47 f3 2e ad d9 21 89 2d 67 dd be 16 dd f2 ee 6f fc 7a bc 8a d2 7c f3 97 26 8a 36 bd b6 6b 67 dd 7f 48 29 d3 52 a9 15 7f 8a 51 d9 f6 30 7e 1e e8 3a bd bd ac f6 be 30 fe d8 d5 2c ae 26 91 12 fa 3d 45 7e 49 76 e7 1d 43 6d ab 1a 87 86 f4 8f 04 58 eb be 2a 92 3b ab dd 4d 74 0b 8d 3b f7 8f f3 c3 bf a6 3f d8 3f de f5 ad 3d 36 4d 4f 56 d0 2d 2d ec 60 92 f6 29 6e da e6 e2 4b ab a5 d9 0b 6d d8 7c af ef 27 f1 7e 95 b3 a5 f8 5f ec 16 ba ed 8c c9 1c f1 4b a1 c9 b2 4f ef b7 99 cd 79 14 f1 35 55 65 38 e8 ac ee d7 a6 ab f0 b1 da a3 0e 6e Data Ascii: w~{IXi1)u5K>}~3w?]?x{^!xG.!-goz\|&6kgH)RQ0~:0,&=E~IvCmX*;Mt;??=6MOV--`)nKm\|'~_KOy5Ue8n
2022-03-15 16:08:14 UTC	3780	IN	Data Raw: af 87 b7 d3 f8 73 e1 44 7a e6 a9 ab 69 5b 6e 12 3b 1b 48 27 93 ca 74 da df 34 6d ef 8e 6b d0 7c 13 e2 6f 0a d8 78 3a 4b af 2e 4d 39 ed ee e1 b8 9b ed cf fe bb 67 49 37 96 3f 2f a7 4a f8 a9 e1 9d 3a d2 a9 37 65 ad bc fc bc fd 0e fa 36 7c bc dd 4f 27 d4 3c 2e ad e3 48 f4 fd 2f 52 ba d1 6e 19 fc 99 67 8f f7 b1 5b 4e df ea b7 37 44 dd 8e d5 da 7c 29 be 5f 04 7c 16 d4 ae bc 55 7f 1d d6 b6 da 9c cf 0c 9b f6 4b 34 b1 70 8b 9f 66 ae 17 4b d0 7c 39 e3 69 ed 3c 4d a7 da 6a bf da 1a a6 ac aa 89 3d f3 22 5c c5 e7 e1 e4 f2 ff 00 8d 08 ac 6f 8c da 3d f6 8f 1c 16 2c 9b 3c 3b a8 f8 92 67 b4 f9 19 ee 21 58 9b ca c2 ff 00 79 59 7e 6a f6 e8 d3 e6 a6 a8 db 5d 9b 69 5d 35 d3 fa 60 ec e5 ed 56 d1 d8 f5 3d 52 d6 fa 28 23 d5 bf e1 1a fb 6d c2 ff 00 cf ac fe 54 bb be f3 1d 8f f7 Data Ascii: sDzi[n;H't4mk\|ox:K.M9gI7?/J:7e6\|O'<.H/Rng[N7D\|)_\|UK4pfK\|9i<Mj="\o=,<;g!XyY~j]i]5`V=R(#mT
2022-03-15 16:08:14 UTC	3796	IN	Data Raw: b9 cf 5a ed 37 17 e4 60 e8 7e 26 f0 2f c1 e9 3e c7 e1 f9 d1 2e 3e e5 c4 97 de 62 5c 5c fb 37 f0 8f f7 6b 4e eb e2 06 83 f1 13 49 9e 15 bb 92 d6 ee c2 5f b5 bc 6f 07 9b 69 33 7f 04 6f fd d5 a8 bc 4d f0 b6 0f 1e 6b 12 78 91 63 9f 48 b5 b8 b8 df 2e 9d 7d 02 bb ed ff 00 63 fb bb bb 57 5f a4 e8 36 36 ba c6 83 a4 e8 3a 15 8d ae 9e b3 7d a6 e2 08 dd 51 df f8 46 fd ff 00 7b fc e0 56 98 8c 46 0e 55 3d b4 64 e5 5b d7 44 63 1e 65 a2 5a 1e c9 e3 ed 26 7f 88 3a c7 82 26 68 f6 5b d8 58 db ea 2f 1c 7f 73 cd f2 fe 5f f8 08 dd 51 f8 93 c0 be 17 5f 0a df e9 77 9a 4c 73 5b df bf 9d 34 11 ee 77 76 e9 bb 77 f7 ab 2f c5 9f 18 b5 0d 36 fa 4d 2e df 45 b4 4b ab 5b 16 79 ae be ff 00 d9 96 26 f2 fe e8 c7 4a e7 7c 5d f1 2b 5a f8 69 6b 61 fd b1 3a 6a f7 5a b6 9d 1d da 4f e4 6c 89 15 Data Ascii: Z7`~&/>.>b\\7kNI_oi3oMkxcH.}cW_66:}QF{VFU=d[DceZ&:&h[X/s_Q_wLs[4wvw/6M.EK[y&J\|]+Zika:jZOl
2022-03-15 16:08:14 UTC	5030	IN	Data Raw: f9 78 e3 f3 ef 5e ef 26 a9 65 e2 0f 81 3e 10 fe da f2 ef 6d 2e b5 6b 84 9b ee ba 3c 4b 5d 85 be eb ab e9 37 4f 1b a4 48 a8 90 46 8a 89 b7 6f dd ae 6f e2 87 83 6c fc 39 e0 ef 0f 69 7a 5c 1f 65 b2 b5 f1 25 c5 bc 30 46 ff 00 22 2c aa ad 8f c1 ab 82 58 a5 8b 55 ab 49 59 e9 6f bd 3e fe 4c ed a4 a4 97 91 53 e1 7e 93 6d 6b a5 69 3e 20 fe c2 be d4 62 b7 d5 a4 bb b1 b1 8e 05 79 61 82 15 d8 71 c0 dc ac dd 3f dd e2 b9 8f 03 eb 9e 1a b5 d5 6e f5 49 b5 6b a8 2c b5 2b b9 26 87 cc d3 a4 85 e6 66 6e 8d fe ef d6 bb 4f 85 fe 34 9f 56 f8 e1 61 a2 d9 cf 27 f6 16 97 6e d6 8f f2 6c 47 d8 bf 7b 77 47 cb 7c d5 e0 5f 14 21 d7 af 2d 6e f5 6b 19 e3 bd b2 fb 74 cf 14 71 bf dc de d8 68 8a ff 00 b4 39 5a d2 30 55 ed 4e 69 2b be bb 2d 17 6b 6e f5 f9 79 93 3b 28 5d 74 3d 7f 5d f8 f1 a3 Data Ascii: x^&e>m.k<K]7OHFool9iz\e%0F",XUIYo>LS~mki> byaq?nIk,+&fnO4Va'nlG{wG\|_!-nktqh9Z0UNi+-kny;(]t=]
2022-03-15 16:08:14 UTC	5046	IN	Data Raw: 95 ff 00 c8 d2 af b3 75 1c 56 a8 f1 6f 88 5a 7f 8e 2e 3c 3f ff 00 08 8e 8a 9a 3d ec 5a 93 ff 00 a4 4f 63 07 d9 e5 4f 66 fe 1c 57 bb 7e cd 3e 13 d4 34 ff 00 87 37 fa 0e b1 ab 58 de eb 1a 5d 8c 90 a4 76 2f bd d2 06 e5 03 7f b4 1b 75 79 97 88 a6 f0 ae 8f fb 99 3c 5f 63 75 7c df 23 ff 00 a5 2c 56 f0 fe 5f 33 62 bb 1f d9 cf e2 36 94 9e 38 b0 f0 ed 8d f5 8d ea 5e 79 c8 ff 00 65 f9 df ee ee e6 bd 88 4e ad 6a 3f 57 95 3d 1d f5 4b ab 56 57 67 14 a5 1a 15 61 59 bd 9a fc d1 ce 68 7e 10 d2 2e ad 7e d5 74 92 43 7d 75 6f 33 ca 90 49 b1 26 97 73 c6 a5 ab cc f5 cd 23 e2 cf c3 7b 1f b5 68 be 2c d4 75 4b 78 22 fd ec 32 49 be 58 57 d1 37 67 72 8a f7 5f 13 47 1f 84 bc 55 05 bc d1 c9 24 56 e9 f3 a2 7f 75 a7 26 a9 f8 9a 6b ef 10 78 8b fe 24 b1 fd b6 dd 2d d9 ff 00 77 f7 1d 7b Data Ascii: uVoZ.<?=ZOcOfW~>47X]v/uy<_cu\|#,V_3b68^yeNj?W=KVWgaYh~.~tC}uo3I&s#{h,uKx"2IXW7gr_GU$Vu&kx$-w{
2022-03-15 16:08:14 UTC	5062	IN	Data Raw: 57 b6 af f6 44 d5 37 ec b7 45 4e 3f 75 d3 e5 f4 af 7b f8 7f a1 ff 00 c2 41 6b 05 9f db a0 bd d4 36 6c 97 c8 b1 8e 5d fe fb 9c 57 2b 71 fb 2d d8 e9 ba e4 9a e6 ad 69 6b 0e 9f 2c cd 37 f6 55 ab c9 2a 43 ed bb 01 b6 fe 55 ee 9e 07 f1 16 83 a5 e8 73 d8 e9 fa 2c 7a 5d ad 87 97 0f 9f e4 79 51 3e e6 ee 7e f7 1e f5 cb 9b 62 a8 54 a6 a9 e1 1f c2 bb 2f cf fe 01 9f bf 3a 9e f1 92 df 02 62 b0 83 52 5b 5b ed 3a cb 58 9d 19 22 9e d6 d5 ad ff 00 ef bf 2d ba fe 15 f3 d7 81 e4 f8 c5 71 e2 ab ff 00 f8 9b 5d 7d 8b 4b 75 fb 44 17 d7 5b 1d fe 6f ba 9b b8 97 f3 af 6d f1 97 c5 09 34 9d 71 2d e6 8e d6 eb 4f de bb de 07 93 7a 2f d4 8c 37 1e 95 a9 a2 f8 92 c7 c6 5f 2c d0 79 10 af ee bf 71 3e f4 45 db f2 d7 8d 4f 31 c5 61 a9 4e 58 9a 51 9a 9e cd eb 62 ea 41 68 a0 ec d7 63 b5 d0 7c Data Ascii: WD7EN?u{Ak6l]W+q-ik,7U*CUs,z]yQ>~bT/:bR[[:X"-q]}KuD[om4q-Oz/7_,yq>EO1aNXQbAhc\|
2022-03-15 16:08:14 UTC	5070	IN	Data Raw: dd 58 ed 4b 74 66 fe 25 53 cb 3d 53 d6 3c 1b 3f 8d be 1e 78 b3 c5 be 5c 9a 5f 87 f4 18 63 fe cc d3 a0 81 52 29 b7 b7 cc 7e 5e 38 ef 5e 63 f0 2f e3 6f c3 7d 2f c5 5f d9 7e 31 f0 9c 1f da 4c ff 00 67 b7 d6 60 dd 2b ee 6f bb f2 73 8f f7 94 7e 15 d3 2c 1a cc 20 da 85 e1 07 75 0d ed e5 dd fa 1c 52 5c 89 49 bd f4 b9 ec 9f 0e ff 00 65 bd 57 47 d6 60 f1 16 a9 1c 0f ad 7c b2 bd d6 b1 3a cb e4 b7 af 96 87 96 fa 9a ee 61 5d 3a eb 5c 4d 06 3f 16 4f e2 5d 76 e2 29 ae 21 b1 b1 75 b1 b1 fd d2 ee 7f 32 44 ed ff 00 02 a6 eb 1f b3 8c 1a b6 87 a4 ff 00 62 ea d6 be 1e d2 b5 4b b5 4b 68 e7 9e 49 9e e5 9f b9 c6 4e df fd 07 d2 bc 9b e1 de 93 e2 87 f1 75 de 9b a3 69 b6 ba 8a 68 77 12 7d ae c6 77 d9 15 cb 45 9f 31 51 8f 57 d9 b8 ed f4 af 35 b7 8b bc dd dd bb e9 6e dd 34 fb b6 66 Data Ascii: XKtf%S=S<?x\_cR)~^8^c/o}/_~1Lg`+os~, uR\IeWG`\|:a]:\M?O]v)!u2DbKKhINuihw}wE1QW5n4f
2022-03-15 16:08:14 UTC	5086	IN	Data Raw: db 7f 96 e0 ef 76 d1 bd f0 b7 c7 1f 65 f8 f5 a1 78 7e fa 4f f4 7b f8 a4 b4 77 77 fe 2f bf 18 1f 8a d7 cb bf b6 0d 9e a3 7b f1 2b c4 33 58 e8 b3 ea 91 45 a8 c8 92 c9 04 0c fe 4e ee 9f 76 be c8 f8 7b a1 e8 3a ce b9 a2 f8 99 74 54 83 58 8a e2 34 9b cf 4f de db 4a bc 37 d3 fd ea f1 8f 8b 5e 32 b6 f8 7f f1 0b e2 13 37 98 f2 cb 7c be 55 ac 7f f2 da 46 e9 5b 65 95 de 11 53 95 1a 5c d2 8d d5 af 6b b7 6e a8 d6 ce 54 e5 19 3e a7 87 fc 21 f8 91 f1 1b 4b 8f 4d d2 e4 f0 d6 a4 f6 4c eb 0c 33 ea b6 bb d3 6f a2 b3 2e 7e 95 eb 76 be 03 f1 8d bc 7a b6 a5 36 8d 6b a2 a3 3e ff 00 22 79 e2 d8 fe e8 9f c2 d5 ca 6b df 17 bc 5d 7d 1e 8b 0f fa 9d 42 ca fa 34 fb 0d 8f ce e8 cd c6 df a8 4e bc f5 a9 be 27 78 77 c6 ba 3f 87 f5 2d 5b 58 f1 0c 9a d3 dc 3a c3 a4 e8 ff 00 34 b2 c3 bb 96 Data Ascii: vex~O{ww/{+3XENv{:tTX4OJ7^27\|UF[eS\knT>!KML3o.~vz6k>"yk]}B4N'xw?-[X:4
2022-03-15 16:08:14 UTC	5102	IN	Data Raw: 5d 40 9b 25 da fd 55 b6 fd fa 2b da c0 e5 f2 7c ed 4f 96 ef b5 ef a2 d7 75 d3 43 29 62 21 ec a9 c5 ab b4 ba 7a b3 e8 4d 6b c3 b7 3e 30 d4 ae e1 f1 06 ad 23 db fc b3 7d 87 4e fd d4 53 4b fc 72 36 3e f3 67 ef 57 4d f1 ab 47 b6 ba 87 e1 97 87 6c e4 f2 22 8a c5 b6 7f 1e cf 97 a1 af 0d f0 af c7 2d 67 56 f1 05 bd ae a9 e1 09 34 b5 b7 76 d9 75 e5 b2 24 cb fd dc 35 6f d8 eb d3 de 7c 4d 8e f1 6d 2e a7 fb db 2c 63 4f 35 f6 b2 e3 8f a5 7c 15 4a 38 ca 15 1c 6b bd 54 6e b5 ba fc 09 55 23 24 dc 7a 9c 47 84 fe 00 f8 57 fe 13 1d b3 41 a8 a5 ed bc b2 35 df ef d7 ca f9 7f 87 d7 9a fa 3b f6 7f f0 4f 85 f4 7f 8a 1a 12 e8 fa 2d ad ab da f9 88 93 c1 07 ce 9f bb 6c fc fd 6b 93 87 e1 cb 78 2e 4b ff 00 11 6a 97 6f fd a7 3d c4 97 2f 63 1f ce 90 c7 fe df fb 55 c9 7c 2d fd a2 bc 59 Data Ascii: ]@%U+\|OuC)b!zMk>0#}NSKr6>gWMGl"-gV4vu$5o\|Mm.,cO5\|J8kTnU#$zGWA5;O-lkx.Kjo=/cU\|-Y
2022-03-15 16:08:14 UTC	5109	IN	Data Raw: 5c 5b dc 7d 9e df 4d 91 15 e5 bd 89 97 e7 8f 64 9f 28 53 fd ea 7d d4 da 77 81 75 1f b6 78 6e fa d7 c2 36 ba 8e e4 4d fe 5b cb 0b 7f cf 16 7e 7f 0a 73 96 1e 9c 21 46 51 e6 96 ff 00 7f 4e ba 6a 66 e3 2d 2c b9 52 d3 d7 cc ce 5b af 8b be 0d d0 d3 c7 1a 86 93 05 96 9f 13 ec 48 ee a3 fb 3d c6 d7 e3 23 f8 f6 9f 7a db 6f 1a 78 73 59 d9 3d e2 25 ae a1 2e d7 9a 3b af be 8d e9 bc d6 57 c2 f9 2f bc 59 e3 49 3c 1f e2 eb b9 35 bf ed bb 4b 88 52 4b a9 d9 e5 87 f7 65 93 d5 76 fa 57 99 68 f6 7a 9f 87 2f b5 6d 1e ce c2 d7 54 96 5d d1 45 1e a3 f3 a2 6d 6e 1b fd ea cb 11 83 a3 88 bf 2a e4 b6 a9 a7 64 e3 f9 69 e8 63 f1 47 dd bb ef 7e fe 87 be 6b de 0b f0 d5 f7 84 ad 35 ab 8f 23 65 c4 db 12 4b e7 d8 8f b7 9c 06 ec 6b c3 7e 31 78 06 5d 65 ff 00 e1 26 86 7f 3e 29 65 d9 e4 40 fe Data Ascii: \[}Md(S}wuxn6M[~s!FQNjf-,R[H=#zoxsY=%.;W/YI<5KRKevWhz/mT]Emn*dicG~k5#eKk~1x]e&>)e@
2022-03-15 16:08:14 UTC	5125	IN	Data Raw: ec db a2 dc 78 c2 c2 47 f1 05 e2 49 71 69 3d 8f c9 77 b9 ff 00 f6 41 fd d3 5f 73 96 e3 70 f8 18 d3 93 83 77 d1 6d cc 9b bd fb 5e db 58 e6 ad 19 c9 b4 b7 3e 58 f0 3f c2 2f 14 3e b2 96 36 f7 d0 69 d7 17 e9 e5 43 23 be fb 7b c8 df f8 44 8b 53 ea 9e 11 d4 3e 14 78 8a 7d 1f c4 56 0f 6b 2c 4f b1 d2 4f 9f ff 00 d6 be f5 ad e1 3f 08 ea ba 7c f0 35 ab cf f6 2f 37 7d bf f7 d1 95 b3 d2 be 9e f8 fd 63 a7 fc 48 f0 1f c3 db ed 42 d1 d3 5d 6b 76 7b 84 74 d9 2b c5 ef f8 8e 2b bb 1d 9c 3a 58 a8 53 a9 69 53 9d d3 b6 8d 34 ae ba ff 00 c3 1b e0 55 4a 93 e5 82 d4 f3 5f 0b f8 37 c3 5a 87 87 75 69 af 20 47 bd 64 87 ec 3e 5f fb 5f 7c f1 ed 5d af 83 74 78 ec e1 fb 1b 7f c7 ba fd cf f6 3d aa cf 87 fe 0e b7 86 bc 17 a4 ea d6 3a 94 7a a6 95 75 ba 17 4d 9b 25 b3 9d 7f e5 8b af fb bf Data Ascii: xGIqi=wA_spwm^X>X?/>6iC#{DS>x}Vk,OO?\|5/7}cHB]kv{t++:XSiS4UJ_7Zui Gd>__\|]tx=:zuM%
2022-03-15 16:08:14 UTC	5141	IN	Data Raw: 99 4e 0e bd 2b c2 fd 55 d3 b7 5d 76 d0 e6 c4 e3 26 b4 7a 2e 8b fc cf b0 f5 af db 12 09 d2 f9 74 5f b7 6c ba d3 a4 b4 48 e4 75 b7 fb 34 bc 6c 96 2d 9f dd ef cf 35 e6 8b f1 a2 d9 ec 64 9b 54 d5 b5 17 d6 17 f7 5b 37 ef 8a 65 6f bd bf 7f 7f e7 5e 41 e1 9f 0a eb de 28 93 6e 9b 61 75 74 8a ea 8f e4 26 fd 9b ab da bc 55 fb 3a b6 9f e0 39 35 05 7f 3f 58 b2 46 9a 5d f0 ec f3 a3 5e b8 1e d5 8d 6c 26 57 97 ce 14 66 f5 93 b2 ea fe 6f b1 95 2c 65 69 fc 08 c7 f0 ee 93 e1 3f 15 78 d3 49 d6 af 24 9f 48 ff 00 48 df 71 25 af f7 7f 86 4d bf c3 83 b7 a5 7a ff 00 ec ab 36 99 a6 fc 62 d5 ad 7c 45 3d ad ad a5 e6 9d 71 0c 52 5f 27 ee 9d 9b 1b 7a d7 c9 3a 6e a5 3e 97 75 1c d1 c9 f7 77 27 fc 05 ab d4 7c 0b f1 1a ce fe d6 fb 47 d5 27 8e d6 2b e8 bc af 3e 44 f9 d3 e6 dd f2 1a e8 c7 Data Ascii: N+U]v&z.t_lHu4l-5dT[7eo^A(naut&U:95?XF]^l&Wfo,ei?xI$HHq%Mz6b\|E=qR_'z:n>uw'\|G'+>D
2022-03-15 16:08:14 UTC	5149	IN	Data Raw: da 09 53 51 6b 43 d4 3c 61 e1 7d 3f e2 27 c0 8f 10 eb 16 fe 67 da f4 e7 8e 68 76 7f 77 6e 0a fe 15 e7 df b3 df c4 2d 17 c1 3a 1c 96 fa b5 da 59 4b 79 a8 43 0d a4 92 47 bd 37 37 6a f7 3f 84 fa 4d a6 87 f0 77 c7 d7 17 53 c1 b2 5f dc dc 41 bf ee 32 65 77 63 f8 77 f5 af 90 ad f4 ff 00 09 dd 58 dd b6 b9 7d 7d a7 7d 8e ee 1b 8d 3a fa d6 3d e8 92 ee ff 00 96 89 fd d3 8a eb c2 46 35 6d 42 6d d9 d9 fe 2d 7e 88 da 54 d4 60 a5 ea 7b 67 ed 49 a8 e9 f7 1e 3e d5 ad f5 68 13 ec d6 77 2b e6 ef fe 35 dd b8 57 2d f0 ef c7 da 1e b9 e2 a9 17 ed 71 c3 14 5e 63 db c7 3a 6c de df c3 c5 6e fe d9 9a 0d f6 b3 e3 b9 2e 21 f2 52 09 74 e8 6e df fd bf 96 be 5e d5 3c 27 aa e8 33 5a 47 75 69 3c 12 ca 8b 71 68 f2 23 22 4d 13 74 91 3f bc 29 d0 cb 28 62 a8 ce 12 9d 9d e5 f2 d7 f5 1e 22 4d Data Ascii: SQkC<a}?'ghvwn-:YKyCG77j?MwS_A2ewcwX}}}:=F5mBm-~T`{gI>hw+5W-q^c:ln.!Rtn^<'3ZGui<qh#"Mt?)(b"M
2022-03-15 16:08:14 UTC	5150	IN	Data Raw: c4 1f 19 1f 53 d1 92 38 7c 2f 15 bc 7a 4b c7 69 b7 7a 2c 5c 09 3f da cf bd 7a 47 82 ff 00 62 bd 06 d6 d6 3f 11 6b 92 47 e2 1b 7b cf f4 8d 3b 4a d4 ae 95 2d d3 77 2b 24 ed 16 5a 56 ff 00 61 38 ae 3f f6 9a f0 1f c3 ff 00 82 5f 0c b4 2f 06 e9 d6 91 c3 e2 7b e9 a3 bd 49 1d 37 dd f9 4b ff 00 2d 6e 1b f8 77 f6 41 5f 2b 78 7f e3 57 8b fe 1a ea af a7 e9 3a d5 d5 95 bc bf 72 37 7d e9 b5 bf bb bb a7 e1 5f a2 61 f0 b5 ea 42 73 c3 36 a7 e7 a5 d2 eb a2 fc ac 55 5f 65 4e 7c d5 63 64 fb 74 3e bf f8 d1 fb 30 e9 5e 32 ba 83 50 be f1 2e 95 a7 7d 9e d3 ca 86 d6 c5 3e cf 6e 9b 7f 85 15 b8 51 5f 2f 6b 1e 03 f0 17 c3 7d 72 48 f5 2d 76 d7 54 b8 54 f9 ed 60 db 2f cc df ed 2d 70 5e 20 d7 af bc 5a f2 4d 7b ac df 4f 2b 3f cf 24 f3 b3 d7 21 75 e0 99 d6 4d d0 cf 1b c5 ff 00 02 af 53 Data Ascii: S8\|/zKiz,\?zGb?kG{;J-w+$ZVa8?_/{I7K-nwA_+xW:r7}_aBs6U_eN\|cdt>0^2P.}>nQ_/k}rH-vTT`/-p^ ZM{O+?$!uMS
2022-03-15 16:08:14 UTC	5166	IN	Data Raw: 89 e1 5f ec 7f 87 fe 17 91 f4 4d 2e 58 ed 2e 3e dc ff 00 3f 90 eb 96 6d bf ed 0f e2 ac 2b d3 a9 c8 e8 d2 8a e6 ba 6e da 25 b6 b7 7d ec b4 26 94 b9 7d e6 cf 13 f8 91 a0 e9 f7 1e 26 fe d2 8e 09 2f b7 3b 5b db ff 00 73 f7 4d 9f cc ae df fb e6 ba e8 ff 00 69 6f 18 df f8 8e 46 be bb 82 eb 5a bf db a7 58 f9 f6 bb f6 6f fe 18 ff 00 85 33 fd ea ec bc 71 e1 99 7c 17 af df 58 e9 e8 93 db dd 6d bb b4 77 ff 00 9e 4d ef fe ed 79 9f c4 28 74 5f 01 ea 5f 0f 7c 3a d1 ef bd fe d3 5b ef b5 da be f7 46 dc 81 5b fb dd db 0b 5d 98 6a f0 c5 72 61 aa c3 99 a4 ed e8 95 db b7 6d 12 7d cd 65 29 52 bc d3 b1 d6 fe ce be 38 d3 f5 9f da 0b c1 90 ea 5e 1e 92 cb c5 1f db 32 6f d4 ad 67 d9 13 ee 8d c1 89 a0 c7 1f ef 0a f7 8f 8f 1f 14 34 ff 00 07 f8 9a e3 4b b7 d3 6d 6f 6f 53 f7 4f 3c fb Data Ascii: _M.X.>?m+n%}&}&/;[sMioFZXo3q\|XmwMy(t__\|:[F[]jram}e)R8^2og4KmooSO<
2022-03-15 16:08:14 UTC	5182	IN	Data Raw: 3c f0 2b ff 00 ad da c5 5b 07 b1 af 57 19 9c e0 65 51 72 55 92 d7 aa 56 4b 54 f7 45 e1 f9 e2 ad 38 af c4 f1 3b 8b 5f 10 de 68 ff 00 d8 fa 6e b5 6b e2 bf 0f da cc d3 5b c7 a7 4f b2 ee c2 56 5f 9a 55 8d b0 ca 4f 7c 67 35 c1 eb d6 76 7e 19 f1 56 ef b2 dd 5d 59 35 bf 93 e7 5d 3f ef 7c d6 5c 49 fe ed 7a 77 c5 0f d9 17 c4 3e 0d 8f fb 73 41 d6 a3 d4 12 34 57 7f b2 c0 d1 4b 0b 2f 5e 01 e9 5e 69 75 e2 8d 4a fa 09 2c f5 ef f8 9a 2e cd 8f 3f dc 95 3e be f5 df 87 af 0a d1 52 c3 54 53 8e cd 6c fd 7b 7e 46 b2 9a 97 c5 a1 ca 78 7f 53 83 4b 9e 7b 36 bb fb 34 51 42 c9 fb ff 00 f6 7a 57 d3 5f 06 6d fc 4f e3 0f 85 fe 25 ba b8 d6 9d 2d fc 2b 14 37 16 fe 5b ef 96 6d cc 59 51 db fb a2 be 61 ff 00 85 6b 26 ac f0 43 0d fe f7 d4 7e e4 12 23 6f 9b d9 5b a5 7d 4d fb 20 e9 37 7a 4f Data Ascii: <+[WeQrUVKTE8;_hnk[OV_UO\|g5v~V]Y5]?\|\Izw>sA4WK/^^iuJ,.?>RTSl{~FxSK{64QBzW_mO%-+7[mYQak&C~#o[}M 7zO
2022-03-15 16:08:14 UTC	5189	IN	Data Raw: 87 f8 40 ac bf 8a 5a 3f 85 7e 1b f8 66 3b 5b 3b bd 35 f5 09 53 fd 23 ec 29 f2 43 e8 37 75 aa 1f 19 3f 6a 4d 42 5d fa 1e 93 68 fa 3e 94 9f 27 90 9f c7 ee cd fc 46 bc 01 ae b5 0f 88 9a e5 a6 9f 67 06 fb 8b a9 96 24 81 3f bc d5 f4 98 5c 16 2f 15 cb 5f 17 2b 45 6b d9 7d db 22 27 2a 18 78 b8 c7 de 91 ec ff 00 b3 8e 9b a9 78 cb c4 77 f2 68 7a cd d6 83 a7 d8 26 fb 89 2d 7f 8f 77 dd 1f 37 73 ef 5f 61 78 6d 6e af 34 d7 8e e3 5a be bd 96 27 5f de 49 b5 1d d5 be 82 b8 af 85 bf 0e 6c fe 14 78 12 0d 0e 37 47 bd fb f7 77 51 a7 fa e9 7f c0 57 4f e0 9b 89 6d 67 bf ba 9b e4 45 4f 2a 2f e0 4d d5 f9 c6 6d 9d 4f 17 88 ab f5 69 b5 49 68 bc fc fc ef f9 1a 53 8c ac 9c f7 64 97 9e 11 f0 d5 bc 77 7a b6 b5 69 24 f1 5a db c9 71 34 93 cf 23 ec 55 e7 ee e6 b8 78 fc 51 a5 7c 41 fd 99 Data Ascii: @Z?~f;[;5S#)C7u?jMB]h>'Fg$?\/_+Ek}"'xxwhz&-w7s_axmn4Z'_Ilx7GwQWOmgEO/MmOiIhSdwzi$Zq4#UxQ\|A
2022-03-15 16:08:14 UTC	5205	IN	Data Raw: 6f e1 fd 26 7d 45 d9 f6 79 9b 19 12 b5 64 f0 9e a3 6b a6 be af e3 4b f8 74 5b 48 be e5 8f df 77 db ef 5c e6 a5 fb 4e 41 fd 87 77 79 e0 bf 0f 4f 74 91 3a a2 5d 4f 06 c4 dc dc 70 83 fa d7 96 36 b5 e3 4f 1f 5d 49 79 ac 5a 5d 5e dd b7 ce 89 22 7c 9b 7f d9 5f e9 53 53 09 15 4d fb 47 66 b4 d5 ec 43 9c 22 ec c9 3c 75 f1 a2 cf 5e d4 a7 d1 d7 c1 89 aa 69 57 1f ba f3 ef be 4f 97 fd 9d bd 31 5e 72 ff 00 06 fc 2b e2 09 a7 dd 3d d7 85 de 2f 91 27 9d fc d4 7c ff 00 b2 df e3 5f 49 fc 3f f8 4f 25 bc 91 de 6b 50 79 2f f2 bb f9 95 d6 6b 9a 0f 85 6f 21 f2 ee b4 d8 1d 55 3e 4f 3f e7 a9 a3 99 47 2f 4a 9e 12 f0 4b fb cf 57 de cf 47 f3 32 d6 ab bc d5 cf 85 bc 47 fb 3a ea be 12 5b b9 af 11 2e a2 5f f8 f7 bb b1 f9 e2 9a 3f e2 ff 00 76 be 83 fd 8b 7c 88 ff 00 66 5f 8b 16 36 ff 00 Data Ascii: o&}EydkKt[Hw\NAwyOt:]Op6O]IyZ]^"\|_SSMGfC"<u^iWO1^r+=/'\|_I?O%kPy/ko!U>O?G/JKWG2G:[._?v\|f_6
2022-03-15 16:08:14 UTC	5221	IN	Data Raw: 67 b4 92 07 5f 29 ff 00 be c1 bb aa d7 c2 d0 72 a7 ef 72 fa 6f f9 9d 51 83 96 c7 79 0d d4 5a a7 99 70 df 7f e6 df fd c7 db cf f2 af 04 fd aa 3c 4d 73 06 8f a4 e9 76 3f 26 91 74 b1 df 37 de df f3 74 dd f9 53 3c 03 e3 6f 12 f8 db e3 f5 a5 bc 69 f6 5f 06 59 c3 71 73 6f f6 af dd 79 d1 2a b2 6e 8b fe 7a 9d f5 cd fe d3 5b 5a d7 c1 9f bc f9 1a c6 37 7f fb e9 eb d3 a7 4e ad 3a f4 95 7b 5e 5e f7 fc 39 d3 ca a5 4d c9 1c a7 c2 f9 b5 ed 37 c4 5e 63 4f 1f d8 be 64 d9 75 02 be c5 eb f2 37 f0 d7 d1 76 3a 85 cc bb 26 ba f3 3c a9 7f f4 2f fe bd 7c ab a1 f8 da 0d 1b 59 fb 3b 6b 56 b6 b7 69 f7 e0 ba 4d e8 ff 00 ec b0 ff 00 d9 ab df 3c 2b e3 6b 1b 88 e4 91 b5 dd 2a c9 d7 fe 79 dd 6f 4f bd fe d5 61 99 61 6b 55 92 92 4d 7a 26 be 7b 24 fe f3 8e 2b 9b 56 7a a6 8b 32 cb 1c 0d 27 Data Ascii: g_)rroQyZp<Msv?&t7tS<oi_Yqsoynz[Z7N:{^^9M7^cOdu7v:&</\|Y;kViM<+kyoOaakUMz&{$+Vz2'
2022-03-15 16:08:14 UTC	5229	IN	Data Raw: 17 67 e2 3b f8 53 fb 8f d1 ff 00 da ae 7b e1 ef 83 65 d4 ac 74 db 79 3c cf ed 3f 3b e7 b5 7f e3 5d dc 73 ea 6b 66 d7 e0 df c5 bf d9 9f ed 7e 2c b7 82 3f 2a e2 c6 4b 1b bf b2 c8 b7 09 e5 4c bc ac 89 e8 3e 9d 79 ae 2f e1 cf 8d ad 34 89 fc eb c9 ee be d1 f6 b8 ee e6 fb 2b ec 77 55 6f 99 51 bf 85 b1 d3 de bc fa f2 78 9a 0d 60 ea 29 45 3d 1a d6 dd 2d e8 89 f6 d4 a5 52 2e d6 6f 75 fa fc cf a1 b5 0f 85 7f da 31 df 68 be 1b 9e 77 7b cb 4b 7f 26 c6 38 24 b8 79 a7 58 f3 2a ed 1f 71 55 f7 2e ef f6 2b c8 be 1f d8 c9 a1 f8 a9 23 d4 2e f6 5c 7d a3 ca fb 0e cd fb fe 6f 9b 77 f7 31 8a fb be c7 f6 90 d3 f5 0f 26 5f 80 7e 17 d2 a1 b8 5b 4d 97 1a 8e b7 b7 ed 1b a5 6d cd 12 ae ed df 23 1d cd bb e5 35 f2 87 89 3e 0d ea fa 4f c5 4b 1d 53 c4 de 24 d3 af 75 8d 4a 6b 8b bb b8 2c Data Ascii: g;S{ety<?;]skf~,?KL>y/4+wUoQx`)E=-R.ou1hw{K&8$yXqU.+#.\}ow1&_~[Mm#5>OKS$uJk,
2022-03-15 16:08:14 UTC	5245	IN	Data Raw: 12 1f 0e 45 fe b5 e3 f9 3c e6 ff 00 9e 69 fd 4d 15 e8 5f 06 fe 26 69 9a 7f 85 60 4b 5f 0f 4f a5 f8 75 ae 3e fc 7b 9e 24 dd d7 ae 7f 99 a2 bf 3b cd 71 d9 a4 71 73 8e 19 38 c1 6c 95 bf 1d 77 33 85 18 c9 5d ea 73 5f b3 0f c4 ef ed 4f 8c 5f 0a fc 15 1d a6 c4 b7 d5 ae 35 4b 89 ff 00 bf be 3c 27 fe 83 51 fe d2 da c3 e8 7f 13 7c 43 7d 0c ff 00 65 b8 82 f9 a5 49 13 fb ca d5 17 ec a1 f0 9e 0f 0d fe d6 de 1e ba 3e 33 d1 fc 43 a8 5b f9 d3 3d ae 87 ba 54 45 58 88 cb 3b 63 a7 d2 a4 fd a1 b4 08 3c 5b f1 1b c4 1a 4c 93 cf 07 9b 7c c9 fb 8f bf b9 5a be d7 19 1c 3d 2c c6 8a 4f dd 51 6e 5a 77 69 bf 53 d7 a9 52 73 a4 ef d1 fe 47 2d f1 43 c6 5a 7f c7 0f 0e 69 b7 5a c4 ff 00 61 f1 c5 82 79 2e f2 26 c8 af 60 6e 46 31 f7 59 7b 56 57 c3 5f 87 ba 9e 8d 1c f7 d7 53 ce f7 0a fb ed Data Ascii: E<iM_&i`K_Ou>{$;qqs8lw3]s_O_5K<'Q\|C}eI>3C[=TEX;c<[L\|Z=,OQnZwiSRsG-CZiZay.&`nF1Y{VW_S

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.3	49929	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:14 UTC	1903	OUT	GET /cms/api/am/imageFileData/RE4xocL?ver=897f HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:14 UTC	1989	IN	HTTP/1.1 200 OK Last-Modified: Sun, 13 Mar 2022 03:18:30 GMT Access-Control-Allow-Origin: * X-Datacenter: northeu X-ActivityId: 9656fa4a-cd2d-45b6-b66e-06c98fd89ee4 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4xocL?ver=897f X-Source-Length: 613486 Content-Length: 613486 Cache-Control: public, max-age=213025 Expires: Fri, 18 Mar 2022 03:18:39 GMT Date: Tue, 15 Mar 2022 16:08:14 GMT Connection: close
2022-03-15 16:08:14 UTC	1990	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-03-15 16:08:14 UTC	2056	IN	Data Raw: fd e3 9d b5 ac 23 d4 99 4b a1 3c f7 3b d8 91 54 9e 73 b8 d4 52 5c 6d e9 d6 ab cb 30 0b e8 4d 57 29 0a 5d 0b 5f 69 cf 05 87 15 5a 5b a2 33 cf 23 bd 53 96 e3 e5 c0 ea 6a bb 39 3c 93 c5 47 28 f9 8b 6d 72 4e 48 35 01 98 86 e4 f3 55 9e 50 9c 8e 0d 45 e7 e3 9e a4 f7 a3 94 39 8b 66 42 79 f4 a8 5e 5c 36 0f a6 6a b3 dc 9d b8 a8 9a 6c d1 ca c5 cc 59 69 fb f5 15 1b 4c 3a e7 8a aa f3 66 a3 32 77 a3 94 39 8b a2 55 dd 83 53 a3 ed e8 79 3f ad 66 ef 3c 01 53 c6 db 59 48 a3 94 2e 6a 29 db cd 48 b3 63 ad 66 ad d7 a9 cd 0d 72 07 02 b3 e5 1f 31 a6 6e 00 a6 b5 d8 e9 59 66 e7 f1 a6 fd a3 ae 0f eb 4b 94 7c c8 d5 17 59 e8 7d a9 eb 73 8c e4 e6 b2 04 f9 e6 a4 59 c7 42 69 72 8f 98 d8 5b c3 fe 14 a6 f8 85 c7 7a c6 fb 49 dd 80 73 f5 a3 ed 07 77 cd 53 ec c7 cc 6c 0b c3 dc d2 35 e9 e8 Data Ascii: #K<;TsR\m0MW)]_iZ[3#Sj9<G(mrNH5UPE9fBy^\6jlYiL:f2w9USy?f<SYH.j)Hcfr1nYfK\|Y}sYBir[zIswSl5
2022-03-15 16:08:14 UTC	2072	IN	Data Raw: 1b 86 39 92 e6 42 58 be 7a 82 4f 23 f0 af 92 97 b4 ab 37 52 ab bc bf af b8 ec f6 90 a6 ac 8e d5 34 7b 0d 35 8c a7 ed 57 b7 28 02 99 2e ae 5a 4d 84 8f bc 17 38 dd e8 30 70 29 f3 6b 52 f9 80 89 56 c2 31 d1 88 51 bc 7a 30 eb cf b5 79 46 a7 a9 ea b3 3c a7 ed 71 5b ac 44 1d 96 ed f8 82 73 8e 71 f8 d6 35 c6 a3 3b 64 fd a4 c9 32 b6 e4 13 31 da 0f b9 ff 00 eb 57 5d 1c ba a5 65 ce da 64 ac 53 7a a8 9f 41 5a 78 a6 de 0b 7f 2c de 99 6e 0f fc f5 5f 2c 12 46 38 6e e3 d2 a1 b9 58 6e ad 65 37 6f 6e 62 03 3b 81 2c 46 7a f4 1c 0f 4a f0 0b dd 72 40 bf f1 35 bc 17 96 ca 00 db 0c 8c 4e 4f 4c 11 8c 63 bf 7a c7 b3 f1 76 b5 a7 dc b8 b7 9e 69 ed 01 e9 19 3b d1 3b 9e bc 81 ef 5a 2c 92 52 4e 4a 56 7b ff 00 c3 7f c3 09 e2 9e d2 47 bc 4d 63 6b 63 0b cf 60 90 c8 c4 83 e6 2a 86 dc 3d Data Ascii: 9BXzO#7R4{5W(.ZM80p)kRV1Qz0yF<q[Dsq5;d21W]edSzAZx,n_,F8nXne7onb;,FzJr@5NOLczvi;;Z,RNJV{GMckc`*=
2022-03-15 16:08:14 UTC	2107	IN	Data Raw: f9 99 d3 bd fc 6b 93 9f 9b d2 a1 fe d1 42 d8 3c 13 58 c1 2e 1f a6 5c 0a 7c 64 3f 04 10 d5 1c a8 77 35 a4 bc 41 c6 72 2a 23 7c a7 a0 35 5a d8 2b 31 07 1c 7a d5 a7 2a 91 e0 62 96 83 1c 26 05 72 47 5a ad 35 ce 78 07 00 54 12 5d 61 8e 4f e5 54 e7 bc 4d c4 13 57 18 dc 4d 9a 96 f3 19 64 04 9e 2b 47 ed 11 c6 a3 2d 8a e3 c5 fb c5 c2 74 3d e9 bf da 4e cd 97 3d 2a dd 36 c9 e6 3a d9 35 38 22 e8 d9 fa 51 0e a2 b3 2d 71 cd 76 5b 27 3d 2a c5 95 fb a2 10 09 fa d0 e9 68 1c fd 0e c4 49 bd 72 2a 29 25 da dc f4 ac 9b 5d 48 b2 e0 7e b5 60 31 95 b2 5f 23 d2 b1 e5 b6 e6 9c c5 e4 9d 5c 67 b8 a8 e5 7d dd 3a 55 22 1a 37 1b 4d 4d 12 90 d9 6c 9c fb d1 61 5e e3 e3 87 2f b8 9e 6a d2 c6 15 72 29 88 87 a9 eb 46 58 63 8c 52 28 5f 2c 06 f6 a9 53 1d 05 34 02 cb d3 ad 48 8b 8e 45 21 8b bb Data Ascii: kB<X.\\|d?w5Ar#\|5Z+1zb&rGZ5xT]aOTMWMd+G-t=N=6:58"Q-qv['=hIr*)%]H~`1_#\g}:U"7MMla^/jr)FXcR(_,S4HE!
2022-03-15 16:08:14 UTC	2221	IN	Data Raw: 51 29 d8 be 52 69 a7 05 72 a7 6f bd 57 32 ee 6c 02 72 39 24 f6 a8 3c c2 f3 00 a3 81 d7 8e d5 20 1b 72 31 93 9e f5 8b 91 76 b1 20 61 b7 00 9f c7 93 f9 d2 33 18 e3 c9 19 38 e3 3f ce 98 b3 86 60 08 c1 27 b7 61 4e 9a 65 97 a0 f9 47 4a c9 c9 dc 64 7b 1c fc cd 8c 1e de de f4 ef 3b 6a ec cf c9 dc 0a 61 9b 3c 1e df 85 42 c4 6e c8 07 b7 7a 57 1d 87 bb 48 14 b2 82 79 e1 7f c6 9a 19 9d 32 ae 06 7a d3 19 fd 4d 44 dc b0 c9 cf d4 50 50 bf 33 3e 5c e7 e9 d6 a4 da d1 30 00 6d 07 8c d4 21 fc be 49 c0 f4 06 94 dc 2b b6 7a 8c 7d d0 7f 9d 31 d8 73 46 9e 76 5f 9f d6 94 32 a3 60 00 16 98 b8 2d 92 28 63 f2 fd c2 e4 d4 81 21 60 dd 7a d2 09 1b 77 96 0e 01 19 c5 31 94 2b 64 1e 71 d0 52 9c 9e 17 bf e1 53 b0 0d 68 d8 7d e2 07 b5 34 46 33 96 6c 9e 86 a5 8e 21 e6 00 4f e7 fc a8 91 4a Data Ascii: Q)RiroW2lr9$< r1v a38?`'aNeGJd{;ja<BnzWHy2zMDPP3>\0m!I+z}1sFv_2`-(c!`zw1+dqRSh}4F3l!OJ
2022-03-15 16:08:14 UTC	2253	IN	Data Raw: 91 ce 3a 66 b5 ba 8a 23 56 cc 3b 9b 49 19 b1 b0 8a a9 26 9b 21 52 48 35 eb 96 3e 14 48 57 7d da 6f c9 e3 8a af 79 a2 db 45 70 62 8f 6b af 3d 3b 56 6a ba d9 16 e9 33 c8 e3 d3 9d 72 64 18 1c 9c 52 c1 a6 b5 d5 c6 c5 19 e3 f4 ae c7 54 d2 da 2b a7 41 1f 1e a2 a5 d2 f4 a8 e3 4c 96 f2 d9 4e 78 ef f5 ae 9f 68 ad 73 9f d9 eb 63 9a fe c4 10 ae 00 f9 80 a6 b6 8b e7 2e 00 e7 15 d6 dd 42 b3 5c 65 46 1b b9 c7 5a 96 cf 4c da fc 0c b1 a3 da 68 3e 4e 87 0a be 19 31 7c e7 f0 15 5e fb 4f 31 42 00 4e 0f 15 e8 b7 9a 76 c5 07 18 61 91 59 57 56 00 73 20 c0 c5 5c 6a dc 89 52 48 f2 fb 8b 46 12 73 d0 0a af f6 72 54 9c 57 53 7b 64 37 cb c7 43 9a cb 31 a8 6d bd 33 d4 d7 a1 19 68 70 4a 2d 19 10 5b 34 9d 41 c7 d2 91 ad c9 93 68 04 d7 43 6b 08 5c 00 33 5a 76 7a 32 49 27 98 48 25 b8 c6 Data Ascii: :f#V;I&!RH5>HW}oyEpbk=;Vj3rdRT+ALNxhsc.B\eFZLh>N1\|^O1BNvaYWVs \jRHFsrTWS{d7C1m3hpJ-[4AhCk\3Zvz2I'H%
2022-03-15 16:08:14 UTC	2364	IN	Data Raw: a0 f5 0d 9e 0e 7a 7b d5 8d 2b c7 73 4d e2 8d 42 59 03 5c d8 5c 9f 35 24 60 03 3c 8b c8 66 00 67 70 fc 8d 71 0b 73 71 6b 1c 84 b9 b7 2f 85 75 38 03 d4 06 1f a8 a4 b1 44 83 f7 cd 3c 8e cc d9 db 13 10 4f 60 4f a0 f4 c5 78 15 70 b4 aa 4a 75 24 b5 91 d1 0a 8e 36 5d 0f a5 bc 1f e3 08 63 d2 52 db 51 9e da ee d1 c3 48 b6 ec 72 ca 58 60 b3 31 e8 a0 1e 87 8c 71 5a 3a 47 8c 6d 74 4b 11 b6 e5 a7 6b 32 05 b4 d6 d2 e5 ca 83 95 55 23 9e 01 fb bd 08 04 57 86 68 5a a9 65 f2 25 8e de 24 60 a1 44 9f 39 39 ea 33 d4 93 9c 9a bf 25 f5 b6 9b 18 b2 89 e3 b6 f3 7e ed b6 09 c3 67 ae 4f 4c 63 1d 6b e4 aa e5 91 e7 6b b9 db 1c 4b 8d 91 f5 14 3e 2a d2 bc 45 a4 cb 06 b2 89 a9 cd 90 05 bb 2e e5 96 36 c7 cc aa 39 1e fe 84 75 eb 5e 51 e2 7f 83 f1 69 d6 ef 7b e1 b8 0d e5 98 dc f7 3a 7e 31 Data Ascii: z{+sMBY\\5$`<fgpqsqk/u8D<O`OxpJu$6]cRQHrX`1qZ:GmtKk2U#WhZe%$`D993%~gOLckkK>*E.69u^Qi{:~1
2022-03-15 16:08:14 UTC	2507	IN	Data Raw: 3a 55 89 68 f6 ad 76 96 f6 ea 1b cc c8 c7 a5 3e 48 97 73 90 f8 f4 ab f6 d2 d8 5e cd 6e 72 d2 69 51 a3 60 0c b1 e9 5a b6 7a 66 21 22 48 f6 1f d7 15 61 8d a5 ae 4b 10 cd d7 3d f3 59 f3 6b 45 58 94 62 57 de 8b ca 43 d1 10 5c c2 b0 5d 04 1d 2a 2b b8 c4 8e 51 07 03 15 9d 77 78 ef 21 70 5b 76 73 56 34 fb d6 95 c2 90 72 4f 5a da cd 2b 99 dd 3d 0b 69 a1 99 71 98 f9 22 a4 fe c2 74 6f 94 64 1e b9 ae a3 4e 56 58 90 38 04 81 d6 af 79 61 b1 c5 73 3a cd 68 6a a0 99 c4 dc 78 77 cc e1 c0 c3 0f 4a e6 f5 cf 04 4c d1 89 20 18 c9 e7 9e 9e f5 eb 52 47 1b 27 38 ac 6b b8 b2 c5 06 59 73 da b5 a5 89 9c 1d d1 15 28 c6 4a cc f2 61 e0 fb f9 e4 08 ae 23 f9 80 c9 19 ce 6b e0 7f da 9b c7 37 fe 2a f8 89 7b e1 e8 8d bd b5 86 85 3c 96 b0 0b 6e b2 c8 70 1a 56 3d d8 f4 00 70 07 1e f5 f7 cf Data Ascii: :Uhv>Hs^nriQ`Zzf!"HaK=YkEXbWC\]+Qwx!p[vsV4rOZ+=iq"todNVX8yas:hjxwJL RG'8kYs(Ja#k7{<npV=p
2022-03-15 16:08:14 UTC	2563	IN	Data Raw: 7d b9 fa 7e b5 47 50 b7 fb 55 9b cd 2d a0 07 1f 7b a1 24 7f 5a 99 6f 16 7b 78 dc b8 33 28 cf 95 d3 78 c7 4c 74 18 ec 45 34 bd e5 db bb be 3c 86 03 ca db 1e 08 f5 e3 d7 de b8 22 a5 17 77 d0 da 37 94 39 51 cc b4 d7 71 be 7c d9 51 50 6e 0c 55 41 1f ec ff 00 85 16 ab 0b 66 e5 5e 41 30 05 63 32 6d 20 13 c9 38 3c 64 d4 1a 83 32 dd 3c 51 48 7c 95 39 3c 1c 0f ae 7a 9f 7a 45 82 da ed e3 2d fb cd 81 88 1d 38 ea 73 5e 9a d5 5c 88 bb 11 43 70 61 bc 32 79 aa 19 41 18 60 33 93 dc e3 8a bc f1 49 6d 71 31 78 c9 23 9c 01 d7 23 b1 ec 3d 6a b5 bc 56 f1 dc 09 a4 b7 df e6 0c 43 10 23 23 8e 5c ff 00 4a bc 7c c9 93 6a 20 08 38 55 5c 92 7d 4b 1f 4f 73 53 27 ae 85 73 73 68 51 16 69 2f ef 6e 65 21 14 64 c6 a7 9e 7d 47 4f a5 75 de 1f b0 82 ce c2 39 1a 39 10 38 2c 40 50 48 53 d0 9f Data Ascii: }~GPU-{$Zo{x3(xLtE4<"w79Qq\|QPnUAf^A0c2m 8<d2<QH\|9<zzE-8s^\Cpa2yA`3Imq1x##=jVC##\J\|j 8U\}KOsS'sshQi/ne!d}GOu998,@PHS
2022-03-15 16:08:14 UTC	2635	IN	Data Raw: 13 2b bb 96 43 22 44 9f 22 96 ee 3e 87 d6 a2 a5 be 12 a3 a3 2d 4e 1a 1b a1 6f 0c e0 2a 8c b1 e8 a0 0f 7e a4 fb 77 ad 6b 18 60 d8 7e d3 21 78 94 7c bf 26 58 93 eb 9e 83 df b5 73 bf da 32 a4 32 0f 98 39 c7 ef 40 dd bb 1d b0 7f 9d 6a e9 7e 7e a2 a9 08 12 41 12 2e f4 f3 0f 50 4f 7c d7 15 58 be 5b b3 5b 75 3a 52 88 e9 1c b3 dc 02 50 00 aa 25 cb 67 b0 20 7e 75 24 d7 17 5a 6b 09 1e dc 6c 3f 34 77 0d 81 c9 ec 08 3c e3 de b1 99 66 b1 43 25 b4 56 8e 53 20 b6 ec 72 47 27 9c 67 39 e4 d5 8b 7b ab ab b5 44 3f bc 51 d5 4e 0c 6b dc 9d c3 18 ff 00 0a f3 f9 3a f4 2e 29 da e6 b6 a6 8b ae c3 1c cf 72 23 1d 73 16 54 9c 7f 18 1e 86 a9 c6 d6 b6 4b 19 92 f2 e1 ca 82 bc c7 80 4f 6c 91 59 73 16 8a f1 21 b9 90 0d a3 cb 55 07 80 08 c8 00 8f cf 8e b4 d7 99 21 df 16 c3 f6 76 39 32 33 Data Ascii: +C"D">-No*~wk`~!x\|&Xs229@j~~A.PO\|X[[u:RP%g ~u$Zkl?4w<fC%VS rG'g9{D?QNk:.)r#sTKOlYs!U!v923
2022-03-15 16:08:14 UTC	2746	IN	Data Raw: 3f 3e f1 97 02 56 8c 79 5c f0 c5 49 fb cd 8f 6a d3 da a8 ae 58 ee 64 55 b2 b2 bc b0 69 6e 35 17 68 96 e8 20 8e 51 1b 28 55 1d 32 c4 61 87 a9 ef 5a 13 6a 8d b6 39 f4 eb cc 85 3b 18 49 ce 08 ed d7 95 f7 ac db 9f 1b 4a 9e 6c 7f 68 b7 7b 7c 6d f2 b6 b6 39 c7 5c f0 0f a7 51 5c f5 e6 a4 b3 cd 2c b1 7c 87 6b 6f 0b d3 03 1c 9e 38 fc 2b 38 d3 95 47 79 97 6e e7 77 76 6c e6 b3 79 75 31 15 95 d6 15 52 e7 1b b7 82 3b e3 a7 f3 aa 9f d9 da 7c ec 93 cb 76 1c aa ec 50 76 8c 21 fe 15 27 19 5f 73 c8 ac 0f 0e ac 1a a3 85 9a d8 f9 4c c7 37 52 48 15 07 1c 92 c7 a0 c7 6c 73 5b 13 68 53 db c9 b2 d6 28 64 b5 61 b5 6e a3 95 58 1e 7a 86 38 f9 80 ea 3f 4a c2 4b 95 f2 dc 57 be 97 2f 88 24 b8 b7 9c 59 c4 b1 84 65 54 94 12 80 82 73 b5 b2 39 f7 e3 9e 0d 5b 6b fd 52 de fa 24 be 93 3b e3 Data Ascii: ?>Vy\IjXdUin5h Q(U2aZj9;IJlh{\|m9\Q\,\|ko8+8Gynwvlyu1R;\|vPv!'_sL7RHls[hS(danXz8?JKW/$YeTs9[kR$;
2022-03-15 16:08:14 UTC	2778	IN	Data Raw: 5e 3c 64 0e 00 ce 79 3e c7 f1 eb 5a 32 69 b6 17 16 d1 6c b8 2e cc e5 7c b2 1b e4 20 6e dc 4e 70 6b 19 41 2f 89 89 5b 76 4b 3f 87 ec ed 98 cd 0d fd bd a4 a4 7e f2 32 18 2f 3d 18 31 e0 67 d2 99 20 16 d6 67 65 da fd a4 0d ed b7 1b 08 ef 85 18 39 c7 39 fd 2a ae a1 a8 43 a9 47 14 f2 49 11 f2 d5 40 c2 95 c6 3a 7b 54 56 f0 ca d7 c0 94 32 8d b9 50 ca 5b 6a e3 93 8e b5 aa 8b b7 bc cd 6c 68 d9 c2 2f de 27 b9 9f 64 40 83 14 d0 9c 92 31 ef eb ef 5a ba 9e 9b 6d b6 5b 6b 69 c7 97 3a 09 22 91 b0 48 c1 ef e8 73 9c e2 ab 35 fa 41 6f 15 d0 45 8a de 15 d8 93 48 a0 1c 83 c6 17 d4 1e 86 a6 9a f6 4b db 79 24 8f cb 32 f9 61 8c 8c a5 0e ef e1 39 e8 33 df d6 b9 24 e5 26 9f 42 2d d8 c5 8f c3 91 49 2c ed 72 92 fd b2 39 01 86 48 c8 00 83 d8 93 9c 1f a5 61 5d dc c5 15 f5 c4 6f 1b 7d Data Ascii: ^<dy>Z2il.\| nNpkA/[vK?~2/=1g ge99*CGI@:{TV2P[jlh/'d@1Zm[ki:"Hs5AoEHKy$2a93$&B-I,r9Ha]o}
2022-03-15 16:08:14 UTC	2889	IN	Data Raw: d3 86 24 fe 98 a7 e9 cf 0e a1 36 a0 af 01 91 07 30 36 76 ed c0 c8 1c 7e 46 b3 26 b3 b6 96 e0 25 d6 eb 68 f7 06 31 44 08 24 11 9e 73 d3 9e 9e d5 d7 1b 5f 95 f4 26 e2 d9 68 97 72 46 92 3d cc 36 82 60 19 a3 62 cc d9 ed 92 06 01 3f a5 67 b5 e5 e4 b7 82 3c 4d 1c a8 cc c4 e0 92 b8 f7 ef 8a bc 8c 9a 7c 91 47 6f 6c b7 72 b9 e6 e1 89 28 a9 9e 48 19 ed fa d5 c9 65 bc 8a 48 90 dd c4 88 78 59 73 86 2a 7e f0 e9 9c 1e 98 27 9a d3 9e 57 d7 51 75 32 f4 a9 ae af ae c4 d2 4b 28 80 c9 89 e4 24 05 f9 4f 19 cf 23 3f ad 5e fb 5a b5 fc 97 a2 f7 37 8d 98 d6 26 1b 55 80 3c 30 3d b8 ea b4 5a ea b3 7d b2 54 b8 8a 19 3f 83 2d 1e 37 02 3b 30 1c 63 d7 d6 88 74 29 ae ef a7 2f 65 23 82 81 a1 f2 fe 62 9c fc cc c0 63 76 07 f0 fe 34 49 ab de 5a 0f a9 73 4b 10 2a c7 2c be 48 b9 b7 3b 84 b1 Data Ascii: $606v~F&%h1D$s_&hrF=6`b?g<M\|Golr(HeHxYs~'WQu2K($O#?^Z7&U<0=Z}T?-7;0ct)/e#bcv4IZsK,H;
2022-03-15 16:08:14 UTC	2976	IN	Data Raw: 78 3e b4 cb 8b 3b 78 57 cd 7b 75 b8 46 6c 2c 9c 12 bc fa 03 fa 9a b0 b2 25 c4 6f 6a 0a c4 b0 15 cc 91 02 db 87 4c 67 f9 d4 96 49 01 79 62 48 ee 25 9f 6b 23 ca 17 82 a4 8e 3d bf 2a c1 ca da 83 56 2b cb ab 46 61 fb 34 02 38 a3 66 f9 b1 96 55 23 9c a8 39 e4 1e 2a 48 b4 f6 5b a7 79 52 34 81 a3 c6 0c 9b 46 ef 56 3d 3f c6 9c 6d a7 56 02 e4 c5 e5 a8 31 f9 36 f1 e0 8f 40 0f 7c 8e a2 a2 77 fb 6a e1 0a c2 00 c9 26 20 c4 28 ed 81 fc eb 39 4d 45 59 0a d7 d0 9e cd af 6c ef 3c c8 1d 45 a8 55 51 2a 81 96 e7 95 f5 03 3d c7 6e 29 75 49 6f af bc c9 99 e5 de 3e 65 0b 1b 6d 24 9e 30 3b 2e 2a da b4 36 d6 66 5b ab 9b 8f b3 b2 70 d6 d1 82 40 23 bf 6c e4 73 9a c9 5d 7e 1d 1e 4c db 4a 2e e6 93 85 90 c8 51 d2 32 39 1d 48 dd e8 45 73 a9 4a 7a a4 6d 1f 75 16 2d af 62 9d 92 2d 4a e4 Data Ascii: x>;xW{uFl,%ojLgIybH%k#=V+Fa48fU#9H[yR4FV=?mV16@\|wj& (9MEYl<EUQ=n)uIo>em$0;.6f[p@#ls]~LJ.Q29HEsJzmu-b-J
2022-03-15 16:08:14 UTC	3072	IN	Data Raw: a0 11 87 1d 33 d4 f0 6b d4 bc 01 e2 af 13 4f 67 77 a7 58 6a 0b e7 4a 1b cd 8a 69 76 ed 41 90 77 12 06 78 e0 f3 cf 1f 5a f3 6a 61 5d 2d 6f 7b 77 1c 6a 4b 98 dc f1 71 d2 2d ae 24 d7 67 82 4b 4b bb 9d b3 0b b9 6e dc 23 3f 46 56 07 80 a7 af 1c e7 eb 59 fa 37 8e 6d 3c 48 f3 ac 5a 35 9e 95 66 c8 cb 6f 7d 71 01 fb 34 ae 0f ca e0 b6 42 0d d8 5d bc 63 39 cd 65 1d 49 b4 dd 2b 55 b3 f1 ad c8 04 4f 9b 3b 0b 69 19 95 90 8c 12 ac 72 01 20 e4 f5 1f 4e 95 d1 41 e2 4f 06 ea da 5d cf 86 ad 7c 21 2e 89 1b da 2c b1 cb 6a 1b 6b 2e dd a4 be 4e 1c 1f 6e 41 e6 a1 c7 96 36 b3 7e 7d 2d f3 36 8c d6 ba 98 7e 29 4d 7b 5e f0 1e ae 35 8f b6 7d 8e cc 85 76 8d 96 57 89 09 fd e3 15 19 2d ec 47 41 83 58 7e 0b d3 bc 3f f1 5b 49 1a 56 aa 75 5f 3f 4d 91 52 29 b4 d0 9b 65 57 18 52 ca 72 46 02 Data Ascii: 3kOgwXjJivAwxZja]-o{wjKq-$gKKn#?FVY7m<HZ5fo}q4B]c9eI+UO;ir NAO]\|!.,jk.NnA6~}-6~)M{^5}vW-GAX~?[IVu_?MR)eWRrF
2022-03-15 16:08:14 UTC	3096	IN	Data Raw: e4 75 c0 c1 cf 04 16 3f a7 5a ee e5 52 8d 95 d9 9f 4b 23 a1 ba 4b 75 49 34 ab 58 f7 cb 0b 06 f2 ee c8 20 60 71 b5 89 c1 03 af 27 91 56 2d 75 4b 7b eb 7b 8b 39 cb 1b 8d 9b 1f 74 20 20 f5 6e 0f 03 3c e4 76 ac 23 e3 6b 3f 15 e9 f0 41 7b 6e b0 48 a7 60 b8 0d f2 a7 3e fd 01 f4 c6 33 59 b1 69 c7 4f 91 27 9e e4 ff 00 66 f9 80 b9 88 09 1f 6f fb b9 e3 3e 99 c5 2f 64 ad 69 68 c8 b3 7b 9d 83 d8 4d 6b 0c 01 af 22 bd 31 ae 64 db 20 60 aa 47 f0 01 ce 41 e7 39 aa eb 6b 6b 1c 91 dd a5 ca c7 2a e5 95 83 16 de 06 0e 18 8c e0 9f 4f d2 92 f3 45 b6 b6 bd 8a ee ca 43 6f 60 e5 1a 5b 86 8b 24 26 32 b9 23 d7 e8 0e 6a 85 dd 89 86 fc 5d 59 6a 8d 2c 6c 06 f0 20 db 1c 4d 9e 0b 02 3a 93 de b3 5b 59 bb 0e 3e a7 6c a3 4b f1 0b 5b ca 96 77 31 b1 e7 ca b7 20 6d 72 08 c9 04 70 07 6c 1c 56 Data Ascii: u?ZRK#KuI4X `q'V-uK{{9t n<v#k?A{nH`>3YiO'fo>/dih{Mk"1d `GA9kk*OECo`[$&2#j]Yj,l M:[Y>lK[w1 mrplV
2022-03-15 16:08:14 UTC	3334	IN	Data Raw: 63 56 3f 28 3d 50 7a e3 eb 5b 1a f7 87 7f b3 6f a2 8e 58 9b c9 80 b1 0c b3 79 80 f3 f7 88 1d 0e 78 c6 71 59 17 1e 1f 92 ed f2 27 f2 9c 36 c6 0a 0b e3 fb a0 10 48 c9 cf 35 d5 4e d6 4e e4 a9 73 23 06 d2 f4 49 30 b9 8e 1f de 47 f7 46 3e 73 9f e1 27 a7 3d ab 7f 43 bf 48 af 1c 4a 8d 6d 85 df 20 db bc 1c f4 50 32 38 23 aa 9e 3b d3 a1 d2 e3 d0 2d dc 4a e0 3b 27 fa ce 30 09 cf 19 e7 af a1 aa f7 b1 48 6d 5f 65 b1 46 96 3d 82 45 04 8e 78 e4 7b fa f6 ae 8e 65 20 76 b6 84 5a a6 b7 05 d5 f5 a1 d3 90 c4 b6 ef f3 db 60 37 cd d7 21 7a 95 e7 07 9e b5 42 4f 12 5e 41 70 6d 84 6c 97 08 c6 37 90 b6 e2 d9 e0 8f c3 be 2a c3 e9 f7 7b 12 ca cd e3 0e d8 81 56 30 36 86 27 2c 41 ea 79 03 2d d2 aa 1d 1e fc c9 71 77 73 03 16 85 95 09 12 02 c4 f4 66 18 ed eb ed 4f dc b1 9a 5d 4d ed 0e Data Ascii: cV?(=Pz[oXyxqY'6H5NNs#I0GF>s'=CHJm P28#;-J;'0Hm_eF=Ex{e vZ`7!zBO^Apml7*{V06',Ay-qwsfO]M
2022-03-15 16:08:14 UTC	3350	IN	Data Raw: 4b 87 b5 97 40 93 6c 79 6f b4 c9 2e c5 09 8c 06 1d 78 3e d5 a1 a4 f8 b6 ce eb 4b 85 c5 84 d2 c7 14 a4 2c 4b 28 66 08 41 04 b9 23 1c f2 42 e3 3d eb 77 cd 1f b2 37 07 13 3a 4d 2e e6 0b 34 78 ae 36 33 b7 ef 65 51 c8 1d 32 a0 73 f5 02 99 77 e0 bd 56 f2 d9 c8 70 2e 51 cb c7 36 f6 20 29 5e 19 b1 d5 b3 91 8e 38 ed 5d 3d 9e bf 67 70 f1 95 b4 fb 30 f2 c0 da a4 12 33 d0 82 78 24 63 f0 aa 9e 20 f1 85 e5 84 72 cf 60 21 8e 1b 52 24 90 82 14 92 06 5b 70 eb 82 3d 3b d4 2a b5 2f 68 ad 48 73 77 ba 33 6f bc 2a f1 43 05 de a1 a5 b5 cc d1 46 a2 5b ab 52 17 38 e8 40 19 24 7d 46 6b cf 67 bb b5 b1 d5 25 9a f6 26 bb 47 dc 64 50 c5 01 18 f9 42 e3 04 63 82 6b da 74 2f 15 c9 a9 a4 11 de 85 33 4c be 72 08 b8 50 7d 39 c1 f7 e7 39 ae 23 c6 90 69 b6 1a ac 77 5f 64 f2 32 8e d3 b2 a9 6f Data Ascii: K@lyo.x>K,K(fA#B=w7:M.4x63eQ2swVp.Q6 )^8]=gp03x$c r`!R$[p=;/hHsw3oCF[R8@$}Fkg%&GdPBckt/3LrP}99#iw_d2o
2022-03-15 16:08:14 UTC	3430	IN	Data Raw: c2 92 46 31 8e e0 03 da b3 e6 9c f4 8a ba 43 94 9b b2 44 ba 5c 71 de eb d2 e9 53 69 65 0c 70 83 e6 6d 65 95 5b 3c 90 c7 80 3f d9 c1 1e f5 b1 2f c2 06 2f 71 ad 5b 3c 52 82 a6 5d d3 37 09 83 80 a3 9d a3 fd e3 93 df 15 77 42 b5 f1 0e bd a5 4b a9 7d 80 c0 1f 0a c3 72 f0 71 9e 01 39 db 8e 99 3f 85 4f 9f 11 6a 96 69 60 6e 2c 74 88 dc b9 80 5f 9d a6 69 15 7e 63 b4 70 73 eb d3 a6 2b 95 d4 92 7e ec 92 ee 67 cc f6 1d a3 78 36 ff 00 55 b5 8e c1 a5 b9 f9 cb 3b 1f b5 b2 42 ab ea ce 01 18 cf 4c 75 f4 ac 8d 53 e1 7d c0 8f cf 8c c8 e1 5b ca 92 2b 75 72 ad c6 77 29 3c b1 e9 c8 e0 fb 56 0c 3a 8e bf 7d 6d 3c 36 ba 58 bc bd 32 c7 04 a0 ce 4d bc 07 3c 92 37 0c 03 8e 4f 40 2b d7 8e a7 79 aa e9 76 91 dc 49 6d 73 2c 49 19 5f b3 33 01 14 8b c0 64 24 05 5e 9d 09 39 15 33 95 4a 2e Data Ascii: F1CD\qSiepme[<?//q[<R]7wBK}rq9?Oji`n,t_i~cps+~gx6U;BLuS}[+urw)<V:}m<6X2M<7O@+yvIms,I_3d$^93J.
2022-03-15 16:08:14 UTC	3517	IN	Data Raw: e6 af 63 97 b9 b5 9e 1e 4c 52 da cb b4 32 2a f2 1b 8e 1b d0 f4 23 bd 70 37 7e 35 b3 d3 b4 95 b4 b2 f3 ae 6d e0 40 b6 e5 46 5e db 71 07 2a 41 e4 16 ec 78 06 bd 32 2d 62 0d 59 9e 11 38 48 3c b0 7c a6 5c 47 2b e0 e1 78 c1 18 cf 5c 73 5e 52 7c 2f a8 78 53 58 86 f2 d4 d8 99 23 9b 6b 5d ac c1 64 12 16 e5 8a 8c 92 39 c0 38 c0 f4 ef 5c b8 7b 4b dd a9 d3 61 d4 82 5b 1a 51 eb 09 f6 3b b9 2d a7 b9 fb 64 51 9c 4d 1e e8 c3 ee e3 61 2d c0 cf 72 07 07 8c d5 6b 78 ad df 49 d3 af 4c b1 5c 5d 3a 32 cd 1c c5 76 a9 27 76 00 c8 25 81 18 18 35 ab aa ef d1 e1 02 fb 51 89 23 49 4b 4b 6c b1 9d e5 49 c9 2a 07 04 ff 00 b4 7a e0 f4 e9 58 b7 fa b5 92 dd 41 05 a4 aa 20 db 24 92 47 20 50 43 16 c9 2c c3 d4 1c f3 c7 40 2b aa 31 d2 e8 c2 3e f6 c4 97 2d 0c 9a e8 8a de da 4b 8b ab 75 56 5f Data Ascii: cLR2#p7~5m@F^qAx2-bY8H<\|\G+x\s^R\|/xSX#k]d98\{Ka[Q;-dQMa-rkxIL\]:2v'v%5Q#IKKlI*zXA $G PC,@+1>-KuV_
2022-03-15 16:08:14 UTC	3589	IN	Data Raw: d6 e7 7c ff 00 10 86 a1 7e 2d 92 d8 da 5b f9 2b 23 cb 26 4c 73 38 00 ec 53 8c a3 03 fc 5d 0e 2b 5e cf c4 b3 5c 5a e5 1a 49 d0 63 cd 60 df 20 52 c0 64 71 92 32 71 c7 7a e6 3e c5 aa 5d 5c 59 14 9c c9 62 c1 5f 6f cb 20 80 10 38 23 18 2b c6 33 d4 56 de 95 66 62 92 59 e6 49 ad ee 32 62 68 e2 03 cb 2d db cb 1d 00 c7 5c 8e b5 cf 38 c1 2d 0b f6 71 e5 e6 47 47 67 a3 d8 41 76 6e 60 12 19 8b 86 0a 23 04 07 c1 5d ca 0e 00 6f 53 52 5a 69 51 de 25 c5 b5 de d9 a7 ba 93 c9 61 11 2a c4 ff 00 10 c9 fb b9 38 fa fe 55 1e 99 6c f6 7b 3c 9f 2e e2 62 72 32 48 61 8e 4b 01 9e b5 4d b5 0d 3b c3 f2 df b6 ab 71 b1 23 79 0c e6 25 24 6d 60 31 b7 b9 20 11 9e f5 cd ac b4 4c c5 5e 2b 56 67 dd 78 74 9d 27 50 5b 4c c1 34 f7 3b bf 79 27 28 83 96 8d 7a 70 7a 9e f4 96 5a 45 ee 9b 71 05 cd fc Data Ascii: \|~-[+#&Ls8S]+^\ZIc` Rdq2qz>]\Yb_o 8#+3VfbYI2bh-\8-qGGgAvn`#]oSRZiQ%a*8Ul{<.br2HaKM;q#y%$m`1 L^+Vgxt'P[L4;y'(zpzZEq
2022-03-15 16:08:14 UTC	4704	IN	Data Raw: 88 60 d0 64 bb 64 5b 3b 88 ec 2f 91 89 55 3b 98 6d 1d c9 1c 73 df b6 2b ba f0 e7 87 6f 6e b4 d8 f5 19 b5 58 e3 79 38 62 c0 a9 57 0d f7 83 0e 08 ed c7 4f 4a f3 b7 d6 1e fa 49 ae 20 3e 54 ce 42 b2 c2 48 e7 1f 31 03 b6 7a e3 a0 ad 7b 5f 10 dc 2d 8c 71 c8 25 90 98 99 0c cd 26 31 ec 14 71 8e fe b9 e7 35 35 61 52 4b 46 54 74 5b 1d 9e ad e2 5d 0a 07 96 de 7f 32 59 12 3f 96 69 24 28 58 fa 11 82 3f ce 6b 81 d5 7c 50 77 17 82 0f 2c 6e c8 5c ab 60 7f 0e 1b 1c 7e 3d 6b 19 65 3a a4 de 43 9c a9 50 09 62 71 81 dc d6 fd a6 95 6f 6d 6c 63 96 dc dc 17 45 ca fc db 48 0d f2 f1 ed d7 39 ad a9 61 92 f3 2a 10 72 1f 65 e2 69 a5 d1 ed 25 82 d8 5d cc ce 22 68 e2 90 8f 25 bf bc 72 38 c8 ea 07 d7 35 06 a1 6b 39 91 ee 62 b3 bc 32 39 c8 61 13 6d 51 8f e2 62 39 24 f4 1d 2b 6b ed 33 6c Data Ascii: `dd[;/U;ms+onXy8bWOJI >TBH1z{_-q%&1q55aRKFTt[]2Y?i$(X?k\|Pw,n\`~=ke:CPbqomlcEH9a*rei%]"h%r85k9b29amQb9$+k3l
2022-03-15 16:08:14 UTC	4720	IN	Data Raw: 1c 1a ed 75 9d 79 5b c3 c9 6f 3c 90 a5 a0 30 b7 24 e5 57 04 b0 24 1c f0 40 c0 3c e7 eb 5e 49 a2 f8 96 4b 28 ad ed e5 f3 3c 93 36 f5 23 2d b0 9e a3 68 eb 92 06 39 eb 56 fc 45 a9 1d 4a d8 69 76 e7 ca 11 20 96 66 32 6d 2f 29 fe 01 fd e6 19 fb a0 f5 a7 28 73 7b a1 ce b5 35 bc 4d f1 12 1d 4a 63 6f 6d e6 49 a7 30 31 ba 9c 01 2e 0f ca cc 07 04 03 d3 bf bd 73 d7 da 84 96 bb 1d c2 c4 27 75 71 24 70 e2 12 07 ca 36 80 41 1c 75 53 f5 aa b6 9a 6c 4b 08 8e da e3 e7 89 0b bc 97 04 45 d3 ac 78 3d 48 27 83 d0 d6 c6 93 e1 a1 f6 1b 8b 87 17 31 20 56 45 37 2c 08 25 b8 2c 17 bf 07 82 39 1d 7b 56 94 a9 42 84 79 20 8e 48 c5 45 59 0b 69 6d 7c 2f 25 02 51 03 31 11 c8 b9 f2 c1 24 f1 9c 13 b7 1d f9 1c 7d 6a f5 84 d0 b3 41 1a c7 13 f9 6d 89 4e 09 60 3b 80 c0 f2 33 fc 20 7e 35 4e 3f Data Ascii: uy[o<0$W$@<^IK(<6#-h9VEJiv f2m/)(s{5MJcomI01.s'uq$p6AuSlKEx=H'1 VE7,%,9{VBy HEYim\|/%Q1$}jAmN`;3 ~5N?
2022-03-15 16:08:14 UTC	4736	IN	Data Raw: 1b 6e 15 80 27 22 b9 39 af cb 75 be c7 0c b0 3c cd f2 bd 11 c0 f8 77 f6 7d 7b 5f 0b e8 da 8f 88 af 6e a0 77 88 b5 b7 d8 ed 37 c9 6f 1b 73 86 2c c0 0c 1c 8c 1c e3 35 5b c4 3e 06 d2 ed 74 49 45 86 b9 7d 3e a0 63 25 16 fa cf f7 60 9c 8d a4 86 38 c9 e7 9c f3 5d c4 5f b5 17 82 ae 2c ed 2c ae 75 39 2d 2d 95 70 6d cc 2d 88 9b 1c ee 39 e5 49 fa fa d4 d0 fc 42 f0 df 88 61 78 b4 b9 6d b5 0d c0 c9 c1 1b 63 50 0f cc d9 fe 11 db de b5 f7 a2 f9 a5 7b 1d be c6 97 2f 2a 3c cb c2 de 32 d4 bc 23 f0 e6 ca d9 2e 0d bc d3 b3 c6 e6 2e 24 5c 39 c1 66 e4 e7 39 e9 da b5 2d 3c 57 e3 0b a8 6e 12 5b bb 6b 43 70 07 94 da 98 cb b6 01 38 de 06 41 23 27 68 eb ed 5e 63 71 71 ac e8 33 47 7a 9a 50 9e da fd a4 b8 b6 bb 61 e6 46 63 0c 54 b0 40 7e 42 0f 38 38 3d e9 f7 5f 11 e2 d0 f4 73 03 89 Data Ascii: n'"9u<w}{_nw7os,5[>tIE}>c%`8]_,,u9--pm-9IBaxmcP{/*<2#..$\9f9-<Wn[kCp8A#'h^cqq3GzPaFcT@~B88=_s
2022-03-15 16:08:14 UTC	4744	IN	Data Raw: 7a 64 f6 ac 2d 62 5b 3f 05 e8 b6 d2 69 9a 84 b6 ba 8a ca c1 6d 60 cb da bc 63 05 9f 12 72 9d 71 f2 92 09 ec 2b 06 c7 51 87 53 b9 88 6a e6 57 13 1d ed 2c 72 05 91 c9 23 76 d6 20 81 c7 05 8d 72 46 33 5a d4 67 63 94 25 6e 4e a7 b7 db da d8 c9 a6 a5 dc 0e c9 1c 84 6e 05 4f c8 d8 fb ad e8 45 5f d3 f5 4d 3e 0b 52 65 b8 b4 b6 84 b2 a7 9c c3 e5 63 d0 7c d8 c1 e7 a0 ae 5b 4d f1 3c 1a 3d b0 16 d0 34 51 2a 61 ff 00 7e cc 15 7b 17 0c 08 73 8c 72 70 0f 3c 57 3b a7 6a 9a 35 e6 b8 f7 76 77 ff 00 60 bd 4d cb 73 63 24 4e b6 92 91 f7 5d 54 06 50 4f 39 23 1e b4 3b 4a ec d1 2e 5d 0f 49 f1 4f 87 34 ef 1d 78 7b 54 d3 67 7b 79 de e2 13 b2 45 38 c3 0f 99 58 11 c8 e4 75 1c d7 94 f8 2b e1 bc d6 31 25 ed ec 92 49 a5 a6 e0 64 96 09 62 59 14 9e 55 43 72 c0 76 cf 3e f5 d3 ae ab af 69 Data Ascii: zd-b[?im`crq+QSjW,r#v rF3Zgc%nNnOE_M>Rec\|[M<=4Q*a~{srp<W;j5vw`Msc$N]TPO9#;J.]IO4x{Tg{yE8Xu+1%IdbYUCrv>i
2022-03-15 16:08:14 UTC	4760	IN	Data Raw: 2b 64 8f 98 93 d5 bb 93 9c 0c d7 a7 5d 69 06 e6 ce e0 5c 9b 79 2d 19 7c c0 a1 96 5f c0 a8 07 9f a7 38 e2 b8 2f 87 de 05 b7 f0 63 f8 93 55 bd 80 eb 72 cf 74 25 b0 86 e9 9e 6b 6d 3e 0c 0f 97 c9 61 cb ee c9 0d ce 01 03 3c 57 54 63 39 5d 25 a1 cf 25 4e 3a f5 32 fe 20 5e 59 78 92 da ee 48 bc 57 2e a3 67 e7 43 12 5b 47 3a db 0b 76 66 1b 4a b0 c1 6c a9 c9 24 1c 0a bf e3 0d 07 4d d3 b4 5d 3a d2 2d 70 da 6e 2c bf 67 d1 74 cf 2a df 03 ef 17 77 c9 91 f1 c0 24 00 4e 4f b5 5b f1 76 b2 da c6 b7 16 ab 6d a5 69 52 cb 6a aa 23 92 68 15 f2 55 b7 2b 1c 8c f0 dc 80 4f 04 57 0b f1 47 e3 63 78 17 c2 ba c1 9a f2 6d 53 59 b9 2d 27 da 24 b8 e3 cf 6e 7e 45 1c aa 8e 83 9e 9c 55 53 6e 9c b9 12 bb 14 a9 29 2e 77 b1 72 df c2 3f 0f 74 ab 1d 3f 59 d1 63 91 f5 b5 05 c6 a7 2c d3 5c bc a0 Data Ascii: +d]i\y-\|_8/cUrt%km>a<WTc9]%%N:2 ^YxHW.gC[G:vfJl$M]:-pn,gt*w$NO[vmiRj#hU+OWGcxmSY-'$n~EUSn).wr?t?Yc,\
2022-03-15 16:08:14 UTC	4776	IN	Data Raw: e7 6b 0e 3e 61 c7 f5 cd 76 1f 0f ec 35 7b 5f 07 cf a8 6b 36 92 e8 ed 3b a9 48 6f 62 f2 e3 78 c1 e9 34 80 12 01 c8 6e 3b 71 eb 59 3e 2b fd 99 3e db 61 79 ad 78 6b 5f fe cf be 87 7d c9 86 49 96 e6 09 49 cb 22 c6 c8 01 55 0d c7 4e 07 38 e2 af 9d d4 8a 85 5e 9e 44 72 c6 32 72 a6 6c f8 53 c1 d7 fa 2d 86 0d e6 9b 04 ac 4b c8 21 0d 1c 6e e7 ab 01 93 d4 fe 15 9d f1 3f c3 3e 2c d7 6c 6d 4f 87 92 e7 fb 76 d5 83 43 75 61 75 b4 4a 09 c3 21 1b 82 e4 0e 72 47 6e fd 2b 89 fb 47 8a 7c 37 a1 da 43 ae 6b 1a 54 ed 20 61 e7 43 03 4e 23 60 a0 b2 ee 04 72 33 dc 73 d6 a3 d2 db c4 16 7a b5 9e a7 77 ad db 5c da c4 e0 a5 a1 12 47 e6 a9 5e 5d 81 c9 24 f6 5e 83 ad 0a 0e f7 4c bf 68 ad ca d1 a3 aa 7c 3b f1 87 8c f4 58 23 bb b8 b6 82 fa 39 59 ee 6e 96 21 0d b4 c4 8c 6d 8c 67 0d c8 19 Data Ascii: k>av5{_k6;Hobx4n;qY>+>ayxk_}II"UN8^Dr2rlS-K!n?>,lmOvCuauJ!rGn+G\|7CkT aCN#`r3szw\G^]$^Lh\|;X#9Yn!mg
2022-03-15 16:08:14 UTC	4783	IN	Data Raw: bd f2 cb c7 b7 9a 5c 22 e6 ce 4b b7 b1 0c bf f1 2f 9a 61 fb 86 27 2b b4 13 ca 1e 83 b0 e3 a5 6d 52 9a 82 56 46 50 97 3b 77 7a a3 ec 1b 74 b1 48 63 46 d3 e4 8e dc 81 91 6b 28 48 f2 3f d9 00 0c 01 ea 2a fc bf 0e 3c 3b af e9 37 36 17 36 f2 4b a5 5e 0d b3 e9 f2 ca c2 dd fd 4b 29 c8 dd ee 30 6b c3 3c 3b fb 4b 69 36 f2 5b c1 3d c2 a5 bd d4 42 52 d7 39 05 1c 1c 15 20 03 d3 f9 57 a7 78 6b e3 46 8f 35 e3 a3 ea 10 da 47 32 ae 2e 30 cf 01 6e d9 c8 f9 72 3f 0a e4 e4 6f 74 6c fc 99 53 5d fd 95 fc 09 af 48 2e 5f 4c 96 29 60 da 23 92 de f5 d2 48 b6 f0 a1 73 90 31 81 83 d2 b3 ae 3f 66 6d 29 ff 00 d1 0e af ac cb 6b 1e 24 86 39 b6 3b 45 df 01 88 cb 73 cf bd 7a 9f fc 26 30 c2 e6 59 a5 b3 bf b1 52 36 ea 56 33 ab 2c 40 8f e3 50 72 3f 51 8a 94 f8 c6 d2 48 81 b9 92 24 4c 12 25 Data Ascii: \"K/a'+mRVFP;wztHcFk(H?*<;766K^K)0k<;Ki6[=BR9 WxkF5G2.0nr?otlS]H._L)`#Hs1?fm)k$9;Esz&0YR6V3,@Pr?QH$L%
2022-03-15 16:08:14 UTC	4799	IN	Data Raw: a6 cb 2a cc e9 9f e0 2e 39 46 23 9e 33 8e 99 aa 8a e8 4f 4b 9d dc 36 d0 5c 4d 6e 65 82 57 b3 79 4a 33 46 76 7c c0 73 82 78 e3 a9 e2 a9 ae 90 82 e2 41 7f 74 d7 4e 84 b4 65 b8 1b 39 1f 2a 8c 63 8e b9 e7 35 c0 ea 5f 17 f5 9f 0f ad 95 be bd e1 c9 34 a7 b8 22 3f 3a 29 04 91 72 7f bf 9c 6e 1d c7 5a eb b4 ef 16 58 eb 56 de 53 5a 49 78 00 ce d5 e5 c8 3c 7b 1e 7d 2b 6b 68 65 7d 4d ab 7b 08 64 b7 0e 01 c8 6f dd 28 3b 7f 3e 99 fc 7a 55 98 a2 92 35 00 4a 04 80 63 2a 78 07 b6 33 d7 15 8f 05 de 9d 34 89 3a 06 82 58 b2 86 de 59 70 76 f6 01 49 c8 1f 4e b5 ae 8d 67 2a 39 b9 75 8e 19 7e 4f 33 90 14 9e 14 8c 74 23 f5 a9 b0 ee 12 4a b3 10 f2 99 1e 45 52 40 8d b0 ac 40 e8 b9 ea 4d 55 3a c2 da db 1b 80 0d a4 5c 86 63 c1 dd e8 73 c6 7d eb 23 58 be 9f 46 90 c3 3d c4 aa 06 40 f2 Data Ascii: .9F#3OK6\MneWyJ3Fv\|sxAtNe9c5_4"?:)rnZXVSZIx<{}+khe}M{do(;>zU5Jcx34:XYpvINg9u~O3t#JER@@MU:\cs}#XF=@
2022-03-15 16:08:14 UTC	4815	IN	Data Raw: de 00 e5 c1 f2 c2 81 cc 9d 3e b8 ef ed 4a da 73 44 af e4 3b 5b 44 9c c8 64 1b 1f 1d b0 07 6f 53 59 97 76 71 3c 61 11 c9 46 1c 96 24 e4 77 03 35 4b b9 46 f7 84 f5 a6 17 45 ed 8e 64 23 e6 24 9c b8 1d bf c0 0c 57 6b 6d 34 57 16 64 cb 6f 13 c8 f9 cb 44 0f cb 8e b9 20 f5 fd 6b cd b4 1b 75 d3 ee 60 93 97 8a 36 dc 80 1c 33 3e 3a ed 1d 71 e8 78 ae ef 49 d4 92 ee 37 21 ce c5 63 95 da 43 29 3d c1 e8 41 f4 ab d1 2b 23 19 45 b9 5c bc b7 d6 da bc 71 d9 ea 52 49 71 6a ac ad 13 30 dc d6 ae 38 0e ad d7 f0 c9 04 76 ab 1a a7 84 66 8e 41 19 78 0c c4 e4 cb 35 be 63 98 1e 87 72 60 81 dc 11 c8 f7 ae 7e 48 ee 6d 5c 97 b4 9a 35 63 80 76 fc bf 5c f4 c1 ad 2d 13 c4 91 cd 66 f0 30 8e 29 7c c2 a9 73 26 e3 b1 87 1b 59 71 9c 1f 6a 29 d6 b5 d5 4d 49 a9 43 9b 58 68 73 77 ef fd 93 aa 49 Data Ascii: >JsD;[DdoSYvq<aF$w5KFEd#$Wkm4WdoD ku`63>:qxI7!cC)=A+#E\qRIqj08vfAx5cr`~Hm\5cv\-f0)\|s&Yqj)MICXhswI
2022-03-15 16:08:14 UTC	4823	IN	Data Raw: dc 6c 2e 9e 03 6e 40 da 01 39 2c 3b f4 ce 7e bc 56 52 a1 57 65 1d 8d 55 6a 5d ce 73 4b d4 0e 95 75 71 1c d1 c9 ac 5b 1c a2 7d ad 98 14 53 e8 c3 90 3f ad 72 be 26 f1 2e a9 a3 d9 ed d0 ad 04 1e 4b b3 98 a1 91 8c 84 1e db 89 cb 7e 78 cf 35 ec f7 1f 0a 35 a8 e3 90 49 a7 cd 80 9b d1 80 25 65 5e 39 07 bf 07 a7 b5 66 6a 1f 0a 35 1b 36 45 96 05 8e 76 1b 84 52 f0 e5 7d 46 78 c5 44 29 d6 a7 2e 67 11 ba 94 e6 b9 53 35 3c 27 fb 59 db f8 b7 c3 f1 8d 57 c3 fa 9a 78 b6 d5 45 b2 5f e8 f1 98 09 80 a8 e5 8b 7c 84 82 00 2a 46 09 19 e2 ba 7f 0a f8 c7 e2 af c4 28 e0 87 fb 4f 4f f0 dd 86 9e 9e 5a 5f c7 0b 49 a9 cd 1f 24 ed 54 dc 89 91 d5 81 ac 8f 01 7c 29 d3 66 93 33 ce d7 ec 7e 5f 2a d4 8f 2a 1c f7 62 38 23 bf 19 af a1 7c 05 a2 c3 a7 3d c5 bc 76 f1 5b 59 a2 2a e7 07 e7 38 c7 Data Ascii: l.n@9,;~VRWeUj]sKuq[}S?r&.K~x55I%e^9fj56EvR}FxD).gS5<'YWxE_\|F(OOZ_I$T\|)f3~_b8#\|=v[Y8
2022-03-15 16:08:14 UTC	4839	IN	Data Raw: ce 41 c6 39 ae 67 c6 9a e6 95 1c da 15 c6 8d a8 c9 a4 2d ed d2 db 5e 69 92 b0 bb 91 23 60 70 d1 e7 04 b6 e0 00 5c e0 83 9e 30 6b a8 f1 17 86 1a d9 62 bb b6 d3 07 88 e7 b6 c4 62 d4 49 1c 4d 13 7f 11 6d f8 c8 ed df 02 b9 dd 17 5b bb bc d2 b5 99 ee ed ec 74 f8 a5 ba 28 96 b6 21 64 48 4a 8c 39 0e 07 ce e4 fc b9 1c 0c 1a f3 9d 0e bb 9d 51 a8 a4 da 5b 98 fe 22 d7 21 b5 29 0c d7 32 4b 24 92 18 d1 9a 2c 49 2f f0 fc c0 12 10 91 e8 70 06 79 aa f7 3a ed b6 95 a9 69 ef f6 7f ec fb 69 62 54 49 97 fd 48 da 78 e9 d3 39 c7 3c 57 23 e2 89 5d 75 2b bb d2 4c 97 26 32 96 91 44 54 2c 40 8c 7c dc 9c b1 03 f0 1f 5a cd d3 fe 26 cf 60 90 59 5c 81 2d bb fc 86 32 41 04 91 82 0f d7 da 9c b6 4a 28 e8 8d ba 9f 45 e8 fa ed dc 6d 11 05 5d 4f 23 3c e4 1e 87 3d 39 a6 6b 3a ac 29 a8 5c 23 Data Ascii: A9g-^i#`p\0kbbIMm[t(!dHJ9Q["!)2K$,I/py:iibTIHx9<W#]u+L&2DT,@\|Z&`Y\-2AJ(Em]O#<=9k:)\#
2022-03-15 16:08:14 UTC	4855	IN	Data Raw: 61 82 48 54 41 24 76 a7 08 36 1d a5 01 eb 92 3b d5 cb b6 9a 78 4c 76 d2 c9 2d 89 50 aa c3 e5 0b c9 c7 cb ce 4f a9 3c 91 58 cb 9d bf 7c 3d 9a 4b dd 67 ae 5e 78 c7 ed 30 dc 43 6a e0 35 ba 6e 75 90 93 92 7b 00 0f 3f 5e 95 72 d3 c5 f6 2f 61 6b f6 9b b8 ec e4 6c 46 65 61 c1 3d b0 07 ad 79 2c 60 43 6e 1e d0 1b bb d7 46 32 8e 8b 81 d9 bb fb 81 58 ba 3e b9 7b 14 b3 df 21 1a 86 a2 e8 16 15 95 70 aa 83 39 5d bc 63 ea 39 ed 58 4a f6 69 1b 42 9a dd 9e f1 ab 6b 0d 2d c4 76 80 c9 1c 3f 79 65 2a 3c b9 49 e8 72 3a 7e 3d 2b 1a e3 59 ba b3 b9 08 a7 06 26 1d 7a 1c f6 38 e0 83 5e 7b a2 7c 60 bf 91 ad a0 71 a7 83 0f ca d1 f9 2e c5 49 3f c5 91 c0 1e b5 b1 fd b4 2f 2d a3 9f 4f b6 58 fc c9 18 6e 96 6d e9 92 71 90 c3 1f 2f e4 45 72 4e 9b bd d9 d3 4f dd f7 5a d0 eb a4 68 ef 6d e4 Data Ascii: aHTA$v6;xLv-PO<X\|=Kg^x0Cj5nu{?^r/aklFea=y,`CnF2X>{!p9]c9XJiBk-v?ye*<Ir:~=+Y&z8^{\|`q.I?/-OXnmq/ErNOZhm
2022-03-15 16:08:14 UTC	4863	IN	Data Raw: d3 74 ed 43 c5 37 3a 81 9e fc c8 62 93 47 bc c0 b5 ed 82 00 21 c9 1c 9c f1 da bb 5d 07 e1 3d 92 2c 52 36 a9 a9 78 8f c3 76 44 c5 fd 9f 1c 08 82 e5 8b 63 72 b8 53 b5 0a e7 23 19 3e b8 35 57 c3 e7 c5 37 9a a6 a3 6b a0 f8 7e ea df 4e d2 66 6b 64 06 d4 42 b3 46 a4 95 da 0e 0b 31 04 67 03 19 af 41 f2 c1 59 6e 71 f3 39 eb 2d 8f 31 f0 cf c2 6b ff 00 87 1e 30 f1 1e 93 aa eb 0b fd 8b 04 ad 36 9f 1b 59 32 c9 74 8a 72 db 5b a2 10 a7 80 72 09 e3 8a f5 a3 fb 39 f8 13 c7 de 1f 9e fb c3 de 21 9a de eb 53 85 81 8b 53 8d 18 b4 98 20 ee 03 04 11 d3 80 71 5d a6 97 e1 ff 00 18 78 82 c6 41 e2 dd 2d af 34 d9 d1 58 e9 23 00 00 0f 49 24 46 2e 18 0e c3 8e c4 d7 23 e1 5f 1e 78 73 c3 7a 86 af 6f a4 58 45 a7 0f b5 c8 8d 08 66 69 21 0a 76 ed 24 f2 00 c7 4e f9 a2 f7 7c f2 33 96 ab 92 Data Ascii: tC7:bG!]=,R6xvDcrS#>5W7k~NfkdBF1gAYnq9-1k06Y2tr[r9!SS q]xA-4X#I$F.#_xszoXEfi!v$N\|3
2022-03-15 16:08:14 UTC	4879	IN	Data Raw: b4 48 8b ae df bd e9 8e 3a 9f 4a 9d f5 73 04 26 28 3f d6 f5 56 93 a7 a7 de e7 3c 57 99 f8 87 5b d6 f5 cf 18 69 da 75 bd 9b db e9 89 3f 98 66 2a 5b cf 0a 32 49 cf 01 41 ae 78 77 2f 97 99 92 f8 4f c3 17 76 96 32 5f c2 f3 24 4f b9 5e c3 1b 4c 4d b8 9d c4 9c e7 8e 7d b9 ab f6 ba ac d0 3c 92 18 1a 13 03 b3 23 1c 9d c4 0e be e0 fe a2 b5 1e fb 57 8b 56 97 f7 56 ff 00 65 20 05 c9 25 b9 fe f7 b1 a8 75 1b c2 d7 3b 26 81 4d b3 63 07 70 c6 07 24 11 e8 7b 01 4f da 5d dc ae 46 91 e5 7e 20 11 6a da 0e a7 74 90 46 75 28 6f 16 fd d6 1e b1 13 f2 92 07 75 1f c8 d7 35 af db 2e 9f a7 d9 6b 17 af 15 dc da 82 35 c3 1b 65 1e 5a 30 21 58 15 f6 03 9f ce ba 5d 1e f2 cf 4e d4 af 2e e4 da 61 90 49 e6 2c 5b 86 10 b1 e3 1d b1 e9 d0 d5 0d 37 49 b6 97 4f b8 d4 2c ee 23 b9 b7 5e 56 29 43 Data Ascii: H:Js&(?V<W[iu?f*[2IAxw/Ov2_$O^LM}<#WVVe %u;&Mcp${O]F~ jtFu(ou5.k5eZ0!X]N.aI,[7IO,#^V)C
2022-03-15 16:08:14 UTC	4895	IN	Data Raw: 5c 10 31 8f 97 a7 7a e1 be 2b e9 fa 57 8b fc 4e 23 f0 75 9d 9e 9f ad 5b 0d 97 f1 c4 7c b8 e7 04 64 30 0a 30 18 1f 4e a2 90 ea fa e6 b3 30 8d f4 c8 a3 bd 00 f9 b7 4b c3 c8 a4 61 88 04 e1 49 e4 1e 7a f3 5d a6 b1 ae cc df d8 f2 7f 65 da 59 dc d9 c0 b1 c3 71 63 18 dc f1 80 30 19 ce 37 11 d8 f6 f5 35 9f bf 4e 5c cf 70 f7 6a 45 46 da 1e 2d 2f c3 bd 4b 58 d5 6c 9a ef 5c 82 59 37 28 f3 22 69 1b ec f2 2f 2a 58 0e a3 23 1c f4 eb 5d f7 84 7c 45 e2 ad 1e 3d 57 4a f1 16 95 7d 7f a4 5d 91 05 c2 95 13 5b 1e 70 19 7a 8c 03 f3 06 1c 83 cd 77 fa 16 a7 65 6b e6 48 d0 5a 5d dd 92 64 90 b1 27 2e 7f 8d ba 67 07 8a 94 78 a6 7b 3b 8d 93 f9 43 e6 e2 45 8f 8e 7a e7 1d 05 39 62 2a 4b dd 68 b8 e1 a9 ee 8f 3d d3 b4 df 15 45 71 a7 d9 a4 76 d3 f9 ae d1 ad c3 5c 12 86 25 3c 8c e3 39 51 Data Ascii: \1z+WN#u[\|d00N0KaIz]eYqc075N\pjEF-/KXl\Y7("i/X#]\|E=WJ}][pzwekHZ]d'.gx{;CEz9bKh=Eqv\%<9Q
2022-03-15 16:08:14 UTC	4903	IN	Data Raw: 57 18 f9 73 d0 fe 35 8f b4 75 34 36 8d a3 a9 ce c0 7f 80 f3 28 21 4e 78 18 f5 a7 de bb c6 e8 48 f9 58 fe 47 db eb 5a 17 ba 1c f6 17 01 e4 8c c6 cb c7 cd c8 61 e8 7d 0f bd 56 b9 84 dd 28 4e 51 94 fa d7 15 4d ac ce c8 3d 74 12 d7 e6 b9 44 73 f2 92 3b 55 9b b4 91 6e 64 18 1c 61 97 8e 38 aa b9 d9 84 3f 78 60 7e 22 ae 1b b5 b9 4c 0f be 07 1e fe d5 cd a7 2f 99 ad f5 28 ea bb 67 b6 32 3e 23 61 c9 23 bd 71 bf 65 fb 5d e2 3a 64 12 30 07 e3 d4 d7 61 70 20 d4 6d 9e 01 20 47 ce de b8 22 b9 9b 3d 2a 7d 17 50 91 6f 9d 8b 87 fd d6 d2 33 26 7f ba 3b 71 d4 d6 32 e6 ba 4d 68 cd e3 24 d3 d7 52 c5 f2 26 8f 6d 1b b9 54 8f 80 19 7e fb 31 fe 15 5e de e6 b4 34 cb 49 75 26 89 d5 17 c8 00 f9 85 89 19 5c 63 66 73 81 83 f3 10 3a 0e bd 40 aa 30 40 6e 2f 27 b9 69 33 2c 4a 57 cc 65 05 Data Ascii: Ws5u46(!NxHXGZa}V(NQM=tDs;Unda8?x`~"L/(g2>#a#qe]:d0ap m G"=*}Po3&;q2Mh$R&mT~1^4Iu&\cfs:@0@n/'i3,JWe
2022-03-15 16:08:14 UTC	4919	IN	Data Raw: 8e 24 8b cc 01 66 03 9c e7 1d 47 6e dd ab 7b c5 d7 37 ba ad c9 20 a8 8b 69 1b b3 80 00 eb b8 d7 96 f8 86 ea d6 2b a2 89 11 7d e3 6c 66 22 cc ae f8 e8 01 e3 19 ad 69 c1 68 d1 52 93 b5 a4 43 ab 7e d2 3a 87 ef 25 ba 88 59 3c 2a 44 cc 30 a6 51 d8 1e 80 63 db 93 5c fe bb 79 6b e2 e5 b7 bc 7b 99 80 9e 31 2e e0 73 86 3c 82 7d 7f 1a e7 3e 22 78 0f fb 4e c2 09 16 e4 de 5f c8 fb e6 8b fd 58 4c 8c 2a 90 7e f6 0f 04 d5 6f 0b 5e de 68 b0 c5 a6 6a 76 86 d2 e6 dc 6c 2b 20 ec 3e ee 0f 43 f8 57 b1 18 a8 c1 54 8e e7 9d cd cd 2e 46 68 5e 78 6b 50 b4 71 70 3f d2 23 55 27 75 bf 39 c7 76 53 cf e5 5a 5e 1f ba 31 db 48 2e 41 0a 3a ac 9f 79 73 dc af 71 ee 2a c6 91 e2 9b 89 e4 30 07 58 91 7a 85 03 69 f6 35 43 c5 91 cf ab 24 6f 61 73 0d 94 c9 f2 b0 2b 98 df d3 24 0e 0d 4f bd 37 66 Data Ascii: $fGn{7 i+}lf"ihRC~:%Y<D0Qc\yk{1.s<}>"xN_XL~o^hjvl+ >CWT.Fh^xkPqp?#U'u9vSZ^1H.A:ysq*0Xzi5C$oas+$O7f
2022-03-15 16:08:14 UTC	4935	IN	Data Raw: 85 18 da 40 63 82 b8 38 c1 eb d6 b5 3c 2f 05 d9 d1 2e 74 69 ee 8c 92 db 4c cb e7 64 95 da 1b 2a b9 3d 7e 5e bf 51 83 5e 5d 4a 8f d9 ed b3 3d 07 0b bb 5f 46 6c de 4f e5 5c ab db bf 91 03 07 68 e4 f9 be 52 7e 6f 99 47 42 1b f8 47 04 54 3e 20 7b ff 00 13 68 33 a6 62 1a 85 b9 6f 2e 49 8e 16 50 17 2f 1e e0 79 1d c6 72 05 58 d2 5d ef 6d ae 6c 89 6f 34 4d fb b6 87 04 cb 18 00 e0 1e 7e 60 78 ae 77 50 b5 9a c7 50 b7 d2 e2 bb 31 4d a8 b4 86 35 b8 98 2a 9c f3 b4 73 95 62 a7 a1 c6 7f 4a e5 83 e6 97 35 c8 8d e3 ee b3 9f f0 f4 90 69 d6 37 16 b7 11 09 2e 7c e5 2c d0 9d ec a4 fc aa 72 78 2a 3a 15 f6 ae db c5 d6 23 53 f0 ed 92 0d cf 79 a6 32 c4 d2 ae 46 f0 cb 92 3d 3d fd ba 57 23 0d e4 ba 45 c4 48 cf 28 9a cd 98 5c c7 2a 8d ed 18 ea ac bd 4e 00 e0 83 ce 33 de b4 b5 0d 7a Data Ascii: @c8</.tiLd=~^Q^]J=_FlO\hR~oGBGT> {h3bo.IP/yrX]mlo4M~`xwPP1M5sbJ5i7.\|,rx:#Sy2F==W#EH(\N3z
2022-03-15 16:08:14 UTC	4942	IN	Data Raw: 1d f6 b3 25 c4 81 13 99 0f 00 0e d4 91 a3 33 24 43 96 27 e6 23 bf ff 00 58 57 15 6c 4d f4 89 b4 29 d8 d6 fb 43 dd e1 17 fd 58 e8 07 7a 35 2d 65 34 7b 71 82 0c a4 61 40 ec 6a 3b 8b 98 f4 bb 62 49 f9 c0 c9 ae 0e e7 53 7b db 97 b9 76 2e a0 fc 83 fb c7 d7 e8 2b cc ab 59 c7 dd 8e e7 ad 87 c3 f3 eb 2d 8b 5a 86 ad ba 62 65 7c b1 e7 1f 5f 5a ca b8 bd 2e db 00 08 47 6f 61 55 75 29 1e dd 83 12 4c b2 f2 33 fc e9 96 7a 53 df be f7 95 91 72 37 31 e0 01 e8 3d 4d 65 08 ce 4a df 89 d7 2f 67 07 cc 38 b4 b7 de 7c 50 46 49 db 8f 34 76 27 a1 03 da 99 6f e1 ab 98 d5 20 8e 73 28 8c 7e f1 bf 8b 3d 72 73 c5 75 11 c9 6d a7 44 12 da 32 ea bc 12 73 83 9e a4 e3 a9 a4 6d 72 0b 79 05 a3 22 c0 a1 4b 96 23 04 28 f4 5f eb da af d9 d3 4d 45 2e 66 2e 7a 96 e6 6f 95 15 0f 86 ad e7 85 26 92 Data Ascii: %3$C'#XWlM)CXz5-e4{qa@j;bIS{v.+Y-Zbe\|_Z.GoaUu)L3zSr71=MeJ/g8\|PFI4v'o s(~=rsumD2smry"K#(_ME.f.zo&
2022-03-15 16:08:14 UTC	4943	IN	Data Raw: 5b 87 96 e1 40 37 04 0c dc cb 9d c0 75 3b 57 a5 54 7b 80 2e 44 71 ba 98 99 46 00 39 2b db 06 bc ba 95 a2 9e 87 a9 4a 94 a4 9b 65 08 75 23 60 cd 25 ec 6b 86 0d b0 b0 dc eb fe d1 c7 6c 76 a7 59 6a 11 c3 0d e2 db cb 2b 89 36 98 e6 51 ce e2 32 33 db b1 00 56 4e bb 31 b8 69 22 48 df ec b1 1d b2 60 fc ce dd 02 0f 45 3d 49 f4 e2 ac d9 ea d6 f6 b7 f6 6d 16 e1 05 8b 2c 7e 5c 31 fc af 23 75 62 0f 5c 74 1e 95 e8 50 b2 fd e3 ea 79 78 89 3b f2 76 35 f4 69 25 f2 ee 5e 5c 99 76 6e 0a d9 04 64 e0 9f 4e 9d 2a 9e a5 76 93 46 27 13 ff 00 a5 29 09 26 47 24 e7 19 04 76 c5 57 d6 6f ae 2f 1f 52 85 41 8e 59 81 f3 1e 4c e4 fc c0 6d fe bf a5 63 48 81 21 86 dc 49 e5 af 28 47 a8 03 ad 74 c6 7c d1 e5 47 03 8d a5 73 b5 d2 66 6b c5 9e 00 01 57 e3 68 e0 60 ae 09 c7 bd 6c fc 2a d4 e4 d1 Data Ascii: [@7u;WT{.DqF9+Jeu#`%klvYj+6Q23VN1i"H`E=Im,~\1#ub\tPyx;v5i%^\vndNvF')&G$vWo/RAYLmcH!I(Gt\|GsfkWh`l
2022-03-15 16:08:14 UTC	4959	IN	Data Raw: 75 eb 5d dd ae 83 e2 bb 8d 52 d6 e2 ea de c6 c2 da 3c 39 89 6e 3c c9 99 47 2a 06 06 01 3e e4 f1 55 53 13 84 a8 bd e8 d9 f9 0e 18 7c 45 27 a4 af ea 79 d6 9d f0 33 c7 73 da c6 ff 00 d8 71 46 49 18 49 2f 50 30 1f 41 df f1 ac 4f 18 78 37 c6 fe 14 f2 c5 ef 85 f5 09 2d e4 60 82 5b 49 55 e3 04 ff 00 79 83 65 7f 11 8a fa 0f 4f f8 c7 67 1c 86 27 7f 9f 24 08 a3 f9 8e 47 07 20 53 35 ef 14 eb 1e 36 b6 7d 3b 4a d2 ef e5 89 b6 99 2e 04 38 1e a1 41 38 1e e6 bc c9 56 c3 35 68 5d b3 b6 30 c4 45 de 69 24 7c f7 a4 fc 34 f1 15 f4 62 eb 50 b6 fe cf 80 b0 0b 0c 92 ef 27 3e a4 70 2b b1 d1 fe 14 5f 6a 56 13 c3 6b 3e 95 6d 76 ad 8f b4 ee 69 8a 8f 4c 15 19 c8 af 58 d3 7c 15 ae e9 76 2e ed 69 e5 89 79 2b 24 a0 15 fa 9c 9f c8 55 eb 5d 37 54 d3 d7 7f 94 b7 08 fc e6 20 1d 89 c6 39 c7 Data Ascii: u]R<9n<G*>US\|E'y3sqFII/P0AOx7-`[IUyeOg'$G S56};J.8A8V5h]0Ei$\|4bP'>p+_jVk>mviLX\|v.iy+$U]7T 9
2022-03-15 16:08:14 UTC	4975	IN	Data Raw: 1d 30 7b 93 c1 a9 23 d1 d1 d3 e4 70 5b b0 6e ff 00 43 da b2 95 58 c5 ec 69 18 49 f5 38 d8 e3 7b 66 df 13 b0 20 76 ab 9f da 82 78 fc ab d8 b7 f1 fe b0 01 c7 f5 ad c9 74 44 56 e1 bc b3 fe d8 e0 7e 35 3c 7e 1d 49 50 09 46 3d 24 8c f5 fc 0d 29 56 a2 d5 a4 86 a9 d5 8e cc e0 af 74 e8 fc cd d6 c4 80 7d 32 b5 44 df ea 16 3d 0c 8e be e3 20 63 de ba 8d 63 4b 7d 35 dc 07 25 01 eb ff 00 d6 35 92 2e c8 c8 62 41 ce 72 06 47 e5 5d 71 84 65 15 28 33 9a 52 92 95 a4 8c e6 d4 c5 e3 6e ca a4 9d 76 ca 38 27 d8 d3 e3 b4 8a 49 03 11 25 b3 e7 39 56 ca 7e 63 a5 6a 08 ec ee 97 0e 14 49 ea 3e 5c ff 00 4a 44 d3 4a 36 62 93 23 d0 8f ea 3f c2 b0 97 ba 6f 1b 12 da 99 e1 5d b2 20 95 3f bd 9e 6b 41 4b 32 ef f2 d5 c7 b7 5f ca a9 5b da ec 52 0e e8 9b ae 54 e4 7d 71 56 0c 4f 0a e5 5c 3f ba Data Ascii: 0{#p[nCXiI8{f vxtDV~5<~IPF=$)Vt}2D= ccK}5%5.bArG]qe(3Rnv8'I%9V~cjI>\JDJ6b#?o] ?kAK2_[RT}qVO\?
2022-03-15 16:08:14 UTC	4982	IN	Data Raw: d1 91 7c b9 90 fb 37 6c fb 1a ad fd b4 63 72 b2 e4 81 d0 d4 b1 c9 69 7a b9 42 13 3e 9c ae 69 d3 69 01 a3 df bf 23 b1 ea 3e 9e c7 eb 5a d9 bd 51 9d 97 52 13 34 17 68 4a 11 bb ba d4 4c a5 d3 61 7c 9e d9 3f d6 aa 5e 68 64 7c d1 bc 90 30 e4 30 e7 ff 00 d7 50 2a de 5b be 5b 17 2a 07 3e 59 c3 7f df 27 ad 3d 7a a1 7a 0b a8 e8 c9 70 84 ec eb d5 4f af a8 35 cd de 68 2f 6d 92 89 bd 3b a9 1e b5 d1 5c eb f0 2c 7e 53 23 44 71 ca b2 91 8a e7 2f 75 e1 6c db fc dd 8b d0 12 7a 7e 22 94 a1 07 b9 51 72 45 68 6d 6d f7 0f 92 5b 69 33 d0 1d c2 b4 61 b3 95 be e5 c2 ca 47 4c 9d af fa ff 00 5a cf ff 00 84 aa d2 e3 e5 96 20 ed eb d0 fe 62 ab 7f 69 7c e5 ad ae 76 2e 79 8a e3 91 f8 1e a2 b3 e5 82 2f 9a 46 f7 db 27 b7 8f 6c a8 5e 31 c1 52 3a ff 00 87 d6 a8 5d 43 0d c2 97 51 f2 67 3b Data Ascii: \|7lcrizB>ii#>ZQR4hJLa\|?^hd\|00P[[>Y'=zzpO5h/m;\,~S#Dq/ulz~"QrEhmm[i3aGLZ bi\|v.y/F'l^1R:]CQg;
2022-03-15 16:08:14 UTC	4998	IN	Data Raw: a7 dc 48 d1 5c fd a1 a0 20 89 23 93 7a f9 b8 c0 60 4e 41 23 3c 62 b9 d7 2a 83 ba d4 ce 74 df 3f ba f4 26 d2 6c af 62 87 37 f2 01 3b fc d2 c4 0e 04 5f ec 7b 91 df de ac 3d ba db f0 f9 4e 06 41 27 3c f4 c9 ae 93 45 b3 b0 b5 d1 21 be bf dd 71 73 3b 6e 58 c6 33 b4 77 23 dc d5 5d 4d ad 67 b7 8d 22 4d c5 9b 32 c9 d4 01 e9 f5 ae 26 f5 d4 e9 5d 91 8b a7 5b 3c da 95 b2 98 db ec c5 b7 37 3d 47 d6 ba 8f 06 d8 6a ba c7 89 fe d8 97 97 36 f6 50 65 d6 d4 60 a3 80 7e 50 49 e3 8e b9 ef 47 87 ec 21 8a 32 1d 19 d4 90 c0 81 c2 af b1 e7 93 5e 95 1d f5 b5 fe 8e 91 db 79 22 79 01 c4 98 f2 c9 20 63 19 e3 80 3a f1 5c 95 6b a8 a6 92 3a a3 4d 24 93 3c f3 58 f1 13 5f ea 52 46 24 1e 54 4c 50 29 1b 72 c0 64 ee 3d ce 7b 56 54 ba a4 f1 e9 42 73 94 5c 95 11 80 43 ab 03 c7 1e fd 6b 4b 56 Data Ascii: H\ #z`NA#<b*t?&lb7;_{=NA'<E!qs;nX3w#]Mg"M2&][<7=Gj6Pe`~PIG!2^y"y c:\k:M$<X_RF$TLP)rd={VTBs\CkKV
2022-03-15 16:08:14 UTC	5014	IN	Data Raw: e5 56 d1 f7 72 39 23 af b8 ab 2a c2 c9 6e 36 90 39 06 b3 ee 34 e0 ea 43 0a d8 52 0f 14 ad 1e 57 a5 55 80 e2 6f b4 70 d9 46 19 3d b1 fd 2b 92 d6 3c 3c 27 c8 23 12 8f ba c2 bd 5a ea cc 32 70 3b f1 ec 6b 06 fb 4c 12 2f ca 9f 30 f5 ef 58 ca 09 86 b1 3c a3 ec 7e 67 ee 25 f9 26 5e 87 d6 a9 bd a3 c3 27 23 04 75 f4 3e f5 de 6a fa 18 99 7c c4 e2 45 e4 7b d6 2b 5a 8b c5 31 b8 c4 cb df fc f6 ae 49 47 a3 34 8c 9a 39 3b ab 4d cb bd 3b 55 20 48 ea 32 71 82 2b a6 96 d1 ad 5f 0e 01 43 eb d8 d5 0b ed 3b 6b 79 8a 32 3f 9d 28 b3 43 9d d4 74 f5 bc 8c 91 c9 23 82 7b ff 00 f5 c7 eb 5c c4 ba 7b 46 c7 03 0c 0f 6e 86 bb 86 88 47 cf 26 33 f9 83 54 35 0b 0d ff 00 3a f3 eb 8e fe f4 a5 ae c6 91 95 b4 39 15 6e c6 a6 86 63 6e cc 41 c8 3d 56 ac 5f 5b 8e 58 0f ad 51 66 db d5 b3 58 da e6 Data Ascii: Vr9#*n694CRWUopF=+<<'#Z2p;kL/0X<~g%&^'#u>j\|E{+Z1IG49;M;U H2q+_C;ky2?(Ct#{\{FnG&3T5:9ncnA=V_[XQfX
2022-03-15 16:08:14 UTC	5022	IN	Data Raw: 56 67 4d 39 4a 2b dd 77 43 a0 ba 78 24 21 1d ad df bc 6d f7 4d 6a c1 7f 2a e0 be d2 4f 72 a3 a5 52 5d 42 1b a5 c3 80 4f f7 48 c8 ff 00 11 fa d3 56 35 0c 1a 09 0a 7a c4 4e 41 fa 57 34 a9 ab 68 cb e6 be fa 1b c9 7d 04 ab fb db 45 72 3f 8a 26 2a 7f 2a 86 49 0c 78 30 13 f4 3c 56 76 fd bd 53 cb 3d f1 d0 ff 00 85 3b ed 6c 8d 82 49 f6 23 8f ce b8 67 14 de a8 de 32 76 2c c9 71 e7 67 ce 8f 9e e7 8c d4 62 d4 32 e1 0e f1 e8 0f 4f c2 81 2a c9 c8 e4 8e c6 83 1a 49 82 b9 46 1d eb 34 b9 4b dc 69 5d ac 06 70 71 d0 9c 1a 90 e0 ae 70 c3 dc f3 fa 8a 7a cd 2a a6 c9 50 48 bf 4c ff 00 3a 9a 3b 78 5d 72 11 a2 6f f6 4e 3f 43 55 a1 4a e5 11 0a 49 c0 e3 db ae 3e 94 c3 6a db 72 a7 20 f1 91 5a c2 dc ab 64 fe f4 7f ba 2a 45 82 06 62 01 c1 eb 83 ff 00 d7 ac db 48 d1 36 66 f8 9e de f2 Data Ascii: VgM9J+wCx$!mMjOrR]BOHV5zNAW4h}Er?&Ix0<VvS=;lI#g2v,qgb2OIF4Ki]pqpzPHL:;x]roN?CUJI>jr ZdEbH6f

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.3	49931	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:14 UTC	1903	OUT	GET /cms/api/am/imageFileData/RWPh04?ver=a482 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:14 UTC	2091	IN	HTTP/1.1 200 OK Last-Modified: Sun, 13 Mar 2022 05:01:14 GMT Access-Control-Allow-Origin: * X-Datacenter: northeu X-ActivityId: 140b1ded-e622-4261-8462-8d5a765d06b9 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWPh04?ver=a482 X-Source-Length: 1693776 Content-Length: 1693776 Cache-Control: public, max-age=219227 Expires: Fri, 18 Mar 2022 05:02:01 GMT Date: Tue, 15 Mar 2022 16:08:14 GMT Connection: close
2022-03-15 16:08:14 UTC	2092	IN	Data Raw: ff d8 ff e1 17 25 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 31 3a 31 31 20 30 36 3a 35 38 3a 33 32 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: %ExifMM*bj(1r2i''Adobe Photoshop 21.1 (Windows)2021:11:11 06:58:328"
2022-03-15 16:08:14 UTC	2123	IN	Data Raw: f4 5f 9f 1c f7 ff 00 3f f9 df fd 93 55 99 5b f2 98 0e 45 0e a2 ba 98 e3 90 0d 82 25 a5 f5 35 b7 65 31 cd fd 1d 2d a9 fb bd 07 7f 3b 6f ac 8f f6 af f8 06 ff 00 37 ea 7f 83 fe 67 f7 bf 9a fe 67 ff 00 01 4a d5 4f ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 57 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 30 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 04 00 01 00 01 01 00 ff e1 17 c6 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d Data Ascii: _?U[E%5e1-;o7ggJO8BIM!WAdobe PhotoshopAdobe Photoshop 20208BIMhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M
2022-03-15 16:08:14 UTC	2139	IN	Data Raw: 6c 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 37 38 37 31 39 37 32 34 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 30 3a 35 32 3a 35 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 5f 43 72 6f 70 73 5c 45 64 67 65 2d 4c 69 66 65 73 74 79 6c 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 37 30 35 34 39 32 33 35 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 30 3a 35 34 3a 30 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 Data Ascii: le_GettyImages-78719724_1080x1920.jpg saved 2016-07-26T10:52:50-07:00 File C:\Users\v-lizagh\MS\Windows10\Edge\_Crops\Edge-Lifestyle_GettyImages-170549235_1080x1920.jpg saved 2016-07-26T10:54:06-07:00 File C:\Users\v-lizagh\MS\Windows10\Ed
2022-03-15 16:08:14 UTC	2141	IN	Data Raw: 32 30 31 36 2d 30 37 2d 32 36 54 31 38 3a 30 34 3a 32 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 45 64 67 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 34 30 31 31 39 30 37 35 5f 31 30 38 30 78 31 39 32 30 44 43 38 43 41 41 44 42 34 35 38 36 42 44 31 41 46 36 42 31 32 33 37 46 43 45 39 41 35 34 41 41 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 38 3a 30 34 3a 34 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 Data Ascii: 2016-07-26T18:04:27-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Edge_GettyImages-140119075_1080x1920DC8CAADB4586BD1AF6B1237FCE9A54AA.psb saved 2016-07-26T18:04:47-07:00 File C:\Users\v-lizagh\MS\Wi
2022-03-15 16:08:14 UTC	2284	IN	Data Raw: 73 31 30 5c 53 75 72 66 61 63 65 5c 4a 75 61 6e 5c 53 75 72 66 61 63 65 50 65 6e 5c 43 72 6f 70 73 5c 53 55 52 5f 76 34 5f 50 65 6e 5f 46 61 6d 69 6c 79 5f 35 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 38 2d 33 31 54 31 33 3a 33 38 3a 35 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 34 37 43 43 43 38 41 46 35 46 33 43 46 38 38 37 33 43 34 39 32 31 33 39 45 35 41 33 38 36 45 42 2e 70 Data Ascii: s10\Surface\Juan\SurfacePen\Crops\SUR_v4_Pen_Family_5_1080x1920.jpg saved 2016-08-31T13:38:53-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1080x1920_Portrait47CCC8AF5F3CF8873C492139E5A386EB.p
2022-03-15 16:08:14 UTC	2316	IN	Data Raw: 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 30 2d 31 37 54 31 38 3a 32 37 3a 34 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 53 75 72 67 65 5c 45 64 67 65 53 75 72 67 65 5f 35 30 30 70 78 2d 32 38 31 37 32 36 38 5f 31 30 38 30 78 31 39 32 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 30 2d 31 37 54 31 38 3a 32 38 3a 31 35 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 Data Ascii: :\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2016-10-17T18:27:42-07:00 File C:\Users\v-lizagh\MS\Windows10\Edge\Surge\EdgeSurge_500px-2817268_1080x1920.psd saved 2016-10-17T18:28:15-07:00 File C:\Users\v-lizagh\App
2022-03-15 16:08:14 UTC	2404	IN	Data Raw: 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 34 54 31 35 3a 34 33 3a 35 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 34 54 31 35 3a 35 33 3a 33 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 Data Ascii: \Windows10\Lockscreen_1080x1920_Portrait.psd saved 2016-11-14T15:43:54-08:00 File Lockscreen_1080x1920_Portrait.psd opened 2016-11-14T15:53:39-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Locksc
2022-03-15 16:08:14 UTC	2420	IN	Data Raw: 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2d 4f 73 63 61 72 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 35 30 38 39 32 34 38 30 5f 31 30 38 30 78 31 39 32 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 32 30 54 31 31 3a 31 31 3a 35 30 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 69 6e 74 65 72 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 46 65 62 72 75 61 72 79 5c 4f 53 43 41 52 53 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 57 69 6e 74 65 72 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2d 4f 73 63 61 72 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 35 30 38 39 32 34 38 30 5f 31 30 38 30 78 31 Data Ascii: Entertainment-Oscars_GettyImages-150892480_1080x1920.psd saved 2017-01-20T11:11:50-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\WinterEntertainment\February\OSCARS\CHOSEN\Crops\MIT-WinterEntertainment-Oscars_GettyImages-150892480_1080x1
2022-03-15 16:08:14 UTC	2436	IN	Data Raw: 5c 4e 41 41 45 45 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 45 64 67 65 2d 4e 41 41 45 45 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 34 39 34 32 33 30 32 34 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 33 54 30 39 3a 34 30 3a 31 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 4e 41 41 45 45 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 45 64 67 65 2d 4e 41 41 45 45 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 37 36 39 38 34 30 31 37 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 33 54 30 39 3a 34 30 3a 34 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 Data Ascii: \NAAEE\CHOSEN\Crops\Edge-NAAEE_GettyImages-149423024_1080x1920.jpg saved 2017-02-23T09:40:17-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\NAAEE\CHOSEN\Crops\Edge-NAAEE_GettyImages-176984017_1080x1920.jpg saved 2017-02-23T09:40:49-08:00 F
2022-03-15 16:08:14 UTC	2603	IN	Data Raw: 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 31 34 54 31 31 3a 35 36 3a 31 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 53 70 72 69 6e 67 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 41 70 72 69 6c 5c 4d 6f 76 69 65 73 54 56 5c 43 48 4f 53 45 4e 5c 4d 49 54 2d 53 70 72 69 6e 67 45 6e 74 6d 6e 74 2d 41 70 72 69 6c 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 37 36 39 36 39 32 30 39 5f 31 30 38 30 78 31 39 32 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 31 34 54 31 32 3a 30 38 3a 34 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c Data Ascii: saved 2017-03-14T11:56:11-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\SpringEntertainment\April\MoviesTV\CHOSEN\MIT-SpringEntmnt-April_GettyImages-476969209_1080x1920.psd saved 2017-03-14T12:08:42-07:00 File C:\Users\v-lizagh\
2022-03-15 16:08:14 UTC	2698	IN	Data Raw: 37 2d 30 34 2d 31 38 54 30 38 3a 32 39 3a 33 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 31 38 54 31 30 3a 35 32 3a 35 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 45 6d 70 6f 77 65 72 69 6e 67 43 6c 61 73 73 72 6f 6f 6d 54 6f 6f 6c 73 5c 43 48 4f 53 45 4e 5c 45 6d 70 6f 77 65 72 69 6e 67 54 6f 6f 6c 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 39 34 39 39 39 30 39 34 5f 31 30 38 30 78 31 39 32 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 31 Data Ascii: 7-04-18T08:29:33-07:00 File Lockscreen_1080x1920_Portrait.psd opened 2017-04-18T10:52:56-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\EmpoweringClassroomTools\CHOSEN\EmpoweringTools_GettyImages-94999094_1080x1920.psd saved 2017-04-1
2022-03-15 16:08:14 UTC	2738	IN	Data Raw: 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 61 74 74 52 65 71 75 65 73 74 5c 4c 69 6e 6b 65 64 49 6e 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4c 69 6e 6b 65 64 49 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 33 38 35 34 35 39 37 35 5f 31 30 38 30 78 31 39 32 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 35 54 31 35 3a 32 35 3a 35 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 61 74 74 52 65 71 75 65 73 74 5c 4c 69 6e 6b 65 64 49 6e 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4c 69 6e 6b 65 64 49 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 33 38 35 34 35 39 37 35 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 Data Ascii: gh\MS\Windows10\MattRequest\LinkedIn\CHOSEN\Crops\LinkedIn_GettyImages-138545975_1080x1920.psd saved 2017-05-15T15:25:51-07:00 File C:\Users\v-lizagh\MS\Windows10\MattRequest\LinkedIn\CHOSEN\Crops\LinkedIn_GettyImages-138545975_1080x1920.jpg saved
2022-03-15 16:08:14 UTC	2841	IN	Data Raw: 2d 31 31 37 34 35 33 30 39 38 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 30 36 54 31 32 3a 35 35 3a 35 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 53 72 65 77 61 72 64 73 5c 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2d 47 65 6e 65 72 61 6c 5c 5f 43 48 4f 53 45 4e 2d 55 4b 2d 4c 6f 63 6b 73 63 72 65 65 6e 5c 43 72 6f 70 73 5c 45 64 67 65 2d 4d 53 52 65 77 61 72 64 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 35 37 37 32 31 31 37 38 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 30 36 54 31 33 3a 30 31 3a 32 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c Data Ascii: -117453098_1080x1920.jpg saved 2017-06-06T12:55:57-07:00 File C:\Users\v-lizagh\MS\Windows10\MSrewards\Entertainment-General\_CHOSEN-UK-Lockscreen\Crops\Edge-MSRewards_GettyImages-157721178_1080x1920.jpg saved 2017-06-06T13:01:27-07:00 Fil
2022-03-15 16:08:14 UTC	2921	IN	Data Raw: 6f 73 65 6e 5c 57 69 6e 64 6f 77 73 31 30 2d 54 69 70 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 30 35 31 32 39 33 37 36 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 31 33 54 31 38 3a 34 35 3a 32 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 57 69 6e 64 6f 77 73 31 30 2d 54 69 70 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 30 36 36 37 31 30 36 32 5f 31 30 38 30 78 31 39 32 30 43 39 43 30 46 32 30 45 45 46 37 41 41 33 34 46 33 38 44 35 42 44 39 30 45 45 31 39 34 38 45 Data Ascii: osen\Windows10-Tips_GettyImages-505129376_1080x1920.jpg saved 2017-07-13T18:45:24-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Windows10-Tips_GettyImages-106671062_1080x1920C9C0F20EEF7AA34F38D5BD90EE1948E
2022-03-15 16:08:14 UTC	2953	IN	Data Raw: 30 54 31 37 3a 34 38 3a 35 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 55 53 2d 4f 70 65 6e 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 49 54 2d 55 53 6f 70 65 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 34 37 32 36 37 31 37 32 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 31 30 54 31 37 3a 35 37 3a 31 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 55 53 2d 4f 70 65 6e 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 49 54 2d 55 Data Ascii: 0T17:48:50-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\US-Open\Chosen\Crops\MIT-USopen_GettyImages-147267172_1080x1920.jpg saved 2017-08-10T17:57:19-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\US-Open\Chosen\Crops\MIT-U
2022-03-15 16:08:14 UTC	3056	IN	Data Raw: 5c 43 72 6f 70 73 5c 48 65 61 6c 74 68 79 4c 69 66 65 73 74 79 6c 65 2d 4e 6f 74 65 62 6f 6f 6b 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 33 31 36 30 37 37 37 33 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 32 39 54 31 36 3a 31 32 3a 33 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 6f 72 74 61 6e 61 5c 48 65 61 6c 74 68 79 4c 69 66 65 73 74 79 6c 65 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 48 65 61 6c 74 68 79 4c 69 66 65 73 74 79 6c 65 2d 4e 6f 74 65 62 6f 6f 6b 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 39 39 31 30 31 38 32 33 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b Data Ascii: \Crops\HealthyLifestyle-Notebook_GettyImages-531607773_1080x1920.jpg saved 2017-08-29T16:12:31-07:00 File C:\Users\v-lizagh\MS\Windows10\Cortana\HealthyLifestyle\Chosen\Crops\HealthyLifestyle-Notebook_GettyImages-699101823_1080x1920.jpg saved
2022-03-15 16:08:14 UTC	3159	IN	Data Raw: 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 30 2d 32 33 54 31 38 3a 34 37 3a 32 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 45 64 67 65 47 72 6f 77 74 68 49 6d 61 67 65 73 5c 4c 6f 63 6b 32 30 31 37 5f 42 61 74 63 68 38 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4c 6f 63 6b 32 30 31 37 2d 42 38 5f 41 65 72 69 61 6c 42 65 61 63 68 46 6f 72 6d 65 6e 74 65 72 61 53 70 61 69 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 37 37 37 34 34 33 36 39 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 Data Ascii: v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2017-10-23T18:47:22-07:00 File C:\Users\v-lizagh\MS\Windows10\BingEdgeGrowthImages\Lock2017_Batch8\CHOSEN\Crops\Lock2017-B8_AerialBeachFormenteraSpain_GettyImages-477744369_1080x1920.jp
2022-03-15 16:08:14 UTC	3207	IN	Data Raw: 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 34 54 31 33 3a 31 34 3a 33 32 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 32 30 31 37 2d 42 39 5f 50 61 70 61 72 6f 61 4e 50 4e 65 77 5a 65 6c 61 6e 64 5f 35 30 30 70 78 2d 36 36 35 35 30 30 34 39 5f 31 30 38 30 78 31 39 32 30 37 42 39 34 38 34 42 38 34 44 41 37 41 44 38 38 41 35 32 45 38 36 42 44 35 42 39 38 31 39 30 38 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 34 54 31 33 3a 32 33 3a 33 31 2d 30 38 3a Data Ascii: 920.jpg saved 2017-12-04T13:14:32-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lock2017-B9_PaparoaNPNewZeland_500px-66550049_1080x19207B9484B84DA7AD88A52E86BD5B981908.psb saved 2017-12-04T13:23:31-08:
2022-03-15 16:08:14 UTC	3279	IN	Data Raw: 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 31 34 54 31 34 3a 32 31 3a 32 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 48 6f 6c 69 64 61 79 5c 48 6f 6c 69 64 61 79 32 30 31 37 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 48 6f 6c 69 64 61 79 32 30 31 37 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 33 36 38 32 33 32 37 34 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 31 34 54 31 34 3a 32 31 3a 34 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 Data Ascii: aved 2017-12-14T14:21:23-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\Holiday\Holiday2017\CHOSEN\Crops\MIT-Holiday2017_GettyImages-636823274_1080x1920.jpg saved 2017-12-14T14:21:44-08:00 File C:\Users\v-lizagh\MS\Windows10\Locks
2022-03-15 16:08:14 UTC	3462	IN	Data Raw: 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 45 43 39 39 33 34 30 42 35 30 46 37 44 35 37 32 30 43 39 36 39 44 34 32 34 33 31 34 39 36 36 37 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 32 34 54 31 36 3a 30 31 3a 31 30 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 56 61 6c 65 6e 74 69 6e 65 73 44 61 79 5c 32 30 31 38 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 Data Ascii: izagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1080x1920_PortraitEC99340B50F7D5720C969D4243149667.psb saved 2018-01-24T16:01:10-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\ValentinesDay\2018\CHOSEN\Crops\MI
2022-03-15 16:08:14 UTC	3494	IN	Data Raw: 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 32 31 54 31 36 3a 31 38 3a 32 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 45 43 39 39 33 34 30 42 35 30 46 37 44 35 37 32 30 43 39 36 39 44 34 32 34 33 31 34 39 36 36 37 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 32 31 54 31 36 3a 32 30 3a 35 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a Data Ascii: 920.jpg saved 2018-02-21T16:18:26-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1080x1920_PortraitEC99340B50F7D5720C969D4243149667.psb saved 2018-02-21T16:20:58-08:00 File C:\Users\v-liz
2022-03-15 16:08:14 UTC	3613	IN	Data Raw: 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 45 43 39 39 33 34 30 42 35 30 46 37 44 35 37 32 30 43 39 36 39 44 34 32 34 33 31 34 39 36 36 37 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 30 39 54 31 30 3a 32 31 3a 34 32 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 57 6f 6d 65 6e 73 48 69 73 74 6f 72 79 4d 6f 6e 74 68 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 53 2d 57 6f 6d 65 6e 73 48 69 73 74 6f 72 79 4d 6f 6e 74 68 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 31 38 36 38 31 35 33 39 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 30 39 54 31 30 3a 32 37 2d 30 Data Ascii: x1920_PortraitEC99340B50F7D5720C969D4243149667.psb saved 2018-03-09T10:21:42-08:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\WomensHistoryMonth\CHOSEN\Crops\MS-WomensHistoryMonth_GettyImages-518681539_1080x1920.jpg saved 2018-03-09T10:27-0
2022-03-15 16:08:14 UTC	3732	IN	Data Raw: 69 3e 30 33 37 45 45 46 43 44 32 42 44 41 41 34 44 34 35 38 37 33 39 37 39 42 46 42 33 43 36 34 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 33 38 36 36 46 41 33 31 30 38 32 44 43 35 35 30 35 42 42 31 45 45 36 35 41 38 45 32 38 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 33 38 36 43 35 45 30 46 37 45 34 30 31 42 37 34 44 38 39 31 45 42 42 35 33 41 35 39 36 43 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 33 38 43 34 42 41 42 45 39 44 46 36 46 45 35 31 46 34 41 39 44 45 34 42 43 44 35 30 46 32 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 33 39 39 35 38 31 30 33 46 42 37 34 38 38 38 43 38 43 37 43 35 43 30 36 38 41 44 44 44 44 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 33 42 Data Ascii: i>037EEFCD2BDAA4D45873979BFB3C6405</rdf:li> <rdf:li>03866FA31082DC5505BB1EE65A8E28AE</rdf:li> <rdf:li>0386C5E0F7E401B74D891EBB53A596CE</rdf:li> <rdf:li>038C4BABE9DF6FE51F4A9DE4BCD50F2E</rdf:li> <rdf:li>039958103FB74888C8C7C5C068ADDDD1</rdf:li> <rdf:li>03B
2022-03-15 16:08:14 UTC	3772	IN	Data Raw: 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 43 44 42 46 34 43 32 33 34 36 37 46 35 41 37 46 35 33 31 35 33 45 36 42 41 38 35 42 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 43 46 32 38 44 45 38 38 39 37 35 36 37 31 31 36 35 33 30 34 36 38 39 33 46 32 34 41 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 44 35 30 46 32 37 36 37 45 46 45 45 35 31 39 39 46 30 43 41 46 43 32 32 37 37 39 35 45 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 44 42 33 46 41 30 30 38 42 43 46 43 44 30 30 33 43 43 31 41 41 44 39 44 33 44 46 41 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 30 44 43 41 37 36 31 43 31 32 32 41 39 43 37 39 46 32 35 45 37 31 38 46 35 43 34 35 32 38 32 3c 2f 72 64 66 Data Ascii: </rdf:li> <rdf:li>10CDBF4C23467F5A7F53153E6BA85BB8</rdf:li> <rdf:li>10CF28DE889756711653046893F24A8D</rdf:li> <rdf:li>10D50F2767EFEE5199F0CAFC227795EC</rdf:li> <rdf:li>10DB3FA008BCFCD003CC1AAD9D3DFA7E</rdf:li> <rdf:li>10DCA761C122A9C79F25E718F5C45282</rdf
2022-03-15 16:08:14 UTC	4083	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 37 30 42 42 41 45 30 37 39 33 30 44 42 31 35 38 45 41 31 32 36 33 38 42 36 41 43 36 45 32 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 37 32 34 33 34 30 33 41 43 30 30 43 37 34 30 44 42 45 46 33 39 35 31 30 44 37 35 42 34 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 37 34 38 35 32 42 43 41 38 33 32 43 32 42 30 35 31 32 34 39 33 39 46 35 32 31 39 46 30 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 37 35 30 35 36 43 35 35 32 30 38 32 39 42 35 41 31 32 30 44 42 37 39 35 30 45 37 37 45 34 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 37 35 30 42 45 33 45 37 32 44 42 32 31 33 36 32 43 32 34 37 37 32 36 34 33 44 41 30 33 37 31 3c 2f 72 64 66 3a 6c Data Ascii: rdf:li> <rdf:li>170BBAE07930DB158EA12638B6AC6E21</rdf:li> <rdf:li>17243403AC00C740DBEF39510D75B45D</rdf:li> <rdf:li>174852BCA832C2B05124939F5219F0A9</rdf:li> <rdf:li>175056C5520829B5A120DB7950E77E4F</rdf:li> <rdf:li>1750BE3E72DB21362C24772643DA0371</rdf:l
2022-03-15 16:08:14 UTC	4099	IN	Data Raw: 39 35 35 35 41 45 37 30 32 38 43 31 32 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 35 34 39 46 39 45 44 43 42 34 38 43 39 37 30 44 35 37 38 37 36 42 32 31 42 38 35 32 44 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 35 35 30 41 38 33 42 39 44 42 45 42 43 39 33 31 44 43 33 32 33 33 38 38 35 39 30 46 36 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 35 35 31 34 32 41 31 42 33 45 44 35 32 32 42 45 39 34 34 31 45 30 35 35 32 31 43 31 41 35 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 35 36 46 37 31 35 42 43 45 30 31 37 36 45 41 43 38 32 32 41 34 35 36 38 35 33 43 39 42 41 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 35 36 46 42 32 30 44 35 42 44 39 39 35 41 37 38 38 35 31 42 31 41 Data Ascii: 9555AE7028C12F</rdf:li> <rdf:li>2549F9EDCB48C970D57876B21B852D33</rdf:li> <rdf:li>2550A83B9DBEBC931DC323388590F614</rdf:li> <rdf:li>255142A1B3ED522BE9441E05521C1A58</rdf:li> <rdf:li>256F715BCE0176EAC822A456853C9BA7</rdf:li> <rdf:li>256FB20D5BD995A78851B1A
2022-03-15 16:08:14 UTC	4115	IN	Data Raw: 38 41 45 37 44 38 41 30 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 31 33 34 35 31 44 30 38 45 45 34 36 31 37 34 45 33 37 42 32 45 39 34 35 37 33 41 31 32 35 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 31 33 44 34 39 30 35 43 34 46 44 36 30 34 32 31 35 39 35 45 43 35 44 31 35 31 37 37 45 45 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 31 34 44 44 44 36 37 37 45 45 44 37 42 43 32 36 32 36 31 35 44 32 46 30 44 41 38 39 33 35 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 31 36 33 39 38 34 45 45 30 41 30 33 34 32 38 32 41 36 46 31 34 35 37 39 31 36 36 33 44 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 31 36 46 38 34 46 30 45 44 46 46 42 39 37 34 46 35 35 32 42 31 34 33 30 36 42 33 Data Ascii: 8AE7D8A0B</rdf:li> <rdf:li>313451D08EE46174E37B2E94573A1259</rdf:li> <rdf:li>313D4905C4FD60421595EC5D15177EE2</rdf:li> <rdf:li>314DDD677EED7BC262615D2F0DA89358</rdf:li> <rdf:li>3163984EE0A034282A6F145791663D80</rdf:li> <rdf:li>316F84F0EDFFB974F552B14306B3
2022-03-15 16:08:14 UTC	4163	IN	Data Raw: 42 42 35 42 30 31 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 38 32 33 37 37 34 39 37 33 37 39 41 44 34 44 42 44 44 43 36 41 38 36 32 36 44 30 35 41 36 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 38 33 31 39 41 36 42 37 39 44 31 36 35 36 42 33 30 32 46 45 33 39 36 36 33 34 30 38 32 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 38 34 33 44 41 32 37 33 46 43 42 42 36 43 30 44 42 34 44 36 41 37 39 32 46 30 46 44 34 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 38 35 30 39 37 43 35 30 45 37 35 45 43 43 31 30 33 43 45 31 32 38 33 34 34 37 38 41 34 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 38 35 42 30 32 38 44 41 33 45 42 38 37 36 38 33 42 38 32 33 39 32 46 32 31 34 33 33 33 Data Ascii: BB5B01C</rdf:li> <rdf:li>382377497379AD4DBDDC6A8626D05A64</rdf:li> <rdf:li>38319A6B79D1656B302FE396634082A1</rdf:li> <rdf:li>3843DA273FCBB6C0DB4D6A792F0FD4AD</rdf:li> <rdf:li>385097C50E75ECC103CE12834478A47B</rdf:li> <rdf:li>385B028DA3EB87683B82392F214333
2022-03-15 16:08:14 UTC	4218	IN	Data Raw: 42 39 43 32 37 45 36 31 46 33 42 35 37 32 46 31 35 39 37 37 35 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 33 34 39 34 43 35 32 41 46 37 34 41 35 43 43 34 33 45 34 39 36 37 31 32 36 37 43 44 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 34 32 45 37 42 42 38 30 46 39 30 41 33 36 37 43 31 39 34 41 44 32 32 37 44 35 42 35 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 34 34 43 42 36 33 44 42 45 45 33 46 31 34 34 36 34 41 35 39 41 41 46 43 46 37 39 39 35 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 36 35 32 43 31 39 42 44 33 35 39 34 41 34 45 35 36 32 37 35 43 42 46 39 33 34 44 45 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 36 45 43 35 37 30 42 35 38 46 35 46 Data Ascii: B9C27E61F3B572F15977527</rdf:li> <rdf:li>453494C52AF74A5CC43E49671267CDA1</rdf:li> <rdf:li>4542E7BB80F90A367C194AD227D5B50C</rdf:li> <rdf:li>4544CB63DBEE3F14464A59AAFCF79954</rdf:li> <rdf:li>45652C19BD3594A4E56275CBF934DE81</rdf:li> <rdf:li>456EC570B58F5F
2022-03-15 16:08:14 UTC	4250	IN	Data Raw: 72 64 66 3a 6c 69 3e 35 32 35 30 30 43 38 35 38 35 35 34 31 34 37 44 45 44 30 44 30 37 33 33 35 34 30 39 43 41 39 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 35 32 45 39 41 41 33 36 39 44 43 35 46 39 35 42 45 42 37 46 44 36 46 30 36 39 42 31 45 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 35 43 44 35 33 30 43 34 31 32 31 44 34 30 33 39 32 46 39 35 43 42 30 31 36 43 33 46 43 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 36 32 35 33 34 41 46 43 38 30 35 36 46 42 44 43 37 41 45 39 36 39 33 35 30 33 37 45 46 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 36 43 45 31 41 31 45 37 37 44 36 35 43 38 32 30 45 38 30 43 43 43 34 38 36 36 46 46 38 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c Data Ascii: rdf:li>52500C858554147DED0D07335409CA9B</rdf:li> <rdf:li>5252E9AA369DC5F95BEB7FD6F069B1E3</rdf:li> <rdf:li>525CD530C4121D40392F95CB016C3FCD</rdf:li> <rdf:li>5262534AFC8056FBDC7AE96935037EFF</rdf:li> <rdf:li>526CE1A1E77D65C820E80CCC4866FF8E</rdf:li> <rdf:l
2022-03-15 16:08:14 UTC	4282	IN	Data Raw: 66 3a 6c 69 3e 35 39 31 37 38 45 43 42 44 33 42 39 37 31 35 36 44 45 34 46 42 32 32 37 39 35 39 39 33 34 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 39 33 30 31 38 44 35 41 46 42 44 42 33 41 30 37 46 46 46 31 46 43 30 46 35 32 43 30 46 39 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 39 33 31 32 34 46 35 43 44 42 39 45 34 42 45 39 34 41 35 35 32 45 46 44 43 41 35 31 42 32 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 39 34 31 33 35 39 43 38 37 46 32 30 46 30 32 42 46 33 45 46 39 37 33 33 45 37 46 33 46 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 39 35 32 45 35 41 38 43 32 34 45 45 42 46 34 30 31 33 34 46 35 45 44 31 30 36 44 42 46 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: f:li>59178ECBD3B97156DE4FB22795993433</rdf:li> <rdf:li>593018D5AFBDB3A07FFF1FC0F52C0F93</rdf:li> <rdf:li>593124F5CDB9E4BE94A552EFDCA51B25</rdf:li> <rdf:li>5941359C87F20F02BF3EF9733E7F3F5D</rdf:li> <rdf:li>5952E5A8C24EEBF40134F5ED106DBF3F</rdf:li> <rdf:li>
2022-03-15 16:08:14 UTC	4330	IN	Data Raw: 36 37 41 43 44 36 35 41 38 30 38 37 43 42 45 43 39 44 45 45 39 41 38 30 37 42 38 38 33 30 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 37 42 34 37 38 33 42 37 36 44 37 41 34 33 37 31 32 38 34 36 42 31 33 31 46 38 41 43 30 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 37 42 34 46 35 46 36 36 35 35 41 39 31 34 33 44 46 34 32 41 37 46 36 41 32 33 45 45 34 46 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 37 42 35 37 34 44 42 32 32 31 44 32 32 35 46 31 35 43 39 33 41 39 43 46 42 33 39 37 43 37 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 37 42 39 44 41 45 32 36 36 42 35 45 41 43 44 43 31 42 33 32 35 35 33 36 38 30 44 33 39 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 37 42 43 41 Data Ascii: 67ACD65A8087CBEC9DEE9A807B8830B0</rdf:li> <rdf:li>67B4783B76D7A43712846B131F8AC014</rdf:li> <rdf:li>67B4F5F6655A9143DF42A7F6A23EE4FF</rdf:li> <rdf:li>67B574DB221D225F15C93A9CFB397C7A</rdf:li> <rdf:li>67B9DAE266B5EACDC1B32553680D392C</rdf:li> <rdf:li>67BCA
2022-03-15 16:08:14 UTC	4370	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 45 32 32 31 44 34 31 35 44 45 31 30 39 41 37 45 41 41 44 37 46 30 42 42 45 31 44 33 44 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 45 43 32 34 43 41 34 35 35 38 34 42 38 39 43 44 41 45 33 36 36 42 35 33 36 42 42 30 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 45 46 37 32 39 46 45 43 38 31 32 36 43 31 41 44 43 30 34 31 38 33 36 42 37 38 32 42 38 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 46 33 30 45 36 39 30 37 36 45 34 42 35 44 46 31 33 32 36 41 41 34 37 38 45 45 32 46 36 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 35 46 37 45 39 36 31 33 42 31 44 32 46 41 31 41 34 34 35 37 32 30 45 37 46 31 37 39 42 44 41 3c 2f 72 64 66 3a 6c Data Ascii: rdf:li> <rdf:li>75E221D415DE109A7EAAD7F0BBE1D3DC</rdf:li> <rdf:li>75EC24CA45584B89CDAE366B536BB0C8</rdf:li> <rdf:li>75EF729FEC8126C1ADC041836B782B8C</rdf:li> <rdf:li>75F30E69076E4B5DF1326AA478EE2F6F</rdf:li> <rdf:li>75F7E9613B1D2FA1A445720E7F179BDA</rdf:l
2022-03-15 16:08:14 UTC	4393	IN	Data Raw: 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 43 34 41 41 44 45 37 46 41 42 45 36 45 32 32 31 34 41 36 35 37 46 34 44 38 46 39 46 46 45 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 43 34 44 46 46 34 34 45 30 31 36 30 36 45 35 30 31 39 34 44 34 39 31 36 31 44 42 32 33 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 43 36 32 36 45 38 37 34 30 32 35 46 39 34 36 42 32 34 37 36 46 39 44 42 37 33 33 41 31 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 43 37 33 36 38 35 42 39 37 35 30 45 41 46 32 35 35 44 36 45 46 42 38 39 38 30 37 38 39 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 43 39 44 34 32 45 44 43 34 35 37 34 30 35 30 43 30 33 37 44 31 39 39 31 30 42 33 39 37 32 46 3c 2f 72 64 66 3a 6c 69 3e Data Ascii: f:li> <rdf:li>7C4AADE7FABE6E2214A657F4D8F9FFEB</rdf:li> <rdf:li>7C4DFF44E01606E50194D49161DB23B0</rdf:li> <rdf:li>7C626E874025F946B2476F9DB733A10E</rdf:li> <rdf:li>7C73685B9750EAF255D6EFB8980789F9</rdf:li> <rdf:li>7C9D42EDC4574050C037D19910B3972F</rdf:li>
2022-03-15 16:08:14 UTC	4417	IN	Data Raw: 41 41 33 38 34 38 35 38 45 35 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 39 31 43 39 30 44 34 36 44 32 43 34 35 38 42 33 34 30 45 30 31 33 46 44 37 37 41 35 46 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 39 32 30 39 36 41 35 43 43 45 42 33 37 34 32 38 37 33 33 39 41 43 37 39 46 36 30 38 33 43 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 39 32 32 41 38 37 44 35 39 44 36 33 44 32 42 36 45 31 36 31 36 45 39 43 42 32 39 45 36 44 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 39 34 35 31 44 37 32 44 41 36 44 38 31 42 36 34 46 44 33 33 44 46 32 31 45 33 30 42 43 30 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 39 34 37 31 41 30 44 46 46 46 36 35 32 39 41 36 36 38 32 38 35 31 44 30 Data Ascii: AA384858E5C3</rdf:li> <rdf:li>891C90D46D2C458B340E013FD77A5F05</rdf:li> <rdf:li>892096A5CCEB374287339AC79F6083C9</rdf:li> <rdf:li>8922A87D59D63D2B6E1616E9CB29E6D1</rdf:li> <rdf:li>89451D72DA6D81B64FD33DF21E30BC06</rdf:li> <rdf:li>89471A0DFFF6529A6682851D0
2022-03-15 16:08:14 UTC	4449	IN	Data Raw: 41 30 45 45 38 43 32 43 31 41 42 41 34 38 32 32 36 33 32 42 42 36 39 36 38 36 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 44 36 41 44 44 35 32 37 44 39 38 38 32 34 46 45 46 38 46 34 45 44 31 34 32 34 35 36 41 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 44 37 36 44 44 45 32 32 32 34 41 34 33 44 34 41 31 45 36 31 43 41 36 37 36 43 46 44 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 44 41 39 43 32 36 33 39 46 42 38 34 34 42 35 31 37 34 30 42 42 30 42 39 42 30 46 39 38 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 45 33 38 42 32 46 33 41 42 36 31 45 32 36 43 33 32 38 35 46 31 46 37 39 30 38 42 34 42 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 37 45 35 42 39 43 45 38 Data Ascii: A0EE8C2C1ABA4822632BB6968660</rdf:li> <rdf:li>97D6ADD527D98824FEF8F4ED142456A2</rdf:li> <rdf:li>97D76DDE2224A43D4A1E61CA676CFD65</rdf:li> <rdf:li>97DA9C2639FB844B51740BB0B9B0F982</rdf:li> <rdf:li>97E38B2F3AB61E26C3285F1F7908B4B4</rdf:li> <rdf:li>97E5B9CE8
2022-03-15 16:08:14 UTC	4457	IN	Data Raw: 35 36 44 42 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 44 46 33 33 46 38 36 37 39 39 39 31 43 33 32 36 35 39 46 45 39 36 30 35 42 30 44 46 38 36 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 30 34 46 36 38 33 32 38 37 42 46 38 35 36 43 44 36 34 35 34 46 36 42 37 33 30 30 44 34 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 30 38 33 31 32 39 41 45 36 44 45 41 45 45 36 31 33 31 32 44 41 38 39 35 33 43 31 31 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 30 38 45 41 45 42 31 32 38 30 43 37 30 33 32 30 44 32 35 32 42 42 30 30 31 41 34 44 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 30 45 39 44 44 41 34 46 35 37 37 35 31 44 41 41 45 42 43 31 38 34 36 31 41 33 30 34 39 46 Data Ascii: 56DBF</rdf:li> <rdf:li>9DF33F8679991C32659FE9605B0DF864</rdf:li> <rdf:li>9E04F683287BF856CD6454F6B7300D42</rdf:li> <rdf:li>9E083129AE6DEAEE61312DA8953C1120</rdf:li> <rdf:li>9E08EAEB1280C70320D252BB001A4D15</rdf:li> <rdf:li>9E0E9DDA4F57751DAAEBC18461A3049F
2022-03-15 16:08:14 UTC	4489	IN	Data Raw: 46 41 45 37 45 31 39 38 46 43 32 34 37 42 39 31 41 45 43 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 42 39 33 46 33 45 31 31 32 43 42 32 33 39 42 33 30 36 34 42 34 39 39 41 42 30 44 36 35 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 42 39 42 46 46 34 36 37 34 34 38 37 44 30 33 36 44 41 35 45 34 41 35 34 31 34 36 41 31 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 42 39 44 35 44 42 32 38 43 39 30 46 37 38 43 37 45 41 36 34 42 45 44 38 39 31 34 44 30 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 42 42 31 33 38 42 36 44 30 35 36 43 37 33 44 33 41 31 34 43 36 41 33 46 31 37 30 30 44 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 42 43 33 30 42 31 39 30 32 46 41 46 43 35 31 Data Ascii: FAE7E198FC247B91AECDF</rdf:li> <rdf:li>AB93F3E112CB239B3064B499AB0D65AB</rdf:li> <rdf:li>AB9BFF4674487D036DA5E4A54146A105</rdf:li> <rdf:li>AB9D5DB28C90F78C7EA64BED8914D0B8</rdf:li> <rdf:li>ABB138B6D056C73D3A14C6A3F1700DC3</rdf:li> <rdf:li>ABC30B1902FAFC51
2022-03-15 16:08:14 UTC	4505	IN	Data Raw: 66 3a 6c 69 3e 42 38 43 43 42 45 33 42 31 34 41 43 30 45 37 45 31 31 30 31 36 42 42 45 46 42 46 43 38 42 36 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 44 43 30 41 39 34 31 34 32 38 33 45 43 46 38 31 46 45 42 36 32 43 36 30 34 44 37 36 38 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 45 30 30 39 43 34 38 36 44 39 41 36 30 46 43 35 43 37 38 30 33 37 41 41 45 44 35 37 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 45 32 35 38 46 46 45 31 31 38 35 31 35 34 39 44 38 37 45 44 43 31 44 35 36 41 36 37 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 38 45 37 36 32 32 41 31 38 46 41 45 36 41 42 46 38 45 46 37 32 42 30 42 37 38 33 35 32 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: f:li>B8CCBE3B14AC0E7E11016BBEFBFC8B6F</rdf:li> <rdf:li>B8DC0A9414283ECF81FEB62C604D768A</rdf:li> <rdf:li>B8E009C486D9A60FC5C78037AAED5795</rdf:li> <rdf:li>B8E258FFE11851549D87EDC1D56A67C5</rdf:li> <rdf:li>B8E7622A18FAE6ABF8EF72B0B783523F</rdf:li> <rdf:li>
2022-03-15 16:08:14 UTC	4513	IN	Data Raw: 6c 69 3e 42 46 41 45 31 36 39 33 46 41 30 35 44 41 37 42 37 38 42 33 38 37 32 42 45 42 31 34 38 45 35 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 46 42 31 32 39 46 38 37 46 45 30 44 46 44 41 30 30 46 44 33 30 39 41 32 43 39 46 37 32 38 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 46 42 36 38 43 41 34 42 44 30 42 46 46 44 43 42 43 32 43 30 32 32 41 38 34 39 45 41 45 36 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 46 42 41 37 42 42 44 42 31 39 43 38 39 36 31 42 34 31 38 46 43 38 39 42 30 45 38 32 37 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 46 43 35 36 32 43 37 42 30 44 42 46 39 38 44 31 39 45 31 45 39 31 39 43 35 42 44 42 31 37 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 46 Data Ascii: li>BFAE1693FA05DA7B78B3872BEB148E50</rdf:li> <rdf:li>BFB129F87FE0DFDA00FD309A2C9F728E</rdf:li> <rdf:li>BFB68CA4BD0BFFDCBC2C022A849EAE6A</rdf:li> <rdf:li>BFBA7BBDB19C8961B418FC89B0E8272A</rdf:li> <rdf:li>BFC562C7B0DBF98D19E1E919C5BDB171</rdf:li> <rdf:li>BF
2022-03-15 16:08:14 UTC	4514	IN	Data Raw: 6c 69 3e 43 30 39 44 37 35 46 44 30 37 31 45 30 43 44 43 41 32 31 38 45 31 38 41 34 42 44 30 42 35 43 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 41 38 35 34 36 41 38 30 37 44 41 43 41 43 43 35 46 36 44 36 45 41 34 42 38 42 46 34 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 41 41 35 33 38 35 31 37 37 35 43 42 46 31 46 33 31 39 42 46 41 30 36 33 31 46 34 36 36 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 42 31 44 33 42 34 45 45 38 35 31 41 35 36 36 44 46 30 37 43 38 42 41 42 31 46 35 44 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 42 41 46 41 44 36 36 33 31 44 33 42 39 42 36 46 42 34 35 43 43 46 37 34 41 33 36 37 34 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 Data Ascii: li>C09D75FD071E0CDCA218E18A4BD0B5CF</rdf:li> <rdf:li>C0A8546A807DACACC5F6D6EA4B8BF412</rdf:li> <rdf:li>C0AA53851775CBF1F319BFA0631F466A</rdf:li> <rdf:li>C0B1D3B4EE851A566DF07C8BAB1F5DE5</rdf:li> <rdf:li>C0BAFAD6631D3B9B6FB45CCF74A36743</rdf:li> <rdf:li>C0
2022-03-15 16:08:14 UTC	4530	IN	Data Raw: 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 44 42 42 32 30 30 36 39 45 36 34 41 43 42 35 35 37 44 35 39 41 46 41 31 39 35 34 39 37 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 44 42 42 41 46 32 30 42 37 41 35 44 43 32 39 34 37 45 36 36 39 32 45 35 35 46 34 42 43 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 44 42 46 41 39 41 32 35 39 45 42 45 38 41 42 36 45 41 46 39 38 39 30 37 35 37 32 44 30 34 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 44 43 43 37 46 36 45 43 37 35 31 31 31 42 35 35 35 31 33 37 39 44 45 45 31 32 41 34 45 39 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 44 44 30 36 41 33 43 45 32 46 39 45 30 35 31 39 42 43 36 31 41 35 38 37 33 37 31 45 42 39 38 3c 2f 72 64 Data Ascii: B</rdf:li> <rdf:li>CDBB20069E64ACB557D59AFA1954978D</rdf:li> <rdf:li>CDBBAF20B7A5DC2947E6692E55F4BC5E</rdf:li> <rdf:li>CDBFA9A259EBE8AB6EAF98907572D043</rdf:li> <rdf:li>CDCC7F6EC75111B5551379DEE12A4E99</rdf:li> <rdf:li>CDD06A3CE2F9E0519BC61A587371EB98</rd
2022-03-15 16:08:14 UTC	4546	IN	Data Raw: 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 42 37 35 46 32 35 44 34 39 31 42 34 43 32 45 43 34 43 33 33 43 44 37 42 36 33 45 35 31 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 42 38 41 42 43 31 31 42 30 44 38 32 33 34 34 37 34 33 37 31 39 30 46 41 41 38 42 41 43 36 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 42 39 30 39 33 33 39 35 33 39 39 45 42 38 38 37 39 33 39 35 45 31 32 41 31 45 37 32 35 31 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 42 39 37 39 39 37 37 42 45 45 32 46 30 31 41 38 41 33 39 35 37 32 39 43 41 35 30 43 33 43 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 42 41 41 31 37 31 37 46 34 37 41 39 41 31 34 43 33 44 42 39 39 36 34 39 30 43 38 44 43 34 32 3c 2f 72 64 66 3a 6c 69 3e Data Ascii: f:li> <rdf:li>DB75F25D491B4C2EC4C33CD7B63E51A8</rdf:li> <rdf:li>DB8ABC11B0D823447437190FAA8BAC67</rdf:li> <rdf:li>DB9093395399EB8879395E12A1E7251E</rdf:li> <rdf:li>DB979977BEE2F01A8A395729CA50C3C7</rdf:li> <rdf:li>DBAA1717F47A9A14C3DB996490C8DC42</rdf:li>
2022-03-15 16:08:14 UTC	4553	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 31 35 34 39 41 43 37 41 36 45 41 34 41 45 38 43 43 45 41 38 44 34 44 43 41 42 44 42 42 45 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 31 36 32 45 39 30 45 36 36 30 31 44 30 46 36 41 38 36 42 45 43 39 42 44 30 34 45 44 43 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 31 36 43 31 33 44 30 43 32 33 32 34 45 42 41 36 38 39 39 31 43 33 35 43 38 43 36 30 32 39 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 31 36 45 31 43 44 39 44 43 43 39 30 41 35 46 44 46 34 35 30 31 37 38 30 30 46 41 46 34 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 31 37 35 36 39 46 42 41 45 30 39 33 44 45 42 43 41 31 39 45 37 30 31 41 44 45 31 31 41 44 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c Data Ascii: li> <rdf:li>E1549AC7A6EA4AE8CCEA8D4DCABDBBEB</rdf:li> <rdf:li>E162E90E6601D0F6A86BEC9BD04EDCF5</rdf:li> <rdf:li>E16C13D0C2324EBA68991C35C8C6029C</rdf:li> <rdf:li>E16E1CD9DCC90A5FDF45017800FAF415</rdf:li> <rdf:li>E17569FBAE093DEBCA19E701ADE11AD7</rdf:li> <
2022-03-15 16:08:14 UTC	4569	IN	Data Raw: 45 34 42 37 36 32 45 38 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 44 42 41 32 38 31 31 38 45 34 46 35 34 33 36 38 46 31 41 36 34 46 32 36 37 41 39 38 35 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 44 42 45 34 38 31 46 33 43 37 34 31 31 45 32 33 44 32 46 42 33 42 33 34 38 43 46 33 43 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 44 43 38 31 44 42 33 31 35 33 37 44 34 41 46 32 34 38 38 41 38 39 35 37 37 42 39 46 45 37 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 44 43 45 46 39 46 32 42 31 38 33 46 36 43 32 35 32 37 34 37 45 43 44 45 42 34 32 33 34 39 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 44 44 33 32 34 36 41 30 43 41 38 30 39 42 37 46 35 33 32 46 31 45 34 30 41 34 Data Ascii: E4B762E8A5</rdf:li> <rdf:li>EDBA28118E4F54368F1A64F267A98560</rdf:li> <rdf:li>EDBE481F3C7411E23D2FB3B348CF3CA6</rdf:li> <rdf:li>EDC81DB31537D4AF2488A89577B9FE76</rdf:li> <rdf:li>EDCEF9F2B183F6C252747ECDEB423498</rdf:li> <rdf:li>EDD3246A0CA809B7F532F1E40A4
2022-03-15 16:08:14 UTC	4585	IN	Data Raw: 35 45 38 35 44 39 35 38 30 45 33 32 44 30 34 30 46 46 32 38 37 30 36 44 35 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 41 30 35 31 33 36 37 32 36 31 35 34 30 41 33 39 44 45 38 37 31 30 31 36 42 44 33 37 42 34 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 41 31 33 38 30 39 35 41 33 35 39 36 44 44 43 43 34 38 39 31 45 30 34 44 31 42 46 44 36 36 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 41 31 43 43 37 34 42 44 34 32 37 35 34 31 46 32 31 31 36 37 39 46 45 46 37 35 41 44 34 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 41 33 31 46 45 32 37 38 39 46 35 36 44 36 36 32 37 30 34 42 34 32 32 44 41 35 37 36 46 33 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 41 33 33 35 30 37 44 36 31 43 Data Ascii: 5E85D9580E32D040FF28706D53</rdf:li> <rdf:li>FA051367261540A39DE871016BD37B4A</rdf:li> <rdf:li>FA138095A3596DDCC4891E04D1BFD66C</rdf:li> <rdf:li>FA1CC74BD427541F211679FEF75AD496</rdf:li> <rdf:li>FA31FE2789F56D662704B422DA576F38</rdf:li> <rdf:li>FA33507D61C
2022-03-15 16:08:14 UTC	4592	IN	Data Raw: 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 30 66 62 61 31 64 61 2d 32 61 38 34 2d 31 31 65 36 2d 62 33 66 30 2d 63 35 33 63 32 38 35 63 33 62 62 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 31 34 32 31 33 36 30 2d 64 33 37 37 2d 31 31 37 38 2d 61 32 30 64 2d 61 66 32 65 66 39 63 31 39 37 64 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 31 35 38 65 63 33 30 2d 64 39 36 39 2d 31 31 64 39 2d 61 33 65 33 2d 64 33 66 65 33 35 65 39 30 66 62 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 31 Data Ascii: li>adobe:docid:photoshop:00fba1da-2a84-11e6-b3f0-c53c285c3bb0</rdf:li> <rdf:li>adobe:docid:photoshop:01421360-d377-1178-a20d-af2ef9c197df</rdf:li> <rdf:li>adobe:docid:photoshop:0158ec30-d969-11d9-a3e3-d3fe35e90fbd</rdf:li> <rdf:li>adobe:docid:photoshop:01
2022-03-15 16:08:14 UTC	4608	IN	Data Raw: 37 38 2d 61 37 33 36 2d 39 66 35 31 37 33 63 37 32 36 32 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 36 64 39 64 38 39 35 2d 37 61 66 36 2d 31 31 64 61 2d 62 30 36 33 2d 61 35 30 38 37 61 34 35 31 61 65 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 36 65 64 34 32 61 32 2d 62 36 62 30 2d 31 31 65 31 2d 62 36 61 36 2d 64 32 65 36 37 34 30 63 33 37 61 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 37 31 61 37 65 35 63 2d 37 61 62 36 2d 31 31 37 38 2d 62 62 35 34 2d 61 30 61 34 65 33 31 62 61 35 39 61 3c 2f 72 64 66 3a 6c Data Ascii: 78-a736-9f5173c7262d</rdf:li> <rdf:li>adobe:docid:photoshop:36d9d895-7af6-11da-b063-a5087a451ae2</rdf:li> <rdf:li>adobe:docid:photoshop:36ed42a2-b6b0-11e1-b6a6-d2e6740c37af</rdf:li> <rdf:li>adobe:docid:photoshop:371a7e5c-7ab6-1178-bb54-a0a4e31ba59a</rdf:l
2022-03-15 16:08:14 UTC	4624	IN	Data Raw: 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 34 35 30 34 39 39 36 2d 35 61 65 35 2d 31 31 64 65 2d 39 34 32 30 2d 38 62 39 39 30 38 63 35 35 65 62 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 34 38 36 66 64 33 31 2d 39 62 38 35 2d 31 31 65 36 2d 61 39 66 66 2d 38 64 36 36 35 36 65 64 37 65 61 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 34 63 35 61 37 31 36 2d 66 63 37 37 2d 64 39 34 65 2d 62 35 35 61 2d 64 61 37 61 31 39 39 35 65 36 34 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 35 36 66 35 34 30 32 2d 64 63 Data Ascii: docid:photoshop:64504996-5ae5-11de-9420-8b9908c55eb1</rdf:li> <rdf:li>adobe:docid:photoshop:6486fd31-9b85-11e6-a9ff-8d6656ed7ea9</rdf:li> <rdf:li>adobe:docid:photoshop:64c5a716-fc77-d94e-b55a-da7a1995e645</rdf:li> <rdf:li>adobe:docid:photoshop:656f5402-dc
2022-03-15 16:08:14 UTC	4632	IN	Data Raw: 31 38 62 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 38 65 34 62 63 63 33 2d 65 64 33 38 2d 31 31 64 38 2d 39 30 30 63 2d 65 62 30 62 38 65 38 38 33 35 65 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 39 30 37 31 63 61 32 2d 65 34 39 63 2d 31 31 65 37 2d 61 30 33 39 2d 61 39 65 36 64 37 32 38 37 35 38 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 39 31 31 31 39 33 36 2d 34 64 38 31 2d 31 31 65 30 2d 61 63 30 37 2d 64 35 37 63 66 63 33 36 33 64 34 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 Data Ascii: 18b8</rdf:li> <rdf:li>adobe:docid:photoshop:78e4bcc3-ed38-11d8-900c-eb0b8e8835e2</rdf:li> <rdf:li>adobe:docid:photoshop:79071ca2-e49c-11e7-a039-a9e6d728758a</rdf:li> <rdf:li>adobe:docid:photoshop:79111936-4d81-11e0-ac07-d57cfc363d45</rdf:li> <rdf:li>adobe
2022-03-15 16:08:14 UTC	4648	IN	Data Raw: 61 62 62 64 35 38 35 32 2d 63 62 66 33 2d 31 31 65 37 2d 61 61 33 39 2d 62 34 37 38 64 32 62 64 39 34 39 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 62 64 31 32 37 63 39 2d 38 34 31 33 2d 31 31 37 62 2d 62 37 36 66 2d 62 63 35 62 38 63 31 34 62 66 39 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 63 33 36 32 61 62 32 2d 30 33 63 64 2d 31 31 65 36 2d 61 34 32 62 2d 38 39 39 65 63 30 31 30 38 66 36 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 63 37 30 30 33 37 34 2d 38 65 31 62 2d 31 31 37 37 2d 61 38 33 63 2d 63 31 62 Data Ascii: abbd5852-cbf3-11e7-aa39-b478d2bd949e</rdf:li> <rdf:li>adobe:docid:photoshop:abd127c9-8413-117b-b76f-bc5b8c14bf9b</rdf:li> <rdf:li>adobe:docid:photoshop:ac362ab2-03cd-11e6-a42b-899ec0108f6e</rdf:li> <rdf:li>adobe:docid:photoshop:ac700374-8e1b-1177-a83c-c1b
2022-03-15 16:08:14 UTC	4664	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 31 63 35 32 38 37 30 2d 34 61 39 65 2d 31 31 37 38 2d 61 32 34 63 2d 66 31 30 32 63 35 38 30 64 64 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 32 33 31 31 65 31 32 2d 38 65 64 30 2d 32 30 34 38 2d 62 39 35 62 2d 38 33 39 66 63 33 64 30 36 65 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 32 36 32 63 62 61 63 2d 38 30 36 37 2d 31 31 64 61 2d 61 35 35 64 2d 39 39 65 30 33 36 65 64 31 32 32 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 Data Ascii: :li> <rdf:li>adobe:docid:photoshop:e1c52870-4a9e-1178-a24c-f102c580dd27</rdf:li> <rdf:li>adobe:docid:photoshop:e2311e12-8ed0-2048-b95b-839fc3d06e00</rdf:li> <rdf:li>adobe:docid:photoshop:e262cbac-8067-11da-a55d-99e036ed1220</rdf:li> <rdf:li>adobe:docid:ph
2022-03-15 16:08:14 UTC	4672	IN	Data Raw: 2d 31 31 65 36 2d 62 65 62 35 2d 64 65 39 61 62 62 62 65 32 64 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 38 30 34 37 37 37 32 2d 39 65 63 38 2d 31 31 64 38 2d 39 34 38 65 2d 39 32 35 33 34 62 35 32 38 61 64 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 38 38 37 64 30 65 35 2d 37 64 35 63 2d 31 31 65 31 2d 38 33 38 38 2d 38 32 30 37 36 36 66 61 63 32 61 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 38 38 37 64 30 65 61 2d 37 64 35 63 2d 31 31 65 31 2d 38 33 38 38 2d 38 32 30 37 36 36 66 61 63 32 61 38 3c 2f 72 64 Data Ascii: -11e6-beb5-de9abbbe2d87</rdf:li> <rdf:li>adobe:docid:photoshop:f8047772-9ec8-11d8-948e-92534b528ad7</rdf:li> <rdf:li>adobe:docid:photoshop:f887d0e5-7d5c-11e1-8388-820766fac2a8</rdf:li> <rdf:li>adobe:docid:photoshop:f887d0ea-7d5c-11e1-8388-820766fac2a8</rd
2022-03-15 16:08:14 UTC	4688	IN	Data Raw: 75 69 64 3a 33 30 33 32 33 38 42 30 38 46 34 42 44 45 31 31 41 31 41 35 41 34 43 33 31 36 31 32 30 33 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 30 33 41 32 36 44 41 44 32 30 45 31 31 44 42 39 41 43 42 46 46 33 36 31 38 45 44 46 36 34 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 30 33 44 45 33 35 38 36 45 43 45 44 46 31 31 41 37 36 42 39 32 34 33 36 42 33 42 44 39 42 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 30 34 31 38 39 34 31 33 41 36 44 44 44 31 31 39 41 46 42 46 38 30 43 30 44 31 32 42 42 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 30 35 41 34 34 35 34 35 37 32 41 45 30 31 31 39 46 41 45 42 41 31 42 46 37 38 31 43 30 34 Data Ascii: uid:303238B08F4BDE11A1A5A4C316120366</rdf:li> <rdf:li>uuid:303A26DAD20E11DB9ACBFF3618EDF64C</rdf:li> <rdf:li>uuid:303DE3586ECEDF11A76B92436B3BD9BD</rdf:li> <rdf:li>uuid:304189413A6DDD119AFBF80C0D12BBC3</rdf:li> <rdf:li>uuid:305A4454572AE0119FAEBA1BF781C04
2022-03-15 16:08:14 UTC	5435	IN	Data Raw: 44 46 35 32 43 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 33 45 36 30 41 46 36 39 44 43 45 44 44 31 31 38 41 37 31 42 43 38 33 43 39 46 41 45 46 34 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 34 33 43 32 39 37 33 45 34 34 33 31 31 44 46 39 37 45 39 44 36 41 37 32 44 35 38 31 34 38 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 34 36 42 30 31 46 31 31 31 44 30 45 30 31 31 38 46 43 39 44 42 46 33 33 36 44 41 41 31 45 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 34 43 46 44 38 35 38 32 33 33 31 45 30 31 31 39 37 36 38 44 45 32 46 35 32 31 31 32 46 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 35 31 36 39 Data Ascii: DF52C3B</rdf:li> <rdf:li>uuid:63E60AF69DCEDD118A71BC83C9FAEF40</rdf:li> <rdf:li>uuid:643C2973E44311DF97E9D6A72D58148F</rdf:li> <rdf:li>uuid:646B01F111D0E0118FC9DBF336DAA1E2</rdf:li> <rdf:li>uuid:64CFD8582331E0119768DE2F52112F6B</rdf:li> <rdf:li>uuid:65169
2022-03-15 16:08:14 UTC	5443	IN	Data Raw: 69 3e 75 75 69 64 3a 37 43 32 30 37 36 41 44 41 36 37 38 45 30 31 31 39 44 44 42 45 46 37 33 36 35 42 36 35 45 39 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 43 34 39 46 43 37 32 44 45 32 41 44 41 31 31 42 33 35 38 43 34 33 46 46 41 34 45 35 43 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 43 39 37 38 37 42 45 43 39 36 39 31 31 44 46 38 35 33 43 44 42 44 30 36 36 37 34 30 39 39 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 43 42 32 34 38 31 37 46 35 39 39 45 30 31 31 38 44 31 46 44 39 41 35 31 33 32 44 42 41 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 43 43 32 31 36 34 34 43 46 35 43 45 32 31 31 39 33 30 42 42 38 37 32 35 31 43 32 Data Ascii: i>uuid:7C2076ADA678E0119DDBEF7365B65E94</rdf:li> <rdf:li>uuid:7C49FC72DE2ADA11B358C43FFA4E5CAD</rdf:li> <rdf:li>uuid:7C9787BEC96911DF853CDBD066740998</rdf:li> <rdf:li>uuid:7CB24817F599E0118D1FD9A5132DBA14</rdf:li> <rdf:li>uuid:7CC21644CF5CE211930BB87251C2
2022-03-15 16:08:14 UTC	5459	IN	Data Raw: 41 41 34 38 37 41 46 38 44 44 31 31 42 37 46 36 42 37 35 34 46 46 32 35 41 36 30 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 46 46 34 45 39 37 34 46 45 30 45 31 31 44 42 39 33 31 32 42 38 33 44 33 35 42 37 32 37 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 30 31 31 32 41 41 37 31 46 43 43 45 30 31 31 42 33 46 45 44 32 34 38 33 31 38 34 38 46 35 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 30 33 32 44 45 46 41 33 39 42 34 44 45 31 31 42 41 35 30 42 30 44 39 37 36 31 39 44 30 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 30 33 36 45 45 39 31 32 42 43 44 44 46 31 31 42 38 44 31 43 37 42 33 37 46 33 43 44 33 35 33 3c 2f 72 64 66 3a 6c Data Ascii: AA487AF8DD11B7F6B754FF25A606</rdf:li> <rdf:li>uuid:AFF4E974FE0E11DB9312B83D35B72717</rdf:li> <rdf:li>uuid:B0112AA71FCCE011B3FED24831848F59</rdf:li> <rdf:li>uuid:B032DEFA39B4DE11BA50B0D97619D030</rdf:li> <rdf:li>uuid:B036EE912BCDDF11B8D1C7B37F3CD353</rdf:l
2022-03-15 16:08:14 UTC	5475	IN	Data Raw: 69 64 3a 45 45 43 33 37 38 37 33 41 44 45 31 44 45 31 31 41 44 45 34 45 42 46 39 37 35 45 32 37 30 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 46 31 34 30 34 37 44 36 36 30 30 45 30 31 31 39 45 39 38 39 42 45 31 43 34 36 43 44 46 35 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 46 32 34 33 34 31 33 46 36 42 38 45 30 31 31 41 34 37 37 46 42 42 37 41 32 34 30 37 45 42 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 46 35 34 33 45 46 41 46 38 32 38 45 34 31 31 41 34 31 37 43 39 43 46 44 43 44 39 46 33 30 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 46 37 32 30 46 42 35 45 45 35 31 31 31 44 46 38 46 36 45 43 46 32 35 34 45 34 44 39 43 35 44 Data Ascii: id:EEC37873ADE1DE11ADE4EBF975E27012</rdf:li> <rdf:li>uuid:EF14047D6600E0119E989BE1C46CDF5E</rdf:li> <rdf:li>uuid:EF243413F6B8E011A477FBB7A2407EB2</rdf:li> <rdf:li>uuid:EF543EFAF828E411A417C9CFDCD9F30A</rdf:li> <rdf:li>uuid:EF720FB5EE5111DF8F6ECF254E4D9C5D
2022-03-15 16:08:14 UTC	5483	IN	Data Raw: 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 45 32 43 43 44 44 33 36 43 30 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 31 43 39 45 30 35 36 33 42 39 34 32 38 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 32 32 41 41 37 41 33 31 39 31 35 30 39 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 32 32 41 44 32 38 41 36 31 33 31 39 42 41 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 Data Ascii: :li>xmp.did:01801174072068118083E2CCDD36C022</rdf:li> <rdf:li>xmp.did:018011740720681181C9E0563B9428A1</rdf:li> <rdf:li>xmp.did:0180117407206811822AA7A319150968</rdf:li> <rdf:li>xmp.did:0180117407206811822AD28A61319BAF</rdf:li> <rdf:li>xmp.did:01801174072
2022-03-15 16:08:14 UTC	5499	IN	Data Raw: 78 6d 70 2e 64 69 64 3a 30 33 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 43 31 34 42 39 39 35 30 45 36 44 39 32 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 33 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 43 31 34 45 39 44 37 38 37 34 31 35 45 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 33 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 45 32 42 39 41 30 41 35 39 33 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 33 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 45 35 43 38 43 43 42 34 42 41 36 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 33 38 30 31 31 37 34 30 37 32 30 36 38 31 Data Ascii: xmp.did:03801174072068118C14B9950E6D9222</rdf:li> <rdf:li>xmp.did:03801174072068118C14E9D787415E48</rdf:li> <rdf:li>xmp.did:03801174072068118DBBE2B9A0A59392</rdf:li> <rdf:li>xmp.did:03801174072068118DBBE5C8CCB4BA6C</rdf:li> <rdf:li>xmp.did:038011740720681
2022-03-15 16:08:14 UTC	5515	IN	Data Raw: 31 38 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 42 45 36 32 43 43 35 34 30 36 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 44 38 30 41 34 39 42 41 35 37 32 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 44 41 34 42 44 38 45 31 45 44 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 45 32 43 43 33 34 43 34 36 32 45 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 Data Ascii: 183A</rdf:li> <rdf:li>xmp.did:08801174072068118083BE62CC540672</rdf:li> <rdf:li>xmp.did:08801174072068118083D80A49BA572B</rdf:li> <rdf:li>xmp.did:08801174072068118083DA4BD8E1EDE5</rdf:li> <rdf:li>xmp.did:08801174072068118083E2CC34C462E8</rdf:li> <rdf:li>x
2022-03-15 16:08:14 UTC	5522	IN	Data Raw: 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 42 46 46 38 34 46 38 36 36 46 46 44 45 31 31 38 43 42 42 39 35 44 42 30 37 35 30 39 45 39 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 43 31 38 45 30 35 36 42 38 36 32 31 31 45 30 39 37 31 34 38 37 32 43 38 32 32 44 41 35 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 43 32 42 30 32 32 36 30 38 32 30 36 38 31 31 42 34 42 43 43 32 41 38 45 42 43 37 38 31 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 43 36 35 42 46 39 41 45 34 36 43 31 31 44 46 41 35 36 31 46 41 36 31 37 42 43 41 32 35 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 43 37 31 42 35 42 37 30 42 32 30 Data Ascii: li>xmp.did:0BFF84F866FFDE118CBB95DB07509E9F</rdf:li> <rdf:li>xmp.did:0C18E056B86211E09714872C822DA56B</rdf:li> <rdf:li>xmp.did:0C2B022608206811B4BCC2A8EBC78135</rdf:li> <rdf:li>xmp.did:0C65BF9AE46C11DFA561FA617BCA2565</rdf:li> <rdf:li>xmp.did:0C71B5B70B20
2022-03-15 16:08:14 UTC	5538	IN	Data Raw: 36 45 30 31 31 39 44 33 35 42 38 35 42 37 45 32 45 39 45 45 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 44 32 35 32 35 35 44 33 32 32 30 36 38 31 31 39 39 34 43 44 31 30 31 31 42 33 31 33 31 33 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 44 33 44 37 36 34 37 42 43 32 30 36 38 31 31 41 38 39 39 41 43 30 41 39 39 38 35 31 34 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 44 35 34 31 39 30 31 44 46 34 42 45 30 31 31 42 33 41 32 42 38 45 39 32 34 39 46 31 42 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 44 36 38 42 39 34 31 42 35 32 35 36 38 31 31 38 32 32 41 46 44 38 45 36 43 42 44 39 38 43 38 3c 2f Data Ascii: 6E0119D35B85B7E2E9EE3</rdf:li> <rdf:li>xmp.did:1D25255D32206811994CD1011B31313A</rdf:li> <rdf:li>xmp.did:1D3D7647BC206811A899AC0A99851472</rdf:li> <rdf:li>xmp.did:1D541901DF4BE011B3A2B8E9249F1B48</rdf:li> <rdf:li>xmp.did:1D68B941B5256811822AFD8E6CBD98C8</
2022-03-15 16:08:14 UTC	5554	IN	Data Raw: 36 38 46 38 30 37 32 45 30 31 31 41 31 36 39 39 38 45 45 39 32 36 31 45 44 36 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 43 36 46 30 30 30 34 43 45 32 30 36 38 31 31 41 42 30 38 39 44 36 36 31 42 42 31 35 37 45 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 43 37 36 37 37 44 42 38 34 32 45 45 30 31 31 38 32 44 37 45 36 37 38 41 37 36 45 32 32 38 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 43 37 36 42 39 36 35 31 43 32 30 36 38 31 31 38 44 42 42 46 32 34 31 43 45 34 46 37 37 34 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 43 38 31 39 36 42 38 33 34 32 30 36 38 31 31 38 30 38 33 46 39 44 33 44 31 30 32 Data Ascii: 68F8072E011A16998EE9261ED64</rdf:li> <rdf:li>xmp.did:2C6F0004CE206811AB089D661BB157E8</rdf:li> <rdf:li>xmp.did:2C7677DB842EE01182D7E678A76E228F</rdf:li> <rdf:li>xmp.did:2C76B9651C2068118DBBF241CE4F774B</rdf:li> <rdf:li>xmp.did:2C8196B8342068118083F9D3D102
2022-03-15 16:08:15 UTC	6552	IN	Data Raw: 38 38 46 36 46 45 46 46 30 45 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 32 42 43 43 33 37 31 36 41 34 33 45 30 31 31 42 34 35 42 41 42 44 41 43 37 34 38 43 46 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 32 44 32 38 38 31 42 39 45 46 35 45 31 31 31 41 46 37 46 38 38 38 34 31 45 33 34 41 43 44 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 32 44 38 36 38 38 41 35 41 32 30 36 38 31 31 38 30 38 33 42 38 42 46 36 43 39 43 45 35 42 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 32 44 39 30 41 34 45 35 42 32 34 45 33 31 31 38 31 33 36 45 33 33 34 32 46 37 37 35 44 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 Data Ascii: 88F6FEFF0E7</rdf:li> <rdf:li>xmp.did:32BCC3716A43E011B45BABDAC748CF02</rdf:li> <rdf:li>xmp.did:32D2881B9EF5E111AF7F88841E34ACD8</rdf:li> <rdf:li>xmp.did:32D8688A5A2068118083B8BF6C9CE5B1</rdf:li> <rdf:li>xmp.did:32D90A4E5B24E3118136E3342F775D22</rdf:li> <r
2022-03-15 16:08:15 UTC	6568	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 30 42 42 35 42 45 35 31 39 32 30 36 38 31 31 38 43 31 34 42 38 37 30 37 44 35 37 30 41 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 30 42 45 32 37 39 32 46 41 38 39 31 31 44 46 38 32 35 43 46 43 32 42 35 38 39 31 44 30 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 30 43 39 33 44 36 41 32 39 32 30 36 38 31 31 38 44 42 42 38 42 31 34 32 36 46 37 37 32 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 30 44 30 46 35 37 33 39 43 32 30 36 38 31 31 41 37 42 41 39 32 42 38 33 35 35 42 44 41 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 30 45 31 Data Ascii: i> <rdf:li>xmp.did:40BB5BE5192068118C14B8707D570A5C</rdf:li> <rdf:li>xmp.did:40BE2792FA8911DF825CFC2B5891D016</rdf:li> <rdf:li>xmp.did:40C93D6A292068118DBB8B1426F772AD</rdf:li> <rdf:li>xmp.did:40D0F5739C206811A7BA92B8355BDA16</rdf:li> <rdf:li>xmp.did:40E1
2022-03-15 16:08:15 UTC	6584	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 30 44 43 32 44 42 33 42 44 43 36 44 46 31 31 38 34 30 37 45 36 31 35 35 41 44 38 43 41 31 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 30 45 41 34 30 46 32 35 31 32 30 36 38 31 31 38 44 42 42 42 34 36 39 35 30 34 41 39 42 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 30 46 39 35 42 31 45 30 42 32 30 36 38 31 31 38 41 36 44 43 36 33 38 46 39 46 43 39 35 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 30 63 30 37 33 62 30 2d 38 66 62 32 2d 34 34 63 32 2d 38 65 31 63 2d 37 63 34 62 37 61 30 61 62 37 32 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 30 63 Data Ascii: <rdf:li>xmp.did:50DC2DB3BDC6DF118407E6155AD8CA1A</rdf:li> <rdf:li>xmp.did:50EA40F2512068118DBBB469504A9B34</rdf:li> <rdf:li>xmp.did:50F95B1E0B2068118A6DC638F9FC95EE</rdf:li> <rdf:li>xmp.did:50c073b0-8fb2-44c2-8e1c-7c4b7a0ab726</rdf:li> <rdf:li>xmp.did:50c
2022-03-15 16:08:15 UTC	6592	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 37 30 65 66 63 38 33 2d 66 39 63 31 2d 34 39 36 32 2d 38 33 39 64 2d 62 32 39 30 66 30 39 62 61 32 62 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 37 33 36 30 64 30 61 2d 39 39 32 35 2d 34 65 61 34 2d 61 66 64 35 2d 66 30 61 39 66 64 65 31 32 34 37 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 37 34 44 37 36 34 30 43 33 32 34 36 38 31 31 38 46 36 32 44 37 33 32 32 46 41 38 31 36 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 37 35 37 65 39 38 35 2d 31 31 66 33 2d 62 39 34 62 2d 38 38 33 30 2d 66 61 65 39 64 30 64 63 32 61 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 Data Ascii: <rdf:li>xmp.did:570efc83-f9c1-4962-839d-b290f09ba2be</rdf:li> <rdf:li>xmp.did:57360d0a-9925-4ea4-afd5-f0a9fde1247f</rdf:li> <rdf:li>xmp.did:574D7640C32468118F62D7322FA81655</rdf:li> <rdf:li>xmp.did:5757e985-11f3-b94b-8830-fae9d0dc2a87</rdf:li> <rdf:li>xmp
2022-03-15 16:08:15 UTC	6608	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 37 31 37 37 38 61 31 2d 38 32 34 33 2d 34 30 32 64 2d 39 35 30 39 2d 30 39 32 38 32 65 35 31 38 35 33 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 37 33 36 37 32 33 43 34 44 37 35 31 31 45 30 38 42 35 35 39 37 36 44 38 35 33 30 35 34 33 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 37 35 33 39 41 34 31 35 39 42 39 44 44 31 31 39 38 38 35 38 31 33 31 38 46 31 37 38 43 34 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 37 35 38 41 39 31 45 36 46 32 31 36 38 31 31 41 37 42 41 46 38 45 44 34 30 46 44 38 41 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 Data Ascii: rdf:li> <rdf:li>xmp.did:671778a1-8243-402d-9509-09282e51853e</rdf:li> <rdf:li>xmp.did:6736723C4D7511E08B55976D85305432</rdf:li> <rdf:li>xmp.did:67539A4159B9DD11988581318F178C4A</rdf:li> <rdf:li>xmp.did:6758A91E6F216811A7BAF8ED40FD8AA9</rdf:li> <rdf:li>xmp
2022-03-15 16:08:15 UTC	6624	IN	Data Raw: 44 36 37 44 31 31 45 30 42 30 43 34 45 32 44 30 42 35 43 33 30 41 44 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 35 43 31 38 46 37 31 44 36 37 44 31 31 45 30 42 30 43 34 45 32 44 30 42 35 43 33 30 41 44 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 35 43 42 33 33 30 30 45 33 32 30 36 38 31 31 38 34 44 35 44 39 44 37 38 32 41 39 44 37 34 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 35 44 32 41 42 33 46 31 33 32 30 36 38 31 31 38 30 38 33 45 44 43 46 30 37 45 34 31 37 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 35 44 35 46 44 36 35 46 36 39 37 45 35 31 31 42 30 36 33 39 42 32 45 36 30 44 34 45 39 39 Data Ascii: D67D11E0B0C4E2D0B5C30AD4</rdf:li> <rdf:li>xmp.did:75C18F71D67D11E0B0C4E2D0B5C30AD4</rdf:li> <rdf:li>xmp.did:75CB3300E320681184D5D9D782A9D74C</rdf:li> <rdf:li>xmp.did:75D2AB3F132068118083EDCF07E41711</rdf:li> <rdf:li>xmp.did:75D5FD65F697E511B0639B2E60D4E99
2022-03-15 16:08:15 UTC	6632	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 46 32 34 35 45 36 35 41 35 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 46 35 36 32 45 35 46 30 43 32 30 36 38 31 31 38 41 36 44 43 36 33 38 46 39 46 43 39 35 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 46 41 41 46 46 43 36 30 37 32 30 36 38 31 31 38 43 31 34 41 30 45 42 30 30 45 36 39 43 45 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 46 43 43 32 41 34 37 42 41 32 33 36 38 31 31 38 41 36 44 43 36 37 33 30 34 46 38 33 36 36 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 46 44 38 41 39 37 Data Ascii: <rdf:li>xmp.did:7F245E65A5226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:7F562E5F0C2068118A6DC638F9FC95EE</rdf:li> <rdf:li>xmp.did:7FAAFFC6072068118C14A0EB00E69CED</rdf:li> <rdf:li>xmp.did:7FCC2A47BA2368118A6DC67304F83669</rdf:li> <rdf:li>xmp.did:7FD8A97
2022-03-15 16:08:15 UTC	6648	IN	Data Raw: 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 43 46 38 37 37 42 38 30 37 32 30 36 38 31 31 39 32 42 30 45 39 30 44 30 34 38 45 41 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 43 46 38 45 41 39 31 45 32 32 30 36 38 31 31 42 34 31 30 44 35 36 46 37 30 31 32 34 35 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 44 30 32 33 43 39 32 44 35 42 43 45 32 31 31 41 41 33 37 44 38 32 45 39 38 31 38 41 34 31 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 44 33 37 34 32 33 46 44 36 42 41 45 31 31 31 39 43 46 36 42 38 41 43 32 46 43 31 32 45 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 44 33 39 39 39 32 46 42 37 Data Ascii: f:li>xmp.did:8CF877B80720681192B0E90D048EA72C</rdf:li> <rdf:li>xmp.did:8CF8EA91E2206811B410D56F70124534</rdf:li> <rdf:li>xmp.did:8D023C92D5BCE211AA37D82E9818A41F</rdf:li> <rdf:li>xmp.did:8D37423FD6BAE1119CF6B8AC2FC12EAE</rdf:li> <rdf:li>xmp.did:8D39992FB7
2022-03-15 16:08:15 UTC	6664	IN	Data Raw: 32 32 41 46 30 44 43 31 35 41 42 35 36 46 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 41 34 38 37 36 36 43 30 39 32 30 36 38 31 31 39 35 42 42 38 45 32 44 39 39 41 36 37 36 44 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 41 34 38 43 42 45 45 33 44 32 35 36 38 31 31 38 44 42 42 39 32 38 31 39 30 38 37 30 44 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 41 34 41 36 44 45 46 36 44 39 41 31 31 45 31 38 35 43 45 38 43 37 37 41 38 44 30 30 38 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 41 35 33 43 39 42 33 43 46 42 41 45 32 31 31 41 35 46 37 42 33 31 36 36 43 30 32 46 39 30 31 3c 2f 72 64 66 3a 6c 69 Data Ascii: 22AF0DC15AB56FB</rdf:li> <rdf:li>xmp.did:9A48766C0920681195BB8E2D99A676D6</rdf:li> <rdf:li>xmp.did:9A48CBEE3D2568118DBB928190870DAB</rdf:li> <rdf:li>xmp.did:9A4A6DEF6D9A11E185CE8C77A8D00848</rdf:li> <rdf:li>xmp.did:9A53C9B3CFBAE211A5F7B3166C02F901</rdf:li
2022-03-15 16:08:15 UTC	6672	IN	Data Raw: 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 32 43 38 46 34 34 30 37 44 32 32 36 38 31 31 39 37 41 35 45 34 46 36 45 38 44 43 41 45 38 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 32 44 30 30 37 31 30 31 35 32 30 36 38 31 31 38 30 38 33 45 33 37 37 35 30 34 46 31 35 42 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 32 44 44 39 32 41 30 37 44 32 30 36 38 31 31 39 32 42 30 44 30 41 37 35 38 31 35 46 38 41 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 32 46 32 45 37 30 33 41 39 32 36 45 31 31 31 39 33 46 46 43 31 31 30 46 34 46 36 46 35 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 33 30 31 42 44 36 42 45 32 32 30 Data Ascii: li>xmp.did:A2C8F4407D22681197A5E4F6E8DCAE8F</rdf:li> <rdf:li>xmp.did:A2D00710152068118083E377504F15BF</rdf:li> <rdf:li>xmp.did:A2DD92A07D20681192B0D0A75815F8A6</rdf:li> <rdf:li>xmp.did:A2F2E703A926E11193FFC110F4F6F54D</rdf:li> <rdf:li>xmp.did:A301BD6BE220
2022-03-15 16:08:15 UTC	6688	IN	Data Raw: 38 31 31 41 43 41 46 39 42 46 30 33 34 33 42 37 39 31 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 42 39 41 35 41 44 31 36 42 32 30 36 38 31 31 41 39 45 46 43 33 35 37 44 46 31 45 34 34 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 42 39 42 44 44 37 44 31 41 32 30 36 38 31 31 38 30 38 33 46 37 36 41 34 38 42 45 35 34 41 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 42 41 33 34 31 42 33 30 42 32 30 36 38 31 31 38 30 38 33 44 38 36 43 41 31 35 46 41 46 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 42 41 44 39 45 44 46 32 41 33 36 45 35 31 31 42 32 32 36 41 41 42 37 41 43 31 36 30 36 32 36 3c 2f 72 64 Data Ascii: 811ACAF9BF0343B791B</rdf:li> <rdf:li>xmp.did:BB9A5AD16B206811A9EFC357DF1E44DE</rdf:li> <rdf:li>xmp.did:BB9BDD7D1A2068118083F76A48BE54AC</rdf:li> <rdf:li>xmp.did:BBA341B30B2068118083D86CA15FAF3B</rdf:li> <rdf:li>xmp.did:BBAD9EDF2A36E511B226AAB7AC160626</rd
2022-03-15 16:08:15 UTC	6704	IN	Data Raw: 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 32 31 37 45 43 31 35 45 38 32 30 36 38 31 31 41 42 30 38 39 44 36 36 31 42 42 31 35 37 45 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 32 31 44 37 42 32 35 46 34 36 36 45 31 31 31 38 43 46 46 38 44 46 31 32 35 45 31 36 32 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 32 32 34 46 44 34 31 44 43 39 32 45 30 31 31 41 37 44 38 42 34 45 41 33 43 43 44 39 31 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 32 33 30 39 34 46 41 42 45 32 31 36 38 31 31 38 41 36 44 45 33 32 44 43 45 37 38 35 34 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 32 34 31 45 34 Data Ascii: <rdf:li>xmp.did:D217EC15E8206811AB089D661BB157E8</rdf:li> <rdf:li>xmp.did:D21D7B25F466E1118CFF8DF125E162B8</rdf:li> <rdf:li>xmp.did:D224FD41DC92E011A7D8B4EA3CCD9187</rdf:li> <rdf:li>xmp.did:D23094FABE2168118A6DE32DCE785405</rdf:li> <rdf:li>xmp.did:D241E4
2022-03-15 16:08:15 UTC	6711	IN	Data Raw: 38 36 37 39 38 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 41 36 36 44 41 43 42 30 37 32 30 36 38 31 31 39 32 42 30 45 39 30 44 30 34 38 45 41 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 41 37 31 44 39 34 33 32 30 33 32 31 31 36 38 41 45 35 36 41 39 33 41 42 46 30 32 34 39 45 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 41 39 43 37 45 46 31 39 35 32 30 36 38 31 31 38 33 44 31 38 45 41 41 46 31 33 35 44 32 42 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 41 41 41 36 34 37 38 44 44 42 31 44 46 31 31 42 34 41 35 43 33 30 36 41 37 30 36 35 41 45 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: 86798B</rdf:li> <rdf:li>xmp.did:DA66DACB0720681192B0E90D048EA72C</rdf:li> <rdf:li>xmp.did:DA71D94320321168AE56A93ABF0249E4</rdf:li> <rdf:li>xmp.did:DA9C7EF19520681183D18EAAF135D2B3</rdf:li> <rdf:li>xmp.did:DAAA6478DDB1DF11B4A5C306A7065AEB</rdf:li> <rdf:li
2022-03-15 16:08:15 UTC	6727	IN	Data Raw: 64 69 64 3a 46 34 42 33 36 44 37 31 31 31 32 31 36 38 31 31 39 32 42 30 45 33 38 46 37 43 38 32 33 35 32 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 34 45 37 32 42 44 43 43 45 37 30 45 37 31 31 42 36 35 31 45 35 46 46 36 34 45 45 33 32 38 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 35 31 36 37 38 38 41 34 36 33 42 45 34 31 31 41 44 35 33 38 45 45 30 34 39 32 42 32 34 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 35 31 37 34 36 43 38 34 35 38 34 45 34 31 31 41 33 34 33 43 44 42 42 44 41 32 38 43 37 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 35 31 45 39 43 33 36 31 38 32 30 36 38 31 31 41 36 31 Data Ascii: did:F4B36D711121681192B0E38F7C823526</rdf:li> <rdf:li>xmp.did:F4E72BDCCE70E711B651E5FF64EE3282</rdf:li> <rdf:li>xmp.did:F516788A463BE411AD538EE0492B24EE</rdf:li> <rdf:li>xmp.did:F51746C84584E411A343CDBBDA28C7A8</rdf:li> <rdf:li>xmp.did:F51E9C3618206811A61
2022-03-15 16:08:15 UTC	6743	IN	Data Raw: 33 36 33 43 37 31 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 43 31 41 46 36 45 36 39 45 30 38 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 38 43 36 44 42 34 39 38 32 44 39 30 32 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 41 34 32 45 35 45 32 44 42 35 38 37 42 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 41 36 44 46 36 42 30 35 44 34 31 37 39 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: 363C71C8</rdf:li> <rdf:li>xmp.did:FB7F1174072068118083C1AF6E69E085</rdf:li> <rdf:li>xmp.did:FB7F11740720681188C6DB4982D90274</rdf:li> <rdf:li>xmp.did:FB7F1174072068118A42E5E2DB587B87</rdf:li> <rdf:li>xmp.did:FB7F1174072068118A6DF6B05D4179B8</rdf:li> <rdf:
2022-03-15 16:08:15 UTC	6747	IN	Data Raw: 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 44 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 34 35 37 46 39 38 43 33 31 36 34 38 37 36 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 44 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 35 42 41 46 43 36 46 30 30 42 43 37 39 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 44 37 46 31 31 37 34 30 37 32 30 36 38 31 31 42 31 41 34 38 32 43 33 30 38 39 45 30 35 36 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 44 39 39 38 43 42 32 30 37 32 30 36 38 31 31 39 32 42 30 45 39 30 44 30 34 38 45 41 37 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 44 41 36 43 44 44 32 36 Data Ascii: df:li>xmp.did:FD7F1174072068119457F98C3164876C</rdf:li> <rdf:li>xmp.did:FD7F117407206811A5BAFC6F00BC79B8</rdf:li> <rdf:li>xmp.did:FD7F117407206811B1A482C3089E0569</rdf:li> <rdf:li>xmp.did:FD998CB20720681192B0E90D048EA72C</rdf:li> <rdf:li>xmp.did:FDA6CDD26
2022-03-15 16:08:15 UTC	6763	IN	Data Raw: 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 36 32 30 32 65 38 37 2d 30 35 63 31 2d 61 61 34 37 2d 62 63 65 61 2d 66 65 35 31 65 33 31 37 37 32 66 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 36 34 61 33 62 31 33 2d 65 31 36 32 2d 34 32 61 63 2d 39 33 62 31 2d 62 34 34 30 61 31 33 32 32 66 66 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 37 36 38 62 66 66 31 2d 39 66 61 39 2d 30 64 34 35 2d 62 38 61 34 2d 61 61 36 61 33 34 38 32 61 30 38 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 37 61 65 38 32 64 66 2d 33 65 34 63 2d 34 38 61 32 2d 62 31 34 62 2d 35 64 38 38 66 64 37 30 37 65 63 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 Data Ascii: df:li>xmp.did:c6202e87-05c1-aa47-bcea-fe51e31772f9</rdf:li> <rdf:li>xmp.did:c64a3b13-e162-42ac-93b1-b440a1322ffd</rdf:li> <rdf:li>xmp.did:c768bff1-9fa9-0d45-b8a4-aa6a3482a084</rdf:li> <rdf:li>xmp.did:c7ae82df-3e4c-48a2-b14b-5d88fd707ecb</rdf:li> <rdf:li>x
2022-03-15 16:08:15 UTC	6779	IN	Data Raw: 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 39 31 36 36 38 63 32 2d 30 38 34 39 2d 34 30 33 62 2d 38 35 64 63 2d 62 36 37 31 65 38 30 37 37 31 66 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 39 62 39 30 61 30 64 2d 66 61 65 66 2d 34 64 66 31 2d 61 66 64 65 2d 34 63 61 39 65 39 61 37 35 38 64 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 39 63 66 65 66 63 62 2d 62 31 66 34 2d 65 66 34 61 2d 38 36 65 63 2d 34 64 63 65 66 37 32 31 38 35 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 39 66 34 33 33 37 31 2d 38 34 39 65 2d 34 66 30 30 2d 61 61 61 39 2d 35 31 66 64 61 35 32 39 61 30 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: rdf:li>xmp.did:f91668c2-0849-403b-85dc-b671e80771ff</rdf:li> <rdf:li>xmp.did:f9b90a0d-faef-4df1-afde-4ca9e9a758d0</rdf:li> <rdf:li>xmp.did:f9cfefcb-b1f4-ef4a-86ec-4dcef7218574</rdf:li> <rdf:li>xmp.did:f9f43371-849e-4f00-aaa9-51fda529a083</rdf:li> <rdf:li>
2022-03-15 16:08:15 UTC	6787	IN	Data Raw: 40 53 54 1a 80 d0 25 34 05 35 50 68 0d 14 94 d0 2d 34 08 46 88 29 a0 4d 01 4a 68 0a 68 0a 68 0a 68 0d 02 53 ea d0 1a 02 9a 02 9a 00 68 0d 01 a0 34 09 4d 10 ba aa 29 a0 35 10 9a 03 45 1a a0 d1 06 a0 29 aa 12 9a 03 40 53 40 68 a3 44 14 d0 14 fa f4 05 34 06 81 34 05 34 05 34 06 80 a6 80 d0 14 d0 14 d0 14 d0 04 68 0a 68 0a 68 0a 68 03 a0 34 09 e1 a0 29 a0 34 05 34 07 86 80 a5 34 05 34 09 a0 29 4d 02 d3 54 14 a6 a0 4d 14 6a a0 d0 1a 03 40 68 0d 02 68 17 50 26 a8 34 0b a0 4d 02 e8 12 9a 03 40 68 0d 01 a0 34 06 80 d0 14 d0 1a 03 40 7f 6e 80 d0 1a 03 44 14 d1 5f ff d4 e8 5a fd 2b e0 0a 68 12 9a a0 1a 02 9a 02 9a 02 9f 4e 80 d0 25 34 0b 4d 02 53 40 11 a2 12 dd 14 53 40 7e cd 10 78 e8 12 9a 02 9a 04 a6 80 a6 81 74 09 a0 29 a2 13 40 68 16 9a 03 40 53 40 94 d0 1a 04 Data Ascii: @ST%45Ph-4F)MJhhhhSh4M)5E)@S@hD4444hhhh4)4444)MTMj@hhP&4M@h4@nD_Z+hN%4MS@S@~xt)@h@S@
2022-03-15 16:08:15 UTC	6803	IN	Data Raw: d6 c5 b6 df b3 41 26 4d ee c1 e1 8a 3b d5 52 96 c7 11 76 75 51 e4 58 db b7 d3 77 3a df cb d5 ae 59 ae 9c 29 f2 cc bb d6 fc f8 b8 d2 13 02 40 d2 ca 45 45 d1 1b 3b 91 a8 4b 5d 1a ff 00 2b f6 dd a3 f3 6b ae 92 e1 8d af 2f 18 7b 54 b2 81 3c 91 b0 8a 3b bb 51 20 a5 80 16 4c 9b a4 4e 5e 6e e3 24 51 33 af 69 2d be f9 6d 5d 28 63 73 c0 cb 58 53 23 22 37 b5 59 11 31 90 9e e2 35 12 c6 f9 7f 2e a3 96 c5 e6 92 de a9 3d 7b 8c 54 48 65 66 c5 18 fb ad 20 9f 1a e9 65 48 c9 0c 8b 23 0a 36 4b 8b 94 bb 5d c9 8f e6 5f 8b a2 59 cf 0d 4b c7 2a 28 f7 fd 9c e7 2a 86 92 31 25 4d 64 a9 0f 51 db 4e 23 c2 de 6b 79 39 1d ff 00 77 a7 9b 86 3d 44 7f 76 e7 62 36 45 96 18 a2 a0 ac 2a 07 1e 51 d3 c2 c5 5b bd 37 b5 be 9d 76 fc fa 63 7e d0 d3 74 68 b1 5f 0f 07 1d 84 91 82 1d d9 38 d6 87 ee Data Ascii: A&M;RvuQXw:Y)@EE;K]+k/{T<;Q LN^n$Q3i-m](csXS#"7Y15.={THef eH#6K]_YK(1%MdQN#ky9w=Dvb6E*Q[7vc~th_8
2022-03-15 16:08:15 UTC	6819	IN	Data Raw: 6a f8 8b 57 97 97 f8 75 99 95 b8 3f 26 e4 b1 82 15 f8 83 42 a4 57 80 a7 25 dc bd 3e ae 8e 6f 87 5a cb 3e 55 91 60 c7 14 f2 cd 34 9d e7 97 9a 46 7a 00 89 c7 b4 91 8e 94 e7 ba df e3 ea d6 a6 a9 76 57 af b7 d7 3d 84 b9 b1 88 12 da 05 57 2c a6 aa 55 ee b9 57 a7 a7 97 f9 77 37 f3 35 8d b5 6e 6c cc ef fb d4 de e3 ca 7f 6e 62 80 9b 7d 11 f2 a5 8e 95 58 a9 d0 47 42 df 75 b1 2f 57 c3 a6 bd 25 78 dd 58 ee af f9 2d b1 19 31 36 ea 5a 4f 2c 6f 30 68 d7 1e 2b d7 9b b4 89 7b 4d 6f db f4 dd 67 0a 99 9d 92 bb 76 d9 3d 53 f3 7b 8e 6b 5c 52 b5 b8 81 db 75 6f f2 b1 d1 af ed 72 f4 7c 5a 99 4c 17 66 c6 c7 c6 74 83 24 a9 9a 78 48 5a a9 63 db b8 92 a8 a3 f9 4a 56 e9 64 6b 7b 9f 7a dd 5c aa 76 d3 1a 41 9b d9 66 7a 84 08 5a 4e 67 54 ab 2f 69 42 15 fc ba b3 fc c9 1b 99 ae d6 a6 df Data Ascii: jWu?&BW%>oZ>U`4FzvW=W,UWw75nlnb}XGBu/W%xX-16ZO,o0h+{Mogv=S{k\Ruor\|ZLft$xHZcJVdk{z\vAfzZNgT/iB
2022-03-15 16:08:15 UTC	6827	IN	Data Raw: 34 84 dc dd c5 88 a3 d5 a4 00 93 61 55 5e 5f 2d e1 55 bd 2f d7 ab ac 5a a2 c0 8e 7c fc d4 de 4a ae 2c 30 c8 4b c4 e2 d7 35 2c 52 3e e4 88 b1 34 68 79 ef b7 b5 ff 00 a9 63 6b 5b 7d 24 1b d6 e0 d2 e6 c3 92 a5 84 30 3b 3b a2 29 a9 0a 3c ab 4b 2f 7b 87 f3 1d 5d 35 8e 9b c1 9d de 79 30 8b e5 18 93 f3 4d e2 a1 0b 00 8c 03 db 32 ff 00 ae de ae 57 f9 bd 3a ba 6c 96 2a f6 5d b7 3b 36 39 13 31 d9 b1 66 0a f1 ac 94 2b 72 2d d2 3a f6 57 95 7a 97 b6 bf e5 73 fa 75 9b fa b5 34 5d 97 4d bb 6d 92 36 76 91 22 66 66 b8 dc e6 83 b7 67 29 5e 93 d2 bf b8 cb ae 7f fa 74 e9 41 89 83 04 92 c7 1a dc d3 cf 69 34 05 d7 c1 85 d4 fc 38 a4 57 6b 55 65 77 b3 ad f5 33 83 0f 45 f2 70 3f e9 b7 02 92 e3 c6 ea d1 da 14 cb 18 3f 31 bb 33 f2 f6 e5 6b 59 16 db d1 91 7a b5 af 79 e1 3c 7c ab f7 Data Ascii: 4aU^_-U/Z\|J,0K5,R>4hyck[}$0;;)<K/{]5y0M2W:l*];691f+r-:Wzsu4]Mm6v"ffg)^tAi48WkUew3Ep??13kYzy<\|
2022-03-15 16:08:15 UTC	6843	IN	Data Raw: fc b7 a5 f9 97 ef dd ae b2 6b 5c f9 4f fc cc b2 2c 69 08 8d b2 24 4e 20 c6 42 06 b4 aa aa 5e 2f b5 6d ea 17 bf 27 93 5c e5 96 b5 8e 1e 9b 30 24 08 99 0f 7e 6d 80 b2 46 a2 d5 70 28 d2 5b c3 ad ee b6 fb 17 57 6b 21 ac b5 13 33 26 e5 58 a3 42 97 d0 95 b8 dc e4 fe 25 e2 16 f4 ff 00 94 fc 9e 4b 75 99 ba dd 2b cc 59 f8 d1 42 b0 42 ad 8c 91 bd a1 e5 14 8d 79 49 a3 3b 04 f9 6f d0 89 e6 b7 f7 b3 76 cb 53 55 5e 5f bb f6 f8 31 1d cb a4 89 18 2e 52 26 01 c3 21 a4 ab c2 f6 47 a3 59 cb f6 b4 9b de b0 5d 3f 93 2d ee c8 77 08 ac c3 96 93 28 67 2b 50 a2 a5 4f 71 fb 54 e7 8e 19 7d 76 75 f2 fa b5 ad a9 23 0b b0 7e b2 3c f9 8d 8d 91 da 8b 05 cd c8 d3 39 2c 8c 01 b9 95 94 51 bb ae dc df 2e c5 bb 5a ba dc 70 cc c6 79 33 be 7e a4 6e 72 c4 ff 00 fb 71 02 e3 63 06 66 b2 d5 e0 cc Data Ascii: k\O,i$N B^/m'\0$~mFp([Wk!3&XB%Ku+YBByI;ovSU^_1.R&!GY]?-w(g+POqT}vu#~<9,Q.Zpy3~nrqcf
2022-03-15 16:08:15 UTC	6859	IN	Data Raw: a3 e5 b4 48 3a a4 7f 97 17 76 de 5e a5 7b 13 5b b3 e1 9c 97 71 82 6e f8 93 36 0e f8 8d 5d f1 21 87 c4 87 e4 69 64 6f a5 2f e4 56 5e df 57 2c 8f 26 ba 4e 99 ad 36 db 14 7b 8c 12 ee f9 08 a3 36 00 d1 e3 31 7a a4 41 4c 96 52 db 93 b9 15 cd 75 aa dc 8b 1a e9 96 70 89 b6 e4 a8 56 c5 19 05 e7 c1 b7 bd 22 02 2b 27 28 32 fc c3 63 25 53 d1 cc bd ce 86 d4 b3 0b 9c ab 3d bb 8b 16 46 61 56 95 92 28 e4 94 c8 55 45 1f 87 cf 5e e3 0b e5 8e 25 ba cb 7c fc 9d 5a d6 13 2f 3b 7c b3 4d 95 3e f1 95 03 43 8f 12 7e 5e 1e e1 32 80 05 6f 2e fd 55 93 cd 6f 2b f5 73 6b 36 2c 56 6c f8 39 b1 e4 cd 9d 12 ac 7b 86 79 b6 e9 16 86 32 ad 1b 34 89 5b b9 39 25 6f 8e f5 e5 6d 6e de 30 cc 8a 2d c7 0f 23 dc 39 91 6d b0 f3 1e ed b1 13 5e 68 1b 99 f2 08 e4 4b 52 d5 45 e5 4e 9f b1 a4 9f 26 5b 34 Data Ascii: H:v^{[qn6]!ido/V^W,&N6{61zALRupV"+'(2c%S=FaV(UE^%\|Z/;\|M>C~^2o.Uo+sk6,Vl9{y24[9%omn0-#9m^hKREN&[4
2022-03-15 16:08:15 UTC	6866	IN	Data Raw: 38 10 b1 20 12 e5 57 a1 55 a3 f3 07 74 ee c7 77 e2 fc bb 5b af 49 32 97 84 7d a7 1a 38 1f fa d6 55 c9 92 c8 cc 17 c2 50 5a db 90 25 6a cf 7c 89 d7 d5 cc df 63 48 6e 5c 51 89 92 fb f6 ec e0 19 24 58 60 c6 8c 1a 29 7a 70 73 1d d7 3c 69 2d 9c bd 37 cb 66 99 30 93 b6 e7 43 1e 5c fb 84 c6 fc 82 5e 20 ca 40 45 6a dd d9 27 a7 bb 3b 32 74 fc b5 b1 16 ee 9d 12 b3 d8 59 2b b1 67 9d fb 73 90 f6 73 02 63 c4 8c 01 ee 44 85 57 f3 9c dd 21 5b e6 46 bd 72 5e fe 5e ae 92 67 84 ad d6 13 c5 0e 34 73 ba 2f 6d 03 4a 2f a0 15 b9 bb 53 65 c9 c1 7a 1e f8 a3 e9 eb 92 ce 48 f5 25 66 c4 64 dc a0 9a 26 da 88 59 44 ed c8 05 56 37 45 ba 45 45 23 f9 4a dc b2 cd c9 7c 71 c9 d5 6a ea da 98 55 7b 97 3a 4c 4c b5 c5 c2 4b f3 32 24 6e f1 35 02 d5 2b 33 4a 9e b9 97 e5 fd 98 12 d7 b7 cb 8d 7f Data Ascii: 8 WUtw[I2}8UPZ%j\|cHn\Q$X`)zps<i-7f0C\^ @Ej';2tY+gsscDW![Fr^^g4s/mJ/SezH%fd&YDV7EEE#J\|qjU{:LLK2$n5+3J
2022-03-15 16:08:15 UTC	6882	IN	Data Raw: ec fb 76 3e 44 d3 6f fb 98 62 cb 64 d0 e3 93 71 a0 56 30 ca fd b0 d7 16 5f c3 bb a3 f1 7d 3a d6 7e 13 0b 3d 93 19 f7 89 93 76 dc 2b 0e 33 c3 d9 48 81 e2 6e 61 dd 76 b7 ca 6c b5 64 bb e6 dd cb 6a 5b 72 e2 24 59 ee 5b 46 2c f1 b2 ce 8b 2c 00 a9 8e 1a f2 d0 55 63 52 9e 9b ff 00 f4 d5 23 d6 62 e5 86 fe a4 bb ae 4b 7e 65 10 c5 83 ce b4 a8 2a 56 35 ed b5 96 ac 5e 9e df 6d 64 be 38 ff 00 0b cf ad a7 6d 94 8b 1e 56 21 c5 ee 37 e5 92 14 2e ea 68 c0 28 b2 c5 90 b7 06 7f e7 37 5f 6d ad d4 94 b1 53 14 c3 dc 73 c1 1c 2f db db 95 7b 8c 10 95 52 a8 51 1a 24 14 e4 55 3e 8e b9 3a be 25 fa 0d 7b f7 dc 50 22 3e d7 0b 33 4f 96 d1 22 c7 10 e6 24 30 59 3b 4f d0 9f 2f 91 ae 5f 56 b7 a6 ac da f5 8d 8e 8b 8c 36 94 86 d6 93 e6 14 73 56 b1 da d8 04 b2 1b af 66 b2 49 5f 95 ec bb a7 Data Ascii: v>DobdqV0_}:~=v+3Hnavldj[r$Y[F,,UcR#bK~e*V5^md8mV!7.h(7_mSs/{RQ$U>:%{P">3O"$0Y;O/_V6sVfI_
2022-03-15 16:08:15 UTC	6898	IN	Data Raw: 41 11 94 f9 75 e9 1c 2a 7f f9 ea e5 30 6a 39 9e 57 29 21 2e 01 ad c4 f3 12 3f b3 95 46 b3 da 9e 87 19 0b 03 25 6d a5 3f 69 d3 05 a9 73 ce ad 1d b1 47 6a 0f db c4 ff 00 6e b5 6f 0c c8 65 65 be 3a 96 08 89 e2 69 53 fd 8b ac fc 35 85 75 b3 ca 86 31 92 16 35 92 b7 53 c9 c1 bc df ce 7e 54 e7 e4 fd e5 d7 3e f8 74 58 a9 89 23 06 35 a2 15 25 56 ee 26 a4 f3 fd 3c cf 23 75 33 5d 6f a7 57 28 a9 96 29 a1 9a f9 dc 32 a4 64 15 1e 52 45 4d 9f 01 4e a6 6d 63 a7 49 c9 b9 62 58 d9 0c bc 24 6b 68 4f 06 3c 41 e6 f4 db fe 9f 14 09 32 14 90 db 2d ed 71 f0 61 5e 1d 08 b5 e1 62 d7 9b cd fe 66 b5 84 cb ce 46 1c 70 b5 b5 b8 ad cd 65 59 b8 9a 16 bd f9 ae 93 ae cb bd 28 9a d7 96 72 cd 6e bb ae 54 0c 99 18 0b 4e f4 80 b3 4c 39 80 1c d5 41 d2 97 2c 7e 8b 95 7e 2d 6a 44 b5 47 9f bc e7 Data Ascii: Au*0j9W)!.?F%m?isGjnoee:iS5u15S~T>tX#5%V&<#u3]oW()2dREMNmcIbX$khO<A2-qa^bfFpeY(rnTNL9A,~~-jDG
2022-03-15 16:08:15 UTC	6906	IN	Data Raw: 71 0c 63 e7 34 80 41 93 19 83 1d 6d 52 2d ab c8 54 51 a0 58 13 91 52 de 45 b5 9b b4 9d 5a 99 fb 54 ec 6d d5 b7 ac a9 f0 31 08 44 80 a7 76 65 aa a0 f3 46 89 e7 a4 68 bd 3f 13 6b 73 96 6e 35 5c e4 63 c5 81 00 58 59 04 34 a9 0e 68 00 35 67 a8 1d 5f e9 76 a6 d3 06 b7 2c d6 e1 be ca b9 b1 6d b8 16 3b c8 8f 29 62 47 01 43 65 d7 5d e2 d6 f9 7a 3a 35 cf 0e 86 8e 3a cf 2d b3 95 93 29 92 f3 25 f5 51 c0 2b 76 a3 fa af f8 af e6 e6 7e 6d 4f 34 ca 7e 67 b7 e4 40 7b ac bc 2d b6 27 04 a7 a7 9e c2 2f 1f 6b a6 db f5 bc 58 cf ac 9b dc cb 2a f6 b1 ad 43 72 10 43 56 8b c2 97 2b 15 fd d5 6d 3b 54 7d b7 23 23 25 5d 63 84 4a 1a de fb 30 20 35 41 56 32 35 2d 6b 3a 7b 6b cc f7 5d f8 6d a9 0a b3 9e 58 f1 9c 43 1a b4 93 32 18 e2 89 01 20 05 f2 7c 2a a7 9e c6 55 d2 c4 95 57 ba cf f9 Data Ascii: qc4AmR-TQXREZTm1DveFh?ksn5\cXY4h5g_v,m;)bGCe]z:5:-)%Q+v~mO4~g@{-'/kXCrCV+m;T}##%]cJ0 5AV25-k:{k]mXC2 \|UW
2022-03-15 16:08:15 UTC	6922	IN	Data Raw: 9f e9 cb a2 1c fc bb e6 0e e1 25 4a 9a 9a 0a 54 fc 43 c3 53 b6 b3 87 9c 7c 75 32 19 83 a3 83 f5 1a ff 00 b3 9f 53 06 4e 49 b9 34 31 19 a4 50 a2 33 c4 b5 00 f1 fa cf 3a df f7 b5 ac b3 61 dd a7 22 39 55 1c a2 a5 b5 2a 58 96 22 be 97 f2 ab 7a 75 72 98 3e ae 0f 44 80 2f 81 3f b7 fb 57 53 26 10 96 51 12 93 45 ee 31 24 9f a2 be 00 b5 cd cd a9 6b 58 2c d9 e5 2c 8d d9 2e 62 14 56 a2 bc 3a 56 d1 4a 7f a5 da 76 74 91 3c ee a8 b5 16 80 28 58 2f 87 c5 cf cb a6 07 80 f2 c8 0f 78 2d 50 90 2b 68 20 13 ca 2e e6 1c d5 5f a7 9f cb 6e b5 75 a9 2c 2c 6e 5e a0 57 89 3c 54 b0 f0 f2 f8 2f a7 a5 5b 52 6a 64 da e6 07 2c b8 eb dc 28 3d 42 e3 f4 f0 4f 4b 53 57 ca 7a 3b 1c 84 c6 63 22 c9 aa 2c 42 cb 6d 0f 51 bb 91 7a 75 a9 ab 3e 8c c9 90 d8 52 fe 5b 21 48 2e 39 0a 44 c4 1f a2 db f8 Data Ascii: %JTCS\|u2SNI41P3:a"9U*X"zur>D/?WS&QE1$kX,,.bV:VJvt<(X/x-P+h ._nu,,n^W<T/[Rjd,(=BOKSWz;c",BmQzu>R[!H.9D
2022-03-15 16:08:15 UTC	6938	IN	Data Raw: 7d 24 7b 83 1e 74 c7 4c 1c fc 89 a3 86 7e 66 99 28 d7 70 63 64 9d be 5b 38 7c b4 45 ea f3 69 ad e7 85 a8 3b 06 c9 17 e5 de 01 8c f0 5a 03 77 e6 90 47 dc 1d 4b f2 d6 d9 13 d4 b7 c9 d3 ab be c9 ac 5c 49 83 07 b7 a6 1d 98 d6 34 ec da ec 1e d0 c0 fd 51 2b f1 5e 5f c5 55 b5 b5 8c e5 ac 60 ce 57 b8 61 78 1e 58 b1 89 8d 6e 49 16 05 76 57 76 1c 59 7b 89 ca b6 af 35 bd cb 2e d5 f2 9e 88 32 f2 b2 b0 22 ec c5 3e 08 0c 5d 18 35 4b 02 79 44 78 8c 63 6f c4 5f c5 ed f9 6f b3 4c 49 7e cc aa b1 61 cc dd 37 24 9f 1a 11 14 40 d2 56 64 14 92 df 17 92 eb 14 33 78 49 c7 ef eb 77 89 cb 3f 2d 16 06 de ad 33 a2 48 70 f2 22 61 77 69 2c 8d a8 43 25 65 69 27 e9 fb 37 23 37 a3 5c eb a2 2b c3 ba 6d f2 34 a4 c5 3e 13 bd 02 89 18 b3 07 a2 bb 8e d9 8c 7a 51 da ce 5d 27 2c f4 97 8f ed c9 Data Ascii: }${tL~f(pcd[8\|Ei;ZwGK\I4Q+^_U`WaxXnIvWvY{5.2">]5KyDxco_oLI~a7$@Vd3xIw?-3Hp"awi,C%ei'7#7\+m4>zQ]',
2022-03-15 16:08:15 UTC	6946	IN	Data Raw: 38 f9 c5 48 8f 20 04 4c 34 95 ab 19 b9 c5 c6 8c 7e 80 7e 0f 56 b9 f9 74 95 65 f9 a4 cb 65 39 64 64 2d ec e4 50 0e 02 95 4f 93 db 3c df f2 ed d6 2e 9f 4d fa 33 91 81 dd a4 90 10 84 57 85 c6 e5 a0 f5 72 bf 01 f1 36 a6 15 2b 0b 6e 8b 35 04 70 2d f2 56 fa 21 ab 11 c0 0e 57 a3 39 3f 0f 3f da d4 ce 17 b3 b9 5e ce 5d ba 77 2d 20 69 10 a8 78 cf 52 31 0c 6c b1 be 95 09 cd 77 2a b7 2e ac fd 72 97 f3 c3 c6 2e de 92 3f 69 5c 2b 21 ea a7 13 a8 1e c0 c3 ca da 65 19 58 ed c6 32 48 bb 98 7e eb 0d 4d a6 5a 8d fe cb fa 8a 56 35 32 24 b9 19 8a ac 07 75 ae 52 de 5a 04 55 ed 5b ff 00 32 ed 71 ba 35 94 31 34 e3 3f f3 8c 55 27 49 07 e6 71 61 5b 4f 37 81 84 23 b4 73 af ae d5 f8 ba b5 78 45 de 06 3e e1 92 64 81 f1 17 1a 16 2b db 0c ce 81 c3 dc c7 e6 2b f9 3c c9 75 d7 74 79 b5 8b Data Ascii: 8H L4~~Vtee9dd-PO<.M3Wr6+n5p-V!W9??^]w- ixR1lw*.r.?i\+!eX2H~MZV52$uRZU[2q514?U'Iqa[O7#sxE>d++<uty
2022-03-15 16:08:15 UTC	6962	IN	Data Raw: de 9e 5b 59 ed f3 5b d3 ab 9c 1e 55 b8 be e2 8a 7e ce 23 3d b3 29 05 f8 2a 5e 09 ff 00 2d d7 fd 39 74 bb 1e 4e 6e 78 c3 39 1a 0c 66 ed cc cc 08 90 78 8b 48 36 df ff 00 33 9b cd cc ba cf ac 35 83 31 ee 53 26 54 98 5d a7 c5 2b c5 a7 e0 d5 a0 eb 00 92 cc 7a 55 7d 5e 5f 86 da 61 ff d7 e0 be df db b2 52 5e eb 14 8a d4 a5 42 f8 d4 8f a5 75 e8 d6 e1 6c ca d1 7d b4 a5 da 68 aa ca 80 92 e4 1a 1a f5 d6 be 9d 5a b8 4d da f3 67 db 64 03 12 76 47 5a a9 2a b5 06 b5 4b 4f fa ae fd ed 62 e9 1b 9b 56 be 0c 8d df 07 1d a3 ca 89 e2 4c 88 c3 32 a9 2a d6 16 e5 66 84 17 b1 1c f3 79 2e 7e 74 5d 79 fd eb 9c 3b 4d 6a e7 13 73 93 69 86 f9 31 23 8f 15 a6 57 92 f5 50 65 2a a5 28 8b 49 12 4f c5 ee 4a f6 5d dc b1 f5 2e da de 96 eb 54 f9 18 59 b9 d9 2b 99 34 4f 3e 30 42 a9 22 82 02 c6 Data Ascii: [Y[U~#=)^-9tNnx9fxH6351S&T]+zU}^_aR^Bul}hZMgdvGZKObVL2fy.~t]y;Mjsi1#WPe(IOJ].TY+4O>0B"
2022-03-15 16:08:15 UTC	6978	IN	Data Raw: d3 d9 2f cb 19 bd ed 98 90 31 86 56 67 cc b4 08 8d ca 04 8a 07 39 31 c6 2f 95 56 8b c2 61 65 bf 7e de ba ed 53 68 73 dc d6 47 10 8f 3f 21 ab 9c 81 c2 80 5c d7 88 be 41 6d d7 a7 96 2f e3 7d 74 fc f9 73 db 87 2d db d3 72 d9 f2 dc c7 23 40 1a 84 b1 0c 14 13 e0 d7 2d 0a 7a 6f f4 f9 75 ea db 16 38 4c ca e9 89 bb ed 7e d3 92 08 77 1c 99 33 9d 11 25 57 c7 25 87 30 ee 24 57 56 fe df a3 99 3a f9 e3 d7 8b 69 76 e9 ea 96 6a b6 db 73 b7 5c a9 e3 cf 9e 0f 97 32 33 03 52 a2 34 a1 7e e1 66 b5 af 09 7f 4d cd fc bf 36 b1 c6 1a e5 e7 61 dc f7 c9 32 40 91 62 64 07 82 1b 96 75 43 c3 bb c9 09 b4 05 92 d5 3f e2 d6 ee 23 1c b4 59 1b ce 3f b7 a0 59 27 c7 c8 81 14 00 72 23 71 2d c4 16 a5 b8 f2 f3 2b 35 df 31 79 9b 59 c4 bd 16 d8 ca ee 12 6e f8 6c fe e1 da a7 67 c5 76 05 62 9a 30 Data Ascii: /1Vg91/Vae~ShsG?!\Am/}ts-r#@-zou8L~w3%W%0$WV:ivjs\23R4~fM6a2@bduC?#Y?Y'r#q-+51yYnlgvb0
2022-03-15 16:08:15 UTC	6986	IN	Data Raw: 71 f2 87 5a 92 dc f0 be 30 1d c7 46 64 6e ef 22 37 73 d5 cc da 78 92 a5 da d4 5d f7 32 2d df 25 67 db d2 2c c6 c9 2a 59 59 8a 28 75 5e 56 95 6e 56 45 a4 8b ca fd 7c cb 6e ac b3 5e 6d 31 76 e9 86 f7 4e db 36 7c c3 0f 6d c3 73 8b 1b 52 36 54 0b cb e1 62 c9 20 5b 93 99 ad b5 a4 bb ae ed 77 fc f7 8c 6f a5 68 3d b3 ee 6d c3 2c 0c 6c bc 75 ca 44 92 1e c3 b9 09 db 11 10 ad c3 c2 36 7b 13 d1 6f de d4 fd 13 58 d2 8d 82 1d 97 7a 1e e0 c7 32 2e 3c b0 96 9c 16 ab cf 50 79 9a 3b a9 02 07 fc 3b 4f f8 b5 e7 b9 93 0e b3 97 bc 8f 71 e1 7b 8f 21 61 9d 4c 6a 95 60 b2 28 08 5e b4 8d 59 ae 54 4e 56 5b 96 46 6b ba 3a f5 8b 3e 5b e9 5d bd 6c 93 45 0a 66 49 37 e4 e4 c6 02 e4 c6 00 b1 08 d6 a9 8b b9 55 17 79 91 d2 ff 00 b6 b7 eb a6 bf 9d c6 67 2e 77 79 d1 9c df 73 61 6d ff 00 f5 Data Ascii: qZ0Fdn"7sx]2-%g,*YY(u^VnVE\|n^m1vN6\|msR6Tb [woh=m,luD6{oXz2.<Py;;Oq{!aLj`(^YTNV[Fk:>[]lEfI7Uyg.wysam
2022-03-15 16:08:15 UTC	7002	IN	Data Raw: 5b 43 53 c3 e8 e5 af 97 8e a4 98 6a dc 9f fe a1 8e df f4 a2 25 22 2e 65 7b 80 ad 6d e5 a9 e6 63 4b 97 5a ac e5 13 70 d8 7f a8 c2 d3 20 b2 58 c9 01 41 ad 68 45 17 e1 fb 5a cd 86 0e 6c bb 9e 66 c3 30 cb c7 aa cf 08 6b 95 85 6e 3f 4a b2 f9 d5 97 a9 75 e6 db 5c f0 ef 2b a9 fb 5f de 31 fb 89 e0 ca 54 bf 39 5d da 50 58 12 8a 4a 06 92 36 97 92 de a6 5b 6e 7e 5d 79 77 d2 ca eb ad 95 bd 44 c9 cd c9 19 bd d5 c7 55 72 ae 01 2d 70 06 db 49 7f 94 b7 f2 73 d1 dd 7c ac 8a ba 62 f6 ce 64 e1 1b 77 f7 44 18 f9 d8 b8 b0 cc 4a c9 cb 60 5e e4 ae cb cb f8 9e 51 75 c8 de 6f 4d ba d4 c2 61 9d de b7 9c 84 51 dd 29 87 94 f7 21 8b 2d 81 aa b5 2d 92 35 8d d6 ff 00 f9 96 ab 73 2f a3 53 cb 53 67 9f 6f 47 97 2e 52 ee 67 25 de 3e df 6e 48 e2 47 54 61 4e 65 b6 5e 55 5b 42 8e 5b 35 3d 63 Data Ascii: [CSj%".e{mcKZp XAhEZlf0kn?Ju\+_1T9]PXJ6[n~]ywDUr-pIs\|bdwDJ`^QuoMaQ)!--5s/SSgoG.Rg%>nHGTaNe^U[B[5=c
2022-03-15 16:08:15 UTC	7018	IN	Data Raw: b5 a9 db f2 da bf 7e 25 ea d3 13 5e d7 36 f4 ff d4 cd ed 1f a8 0d 3c 85 f7 48 15 e5 81 7b 70 5a 28 8a 68 dd c7 95 50 7e 2d d6 c8 8d cd f3 12 e6 d5 db 49 5e 8d 6e 1e b3 0e db 93 b7 ae 5c 2d 7e e0 ac c6 75 26 ad 68 1c 11 6e 03 ca d7 c7 e6 e4 6b f5 ce 6b 65 ff 00 f0 ba fa 98 3b b6 ec ab be ed 67 71 c2 5e dc 2b 72 f3 12 6f 7f 11 12 2d ab cc dd 5c ac da 96 e2 a6 72 c3 ee 98 c3 76 cb 4c 6b 3b 2d 09 b9 8b 52 80 03 cd cc df c5 af 4e 27 c3 8d cd 74 bd 97 dc 58 fb cd 0e e3 34 30 64 85 2a 4c d8 a8 62 a9 e4 57 f9 36 dd cb c8 ad 24 7f 2d 6d 5e 9d 70 bf 93 a7 b5 a2 e1 7b 7d a6 87 6d 81 86 76 4c 68 5a 45 7b 9e 29 1c 29 b1 61 44 16 f6 fd 2b 63 c5 dc e4 e6 ea d6 76 f4 4b 19 0d cf 78 c9 c4 74 c7 51 16 24 55 2b 23 e3 ad 09 a9 bf c0 db f8 6a 15 55 53 b4 bc bd 3d 5a b3 4f b5 Data Ascii: ~%^6<H{pZ(hP~-I^n\-~u&hnkke;gq^+ro-\rvLk;-RN'tX40d*LbW6$-m^p{}mvLhZE{))aD+cvKxtQ$U+#jUS=ZO
2022-03-15 16:08:15 UTC	7026	IN	Data Raw: 33 6d 93 58 d3 47 28 10 c9 91 b9 5f 12 32 85 28 81 6d f1 68 d4 c5 6a f7 2d bb 99 af 97 f7 75 cf 69 f4 e9 ad fb 64 b7 dd d6 6c 0c a4 8a 35 7c 88 66 6b 7f 2a 1e ac 48 f3 b4 6b 71 e7 e5 5e 7e ab 35 db 59 98 e5 b5 c5 6b 76 9c 8d c7 2b 13 f2 ad 08 c5 88 a9 2b 6b da e2 bf 87 77 2d d1 d9 27 53 27 c5 c9 ae 57 11 d2 66 bc 61 fb 66 7c 1c 2c 8c 78 5c be 6e 63 86 9f 22 fa 12 41 be 97 1e 6f 15 16 fd ab ed 56 5d 4b b6 6e 56 4c 1b c7 d9 b3 36 e6 61 86 20 ee 4c 29 34 b2 c9 5a 35 49 f9 68 d7 7c 25 b9 97 a7 9b 97 4c e7 b3 18 e9 33 79 da f7 1d cf f2 d8 18 56 18 e3 92 b3 d0 90 8e 01 06 a2 c5 6e 7e af 37 2f 2e a6 bc 2d e7 a4 d3 9e bb 28 92 0c 79 5f 22 43 c8 91 47 18 60 a5 47 87 28 6b 51 2e 4e a9 1b 59 c6 7b 5e 98 61 ec ad df dc 7b 93 4f 9f 9a b1 a7 5a 0a 82 e7 8f 4f 6b 96 cf Data Ascii: 3mXG(_2(mhj-uidl5\|fk*Hkq^~5Ykv++kw-'S'Wfaf\|,x\nc"AoV]KnVL6a L)4Z5Ih\|%L3yVn~7/.-(y_"CG`G(kQ.NY{^a{OZOk
2022-03-15 16:08:15 UTC	7042	IN	Data Raw: e7 32 bc c1 9d d2 ae 56 e7 50 79 a4 31 9e 11 89 2a be 5e 9d 74 ea 61 22 93 78 c7 ca 49 bb 0e ac b7 96 8c 16 04 72 92 78 ad c1 7c 7f f0 eb 53 0b cb 27 9a 83 1f 31 84 f5 66 24 70 20 53 fd ba dc b1 8b 0e 6f b9 d9 33 c5 1e 3c a8 b1 47 1f d2 7c 4f ed 1a e9 31 58 b6 c6 c7 d8 f1 6c 7b 8c 0b fd 6e 57 69 92 eb 20 48 8f 1e 0b 63 de 3a d8 bf 4c 5d 3c bc fa f3 7f d1 2f c3 af e5 7e d3 bd c1 ed 83 b5 c8 ef 24 78 d0 65 25 32 12 19 16 f9 40 61 da 48 7b 81 13 1d cd dc f6 7f 99 cd af 0e b9 7a b2 c6 e3 ee 19 91 48 64 cd 9a 78 98 12 25 21 6a e0 13 75 54 56 eb ab e8 b2 d6 fb da ef e7 0c 4d b2 7f 2b dd 92 45 24 02 78 62 ca 18 f4 62 92 44 16 ee 25 9f b8 55 78 ad 79 5d 5b bb f6 ba b5 75 99 e9 36 6d 72 37 9d b3 dc 18 43 73 da 60 83 6f 77 95 56 62 aa 11 98 3f 2a 43 db 5b 6e 8f 83 Data Ascii: 2VPy1^ta"xIrx\|S'1f$p So3<G\|O1Xl{nWi Hc:L]</~$xe%2@aH{zHdx%!juTVM+E$xbbD%Uxy][u6mr7Cs`owVb?C[n
2022-03-15 16:08:15 UTC	7058	IN	Data Raw: ce 4a bc 1e da 66 92 8e 2b 1a 00 01 b5 05 3e be a2 6a 7e ea eb 19 6d 24 ed 38 98 ec aa f1 c4 ac 17 89 24 16 34 fb bf ee ea 65 70 f5 d9 db 6d 69 22 68 b9 0f 35 78 71 1c 1b 9d b5 2a c4 c4 db e0 c8 b5 eb 54 7f 02 38 f0 34 ff 00 e9 cb a9 83 27 9b 19 31 14 da a4 20 15 e1 c3 c3 fd 5e 2d a9 78 59 32 5a e2 64 a4 61 04 87 ba a5 94 71 b8 50 85 65 f2 aa f9 b9 a4 64 f8 79 b5 71 30 99 aa 2d fd 0e 33 08 f1 7b 62 48 6a 6c 05 ee 53 4a 2f 34 65 df 91 59 59 ee bd 9f d2 96 eb ac b3 e5 8c 5a 5d b3 fa fe 4e dc b2 4c 62 87 29 c1 75 46 43 25 ea 01 65 e4 ac 6c 24 af 97 fd eb 75 9c 4c ae 78 58 6d 1b 84 d9 0e f1 9c 69 12 30 4a f7 de 40 43 52 aa c6 38 47 47 4b 53 97 fd ed 5f 38 4f 4f 73 e0 bc d2 91 1b 33 47 6f 1b 79 6a 78 df f3 18 db 6d 3f e5 fd ef 36 b3 86 b2 75 e4 c7 84 d1 d4 50 Data Ascii: Jf+>j~m$8$4epmi"h5xq*T84'1 ^-xY2ZdaqPedyq0-3{bHjlSJ/4eYYZ]NLb)uFC%el$uLxXmi0J@CR8GGKS_8OOs3Goyjxm?6uP
2022-03-15 16:08:15 UTC	7065	IN	Data Raw: c5 bf 6d f9 30 9c 58 72 d6 6a b0 92 fe e0 63 4a df 6d 4d d2 aa c7 e6 bf ef 6b 86 da df 97 49 67 c1 77 8f 66 c1 bc cd 16 5c f1 fe 6a 58 c9 b0 20 e4 b4 8f e6 f3 74 fe ef 3d 9a 49 67 45 da 7c b2 f8 ff 00 a6 5b 3e 06 68 dc e1 88 c4 22 26 8a 18 d2 bf 53 09 04 9c be 9b 55 75 ab bd c6 2a 4d 27 71 a8 8b dd 5b 5c 72 fe 4d db e7 22 d6 db 92 84 75 75 57 e8 5e 6d 67 5d 38 5b 69 bc 67 cf cb 95 d4 ac 6b 8e 4d 12 80 1a 82 2b 5a f4 ea 58 b2 a7 8c 68 70 61 74 20 99 1c 15 0c 81 43 00 7f cb af 2a 2a f5 7c 3a c6 24 6b 39 53 7f ed bd bf e5 1c 14 68 66 8e 83 bc f5 92 53 4f f9 b2 73 2f dd fe 1d 6a df a4 93 ec b9 e7 12 28 3f a4 65 e4 1e eb 06 36 b9 0a cf 5a 5c fe 2b d1 d5 cb e7 fe 2c f3 db 5c 74 a3 f6 f7 b6 f7 4d ba 61 16 4b e3 64 e1 d6 b5 96 2e 71 5e a3 72 35 ad 2f db 56 f5 6b Data Ascii: m0XrjcJmMkIgwf\jX t=IgE\|[>h"&SUuM'q[\rM"uuW^mg]8[igkM+ZXhpat C*\|:$k9ShfSOs/j(?e6Z\+,\tMaKd.q^r5/Vk
2022-03-15 16:08:15 UTC	7081	IN	Data Raw: f4 6a df c7 e9 9f ec fb 6f 86 66 2a 2a b6 db 11 99 1d 4d a5 28 6e a2 dc b7 48 f5 a7 2f 2f f0 eb 97 cb af c2 bf 13 0d b2 64 79 33 93 bb 57 2e aa 55 49 46 a5 17 a7 e5 f2 da be 5d 2d 49 13 20 c9 fc b3 c9 13 2f 2a 82 e6 e1 c1 47 f0 dd c3 c8 ba c4 cb 76 22 e3 6e 32 4e 1d 31 52 74 98 1b b9 85 05 d6 de 91 85 96 eb 63 6b 97 9f a6 dd 74 93 1d b1 da 76 06 e5 9c d1 8f ea e9 0c 24 9a 17 59 49 52 6b c0 73 a2 7c 3e 7e bf 2e b5 70 cc 94 fa 22 80 c0 45 69 4e 54 f0 e2 3c 3a 7e af bd ae 6d aa 64 cd cc 0a d1 63 c5 12 3a 92 0b 17 af 05 1c 58 58 3d 5e 56 6b ba ba 75 70 19 33 e5 dc 57 b9 54 65 a9 e5 01 48 3e 5f 1b b9 ad e5 ed ea a1 71 f1 72 8a 8a 48 d1 84 27 c7 89 2c 0f c5 c7 93 f9 76 7e f6 aa 2c 70 fd b5 88 90 ca 98 4a 21 96 40 cd 78 55 06 e3 cd c7 91 bc dd 3c bd 3a 96 d5 90 Data Ascii: jof*M(nH//dy3W.UIF]-I /Gv"n2N1Rtcktv$YIRks\|>~.p"EiNT<:~mdc:XX=^Vkup3WTeH>_qrH',v~,pJ!@xU<:
2022-03-15 16:08:15 UTC	7097	IN	Data Raw: 42 1a ca 96 a7 02 7e ce b7 84 c9 63 79 1a d5 96 19 51 3c 68 c4 9e 1f 47 06 d5 67 b4 af e9 91 64 38 ee 8b 4d 3a af 03 fb 3c 7f 6e 8b d2 34 9b 54 48 8d 22 d6 ab 4b 48 20 92 7c dc a0 f0 fb 5a c5 69 59 92 86 31 dc 22 ea f8 d7 c7 f6 ea e5 9c 17 bc 85 0d 45 41 1c 69 f4 7f 66 b5 86 72 88 90 45 dc 21 e6 70 3e 8e 5e 3f f7 e8 1c 7c 59 4b 11 09 0e 07 d2 3c 4f fb 75 72 98 37 24 19 4b 46 20 ab 0a f0 fa 0e 81 87 8d 9c 55 0d 5b d2 2a 0f fb 35 50 46 8c b6 b3 56 bf 4d 78 0d 10 fa 02 7a ff 00 ef fa f4 43 bd c4 5a 0b c1 fd 83 45 2d ea 0f 01 52 3e a3 aa 87 1b 34 c8 28 00 2d f4 90 35 72 86 a5 95 e6 14 62 4f 8d 3e ad 4c ab d6 3b 76 c7 20 e3 fb 34 0c 34 6a ec c5 89 35 fa 0f 86 a2 bd 88 4d 28 1a 80 d3 57 06 5e 8e 32 a8 b6 bc 07 d3 5d 30 99 79 35 8c d2 ef 1f db a0 77 b4 8e 09 0c Data Ascii: B~cyQ<hGgd8M:<n4TH"KH \|ZiY1"EAifrE!p>^?\|YK<Our7$KF U[*5PFVMxzCZE-R>4(-5rbO>L;v 44j5M(W^2]0y5w
2022-03-15 16:08:15 UTC	7105	IN	Data Raw: 6a 4b 2c 31 0b 52 bc 54 9a d4 fd 7f ec d6 a6 ac dd 9a 78 e7 57 b3 0e 07 37 48 55 02 8e 1c 4f 00 28 d7 75 7a b5 da c9 ac 72 96 da b4 dd bf 4f f2 76 76 89 33 e6 8b 19 a4 35 20 86 01 6b e1 5b 57 cc bc df f1 72 eb c1 fd d2 f4 f5 ff 00 55 8a e9 f0 b6 fc 02 f3 3e 60 99 81 a5 21 52 6a 3e b2 65 b1 47 f1 69 ef 3f 0b e7 09 db e3 e0 ed 93 a4 78 2e d3 29 45 67 7e 15 0c 45 cc 9c a2 de 4e 9e a6 5f 8b 5c ae df 6e b2 7d 33 39 78 d0 8c 92 a1 99 b1 dc 70 a8 f0 27 8d b4 fd 9f 0e ba 6b b5 c6 5c ac c5 5b 26 64 31 5d 8a 1c b3 d7 95 57 e8 14 1c 9e 1a 49 96 ad c3 c4 7b 12 58 7c 59 40 04 96 f0 ab 71 02 bf 5e b6 c6 0d cb b4 47 8f 22 c5 2c 65 4b 29 20 54 db 5d 6a 56 6e b8 2e df b3 45 28 38 d2 d5 1c dc 43 2f 8d 07 91 97 eb d3 26 11 f6 cd be 2d b4 b2 c8 41 22 a1 c1 fa 49 14 05 5b 5d Data Ascii: jK,1RTxW7HUO(uzrOvv35 k[WrU>`!Rj>eGi?x.)Eg~EN_\n}39xp'k\[&d1]WI{X\|Y@q^G",eK) T]jVn.E(8C/&-A"I[]
2022-03-15 16:08:15 UTC	7121	IN	Data Raw: be 2a 93 7e 1c a1 d5 ba dd 5e 44 f4 a6 ba 59 96 23 d6 57 b9 f6 3c e8 26 93 b0 91 e5 c8 43 aa f6 42 d1 8d 58 9e e3 16 12 27 dd e6 f4 2f 56 a4 97 2b 6c 59 fb 6b 60 f7 17 b9 23 59 66 95 70 b1 e0 04 a3 2a 2a 54 9e 65 55 51 65 c3 cc 8f e5 f2 e9 b4 9a a4 b6 99 f7 57 b4 b3 71 f2 22 83 3b 30 bc ed 71 88 a2 4e e7 87 33 db da ee 2d ad ff 00 97 fd dd 73 d7 7f e1 bb 13 30 65 f7 0c 71 24 70 26 3c ce 50 da 59 99 25 54 e9 be 4f 27 a7 a9 7e d7 36 a5 f2 bc ba 37 b3 f3 b2 91 7b 99 11 95 91 50 97 78 68 d1 55 78 7e 3d dd bb be 1e af 87 59 f9 cc 4b c9 ff 00 72 fb f6 31 12 2c 10 9c c6 bc 22 a2 21 a8 21 6e 77 f9 83 9b 87 a7 97 e2 d6 ee 76 63 59 35 66 5b 7c 8b 6f 80 ee 12 e3 c8 0c 2c d1 88 1e c0 17 8d 3e 8f 25 cf 75 e9 ea f3 2e b9 4d 39 76 bb 0d cb 79 8f 70 c5 49 e2 48 89 31 a8 Data Ascii: ~^DY#W<&CBX'/V+lYk`#Yfp*TeUQeWq";0qN3-s0eq$p&<PY%TO'~67{PxhUx~=YKr1,"!!nwvcY5f[\|o,>%u.M9vypIH1
2022-03-15 16:08:15 UTC	7137	IN	Data Raw: bd d2 bc aa ea 1d 8c 76 f5 2a c9 ad 7c a2 1e 02 6e 3b 0a 64 4e 8c 6d 91 1a 30 c5 8a 9a 1f 38 b4 fd cf bd 6e b7 b6 b9 66 5c 33 52 66 e4 63 c4 22 2e ca 93 00 5d 6a 68 68 6e 55 2b f6 ba 74 91 2d 49 c5 65 86 62 b0 06 57 68 cd 4a b5 0a d4 71 03 cc be 6d 6a 6d c2 5d 79 74 cf d2 0d f2 7c 59 06 dd f9 d4 c7 c6 2c 24 17 a1 66 76 51 77 65 26 fe 54 72 37 5f 9e ef bd ae 3f a4 f9 74 d5 a0 f7 d6 ec bb ec 43 38 06 3b 67 3b a8 01 80 bd 4f 34 e3 b8 3b 8f 1d 3a 99 95 39 f5 7f 3c 74 cd 95 8a d8 63 c5 dc f1 e7 71 24 6b 36 3a 5c 91 9e 63 21 76 b5 6d ab 72 a4 43 a9 be ce ba ed c7 49 2e 52 20 db dd e6 0d 89 05 f2 c6 9c 62 8c 8b 40 34 1d c6 b8 af 2d cd cb fb ba 5b c0 a2 6c 39 d6 39 33 1a 26 48 55 ad ee 81 cb 71 3e 5f 52 f5 74 fe f6 b3 76 6a 45 46 df bc 84 91 c3 d6 95 f1 ad 07 29 Data Ascii: v*\|n;dNm08nf\3Rfc".]jhhnU+t-IebWhJqmjm]yt\|Y,$fvQwe&Tr7_?tC8;g;O4;:9<tcq$k6:\c!vmrCI.R b@4-[l993&HUq>_RtvjEF)
2022-03-15 16:08:15 UTC	7145	IN	Data Raw: cc 68 d4 ba 6a 2f 16 ea e6 b9 ba 75 de 6d 23 97 9a 8f b0 1c bd e9 8e 0e 22 34 b3 32 92 5b a4 0f 2f 3b 37 cb 5f b7 76 b5 76 9a f3 52 66 bd ed ff 00 a5 5b 8e 6e 53 60 11 1c 72 56 bc ec 40 af d3 63 2a 90 df bd ab 7f e8 92 33 fd 35 d7 bd 9d fa 2d b3 6c eb 1f f5 29 84 db 81 52 5e d6 b5 63 af 0b 57 85 ac d6 ff 00 99 d7 e9 d7 9b 7f d6 ef 71 d3 7a e9 e5 7f bb ae 16 c8 3b a3 24 ba 08 6a a4 95 ec aa 82 d7 bb 59 cd 2b 2d c2 38 a3 b5 bf 8a ed 79 ee 9f 4e f3 6b 7b 56 6d 71 6d 5b fe df 93 3e 33 8c a9 22 46 ef 32 a5 65 72 d7 31 82 3f f9 4c b6 74 79 bc ec dc da 59 62 fa 71 5f 78 43 26 16 53 40 52 d6 46 e6 05 cb d2 ee 98 ec 96 bd 3f f1 74 eb d5 a7 4e 5b b6 de ce cc d9 37 43 16 df 28 46 95 ed 51 1c d4 b5 68 bd 4a 5b 91 9b cb 62 5b fc 5a e1 be bb 4e 63 a6 b6 53 9f a8 98 98 Data Ascii: hj/um#"42[/;7_vvRf[nS`rV@c*35-l)R^cWqz;$jY+-8yNk{Vmqm[>3"F2er1?LtyYbq_xC&S@RF?tN[7C(FQhJ[b[ZNcS
2022-03-15 16:08:15 UTC	7161	IN	Data Raw: d0 bb 32 fb a7 b8 bd cb b8 c4 f0 c7 87 d9 39 02 d1 48 bb 67 88 e5 7e ef cb e6 b3 f8 35 a9 ac 9f 26 6d 37 85 bc fb a7 61 b4 6e 18 bf 98 59 29 18 af 00 c4 72 27 34 26 e3 6f c5 c9 ab 66 bb 24 cc 41 38 1e f1 cf 64 8c e3 ce e6 45 16 f2 00 2d 04 db dc a5 bf 6b e6 73 7f 33 57 11 32 e9 58 be cd dd 67 73 8f 96 f1 98 a5 82 38 e5 44 67 61 43 46 6e 60 57 ce 8a ac f6 c5 f7 f5 cf ae 97 33 e5 47 b9 ec 7b 67 b7 26 81 32 fb 61 4c 95 8d 8d 08 5a 78 bc 95 b9 dd 2b eb b9 6e d4 96 ec b7 11 a7 32 64 e0 11 3c 91 94 8a 5a 30 21 43 33 33 79 9a 44 aa da df cb fd ed 62 ea d4 d9 41 95 b5 66 b3 4d 89 84 65 30 cc ac a4 3d d5 57 61 f8 9d db 6e a7 35 8d d1 62 fe 1e 99 69 27 65 fd 2a 97 17 0b 23 2b 37 22 41 9d 79 76 25 6f 66 40 9c b1 45 1c 8c d4 32 7c ce 76 57 9b ec 6b 58 b5 cf d7 2b 2d Data Ascii: 29Hg~5&m7anY)r'4&of$A8dE-ks3W2Xgs8DgaCFn`W3G{g&2aLZx+n2d<Z0!C33yDbAfMe0=Wan5bi'e*#+7"Ayv%of@E2\|vWkX+-
2022-03-15 16:08:15 UTC	7177	IN	Data Raw: 21 98 9a 9a 72 5c fe 5e 66 66 e9 6d 65 ac cf 97 b5 82 46 96 47 72 ac 00 31 80 78 5c 19 47 71 ee e2 dd 7d 1f f2 f4 c1 93 e3 0b 1a 1c 67 ef 32 47 21 ad 2a 68 07 a7 56 6b c7 29 eb 37 87 3b 9b 71 cc db b2 72 5d 49 9e 39 16 98 e9 1d 19 0b ab 58 f7 49 e4 57 43 cb f3 3a 3d 36 ea e2 2a 5e 1e 56 e2 c4 c4 27 30 4e 8c ae f1 82 a5 a2 41 4b 62 b9 57 8b c9 d0 cb e4 ea d3 11 2d 6f 71 64 c6 ca 96 5b 1f bf 35 6c 31 b7 15 5a 1e 65 55 3e 65 b7 99 f5 b7 3a f2 fb ee 1c 33 9c 57 92 3f ce 96 76 b1 89 24 dd cb c2 ef 05 b2 df 4a e9 77 59 a5 71 cf 77 ee 98 f3 ee a7 db d1 ac 38 98 30 1b de 38 f9 9b 20 bb 2d d1 8a 2f 23 f9 b9 7d 3a b2 71 96 ad e7 0a 3d ff 00 db fb 94 fd bf c8 e2 7e 5b 07 31 d5 0a c8 a8 b6 bd 69 5a 8f 0a 7f e3 e6 6d 6b 5b f6 9b 7f 0c c1 93 70 da 1a 4c 6c 79 e4 c7 62 Data Ascii: !r\^ffmeFGr1x\Gq}g2G!hVk)7;qr]I9XIWC:=6^V'0NAKbW-oqd[5l1ZeU>e:3W?v$JwYqw808 -/#}:q=~[1iZmk[pLlyb
2022-03-15 16:08:15 UTC	7185	IN	Data Raw: cc 63 35 6d 9b ec 2d cf 74 8b 1a 79 b1 30 e1 79 4f 05 32 d2 42 07 d3 7a 0b 56 cb 95 19 13 9b e1 d6 66 d8 5c 65 77 9f fa 59 36 46 d7 d8 c1 c7 c2 8a 66 35 59 79 df 97 ea 12 30 ea e5 f4 eb 52 de d8 b6 39 66 47 e9 1e f1 2e 4c d1 0e c8 78 54 b3 8b 88 0c 07 57 6c db cd 6f 99 7e f6 ba cf da 46 76 d1 57 b8 fb 33 76 da 66 11 7e 51 cb 10 bc 63 05 c5 0f a5 97 5d f5 fd 25 71 db 5a ad cf c6 cc 89 ec c9 86 44 20 9a 07 42 08 3f eb 1a eb 36 95 8f 38 6e ff 00 47 7d e9 8b b1 bc f8 b9 8a b5 9e de db 3b 1a 29 e9 b6 de 8e 3d 5d de ae 5d 70 fd b5 cf 2d e9 7e 1a 7c a9 77 1c 1d ca 19 1a 66 fc ac b2 a9 94 32 b5 9f 45 a0 49 f2 db cd 6f 3f a7 9b 5e 49 8b 1e ad b2 ea 18 1b f2 a4 6f 09 05 58 7d 20 50 10 7c d5 3f 12 ea 4b 88 cd 9c a3 e5 64 45 18 4f ca 2a 37 6c 12 78 d4 d6 86 d1 4b 5b Data Ascii: c5m-ty0yO2BzVf\ewY6Ff5Yy0R9fG.LxTWlo~FvW3vf~Qc]%qZD B?68nG};)=]]p-~\|wf2EIo?^IoX} P\|?KdEO*7lxK[
2022-03-15 16:08:15 UTC	7201	IN	Data Raw: 9e 9c d4 50 6a 8b cb cb 1a f9 fe d6 bc 9b f1 d3 b6 bc f6 b6 92 09 04 b0 2c 6a d2 63 35 69 35 45 17 ff 00 45 6d 6b bf 8b d5 ae 59 74 5d 61 6e ef 2a fe 4d 23 6e e8 73 55 2a 57 a1 ae 0c 2f ea 0c be 34 0d ad ce 98 ab 26 f6 fb c7 95 8e d3 5d 27 7a 82 77 8d 80 54 6e a8 d1 15 6c 67 ba df b3 ab 35 4f 49 19 7b 0c 32 3a 63 b3 b6 35 fc bc b1 03 56 02 ea 46 ef 56 ab dd cc d6 ff 00 7b 56 c4 95 8b ca de b6 9f 67 cc fb 76 42 4e 67 1c c8 eb 69 5f 02 3c 3a ea cd ea bf ab 93 52 6b 76 6a df 2b dc 3c d6 8b 2b 09 70 f1 93 27 f3 13 14 05 98 85 a5 a5 9d ae 65 6b 1b d6 cf a6 ba 66 a6 db 62 25 41 ee 2c 4d d7 3d e3 db 65 47 18 b1 b4 b3 ab 78 a3 20 a2 f6 6b cc f6 f3 5c c3 96 df 4e ba 7f 5b 1e d6 fb 96 df 9c 8d 0e 3e 0c f1 63 7e 6a 01 2f 75 dc bd c3 aa 4b 23 f0 6b 41 b9 6d d4 f1 62 Data Ascii: Pj,jc5i5EEmkYt]anM#nsUW/4&]'zwTnlg5OI{2:c5VFV{VgvBNgi_<:Rkvj+<+p'ekfb%A,M=eGx k\N[>c~j/uK#kAmb
2022-03-15 16:08:15 UTC	7217	IN	Data Raw: 2b 61 31 b7 2d 19 d5 be 1f 36 96 c4 c5 6e bd bd fa 77 ee 1f 72 bc f3 4b 24 50 9d ba b1 46 5a 3a 50 9e 3f 2d 40 a5 cb 6a 2b 7c 3a 9e 73 38 2e f8 ed d0 76 5f 65 a6 13 b1 cc 73 3b 1b 57 ba 68 80 d3 c2 aa bc bc 5d 6d d7 1f 19 ed d3 fb 3e 8e 64 e4 ed 99 11 34 d8 4d 1e 46 4a 33 46 19 08 62 ae 45 cf 77 a9 51 2d bf 9b e1 d2 e2 26 b9 b5 4f 2e 3e 02 cb 16 46 4b bf 71 98 0e d1 14 51 e5 67 00 78 7d f6 d7 2e 1d 6c ab f8 ff 00 2b 1b f7 1e 30 eb 1b 28 ee 37 0b 6e e6 51 cb 6d ca da b6 e1 31 4d 26 39 cb c8 97 22 17 e5 40 6d 91 5e aa 09 ea 89 78 fe f5 e3 52 d5 8e 41 ba c9 ee 19 77 d7 c7 4e e4 b8 6c ea 0c 88 18 2d 05 d6 29 92 31 54 bf a1 5b c9 ae ba d9 23 3b 4b 97 58 83 7a 10 62 5f 19 32 c3 8f 10 52 05 0f 10 68 d1 b5 dc 4b 25 bc cf ea d7 1f 76 f6 df 89 f0 af c4 85 62 98 65 Data Ascii: +a1-6nwrK$PFZ:P?-@j+\|:s8.v_es;Wh]m>d4MFJ3FbEwQ-&O.>FKqQgx}.l+0(7nQm1M&9"@m^xRAwNl-)1T[#;KXzb_2RhK%vbe
2022-03-15 16:08:15 UTC	7224	IN	Data Raw: c7 9b 22 a2 66 c0 88 8e 23 b0 b9 f0 6f ec ff 00 87 d5 ac 65 ac 35 1e d6 78 e6 db df 1d 45 32 2f 0f 27 89 06 ee 9b 4d 3c ab ae da 59 66 1c 3f 49 66 d9 66 65 ca dc 57 35 d5 01 58 d5 ad 5b 54 15 66 3f ed fd ed 70 ce 1d f1 93 49 b5 bf b8 32 5f 13 85 10 f3 82 6a 28 79 ac e3 72 b7 d9 5f bd a4 d2 ed 56 ef 35 8b 1c 5d b7 64 da 09 c5 da b1 21 61 22 52 49 52 94 8c 55 ba a5 51 c3 9f a1 13 e6 5f ae fc 47 0f f6 db f8 53 ef 7b f6 66 0e 13 e1 6c 4a d2 cc 80 21 91 22 04 93 f4 2b 28 b7 cb e7 f5 6b 9c e5 d2 cc 76 8f ec fc dd c3 33 17 23 23 78 61 8d 2e 09 50 8d 41 65 02 de ee 55 4d 97 73 5a cb fe 2d 5b ae 3a 4f 4c bf b9 ff 00 50 37 18 8c c3 6f 43 3c 11 3d 19 4a 96 52 0d 07 4a 0f 97 cd d0 da ba eb 9e d6 f1 d2 7e c7 91 bd 7b b3 1d d2 58 4e de c1 d5 91 dd 08 0f c0 72 47 79 5e Data Ascii: "f#oe5xE2/'M<Yf?IffeW5X[Tf?pI2_j(yr_V5]d!a"RIRUQ_GS{flJ!"+(kv3##xa.PAeUMsZ-[:OLP7oC<=JRJ~{XNrGy^
2022-03-15 16:08:15 UTC	7240	IN	Data Raw: 42 eb 3b f6 9a cc b1 1f aa fe f8 cd cf 18 b2 cf 8a a1 48 ba c6 1e 22 ee 8e 56 af 4d b7 73 5d cd ae 72 67 97 5e b8 62 f2 b7 39 25 85 05 a9 8f 02 82 ca 8a 2b 4a 9e 2b 7b 16 63 d2 be 6e 5d 69 19 78 33 13 06 69 60 61 dc b9 aa 4d 78 fa be 8d 7a a4 cc 70 ce 29 dc 9f 72 33 92 61 41 18 22 80 f8 91 ff 00 d7 5b 9a e1 9b b3 5d fa 6f ee 4d cf 1e 1c 8d 8b 09 22 97 f3 60 92 ae 42 b1 6a 52 a1 fc d6 af f2 bf e2 d6 37 d6 77 57 5b 72 d5 c9 ed 7d ef 72 92 39 b7 3f ff 00 06 8e 25 81 e2 59 02 b1 58 94 5a bc a1 d1 03 b2 df e6 7f 3f 55 9a f3 7a 93 a7 6c 57 8c 2f d2 c6 8b bf ba c7 3c 92 c9 1d c1 92 2a c7 12 95 02 df 9f 3f 39 b0 fa 62 b9 ff 00 8d 6c dd 30 da e0 ec 09 93 b6 c4 9b 3e 43 65 8a 21 32 4f 2b 32 23 bf e2 8e da 32 c5 10 81 7e dc 97 7a b5 3d 5b 4c 61 93 de 3d f9 9d 8d 94 Data Ascii: B;H"VMs]rg^b9%+J+{cn]ix3i`aMxzp)r3aA"[]oM"`BjR7wW[r}r9?%YXZ?UzlW/<*?9bl0>Ce!2O+2#2~z=[La=
2022-03-15 16:08:15 UTC	7256	IN	Data Raw: 06 77 e7 57 21 9e 3c c4 2e 4f 4b b0 27 87 7c 0e 5e 2e bf b9 6f d9 d7 59 66 13 1c b3 ec 7b 2a 42 06 a3 02 41 fa e9 e1 fb 35 66 69 d3 ca 63 4f 0e 39 5f 17 6f 0a f1 04 53 eb d4 b7 34 93 84 44 81 f2 a2 56 70 54 9f 1a f1 24 f9 6e fb 3a e9 eb 0c 63 29 9b 76 3e 06 54 82 2c ab b1 55 45 0c 80 19 38 d2 95 74 aa f0 bb d1 ad e7 e9 cf 0d df b5 76 fc 1d 8f 26 35 9f 23 1f 26 29 95 bb 65 6a 1c db c1 84 a0 1e da ab d7 f9 9a e1 bd f4 e9 ac c3 43 ee a8 e3 62 d1 45 02 46 a1 c3 bc a5 48 12 02 b5 e3 25 dc 96 b7 2f 27 a7 9b 97 5c f5 b8 6e c2 6d 59 f8 c3 b5 8f 06 3c 96 5a a8 d2 2c 65 12 40 ec 1b e5 d9 c5 2e 6b 7a 2d ee 59 a5 e4 8b ad cf 64 c5 c8 c7 69 66 88 f7 a5 a5 2c 41 1d e5 29 f2 64 95 55 e4 1d 5c fd b6 f8 b5 9d 6e 16 8c bc 8c a4 c7 19 12 23 30 55 02 ca 56 bf 17 74 d1 ad b7 Data Ascii: wW!<.OK'\|^.oYf{*BA5ficO9_oS4DVpT$n:c)v>T,UE8tv&5#&)ejCbEFH%/'\nmY<Z,e@.kz-Ydif,A)dU\n#0UVt
2022-03-15 16:08:15 UTC	7259	IN	Data Raw: b5 dd c3 19 7f ff d6 85 8d bf e3 52 3e d8 94 c7 0a 8a 2b 46 e5 79 78 2d 23 7b 63 1f 0d e9 27 f9 8c ba f9 56 57 d9 98 43 6f 76 65 63 77 e3 55 68 f1 1c a9 92 79 6a 28 4d dc dd bb 57 ba 9c c9 6f ef f6 db 5d 35 c3 1b 4e 72 83 99 fa a5 89 06 02 e0 1e e6 54 cc 48 92 56 e5 00 78 21 51 cd 7b 7c 6f d1 e9 d5 bf 9d 4f 72 29 f6 9f d5 7c ac 31 0e 13 c4 82 08 49 36 c4 0a 16 04 5a c1 ed 3c f7 7c 5a dd fc d8 f4 df 6f 1b b6 06 ff 00 b6 26 e6 d9 0d 8b 8c 58 27 e4 d6 45 48 d2 da 73 cf cb 71 6f 32 c7 1f 57 ef 6b 9d 97 5b 86 a6 2a 1e 26 ea f3 e6 63 5f 8e d9 13 84 54 8a 35 90 24 7c e7 83 ad 01 93 9d 6d 77 69 3a 79 d9 ac d1 53 7d fb 06 73 64 44 b8 4f 1e 0a ca 1e 8c a0 00 54 d1 08 e5 e7 7e 60 59 5d bc ad ea d6 35 fe 5b bf c3 8f 6e 91 43 0d d8 ea 88 c2 36 2b dc 40 41 6f db 46 27 Data Ascii: R>+Fyx-#{c'VWCovecwUhyj(MWo]5NrTHVx!Q{\|oOr)\|1I6Z<\|Zo&X'EHsqo2Wk[*&c_T5$\|mwi:yS}sdDOT~`Y]5[nC6+@AoF'
2022-03-15 16:08:15 UTC	7275	IN	Data Raw: cb da 26 e6 a8 1d 3c dd bb 6d 46 5b 99 ad ed b6 ba cf d3 0c 5d 16 9b e6 26 f9 97 05 32 e3 49 31 31 51 55 15 54 01 19 45 21 dd 63 60 bc f2 44 97 3d be 6e 6e ad 49 b4 f8 31 86 52 0d 8b 77 dc 11 24 c4 c5 97 b6 e0 db 25 28 a6 9c 79 5c f2 8b 7c fe 9d 6b 32 1c de 8f 61 fb 73 70 c3 c2 1b 84 ac 86 28 5e d4 55 6e ed c5 bc a1 21 bb f8 b5 3d cc e1 66 b7 0d 66 d5 fa 6f bc 65 e2 7e 66 59 92 14 90 8a 22 ab 34 8c ce 79 19 a2 e4 ed c5 fd ad cb ac df da 7c 2c d2 ac 24 fd 24 6c 88 93 1b 23 35 66 cb 67 2d 6c 3c 53 b6 bc 19 23 6e 61 dd bb ad dd 95 13 a3 4f ef 3f ad 77 ec 3c 3f 6c fb 47 38 c7 9a 50 67 31 ba d9 4a c8 23 45 0d f2 e3 9a d4 5e f3 b5 97 5c 8b e8 8b 59 bb dd cf 1e 7a 6b c6 3e 3e f3 92 fb a6 2b bf 62 37 42 84 37 6d 41 2a 2a 3b 8a 79 91 79 af 44 f5 79 ee d6 36 fe 1a Data Ascii: &<mF[]&2I11QUTE!c`D=nnI1Rw$%(y\\|k2asp(^Un!=ffoe~fY"4y\|,$$l#5fg-l<S#naO?w<?lG8Pg1J#E^\Yzk>>+b7B7mA**;yyDy6
2022-03-15 16:08:15 UTC	7291	IN	Data Raw: ac a2 44 55 56 6e 51 25 ad f3 b8 f5 75 7a 39 52 dd 71 cf 2f 47 c2 06 f3 ec e8 f7 6c f4 dc 73 32 23 7b 5d 8c 48 bc 08 58 ee b6 ae 1b a1 ad f2 eb 7d 47 3c a9 bf aa ef 38 fb 97 e5 06 3a cb 1c 80 4d 7e 43 01 db 34 25 96 eb af 94 bd bc 97 5b fb 9a 97 18 cd 6a 67 a8 b4 cc f7 5e 1e 0a 2c 5b 8c c4 47 28 50 96 03 63 57 a9 ef fc 4b 59 fa 59 f5 89 ab 59 6a 63 83 2e 55 a2 72 89 98 8e 4e 21 96 aa f6 87 e5 fe f7 da d2 4f a4 b8 42 87 1a 6c 28 5b f2 d0 55 2f a2 4a 45 15 ab e1 61 a3 06 bb ad fe cd be 6d 5c 53 31 28 e2 cb 8d 1d ae e2 39 5a 84 b1 1c 1b 8f 39 2a ac ab cc 9d 5e 7f 36 b3 56 18 db a6 cd 48 19 8f 6e 5a 38 b7 b6 bc 59 41 22 ee b6 57 5a 7d 9d 3a 5e dd 17 1b 3a 1c 2c 68 63 63 5e da af 2f 85 49 a7 3f dd e6 d7 af 5d a6 b2 3c 57 5b b5 a3 3d b1 f2 31 92 59 d5 59 d4 92 Data Ascii: DUVnQ%uz9Rq/Gls2#{]HX}G<8:M~C4%[jg^,[G(PcWKYYYjc.UrN!OBl([U/JEam\S1(9Z9*^6VHnZ8YA"WZ}:^:,hcc^/I?]<W[=1YY
2022-03-15 16:08:15 UTC	7296	IN	Data Raw: d5 40 79 ae 3c c3 9e df f0 6b be bf ed cb 8e d3 07 22 68 24 15 dc 63 8d 1e 29 0a 3d a6 b4 61 c2 eb fa fd 3a e7 bc 6f 55 30 dc 1e 38 e7 9e 16 90 42 f2 12 50 8a 95 53 f0 9e 55 b4 0b 97 ed eb 8f f0 ed fc b3 b3 66 ae 44 f1 e4 0c 76 92 26 a8 ef b8 16 3a 01 7b 8e 5b 98 db d2 ba ed e7 87 3c 98 c1 ce dd b3 23 7c 5d ae 08 e5 ed 31 ee 89 4f 6e a8 7e 6c 69 61 e6 b2 df 3b 36 ae 24 4c ba 26 dd ee c9 bf 29 2c f9 91 45 8d 91 90 9d b1 18 37 c6 ae a3 a9 15 3c ad d3 f0 eb 5f d9 f4 e7 fd 6b 8f 69 e6 e6 c2 c8 fb 8c ab 23 b2 11 48 c0 36 a1 e3 cd 2f d3 cd f7 b5 75 dd 9d b5 54 fe a2 7b cd e4 cf 87 62 c4 73 0f 74 19 03 28 e2 d6 86 65 8e ef 89 93 cb e9 b7 57 6e 4d 26 1c 6a 0d f6 6d ab dc 92 e5 ee 8e df 2d 18 47 77 30 33 30 e4 ad a7 97 c7 53 8f 3c 3a 67 97 7a da 77 b8 bd cf b5 c3 Data Ascii: @y<k"h$c)=a:oU08BPSUfDv&:{[<#\|]1On~lia;6$L&),E7<_ki#H6/uT{bst(eWnM&jm-Gw030S<:gzw
2022-03-15 16:08:15 UTC	7312	IN	Data Raw: 58 47 cd 8a 49 b0 ec dc 15 63 ce 94 47 14 11 c6 c5 96 05 21 7b ac 14 5b f3 7b 7c dd d9 19 bc ba b2 e1 31 94 d8 bd b3 81 88 98 ff 00 9a 9d e4 38 80 39 49 5a aa e7 a9 a6 6f 5a 0e 3a 9e e9 e5 9c f7 be fa 98 2e b8 58 78 e1 f2 25 54 99 69 1a 8a 55 8b f4 85 f2 da ab f0 f3 79 b5 d3 49 9e 52 f0 f7 ff 00 ed 09 a3 8e 38 a4 ee e3 ee 8e c4 09 54 8e 07 a5 50 a2 f8 f0 5b 79 ae d6 f5 fc be 98 bb 7d ac 7d b5 bc 36 7c 32 0c 6c 53 26 e8 9f 31 e7 27 80 a1 67 56 2c 6d 8a 25 f2 ab 79 bd 1a 6d f9 dc 9e e2 cb 6f de ce db 9e cd 99 95 03 c3 14 6b 24 98 eb 40 ae f6 73 28 91 f9 e5 e7 b2 d5 e9 66 ea d6 3c e1 6d ca fb da bf a8 3b 46 e5 ee 39 bb 6a d0 b7 e5 8b 83 3b 51 af af 15 85 59 ac f9 89 e8 fe ee bb 78 f9 71 b7 e0 9e f3 c8 07 1e 4c 8f 71 3d 98 e1 84 9d 88 bc a0 8a 23 3c a3 8c ae Data Ascii: XGIcG!{[{\|189IZoZ:.Xx%TiUyIR8TP[y}}6\|2lS&1'gV,m%ymok$@s(f<m;F9j;QYxqLq=#<
2022-03-15 16:08:15 UTC	7328	IN	Data Raw: 5c ca de 49 3a be f2 e9 e3 cf 26 73 70 ba 91 4e 4e ce 25 c8 85 55 9c c8 d2 45 70 3c 08 36 f4 f9 a9 6f 0d 31 98 92 e3 66 27 db df a5 29 16 43 6f 99 92 ca 97 95 95 31 93 81 34 17 aa cd f5 b5 dc dd bf b9 ab 2d c6 0b df 03 dc de d4 8b 76 89 f7 4c 8a e1 e4 49 d2 cc dc 6a 78 22 db cd d4 d6 f2 f2 eb 13 6c 37 8c f0 7d 72 31 c4 71 ed d9 4c 99 19 1c 15 8d b4 59 17 8b 3b 73 7d 96 76 e6 bb 58 f5 f2 d7 95 84 69 91 2e 54 32 44 a4 6d e8 42 97 72 68 c2 9f 2c 76 c0 fa 3a 55 dd b9 75 65 4b 16 7b a6 24 7b a6 57 e5 12 13 13 b1 22 fb 88 5e 23 8d 14 6b 57 9e 98 9c 4e 55 be e6 c5 d9 f0 f8 4f 30 47 00 92 60 4a b8 0b ce f4 91 03 76 dd ad fb 4d a7 95 94 e6 d3 85 9b b8 2a 64 e2 43 1f e4 65 15 49 67 27 bc dc 38 33 45 6f 2b 37 95 9d ba 74 f2 5d 92 72 70 64 c4 96 19 70 a0 57 cc 0d f3 Data Ascii: \I:&spNN%UEp<6o1f')Co14-vLIjx"l7}r1qLY;s}vXi.T2DmBrh,v:UueK{${W"^#kWNUO0G`JvM*dCeIg'83Eo+7t]rpdpW
2022-03-15 16:08:15 UTC	7336	IN	Data Raw: 9c 76 e8 1c 93 4e 5e eb af 55 5b a1 f5 d2 31 62 cb 66 3b 67 bc b2 72 65 c6 b9 f1 d0 e3 a7 30 e6 5a 87 56 58 ad fc 38 ff 00 c5 cd a9 b5 f2 49 96 f3 2b 69 8e 5c 58 e0 c2 2d 62 13 19 2a 78 d8 05 8d 57 7f 4f 55 da e7 75 5d 76 c3 36 f8 d0 e1 ce bb 2e 1c 2c 71 21 8d 94 b1 1c 38 83 72 f2 f5 cb c7 99 b5 8d b8 75 d7 93 3e de f6 a4 db 6e 6b 64 46 c2 24 78 c2 c6 b2 35 f4 50 39 96 cf b3 fc 5a 4b 69 70 9b bd ef 58 b1 e0 8c a9 cd b0 bb 2a ab c6 39 98 83 5f 94 ba d3 38 c2 b5 f7 5c a8 9e 7c 29 1d 59 e8 a6 12 4d 5d d1 b9 9f ff 00 b7 fc 3a 9d ae 1a 6f 6d e7 c7 21 38 93 b5 a6 5b 4a 31 ff 00 bb 4d 2f c3 3b cf 94 ef 72 61 e6 c5 0f 6f 09 c4 53 57 8b 9e 22 95 fa bc 38 eb 7b 4b ab 1a 59 b3 3b 3f b9 f3 61 39 7b 68 c6 34 b6 b1 cf 19 fc 50 0f 4d ad e7 e6 fe 1d 74 bb c9 38 ff 00 d2 Data Ascii: vN^U[1bf;gre0ZVX8I+i\X-bxWOUu]v6.,q!8ru>nkdF$x5P9ZKipX9_8\\|)YM]:om!8[J1M/;raoSW"8{KY;?a9{h4PMt8
2022-03-15 16:08:15 UTC	7352	IN	Data Raw: ba 6b b5 2e b3 e1 2b 17 f5 56 6c 1c 71 b7 40 ad 6c 2f 4c 66 6a 06 55 ff 00 98 10 51 a4 ad 8d fc 3a cd 99 5d 78 66 e4 f7 a6 e7 94 08 9f 2a 42 a2 ae 55 98 95 04 9a 96 b3 c3 ab cb ab fc 18 50 ee 9b cc 59 84 b4 71 d6 59 24 b9 b8 50 70 3e 5f aa ba e9 35 ae 77 68 84 13 27 32 e4 b0 cb 24 ad 51 1a fd 24 f0 03 5a f3 23 3e b2 db 7b 53 f4 4f 71 de 62 ef 65 8f c8 c3 1b 01 73 82 59 cf 99 63 8f c4 da ba 9b 7e 93 5e 89 a5 ab 4d d7 db bb 1e 13 3e 36 cf b7 4f 29 12 08 52 49 1a b7 9b 03 3d aa 3f 98 a5 5f 5c bd ed f6 e9 e6 39 b6 76 cc bd d2 62 e4 5a 91 43 5e 1f b3 5e ad 76 70 db 55 e7 b3 fd c9 b8 fb 72 6b 71 a5 26 27 60 59 58 5c b5 5e 9e 56 f8 b5 6e 93 6e c9 b5 8b 9f 72 60 64 6e 26 6d d8 a9 53 33 5d e0 6b 53 e5 52 da e5 35 c7 0e 99 ca 84 6c fb ae 36 1b 24 37 f6 24 37 3d 28 Data Ascii: k.+Vlq@l/LfjUQ:]xf*BUPYqY$Pp>_5wh'2$Q$Z#>{SOqbesYc~^M>6O)RI=?_\9vbZC^^vpUrkq&'`YX\^Vnnr`dn&mS3]kSR5l6$7$7=(
2022-03-15 16:08:15 UTC	7368	IN	Data Raw: a5 88 e4 06 3f 5f ed ae b9 58 eb 2b ff d4 e3 d3 61 9c 8f c5 ad 38 b3 7f f8 f5 e5 e9 f4 71 94 3c b8 6c c8 4b 4f 02 00 b4 f5 71 d5 9c 97 b4 9c ac a3 25 04 bc 02 71 af d6 75 89 ae 3a 6a d5 8e 34 88 d1 d1 48 62 a3 81 ff 00 e3 a5 d4 95 57 b8 90 8c 19 48 62 47 1a 7e df 13 a6 b1 29 d9 f2 3b d4 8e 22 49 60 2b 5d 74 9a a5 d8 fe 66 39 91 79 08 2c 05 a4 0f 0a ea cd 59 b5 07 15 52 09 0f 77 a0 0f ed d6 b1 94 79 9b 03 e6 97 0f 45 3e 1f d9 ab 86 4f ed ae cc ed 14 6b ca 45 b7 1f 29 fa f5 ac 21 60 8e 37 96 53 99 21 66 34 11 85 14 ad 35 64 10 b3 f2 03 48 89 0a 94 11 02 38 1f db ac e1 51 5f 3b 22 62 ca 18 d8 7c 47 fd ff 00 d9 ad 61 8c ae f6 28 b1 5d 54 cf 2a c2 d2 5c b5 90 54 05 a1 ba 4f af 97 ca aa bc da 5b 8e 96 3a 97 e9 8f e9 be 1e 5e 41 c5 97 21 a4 89 11 25 e9 a2 30 73 Data Ascii: ?_X+a8q<lKOq%qu:j4HbWHbG~);"I`+]tf9y,YRwyE>OkE)!`7S!f45dH8Q_;"b\|Ga(]T*\TO[:^A!%0s
2022-03-15 16:08:15 UTC	7375	IN	Data Raw: d3 6e b9 d0 e1 41 c1 e6 60 80 9f 0a 93 4a eb 17 7c 72 dc d7 3c 3e 8c f6 7f b0 bf a0 60 9c 4c 36 51 9b 52 24 97 8f 12 47 82 eb e7 ef fa dd ab d5 ae 93 55 de 7b e4 ed f8 71 2e 03 46 72 63 56 08 cc 6d b9 f8 07 20 1f 56 b9 36 c0 ed 7b be f3 b7 ce d3 6e 5f 2f f3 8c b1 c7 21 70 59 41 2c cd 24 60 9b 4d 7a 2e d7 4b 27 c2 4a b4 f6 76 d1 8b b7 e2 cf 9f b9 cb 34 8f 3b b0 96 32 2a e5 89 b9 6d 61 cf d2 ab a9 b6 d9 49 30 48 12 59 52 9b a4 69 08 7c 8f 90 b3 1a 05 55 14 56 b7 cd 2b dd cd 6e b1 67 d3 72 b6 1b 36 cf 1e c9 86 53 18 a1 dc 79 55 00 02 8c a1 87 3a c7 f0 df ae 9f 0e 59 e7 f8 44 c3 c8 ce da e9 9d 95 90 b3 c3 0c 92 21 25 40 2e e7 97 b3 18 5f 32 dd 6d de 84 bb 57 ae 4e f8 78 f7 16 56 3e dd 9b 8b 06 eb 21 8f f3 0c 92 23 03 40 64 ad b6 fa 6d 81 7a 17 e2 d3 16 99 8c Data Ascii: nA`J\|r<>`L6QR$GU{q.FrcVm V6{n_/!pYA,$`Mz.K'Jv4;2*maI0HYRi\|UV+ngr6SyU:YD!%@._2mWNxV>!#@dmz

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.3	49938	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:17 UTC	7377	OUT	GET /download?plat=win HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
2022-03-15 16:08:17 UTC	7379	IN	HTTP/1.1 302 Found Cache-Control: no-cache,no-cache, no-store Content-Security-Policy: sandbox Location: https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:08:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 407 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: aaaae4235ded4bcea74983d9489024b7 Connection: close
2022-03-15 16:08:17 UTC	7380	IN	Data Raw: 33 30 32 20 46 6f 75 6e 64 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 73 3a 2f 2f 64 6c 2d 77 65 62 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 69 6e 73 74 61 6c 6c 65 72 3f 61 75 74 68 65 6e 74 69 63 6f 64 65 5f 73 69 67 6e 3d 54 72 75 65 26 62 75 69 6c 64 5f 6e 6f 3d 31 34 33 2e 34 2e 34 31 36 31 26 6a 75 6e 6f 3d 54 72 75 65 26 6a 75 6e 6f 5f 75 73 65 5f 70 72 6f 67 72 61 6d 5f 66 69 6c 65 73 3d 54 72 75 65 26 70 6c 61 74 3d 77 69 6e 26 74 61 67 3d 65 79 4a 55 51 55 64 54 49 6a 6f 69 5a 55 70 35 63 6c 5a 70 63 45 39 4d 55 7a 64 50 65 6b 30 74 54 48 6f 77 65 46 4a 7a 62 45 6c 33 54 6c 52 42 4d 6b 34 33 51 7a 42 4f 52 45 30 77 54 56 52 4a 4d 55 35 4d 54 58 64 4f 65 6d 4d 77 54 58 70 6a 4d 45 35 69 55 54 42 Data Ascii: 302 FoundThe resource was found at https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTB

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.3	49940	162.125.65.15	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:18 UTC	7380	OUT	GET /installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A HTTP/1.1 Host: dl-web.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
2022-03-15 16:08:18 UTC	7382	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=0 Content-Disposition: attachment; filename=DropboxInstaller.exe Content-Security-Policy: sandbox Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 72 X-Webkit-Csp: sandbox Content-Type: application/x-msdos-program Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:08:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c6927e6390734bb99922232fa4c4be2e Connection: close Transfer-Encoding: chunked
2022-03-15 16:08:18 UTC	7383	IN	Data Raw: 34 30 30 30 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4c f9 68 83 08 98 06 d0 08 98 06 d0 08 98 06 d0 01 e0 93 d0 18 98 06 d0 01 e0 85 d0 47 98 06 d0 01 e0 82 d0 2d 98 06 d0 01 e0 8c d0 0e 98 06 d0 2f 5e 7d d0 03 98 06 d0 08 98 07 d0 7f 98 06 d0 16 ca 92 d0 09 98 06 d0 08 98 91 d0 1d 98 06 d0 01 e0 97 d0 09 98 06 d0 52 69 63 68 08 98 06 d0 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 71 e0 5c 61 00 00 00 00 00 Data Ascii: 4000MZ@!L!This program cannot be run in DOS mode.$LhG-/^}RichPELq\a
2022-03-15 16:08:18 UTC	7399	IN	Data Raw: 83 3d 10 19 41 00 0d 0a Data Ascii: =A
2022-03-15 16:08:18 UTC	7399	IN	Data Raw: 34 30 30 30 0d 0a 00 74 19 68 10 19 41 00 e8 d3 1a 00 00 59 85 c0 74 0a ff 75 08 ff 15 10 19 41 00 59 e8 0a 1a 00 00 68 dc d1 40 00 68 c8 d1 40 00 e8 a1 ff ff ff 59 59 85 c0 75 42 68 c6 58 40 00 e8 d4 19 00 00 b8 b4 d1 40 00 c7 04 24 c4 d1 40 00 e8 63 ff ff ff 83 3d 14 19 41 00 00 59 74 1b 68 14 19 41 00 e8 7b 1a 00 00 59 85 c0 74 0c 6a 00 6a 02 6a 00 ff 15 14 19 41 00 33 c0 5d c3 6a 18 68 88 ed 40 00 e8 36 12 00 00 6a 08 e8 7b 16 00 00 59 83 65 fc 00 33 db 43 39 1d fc 0c 41 00 0f 84 c5 00 00 00 89 1d f8 0c 41 00 8a 45 10 a2 f4 0c 41 00 83 7d 0c 00 0f 85 9d 00 00 00 ff 35 08 19 41 00 e8 a3 0c 00 00 59 8b f8 89 7d d8 85 ff 74 78 ff 35 04 19 41 00 e8 8e 0c 00 00 59 8b f0 89 75 dc 89 7d e4 89 75 e0 83 ee 04 89 75 dc 3b f7 72 57 e8 6a 0c 00 00 39 06 74 ed 3b Data Ascii: 4000thAYtuAYh@h@YYuBhX@@$@c=AYthA{YtjjjA3]jh@6j{Ye3C9AAEA}5AY}tx5AYu}uu;rWj9t;
2022-03-15 16:08:18 UTC	7415	IN	Data Raw: 08 33 ff 3b df 0f 0d 0a Data Ascii: 3;
2022-03-15 16:08:18 UTC	7415	IN	Data Raw: 34 30 30 30 0d 0a 95 c0 3b c7 75 1d e8 cf d8 ff ff c7 00 16 00 00 00 57 57 57 57 57 e8 57 d8 ff ff 83 c4 14 83 c8 ff eb 53 83 3d e4 17 41 00 03 75 38 6a 04 e8 d5 d6 ff ff 59 89 7d fc 53 e8 dd f1 ff ff 59 89 45 e0 3b c7 74 0b 8b 73 fc 83 ee 09 89 75 e4 eb 03 8b 75 e4 c7 45 fc fe ff ff ff e8 25 00 00 00 39 7d e0 75 10 53 57 ff 35 34 11 41 00 ff 15 cc d0 40 00 8b f0 8b c6 e8 86 d2 ff ff c3 33 ff 8b 5d 08 8b 75 e4 6a 04 e8 a3 d5 ff ff 59 c3 6a 02 e8 a2 be ff ff 59 c3 8b ff 55 8b ec 8b 45 08 85 c0 74 12 83 e8 08 81 38 dd dd 00 00 75 07 50 e8 70 e9 ff ff 59 5d c3 8b ff 55 8b ec 83 ec 14 a1 f8 09 41 00 33 c5 89 45 fc 53 56 33 db 57 8b f1 39 1d 1c 13 41 00 75 38 53 53 33 ff 47 57 68 d4 d9 40 00 68 00 01 00 00 53 ff 15 dc d0 40 00 85 c0 74 08 89 3d 1c 13 41 00 eb Data Ascii: 4000;uWWWWWWS=Au8jY}SYE;tsuuE%9}uSW54A@3]ujYjYUEt8uPpY]UA3ESV3W9Au8SS3GWh@hS@t=A
2022-03-15 16:08:18 UTC	7431	IN	Data Raw: 00 00 00 00 00 00 0d 0a Data Ascii:
2022-03-15 16:08:18 UTC	7431	IN	Data Raw: 34 30 30 30 0d 0a 34 f7 00 00 22 f7 00 00 0c f7 00 00 44 f7 00 00 00 00 00 00 0e f3 00 00 20 f3 00 00 2e f3 00 00 3a f3 00 00 4a f3 00 00 60 f3 00 00 7a f3 00 00 92 f3 00 00 ac f3 00 00 c2 f3 00 00 d2 f3 00 00 ec f3 00 00 fe f3 00 00 0c f4 00 00 24 f4 00 00 32 f4 00 00 3e f4 00 00 4c f4 00 00 56 f4 00 00 6e f4 00 00 7e f4 00 00 94 f4 00 00 ac f4 00 00 ba f4 00 00 c8 f4 00 00 d6 f4 00 00 e2 f4 00 00 fc f4 00 00 0c f5 00 00 22 f5 00 00 3c f5 00 00 54 f5 00 00 6c f5 00 00 06 f3 00 00 94 f5 00 00 b0 f5 00 00 c4 f5 00 00 d4 f5 00 00 fc f5 00 00 08 f6 00 00 12 f6 00 00 1e f6 00 00 30 f6 00 00 3c f6 00 00 4c f6 00 00 5a f6 00 00 66 f6 00 00 72 f6 00 00 84 f6 00 00 94 f6 00 00 aa f6 00 00 ba f6 00 00 cc f6 00 00 e8 f9 00 00 cc f9 00 00 f2 f2 00 00 d4 f2 00 00 c2 Data Ascii: 40004"D .:J`z$2>LVn~"<Tl0<LZfr
2022-03-15 16:08:18 UTC	7447	IN	Data Raw: 99 ef 0e 7a 69 4e 0d 0a Data Ascii: ziN
2022-03-15 16:08:18 UTC	7447	IN	Data Raw: 34 30 30 30 0d 0a db 46 6b 9d 97 5c a7 17 b6 ca 9a a8 13 a2 7f 73 76 94 ce 93 60 a9 2a cb f3 04 3f 8a 7e e8 59 0e 9c 99 c6 7f a2 4b 60 6d 27 b9 e8 cc 59 7f 23 44 8b da 35 c5 bf c3 f6 bb 99 f5 66 ea b5 f5 1d 1e d9 c2 7c 84 f7 74 bf 74 1a 10 e8 05 a5 f0 f6 ea 8a 38 70 c0 23 cc eb 20 fc 04 47 c7 db 79 dc af 23 a1 95 37 21 c5 2a 02 7f 15 de 02 d4 ce dd 36 1d 07 d5 85 29 4f 91 00 28 ec aa 7b ab 7f 82 02 97 6c 95 cc 4f 86 c1 13 97 67 cd da 2e d5 e9 e9 6f 19 12 cd 29 5d a8 3b 10 f8 c4 c8 d1 49 b5 4f c5 60 b1 f7 bd 38 5b 56 ba af c6 e8 f8 f5 78 2b 27 3f d5 37 70 36 45 3a 61 ed 6f de d1 0e 80 f0 65 f9 ed 38 91 ff 0f 4f 07 1d f5 e8 51 97 26 30 df 32 ec b8 fb 30 65 a8 60 58 c1 d7 5a ff ce fe f9 05 48 9b c1 7a 3d c5 8e 50 37 97 79 ba 8c 8c 94 3e 20 a0 a3 b1 4d d1 f5 Data Ascii: 4000Fk\sv`?~YK`m'Y#D5f\|tt8p# Gy#7!6)O({lOg.o)];IO`8[Vx+'?7p6E:aoe8OQ&020e`XZHz=P7y> M
2022-03-15 16:08:18 UTC	7463	IN	Data Raw: 20 73 25 0a aa 5a 0d 0a Data Ascii: s%Z
2022-03-15 16:08:18 UTC	7463	IN	Data Raw: 34 30 30 30 0d 0a 8d 5c 1a b9 28 a1 99 02 2b 9a c8 e7 ec b4 c0 f1 81 df 77 39 a4 96 1d 19 c3 94 37 e6 fb 93 64 63 3d da fb d4 94 75 36 ca f4 a7 25 b1 bc 80 62 8a 8f d2 70 b0 e6 c7 72 c3 cf 0a 7a b4 6e 5d 14 1b bc 45 7b a0 94 08 e5 f7 a9 18 a7 d0 bf 99 fa 14 67 75 82 af 42 0a 20 db 7f de 46 09 f3 77 ba 59 9d 39 cd 17 8c af 97 07 9d a4 09 4f 98 a9 fb 58 88 ed 2e 47 77 d5 98 71 23 c6 e9 d4 67 94 7d 4d ce 66 1b 7b d5 51 0a f5 3d 74 a1 20 e1 d8 06 7b c4 d9 06 e2 06 ca e8 0b ef 76 bf f6 60 00 39 da ca f9 9e 2a 80 75 d6 c1 e5 90 f1 86 f1 48 72 6a d6 d0 bd 55 61 e7 ce 38 2b 4c 42 4d 2b 63 15 c5 7e 60 37 ad f6 a3 ac 09 9a b1 39 8c 19 b2 61 2e 72 90 3c 28 49 58 41 a3 b1 96 ac ec be bd f6 e9 f6 ed 58 25 97 92 68 a0 2f 5d 78 44 88 97 ac 0f 25 87 8d 01 61 24 93 e0 25 Data Ascii: 4000\(+w97dc=u6%bprzn]E{guB FwY9OX.Gwq#g}Mf{Q=t {v`9*uHrjUa8+LBM+c~`79a.r<(IXAX%h/]xD%a$%
2022-03-15 16:08:18 UTC	7479	IN	Data Raw: 2f 21 af 06 c6 fc 0d 0a Data Ascii: /!
2022-03-15 16:08:18 UTC	7479	IN	Data Raw: 34 30 30 30 0d 0a 1f 05 a2 d7 d2 75 89 b2 19 3c 5d e3 7a 07 e4 f3 0e c7 9e 9d d3 c0 93 ab 85 0e ca ff d9 9c 89 e4 82 7a bd d6 1a fe df 31 f6 52 f0 e7 be 7e 62 6e 35 fc 66 14 79 da 98 dc ab 4c 26 1b 3f 1a 72 8d 0a 65 7c 00 93 d8 a2 6e 7f 50 40 65 c9 e9 e3 45 c3 bc fa ca 19 2b 1f 54 9a 97 46 cd b0 98 03 1f 6c 22 6f 1c fa 1b b4 cd d8 2f cf 95 0d 9d c6 d6 2c a0 c7 c7 6f 41 61 b6 ad af a7 d3 8d f3 03 66 93 5e ca 82 5c e5 ca 11 cd ba 59 a5 40 3a 91 24 ae c9 b6 8e 01 6f a1 f0 d2 41 61 a3 f7 a2 98 2d fe 64 89 41 5b 11 5c 80 d2 9b f2 b6 07 71 d6 9b 21 db 0d a6 20 5e 87 3c b7 6d 6b 36 18 ff 07 01 a4 78 35 53 b4 e0 c8 6e fb 38 79 b5 38 07 d8 c2 c5 b6 4e 85 b0 b6 14 c7 92 11 a0 5f b0 40 bf 98 c7 c3 b0 85 99 d0 38 d7 a5 05 05 05 e6 c2 a1 b7 91 48 e6 f4 c7 82 ff d8 f7 Data Ascii: 4000u<]zz1R~bn5fyL&?re\|nP@eE+TFl"o/,oAaf^\Y@:$oAa-dA[\q! ^<mk6x5Sn8y8N_@8H
2022-03-15 16:08:18 UTC	7495	IN	Data Raw: 00 ce 0f f0 a2 2e 0d 0a Data Ascii: .
2022-03-15 16:08:18 UTC	7495	IN	Data Raw: 34 30 30 30 0d 0a 37 eb fe c9 cd 07 e0 cf 46 e3 bb 76 d8 22 03 b2 92 61 12 60 6a 50 76 11 9d 18 7d 1e 0d 56 e7 fa 4d 0f 0c 65 ff 3d e0 12 d5 0a 47 18 80 d6 e1 d7 db c9 ba 88 b6 b8 96 f3 df d3 06 e8 6e 4e 95 0d 0f 53 84 92 6f 18 8f fe a4 e6 a1 b8 43 ab 97 e3 1e ff 5f ef a1 2e f7 70 b6 9b 52 76 4b 57 ac ef b4 ac 7b bf 9e 76 35 93 0d be 14 e7 1e 55 7f 24 a7 12 7e c6 bf 95 5d 80 7b fa 20 6e a5 d9 12 72 a8 26 4c 86 ef 6b 3d bf c6 b6 49 42 46 58 7c aa cd 6b 6a 3b 3d 05 63 6a 16 50 24 e4 6e 48 56 1c 10 2b ca cc 4b 39 a6 8d 2b bc 28 95 97 92 4a 44 a3 58 7b 04 44 91 1c cd fc 58 05 ee db 1d 0b 98 c9 8c 1e 80 2e 3c 31 0e 5b 66 ee 4b f6 bd b2 45 84 1f c1 80 67 3b 0d ee 9b 2f 45 d9 3d 5a 50 34 68 7c cb 32 0e 61 28 fa bb 91 ae 64 21 11 e3 90 a7 56 97 1f 38 cc 19 0f 48 Data Ascii: 40007Fv"a`jPv}VMe=GnNSoC_.pRvKW{v5U$~]{ nr&Lk=IBFX\|kj;=cjP$nHV+K9+(JDX{DX.<1[fKEg;/E=ZP4h\|2a(d!V8H
2022-03-15 16:08:18 UTC	7511	IN	Data Raw: a0 21 7b b1 63 04 0d 0a Data Ascii: !{c
2022-03-15 16:08:18 UTC	7511	IN	Data Raw: 34 30 30 30 0d 0a 74 5c ee e5 28 21 10 90 83 bd 97 88 ad 59 27 4b 8f 3d a7 48 2c 78 9f 46 d7 9d 10 c3 82 3d 4f a5 97 8f 4a 80 bd 10 f8 aa f2 d5 61 a4 9d 00 90 ea ce 58 ce 56 42 5e 4c dc ba 6d 00 24 47 e5 e0 1e f1 64 c2 9b fc 85 7b d9 76 e9 ef 11 c9 74 6b 70 6e b3 d5 fb ec fa 9d 8a 12 9b 79 63 06 07 a9 33 f5 08 e2 06 d9 1d f4 bd f6 0c ac 78 b5 f3 aa 2b 99 94 d2 c0 d2 71 68 49 3f 55 b7 44 03 7a b8 90 fd aa ac 7c 41 fe 20 be 10 39 b2 bb ce 50 e1 13 e9 c5 2f 06 ed f5 d5 c4 1f c1 36 ec bb 9d 82 d5 aa 97 34 b7 2d cb ae 7a 85 42 00 21 6e 48 17 2e 85 7f cc c7 d7 9a 31 b7 1a f9 ed 7a 69 a7 34 dd 2d 87 53 b5 7f fd 94 7a 95 38 37 3e 7b b9 2a 28 3a ff e6 2e 1f d6 4a 6e a3 9a 77 71 15 cd 22 21 a6 4b 4c f9 9b 34 e8 c0 7a 0f 97 69 d6 c5 78 c9 37 12 5e a2 0d 21 ce 16 bf Data Ascii: 4000t\(!Y'K=H,xF=OJaXVB^Lm$Gd{vtkpnyc3x+qhI?UDz\|A 9P/64-zB!nH.1zi4-Sz87>{*(:.Jnwq"!KL4zix7^!
2022-03-15 16:08:18 UTC	7527	IN	Data Raw: ba b6 18 37 c5 9a 0d 0a Data Ascii: 7
2022-03-15 16:08:18 UTC	7527	IN	Data Raw: 34 30 30 30 0d 0a bd 2b 8b 03 3a 9e b2 ab 94 79 d1 74 bc ae ba 12 9b c4 80 f3 a0 2a 65 e1 38 de a3 f1 0e 98 d2 43 08 e5 62 95 24 21 a6 96 d7 4d aa 19 45 05 2f d1 62 18 75 e5 91 1b b7 35 27 7a de 67 31 94 87 32 7b dc 5d df 22 bb 2f b1 74 2d 5d 3c 90 bb fe 2c f2 32 8e 11 4c 7f 36 67 d2 33 a7 b1 a3 8e eb 4e bb 42 2d 16 bb 99 c2 66 0f 7e e6 bd be 57 23 6d 03 97 a7 55 f3 3b a3 09 bb 8d 2e 8c d5 95 52 2f ad 0d c7 74 eb b4 cf 52 5a 7b 65 08 a8 64 cd 2c 66 48 97 d4 64 48 21 80 6b e6 eb 68 dc 64 bf 63 66 5f e2 b7 ec 8d a7 4b 71 77 77 e9 ba 64 0a 1b 5e 6f 0c ac 9c 56 6d fa 95 45 cf fa 68 7f cd 7e 66 cb 19 6b dc d4 6e e1 35 a6 51 a3 1a 7e f3 b1 b0 77 fd 53 dd 9d b6 ff e3 52 4d 44 bd ac 3f 6f 04 c1 e3 87 6b f5 91 4e 79 dc f4 43 66 63 1c 34 b1 33 f4 13 b2 bb 4b 47 a4 Data Ascii: 4000+:yt*e8Cb$!ME/bu5'zg12{]"/t-]<,2L6g3NB-f~W#mU;.R/tRZ{ed,fHdH!khdcf_Kqwwd^oVmEh~fkn5Q~wSRMD?okNyCfc43KG
2022-03-15 16:08:18 UTC	7543	IN	Data Raw: b5 cf ee 5b 93 20 0d 0a Data Ascii: [
2022-03-15 16:08:18 UTC	7543	IN	Data Raw: 34 30 30 30 0d 0a 77 f3 20 df 55 06 b2 bf e2 e9 46 c3 f6 5d 8c cf 5a 81 a8 d3 5f 47 40 6c ab 6c f1 8f ef 52 9d ac 28 d3 6f a4 cf f7 46 80 d7 cc 82 fe e2 1f 6a 7f af 45 eb 69 31 66 e8 e8 6d 50 c2 d9 ed 54 66 4b bb 82 b5 73 8b 2a 76 15 2b 79 62 8b fd cf 49 4f cd e9 ce 51 02 44 32 5b 64 ce 05 32 52 d3 46 86 89 1e 23 24 de c1 1e 7c a7 81 60 92 d6 80 d8 6a a9 90 13 88 ea 87 43 67 f3 01 22 ae 07 72 6a 36 65 cb 45 41 74 3d 1c 99 67 91 17 7a 64 29 b2 fc 5e 07 17 db c9 0c 43 45 fd 1a f3 0f ac ca dd f7 58 f8 94 37 12 43 b4 83 26 dc 55 a9 f8 ef e8 2d 91 85 c0 79 34 d6 5b 0d 09 88 0c 0b 8a 5d 05 a3 d5 6e dd 61 b2 c3 44 29 0f b1 a0 f7 40 dd d3 96 e8 d9 82 f3 fc 69 84 e3 9e 03 ac 52 81 40 95 7f 6e 29 2f 50 40 06 70 93 90 84 6b cd 5a 94 06 bf cf 6a 6a ca 61 c6 c4 14 8a Data Ascii: 4000w UF]Z_G@llR(oFjEi1fmPTfKs*v+ybIOQD2[d2RF#$\|`jCg"rj6eEAt=gzd)^CEX7C&U-y4[]naD)@iR@n)/P@pkZjja
2022-03-15 16:08:18 UTC	7559	IN	Data Raw: ad 4e fa 64 ad 1f 0d 0a Data Ascii: Nd
2022-03-15 16:08:18 UTC	7559	IN	Data Raw: 34 30 30 30 0d 0a 47 5b 37 96 a6 81 73 56 50 7c c4 23 e4 28 20 e7 45 12 e7 5b ba 80 e0 c8 ee 56 f6 28 bc 3a 1f 24 d9 c0 2a 33 87 a6 6f 2e 22 6a 93 d1 43 e3 5b f2 5e b5 1e 37 f2 e7 1c 16 c3 be 4e cc 9c 1a d3 b7 5f f6 e4 96 e1 0e 99 f3 bb 8f 36 be 75 89 5f 9b b8 71 a3 28 3f 11 34 29 6d 17 b1 d2 51 fd 57 ad 94 5f d7 35 8f ec b6 a8 c3 1f de b3 0c df 28 86 b2 da a8 a5 6b d1 cb af d6 ad da 47 e7 ed 05 51 f4 0a 79 cd f6 98 b9 23 68 83 4d aa 2e 0d 59 c3 eb 5a 3f 5f 4f 8e 40 19 fd 3f 1f 6f 6a d1 75 89 8b b4 46 f2 43 5a 02 19 c9 eb 5c fd a4 37 e7 b2 f7 b7 2e ec 5c 39 ea 22 61 d9 a1 33 f8 f6 d6 53 fe c7 98 71 28 94 05 2c 71 fe 7f e2 c7 a2 3d 2e 2b 23 25 ff 8f 61 51 f1 a5 bf a6 47 b9 6b a1 d0 b2 0e 48 44 b3 97 d5 2d 19 4f fa 57 ad 81 7d 9d 25 e3 61 13 ae 5e 91 d9 c1 Data Ascii: 4000G[7sVP\|#( E[V(:$*3o."jC[^7N_6u_q(?4)mQW_5(kGQy#hM.YZ?_O@?ojuFCZ\7.\9"a3Sq(,q=.+#%aQGkHD-OW}%a^
2022-03-15 16:08:18 UTC	7575	IN	Data Raw: 43 02 ab 1c 66 13 0d 0a Data Ascii: Cf
2022-03-15 16:08:18 UTC	7575	IN	Data Raw: 34 30 30 30 0d 0a 1f 35 e0 7a cd 18 9a c2 e5 c2 de 57 48 e2 39 8e d1 c5 5a a0 62 63 c9 df 0f bf 2a 06 71 a5 7a c8 16 3f 78 fc b3 e6 51 79 94 04 8a a5 f5 59 bf 69 89 d1 e1 d1 e5 f8 bb c5 96 f8 90 5a 2f 67 bf e0 dc 11 75 2f e7 37 43 5a c4 e6 4d 44 92 99 f2 6d b2 7d 4c 3a 87 76 57 e8 24 a0 14 1e 24 4a 68 70 33 03 02 c2 b1 5e ed 2b 18 47 ea dd 14 73 e8 f0 0d 47 e1 97 c6 7c b7 43 96 88 fa b9 2b 7f e1 81 c2 d7 49 6f 1f 59 cb fe a8 5d cb 80 53 01 5a 96 ca aa 75 27 69 2d 5d 06 f1 82 b7 9e b7 5d 22 63 a0 b5 6b 72 f8 70 50 51 72 76 0b c2 41 c2 bb 46 23 e7 c5 48 34 da 8f 0f 2b 19 87 3e 00 1b 4f 2a 09 02 25 43 c6 87 61 f0 f7 e3 fa 85 59 35 c2 cf b2 2f 57 76 32 c6 57 98 a5 c6 e7 25 6a 0c 21 dd 95 0f 48 f4 64 a8 aa a2 4f c6 c0 fa 30 32 a0 d8 67 80 87 20 a2 76 6f c6 30 Data Ascii: 40005zWH9Zbcqz?xQyYiZ/gu/7CZMDm}L:vW$$Jhp3^+GsG\|C+IoY]SZu'i-]]"ckrpPQrvAF#H4+>O%CaY5/Wv2W%j!HdO02g vo0
2022-03-15 16:08:18 UTC	7591	IN	Data Raw: 31 05 f3 37 db 21 0d 0a Data Ascii: 17!
2022-03-15 16:08:18 UTC	7591	IN	Data Raw: 34 30 30 30 0d 0a fd 5d 64 0e e4 c0 8b 07 ee 1d 31 4c 7e 56 22 80 1e 71 62 4d 98 5c e4 bb 4b fb 5c b4 87 44 12 07 b2 ae c1 e0 5c d3 3c 16 83 4e f5 22 22 f5 a3 51 f9 6a 9d 9f dd 92 bf 60 7e dc 03 b8 c1 79 65 f5 fa ae 5e 22 cc f0 1a 54 f3 31 3c a8 3d a4 e6 5b 09 25 52 62 f9 10 e9 3c ce 36 2c 87 5f 56 6a 5d a2 8d d8 6c 38 44 a3 ed 62 fc f6 6a 8f 0f 47 91 6d 21 ad fe 7e 9c cf 34 68 f1 71 02 3d 9d 24 73 db 83 8c fa 15 47 d6 2d f3 43 8a 3e 88 20 64 ec c4 82 89 2d 4a 63 c2 c2 45 cf 8f 23 a5 53 47 e6 33 e7 76 1a d3 7b a1 86 06 4c 32 a4 6e 7f 9a 9e e9 a8 93 c7 05 7b 84 19 ed 72 41 74 8c 85 19 49 ba 2d 97 62 97 4d ec 64 a8 2b dc fc 01 a9 62 e5 55 e1 b0 52 fa 16 09 b7 ca e8 2b 8e e5 d8 79 94 2c a3 f7 7e 22 4d 8a 70 41 4d 2d bf 0a ad a1 b4 f1 c6 b6 e2 53 00 c1 0b 35 Data Ascii: 4000]d1L~V"qbM\K\D\<N""Qj`~ye^"T1<=[%Rb<6,_Vj]l8DbjGm!~4hq=$sG-C> d-JcE#SG3v{L2n{rAtI-bMd+bUR+y,~"MpAM-S5
2022-03-15 16:08:18 UTC	7607	IN	Data Raw: be 1d 0a 8c 64 88 0d 0a Data Ascii: d
2022-03-15 16:08:18 UTC	7607	IN	Data Raw: 34 30 30 30 0d 0a 4d 21 d9 2b 99 85 36 b3 12 e3 3c 72 56 d3 96 37 25 c5 28 3d 6c 6a 01 dc d9 b9 17 3c 27 52 b1 e2 d0 96 9d 94 3d 33 95 c2 49 49 35 d7 99 65 a4 7b 5e c9 d3 69 8d ba 64 8f 25 6f 6c 40 91 f4 45 8b 3f 67 40 fc 05 8a 75 20 5b 9c 25 d6 fc a2 35 1c fa 74 c0 39 34 8c ea 51 4b db 48 23 13 dd 73 9e 9c d6 8c 7e 5d 30 cd e9 ca f9 d9 e3 ac c5 65 60 4f 4a 25 b0 bc 68 87 ff 9d 71 1d 9d f6 ff 73 29 4c 7a b5 3b 5a 1c c5 8b f1 4a 67 ed bb de 2b e5 f2 bc d6 44 38 3c 98 b9 e8 d8 da 8d f8 fd fa 44 1e 53 ca 3e f1 32 e5 e9 05 8c 62 48 67 33 e5 de 42 36 96 a9 6a c7 4b a1 a4 fb c4 89 83 a0 b6 e5 68 e2 2e 99 ce 0b 72 34 e4 f2 c0 4a 77 75 ce 7f 52 54 49 38 f4 3f ab ca 1a 8a df 6c c6 f5 66 b5 af 16 6c a4 02 e4 d6 9d 95 ab 22 c5 4d c1 30 d4 46 8c 6e 29 f5 6b ed b6 07 Data Ascii: 4000M!+6<rV7%(=lj<'R=3II5e{^id%ol@E?g@u [%5t94QKH#s~]0e`OJ%hqs)Lz;ZJg+D8<DS>2bHg3B6jKh.r4JwuRTI8?lfl"M0Fn)k
2022-03-15 16:08:18 UTC	7623	IN	Data Raw: c9 11 d6 f7 a0 25 0d 0a Data Ascii: %
2022-03-15 16:08:18 UTC	7623	IN	Data Raw: 34 30 30 30 0d 0a e1 53 de b7 cb 25 7f bf 0f 71 bd 95 c1 c6 2f ab 4e dc 45 8b df 8e 62 33 a1 5c c9 2c 27 86 e4 bd 1a 4c 1f 22 3c 05 1b b1 c7 66 8e b0 f7 6b 89 ec 2e 12 b7 b4 3b 6b ff c5 b9 d1 c8 d1 7a a7 1e c9 b6 91 60 b4 a0 c9 94 87 e4 e1 01 f9 ce 12 dd 4a 1a fa a6 b8 9e 34 f8 ab aa a2 ca cc 85 a1 46 86 af 4e 19 70 e5 c3 87 1d 07 6a 6c 70 b1 9d ac 61 1d 47 28 78 06 fe 5f a0 2a ba 42 f6 4b c6 65 1a d1 b7 be ac ab 40 9c cc fa be b8 5f 68 61 7b c1 e0 ea 2a b7 6b 80 e7 ad ca f3 7c 56 49 e6 08 c9 79 7a 7c 7e 2d e3 36 dc 90 48 2b 5e 04 f0 38 07 92 3c 3e dd ab 2e a6 79 4a 8c 7c 18 ff 6f 02 e8 a3 3c 9c 94 1d c6 e7 fa 9e 1e a7 a3 b4 7d 8d f7 ab 36 e1 bc 6b 8a 8e aa e4 93 28 de 1b 50 76 d0 e4 14 d5 d9 a2 33 46 b9 8e 73 5b f0 a3 e6 b7 9c 75 a2 f6 12 4a 4c 09 03 25 Data Ascii: 4000S%q/NEb3\,'L"<fk.;kz`J4FNpjlpaG(x_BKe@_ha{k\|VIyz\|~-6H+^8<>.yJ\|o<}6k(Pv3Fs[uJL%
2022-03-15 16:08:18 UTC	7639	IN	Data Raw: 31 36 ac 13 1c d8 0d 0a Data Ascii: 16
2022-03-15 16:08:18 UTC	7639	IN	Data Raw: 34 30 30 30 0d 0a cd f8 b3 dd 93 3e e0 c7 7e 9e d7 9f 53 fc 61 4d 76 19 a1 cb fe 70 2f c1 27 d8 b3 19 67 bd 01 31 66 5c 78 09 32 56 16 7c 9a d1 42 64 25 39 89 92 58 85 08 6c 1b 8c ad 24 02 6f b0 5c 61 49 01 b8 5d 4d 14 34 e4 62 1e b2 e4 2d a6 e4 a3 dd 7f 22 fc 38 a8 b5 7a 3b 7f c4 94 69 50 89 38 50 4a fe 8b 2a fb 79 b8 7d 7c da 5e 9c 33 a7 55 aa b6 12 05 30 fc 34 6f 41 82 5f 98 29 2a 10 71 71 fd 9c a3 e5 65 dd 2c e7 26 c7 e2 b7 30 a0 8c 62 f1 ca 71 a1 23 6b 4b c8 af 4f d3 5d 10 5f 13 55 73 df 1f 48 83 ca 8b d4 55 76 40 25 7d 52 3e 44 68 d8 33 20 c4 d8 62 57 be 6b f3 50 00 7e ba 73 57 7d 0e 76 51 a7 3d 30 8e 28 97 b6 ef e2 ef b9 99 86 93 37 8e b6 3b dc ec 94 24 5f 59 40 c6 4e 7d ad 1c ec 83 c6 54 3e 5e 31 bf 9f 54 bf fc 24 d3 b7 d9 75 c1 78 03 ac 7a 87 43 Data Ascii: 4000>~SaMvp/'g1f\x2V\|Bd%9Xl$o\aI]M4b-"8z;iP8PJy}\|^3U04oA_)qqe,&0bq#kKO]_UsHUv@%}R>Dh3 bWkP~sW}vQ=0(7;$_Y@N}T>^1T$uxzC
2022-03-15 16:08:18 UTC	7655	IN	Data Raw: 6d eb 08 92 18 59 0d 0a Data Ascii: mY
2022-03-15 16:08:18 UTC	7655	IN	Data Raw: 34 30 30 30 0d 0a 05 9a 6a db 8a b8 ca af 86 80 bb 37 2d 91 5b 6b 3b 9a 5e 5a 52 ee d7 88 e3 65 00 2a df b7 aa 0d 27 dc 9b 20 ae 17 b6 45 2d 0a 84 30 e6 e0 31 96 6b 89 7a ba d2 48 f6 70 08 f3 3d b9 16 c1 a6 9b b5 c3 ba 08 5f f8 0c a7 59 95 c6 0a fb fd c4 da f8 8c 8a b1 ac 3f 9d d4 f1 71 00 c3 74 96 49 02 d7 97 99 68 b4 5d d1 d9 6d b9 12 84 ed 21 f4 46 8e 81 8d f9 2a f4 11 41 28 73 15 f9 ac 37 66 96 d5 b7 3f 7b 20 1a a2 b7 5b b6 3d 86 3a be 61 b8 1e e5 e4 d3 d4 5d b4 d8 36 09 41 81 df 0c 2e 0f c5 56 d2 04 97 8f f8 21 0b a6 b0 32 b4 87 ee 3e 24 da 73 f7 59 bf a3 20 7a 8d d9 13 2f 16 c8 d2 a4 6b f3 cb c6 87 10 37 9b cd fc 45 18 16 df 79 13 1a c3 1b a5 83 19 91 21 c2 29 f4 3c 17 67 89 cc f0 22 e2 71 3c cc f1 55 38 50 05 fc fa a6 04 2f c8 b7 7c 6e bc c4 a1 bd Data Ascii: 4000j7-[k;^ZRe' E-01kzHp=_Y?qtIh]m!FA(s7f?{ [=:a]6A.V!2>$sY z/k7Ey!)<g"q<U8P/\|n
2022-03-15 16:08:18 UTC	7671	IN	Data Raw: f6 cb 63 57 7f 45 0d 0a Data Ascii: cWE
2022-03-15 16:08:18 UTC	7671	IN	Data Raw: 34 30 30 30 0d 0a 1e 55 c3 2a ff 47 7e 8c b2 7f f3 05 53 80 e7 67 90 54 80 4e 71 d5 a4 45 b2 4f 4e fc b2 b0 70 b5 00 9f 05 68 e0 bc 04 b0 6a a1 62 08 15 b5 90 94 c7 6a 91 ee e4 3f 1b 93 22 94 9d 0e be 16 4f b7 c0 5c 57 fa 43 f2 c0 69 00 e4 dd 8a ea 34 1b 5c 99 62 36 83 a5 68 ff 6f e6 00 a7 68 f7 71 64 42 c6 1c a1 be 4f 87 56 34 bb 8c ef 70 a1 3a 83 56 a1 78 44 6f bb ed 42 ec c2 04 77 88 23 f8 56 41 34 83 51 fd 8d c5 ae f9 41 82 98 49 f0 39 21 ab be 5d ea a3 00 31 64 8a f9 56 53 02 4e e2 28 4d 10 19 f9 d0 55 b5 c6 9f 46 2c 45 01 80 ba 46 b8 5c d2 fd 01 c6 6f b0 bd f8 38 52 50 0c 4f b5 1b d2 43 20 3d 26 6f 16 15 86 ef d0 89 49 28 d5 83 bf 52 7e ab dd bd f2 39 5e ed 0b d1 17 5e 0d fb 08 e0 bb 8b 15 4d 2b 75 39 14 e1 93 3e 51 c3 ee 3a 73 69 95 1c cd 66 21 3e Data Ascii: 4000U*G~SgTNqEONphjbj?"O\WCi4\b6hohqdBOV4p:VxDoBw#VA4QAI9!]1dVSN(MUF,EF\o8RPOC =&oI(R~9^^M+u9>Q:sif!>
2022-03-15 16:08:18 UTC	7687	IN	Data Raw: 19 54 4a 89 10 c2 0d 0a Data Ascii: TJ
2022-03-15 16:08:18 UTC	7687	IN	Data Raw: 34 30 30 30 0d 0a 38 ad f6 79 14 d3 d6 56 77 fd 9d a3 72 8f 05 31 f0 a4 41 44 61 cb c5 3d 81 06 f5 39 90 e6 4d f0 71 ce aa 98 c5 93 97 bc f9 4b 72 4c d8 96 79 50 ee 70 b2 47 08 99 78 1b be a3 43 48 2c 7d 27 48 23 a1 2f b3 bf 79 ae 2e 71 0c 95 30 46 12 92 53 8c 39 f4 1c 85 d8 5d 43 b0 19 8c 94 4c 86 0e 1d 0d ba cf 57 eb 40 8b 0c f4 17 1b 59 2b f3 95 d6 e4 ea b0 c0 62 35 c8 b5 bb bb 22 52 5c 64 94 6c a4 70 98 3e 12 85 08 5c 44 f3 27 11 a0 25 8f b7 19 3e 61 e4 bd ec 81 9e 7e 08 b9 f0 10 9e ef 8c be c7 28 ba 0c 6e 9e 8c 53 6d 7b 1c 92 aa e7 49 75 61 a0 f8 45 84 bc 4c c2 bd c1 e8 b9 84 68 95 d6 7f c1 50 4a b3 39 eb 6e c7 ea 53 cd 84 f6 08 7b 96 65 85 ca d7 67 ca eb 05 f8 f2 aa 75 57 00 22 19 35 fa ed e9 d1 ef df bb 37 1a 5a fd 56 b0 9d 36 98 58 58 85 1d 1d 82 Data Ascii: 40008yVwr1ADa=9MqKrLyPpGxCH,}'H#/y.q0FS9]CLW@Y+b5"R\dlp>\D'%>a~(nSm{IuaELhPJ9nS{eguW"57ZV6XX
2022-03-15 16:08:18 UTC	7703	IN	Data Raw: 25 2f 1a be 49 f9 0d 0a Data Ascii: %/I
2022-03-15 16:08:18 UTC	7703	IN	Data Raw: 34 30 30 30 0d 0a 4a f0 6f 90 21 69 93 3d ee 0c bb f8 65 9a f5 49 03 d7 2f f1 f9 e5 65 52 eb 02 a7 f3 3b 83 66 16 8d ee 77 1b 5d 38 c6 28 2f d2 a7 07 99 34 36 3c be 08 80 92 15 4c 64 58 7d 7e 90 3d 4c c2 a2 1f e2 b6 e1 b4 39 c0 58 79 3f 20 5d f9 4f 90 cf 00 4f e2 3c 7e a7 0f 64 18 6b f6 6f 69 3f 61 33 07 10 26 b1 bb ec dc f4 7a 24 40 ba 31 11 1c 45 53 46 b1 87 bb 5e 90 10 19 93 70 d9 40 4f fe c3 6b fe fc 3b 58 6e 92 47 00 e9 b3 f2 87 27 97 ce 20 82 6d 59 c8 18 53 d0 5c 16 9b 97 56 72 03 3f 13 be 0b 0d 45 0b 24 77 df 65 1d 55 e4 1f 92 d4 80 eb 7f 29 f7 ae 32 9c 76 86 f1 c7 eb 36 9e 04 4e ef 54 93 bc 74 c6 f9 92 75 d8 61 5a 6d ee 82 f9 ff be fa ee bd d0 b8 5c 6c 82 ba 95 1e 61 8a 60 7d be 98 c7 09 78 c6 9e 76 18 0f 85 06 fe 90 f0 70 cc 4d 86 01 bb 1a 30 53 Data Ascii: 4000Jo!i=eI/eR;fw]8(/46<LdX}~=L9Xy? ]OO<~dkoi?a3&z$@1ESF^p@Ok;XnG' mYS\Vr?E$weU)2v6NTtuaZm\la`}xvpM0S
2022-03-15 16:08:18 UTC	7719	IN	Data Raw: 99 cb da 59 09 f9 0d 0a Data Ascii: Y
2022-03-15 16:08:18 UTC	7719	IN	Data Raw: 34 30 30 30 0d 0a 91 2b 6b a2 40 c0 d3 b7 a8 0b dc 40 83 ee 8c c6 aa 17 8c af 7f e2 f0 d4 ee 7f 43 ae 3e 8d aa a0 3c 94 d1 37 fc 7b 53 e1 e2 74 a7 4d 6f 66 11 6c a9 d4 ea 5e d8 f6 d1 41 f1 bf 68 88 81 b8 bd 16 2b 79 32 ed ab b5 41 3a f7 4e 3c 77 f0 72 8c 8d 60 d8 70 39 47 db f3 45 37 64 ed b4 8c ff 1a 11 2f 2b a8 8d c6 4b aa e6 4b e0 44 0e df ad 41 eb 43 13 57 5e 79 48 ea b7 da df 07 5d 63 04 5c b6 4b a0 42 02 55 0e e6 2b 96 b6 9f 3c e1 ee f4 3f d0 7f 50 08 ff 8b b0 32 09 70 e5 3d 19 49 8f 69 bd e4 14 e7 e4 26 42 8c 69 34 26 54 fa b6 67 47 c6 c8 08 88 b8 06 ba 35 85 19 8c ac 19 a0 91 59 ab f3 8a 24 b3 5c 19 8e 1b 38 b2 f3 61 c1 df 7c ca 85 99 76 ff 1e 3e 3b 9f 0f bb 0b e2 15 9d f3 56 91 5f 9e 22 2a 6b 5c 37 08 8c 6f 4f e3 f6 83 41 bf aa cb bb 89 ca e6 82 Data Ascii: 4000+k@@C><7{StMofl^Ah+y2A:N<wr`p9GE7d/+KKDACW^yH]c\KBU+<?P2p=Ii&Bi4&TgG5Y$\8a\|v>;V_"*k\7oOA
2022-03-15 16:08:18 UTC	7735	IN	Data Raw: 46 9e 5d f2 f2 29 0d 0a Data Ascii: F])
2022-03-15 16:08:18 UTC	7735	IN	Data Raw: 34 30 30 30 0d 0a 23 fd f8 fd b1 db ce 8b c0 bf 35 7f ea c2 c9 29 85 1c 81 29 5b a5 fe 04 66 ca 17 19 fd c5 ab 3d af aa 41 32 3d 4c ea 39 3b e8 47 30 cd 41 a5 f5 2a af d4 b3 bc f1 03 1b b8 9e 2f 9e 96 d4 09 3d c9 92 1d cd c7 13 5e 14 53 89 b2 f7 5a b8 c9 2a fa b3 8f e7 bb 76 23 37 37 bf ce 5e 27 55 28 a7 38 c3 1b 0f f6 8e 0c 0b f9 3a ce 14 42 95 90 ee ab bb 4e d3 ab bd 17 ac 99 33 6f 0e 20 63 04 93 45 d6 f4 28 7a 5c f8 66 52 97 0c f9 80 54 b8 aa d8 28 67 a9 85 4e 2b 4e f5 71 d2 bc 4c 41 a7 c5 55 bb 22 fe b0 12 2a 4d 00 af 39 7c 61 28 86 75 32 52 7a c4 ba 14 36 59 cc 0b 9d 63 a0 6e c9 da 68 0f ec a8 65 5f ca 26 d9 34 db 26 9d 13 d7 9a 99 c1 33 7e d9 5f af 1a b6 3e e0 ac 8a 16 73 81 9a 09 e6 2d 3c e1 02 7b 9f 10 be a0 81 1b f5 e7 20 0f f3 68 e4 ae 76 b0 9f Data Ascii: 4000#5))[f=A2=L9;G0A/=^SZv#77^'U(8:BN3o cE(z\fRT(gN+NqLAU"*M9\|a(u2Rz6Ycnhe_&4&3~_>s-<{ hv
2022-03-15 16:08:18 UTC	7751	IN	Data Raw: 3d f5 28 29 ab 54 0d 0a Data Ascii: =()T
2022-03-15 16:08:18 UTC	7751	IN	Data Raw: 34 30 30 30 0d 0a 90 cf de 65 4f 0a 87 71 63 f8 df 57 6f f5 b2 d2 a2 ff 23 6b 58 f6 50 31 52 ea 93 b6 1d a9 18 07 3e 34 9f ba 78 9e db 4f 70 10 04 b7 55 94 8a 4a 24 87 de 53 0c 47 86 c0 41 7e c7 86 a4 2f 30 48 8e 88 88 ba 25 0b 11 15 84 8a f8 86 94 75 c7 8b 63 d0 fb bc f0 77 8f 1d fc 7a a7 5d 50 b8 dc f7 fa 80 f7 99 85 b6 2c 96 22 c3 df 7a a5 17 b4 a2 5f dc 11 88 de 59 10 9b eb 31 6e b1 1d fc 53 6b 01 16 ef 00 45 a6 f3 79 98 6d 10 74 78 52 e8 97 26 77 d2 e0 21 8f bc 44 da 9b 2c 3d 90 cb 12 9d da ae d0 a9 13 fc 48 4b 7a d8 1a 93 22 78 70 af 80 57 f7 c4 d6 d6 41 6e ba fb fd 1b 9c 28 74 ae 47 8d e7 97 26 2a 50 64 d1 7c 6d d2 a9 fc 6e 04 53 97 c0 ad c9 07 04 d5 45 2d 08 4e 45 ef df 66 c0 3a 45 cf a1 91 24 bd 56 e8 5b 4e 18 ca 63 c3 05 17 34 0b 81 71 52 cf 5a Data Ascii: 4000eOqcWo#kXP1R>4xOpUJ$SGA~/0H%ucwz]P,"z_Y1nSkEymtxR&w!D,=HKz"xpWAn(tG&*Pd\|mnSE-NEf:E$V[Nc4qRZ
2022-03-15 16:08:18 UTC	7767	IN	Data Raw: 52 92 51 cd 97 db 0d 0a Data Ascii: RQ
2022-03-15 16:08:18 UTC	7767	IN	Data Raw: 34 30 30 30 0d 0a 0b 25 eb 1d f8 ca 95 4e 0c f9 e3 02 93 e1 d9 1f e5 18 34 67 08 9d 96 24 63 2a 89 a1 ef 80 d2 df 16 cd 9d ff b0 3a f0 9a c9 cb 26 a6 5a 24 57 e4 95 87 80 c3 bf 9a 6d ad cf cd 40 6d 71 68 71 4a 11 81 ec 97 22 70 31 fc 1e ac 6f 44 d2 b0 b0 cb c7 ab bc 9f 57 94 ce ed df 67 b9 82 5b f6 ba 3c 83 1c c0 d6 df ce 9a ab 6b e9 95 56 c9 0d 1e c6 12 90 c7 13 d0 01 26 b3 79 fa 02 01 81 1b 29 55 9f 9d 9c 4a 76 49 79 10 7c 62 2d 28 a5 8e 2f 03 c6 50 ac 3a c0 64 55 dc 57 49 84 a1 62 c4 65 0c b4 95 1f fa 50 c3 72 9d 0f 9f e9 27 89 dd e5 1e 13 90 5e e1 78 01 77 ec 8d 8c 23 8c 43 e9 3a 68 15 7c 82 8f ff b7 f1 6b b6 31 d1 7b c5 5a d9 e4 46 0d c0 10 b4 5a 8d 2d bc 8a a3 69 2e e7 1c 10 cf 07 7b 43 7e 20 1d 77 20 3d e9 8f 8a 16 28 04 aa af 06 5e 36 f7 45 16 60 Data Ascii: 4000%N4g$c*:&Z$Wm@mqhqJ"p1oDWg[<kV&y)UJvIy\|b-(/P:dUWIbePr'^xw#C:h\|k1{ZFZ-i.{C~ w =(^6E`
2022-03-15 16:08:18 UTC	7783	IN	Data Raw: 8b 38 d0 c1 50 43 0d 0a Data Ascii: 8PC
2022-03-15 16:08:18 UTC	7783	IN	Data Raw: 34 30 30 30 0d 0a b1 2e b7 c0 cd 70 17 f7 b7 63 58 96 01 80 80 3e 85 3c 05 43 e9 4d ba 1e ff 13 be a0 cf ef d0 b3 a9 37 f9 ed 57 75 b0 68 e4 38 f6 ff 35 7b 51 40 3a a7 6f cf 35 1d 0e eb 06 e1 48 78 83 7b 37 8f 57 a3 97 34 ae 01 99 1f c7 75 ef 8d 0d 91 71 be e1 18 8e cc 2c 8b 14 e8 56 f5 02 ce 70 b8 38 af 9f 1d 05 2d 43 33 6a d9 5d 41 4a 14 9e 19 f0 e5 6d 87 65 14 8d 81 51 70 a4 6c 83 b6 c6 43 36 34 36 32 69 b6 98 04 1c 1a 10 ab 7d cc 57 82 4b cc 68 83 f6 7c 59 5f af cb 8d b5 1e 9e 95 23 c0 7f cb 3a 59 c6 53 f5 d8 32 86 b4 ee 5e 5a 4d 03 75 b9 3a 9a fd 0a df dc 8b bd 04 a9 c7 de da 95 f4 b6 e6 53 e4 1b 7b 7e 36 05 e6 f4 eb 55 af 62 96 ec a1 80 c4 f5 9f fd c4 a0 ba a7 df b5 d1 a4 8d 7a fe aa 41 e0 b0 0d 2f c7 29 01 e5 a7 10 52 c9 79 92 e9 0e 5d 6c d9 f5 49 Data Ascii: 4000.pcX><CM7Wuh85{Q@:o5Hx{7W4uq,Vp8-C3j]AJmeQplC6462i}WKh\|Y_#:YS2^ZMu:S{~6UbzA/)Ry]lI
2022-03-15 16:08:18 UTC	7799	IN	Data Raw: ee 18 3c 4e 12 09 0d 0a Data Ascii: <N
2022-03-15 16:08:18 UTC	7799	IN	Data Raw: 34 30 30 30 0d 0a 38 a1 48 9b 87 54 ce 88 c5 9f 6b a8 4b dd f7 e0 99 a6 36 dd 6e ae d9 ae 81 c2 20 bb 12 1e 30 a2 1e 0e 4f 65 49 87 b2 8f e8 3e dc 70 05 f3 c3 ba b1 02 45 91 93 a4 5f 11 ff 8a 68 ef 85 5b d6 ab 70 5d 93 ef 56 77 65 df e6 ce 44 09 bd 20 3f cd bf 3a 9f 70 52 c8 9c 02 67 20 5b 05 28 e4 ff d1 24 79 3e bd 34 a2 5e dc 56 26 67 29 3a 14 b1 bc 66 77 2b a5 96 b0 bd d7 d5 4e 32 87 f4 ae 61 ec e2 49 61 c5 5e fc 0c dc af 77 bf 99 a9 ea 58 6b 48 df 13 f4 31 c1 8f ea 95 55 a6 c1 3d 92 d9 1c 62 92 f5 be 35 13 30 53 30 c2 3f f6 4b 0a cf 65 08 0a c5 86 22 0f e5 c0 46 99 dc 84 9f c0 29 d7 66 c7 f0 5c 60 2c 2e 69 5b a9 44 5f 78 8b 03 84 76 44 44 7a 94 50 f2 2f c4 a9 9a 99 39 e7 df 4c a6 a9 ce c0 70 cf 6f b1 8b 03 ca 23 8e f4 d6 82 6f cd 66 13 f8 90 6d 62 fc Data Ascii: 40008HTkK6n 0OeI>pE_h[p]VweD ?:pRg [($y>4^V&g):fw+N2aIa^wXkH1U=b50S0?Ke"F)f\`,.i[D_xvDDzP/9Lpo#ofmb
2022-03-15 16:08:18 UTC	7815	IN	Data Raw: 84 01 72 c8 9c b9 0d 0a Data Ascii: r
2022-03-15 16:08:18 UTC	7815	IN	Data Raw: 34 30 30 30 0d 0a dc 53 a5 05 75 3f fd f2 64 e0 77 7c 48 b2 e9 7b ef da f2 7c 7a c2 42 88 a3 6c d4 3f 08 76 ef 8c a6 ae 52 8e 74 9c e4 c1 0e 58 e8 75 2a 44 c1 32 3b 11 58 68 3b 61 42 aa 49 40 26 59 42 5d a3 59 37 3f 50 98 8e d0 90 a9 a5 0c ed 83 9a 3a 8d d3 e8 48 6e 0c 4d 2c 6b 50 aa 0e 83 99 b8 03 e5 2f 83 e5 b0 7a 3c 77 4b f4 53 43 6d a4 8d b6 05 5d 02 e9 a0 75 9b 49 46 8d 41 cf 59 e0 17 0a 39 36 4a 8b 97 3f 0f 30 7b 12 8b 64 41 eb 0d 43 01 2c 7a bd a0 0d 87 63 c4 0d 92 33 1a 0a 21 2f 0a 2d 84 85 11 7b 4d 74 36 49 3b 86 c1 e7 41 04 d6 c8 2d d9 92 70 00 95 f1 7a e3 f1 6d 54 e7 24 b9 4e 6d 12 a7 56 7f cd 83 4b 6d 14 76 3a 4d bb 60 49 2b 75 0f 07 73 b1 c2 6b 1f 13 b4 97 c1 74 ad 5b 1f 38 f5 c9 7e 06 39 68 24 1c 6e 37 8b ea fa ad 91 12 ed e0 27 d0 c0 37 4b Data Ascii: 4000Su?dw\|H{\|zBl?vRtXu*D2;Xh;aBI@&YB]Y7?P:HnM,kP/z<wKSCm]uIFAY96J?0{dAC,zc3!/-{Mt6I;A-pzmT$NmVKmv:M`I+uskt[8~9h$n7'7K
2022-03-15 16:08:18 UTC	7831	IN	Data Raw: 7a 44 9a 59 aa bb 0d 0a Data Ascii: zDY
2022-03-15 16:08:18 UTC	7831	IN	Data Raw: 34 30 30 30 0d 0a a3 09 27 10 07 2d 8e 87 d6 e9 79 8f 2b ad 44 9e 12 81 02 48 3b 80 18 db 34 e1 e6 c0 5b 70 27 08 2f 8d 1c 28 7b 75 cb e9 90 5a 9c 49 0a 18 bd c2 0b 8c 98 29 fb 96 47 19 2a a1 ec 7b 93 bf cb 45 f5 bb de ee a4 47 17 03 2c 56 1d da 34 45 56 d0 7b f8 a2 93 38 d2 b7 04 b0 73 64 51 73 32 db 87 8f e8 ee 76 09 73 a8 f3 67 71 02 9a 14 95 29 12 47 c7 d3 fc f5 89 ef f3 4f 0b dd 3c fa 84 27 c5 62 f7 1d b0 eb 31 c9 ef ad 29 c7 8e 91 1f c7 d9 67 a7 04 2f 81 fe a4 09 6f 1a f7 ce bb 2e 4b db 32 28 63 03 57 aa 88 8e 0d e7 85 55 2f 3f 59 b3 7d 96 68 e4 b1 25 51 a4 92 2a c9 f2 62 e5 68 12 e4 48 50 b2 83 d1 81 03 96 29 c1 a1 d5 cb 94 dd 92 ed 39 b9 64 34 16 76 11 31 c8 d7 9a 86 b7 7e 00 ab 78 32 13 35 13 e2 4f d6 d7 7e 20 6b 2f e2 c8 5d 68 dd ff b8 76 c4 95 Data Ascii: 4000'-y+DH;4[p'/({uZI)G{EG,V4EV{8sdQs2vsgq)GO<'b1)g/o.K2(cWU/?Y}h%QbhHP)9d4v1~x25O~ k/]hv
2022-03-15 16:08:18 UTC	7847	IN	Data Raw: 36 bb 8d 76 a9 eb 0d 0a Data Ascii: 6v
2022-03-15 16:08:18 UTC	7847	IN	Data Raw: 34 30 30 30 0d 0a fa 6d a5 8f 48 bd cf 32 f3 21 be bc 07 fd 20 85 7a 6c 8e 2b 4d 29 29 62 ad 0d 16 f2 15 ae b1 3a 4c 87 75 e6 ad ee c8 96 0b d4 11 26 99 78 0c 75 92 a6 eb 9a 65 71 91 44 be 04 b0 1c 52 f2 0a 22 e7 de 6f ec 9d b5 d0 44 43 b2 60 46 ce 98 26 46 59 ec f8 f6 9c 8b 45 d9 bc e2 71 41 d4 c0 8d 54 e7 0d b3 9c b2 c5 88 22 1b 9b e8 ec b8 a6 b2 70 51 02 bf 8a 05 59 50 58 29 28 63 07 5d 6a ab 96 b8 93 7e 48 ee af 0e e0 e6 d1 3f 1f 26 20 55 3a 7d 13 5b 66 99 30 09 2e b9 fa a7 19 ef 77 46 9c 47 27 a8 6b dc 13 1f 55 d4 bc 5c c6 b8 e2 a6 00 96 c7 a3 4c bc 94 cc b6 1a 4d 70 66 77 28 fc 0c c1 35 cd 0e 45 f9 6d ed 02 44 e9 db c7 2a 23 b8 17 8c c6 7b 86 46 52 04 2d 18 28 20 72 98 0e 14 d5 28 87 cd 69 91 ad 47 75 04 90 ee ca 70 dd ea b3 75 f9 95 d7 a6 11 86 66 Data Ascii: 4000mH2! zl+M))b:Lu&xueqDR"oDC`F&FYEqAT"pQYPX)(c]j~H?& U:}[f0.wFG'kU\LMpfw(5EmD*#{FR-( r(iGupuf
2022-03-15 16:08:18 UTC	7863	IN	Data Raw: 83 89 53 65 44 a0 0d 0a Data Ascii: SeD
2022-03-15 16:08:18 UTC	7863	IN	Data Raw: 34 30 30 30 0d 0a bc f0 e6 d0 86 bb 81 fa d9 e2 96 e8 84 ad 24 c5 1f a1 d1 6a f1 0c b8 b1 14 b0 bc 91 63 2a 8a f7 13 a7 58 de 04 cd 63 fb d5 74 d7 9f 98 04 36 f7 ff 39 16 dd 0f eb 9b b0 7e 4b 2d 6a 2d 54 12 7b 6e ad eb 10 85 72 b5 46 2d 7f 05 03 0a a1 d1 01 c9 bc 5b 4e 66 e7 ef 20 0e b4 2e 4d 55 b0 10 dd 55 8c cb 5e 76 32 20 08 39 b5 94 06 46 4a ce c7 2c 19 36 c0 2c 58 b4 24 ca d4 fb d6 a4 19 c3 a0 51 83 e8 6e 1f db 0f 06 f3 77 d1 1f b2 6e 5f 64 ee b2 47 15 c0 22 f1 00 d1 3b 04 d5 d0 0f c4 32 9e ad 52 51 dd d9 0f 8c c6 ed bf 91 de d1 bf ba 9c 9e 70 07 ac e6 11 60 17 91 78 46 de f2 e0 01 1f 2a 76 01 7d 4a eb ef fe 9c fb b8 2c 0a 14 dc 6b f6 09 b3 02 ad de 2b 8c 2c 4e 5f e2 de 54 27 d1 9e 1d 09 34 1b cf a1 3a 52 1d 77 64 ae 6c 63 95 07 03 68 0f c0 be 4f 36 Data Ascii: 4000$jcXct69~K-j-T{nrF-[Nf .MUU^v2 9FJ,6,X$Qnwn_dG";2RQp`xFv}J,k+,N_T'4:RwdlchO6
2022-03-15 16:08:18 UTC	7879	IN	Data Raw: 2f d4 49 02 43 c8 0d 0a Data Ascii: /IC
2022-03-15 16:08:18 UTC	7879	IN	Data Raw: 34 30 30 30 0d 0a f6 6b 2a 68 a1 e1 0b 8d 1c da 92 39 9e c6 86 0d 7f 07 3f 2c 96 8f 00 2b 3b 6f 9a e5 57 f0 1e 1c 41 ce 6b fd 4c a8 de 4d 25 46 ba 31 a8 c9 16 31 1c e4 e8 69 24 da 71 78 cf 07 d6 c3 dc e6 de 60 dc ec 4a b0 b7 ca c5 2b 1e 87 b7 24 80 f9 85 6e 3a cc 0c 30 6f 94 11 7a d5 7d 2f c8 5a 49 f4 71 e8 3c 90 36 23 bd 3a 74 cb d3 e8 93 91 48 8c 77 51 15 8a 71 99 6d e2 13 06 7e 93 cb ce fb 5c 8a 90 93 46 e6 85 09 16 ab 83 53 28 0b de 41 b1 41 f2 5c d1 6a 81 6e ec 97 6e f2 b3 de 29 ed 5d eb 8d ca c8 e4 65 6f 61 1e 50 3a 12 61 10 9e 3d cc 7d 93 99 59 da 86 76 46 69 1a b1 0d 9d e7 67 c4 d7 7f a1 9c c8 98 fe 01 53 8c 91 e7 71 ea b2 dc 8d 13 c6 a7 b4 42 cf 27 87 90 32 de 48 9e 76 91 e5 69 9b e4 49 ab 7e 3f 35 c3 a1 e9 c0 9f c0 1f b9 19 60 32 7c 0a c8 8c d8 Data Ascii: 4000k*h9?,+;oWAkLM%F11i$qx`J+$n:0oz}/ZIq<6#:tHwQqm~\FS(AA\jnn)]eoaP:a=}YvFigSqB'2HviI~?5`2\|
2022-03-15 16:08:18 UTC	7895	IN	Data Raw: 56 91 4d 35 25 eb 0d 0a Data Ascii: VM5%
2022-03-15 16:08:18 UTC	7895	IN	Data Raw: 34 30 30 30 0d 0a 0e 62 e7 9b a0 03 a6 c4 9f ae d1 e0 4b b7 9d 05 3f c0 17 c3 76 fc 64 d1 9d b3 9e 2a 47 54 7e d0 66 e5 3e 7b 12 2e fb 1b 9b 1e bf b8 08 fe e9 e7 3d 9c 0f b2 99 30 09 db 8f 6d 72 4c 58 bf 9e f2 38 0f d0 c4 bc e2 1c 00 18 7c 9c 87 58 c7 16 a0 60 cd 02 c3 dc 31 b2 fc 3a ec 60 12 dd 5e be bb 76 02 bd a9 3a be 02 96 aa 35 7f b2 cb 56 5f 72 c8 a6 4f 9f 6e 53 01 15 9f 79 59 87 59 a1 16 c2 1b ed 89 84 3e 27 d0 d6 92 73 0a 45 6c cf a5 72 0d f7 63 ea db e5 35 71 a4 a7 3f 2d 36 be fa 7d 7c f6 fc ba 9e d8 f3 67 fd 81 99 8e ab 69 ac 19 e6 74 79 b3 88 d9 e6 dd e7 8f 53 ab 73 97 9b 3f 11 34 f1 3c a3 7b 87 4f ae 23 e0 5d e6 8d 52 df 3e 0b cf dc aa 1f d9 09 4d e1 19 b2 81 7f 55 db e7 84 12 0d 0c 71 80 09 8a 9b 2b 4a 02 4c 70 c8 0e a7 6c ea 2f 26 e4 5e 2b Data Ascii: 4000bK?vd*GT~f>{.=0mrLX8\|X`1:`^v:5V_rOnSyYY>'sElrc5q?-6}\|gitySs?4<{O#]R>MUq+JLpl/&^+
2022-03-15 16:08:18 UTC	7911	IN	Data Raw: a7 8c c6 b9 cd 31 0d 0a Data Ascii: 1
2022-03-15 16:08:18 UTC	7911	IN	Data Raw: 34 30 30 30 0d 0a 34 3a 5a f0 c7 d9 35 9b ab 47 f4 da 33 83 67 10 4b 23 63 20 c4 db ca fa 36 49 c2 7d 6f f5 64 f7 ff e6 74 86 d1 21 7f 87 22 8e 32 78 55 8c ff 89 2f 5c a5 e4 62 60 48 31 35 ce 6a 17 0d 7f 3c 97 a3 5c 43 6d 22 db 5a 52 d5 0f 58 2b f4 7c 4a 21 c3 2e 91 a8 56 a1 23 8b 74 8f 8d da 73 60 93 e4 f9 c5 7e ce a7 4b d9 b2 58 a8 47 6b b9 b7 2e 29 2b 84 bc 2d fc e1 be b1 79 fc 85 2f 9f 56 b1 04 34 5d e3 fd 81 57 8e 7f 97 e3 98 2a 9f 59 b8 4c b5 59 f7 45 0b c3 e9 21 02 20 2c a4 5e 32 51 91 41 2b 3a 08 0f c7 d0 e0 48 c1 04 85 71 e5 67 a4 37 8b f1 97 41 5e ee a4 e2 84 aa 7a d3 e9 fc 62 34 b4 d2 97 a0 bd 86 2b 61 b6 26 bf d9 62 2d 76 fd c8 f8 41 78 b9 cd b8 02 1e e4 fc cb b7 4f ec 65 dd 28 f9 b5 60 41 9a 49 0d 75 53 c3 b3 29 a3 83 c7 ce fa 6f f7 ed 5f ac Data Ascii: 40004:Z5G3gK#c 6I}odt!"2xU/\b`H15j<\Cm"ZRX+\|J!.V#ts`~KXGk.)+-y/V4]W*YLYE! ,^2QA+:Hqg7A^zb4+a&b-vAxOe(`AIuS)o_
2022-03-15 16:08:18 UTC	7927	IN	Data Raw: a1 e6 29 1c 9d 1e 0d 0a Data Ascii: )
2022-03-15 16:08:18 UTC	7927	IN	Data Raw: 34 30 30 30 0d 0a 43 c9 33 f8 1e 13 5e 11 7b ba 5a 11 88 cf d4 e2 92 6b ce 80 cf 8e 90 bf 38 c0 6e be cf 1e 59 c7 c4 f7 ce 13 c9 e6 3a b3 b9 56 5f 9f aa ea 1a d6 c3 b9 c5 6a a1 e2 e5 2b fa ee 06 df e6 cd c3 b1 32 53 b0 52 53 f0 73 58 33 39 39 15 1d 4b e1 94 6a 32 27 23 dc 30 93 bf 08 46 54 3a 5b 84 0a 6a ef 17 23 f5 00 3f e0 9a fd f1 80 f7 cd bf af d2 6e ce 85 47 11 30 aa 63 9f 14 05 6d 49 e5 8f 07 69 52 6f f7 a2 2d 8d 53 48 a7 43 20 c3 d0 c2 20 ee 6a 8b 77 52 7a ab dd 0d b4 3b 4f 52 57 dd 20 da 24 d5 e1 db 89 e7 bd 92 db 26 8f 8c b8 d0 de 59 37 8f a9 3a f7 dc 52 bb 77 92 af 62 a9 08 cb 0e 6a 1a 1f dd 00 30 b8 b4 18 cd a3 b5 8b 85 2c ca 00 e3 d3 48 57 8d c9 cc ae 55 01 8a b0 03 96 35 86 d3 71 ac 44 e1 10 5c 7c 9c 75 2a 67 f2 15 25 a4 1f 67 38 c0 a1 72 45 Data Ascii: 4000C3^{Zk8nY:V_j+2SRSsX399Kj2'#0FT:[j#?nG0cmIiRo-SHC jwRz;ORW $&Y7:Rwbj0,HWU5qD\\|u*g%g8rE
2022-03-15 16:08:18 UTC	7943	IN	Data Raw: 1f 31 eb 94 99 3b 0d 0a Data Ascii: 1;
2022-03-15 16:08:18 UTC	7943	IN	Data Raw: 34 30 30 30 0d 0a df 9f 2a cd c8 11 e0 15 4c bb d2 96 eb 5b d0 92 e7 99 bd 78 a5 76 d2 fc 15 19 c5 d1 c9 45 ab 58 3c 0a 2c 33 24 01 b8 1a d5 2d ae 3b ae 37 21 e5 2a 2a 19 8f e0 5d c1 d3 b9 a8 f7 6f 89 43 05 79 54 aa 92 68 d2 51 35 75 f3 44 83 75 a9 8c 37 6a 0c 5a 10 42 28 7e 75 a1 fe 3a c5 20 b7 63 b9 d9 1c f8 9f 3a fb 20 a1 f0 55 47 4e 6d bf 25 ec ef a6 13 29 f1 10 19 cf 55 2c 1e 7a 35 a6 6f 2d 27 b3 39 08 52 62 73 07 bc a0 0f f9 9d ff 90 fc d5 70 f1 9b 46 23 18 d1 8f 55 df 66 d5 65 e0 57 f0 b9 c3 7a 44 40 b1 e5 c5 6e 5c 19 fc 64 f4 53 fe 54 83 84 e4 8e 6e c2 76 82 4d 11 d3 2d 07 3e 6a 53 fd 34 4b 4a 4b 0b c4 e2 60 6f 09 ea 7c ac 50 fb 4f d8 24 f9 af 76 b7 a0 7f 34 0a 05 51 9d de e6 93 d6 8e b2 bf 4d ab e9 11 7e 8b b7 f4 99 86 13 08 8f 8d 34 ba d9 5e b5 Data Ascii: 4000L[xvEX<,3$-;7!*]oCyThQ5uDu7jZB(~u: c: UGNm%)U,z5o-'9RbspF#UfeWzD@n\dSTnvM->jS4KJK`o\|PO$v4QM~4^
2022-03-15 16:08:18 UTC	7959	IN	Data Raw: 52 c3 54 97 f8 8c 0d 0a Data Ascii: RT
2022-03-15 16:08:18 UTC	7959	IN	Data Raw: 34 30 30 30 0d 0a c5 c0 d9 46 f7 49 b0 dd 33 0d 5f ea 03 b1 4c 0a 9a 36 3a 33 06 a1 e9 67 8c 32 bd 18 a8 d1 aa d0 18 6b 42 91 4f 9a 89 23 4a 27 0c cd eb e1 7a 40 ba 89 e5 43 69 92 b4 3c 37 12 7e 4f 97 a7 fc 72 89 1e 60 e7 e0 db 89 e1 cb d3 d0 ef 55 92 d5 4f a8 3f b4 1f 25 8d 6c 0e bb 8a 67 5b 02 a6 bc fe 21 95 0e 0b 25 ba b7 ac f5 18 96 02 94 c2 5f d7 2b d2 83 ba 15 77 e2 86 5c b2 29 fd a8 2c 77 ee 28 1b 7d 0c 84 22 d4 5c fe 54 d6 d8 f8 d8 d0 59 78 47 df ed 2f 6a 84 3c 91 19 e3 0c 7b 6d 1a ac 4a ad 2a 18 c6 57 3f d2 6a 0d 2d d4 ad e6 07 3a 8b 19 5e 95 46 7a 51 1a b6 4a a8 42 2d b6 04 61 4d 24 02 4f c8 62 c4 77 37 c4 10 6f d4 92 ff 9b d4 5f 20 a2 8c f3 46 b0 f6 17 41 68 88 1c cf 36 34 af fd 84 14 6b 2b 82 24 dd 27 34 df a2 13 9c 19 60 3e 1f 41 64 89 6b 8a Data Ascii: 4000FI3_L6:3g2kBO#J'z@Ci<7~Or`UO?%lg[!%_+w\),w(}"\TYxG/j<{mJ*W?j-:^FzQJB-aM$Obw7o_ FAh64k+$'4`>Adk
2022-03-15 16:08:18 UTC	7975	IN	Data Raw: 00 ff fe 61 00 ff 0d 0a Data Ascii: a
2022-03-15 16:08:18 UTC	7975	IN	Data Raw: 34 30 30 30 0d 0a fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe Data Ascii: 4000aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
2022-03-15 16:08:18 UTC	7991	IN	Data Raw: 00 00 00 00 00 00 0d 0a Data Ascii:
2022-03-15 16:08:18 UTC	7991	IN	Data Raw: 34 30 30 30 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 5a 50 4c 54 45 00 61 fe 3d 86 fb c9 d9 f4 6c a2 f9 b9 d0 f5 7b ab f8 10 6a fd 1f 73 fc f7 f5 f2 d8 e2 f3 8b b4 f7 5c 98 f9 e7 eb f3 9a bd f6 2e 7c fc a9 c6 f6 4d 8f fa c8 d9 f4 aa c7 f6 e8 ec f3 8a b4 f7 6d a1 f9 e7 ec f3 5d 98 f9 3e 86 fb 0f 6a fd 7c ab f8 4e 8f fa Data Ascii: 4000PNGIHDRkXTZPLTEa=l{js\.\|Mm]>j\|N
2022-03-15 16:08:18 UTC	8007	IN	Data Raw: 6c 00 61 00 72 00 0d 0a 33 66 38 30 0d 0a 20 00 6d 00 65 00 64 00 69 00 61 00 6e 00 74 00 65 00 20 00 22 00 45 00 6a 00 65 00 63 00 75 00 74 00 61 00 72 00 20 00 63 00 6f 00 6d 00 6f 00 22 00 20 00 65 00 6e 00 20 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 20 00 58 00 50 00 20 00 79 00 20 00 76 00 65 00 72 00 73 00 69 00 6f 00 6e 00 65 00 73 00 20 00 61 00 6e 00 74 00 65 00 72 00 69 00 6f 00 72 00 65 00 73 00 2e 00 33 00 4e 00 6f 00 20 00 73 00 65 00 20 00 70 00 75 00 65 00 64 00 65 00 6e 00 20 00 65 00 78 00 74 00 72 00 61 00 65 00 72 00 20 00 6c 00 6f 00 73 00 20 00 61 00 72 00 63 00 68 00 69 00 76 00 6f 00 73 00 20 00 64 00 65 00 20 00 6c 00 61 00 20 00 61 00 70 00 6c 00 69 00 63 00 61 00 63 00 69 00 f3 00 6e 00 2e 00 6b 00 43 00 6f 00 6e 00 73 00 75 Data Ascii: lar3f80 mediante "Ejecutar como" en Windows XP y versiones anteriores.3No se pueden extraer los archivos de la aplicacin.kConsu

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.3	49941	20.199.120.151	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:20 UTC	8023	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 32 61 66 61 38 66 31 30 33 39 63 63 39 36 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: c2afa8f1039cc965
2022-03-15 16:08:20 UTC	8023	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-03-15 16:08:20 UTC	8023	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 32 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 32 61 66 61 38 66 31 30 33 39 63 63 39 36 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 71 36 65 2b 6b 6e 77 50 32 42 35 38 54 79 75 62 68 4e 41 37 55 45 66 43 4b 59 35 70 70 49 38 6d 54 44 4b 64 6f 6e 32 6e 65 48 74 6e 50 70 38 75 53 45 6e 67 56 66 59 64 4b 33 42 69 54 57 79 52 69 2b 52 72 32 2f 32 66 59 70 6a 73 6a 6c 6a 7a 36 65 4b 72 6b 69 41 4b 6e 4b 4b 4e 7a 74 77 41 6b 46 55 30 4f 78 4f 69 57 6d 38 73 56 37 67 66 4c 47 69 41 64 75 54 73 6d 45 5a 30 4c 49 30 76 69 57 71 46 6d 41 78 Data Ascii: ATH 2 CON\DEVICE 1026Context: c2afa8f1039cc965<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcq6e+knwP2B58TyubhNA7UEfCKY5ppI8mTDKdon2neHtnPp8uSEngVfYdK3BiTWyRi+Rr2/2fYpjsjljz6eKrkiAKnKKNztwAkFU0OxOiWm8sV7gfLGiAduTsmEZ0LI0viWqFmAx
2022-03-15 16:08:20 UTC	8024	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 32 61 66 61 38 66 31 30 33 39 63 63 39 36 35 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: c2afa8f1039cc965
2022-03-15 16:08:20 UTC	8024	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-03-15 16:08:20 UTC	8024	IN	Data Raw: 4d 53 2d 43 56 3a 20 51 70 2b 6e 31 38 6d 45 48 45 61 51 59 63 53 2b 47 56 52 30 57 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Qp+n18mEHEaQYcS+GVR0Ww.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.3	49939	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:22 UTC	8024	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 589 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
2022-03-15 16:08:22 UTC	8026	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 36 30 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 39 32 36 31 35 35 31 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 25 32 32 25 32 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A60%2C%22visit_id%22%3A%227730430992615511%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22adf96df2db9141a086fb94199a62964e%22%2
2022-03-15 16:08:23 UTC	8026	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 9 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:08:22 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e793b6686a5d4a62b7da7835461054df Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	3483	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:23 UTC	64	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 322 X-CSRF-Token: pZXDo3x1XnpXWcY8UK1IFlBj X-Dropbox-Uid: -1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR
2022-03-15 16:07:23 UTC	65	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 31 37 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 22 7d 7d 2c 22 74 72 69 67 67 65 72 22 3a 7b 22 2e 74 61 67 22 3a 22 74 72 69 67 67 65 72 5f 68 Data Ascii: {"scopes":[],"known_namespaces":[],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":17,"implementation":{".tag":"typescript"}},"trigger":{".tag":"trigger_h
2022-03-15 16:07:23 UTC	152	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Date: Tue, 15 Mar 2022 16:07:23 GMT Pragma: no-cache Server: envoy X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 33 X-Webkit-Csp: sandbox Content-Length: 137 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c6e156356f0d4f0eacbc79b0c2cabb39 Connection: close
2022-03-15 16:07:23 UTC	152	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 73 74 6f 70 5f 70 75 62 6c 69 63 61 74 69 6f 6e 5f 66 6f 72 5f 73 65 63 6f 6e 64 73 22 3a 30 7d Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[],"stop_publication_for_seconds":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.3	49946	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:25 UTC	8029	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 523 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
2022-03-15 16:08:25 UTC	8031	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f 61 64 69 6e 67 25 33 46 5f 61 64 25 33 44 32 30 30 30 30 37 34 37 5f 32 30 30 31 31 32 36 34 25 32 36 5f 63 61 6d 70 25 33 44 4c 43 45 42 52 25 32 36 5f 74 6b 25 33 44 65 6d 61 69 6c 25 32 36 6f 72 65 66 25 33 44 65 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 77 65 62 5f 74 69 6d 69 6e 67 5f 6c 6f 67 67 65 72 25 32 32 25 33 41 25 37 42 25 32 32 77 74 6c 5f 65 6e 64 70 6f 69 6e 74 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 77 74 6c 5f 65 Data Ascii: request_id=adf96df2db9141a086fb94199a62964e&url=https%3A%2F%2Fwww.dropbox.com%2Fdownloading%3F_ad%3D20000747_20011264%26_camp%3DLCEBR%26_tk%3Demail%26oref%3De&aggregated_sw_data=%7B%22web_timing_logger%22%3A%7B%22wtl_endpoint%22%3A%7B%22name%22%3A%22wtl_e
2022-03-15 16:08:25 UTC	8031	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:08:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 99668def82e64a18be8691379cd376ac Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.3	49950	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:26 UTC	8034	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 383 X-CSRF-Token: pZXDo3x1XnpXWcY8UK1IFlBj X-Dropbox-Uid: -1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
2022-03-15 16:08:26 UTC	8036	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 22 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 22 2c 22 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 22 2c 22 75 78 61 5f 65 76 65 6e 74 73 22 2c 22 77 65 62 5f 74 69 6d 69 6e 67 22 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 31 37 2c 22 69 6d 70 6c Data Ascii: {"scopes":[],"known_namespaces":["privacy_consent","user_centric_perf","uxa_events","web_timing"],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":17,"impl
2022-03-15 16:08:27 UTC	8036	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Date: Tue, 15 Mar 2022 16:08:26 GMT Pragma: no-cache Server: envoy X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 25 X-Webkit-Csp: sandbox Content-Length: 1464 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8a0f3136e2e9493097efa83cb1eb7f6e Connection: close
2022-03-15 16:08:27 UTC	8037	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 7b 22 61 67 67 72 65 67 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 64 72 6f 70 5f 66 72 61 63 74 69 6f 6e 5f 6f 66 5f 68 6f 73 74 73 5f 70 65 72 5f 6d 65 74 72 69 63 22 3a 30 2c 22 64 72 6f 70 5f 70 65 72 69 6f 64 73 22 3a 7b 22 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 73 74 69 63 6b 69 6e 65 73 73 22 3a 7b 22 6c 69 6d 69 74 22 3a 7b 22 2e 74 61 67 22 3a 22 69 6e 64 65 70 65 6e 64 65 6e 74 22 7d 7d 7d 2c 22 64 72 6f Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[{"aggregation_interval_seconds":60,"drop_fraction_of_hosts_per_metric":0,"drop_periods":{"fraction":0,"stickiness":{"limit":{".tag":"independent"}}},"dro

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.3	49956	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:33 UTC	8038	OUT	GET /cms/api/am/imageFileData/RWP8kk?ver=8c62 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:33 UTC	8038	IN	HTTP/1.1 200 OK Last-Modified: Sun, 13 Mar 2022 03:06:20 GMT Access-Control-Allow-Origin: * X-Datacenter: northeu X-ActivityId: 661dc449-c44d-45b0-8fcc-3545684eace7 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWP8kk?ver=8c62 X-Source-Length: 1829994 Content-Length: 1829994 Cache-Control: public, max-age=212307 Expires: Fri, 18 Mar 2022 03:07:00 GMT Date: Tue, 15 Mar 2022 16:08:33 GMT Connection: close
2022-03-15 16:08:33 UTC	8039	IN	Data Raw: ff d8 ff e1 13 12 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 31 3a 31 31 20 30 36 3a 35 34 3a 33 34 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop 21.1 (Windows)2021:11:11 06:54:348"
2022-03-15 16:08:33 UTC	8054	IN	Data Raw: 3a 61 35 39 62 32 66 34 38 2d 39 63 62 38 2d 66 31 34 66 2d 39 61 36 37 2d 66 37 36 31 32 64 31 61 64 61 62 32 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 35 2d 30 34 2d 32 39 54 31 32 3a 31 38 3a 33 35 2d 30 37 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 34 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 64 64 38 33 61 66 34 35 2d 39 66 63 39 2d 64 66 34 66 2d 39 64 64 65 2d 62 61 66 39 30 32 38 32 62 32 31 65 22 20 73 74 45 76 74 3a 77 68 Data Ascii: :a59b2f48-9cb8-f14f-9a67-f7612d1adab2" stEvt:when="2015-04-29T12:18:35-07:00" stEvt:softwareAgent="Adobe Photoshop CC 2014 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:dd83af45-9fc9-df4f-9dde-baf90282b21e" stEvt:wh
2022-03-15 16:08:33 UTC	8070	IN	Data Raw: 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 44 3a 5c 57 6f 72 6b 5c 57 69 6e 31 30 2d 4c 6f 63 6b 73 63 72 65 65 6e 73 5c 5f 4c 41 54 45 53 54 74 72 61 6e 73 66 65 72 2d 4e 65 77 43 6f 6d 70 75 74 65 72 5c 54 65 6d 70 6c 61 74 65 73 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 31 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 38 3a 32 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 37 54 31 32 3a 30 32 3a 32 33 2d 30 37 3a 30 Data Ascii: :00 File D:\Work\Win10-Lockscreens\_LATESTtransfer-NewComputer\Templates\Lockscreen_1920x1080_Landscape1.psd saved 2016-07-26T18:23-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2016-07-27T12:02:23-07:0
2022-03-15 16:08:33 UTC	8072	IN	Data Raw: 6e 64 6f 77 73 50 72 6f 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 34 31 30 32 37 32 35 37 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 38 2d 30 34 54 31 37 3a 32 35 3a 32 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 57 69 6e 64 6f 77 73 50 72 6f 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 34 31 30 32 37 32 35 37 5f 31 39 32 30 78 31 30 38 30 46 39 31 42 31 36 31 39 42 41 33 46 39 44 43 37 45 32 32 46 45 38 37 35 31 32 32 39 36 34 36 30 2e 70 73 62 20 73 61 76 65 64 26 23 Data Ascii: ndowsPro_GettyImages-641027257_1920x1080.jpg saved 2016-08-04T17:25:28-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_WindowsPro_GettyImages-641027257_1920x1080F91B1619BA3F9DC7E22FE87512296460.psb saved&#
2022-03-15 16:08:33 UTC	8088	IN	Data Raw: 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 46 61 6c 6c 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 37 38 38 36 33 30 32 31 5f 31 39 32 30 78 31 30 38 30 31 39 38 36 36 37 31 38 41 31 33 33 41 37 43 36 32 33 37 33 39 35 38 31 45 42 31 33 39 30 42 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 39 2d 32 36 54 31 30 3a 31 33 3a 35 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 46 61 6c 6c 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 46 61 6c 6c 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 34 30 37 31 37 36 31 30 5f Data Ascii: e Photoshop CC 2015.5\AutoRecover\_FallEntertainment_GettyImages-478863021_1920x108019866718A133A7C623739581EB1390B9.psb saved 2016-09-26T10:13:59-07:00 File C:\Users\v-lizagh\MS\Windows10\FallEntertainment\FallEntertainment_GettyImages-540717610_
2022-03-15 16:08:33 UTC	8104	IN	Data Raw: 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 36 54 31 33 3a 35 32 3a 31 31 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 36 54 31 33 3a 35 34 2d 30 38 3a 30 Data Ascii: 47920D5F41D85C30DE643DF5B579.psb saved 2016-11-16T13:52:11-08:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2016-11-16T13:54-08:0
2022-03-15 16:08:33 UTC	8112	IN	Data Raw: 32 38 30 36 44 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 32 33 54 31 35 3a 35 34 3a 31 35 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 4f 66 66 69 63 65 2d 42 61 74 63 68 32 5c 5f 43 48 4f 53 45 4e 2d 53 77 61 79 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 5f 53 77 61 79 2d 55 73 65 72 73 5f 70 31 30 32 33 6d 38 33 37 31 34 39 66 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 32 33 54 31 35 3a 35 36 3a 30 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c Data Ascii: 2806D.psb saved 2016-11-23T15:54:15-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\Office-Batch2\_CHOSEN-Sway\Crops\Office_Sway-Users_p1023m837149f_1920x1080.jpg saved 2016-11-23T15:56:08-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\
2022-03-15 16:08:33 UTC	8128	IN	Data Raw: 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 33 31 54 30 39 3a 34 36 3a 31 30 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 38 33 5c 43 48 4f 53 45 4e 5c 4d 38 33 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 31 36 31 31 34 36 37 35 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 33 31 54 30 39 3a 34 37 3a 30 38 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 Data Ascii: 5.5\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-01-31T09:46:10-08:00 File C:\Users\v-lizagh\MS\Windows10\M83\CHOSEN\M83_GettyImages-516114675_1920x1080.jpg saved 2017-01-31T09:47:08-08:00 File
2022-03-15 16:08:33 UTC	8144	IN	Data Raw: 30 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 6f 72 74 61 6e 61 5c 53 70 6f 74 6c 69 67 68 74 5c 43 48 4f 53 45 4e 5c 43 6f 72 74 61 6e 61 2d 53 70 6f 74 6c 69 67 68 74 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 39 31 39 31 31 39 38 30 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 30 36 54 31 33 3a 33 39 3a 35 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 Data Ascii: 07-08:00 File C:\Users\v-lizagh\MS\Windows10\Cortana\Spotlight\CHOSEN\Cortana-Spotlight_shutterstock_91911980_1920x1080.jpg saved 2017-03-06T13:39:57-08:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2017-0
2022-03-15 16:08:33 UTC	8152	IN	Data Raw: 32 30 36 32 35 35 35 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 32 37 54 31 32 3a 30 37 3a 30 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 53 65 72 76 69 63 69 6e 67 5c 43 48 4f 53 45 4e 5c 52 6f 75 6e 64 31 5c 57 69 6e 64 6f 77 73 53 65 72 76 69 63 69 6e 67 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 30 38 33 34 32 36 33 34 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 32 37 54 31 32 3a 30 38 3a 32 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 Data Ascii: 2062555_1920x1080.jpg saved 2017-03-27T12:07:07-07:00 File C:\Users\v-lizagh\MS\Windows10\Windows\Servicing\CHOSEN\Round1\WindowsServicing_GettyImages-508342634_1920x1080.jpg saved 2017-03-27T12:08:28-07:00 File C:\Users\v-lizagh\MS\Window
2022-03-15 16:08:33 UTC	8168	IN	Data Raw: 36 38 31 39 30 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 32 34 54 31 30 3a 34 34 3a 30 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 53 70 72 69 6e 67 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 4d 61 79 5c 43 48 4f 53 45 4e 5c 52 41 57 53 5c 4d 49 54 2d 53 70 72 69 6e 67 54 56 4d 6f 76 69 65 2d 4d 61 79 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 31 35 38 36 38 31 39 30 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 32 34 54 31 30 3a 35 38 3a 33 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 Data Ascii: 68190_1920x1080.psd saved 2017-04-24T10:44:04-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\SpringEntertainment\May\CHOSEN\RAWS\MIT-SpringTVMovie-May_GettyImages-115868190_1920x1080.jpg saved 2017-04-24T10:58:37-07:00 File C:\Use
2022-03-15 16:08:33 UTC	8184	IN	Data Raw: 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 35 54 31 34 3a 34 38 3a 34 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 35 54 31 35 3a 30 38 3a 30 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 Data Ascii: #xA;2017-05-15T14:48:49-07:00 File Lockscreen_1920x1080_Landscape.psd opened 2017-05-15T15:08:01-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5
2022-03-15 16:08:33 UTC	8192	IN	Data Raw: 30 31 37 2d 30 36 2d 30 37 54 30 38 3a 33 33 3a 32 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 69 6b 61 69 6c 61 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 53 2d 4d 69 6b 61 69 6c 61 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 35 34 37 37 30 33 33 39 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 30 37 54 30 38 3a 33 35 3a 34 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 4d 69 6b 61 69 6c 61 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 53 2d 4d 69 Data Ascii: 017-06-07T08:33:28-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\Mikaila\Chosen\Crops\MS-Mikaila_GettyImages-554770339_1920x1080.jpg saved 2017-06-07T08:35:41-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\Mikaila\Chosen\Crops\MS-Mi
2022-03-15 16:08:33 UTC	8208	IN	Data Raw: 6f 77 73 5c 54 69 70 73 5c 43 68 6f 73 65 6e 5c 57 69 6e 64 6f 77 73 31 30 2d 54 69 70 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 38 38 35 30 38 35 38 36 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 31 33 54 31 39 3a 31 38 3a 30 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 54 69 70 73 5c 43 68 6f 73 65 6e 5c 57 69 6e 64 6f 77 73 31 30 2d 54 69 70 73 5f 70 33 34 33 6d 31 30 39 33 35 31 39 66 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 31 33 54 31 39 3a 32 34 3a 32 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 57 69 6e 64 Data Ascii: ows\Tips\Chosen\Windows10-Tips_GettyImages-488508586_1920x1080.jpg saved 2017-07-13T19:18:07-07:00 File C:\Users\v-lizagh\MS\Windows10\Windows\Tips\Chosen\Windows10-Tips_p343m1093519f_1920x1080.psd saved 2017-07-13T19:24:26-07:00 File Wind
2022-03-15 16:08:33 UTC	8224	IN	Data Raw: 2d 55 53 6f 70 65 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 39 35 34 37 32 31 36 39 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 31 30 54 31 38 3a 30 30 3a 32 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 55 53 2d 4f 70 65 6e 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 49 54 2d 55 53 6f 70 65 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 38 31 34 30 34 31 39 39 30 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 31 30 54 31 38 3a 30 30 3a 32 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 Data Ascii: -USopen_GettyImages-695472169_1920x1080.jpg saved 2017-08-10T18:00:23-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\US-Open\Chosen\Crops\MIT-USopen_GettyImages-814041990_1920x1080.jpg saved 2017-08-10T18:00:29-07:00 File C:\Users
2022-03-15 16:08:33 UTC	8231	IN	Data Raw: 52 65 63 6f 76 65 72 5c 5f 41 63 71 52 65 6d 69 6e 64 65 72 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 37 30 37 32 37 37 33 39 5f 31 39 32 30 78 31 30 38 30 38 33 39 31 37 45 38 38 44 43 39 30 32 44 43 44 31 42 36 39 36 46 30 42 41 42 41 30 43 35 42 42 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 32 39 54 31 36 3a 30 38 3a 35 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 6f 72 74 61 6e 61 5c 48 65 61 6c 74 68 79 4c 69 66 65 73 74 79 6c 65 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 48 65 61 6c 74 68 79 4c 69 66 65 73 74 79 6c 65 2d 4e 6f 74 65 62 6f 6f 6b 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 33 31 36 30 37 37 37 33 5f 31 39 32 Data Ascii: Recover\_AcqReminders_GettyImages-170727739_1920x108083917E88DC902DCD1B696F0BABA0C5BB.psb saved 2017-08-29T16:08:50-07:00 File C:\Users\v-lizagh\MS\Windows10\Cortana\HealthyLifestyle\Chosen\Crops\HealthyLifestyle-Notebook_GettyImages-531607773_192
2022-03-15 16:08:33 UTC	8247	IN	Data Raw: 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 53 72 65 77 61 72 64 73 5c 43 61 6e 61 64 61 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 53 52 65 77 61 72 64 73 2d 43 61 6e 61 64 61 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 30 38 33 35 31 31 35 34 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 30 2d 31 37 54 31 30 3a 33 38 3a 33 31 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 53 72 65 77 61 72 64 73 5c 43 61 6e 61 64 61 5c 5f 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 53 52 65 77 61 72 64 73 2d 43 61 6e 61 64 61 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 30 Data Ascii: e C:\Users\v-lizagh\MS\Windows10\MSrewards\Canada\_CHOSEN\Crops\MSRewards-Canada_GettyImages-108351154_1920x1080.jpg saved 2017-10-17T10:38:31-07:00 File C:\Users\v-lizagh\MS\Windows10\MSrewards\Canada\_CHOSEN\Crops\MSRewards-Canada_GettyImages-10
2022-03-15 16:08:33 UTC	8263	IN	Data Raw: 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 42 6c 61 63 6b 46 72 69 64 61 79 43 68 72 69 73 74 6d 61 73 53 68 6f 70 70 69 6e 67 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 42 6c 61 63 6b 46 72 69 64 61 79 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 39 34 31 32 39 39 38 30 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 31 2d 32 30 54 31 31 3a 33 32 3a 34 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 42 6c 61 63 6b 46 72 69 64 61 79 43 68 72 69 73 74 6d 61 73 53 68 6f 70 70 69 6e 67 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 42 6c 61 63 6b 46 72 69 64 61 79 Data Ascii: MomentsInTime\BlackFridayChristmasShopping\CHOSEN\Crops\MIT-BlackFriday_GettyImages-494129980_1920x1080.jpg saved 2017-11-20T11:32:44-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\BlackFridayChristmasShopping\CHOSEN\Crops\MIT-BlackFriday
2022-03-15 16:08:33 UTC	8271	IN	Data Raw: 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 30 30 31 46 34 37 39 32 30 44 35 46 34 31 44 38 35 43 33 30 44 45 36 34 33 44 46 35 42 35 37 39 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 38 54 31 30 3a 30 35 3a 35 35 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 42 75 73 69 6e 65 73 73 2d 50 68 69 6c 61 6e 74 68 72 6f 70 69 65 73 5c 43 6f 6d 70 53 63 69 45 64 57 65 65 6b 5c 43 48 Data Ascii: gh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Lockscreen_1920x1080_Landscape001F47920D5F41D85C30DE643DF5B579.psb saved 2017-12-08T10:05:55-08:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\Business-Philanthropies\CompSciEdWeek\CH
2022-03-15 16:08:33 UTC	8287	IN	Data Raw: 65 74 74 79 49 6d 61 67 65 73 2d 36 38 33 37 39 37 33 30 31 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 30 39 54 30 38 3a 33 34 3a 34 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 31 37 54 30 39 3a 30 37 3a 32 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 39 32 30 78 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 31 37 54 30 39 3a 32 30 3a 31 Data Ascii: ettyImages-683797301_1920x1080.jpg saved 2018-01-09T08:34:47-08:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1920x1080_Landscape.psd saved 2018-01-17T09:07:24-08:00 File Lockscreen_1920x1080_Landscape.psd opened 2018-01-17T09:20:1
2022-03-15 16:08:33 UTC	8303	IN	Data Raw: 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 31 32 54 31 36 3a 35 30 3a 32 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 56 69 72 67 69 6e 47 61 6c 61 63 74 69 63 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 45 64 67 65 2d 56 69 72 67 69 6e 47 61 6c 61 63 74 69 63 5f 41 6c 61 6d 79 2d 45 52 38 45 58 44 5f 31 39 32 30 78 31 30 38 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 31 32 54 31 36 3a 35 32 3a 32 35 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 56 69 72 67 69 6e 47 61 6c 61 63 74 69 63 5c 43 48 Data Ascii: saved 2018-02-12T16:50:29-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\VirginGalactic\CHOSEN\Crops\Edge-VirginGalactic_Alamy-ER8EXD_1920x1080.psd saved 2018-02-12T16:52:25-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\VirginGalactic\CH
2022-03-15 16:08:33 UTC	8311	IN	Data Raw: 31 30 38 30 5f 4c 61 6e 64 73 63 61 70 65 44 36 31 35 44 35 46 38 38 34 42 44 42 39 37 46 39 38 46 38 45 42 46 31 42 32 46 36 35 39 33 35 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 32 38 54 31 31 3a 33 30 3a 30 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 57 6f 6d 65 6e 73 48 69 73 74 6f 72 79 4d 6f 6e 74 68 5c 32 30 31 38 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 57 6f 6d 65 6e 73 48 69 73 74 6f 72 79 4d 6f 6e 74 68 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 37 38 33 36 33 30 36 33 5f 31 39 32 30 78 31 30 38 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d Data Ascii: 1080_LandscapeD615D5F884BDB97F98F8EBF1B2F65935.psb saved 2018-02-28T11:30:07-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\WomensHistoryMonth\2018\CHOSEN\Crops\MIT-WomensHistoryMonth_GettyImages-578363063_1920x1080.jpg saved 2018-02-
2022-03-15 16:08:33 UTC	8327	IN	Data Raw: 30 34 41 41 37 34 45 38 32 32 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 30 35 42 30 46 39 37 46 36 46 34 36 32 32 32 34 34 41 42 36 33 36 39 31 39 34 34 33 39 37 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 30 37 41 31 45 32 37 33 30 32 32 32 35 44 35 35 46 38 36 31 35 38 38 30 41 37 36 44 42 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 30 37 43 39 33 31 36 46 43 37 36 36 32 31 42 38 37 33 45 33 38 37 46 30 43 39 31 34 32 44 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 30 38 30 32 31 31 36 42 38 41 44 36 35 41 32 35 32 44 33 42 35 38 33 31 36 42 30 35 36 32 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 30 38 35 31 44 45 45 32 37 39 37 35 31 45 34 37 38 31 34 46 36 32 34 43 37 Data Ascii: 04AA74E822F</rdf:li> <rdf:li>005B0F97F6F4622244AB63691944397F</rdf:li> <rdf:li>007A1E27302225D55F8615880A76DBC4</rdf:li> <rdf:li>007C9316FC76621B873E387F0C9142D7</rdf:li> <rdf:li>00802116B8AD65A252D3B58316B05625</rdf:li> <rdf:li>00851DEE279751E47814F624C7
2022-03-15 16:08:33 UTC	8343	IN	Data Raw: 34 30 37 34 36 38 31 31 45 44 36 36 38 37 41 42 46 46 37 41 37 43 38 41 34 45 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 44 37 46 31 36 34 37 35 34 37 34 31 36 31 31 36 41 36 45 44 36 44 39 30 43 37 45 34 32 39 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 44 38 31 30 43 31 31 46 44 37 38 39 37 36 46 30 43 35 45 32 34 41 39 39 36 36 42 42 37 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 44 38 44 34 34 43 42 39 42 41 39 37 34 36 31 32 35 34 33 45 46 45 32 33 39 39 39 44 34 42 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 44 38 45 32 45 45 37 36 42 33 44 39 39 35 43 30 33 32 42 46 37 35 34 41 46 43 42 43 33 45 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 44 39 36 34 45 32 39 30 41 Data Ascii: 40746811ED6687ABFF7A7C8A4ED</rdf:li> <rdf:li>0D7F1647547416116A6ED6D90C7E429C</rdf:li> <rdf:li>0D810C11FD78976F0C5E24A9966BB702</rdf:li> <rdf:li>0D8D44CB9BA974612543EFE23999D4B4</rdf:li> <rdf:li>0D8E2EE76B3D995C032BF754AFCBC3E7</rdf:li> <rdf:li>0D964E290A
2022-03-15 16:08:33 UTC	8351	IN	Data Raw: 34 36 38 39 32 30 45 33 31 46 43 36 32 31 44 30 44 41 34 30 42 34 33 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 33 42 32 38 42 33 33 37 33 39 42 42 44 46 33 45 46 37 41 41 43 35 33 34 38 38 38 41 44 42 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 33 42 37 38 45 39 30 38 39 41 37 43 44 39 45 32 41 37 36 43 39 38 32 34 41 34 45 30 39 46 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 33 42 41 36 30 44 35 32 34 32 41 45 34 36 45 36 33 36 43 38 31 34 36 33 31 37 36 44 45 41 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 33 43 39 44 38 30 33 43 39 31 45 33 41 41 38 46 37 46 33 36 32 32 35 46 36 31 36 31 45 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 33 43 45 38 31 46 32 42 37 42 34 Data Ascii: 468920E31FC621D0DA40B436B</rdf:li> <rdf:li>13B28B33739BBDF3EF7AAC534888ADB4</rdf:li> <rdf:li>13B78E9089A7CD9E2A76C9824A4E09FA</rdf:li> <rdf:li>13BA60D5242AE46E636C81463176DEA7</rdf:li> <rdf:li>13C9D803C91E3AA8F7F36225F6161E0E</rdf:li> <rdf:li>13CE81F2B7B4
2022-03-15 16:08:33 UTC	8367	IN	Data Raw: 20 3c 72 64 66 3a 6c 69 3e 32 31 34 36 44 32 32 46 37 31 30 44 45 37 30 41 32 37 30 36 42 32 30 43 32 38 44 39 43 36 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 31 35 44 35 44 44 42 42 33 46 34 33 45 43 30 43 42 46 35 44 46 45 36 34 41 37 34 42 46 38 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 31 36 30 33 43 31 46 42 32 44 46 36 45 36 35 36 45 44 31 31 46 45 33 30 39 43 33 30 31 44 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 31 36 42 32 33 43 46 35 38 30 32 42 35 38 36 31 34 37 46 46 41 37 45 42 37 44 43 35 46 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 31 36 44 42 36 36 39 41 38 41 38 46 38 37 42 33 38 37 35 32 43 35 38 38 31 37 45 35 32 33 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 Data Ascii: <rdf:li>2146D22F710DE70A2706B20C28D9C65B</rdf:li> <rdf:li>215D5DDBB3F43EC0CBF5DFE64A74BF84</rdf:li> <rdf:li>21603C1FB2DF6E656ED11FE309C301D4</rdf:li> <rdf:li>216B23CF5802B586147FFA7EB7DC5FCA</rdf:li> <rdf:li>216DB669A8A8F87B38752C58817E523C</rdf:li> <rdf
2022-03-15 16:08:33 UTC	8383	IN	Data Raw: 3a 6c 69 3e 32 44 41 46 43 45 37 36 36 43 33 34 39 45 33 32 46 44 41 45 31 39 43 35 30 41 36 42 33 44 45 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 44 42 33 41 31 44 35 36 30 36 37 45 34 36 33 41 35 34 39 44 30 46 42 33 46 43 30 43 35 41 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 44 44 35 30 46 30 39 45 34 44 36 46 39 38 46 41 30 32 30 41 32 36 38 37 41 36 35 37 31 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 44 45 37 38 41 44 37 35 45 33 43 37 45 35 30 43 35 35 31 39 33 43 44 38 41 31 32 44 31 46 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 44 46 35 46 43 46 32 30 31 31 37 41 35 43 34 35 41 44 34 35 45 45 42 42 31 41 38 37 36 44 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 Data Ascii: :li>2DAFCE766C349E32FDAE19C50A6B3DE3</rdf:li> <rdf:li>2DB3A1D56067E463A549D0FB3FC0C5A2</rdf:li> <rdf:li>2DD50F09E4D6F98FA020A2687A657134</rdf:li> <rdf:li>2DE78AD75E3C7E50C55193CD8A12D1F7</rdf:li> <rdf:li>2DF5FCF20117A5C45AD45EEBB1A876D3</rdf:li> <rdf:li>2
2022-03-15 16:08:33 UTC	8390	IN	Data Raw: 69 3e 33 33 43 33 42 33 41 30 43 35 43 37 44 44 33 32 44 44 32 45 38 44 37 33 41 33 30 41 37 34 38 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 33 43 44 45 39 45 35 44 41 30 44 37 30 39 31 38 30 36 34 36 45 41 32 31 36 43 45 44 37 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 33 43 46 37 35 43 39 31 31 33 38 42 36 43 37 31 41 39 33 46 46 44 39 32 45 37 45 31 32 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 33 44 46 42 42 46 36 34 31 38 35 46 37 37 31 41 36 31 33 30 31 35 30 43 44 34 43 42 35 43 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 33 45 30 33 46 34 35 37 32 43 46 30 42 44 46 36 31 39 38 36 36 30 44 35 35 32 41 38 44 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 33 45 Data Ascii: i>33C3B3A0C5C7DD32DD2E8D73A30A748E</rdf:li> <rdf:li>33CDE9E5DA0D709180646EA216CED70E</rdf:li> <rdf:li>33CF75C91138B6C71A93FFD92E7E1288</rdf:li> <rdf:li>33DFBBF64185F771A6130150CD4CB5CC</rdf:li> <rdf:li>33E03F4572CF0BDF6198660D552A8D95</rdf:li> <rdf:li>33E
2022-03-15 16:08:33 UTC	8406	IN	Data Raw: 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 31 36 39 37 34 35 38 45 31 33 33 34 37 45 44 34 34 45 32 45 39 41 39 36 37 31 32 34 44 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 31 36 44 46 37 30 38 41 30 39 39 46 44 43 45 42 44 44 32 32 46 37 35 30 39 37 35 35 45 38 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 31 36 46 43 43 44 41 44 35 43 44 46 39 35 38 39 38 43 42 33 41 36 38 44 39 34 35 43 43 44 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 31 37 36 44 39 33 38 33 41 45 44 45 43 30 45 45 45 35 30 45 32 30 38 34 34 44 45 31 31 42 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 31 38 42 44 41 44 34 31 32 44 44 33 43 31 37 46 46 44 37 35 44 39 36 32 45 31 44 34 33 36 42 3c 2f 72 64 66 Data Ascii: </rdf:li> <rdf:li>41697458E13347ED44E2E9A967124D63</rdf:li> <rdf:li>416DF708A099FDCEBDD22F7509755E84</rdf:li> <rdf:li>416FCCDAD5CDF95898CB3A68D945CCDA</rdf:li> <rdf:li>4176D9383AEDEC0EEE50E20844DE11B2</rdf:li> <rdf:li>418BDAD412DD3C17FFD75D962E1D436B</rdf
2022-03-15 16:08:33 UTC	8422	IN	Data Raw: 42 31 42 38 35 46 41 39 37 42 31 30 42 45 46 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 45 36 42 45 37 35 42 46 34 46 42 39 46 37 43 39 44 30 43 33 36 46 32 37 35 46 37 35 43 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 45 37 42 37 41 45 46 37 32 39 42 38 41 44 46 43 30 38 45 43 34 39 37 42 43 42 43 44 41 33 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 45 37 46 46 35 33 43 45 44 32 43 33 42 46 32 31 38 31 46 34 38 35 32 39 39 30 36 30 46 42 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 45 38 34 37 41 30 45 34 45 32 31 33 35 36 33 36 38 42 34 37 39 32 31 37 39 35 43 32 41 46 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 45 38 45 30 31 44 46 37 33 39 32 32 35 38 36 30 34 36 31 43 Data Ascii: B1B85FA97B10BEF6</rdf:li> <rdf:li>4E6BE75BF4FB9F7C9D0C36F275F75C0E</rdf:li> <rdf:li>4E7B7AEF729B8ADFC08EC497BCBCDA31</rdf:li> <rdf:li>4E7FF53CED2C3BF2181F485299060FB7</rdf:li> <rdf:li>4E847A0E4E21356368B47921795C2AFC</rdf:li> <rdf:li>4E8E01DF739225860461C
2022-03-15 16:08:33 UTC	8430	IN	Data Raw: 46 34 42 46 42 36 37 44 37 30 31 44 39 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 35 32 34 46 46 32 32 36 44 32 36 45 43 44 46 36 42 37 44 34 36 35 36 43 35 32 31 34 34 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 35 32 39 45 44 41 38 32 42 35 45 32 38 43 35 36 35 39 35 44 39 33 42 33 30 33 46 36 33 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 35 32 43 32 32 33 38 35 36 41 35 37 34 32 30 31 36 43 35 30 37 37 42 44 34 33 39 44 38 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 35 33 34 41 30 37 43 45 35 41 32 44 39 39 36 35 43 33 41 43 37 46 34 30 38 35 33 30 41 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 35 34 35 31 46 33 34 33 38 43 32 39 45 32 33 38 46 30 30 36 32 39 Data Ascii: F4BFB67D701D9E</rdf:li> <rdf:li>5524FF226D26ECDF6B7D4656C5214466</rdf:li> <rdf:li>5529EDA82B5E28C56595D93B303F635F</rdf:li> <rdf:li>552C223856A5742016C5077BD439D80C</rdf:li> <rdf:li>5534A07CE5A2D9965C3AC7F408530A05</rdf:li> <rdf:li>55451F3438C29E238F00629
2022-03-15 16:08:33 UTC	8446	IN	Data Raw: 45 33 34 34 36 46 46 39 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 33 41 45 37 30 31 37 37 37 41 42 45 30 39 36 46 44 37 31 45 39 33 33 39 31 42 31 36 45 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 33 42 30 39 34 31 36 30 41 36 46 38 39 31 33 34 42 42 38 43 42 31 32 33 37 30 31 37 36 39 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 33 43 45 37 34 33 33 31 35 31 41 44 41 44 35 33 32 44 38 33 34 45 35 31 32 38 34 30 32 41 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 33 43 45 46 45 37 39 30 39 44 30 34 43 42 39 41 42 39 46 38 38 34 45 37 30 44 33 45 39 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 33 44 34 35 38 42 44 36 30 34 44 31 32 35 37 38 38 38 34 33 43 33 30 39 43 41 39 Data Ascii: E3446FF94</rdf:li> <rdf:li>63AE701777ABE096FD71E93391B16E89</rdf:li> <rdf:li>63B094160A6F89134BB8CB1237017694</rdf:li> <rdf:li>63CE7433151ADAD532D834E5128402A0</rdf:li> <rdf:li>63CEFE7909D04CB9AB9F884E70D3E949</rdf:li> <rdf:li>63D458BD604D125788843C309CA9
2022-03-15 16:08:33 UTC	8462	IN	Data Raw: 37 45 38 46 44 35 31 43 44 31 45 46 37 42 39 39 34 35 39 46 36 36 41 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 31 45 43 41 36 36 33 39 36 36 36 33 39 38 42 42 36 44 33 35 38 31 31 45 37 37 45 44 46 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 31 46 46 44 31 44 34 35 35 33 46 41 45 39 32 34 42 32 33 31 44 32 36 38 36 43 42 38 35 35 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 32 31 34 43 33 32 43 42 42 37 38 30 43 32 38 34 39 31 45 38 35 46 46 33 34 45 46 42 30 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 32 32 43 36 45 37 41 35 43 34 46 32 32 37 35 37 31 35 46 46 41 37 37 42 36 32 31 42 37 46 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 32 33 41 36 46 34 32 38 32 33 35 Data Ascii: 7E8FD51CD1EF7B99459F66A7E</rdf:li> <rdf:li>71ECA6639666398BB6D35811E77EDF87</rdf:li> <rdf:li>71FFD1D4553FAE924B231D2686CB8554</rdf:li> <rdf:li>7214C32CBB780C28491E85FF34EFB033</rdf:li> <rdf:li>722C6E7A5C4F2275715FFA77B621B7FB</rdf:li> <rdf:li>723A6F428235
2022-03-15 16:08:33 UTC	8470	IN	Data Raw: 39 44 39 44 35 46 46 46 46 39 43 34 37 45 44 39 42 36 35 45 45 36 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 38 30 44 37 44 37 43 43 42 31 46 45 32 43 30 32 39 30 38 41 35 37 30 37 34 45 46 43 35 44 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 38 30 45 35 36 41 33 33 38 39 41 38 31 34 34 46 36 34 31 43 43 43 36 41 46 44 41 41 30 39 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 38 31 35 38 33 45 45 45 42 42 32 35 31 39 43 42 32 37 39 36 46 35 44 45 43 32 35 43 42 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 38 31 38 41 33 44 31 30 32 46 34 42 31 44 44 37 37 45 32 43 45 44 44 31 31 34 35 46 34 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 38 31 46 38 44 37 30 36 41 30 38 44 33 Data Ascii: 9D9D5FFFF9C47ED9B65EE61</rdf:li> <rdf:li>780D7D7CCB1FE2C02908A57074EFC5D2</rdf:li> <rdf:li>780E56A3389A8144F641CCC6AFDAA09E</rdf:li> <rdf:li>781583EEEBB2519CB2796F5DEC25CB8D</rdf:li> <rdf:li>7818A3D102F4B1DD77E2CEDD1145F43B</rdf:li> <rdf:li>781F8D706A08D3
2022-03-15 16:08:33 UTC	8486	IN	Data Raw: 72 64 66 3a 6c 69 3e 38 35 45 46 41 34 36 37 46 45 36 37 33 39 38 42 46 39 34 36 45 43 34 34 36 36 41 41 32 41 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 35 46 46 32 44 37 34 37 42 35 33 39 43 35 32 45 36 33 34 43 35 46 45 34 43 37 32 34 39 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 36 31 34 45 39 39 41 39 45 33 43 38 32 46 44 44 39 38 31 45 39 45 46 41 30 38 35 41 46 37 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 36 32 30 31 30 46 42 31 37 37 36 46 38 32 44 45 37 38 42 39 35 32 45 38 37 38 37 41 31 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 36 32 31 33 35 34 46 36 35 46 43 44 37 38 35 35 31 46 42 31 31 38 43 44 30 38 43 41 43 31 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c Data Ascii: rdf:li>85EFA467FE67398BF946EC4466AA2A3E</rdf:li> <rdf:li>85FF2D747B539C52E634C5FE4C724970</rdf:li> <rdf:li>8614E99A9E3C82FDD981E9EFA085AF77</rdf:li> <rdf:li>862010FB1776F82DE78B952E8787A1EF</rdf:li> <rdf:li>8621354F65FCD78551FB118CD08CAC1B</rdf:li> <rdf:l
2022-03-15 16:08:33 UTC	8502	IN	Data Raw: 32 37 30 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 33 46 38 32 31 35 44 43 36 36 44 46 44 35 37 30 31 43 39 31 46 36 38 36 34 35 46 36 34 42 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 34 30 33 34 45 32 37 37 43 30 33 38 32 44 34 44 32 43 42 32 46 36 34 43 41 42 31 34 32 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 34 30 45 36 39 38 35 44 33 46 32 45 38 44 41 42 30 37 45 34 36 45 43 46 45 43 38 33 42 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 34 31 32 45 43 32 41 32 38 37 43 46 42 34 44 37 34 41 36 33 46 38 36 36 32 42 32 39 36 34 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 34 33 32 45 38 35 45 38 39 38 44 42 31 30 45 36 36 30 31 44 42 31 39 32 41 34 36 41 38 41 34 Data Ascii: 27090</rdf:li> <rdf:li>93F8215DC66DFD5701C91F68645F64B1</rdf:li> <rdf:li>94034E277C0382D4D2CB2F64CAB14296</rdf:li> <rdf:li>940E6985D3F2E8DAB07E46ECFEC83B3E</rdf:li> <rdf:li>9412EC2A287CFB4D74A63F8662B2964F</rdf:li> <rdf:li>9432E85E898DB10E6601DB192A46A8A4
2022-03-15 16:08:33 UTC	8510	IN	Data Raw: 39 41 33 37 37 32 43 37 33 33 36 44 32 36 44 37 34 42 36 32 32 31 41 42 31 42 44 46 46 45 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 41 33 38 39 39 42 46 32 30 36 45 34 30 42 42 41 45 31 46 45 30 34 46 39 36 36 33 44 43 36 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 41 33 39 39 42 36 45 33 45 37 45 36 41 37 35 31 44 31 31 34 43 36 32 45 43 43 36 46 44 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 41 34 37 31 38 46 35 46 42 41 42 41 45 30 45 36 39 38 44 34 46 37 43 31 34 41 32 45 39 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 41 37 33 43 44 35 45 45 43 33 42 43 42 38 43 39 32 45 44 33 46 32 34 39 37 38 39 37 30 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 41 38 31 33 Data Ascii: 9A3772C7336D26D74B6221AB1BDFFE6B</rdf:li> <rdf:li>9A3899BF206E40BBAE1FE04F9663DC69</rdf:li> <rdf:li>9A399B6E3E7E6A751D114C62ECC6FD41</rdf:li> <rdf:li>9A4718F5FBABAE0E698D4F7C14A2E93E</rdf:li> <rdf:li>9A73CD5EEC3BCB8C92ED3F2497897034</rdf:li> <rdf:li>9A813
2022-03-15 16:08:33 UTC	8526	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 37 39 43 37 38 38 39 35 38 41 35 37 42 36 35 46 31 45 31 39 45 38 42 33 34 42 41 41 41 45 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 37 41 31 32 35 35 46 46 33 38 36 36 37 39 35 42 43 42 32 37 30 36 31 30 32 43 37 42 33 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 37 41 37 45 45 46 41 35 35 37 32 46 43 45 42 35 44 30 44 35 46 41 34 37 38 43 38 43 41 43 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 37 42 32 45 31 35 37 43 32 45 42 42 33 45 34 36 46 35 36 42 31 35 45 31 35 44 36 38 46 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 37 42 34 42 36 36 44 43 42 39 45 38 32 33 43 31 41 31 31 42 35 42 35 32 31 44 39 30 35 31 34 3c 2f 72 64 66 3a 6c Data Ascii: rdf:li> <rdf:li>A79C788958A57B65F1E19E8B34BAAAE2</rdf:li> <rdf:li>A7A1255FF3866795BCB2706102C7B3C8</rdf:li> <rdf:li>A7A7EEFA5572FCEB5D0D5FA478C8CACF</rdf:li> <rdf:li>A7B2E157C2EBB3E46F56B15E15D68F3B</rdf:li> <rdf:li>A7B4B66DCB9E823C1A11B5B521D90514</rdf:l
2022-03-15 16:08:33 UTC	8542	IN	Data Raw: 45 30 30 34 35 45 42 32 36 30 35 41 34 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 35 31 39 32 37 42 35 42 30 33 33 37 37 41 34 43 36 46 38 36 35 35 44 39 44 45 39 44 42 32 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 35 32 31 45 37 30 36 39 35 30 31 33 32 37 38 39 42 33 46 38 41 34 31 31 35 38 42 45 42 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 35 33 30 37 32 41 39 33 34 33 30 38 33 35 46 44 44 30 46 30 34 32 46 44 36 32 38 31 32 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 35 33 31 38 36 30 41 41 33 44 41 43 42 41 42 41 36 43 35 41 30 42 30 41 41 46 31 45 42 39 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 35 33 31 46 34 30 43 39 42 34 37 41 38 46 43 44 31 36 36 32 38 35 Data Ascii: E0045EB2605A4A</rdf:li> <rdf:li>B51927B5B03377A4C6F8655D9DE9DB23</rdf:li> <rdf:li>B521E706950132789B3F8A41158BEB34</rdf:li> <rdf:li>B53072A93430835FDD0F042FD628123B</rdf:li> <rdf:li>B531860AA3DACBABA6C5A0B0AAF1EB9E</rdf:li> <rdf:li>B531F40C9B47A8FCD166285
2022-03-15 16:08:33 UTC	8549	IN	Data Raw: 35 46 43 36 44 37 44 38 39 32 46 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 42 41 39 35 45 37 42 30 46 41 43 35 30 33 44 30 36 30 30 33 35 38 37 42 46 34 34 35 42 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 42 42 36 39 30 32 41 46 30 43 39 41 32 45 45 46 37 37 32 30 42 36 31 37 37 42 45 41 32 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 42 42 44 30 31 44 44 38 41 36 46 36 33 34 45 42 34 30 35 31 36 36 38 37 44 46 37 34 44 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 42 43 33 42 31 34 38 34 46 42 31 35 44 32 30 36 46 35 33 34 32 37 36 32 43 30 44 42 35 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 42 43 36 37 36 37 43 38 36 32 34 32 37 45 36 33 43 30 42 32 37 36 30 31 Data Ascii: 5FC6D7D892F8</rdf:li> <rdf:li>BBA95E7B0FAC503D06003587BF445BBB</rdf:li> <rdf:li>BBB6902AF0C9A2EEF7720B6177BEA236</rdf:li> <rdf:li>BBBD01DD8A6F634EB40516687DF74D30</rdf:li> <rdf:li>BBC3B1484FB15D206F5342762C0DB514</rdf:li> <rdf:li>BBC6767C862427E63C0B27601
2022-03-15 16:08:33 UTC	8551	IN	Data Raw: 30 35 35 36 36 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 44 33 31 31 34 30 44 42 38 30 38 37 32 38 37 39 45 44 46 43 30 39 41 35 43 30 30 39 41 38 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 44 33 36 41 46 43 30 34 44 46 33 41 36 38 39 44 37 46 45 30 35 43 36 38 33 46 30 33 35 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 44 33 41 34 43 44 38 44 44 37 32 30 45 33 39 33 42 43 44 39 33 33 36 45 32 38 39 46 30 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 44 34 41 31 31 46 43 41 44 39 39 45 44 34 32 46 39 33 33 30 39 31 33 42 34 39 44 35 30 43 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 44 34 43 35 38 42 41 32 31 39 46 41 32 35 45 36 46 38 30 39 35 38 34 43 43 34 31 37 41 38 Data Ascii: 05566F</rdf:li> <rdf:li>BD31140DB80872879EDFC09A5C009A8C</rdf:li> <rdf:li>BD36AFC04DF3A689D7FE05C683F035B8</rdf:li> <rdf:li>BD3A4CD8DD720E393BCD9336E289F0B0</rdf:li> <rdf:li>BD4A11FCAD99ED42F9330913B49D50CD</rdf:li> <rdf:li>BD4C58BA219FA25E6F809584CC417A8
2022-03-15 16:08:33 UTC	8567	IN	Data Raw: 37 41 45 45 43 30 33 45 43 39 30 46 30 41 31 45 42 30 45 42 44 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 41 38 35 39 39 37 43 34 34 43 32 45 30 36 42 43 34 46 38 44 30 39 36 33 45 30 30 43 35 35 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 41 38 38 36 34 32 42 39 33 41 46 37 35 33 43 43 34 41 42 33 39 41 39 43 38 45 37 31 33 44 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 41 42 46 44 46 45 37 37 43 36 39 44 44 44 38 36 30 37 37 41 43 33 45 33 33 38 37 38 44 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 41 43 30 32 32 31 44 38 32 41 41 37 44 41 38 37 32 41 36 31 42 45 32 39 30 43 42 34 41 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 41 44 34 32 39 32 36 34 42 41 46 36 32 31 Data Ascii: 7AEEC03EC90F0A1EB0EBD7</rdf:li> <rdf:li>CA85997C44C2E06BC4F8D0963E00C55F</rdf:li> <rdf:li>CA88642B93AF753CC4AB39A9C8E713DB</rdf:li> <rdf:li>CABFDFE77C69DDD86077AC3E33878DF9</rdf:li> <rdf:li>CAC0221D82AA7DA872A61BE290CB4A8D</rdf:li> <rdf:li>CAD429264BAF621
2022-03-15 16:08:33 UTC	8583	IN	Data Raw: 43 36 31 36 38 39 34 39 31 43 43 38 46 42 37 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 37 44 33 38 38 44 35 43 37 30 41 35 33 30 30 31 41 42 33 37 45 35 38 41 32 42 36 34 42 42 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 37 44 35 36 43 38 44 33 42 38 34 43 31 44 34 42 35 33 30 39 42 37 45 33 34 35 32 39 31 30 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 37 45 35 41 35 39 41 31 43 36 43 44 38 33 38 35 39 36 32 30 37 45 38 41 46 34 32 30 45 37 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 37 45 45 31 35 38 36 43 30 44 34 38 35 37 35 39 37 33 36 35 36 46 31 38 44 43 35 34 30 31 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 37 46 34 37 42 33 37 44 31 38 38 45 43 38 33 43 38 39 45 Data Ascii: C61689491CC8FB7C3</rdf:li> <rdf:li>D7D388D5C70A53001AB37E58A2B64BBC</rdf:li> <rdf:li>D7D56C8D3B84C1D4B5309B7E34529106</rdf:li> <rdf:li>D7E5A59A1C6CD838596207E8AF420E75</rdf:li> <rdf:li>D7EE1586C0D48575973656F18DC54010</rdf:li> <rdf:li>D7F47B37D188EC83C89E
2022-03-15 16:08:33 UTC	8589	IN	Data Raw: 43 32 44 42 46 45 37 30 45 36 41 35 30 33 42 42 39 45 34 35 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 44 34 42 36 41 35 31 45 43 43 30 33 33 44 41 43 45 34 30 42 45 34 45 32 46 38 38 38 44 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 44 35 38 35 44 46 44 45 35 38 39 43 35 36 46 39 42 42 42 45 35 42 44 38 32 44 34 34 35 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 44 37 34 30 42 38 38 30 32 32 41 34 31 35 38 42 39 41 45 31 30 32 41 43 35 35 43 45 37 38 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 44 37 42 32 36 39 41 41 43 46 43 42 30 46 41 33 34 45 33 33 37 36 43 41 42 34 34 31 38 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 44 37 46 43 43 32 31 33 36 35 41 31 39 38 44 Data Ascii: C2DBFE70E6A503BB9E45B</rdf:li> <rdf:li>DD4B6A51ECC033DACE40BE4E2F888D13</rdf:li> <rdf:li>DD585DFDE589C56F9BBBE5BD82D445C5</rdf:li> <rdf:li>DD740B88022A4158B9AE102AC55CE785</rdf:li> <rdf:li>DD7B269AACFCB0FA34E3376CAB441860</rdf:li> <rdf:li>DD7FCC21365A198D
2022-03-15 16:08:33 UTC	8605	IN	Data Raw: 66 3a 6c 69 3e 45 41 34 33 36 34 35 44 44 46 42 32 45 41 33 43 35 35 46 38 34 31 45 38 45 39 36 31 43 35 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 41 34 34 35 41 46 42 37 31 34 32 43 36 46 39 36 37 35 32 45 42 39 33 45 46 46 34 37 46 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 41 34 37 32 46 32 38 38 38 44 46 42 37 44 42 43 45 30 43 42 39 39 41 45 33 38 46 32 34 41 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 41 35 38 42 45 39 37 30 32 31 43 39 39 46 31 35 33 46 43 44 44 33 39 31 41 30 35 36 42 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 41 35 38 45 42 46 41 35 37 46 45 35 41 32 45 31 44 45 35 44 31 45 39 46 41 37 35 37 46 46 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e Data Ascii: f:li>EA43645DDFB2EA3C55F841E8E961C530</rdf:li> <rdf:li>EA445AFB7142C6F96752EB93EFF47F5D</rdf:li> <rdf:li>EA472F2888DFB7DBCE0CB99AE38F24AF</rdf:li> <rdf:li>EA58BE97021C99F153FCDD391A056BC8</rdf:li> <rdf:li>EA58EBFA57FE5A2E1DE5D1E9FA757FF2</rdf:li> <rdf:li>
2022-03-15 16:08:33 UTC	8621	IN	Data Raw: 36 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 36 30 35 43 30 38 45 34 31 35 35 35 46 46 43 42 45 32 35 31 41 45 30 44 43 32 44 41 36 45 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 36 30 36 30 34 34 32 44 34 32 38 44 42 44 41 38 43 41 37 33 37 30 42 37 35 39 34 32 30 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 36 30 43 41 43 46 36 31 32 38 43 42 37 32 43 31 38 45 44 31 33 38 46 37 41 36 35 32 31 36 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 36 32 32 37 32 35 31 45 33 41 36 46 30 37 46 42 31 31 38 32 36 39 39 31 41 44 37 33 30 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 36 34 38 37 43 35 39 31 30 31 46 34 42 46 42 42 33 42 46 30 34 35 39 37 30 33 33 43 39 33 43 3c 2f Data Ascii: 6E5</rdf:li> <rdf:li>F605C08E41555FFCBE251AE0DC2DA6E1</rdf:li> <rdf:li>F6060442D428DBDA8CA7370B75942074</rdf:li> <rdf:li>F60CACF6128CB72C18ED138F7A65216E</rdf:li> <rdf:li>F6227251E3A6F07FB11826991AD730DF</rdf:li> <rdf:li>F6487C59101F4BFBB3BF04597033C93C</
2022-03-15 16:08:33 UTC	8629	IN	Data Raw: 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 43 39 39 39 35 31 46 39 33 39 44 42 37 46 44 44 33 31 32 37 43 43 43 44 32 44 44 44 43 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 43 39 46 45 37 39 43 45 37 33 46 31 37 44 46 43 31 34 38 46 37 32 37 38 34 38 37 41 35 37 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 43 41 33 38 33 36 45 41 39 34 41 45 39 37 42 30 45 46 38 43 35 30 30 45 33 41 32 35 39 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 43 41 37 37 31 35 36 37 42 33 35 31 42 38 34 45 32 37 45 36 34 39 32 32 46 42 45 32 38 41 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 43 41 41 41 39 45 34 33 33 44 34 32 43 37 37 36 37 37 42 45 35 39 36 46 42 43 30 35 34 38 31 3c 2f 72 64 Data Ascii: 5</rdf:li> <rdf:li>FC99951F939DB7FDD3127CCCD2DDDC68</rdf:li> <rdf:li>FC9FE79CE73F17DFC148F7278487A577</rdf:li> <rdf:li>FCA3836EA94AE97B0EF8C500E3A25916</rdf:li> <rdf:li>FCA771567B351B84E27E64922FBE28AC</rdf:li> <rdf:li>FCAAA9E433D42C77677BE596FBC05481</rd
2022-03-15 16:08:33 UTC	8645	IN	Data Raw: 2d 61 65 37 38 36 33 62 62 38 64 32 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 38 64 34 61 38 30 38 2d 37 32 36 34 2d 31 31 65 31 2d 39 31 36 34 2d 61 65 62 66 34 37 61 62 39 64 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 39 37 36 65 36 34 35 2d 38 65 65 39 2d 31 31 64 38 2d 62 39 31 66 2d 66 39 65 63 64 38 66 66 61 34 32 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 39 62 32 63 66 30 66 2d 61 32 62 66 2d 31 31 37 38 2d 61 39 37 35 2d 65 61 39 39 31 33 30 63 33 62 32 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 Data Ascii: -ae7863bb8d21</rdf:li> <rdf:li>adobe:docid:photoshop:28d4a808-7264-11e1-9164-aebf47ab9d51</rdf:li> <rdf:li>adobe:docid:photoshop:2976e645-8ee9-11d8-b91f-f9ecd8ffa428</rdf:li> <rdf:li>adobe:docid:photoshop:29b2cf0f-a2bf-1178-a975-ea99130c3b2b</rdf:li> <rdf
2022-03-15 16:08:33 UTC	8661	IN	Data Raw: 68 6f 74 6f 73 68 6f 70 3a 35 39 38 30 31 63 65 36 2d 65 33 61 63 2d 63 35 34 33 2d 62 66 31 62 2d 62 36 33 62 38 66 65 39 36 33 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 61 33 38 62 64 31 63 2d 63 33 36 61 2d 31 31 64 37 2d 61 30 31 63 2d 63 61 65 37 66 64 35 38 32 38 61 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 61 38 66 33 63 39 39 2d 37 31 63 36 2d 31 31 65 31 2d 39 65 38 36 2d 63 30 38 34 62 30 62 37 37 33 38 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 62 38 34 38 30 30 38 2d 66 63 34 34 2d 31 31 37 38 Data Ascii: hotoshop:59801ce6-e3ac-c543-bf1b-b63b8fe96395</rdf:li> <rdf:li>adobe:docid:photoshop:5a38bd1c-c36a-11d7-a01c-cae7fd5828a6</rdf:li> <rdf:li>adobe:docid:photoshop:5a8f3c99-71c6-11e1-9e86-c084b0b7738d</rdf:li> <rdf:li>adobe:docid:photoshop:5b848008-fc44-1178
2022-03-15 16:08:33 UTC	8669	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 31 38 63 62 34 35 38 2d 39 33 66 66 2d 31 31 64 38 2d 38 35 35 38 2d 66 61 32 63 61 31 32 32 39 63 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 31 39 30 65 66 38 39 2d 37 39 37 33 2d 31 31 65 31 2d 62 61 62 63 2d 65 35 35 65 37 63 36 61 38 39 33 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 31 39 32 65 62 32 66 2d 65 33 31 63 2d 31 31 64 39 2d 62 36 65 37 2d 64 61 34 65 35 32 65 33 65 34 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a Data Ascii: df:li> <rdf:li>adobe:docid:photoshop:718cb458-93ff-11d8-8558-fa2ca1229c02</rdf:li> <rdf:li>adobe:docid:photoshop:7190ef89-7973-11e1-babc-e55e7c6a8932</rdf:li> <rdf:li>adobe:docid:photoshop:7192eb2f-e31c-11d9-b6e7-da4e52e3e465</rdf:li> <rdf:li>adobe:docid:
2022-03-15 16:08:33 UTC	8685	IN	Data Raw: 34 2d 37 65 32 62 2d 31 31 65 31 2d 38 38 65 34 2d 62 33 35 34 30 32 64 36 64 61 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 32 62 30 63 62 65 66 2d 66 35 66 63 2d 31 31 37 38 2d 39 65 63 39 2d 62 66 33 32 34 64 64 65 35 66 64 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 32 63 61 65 66 63 65 2d 66 38 66 65 2d 31 31 37 38 2d 39 65 63 39 2d 62 66 33 32 34 64 64 65 35 66 64 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 33 35 61 35 63 62 32 2d 32 34 61 34 2d 31 31 64 62 2d 38 61 66 38 2d 66 39 34 30 61 38 33 30 38 61 Data Ascii: 4-7e2b-11e1-88e4-b35402d6da16</rdf:li> <rdf:li>adobe:docid:photoshop:a2b0cbef-f5fc-1178-9ec9-bf324dde5fd6</rdf:li> <rdf:li>adobe:docid:photoshop:a2caefce-f8fe-1178-9ec9-bf324dde5fd6</rdf:li> <rdf:li>adobe:docid:photoshop:a35a5cb2-24a4-11db-8af8-f940a8308a
2022-03-15 16:08:33 UTC	8701	IN	Data Raw: 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 39 39 65 62 34 36 61 2d 37 66 30 62 2d 37 35 34 66 2d 62 63 62 34 2d 35 62 31 32 65 38 34 36 32 35 63 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 39 66 37 35 64 32 32 2d 38 63 62 32 2d 31 31 37 38 2d 38 35 37 63 2d 64 36 61 39 66 34 61 38 66 32 39 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 61 31 36 37 35 33 32 2d 39 31 64 39 2d 31 31 65 36 2d 61 30 33 65 2d 65 32 62 33 61 32 66 62 36 37 65 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 Data Ascii: df:li>adobe:docid:photoshop:d99eb46a-7f0b-754f-bcb4-5b12e84625cc</rdf:li> <rdf:li>adobe:docid:photoshop:d9f75d22-8cb2-1178-857c-d6a9f4a8f29f</rdf:li> <rdf:li>adobe:docid:photoshop:da167532-91d9-11e6-a03e-e2b3a2fb67e1</rdf:li> <rdf:li>adobe:docid:photoshop
2022-03-15 16:08:33 UTC	8709	IN	Data Raw: 31 34 63 2d 66 32 31 39 61 64 36 34 63 64 32 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 66 62 62 35 39 30 32 2d 30 38 65 39 2d 31 31 65 37 2d 38 39 35 34 2d 39 66 63 34 30 30 37 39 65 62 65 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 66 63 63 36 32 64 30 2d 39 61 32 64 2d 31 31 64 39 2d 62 35 32 64 2d 61 36 31 66 32 61 34 37 31 30 66 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 66 64 39 35 66 66 35 2d 65 66 30 38 2d 31 31 64 39 2d 39 36 65 35 2d 39 31 34 36 34 32 37 64 32 66 39 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c Data Ascii: 14c-f219ad64cd2e</rdf:li> <rdf:li>adobe:docid:photoshop:efbb5902-08e9-11e7-8954-9fc40079ebe6</rdf:li> <rdf:li>adobe:docid:photoshop:efcc62d0-9a2d-11d9-b52d-a61f2a4710f8</rdf:li> <rdf:li>adobe:docid:photoshop:efd95ff5-ef08-11d9-96e5-9146427d2f9a</rdf:li> <
2022-03-15 16:08:33 UTC	8725	IN	Data Raw: 75 69 64 3a 32 37 33 36 36 31 46 33 45 45 35 36 44 46 31 31 38 32 41 31 42 36 42 41 43 33 36 42 41 38 30 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 37 34 33 35 33 41 44 30 37 32 33 44 46 31 31 39 30 45 33 41 46 46 37 33 45 37 46 37 38 39 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 37 34 34 45 42 33 35 39 43 32 32 44 44 31 31 42 37 30 30 46 37 42 46 38 38 46 31 35 35 39 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 37 39 30 34 36 45 30 39 32 41 36 44 44 31 31 39 41 32 41 45 34 35 45 43 37 33 41 37 43 44 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 32 37 39 41 36 42 33 42 34 37 39 37 44 46 31 31 39 43 43 42 38 33 30 35 36 33 37 36 32 44 41 Data Ascii: uid:273661F3EE56DF1182A1B6BAC36BA807</rdf:li> <rdf:li>uuid:274353AD0723DF1190E3AFF73E7F7895</rdf:li> <rdf:li>uuid:2744EB359C22DD11B700F7BF88F1559B</rdf:li> <rdf:li>uuid:279046E092A6DD119A2AE45EC73A7CD3</rdf:li> <rdf:li>uuid:279A6B3B4797DF119CCB830563762DA
2022-03-15 16:08:33 UTC	9191	IN	Data Raw: 41 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 41 42 31 44 32 36 45 41 36 43 36 31 31 44 45 42 37 46 35 43 39 33 41 41 32 46 32 30 38 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 41 42 31 44 32 37 34 41 36 43 36 31 31 44 45 42 37 46 35 43 39 33 41 41 32 46 32 30 38 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 41 42 41 38 34 45 46 44 35 43 38 45 34 31 31 39 36 31 33 44 44 36 31 38 31 30 46 37 36 46 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 41 44 41 39 36 42 45 36 31 33 32 31 31 44 43 38 42 31 37 45 42 36 37 45 30 32 35 36 44 45 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 35 41 46 39 36 46 36 33 37 Data Ascii: A96</rdf:li> <rdf:li>uuid:5AB1D26EA6C611DEB7F5C93AA2F208B0</rdf:li> <rdf:li>uuid:5AB1D274A6C611DEB7F5C93AA2F208B0</rdf:li> <rdf:li>uuid:5ABA84EFD5C8E4119613DD61810F76FA</rdf:li> <rdf:li>uuid:5ADA96BE613211DC8B17EB67E0256DE3</rdf:li> <rdf:li>uuid:5AF96F637
2022-03-15 16:08:33 UTC	9199	IN	Data Raw: 69 64 3a 37 34 37 36 39 42 38 46 41 39 43 39 45 30 31 31 41 41 35 35 41 30 36 35 46 38 41 32 33 39 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 34 38 42 30 35 33 30 37 46 31 33 31 31 44 43 41 43 43 35 38 38 35 42 43 43 46 41 33 44 30 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 34 39 41 39 37 37 34 38 39 36 46 45 30 31 31 42 43 36 32 41 41 43 33 46 32 38 44 31 34 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 34 39 44 39 37 35 34 36 35 35 37 44 46 31 31 39 44 34 30 43 43 31 36 32 37 30 35 46 35 43 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 34 43 37 46 31 41 33 31 42 41 43 44 42 31 31 38 30 34 31 46 30 42 41 45 33 30 43 31 30 34 41 Data Ascii: id:74769B8FA9C9E011AA55A065F8A23988</rdf:li> <rdf:li>uuid:748B05307F1311DCACC5885BCCFA3D09</rdf:li> <rdf:li>uuid:749A9774896FE011BC62AAC3F28D1468</rdf:li> <rdf:li>uuid:749D97546557DF119D40CC162705F5CF</rdf:li> <rdf:li>uuid:74C7F1A31BACDB118041F0BAE30C104A
2022-03-15 16:08:33 UTC	9215	IN	Data Raw: 39 43 37 45 31 34 30 41 44 43 31 31 41 32 44 41 41 34 44 37 38 46 35 30 39 31 33 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 36 33 41 35 44 43 41 44 46 46 45 44 46 31 31 42 37 39 46 45 38 45 45 41 30 30 36 41 30 45 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 36 34 35 44 43 44 33 33 41 46 39 44 46 31 31 42 35 39 32 46 38 38 31 30 38 37 37 31 34 39 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 36 34 45 44 32 35 32 41 37 43 39 45 30 31 31 41 41 35 35 41 30 36 35 46 38 41 32 33 39 38 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 41 36 36 43 46 38 38 36 41 34 32 32 45 31 31 31 42 30 44 46 42 38 36 34 37 30 37 30 35 30 30 32 3c 2f 72 64 66 3a 6c Data Ascii: 9C7E140ADC11A2DAA4D78F509131</rdf:li> <rdf:li>uuid:A63A5DCADFFEDF11B79FE8EEA006A0EF</rdf:li> <rdf:li>uuid:A645DCD33AF9DF11B592F8810877149D</rdf:li> <rdf:li>uuid:A64ED252A7C9E011AA55A065F8A23988</rdf:li> <rdf:li>uuid:A66CF886A422E111B0DFB86470705002</rdf:l
2022-03-15 16:08:33 UTC	9231	IN	Data Raw: 69 64 3a 45 33 35 30 32 32 34 37 45 39 45 34 31 31 44 46 39 46 41 35 42 38 30 32 34 42 42 36 36 38 36 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 33 36 45 34 41 46 44 30 34 36 36 44 44 31 31 39 39 33 33 42 38 35 35 31 34 39 34 42 44 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 33 38 46 42 34 46 35 38 33 45 35 44 43 31 31 41 46 39 37 43 41 37 39 38 45 45 41 30 43 34 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 33 45 33 33 41 43 35 32 33 35 39 44 45 31 31 39 38 38 32 43 36 43 42 32 36 44 35 30 44 32 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 34 41 41 32 35 46 32 36 30 37 45 45 31 31 31 39 43 36 32 39 46 44 42 32 39 41 45 30 39 43 34 Data Ascii: id:E3502247E9E411DF9FA5B8024BB6686D</rdf:li> <rdf:li>uuid:E36E4AFD0466DD119933B8551494BD56</rdf:li> <rdf:li>uuid:E38FB4F583E5DC11AF97CA798EEA0C47</rdf:li> <rdf:li>uuid:E3E33AC52359DE119882C6CB26D50D2E</rdf:li> <rdf:li>uuid:E4AA25F2607EE1119C629FDB29AE09C4
2022-03-15 16:08:33 UTC	9238	IN	Data Raw: 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 30 33 32 38 43 32 43 30 38 32 36 45 33 31 31 38 44 42 33 38 31 45 46 32 43 31 44 38 41 39 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 30 33 38 30 35 35 42 41 44 32 34 36 38 31 31 38 37 31 46 45 43 34 42 39 36 31 36 37 44 33 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 30 34 34 46 39 35 42 34 31 32 30 36 38 31 31 39 32 42 30 45 41 33 38 41 39 31 37 36 44 36 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 30 34 35 41 34 33 39 32 43 39 37 45 34 31 31 39 43 41 33 38 35 33 37 38 32 32 44 30 30 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 30 34 42 39 30 38 37 30 45 32 Data Ascii: :li>xmp.did:00328C2C0826E3118DB381EF2C1D8A93</rdf:li> <rdf:li>xmp.did:0038055BAD246811871FEC4B96167D32</rdf:li> <rdf:li>xmp.did:0044F95B4120681192B0EA38A9176D6C</rdf:li> <rdf:li>xmp.did:0045A4392C97E4119CA38537822D00A8</rdf:li> <rdf:li>xmp.did:004B90870E2
2022-03-15 16:08:33 UTC	9254	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 39 34 43 43 45 36 37 33 46 44 41 32 41 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 39 34 43 45 46 39 45 43 46 36 46 45 45 43 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 37 42 41 42 35 37 42 37 42 38 33 37 38 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 39 36 31 42 32 31 34 31 42 44 43 41 33 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 Data Ascii: rdf:li> <rdf:li>xmp.did:0280117407206811994CCE673FDA2A3B</rdf:li> <rdf:li>xmp.did:0280117407206811994CEF9ECF6FEECD</rdf:li> <rdf:li>xmp.did:0280117407206811A7BAB57B7B837883</rdf:li> <rdf:li>xmp.did:0280117407206811A961B2141BDCA390</rdf:li> <rdf:li>xmp.did
2022-03-15 16:08:33 UTC	9270	IN	Data Raw: 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 32 32 41 43 34 41 33 41 45 46 32 37 31 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 34 36 43 43 44 37 46 33 31 30 41 44 44 45 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 37 31 46 43 38 34 32 33 31 31 33 34 41 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 37 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 37 31 46 46 45 31 42 32 35 34 31 38 32 44 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 Data Ascii: f:li> <rdf:li>xmp.did:0780117407206811822AC4A3AEF271C5</rdf:li> <rdf:li>xmp.did:0780117407206811846CCD7F310ADDE0</rdf:li> <rdf:li>xmp.did:0780117407206811871FC84231134A2D</rdf:li> <rdf:li>xmp.did:0780117407206811871FFE1B254182D2</rdf:li> <rdf:li>xmp.did:0
2022-03-15 16:08:33 UTC	9278	IN	Data Raw: 46 41 46 33 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 43 36 45 45 39 33 46 44 37 39 45 30 31 31 41 36 38 44 43 45 37 34 41 34 36 38 43 33 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 43 39 37 36 45 35 35 35 32 31 36 38 31 31 39 39 34 43 39 38 37 39 37 46 46 32 44 44 43 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 45 30 45 31 44 31 33 42 32 34 36 38 31 31 39 39 34 43 41 30 45 36 41 42 31 43 31 35 37 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 39 64 34 37 38 64 64 2d 64 66 31 62 2d 35 36 34 65 2d 38 39 61 63 2d 64 37 39 34 31 35 62 33 34 33 62 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 Data Ascii: FAF3B</rdf:li> <rdf:li>xmp.did:09C6EE93FD79E011A68DCE74A468C3B8</rdf:li> <rdf:li>xmp.did:09C976E555216811994C98797FF2DDC4</rdf:li> <rdf:li>xmp.did:09E0E1D13B246811994CA0E6AB1C1578</rdf:li> <rdf:li>xmp.did:09d478dd-df1b-564e-89ac-d79415b343b8</rdf:li> <rdf
2022-03-15 16:08:33 UTC	9294	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 38 64 37 30 65 30 61 2d 66 35 65 62 2d 34 64 34 36 2d 61 30 36 36 2d 62 34 33 35 35 32 39 30 65 63 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 38 65 30 39 39 32 34 2d 32 64 63 30 2d 34 35 66 64 2d 39 35 38 34 2d 65 33 38 36 65 65 39 64 31 63 34 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 38 65 33 38 66 38 66 2d 37 34 38 30 2d 34 35 63 30 2d 39 63 35 36 2d 61 38 37 39 33 64 31 65 32 63 38 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 38 66 33 64 36 66 38 2d 36 38 65 31 2d 62 64 34 38 2d 38 64 64 31 2d 34 62 31 35 65 65 30 35 37 32 65 35 3c 2f 72 64 66 3a 6c 69 3e 20 Data Ascii: df:li> <rdf:li>xmp.did:18d70e0a-f5eb-4d46-a066-b4355290ec74</rdf:li> <rdf:li>xmp.did:18e09924-2dc0-45fd-9584-e386ee9d1c4d</rdf:li> <rdf:li>xmp.did:18e38f8f-7480-45c0-9c56-a8793d1e2c8e</rdf:li> <rdf:li>xmp.did:18f3d6f8-68e1-bd48-8dd1-4b15ee0572e5</rdf:li>
2022-03-15 16:08:33 UTC	9310	IN	Data Raw: 34 36 33 31 42 32 30 36 38 31 31 41 36 31 33 44 42 32 36 39 46 45 46 35 32 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 38 45 44 41 34 43 31 33 37 32 30 36 38 31 31 42 46 44 36 42 35 46 30 33 46 41 45 30 33 37 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 38 46 34 41 37 45 39 33 45 37 36 31 31 45 37 38 33 46 38 43 33 31 43 36 34 45 35 34 32 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 38 62 33 35 36 35 32 2d 31 64 39 36 2d 34 64 36 63 2d 61 30 66 65 2d 34 30 63 39 62 65 64 62 39 61 63 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 38 62 39 39 65 34 37 2d 61 31 38 66 2d 30 33 34 38 2d 39 37 65 65 2d Data Ascii: 4631B206811A613DB269FEF524D</rdf:li> <rdf:li>xmp.did:28EDA4C137206811BFD6B5F03FAE0379</rdf:li> <rdf:li>xmp.did:28F4A7E93E7611E783F8C31C64E54274</rdf:li> <rdf:li>xmp.did:28b35652-1d96-4d6c-a0fe-40c9bedb9acd</rdf:li> <rdf:li>xmp.did:28b99e47-a18f-0348-97ee-
2022-03-15 16:08:34 UTC	10499	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 30 32 38 42 46 38 33 32 43 32 30 36 38 31 31 38 30 38 33 38 31 45 35 37 38 38 43 33 35 33 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 30 33 37 31 43 45 35 41 36 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 30 33 39 38 33 37 42 38 33 44 45 45 31 31 31 38 30 42 38 46 39 37 42 39 38 41 36 35 45 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 30 34 30 37 35 34 42 31 32 32 34 31 31 45 31 38 45 31 44 44 43 41 44 46 37 41 37 35 46 45 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 Data Ascii: /rdf:li> <rdf:li>xmp.did:3028BF832C206811808381E5788C353D</rdf:li> <rdf:li>xmp.did:30371CE5A6226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:3039837B83DEE11180B8F97B98A65E63</rdf:li> <rdf:li>xmp.did:3040754B122411E18E1DDCADF7A75FE5</rdf:li> <rdf:li>xmp.di
2022-03-15 16:08:34 UTC	10515	IN	Data Raw: 2d 30 31 32 39 38 32 61 38 66 31 63 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 61 31 38 37 32 37 30 2d 34 37 33 34 2d 61 62 34 61 2d 61 62 66 65 2d 61 39 30 32 31 63 32 35 64 35 31 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 61 33 35 31 32 36 37 2d 36 37 35 62 2d 65 61 34 65 2d 39 34 38 31 2d 37 37 33 36 65 37 30 63 30 39 33 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 61 35 62 30 65 62 64 2d 34 61 63 36 2d 36 38 34 30 2d 38 30 32 38 2d 66 63 61 64 30 30 33 37 61 64 32 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 61 38 64 32 65 31 63 2d 32 39 37 63 2d 34 64 35 34 2d 38 62 32 36 2d 34 61 31 64 62 61 Data Ascii: -012982a8f1c4</rdf:li> <rdf:li>xmp.did:3a187270-4734-ab4a-abfe-a9021c25d51c</rdf:li> <rdf:li>xmp.did:3a351267-675b-ea4e-9481-7736e70c093a</rdf:li> <rdf:li>xmp.did:3a5b0ebd-4ac6-6840-8028-fcad0037ad24</rdf:li> <rdf:li>xmp.did:3a8d2e1c-297c-4d54-8b26-4a1dba
2022-03-15 16:08:34 UTC	10531	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 46 46 38 45 45 37 31 42 44 34 31 45 30 31 31 41 37 46 38 44 38 41 45 42 38 39 44 37 44 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 61 34 65 34 39 30 39 2d 39 65 33 66 2d 32 39 34 31 2d 38 32 30 35 2d 65 35 35 33 35 31 64 39 31 63 37 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 61 39 39 31 66 66 33 2d 35 64 62 66 2d 66 64 34 37 2d 38 66 37 39 2d 32 37 30 39 38 39 61 31 33 30 62 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 61 39 62 65 65 39 36 2d 36 32 65 32 2d 34 30 31 66 2d 38 38 61 63 2d 32 31 38 31 30 39 30 63 39 32 39 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 Data Ascii: <rdf:li>xmp.did:4FF8EE71BD41E011A7F8D8AEB89D7D70</rdf:li> <rdf:li>xmp.did:4a4e4909-9e3f-2941-8205-e55351d91c7a</rdf:li> <rdf:li>xmp.did:4a991ff3-5dbf-fd47-8f79-270989a130b5</rdf:li> <rdf:li>xmp.did:4a9bee96-62e2-401f-88ac-2181090c9299</rdf:li> <rdf:li>xmp
2022-03-15 16:08:34 UTC	10539	IN	Data Raw: 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 34 46 44 38 36 35 44 36 35 32 31 36 38 31 31 41 36 31 33 38 45 46 32 43 31 36 38 37 36 46 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 34 66 34 62 35 62 30 2d 32 31 36 38 2d 34 35 30 33 2d 38 30 33 63 2d 34 39 34 64 63 36 39 30 37 65 30 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 35 31 35 31 31 39 38 2d 31 30 35 35 2d 62 34 34 35 2d 61 66 31 64 2d 62 31 30 31 63 30 36 30 62 66 37 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 35 32 37 35 39 61 38 2d 33 61 65 33 2d 34 33 32 39 2d 61 62 63 33 2d 38 63 62 36 61 36 64 61 65 31 33 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 Data Ascii: df:li>xmp.did:54FD865D65216811A6138EF2C16876FC</rdf:li> <rdf:li>xmp.did:54f4b5b0-2168-4503-803c-494dc6907e04</rdf:li> <rdf:li>xmp.did:55151198-1055-b445-af1d-b101c060bf7a</rdf:li> <rdf:li>xmp.did:552759a8-3ae3-4329-abc3-8cb6a6dae13c</rdf:li> <rdf:li>xmp.d
2022-03-15 16:08:34 UTC	10555	IN	Data Raw: 36 34 37 61 64 31 62 32 2d 36 35 66 38 2d 34 30 31 35 2d 39 36 65 33 2d 66 34 61 62 33 30 38 66 36 30 32 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 34 38 38 38 30 45 38 30 39 32 30 36 38 31 31 39 32 42 30 42 41 41 39 30 34 44 45 30 46 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 34 39 33 39 34 35 44 44 37 32 30 36 38 31 31 39 37 41 35 46 43 37 42 34 41 33 32 36 34 42 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 34 39 34 43 44 31 39 34 46 32 30 36 38 31 31 38 37 31 46 43 44 32 31 39 39 41 44 31 36 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 34 39 43 33 45 43 33 30 37 32 30 36 38 31 31 38 43 31 Data Ascii: 647ad1b2-65f8-4015-96e3-f4ab308f602f</rdf:li> <rdf:li>xmp.did:648880E80920681192B0BAA904DE0F8D</rdf:li> <rdf:li>xmp.did:6493945DD720681197A5FC7B4A3264B5</rdf:li> <rdf:li>xmp.did:6494CD194F206811871FCD2199AD167E</rdf:li> <rdf:li>xmp.did:649C3EC3072068118C1
2022-03-15 16:08:34 UTC	10571	IN	Data Raw: 70 2e 64 69 64 3a 37 33 38 33 42 46 45 30 30 38 32 30 36 38 31 31 38 46 36 32 45 38 44 44 34 41 39 46 38 43 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 33 38 34 65 35 62 66 2d 32 66 33 33 2d 37 65 34 39 2d 38 63 31 37 2d 62 62 33 30 37 65 33 31 61 36 61 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 33 39 45 39 37 33 46 35 31 32 32 36 38 31 31 38 36 33 44 43 36 38 36 39 46 44 30 41 42 36 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 33 41 30 35 32 37 32 31 33 32 30 36 38 31 31 41 46 37 34 42 37 41 39 36 44 38 45 41 38 42 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 33 41 41 33 44 46 34 32 42 32 30 36 Data Ascii: p.did:7383BFE0082068118F62E8DD4A9F8CB8</rdf:li> <rdf:li>xmp.did:7384e5bf-2f33-7e49-8c17-bb307e31a6a5</rdf:li> <rdf:li>xmp.did:739E973F51226811863DC6869FD0AB6D</rdf:li> <rdf:li>xmp.did:73A0527213206811AF74B7A96D8EA8BE</rdf:li> <rdf:li>xmp.did:73AA3DF42B206
2022-03-15 16:08:34 UTC	10579	IN	Data Raw: 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 42 46 46 30 39 43 31 31 34 32 30 36 38 31 31 38 44 42 42 43 45 39 41 46 34 45 30 42 46 43 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 43 30 30 34 31 37 30 43 41 32 30 36 38 31 31 38 41 36 44 39 39 30 33 46 36 36 44 38 35 35 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 43 31 30 41 39 44 30 39 35 33 36 45 33 31 31 41 44 35 45 44 38 38 36 31 42 32 39 42 37 39 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 43 32 34 32 39 34 45 32 35 32 30 36 38 31 31 41 39 36 31 45 38 46 46 38 32 42 38 31 43 45 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 Data Ascii: DD</rdf:li> <rdf:li>xmp.did:7BFF09C1142068118DBBCE9AF4E0BFCD</rdf:li> <rdf:li>xmp.did:7C004170CA2068118A6D9903F66D8554</rdf:li> <rdf:li>xmp.did:7C10A9D09536E311AD5ED8861B29B79A</rdf:li> <rdf:li>xmp.did:7C24294E25206811A961E8FF82B81CE1</rdf:li> <rdf:li>xmp
2022-03-15 16:08:34 UTC	10595	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 41 35 44 41 43 32 41 34 33 43 34 45 30 31 31 38 43 34 33 43 46 32 35 43 46 43 31 42 31 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 41 36 37 34 44 46 31 37 44 32 30 36 38 31 31 38 30 38 33 43 37 45 39 41 42 30 44 33 33 32 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 41 36 44 44 32 32 32 31 38 32 30 36 38 31 31 39 32 42 30 39 44 43 44 33 35 32 31 38 41 41 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 41 37 37 42 36 35 38 42 43 44 33 44 45 31 31 38 32 30 35 41 44 35 39 31 42 44 34 43 42 34 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 Data Ascii: /rdf:li> <rdf:li>xmp.did:8A5DAC2A43C4E0118C43CF25CFC1B1A1</rdf:li> <rdf:li>xmp.did:8A674DF17D2068118083C7E9AB0D332A</rdf:li> <rdf:li>xmp.did:8A6DD2221820681192B09DCD35218AAA</rdf:li> <rdf:li>xmp.did:8A77B658BCD3DE118205AD591BD4CB4E</rdf:li> <rdf:li>xmp.di
2022-03-15 16:08:34 UTC	10611	IN	Data Raw: 35 36 33 32 34 36 38 31 31 42 34 31 30 44 35 36 46 37 30 31 32 34 35 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 38 33 33 36 63 32 32 2d 65 38 38 31 2d 34 65 32 64 2d 62 31 31 66 2d 63 39 35 38 33 30 34 61 65 62 65 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 38 33 66 64 61 62 37 2d 32 63 32 31 2d 33 38 34 64 2d 61 39 65 62 2d 31 61 65 61 63 66 36 63 34 66 63 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 38 34 36 46 32 34 36 31 34 32 30 36 38 31 31 38 38 43 36 39 36 39 45 31 35 33 41 35 37 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 38 34 38 37 36 36 43 30 39 32 30 36 38 31 31 39 35 42 42 38 45 Data Ascii: 563246811B410D56F70124534</rdf:li> <rdf:li>xmp.did:98336c22-e881-4e2d-b11f-c958304aebe5</rdf:li> <rdf:li>xmp.did:983fdab7-2c21-384d-a9eb-1aeacf6c4fc6</rdf:li> <rdf:li>xmp.did:9846F2461420681188C6969E153A57B8</rdf:li> <rdf:li>xmp.did:9848766C0920681195BB8E
2022-03-15 16:08:34 UTC	10619	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 30 35 34 36 37 45 38 34 35 32 30 36 38 31 31 39 41 38 32 46 45 32 41 43 42 43 35 37 34 33 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 30 36 36 38 46 34 31 39 37 35 31 31 31 45 34 38 39 39 30 46 42 34 34 38 33 43 44 35 33 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 30 39 45 43 39 32 37 33 39 32 35 36 38 31 31 38 30 38 33 43 44 30 41 42 33 37 37 31 45 34 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 30 41 44 45 35 46 44 35 45 42 31 45 30 31 31 39 46 41 31 43 35 45 43 31 44 31 30 41 31 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a Data Ascii: df:li> <rdf:li>xmp.did:A05467E8452068119A82FE2ACBC57436</rdf:li> <rdf:li>xmp.did:A0668F41975111E48990FB4483CD5314</rdf:li> <rdf:li>xmp.did:A09EC927392568118083CD0AB3771E4F</rdf:li> <rdf:li>xmp.did:A0ADE5FD5EB1E0119FA1C5EC1D10A162</rdf:li> <rdf:li>xmp.did:
2022-03-15 16:08:34 UTC	10635	IN	Data Raw: 38 38 38 38 39 30 41 41 42 38 45 45 30 31 31 41 44 33 46 46 37 36 44 30 42 41 43 39 44 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 38 38 46 45 30 44 38 43 36 46 31 44 46 31 31 39 37 31 42 38 39 34 31 30 33 36 31 36 33 32 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 38 41 30 34 46 35 34 32 31 32 30 36 38 31 31 38 33 44 31 41 46 37 41 30 30 46 33 36 39 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 38 42 38 31 38 42 46 30 46 32 30 36 38 31 31 38 41 36 44 46 36 42 33 36 41 33 44 44 38 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 38 42 42 42 34 43 38 42 38 46 37 45 31 31 31 38 34 31 45 39 30 42 39 Data Ascii: 888890AAB8EE011AD3FF76D0BAC9DC8</rdf:li> <rdf:li>xmp.did:B88FE0D8C6F1DF11971B894103616323</rdf:li> <rdf:li>xmp.did:B8A04F542120681183D1AF7A00F36933</rdf:li> <rdf:li>xmp.did:B8B818BF0F2068118A6DF6B36A3DD8DE</rdf:li> <rdf:li>xmp.did:B8BBB4C8B8F7E111841E90B9
2022-03-15 16:08:34 UTC	10651	IN	Data Raw: 30 41 32 30 36 38 31 31 38 30 38 33 42 46 44 39 41 39 46 38 31 37 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 46 41 39 38 35 39 30 31 37 32 30 36 38 31 31 38 41 36 44 42 39 31 46 45 43 35 41 35 39 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 43 46 45 41 36 42 42 46 30 45 32 30 36 38 31 31 38 30 38 33 39 33 34 42 39 31 43 43 36 33 36 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 30 30 42 34 41 30 44 39 36 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 30 31 37 45 43 31 35 45 38 32 30 36 38 31 31 41 42 30 38 39 44 36 36 31 42 42 31 35 37 45 Data Ascii: 0A2068118083BFD9A9F81730</rdf:li> <rdf:li>xmp.did:CFA98590172068118A6DB91FEC5A59F5</rdf:li> <rdf:li>xmp.did:CFEA6BBF0E2068118083934B91CC636A</rdf:li> <rdf:li>xmp.did:D00B4A0D96226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:D017EC15E8206811AB089D661BB157E
2022-03-15 16:08:34 UTC	10658	IN	Data Raw: 31 31 41 34 35 36 46 46 38 34 37 32 32 37 33 31 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 38 32 38 43 46 33 32 32 33 32 31 36 38 31 31 42 41 37 32 46 39 44 44 43 38 46 46 32 36 42 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 38 33 30 39 34 46 41 42 45 32 31 36 38 31 31 38 41 36 44 45 33 32 44 43 45 37 38 35 34 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 38 33 32 42 39 39 30 43 35 32 31 36 38 31 31 38 41 36 44 43 33 36 41 39 35 36 43 37 37 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 38 34 38 46 34 35 31 46 36 32 36 36 38 31 31 38 43 31 34 46 31 45 38 34 42 43 43 43 39 45 41 3c 2f 72 64 66 Data Ascii: 11A456FF8472273134</rdf:li> <rdf:li>xmp.did:D828CF3223216811BA72F9DDC8FF26BE</rdf:li> <rdf:li>xmp.did:D83094FABE2168118A6DE32DCE785405</rdf:li> <rdf:li>xmp.did:D832B990C52168118A6DC36A956C7715</rdf:li> <rdf:li>xmp.did:D848F451F62668118C14F1E84BCCC9EA</rdf
2022-03-15 16:08:34 UTC	10674	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 31 42 42 44 37 44 36 39 32 46 44 45 32 31 31 39 43 38 45 42 31 42 39 33 38 45 33 30 38 45 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 31 44 44 42 37 35 35 46 30 32 30 36 38 31 31 38 37 31 46 44 46 41 43 34 39 36 35 33 34 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 31 46 34 43 44 30 30 35 32 39 45 45 31 31 31 38 34 46 39 43 30 34 45 34 44 44 37 46 38 34 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 32 30 39 36 31 36 35 39 43 30 44 31 31 45 35 41 38 43 35 44 45 43 41 42 39 35 45 33 39 36 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 32 30 42 38 43 32 Data Ascii: <rdf:li>xmp.did:F1BBD7D692FDE2119C8EB1B938E308EC</rdf:li> <rdf:li>xmp.did:F1DDB755F0206811871FDFAC49653455</rdf:li> <rdf:li>xmp.did:F1F4CD00529EE11184F9C04E4DD7F84B</rdf:li> <rdf:li>xmp.did:F20961659C0D11E5A8C5DECAB95E3969</rdf:li> <rdf:li>xmp.did:F20B8C2
2022-03-15 16:08:34 UTC	10690	IN	Data Raw: 36 38 31 31 38 38 43 36 41 41 46 43 35 42 45 30 33 33 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 41 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 38 43 36 44 42 34 39 38 32 44 39 30 32 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 41 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 43 31 34 45 36 39 32 45 44 44 36 31 37 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 41 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 46 36 32 38 42 44 46 41 44 33 34 39 41 46 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 41 37 46 31 31 37 34 30 37 32 30 36 38 31 31 38 46 36 32 38 43 34 41 32 30 39 43 38 39 38 35 3c 2f 72 Data Ascii: 681188C6AAFC5BE03362</rdf:li> <rdf:li>xmp.did:FA7F11740720681188C6DB4982D90274</rdf:li> <rdf:li>xmp.did:FA7F1174072068118C14E692EDD61727</rdf:li> <rdf:li>xmp.did:FA7F1174072068118F628BDFAD349AF6</rdf:li> <rdf:li>xmp.did:FA7F1174072068118F628C4A209C8985</r
2022-03-15 16:08:34 UTC	10694	IN	Data Raw: 37 34 30 37 32 30 36 38 31 31 39 31 30 39 44 31 33 46 34 36 33 39 41 32 33 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 43 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 35 46 45 45 32 31 34 30 41 37 30 34 35 46 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 43 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 44 42 33 44 32 33 32 39 44 31 34 46 35 30 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 43 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 45 41 43 46 37 37 44 30 32 35 44 44 36 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 43 37 46 31 31 37 34 30 37 32 30 36 38 31 31 42 38 34 30 45 31 34 31 39 38 39 36 45 Data Ascii: 74072068119109D13F4639A231</rdf:li> <rdf:li>xmp.did:FC7F11740720681195FEE2140A7045F3</rdf:li> <rdf:li>xmp.did:FC7F1174072068119DB3D2329D14F507</rdf:li> <rdf:li>xmp.did:FC7F117407206811AEACF77D025DD6A1</rdf:li> <rdf:li>xmp.did:FC7F117407206811B840E1419896E
2022-03-15 16:08:34 UTC	10710	IN	Data Raw: 69 3e 78 6d 70 2e 64 69 64 3a 63 30 36 66 35 35 39 36 2d 39 31 35 66 2d 34 35 63 61 2d 61 63 62 37 2d 35 30 32 35 30 63 36 31 38 31 66 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 30 37 62 32 61 33 31 2d 39 33 63 31 2d 34 64 30 61 2d 61 31 63 36 2d 31 33 61 33 30 65 65 66 66 63 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 30 65 39 37 35 65 30 2d 36 39 61 62 2d 36 34 34 38 2d 38 36 62 66 2d 66 66 31 31 36 30 65 32 66 30 62 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 31 33 34 65 65 38 64 2d 36 65 31 33 2d 34 35 34 33 2d 61 61 63 39 2d 64 35 62 31 38 38 64 30 30 63 63 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 Data Ascii: i>xmp.did:c06f5596-915f-45ca-acb7-50250c6181f5</rdf:li> <rdf:li>xmp.did:c07b2a31-93c1-4d0a-a1c6-13a30eeffc27</rdf:li> <rdf:li>xmp.did:c0e975e0-69ab-6448-86bf-ff1160e2f0bd</rdf:li> <rdf:li>xmp.did:c134ee8d-6e13-4543-aac9-d5b188d00cc8</rdf:li> <rdf:li>xmp.d
2022-03-15 16:08:34 UTC	10726	IN	Data Raw: 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 35 38 66 34 35 36 61 2d 34 33 38 37 2d 37 38 34 35 2d 61 64 39 65 2d 32 63 61 61 31 36 37 65 64 62 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 35 39 65 65 38 63 30 2d 62 37 37 62 2d 34 37 31 39 2d 62 61 63 34 2d 37 66 30 34 61 33 32 36 30 30 32 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 35 62 39 30 61 61 34 2d 32 66 37 38 2d 34 38 36 30 2d 62 39 30 33 2d 63 34 39 63 31 38 64 30 65 66 61 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 35 65 62 31 30 38 65 2d 34 33 63 36 2d 66 31 34 39 2d 61 32 62 64 2d 37 30 61 39 63 61 32 38 30 63 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e Data Ascii: li>xmp.did:f58f456a-4387-7845-ad9e-2caa167edb90</rdf:li> <rdf:li>xmp.did:f59ee8c0-b77b-4719-bac4-7f04a3260024</rdf:li> <rdf:li>xmp.did:f5b90aa4-2f78-4860-b903-c49c18d0efa2</rdf:li> <rdf:li>xmp.did:f5eb108e-43c6-f149-a2bd-70a9ca280c15</rdf:li> <rdf:li>xmp.
2022-03-15 16:08:34 UTC	10734	IN	Data Raw: 70 00 8e 00 22 70 c0 8f 3c 02 22 46 01 11 a6 18 85 4c 31 0b 08 63 7e ec 03 16 00 1b 0c 08 d7 00 86 c0 02 c0 02 c0 31 1c f0 01 13 80 91 a9 86 04 48 c0 04 48 a6 19 23 11 9e 00 18 8c f0 00 d4 a6 00 18 e1 88 6a 60 01 53 00 0c 46 00 1a 98 00 54 c0 02 c0 03 53 3c 31 08 0c 21 8f 4c 00 2a 60 01 53 00 0b 4e 78 62 15 30 0e 07 d3 80 07 03 00 12 0b 9e 14 8e 02 ed b6 fb 9b b6 09 6f 13 3b 1e 1a 41 38 ca d9 15 78 b3 6a e2 b5 b8 20 e5 f6 ce ec d2 76 7e 96 5e e7 86 83 8c 7f b8 a7 19 46 eb a5 bf 08 61 b3 fb 13 7f b7 34 7b 39 2a 05 72 15 c4 2e af 1b e6 6a fa 2c 8b 91 8d 75 b7 5c d8 c9 db b9 89 a3 7f 06 04 1f db 8e 9a e4 56 e0 ce 4b e2 b5 78 a0 72 98 d2 4c 60 8e 83 82 45 03 a2 80 d9 e0 63 47 55 b4 25 b3 cf 0b 98 97 22 35 1e 15 a7 86 3c cc b3 0d 49 ec 61 55 6d 38 3d 68 7b 8a Data Ascii: p"p<"FL1c~1HH#j`SFTS<1!L`SNxb0o;A8xj v~^Fa4{9r.j,u\VKxrL`EcGU%"5<IaUm8=h{
2022-03-15 16:08:34 UTC	10750	IN	Data Raw: 91 00 d2 b9 f3 c7 6e 2a 34 ce 4c 97 4d 1c 32 dd ac 32 d6 42 4a 72 a1 e7 8f 57 6c a3 c9 df 0f 50 b5 f7 34 60 14 78 45 0f 31 c7 19 f9 0f b4 bf ee 57 60 df d7 62 ff 00 e2 50 bf bf 07 92 f9 8f cf 5c 8c 4d c6 f2 4b b9 4b 39 cb 96 3a f1 d7 6a 38 72 5d d9 81 71 c6 a6 03 a6 91 ea 15 c0 34 48 b2 d2 98 45 14 9c 51 04 74 e1 c9 23 53 0c 08 91 80 06 a6 01 0b 00 c6 c0 21 9b 0c 08 d3 0c 43 73 c0 03 53 00 0d 80 43 1c 00 36 18 0a 98 00 40 1c 00 58 90 3b 82 54 64 31 2d a2 d5 5b 1a 98 64 9a be dd b5 b6 bc be 48 6e 94 b4 6d 90 19 f1 3c f2 c7 36 7b 3a d6 51 d7 d3 d5 5a d0 cf 4d 93 fb 61 b6 5d 5c 01 0b 15 89 40 d4 17 89 fb f1 e2 2e b6 c9 1e eb e8 68 d9 ce 6f 9f da fd c2 c5 d9 f6 ea dc 46 33 d2 07 50 1f c7 1d d8 ba e4 fe 2d 0e 0c bd 03 5a d4 e5 af 3d b9 ba d8 10 2e 2d a4 42 7c Data Ascii: n*4LM22BJrWlP4`xE1W`bP\MKK9:j8r]q4HEQt#S!CsSC6@X;Td1-[dHnm<6{:QZMa]\@.hoF3P-Z=.-B\|
2022-03-15 16:08:34 UTC	10766	IN	Data Raw: 00 2a 60 90 23 4c 31 0d 86 21 53 00 c6 a6 00 81 88 c0 48 d4 c0 03 d3 01 43 53 00 1f ff d2 f4 ac 7d 61 f1 a2 a6 00 15 30 00 b0 c4 35 30 86 3d 30 00 f8 00 7a e0 18 e0 e1 00 ab 86 21 0c 00 38 c0 31 60 01 e9 80 42 a6 10 0b 0c 62 c0 21 60 01 60 01 f0 00 c7 00 0b 00 0b 00 0b 00 0b 00 0d 80 05 80 05 80 06 38 04 2c 00 2c 30 16 18 0a 98 40 3e 00 1b 00 0f 84 02 c3 91 0f 4c 21 8b 00 0f 80 62 c0 22 40 d3 00 c5 5c 21 8e 0e 10 0f 5c 03 16 00 1f 00 0a b8 00 7a e0 1a 16 00 62 ae 01 0b 00 0a b8 40 3d 70 00 81 c0 32 75 c2 18 da b0 00 da 8e 01 48 f5 c0 31 c1 35 cb 08 66 ad bc e2 58 18 48 73 19 57 1c d6 50 ce ba da 51 94 dc 71 d2 72 32 3a a9 86 22 41 ce 10 e4 36 09 1e 82 87 3c 63 64 74 d6 cc e9 36 c4 8c f5 cc 7a 87 2c 70 5f b8 f4 71 f7 96 bd c5 bc 93 f6 a8 c3 13 b5 c4 95 b9 Data Ascii: *`#L1!SHCS}a050=0z!81`Bb!``8,,0@>L!b"@\!\zb@=p2uH15fXHsWPQqr2:"A6<cdt6z,p_q
2022-03-15 16:08:34 UTC	10774	IN	Data Raw: 0c af a9 cd ff 00 41 9c 6a 8d 9d 7b 79 81 e6 31 d7 e6 a3 93 cb 39 ad f5 2c 6c 50 db 24 60 4b e2 31 df 85 da da 9c 19 f6 d5 41 ca 91 e1 8f 40 f2 88 d3 0c 0f ff d7 fa 85 ad 23 96 50 e8 80 d7 88 3e 18 e8 dc 73 6d 05 bf 4d 2a d1 db ae 90 38 01 e3 8d 28 fb 4c ee bb 0c fb 05 9c 23 34 bc 09 ca bc 71 ad e3 91 8d 27 99 65 ec b1 98 7e 9e 43 4d 58 54 4e 64 77 6a 21 9c 8c f0 76 dc a8 35 f3 c7 a8 ad 27 91 6a c1 4d 31 66 63 11 80 42 a6 00 15 30 00 da 70 08 7a 60 18 88 c0 21 a9 86 21 53 00 0f 4c 03 1a 99 e1 04 0f 4c 02 1a 98 60 36 00 15 30 00 a9 80 07 38 06 2e 38 00 54 c0 21 e9 84 31 61 80 a9 80 07 c2 01 88 c3 01 0c 02 15 29 80 62 c0 21 53 00 0b 00 0f 4c 00 2a 60 01 53 00 c7 a6 00 1e 98 00 58 40 2a 60 01 a9 86 21 11 80 06 a6 00 1e 98 00 54 c0 31 11 84 02 03 00 12 c0 31 Data Ascii: Aj{y19,lP$`K1A@#P>smM8(L#4q'e~CMXTNdwj!v5'jM1fcB0pz`!!SLL`608.8T!1a)b!SL`SX@*`!T11
2022-03-15 16:08:34 UTC	10790	IN	Data Raw: fd fc b9 62 60 72 30 98 1e 34 fb 30 40 49 2e e0 3c b0 80 b4 11 4a 0c 22 c4 a4 f0 af ed c2 11 6a b1 03 12 50 8c 84 1c 10 29 10 9d 40 cc e0 81 c8 ff 00 50 ae 33 cc 60 da 39 1c 4d ab 33 96 08 09 2d 0d 5c 4c 14 48 38 23 2e 18 42 11 24 66 38 e0 11 d0 6d 7e f5 bf db d1 61 99 52 68 54 fa 5b 23 ff 00 36 30 b6 14 f8 1d 34 cc d1 da 5b ff 00 72 f6 39 65 46 9a da 58 87 32 28 c0 7d 98 e2 7d 3d d7 33 b9 75 35 6f 54 76 bb 55 ff 00 b6 bd c0 a5 ac dd 19 ce 5a 49 a3 0f f4 9c 71 5b 7d 38 9d b4 74 bf 03 a2 b1 b7 8b 6e 84 44 8d a5 06 79 e3 9a cd d9 c9 d3 55 0a 07 ba 8a 1d ce 23 1c 94 74 e7 5c 15 6e ac 2c 95 b4 67 3f 37 b5 6c 1e 4a a1 2a 8b e0 78 e3 ad 67 b1 ca fa 7a b2 98 fd b6 2d a5 32 ab 52 3a e4 07 1a 61 bc d2 a0 95 85 55 c9 a8 5e 24 14 53 46 1c b1 8e a7 44 a1 fe a5 95 35 Data Ascii: b`r040@I.<J"jP)@P3`9M3-\LH8#.B$f8m~aRhT[#604[r9eFX2(}}=3u5oTvUZIq[}8tnDyU#t\n,g?7lJ*xgz-2R:aU^$SFD5
2022-03-15 16:08:34 UTC	10806	IN	Data Raw: 15 00 e9 08 e4 af 3d ed ee cd ca f9 cb 77 d6 46 22 b4 d4 00 5a d4 52 9d 34 18 e8 94 d4 c9 82 ac b8 83 b3 4f ee a7 b8 b6 e9 60 5b c6 12 44 19 35 30 4f 58 ad 08 a0 15 0c 70 a9 7d c6 8e 8d 70 09 f7 b7 f7 5f 71 69 4c 5b 22 3a db 21 04 ba 83 53 fc c6 9c 8f ca 3e dc 4b be e7 09 c0 a1 f3 38 4b 0f ee 66 ff 00 16 eb fd 4e 3e ec 87 50 66 5a b1 46 fc 4a 47 0a 53 1b ed 4b 56 c5 0c f5 49 3f bc f1 aa c9 32 da 93 08 d2 50 b1 2b 50 78 ea af ec c6 1e 6e b1 03 da e0 e3 f6 7f ee c4 96 9b ed de e0 90 55 2f 9e 33 32 8a 90 3b 6b a7 a0 f8 e9 c6 ae d6 e2 c4 b5 3d 9e c7 dd f6 17 f6 e2 e2 15 90 8a 02 c3 46 6b 5f 1c f1 8b ea 28 b8 b3 ae 98 2f 75 29 04 a7 b8 f6 e6 a6 a9 42 55 43 0d 44 70 3f 0a e7 8b 59 aa f9 99 df 15 a9 c5 1e 7d ee 4f ef 45 be c7 bc 7d 04 36 fd db 74 20 3b 16 a3 35 Data Ascii: =wF"ZR4O`[D50OXp}p_qiL[":!S>K8KfN>PfZFJGSKVI?2P+PxnU/32;k=Fk_(/u)BUCDp?Y}OE}6t ;5
2022-03-15 16:08:34 UTC	10813	IN	Data Raw: 2a 51 2b ef 7e 43 64 8d f4 ea d2 04 1d 64 72 1c 38 f2 c2 a7 46 ed c4 99 81 ed fd d4 2e ed 96 62 cc 22 ae 6d db 2e 7c 94 e8 05 b1 bf f6 d0 ce ba 35 12 01 bb 7b b9 2d 84 57 0a 8b 72 91 90 54 cb 19 50 1a a7 e5 6d 3e 15 e1 8d 6b d3 4e 9c 02 f9 a0 d9 bc f7 46 f9 bf da da 5e ed 91 1b 64 62 51 bb 70 b3 a1 20 fa ce 90 ff 00 f2 e3 8d 61 a6 36 d5 b5 f6 9b f9 8e c9 34 7a ab 5b d9 cb 60 92 dd c6 93 c7 db 06 46 30 d1 75 01 d5 d2 e3 a7 3f 1c 78 4d b4 f4 3a 9a 93 26 fb da 3e d9 ba 91 63 9f 6b b7 76 70 48 3d b0 be 9a 57 35 a7 8e 36 af 51 91 70 b3 39 dd 2a f8 a3 02 e7 d8 be cf 45 17 d1 ed dd b7 8e 75 40 52 47 5a 30 90 47 5c 8f 8f 96 3a 57 57 97 86 e3 35 8e bd 81 b0 ed 56 76 9b a4 b6 ed 75 33 09 22 47 0d 33 2b 69 25 d9 34 29 1a 78 fe fc 64 f2 37 5e 0b d8 4d a8 8c 99 a7 bd Data Ascii: Q+~Cddr8F.b"m.\|5{-WrTPm>kNF^dbQp a64z[`F0u?xM:&>ckvpH=W56Qp9Eu@RGZ0G\:WW5Vvu3"G3+i%4)xd7^M
2022-03-15 16:08:34 UTC	10829	IN	Data Raw: 72 ea 86 b3 47 20 29 7f b6 d7 99 76 2f 87 41 aa d5 48 a1 fb 0e 34 5f e5 ab ce a5 f9 eb b0 cf 6f ed ee ff 00 6f a9 a2 ba 8d c9 04 0c ca 9c f1 d4 bf ca 62 7c 53 13 ca 98 1d 97 b2 7d cf 66 b3 40 55 4c 72 d0 12 b2 0a e5 cc 57 9e 3a 2d fe 43 05 a1 cf 0e e2 96 44 6a 2f b3 37 9b 48 f4 40 75 82 ba 6a d2 00 c3 51 ea 39 70 c7 3f ff 00 90 c4 f8 fd c6 ab 25 4d 48 3f b7 8f 6e 85 e1 99 4d c3 81 a9 98 b6 54 e4 a4 72 f8 e3 9a df e4 ab 6e 2b 41 f9 95 0d 6d 8f 79 da 56 26 db 1e 07 94 0d 2f ae b4 a7 da 3e fc 62 ba ac 57 9d f2 35 7a 96 5b ec db ac f2 f7 ee 12 04 98 e4 5d 24 39 7c 01 14 c5 3e a7 1a 50 9b f7 02 bd 7b 42 6d 36 3d d6 d9 ea d7 2b 2a d3 81 62 3f 83 61 3e ab 1b e4 3d e8 e7 f7 8b 9f 75 6d b2 3b 4c 5d e1 76 d2 3b 15 35 07 c7 8f d9 8f 43 0d b0 dd 69 f6 94 ac 9f 33 0b Data Ascii: rG )v/AH4_oob\|S}f@ULrW:-CDj/7H@ujQ9p?%MH?nMTrn+AmyV&/>bW5z[]$9\|>P{Bm6=+*b?a>=um;L]v;5Ci3
2022-03-15 16:08:34 UTC	10845	IN	Data Raw: 7a 48 a8 fb ce 32 b6 35 57 0d 98 5b 02 40 b7 1e e4 bc b5 3a 5e ce 43 4f c2 6a 3e f1 86 b1 27 cd 19 f9 06 ae d3 7c 9b a2 16 b8 4e c9 a8 06 a7 c7 ec c6 19 2b b7 80 de 18 0c 36 fb 6b 39 57 9f b6 47 32 ad 4f be 98 84 d8 2c 2d 90 16 b6 8f 37 d3 43 77 11 62 2b 52 d4 1f 7e 2a 1c 4c 12 f0 04 ff 00 42 9d 53 b8 b3 db 94 1c 6b 3a 2f fe e2 30 93 17 90 fb 8c 4f ea 56 eb ff 00 cd 18 e2 3f dc 19 91 91 a7 db 8b 75 67 3b ac 16 34 e4 9c a4 8e b4 07 36 5e 07 87 13 89 91 6d 66 92 6c 1b dc 89 dd 4b 29 5e 3f c4 88 48 f1 e2 b5 c5 a8 66 cb 0d 9f 20 6b 8b 59 ac a1 ef ee 10 cd 04 5c 35 b2 95 1f b4 60 89 e0 4b c5 65 c5 19 70 ee d6 37 44 c7 6f 77 0f 70 9a 25 6a 0f 1e 60 fd d8 6f 15 97 14 55 71 f6 a3 4a ff 00 6f de 6c 50 ff 00 db 19 1b 97 23 e7 d2 48 fd f8 ca b0 f8 b8 35 ae 24 de ba Data Ascii: zH25W[@:^COj>'\|N+6k9WG2O,-7Cwb+R~*LBSk:/0OV?ug;46^mflK)^?Hf kY\5`Kep7Dowp%j`oUqJolP#H5$
2022-03-15 16:08:34 UTC	10853	IN	Data Raw: 79 8f b4 7b 50 cd 61 64 e7 38 50 d7 cb 0b cc 7d a1 b1 76 10 fe 9d b7 8c cc 0a 0f 95 70 fc d7 da 1b 2b d8 56 76 9d b1 b3 30 e7 e4 5b fc f1 a2 ca fb 45 e5 d7 b0 a5 f6 5d ad c5 0c 64 83 c8 b1 c3 f3 ad da 1e 5d 4b 23 d9 b6 f5 ff 00 6c 15 a7 85 3f cb 07 9a d8 fc aa 8d 26 d7 00 25 91 c8 25 4a 8a 8a 8f 8e 2d 66 68 3c a4 56 36 f9 23 40 aa c0 d0 66 78 62 de 69 d4 cd e1 21 f4 52 73 20 fd b8 5e 62 23 ca 63 1b 47 4f 4a d7 ed c3 f3 10 bc b6 56 62 94 67 d9 3f 7d 70 6f 44 ec 65 7a 73 ea 42 0f c0 e2 5b 21 d5 92 a2 9e 19 62 19 24 4c 4b cd a8 31 20 44 84 e4 6b 87 02 16 85 3e 67 0c 08 49 12 91 cc 1f 2c 50 8c cf e9 7a 66 32 99 25 35 e2 0b e5 fb b1 a3 be 90 30 c4 55 8d 68 b5 fb 49 38 c8 91 c3 b0 61 5c b8 e2 a0 65 81 d8 fc 30 a0 63 80 4e 01 1f ff d3 f9 a6 c3 dc 6c f2 c8 2e ea Data Ascii: y{Pad8P}vp+Vv0[E]d]K#l?&%%J-fh<V6#@fxbi!Rs ^b#cGOJVbg?}poDezsB[!b$LK1 Dk>gI,Pzf2%50UhI8a\e0cNl.
2022-03-15 16:08:34 UTC	10869	IN	Data Raw: e5 69 b5 69 60 81 89 e9 20 71 14 1f 2f a6 b8 f9 c7 fe 61 3b 27 0f c3 a1 16 ea d5 94 41 c6 9f 69 47 0c f2 49 34 f6 d2 b8 d3 18 20 c8 bc 72 1f 26 79 9a 65 8f ac af 5b e1 98 d3 8f 15 fb 4c 2d 62 d1 fd a6 de a3 0c 96 f2 5b c7 11 e0 01 72 3f f6 e3 ca 7f ff 00 71 e1 7f 2d be cf da 61 e6 00 5a ff 00 67 7d c3 b7 4d df 33 db b5 18 36 91 a8 93 9f 0a 15 c4 64 ff 00 3f 8a d5 8d b6 53 ea fd a5 3c 92 03 bc dd de 7d 5b c7 69 32 a0 42 41 4e e5 1b 51 c8 fe 6e 26 94 18 cf 05 2b b5 3b 29 9e e3 96 0c 4b dd c4 da 5d c7 17 79 9d 94 75 bc 84 80 a6 bc 97 8e 3d 0c 78 b7 55 b8 8e c4 86 a4 be e6 fa e1 0b fd 6e b6 89 74 b3 3c 6c 06 6d 4a 6a 6f bb 2c 45 71 a7 1b 62 7b 19 4e 59 65 a6 e2 b1 c2 1a 00 c8 ca 6a 8e 2a 4b 1a f0 f3 38 59 31 ce 8f da 4c 1b 17 a7 7a 48 a0 bb 2a 49 cc 00 4d 01 Data Ascii: ii` q/a;'AiGI4 r&ye[L-b[r?q-aZg}M36d?S<}[i2BANQn&+;)K]yu=xUnt<lmJjo,Eqb{NYejK8Y1LzHIM
2022-03-15 16:08:34 UTC	10885	IN	Data Raw: a7 48 4b ea b1 9b 4b 89 ad 6f 1a 98 ca ca d4 07 2c c9 39 53 3f 86 38 ac f5 d0 de 91 06 50 f6 ed b4 1b 8a de 42 d2 b9 61 42 15 80 4a 0c c7 3a e5 f9 71 d9 fd cd ad 4d ae 3f e4 2f 2d 72 27 bb 7b 71 77 a8 7b 13 4a e9 11 22 aa 94 50 48 35 cc f1 38 9c 3d 57 94 e5 24 df 78 6c 31 37 ff 00 68 5b df 5b 20 96 ea e6 46 84 fa 51 81 2c 68 32 3e 5c f1 e8 74 dd 6b a5 9c 56 ab 77 69 95 92 45 c7 63 b2 da fb 72 c5 14 d7 0e 73 0a c3 25 af a8 90 29 9e 55 d2 71 1f dc 5b 24 a6 d5 41 f7 14 ef 9e ce 1b b0 81 2c 6f 0d 9a 44 dd c1 12 47 51 a8 f3 26 a1 ab 8b e9 fa ef 2a 5d eb be 7c 3b 9b f4 45 c2 3a 6d bf 61 b5 b0 71 72 83 55 d1 1d 72 70 d4 4f 13 4f 3c 79 59 7a 9b 64 5b 5f c3 d9 d8 6f 0a 0d 13 0a 76 fa 94 16 3c 6b 9f dd 8e 5d ce 4c e0 09 8d dc 73 28 85 40 87 3d 4c 5b 33 f0 03 1b ad Data Ascii: HKKo,9S?8PBaBJ:qM?/-r'{qw{J"PH58=W$xl17h[[ FQ,h2>\tkVwiEcrs%)Uq[$A,oDGQ&*]\|;E:maqrUrpOO<yYzd[_ov<k]Ls(@=L[3
2022-03-15 16:08:34 UTC	10893	IN	Data Raw: 8e e3 50 b6 5c 3e 23 1b 78 55 f7 35 fc a0 ad a0 5f d2 4f 3d b8 8a e2 56 90 64 49 0d a4 31 1f 0e 5e 58 c3 7a ad a5 28 fb 4d 34 7a 03 db ec df 47 33 cd 19 6e b1 4a 12 69 8d 6d 9f 7a 87 c8 16 38 2f 8e c2 dc b9 26 2d 26 83 33 51 5f 2c b1 9b c8 e3 89 50 5e 16 1b 54 36 d6 f4 5c 8d 14 70 cf 8f 9f 1c 67 ad 9e e6 12 64 d9 3d e4 6b 2a 5d b3 48 ba 99 86 98 f4 e5 f8 73 fd f8 ec c8 aa e1 d7 4f 6f da 73 c3 09 db 66 93 70 81 25 68 5e 03 4a 80 d9 71 ff 00 19 e3 2c b5 54 71 2a c0 90 5c b7 c2 d9 c4 72 12 c4 fe 11 97 df 8c 56 3d ca 51 aa b4 14 6e 3b 49 dc d4 34 72 b4 24 90 43 2a e7 51 98 ad 71 a6 2c de 5f 15 b8 d9 d7 71 76 df b3 cf 65 29 73 73 24 ab a6 81 5e 87 ed af 1c 46 4c ca ea 36 a5 ea 2e b8 e3 50 b8 84 aa ad de 2a 5c 92 40 5f c3 cb ed c6 36 8e 45 08 87 90 a8 50 29 f3 Data Ascii: P\>#xU5_O=VdI1^Xz(M4zG3nJimz8/&-&3Q_,P^T6\pgd=k]HsOosfp%h^Jq,Tq\rV=Qn;I4r$CQq,_qve)ss$^FL6.P\@_6EP)
2022-03-15 16:08:34 UTC	10909	IN	Data Raw: 4a c5 9a bb 83 a5 7a 6a 68 33 ad 72 c6 69 4e bd 84 da d2 64 5f 6d 92 5e 2c d6 d7 65 e4 82 58 c4 5a 01 55 cb 3c f2 cc 1c f1 d7 8f 2a a4 5a b0 9a 7b a7 56 73 ed 6c ba ca cc d8 59 ad a4 48 18 28 0a a9 2b 06 34 1e 19 72 c4 64 be fb 6e 7e fa a3 65 46 91 9b b4 cb b9 c5 33 1b f3 0c 48 ee 69 a1 96 a3 e5 58 f2 ca 94 f2 19 9a 67 8e ac d5 c6 d7 82 5e 9c d3 fe a2 12 68 de 7b bc f4 32 90 07 3a 71 03 1e 72 a7 30 b5 88 47 3a 2b ea 56 d5 52 2a b4 15 a7 2c f1 4e ae 0c d1 5d c5 db c5 1b 34 0b 57 e2 aa 5c d0 f8 d4 f0 1f b7 15 5a 26 f5 fb 8b 6c c6 f6 d4 fb ab db 1b 6d e8 00 e4 b1 57 57 5e a5 24 90 32 cc 1f 2c 77 75 75 c6 ad bb 17 ba 1f 12 2b d8 74 11 bc 69 58 a3 51 a7 55 0f 01 f7 0a 67 8f 35 a6 f5 66 b5 2b b9 91 21 84 81 09 91 86 61 00 51 5c fc 3a 46 58 aa 26 df 18 ef d4 6d Data Ascii: Jzjh3riNd_m^,eXZU<Z{VslYH(+4rdn~eF3HiXg^h{2:qr0G:+VR,N]4W\Z&lmWW^$2,wuu+tiXQUg5f+!aQ\:FX&m
2022-03-15 16:08:34 UTC	10925	IN	Data Raw: 8f fd b6 52 28 64 ad 08 a7 1c b0 a1 1a 20 0f 71 6d b1 5c 59 7d 2d f4 f2 34 d2 35 7b de 14 f9 44 7c 4f e1 e3 c7 ab 1e ae 1b 46 a6 89 9e 79 7d ec dd fe d4 bc d3 a0 10 84 d6 19 bd 4d c9 7a 45 5b 51 3c 31 ea d7 25 5a 19 8d 16 e5 a9 43 b0 22 6a e6 49 e3 fc 6b 5c 3b 63 82 4f 45 da b7 18 2f ac fb d0 74 02 b9 90 29 56 02 94 35 e3 4c 7c be 7c 6e b7 87 db f6 10 ce 1f 7d 74 8e e6 3b a7 65 11 13 a6 80 75 02 28 4f c7 1e f7 4e 9b ab aa e2 52 01 df 67 ed 2a b2 4d a8 38 cc 0c b2 e5 5c 74 74 f5 9e 2b 80 d2 93 ff d4 e5 56 ea c2 e8 46 1e 31 de 6a 1a 32 12 45 41 e3 c8 70 c7 e0 ee 97 ac c3 d3 d6 78 ee c4 45 d4 cb 73 24 4f 6e 59 32 d3 46 c8 65 98 35 c3 d8 b6 a6 9f d8 34 cc dd ca c7 77 bc bb 8d ec ee 23 8a da 33 57 8c e6 49 a6 4a 39 52 b9 e3 ab 16 4c 74 ab 56 4d d9 f0 b1 0d 8d Data Ascii: R(d qm\Y}-45{D\|OFy}MzE[Q<1%ZC"jIk\;cOE/t)V5L\|\|n}t;eu(ONRg*M8\tt+VF1j2EApxEs$OnY2Fe54w#3WIJ9RLtVM
2022-03-15 16:08:34 UTC	10933	IN	Data Raw: ea d0 01 39 00 70 5d d5 57 47 ea 5c fb 24 b5 50 d3 0b 5a 28 61 ea 5a e9 51 5d 35 f3 03 2f 85 06 30 dd b8 d1 d4 8d b6 e7 79 2c 67 eb 07 ea 92 42 f6 c1 2c 72 f3 cb 33 87 6c 55 4f c3 c3 bf 81 9e d2 8b 3d d6 e4 c6 60 ba 01 66 4a 39 42 4d 51 75 7c dc b2 1e 9f 1c 69 7c 35 99 af 07 a4 fd 4e 39 0a 0b 25 6b db eb 98 ae ed 27 66 b7 44 65 35 1d 34 3c 8d 73 d5 f7 e2 52 ad 2a eb 65 e2 91 31 43 24 d2 5c 1e fa ea af a5 8b 06 cc 71 01 69 96 0b 24 96 9f b0 80 7d c2 0b 1d c5 fe 92 f6 36 76 75 a9 a8 e9 14 39 02 c3 9f 3c b1 a6 2b 5f 1f 8a 8e 23 de 54 04 41 1d bd ad 98 fa 56 0f 0c 64 0a 33 d2 94 34 26 a7 f0 8c 65 67 6b 5b c5 c5 f7 09 a1 86 e1 3d c7 72 58 e3 05 54 74 3d 75 06 fe 5c 3f 29 56 13 7e b5 c2 08 68 cb 6b df 72 22 8a da c6 54 01 56 d6 09 62 5b 86 79 53 ff 00 6e 3b 36 Data Ascii: 9p]WG\$PZ(aZQ]5/0y,gB,r3lUO=`fJ9BMQu\|i\|5N9%k'fDe54<sR*e1C$\qi$}6vu9<+_#TAVd34&egk[=rXTt=u\?)V~hkr"TVb[ySn;6
2022-03-15 16:08:34 UTC	10949	IN	Data Raw: 62 ac ad 15 aa e7 c4 97 1c 8c 0b 2b f8 7d c3 ff 00 77 b7 dd 36 94 a2 3a ea a1 42 09 19 1f c5 ab 9f ef 18 f4 72 63 78 3c 37 af 1d 57 e6 21 23 56 79 62 d5 1c 77 11 ea 56 ad 58 f5 0d 3c 3d 43 a7 51 6d 3f 1c 72 55 3d 5a 7f c7 f8 17 05 e4 bd c4 8a f6 d2 d6 35 c8 05 a7 da 0f 86 33 f8 57 89 17 05 eb b7 a4 6c aa 8c 5a a0 81 fa 8c 49 af e2 cf 3f 89 c6 6f 23 7c 7e e5 f6 16 b5 2e 78 d2 d4 69 94 ac 55 19 6a 39 1a 78 d7 c3 10 9b b7 0d 46 d4 15 47 f5 87 49 25 18 f0 04 0a d2 9c 34 82 34 d3 14 f6 f7 90 91 29 22 53 1e 97 22 59 06 63 41 a1 24 70 04 ae 90 05 70 93 d7 4f 0f af f7 9a 01 ed b6 97 57 71 24 9b 94 3d ab 98 c6 92 0b 92 3f 98 2a 9d 14 3f 7e 37 cb 7a d5 b5 47 35 7d df 67 d4 34 a4 d2 82 0a 75 40 e4 00 4e af 55 2b f9 41 3f c3 1c b6 b7 6f e0 52 a9 03 6d a9 4a 48 0d 33 Data Ascii: b+}w6:Brcx<7W!#VybwVX<=CQm?rU=Z53WlZI?o#\|~.xiUj9xFGI%44)"S"YcA$ppOWq$=?*?~7zG5}g4u@NU+A?oRmJH3
2022-03-15 16:08:34 UTC	10965	IN	Data Raw: 23 99 95 4f 30 2a c7 30 0f a6 94 c6 8b ac c8 df 2b 7e aa a9 f4 ed 22 58 6c 31 08 6d d5 23 92 4b 7b 74 4e 26 ba f3 a6 4d 50 d4 ff 00 a8 71 c7 3d 9c da 5a 56 b4 ff 00 29 92 0a 6b 14 95 14 c5 77 2c 74 15 0c ac 3a bc 09 af 1f b1 a9 8c 96 46 9e b5 4f f0 35 70 2b 48 2f e1 0e 93 49 de 89 8f 49 06 8c 07 83 1e 79 79 e0 bd a8 e2 16 d7 f6 19 e8 49 42 4c 69 76 84 00 75 0d 47 89 5a 7a 47 80 f1 c2 72 be 16 39 82 7f 4f 01 7d 50 68 0e d4 d4 52 84 f4 9c ab cf 2c 4e e7 1a cf b4 87 a9 93 79 6f 3e e5 38 8a 09 04 45 4e ad 55 1a 95 49 a2 35 08 cf 8f 8e 3b 69 65 8d 4b 53 f8 fd 48 49 0f 25 96 df 64 63 86 f5 93 ea 91 49 92 61 d2 49 1c 39 93 f3 70 3c 9b 86 12 c9 7b cb ac ed 7c 2b e9 ea 18 2c 5b b4 c7 75 6b 2f a2 7f a3 41 41 26 7a 28 08 00 05 a1 f5 1f 86 7c 31 b3 c2 bc bd db 96 ef Data Ascii: #O0*0+~"Xl1m#K{tN&MPq=ZV)kw,t:FO5p+H/IIyyIBLivuGZzGr9O}PhR,Nyo>8ENUI5;ieKSHI%dcIaI9p<{\|+,[uk/AA&z(\|1
2022-03-15 16:08:34 UTC	10972	IN	Data Raw: f1 b0 45 2a e7 40 34 a8 a9 00 54 a1 c8 72 af 8e 3a 7f bb 75 4e b8 3e 07 af 0f 17 a3 2a 5a d1 07 6d 4d b3 5c 6e d7 0c 24 56 9a d9 09 72 cd 4a 16 f5 b7 c1 59 40 e1 d3 c7 1c f9 96 5a e3 5a 69 67 a7 fc 7d 39 86 a6 b7 d1 ed d3 dd 2c 37 4c 86 73 53 1a c6 ee 40 e6 6b 9e 9f f8 e3 8f 7d eb 59 ac c7 cd 29 7f 11 a9 0b be 91 f4 3c b1 c9 12 49 db 34 76 6d 3a 79 0a f8 28 6e 58 c3 1a 52 93 4f 8f 0e d0 dc cc cb 1b 79 ad 89 37 01 8d cd 08 75 d5 d1 a4 d2 ba 87 0e 1c f1 d7 92 ca df 0f c3 cb 4f 14 89 b3 51 f7 0e d4 42 4a aa 42 a4 16 7d 43 85 28 7c 08 f1 c7 22 c5 2e 38 be c0 52 63 ef 7b d5 8e c5 20 de a5 49 a4 77 aa 2a a9 62 84 1e 23 f0 e9 f0 e1 5f db 8f 43 a5 c5 93 27 ff 00 3a b5 58 d6 74 dc 74 63 76 9d 0d 3b 3d f2 0b b4 06 aa 92 81 d7 18 24 d2 bc 0e 5d 3a 79 7c 71 8e 55 91 Data Ascii: E@4Tr:uN>ZmM\n$VrJY@ZZig}9,7LsS@k}Y)<I4vm:y(nXROy7uOQBJB}C(\|".8Rc{ Iw*b#_C':Xttcv;=$]:y\|qU
2022-03-15 16:08:34 UTC	10988	IN	Data Raw: 65 d1 42 da 75 2f 06 14 ff 00 8e 3c f7 91 dd 2a a5 55 cf 9c f0 9d 4a 90 4f 73 6f 30 ed 36 c2 55 1a e0 4a ea 55 1a b5 70 50 08 3e ae 3e 35 c6 fd 26 07 96 d1 cf d1 fb 01 29 0c b7 dd 9e ea c1 27 b5 43 2c 52 10 c0 c6 00 d0 0a d3 43 0e 26 80 f8 63 0b 61 55 bb 56 d1 af ab 9f e6 22 11 42 dc 5d af 74 cc 35 82 68 b1 83 4c e9 a7 e1 a4 f8 1f 9b 56 34 75 ab 88 fe af b4 a7 52 bb 9d 8f fa cc 0b 3c 73 b7 6a 41 43 1e b2 54 7c a5 0d 32 af f2 e2 ab d4 79 4e 1a d5 73 8f 6e e2 d2 1a 5d 82 d9 63 30 c8 15 12 30 34 22 9a 01 41 c4 9f 3a 60 5d 4d a6 56 b3 c5 89 b2 a6 63 b4 5b 95 b4 8c b4 b2 51 9c 01 a8 2d 0d 42 93 c1 53 2f 48 ae 67 1a 25 e6 bf 13 d1 70 f4 e6 c9 db 20 33 ed e9 bb a2 a0 89 00 04 bc e8 4e 95 70 78 9a 01 9b 57 9e 37 ae 57 8b 59 7d 95 7c 5d 7f 71 6a 90 6c 6d 3b 46 cb Data Ascii: eBu/<*UJOso06UJUpP>>5&)'C,RC&caUV"B]t5hLV4uR<sjACT\|2yNsn]c004"A:`]MVc[Q-BS/Hg%p 3NpxW7WY}\|]qjlm;F
2022-03-15 16:08:34 UTC	11004	IN	Data Raw: 08 29 aa a3 3a e5 fb 71 d2 d5 78 34 e6 dd bc 89 68 20 c9 15 c4 ea a5 54 b1 89 9f a8 66 32 d2 08 f0 cf 19 43 aa f6 a4 43 02 dc 37 bf a6 ba 86 29 ed db b0 e4 50 f8 9a 69 14 fe 1c 06 3a 31 74 fb aa da 7a 90 17 0b 41 75 27 69 2d bb 2a 14 36 60 29 d7 5a 52 a3 e6 e1 4c 61 64 ea a5 db 77 db e1 2a 06 ba db 83 31 8d f5 7d 30 4e a0 09 27 51 27 9f 3c 3a 65 e6 be 29 fb 09 68 cf ad d4 52 2a db 94 48 85 00 90 12 4e 95 e2 b4 f1 3f 1c 74 f8 5a d6 67 b3 bc 20 85 ec 57 03 4b 59 c9 1a 39 27 a5 85 35 b1 19 56 9f 86 98 ac 6d 7c c9 bf f8 af de 20 3b 98 bd c1 71 6c a0 ac 65 e3 7e a0 0d 35 8e 74 38 da 8f 0d 6d cf 55 fd 22 d0 d6 b1 8a 48 a4 0e ea ec d2 67 46 cf 49 34 1f 66 43 1c 79 2c 9a 85 c8 4c ba 78 ee 43 cb da 23 41 a3 0e 14 c8 67 e7 5c 67 57 58 52 23 ff d7 f2 3d fb 7e 7d aa Data Ascii: ):qx4h Tf2CC7)Pi:1tzAu'i-6`)ZRLadw1}0N'Q'<:e)hR*HN?tZg WKY9'5Vm\| ;qle~5t8mU"HgFI4fCy,LxC#Ag\gWXR#=~}
2022-03-15 16:08:34 UTC	11012	IN	Data Raw: 8e 19 19 6c d2 e4 85 96 34 76 5a d6 a3 3a f1 20 61 d7 23 af 06 d1 5e 59 6a 4d 26 7a 11 2a a0 e6 33 a7 9d 3c b1 0e ab bc c9 e3 15 c5 d8 8c 68 b8 52 10 a9 a1 a5 2a 40 27 cf 9e 0a d2 78 0b cb 29 b4 5b 41 18 ed ab 19 09 00 ad 6a 01 3f 2e 34 bb b4 eb c0 cd d6 0f ff d0 f3 f8 9a f4 1e cd ac 71 ad a4 6c a5 16 94 1a 40 ea 1e 3e 78 fc 4d aa f1 b3 7b 9c cf ac f1 90 54 d3 98 0f ea 4c f1 46 b4 22 a4 73 e4 3c 40 18 ca b5 dd c1 26 0c cf b8 b9 b0 dd 67 9e d6 09 3b a1 68 0a b1 d2 49 02 af f0 cf 1d 35 a5 f1 a5 66 a3 ed f5 0a 0c e5 f6 16 d0 cc 97 32 a3 c3 28 15 68 e3 7c 89 f2 61 53 4c 74 bf f2 39 35 aa 8b 2e db 23 44 74 92 d9 5a b5 81 92 64 d1 08 1d 41 d8 64 06 59 fc 71 e5 ac 96 df 0b 57 dc 5b 66 5d df b7 ed de e5 77 0e d8 92 68 c0 ed 84 e9 a9 a6 40 91 d3 4f 8e 3a e9 d4 bd Data Ascii: l4vZ: a#^YjM&z3<hR@'x)[Aj?.4ql@>xM{TLF"s<@&g;hI5f2(h\|aSLt95.#DtZdAdYqW[f]wh@O:
2022-03-15 16:08:34 UTC	11028	IN	Data Raw: 59 6c 5c 31 8c ae b9 10 d6 a4 13 ce 82 bd 3e 03 d3 8e 8a e5 cb 7b 2b ae 3c 13 39 dd f5 90 db 4d b3 68 31 88 e2 46 70 32 4a c7 a9 6a c0 9f 53 71 6f dd 8c 2f 97 24 cb f6 eb 1f 67 61 a7 f7 13 a1 96 76 3d bf 6b be 4b 87 9e 55 b8 9a 42 47 56 47 4a d4 82 28 46 91 4c eb e3 8e bf ee 2f 92 8e a9 2d b5 5f 7f e2 62 ef 21 d7 c6 db 70 9d 64 69 dd f4 14 6e df 6c be 7f 2d 00 00 7a a8 df 87 1c f8 f7 51 44 25 33 ac c7 af d3 88 a0 d4 8a 26 9e 03 24 dd a9 9e ac 75 a1 00 10 a4 8e 07 9e 39 1d a1 c2 9a f7 32 93 39 5d cf dc bb b4 70 b2 db 58 37 72 b9 a2 a8 a1 1a bd 20 e6 a4 94 f2 a0 e7 8f 63 0f 4b 8d b9 b5 f4 fd df b4 d6 d5 66 a6 db b9 46 b1 44 7e 95 ad a4 91 59 c4 4e 00 21 43 50 9a 72 07 1c 79 71 39 7e 2d c9 42 dc 63 2f 80 2d cf ba 22 b3 bb 16 f7 fd a2 f2 85 3a 35 06 45 51 5d Data Ascii: Yl\1>{+<9Mh1Fp2JjSqo/$gav=kKUBGVGJ(FL/-_b!pdinl-zQD%3&$u929]pX7r cKfFD~YN!CPryq9~-Bc/-":5EQ]
2022-03-15 16:08:34 UTC	11044	IN	Data Raw: 49 83 bb 54 03 76 c2 77 94 e9 68 63 a1 8d 69 cd 41 1e 3d 3a b9 e3 44 be 9f 0c 7c cf e2 66 a9 36 31 db 60 b7 99 16 2b 65 8f 5b ad 41 6e 82 54 50 37 99 5c f9 57 96 29 65 76 5a da 7e ff 00 46 6c a9 da 42 0b 69 6c a6 90 c0 86 5b b0 59 3a 5a 8b 97 02 c5 ba ab a8 f3 3c 32 c3 b5 95 d2 97 15 d3 d1 18 df 18 55 85 9b 41 71 f5 57 f1 a2 39 0e 23 31 f5 34 6b 91 20 91 f9 b5 63 1c 97 dd 5d b4 6f 96 e9 f9 bd 14 19 d7 42 7b 8e ed b7 da db 97 ba 72 b1 35 16 a4 90 dd 46 95 ae 54 cb d3 89 c5 86 f6 b4 55 6b f6 68 37 69 33 ae b7 3b 2d 9a c5 26 d6 54 6b d2 92 4e da c9 24 69 3a 47 a9 80 06 ad 8e aa 62 b6 5b c4 72 d5 55 47 7e bd 84 26 c0 cf be 20 8a da 37 b5 31 c9 dd 2a c1 42 ea 24 2b 00 6a 52 ac 5b e6 a1 5c 6f ff 00 e3 db b3 56 95 1d fd df 9b 90 9c 8f 0f bc e1 dc ee d3 6f db 88 Data Ascii: ITvwhciA=:D\|f61`+e[AnTP7\W)evZ~FlBil[Y:Z<2UAqW9#14k c]oB{r5FTUkh7i3;-&TkN$i:Gb[rUG~& 71*B$+jR[\oVo
2022-03-15 16:08:34 UTC	11052	IN	Data Raw: 35 c7 4b ab 5a ed 55 fd 5c ff 00 ab e2 32 4e 39 11 fa eb 38 23 78 6c 06 9b 85 e2 b3 6a 04 81 c4 d5 cf 57 96 78 7e 5d ac e6 ff 00 0f e5 ff 00 c4 7b 5b 29 db e4 dc af 98 49 72 d1 98 98 d3 b6 46 7c 0e 95 2d e9 66 07 d3 d5 c3 1a 65 54 a6 95 99 ed f4 d4 97 e0 7a 9c ef b9 fd 9d 7b bb df 41 28 dc be 96 33 5d 11 2a 54 b5 3d 79 b1 cc 90 7f 97 1e 9f 49 d7 57 15 1a d9 bf b6 d3 fd 26 6e d3 c0 d8 d9 b6 8b dd b2 dd e2 bb bc 17 30 c6 06 65 1a 32 a0 03 55 20 9c eb 4c bf cb 1c 59 f3 57 23 4e b5 da df 7e e9 2a 8d 1a 37 16 f7 0f 01 16 f2 2a b8 1d 2c 40 65 15 cb 51 00 e7 4c 72 d6 c9 3d 51 b6 87 2f b8 fb 6b 6b 96 eb b1 b8 5e b9 b8 a2 48 0b 05 a0 34 2b d0 d9 e9 e3 a9 80 cb d3 5c 7a f8 ba bc 8a b3 4a ad ba d7 9f fa 97 d9 ef 31 6d 23 7a 28 a0 8d 16 da 2b 96 99 d4 28 66 ee 50 8f Data Ascii: 5KZU\2N98#xljWx~]{[)IrF\|-feTz{A(3]T=yIW&n0e2U LYW#N~7*,@eQLr=Q/kk^H4+\zJ1m#z(+(fP
2022-03-15 16:08:34 UTC	11068	IN	Data Raw: d2 e2 75 b5 bb 86 4b 63 22 2b 24 9d a2 54 b5 2a 43 50 65 ab f0 f1 c6 19 3a 3c 75 5b aa d5 a1 ea a4 aa 9b 56 56 64 21 85 9a a3 a9 99 5d 83 13 52 49 26 9c 2a 49 cb f6 63 83 25 f5 9f bb 43 b2 97 da 01 bf 16 68 12 3b 7d 31 3c 40 b2 2a 95 a6 7d 3a 89 e3 a4 d4 af 48 c7 4f 4f c5 bb 6b 3c 78 fa e3 d7 cf 53 9a cd b6 65 cb bf d9 de dd 7f 4f 43 3c 33 05 59 04 91 29 d3 ab c1 b2 26 8b cf c7 1d 8b a6 b5 2b bd ed b2 d5 6d b7 18 12 c6 cd 16 8f 7c 90 2a c6 d1 84 a1 f9 a8 cc 7f 19 a0 d4 3f d3 8e 54 f1 2e 33 fb 3f 2f f1 1e c8 27 71 67 bd aa c1 d8 bb 35 88 12 e1 d1 8e ba 82 b4 cb 21 91 39 f8 e2 6b 7c 5a cd 78 f0 86 bc 26 43 59 58 cb 64 8d 23 4c f2 42 01 60 b2 46 14 8a 0a e9 57 f0 f0 f1 e7 e3 87 93 22 bb 88 49 f7 3f c0 d6 96 d8 68 6b 8a e1 62 93 50 58 98 2b 8a 16 0e 49 cc 0a Data Ascii: uKc"+$TCPe:<u[VVd!]RI&Ic%Ch;}1<@}:HOOk<xSeOC<3Y)&+m\|?T.3?/'qg5!9k\|Zx&CYXd#LB`FW"I?hkbPX+I
2022-03-15 16:08:34 UTC	11084	IN	Data Raw: a1 87 a9 a6 24 d6 d4 e7 8c 98 bc 45 f6 e6 5d a1 4d c5 e8 92 79 28 75 bc 6a e4 1a 66 32 63 42 df ca bd 58 ce d1 97 c3 58 af 73 8f 4f 78 ac a0 23 6f de 06 ed 29 89 12 58 58 80 ca 24 46 04 ab 03 43 40 28 2b f8 75 1a 7c d8 9c 9d 3f 95 c5 a7 de 99 b6 37 da 5f fd 3b 71 8d 81 92 51 2c 1a 74 94 ed 8e 07 e5 3c eb e7 cf 05 ad 8d 2d 38 fa d9 7b 6a b9 99 f7 52 ec d6 b7 90 d8 dc 43 17 7e 40 da 1b 42 e4 7f 07 02 75 37 1c 55 16 5b 55 de ad c2 ef 7e ff 00 52 39 ed 6a a7 06 e2 84 d0 53 a1 57 21 52 74 8c f8 0a 1f 1c 70 39 93 6d d5 04 b8 b6 98 47 d9 b7 74 b7 e3 a4 00 17 80 e7 98 ae 59 e3 6a d9 4c da 6c 67 6a 54 17 69 db 37 1b 36 11 b1 9a 50 aa 4b 19 40 24 96 3e b5 2b c3 f9 34 fc 31 db 91 57 2a 95 b5 7e 9e ce cf fc 8d e9 87 99 a7 3d c7 d0 44 f7 13 31 48 e2 52 f5 61 a4 1a 78 Data Ascii: $E]My(ujf2cBXXsOx#o)XX$FC@(+u\|?7_;qQ,t<-8{jRC~@Bu7U[U~R9jSW!Rtp9mGtYjLlgjTi76PK@$>+41W*~=D1HRax
2022-03-15 16:08:34 UTC	11092	IN	Data Raw: a5 6f d2 a2 96 12 39 06 80 53 a9 c2 d4 92 b4 c7 3d 30 3a bd b3 fa b5 8d b5 fb 94 84 94 ed fe f3 dd ee 6f e3 b3 b4 b3 72 8d 18 d4 9a 48 2a 57 23 ea 0a a3 5f 2c 69 97 a1 c7 5a 3b 5a dc f8 fa 6b e1 34 4e 0e e4 4f 3c f0 1a 6a b6 99 45 0b 1d 04 a6 5c aa 48 a0 c7 cf ed 49 fd 4b db a8 de 66 cc eb dd e6 7b 53 a6 08 a4 96 ef 4d 2a a0 29 cc 7a ab e9 e3 f1 c7 4e 3c 0a dc 5a ad 7d fe ce d0 4e 4a b6 1f 71 5d ee 2a 96 b7 96 e6 39 9a 20 c5 d3 e6 1e 92 18 8f 43 6a 19 8f 56 34 ea 7a 5a e3 f1 55 ca 9e 1e 9c 51 aa 35 22 db ed 6d 89 92 15 3d 6e 58 90 da 89 34 d3 42 6b e9 5a 7a 71 c6 f2 da da 3e 4b f7 fa 32 d6 86 7d fe d8 c1 0b ed 22 15 bd 7d 2a ce cc 03 05 07 3c 86 b6 ad 38 10 6b 8e 9c 79 79 64 9d 8b 97 29 ff 00 49 93 5a 8a fb da d1 ef 0e 23 bd 9d 8a 50 80 b1 12 83 57 15 62 Data Ascii: o9S=0:orHW#_,iZ;Zk4NO<jE\HIKf{SM)zN<Z}NJq]9 CjV4zZUQ5"m=nX4BkZzq>K2}"}<8kyyd)IZ#PWb
2022-03-15 16:08:34 UTC	11108	IN	Data Raw: 11 f4 ac 08 ed 05 5c c0 d2 48 a7 4b a9 fe 66 4f 0c 65 96 de 53 97 5f 8b ea 9b 7f 07 f6 9d b8 6b da 74 ed 67 1c b1 a2 92 64 28 6a ba 99 94 0e 59 8e 18 f2 55 9c e9 a4 fa 8f 41 51 10 79 e1 b6 63 6f 15 bb bc 67 49 66 0a 19 6a 4d 38 71 24 71 c0 aa ed ab b2 39 af 57 25 ae ed 04 61 d0 48 7e 52 10 28 a0 f1 03 4f ab ee c4 25 2e 1c 7b 7f 89 83 c7 3c 0a 23 b4 b5 23 bd 4a ca 79 cf 93 54 78 f0 27 fc 65 8d 1d ed c3 97 e4 25 e3 68 8b 59 5b 5f db ea 9b b3 32 f3 0a ad 40 c3 8e 95 39 0f dd 86 af 6a 3d 26 be ee 1d ec 75 86 60 1b 6d 93 61 6a c7 6c ca 49 a9 d5 1f 71 9b 4d 49 00 f4 d0 e7 d2 cb d5 5c b1 e9 6f cb 9b 8d be dd a9 4f a7 a8 8b 63 67 41 67 6f 14 f6 46 4d bc 3d bc b2 a0 2a ee a4 94 a8 fc 24 82 b4 c7 9b 7b 3a da 2f 16 49 f0 5f 37 b4 6d 20 64 da a7 44 76 9a fa a1 9e a0 Data Ascii: \HKfOeS_ktgd(jYUAQycogIfjM8q$q9W%aH~R(O%.{<##JyTx'e%hY[_2@9j=&u`majlIqMI\oOcgAgoFM=*${:/I_7m dDv
2022-03-15 16:08:34 UTC	11124	IN	Data Raw: 0a d5 2b ab a3 4d 00 d4 c7 37 fc 5e af 0c 68 f0 bc cf 54 e9 da e7 4e 3f 37 fd 44 9c 95 43 ef 2a 5e 37 75 7b 64 b2 99 15 85 34 c6 17 36 24 11 cc ae 5e af c3 c7 17 6e 87 c3 a6 bf 4f 7d a7 87 a7 b4 b3 6c 7b 96 c6 1b f9 a2 9f b8 22 d0 8e 83 4b 1a f0 2c 03 71 5e 23 5e a0 8b 41 9e 38 3f b5 bb a2 6a 26 5a 7c 3d 9f f8 f1 64 49 11 3d b8 93 fe cc 9d 0f 09 76 93 55 54 77 1b 2e 9f c2 05 7a e8 70 f6 b8 f1 72 b4 6d e7 e1 5d bd bf 94 24 e7 65 f7 8c db 2d ed 2e 8b 7d 3b 06 51 20 45 ac 88 a0 d1 d5 b3 f1 d2 7a 69 d2 ba 49 c7 a6 ba 15 9a be 1f 8b 4d 27 e1 7f 4b 06 db 23 17 ba 25 de 03 18 a0 64 89 54 37 72 94 21 86 66 84 8a 29 af 92 d7 ab f9 70 df 48 b1 71 72 fb 3d 38 fd a0 8d 8d a7 de 96 b1 6d 31 4f 7b 45 91 9f 4a 75 64 c4 e4 59 4f 4a f8 96 d5 d3 f6 f4 e3 8b 37 41 67 91 aa Data Ascii: +M7^hTN?7DC*^7u{d46$^nO}l{"K,q^#^A8?j&Z\|=dI=vUTw.zprm]$e-.};Q EziIM'K#%dT7r!f)pHqr=8m1O{EJudYOJ7Ag
2022-03-15 16:08:34 UTC	11132	IN	Data Raw: 23 20 1e 24 13 c4 ea f0 5a 53 1f 71 fe 2b a4 56 a3 b5 a1 ef e3 2d 58 cf 56 76 de ce f7 ec 1e f3 85 6d ee 10 43 74 a5 43 c8 56 8a 58 fe 13 9d 08 3e af f8 e3 c3 eb 3f c6 be 96 d2 9c d5 f0 d7 87 ac e9 a7 89 c3 25 ee cd 9f 7b ba b8 d3 6b 77 16 88 c7 e9 db 0a 2c 84 02 03 55 e8 7a b4 d7 f7 e1 74 b9 b1 51 78 aa fb f2 7c be ee c0 b5 75 0f 7f 72 45 b4 5a 88 e2 32 49 22 10 88 af 1b 99 35 56 a0 33 01 a4 90 72 c7 22 e9 5e 5b 4b 84 9e ae 1a db ec 47 2b 5a 9e 69 b8 fb a3 7b 97 74 6b 68 93 44 e1 96 45 b6 0a 44 8e 32 6e 39 d1 95 45 59 bc 2b 5c 7d 5e 2e 8f 12 c7 2f 55 ad 77 fc b5 e5 f6 8f 6e 86 14 df dc 45 9a 7e fb c4 cc 80 64 a5 98 51 d4 1d 34 23 a6 82 be 19 f3 c7 a1 5f f1 90 a2 7f f5 e6 4e d3 6f d8 9b cb 6f 77 82 ce da 51 6a 82 39 09 42 4e 60 d7 48 d7 a7 3e bd 2c 73 e1 Data Ascii: # $ZSq+V-XVvmCtCVX>?%{kw,UztQx\|urEZ2I"5V3r"^[KG+Zi{tkhDED2n9EY+\}^./UwnE~dQ4#_NoowQj9BN`H>,s
2022-03-15 16:08:34 UTC	11148	IN	Data Raw: 52 35 02 23 75 20 a0 ff 00 71 d4 8f b5 59 b5 69 f4 ae 3e 7a fd 46 4c 95 70 95 3b 7e af d3 5f dd 07 33 6d 81 6e 12 5f 49 6b 25 fe cf 66 ad 23 36 89 04 a4 80 c9 c8 47 9a a6 9a f5 1a f1 3e 3c 31 be 25 45 65 4c b6 d2 25 6d e5 6f cd c6 d2 25 5e d3 6a d3 70 ba b4 8a 38 6f 47 65 dc aa 2a 46 51 b4 d4 56 8d a3 48 04 91 97 2f 3c 70 5f 15 6c db a7 8b 9c b9 d7 d5 21 a7 23 40 34 c2 39 1e 59 16 25 08 74 b8 ab 1a 93 4c 85 7f c3 63 9a 14 a4 94 f7 1a 49 85 bb 5e 6e 1b 4f fd ed b5 db dd c0 b5 0c 8a 82 67 d5 5c b5 e6 3b 62 9f 97 fc f1 e8 e1 c7 4c be 1b 55 51 f6 ce ca fb 3e af 79 75 a4 83 fb 66 5b cd c6 de 49 f7 40 8b 2c d2 f7 20 40 59 4a 87 1a a8 7e 52 df 90 6b f3 c6 9d 5a ae 3b 25 8e 62 aa 2c f4 73 b7 4f 5c 7e 6d 08 f8 4d db ff 00 6d c5 ba 14 59 84 87 49 d4 11 58 a2 9a 7e Data Ascii: R5#u qYi>zFLp;~_3mn_Ik%f#6G><1%EeL%mo%^jp8oGe*FQVH/<p_l!#@49Y%tLcI^nOg\;bLUQ>yuf[I@, @YJ~RkZ;%b,sO\~mMmYIX~
2022-03-15 16:08:34 UTC	11164	IN	Data Raw: 7e 6d 29 9e 37 ab a5 b4 f2 f7 77 da c7 a5 5b 2b 1d 6d 9f f6 db de 17 30 23 ed 56 d3 c8 cc 85 c5 c5 c5 42 1a 0e 65 80 5e 3e 1e ae 14 c7 4d 7a 7b 64 f9 1d 6a fd 9a 1b ed 76 50 8e 52 3d e5 ec 67 3b 6d fe e1 6d 2e e6 80 a3 c5 90 1a c5 7a 43 03 ea f2 39 57 1c d6 e9 ed 47 ba b4 b5 6b 3c 78 98 2b 3a b8 07 9a cf 70 b9 b9 48 d2 78 8b 1e a3 18 50 c5 80 1f 8d 6b 4d 1f 8b 11 e6 d1 27 66 9f ea 98 ff 00 4f 79 39 2b 3a 98 c7 d9 db bd dd d3 5d 77 e0 37 25 d8 92 8c 5d 0c 40 74 86 8b a6 ae 1b 8b ea ae 78 ed fe fb 15 69 b6 2d 1d fe 1f 17 ea fc 0e 45 55 c0 e9 76 ed ae 5d ae d9 5a e5 2a 61 34 08 82 ba 8d 32 0b a8 96 ff 00 4f 0c 73 67 55 b6 b3 f1 7a 72 3d 0d bb 54 13 8a e6 e6 e5 9e 43 63 fa 19 05 45 60 8d 5e 2d 56 a5 2a 07 d9 8c 2b 8e a9 46 ed 7b 7f 70 ab c3 88 22 6c 31 41 21 Data Ascii: ~m)7w[+m0#VBe^>Mz{djvPR=g;mm.zC9WGk<x+:pHxPkM'fOy9+:]w7%]@txi-EUv]Za42OsgUzr=TCcE`^-V+F{p"l1A!
2022-03-15 16:08:34 UTC	11171	IN	Data Raw: 1d f6 db 35 52 8d 08 65 5a e9 12 2a d3 e2 68 3c b1 ba cd 7e df 71 e9 d6 d2 85 69 be 6d 96 8e b0 d8 6d 17 0b 29 e2 d4 40 b5 e0 1b c3 0b 26 0c 97 53 7c 95 8f 6f b8 c2 db 98 43 7b 89 4d cc a0 d9 ba 08 b3 ae a2 51 fe 14 e1 43 88 af 4e d5 54 59 6b dd ad 41 3b 22 10 ef cd b9 68 17 76 6d 1c 9a 9e a8 49 00 20 a1 53 a8 fa eb 9f 21 4c 16 e9 bc bf 86 d3 c3 df cf d4 67 55 64 3e f3 ee 68 76 7b 24 9e 4b 58 51 c8 62 15 9b a8 53 d2 14 53 32 fc b9 62 70 74 8f 2d a1 5a dc bd 3f 94 e3 be e6 e3 53 32 d7 de 97 9b d2 aa 6d 4a d0 5b 64 ac ae a2 8a 46 6c a4 12 4b 0f bb 1d 76 e8 2b 89 ff 00 f4 f1 5b bb 9f 79 a6 2c 6e 4d a0 67 24 4a 11 99 80 cb 8d 09 19 f8 36 38 dd 23 46 7a 90 04 ab 65 75 0b db 5f 59 a4 10 8a bb 94 6d 4e 72 cc 80 39 ff 00 8a 63 5f 15 5e ea 59 d9 f2 95 a1 cd e5 be Data Ascii: 5ReZ*h<~qimm)@&S\|oC{MQCNTYkA;"hvmI S!LgUd>hv{$KXQbSS2bpt-Z?S2mJ[dFlKv+[y,nMg$J68#Fzeu_YmNr9c_^Y
2022-03-15 16:08:34 UTC	11187	IN	Data Raw: cb 5b 98 77 af d4 86 59 e4 42 73 75 50 16 87 c4 2f 15 f8 e3 cf bd 1e 2d 1a aa ee fe 27 7e 1b 94 dc 6c 92 6d b2 ac 71 dc cd 0c 0a 0b ac 71 00 4d 4d 07 51 24 fd d8 d2 bd 42 c8 a5 d5 59 f0 9b 7e 01 6c b1 c0 07 71 b7 b8 b9 9e 58 77 2b 95 3b 34 a4 07 40 0d 74 81 5e 55 21 eb c5 bc 31 d1 8a d5 aa 4e 95 ff 00 ea b8 7a ff 00 ea 6e b5 52 67 6d 9b 1e c9 67 70 67 db ac e3 d2 83 42 cc d2 33 6a f1 28 1b 31 4f c5 8e cc 9d 46 5b 28 bd b8 fc b0 b4 f5 c1 b6 1a f3 66 c1 b6 b4 ba 99 1e 43 22 69 a8 e9 3d 3a 4f 10 75 1a 69 38 e1 77 b5 53 88 0c b6 8d 43 f4 c4 b0 17 86 44 91 55 b4 fa c3 15 3e 19 66 71 85 6e e6 1a 89 d7 80 f1 e5 4f 42 b8 9e 44 90 04 00 02 73 52 29 5a f8 57 1a 5f 81 d1 60 2d d6 7d 9a 2b b5 b3 de 9e 48 2e 38 aa f7 0a ae 62 a3 31 fb 31 78 ab 95 d7 76 34 ac bd 47 9f Data Ascii: [wYBsuP/-'~lmqqMMQ$BY~lqXw+;4@t^U!1NznRgmgpgB3j(1OF[(fC"i=:Oui8wSCDU>fqnOBDsR)ZW_`-}+H.8b11xv4G
2022-03-15 16:08:34 UTC	11203	IN	Data Raw: c1 8f ea 69 af df 5f 0c 6d 8f 25 68 8c 15 5d 8d 3d df fb d3 7a e9 1d ea c7 59 d8 b9 ee 39 3a 33 1d 25 3c 3a 72 c7 9c ed 6b 33 d4 ad 12 3d 9f fb 70 cf ee ad a2 db 75 df 94 4e d3 2e a8 d2 4e 04 2b 55 49 1f 36 8e 55 fe 6c 75 61 ed b6 bd 87 1e 5e 30 8f 57 6b 98 a0 8b 55 cb af 48 ad 01 a6 67 80 c7 ab 30 b5 38 fd 46 7c 37 90 5e ce b3 2c da e3 5a e9 55 61 a4 b7 16 a9 1f 87 19 2b 26 f8 8d d4 1e f7 dc 0b 1d 06 bd 20 92 08 34 a0 a7 26 f8 f2 6c 2b e5 1a a9 97 3b db ee 8b a2 51 1b c4 0f 5a bd 28 3c 1b 3f 3c 73 bf 11 ad 5c 1e 49 ee af 69 1d db 7f 10 4c 23 b5 1d bd 46 e0 02 6a b5 a0 e0 42 b7 1e 27 d3 8e 2c b5 83 6a b9 e0 71 7b 87 b1 36 8b ab 9f a5 b8 dc 25 78 d5 e8 fa 51 74 c8 16 9a b4 37 49 5f 0d 59 f1 c6 1e 6b 5a 26 6c ab cc fa 3a c2 1b 19 2c a1 8f 6b d4 96 a1 14 22 Data Ascii: i_m%h]=zY9:3%<:rk3=puN.N+UI6Ulua^0WkUHg08F\|7^,ZUa+& 4&l+;QZ(<?<s\IiL#FjB',jq{6%xQt7I_YkZ&l:,k"
2022-03-15 16:08:34 UTC	11206	IN	Data Raw: 90 af 62 38 b4 c8 cd 53 dc a1 27 3e 2c d9 d0 9f 97 ee c0 f5 d5 bd 3f 2f e1 f8 89 97 4a 24 9c 09 2a 16 41 40 32 34 f2 39 e5 88 4e 34 10 f7 49 18 95 65 8c 69 19 ab 0c c9 29 f0 3c 07 98 f5 60 a3 71 0f d1 94 46 e3 78 2c 80 45 0e b6 25 fa 09 00 80 1a 8e d9 0c ab 9e 95 c5 2c 5a ea e3 87 dd a2 2e 40 d6 f9 ee 19 ed e6 0d 52 b9 90 78 83 ff 00 11 41 cf 1b 3a 6d 49 a2 64 9b 2a ea a8 9d 8d 41 62 d9 05 1c 78 a0 e3 a7 fc 53 11 ec f4 fd 5d e2 25 3a 5d 25 9c fd a6 33 ca 45 10 f4 a8 f2 af db e3 f7 61 57 6b b2 9f 0a e7 c4 d1 20 55 b4 86 3a 08 e1 42 74 f7 49 53 5e a2 05 4e 93 5e 38 df cc 6f 8b fc ba 8c b2 ee 09 95 0c ea 1e 5e e0 a9 2a 34 a8 00 64 00 19 91 9d 38 62 6b 64 dc 69 51 26 12 1d d0 87 65 d3 10 20 50 d0 10 69 9a ff 00 8a e3 24 97 ac a9 2e 78 89 45 05 97 59 46 5e 34 Data Ascii: b8S'>,?/J$A@249N4Iei)<`qFx,E%,Z.@RxA:mIdAbxS]%:]%3EaWk U:BtIS^N^8o^*4d8bkdiQ&e Pi$.xEYF^4
2022-03-15 16:08:34 UTC	11222	IN	Data Raw: c7 50 e5 4d 25 7f 9b 1f 1d 9b fc 85 55 2d 4d 55 92 69 ee f7 78 7e f3 8f fb 84 dc 70 39 af ee 5e ef 17 b8 bd c7 24 90 12 91 09 c5 2b c6 91 81 c7 e2 71 ee 74 54 f2 f1 cf 6d 7f dc 7a 4d c8 57 f6 9a dc 4b ee eb 3b 99 5d 51 61 59 09 2c 78 21 04 03 f1 ae 43 1a 75 36 8a 47 6b 5e f2 37 40 0f ba e3 86 92 20 39 c2 5d be 3a 8e 3a a9 69 83 95 71 3c ef 71 58 f5 28 84 82 34 a6 af 88 19 e3 d2 c4 df 3e f3 64 83 3d b2 c9 6d 2c ee f5 34 50 a0 79 1c 67 d4 6a 92 25 a8 3b 55 ac c8 01 e2 14 50 9e 39 8e 1f 61 c7 85 67 0c da a7 4d 16 e1 0d be 99 1e 85 f4 81 fb 39 63 ce 72 d9 d7 57 07 ad ff 00 64 fd d7 72 9b a9 b6 47 d3 f5 43 b4 a6 b4 ea 39 a6 74 34 cf e6 a6 58 30 a6 ae 75 3f 15 4f 1f fe e6 6d 5b c4 fe f7 b9 87 7f 85 ed ef e3 0d 50 f1 e8 66 5c d8 1a 70 6d 5f 2b 8f 5f c7 1e bd ae Data Ascii: PM%U-MUix~p9^$+qtTmzMWK;]QaY,x!Cu6Gk^7@ 9]::iq<qX(4>d=m,4Pygj%;UP9agM9crWdrGC9t4X0u?Om[Pf\pm_+_
2022-03-15 16:08:34 UTC	11238	IN	Data Raw: 38 f1 22 06 8f 60 91 76 f9 ec c2 a2 5c 76 a6 84 36 b6 21 bb 88 42 33 d2 b5 c8 81 d3 5f e6 cb 0e dd 4a de ad ca 6b 6e 1f 4b d5 21 ad 1c 96 7b 67 68 fe 8f b4 59 ed 57 03 f5 a0 5d 19 8c 89 cd 87 57 86 58 cf ab cf e6 e5 b6 45 c2 da fa 21 d9 ee 72 6a 09 d0 dc 2c 69 1a 0e 20 32 0a 31 23 d4 0d 79 0f 4a e7 c3 cb 1c c9 3d bc 7d 2c 26 d1 19 a4 ec 44 d2 15 11 99 64 0a 85 02 51 6b 9b 29 6f f2 cb cf 1b 53 1a 75 9d 5c 08 ca b7 db f7 7b 4b b6 10 48 0c 65 c3 76 db 39 15 54 d0 d2 84 67 ab ab ab d2 b9 f5 65 8d ef 7a 42 dc a2 d1 c7 96 ef c3 f1 25 c8 65 fe cf 73 b9 4c 3b cc 7b 2e da a9 4d 24 d2 bd 35 e0 7c 97 3e 15 aa e3 1a e6 d8 a6 35 ed 2d 68 16 36 cb c8 01 64 0a 65 11 8a 1c 89 d6 c2 80 13 97 57 23 fb ab 8d d2 54 d5 fa fd 52 57 12 36 d2 1b 58 58 dd c6 3e a4 82 7b 6c d9 86 Data Ascii: 8"`v\v6!B3_JknK!{ghYW]WXE!rj,i 21#yJ=},&DdQk)oSu\{KHev9TgezB%esL;{.M$5\|>5-h6deW#TRW6XX>{l
2022-03-15 16:08:34 UTC	11243	IN	Data Raw: a6 36 b1 94 f7 1b 97 bd 26 37 61 d9 23 07 5c b2 42 32 70 45 42 2a 29 1a 47 2f 05 c7 a3 9b 22 c4 db b4 3b 3d 15 5e 9b 0c d5 b9 87 ec c6 e6 3d 76 b6 72 44 92 19 42 3a b3 11 2a a5 46 45 4e 91 45 27 3c e8 5a b8 c2 d5 9d 75 f1 7f 4b 7f bc 94 6b 5c b8 b5 49 4a bf ea 95 2e c6 32 4a 29 53 a1 07 e1 00 8e be 9a f0 c7 2e 3a c3 e3 c3 4e fe f9 1b 2b b0 dc 19 90 44 66 92 61 1d 14 b1 46 59 1c 0a 28 63 ac 0a 02 7c 7e 3c 31 19 29 17 9e d7 db e1 0a b0 ed eb dc d6 7b 35 d2 43 22 a7 6e 52 d4 66 27 50 ca bc 17 a4 8d 47 4f ed e1 8c 7f b4 79 5d 9d 79 3f 44 3d c5 72 d8 49 71 7c 2f 81 8e 7b 6e cb 09 02 11 41 a7 80 51 c7 ac 9c ca f9 8c 3c 79 5a a3 aa d2 df 9b bc d7 91 8d b9 cb 7b dc 11 21 45 4e 92 c1 4e 68 ad d4 ac 47 1c 8f e6 f4 f8 63 ab 1a aa 53 e9 66 68 a2 35 2f 69 27 8e 38 61 Data Ascii: 6&7a#\B2pEB)G/";=^=vrDB:FENE'<ZuKk\IJ.2J)S.:N+DfaFY(c\|~<1){5C"nRf'PGOy]y?D=rIq\|/{nAQ<yZ{!ENNhGcSfh5/i'8a
2022-03-15 16:08:34 UTC	11259	IN	Data Raw: 85 7b 3b 5f 4d 19 15 41 64 5b 5c db a5 e5 cc c2 34 70 44 45 91 5b c9 8b 16 ce 82 a0 f4 8c 2a e3 84 fb 7d bf 80 6d 92 b9 ed 9e ea 04 8a e1 d6 4b 77 70 a4 91 a6 8e 3d 26 8b 4a 66 06 9d 39 1a e0 ad dd 5e 9c f5 80 4a 19 cd de ec 37 96 fb 8a 43 68 d2 4b 70 28 19 8e ae d2 d7 81 d7 c9 91 05 19 47 4d 1f 2c 97 1e bd ac 95 3c 71 af 2f 9b d5 e9 c3 69 3b 01 e0 b3 dc 2e a3 8f 6e b2 11 a5 ce a6 57 21 86 b5 74 07 2d 25 9b a6 bd 41 b9 b6 6d 8c 6f 6a d1 bb de 76 ff 00 a6 19 ae c0 db 8d be 7b 3b 83 75 6a 63 78 62 5d 26 59 1b 47 5b 53 d0 48 25 98 f9 73 ea e1 8c 29 6d f5 f1 26 b5 e1 5d 7f a8 9d b0 81 25 d8 77 e9 26 5b d9 b4 43 03 c8 11 21 69 0d 34 3d 3b 84 81 d2 38 6a d2 bd 4c bf 1c 75 2c 98 d5 76 ea ff 00 3c 7c cb e1 f4 65 2c 72 03 b8 6d 9b b6 db bc 4b db 91 d3 6f 65 d4 66 Data Ascii: {;_MAd[\4pDE[*}mKwp=&Jf9^J7ChKp(GM,<q/i;.nW!t-%Amojv{;ujcxb]&YG[SH%s)m&]%w&[C!i4=;8jLu,v<\|e,rmKoef
2022-03-15 16:08:34 UTC	11275	IN	Data Raw: da 95 78 69 d4 b9 05 f5 1e 9e 2d 85 95 da 95 71 ac 6a 2b 52 0b 2e 64 db af d6 e2 38 a2 26 48 e0 29 08 90 95 55 a5 0e ae 81 c0 53 9e 38 b1 67 7b 7f fa 2d df 4e df 97 f6 90 d2 66 88 f6 ee ef 63 69 69 28 80 fd 28 2b 24 ed 16 95 41 19 35 0c 4b b6 b2 10 51 9b a6 a7 1e c6 1e 93 26 44 ae 94 51 eb af a7 33 55 8d b5 27 23 b6 b5 ed dc c6 5b 93 dc 89 88 64 0c 4b 32 90 34 e9 0b 98 e6 68 d8 f2 fa 8a 6a e1 43 d7 d5 63 16 8d 69 2d 6e a1 57 54 7d 0e 74 a6 9e 08 55 45 4a ba 7a 4f c7 e5 61 a7 18 2b aa 27 57 33 6d 74 ef 21 28 2f 16 93 d9 32 b4 c1 e4 58 c9 95 94 35 02 39 5a 2b 71 06 9c bd 5a 70 bc d7 4f 0b d3 bb 9b 14 13 dd b6 eb 8b b9 3e a2 49 e5 8e 66 f5 87 41 52 5d 8f 00 ec 35 73 a5 1a bf 66 78 ea ae 37 79 b5 b5 9f ea 13 46 64 bd c2 8a 21 75 b8 88 38 0a 13 2e dd 47 5b 31 Data Ascii: xi-qj+R.d8&H)US8g{-Nfcii((+$A5KQ&DQ3U'#[dK24hjCci-nWT}tUEJzOa+'W3mt!(/2X59Z+qZpO>IfAR]5sfx7yFd!u8.G[1
2022-03-15 16:08:34 UTC	11283	IN	Data Raw: 8c c5 8e d7 68 81 ae 22 8a 24 99 ce 9e dc 80 d2 45 ae 93 d4 09 cf 9f a4 7c 4e 3a 3c 59 5c 36 e1 6b 3d 8f d5 fb c2 b0 82 96 de c2 e2 58 d3 b8 90 4d 11 65 50 f9 75 64 1a 36 5a 75 2f ab d2 b8 aa da ce 7b 2d f3 7e 3d c5 bb a7 dc 15 71 71 0d 8d a7 d0 40 86 3e c4 9f a6 23 55 40 17 e6 51 a6 ac ca df cd 89 b7 8b 4b 3d cf ea 64 3b 13 dc 64 6b dd bc cd 62 5d ee ca 33 a7 57 4a 9f 4b 6a a9 e3 e1 96 39 f0 35 8d c5 b4 d5 4f a8 d5 58 cf da 64 66 7e e8 49 a2 ee 45 fe e0 15 46 24 50 92 01 14 6f e7 c7 a1 9f 25 76 c4 26 eb e1 f4 ed 37 56 4d 1a d0 99 36 58 99 65 91 64 05 e9 1a 15 a6 a0 78 d5 8f df 4e 03 d5 5c 71 55 bb da 12 e5 ac 8e cf b0 c0 8f 72 fa db e9 23 dc 51 16 ed 4c 91 d2 95 50 a8 c0 2c 89 fc a3 4e 75 fc 54 c7 a1 6c 6b 1a d3 86 92 fb fe 93 35 26 cd fc e1 94 4b f5 09 Data Ascii: h"$E\|N:<Y\6k=XMePud6Zu/{-~=qq@>#U@QK=d;dkb]3WJKj95OXdf~IEF$Po%v&7VM6XedxN\qUr#QLP,NuTlk5&K
2022-03-15 16:08:34 UTC	11299	IN	Data Raw: 59 65 57 8d c0 d2 29 d2 cc 72 0b e2 a3 05 93 56 6d f6 7a 30 35 2d 36 ad bb 73 8d ae 6e 45 27 88 8a 4e 0e 82 d5 a9 d2 7c 94 fe ce 38 e8 a7 50 a9 5d ad 43 73 1d 85 79 90 a0 bb 72 bb b0 9a 55 b4 2c af 2d 58 80 08 d2 32 a5 03 f8 53 80 c7 2d f2 59 d7 87 07 c4 c5 b1 15 b8 8a d7 b4 d3 06 b9 ee 2a c7 4c f2 23 a7 49 6c cd 3f 7e 39 e9 19 3c 4a 65 7c a3 51 20 db a5 cc ad 7a 10 a2 07 00 19 14 b7 5d 14 70 20 64 2a c3 87 1c 69 5f 12 76 bc cc ed ec 14 4e a0 f6 d7 17 b3 24 45 34 2e a1 d5 1c 44 9c db ce 9e a1 a7 86 2e b7 ad 1b 99 f5 b2 9b 48 3d 64 6b 9b 40 55 23 28 72 25 aa 0d 3e 65 55 fc 55 fe 38 cf 26 7f 95 f1 ed 39 ec e7 81 91 fa ed 21 b2 ec 92 ce f4 aa 10 33 2b cc 02 1b 8f 1f 2c 3a ba a5 ba 79 19 6f 8d 05 2e ed b7 ec 71 14 bc 8c cf dc 76 24 85 21 11 d2 9d 03 4f c6 a3 Data Ascii: YeW)rVmz05-6snE'N\|8P]CsyrU,-X2S-YL#Il?~9<Je\|Q z]p di_vN$E4.D.H=dk@U#(r%>eUU8&9!3+,:yo.qv$!O
2022-03-15 16:08:34 UTC	11315	IN	Data Raw: 53 a9 13 30 0a 82 78 9d 35 ce 87 11 93 6d 9c d9 77 fa c9 d4 16 dc a2 c5 21 28 0e b1 a4 2d 08 d4 41 e0 41 24 91 4f c3 a5 72 e5 8a b4 ca ee d4 0b 36 cb 6b 56 4e c4 b2 93 2a c8 1b 40 cd 50 11 5d 20 73 a0 e5 9f 86 16 5b d9 39 4b 48 f7 ea 68 a0 88 58 ee d2 48 d0 82 11 81 70 95 50 0b 0e 9a 86 e0 59 69 c7 56 29 d9 d6 3b f8 4e be e8 ec 1a 70 68 c9 15 b4 71 99 62 97 f5 5f 80 3c 5a 46 e7 d0 6a 34 e6 57 c7 96 31 57 6f 46 b4 fc 0d 24 c8 5b cd da 09 56 01 12 c3 3c ac a9 dc ad 50 35 2a 18 93 99 a7 f8 38 e9 f2 f1 db 59 94 b5 8e 64 20 cb 59 6d b6 d7 69 77 09 8c 90 e8 ea 28 0e 82 c0 51 84 8d 40 69 af 3e 39 b7 96 12 6d fc 2b d8 df b8 d2 60 b2 5b 29 6f de 42 92 2e 92 55 57 41 28 ba 40 af 49 3e 7a 4e 32 a5 95 74 8d 75 e3 a9 2d 8a e9 4d bc d1 c9 3b ac 71 02 a1 ea 01 6a 01 a4 Data Ascii: S0x5mw!(-AA$Or6kVN@P] s[9KHhXHpPYiV);Nphqb_<ZFj4W1WoF$[V<P58Yd Ymiw(Q@i>9m+`[)oB.UWA(@I>zN2tu-M;qj
2022-03-15 16:08:34 UTC	11322	IN	Data Raw: 2d bd bb ee d1 a4 2e 91 bd c0 76 94 89 49 0e aa 1b 87 46 a5 3a bd 39 7a 7f 16 3b 6d 65 89 cc bd bf 0f 87 e1 6f f9 b5 ef 29 1b d3 db 43 b8 ce d3 7e 92 dc db e4 51 dc a2 2a 01 95 14 1d 55 ab 0f e6 a1 f8 e3 93 14 d6 b0 a6 1e b3 a4 bf 79 66 4d d4 27 6b b1 7b a2 0f 66 e5 f4 34 a0 12 a5 41 d4 0a f8 32 d3 9f 8e 3b 29 67 77 1d 9c bf 37 e2 26 69 a3 59 3d 97 f4 fb 18 81 b7 68 d7 54 7a 98 02 07 56 ae af 9b 33 cf 1c 5b b2 55 cd 9f 3e e2 24 8d ed ec 57 1d 86 82 7f d2 2a 58 ab 13 5d 39 f9 6a 54 e0 74 af 51 3e 58 aa d5 ea 9a d5 69 ed 1b b4 03 6d 9b 8c b7 b2 8b 74 d5 6c b0 b5 59 1d 7a 1c e5 a9 c9 ca ad f2 fe 51 d3 5c 76 da ef 12 5b bc 6b 97 e5 2a b9 52 e2 8d 3b eb 4b 58 61 06 ea 61 1c 0a 58 bb 50 02 01 0d a4 95 ad 23 61 ab 3a f1 c7 6d 7a 8a 5f d6 f8 23 ba b9 92 e2 61 d9 Data Ascii: -.vIF:9z;meo)C~QUyfM'k{f4A2;)gw7&iY=hTzV3[U>$WX]9jTtQ>XimtlYzQ\v[k*R;KXaaXP#a:mz_#a
2022-03-15 16:08:34 UTC	11338	IN	Data Raw: 4f a8 63 ab 0b d8 9e fb 7a be 6b 7f a7 4a 25 f3 7a ca 82 99 ed a5 f6 f5 e8 da bb 28 f0 48 88 b1 dc c9 ad 74 b0 a9 a8 23 a5 97 50 5c 9b ab e5 e0 5b 1a d6 eb 2d 1d be 69 e1 58 b6 9f c3 99 2e a7 4b b4 d8 cd 15 b4 10 55 64 9d a5 92 49 3b 72 00 ab 5a 51 50 e7 d2 c0 f4 9d 2d c7 36 c6 17 c6 ad 6e 51 a2 8f 9b 4e 76 e4 52 a0 a6 da 85 cc ed 70 25 2b 72 e8 74 83 a5 6b 22 1e 24 e7 55 a6 b3 a5 a8 1b d4 16 b8 c2 b9 f6 cd 5a f8 7e 93 29 e4 15 77 b6 c9 bc 89 4b 3a 19 10 13 a8 66 bd d0 28 35 28 cf 2f c3 4a 51 b5 2e 39 b1 dd d7 c5 1a 73 ed db f9 7d 3d 65 d5 40 24 d0 5a 2d b4 91 c6 24 69 27 8d d4 ba d7 52 b6 9a 05 54 60 ba 52 ba 99 4f e2 fe 5c 69 56 db 4e 16 8f 84 cc f7 f8 4a 4e 59 5e c5 b5 5d cf 63 14 57 12 2c 93 a1 05 4a ae a2 17 e6 52 a6 a4 7f fc d6 3a 5b f0 91 8d 7a 95 Data Ascii: OczkJ%z(Ht#P\[-iX.KUdI;rZQP-6nQNvRp%+rtk"$UZ~)wK:f(5(/JQ.9s}=e@$Z-$i'RT`RO\iVNJNY^]cW,JR:[z
2022-03-15 16:08:34 UTC	11354	IN	Data Raw: 04 dc e9 b8 ca f3 dc ac 22 de 39 34 b4 45 a3 d6 da a4 5d 40 ad 41 fd 2d 0a 57 c6 bc 71 ec f5 19 76 f0 e5 a6 9d b6 0e 06 cd ed 9c f1 ee 32 58 3b db c6 64 43 20 90 80 12 30 f9 64 2b a8 3a d0 29 55 e7 4e 38 33 64 6d 24 9e d8 6a de ce c6 6d b9 a5 06 7b 25 9c 36 96 e9 6f 27 d4 db c1 db 8e 59 0a 50 d0 1c cc 6a a5 9b 51 23 4a b1 5f 86 12 c5 48 dd 1c 75 7e 9f b4 6a ba 6a 1c f6 b0 cf 79 1b 99 e3 8e 52 7f 4a 36 42 33 26 ac 9d 24 a9 63 f1 f9 78 69 18 c3 1e 7a dd bd 8e 38 72 34 57 19 e3 b5 b7 bf 55 8a de 29 44 b7 15 bb 75 62 a2 9e 93 a7 30 13 3e 03 2e 9d 58 f5 ad 6c 76 b6 eb fa 8d 95 93 42 dd b7 94 5b c7 92 da dd 21 b6 32 0a 88 db 55 45 6a c7 e6 20 10 7a 4e 91 e5 8f 2b af ba cb 2a ba 57 b0 e7 c9 76 53 b2 ec f0 4a b7 37 bb 4a e8 84 29 0b 0b 80 50 b1 ea 32 3b 50 1d 5a Data Ascii: "94E]@A-Wqv2X;dC 0d+:)UN83dm$jm{%6o'YPjQ#J_Hu~jjyRJ6B3&$cxiz8r4WU)Dub0>.XlvB[!2UEj zN+*WvSJ7J)P2;PZ
2022-03-15 16:08:34 UTC	11362	IN	Data Raw: c1 7f b7 b6 1d e7 6d 67 fa a9 c5 a0 9a 85 21 29 52 e0 1a eb 65 1f 28 e5 d4 9a 72 fb 79 3a 9e a3 1d d7 85 6f db c6 d3 f0 cf cb 5e ff 00 65 a4 4e 11 d9 ec 13 ee db e6 dd 71 0d b4 2f 11 8e ef 41 1e ad 07 83 e9 cc b6 86 27 86 bd 03 56 ad 54 c7 35 ba 7c 6e 21 2b 5a 13 fe 57 f0 fb 8b 71 10 59 ed bf 64 bd e6 dd 79 65 0c f2 43 b8 c1 28 7a 2b 12 1a 37 14 78 d9 94 3d 18 71 59 07 4a ab 7c b8 f5 d5 53 95 f3 6d f5 d7 dc 60 d2 06 96 e5 ee 2f ac d7 72 20 fd 3f 48 68 ce 9a a0 ad 18 90 19 98 29 d6 9d 3c 5d b5 65 8f 22 8b 62 7b 75 db cb fe 21 0b 89 9d bc 4d b5 6c 11 31 b0 9a 5b 64 53 23 3c 73 11 22 02 5b 52 46 83 d4 9a 49 cd db 53 53 f1 72 d6 3c f6 bc 3e 2e ef 4f 11 85 ab 27 3f 75 ba 6e 1e e0 9e 2b dd d4 32 08 23 22 35 8d 0b 54 0c c0 23 2d 02 95 23 ff 00 69 c6 b4 c7 4c 09 Data Ascii: mg!)Re(ry:o^eNq/A'VT5\|n!+ZWqYdyeC(z+7x=qYJ\|Sm`/r ?Hh)<]e"b{u!Ml1[dS#<s"[RFISSr<>.O'?un+2#"5T#-#iL
2022-03-15 16:08:34 UTC	11378	IN	Data Raw: 2f 6e d6 19 23 46 12 48 a6 bd ba 96 e3 ad c9 a7 24 55 a8 c6 f8 b0 a9 75 5a c7 a7 f1 32 59 5d b4 48 c5 bc bf 6d b6 31 b9 6e 32 76 9d db 54 31 a9 14 7a 66 a8 47 3d 24 d7 f2 e3 b3 1e 3d ef 65 14 c7 c5 6f a7 b6 de d3 7c 77 9d 0d 6f 6b 7b c1 7d ca a7 69 92 de d8 f7 eb 6f 23 3a 1e ea b0 cd 1d 1a bf 37 3c 85 78 f2 c6 f9 ab fd a5 2d a4 ca 56 dd f7 fa a0 ee aa 95 04 b7 d9 a3 f6 c5 ec 5b 7f 69 67 77 41 3a cb a9 56 29 96 a1 5c 55 41 2c ca 4e 86 47 3f 1c 2a e0 b5 56 f9 f0 c6 9c f6 ee 53 ee 25 78 5f 69 87 ee d9 cd e6 f1 60 65 ed c4 8b e8 28 4d 34 a8 14 62 0e 6b 4c 2e 95 6d c7 78 9b 37 c7 db c8 76 d5 9d b4 db b5 ae db b3 49 6f 6c d1 4b b8 cf ad da 5c b2 56 35 65 71 c7 ae bd 2b cb 1c f5 4a a9 2f bb 95 62 20 2c d5 54 19 bb 2d 8e f5 6f 61 df dc 9d 9a d4 49 dd 53 5d 52 30 Data Ascii: /n#FH$UuZ2Y]Hm1n2vT1zfG=$=eo\|wok{}io#:7<x-V[igwA:V)\UA,NG?*VS%x_i`e(M4bkL.mx7vIolK\V5eq+J/b ,T-oaIS]R0
2022-03-15 16:08:34 UTC	11394	IN	Data Raw: bf f1 31 b5 90 24 d7 65 d8 de a9 ed 5d b9 8c 73 67 d1 21 a2 86 ce 81 7f 93 56 a5 ab 74 e5 8d 96 35 b6 1b 95 ae 9f 2c d7 8b fe 3c c9 64 36 a1 7a 60 d5 71 2c 50 42 b5 58 dc 05 1d 20 7a ca aa b1 72 f9 fa b4 f1 cb 15 92 b5 6f 4f 6a 73 fd 3e c3 35 56 b8 86 a3 dd 6e 37 e4 c6 51 ec d6 32 25 45 2a 3b 4e d9 ab b3 30 d4 1b 47 cb a8 2d 78 63 93 c3 8e 9a ca b4 f8 78 f8 d7 66 9f 98 a4 8d ab 8d ba 38 b4 f6 e5 5b 8e c4 7e 86 24 2a 93 cd 5a 9f a8 72 a1 f5 7f 1c 72 e2 b3 bc b6 b6 fb a6 cb d5 c8 da ca 0c 99 2f b6 fd c0 36 dd 0d d0 82 55 53 1c aa 18 ea 15 a9 72 8c a4 15 a6 67 46 3b fc b7 58 bc 37 31 c5 69 ff 00 a9 2c 05 f7 fb 67 8e 27 bf 33 c6 8e 19 19 b4 e8 a5 2a ab 93 69 d5 ad 74 ea 00 aa ab 7a b1 75 e9 5c f8 63 b7 ea fb bb 08 a2 97 27 43 6b bb 6d d6 51 88 6d 22 8f ea 94 Data Ascii: 1$e]sg!Vt5,<d6z`q,PBX zroOjs>5Vn7Q2%E;N0G-xcxf8[~$Zrr/6USrgF;X71i,g'3*itzu\c'CkmQm"
2022-03-15 16:08:34 UTC	11402	IN	Data Raw: b6 b0 c5 64 00 3f 6a 26 5a d5 72 12 a9 6f 4e 9d 21 11 35 9c 9a 98 fa 6a 75 bf dc 51 2d aa b6 aa 7c 39 3b 2e 3e bd 75 36 a5 24 f4 7f 6f ed 03 6f b2 2d 6d 24 32 07 8d 44 8c a1 9f ad da b5 56 6a 2b 30 a9 d3 97 6d 5a b5 6a d3 1f 2f 9e e9 dd 2b 4e ef 97 d3 d1 97 b1 27 26 ec fa 7d b9 6b 75 7b b6 49 1c 53 a4 41 57 5e 60 b3 93 55 53 d4 81 ba cf 55 79 9c fa ab 8f 6f a4 71 76 df f2 9d 98 e3 9f b0 c1 8b 61 f7 26 ff 00 14 1b 85 e5 c5 b4 6b a4 1a 5b 28 52 aa 07 0d 2c 15 4b 54 36 b7 d7 5c 8d 0f 56 37 ea e9 5b eb 54 9f 2f 17 de 3c 89 47 03 66 da df 6b 9a d3 56 e3 66 1a 6e d9 ff 00 be c8 4a 8a e4 03 a5 bd 71 fe 5e a6 cb 1e 2b ce e9 8e 29 54 e5 f0 e5 b5 7e 53 9d 38 5c 02 26 46 99 85 a8 d7 25 b6 a2 35 33 53 b6 10 d0 46 5c 7a d9 f9 fa 8f e2 c8 d3 02 e9 69 5b 6e ae 8a dc 51 Data Ascii: d?j&ZroN!5juQ-\|9;.>u6$oo-m$2DVj+0mZj/+N'&}ku{ISAW^`USUyoqva&k[(R,KT6\V7[T/<GfkVfnJq^+)T~S8\&F%53SF\zi[nQ
2022-03-15 16:08:34 UTC	11418	IN	Data Raw: eb cd 4e 58 3a 9c b6 54 dc d6 bf 12 95 dc 17 53 c4 e2 f7 ed ef fa 4d eb 5d 58 29 16 69 18 8a 35 2f 4a fa 75 09 85 58 b6 ba a7 3f 8e 3c ee 9b 0b c9 4d b6 7e 27 ad b4 f5 c6 cf d3 a9 9a ec 23 ed eb bb 3d da d2 f3 51 b6 8e d5 dc c5 29 59 34 96 ea 03 f4 3b 86 af 4f 58 f4 ab 28 2b 8e cb 63 78 ec a6 74 ae ef 12 96 bd 7b 79 f6 95 5a c7 13 a4 9e e3 6f d9 a2 68 61 2c 50 88 bb b3 37 49 53 19 32 66 cd d2 a5 89 0c ca 3c b1 e5 56 f7 ba 69 73 f7 db 97 87 99 ab 75 ae 88 ab 7b be 5b ab 43 24 aa b2 4b 2a 95 82 67 e8 8b 48 53 52 cc c0 72 cf 4f a7 ef c6 38 31 aa b8 53 a3 f1 55 6b 6f 77 e2 45 9d 5b 39 6f 6d 8d aa c3 71 16 c2 56 be 79 4b a6 bb 56 a3 29 75 a8 ee ea aa 34 71 bf 9e af 97 85 31 ee e5 dd 7a 4d ab b2 16 8a dd dc 36 f3 d7 9f de 62 b1 e8 68 6e 3b f5 8e c7 6b 6b 6d 24 Data Ascii: NX:TSM]X)i5/JuX?<M~'#=Q)Y4;OX(+cxt{yZoha,P7IS2f<Visu{[C$K*gHSRrO81SUkowE[9omqVyKV)u4q1zM6bhn;kkm$
2022-03-15 16:08:34 UTC	11434	IN	Data Raw: ca f6 7b 8c d1 cb 1a 99 67 1d c6 01 c1 ed fc ca 68 fc 83 31 ea d5 f8 7c 7b ef 4f ee 35 a2 75 d2 38 78 74 73 ea ee ee 39 f1 e8 cd 0d c1 67 db ec e3 8e 20 e9 6f 2a 88 a3 91 18 82 c6 43 c2 a7 82 9a b5 2a 3a 51 79 b6 58 e2 c7 65 6b 37 f3 2d 6c 9f e5 f4 f6 b3 4b 27 32 50 67 9b 61 74 92 da 16 4b a6 b5 53 24 45 b2 1d ba 90 a6 ba 46 85 46 55 5d 45 5b 87 e6 c7 45 2c db d5 f8 77 71 ed 57 f5 73 6f c4 16 70 46 c6 3b ab 9b 34 dc 6f 61 2b d2 22 8d 8b ab a2 d1 49 77 d3 e9 62 58 69 cb 8f ca b8 57 a2 4d aa 3d 26 5e 9b 6d dc 84 90 5e db 73 27 6d 5b 6f 98 4e 5e dd 9d 9e 45 03 b5 56 d2 a5 43 53 5b 30 20 ac 65 75 1e 5c b0 b2 74 ea cb 5d 1a 7a d5 3f a7 bf f1 46 f5 d3 81 bf fd 3b 6f 5b 97 b8 9e 57 84 4e 85 43 22 52 42 ec a5 14 aa 93 a5 68 c7 d5 f2 fa 72 c7 9f 81 b6 d5 2f c1 7f Data Ascii: {gh1\|{O5u8xts9g oC:QyXek7-lK'2PgatKS$EFFU]E[E,wqWsopF;4oa+"IwbXiWM=&^m^s'm[oN^EVCS[0 eu\t]z?F;o[WNC"RBhr/
2022-03-15 16:08:34 UTC	11442	IN	Data Raw: e8 fb 34 e7 c0 e3 6a e0 ad 2d e1 6a da fa fe d2 5a 01 dc 26 8a 78 e0 86 2b a9 8c 51 00 59 e4 20 d1 5e ba 54 a9 ee 6b 00 7a 59 d8 e3 a2 95 db 66 e1 6b d8 a3 87 c5 1c 20 4d 49 9d b6 a3 5c 6e 0f 61 b8 23 5c b4 64 38 49 05 64 60 7a 7b 6a a8 0a 74 af 50 cf f3 2e 58 ea cb 5f 0c e2 f0 ce 9a 7f 56 e7 f3 6b cc c9 d5 a7 06 d4 d2 da c5 65 6e 20 8f b5 64 f3 76 aa 8a 55 57 5a ea ac 99 e4 50 73 ff 00 af 1c 0a ae d6 73 ad d2 dd c7 c4 f5 f9 4d a0 d3 b1 5b 3b 29 5a 69 26 49 e5 6a c7 18 9f 52 2b 10 57 4b 17 61 48 c4 83 e6 d3 9f cb 96 39 ae 9d d4 7c 3c ed b6 2d 1e ef 8a 01 e8 09 79 b4 ed 3e e0 73 7d 75 6f da bc 79 09 65 8e 4d 20 9f 45 5c 96 ad 01 e5 40 c7 57 9e 34 ae 6c 98 7c 35 7e 08 d2 54 fb bd 39 11 06 ac b7 51 7e 92 db 5a 49 2b aa b0 4d 4a ab 2b 20 20 1e 82 69 a7 3e 85 Data Ascii: 4j-jZ&x+QY ^TkzYfk MI\na#\d8Id`z{jtP.X_Vken dvUWZPssM[;)Zi&IjR+WKaH9\|<-y>s}uoyeM E\@W4l\|5~T9Q~ZI+MJ+ i>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.3	49957	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:33 UTC	8741	OUT	GET /cms/api/am/imageFileData/RE4xocM?ver=8a5d HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:33 UTC	8741	IN	HTTP/1.1 200 OK Last-Modified: Sun, 13 Mar 2022 01:44:17 GMT Access-Control-Allow-Origin: * X-Datacenter: northeu X-ActivityId: 47a213a8-649e-4df0-bd6d-67b35f878503 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4xocM?ver=8a5d X-Source-Length: 460321 Content-Length: 460321 Cache-Control: public, max-age=207316 Expires: Fri, 18 Mar 2022 01:43:49 GMT Date: Tue, 15 Mar 2022 16:08:33 GMT Connection: close
2022-03-15 16:08:33 UTC	8741	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 07 80 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-03-15 16:08:33 UTC	8757	IN	Data Raw: 56 4d d6 9f 1b a9 04 0c 57 5d 3a c8 e6 a9 46 e7 15 77 a3 c7 37 23 e4 3d 88 ac 89 fc 39 2f 20 38 cf bf 7a ee 3e ca b1 36 08 c8 f5 a6 49 62 36 e4 7e 55 df 1c 43 89 c7 2c 3a 67 9b be 88 f0 b1 1d 08 eb 4c 64 68 db 07 ad 77 97 5a 72 b2 92 07 5e 95 ce ea 5a 53 75 51 5d b0 c4 73 6e 71 4f 0f cb b1 88 d8 3d 6a 35 2a 9d ff 00 1a 9e 5b 79 15 48 28 41 1d 6a 93 48 a3 2a 53 07 eb 5d 91 f7 8e 39 68 5e 82 e0 c6 d9 06 b5 6c ef 97 a1 fd 6b 9b 89 f6 36 09 e0 d5 f8 d9 0e 31 cf a5 45 48 22 a1 36 8e 97 ce 8d 94 74 a8 e4 d3 e2 b9 e4 a7 cd ea 2b 11 27 78 f8 df f9 d6 ee 9d 76 25 40 0f 5c 66 b9 25 17 0d 51 d9 19 a9 3b 33 1b 53 d0 c9 4c 81 9c 7a f7 ae 1f 53 d3 9a d6 e7 76 cc 0f d2 bd 62 e1 c4 8b 82 2b 03 56 d3 62 b8 4e 83 e6 eb 5d 78 7c 43 8b b4 8e 3c 4e 1e 33 57 47 9e 79 ef 6f 20 Data Ascii: VMW]:Fw7#=9/ 8z>6Ib6~UC,:gLdhwZr^ZSuQ]snqO=j5[yH(AjHS]9h^lk61EH"6t+'xv%@\f%Q;3SLzSvb+VbN]x\|C<N3WGyo
2022-03-15 16:08:33 UTC	8773	IN	Data Raw: a1 e4 56 13 a4 cd a1 54 ea 61 98 b7 27 8a b2 b2 82 c3 bd 72 f0 ea a4 b8 04 f5 ab d1 5c ee e4 13 8a e3 95 27 d4 ec 8d 54 74 09 28 6e 3b 54 a9 20 3f c5 9f 4a c6 82 e0 b7 53 83 57 63 73 d6 b9 65 4e c7 4c 66 5e f3 29 44 99 e6 aa 89 4b 53 d6 5d df 4a cb 94 d7 98 b1 9e 98 a7 67 35 00 6c 74 e9 46 ea 5c a5 5c 97 3b 7b 51 51 6e ff 00 6a 8a 56 1d cc 39 ec 45 c3 15 91 32 3f 5a a4 ba 33 c1 21 31 39 20 76 af 53 6f 0c aa e0 80 0f 35 62 3d 02 35 e0 c6 a4 7d 39 ad fe bc a2 b4 39 1e 13 9b 73 cb e2 ba 68 b0 1e 26 c6 7a e2 af 33 3b 2e e4 fb b5 e9 0b e1 eb 60 98 31 82 a7 b1 15 5d fc 39 6e 3a 47 81 ed 51 f5 c8 3e 85 7d 56 49 6e 71 16 92 4b b7 06 af 43 76 63 6c 0c f1 d6 ba 65 f0 e5 b8 c9 c6 09 aa 97 5a 1c 7b be 41 b0 8e 86 a7 db c2 4e c5 2a 52 8f 52 ac 77 a1 97 1d e9 e6 f0 6d Data Ascii: VTa'r\'Tt(n;T ?JSWcseNLf^)DKS]Jg5ltF\\;{QQnjV9E2?Z3!19 vSo5b=5}99sh&z3;.`1]9n:GQ>}VInqKCvcleZ{AN*RRwm
2022-03-15 16:08:33 UTC	8775	IN	Data Raw: 5f 20 e0 9c 02 2a 63 88 6d 59 8e 54 23 7b a3 98 fe c8 94 36 f5 5c 9f e9 44 2d 35 a4 c5 9e 32 13 a1 ae a8 d9 34 2c 19 c1 65 f5 02 a5 9b 4b 86 f5 06 4e 33 dd 7b fd 6a be b0 ba ec 2f 60 f7 47 31 35 c2 4c a7 19 e4 7e 55 8b 71 65 2e f2 e4 e1 2b d0 13 c2 d1 2c 79 7f 9d 49 ea 38 a9 3f b1 62 28 53 62 ed f4 ec 29 c7 13 08 ec 29 61 e5 2d cf 3f b3 b6 0d 80 ee 08 f4 35 7a d7 4f 48 66 0f e9 5d 04 de 16 8a 29 37 c6 b8 3e 9d aa b5 c6 9e d0 2e 40 3e f5 af b7 53 d8 cf d8 ca 3a b4 46 7c ae 98 eb eb 56 21 1f 2f 1f 4a ad 1c 4e af 9c 71 53 0d db c0 0d 8a c6 5b 1a a2 e2 48 16 32 b8 ac d9 b5 02 ae e8 3b 74 ad 01 18 55 c9 35 9f 7b 04 43 2e 46 3b e6 a6 9a 57 d4 73 6e da 14 af 2f 37 5b 17 24 8c 7e 95 c0 f8 87 51 b9 8e e3 cc 2d c7 f7 ba 82 2b a8 d5 6f 98 46 e8 98 74 23 ee 83 5e 79 Data Ascii: _ *cmYT#{6\D-524,eKN3{j/`G15L~Uqe.+,yI8?b(Sb))a-?5zOHf])7>.@>S:F\|V!/JNqS[H2;tU5{C.F;Wsn/7[$~Q-+oFt#^y
2022-03-15 16:08:33 UTC	8791	IN	Data Raw: e0 99 a2 91 b7 fd a8 a8 d9 1f 7a af 58 ea 47 70 39 e0 d7 30 58 9f a9 ad 3b 28 64 75 03 ee e6 b3 94 55 8a 52 67 54 b7 f1 95 fb e0 54 32 5e 1d bf 2b d6 5c 36 a5 5b 27 91 56 d5 70 b9 03 8a e6 69 23 65 76 4c b7 85 b8 6f 98 54 12 3a 37 1f 9d 2b 42 4f 38 e2 99 e5 0d bc f3 46 83 21 60 1d b0 3e 53 56 a3 88 2a e0 75 a6 24 41 7a 9f a5 4c 33 c7 a5 3b 8a c4 72 12 bc 93 4c 0f bb 8e 29 d3 8d eb c5 46 20 3d 31 cd 35 b6 a1 a8 ff 00 2d 4f 5e 2a 0b ab 35 91 09 07 9f 5a b3 1b 1d bc f6 a7 32 6f e0 d3 4c 4d 1c e4 96 db 24 c1 39 a5 6b 7c 2f 3c 56 cc 96 23 af 7a 85 ad 3a 7a 56 ca 46 7c a6 36 d2 9c 8a 58 ee 0a f1 9c 1a bb 71 69 b3 91 d0 f6 aa 5e 59 0c 46 3a 56 89 a6 45 ac 5f b7 ba 3b 70 7b 9e b5 a3 19 1b 73 f7 b3 5c fa b9 8d b8 e2 b4 60 ba 3c 63 af a5 67 28 df 62 94 8d 54 97 2b Data Ascii: zXGp90X;(duURgTT2^+\6['Vpi#evLoT:7+BO8F!`>SVu$AzL3;rL)F =15-O^5Z2oLM$9k\|/<V#z:zVF\|6Xqi^YF:VE_;p{s\`<cg(bT+
2022-03-15 16:08:33 UTC	8807	IN	Data Raw: 65 7c bc 0d c4 ae 00 07 b9 27 f9 55 9b db 54 b0 b7 fb 4b 4a 27 b4 85 f9 86 16 1f be 73 d0 12 38 fc 3b 56 55 31 0e 2f 96 fa 9b 46 2e 4f 42 5d 17 c2 f6 28 9f 68 f2 cc b2 67 89 4f dd 24 77 03 d2 b5 ae 60 75 f2 de 59 40 44 23 80 a7 15 16 99 77 35 c5 b0 76 41 19 0b 95 db f7 50 1e 83 de b3 f5 1d 4a 68 59 d2 27 f3 5b 2a 03 13 c2 0e a7 1e bf 5a f1 5f b4 ab 51 dd 9d 51 83 b9 63 50 bb 8e 15 13 dd ce 09 19 11 2e 09 e9 c8 f9 68 ae 6e 66 9e fe e5 14 ed 78 95 c0 92 53 9e 09 e4 e3 14 57 4a a3 08 ab 33 a7 96 27 e8 d8 5f 5e 71 40 8c 9f a5 5c 09 ba 9d e5 63 3c 57 d5 f3 1e 47 29 4f 67 a0 c7 d2 97 6e 57 35 6c c2 3e 94 18 80 a5 cc 3e 52 a6 c3 b7 da 9d e5 e3 ad 59 d9 85 f4 07 d6 9a c8 78 3d a9 6e 3e 52 12 98 eb da 85 c7 a5 2b 67 75 37 de 8b 80 6d 03 1e 94 84 76 a7 67 1c 77 a3 Data Ascii: e\|'UTKJ's8;VU1/F.OB](hgO$w`uY@D#w5vAPJhY'[*Z_QQcP.hnfxSWJ3'_^q@\c<WG)OgnW5l>>RYx=n>R+gu7mvgw
2022-03-15 16:08:33 UTC	8815	IN	Data Raw: b6 39 e5 68 ab b3 e6 1f da e7 e2 da fc 56 f1 b4 7a 56 9c 9e 5e 9b a3 96 b6 48 cb 2b 87 93 38 67 2c 32 0a f1 c6 3b 64 d7 cb 1e 23 bd 96 ca f9 ec c3 99 2d d7 6f 9f b4 e3 cd 3d 42 0f 61 5d 3d ee a6 b6 93 48 41 92 49 5d b6 a0 8f 83 83 eb 9e 83 de b8 2b cd 3e 6d 4e fe 79 e5 2c e8 58 84 db c9 24 1c 0e 3b 0a f5 e8 c5 7d ad 8f 0e 57 93 e6 2b ea 3a df db 12 28 95 36 38 7c e1 4f 01 07 6f 7a bd 2c a3 4e b3 8a 51 18 92 ea 5e 01 56 e7 9e 4e 7d 2a 8c 96 b6 9a 5b e4 47 b2 61 9f 98 b6 48 fc 7a 66 ab 5c 48 d3 a2 48 37 94 41 f7 ba 6e 07 b9 ad a5 67 6e 5d 81 27 d4 96 fd 66 17 11 ce f6 e2 01 22 e3 19 ef eb 8e d5 1a da dc 6a 13 45 15 b8 3b c2 92 7b 2a 8e b9 c9 a9 04 11 c8 a1 a7 90 99 9c 65 47 5c 03 d0 9c d6 ad 89 89 a3 7f 34 1f b3 a0 0a a2 2c ee 63 dc 93 e8 2b 27 3e 54 35 23 Data Ascii: 9hVzV^H+8g,2;d#-o=Ba]=HAI]+>mNy,X$;}W+:(68\|Ooz,NQ^VN}[GaHzf\HH7Angn]'f"jE;{eG\4,c+'>T5#
2022-03-15 16:08:33 UTC	8831	IN	Data Raw: 71 7d 4f 12 4e a5 27 cb 24 d5 8f 68 d3 35 c8 35 08 7e cf 7e 06 78 e7 a1 15 25 ce 82 19 8b d9 4f bc 76 59 0f f2 35 c3 58 ea 5e 56 9a 65 49 16 e1 d0 fd ec 10 72 7a 0a ea b4 ad 4e 46 b7 8b e6 50 49 ec 4f 7a cf 0f 98 62 b2 f6 dd 29 7b bd 9e a8 e8 70 a5 8a b7 3a d7 b9 5a 69 27 b0 7d 93 c6 d1 13 d3 3d fe 87 bd 0b a9 96 fe 3c 0f 5a ed 2c ae 20 d7 2d cd 95 fd ba c9 1b 71 e6 28 c1 5c 74 3e df 51 5c 5f 8c 3c 17 a9 78 69 4d c4 19 bd d3 c7 3e 6c 63 94 1f ed 0f 6f 51 5f 6f 95 f1 06 1f 1e d5 1a d6 85 4f c1 fa 7f 91 e4 e2 b0 15 68 2e 78 7b d1 26 8e ff 00 6f 7a b0 ba 90 1c e4 e0 fe 75 c2 c3 ae 1d 9c 3f 1d aa cc 3a d1 3c 9f 5a fa ff 00 65 73 c8 f6 96 3b 75 d4 7d 0b 67 d2 9e b7 ff 00 37 df 3f 4a e3 93 56 e9 83 f8 e6 ac a6 aa 0f f1 d4 fb 12 fd a1 d6 2d f6 78 cd 48 2f 70 d9 Data Ascii: q}ON'$h55~~x%OvY5X^VeIrzNFPIOzb){p:Zi'}=<Z, -q(\t>Q\_<xiM>lcoQ_oOh.x{&ozu?:<Zes;u}g7?JV-xH/p
2022-03-15 16:08:33 UTC	8847	IN	Data Raw: f3 d4 56 b5 bd b4 fa 3c 26 77 47 9c 13 d2 df 6c 9b 4f 4c 1c f3 5b 32 6a 66 f7 06 38 e2 9e 34 19 27 bf d0 f7 35 0c 7a ca 40 a4 c6 f1 45 22 0c 95 5c 02 79 f5 35 93 a9 39 ab 34 52 69 ad 4c bb 0b 19 b5 3b 99 23 96 36 48 58 7d e3 18 52 57 ff 00 ad 55 ed fc 27 79 0b c9 9b c8 d6 dd b2 30 18 b1 c0 3d 6b b5 b6 d4 e1 bc 40 b7 68 a6 3c 02 d8 94 63 3e d8 e9 f4 ad 1f 23 4e 99 63 ba 4b 78 e5 91 46 17 12 9e dd b0 06 0f f5 ac 7d bc a0 f6 2e 2a 37 b9 c1 c5 e1 e6 76 88 d9 26 2d cf 0f 22 9c b1 c7 d6 9b 73 a2 bd 83 8c 89 51 d7 90 64 e1 76 ff 00 8f bd 77 f7 33 5b c3 6f 24 0d 69 66 9e 6b 06 27 cc fd e0 38 e8 a7 a8 a8 8d ee 9f 05 bb 1b db 68 dd 10 f1 08 2c 5f 1e e0 75 1e f4 be b1 2f 50 f7 3a 3d 0e 01 ee e7 69 0e 0a ca 55 7f 84 ee 3c 77 ad 1d 16 5b c9 10 ca 96 6d 75 1b 75 32 12 Data Ascii: V<&wGlOL[2jf84'5z@E"\y594RiL;#6HX}RWU'y0=k@h<c>#NcKxF}.*7v&-"sQdvw3[o$ifk'8h,_u/P:=iU<w[muu2
2022-03-15 16:08:33 UTC	8855	IN	Data Raw: eb d5 7d bf 5a b3 77 e4 5b a7 9e b8 f3 5d b8 2c 39 07 a7 1e d4 b6 56 76 e6 d4 31 f2 d5 99 b3 f6 9e ac dc f0 a3 d3 f9 55 f3 69 76 2b 77 21 9f 52 96 75 26 4b 39 24 41 f2 99 57 aa 9f 5a ab a6 c1 14 d7 25 a7 45 91 c2 e7 2d c8 1e 99 51 d4 fd 2a d6 a6 f2 da a9 30 30 74 0b 85 52 c0 7d 73 59 d6 1a 75 ec ab 71 10 fd da 65 4b 0e 87 18 ce 41 38 e0 76 c5 54 6d cb d8 bb 76 35 f4 eb b1 67 85 49 55 f0 dd 64 07 bf b7 b5 0b a9 c9 77 34 b2 bf 98 24 da cb 1b 2a e1 48 1f e7 35 9f fd 92 9a 6b 24 d1 cb 23 8c fe f4 10 09 24 f4 3e d5 a3 2d c8 99 51 23 0d 70 50 ef c0 e7 8f 7c 56 32 e5 bd d1 71 8a b9 93 3a bb 4d 9b 9c 99 1b 07 91 c9 03 b8 1d 31 54 a4 86 6f 31 8a 23 07 23 e5 3c 30 20 7f 4a e9 d6 4b 6b 75 49 0a 10 d9 c8 dc 03 63 3f d0 53 24 bf 86 47 c6 40 0f 90 00 8c 2e 3d 81 1e b5 Data Ascii: }Zw[],9Vv1Uiv+w!Ru&K9$AWZ%E-Q00tR}sYuqeKA8vTmv5gIUdw4$H5k$#$>-Q#pP\|V2q:M1To1##<0 JKkuIc?S$G@.=
2022-03-15 16:08:33 UTC	8871	IN	Data Raw: 4d 2c 11 b9 48 a5 da 4e ef 5d c3 d0 fe 95 e7 52 a4 e5 6b 3d cb b3 6a e8 dc f1 67 c3 69 3c 41 7f 3d d5 af 88 fe df 72 c1 44 71 49 3a 97 43 8c 9e 71 87 53 eb c1 15 ca 78 7f 43 bd b7 78 e7 bb 79 92 dc 4b e4 c8 24 23 39 07 e6 2a 0f 55 a4 d2 75 89 6d 98 2c 4e 2c e7 8c 15 11 c5 2e d2 41 f5 cf 7f 4a ad 61 60 fa 8c 72 45 15 c4 93 ca ec cd 86 ca ba b7 53 b4 e7 19 af 42 31 9c 62 e3 29 68 24 9a dd 9d c4 96 70 df c7 2d ae 9b 71 0d a8 fb c1 98 02 a3 07 23 6e 3b 91 d7 f9 55 f6 5b cb 1d 36 5f b6 ce d0 48 ca b1 2c d0 af 50 79 07 1d 00 fa d7 37 e0 db 44 8f 52 09 a8 e0 cb 12 2b c6 d3 36 d0 0e 78 03 1f c4 7b 9a dd d5 f4 7b ad 36 e0 df 40 7e d3 6c c4 b3 da e1 f0 80 8f ba 49 fb c0 f3 83 9c d6 0e 0b 9b 92 e6 6d eb 61 7c 3f 22 c9 6b e4 c3 1d c4 85 4f 96 d2 c8 15 43 1e 79 18 c7 Data Ascii: M,HN]Rk=jgi<A=rDqI:CqSxCxyK$#9*Uum,N,.AJa`rESB1b)h$p-q#n;U[6_H,Py7DR+6x{{6@~lIma\|?"kOCy
2022-03-15 16:08:33 UTC	8887	IN	Data Raw: 95 15 8f 99 78 97 24 a0 07 ae e5 1c 9f ae 38 af 34 b0 f8 db a3 e9 56 d1 43 2d b5 c5 eb 42 a1 50 c8 7c dd f8 18 f9 89 fe 62 b5 b4 7f 89 d6 da cd c3 43 06 a1 fd 85 0d c1 c1 6b 85 60 51 5b 8f 94 8e 18 67 a0 26 be 5f d9 d6 83 bb 3f 41 e7 84 8d 2d 4b e0 ce 89 36 8e 6e 22 d3 2e ac a7 8c 6c 96 ff 00 4b 94 3a 86 ed 95 6f bc 0f ad 73 53 fe cd ba c4 b1 fd b2 db 50 b8 b9 50 03 81 1c 47 3e fb 86 40 cf d3 35 d8 ea 3a 7d 9f 80 b4 f8 ef b4 ed 7e 6d 5c b3 ed b9 58 41 f3 73 d4 12 99 c8 53 dc 8a d7 f0 df c6 df 12 78 86 fb ec 72 f8 2e 48 a2 b7 0a ab 27 fb 07 a3 92 47 4f a7 34 e3 3a 8d 37 09 19 54 82 b7 bc 78 be a1 f0 6b c6 da 35 cc a0 68 d7 57 b1 44 41 f3 ad 94 34 6c b8 ce 06 3b fa 82 33 5c ed d6 9a 64 d5 22 4b 9b 49 60 98 0c 3a dc 82 8e bc 74 00 e0 9f c2 be af 6d 43 c6 17 Data Ascii: x$84VC-BP\|bCk`Q[g&_?A-K6n".lK:osSPPG>@5:}~m\XAsSxr.H'GO4:7Txk5hWDA4l;3\d"KI`:tmC
2022-03-15 16:08:33 UTC	8895	IN	Data Raw: df 25 ec 77 47 19 55 2f 72 5a 9e 93 67 e2 27 6b 07 91 2e 16 ce e6 00 c9 0c b0 28 69 18 91 92 14 63 1b 7f 1f ca b1 ae bc 49 e2 3d 7b 45 7b 5f ec f9 62 0b 9f 3a 60 36 87 43 ce 5f 24 ed f6 c7 4f 5a e2 f4 eb 89 22 78 fe d3 1c 96 72 fd c2 63 66 05 81 fe 33 9e 30 7d 85 6f 78 87 5a ff 00 47 4d 1a c3 ed 26 18 e1 2f 2d c5 c0 e3 07 e8 7a 0f 5f d2 b3 54 f9 65 ee ab 8a 8e 2a 70 93 bf 53 21 fc 59 a6 da 68 73 db dc 59 ac b2 c5 ca 4b b8 ee 03 3d 0e 30 0a fb d5 ad 1b c3 da 4f 8c 16 2b 84 82 4d 3e e5 31 95 99 40 89 8f 50 5b 23 2d ed 5c 91 b3 b0 ba 41 6f 73 13 49 28 01 e3 92 4e 89 8e 72 a3 ae 7e b5 b3 63 62 6e ff 00 e3 c8 9b 87 8d 43 90 0b b1 e3 b9 c7 a7 b5 76 c9 f2 af 75 d9 9d ef 1f ee d9 4b 52 e4 1a 6c 9e 17 ba bd 56 8e da 54 9d c9 ff 00 44 04 28 61 fc 40 72 07 b8 02 a7 Data Ascii: %wGU/rZg'k.(icI={E{_b:`6C_$OZ"xrcf30}oxZGM&/-z_Te*pS!YhsYK=0O+M>1@P[#-\AosI(Nr~cbnCvuKRlVTD(a@r
2022-03-15 16:08:33 UTC	8911	IN	Data Raw: 50 1a 37 48 94 1c 11 8c 76 00 7f 3a 83 fe 12 0b 88 ac 4d b2 95 16 ee d9 7d c4 80 cd ea 08 fe 55 59 2d 60 d3 f4 d0 f2 ca df 6c 8d 77 dc 45 8e 08 27 85 f6 20 54 57 0f f6 15 72 b6 c2 e2 d9 88 66 53 ce e2 79 c7 d4 0e e2 b7 51 8a d9 12 a3 d1 9b 76 1a c4 d6 4a 16 de e0 d9 4e cb b4 ed c0 62 0f 60 4f 4f c3 9a d4 d0 a4 bb ba d4 bc b4 8c 3c aa a5 b8 6e 84 f3 92 4f 15 cf db 6a 9a 64 36 d3 b4 12 6c b8 91 09 41 2a fd c6 f6 f7 aa d2 eb 9a b6 a1 25 9b b3 c7 71 12 2f 92 41 8c 00 40 e7 04 8c 1c e3 a1 eb 46 af 63 57 52 56 b4 51 e8 37 b6 46 d7 17 04 9b 09 da 4c 83 1c 9c 29 3d c0 1c 9c 9e a3 b5 5e 5b 86 d5 6c ee 45 cd ca dd cb 6f 16 c9 e3 11 ee e3 3f 2e c6 cf 07 dc 57 11 04 a2 6c 49 18 8d 0e 7e 5d db 81 1e c4 e4 fe 75 d6 5a de c5 6f a6 c5 19 b2 5b 3b a2 cc cf 71 18 6d ef d3 Data Ascii: P7Hv:M}UY-`lwE' TWrfSyQvJNb`OO<nOjd6lA*%q/A@FcWRVQ7FL)=^[lEo?.WlI~]uZo[;qm
2022-03-15 16:08:33 UTC	8927	IN	Data Raw: 1b bb 10 d2 82 79 1f e2 2b ab d9 f2 eb 12 a3 be 83 75 2d 2a 78 b5 04 b6 9e 2c 90 5d 7c a3 d0 90 78 f9 8f 04 71 59 da 7e 85 2c 6d 2b 5d 27 d9 da 46 cc 6a dd 06 3d c7 3f 4a b1 ab ea 92 5d 5c f9 99 32 62 46 0a 3b 0c b1 c7 5e 71 57 24 96 e6 e1 0c 0e 0a 6d c1 75 23 1b b0 3b 93 db e9 55 79 24 8b 6f a1 52 2d 37 fb 2e e7 cb 96 75 47 93 84 70 33 81 dc 93 ef 53 29 ba 48 67 6f 30 79 81 08 50 7e 51 c7 e9 9a 8e ef 4b ba 9a d9 25 96 e2 23 e5 64 a8 0b b7 03 1d fd fd 2a a0 9c 4b b2 14 12 4e 66 51 c9 3c 2e 7b 67 d7 35 37 e6 22 4e ca c8 a5 e1 eb b5 b8 bf 77 d5 6e e5 96 3e 14 db ae 7a 9e 06 0f 62 3d e8 a7 47 a6 b6 92 97 11 a5 c6 f6 90 ff 00 ac 89 30 c3 fe 04 68 ad 65 0e 77 74 c8 f6 4e 5a a6 7d 0e 96 a6 2b 9f 36 37 21 30 5c 89 58 92 de d8 1d 3f 3a dd 5d 4f 52 b1 d2 a5 d4 6c Data Ascii: y+u-x,]\|xqY~,m+]'Fj=?J]\2bF;^qW$mu#;Uy$oR-7.uGp3S)Hgo0yP~QK%#dKNfQ<.{g57"Nwn>zb=G0hewtNZ}+67!0\X?:]ORl
2022-03-15 16:08:33 UTC	8934	IN	Data Raw: b0 be 79 14 c8 be 72 c4 3e 76 88 f0 e3 d3 83 9a a4 6c 2e 44 6e bb 03 8c 61 a4 85 b6 82 3d 30 3f c2 81 32 e5 b5 f2 e9 6d 86 19 89 86 01 c7 00 9f 42 7b fb 8a 7d fc 70 6a 08 07 cb 21 29 9d ab d4 03 d3 1e 9f 8d 3e 1d 2d 66 b5 2e 42 c6 14 04 22 4c 92 0f a6 6a d4 5a 74 32 09 21 31 c7 25 c3 90 00 63 b0 29 1d 32 c0 f7 1d 3b 66 98 cc 75 d1 da 18 f6 94 de e8 cb 95 8c 06 6e 47 f2 f5 ab 89 a0 c3 71 31 80 15 8b 38 ff 00 58 40 db fe 15 b1 6e 23 fb 34 61 23 58 a4 88 63 23 0c 71 e9 9e 87 9e 99 a5 4b 68 4c 91 98 a5 13 ac 83 6b 15 19 61 9f ae 3a 1e f5 2c 10 9a 16 9b 74 22 bb 82 7f 2b 50 80 1d b1 ee 6f 32 65 c7 4d b2 1e 31 fe c9 a5 d7 96 f6 f5 cc 4f 71 25 c4 8b 18 f2 5a 72 14 a9 1c 80 7a e4 83 d0 e6 b5 06 83 3d bf fa 44 57 10 98 1c 71 b6 51 bb 20 f4 c7 af bd 41 ab 5b 5d 70 Data Ascii: yr>vl.Dna=0?2mB{}pj!)>-f.B"LjZt2!1%c)2;funGq18X@n#4a#Xc#qKhLka:,t"+Po2eM1Oq%Zrz=DWqQ A[]p
2022-03-15 16:08:33 UTC	8950	IN	Data Raw: 8e 0f f3 af 1c bc d1 b5 09 2f b7 d8 c4 b6 d6 71 ed 45 92 52 50 bb e3 e5 03 bf 1d 69 d7 7e 2b f1 16 97 21 86 60 b1 b4 48 39 f2 c4 81 f3 fe d0 e0 1f a8 15 ec 53 c7 53 71 fd ea d4 f2 aa 60 e5 cd fb a3 d5 35 4f 86 de 1e d7 bc c7 bb d1 2c 2e e7 04 30 9a 48 54 49 9c e7 21 86 0d 60 d8 fc 2f f0 c6 99 a8 4f 3a 78 72 d9 e7 6c 6f 96 68 da 4c ff 00 ba 09 20 0f c2 b9 ed 17 e3 05 f1 9a 08 b5 2b 48 a4 cb 6d 06 dc 34 4f f4 c3 64 16 c7 6c 8a f4 0b 4f 88 fa 55 cb c7 04 06 58 ee 1b 83 0d d2 94 6c 9f d1 bf 03 4f fd 96 a3 bc 52 6c 89 47 11 4d 59 b6 91 1d df 82 b4 4d 43 7c ba 86 87 a6 cf 6a 81 95 8c b0 aa 76 ec 46 31 f9 d7 0c be 19 d2 bc 37 66 4f 83 ce 9f 73 63 11 66 b8 b7 8a 41 2c a9 ce 4f 1b b2 c0 0e 38 e4 56 c7 c4 8d 59 2f f4 d9 60 f3 05 c4 d2 11 1a db c9 c0 07 1c 9c 1e 98 Data Ascii: /qERPi~+!`H9SSq`5O,.0HTI!`/O:xrlohL +Hm4OdlOUXlORlGMYMC\|jvF17fOscfA,O8VY/`
2022-03-15 16:08:33 UTC	8966	IN	Data Raw: b8 ed 7c 3d a1 e9 f2 cb 69 7f a6 39 96 56 2e d0 df 10 49 1f 7b ef 60 93 e9 c5 7a 30 a6 e6 ed 27 64 71 4d a8 ea b7 3d 1e e3 c2 ba 35 bb 97 b9 d4 6d e0 12 65 80 8a 40 ca 07 a8 00 e7 f2 ab 7a 4e b1 e0 fd 12 e3 0d aa 43 2c 9b b1 1b 4b 39 c6 47 70 9d 4e 4f a8 ae 6f 43 d0 34 e6 4f b6 99 cc 8d 27 2b 74 66 07 82 3b 1e 84 57 3d ac fc 19 f0 7f 88 75 b1 ab 6a 92 6a a2 f6 2f bf 7d 67 a8 6d f3 71 d0 85 00 85 23 db 15 d3 2c 2f b0 f7 ee 73 aa ce b7 ba 7b 3c de 36 d1 6e ad dd de c6 1d 43 68 c9 fb 3d bb 36 3d 37 10 32 05 72 52 7c 51 f0 8e 9d aa a4 7f d9 db e6 ca b4 7a 78 5d de 6a e7 1b 91 77 65 9b 3c 90 7a 01 59 fe 10 b3 d2 3c 2f 6f f6 6d 33 5d bf 8a 08 d8 ec 5b c9 04 b2 cc 1b ef 31 7e 06 e1 db 3c 62 b9 bb ff 00 87 7a 36 8d aa 7f 6f 68 d7 a6 f3 5a 10 bc 52 1b c8 ff 00 d6 Data Ascii: \|=i9V.I{`z0'dqM=5me@zNC,K9GpNOoC4O'+tf;W=ujj/}gmq#,/s{<6nCh=6=72rR\|Qzx]jwe<zY</om3][1~<bz6ohZR
2022-03-15 16:08:33 UTC	8974	IN	Data Raw: 00 63 1f d6 bd ea 6f d8 97 41 93 5a 78 34 af 1c 4b 26 c7 5f 34 49 62 0a 8c f5 00 86 c6 e1 ef 5e b5 a2 7c 03 f8 77 f0 c6 d6 29 86 8c 35 4d 56 31 91 77 ab 4b e7 30 3d d9 61 1c 7b 8e 0e 2b d2 96 37 0e 97 bb 76 ce 58 e0 eb b7 ef e8 7c 8b a2 69 1a de a7 7d 03 58 68 57 d7 b6 e7 39 68 ad 5c 87 04 75 04 2d 7b b7 c3 0f 85 7e 2b f1 64 9f 60 3a 8d ae 87 23 9c 45 6b ab 09 16 53 b7 f8 95 42 92 ab ce 39 c6 4d 7a d4 df 17 37 cc 9a 6d 81 b8 44 81 3e 40 5b cb 45 51 c1 24 00 02 a8 f4 ae 1b 5a d6 ee b5 69 25 9a d2 e6 4b 8d 5a ed f9 99 98 80 14 72 5b 77 18 03 d6 b9 d5 4a 98 85 aa e5 47 47 b3 8d 0d 9d ce 91 7f 65 ff 00 1b f8 76 42 67 f1 47 87 c6 77 01 1d cc f2 a0 67 3d 1b 69 1c 11 f4 ae 32 4f d9 63 e2 1e a1 aa 5c 96 f1 27 87 35 05 1f bc 68 fe d6 41 41 f4 29 c2 f6 af 71 d5 ec Data Ascii: coAZx4K&_4Ib^\|w)5MV1wK0=a{+7vX\|i}XhW9h\u-{~+d`:#EkSB9Mz7mD>@[EQ$Zi%KZr[wJGGevBgGwg=i2Oc\'5hAA)q
2022-03-15 16:08:33 UTC	8990	IN	Data Raw: 47 21 a4 d9 eb b7 4a 19 2c ee e0 24 67 f7 b9 45 3f 4c d6 dc 1a 4f 88 25 91 43 e9 d2 4b 18 ff 00 96 ad 84 1f 81 cd 5a 1a 84 f6 8c 82 2b b8 5d dc 12 0b 48 d2 3e 3d 70 06 00 ae 63 c4 1e 30 ba b2 b5 7b 83 2a 87 2d b5 63 df 86 24 ff 00 16 39 c2 8a 27 5b d8 c7 9a 6d 95 1a 6e ac b9 62 91 ad 7d e2 28 bc 25 70 e6 ec 47 71 71 10 e2 da 69 3e 50 e4 64 03 dc fa 9a d1 d0 7e 28 1d 6b cb 59 2e 04 e5 c8 73 6f 6d 07 96 8a a3 b0 62 30 00 f5 ea 6b c9 fc 3f 2b cf 7f 71 a8 79 4d 72 66 c4 5e 74 ac 19 55 ba f0 3a f3 d4 d7 55 f6 bb 82 af 02 d9 08 d8 e1 0f 96 38 0a 07 55 3c 0f ce be 57 11 8e 95 79 69 b1 f4 14 70 6a 8c 79 5e ac f4 ab 3f 18 e9 da 6e a1 2b ea 16 e2 5d 3e 5e 63 99 33 bd 48 e7 6e 33 8c 7e 15 17 8c f4 8d 3a f7 4f 8f 5d d3 5c fd 95 06 64 b4 cf cc 01 ee 3f 3e 95 e4 77 36 Data Ascii: G!J,$gE?LO%CKZ+]H>=pc0{*-c$9'[mnb}(%pGqqi>Pd~(kY.somb0k?+qyMrf^tU:U8U<Wyipjy^?n+]>^c3Hn3~:O]\d?>w6
2022-03-15 16:08:33 UTC	9006	IN	Data Raw: 33 51 bf 9a 2f 9c 92 31 ff 00 2d 17 d2 97 4f f1 14 cd 1e c6 7f 30 03 9c 7b 55 46 a4 5e 85 72 b3 a3 b8 d7 7c a8 77 b7 27 a6 47 6f a8 aa 2b e2 38 55 48 95 15 c3 1e b5 47 50 00 7e f1 38 56 19 e3 f9 1a cd 28 1a 32 57 e4 cf e5 f9 52 95 c2 29 6e ce 81 f5 2b 39 be e3 ec 61 d0 11 c8 fc aa 78 75 05 07 0c 77 81 cf 07 fc 6b 8b 70 f1 b1 db c0 ed cf 4a 48 ef da 07 cb 96 57 1f cf e9 58 f3 b4 cd 39 53 3b 66 8a ce 6c ec b8 92 02 79 e4 67 15 46 f7 c2 ff 00 6d c1 b6 bd 85 db 9c fc d8 e7 ff 00 af 58 11 78 85 37 81 70 9f 2f f7 94 f4 ab bf 68 de 81 ed a5 59 14 f5 19 c1 ad 79 a3 2d c5 aa 1b 1e 81 7f a6 49 91 68 d2 6d cb 2f 97 f3 64 9e 84 9e f8 f4 ac f8 5a f6 3b 89 d6 f0 dc 46 e4 ee 0d 30 20 e4 f0 47 3d be 95 b9 63 e2 09 ed db 6e f2 70 79 56 3c d7 47 6b ab 41 a9 c7 b1 88 77 1f Data Ascii: 3Q/1-O0{UF^r\|w'Go+8UHGP~8V(2WR)n+9axuwkpJHWX9S;flygFmXx7p/hYy-Ihm/dZ;F0 G=cnpyV<GkAw
2022-03-15 16:08:33 UTC	9014	IN	Data Raw: 2f e6 6d f2 c3 03 d1 94 f2 48 3c 13 9e 6b cf ad 2f 66 f9 91 d9 4e d2 56 66 d6 9d e2 3b 6b 99 12 58 e5 96 2b 89 98 4c b2 92 46 c6 ec 01 f5 1e fd 68 ae 67 55 b9 d4 2c 56 3b 9d 42 e6 dc b4 65 be d3 2c 7b 51 76 76 1b 47 7c e2 8a ee a7 8a 52 89 cd 2a 56 7a 1f 7a db 69 c2 c6 44 53 ba 35 c7 00 67 e6 f6 c7 43 51 4d 3d d2 5c 79 88 4e f5 fb c1 64 db f4 ce 2a ef da 44 aa 60 73 96 c6 4f f1 36 3d 54 8a cd b6 d2 ee 6e 59 dc 99 37 e7 e6 8a 43 86 6c 74 db eb c7 5a f9 57 2b ab 25 a1 ec 46 9b 4e f2 66 a2 6b bb bf 75 7b 6e b2 92 a0 2c a0 7e f1 4f e9 9a 75 f5 ae 11 1e c5 fc d4 2b 99 9a 58 f3 8f 6a 96 c6 e2 e1 b7 fd b2 d2 17 84 9c 15 1c 48 31 c7 14 97 37 71 19 0c 36 91 b2 26 39 52 c3 24 7a 11 5d b4 9e b7 b9 cb 5a f1 d2 c6 64 a2 33 1c 4f 2a 12 55 49 c8 24 85 fc 3a 54 6b 6b 04 Data Ascii: /mH<k/fNVf;kX+LFhgU,V;Be,{QvvG\|RVzziDS5gCQM=\yNdD`sO6=TnY7CltZW+%FNfku{n,~Ou+XjH17q6&9R$z]Zd3O*UI$:Tkk
2022-03-15 16:08:33 UTC	9030	IN	Data Raw: ce 8a ea 59 66 41 10 f3 a4 56 e1 18 e0 29 cf 41 55 ad 23 36 79 8b 60 05 c6 48 3c 10 c3 dc 75 a5 b4 96 2d 3d b9 b8 59 42 8c a9 66 3b 73 d7 e5 cf f4 ac dd 73 c4 f1 e9 d6 b7 33 ce 8c 96 76 ea 5b 38 c6 49 1d 33 df 3d ab 8e 37 e8 37 d9 18 de 2a f1 04 76 7a 6c 90 49 11 b9 ba 95 c4 11 2a 9c ee 63 d3 af a7 5c d6 27 86 3c 17 1b d9 a6 a6 91 49 fd ac 88 51 d6 46 f9 4b 67 04 81 ea 47 7a c2 f0 f7 8c ae fc 59 e3 94 95 6d fc bb 0b 68 be 45 97 0d 20 27 be 47 7c 57 5d ff 00 09 45 c4 3a d3 c6 2c 25 10 8f 95 6e 09 c6 ee 33 d0 7e 99 ae 89 4a 51 f7 4b f6 65 0b a6 bf b5 bf 8e 24 8b f7 40 16 72 a3 00 30 fe 13 9e a4 56 2f 8c b5 09 45 b4 50 bb 91 6c d9 37 0a 7a 48 a3 d8 7f 10 ed 8a ed b5 0d 59 52 d5 1d ad a4 8f cc 03 7c 6a 09 da a4 fd e3 9e a6 b8 8f 1f a5 bd f6 8a 8c 91 09 67 9a Data Ascii: YfAV)AU#6y`H<u-=YBf;ss3v[8I3=77vzlIc\'<IQFKgGzYmhE 'G\|W]E:,%n3~JQKe$@r0V/EPl7zHYR\|jg
2022-03-15 16:08:33 UTC	9046	IN	Data Raw: 6f 99 20 88 39 dd 9c 1f a5 60 e1 2b e8 22 2b 5f 32 e5 c2 20 cb 1e 7d 80 f5 26 af fd 89 76 ed 12 6f 62 71 90 38 ad 6b 6d 2d 6d 6d f6 c6 80 02 32 4e 3b 7a d4 66 11 1c 99 44 38 3e 83 b5 75 46 16 5a 8c cd 97 4c 05 0e c7 f3 5b d0 0c 7e b5 52 1c c6 fb 24 e5 3a 7d 2b 74 5c 15 e8 5b 68 1c 81 c6 7e b5 9f 7d 62 92 36 f8 dc 0f 55 f4 ff 00 eb 53 95 35 ba 01 a8 f8 c0 11 e0 76 e6 a7 f3 f6 ae d0 33 db 9a 82 32 eb c1 c6 47 6f 6f 6a 72 dd 22 b6 0f 51 ec 71 51 ca 09 8d 7b 7f 39 c1 ce cc 7e 54 f4 8d 47 03 a8 f7 a7 99 c4 ab c2 74 ee 0d 35 fe 6c 1e a3 d7 a1 15 7c 91 10 32 85 e4 13 9f 41 d2 88 65 25 f0 4f 06 a0 72 a1 b0 4e 0e 71 cf 15 2c 3f bb 60 0e 0f a6 7a e6 97 2a 02 e2 79 db b2 07 cb d3 e5 a9 92 e9 a3 43 bc 11 8f 51 c5 2d 90 47 e4 e4 03 d4 56 8b f9 51 42 76 f5 f7 39 06 af Data Ascii: o 9`+"+_2 }&vobq8km-mm2N;zfD8>uFZL[~R$:}+t\[h~}b6US5v32Goojr"QqQ{9~TGt5l\|2Ae%OrNq,?`z*yCQ-GVQBv9
2022-03-15 16:08:33 UTC	9054	IN	Data Raw: 09 6d d8 db 9e e4 f6 a9 a7 88 9c 5d 9c ef e4 d0 e5 4e fa a8 9f 11 0b 99 ed ee a4 b3 91 24 89 95 ca c8 1b 27 18 3c e7 d2 8f f8 49 63 85 e4 81 e5 cc 80 8d ac 38 03 fd ea fa f3 c7 be 00 f0 bf c4 5d 36 3b 9f dd db de 4a 07 93 7f 09 05 c7 a1 38 fb ca 7d eb e5 6f 16 fc 3c bd f0 be a5 73 69 32 47 39 8d c1 0d 10 2d 95 27 ef 67 fa 75 15 ef e1 71 14 ea 7b 8f 46 79 95 a1 38 ae 65 b1 0e a9 ab c9 7d 6e bb c4 32 be 00 3b 58 1c 8f 52 33 ce 6a bd 85 bf 9d 09 22 de 24 45 39 6b 89 81 f9 7d 94 74 26 a4 d3 bc 17 68 f7 91 cf 95 89 c9 1b 62 66 c2 83 d7 2c 7a fe 15 a1 e2 4f 0c cd 79 fb b7 d4 3e 55 00 88 d5 4e c0 3d 46 31 fa d7 a2 d4 63 ef 23 8d 49 cb dd 67 39 ac f8 aa 18 14 db 45 e5 ac 20 ff 00 ab 88 63 24 77 24 75 3f a5 5a f0 e2 eb 5a b5 b0 92 d8 ad a5 a6 70 84 9c 6e 3f 41 c9 Data Ascii: m]N$'<Ic8]6;J8}o<si2G9-'guq{Fy8e}n2;XR3j"$E9k}t&hbf,zOy>UN=F1c#Ig9E c$w$u?ZZpn?A
2022-03-15 16:08:33 UTC	9070	IN	Data Raw: 22 ea c3 e1 6d 91 3a 6a 5a 34 7a ab 1b 2d 0a 4d 91 68 c0 c6 c4 aa cb 27 cc ad 8f 4a e6 3c 71 f1 1e df c3 56 f1 19 f4 fb 64 79 4e 23 8a 2b 5d cd c7 56 fa 0a 93 4b f1 c8 d7 74 58 ee 25 0c 8b 20 da 84 8e e7 f8 97 3c f3 ec 2b 99 f1 0f 83 ed 3c 59 a9 41 77 a8 5c de 49 1c 4a 23 8e 38 71 0a 80 39 c9 63 93 d6 be 8b 09 99 c6 14 ad 35 69 23 c3 c4 65 b3 a9 56 f1 77 89 c3 ea fe 2f bb f1 15 c4 97 e6 0b a8 e3 90 95 4f 39 44 69 85 e7 1b 73 d3 d6 b8 9d 43 e2 2c 06 e7 62 c1 be e1 4f cc ac c3 ca 51 ec 07 a9 ed 5f 46 68 bf 0d f4 08 6d d1 ae 74 c5 fb 14 5f 37 fa 44 8f 31 24 f7 39 3c 93 e9 5d 44 1e 08 f0 cc 97 51 a0 f0 e6 8c 51 d3 21 4d a2 8d c3 df fc 6b cf c4 66 11 94 9b b3 69 9d b4 f0 7e ca 2b b9 f1 a5 bf 88 6d 56 39 11 31 bd dc c8 e7 ae 4f a7 b7 e1 52 e9 b7 2f 78 f3 99 8a Data Ascii: "m:jZ4z-Mh'J<qVdyN#+]VKtX% <+<YAw\IJ#8q9c5i#eVw/O9DisC,bOQ_Fhmt_7D1$9<]DQQ!Mkfi~+mV91OR/x
2022-03-15 16:08:33 UTC	9086	IN	Data Raw: 16 59 02 ce d2 fe 01 d1 94 e3 f1 e6 aa cb a5 5f da 29 67 b0 b7 00 0f 96 38 e2 c9 c7 a1 af 50 b5 bf 2d 6e 9e 73 2a 02 31 96 c6 5b e9 54 2e f5 08 d6 31 82 bb f3 f2 f0 31 93 d8 d7 a1 ed 24 d5 ee 72 5f 95 da c7 98 c7 ac de ef c2 db f9 44 70 42 a9 51 f8 8a a1 aa 4d a9 bd c0 79 62 59 ad db a1 c9 18 c7 a8 15 e8 ba a5 d4 51 29 2d e5 82 47 20 01 f9 d7 2f a9 6a b6 f3 b0 48 b9 03 be 7a d6 69 ce 4e c5 7b 48 ad 6c 71 57 e9 79 2c 24 2a 79 69 dc 1f 4f a7 f8 d7 27 79 a7 01 bd ee 30 10 9c 85 1f a5 76 9a a4 91 3b 07 de 02 29 f9 62 c9 25 8f bd 64 ea f7 b0 47 19 96 ea 38 c3 2a ed 86 25 1c 93 df 22 bd 57 4d 7b 3d 59 c2 ea 37 2b a3 ce 23 b1 9a 6b e7 8a 30 11 33 c1 3d 00 ad d8 6d 20 d3 93 7b 9f 32 50 b8 2c 79 ff 00 f5 53 12 5f 29 a4 76 6c 67 93 ed ed 59 77 b7 2b 2f 73 c7 41 fe Data Ascii: Y_)g8P-ns1[T.11$r_DpBQMybYQ)-G /jHziN{HlqWy,$yiO'y0v;)b%dG8*%"WM{=Y7+#k03=m {2P,yS_)vlgYw+/sA
2022-03-15 16:08:33 UTC	9094	IN	Data Raw: 62 27 20 1f 3b e6 11 a8 e3 8e d4 b7 77 ac 2d 64 68 c0 25 88 66 f4 50 7a e7 e8 2b 29 4b 45 6b 2a 23 87 16 88 30 a0 fd ec f1 91 eb 83 da a6 b0 8d 1a 19 2d b7 b4 9b a4 62 63 27 90 08 c8 dd f5 23 38 1d 2b b2 e7 13 5a dc ef fe 0e 5d da 8f 12 47 63 71 28 31 5e 46 ca bd 83 38 e4 1f ae 38 15 e9 3e 25 f0 7e c9 23 38 e1 14 91 e8 79 e3 35 e0 7e 1c 96 48 f5 8d 38 b3 88 cc 13 34 d1 e3 f8 40 e8 0f b5 7d 8b 65 14 5a c6 8f 0b c9 1a 9d d1 2b 1e e0 66 bd 4c 32 55 22 d3 e8 70 62 1b a7 24 cf 2b d0 b4 54 91 e3 8a 5e 1b 39 52 07 43 e9 5d ed 96 92 f1 a2 11 ce 38 c8 ab 4d e1 eb 48 5d 1a 31 8d a7 3d 3a 1f 5a d6 b7 01 70 71 82 7e f0 fe b5 d0 a9 d8 e5 73 e6 31 a1 b4 31 4c 41 1d f3 fe 15 a1 0c 78 93 23 ea 39 ab ed 63 f3 6e 50 3a f2 69 d0 da 15 67 1e a3 35 94 a9 8b 98 22 5c e0 f4 cf Data Ascii: b' ;w-dh%fPz+)KEk*#0-bc'#8+Z]Gcq(1^F88>%~#8y5~H84@}eZ+fL2U"pb$+T^9RC]8MH]1=:Zpq~s11LAx#9cnP:ig5"\
2022-03-15 16:08:33 UTC	9110	IN	Data Raw: 2d c9 21 23 3f de 55 3d 7d ab 30 5f a5 96 96 21 80 79 70 a1 c4 71 11 96 39 fe 36 1d c9 eb 59 72 4d 0d c4 d8 66 c4 bc 1c 82 48 3f 51 4a 55 25 f0 c7 44 74 53 a6 a5 77 2d 4e a9 fc 63 71 24 2e 12 fa 52 5a 4d e8 b2 b7 46 c7 63 d1 7d b0 2b 51 f5 49 b5 48 ed c3 e2 e6 31 d3 0d f7 40 1c 80 3a 67 3c 92 6b ce e7 78 d2 e1 08 fe 22 4e e8 d7 1f 8f e1 5b ba 7d f5 c4 93 47 12 7d c6 23 ef 63 3f 5f 73 52 e5 7f 88 e8 8a e5 f8 4e cf 47 f0 bb 4d 19 b9 77 86 0d cc ae 15 8b 16 70 3b 9c 70 7e 9d eb a6 7b b8 ed d3 cb ba 2b 22 ce 9b 71 ce df af b5 31 22 23 49 7b bd d2 48 23 00 ac 78 0c c3 8e be d9 ac 0b fb 83 3c 62 56 f9 06 46 d8 9b ae 7d 73 5e 74 a4 dc b4 7a 1d 70 b4 a3 a9 b9 a4 f8 73 4e d7 21 b8 81 64 36 f7 d1 02 43 29 c8 2b d9 be be b5 e7 da f3 c7 e1 fb 97 80 4b be 40 dc be 79 Data Ascii: -!#?U=}0_!ypq96YrMfH?QJU%DtSw-Ncq$.RZMFc}+QIH1@:g<kx"N[}G}#c?_sRNGMwp;p~{+"q1"#I{H#x<bVF}s^tzpsN!d6C)+K@y
2022-03-15 16:08:33 UTC	9126	IN	Data Raw: 91 0f 2e 25 ea 40 eb f4 ff 00 1a d1 b7 b7 03 84 e7 1f 79 8f 61 5a fa 98 5e e2 2d a7 da 7a f4 f4 14 f6 d3 1e 45 75 08 00 03 e6 19 e9 ed 56 16 71 b8 24 69 f4 f5 3e e7 da ae db 5a 94 41 bd f0 3a b4 87 f9 62 a5 86 c7 3e 9a 32 b4 d8 07 24 0e 5b b0 c7 a5 50 d4 2d d6 dd 11 47 56 3c 2f 73 ee 6b a3 bf bb 45 61 14 29 f2 f7 00 63 3e 99 ac 17 66 f3 24 99 fe 72 38 1f 5a c9 8c ae 07 d8 61 09 91 bc 8c b9 fe 95 3d 96 1a 39 25 7e ad d3 e9 59 92 b3 4d 36 c1 f7 8f a7 61 5a 3c 2a 84 5e 8b d6 a5 0c 78 90 06 f9 46 30 3f 2a 6c 6b f3 82 dd 06 7f 1a 15 c2 c2 ce 46 79 fc e9 91 bf 52 7a 01 83 52 f7 40 5b b7 8c 16 07 1c 93 c5 69 40 01 62 07 53 59 96 d2 e2 30 e7 bf 4f 6a d9 b1 4d ec 3f ef ac d1 e8 05 eb 78 80 5c 73 91 de a6 84 ff 00 a4 20 ce 78 a7 46 83 6e f3 f7 71 f7 4d 24 23 37 18 Data Ascii: .%@yaZ^-zEuVq$i>ZA:b>2$[P-GV</skEa)c>f$r8Za=9%~YM6aZ<^xF0?lkFyRzR@[i@bSY0OjM?x\s xFnqM$#7
2022-03-15 16:08:33 UTC	9133	IN	Data Raw: 00 02 83 93 f5 3e 95 a9 67 e0 8b 58 e3 51 29 32 cd 8e 48 e0 73 5d 17 96 ce b8 22 30 7b f6 a4 8a 23 11 dc 4f 43 d8 e6 8e 54 05 7b 7f 04 da 0c 33 4f 28 03 a4 71 b7 ca 3e be f5 b9 6b a6 db d8 80 22 8c 6e 1d cf 24 d4 50 dc 46 bc 64 55 fb 47 47 4d e7 9f e9 46 c3 d0 bb 6c 8a a9 b8 f6 f5 a7 fd b4 06 f9 07 e7 eb 54 2e 6e 0b 2e de 82 99 1c e1 39 26 93 2c d2 9d 9e 75 da 46 01 fc 7f c9 ac 7b cb 32 bc 33 f1 ce 05 5e 4d 45 47 cb d7 db 35 05 c4 df 68 51 8f c0 ff 00 9e d5 23 dc e6 2f 2d a2 7c 83 8d c7 1c d6 45 dd ba 46 c5 df 24 1f 6e 2b a1 be 40 8e 0b 9c e0 1e 9c f3 58 f7 77 48 53 27 18 e8 40 c7 15 9c ac cc d9 cc df da db dc 46 40 89 62 03 90 46 72 4d 73 17 76 41 df 1e 62 99 33 f2 96 15 d9 dd c7 96 72 5f 1b 9b 20 63 3c 56 3d d4 36 ef 70 19 91 78 e4 9e a6 b0 96 83 5b 1c Data Ascii: >gXQ)2Hs]"0{#OCT{3O(q>k"n$PFdUGGMFlT.n.9&,uF{23^MEG5hQ#/-\|EF$n+@XwHS'@F@bFrMsvAb3r_ c<V=6px[
2022-03-15 16:08:33 UTC	9149	IN	Data Raw: 27 d3 ad 59 b3 2f 1a 1c f2 b8 ce 31 57 26 80 4c 85 93 00 90 3a d5 bb da e6 69 9c f4 97 ed c8 cf 42 32 7b d5 59 75 07 8d 8a 31 c8 6e 79 a9 6f ed fe cf 36 48 e1 86 38 f5 ac fb 88 c1 5d e4 9e 01 1e 9c 57 23 9b 5a 1b 68 59 8e 75 95 3f 79 f3 0c 63 35 42 f2 dd 95 83 0d a3 3f af a5 08 fb 53 27 05 1b b7 a5 34 cc 4e 22 2d bc 0e 86 b1 9f bd a8 d1 7a dd 04 96 e8 77 64 8e 18 56 8a 8d ca 00 ea 3f 97 ad 63 d8 4d 82 f1 81 f3 29 e9 5a 70 bb b3 61 47 41 8f c2 92 57 42 02 76 31 c1 eb fa d3 a2 b9 d8 db 4f 03 a8 3e d4 5c 59 bb 27 1c 90 7a 0e b4 e8 2c 25 95 13 09 f3 67 d3 ad 67 67 7b 0a e4 c9 22 c8 d9 72 10 1e 95 61 17 76 33 83 db 9a 6a 69 12 86 39 41 ce 09 e6 b4 a0 d2 9b 66 d7 39 cf 51 55 ec db 0e 64 16 dc a1 c7 0b eb e8 6a c0 cf 19 cd 5a 81 52 1f 94 a6 3d ff 00 c6 a5 66 42 Data Ascii: 'Y/1W&L:iB2{Yu1nyo6H8]W#ZhYu?yc5B?S'4N"-zwdV?cM)ZpaGAWBv1O>\Y'z,%ggg{"rav3ji9Af9QUdjZR=fB
2022-03-15 16:08:33 UTC	9165	IN	Data Raw: ce 32 70 01 18 fa 53 ec 7c 21 75 3b 02 48 0b d3 3d 73 f8 d7 bf 0a 9c a9 69 a9 c4 e9 f3 6e cd d8 bc 42 5d fc a8 9c 16 03 ee ff 00 f5 ea d2 c5 3c e9 b9 c9 2e 71 f2 af 03 f1 f5 a9 f4 cd 02 cb 48 8c 19 e4 0e fd c0 19 cd 5d 3a 85 98 70 56 22 ec 4f 56 23 9f c2 b5 75 a5 6d 59 2a 94 4a 3f f0 8f cc f1 99 1f 2e 07 27 9e 28 8d d9 59 15 20 2e a0 e0 6d 5c 73 fe 15 d2 e9 fa 9c b3 f9 6b 1c 58 19 c0 50 b9 27 ff 00 ad 5a 73 58 89 e3 20 34 71 67 86 23 1c 1f 4a e7 fa da 8b b3 1b a0 f7 38 3b bc f2 0c 78 07 23 03 9e 7b fd 2b 2a f2 ca 18 d5 e5 3b 43 30 f9 97 a9 c0 15 d8 df 78 52 ed 58 a4 05 09 61 92 49 18 c5 72 7a b7 83 35 c8 ff 00 7b f6 63 24 64 ed 1b 58 67 8f 4e 6b 68 e2 a9 a7 b9 93 a3 36 b4 47 17 2c b1 ad d1 20 0c 0e 80 71 f9 d0 b7 cb e6 60 a6 57 3c 10 4f 26 ae c9 e0 cd 6e Data Ascii: 2pS\|!u;H=sinB]<.qH]:pV"OV#umYJ?.'(Y .m\skXP'ZsX 4qg#J8;x#{+;C0xRXaIrz5{c$dXgNkh6G, q`W<O&n
2022-03-15 16:08:33 UTC	9173	IN	Data Raw: 8c 20 eb b8 f7 aa 33 da c4 1b 78 93 7b fa 00 71 51 d6 e3 31 6e ed b6 b6 43 9e 7b 63 81 48 96 cc 61 24 99 38 e4 f6 fc eb 56 42 76 e0 a6 f2 79 07 1f ca a5 1a 6b 04 0c 5f 24 f3 81 d2 b5 d0 8e 56 63 59 a4 9e 71 d8 32 0f 5d ab 8f d6 b6 60 8c 24 78 74 1c 8e 7b 7e 19 ab 11 e9 cf 72 d8 57 f2 10 70 4e 29 24 d2 92 36 c1 90 c9 ce 32 01 a4 ea 22 5d 36 d9 02 02 1b 80 b9 ed 92 31 4c 91 ca b6 0e d7 1c f4 ce 2b 6e d3 46 81 14 19 13 70 fc 70 45 5a 54 b7 1b c4 71 0e 3a 90 3f 2a c5 d6 48 a5 45 b3 98 8d 63 75 cb db 94 53 ce e0 08 cd 4f 6b 62 25 93 11 21 23 af 42 48 f6 ad af b2 cc 54 b4 d8 d9 fc 2b e9 f5 a7 41 74 d6 7b 88 25 17 a6 07 56 3f d2 88 cf 9d eb b0 e5 4f 95 14 0f 87 1d 92 42 48 89 40 c9 c9 eb ed 51 2e 9b 14 00 6e 72 e7 38 38 ed e9 57 ae f5 17 9b 7b 93 81 db f0 aa 82 Data Ascii: 3x{qQ1nC{cHa$8VBvyk_$VcYq2]`$xt{~rWpN)$62"]61L+nFppEZTq:?*HEcuSOkb%!#BHT+At{%V?OBH@Q.nr88W{
2022-03-15 16:08:33 UTC	9189	IN	Data Raw: 53 97 40 3b 13 5d 6d a6 8b 72 2f 2e 1e 79 21 96 e0 b1 33 12 08 25 47 6a c7 bc d4 05 bd e5 c4 52 30 e6 4e 0c 7c 82 3b 67 e9 5e 3a 93 67 b1 cc a3 a2 39 bb cd 43 4d be bc 30 2d c7 c8 7e 50 73 81 8f 41 dc 9a e8 f4 e9 f4 cb 15 92 38 87 9a 88 99 0a 0f 01 b1 de b0 35 8d 47 47 47 8e 05 b7 8e 5b 89 01 e7 6e 36 ff 00 b4 4f 15 85 1d d3 4b 6b 2a 5a 16 2a ac 37 48 47 2f ff 00 d6 14 7c 48 6d 36 ec 77 37 57 96 f7 11 db 8b 6c 79 87 0c c3 3d 4f f8 56 9d a3 e2 40 01 e7 fd 9a e0 b4 2c a4 71 be 7e 6d d8 63 e8 33 5d a6 9b 28 1c 93 82 6b 8a a2 e5 d0 ec a5 13 7a d9 c0 7c 9e 32 6a d9 97 a8 51 f2 e4 1a c2 5b b1 e6 6d 07 24 1a d6 81 1e 44 c8 04 f4 e9 d6 a6 29 b4 6a ec 8b b1 dd a4 28 40 fb d5 3e 9d 78 ed f2 1f ff 00 55 66 4b 11 4b 82 08 f9 d8 e1 46 79 cf 73 f8 55 fb 38 3c 99 32 f9 Data Ascii: S@;]mr/.y!3%GjR0N\|;g^:g9CM0-~PsA85GGG[n6OKkZ7HG/\|Hm6w7Wly=OV@,q~mc3](kz\|2jQ[m$D)j(@>xUfKKFysU8<2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.3	49958	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:34 UTC	9318	OUT	GET /cms/api/am/imageFileData/RWwSiV?ver=a3e6 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:34 UTC	9319	IN	HTTP/1.1 200 OK Last-Modified: Tue, 15 Mar 2022 09:13:03 GMT Access-Control-Allow-Origin: * X-Datacenter: northeu X-ActivityId: be1d7c6a-2971-464b-a3ef-411bc7236433 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWwSiV?ver=a3e6 X-Source-Length: 593563 Content-Length: 593563 Cache-Control: public, max-age=407069 Expires: Sun, 20 Mar 2022 09:13:03 GMT Date: Tue, 15 Mar 2022 16:08:34 GMT Connection: close
2022-03-15 16:08:34 UTC	9319	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 07 80 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-03-15 16:08:34 UTC	9335	IN	Data Raw: 63 f3 9b 7c 9f f7 cd 75 77 cb b7 e7 2d ff 00 01 ac 8b ab 14 75 62 7e f3 57 15 29 59 dd 9e 8d 68 5d 59 1c 55 fc 3e 74 8b b3 ee d3 23 b7 28 d9 3f c5 5d 03 e9 a3 cc 6d ff 00 f0 1a 8a 4b 34 85 7e 75 dd 5e a2 aa ad 64 79 52 a2 ef 73 9f 7b 79 1d 58 22 fc db a8 ad 56 60 8d ff 00 02 a2 af da 33 3f 64 8e 4e df 52 36 3b b6 33 7f bc d4 c9 b5 87 7d c0 fc ca d5 92 ce 64 e4 d3 3f 86 b7 f6 51 bd cc 3d ac ad 62 e2 df 3a 36 07 fc 0a a2 9a e9 dd b9 7f 95 6a 0d c5 5a 91 be 6a d5 41 23 17 36 4a f2 6e dd fc 55 24 72 1f 25 87 de aa ea bb 3a 52 a3 6d 6a ab 21 5c 63 8d ad 53 db c8 eb ba 9a cb b9 a8 46 d8 ce 29 81 7a 39 10 f2 6a d3 46 26 87 e7 6f 95 7f bb 59 68 ff 00 7a a5 59 1b fd ef f6 6b 17 03 55 31 1a 30 93 7f 75 69 b7 59 6e 07 f0 ff 00 76 9b b8 ee a5 93 d3 fe 05 5a 58 cd ec Data Ascii: c\|uw-ub~W)Yh]YU>t#(?]mK4~u^dyRs{yX"V`3?dNR6;3}d?Q=b:6jZjA#6JnU$r%:Rmj!\cSF)z9jF&oYhzYkU10uiYnvZX
2022-03-15 16:08:34 UTC	9351	IN	Data Raw: 76 ba 15 91 36 a1 bb f8 aa 15 bf aa 51 64 b9 9b 13 5c d5 59 a4 dd 54 5a f6 a0 7b bf 33 8d d5 71 8b 33 72 44 f2 4c 1b 8a a0 ee 1d b8 a8 e6 b8 d8 b5 5e 19 bc e9 17 1f 76 b6 4a c8 8b 97 5f 2b 1d 35 54 3e d7 35 75 2d bc c5 a9 d2 c2 34 e2 a7 99 15 66 47 0d c4 4b 1f fe cb 4c b9 99 02 f1 52 25 a8 59 bf d9 5a 2e 2c c4 8c b4 ae 80 a5 f6 c4 8f 90 bb 9a 9b 0b bc 92 31 3f c5 56 be c0 15 5b 0b 4d 86 d5 d3 aa d5 5d 0b 50 b6 b1 32 49 f7 6b 71 34 97 f2 78 a8 6c 21 62 ca 4a d7 42 88 52 35 0f 59 4a 5a 9a 46 3a 18 50 c3 e6 36 d3 f7 ab 46 35 31 d3 e6 85 12 4f 30 53 9f 02 b3 bd cb b1 59 94 ee cf f0 b5 2f 0c ae 3f bb 44 93 55 57 7f 9b 8a 04 4a aa 9f 72 97 68 e8 7e ed 56 de 7c cc 9a 7a b9 66 a0 09 66 fe 1a 4f 38 a2 b5 32 46 ff 00 6a a2 91 87 4a 00 59 ae 77 55 47 98 af 34 f9 be Data Ascii: v6Qd\YTZ{3q3rDL^vJ_+5T>5u-4fGKLR%YZ.,1?V[M]P2Ikq4xl!bJBR5YJZF:P6F51O0SY/?DUWJrh~V\|zffO82FjJYwUG4
2022-03-15 16:08:34 UTC	9352	IN	Data Raw: 5d ab fe cd 5c 5f 9a a9 42 fb 6a 74 92 b9 99 b2 27 58 45 49 15 b0 6e ab 51 23 ee ab 71 e5 aa 40 91 23 4f 95 76 fc b5 2f d8 d1 a4 ce df 96 88 d0 bb 62 ae 5b a0 5e 0d 4d d9 56 23 82 d4 75 0b b7 6d 5b 50 37 28 34 2a ed e9 f7 aa 29 a4 da df 76 a6 e5 0b 24 28 cc c6 aa 49 1f a5 39 6e bd 6a 39 24 a0 0a f3 28 55 aa 72 30 56 e2 a5 b9 9b d2 b3 e6 ba 1b 79 ad 62 8c 9d 87 c9 36 ca 62 5d 06 e9 59 d3 5f 06 de 2b 3d f5 2f 9b 09 5a a8 36 47 32 3a 4f b6 05 e3 77 cd 4d 7b 9d d5 cd b5 cb 7d f2 d5 24 57 e7 76 28 e4 0e 73 6e 4b 80 bc d5 49 2e 2b 36 e7 51 f2 ea 8b 5f 6e ff 00 76 aa 30 d0 97 24 68 dc 5c 1e d4 91 af 98 dc 51 63 1f da ab 45 a3 8e d5 59 bf 8a ab 60 b5 ca af 06 d8 dc 9a e7 2e 12 5b 99 bc b4 5f 96 ba bf ec d7 bc fe 2f 96 ac 5b e8 82 19 39 6a 6a 6a 21 ca d9 9d a5 f8 Data Ascii: ]\_Bjt'XEInQ#q@#Ov/b[^MV#um[P7(4*)v$(I9nj9$(Ur0Vyb6b]Y_+=/Z6G2:OwM{}$Wv(snKI.+6Q_nv0$h\QcEY`.[_/[9jjj!
2022-03-15 16:08:34 UTC	9368	IN	Data Raw: 44 ff 00 84 82 68 a0 75 66 4f 33 e5 f9 6b 6f e1 ef 86 20 f0 ec 9e 5c 4b f7 be 66 ff 00 7a b6 6e 36 33 32 ed f9 96 99 63 23 c7 27 fe cd 5b fb 59 38 72 74 32 f6 71 52 e7 ea 74 17 8f e6 4c a7 f8 57 ee d6 7d d6 ff 00 31 5d 3e 5d d5 63 ed 2b e4 e4 b7 cd 59 d7 13 3d c4 d8 4f b9 58 9a a2 c2 47 f3 73 5a 16 d0 d5 3b 78 3b d6 9d bf ca bc d4 0c 95 57 e5 a9 21 4e e6 a1 47 f9 aa 3d 5a e5 e1 b5 62 94 01 95 ad dd 3d e4 de 44 7f 73 f8 aa dd 86 8f 1b 42 bf ec d5 0b 18 cd c3 7d df bc d5 b8 d7 49 65 b7 fd da 06 3e 34 4b 7e 1f e5 da d5 66 e3 54 dc ab f6 7f 9a b0 ae 35 51 78 db 76 ed 5a 92 d6 e9 21 8f 1b a8 27 95 3d cb 8b 1c 93 36 f9 3e f5 35 97 cb 6c 06 aa ff 00 6f 0a bf 7a 88 64 f3 1b 9a 45 17 17 e7 e0 55 5f 24 ab 31 fe 26 ad 5b 75 8d 3a 36 ea 59 21 44 e4 53 15 f5 b1 45 61 Data Ascii: DhufO3ko \Kfzn632c#'[Y8rt2qRtLW}1]>]c+Y=OXGsZ;x;W!NG=Zb=DsB}Ie>4K~fT5QxvZ!'=6>5lozdEU_$1&[u:6Y!DSEa
2022-03-15 16:08:34 UTC	9384	IN	Data Raw: 9a 8e e2 f9 2e 2d d5 86 df f6 ab 9b 56 f5 36 8e c6 23 5d 5c f9 99 2d ba 9d 1d c7 cd f3 fc ad fe d5 57 92 fc 47 33 65 7e 5f e1 ac dd 4b 5a 8f a2 7d ef f6 6b a2 31 b9 0e 4b a9 a7 7d 7f 1a c7 83 5c 85 f5 d0 4b 86 3f ea b7 56 96 9f 60 fa ac 9e 64 ec d1 27 f0 ad 5d ba f0 6d a5 cb 6f 3f 36 df f6 ab a2 32 8d 37 a9 cf 24 e7 a9 ca 69 3a 5d c7 8b 6e 9a 09 e4 91 60 5f 97 72 d6 da fc 33 d2 ac 57 e6 b5 dc df de 6f 99 ab a9 f0 8e 8f 6f a2 f9 f8 f9 55 9b e5 5a d6 d4 a6 8f e6 02 89 62 25 cd 68 bd 07 1a 11 b5 e4 b5 38 88 7e cf 60 be 53 c5 b9 57 e5 5d b5 a9 6f 7f 68 2d f3 1f df db f7 6a b5 d4 3b 99 9d 17 e6 ac 4b 8d c9 33 11 f2 bd 35 ef 0b e0 e8 68 df 6a 4e b1 fd ef 99 bf 86 b8 6d 7a 67 45 67 46 dc dc d6 ad c5 c9 ff 00 6b fe 05 58 77 ca 6e 1b e6 97 6f ff 00 13 5e 85 08 f2 Data Ascii: .-V6#]\-WG3e~_KZ}k1K}\K?V`d']mo?627$i:]n`_r3WooUZb%h8~`SW]oh-j;K35hjNmzgEgFkXwno^
2022-03-15 16:08:34 UTC	9392	IN	Data Raw: af fe 3d 4f ff 00 d0 69 a9 f3 75 f9 a9 cb 40 06 ef f6 a8 e0 35 3b 6f a5 3d 63 dd 40 11 af b5 08 bb bf da ab 0b 6f ba 9e f0 a4 31 b4 92 b2 c4 9f de 66 da b4 80 ab b7 75 39 63 f9 78 fb b5 83 aa fc 4a f0 b6 88 cc 97 1a bc 0c eb fc 30 fc ed fa 57 3d 0f c7 ef 0b 3b 60 a5 f2 af f7 bc 81 fe 35 b2 a5 39 6d 16 66 ea 42 3b b3 d0 3c 9d d4 f5 b7 2d fe cd 79 7e ab fb 45 69 56 ea c3 4e d3 2e 6e 5b f8 5a 76 08 bf d4 d7 0b ab 7c 78 f1 3e a4 bb 2d e5 83 4f 4e 7f e3 da 3f 9b f3 39 ad a1 84 ad 3e 96 33 96 22 9c 7a 9f 47 ad a9 dd f7 6a 96 a5 ab 69 7a 1c 2c fa 86 a3 6d 66 ab f3 6d 92 41 bb f2 eb 5f 25 de 78 ab 58 d4 a6 f3 2e 35 3b b9 5d bf 89 a7 35 9b 24 92 4d 26 f9 25 69 5b fb cd f3 35 75 c7 2f 93 f8 a4 73 4b 18 ba 23 e8 3f 10 7e d0 3a 1e 9b 27 97 a7 5b 49 a9 b7 fc f4 6f 91 Data Ascii: =Oiu@5;o=c@o1fu9cxJ0W=;`59mfB;<-y~EiVN.n[Zv\|x>-ON?9>3"zGjiz,mfmA_%xX.5;]5$M&%i[5u/sK#?~:'[Io
2022-03-15 16:08:34 UTC	9408	IN	Data Raw: 05 9a c7 6c 9f f2 cd 94 ef dc 7d 71 59 ff 00 6c 4b 78 ee 77 79 10 23 29 8d 97 71 65 6c fc dd 7d 7b 57 37 79 a8 3d d3 4b 14 16 de 52 f9 9f 2a af cd f3 77 1b ba 9a ef a5 42 37 bc 4e 1a b5 9d b5 3a 26 f1 64 77 0b b8 d8 ad b2 ee 3b b6 c8 7f 91 a9 23 d6 ec df ef cb e5 37 fb 4b f7 ab 92 de d1 c3 bc fc a9 fc 2c df c4 d4 91 b7 9c bf 75 b7 ff 00 13 2f f1 57 a7 1b c5 68 cf 39 ca ec ef 6d 98 dc b7 fa 3b 79 ac bf 7b 6d 5d b3 f3 2d a6 f2 f7 34 4e cb f2 ab 63 bf ae 6b 83 b0 b8 b8 d2 e4 69 2c e5 9e 2d ff 00 2e df ef 2d 75 7a 6d ce b8 b3 7f a4 d9 fe f6 49 06 df 33 1f 7b 1f 98 15 9d 4a 91 4a d2 b1 b5 38 b9 3d 11 d6 db d9 cf 71 0a 99 17 e7 56 d8 df 71 7c bf 7c d5 97 47 79 b0 7f 7a d1 2f fa f9 30 ab d7 fb bd e9 a9 79 6d 1c 73 dc 4b 2e d7 58 c3 6d 91 bf 8b a1 03 bd 73 0f e2 Data Ascii: l}qYlKxwy#)qel}{W7y=KR*wB7N:&dw;#7K,u/Wh9m;y{m]-4Ncki,-.-uzmI3{JJ8=qVq\|\|Gyz/0ymsK.Xms
2022-03-15 16:08:34 UTC	9424	IN	Data Raw: 2a c9 e6 2f 96 bb 56 35 20 6e 01 7f 1a d9 d4 ad 4d fc 3a 2d a4 ed a7 cf fd 9c bf bb 66 6f 9a 64 5e 7a f7 cd 50 d1 e6 d4 35 0d 3e fa 74 58 ff 00 7b 27 ee 3c bf 97 e4 5f bc 07 1d 29 a9 2e 54 d1 9b dc af a8 49 aa c9 e1 fd 55 24 65 81 af 18 35 b5 a2 e5 bc b4 1f c4 7d 2a df 86 52 c2 fb c2 f7 3f da 0c d2 dd 2c 86 3b 69 63 cf ef b8 c6 76 f5 38 ed 5a 2b 61 3e b5 0f db 6f 60 58 ac d7 11 cf b5 7e 45 e7 20 67 a9 c7 7a 8b 50 b8 83 4f be bc 92 de 56 96 06 8b e6 f2 57 e6 da 0e 30 be 82 b3 75 39 97 27 98 59 a7 76 50 b5 f0 7c af e7 c9 64 be 45 f4 f1 ee 9e 46 90 b6 d4 c7 cc 7e be b5 7a 4d 17 4b 7d 26 59 6f da e5 bc f9 13 6c 91 b0 45 d9 b3 08 0f 27 bf 26 b0 66 92 e7 49 b5 96 e0 4b 3a b5 d3 79 70 45 24 9b 99 a3 ef 18 c7 7c d7 55 a7 e9 76 d7 ba 2b 25 cf 99 04 11 2b aa fd a7 Data Ascii: /V5 nM:-fod^zP5>tX{'<_).TIU$e5}R?,;icv8Z+a>o`X~E gzPOVW0u9'YvP\|dEF~zMK}&YolE'&fIK:ypE$\|Uv+%+
2022-03-15 16:08:34 UTC	9481	IN	Data Raw: 81 96 59 62 f2 25 91 7e eb 2e 73 9e 7a d5 c6 31 f7 b9 5d db 33 e6 7d 74 45 8d 53 54 bf d5 24 68 20 95 60 9d 60 76 82 08 fe f2 a8 1d c5 5a d3 74 a9 6f b4 f6 4b b6 58 22 8e 44 66 91 57 6b 48 d8 07 e5 cf 6e 2a f4 d3 3e a5 a2 e9 1a 8d a4 51 d8 a4 fb 16 56 fe 3d 99 fd 41 3c d6 86 b5 7d 1d f6 a1 14 1b 99 92 08 ca b3 4e df 2b 63 a0 18 ed 51 29 b8 da 31 45 72 ab de e6 45 96 8f ab ea 1e 30 8a f0 ce b1 58 6d 0d e6 2e 5b 6a fd d1 ed c9 aa fe 22 d0 6d 6e 66 bc 8e f2 d9 59 95 8c 91 48 cd bb 6b 67 80 06 46 73 ef 5a 1a 25 fe ab aa 43 04 69 3c 6b 04 12 18 e4 6d bb 17 6a ff 00 74 8e b5 2e a5 a8 69 c9 1c af 69 17 9b 70 b9 f3 24 68 ce dd fd 2a 39 e5 1a 89 7e 43 94 62 d6 87 2e fa e4 b2 49 a4 5c ea 11 2c be 5c 82 26 5f 2f e4 8d f3 85 26 ba 4d 5b 4f d4 4e a0 d7 91 2f f6 65 9d Data Ascii: Yb%~.sz1]3}tEST$h ``vZtoKX"DfWkHn>QV=A<}N+cQ)1ErE0Xm.[j"mnfYHkgFsZ%Ci<kmjt.iip$h9~Cb.I\,\&_/&M[ON/e
2022-03-15 16:08:34 UTC	9497	IN	Data Raw: 64 e3 91 5a f7 16 3a 56 9b 25 c8 7b 18 f5 0d 52 58 8c 16 ca bf 22 2a e7 d3 a7 6e 6a 8e b7 e2 1b cd 2f 52 b6 82 2b 15 8a d7 88 e5 b9 91 76 45 1b 63 b8 e3 70 1f 4a 98 d5 6d af 66 b5 f3 2b 95 7d a3 9f d3 be 1b bd 86 e9 ed af 16 56 8f fd 63 4f 1f ca dc f3 fe ef b5 74 7a 96 8f 77 65 e2 6d 3f 54 8f 50 8e da de 25 4f dc 6d 2d f7 86 3a 74 3f 5e b4 c4 f1 15 c2 5b ca 86 e7 6f ef 3c b8 e7 f2 fe 79 b3 cf 0a 09 e3 de a1 d2 fc 75 f6 f9 b3 3a ff 00 69 5d 7e f1 62 56 8f 6a c2 d8 03 f4 ed 55 2a 98 8a 8e f2 77 5f e6 24 a9 c5 59 12 dd 68 76 df db 57 37 92 ab 4a cd 2a f9 6c b2 04 56 65 1f c2 ab db 3d 6a 7d 4a c3 47 48 6c e7 9e da d2 59 e4 97 cf 69 15 44 9f 30 19 1d 7a 9a c7 b3 b1 d4 ef bf 77 aa 4b 04 46 4c c5 1c 6a c6 56 8d 3b e4 82 05 47 ac 2a 5d 6b 5a 7e 97 a7 e9 f3 cf 07 Data Ascii: dZ:V%{RX"nj/R+vEcpJmf+}VcOtzwem?TP%Om-:t?^[o<yu:i]~bVjUw_$YhvW7JlVe=j}JGHlYiD0zwKFLjV;G]kZ~
2022-03-15 16:08:34 UTC	9513	IN	Data Raw: 23 a3 b7 cc ed 91 81 cf 15 87 ab 5c e9 eb f6 90 75 3d ba ce d1 14 50 33 3c ef 1b a9 eb e8 c4 71 c0 15 a7 a5 f8 62 e3 4a b7 82 5b 0f 22 2b 89 67 0c da a4 ec 59 55 b6 60 0e 4f ca 07 3f 5a ab 1e a1 6f 0f 88 27 8c 37 db af d6 49 22 9e 4b 48 0a aa a1 e8 ca 46 4a a9 ef ef 55 05 18 b6 e1 b2 14 9b 95 b9 b7 22 bf bb 82 e2 68 9f 5f b3 93 53 82 3d 8b 1c 9b b6 ca bc 7f ac 28 0f c8 49 a9 12 cf 50 bc f1 47 da 3e cd 3c f6 ed 12 2b 5c cf 96 89 51 70 4a 80 3b f7 e7 b5 6a 7f c2 27 aa 6b 71 db 25 85 9b 69 5a 75 a5 cb 34 aa d8 6f b4 48 70 7a 64 6f cf e9 57 2d ad 7c 4b a5 78 9a 07 b0 d4 20 b9 8a 59 0f 99 6c b6 c9 b1 ae 06 ef e0 dd bb 00 75 cf 19 a2 55 17 2b 51 b5 ec 09 5d d9 de c6 17 8d 34 5b 0f 09 ea 50 47 a8 6a f7 37 d2 ea 11 88 96 4d a9 12 c2 9d 43 00 3a e0 74 ac 96 f1 44 Data Ascii: #\u=P3<qbJ["+gYU`O?Zo'7I"KHFJU"h_S=(IPG><+\QpJ;j'kq%iZu4oHpzdoW-\|Kx YluU+Q]4[PGj7MC:tD
2022-03-15 16:08:34 UTC	9521	IN	Data Raw: 18 cb 1c 9b bc a5 6c 92 77 4a dd 73 fe c8 af 3f 92 f2 ce f3 c3 ab 26 ab 67 b6 f3 fd 5c 7e 73 17 79 15 7a f1 9e 3d ba 56 57 84 fc 61 ae 6a da c6 c7 d3 19 6c 1b 7a ee 58 8e c8 f7 6d 55 20 1e 38 35 d3 1c 0b 94 1f 2f 4d ff 00 e0 19 3a fe f1 dc 49 1a 6b 0d f6 cd 2e 75 b3 db 22 4b 3c fb 7f d6 5c 6f 20 2a a7 2d 9c 0c f5 ad 97 d6 ac 2d 74 5b 18 fc f6 7b d9 65 f3 24 dd 68 15 99 9b e6 0a 47 2c 8b 8e 7f 4a f3 fb 9b 3b db 7f 16 5b 69 51 5c c7 2d bc 52 3c 92 4f e6 6d 56 75 ee fc 7e 02 ba 46 d4 ae d7 c4 16 37 97 b3 c7 2a db 66 4f f4 65 de 92 3e 3e 5c e7 00 f1 ce 4d 45 4a 37 b2 be 9b f9 8e 35 0b fa 97 8a 3f b3 e1 f3 60 d3 23 96 cf 69 6f 33 54 6f 36 5d c4 8c 95 18 3d 7f 95 64 dc ae b9 7f e2 ab 3d 2d 1a 4f 23 cb 8e 59 f7 40 11 77 9f 98 6c e9 f3 11 f5 ad bd 57 4f 9f c4 f0 Data Ascii: lwJs?&g\~syz=VWajlzXmU 85/M:Ik.u"K<\o --t[{e$hG,J;[iQ\-R<OmVu~F7fOe>>\MEJ75?`#io3To6]=d=-O#Y@wlWO
2022-03-15 16:08:34 UTC	9537	IN	Data Raw: 3f c6 a8 e9 eb 6f ad 5b de 7d a5 67 8a d5 64 f2 fc eb e5 f9 64 61 fa af ad 66 68 e8 13 50 b9 13 c5 34 09 04 62 78 ef a7 c3 ab 3a 9c 63 f0 ec b5 5a df c4 2d e3 3b c9 e0 8a da e6 f2 28 1b 74 1e 62 ed f3 98 75 1b ba 63 e9 47 b2 7a f9 75 1d ce 9b 44 b7 97 58 ba bc 32 ea 71 d9 a4 6c 56 35 fe 2d a7 85 63 e9 93 e9 cd 62 eb 9f d9 de 12 bc bc 9d f5 3b 9b e5 9d 42 cb 03 49 ef fc 3c 8c e0 71 57 6e ae 2f 35 2f 0c a8 11 c1 16 a3 3d c8 8a 35 81 46 d8 d9 79 c3 1f 6a cf d7 2d 6d 2c 35 28 92 e6 5b 66 b8 92 51 1d dc 6b 07 9a cc a3 e6 3f 2f 7f 9b a6 3b d5 53 5e f7 bc fe 48 99 3e c2 49 a7 cf 7d a9 44 96 96 30 41 06 a1 18 6b 68 27 f9 bc cc 75 dc 79 2c 07 f7 49 ad 0b 5b eb fd 37 c5 5a 60 bd 96 d1 af 5a 61 14 92 2c bf 24 c8 33 88 d4 74 07 a5 43 af 6a c3 54 f1 13 5e d9 69 eb 15 Data Ascii: ?o[}gddafhP4bx:cZ-;(tbucGzuDX2qlV5-cb;BI<qWn/5/=5Fyj-m,5([fQk?/;S^H>I}D0Akh'uy,I[7Z`Za,$3tCjT^i
2022-03-15 16:08:34 UTC	9553	IN	Data Raw: 39 ff 00 14 69 bf f0 8f 4c d6 72 4e ab 13 7c cb 1b 7c cc be f9 f7 ae b7 c1 fa 6b 4d a6 f9 a5 96 da df 68 59 19 a4 fb dc 67 f5 f4 ac fd 15 db c4 1e 20 94 49 f6 69 e2 5f 9a 49 a4 f9 99 54 f5 1c f4 ac af 15 5f 4b a4 b5 cb da 7c ba 73 48 36 ae ed db 47 f8 54 49 ca a4 55 2f b4 5d 94 7d e3 5b c4 53 5c d8 5e 5f 0b 48 a0 b9 b7 68 ff 00 d6 47 f2 b6 07 ae 7b d6 54 7a 5c 17 1e 15 b3 95 2f 99 6f ef 27 3f bb 93 e6 f9 01 ed ef 51 69 3a 2c fe 24 ba f3 24 b9 8e da cd 62 dd 2f 90 bf 32 e4 60 75 f5 ae 83 4f d3 74 6b 7d 3e 2b 4b 04 93 5c d4 76 ee 7d bf dd 52 c7 0b 9f bb 8e e6 a6 52 54 e2 a3 7d 41 2e 67 73 98 d5 ac 04 3a 94 09 6f a8 47 17 f0 b7 cd b9 57 03 db bf b5 75 fa 0d 8d bf f6 0c 7a 74 52 b4 b7 b7 2c 65 6b b8 1b e5 51 9c 67 14 c8 f5 4b 29 34 fb 97 8b 4a 8f cd 59 3c a5 Data Ascii: 9iLrN\|\|kMhYg Ii_IT_K\|sH6GTIU/]}[S\^_HhG{Tz\/o'?Qi:,$$b/2`uOtk}>+K\v}RRT}A.gs:oGWuztR,ekQgK)4JY<
2022-03-15 16:08:34 UTC	9561	IN	Data Raw: fb cc c4 e4 7e 55 d0 7c 3b d1 ed e3 55 d5 24 be 57 be 59 0b 5b 40 df 32 aa 8e 32 c3 be 7d 2b cf 2f af 1d 99 63 81 77 37 dd f9 7e f7 35 e9 9a 0e a5 a7 68 9a 5d 8a 1d 29 56 f2 38 c3 5c ac 91 fc cd df 76 5a 8c 4c 65 1a 4a 10 bf fc 02 69 b5 cd 76 62 78 9f 5e 93 52 5b cb 6b bd ad 3b 7c b6 d2 2f ca 8a a0 e4 e0 0f 53 55 fc 0f 63 a3 6a 90 cb 71 ad ce d7 33 aa ed 5b 66 62 bf 88 3d ea 9f 8c d4 dc c9 e6 59 ed 96 dd 63 f3 3f 71 ff 00 2c f2 6b 2f c3 7a 54 fa d6 a5 15 bd bf 99 2b b2 95 db 1a ee ed de b7 85 35 ec b7 b0 b9 bd ed ae 6e 5e 5f d8 78 7e e2 fa 3d 31 db c8 ba 8c 47 b6 46 fb ab d7 f1 39 a9 ee b4 5d 1e fb c2 eb 71 66 f2 2d e4 7b 15 9a 4f e2 7c fc c7 ff 00 ad 4f f1 27 85 6c f4 5f 0e d9 fd a5 59 75 29 64 f3 25 e9 fb be c1 6a cf 89 f5 5b 0b 8f 0d e9 56 96 4d 1a 4b Data Ascii: ~U\|;U$WY[@22}+/cw7~5h])V8\vZLeJivbx^R[k;\|/SUcjq3[fb=Yc?q,k/zT+5n^_x~=1GF9]qf-{O\|O'l_Yu)d%j[VMK
2022-03-15 16:08:34 UTC	9577	IN	Data Raw: 9e ef 9a d3 9f bc 07 1b b3 d6 a3 0b 2f ac 4d d4 a6 9d bf 10 aa 95 3f 75 bd 4d 4d 5b e1 ee 8f a6 69 fa 2e a1 79 78 d3 d9 4b 1f 9b 27 97 f7 b9 e0 63 e9 56 7c 51 a8 68 d7 17 5e 1c b0 f0 94 f2 4b 14 b7 22 29 17 71 dc db b1 81 83 cd 74 1f 0e 52 d3 c6 5e 22 fe c8 f1 05 8c 6b 61 14 7b 6d 16 7c af 96 e1 0b a8 00 10 77 15 fc 2b 97 f1 05 8e 95 e1 8f 88 16 37 7a 4e 95 fe 8f 1c e1 7c b6 93 fd 66 5b b7 65 fe 95 df 19 49 cd d3 9d dc 92 ba ed d4 8d 14 74 b5 9b f9 9d 17 8a 2f 3c 43 e1 9f 89 56 da 75 b5 b4 96 c9 b6 35 69 3e fe d8 cf 1b 8e 32 07 35 d0 68 ba dc b6 1a b3 de 78 9f 55 8e e7 4b b5 90 c6 d6 8b 26 e5 66 ea 0e 3d 8d 70 9f 12 fc 79 f6 cf 11 5b 5e e9 7e 65 8d c4 90 24 53 c0 d2 6e f3 1d 8e 3a f4 ae 97 c2 3f 0e e5 bf b5 f1 b4 5a bc 4d 6d 7b 63 69 0c b0 49 e6 19 57 9c Data Ascii: /M?uMM[i.yxK'cV\|Qh^K")qtR^"ka{m\|w+7zN\|f[eIt/<CVu5i>25hxUK&f=py[^~e$Sn:?ZMm{ciIW
2022-03-15 16:08:34 UTC	9593	IN	Data Raw: 56 ec 55 dd 49 73 37 6b 15 3e 28 db 4f e3 6f 17 69 02 79 63 b6 82 39 8e e6 55 ff 00 56 88 30 0b 1e 7b fb d7 13 a3 c3 26 97 e2 4d 57 4e b9 b9 6d 33 fd 35 d6 26 5f bf 1b 11 c1 3b 48 38 39 f5 c5 6c 7c 21 d4 23 f1 67 8e 35 08 f5 0b 96 b6 b7 bc 57 92 46 6c 7c c9 9c 88 cd 3b c5 5f 0f df 44 bc 5b 8b f5 9e 0b 8b ed 43 cd 81 a4 f9 56 48 7f 84 11 f4 a2 33 54 27 f5 49 bb 59 2b 7e 64 bb 4f df 47 75 e0 5b 18 2f 2f 34 fd 22 4b 68 ed af 7f b4 12 79 99 b0 db 76 21 22 44 fe 78 35 c9 68 7e 13 1e 2a d1 f5 7d 67 55 be 9e f1 e5 d6 c5 8b 2b 49 f2 cd 18 24 fc b5 27 80 fc 50 64 f1 55 ca 5a 45 27 da 24 b1 b8 96 0d d2 7c be 66 c2 bc 7d 3b 57 6d f0 ff 00 4a 45 f8 5b a1 c1 2c 4b e7 fe fe fa 49 3f 87 76 48 2c c7 da bc da b5 6a 61 5c 9d f5 6d 7e ac e9 8f 2d 44 8f 2e f8 2f e1 88 fc 49 Data Ascii: VUIs7k>(Ooiyc9UV0{&MWNm35&_;H89l\|!#g5WFl\|;_D[CVH3T'IY+~dOGu[//4"Khyv!"Dx5h~*}gU+I$'PdUZE'$\|f};WmJE[,KI?vH,ja\m~-D./I
2022-03-15 16:08:34 UTC	9600	IN	Data Raw: f0 1f 87 a7 93 c4 d6 71 40 cd 89 98 2c 8a bf c4 bd 48 fc 71 5e 9f e3 3f 10 1d 0e 68 bc 86 f2 ac d5 5d 9a 36 5d ca ca a0 9c 0c 56 1f 87 ee 62 d3 75 c8 84 52 f9 53 c6 a3 72 ae 77 6d 6e 38 3d 33 57 3c 45 1d b9 b1 d4 35 57 58 e5 9e 1b 49 d6 35 66 2c bb 73 e8 38 ce 2b f2 8e 25 ad ed 31 f4 e2 f6 b7 e6 cf a0 c1 c1 c2 9b b1 e4 ff 00 6d b4 f1 9e a1 67 25 9a cf 6d a9 5d 5c bc 4b 73 3c 87 e5 b7 ea 7e f7 e5 5d 1f 8c e1 b6 f0 8f 84 ec f4 4b 68 96 2b 59 2e 61 91 97 69 6f 31 55 c1 27 90 7e 62 dd 2a f7 84 bc 2b 16 89 a3 f8 7e 09 e2 5f ed 2b 94 f3 64 db f3 6d dd 93 8c 9e 82 b1 7e 36 7f a6 69 36 d6 91 df 34 1a 95 8f 97 2c 10 6e da d7 18 7f bb 9f 53 da be 76 15 95 4c 42 84 5f bb fd 22 e4 9c 55 de e7 53 26 a5 3e ad e0 9b 99 2d 96 45 49 60 31 2e ef 95 e3 6d fc fc a7 f3 cd 79 Data Ascii: q@,Hq^?h]6]VbuRSrwmn8=3W<E5WXI5f,s8+%1mg%m]\Ks<~]Kh+Y.aio1U'~b*+~_+dm~6i64,nSvLB_"US&>-EI`1.my
2022-03-15 16:08:34 UTC	9672	IN	Data Raw: dc db d5 5b 39 2c 41 c3 21 38 c7 d2 be 76 3c d4 b1 35 6a d2 77 e5 6d 1d fc bc d0 4a 4c ef bc 0f a2 d9 78 7f 47 6d 42 2b 3f 21 e2 b6 f2 bc c6 8f e6 b8 84 9f bd b3 d4 63 8f 5a ca 4d 12 df c5 9e 30 f3 2e 2c 64 5d 36 d5 bc d9 f5 09 3e 56 69 80 dd 1f ba 20 f6 ea 6b ae bc b6 b8 d6 21 5d 38 d9 da 40 92 fc b0 48 d9 66 91 7a 2e 00 c6 de 9c 76 ef 57 34 7b 13 e1 ad 26 e6 2b 8f 3e 76 ba 5f de 4e db 19 a3 db 9e 33 eb cf de 3f 5a f2 25 88 9a 6e a3 7e f3 d0 eb 54 76 5d 0c 8d 27 c1 1a 66 b7 e6 ea fa 8d cd cb 58 2c 4f 3a ed c6 f6 60 78 00 75 db f5 ae 66 da c0 eb d7 17 96 97 11 2d b5 ac 91 ee ff 00 49 54 f3 7e f7 04 8c e3 27 dc 56 4f 8c fc 6c 7c 13 a0 cb 67 a4 4f e6 ce d2 b4 52 c9 72 a6 e5 59 41 ce dd fc 05 c1 eb 5e 36 be 27 bc bc d7 22 95 d7 73 cb 28 f3 63 d3 7e 66 8d 47 Data Ascii: [9,A!8v<5jwmJLxGmB+?!cZM0.,d]6>Vi k!]8@Hfz.vW4{&+>v_N3?Z%n~Tv]'fX,O:`xuf-IT~'VOl\|gORrYA^6'"s(c~fG
2022-03-15 16:08:34 UTC	9688	IN	Data Raw: 7c cb c7 35 e9 0f f1 42 3b 0f 07 cb 69 ad 45 26 af 75 2d cb 46 bf bf f2 f6 c2 07 ca bc 7f 08 3d 05 7c d6 27 2e a9 18 c5 41 dd fe 9e 47 a9 4f 12 b5 e6 3d 97 47 f8 47 a8 f8 87 4b b6 d6 e0 d7 9a 25 b9 b9 4f 22 36 51 b9 61 23 19 e3 b9 fc aa ef 8d b4 7f 0e 68 3e 13 bc d3 bc db bf b5 41 27 96 b7 71 b6 e6 99 88 19 1b 73 f3 01 e9 da b4 fe 08 78 bb 4c 8f c2 fe 1c 82 fe e5 55 75 08 91 64 9e 0c 37 92 eb 9c 02 7e ee 6b 9e f8 94 f1 c7 e3 68 22 79 60 9e d5 94 79 8a bf 7d 57 3b 95 b8 cf cc 7b d7 ca c5 d6 95 47 19 bd 22 df 91 e8 73 43 92 eb a9 dc 78 0f 4f b4 f0 87 84 f4 e1 24 11 c4 b1 32 4b 24 9e 5e d6 91 80 e3 7e de 01 a2 a1 d4 ad a3 d5 3c 3f 15 9c b6 d2 4e b7 4a 92 2f ca 76 2b 03 f8 11 45 66 a9 c2 7e f4 e5 66 cd 9f bb 64 8a 32 46 77 28 a9 56 1d dd 7f 8a a7 68 4f 42 db Data Ascii: \|5B;iE&u-F=\|'.AGO=GGK%O"6Qa#h>A'qsxLUud7~kh"y`y}W;{G"sCxO$2K$^~<?NJ/v+Ef~fd2Fw(VhOB
2022-03-15 16:08:34 UTC	9696	IN	Data Raw: 27 75 81 f7 2d b4 f2 b7 dd 81 be ea 73 9a f5 af 82 be 17 3e 24 b7 d7 34 7b 4d 55 b4 ff 00 b4 da 09 20 bb 95 77 7c ca 71 d7 af 3d 38 ed 51 89 ca d5 28 3a bc ec 29 e2 5c e4 91 eb 97 3f 13 ae 74 3b 79 20 b8 ff 00 49 58 ee 42 c5 f6 6f 95 55 36 2b 0f bb df 6f 35 a5 67 e3 fb 6d 7a de f2 ff 00 ca b6 fb 42 ab 44 ad 1c 81 99 94 0c e7 6e 3a d7 9d fc 4c d4 34 0d 37 c3 77 36 56 9a 9f 95 a8 c1 1c 3e 63 2e 36 cd 70 a8 13 0a 08 e9 fe d5 73 fa 26 8b e1 fd 27 c3 ba 41 93 53 d4 2f 35 9d 4a e6 39 7e c3 1a 86 59 9c 1c 32 8c 73 c7 bf 5c d7 9b f5 48 4a 97 34 93 4e fd 8d 9d 47 cd 6b 9d d7 88 35 48 ad f4 75 81 e5 66 5b a9 fc d9 e4 83 ef ec 03 bf f2 af 23 b7 8e ee df 52 bc b3 82 d6 6b 99 64 54 68 21 8d b7 fc 8d fd 6b e8 8d 56 3d 3f 4d fe cf 9f 50 b6 86 da da ea 45 9f ec d3 a8 dd Data Ascii: 'u-s>$4{MU w\|q=8Q(:)\?t;y IXBoU6+o5gmzBDn:L47w6V>c.6ps&'AS/5J9~Y2s\HJ4NGk5Huf[#RkdTh!kV=?MPE
2022-03-15 16:08:34 UTC	9712	IN	Data Raw: dc d3 17 cb 76 ff 00 79 b6 b3 56 9f 81 6c 20 d7 b4 d4 96 ee 09 ec 6c db 31 47 25 ca fc db 80 07 24 67 3c e4 56 87 8a 3e 2b 78 4a c2 e9 74 0d 2a ce 3f b6 5a ca 8a b1 b3 04 8e 49 3e ef 98 5b bf f2 1c d7 d6 62 38 8b 0f 4e 4e 9d 24 e7 25 bd b6 39 69 e1 1b 8f 3c dd 91 d0 f8 66 c6 db 4b 91 af 23 b3 82 29 df 31 c1 23 4e 55 19 40 eb c8 eb f4 aa be 2a 8c dc e8 b3 df dc db 49 1d 94 53 fe f5 bc c0 ac d8 03 12 0d c7 04 67 e5 e7 ad 79 1f 8b 7f 68 69 fc 25 79 67 66 90 47 79 6d e7 96 9f ec d2 19 76 a6 46 47 3d 2b ae f1 97 8e ae 7c 5b e1 dd 43 40 b3 bc 82 ce 2d 41 91 63 81 57 7a 47 09 eb c2 fc db 89 c7 eb 5f 9c e2 27 88 a9 59 62 2a de cf 66 fb 1e b4 39 23 1e 58 96 35 fb 91 e2 0d 2e 48 ac 2c e0 b6 96 d6 04 6d cc bb bf 78 cf bb 6a 2b 0e 43 71 86 03 8e 6b 2b c2 ed ac d9 5a Data Ascii: vyVl l1G%$g<V>+xJt?ZI>[b8NN$%9i<fK#)1#NU@ISgyhi%ygfGymvFG=+\|[C@-AcWzG_'Yb*f9#X5.H,mxj+Cqk+Z
2022-03-15 16:08:34 UTC	9728	IN	Data Raw: 22 57 00 e4 36 dc 0c 01 db b5 71 fd 77 db 42 1c b1 b2 87 53 5f e1 c9 f5 b9 e8 da 3e 9f a7 f8 0f e1 ec 43 40 b9 91 99 6e 7c dd 41 ae f3 b9 9c f0 77 11 f5 e0 74 af 17 f1 32 6a fa 7c 9a d5 e6 89 2a ab 4b 19 8a 38 16 e7 e5 8c 6f f9 be f7 e7 5b 3a ab 78 e6 c3 c1 7a 85 c6 b3 3d b4 ac b3 fd a6 da c6 3f 99 66 46 1f c0 17 9f 94 7c dc e7 35 cb e8 3e 2c 9f e2 07 89 a2 d0 2d b4 58 34 e6 b9 8b 74 8c d1 8f 2d b0 99 dc fc e3 07 1c d7 ab 86 8c 54 a5 55 34 d2 dd 85 46 a5 a4 95 8f 1c f1 47 8a 3c 49 ab ea 12 a4 ba 9c eb e6 2e d9 5a 46 da cd c7 75 15 ee ff 00 b2 ed bd ed cf 86 f5 08 af 6c 5a 2f b2 c4 3c 86 9e 33 b2 46 62 49 3c fc b8 f7 ad ff 00 87 be 09 f0 be b7 a7 eb 57 7e 20 b1 5b 9b d8 ee e3 81 59 97 6a f9 6a db 4b 2b 71 85 3f d2 bb a6 d5 6d 74 bf 04 c5 6f 6f e5 db 45 6d Data Ascii: "W6qwBS_>C@n\|Awt2j\|*K8o[:xz=?fF\|5>,-X4t-TU4FG<I.ZFulZ/<3FbI<W~ [YjjK+q?mtooEm
2022-03-15 16:08:34 UTC	9736	IN	Data Raw: 6d f9 33 aa 09 b6 d2 56 38 dd 43 7f 83 ec 7f b0 ec f4 5b bb 1d 22 09 c4 1a 95 f6 d4 5b 99 3a b2 31 03 e5 cf e3 d2 b9 cb 1f 19 68 fe 30 ba d1 74 ed 41 64 b3 bd 6b 91 17 f6 b4 0a 3e d3 d4 84 fa 8c 60 1a f4 3f 1e 78 37 53 d7 af 94 e8 f7 df da fa 64 f7 c8 d7 6d 1f ee 96 38 db 1f 29 6e ad f2 fc dc 70 2b 9f f8 99 e0 3d 03 fe 13 29 f5 0f ed a8 ed 6d e0 68 23 82 d3 4d c6 e5 85 40 dd 21 65 e8 71 e9 cd 6f 46 ad 17 1f 7f e2 7d 55 ee 9f 9a 1b 83 4c fa 06 3b e1 a5 68 36 d0 3e dd b1 5b 6e 91 a3 fb cc c8 31 fa fd ea f0 ef 8d 97 32 5a c2 c6 c1 9a e5 51 52 29 2d b7 6e ed c1 3e dd 7f 1a df b8 f8 8d a0 5f 43 67 a7 59 cb ba ce d7 c9 8d 7c c6 dd e6 37 ca bd 7e f3 64 75 af 18 d3 75 b8 f5 6d 4a e7 4f b8 95 6c ed e4 93 74 9e 64 9b f6 fc f8 fc 07 5c 57 36 5b 83 9c 5b ab 35 b3 3a Data Ascii: m3V8C["[:1h0tAdk>`?x7Sdm8)np+=)mh#M@!eqoF}UL;h6>[n12ZQR)-n>_CgY\|7~duumJOltd\W6[[5:
2022-03-15 16:08:34 UTC	9752	IN	Data Raw: 78 cb 56 bf f1 3e 9b ff 00 09 25 a2 db 7d 95 60 31 dc fd 91 53 ed 51 e0 10 77 6e 3f 28 3f de fb d5 f3 ff 00 83 2e 2f 23 f1 02 c0 f7 97 36 6d b7 f7 5e 5b 6d 59 18 72 17 9c 0e 7d eb d1 6e ac ef 2d fc 2f 1e a1 71 73 3c ba 5c b7 be 5b 69 ed 6d b9 14 f2 37 0c b6 0a 7a 66 b9 cf f8 43 2d ee 3e 27 69 ba 56 99 fb db 29 67 85 97 cc 6d af b7 8c fd 3e 95 c9 84 74 e8 d3 9d 36 fa 3e 9b 58 de 7c cd a6 41 e3 cf 1c 4f aa ad b6 90 eb 2e 9f 14 52 79 73 41 04 9f 2e e0 7e 6c d7 4f a5 f8 fe db 4d d5 a2 d3 34 7b 99 ed b4 d8 d7 6c 71 dd ce 55 55 88 e5 8b 2e 36 f3 e9 d6 bc c3 c7 91 bd 9f 8f 35 ab 79 3e ec 17 b3 6d ff 00 77 79 ae c7 e0 b5 8d e6 a9 e3 05 d4 e3 82 09 ed 63 90 5b 7f a4 c8 36 ef 71 c1 00 f5 23 ad 76 57 c3 d1 a3 83 f6 8d 68 95 fe 6c 95 27 29 72 9d 85 ff 00 c1 9f 12 eb Data Ascii: xV>%}`1SQwn?(?./#6m^[mYr}n-/qs<\[im7zfC->'iV)gm>t6>X\|AO.RysA.~lOM4{lqUU.65y>mwyc[6q#vWhl')r
2022-03-15 16:08:34 UTC	9768	IN	Data Raw: 7e 25 ea fe 19 f8 85 67 a8 e9 7a 2c f3 c9 02 98 a2 d3 60 80 a2 c9 19 4f 9b 24 73 8c 73 5c 6e 93 e0 1d 72 ea 6f 35 ee 63 b1 b3 b3 cb 79 92 32 b3 6d 1c 9d bb bb fa 52 e9 3e 27 d4 34 fb e5 bb 8b 55 6b 67 8d 8e dd cd be 79 15 ba f3 ef 5d 92 a7 4e 72 94 a1 69 3f 99 1c cd 33 bb 36 76 17 37 1f da f6 f7 6b 79 e7 ff 00 a4 dc db 7d d6 b3 98 1f ba b9 3f 30 fc be ed 70 ba c5 f0 b9 d4 2d a5 92 5b 9f b3 cb 39 66 8d 76 23 48 a7 82 06 2b a3 7d 62 ca e1 5a 57 58 34 c8 a5 5f 97 e5 12 ca cd 9e eb ff 00 ea aa 7e 19 d4 2e 74 ff 00 17 7d b3 c3 7a 2d b5 f5 d4 0b e5 c3 3e a0 bb e2 91 f1 cf ca 4e dd de 83 b5 18 7f 75 4a eb fa f5 1b 97 34 bc 8e df e1 8d b7 8d db e2 05 b4 f6 96 7a 86 9f e1 95 81 e0 8d 6e d7 62 b4 64 1d a1 cf 07 19 ef 5e c1 ad 68 ba 9d e7 87 75 03 6d bb cd 68 c7 91 Data Ascii: ~%gz,`O$ss\nro5cy2mR>'4Ukgy]Nri?36v7ky}?0p-[9fv#H+}bZWX4_~.t}z->NuJ4znbd^humh
2022-03-15 16:08:34 UTC	9775	IN	Data Raw: 57 d7 fa c6 aa cb 1f 89 ef a0 f2 20 45 6f 23 4d 8c 2b cc dd 95 88 03 00 56 95 aa 28 ca d1 4a ff 00 8f dc 34 da 57 67 a5 ff 00 c2 0d a5 e9 7f 0c e5 bf 91 be d9 aa 2d b6 db 2b 95 6f 9b ae e6 52 9d d7 d3 bd 79 5d b6 93 3e bd a6 d9 dd ff 00 68 34 16 eb 76 22 6b 69 fe ec 79 eb 27 fb a3 d6 b5 2d 7e 24 5e eb de 2e d2 2c 24 9e 38 ad d6 40 d2 49 3f cd f2 f4 0a 5b 8c 80 0d 68 78 e7 47 fe c3 d7 a7 31 cb 1b ab 29 dd b5 b7 27 1d 47 5a f1 69 fb 6a 75 39 67 bb d4 da f7 5c d6 1f e2 68 e3 9b 56 8a 0d 3a 58 6f 2c ae b0 be 7c 6d be 25 ec de e0 d1 ae 78 1a e3 c2 ba 3c 57 a2 59 f5 05 68 ca b4 96 d9 dc ab 9e bb 4f 50 3a 73 58 fa 0d ad 9d af 89 a7 b3 69 db 75 cb 24 be 42 e3 eb 91 d8 10 0e 46 6b d3 75 ed 42 e6 e9 6e 74 bb 25 8e 04 92 3f 35 a4 b9 fb cd dc fe 7e d5 95 45 2a 2d 25 Data Ascii: W Eo#M+V(J4Wg-+oRy]>h4v"kiy'-~$^.,$8@I?[hxG1)'GZiju9g\hV:Xo,\|m%x<WYhOP:sXiu$BFkuBnt%?5~E*-%
2022-03-15 16:08:34 UTC	9791	IN	Data Raw: c2 29 5b 7c ad b5 97 76 ed bf e3 52 78 8a e1 f5 26 df 6d 17 91 13 7c cb b5 8f 7f af a5 62 5c d8 dd e9 fe 6f 98 cb 2c fb b6 ee 56 dc bb 4f 70 45 67 0a 6a 6f 9e 7b 91 be a7 49 61 34 97 16 3f bf f9 9f cd 11 aa b7 dd 6a ad a8 da c7 63 fb cb 9d d2 db b4 9f bc 8e 35 f9 bf 03 54 34 f7 2d 32 99 27 58 91 b0 ab ba b4 b5 c9 be cf 6f 13 85 dc d1 af ca df de f7 fc 6a 79 79 67 64 4d dd cd 4f 0f a5 cf 8b 61 96 2d 23 c8 d3 2c e0 5f 95 b6 ec 6d fd 40 fa 9a e8 74 fd 62 df c2 fa 2c f6 6b 7c d3 eb 6d 29 f3 db fe 7a 2f d7 af 1e b5 99 e1 5b 7f ec df 36 e6 76 82 5b d6 51 2c 5a 7c 6d f2 b1 03 92 d8 f4 ae 7b 5c ba 8b c5 5e 20 fb 40 9e 0d 3f 6c 7e 63 34 8d f7 b9 e4 0a e3 71 55 a4 e1 6f 75 6b f3 fd 4d ee 74 9a b7 c2 d9 2f ac e5 b9 bb d4 23 fb 7d d2 f9 b0 46 ad b9 36 9e 99 3d 4d 62 Data Ascii: )[\|vRx&m\|b\o,VOpEgjo{Ia4?jc5T4-2'XojyygdMOa-#,_m@tb,k\|m)z/[6v[Q,Z\|m{\^ @?l~c4qUoukMt/#}F6=Mb
2022-03-15 16:08:34 UTC	9807	IN	Data Raw: dc 16 3e 1e 96 c6 3f 22 2b eb 46 f3 6c d9 64 fe fc 79 ca ee fe f0 ae aa 32 94 63 29 e1 aa d9 be 8f f4 66 52 50 7e 46 6d 9e ab e1 ef 10 ea 17 9a 64 f0 58 d9 da c1 19 8d 7c fc 2b 2a e3 e5 1f ed 1f a5 64 e8 3e 1d b3 b8 d6 27 fb 24 f7 70 24 7f 2c 0c bf 24 4d b7 f8 b2 bd 47 b6 2a e7 c4 2f 86 7a 7d ae 92 ba ee 87 15 b4 b6 f1 c5 e5 ca de 7e e6 67 07 fd 60 fe 25 af 3b f1 3f 88 6d b5 08 e2 3a 65 cd ce 9d e5 c8 23 6f 2f 2e db 82 7f 09 fe ed 25 37 51 f2 ab f6 7e 46 32 93 fb 5a 9d 8d f7 83 35 d4 f1 b4 f3 99 67 bc 9e 76 f3 20 5f 3c ba b3 63 19 0b d7 71 1d eb a3 d2 b5 0d 46 38 75 0b 49 e0 82 29 d1 8c ad 1d de c4 8a 68 54 72 64 3c 9c 75 01 6b c7 ed bc 75 e2 4b 1d 2d 8c 5a e3 4e aa db 5a 45 8f e7 e3 00 0d dd 4f d2 b4 1b c2 ba df 88 74 19 6e 60 bc 9e ce f2 ed 51 ad ac 55 Data Ascii: >?"+Fldy2c)fRP~FmdX\|+d>'$p$,$MG/z}~g`%;?m:e#o/.%7Q~F2Z5gv _<cqF8uI)hTrd<ukuK-ZNZEOtn`QU
2022-03-15 16:08:34 UTC	9815	IN	Data Raw: 87 80 ef e4 f0 5f f6 40 d3 96 d2 f3 54 d4 2d a3 b4 9e ee 79 02 cb bd 4f 21 4d 74 df 12 fc 43 1d be a1 62 2f 60 fd d7 2c b3 dd b7 cb 33 ec c1 51 9c fe 15 55 b3 7a fc fc 94 b4 f4 dd 9d 14 e1 46 31 f7 d5 d9 f3 d7 87 be 18 e9 7a 1e a5 3d c2 79 72 ac 96 c6 05 8d 58 ee f3 18 f6 eb d1 6b a4 b7 f1 55 bf 86 64 9e da 4b 6b 65 b8 ff 00 59 1b 49 1e e4 91 8a 72 d9 1d bd 6a 8f 89 b5 80 da b5 cd c2 c4 aa 9e 67 ef 23 fb de 5f 60 3f fd 75 c3 78 ea d6 e2 1b 8b 1f 31 59 9f ca fb cb fc 2a 7e 9f c3 45 27 53 14 d3 ae ef a1 c5 3b 47 e1 33 57 c4 d1 36 a5 aa dc de 4b 0f 9f 24 5b a3 9e e7 e5 56 4c f4 d8 3a e3 b5 71 53 43 66 b1 ca f2 4b 3f 9b 3f cd 1c 76 df 22 ff 00 c0 8f bd 69 26 87 a7 fd 96 5b fd 47 75 cb 33 18 a0 b4 8e 4d bf 37 72 dc 70 b5 13 df bd e6 a9 2a 5b 5b 5b 5b 3c 58 55 Data Ascii: _@T-yO!MtCb/`,3QUzF1z=yrXkUdKkeYIrjg#_`?ux1Y~E'S;G3W6K$[VL:qSCfK??v"i&[Gu3M7rp[[[[<XU
2022-03-15 16:08:34 UTC	9831	IN	Data Raw: f7 31 9c 37 ae 1c 67 8f e9 5e 27 f1 1a ce 2d 63 c5 16 3a 8e a7 3c 16 76 ba bd b4 32 ed 6c ed 59 97 f7 52 f4 1c b6 f4 3f 9d 7b 2d ce 8f ab f8 67 f6 61 b9 d5 f5 5b e9 e7 96 79 61 82 4b 66 5f f5 d6 c6 4d a0 e4 fa 7c b8 3e 8b 5e ab 5f 6a c6 94 e3 2b b3 c2 ec fe d3 e3 af 14 35 c5 fb 2c 0f 73 72 8d 3f ee cb 34 88 5f 73 72 4e 73 5e 9d f1 09 ac a3 f8 81 ae 6b 3a 84 b6 cc 8d 72 7e c3 73 1b 16 68 6d c2 28 88 6d 1f 2e 00 18 ab be 07 f0 ad 9f 86 2e 35 0f 19 ed 6d 7a f6 d5 4c b1 e9 fe 59 44 b5 42 98 8b 79 3f 2b b9 6f e1 15 e7 56 fa b4 7a e2 dc 8d 52 28 fe d8 b2 16 93 ca 6f 29 59 9b aa 90 dd 31 ed 5e 4e 22 73 9d d7 4e bd cc 5c 39 57 28 ba b7 88 20 d7 75 06 94 d8 f9 5a 8f 1f ea db 7c 12 71 c7 cb fd ea a7 a4 a4 b3 69 ba 82 3d ca ac f6 aa 76 c0 cb b5 39 ec 3f a8 ad 96 f0 Data Ascii: 17g^'-c:<v2lYR?{-ga[yaKf_M\|>^_j+5,sr?4_srNs^k:r~shm(m..5mzLYDBy?+oVzR(o)Y1^N"sN\9W( uZ\|qi=v9?
2022-03-15 16:08:34 UTC	9847	IN	Data Raw: 0c 32 32 39 1d 6b 46 de c6 e3 c5 d6 fa 85 b3 cb 1a a4 1b 25 db fc 3f 34 98 27 3e a1 7e 6c 0e b5 ed c3 96 9c 2f 25 a7 e2 67 6e 65 6e a7 25 aa da dd b5 bd 8c b1 4b f6 c9 e4 8c 49 fb a8 ca f0 07 f2 fe b5 dd f8 27 c1 f2 6b 56 f3 eb 1a dd b7 95 e5 c7 0f 91 1f dc 66 6c 70 72 7a f1 8f 6a d1 59 b4 8f 87 36 ea 6d b6 dc bc b0 3c 4b 26 ed ca de 66 7a e7 ee e0 57 21 73 e3 6b b9 35 28 b4 b9 1b cf b5 8a 44 dd 24 0a 7b 73 ed 91 5e 67 b4 9d 64 d5 35 64 ba 96 94 69 b5 73 ba d7 35 4d 1a fb 4b 5b 3d 6e d2 39 ef 5a 4f 37 6c 12 6e 58 63 ff 00 9e 6b 83 b7 79 af 3d f1 44 d3 68 b0 b5 bf 87 7c f8 ad 5a 43 77 72 bb 83 2c 6b 8d a3 9f ef 56 0f 8c ae 24 8f 5a f3 ad 22 92 c6 06 df e5 c0 df 2a b7 6c 83 d3 27 f4 ac 58 64 bb 9a de 73 73 b7 ca 5f dd c5 b5 8b 6e 6e bb 4f ae 2b d0 a1 84 74 Data Ascii: 229kF%?4'>~l/%gnen%KI'kVflprzjY6m<K&fzW!sk5(D${s^gd5dis5MK[=n9ZO7lnXcky=Dh\|ZCwr,kV$Z"*l'Xdss_nnO+t
2022-03-15 16:08:34 UTC	9863	IN	Data Raw: a5 dd 5f 4e f1 6e b3 68 dd a5 9e 45 3f be 60 38 8f 82 0f fc 07 35 dd f8 ba d6 da e7 41 82 f6 5f 3a e7 ca 6f 2d 5b 68 56 56 03 3b 70 3f 87 e6 ea 2b e7 f1 b0 51 c6 46 1f 65 1a 42 cc e3 f4 4f 02 f8 6e e3 c5 91 eb 9a 15 f4 9f 63 b3 5f 3e 4b 6b 95 d8 f0 e3 03 f8 79 2d e8 6b b4 d6 ac 74 2d 36 d5 75 4f 10 ea fa 85 e5 fd f4 7e 52 c7 63 f3 34 69 9c f2 dd b2 3a d7 39 a2 c2 9e 1b b8 8a 7b 2d 42 49 ef 1a d8 4b 3c 16 ca 5a 28 5c 9c 29 e7 ef 00 39 39 ad 7f 10 ed f1 46 8b 3e a9 25 cf d9 a3 8e 4f 2a 39 e7 5f 9e 4e 30 70 b8 e9 ef d2 b3 c4 c6 6e 71 94 a6 dc 76 bf 5f c8 ae 5b 22 eb f8 8a d1 9a 0d 3a ee 0f b3 25 b4 5b a0 f2 f3 b7 62 f3 f7 fa 30 6f 7c fa 66 b5 34 dd 52 d3 c5 da 7a bd bd b5 a5 b4 aa a5 99 a4 8f 73 ed e9 b4 13 f7 72 3d eb 86 d4 b5 2d 17 45 f0 7c 16 9f da f2 5f Data Ascii: _NnhE?`85A_:o-[hVV;p?+QFeBOnc_>Kky-kt-6uO~Rc4i:9{-BIK<Z(\)99F>%O*9_N0pnqv_[":%[b0o\|f4Rzsr=-E\|_
2022-03-15 16:08:34 UTC	9895	IN	Data Raw: c3 36 17 1a b6 a9 63 7b 1c b0 36 b2 b2 19 f6 c9 f2 ab 6d e1 95 b9 ee 38 fd 2b 4a ff 00 4f d3 fc 31 e1 b8 a0 d7 2e a4 9f cb 93 fd 5c 0d b1 5b be 01 1d 4d 79 a5 d5 e5 bd ae a9 16 a1 a7 dc ce ab ff 00 3c 37 1d cb 9f 7a ea c0 cf 9a 36 86 cb af 43 26 ec cf 6c d0 fc 69 6f a6 f8 b2 e6 4b 3b 3f 2a ca f9 b7 4b 03 2e df b3 c9 d9 77 0c 93 1f a5 5c bf f1 35 bd f3 6a 11 4f 17 91 6f 14 67 6b 34 9f 24 8c dc f0 3e ef 5a e3 bc 17 e3 0b 6d 3f ec d7 70 dc cf 05 ff 00 ce ab 1a c6 8d e6 67 a8 2b ce 7f 2a e8 b5 bd 6a 5b f5 9e e2 0b 38 e5 b7 92 78 f6 da 79 e1 59 90 8c fb 77 a8 c4 7d 5f 9e fc b6 66 9c f7 56 b9 ca df 2c 16 fa 6a c4 90 49 1d ac f8 9e ef cb fb cc c9 92 bb 4f a7 3f 85 7a 35 bd fe 9f a7 fd 86 58 2c 67 b9 82 f2 01 73 1d cc ff 00 c4 ec 87 3b b1 90 79 dd 83 d6 bc c6 fa Data Ascii: 6c{6m8+JO1.\[My<7z6C&lioK;?K.w\5jOogk4$>Zm?pg+j[8xyYw}_fV,jIO?z5X,gs;y
2022-03-15 16:08:34 UTC	9911	IN	Data Raw: e9 31 7f 64 37 fa 6c 7f ea f6 b6 e6 65 53 f3 00 3b 67 3f 95 77 d2 5e d2 a4 55 35 b3 5f f0 0c f5 3d 5e eb c4 3a 56 93 ac 6a f6 5a 5d 9b 4b 74 ba a0 d5 a2 be dd b9 a3 52 3a e4 f1 ce 57 3d ab 8f 86 f2 f6 e6 e1 50 c4 b6 d7 53 ca 5a 75 56 3f be 50 78 cf f7 71 d6 b4 21 f0 ec b7 1a 5d ce b1 69 73 72 d6 ff 00 d8 df 6d 93 e6 0a ad 08 74 06 3c 7b 39 ff 00 c7 6b 2b 52 f1 14 ba 6d 9b 69 53 db 69 f7 37 57 3e 5d cc 57 6b f3 4b 1c 64 71 1f cb c2 9e e5 7a d7 a9 88 8f b4 6d a5 f7 8f 5b 5d 9b 56 09 7f aa 5d 30 d3 da 3b 3b 35 5f df ce cc 5b e6 1c 00 3e b5 d5 59 dc 4f 3d c5 8d 9d 9a ad b5 c4 52 c8 b2 c7 e6 6e 66 50 99 6c f7 39 c7 7e 95 c5 e9 57 ed a5 78 6f c8 8a f2 3f b4 4f 3a 4f 26 d5 dc ab b4 e4 2b 37 41 eb 5a 3a ad f6 a3 23 7d bf 4f 8a e5 53 68 91 6f 9b 1e 6f 23 e7 cf 4e Data Ascii: 1d7leS;g?w^U5_=^:VjZ]KtR:W=PSZuV?Pxq!]isrmt<{9k+RmiSi7W>]WkKdqzm[]V]0;;5_[>YO=RnfPl9~Wxo?O:O&+7AZ:#}OShoo#N
2022-03-15 16:08:34 UTC	9934	IN	Data Raw: 58 ae 22 fd e3 2a e5 da 4f 5c bf 63 5d 15 87 c2 db bf 11 47 16 c8 96 cd 3c b3 24 1e 63 7a fa fd 7d 6b d5 a9 56 84 62 b9 dd d0 72 ad 0e c3 c2 5a b3 de 78 46 2b cb bb e8 1e e2 26 56 8e 76 fb ca c4 90 41 23 24 7e 55 46 4f 13 41 6d a2 ea 10 5b e9 57 d1 45 a8 4f e5 af 91 f2 c4 ac 40 e9 9e 4f a9 a9 f4 3f 00 9f 03 5a c5 25 ed 8d a5 e5 c4 bf bb 8e 4b 6b 92 cd 1b 2f cc 77 a6 6a 5d 1e f2 e1 35 86 d5 75 06 65 82 e6 20 b0 5b 40 db e2 8d be e8 e0 e7 e6 c7 5c ff 00 7a be 6e 51 a7 cf 39 c7 58 fa fe 1a 0f 4b 09 66 9b ee be 48 ad b5 04 96 06 fd c2 ac 9b 6d d9 7f 8b 71 ef 8e 7a d6 85 9c 6f ad 69 7a 84 71 b2 cf a4 cb 2c 32 4e d2 2b fe ef 0e 01 da 1b d7 38 35 ab a3 f8 6e f1 e1 58 f5 0f 22 2b 7b 58 a4 6f 23 fd 52 c9 19 3c 73 d7 9e 7a 8a e6 fe 20 78 86 e7 c3 0c d6 16 32 b4 5a Data Ascii: X"*O\c]G<$cz}kVbrZxF+&VvA#$~UFOAm[WEO@O?Z%Kk/wj]5ue [@\znQ9XKfHmqzoizq,2N+85nX"+{Xo#R<sz x2Z
2022-03-15 16:08:34 UTC	9958	IN	Data Raw: 9b 31 48 aa c1 5d 7b 6e 6f ce ba d9 ad f4 4d 1e df 4a 31 33 6c f9 9b 6b 36 f6 91 41 c8 62 07 dd cd 7a 13 b5 94 56 e6 72 56 5e 67 51 ad df c7 79 66 b1 5d cb 6d 15 84 b3 1f 97 6f cd 1a 8f 6f 4a ce d4 2f a4 b6 66 8a c1 5b 6c 4c 36 c8 b9 64 85 87 7f 4a 89 af 24 d4 24 fe d0 b9 81 5b 74 7b 55 7f 87 60 1e 9d 33 59 97 37 32 5f cd 66 3c f8 ed 95 be 55 91 58 ee 6e 3a 10 38 af 39 53 4a 56 68 da 3a a3 ac f0 af 87 ff 00 b6 f5 69 64 96 da 09 e0 8f 12 48 ab 21 55 92 46 3d fa fe 75 d8 3c 96 7e 15 ba 82 03 73 25 ca d9 c9 23 35 a4 91 97 4d ad db 07 80 d9 ef 8a e2 b4 5d 42 f6 d3 49 96 01 73 e4 2a cd 1a b4 91 ff 00 0e 1f 71 15 d8 d8 dc 8d 42 c6 53 73 72 cb 2d ac 9e 6b 4e d8 dc d1 9f 98 c6 0f 7e dd 0d 73 e2 29 3b 29 2d 53 e8 50 5b 28 93 ca d4 e2 5b 48 9d a5 12 47 f6 95 0a 8a Data Ascii: 1H]{noMJ13lk6AbzVrV^gQyf]mooJ/f[lL6dJ$$[t{U`3Y72_f<UXn:89SJVh:idH!UF=u<~s%#5M]BIs*qBSsr-kN~s);)-SP[([HG
2022-03-15 16:08:34 UTC	9990	IN	Data Raw: e6 6e 78 66 3f c1 fe 4d 76 1e 2b f1 d5 bb f8 7e c7 43 f0 bc 56 91 68 96 b1 15 fb 34 6b bb cb 60 78 1f 8f 27 77 5a c4 f1 6d 8c 5a 4f 84 f4 cd 76 29 3f e2 65 2f 93 6d 05 b3 61 93 68 ce ed f8 e3 f8 56 be 37 32 c4 2c 4d 45 6e 9b 1d 72 8a ea 73 9a a4 3a 37 86 2e 30 22 b9 92 e2 48 37 79 31 fc cb 1b e7 1d 4f 76 03 f0 ac ef 0c 69 36 de 22 b7 be b8 96 79 ed a7 8e e4 2c 6b b8 b3 6c 6e 48 07 1c fe 35 be be 20 17 8d 7d 7b a9 fc d1 49 19 dd 04 0b f2 c2 c7 00 1e 78 20 e3 83 51 e8 fa de eb 78 a3 b6 68 f4 c5 f2 83 44 cc a1 b7 30 fb c4 ff 00 b4 6b 86 12 95 28 72 db de d2 e7 33 8a 39 3b ef 00 dd e9 3a 95 ce a7 05 e4 8d 61 f6 92 bf 66 6c 23 b3 2f f7 ba 1e 3d aa e6 ab e1 2b 3d 41 5a e6 fd 64 95 d7 62 f9 10 36 df 98 8e 58 71 59 7a b7 88 63 fb 62 a5 dc f7 73 f9 4a 59 5a 46 f9 Data Ascii: nxf?Mv+~CVh4k`x'wZmZOv)?e/mahV72,MEnrs:7.0"H7y1Ovi6"y,klnH5 }{Ix QxhD0k(r39;:afl#/=+=AZdb6XqYzcbsJYZF
2022-03-15 16:08:34 UTC	9998	IN	Data Raw: 7e 3d 6b 9b ba 9a 78 59 90 79 8a ca c7 6a b7 e5 f9 d5 cb 0b 9d 4d 21 f3 4a ab 24 6c 23 6d df 2a f4 ea 73 5a b8 bb f3 44 64 29 a3 bb 33 03 ba 24 ff 00 77 73 36 7a 71 ef 56 a1 d2 7e cb 6e b7 f7 16 cb 2c 12 48 d1 ac 0d 21 57 5d a3 af bd 5f ba 7b db 5f 2a 64 95 62 2c c9 22 c9 b8 2f b9 eb 5a 96 7a e6 9d e2 1d 72 0b 4d 4e 5b 9f ec 95 91 fe 6b 48 c2 cb 6e c7 80 c7 fb f5 ac 6e 95 d8 d5 9e e7 36 96 f3 5b db ff 00 a4 af d8 5b fe 59 7e ef e6 91 48 cf 35 a3 aa ea 11 c7 63 15 bd ba c8 cb b8 b2 b7 98 37 56 c7 8f fc 27 2d 8f 87 f4 f7 9e f1 a5 78 f1 14 71 ae 36 aa 00 48 2c 47 39 23 1d 6b 93 d3 f4 3b bb a9 a2 b8 b8 8a 4b 9d 39 64 2b 27 d9 31 b9 98 63 a7 a7 5a 4e 4a da b1 c9 34 c7 68 77 51 da f8 9a da 79 e7 fb 37 96 c3 74 8c a1 99 7f 03 5d f7 c4 0d 61 f6 cf 6d f6 96 d9 75 Data Ascii: ~=kxYyjM!J$l#msZDd)3$ws6zqV~n,H!W]_{_db,"/ZzrMN[kHnn6[[Y~H5c7V'-xq6H,G9#k;K9d+'1cZNJ4hwQy7t]amu
2022-03-15 16:08:34 UTC	10000	IN	Data Raw: c9 fd d4 c7 53 52 eb 9a 7d 9c 76 be 64 f6 d7 31 6a f2 4a 65 96 36 93 e4 b8 56 ee 9e 98 ef 59 57 11 df c9 a2 c1 1d c5 8b 2b 58 b3 2e d6 6d 8f cf b7 d6 bd 3a 7c b6 dc 76 7b 26 3e e7 56 d3 6c 6d 60 b7 b6 b1 96 da 78 fe 69 26 66 f9 64 43 d0 9f a5 53 d4 7c 45 7b 79 1c 16 e2 78 24 89 94 33 79 6a 13 e6 c6 dc fe 55 83 e5 bd bd e6 6e d9 a2 da db 9a 36 53 bb 1d 7a 57 45 e1 df 0c 4f af 5c 7d a3 48 b3 8e f3 77 ca d0 37 de 8f 3f c4 57 fb a3 d7 a5 74 f2 c2 9a e6 6f e6 5b 8a ea 74 be 15 4d 3f 4b 86 2f b5 ed 97 51 69 4f cb 03 0f 95 71 fc 59 e8 0d 74 0b e3 29 6d ee 97 51 76 ff 00 8f 36 0a b0 47 f2 2a b1 e0 ed 1d f8 ac e4 f8 73 a8 db de 35 cd ed f6 8d a7 c1 6d fb b6 91 64 3f bc c7 1c 28 e7 f3 ac cd 52 e6 c2 1b af b3 59 4b 6d 3a 6d 32 49 22 b1 f9 98 74 ce ee 3f 2a c3 dd 9b Data Ascii: SR}vd1jJe6VYW+X.m:\|v{&>Vlm`xi&fdCS\|E{yx$3yjUn6SzWEO\}Hw7?Wto[tM?K/QiOqYt)mQv6Gs5md?(RYKm:m2I"t?
2022-03-15 16:08:34 UTC	10032	IN	Data Raw: df 98 b8 66 5e 72 77 29 eb 58 bf 10 3c 11 2f 86 ee 2d af 77 46 d6 17 8a 64 b6 68 3e ec 88 7b e3 b5 55 4b 82 da 7c ff 00 b8 56 5d df 2c 8c db 5b 77 53 8f ad 77 5e 2a f1 12 78 db e1 ee 99 73 a8 b4 70 5e 69 f1 fd 9a 26 f2 f6 b4 91 f4 20 7a e0 d6 f4 6f 2b a6 0b 43 ca 2d d2 d1 66 8a 49 e2 6d 9b be 65 8f ef 7e 35 5a f2 48 ad e4 f9 37 79 5b 8e dd df 5a 8f cc d9 33 40 57 6b 2b 7d ed d5 76 18 7e d3 1b 45 b7 cd fe 1d bb 7e ef b8 aa d1 68 cb db 52 35 b8 17 31 b7 95 2e dd cb ff 00 8f 7b 57 4f e1 1f 14 4b a3 ea 11 47 7a df 69 b3 97 e5 93 73 7f 09 fa fd 6b 95 5b 03 a7 5c 7e f3 e5 5f bc b5 af e7 25 c4 31 3c 71 6d 66 52 de 67 f7 aa 79 6e b4 25 be c7 59 e2 4d 2e de c2 f1 67 b6 56 6b 39 d7 cc 8d 99 83 32 e3 aa 9f a5 5f f8 37 a5 8d 6b c4 9a aa 49 e6 7d 8e 5b 49 20 96 38 e3 Data Ascii: f^rw)X</-wFdh>{UK\|V],[wSw^*xsp^i& zo+C-fIme~5ZH7y[Z3@Wk+}v~E~hR51.{WOKGzisk[\~_%1<qmfRgyn%YM.gVk92_7kI}[I 8
2022-03-15 16:08:34 UTC	10048	IN	Data Raw: fb d5 dd 42 de 5d 4a c6 2b 8b d9 57 76 dd ab 1c 8a 59 97 1d 3e 99 ad 39 12 ca c2 1d 32 e0 7d f9 e3 fd ef 99 1e ef 27 1d 08 da 30 38 af 52 29 46 0a 2d ea 37 53 43 13 c5 1a 2c cb 78 b1 49 fb f9 57 32 48 d1 b6 e5 91 7e b5 6f c3 0f a3 d9 ad f5 c6 a1 63 f6 9d ca 16 28 20 5d ca ab ea 5a aa ea 96 0e d7 12 bf da 56 21 27 cb e6 48 c7 f7 99 ee a3 b0 ac ab 9b a8 f4 99 1a ce da 5d b3 36 7c cd df 77 a6 30 2b a6 11 72 8f 2a 7a 19 3b b5 6b ea 7a c7 80 fe d3 ab ac 1a 45 9e ab f6 3f 0f 48 c8 d3 c7 72 bb 55 54 9f 99 63 cf de c7 b5 65 cd e2 7d 3a 6d 5a e6 5d 3e 0f 2a ca c5 7c 89 da fb 6b 37 52 32 bc 74 35 e7 b6 3f 10 ae 74 fb 19 6c cd b2 f9 6a a9 e4 47 b8 ed 8d 81 e4 8f 73 4e d6 35 11 73 75 05 dd c4 4c b7 b7 0c 1e e6 d1 5b 6a c8 a3 9f ce b7 54 6c f9 8c 9d 37 b3 27 f1 17 84 Data Ascii: B]J+WvY>92}'08R)F-7SC,xIW2H~oc( ]ZV!'H]6\|w0+rz;kzE?HrUTce}:mZ]>\|k7R2t5?tljGsN5suL[jTl7'
2022-03-15 16:08:34 UTC	10054	IN	Data Raw: 1e 8d d8 d6 5e a9 70 96 ba d4 b1 ed 6b 69 7e ef ef d7 f8 48 ff 00 0a e8 a7 4a 3c ce 0d 1b 23 02 f1 c4 77 9f 68 76 fb ca 7e 5d db 9b e6 fe b4 e9 3c 49 76 b3 6c 8e 76 83 6a ed 8d 97 ef 6d 23 a5 4b 75 1d b4 2d fb d6 f3 5f f8 76 ff 00 17 d6 b3 2e 5a 3b 8d a1 17 6c ad ff 00 8f 57 b1 1b 75 2c e8 af b5 eb bb 88 6d 6d e7 69 e0 79 62 fd e4 f2 31 6f 31 3f c2 bd 77 e1 cf 87 f5 0b 3d 2f ed 12 cb fd a1 6f 7d 11 95 76 ed 57 f2 c1 c1 38 61 f7 b3 d3 da bc d7 c0 b7 29 66 d1 e9 fa 8c 1f 69 59 70 d0 6e 83 7c aa f9 ff 00 96 63 a6 d1 df 3c 57 45 e2 2d 6f 51 f0 dd e4 16 96 d3 b4 bb 63 0d b9 64 f3 77 67 b9 23 1b 7f dd af 0b 1d cd 55 fb 08 59 5f f1 31 77 46 a6 b1 67 77 67 ad 79 89 04 b6 d6 b1 37 9f 1a c9 f7 59 81 ce 0f d6 b9 bd 6f c4 f7 7e 24 d6 95 ed ed 95 5e 05 f9 57 96 6d dd Data Ascii: ^pki~HJ<#whv~]<Ivlvjm#Ku-_v.Z;lWu,mmiyb1o1?w=/o}vW8a)fiYpn\|c<WE-oQcdwg#UY_1wFgwgy7Yo~$^Wm
2022-03-15 16:08:34 UTC	10078	IN	Data Raw: e3 98 ce ff 00 9b 6e 79 f5 ae cf 6d 09 46 ca 26 9c b2 4b 95 17 75 af 1f 1f 00 78 8b 50 4f 9b 4f d6 da d2 48 ee 7c f5 fd d5 c2 81 fc 0c 46 e3 bf 3d fe 95 9f e1 fb e9 3e 33 5d 5b 0d 37 4a b1 fb 56 9f a5 98 a5 6d 41 91 2d a3 4e 76 f0 06 73 e9 df 35 ec 1f 0d be 14 e9 1f 12 f4 35 bb f1 84 5f 6e 82 08 1d 6d 2e 7e 75 66 b7 e4 86 c3 72 33 da bc 7f e3 37 87 f4 af 01 f8 d1 a0 f0 44 f1 e9 f6 0d a5 86 fd c4 9b 96 46 cf 3d 49 e4 d6 34 f9 6a 26 e9 ad ba f4 23 4b d9 ee 76 ff 00 0f e1 d5 fc 1f f0 c6 f1 b5 58 2d ad 92 da 23 73 a5 c1 63 20 69 64 98 bf de 6c 7c dc 00 cb 5c 2e 9f e2 eb 2f 12 5a e9 f7 17 ff 00 6e 59 6c 6e 7c d9 63 8e 4f f5 cb bf 3c 77 8c 73 cd 72 f6 7a ac 7a 95 d5 b6 9d f6 b9 d7 49 b6 b6 0d ba 4c f9 ac fd 70 3d c3 67 da af 69 30 f8 73 c3 f7 17 d7 97 77 97 d7 Data Ascii: nymF&KuxPOOH\|F=>3][7JVmA-Nvs55_nm.~ufr37DF=I4j&#KvX-#sc idl\|\./ZnYln\|cO<wsrzzILp=gi0sw

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.3	49959	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:34 UTC	9318	OUT	GET /cms/api/am/imageFileData/RWwzKo?ver=215f HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:34 UTC	9432	IN	HTTP/1.1 200 OK Last-Modified: Tue, 15 Mar 2022 09:14:41 GMT Access-Control-Allow-Origin: * X-Datacenter: northeu X-ActivityId: 2a685c99-c0be-4dc6-bb9d-28d3dafe3143 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWwzKo?ver=215f X-Source-Length: 613925 Content-Length: 613925 Cache-Control: public, max-age=407165 Expires: Sun, 20 Mar 2022 09:14:39 GMT Date: Tue, 15 Mar 2022 16:08:34 GMT Connection: close
2022-03-15 16:08:34 UTC	9432	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-03-15 16:08:34 UTC	9448	IN	Data Raw: 7b bd 12 e9 b6 7f a8 91 bf 76 ad f7 b6 d6 13 5a dc 24 6c fe 44 8c 8b fc 4a bf 2d 11 ab 19 ab a6 29 52 9c 1d 9a 29 aa 7c d9 a5 d9 8a 97 63 bc 6d 27 94 db 17 f8 b6 fc b4 9b 73 fc 35 ad c8 e5 6b a1 06 ca 46 5a 95 97 6a d2 32 85 5a 62 22 db 4d 65 3b 6a 4e 3a d6 95 8d b4 57 11 b0 93 e5 fe ed 27 2e 55 70 8c 79 9d 8c b5 87 cc 6c 7f 0b 57 a6 78 36 c6 4d 36 d6 22 5b 77 fb b5 cd da e8 71 3b 2e 7e ef fe 85 5d a6 9b 9b 7b 74 4d b5 e6 62 6a 73 2b 23 d4 c3 d3 e4 77 66 cd fe 92 3c 41 67 e5 a3 6d 97 77 fd f5 5c 57 89 b4 3b 4d 2a 48 8d c3 79 52 c7 fc 31 d7 6b a7 dd 6c 93 8a e7 3e 20 68 e2 e2 c6 5b c4 56 69 ff 00 bc b5 c1 46 4e 33 51 6f 43 ba aa 4e 0d a5 a9 c9 6a 57 c9 75 6b 8b 48 97 6a fd e6 fe 2a c0 9a fb 7c 7b 36 af fb 55 26 9f 37 93 0b 01 f7 9a ab 49 1e ef 9e bd d8 45 Data Ascii: {vZ$lDJ-)R)\|cm's5kFZj2Zb"Me;jN:W'.UpylWx6M6"[wq;.~]{tMbjs+#wf<Agmw\W;MHyR1kl> h[ViFN3QoCNjWukHj\|{6U&7IE
2022-03-15 16:08:34 UTC	9464	IN	Data Raw: cb a7 2a 8a 7a a5 3d 52 95 c7 61 88 95 22 a5 48 ab e9 4f db b6 95 c7 6b 11 aa 54 8a 9e b5 22 ae ea 91 53 72 d4 dc ab 10 a4 75 26 cf 96 a4 09 b7 9a 7a af cb 8a 2e 32 34 4e d5 2a c7 f2 d3 91 2a 45 4f ef 52 19 0b 7c be d5 6b 4f d1 75 1d 71 99 74 fb 39 27 da db 77 2f dd ae 93 e1 ce 95 6f 7f e2 25 96 f1 55 ad 60 56 6f 2d bf 89 b1 c0 af 62 d2 af ed b4 df dc 5b 41 1c 4b fe b3 6a ad 79 38 ac 73 a0 f9 63 1b b3 d5 c2 60 95 65 cd 27 64 60 fc 3f f8 73 2f 85 f4 f5 96 e5 bf d3 67 6d d2 2a ff 00 0a fa 57 a4 5b 5b 15 5e 6a 0b 0b c8 af 3e 7d db 8d 6a 23 79 8c a8 ab 5f 1f 5e b4 eb 4d ca 5b 9f 59 46 94 69 45 46 3b 22 7b 6b 37 9b a2 fc b4 b3 69 85 79 fb ad 5a 76 73 49 b5 73 b5 7f dd a9 9a 43 23 72 bf 2d 72 dd 9b 18 b6 f6 12 3b 6f 15 71 6d 8a f0 6b 56 35 4d bc 52 49 18 5e 68 Data Ascii: z=Ra"HOkT"Sru&z.24NEOR\|kOuqt9'w/o%U`Vo-b[AKjy8sc`e'd`?s/gmW[[^j>}j#y_^M[YFiEF;"{k7iyZvsIsC#r-r;oqmkV5MRI^h
2022-03-15 16:08:34 UTC	9465	IN	Data Raw: 76 f7 a9 39 a5 55 f9 ab aa f7 39 6c 47 b7 6d 3a 9e a2 85 14 5c 2c 37 65 2f 97 52 ac 65 fa 2d 49 1d b9 6f e1 a8 73 4b 73 45 4e 52 d9 15 d4 53 aa 56 4c 51 4d 49 13 ca d1 1a 8a 50 36 d4 9b 7d 28 51 4e e2 1a a2 96 9f b7 bd 2e df 9a 97 32 01 8a bf 35 3b 6e ea 77 97 4e 51 40 0c db 4a ab 52 6d db 4e 55 a9 b8 11 ed a5 a9 36 1e d4 be 55 17 1d 88 a8 d9 de a5 f2 e8 65 2b 45 fb 0e c4 7e 5f fd f5 46 da 93 6e ee 0d 3b 6d 17 15 88 f6 fc d4 6d ff 00 be 6a 4d bb 69 76 ad 49 44 5b 7e 5a 3c ba 97 61 a3 66 ea 2e 03 f6 95 6a 76 c1 57 a4 b6 db 50 34 26 be 65 49 1f 49 66 2d b5 c7 d9 b9 35 df f8 67 52 f3 2d d4 ba aa d7 04 2d cc 9c 05 ad 6d 36 ea e2 d5 55 11 97 fd da c2 a2 e6 46 d4 df 2b 3b b9 9a 09 a4 cf cb ba aa 4d 7e 61 93 60 fb d5 45 1f ce 5d e5 be 6f f6 6a ad cd d7 96 d8 dd Data Ascii: v9U9lGm:\,7e/Re-IosKsENRSVLQMIP6}(QN.25;nwNQ@JRmNU6Ue+E~_Fn;mmjMivID[~Z<af.jvWP4&eIIf-5gR--m6UF+;M~a`E]oj
2022-03-15 16:08:34 UTC	9616	IN	Data Raw: fe f9 a9 16 e8 77 a8 b3 2e e8 93 61 56 a9 51 f6 f3 55 d6 e9 19 be f6 da 91 5d 3b 53 02 e2 5c 95 a9 e3 be f2 eb 39 a4 0a b5 1b 5c 01 fc 54 ac 98 5e c6 e2 6a 9b 68 fb 47 9c bb b7 7c d5 82 97 89 d2 af 5b df a2 ae 36 d2 f6 76 1f b4 4f 72 5b 84 91 ba 7c d5 03 58 de 2e d3 e5 7c b4 f7 ba ee 2a cf f6 d0 58 71 fc 55 6a 52 5b 11 cb 19 6e 67 5c 39 5b 86 12 7c ad 50 32 84 6f bf bb fd da 4b 99 bc c9 33 50 6f ec 6b ae 3b 1c 72 7a 97 3e dd b9 70 59 bf d9 aa fb bd ea 25 fb b4 f5 5a a4 92 d8 89 49 b2 cc 72 ec 6d df c3 5d 7f 85 d9 1d 59 f7 2b 6e fe 1a e2 7d ab 6f 41 c4 71 bc e9 2e d7 5a e7 ad 1b c5 9d 14 25 69 a3 d5 f4 dd 72 4b 0b 76 8b 6e e8 a4 ad 58 f5 58 e4 87 78 f9 5b fb b5 ca 68 b7 51 5c c6 a0 fc cc df f8 ed 74 4d 60 89 6f bd 3e f6 da f9 ea 91 49 ea 7b f0 93 68 93 ed Data Ascii: w.aVQU];S\9\T^jhG\|[6vOr[\|X.\|*XqUjR[ng\9[\|P2oK3Pok;rz>pY%ZIrm]Y+n}oAq.Z%irKvnXXx[hQ\tM`o>I{h
2022-03-15 16:08:34 UTC	9632	IN	Data Raw: 20 fe d4 dd fc 54 e8 f5 40 bc d4 ed e1 29 36 e7 76 df f6 69 7f e1 0d 91 a3 c8 9e 9d a0 25 29 11 7f 6c 23 7f bd 52 25 f8 6e 7e ed 0f e1 89 20 db f3 34 bb aa c2 78 75 fa ed db fe f5 2b 44 7c d2 23 5b ef 97 86 f9 69 86 7d dd 6a da f8 7d db 83 43 78 64 bf 56 db 4a d1 0e 69 15 bc e0 dd 69 de 60 6a b4 3c 31 ff 00 4d 5a a0 ff 00 84 7e 55 6f bd fe ed 1e e8 5d 88 cf 17 7a 16 38 64 eb 53 27 87 99 ba cb f3 53 ff 00 e1 1f 3f f3 d6 8b 44 39 99 4e 48 63 4e 52 ab b5 9c 93 72 9f 35 68 b6 92 eb d3 75 4c 96 b2 c7 1e 15 7e ed 52 b2 26 ec e7 5a 37 89 b0 56 ab 49 21 46 e7 72 d7 4a f6 32 3a e3 ca ff 00 81 53 7f b1 43 ff 00 ac aa f7 7a 8a ec e5 7e d4 f0 b6 53 e5 6a 86 e3 56 9e 46 c9 f9 9a ba d6 f0 ed bf 5f bd 52 36 83 67 de 0a 3d c1 73 48 e0 de fa 46 6c 9a 92 3d 50 a7 55 6d b5 Data Ascii: T@)6vi%)l#R%n~ 4xu+D\|#[i}j}CxdVJii`j<1MZ~Uo]z8dS'S?D9NHcNRr5huL~R&Z7VI!FrJ2:SCz~SjVF_R6g=sHFl=PUm
2022-03-15 16:08:34 UTC	9640	IN	Data Raw: 00 0c f6 2b bb f3 52 7f 91 ae 87 85 ac 95 f9 4c fe b1 4e f6 b9 ea db 3d 28 db 5c 85 af c6 9f 07 dd 4d e5 fd ae 78 17 fe 7a 49 01 db fa 66 b5 2e be 23 78 46 ce d5 6e 24 d7 ad 19 19 7e 55 8d 8b bb 7f c0 47 35 87 b3 a8 9d 9c 59 a7 3c 6d 74 d1 b6 a8 69 cb 6e 5b a5 79 2f 88 bf 68 8b 68 77 45 a0 69 8d 72 df f3 f3 77 f2 af e0 83 9f cc 8a e0 ef fe 32 78 ce fb 70 3a af d9 96 4f e1 b6 81 13 6f d0 e3 3f ad 74 c3 07 5a 4a f6 b1 84 b1 34 e3 e6 7d 19 ab 6a ba 67 87 ad fc ed 52 fa 0b 14 fe 1f 31 b6 b3 7d 07 53 f8 57 99 f8 8b f6 86 d2 ec 37 45 a2 58 c9 a8 4a bf f2 de 7f dd 27 e5 f7 8f e9 5e 1b 7f 71 71 a9 5c 34 f7 73 c9 73 3b 7d e9 27 62 ed f9 9a 89 50 6e ae fa 78 18 ad 66 ee 71 cf 17 27 f0 68 76 b2 7c 6e f1 84 9a 87 da d3 50 8e 24 ff 00 9f 65 81 3c ad bf 4e bf ad 66 ea Data Ascii: +RLN=(\MxzIf.#xFn$~UG5Y<mtin[y/hhwEirw2xp:Oo?tZJ4}jgR1}SW7EXJ'^qq\4ss;}'bPnxfq'hv\|nP$e<Nf
2022-03-15 16:08:34 UTC	9656	IN	Data Raw: ef e0 6d aa e5 42 bb 3a 3d 37 c5 86 36 68 e5 fd d6 ef e2 fb ca df 5a e9 6c 2e ac ee a1 e7 ec 9e 63 7d df 98 57 9a c7 6c f7 1c 05 66 ff 00 76 a4 fe c7 9d f7 3f d9 9b 6d 67 28 a7 a5 ec ca 8b 97 6b a3 d1 1a cf f8 7c a5 65 fe f2 d5 b5 b9 11 f9 40 45 b9 7e ed 79 e5 9d ce b1 a2 ff 00 c7 bf 98 ab ff 00 3c db e6 5f c8 d7 47 a4 f8 fa de 46 48 b5 18 3e c7 2a ff 00 12 af c8 df d4 56 13 8b f5 36 8b 5b 3d 0e 82 ea e2 3f 27 7f 95 f3 37 cb f2 fc d4 c8 52 4e bf 77 fd ef 96 ad 5b c8 2e 63 f3 22 96 36 46 fb ac ad fe 14 c5 b8 10 f1 1f cc ff 00 de 6a e6 f6 8e d6 48 df d9 a6 ee d9 65 6d f6 7d f6 db 55 af 35 48 ac 7f d5 c5 b9 ff 00 bc cd 55 ee 2e 5f ef 6e f9 ab 1a 66 79 1b 61 56 66 fe 1f fe b5 54 22 e7 f1 30 94 94 55 92 35 1b 52 b8 9b 87 da db bf d9 a5 4b 97 55 5d ea b5 4d 2e Data Ascii: mB:=76hZl.c}Wlfv?mg(k\|e@E~y<_GFH>*V6[=?'7RNw[.c"6FjHem}U5HU._nfyaVfT"0U5RKU]M.
2022-03-15 16:08:34 UTC	9855	IN	Data Raw: 64 9e 26 69 d9 7f 7b ba 4d 89 b8 0c 90 18 fd 00 cf bb 55 72 28 bd 7a 18 ef 6b 15 2d b5 6b 6b 7b 3f ed 18 b4 f8 20 49 22 75 f3 19 7e 45 62 41 ce 0f 7d dc 0f ce b5 2d ae 6e 6d b4 db e8 af 20 6b 1b 29 6d 82 b3 2c ec cd 26 4e ef 97 dc 93 d3 b0 ed 54 ad ac 27 86 de 5b 9b b9 56 29 e0 57 68 ed 96 40 c8 cc 4e ef 9b e9 8a af 6f 24 97 37 16 d2 d9 ee f3 59 85 cc 52 34 9f 26 f6 3b 5f af 1c 76 15 b5 94 af 6d 89 4d ec cb 97 9a a4 96 d7 12 d9 e8 cd 07 da a7 93 cd b9 58 d4 ec f9 06 d5 51 9e e4 70 6a 9c 8f 7b 0d be a0 74 a5 6b 6b db 69 02 ce b3 b0 66 f5 e7 7f df 04 e7 18 e9 b7 a5 69 78 82 13 0d ad cd fe a0 ad f6 a9 d8 c6 bb 6e 42 6e e7 e4 24 8e fe 82 a2 d3 f7 e9 fa 5e 9e 2f d9 7e db 75 20 58 2d a3 9c 4a ed 93 c6 e5 c6 df 97 da 9c 64 94 2e 95 ff 00 51 34 ef 66 3f 56 d4 a7 Data Ascii: d&i{MUr(zk-kk{? I"u~EbA}-nm k)m,&NT'[V)Wh@No$7YR4&;_vmMXQpj{tkkifixnBn$^/~u X-Jd.Q4f?V
2022-03-15 16:08:34 UTC	9879	IN	Data Raw: 91 f2 d7 36 be 6e 9b 0d e0 58 24 96 e2 e7 fe 5a c1 b1 3c cc e0 93 e8 06 7a 9e d5 a1 fd 83 1a 2b 4e 3c b5 dd 02 6e dc df 75 87 a9 e3 3f fd 6a e7 9a 8f da 65 c6 4f a1 6a fe 1b 78 d6 27 bf b9 8e 56 97 0a 91 c7 19 6f 33 70 39 f9 b9 6e 3f 01 de 99 7f a9 7d 97 4d 68 8e e8 a2 8e 45 8f cc ff 00 64 7f b5 d0 0f d2 ab 3e b1 6f 35 e4 08 ff 00 69 9e 5f 2c af de dc 92 31 e0 0f c7 b7 35 46 e2 13 73 71 3c 6c cd 1f 9f 19 59 15 a4 d8 bb 17 19 1b 7a fb 0a 98 c2 fa c8 6e 5d 89 95 e2 9a 49 45 b2 ff 00 cb 37 f9 9b 3b b7 7f b2 c4 73 c8 e5 bb 53 ae 26 4b 5b 59 60 92 05 5b 36 90 2c 6a d8 6d d2 0f 98 f6 cf 3c 12 6a 9d bd 8c a9 35 b4 be 54 91 5b c6 af 14 91 f0 c8 b8 c6 36 a8 03 27 35 3e a5 7d a7 d9 c2 d7 06 76 96 f2 ea 52 b1 af f1 6d c6 dc 28 3c 60 7a d6 96 4d a4 b5 23 a5 d8 b6 f6 Data Ascii: 6nX$Z<z+N<nu?jeOjx'Vo3p9n?}MhEd>o5i_,15Fsq<lYzn]IE7;sS&K[Y`[6,jm<j5T[6'5>}vRm(<`zM#
2022-03-15 16:08:34 UTC	9918	IN	Data Raw: 71 57 7c 33 ae 5c 5e 2d e4 57 6b 3f 9a b1 99 17 cf f9 57 6b 73 85 ef 9a 6d b5 1e 7b 26 16 57 4a e7 51 0d c9 b9 6d 9f b8 95 59 47 9b 72 df 36 e7 1d 73 cf fe 3b 4e 6d 5b 51 86 d5 92 25 fd d4 5b 23 56 da 7d 4e 70 07 7f 4a f3 eb 8b c1 6f 79 3d a5 9c f3 c4 f6 cd e6 33 47 6c 76 ef 23 3f 29 24 8e be d5 d9 ff 00 c2 41 3a fd 9a 2b 79 da 26 65 f3 24 59 e4 76 f9 4f 39 3e ac 7a 01 53 29 72 db 41 46 3c db 33 5a 6b 1b bb 9b 79 e5 75 fe 1f f5 f2 30 de bf 52 6a a3 d8 25 e5 bc 52 45 73 1c ed c3 79 8b 96 dc 83 af ff 00 ae b9 a7 f1 b4 ef ab 35 9c 71 37 90 d9 55 6b 95 d9 e5 be 0f ca c7 9c 93 db 8a b3 37 8a 6d b4 ad 5a 0b 29 7c c5 97 6f ef 1a 36 de bb 7b 05 20 7e 94 d7 3a 48 56 46 fc d6 b0 5a b4 12 3e e9 55 94 ab 47 f7 7a fd 6a 44 b5 b7 b3 93 7b ac 8c b1 a9 68 e4 9f 1f 2a f4 Data Ascii: qW\|3\^-Wk?Wksm{&WJQmYGr6s;Nm[Q%[#V}NpJoy=3Glv#?)$A:+y&e$YvO9>zS)rAF<3Zkyu0Rj%REsy5q7Uk7mZ)\|o6{ ~:HVFZ>UGzjD{h*
2022-03-15 16:08:34 UTC	9950	IN	Data Raw: c7 24 8d f7 97 db b7 7e 4d 47 1f 8a 35 7b 19 2d 84 53 b4 ad 1c 47 f7 0d f3 2a ae 3f 21 8a c9 92 4b bd 3e c7 64 8d f6 c9 65 c3 49 b5 be 68 d4 f1 b7 da a3 b6 b0 bc d3 6e b0 ac d2 cb 3c 61 b7 37 de db d4 0c 0e 7a d6 9e c6 9d 9d d2 ff 00 32 1c e7 7b 5c b8 9e 28 d6 35 06 82 79 2e 64 59 24 cf 99 b7 09 d3 bd 4f 7f ad de 4d 22 cf 73 7c b3 dc aa ed f3 17 e6 f9 05 67 b4 37 17 3a a7 11 6d b7 5c c9 e6 37 dd dd 8c 75 aa 49 6b 1b ea d3 c9 e6 c9 29 8d 4f 97 1a af c8 cd 9e 39 ef 54 a9 53 dd 24 89 72 9a ea 4a 9e 27 b8 49 3e cf f6 96 64 56 2b e4 7f b4 7a f5 e9 59 8f ae 4f 75 fd dd aa df bc 5f bb b9 bd b1 5b 16 7a 3d 9a 6a 1b 22 9e 3d ef 30 69 27 9d 83 22 a8 19 c1 fa d5 59 16 ce 19 25 ff 00 4c 58 1a 46 f9 9a 38 77 2e d1 e9 5d 11 54 ef ee c4 c9 f3 bd d9 04 92 4b 2c 2b 20 6d Data Ascii: $~MG5{-SG*?!K>deIhn<a7z2{\(5y.dY$OM"s\|g7:m\7uIk)O9TS$rJ'I>dV+zYOu_[z=j"=0i'"Y%LXF8w.]TK,+ m
2022-03-15 16:08:34 UTC	9974	IN	Data Raw: 9d 08 b8 9b 53 d2 c4 0c b7 4a bf 61 81 ad 99 22 49 1c 72 87 0c 7b 2d 65 59 f8 4f 4e d0 2e 2c ec 2f 34 c5 59 65 cb 2a fd ac 5c ad c5 c4 7f c2 e4 74 e7 f8 6a 1d 56 d7 51 8f 52 8a ef 57 bc 59 ec a7 8b cc 5b 98 fe 55 59 31 f2 af 23 39 0b ed 5a 6b e1 7b 9d 17 fe 27 1f 66 93 53 55 6f 2d 9a 79 53 7c 79 00 f9 bb 7d b3 93 4b 9b 97 ed 68 fb 5f 7f 5d 01 2b bd b6 fc 8c ef 13 6a 9a 8d 87 d9 b4 b9 74 86 8b 54 8e 41 24 71 e9 ed b9 61 87 3c a8 23 a3 75 f5 c5 47 71 aa 5e e9 ba d3 69 7a b5 b5 dd f5 bc ad e6 b4 91 dd ee 68 d0 f3 86 6e 07 1f c8 56 86 b7 74 2d a6 65 b6 9f cf 95 59 16 7d 4a 0f 97 ef 60 e0 8c ee 3f 9d 65 da c7 71 67 a5 ea 7a c4 eb 26 b8 eb 16 d5 9d ae 7f d5 a0 e1 b2 ac 3e f6 3b 73 8a d6 1c ae 0a eb fe 1f f4 26 57 52 d1 9d 46 87 e1 38 f4 fb c5 d6 22 9e 48 9a 08 Data Ascii: SJa"Ir{-eYON.,/4Ye*\tjVQRWY[UY1#9Zk{'fSUo-yS\|y}Kh_]+jtTA$qa<#uGq^izhnVt-eY}J`?eqgz&>;s&WRF8"H
2022-03-15 16:08:34 UTC	10016	IN	Data Raw: 83 fb 3f 45 9f 55 bd be cb 47 24 8c 5d 15 bd 4a 0e 06 2a ed f6 a0 6e 34 39 e7 95 fe c3 61 13 05 93 c8 b6 1b 19 87 2c c0 9e 54 66 ba 65 cd 25 14 a4 ed 7d 2e 44 22 b5 6d 23 e7 25 8e 76 5e 17 72 d4 b6 d6 1b e6 cc eb b1 3f 8b 77 f7 6b af b5 f0 6d fd cc d2 c4 60 9a 26 58 f7 32 b2 d6 83 7c 3a 96 3b 3f b4 35 cc 72 c0 aa 7c cf 98 fc bf ec f1 de be ea 78 fa 11 d3 98 f9 08 e1 aa 3d 6c 72 4b 75 1d 9c 31 41 e5 7c bf c2 df c5 eb fa d5 88 f5 ab 98 55 8e d5 64 fe 16 6f e1 e6 bb 4d 2f e1 8d dd e5 af 9b 73 3a d8 db fd d5 fd df cd b8 ff 00 bd 54 ec 7c 0f 6d 35 e3 59 ce b7 d2 aa c9 e5 2b 2c 61 51 7d 49 3c 8a e3 96 3f 0f 2b eb 7b 1d 1f 56 ab d8 e6 fc f9 26 69 e7 8f 72 f9 7f de fe 2f 7a 82 ce fa e2 15 59 0c ff 00 33 29 dd 5e 99 a2 78 33 40 1a a5 cc 17 77 91 b4 4a ad 1c 6a d2 Data Ascii: ?EUG$]J*n49a,Tfe%}.D"m#%v^r?wkm`&X2\|:;?5r\|x=lrKu1A\|UdoM/s:T\|m5Y+,aQ}I<?+{V&ir/zY3)^x3@wJj
2022-03-15 16:08:34 UTC	10070	IN	Data Raw: 38 ca d1 ea 75 df 0e 6c 34 3d 3e fb fe 26 32 4f 79 ae 5e 4a 22 8d 74 f6 1b 57 77 f7 77 0e 5b b1 ed 5a 9f 15 b4 ad 3f c3 17 50 5b dc c5 3c f6 4c c2 49 16 0b b1 e7 ab 8f 97 0c 42 90 bc 74 e2 b3 7c 69 e2 a5 f0 ff 00 8b a2 bb b6 b4 5b 18 23 61 2c 52 47 00 57 66 3f 7b 39 1e 94 78 7b 4b d7 3e 29 43 a8 5d cf 2c 6d a7 5b 7c b2 c8 d9 56 6c f4 55 da 0e 5b 1f 95 73 f2 37 35 8a a9 2b 46 dd ff 00 23 4f 76 ce 9c 56 a7 21 73 ab e9 73 6a 56 72 f9 57 6d 6e bf 33 2c f7 3b fe 5f ee 93 8e 80 d7 7f 6c da 1f 8b bc 3b 14 70 4b 79 a8 6a 50 29 9a ee ee e5 8c 48 a9 9e 00 ed 90 3b 55 df 04 fc 3d d2 b5 c9 ae 63 86 58 f4 fb 25 61 23 5c ed 0c f0 a8 07 8f 9c 73 9c 63 8c fd ef 6a ad f1 0b 4a 93 45 f0 9e 74 8f b6 c5 67 e6 96 96 7d a5 52 44 60 02 f6 19 3c 7e b4 55 c4 d3 ab 52 34 69 dd 31 Data Ascii: 8ul4=>&2Oy^J"tWww[Z?P[<LIBt\|i[#a,RGWf?{9x{K>)C],m[\|VlU[s75+F#OvV!ssjVrWmn3,;_l;pKyjP)H;U=cX%a#\scjJEtg}RD`<~UR4i1
2022-03-15 16:08:34 UTC	10091	IN	Data Raw: 55 df b1 59 7d f7 1e d5 a9 a5 dd 69 9e 00 bc 6d 18 ce b2 de 73 e5 ce d9 6d ac c7 b7 5c 1a 8f 58 86 3d 2b c3 ad a8 dd 6a bf e9 1e 64 32 6e 8e 0f 97 80 4a 2f a9 01 be 63 4c d2 b5 5f 0c 78 a3 54 b3 41 a4 4e da b7 92 92 4e d7 39 4f 99 4e 72 c7 b2 f4 23 1d 7a 52 76 74 f6 7c ab b7 7f 32 6e b9 ae 9e a5 fb 5f 0d e9 5a 7d d5 9c b6 d3 cf 79 7b 3c b2 45 7b b5 be 56 c9 56 6c 03 d1 47 f7 aa d5 bc 72 78 63 c2 ba 86 a1 69 2b 4b 71 74 ce d2 fd a6 4d cf b0 67 80 7b 28 1f 9d 5f bc b1 48 e3 bc bc 8e e6 38 35 69 22 fd d2 aa fe ea 18 f3 9c fb b1 ea 6b 9c d0 f4 5d 3e fe e2 2b dd 7f 50 be bc d0 e2 bb 7f 2a da 75 28 db 78 3c fa 82 77 71 e9 5c aa 5c eb 9a 72 ed e7 7f 23 6f 87 44 b5 2e 43 a4 da 36 87 62 63 58 e7 82 39 c5 f2 fd ad 7e f2 f5 27 6f 6f 61 54 7c 54 9a a7 8e 34 9f 32 da Data Ascii: UY}imsm\X=+jd2nJ/cL_xTANN9ONr#zRvt\|2n_Z}y{<E{VVlGrxci+KqtMg{(_H85i"k]>+P*u(x<wq\\r#oD.C6bcX9~'ooaT\|T42
2022-03-15 16:08:34 UTC	10107	IN	Data Raw: a9 6e cc d1 6d f9 77 7f 0d 09 a7 99 95 a3 95 95 7e 5d b5 bd 38 b6 ac 43 ee 55 86 69 fe d5 11 8a 2d cd b4 48 db 6b 4f 47 99 17 54 f3 4c fb 77 36 ef f6 b7 76 a9 6d f4 f8 f4 fb 39 64 0a ad b9 76 f9 8b fd da a3 67 ad 88 2e 1a 2f b3 47 b7 69 f9 9b ef 7d 72 2a f9 dc 66 d2 e8 2b 1b 9a e6 c6 ff 00 47 49 d6 77 93 0c db be f5 53 bb be 88 4d 05 bc 9f eb 57 0d 1c f2 7c db 98 ff 00 41 54 21 d4 2e 6f 26 d9 04 0a d3 c9 fb bd b1 ae e6 fb d5 1d fe 93 73 0e a4 b1 4f 02 cb 70 bf 32 fe f3 72 2a fe 15 c7 f6 bd f7 a9 77 64 b7 d3 17 bc 5f 22 f3 cf 55 5f 99 7e ee e6 f4 fa 55 79 2c e5 6e 1f 74 71 6e 5d df 37 dd fc 2a c7 d9 a4 b3 93 7c 9e 44 52 c8 c1 59 56 4f ba a3 d4 55 7d 79 fc 9f 21 cc 13 c4 b2 b7 cd 24 b9 f9 bd 6a a3 d9 08 91 b1 79 1e 63 68 d9 17 fe 5a 4b f2 ae ef 6a 9a da 4f Data Ascii: nmw~]8CUi-HkOGTLw6vm9dvg./Gi}rf+GIwSMW\|AT!.o&sOp2rwd_"U_~Uy,ntqn]7*\|DRYVOU}y!$jychZKjO
2022-03-15 16:08:34 UTC	10123	IN	Data Raw: 91 ac 92 a3 7d e5 8f 2d f8 7b 71 5d f4 d2 e5 6b a1 cf 3d ee 76 57 fe 19 b2 d2 bc 27 6d ae 5c 2c 9f da 32 aa b2 fe f0 77 3c 63 d0 e3 1d ab 0f 45 d6 22 b1 d7 27 b9 bb 59 ef 3c cb 47 56 56 f9 9b 7e 39 27 fd 9a de b6 d5 6d 3c 41 6b a6 68 77 eb 24 70 79 af f3 2a fc d1 e0 70 a0 9c 67 b7 15 89 23 d9 68 3a b6 a2 fb 5a 76 68 cc 70 ed 90 32 aa b0 e7 a7 5a c6 17 69 c6 6a ef f4 29 bd 53 8e 88 d3 be d5 2d a1 f0 ee 8b 71 6e d2 35 bc 4d b6 78 3e ef 99 20 39 07 fc f6 ac 87 d5 2e 6e 26 9e f4 59 f9 f0 6f 2d 2e d8 fe 58 d8 fb 8e f4 58 eb 6f 37 85 ed ac 06 d8 92 39 0f fb 2c d9 3d 4d 56 7b 8b 88 6d 6f 20 8e e5 a2 f3 24 49 24 8d 7e eb 7f fa ab 48 53 e5 4d 5b fe 18 99 4f 54 77 de 21 91 fc 3f a6 d9 df e9 f6 d0 2c 17 91 6d 92 2d bf bf 91 1c 75 6f c6 b8 bd 2f c3 ba a2 47 16 a1 16 Data Ascii: }-{q]k=vW'm\,2w<cE"'Y<GVV~9'm<Akhw$py*pg#h:Zvhp2Zij)S-qn5Mx> 9.n&Yo-.XXo79,=MV{mo $I$~HSM[OTw!?,m-uo/G
2022-03-15 16:08:34 UTC	10131	IN	Data Raw: 6c 7e d3 2d e5 cb 37 99 e5 2b 48 a3 72 b0 1d 71 f5 ae 69 56 8c 6d ca ca 51 b9 91 e5 da 5b 5e 79 4b a8 6d f3 1b e6 6f 2f f4 14 9a b5 bd a4 9a 86 67 95 a0 89 7e f2 fc bb ff 00 0f f3 c5 6b c7 75 e1 f9 ae a0 92 fd ae 6e 5e 26 f3 17 76 36 e0 76 20 7e 75 5e c7 49 d1 3c 45 aa 4f 24 97 2d 6c bf 3b 79 ed f7 57 3d 07 f8 52 f6 9a dd dc 7c bd 11 9b 6f a8 69 56 cb 3c 0f fb ff 00 33 fd 5b 37 f0 fd 4d 45 e2 0d 4a c6 e3 4b 8a 08 22 91 9a 3f e2 e7 77 5f 5a d8 8d 74 2d 06 c6 74 96 05 b9 ba 66 f9 64 6c 36 d6 1d 30 4f f2 ab fa 4c 76 fa d2 a9 8b 4c 92 f2 78 63 f9 63 83 7b 34 8f db 85 fe 1a 89 55 8c 3d f6 9d 91 6a 9b 7a 1c 7d b4 37 f7 0d 8b 6b 36 55 b9 6d aa cd f2 ad 6c cd a3 a4 7a 6c 16 52 79 0b 7e b2 7f ac dd f2 ed 3e f5 e8 16 7e 1d 4d 56 fb 43 d3 de c6 4b 4b a9 e5 11 ee b9 Data Ascii: l~-7+HrqiVmQ[^yKmo/g~kun^&v6v ~u^I<EO$-l;yW=R\|oiV<3[7MEJK"?w_Zt-tfdl60OLvLxcc{4U=jz}7k6UmlzlRy~>~MVCKK
2022-03-15 16:08:34 UTC	10147	IN	Data Raw: 18 1c fc d8 ff 00 1e d5 ca fc 1f b8 b4 be 65 d2 25 97 cd fb 64 a7 74 72 28 fd e0 e3 df e6 ff 00 f6 6b a7 f8 c9 ff 00 12 ab c8 b5 4d 22 28 34 f7 b3 fd dc 5b 54 22 f9 68 81 42 ed c7 6f 9b 83 5e 4c a9 28 e2 7d 8c ae df 46 f6 fe ae 75 29 7e ef 99 1d 37 8b 7c 7f 1d cd aa 8b 76 92 75 92 d1 3d 59 a3 c0 2a a0 e7 91 bb 3d c0 35 e6 da 25 d5 be b1 aa 4b 6f 73 ff 00 12 f8 96 29 24 f2 fc bd c8 d2 7f cb 38 f2 d9 db 92 39 63 cd 79 e5 b6 a1 a9 5c 49 15 c4 32 c9 bb 71 66 65 6d bb 5b a9 34 92 3d e5 8c 9e 7b ee 9e 59 3f 78 cc df 36 ee 78 cd 7a d4 b2 d8 d1 83 8a 91 cd 2c 47 3c 93 b1 f5 27 db e4 be b1 8e ef 59 82 da f2 7d 56 db ec 31 36 dd de 4a 94 f9 62 cf 25 88 ca f7 c9 ae 1f c2 37 3e 1c d7 bc 65 16 89 71 a2 db 5c c5 6d 1f ee d6 48 02 ab 32 02 cd bc 9c b1 c3 67 bf b5 52 d5 Data Ascii: e%dtr(kM"(4[T"hBo^L(}Fu)~7\|vu=Y*=5%Kos)$89cy\I2qfem[4={Y?x6xz,G<'Y}V16Jb%7>eq\mH2gR
2022-03-15 16:08:34 UTC	10163	IN	Data Raw: 6c a1 7e cd e6 16 49 b6 90 71 9e d9 ad 2d 17 c5 9a 65 bf 8b a2 b8 78 15 57 fb 4a 4b 95 68 23 fd fa ab 8e 63 19 e3 02 b5 2e 74 79 f4 bf 85 f6 70 4f 13 45 aa 2c ef 2c b1 f1 ba 3e 7e 52 3d ff 00 d9 af 3e d2 53 64 df 6e 8b 72 ce ac 76 b4 9e fc 75 f5 e6 b8 e1 cb 88 8c af e6 8d 79 a5 4d a4 77 37 da d4 1a de b9 73 e1 bb 38 a4 7b 7d 62 ee 35 6b 96 63 bb 69 3f 7b f0 15 4b e2 bd c0 d2 5a c7 4b b4 5f 97 45 5d bf 2b 7c bf 7c f5 f5 aa 3f 0f 61 16 fe 30 b1 b9 92 56 67 da 2e 5b e5 3b 63 8c 64 b6 7d 4d 45 e3 8d 52 46 d7 96 3b 7b 6d d2 ab 06 55 6f 9f 72 f5 cf f8 fa 54 c2 9c 61 59 46 1b 25 7f d3 f2 1b 93 71 d4 e8 5f c7 e9 a8 69 7a 29 46 59 e5 92 41 1c f1 b7 f0 ee 21 47 e5 da 8b eb 5d 39 b5 a5 b3 8b 6b 34 ac 55 5b fd af 4a e5 a6 9a e2 d7 50 6b db b7 b6 8b ca 90 6e 68 3e 57 Data Ascii: l~Iq-exWJKh#c.typOE,,>~R=>SdnrvuyMw7s8{}b5kci?{KZK_E]+\|\|?a0Vg.[;cd}MERF;{mUorTaYF%q_iz)FYA!G]9k4U[JPknh>W
2022-03-15 16:08:34 UTC	10171	IN	Data Raw: ba d5 86 a9 71 a5 c0 f6 b2 df 5c ea fa bc 89 27 fa 5c ff 00 ea e4 39 5f dd e0 60 7c bf c5 82 71 f9 57 03 37 8a 35 8f 09 f8 82 5d 2b 54 d7 bf b5 74 48 e6 16 97 33 aa fe fe 15 eb f2 7a 13 8e a2 ae 78 b3 c5 9a af 88 75 68 86 81 a6 35 cb 5b 28 82 05 92 43 ba dd 7b 48 17 00 0e a3 e6 fc e9 2c 35 65 28 38 da db dd 6d 6f 3b 87 b4 5a ee 76 de 1f 58 bc 31 f0 fe f2 3d 52 2b 9d 29 6f a7 db 3e 9b f6 b3 ba 38 57 a0 89 98 e5 72 c7 71 3d fb d7 3b e3 3d 52 08 74 fb 4b 4f 0f 68 77 d2 d9 34 a2 48 ef a6 80 ca cc fe bb fe f6 7f 11 55 7e 30 24 7e 22 5f b0 1d 4e 7f ed 2b 59 44 12 dc b4 7f e8 d0 c7 d9 78 19 dd f2 f6 c5 6e 78 4b c7 f6 de 1d f8 6f a8 78 7a e7 4f 9f 53 ba 93 cc 8e ce e6 48 03 b7 28 73 1e d1 df 8d c5 ba 8f ca aa 9d 39 f2 aa ed 5e 4d ed b2 f5 f3 f9 94 e6 9f b8 f4 45 Data Ascii: q\'\9_`\|qW75]+TtH3zxuh5[(C{H,5e(8mo;ZvX1=R+)o>8Wrq=;=RtKOhw4HU~0$~"_N+YDxnxKoxzOSH(s9^ME
2022-03-15 16:08:34 UTC	10187	IN	Data Raw: da 77 b4 bb 5b a6 7d bd 2b c2 1b 54 9d e6 5b b7 b9 91 67 81 84 90 33 7c db 5a ba 8d 2b c7 16 77 1e 20 5b 8d 76 f2 7b ed 35 54 fe ef cb f9 e4 63 d0 64 1e 80 f3 5e 26 23 2f f7 b9 a2 af 1d f9 7c ce 88 d5 e8 f7 22 d6 ad a3 ba fd f1 bc 9e da e2 3c b3 6e 62 fd 4f 01 7d 30 2a 85 d7 88 35 d9 a1 58 22 96 49 ed 62 fd e2 ab 7c cb b8 f5 3c f5 ab 77 da f6 85 7f ac 2d e1 69 e0 46 62 d3 c1 c2 2c 9c f0 a8 00 3b 7d cd 6f 2f 86 f5 0d 7b 47 5b b8 20 8f 4c b5 97 1e 45 de a1 72 53 72 9f ee 2f 39 1e f8 ae c5 52 34 63 15 55 5b d4 8e 57 2f 84 cc f0 f3 dc eb 70 cb 7b ae 78 8d b4 c8 a2 6d ca be 61 f3 5b bf ca 33 c6 3d eb d0 af bc 43 e1 7f 0c f8 3e db 4c b6 82 0d 56 fe e9 4c 8d 24 8c 27 db bb d5 9f bf 15 e5 9a d7 83 4d 85 ad e4 d3 df 5b 6a 13 c3 27 95 e4 5b 36 d7 dd fd e3 91 ca d5 Data Ascii: w[}+T[g3\|Z+w [v{5Tcd^&#/\|"<nbO}0*5X"Ib\|<w-iFb,;}o/{G[ LErSr/9R4cU[W/p{xma[3=C>LVL$'M[j'[6
2022-03-15 16:08:34 UTC	10203	IN	Data Raw: 1c a9 3c 91 ac 9e 52 2a e3 85 00 e4 6d 35 3f 88 7c 61 a4 58 e9 77 c2 5b 3d b2 c5 6d f6 28 e3 69 0f dd 20 0e a7 e6 24 fb 56 0a ad aa 5b 0f 7d 77 fc 36 14 a3 7f 7a 47 cd ba d5 84 57 5e 3e bc d4 34 c6 be f1 1c 11 ce 92 49 76 d1 ec 56 77 20 00 c1 7e ee 4f cb d6 bd db c4 92 78 d1 3c 51 a5 68 7a 7a c7 79 71 3d b1 6b b9 ed 24 30 5b 43 b4 1d c0 96 e0 85 53 f7 b1 e9 ed 5c ef 84 bc 7d a1 78 1a 49 f4 7d 2a c5 af ad fc d1 73 f6 e6 90 7c ca 70 46 ef f7 4f e9 5d 17 87 ee 6e ed 75 0b ef 12 ea 1e 21 6d 23 4d 91 66 8e c9 97 67 fa 54 8c 83 72 b1 23 25 07 f7 7d 56 bd 4c 55 49 d4 69 d4 8e 89 59 5f 56 ef b6 86 34 d2 4b e2 f5 28 e9 3e 19 d7 7e 25 5c 6a 76 9a c7 99 a5 41 a3 c6 9e 7d f3 28 d9 22 00 36 91 c6 e9 77 0f 9b 24 81 8f 4a 93 4a f0 4f 83 fc 3f aa 58 de 6a 9a 9d 8e b9 7f Data Ascii: <Rm5?\|aXw[=m(i $V[}w6zGW^>4IvVw ~Ox<Qhzzyq=k$0[CS\}xI}s\|pFO]nu!m#MfgTr#%}VLUIiY_V4K(>~%\jvA}("6w$JJO?Xj
2022-03-15 16:08:34 UTC	10211	IN	Data Raw: d1 6d 37 79 91 8e 47 cd b8 95 61 d8 8f ca bf 02 af 4f 11 4e a4 dc b7 fe bf 43 ec 23 84 93 8a 70 49 a3 e7 cf 16 78 55 3c 7d f1 03 41 b8 b2 b3 6b c9 ec d5 23 fb 35 a4 61 be 60 70 a0 9e 37 91 8d c7 d3 d4 57 a9 e8 7e 0c be d2 bc 3b e6 f8 ae 56 8b c4 17 57 29 22 db 5b 61 9e 34 07 2b 19 6e 98 f5 c7 e7 53 7c 3f b3 9f c1 be 30 57 82 55 fb 3c b1 ba b4 ff 00 c4 d9 e7 af f7 b3 e9 db 8a 8f c4 d1 a5 f7 8e 22 40 df 69 82 2d f2 b3 36 7e 6e ac 0a f6 fa d6 33 c6 3a b1 8d 24 fd d4 73 46 0a 17 7d 4e 7b c6 9a e5 c7 85 6f ac f5 7b 95 db a7 33 18 99 59 93 e6 42 7e 51 b4 67 2b df 3c 0a f2 4f 10 fc 75 d5 35 eb c6 d2 bc 3f 63 f6 6b a9 27 f9 5a 3c 79 b2 60 f0 aa 00 ef 5e ef e2 1f 09 3f 88 34 fb 18 2f f6 c9 7f 1a cd ba 0f 30 ed 8f 72 71 19 20 86 04 64 31 cf 5a e5 be 1b e8 ba 27 c3 Data Ascii: m7yGaONC#pIxU<}Ak#5a`p7W~;VW)"[a4+nS\|?0WU<"@i-6~n3:$sF}N{o{3YB~Qg+<Ou5?ck'Z<y`^?4/0rq d1Z'
2022-03-15 16:08:34 UTC	10227	IN	Data Raw: cb fe cd 4c b3 0d d8 0d f7 bf af 06 b3 28 9f cc 31 c8 df de 55 fb bb 7e 9f d7 f9 d4 91 cc 5d 72 57 76 df f3 fd 6a 13 f3 72 59 77 7d d6 dc de d4 34 c9 b9 a3 2b f2 af dd da de d9 ff 00 eb 54 14 5d fb 4b ff 00 c0 77 7f 0f bd 3e 39 9d bf 8b 6d 54 5b 84 db 8d ca ad ff 00 7d 53 e3 b9 5d dc 7c bb 9b 6f e7 53 6e c5 96 a4 b9 91 15 8a 7d ff 00 ba cb cd 3f ed 3f 74 8d cb 55 52 4d ab fd ed bf 7b fd d2 29 1d 77 c9 cb 6d 56 6d ca cb f7 7d b3 52 32 f3 5d 48 93 23 86 dc 8a bf 36 ef 96 9d f6 a3 f3 01 f2 ee c3 7c cb 55 54 86 8d 80 6d ad c3 6d 66 f4 ff 00 eb d2 ab 6e f9 3c dd ab fe d5 4d 90 cb 9f 68 49 9b e4 55 8b e5 f9 a8 69 82 7f 12 ee fb bf dd aa 4a d1 be f8 91 76 ed c6 e6 a5 91 cc 73 28 2a ad bb ef 6d fe 16 a6 2b 96 e4 72 fc 0f bb bb f8 9a a0 9a e0 47 36 cf bb f2 fc ca Data Ascii: L(1U~]rWvjrYw}4+T]Kw>9mT[}S]\|oSn}??tURM{)wmVm}R2]H#6\|UTmmfn<MhIUiJvs(*m+rG6
2022-03-15 16:08:34 UTC	10243	IN	Data Raw: fb 34 1a 63 2d e3 c5 2c 92 48 ad 3e e9 64 41 80 db 03 02 a7 0b cf 24 1a b3 e2 ab f9 5e ea 5d 1a 7b c8 e7 b3 f3 1e 48 fc fb 26 8a 78 59 4f 0a 1b 03 76 6b 87 f8 63 f1 13 50 f0 0e a5 2c 7a 2e 99 f6 6b 5b a8 cc 73 b5 da fd de 31 c6 79 1f 85 74 96 1a 95 e6 a9 aa 36 a1 ad c1 1d e3 5b 6e 58 59 57 f8 70 30 78 c1 3c 57 5d 6c 44 3e af ee e9 2d bc ec 73 59 c6 56 65 3f 16 6a 91 d8 f8 7e 0f 31 99 43 7e f1 56 45 da dc f1 cf 51 8a 4f 0d ea 10 5d 5a af ca d7 8a d1 95 76 8d 8f ef 17 b7 cc 70 07 3d aa 87 8a 92 4f 11 69 7e 64 76 cc a8 ca 5a 38 15 be 5e 0f 27 9c 55 af 0c cd 72 b6 b0 18 6f a3 8b ec d2 6d f2 ed 9b e5 5e 78 1d 3e f7 e7 5e 25 25 cb 1f 33 69 6c 3a 4b 5d 43 49 ba b1 96 49 63 89 ed 60 1e 44 10 47 bd 2e 3a e4 39 ec c3 3f 7a ad fc 50 d5 6c e4 d4 b4 f8 1e cd 62 bb 58 Data Ascii: 4c-,H>dA$^]{H&xYOvkcP,z.k[s1yt6[nXYWp0x<W]lD>-sYVe?j~1C~VEQO]Zvp=Oi~dvZ8^'Urom^x>^%%3il:K]CIIc`DG.:9?zPlbX
2022-03-15 16:08:34 UTC	10250	IN	Data Raw: 02 5d b0 83 b8 6d 0f cb 79 9c 7c d8 e0 0a e4 7c 41 7d fd a9 e2 a8 a5 49 74 fd 2a 28 ff 00 78 bb a2 2c ea c0 75 2c a0 e7 a7 4e 6a c2 fc 50 d7 75 4d 35 63 bf 59 35 0b 5b 59 37 45 6c aa 15 59 01 e4 e4 fd d0 7a 7f b3 da b4 51 75 23 a6 df 71 95 d2 3d ee e3 c6 d6 f3 78 76 e6 ed 2f 9a db ed 79 5b 6b 48 d4 32 b2 e7 18 23 8e bc 70 2b 8b f1 c7 89 2d 7c 43 79 06 81 a8 d9 da 69 97 0b 11 92 36 b6 c4 5f 29 c7 ca d8 f9 53 27 af b7 26 b8 2f 1c 4d aa 78 ca 1d 3f 51 9e e7 4f b6 d2 e7 94 cf 16 9f a7 dd bc af 6e 83 b1 0e 32 31 ea 6b 22 da f2 7f 13 df 34 1f 66 82 07 dc 27 5f 31 87 da 2e 14 7d e3 93 c7 4e 42 b5 79 d0 a4 b4 9d ec b5 bf 91 72 a9 26 7a 1a 7c 45 f1 a5 ce b9 a5 78 6e db 48 8d 65 96 3d bf 64 8d 83 5b 6d 00 fc cb b7 ee ae df 9b 1c 0a b7 f0 6f c7 16 77 5f 13 b5 3d 42 Data Ascii: ]my\|\|A}It*(x,u,NjPuM5cY5[Y7ElYzQu#q=xv/y[kH2#p+-\|Cyi6_)S'&/Mx?QOn21k"4f'_1.}NByr&z\|ExnHe=d[mow_=B
2022-03-15 16:08:34 UTC	10266	IN	Data Raw: 32 47 ec da ac 02 b5 30 a4 8c b9 fb 8b fd da 63 cd 2b 47 82 bf eb 3e eb 7d de 9d 70 29 df 67 92 48 e5 2b 17 ca 98 69 3f 8b 8a 99 55 84 55 e5 2b 20 e5 6f 64 31 98 6e c0 db ba 98 7e 69 32 bf 32 d3 ee 2d e7 4b 19 6e 67 56 5b 78 f1 b9 be a7 da ab de 48 9a 6d af 9b 72 cb 02 6e 0b f3 7c dd 7a 74 fa d6 6f 13 46 37 bc d6 8e db f5 1f 2c 9f 41 ec bf 77 e6 5f 97 f8 76 d4 6c cf f3 13 ff 00 c5 53 9e c6 ee 68 fc c1 e5 ac 4a c5 77 34 9f 2e e1 e9 56 ed b4 32 97 d6 d1 4f 3c 0a d3 a9 93 6f 99 b9 ab 1a b8 ec 35 14 dc e6 b4 f3 ed a8 e3 4e 52 76 48 a0 b3 33 f3 f7 47 fe 3d 43 31 6e bb b6 d5 7b cb cf ec fd 26 0b 89 17 ec d7 53 31 6d ac a5 93 62 f2 7a 74 e3 d4 f5 aa be 1d f8 87 a0 6a 13 29 bb 95 96 78 d9 fc cb 66 c2 7c a0 75 cb 1f 5e b5 e7 2c f3 05 28 ca 51 93 76 f2 df d0 d7 ea Data Ascii: 2G0c+G>}p)gH+i?UU+ od1n~i22-KngV[xHmrn\|ztoF7,Aw_vlShJw4.V2O<o5NRvH3G=C1n{&S1mbztj)xf\|u^,(Qv
2022-03-15 16:08:34 UTC	10282	IN	Data Raw: 96 3f bb 1f de 66 fa d6 25 e5 f1 fb 2c 51 46 ad bd be ec 8d fa d7 45 f0 df c2 f7 3e 3f f1 25 b6 85 13 79 1b b7 49 3c ed 86 55 8d 7e f3 52 72 8d 3a 6e a5 47 a2 dc a8 a6 f4 45 7b 5f 23 ce 95 67 f9 9a 4f 97 73 7c aa a3 fc 4d 67 df 59 84 bc 59 7e 59 6d d5 8e d5 fe 2a bf 71 e1 9b fb cd 43 50 b6 b4 db 2a 59 ee 66 93 fe 7a 00 70 31 fe d1 f4 af 63 f8 17 f0 a6 e3 4f d5 b5 0d 4f c4 9a 63 6f d3 e2 0c d6 d7 6b bb 6a ca 99 8e 44 ea 19 b8 21 94 f4 06 bc fc 4e 32 8e 16 0e a3 77 7d 8d a9 d2 9c 9d 99 e3 7a 3e b1 2d bd bb 5c c0 aa ad 13 6d 56 66 db b7 e9 57 b5 5d 2f c4 7a a6 8e d7 b0 58 df 5f 58 44 a2 59 6e 6d a3 77 8a 3f 52 cd 8c 0c 77 ae a7 e2 67 c2 bb fb 5d 7a 7b 8d 0f 4f 68 34 8b a9 fc b8 bf 78 3e 67 38 3c 0c f7 cf 61 5e d0 9e 3c 1e 06 f0 9d b7 81 e5 66 df 1e 9f 1a b2 Data Ascii: ?f%,QFE>?%yI<U~Rr:nGE{_#gOs\|MgYY~YmqCPYfzp1cOOcokjD!N2w}z>-\mVfW]/zX_XDYnmw?Rwg]z{Oh4x>g8<a^<f
2022-03-15 16:08:34 UTC	10290	IN	Data Raw: f3 6d c7 a6 7b d6 36 9e b7 ad e6 cd 6f fb d4 8f e6 66 65 ff 00 57 d8 9a bf 34 29 1d ba e1 96 79 76 ed 5f 9b 77 cb e9 f8 57 47 2e b6 b9 8b 3a 97 f1 0e 93 a7 e9 37 96 f3 c4 df 68 91 86 df 9b e6 64 23 18 c0 f6 ef 54 34 3d 69 34 7b a6 d9 67 6d fb f6 f2 e3 91 54 6f 55 ed cd 72 f1 c9 64 d1 ca f2 3e db 8d db 76 ee dd d2 b4 ae 6e 3f b4 ac e0 47 8b cd 76 61 22 af 99 b5 95 3b fe b5 2a 9a 8e 8b a8 49 69 a9 ed de 19 b7 7b 8b 38 a0 b9 55 82 09 58 b4 8a d1 85 f9 7b 6d f4 cd 3f c3 be 26 4d 6a 4f 12 bd ed cb 2c 4b 8d d6 cc db 7e 5f 5c fd ee 3a 01 5e 6f ad 78 c2 0b ab 5d 32 da 35 96 ce 78 94 2c b7 32 4f f3 2b 83 f9 82 3d 7b d6 ec 3e 28 d2 ef ed 6f ad ec fe c3 3d ff 00 91 1f ef a3 8f 7b 5c 37 f1 13 9e e2 bc 1a b4 2a 59 ca 77 d7 b7 4d 49 8a d0 ea be 1d 5b 1d 57 c5 cd 24 11 Data Ascii: m{6ofeW4)yv_wWG.:7hd#T4=i4{gmToUrd>vn?Gva";Ii{8UX{m?&MjO,K~_\:^ox]25x,2O+={>(o={\7YwMI[W$
2022-03-15 16:08:34 UTC	10306	IN	Data Raw: fc 25 7e 6f 7e b4 e4 f9 74 96 96 48 96 57 56 fb db 4f cc a7 df fc 69 2e 23 3e 5c 52 ef 55 da a5 99 77 7f 11 0d d4 0a ee a7 08 d3 8f 2a 33 b3 69 90 6b 0f 03 eb 11 47 14 51 f9 5b 77 37 55 66 62 7d 6b 43 c5 d6 af 34 6b 71 24 11 c0 be 5f ca b1 fd ed a0 75 27 d2 a9 a5 b0 b8 b5 f3 de 05 67 56 0b e6 2f d0 9c 7e 95 25 f5 cb bc d9 3f 34 52 e5 7c cf ee d5 75 56 e8 4f 44 d9 cd d8 b9 5f 21 d5 b6 fc bf 2b 7d dd ad 57 d2 40 2f 22 79 fc c9 55 5b fb df 33 7e 34 97 16 30 25 ad cc a2 55 fd d3 46 aa aa bf 2b 67 39 fc b1 57 2c 74 d3 75 a6 dc c8 7e e4 5b 1b fd a6 eb f7 7f ad 75 4a 51 7a b2 94 5e 96 3a 6f 15 6b 76 77 56 36 d2 49 1e eb d8 d4 2a 6d 64 6f 2d 7f db 00 6e 3e 80 57 2e da d3 b7 56 fd d6 ed cd 1a b6 d5 fc 2a aa db 3c 72 5c bc be 62 ee 6f bc df dd ed 4e d3 f4 9b cd 6f Data Ascii: %~o~tHWVOi.#>\RUw3ikGQ[w7Ufb}kC4kq$_u'gV/~%?4R\|uVOD_!+}W@/"yU[3~40%UF+g9W,tu~[uJQz^:okvwV6Imdo-n>W.V*<r\boNo
2022-03-15 16:08:34 UTC	10322	IN	Data Raw: 18 f9 53 b2 ed 59 36 f1 91 8a cc d4 af fe d5 a4 c4 25 9d a5 31 b6 d5 56 6d db 7d 38 f4 ab 9f db d7 f7 fa 6c 56 d7 6d ba c1 62 11 45 d3 6c 6b d4 60 76 af 4e 8e 1e 54 64 aa b7 79 6c db ec 73 ca 7c da 74 35 f5 bf 16 5b 5e 69 7a 0e 8f 67 13 6e d3 e3 3e 6a ed f9 a4 91 ce 5b 18 ad 38 7c 17 aa eb 7e 1f be d5 34 8b 3b 96 5b 39 52 09 20 65 fd eb 48 41 3f 28 eb c6 39 ac 5d 0f 56 b4 f0 ad f2 ea 16 cd 27 f6 b4 50 7f a3 49 e6 0f dc b9 3f eb 3e b8 e8 2b b3 93 e3 b6 a5 6f a6 e9 f6 70 6e 96 58 18 cf 77 73 27 df 9a 47 1f 36 4f f2 aa 9d 6c 4d 08 7b 1c 3c 2e 9b dd f9 ea c7 05 19 3e 69 19 9e 17 f8 95 35 9f c3 5d 6b 40 bf 95 59 3e d6 92 c7 1b 36 d7 ff 00 6c 0f c7 15 ee 9f b3 c5 b8 b7 f8 6e d2 45 73 6c df 6c 9e 49 67 f3 18 b3 46 df 75 55 8f d0 7e 15 f2 0f 88 26 93 52 d5 bc f8 Data Ascii: SY6%1Vm}8lVmbElk`vNTdyls\|t5[^izgn>j[8\|~4;[9R eHA?(9]V'PI?>+opnXws'G6OlM{<.>i5]k@Y>6lnEsllIgFuU~&R
2022-03-15 16:08:34 UTC	10330	IN	Data Raw: 34 7b 55 83 76 ce 3a 1f 5a fa 1f c3 fa 1d dc d6 7f 67 92 e6 0f b3 ea 12 05 ff 00 56 37 ab 9c 32 6c 72 49 fa fb 71 46 b1 a2 dc 78 73 c5 9a 1e b3 77 e4 4b a5 c5 3a 41 e6 41 8f 22 48 7f e7 99 e3 05 46 7d 38 ad cd 63 4b b4 f0 dd f4 5a 9e 99 79 07 d9 56 41 b5 63 52 eb d8 ae 4e 31 93 5c 78 ac 72 c4 72 25 d7 e7 af 63 58 46 31 d6 c7 a1 78 77 e1 f8 d2 fc a8 b5 1d 79 ac ef 64 8f 73 59 c6 c1 e5 91 88 3e 58 24 7c aa 7d 41 3f 85 79 77 8b bc 55 15 e7 da f4 8b c6 6b cd 47 cd 1f bb b9 fb d1 b8 18 31 f4 e5 48 e0 8e 6b d0 3c 09 ac 1d 53 c6 1a 56 a9 1d e3 2c 1f 6d 45 fb 24 6a 15 77 17 cb 96 ce 4e 71 eb ef 5c cf c6 0b ed 2e eb e3 55 de b9 a7 5a c0 de 6d cf 9f 04 0c bb da 46 0f 9c 10 3d d7 e9 8a e6 c2 d3 8d 67 25 2d d7 f5 f7 1b 54 6b 92 eb 63 8d bf d2 b5 4d 0f c2 ed 76 fa 63 Data Ascii: 4{Uv:ZgV72lrIqFxswK:AA"HF}8cKZyVAcRN1\xrr%cXF1xwydsY>X$\|}A?ywUkG1Hk<SV,mE$jwNq\.UZmF=g%-TkcMvc
2022-03-15 16:08:34 UTC	10346	IN	Data Raw: 72 00 cd 7a d4 e0 a1 a1 05 b7 f0 6e a8 96 ad f6 bd 32 75 95 a5 11 ae e5 f9 71 d0 f3 9c 1f 9b f2 ac 7b 84 2a ab 1c b1 34 1f 33 2b 7c bf 2f 1c 67 35 7a fb c5 da db 47 6d 1c 5e 72 5a c4 c6 48 a3 dc db 55 8f 56 c1 3f 2e 6b a2 d1 bc 5d 65 e5 c4 fa 9e 87 25 e3 2b 16 6f 3d 82 c6 d9 ed ec 33 cf 02 ba 25 39 45 5f 41 6a 8e 5f 4f 43 75 79 15 ba 6d 5e bf 32 fc df 2f 5c d6 e5 c4 96 f1 d9 d9 da 5a 37 96 92 65 59 9b ee ee c8 f4 e7 26 96 1f b3 5b af 9b 04 51 b3 4a be 5a c0 bf 37 4e 49 fc ea 2b fb 05 d4 2d d6 4d db 59 55 19 b6 ae d5 c9 f4 ff 00 3c 57 14 a6 aa 49 5f 60 dd 9e 8f e1 df 84 36 de 30 f0 8e a7 a8 79 ec d7 b6 ac 91 c1 22 ae c6 dc 0f cd f8 6d f5 ae 4e da dc f8 76 e2 54 dc b3 b2 65 65 91 94 b6 e5 f5 cf 6e 3a 55 08 fc 5d fd 89 e1 f9 ec 2c fc c5 fb 4f 97 e6 cf bb e6 Data Ascii: rzn2uq{*43+\|/g5zGm^rZHUV?.k]e%+o=3%9E_Aj_OCuym^2/\Z7eY&[QJZ7NI+-MYU<WI_`60y"mNvTeen:U],O
2022-03-15 16:08:34 UTC	10362	IN	Data Raw: ef 9f 38 c0 ea 11 88 3e 98 af 39 be 8b ec f7 4b 22 7d e6 f9 5b 6f dd fd 2a ef 87 b5 f4 b5 dd 1c 56 cb f6 85 fb d2 37 ca ad 83 df da be a2 bd 08 d6 85 ac 73 c2 56 67 a0 f8 37 c4 2f a2 6b 8b ac 4f 2c 7b 55 a4 8a 26 da 5d e1 7c 65 5b 1d d4 9f 97 f3 ac fd 6f c4 57 ba 95 d3 10 d3 c5 7a bf bc 69 16 72 db 51 8f 2b b7 b9 f5 f4 ac eb ed 68 2d e3 4f b6 3d 4d 67 53 1f 97 b7 66 d7 23 82 36 e3 a1 e9 58 09 32 2d ac b2 cb 73 27 db da 40 ab 1a ff 00 12 73 b8 b1 fa e2 b8 e1 87 4e 7c ed 6b b1 72 97 43 d1 35 0d 2e 44 d0 ec ef ec ee 7c f9 67 cf 99 3e df 2b cb 41 c9 24 c8 42 93 9e 38 af 2e d6 2c 8d e4 3f 69 91 99 b7 30 db f3 7c aa a2 ae dc 6a d7 1f 2f 9d 2b 30 55 f9 55 be 6f cf 35 6a ff 00 5b 6b 9d 2d 62 10 40 bb 98 b7 cb f2 f5 ae cc 3d 29 d2 df 52 1b 8c 91 4f c2 3a 3b f8 9b Data Ascii: 8>9K"}[o*V7sVg7/kO,{U&]\|e[oWzirQ+h-O=MgSf#6X2-s'@sN\|krC5.D\|g>+A$B8.,?i0\|j/+0UUo5j[k-b@=)RO:;
2022-03-15 16:08:34 UTC	10370	IN	Data Raw: 25 be d6 22 d4 25 f2 1b 57 e2 35 91 63 31 bf fb 2b c1 c1 23 e9 59 d3 c4 d4 9b b2 85 92 ef dc be 4b ab c8 e7 e1 f0 c6 9b a1 ea 17 37 77 96 6a b0 44 bb ad 1a ed 4b 2e fc fd d3 ce d3 df f2 ae b7 43 f1 35 c6 aa bf da 76 97 2d 15 93 32 41 1d b4 6c 55 55 57 e6 38 3f e7 35 cc 6b 57 32 df 6b d1 5a 6a be 5d ce e9 1d 77 5b 61 57 fd a2 58 f0 31 8c d7 42 d6 31 59 e8 f7 36 1a 35 9e db 7b 69 e3 92 36 69 ce d6 ec 70 54 7c a0 e7 76 48 a5 5a 9c 6a 28 ca 5a b7 df 6f 33 6a 7c ca e5 5b 38 ed b5 a6 d5 6e 25 82 4f b2 b4 7b 62 f2 e4 2a de 67 5f 9c 75 e9 cf a5 62 5b c7 2d d7 87 6f 2c a2 fb 4c f3 b4 a1 5a 3e 7f 78 a3 ef 2a 9e df e7 8a ea 5a 3b 6b 0d 06 5d 3f 4f b9 8e f3 54 92 42 d3 c9 07 cf b9 4f be 33 b7 a8 e9 9f 6a 6d ce ab 71 e1 ed 16 ce 27 bc 5b 6b f6 64 91 5a 05 dc bb 98 7c Data Ascii: %"%W5c1+#YK7wjDK.C5v-2AlUUW8?5kW2kZj]w[aWX1B1Y65{i6ipT\|vHZj(Zo3j\|[8n%O{bg_ub[-o,LZ>xZ;k]?OTBO3jmq'[kdZ\|
2022-03-15 16:08:34 UTC	10386	IN	Data Raw: 9e 32 d4 6c f4 df 2f 4c 8a ee c5 ee 64 db 2a c0 bb 7e 62 72 a7 72 fe 42 a7 d6 3c 2f a8 43 71 04 b1 69 57 70 5a cf bd b7 49 06 e8 b7 fa 86 f4 a5 5d 62 ef c3 13 45 e4 4b 6c d7 11 a8 89 9a da 00 c9 22 9e 79 1f c5 f8 f7 ae c8 c5 4a 37 4a f7 fb 8c 75 4f 53 39 35 cd 63 4a b5 8a d2 4b 1d ad 24 a6 ef e6 80 ac ac e7 8c 93 d7 15 5e ff 00 c6 da ad b6 ac b7 72 af c8 b2 85 b6 b6 5c 6d 5c f5 c9 23 77 27 d0 d7 7d af 6b 97 1a 96 97 15 9d a4 bb 6f 7e c5 ba 75 91 63 8f cb 56 2f b8 63 19 c9 2c 31 8a f1 5f b3 c5 73 ab 4b 0f 9f 3a ac 19 f3 37 7c cf f8 e6 bb 30 ab 9d 7b 69 46 c0 df 2e cc dd 5f 10 b5 e4 97 31 f9 10 45 67 23 16 58 e3 cf 94 b9 e0 fd e3 9f 7e b5 d6 69 76 f3 da e8 38 82 e5 5b 4e 58 0a c8 ab 26 df 31 fa 90 71 8c e0 d6 47 85 fe 10 78 9f c7 3a 5d ce a3 a3 5a c3 73 65 Data Ascii: 2l/Ld*~brrB</CqiWpZI]bEKl"yJ7JuOS95cJK$^r\m\#w'}ko~ucV/c,1_sK:7\|0{iF._1Eg#X~iv8[NX&1qGx:]Zse
2022-03-15 16:08:34 UTC	10402	IN	Data Raw: b1 97 63 8e 36 0f bb c8 eb de b9 ea e2 e1 43 96 9b eb e4 68 a2 e5 a9 e3 1e 15 d7 bc 59 a3 cd 15 a6 85 a8 4f 05 c4 ec 15 a3 83 ef c8 c3 ee 8e 39 ef 5d 3f 86 fc 13 1d cf 8e 35 0b 7f 13 de 4f f6 b8 57 cd 8e 06 5d d3 dc 48 79 03 fb a7 be 4d 64 3b f8 96 c7 47 82 5b 3b 6d a9 24 e5 96 48 14 6e df 90 bf ef 67 35 66 e3 44 f1 0f 87 af a0 bd d6 74 ff 00 36 56 64 93 72 dc fe f6 35 3f 37 38 3c 64 76 a5 53 0e a7 cc d4 92 72 ed 6b b6 11 96 ce db 1e d1 ae 5c ea f7 3a 0f 96 8d 05 8d ff 00 96 ed 24 9e 66 d6 8d 32 36 8d c3 af e3 57 fe 1b c9 a5 c9 ab 2c a9 3c 9a d6 a4 b6 3b ae e4 68 c7 cb 1b fc a5 81 6c 0c f2 38 03 f1 35 e1 1f 11 3c 7d 26 ad ab 2b da 4f 25 b5 b4 f1 ee 91 9b 2a ed d0 88 d8 fa 8e 9c 57 27 6f e3 ad 51 35 09 ee 23 9d 95 ae 62 10 36 d9 0a ee 41 8c 0e 3e 95 e7 47 Data Ascii: c6ChYO9]?5OW]HyMd;G[;m$Hng5fDt6Vdr5?78<dvSrk\:$f26W,<;hl85<}&+O%*W'oQ5#b6A>G
2022-03-15 16:08:34 UTC	10410	IN	Data Raw: 0b 9d 42 6f 2d ac ad 65 82 28 a3 8f 2b b9 e4 93 68 97 8e 76 a8 0c dc fb 56 97 87 ed 6d 35 af 15 4b ac db c5 1a db e9 b3 c9 a8 4f 1b 6f de b6 ab 99 77 0f e1 d8 58 04 eb 9a d6 f8 69 a5 4b 6f a5 f8 8c 59 32 fd 9f 4f 8e 4b b9 67 59 3c a6 d8 6d 67 44 19 1e 92 1f ce b1 7e 0e e8 ef e1 e5 d6 b5 8f 10 32 ae 8d 15 8c ca cd 24 fb be d5 0e 46 fb 75 c7 52 70 7e 9c 1a ef a7 08 cd 43 bb 65 2f 22 ef 88 6f a2 f0 af f6 85 fe 80 ad 15 c7 8b ad 85 f6 d9 d7 ca 68 63 d9 b8 aa b9 1f 7f 7b 32 e4 76 c7 3c 9a e2 af fe 1a c5 a4 f8 26 7d 4d 1a 3b ed 5f 53 f2 d6 05 66 2a d6 f1 e4 b4 b2 e0 81 f3 12 be 58 1c ff 00 11 f4 af 5c f1 b7 85 5f c7 3a c6 99 3a 79 f2 c4 d2 40 d1 5c c0 a1 96 de c2 58 16 41 22 86 3d 14 40 ea 7f da c8 aa 1f 11 75 5d 3f 53 d6 16 3d 39 5b ec 70 44 91 40 b1 a9 da d9 Data Ascii: Bo-e(+hvVm5KOowXiKoY2OKgY<mgD~2$FuRp~Ce/"ohc{2v<&}M;_Sf*X\_::y@\XA"=@u]?S=9[pD@
2022-03-15 16:08:34 UTC	10412	IN	Data Raw: 4c 56 f6 f6 7e 46 a5 cc cb 73 bb e6 6f 55 c1 e8 98 1d 3d 6a 0d 7b c3 d7 73 69 6b aa 3a c0 db 64 78 96 75 6f f5 ce a0 74 04 67 18 af 6e 32 b2 e5 91 31 8e be e9 27 c3 3b 09 75 af 16 40 d7 13 fe e2 d6 d9 e5 9e 3d db 9b 62 ff 00 08 51 ce 7a 62 bb 49 bc 41 a7 f8 7e fa da d2 ee 25 b9 b8 5c 2a c5 b5 fe 55 6d e7 a1 19 56 15 c3 d8 ea 37 7e 13 ba d3 f5 00 d2 41 7b 22 95 55 6f 95 b9 cf 1c 63 a7 1c 1a bf 36 b7 77 e2 ad 26 e5 f5 7f b2 45 79 1c bb a5 68 d8 24 ed 18 ee 4f a2 8e 83 bf 3c 9e 2b 39 73 4e 7c c5 4e db 74 2c ea b7 5a 65 fd f4 e2 e3 40 92 59 a3 53 e6 d8 b3 0d ab 87 f9 0b 31 c7 5c f6 e4 e6 a9 e9 ba e7 87 bc 3b 67 ad 5a 5d e8 2b b2 f3 2b 24 93 c9 f2 c6 e0 11 b5 3b f1 93 d4 d5 05 f1 46 a3 aa ea 11 69 71 5b 47 aa ac 92 8d b2 4e bb 56 e2 30 3e 51 80 79 00 fc c3 bf Data Ascii: LV~FsoU=j{sik:dxuotgn21';u@=bQzbIA~%\*UmV7~A{"Uoc6w&Eyh$O<+9sN\|Nt,Ze@YS1\;gZ]++$;Fiq[GNV0>Qy
2022-03-15 16:08:34 UTC	10428	IN	Data Raw: 26 65 85 b3 2c 72 37 fc b4 cf 1f 8f 4a e5 6e 74 49 2c d9 63 bb 56 8a 56 5d de 5a b6 f6 e7 91 c0 e8 7d 8d 6b c3 61 71 24 d0 47 a8 44 b6 76 aa bf 2b 48 bb b6 af d0 7d da f4 bd 8c 52 ba 7a 19 ea 6e c6 f3 eb 5a 6c f7 32 df 7c b1 30 5e ff 00 bc dd f4 e2 ba 3f 0c 5b 69 fa 55 9b 62 da 0b 96 96 34 dd e6 67 6f 20 fc d8 ef c7 4a c2 d2 de 04 8e 23 a4 6d b6 b7 66 78 a5 69 fe 66 65 3c 15 3d 71 9e c4 0f c6 ba 9d 36 cc 5b c9 2d 9c 0d 05 b2 cc a2 38 9b 69 df 1c c3 18 05 b8 e0 0a e0 ab 27 28 f2 47 44 54 63 a9 7f c6 c8 fa c7 84 6e 75 43 72 d7 cb 73 fb bb 4b 65 57 56 65 42 43 7c aa 07 01 bd 6b 88 d0 fe 1a f8 96 da 18 02 44 b6 d0 4b 27 9b 24 6d 20 db 23 26 4e 0f f7 79 e9 5d be b5 ab 47 a4 f8 67 48 d2 e1 b9 fb 4d d5 ab 49 17 db 19 76 f7 cf f3 ac cb 5b c9 13 74 72 4a d2 de 4a Data Ascii: &e,r7JntI,cVV]Z}kaq$GDv+H}RznZl2\|0^?[iUb4go J#mfxife<=q6[-8i'(GDTcnuCrsKeWVeBC\|kDK'$m #&Ny]GgHMIv[trJJ
2022-03-15 16:08:34 UTC	10444	IN	Data Raw: d7 43 f0 bf ec 57 5e 07 fb 46 a1 67 69 7d 65 1c 6f 02 d8 f0 e8 a8 0f 55 63 86 fa b7 a9 ac bb 5f 00 59 78 8b c4 97 96 93 ca d6 30 6d 86 46 8e c7 32 ee 56 e4 07 19 18 c7 f7 aa e1 88 87 bf 4d c9 e9 bd f5 1c 60 da ba ea 59 d5 3c 73 e0 cb 8d 1d 60 b3 d3 1a e6 e9 60 4f 36 75 f9 13 cd 3c 1c af f7 7a e7 1c fd 2b 1b 4f b7 d2 f5 c8 e5 b9 3a 7a c1 05 b2 bf 95 25 a2 f9 1e 73 00 5b ef 1e 78 f6 eb 51 ea df 06 ec e3 5b c3 67 ae 5b 35 bc 12 3c 0a cd 94 f3 26 18 2d 92 7f 84 2f 1c 77 ae 72 eb e1 5e ba b6 f6 66 3d 41 7e cf 3e 59 59 58 ec 8d 7d 49 e3 3d fa 77 ad 23 1a 0a 3e ed 4b 7a dc 5c b3 bd dc 6e 3a 3d 07 4b d4 b5 25 7b fb ef ec 8d 25 98 47 f6 b5 9c ca db ba e3 e6 ee 7d 3b 57 a3 69 3e 17 f0 cd 8c 31 45 61 a8 4f e2 1b 89 ed a4 92 06 8e e4 36 d6 2b 8f 2c 84 04 e7 9f 6a f0 Data Ascii: CW^Fgi}eoUc_Yx0mF2VM`Y<s``O6u<z+O:z%s[xQ[g[5<&-/wr^f=A~>YYX}I=w#>Kz\n:=K%{%G};Wi>1EaO6+,j
2022-03-15 16:08:34 UTC	10450	IN	Data Raw: dc c3 3e fe b5 95 36 9f 25 ac 8b 2e 9d 75 2c 56 b2 cb b6 e7 76 37 70 07 40 3e 6e 79 eb 56 6d 9a 5b 3f 13 4e f6 57 92 45 61 a8 32 47 14 8d fb d7 54 ea 63 3c 71 91 cf b5 76 d1 8f b3 72 9c 1e a4 4a 5c d6 4c bd f1 3a fa df fe 12 c8 ae ec d7 cd b3 9e 7f 35 61 8e 3f dd 33 e7 a7 3f 37 6f c6 b4 3c 27 a5 6b 1a 87 86 ee 75 3b bb 69 ee 5a f2 5f 2a 05 fb db b3 9d dd 7e f1 51 b7 15 57 c4 17 36 c9 7d 6d 3d e4 4d 15 c4 72 2f d9 97 ee f9 7c 77 c8 00 d7 65 6c 92 db 69 6b 2d ee eb 1b 5b 19 3f 7a bf 7d 55 cf 65 23 a9 39 e4 8a ca bd 47 c8 af bb ff 00 30 5b 91 68 be 18 1a b4 8b aa ea f7 9f 6e b3 58 cc 72 c3 b7 ca 58 58 82 15 98 fd ef f1 35 5f c6 9e 26 fe cf 6b 98 1e 59 ee 5a 79 12 38 97 85 89 b6 e1 99 40 e3 1c af 40 6a 96 a5 e2 6f 32 46 b0 92 e7 6a ea 0a 23 97 77 cc ea bb 7e Data Ascii: >6%.u,Vv7p@>nyVm[?NWEa2GTc<qvrJ\L:5a?3?7o<'ku;iZ_*~QW6}m=Mr/\|welik-[?z}Ue#9G0[hnXrXX5_&kYZy8@@jo2Fj#w~
2022-03-15 16:08:34 UTC	10466	IN	Data Raw: fc 1b a0 ba cc 7f 2a fc ea c4 ff 00 ac 24 f5 6a d9 5b 8d 3f 4a 5b 9b 37 8a 79 55 5b 72 5f 40 c5 56 65 ce 30 e3 a7 5e fd 6a dc 9e 19 8b 52 87 cc b8 db 6d 70 d3 fe ea 4f 20 2b ed 54 f9 8b 0c e3 ef 75 07 a5 61 dd 4c bf e9 da 7b de 40 a8 b2 f9 4b 77 24 65 9b af 43 f3 64 02 7d ab 57 2a 75 1a 50 6f cf b1 c9 25 6d cb 11 5e 69 d6 d7 1b ed e0 9e 5b 29 24 3e 6c 8a db de 38 d8 f0 a8 3d 7f 3f 4a a9 e2 7d 34 eb da c6 9f f6 79 5b ed d7 4b f2 ac ed b5 a3 73 d5 4f 4a d9 b9 d3 7f b1 66 b6 b2 d3 2e 60 97 ec cb e5 cb 76 d8 58 21 dc 32 46 09 25 8e 7a 7a 55 ff 00 ec 7d 1b 44 b3 8b 58 b8 95 75 0b f8 a4 32 3d dc 8a 55 77 e7 ee 8e 47 60 7f ef aa 51 ad 1a 4d 4f 56 de df d7 42 3a 58 ce 8f e1 ed ff 00 8a 2f 2c 74 fb 4d ba 62 c1 12 4b 3d f4 ff 00 2a c7 91 c9 38 e8 3d 06 33 8e 6b 8e Data Ascii: $j[?J[7yU[r_@Ve0^jRmpO +TuaL{@Kw$eCd}WuPo%m^i[)$>l8=?J}4y[KsOJf.`vX!2F%zzU}DXu2=UwG`QMOVB:X/,tMbK=*8=3k
2022-03-15 16:08:34 UTC	10482	IN	Data Raw: 5c 97 86 17 c4 77 56 f7 da 4d 9d cc b1 44 d9 fb 7f 90 c3 7e ce ea 40 eb fe 78 a8 61 d7 ad 7c 19 e2 c5 17 b6 3f 66 b7 ba d9 12 c1 bb 77 ee f3 f3 6f 1d 32 7a e3 f1 af 26 54 db 76 4e ee 36 6b 5d 5f 5f c5 1a 46 4a 3e 8c d3 f0 cd 84 ab 67 63 7e fa 96 93 79 12 dc f9 8d a3 5c c1 e4 3c 68 b8 2c 54 b0 c1 03 de ba 1f 0f 78 8a da d7 52 8a e6 f7 4f d4 2e 6c e5 8f cb db 6c a8 ea a8 1f 9c 00 4f c9 df a7 e7 5e 6f 73 6d 79 e3 4f 18 6b 9f f0 8a 58 ab 58 40 ce d1 ae e1 b2 31 93 b7 25 ba e6 bd 03 c3 7a 7d b7 80 2e a2 ba 7b 96 59 a5 80 a4 b6 d2 30 65 df 8c f1 dc a2 77 ac b1 50 83 8f be fd e7 d3 6b 75 e9 f9 d8 29 bb bf 23 ac f1 b7 c5 0d 13 c0 37 11 5d bf 9f 3d fc 4a 5a 08 37 79 4d 22 b7 56 20 fd e1 e8 b5 e5 da af c4 07 f8 97 af 45 aa 24 4d a7 da c4 b1 a4 cd 23 79 4f 22 b7 a1 Data Ascii: \wVMD~@xa\|?fwo2z&TvN6k]__FJ>gc~y\<h,TxRO.llO^osmyOkXX@1%z}.{Y0ewPku)#7]=JZ7yM"V E$M#yO"
2022-03-15 16:08:34 UTC	10489	IN	Data Raw: 56 f2 33 b9 7d 3f 5a f6 63 3a 9c b6 6c 35 5a 1b 97 da 7e 9d a3 e9 be 6c 56 cc cd 24 81 63 69 d4 b6 d5 3d 5b 19 c6 7f 0a 8a 37 b3 b5 87 cb 11 4e d7 1b 83 2f 96 df 2f 03 07 9e a2 b2 75 04 d4 e6 68 23 8a 29 27 da be 64 aa cb fc 3f e1 54 d7 52 7b 58 f2 22 6c ee 0b f3 37 cb f9 54 46 8b 70 f8 ae c9 3d 0f 50 f1 14 f7 2a d0 5b 5b 2c 56 71 c0 91 b3 7f ba 38 1e fe 9f 8d 72 da 85 e4 8f 75 2c 5b 63 58 99 be 66 db b7 6f a7 4e b5 0d b6 a8 f3 42 a8 5a 3d 8d ff 00 3c 3f bd fe d0 f6 ab 51 c9 68 dc cf 3b 5e 3b 7c ac ad 84 fd 3e 98 ae 68 d1 54 56 c5 5c c5 d4 ac fc b6 88 89 77 24 8b b9 56 36 f9 57 ff 00 af 51 b5 bd a4 70 c1 23 cf 22 a7 de 65 f2 f6 ed fa 1c f3 5b 06 4d 3a 4b 79 41 69 20 5f ef 2f f0 b7 60 2a ae ab f6 4d 41 6d 71 3c 98 5c ab 49 b7 e5 da 3e 9e 95 e8 53 72 69 68 Data Ascii: V3}?Zc:l5Z~lV$ci=[7N//uh#)'d?TR{X"l7TFp=P[[,Vq8ru,[cXfoNBZ=<?Qh;^;\|>hTV\w$V6WQp#"e[M:KyAi _/`MAmq<\I>Srih

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.3	49960	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:34 UTC	10409	OUT	GET /cms/api/am/imageFileData/RWP0UC?ver=2f44 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:34 UTC	11458	IN	HTTP/1.1 200 OK Last-Modified: Sun, 13 Mar 2022 05:10:56 GMT Access-Control-Allow-Origin: * X-Datacenter: northeu X-ActivityId: 6c29c0cb-c422-4b50-a2df-75e3f19a5dfb Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RWP0UC?ver=2f44 X-Source-Length: 1654488 Content-Length: 1654488 Cache-Control: public, max-age=219751 Expires: Fri, 18 Mar 2022 05:11:05 GMT Date: Tue, 15 Mar 2022 16:08:34 GMT Connection: close
2022-03-15 16:08:34 UTC	11458	IN	Data Raw: ff d8 ff e1 14 ed 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 31 31 3a 31 31 20 30 36 3a 35 35 3a 33 38 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop 21.1 (Windows)2021:11:11 06:55:388"
2022-03-15 16:08:34 UTC	11474	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 31 31 36 35 37 37 66 2d 35 37 35 64 2d 38 33 34 37 2d 39 38 64 36 2d 38 39 30 65 32 65 30 33 31 30 32 32 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 61 38 35 33 32 65 62 65 2d 62 34 31 32 2d 34 37 34 36 2d 39 35 30 62 2d 32 65 31 31 64 66 33 66 66 34 37 31 22 20 78 6d 70 4e 6f 74 65 3a 48 61 73 45 78 74 65 6e 64 65 64 58 4d 50 3d 22 44 30 41 33 39 39 46 34 41 45 41 43 31 44 35 32 33 36 45 36 43 31 37 41 31 39 33 42 34 41 33 44 22 3e 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 54 65 78 74 4c 61 79 65 72 73 3e 20 3c 72 64 66 3a 42 61 67 3e 20 3c 72 64 66 3a 6c 69 20 70 68 6f 74 6f 73 68 6f 70 3a 4c Data Ascii: DocumentID="adobe:docid:photoshop:f116577f-575d-8347-98d6-890e2e031022" xmpMM:OriginalDocumentID="xmp.did:a8532ebe-b412-4746-950b-2e11df3ff471" xmpNote:HasExtendedXMP="D0A399F4AEAC1D5236E6C17A193B4A3D"> <photoshop:TextLayers> <rdf:Bag> <rdf:li photoshop:L
2022-03-15 16:08:34 UTC	11490	IN	Data Raw: 67 65 5c 5f 43 72 6f 70 73 5c 45 64 67 65 2d 4c 69 66 65 73 74 79 6c 65 5f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 33 35 33 34 31 36 30 30 37 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 31 3a 30 33 3a 33 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 5f 43 72 6f 70 73 5c 45 64 67 65 2d 4c 69 66 65 73 74 79 6c 65 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 38 37 33 34 31 30 36 31 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 31 3a 30 34 3a 33 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 Data Ascii: ge\_Crops\Edge-Lifestyle_shutterstock_353416007_1080x1920.jpg saved 2016-07-26T11:03:30-07:00 File C:\Users\v-lizagh\MS\Windows10\Edge\_Crops\Edge-Lifestyle_GettyImages-87341061_1080x1920.jpg saved 2016-07-26T11:04:36-07:00 File C:\Users\v
2022-03-15 16:08:34 UTC	11491	IN	Data Raw: 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 38 3a 31 37 3a 33 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 38 3a 32 33 3a 32 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 37 2d 32 36 54 31 38 3a 32 34 3a 33 31 2d 30 37 3a 30 30 26 23 Data Ascii: ved 2016-07-26T18:17:39-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2016-07-26T18:23:29-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2016-07-26T18:24:31-07:00&#
2022-03-15 16:08:34 UTC	11507	IN	Data Raw: 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 38 2d 33 31 54 31 33 3a 34 32 3a 33 39 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 30 39 2d 31 32 54 31 30 3a 32 36 3a 30 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 36 2d 30 39 2d 31 32 54 31 30 3a 32 38 3a 35 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a Data Ascii: 0.jpg saved 2016-08-31T13:42:39-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2016-09-12T10:26:08-07:00 File Lockscreen_1080x1920_Portrait.psd opened 2016-09-12T10:28:50-07:00 File C:\Users\v-liz
2022-03-15 16:08:34 UTC	11523	IN	Data Raw: 69 74 79 5c 45 64 67 65 53 75 72 67 65 2d 52 65 61 64 69 6e 67 56 69 65 77 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 39 35 36 39 35 32 39 31 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 30 2d 31 37 54 31 38 3a 33 34 3a 35 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 53 75 72 67 65 5c 52 65 61 64 69 6e 67 56 69 65 77 5f 4e 6f 64 69 73 74 72 61 63 74 69 6f 6e 73 2d 43 6f 6e 63 65 6e 74 72 61 74 69 6e 67 2d 46 6f 63 75 73 2d 53 69 6d 70 6c 69 63 69 74 79 5c 45 64 67 65 53 75 72 67 65 2d 52 65 61 64 69 6e 67 56 69 65 77 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 37 38 31 39 35 33 37 37 5f 31 30 38 30 78 Data Ascii: ity\EdgeSurge-ReadingView_GettyImages-95695291_1080x1920.jpg saved 2016-10-17T18:34:53-07:00 File C:\Users\v-lizagh\MS\Windows10\Edge\Surge\ReadingView_Nodistractions-Concentrating-Focus-Simplicity\EdgeSurge-ReadingView_GettyImages-578195377_1080x
2022-03-15 16:08:34 UTC	11531	IN	Data Raw: 73 31 30 5c 43 6f 72 74 61 6e 61 5c 43 6f 72 74 61 6e 61 2d 52 65 6d 69 6e 64 65 72 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 32 30 39 32 38 32 33 39 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 34 54 31 35 3a 35 35 3a 33 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 43 6f 72 74 61 6e 61 5c 43 6f 72 74 61 6e 61 2d 52 65 6d 69 6e 64 65 72 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 36 36 35 34 39 35 38 37 35 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 36 2d 31 31 2d 31 34 54 31 35 3a 35 35 3a 34 35 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 Data Ascii: s10\Cortana\Cortana-Reminder_GettyImages-620928239_1080x1920.jpg saved 2016-11-14T15:55:37-08:00 File C:\Users\v-lizagh\MS\Windows10\Cortana\Cortana-Reminder_GettyImages-665495875_1080x1920.jpg saved 2016-11-14T15:55:45-08:00 File C:\Users
2022-03-15 16:08:34 UTC	11547	IN	Data Raw: 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4d 49 54 2d 57 69 6e 74 65 72 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2d 4f 73 63 61 72 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 35 30 38 39 32 34 38 30 5f 31 30 38 30 78 31 39 32 30 45 36 44 39 31 43 44 33 36 38 33 31 39 46 44 30 32 34 37 46 39 43 34 36 31 44 39 41 46 30 30 37 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 31 2d 32 30 54 31 31 3a 31 38 3a 35 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 Data Ascii: -lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2015.5\AutoRecover\_MIT-WinterEntertainment-Oscars_GettyImages-150892480_1080x1920E6D91CD368319FD0247F9C461D9AF007.psb saved 2017-01-20T11:18:59-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTi
2022-03-15 16:08:34 UTC	11563	IN	Data Raw: 41 45 45 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 37 34 37 36 33 39 35 32 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 33 54 30 39 3a 34 35 3a 30 33 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 45 64 67 65 5c 4e 41 41 45 45 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 45 64 67 65 2d 4e 41 41 45 45 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 38 34 30 30 36 30 35 34 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 32 2d 32 33 54 30 39 3a 34 36 3a 34 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 Data Ascii: AEE_GettyImages-474763952_1080x1920.jpg saved 2017-02-23T09:45:03-08:00 File C:\Users\v-lizagh\MS\Windows10\Edge\NAAEE\CHOSEN\Crops\Edge-NAAEE_GettyImages-484006054_1080x1920.jpg saved 2017-02-23T09:46:49-08:00 File C:\Users\v-lizagh\MS\Wi
2022-03-15 16:08:34 UTC	11571	IN	Data Raw: 74 2d 41 70 72 69 6c 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 31 37 31 38 38 36 38 38 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 31 34 54 31 32 3a 31 31 3a 30 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 31 35 54 31 35 3a 31 36 3a 33 30 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 30 33 2d 31 35 54 Data Ascii: t-April_GettyImages-517188688_1080x1920.jpg saved 2017-03-14T12:11:03-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2017-03-15T15:16:30-07:00 File Lockscreen_1080x1920_Portrait.psd opened 2017-03-15T
2022-03-15 16:08:34 UTC	11587	IN	Data Raw: 6d 70 6f 77 65 72 69 6e 67 54 6f 6f 6c 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 34 38 36 37 37 36 36 37 36 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 31 38 54 31 31 3a 30 30 3a 30 37 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 69 63 72 6f 73 6f 66 74 5c 45 6d 70 6f 77 65 72 69 6e 67 43 6c 61 73 73 72 6f 6f 6d 54 6f 6f 6c 73 5c 43 48 4f 53 45 4e 5c 45 6d 70 6f 77 65 72 69 6e 67 54 6f 6f 6c 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 31 32 35 32 36 36 32 33 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 34 2d 31 38 54 31 31 3a 30 33 3a 31 31 2d 30 37 3a 30 Data Ascii: mpoweringTools_GettyImages-486776676_1080x1920.jpg saved 2017-04-18T11:00:07-07:00 File C:\Users\v-lizagh\MS\Windows10\Microsoft\EmpoweringClassroomTools\CHOSEN\EmpoweringTools_GettyImages-512526623_1080x1920.jpg saved 2017-04-18T11:03:11-07:0
2022-03-15 16:08:34 UTC	11603	IN	Data Raw: 5c 4d 61 74 74 52 65 71 75 65 73 74 5c 4c 69 6e 6b 65 64 49 6e 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4c 69 6e 6b 65 64 49 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 34 34 36 35 34 38 31 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 35 54 31 35 3a 33 30 3a 32 34 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 61 74 74 52 65 71 75 65 73 74 5c 4c 69 6e 6b 65 64 49 6e 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4c 69 6e 6b 65 64 49 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 37 31 37 35 32 30 30 31 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 35 2d 31 35 Data Ascii: \MattRequest\LinkedIn\CHOSEN\Crops\LinkedIn_GettyImages-144654810_1080x1920.jpg saved 2017-05-15T15:30:24-07:00 File C:\Users\v-lizagh\MS\Windows10\MattRequest\LinkedIn\CHOSEN\Crops\LinkedIn_GettyImages-571752001_1080x1920.jpg saved 2017-05-15
2022-03-15 16:08:34 UTC	11610	IN	Data Raw: 65 2d 4d 53 52 65 77 61 72 64 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 31 37 34 35 33 30 39 38 5f 31 30 38 30 78 31 39 32 30 31 41 35 37 33 32 35 44 38 33 38 43 37 34 30 42 39 30 39 34 44 42 43 32 42 44 39 30 36 34 33 42 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 30 36 54 31 33 3a 30 37 3a 32 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 36 2d 30 37 54 30 38 3a 32 33 3a 34 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 Data Ascii: e-MSRewards_GettyImages-117453098_1080x19201A57325D838C740B9094DBC2BD90643B.psb saved 2017-06-06T13:07:22-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2017-06-07T08:23:48-07:00 File Lockscreen_1080x1920
2022-03-15 16:08:34 UTC	11626	IN	Data Raw: 49 6d 61 67 65 73 2d 36 37 35 36 30 35 38 31 31 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 31 33 54 31 38 3a 35 35 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 41 70 70 44 61 74 61 5c 52 6f 61 6d 69 6e 67 5c 41 64 6f 62 65 5c 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 57 69 6e 64 6f 77 73 31 30 2d 54 69 70 73 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 30 36 36 37 31 30 36 32 5f 31 30 38 30 78 31 39 32 30 43 39 43 30 46 32 30 45 45 46 37 41 41 33 34 46 33 38 44 35 42 44 39 30 45 45 31 39 34 38 45 33 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 37 2d 31 33 54 31 Data Ascii: Images-675605811_1080x1920.jpg saved 2017-07-13T18:55-07:00 File C:\Users\v-lizagh\AppData\Roaming\Adobe\Adobe Photoshop CC 2017\AutoRecover\_Windows10-Tips_GettyImages-106671062_1080x1920C9C0F20EEF7AA34F38D5BD90EE1948E3.psb saved 2017-07-13T1
2022-03-15 16:08:34 UTC	11642	IN	Data Raw: 3a 30 36 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 55 53 2d 4f 70 65 6e 5c 43 68 6f 73 65 6e 5c 43 72 6f 70 73 5c 4d 49 54 2d 55 53 6f 70 65 6e 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 38 31 34 30 34 31 39 39 30 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 31 30 54 31 38 3a 30 31 3a 35 38 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 Data Ascii: :06-07:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\US-Open\Chosen\Crops\MIT-USopen_GettyImages-814041990_1080x1920.jpg saved 2017-08-10T18:01:58-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 201
2022-03-15 16:08:34 UTC	11650	IN	Data Raw: 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 48 65 61 6c 74 68 79 4c 69 66 65 73 74 79 6c 65 2d 4e 6f 74 65 62 6f 6f 6b 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 33 31 36 30 37 37 37 33 5f 31 30 38 30 78 31 39 32 30 34 30 30 46 36 30 35 46 36 32 36 46 31 37 44 34 44 32 45 44 35 33 38 33 37 45 32 39 44 30 46 45 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 32 39 54 31 37 3a 32 39 3a 31 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 30 38 2d 33 30 54 32 31 3a 33 31 3a 31 32 2d 30 37 3a 30 30 Data Ascii: 17\AutoRecover\_HealthyLifestyle-Notebook_GettyImages-531607773_1080x1920400F605F626F17D4D2ED53837E29D0FE.psb saved 2017-08-29T17:29:13-07:00 File C:\Users\v-lizagh\MS\Windows10\Lockscreen_1080x1920_Portrait.psd saved 2017-08-30T21:31:12-07:00
2022-03-15 16:08:34 UTC	11666	IN	Data Raw: 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 30 2d 32 35 54 31 36 3a 30 31 3a 33 33 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 26 23 78 41 3b 32 30 31 37 2d 31 30 2d 32 35 54 31 36 3a 30 39 3a 35 32 2d 30 37 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 45 64 67 65 47 72 6f 77 74 68 49 6d 61 67 65 73 5c 4c 6f 63 6b 32 30 31 37 5f 42 61 74 63 68 39 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4c 6f 63 6b 32 30 31 37 2d 42 39 5f 4d 6f 72 61 69 6e Data Ascii: kscreen_1080x1920_Portrait.psd saved 2017-10-25T16:01:33-07:00 File Lockscreen_1080x1920_Portrait.psd opened 2017-10-25T16:09:52-07:00 File C:\Users\v-lizagh\MS\Windows10\BingEdgeGrowthImages\Lock2017_Batch9\CHOSEN\Crops\Lock2017-B9_Morain
2022-03-15 16:08:34 UTC	11682	IN	Data Raw: 70 20 43 43 20 32 30 31 37 5c 41 75 74 6f 52 65 63 6f 76 65 72 5c 5f 4c 6f 63 6b 32 30 31 37 2d 42 39 5f 50 61 70 61 72 6f 61 4e 50 4e 65 77 5a 65 6c 61 6e 64 5f 35 30 30 70 78 2d 36 36 35 35 30 30 34 39 5f 31 30 38 30 78 31 39 32 30 37 42 39 34 38 34 42 38 34 44 41 37 41 44 38 38 41 35 32 45 38 36 42 44 35 42 39 38 31 39 30 38 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 30 34 54 31 33 3a 32 36 3a 31 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 42 69 6e 67 45 64 67 65 47 72 6f 77 74 68 49 6d 61 67 65 73 5c 4c 6f 63 6b 32 30 31 37 5f 42 61 74 63 68 39 5c 43 48 4f 53 45 4e 5c 52 65 70 6c 61 63 65 6d 65 6e 74 73 5c 4c 6f 63 6b 32 30 31 Data Ascii: p CC 2017\AutoRecover\_Lock2017-B9_PaparoaNPNewZeland_500px-66550049_1080x19207B9484B84DA7AD88A52E86BD5B981908.psb saved 2017-12-04T13:26:16-08:00 File C:\Users\v-lizagh\MS\Windows10\BingEdgeGrowthImages\Lock2017_Batch9\CHOSEN\Replacements\Lock201
2022-03-15 16:08:34 UTC	11690	IN	Data Raw: 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 53 70 6f 74 6c 69 67 68 74 5f 46 59 31 38 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 53 70 6f 74 6c 69 67 68 74 46 59 31 38 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 31 32 32 31 32 34 31 30 35 5f 31 30 38 30 78 31 39 32 30 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 37 2d 31 32 2d 31 34 54 31 35 3a 31 32 3a 35 36 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4f 66 66 69 63 65 5c 53 70 6f 74 6c 69 67 68 74 5f 46 59 31 38 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4f 66 66 69 63 65 53 70 6f 74 6c 69 67 68 74 46 59 31 38 5f 47 65 74 74 79 49 6d 61 67 Data Ascii: s\v-lizagh\MS\Windows10\Office\Spotlight_FY18\CHOSEN\Crops\OfficeSpotlightFY18_GettyImages-122124105_1080x1920.psd saved 2017-12-14T15:12:56-08:00 File C:\Users\v-lizagh\MS\Windows10\Office\Spotlight_FY18\CHOSEN\Crops\OfficeSpotlightFY18_GettyImag
2022-03-15 16:08:34 UTC	11706	IN	Data Raw: 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 56 61 6c 65 6e 74 69 6e 65 73 44 61 79 5c 32 30 31 38 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 49 54 2d 56 61 6c 65 6e 74 69 6e 65 73 44 61 79 5f 47 65 74 74 79 49 6d 61 67 65 73 2d 35 30 34 38 31 34 34 35 34 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 31 2d 32 34 54 31 36 3a 30 35 3a 30 39 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 4d 6f 6d 65 6e 74 73 49 6e 54 69 6d 65 5c 56 61 6c 65 6e 74 69 6e 65 73 44 61 79 5c 32 30 31 38 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 Data Ascii: ile C:\Users\v-lizagh\MS\Windows10\MomentsInTime\ValentinesDay\2018\CHOSEN\Crops\MIT-ValentinesDay_GettyImages-504814454_1080x1920.jpg saved 2018-01-24T16:05:09-08:00 File C:\Users\v-lizagh\MS\Windows10\MomentsInTime\ValentinesDay\2018\CHOSEN\Crop
2022-03-15 16:08:34 UTC	11722	IN	Data Raw: 32 30 5f 50 6f 72 74 72 61 69 74 45 43 39 39 33 34 30 42 35 30 46 37 44 35 37 32 30 43 39 36 39 44 34 32 34 33 31 34 39 36 36 37 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 32 31 54 31 38 3a 31 36 3a 34 35 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 5f 5f 54 65 6d 70 6c 61 74 65 73 5c 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 32 2d 32 36 54 30 38 3a 33 31 3a 31 32 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 4c 6f 63 6b 73 63 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 2e 70 73 64 20 6f 70 65 6e 65 64 Data Ascii: 20_PortraitEC99340B50F7D5720C969D4243149667.psb saved 2018-02-21T18:16:45-08:00 File C:\Users\v-lizagh\MS\Windows10\__Templates\Lockscreen_1080x1920_Portrait.psd saved 2018-02-26T08:31:12-08:00 File Lockscreen_1080x1920_Portrait.psd opened
2022-03-15 16:08:34 UTC	11730	IN	Data Raw: 72 65 65 6e 5f 31 30 38 30 78 31 39 32 30 5f 50 6f 72 74 72 61 69 74 45 43 39 39 33 34 30 42 35 30 46 37 44 35 37 32 30 43 39 36 39 44 34 32 34 33 31 34 39 36 36 37 2e 70 73 62 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 30 39 54 31 32 3a 31 35 3a 33 37 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a 5c 55 73 65 72 73 5c 76 2d 6c 69 7a 61 67 68 5c 4d 53 5c 57 69 6e 64 6f 77 73 31 30 5c 57 69 6e 64 6f 77 73 5c 4d 4d 58 5c 42 61 74 63 68 33 5c 43 48 4f 53 45 4e 5c 43 72 6f 70 73 5c 4d 4d 58 5f 65 73 74 6f 63 6b 5f 32 30 30 31 2d 33 39 34 39 30 37 2d 30 31 5f 31 30 38 30 78 31 39 32 30 2e 6a 70 67 20 73 61 76 65 64 26 23 78 41 3b 32 30 31 38 2d 30 33 2d 30 39 54 31 32 3a 31 36 3a 31 34 2d 30 38 3a 30 30 26 23 78 39 3b 46 69 6c 65 20 43 3a Data Ascii: reen_1080x1920_PortraitEC99340B50F7D5720C969D4243149667.psb saved 2018-03-09T12:15:37-08:00 File C:\Users\v-lizagh\MS\Windows10\Windows\MMX\Batch3\CHOSEN\Crops\MMX_estock_2001-394907-01_1080x1920.jpg saved 2018-03-09T12:16:14-08:00 File C:
2022-03-15 16:08:34 UTC	11746	IN	Data Raw: 38 31 37 38 36 30 44 38 42 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 33 45 43 35 38 45 30 39 38 46 37 31 45 34 43 39 34 46 30 33 43 39 38 35 32 33 43 41 43 39 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 33 45 44 37 31 32 43 30 38 34 45 46 36 42 30 42 39 35 30 32 46 30 30 43 38 45 42 46 42 45 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 33 46 37 41 41 46 35 41 34 33 44 38 44 31 33 34 33 37 34 44 32 41 31 36 32 44 34 39 41 32 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 33 46 42 44 39 43 42 43 43 37 42 33 45 32 44 34 38 30 43 34 43 46 38 41 31 34 33 32 35 46 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 30 34 30 32 35 33 39 33 43 36 42 32 35 30 41 31 36 39 38 41 39 35 45 31 37 38 43 Data Ascii: 817860D8B6</rdf:li> <rdf:li>03EC58E098F71E4C94F03C98523CAC91</rdf:li> <rdf:li>03ED712C084EF6B0B9502F00C8EBFBEA</rdf:li> <rdf:li>03F7AAF5A43D8D134374D2A162D49A2B</rdf:li> <rdf:li>03FBD9CBCC7B3E2D480C4CF8A14325F3</rdf:li> <rdf:li>04025393C6B250A1698A95E178C
2022-03-15 16:08:34 UTC	11762	IN	Data Raw: 32 39 35 43 38 41 37 33 44 35 34 39 33 43 32 36 36 30 46 32 45 32 35 32 44 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 31 31 35 37 46 41 31 38 43 37 37 33 42 43 46 33 46 44 45 44 39 42 46 32 45 43 46 46 44 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 31 31 42 45 42 41 36 35 44 44 32 36 37 33 38 36 37 39 37 41 42 39 41 35 31 35 42 37 45 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 31 32 45 34 32 32 45 43 31 45 39 37 35 44 39 32 43 31 35 32 31 38 46 33 41 35 43 36 44 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 31 35 32 35 35 30 30 32 32 43 44 41 31 43 33 31 39 46 30 42 33 45 41 35 44 30 34 32 45 45 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 31 35 36 32 45 36 39 41 44 34 Data Ascii: 295C8A73D5493C2660F2E252D5</rdf:li> <rdf:li>11157FA18C773BCF3FDED9BF2ECFFD70</rdf:li> <rdf:li>111BEBA65DD267386797AB9A515B7E4D</rdf:li> <rdf:li>112E422EC1E975D92C15218F3A5C6D66</rdf:li> <rdf:li>1152550022CDA1C319F0B3EA5D042EE3</rdf:li> <rdf:li>11562E69AD4
2022-03-15 16:08:34 UTC	11770	IN	Data Raw: 33 30 38 44 41 30 33 32 37 36 41 39 44 43 30 33 46 31 46 34 41 38 31 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 37 37 42 43 30 45 42 39 39 34 34 33 43 44 44 32 43 38 38 39 41 34 37 37 32 35 36 46 41 39 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 37 37 43 38 32 36 43 43 42 38 34 39 32 39 42 39 42 37 34 34 33 33 30 32 33 36 41 39 33 35 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 37 38 34 33 42 35 33 46 41 37 36 36 35 35 35 43 42 38 36 46 37 30 44 37 42 37 38 38 45 30 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 37 38 39 45 35 39 37 32 44 36 44 32 46 32 36 32 45 37 31 43 44 32 43 43 30 39 37 34 39 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 31 37 39 42 45 45 41 37 45 32 34 46 30 Data Ascii: 308DA03276A9DC03F1F4A81C</rdf:li> <rdf:li>177BC0EB99443CDD2C889A477256FA9C</rdf:li> <rdf:li>177C826CCB84929B9B744330236A9352</rdf:li> <rdf:li>17843B53FA766555CB86F70D7B788E01</rdf:li> <rdf:li>1789E5972D6D2F262E71CD2CC09749C5</rdf:li> <rdf:li>179BEEA7E24F0
2022-03-15 16:08:34 UTC	11786	IN	Data Raw: 3c 72 64 66 3a 6c 69 3e 32 35 41 42 38 31 46 35 41 45 36 30 38 46 36 46 37 35 44 42 33 33 30 34 35 43 30 42 43 46 34 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 35 42 33 46 30 36 46 37 36 42 41 32 31 30 44 43 45 30 31 46 46 41 35 35 41 31 34 30 35 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 35 42 35 34 44 38 30 45 31 41 34 38 39 39 35 31 36 42 45 32 46 39 31 45 46 31 30 36 31 46 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 35 44 31 43 30 32 34 36 33 42 30 37 31 34 45 42 37 35 36 34 39 34 44 32 36 31 35 32 44 32 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 35 44 34 33 39 41 36 34 34 42 42 37 39 44 35 41 44 37 46 39 30 43 41 37 41 37 42 45 32 43 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a Data Ascii: <rdf:li>25AB81F5AE608F6F75DB33045C0BCF49</rdf:li> <rdf:li>25B3F06F76BA210DCE01FFA55A140590</rdf:li> <rdf:li>25B54D80E1A4899516BE2F91EF1061F6</rdf:li> <rdf:li>25D1C02463B0714EB756494D26152D26</rdf:li> <rdf:li>25D439A644BB79D5AD7F90CA7A7BE2CF</rdf:li> <rdf:
2022-03-15 16:08:34 UTC	11802	IN	Data Raw: 6c 69 3e 33 31 41 33 43 43 44 31 45 33 41 34 30 36 31 35 31 43 33 46 32 34 46 37 44 37 46 43 34 44 43 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 31 43 30 46 36 45 35 46 39 38 37 42 44 45 30 41 36 42 33 44 39 42 33 33 36 46 43 37 43 37 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 31 43 36 46 36 30 30 46 42 35 45 45 30 36 32 30 36 31 44 42 34 31 42 34 34 39 35 42 41 43 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 31 43 44 31 39 41 36 38 37 33 35 35 35 41 39 42 36 39 45 46 33 41 33 36 42 41 43 46 43 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 32 31 39 41 37 37 42 30 43 37 31 31 33 41 42 45 30 34 39 32 30 36 34 38 36 36 36 38 32 42 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 32 Data Ascii: li>31A3CCD1E3A406151C3F24F7D7FC4DCC</rdf:li> <rdf:li>31C0F6E5F987BDE0A6B3D9B336FC7C7B</rdf:li> <rdf:li>31C6F600FB5EE062061DB41B4495BAC9</rdf:li> <rdf:li>31CD19A6873555A9B69EF3A36BACFC48</rdf:li> <rdf:li>3219A77B0C7113ABE0492064866682B7</rdf:li> <rdf:li>32
2022-03-15 16:08:34 UTC	11809	IN	Data Raw: 3e 33 38 38 38 45 34 32 43 41 37 42 33 42 45 30 34 34 44 34 45 41 33 41 46 46 30 32 31 34 36 37 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 38 38 42 36 36 31 36 30 39 44 43 31 31 38 39 37 30 39 32 39 32 35 39 32 42 44 46 31 36 31 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 38 38 46 30 39 46 33 34 46 33 30 30 45 45 42 33 35 32 44 30 33 43 42 38 44 41 34 45 43 44 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 38 39 39 34 39 39 35 30 43 43 37 37 32 32 38 38 44 36 43 37 30 38 33 34 46 37 30 45 39 44 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 38 42 30 39 46 35 41 36 34 32 43 41 43 39 36 34 30 31 45 42 35 46 39 34 34 38 43 30 38 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 33 38 42 32 Data Ascii: >3888E42CA7B3BE044D4EA3AFF021467C</rdf:li> <rdf:li>388B661609DC1189709292592BDF161B</rdf:li> <rdf:li>388F09F34F300EEB352D03CB8DA4ECD8</rdf:li> <rdf:li>389949950CC772288D6C70834F70E9D7</rdf:li> <rdf:li>38B09F5A642CAC96401EB5F9448C0883</rdf:li> <rdf:li>38B2
2022-03-15 16:08:34 UTC	11825	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 41 30 36 31 38 30 36 38 45 34 37 35 38 36 32 30 35 30 42 31 44 34 34 33 31 42 34 44 34 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 41 30 46 34 37 43 35 35 43 32 32 43 44 43 31 46 43 45 33 38 37 32 42 33 35 30 31 30 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 41 42 39 33 30 33 38 37 35 35 35 37 46 35 43 46 35 32 31 34 44 43 33 31 39 35 30 45 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 43 37 30 33 45 46 41 44 33 45 38 39 33 34 42 39 44 43 34 39 42 35 45 45 41 32 46 45 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 35 43 38 45 39 30 42 34 35 35 46 31 30 45 36 35 38 36 34 44 42 41 33 46 38 43 30 45 31 46 38 3c 2f 72 64 66 3a Data Ascii: /rdf:li> <rdf:li>45A0618068E475862050B1D4431B4D47</rdf:li> <rdf:li>45A0F47C55C22CDC1FCE3872B3501003</rdf:li> <rdf:li>45AB9303875557F5CF5214DC31950E96</rdf:li> <rdf:li>45C703EFAD3E8934B9DC49B5EEA2FE05</rdf:li> <rdf:li>45C8E90B455F10E65864DBA3F8C0E1F8</rdf:
2022-03-15 16:08:34 UTC	11841	IN	Data Raw: 36 36 46 39 45 35 30 46 32 36 42 42 37 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 41 32 31 39 32 37 45 38 45 46 30 38 35 37 33 36 42 30 41 33 34 32 35 46 36 33 35 41 38 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 41 43 35 43 39 30 33 42 42 30 36 42 32 42 36 45 35 41 43 39 41 39 36 35 45 43 30 42 37 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 41 44 46 36 39 43 43 37 45 37 39 42 41 39 30 44 42 41 36 34 34 30 31 36 39 43 32 43 42 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 42 32 33 34 34 42 44 37 30 45 30 44 36 46 35 42 41 34 38 30 38 33 44 37 39 30 38 38 42 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 32 42 36 32 43 30 41 37 46 35 30 39 31 36 38 45 36 31 46 34 37 Data Ascii: 66F9E50F26BB7F5</rdf:li> <rdf:li>52A21927E8EF085736B0A3425F635A85</rdf:li> <rdf:li>52AC5C903BB06B2B6E5AC9A965EC0B76</rdf:li> <rdf:li>52ADF69CC7E79BA90DBA6440169C2CB3</rdf:li> <rdf:li>52B2344BD70E0D6F5BA48083D79088BF</rdf:li> <rdf:li>52B62C0A7F509168E61F47
2022-03-15 16:08:34 UTC	11849	IN	Data Raw: 34 42 45 31 35 30 39 43 33 31 30 44 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 39 38 44 35 42 39 46 33 34 41 45 46 46 43 35 33 43 34 35 35 30 44 31 41 30 38 46 42 32 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 39 39 31 37 39 35 46 45 45 32 45 41 30 35 31 44 44 33 45 37 46 37 36 46 43 44 38 33 44 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 39 39 37 32 30 31 36 39 35 39 43 37 38 33 46 34 43 39 34 45 43 36 43 32 33 30 30 45 35 46 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 39 39 39 32 33 35 38 34 35 37 32 35 36 42 31 44 43 31 46 46 34 34 32 38 33 33 43 35 33 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 39 39 43 37 32 30 32 45 39 46 30 42 42 34 46 32 39 36 46 45 42 44 37 Data Ascii: 4BE1509C310D5</rdf:li> <rdf:li>598D5B9F34AEFFC53C4550D1A08FB2F9</rdf:li> <rdf:li>5991795FEE2EA051DD3E7F76FCD83D48</rdf:li> <rdf:li>59972016959C783F4C94EC6C2300E5FF</rdf:li> <rdf:li>59992358457256B1DC1FF442833C5392</rdf:li> <rdf:li>599C7202E9F0BB4F296FEBD7
2022-03-15 16:08:34 UTC	11865	IN	Data Raw: 41 36 33 30 31 37 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 37 45 42 37 38 39 46 41 33 37 45 39 36 30 44 44 39 36 38 30 46 41 34 42 42 31 31 38 32 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 37 45 43 33 33 36 33 34 34 45 31 38 31 41 30 31 42 35 36 41 44 34 39 37 45 41 35 46 36 46 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 37 46 42 44 41 39 33 33 36 34 37 35 33 36 39 37 32 39 43 45 32 36 34 36 36 42 34 34 43 35 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 38 30 34 32 41 43 38 33 36 41 43 41 31 37 45 45 33 44 42 30 39 33 42 32 41 43 42 37 38 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 38 34 32 45 33 38 35 31 39 31 33 44 46 45 30 45 34 34 31 46 33 43 37 35 41 37 39 34 Data Ascii: A63017DF</rdf:li> <rdf:li>67EB789FA37E960DD9680FA4BB118234</rdf:li> <rdf:li>67EC336344E181A01B56AD497EA5F6F4</rdf:li> <rdf:li>67FBDA9336475369729CE26466B44C50</rdf:li> <rdf:li>68042AC836ACA17EE3DB093B2ACB78A9</rdf:li> <rdf:li>6842E3851913DFE0E441F3C75A794
2022-03-15 16:08:34 UTC	11881	IN	Data Raw: 41 30 43 33 42 45 46 38 39 32 35 33 35 44 44 37 38 37 38 44 36 43 44 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 36 33 32 36 38 30 42 34 42 39 36 39 39 38 44 31 33 35 33 31 33 36 42 33 44 38 44 45 39 31 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 36 33 33 42 43 34 31 31 30 32 32 45 37 37 41 44 31 39 33 35 43 42 30 41 44 32 31 38 31 34 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 36 34 33 45 32 37 41 46 42 30 45 30 45 33 36 45 38 46 46 45 34 43 39 31 36 42 46 34 34 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 36 34 43 46 33 46 36 44 45 34 39 44 36 38 35 36 45 44 31 32 36 35 30 45 33 32 43 36 44 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 36 35 30 38 38 42 30 35 42 45 41 38 Data Ascii: A0C3BEF892535DD7878D6CD9</rdf:li> <rdf:li>7632680B4B96998D1353136B3D8DE91C</rdf:li> <rdf:li>7633BC411022E77AD1935CB0AD21814D</rdf:li> <rdf:li>7643E27AFB0E0E36E8FFE4C916BF4483</rdf:li> <rdf:li>764CF3F6DE49D6856ED12650E32C6D56</rdf:li> <rdf:li>765088B05BEA8
2022-03-15 16:08:34 UTC	11889	IN	Data Raw: 34 34 45 43 32 39 43 34 33 31 44 42 34 39 42 44 30 31 38 38 34 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 44 30 42 36 30 36 35 39 34 30 38 46 30 45 38 39 41 36 42 35 37 33 38 46 33 36 30 42 30 39 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 44 30 45 42 30 31 32 32 45 33 34 33 31 41 30 30 34 35 32 37 36 35 37 39 41 34 46 38 30 41 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 44 31 42 46 45 34 34 35 35 32 42 46 36 36 43 31 37 37 37 33 31 34 46 42 43 36 43 43 43 44 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 44 32 45 35 33 35 42 45 46 43 36 34 45 30 34 41 43 45 42 37 45 34 36 34 46 30 44 41 42 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 44 34 32 45 34 30 32 32 38 34 44 35 31 34 Data Ascii: 44EC29C431DB49BD018845</rdf:li> <rdf:li>7D0B60659408F0E89A6B5738F360B098</rdf:li> <rdf:li>7D0EB0122E3431A0045276579A4F80AB</rdf:li> <rdf:li>7D1BFE44552BF66C1777314FBC6CCCDB</rdf:li> <rdf:li>7D2E535BEFC64E04ACEB7E464F0DAB89</rdf:li> <rdf:li>7D42E402284D514
2022-03-15 16:08:34 UTC	11905	IN	Data Raw: 64 66 3a 6c 69 3e 38 39 36 37 45 31 35 45 31 31 32 45 35 41 41 32 33 35 31 34 37 34 32 30 33 33 43 45 45 32 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 39 37 30 44 35 35 37 32 39 43 34 39 39 37 42 38 45 42 39 33 33 31 42 38 33 33 45 43 39 30 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 39 37 37 34 30 30 46 41 43 44 38 32 35 33 36 37 44 44 37 41 34 32 34 33 46 32 35 43 39 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 39 37 41 45 30 34 46 39 38 33 45 46 42 33 34 46 45 45 39 30 30 30 39 42 34 34 44 31 38 45 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 39 37 44 36 45 39 38 30 32 39 34 35 31 30 39 45 42 43 39 31 37 38 39 42 37 33 43 36 32 33 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: df:li>8967E15E112E5AA23514742033CEE296</rdf:li> <rdf:li>8970D55729C4997B8EB9331B833EC907</rdf:li> <rdf:li>8977400FACD825367DD7A4243F25C986</rdf:li> <rdf:li>897AE04F983EFB34FEE90009B44D18E9</rdf:li> <rdf:li>897D6E9802945109EBC91789B73C6237</rdf:li> <rdf:li
2022-03-15 16:08:34 UTC	11921	IN	Data Raw: 35 42 37 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 38 31 41 43 31 34 42 44 41 35 39 37 37 31 32 33 43 31 36 42 32 39 38 32 31 30 38 33 30 36 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 38 31 44 42 37 33 41 30 32 44 33 32 38 43 39 44 34 38 41 33 35 45 36 38 37 42 34 44 33 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 38 33 43 31 36 44 31 45 41 36 43 36 45 34 41 33 37 42 45 30 32 39 46 34 35 30 36 46 37 41 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 38 34 41 35 39 32 46 38 42 34 30 37 43 45 35 41 45 32 44 37 37 33 32 45 41 32 37 43 43 45 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 38 34 46 32 43 44 44 34 39 36 31 42 35 32 38 30 44 33 35 36 36 44 31 42 34 32 34 35 44 34 37 3c Data Ascii: 5B75</rdf:li> <rdf:li>981AC14BDA5977123C16B2982108306D</rdf:li> <rdf:li>981DB73A02D328C9D48A35E687B4D33E</rdf:li> <rdf:li>983C16D1EA6C6E4A37BE029F4506F7A0</rdf:li> <rdf:li>984A592F8B407CE5AE2D7732EA27CCE1</rdf:li> <rdf:li>984F2CDD4961B5280D3566D1B4245D47<
2022-03-15 16:08:34 UTC	11929	IN	Data Raw: 45 33 30 39 34 39 44 36 46 31 31 35 45 44 41 43 39 30 35 42 37 38 44 44 32 42 34 36 36 31 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 33 42 35 37 33 39 41 44 38 36 39 31 42 44 45 37 33 41 35 45 37 41 33 37 38 35 38 46 46 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 33 44 38 31 44 44 38 33 30 35 35 35 32 46 46 33 39 39 44 39 45 30 35 45 45 46 33 44 38 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 34 46 43 39 36 43 34 37 43 37 41 46 39 35 42 30 43 45 38 36 38 41 43 43 44 36 38 45 33 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 35 31 46 41 45 36 31 38 39 32 31 33 45 39 37 46 38 39 38 43 32 42 37 44 45 31 32 35 44 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 39 45 35 37 39 41 Data Ascii: E30949D6F115EDAC905B78DD2B46614</rdf:li> <rdf:li>9E3B5739AD8691BDE73A5E7A37858FF5</rdf:li> <rdf:li>9E3D81DD8305552FF399D9E05EEF3D81</rdf:li> <rdf:li>9E4FC96C47C7AF95B0CE868ACCD68E3C</rdf:li> <rdf:li>9E51FAE6189213E97F898C2B7DE125D7</rdf:li> <rdf:li>9E579A
2022-03-15 16:08:34 UTC	11945	IN	Data Raw: 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 43 30 39 33 42 31 45 34 30 44 44 39 37 30 39 44 41 44 45 41 36 32 34 38 31 46 34 34 42 34 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 43 32 32 38 36 41 35 44 38 45 30 32 33 46 41 45 31 41 42 36 46 43 41 42 44 43 43 34 33 37 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 43 32 34 33 45 33 43 30 33 34 36 43 44 31 32 37 39 46 43 45 30 30 46 32 32 31 37 31 31 30 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 43 32 37 34 45 33 31 38 38 41 31 36 32 46 45 37 30 38 34 38 31 44 46 32 36 46 37 42 46 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 41 43 32 42 31 43 41 37 38 45 39 35 35 41 35 36 45 31 46 45 32 31 36 30 39 33 34 45 35 41 33 45 3c 2f 72 64 66 3a 6c 69 Data Ascii: df:li> <rdf:li>AC093B1E40DD9709DADEA62481F44B42</rdf:li> <rdf:li>AC2286A5D8E023FAE1AB6FCABDCC437D</rdf:li> <rdf:li>AC243E3C0346CD1279FCE00F2217110E</rdf:li> <rdf:li>AC274E3188A162FE708481DF26F7BFA9</rdf:li> <rdf:li>AC2B1CA78E955A56E1FE2160934E5A3E</rdf:li
2022-03-15 16:08:34 UTC	11961	IN	Data Raw: 31 38 45 36 44 32 33 38 32 38 30 46 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 34 31 42 39 38 39 44 46 31 46 38 35 44 39 37 33 30 33 36 36 35 30 39 42 38 35 39 41 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 34 42 42 39 42 34 42 42 32 44 36 30 38 46 31 36 44 42 46 31 31 36 36 38 35 46 38 42 32 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 34 46 45 41 36 46 43 37 34 36 36 38 36 45 46 31 31 36 33 42 32 43 43 34 34 34 46 38 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 35 43 45 35 30 30 32 46 43 44 33 42 30 39 31 36 36 46 30 37 41 31 35 45 30 33 44 45 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 42 39 36 39 39 32 34 41 37 31 32 46 33 42 39 38 33 35 43 46 33 46 37 35 Data Ascii: 18E6D238280FF</rdf:li> <rdf:li>B941B989DF1F85D9730366509B859A17</rdf:li> <rdf:li>B94BB9B4BB2D608F16DBF116685F8B25</rdf:li> <rdf:li>B94FEA6FC746686EF1163B2CC444F868</rdf:li> <rdf:li>B95CE5002FCD3B09166F07A15E03DEA8</rdf:li> <rdf:li>B969924A712F3B9835CF3F75
2022-03-15 16:08:34 UTC	11968	IN	Data Raw: 38 46 43 34 31 36 31 43 35 44 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 31 31 35 42 30 38 31 42 41 30 34 39 45 43 41 41 36 32 39 34 31 31 35 33 46 45 38 37 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 31 32 37 33 39 36 45 44 32 42 36 37 31 36 43 35 35 46 34 35 36 42 30 32 46 30 41 34 30 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 31 35 45 35 44 31 43 46 39 34 34 39 35 39 41 39 33 34 31 38 30 31 37 45 31 41 30 39 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 31 39 30 46 43 31 43 30 44 37 41 37 32 44 45 31 39 44 46 36 32 43 39 36 32 33 45 33 37 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 30 32 32 38 39 39 36 43 30 43 34 43 45 45 46 41 30 44 32 44 39 45 32 36 32 Data Ascii: 8FC4161C5D0</rdf:li> <rdf:li>C0115B081BA049ECAA62941153FE8717</rdf:li> <rdf:li>C0127396ED2B6716C55F456B02F0A401</rdf:li> <rdf:li>C015E5D1CF944959A93418017E1A0965</rdf:li> <rdf:li>C0190FC1C0D7A72DE19DF62C9623E375</rdf:li> <rdf:li>C0228996C0C4CEEFA0D2D9E262
2022-03-15 16:08:34 UTC	11970	IN	Data Raw: 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 31 45 34 35 34 37 37 38 30 41 38 37 33 43 42 42 43 33 33 43 34 32 37 45 46 31 46 32 44 32 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 31 45 38 45 30 33 34 30 45 45 41 39 46 36 43 42 39 38 33 44 31 39 34 37 41 44 32 44 39 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 31 45 43 39 38 44 46 43 32 38 31 38 39 44 41 41 45 35 33 44 38 35 44 41 46 41 42 30 44 30 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 31 46 37 41 30 43 32 31 44 42 37 33 35 46 32 38 35 30 42 34 34 34 33 45 37 35 45 44 34 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 32 30 39 35 32 42 38 43 30 30 30 43 46 36 45 35 30 44 35 32 31 33 41 45 31 43 30 32 31 33 39 3c 2f 72 64 66 3a 6c 69 3e 20 Data Ascii: :li> <rdf:li>C1E4547780A873CBBC33C427EF1F2D24</rdf:li> <rdf:li>C1E8E0340EEA9F6CB983D1947AD2D962</rdf:li> <rdf:li>C1EC98DFC28189DAAE53D85DAFAB0D05</rdf:li> <rdf:li>C1F7A0C21DB735F2850B4443E75ED4B8</rdf:li> <rdf:li>C20952B8C000CF6E50D5213AE1C02139</rdf:li>
2022-03-15 16:08:34 UTC	11986	IN	Data Raw: 36 37 38 30 37 41 43 38 30 45 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 45 41 31 42 31 32 34 30 32 39 46 31 39 30 34 39 46 32 42 44 42 38 37 42 32 46 38 42 41 36 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 45 41 37 36 33 44 32 41 43 32 30 35 44 36 33 38 43 39 30 39 43 35 36 42 39 33 46 45 38 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 45 41 38 35 42 45 43 45 37 33 44 34 39 38 41 34 32 34 37 43 38 36 44 41 35 44 33 30 33 41 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 45 41 42 33 33 33 36 45 38 36 43 35 39 33 34 45 39 32 43 45 37 39 38 46 30 45 43 34 30 30 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 43 45 42 33 37 44 41 31 34 34 42 42 35 35 38 43 31 41 37 30 34 33 38 43 32 35 Data Ascii: 67807AC80E9</rdf:li> <rdf:li>CEA1B124029F19049F2BDB87B2F8BA6D</rdf:li> <rdf:li>CEA763D2AC205D638C909C56B93FE800</rdf:li> <rdf:li>CEA85BECE73D498A4247C86DA5D303AF</rdf:li> <rdf:li>CEAB3336E86C5934E92CE798F0EC4002</rdf:li> <rdf:li>CEB37DA144BB558C1A70438C25
2022-03-15 16:08:34 UTC	12002	IN	Data Raw: 41 39 35 33 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 38 42 42 36 42 31 38 46 46 41 43 43 31 41 44 30 42 30 34 37 33 35 35 30 32 45 34 33 36 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 38 44 43 42 41 37 42 31 38 35 46 42 44 43 43 32 31 34 35 34 38 32 41 36 30 45 35 46 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 39 35 34 31 31 45 36 37 30 32 30 34 30 46 31 31 45 35 38 43 36 42 38 34 38 32 30 41 46 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 39 39 42 32 41 32 46 36 46 35 38 30 30 46 43 42 39 42 31 34 46 34 44 31 31 33 46 45 45 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 44 43 42 42 46 33 32 32 46 39 33 39 35 38 32 31 38 36 33 36 39 37 44 31 43 45 42 33 31 39 44 Data Ascii: A95383</rdf:li> <rdf:li>DC8BB6B18FFACC1AD0B04735502E4364</rdf:li> <rdf:li>DC8DCBA7B185FBDCC2145482A60E5F22</rdf:li> <rdf:li>DC95411E6702040F11E58C6B84820AFC</rdf:li> <rdf:li>DC99B2A2F6F5800FCB9B14F4D113FEEC</rdf:li> <rdf:li>DCBBF322F9395821863697D1CEB319D
2022-03-15 16:08:34 UTC	12008	IN	Data Raw: 43 44 39 38 31 43 33 30 39 42 33 45 43 46 46 37 35 43 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 31 45 36 42 44 36 33 43 39 31 38 37 33 46 31 39 39 46 30 42 32 46 44 45 35 35 39 31 31 38 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 31 46 32 35 35 31 37 43 33 42 45 35 39 43 43 43 31 42 38 39 39 42 36 46 37 39 35 30 33 39 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 31 46 34 33 39 45 42 31 33 45 38 45 41 39 35 33 35 43 37 42 32 42 36 44 38 30 46 32 31 34 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 31 46 37 34 46 37 37 37 35 37 43 32 31 46 43 38 39 35 31 36 39 41 44 33 32 37 42 38 35 33 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 31 46 46 33 38 34 45 35 31 38 41 35 35 43 33 44 Data Ascii: CD981C309B3ECFF75C11</rdf:li> <rdf:li>E1E6BD63C91873F199F0B2FDE5591184</rdf:li> <rdf:li>E1F25517C3BE59CCC1B899B6F795039D</rdf:li> <rdf:li>E1F439EB13E8EA9535C7B2B6D80F2145</rdf:li> <rdf:li>E1F74F77757C21FC895169AD327B8533</rdf:li> <rdf:li>E1FF384E518A55C3D
2022-03-15 16:08:34 UTC	12024	IN	Data Raw: 3a 6c 69 3e 45 44 46 34 37 43 41 37 35 46 41 41 41 34 42 33 43 31 42 46 38 42 43 39 41 37 34 34 46 39 42 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 44 46 36 43 45 46 41 42 35 43 42 37 37 44 32 43 45 42 46 43 32 41 38 31 35 46 37 44 36 32 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 44 46 42 39 37 42 43 35 36 45 45 38 42 34 30 34 34 32 34 30 37 42 41 34 36 46 41 33 41 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 45 30 35 42 34 42 35 39 41 39 32 41 34 31 30 46 45 46 31 33 31 44 43 31 42 46 46 41 44 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 45 31 33 32 36 39 43 38 30 31 38 36 38 41 30 38 44 43 31 45 39 45 34 33 44 37 30 35 30 37 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 45 Data Ascii: :li>EDF47CA75FAAA4B3C1BF8BC9A744F9BF</rdf:li> <rdf:li>EDF6CEFAB5CB77D2CEBFC2A815F7D626</rdf:li> <rdf:li>EDFB97BC56EE8B40442407BA46FA3A3F</rdf:li> <rdf:li>EE05B4B59A92A410FEF131DC1BFFADA5</rdf:li> <rdf:li>EE13269C801868A08DC1E9E43D70507A</rdf:li> <rdf:li>E
2022-03-15 16:08:34 UTC	12040	IN	Data Raw: 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 41 36 32 39 32 39 36 43 45 44 41 39 46 33 38 46 43 42 43 32 36 46 35 34 46 34 32 35 32 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 41 36 42 36 31 43 45 33 37 36 34 38 31 44 44 31 42 43 41 35 35 42 42 38 46 34 37 45 45 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 41 36 46 31 41 38 31 42 39 36 39 31 42 32 35 46 33 43 38 45 36 39 44 31 39 38 34 38 42 43 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 41 38 42 35 36 45 35 35 44 44 37 32 36 42 41 37 41 31 37 31 42 39 39 38 38 44 33 36 34 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 46 41 39 41 38 42 38 34 41 43 31 45 38 45 43 31 43 42 37 32 31 36 36 32 37 39 42 34 31 43 41 46 3c 2f 72 Data Ascii: 2D</rdf:li> <rdf:li>FA629296CEDA9F38FCBC26F54F425222</rdf:li> <rdf:li>FA6B61CE376481DD1BCA55BB8F47EE2C</rdf:li> <rdf:li>FA6F1A81B9691B25F3C8E69D19848BC1</rdf:li> <rdf:li>FA8B56E55DD726BA7A171B9988D364C6</rdf:li> <rdf:li>FA9A8B84AC1E8EC1CB72166279B41CAF</r
2022-03-15 16:08:34 UTC	12048	IN	Data Raw: 38 2d 61 34 37 33 2d 39 37 30 30 35 65 39 33 37 63 31 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 33 30 32 62 65 36 39 2d 65 34 37 39 2d 31 31 37 38 2d 61 32 35 33 2d 65 62 62 37 38 32 63 31 66 65 32 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 33 33 39 32 37 35 30 2d 38 33 38 37 2d 31 31 65 37 2d 61 35 36 34 2d 61 61 30 32 30 33 62 63 30 35 63 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 34 65 31 34 31 33 66 2d 39 64 34 63 2d 31 31 64 63 2d 39 66 38 62 2d 62 32 64 30 66 61 39 36 36 64 65 37 3c 2f 72 64 66 3a 6c 69 Data Ascii: 8-a473-97005e937c10</rdf:li> <rdf:li>adobe:docid:photoshop:0302be69-e479-1178-a253-ebb782c1fe21</rdf:li> <rdf:li>adobe:docid:photoshop:03392750-8387-11e7-a564-aa0203bc05cd</rdf:li> <rdf:li>adobe:docid:photoshop:04e1413f-9d4c-11dc-9f8b-b2d0fa966de7</rdf:li
2022-03-15 16:08:34 UTC	12064	IN	Data Raw: 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 38 30 36 34 36 66 38 2d 63 61 62 66 2d 31 31 37 38 2d 62 36 32 30 2d 61 31 36 33 30 65 64 61 30 62 61 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 38 30 38 65 61 32 65 2d 36 63 30 30 2d 31 31 65 37 2d 61 35 66 32 2d 66 37 65 32 62 32 34 36 63 30 36 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 38 32 63 30 31 36 61 2d 38 66 34 31 2d 31 31 65 37 2d 61 63 38 30 2d 61 33 62 36 61 61 64 63 30 39 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 38 33 33 61 34 30 66 2d Data Ascii: e:docid:photoshop:380646f8-cabf-1178-b620-a1630eda0ba1</rdf:li> <rdf:li>adobe:docid:photoshop:3808ea2e-6c00-11e7-a5f2-f7e2b246c064</rdf:li> <rdf:li>adobe:docid:photoshop:382c016a-8f41-11e7-ac80-a3b6aadc0915</rdf:li> <rdf:li>adobe:docid:photoshop:3833a40f-
2022-03-15 16:08:34 UTC	12080	IN	Data Raw: 36 30 66 35 32 31 62 66 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 36 32 36 30 32 64 35 2d 36 34 63 32 2d 31 31 64 62 2d 61 65 39 64 2d 64 32 66 35 33 37 64 37 65 35 64 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 36 34 61 31 34 34 34 2d 33 36 38 61 2d 31 31 65 37 2d 61 35 63 62 2d 65 66 62 36 30 61 37 30 30 36 32 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 36 37 62 31 35 63 61 2d 66 65 32 64 2d 31 31 64 39 2d 38 66 64 66 2d 63 30 30 34 34 62 66 62 32 38 38 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: 60f521bf63</rdf:li> <rdf:li>adobe:docid:photoshop:662602d5-64c2-11db-ae9d-d2f537d7e5d1</rdf:li> <rdf:li>adobe:docid:photoshop:664a1444-368a-11e7-a5cb-efb60a700623</rdf:li> <rdf:li>adobe:docid:photoshop:667b15ca-fe2d-11d9-8fdf-c0044bfb288b</rdf:li> <rdf:li
2022-03-15 16:08:34 UTC	12088	IN	Data Raw: 70 3a 37 61 34 36 35 36 34 36 2d 39 66 62 63 2d 31 31 64 61 2d 62 30 62 34 2d 38 34 66 38 31 62 33 62 39 32 61 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 61 34 36 35 36 34 63 2d 39 66 62 63 2d 31 31 64 61 2d 62 30 62 34 2d 38 34 66 38 31 62 33 62 39 32 61 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 61 63 36 66 35 63 38 2d 38 31 33 33 2d 31 31 65 37 2d 39 39 34 32 2d 63 33 35 65 62 62 63 39 66 32 38 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 62 32 31 66 36 36 66 2d 39 66 63 31 2d 31 31 64 61 2d 38 35 32 61 2d 61 Data Ascii: p:7a465646-9fbc-11da-b0b4-84f81b3b92aa</rdf:li> <rdf:li>adobe:docid:photoshop:7a46564c-9fbc-11da-b0b4-84f81b3b92aa</rdf:li> <rdf:li>adobe:docid:photoshop:7ac6f5c8-8133-11e7-9942-c35ebbc9f282</rdf:li> <rdf:li>adobe:docid:photoshop:7b21f66f-9fc1-11da-852a-a
2022-03-15 16:08:34 UTC	12104	IN	Data Raw: 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 64 34 62 32 65 33 66 2d 39 31 31 65 2d 31 31 65 36 2d 38 63 33 62 2d 38 66 35 30 35 34 62 65 39 35 64 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 64 65 32 34 32 36 37 2d 38 35 39 64 2d 31 31 64 38 2d 62 31 38 36 2d 62 34 65 38 30 31 34 32 63 36 64 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 64 65 36 34 66 66 35 2d 32 61 62 33 2d 31 31 65 37 2d 62 66 34 66 2d 61 32 33 65 38 33 39 35 38 64 65 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f Data Ascii: li> <rdf:li>adobe:docid:photoshop:ad4b2e3f-911e-11e6-8c3b-8f5054be95dd</rdf:li> <rdf:li>adobe:docid:photoshop:ade24267-859d-11d8-b186-b4e80142c6d8</rdf:li> <rdf:li>adobe:docid:photoshop:ade64ff5-2ab3-11e7-bf4f-a23e83958dee</rdf:li> <rdf:li>adobe:docid:pho
2022-03-15 16:08:34 UTC	12120	IN	Data Raw: 33 2d 66 66 30 31 2d 62 35 34 35 2d 38 65 32 30 2d 64 39 63 30 35 33 33 62 34 32 35 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 33 61 31 62 39 63 62 2d 63 65 63 36 2d 31 31 64 39 2d 62 33 36 32 2d 65 62 35 63 38 31 61 66 36 31 31 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 33 63 36 30 62 33 37 2d 38 32 32 64 2d 63 33 34 61 2d 62 64 38 30 2d 33 31 34 33 34 64 64 61 61 38 66 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 34 32 30 34 65 66 66 2d 38 37 31 37 2d 31 31 65 31 2d 39 62 38 38 2d 66 38 64 38 63 33 64 34 36 38 Data Ascii: 3-ff01-b545-8e20-d9c0533b4252</rdf:li> <rdf:li>adobe:docid:photoshop:e3a1b9cb-cec6-11d9-b362-eb5c81af611e</rdf:li> <rdf:li>adobe:docid:photoshop:e3c60b37-822d-c34a-bd80-31434ddaa8f4</rdf:li> <rdf:li>adobe:docid:photoshop:e4204eff-8717-11e1-9b88-f8d8c3d468
2022-03-15 16:08:34 UTC	12127	IN	Data Raw: 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 61 39 36 32 64 33 37 2d 32 30 65 33 2d 34 66 34 64 2d 61 38 62 31 2d 64 31 36 65 35 31 65 61 35 63 32 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 61 61 31 66 66 36 34 2d 65 35 31 61 2d 31 31 64 62 2d 38 39 63 33 2d 62 35 36 61 63 30 63 62 39 35 34 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 62 34 33 30 64 61 66 2d 66 35 65 30 2d 37 31 34 35 2d 62 36 34 38 2d 61 66 33 34 38 35 30 34 33 37 65 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 62 35 37 30 30 Data Ascii: dobe:docid:photoshop:fa962d37-20e3-4f4d-a8b1-d16e51ea5c2c</rdf:li> <rdf:li>adobe:docid:photoshop:faa1ff64-e51a-11db-89c3-b56ac0cb954d</rdf:li> <rdf:li>adobe:docid:photoshop:fb430daf-f5e0-7145-b648-af34850437e9</rdf:li> <rdf:li>adobe:docid:photoshop:fb5700
2022-03-15 16:08:34 UTC	12143	IN	Data Raw: 45 35 32 36 34 32 46 32 30 41 43 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 31 46 32 42 43 41 35 37 34 44 36 31 31 44 42 41 38 43 35 39 41 35 30 35 42 33 38 37 42 37 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 32 32 33 31 42 41 34 41 38 43 32 44 46 31 31 41 46 32 43 43 45 35 42 31 32 35 33 43 45 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 32 37 31 38 46 42 37 36 33 34 44 44 46 31 31 41 46 30 30 38 34 44 33 36 45 42 32 43 44 43 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 33 32 37 33 33 45 42 46 35 41 34 31 44 42 31 31 39 39 30 39 39 35 32 46 30 44 36 37 44 45 35 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a Data Ascii: E52642F20AC7</rdf:li> <rdf:li>uuid:31F2BCA574D611DBA8C59A505B387B74</rdf:li> <rdf:li>uuid:32231BA4A8C2DF11AF2CCE5B1253CE17</rdf:li> <rdf:li>uuid:32718FB7634DDF11AF0084D36EB2CDCB</rdf:li> <rdf:li>uuid:32733EBF5A41DB119909952F0D67DE54</rdf:li> <rdf:li>uuid:
2022-03-15 16:08:34 UTC	12159	IN	Data Raw: 3e 75 75 69 64 3a 36 36 37 42 31 36 30 32 46 34 45 41 45 30 31 31 42 34 41 30 42 46 42 31 41 32 43 38 38 42 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 36 45 37 37 30 43 38 44 38 38 33 44 44 31 31 38 35 36 37 46 44 37 44 42 37 44 31 46 42 36 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 36 45 37 41 38 31 32 32 36 38 36 44 42 31 31 38 35 39 37 38 34 34 32 33 38 46 30 43 41 45 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 37 30 33 42 46 39 41 45 37 42 45 31 31 44 45 39 30 32 41 42 31 34 45 45 31 32 39 45 36 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 36 37 34 42 35 39 36 30 37 30 42 34 31 31 44 42 42 30 43 33 42 33 33 42 38 46 46 33 44 Data Ascii: >uuid:667B1602F4EAE011B4A0BFB1A2C88BBB</rdf:li> <rdf:li>uuid:66E770C8D883DD118567FD7DB7D1FB68</rdf:li> <rdf:li>uuid:66E7A8122686DB118597844238F0CAED</rdf:li> <rdf:li>uuid:6703BF9AE7BE11DE902AB14EE129E651</rdf:li> <rdf:li>uuid:674B596070B411DBB0C3B33B8FF3D
2022-03-15 16:08:34 UTC	12167	IN	Data Raw: 35 34 31 45 43 35 34 46 33 33 32 44 42 45 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 44 44 32 44 38 37 43 46 32 36 44 44 44 31 31 39 38 32 35 43 46 33 39 34 44 38 46 39 37 32 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 45 30 37 35 44 35 41 32 33 36 36 45 32 31 31 38 32 46 36 44 34 33 43 30 41 39 35 46 45 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 45 30 42 42 37 36 39 39 39 37 30 44 45 31 31 39 43 30 33 43 37 31 36 45 46 43 38 46 43 36 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 37 45 34 37 38 33 36 33 38 42 43 35 44 46 31 31 38 31 44 41 38 46 38 37 32 46 33 43 32 46 45 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 Data Ascii: 541EC54F332DBE2</rdf:li> <rdf:li>uuid:7DD2D87CF26DDD119825CF394D8F972B</rdf:li> <rdf:li>uuid:7E075D5A2366E21182F6D43C0A95FE92</rdf:li> <rdf:li>uuid:7E0BB7699970DE119C03C716EFC8FC6F</rdf:li> <rdf:li>uuid:7E4783638BC5DF1181DA8F872F3C2FE6</rdf:li> <rdf:li>uu
2022-03-15 16:08:34 UTC	12183	IN	Data Raw: 32 35 44 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 31 34 30 36 44 35 33 37 42 34 44 31 31 44 41 39 42 41 34 43 34 32 42 34 39 35 36 41 30 31 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 31 36 35 45 44 45 34 46 31 41 36 44 46 31 31 41 42 30 39 39 33 45 35 39 34 45 44 31 41 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 31 37 41 36 31 39 30 32 33 33 31 45 30 31 31 39 37 36 38 44 45 32 46 35 32 31 31 32 46 36 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 31 43 32 41 32 32 43 41 31 35 46 31 31 44 43 38 41 37 34 38 45 36 39 36 30 38 32 37 43 45 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 42 32 31 38 32 43 33 38 Data Ascii: 25D8</rdf:li> <rdf:li>uuid:B1406D537B4D11DA9BA4C42B4956A016</rdf:li> <rdf:li>uuid:B165EDE4F1A6DF11AB0993E594ED1A7E</rdf:li> <rdf:li>uuid:B17A61902331E0119768DE2F52112F6B</rdf:li> <rdf:li>uuid:B1C2A22CA15F11DC8A748E6960827CE4</rdf:li> <rdf:li>uuid:B2182C38
2022-03-15 16:08:34 UTC	12199	IN	Data Raw: 45 31 46 30 42 30 38 42 44 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 30 37 33 34 30 38 36 2d 37 34 42 30 2d 34 33 44 42 2d 39 33 43 39 2d 35 33 31 32 45 35 36 30 33 33 34 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 30 38 44 46 31 42 39 37 30 43 43 44 44 31 31 38 32 38 30 39 43 36 33 34 44 39 38 31 37 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 30 44 33 46 46 33 33 41 45 36 33 44 44 31 31 41 31 43 38 44 42 45 44 35 42 36 46 32 45 44 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 46 31 35 35 37 35 41 35 46 36 32 34 44 45 31 31 41 37 38 41 43 39 37 44 43 43 45 46 41 34 45 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 Data Ascii: E1F0B08BD72</rdf:li> <rdf:li>uuid:F0734086-74B0-43DB-93C9-5312E5603347</rdf:li> <rdf:li>uuid:F08DF1B970CCDD1182809C634D9817C8</rdf:li> <rdf:li>uuid:F0D3FF33AE63DD11A1C8DBED5B6F2ED7</rdf:li> <rdf:li>uuid:F15575A5F624DE11A78AC97DCCEFA4EB</rdf:li> <rdf:li>uu
2022-03-15 16:08:34 UTC	12207	IN	Data Raw: 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 37 31 46 41 35 45 33 36 30 37 41 42 45 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 37 31 46 41 43 32 41 30 46 30 41 32 45 43 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 37 31 46 42 36 44 34 35 43 43 39 41 35 33 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 37 31 46 42 36 45 33 41 31 44 34 37 38 34 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 Data Ascii: > <rdf:li>xmp.did:0180117407206811871FA5E3607ABE83</rdf:li> <rdf:li>xmp.did:0180117407206811871FAC2A0F0A2EC6</rdf:li> <rdf:li>xmp.did:0180117407206811871FB6D45CC9A53C</rdf:li> <rdf:li>xmp.did:0180117407206811871FB6E3A1D47845</rdf:li> <rdf:li>xmp.did:01801
2022-03-15 16:08:34 UTC	12223	IN	Data Raw: 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 33 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 44 31 34 42 41 36 43 43 35 41 38 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 33 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 44 38 38 37 34 37 44 45 41 31 41 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 33 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 45 32 31 39 43 31 36 36 36 39 37 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 33 38 30 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 41 30 32 43 30 43 36 30 42 37 30 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 33 38 30 31 31 37 34 30 Data Ascii: df:li>xmp.did:03801174072068119109D14BA6CC5A8C</rdf:li> <rdf:li>xmp.did:03801174072068119109D88747DEA1A7</rdf:li> <rdf:li>xmp.did:03801174072068119109E219C1666972</rdf:li> <rdf:li>xmp.did:038011740720681192B0A02C0C60B70A</rdf:li> <rdf:li>xmp.did:038011740
2022-03-15 16:08:34 UTC	12239	IN	Data Raw: 46 41 41 46 39 33 43 42 45 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 37 31 46 46 34 39 38 33 43 30 43 33 46 46 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 38 43 36 42 30 43 43 39 35 33 38 34 46 31 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 38 43 36 42 43 36 37 45 37 31 39 42 32 38 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 38 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 41 36 44 38 33 30 32 38 41 42 43 35 38 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 Data Ascii: FAAF93CBE4</rdf:li> <rdf:li>xmp.did:0880117407206811871FF4983C0C3FFA</rdf:li> <rdf:li>xmp.did:088011740720681188C6B0CC95384F1C</rdf:li> <rdf:li>xmp.did:088011740720681188C6BC67E719B286</rdf:li> <rdf:li>xmp.did:08801174072068118A6D83028ABC58A8</rdf:li> <rd
2022-03-15 16:08:34 UTC	12247	IN	Data Raw: 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 43 41 41 44 42 32 36 31 38 32 30 36 38 31 31 38 41 36 44 43 35 43 34 38 42 44 43 41 37 35 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 43 41 46 38 34 30 37 36 33 32 31 36 38 31 31 38 30 38 33 43 42 34 46 39 31 38 35 42 41 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 43 42 43 44 36 33 34 34 32 32 36 36 38 31 31 38 32 32 41 46 44 38 45 36 43 42 44 39 38 43 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 43 43 45 37 31 39 38 41 37 35 33 31 31 45 31 39 45 43 42 42 36 32 44 35 46 42 39 46 33 42 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 43 45 31 30 30 Data Ascii: <rdf:li>xmp.did:0CAADB26182068118A6DC5C48BDCA751</rdf:li> <rdf:li>xmp.did:0CAF8407632168118083CB4F9185BA73</rdf:li> <rdf:li>xmp.did:0CBCD63442266811822AFD8E6CBD98C8</rdf:li> <rdf:li>xmp.did:0CCE7198A75311E19ECBB62D5FB9F3B7</rdf:li> <rdf:li>xmp.did:0CE100
2022-03-15 16:08:34 UTC	12263	IN	Data Raw: 36 30 34 34 31 32 30 36 38 31 31 42 39 39 30 38 32 33 35 34 39 31 38 38 32 34 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 44 42 39 43 46 41 34 35 38 32 30 36 38 31 31 41 42 35 30 39 39 35 41 39 32 34 43 46 44 42 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 44 42 42 39 31 30 38 30 41 32 30 36 38 31 31 38 43 31 34 46 34 45 46 32 30 45 42 43 38 44 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 44 43 34 42 31 33 30 39 39 32 33 36 38 31 31 38 46 36 32 44 36 30 34 41 35 46 43 41 30 34 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 31 44 44 30 38 30 46 31 32 30 33 41 31 31 45 35 41 31 32 35 42 34 30 41 37 38 31 42 Data Ascii: 60441206811B990823549188246</rdf:li> <rdf:li>xmp.did:1DB9CFA458206811AB50995A924CFDBA</rdf:li> <rdf:li>xmp.did:1DBB91080A2068118C14F4EF20EBC8D3</rdf:li> <rdf:li>xmp.did:1DC4B130992368118F62D604A5FCA040</rdf:li> <rdf:li>xmp.did:1DD080F1203A11E5A125B40A781B
2022-03-15 16:08:34 UTC	12279	IN	Data Raw: 3a 32 44 30 33 31 38 37 38 30 43 32 30 36 38 31 31 39 39 34 43 39 43 36 35 38 41 30 44 36 45 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 44 31 31 30 37 35 42 30 43 32 30 36 38 31 31 42 42 31 44 41 37 43 37 31 45 42 41 36 46 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 44 31 31 32 46 33 34 38 46 32 31 36 38 31 31 42 38 34 30 41 36 32 46 38 43 46 32 45 39 44 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 44 33 33 30 36 38 43 39 38 32 30 36 38 31 31 38 30 38 33 41 32 42 36 43 32 38 33 31 33 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 32 44 33 39 33 46 32 34 32 35 39 42 31 31 45 30 42 35 36 36 38 44 Data Ascii: :2D0318780C206811994C9C658A0D6E3E</rdf:li> <rdf:li>xmp.did:2D11075B0C206811BB1DA7C71EBA6F7E</rdf:li> <rdf:li>xmp.did:2D112F348F216811B840A62F8CF2E9DC</rdf:li> <rdf:li>xmp.did:2D33068C982068118083A2B6C28313CA</rdf:li> <rdf:li>xmp.did:2D393F24259B11E0B5668D
2022-03-15 16:08:37 UTC	12286	IN	Data Raw: 30 39 33 36 44 43 38 32 38 45 41 38 37 45 42 45 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 32 65 64 33 64 64 34 2d 33 36 36 65 2d 30 30 34 31 2d 61 33 63 38 2d 34 34 31 35 39 35 61 34 34 35 64 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 33 30 32 63 34 34 61 2d 36 30 38 37 2d 38 31 34 38 2d 38 35 63 31 2d 65 63 38 37 39 38 33 30 66 61 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 33 31 32 61 37 32 38 2d 62 30 30 34 2d 34 65 34 65 2d 62 32 62 37 2d 37 66 38 34 36 62 37 65 65 39 62 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 33 33 32 33 33 33 38 32 41 33 36 32 45 31 31 31 39 44 42 37 43 36 46 35 33 43 Data Ascii: 0936DC828EA87EBE3</rdf:li> <rdf:li>xmp.did:32ed3dd4-366e-0041-a3c8-441595a445d5</rdf:li> <rdf:li>xmp.did:3302c44a-6087-8148-85c1-ec879830fa60</rdf:li> <rdf:li>xmp.did:3312a728-b004-4e4e-b2b7-7f846b7ee9bc</rdf:li> <rdf:li>xmp.did:33233382A362E1119DB7C6F53C
2022-03-15 16:08:37 UTC	12302	IN	Data Raw: 44 35 37 30 41 35 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 31 31 36 45 35 45 33 44 43 32 30 36 38 31 31 38 46 36 32 45 31 35 32 30 45 42 46 32 34 30 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 31 31 37 38 42 38 31 38 38 44 34 44 44 31 31 42 46 38 32 38 46 31 38 44 45 45 41 45 36 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 31 31 39 63 37 34 66 2d 61 61 33 32 2d 34 35 35 31 2d 61 33 63 33 2d 39 61 32 36 65 39 35 66 31 35 31 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 34 31 32 30 61 33 37 61 2d 39 37 38 33 2d 34 62 31 36 2d 62 65 32 63 2d 33 66 36 33 37 38 61 32 62 32 62 39 3c 2f 72 64 66 3a 6c 69 Data Ascii: D570A5C</rdf:li> <rdf:li>xmp.did:4116E5E3DC2068118F62E1520EBF2401</rdf:li> <rdf:li>xmp.did:41178B8188D4DD11BF828F18DEEAE683</rdf:li> <rdf:li>xmp.did:4119c74f-aa32-4551-a3c3-9a26e95f1511</rdf:li> <rdf:li>xmp.did:4120a37a-9783-4b16-be2c-3f6378a2b2b9</rdf:li
2022-03-15 16:08:37 UTC	12318	IN	Data Raw: 34 64 2d 38 32 30 34 2d 33 64 31 66 37 32 30 37 63 35 62 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 31 33 32 34 44 38 44 30 41 32 30 36 38 31 31 38 30 38 33 43 37 44 39 41 46 31 46 31 34 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 31 33 33 41 44 30 44 31 35 32 30 36 38 31 31 39 35 46 45 44 41 30 39 31 41 45 30 35 31 31 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 31 34 37 32 64 32 61 2d 39 31 61 63 2d 34 33 64 62 2d 39 31 39 37 2d 31 66 35 63 33 32 36 32 31 37 35 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 31 34 42 34 41 46 42 39 35 32 35 45 32 31 31 41 36 41 32 38 37 35 34 41 31 41 32 36 36 46 Data Ascii: 4d-8204-3d1f7207c5b5</rdf:li> <rdf:li>xmp.did:51324D8D0A2068118083C7D9AF1F1492</rdf:li> <rdf:li>xmp.did:5133AD0D1520681195FEDA091AE05118</rdf:li> <rdf:li>xmp.did:51472d2a-91ac-43db-9197-1f5c32621753</rdf:li> <rdf:li>xmp.did:514B4AFB9525E211A6A28754A1A266F
2022-03-15 16:08:37 UTC	12326	IN	Data Raw: 38 45 32 44 39 39 41 36 37 36 44 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 37 61 30 34 64 38 38 2d 38 39 36 37 2d 34 38 38 36 2d 62 32 62 66 2d 64 38 63 66 63 62 64 36 32 39 31 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 37 65 65 38 38 66 30 2d 33 61 62 62 2d 31 30 34 37 2d 62 36 36 61 2d 65 62 62 34 38 62 33 63 32 37 39 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 38 30 39 30 36 46 34 33 41 32 30 36 38 31 31 39 34 41 38 41 36 33 32 45 33 41 35 37 32 38 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 38 31 43 31 31 36 37 35 30 32 44 45 31 31 31 42 43 32 38 43 41 37 39 31 34 37 30 34 31 33 37 3c 2f 72 Data Ascii: 8E2D99A676D6</rdf:li> <rdf:li>xmp.did:57a04d88-8967-4886-b2bf-d8cfcbd62917</rdf:li> <rdf:li>xmp.did:57ee88f0-3abb-1047-b66a-ebb48b3c279b</rdf:li> <rdf:li>xmp.did:580906F43A20681194A8A632E3A5728F</rdf:li> <rdf:li>xmp.did:581C1167502DE111BC28CA7914704137</r
2022-03-15 16:08:37 UTC	12342	IN	Data Raw: 39 31 30 39 42 45 41 37 31 35 32 42 31 33 32 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 37 38 36 31 36 64 32 2d 64 32 33 34 2d 34 35 31 33 2d 38 62 36 32 2d 38 36 32 34 39 39 39 39 30 37 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 37 38 38 38 30 45 38 30 39 32 30 36 38 31 31 39 32 42 30 42 41 41 39 30 34 44 45 30 46 38 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 37 39 45 33 37 39 42 45 31 32 30 36 38 31 31 39 31 30 39 41 32 43 44 31 31 44 44 43 42 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 36 37 41 46 30 37 36 32 45 33 32 30 36 38 31 31 39 33 37 38 38 36 37 45 32 37 38 30 37 42 30 45 3c 2f 72 Data Ascii: 9109BEA7152B1323</rdf:li> <rdf:li>xmp.did:678616d2-d234-4513-8b62-862499990715</rdf:li> <rdf:li>xmp.did:678880E80920681192B0BAA904DE0F8D</rdf:li> <rdf:li>xmp.did:679E379BE12068119109A2CD11DDCBDD</rdf:li> <rdf:li>xmp.did:67AF0762E32068119378867E27807B0E</r
2022-03-15 16:08:37 UTC	12358	IN	Data Raw: 69 3e 78 6d 70 2e 64 69 64 3a 37 36 31 33 36 66 31 64 2d 62 66 65 33 2d 65 65 34 38 2d 39 35 38 61 2d 35 61 65 37 31 38 30 35 66 30 39 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 36 31 43 41 37 46 35 30 46 32 30 36 38 31 31 38 43 31 34 41 36 33 44 31 41 39 33 31 30 44 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 36 31 63 34 36 31 34 2d 62 35 36 65 2d 34 38 31 31 2d 61 63 34 36 2d 61 36 63 61 65 30 33 64 65 35 30 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 36 32 39 38 46 36 38 30 43 32 30 36 38 31 31 39 39 34 43 39 43 36 35 38 41 30 44 36 45 33 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 36 33 30 38 Data Ascii: i>xmp.did:76136f1d-bfe3-ee48-958a-5ae71805f092</rdf:li> <rdf:li>xmp.did:761CA7F50F2068118C14A63D1A9310D6</rdf:li> <rdf:li>xmp.did:761c4614-b56e-4811-ac46-a6cae03de50b</rdf:li> <rdf:li>xmp.did:76298F680C206811994C9C658A0D6E3E</rdf:li> <rdf:li>xmp.did:76308
2022-03-15 16:08:37 UTC	12366	IN	Data Raw: 31 33 38 34 39 35 31 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 62 31 30 35 64 64 33 2d 61 64 37 63 2d 34 36 38 62 2d 39 61 31 39 2d 38 62 66 65 36 64 33 31 33 31 35 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 62 31 33 30 64 34 31 2d 38 62 37 63 2d 34 30 36 34 2d 38 32 65 34 2d 64 64 65 33 63 34 39 30 30 37 62 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 62 31 66 36 65 39 33 2d 66 38 33 30 2d 32 34 34 63 2d 62 62 34 66 2d 39 36 32 37 37 61 63 37 35 30 31 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 62 35 33 63 36 65 37 2d 36 62 34 35 2d 34 63 31 62 2d 61 39 65 63 2d 34 34 30 65 35 32 32 66 35 31 32 Data Ascii: 1384951f</rdf:li> <rdf:li>xmp.did:7b105dd3-ad7c-468b-9a19-8bfe6d313154</rdf:li> <rdf:li>xmp.did:7b130d41-8b7c-4064-82e4-dde3c49007b0</rdf:li> <rdf:li>xmp.did:7b1f6e93-f830-244c-bb4f-96277ac7501a</rdf:li> <rdf:li>xmp.did:7b53c6e7-6b45-4c1b-a9ec-440e522f512
2022-03-15 16:08:37 UTC	12382	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 44 39 46 31 38 46 46 30 37 32 30 36 38 31 31 38 32 32 41 38 42 33 32 31 34 32 37 42 43 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 44 45 37 39 46 31 42 45 32 32 37 36 38 31 31 38 43 31 34 41 46 39 44 32 37 33 35 41 34 38 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 44 46 33 37 31 34 33 39 38 32 32 36 38 31 31 38 32 32 41 39 45 34 31 38 46 34 35 35 43 35 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 45 30 36 46 32 38 37 43 42 32 30 36 38 31 31 38 41 36 44 39 39 30 33 46 36 36 44 38 35 35 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 45 30 42 Data Ascii: i> <rdf:li>xmp.did:8D9F18FF07206811822A8B321427BC3F</rdf:li> <rdf:li>xmp.did:8DE79F1BE22768118C14AF9D2735A483</rdf:li> <rdf:li>xmp.did:8DF3714398226811822A9E418F455C5D</rdf:li> <rdf:li>xmp.did:8E06F287CB2068118A6D9903F66D8554</rdf:li> <rdf:li>xmp.did:8E0B
2022-03-15 16:08:37 UTC	12398	IN	Data Raw: 41 45 30 31 31 42 33 30 38 46 32 45 32 43 42 37 41 30 30 30 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 41 42 39 32 37 38 43 31 37 42 46 31 31 45 31 42 42 32 37 43 46 42 43 41 43 33 33 46 37 31 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 41 43 33 44 37 31 44 37 42 32 32 36 38 31 31 41 39 36 31 44 36 30 42 42 46 34 44 33 35 37 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 41 46 44 33 33 44 46 46 36 32 33 36 38 31 31 39 32 42 30 43 31 34 38 38 35 36 34 43 46 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 42 30 38 30 44 33 46 30 44 32 31 36 38 31 31 39 37 41 35 43 35 33 35 33 39 39 44 41 36 43 43 3c 2f Data Ascii: AE011B308F2E2CB7A000B</rdf:li> <rdf:li>xmp.did:9AB9278C17BF11E1BB27CFBCAC33F71C</rdf:li> <rdf:li>xmp.did:9AC3D71D7B226811A961D60BBF4D357D</rdf:li> <rdf:li>xmp.did:9AFD33DFF623681192B0C1488564CF7E</rdf:li> <rdf:li>xmp.did:9B080D3F0D21681197A5C535399DA6CC</
2022-03-15 16:08:37 UTC	12406	IN	Data Raw: 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 33 39 43 42 37 46 42 32 38 32 30 36 38 31 31 41 34 38 32 46 37 45 33 32 32 39 42 31 31 30 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 33 41 44 45 35 46 44 35 45 42 31 45 30 31 31 39 46 41 31 43 35 45 43 31 44 31 30 41 31 36 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 33 42 33 30 38 43 39 33 38 32 30 36 38 31 31 41 37 42 41 43 35 36 42 46 44 39 33 39 30 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 33 42 35 33 41 35 35 34 30 32 30 36 38 31 31 41 44 41 35 38 34 31 30 34 41 30 45 30 31 42 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 33 42 36 41 43 Data Ascii: <rdf:li>xmp.did:A39CB7FB28206811A482F7E3229B110C</rdf:li> <rdf:li>xmp.did:A3ADE5FD5EB1E0119FA1C5EC1D10A162</rdf:li> <rdf:li>xmp.did:A3B308C938206811A7BAC56BFD939003</rdf:li> <rdf:li>xmp.did:A3B53A5540206811ADA584104A0E01BC</rdf:li> <rdf:li>xmp.did:A3B6AC
2022-03-15 16:08:37 UTC	12422	IN	Data Raw: 36 39 30 31 41 45 32 31 31 38 37 36 31 45 38 45 46 42 33 36 37 44 39 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 43 33 41 44 34 45 41 30 37 32 30 36 38 31 31 38 30 38 33 46 34 43 31 44 33 42 37 32 32 31 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 43 34 42 31 33 34 35 33 45 32 33 36 38 31 31 41 39 46 42 46 39 34 36 33 33 34 30 44 39 44 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 43 35 36 37 37 41 41 39 30 32 30 36 38 31 31 38 30 38 33 41 32 42 36 43 32 38 33 31 33 43 41 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 43 35 44 38 35 30 30 37 36 33 35 31 31 44 46 42 38 32 33 46 31 43 43 42 38 41 41 30 34 Data Ascii: 6901AE2118761E8EFB367D965</rdf:li> <rdf:li>xmp.did:BC3AD4EA072068118083F4C1D3B72213</rdf:li> <rdf:li>xmp.did:BC4B13453E236811A9FBF9463340D9D1</rdf:li> <rdf:li>xmp.did:BC5677AA902068118083A2B6C28313CA</rdf:li> <rdf:li>xmp.did:BC5D8500763511DFB823F1CCB8AA04
2022-03-15 16:08:37 UTC	12438	IN	Data Raw: 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 6d 70 2f 65 78 74 65 6e 73 69 6f 6e 2f 00 44 30 41 33 39 39 46 34 41 45 41 43 31 44 35 32 33 36 45 36 43 31 37 41 31 39 33 42 34 41 33 44 00 10 2c c0 00 0e f8 08 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 32 38 35 42 34 44 39 45 36 31 37 45 30 31 31 41 41 38 37 45 41 37 31 39 35 42 41 36 44 46 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 32 38 37 41 46 32 43 31 37 32 30 36 38 31 31 38 30 38 33 42 46 44 39 41 39 46 38 31 37 33 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 32 39 35 34 37 38 36 30 38 32 30 36 38 31 31 41 46 46 44 46 41 39 44 36 37 39 37 37 43 42 35 3c 2f 72 64 66 Data Ascii: http://ns.adobe.com/xmp/extension/D0A399F4AEAC1D5236E6C17A193B4A3D,C</rdf:li> <rdf:li>xmp.did:D285B4D9E617E011AA87EA7195BA6DFB</rdf:li> <rdf:li>xmp.did:D287AF2C172068118083BFD9A9F81730</rdf:li> <rdf:li>xmp.did:D295478608206811AFFDFA9D67977CB5</rdf
2022-03-15 16:08:37 UTC	12446	IN	Data Raw: 41 39 45 32 31 44 33 34 45 39 45 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 42 41 31 34 46 44 33 31 38 37 31 45 32 31 31 41 44 43 35 38 36 42 30 30 38 36 42 46 33 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 42 42 43 38 34 34 33 43 39 32 30 36 38 31 31 38 41 36 44 39 39 30 33 46 36 36 44 38 35 35 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 42 43 38 30 44 38 41 39 36 32 30 36 38 31 31 38 37 31 46 44 43 45 30 41 31 37 42 46 45 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 44 42 45 46 45 42 44 30 30 37 32 30 36 38 31 31 38 43 31 34 41 46 43 38 42 32 37 31 30 30 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c Data Ascii: A9E21D34E9EE</rdf:li> <rdf:li>xmp.did:DBA14FD31871E211ADC586B0086BF303</rdf:li> <rdf:li>xmp.did:DBBC8443C92068118A6D9903F66D8554</rdf:li> <rdf:li>xmp.did:DBC80D8A96206811871FDCE0A17BFEB0</rdf:li> <rdf:li>xmp.did:DBEFEBD0072068118C14AFC8B2710034</rdf:li> <
2022-03-15 16:08:37 UTC	12462	IN	Data Raw: 69 3e 78 6d 70 2e 64 69 64 3a 46 35 38 32 39 35 46 41 30 31 44 34 31 31 45 32 38 31 30 38 44 46 46 33 35 35 45 42 37 30 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 35 39 38 41 43 43 34 32 37 32 30 36 38 31 31 38 38 46 38 46 39 35 46 38 34 34 46 35 42 39 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 35 44 31 35 31 37 35 30 43 32 30 36 38 31 31 38 46 36 32 45 38 44 44 34 41 39 46 38 43 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 35 44 41 42 38 35 35 31 38 32 30 36 38 31 31 38 30 38 33 38 41 34 43 42 32 32 39 32 34 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 35 45 37 38 43 39 35 42 37 38 45 45 Data Ascii: i>xmp.did:F58295FA01D411E28108DFF355EB7048</rdf:li> <rdf:li>xmp.did:F598ACC42720681188F8F95F844F5B9F</rdf:li> <rdf:li>xmp.did:F5D151750C2068118F62E8DD4A9F8CB8</rdf:li> <rdf:li>xmp.did:F5DAB8551820681180838A4CB22924AE</rdf:li> <rdf:li>xmp.did:F5E78C95B78EE
2022-03-15 16:08:37 UTC	12478	IN	Data Raw: 30 39 45 33 37 37 30 31 39 41 34 44 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 31 30 39 45 39 30 32 45 34 46 35 41 35 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 32 42 30 43 39 33 36 32 35 42 35 43 30 32 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 39 41 38 32 46 36 43 44 34 33 30 41 30 33 31 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 42 37 46 31 31 37 34 30 37 32 30 36 38 31 31 41 31 37 35 42 44 38 37 39 41 39 42 45 32 31 34 3c 2f 72 64 66 3a 6c 69 3e Data Ascii: 09E377019A4DC5</rdf:li> <rdf:li>xmp.did:FB7F1174072068119109E902E4F5A522</rdf:li> <rdf:li>xmp.did:FB7F11740720681192B0C93625B5C027</rdf:li> <rdf:li>xmp.did:FB7F1174072068119A82F6CD430A0319</rdf:li> <rdf:li>xmp.did:FB7F117407206811A175BD879A9BE214</rdf:li>
2022-03-15 16:08:37 UTC	12482	IN	Data Raw: 42 31 41 34 46 37 42 35 31 39 31 45 36 43 43 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 45 37 46 31 31 37 34 30 37 32 30 36 38 31 31 42 38 34 30 45 31 34 31 39 38 39 36 45 31 45 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 45 37 46 31 31 37 34 30 37 32 30 36 38 31 31 42 39 45 37 39 44 33 36 34 43 45 46 41 35 37 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 45 38 44 34 44 37 35 30 37 32 30 36 38 31 31 41 39 41 34 38 44 41 39 41 36 33 31 44 33 41 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 46 45 39 39 38 43 42 32 30 37 32 30 36 38 31 31 39 32 42 30 45 39 30 44 30 34 38 45 41 37 32 43 3c 2f 72 64 66 3a 6c Data Ascii: B1A4F7B5191E6CC3</rdf:li> <rdf:li>xmp.did:FE7F117407206811B840E1419896E1ED</rdf:li> <rdf:li>xmp.did:FE7F117407206811B9E79D364CEFA57E</rdf:li> <rdf:li>xmp.did:FE8D4D7507206811A9A48DA9A631D3AD</rdf:li> <rdf:li>xmp.did:FE998CB20720681192B0E90D048EA72C</rdf:l
2022-03-15 16:08:37 UTC	12498	IN	Data Raw: 64 3a 63 61 39 38 36 62 39 61 2d 38 63 32 61 2d 32 38 34 33 2d 39 39 34 38 2d 61 66 39 33 34 66 34 33 36 36 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 62 31 37 62 61 65 32 2d 30 34 62 32 2d 36 31 34 39 2d 61 30 63 66 2d 32 64 63 65 66 38 63 32 34 62 37 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 62 32 65 36 39 39 37 2d 63 34 35 66 2d 34 63 32 34 2d 39 32 31 31 2d 65 36 38 34 34 64 65 62 30 35 37 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 62 35 30 36 35 33 64 2d 61 38 34 61 2d 34 38 65 66 2d 61 34 62 64 2d 65 37 36 62 66 38 33 34 61 62 38 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 63 62 39 32 34 Data Ascii: d:ca986b9a-8c2a-2843-9948-af934f436670</rdf:li> <rdf:li>xmp.did:cb17bae2-04b2-6149-a0cf-2dcef8c24b7c</rdf:li> <rdf:li>xmp.did:cb2e6997-c45f-4c24-9211-e6844deb057c</rdf:li> <rdf:li>xmp.did:cb50653d-a84a-48ef-a4bd-e76bf834ab8e</rdf:li> <rdf:li>xmp.did:cb924
2022-03-15 16:08:37 UTC	12514	IN	Data Raw: 69 64 3a 66 64 36 61 38 62 37 36 2d 35 36 34 33 2d 34 66 39 37 2d 39 61 33 66 2d 33 31 34 66 65 32 32 38 66 39 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 64 39 66 39 66 63 63 2d 64 61 35 66 2d 37 35 34 66 2d 38 39 66 38 2d 32 35 35 31 62 35 34 37 36 30 66 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 64 63 31 34 39 63 61 2d 31 36 31 39 2d 34 35 34 32 2d 38 31 64 39 2d 62 39 62 37 64 66 33 65 36 30 37 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 64 64 36 33 33 65 64 2d 35 39 37 34 2d 36 34 34 38 2d 62 65 62 36 2d 33 35 33 34 39 30 32 64 35 33 31 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 66 65 33 36 Data Ascii: id:fd6a8b76-5643-4f97-9a3f-314fe228f915</rdf:li> <rdf:li>xmp.did:fd9f9fcc-da5f-754f-89f8-2551b54760f1</rdf:li> <rdf:li>xmp.did:fdc149ca-1619-4542-81d9-b9b7df3e6076</rdf:li> <rdf:li>xmp.did:fdd633ed-5974-6448-beb6-3534902d531c</rdf:li> <rdf:li>xmp.did:fe36
2022-03-15 16:08:37 UTC	12521	IN	Data Raw: dc 6b b2 ae 4e 1b e8 03 ba c6 de da d4 ca 45 1c 85 4e 94 34 09 c1 a0 b9 3b e3 d4 56 5b 61 9b ee 94 67 bb 8b d6 a8 c5 b1 07 03 b2 80 22 62 03 5b 51 22 82 44 8d 2f ad a8 02 d9 b3 d0 a0 55 1a 8a 95 42 de 45 06 64 92 33 9b 93 c6 b7 4a 0e 56 e4 ae d5 44 0d 6a 00 56 a0 04 45 00 36 da 00 54 00 e4 50 03 5a 80 1e d4 0c 54 00 d6 a0 42 a0 05 40 0a d4 00 d6 a0 42 b5 30 15 a8 01 5a 81 8f 48 06 a0 05 4c 05 40 0a 80 15 a8 01 50 21 50 02 a0 05 ef a0 06 b5 00 2b 50 03 d2 18 d4 c4 31 14 00 a8 01 5a 80 15 a8 10 ad 40 0f 6a 00 56 a0 62 b5 21 88 8a 62 1a 80 1c 0a 00 54 00 bb 69 0c 7a 00 56 a0 04 28 01 ed 40 0a 80 15 00 2a 00 54 00 a8 01 e8 01 a8 18 f4 00 a8 10 d4 0c 7a 00 6a 00 7a 40 2a 60 35 a8 10 d6 a0 04 05 00 3d 00 3d 03 10 14 00 ad 48 07 34 00 f6 a0 05 6a 00 56 a0 07 b5 Data Ascii: kNEN4;V[ag"b[Q"D/UBEd3JVDjVE6TPZTB@B0ZHL@P!P+P1Z@jVb!bTizV(@Tzjz@`5==H4jV
2022-03-15 16:08:37 UTC	12537	IN	Data Raw: 69 36 34 8d 14 c6 44 4d ae 2e 78 de b1 76 3a 15 52 45 98 b0 c6 0e d2 2a 6c ca aa 46 c6 3c 51 a1 04 28 0d 5c ed b3 a6 a9 07 e4 f5 2f a7 8b 4a ce b4 96 69 6b c2 39 cc 8c c6 9a f2 57 5d 6b 07 25 ad 20 41 cb 9d 78 8a d4 c6 64 28 46 ac c0 1e 16 ac e4 d2 24 d1 c4 e9 2c ae a4 00 54 ea 4f 6d 63 6c 86 d5 c7 0c 2b 37 a4 48 cd ba 31 a5 b8 54 57 21 a5 b1 8f d2 cc b8 e6 c5 4e 94 5e 18 53 43 55 7a b1 76 da 17 5a c7 61 b6 f3 5b 1b 24 5a cd 58 b4 6a 98 6a 4a 0f 0a 82 89 79 9a d0 32 d5 b1 a0 06 6c 60 46 94 48 41 01 06 ca 00 8b 0a 62 18 1b 70 a0 09 a8 b9 a4 32 cb 5a 80 17 0a 00 ae 67 d2 80 02 79 75 aa 24 92 4b 7a 00 21 75 a9 28 b0 5c 50 04 64 63 6a 00 a5 dc 8a 62 28 69 35 a6 49 64 2f 73 40 d1 a3 1c bd 95 05 04 2d 8e b4 0c 76 51 c6 80 01 ca 88 b0 21 69 a6 26 72 29 87 21 c9 Data Ascii: i64DM.xv:RE*lF<Q(\/Jik9W]k% Axd(F$,TOmcl+7H1TW!N^SCUzvZa[$ZXjjJy2l`FHAbp2Zgyu$Kz!u(\Pdcjb(i5Id/s@-vQ!i&r)!
2022-03-15 16:08:37 UTC	12553	IN	Data Raw: 0d f4 14 d3 10 14 bd 3d 24 53 14 83 43 56 ad 04 3a c9 ce e6 fa 6d a2 6e 4b 95 ae 9a e5 39 6d 84 0e 5c 79 62 42 81 49 1e da b5 64 c9 75 68 a6 38 ee 0a 3d 53 64 24 29 21 8d 3c 56 34 26 d8 34 90 c3 19 df 9e 22 5b db 46 ef 78 6d 9e 03 e4 e0 4c bf 99 6b 50 ae 82 d4 60 65 48 d0 f6 56 86 44 e1 4e 6b 76 52 6c a4 8d ce 82 44 52 5c 70 35 cd 93 53 ab 1e 87 ff d5 ed ad 5e c9 e1 0a d4 00 ad 40 0d 6a 00 54 00 ad 40 0f 6a 00 56 a0 05 6a 00 56 a0 05 40 0a 80 1e d4 00 d6 a0 07 b5 00 2b 50 02 14 80 7b 50 31 ad 40 0a d4 08 7a 06 2a 00 54 00 f4 00 ad 40 0a 81 8a 80 1e 80 15 20 1a 98 0a 80 11 a4 02 a6 21 50 03 50 03 d0 31 52 01 53 01 50 02 a4 02 a0 07 a0 05 40 0a 80 15 03 15 02 15 00 2a 00 7a 00 57 a0 62 bd 00 38 34 80 57 a0 05 7a 00 7b d0 02 bd 00 3d e8 18 b7 50 03 de 90 0b Data Ascii: =$SCV:mnK9m\ybBIduh8=Sd$)!<V4&4"[FxmLkP`eHVDNkvRlDR\p5S^@jT@jVjV@+P{P1@zT@ !PP1RSP@zWb84Wz{=P
2022-03-15 16:08:37 UTC	12561	IN	Data Raw: 2a 06 2a 00 54 00 a8 01 50 02 a0 05 40 0a 80 15 02 15 00 35 03 15 02 15 30 1a 80 15 03 1e 80 1a 90 0a 81 0a 80 15 03 1e 80 1a 80 11 a0 06 a6 02 a0 05 40 08 50 02 a0 05 40 0a 81 0a 81 8a 80 15 00 2b 50 02 14 80 54 00 d4 c4 2a 00 54 0c 6a 00 54 00 a8 01 50 21 50 03 50 03 d0 03 50 03 d0 02 a0 06 b5 03 15 00 7f ff d5 f4 4a f4 8f 20 54 00 ad 40 0a 80 15 00 2a 00 54 00 a8 01 50 02 a0 05 40 0f 6a 00 6a 00 71 40 0a 80 15 00 2a 00 6a 00 7a 00 54 00 ad 40 0e 50 d0 38 1b 6d 02 15 00 2a 00 63 40 0a 80 1e 80 15 00 2a 06 2a 00 b6 3c 59 65 17 45 24 0f 75 4b b2 45 2a 36 74 78 5e 90 57 88 34 ce 43 1e c1 d9 5c b6 cf ee 3b 2b e9 d4 6a 34 9e 8e 24 9d 8f 61 d9 71 42 ce 27 e9 ca e1 f4 5c ed 7f 31 c2 8a 6f 38 97 a7 f7 9a 98 9e 92 c5 88 7e 60 2e 7d e6 b2 79 9b 36 ae 14 8b db d2 Data Ascii: *TP@50@P@+PTTjTP!PPPJ T@TP@jjq@jzT@P8mc@<YeE$uKE6tx^W4C\;+j4$aqB'\1o8~`.}y6
2022-03-15 16:08:37 UTC	12577	IN	Data Raw: 80 c6 01 5b 6d 61 fa 45 09 c9 26 73 e4 45 0b 18 a3 05 9b e5 d6 ff 00 65 6b 02 35 70 fa 66 76 40 04 46 d1 a7 b5 ce db fe ba c2 d9 2a 8b 48 3e 2f 4e 94 37 9e 63 6f 81 05 97 f6 9b 5a c1 e7 f7 20 66 0b 74 c7 39 5b a2 c4 94 c3 60 00 26 c7 ef 6e ae 9f 31 6d d5 90 76 51 46 02 8d 4a 90 38 7b 2b cc 6c 65 69 81 04 6f e6 a2 28 93 e2 b6 b4 dd db d0 65 a1 58 9a 91 0e 54 fd 94 0c 62 1c 1e 26 d4 e4 64 c1 36 d4 50 31 c3 85 e2 29 00 cd 25 f8 9b 7d b4 c0 62 17 80 d6 80 24 13 b3 4a 06 33 5d 7f 4d 00 7f ff d3 e0 52 4d 41 00 80 35 fd 35 ef 9f 3c 11 92 aa c9 a7 13 c6 a5 0d 95 e2 46 59 03 8b ed 5b de dc 69 b6 15 1d 9f cc 3c 00 03 b2 82 82 31 e6 18 ff 00 c3 3a de f5 16 52 0b 43 a1 c5 eb cf 32 8d c4 31 1c 6f c6 b9 5e 38 3a ab 90 2c 67 97 00 9b 0a 9d 85 6f 0b 6f 52 e4 10 00 b0 00 Data Ascii: [maE&sEek5pfv@F*H>/N7coZ ft9[`&n1mvQFJ8{+leio(eXTb&d6P1)%}b$J3]MRMA55<FY[i<1:RC21o^8:,gooR
2022-03-15 16:08:37 UTC	12593	IN	Data Raw: a3 23 e1 24 7f 74 d3 c5 ea eb 4e c9 2e b7 da 62 e4 7f 4e 62 c8 70 f2 4c c0 fb 07 6f db 5d 7f fe 45 f6 24 3f 30 68 bf a7 18 31 31 df 34 9b 4f 10 1a c0 fb 8d aa 5f fc 8d bd d5 0d e6 ea fa 63 a7 6d 50 03 00 a2 c0 06 d0 57 05 bd 55 9b 97 01 b8 9c de 90 e9 b9 36 69 50 b1 5d 2e 58 d4 7f 97 75 da 29 34 31 3a 3c 78 c4 18 2c 00 d2 c4 df fd f5 cc fd 5b 40 ac d1 79 c2 2c db da c4 8e 1c 3f e5 4b fc e6 56 f6 10 8f 91 1d b6 91 a1 b8 d0 71 fd 54 7f 9e ca 59 6c 50 64 94 3b 38 20 33 f7 8d b5 3f 6d 53 f5 8f de 27 76 51 2c 2d 23 07 90 df fd f5 0f d4 49 9b d4 7d 50 6d 52 40 f6 5b 4a e7 b5 b7 6a 20 5c 99 23 8b 59 1f 68 3a eb a0 ae 8a 5d be 00 50 32 b0 db 4f 34 1b fb c7 1a b9 b9 21 29 0c 6d aa b5 ab 37 96 c3 0b 8b 1d 2d a9 bd 63 6f 51 60 82 7e 4c 63 89 35 9f f9 16 1c 13 02 25 Data Ascii: #$tN.bNbpLo]E$?0h114O_cmPWU6iP].Xu)41:<x,[@y,?KVqTYlPd;8 3?mS'vQ,-#I}PmR@[Jj \#Yh:]P2O4!)m7-coQ`~Lc5%
2022-03-15 16:08:37 UTC	12601	IN	Data Raw: b7 05 22 d4 91 2c b5 22 94 9b d8 11 ed e1 4f 6b 11 30 9b 8d ac 2f d9 a7 fc 6a 92 11 17 c4 93 88 5e 51 c4 d0 ea c0 ac c6 50 d8 80 7d f5 11 02 19 89 36 b8 d2 81 0c 36 db 80 fb 69 a0 2a 2e 07 02 2d 4c 63 06 5b 59 8d 20 1d 5c 71 e2 29 48 12 b2 9d 57 4d 3b 2a 80 81 04 70 35 22 1c cc 47 6e 9e da 72 21 d6 63 d8 6c 2a 80 b5 27 24 58 f1 14 04 93 f3 06 8a 7b 69 0c 72 8a dc 38 54 c0 c4 22 61 c0 fe ba 49 31 90 67 60 75 d6 da d5 6a 29 18 1b 9d c7 8f db 40 8b 16 f6 be b4 d0 c7 0c c4 5c d8 8f ed a6 02 2c 35 36 06 a8 08 16 df a0 1c 29 0c 41 48 d7 85 10 32 40 05 1d ba d1 00 5a b2 58 8b 5e ad 56 40 72 e9 2e 8f af 66 a6 d5 5b 06 20 00 b0 ec fd 75 5b 00 8b 01 6b dc 11 fa a9 6c 02 91 16 c6 2e 48 b9 d3 f4 55 6d 60 57 23 ec 37 0c 3d e6 b5 ae 39 25 95 1c 90 ba 96 bf e8 ab f2 c9 Data Ascii: ","Ok0/j^QP}66i.-Lc[Y \q)HWM;p5"Gnr!cl*'$X{ir8T"aI1g`uj)@\,56)AH2@ZX^V@r.f[ u[kl.HUm`W#7=9%
2022-03-15 16:08:37 UTC	12617	IN	Data Raw: 67 2c b7 95 86 d8 c4 7b 8e 96 17 1d 97 ab 78 e3 4f b4 01 f0 98 e4 2b 0c c5 5f 2d dc aa 8b df 42 3b 7f 15 5d f9 5f 2f b8 94 17 1e 1c 38 a8 42 80 a8 bf a0 7e 1a c9 dd d9 95 05 4f 87 14 44 e5 b0 da 55 75 b9 3a 58 69 f2 d5 ab b7 ca 22 53 45 f5 b8 aa 24 63 b6 45 06 e0 83 7f d3 ee a5 57 b2 da 76 01 66 12 94 0b 0a ca 58 0b 0d 40 d2 a6 ee 75 81 15 34 a8 c8 c0 11 75 70 a4 9f 7b 05 aa 86 9f f2 10 d3 ce b1 c8 88 4f 7d ad 61 45 6b 29 8c 21 9e 42 41 29 65 d6 da ea 7f fc 2a 12 43 04 79 26 f3 83 a2 9d 9b 42 92 a4 5c 71 63 f7 bc 35 aa 4a 21 8c ba db 8d c9 6b a5 8d ad c0 9f f8 da a0 45 65 12 49 18 a8 26 45 1a 93 a1 e1 57 b9 a5 1d d1 16 43 0b 46 db ac 1c d8 02 48 d6 c3 87 ea a8 76 9f b0 20 6f a3 95 54 a3 30 7e 6d c2 c2 c2 fd b7 1d bc 69 ef 40 d1 40 c2 58 ae fa 16 bd c0 ec Data Ascii: g,{xO+_-B;]_/8B~ODUu:Xi"SE$cEWvfX@u4up{O}aEk)!BA)e*Cy&B\qc5J!kEeI&EWCFHv oT0~mi@@X
2022-03-15 16:08:37 UTC	12633	IN	Data Raw: 02 25 3c 38 5b 5a 4e 3b 02 58 c3 4d 0b 6d 1c 6e 4d 02 91 dc ee d6 36 1e e3 c6 f4 2d 38 95 23 23 07 4b 70 61 c7 b6 9b 50 c7 b8 aa 48 0b 12 c2 db 9b df 54 ac 65 64 0d 2c a9 01 08 e7 69 66 03 97 da 6b 44 9d b8 19 89 33 10 ca f1 eb 78 da d6 3c 2d e1 fb 68 74 70 9f bc 69 95 67 49 93 3c a2 2c 46 50 61 70 64 04 90 2f 6e ee 9d ea ba 2a d5 4d bb cb 94 6d b0 f8 4b 95 06 64 b3 7b 2f a5 60 e3 b0 d5 36 51 85 9d e6 cd 34 6c 54 ec 70 a2 de cb 55 de 90 93 f7 a2 55 8c 0e b1 8b 8d d4 32 c4 2d 3b 89 e2 bd b9 bb bf 75 7b 6b bf 0d ed 8e b3 1c b6 fb 08 6d 9d 0c 38 e5 54 07 e6 b7 8a d6 bf e8 af 3e d6 36 55 2e 78 4b 6a 0b 2f e8 15 09 94 d1 9a 30 24 57 91 c4 8c c5 c8 24 03 6e 02 cb 5d 3e 62 84 a3 81 96 d8 2a cd e8 b3 cf 71 ba 45 ba 85 d4 86 d0 6b db ed aa a6 75 5f 71 2d 02 f4 7e Data Ascii: %<8[ZN;XMmnM6-8##KpaPHTed,ifkD3x<-htpigI<,FPapd/nMmKd{/`6Q4lTpUU2-;u{km8T>6U.xKj/0$W$n]>bqEku_q-~
2022-03-15 16:08:37 UTC	12640	IN	Data Raw: 62 c7 78 00 0c 41 03 d8 3f 0d 72 d6 67 51 99 18 98 f9 f1 42 c9 99 22 3a ea 4b 29 b1 b5 be 0a eb bd a8 dc d5 34 0e 0a e3 f4 f7 9c 7e a7 1a 56 88 31 b6 ba dc 0f f3 d5 3f 53 1c b6 5b 84 8d fc 29 41 80 5f 94 91 c2 b8 2e b5 2e 41 a6 c7 70 59 95 82 b6 84 93 ad af 5a 2b 21 30 0c 3e 8f 26 42 94 79 fc d0 fb 99 ae 38 8f b7 e5 ae 8b e6 55 e0 b6 82 72 3e 6f 4b c2 45 f3 9e 56 36 b2 1b 1b 8f b8 05 2a 65 bb d2 3e d1 b6 13 06 1c 0b 17 93 13 ef 8a c6 e2 fa db fc 35 9d ae db 96 b5 1a 2d 9b 18 e3 c4 17 10 aa 11 a8 66 b9 d0 54 2b 6e 7c c2 60 4b d3 3a 9a 4f 24 9e 70 92 09 48 24 1b 8b 69 ae d3 e1 ad de 5c 6e a9 44 5a a0 4e 4c 91 16 57 d3 47 ce de 58 22 e7 b4 fc 43 ec a9 55 9a ee 7e f2 42 e3 4c 82 02 4b 62 dd 96 16 d2 f5 93 75 ec 18 e2 63 b4 b5 94 2a dc 16 26 d6 b1 b5 1b 75 1c Data Ascii: bxA?rgQB":K)4~V1?S[)A_..ApYZ+!0>&By8Ur>oKEV6e>5-fT+n\|`K:O$pH$i\nDZNLWGX"CU~BLKbuc&u
2022-03-15 16:08:37 UTC	12656	IN	Data Raw: c5 d1 20 9e 58 a5 cf 91 4e 4a dc ab 27 29 70 0f c2 d5 c8 f3 da a9 aa 2e 4f 8b ba 23 47 17 1f ce 55 c8 46 dd 19 5d 49 6b 91 f6 13 bb 75 73 de db 74 7c 4b 46 f2 4e 31 b1 3c 98 46 e2 e6 fc 78 db bb a9 ec a8 77 e5 8f 17 51 d3 ba 14 1c c7 4b 87 ab 7d 64 92 ca a1 61 b9 b5 99 77 13 6e c5 e6 ad f2 db 16 d4 97 57 f3 da 73 e8 6a 64 45 0e 4c 8a 25 8d 4c b6 b8 04 6b 71 af 67 f8 6b 96 ad d5 68 f9 4c c1 24 0a 19 da 62 25 6d fc d6 d0 ae 97 54 1f 2d 6c b8 28 e5 d3 ef 0c b0 c1 8e 19 65 3b 1d 8d 82 dc 5e d6 f6 13 ec a9 dd 6e 1a 8e 02 d2 18 c7 98 57 93 6e 9a 68 0f de f6 ad 64 db d0 10 28 fc 9c b2 c8 db 81 03 7a a8 e3 6e eb a1 f0 ec f8 7c 5f 0d 6b d5 5f ca 29 2b c3 ea 18 9d 40 ee 98 23 3c 72 35 99 88 d0 a9 b5 d3 fc d4 ef 8e d8 f8 4f 32 5f 88 a9 02 83 ad 83 9f 2c 73 dc ac ad Data Ascii: XNJ')p.O#GUF]Ikust\|KFN1<FxwQK}dawnWsjdEL%LkqgkhL$b%mT-l(e;^nWnhd(zn\|_k_)+@#<r5O2_,s
2022-03-15 16:08:37 UTC	12672	IN	Data Raw: b3 e5 05 13 48 4a c4 d1 b1 5b 0b 73 2b f1 e5 ae 99 4b 4a f4 d7 af 71 52 8f ff d2 e0 65 f4 d7 56 62 af e6 2b 20 3b 95 ae 6f fb 1e fa f8 b5 ea 71 70 83 cf 84 69 c5 0e 7c 00 6f 91 05 95 6e 0d fd b5 ca ed 4b 70 4c 69 11 cc 5e a5 3a f3 ba 5a f7 00 02 2f 6e 1f aa aa 9e 5d 78 26 54 05 4d 3b e4 aa c5 99 ba 42 c0 0b 46 2c b7 f9 bb 6b 2a d5 57 5a f2 fc dd 41 0c bd 3a 06 22 8f 39 e2 bb 8d 4d c9 3d ba 36 da cd fa 8b 70 4c 52 5a 53 0a 76 11 b7 23 a6 80 5f 40 0f ee d4 cd ea a4 44 32 3a 66 36 64 7f 42 cb f9 36 0c 75 ed 3e fa 75 cb 6a 3d dd e2 93 80 1c 7c 1e 99 d3 41 50 ed 33 37 2e d2 74 1f 65 6f 6c 99 32 7c 25 49 a1 1f 4d c4 d6 79 51 12 e2 e4 71 01 45 60 f2 db 82 92 24 6f 2a 1c 74 df 8b 1a ef 94 68 0e a5 80 a2 5d 9c 59 f4 88 b1 31 83 8f cc 8c 58 db 94 f6 54 bb 47 06 5a Data Ascii: HJ[s+KJqReVb+ ;oqpi\|onKpLi^:Z/n]x&TM;BF,kWZA:"9M=6pLRZSv#_@D2:f6dB6u>uj=\|AP37.teol2\|%IMyQqE`$oth]Y1XTGZ
2022-03-15 16:08:37 UTC	12680	IN	Data Raw: 07 85 9a dd ef f3 54 aa bb 38 48 52 0e 9e a1 82 42 62 89 4c 8d 6d 02 dc 93 71 a6 83 b7 75 68 fd 3d 96 af 94 12 1f a2 48 bd 47 13 6d f4 ee b5 ce b7 e2 d7 61 dd a5 9d 79 76 1b d0 9f 4c 7c 6d 9e 4c 2c c0 46 6d 66 24 fb f4 f6 d2 ca ad 32 fb c1 25 4f d4 0b cc 32 21 61 e4 06 d8 41 b8 0d d8 9b 1b e6 6e f5 52 c7 0a 1f 57 50 07 bc c8 48 89 18 6e 65 de 56 da 5b ef 1a c1 57 b4 7c 4c cc 9e 93 8f 24 2f f4 71 af 9a 6e 41 23 94 30 ed 7b f2 d7 4d 72 d9 35 b9 f2 fe 2f a4 19 8d d2 7a 0f 54 e9 b3 3e 5b 4a b3 63 0b 9b 45 ab 12 de 1b 37 76 bb 32 fa 8c 79 16 d8 db 7f 8f a4 90 ae 9f d6 8f 9e 7a 6e 5a 36 3b 4c 58 dc e8 48 f6 a6 ea cf 26 1d 37 d5 ef d9 05 d4 e8 c4 40 46 11 50 3a 58 2d 98 df 41 ed dd de 6a f3 67 5e 21 60 7c 8e a7 12 93 8f 23 22 b1 52 e4 36 84 02 6c 3e ea 6d ee d6 Data Ascii: T8HRBbLmquh=HGmayvL\|mL,Fmf$2%O2!aAnRWPHneV[W\|L$/qnA#0{Mr5/zT>[JcE7v2yznZ6;LXH&7@FP:X-Ajg^!`\|#"R6l>m
2022-03-15 16:08:37 UTC	12696	IN	Data Raw: d2 1b 83 c6 46 f6 31 08 9e 2d a7 46 24 11 6f 7d af 58 6d 8d 65 58 bd c4 95 15 54 16 90 94 3d ac 46 bf f4 d2 99 ec 29 58 99 05 6c ab db ec a9 0b 39 29 8e 33 29 3b e3 1b 90 d8 6a 1a df ab bb 56 dc 76 90 40 f4 f8 84 c7 20 44 82 73 c5 ed 66 3f 6b 55 79 8e 22 5e df 08 16 34 0f aa 91 1e de 06 c7 fc b6 a9 56 5f 10 99 99 9b d1 d3 31 82 c8 ac 18 02 2e b6 e0 7e f6 ed 7e 6e f5 74 d3 33 a7 02 50 56 36 27 d3 28 89 0b 32 8e 01 bb 3f 4d af 59 5a fb 9c b2 cb af da e0 92 3b 01 d2 f5 1f c0 06 19 0a aa 40 0f 61 a9 d2 ff 00 ab b6 8d bf c0 64 e4 3e 50 f3 2c 40 b8 07 68 d7 fd 96 92 d7 40 2b 58 d6 4b 3a ee 61 6e de 3a ff 00 6d 53 6d 08 9c 98 25 c5 bc c6 00 f6 1b 58 54 ab c7 60 30 47 e9 d8 52 39 0f 1a c8 e4 73 10 b7 e1 f1 11 5b 2c 97 4b 8c 08 1b aa 74 dc 25 c7 f2 dd cc 31 27 30 Data Ascii: F1-F$o}XmeXT=F)Xl9)3);jVv@ Dsf?kUy"^4V_1.~~nt3PV6'(2?MYZ;@ad>P,@h@+XK:an:mSm%XT`0GR9s[,Kt%1'0
2022-03-15 16:08:37 UTC	12712	IN	Data Raw: 28 d4 10 39 45 bf b0 55 79 96 b7 8a c0 5c aa b7 f2 58 a9 24 77 49 bd c7 d9 51 f6 8b 43 34 e3 e1 42 4e 34 31 c4 92 31 ee 80 3b 35 6b fd b5 d3 ba ef 99 bb 10 d9 7e 36 36 24 2a 62 48 e3 54 b5 f6 5e fa 7b 92 b3 b5 ac f5 6d ff 00 10 92 d4 87 1a 31 74 55 0b 7e 28 bf ef da 2a 5d ac f8 fe 21 40 23 f4 fe 9f 30 67 5c 71 21 d7 77 29 1f 6d f8 6e ad 56 4b d7 49 8f e6 29 05 e9 9d 0b a5 2c 82 6c 6c 5f 29 f5 37 6b 82 bf f2 ad 72 e7 c9 11 6b 6e 1a 72 5f 2f a7 71 5f 20 64 c6 cc b2 86 24 15 ec 1d ab 7e da 85 ea 6c ab b5 f4 80 40 e8 aa 5c ba b3 ab 5e fa 37 13 f6 30 6d bf 86 b3 f3 f4 8f fd 01 22 cc 8c 41 20 2b b3 7b 1f 8d 89 17 1f ef a9 ad e3 b6 3e 54 10 0d 36 1a 3e cf ab 62 8b 7d a4 23 10 ba 8b 9d ab f3 56 95 bb 53 b7 5f 98 50 5d 83 2c 58 e8 b2 46 ce 50 90 2c d6 b8 24 fe 8e Data Ascii: (9EUy\X$wIQC4BN411;5k~66$bHT^{m1tU~(]!@#0g\q!w)mnVKI),ll_)7krknr_/q_ d$~l@\^70m"A +{>T6>b}#VS_P],XFP,$
2022-03-15 16:08:37 UTC	12720	IN	Data Raw: 63 b8 dd e6 5e e7 5e cb 0e 15 0f 15 56 ad f3 2e e9 ad 57 68 7a e3 06 4b 39 60 58 85 da 0d ad db c4 78 ab 9d db 5d 05 7b fb 8c ce a7 d1 61 cd 0e ab 2b c3 2d f9 9c 6a 4d c7 0b b7 60 f9 2b a7 16 77 48 d1 5a be 13 9c c8 e8 be 83 38 7b 96 5c 82 f1 31 b8 1a 82 a7 e2 bf c5 5d 79 fd 7e fe 0b 98 5b a0 d1 9f d3 18 6d 0a e2 6e 2c 57 c4 4d bf bb 5c f5 f5 57 4f 71 4a de f0 16 f4 76 24 6e d2 66 48 44 40 81 b4 1b ed 03 82 ad fd a7 bd b2 b7 ff 00 32 cd 45 57 31 72 bb 0d 7c 7c 9c 78 f2 47 4e 8d 19 08 42 41 b0 02 c4 f1 3f 37 de ae 4b 56 ce bb db 90 de 4a 78 a1 9f 24 e2 99 18 4a ea 1a d7 d3 f5 52 ab 75 ae e8 e5 44 4e a5 a8 cd 88 8b 1b ce a8 9c 14 91 db f7 9a a1 ad ee 62 46 cb 4c 17 8e f2 15 2a 7b 5b ed ff 00 8d 4e ed 74 11 5c 98 51 c4 5d 62 01 46 9b ac 09 24 f1 50 3e 2a a5 Data Ascii: c^^V.WhzK9`Xx]{a+-jM`+wHZ8{\1]y~[mn,WM\WOqJv$nfHD@2EW1r\|\|xGNBA?7KVJx$JRuDNbFL{[Nt\Q]bF$P>
2022-03-15 16:08:37 UTC	12736	IN	Data Raw: 24 5b 4f d3 5c fb f6 a9 4c 6c a3 2f a4 21 42 59 74 e1 65 00 9f d4 df 0d 5d 33 39 25 41 4c 5d 3a 1c 80 af bb cc 41 a5 8a f3 69 e1 d6 ad e4 75 f8 7f 28 70 21 3f 50 99 72 1b 1b 1a 21 06 3a 5b 74 d2 0e 5f 6e d5 db 55 5c 69 d7 75 9e fb 78 2b d4 43 aa 0f 8f a9 41 39 be 2c a1 d8 9e 6d a2 c3 fb 6b 07 89 d7 a9 41 b5 09 3a 6e 27 8d cf d9 fe ea 94 e0 d0 83 60 47 25 f7 ee 26 d6 24 0e cf 65 bd 95 4b 23 5c 09 d0 8e 3f 49 c6 0c 52 2f cb 27 8e c5 00 db de c2 9d b3 5b 8b e6 f9 8c ed 64 8a b3 3a 27 4b 58 cb 4e 81 c0 70 c7 db b8 f2 ee aa a6 7c 8d e9 a6 9f 84 cb 7c 90 ea 5e 97 c5 cd 88 a9 ba c6 35 21 0f fb 0f c5 55 8f d5 5a 8f ed fb 47 32 47 a3 f4 18 fa 6c 66 38 05 83 1b b3 31 b0 03 df 4f 37 a8 79 1c b2 b6 85 34 9b 1f 6b 2b 1d a3 4d a6 e0 fb eb 28 94 28 2c 0d b9 49 0a 0b 9e Data Ascii: $[O\Ll/!BYte]39%AL]:Aiu(p!?Pr!:[t_nU\iux+CA9,mkA:n'`G%&$eK#\?IR/'[d:'KXNp\|\|^5!UZG2Glf81O7y4k+M((,I
2022-03-15 16:08:37 UTC	12752	IN	Data Raw: ae 8a 3a a9 6e bb 8d 13 2c cc c3 ea 19 13 dd 64 8e 15 5d 40 b1 2c 4f 89 b6 2f ec d4 d2 f4 aa e0 ec 0d a0 b9 72 a4 49 0a 23 85 65 50 0d c1 b0 3c 4b e9 fb 35 8a a2 6b 52 24 cc cf 07 91 f2 5f 7c 4b 73 b5 41 2c d7 f8 07 1f da ae ac 7e ea a8 7f 97 e6 24 7c 6e b7 8d 11 db 94 eb 28 f0 a9 5e 75 f9 48 a5 6c 16 7d 3c bf cf 92 c0 d3 34 63 c8 c6 90 89 23 0b 10 e3 a6 87 f6 6b 9d d6 cb 47 cc 55 4a a6 ce c2 e9 e7 74 c4 ad c9 6d 96 04 b3 fc 7c b5 4b 1d f2 70 fe da 9a 25 25 5d 3b ae 61 f5 b9 6e b0 b1 55 5d 1c 69 fa 1e af 26 0b 61 5c 7e 9f da 4f 48 66 47 55 86 06 6c 75 d0 46 a1 8d 85 f4 e0 a0 7c 4d 58 d7 13 b6 be f2 1d 8a f1 72 22 9b 6c ac 59 99 b9 45 d6 e4 81 ab 68 38 55 5a ad 69 ff 00 a8 d3 07 3d 4b 16 46 79 31 55 9d 12 c0 ea 6f ba fb 78 56 9e 55 96 96 d0 a9 1d 73 61 84 Data Ascii: :n,d]@,O/rI#eP<K5kR$_\|KsA,~$\|n(^uHl}<4c#kGUJtm\|Kp%%];anU]i&a\~OHfGUluF\|MXr"lYEh8UZi=KFy1UoxVUsa
2022-03-15 16:08:37 UTC	12760	IN	Data Raw: b8 b2 1a 0a ea d8 fd 43 36 26 87 11 80 57 16 e1 aa df 8e df 9b c3 59 61 b5 28 e6 dd 9f 88 d1 0f d1 f0 33 fa 64 7e 53 e4 24 d0 01 c1 92 cc 09 f9 bb d4 66 c9 4c ae 52 75 b7 f1 0f b0 8e 24 66 43 f5 12 6d 12 16 b6 e0 e4 e9 af 96 de 5b 7e ea d3 bb 8d 17 0f e1 f7 b9 8c 5a 32 7a df a8 a5 c2 99 55 80 2e e4 8b a2 02 74 f1 06 ee b1 fe ed 75 e0 f4 ea eb f8 7b d8 a0 d5 e9 fd 69 66 80 3a b3 2b 35 cb 07 b2 d8 7f eb f2 d7 26 4c 30 ff 00 6f 30 e0 0f d2 de a8 4c c7 78 1c 3a ac 21 8b 68 2c 2c 7f c5 5b 7a af 4a e8 93 d3 98 7b 0a ba 97 aa 06 3c ee f8 71 49 29 5d ac db 40 d0 9f 8b bd 6a bc 5e 97 72 e6 75 a8 d5 0a db d6 6b 0c ab 1e 4b c9 11 03 71 ba 0d da ff 00 a5 6e 1f 8a 9f f8 52 a6 aa b6 fe 7c bf 38 a0 b6 7f 5c 43 e7 c6 f8 e4 48 64 5d a5 05 c8 5d 7c 5b bc 55 35 f4 2e 1c f2 Data Ascii: C6&WYa(3d~S$fLRu$fCm[~Z2zU.tu{if:+5&L0o0Lx:!h,,[zJ{<qI)]@j^rukKqnR\|8\CHd]]\|[U5.
2022-03-15 16:08:37 UTC	12776	IN	Data Raw: f8 1e 20 0f 7f fa 9c df 0d 73 53 1e ee bd d8 fd bf 09 9a 72 c2 62 99 e6 85 1a 62 22 98 ad da 35 62 4e be ff 00 f0 d6 56 49 3d 39 ab e2 34 2d c6 9a 3c 96 2a b0 b9 45 24 33 12 41 3f 76 b4 a5 5d 78 95 50 1c af cb 93 cb 83 a7 a6 a2 e5 ca 8b 7e cf 79 8d 6c a5 ea ed f4 09 84 f4 ac 45 48 cc ed 8e b0 93 a6 d1 b5 8f b8 78 aa df f1 dc 52 41 31 61 6e 17 28 4a 93 6b 6d 16 17 f6 6b 5c ef 4d 44 c4 d8 90 ea e9 2b a6 bb 58 69 c5 79 48 ff 00 2a d6 36 bf d8 65 b9 15 37 4c 8a 66 28 64 ee 83 be f7 0d fd 94 96 46 b5 8f 97 c2 4c 97 ff 00 26 49 a2 0b 63 11 29 b0 3e ee 6d a7 d9 f3 1f 15 67 e7 b4 fc 5d ed b1 ca 4e f0 3e 9b e9 38 71 e5 2c b2 48 63 da 01 42 6e 09 1f e7 3e 1a ea c9 ea b7 ae 0b 71 a5 5a 60 d1 61 63 e4 cf 3b 84 78 1e fb 5b 7e 80 f8 46 c4 1d c5 fb b4 ed 7b 55 2e 17 f9 Data Ascii: sSrbb"5bNVI=94-<E$3A?v]xP~ylEHxRA1an(Jkmk\MD+XiyH6e7Lf(dFL&Ic)>mg]N>8q,HcBn>qZ`ac;x[~F{U.
2022-03-15 16:08:37 UTC	12792	IN	Data Raw: dc 05 3b ee 7d bb 48 bd da 1e 5e ad 89 18 09 0c 41 5c 9b 6e 5b f2 dc 77 be da 95 8a cf 8b fe a3 2d ec 7f 32 46 6f ce 62 e1 07 79 b4 bf e8 a5 09 70 37 40 9d 4f ad 49 8d 1b 28 01 1b 69 60 fd 9a 70 5f b7 e5 ad b1 61 56 7f a4 8b a3 9d e9 5e a3 c8 9a 77 c8 56 67 da 43 3a f0 dd e1 e5 4b f3 9a f4 32 fa 6a d5 25 f7 4e 68 3a b5 69 35 91 e0 f2 ae 49 b5 c9 b0 3d 95 e5 b8 ec 72 74 d1 a0 3c ec 58 f2 80 0f 1e f0 2c 02 9d 2b 5a 59 d7 83 35 2b e9 9d 27 1b 1c ef 30 6d 20 f7 89 ed fb 7d 95 59 72 da dd a4 c1 78 e9 b0 2c df 52 14 6f 6d 77 0b 81 52 b2 36 b6 b1 a4 43 f9 56 3b b6 e0 bb e4 1a 87 b9 d3 f5 56 9e 63 48 36 20 b8 b1 7c b8 f6 84 de bc 5a d5 cc ed 2c 86 8c ee a7 f5 b9 e7 64 5b 62 41 ca 0b 1b f2 fe 81 bb 9a ba 31 6c c7 ab e6 33 58 b5 04 e9 7e 92 4c 49 03 b3 dd 48 db 62 Data Ascii: ;}H^A\n[w-2Fobyp7@OI(i`p_aV^wVgC:K2j%Nh:i5I=rt<X,+ZY5+'0m }Yrx,RomwR6CV;VcH6 \|Z,d[bA1l3X~LIHb
2022-03-15 16:08:37 UTC	12799	IN	Data Raw: 47 de 2d b7 e5 ec 1b db f6 68 ae 5d c3 74 83 07 0b a3 74 de a9 21 c3 c7 85 bc a3 af 9f 10 0d af df 1b b7 db bb 58 a5 2e 11 b6 e7 54 0b ea 2c 08 fd 34 63 e9 18 cf be 3c b6 26 4f 34 28 50 be 36 be 85 e5 f9 69 de 9b 47 4b 6e d4 e2 fd 45 e8 2f 2d 7e bf 06 73 3c 2c 2e a5 54 96 dd e1 45 44 bd 97 e7 6e 5a d2 b6 92 de 49 e2 74 5d 0f 0f ac 2e 0a af 59 c6 92 0c 22 54 09 09 da 77 13 cb ca 7f 33 63 f8 b9 6b 48 69 7c 26 2d a7 c3 a8 f4 ef 4f 61 e4 60 62 fd 0c 91 81 05 88 da a4 1b 5f df db 5b 51 c6 87 2d b8 9e 73 d6 7a 5f ab f0 72 99 7a 66 54 af 02 dc 28 2d a0 17 d3 bd 58 5d b9 d0 f4 71 3c 6e bc dc 4e df d1 b9 9d 72 28 4f f3 e9 a2 95 88 e5 08 ba 83 f3 3f 0f dd a7 4b db b4 e5 ca ab 3c a6 f4 fd 48 92 a3 b0 f6 7b eb 47 73 04 82 e1 cd 8e 7d 07 11 56 ac 98 9a 02 ea 00 12 10 Data Ascii: G-h]tt!X.T,4c<&O4(P6iGKnE/-~s<,.TEDnZIt].Y"Tw3ckHi\|&-Oa`b_[Q-sz_rzfT(-X]q<nNr(O?K<H{Gs}V
2022-03-15 16:08:37 UTC	12815	IN	Data Raw: 3f 26 35 1c aa ea 10 7b c9 ae 8a 71 32 67 6d fd 18 f4 a8 f4 f7 4d 5c b7 17 cc cc 21 99 88 d7 6d af 65 1e 15 f0 fe f5 67 5b 4b 94 53 3b ef e6 79 92 cc 31 a0 4b 01 63 23 b7 74 5f c2 bf 1b 56 fa f0 20 da 6c 45 4f ce 9c 96 55 d4 03 c2 fe ea db 6c 6a c9 27 9a 23 89 37 cf 64 41 6b 9e c5 1e fa 2d a7 10 a9 54 91 c0 c9 b9 1c 14 e3 7b dc 5a b3 70 56 a5 6d 12 77 d0 ed d3 b3 81 a2 04 3f 94 a8 39 cb 35 ce a0 0f ed a7 10 07 19 fd 48 f4 fe 67 a8 31 e3 c5 c0 94 ef 6b ed 8c 1e 56 03 b5 db e2 ac ec e4 ec c1 95 63 e2 78 0e 16 0f 55 f4 57 53 9b a6 cf 26 c8 b2 94 c5 23 a5 89 5b 9f 03 37 cd ca d5 0e fb 78 71 34 b5 f7 bf b0 d5 ca c2 9d 25 5e 7f 35 14 0b 33 1b b0 ff 00 85 55 6f 26 37 ae a7 b5 7a 6f 2f ff 00 b3 fa 78 f4 ec c6 6d f6 f2 f7 f1 b1 1f c3 6f c3 5d 54 b4 a8 39 ad a3 93 Data Ascii: ?&5{q2gmM\!meg[KS;y1Kc#t_V lEOUlj'#7dAk-T{ZpVmw?95Hg1kVcxUWS&#[7xq4%^53Uo&7zo/xmo]T9
2022-03-15 16:08:37 UTC	12831	IN	Data Raw: 5f 57 8e 39 0a 9d cf 08 00 80 6d 7d 39 5b 6a 8e d3 4a 98 5b 5e eb 0a 0a a7 da ee b2 6f b5 c1 d8 b6 b7 01 76 12 1e 2d f7 6b 44 dc 44 7c c1 04 63 ea de 5c 86 77 43 65 db 71 a5 cf c3 b3 ef 78 a8 78 a5 42 7e f1 40 1e 5f 51 cb ea d2 16 73 f9 7b c2 88 c9 37 1e 3e 50 7d a2 b6 ae 3a e2 5f 6c 75 09 86 c2 d2 ca 08 c8 89 a3 70 bb 41 d0 b0 1f 13 78 76 d6 36 85 c1 ee 21 82 45 98 3c a8 b2 0a dc ae c1 a9 b1 ba 9d 5b e6 dd 5a ba 6a d7 f1 fc 45 23 57 23 2e 3c 6f 37 31 c0 dc e0 13 ef 27 86 df b2 b9 eb 57 68 a8 ec 8c f3 d5 d7 22 28 da 7d db 0c 9b 80 4e f5 cf 25 fe ed bc 1e 2a dd 62 da da 5e e2 12 ec 0c 77 19 4a 89 1c 45 3b 3c c0 41 5b 7d db 77 af 59 38 af 6f d2 36 87 c9 9e 58 8a 24 63 6c 40 15 4b 81 7b f7 58 fe cd 45 6a 9c b7 c4 40 b8 90 e2 cb 1f 9f 90 57 cd 88 10 c9 ae ba Data Ascii: _W9m}9[jJ[^ov-kDD\|c\wCeqxxB~@_Qs{7>P}:_lupAxv6!E<[ZjE#W#.<o71'Wh"(}N%*b^wJE;<A[}wY8o6X$cl@K{XEj@W
2022-03-15 16:08:37 UTC	12839	IN	Data Raw: 83 19 06 3c 26 c4 1b 9a 78 69 b9 cb 25 b3 a1 e9 b9 aa 22 95 8f 7e 48 f8 fb 79 6b 2a a8 1b 39 ce 95 d4 e7 c7 97 6e 17 96 76 82 4b 32 ea 41 1c cb 73 f0 fc b5 ae 5c 4a cb 9a 4e 6b 29 0c f4 a7 53 79 1e 3c 55 b3 c6 24 32 3a 9e 5e 03 87 9a bc dc fd da c7 d5 e2 49 3b 70 71 b6 bd ef c0 3b 1e 8f 36 54 6b 87 e6 45 0a c3 a2 c8 a8 84 d9 2d 65 6d bb 4d cf 9b dd e7 af 9e ad 5e e8 6f 7f 73 75 bb df da 67 b7 52 af 4e fa 9b 0b 29 97 a6 c2 64 9a 79 bc cb 98 d6 ca a0 8b 27 7f 74 8d b5 bb ff 00 15 69 9b d2 d9 73 be ec 76 f3 5b ee 8e 0d 19 b3 0e 6f fe 26 c7 55 c7 fc a6 de 6c a5 41 bc 92 1d df 9a bb 76 fc 35 cb b3 66 af bd cd f1 56 de 1f 09 16 45 fe b1 c6 c6 87 a5 ce 19 e2 57 31 ac 8b 10 b1 22 fd d6 1e cb db 76 d5 db 47 a4 b3 77 ab e6 ea db 63 4a 2d 4c 0f 45 b8 c7 e9 21 fa 73 Data Ascii: <&xi%"~Hyk*9nvK2As\JNk)Sy<U$2:^I;pq;6TkE-emM^osugRN)dy'tisv[o&UlAv5fVEW1"vGwcJ-LE!s
2022-03-15 16:08:37 UTC	12855	IN	Data Raw: 5f ba 34 d3 25 9f 14 b9 33 38 c8 09 11 51 70 22 b0 dc 34 3b b8 bf 2d b9 bf 76 b5 c9 ca 26 43 ab 44 e7 6c 58 ab e6 b4 89 dd 6b 68 4d d9 5e fe 1e f7 76 b2 c5 0b 8e 80 0b 8e 72 a1 3b b3 14 9c 70 2e c4 10 42 db c2 f5 a5 9a bf 4b e6 27 89 4c 5b 16 77 c9 11 79 ba 9e de e9 e1 a2 fb 3c 7b 5b 75 74 e2 b2 aa d4 46 0c be 94 e9 53 4d 24 dd 39 24 58 e6 63 b8 17 d0 df 4d ee 76 f2 7d ef c3 5d 36 f5 97 ed ee f4 f8 be 5f 88 86 da 34 a5 e8 f1 a1 38 b8 16 c6 90 46 f0 c6 06 ed a0 37 f1 19 bc be fc 8f 5c d4 ce fa ad cf cd be de 2f 97 e5 34 4e 0e 6e 0f e9 98 86 61 1a 2c 7e 5f 96 5d 98 33 00 e4 71 db e2 d9 1a fe d5 7a 55 f5 ef 22 d2 77 7d 3c 95 12 67 41 27 4f 9f d3 3d 3a 48 61 40 c5 22 60 b2 f3 6e 6d fd d4 57 f0 ae dd bf 96 9f de af 3f ce 5e a2 e9 cc 73 74 fc 9d e1 be 20 1e 9b Data Ascii: _4%38Qp"4;-v&CDlXkhM^vr;p.BK'L[wy<{[utFSM$9$XcMv}]6_48F7\/4Nna,~_]3qzU"w}<gA'O=:Ha@"`nmW?^st
2022-03-15 16:08:37 UTC	12871	IN	Data Raw: 96 fb d9 85 cd 89 f9 cf 76 de 15 ae 59 b6 e8 5f 29 0a c2 58 e0 cc 58 da 65 b2 b2 c8 c3 42 2c da 73 ba fc df 17 ec d7 56 a9 37 f9 4a 7c 0a e1 44 c6 8d 47 7b cb dc 1a fd 87 e2 ae 7b 4d 9f f1 32 6c 37 31 a0 68 4e 44 76 88 85 1a 2f 33 5c f1 da a9 f8 77 7d ea ce a9 c9 45 38 38 f8 ae a3 33 21 87 94 01 0c 57 4b 8e f1 f7 b3 86 f0 f8 6b 55 92 d4 b6 d5 da 35 f6 83 a6 66 3c 72 b2 e2 96 f2 80 e5 02 c5 98 fc 52 33 77 f7 f8 9a b6 56 b2 d7 db e5 16 e9 60 ed 8d f5 88 01 4f cf 62 0c 92 69 bf b7 6c 68 7d 89 5b e4 ca 9f 0f e9 18 f3 f4 c4 c1 89 1f 6b b9 2f c8 4e a5 5c f7 55 b6 8d 7e 2a e7 56 77 71 f6 73 02 52 0e 3a 77 91 04 59 00 f9 b0 48 c7 cd 65 0c ad b4 76 5b 77 67 87 96 b6 76 97 0f b3 a7 e6 2e 03 24 7c 58 80 9f 10 18 c1 b1 51 c5 98 77 57 73 7f 7a b9 dc d9 c7 b5 4c 5a 08 Data Ascii: vY_)XXeB,sV7J\|DG{{M2l71hNDv/3\w}E883!WKkU5f<rR3wV`Obilh}[k/N\U~*VwqsR:wYHev[wgv.$\|XQwWszLZ
2022-03-15 16:08:37 UTC	12879	IN	Data Raw: 4a 9e c0 18 6e dd 56 b2 27 3e d6 12 50 1a bd 51 c9 92 3f 0e e0 65 62 c7 94 6e e6 7e 6f 11 ae 7b d6 75 fb bf 11 2d 90 8b d4 c5 bc d6 08 ac 51 ae ad da 00 3c ad bf e7 5e 5d b5 a7 95 09 2f 11 73 24 1f a9 65 08 e2 9a 05 67 33 b3 16 dd 6b 2f b1 3d ed 50 a9 59 69 be 9f c5 f1 13 26 df 4f 10 46 c4 0b bc a4 9f 38 2f 61 e2 aa be 2e 3d fa c9 5b 86 81 57 00 d9 2f 12 2c 61 c3 4a db c1 68 d5 ae a1 45 f6 b3 6c f8 6b 2a a6 db ee fc 46 6e f0 13 8d 93 0e 52 ab e2 31 c6 9d 59 ee 08 b8 d7 97 70 1c cd b6 db ab 7a 63 d8 a6 cf ea 2d 36 f5 03 ea 99 70 ae 42 1c 80 d9 18 eb 74 be d5 16 07 bc db 75 e5 fb d5 51 bb a5 c1 0d cb 2f c8 c6 9a 58 d6 30 84 45 11 de 0a db 76 9e 19 3c 68 be 2a ce 96 4b 88 80 f2 5a 6e ab 22 43 1b 79 4d b2 ce c7 da 6d de f8 15 b6 fc df 35 6b 4d b5 e2 68 98 cd Data Ascii: JnV'>PQ?ebn~o{u-Q<^]/s$eg3k/=PYi&OF8/a.=[W/,aJhElkFnR1Ypzc-6pBtuQ/X0Ev<hKZn"CyMm5kMh
2022-03-15 16:08:37 UTC	12895	IN	Data Raw: e6 dc bd df 15 69 5c 70 a3 de 26 8d 4c e3 8f 06 4c 99 f1 22 64 4a 59 96 36 53 7d b6 ed d8 ba 8f 87 9e a6 f2 9e d9 5b 09 44 7a 3c 19 12 99 b2 42 6c 4b b3 6e 60 00 d7 88 e6 f7 ee e5 4a c3 35 77 15 77 2c 94 19 90 e5 64 63 8c 82 d0 22 15 56 b1 b2 b2 f8 99 7c bf 87 e0 f1 51 8f 1d 6b c7 59 7f 74 c9 98 f8 fd 2f f9 57 54 9b 27 16 12 d8 6e c4 44 18 5d 95 87 74 3b b7 71 bc 7f e5 ae dc d9 55 eb a3 88 fc a6 89 e8 1f d1 f0 f0 f2 b3 a5 79 04 9f 50 b2 6d 11 a3 5c ca 74 f8 f7 30 2f f1 77 68 6b 72 49 fb 89 6a 4d 1e b9 d0 a4 82 26 ca c1 44 fa 68 dc f9 aa 58 91 bc f8 77 72 ee 41 b7 bb e2 a5 6c 50 bf 50 91 ce 74 ac 21 24 cf 98 eb b1 5b 60 60 41 60 ea 09 f3 36 5f c3 dc e6 ac f2 37 b7 6a 73 b6 7e 92 dd a0 df cc f2 26 85 c6 2f 34 d1 c3 75 d8 0f 28 07 5d b7 f6 57 0e 35 7b 3d 7a Data Ascii: i\p&LL"dJY6S}[Dz<BlKn`J5ww,dc"V\|QkYt/WT'nD]t;qUyPm\t0/whkrIjM&DhXwrAlPPt!$[``A`6_7js~&/4u(]W5{=z
2022-03-15 16:08:37 UTC	12911	IN	Data Raw: db 1e 88 d2 86 4c cc 50 d3 1d d2 46 77 15 62 db 4e bd d6 61 ed ac ed 74 f4 9d a3 6c cd 79 e4 cb 46 9a 32 ea de 51 0b 23 31 24 b5 fb 80 5b e2 ee b5 6e a5 3f e7 cd f2 8e a6 96 36 1c 88 40 ea 5b 25 9c 11 20 08 2f b5 ad b4 05 73 dd b7 8b e2 a8 cb 9d f6 2e 4f b4 a9 35 64 e8 d0 75 08 f7 64 b0 56 7d 42 c4 d6 bd 9b 72 a4 d2 1f 9b c2 bd da df 14 35 3e f2 60 c8 cc 8f ce cf 78 b2 e3 31 c2 79 ca 30 ba dd 47 96 ee d6 d9 b5 2d c9 f1 b5 45 da 9d 1f 36 ed 82 80 07 e9 98 58 c2 6c ec 79 24 92 18 46 e7 b8 b9 01 c6 d5 e5 6b ff 00 9a b5 74 b5 e5 2e cf a0 70 da 0c c9 c9 4e b0 8b 1a 0d d8 e6 d6 66 01 46 84 73 90 9f 0d 72 da 68 f8 99 99 f9 81 de 58 e6 85 a4 7c 78 e5 74 91 9d af c0 6e 5b 7d ed b5 b4 34 9a 7f 66 d2 98 79 85 de 19 72 02 15 c9 1b 2e 5b 98 01 fc 42 8e 17 bf f9 7a b2 Data Ascii: LPFwbNatlyF2Q#1$[n?6@[% /s.O5dudV}Br5>`x1y0G-E6Xly$Fkt.pNfFsrhX\|xtn[}4fyr.[Bz
2022-03-15 16:08:37 UTC	12919	IN	Data Raw: 64 a3 77 87 f1 7e e2 92 8e 26 5e 07 4b ca 49 83 82 a8 ad b6 72 ed cd cc 09 5d be 57 7b cb aa be 4a b5 f8 3c 3c bf 37 88 7c 0d 5e af 2c 18 58 d0 ed fc c9 64 50 b1 f9 65 50 06 ee ae c4 3d d8 fe ff 00 de ac 6b 4d d6 e3 f3 ee e6 13 d4 e6 66 9f 3b 2a 66 c8 46 05 70 d4 f2 97 01 da e3 77 e4 a1 ef 05 b5 77 56 94 ad 63 ff 00 93 ee fd 44 c4 07 f4 8e a3 91 97 82 d3 64 2f 9f 6b b0 94 35 d7 72 de 4e e7 b7 5e 6d cb c9 5c f9 b1 d6 97 85 c9 f0 77 b9 b9 4a 66 af a6 60 90 18 c4 7b 72 a3 4e 70 97 ba 82 ba ef 2b c3 f6 9a b9 f3 eb c2 69 6f c4 5e 39 93 4f ab c1 d4 b2 26 f3 30 15 6c 1b 6b 2c af 7d 49 dc b2 6c b7 0f 97 fc 34 f0 63 54 af 39 d9 5a a2 de b4 f9 1d 43 1b e9 63 8c 6c 92 cc 5a 23 6b 11 60 c3 cb 93 6f 78 77 15 6b 7c 79 2b 0c d5 59 2d 07 e8 1d 3f a8 c3 91 1b 4e 91 b7 4a Data Ascii: dw~&^KIr]W{J<<7\|^,XdPeP=kMf;*fFpwwVcDd/k5rN^m\wJf`{rNp+io^9O&0lk,}Il4cT9ZCclZ#k`oxwk\|y+Y-?NJ
2022-03-15 16:08:37 UTC	12935	IN	Data Raw: 5b d9 3d aa 2f a8 9f d8 0b 8e d2 4c d0 e4 4b 33 63 c8 cd 75 12 21 0a c9 71 7d b6 e5 4f 87 99 3f 15 4d 92 49 a4 b7 fc af 9b 78 f6 87 f5 c2 32 e2 77 8f 77 d6 85 31 ee 5b 59 96 fc aa aa da ed b7 35 63 e9 f9 1e bf f8 fa 82 0d 6e 8e 23 86 33 87 8f 28 c8 ca 24 ac 8d 36 d6 70 db 77 6d 8e c5 95 76 af c3 51 e6 5f c2 ab 57 d1 b4 ab 3d 0a d7 15 a3 78 af 72 5b 9b 78 7b 96 6e 0a 9e 5f 87 77 2d 15 ba b7 f1 21 06 e4 cb 1c c8 93 c2 ca 43 b3 29 36 b6 d6 5f f4 d5 78 0f 86 8f 2d a5 b9 fd d3 44 8b fa 9e 4c 92 6f cb 68 bc c7 61 b1 11 78 26 e3 b4 ab 76 b7 dc 4a ee c7 59 9b 76 d8 a8 83 90 e9 d2 0c 99 1e 37 20 45 19 25 46 eb 16 24 ee f2 cb f8 bb bd df 0d 3c ce 20 d7 81 d1 e0 c1 3e 4a 98 d8 47 12 a2 a3 c8 a4 d9 10 8d ce ac 8a a3 77 f0 f9 1d be 2f 15 75 55 e9 02 02 ea 0b 8b 88 8b Data Ascii: [=/LK3cu!q}O?MIx2ww1[Y5cn#3($6pwmvQ_W=xr[x{n_w-!C)6_x-DLohax&vJYv7 E%F$< >JGw/uU
2022-03-15 16:08:37 UTC	12951	IN	Data Raw: c7 07 e2 91 41 5f 51 c2 76 9f cb 12 98 dd 06 d7 0a 45 9f e1 df bb bf b7 bb cb 5c b4 c9 0b 86 ef 70 93 ec 2c c0 cb c9 c1 2d 83 8c 56 4c ee 5b 28 b1 65 b9 1f c3 51 c7 93 fc d5 a5 53 dd b9 27 5e e9 aa 5d 86 44 de ae cd f4 df 58 85 0b ee 33 bd a5 8c af 25 ef 68 f7 3e 8d 27 7b f3 36 d7 7f a7 c6 9a 77 5d 58 fd af ca 0d c1 d0 b7 5c ea 00 94 2c c0 a4 a4 b5 d8 ca 1a e0 b7 99 0c 7c e1 39 77 2a 57 03 ca ef c5 bb 56 dc db 7a 36 fc e4 4c 99 bd 53 d6 f1 cc 1f a5 f4 ec 70 13 20 b3 36 c9 09 3f 37 98 e3 dc bc fb 79 6b 4a e0 7d 6d ec 8f b3 a8 b7 6e c4 43 1f 27 2f a2 63 2f 52 06 db 84 7b 63 0c 40 54 ec d8 a7 e3 be e7 f8 eb 0b 56 b9 ed b3 e6 e6 f8 89 98 37 21 ea 3f 5c 85 67 be 33 30 52 02 d8 b1 3f 7c 72 aa fc bf b5 5c 77 c6 a8 f9 79 fe 6f da 56 80 65 72 f6 c8 f2 3a b4 6c 42 Data Ascii: A_QvE\p,-VL[(eQS'^]DX3%h>'{6w]X\,\|9w*WVz6LSp 6?7ykJ}mnC'/c/R{c@TV7!?\g30R?\|r\wyoVer:lB
2022-03-15 16:08:37 UTC	12959	IN	Data Raw: 93 e5 5f 0d 79 b6 f4 37 dd c7 95 fb 6d 1d 53 7a f1 08 f5 66 4e 0e 29 18 f8 78 ed 24 b6 24 be de 55 b3 2f 34 41 7b 9b 3e 6a c7 66 db 3e ef 74 d2 ea 0e 53 d5 59 69 9f 8a 72 c2 33 cc 08 11 32 91 a1 26 c4 ec 1c c3 ef 7c 55 a7 a6 4e b6 da de 9d e9 fd c5 33 99 e8 ab d4 3a 9c e9 82 5d fc 95 76 66 4d 4d ee 39 8f 31 e3 5e 96 7b 53 1d 77 76 f7 4a bf 03 ba c1 91 22 c5 5c 49 d5 d2 58 9d 8c 65 ef aa db b3 c1 a7 36 da f0 ee 9b b6 e5 d3 65 cd b7 c4 62 9f 61 99 1e 76 5f 4d 64 90 13 14 92 4a ae c9 aa 80 9c 79 98 f2 9d b5 d4 aa af 29 6b 15 ea f8 c4 9e a7 55 37 56 56 4d 57 cb 32 28 f2 c0 20 b3 eb 63 bd 94 6e e1 cc bf 15 70 63 a2 ab 6f 5b 7e 5a 9a 99 39 11 f4 b0 02 44 eb 31 54 63 20 df 67 1b 8f 8b db b7 c5 cd 5d 2e b7 4a 40 c8 c5 c5 f3 4c 9f 47 22 86 80 a0 54 3c 13 b7 46 6f Data Ascii: _y7mSzfN)x$$U/4A{>jf>tSYir32&\|UN3:]vfMM91^{SwvJ"\IXe6ebav_MdJy)kU7VVMW2( cnpco[~Z9D1Tc g].J@LG"T<Fo
2022-03-15 16:08:37 UTC	12975	IN	Data Raw: e1 1b 90 7e 9d 16 43 6f 8b 26 65 3a 92 82 40 77 39 51 e1 ec 8d 7e f5 5d f6 ae 0b 6f f0 05 a0 4c 9d 37 1d 59 64 ca bc 8e a0 9d a0 1b 10 35 11 b9 26 fb a5 ee f2 54 d3 22 8d 34 1c 85 60 e0 c7 34 21 d1 44 06 68 ec f1 be a0 ee 04 05 67 ef 72 37 36 cf 86 b9 af 91 d5 f8 b5 ea af b7 78 73 08 a3 eb 61 c7 48 94 43 1b c2 ec 55 de 21 76 54 ee ad 9b b3 77 77 98 f8 aa b6 3b 37 ad b7 2e 9d fd 36 b8 27 ef 0a 22 58 f2 20 41 18 c7 8f 16 30 61 dd ac c6 3d 6e b6 b7 ef af de ad f2 59 5a a9 39 b6 ee bf 07 cc 74 24 82 7a 14 85 5c cf 20 32 02 db c6 d1 7b 58 1d 37 77 ca 6e 6e f7 fa ad 58 e5 bc ad bd de f0 37 24 63 7c ae a3 3a 66 bb 2e 3c 16 71 74 17 dc 14 f3 73 37 6e e3 42 a5 63 6f b8 c6 60 a2 76 c5 18 af 13 f9 b1 e3 b3 6e 6d a3 62 13 7b 0d ef de 6a aa 64 b2 d1 46 ef bd 6f ba 4f Data Ascii: ~Co&e:@w9Q~]oL7Yd5&T"4`4!Dhgr76xsaHCU!vTww;7.6'"X A0a=nYZ9t$z\ 2{X7wnnX7$c\|:f.<qts7nBco`vnmb{jdFoO
2022-03-15 16:08:37 UTC	12991	IN	Data Raw: 91 4d 95 b7 0b be bb ad bb 98 24 7f 2a 73 56 8d d5 39 ba 9f e5 d3 fd 43 56 00 ea 9d 33 ab cf 30 29 e5 19 5d d8 3a c6 a1 4e cb 71 92 4e ef 2a f7 77 56 f8 b2 62 aa d7 74 46 9b bc 5f 0d 45 68 7c 43 a2 e8 f8 50 89 67 c9 54 c6 91 0b 6d 21 da 43 dd ed 67 f1 7d da 8b e7 b5 e1 55 5a d5 7f 41 a3 d5 1c 9e 07 5c c4 99 8c 2d 75 c8 91 dd de 4d 4e 96 e5 46 5e 1f 32 d7 a1 93 05 96 bd ca a5 5a d4 5b 4e f7 33 27 19 31 21 97 a8 18 e2 d4 93 1c 7d d2 c0 7f 15 e4 ef ee 6f 15 70 57 5d 14 d8 9b 24 67 62 74 a4 69 1a 66 82 28 c0 37 51 cc e1 89 17 dd 7b ef fb a9 bb 97 bd 4b 2e 75 a4 49 29 49 ca 4f d0 17 12 75 19 88 26 5b b3 ed 40 d7 43 d8 65 6f 84 f8 57 c3 5e 8a f5 1b d7 2b d9 dd e6 db cd f2 05 8d 53 93 81 d4 8a 74 f8 c8 49 a2 4b a8 0c 11 4b 11 e2 df df ac 6c ef 45 ba 39 7b dd fb Data Ascii: M$sV9CV30)]:NqNwVbtF_Eh\|CPgTm!Cg}UZA\-uMNF^2Z[N3'1!}opW]$gbtif(7Q{K.uI)IOu&[@CeoW^+StIKKlE9{
2022-03-15 16:08:37 UTC	12994	IN	Data Raw: bc 0d c1 e5 76 99 43 12 de 55 c8 fd 1c df 89 aa fd 42 b2 96 d7 27 47 ce 30 ce bc a7 37 3a 38 b2 65 54 68 15 8b 80 a6 f7 36 d9 65 5d 58 d6 18 39 28 dd 57 5c 40 5e c9 30 fc 9f 4c a1 c2 0d 19 0d d6 18 ab 45 1e 8a b6 6f f5 a4 dd cc 3c b5 aa a6 6a 24 db 7c 9d 3e 2f a7 ea 3a 12 d0 15 f1 86 3c 53 47 f5 2b 24 b1 90 64 04 11 62 c2 cd ce 79 9b 77 cd 59 2b 6e 69 c6 d5 dd fe d2 5f 02 a9 fa 5e 50 2d 8d d3 cc 51 c4 e1 3c d2 1b 80 ef 94 b8 ec 2b df ad 16 5a d7 5b f3 3e e9 9d b4 36 65 e9 38 f9 0d e6 92 15 c1 01 19 18 6d 27 bc d7 be e6 e5 ae 7c 57 d1 a6 fe f0 56 b3 a9 cc 7a 87 a6 42 d9 38 ff 00 56 5c b6 48 0f 32 f3 16 00 1e 1f 2f 99 fb b5 ea 51 da b5 6f 4e 5e 9e 1f 88 d2 da 06 e1 e3 ab 65 7d 34 d1 ec c0 48 c9 b7 66 d3 7e fc 9f 2a 2f 25 70 de dc bb 93 ff 00 75 db f1 7c a4 Data Ascii: vCUB'G07:8eTh6e]X9(W\@^0LEo<j$\|>/:<SG+$dbywY+ni_^P-Q<+Z[>6e8m'\|WVzB8V\H2/QoN^e}4Hf~*/%pu\|
2022-03-15 16:08:37 UTC	13010	IN	Data Raw: ff 00 c7 5f c5 63 5a fd a7 51 bf 14 c0 b9 8f 34 c2 05 6d a5 c9 b3 5e d7 f2 8e ce ee ee fd 79 77 a5 a7 95 4f b7 51 51 da 0b 87 9c e0 c3 93 e6 f7 b7 79 2c 48 73 7b 6e 4b 5b 56 e6 4e 4d d5 6b 1e d7 e1 f1 77 7a 46 aa 1b d2 f0 63 c0 86 5c ec 81 2b 99 48 42 8c c0 95 17 dc 1c db b8 c8 df 87 c2 f5 8b cf ba db 39 76 92 64 e5 fa 7f a3 92 5e 08 5e 7c a6 b3 a8 95 b6 c6 4b 37 c2 bb ee ba 73 ff 00 86 bd 0f f2 23 b5 ed fc bb 7b a2 90 1c ae af f4 d9 6b 95 d7 e2 0b 34 c6 d0 a4 85 8a 47 6b ef da 91 ff 00 ab b5 94 2a b2 77 69 3a bc a9 f9 4f 4a f5 ec db ba fe 1e af fd b2 c3 b2 a0 79 e0 1e 66 32 be 3d 83 14 2b b0 01 f1 88 d8 68 c7 75 72 d1 c3 d2 dc de 2e af c6 64 d3 33 b0 3a a0 80 7d 1a 62 ce f8 0c 3c c5 bd 9b 68 5e 57 96 3d c7 95 5d b9 79 ab aa f4 76 53 ba 9e 67 0f aa de 21 Data Ascii: _cZQ4m^ywOQQy,Hs{nK[VNMkwzFc\+HB9vd^^\|K7s#{k4Gk*wi:OJyf2=+hur.d3:}b<h^W=]yvSg!
2022-03-15 16:08:37 UTC	13026	IN	Data Raw: 97 6d c3 8f 08 27 5b dc 71 f8 b9 6b 9a f8 dc 45 96 df 84 28 9d 50 1f 53 ea 58 d0 6f 97 39 da 47 07 91 46 a5 89 1c df 2a 8b f7 ab 5c 58 ad 6d 2a b6 f8 86 ea ed 07 55 d3 b1 72 3d 3d 86 92 61 ca af 9b 99 1f 9a ca a4 95 89 34 db 08 8b c5 27 37 3b c9 f8 69 66 69 47 87 a7 77 7a c5 bf f6 d6 87 34 9d 6f 3d 16 7c 57 3b 20 fe 24 81 06 dd 7d e1 6a b6 56 14 76 fd 42 a5 f7 05 47 e9 e7 f5 2e 5c 51 e4 c9 06 25 d5 de fb 8d 9f 68 b9 f7 ef f0 7c d4 60 b6 c9 55 9b 7c dd c3 2c 30 e6 03 7a c7 57 e9 78 99 42 0e 8d 2e d8 e1 84 04 b2 9d 24 bf e6 b3 1f 1f de a8 be 17 64 a7 9a 7a cb c9 6d bc 0a 70 ba 84 3d 41 86 47 57 56 88 6f f3 19 91 8f e6 37 c4 50 5f 68 ae 7c 98 de 3d 31 f3 69 b7 9b b8 5f 99 3c 0e 96 5f 52 41 d2 33 7c ae 8f 1c 69 0f 97 e7 4d 93 60 cf 6e 1b 53 77 f0 82 fc 9c ec Data Ascii: m'[qkE(PSXo9GF\XmUr==a4'7;ifiGwz4o=\|W; $}jVvBG.\Q%h\|`U\|,0zWxB.$dzmp=AGWVo7P_h\|=1i_<_RA3\|iM`nSw
2022-03-15 16:08:37 UTC	13030	IN	Data Raw: ac 59 4b 65 01 4e 81 97 5f 17 2b b8 6a f3 2b 7b 61 ba 6a 76 f5 7b 7c 23 99 32 fa 00 c9 ea 52 b6 66 53 22 43 14 84 82 c7 bd 2a 8d 65 6f 0b 79 7d ed ab cb e6 57 b9 55 de 7e df 08 93 6c c9 8b 3f 13 1d da 39 32 26 8b 23 2c 89 83 9e 60 c4 72 a0 75 b5 f6 9f 86 b9 2f 5b df 58 ad eb 8f 90 7b 4e 86 6c 39 26 ce c7 39 44 fd 23 2a 8b a2 8d a4 fc 52 6e ef 33 3f ee d7 15 32 d7 6b f1 57 ef fd 26 7f c4 7f 50 f5 04 c3 2b 36 2c aa 4e b7 55 02 e3 e2 b8 15 9e 0a 79 8d a6 bd bb a2 b4 f1 47 2d d5 7d 23 8d 2c eb d4 3a 42 88 63 90 16 68 fe 6b 72 f9 7f ed de af 4f 1f ac b4 3a 64 d7 f6 fc 45 5a da 49 95 d5 7a 7f 50 4f 4e 28 cb 55 65 86 46 64 36 05 90 13 b5 91 a4 f1 6f 7d 76 fe f5 7a 98 ed 5d f3 5e ff 00 e2 d0 8b da 74 3a 1c 0e 96 bd 23 0e 1c de a5 22 c3 92 14 15 68 90 5d 74 e2 36 Data Ascii: YKeN_+j+{ajv{\|#2RfS"Ceoy}WU~l?92&#,`ru/[X{Nl9&9D#Rn3?2kW&P+6,NUyG-}#,:BchkrO:dEZIzPON(UeFd6o}vz]^t:#"h]t6
2022-03-15 16:08:37 UTC	13046	IN	Data Raw: eb d4 ea d5 3b de 2e f1 be ed 35 29 c8 6c ee 81 20 fa 28 08 c4 80 ea 5c 1b 9d dc cc ed d9 b7 9a 9d 76 67 5c cf fd cb f8 4c dd b5 0e ba 75 a5 7c e1 10 f3 6d b0 28 70 ad 6f b5 7b bc 7b be 2a c5 7f b2 d5 67 97 f8 14 71 f9 ab 11 90 74 ac 68 c2 3a 32 24 96 53 72 4f 8f e7 15 eb e3 98 de de ed d3 b3 f6 91 c5 9d e7 4b e9 f0 e3 6d 89 89 13 bf 78 11 fa 2d a5 78 59 af 67 f2 d4 71 d8 57 d5 3d 37 27 5c 9f e9 31 5d 94 22 97 22 3d 49 2a 47 1f d1 5d 7e 86 5b e1 ba cf c5 e1 05 59 39 8e a3 d0 30 ba e4 eb d2 73 96 58 08 dc 39 51 cf 97 61 f0 f0 90 ee e2 cf f8 6b d1 c5 92 d8 1e e6 eb 55 de e1 ed f7 4d 2a 79 57 a8 fa 14 fd 03 20 e1 c8 0b 23 12 11 ac 01 60 3d a8 0b 57 d2 60 cb 5c d5 dc 8a 75 06 4e a5 95 81 90 65 cd 8d cc 8e a1 6e e0 86 00 5b 69 4b f8 b6 f7 6a 9e 3a e4 ac 55 fd Data Ascii: ;.5)l (\vg\Lu\|m(po{{gqth:2$SrOKmx-xYgqW=7'\1]""=IG]~[Y90sX9QakUM*yW #`=W`\uNen[iKj:U
2022-03-15 16:08:37 UTC	13062	IN	Data Raw: 95 f6 e3 5f 98 c9 1d 46 0f aa e5 e9 31 c9 d4 15 bc d8 27 62 f1 90 b7 06 fa 38 da de 14 ae 3a 62 7b d2 5c b9 31 f2 db 77 b7 78 e8 a3 83 53 a3 47 1e 6e 3f 99 03 46 b8 8e cd 29 3b 36 0b 9e 21 63 bb 4a ef f2 55 bc 56 cb 77 56 e3 69 ab d4 86 33 43 90 c5 58 90 52 fa 37 29 b0 f9 4f 0a e0 cb 4b 63 70 60 eb 3a 99 59 d9 d1 4b 9d 14 58 eb e5 cb b4 bc 4c c3 bc 07 89 77 7b d7 f1 57 46 3a 3a d1 b7 ef e6 8e e8 44 22 18 3e a2 7c e9 e4 6e b0 b2 07 23 6b 16 b8 b0 ef 37 28 03 bc dc cf 1a fc bb ab 6f 51 46 d2 75 6a de de dc c3 77 92 ac d5 e9 9d 3c 36 66 04 66 7c 67 05 a5 79 08 58 c0 1e 05 f3 39 8f c8 8a 2a 69 e6 64 e5 bb d9 75 d1 b7 af f0 fe 22 60 f2 8e a3 9b 0c 99 72 8e 94 1d 0c 4c d2 46 75 be d1 cd cd 5f 53 8e 8d 55 79 90 f7 72 d8 de a1 bd 1b ae bf 5a c9 6c 8c c6 54 c9 02 Data Ascii: _F1'b8:b{\1wxSGn?F);6!cJUVwVi3CXR7)OKcp`:YKXLw{WF::D">\|n#k7(oQFujw<6ff\|gyX9*idu"`rLFu_SUyrZlT
2022-03-15 16:08:37 UTC	13070	IN	Data Raw: 6f 6b 64 5f fd 3f 87 bd f4 85 93 60 78 1d 62 14 49 27 7b 34 d2 ca 6c b1 5c b3 f1 8f 9f e1 f9 3e 05 a7 93 0b 6d 2e ed 6b df ee f7 89 db 06 b4 99 09 12 b4 27 1c 49 0e 3c 6a 5a 35 50 42 df 56 dc cf e1 8d 7c 3f ea 49 53 5c 5a cc f3 5b bc 6d 8e a0 1e ad dd 87 0e 17 4e 67 22 4c 96 33 cb 71 62 b6 ee 0d bf 02 2d 6f 85 26 ed 65 cd b6 bb 45 76 d1 85 d3 31 a0 ea 3d 5f cb 69 77 c2 61 63 24 8b a1 b2 76 06 6e ee ea df 25 9e 3c 73 1d e5 b6 9f 39 35 d3 89 be fd 46 3f 4e a3 8c 43 1c 62 52 a1 3c c7 0c 76 0b 92 d6 55 e6 2e 7e 5e 5a e7 71 ea 14 45 b4 ea f9 8d 77 28 0d 4c 78 7a a8 86 79 22 44 11 1d e0 ba aa 86 bf 77 f2 bb c7 5a e2 6e d8 a5 26 de ee 5e 57 d3 f5 98 cc 1a 7d 50 ff 00 e4 8c 49 14 c9 62 01 55 16 00 5b 94 39 bf 2e 9c d5 8e 2b ca de fd be 53 44 a1 99 bd 6f d3 0b ea Data Ascii: okd_?`xbI'{4l\>m.k'I<jZ5PBV\|?IS\Z[mNg"L3qb-o&eEv1=_iwac$vn%<s95F?NCbR<vU.~^ZqEw(Lxzy"DwZn&^W}PIbU[9.+SDo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.3	49965	20.199.120.85	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:40 UTC	13074	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 32 63 65 33 62 31 32 30 36 36 36 66 65 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 8d2ce3b120666fef
2022-03-15 16:08:40 UTC	13074	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-03-15 16:08:40 UTC	13074	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 32 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 32 63 65 33 62 31 32 30 36 36 36 66 65 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 71 36 65 2b 6b 6e 77 50 32 42 35 38 54 79 75 62 68 4e 41 37 55 45 66 43 4b 59 35 70 70 49 38 6d 54 44 4b 64 6f 6e 32 6e 65 48 74 6e 50 70 38 75 53 45 6e 67 56 66 59 64 4b 33 42 69 54 57 79 52 69 2b 52 72 32 2f 32 66 59 70 6a 73 6a 6c 6a 7a 36 65 4b 72 6b 69 41 4b 6e 4b 4b 4e 7a 74 77 41 6b 46 55 30 4f 78 4f 69 57 6d 38 73 56 37 67 66 4c 47 69 41 64 75 54 73 6d 45 5a 30 4c 49 30 76 69 57 71 46 6d 41 78 Data Ascii: ATH 2 CON\DEVICE 1026Context: 8d2ce3b120666fef<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcq6e+knwP2B58TyubhNA7UEfCKY5ppI8mTDKdon2neHtnPp8uSEngVfYdK3BiTWyRi+Rr2/2fYpjsjljz6eKrkiAKnKKNztwAkFU0OxOiWm8sV7gfLGiAduTsmEZ0LI0viWqFmAx
2022-03-15 16:08:40 UTC	13075	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 32 63 65 33 62 31 32 30 36 36 36 66 65 66 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 8d2ce3b120666fef
2022-03-15 16:08:40 UTC	13075	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-03-15 16:08:40 UTC	13075	IN	Data Raw: 4d 53 2d 43 56 3a 20 4a 6f 2f 74 38 41 56 44 4b 55 65 70 32 49 58 61 42 64 2b 61 6e 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Jo/t8AVDKUep2IXaBd+ang.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.3	49966	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:54 UTC	13075	OUT	GET /cms/api/am/imageFileData/RE4Fies?ver=7654 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:54 UTC	13076	IN	HTTP/1.1 200 OK Last-Modified: Sun, 13 Mar 2022 08:54:32 GMT Access-Control-Allow-Origin: * X-Datacenter: northeu X-ActivityId: 8420b01a-f8c3-43ba-b9aa-99da49c45136 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4Fies?ver=7654 X-Source-Length: 472261 Content-Length: 472261 Cache-Control: public, max-age=233084 Expires: Fri, 18 Mar 2022 08:53:38 GMT Date: Tue, 15 Mar 2022 16:08:54 GMT Connection: close
2022-03-15 16:08:54 UTC	13076	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-03-15 16:08:54 UTC	13092	IN	Data Raw: 31 fe b4 04 01 49 ab 38 06 98 c0 72 05 1c c1 ca 40 cb 9c 52 98 f7 54 89 8d dc fe 94 e2 ca 38 34 73 05 88 0c 7f a5 20 8c 1e 45 3e 52 17 e9 49 1c a8 c0 e1 c1 3f 5a 39 86 90 c5 5a 0a 61 8d 4b b8 6d cd 35 ba d2 b8 58 8f 66 7f 86 9a 53 e6 a9 bd 8d 04 51 70 b1 1e c1 b7 3d fb d3 0a f7 a9 18 e7 81 4d 03 0b 9a 2e 16 23 28 79 02 98 cb 86 15 2f 98 03 1a 52 3e 5c f7 a7 cc 3b 0d 45 1b 41 ef 48 47 53 de 9e 3e ed 07 e9 9a 8b 8f 94 84 af 71 d6 82 a0 a8 ed 52 14 03 8c 60 d0 a8 02 fa 8a 2e 55 88 fc bf 94 0a 0a 80 df 4a 97 68 e9 f7 69 08 f5 a5 71 72 90 ed f9 bd a9 3c bf 97 3c 7e 35 20 50 78 3f 35 38 29 3c 83 47 31 5c a4 05 69 9b 77 71 56 59 45 30 a8 1c 8e 0f a5 1c c3 e5 22 11 e3 9a 76 cf 97 de a6 da 07 e1 48 78 a9 e6 1f 29 13 20 a8 ca 67 8a b0 a3 2b cf 14 85 47 4f 4a 5c c0 Data Ascii: 1I8r@RT84s E>RI?Z9ZaKm5XfSQp=M.#(y/R>\;EAHGS>qR`.UJhiqr<<~5 Px?58)<G1\iwqVYE0"vHx) g+GOJ\
2022-03-15 16:08:54 UTC	13108	IN	Data Raw: 38 02 1b c1 93 df 80 18 1a b5 65 e3 2f 88 de 1a 62 96 da c6 bb 67 93 da 69 39 c7 e2 41 f6 e2 bc 2b 48 f8 93 1d bb dc 4b aa c0 6d ee 1d 19 60 16 d1 67 2c 79 19 24 f0 33 fa 56 8d 9f c7 6d 6a c2 da e6 c7 4e d4 2f a0 4b d4 58 a5 69 23 46 0a 01 ce 55 88 25 39 ea 54 82 47 19 ab 54 1a 7b 13 f5 84 f7 3e 8a d2 ff 00 6a 4f 8b 9a 18 48 e5 f1 6e a5 b6 3c 81 1d d9 05 3f 22 a3 3f 4a eb b4 7f db cf e2 76 86 43 b4 9a 3e a2 57 39 fb 55 96 f6 23 a7 de 56 1d 7e 95 e0 7e 09 fd a2 6f 7c 13 72 41 b7 d0 75 f8 65 8d 63 9e df c4 56 89 7b 11 2b ce 54 9f 99 09 c9 e4 1e 7f 01 5d 45 ff 00 ed 25 a3 78 c6 48 2d ed be 1b f8 27 4c 54 22 49 a4 b6 b5 9a 67 95 81 04 20 67 93 e4 53 8e 76 8c e3 8c 8a e7 92 9c 65 a2 34 e7 8b 89 e7 fe 26 ba 87 57 be 96 f9 ed 85 bc f3 4a 59 d5 64 dc 32 cc 58 95 Data Ascii: 8e/bgi9A+HKm`g,y$3VmjN/KXi#FU%9TGT{>jOHn<?"?JvC>W9U#V~~o\|rAuecV{+T]E%xH-'LT"Ig gSve4&WJYd2X
2022-03-15 16:08:54 UTC	13110	IN	Data Raw: 73 8e 0f 7a a9 24 cb 9e 08 cf eb 5f 1f 6b 7f b6 af 89 ae d2 71 a4 e8 56 1a 71 45 e3 ed 2c 67 61 ef c8 00 fe 55 c0 6a 5f b4 cf c4 bd 62 e5 e2 1a 9c 96 fb c0 3b 74 bb 72 9b 73 e8 57 3c fe 35 6a 84 b7 6c cf eb 30 e8 8f be 5e 60 72 06 00 1d d8 81 fc eb 07 58 f1 9e 87 a2 37 fc 4c 75 9d 3e cc 73 cc b7 4b fd 09 af 85 45 a7 c5 af 1e 32 23 47 e2 7d 5d 48 dc 04 ad 20 03 3f 5c 0e 6b 5b 49 fd 95 be 25 ea 97 82 59 74 78 f4 b8 dc 0f de 6a 77 0a 31 ef b4 16 39 ab 8d 38 2d 64 cc fd b4 e4 fd d8 9f 4e 6b 5f b4 47 c3 cd 33 20 78 8e 2d 45 c1 20 c7 61 13 48 d9 fc 80 fd 6b 84 d4 3f 6b 1f 0f 4d e6 9d 33 44 d5 2e 52 32 43 35 de d8 13 f3 c9 35 cb 69 7f b1 97 88 1a 20 35 3f 14 69 b6 4a 4e 5b fb 3e 26 96 41 f4 62 a0 57 07 fb 41 7c 01 d2 be 12 f8 7f 46 9e cb c4 1a a6 a9 a8 6a 37 2c Data Ascii: sz$_kqVqE,gaUj_b;trsW<5jl0^`rX7Lu>sKE2#G}]H ?\k[I%Ytxjw198-dNk_G3 x-E aHk?kM3D.R2C55i 5?iJN[>&AbWA\|Fj7,
2022-03-15 16:08:54 UTC	13126	IN	Data Raw: 6f 77 aa 5c da 1b 7f 25 5a e4 c6 11 59 49 24 aa 00 0e 4f af 6a fa 27 47 f8 03 f0 e7 40 da 6c fc 17 a3 a3 a8 c0 92 5b 71 23 7e 64 9e 7d e8 c4 56 a7 17 65 13 4a 51 aa fa 9f 32 dd 7e db fa b0 b7 41 06 83 61 6f 31 18 32 4c 5e 5e 7d 94 00 00 fc 79 ae 5c fe d3 ff 00 16 fc 75 7f 1d 97 87 e3 8e 39 e5 6d 91 c7 a6 d8 ac 4c 4f bb b9 20 7e 75 f6 66 b7 f0 63 c0 be 21 87 65 f7 85 b4 d2 76 ed 59 61 80 45 22 8f 66 5c 11 5e 5d e2 4f d8 bf c2 5a a3 34 9a 46 ab aa 68 8e 7a 29 90 5c 46 0f d0 e0 8f cc d7 14 27 4a fe f2 3a 65 1a af 66 79 32 7c 13 fd a4 7c 6b ff 00 1f fa ac d0 47 bb 24 5d eb 89 b4 03 d4 00 8c 6a 6b 6f d8 37 c5 ba 8d c8 93 c4 1e 2d b3 b5 90 8f 98 db 19 2e 1f f2 38 07 eb 9a b9 a9 7e cb 3f 15 bc 14 e2 5f 09 f8 8a db 53 85 33 88 a1 b8 6b 79 08 3e a1 f0 09 fa 1a ae Data Ascii: ow\%ZYI$Oj'G@l[q#~d}VeJQ2~Aao12L^^}y\u9mLO ~ufc!evYaE"f\^]OZ4Fhz)\F'J:efy2\|\|kG$]jko7-.8~?_S3ky>
2022-03-15 16:08:54 UTC	13142	IN	Data Raw: 98 80 4f 4a f2 6a 62 a8 d6 4d 42 57 fb d1 e9 47 0d 5a 8b b4 a1 bf 52 b7 84 7e 06 cd af 78 66 c7 c5 32 47 25 fa c3 71 2c 92 c5 13 2b 22 aa 30 3f 32 f5 39 62 73 c1 18 07 ad 7d 51 a7 fe c6 7a f7 c5 8f 84 be 11 f1 96 91 77 a0 db ea 37 b6 25 e7 83 68 b5 91 8f 98 c5 32 c0 05 04 21 55 e8 0e 07 7c e6 b9 df 87 f6 cf 61 e1 88 ed d8 35 ba ac 2a 2d e3 b7 1f eb 77 1c 7d d1 fc 27 3d cf 38 35 62 2b fb db 7b 79 e2 b8 92 69 61 60 44 36 91 cf 20 2b c9 f9 b6 f0 38 3c 60 0a f1 25 98 55 75 24 e5 aa e9 ae c7 ae f0 34 f9 22 a1 a3 eb d4 4d 2f 4f f8 e5 f0 12 fe 3d 27 4e d4 64 b7 8e 41 be 2b 4b 6d 42 0b ab 66 f9 b6 fc ca 58 85 cf b9 07 15 eb 1e 19 fd ab be 21 e9 1a 87 f6 7f 8b f4 5f 0e dd b4 40 f9 92 c7 7b e5 4a 71 d7 01 37 a9 c6 7b 0a f0 0b 1d 2b 59 d4 6e 35 1b bb 7d 30 59 d9 18 Data Ascii: OJjbMBWGZR~xf2G%q,+"0?29bs}Qzw7%h2!U\|a5*-w}'=85b+{yia`D6 +8<`%Uu$4"M/O='NdA+KmBfX!_@{Jq7{+Yn5}0Y
2022-03-15 16:08:54 UTC	13150	IN	Data Raw: cf b0 20 56 d7 ec f3 e2 ab eb 1d 4a 4b 0f 0f 3b 3d fd d3 b4 53 cd 2c 0d 18 85 1b 80 5b 38 0a c7 39 07 9c 0a f2 cd 15 84 de 24 b4 4b eb 69 12 19 d0 e5 a6 0a 8a a0 1e cc 7a b6 7a 00 45 76 5e 0d f1 0e 81 e0 1f 19 de 5d cf ae c9 1d a0 5d f7 51 c9 74 0a ee 5e 15 15 53 27 70 ea 4f e1 9a c6 a5 18 cd 24 cb a7 36 a5 7d 8f 48 d6 75 3f 14 da df de c7 79 e2 0b 68 b4 6b 6b 86 82 4b ab e1 b2 d9 54 ae 17 1c fc f9 e9 cf cc 4f 3c 75 ae 1f e1 dd 90 f1 8f 8e 4e a9 29 06 3b 2b 69 65 9d 64 98 c7 1c ce cd f2 88 97 27 6a e5 72 73 c9 03 bd 6b 78 a3 e2 e7 87 fc 6b aa d8 5d 59 98 ee 6d 6d e7 79 be cf 75 1a ba 3c 6a 80 16 6f 97 92 01 c8 07 e9 5c 4e 99 f1 12 c6 de ff 00 54 1a 55 ff 00 95 69 75 72 b7 7f ea c8 60 51 58 72 46 06 30 70 14 70 2b c7 58 79 42 32 51 56 b9 eb d4 ad 19 4d 4a Data Ascii: VJK;=S,[89$KizzEv^]]Qt^S'pO$6}Hu?yhkkKTO<uN);+ied'jrskxk]Ymmyu<jo\NTUiur`QXrF0pp+XyB2QVMJ
2022-03-15 16:08:54 UTC	13166	IN	Data Raw: 41 c5 7a 4f 0e d2 bb 96 fb 9e 2a ae b9 b4 8e 8b 64 75 cd aa e8 ba 9b cb 7f 77 a9 de 23 dc 4a 4b 89 2d 01 1c f4 00 86 e8 06 00 14 cb 1f 0f 69 3e 27 84 e9 7a 6d eb 6a 77 24 86 10 db db 39 70 7d cf 40 07 a9 20 0a 9e e2 d3 40 f0 bd b6 9f fd b7 24 be 7c 8a 66 fb 0c 3b 5d c2 37 dd dc 3b 1c 0e 9e a7 a8 c5 73 d7 ff 00 10 44 56 f7 3a 6e 81 a5 db 68 da 6c c7 e6 93 68 6b a7 e7 39 67 cf 04 fa 73 8f 5e f5 84 69 73 eb 4d b5 f9 1d 35 2a f2 2b 54 b7 a7 53 7f c2 5f db 7a 3e a1 73 65 6b 1f f6 7c 56 e1 a3 79 62 50 b2 3b 0c f1 e6 f2 70 0f 5d a4 0a b4 b6 3e 24 6b 6b bb 51 6d 7d e4 5e 11 e6 4d 0f ce ef 86 ce 77 8c 90 09 c6 7e 95 cd cf e2 fb bd 4a c2 2d 3a 01 1c 05 f2 93 2d b8 c0 95 88 03 27 39 20 05 1d 07 bd 76 de 1d f8 55 ad ea 7a 7d bc f0 5d ff 00 66 c1 24 0d 38 bc 96 4f 2a Data Ascii: AzOduw#JK-i>'zmjw$9p}@ @$\|f;]7;sDV:nhlhk9gs^isM5+TS_z>sek\|VybP;p]>$kkQm}^Mw~J-:-'9 vUz}]f$8O*
2022-03-15 16:08:54 UTC	13182	IN	Data Raw: 37 8c 94 92 ec d7 e8 d9 c6 db 69 33 35 b4 57 4f 14 b1 c2 4e d5 9b cb 3b 18 8e a0 1e 84 fd 2b b7 97 56 b0 f0 5e 8b a7 c3 15 a4 5a 86 b1 37 fa 60 69 08 31 c1 91 b5 37 00 7e f0 19 38 f5 af 45 f0 cf c2 cf 14 f8 97 c1 96 92 8b 2b ad 5c dd 9c 25 b5 b9 45 f2 62 53 c6 d5 c8 20 96 f4 18 23 bd 64 eb 3f b3 7f 88 2d 23 f3 5b c3 1a d5 b1 c6 72 d0 33 03 ea c1 80 3d 2b 9e 79 8e 19 cf d9 d4 92 56 7d ce aa 79 76 26 30 f6 94 a3 7b ae ab fe 1c f1 dd 53 52 bd d6 ee 45 c5 ed cb dc ca 4f 56 3e be 83 a0 15 72 d2 ce e6 e7 64 61 d9 ed 99 86 40 e0 2b 63 b8 f7 1d 0d 6b 45 e1 41 e1 9d 59 d3 5d b6 b9 92 03 26 d1 0c 44 46 ed dc 6e 27 95 fc b3 5e 85 aa e8 50 15 d2 6f 60 b2 b5 d0 a6 68 4c a2 dc 06 6c 46 7e e3 33 1e 0b 9f bd cf 6c 57 6d 5c 55 2a 6a 36 d9 f5 e8 71 52 c2 54 a9 27 cd ba dd Data Ascii: 7i35WON;+V^Z7`i17~8E+\%EbS #d?-#[r3=+yV}yv&0{SREOV>rda@+ckEAY]&DFn'^Po`hLlF~3lWm\U*j6qRT'
2022-03-15 16:08:54 UTC	13189	IN	Data Raw: 79 83 29 b7 d3 96 d8 ca 07 dd 2a aa 32 40 cf 6a fa cf c0 bf b2 af 8e ae 34 9b bd 4a 2b ed 3f c1 d7 53 e9 cb a5 59 43 7d 01 b8 b8 5b 56 90 34 92 48 a0 e1 18 8c 90 a3 92 48 c9 15 f4 57 c3 bf 82 fe 1b f8 7b be f1 21 93 5a d7 a7 40 b7 1a c6 ad b6 6b 82 3a 94 41 8d b1 a0 3d 15 00 1f 5a f4 02 dc e4 d7 95 3a 90 e5 8c 63 14 ad d3 a7 f5 ea 75 5e a5 db e6 7a f5 7b ff 00 c0 2b e9 36 b2 69 fa 5d 9d a4 b7 06 ee 58 20 8e 27 b8 64 0a 65 65 50 0b 90 09 00 9c 67 19 ab a1 aa 3d de 94 bb ab 98 2c 49 9c 71 4e 0d b6 a2 dd 46 ea 05 62 62 d8 e6 9b bb de a3 dd 41 34 0b 94 7e ea 42 fe 94 c2 d4 84 d4 b6 57 28 a4 fe 54 dd c6 9b ba 9a 5a a3 98 bb 0f 66 a6 97 a6 96 a8 d9 ab 36 ca 51 24 2f 4d dd 51 ef a6 ee ac 9c 8b 51 24 f3 29 a5 fd 2a 32 f9 a6 ef fc ab 17 23 45 12 4d d4 d2 d5 19 7a Data Ascii: y)2@j4J+?SYC}[V4HHW{!Z@k:A=Z:cu^z{+6i]X 'deePg=,IqNFbbA4~BW(TZf6Q$/MQQ$)2#EMz
2022-03-15 16:08:54 UTC	13205	IN	Data Raw: 38 42 4c ed c0 27 dc d7 4a a3 88 8b 94 a9 c9 25 e9 d8 e3 95 7c 34 94 63 52 2e 4f d7 bf fc 0b 1d 0d d7 c2 6b fb 04 8e 61 e6 4b 1e 37 3c 6c bb 5b 1e d9 e0 d6 8e 87 a1 4b aa e8 97 b3 da 5b 5b da 35 bb a4 71 33 03 9d e7 39 25 87 39 00 7e 78 ab 7e 17 d5 66 d0 6c 25 d6 fc 49 79 7d 23 c3 ba 2b 3b 6b 86 27 76 78 19 04 82 47 b6 3d eb 36 f7 e2 3d d7 87 b4 bb 33 a2 c9 14 57 57 73 c9 73 39 31 2c 91 60 80 14 2a 9e 41 1e f5 82 9e 2a a5 e0 ac da 6b 5d 97 76 6a a3 84 a7 69 bb a4 d3 ba eb e4 51 5f 85 1a ed c4 86 48 a4 b7 9d 89 c9 62 c4 72 79 3c 91 d6 a9 1f 04 de 68 f7 fe 5e ac 0d 9d b2 0d cd 2a fc c0 ae 79 0a 7d 6b a6 b5 f8 ef e2 b6 b5 c4 a3 4c 74 54 27 71 b2 55 3d 3a 92 3a d7 49 37 89 c6 a5 e1 79 2f 7c 4d 24 6f f6 98 54 5b da db c6 23 6d e4 76 07 bf 3d 39 e3 9a 9f 6d 8e Data Ascii: 8BL'J%\|4cR.OkaK7<l[K[[5q39%9~x~fl%Iy}#+;k'vxG=6=3WWss91,`Ak]vjiQ_Hbry<h^*y}kLtT'qU=::I7y/\|M$oT[#mv=9m
2022-03-15 16:08:54 UTC	13221	IN	Data Raw: 43 84 68 e9 77 25 c2 d9 ee 4f 31 22 93 32 33 9c e3 6a a8 1d 3d 49 35 5b 52 d7 57 55 74 17 26 e2 7f 29 16 30 23 23 6e 00 1d 16 a9 dd eb 1f 68 5b 38 52 dd 9c 40 a4 6e 95 b9 24 9c f4 1c 70 38 ad 2b 8d 2e de df 49 83 54 96 75 b6 96 40 5a 2b 68 c1 79 18 e7 04 9c f0 14 7a d5 68 ad cc 4e ae fc 86 a5 ff 00 86 66 f0 9d d6 9d a8 cf 24 51 06 64 78 e3 98 ee 62 0e 0e e2 a0 60 01 ee 45 61 ea 7a 97 fc 24 37 f7 37 d2 4f 72 48 72 89 95 c8 55 24 80 a0 67 80 6a 6b ed 7a d3 59 bc 91 e5 b0 9e 63 b5 51 65 33 f2 40 00 67 04 1f ca bd 1b e1 6f 81 b5 02 89 2a d9 62 dd 2f 52 6b d9 5d 93 e5 84 a1 c4 4a c7 38 73 9f ba 06 47 5e 2b 17 27 04 9b d6 47 4c 62 a6 dc 62 ed 13 a0 fd 99 ff 00 65 df 13 7c 76 d4 a7 5d 33 4c 8e 4d 3a c4 b9 be bc b9 61 12 43 26 dc c7 19 24 1c 33 76 c0 38 eb 8a fa Data Ascii: Chw%O1"23j=I5[RWUt&)0##nh[8R@n$p8+.ITu@Z+hyzhNf$Qdxb`Eaz$77OrHrU$gjkzYcQe3@go*b/Rk]J8sG^+'GLbbe\|v]3LM:aC&$3v8
2022-03-15 16:08:54 UTC	13229	IN	Data Raw: a2 32 f9 91 c6 d1 6f 45 60 3e 57 c8 e4 37 6c e4 7b d7 6d e0 6f 0c bf c4 1d 53 4a 91 27 b9 4d 89 e7 cd 1e 99 39 45 59 41 21 b0 a4 fd f6 5e 7f 51 9a ca 7b eb b1 71 de cb 76 52 f1 d5 97 f6 5d 8c 13 1d 20 e8 92 dd 83 34 b1 4a e4 84 2d c0 03 dc 74 2d dc d7 8b 6b 96 7f 69 bf 28 64 f3 59 18 2a e0 12 4b 9c e0 2f 3c 8f 7f 5a f6 cf 8a 12 43 7b aa 4f 1e 95 19 b9 58 80 56 96 e0 1c 3e c1 cc 47 20 7c c0 f5 38 03 3d eb c8 62 cd c4 91 ca b8 b7 90 b8 04 1c 05 db 9e bb 8f 4c 67 d7 15 d9 4a 4f 90 c2 b2 f7 ac 79 5e a3 63 3c 77 46 26 75 b6 95 18 2b 47 28 39 39 3c 01 80 72 73 d3 b5 3a 6f 0b d9 78 47 55 37 37 56 51 5c 34 96 ed be da ec 16 08 e7 8d e3 18 c1 f4 06 a6 f8 81 75 69 a1 78 9a da ea da ea 3b 92 4a cd e5 a9 f9 87 38 51 c7 07 d7 15 57 5d d6 1a f6 62 ce eb be 4f de 10 23 Data Ascii: 2oE`>W7l{moSJ'M9EYA!^Q{qvR] 4J-t-ki(dY*K/<ZC{OXV>G \|8=bLgJOy^c<wF&u+G(99<rs:oxGU77VQ\4uix;J8QW]bO#
2022-03-15 16:08:54 UTC	13245	IN	Data Raw: 1a 69 3f 07 fc 69 a6 7c 4f 1a 6d b4 b3 f8 92 6d 43 4e b5 d7 74 c6 ba d8 cd 1e df 35 50 a9 c6 7a 76 cd 6d 5b f8 ef e1 fd 8d e4 a9 6b e2 ff 00 09 db cb 11 0d 19 b0 f0 0d aa 39 53 ce e0 59 09 00 2f 7a f9 de 47 f0 fc db 2c c4 f6 f6 57 65 04 9f 64 99 9a 79 0a 7f 17 11 aa e7 1f 53 5d 0e 8b e1 fd 3f 53 bf b9 8b 4f b6 b9 d4 66 4d a2 58 ac 6d 18 ed 53 85 19 c0 07 1e e6 b0 af 5e 94 29 b9 4e 6a 2b bb 69 7d f7 3d 3a 38 67 cf 67 1b bd 3b e9 63 e8 dd 37 f6 80 f0 bf 84 74 b1 79 6d e3 7d 4b 5f 36 e3 ed 11 78 7e db 42 b5 d2 ed a7 72 46 49 2a 80 81 fc 44 e3 9c 75 ab 7e 23 fd b2 7c 3f 16 83 a7 c9 73 e1 bb b7 26 f3 cd 8e d1 a6 56 95 59 57 2b 2b 94 07 6a fc c4 0c 0a f9 cb 56 f0 7e ad e1 fb 39 27 b4 f0 9d fc 1e 53 ab 4d 36 a5 01 44 55 27 03 b8 2c 73 d0 7e 95 97 69 a2 ea b0 24 Data Ascii: i?i\|OmmCNt5Pzvm[k9SY/zG,WedyS]?SOfMXmS^)Nj+i}=:8gg;c7tym}K_6x~BrFI*Du~#\|?s&VYW++jV~9'SM6DU',s~i$
2022-03-15 16:08:54 UTC	13261	IN	Data Raw: 29 ca c6 1b 0d cf 4e 32 71 5c 1f 57 a9 cd b2 b3 bd fd 0f a2 86 69 5a 0b 4a d2 db bb ff 00 33 d3 7f 67 3f 10 1d 4b 5c d6 2d fe 2a c6 d6 d6 46 28 cd 8d cd ad 92 12 58 6e 32 07 38 38 00 00 7a 0c fb f4 af 71 d7 2d fe 06 5d 59 c9 05 ae b3 61 26 ae b0 34 d6 d1 c9 a7 ed dd 8e ed 98 79 f4 3d eb e4 dd 53 5e 87 49 f8 95 76 96 17 76 b2 b4 53 bc 70 dc ca cc b3 4b 11 8c aa bb 44 58 90 4a b1 c8 ea 3a d7 3f 0f 8e ef b4 fd 73 ed 70 47 6a f2 45 64 20 91 5a fb 80 1d 8b 38 24 92 54 03 df 23 39 ed 8a d6 30 8c 62 f9 61 d3 bf 52 e5 9c e3 1c d4 a3 88 96 8f bf 43 76 fb c4 ff 00 13 ad e1 fb 58 f0 47 87 6e 2d a4 77 8e 33 15 a4 8a 57 18 3f 74 30 c0 20 82 0d 5e f0 de b3 e2 df 18 7c 30 f1 65 fb 68 9a 4e 83 e2 3b 19 61 87 4d b4 b6 92 68 a5 bd 59 78 69 22 98 b9 00 a1 e7 18 3e 87 15 46 Data Ascii: )N2q\WiZJ3g?K\-*F(Xn288zq-]Ya&4y=S^IvvSpKDXJ:?spGjEd Z8$T#90baRCvXGn-w3W?t0 ^\|0ehN;aMhYxi">F
2022-03-15 16:08:54 UTC	13269	IN	Data Raw: ac 77 01 01 3b 40 04 af 41 cf 4c 9c d6 25 ad fc fa cd fc 70 41 6e c3 68 ca c2 a0 39 e3 a9 2d db f1 ae d8 56 72 57 92 b2 39 a7 05 6d 1e a7 2d ac 6e 96 e3 26 45 11 e4 17 93 b9 6f 6c d6 75 84 e0 6b 76 e0 3b 05 0d ce 39 3c 8f eb d2 bb c9 7e 1d 47 0b 5c 0b c9 7c c7 66 ca 2d bc 9f 2a 02 39 2c 48 e4 ff 00 b2 3f 3a e6 75 1f 0a 0b 2b f8 be c8 25 bd 67 fb 9e 54 44 93 db 27 1c 0e 6b d0 a7 5a 9c fd d4 ce 69 53 92 2e f8 7b 45 ba d5 75 0b 89 20 8a 33 0a 30 49 3c d9 55 46 4f 40 41 20 9f a8 af 7d b7 f8 3f e3 2d 7b 4d f0 ec ba 06 8c d7 3a 9d bd 83 09 25 f3 4c 49 05 b9 0d 8d e0 1f 9d 88 1b 80 1c 91 82 6b ce 7c 13 f0 eb fb 53 56 d2 e0 d4 e5 8e de 49 a6 48 24 58 9b 73 28 66 03 b6 49 3f 4a fb 3f c2 57 72 d8 fc 37 d6 5e 77 1e 5d f5 ea e6 62 42 e2 d9 41 50 98 24 1c ec 8d 32 a3 Data Ascii: w;@AL%pAnh9-VrW9m-n&Eolukv;9<~G\\|f-*9,H?:u+%gTD'kZiS.{Eu 30I<UFO@A }?-{M:%LIk\|SVIH$Xs(fI?J?Wr7^w]bBAP$2
2022-03-15 16:08:54 UTC	13285	IN	Data Raw: 8a 9c d5 88 ad 37 18 35 23 8b f0 67 c3 fb 4f 10 5c ef 9e d9 64 69 02 bc 51 a9 52 8a 80 f2 5f 9c 86 3e 86 bd c2 1f 06 68 9f d8 e2 c6 5b 91 25 84 90 85 8e d9 4e e7 ce 7e 66 20 60 60 0e c0 fb d7 87 f8 7f 55 97 c3 fa 90 bb b2 32 12 ac 43 00 41 62 a7 a9 2a 31 c1 fa e2 bd 9d 35 34 b9 b3 b2 b9 6b c8 88 0a 1d 9e 59 55 7c a6 27 04 60 73 93 f9 d7 76 22 fd 76 39 30 dc a9 3e e7 11 e2 9f 82 9a 4e 89 7e 35 44 b3 b3 bf d2 2e 62 31 2d a7 da 1a d4 41 21 18 de 5c 06 20 29 1c f6 39 af 35 f1 6f 83 ae f4 5b 69 6e e4 7b 78 23 ca c4 d6 a2 66 77 3b 94 30 20 92 77 71 d4 8e 9f 8d 7d 37 3c 96 b7 3e 1f 4f b4 4b 24 56 d0 5c 7e f0 db 0d cc 51 8f 20 65 4e 41 ef fc eb 47 c5 1e 0f d2 a5 f0 c6 a2 da 85 90 bb 5b 49 56 2b 6d 52 e3 6c 86 60 e3 2f b5 47 21 82 e3 2d 9e dd 2b 15 8a 95 36 af aa Data Ascii: 75#gO\diQR_>h[%N~f ``U2CAb*154kYU\|'`sv"v90>N~5D.b1-A!\ )95o[in{x#fw;0 wq}7<>OK$V\~Q eNAG[IV+mRl`/G!-+6
2022-03-15 16:08:54 UTC	13301	IN	Data Raw: eb f8 d6 7d d6 81 2c 4a 0a 5a 31 45 1b 81 90 95 2a 3d 48 3c e0 fa 7e 95 f2 91 cc a2 da b2 69 8e 55 21 6b a8 ea 70 c5 a2 b7 b6 8c c2 01 65 62 df 67 8c b6 e0 08 ea 32 31 f8 66 ac 9d 56 f6 fa c1 da 13 89 a2 e5 ad 8c 41 88 1f de 03 af d7 a8 ad d8 e7 b4 bb 47 df c1 8d 89 db b4 af 5e 06 38 e0 7e b5 72 cb 44 79 6e 03 c1 a7 99 01 1f f1 f2 22 e9 f8 fa 56 8f 33 57 d6 0e e8 c1 62 2e ed 6b 9c c7 f6 c2 df 43 1c 51 a4 76 52 8c e4 b4 68 cc c4 fd 30 48 f6 3d 2a c4 76 b3 5e bc 10 3e 9c 27 9f 61 65 b8 85 76 ee 04 74 e0 f2 47 5c 11 5d 4c ba 5b c3 86 1a 7d b8 94 72 19 a3 52 c3 b7 5c 67 34 d8 2c 2f 11 90 81 14 6a 39 0a ab 92 31 cf 18 ef fa d2 79 97 55 12 dd 5b f4 33 2d 2c 56 7b 77 8e 73 27 9d 1f 0c a2 56 0e 7d 09 03 1c 8f 6e 7e b5 35 cf 87 6e af f0 23 94 47 e5 9d c2 56 6d c5 Data Ascii: },JZ1E=H<~iU!kpebg21fVAG^8~rDyn"V3Wb.kCQvRh0H=v^>'aevtG\]L[}rR\g4,/j91yU[3-,V{ws'V}n~5n#GVm
2022-03-15 16:08:54 UTC	13309	IN	Data Raw: 5d 52 5b bf 2a 32 ba 8b 5c de 79 6a 19 dd a4 d9 0b c4 81 72 14 60 b1 27 80 c3 1c f2 1e 15 f0 6e 85 e3 4d 07 c4 5e 2e bb f8 6d ae 26 a9 77 aa 43 13 ea 32 eb 2c d3 de cd 26 59 9a 23 2d b1 65 55 ea d8 18 25 80 e3 b7 57 a3 fe d3 d6 37 72 4e 34 8d 77 4d 9c 43 fb a9 a3 b0 91 47 94 41 fb ac 11 46 d2 39 eb 55 fc 2d fb 5f 78 7e e3 c6 b7 3a 7f 89 74 cb 8d 2b 4d b7 92 44 b0 f1 03 6a 52 3f 9d 73 1a 06 60 d0 1f b9 19 0c db 5b 27 24 72 06 41 af 1a 38 4a 14 a8 ca 10 c3 a7 65 7d 7d 6f b6 ec ef a3 46 34 27 19 d5 ad cd 77 d3 fc fa 59 f5 fc 0c dd 72 f2 0f 81 fa 4f 87 b5 58 3c 41 2e 8f a7 ea 86 5b 1b a9 2f d2 4d 45 e1 b8 49 04 ca a1 10 20 24 e0 fc c7 07 a8 e7 35 e6 7a f7 ed 63 ad 78 96 d7 5b 6b cb 3d 3f 52 8a e5 d9 2e 16 e6 c2 e1 26 ba 8c fc a7 0c b3 01 ca 00 76 8e 3b 54 bf Data Ascii: ]R[*2\yjr`'nM^.m&wC2,&Y#-eU%W7rN4wMCGAF9U-_x~:t+MDjR?s`['$rA8Je}}oF4'wYrOX<A.[/MEI $5zcx[k=?R.&v;T
2022-03-15 16:08:54 UTC	13325	IN	Data Raw: 20 b9 2e f4 d3 7e 8b 6f c2 c2 74 e1 2f 79 c7 7d 7f cc e4 ad fe 11 f8 26 26 77 b3 f0 67 87 e0 92 57 25 da da d7 cb 2c 7a 92 48 00 93 9f 5c d4 91 7c 2d f0 84 12 47 31 f0 5e 8b 6f 76 bc 09 a3 80 6f f4 38 7c e4 64 71 d7 a7 1e d5 d2 34 53 cc a7 f7 ec eb 91 fb bd bc 75 ed 8f c0 f5 35 47 ec 37 73 34 e1 77 4a eb 8e 64 ce e2 0f 3d 38 cd 74 46 bd 55 7b 4d fd e6 3e c6 97 f2 2d 0c 55 f0 7e 81 a4 5d 5d dc d8 f8 5f 45 82 fa e5 81 9a 68 ed d0 48 e0 74 dc db 7e 62 3e b4 c7 f0 ce 85 70 c6 59 74 0d 2a 79 89 2a de 6d a4 20 1c 67 92 76 ff 00 fa eb 4a 5d 22 48 e4 4d d0 63 cc 00 96 c3 76 1e e7 8f c3 a5 44 9a 54 41 92 29 3c bd cc 46 d0 54 8d cb 9e 79 c8 ee 69 7b 49 b7 77 26 57 2c 52 b2 45 14 d2 34 88 d1 02 f8 73 43 45 3c 95 5b 58 f9 f4 ca 95 c1 c1 e4 71 c5 6c 2e b6 d1 a1 88 5b Data Ascii: .~ot/y}&&wgW%,zH\\|-G1^ovo8\|dq4Su5G7s4wJd=8tFU{M>-U~]]_EhHt~b>pYtym gvJ]"HMcvDTA)<FTyi{Iw&W,RE4sCE<[Xql.[
2022-03-15 16:08:54 UTC	13341	IN	Data Raw: ce 2e b4 6d 45 b2 73 90 43 06 e3 f2 ac 5e 16 b7 6f c5 15 f5 ca 4b af e0 ca 69 67 24 72 3c 24 ac 8d e6 10 04 6c 18 f3 e9 83 fa f3 40 b1 97 cb 4f de c2 23 f9 48 fd e0 c8 3c e0 1e 9f ad 67 c9 e2 dd 5a cd 9e 76 f0 06 81 2c b2 30 26 de fb 46 bb 8d 61 53 d5 55 83 06 23 d0 92 4d 6b 69 9f 15 b6 c8 9f 69 f8 4d a1 5e c4 87 39 b6 b2 bb 4d a7 1c 10 77 93 8f 5c 8a a5 84 af 74 9c 7f 14 4f d7 28 ef 7f c0 ab 96 18 47 da e4 03 85 8f 8e 73 ec 71 cd 02 ff 00 ce 9b 2d 17 98 e3 85 00 8c 01 fd de bc f3 5a da 87 c6 cf 0f 69 30 a3 5d fc 23 d2 d0 b9 06 49 a5 5b a8 23 65 cf cc 14 bb 64 7b 1c 7e 15 47 50 fd a1 bc 11 a7 3c b6 f6 ff 00 09 3c 3b aa 16 65 68 6e a0 d5 25 8e 0d 9c 6e 0f e6 28 7d f8 ce 30 31 9c 66 a9 e1 6b 2d a3 f9 7f 98 96 2e 8d f7 21 69 44 28 1a 45 54 c6 4f fa cc 95 cf Data Ascii: .mEsC^oKig$r<$l@O#H<gZv,0&FaSU#MkiiM^9Mw\tO(Gsq-Zi0]#I[#ed{~GP<<;ehn%n(}01fk-.!iD(ETO
2022-03-15 16:08:54 UTC	13348	IN	Data Raw: fd b2 f9 12 2d a0 12 09 89 a4 04 0c e0 6d 20 74 07 15 cd 6a bf b5 e7 80 7c 4e cf 6f 6d e1 2d 3f 4e b7 92 dd a3 6b ef dd 19 d4 9e 0e c0 91 90 18 76 27 f3 af 3e 4a b4 52 71 81 ac 9d 18 b7 27 3d ce 48 78 3e 3f 1e c2 fe 6e 8f 6f 06 aa d2 16 88 ee 54 b8 56 03 68 6d c2 40 cc c3 ae d1 db 9a d9 f8 35 f0 bf 54 f0 95 f6 a7 73 aa f8 b2 de 48 6e 01 92 16 8e 38 da 68 08 52 33 97 90 8c 01 d5 39 20 12 71 cd 70 1a 77 89 ee 64 bd bc d4 6c ae 65 f1 29 78 3c 92 f6 ff 00 7e 08 fe e9 66 24 16 ce d2 32 40 1c 83 c5 7a 6c bf 13 bc 2d e1 6f 07 c5 1a 78 a7 4c 8e 39 60 ff 00 4e dc a8 e4 48 98 2b f6 6c c6 59 9c 82 37 b6 55 4f 4c 9c 1c 63 7a d2 8b 84 15 fc 8c e9 d4 87 32 9c ba 1e a5 a5 69 1a 9e b5 e1 8b 7d 46 ef c4 1a 2d 87 d9 a1 65 96 4d 36 e2 26 59 63 01 82 bb 20 52 43 15 e5 97 19 Data Ascii: -m tj\|Nom-?Nkv'>JRq'=Hx>?noTVhm@5TsHn8hR39 qpwdle)x<~f$2@zl-oxL9`NH+lY7UOLcz2i}F-eM6&Yc RC
2022-03-15 16:08:54 UTC	13364	IN	Data Raw: dd bb f3 e9 c0 15 ce d9 f8 42 f2 c9 80 3a 3e ab 28 3e 85 98 7f 5a de b0 f0 35 cd cf cf ff 00 08 fd fc 43 d6 5c af eb 54 1b 9d 67 87 be 07 e9 c1 01 9b 5f d5 ae c0 19 fd e8 0c 3f f1 d3 49 ae fc 09 9e f1 ff 00 e2 5d aa 46 00 e0 7d a2 dd 8f f3 6a 82 cb c2 f7 f6 6a 44 76 18 18 ff 00 9f c0 0f e5 57 6d df fb 3e 5c 4b 13 47 27 4e 6f 9b 03 f2 a0 11 88 9f b3 fe bb 0f 5d 57 49 fa b5 be 3b ff 00 bd 4e 1f 08 67 b2 62 6e 75 5b 49 58 1e 45 ac 28 4f 1e 99 6a f4 7d 33 58 76 84 1f b6 5b 22 e3 a4 d7 d2 91 f9 66 b6 b4 fb d9 4c 80 45 a8 68 e0 fb f9 ef f9 52 dc 67 91 5b f8 3c 5b 38 22 5d 52 20 33 fb c8 ad e0 c7 f3 ad cd 3f c0 d0 5f a8 03 c4 77 f0 37 71 35 bc 20 ff 00 3a f4 bb 8b a8 36 e2 ef 5c d3 e0 1d fc bb 2b 96 1d 7e b5 77 4c d1 74 ed 41 4f d9 35 cd 26 47 3d 7c cd 1e 52 4f Data Ascii: B:>(>Z5C\Tg_?I]F}jjDvWm>\KG'No]WI;Ngbnu[IXE(Oj}3Xv["fLEhRg[<[8"]R 3?_w7q5 :6\+~wLtAO5&G=\|RO
2022-03-15 16:08:54 UTC	13380	IN	Data Raw: 9a d9 04 a2 41 70 84 64 09 5a 26 5c fa 82 47 eb 59 3e 20 86 6d 53 c1 b1 69 f6 16 f3 5d dc 48 f1 cd b4 ae 3e 45 20 9c d5 5d 56 eb 50 be d4 24 32 e9 57 50 49 a8 af 97 04 7e 5e 41 21 7f c2 bc 3c 43 6d f3 45 eb 7f f2 ff 00 83 f7 1e cd 38 c6 3e eb d8 ef 34 bd 07 c2 da 8d cc 56 b3 47 0d c5 b8 8c 92 d1 4a a6 53 8f f6 b3 91 f5 ac 5f 08 68 56 17 d1 ea 17 11 db cd 25 b7 9d 23 45 1d cc 8b 94 40 c5 54 15 23 1c 01 d7 bd 78 8d bf 86 b5 bd 2a e4 5a dd e9 d7 50 a2 cc c5 8e d3 8e 71 c7 15 e9 49 aa a5 9e 8e 91 47 33 41 72 17 68 8d ba e3 3c 70 6b 8f 1d 87 9d 38 a8 c2 7c d7 ea 5e 1a b4 66 ef 38 5a c7 a0 c1 a7 cb a5 dc e6 d1 26 8e 34 80 6e 11 ed 1b 72 73 9e 07 26 99 a8 df 5d df 30 b3 b8 96 6b 98 27 db be 30 17 7f 07 20 82 30 78 c7 38 22 ae f8 63 4b 8b c5 9e 54 c9 77 16 9c 91 Data Ascii: ApdZ&\GY> mSi]H>E ]VP$2WPI~^A!<CmE8>4VGJS_hV%#E@T#x*ZPqIG3Arh<pk8\|^f8Z&4nrs&]0k'0 0x8"cKTw
2022-03-15 16:08:54 UTC	13388	IN	Data Raw: 9a b7 97 ea 73 4a 84 25 ba bf cc f3 cb 7f d8 6f 49 8e c2 49 75 cd 33 c4 56 f2 ab 30 c5 85 dd bd d2 94 3e 80 aa b6 3d 88 cd 4b ff 00 0c 1d e0 18 af 0b c7 79 e2 48 54 a2 ba 92 30 54 0e 78 6d a0 03 ec 41 af a4 fc 3f e0 1f 1a e8 76 3e 44 fe 39 93 57 95 54 6d 32 e9 c0 29 39 ce dc 89 09 c7 63 c6 6b 72 1d 2f c6 0f a7 db b5 de a5 63 67 75 90 18 45 0e f8 c9 cf 18 04 0c 7d 6a 3d f8 bb c2 a5 97 f5 dc da 9d 1a 0d 7b f4 d5 fc ff 00 e0 1f 2d c5 fb 17 f8 46 d6 4f b4 69 be 28 f1 26 8d 1c 8c ad 91 75 19 e9 d5 c6 76 ed cf 71 da 92 e7 f6 15 f0 66 a9 6a 56 d3 54 d6 a5 78 e5 33 7c d1 23 a3 bb 0c 12 d8 5c 1c f5 3c f5 af aa 35 cb 5d 62 d6 d6 54 6b cd 2e d8 ed 38 6b 9b 52 cb b8 ff 00 78 64 71 f4 39 af 28 f1 94 fe 38 b6 f3 27 96 cf c1 b7 f6 c5 76 db 9b 43 2a c8 e3 38 fe f0 23 27 Data Ascii: sJ%oIIu3V0>=KyHT0TxmA?v>D9WTm2)9ckr/cguE}j={-FOi(&uvqfjVTx3\|#\<5]bTk.8kRxdq9(8'vC*8#'
2022-03-15 16:08:54 UTC	13404	IN	Data Raw: c9 eb 69 19 fb 18 ef ca 71 7a cf 85 75 d9 2f e4 82 e8 79 b3 20 67 2d 0c a5 7a f2 7a 01 59 27 c0 0b 35 bc 6e f7 32 a4 ea 7f d5 cd f3 a9 c9 af 4c b7 f0 e6 a5 35 f2 4f f6 c9 64 32 28 27 a9 24 7a 67 d2 ba 66 f8 75 33 bc 12 01 b4 4a d8 39 52 7f 1a 25 98 4e 3a dc 8f ab 27 a2 89 e1 fa 97 c3 8d 4e 2d 92 45 1c 52 80 01 02 21 8c 54 76 fe 1f d6 74 c6 54 12 cd 6d 31 27 04 67 00 7a 70 7b d7 b6 0d 32 4b fb b9 6d dc 8d b9 d8 76 82 3a 70 2b b0 7f 87 51 7d 96 20 9e 56 36 8c 86 18 20 e3 d6 ad 63 e7 61 ac 34 2e ec 7c d9 07 83 fc 42 d7 f1 ce 03 5d a9 39 2d 1b e3 8e e3 db eb 52 eb ba 17 89 42 4a e6 da ee 4b 5d db b6 c9 39 91 40 1e 83 df bd 7d 0d 75 e1 e9 ec 6c 63 86 0b 78 de 55 00 0f 2f 8e f8 19 cd 53 7d 1e fa c9 77 c8 0c 87 3f bc 8f 39 18 eb 8f f2 29 7f 68 4a f7 69 16 b0 91 Data Ascii: iqzu/y g-zzY'5n2L5Od2('$zgfu3J9R%N:'N-ER!TvtTm1'gzp{2Kmv:p+Q} V6 ca4.\|B]9-RBJK]9@}ulcxU/S}w?9)hJi
2022-03-15 16:08:54 UTC	13420	IN	Data Raw: ec cc e0 75 31 60 ff 00 3a b5 a7 fe f9 64 90 23 40 37 8e 24 c0 3f a5 4d e1 9d 46 da 28 70 fb 86 32 32 be e2 a4 6f 2e 69 1c 86 38 24 e0 60 76 fc 6b 86 a3 b4 9c 5a b1 d9 0b 38 a6 99 5e e6 39 1d f1 e7 c6 9d 46 18 f1 f8 66 ab 43 66 d2 6f 47 2a 3a f3 91 cf e5 ed 5a 6c 60 d8 44 a1 4a ed 39 dd e9 8e d5 5e de 3b 26 57 f9 94 6e 01 79 eb 43 ad cb 1b 45 14 d2 93 3c bb 54 4b 88 f5 69 62 57 93 68 24 2f 1c 7e 15 d4 da 4d 34 b6 b0 89 61 62 15 70 18 a0 27 f4 ae 3d 58 8f 10 de c4 6e e6 44 47 6d b1 ee c8 fc 2b b3 d2 8c 92 28 47 95 9d 55 40 c9 ed f8 d7 d0 e2 95 a9 c5 9e 4d 2d 66 c4 5b e6 b7 be 89 58 34 65 5b 20 95 3c 71 d6 b7 ad 27 32 79 81 9c 92 4e 72 7a b7 e7 8a e7 44 d2 36 ad b1 37 15 4c 15 c1 3c 1f c6 ba 48 18 c8 e5 44 92 96 6e 72 71 5e 3e 25 2e 55 a6 a7 6d 3d da 66 16 Data Ascii: u1`:d#@7$?MF(p22o.i8$`vkZ8^9FfCfoG*:Zl`DJ9^;&WnyCE<TKibWh$/~M4abp'=XnDGm+(GU@M-f[X4e[ <q'2yNrzD67L<HDnrq^>%.Um=f
2022-03-15 16:08:54 UTC	13428	IN	Data Raw: d4 5d 82 51 49 5c a0 8c 7f b2 bf d5 02 42 80 3c b3 db da a8 47 f2 5b e4 a4 c1 8e 71 9c 1c 7d 38 ab 09 65 6f 24 2a 82 59 23 03 dc 0c 7e 55 5e ee c6 4b 46 f9 2e 5b 6e 3e f0 70 49 cf b0 e6 bd 28 72 dd ab 99 dd b5 a1 0d c4 93 43 72 1b 12 15 5e 30 f1 64 e7 ea 2b 62 ca 56 b8 86 20 64 f9 83 1c 0e 54 e3 e8 6b 31 20 ba 65 c8 9d 89 3c 12 18 e4 8f 53 91 8a d5 b1 67 da 8a 41 21 4e 0e ee b9 f6 35 55 2d ca 2b d9 8f 96 cd 24 5d d2 a0 3c 91 95 24 1f d3 9f ce 92 ea c6 28 6c 7c e2 f2 f9 78 c0 fd e1 3c 9e 3a f6 ad 7d 3e 58 e3 70 62 8f cd 24 f4 c7 3f 95 45 e2 49 d2 48 60 88 06 46 67 05 86 30 31 ef 5e 72 a9 29 4d 42 c6 ea 36 4e 47 3f a9 5b a8 b7 2a f2 93 b9 40 00 92 4f 4e 95 83 a7 69 70 5d dc 12 72 15 4f 3f 37 7a d4 f1 21 66 40 52 7c 76 27 8c 0f cf bd 51 f0 e7 cb e6 3a de 47 Data Ascii: ]QI\B<G[q}8eo$Y#~U^KF.[n>pI(rCr^0d+bV dTk1 e<SgA!N5U-+$]<$(l\|x<:}>Xpb$?EIH`Fg01^r)MB6NG?[@ONip]rO?7z!f@R\|v'Q:G
2022-03-15 16:08:54 UTC	13444	IN	Data Raw: 6f 19 fc 81 a5 56 1d f9 03 bd 37 47 4d 47 cc 5d 17 19 6c 1e fc 52 34 98 e3 91 55 d5 83 70 a7 9f 7a 0c 4c 58 91 de b2 e5 51 76 0e 72 c7 da 14 36 01 27 14 1b b0 bc 67 27 b5 55 78 98 2f 18 3f d6 a3 c1 5e c7 8f 5a d1 53 8b d4 ae 72 e2 df 32 f3 80 69 eb 7d dd 85 50 04 b2 f4 27 9a 3c d6 1c 6c 3e 9c 8a 1d 18 d8 39 cd 05 bd 42 d8 dd f9 d4 a2 64 6e b8 fc 0d 65 09 be 6e 7b 52 ac 84 70 08 07 b7 e1 59 ba 09 2d 07 cc 68 c8 49 fb ac 39 a0 61 54 83 b4 f6 aa 09 36 de 70 0d 49 f6 a0 14 83 d7 3d 6a 7d 93 b5 8a 52 45 ed aa 17 03 fe fa fa d3 36 e7 a9 19 1d 2a af da 32 dd 41 3d fb 7f 2a 68 98 96 c8 ac fd 9b 5b 8e e5 a3 19 e7 27 93 4d 0b 86 ce 78 a6 ac bf 2f 3f 37 4f f2 69 e0 87 c7 03 14 6a b7 0e 61 c3 e7 5c 31 6f 61 8a 38 db 93 c7 f8 53 72 87 20 8f ff 00 5d 39 63 8d b3 8e 47 Data Ascii: oV7GMG]lR4UpzLXQvr6'g'Ux/?^ZSr2i}P'<l>9Bdnen{RpY-hI9aT6pI=j}RE62A=h['Mx/?7Oija\1oa8Sr ]9cG
2022-03-15 16:08:54 UTC	13460	IN	Data Raw: e5 a4 93 0a 5b 39 f4 a7 ac c4 f7 aa e9 21 1f 4e 94 ef 33 e5 c9 fc b3 47 90 d4 8b 0b 30 2d 8f cf fc ff 00 2a 91 65 3d fb 7b d5 55 75 2a 30 98 1f 5e d4 06 03 24 f2 07 f5 a9 b1 5c e5 e6 9b 63 72 7f 1a 7a 4c 78 c9 62 a0 e0 83 fc ea a0 64 66 00 72 69 0b ee e3 a7 b9 ed 50 fb 15 cf 72 e8 98 6e c6 7a 74 fe a6 85 99 4e 06 33 d6 a9 8e 79 3c fb d3 92 4c 37 1d ff 00 ce 28 8c 4a e6 2e f9 83 6f 23 af bd 3b cd 2a b8 1d 2a 90 b8 3b 18 b6 31 4a 24 3b 72 4f 38 e3 8a 6e 05 29 97 44 bb 97 07 a7 a0 a7 29 ca 80 5b 03 d8 e3 35 49 24 c2 f1 d3 8e d4 f5 90 d4 49 3b 17 cc 5a 20 77 3f 5c 73 4f 00 0e 33 90 6a 9e f0 17 03 ee e7 35 20 95 55 7a e7 1f 85 35 b5 c6 a4 5b 2c 47 a0 14 79 99 63 9e 7e bf ce aa f9 99 5c 0e 9d 8d 39 5b e5 c1 fc a8 6a eb 41 f3 6a 58 59 40 5e dc d4 89 3e 17 04 f4 Data Ascii: [9!N3G0-e={Uu0^$\crzLxbdfriPrnztN3y<L7(J.o#;**;1J$;rO8n)D)[5I$I;Z w?\sO3j5 Uz5[,Gyc~\9[jAjXY@^>
2022-03-15 16:08:54 UTC	13468	IN	Data Raw: 8c e3 35 21 b8 23 82 79 e6 b2 21 69 8a 64 26 47 73 9c 55 98 99 97 96 e7 1d 7f fd 75 0e 3d 8a e6 d3 52 f9 9b 18 24 ef 3d 36 e6 93 ce 1b 94 e0 66 b3 c4 fb db 05 09 38 f5 fe 55 23 4d b7 00 72 4f 4c 0e 79 a1 46 da 03 a8 ba 17 19 95 b9 23 8e d9 34 7d ad 02 e1 48 ec 39 aa e9 37 cb 91 d0 fa d2 29 40 ff 00 32 61 ba f0 28 70 ee 0a 56 d4 ba b3 7c b9 c8 00 8e 30 6a 36 9d b7 0e 7e a4 7b 55 7f 30 6e 18 38 5f 41 49 e7 2f 23 be 3f 9d 67 ec c7 2a 8c ba b3 02 a0 f3 f8 fb d1 28 57 52 0e 47 b8 f5 aa ab 28 5e 0e 4e 78 eb 46 fe a4 cb 9f 63 f5 a4 a2 38 cc 94 c0 a3 00 48 c1 4e 7a d2 f9 6e 8a 44 52 e3 f0 cd 57 69 17 9c 9f cf ad 33 2d 17 cc a4 f3 ea 7a 7e 75 4a 3c c5 73 ea 5d 06 52 a7 74 91 95 fa 52 c4 01 60 0e 08 eb c1 ed 59 93 dd 3c 7f 32 be c3 df 3d a9 8b 7c e5 7e fb 13 8e 33 Data Ascii: 5!#y!id&GsUu=R$=6f8U#MrOLyF#4}H97)@2a(pV\|0j6~{U0n8_AI/#?g*(WRG(^NxFc8HNznDRWi3-z~uJ<s]RtR`Y<2=\|~3
2022-03-15 16:08:54 UTC	13484	IN	Data Raw: e4 de a6 ea 6a 11 f9 9b 43 1c 91 d4 1a b9 77 a8 18 6d 5e 41 87 50 33 cb 0c fe b5 e3 31 78 d0 cd a9 1c 95 c0 3c 0d d5 67 c5 1e 39 7b 7d 2d c1 23 68 19 c0 39 ed d6 b9 a7 57 96 0e 47 4c 69 ae 6b 6c 6e 5d 78 a8 49 aa 79 61 86 73 ea 3f a5 74 17 5e 27 48 2c 03 09 30 d8 e3 e6 e0 7e 75 f2 f5 a7 c4 58 64 d6 18 12 59 b7 63 00 77 ae b7 59 f1 f2 3d 8c 61 64 60 71 d3 a1 15 cd 1a d6 8d d9 ac a3 ae 9d 0f 7e d1 7c 5c cb 0f 27 2a 39 dc 31 cf e7 58 1f 10 bc 6e b6 fa 6b 94 05 0f 3c a9 07 f4 af 2a d1 7c 6c 8b 6a 83 ed 60 1c 77 e2 b9 2f 89 3e 32 6b 8b 62 89 20 f9 8f 55 19 1f a5 65 39 47 49 47 72 e9 ca ca ed 9d 9e 91 e3 86 6b 69 dc bc 83 19 e3 35 e0 9e 36 f1 b4 f2 f8 a9 ce f2 14 39 c1 6e 41 e6 b5 2c 35 f9 6d f4 99 40 79 24 38 24 05 38 cf d2 bc 9f 58 92 7b fd 51 e5 79 64 2d 9f Data Ascii: jCwm^AP31x<g9{}-#h9WGLikln]xIyas?t^'H,0~uXdYcwY=ad`q~\|\'91Xnk<\|lj`w/>2kb Ue9GIGrki569nA,5m@y$8$8X{Qyd-
2022-03-15 16:08:54 UTC	13500	IN	Data Raw: 54 82 36 6e 53 fb c6 23 1c 7b d5 18 a3 bb b7 b8 c4 53 ac 8b c6 41 53 82 3e b5 ad 65 aa 12 b8 68 8f cd c9 1c 37 e5 57 20 9d 64 50 92 db 94 0c 48 24 91 c8 f4 ae 7b b8 df 9a 20 bc 8c 0b ed 2d ae 9c 30 48 9e 42 0e 7f ce 29 d1 69 ed 6c 81 51 00 03 83 cd 75 72 d8 a4 30 b8 89 08 04 11 81 d3 f3 ae 76 ee de fb 82 89 90 08 3c 77 a9 a7 51 cf 4e 83 b5 b5 64 43 4f 68 d5 1d 64 85 f7 82 e0 e4 71 ec 78 c8 a6 ef cb ac 4f 17 94 ec 32 4f 50 4f d6 99 fd a5 73 1c 25 1a 0d e3 d7 6e ec 52 db cf 2c fb 19 a1 67 5f f6 87 02 b6 e5 97 da 1e 82 dc a1 b4 b5 32 3c 64 a0 e3 2b d3 3f 9e 69 da 5c c2 f6 19 19 63 f3 b8 ff 00 56 a0 96 e3 b9 c7 41 4d bd 87 cf e3 e6 dc 38 c0 24 1a d2 d0 ad be ce bb 8e 63 3d 1b 6b 64 9f ae 2b 29 b5 cb e6 0f c8 22 61 63 08 69 92 60 3e f6 00 e2 b6 ed 34 bb 4b f8 Data Ascii: T6nS#{SAS>eh7W dPH${ -0HB)ilQur0v<wQNdCOhdqxO2OPOs%nR,g_2<d+?i\cVAM8$c=kd+)"aci`>4K
2022-03-15 16:08:54 UTC	13507	IN	Data Raw: 2a 68 1b b9 61 e4 cb 02 49 fa d3 77 0d d8 39 c1 eb 55 9a f1 9d 42 1f 4a 45 98 6e 19 3e 94 d0 f6 2f 47 20 eb 8e 3a 51 cb b0 27 77 1d aa ba b7 a1 fa 64 d2 89 b1 d4 f4 e7 34 87 77 d0 be b7 00 67 73 81 8c 67 15 04 d7 5b d9 c6 73 cf 15 9c f2 82 d9 1f 77 3d 2a 37 9c 07 f9 7f 9e 68 51 1f 32 72 d4 d8 87 2e 80 13 d6 ac 28 23 96 1d b1 58 f6 fa 9a a6 37 f4 19 c5 5d 4b f1 2a f1 86 ee 6a 5a 63 97 91 65 58 76 eb eb fe 35 60 c9 94 db 90 4f fb 55 44 ca 03 2e 3a f2 69 63 9b 73 73 f5 a8 7a 8b 98 bd 1c e5 72 38 3e f8 e9 51 79 de 6f 27 a0 ef 55 de e7 6a 39 03 19 ee 6a 14 99 bf 0c 50 bc 84 e6 5b 95 d4 23 82 d9 1e df d6 a2 88 ab 2e 71 c1 a8 0f dc c6 3f c9 a2 22 ca a4 1c 11 e8 3a d5 ad 87 cd a9 64 48 dc 32 8c 0c 63 35 3f da 77 a0 19 d8 47 02 b3 45 d0 df 82 7e 5f 6a 78 95 4e 49 Data Ascii: haIw9UBJEn>/G :Q'wd4wgsg[sw=7hQ2r.(#X7]K*jZceXv5`OUD.:icsszr8>Qyo'Uj9jP[#.q?":dH2c5?wGE~_jxNI
2022-03-15 16:08:54 UTC	13523	IN	Data Raw: e6 6e e5 0e 7a f3 da aa 44 c2 7f 90 f7 3c 54 c2 31 16 54 9c 63 a7 3e 94 ae 3b bd 89 21 dd 23 80 48 dc 78 1d b9 35 a6 da 3d ca a0 60 f1 10 c3 95 32 0c f1 59 41 d7 77 04 91 e9 4b 31 2a a8 40 fc ea 5d de c5 46 d7 d4 ad 7f fb dd f0 3e 50 a9 c6 41 e7 f0 35 55 95 57 e6 32 94 c7 5c 9c 9f a5 5a 9f 6c c3 6b 61 47 b5 56 68 d5 d4 87 fa e3 a7 e5 5b 2b 59 26 29 49 6e 2a 4c 1d 33 18 ce de bd aa bd c5 af 9e a1 a4 c0 2b 90 31 f2 9f 7a 9a d6 c8 46 e5 fc c6 70 4f f1 76 ab 17 81 76 3b 93 92 07 34 dd af a0 25 a1 46 2c db 20 20 e5 4e 06 49 e4 66 ac cc 62 9d 1e 31 22 b7 7e 99 39 ac a2 fe 72 9d b2 1d 9c f6 e7 a5 47 67 3b ed 78 90 80 e8 32 33 de a9 d1 4f 53 2f 69 d8 b4 b6 ca 93 65 4b 14 e9 d2 a3 28 b2 a3 a1 00 32 f4 93 bf e5 56 ad ee 56 75 05 99 43 77 52 2a b4 ca 23 b9 d8 21 ce Data Ascii: nzD<T1Tc>;!#Hx5=`2YAwK1@]F>PA5UW2\ZlkaGVh[+Y&)InL3+1zFpOvv;4%F, NIfb1"~9rGg;x23OS/ieK(2VVuCwR*#!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.3	49967	80.67.82.211	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:08:54 UTC	13537	OUT	GET /cms/api/am/imageFileData/RE4Fu2J?ver=29af HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: Keep-Alive
2022-03-15 16:08:54 UTC	13538	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE4Fu2J?ver=29af Last-Modified: Sun, 13 Mar 2022 20:33:42 GMT Access-Control-Allow-Origin: * X-Source-Length: 440991 X-Datacenter: northeu X-ActivityId: d50a2711-b712-4144-ac90-e29a935a5ecd Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Length: 440991 Cache-Control: public, max-age=275080 Expires: Fri, 18 Mar 2022 20:33:34 GMT Date: Tue, 15 Mar 2022 16:08:54 GMT Connection: close
2022-03-15 16:08:54 UTC	13538	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 07 80 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC8"}!1AQa"q2
2022-03-15 16:08:54 UTC	13554	IN	Data Raw: 74 ea 2a 42 84 73 f9 50 53 a7 1c 03 f9 53 11 11 5f 5e c2 82 06 e0 7e f7 6f d2 9e be dd 3b 52 a0 3b 7a 7d 6a ae 21 b1 8c 63 3e b9 f5 a5 c7 41 e9 c9 c7 6f 5a 7a af e4 28 31 f7 ec 29 0a c3 1c 65 b0 3a 54 7c ee c7 e0 6a 75 4e 9e b8 e2 83 16 72 4f e9 c5 3b 93 62 24 01 b8 1c 11 f5 a0 8f 5f ca a5 54 01 71 d0 1e 82 9d b7 b8 fa 51 71 58 85 47 24 7d 69 c1 48 e0 02 0f 6a 71 41 c9 c7 e1 ed 4f 0a 3a 1e 47 d3 da 8b 89 22 16 4d bc 7d 29 42 f7 f5 eb 52 b2 e7 a9 e6 80 09 6c 67 93 45 c2 c4 3b 7a 11 d7 bd 0c 31 81 f8 54 87 e5 5e 78 e6 80 a4 f2 32 7d 29 93 62 25 03 69 cf d0 1a 93 18 6f ad 00 7c c4 71 fe 4d 29 19 5e 38 f7 a6 21 a4 9d bf e7 34 b8 23 81 9a 76 dc 74 f6 a1 90 6d c0 fc a9 0a d7 0d a7 6e 3f ad 2e 3e 61 8e d4 05 1d 33 c7 02 9c bf 77 de 82 84 6f cb 1c d3 76 1d c7 de Data Ascii: t*BsPSS_^~o;R;z}j!c>AoZz(1)e:T\|juNrO;b$_TqQqXG$}iHjqAO:G"M})BRlgE;z1T^x2})b%io\|qM)^8!4#vtmn?.>a3wov
2022-03-15 16:08:54 UTC	13570	IN	Data Raw: 81 0f 0d 9e 94 e0 7f 43 51 67 d3 db 1f 8f bd 3b 96 e7 3d e8 b8 34 48 30 38 39 a5 c8 1c fe 58 ef 51 06 2a c4 f4 cd 2e f2 38 c6 78 38 1e d4 c2 c4 84 e3 ad 2a b7 a1 ff 00 eb 54 60 9d bd 73 c5 28 ea bf 4a 49 85 87 ee c2 e0 75 14 a0 e7 fb a6 9a 3d f9 1d ff 00 1a 5c e1 bd 87 43 4c 07 6e c7 07 fc 9a 17 2b 4d db 9c 8f a5 00 fa f1 eb 47 41 75 1f 9e bd 7d a9 54 e7 ad 37 71 a3 76 7f 0e 95 3b 15 b9 23 1c 73 fa d0 39 5c 67 ad 30 1f 9b dc 52 e4 1e bd e8 0b 12 06 cf 5e bd a9 c0 e7 f8 70 6a 3c ee 5c f7 a5 cf 60 7d a9 dc 39 49 47 af 5e 7a 52 e7 a0 e9 9f 5a 89 4e 78 14 be e3 a7 39 26 9d c5 ca 4b 9c f5 e6 94 1f 5f f3 8a 8c 70 bc f6 a7 7d 7a 52 b8 ac 4a 1b e5 cf 4a 37 77 a6 02 4f d6 94 1f f3 da 9e e4 0f c8 db ed 4b b8 72 0f 5f ad 46 1b fc f7 a3 77 ad 50 89 4f 1d 69 7c c1 d0 Data Ascii: CQg;=4H089XQ.8x8T`s(JIu=\CLn+MGAu}T7qv;#s9\g0R^pj<\`}9IG^zRZNx9&K_p}zRJJ7wOKr_FwPOi\|
2022-03-15 16:08:54 UTC	13571	IN	Data Raw: a9 b9 fc e9 77 7e 74 0a c2 fa d2 51 91 40 3d 85 17 0b 05 3b 9a 6d 28 3f 35 3b 8a c2 fd da 37 52 64 d2 83 4e e2 b0 6e a3 dc d1 9c 71 47 34 ae 16 17 a7 14 0e 29 38 db cd 19 14 5c 2c 2d 14 9b bd 28 26 9d c5 61 de e6 8e 7f 03 49 d2 8a 2e 16 0a 5c 9a 4a 28 b8 ac 28 34 74 e6 9b ec 28 fe 2a 2e 31 69 72 7a 52 51 4c 56 1c 4e ea 4d de b4 d0 69 73 9a 43 e5 14 93 49 9e f4 67 b5 01 a8 b8 f9 45 cf 71 46 ea 32 29 bc 51 70 b0 ec fa 51 cd 21 34 99 14 5c 7c a3 bd c5 03 d6 93 3d a8 cf 7a 57 0b 05 2e 73 c5 25 14 ee 3b 06 33 4b 8f ce 9b 91 4b bb de a6 e3 b0 be e7 ad 25 04 fa d1 9c d3 b8 0a b4 6e a3 26 92 a6 e0 2e 7d 29 33 8a 4d d4 b4 8a 0a 5c 9a 4a 33 de 80 17 26 8c e6 92 8a 02 c2 83 4a 39 a6 d2 e4 d3 21 8e a2 9b ba 8a 2e 4d 8f 9f 97 25 73 ef df bf e3 4e c1 1f 9f 38 c5 30 67 Data Ascii: w~tQ@=;m(?5;7RdNnqG4)8\,-(&aI.\J((4t(*.1irzRQLVNMisCIgEqF2)QpQ!4\\|=zW.s%;3KK%n&.})3M\J3&J9!.M%sN80g
2022-03-15 16:08:54 UTC	13587	IN	Data Raw: 15 9f 54 98 63 04 f9 98 29 11 f5 d8 0b 67 f8 c5 53 8b 8b e5 bf f9 9d 1c dc da a5 7f c9 7c fb 93 7c 52 f8 77 1f 83 fe 02 ea 36 17 d2 19 ee 2c b5 04 b9 31 46 e2 57 0c eb 85 18 38 e4 e3 8c e0 63 f3 af 1a b3 f1 f7 8a fe 25 a5 a5 87 85 b4 c9 3c 05 a5 dd a4 70 36 ad 0b 19 b5 39 d4 1f bb e7 ed 09 02 91 da 35 24 ff 00 7c 57 af f8 c7 e0 fe 91 f0 57 e0 2f 8c e3 8a fe 5b 99 b5 1b bb 5b bb fd 43 52 b8 df 2d c4 a2 40 bb 99 9d 89 2d b4 f4 c9 3c 71 9e 95 c6 f8 77 f6 8e f8 7d f0 9f e1 fe 95 a6 a5 ad c7 8b 3c 4d 65 1b 33 da e9 68 ab 0c 12 13 c9 9e e5 b1 1a 60 63 3c b1 f6 e2 b1 9f 24 5f 2a df ce c2 a7 37 2b b9 6d e4 7b 6f c2 9f 84 5a 3f c3 16 b7 7d 23 46 12 ea 44 ef b9 d4 2e 49 6b 89 e4 2a 46 f6 90 e4 f3 92 0f 7a 2b f3 e3 e3 b7 fc 14 1b c6 3e 2d 6b 8d 3e c3 59 83 49 d3 df Data Ascii: Tc)gS\|\|Rw6,1FW8c%<p695$\|WW/[[CR-@-<qw}<Me3h`c<$_7+m{oZ?}#FD.IkFz+>-k>YI
2022-03-15 16:08:54 UTC	13603	IN	Data Raw: b2 6a 1a 6d b1 5d 2d 24 11 32 88 56 53 fe b2 52 09 39 e7 21 4f 26 bd 43 c0 ff 00 b3 c6 85 17 86 fc 3f e3 8f 8b 3e 26 b8 f1 5f 93 a7 db c9 65 16 b7 2f 95 a7 d8 42 63 0d 1c 4b 1f f1 b0 52 38 03 93 d8 d7 37 fb 44 7c 42 f0 04 7f 0f 34 af 04 78 2e de cd 74 9d 2f 52 5b b7 b9 b7 8f cb b2 56 48 dd 76 ae 79 95 89 6e 5c e7 a7 53 5f 35 78 eb f6 8f 9b 53 fb 1b 4d 73 73 e2 4d 46 ca 35 86 db ed 6c 5a 08 51 57 0a 16 3e 00 c2 8c 74 1c 7a f6 b8 46 ad 7b 46 8a bd ba bf 4d fa 69 d1 6a bb dd 9c 55 2b 53 83 f7 fd 2d f3 7b f9 f5 db ca c7 d4 1f b4 17 c6 ed 0b c6 de 0f 8b c2 be 1c b4 30 e9 b6 37 d0 dd 36 ab 74 16 0b 68 c4 68 db 52 38 ba 85 3b ba 90 3d 85 7c bd e3 4f da 2a 3b a4 b5 8b 54 d5 2f bc 59 71 65 0f 91 6f 0c f3 14 b6 81 54 61 02 0d bd 80 e4 81 c8 ef 5e 6f a9 d8 f8 b7 c6 Data Ascii: jm]-$2VSR9!O&C?>&_e/BcKR87D\|B4x.t/R[VHvyn\S_5xSMssMF5lZQW>tzF{FMijU+S-{076thhR8;=\|O*;T/YqeoTa^o
2022-03-15 16:08:54 UTC	13611	IN	Data Raw: ad c7 8c 2e ef ef c8 b5 93 ec 90 20 dc b2 47 12 a9 dc 3d 40 00 6d f6 c7 f2 ad 6f 09 68 3a ff 00 8a a1 96 57 37 5a 83 97 09 e5 b4 a5 87 27 0a 01 27 03 27 9f a7 d2 8b 69 f4 7b 6d 41 25 d0 4f 9f 6b 9f 2c dd 6a 16 6b 19 60 57 27 74 6c ce a0 0f 51 8c e6 ab 5f 78 ea fb 49 fb 5d a6 95 77 2d b6 98 4a a1 58 4b 46 1d 88 c3 36 54 83 83 ce 3b 60 74 a5 24 da e5 a6 be f2 63 25 16 a5 51 df d0 e9 b5 2f 85 37 da 04 9a ab 6a 77 7a 3e 85 1c 91 aa 22 4d a9 c0 6e 0a 05 cb 13 18 7d dc f5 e3 92 78 c7 35 cc 49 6d e1 2d 26 cc 86 bb be d4 3f 74 1a da fe 15 58 0b b8 20 ed f2 d8 12 00 39 07 e6 19 e4 fb 56 7d af 87 4d fd a7 9e 96 52 bc ce f8 da b2 13 db be 41 3f e7 35 d0 ea 3f 06 75 5d 2f 47 b7 d4 b5 53 6f a7 43 2b 0d 96 e6 e2 39 9d be 5c 81 84 63 82 7b e7 18 ee 2a 55 96 93 9f f5 f8 Data Ascii: . G=@moh:W7Z'''i{mA%Ok,jk`W'tlQ_xI]w-JXKF6T;`t$c%Q/7jwz>"Mn}x5Im-&?tX 9V}MRA?5?u]/GSoC+9\c{*U
2022-03-15 16:08:54 UTC	13627	IN	Data Raw: 4a e1 40 3f c2 a3 d4 fa 0e 4d 7b 37 84 fc 0f 61 e3 ef 82 d6 57 37 71 6a 57 10 f8 77 53 96 c2 7b 7d 32 13 35 dc e1 8e f8 a2 40 01 c6 ef ba 0e 0e 32 4e 0d 75 97 5e 0a 6f 01 fc 68 93 c3 90 f8 52 d3 43 bc 83 41 1a f4 30 dc 5c 1b c1 6d ba 11 22 c4 aa ca 14 48 aa 1b 2f 96 c3 72 a4 63 8f 76 75 2e f9 6d 76 79 70 a7 cb 25 d1 1b 16 9f 0f 6e be 26 7e ca 07 51 b9 b6 b8 b3 bf d0 35 46 b7 16 72 9d 8c b6 ec be 62 31 50 72 b9 0e c3 69 ea 3f 0a c9 b0 b1 4d 01 a2 f0 ff 00 86 2d 23 d4 3c 44 63 53 3c d2 1c 5b d8 21 03 0d 2b 0e 84 0e 44 63 93 ec 39 af 5e fd 97 3c 71 63 e3 ab ef 88 1e 06 b4 cd cc 57 7a 2b 5f c5 72 0e e5 96 ea 06 1b d1 49 fb ec 55 f9 61 c0 c7 7e 48 c1 f0 c4 9a 67 c3 cb 18 b4 db 4d 2c df ea c6 ea 54 b6 d1 e1 e6 6b 97 0c 55 a5 91 8e 4a a0 3c b4 8f c0 19 1c 9c 02 Data Ascii: J@?M{7aW7qjWwS{}25@2Nu^ohRCA0\m"H/rcvu.mvyp%n&~Q5Frb1Pri?M-#<DcS<[!+Dc9^<qcWz+_rIUa~HgM,TkUJ<
2022-03-15 16:08:54 UTC	13643	IN	Data Raw: d9 d3 ee f4 ef 12 da c9 71 a4 5e db ea 30 c7 c3 8b 79 01 64 3e 8c bd 54 fb 11 50 cf 64 76 f4 af 97 bc 2f fb 42 69 7f 6e 0d e2 7d 1e 5d 03 57 c8 ce b3 a5 82 aa c7 fb cd 8e 7f a7 b5 7b 5d 8f c5 cb b7 b1 4b cb 4f b0 f8 e3 49 c0 2d 25 8c cb 05 ec 4b 8e e0 8d af f8 80 7d eb e8 e8 e3 94 be 23 96 54 d3 d8 e9 a7 b5 c7 18 e7 a7 b5 51 9e df e6 23 f1 ae 83 46 d4 2c fc 59 a2 45 aa d8 c5 73 04 12 92 be 55 dc 5e 5c a8 c3 a8 65 c9 e9 ea 09 07 d7 ad 45 3d 81 e7 19 22 bd 68 cb 99 5d 1c b2 a6 72 d3 5b 1e a2 aa 49 0e 7e b5 d2 4f 60 db 78 1f 8d 53 6b 06 63 8d 9c e7 d2 ae e6 0e 27 3e f0 f5 c0 3f 5a 85 e2 cf 3f 85 74 92 68 f2 a4 66 49 47 95 18 c9 32 48 42 8c 77 3c e3 8a e6 35 8f 19 78 57 44 72 92 eb 70 de ca bc 34 5a 68 37 0c 09 e7 19 1c 7e b4 18 37 14 21 8c 8e 48 a5 08 7d 2b Data Ascii: q^0yd>TPdv/Bin}]W{]KOI-%K}#TQ#F,YEsU^\eE="h]r[I~O`xSkc'>?Z?thfIG2HBw<5xWDrp4Zh7~7!H}+
2022-03-15 16:08:54 UTC	13651	IN	Data Raw: 0f 0e 5b 43 71 a9 4b 2f 96 96 d3 7c a4 80 33 95 55 c1 27 b7 5a f6 6b 4d 39 75 88 4d ac 1b a2 8a 48 d6 58 56 46 dd c0 1f 32 6e 19 e0 63 21 4d 73 32 35 cf 82 7c 45 a5 6a f6 36 f6 f3 dd 41 72 93 c4 44 41 be 75 20 83 ce 09 c8 18 23 bd 54 61 16 ad 7d 4e 49 d6 97 36 a7 4f f0 1f e0 ad e7 8d bc 2f ab da 78 8f 54 bc b2 d7 75 3f b4 59 9b 1b 28 c2 f9 10 91 1c 82 e0 00 a7 18 74 2b f3 11 93 c6 78 ab 1f 1e 7f 66 3f 06 fc 0f f0 96 99 05 a6 b1 79 ac 78 e3 5b 94 c7 6d 6f a9 5c 6e 49 6d d4 12 ce ca 17 0a 37 00 01 ee 73 e8 6b de be 16 fc 5c f0 e7 82 ee 3c 6b e2 bd 42 f2 c4 5a 5f 5b 47 a9 4c b1 c4 c1 d6 4d b9 6b 78 d4 13 fc 4c 00 1c e4 9a f0 6f 1b 4f 37 8d 7c 23 e2 7f 8a 9f 10 ad be cf e2 4f 13 44 d0 f8 5e c4 cc 63 fe c9 d3 62 61 be e7 6b 60 e0 0c 2a 9e e5 98 f7 af 1a a4 7d Data Ascii: [CqK/\|3U'ZkM9uMHXVF2nc!Ms25\|Ej6ArDAu #Ta}NI6O/xTu?Y(t+xf?yx[mo\nIm7sk\<kBZ_[GLMkxLoO7\|#OD^cbak`*}
2022-03-15 16:08:54 UTC	13667	IN	Data Raw: cf 82 38 cf 22 10 77 73 d0 36 7b f6 3c fe 55 ad 67 04 eb 0c b6 b9 0e e7 73 28 3e fc 8f c0 74 af 47 fb 4b 1b 52 3c 92 ab 26 9f 9b 3c fa 98 6c 35 39 73 42 9c 53 f4 57 2b ea 50 c6 ba 7b c9 75 14 77 16 f2 66 27 0b 12 81 b4 8c 1c 8f 43 e8 31 5f 3d 7c 11 f0 1c 57 1a 67 8c 74 2f 0f 78 83 5c f0 dd ad 9e b7 32 da b6 9f 74 44 71 46 5b 21 16 27 0c 08 04 10 d9 c3 72 39 15 f4 7e a1 12 5c 78 6a e2 de e4 84 46 50 24 cf dd e9 8f 62 0e 7a 7b d7 9b 7c 0c d0 ff 00 b3 fc 43 f1 0a 16 3e 61 1a c6 f2 cb d4 3b 44 8c 55 b9 3f de ce 31 91 93 c9 a7 09 4f d9 ca 29 ef 67 6e 9a 1c f5 23 19 da 72 5b 5d 19 ba 87 c2 6d 7e fa e6 3b dd 2f e2 5e b5 6b ab d8 97 58 24 9e ce d6 68 dd 58 ae e0 e0 c6 37 12 54 73 d4 11 ee 73 87 6f 6b f1 82 fb c4 1a b7 85 20 d6 f4 7f b6 98 20 d4 57 56 9a d5 ad 99 Data Ascii: 8"ws6{<Ugs(>tGKR<&<l59sBSW+P{uwf'C1_=\|Wgt/x\2tDqF[!'r9~\xjFP$bz{\|C>a;DU?1O)gn#r[]m~;/^kX$hX7Tssok WV
2022-03-15 16:08:54 UTC	13683	IN	Data Raw: 1e 59 2e 25 99 e6 92 5c 8c 96 23 ae 3d cf 5a f6 b6 bd b3 b0 f8 53 a8 c5 ac 45 25 85 f5 c4 32 b4 62 e0 b1 85 f7 9d ca c8 46 57 71 07 82 08 27 a6 2b c2 7c 3d 1c f2 5b c8 c9 10 95 f2 06 d6 00 82 4f 63 9e 3e 95 ee 60 5b 70 9a 7d cf 2b 14 94 65 1b 75 47 a3 7c 23 99 1f 4a d4 20 63 86 69 b2 0b 36 01 e9 8c 03 dc 74 c8 e7 07 15 7f e2 88 c2 e9 6d 18 58 dd 37 a9 ea fc 15 03 b6 0e 38 18 e9 52 f8 2e ca 48 74 9b 74 3a 5c 50 5c 26 7c d9 30 b1 b7 19 20 12 79 e9 8e 9c fe 7c 60 6a be 21 97 59 d5 27 86 58 0c 11 c7 1b 15 94 90 f2 13 83 fc 47 01 17 b7 4e 05 5f c5 55 c9 74 0f 86 92 8b 39 58 ae d7 4f fe c8 b8 79 0a 42 24 7f 37 1c ed 04 00 08 1d 47 71 93 de be 87 f0 7f c4 ef 0c e9 f7 5a 5a dd eb 91 c0 25 b1 58 53 6c 06 e0 bc 85 c6 70 33 95 61 c6 72 46 72 0f 6a f3 0d 33 43 b4 f0 Data Ascii: Y.%\#=ZSE%2bFWq'+\|=[Oc>`[p}+euG\|#J ci6tmX78R.Htt:\P\&\|0 y\|`j!Y'XGN_Ut9XOyB$7GqZZ%XSlp3arFrj3C
2022-03-15 16:08:54 UTC	13690	IN	Data Raw: 53 cb f1 91 a9 35 35 17 a3 b2 77 b3 ea bd 37 3c df 11 32 3c b7 8b b8 7e b6 0b 0b 88 8c eb c5 a9 d3 53 f8 79 a2 fa eb a2 69 b8 de fb 33 62 ea d6 08 ef 4f d9 9a 66 b7 2d f2 ee 93 9d be a4 7f 4a d3 d1 f5 89 fc 3f aa 59 df da 33 09 2d a4 12 af cc 46 70 72 41 c7 a8 e2 bc c8 fc 4a f0 60 8c 32 fc 4a b1 c8 38 c4 96 b2 28 19 1e bc 8f d2 b4 b4 ff 00 16 e8 5a 85 9c b7 36 3f 10 34 7d 49 a1 dc 5e 38 a2 97 68 c0 c8 0c de 59 0a 3d c9 af d5 6a 71 be 47 08 28 d6 a9 2b 35 6d 62 ff 00 1d 0f e0 fa be 10 71 85 3a aa ad 2a 74 f9 93 ba e5 ab 1d 1d f4 b5 e5 a5 ba 1e cb e1 bf 8c fa 5c df b5 27 c4 cd 5b 49 d7 34 c8 2d ae 3c 3b a7 5b 21 d5 a4 31 a4 57 11 30 0d 11 52 c8 59 93 79 24 03 d0 e7 27 35 63 c5 3f 19 fe 37 cb 75 b3 44 93 e1 ae a7 65 9c 19 ac f5 09 92 70 0f fd 32 69 48 63 c8 Data Ascii: S55w7<2<~Syi3bOf-J?Y3-FprAJ`2J8(Z6?4}I^8hY=jqG(+5mbq:*t\'[I4-<;[!1W0RYy$'5c?7uDep2iHc
2022-03-15 16:08:54 UTC	13706	IN	Data Raw: d2 ba 0d 27 c3 9e 22 f8 81 a8 5e e9 be 0e d0 ef bc 40 be 53 47 24 b0 c4 cb 14 6c 48 f9 9a 43 81 d4 74 27 db 35 26 b7 f0 97 c5 1f 03 b5 48 3c 53 ad c7 68 13 e6 86 5b 7b 52 66 16 ae cb 85 66 f9 40 38 ee c0 9c 13 8f 4a f3 dd 48 af 72 4f 57 d2 e7 57 b2 6d f3 45 68 ba 98 33 40 3e d5 a5 cb 14 97 3a 56 95 73 38 99 ed 4d dc 82 0b 92 1f e6 7d a0 80 b9 1d 56 be ec f8 59 6b 67 07 87 ad 0e 8d 04 17 b6 60 b7 9b b6 35 60 8e 58 8f 98 95 f9 41 18 23 07 d7 8a f8 23 c5 da e7 95 75 61 02 dc 35 fc a9 12 b8 bb 0c a2 25 04 76 04 fc b8 ce 31 9a fa 43 e0 bd f7 8a 35 6f 02 db e9 96 5a dd 8e 99 6a 5b ce 13 5b c1 34 b7 4e cd c0 3b 94 81 b7 8e fc 57 cf 67 14 ff 00 d9 e3 36 ec af fd 79 9e d6 5b 2f de ca 9d ae cf a1 b5 23 6b 7b 6d 71 67 75 a6 44 a8 cf 8d b7 11 12 18 00 0f ca c4 00 31 Data Ascii: '"^@SG$lHCt'5&H<Sh[{Rff@8JHrOWWmEh3@>:Vs8M}VYkg`5`XA##ua5%v1C5oZj[[4N;Wg6y[/#k{mqguD1
2022-03-15 16:08:54 UTC	13722	IN	Data Raw: 68 2e 6e b4 d8 58 e5 a3 73 0c aa 56 4c 8c 80 cc b2 13 8f 44 cf ad 76 1e 27 f1 87 8d 7c 2d f0 5e df c4 3a 1d 94 5a 77 87 a2 df a5 49 aa 79 ed 35 ee d0 7c b5 99 14 7c a9 19 20 a8 6c 92 36 e3 8c 83 5b ff 00 b4 57 86 ed 97 f6 79 b4 b0 b1 8c bc 36 90 5a dd 09 df 89 25 3b 7e 69 39 24 96 63 29 2c 09 27 2e 79 3c 9a f5 f2 f7 3a 55 e1 52 b2 57 95 e3 e9 f7 7c b4 39 f1 49 54 8c a9 d3 7a 47 5f 99 e4 fe 15 f1 16 a7 a0 6b 7a 5d de 9e 65 12 c4 8b 12 ac 8c 5d 19 71 e6 2a 8c f0 07 c9 81 8e 46 e3 ef 55 fe 2b e9 8f 65 f1 2b c4 7a 55 be a3 aa 7d b4 4b 2e ab a6 47 e6 e5 59 2e a3 8a 66 00 72 36 82 42 9e d8 e7 03 a9 a3 6e d2 5c 5a e9 05 63 63 1e 2d dc c8 ac 49 22 43 b4 6d 07 39 3f 37 e3 5d 97 c7 8f 0c 78 9d 97 c0 9a de 91 a7 ea 5a a4 cd a4 e9 d3 cd 73 6f 67 24 92 41 73 0c 4d 1b Data Ascii: h.nXsVLDv'\|-^:ZwIy5\|\| l6[Wy6Z%;~i9$c),'.y<:URW\|9ITzG_kz]e]q*FU+e+zU}K.GY.fr6Bn\Zcc-I"Cm9?7]xZsog$AsM
2022-03-15 16:08:54 UTC	13730	IN	Data Raw: 32 97 d5 e7 1a 9c cf 5b ad 75 fe bb 9e cf e1 ff 00 05 0f 15 ae 93 ac db 4b 2c 5a 59 9e 4d 93 28 f3 8c 41 57 04 63 20 96 ce 54 64 0e 49 e0 f2 6b 84 f1 ee 83 65 fd a1 22 4f 3a db 8d ac f2 9b 9b 85 4c 6d 6f ee 8c 96 1c 90 02 82 49 e7 da 99 a1 fc 43 73 71 3c 5a 38 bb d2 e4 b8 05 63 92 49 96 18 de 30 36 b3 ba 95 2e 46 dc 83 8d bd b9 18 ae bb c3 7f 0c 1b 5f d1 d2 ee c4 e9 f7 11 30 55 7b 86 b8 0e 20 19 24 86 c1 c8 63 d7 6e 01 39 ed 5d 7e d2 70 93 72 7a 0d f2 d5 8a 50 57 66 bf 81 3e 25 e8 5f 0c 6e 0d ee 97 24 9a 8d e3 5a 24 8d 14 2a c5 52 40 9f 3a c6 87 27 18 50 dc 83 9f ef 56 9f 87 3c 31 e3 2f 1f 78 aa 3f 1a e8 5a 14 96 b6 d7 12 9b f9 af b5 21 0c 1e 72 ed db 22 24 79 6c b1 23 e5 1d 37 0c 96 19 38 e0 3e 1f e9 d0 6a 3e 26 d4 2c a5 76 b1 9e cd 25 53 34 aa aa 92 ed Data Ascii: 2[uK,ZYM(AWc TdIke"O:LmoICsq<Z8cI06.F_0U{ $cn9]~przPWf>%_n$Z$*R@:'PV<1/x?Z!r"$yl#78>j>&,v%S4
2022-03-15 16:08:54 UTC	13746	IN	Data Raw: 43 04 2a 59 a4 97 e5 55 03 b9 3c 01 5e 55 67 a5 da 5f 43 1b ea d6 d7 12 cd b0 61 ad 6f 65 0a ac 07 f7 43 0e 09 f5 1c d2 58 78 67 47 b7 c3 fd 8e 39 0e e2 ef 9b 89 5c 0c 7a 06 62 01 3f 95 7a 11 cc 53 82 bc 35 fc 3f 23 82 59 7b 53 7e fb 4b fa f3 13 5a f1 3c 1a a5 d4 eb a3 d9 98 e0 40 ca 3f 7d e5 bc cc 4e 0b 0e 48 50 47 23 b9 aa a9 a9 4a d6 b2 25 c4 72 5c 2a 00 06 76 b1 c0 eb 82 70 38 c0 eb d6 b7 63 86 d1 5d 4d bd ba 45 1b 70 73 bb 38 f6 20 ff 00 4a 95 a6 88 18 f2 20 55 3c 10 79 20 f4 c9 15 e4 b9 4a ed b6 b5 3d 98 b8 41 28 a8 bf 9e e7 ce 9e 2d f0 fe a9 7b e3 cd 72 f2 0d 1e ea 7b 0b 81 a7 bc 72 25 b8 f9 4c 6a fb b6 b0 e7 3b 88 cf 5e 2b d0 74 e9 0d c5 e2 de ca 6f 23 bb ca 9f b3 4b 10 05 0f 95 b1 80 24 80 41 3c f5 ce 45 77 f7 0b 22 b6 e4 58 c6 d6 19 3d 07 07 93 Data Ascii: CYU<^Ug_CaoeCXxgG9\zb?zS5?#Y{S~KZ<@?}NHPG#J%r\vp8c]MEps8 J U<y J=A(-{r{r%Lj;^+to#K$A<Ew"X=
2022-03-15 16:08:54 UTC	13762	IN	Data Raw: 9f e8 be 24 bb 50 01 e0 85 39 e3 8e e3 9a e7 b4 6f 8e 9a 7e 97 79 71 7c df 0d f4 fb 9b d9 49 22 ee e3 c5 17 45 b9 eb 9c 8e 4e 3f 88 1c fd 6b 1f ec f6 af ae fe 6b fc c7 2c 4d 29 7c 2e eb d1 ff 00 91 f5 7e bd e3 8f 89 77 92 69 da 95 b7 87 26 d1 f4 28 d8 9d 4a 1b 9d 4f 4f 97 74 60 64 14 63 82 58 9e 4e 4f 4e 00 ef 55 2e 3c 53 f0 db c4 3a b5 85 ce b9 67 a8 3f 88 b2 c9 1b 43 73 72 52 09 18 6d dc 5a 33 f2 2f 4f 98 0f ce be 44 f8 85 f1 d3 58 f1 5a 41 15 a7 87 f4 dd 2a d6 10 04 71 2e af 3d c1 1e a1 8b b1 18 f7 00 1a c9 d0 3e 2a 4b a5 26 07 83 b4 7b d9 a4 70 cd 35 cd e4 9b 94 8e bb 59 58 1c 67 9e 4d 65 0c b5 ad 53 51 7e 4f fe 08 a5 8c 8d dc 75 6b e7 fa 23 ed cf 09 fe cd be 1b bc d5 9a e7 c5 de 20 b9 d7 ee 63 7f 36 0b 38 b5 b9 da 08 94 e4 ac 6e 08 57 60 39 e4 b1 cd Data Ascii: $P9o~yq\|I"EN?kk,M)\|.~wi&(JOOt`dcXNONU.<S:g?CsrRmZ3/ODXZAq.=>K&{p5YXgMeSQ~Ouk# c68nW`9
2022-03-15 16:08:54 UTC	13770	IN	Data Raw: 7f cc d7 4b a7 fc 40 d4 ef 92 48 2c af 74 8b 38 c9 21 7e cb a0 c3 13 fb 00 7c 90 3a 7a d7 22 e2 0a c9 7b cf ee 4b fc d1 d8 f2 5a 6e 4a da ff 00 db cf fc 8e 93 fe 16 17 c3 ad 26 1f b5 1d 33 c4 57 57 1c e2 1b 5b 78 a3 0c 7d 8b cb 8c fd 73 f4 ac cb ef da 1b 4f b7 b7 71 a5 78 1f c5 36 52 03 81 71 73 7d 67 c8 f6 51 92 0f d3 f3 af 25 f1 57 82 ec 75 1d 5a 4d 42 ee ec 5c de 3e 18 b8 93 c9 e7 3d 94 15 03 f2 ac 58 74 6d 72 ce e8 be 95 aa 58 5b 04 c3 2b 4d 18 94 fe 39 76 15 b4 73 bc 54 be 09 2f b9 19 cb 29 c3 c5 fb e9 fd e7 a4 db fc 61 b5 d4 af 8c fa 9f 81 35 2b 9f 98 b3 5c 4b 7b 0b b7 a7 1b c9 ce 3d 87 15 b3 7b f1 a7 c2 b6 d6 f1 a6 9d e0 3d 76 d2 e3 04 1b 89 2f a1 28 4f fb aa 8c 70 3d 80 ac ff 00 06 25 c5 f5 8c 72 f8 c5 f5 6d 4d d4 8d a3 4a 36 f6 d1 e3 ae 72 63 63 Data Ascii: K@H,t8!~\|:z"{KZnJ&3WW[x}sOqx6Rqs}gQ%WuZMB\>=XtmrX[+M9vsT/)a5+\K{={=v/(Op=%rmMJ6rcc
2022-03-15 16:08:54 UTC	13786	IN	Data Raw: e2 e5 9d 40 c0 27 70 23 ea 6a 89 b6 db 67 00 03 04 b7 4f 5e 05 5e b6 d3 cd c7 99 19 4f 9b 72 f1 c6 4e 0e 6b cd ab 59 d3 ab 16 f6 46 d0 8f 34 5a 3a 8f 87 c7 16 36 68 e3 61 0b b4 09 17 70 27 19 35 d9 6a 52 34 da 7e 23 78 5c 83 d8 05 fa 74 cd 73 76 30 ad a5 f6 d6 07 8e 46 3b 71 e9 50 c5 a8 96 79 d4 03 81 b7 3f fd 6a f3 ea cb eb 13 72 4b 63 d2 a5 1f 67 15 16 6d 6a 17 13 47 60 3c b4 8b 70 b7 c2 28 f4 e3 76 71 df f2 ab f6 52 ac 7a 2c 0f 02 ac f7 18 05 e2 38 18 3d 4e 08 15 c3 de ea 2c 2f 0f ce 48 0a 57 39 c6 78 1d 3b 56 d6 81 78 dc 02 72 dd 8e 7d f1 9e 95 97 b3 e5 8a 67 54 65 ef 58 f4 3d 29 da 2d 31 9e 28 e4 79 09 c9 53 c7 24 77 27 9e 9f 8d 70 fa b4 37 16 8e 76 5d ac b6 fd 71 6f 18 66 03 3d cf 07 af 41 5d 3c 9a b2 58 5a dc b3 9d 8a 42 b7 cb 93 fc 3c f5 af 32 d3 Data Ascii: @'p#jgO^^OrNkYF4Z:6hap'5jR4~#x\tsv0F;qPy?jrKcgmjG`<p(vqRz,8=N,/HW9x;Vxr}gTeX=)-1(yS$w'p7v]qof=A]<XZB<2
2022-03-15 16:08:54 UTC	13802	IN	Data Raw: 19 82 79 6c e4 70 78 19 f4 ff 00 38 ad c9 5c 48 a5 7c c2 fc 1f 6e 2b 93 f0 fd e7 91 0a 03 d0 11 d4 f1 ff 00 ea ad 56 be 0f 73 18 6c 65 9b d7 9e 7f c6 bc f9 d3 6e 77 3d aa 55 12 82 46 37 8d a0 f3 1a d9 fb 05 2a 4e 78 eb c7 15 07 87 46 eb ed c0 0c 88 8a e4 ff 00 3a d3 f1 2d af 9d 62 08 41 94 6c 64 13 8f e5 59 5a 79 5b 4d e5 90 13 b9 47 00 8e 0f 1f ce b9 ab c5 ba 6c b8 3f de 26 59 d2 75 0c b4 b1 0c 8f 98 fb f7 e4 e2 b6 e0 b8 46 b6 90 0e a7 3c b7 4e bd 7f 1a e4 2d 71 04 c7 77 20 96 e8 6b a8 d2 a4 f3 2d c7 1c 10 06 33 93 ef d7 e9 5e 64 69 29 c9 9d f1 ab 68 ea 63 09 a3 12 5c 44 a9 d7 fc 2a 58 6e e0 92 31 19 18 2a 08 f7 1d b1 54 ee 6f 3e cf ae 5e 27 4c 16 04 0c 0e 3f 4a cb 4d 43 fd 2a 42 9e 98 e7 f5 ff 00 f5 d7 ac a2 d4 4f 3a 55 15 cf 49 d3 75 08 be c1 b0 1e 51 Data Ascii: ylpx8\H\|n+Vslenw=UF7NxF:-bAldYZy[MGl?&YuF<N-qw k-3^di)hc\DXn1To>^'L?JMCBO:UIuQ
2022-03-15 16:08:54 UTC	13810	IN	Data Raw: 52 7d cf 26 c4 67 3c 93 8e 98 fd 7d eb cb 96 1d d5 6a 69 9d ca 51 87 b8 fa 1e 29 f1 52 f3 ed 9e 20 d6 98 4a 4a c9 76 a0 10 31 90 19 bf fa d5 9d e1 79 15 75 49 e4 c8 f9 63 00 b1 ed c5 7a 47 88 fe 1f 5a db c0 f3 cf f7 cc 8c 4f 3c 67 93 9f 51 5c 17 87 f4 c8 bc 9f 12 dd 31 d9 15 b8 24 73 e8 06 3f 5a fb 3c 3d 68 ba 1c 91 dd 59 7e 48 f9 7c 45 39 2a dc cf af fc 16 75 d6 37 f0 c9 6f 16 cb 8d e4 f4 e7 d3 d7 fc f3 53 5e eb 76 f0 d8 c8 87 50 11 9f 38 66 32 01 f4 eb da bc a3 c3 17 b7 97 a9 18 d8 c5 79 c0 cf 63 56 7c 41 a0 5f 4d 65 3b 90 53 77 ce a7 38 fb a7 26 bb 95 35 1a 9e ce 4c cb da b9 52 e6 48 ea fe 21 24 07 e1 fa ac 5e 5a 3b b8 51 e5 0e 48 2d d3 8f 5a e6 bc 43 3c 56 d6 f6 91 a0 54 09 1c 20 aa 81 80 7b e4 7f 3a f4 08 74 cb 47 f8 57 69 a9 5d 3e 71 2a ed 0d 8e a3 Data Ascii: R}&g<}jiQ)R JJv1yuIczGZO<gQ\1$s?Z<=hY~H\|E9u7oS^vP8f2ycV\|A_Me;Sw8&5LRH!$^Z;QH-ZC<VT {:tGWi]>q
2022-03-15 16:08:54 UTC	13826	IN	Data Raw: 95 0b 21 32 6f c8 eb d0 7e bc 57 99 19 46 3a 33 df 55 5b 82 57 39 1f 88 77 4c 7c 5d 11 25 78 6f bb d3 03 3d 3f fa f5 06 b9 7d e7 e9 e6 30 46 40 ce 43 63 1c 7a 54 3f 10 24 dd ad c7 3e f3 b8 ae 3a 77 27 b5 65 0b 93 33 3a ec f9 71 d4 1c 60 7f 87 f2 ad 1b d6 e7 02 d2 3c a7 3b 11 11 d8 4e ac e4 36 e3 8c 1c f2 0f 7a d7 b8 0b 37 86 01 de 77 e3 83 92 3e b9 f6 f6 ac 56 84 86 b8 8f 20 60 9c 8f 5a d5 8a 13 2e 96 22 32 b2 f2 4e 0e 30 73 53 27 6d 48 8b be 86 1d b5 b3 45 24 72 89 39 3f 8f d2 bb 0f 0d da 87 42 ee e4 92 3e 6e c3 f0 ac af ec 8f 2a d7 7e 71 c7 27 a7 3f d6 bb 3f 0d d9 03 60 18 3b 6f 3d ff 00 0e d9 15 c1 88 a8 a4 92 3b 70 f4 dd ec ca 32 40 05 cc 61 5f ef 67 a7 39 ad 02 0a a8 cf 0b eb c1 ef 56 5a c0 8b 94 20 92 3a 9e 9f 98 35 3c d6 c1 59 17 8c 67 a9 35 e1 56 Data Ascii: !2o~WF:3U[W9wL\|]%xo=?}0F@CczT?$>:w'e3:q`<;N6z7w>V `Z."2N0sS'mHE$r9?B>n*~q'??`;o=;p2@a_g9VZ :5<Yg5V
2022-03-15 16:08:54 UTC	13842	IN	Data Raw: a0 9e ff 00 5e b5 ea a5 cb 03 e3 f5 93 d4 c8 58 12 ca 39 10 27 27 a6 d1 dc 71 55 2f a2 95 d1 17 3b c1 1c 93 c7 22 b5 fc 52 f1 d9 49 1a 46 72 09 1b b9 c0 03 d0 d6 62 c5 19 42 5a 5e 38 c8 cf 5f a5 17 b7 bc 4d b5 b1 94 d6 c3 6b 17 e4 f7 ef 56 d6 c4 3d ac 6c a5 8f 3f dd c6 33 db 9e f5 25 c0 8e 14 4c 1c e4 7a 0c 9c f4 a9 e3 49 26 b5 0c ae 02 83 90 3a 67 f5 ac ea 55 76 4d 1a c2 08 6d 9d 8a 86 2a 78 f5 27 83 c5 4b 67 a7 40 97 12 10 83 76 78 07 ff 00 d7 51 43 0e d7 c3 5c ec e4 f7 e3 df ad 3a 18 ed d2 49 03 4e 4a e7 24 8f 4f af e3 5c b2 e6 77 d4 d3 43 7e ca 0b 78 ee 01 03 e6 3f 97 4e 6b 4a 78 e3 09 b8 01 8e 87 9f cb 18 ae 76 1d 42 ce d5 c3 99 0b 9f 4c f7 f7 ab 0f e2 28 58 80 83 2b f5 fd 6b c9 ad 42 a4 a4 9c 53 3a 21 25 6d 59 34 f6 f3 49 f7 20 ce 07 40 48 eb ef c5 Data Ascii: ^X9''qU/;"RIFrbBZ^8_MkV=l?3%LzI&:gUvMm*x'Kg@vxQC\:INJ$O\wC~x?NkJxvBL(X+kBS:!%mY4I @H
2022-03-15 16:08:54 UTC	13849	IN	Data Raw: 25 08 ef 8f e9 5c ad ec d2 c9 1e 1a 4c e3 ae 49 1e f5 74 e4 f4 57 39 9c 1a 96 a5 cb 2d 2c dc 5a 8d bf 73 69 e3 82 73 f8 d6 0a 68 0f 2d e4 8a a5 9d 33 c6 46 40 19 ae 9b 49 ba 9b ec 0c a2 23 8c 7b 74 27 fc 6b 32 ce f8 b6 b4 e0 c9 20 3b b9 04 e0 7d 31 d7 f5 ad 23 29 a6 ec 44 a0 9e c7 3f e2 2d 02 4b 75 8f a4 7d b2 4f 5f 71 ed 59 4d a5 c8 96 fe 62 95 90 ae 46 40 ae d7 c5 80 c6 c8 23 dd 96 c1 e9 93 f5 c5 41 69 1a fd 8d d8 a3 48 c3 a8 c0 0a 78 ae b5 59 c6 29 b2 1c 12 d0 e1 52 19 5a 30 76 30 19 39 c0 35 59 2c b7 dd 20 00 9f 4c 9e f5 e8 fa 70 49 ed e4 2e 04 63 1d 02 82 dc f4 fa 56 0f d9 53 fb 57 01 17 92 3b 73 cf e0 6a a3 89 dd 58 9e 53 02 6d 32 55 41 84 21 bd b9 e0 fa 7a 53 e4 b0 fb 2d bf 98 e5 89 19 24 32 f1 fc eb ba d5 ec 04 96 61 8e 63 50 3f 84 e0 e3 d0 ff 00 Data Ascii: %\LItW9-,Zsish-3F@I#{t'k2 ;}1#)D?-Ku}O_qYMbF@#AiHxY)RZ0v095Y, LpI.cVSW;sjXSm2UA!zS-$2acP?
2022-03-15 16:08:54 UTC	13865	IN	Data Raw: df eb 51 79 80 28 00 63 1c 1e 7f ad 3e 57 7b 9a 73 e8 0c 14 b0 c6 72 3d 01 a5 ce 7b 74 e7 eb 4c 59 71 82 7a 9e 30 7f cf e7 4f 59 d4 7c a1 f8 f7 c0 a9 69 8d 48 90 65 57 df b1 c5 24 f0 bb 26 e3 82 0f eb 4e 59 3e 5c e7 03 b5 0b 38 66 f7 fa d7 1b 52 8c b9 91 a7 35 d1 cb 78 83 c3 63 52 85 d5 a2 8d f2 39 e3 27 81 fa 91 5e 0f e3 4f 87 63 4e 99 e4 48 8a 90 4f 41 f9 57 d4 8c 09 ce 08 fe 5c 56 0e b7 a2 5b ea 51 b8 68 94 e4 7d ec 7f 2a de 9d 49 33 86 b4 2f aa 5a 9f 28 58 5c cb a7 ef 46 fb 9c fb d7 ce 3f 17 a6 37 5f 10 2d 25 07 e5 0e 32 48 f4 22 be cb f1 d7 80 9e cd a4 78 86 47 3d 0f 71 5f 29 fc 4f f0 9c ef e2 18 ae 36 1c ab 83 91 e8 2b b1 38 a5 73 c9 a9 76 d7 31 f4 5f 81 3c ab bf 0b db 44 f8 04 20 5c 1e 3b 73 9f e9 d6 b9 5f 1b 78 14 dc a3 b2 44 1d 5b 24 0c 8a d6 f8 Data Ascii: Qy(c>W{sr={tLYqz0OY\|iHeW$&NY>\8fR5xcR9'^OcNHOAW\V[Qh}*I3/Z(X\F?7_-%2H"xG=q_)O6+8sv1_<D \;s_xD[$
2022-03-15 16:08:54 UTC	13881	IN	Data Raw: 61 73 b7 a9 3c 73 97 6c 8c fb 64 74 14 d3 20 29 df 77 38 c7 f9 fe 75 11 66 0d 93 d7 07 e6 ea 70 38 c7 f8 54 6f 32 b2 0c 00 4f 4e 41 ab e5 0f 69 66 58 63 f3 e7 04 76 3d 39 e3 de 83 b8 60 f4 1d 48 ea 3d 40 15 50 bb 74 23 6e 4e 7a 76 3c d2 8b a0 cb 86 f7 c9 07 a0 cf f4 a8 74 ee 69 1a e5 90 c3 61 39 04 f6 3f 51 fd 29 a9 21 19 23 1f 28 fc 05 44 65 e4 93 f8 63 eb c0 f6 a8 d9 f6 b8 03 db 00 fe 1f a5 4a a0 6d ed ee 5c 33 97 4c 10 b8 ee 71 dc 9f 5f 6a 41 32 b4 b8 0f b0 7b 0f d6 ab 17 66 ff 00 61 57 20 73 fe 79 cd 38 37 45 04 e7 38 23 eb fc be 94 3a 71 46 b1 9b 2c 2c c0 7d ee 39 ef d3 fc ff 00 8d 4e 8f bb 00 10 42 e0 1f 4c 7b d5 36 dc 36 0f 94 1c f4 3d b2 39 c5 37 cc da a1 86 d4 19 e7 3c 02 2b 3e 5d 45 39 bd 91 a0 b2 96 43 82 09 e9 8e 7d 3d 3d 29 7c ef 98 64 02 3b Data Ascii: as<sldt )w8ufp8To2ONAifXcv=9`H=@Pt#nNzv<tia9?Q)!#(DecJm\3Lq_jA2{faW sy87E8#:qF,,}9NBL{66=97<+>]E9C}==)\|d;
2022-03-15 16:08:54 UTC	13889	IN	Data Raw: 7c d8 3d 48 f4 c0 e9 9e bf 87 e3 4b 19 8e 46 38 90 00 30 71 df af 38 ad 93 48 c6 57 2a c5 1c 92 b8 04 fc a7 39 24 77 03 9f 7f 5e 6a 59 50 6e c9 1b 08 db d0 1c 9e 7d 05 68 99 a0 81 32 08 0d ce 7b f5 1d b3 fe 45 2c 86 29 76 65 b7 83 d0 8c 0f 6e 3d 6a 79 f5 39 a5 75 aa 32 16 35 f3 36 8d b8 07 a6 4f 23 9f eb 53 47 00 47 c8 42 4f ae 00 ff 00 1e b5 37 92 61 c3 10 3e 62 7b fa 73 8a 89 8f ee f6 8c 8c 74 ee 0f 71 9a d3 9a e6 4a 5c da 92 60 16 c8 c6 08 c8 e7 d3 ff 00 ad 55 66 75 0c 70 72 c4 1c 01 56 44 81 54 e4 00 c3 1f 4a 8a 76 57 09 81 83 c9 0c 3d ff 00 0e 95 3b 32 2a 4a e3 04 a9 e5 a0 e7 a7 04 fa f3 fc 85 41 24 eb 21 da 98 20 93 83 f5 ef 45 d3 e1 b8 93 7f b7 4c 77 eb 9a a2 b2 f9 4f bb 01 c8 1d 0f b5 6b 15 a5 c5 63 72 ce c9 ae 58 60 6c 56 5e 0e 38 27 eb fe 7a 54 Data Ascii: \|=HKF80q8HW9$w^jYPn}h2{E,)ven=jy9u256O#SGGBO7a>b{stqJ\`UfuprVDTJvW=;2JA$! ELwOkcrX`lV^8'zT
2022-03-15 16:08:54 UTC	13905	IN	Data Raw: 75 00 e3 1f e7 8a 40 ff 00 29 27 ee e3 f9 7b 55 23 1d 4b 3f 79 80 c7 1d 39 1d 69 77 6d c8 1e df 98 ec 79 aa e2 41 c0 18 00 77 1d 4f 1f d2 9d e6 f5 db 91 cf 41 49 df 61 b7 62 c1 c8 e8 3d 48 1f 4a 6b b3 1e 99 5c f4 ed 8c 1f 7f f3 f4 a8 83 90 d9 c8 1d f1 8f 5a 3c cc a8 23 80 4f 7a 76 25 c8 7b 30 0b 9e 3f fa d8 ff 00 38 a3 7b 2a a7 f7 7e b5 1e e0 ad cf 1e 9c 75 e3 bd 08 d8 50 08 e4 1e 2a d6 c6 2e 4c 52 b9 6c f6 c7 ad 3d 71 dc f3 8c ee f4 ff 00 3c d4 78 f5 e1 47 a8 e9 fe 14 fc 6e 5e 4e 7a 7e 14 db 33 68 66 fc 31 f9 38 f9 9a a5 62 4f 04 63 f9 fd 2a 2e 39 20 f3 d7 1d 3e b4 a1 c0 ca 8c 7d 3b 7b 53 b8 ad dc 8d fe 45 04 73 cf 5f f1 a5 8a 4d cd 80 4e 07 71 8a 6c c1 b6 0f e1 3d 7a d4 51 39 18 1c 39 ec 71 d6 b4 5a a1 68 5c eb 22 e7 ea 3d 3d fd 71 48 ec 02 91 8e 71 9f Data Ascii: u@)'{U#K?y9iwmyAwOAIab=HJk\Z<#Ozv%{0?8{~uP.LRl=q<xGn^Nz~3hf18bOc*.9 >};{SEs_MNql=zQ99qZh\"==qHq
2022-03-15 16:08:54 UTC	13921	IN	Data Raw: bb bb f4 cf a0 a9 3c c9 1d 4e fc f0 06 0f ad 1c a4 59 16 24 ba 8d 5c 6e e1 bb e3 d2 9e f7 aa 54 95 23 04 67 3f fd 6a c9 93 71 57 24 03 83 d3 14 46 73 db 83 fe 7a d6 9c ba 5c 51 57 2f b5 e2 33 10 5f 7e 73 80 78 1f 8e 29 a2 e6 31 c9 72 06 00 39 f6 aa e8 3b 11 c0 cf 51 fe 7f 1a 8e 55 23 9d a4 d5 22 25 a2 d0 be da 8c 68 d8 51 bc e0 9f a1 a8 26 d4 e6 2b b4 01 83 c0 e7 b5 67 88 dc b1 c6 32 c7 23 be 4e 28 92 37 5d ec 79 c6 70 7a e3 15 5c 88 cf 9a c8 b5 1c ad 2b e4 be f1 d8 ff 00 2a b7 f6 9f 94 28 1b 8f 51 9a c9 81 64 0b c6 3e 84 fb 56 8c 0b b9 48 e9 9e be d5 12 1a 0c ed 6e 4f 5e 00 a7 2c c5 30 07 27 a8 23 ae 29 7c b5 e8 4f 1c 67 bd 4f 12 a8 4e 72 0f 4f ca 91 94 9f 29 2c 4c 4f df 27 26 a4 0e a5 71 fa d4 42 6d b9 39 e7 fb cc 7a e6 9b e6 67 3b b3 9c 9a 90 dc b5 fc Data Ascii: <NY$\nT#g?jqW$Fsz\QW/3_~sx)1r9;QU#"%hQ&+g2#N(7]ypz\+*(Qd>VHnO^,0'#)\|OgONrO),LO'&qBm9zg;
2022-03-15 16:08:54 UTC	13929	IN	Data Raw: a8 e7 db 8a 6a 39 91 48 3c 9e a3 eb 8f cb 8a 53 93 cf 41 eb e8 7d ff 00 a5 35 b9 17 64 a1 86 de 70 dd 3f fa dd 69 f9 c3 06 fc aa a7 9d 87 2b d5 46 38 f6 f7 a5 12 7c e3 27 03 ae 33 eb 55 62 1b bb 2d 17 e8 0f 3e bf 87 4a 49 24 32 c8 49 e4 fb 9a 45 20 a9 3c 63 f9 66 a3 6c 6e 3d aa 13 1d b5 1c 58 2a 80 3a 75 07 da 9b 86 da 47 ae 3d e9 9b 8e ee 33 f9 76 f7 ab 2b f3 26 0e 14 81 9c 53 7a 14 a7 64 56 d8 15 73 e9 e9 cf e5 52 2b 60 60 0f 52 7d a9 1d 40 77 3b f3 93 df b6 45 46 39 c6 3b 55 b3 25 27 27 72 61 cb 92 73 f8 f1 4e 07 6a 60 67 be 7f fa f5 1a 06 66 38 ff 00 38 a7 1e 14 76 e3 81 f5 ef 52 68 d0 f4 03 be 3d ff 00 c6 87 fb a7 6f 5c f5 f6 a6 6e cb 60 e3 07 8c 74 a5 ce 3a 13 d7 eb fa d2 1d ed a0 d2 0f 9d 82 4e 3a 66 9e 4f ca 09 e1 bd 4f 6a 8f 38 6c 86 c6 7f 2f c2 Data Ascii: j9H<SA}5dp?i+F8\|'3Ub->JI$2IE <cfln=X*:uG=3v+&SzdVsR+``R}@w;EF9;U%''rasNj`gf88vRh=o\n`t:N:fOOj8l/
2022-03-15 16:08:54 UTC	13945	IN	Data Raw: 04 26 06 40 c9 19 fe 95 46 58 59 98 86 3b 01 24 60 53 8b b9 9a 45 67 72 59 c6 7d ff 00 2a 6b 67 cc 40 08 f5 3f c8 d5 83 01 55 20 77 c0 e3 de a3 78 88 e4 9f 61 cf 15 a5 cd 74 b1 0b 0c b6 40 d8 33 c5 44 ce 43 12 b8 1d 0e e1 fa 54 8e 4e fc 0c 06 e8 0f ff 00 ae a3 6c 87 24 8c 9f ae 7b fe 55 69 98 5b 51 8d 2b 6e c9 38 c1 1c 7f 85 49 24 87 76 01 c9 1d aa bc 88 db f9 1c f0 7e b4 f5 24 c8 71 f2 1c 83 d7 35 6f b9 56 2c ab 3a ae 7a 9c 7d 7f fd 74 f6 e5 72 01 27 39 fc ba d3 07 f0 71 c1 f4 a9 09 ca f2 32 3d fa f1 59 73 15 d2 c0 18 f5 c7 52 3a d2 67 7b 60 e0 11 da 98 cc 46 49 3f 2f 4c 54 31 37 cc 72 7e ef 1c e2 af cc 89 22 c1 3e 5a e0 77 c8 3e fd ea be e2 8e 54 64 1c f4 15 2b b7 99 1f 03 fa 1a 8d 6d c3 72 71 93 cf eb cd 25 e6 45 c3 78 2b cf 4c f3 ce 79 ab 96 d2 81 90 Data Ascii: &@FXY;$`SEgrY}*kg@?U wxat@3DCTNl${Ui[Q+n8I$v~$q5oV,:z}tr'9q2=YsR:g{`FI?/LT17r~">Zw>Td+mrq%Ex+Ly
2022-03-15 16:08:54 UTC	13961	IN	Data Raw: 1a 9a da 3d 4b f2 4a ad 88 ce 77 75 ff 00 1f c2 9c a9 9c 1f 4e 87 9a aa 8c a6 4d c0 73 d2 ad 44 e0 7c a0 e7 a7 53 d7 fc f6 a1 dd 11 cb 76 58 dd b5 08 1c b1 e4 fa d4 6a 32 c4 1f bb 8f e8 6a 31 38 0b 91 c7 aa f5 e2 9b 34 eb 0f 21 f9 38 e0 75 34 8d 14 49 24 6c 75 e3 35 5e 44 50 c3 04 8e 79 19 a4 fb 4a 3f 7c 9f 43 eb 4d 92 ee 20 b8 27 70 c7 eb 4d 36 12 8e 83 99 bc ae 9d 46 72 73 8a 80 dc b1 e0 fe 7d e9 b2 48 8b ce fc e4 e3 1d 6a 10 19 f2 41 cf 5e 3d eb 54 61 ac 4b c8 c6 57 dc 7a ed ef 56 93 73 2f 07 f4 fd 2a 84 2c cc 80 11 d3 a9 ab 68 f2 26 42 f2 0f bd 43 0e 6d 49 d1 be f8 69 33 8f ae 29 55 95 9b 23 27 db 3d 7f 0a 85 95 91 5d c8 1f 4e 69 d0 1f 98 96 5d bc f0 0f 35 3d 2e 26 c9 5b 2e bb 47 03 d3 9a 14 20 70 5b b7 71 df 06 9d b4 1c 60 ff 00 4f d6 94 28 24 8e ad Data Ascii: =KJwuNMsD\|SvXj2j184!8u4I$lu5^DPyJ?\|CM 'pM6Frs}HjA^=TaKWzVs/*,h&BCmIi3)U#'=]Ni]5=.&[.G p[q`O($

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49819	65.9.96.54	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:23 UTC	66	OUT	GET /?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fwww.dropbox.com HTTP/1.1 Host: consent.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en
2022-03-15 16:07:23 UTC	66	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 86924 Connection: close Date: Tue, 15 Mar 2022 03:48:44 GMT Last-Modified: Thu, 03 Mar 2022 15:58:12 GMT x-amz-version-id: CBdgV0uQLQiVn7pxsZKIBPerpZOxIAwG ETag: "c74143cde66c27c6033d9fe29e439491" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9ed2eeec8748ea461af0d1cbf998da0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 X-Amz-Cf-Id: yAOX5boSBAs2lz3mo1xn2ZkA5VDxdTp1FRJTItWPbqhlSNw3EAhoMg== Age: 44320
2022-03-15 16:07:23 UTC	67	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 27 20 6e 61 6d 65 3d 27 76 69 65 77 70 6f 72 74 27 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 63 63 70 61 5f 69 66 72 61 6d 65 27 20 72 65 6c 3d 27 70 72 65 66 65 74 63 68 27 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 43 4f 4f 4b 49 45 5f 43 4f 4e 53 45 4e 54 5f 44 55 52 41 54 49 4f 4e 5f 4d 4f 4e 54 48 53 20 3d 20 36 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 4d 41 4e Data Ascii: <html><head> <meta content='width=device-width, initial-scale=1' name='viewport'> <link href='https://www.dropbox.com/ccpa_iframe' rel='prefetch'> <script type='text/javascript'> var COOKIE_CONSENT_DURATION_MONTHS = 6; var MAN
2022-03-15 16:07:23 UTC	70	IN	Data Raw: 20 20 20 20 20 20 20 20 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 5c 2e 64 6f 63 73 65 6e 64 5c 2e 6c 6f 63 61 6c 24 2f 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 5c 2e 64 6f 63 73 65 6e 64 6c 6f 63 61 6c 5c 2e 63 6f 6d 24 2f 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 68 65 6c 70 5c 2e 64 6f 63 73 65 6e 64 5c 2e 63 6f 6d 24 2f 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 72 65 70 6c 61 79 5c 2e 64 72 6f 70 62 6f 78 5c 2e 63 6f 6d 24 2f 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 72 65 70 6c 61 79 2d 73 74 61 67 65 5c 2e 6e 65 74 6c 69 66 79 5c 2e 61 70 70 24 2f 2c 0a 20 20 20 20 20 20 20 20 5d 0a 20 20 20 20 Data Ascii: /^https:\/\/www\.docsend\.local$/, /^https:\/\/www\.docsendlocal\.com$/, /^https:\/\/help\.docsend\.com$/, /^https:\/\/replay\.dropbox\.com$/, /^https:\/\/replay-stage\.netlify\.app$/, ]
2022-03-15 16:07:23 UTC	81	IN	Data Raw: 65 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 63 61 63 68 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 69 6c 74 65 72 28 28 6b 65 79 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 21 61 63 74 75 61 6c 43 6f 6f 6b 69 65 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 61 63 74 75 61 6c 43 6f 6f 6b 69 65 73 2e 69 6e 63 6c 75 64 65 73 28 6b 65 79 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 Data Ascii: es = Object.keys(this.cache) .filter((key) => { if (!!actualCookies) { return !actualCookies.includes(key); } retur
2022-03-15 16:07:23 UTC	88	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6f 6b 69 65 44 65 63 6c 69 6e 65 48 61 6e 64 6c 65 72 20 3d 20 6d 75 74 61 74 69 6f 6e 2e 74 61 72 67 65 74 2e 6f 6e 63 6c 69 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 75 74 61 74 69 6f 6e 2e 74 61 72 67 65 74 2e 6f 6e 63 6c 69 63 6b 20 3d 20 74 61 72 67 65 74 48 61 6e 64 6c 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 28 74 65 78 74 20 3d 3d 3d 20 6e 75 6c 6c 20 7c 7c 20 74 65 Data Ascii: } else { cookieDeclineHandler = mutation.target.onclick; } mutation.target.onclick = targetHandler; if (!(text === null \|\| te
2022-03-15 16:07:23 UTC	93	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 61 6e 69 6d 61 74 65 64 49 64 73 2e 69 6e 63 6c 75 64 65 73 28 6e 6f 64 65 2e 69 64 29 20 26 26 20 21 6e 6f 64 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 27 61 6e 69 6d 61 74 65 2d 73 74 61 72 74 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 69 66 20 74 68 69 73 20 69 73 20 74 68 65 20 73 65 74 74 69 6e 67 73 20 64 69 61 6c 6f 67 2c 20 66 6f 63 75 73 20 74 68 65 20 66 69 72 73 74 20 66 6f 63 75 73 61 62 6c 65 20 65 6c 65 6d 65 6e 74 20 69 6e 20 74 68 65 20 70 61 6e 65 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 6c 6c 62 61 Data Ascii: } else if (animatedIds.includes(node.id) && !node.classList.contains('animate-start')) { // if this is the settings dialog, focus the first focusable element in the panel var callba
2022-03-15 16:07:23 UTC	96	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 66 6f 63 75 73 20 74 68 65 20 66 69 72 73 74 20 66 6f 63 75 73 61 62 6c 65 20 65 6c 65 6d 65 6e 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 6f 63 75 73 61 62 6c 65 20 3d 20 65 6c 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 68 72 65 66 5d 2c 20 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 2c 20 5b 74 61 62 69 6e 64 65 78 5d 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 5d 29 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 66 6f 63 75 73 61 62 6c 65 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 Data Ascii: // focus the first focusable element if (el) { var focusable = el.querySelectorAll('[href], button, input, select, textarea, [tabindex]:not([tabindex="-1"])'); if (focusable.length) {
2022-03-15 16:07:23 UTC	110	IN	Data Raw: 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 76 65 72 72 69 64 65 43 6f 6f 6b 69 65 41 63 63 65 70 74 42 75 74 74 6f 6e 28 74 65 78 74 2c 20 66 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 74 6e 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 43 4f 4f 4b 49 45 5f 41 43 43 45 50 54 5f 42 55 54 54 4f 4e 5f 49 44 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 21 62 74 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6f 6b 69 65 41 63 63 65 70 74 48 61 6e 64 6c 65 72 20 3d 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } function overrideCookieAcceptButton(text, fn) { var btn = window.document.getElementById(COOKIE_ACCEPT_BUTTON_ID) if (!!btn) { if (cookieAcceptHandler === null) {
2022-03-15 16:07:23 UTC	113	IN	Data Raw: 20 20 20 20 20 20 63 6f 6f 6b 69 65 44 65 63 6c 69 6e 65 54 65 78 74 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6f 6b 69 65 44 65 63 6c 69 6e 65 4f 62 73 65 72 76 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6f 6b 69 65 44 65 63 6c 69 6e 65 4f 62 73 65 72 76 65 72 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 55 49 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: cookieDeclineText = null; if (cookieDeclineObserver) { cookieDeclineObserver.disconnect(); } } } function disableCookieConsentUI() {
2022-03-15 16:07:23 UTC	117	IN	Data Raw: 63 6f 6c 6c 61 70 73 65 2d 74 6f 67 67 6c 65 2d 6c 61 62 65 6c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6c 6c 61 70 73 65 2d 74 6f 67 67 6c 65 2d 69 6e 70 75 74 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 21 6c 61 62 65 6c 20 26 26 20 21 21 69 6e 70 75 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 69 6e 69 6d 69 7a 65 64 20 3d 20 69 6e 70 75 74 2e 63 68 65 63 6b 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 62 65 6c 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 61 72 69 61 2d 63 68 65 63 6b 65 64 27 2c 20 6d 69 6e 69 Data Ascii: collapse-toggle-label'); var input = document.getElementById('collapse-toggle-input'); if (!!label && !!input) { var minimized = input.checked; label.setAttribute('aria-checked', mini
2022-03-15 16:07:23 UTC	129	IN	Data Raw: 4f 4e 53 45 4e 54 5f 44 55 52 41 54 49 4f 4e 5f 4d 4f 4e 54 48 53 29 3b 20 2f 2f 20 63 61 6c 63 75 6c 61 74 65 20 64 61 79 73 20 62 65 74 77 65 65 6e 20 36 20 6d 6f 6e 74 68 73 20 66 72 6f 6d 20 6e 6f 77 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 75 70 70 72 65 73 73 44 61 79 73 20 3d 20 28 65 78 70 69 72 65 54 69 6d 65 73 74 61 6d 70 20 2d 20 6e 65 77 20 44 61 74 65 28 29 29 20 2f 20 28 31 30 30 30 20 2a 20 36 30 20 2a 20 36 30 20 2a 20 32 34 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 65 76 69 64 6f 6e 2e 6e 6f 74 69 63 65 2e 64 72 6f 70 53 75 70 70 72 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 28 73 75 70 70 72 65 73 73 44 61 79 73 29 3b 20 2f 2f 20 73 75 70 70 72 65 73 73 20 74 68 65 20 6e 6f 74 69 63 Data Ascii: ONSENT_DURATION_MONTHS); // calculate days between 6 months from now var suppressDays = (expireTimestamp - new Date()) / (1000 * 60 * 60 * 24); window.evidon.notice.dropSuppressionCookie(suppressDays); // suppress the notic
2022-03-15 16:07:23 UTC	145	IN	Data Raw: 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 65 76 69 64 6f 6e 2d 73 77 69 74 63 68 2d 73 6c 69 64 65 72 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 31 36 36 2c 20 31 34 35 2c 20 31 31 33 2c 20 30 2e 31 34 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 65 76 69 64 6f 6e 2d 73 77 69 74 63 68 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 33 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } .evidon-switch-slider:hover { background-color: rgba(166, 145, 113, 0.14) !important; } .evidon-switch { display: flex !important; order: 3; height: 20px !important;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.3	49968	20.199.120.182	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:09:06 UTC	13969	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 63 65 39 39 66 33 39 62 38 65 37 34 34 64 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: ace99f39b8e744da
2022-03-15 16:09:06 UTC	13969	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-03-15 16:09:06 UTC	13969	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 32 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 63 65 39 39 66 33 39 62 38 65 37 34 34 64 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 71 36 65 2b 6b 6e 77 50 32 42 35 38 54 79 75 62 68 4e 41 37 55 45 66 43 4b 59 35 70 70 49 38 6d 54 44 4b 64 6f 6e 32 6e 65 48 74 6e 50 70 38 75 53 45 6e 67 56 66 59 64 4b 33 42 69 54 57 79 52 69 2b 52 72 32 2f 32 66 59 70 6a 73 6a 6c 6a 7a 36 65 4b 72 6b 69 41 4b 6e 4b 4b 4e 7a 74 77 41 6b 46 55 30 4f 78 4f 69 57 6d 38 73 56 37 67 66 4c 47 69 41 64 75 54 73 6d 45 5a 30 4c 49 30 76 69 57 71 46 6d 41 78 Data Ascii: ATH 2 CON\DEVICE 1026Context: ace99f39b8e744da<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcq6e+knwP2B58TyubhNA7UEfCKY5ppI8mTDKdon2neHtnPp8uSEngVfYdK3BiTWyRi+Rr2/2fYpjsjljz6eKrkiAKnKKNztwAkFU0OxOiWm8sV7gfLGiAduTsmEZ0LI0viWqFmAx
2022-03-15 16:09:06 UTC	13970	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 63 65 39 39 66 33 39 62 38 65 37 34 34 64 61 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: ace99f39b8e744da
2022-03-15 16:09:06 UTC	13970	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-03-15 16:09:06 UTC	13970	IN	Data Raw: 4d 53 2d 43 56 3a 20 36 72 76 45 4b 39 52 38 58 45 61 4b 37 6d 69 75 4d 33 54 71 73 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 6rvEK9R8XEaK7miuM3TqsQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.3	49969	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:09:08 UTC	13970	OUT	GET /download?plat=win HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
2022-03-15 16:09:08 UTC	13972	IN	HTTP/1.1 302 Found Cache-Control: no-cache,no-cache, no-store Content-Security-Policy: sandbox Location: https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:09:08 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 407 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2937c62afa564c8c91db1acb9dbaf353 Connection: close
2022-03-15 16:09:08 UTC	13973	IN	Data Raw: 33 30 32 20 46 6f 75 6e 64 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 73 3a 2f 2f 64 6c 2d 77 65 62 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 69 6e 73 74 61 6c 6c 65 72 3f 61 75 74 68 65 6e 74 69 63 6f 64 65 5f 73 69 67 6e 3d 54 72 75 65 26 62 75 69 6c 64 5f 6e 6f 3d 31 34 33 2e 34 2e 34 31 36 31 26 6a 75 6e 6f 3d 54 72 75 65 26 6a 75 6e 6f 5f 75 73 65 5f 70 72 6f 67 72 61 6d 5f 66 69 6c 65 73 3d 54 72 75 65 26 70 6c 61 74 3d 77 69 6e 26 74 61 67 3d 65 79 4a 55 51 55 64 54 49 6a 6f 69 5a 55 70 35 63 6c 5a 70 63 45 39 4d 55 7a 64 50 65 6b 30 74 54 48 6f 77 65 46 4a 7a 62 45 6c 33 54 6c 52 42 4d 6b 34 33 51 7a 42 4f 52 45 30 77 54 56 52 4a 4d 55 35 4d 54 58 64 4f 65 6d 4d 77 54 58 70 6a 4d 45 35 69 55 54 42 Data Ascii: 302 FoundThe resource was found at https://dl-web.dropbox.com/installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTB

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.3	49971	162.125.65.15	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:09:09 UTC	13973	OUT	GET /installer?authenticode_sign=True&build_no=143.4.4161&juno=True&juno_use_program_files=True&plat=win&tag=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ&tag_token=AWo5CWOIE_Iv_MM0Iht_ZQE9cjQlmAC5v6Dw_rc-9dH66A HTTP/1.1 Host: dl-web.dropbox.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=pZXDo3x1XnpXWcY8UK1IFlBj; locale=en; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
2022-03-15 16:09:09 UTC	13974	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=0 Content-Disposition: attachment; filename=DropboxInstaller.exe Content-Security-Policy: sandbox Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 111 X-Webkit-Csp: sandbox Content-Type: application/x-msdos-program Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:09:09 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 59e7ebf7de53453eafb79ddb88cc9fd1 Connection: close Transfer-Encoding: chunked
2022-03-15 16:09:09 UTC	13975	IN	Data Raw: 34 30 30 30 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4c f9 68 83 08 98 06 d0 08 98 06 d0 08 98 06 d0 01 e0 93 d0 18 98 06 d0 01 e0 85 d0 47 98 06 d0 01 e0 82 d0 2d 98 06 d0 01 e0 8c d0 0e 98 06 d0 2f 5e 7d d0 03 98 06 d0 08 98 07 d0 7f 98 06 d0 16 ca 92 d0 09 98 06 d0 08 98 91 d0 1d 98 06 d0 01 e0 97 d0 09 98 06 d0 52 69 63 68 08 98 06 d0 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 71 e0 5c 61 00 00 00 00 00 Data Ascii: 4000MZ@!L!This program cannot be run in DOS mode.$LhG-/^}RichPELq\a
2022-03-15 16:09:09 UTC	13991	IN	Data Raw: 83 3d 10 19 41 00 0d 0a Data Ascii: =A
2022-03-15 16:09:10 UTC	13991	IN	Data Raw: 34 30 30 30 0d 0a 00 74 19 68 10 19 41 00 e8 d3 1a 00 00 59 85 c0 74 0a ff 75 08 ff 15 10 19 41 00 59 e8 0a 1a 00 00 68 dc d1 40 00 68 c8 d1 40 00 e8 a1 ff ff ff 59 59 85 c0 75 42 68 c6 58 40 00 e8 d4 19 00 00 b8 b4 d1 40 00 c7 04 24 c4 d1 40 00 e8 63 ff ff ff 83 3d 14 19 41 00 00 59 74 1b 68 14 19 41 00 e8 7b 1a 00 00 59 85 c0 74 0c 6a 00 6a 02 6a 00 ff 15 14 19 41 00 33 c0 5d c3 6a 18 68 88 ed 40 00 e8 36 12 00 00 6a 08 e8 7b 16 00 00 59 83 65 fc 00 33 db 43 39 1d fc 0c 41 00 0f 84 c5 00 00 00 89 1d f8 0c 41 00 8a 45 10 a2 f4 0c 41 00 83 7d 0c 00 0f 85 9d 00 00 00 ff 35 08 19 41 00 e8 a3 0c 00 00 59 8b f8 89 7d d8 85 ff 74 78 ff 35 04 19 41 00 e8 8e 0c 00 00 59 8b f0 89 75 dc 89 7d e4 89 75 e0 83 ee 04 89 75 dc 3b f7 72 57 e8 6a 0c 00 00 39 06 74 ed 3b Data Ascii: 4000thAYtuAYh@h@YYuBhX@@$@c=AYthA{YtjjjA3]jh@6j{Ye3C9AAEA}5AY}tx5AYu}uu;rWj9t;
2022-03-15 16:09:10 UTC	14007	IN	Data Raw: 08 33 ff 3b df 0f 0d 0a Data Ascii: 3;
2022-03-15 16:09:10 UTC	14007	IN	Data Raw: 34 30 30 30 0d 0a 95 c0 3b c7 75 1d e8 cf d8 ff ff c7 00 16 00 00 00 57 57 57 57 57 e8 57 d8 ff ff 83 c4 14 83 c8 ff eb 53 83 3d e4 17 41 00 03 75 38 6a 04 e8 d5 d6 ff ff 59 89 7d fc 53 e8 dd f1 ff ff 59 89 45 e0 3b c7 74 0b 8b 73 fc 83 ee 09 89 75 e4 eb 03 8b 75 e4 c7 45 fc fe ff ff ff e8 25 00 00 00 39 7d e0 75 10 53 57 ff 35 34 11 41 00 ff 15 cc d0 40 00 8b f0 8b c6 e8 86 d2 ff ff c3 33 ff 8b 5d 08 8b 75 e4 6a 04 e8 a3 d5 ff ff 59 c3 6a 02 e8 a2 be ff ff 59 c3 8b ff 55 8b ec 8b 45 08 85 c0 74 12 83 e8 08 81 38 dd dd 00 00 75 07 50 e8 70 e9 ff ff 59 5d c3 8b ff 55 8b ec 83 ec 14 a1 f8 09 41 00 33 c5 89 45 fc 53 56 33 db 57 8b f1 39 1d 1c 13 41 00 75 38 53 53 33 ff 47 57 68 d4 d9 40 00 68 00 01 00 00 53 ff 15 dc d0 40 00 85 c0 74 08 89 3d 1c 13 41 00 eb Data Ascii: 4000;uWWWWWWS=Au8jY}SYE;tsuuE%9}uSW54A@3]ujYjYUEt8uPpY]UA3ESV3W9Au8SS3GWh@hS@t=A
2022-03-15 16:09:10 UTC	14023	IN	Data Raw: 00 00 00 00 00 00 0d 0a Data Ascii:
2022-03-15 16:09:10 UTC	14023	IN	Data Raw: 34 30 30 30 0d 0a 34 f7 00 00 22 f7 00 00 0c f7 00 00 44 f7 00 00 00 00 00 00 0e f3 00 00 20 f3 00 00 2e f3 00 00 3a f3 00 00 4a f3 00 00 60 f3 00 00 7a f3 00 00 92 f3 00 00 ac f3 00 00 c2 f3 00 00 d2 f3 00 00 ec f3 00 00 fe f3 00 00 0c f4 00 00 24 f4 00 00 32 f4 00 00 3e f4 00 00 4c f4 00 00 56 f4 00 00 6e f4 00 00 7e f4 00 00 94 f4 00 00 ac f4 00 00 ba f4 00 00 c8 f4 00 00 d6 f4 00 00 e2 f4 00 00 fc f4 00 00 0c f5 00 00 22 f5 00 00 3c f5 00 00 54 f5 00 00 6c f5 00 00 06 f3 00 00 94 f5 00 00 b0 f5 00 00 c4 f5 00 00 d4 f5 00 00 fc f5 00 00 08 f6 00 00 12 f6 00 00 1e f6 00 00 30 f6 00 00 3c f6 00 00 4c f6 00 00 5a f6 00 00 66 f6 00 00 72 f6 00 00 84 f6 00 00 94 f6 00 00 aa f6 00 00 ba f6 00 00 cc f6 00 00 e8 f9 00 00 cc f9 00 00 f2 f2 00 00 d4 f2 00 00 c2 Data Ascii: 40004"D .:J`z$2>LVn~"<Tl0<LZfr
2022-03-15 16:09:10 UTC	14039	IN	Data Raw: 99 ef 0e 7a 69 4e 0d 0a Data Ascii: ziN
2022-03-15 16:09:10 UTC	14039	IN	Data Raw: 34 30 30 30 0d 0a db 46 6b 9d 97 5c a7 17 b6 ca 9a a8 13 a2 7f 73 76 94 ce 93 60 a9 2a cb f3 04 3f 8a 7e e8 59 0e 9c 99 c6 7f a2 4b 60 6d 27 b9 e8 cc 59 7f 23 44 8b da 35 c5 bf c3 f6 bb 99 f5 66 ea b5 f5 1d 1e d9 c2 7c 84 f7 74 bf 74 1a 10 e8 05 a5 f0 f6 ea 8a 38 70 c0 23 cc eb 20 fc 04 47 c7 db 79 dc af 23 a1 95 37 21 c5 2a 02 7f 15 de 02 d4 ce dd 36 1d 07 d5 85 29 4f 91 00 28 ec aa 7b ab 7f 82 02 97 6c 95 cc 4f 86 c1 13 97 67 cd da 2e d5 e9 e9 6f 19 12 cd 29 5d a8 3b 10 f8 c4 c8 d1 49 b5 4f c5 60 b1 f7 bd 38 5b 56 ba af c6 e8 f8 f5 78 2b 27 3f d5 37 70 36 45 3a 61 ed 6f de d1 0e 80 f0 65 f9 ed 38 91 ff 0f 4f 07 1d f5 e8 51 97 26 30 df 32 ec b8 fb 30 65 a8 60 58 c1 d7 5a ff ce fe f9 05 48 9b c1 7a 3d c5 8e 50 37 97 79 ba 8c 8c 94 3e 20 a0 a3 b1 4d d1 f5 Data Ascii: 4000Fk\sv`?~YK`m'Y#D5f\|tt8p# Gy#7!6)O({lOg.o)];IO`8[Vx+'?7p6E:aoe8OQ&020e`XZHz=P7y> M
2022-03-15 16:09:10 UTC	14055	IN	Data Raw: 20 73 25 0a aa 5a 0d 0a Data Ascii: s%Z
2022-03-15 16:09:10 UTC	14055	IN	Data Raw: 34 30 30 30 0d 0a 8d 5c 1a b9 28 a1 99 02 2b 9a c8 e7 ec b4 c0 f1 81 df 77 39 a4 96 1d 19 c3 94 37 e6 fb 93 64 63 3d da fb d4 94 75 36 ca f4 a7 25 b1 bc 80 62 8a 8f d2 70 b0 e6 c7 72 c3 cf 0a 7a b4 6e 5d 14 1b bc 45 7b a0 94 08 e5 f7 a9 18 a7 d0 bf 99 fa 14 67 75 82 af 42 0a 20 db 7f de 46 09 f3 77 ba 59 9d 39 cd 17 8c af 97 07 9d a4 09 4f 98 a9 fb 58 88 ed 2e 47 77 d5 98 71 23 c6 e9 d4 67 94 7d 4d ce 66 1b 7b d5 51 0a f5 3d 74 a1 20 e1 d8 06 7b c4 d9 06 e2 06 ca e8 0b ef 76 bf f6 60 00 39 da ca f9 9e 2a 80 75 d6 c1 e5 90 f1 86 f1 48 72 6a d6 d0 bd 55 61 e7 ce 38 2b 4c 42 4d 2b 63 15 c5 7e 60 37 ad f6 a3 ac 09 9a b1 39 8c 19 b2 61 2e 72 90 3c 28 49 58 41 a3 b1 96 ac ec be bd f6 e9 f6 ed 58 25 97 92 68 a0 2f 5d 78 44 88 97 ac 0f 25 87 8d 01 61 24 93 e0 25 Data Ascii: 4000\(+w97dc=u6%bprzn]E{guB FwY9OX.Gwq#g}Mf{Q=t {v`9*uHrjUa8+LBM+c~`79a.r<(IXAX%h/]xD%a$%
2022-03-15 16:09:10 UTC	14071	IN	Data Raw: 2f 21 af 06 c6 fc 0d 0a Data Ascii: /!
2022-03-15 16:09:10 UTC	14071	IN	Data Raw: 34 30 30 30 0d 0a 1f 05 a2 d7 d2 75 89 b2 19 3c 5d e3 7a 07 e4 f3 0e c7 9e 9d d3 c0 93 ab 85 0e ca ff d9 9c 89 e4 82 7a bd d6 1a fe df 31 f6 52 f0 e7 be 7e 62 6e 35 fc 66 14 79 da 98 dc ab 4c 26 1b 3f 1a 72 8d 0a 65 7c 00 93 d8 a2 6e 7f 50 40 65 c9 e9 e3 45 c3 bc fa ca 19 2b 1f 54 9a 97 46 cd b0 98 03 1f 6c 22 6f 1c fa 1b b4 cd d8 2f cf 95 0d 9d c6 d6 2c a0 c7 c7 6f 41 61 b6 ad af a7 d3 8d f3 03 66 93 5e ca 82 5c e5 ca 11 cd ba 59 a5 40 3a 91 24 ae c9 b6 8e 01 6f a1 f0 d2 41 61 a3 f7 a2 98 2d fe 64 89 41 5b 11 5c 80 d2 9b f2 b6 07 71 d6 9b 21 db 0d a6 20 5e 87 3c b7 6d 6b 36 18 ff 07 01 a4 78 35 53 b4 e0 c8 6e fb 38 79 b5 38 07 d8 c2 c5 b6 4e 85 b0 b6 14 c7 92 11 a0 5f b0 40 bf 98 c7 c3 b0 85 99 d0 38 d7 a5 05 05 05 e6 c2 a1 b7 91 48 e6 f4 c7 82 ff d8 f7 Data Ascii: 4000u<]zz1R~bn5fyL&?re\|nP@eE+TFl"o/,oAaf^\Y@:$oAa-dA[\q! ^<mk6x5Sn8y8N_@8H
2022-03-15 16:09:10 UTC	14087	IN	Data Raw: 00 ce 0f f0 a2 2e 0d 0a Data Ascii: .
2022-03-15 16:09:10 UTC	14087	IN	Data Raw: 34 30 30 30 0d 0a 37 eb fe c9 cd 07 e0 cf 46 e3 bb 76 d8 22 03 b2 92 61 12 60 6a 50 76 11 9d 18 7d 1e 0d 56 e7 fa 4d 0f 0c 65 ff 3d e0 12 d5 0a 47 18 80 d6 e1 d7 db c9 ba 88 b6 b8 96 f3 df d3 06 e8 6e 4e 95 0d 0f 53 84 92 6f 18 8f fe a4 e6 a1 b8 43 ab 97 e3 1e ff 5f ef a1 2e f7 70 b6 9b 52 76 4b 57 ac ef b4 ac 7b bf 9e 76 35 93 0d be 14 e7 1e 55 7f 24 a7 12 7e c6 bf 95 5d 80 7b fa 20 6e a5 d9 12 72 a8 26 4c 86 ef 6b 3d bf c6 b6 49 42 46 58 7c aa cd 6b 6a 3b 3d 05 63 6a 16 50 24 e4 6e 48 56 1c 10 2b ca cc 4b 39 a6 8d 2b bc 28 95 97 92 4a 44 a3 58 7b 04 44 91 1c cd fc 58 05 ee db 1d 0b 98 c9 8c 1e 80 2e 3c 31 0e 5b 66 ee 4b f6 bd b2 45 84 1f c1 80 67 3b 0d ee 9b 2f 45 d9 3d 5a 50 34 68 7c cb 32 0e 61 28 fa bb 91 ae 64 21 11 e3 90 a7 56 97 1f 38 cc 19 0f 48 Data Ascii: 40007Fv"a`jPv}VMe=GnNSoC_.pRvKW{v5U$~]{ nr&Lk=IBFX\|kj;=cjP$nHV+K9+(JDX{DX.<1[fKEg;/E=ZP4h\|2a(d!V8H
2022-03-15 16:09:10 UTC	14103	IN	Data Raw: a0 21 7b b1 63 04 0d 0a Data Ascii: !{c
2022-03-15 16:09:10 UTC	14103	IN	Data Raw: 34 30 30 30 0d 0a 74 5c ee e5 28 21 10 90 83 bd 97 88 ad 59 27 4b 8f 3d a7 48 2c 78 9f 46 d7 9d 10 c3 82 3d 4f a5 97 8f 4a 80 bd 10 f8 aa f2 d5 61 a4 9d 00 90 ea ce 58 ce 56 42 5e 4c dc ba 6d 00 24 47 e5 e0 1e f1 64 c2 9b fc 85 7b d9 76 e9 ef 11 c9 74 6b 70 6e b3 d5 fb ec fa 9d 8a 12 9b 79 63 06 07 a9 33 f5 08 e2 06 d9 1d f4 bd f6 0c ac 78 b5 f3 aa 2b 99 94 d2 c0 d2 71 68 49 3f 55 b7 44 03 7a b8 90 fd aa ac 7c 41 fe 20 be 10 39 b2 bb ce 50 e1 13 e9 c5 2f 06 ed f5 d5 c4 1f c1 36 ec bb 9d 82 d5 aa 97 34 b7 2d cb ae 7a 85 42 00 21 6e 48 17 2e 85 7f cc c7 d7 9a 31 b7 1a f9 ed 7a 69 a7 34 dd 2d 87 53 b5 7f fd 94 7a 95 38 37 3e 7b b9 2a 28 3a ff e6 2e 1f d6 4a 6e a3 9a 77 71 15 cd 22 21 a6 4b 4c f9 9b 34 e8 c0 7a 0f 97 69 d6 c5 78 c9 37 12 5e a2 0d 21 ce 16 bf Data Ascii: 4000t\(!Y'K=H,xF=OJaXVB^Lm$Gd{vtkpnyc3x+qhI?UDz\|A 9P/64-zB!nH.1zi4-Sz87>{*(:.Jnwq"!KL4zix7^!
2022-03-15 16:09:10 UTC	14119	IN	Data Raw: ba b6 18 37 c5 9a 0d 0a 34 30 30 30 0d 0a bd 2b 8b 03 3a 9e b2 ab 94 79 d1 74 bc ae ba 12 9b c4 80 f3 a0 2a 65 e1 38 de a3 f1 0e 98 d2 43 08 e5 62 95 24 21 a6 96 d7 4d aa 19 45 05 2f d1 62 18 75 e5 91 1b b7 35 27 7a de 67 31 94 87 32 7b dc 5d df 22 bb 2f b1 74 2d 5d 3c 90 bb fe 2c f2 32 8e 11 4c 7f 36 67 d2 33 a7 b1 a3 8e eb 4e bb 42 2d 16 bb 99 c2 66 0f 7e e6 bd be 57 23 6d 03 97 a7 55 f3 3b a3 09 bb 8d 2e 8c d5 95 52 2f ad 0d c7 74 eb b4 cf 52 5a 7b 65 08 a8 64 cd 2c 66 48 97 d4 64 48 21 80 6b e6 eb 68 dc 64 bf 63 66 5f e2 b7 ec 8d a7 4b 71 77 77 e9 ba 64 0a 1b 5e 6f 0c ac 9c 56 6d fa 95 45 cf fa 68 7f cd 7e 66 cb 19 6b dc d4 6e e1 35 a6 51 a3 1a 7e f3 b1 b0 77 fd 53 dd 9d b6 ff e3 52 4d 44 bd ac 3f 6f 04 c1 e3 87 6b f5 91 4e 79 dc f4 43 66 63 1c 34 b1 Data Ascii: 74000+:yt*e8Cb$!ME/bu5'zg12{]"/t-]<,2L6g3NB-f~W#mU;.R/tRZ{ed,fHdH!khdcf_Kqwwd^oVmEh~fkn5Q~wSRMD?okNyCfc4
2022-03-15 16:09:10 UTC	14135	IN	Data Raw: 85 22 67 12 58 44 f3 ce b5 cf ee 5b 93 20 0d 0a 34 30 30 30 0d 0a 77 f3 20 df 55 06 b2 bf e2 e9 46 c3 f6 5d 8c cf 5a 81 a8 d3 5f 47 40 6c ab 6c f1 8f ef 52 9d ac 28 d3 6f a4 cf f7 46 80 d7 cc 82 fe e2 1f 6a 7f af 45 eb 69 31 66 e8 e8 6d 50 c2 d9 ed 54 66 4b bb 82 b5 73 8b 2a 76 15 2b 79 62 8b fd cf 49 4f cd e9 ce 51 02 44 32 5b 64 ce 05 32 52 d3 46 86 89 1e 23 24 de c1 1e 7c a7 81 60 92 d6 80 d8 6a a9 90 13 88 ea 87 43 67 f3 01 22 ae 07 72 6a 36 65 cb 45 41 74 3d 1c 99 67 91 17 7a 64 29 b2 fc 5e 07 17 db c9 0c 43 45 fd 1a f3 0f ac ca dd f7 58 f8 94 37 12 43 b4 83 26 dc 55 a9 f8 ef e8 2d 91 85 c0 79 34 d6 5b 0d 09 88 0c 0b 8a 5d 05 a3 d5 6e dd 61 b2 c3 44 29 0f b1 a0 f7 40 dd d3 96 e8 d9 82 f3 fc 69 84 e3 9e 03 ac 52 81 40 95 7f 6e 29 2f 50 40 06 70 93 90 Data Ascii: "gXD[ 4000w UF]Z_G@llR(oFjEi1fmPTfKs*v+ybIOQD2[d2RF#$\|`jCg"rj6eEAt=gzd)^CEX7C&U-y4[]naD)@iR@n)/P@p
2022-03-15 16:09:10 UTC	14151	IN	Data Raw: c6 76 b9 e8 8c 21 0b ce c9 6a 81 c7 98 1c 4e 77 ad 4e fa 64 ad 1f 0d 0a 34 30 30 30 0d 0a 47 5b 37 96 a6 81 73 56 50 7c c4 23 e4 28 20 e7 45 12 e7 5b ba 80 e0 c8 ee 56 f6 28 bc 3a 1f 24 d9 c0 2a 33 87 a6 6f 2e 22 6a 93 d1 43 e3 5b f2 5e b5 1e 37 f2 e7 1c 16 c3 be 4e cc 9c 1a d3 b7 5f f6 e4 96 e1 0e 99 f3 bb 8f 36 be 75 89 5f 9b b8 71 a3 28 3f 11 34 29 6d 17 b1 d2 51 fd 57 ad 94 5f d7 35 8f ec b6 a8 c3 1f de b3 0c df 28 86 b2 da a8 a5 6b d1 cb af d6 ad da 47 e7 ed 05 51 f4 0a 79 cd f6 98 b9 23 68 83 4d aa 2e 0d 59 c3 eb 5a 3f 5f 4f 8e 40 19 fd 3f 1f 6f 6a d1 75 89 8b b4 46 f2 43 5a 02 19 c9 eb 5c fd a4 37 e7 b2 f7 b7 2e ec 5c 39 ea 22 61 d9 a1 33 f8 f6 d6 53 fe c7 98 71 28 94 05 2c 71 fe 7f e2 c7 a2 3d 2e 2b 23 25 ff 8f 61 51 f1 a5 bf a6 47 b9 6b a1 d0 b2 Data Ascii: v!jNwNd4000G[7sVP\|#( E[V(:$*3o."jC[^7N_6u_q(?4)mQW_5(kGQy#hM.YZ?_O@?ojuFCZ\7.\9"a3Sq(,q=.+#%aQGk
2022-03-15 16:09:10 UTC	14167	IN	Data Raw: c5 a0 a3 5d 6f 1a 1f e1 ef 92 91 90 5b d1 5f 48 97 14 b8 43 e4 b5 eb 9f 43 02 ab 1c 66 13 0d 0a 34 30 30 30 0d 0a 1f 35 e0 7a cd 18 9a c2 e5 c2 de 57 48 e2 39 8e d1 c5 5a a0 62 63 c9 df 0f bf 2a 06 71 a5 7a c8 16 3f 78 fc b3 e6 51 79 94 04 8a a5 f5 59 bf 69 89 d1 e1 d1 e5 f8 bb c5 96 f8 90 5a 2f 67 bf e0 dc 11 75 2f e7 37 43 5a c4 e6 4d 44 92 99 f2 6d b2 7d 4c 3a 87 76 57 e8 24 a0 14 1e 24 4a 68 70 33 03 02 c2 b1 5e ed 2b 18 47 ea dd 14 73 e8 f0 0d 47 e1 97 c6 7c b7 43 96 88 fa b9 2b 7f e1 81 c2 d7 49 6f 1f 59 cb fe a8 5d cb 80 53 01 5a 96 ca aa 75 27 69 2d 5d 06 f1 82 b7 9e b7 5d 22 63 a0 b5 6b 72 f8 70 50 51 72 76 0b c2 41 c2 bb 46 23 e7 c5 48 34 da 8f 0f 2b 19 87 3e 00 1b 4f 2a 09 02 25 43 c6 87 61 f0 f7 e3 fa 85 59 35 c2 cf b2 2f 57 76 32 c6 57 98 a5 Data Ascii: ]o[_HCCf40005zWH9Zbcqz?xQyYiZ/gu/7CZMDm}L:vW$$Jhp3^+GsG\|C+IoY]SZu'i-]]"ckrpPQrvAF#H4+>O%CaY5/Wv2W
2022-03-15 16:09:10 UTC	14183	IN	Data Raw: 08 c4 64 23 62 e2 c2 3b be 65 6d bc 6e 4c 61 a7 9c 1b 13 d7 7b a0 09 4c 4b a3 22 89 04 a3 38 5e 31 05 f3 37 db 21 0d 0a 34 30 30 30 0d 0a fd 5d 64 0e e4 c0 8b 07 ee 1d 31 4c 7e 56 22 80 1e 71 62 4d 98 5c e4 bb 4b fb 5c b4 87 44 12 07 b2 ae c1 e0 5c d3 3c 16 83 4e f5 22 22 f5 a3 51 f9 6a 9d 9f dd 92 bf 60 7e dc 03 b8 c1 79 65 f5 fa ae 5e 22 cc f0 1a 54 f3 31 3c a8 3d a4 e6 5b 09 25 52 62 f9 10 e9 3c ce 36 2c 87 5f 56 6a 5d a2 8d d8 6c 38 44 a3 ed 62 fc f6 6a 8f 0f 47 91 6d 21 ad fe 7e 9c cf 34 68 f1 71 02 3d 9d 24 73 db 83 8c fa 15 47 d6 2d f3 43 8a 3e 88 20 64 ec c4 82 89 2d 4a 63 c2 c2 45 cf 8f 23 a5 53 47 e6 33 e7 76 1a d3 7b a1 86 06 4c 32 a4 6e 7f 9a 9e e9 a8 93 c7 05 7b 84 19 ed 72 41 74 8c 85 19 49 ba 2d 97 62 97 4d ec 64 a8 2b dc fc 01 a9 62 e5 55 Data Ascii: d#b;emnLa{LK"8^17!4000]d1L~V"qbM\K\D\<N""Qj`~ye^"T1<=[%Rb<6,_Vj]l8DbjGm!~4hq=$sG-C> d-JcE#SG3v{L2n{rAtI-bMd+bU
2022-03-15 16:09:10 UTC	14199	IN	Data Raw: 96 c3 e7 7b 8f a6 ab f8 09 78 75 ff d3 ca 16 fd b8 e1 31 92 e1 38 da e4 cf 8b 45 05 1b d7 ae da 66 6f 3e dc 16 e9 d6 e8 be 1d 0a 8c 64 88 0d 0a 34 30 30 30 0d 0a 4d 21 d9 2b 99 85 36 b3 12 e3 3c 72 56 d3 96 37 25 c5 28 3d 6c 6a 01 dc d9 b9 17 3c 27 52 b1 e2 d0 96 9d 94 3d 33 95 c2 49 49 35 d7 99 65 a4 7b 5e c9 d3 69 8d ba 64 8f 25 6f 6c 40 91 f4 45 8b 3f 67 40 fc 05 8a 75 20 5b 9c 25 d6 fc a2 35 1c fa 74 c0 39 34 8c ea 51 4b db 48 23 13 dd 73 9e 9c d6 8c 7e 5d 30 cd e9 ca f9 d9 e3 ac c5 65 60 4f 4a 25 b0 bc 68 87 ff 9d 71 1d 9d f6 ff 73 29 4c 7a b5 3b 5a 1c c5 8b f1 4a 67 ed bb de 2b e5 f2 bc d6 44 38 3c 98 b9 e8 d8 da 8d f8 fd fa 44 1e 53 ca 3e f1 32 e5 e9 05 8c 62 48 67 33 e5 de 42 36 96 a9 6a c7 4b a1 a4 fb c4 89 83 a0 b6 e5 68 e2 2e 99 ce 0b 72 34 e4 Data Ascii: {xu18Efo>d4000M!+6<rV7%(=lj<'R=3II5e{^id%ol@E?g@u [%5t94QKH#s~]0e`OJ%hqs)Lz;ZJg+D8<DS>2bHg3B6jKh.r4
2022-03-15 16:09:10 UTC	14215	IN	Data Raw: 93 11 68 7b cb c3 7f fe 33 49 fe 97 5f fe 2a a0 3e da da 9c 5d d4 86 b8 3d 13 02 3f 3b 38 9b d0 2e c7 87 04 d0 9c 60 8d 80 52 fe d5 14 50 8e 44 c9 11 d6 f7 a0 25 0d 0a 34 30 30 30 0d 0a e1 53 de b7 cb 25 7f bf 0f 71 bd 95 c1 c6 2f ab 4e dc 45 8b df 8e 62 33 a1 5c c9 2c 27 86 e4 bd 1a 4c 1f 22 3c 05 1b b1 c7 66 8e b0 f7 6b 89 ec 2e 12 b7 b4 3b 6b ff c5 b9 d1 c8 d1 7a a7 1e c9 b6 91 60 b4 a0 c9 94 87 e4 e1 01 f9 ce 12 dd 4a 1a fa a6 b8 9e 34 f8 ab aa a2 ca cc 85 a1 46 86 af 4e 19 70 e5 c3 87 1d 07 6a 6c 70 b1 9d ac 61 1d 47 28 78 06 fe 5f a0 2a ba 42 f6 4b c6 65 1a d1 b7 be ac ab 40 9c cc fa be b8 5f 68 61 7b c1 e0 ea 2a b7 6b 80 e7 ad ca f3 7c 56 49 e6 08 c9 79 7a 7c 7e 2d e3 36 dc 90 48 2b 5e 04 f0 38 07 92 3c 3e dd ab 2e a6 79 4a 8c 7c 18 ff 6f 02 e8 a3 Data Ascii: h{3I_>]=?;8.`RPD%4000S%q/NEb3\,'L"<fk.;kz`J4FNpjlpaG(x_BKe@_ha{*k\|VIyz\|~-6H+^8<>.yJ\|o
2022-03-15 16:09:10 UTC	14231	IN	Data Raw: 15 97 ea 08 3c 77 0d 9e d2 14 82 cb a6 18 86 d7 60 42 7e eb 2d 1b 54 c6 03 3a 99 6d a7 69 27 a0 d1 50 9d 56 a0 dd 8b 6f f1 94 47 af 1e ca 55 80 fd 9c 19 eb 85 fa af 16 31 36 ac 13 1c d8 0d 0a 34 30 30 30 0d 0a cd f8 b3 dd 93 3e e0 c7 7e 9e d7 9f 53 fc 61 4d 76 19 a1 cb fe 70 2f c1 27 d8 b3 19 67 bd 01 31 66 5c 78 09 32 56 16 7c 9a d1 42 64 25 39 89 92 58 85 08 6c 1b 8c ad 24 02 6f b0 5c 61 49 01 b8 5d 4d 14 34 e4 62 1e b2 e4 2d a6 e4 a3 dd 7f 22 fc 38 a8 b5 7a 3b 7f c4 94 69 50 89 38 50 4a fe 8b 2a fb 79 b8 7d 7c da 5e 9c 33 a7 55 aa b6 12 05 30 fc 34 6f 41 82 5f 98 29 2a 10 71 71 fd 9c a3 e5 65 dd 2c e7 26 c7 e2 b7 30 a0 8c 62 f1 ca 71 a1 23 6b 4b c8 af 4f d3 5d 10 5f 13 55 73 df 1f 48 83 ca 8b d4 55 76 40 25 7d 52 3e 44 68 d8 33 20 c4 d8 62 57 be 6b f3 Data Ascii: <w`B~-T:mi'PVoGU164000>~SaMvp/'g1f\x2V\|Bd%9Xl$o\aI]M4b-"8z;iP8PJy}\|^3U04oA_)qqe,&0bq#kKO]_UsHUv@%}R>Dh3 bWk
2022-03-15 16:09:10 UTC	14247	IN	Data Raw: c9 73 db 1d a9 af 53 0a e4 58 11 bc 4c 42 f3 98 2d 20 7d 3e 7b 6e ca 1b 0b 89 43 dc 01 93 13 2a 52 9c fd 3b 03 32 38 91 59 d1 7e 37 eb 8f 56 75 7e f5 55 9b 8e 39 f9 09 ad 37 a5 da eb b9 ae 37 6d eb 08 92 18 59 0d 0a 34 30 30 30 0d 0a 05 9a 6a db 8a b8 ca af 86 80 bb 37 2d 91 5b 6b 3b 9a 5e 5a 52 ee d7 88 e3 65 00 2a df b7 aa 0d 27 dc 9b 20 ae 17 b6 45 2d 0a 84 30 e6 e0 31 96 6b 89 7a ba d2 48 f6 70 08 f3 3d b9 16 c1 a6 9b b5 c3 ba 08 5f f8 0c a7 59 95 c6 0a fb fd c4 da f8 8c 8a b1 ac 3f 9d d4 f1 71 00 c3 74 96 49 02 d7 97 99 68 b4 5d d1 d9 6d b9 12 84 ed 21 f4 46 8e 81 8d f9 2a f4 11 41 28 73 15 f9 ac 37 66 96 d5 b7 3f 7b 20 1a a2 b7 5b b6 3d 86 3a be 61 b8 1e e5 e4 d3 d4 5d b4 d8 36 09 41 81 df 0c 2e 0f c5 56 d2 04 97 8f f8 21 0b a6 b0 32 b4 87 ee 3e 24 Data Ascii: sSXLB- }>{nCR;28Y~7Vu~U977mY4000j7-[k;^ZRe' E-01kzHp=_Y?qtIh]m!F*A(s7f?{ [=:a]6A.V!2>$
2022-03-15 16:09:10 UTC	14263	IN	Data Raw: 09 8d 28 7d 69 64 b4 69 a2 8d e4 a7 c0 d1 01 29 e7 93 d0 1e aa 9f d1 bd 16 be c0 b9 61 08 4e 45 ab a6 94 18 b1 53 5a a9 49 55 87 7d e4 09 70 9c 27 f6 85 60 05 7d 3b 41 08 37 de d3 6a e7 a1 d8 bc 35 73 94 56 49 44 6e f6 cb 63 57 7f 45 0d 0a Data Ascii: (}idi)aNESZIU}p'`};A7j5sVIDncWE
2022-03-15 16:09:10 UTC	14263	IN	Data Raw: 34 30 30 30 0d 0a 1e 55 c3 2a ff 47 7e 8c b2 7f f3 05 53 80 e7 67 90 54 80 4e 71 d5 a4 45 b2 4f 4e fc b2 b0 70 b5 00 9f 05 68 e0 bc 04 b0 6a a1 62 08 15 b5 90 94 c7 6a 91 ee e4 3f 1b 93 22 94 9d 0e be 16 4f b7 c0 5c 57 fa 43 f2 c0 69 00 e4 dd 8a ea 34 1b 5c 99 62 36 83 a5 68 ff 6f e6 00 a7 68 f7 71 64 42 c6 1c a1 be 4f 87 56 34 bb 8c ef 70 a1 3a 83 56 a1 78 44 6f bb ed 42 ec c2 04 77 88 23 f8 56 41 34 83 51 fd 8d c5 ae f9 41 82 98 49 f0 39 21 ab be 5d ea a3 00 31 64 8a f9 56 53 02 4e e2 28 4d 10 19 f9 d0 55 b5 c6 9f 46 2c 45 01 80 ba 46 b8 5c d2 fd 01 c6 6f b0 bd f8 38 52 50 0c 4f b5 1b d2 43 20 3d 26 6f 16 15 86 ef d0 89 49 28 d5 83 bf 52 7e ab dd bd f2 39 5e ed 0b d1 17 5e 0d fb 08 e0 bb 8b 15 4d 2b 75 39 14 e1 93 3e 51 c3 ee 3a 73 69 95 1c cd 66 21 3e Data Ascii: 4000U*G~SgTNqEONphjbj?"O\WCi4\b6hohqdBOV4p:VxDoBw#VA4QAI9!]1dVSN(MUF,EF\o8RPOC =&oI(R~9^^M+u9>Q:sif!>
2022-03-15 16:09:10 UTC	14279	IN	Data Raw: 19 54 4a 89 10 c2 0d 0a Data Ascii: TJ
2022-03-15 16:09:10 UTC	14279	IN	Data Raw: 34 30 30 30 0d 0a 38 ad f6 79 14 d3 d6 56 77 fd 9d a3 72 8f 05 31 f0 a4 41 44 61 cb c5 3d 81 06 f5 39 90 e6 4d f0 71 ce aa 98 c5 93 97 bc f9 4b 72 4c d8 96 79 50 ee 70 b2 47 08 99 78 1b be a3 43 48 2c 7d 27 48 23 a1 2f b3 bf 79 ae 2e 71 0c 95 30 46 12 92 53 8c 39 f4 1c 85 d8 5d 43 b0 19 8c 94 4c 86 0e 1d 0d ba cf 57 eb 40 8b 0c f4 17 1b 59 2b f3 95 d6 e4 ea b0 c0 62 35 c8 b5 bb bb 22 52 5c 64 94 6c a4 70 98 3e 12 85 08 5c 44 f3 27 11 a0 25 8f b7 19 3e 61 e4 bd ec 81 9e 7e 08 b9 f0 10 9e ef 8c be c7 28 ba 0c 6e 9e 8c 53 6d 7b 1c 92 aa e7 49 75 61 a0 f8 45 84 bc 4c c2 bd c1 e8 b9 84 68 95 d6 7f c1 50 4a b3 39 eb 6e c7 ea 53 cd 84 f6 08 7b 96 65 85 ca d7 67 ca eb 05 f8 f2 aa 75 57 00 22 19 35 fa ed e9 d1 ef df bb 37 1a 5a fd 56 b0 9d 36 98 58 58 85 1d 1d 82 Data Ascii: 40008yVwr1ADa=9MqKrLyPpGxCH,}'H#/y.q0FS9]CLW@Y+b5"R\dlp>\D'%>a~(nSm{IuaELhPJ9nS{eguW"57ZV6XX
2022-03-15 16:09:10 UTC	14295	IN	Data Raw: 25 2f 1a be 49 f9 0d 0a Data Ascii: %/I
2022-03-15 16:09:10 UTC	14295	IN	Data Raw: 34 30 30 30 0d 0a 4a f0 6f 90 21 69 93 3d ee 0c bb f8 65 9a f5 49 03 d7 2f f1 f9 e5 65 52 eb 02 a7 f3 3b 83 66 16 8d ee 77 1b 5d 38 c6 28 2f d2 a7 07 99 34 36 3c be 08 80 92 15 4c 64 58 7d 7e 90 3d 4c c2 a2 1f e2 b6 e1 b4 39 c0 58 79 3f 20 5d f9 4f 90 cf 00 4f e2 3c 7e a7 0f 64 18 6b f6 6f 69 3f 61 33 07 10 26 b1 bb ec dc f4 7a 24 40 ba 31 11 1c 45 53 46 b1 87 bb 5e 90 10 19 93 70 d9 40 4f fe c3 6b fe fc 3b 58 6e 92 47 00 e9 b3 f2 87 27 97 ce 20 82 6d 59 c8 18 53 d0 5c 16 9b 97 56 72 03 3f 13 be 0b 0d 45 0b 24 77 df 65 1d 55 e4 1f 92 d4 80 eb 7f 29 f7 ae 32 9c 76 86 f1 c7 eb 36 9e 04 4e ef 54 93 bc 74 c6 f9 92 75 d8 61 5a 6d ee 82 f9 ff be fa ee bd d0 b8 5c 6c 82 ba 95 1e 61 8a 60 7d be 98 c7 09 78 c6 9e 76 18 0f 85 06 fe 90 f0 70 cc 4d 86 01 bb 1a 30 53 Data Ascii: 4000Jo!i=eI/eR;fw]8(/46<LdX}~=L9Xy? ]OO<~dkoi?a3&z$@1ESF^p@Ok;XnG' mYS\Vr?E$weU)2v6NTtuaZm\la`}xvpM0S
2022-03-15 16:09:10 UTC	14311	IN	Data Raw: 99 cb da 59 09 f9 0d 0a Data Ascii: Y
2022-03-15 16:09:10 UTC	14311	IN	Data Raw: 34 30 30 30 0d 0a 91 2b 6b a2 40 c0 d3 b7 a8 0b dc 40 83 ee 8c c6 aa 17 8c af 7f e2 f0 d4 ee 7f 43 ae 3e 8d aa a0 3c 94 d1 37 fc 7b 53 e1 e2 74 a7 4d 6f 66 11 6c a9 d4 ea 5e d8 f6 d1 41 f1 bf 68 88 81 b8 bd 16 2b 79 32 ed ab b5 41 3a f7 4e 3c 77 f0 72 8c 8d 60 d8 70 39 47 db f3 45 37 64 ed b4 8c ff 1a 11 2f 2b a8 8d c6 4b aa e6 4b e0 44 0e df ad 41 eb 43 13 57 5e 79 48 ea b7 da df 07 5d 63 04 5c b6 4b a0 42 02 55 0e e6 2b 96 b6 9f 3c e1 ee f4 3f d0 7f 50 08 ff 8b b0 32 09 70 e5 3d 19 49 8f 69 bd e4 14 e7 e4 26 42 8c 69 34 26 54 fa b6 67 47 c6 c8 08 88 b8 06 ba 35 85 19 8c ac 19 a0 91 59 ab f3 8a 24 b3 5c 19 8e 1b 38 b2 f3 61 c1 df 7c ca 85 99 76 ff 1e 3e 3b 9f 0f bb 0b e2 15 9d f3 56 91 5f 9e 22 2a 6b 5c 37 08 8c 6f 4f e3 f6 83 41 bf aa cb bb 89 ca e6 82 Data Ascii: 4000+k@@C><7{StMofl^Ah+y2A:N<wr`p9GE7d/+KKDACW^yH]c\KBU+<?P2p=Ii&Bi4&TgG5Y$\8a\|v>;V_"*k\7oOA
2022-03-15 16:09:10 UTC	14327	IN	Data Raw: 46 9e 5d f2 f2 29 0d 0a Data Ascii: F])
2022-03-15 16:09:10 UTC	14327	IN	Data Raw: 34 30 30 30 0d 0a 23 fd f8 fd b1 db ce 8b c0 bf 35 7f ea c2 c9 29 85 1c 81 29 5b a5 fe 04 66 ca 17 19 fd c5 ab 3d af aa 41 32 3d 4c ea 39 3b e8 47 30 cd 41 a5 f5 2a af d4 b3 bc f1 03 1b b8 9e 2f 9e 96 d4 09 3d c9 92 1d cd c7 13 5e 14 53 89 b2 f7 5a b8 c9 2a fa b3 8f e7 bb 76 23 37 37 bf ce 5e 27 55 28 a7 38 c3 1b 0f f6 8e 0c 0b f9 3a ce 14 42 95 90 ee ab bb 4e d3 ab bd 17 ac 99 33 6f 0e 20 63 04 93 45 d6 f4 28 7a 5c f8 66 52 97 0c f9 80 54 b8 aa d8 28 67 a9 85 4e 2b 4e f5 71 d2 bc 4c 41 a7 c5 55 bb 22 fe b0 12 2a 4d 00 af 39 7c 61 28 86 75 32 52 7a c4 ba 14 36 59 cc 0b 9d 63 a0 6e c9 da 68 0f ec a8 65 5f ca 26 d9 34 db 26 9d 13 d7 9a 99 c1 33 7e d9 5f af 1a b6 3e e0 ac 8a 16 73 81 9a 09 e6 2d 3c e1 02 7b 9f 10 be a0 81 1b f5 e7 20 0f f3 68 e4 ae 76 b0 9f Data Ascii: 4000#5))[f=A2=L9;G0A/=^SZv#77^'U(8:BN3o cE(z\fRT(gN+NqLAU"*M9\|a(u2Rz6Ycnhe_&4&3~_>s-<{ hv
2022-03-15 16:09:10 UTC	14343	IN	Data Raw: 3d f5 28 29 ab 54 0d 0a Data Ascii: =()T
2022-03-15 16:09:10 UTC	14343	IN	Data Raw: 34 30 30 30 0d 0a 90 cf de 65 4f 0a 87 71 63 f8 df 57 6f f5 b2 d2 a2 ff 23 6b 58 f6 50 31 52 ea 93 b6 1d a9 18 07 3e 34 9f ba 78 9e db 4f 70 10 04 b7 55 94 8a 4a 24 87 de 53 0c 47 86 c0 41 7e c7 86 a4 2f 30 48 8e 88 88 ba 25 0b 11 15 84 8a f8 86 94 75 c7 8b 63 d0 fb bc f0 77 8f 1d fc 7a a7 5d 50 b8 dc f7 fa 80 f7 99 85 b6 2c 96 22 c3 df 7a a5 17 b4 a2 5f dc 11 88 de 59 10 9b eb 31 6e b1 1d fc 53 6b 01 16 ef 00 45 a6 f3 79 98 6d 10 74 78 52 e8 97 26 77 d2 e0 21 8f bc 44 da 9b 2c 3d 90 cb 12 9d da ae d0 a9 13 fc 48 4b 7a d8 1a 93 22 78 70 af 80 57 f7 c4 d6 d6 41 6e ba fb fd 1b 9c 28 74 ae 47 8d e7 97 26 2a 50 64 d1 7c 6d d2 a9 fc 6e 04 53 97 c0 ad c9 07 04 d5 45 2d 08 4e 45 ef df 66 c0 3a 45 cf a1 91 24 bd 56 e8 5b 4e 18 ca 63 c3 05 17 34 0b 81 71 52 cf 5a Data Ascii: 4000eOqcWo#kXP1R>4xOpUJ$SGA~/0H%ucwz]P,"z_Y1nSkEymtxR&w!D,=HKz"xpWAn(tG&*Pd\|mnSE-NEf:E$V[Nc4qRZ
2022-03-15 16:09:10 UTC	14359	IN	Data Raw: 52 92 51 cd 97 db 0d 0a Data Ascii: RQ
2022-03-15 16:09:10 UTC	14359	IN	Data Raw: 34 30 30 30 0d 0a 0b 25 eb 1d f8 ca 95 4e 0c f9 e3 02 93 e1 d9 1f e5 18 34 67 08 9d 96 24 63 2a 89 a1 ef 80 d2 df 16 cd 9d ff b0 3a f0 9a c9 cb 26 a6 5a 24 57 e4 95 87 80 c3 bf 9a 6d ad cf cd 40 6d 71 68 71 4a 11 81 ec 97 22 70 31 fc 1e ac 6f 44 d2 b0 b0 cb c7 ab bc 9f 57 94 ce ed df 67 b9 82 5b f6 ba 3c 83 1c c0 d6 df ce 9a ab 6b e9 95 56 c9 0d 1e c6 12 90 c7 13 d0 01 26 b3 79 fa 02 01 81 1b 29 55 9f 9d 9c 4a 76 49 79 10 7c 62 2d 28 a5 8e 2f 03 c6 50 ac 3a c0 64 55 dc 57 49 84 a1 62 c4 65 0c b4 95 1f fa 50 c3 72 9d 0f 9f e9 27 89 dd e5 1e 13 90 5e e1 78 01 77 ec 8d 8c 23 8c 43 e9 3a 68 15 7c 82 8f ff b7 f1 6b b6 31 d1 7b c5 5a d9 e4 46 0d c0 10 b4 5a 8d 2d bc 8a a3 69 2e e7 1c 10 cf 07 7b 43 7e 20 1d 77 20 3d e9 8f 8a 16 28 04 aa af 06 5e 36 f7 45 16 60 Data Ascii: 4000%N4g$c*:&Z$Wm@mqhqJ"p1oDWg[<kV&y)UJvIy\|b-(/P:dUWIbePr'^xw#C:h\|k1{ZFZ-i.{C~ w =(^6E`
2022-03-15 16:09:10 UTC	14375	IN	Data Raw: 8b 38 d0 c1 50 43 0d 0a 34 30 30 30 0d 0a b1 2e b7 c0 cd 70 17 f7 b7 63 58 96 01 80 80 3e 85 3c 05 43 e9 4d ba 1e ff 13 be a0 cf ef d0 b3 a9 37 f9 ed 57 75 b0 68 e4 38 f6 ff 35 7b 51 40 3a a7 6f cf 35 1d 0e eb 06 e1 48 78 83 7b 37 8f 57 a3 97 34 ae 01 99 1f c7 75 ef 8d 0d 91 71 be e1 18 8e cc 2c 8b 14 e8 56 f5 02 ce 70 b8 38 af 9f 1d 05 2d 43 33 6a d9 5d 41 4a 14 9e 19 f0 e5 6d 87 65 14 8d 81 51 70 a4 6c 83 b6 c6 43 36 34 36 32 69 b6 98 04 1c 1a 10 ab 7d cc 57 82 4b cc 68 83 f6 7c 59 5f af cb 8d b5 1e 9e 95 23 c0 7f cb 3a 59 c6 53 f5 d8 32 86 b4 ee 5e 5a 4d 03 75 b9 3a 9a fd 0a df dc 8b bd 04 a9 c7 de da 95 f4 b6 e6 53 e4 1b 7b 7e 36 05 e6 f4 eb 55 af 62 96 ec a1 80 c4 f5 9f fd c4 a0 ba a7 df b5 d1 a4 8d 7a fe aa 41 e0 b0 0d 2f c7 29 01 e5 a7 10 52 c9 79 Data Ascii: 8PC4000.pcX><CM7Wuh85{Q@:o5Hx{7W4uq,Vp8-C3j]AJmeQplC6462i}WKh\|Y_#:YS2^ZMu:S{~6UbzA/)Ry
2022-03-15 16:09:10 UTC	14391	IN	Data Raw: 19 c8 ad af 4a 90 f5 57 ee 18 3c 4e 12 09 0d 0a Data Ascii: JW<N
2022-03-15 16:09:10 UTC	14391	IN	Data Raw: 34 30 30 30 0d 0a 38 a1 48 9b 87 54 ce 88 c5 9f 6b a8 4b dd f7 e0 99 a6 36 dd 6e ae d9 ae 81 c2 20 bb 12 1e 30 a2 1e 0e 4f 65 49 87 b2 8f e8 3e dc 70 05 f3 c3 ba b1 02 45 91 93 a4 5f 11 ff 8a 68 ef 85 5b d6 ab 70 5d 93 ef 56 77 65 df e6 ce 44 09 bd 20 3f cd bf 3a 9f 70 52 c8 9c 02 67 20 5b 05 28 e4 ff d1 24 79 3e bd 34 a2 5e dc 56 26 67 29 3a 14 b1 bc 66 77 2b a5 96 b0 bd d7 d5 4e 32 87 f4 ae 61 ec e2 49 61 c5 5e fc 0c dc af 77 bf 99 a9 ea 58 6b 48 df 13 f4 31 c1 8f ea 95 55 a6 c1 3d 92 d9 1c 62 92 f5 be 35 13 30 53 30 c2 3f f6 4b 0a cf 65 08 0a c5 86 22 0f e5 c0 46 99 dc 84 9f c0 29 d7 66 c7 f0 5c 60 2c 2e 69 5b a9 44 5f 78 8b 03 84 76 44 44 7a 94 50 f2 2f c4 a9 9a 99 39 e7 df 4c a6 a9 ce c0 70 cf 6f b1 8b 03 ca 23 8e f4 d6 82 6f cd 66 13 f8 90 6d 62 fc Data Ascii: 40008HTkK6n 0OeI>pE_h[p]VweD ?:pRg [($y>4^V&g):fw+N2aIa^wXkH1U=b50S0?Ke"F)f\`,.i[D_xvDDzP/9Lpo#ofmb
2022-03-15 16:09:10 UTC	14407	IN	Data Raw: 84 01 72 c8 9c b9 0d 0a Data Ascii: r
2022-03-15 16:09:10 UTC	14407	IN	Data Raw: 34 30 30 30 0d 0a dc 53 a5 05 75 3f fd f2 64 e0 77 7c 48 b2 e9 7b ef da f2 7c 7a c2 42 88 a3 6c d4 3f 08 76 ef 8c a6 ae 52 8e 74 9c e4 c1 0e 58 e8 75 2a 44 c1 32 3b 11 58 68 3b 61 42 aa 49 40 26 59 42 5d a3 59 37 3f 50 98 8e d0 90 a9 a5 0c ed 83 9a 3a 8d d3 e8 48 6e 0c 4d 2c 6b 50 aa 0e 83 99 b8 03 e5 2f 83 e5 b0 7a 3c 77 4b f4 53 43 6d a4 8d b6 05 5d 02 e9 a0 75 9b 49 46 8d 41 cf 59 e0 17 0a 39 36 4a 8b 97 3f 0f 30 7b 12 8b 64 41 eb 0d 43 01 2c 7a bd a0 0d 87 63 c4 0d 92 33 1a 0a 21 2f 0a 2d 84 85 11 7b 4d 74 36 49 3b 86 c1 e7 41 04 d6 c8 2d d9 92 70 00 95 f1 7a e3 f1 6d 54 e7 24 b9 4e 6d 12 a7 56 7f cd 83 4b 6d 14 76 3a 4d bb 60 49 2b 75 0f 07 73 b1 c2 6b 1f 13 b4 97 c1 74 ad 5b 1f 38 f5 c9 7e 06 39 68 24 1c 6e 37 8b ea fa ad 91 12 ed e0 27 d0 c0 37 4b Data Ascii: 4000Su?dw\|H{\|zBl?vRtXu*D2;Xh;aBI@&YB]Y7?P:HnM,kP/z<wKSCm]uIFAY96J?0{dAC,zc3!/-{Mt6I;A-pzmT$NmVKmv:M`I+uskt[8~9h$n7'7K
2022-03-15 16:09:10 UTC	14423	IN	Data Raw: 7a 44 9a 59 aa bb 0d 0a Data Ascii: zDY
2022-03-15 16:09:10 UTC	14423	IN	Data Raw: 34 30 30 30 0d 0a a3 09 27 10 07 2d 8e 87 d6 e9 79 8f 2b ad 44 9e 12 81 02 48 3b 80 18 db 34 e1 e6 c0 5b 70 27 08 2f 8d 1c 28 7b 75 cb e9 90 5a 9c 49 0a 18 bd c2 0b 8c 98 29 fb 96 47 19 2a a1 ec 7b 93 bf cb 45 f5 bb de ee a4 47 17 03 2c 56 1d da 34 45 56 d0 7b f8 a2 93 38 d2 b7 04 b0 73 64 51 73 32 db 87 8f e8 ee 76 09 73 a8 f3 67 71 02 9a 14 95 29 12 47 c7 d3 fc f5 89 ef f3 4f 0b dd 3c fa 84 27 c5 62 f7 1d b0 eb 31 c9 ef ad 29 c7 8e 91 1f c7 d9 67 a7 04 2f 81 fe a4 09 6f 1a f7 ce bb 2e 4b db 32 28 63 03 57 aa 88 8e 0d e7 85 55 2f 3f 59 b3 7d 96 68 e4 b1 25 51 a4 92 2a c9 f2 62 e5 68 12 e4 48 50 b2 83 d1 81 03 96 29 c1 a1 d5 cb 94 dd 92 ed 39 b9 64 34 16 76 11 31 c8 d7 9a 86 b7 7e 00 ab 78 32 13 35 13 e2 4f d6 d7 7e 20 6b 2f e2 c8 5d 68 dd ff b8 76 c4 95 Data Ascii: 4000'-y+DH;4[p'/({uZI)G{EG,V4EV{8sdQs2vsgq)GO<'b1)g/o.K2(cWU/?Y}h%QbhHP)9d4v1~x25O~ k/]hv
2022-03-15 16:09:10 UTC	14439	IN	Data Raw: 36 bb 8d 76 a9 eb 0d 0a Data Ascii: 6v
2022-03-15 16:09:10 UTC	14439	IN	Data Raw: 34 30 30 30 0d 0a fa 6d a5 8f 48 bd cf 32 f3 21 be bc 07 fd 20 85 7a 6c 8e 2b 4d 29 29 62 ad 0d 16 f2 15 ae b1 3a 4c 87 75 e6 ad ee c8 96 0b d4 11 26 99 78 0c 75 92 a6 eb 9a 65 71 91 44 be 04 b0 1c 52 f2 0a 22 e7 de 6f ec 9d b5 d0 44 43 b2 60 46 ce 98 26 46 59 ec f8 f6 9c 8b 45 d9 bc e2 71 41 d4 c0 8d 54 e7 0d b3 9c b2 c5 88 22 1b 9b e8 ec b8 a6 b2 70 51 02 bf 8a 05 59 50 58 29 28 63 07 5d 6a ab 96 b8 93 7e 48 ee af 0e e0 e6 d1 3f 1f 26 20 55 3a 7d 13 5b 66 99 30 09 2e b9 fa a7 19 ef 77 46 9c 47 27 a8 6b dc 13 1f 55 d4 bc 5c c6 b8 e2 a6 00 96 c7 a3 4c bc 94 cc b6 1a 4d 70 66 77 28 fc 0c c1 35 cd 0e 45 f9 6d ed 02 44 e9 db c7 2a 23 b8 17 8c c6 7b 86 46 52 04 2d 18 28 20 72 98 0e 14 d5 28 87 cd 69 91 ad 47 75 04 90 ee ca 70 dd ea b3 75 f9 95 d7 a6 11 86 66 Data Ascii: 4000mH2! zl+M))b:Lu&xueqDR"oDC`F&FYEqAT"pQYPX)(c]j~H?& U:}[f0.wFG'kU\LMpfw(5EmD*#{FR-( r(iGupuf
2022-03-15 16:09:10 UTC	14455	IN	Data Raw: 83 89 53 65 44 a0 0d 0a Data Ascii: SeD
2022-03-15 16:09:10 UTC	14455	IN	Data Raw: 34 30 30 30 0d 0a bc f0 e6 d0 86 bb 81 fa d9 e2 96 e8 84 ad 24 c5 1f a1 d1 6a f1 0c b8 b1 14 b0 bc 91 63 2a 8a f7 13 a7 58 de 04 cd 63 fb d5 74 d7 9f 98 04 36 f7 ff 39 16 dd 0f eb 9b b0 7e 4b 2d 6a 2d 54 12 7b 6e ad eb 10 85 72 b5 46 2d 7f 05 03 0a a1 d1 01 c9 bc 5b 4e 66 e7 ef 20 0e b4 2e 4d 55 b0 10 dd 55 8c cb 5e 76 32 20 08 39 b5 94 06 46 4a ce c7 2c 19 36 c0 2c 58 b4 24 ca d4 fb d6 a4 19 c3 a0 51 83 e8 6e 1f db 0f 06 f3 77 d1 1f b2 6e 5f 64 ee b2 47 15 c0 22 f1 00 d1 3b 04 d5 d0 0f c4 32 9e ad 52 51 dd d9 0f 8c c6 ed bf 91 de d1 bf ba 9c 9e 70 07 ac e6 11 60 17 91 78 46 de f2 e0 01 1f 2a 76 01 7d 4a eb ef fe 9c fb b8 2c 0a 14 dc 6b f6 09 b3 02 ad de 2b 8c 2c 4e 5f e2 de 54 27 d1 9e 1d 09 34 1b cf a1 3a 52 1d 77 64 ae 6c 63 95 07 03 68 0f c0 be 4f 36 Data Ascii: 4000$jcXct69~K-j-T{nrF-[Nf .MUU^v2 9FJ,6,X$Qnwn_dG";2RQp`xFv}J,k+,N_T'4:RwdlchO6
2022-03-15 16:09:10 UTC	14471	IN	Data Raw: 2f d4 49 02 43 c8 0d 0a Data Ascii: /IC
2022-03-15 16:09:10 UTC	14471	IN	Data Raw: 34 30 30 30 0d 0a f6 6b 2a 68 a1 e1 0b 8d 1c da 92 39 9e c6 86 0d 7f 07 3f 2c 96 8f 00 2b 3b 6f 9a e5 57 f0 1e 1c 41 ce 6b fd 4c a8 de 4d 25 46 ba 31 a8 c9 16 31 1c e4 e8 69 24 da 71 78 cf 07 d6 c3 dc e6 de 60 dc ec 4a b0 b7 ca c5 2b 1e 87 b7 24 80 f9 85 6e 3a cc 0c 30 6f 94 11 7a d5 7d 2f c8 5a 49 f4 71 e8 3c 90 36 23 bd 3a 74 cb d3 e8 93 91 48 8c 77 51 15 8a 71 99 6d e2 13 06 7e 93 cb ce fb 5c 8a 90 93 46 e6 85 09 16 ab 83 53 28 0b de 41 b1 41 f2 5c d1 6a 81 6e ec 97 6e f2 b3 de 29 ed 5d eb 8d ca c8 e4 65 6f 61 1e 50 3a 12 61 10 9e 3d cc 7d 93 99 59 da 86 76 46 69 1a b1 0d 9d e7 67 c4 d7 7f a1 9c c8 98 fe 01 53 8c 91 e7 71 ea b2 dc 8d 13 c6 a7 b4 42 cf 27 87 90 32 de 48 9e 76 91 e5 69 9b e4 49 ab 7e 3f 35 c3 a1 e9 c0 9f c0 1f b9 19 60 32 7c 0a c8 8c d8 Data Ascii: 4000k*h9?,+;oWAkLM%F11i$qx`J+$n:0oz}/ZIq<6#:tHwQqm~\FS(AA\jnn)]eoaP:a=}YvFigSqB'2HviI~?5`2\|
2022-03-15 16:09:10 UTC	14487	IN	Data Raw: 56 91 4d 35 25 eb 0d 0a Data Ascii: VM5%
2022-03-15 16:09:10 UTC	14487	IN	Data Raw: 34 30 30 30 0d 0a 0e 62 e7 9b a0 03 a6 c4 9f ae d1 e0 4b b7 9d 05 3f c0 17 c3 76 fc 64 d1 9d b3 9e 2a 47 54 7e d0 66 e5 3e 7b 12 2e fb 1b 9b 1e bf b8 08 fe e9 e7 3d 9c 0f b2 99 30 09 db 8f 6d 72 4c 58 bf 9e f2 38 0f d0 c4 bc e2 1c 00 18 7c 9c 87 58 c7 16 a0 60 cd 02 c3 dc 31 b2 fc 3a ec 60 12 dd 5e be bb 76 02 bd a9 3a be 02 96 aa 35 7f b2 cb 56 5f 72 c8 a6 4f 9f 6e 53 01 15 9f 79 59 87 59 a1 16 c2 1b ed 89 84 3e 27 d0 d6 92 73 0a 45 6c cf a5 72 0d f7 63 ea db e5 35 71 a4 a7 3f 2d 36 be fa 7d 7c f6 fc ba 9e d8 f3 67 fd 81 99 8e ab 69 ac 19 e6 74 79 b3 88 d9 e6 dd e7 8f 53 ab 73 97 9b 3f 11 34 f1 3c a3 7b 87 4f ae 23 e0 5d e6 8d 52 df 3e 0b cf dc aa 1f d9 09 4d e1 19 b2 81 7f 55 db e7 84 12 0d 0c 71 80 09 8a 9b 2b 4a 02 4c 70 c8 0e a7 6c ea 2f 26 e4 5e 2b Data Ascii: 4000bK?vd*GT~f>{.=0mrLX8\|X`1:`^v:5V_rOnSyYY>'sElrc5q?-6}\|gitySs?4<{O#]R>MUq+JLpl/&^+
2022-03-15 16:09:10 UTC	14503	IN	Data Raw: a7 8c c6 b9 cd 31 0d 0a Data Ascii: 1
2022-03-15 16:09:10 UTC	14503	IN	Data Raw: 34 30 30 30 0d 0a 34 3a 5a f0 c7 d9 35 9b ab 47 f4 da 33 83 67 10 4b 23 63 20 c4 db ca fa 36 49 c2 7d 6f f5 64 f7 ff e6 74 86 d1 21 7f 87 22 8e 32 78 55 8c ff 89 2f 5c a5 e4 62 60 48 31 35 ce 6a 17 0d 7f 3c 97 a3 5c 43 6d 22 db 5a 52 d5 0f 58 2b f4 7c 4a 21 c3 2e 91 a8 56 a1 23 8b 74 8f 8d da 73 60 93 e4 f9 c5 7e ce a7 4b d9 b2 58 a8 47 6b b9 b7 2e 29 2b 84 bc 2d fc e1 be b1 79 fc 85 2f 9f 56 b1 04 34 5d e3 fd 81 57 8e 7f 97 e3 98 2a 9f 59 b8 4c b5 59 f7 45 0b c3 e9 21 02 20 2c a4 5e 32 51 91 41 2b 3a 08 0f c7 d0 e0 48 c1 04 85 71 e5 67 a4 37 8b f1 97 41 5e ee a4 e2 84 aa 7a d3 e9 fc 62 34 b4 d2 97 a0 bd 86 2b 61 b6 26 bf d9 62 2d 76 fd c8 f8 41 78 b9 cd b8 02 1e e4 fc cb b7 4f ec 65 dd 28 f9 b5 60 41 9a 49 0d 75 53 c3 b3 29 a3 83 c7 ce fa 6f f7 ed 5f ac Data Ascii: 40004:Z5G3gK#c 6I}odt!"2xU/\b`H15j<\Cm"ZRX+\|J!.V#ts`~KXGk.)+-y/V4]W*YLYE! ,^2QA+:Hqg7A^zb4+a&b-vAxOe(`AIuS)o_
2022-03-15 16:09:10 UTC	14519	IN	Data Raw: a1 e6 29 1c 9d 1e 0d 0a Data Ascii: )
2022-03-15 16:09:10 UTC	14519	IN	Data Raw: 34 30 30 30 0d 0a 43 c9 33 f8 1e 13 5e 11 7b ba 5a 11 88 cf d4 e2 92 6b ce 80 cf 8e 90 bf 38 c0 6e be cf 1e 59 c7 c4 f7 ce 13 c9 e6 3a b3 b9 56 5f 9f aa ea 1a d6 c3 b9 c5 6a a1 e2 e5 2b fa ee 06 df e6 cd c3 b1 32 53 b0 52 53 f0 73 58 33 39 39 15 1d 4b e1 94 6a 32 27 23 dc 30 93 bf 08 46 54 3a 5b 84 0a 6a ef 17 23 f5 00 3f e0 9a fd f1 80 f7 cd bf af d2 6e ce 85 47 11 30 aa 63 9f 14 05 6d 49 e5 8f 07 69 52 6f f7 a2 2d 8d 53 48 a7 43 20 c3 d0 c2 20 ee 6a 8b 77 52 7a ab dd 0d b4 3b 4f 52 57 dd 20 da 24 d5 e1 db 89 e7 bd 92 db 26 8f 8c b8 d0 de 59 37 8f a9 3a f7 dc 52 bb 77 92 af 62 a9 08 cb 0e 6a 1a 1f dd 00 30 b8 b4 18 cd a3 b5 8b 85 2c ca 00 e3 d3 48 57 8d c9 cc ae 55 01 8a b0 03 96 35 86 d3 71 ac 44 e1 10 5c 7c 9c 75 2a 67 f2 15 25 a4 1f 67 38 c0 a1 72 45 Data Ascii: 4000C3^{Zk8nY:V_j+2SRSsX399Kj2'#0FT:[j#?nG0cmIiRo-SHC jwRz;ORW $&Y7:Rwbj0,HWU5qD\\|u*g%g8rE
2022-03-15 16:09:10 UTC	14535	IN	Data Raw: 1f 31 eb 94 99 3b 0d 0a Data Ascii: 1;
2022-03-15 16:09:10 UTC	14535	IN	Data Raw: 34 30 30 30 0d 0a df 9f 2a cd c8 11 e0 15 4c bb d2 96 eb 5b d0 92 e7 99 bd 78 a5 76 d2 fc 15 19 c5 d1 c9 45 ab 58 3c 0a 2c 33 24 01 b8 1a d5 2d ae 3b ae 37 21 e5 2a 2a 19 8f e0 5d c1 d3 b9 a8 f7 6f 89 43 05 79 54 aa 92 68 d2 51 35 75 f3 44 83 75 a9 8c 37 6a 0c 5a 10 42 28 7e 75 a1 fe 3a c5 20 b7 63 b9 d9 1c f8 9f 3a fb 20 a1 f0 55 47 4e 6d bf 25 ec ef a6 13 29 f1 10 19 cf 55 2c 1e 7a 35 a6 6f 2d 27 b3 39 08 52 62 73 07 bc a0 0f f9 9d ff 90 fc d5 70 f1 9b 46 23 18 d1 8f 55 df 66 d5 65 e0 57 f0 b9 c3 7a 44 40 b1 e5 c5 6e 5c 19 fc 64 f4 53 fe 54 83 84 e4 8e 6e c2 76 82 4d 11 d3 2d 07 3e 6a 53 fd 34 4b 4a 4b 0b c4 e2 60 6f 09 ea 7c ac 50 fb 4f d8 24 f9 af 76 b7 a0 7f 34 0a 05 51 9d de e6 93 d6 8e b2 bf 4d ab e9 11 7e 8b b7 f4 99 86 13 08 8f 8d 34 ba d9 5e b5 Data Ascii: 4000L[xvEX<,3$-;7!*]oCyThQ5uDu7jZB(~u: c: UGNm%)U,z5o-'9RbspF#UfeWzD@n\dSTnvM->jS4KJK`o\|PO$v4QM~4^
2022-03-15 16:09:10 UTC	14551	IN	Data Raw: 52 c3 54 97 f8 8c 0d 0a Data Ascii: RT
2022-03-15 16:09:10 UTC	14552	IN	Data Raw: 34 30 30 30 0d 0a c5 c0 d9 46 f7 49 b0 dd 33 0d 5f ea 03 b1 4c 0a 9a 36 3a 33 06 a1 e9 67 8c 32 bd 18 a8 d1 aa d0 18 6b 42 91 4f 9a 89 23 4a 27 0c cd eb e1 7a 40 ba 89 e5 43 69 92 b4 3c 37 12 7e 4f 97 a7 fc 72 89 1e 60 e7 e0 db 89 e1 cb d3 d0 ef 55 92 d5 4f a8 3f b4 1f 25 8d 6c 0e bb 8a 67 5b 02 a6 bc fe 21 95 0e 0b 25 ba b7 ac f5 18 96 02 94 c2 5f d7 2b d2 83 ba 15 77 e2 86 5c b2 29 fd a8 2c 77 ee 28 1b 7d 0c 84 22 d4 5c fe 54 d6 d8 f8 d8 d0 59 78 47 df ed 2f 6a 84 3c 91 19 e3 0c 7b 6d 1a ac 4a ad 2a 18 c6 57 3f d2 6a 0d 2d d4 ad e6 07 3a 8b 19 5e 95 46 7a 51 1a b6 4a a8 42 2d b6 04 61 4d 24 02 4f c8 62 c4 77 37 c4 10 6f d4 92 ff 9b d4 5f 20 a2 8c f3 46 b0 f6 17 41 68 88 1c cf 36 34 af fd 84 14 6b 2b 82 24 dd 27 34 df a2 13 9c 19 60 3e 1f 41 64 89 6b 8a Data Ascii: 4000FI3_L6:3g2kBO#J'z@Ci<7~Or`UO?%lg[!%_+w\),w(}"\TYxG/j<{mJ*W?j-:^FzQJB-aM$Obw7o_ FAh64k+$'4`>Adk
2022-03-15 16:09:10 UTC	14568	IN	Data Raw: 00 ff fe 61 00 ff 0d 0a Data Ascii: a
2022-03-15 16:09:10 UTC	14568	IN	Data Raw: 34 30 30 30 0d 0a fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe 61 00 ff fe Data Ascii: 4000aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
2022-03-15 16:09:10 UTC	14584	IN	Data Raw: 00 00 00 00 00 00 0d 0a Data Ascii:
2022-03-15 16:09:10 UTC	14584	IN	Data Raw: 34 30 30 30 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 00 5a 50 4c 54 45 00 61 fe 3d 86 fb c9 d9 f4 6c a2 f9 b9 d0 f5 7b ab f8 10 6a fd 1f 73 fc f7 f5 f2 d8 e2 f3 8b b4 f7 5c 98 f9 e7 eb f3 9a bd f6 2e 7c fc a9 c6 f6 4d 8f fa c8 d9 f4 aa c7 f6 e8 ec f3 8a b4 f7 6d a1 f9 e7 ec f3 5d 98 f9 3e 86 fb 0f 6a fd 7c ab f8 4e 8f fa Data Ascii: 4000PNGIHDRkXTZPLTEa=l{js\.\|Mm]>j\|N
2022-03-15 16:09:10 UTC	14600	IN	Data Raw: 6c 00 61 00 72 00 0d 0a 33 66 38 30 0d 0a 20 00 6d 00 65 00 64 00 69 00 61 00 6e 00 74 00 65 00 20 00 22 00 45 00 6a 00 65 00 63 00 75 00 74 00 61 00 72 00 20 00 63 00 6f 00 6d 00 6f 00 22 00 20 00 65 00 6e 00 20 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 20 00 58 00 50 00 20 00 79 00 20 00 76 00 65 00 72 00 73 00 69 00 6f 00 6e 00 65 00 73 00 20 00 61 00 6e 00 74 00 65 00 72 00 69 00 6f 00 72 00 65 00 73 00 2e 00 33 00 4e 00 6f 00 20 00 73 00 65 00 20 00 70 00 75 00 65 00 64 00 65 00 6e 00 20 00 65 00 78 00 74 00 72 00 61 00 65 00 72 00 20 00 6c 00 6f 00 73 00 20 00 61 00 72 00 63 00 68 00 69 00 76 00 6f 00 73 00 20 00 64 00 65 00 20 00 6c 00 61 00 20 00 61 00 70 00 6c 00 69 00 63 00 61 00 63 00 69 00 f3 00 6e 00 2e 00 6b 00 43 00 6f 00 6e 00 73 00 75 Data Ascii: lar3f80 mediante "Ejecutar como" en Windows XP y versiones anteriores.3No se pueden extraer los archivos de la aplicacin.kConsu

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.3	49987	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:09:23 UTC	14615	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 590 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
2022-03-15 16:09:23 UTC	14617	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 68 65 61 72 74 62 65 61 74 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 65 72 74 69 63 61 6c 5f 6f 66 66 73 65 74 25 32 32 25 33 41 30 25 32 43 25 32 32 74 69 6d 65 5f 6f 6e 5f 70 61 67 65 25 32 32 25 33 41 31 32 30 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 39 32 36 31 35 35 31 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 25 32 32 25 Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=heartbeat&extra_params=%7B%22vertical_offset%22%3A0%2C%22time_on_page%22%3A120%2C%22visit_id%22%3A%227730430992615511%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22adf96df2db9141a086fb94199a62964e%22%
2022-03-15 16:09:23 UTC	14617	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 7 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:09:23 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2a8a9a9c147c4126bf3d2c83a15f72e2 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.3	50004	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:09:27 UTC	14621	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 12485 X-CSRF-Token: pZXDo3x1XnpXWcY8UK1IFlBj X-Dropbox-Uid: -1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR; _evidon_consent_cookie={"consent_date":"2022-03-16T00:07:49.283Z","categories":{"1":true},"vendors":{"1":{"81":true,"249":true,"257":true,"414":true,"758":true}},"cookies":{"1":true},"consent_type":1}; __Secure-dbx_consent={"consentType":1,"consentDate":"2022-03-16T00:07:49.352Z","expireDate":"2022-09-16T00:07:49.352Z","consentMonths":6,"categories":{"all":true},"userInteracted":true,"numDots":1}
2022-03-15 16:09:27 UTC	14622	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 7b 22 6d 65 74 72 69 63 5f 6e 61 6d 65 73 70 61 63 65 22 3a 22 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 22 2c 22 74 69 6d 65 73 74 61 6d 70 5f 73 65 63 22 3a 31 36 34 37 33 38 39 33 36 37 2c 22 74 61 67 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 7b 22 76 61 6c 75 65 22 3a 7b 22 2e 74 61 67 22 3a 22 73 74 72 69 6e 67 5f 76 61 6c 75 65 22 2c 22 73 74 72 69 6e 67 5f 76 61 6c 75 65 22 3a 22 62 72 6f 77 73 65 72 22 7d 7d 2c 22 76 61 6c 75 65 22 3a 7b 22 76 61 6c 75 65 22 3a 7b 22 2e 74 61 67 22 3a 22 73 74 72 69 6e 67 5f 76 61 6c 75 65 22 2c 22 73 74 72 69 6e 67 5f 76 61 6c 75 65 22 3a 22 63 68 72 6f 6d 65 22 7d 7d 7d 5d 2c 22 64 65 73 63 65 6e 64 61 6e 74 73 22 3a 5b 7b 22 74 61 67 73 22 3a 5b 5d 2c 22 6d 65 74 72 69 63 73 22 3a Data Ascii: {"scopes":[{"metric_namespace":"privacy_consent","timestamp_sec":1647389367,"tags":[{"name":{"value":{".tag":"string_value","string_value":"browser"}},"value":{"value":{".tag":"string_value","string_value":"chrome"}}}],"descendants":[{"tags":[],"metrics":
2022-03-15 16:09:27 UTC	14634	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Date: Tue, 15 Mar 2022 16:09:27 GMT Pragma: no-cache Server: envoy X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 34 X-Webkit-Csp: sandbox Content-Length: 1464 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b10e2335d2a5426687fb06b2cc03e0d1 Connection: close
2022-03-15 16:09:27 UTC	14635	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 7b 22 61 67 67 72 65 67 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 64 72 6f 70 5f 66 72 61 63 74 69 6f 6e 5f 6f 66 5f 68 6f 73 74 73 5f 70 65 72 5f 6d 65 74 72 69 63 22 3a 30 2c 22 64 72 6f 70 5f 70 65 72 69 6f 64 73 22 3a 7b 22 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 73 74 69 63 6b 69 6e 65 73 73 22 3a 7b 22 6c 69 6d 69 74 22 3a 7b 22 2e 74 61 67 22 3a 22 69 6e 64 65 70 65 6e 64 65 6e 74 22 7d 7d 7d 2c 22 64 72 6f Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[{"aggregation_interval_seconds":60,"drop_fraction_of_hosts_per_metric":0,"drop_periods":{"fraction":0,"stickiness":{"limit":{".tag":"independent"}}},"dro

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.3	50035	20.199.120.85	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:09:37 UTC	14636	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 32 34 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 38 62 37 35 39 33 61 36 36 32 63 32 33 33 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 246Context: 98b7593a662c233a
2022-03-15 16:09:37 UTC	14636	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 37 31 33 34 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 55 53 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 34 34 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 37 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.17134</osVer><proc>x64</proc><lcid>en-US</lcid><geoId>244</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware7,1</deviceName></agent></connect>
2022-03-15 16:09:37 UTC	14637	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 32 36 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 38 62 37 35 39 33 61 36 36 32 63 32 33 33 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 71 36 65 2b 6b 6e 77 50 32 42 35 38 54 79 75 62 68 4e 41 37 55 45 66 43 4b 59 35 70 70 49 38 6d 54 44 4b 64 6f 6e 32 6e 65 48 74 6e 50 70 38 75 53 45 6e 67 56 66 59 64 4b 33 42 69 54 57 79 52 69 2b 52 72 32 2f 32 66 59 70 6a 73 6a 6c 6a 7a 36 65 4b 72 6b 69 41 4b 6e 4b 4b 4e 7a 74 77 41 6b 46 55 30 4f 78 4f 69 57 6d 38 73 56 37 67 66 4c 47 69 41 64 75 54 73 6d 45 5a 30 4c 49 30 76 69 57 71 46 6d 41 78 Data Ascii: ATH 2 CON\DEVICE 1026Context: 98b7593a662c233a<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcq6e+knwP2B58TyubhNA7UEfCKY5ppI8mTDKdon2neHtnPp8uSEngVfYdK3BiTWyRi+Rr2/2fYpjsjljz6eKrkiAKnKKNztwAkFU0OxOiWm8sV7gfLGiAduTsmEZ0LI0viWqFmAx
2022-03-15 16:09:37 UTC	14638	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 32 39 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 38 62 37 35 39 33 61 36 36 32 63 32 33 33 61 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 29Context: 98b7593a662c233a
2022-03-15 16:09:37 UTC	14638	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2022-03-15 16:09:37 UTC	14638	IN	Data Raw: 4d 53 2d 43 56 3a 20 33 41 6b 62 6c 67 51 39 5a 55 47 6c 38 44 74 42 63 48 59 59 76 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 3AkblgQ9ZUGl8DtBcHYYvg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	3485	162.125.65.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:23 UTC	152	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 534 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/downloading?_ad=20000747_20011264&_camp=LCEBR&_tk=email&oref=e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=NTAzNzA5OTYxNDI1MTY4NzcxNjcxNTE5NDYwMjQyNjY0NzAyNzA%3D; t=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-js_csrf=pZXDo3x1XnpXWcY8UK1IFlBj; __Host-ss=_BmkctLc_M; locale=en; ets=AVhZllc%2BMSuPS19Ed8wzpibmO1SdPRLV%2BXYMhg9QwOambWHv%2BoyZ%2BF3ZR/ZM%2B0RR/zVn6Osn693ivD0FYh0dGE3TW35RtaB7jfHxjNl8tSLs6SgCNQul%2BEzGXyqA23Q20zEe55W9pjNgtQmmU3JaPlI6Y81CAqQJPC9RAJnqj4xlSg%3D%3D; __Host-logged-out-session=ChASLFXA9Y4Cw9V7+nANaG8vELjzwpEGGi5BQ3hRaTk3MXJ1d2dzbzdoS0F2WDVUVmlWU2kwR3N4VU9Ta2ZHSmlISzBVS1pR
2022-03-15 16:07:23 UTC	153	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 70 5a 58 44 6f 33 78 31 58 6e 70 58 57 63 59 38 55 4b 31 49 46 6c 42 6a 26 65 76 65 6e 74 5f 74 79 70 65 3d 70 61 67 65 5f 76 69 65 77 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 37 37 33 30 34 33 30 39 39 32 36 31 35 35 31 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 33 41 25 32 32 61 64 66 39 36 64 66 32 64 62 39 31 34 31 61 30 38 36 66 62 39 34 31 39 39 61 36 32 39 36 34 65 25 32 32 25 32 43 25 32 32 75 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 64 6f 77 6e 6c 6f Data Ascii: is_xhr=true&t=pZXDo3x1XnpXWcY8UK1IFlBj&event_type=page_view&extra_params=%7B%22visit_id%22%3A%227730430992615511%22%2C%22request_seq%22%3A0%2C%22request_id%22%3A%22adf96df2db9141a086fb94199a62964e%22%2C%22url%22%3A%22https%3A%2F%2Fwww.dropbox.com%2Fdownlo
2022-03-15 16:07:23 UTC	154	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: no-cache,no-cache, no-store Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://dropboxconnect.co.uk/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-5jNtZvNgmRUHbAxMUOAF' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-5jNtZvNgmRUHbAxMUOAF' 'nonce-GHcR6ycx5wqkTEWx7Bkh' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Tue, 15 Mar 2022 16:07:22 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 430967c06a4043509212e73aa9c01da1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49774	216.58.215.227	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-03-15 16:07:24 UTC	157	OUT	GET /s/opensans/v28/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 Host: fonts.gstatic.com Connection: keep-alive Origin: https://www.dropbox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fonts.googleapis.com/css?family=Open+Sans:100,200,300,400,600,700&subset=latin,latin-ext Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-03-15 16:07:24 UTC	158	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes" Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} Timing-Allow-Origin: * Content-Length: 44656 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 08 Mar 2022 22:54:25 GMT Expires: Wed, 08 Mar 2023 22:54:25 GMT Cache-Control: public, max-age=31536000 Age: 580379 Last-Modified: Tue, 01 Mar 2022 22:03:03 GMT Content-Type: font/woff2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close
2022-03-15 16:07:24 UTC	159	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ae 70 00 17 00 00 00 01 26 40 00 00 ad f8 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 62 1b 20 1c 84 50 3f 48 56 41 52 88 78 06 60 3f 53 54 41 54 81 24 27 1e 00 82 0c 2b 13 08 81 7c 09 9f 14 2f 56 11 10 0a 81 b2 18 81 98 7a 0b 84 1e 00 30 82 c7 0e 01 36 02 24 03 88 38 04 20 05 87 7e 07 20 0c 85 1f 5b f7 15 51 23 9b 3b 58 cd 9c 1b 02 10 cd d6 a8 a5 fe 0d 8d 0c e4 76 a4 df c3 f1 7f ab 8c 0c e4 76 20 22 89 7a f7 ec ff 3f eb a8 8c a1 49 7d d2 22 80 aa 73 ff 21 b2 60 52 90 46 21 9b f6 42 87 c8 a2 ea 0d 49 39 72 a2 30 47 91 51 26 c9 b5 70 e0 5c 17 7a 85 97 42 db 6c 28 10 d9 d1 12 a5 a0 3b 3c d0 12 9d b4 ce 13 55 0d 79 99 52 b8 f3 a0 21 e4 33 69 0a de 57 a8 65 2c 07 1a 3d e9 fe 40 a1 c4 af 37 b7 0c 26 Data Ascii: wOF2p&@b P?HVARx`?STAT$'+\|/Vz06$8 ~ [Q#;Xvv "z?I}"s!`RF!BI9r0GQ&p\zBl(;<UyR!3iWe,=@7&
2022-03-15 16:07:24 UTC	159	IN	Data Raw: ff 10 67 f9 fe 48 b2 7d 40 98 5e bb 45 4e 8a 84 d6 ed 16 10 20 99 01 da 66 77 c7 81 08 98 cd 54 0c 8c 39 67 20 c6 1f 60 e4 ac ad 8d 8a cd e8 45 bb 72 f1 cb 76 a5 73 e5 da c2 0a d4 cd 98 2b 1d 46 01 a2 1c 43 b4 ad 66 41 b0 30 2f d2 f3 3a fd a8 f5 b3 12 58 32 a5 42 a2 52 50 31 f3 22 9b ff f1 5d da ff 91 64 99 c7 43 99 24 13 2c 2f 00 76 6f 7b 1f 02 da 4e ef fb 22 86 2e 63 d2 72 a8 99 0c 9a 65 92 34 f0 ce d9 a7 4d 25 d6 34 66 4d d2 68 d3 d4 14 68 69 d1 c1 d8 fc 84 9d b8 42 9e f8 9f aa ee 44 27 22 0c 28 f0 0f 6f f7 79 67 56 40 17 f9 fd 08 68 dd ce f9 b3 6d 3a 77 49 a9 2a ee 16 42 20 4f b0 3c f4 7f 9f ce cc fb 59 77 2b 77 07 ce a9 57 38 5a c0 9f c5 b5 a8 b9 3e 90 9b 7d 8f 71 a9 b8 61 31 44 83 4a 09 04 b1 40 f0 92 a1 d3 e5 ef 69 8f ff 70 59 b9 b9 6b 7e fe 9d f3 Data Ascii: gH}@^EN fwT9g `Ervs+FCfA0/:X2BRP1"]dC$,/vo{N".cre4M%4fMhhiBD'"(oygV@hm:wI*B O<Yw+wW8Z>}qa1DJ@ipYk~
2022-03-15 16:07:24 UTC	160	IN	Data Raw: 7e df 03 00 49 bb 86 ad 88 0f 70 3b 2c 63 d2 6e f3 a5 b5 9a cb be c2 cb 98 b8 eb 9b 3c 7f e6 fc af 07 85 bd d3 a8 37 02 51 b7 c4 15 b7 12 8b ee 40 4b ef c4 e7 dd 11 a5 3e 70 df fa 40 5a f5 10 15 f1 38 22 f2 71 54 e2 33 18 fe 59 18 52 fd 61 c0 bd dc 42 dd 05 a2 bf 4c 21 be 01 43 df 90 82 df bb 43 de 63 8b 3e e2 b3 3e ad 5b f7 c9 9f ff 09 59 fa 05 1d f1 25 3c 31 3b 7e 77 c0 3d f6 eb dd 3f cc 7c fd 87 d9 1f fc b0 78 69 76 25 f2 a7 17 6f fc f3 15 f6 ef 47 f8 8b e3 e5 8b af 9c f8 e7 8f 77 ff b5 74 ba a4 c3 cb 6f 29 44 5f 96 16 f0 cf aa cc 0d ef f4 67 30 37 d4 9e d3 12 9a bf eb ce 5d f3 13 87 ee 7c 83 4b 77 7e ce 87 87 72 b8 fd d0 5f 4c 3f fc 1b 9c 7f 38 81 33 4f 87 71 f4 e9 04 4e 3c 9b c4 29 8f cf fc 82 5c 78 2e 94 43 cf 45 32 f4 dc df 53 f1 62 20 b7 5e 0c a7 Data Ascii: ~Ip;,cn<7Q@K>p@Z8"qT3YRaBL!CCc>>[Y%<1;~w=?\|xiv%oGwto)D_g07]\|Kw~r_L?83OqN<)\x.CE2Sb ^
2022-03-15 16:07:24 UTC	161	IN	Data Raw: e6 50 61 6d f7 56 a9 34 20 ae ea 01 b8 9a 81 91 4c 80 26 c9 46 13 38 3a b5 66 75 c2 af 6b f3 f8 e7 04 8d d6 33 86 2d 1b 76 2b 59 47 52 70 54 3a 09 f5 6e 22 18 95 51 1b 14 53 75 5c cd fd 13 8b b7 b8 42 d0 51 3a 84 61 ed 3b c2 35 20 8d 97 96 71 05 cf f8 8b a3 19 ee 6e bd 20 82 d0 3c 1f 38 29 05 0e b2 3e 8d 8e 1c bb 43 3a 41 42 23 79 5f 15 db 0a 22 d9 05 5f d4 12 41 91 a2 ec c7 e6 64 17 5f 6b e9 aa e3 2a 39 fa c7 36 f7 0b 21 c5 a1 f0 e9 ba 25 09 14 2a 36 44 00 e1 5b 28 9c 57 b5 59 ed 28 a4 ca 5e 57 f6 99 92 4a 76 c6 e0 da 48 85 f0 a8 28 74 15 46 50 c9 3e 3e 48 c8 d0 24 26 95 29 96 12 66 aa b2 53 44 ed 26 56 a1 e3 4d 57 40 08 d8 eb 4f 5e 02 a1 5c ef d1 01 b7 7b 76 df 1e 51 09 5d 4a 78 6e fd a2 03 ff 21 28 17 e1 d7 00 4b f0 0a a5 ca c8 7f 88 e9 5f d7 ea af 07 Data Ascii: PamV4 L&F8:fuk3-v+YGRpT:n"QSu\BQ:a;5 qn <8)>C:AB#y_"_Ad_k96!%6D[(WY(^WJvH(tFP>>H$&)fSD&VMW@O^\{vQ]Jxn!(K_
2022-03-15 16:07:24 UTC	163	IN	Data Raw: 05 20 83 47 da f0 2a de 92 29 26 64 96 37 a2 f5 6a 85 49 b4 00 37 22 e7 d0 40 b7 07 0e df e8 5a 17 e7 0e 6e c5 12 77 04 5e de e6 de f8 89 9b 90 db 26 6e eb d2 b6 87 57 b0 99 c3 d1 77 58 b9 6a 0e 21 63 57 5e df ce 48 13 e2 88 ce 4a e6 bb 7e 80 9b 57 00 56 45 96 5f 27 24 72 96 c5 9e 7d 42 1e bf 14 aa a4 74 c7 bd 1b 79 9c 71 01 2f 1d 7f c2 05 ae 0b 1b 5e 0c 3f 4e 5d 20 2c 09 97 fb e7 dc 04 d7 df fe e7 6e 9e c9 f4 bc f5 f3 17 03 67 7f f6 39 28 97 27 3c 87 9c 6a a7 19 34 ae 4d f6 cf a3 13 f7 2d 30 29 f7 1f 34 60 cc 67 63 5e 85 a6 1b 8c c4 d4 fb f4 82 8d 72 c5 b7 82 b5 de fe 55 f0 fe 60 a2 a7 11 2c ce 22 6f 30 1c f3 61 24 44 d2 30 0b 97 93 6c e8 42 c4 df fa 12 c6 7c ce 78 fd 51 62 fc ca c6 a5 e3 9c b2 7b ea 9e 5e ca f0 35 86 cf 11 98 76 17 5b 6f 7b e0 60 55 e8 Data Ascii: G*)&d7jI7"@Znw^&nWwXj!cW^HJ~WVE_'$r}Btyq/^?N] ,ng9('<j4M-0)4`gc^rU`,"o0a$D0lB\|xQb{^5v[o{`U
2022-03-15 16:07:24 UTC	164	IN	Data Raw: 9b 9b b7 6b f1 b8 3b bc 4a 4e 15 bd 90 3b 1f f7 68 50 ab c0 13 66 a1 4c 0e b2 3c aa a5 fc 65 33 c5 e5 e4 33 e7 3d 49 87 55 d1 11 56 70 2a 71 e0 9d a5 5c 12 43 68 fe 5c 78 d0 11 3c f1 d3 12 30 f6 6f f0 7c db 6e 68 c8 e4 fa 0a 6b f3 c8 a0 3e e2 50 9b 09 94 9c 3a 48 aa ce 06 43 bd 2d d9 98 d1 65 8d 86 2f 24 a3 95 5d f5 be 1f 56 65 d5 6f 03 ab 9a a1 90 fc 1d b3 99 4f b1 57 af df cd 27 87 f2 73 70 7f dd ca 8c 72 f4 04 2b 4a 3e 5b bf a1 e7 c6 e5 eb 85 6c bd c4 e9 5a 56 a7 b2 bc c7 6f 64 1e fc c2 0a 78 1a 48 69 be 75 69 6c 8d 3f b7 9a a3 88 3e 0d 86 6d 6e 06 b4 24 05 c1 79 13 5b fa 86 d9 4e c2 a7 74 5e 19 bb ce 27 13 62 7c 6d 32 57 bd b7 13 99 3e 73 18 ba bf 46 54 67 83 0c 99 9f 19 2b 97 e7 4a 08 5d cd d3 70 aa 43 a7 7a b7 32 1a fe 4a 05 7a 53 1e a7 9f 61 2a 29 Data Ascii: k;JN;hPfL<e33=IUVpq\Ch\x<0o\|nhk>P:HC-e/$]VeoOW'spr+J>[lZVodxHiuil?>mn$y[Nt^'b\|m2W>sFTg+J]pCz2JzSa)
2022-03-15 16:07:24 UTC	165	IN	Data Raw: 5e b9 dc 92 51 dc a6 ea f2 d2 09 96 47 ab 4c 8d ff 98 47 77 c3 7b 5f 7a 03 f1 e0 96 4a 47 17 fd c4 61 4b e0 83 1b 04 8f eb ae 82 b9 ee 39 46 ef be 6c aa 64 c2 97 e6 ab 9d ab da f8 0f b7 d1 50 70 43 47 4f 8d 97 d5 dd 9c 10 d0 e0 85 6c ff c8 2f 7e 0c c0 ed 92 ec b0 d3 1e 4d d3 cb 79 56 e4 61 65 ac ff 52 7f af 25 da 89 63 37 6c 99 d5 ed a2 06 8b 86 47 2f 2a 95 84 bc 55 69 8c ff 4c bf a8 da 3c ea 87 6b c6 72 05 56 94 fd fe 04 01 8a 6f e9 22 51 5f 82 18 4b 75 f7 de d0 a7 73 20 dc 16 09 3f ce b9 98 84 41 60 00 b0 05 70 a2 77 65 82 d3 c6 bf 35 38 a3 0e 2a df e9 a6 65 f9 0e 7c d9 0e ec 36 16 e9 6c a7 ae f3 38 50 d1 95 59 a8 e7 e5 0f c9 fc 17 48 ee cf 5d ff c6 73 6d f3 3d 36 95 84 41 c0 c9 18 2a 85 8c 83 23 48 38 47 bb e5 15 f0 96 2c 6b 8b 37 e8 9d b4 89 22 d5 e3 Data Ascii: ^QGLGw{_zJGaK9FldPpCGOl/~MyVaeR%c7lG/UiL<krVo"Q_Kus ?A`pwe58e\|6l8PYH]sm=6A*#H8G,k7"
2022-03-15 16:07:24 UTC	167	IN	Data Raw: f0 0b c2 10 8a 34 4c 8a 42 69 b6 c4 ae df b1 5e 53 72 9f 3c e9 b3 78 59 a0 3b c5 da 9a 21 12 1b a7 1a 31 fb b6 37 8a 55 fa 5b 43 7e 65 a2 a1 39 7d 5b 7a f0 33 3b 65 eb d1 8f e4 ba 15 32 52 88 e8 58 7c 62 22 34 89 90 69 c8 ab 48 d9 1e 4a f5 8e 30 f0 fc 4f a1 4a ce dc 39 79 47 1a a9 cb 55 31 b0 04 34 45 e0 22 c6 79 2d 04 52 09 18 64 a8 8d fb 4f 7a 28 92 80 73 ca 29 7c 24 f7 3f 28 ea d2 09 13 a4 b9 39 96 74 18 cc ee 49 cf 19 9e b8 3e b3 2f fb fa d9 12 43 c2 b8 db 56 bb 9e 0d 8e 9b 54 73 0c 34 29 31 33 78 41 75 6a fb 66 eb f6 85 79 eb dc 9f 5c 92 db 8d 5f ed d2 72 ee bb 5c f1 12 25 f6 d2 89 40 0f 83 ea 7f 15 be 58 e6 ff 74 a6 84 f4 e2 47 bc 6e ed 3e 63 e1 38 95 e0 95 6e c8 aa 94 15 a9 66 cd 3a 36 6d b8 14 67 15 98 51 ad 8c d8 e9 27 5d ba c1 58 bc 31 a3 77 fe Data Ascii: 4LBi^Sr<xY;!17U[C~e9}[z3;e2RX\|b"4iHJ0OJ9yGU14E"y-RdOz(s)\|$?(9tI>/CVTs4)13xAujfy\_r\%@XtGn>c8nf:6mgQ']X1w
2022-03-15 16:07:24 UTC	168	IN	Data Raw: 40 c9 38 d1 6a a0 1d eb 4a ce 15 b5 82 9a fa 72 1a dc 6c 90 76 37 7f 03 3a 03 ff f4 bc 2e aa 0b 94 b2 7e 21 e1 cc 72 8c 43 46 80 50 6c 70 de 69 f6 42 c6 d1 05 e1 9a 17 ba 2f 9e 77 bf d5 32 7a e8 fc e0 a7 2b 97 07 86 c1 60 81 a4 ed 62 65 d6 b3 fe d8 6f d0 e9 23 cd 93 71 7b c0 42 50 4f 1c 68 bf 97 7a f7 a7 da d2 bf 97 9f 96 ac 7f d0 5a d9 68 d8 35 6b bd 93 0c 50 d2 fb 4a e3 5c fc 34 17 b6 5e 30 36 9c e5 9e 09 a3 b7 f0 66 76 f2 f2 a3 33 1d b4 fe 3a 57 81 6d 80 3c b1 a2 9e bb 15 f8 e2 f3 83 8f 7b 4f 64 e8 ba 35 4e 23 58 0e 12 4b 4c 24 fb 09 bd b3 8d ea 12 a5 f1 88 48 ef 36 2a 46 95 e5 ac 39 ff 00 cd 25 8d 3e 3d 7d 36 e8 4f 4b 38 01 e6 99 46 b7 41 9e 59 aa ef ef 5a 81 9e b1 ad 6b 5a 0c 13 a7 c7 10 23 89 1a 47 c1 49 46 6e 20 26 81 94 d0 2f d9 94 72 77 69 69 a9 Data Ascii: @8jJrlv7:.~!rCFPlpiB/w2z+`beo#q{BPOhzZh5kPJ\4^06fv3:Wm<{Od5N#XKL$H6*F9%>=}6OK8FAYZkZ#GIFn &/rwii
2022-03-15 16:07:24 UTC	169	IN	Data Raw: 10 db 16 43 52 42 43 eb 16 ff 12 02 1e 52 86 d7 37 27 88 5b 0c bf 16 1b e0 89 e5 90 d7 cd fb 12 c5 8d 2d 36 be 25 35 d1 b1 b4 aa 2a 1a 8b ad a5 d3 ab 2a 9d ae d5 32 62 63 ab 18 34 43 c7 bc 29 bb 39 af 4e 32 31 af 1c 9e 8b ac f1 96 fd 5b b0 95 d8 b9 d4 06 57 13 93 03 01 ac fd 57 c2 a2 f5 b7 56 42 ab 95 f9 aa 5f 5a 9a 96 e8 ce 84 08 f3 84 15 d7 db 3f 14 ec 82 30 dc e0 35 64 60 1b 44 a1 cd 21 e1 fc a2 ca 22 52 41 19 a0 fe 78 ae 46 90 29 33 dc a6 81 b8 2a 6e eb bb 1d 5d 05 13 3e ff 75 7d d1 40 6a 9c f0 3b 4b 92 70 fe 27 8a b0 2a 68 26 64 90 cf 2b e9 c8 41 45 70 6a c9 59 d0 38 ac 40 46 0d c3 f0 db e9 55 e0 e7 72 b9 ab 5d 5a 21 3c 0a 02 8d 85 87 e2 a1 90 90 9a 90 5d 11 0c 91 da 70 21 e0 10 6b 14 de 7e c4 56 7d 79 2d cf 76 ff 88 da 36 78 db 3a fb 77 d9 e4 5f bb Data Ascii: CRBCR7'[-6%5*2bc4C)9N21[WWVB_Z?05d`D!"RAxF)3n]>u}@j;Kp'*h&d+AEpjY8@FUr]Z!<]p!k~V}y-v6x:w_
2022-03-15 16:07:24 UTC	170	IN	Data Raw: b4 98 4f 8a 8b 46 b3 c3 c5 5d 3c 4d 6c 8d 3f 33 3d 69 dc 38 de ac 19 5d a3 d7 d5 9d 22 66 eb 1d 66 ff 27 74 73 6c 4d 62 38 59 99 f6 14 c0 cf 3a 6f b2 36 f6 69 38 6a 3b 98 0b ea e1 81 86 bd d2 14 bb c3 ca b2 a1 b1 01 b4 bc 9c 41 4c 4e ea 30 25 a1 3d 37 37 6f e0 59 9c 71 c3 11 b3 98 77 6b f3 55 bc e1 10 8a 37 42 4b 87 5c 40 a6 d6 8d 26 40 52 91 89 b3 69 f1 d1 c3 1b 4f 9b ed 29 56 c9 54 09 49 89 ad 31 9c 4e d5 c5 6d e5 dd 13 96 7b b7 02 92 ad fb d4 3c 84 a0 7e cd 00 4b dc 48 ee 75 f4 1d 9f 9a dc d2 ae 94 c8 c4 1d 1f d8 c0 b1 93 a5 26 2f eb af f4 bc 28 d5 3e 1b 3a 5f fc f8 87 92 6e 66 b9 ab 0c f5 97 4e a7 ac e9 9a 98 6b b9 9d 9a f1 4e ff 48 1e 6e fe 35 3b b3 97 4f dd 57 9c 49 15 de 44 5c 38 bd ef c6 05 1c 24 8f 13 5f 15 ea 25 d8 43 a5 bf b7 69 b5 69 bc cb fc Data Ascii: OF]<Ml?3=i8]"ff'tslMb8Y:o6i8j;ALN0%=77oYqwkU7BK\@&@RiO)VTI1Nm{<~KHu&/(>:_nfNkNHn5;OWID\8$_%Cii
2022-03-15 16:07:24 UTC	172	IN	Data Raw: 10 7f 4f d2 1b 17 3f d5 90 01 39 2e eb 1d 17 e8 7c 62 cc d2 1e 16 13 36 85 e6 6b 13 c3 fb 37 88 90 43 59 78 be 6e a0 db 60 30 8e b7 e4 b2 52 a4 12 1e 5f 21 c6 88 fd 43 c9 d0 28 3f b9 00 0d 14 1a 69 46 2b d2 83 7f 7f 71 d3 ca 83 a9 25 a7 23 9c 96 3e cb 38 b7 0f 56 1b ef 6e 7f 16 44 57 f0 e4 64 77 10 f2 ce 34 6a 65 5d 54 95 3f f6 b3 b6 84 b4 02 78 ad 03 67 fb be a5 d9 fb 63 f8 09 8d cc 5d b0 c4 06 25 6b 76 f4 93 da 1c 32 3f 31 7a 65 af 71 a1 c9 35 af 33 18 63 62 f5 12 a0 23 27 74 3f 55 32 43 8e 43 e7 ef 94 cb 6e 5f f9 5f da 4c 7a 9f cf f4 3d 1e 18 e6 ef fd f0 8c 0e d0 60 92 2c 73 d1 68 8a 6e 5e e5 e6 7d a7 7a a0 56 4a d1 6f a7 d2 84 4f 47 4f 7d 16 bc 92 07 43 9e 3e 87 a8 65 36 5e 85 bf 42 03 d3 41 e9 48 3a 77 e4 de de 90 8f 3e 6b 85 f3 a3 1d 39 07 31 4d 69 Data Ascii: O?9.\|b6k7CYxn`0R_!C(?iF+q%#>8VnDWdw4je]T?xgc]%kv2?1zeq53cb#'t?U2CCn__Lz=`,shn^}zVJoOGO}C>e6^BAH:w>k91Mi
2022-03-15 16:07:24 UTC	173	IN	Data Raw: 61 2c 2a 6b 53 b4 09 0b bf 1c 61 cb 36 77 54 1b 51 bc 08 db 51 83 0f de 6b a6 06 36 c3 14 60 76 e4 dc 51 55 db c9 fb bd 64 81 ca b2 43 cb 66 45 c7 6a 9a da b7 af 99 4c 6f b7 67 f3 a8 74 a2 ef ab f6 d6 93 73 4a 08 59 0d 35 d9 0a 6e 18 71 8c 66 41 49 1c 07 41 09 a0 17 bb dc ee 6c db a6 98 5f cd b5 ab eb 7c 15 df 1c 9d 36 d9 ea 01 09 de fa 29 a7 a4 44 3c 19 72 7b 7a 59 f4 af 09 6e 98 9e 59 21 c3 43 42 4e 77 b5 1f 8c d4 38 c1 9f d8 fa d4 34 ea 10 4b e3 b0 47 2a 42 9d 3d ea ca ee 1f 24 67 81 84 1a 8a ed 81 98 b2 10 8a 50 47 33 0f 42 42 28 11 b4 da ed 37 84 8b 8b f9 bc b6 1a f7 3c 06 ec ac c6 b4 f5 ef fd 3d c7 b9 cb 17 17 23 dc 5f 7f a5 90 e2 f3 fd cb 17 95 64 a7 51 3b 50 16 7d 1a fb c7 88 55 4a 54 b2 19 b4 90 11 ca ee db 9d ed fb 2c 83 83 b8 2c ee 40 02 5b 50 Data Ascii: a,kSa6wTQQk6`vQUdCfEjLogtsJY5nqfAIAl_\|6)D<r{zYnY!CBNw84KGB=$gPG3BB(7<=#_dQ;P}UJT,,@[P
2022-03-15 16:07:24 UTC	174	IN	Data Raw: c5 f9 93 27 17 17 cd 8b eb eb f6 54 c1 77 04 3c 54 9e c7 b9 45 57 db e6 c8 95 32 5b a3 33 66 c0 00 41 0e 60 3e af b5 c6 3d dc a6 cc 21 7f 1b 23 2f b4 fd 70 98 2c 27 16 c5 b1 ca 0a 6a 46 0c a3 6b b8 82 3e e2 fc 22 4a cb 96 84 50 7e 6f 93 f7 7d d3 24 f1 4c 7d 97 85 dc 78 f0 a1 38 4e fd 02 4a 8e 9a 32 38 5b 1f 9d 73 31 74 40 e6 ae b3 86 c1 28 e9 b8 7b 34 22 05 5d 67 ce 78 66 d3 d2 9a e0 61 b2 9a 3c 99 68 0b e3 d5 a6 60 1d df 4e af 39 81 36 48 65 bd 06 30 4d 4d 94 50 9a 4d 0f 6f b6 e0 70 68 53 f3 fd 93 93 d0 5c a7 5d d4 b5 15 ac bd be 36 9d 72 7d 2c 31 76 e3 a8 e3 f5 ac c4 58 4a 0f 13 d3 e2 58 e7 05 94 cc 30 ad 7e c8 59 2f 41 cf 96 cd b0 48 ac 8b bd f0 f8 2a de bf 93 da 97 66 db 0a 4b c9 69 e1 b1 06 4c ef 61 f2 72 e2 49 71 7c d1 16 d4 1c 74 ab e8 13 08 e9 dc Data Ascii: 'Tw<TEW2[3fA`>=!#/p,'jFk>"JP~o}$L}x8NJ28[s1t@({4"]gxfa<h`N96He0MMPMophS\]6r},1vXJX0~Y/AH*fKiLarIq\|t
2022-03-15 16:07:24 UTC	175	IN	Data Raw: 20 25 c6 a8 63 ae d3 0a e8 96 74 9b 1e 4d 4f a0 97 d1 07 e9 4b f4 8b f4 c7 f4 9f 19 26 0c 9e 01 63 44 33 f8 8c 0c 46 25 e3 5f 2f 37 e6 09 56 06 eb 72 2c 87 bd 89 dd e4 38 73 ae 73 5e 71 fe f0 23 70 55 2e 9c 4b e5 26 72 f3 b8 3a ee 00 77 3a cc 76 58 7d 75 1f c0 1b a0 2a 03 41 60 60 14 00 e8 09 f8 2f d1 e0 a7 40 91 43 e3 ce af f6 e3 d1 01 bb 93 26 56 0d 1c a0 03 34 21 a6 d4 d1 dc 03 44 3b 3b d4 e8 dc b7 76 7d 15 f9 fd 1f b0 49 21 bf 09 6d 5d 08 5f 03 1b 40 ef c9 85 6a 38 ba 59 a1 75 a9 90 45 27 70 60 c8 a3 1a 18 ee fc 21 3d 5a 19 7d 18 45 ab 2c a5 c1 8e c7 9c 94 72 e8 74 e3 33 05 a7 51 c1 a9 b5 a0 28 5c 0a 14 80 1b 10 1e 6a 0e 8d 8f d6 0f f1 a0 35 98 e8 f0 d8 a5 e2 69 c8 10 ab 5d 1d 40 24 99 df 61 33 7a 34 c2 8b 4e 2b 6a 90 85 bf 36 06 d8 82 dc 0d 65 e3 ce Data Ascii: %ctMOK&cD3F%_/7Vr,8ss^q#pU.K&r:w:vX}u*A``/@C&V4!D;;v}I!m]_@j8YuE'p`!=Z}E,rt3Q(\j5i]@$a3z4N+j6e
2022-03-15 16:07:24 UTC	177	IN	Data Raw: 82 1b 0c eb ec fe 5c 55 6f b2 7c 1b 05 03 3c dd 1c a7 7c eb 2a ff a0 77 74 d3 0a 78 71 63 55 1b cf 25 41 12 f0 3d d1 45 a0 89 35 98 f6 3d 80 b0 6b b9 55 67 5a e2 aa 78 32 56 e3 dc 08 0c a0 aa 53 36 56 29 b0 eb d2 b5 3b 99 62 15 60 18 86 2e 3c 14 de d6 5c 01 ab 83 f0 37 77 b1 28 cf 7d 5e 25 96 b0 f1 ce 04 d1 69 2c 8c 9f 69 97 37 9f 14 51 2e 48 54 00 04 a8 1f 41 c8 a7 7d 8f 89 20 fe 18 18 f0 31 c7 af b3 12 0e 8c 34 21 d8 43 40 84 44 a5 12 ad b8 9e e7 52 2c 87 70 0f 49 cd 97 87 53 81 0a 4d 82 ee 44 aa 55 74 1e 6b 91 15 11 a8 f6 de af 5d 40 c0 10 44 12 95 95 cb 44 a5 54 4d 83 b8 18 eb 34 fd cc 9d a1 70 38 24 ff b7 c8 6d 15 b5 84 00 6f 6e 12 28 40 08 8b 25 92 42 c8 e5 62 ce fd 6c 58 33 21 41 87 b6 ad a4 37 ba 19 a9 fd e2 63 59 3a c4 12 58 5e b8 3b 41 2b b0 09 Data Ascii: \Uo\|<\|*wtxqcU%A=E5=kUgZx2VS6V);b`.<\7w(}^%i,i7Q.HTA} 14!C@DR,pISMDUtk]@DDTM4p8$mon(@%BblX3!A7cY:X^;A+
2022-03-15 16:07:24 UTC	178	IN	Data Raw: 13 76 cc 9d 0f ca 1c 32 7c 74 b3 a1 d8 63 af 5a 3e 91 fb 44 ce da d6 65 e1 57 ce 12 c5 83 b9 14 e5 56 e0 54 d8 b2 33 10 c2 9a 7c b1 1b 51 6e 0b 96 dc 34 3b 96 69 da 8a 92 7c 0b 14 41 ba c6 02 ee a3 fd 29 7d 52 bb 77 4e e8 48 6d 9f 3c ee 6f 1f 82 6c ec dd a5 cf 55 5c e5 9f 1f 82 e8 9f 38 6c 34 9a 75 97 fd c3 6e f4 8d 4a 89 19 bd f8 e2 f0 41 3b cf c8 0e 2a 2c 3e 61 46 d3 d3 c0 cd 1a 4d ae 25 0b 40 bc 66 b9 59 8c fd 43 9c bc 8e 90 bb 75 f5 f7 5f 5e ae 2b c7 fc 8c b5 5a 49 5b c3 75 bc 6e 0d 41 af 80 c2 f6 7f fe 86 51 9e 87 15 91 18 c7 9b f1 bf ff ff ec ff ce f8 f5 c4 3c 5b 70 0f 70 83 6b 17 cc 51 b4 48 1d 59 53 d0 b4 6d a3 56 d8 5c 8b 41 6d 15 31 8a 2e b7 3a bd 86 33 2e 28 c2 16 e3 24 4d 72 ee f9 b0 e4 f5 5a 05 d9 0d 44 d3 35 5a 1a b9 40 e9 43 87 ed d0 1f bd Data Ascii: v2\|tcZ>DeWVT3\|Qn4;i\|A)}RwNHm<olU\8l4unJA;*,>aFM%@fYCu_^+ZI[unAQ<[ppkQHYSmV\Am1.:3.($MrZD5Z@C
2022-03-15 16:07:24 UTC	179	IN	Data Raw: 37 8e c1 75 22 37 7d 21 ce fa 80 40 38 b7 64 97 18 cd e5 87 3f 43 3e 08 71 d9 17 e2 b8 0f 08 84 87 41 5d 08 60 aa 77 a7 da 7c e2 3c ee fb 42 9c f8 01 81 f0 b5 b8 9f 62 40 3f 2c 7e 22 86 80 4e 18 2c 1f 1a 36 e6 c6 4c b6 86 13 8b 09 c7 6e b4 88 b3 06 9f f5 35 78 a3 d7 02 da c5 97 2f bf 4b d2 39 14 ba 19 0c 13 69 c9 c8 ff a7 55 51 ec 8a f3 6a 69 5b aa 5b 6a 6c 17 6c c4 6f 17 c4 ae 09 11 04 05 9e cc 99 82 31 8b 11 c2 3f 10 44 69 14 be 56 4e 64 a6 7a d9 4d bf 14 7a 0d 3c 8a ed d8 19 19 f0 38 e3 fe f9 f9 2e 5f 70 45 90 07 fe 67 14 fa 4b 8b 17 c5 2b 23 40 61 2a da 40 3f 8f 6c 43 4c f6 94 df 22 1e 7c 10 30 8e 74 34 f3 37 b0 dd a5 86 e7 fa 37 b9 3d 14 6c 17 d0 82 bd bf 7c a9 ff 5a 1c 98 21 27 15 64 77 e6 b0 29 0c 1d 02 f6 51 24 92 48 28 47 4e ef 3f 01 c0 e4 71 48 Data Ascii: 7u"7}!@8d?C>qA]`w\|<Bb@?,~"N,6Ln5x/K9iUQji[[jllo1?DiVNdzMz<8._pEgK+#@a*@?lCL"\|0t477=l\|Z!'dw)Q$H(GN?qH
2022-03-15 16:07:24 UTC	181	IN	Data Raw: b4 3d 6b 65 1e a5 d6 c1 b8 13 bc ca 95 6e 02 cd 40 6c 91 2a a8 1a db 4b 83 0a a6 31 ec da 79 05 26 f1 66 81 e8 62 32 ea 09 18 8a 25 17 1e 1d bb 3e 36 7e 1c 10 ee ea 44 99 02 25 ec 7e 11 36 7e 4a 73 e6 a2 c9 c0 d2 fd 61 8e 65 34 31 b4 be ba 9f ec 82 1a ae 9e ce d5 27 0f 4e 16 e7 4a 79 cf 75 02 78 91 8d 79 02 84 ea 9a 4b 2f 2d 4f d7 d7 89 10 d4 dc f1 47 19 b8 e9 f7 37 d0 9d 7b dd ae ec a6 52 58 98 1f ca 26 36 b2 bc 68 b2 ec 9e d6 4c b0 0a d7 5d e8 91 ef 24 17 47 37 3d c9 c0 e5 59 e4 34 68 71 b0 27 c0 b8 2c 2b e1 a1 d5 e9 23 a1 81 ad 7b c5 1d 1a f6 fb 02 06 5b 07 5c 7f 9b 62 f0 f9 d8 05 89 6b 9f 56 f8 15 2a 93 51 66 14 80 63 05 84 ce a9 11 76 4e 35 8a fd 79 70 09 b2 f5 2d 19 41 41 80 e1 be f5 fe bc e8 6d d3 a7 a5 9d 03 9f 85 45 ac 2f 47 2f 3d 9b 82 7d bb f1 Data Ascii: =ken@lK1y&fb2%>6~D%~6~Jsae41'NJyuxyK/-OG7{RX&6hL]$G7=Y4hq',+#{[\bkVQfcvN5yp-AAmE/G/=}
2022-03-15 16:07:24 UTC	182	IN	Data Raw: 4b 4c 09 07 2b 48 80 ff bd 2c 96 80 80 7d 53 0c 93 d6 56 91 9e 69 80 7d ca e0 de 0b 59 f4 a1 d1 91 0c 09 c6 63 93 76 67 da 2a f7 4f c6 30 c9 5d 6c ea ff f0 7f 3f 24 4b 6c 5e 5c 21 9f ef 54 ed f1 49 07 56 65 86 85 00 98 f8 b8 be c0 00 62 22 14 3c 8a a6 36 c0 83 2f ee 3a 2a 45 57 43 e7 96 60 99 1b 4d 80 f0 91 e8 54 5c 87 a9 80 09 ab 49 8b 26 dc 51 83 84 60 04 5e aa 44 84 90 b3 8a 5c 94 6d 1a fb 09 33 ee 66 1b 41 d0 45 c7 10 1b ac 2c cb 90 d5 b3 2d a2 ef 8d 3c 8a e9 db 80 8d 58 99 12 b9 0e 52 d2 33 3c 95 da 21 e1 86 af 3d 48 21 65 01 b6 28 c7 12 d9 4a bd 7b 3c a6 fd d8 6f 5c 27 2d e6 ae 8d c7 f4 71 70 7f 91 f2 8f 6c ee dc a8 b2 49 6c ce 71 30 7c d5 44 1d dd fc 90 f3 3d 56 6c ee 07 5b e1 fe 3f 4d ee 23 ae 93 bf b7 eb 86 a8 4c 2a 51 45 0b 86 7a cf 45 79 c9 35 Data Ascii: KL+H,}SVi}YcvgO0]l?$Kl^\!TIVeb"<6/:EWC`MT\I&Q`^D\m3fAE,-<XR3<!=H!e(J{<o\'-qplIlq0\|D=Vl[?M#L*QEzEy5
2022-03-15 16:07:24 UTC	183	IN	Data Raw: 54 2a 64 6a 7f 5e 24 5c d7 5e 8a 98 91 5d 63 77 a9 87 ba 59 32 41 6f 4f 0b 6f 9d ba 38 c3 02 47 59 18 81 c8 e1 88 aa c0 ee 72 d5 85 8b 43 f9 a1 41 f6 e3 ca a0 95 1b 97 00 bd 3f 2e 3e 94 3e 83 a1 8e 4c 06 d2 1d 2f ea 47 80 cc 1f 5d f6 42 dd a9 26 e2 80 50 95 47 d8 9b 0d 81 3a 5a 89 9f ba 0c f0 3d a6 6d a5 40 75 e9 8e c3 80 ff 8b 4f 94 1c 8d be 50 41 a1 99 1f 53 04 d2 cf b6 42 91 3a 9f 35 00 73 6b 59 92 d8 8b c8 fa 49 c1 5d 9f 9d 1c 36 f7 61 1f d5 75 f2 38 5b 91 1d 00 77 fe c9 f1 2d 39 b1 47 4b 41 c4 b7 d6 cf 4d 79 47 2f 76 93 3b ec cf 89 40 bc d0 74 b3 b1 fa e9 69 d7 4d 41 1b 5e 14 fc 4d e5 55 e1 bf 9d 9a 15 ff a4 be d4 4e 68 0b 15 ee 8c eb 5b a0 5b f3 c2 27 9f 9a c3 bc 28 6e fb 7f f0 3f 82 77 30 d9 7c c8 09 1f 0d c2 57 5b 37 f8 c3 ac da e7 f6 c7 b7 2c 02 Data Ascii: T*dj^$\^]cwY2AoOo8GYrCA?.>>L/G]B&PG:Z=m@uOPASB:5skYI]6au8[w-9GKAMyG/v;@tiMA^MUNh[['(n?w0\|W[7,
2022-03-15 16:07:24 UTC	184	IN	Data Raw: 44 08 fe 60 08 f2 68 16 b4 88 53 15 4c f9 52 2c bd 19 af 97 63 7b 78 8b 07 6d d6 07 0b 5e 30 5a d5 1d dd 24 ae 35 ac 73 6e bb 2f 37 53 f4 b2 61 3b 6c 28 eb aa ad 1f b0 e6 3c e0 80 a1 c2 2b 22 7a 95 39 7b 19 f7 14 e6 6e 94 78 fa aa b4 d6 74 fe 0f f9 a4 65 c5 2e e5 21 6c 31 53 d5 81 4e cc 39 b5 8b b2 bb c5 9f ad 54 aa ae 75 7d 55 f2 1e 47 2b 3d 0a 78 b2 2a 04 fd af a5 9f 04 b2 10 29 76 c1 4d be 52 7c cd 04 68 70 87 2c 84 42 52 3d 7d 45 76 bf 2b f6 67 cb 6f d8 b5 e1 97 be 5d 6e 6e 0b b6 30 ab 4b d7 0e 64 66 23 75 ad 04 c9 06 12 0d d7 78 8e 13 91 0c fa 4d 08 05 44 b1 17 58 4f 92 67 2f 91 a0 a7 60 d5 fb eb 15 e9 82 71 21 f2 c3 99 92 f4 27 df 42 a5 43 50 ca 6e dd 90 61 68 bd fa 6a c9 b0 86 cf ff e2 3c 6f f7 22 b9 22 27 69 a4 c9 4a fa 1b bb 24 99 69 5f e5 b8 c0 Data Ascii: D`hSLR,c{xm^0Z$5sn/7Sa;l(<+"z9{nxte.!l1SN9Tu}UG+=x*)vMR\|hp,BR=}Ev+go]nn0Kdf#uxMDXOg/`q!'BCPnahj<o""'iJ$i_
2022-03-15 16:07:24 UTC	186	IN	Data Raw: 5b 74 93 24 75 e8 a3 a4 06 05 7c 1c dc 2e 94 e8 16 b6 f7 d8 9f 4f 20 a5 38 9d 67 b3 01 3f 3f 55 2c 55 2a f9 6c 5e 24 41 02 af f9 f8 09 a2 c2 93 a8 cb 1a 1f 36 bb 3c d6 9b 92 1a 1f 77 ac 64 20 53 4e e9 ca 9c 61 98 29 de 45 ab 58 74 f8 19 9c 18 13 f1 30 c8 9c 48 cd 57 1f a2 10 83 a0 0c f8 4a fb 64 fb 26 06 64 da f8 0f 8b b0 5d 81 14 21 72 2c 3c a2 c3 85 b7 a9 71 1b bc d3 d1 14 5b a1 17 d0 f5 a2 df c8 33 92 57 4f 40 5d cf 67 b0 67 17 6a 81 83 50 45 b1 6b 35 8f 47 fb 4a 0a e3 f4 96 3d 3d 0e 33 8f f3 f7 1b 2d d1 61 7b fb c5 dd ed 60 88 6e 0e e3 43 d0 72 90 11 df d7 e3 b3 b7 11 54 19 fa 81 68 ef 3e e8 09 b0 7c 39 55 e2 62 0e 6f 6e 0b 87 4e 96 db 1e 35 3d 98 62 ca 9c 5d 75 75 c3 67 5b 20 b6 37 d5 9a b8 e9 3c f5 01 aa 9c 45 06 e2 12 a7 44 f0 1c fc bc 61 e7 b7 36 Data Ascii: [t$u\|.O 8g??U,U*l^$A6<wd SNa)EXt0HWJd&d]!r,<q[3WO@]ggjPEk5GJ==3-a{`nCrTh>\|9UbonN5=b]uug[ 7<EDa6
2022-03-15 16:07:24 UTC	187	IN	Data Raw: 65 b7 7d 59 41 69 9d 68 36 97 4a 53 72 fd 1a b5 db c3 1d 44 f6 00 96 26 30 89 85 6a f3 09 ea 99 70 d7 f8 6e fb c1 c5 98 3a cf 8d bd 1a 9c 0b fd 1c 74 38 71 8b 69 aa 6e d8 a3 b4 10 5c cb 7b ac 33 63 c0 61 e6 b1 07 0e ef 9b 72 98 51 b2 70 9a 82 24 84 4c 2e 1a f8 a3 ed c5 c4 e0 b2 c1 49 7b 0c 9f 3d 8c 58 1e 6b 53 b9 35 d0 61 8a 16 9b 4b 7b ba d5 e6 91 a4 00 4c b2 f3 12 57 a4 81 d5 84 ae 5e ed 46 84 9a 75 e9 45 1d 43 38 63 d5 36 8c 0c c6 45 be 9e 90 bf 61 4e 9e 84 05 09 31 2b 3d 0a a5 ed 3c 56 ce 71 06 e0 cd a7 d8 6c b1 9c a6 95 06 52 6b 9e 5b 1f c9 a9 71 1e d3 40 10 47 d5 a8 11 dd c7 31 9c 12 fa d1 8e 33 3f 84 2c 28 a4 ea 33 fe da a6 01 f8 f9 49 b6 a2 be b8 87 e8 29 40 66 db b6 9f d6 79 63 9c c5 1e 2c 69 a0 29 a7 7b e4 eb c0 18 e6 de fa 00 f1 ea a3 b1 36 81 Data Ascii: e}YAih6JSrD&0jpn:t8qin\{3carQp$L.I{=XkS5aK{LW^FuEC8c6EaN1+=<VqlRk[q@G13?,(3I)@fyc,i){6
2022-03-15 16:07:24 UTC	188	IN	Data Raw: 8c fd 88 52 c3 dd 1e a1 19 be 69 6e 33 6c d3 1f ca d2 ed 7e 66 2d 9d a2 40 37 24 72 24 b6 f9 a0 da 0c 20 e3 48 56 b1 72 e5 f2 df aa f5 0e dd e1 82 0d bf 58 7c a5 b6 96 58 b2 2c 3d e9 50 a3 f7 e4 17 9f 41 b2 2c e7 ef f3 22 44 d2 ab c1 c8 e5 27 3f da 04 28 ba 13 bf 21 71 ff bd 1d da d6 22 ad 90 1b 5e 73 92 bb 90 ef ae a6 cc 52 a6 11 74 5f 67 c6 e1 78 5d a3 3f dd 39 77 61 62 51 93 d3 81 96 1b da 8d 85 21 3b 0b 02 ac db 9a 46 55 d2 46 8a 99 3b ce e3 a2 10 52 b2 18 84 2b 2e 72 4a 3d df d1 4f 18 42 d4 4c 59 12 dc e1 88 77 a7 82 b8 8a 66 de cc 77 45 59 55 d4 54 eb 30 c2 77 44 aa 10 3f f4 11 c6 a3 b4 95 68 eb 45 6e 46 e4 bc 8c 3f 95 cf a9 08 ed 4a 1b 8a 48 90 24 09 59 9a e6 42 8b 1a 3d de cf 65 5d cf b3 15 96 a5 00 2d 42 f5 83 09 9f 1f 8b 3f 80 08 86 22 19 a9 d7 Data Ascii: Rin3l~f-@7$r$ HVrX\|X,=PA,"D'?(!q"^sRt_gx]?9wabQ!;FUF;R+.rJ=OBLYwfwEYUT0wD?hEnF?JH$YB=e]-B?"
2022-03-15 16:07:24 UTC	189	IN	Data Raw: 39 23 38 30 12 d8 62 64 5d 66 89 98 1f 9b b6 b1 12 a6 40 0d c6 7c c8 af 72 8c bf 3a 0a 6a 2a e1 22 0a 84 49 44 e3 68 12 b2 ec 47 c9 45 31 de fe 8a bb 61 eb e8 32 aa fd ce 4e 5d 5a e3 6c 7f b5 b0 f4 52 eb f4 68 ae 03 34 12 13 98 9a e3 f6 86 3e 42 16 d1 3f 77 e7 d5 ae 11 54 04 31 06 bd 06 29 55 b7 3b 70 2a 2a 51 4f 59 af 28 52 82 e6 33 6b ab 3d ab 75 5a d0 72 36 56 d2 63 4c 0b 69 68 d0 f4 11 86 23 38 47 ca 4f 47 ab 89 ab 3c 35 fd f8 19 28 79 c0 99 2a 29 18 09 e6 7d 8c 90 45 ab 4a 67 f1 fa ef 5d 6f 90 70 4e eb f8 c3 e9 3c f3 8f 62 64 71 89 b9 3f 76 6a 33 94 5e d9 df 78 10 87 88 09 c5 2e 6f f5 c7 a1 95 12 95 bf 5b e1 b1 18 d0 26 26 29 26 05 28 24 ba 46 8a 20 c8 93 20 46 6e 8b ba d9 7f 3e 4b 6c 3c 1d b0 92 3d d0 a4 ea 98 99 a5 06 2e ce ed 47 b6 ba 62 c7 2c a7 Data Ascii: 9#80bd]f@\|r:j"IDhGE1a2N]ZlRh4>B?wT1)U;pQOY(R3k=uZr6VcLih#8GOG<5(y)}EJg]opN<bdq?vj3^x.o[&&)&($F Fn>Kl<=.Gb,
2022-03-15 16:07:24 UTC	191	IN	Data Raw: 32 75 e0 aa ee 5e d8 3c 7d 58 42 d3 d6 0a 07 84 52 83 28 2b b5 34 5a ad 3a 81 f1 1b 3b e7 98 6d 3e 72 71 ed 2c 43 8e 03 1c c4 96 bd 3d a0 be 36 f4 d9 eb 69 7e 79 6e cb 8c b9 3d d8 43 27 79 fe 02 ef b4 dc c5 42 49 03 84 5f 66 32 28 05 e2 05 28 ca 43 eb 89 cf d4 44 96 c0 4d c5 b3 30 86 d3 62 c5 73 7d 8a 2f 98 10 3c 4e 53 df 9b cf 97 bb 20 75 04 c4 b0 29 25 54 5c c1 04 17 1f cf 56 ad bf e1 fa c1 4e 8c 55 fa 24 4f 65 b1 c2 63 85 10 5c ab dd 92 e8 63 3d 33 18 2e 74 3b 65 10 e9 97 9a e2 49 25 9e bf 77 4f 8c 0d 8f 8e 90 06 b0 08 3b 95 d2 45 0a 98 fb 4e ce 62 c5 fb a5 c2 6a e9 83 e2 0f 56 7a 93 a5 a0 ee 47 b3 28 68 ee cc c9 c7 cb 25 84 61 56 57 4b 6c c2 ef 53 ff 07 38 9c 82 2c ec f3 00 2f be 76 54 0b 9b 08 85 b7 8c 7f 3e 3e 88 de 81 7f 8d 1a 4a 6f 46 29 9c e8 8d Data Ascii: 2u^<}XBR(+4Z:;m>rq,C=6i~yn=C'yBI_f2((CDM0bs}/<NS u)%T\VNU$Oec\c=3.t;eI%wO;ENbjVzG(h%aVWKlS8,/vT>>JoF)
2022-03-15 16:07:24 UTC	192	IN	Data Raw: dd 7b 78 bc 8a 95 04 c7 79 c2 66 97 6f 35 92 ec 90 9f f5 43 44 b6 b7 0a 1f 9b 92 e4 ba 6b 9a f3 82 7d b6 96 8f 34 9a df de ea c9 06 b3 e0 d9 eb de 6a 79 3d de 92 43 9d ff a8 20 ce 79 0d d8 f7 67 2b 14 94 ce eb 40 4a bc 7a 9b de 45 78 c8 17 ab f6 1e 27 b0 a7 08 9f 0c ee 11 1e 6d 85 13 3d ce 46 29 f0 30 24 83 8a 43 79 da 23 0c 05 ab 75 76 3e a9 8a 77 4e c2 18 70 ef 35 77 5a b8 26 c9 ff fd c6 a7 66 91 ba a6 71 9d 6a d3 0e ff 27 7d 59 c5 f2 9e dd 86 e1 21 c8 f6 e3 db 4e e2 59 22 0c ed ac ac f3 c5 00 eb 5b 21 e4 16 ef 42 00 62 f9 a9 bf aa 46 79 b3 cb 22 ed dc af 4c cb 0e 86 dd a6 14 25 1b 83 f9 23 fb c6 e9 48 44 10 c2 7a ad ab 5a a4 f3 93 40 db 16 5c 91 68 34 96 2f 03 3e 12 a4 1d 66 4f 0b 53 a9 10 66 57 92 01 3a e9 eb ac af 99 c9 a4 ef 0f de b4 05 ff e8 7f 09 Data Ascii: {xyfo5CDk}4jy=C yg+@JzEx'm=F)0$Cy#uv>wNp5wZ&fqj'}Y!NY"[!BbFy"L%#HDzZ@\h4/>fOSfW:
2022-03-15 16:07:24 UTC	193	IN	Data Raw: 23 b5 07 de b2 f8 46 81 3d 74 ec 67 0a cb bb 2e ed 54 c6 49 66 15 5d b9 96 5c c7 b4 f9 8a d7 f2 46 7d a3 8f 26 c5 96 93 b4 8a 91 ec 3e a5 ad 5c 4c f6 3f ca 81 32 ec 78 11 3b 69 b6 ea 95 1e 50 dd 7f 91 ca 53 6c 67 14 89 0c b1 cb 1b e9 29 22 7b 24 a9 c4 ed f0 ab 80 03 2f 11 4b 30 e4 65 e8 68 07 54 30 c3 4a ae 80 09 06 e8 60 e5 60 04 64 7e d0 de 87 92 5d b1 9f 1e 63 2f bb bf f2 2b 3d bb b5 eb b3 35 26 7c 03 d0 66 5d 3d bb f2 86 1a 70 ea e7 2b b9 82 93 30 70 17 56 46 6a 54 ec 0f da fb 44 eb cf 25 59 3e ca 37 5a bd 15 85 60 26 9b c8 c7 7e 48 d6 c6 77 54 50 27 41 1d bc 04 d4 db 30 f6 e8 fd ba 57 d6 05 0e 8a d9 ae e4 57 fe 41 7c 41 59 77 dc ec 5a 40 ed cb 68 55 94 68 da ff 14 d2 93 32 4d 17 7b 99 dc f1 cd e5 d3 54 8a 55 b2 97 36 74 ea 65 83 fa 16 ca 92 d2 94 5c Data Ascii: #F=tg.TIf]\F}&>\L?2x;iPSlg)"{$/K0ehT0J``d~]c/+=5&\|f]=p+0pVFjTD%Y>7Z`&~HwTP'A0WWA\|AYwZ@hUh2M{TU6te\
2022-03-15 16:07:24 UTC	194	IN	Data Raw: 9f 16 c5 4a e0 b8 3b 5c 74 85 a4 89 28 bc 8c d2 89 62 c6 ed 0f 16 4b cd 0a d8 b6 6a 56 b6 33 6b fa c3 a9 2d 8e 3a d8 ee 26 eb d1 99 fb 93 d1 7a f3 31 29 d5 80 34 53 fb b7 11 e2 97 a9 a7 6c 28 ef 06 c3 79 de 54 5c 2f ed e7 33 9e 5b 3b be 15 b2 23 7f 58 92 5f 59 bb 42 cd a3 78 84 cc d0 99 a5 2e d3 13 56 f4 62 1e 42 31 55 f4 c3 09 0b ba 76 f7 10 61 04 92 15 a3 41 80 1f 1b 9e 32 74 ac 83 3e d4 48 b8 90 f9 b8 c4 a8 1c c8 3b 3b 34 ed b5 52 37 1a fb c1 e3 ee d5 65 fe 37 6f 98 00 91 7e d8 b1 26 e7 5a ee 9c 34 7f 91 02 42 90 48 5a 2d 8c 12 80 48 6c c5 ff 36 36 fc 52 fe 9d 39 aa 0d 9d bf 04 23 da ba 9f 70 b4 3a 61 a2 28 e2 f6 f0 17 43 6a 54 8d 54 f7 d6 5b 09 d0 6a c8 fc eb bc b2 bf 7d bd 63 90 bf a1 43 ca e2 91 6f 97 df b2 6b c7 5f f8 76 12 08 16 ac 25 09 82 62 e2 Data Ascii: J;\t(bKjV3k-:&z1)4Sl(yT\/3[;#X_YBx.VbB1UvaA2t>H;;4R7e7o~&Z4BHZ-Hl66R9#p:a(CjTT[j}cCok_v%b
2022-03-15 16:07:24 UTC	196	IN	Data Raw: 70 80 bb 8e 8e 72 fc 45 65 f2 88 5b 0f 39 4e 9e 0a 6e 97 2c 08 0b 34 49 a8 62 e1 95 8a a6 0f c7 c8 a7 14 4d 6c 9b 85 d9 8e f5 fa ad 53 c0 10 53 c2 14 27 3d be 1d a2 e0 69 2a fb 6b 38 72 59 f6 d3 a9 3d cc d1 1b 55 46 72 bd 1c a0 c2 14 07 7b 8d cc 46 b6 c0 38 26 8d 61 9c bd 97 30 f3 59 e5 8a 76 ed 83 da 39 ed 8f 85 54 08 d6 34 a9 04 44 bf d9 3d 65 57 80 50 76 15 a1 77 71 fb 9d f5 72 20 2c a6 3d f6 16 fe 58 0e 33 12 9b 49 aa 7b 53 f5 7a e9 a1 66 f6 ca 5c 95 04 7b fb d7 d7 dc d6 3f c3 14 3d b6 4f 4f 2e 10 78 00 3e 02 41 d8 13 cf ed da 6c f1 87 fc 5f e6 2f 42 62 14 9d 25 08 e3 5f db 61 c8 a8 60 c9 9a c9 28 36 5f b6 a5 05 c1 2c b2 db fd ab c2 24 f6 bc ce 58 d7 44 93 6a f4 34 3d 22 1f d2 1c d7 ec fd 9f aa 3c 35 09 02 09 a6 83 9e e6 4e 3f e0 4c cb 12 1d 03 0f 7e Data Ascii: prEe[9Nn,4IbMlSS'=i*k8rY=UFr{F8&a0Yv9T4D=eWPvwqr ,=X3I{Szf\{?=OO.x>Al_/Bb%_a`(6_,$XDj4="<5N?L~
2022-03-15 16:07:24 UTC	197	IN	Data Raw: 80 02 e1 6b 2e 81 d6 f8 06 28 16 e7 c4 d0 b3 ba 8c 44 95 a9 d6 cb 82 c3 af 05 58 65 7a 32 b5 82 be 58 2b ca 6d 2a 07 44 56 79 d8 c0 1a 5e dd e4 1c 5d 43 6f 2b 65 e5 1b 81 0e 2b dc c5 c8 d3 4e 15 2b b5 da b1 61 5e e4 73 d9 02 dc 6c ce 4a 0e 1c ca d0 c0 a5 ed cd db cc 1a d2 a5 71 ca 4f 2e bb 7f ae 7d 9d 77 f2 65 d0 fe d4 69 3c ce f3 a9 54 92 93 d1 ba ae ea 12 24 a5 28 30 d8 10 63 93 66 de 54 2a 66 61 0d d1 65 37 f7 a3 c9 56 36 5c 42 89 14 31 b6 21 52 5e 2a 0d 8b 76 6c 58 ab 6b 46 57 d5 0d a9 da 0e 89 ad 38 b9 33 14 b7 17 a9 b9 83 e3 78 fc 28 cc 38 d9 6b 6d 2d 03 d7 07 7d f0 f5 e4 f2 4e 36 01 8b 83 d9 22 f1 10 a4 a6 74 02 af fa 57 25 03 2a 4b 60 e1 c4 0e 59 97 03 f3 65 77 8f 05 ea c7 cd b0 6c 97 02 b8 ad f7 f2 a1 66 77 83 48 93 02 26 6a 6e f5 69 93 20 76 a5 Data Ascii: k.(DXez2X+mDVy^]Co+e+N+a^slJqO.}wei<T$(0cfTfae7V6\B1!R^vlXkFW83x(8km-}N6"tW%K`YewlfwH&jni v
2022-03-15 16:07:24 UTC	198	IN	Data Raw: b8 b2 ac 87 94 fc bd e1 97 c1 7e 09 09 93 c4 11 b7 57 e2 a8 b0 e7 21 22 43 11 5c 27 84 3d 90 6d c9 03 8b 2f 31 c1 04 3a 11 86 61 52 45 34 cd 49 48 28 b8 a0 b1 58 53 24 da 1e 1d 74 5a f2 2e 4b 42 32 31 96 01 0a b5 19 4d c3 95 7c 66 bb 31 25 b4 60 3e b9 34 1e 42 6f 51 4d cb 5d 9d 0a 15 b2 2a 52 b4 2a 5b fe f0 a6 80 50 69 a1 81 9c 49 e9 ed 79 71 a4 82 07 c4 2a 80 30 17 4b 91 94 26 a2 08 d4 28 25 10 6c 99 8a 14 b5 16 6d ea 47 b4 05 2a c3 79 2d 65 34 df ed d6 eb dc c4 d0 4d 0d a9 ae d7 a1 f9 d6 9b cb 08 b1 2d d4 65 62 9f bc d0 97 79 16 96 95 5c 9c f6 15 5a c2 bf 97 8c e4 da 50 7d 4b 53 18 77 99 53 e9 e3 40 3c 73 25 34 c1 4a 01 6c 06 da cc b5 d1 19 52 a6 80 35 af 09 5b da 8b 88 32 2f 17 e6 b8 83 25 fa 52 b3 72 bd a5 d7 98 b7 5c 3d 3c cc 5c 4f da 08 82 c2 06 8b Data Ascii: ~W!"C\'=m/1:aRE4IH(XS$tZ.KB21M\|f1%`>4BoQM]R[PiIyq0K&(%lmGy-e4M-eby\ZP}KSwS@<s%4JlR5[2/%Rr\=<\O
2022-03-15 16:07:24 UTC	199	IN	Data Raw: db 44 69 9c ea 48 c5 dc f6 2d 03 fc 42 1f 1e c5 f3 1f 58 bd 5b 61 5a b1 13 29 55 2a 45 24 68 94 71 34 c9 30 04 d9 1e e8 0c 6e 98 e7 43 23 8a 64 67 07 4b 9a de 81 dd de 4c 47 11 d0 8f 0c ab fc f2 39 3f eb 4f 14 d7 c9 44 05 c2 ea e4 cc 94 ba 69 da 79 da 15 10 5a 30 56 46 07 8d e7 76 e1 4e ee c1 47 c5 a6 0a 3f fd 4f 70 8f 3d 6e f8 27 07 8c c6 ef 02 88 5c 96 36 28 7c a2 de 9d 60 82 0b c4 2c 37 d3 c3 64 39 68 74 a7 73 d3 75 92 c0 8d 99 db df 6b 7f 3f db cb 3c e4 cc f6 d0 96 be b8 f8 3f 75 74 f7 36 16 ee 4f 8f 96 5a 07 57 05 cb 9d c1 5a 64 55 8b 48 89 74 a5 2a 3f 18 2a cf ae 04 99 19 c3 67 b3 cb b7 9e 3d 94 fb 64 76 3d 0d 6c 3e 37 87 5b 82 7d a1 67 52 fc f4 11 51 ec 1d 37 d2 3b d6 1e 77 bd 86 da c3 b5 91 e2 3e b0 14 ef 5c 56 98 e9 5d aa c0 a0 4d 91 ea 49 9d 7a Data Ascii: DiH-BX[aZ)UE$hq40nC#dgKLG9?ODiyZ0VFvNG?Op=n'\6(\|`,7d9htsuk?<?ut6OZWZdUHt?*g=dv=l>7[}gRQ7;w>\V]MIz
2022-03-15 16:07:24 UTC	201	IN	Data Raw: 84 00 00 f6 66 56 1f 78 ed 9d d7 dd bf f7 dc 22 aa c3 6a fe a5 b6 9d 08 82 5f 3b b1 b0 e5 3f 5f f9 af 67 e9 63 52 04 1d 80 b9 02 08 76 ba 42 ff c7 0c d2 bd ae cc 20 2b 48 7a 42 83 fa c7 17 f8 88 d3 36 74 7f f0 71 54 05 0b f6 27 13 ac e2 29 fe 2b 2e f1 69 ea 25 55 1f 87 55 0b 22 00 35 a7 18 c7 8e 74 fd 67 26 4f a0 9d a2 0f ac 4e 95 cd a2 44 09 47 f1 27 f8 6d bc 1e 93 f0 cf f8 9d d0 67 20 a5 70 18 10 3f c5 03 86 2c 74 4a 53 72 92 0c 40 9a 8d a6 44 a0 30 b5 ab 74 cc 20 6b 5d 8c bb d0 ef b4 39 60 d5 c0 83 ba 2d 1c cd dc d2 12 53 05 ee 09 3b 0a 63 67 44 73 e3 63 24 f1 31 0e f9 d4 c7 ab f8 15 a0 8c af af 1d af 80 8d 07 02 c4 d3 79 d6 2e 63 aa 97 92 b5 0d 07 7b 3e 94 fa 2e a6 11 10 33 08 89 bf a8 0e 7d 64 80 7a 54 94 b6 a7 65 41 db d1 89 7f a9 36 2c 57 51 f1 ca Data Ascii: fVx"j_;?_gcRvB +HzB6tqT')+.i%UU"5tg&ONDG'mg p?,tJSr@D0t k]9`-S;cgDsc$1y.c{>.3}dzTeA6,WQ
2022-03-15 16:07:24 UTC	202	IN	Data Raw: 3c 7c 7c 30 dd 7d bc 33 cd 06 54 fb 49 72 90 ec 24 ff 8b a3 21 81 7f 5f 1d a8 3f 70 04 3b ae 32 f7 f1 de 74 f3 f1 c6 74 2f d9 48 4e e9 60 e3 a8 9c e3 6a d3 3e da c6 43 fc 95 b7 d9 7e 25 8b d5 16 b8 4d 97 c0 cf b9 1e 9f 13 3b 2c 21 8c 11 da cb 4b 97 10 7f 24 df 7d ff 0e 57 0a c1 b2 5f ad ee 17 07 7e 15 9f 88 e2 e1 8d c3 1c a5 f8 58 dd 51 d6 d5 3e 0e 65 6e 2a 4b 95 cc d8 f9 9a ac f3 a9 9e 2d ce c9 8f 6f 7d 54 82 df ab 4c 2f be ac cc ce df 56 76 f5 e7 00 Data Ascii: <\|\|0}3TIr$!_?p;2tt/HN`j>C~%M;,!K$}W_~XQ>en*K-o}TL/Vv

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5872, Parent PID: 1216

General

Target ID:	1
Start time:	17:07:13
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5180, Parent PID: 5872

General

Target ID:	3
Start time:	17:07:16
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1904 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6072, Parent PID: 5872

General

Target ID:	4
Start time:	17:07:28
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6208 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6984, Parent PID: 5872

General

Target ID:	5
Start time:	17:07:34
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6220 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 1028, Parent PID: 568

General

Target ID:	6
Start time:	17:07:34
Start date:	15/03/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
Imagebase:	0x7ff73c930000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6640, Parent PID: 5872

General

Target ID:	7
Start time:	17:07:34
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6192 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3432, Parent PID: 5872

General

Target ID:	8
Start time:	17:07:34
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6244 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 6680, Parent PID: 568

General

Target ID:	9
Start time:	17:07:36
Start date:	15/03/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k NetworkService -p
Imagebase:	0x7ff73c930000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: SgrmBroker.exePID: 6480, Parent PID: 568

General

Target ID:	11
Start time:	17:07:37
Start date:	15/03/2022
Path:	C:\Windows\System32\SgrmBroker.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\SgrmBroker.exe
Imagebase:	0x7ff7dd5a0000
File size:	163336 bytes
MD5 hash:	D3170A3F3A9626597EEE1888686E3EA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 3204, Parent PID: 568

General

Target ID:	12
Start time:	17:07:38
Start date:	15/03/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
Imagebase:	0x7ff73c930000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 6516, Parent PID: 568

General

Target ID:	13
Start time:	17:07:43
Start date:	15/03/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff73c930000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5252, Parent PID: 5872

General

Target ID:	14
Start time:	17:07:45
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3924 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1292, Parent PID: 5872

General

Target ID:	15
Start time:	17:07:46
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3796 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4208, Parent PID: 5872

General

Target ID:	16
Start time:	17:07:46
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3940 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5956, Parent PID: 5872

General

Target ID:	17
Start time:	17:07:46
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3900 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 476, Parent PID: 568

General

Target ID:	18
Start time:	17:07:54
Start date:	15/03/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff73c930000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4432, Parent PID: 5872

General

Target ID:	19
Start time:	17:07:55
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=none --enable-audio-service-sandbox --mojo-platform-channel-handle=2200 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1248, Parent PID: 5872

General

Target ID:	20
Start time:	17:07:55
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3300 /prefetch:8
Imagebase:	0x7ff73c930000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3780, Parent PID: 5872

General

Target ID:	21
Start time:	17:07:55
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2264 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5024, Parent PID: 5872

General

Target ID:	22
Start time:	17:07:57
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2204 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4600, Parent PID: 5872

General

Target ID:	23
Start time:	17:07:57
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3376 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 6412, Parent PID: 568

General

Target ID:	24
Start time:	17:08:00
Start date:	15/03/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff73c930000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 4596, Parent PID: 568

General

Target ID:	26
Start time:	17:08:14
Start date:	15/03/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff73c930000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3556, Parent PID: 5872

General

Target ID:	27
Start time:	17:08:20
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=2172 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5240, Parent PID: 5872

General

Target ID:	28
Start time:	17:08:20
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3544 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5204, Parent PID: 5872

General

Target ID:	29
Start time:	17:08:20
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3900 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5680, Parent PID: 5872

General

Target ID:	30
Start time:	17:08:21
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=3992 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: MpCmdRun.exePID: 4872, Parent PID: 3204

General

Target ID:	33
Start time:	17:08:41
Start date:	15/03/2022
Path:	C:\Program Files\Windows Defender\MpCmdRun.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
Imagebase:	0x7ff7b0320000
File size:	455656 bytes
MD5 hash:	A267555174BFA53844371226F482B86B
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 4868, Parent PID: 4872

General

Target ID:	34
Start time:	17:08:41
Start date:	15/03/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7c9170000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: DropboxInstaller (1).exePID: 6352, Parent PID: 5872

General

Target ID:	35
Start time:	17:08:49
Start date:	15/03/2022
Path:	C:\Users\user\Downloads\DropboxInstaller (1).exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Downloads\DropboxInstaller (1).exe"
Imagebase:	0x30000
File size:	655232 bytes
MD5 hash:	96D1044856B6E12A79CC88731DBF309D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: svchost.exePID: 2136, Parent PID: 568

General

Target ID:	36
Start time:	17:08:55
Start date:	15/03/2022
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff73c930000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3768, Parent PID: 5872

General

Target ID:	38
Start time:	17:09:12
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5712 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3116, Parent PID: 5872

General

Target ID:	39
Start time:	17:09:13
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5784 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6416, Parent PID: 5872

General

Target ID:	40
Start time:	17:09:14
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6628 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5272, Parent PID: 5872

General

Target ID:	41
Start time:	17:09:14
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=6640 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5644, Parent PID: 5872

General

Target ID:	42
Start time:	17:09:16
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=none --enable-audio-service-sandbox --mojo-platform-channel-handle=4800 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: DropboxUpdate.exePID: 3588, Parent PID: 6352

General

Target ID:	43
Start time:	17:09:16
Start date:	15/03/2022
Path:	C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\GUM4ACC.tmp\DropboxUpdate.exe /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TlRBMk43QzBORE0wTVRJMU5MTXdOemMwTXpjME5iUTBNVE13TWpFeU16TXhOekF5TjZnRkFKeE5EWWN-QE1FVEEifQ"
Imagebase:	0x1340000
File size:	130320 bytes
MD5 hash:	8AD76E0B347BB690697535CE95B1C656
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, Metadefender, Browse Detection: 0%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4908, Parent PID: 5872

General

Target ID:	44
Start time:	17:09:16
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=5688 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3152, Parent PID: 5872

General

Target ID:	45
Start time:	17:09:17
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=4296 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4076, Parent PID: 5872

General

Target ID:	46
Start time:	17:09:18
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=1508 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5540, Parent PID: 5872

General

Target ID:	47
Start time:	17:09:18
Start date:	15/03/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1604,1077968653917423324,16423705197098024505,131072 --lang=en-US --service-sandbox-type=icon_reader --enable-audio-service-sandbox --mojo-platform-channel-handle=4280 /prefetch:8
Imagebase:	0x7ff7f6290000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: DropboxInstaller (1).exePID: 6352, Parent PID: 5872COMMON

Execution Graph

Execution Coverage:	12.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	5.8%
Total number of Nodes:	1673
Total number of Limit Nodes:	29

Executed Functions

Function 00031791 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 115
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 89%

			E00031791(void* __ecx, void* __eflags) {
				signed int _v8;
				char _v530;
				short _v532;
				struct HRSRC__* _v536;
				signed int _v540;
				char _v544;
				union _LARGE_INTEGER* _v552;
				union _LARGE_INTEGER _v556;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t31;
				int _t37;
				struct HRSRC__* _t47;
				void* _t48;
				void* _t49;
				void* _t51;
				void* _t54;
				int _t56;
				struct HRSRC__* _t57;
				void* _t65;
				WCHAR* _t66;
				signed int _t69;

				_t31 =  *0x409f8; // 0x6ba050e2
				_v8 = _t31 ^ _t69;
				_v540 = _v540 | 0xffffffff;
				_t58 = 0;
				_v532 = 0;
				_t67 = __ecx;
				_v544 = 0;
				E00038B70(_t66,  &_v530, 0, 0x206);
				_t37 = GetTempFileNameW( *(_t67 + 0x20), L"GUT", 0,  &_v532); // executed
				_t74 = _t37;
				if(_t37 != 0) {
					E00032182( &_v536, _t65, _t74,  &_v532);
					E00032291( &_v536, _t67 + 0x10);
					E000310B5(_v536 + 0xfffffff0, _t65);
					_t67 = FindResourceW;
					_t66 = "B";
					_t58 = 0;
					_t47 = FindResourceW(0, 0x67, _t66);
					_v536 = _t47;
					if(_t47 != 0) {
						L3:
						_t48 = LoadResource(_t58, _v536);
						if(_t48 != _t58) {
							_t49 = LockResource(_t48);
							_t67 = _t49;
							if(_t49 != _t58) {
								_t51 = CreateFileW( &_v532, 0xc0000000, _t58, _t58, 4, _t58, _t58); // executed
								_v540 = _t51;
								if(_t51 != 0xffffffff) {
									_t66 =  &_v556;
									asm("stosd");
									asm("stosd");
									_t54 = E00031B75(_t67, _t65, SizeofResource(_t58, _v536), _v540, _v544); // executed
									if(_t54 != 0) {
										L8:
										CloseHandle(_v540);
										_v540 = _v540 | 0xffffffff;
									} else {
										_push(_t58);
										_t56 = SetFilePointerEx(_v540, _v556, _v552, _t58); // executed
										if(_t56 == 0) {
											goto L8;
										}
									}
								}
							}
						}
					} else {
						_v544 = 1;
						_t57 = FindResourceW(0, 0x66, _t66);
						_v536 = _t57;
						if(_t57 != 0) {
							goto L3;
						}
					}
				}
				return E000388DE(_v540, _t58, _v8 ^ _t69, _t65, _t66, _t67);
			}

0x0003179a
0x000317a1
0x000317a4
0x000317b0
0x000317b7
0x000317c6
0x000317c8
0x000317ce
0x000317e7
0x000317ed
0x000317ef
0x00031802
0x00031810
0x0003181e
0x00031823
0x00031829
0x00031831
0x00031834
0x00031836
0x0003183e
0x0003185b
0x00031862
0x0003186a
0x00031871
0x00031877
0x0003187b
0x00031893
0x00031899
0x000318a2
0x000318b2
0x000318be
0x000318c0
0x000318ca
0x000318d4
0x000318f4
0x000318fa
0x00031900
0x000318d6
0x000318d6
0x000318ea
0x000318f2
0x00000000
0x00000000
0x000318f2
0x000318d4
0x000318a2
0x0003187b
0x00031840
0x00031844
0x0003184b
0x0003184d
0x00031855
0x00000000
0x00000000
0x00031855
0x0003183e
0x0003191b

APIs

_memset.LIBCMT ref: 000317CE
GetTempFileNameW.KERNELBASE(?,GUT,00000000,?), ref: 000317E7

Part of subcall function 00032291: __recalloc.LIBCMT ref: 000322CF

FindResourceW.KERNEL32(00000000,00000067,0003EB90,?), ref: 00031834
FindResourceW.KERNEL32(00000000,00000066,0003EB90), ref: 0003184B
LoadResource.KERNEL32(00000000,?), ref: 00031862
LockResource.KERNEL32(00000000), ref: 00031871
CreateFileW.KERNELBASE(?,C0000000,00000000,00000000,00000004,00000000,00000000), ref: 00031893
SizeofResource.KERNEL32(00000000,?,000000FF,?), ref: 000318C1
SetFilePointerEx.KERNELBASE(000000FF,?,?,00000000,00000000), ref: 000318EA
CloseHandle.KERNEL32(000000FF), ref: 000318FA

Strings

GUT, xrefs: 000317E1

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: Resource$File$Find$CloseCreateHandleLoadLockNamePointerSizeofTemp__recalloc_memset
String ID: GUT
API String ID: 2327719940-559840939
Opcode ID: 020eb39c3de96089596d6a9cf5d052928f74250e3ea352df70f9a6199ebc2398
Instruction ID: 9803290cfb1dd2353444b4a18e1c18dbb8528dd443a07130371558e1eca979b6
Opcode Fuzzy Hash: 020eb39c3de96089596d6a9cf5d052928f74250e3ea352df70f9a6199ebc2398
Instruction Fuzzy Hash: EE41857194021DBFDF21AB64DC8DBDA77BCAB18314F0006E5F519E21A1DA708E948FA0

Uniqueness

Uniqueness Score: -1.00%

Function 00032BD4 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 164
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 91%

			E00032BD4(void* __edx, void** __edi, void* _a4) {
				signed int _v12;
				void _v262160;
				char _v262415;
				char _v262548;
				void _v262672;
				struct _OVERLAPPED* _v262673;
				WCHAR* _v262680;
				signed int _v262684;
				long _v262688;
				void* _v262692;
				long _v262696;
				long _v262700;
				void* __ebx;
				void* __esi;
				signed int _t52;
				int _t57;
				long _t58;
				int _t63;
				void* _t73;
				long _t76;
				void* _t83;
				int _t89;
				int _t92;
				struct _OVERLAPPED* _t97;
				void* _t99;
				long _t104;
				void* _t105;
				void** _t106;
				signed int _t108;
				signed int _t112;

				_t106 = __edi;
				_t105 = __edx;
				E0003BD70(0x4022c);
				_t52 =  *0x409f8; // 0x6ba050e2
				_v12 = _t52 ^ _t112;
				_v262692 = _a4;
				_t97 = 0;
				_t107 = 0x200;
				_v262673 = 1;
				_t57 = ReadFile( *__edi,  &_v262672, 0x200,  &_v262696, 0); // executed
				if(_t57 == 0 || _v262696 != 0x200) {
					L7:
					_t58 = 0;
					__eflags = 0;
				} else {
					if(E00039CD8( &_v262415, 0x3ebb4, 4) != 0) {
						_t63 = E00039CD8( &_v262415, "ustar", 5);
						__eflags = _t63;
						if(_t63 != 0) {
							goto L7;
						}
						_v262680 = E00032625(__edi[1] - 0x10, 0) + 0x10;
						E00032E14(_t99, _t105, __eflags,  &_v262680, 0x3ec48);
						E00032E14(_t99, _t105, __eflags,  &_v262680,  &_v262672);
						_t107 = _v262680;
						_t73 = CreateFileW(_v262680, 0x40000000, 0, 0, 2, 0x100, 0); // executed
						_v262692 = _t73;
						__eflags = _t73 - 0xffffffff;
						if(_t73 != 0xffffffff) {
							_t108 = E0003BFCA( &_v262548, 0, 8);
							_v262684 = _t108;
							_t76 = SetFilePointer( *__edi, 0, 0, 1); // executed
							_t107 = ( ~_t108 & 0x000001ff) + _t76 + _v262684;
							_v262700 = _t107;
							__eflags = _v262684;
							if(_v262684 <= 0) {
								L17:
								FindCloseChangeNotification(_v262692); // executed
								__eflags = _v262673 - _t97;
								if(_v262673 != _t97) {
									__eflags = _t106[2] - _t97;
									if(_t106[2] != _t97) {
										E00032291( &_v262680,  &(_t106[3]));
										_t107 = _v262700;
										_t97 = 0;
										__eflags = 0;
									}
									_t83 = _t106[6];
									__eflags = _t83 - _t97;
									if(_t83 != _t97) {
										 *_t83(_t106[7], _v262680);
									}
								}
								__eflags = _t107 - 0xffffffff;
								if(_t107 != 0xffffffff) {
									SetFilePointer( *_t106, _t107, _t97, _t97); // executed
								}
								E000310B5( &(_v262680[0xfffffffffffffff8]), _t105);
								_t58 = _v262673;
								L8:
								return E000388DE(_t58, _t97, _v12 ^ _t112, _t105, _t106, _t107);
							} else {
								goto L10;
							}
							while(1) {
								L10:
								_t104 = _v262684;
								_v262688 = 0x40000;
								__eflags = _t104 - 0x40000;
								if(_t104 < 0x40000) {
									_v262688 = _t104;
								}
								_t89 = ReadFile( *_t106,  &_v262160, _v262688,  &_v262696, _t97); // executed
								__eflags = _t89;
								if(_t89 == 0) {
									break;
								}
								_t92 = WriteFile(_v262692,  &_v262160, _v262688,  &_v262696, _t97); // executed
								__eflags = _t92;
								if(_t92 == 0) {
									break;
								}
								_t36 =  &_v262684;
								 *_t36 = _v262684 - _v262688;
								__eflags =  *_t36;
								if( *_t36 != 0) {
									continue;
								}
								goto L17;
							}
							_v262673 = _t97;
							goto L17;
						}
						E000310B5(_t107 - 0x10, _t105);
						goto L7;
					}
					 *_v262692 = 1;
					_t58 = 1;
				}
			}

0x00032bd4
0x00032bd4
0x00032bdc
0x00032be1
0x00032be8
0x00032bf0
0x00032bf6
0x00032c00
0x00032c0f
0x00032c16
0x00032c1e
0x00032cdb
0x00032cdb
0x00032cdb
0x00032c30
0x00032c48
0x00032c68
0x00032c70
0x00032c72
0x00000000
0x00000000
0x00032c82
0x00032c94
0x00032ca7
0x00032cac
0x00032cc2
0x00032cc8
0x00032cce
0x00032cd1
0x00032d05
0x00032d07
0x00032d0d
0x00032d21
0x00032d23
0x00032d29
0x00032d2f
0x00032da8
0x00032dae
0x00032db4
0x00032dba
0x00032dbc
0x00032dbf
0x00032dca
0x00032dcf
0x00032dd5
0x00032dd5
0x00032dd5
0x00032dd7
0x00032dda
0x00032ddc
0x00032de7
0x00032dea
0x00032ddc
0x00032deb
0x00032dee
0x00032df5
0x00032df5
0x00032e04
0x00032e09
0x00032cdd
0x00032cea
0x00000000
0x00000000
0x00000000
0x00032d31
0x00032d31
0x00032d31
0x00032d3c
0x00032d42
0x00032d44
0x00032d46
0x00032d46
0x00032d63
0x00032d69
0x00032d6b
0x00000000
0x00000000
0x00032d88
0x00032d8e
0x00032d90
0x00000000
0x00000000
0x00032d98
0x00032d98
0x00032d98
0x00032d9e
0x00000000
0x00000000
0x00000000
0x00032da0
0x00032da2
0x00000000
0x00032da2
0x00032cd6
0x00000000
0x00032cd6
0x00032c50
0x00032c53
0x00032c53

APIs

ReadFile.KERNELBASE(?,?,00000200,?,00000000,00000000,?,?,0003142E,00000000), ref: 00032C16
_memcmp.LIBCMT ref: 00032C3E
_memcmp.LIBCMT ref: 00032C68
CreateFileW.KERNELBASE(?,40000000,00000000,00000000,00000002,00000100,00000000,?,?,?,0003EC48), ref: 00032CC2
__wcstoi64.LIBCMT ref: 00032CF7
SetFilePointer.KERNELBASE(?,00000000,00000000,00000001), ref: 00032D0D
ReadFile.KERNELBASE(?,?,?,?,00000000), ref: 00032D63
WriteFile.KERNELBASE(?,?,?,?,00000000), ref: 00032D88
FindCloseChangeNotification.KERNELBASE(?), ref: 00032DAE
SetFilePointer.KERNELBASE(?,00000000,00000000,00000000), ref: 00032DF5

Strings

ustar, xrefs: 00032C62

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: File$PointerRead_memcmp$ChangeCloseCreateFindNotificationWrite__wcstoi64
String ID: ustar
API String ID: 403462011-529472938
Opcode ID: 6d290dffce8a477b0ba4beb982a3f5daaf962158166daf6fa33277f5c85e20dc
Instruction ID: 49354ef9b40a38ad2e370f2365767fd505d50a80e019cba875e0693bde98d020
Opcode Fuzzy Hash: 6d290dffce8a477b0ba4beb982a3f5daaf962158166daf6fa33277f5c85e20dc
Instruction Fuzzy Hash: 65513EF194122DAFDB22DF64DD89ADDB7BCAF04304F1001E5E618B6191E7B09B948F58

Uniqueness

Uniqueness Score: -1.00%

Function 0003139D Relevance: 17.7, APIs: 4, Strings: 6, Instructions: 156
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 90%

			E0003139D(void* __eax, void* __ecx, void* __edx, void* __eflags) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				char _v28;
				signed int _v32;
				void* _v36;
				signed int _v40;
				void* _v48;
				char _v52;
				void* _v56;
				char _v60;
				char _v61;
				char _v64;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t43;
				void* _t44;
				signed int _t47;
				signed int _t51;
				signed int _t53;
				signed int _t54;
				intOrPtr _t55;
				void* _t59;
				WCHAR* _t62;
				signed int _t64;
				void* _t93;
				signed int _t95;
				signed int* _t112;
				void* _t116;
				signed int _t120;

				_t106 = __edx;
				_t93 = __eax; // executed
				_t43 = E000316F6(__eax, __edx, __eflags); // executed
				if(_t43 == 0) {
					_t44 = E00031791(_t93, __eflags); // executed
					_t116 = _t44;
					asm("sbb eax, eax");
					_t47 =  ~(_t44 + 1) &  *0x3ebc0;
					_v56 = _t116;
					__eflags = _t47;
					if(_t47 != 0) {
						_v36 = _t116;
						_t51 = E00032625( *((intOrPtr*)(_t93 + 0x1c)) - 0x10, _t93) + 0x10;
						__eflags = _t51;
						_v32 = _t51;
						_v28 = 1;
						_v24 = 0;
						_v20 = 0;
						_v16 = 0;
						_v12 = E00031B51;
						_v8 = _t93;
						_v61 = 0;
						while(1) {
							_t53 = E00032BD4(_t106,  &_v36,  &_v61); // executed
							__eflags = _t53;
							if(_t53 == 0) {
								break;
							}
							__eflags = _v61;
							if(_v61 == 0) {
								continue;
							}
							_t55 =  *((intOrPtr*)(_t93 + 8));
							_t112 = _t93 + 0xc;
							 *_t112 =  *_t112 | 0xffffffff;
							__eflags =  *(_t55 - 0xc);
							if( *(_t55 - 0xc) == 0) {
								L20:
								_t95 =  *_t112;
								E00032B8B(_t106,  &_v36);
								__eflags = _t116 - 0xffffffff;
								if(_t116 != 0xffffffff) {
									CloseHandle(_t116);
								}
								_t54 = _t95;
								L23:
								return _t54;
							}
							_t59 = E00032625(_t55 + 0xfffffff0, _t93);
							_v40 = _v40 | 0xffffffff;
							_v60 = _t59 + 0x10;
							_v48 =  &_v60;
							_t62 = E00032567( &_v60, 0x104);
							_v48 = _t62;
							PathQuoteSpacesW(_t62);
							_t98 =  &_v52;
							E0003235A(_t93,  &_v52);
							_t64 = E0003191C(_t93,  &_v52, _t93, __eflags); // executed
							_t120 = _t64;
							_t65 =  *((intOrPtr*)(_t93 + 4));
							__eflags =  *( *((intOrPtr*)(_t93 + 4)) - 0xc);
							if(__eflags != 0) {
								E000327B6( &_v56, _t106, __eflags, L" %s", _t65);
								_push( &_v56);
								_t98 = _t93;
								E000315ED(_t93, _t93, _t106, _t112, _t120, __eflags);
								L17:
								__eflags = _t120;
								if(__eflags != 0) {
									E000327B6( &_v64, _t106, __eflags, L" \"%s\"",  *((intOrPtr*)(E000321AD( &_v52, _t106, __eflags, _t120))));
									_pop(_t98);
									__eflags = _v56 + 0xfffffff0;
									E000310B5(_v56 + 0xfffffff0, _t106);
								}
								E00032890( &_v60, _t98, __eflags, _t112); // executed
								_push(_t120);
								E0003C67B(_t93, _t112, _t120, __eflags);
								__eflags = _v60 + 0xfffffff0;
								E000310B5(_v60 + 0xfffffff0, _t106);
								_t116 = _v56;
								goto L20;
							}
							__eflags = _t120;
							if(__eflags != 0) {
								_push(L"install");
								_push(L"taggedmi");
								E000327B6( &_v56, _t106, __eflags, L" /%s %s /%s", L"installsource");
								goto L17;
							}
							E00031DD9( &_v52, _t106, 0x80040750);
							E0003C67B(_t93, _t112, 0x80040750, __eflags);
							E000310B5(_v56 + 0xfffffff0, _t106);
							E00032B8B(_t106,  &_v32, 0);
							__eflags = _v52 - 0xffffffff;
							if(_v52 != 0xffffffff) {
								CloseHandle(_v48);
							}
							_t54 = 0x80040750;
							goto L23;
						}
						_t47 = E00032B8B(_t106,  &_v36);
					}
					__eflags = _t116 - 0xffffffff;
					if(_t116 != 0xffffffff) {
						_t47 = CloseHandle(_t116);
					}
				}
				_t54 = _t47 | 0xffffffff;
				goto L23;
			}

0x0003139d
0x000313a9
0x000313ab
0x000313b2
0x000313be
0x000313c3
0x000313c8
0x000313ca
0x000313d2
0x000313d6
0x000313d8
0x000313ee
0x000313f7
0x000313f7
0x000313fa
0x000313fe
0x00031403
0x00031407
0x0003140b
0x0003140f
0x00031417
0x0003141b
0x00031420
0x00031429
0x0003142e
0x00031430
0x00000000
0x00000000
0x00031436
0x0003143b
0x00000000
0x00000000
0x0003143d
0x00031440
0x00031443
0x00031446
0x0003144a
0x0003157e
0x0003157e
0x00031584
0x00031589
0x0003158c
0x0003158f
0x0003158f
0x00031595
0x00031597
0x0003159d
0x0003159d
0x00031453
0x00031458
0x00031460
0x0003146f
0x00031473
0x00031479
0x0003147d
0x00031483
0x00031487
0x0003148e
0x00031493
0x00031495
0x00031498
0x0003149c
0x0003151d
0x00031528
0x00031529
0x0003152b
0x00031530
0x00031530
0x00031532
0x00031549
0x00031553
0x00031554
0x00031557
0x00031557
0x00031561
0x00031567
0x00031568
0x00031572
0x00031575
0x0003157a
0x00000000
0x0003157a
0x0003149e
0x000314a0
0x000314f1
0x000314f6
0x00031509
0x00000000
0x0003150e
0x000314a8
0x000314b0
0x000314bd
0x000314c6
0x000314cb
0x000314d0
0x000314d6
0x000314d6
0x000314dc
0x00000000
0x000314dc
0x000314e7
0x000314e7
0x000313da
0x000313dd
0x000313e0
0x000313e0
0x000313dd
0x000313b4
0x00000000

APIs

Part of subcall function 000316F6: GetTempPathW.KERNEL32(00000104,?), ref: 00031716
Part of subcall function 000316F6: CreateDirectoryW.KERNELBASE(00000000,00000000), ref: 00031728
Part of subcall function 000316F6: GetLastError.KERNEL32 ref: 00031732
Part of subcall function 000316F6: GetTempFileNameW.KERNELBASE(?,GUM,00000000,?), ref: 0003175A

CloseHandle.KERNEL32(00000000), ref: 000313E0

Part of subcall function 00032BD4: ReadFile.KERNELBASE(?,?,00000200,?,00000000,00000000,?,?,0003142E,00000000), ref: 00032C16
Part of subcall function 00032BD4: _memcmp.LIBCMT ref: 00032C3E

PathQuoteSpacesW.SHLWAPI(00000000,00000104,00000000), ref: 0003147D
CloseHandle.KERNEL32(000000FF), ref: 000314D6
CloseHandle.KERNEL32(00000000,00000000), ref: 0003158F

Strings

"%s", xrefs: 00031544
%s, xrefs: 00031514
install, xrefs: 000314F1
/%s %s /%s, xrefs: 00031500
taggedmi, xrefs: 000314F6
installsource, xrefs: 000314FB

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: CloseHandle$FilePathTemp$CreateDirectoryErrorLastNameQuoteReadSpaces_memcmp
String ID: "%s"$ %s$ /%s %s /%s$install$installsource$taggedmi
API String ID: 1745977382-1343157288
Opcode ID: ed5d9bdcce2c3465415631093bf200954a6509240b2fa624b6cc5f18a8952b33
Instruction ID: 6bab12c0ea9ae4ecfeafd82394393a08ec3235a66a09d72af6ddf8e096f47f0c
Opcode Fuzzy Hash: ed5d9bdcce2c3465415631093bf200954a6509240b2fa624b6cc5f18a8952b33
Instruction Fuzzy Hash: 8C51B3324087419BC713EF28D8466DEB7ECAF89324F140B1EF4A5A72E2DB74D9458B52

Uniqueness

Uniqueness Score: -1.00%

Function 000316F6 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 57
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 82%

			E000316F6(void* __eax, void* __edx, void* __eflags) {
				char _v16;
				void* __ebx;
				void* __edi;
				int _t12;
				signed int _t16;
				long _t17;
				WCHAR** _t22;
				void* _t26;
				void* _t32;
				WCHAR** _t33;

				_t32 = __eax;
				_t22 = __eax + 0x20;
				_t30 =  &_v16;
				GetTempPathW(0x104,  *(E0003233C(_t22,  &_v16) + 4));
				E0003235A(_t22, _t30);
				_t12 = CreateDirectoryW( *_t22, 0); // executed
				if(_t12 != 0) {
					L2:
					_t33 = _t32 + 0x1c;
					_t31 =  &_v16;
					_t16 = GetTempFileNameW( *_t22, L"GUM", 0,  *(E0003233C(_t33,  &_v16) + 4)); // executed
					asm("sbb bl, bl");
					_t26 =  ~_t16 + 1;
					_t17 = E0003235A(_t26, _t31);
					if(_t26 == 0) {
						DeleteFileW( *_t33); // executed
						CreateDirectoryW( *_t33, 0); // executed
						return 0;
					}
					L3:
					return _t17 | 0xffffffff;
				}
				_t17 = GetLastError();
				if(_t17 != 0xb7) {
					goto L3;
				}
				goto L2;
			}

0x000316fe
0x00031701
0x00031706
0x00031716
0x0003171e
0x00031728
0x00031730
0x0003173f
0x0003173f
0x00031744
0x0003175a
0x00031764
0x00031768
0x0003176a
0x00031771
0x0003177a
0x00031784
0x00000000
0x0003178a
0x00031773
0x00000000
0x00031773
0x00031732
0x0003173d
0x00000000
0x00000000
0x00000000

APIs

GetTempPathW.KERNEL32(00000104,?), ref: 00031716
CreateDirectoryW.KERNELBASE(00000000,00000000), ref: 00031728
GetLastError.KERNEL32 ref: 00031732
GetTempFileNameW.KERNELBASE(?,GUM,00000000,?), ref: 0003175A
DeleteFileW.KERNELBASE ref: 0003177A
CreateDirectoryW.KERNELBASE(?,00000000), ref: 00031784

Strings

GUM, xrefs: 00031754

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: CreateDirectoryFileTemp$DeleteErrorLastNamePath
String ID: GUM
API String ID: 3438287057-1161156203
Opcode ID: fedc94bcdd154652e9f0833f9b439b767a7b8dcac4bcf54541bf48389db411c5
Instruction ID: 27416e280f88c9c6ab7bf4d20909f16623ff9039a7aa5bfddb5100a29bc19e28
Opcode Fuzzy Hash: fedc94bcdd154652e9f0833f9b439b767a7b8dcac4bcf54541bf48389db411c5
Instruction Fuzzy Hash: F701D239300200ABE7126B74EC8AB997BFDEF49300F140521F642EB2A2D6789D058610

Uniqueness

Uniqueness Score: -1.00%

Function 00032890 Relevance: 12.1, APIs: 8, Instructions: 83
processsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 77%

			E00032890(intOrPtr* __eax, void* __ecx, void* __eflags, DWORD* _a4) {
				void* _v5;
				WCHAR* _v12;
				struct _PROCESS_INFORMATION _v28;
				struct _STARTUPINFOW _v96;
				void* __ebx;
				void* __edi;
				void* _t28;
				int _t37;
				void* _t48;
				WCHAR* _t49;
				void* _t51;
				void* _t53;
				void* _t54;
				WCHAR* _t60;

				_t51 = __ecx;
				_push(_t48);
				_push(_t54);
				_t28 = E00032625( *__eax - 0x10, _t48);
				_t49 = 0;
				_t60 = _t28 + 0x10;
				_v12 = _t60;
				E00038B70(_t54,  &_v96, 0, 0x44);
				asm("stosd");
				asm("stosd");
				asm("stosd");
				asm("stosd");
				GetStartupInfoW( &_v96);
				_v96.dwFlags = _v96.dwFlags | 0x00000081;
				_v96.wShowWindow = 1;
				if( *((intOrPtr*)(_t60 - 4)) > 1) {
					E000326D5(_t51,  &_v12,  *((intOrPtr*)(_t60 - 0xc)));
					_t60 = _v12;
				}
				_t37 = CreateProcessW(_t49, _t60, _t49, _t49, _t49, 0x400, _t49, _t49,  &_v96,  &_v28); // executed
				if(_t37 != 0) {
					WaitForSingleObject(_v28.hProcess, 0xffffffff);
					_v5 = 1;
					if(_a4 != _t49) {
						_v5 = GetExitCodeProcess(_v28.hProcess, _a4) != 0;
					}
					CloseHandle(_v28);
					CloseHandle(_v28.hThread);
					_t49 = _v5;
					goto L4;
				} else {
					 *_a4 = GetLastError();
					L4:
					_t15 = _t60 - 0x10; // -32
					E000310B5(_t15, _t53);
					return _t49;
				}
			}

0x00032890
0x00032898
0x0003289a
0x0003289e
0x000328a7
0x000328ad
0x000328b1
0x000328b4
0x000328be
0x000328bf
0x000328c0
0x000328c1
0x000328c9
0x000328cf
0x000328d9
0x000328e0
0x000328e9
0x000328ee
0x000328ee
0x00032905
0x0003290d
0x0003292e
0x00032934
0x0003293b
0x0003294b
0x0003294b
0x00032958
0x0003295d
0x0003295f
0x00000000
0x0003290f
0x00032918
0x0003291a
0x0003291a
0x0003291d
0x00032928
0x00032928

APIs

_memset.LIBCMT ref: 000328B4
GetStartupInfoW.KERNEL32(?,?,00000000), ref: 000328C9
CreateProcessW.KERNELBASE(00000000,?,00000000,00000000,00000000,00000400,00000000,00000000,?,?), ref: 00032905
GetLastError.KERNEL32 ref: 0003290F
WaitForSingleObject.KERNEL32(?,000000FF), ref: 0003292E
GetExitCodeProcess.KERNEL32 ref: 00032943
CloseHandle.KERNEL32(?), ref: 00032958
CloseHandle.KERNEL32(?), ref: 0003295D

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: CloseHandleProcess$CodeCreateErrorExitInfoLastObjectSingleStartupWait_memset
String ID:
API String ID: 2311849419-0
Opcode ID: 0a21c915ce2120d739f8677d937e51a764f2448d866130f3685383f7faffef02
Instruction ID: 2f5890ed7b4b936b8e49eb7e33fa88de4a69eabfad7b983945158b83eaed4d50
Opcode Fuzzy Hash: 0a21c915ce2120d739f8677d937e51a764f2448d866130f3685383f7faffef02
Instruction Fuzzy Hash: EB217C7190020DBFEB12AFF4DC46AEEBBBCEF04354F004466FA01E6161DA709946CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00032990 Relevance: 7.6, APIs: 5, Instructions: 64
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00032990(void* __eax, void* __eflags, WCHAR* _a4) {
				struct _MEMORY_BASIC_INFORMATION _v32;
				void* __esi;
				void* _t14;
				void* _t16;
				void* _t18;
				signed int _t26;
				void* _t28;
				void* _t32;

				_t32 = __eax;
				E00032A29(__eax);
				_t14 = CreateFileW(_a4, 0x80000000, 1, 0, 3, 0x80, 0); // executed
				 *(_t32 + 4) = _t14;
				if(_t14 == 0xffffffff) {
					L7:
					return 0;
				}
				_t16 = CreateFileMappingW(_t14, 0, 2, 0, 0, 0); // executed
				 *(_t32 + 8) = _t16;
				if(_t16 == 0) {
					L6:
					E00032A29(_t32);
					goto L7;
				}
				_t18 = MapViewOfFile(_t16, 4, 0, 0, 0); // executed
				_t28 = _t18;
				 *(_t32 + 0xc) = _t28;
				if(_t28 == 0) {
					L5:
					CloseHandle( *(_t32 + 8));
					goto L6;
				}
				_t26 = 6;
				_v32.BaseAddress = 0;
				memset( &(_v32.AllocationBase), 0, _t26 << 2);
				if(VirtualQuery(_t28,  &_v32, 0x1c) == 0) {
					goto L5;
				}
				 *((intOrPtr*)(_t32 + 0x10)) = _v32.RegionSize;
				return 1;
			}

0x00032998
0x0003299a
0x000329b4
0x000329ba
0x000329c0
0x00032a21
0x00000000
0x00032a21
0x000329c9
0x000329cf
0x000329d4
0x00032a1c
0x00032a1c
0x00000000
0x00032a1c
0x000329dc
0x000329e2
0x000329e4
0x000329e9
0x00032a13
0x00032a16
0x00000000
0x00032a16
0x000329ed
0x000329ee
0x000329f6
0x00032a07
0x00000000
0x00000000
0x00032a0c
0x00000000

APIs

Part of subcall function 00032A29: UnmapViewOfFile.KERNEL32(?,0003299F,?,00000000,?,?,?,?,000312E8,?), ref: 00032A31
Part of subcall function 00032A29: FindCloseChangeNotification.KERNELBASE(?,?,0003299F,?,00000000,?,?,?,?,000312E8,?), ref: 00032A4A
Part of subcall function 00032A29: CloseHandle.KERNEL32(?,?,0003299F,?,00000000,?,?,?,?,000312E8,?), ref: 00032A59

CreateFileW.KERNELBASE(?,80000000,00000001,00000000,00000003,00000080,00000000,?,00000000,?,?,?,?,000312E8,?), ref: 000329B4
CreateFileMappingW.KERNELBASE(00000000,00000000,00000002,00000000,00000000,00000000,?,00000000,?,?,?,?,000312E8,?), ref: 000329C9
MapViewOfFile.KERNELBASE(00000000,00000004,00000000,00000000,00000000,?,00000000,?,?,?,?,000312E8,?), ref: 000329DC
VirtualQuery.KERNEL32(00000000,?,0000001C,?,00000000,?,?,?,?,000312E8,?), ref: 000329FF
CloseHandle.KERNEL32(?,?,00000000,?,?,?,?,000312E8,?), ref: 00032A16

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: File$Close$CreateHandleView$ChangeFindMappingNotificationQueryUnmapVirtual
String ID:
API String ID: 550571288-0
Opcode ID: f60389de133adb6187bcd6821fb52ade2140d7d070829b299ef0dcb0c5070752
Instruction ID: 1adbd0f83a53a8d4e6707cdff09297ca308f34d4e570c51f0901c6a37f9a8292
Opcode Fuzzy Hash: f60389de133adb6187bcd6821fb52ade2140d7d070829b299ef0dcb0c5070752
Instruction Fuzzy Hash: 4A115E70A00744BBDB329B76AC0DF9B7AFDEBC6B10F108919F511E6191D6749411CA61

Uniqueness

Uniqueness Score: -1.00%

Function 00037623 Relevance: 7.5, APIs: 5, Instructions: 44
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 32%

			E00037623(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				intOrPtr* _t10;
				intOrPtr _t13;
				intOrPtr _t24;
				void* _t26;

				_push(0xc);
				_push(0x3ef18);
				_t8 = E00035EBC(__ebx, __edi, __esi);
				_t24 =  *((intOrPtr*)(_t26 + 8));
				if(_t24 == 0) {
					L9:
					return E00035F01(_t8);
				}
				if( *0x417e4 != 3) {
					_push(_t24);
					L7:
					_push(0);
					_t8 = RtlFreeHeap( *0x41134); // executed
					_t32 = _t8;
					if(_t8 == 0) {
						_t10 = E000364DA(_t32);
						 *_t10 = E00036498(GetLastError());
					}
					goto L9;
				}
				E00036308(__ebx, __edi, 4);
				 *(_t26 - 4) =  *(_t26 - 4) & 0x00000000;
				_t13 = E00037E1A(_t24);
				 *((intOrPtr*)(_t26 - 0x1c)) = _t13;
				if(_t13 != 0) {
					_push(_t24);
					_push(_t13);
					E00037E4A();
				}
				 *(_t26 - 4) = 0xfffffffe;
				_t8 = E00037679();
				if( *((intOrPtr*)(_t26 - 0x1c)) != 0) {
					goto L9;
				} else {
					_push( *((intOrPtr*)(_t26 + 8)));
					goto L7;
				}
			}

0x00037623
0x00037625
0x0003762a
0x0003762f
0x00037634
0x000376ab
0x000376b0
0x000376b0
0x0003763d
0x00037682
0x00037683
0x00037683
0x0003768b
0x00037691
0x00037693
0x00037695
0x000376a8
0x000376aa
0x00000000
0x00037693
0x00037641
0x00037647
0x0003764c
0x00037652
0x00037657
0x00037659
0x0003765a
0x0003765b
0x00037661
0x00037662
0x00037669
0x00037672
0x00000000
0x00037674
0x00037674
0x00000000
0x00037674

APIs

__lock.LIBCMT ref: 00037641

Part of subcall function 00036308: __mtinitlocknum.LIBCMT ref: 0003631E
Part of subcall function 00036308: __amsg_exit.LIBCMT ref: 0003632A
Part of subcall function 00036308: EnterCriticalSection.KERNEL32(?,?,?,00039436,00000004,0003EF98,0000000C,0003770C,?,?,00000000,00000000,00000000,?,00035B65,00000001), ref: 00036332

___sbh_find_block.LIBCMT ref: 0003764C
___sbh_free_block.LIBCMT ref: 0003765B
RtlFreeHeap.NTDLL(00000000,?,0003EF18,0000000C,000362E9,00000000,0003EE38,0000000C,00036323,?,?,?,00039436,00000004,0003EF98,0000000C), ref: 0003768B
GetLastError.KERNEL32(?,00039436,00000004,0003EF98,0000000C,0003770C,?,?,00000000,00000000,00000000,?,00035B65,00000001,00000214), ref: 0003769C

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2714421763-0
Opcode ID: 221c6464f05fc32fe5ed44e4ed0156211dbcc453a8224a666f00902f63bb8652
Instruction ID: 4196ca5b6b86533a1b5671a5f2b98d81d78a92d60fd33800290e44d49f4b2aaf
Opcode Fuzzy Hash: 221c6464f05fc32fe5ed44e4ed0156211dbcc453a8224a666f00902f63bb8652
Instruction Fuzzy Hash: 6401A7B1809705AAEB376B74DD17BDE37AC9F00721F104559F40C660D2CA3899408A58

Uniqueness

Uniqueness Score: -1.00%

Function 0003C637 Relevance: 6.0, APIs: 4, Instructions: 39
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 88%

			E0003C637(void* __ebx, void* __edx, void* __edi, void* __eflags) {
				intOrPtr _v0;
				intOrPtr* _v12;
				char _v20;
				void* _t11;
				signed int _t12;
				intOrPtr* _t16;
				void* _t19;
				intOrPtr* _t22;
				void* _t27;
				void* _t28;
				void* _t31;
				void* _t33;

				_t28 = __edi;
				_t27 = __edx;
				_t19 = __ebx;
				_pop(_t30);
				_t31 = _t33;
				while(1) {
					_t11 = E000392EB(_t19, _t27, _t28, _v0); // executed
					if(_t11 != 0) {
						break;
					}
					_t12 = E00036A4B(_v0);
					__eflags = _t12;
					if(_t12 == 0) {
						__eflags =  *0x41774 & 0x00000001;
						if(( *0x41774 & 0x00000001) == 0) {
							 *0x41774 =  *0x41774 | 0x00000001;
							__eflags =  *0x41774;
							E0003C7A9(0x41768);
							E00036614( *0x41774, 0x3caae);
						}
						_t22 =  &_v20;
						E0003C7F6(_t22, 0x41768);
						E0003C967( &_v20, 0x3f014);
						asm("int3");
						_push(_t31);
						_t16 = _t22;
						 *_t16 = 0x3e3c0;
						_t8 = _t16 + 8;
						 *_t8 =  *(_t16 + 8) & 0x00000000;
						__eflags =  *_t8;
						 *((intOrPtr*)(_t16 + 4)) =  *_v12;
						return _t16;
					} else {
						continue;
					}
					L9:
				}
				return _t11;
				goto L9;
			}

0x0003c637
0x0003c637
0x0003c637
0x0003c63c
0x0003c816
0x0003c82a
0x0003c82d
0x0003c835
0x00000000
0x00000000
0x0003c820
0x0003c826
0x0003c828
0x0003c839
0x0003c845
0x0003c847
0x0003c847
0x0003c850
0x0003c85a
0x0003c85f
0x0003c861
0x0003c864
0x0003c872
0x0003c877
0x0003c87a
0x0003c87d
0x0003c882
0x0003c88a
0x0003c88a
0x0003c88a
0x0003c88e
0x0003c892
0x00000000
0x00000000
0x00000000
0x00000000
0x0003c828
0x0003c838
0x00000000

APIs

_malloc.LIBCMT ref: 0003C82D

Part of subcall function 000392EB: __FF_MSGBANNER.LIBCMT ref: 0003930E
Part of subcall function 000392EB: __NMSG_WRITE.LIBCMT ref: 00039315
Part of subcall function 000392EB: RtlAllocateHeap.NTDLL(00000000,?,00000001,00000000,00000000,?,000376C2,?,00000001,?,?,00036292,00000018,0003EE38,0000000C,00036323), ref: 00039362

std::bad_alloc::bad_alloc.LIBCMT ref: 0003C850

Part of subcall function 0003C7A9: std::exception::exception.LIBCMT ref: 0003C7B5

std::bad_exception::bad_exception.LIBCMT ref: 0003C864
__CxxThrowException@8.LIBCMT ref: 0003C872

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: AllocateException@8HeapThrow_mallocstd::bad_alloc::bad_allocstd::bad_exception::bad_exceptionstd::exception::exception
String ID:
API String ID: 1411284514-0
Opcode ID: d4bf3a3110766d1142a6cb9ffc0f59647e38979a38557c34818e8038e1134fbb
Instruction ID: deaa807231e30b02f6a7f4159ed1b27b431a88c0eff3e7f6a45fe281a47f9ecc
Opcode Fuzzy Hash: d4bf3a3110766d1142a6cb9ffc0f59647e38979a38557c34818e8038e1134fbb
Instruction Fuzzy Hash: 3EF0B43990460932FB176761EC06DED3BEC8B42B64F248025F912F6093DF69DA51C7A5

Uniqueness

Uniqueness Score: -1.00%

Function 000320B0 Relevance: 4.6, APIs: 3, Instructions: 71
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 69%

			E000320B0(void* __ebx, void* __edx, void* __edi, void* __eflags, char _a4, WCHAR* _a12) {
				char _v40;
				void* __esi;
				void* _t12;
				signed char _t13;
				void* _t21;
				intOrPtr _t27;
				WCHAR** _t33;
				void* _t42;
				void* _t49;
				void* _t51;
				void* _t52;

				_t46 = __edx;
				_t41 = __ebx;
				_t12 = E00031FC9(__ebx, __edx, __edi, _t51, __eflags);
				_t55 = _t12;
				if(_t12 == 0) {
					__imp__CoInitializeEx(0, 2); // executed
					_t52 = _t12;
					__eflags = _t52;
					if(__eflags >= 0) {
						_push(__edi);
						_t13 = E000311B9(__ebx, _t52, __eflags);
						asm("sbb eax, eax");
						_t17 = ( ~(_t13 & 0x000000ff) & 0x7ffbf8fd) + 0x80040703;
						__eflags = ( ~(_t13 & 0x000000ff) & 0x7ffbf8fd) + 0x80040703;
						if(__eflags >= 0) {
							_t48 =  &_v40;
							E0003130D(_a4, _t42,  &_v40, __eflags, _a12);
							_t21 = E0003139D(_t48, _t42, __edx, __eflags); // executed
							_t49 = _t21;
							E00031355( &_v40, _t41, _t42, _t46);
						} else {
							_t49 = E00031DD9(_t42, __edx, _t17);
						}
						__eflags = _t52 - 0x800401f0;
						if(_t52 != 0x800401f0) {
							__imp__CoUninitialize();
						}
						return _t49;
					}
					return E00031DD9(_t42, __edx, _t52);
				}
				_t27 =  *0x4174c; // 0x3e388
				_a12 =  *((intOrPtr*)(_t27 + 0xc))() + 0x10;
				_push(0x528c);
				_push( &_a12);
				E000321D8(__edx, _t55);
				_t33 = E00031DA0( &_a4, 0x4174c, _t46, _t55);
				_t53 = _a12;
				MessageBoxW(0, _a12,  *_t33, 0);
				E000310B5(_a4 + 0xfffffff0, _t46);
				E000310B5(_t53 - 0x10, _t46);
				return 0;
			}

0x000320b0
0x000320b0
0x000320b7
0x000320bc
0x000320be
0x00032114
0x0003211a
0x0003211c
0x0003211e
0x00032129
0x0003212a
0x00032134
0x0003213b
0x0003213b
0x00032140
0x00032153
0x00032156
0x0003215d
0x00032162
0x00032167
0x00032142
0x00032149
0x00032149
0x0003216c
0x00032172
0x00032174
0x00032174
0x00000000
0x0003217c
0x00000000
0x00032126
0x000320c0
0x000320d0
0x000320d3
0x000320db
0x000320dc
0x000320e4
0x000320e9
0x000320f3
0x000320ff
0x00032107
0x00000000

APIs

MessageBoxW.USER32(00000000,?,00000000,00000000), ref: 000320F3
CoInitializeEx.OLE32(00000000,00000002), ref: 00032114

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: InitializeMessage
String ID:
API String ID: 2132078583-0
Opcode ID: 4c25c84112e13f5c33770ec421cc35b85a8405dbd75f3f05ae052316bfbd681b
Instruction ID: ced11ba3955d0e84da22822b2ff9c15b031cd28a34dad64a1e60e4800da0b0e1
Opcode Fuzzy Hash: 4c25c84112e13f5c33770ec421cc35b85a8405dbd75f3f05ae052316bfbd681b
Instruction Fuzzy Hash: D111E636504219ABDB13BF78DC06BEE37ECAF59350F140521FA02EB293DB74D94586A1

Uniqueness

Uniqueness Score: -1.00%

Function 00032A29 Relevance: 4.5, APIs: 3, Instructions: 22
fileCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00032A29(void* __esi) {
				void* _t10;
				void* _t11;
				void* _t12;
				void* _t18;

				_t18 = __esi;
				_t10 =  *(__esi + 0xc);
				if(_t10 != 0) {
					UnmapViewOfFile(_t10);
					 *(__esi + 0xc) =  *(__esi + 0xc) & 0x00000000;
				}
				_t11 =  *(_t18 + 8);
				if(_t11 != 0) {
					FindCloseChangeNotification(_t11); // executed
					 *(_t18 + 8) =  *(_t18 + 8) & 0x00000000;
				}
				_t12 =  *(_t18 + 4);
				if(_t12 != 0xffffffff) {
					_t12 = CloseHandle(_t12);
					 *(_t18 + 4) =  *(_t18 + 4) | 0xffffffff;
				}
				return _t12;
			}

0x00032a29
0x00032a29
0x00032a2e
0x00032a31
0x00032a37
0x00032a37
0x00032a3b
0x00032a47
0x00032a4a
0x00032a4c
0x00032a4c
0x00032a50
0x00032a56
0x00032a59
0x00032a5b
0x00032a5b
0x00032a60

APIs

UnmapViewOfFile.KERNEL32(?,0003299F,?,00000000,?,?,?,?,000312E8,?), ref: 00032A31
FindCloseChangeNotification.KERNELBASE(?,?,0003299F,?,00000000,?,?,?,?,000312E8,?), ref: 00032A4A
CloseHandle.KERNEL32(?,?,0003299F,?,00000000,?,?,?,?,000312E8,?), ref: 00032A59

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: Close$ChangeFileFindHandleNotificationUnmapView
String ID:
API String ID: 223153180-0
Opcode ID: 0bfd84da952f4f9f54559a06f5e79f079f147aa2cf5aea4755c2dc8eb4060123
Instruction ID: 1deb5c3bdf8c81b1ac4b3d1c9fb040b620646e729f8bf37ed3a41d3e672e0e50
Opcode Fuzzy Hash: 0bfd84da952f4f9f54559a06f5e79f079f147aa2cf5aea4755c2dc8eb4060123
Instruction Fuzzy Hash: AEE09A71200B019BD671DB79E848B17B3EDAF41731F14CA09E1BAD65E4C778E8418A10

Uniqueness

Uniqueness Score: -1.00%

Function 00031B75 Relevance: 3.2, APIs: 2, Instructions: 170
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 63%

			E00031B75(void* __ecx, void* __edx, long _a4, void* _a8, char _a12) {
				signed int _v12;
				long _v40;
				intOrPtr _v48;
				signed int _v52;
				long _v56;
				long _v80;
				long _v84;
				long _v92;
				long _v108;
				long _v112;
				char _v128;
				long _v132;
				void* _v136;
				long _v140;
				intOrPtr _v144;
				char _v148;
				intOrPtr _v152;
				intOrPtr _v156;
				long _v160;
				void* _v164;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t62;
				void* _t64;
				void* _t71;
				intOrPtr* _t72;
				signed int _t76;
				void* _t81;
				void* _t82;
				intOrPtr _t83;
				signed int _t89;
				intOrPtr _t95;
				long _t102;
				signed int _t120;
				long _t122;
				intOrPtr* _t123;
				signed int* _t124;
				intOrPtr* _t125;
				intOrPtr* _t126;
				intOrPtr* _t127;
				void* _t128;
				signed int _t129;

				_t111 = __edx;
				_t62 =  *0x409f8; // 0x6ba050e2
				_v12 = _t62 ^ _t129;
				_t64 = _a8;
				_t116 = __ecx;
				_v164 = _t64;
				if(_a12 != 0) {
					__eflags = _a4 - 0xd;
					if(__eflags < 0) {
						goto L15;
					} else {
						_t111 = __ecx;
						_v148 = E00031B5F;
						_v144 = E00031B6A;
						_v108 = 0;
						_v112 = 0;
						E00034617( &_v148,  &_v128, __ecx, __eflags); // executed
						_a4 = _a4 - 0xd;
						_v52 = 1;
						_v48 = 1;
						_t117 = __ecx + 5;
						_t71 =  *((intOrPtr*)(__ecx + 5));
						_v92 = 0;
						_v56 = 0;
						_v40 = 0;
						_v84 = 0;
						_v80 = 0;
						_v136 = _t71;
						_t72 = E0003C637(0, __ecx, __ecx + 5, __eflags); // executed
						_t123 = _t72;
						_v140 = _t123;
						_v132 = 0;
						_t76 = E000344CD( &_v128, _t123,  &_v136, _t117 + 8,  &_a4,  &_v132);
						_t120 = _t76;
						_v144( &_v148, _v112, _t71);
						_v112 = 0;
						_v144( &_v148, _v108);
						_v108 = 0;
						__eflags = _t120;
						if(__eflags == 0) {
							_t102 =  *_t123;
							_t124 = _t123 + 4;
							_t116 =  *_t124;
							_t81 = 4;
							_t125 = _t124 + _t81;
							_t95 =  *_t125;
							_t126 = _t125 + _t81;
							_t127 = _t126 + _t81;
							_v152 =  *_t126;
							_push(_t102);
							_v132 = _t102;
							_v156 =  *_t127;
							_t128 = _t127 + _t81; // executed
							_t82 = E0003C637(_t95,  *_t127, _t116, __eflags); // executed
							_push(_v132);
							_v136 = _t82;
							_push(_t82);
							_push(_v156);
							_t83 = _v152;
							_push(_t83);
							_push(_t95 + _t116 + _t128);
							_push(_t95);
							_push(_t116 + _t128);
							_push(_t116);
							_t111 = _t83 + _t95 + _t116 + _t128;
							_push(_t128);
							__eflags = E00034684(_t83 + _t95 + _t116 + _t128);
							if(__eflags == 0) {
								_t122 = _v132;
								_t89 = WriteFile(_v164, _v136, _t122,  &_v160, 0); // executed
								__eflags = _t89;
								if(__eflags == 0) {
									L14:
									_push(_v136);
									E0003C67B(_t95, _t116, _t122, __eflags);
									_push(_v140);
									_t64 = E0003C67B(_t95, _t116, _t122, __eflags);
									goto L15;
								} else {
									__eflags = _v160 - _t122;
									if(__eflags != 0) {
										goto L14;
									} else {
										_push(_v136);
										E0003C67B(_t95, _t116, _t122, __eflags); // executed
										_push(_v140);
										E0003C67B(_t95, _t116, _t122, __eflags); // executed
										goto L13;
									}
								}
							} else {
								_push(_v136);
								E0003C67B(_t95, _t116, _t128, __eflags);
								_t122 = _v140;
								_t116 = 1;
								goto L7;
							}
						} else {
							_t116 = _t120 | 0xffffffff;
							__eflags = _t116;
							L7:
							_push(_t122);
							E0003C67B(_t95, _t116, _t122, __eflags);
							_t65 = _t116;
						}
					}
				} else {
					_t64 = WriteFile(_t64, __ecx, _a4,  &_v132, 0);
					if(_t64 == 0) {
						L15:
						_t65 = _t64 | 0xffffffff;
						__eflags = _t64 | 0xffffffff;
					} else {
						_t64 = _a4;
						if(_v132 != _t64) {
							goto L15;
						} else {
							L13:
							_t65 = 0;
						}
					}
				}
				return E000388DE(_t65, _t95, _v12 ^ _t129, _t111, _t116, _t122);
			}

0x00031b75
0x00031b7e
0x00031b85
0x00031b8c
0x00031b92
0x00031b94
0x00031b9a
0x00031bc6
0x00031bca
0x00000000
0x00031bd0
0x00031bd8
0x00031bdd
0x00031be7
0x00031bf1
0x00031bf4
0x00031bf7
0x00031bfc
0x00031c03
0x00031c06
0x00031c09
0x00031c0c
0x00031c0f
0x00031c12
0x00031c15
0x00031c18
0x00031c1b
0x00031c1e
0x00031c24
0x00031c29
0x00031c43
0x00031c49
0x00031c4c
0x00031c57
0x00031c60
0x00031c70
0x00031c73
0x00031c7c
0x00031c7f
0x00031c81
0x00031c94
0x00031c96
0x00031c99
0x00031c9d
0x00031c9e
0x00031ca0
0x00031ca2
0x00031ca6
0x00031ca8
0x00031cb0
0x00031cb1
0x00031cb4
0x00031cba
0x00031cbc
0x00031cc2
0x00031cc5
0x00031ccb
0x00031ccc
0x00031cd2
0x00031cd8
0x00031ce1
0x00031ce2
0x00031ce6
0x00031ce9
0x00031cea
0x00031cec
0x00031cf5
0x00031cf7
0x00031d13
0x00031d2c
0x00031d32
0x00031d34
0x00031d5a
0x00031d5a
0x00031d60
0x00031d66
0x00031d6c
0x00000000
0x00031d36
0x00031d36
0x00031d3c
0x00000000
0x00031d3e
0x00031d3e
0x00031d44
0x00031d4a
0x00031d50
0x00000000
0x00031d55
0x00031d3c
0x00031cf9
0x00031cf9
0x00031cff
0x00031d04
0x00031d0d
0x00000000
0x00031d0d
0x00031c83
0x00031c83
0x00031c83
0x00031c86
0x00031c86
0x00031c87
0x00031c8d
0x00031c8d
0x00031c81
0x00031b9c
0x00031ba7
0x00031baf
0x00031d72
0x00031d72
0x00031d72
0x00031bb5
0x00031bb5
0x00031bbb
0x00000000
0x00031bc1
0x00031d56
0x00031d56
0x00031d56
0x00031bbb
0x00031baf
0x00031d83

APIs

WriteFile.KERNEL32(?,00000000,000318CF,?,00000000,?,00000000,00000000), ref: 00031BA7

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 8e7bf2ff4062a8334c491e0c2a6f0ca71b1dded6cc752cbab71fa11012e9b2b6
Instruction ID: c5c65fa0a9bbc719ee37afb79c4c8ef9d4fcadec5f9e421745ef8c90df2268d2
Opcode Fuzzy Hash: 8e7bf2ff4062a8334c491e0c2a6f0ca71b1dded6cc752cbab71fa11012e9b2b6
Instruction Fuzzy Hash: CA513DB1D00228AFDF219FA4CC85BDDBBB9BF49314F1441AAE549E7251EB309A85CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0003191C Relevance: 3.0, APIs: 2, Instructions: 28
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 93%

			E0003191C(intOrPtr __ebx, void* __ecx, struct HINSTANCE__** __esi, void* __eflags) {
				signed int _v8;
				short _v528;
				signed int _t6;
				intOrPtr _t19;
				intOrPtr _t20;
				signed int _t22;

				_t21 = __esi;
				_t14 = __ebx;
				_t6 =  *0x409f8; // 0x6ba050e2
				_v8 = _t6 ^ _t22;
				E00038B70(_t20,  &_v528, 0, 0x208);
				if(GetModuleFileNameW( *__esi,  &_v528, 0x104) != 0) {
					_t11 = E000312B0(__ebx, _t19, _t20,  &_v528); // executed
				}
				return E000388DE(_t11, _t14, _v8 ^ _t22, _t19, _t20, _t21);
			}

0x0003191c
0x0003191c
0x00031925
0x0003192c
0x0003193d
0x0003195b
0x00031964
0x00031969
0x00031975

APIs

_memset.LIBCMT ref: 0003193D
GetModuleFileNameW.KERNEL32(?,?,00000104), ref: 00031953

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: FileModuleName_memset
String ID:
API String ID: 158409099-0
Opcode ID: e065f3648f6a187166f5e1323ded77c342156f84b0756c28f912037be89c2f64
Instruction ID: ae357c7bf0e90b2c06ffc7cd84b5e43bbb8a73a6014c8d5f4def807283e68429
Opcode Fuzzy Hash: e065f3648f6a187166f5e1323ded77c342156f84b0756c28f912037be89c2f64
Instruction Fuzzy Hash: 7EF030B5A00308ABEB11EB60DC4AB9A73BCAF08700F5045A6BA55E6183DE749A488B54

Uniqueness

Uniqueness Score: -1.00%

Function 000323FE Relevance: 2.5, APIs: 2, Instructions: 43
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 93%

			E000323FE(intOrPtr _a4, char* _a8) {
				void* __ebx;
				void* __esi;
				int _t12;
				void* _t13;
				int _t15;
				intOrPtr _t18;

				_t13 = MultiByteToWideChar;
				if(_a8 == 0) {
					_t15 = 0;
				} else {
					_t12 = MultiByteToWideChar(3, 0, _a8, 0xffffffff, 0, 0); // executed
					_t15 = _t12 - 1;
				}
				_t18 = _a4;
				if(_t15 <= 0) {
					E0003224F(_t18);
				} else {
					MultiByteToWideChar(3, 0, _a8, 0xffffffff, E00032567(_t18, _t15), _t15);
					L0003258D(_t15, _t13, _t18);
				}
				return _a4;
			}

0x00032402
0x0003240f
0x00032422
0x00032411
0x0003241b
0x0003241f
0x0003241f
0x00032426
0x00032429
0x00032449
0x0003242b
0x0003243c
0x00032442
0x00032442
0x00032455

APIs

MultiByteToWideChar.KERNEL32(00000003,00000000,00032C99,000000FF,00000000,00000000,?,0003EC48,00000000,?,00032E45,0003EC48,00032C99,0003EC48,00032C99,00000200), ref: 0003241B
MultiByteToWideChar.KERNEL32(00000003,00000000,00032C99,000000FF,00000000,00000000,00000000,?,0003EC48,00000000,?,00032E45,0003EC48,00032C99,0003EC48,00032C99), ref: 0003243C

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: ByteCharMultiWide
String ID:
API String ID: 626452242-0
Opcode ID: 714d4f00f453d781884e9e2ac4afb4740df05ac2fbdd6c9423adc90fe763870a
Instruction ID: aa12cc1f94d051dfb8693884d7579d72303f1ff4e97f8cae0b1f5bfe7740e980
Opcode Fuzzy Hash: 714d4f00f453d781884e9e2ac4afb4740df05ac2fbdd6c9423adc90fe763870a
Instruction Fuzzy Hash: ECF0B432204124B7D6236A9B9C41FEF7B9DEF95BB0F108212B92C96191C970990197F1

Uniqueness

Uniqueness Score: -1.00%

Function 00035E89 Relevance: 1.5, APIs: 1, Instructions: 20
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00035E89(intOrPtr _a4) {
				void* _t6;

				_t6 = HeapCreate(0 | _a4 == 0x00000000, 0x1000, 0); // executed
				 *0x41134 = _t6;
				if(_t6 != 0) {
					 *0x417e4 = 1;
					return 1;
				} else {
					return _t6;
				}
			}

0x00035e9e
0x00035ea4
0x00035eab
0x00035eb2
0x00035eb8
0x00035eae
0x00035eae
0x00035eae

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000), ref: 00035E9E

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: 2784fff554d3f60d2d4ac5167c651781fe53e42b966ac323e2543e6aeb17fc3a
Instruction ID: 786e2f20db2f7b7e9eb50869e81b2d24a5937dbc4987dcc18efc69e5136e0032
Opcode Fuzzy Hash: 2784fff554d3f60d2d4ac5167c651781fe53e42b966ac323e2543e6aeb17fc3a
Instruction Fuzzy Hash: C2D05E7A5943089AFB019FB0BD087A23BDCD785795F004436B91DC6160E578C5908504

Uniqueness

Uniqueness Score: -1.00%

Function 000323D5 Relevance: 1.5, APIs: 1, Instructions: 17
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 82%

			E000323D5(void* __edx, intOrPtr _a4, intOrPtr _a8) {
				void* __ebx;
				void* _t6;
				void* _t13;
				void* _t14;

				_t14 = __edx;
				_t6 = 0;
				if(_a8 != 0) {
					_t6 = E0003C661(_a8);
					_pop(_t13);
				}
				E000325AF(_a4, _t6, _t13, _t14, _a8); // executed
				return _a4;
			}

0x000323d5
0x000323d8
0x000323dd
0x000323e2
0x000323e7
0x000323e7
0x000323f1
0x000323fb

APIs

_wcslen.LIBCMT ref: 000323E2

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: _wcslen
String ID:
API String ID: 176396367-0
Opcode ID: 0afcbe7f6fba25d42a45af2facdc02dbcce7af71b75d9c81bac6d76a9b496bbd
Instruction ID: 0e2217955b1a281a2edc580070710556cc1ce53b3e9533c6259d2e47df1bcedd
Opcode Fuzzy Hash: 0afcbe7f6fba25d42a45af2facdc02dbcce7af71b75d9c81bac6d76a9b496bbd
Instruction Fuzzy Hash: 4DD09E3110010CAF9B42AE64EC82CD9779DEB14761F10C126B818CA112D672DE609B50

Uniqueness

Uniqueness Score: -1.00%

Function 0003C3AE Relevance: 1.5, APIs: 1, Instructions: 9
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E0003C3AE(void* __ecx, long _a4) {
				void* _t3;

				_t3 = RtlAllocateHeap( *(__ecx + 4), 0, _a4); // executed
				return _t3;
			}

0x0003c3bb
0x0003c3c2

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 0003C3BB

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 780e4863a28ea79312f127efb153f9b88c3bbf343f882074e7e7901955b585e6
Instruction ID: 9220cdcecd29643a7f0d254bcc35aaad37e90e9c7ab7489bb2e233b787783300
Opcode Fuzzy Hash: 780e4863a28ea79312f127efb153f9b88c3bbf343f882074e7e7901955b585e6
Instruction Fuzzy Hash: A1C09B32044108F7D7111B51EC05F45BF1ED795750F14C016F608050618773D422D699

Uniqueness

Uniqueness Score: -1.00%

Function 0003595E Relevance: 1.5, APIs: 1, Instructions: 4
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E0003595E() {
				void* _t1;

				_t1 = E000358EC(0); // executed
				return _t1;
			}

0x00035960
0x00035966

APIs

__encode_pointer.LIBCMT ref: 00035960

Part of subcall function 000358EC: TlsGetValue.KERNEL32(00000000,?,00035965,00000000,00036A83,00040D00,00000000,00000314,?,00034FAD,00040D00,Microsoft Visual C++ Runtime Library,00012010), ref: 000358FE
Part of subcall function 000358EC: TlsGetValue.KERNEL32(00000005,?,00035965,00000000,00036A83,00040D00,00000000,00000314,?,00034FAD,00040D00,Microsoft Visual C++ Runtime Library,00012010), ref: 00035915
Part of subcall function 000358EC: RtlEncodePointer.NTDLL(00000000,?,00035965,00000000,00036A83,00040D00,00000000,00000314,?,00034FAD,00040D00,Microsoft Visual C++ Runtime Library,00012010), ref: 00035953

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: Value$EncodePointer__encode_pointer
String ID:
API String ID: 2585649348-0
Opcode ID: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
Instruction ID: 43072d7fc967881e1bc8764296062eb80a32363928c0e4cddc0a15de4898c0eb
Opcode Fuzzy Hash: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00031E7F Relevance: 9.1, APIs: 6, Instructions: 63
processCOMMON

Download Yara Rule

C-Code - Quality: 86%

			E00031E7F(void* __ebx, signed int* __edi, void* __esi) {
				signed int _t16;
				long _t18;
				void* _t19;
				void* _t20;
				struct tagPROCESSENTRY32W* _t24;
				signed int _t29;
				void* _t31;
				void* _t34;
				signed int* _t35;
				void* _t38;
				signed int _t39;
				void* _t41;

				_t36 = __esi;
				_t35 = __edi;
				_t31 = __ebx;
				_t39 = _t41 - 0x1b8;
				_t16 =  *0x409f8; // 0x6ba050e2
				 *(_t39 + 0x1b4) = _t16 ^ _t39;
				 *__edi =  *__edi & 0x00000000;
				_t18 = GetCurrentProcessId();
				 *(_t39 - 0x80) = _t18;
				if(_t18 != 0) {
					_t19 = CreateToolhelp32Snapshot(2, 0);
					 *(_t39 - 0x7c) = _t19;
					if(_t19 == 0xffffffff) {
						goto L1;
					} else {
						_push(__esi);
						E00038B70(__edi, _t39 - 0x78, 0, 0x22c);
						_t24 = _t39 - 0x78;
						 *(_t39 - 0x78) = 0x22c;
						Process32FirstW( *(_t39 - 0x7c), _t24);
						if(_t24 != 0) {
							do {
								if( *((intOrPtr*)(_t39 - 0x70)) !=  *(_t39 - 0x80)) {
									goto L9;
								} else {
									_t29 =  *(_t39 - 0x60);
									if(_t29 != 0) {
										 *_t35 = _t29;
										_t38 = 0;
									} else {
										goto L9;
									}
								}
								goto L6;
								L9:
							} while (Process32NextW( *(_t39 - 0x7c), _t39 - 0x78) != 0);
							_t38 = 0x80004005;
						} else {
							_t38 = E00031E62();
						}
						L6:
						CloseHandle( *(_t39 - 0x7c));
						_t20 = _t38;
						_pop(_t36);
					}
				} else {
					L1:
					_t20 = E00031E62();
				}
				return E000388DE(_t20, _t31,  *(_t39 + 0x1b4) ^ _t39, _t34, _t35, _t36);
			}

0x00031e7f
0x00031e7f
0x00031e7f
0x00031e80
0x00031e8d
0x00031e94
0x00031e9a
0x00031e9d
0x00031ea3
0x00031ea8
0x00031ec8
0x00031ecd
0x00031ed3
0x00000000
0x00031ed5
0x00031ed5
0x00031ee2
0x00031eea
0x00031ef1
0x00031ef4
0x00031efb
0x00031f12
0x00031f18
0x00000000
0x00031f1a
0x00031f1a
0x00031f1f
0x00031f38
0x00031f3a
0x00000000
0x00000000
0x00000000
0x00031f1f
0x00000000
0x00031f21
0x00031f2d
0x00031f31
0x00031efd
0x00031f02
0x00031f02
0x00031f04
0x00031f07
0x00031f0d
0x00031f0f
0x00031f0f
0x00031eaa
0x00031eaa
0x00031eaa
0x00031eaa
0x00031ec3

APIs

GetCurrentProcessId.KERNEL32 ref: 00031E9D
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00031EC8
_memset.LIBCMT ref: 00031EE2
Process32FirstW.KERNEL32(?,?), ref: 00031EF4
CloseHandle.KERNEL32(?), ref: 00031F07

Part of subcall function 00031E62: GetLastError.KERNEL32(00031EAF), ref: 00031E62

Process32NextW.KERNEL32(?,?), ref: 00031F28

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: Process32$CloseCreateCurrentErrorFirstHandleLastNextProcessSnapshotToolhelp32_memset
String ID:
API String ID: 2150086581-0
Opcode ID: d1c54420d044ec8b53a0c66ef652903471201a640d36bf127c7fcbb1ee104c0e
Instruction ID: 40b71cd2d460ffa8b378d174e2af92d48af08ae55a64f0603de1be9b2e9f5f17
Opcode Fuzzy Hash: d1c54420d044ec8b53a0c66ef652903471201a640d36bf127c7fcbb1ee104c0e
Instruction Fuzzy Hash: 1311377190461A9FEB62ABB4DC05BEDB6BDAF1C705F604139E822E7182EB3488058B40

Uniqueness

Uniqueness Score: -1.00%

Function 000388DE Relevance: 7.6, APIs: 5, Instructions: 58
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 85%

			E000388DE(intOrPtr __eax, intOrPtr __ebx, intOrPtr __ecx, intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, char _a4) {
				intOrPtr _v0;
				void* _v804;
				intOrPtr _v808;
				intOrPtr _v812;
				intOrPtr _t6;
				intOrPtr _t11;
				intOrPtr _t12;
				intOrPtr _t13;
				long _t17;
				intOrPtr _t21;
				intOrPtr _t22;
				intOrPtr _t25;
				intOrPtr _t26;
				intOrPtr _t27;
				intOrPtr* _t31;
				void* _t34;

				_t27 = __esi;
				_t26 = __edi;
				_t25 = __edx;
				_t22 = __ecx;
				_t21 = __ebx;
				_t6 = __eax;
				_t34 = _t22 -  *0x409f8; // 0x6ba050e2
				if(_t34 == 0) {
					asm("repe ret");
				}
				 *0x41430 = _t6;
				 *0x4142c = _t22;
				 *0x41428 = _t25;
				 *0x41424 = _t21;
				 *0x41420 = _t27;
				 *0x4141c = _t26;
				 *0x41448 = ss;
				 *0x4143c = cs;
				 *0x41418 = ds;
				 *0x41414 = es;
				 *0x41410 = fs;
				 *0x4140c = gs;
				asm("pushfd");
				_pop( *0x41440);
				 *0x41434 =  *_t31;
				 *0x41438 = _v0;
				 *0x41444 =  &_a4;
				 *0x41380 = 0x10001;
				_t11 =  *0x41438; // 0x0
				 *0x41334 = _t11;
				 *0x41328 = 0xc0000409;
				 *0x4132c = 1;
				_t12 =  *0x409f8; // 0x6ba050e2
				_v812 = _t12;
				_t13 =  *0x409fc; // 0x945faf1d
				_v808 = _t13;
				 *0x41378 = IsDebuggerPresent();
				_push(1);
				E00038B5A(_t14);
				SetUnhandledExceptionFilter(0);
				_t17 = UnhandledExceptionFilter(0x3e30c);
				if( *0x41378 == 0) {
					_push(1);
					E00038B5A(_t17);
				}
				return TerminateProcess(GetCurrentProcess(), 0xc0000409);
			}

0x000388de
0x000388de
0x000388de
0x000388de
0x000388de
0x000388de
0x000388de
0x000388e4
0x000388e6
0x000388e6
0x0003b710
0x0003b715
0x0003b71b
0x0003b721
0x0003b727
0x0003b72d
0x0003b733
0x0003b73a
0x0003b741
0x0003b748
0x0003b74f
0x0003b756
0x0003b75d
0x0003b75e
0x0003b767
0x0003b76f
0x0003b777
0x0003b782
0x0003b78c
0x0003b791
0x0003b796
0x0003b7a0
0x0003b7aa
0x0003b7af
0x0003b7b5
0x0003b7ba
0x0003b7c6
0x0003b7cb
0x0003b7cd
0x0003b7d5
0x0003b7e0
0x0003b7ed
0x0003b7ef
0x0003b7f1
0x0003b7f6
0x0003b80a

APIs

IsDebuggerPresent.KERNEL32 ref: 0003B7C0
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0003B7D5
UnhandledExceptionFilter.KERNEL32(0003E30C), ref: 0003B7E0
GetCurrentProcess.KERNEL32(C0000409), ref: 0003B7FC
TerminateProcess.KERNEL32(00000000), ref: 0003B803

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: d76bbed1de6657a2648d599d7b3e1cd5b3450ad62a0561792a7966ee4cb557fb
Instruction ID: 5eaeaf94ff6d99eafbdbe9c8dfaf0b4e06e21dd5fe4bda592f63f14ba3d4e1d8
Opcode Fuzzy Hash: d76bbed1de6657a2648d599d7b3e1cd5b3450ad62a0561792a7966ee4cb557fb
Instruction Fuzzy Hash: 2C21F0FC941305DFF301DF24FA886C43BA8BB8A755F50805AE90883261E7785AC18F5D

Uniqueness

Uniqueness Score: -1.00%

Function 000311B9 Relevance: 3.0, APIs: 2, Instructions: 38
COMMON

Download Yara Rule

C-Code - Quality: 84%

			E000311B9(intOrPtr __ebx, intOrPtr __esi, void* __eflags) {
				signed int _t10;
				intOrPtr _t19;
				intOrPtr _t22;
				intOrPtr _t23;
				intOrPtr _t24;
				signed int _t25;
				void* _t27;

				_t24 = __esi;
				_t19 = __ebx;
				_t25 = _t27 - 0xa0;
				_t10 =  *0x409f8; // 0x6ba050e2
				 *(_t25 + 0x9c) = _t10 ^ _t25;
				E00038B70(_t23, _t25 - 0x80, 0, 0x11c);
				 *(_t25 - 0x80) = 0x11c;
				if(GetVersionExW(_t25 - 0x80) != 0) {
					__eflags =  *((intOrPtr*)(_t25 - 0x7c)) - 5;
					if(__eflags < 0) {
						goto L1;
					} else {
						if(__eflags <= 0) {
							_t16 = 1;
							__eflags =  *((intOrPtr*)(_t25 - 0x78)) - 1;
							if( *((intOrPtr*)(_t25 - 0x78)) < 1) {
								__eflags =  *((short*)(_t25 + 0x94)) - 4;
								asm("sbb al, al");
								_t16 = 2;
								__eflags = 2;
							}
						} else {
							_t16 = 1;
						}
						L7:
						return E000388DE(_t16, _t19,  *(_t25 + 0x9c) ^ _t25, _t22, _t23, _t24);
					}
				}
				L1:
				_t16 = 0;
				goto L7;
			}

0x000311b9
0x000311b9
0x000311ba
0x000311c7
0x000311ce
0x000311df
0x000311eb
0x000311fa
0x00031200
0x00031204
0x00000000
0x00031206
0x00031206
0x0003120e
0x0003120f
0x00031212
0x00031214
0x0003121c
0x0003121e
0x0003121e
0x0003121e
0x00031208
0x00031208
0x00031208
0x00031220
0x00031234
0x00031234
0x00031204
0x000311fc
0x000311fc
0x00000000

APIs

_memset.LIBCMT ref: 000311DF
GetVersionExW.KERNEL32(?), ref: 000311F2

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: Version_memset
String ID:
API String ID: 963298953-0
Opcode ID: 5931a850b704a006f94bf22b5a3a159ac7c7af03586d71f610b9d70199a62799
Instruction ID: bc9fea7d71d94beb2ab0f9027c7ca7a83719e2e60d37a94f5473213dc98d5186
Opcode Fuzzy Hash: 5931a850b704a006f94bf22b5a3a159ac7c7af03586d71f610b9d70199a62799
Instruction Fuzzy Hash: 87F0C2B1E0020C8AEF71AF74EC46BEE73FCAB0E348F40086AE516D6182EB7441198B55

Uniqueness

Uniqueness Score: -1.00%

Function 00034AF8 Relevance: 1.5, APIs: 1, Instructions: 4
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00034AF8() {

				SetUnhandledExceptionFilter(E00034AB6);
				return 0;
			}

0x00034afd
0x00034b05

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_00004AB6), ref: 00034AFD

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: f8d7660e694d5ada0bd9631dfe5fae56616be7839cd7ec39b0d13780f69e0a2a
Instruction ID: 5ed1acfbd6d5db0d1b6a160d3016da7befce5957e8332b8e608fb18ff0cd103c
Opcode Fuzzy Hash: f8d7660e694d5ada0bd9631dfe5fae56616be7839cd7ec39b0d13780f69e0a2a
Instruction Fuzzy Hash: 72900260295511469A1A97706D0960535DC9B58A12F5104516601CC464EA5490419517

Uniqueness

Uniqueness Score: -1.00%

Function 0003CA4C Relevance: 1.3, APIs: 1, Instructions: 8
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E0003CA4C() {
				void* _t1;
				void* _t4;

				_t1 = GetProcessHeap();
				 *0x41740 = 0x3e374;
				 *0x41744 = _t1;
				 *0x41748 = 0;
				return E00036614(_t4, E0003CA99);
			}

0x0003ca4c
0x0003ca57
0x0003ca61
0x0003ca66
0x0003ca73

APIs

GetProcessHeap.KERNEL32 ref: 0003CA4C

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 5d5bb0d10fbbf956c5f19c3e2bf5af3e27126964c7f7de25a643f861ff3760f6
Instruction ID: b6ae57c1dee80b194c64fc8aecf09781060154d231558f39160c8ea10c5b6b73
Opcode Fuzzy Hash: 5d5bb0d10fbbf956c5f19c3e2bf5af3e27126964c7f7de25a643f861ff3760f6
Instruction Fuzzy Hash: 0CC08CF404C2849BF312CBA0FA0A3C43BB8E30734AF10010AE00A8B1A2C77C00C4C72A

Uniqueness

Uniqueness Score: -1.00%

Function 00033C83 Relevance: .5, Instructions: 501
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E00033C83(signed int* __eax, signed char* _a4, signed char* _a8) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				signed int* _t243;
				signed int _t246;
				signed int _t251;
				signed int _t254;
				unsigned int _t257;
				void* _t259;
				void* _t260;
				signed int _t261;
				void* _t268;
				void* _t269;
				signed int _t270;
				signed char* _t276;
				signed int _t280;
				signed char* _t281;
				signed int _t283;
				signed char* _t284;
				signed char* _t286;
				signed char* _t291;
				signed char* _t293;
				void* _t298;
				signed char* _t300;
				signed char* _t302;
				signed char* _t304;
				signed int _t311;
				signed int _t315;
				signed char* _t316;
				signed int _t318;
				void* _t319;
				unsigned int _t337;
				signed int _t342;
				signed short* _t346;
				signed short* _t347;
				unsigned int _t353;
				signed char _t356;
				void* _t357;
				void* _t358;
				signed int _t363;
				signed int _t380;
				void* _t381;
				signed int _t385;
				unsigned int _t391;
				signed char* _t392;
				void* _t395;
				void* _t396;
				signed char* _t397;
				signed int _t405;
				unsigned int _t408;
				signed char* _t409;
				signed int _t411;
				void* _t416;
				signed int _t431;
				void* _t433;
				signed int _t434;
				signed int _t435;
				signed int _t442;
				signed int _t461;
				signed int _t462;
				signed int _t470;
				signed int _t471;
				signed int _t472;
				signed int _t473;
				signed int _t474;
				signed int _t475;
				unsigned int _t476;
				signed int _t477;
				unsigned int _t478;

				_t243 = __eax;
				_v8 = __eax[8];
				_a8 =  &(_a4[_a8]);
				_t318 = __eax[4];
				_t470 = __eax[7];
				_t435 = __eax[0xd];
				_t405 = (1 << __eax[2]) - 0x00000001 & __eax[0xb];
				_v12 = _t318;
				_v24 =  *(_t318 + ((_t435 << 4) + 1) * 2) & 0x0000ffff;
				if(_t470 >= 0x1000000) {
					L4:
					_t337 = (_t470 >> 0xb) * _v24;
					if(_v8 >= _t337) {
						_v8 = _v8 - _t337;
						_t471 = _t470 - _t337;
						_t319 = 0x1000000;
						if(_t471 >= 0x1000000) {
							L35:
							_t246 = (_t471 >> 0xb) * ( *(_v12 + 0x180 + _t435 * 2) & 0x0000ffff);
							if(_v8 >= _t246) {
								_v8 = _v8 - _t246;
								_t472 = _t471 - _t246;
								_v20 = 3;
								if(_t472 >= _t319) {
									L40:
									_t342 = (_t472 >> 0xb) * ( *(_v12 + 0x198 + _t435 * 2) & 0x0000ffff);
									if(_v8 >= _t342) {
										_v8 = _v8 - _t342;
										_t473 = _t472 - _t342;
										if(_t473 >= _t319) {
											L51:
											_t251 = (_t473 >> 0xb) * ( *(_v12 + 0x1b0 + _t435 * 2) & 0x0000ffff);
											if(_v8 < _t251) {
												L56:
												_t474 = _t251;
												L58:
												_v28 = 0xc;
												_t346 = _v12 + 0xa68;
												L59:
												if(_t474 >= _t319) {
													L62:
													_t254 = (_t474 >> 0xb) * ( *_t346 & 0x0000ffff);
													if(_v8 >= _t254) {
														_v8 = _v8 - _t254;
														_t475 = _t474 - _t254;
														if(_t475 >= _t319) {
															L67:
															_t257 = (_t475 >> 0xb) * (_t346[1] & 0x0000ffff);
															if(_v8 >= _t257) {
																_v8 = _v8 - _t257;
																_t476 = _t475 - _t257;
																_t347 =  &(_t346[0x102]);
																_v24 = 0x10;
																_v16 = 0x100;
															} else {
																_t476 = _t257;
																_t283 = 8;
																_t347 =  &(_t346[0x82]) + (_t405 << 4);
																_v24 = _t283;
																_v16 = _t283;
															}
															L70:
															_t259 = 1;
															do {
																_t260 = _t259 + _t259;
																if(_t476 >= _t319) {
																	goto L74;
																}
																_t409 = _a4;
																if(_t409 >= _a8) {
																	L2:
																	return 0;
																}
																_t476 = _t476 << 8;
																_a4 =  &(_a4[1]);
																_v8 = _v8 << 0x00000008 |  *_t409 & 0x000000ff;
																L74:
																_t408 = (_t476 >> 0xb) * ( *(_t260 + _t347) & 0x0000ffff);
																if(_v8 >= _t408) {
																	_v8 = _v8 - _t408;
																	_t476 = _t476 - _t408;
																	_t259 = _t260 + 1;
																} else {
																	_t476 = _t408;
																}
															} while (_t259 < _v16);
															_t261 = _t259 + _v24 - _v16;
															if(_v28 >= 4) {
																L106:
																if(_t476 >= _t319 || _a4 < _a8) {
																	return _v20;
																} else {
																	goto L2;
																}
															}
															if(_t261 >= 4) {
																_t261 = 3;
															}
															_t442 = _v12;
															_v16 = (_t261 << 7) + _t442 + 0x360;
															_t268 = 1;
															do {
																_t269 = _t268 + _t268;
																_t411 =  *(_t269 + _v16) & 0x0000ffff;
																if(_t476 >= _t319) {
																	goto L85;
																}
																if(_a4 >= _a8) {
																	goto L2;
																}
																_t442 = _v12;
																_t476 = _t476 << 8;
																_a4 =  &(_a4[1]);
																_v8 = _v8 << 0x00000008 |  *_a4 & 0x000000ff;
																L85:
																_t353 = (_t476 >> 0xb) * _t411;
																if(_v8 >= _t353) {
																	_v8 = _v8 - _t353;
																	_t476 = _t476 - _t353;
																	_t268 = _t269 + 1;
																} else {
																	_t476 = _t353;
																}
															} while (_t268 < 0x40);
															_t270 = _t268 - 0x40;
															if(_t270 < 4) {
																goto L106;
															}
															_t356 = (_t270 >> 1) - 1;
															_v24 = _t356;
															if(_t270 >= 0xe) {
																_t357 = _t356 - 4;
																do {
																	if(_t476 >= _t319) {
																		goto L96;
																	}
																	_t276 = _a4;
																	if(_t276 >= _a8) {
																		goto L2;
																	}
																	_t476 = _t476 << 8;
																	_a4 =  &(_a4[1]);
																	_v8 = _v8 << 0x00000008 |  *_t276 & 0x000000ff;
																	L96:
																	_t476 = _t476 >> 1;
																	_v8 = _v8 - ((_v8 - _t476 >> 0x0000001f) - 0x00000001 & _t476);
																	_t357 = _t357 - 1;
																} while (_t357 != 0);
																_t358 = _t442 + 0x644;
																_v24 = 4;
																L98:
																_t416 = 1;
																do {
																	_t416 = _t416 + _t416;
																	if(_t476 >= _t319) {
																		goto L102;
																	}
																	_t281 = _a4;
																	if(_t281 >= _a8) {
																		goto L2;
																	}
																	_t476 = _t476 << 8;
																	_a4 =  &(_a4[1]);
																	_v8 = _v8 << 0x00000008 |  *_t281 & 0x000000ff;
																	L102:
																	_t280 = (_t476 >> 0xb) * ( *(_t416 + _t358) & 0x0000ffff);
																	if(_v8 >= _t280) {
																		_v8 = _v8 - _t280;
																		_t476 = _t476 - _t280;
																		_t416 = _t416 + 1;
																	} else {
																		_t476 = _t280;
																	}
																	_t238 =  &_v24;
																	 *_t238 = _v24 - 1;
																} while ( *_t238 != 0);
																goto L106;
															}
															_t358 = _t442 + 0x55e + (((_t270 & 0x00000001 | 0x00000002) << _t356) - _t270) * 2;
															goto L98;
														}
														_t284 = _a4;
														if(_t284 >= _a8) {
															goto L2;
														}
														_t475 = _t475 << 8;
														_a4 =  &(_a4[1]);
														_v8 = _v8 << 0x00000008 |  *_t284 & 0x000000ff;
														goto L67;
													}
													_v24 = _v24 & 0x00000000;
													_t476 = _t254;
													_t347 =  &(_t346[2]) + (_t405 << 4);
													_v16 = 8;
													goto L70;
												}
												_t286 = _a4;
												if(_t286 >= _a8) {
													goto L2;
												}
												_t474 = _t474 << 8;
												_a4 =  &(_a4[1]);
												_v8 = _v8 << 0x00000008 |  *_t286 & 0x000000ff;
												goto L62;
											}
											_v8 = _v8 - _t251;
											_t477 = _t473 - _t251;
											_t363 =  *(_v12 + 0x1c8 + _t435 * 2) & 0x0000ffff;
											if(_t477 >= _t319) {
												L55:
												_t251 = (_t477 >> 0xb) * _t363;
												if(_v8 >= _t251) {
													L57:
													_t474 = _t477 - _t251;
													_v8 = _v8 - _t251;
													goto L58;
												}
												goto L56;
											}
											_t291 = _a4;
											if(_t291 >= _a8) {
												goto L2;
											}
											_t477 = _t477 << 8;
											_a4 =  &(_a4[1]);
											_v8 = _v8 << 0x00000008 |  *_t291 & 0x000000ff;
											goto L55;
										}
										_t293 = _a4;
										if(_t293 >= _a8) {
											goto L2;
										}
										_t473 = _t473 << 8;
										_a4 =  &(_a4[1]);
										_v8 = _v8 << 0x00000008 |  *_t293 & 0x000000ff;
										goto L51;
									}
									_t461 =  *(_v12 + ((_t435 + 0xf << 4) + _t405) * 2) & 0x0000ffff;
									_t477 = _t342;
									if(_t342 >= _t319) {
										L44:
										_t251 = (_t477 >> 0xb) * _t461;
										if(_v8 >= _t251) {
											goto L57;
										}
										if(_t251 >= _t319 || _a4 < _a8) {
											_t298 = 3;
											return _t298;
										} else {
											goto L2;
										}
									}
									_t300 = _a4;
									if(_t300 >= _a8) {
										goto L2;
									}
									_t477 = _t342 << 8;
									_a4 =  &(_a4[1]);
									_v8 = _v8 << 0x00000008 |  *_t300 & 0x000000ff;
									goto L44;
								}
								_t302 = _a4;
								if(_t302 >= _a8) {
									goto L2;
								}
								_t472 = _t472 << 8;
								_a4 =  &(_a4[1]);
								_v8 = _v8 << 0x00000008 |  *_t302 & 0x000000ff;
								goto L40;
							}
							_v28 = _v28 & 0x00000000;
							_t474 = _t246;
							_t346 = _v12 + 0x664;
							_v20 = 2;
							goto L59;
						}
						_t304 = _a4;
						if(_t304 >= _a8) {
							goto L2;
						}
						_t471 = _t471 << 8;
						_a4 =  &(_a4[1]);
						_v8 = _v8 << 0x00000008 |  *_t304 & 0x000000ff;
						goto L35;
					}
					_t478 = _t337;
					_v16 = _v12 + 0xe6c;
					if(_t243[0xc] != 0 || _t243[0xb] != 0) {
						_t380 = _t243[9];
						if(_t380 == 0) {
							_t380 = _t243[0xa];
						}
						_t381 = 8;
						_v16 = _v16 + ((( *(_t243[5] + _t380 - 1) & 0x000000ff) >> _t381 -  *_t243) + (((1 << _t243[1]) - 0x00000001 & _t243[0xb]) <<  *_t243)) * 0x600;
					}
					if(_t435 >= 7) {
						_t431 = _t243[9];
						_t462 = _t243[0xe];
						if(_t431 >= _t462) {
							_t385 = 0;
						} else {
							_t385 = _t243[0xa];
						}
						_v20 =  *(_t243[5] - _t462 + _t431 + _t385) & 0x000000ff;
						_v12 = 0x100;
						_t433 = 1;
						_t319 = 0x1000000;
						do {
							_v20 = _v20 << 1;
							_t311 = _v12 & _v20;
							_v24 =  *(_v16 + (_t311 + _t433 + _v12) * 2) & 0x0000ffff;
							if(_t478 >= _t319) {
								goto L27;
							}
							_t392 = _a4;
							if(_t392 >= _a8) {
								goto L2;
							}
							_t478 = _t478 << 8;
							_a4 =  &(_a4[1]);
							_v8 = _v8 << 0x00000008 |  *_t392 & 0x000000ff;
							L27:
							_t391 = (_t478 >> 0xb) * _v24;
							if(_v8 >= _t391) {
								_t478 = _t478 - _t391;
								_v8 = _v8 - _t391;
								_t433 = _t433 + _t433 + 1;
							} else {
								_t478 = _t391;
								_t433 = _t433 + _t433;
								_t311 =  !_t311;
							}
							_v12 = _v12 & _t311;
						} while (_t433 < 0x100);
						goto L31;
					} else {
						_t395 = 1;
						_t319 = 0x1000000;
						do {
							_t396 = _t395 + _t395;
							_t434 =  *(_t396 + _v16) & 0x0000ffff;
							if(_t478 >= _t319) {
								goto L15;
							}
							_t316 = _a4;
							if(_t316 >= _a8) {
								goto L2;
							}
							_t478 = _t478 << 8;
							_a4 =  &(_a4[1]);
							_v8 = _v8 << 0x00000008 |  *_t316 & 0x000000ff;
							L15:
							_t315 = (_t478 >> 0xb) * _t434;
							if(_v8 >= _t315) {
								_v8 = _v8 - _t315;
								_t478 = _t478 - _t315;
								_t395 = _t396 + 1;
							} else {
								_t478 = _t315;
							}
						} while (_t395 < 0x100);
						L31:
						_v20 = 1;
						goto L106;
					}
				}
				_t397 = _a4;
				if(_t397 < _a8) {
					_t470 = _t470 << 8;
					_a4 =  &(_a4[1]);
					_v8 = _v8 << 0x00000008 |  *_t397 & 0x000000ff;
					goto L4;
				}
				goto L2;
			}

0x00033c83
0x00033c8f
0x00033c9a
0x00033ca3
0x00033ca7
0x00033cab
0x00033caf
0x00033cbd
0x00033cc0
0x00033cc9
0x00033cee
0x00033cf3
0x00033cfa
0x00033e4f
0x00033e52
0x00033e54
0x00033e5b
0x00033e7d
0x00033e8d
0x00033e93
0x00033eb0
0x00033eb3
0x00033eb5
0x00033ebe
0x00033ee0
0x00033ef0
0x00033ef6
0x00033f58
0x00033f5b
0x00033f5f
0x00033f81
0x00033f91
0x00033f97
0x00033fda
0x00033fda
0x00033fe3
0x00033fe6
0x00033fed
0x00033ff3
0x00033ff5
0x00034017
0x0003401f
0x00034025
0x0003403d
0x00034040
0x00034044
0x00034066
0x0003406f
0x00034075
0x0003408e
0x00034091
0x00034093
0x00034099
0x000340a0
0x00034077
0x00034079
0x0003407b
0x0003407f
0x00034086
0x00034089
0x00034089
0x000340a7
0x000340a9
0x000340aa
0x000340aa
0x000340ae
0x00000000
0x00000000
0x000340b0
0x000340b6
0x00033cd3
0x00000000
0x00033cd3
0x000340c7
0x000340ca
0x000340cd
0x000340d0
0x000340d9
0x000340df
0x000340e5
0x000340e8
0x000340ea
0x000340e1
0x000340e1
0x000340e1
0x000340eb
0x000340f6
0x000340fc
0x0003422a
0x0003422c
0x00000000
0x00000000
0x00000000
0x00000000
0x0003422c
0x00034105
0x00034109
0x00034109
0x0003410a
0x00034117
0x0003411c
0x0003411d
0x00034120
0x00034122
0x00034128
0x00000000
0x00000000
0x00034130
0x00000000
0x00000000
0x00034144
0x00034147
0x0003414a
0x0003414d
0x00034150
0x00034155
0x0003415b
0x00034161
0x00034164
0x00034166
0x0003415d
0x0003415d
0x0003415d
0x00034167
0x0003416c
0x00034172
0x00000000
0x00000000
0x0003417c
0x0003417d
0x00034183
0x0003419a
0x0003419d
0x0003419f
0x00000000
0x00000000
0x000341a1
0x000341a7
0x00000000
0x00000000
0x000341b8
0x000341bb
0x000341be
0x000341c1
0x000341c4
0x000341ce
0x000341d1
0x000341d1
0x000341d4
0x000341da
0x000341e1
0x000341e3
0x000341e4
0x000341e4
0x000341e8
0x00000000
0x00000000
0x000341ea
0x000341f0
0x00000000
0x00000000
0x00034201
0x00034204
0x00034207
0x0003420a
0x00034213
0x00034219
0x0003421f
0x00034222
0x00034224
0x0003421b
0x0003421b
0x0003421b
0x00034225
0x00034225
0x00034225
0x00000000
0x000341e4
0x00034191
0x00000000
0x00034191
0x00034046
0x0003404c
0x00000000
0x00000000
0x0003405d
0x00034060
0x00034063
0x00000000
0x00034063
0x0003402a
0x0003402e
0x00034030
0x00034034
0x00000000
0x00034034
0x00033ff7
0x00033ffd
0x00000000
0x00000000
0x0003400e
0x00034011
0x00034014
0x00000000
0x00034014
0x00033f99
0x00033f9c
0x00033fa1
0x00033fab
0x00033fcd
0x00033fd2
0x00033fd8
0x00033fde
0x00033fde
0x00033fe0
0x00000000
0x00033fe0
0x00000000
0x00033fd8
0x00033fad
0x00033fb3
0x00000000
0x00000000
0x00033fc4
0x00033fc7
0x00033fca
0x00000000
0x00033fca
0x00033f61
0x00033f67
0x00000000
0x00000000
0x00033f78
0x00033f7b
0x00033f7e
0x00000000
0x00033f7e
0x00033f03
0x00033f07
0x00033f0b
0x00033f2f
0x00033f34
0x00033f3a
0x00000000
0x00000000
0x00033f42
0x00033f52
0x00000000
0x00000000
0x00000000
0x00000000
0x00033f42
0x00033f0d
0x00033f13
0x00000000
0x00000000
0x00033f1f
0x00033f29
0x00033f2c
0x00000000
0x00033f2c
0x00033ec0
0x00033ec6
0x00000000
0x00000000
0x00033ed7
0x00033eda
0x00033edd
0x00000000
0x00033edd
0x00033e98
0x00033e9c
0x00033e9e
0x00033ea4
0x00000000
0x00033ea4
0x00033e5d
0x00033e63
0x00000000
0x00000000
0x00033e74
0x00033e77
0x00033e7a
0x00000000
0x00033e7a
0x00033d00
0x00033d0f
0x00033d12
0x00033d1a
0x00033d1f
0x00033d21
0x00033d21
0x00033d30
0x00033d4d
0x00033d4d
0x00033d53
0x00033dae
0x00033db1
0x00033db6
0x00033dbd
0x00033db8
0x00033db8
0x00033db8
0x00033dcc
0x00033dcf
0x00033dd6
0x00033dd7
0x00033ddc
0x00033ddc
0x00033de2
0x00033df2
0x00033df7
0x00000000
0x00000000
0x00033df9
0x00033dff
0x00000000
0x00000000
0x00033e10
0x00033e13
0x00033e16
0x00033e19
0x00033e1e
0x00033e25
0x00033e2f
0x00033e31
0x00033e34
0x00033e27
0x00033e27
0x00033e29
0x00033e2b
0x00033e2b
0x00033e38
0x00033e3b
0x00000000
0x00033d55
0x00033d57
0x00033d58
0x00033d5d
0x00033d60
0x00033d62
0x00033d68
0x00000000
0x00000000
0x00033d6a
0x00033d70
0x00000000
0x00000000
0x00033d81
0x00033d84
0x00033d87
0x00033d8a
0x00033d8f
0x00033d95
0x00033d9b
0x00033d9e
0x00033da0
0x00033d97
0x00033d97
0x00033d97
0x00033da1
0x00033e43
0x00033e43
0x00000000
0x00033e43
0x00033d53
0x00033ccb
0x00033cd1
0x00033ce5
0x00033ce8
0x00033ceb
0x00000000
0x00033ceb
0x00000000

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cdce912ae16fa7c2910c67f319d47321224ac57559afeb0f8abb2cd8482bd88
Instruction ID: 434f5cf43e31bd333d445d97dd88affa59c66bc1f26edaa8d24e83c7ba5d6821
Opcode Fuzzy Hash: 5cdce912ae16fa7c2910c67f319d47321224ac57559afeb0f8abb2cd8482bd88
Instruction Fuzzy Hash: EB129431E00119DFCF19CF68C5945ADBBB6EF84346F2585AAE956AB280D3309F81DF80

Uniqueness

Uniqueness Score: -1.00%

Function 0003ADAD Relevance: .4, Instructions: 384
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E0003ADAD(void* __eax, void* __ecx) {
				void* _t196;
				signed int _t197;
				void* _t200;
				signed char _t206;
				signed char _t207;
				signed char _t208;
				signed char _t210;
				signed char _t211;
				signed int _t216;
				signed int _t316;
				void* _t319;
				void* _t321;
				void* _t323;
				void* _t325;
				void* _t327;
				void* _t330;
				void* _t332;
				void* _t334;
				void* _t337;
				void* _t339;
				void* _t341;
				void* _t344;
				void* _t346;
				void* _t348;
				void* _t351;
				void* _t353;
				void* _t355;
				void* _t358;
				void* _t360;
				void* _t362;

				_t200 = __ecx;
				_t196 = __eax;
				if( *((intOrPtr*)(__eax - 0x1f)) ==  *((intOrPtr*)(__ecx - 0x1f))) {
					_t316 = 0;
					L17:
					if(_t316 != 0) {
						goto L1;
					}
					_t206 =  *(_t196 - 0x1b);
					if(_t206 ==  *(_t200 - 0x1b)) {
						_t316 = 0;
						L28:
						if(_t316 != 0) {
							goto L1;
						}
						_t207 =  *(_t196 - 0x17);
						if(_t207 ==  *(_t200 - 0x17)) {
							_t316 = 0;
							L39:
							if(_t316 != 0) {
								goto L1;
							}
							_t208 =  *(_t196 - 0x13);
							if(_t208 ==  *(_t200 - 0x13)) {
								_t316 = 0;
								L50:
								if(_t316 != 0) {
									goto L1;
								}
								if( *(_t196 - 0xf) ==  *(_t200 - 0xf)) {
									_t316 = 0;
									L61:
									if(_t316 != 0) {
										goto L1;
									}
									_t210 =  *(_t196 - 0xb);
									if(_t210 ==  *(_t200 - 0xb)) {
										_t316 = 0;
										L72:
										if(_t316 != 0) {
											goto L1;
										}
										_t211 =  *(_t196 - 7);
										if(_t211 ==  *(_t200 - 7)) {
											_t316 = 0;
											L83:
											if(_t316 != 0) {
												goto L1;
											}
											_t319 = ( *(_t196 - 3) & 0x000000ff) - ( *(_t200 - 3) & 0x000000ff);
											if(_t319 == 0) {
												L5:
												_t321 = ( *(_t196 - 2) & 0x000000ff) - ( *(_t200 - 2) & 0x000000ff);
												if(_t321 == 0) {
													L3:
													_t197 = ( *(_t196 - 1) & 0x000000ff) - ( *(_t200 - 1) & 0x000000ff);
													if(_t197 != 0) {
														_t197 = (0 | _t197 > 0x00000000) + (0 | _t197 > 0x00000000) - 1;
													}
													L2:
													return _t197;
												}
												_t216 = (0 | _t321 > 0x00000000) + (0 | _t321 > 0x00000000) - 1;
												if(_t216 != 0) {
													L86:
													_t197 = _t216;
													goto L2;
												} else {
													goto L3;
												}
											}
											_t216 = (0 | _t319 > 0x00000000) + (0 | _t319 > 0x00000000) - 1;
											if(_t216 == 0) {
												goto L5;
											}
											goto L86;
										}
										_t323 = (_t211 & 0x000000ff) - ( *(_t200 - 7) & 0x000000ff);
										if(_t323 == 0) {
											L76:
											_t325 = ( *(_t196 - 6) & 0x000000ff) - ( *(_t200 - 6) & 0x000000ff);
											if(_t325 == 0) {
												L78:
												_t327 = ( *(_t196 - 5) & 0x000000ff) - ( *(_t200 - 5) & 0x000000ff);
												if(_t327 == 0) {
													L80:
													_t316 = ( *(_t196 - 4) & 0x000000ff) - ( *(_t200 - 4) & 0x000000ff);
													if(_t316 != 0) {
														_t316 = (0 | _t316 > 0x00000000) + (0 | _t316 > 0x00000000) - 1;
													}
													goto L83;
												}
												_t316 = (0 | _t327 > 0x00000000) + (0 | _t327 > 0x00000000) - 1;
												if(_t316 != 0) {
													goto L1;
												}
												goto L80;
											}
											_t316 = (0 | _t325 > 0x00000000) + (0 | _t325 > 0x00000000) - 1;
											if(_t316 != 0) {
												goto L1;
											}
											goto L78;
										}
										_t316 = (0 | _t323 > 0x00000000) + (0 | _t323 > 0x00000000) - 1;
										if(_t316 != 0) {
											goto L1;
										}
										goto L76;
									}
									_t330 = (_t210 & 0x000000ff) - ( *(_t200 - 0xb) & 0x000000ff);
									if(_t330 == 0) {
										L65:
										_t332 = ( *(_t196 - 0xa) & 0x000000ff) - ( *(_t200 - 0xa) & 0x000000ff);
										if(_t332 == 0) {
											L67:
											_t334 = ( *(_t196 - 9) & 0x000000ff) - ( *(_t200 - 9) & 0x000000ff);
											if(_t334 == 0) {
												L69:
												_t316 = ( *(_t196 - 8) & 0x000000ff) - ( *(_t200 - 8) & 0x000000ff);
												if(_t316 != 0) {
													_t316 = (0 | _t316 > 0x00000000) + (0 | _t316 > 0x00000000) - 1;
												}
												goto L72;
											}
											_t316 = (0 | _t334 > 0x00000000) + (0 | _t334 > 0x00000000) - 1;
											if(_t316 != 0) {
												goto L1;
											}
											goto L69;
										}
										_t316 = (0 | _t332 > 0x00000000) + (0 | _t332 > 0x00000000) - 1;
										if(_t316 != 0) {
											goto L1;
										}
										goto L67;
									}
									_t316 = (0 | _t330 > 0x00000000) + (0 | _t330 > 0x00000000) - 1;
									if(_t316 != 0) {
										goto L1;
									}
									goto L65;
								}
								_t337 = ( *(_t196 - 0xf) & 0x000000ff) - ( *(_t200 - 0xf) & 0x000000ff);
								if(_t337 == 0) {
									L54:
									_t339 = ( *(_t196 - 0xe) & 0x000000ff) - ( *(_t200 - 0xe) & 0x000000ff);
									if(_t339 == 0) {
										L56:
										_t341 = ( *(_t196 - 0xd) & 0x000000ff) - ( *(_t200 - 0xd) & 0x000000ff);
										if(_t341 == 0) {
											L58:
											_t316 = ( *(_t196 - 0xc) & 0x000000ff) - ( *(_t200 - 0xc) & 0x000000ff);
											if(_t316 != 0) {
												_t316 = (0 | _t316 > 0x00000000) + (0 | _t316 > 0x00000000) - 1;
											}
											goto L61;
										}
										_t316 = (0 | _t341 > 0x00000000) + (0 | _t341 > 0x00000000) - 1;
										if(_t316 != 0) {
											goto L1;
										}
										goto L58;
									}
									_t316 = (0 | _t339 > 0x00000000) + (0 | _t339 > 0x00000000) - 1;
									if(_t316 != 0) {
										goto L1;
									}
									goto L56;
								}
								_t316 = (0 | _t337 > 0x00000000) + (0 | _t337 > 0x00000000) - 1;
								if(_t316 != 0) {
									goto L1;
								}
								goto L54;
							}
							_t344 = (_t208 & 0x000000ff) - ( *(_t200 - 0x13) & 0x000000ff);
							if(_t344 == 0) {
								L43:
								_t346 = ( *(_t196 - 0x12) & 0x000000ff) - ( *(_t200 - 0x12) & 0x000000ff);
								if(_t346 == 0) {
									L45:
									_t348 = ( *(_t196 - 0x11) & 0x000000ff) - ( *(_t200 - 0x11) & 0x000000ff);
									if(_t348 == 0) {
										L47:
										_t316 = ( *(_t196 - 0x10) & 0x000000ff) - ( *(_t200 - 0x10) & 0x000000ff);
										if(_t316 != 0) {
											_t316 = (0 | _t316 > 0x00000000) + (0 | _t316 > 0x00000000) - 1;
										}
										goto L50;
									}
									_t316 = (0 | _t348 > 0x00000000) + (0 | _t348 > 0x00000000) - 1;
									if(_t316 != 0) {
										goto L1;
									}
									goto L47;
								}
								_t316 = (0 | _t346 > 0x00000000) + (0 | _t346 > 0x00000000) - 1;
								if(_t316 != 0) {
									goto L1;
								}
								goto L45;
							}
							_t316 = (0 | _t344 > 0x00000000) + (0 | _t344 > 0x00000000) - 1;
							if(_t316 != 0) {
								goto L1;
							}
							goto L43;
						}
						_t351 = (_t207 & 0x000000ff) - ( *(_t200 - 0x17) & 0x000000ff);
						if(_t351 == 0) {
							L32:
							_t353 = ( *(_t196 - 0x16) & 0x000000ff) - ( *(_t200 - 0x16) & 0x000000ff);
							if(_t353 == 0) {
								L34:
								_t355 = ( *(_t196 - 0x15) & 0x000000ff) - ( *(_t200 - 0x15) & 0x000000ff);
								if(_t355 == 0) {
									L36:
									_t316 = ( *(_t196 - 0x14) & 0x000000ff) - ( *(_t200 - 0x14) & 0x000000ff);
									if(_t316 != 0) {
										_t316 = (0 | _t316 > 0x00000000) + (0 | _t316 > 0x00000000) - 1;
									}
									goto L39;
								}
								_t316 = (0 | _t355 > 0x00000000) + (0 | _t355 > 0x00000000) - 1;
								if(_t316 != 0) {
									goto L1;
								}
								goto L36;
							}
							_t316 = (0 | _t353 > 0x00000000) + (0 | _t353 > 0x00000000) - 1;
							if(_t316 != 0) {
								goto L1;
							}
							goto L34;
						}
						_t316 = (0 | _t351 > 0x00000000) + (0 | _t351 > 0x00000000) - 1;
						if(_t316 != 0) {
							goto L1;
						}
						goto L32;
					}
					_t358 = (_t206 & 0x000000ff) - ( *(_t200 - 0x1b) & 0x000000ff);
					if(_t358 == 0) {
						L21:
						_t360 = ( *(_t196 - 0x1a) & 0x000000ff) - ( *(_t200 - 0x1a) & 0x000000ff);
						if(_t360 == 0) {
							L23:
							_t362 = ( *(_t196 - 0x19) & 0x000000ff) - ( *(_t200 - 0x19) & 0x000000ff);
							if(_t362 == 0) {
								L25:
								_t316 = ( *(_t196 - 0x18) & 0x000000ff) - ( *(_t200 - 0x18) & 0x000000ff);
								if(_t316 != 0) {
									_t316 = (0 | _t316 > 0x00000000) + (0 | _t316 > 0x00000000) - 1;
								}
								goto L28;
							}
							_t316 = (0 | _t362 > 0x00000000) + (0 | _t362 > 0x00000000) - 1;
							if(_t316 != 0) {
								goto L1;
							}
							goto L25;
						}
						_t316 = (0 | _t360 > 0x00000000) + (0 | _t360 > 0x00000000) - 1;
						if(_t316 != 0) {
							goto L1;
						}
						goto L23;
					}
					_t316 = (0 | _t358 > 0x00000000) + (0 | _t358 > 0x00000000) - 1;
					if(_t316 != 0) {
						goto L1;
					}
					goto L21;
				} else {
					__edx =  *(__ecx - 0x1f) & 0x000000ff;
					__esi =  *(__eax - 0x1f) & 0x000000ff;
					__esi = ( *(__eax - 0x1f) & 0x000000ff) - ( *(__ecx - 0x1f) & 0x000000ff);
					if(__esi == 0) {
						L10:
						__esi =  *(__eax - 0x1e) & 0x000000ff;
						__edx =  *(__ecx - 0x1e) & 0x000000ff;
						__esi = ( *(__eax - 0x1e) & 0x000000ff) - ( *(__ecx - 0x1e) & 0x000000ff);
						if(__esi == 0) {
							L12:
							__esi =  *(__eax - 0x1d) & 0x000000ff;
							__edx =  *(__ecx - 0x1d) & 0x000000ff;
							__esi = ( *(__eax - 0x1d) & 0x000000ff) - ( *(__ecx - 0x1d) & 0x000000ff);
							if(__esi == 0) {
								L14:
								__esi =  *(__eax - 0x1c) & 0x000000ff;
								__edx =  *(__ecx - 0x1c) & 0x000000ff;
								__esi = ( *(__eax - 0x1c) & 0x000000ff) - ( *(__ecx - 0x1c) & 0x000000ff);
								if(__esi != 0) {
									0 = 0 | __esi > 0x00000000;
									__edx = (__esi > 0) + (__esi > 0) - 1;
									__esi = (__esi > 0) + (__esi > 0) - 1;
								}
								goto L17;
							}
							0 = 0 | __esi > 0x00000000;
							__edx = (__esi > 0) + (__esi > 0) - 1;
							__esi = __edx;
							if(__edx != 0) {
								goto L1;
							}
							goto L14;
						}
						0 = 0 | __esi > 0x00000000;
						__edx = (__esi > 0) + (__esi > 0) - 1;
						__esi = __edx;
						if(__edx != 0) {
							goto L1;
						}
						goto L12;
					}
					0 = 0 | __esi > 0x00000000;
					__edx = (__esi > 0) + (__esi > 0) - 1;
					__esi = __edx;
					if(__edx != 0) {
						goto L1;
					}
					goto L10;
				}
				L1:
				_t197 = _t316;
				goto L2;
			}

0x0003adad
0x0003adad
0x0003adb3
0x0003ae33
0x0003ae35
0x0003ae37
0x00000000
0x00000000
0x0003ae3d
0x0003ae43
0x0003aec2
0x0003aec4
0x0003aec6
0x00000000
0x00000000
0x0003aecc
0x0003aed2
0x0003af51
0x0003af53
0x0003af55
0x00000000
0x00000000
0x0003af5b
0x0003af61
0x0003afe0
0x0003afe2
0x0003afe4
0x00000000
0x00000000
0x0003aff0
0x0003b070
0x0003b072
0x0003b074
0x00000000
0x00000000
0x0003b07a
0x0003b080
0x0003b0ff
0x0003b101
0x0003b103
0x00000000
0x00000000
0x0003b109
0x0003b10f
0x0003b18e
0x0003b190
0x0003b192
0x00000000
0x00000000
0x0003b1a0
0x0003b1a2
0x0003ad85
0x0003ad8d
0x0003ad8f
0x0003a96b
0x0003a973
0x0003a975
0x0003a986
0x0003a986
0x0003a57b
0x0003b2d7
0x0003b2d7
0x0003ad9c
0x0003ada2
0x0003b1bb
0x0003b1bb
0x00000000
0x0003ada8
0x00000000
0x0003ada8
0x0003ada2
0x0003b1af
0x0003b1b5
0x00000000
0x00000000
0x00000000
0x0003b1b5
0x0003b118
0x0003b11a
0x0003b131
0x0003b139
0x0003b13b
0x0003b152
0x0003b15a
0x0003b15c
0x0003b173
0x0003b17b
0x0003b17d
0x0003b18a
0x0003b18a
0x00000000
0x0003b17d
0x0003b169
0x0003b16d
0x00000000
0x00000000
0x00000000
0x0003b16d
0x0003b148
0x0003b14c
0x00000000
0x00000000
0x00000000
0x0003b14c
0x0003b127
0x0003b12b
0x00000000
0x00000000
0x00000000
0x0003b12b
0x0003b089
0x0003b08b
0x0003b0a2
0x0003b0aa
0x0003b0ac
0x0003b0c3
0x0003b0cb
0x0003b0cd
0x0003b0e4
0x0003b0ec
0x0003b0ee
0x0003b0fb
0x0003b0fb
0x00000000
0x0003b0ee
0x0003b0da
0x0003b0de
0x00000000
0x00000000
0x00000000
0x0003b0de
0x0003b0b9
0x0003b0bd
0x00000000
0x00000000
0x00000000
0x0003b0bd
0x0003b098
0x0003b09c
0x00000000
0x00000000
0x00000000
0x0003b09c
0x0003affa
0x0003affc
0x0003b013
0x0003b01b
0x0003b01d
0x0003b034
0x0003b03c
0x0003b03e
0x0003b055
0x0003b05d
0x0003b05f
0x0003b06c
0x0003b06c
0x00000000
0x0003b05f
0x0003b04b
0x0003b04f
0x00000000
0x00000000
0x00000000
0x0003b04f
0x0003b02a
0x0003b02e
0x00000000
0x00000000
0x00000000
0x0003b02e
0x0003b009
0x0003b00d
0x00000000
0x00000000
0x00000000
0x0003b00d
0x0003af6a
0x0003af6c
0x0003af83
0x0003af8b
0x0003af8d
0x0003afa4
0x0003afac
0x0003afae
0x0003afc5
0x0003afcd
0x0003afcf
0x0003afdc
0x0003afdc
0x00000000
0x0003afcf
0x0003afbb
0x0003afbf
0x00000000
0x00000000
0x00000000
0x0003afbf
0x0003af9a
0x0003af9e
0x00000000
0x00000000
0x00000000
0x0003af9e
0x0003af79
0x0003af7d
0x00000000
0x00000000
0x00000000
0x0003af7d
0x0003aedb
0x0003aedd
0x0003aef4
0x0003aefc
0x0003aefe
0x0003af15
0x0003af1d
0x0003af1f
0x0003af36
0x0003af3e
0x0003af40
0x0003af4d
0x0003af4d
0x00000000
0x0003af40
0x0003af2c
0x0003af30
0x00000000
0x00000000
0x00000000
0x0003af30
0x0003af0b
0x0003af0f
0x00000000
0x00000000
0x00000000
0x0003af0f
0x0003aeea
0x0003aeee
0x00000000
0x00000000
0x00000000
0x0003aeee
0x0003ae4c
0x0003ae4e
0x0003ae65
0x0003ae6d
0x0003ae6f
0x0003ae86
0x0003ae8e
0x0003ae90
0x0003aea7
0x0003aeaf
0x0003aeb1
0x0003aebe
0x0003aebe
0x00000000
0x0003aeb1
0x0003ae9d
0x0003aea1
0x00000000
0x00000000
0x00000000
0x0003aea1
0x0003ae7c
0x0003ae80
0x00000000
0x00000000
0x00000000
0x0003ae80
0x0003ae5b
0x0003ae5f
0x00000000
0x00000000
0x00000000
0x0003adb5
0x0003adb5
0x0003adb9
0x0003adbd
0x0003adbf
0x0003add6
0x0003add6
0x0003adda
0x0003adde
0x0003ade0
0x0003adf7
0x0003adf7
0x0003adfb
0x0003adff
0x0003ae01
0x0003ae18
0x0003ae18
0x0003ae1c
0x0003ae20
0x0003ae22
0x0003ae28
0x0003ae2b
0x0003ae2f
0x0003ae2f
0x00000000
0x0003ae22
0x0003ae07
0x0003ae0a
0x0003ae0e
0x0003ae12
0x00000000
0x00000000
0x00000000
0x0003ae12
0x0003ade6
0x0003ade9
0x0003aded
0x0003adf1
0x00000000
0x00000000
0x00000000
0x0003adf1
0x0003adc5
0x0003adc8
0x0003adcc
0x0003add0
0x00000000
0x00000000
0x00000000
0x0003add0
0x0003a1a6
0x0003a1a6
0x00000000

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0666e2c6603716d584354562bcf590181c980fb8da26174d951f804026303a75
Instruction ID: 665cd90181fee077cd5a0bbc53a6f10ff3ee537b6edc3a5dab2c490ce58588a6
Opcode Fuzzy Hash: 0666e2c6603716d584354562bcf590181c980fb8da26174d951f804026303a75
Instruction Fuzzy Hash: F5D19F73E1B9B30A87B7812D456853FFEA66FD2640B1FC3E09CE43F289962A5D0095D0

Uniqueness

Uniqueness Score: -1.00%

Function 0003A98D Relevance: .4, Instructions: 378
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E0003A98D(void* __eax, void* __ecx) {
				void* _t191;
				signed int _t192;
				void* _t195;
				signed char _t201;
				signed char _t202;
				signed char _t203;
				signed char _t204;
				signed char _t206;
				signed int _t211;
				signed int _t309;
				void* _t312;
				void* _t314;
				void* _t316;
				void* _t318;
				void* _t321;
				void* _t323;
				void* _t325;
				void* _t328;
				void* _t330;
				void* _t332;
				void* _t335;
				void* _t337;
				void* _t339;
				void* _t342;
				void* _t344;
				void* _t346;
				void* _t349;
				void* _t351;
				void* _t353;

				_t195 = __ecx;
				_t191 = __eax;
				if( *((intOrPtr*)(__eax - 0x1e)) ==  *((intOrPtr*)(__ecx - 0x1e))) {
					_t309 = 0;
					L15:
					if(_t309 != 0) {
						goto L1;
					}
					_t201 =  *(_t191 - 0x1a);
					if(_t201 ==  *(_t195 - 0x1a)) {
						_t309 = 0;
						L26:
						if(_t309 != 0) {
							goto L1;
						}
						_t202 =  *(_t191 - 0x16);
						if(_t202 ==  *(_t195 - 0x16)) {
							_t309 = 0;
							L37:
							if(_t309 != 0) {
								goto L1;
							}
							_t203 =  *(_t191 - 0x12);
							if(_t203 ==  *(_t195 - 0x12)) {
								_t309 = 0;
								L48:
								if(_t309 != 0) {
									goto L1;
								}
								_t204 =  *(_t191 - 0xe);
								if(_t204 ==  *(_t195 - 0xe)) {
									_t309 = 0;
									L59:
									if(_t309 != 0) {
										goto L1;
									}
									if( *(_t191 - 0xa) ==  *(_t195 - 0xa)) {
										_t309 = 0;
										L70:
										if(_t309 != 0) {
											goto L1;
										}
										_t206 =  *(_t191 - 6);
										if(_t206 ==  *(_t195 - 6)) {
											_t309 = 0;
											L81:
											if(_t309 != 0) {
												goto L1;
											}
											if( *(_t191 - 2) ==  *(_t195 - 2)) {
												_t192 = 0;
												L3:
												return _t192;
											}
											_t312 = ( *(_t191 - 2) & 0x000000ff) - ( *(_t195 - 2) & 0x000000ff);
											if(_t312 == 0) {
												L4:
												_t192 = ( *(_t191 - 1) & 0x000000ff) - ( *(_t195 - 1) & 0x000000ff);
												if(_t192 != 0) {
													_t192 = (0 | _t192 > 0x00000000) + (0 | _t192 > 0x00000000) - 1;
												}
												goto L3;
											}
											_t211 = (0 | _t312 > 0x00000000) + (0 | _t312 > 0x00000000) - 1;
											if(_t211 != 0) {
												_t192 = _t211;
												goto L3;
											}
											goto L4;
										}
										_t314 = (_t206 & 0x000000ff) - ( *(_t195 - 6) & 0x000000ff);
										if(_t314 == 0) {
											L74:
											_t316 = ( *(_t191 - 5) & 0x000000ff) - ( *(_t195 - 5) & 0x000000ff);
											if(_t316 == 0) {
												L76:
												_t318 = ( *(_t191 - 4) & 0x000000ff) - ( *(_t195 - 4) & 0x000000ff);
												if(_t318 == 0) {
													L78:
													_t309 = ( *(_t191 - 3) & 0x000000ff) - ( *(_t195 - 3) & 0x000000ff);
													if(_t309 != 0) {
														_t309 = (0 | _t309 > 0x00000000) + (0 | _t309 > 0x00000000) - 1;
													}
													goto L81;
												}
												_t309 = (0 | _t318 > 0x00000000) + (0 | _t318 > 0x00000000) - 1;
												if(_t309 != 0) {
													goto L1;
												}
												goto L78;
											}
											_t309 = (0 | _t316 > 0x00000000) + (0 | _t316 > 0x00000000) - 1;
											if(_t309 != 0) {
												goto L1;
											}
											goto L76;
										}
										_t309 = (0 | _t314 > 0x00000000) + (0 | _t314 > 0x00000000) - 1;
										if(_t309 != 0) {
											goto L1;
										}
										goto L74;
									}
									_t321 = ( *(_t191 - 0xa) & 0x000000ff) - ( *(_t195 - 0xa) & 0x000000ff);
									if(_t321 == 0) {
										L63:
										_t323 = ( *(_t191 - 9) & 0x000000ff) - ( *(_t195 - 9) & 0x000000ff);
										if(_t323 == 0) {
											L65:
											_t325 = ( *(_t191 - 8) & 0x000000ff) - ( *(_t195 - 8) & 0x000000ff);
											if(_t325 == 0) {
												L67:
												_t309 = ( *(_t191 - 7) & 0x000000ff) - ( *(_t195 - 7) & 0x000000ff);
												if(_t309 != 0) {
													_t309 = (0 | _t309 > 0x00000000) + (0 | _t309 > 0x00000000) - 1;
												}
												goto L70;
											}
											_t309 = (0 | _t325 > 0x00000000) + (0 | _t325 > 0x00000000) - 1;
											if(_t309 != 0) {
												goto L1;
											}
											goto L67;
										}
										_t309 = (0 | _t323 > 0x00000000) + (0 | _t323 > 0x00000000) - 1;
										if(_t309 != 0) {
											goto L1;
										}
										goto L65;
									}
									_t309 = (0 | _t321 > 0x00000000) + (0 | _t321 > 0x00000000) - 1;
									if(_t309 != 0) {
										goto L1;
									}
									goto L63;
								}
								_t328 = (_t204 & 0x000000ff) - ( *(_t195 - 0xe) & 0x000000ff);
								if(_t328 == 0) {
									L52:
									_t330 = ( *(_t191 - 0xd) & 0x000000ff) - ( *(_t195 - 0xd) & 0x000000ff);
									if(_t330 == 0) {
										L54:
										_t332 = ( *(_t191 - 0xc) & 0x000000ff) - ( *(_t195 - 0xc) & 0x000000ff);
										if(_t332 == 0) {
											L56:
											_t309 = ( *(_t191 - 0xb) & 0x000000ff) - ( *(_t195 - 0xb) & 0x000000ff);
											if(_t309 != 0) {
												_t309 = (0 | _t309 > 0x00000000) + (0 | _t309 > 0x00000000) - 1;
											}
											goto L59;
										}
										_t309 = (0 | _t332 > 0x00000000) + (0 | _t332 > 0x00000000) - 1;
										if(_t309 != 0) {
											goto L1;
										}
										goto L56;
									}
									_t309 = (0 | _t330 > 0x00000000) + (0 | _t330 > 0x00000000) - 1;
									if(_t309 != 0) {
										goto L1;
									}
									goto L54;
								}
								_t309 = (0 | _t328 > 0x00000000) + (0 | _t328 > 0x00000000) - 1;
								if(_t309 != 0) {
									goto L1;
								}
								goto L52;
							}
							_t335 = (_t203 & 0x000000ff) - ( *(_t195 - 0x12) & 0x000000ff);
							if(_t335 == 0) {
								L41:
								_t337 = ( *(_t191 - 0x11) & 0x000000ff) - ( *(_t195 - 0x11) & 0x000000ff);
								if(_t337 == 0) {
									L43:
									_t339 = ( *(_t191 - 0x10) & 0x000000ff) - ( *(_t195 - 0x10) & 0x000000ff);
									if(_t339 == 0) {
										L45:
										_t309 = ( *(_t191 - 0xf) & 0x000000ff) - ( *(_t195 - 0xf) & 0x000000ff);
										if(_t309 != 0) {
											_t309 = (0 | _t309 > 0x00000000) + (0 | _t309 > 0x00000000) - 1;
										}
										goto L48;
									}
									_t309 = (0 | _t339 > 0x00000000) + (0 | _t339 > 0x00000000) - 1;
									if(_t309 != 0) {
										goto L1;
									}
									goto L45;
								}
								_t309 = (0 | _t337 > 0x00000000) + (0 | _t337 > 0x00000000) - 1;
								if(_t309 != 0) {
									goto L1;
								}
								goto L43;
							}
							_t309 = (0 | _t335 > 0x00000000) + (0 | _t335 > 0x00000000) - 1;
							if(_t309 != 0) {
								goto L1;
							}
							goto L41;
						}
						_t342 = (_t202 & 0x000000ff) - ( *(_t195 - 0x16) & 0x000000ff);
						if(_t342 == 0) {
							L30:
							_t344 = ( *(_t191 - 0x15) & 0x000000ff) - ( *(_t195 - 0x15) & 0x000000ff);
							if(_t344 == 0) {
								L32:
								_t346 = ( *(_t191 - 0x14) & 0x000000ff) - ( *(_t195 - 0x14) & 0x000000ff);
								if(_t346 == 0) {
									L34:
									_t309 = ( *(_t191 - 0x13) & 0x000000ff) - ( *(_t195 - 0x13) & 0x000000ff);
									if(_t309 != 0) {
										_t309 = (0 | _t309 > 0x00000000) + (0 | _t309 > 0x00000000) - 1;
									}
									goto L37;
								}
								_t309 = (0 | _t346 > 0x00000000) + (0 | _t346 > 0x00000000) - 1;
								if(_t309 != 0) {
									goto L1;
								}
								goto L34;
							}
							_t309 = (0 | _t344 > 0x00000000) + (0 | _t344 > 0x00000000) - 1;
							if(_t309 != 0) {
								goto L1;
							}
							goto L32;
						}
						_t309 = (0 | _t342 > 0x00000000) + (0 | _t342 > 0x00000000) - 1;
						if(_t309 != 0) {
							goto L1;
						}
						goto L30;
					}
					_t349 = (_t201 & 0x000000ff) - ( *(_t195 - 0x1a) & 0x000000ff);
					if(_t349 == 0) {
						L19:
						_t351 = ( *(_t191 - 0x19) & 0x000000ff) - ( *(_t195 - 0x19) & 0x000000ff);
						if(_t351 == 0) {
							L21:
							_t353 = ( *(_t191 - 0x18) & 0x000000ff) - ( *(_t195 - 0x18) & 0x000000ff);
							if(_t353 == 0) {
								L23:
								_t309 = ( *(_t191 - 0x17) & 0x000000ff) - ( *(_t195 - 0x17) & 0x000000ff);
								if(_t309 != 0) {
									_t309 = (0 | _t309 > 0x00000000) + (0 | _t309 > 0x00000000) - 1;
								}
								goto L26;
							}
							_t309 = (0 | _t353 > 0x00000000) + (0 | _t353 > 0x00000000) - 1;
							if(_t309 != 0) {
								goto L1;
							}
							goto L23;
						}
						_t309 = (0 | _t351 > 0x00000000) + (0 | _t351 > 0x00000000) - 1;
						if(_t309 != 0) {
							goto L1;
						}
						goto L21;
					}
					_t309 = (0 | _t349 > 0x00000000) + (0 | _t349 > 0x00000000) - 1;
					if(_t309 != 0) {
						goto L1;
					}
					goto L19;
				} else {
					__esi = __dl & 0x000000ff;
					__edx =  *(__ecx - 0x1e) & 0x000000ff;
					__esi = (__dl & 0x000000ff) - ( *(__ecx - 0x1e) & 0x000000ff);
					if(__esi == 0) {
						L8:
						__esi =  *(__eax - 0x1d) & 0x000000ff;
						__edx =  *(__ecx - 0x1d) & 0x000000ff;
						__esi = ( *(__eax - 0x1d) & 0x000000ff) - ( *(__ecx - 0x1d) & 0x000000ff);
						if(__esi == 0) {
							L10:
							__esi =  *(__eax - 0x1c) & 0x000000ff;
							__edx =  *(__ecx - 0x1c) & 0x000000ff;
							__esi = ( *(__eax - 0x1c) & 0x000000ff) - ( *(__ecx - 0x1c) & 0x000000ff);
							if(__esi == 0) {
								L12:
								__esi =  *(__eax - 0x1b) & 0x000000ff;
								__edx =  *(__ecx - 0x1b) & 0x000000ff;
								__esi = ( *(__eax - 0x1b) & 0x000000ff) - ( *(__ecx - 0x1b) & 0x000000ff);
								if(__esi != 0) {
									0 = 0 | __esi > 0x00000000;
									__edx = (__esi > 0) + (__esi > 0) - 1;
									__esi = (__esi > 0) + (__esi > 0) - 1;
								}
								goto L15;
							}
							0 = 0 | __esi > 0x00000000;
							__edx = (__esi > 0) + (__esi > 0) - 1;
							__esi = __edx;
							if(__edx != 0) {
								goto L1;
							}
							goto L12;
						}
						0 = 0 | __esi > 0x00000000;
						__edx = (__esi > 0) + (__esi > 0) - 1;
						__esi = __edx;
						if(__edx != 0) {
							goto L1;
						}
						goto L10;
					}
					0 = 0 | __esi > 0x00000000;
					__edx = (__esi > 0) + (__esi > 0) - 1;
					__esi = __edx;
					if(__edx != 0) {
						goto L1;
					}
					goto L8;
				}
				L1:
				_t192 = _t309;
				goto L3;
			}

0x0003a98d
0x0003a98d
0x0003a993
0x0003aa12
0x0003aa14
0x0003aa16
0x00000000
0x00000000
0x0003aa1c
0x0003aa22
0x0003aaa1
0x0003aaa3
0x0003aaa5
0x00000000
0x00000000
0x0003aaab
0x0003aab1
0x0003ab30
0x0003ab32
0x0003ab34
0x00000000
0x00000000
0x0003ab3a
0x0003ab40
0x0003abbf
0x0003abc1
0x0003abc3
0x00000000
0x00000000
0x0003abc9
0x0003abcf
0x0003ac4e
0x0003ac50
0x0003ac52
0x00000000
0x00000000
0x0003ac5e
0x0003acde
0x0003ace0
0x0003ace2
0x00000000
0x00000000
0x0003ace8
0x0003acee
0x0003ad6d
0x0003ad6f
0x0003ad71
0x00000000
0x00000000
0x0003ad7f
0x0003a579
0x0003a57b
0x0003b2d7
0x0003b2d7
0x0003ad8d
0x0003ad8f
0x0003a96b
0x0003a973
0x0003a975
0x0003a986
0x0003a986
0x00000000
0x0003a975
0x0003ad9c
0x0003ada2
0x0003b1bb
0x00000000
0x0003b1bb
0x00000000
0x0003ada8
0x0003acf7
0x0003acf9
0x0003ad10
0x0003ad18
0x0003ad1a
0x0003ad31
0x0003ad39
0x0003ad3b
0x0003ad52
0x0003ad5a
0x0003ad5c
0x0003ad69
0x0003ad69
0x00000000
0x0003ad5c
0x0003ad48
0x0003ad4c
0x00000000
0x00000000
0x00000000
0x0003ad4c
0x0003ad27
0x0003ad2b
0x00000000
0x00000000
0x00000000
0x0003ad2b
0x0003ad06
0x0003ad0a
0x00000000
0x00000000
0x00000000
0x0003ad0a
0x0003ac68
0x0003ac6a
0x0003ac81
0x0003ac89
0x0003ac8b
0x0003aca2
0x0003acaa
0x0003acac
0x0003acc3
0x0003accb
0x0003accd
0x0003acda
0x0003acda
0x00000000
0x0003accd
0x0003acb9
0x0003acbd
0x00000000
0x00000000
0x00000000
0x0003acbd
0x0003ac98
0x0003ac9c
0x00000000
0x00000000
0x00000000
0x0003ac9c
0x0003ac77
0x0003ac7b
0x00000000
0x00000000
0x00000000
0x0003ac7b
0x0003abd8
0x0003abda
0x0003abf1
0x0003abf9
0x0003abfb
0x0003ac12
0x0003ac1a
0x0003ac1c
0x0003ac33
0x0003ac3b
0x0003ac3d
0x0003ac4a
0x0003ac4a
0x00000000
0x0003ac3d
0x0003ac29
0x0003ac2d
0x00000000
0x00000000
0x00000000
0x0003ac2d
0x0003ac08
0x0003ac0c
0x00000000
0x00000000
0x00000000
0x0003ac0c
0x0003abe7
0x0003abeb
0x00000000
0x00000000
0x00000000
0x0003abeb
0x0003ab49
0x0003ab4b
0x0003ab62
0x0003ab6a
0x0003ab6c
0x0003ab83
0x0003ab8b
0x0003ab8d
0x0003aba4
0x0003abac
0x0003abae
0x0003abbb
0x0003abbb
0x00000000
0x0003abae
0x0003ab9a
0x0003ab9e
0x00000000
0x00000000
0x00000000
0x0003ab9e
0x0003ab79
0x0003ab7d
0x00000000
0x00000000
0x00000000
0x0003ab7d
0x0003ab58
0x0003ab5c
0x00000000
0x00000000
0x00000000
0x0003ab5c
0x0003aaba
0x0003aabc
0x0003aad3
0x0003aadb
0x0003aadd
0x0003aaf4
0x0003aafc
0x0003aafe
0x0003ab15
0x0003ab1d
0x0003ab1f
0x0003ab2c
0x0003ab2c
0x00000000
0x0003ab1f
0x0003ab0b
0x0003ab0f
0x00000000
0x00000000
0x00000000
0x0003ab0f
0x0003aaea
0x0003aaee
0x00000000
0x00000000
0x00000000
0x0003aaee
0x0003aac9
0x0003aacd
0x00000000
0x00000000
0x00000000
0x0003aacd
0x0003aa2b
0x0003aa2d
0x0003aa44
0x0003aa4c
0x0003aa4e
0x0003aa65
0x0003aa6d
0x0003aa6f
0x0003aa86
0x0003aa8e
0x0003aa90
0x0003aa9d
0x0003aa9d
0x00000000
0x0003aa90
0x0003aa7c
0x0003aa80
0x00000000
0x00000000
0x00000000
0x0003aa80
0x0003aa5b
0x0003aa5f
0x00000000
0x00000000
0x00000000
0x0003aa5f
0x0003aa3a
0x0003aa3e
0x00000000
0x00000000
0x00000000
0x0003a995
0x0003a995
0x0003a998
0x0003a99c
0x0003a99e
0x0003a9b5
0x0003a9b5
0x0003a9b9
0x0003a9bd
0x0003a9bf
0x0003a9d6
0x0003a9d6
0x0003a9da
0x0003a9de
0x0003a9e0
0x0003a9f7
0x0003a9f7
0x0003a9fb
0x0003a9ff
0x0003aa01
0x0003aa07
0x0003aa0a
0x0003aa0e
0x0003aa0e
0x00000000
0x0003aa01
0x0003a9e6
0x0003a9e9
0x0003a9ed
0x0003a9f1
0x00000000
0x00000000
0x00000000
0x0003a9f1
0x0003a9c5
0x0003a9c8
0x0003a9cc
0x0003a9d0
0x00000000
0x00000000
0x00000000
0x0003a9d0
0x0003a9a4
0x0003a9a7
0x0003a9ab
0x0003a9af
0x00000000
0x00000000
0x00000000
0x0003a9af
0x0003a1a6
0x0003a1a6
0x00000000

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c40bcf876c129f9393d32ca3cb7471e4bcf7a4352579634fb414d11934eaa4f2
Instruction ID: d370ac5004abc56ccb627687ab4d3139172b9b8ed350efb50179b9745e4165ea
Opcode Fuzzy Hash: c40bcf876c129f9393d32ca3cb7471e4bcf7a4352579634fb414d11934eaa4f2
Instruction Fuzzy Hash: 5BD19073E2B9B30B87B7812D455452EFAA66FD2741B1FC3E19CE03F289D22A5C0096D1

Uniqueness

Uniqueness Score: -1.00%

Function 0003A581 Relevance: .4, Instructions: 361
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E0003A581(void* __eax, void* __ecx) {
				void* _t183;
				signed int _t184;
				void* _t187;
				signed char _t193;
				signed char _t194;
				signed char _t195;
				signed char _t196;
				signed char _t198;
				signed int _t296;
				void* _t299;
				void* _t301;
				void* _t303;
				void* _t306;
				void* _t308;
				void* _t310;
				void* _t313;
				void* _t315;
				void* _t317;
				void* _t320;
				void* _t322;
				void* _t324;
				void* _t327;
				void* _t329;
				void* _t331;
				void* _t334;
				void* _t336;
				void* _t338;

				_t187 = __ecx;
				_t183 = __eax;
				if( *((intOrPtr*)(__eax - 0x1d)) ==  *((intOrPtr*)(__ecx - 0x1d))) {
					_t296 = 0;
					L12:
					if(_t296 != 0) {
						goto L1;
					}
					_t193 =  *(_t183 - 0x19);
					if(_t193 ==  *(_t187 - 0x19)) {
						_t296 = 0;
						L23:
						if(_t296 != 0) {
							goto L1;
						}
						_t194 =  *(_t183 - 0x15);
						if(_t194 ==  *(_t187 - 0x15)) {
							_t296 = 0;
							L34:
							if(_t296 != 0) {
								goto L1;
							}
							_t195 =  *(_t183 - 0x11);
							if(_t195 ==  *(_t187 - 0x11)) {
								_t296 = 0;
								L45:
								if(_t296 != 0) {
									goto L1;
								}
								_t196 =  *(_t183 - 0xd);
								if(_t196 ==  *(_t187 - 0xd)) {
									_t296 = 0;
									L56:
									if(_t296 != 0) {
										goto L1;
									}
									if( *(_t183 - 9) ==  *(_t187 - 9)) {
										_t296 = 0;
										L67:
										if(_t296 != 0) {
											goto L1;
										}
										_t198 =  *(_t183 - 5);
										if(_t198 ==  *(_t187 - 5)) {
											_t296 = 0;
											L78:
											if(_t296 != 0) {
												goto L1;
											}
											_t184 = ( *(_t183 - 1) & 0x000000ff) - ( *(_t187 - 1) & 0x000000ff);
											if(_t184 != 0) {
												_t184 = (0 | _t184 > 0x00000000) + (0 | _t184 > 0x00000000) - 1;
											}
											L2:
											return _t184;
										}
										_t299 = (_t198 & 0x000000ff) - ( *(_t187 - 5) & 0x000000ff);
										if(_t299 == 0) {
											L71:
											_t301 = ( *(_t183 - 4) & 0x000000ff) - ( *(_t187 - 4) & 0x000000ff);
											if(_t301 == 0) {
												L73:
												_t303 = ( *(_t183 - 3) & 0x000000ff) - ( *(_t187 - 3) & 0x000000ff);
												if(_t303 == 0) {
													L75:
													_t296 = ( *(_t183 - 2) & 0x000000ff) - ( *(_t187 - 2) & 0x000000ff);
													if(_t296 != 0) {
														_t296 = (0 | _t296 > 0x00000000) + (0 | _t296 > 0x00000000) - 1;
													}
													goto L78;
												}
												_t296 = (0 | _t303 > 0x00000000) + (0 | _t303 > 0x00000000) - 1;
												if(_t296 != 0) {
													goto L1;
												}
												goto L75;
											}
											_t296 = (0 | _t301 > 0x00000000) + (0 | _t301 > 0x00000000) - 1;
											if(_t296 != 0) {
												goto L1;
											}
											goto L73;
										}
										_t296 = (0 | _t299 > 0x00000000) + (0 | _t299 > 0x00000000) - 1;
										if(_t296 != 0) {
											goto L1;
										}
										goto L71;
									}
									_t306 = ( *(_t183 - 9) & 0x000000ff) - ( *(_t187 - 9) & 0x000000ff);
									if(_t306 == 0) {
										L60:
										_t308 = ( *(_t183 - 8) & 0x000000ff) - ( *(_t187 - 8) & 0x000000ff);
										if(_t308 == 0) {
											L62:
											_t310 = ( *(_t183 - 7) & 0x000000ff) - ( *(_t187 - 7) & 0x000000ff);
											if(_t310 == 0) {
												L64:
												_t296 = ( *(_t183 - 6) & 0x000000ff) - ( *(_t187 - 6) & 0x000000ff);
												if(_t296 != 0) {
													_t296 = (0 | _t296 > 0x00000000) + (0 | _t296 > 0x00000000) - 1;
												}
												goto L67;
											}
											_t296 = (0 | _t310 > 0x00000000) + (0 | _t310 > 0x00000000) - 1;
											if(_t296 != 0) {
												goto L1;
											}
											goto L64;
										}
										_t296 = (0 | _t308 > 0x00000000) + (0 | _t308 > 0x00000000) - 1;
										if(_t296 != 0) {
											goto L1;
										}
										goto L62;
									}
									_t296 = (0 | _t306 > 0x00000000) + (0 | _t306 > 0x00000000) - 1;
									if(_t296 != 0) {
										goto L1;
									}
									goto L60;
								}
								_t313 = (_t196 & 0x000000ff) - ( *(_t187 - 0xd) & 0x000000ff);
								if(_t313 == 0) {
									L49:
									_t315 = ( *(_t183 - 0xc) & 0x000000ff) - ( *(_t187 - 0xc) & 0x000000ff);
									if(_t315 == 0) {
										L51:
										_t317 = ( *(_t183 - 0xb) & 0x000000ff) - ( *(_t187 - 0xb) & 0x000000ff);
										if(_t317 == 0) {
											L53:
											_t296 = ( *(_t183 - 0xa) & 0x000000ff) - ( *(_t187 - 0xa) & 0x000000ff);
											if(_t296 != 0) {
												_t296 = (0 | _t296 > 0x00000000) + (0 | _t296 > 0x00000000) - 1;
											}
											goto L56;
										}
										_t296 = (0 | _t317 > 0x00000000) + (0 | _t317 > 0x00000000) - 1;
										if(_t296 != 0) {
											goto L1;
										}
										goto L53;
									}
									_t296 = (0 | _t315 > 0x00000000) + (0 | _t315 > 0x00000000) - 1;
									if(_t296 != 0) {
										goto L1;
									}
									goto L51;
								}
								_t296 = (0 | _t313 > 0x00000000) + (0 | _t313 > 0x00000000) - 1;
								if(_t296 != 0) {
									goto L1;
								}
								goto L49;
							}
							_t320 = (_t195 & 0x000000ff) - ( *(_t187 - 0x11) & 0x000000ff);
							if(_t320 == 0) {
								L38:
								_t322 = ( *(_t183 - 0x10) & 0x000000ff) - ( *(_t187 - 0x10) & 0x000000ff);
								if(_t322 == 0) {
									L40:
									_t324 = ( *(_t183 - 0xf) & 0x000000ff) - ( *(_t187 - 0xf) & 0x000000ff);
									if(_t324 == 0) {
										L42:
										_t296 = ( *(_t183 - 0xe) & 0x000000ff) - ( *(_t187 - 0xe) & 0x000000ff);
										if(_t296 != 0) {
											_t296 = (0 | _t296 > 0x00000000) + (0 | _t296 > 0x00000000) - 1;
										}
										goto L45;
									}
									_t296 = (0 | _t324 > 0x00000000) + (0 | _t324 > 0x00000000) - 1;
									if(_t296 != 0) {
										goto L1;
									}
									goto L42;
								}
								_t296 = (0 | _t322 > 0x00000000) + (0 | _t322 > 0x00000000) - 1;
								if(_t296 != 0) {
									goto L1;
								}
								goto L40;
							}
							_t296 = (0 | _t320 > 0x00000000) + (0 | _t320 > 0x00000000) - 1;
							if(_t296 != 0) {
								goto L1;
							}
							goto L38;
						}
						_t327 = (_t194 & 0x000000ff) - ( *(_t187 - 0x15) & 0x000000ff);
						if(_t327 == 0) {
							L27:
							_t329 = ( *(_t183 - 0x14) & 0x000000ff) - ( *(_t187 - 0x14) & 0x000000ff);
							if(_t329 == 0) {
								L29:
								_t331 = ( *(_t183 - 0x13) & 0x000000ff) - ( *(_t187 - 0x13) & 0x000000ff);
								if(_t331 == 0) {
									L31:
									_t296 = ( *(_t183 - 0x12) & 0x000000ff) - ( *(_t187 - 0x12) & 0x000000ff);
									if(_t296 != 0) {
										_t296 = (0 | _t296 > 0x00000000) + (0 | _t296 > 0x00000000) - 1;
									}
									goto L34;
								}
								_t296 = (0 | _t331 > 0x00000000) + (0 | _t331 > 0x00000000) - 1;
								if(_t296 != 0) {
									goto L1;
								}
								goto L31;
							}
							_t296 = (0 | _t329 > 0x00000000) + (0 | _t329 > 0x00000000) - 1;
							if(_t296 != 0) {
								goto L1;
							}
							goto L29;
						}
						_t296 = (0 | _t327 > 0x00000000) + (0 | _t327 > 0x00000000) - 1;
						if(_t296 != 0) {
							goto L1;
						}
						goto L27;
					}
					_t334 = (_t193 & 0x000000ff) - ( *(_t187 - 0x19) & 0x000000ff);
					if(_t334 == 0) {
						L16:
						_t336 = ( *(_t183 - 0x18) & 0x000000ff) - ( *(_t187 - 0x18) & 0x000000ff);
						if(_t336 == 0) {
							L18:
							_t338 = ( *(_t183 - 0x17) & 0x000000ff) - ( *(_t187 - 0x17) & 0x000000ff);
							if(_t338 == 0) {
								L20:
								_t296 = ( *(_t183 - 0x16) & 0x000000ff) - ( *(_t187 - 0x16) & 0x000000ff);
								if(_t296 != 0) {
									_t296 = (0 | _t296 > 0x00000000) + (0 | _t296 > 0x00000000) - 1;
								}
								goto L23;
							}
							_t296 = (0 | _t338 > 0x00000000) + (0 | _t338 > 0x00000000) - 1;
							if(_t296 != 0) {
								goto L1;
							}
							goto L20;
						}
						_t296 = (0 | _t336 > 0x00000000) + (0 | _t336 > 0x00000000) - 1;
						if(_t296 != 0) {
							goto L1;
						}
						goto L18;
					}
					_t296 = (0 | _t334 > 0x00000000) + (0 | _t334 > 0x00000000) - 1;
					if(_t296 != 0) {
						goto L1;
					}
					goto L16;
				} else {
					__esi = __dl & 0x000000ff;
					__edx =  *(__ecx - 0x1d) & 0x000000ff;
					__esi = (__dl & 0x000000ff) - ( *(__ecx - 0x1d) & 0x000000ff);
					if(__esi == 0) {
						L5:
						__esi =  *(__eax - 0x1c) & 0x000000ff;
						__edx =  *(__ecx - 0x1c) & 0x000000ff;
						__esi = ( *(__eax - 0x1c) & 0x000000ff) - ( *(__ecx - 0x1c) & 0x000000ff);
						if(__esi == 0) {
							L7:
							__esi =  *(__eax - 0x1b) & 0x000000ff;
							__edx =  *(__ecx - 0x1b) & 0x000000ff;
							__esi = ( *(__eax - 0x1b) & 0x000000ff) - ( *(__ecx - 0x1b) & 0x000000ff);
							if(__esi == 0) {
								L9:
								__esi =  *(__eax - 0x1a) & 0x000000ff;
								__edx =  *(__ecx - 0x1a) & 0x000000ff;
								__esi = ( *(__eax - 0x1a) & 0x000000ff) - ( *(__ecx - 0x1a) & 0x000000ff);
								if(__esi != 0) {
									0 = 0 | __esi > 0x00000000;
									__edx = (__esi > 0) + (__esi > 0) - 1;
									__esi = (__esi > 0) + (__esi > 0) - 1;
								}
								goto L12;
							}
							0 = 0 | __esi > 0x00000000;
							__edx = (__esi > 0) + (__esi > 0) - 1;
							__esi = __edx;
							if(__edx != 0) {
								goto L1;
							}
							goto L9;
						}
						0 = 0 | __esi > 0x00000000;
						__edx = (__esi > 0) + (__esi > 0) - 1;
						__esi = __edx;
						if(__edx != 0) {
							goto L1;
						}
						goto L7;
					}
					0 = 0 | __esi > 0x00000000;
					__edx = (__esi > 0) + (__esi > 0) - 1;
					__esi = __edx;
					if(__edx != 0) {
						goto L1;
					}
					goto L5;
				}
				L1:
				_t184 = _t296;
				goto L2;
			}

0x0003a581
0x0003a581
0x0003a587
0x0003a606
0x0003a608
0x0003a60a
0x00000000
0x00000000
0x0003a610
0x0003a616
0x0003a695
0x0003a697
0x0003a699
0x00000000
0x00000000
0x0003a69f
0x0003a6a5
0x0003a724
0x0003a726
0x0003a728
0x00000000
0x00000000
0x0003a72e
0x0003a734
0x0003a7b3
0x0003a7b5
0x0003a7b7
0x00000000
0x00000000
0x0003a7bd
0x0003a7c3
0x0003a842
0x0003a844
0x0003a846
0x00000000
0x00000000
0x0003a852
0x0003a8d2
0x0003a8d4
0x0003a8d6
0x00000000
0x00000000
0x0003a8dc
0x0003a8e2
0x0003a961
0x0003a963
0x0003a965
0x00000000
0x00000000
0x0003a973
0x0003a975
0x0003a986
0x0003a986
0x0003a57b
0x0003b2d7
0x0003b2d7
0x0003a8eb
0x0003a8ed
0x0003a904
0x0003a90c
0x0003a90e
0x0003a925
0x0003a92d
0x0003a92f
0x0003a946
0x0003a94e
0x0003a950
0x0003a95d
0x0003a95d
0x00000000
0x0003a950
0x0003a93c
0x0003a940
0x00000000
0x00000000
0x00000000
0x0003a940
0x0003a91b
0x0003a91f
0x00000000
0x00000000
0x00000000
0x0003a91f
0x0003a8fa
0x0003a8fe
0x00000000
0x00000000
0x00000000
0x0003a8fe
0x0003a85c
0x0003a85e
0x0003a875
0x0003a87d
0x0003a87f
0x0003a896
0x0003a89e
0x0003a8a0
0x0003a8b7
0x0003a8bf
0x0003a8c1
0x0003a8ce
0x0003a8ce
0x00000000
0x0003a8c1
0x0003a8ad
0x0003a8b1
0x00000000
0x00000000
0x00000000
0x0003a8b1
0x0003a88c
0x0003a890
0x00000000
0x00000000
0x00000000
0x0003a890
0x0003a86b
0x0003a86f
0x00000000
0x00000000
0x00000000
0x0003a86f
0x0003a7cc
0x0003a7ce
0x0003a7e5
0x0003a7ed
0x0003a7ef
0x0003a806
0x0003a80e
0x0003a810
0x0003a827
0x0003a82f
0x0003a831
0x0003a83e
0x0003a83e
0x00000000
0x0003a831
0x0003a81d
0x0003a821
0x00000000
0x00000000
0x00000000
0x0003a821
0x0003a7fc
0x0003a800
0x00000000
0x00000000
0x00000000
0x0003a800
0x0003a7db
0x0003a7df
0x00000000
0x00000000
0x00000000
0x0003a7df
0x0003a73d
0x0003a73f
0x0003a756
0x0003a75e
0x0003a760
0x0003a777
0x0003a77f
0x0003a781
0x0003a798
0x0003a7a0
0x0003a7a2
0x0003a7af
0x0003a7af
0x00000000
0x0003a7a2
0x0003a78e
0x0003a792
0x00000000
0x00000000
0x00000000
0x0003a792
0x0003a76d
0x0003a771
0x00000000
0x00000000
0x00000000
0x0003a771
0x0003a74c
0x0003a750
0x00000000
0x00000000
0x00000000
0x0003a750
0x0003a6ae
0x0003a6b0
0x0003a6c7
0x0003a6cf
0x0003a6d1
0x0003a6e8
0x0003a6f0
0x0003a6f2
0x0003a709
0x0003a711
0x0003a713
0x0003a720
0x0003a720
0x00000000
0x0003a713
0x0003a6ff
0x0003a703
0x00000000
0x00000000
0x00000000
0x0003a703
0x0003a6de
0x0003a6e2
0x00000000
0x00000000
0x00000000
0x0003a6e2
0x0003a6bd
0x0003a6c1
0x00000000
0x00000000
0x00000000
0x0003a6c1
0x0003a61f
0x0003a621
0x0003a638
0x0003a640
0x0003a642
0x0003a659
0x0003a661
0x0003a663
0x0003a67a
0x0003a682
0x0003a684
0x0003a691
0x0003a691
0x00000000
0x0003a684
0x0003a670
0x0003a674
0x00000000
0x00000000
0x00000000
0x0003a674
0x0003a64f
0x0003a653
0x00000000
0x00000000
0x00000000
0x0003a653
0x0003a62e
0x0003a632
0x00000000
0x00000000
0x00000000
0x0003a589
0x0003a589
0x0003a58c
0x0003a590
0x0003a592
0x0003a5a9
0x0003a5a9
0x0003a5ad
0x0003a5b1
0x0003a5b3
0x0003a5ca
0x0003a5ca
0x0003a5ce
0x0003a5d2
0x0003a5d4
0x0003a5eb
0x0003a5eb
0x0003a5ef
0x0003a5f3
0x0003a5f5
0x0003a5fb
0x0003a5fe
0x0003a602
0x0003a602
0x00000000
0x0003a5f5
0x0003a5da
0x0003a5dd
0x0003a5e1
0x0003a5e5
0x00000000
0x00000000
0x00000000
0x0003a5e5
0x0003a5b9
0x0003a5bc
0x0003a5c0
0x0003a5c4
0x00000000
0x00000000
0x00000000
0x0003a5c4
0x0003a598
0x0003a59b
0x0003a59f
0x0003a5a3
0x00000000
0x00000000
0x00000000
0x0003a5a3
0x0003a1a6
0x0003a1a6
0x00000000

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8709e21481f65d4d57cc4b3952fb3adbcebd3cc8b64ff3d20fdf858c0bfd14a0
Instruction ID: d280bf5b22a3ad619f312a211a6f2e318a28c0a5a312de37c1ed4ae2ffc5a270
Opcode Fuzzy Hash: 8709e21481f65d4d57cc4b3952fb3adbcebd3cc8b64ff3d20fdf858c0bfd14a0
Instruction Fuzzy Hash: C2C18073E2F9B30B87B7812D455863AEAA66FD275071FC3E18CE43F289962A5C0085D1

Uniqueness

Uniqueness Score: -1.00%

Function 0003A1AD Relevance: .4, Instructions: 351
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E0003A1AD(void* __eax, void* __ecx) {
				void* _t177;
				signed int _t178;
				void* _t181;
				signed char _t187;
				signed char _t188;
				signed char _t189;
				signed char _t191;
				signed char _t192;
				signed int _t198;
				signed int _t284;
				void* _t287;
				void* _t289;
				void* _t291;
				void* _t293;
				void* _t295;
				void* _t297;
				void* _t300;
				void* _t302;
				void* _t304;
				void* _t307;
				void* _t309;
				void* _t311;
				void* _t314;
				void* _t316;
				void* _t318;
				void* _t321;
				void* _t323;
				void* _t325;

				_t181 = __ecx;
				_t177 = __eax;
				if( *((intOrPtr*)(__eax - 0x1c)) ==  *((intOrPtr*)(__ecx - 0x1c))) {
					_t284 = 0;
					L11:
					if(_t284 != 0) {
						goto L1;
					}
					_t187 =  *(_t177 - 0x18);
					if(_t187 ==  *(_t181 - 0x18)) {
						_t284 = 0;
						L22:
						if(_t284 != 0) {
							goto L1;
						}
						_t188 =  *(_t177 - 0x14);
						if(_t188 ==  *(_t181 - 0x14)) {
							_t284 = 0;
							L33:
							if(_t284 != 0) {
								goto L1;
							}
							_t189 =  *(_t177 - 0x10);
							if(_t189 ==  *(_t181 - 0x10)) {
								_t284 = 0;
								L44:
								if(_t284 != 0) {
									goto L1;
								}
								if( *(_t177 - 0xc) ==  *(_t181 - 0xc)) {
									_t284 = 0;
									L55:
									if(_t284 != 0) {
										goto L1;
									}
									_t191 =  *(_t177 - 8);
									if(_t191 ==  *(_t181 - 8)) {
										_t284 = 0;
										L66:
										if(_t284 != 0) {
											goto L1;
										}
										_t192 =  *(_t177 - 4);
										if(_t192 ==  *(_t181 - 4)) {
											_t178 = 0;
											L78:
											if(_t178 == 0) {
												_t178 = 0;
											}
											L80:
											return _t178;
										}
										_t287 = (_t192 & 0x000000ff) - ( *(_t181 - 4) & 0x000000ff);
										if(_t287 == 0) {
											L70:
											_t289 = ( *(_t177 - 3) & 0x000000ff) - ( *(_t181 - 3) & 0x000000ff);
											if(_t289 == 0) {
												L72:
												_t291 = ( *(_t177 - 2) & 0x000000ff) - ( *(_t181 - 2) & 0x000000ff);
												if(_t291 == 0) {
													L75:
													_t178 = ( *(_t177 - 1) & 0x000000ff) - ( *(_t181 - 1) & 0x000000ff);
													if(_t178 != 0) {
														_t178 = (0 | _t178 > 0x00000000) + (0 | _t178 > 0x00000000) - 1;
													}
													goto L78;
												}
												_t198 = (0 | _t291 > 0x00000000) + (0 | _t291 > 0x00000000) - 1;
												if(_t198 == 0) {
													goto L75;
												}
												L74:
												_t178 = _t198;
												goto L78;
											}
											_t198 = (0 | _t289 > 0x00000000) + (0 | _t289 > 0x00000000) - 1;
											if(_t198 != 0) {
												goto L74;
											}
											goto L72;
										}
										_t198 = (0 | _t287 > 0x00000000) + (0 | _t287 > 0x00000000) - 1;
										if(_t198 != 0) {
											goto L74;
										}
										goto L70;
									}
									_t293 = (_t191 & 0x000000ff) - ( *(_t181 - 8) & 0x000000ff);
									if(_t293 == 0) {
										L59:
										_t295 = ( *(_t177 - 7) & 0x000000ff) - ( *(_t181 - 7) & 0x000000ff);
										if(_t295 == 0) {
											L61:
											_t297 = ( *(_t177 - 6) & 0x000000ff) - ( *(_t181 - 6) & 0x000000ff);
											if(_t297 == 0) {
												L63:
												_t284 = ( *(_t177 - 5) & 0x000000ff) - ( *(_t181 - 5) & 0x000000ff);
												if(_t284 != 0) {
													_t284 = (0 | _t284 > 0x00000000) + (0 | _t284 > 0x00000000) - 1;
												}
												goto L66;
											}
											_t284 = (0 | _t297 > 0x00000000) + (0 | _t297 > 0x00000000) - 1;
											if(_t284 != 0) {
												goto L1;
											}
											goto L63;
										}
										_t284 = (0 | _t295 > 0x00000000) + (0 | _t295 > 0x00000000) - 1;
										if(_t284 != 0) {
											goto L1;
										}
										goto L61;
									}
									_t284 = (0 | _t293 > 0x00000000) + (0 | _t293 > 0x00000000) - 1;
									if(_t284 != 0) {
										goto L1;
									}
									goto L59;
								}
								_t300 = ( *(_t177 - 0xc) & 0x000000ff) - ( *(_t181 - 0xc) & 0x000000ff);
								if(_t300 == 0) {
									L48:
									_t302 = ( *(_t177 - 0xb) & 0x000000ff) - ( *(_t181 - 0xb) & 0x000000ff);
									if(_t302 == 0) {
										L50:
										_t304 = ( *(_t177 - 0xa) & 0x000000ff) - ( *(_t181 - 0xa) & 0x000000ff);
										if(_t304 == 0) {
											L52:
											_t284 = ( *(_t177 - 9) & 0x000000ff) - ( *(_t181 - 9) & 0x000000ff);
											if(_t284 != 0) {
												_t284 = (0 | _t284 > 0x00000000) + (0 | _t284 > 0x00000000) - 1;
											}
											goto L55;
										}
										_t284 = (0 | _t304 > 0x00000000) + (0 | _t304 > 0x00000000) - 1;
										if(_t284 != 0) {
											goto L1;
										}
										goto L52;
									}
									_t284 = (0 | _t302 > 0x00000000) + (0 | _t302 > 0x00000000) - 1;
									if(_t284 != 0) {
										goto L1;
									}
									goto L50;
								}
								_t284 = (0 | _t300 > 0x00000000) + (0 | _t300 > 0x00000000) - 1;
								if(_t284 != 0) {
									goto L1;
								}
								goto L48;
							}
							_t307 = (_t189 & 0x000000ff) - ( *(_t181 - 0x10) & 0x000000ff);
							if(_t307 == 0) {
								L37:
								_t309 = ( *(_t177 - 0xf) & 0x000000ff) - ( *(_t181 - 0xf) & 0x000000ff);
								if(_t309 == 0) {
									L39:
									_t311 = ( *(_t177 - 0xe) & 0x000000ff) - ( *(_t181 - 0xe) & 0x000000ff);
									if(_t311 == 0) {
										L41:
										_t284 = ( *(_t177 - 0xd) & 0x000000ff) - ( *(_t181 - 0xd) & 0x000000ff);
										if(_t284 != 0) {
											_t284 = (0 | _t284 > 0x00000000) + (0 | _t284 > 0x00000000) - 1;
										}
										goto L44;
									}
									_t284 = (0 | _t311 > 0x00000000) + (0 | _t311 > 0x00000000) - 1;
									if(_t284 != 0) {
										goto L1;
									}
									goto L41;
								}
								_t284 = (0 | _t309 > 0x00000000) + (0 | _t309 > 0x00000000) - 1;
								if(_t284 != 0) {
									goto L1;
								}
								goto L39;
							}
							_t284 = (0 | _t307 > 0x00000000) + (0 | _t307 > 0x00000000) - 1;
							if(_t284 != 0) {
								goto L1;
							}
							goto L37;
						}
						_t314 = (_t188 & 0x000000ff) - ( *(_t181 - 0x14) & 0x000000ff);
						if(_t314 == 0) {
							L26:
							_t316 = ( *(_t177 - 0x13) & 0x000000ff) - ( *(_t181 - 0x13) & 0x000000ff);
							if(_t316 == 0) {
								L28:
								_t318 = ( *(_t177 - 0x12) & 0x000000ff) - ( *(_t181 - 0x12) & 0x000000ff);
								if(_t318 == 0) {
									L30:
									_t284 = ( *(_t177 - 0x11) & 0x000000ff) - ( *(_t181 - 0x11) & 0x000000ff);
									if(_t284 != 0) {
										_t284 = (0 | _t284 > 0x00000000) + (0 | _t284 > 0x00000000) - 1;
									}
									goto L33;
								}
								_t284 = (0 | _t318 > 0x00000000) + (0 | _t318 > 0x00000000) - 1;
								if(_t284 != 0) {
									goto L1;
								}
								goto L30;
							}
							_t284 = (0 | _t316 > 0x00000000) + (0 | _t316 > 0x00000000) - 1;
							if(_t284 != 0) {
								goto L1;
							}
							goto L28;
						}
						_t284 = (0 | _t314 > 0x00000000) + (0 | _t314 > 0x00000000) - 1;
						if(_t284 != 0) {
							goto L1;
						}
						goto L26;
					}
					_t321 = (_t187 & 0x000000ff) - ( *(_t181 - 0x18) & 0x000000ff);
					if(_t321 == 0) {
						L15:
						_t323 = ( *(_t177 - 0x17) & 0x000000ff) - ( *(_t181 - 0x17) & 0x000000ff);
						if(_t323 == 0) {
							L17:
							_t325 = ( *(_t177 - 0x16) & 0x000000ff) - ( *(_t181 - 0x16) & 0x000000ff);
							if(_t325 == 0) {
								L19:
								_t284 = ( *(_t177 - 0x15) & 0x000000ff) - ( *(_t181 - 0x15) & 0x000000ff);
								if(_t284 != 0) {
									_t284 = (0 | _t284 > 0x00000000) + (0 | _t284 > 0x00000000) - 1;
								}
								goto L22;
							}
							_t284 = (0 | _t325 > 0x00000000) + (0 | _t325 > 0x00000000) - 1;
							if(_t284 != 0) {
								goto L1;
							}
							goto L19;
						}
						_t284 = (0 | _t323 > 0x00000000) + (0 | _t323 > 0x00000000) - 1;
						if(_t284 != 0) {
							goto L1;
						}
						goto L17;
					}
					_t284 = (0 | _t321 > 0x00000000) + (0 | _t321 > 0x00000000) - 1;
					if(_t284 != 0) {
						goto L1;
					}
					goto L15;
				} else {
					__esi = __dl & 0x000000ff;
					__edx =  *(__ecx - 0x1c) & 0x000000ff;
					__esi = (__dl & 0x000000ff) - ( *(__ecx - 0x1c) & 0x000000ff);
					if(__esi == 0) {
						L4:
						__esi =  *(__eax - 0x1b) & 0x000000ff;
						__edx =  *(__ecx - 0x1b) & 0x000000ff;
						__esi = ( *(__eax - 0x1b) & 0x000000ff) - ( *(__ecx - 0x1b) & 0x000000ff);
						if(__esi == 0) {
							L6:
							__esi =  *(__eax - 0x1a) & 0x000000ff;
							__edx =  *(__ecx - 0x1a) & 0x000000ff;
							__esi = ( *(__eax - 0x1a) & 0x000000ff) - ( *(__ecx - 0x1a) & 0x000000ff);
							if(__esi == 0) {
								L8:
								__esi =  *(__eax - 0x19) & 0x000000ff;
								__edx =  *(__ecx - 0x19) & 0x000000ff;
								__esi = ( *(__eax - 0x19) & 0x000000ff) - ( *(__ecx - 0x19) & 0x000000ff);
								if(__esi != 0) {
									0 = 0 | __esi > 0x00000000;
									__edx = (__esi > 0) + (__esi > 0) - 1;
									__esi = (__esi > 0) + (__esi > 0) - 1;
								}
								goto L11;
							}
							0 = 0 | __esi > 0x00000000;
							__edx = (__esi > 0) + (__esi > 0) - 1;
							__esi = __edx;
							if(__edx != 0) {
								goto L1;
							}
							goto L8;
						}
						0 = 0 | __esi > 0x00000000;
						__edx = (__esi > 0) + (__esi > 0) - 1;
						__esi = __edx;
						if(__edx != 0) {
							goto L1;
						}
						goto L6;
					}
					0 = 0 | __esi > 0x00000000;
					__edx = (__esi > 0) + (__esi > 0) - 1;
					__esi = __edx;
					if(__edx != 0) {
						goto L1;
					}
					goto L4;
				}
				L1:
				_t178 = _t284;
				goto L80;
			}

0x0003a1ad
0x0003a1ad
0x0003a1b3
0x0003a226
0x0003a228
0x0003a22a
0x00000000
0x00000000
0x0003a230
0x0003a236
0x0003a2b5
0x0003a2b7
0x0003a2b9
0x00000000
0x00000000
0x0003a2bf
0x0003a2c5
0x0003a344
0x0003a346
0x0003a348
0x00000000
0x00000000
0x0003a34e
0x0003a354
0x0003a3d3
0x0003a3d5
0x0003a3d7
0x00000000
0x00000000
0x0003a3e3
0x0003a463
0x0003a465
0x0003a467
0x00000000
0x00000000
0x0003a46d
0x0003a473
0x0003a4f2
0x0003a4f4
0x0003a4f6
0x00000000
0x00000000
0x0003a4fc
0x0003a502
0x0003a573
0x0003a575
0x0003a577
0x0003a579
0x0003a579
0x0003a57b
0x0003b2d7
0x0003b2d7
0x0003a50b
0x0003a50d
0x0003a51e
0x0003a526
0x0003a528
0x0003a539
0x0003a541
0x0003a543
0x0003a558
0x0003a560
0x0003a562
0x0003a56f
0x0003a56f
0x00000000
0x0003a562
0x0003a54c
0x0003a552
0x00000000
0x00000000
0x0003a554
0x0003a554
0x00000000
0x0003a554
0x0003a531
0x0003a537
0x00000000
0x00000000
0x00000000
0x0003a537
0x0003a516
0x0003a51c
0x00000000
0x00000000
0x00000000
0x0003a51c
0x0003a47c
0x0003a47e
0x0003a495
0x0003a49d
0x0003a49f
0x0003a4b6
0x0003a4be
0x0003a4c0
0x0003a4d7
0x0003a4df
0x0003a4e1
0x0003a4ee
0x0003a4ee
0x00000000
0x0003a4e1
0x0003a4cd
0x0003a4d1
0x00000000
0x00000000
0x00000000
0x0003a4d1
0x0003a4ac
0x0003a4b0
0x00000000
0x00000000
0x00000000
0x0003a4b0
0x0003a48b
0x0003a48f
0x00000000
0x00000000
0x00000000
0x0003a48f
0x0003a3ed
0x0003a3ef
0x0003a406
0x0003a40e
0x0003a410
0x0003a427
0x0003a42f
0x0003a431
0x0003a448
0x0003a450
0x0003a452
0x0003a45f
0x0003a45f
0x00000000
0x0003a452
0x0003a43e
0x0003a442
0x00000000
0x00000000
0x00000000
0x0003a442
0x0003a41d
0x0003a421
0x00000000
0x00000000
0x00000000
0x0003a421
0x0003a3fc
0x0003a400
0x00000000
0x00000000
0x00000000
0x0003a400
0x0003a35d
0x0003a35f
0x0003a376
0x0003a37e
0x0003a380
0x0003a397
0x0003a39f
0x0003a3a1
0x0003a3b8
0x0003a3c0
0x0003a3c2
0x0003a3cf
0x0003a3cf
0x00000000
0x0003a3c2
0x0003a3ae
0x0003a3b2
0x00000000
0x00000000
0x00000000
0x0003a3b2
0x0003a38d
0x0003a391
0x00000000
0x00000000
0x00000000
0x0003a391
0x0003a36c
0x0003a370
0x00000000
0x00000000
0x00000000
0x0003a370
0x0003a2ce
0x0003a2d0
0x0003a2e7
0x0003a2ef
0x0003a2f1
0x0003a308
0x0003a310
0x0003a312
0x0003a329
0x0003a331
0x0003a333
0x0003a340
0x0003a340
0x00000000
0x0003a333
0x0003a31f
0x0003a323
0x00000000
0x00000000
0x00000000
0x0003a323
0x0003a2fe
0x0003a302
0x00000000
0x00000000
0x00000000
0x0003a302
0x0003a2dd
0x0003a2e1
0x00000000
0x00000000
0x00000000
0x0003a2e1
0x0003a23f
0x0003a241
0x0003a258
0x0003a260
0x0003a262
0x0003a279
0x0003a281
0x0003a283
0x0003a29a
0x0003a2a2
0x0003a2a4
0x0003a2b1
0x0003a2b1
0x00000000
0x0003a2a4
0x0003a290
0x0003a294
0x00000000
0x00000000
0x00000000
0x0003a294
0x0003a26f
0x0003a273
0x00000000
0x00000000
0x00000000
0x0003a273
0x0003a24e
0x0003a252
0x00000000
0x00000000
0x00000000
0x0003a1b5
0x0003a1b5
0x0003a1b8
0x0003a1bc
0x0003a1be
0x0003a1d1
0x0003a1d1
0x0003a1d5
0x0003a1d9
0x0003a1db
0x0003a1ee
0x0003a1ee
0x0003a1f2
0x0003a1f6
0x0003a1f8
0x0003a20b
0x0003a20b
0x0003a20f
0x0003a213
0x0003a215
0x0003a21b
0x0003a21e
0x0003a222
0x0003a222
0x00000000
0x0003a215
0x0003a1fe
0x0003a201
0x0003a205
0x0003a209
0x00000000
0x00000000
0x00000000
0x0003a209
0x0003a1e1
0x0003a1e4
0x0003a1e8
0x0003a1ec
0x00000000
0x00000000
0x00000000
0x0003a1ec
0x0003a1c4
0x0003a1c7
0x0003a1cb
0x0003a1cf
0x00000000
0x00000000
0x00000000
0x0003a1cf
0x0003a1a6
0x0003a1a6
0x00000000

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6a9d25a147ba64f4d06249d12fe21364a5b6889ab238d0ba2e949acfc497403
Instruction ID: 4323a6895febfd7a92d0eea3194365671e653f350e0a9b723ac9fe5922d479a6
Opcode Fuzzy Hash: a6a9d25a147ba64f4d06249d12fe21364a5b6889ab238d0ba2e949acfc497403
Instruction Fuzzy Hash: A3C18273E1B9B30B87B7812D455863BEEA66FD274071EC3E09CE42F289D22B9D0495D1

Uniqueness

Uniqueness Score: -1.00%

Function 00035A53 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 57
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 92%

			E00035A53(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				struct HINSTANCE__* _t23;
				intOrPtr _t28;
				intOrPtr _t32;
				intOrPtr _t46;
				void* _t47;

				_t35 = __ebx;
				_push(0xc);
				_push(0x3edc8);
				E00035EBC(__ebx, __edi, __esi);
				_t45 = L"KERNEL32.DLL";
				_t23 = GetModuleHandleW(L"KERNEL32.DLL");
				if(_t23 == 0) {
					_t23 = E00034B06(_t45);
				}
				 *(_t47 - 0x1c) = _t23;
				_t46 =  *((intOrPtr*)(_t47 + 8));
				 *((intOrPtr*)(_t46 + 0x5c)) = 0x3d7f8;
				 *((intOrPtr*)(_t46 + 0x14)) = 1;
				if(_t23 != 0) {
					_t35 = GetProcAddress;
					 *((intOrPtr*)(_t46 + 0x1f8)) = GetProcAddress(_t23, "EncodePointer");
					 *((intOrPtr*)(_t46 + 0x1fc)) = GetProcAddress( *(_t47 - 0x1c), "DecodePointer");
				}
				 *((intOrPtr*)(_t46 + 0x70)) = 1;
				 *((char*)(_t46 + 0xc8)) = 0x43;
				 *((char*)(_t46 + 0x14b)) = 0x43;
				 *(_t46 + 0x68) = 0x403e0;
				E00036308(_t35, 1, 0xd);
				 *(_t47 - 4) =  *(_t47 - 4) & 0x00000000;
				InterlockedIncrement( *(_t46 + 0x68));
				 *(_t47 - 4) = 0xfffffffe;
				E00035B28();
				E00036308(_t35, 1, 0xc);
				 *(_t47 - 4) = 1;
				_t28 =  *((intOrPtr*)(_t47 + 0xc));
				 *((intOrPtr*)(_t46 + 0x6c)) = _t28;
				if(_t28 == 0) {
					_t32 =  *0x409e8; // 0x40910
					 *((intOrPtr*)(_t46 + 0x6c)) = _t32;
				}
				E00037C3E( *((intOrPtr*)(_t46 + 0x6c)));
				 *(_t47 - 4) = 0xfffffffe;
				return E00035F01(E00035B31());
			}

0x00035a53
0x00035a53
0x00035a55
0x00035a5a
0x00035a5f
0x00035a65
0x00035a6d
0x00035a70
0x00035a75
0x00035a76
0x00035a79
0x00035a7c
0x00035a86
0x00035a8b
0x00035a93
0x00035a9b
0x00035aab
0x00035aab
0x00035ab1
0x00035ab4
0x00035abb
0x00035ac2
0x00035acb
0x00035ad1
0x00035ad8
0x00035ade
0x00035ae5
0x00035aec
0x00035af2
0x00035af5
0x00035af8
0x00035afd
0x00035aff
0x00035b04
0x00035b04
0x00035b0a
0x00035b10
0x00035b21

APIs

GetModuleHandleW.KERNEL32(KERNEL32.DLL,0003EDC8,0000000C,00035B8E,00000000,00000000,?,?,?,?,000311A0,?,?,?,80004005), ref: 00035A65
__crt_waiting_on_module_handle.LIBCMT ref: 00035A70

Part of subcall function 00034B06: Sleep.KERNEL32(000003E8,00000000,?,000359B6,KERNEL32.DLL,?,00035A02,?,?,?,?,000311A0,?,?,?,80004005), ref: 00034B12
Part of subcall function 00034B06: GetModuleHandleW.KERNEL32(?,?,000359B6,KERNEL32.DLL,?,00035A02,?,?,?,?,000311A0,?,?,?,80004005), ref: 00034B1B

GetProcAddress.KERNEL32(00000000,EncodePointer), ref: 00035A99
GetProcAddress.KERNEL32(?,DecodePointer), ref: 00035AA9
__lock.LIBCMT ref: 00035ACB
InterlockedIncrement.KERNEL32(000403E0), ref: 00035AD8
__lock.LIBCMT ref: 00035AEC
___addlocaleref.LIBCMT ref: 00035B0A

Strings

EncodePointer, xrefs: 00035A8D
KERNEL32.DLL, xrefs: 00035A5F, 00035A64, 00035A6F
DecodePointer, xrefs: 00035AA1

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: AddressHandleModuleProc__lock$IncrementInterlockedSleep___addlocaleref__crt_waiting_on_module_handle
String ID: DecodePointer$EncodePointer$KERNEL32.DLL
API String ID: 1028249917-2843748187
Opcode ID: 545b1d0a3a012dd5483b5e280b77e514ee81af5d043b9877142e771aee2cc294
Instruction ID: e21fbe297fc924fa313fcec6d15e21bc788dbca1099824da98df82fa631e6a82
Opcode Fuzzy Hash: 545b1d0a3a012dd5483b5e280b77e514ee81af5d043b9877142e771aee2cc294
Instruction Fuzzy Hash: 2011A271840B019FE722EF79DC41B8ABBECAF04315F10451EE499972A2CB74AA00CF54

Uniqueness

Uniqueness Score: -1.00%

Function 00031FC9 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 87
COMMON

Download Yara Rule

C-Code - Quality: 39%

			E00031FC9(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				signed int _t15;
				void* _t25;
				intOrPtr _t28;
				void* _t34;
				void* _t41;
				signed int _t46;
				void* _t48;

				_t42 = __esi;
				_t38 = __edi;
				_t37 = __edx;
				_t33 = __ebx;
				_t46 = _t48 - 0x78;
				_t15 =  *0x409f8; // 0x6ba050e2
				 *(_t46 + 0x74) = _t15 ^ _t46;
				if(E00031F3E(__ebx, __edx, __esi) == 0) {
					_push(__edi);
					if(E00031E7F(__ebx, _t46 - 0x34, __esi) >= 0) {
						_push(__ebx);
						_t34 = OpenSCManagerW(0, 0, 0xf003f);
						if(_t34 != 0) {
							_push(__esi);
							asm("movsd");
							asm("movsd");
							asm("movsd");
							asm("movsd");
							asm("movsw");
							E00038B70(_t46 - 0x2c, _t46 - 0x1a, 0, 0x8e);
							_t41 = OpenServiceW(_t34, _t46 - 0x2c, 0xf01ff);
							if(_t41 != 0) {
								_t25 = _t46 - 0x5c;
								__imp__QueryServiceStatusEx(_t41, 0, _t25, 0x24, _t46 - 0x38);
								_push(_t41);
								if(_t25 == 0 ||  *((intOrPtr*)(_t46 - 0x34)) !=  *((intOrPtr*)(_t46 - 0x40))) {
									CloseServiceHandle();
									CloseServiceHandle(_t34);
									_t28 = 0;
								} else {
									CloseServiceHandle();
									 *((char*)(_t46 - 0x2d)) = 1;
									goto L8;
								}
							} else {
								 *((char*)(_t46 - 0x2d)) = 0;
								L8:
								CloseServiceHandle(_t34);
								_t28 =  *((intOrPtr*)(_t46 - 0x2d));
							}
							_pop(_t42);
						} else {
							_t28 = 0;
						}
						_pop(_t33);
					} else {
						_t28 = 0;
					}
					_pop(_t38);
				} else {
					_t28 = 0;
				}
				return E000388DE(_t28, _t33,  *(_t46 + 0x74) ^ _t46, _t37, _t38, _t42);
			}

0x00031fc9
0x00031fc9
0x00031fc9
0x00031fc9
0x00031fca
0x00031fd4
0x00031fdb
0x00031fe5
0x00031fee
0x00031ff9
0x00032002
0x00032012
0x00032016
0x0003201f
0x00032028
0x00032029
0x0003202a
0x0003202b
0x00032037
0x00032039
0x00032057
0x0003205b
0x0003206f
0x00032076
0x0003207c
0x0003207f
0x00032097
0x0003209a
0x0003209c
0x00032089
0x00032089
0x0003208b
0x00000000
0x0003208b
0x0003205d
0x0003205d
0x00032061
0x00032062
0x00032064
0x00032064
0x0003209e
0x00032018
0x00032018
0x00032018
0x0003209f
0x00031ffb
0x00031ffb
0x00031ffb
0x000320a0
0x00031fe7
0x00031fe7
0x00031fe7
0x000320af

Strings

seclogon, xrefs: 00032020

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: ConditionInfoMaskVerifyVersion_memset
String ID: seclogon
API String ID: 2553538757-711183399
Opcode ID: 269c2af5f6e9eaf4fcc690398c910feeec3c2bbc9ace3eebdb6277501e81cc4e
Instruction ID: 2373c183835ef9e40960100f76657743a2a9210e080172c16a9b2dc2463784e2
Opcode Fuzzy Hash: 269c2af5f6e9eaf4fcc690398c910feeec3c2bbc9ace3eebdb6277501e81cc4e
Instruction Fuzzy Hash: DA217471A40318AAEB66DFB4DC41BEEB7EDAF05700F100416F905B7193DBA5984AC760

Uniqueness

Uniqueness Score: -1.00%

Function 000315ED Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 88
COMMON

Download Yara Rule

C-Code - Quality: 81%

			E000315ED(void* __ebx, void* __ecx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				signed int _t24;
				intOrPtr _t27;
				intOrPtr* _t32;
				signed int _t36;
				long _t46;
				void* _t57;
				intOrPtr _t69;
				void* _t70;
				intOrPtr _t75;
				void* _t76;
				signed int _t78;
				void* _t80;

				_t67 = __edx;
				_t78 = _t80 - 0x198;
				_t24 =  *0x409f8; // 0x6ba050e2
				 *(_t78 + 0x194) = _t24 ^ _t78;
				 *((intOrPtr*)(_t78 - 0x80)) =  *((intOrPtr*)(_t78 + 0x1a0));
				_t27 =  *0x4174c; // 0x3e388
				 *((intOrPtr*)(_t78 - 0x78)) =  *((intOrPtr*)(_t27 + 0xc))(__edi, __esi, __ebx) + 0x10;
				E00032769(_t78 - 0x78, __edx, L"/%s", L"recover");
				_t53 =  *((intOrPtr*)(_t78 - 0x78));
				_t69 =  *((intOrPtr*)( *((intOrPtr*)(_t78 - 0x78)) - 0xc));
				_t32 = __ecx + 4;
				if(_t69 < 0) {
					_t69 = 0;
				}
				_t73 =  *_t32;
				if(_t69 <  *((intOrPtr*)( *_t32 - 0xc))) {
					E0003237F(_t53, E00032458(_t32), _t67, _t69, _t78 - 0x7c, _t73);
					_t75 =  *((intOrPtr*)(_t78 - 0x7c));
				} else {
					_t75 = E00032625(_t73 - 0x10, _t53) + 0x10;
					 *((intOrPtr*)(_t78 - 0x7c)) = _t75;
				}
				_t36 = E0003247C(_t78 - 0x7c, _t53);
				asm("sbb bl, bl");
				_t17 = _t75 - 0x10; // -32
				E000310B5(_t17, _t67);
				_pop(_t70);
				_pop(_t76);
				_pop(_t57);
				if( ~_t36 + 1 != 0) {
					E00038B70(_t70, _t78 - 0x74, 0, 0x208);
					_t46 = GetModuleFileNameW(0, _t78 - 0x74, 0x104);
					_t89 = _t46;
					if(_t46 != 0) {
						E000327B6( *((intOrPtr*)(_t78 - 0x80)), _t67, _t89, L" \"%s\"", _t78 - 0x74);
					}
				}
				return E000388DE(E000310B5( *((intOrPtr*)(_t78 - 0x78)) + 0xfffffff0, _t67), _t57,  *(_t78 + 0x194) ^ _t78, _t67, _t70, _t76);
			}

0x000315ed
0x000315ee
0x000315fb
0x00031602
0x00031612
0x00031615
0x00031626
0x00031636
0x0003163b
0x0003163e
0x00031643
0x00031648
0x0003164a
0x0003164a
0x0003164c
0x00031651
0x00031670
0x00031675
0x00031653
0x0003165d
0x00031660
0x00031660
0x0003167d
0x00031686
0x00031688
0x0003168d
0x00031692
0x00031693
0x00031696
0x00031697
0x000316a4
0x000316b7
0x000316bd
0x000316bf
0x000316cd
0x000316d3
0x000316bf
0x000316f3

APIs

_memset.LIBCMT ref: 000316A4
GetModuleFileNameW.KERNEL32(00000000,?,00000104), ref: 000316B7

Strings

"%s", xrefs: 000316C8
/%s, xrefs: 0003162E
recover, xrefs: 00031629

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: FileModuleName_memset
String ID: "%s"$/%s$recover
API String ID: 158409099-4067204065
Opcode ID: f1cc3f37ff91439f4f374fd4ef7a6b9cbcf68ca482e95470b39be05fbaa63f9b
Instruction ID: 354e51a60908969e499247038a1327f399b7693f542ea51c86bc229986510c34
Opcode Fuzzy Hash: f1cc3f37ff91439f4f374fd4ef7a6b9cbcf68ca482e95470b39be05fbaa63f9b
Instruction Fuzzy Hash: DC317872A442089BEB31EBB8DC46ADDB3FCAF09710F14452AF655E7283DF70A9458B50

Uniqueness

Uniqueness Score: -1.00%

Function 00037166 Relevance: 7.5, APIs: 5, Instructions: 47
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 89%

			E00037166(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				signed int _t15;
				LONG* _t21;
				long _t23;
				void* _t29;
				void* _t31;
				LONG* _t33;
				void* _t34;
				void* _t35;

				_t35 = __eflags;
				_t29 = __edx;
				_t25 = __ebx;
				_push(0xc);
				_push(0x3eed8);
				E00035EBC(__ebx, __edi, __esi);
				_t31 = E00035BB3(__ebx, _t35);
				_t15 =  *0x40a10; // 0xfffffffe
				if(( *(_t31 + 0x70) & _t15) == 0 ||  *((intOrPtr*)(_t31 + 0x6c)) == 0) {
					E00036308(_t25, _t31, 0xd);
					 *(_t34 - 4) =  *(_t34 - 4) & 0x00000000;
					_t33 =  *(_t31 + 0x68);
					 *(_t34 - 0x1c) = _t33;
					__eflags = _t33 -  *0x40808; // 0xb216c8
					if(__eflags != 0) {
						__eflags = _t33;
						if(_t33 != 0) {
							_t23 = InterlockedDecrement(_t33);
							__eflags = _t23;
							if(_t23 == 0) {
								__eflags = _t33 - 0x403e0;
								if(__eflags != 0) {
									_push(_t33);
									E00037623(_t25, _t29, _t31, _t33, __eflags);
								}
							}
						}
						_t21 =  *0x40808; // 0xb216c8
						 *(_t31 + 0x68) = _t21;
						_t33 =  *0x40808; // 0xb216c8
						 *(_t34 - 0x1c) = _t33;
						InterlockedIncrement(_t33);
					}
					 *(_t34 - 4) = 0xfffffffe;
					E00037201();
				} else {
					_t33 =  *(_t31 + 0x68);
				}
				if(_t33 == 0) {
					E00034B36(_t29, 0x20);
				}
				return E00035F01(_t33);
			}

0x00037166
0x00037166
0x00037166
0x00037166
0x00037168
0x0003716d
0x00037177
0x00037179
0x00037181
0x000371a2
0x000371a8
0x000371ac
0x000371af
0x000371b2
0x000371b8
0x000371ba
0x000371bc
0x000371bf
0x000371c5
0x000371c7
0x000371c9
0x000371cf
0x000371d1
0x000371d2
0x000371d7
0x000371cf
0x000371c7
0x000371d8
0x000371dd
0x000371e0
0x000371e6
0x000371ea
0x000371ea
0x000371f0
0x000371f7
0x00037189
0x00037189
0x00037189
0x0003718e
0x00037192
0x00037197
0x0003719f

APIs

__getptd.LIBCMT ref: 00037172

Part of subcall function 00035BB3: __getptd_noexit.LIBCMT ref: 00035BB6
Part of subcall function 00035BB3: __amsg_exit.LIBCMT ref: 00035BC3

__amsg_exit.LIBCMT ref: 00037192
__lock.LIBCMT ref: 000371A2
InterlockedDecrement.KERNEL32(?), ref: 000371BF
InterlockedIncrement.KERNEL32(00B216C8), ref: 000371EA

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
String ID:
API String ID: 4271482742-0
Opcode ID: d6bd7f66fc25380c995cf395ff13eb9906051e653a3736de0a44b6cc496870bb
Instruction ID: 5d3b3c780996a2ad471e3183cc59b99616b43ae267eb367ff109b9838df56ad0
Opcode Fuzzy Hash: d6bd7f66fc25380c995cf395ff13eb9906051e653a3736de0a44b6cc496870bb
Instruction Fuzzy Hash: 3D01D6B2909725ABE773AF28990579D73E8AF01711F050109F848772A2CB78AD81DFD5

Uniqueness

Uniqueness Score: -1.00%

Function 00031127 Relevance: 6.0, APIs: 4, Instructions: 48
COMMON

Download Yara Rule

C-Code - Quality: 74%

			E00031127(intOrPtr __ebx, WCHAR* __ecx, intOrPtr __edx, char* __edi, intOrPtr _a4) {
				signed int _v8;
				short _v2064;
				void* __esi;
				signed int _t9;
				intOrPtr _t22;
				intOrPtr _t27;
				WCHAR* _t29;
				int _t30;
				signed int _t31;

				_t28 = __edi;
				_t27 = __edx;
				_t22 = __ebx;
				_t9 =  *0x409f8; // 0x6ba050e2
				_v8 = _t9 ^ _t31;
				_t29 = __ecx;
				SetLastError(0);
				_t30 = wvsprintfW( &_v2064, _t29, __edi);
				if(GetLastError() != 0) {
					L1:
					_push(0x80004005);
					L2:
					E00031000();
				}
				if(_t30 > 0x400) {
					goto L1;
				}
				if(_t30 >= _a4) {
					L5:
					_push(0x80070057);
					goto L2;
				}
				if(E0003C661( &_v2064) >= _a4) {
					goto L5;
				}
				L00031024(E0003C73A(_t22, _a4,  &_v2064));
				return E000388DE(_t30, _t22, _v8 ^ _t31, _t27, _t28, _t30);
			}

0x00031127
0x00031127
0x00031127
0x00031130
0x00031137
0x0003113d
0x0003113f
0x00031154
0x0003115e
0x00031160
0x00031160
0x00031165
0x00031165
0x00031165
0x00031170
0x00000000
0x00000000
0x00031175
0x00031177
0x00031177
0x00000000
0x00031177
0x0003118e
0x00000000
0x00000000
0x000311a1
0x000311b7

APIs

SetLastError.KERNEL32(00000000), ref: 0003113F
wvsprintfW.USER32(?), ref: 0003114E
GetLastError.KERNEL32 ref: 00031156
_wcslen.LIBCMT ref: 00031185

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: ErrorLast$_wcslenwvsprintf
String ID:
API String ID: 3448047450-0
Opcode ID: 80eab4458da935df132986f160f986cc568fd681a30fcacf5311210230f123a8
Instruction ID: ed7d703004872626577e3489470fedae7891b8a858d39ee8d03716dfc6d2bf01
Opcode Fuzzy Hash: 80eab4458da935df132986f160f986cc568fd681a30fcacf5311210230f123a8
Instruction Fuzzy Hash: B101B175900218ABEB22AF749C49EDE37ACEB08750F004459FA05E7142CA35DA548BD4

Uniqueness

Uniqueness Score: -1.00%

Function 00037DA4 Relevance: 6.0, APIs: 4, Instructions: 31
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 90%

			E00037DA4(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				signed int _t13;
				void* _t25;
				intOrPtr _t27;
				intOrPtr _t29;
				void* _t30;
				void* _t31;

				_t31 = __eflags;
				_t26 = __edi;
				_t25 = __edx;
				_t22 = __ebx;
				_push(0xc);
				_push(0x3ef38);
				E00035EBC(__ebx, __edi, __esi);
				_t29 = E00035BB3(__ebx, _t31);
				_t13 =  *0x40a10; // 0xfffffffe
				if(( *(_t29 + 0x70) & _t13) == 0) {
					L6:
					E00036308(_t22, _t26, 0xc);
					 *(_t30 - 4) =  *(_t30 - 4) & 0x00000000;
					_t8 = _t29 + 0x6c; // 0x6c
					_t27 =  *0x409e8; // 0x40910
					 *((intOrPtr*)(_t30 - 0x1c)) = E00037D66(_t8, _t25, _t27);
					 *(_t30 - 4) = 0xfffffffe;
					E00037E0E();
				} else {
					_t33 =  *((intOrPtr*)(_t29 + 0x6c));
					if( *((intOrPtr*)(_t29 + 0x6c)) == 0) {
						goto L6;
					} else {
						_t29 =  *((intOrPtr*)(E00035BB3(_t22, _t33) + 0x6c));
					}
				}
				if(_t29 == 0) {
					E00034B36(_t25, 0x20);
				}
				return E00035F01(_t29);
			}

0x00037da4
0x00037da4
0x00037da4
0x00037da4
0x00037da4
0x00037da6
0x00037dab
0x00037db5
0x00037db7
0x00037dbf
0x00037de3
0x00037de5
0x00037deb
0x00037def
0x00037df2
0x00037dfd
0x00037e00
0x00037e07
0x00037dc1
0x00037dc1
0x00037dc5
0x00000000
0x00037dc7
0x00037dcc
0x00037dcc
0x00037dc5
0x00037dd1
0x00037dd5
0x00037dda
0x00037de2

APIs

__getptd.LIBCMT ref: 00037DB0

Part of subcall function 00035BB3: __getptd_noexit.LIBCMT ref: 00035BB6
Part of subcall function 00035BB3: __amsg_exit.LIBCMT ref: 00035BC3

__getptd.LIBCMT ref: 00037DC7
__amsg_exit.LIBCMT ref: 00037DD5
__lock.LIBCMT ref: 00037DE5

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: 4cd96dad9b36c881abaee5483da69a94c435a87d223a99f15e15e5e8da45a625
Instruction ID: 06f7911b16fedd6e14901d849fc59c911daa01bd2c3069f41b55193601f51876
Opcode Fuzzy Hash: 4cd96dad9b36c881abaee5483da69a94c435a87d223a99f15e15e5e8da45a625
Instruction Fuzzy Hash: 0AF090729097149BE773FB64C902BED72A8AF00711F104159E4486B6E3CBB49D01CA91

Uniqueness

Uniqueness Score: -1.00%

Function 00031976 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 180
stringCOMMON

Download Yara Rule

C-Code - Quality: 97%

			E00031976(void* __ecx, void* __edx, void* __eflags, intOrPtr _a4, WCHAR* _a8) {
				WCHAR* _v8;
				char _v12;
				void* __ebx;
				void* __edi;
				void* __esi;
				WCHAR* _t47;
				WCHAR* _t50;
				WCHAR* _t51;
				intOrPtr _t61;
				intOrPtr* _t74;
				signed int _t85;
				signed int _t86;
				signed int _t87;
				long _t101;
				signed int _t102;
				intOrPtr _t108;
				intOrPtr _t115;
				void* _t117;
				intOrPtr* _t119;
				void* _t122;
				signed int _t129;
				intOrPtr* _t132;
				signed int _t133;

				_t111 = __edx;
				E00032182( &_v8, __edx, __eflags, _a8);
				E00032291( &_v8, _a4 + 0x10);
				_t97 = _v8;
				_t47 =  &(_t97[lstrlenW(_t97)]);
				while(_t47 != _t97) {
					__eflags =  *_t47 - 0x5c;
					if( *_t47 == 0x5c) {
						L6:
						if(_t47 == 0) {
							L21:
							_t50 = E00032625(_t97 - 0x10, _t97) + 0x10;
							__eflags = _t50;
							_a8 = _t50;
							L22:
							_t115 =  *((intOrPtr*)(_t50 - 0xc));
							_t51 = E00032567( &_a8, _t115);
							_t101 = _t115 + 1;
							if(_t101 > 0x7fffffff) {
								L20:
								E00031000(0x80070057);
								goto L21;
							}
							CharLowerBuffW(_t51, _t101);
							L0003258D(_t115, _t97,  &_a8);
							_t97 = _a8;
							_t113 =  *((intOrPtr*)(_a8 - 0xc));
							if(_t113 <= 4) {
								L45:
								E000310B5(_t97 - 0x10, _t113);
								return E000310B5( &(_v8[0xfffffffffffffff8]), _t113);
							}
							_t61 = _t113;
							_t102 = _t61 - 4;
							_t117 = _t61 - _t102;
							_t129 = _t102;
							if(_t102 < 0) {
								_t129 = 0;
							}
							if(_t117 < 0) {
								_t117 = 0;
							}
							if(0x7fffffff - _t129 < _t117) {
								goto L20;
							} else {
								if(_t129 + _t117 > _t113) {
									_t117 = _t113 - _t129;
								}
								if(_t129 > _t113) {
									_t117 = 0;
								}
								if(_t129 != 0 || _t117 != _t113) {
									E0003237F(_t97, E00032458( &_a8), _t113, _t117,  &_v12,  &(_t97[_t129]));
								} else {
									_v12 = E00032625(_t97 - 0x10, _t97) + 0x10;
								}
								if(E0003C703(_v12, L".exe") != 0) {
									L44:
									E000310B5(_v12 + 0xfffffff0, _t113);
									goto L45;
								} else {
									_t119 = _a4 + 8;
									if( *((intOrPtr*)( *_t119 - 0xc)) != 0) {
										goto L44;
									}
									_t107 = _v8;
									_t74 = _v8 - 0x10;
									_t132 =  *_t119 - 0x10;
									if(_t74 == _t132) {
										goto L44;
									}
									if( *((intOrPtr*)(_t132 + 0xc)) < 0) {
										L43:
										E000325AF(_t119,  *((intOrPtr*)(_t107 - 0xc)), _t107, _t113, _t107);
										_t97 = _a8;
										goto L44;
									}
									_t113 =  *_t74;
									if( *_t74 !=  *_t132) {
										goto L43;
									}
									_a4 = E00032625(_t74, _t97);
									E000310B5(_t132, _t113);
									 *_t119 = _a4 + 0x10;
									goto L44;
								}
							}
						}
						_t85 = _t47 - _t97;
						_t86 = _t85 >> 1;
						if(_t85 < 0) {
							goto L21;
						}
						_t108 =  *((intOrPtr*)(_t97 - 0xc));
						_t87 = _t86 + 1;
						_t122 = _t108 - _t87;
						_t133 = _t87;
						if(_t87 < 0) {
							_t133 = 0;
						}
						if(_t122 < 0) {
							_t122 = 0;
						}
						if(0x7fffffff - _t133 < _t122) {
							goto L20;
						} else {
							if(_t133 + _t122 > _t108) {
								_t122 = _t108 - _t133;
							}
							if(_t133 > _t108) {
								_t122 = 0;
							}
							if(_t133 != 0 || _t122 != _t108) {
								E0003237F(_t97, E00032458( &_v8), _t111, _t122,  &_a8,  &(_t97[_t133]));
								_t50 = _a8;
								goto L22;
							} else {
								goto L21;
							}
						}
					}
					_t47 = _t47;
					__eflags = _t47;
				}
				if( *_t47 != 0x5c) {
					_t47 = 0;
				}
				goto L6;
			}

0x00031976
0x00031984
0x00031992
0x00031997
0x000319a1
0x000319ae
0x000319a6
0x000319aa
0x000319ba
0x000319bc
0x00031a23
0x00031a2b
0x00031a2b
0x00031a2e
0x00031a31
0x00031a31
0x00031a38
0x00031a3d
0x00031a46
0x00031a19
0x00031a1e
0x00000000
0x00031a1e
0x00031a4a
0x00031a54
0x00031a59
0x00031a5c
0x00031a62
0x00031b37
0x00031b3a
0x00031b4e
0x00031b4e
0x00031a68
0x00031a6a
0x00031a6f
0x00031a71
0x00031a75
0x00031a77
0x00031a77
0x00031a7b
0x00031a7d
0x00031a7d
0x00031a88
0x00000000
0x00031a8a
0x00031a8f
0x00031a93
0x00031a93
0x00031a97
0x00031a99
0x00031a99
0x00031a9d
0x00031ac4
0x00031aa3
0x00031aae
0x00031aae
0x00031ada
0x00031b2c
0x00031b32
0x00000000
0x00031adc
0x00031adf
0x00031ae8
0x00000000
0x00000000
0x00031aea
0x00031aef
0x00031af2
0x00031af7
0x00000000
0x00000000
0x00031afd
0x00031b1e
0x00031b24
0x00031b29
0x00000000
0x00031b29
0x00031aff
0x00031b03
0x00000000
0x00000000
0x00031b0a
0x00031b0f
0x00031b1a
0x00000000
0x00031b1a
0x00031ada
0x00031a88
0x000319be
0x000319c0
0x000319c2
0x00000000
0x00000000
0x000319c4
0x000319c7
0x000319ca
0x000319cc
0x000319d0
0x000319d2
0x000319d2
0x000319d6
0x000319d8
0x000319d8
0x000319e3
0x00000000
0x000319e5
0x000319ea
0x000319ee
0x000319ee
0x000319f2
0x000319f4
0x000319f4
0x000319f8
0x00031a0f
0x00031a14
0x00000000
0x00000000
0x00000000
0x00000000
0x000319f8
0x000319e3
0x000319ad
0x000319ad
0x000319ad
0x000319b6
0x000319b8
0x000319b8
0x00000000

APIs

Part of subcall function 00032291: __recalloc.LIBCMT ref: 000322CF

lstrlenW.KERNEL32(?,?), ref: 0003199B
CharLowerBuffW.USER32(00000000,?,?), ref: 00031A4A

Part of subcall function 00031000: RaiseException.KERNEL32(-C0000018,00000001,00000000,00000000,0003116A,80004005), ref: 0003101D

Strings

.exe, xrefs: 00031AC9

Memory Dump Source

Source File: 00000023.00000002.531161362.0000000000031000.00000020.00000001.01000000.00000005.sdmp, Offset: 00030000, based on PE: true

Associated: 00000023.00000002.531152075.0000000000030000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531177251.000000000003D000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531186855.0000000000040000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000023.00000002.531194380.0000000000042000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_35_2_30000_DropboxInstaller (1).jbxd

Similarity

API ID: BuffCharExceptionLowerRaise__recalloclstrlen
String ID: .exe
API String ID: 3500152368-4119554291
Opcode ID: 1a6c84b17593ea8e599c1a8b79a7f9b5953dd1d7193b44c8881837d7f9109c2a
Instruction ID: 5c386a43e0d97c0335d5b0384674d5a5b1f999adc2a18a2cd94d1a58e67efbe6
Opcode Fuzzy Hash: 1a6c84b17593ea8e599c1a8b79a7f9b5953dd1d7193b44c8881837d7f9109c2a
Instruction Fuzzy Hash: 41510632A00505ABCB17DF6CC885ADEB7EDEF48310F208625E824D7256DB30EE428B91

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: DropboxUpdate.exePID: 3588, Parent PID: 6352COMMON

Execution Graph

Execution Coverage:	5.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2%
Total number of Nodes:	967
Total number of Limit Nodes:	8

Executed Functions

Function 013415D8 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 71
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 96%

			E013415D8(void* __edi, void* __eflags, intOrPtr _a4, intOrPtr _a16) {
				WCHAR* _v8;
				char _v12;
				void* __ecx;
				char _t12;
				intOrPtr _t13;
				struct HINSTANCE__* _t18;
				struct HINSTANCE__* _t19;
				struct HINSTANCE__* _t24;
				struct HINSTANCE__* _t26;
				WCHAR* _t31;
				void* _t33;
				void* _t37;
				struct HINSTANCE__* _t39;
				struct HINSTANCE__* _t40;
				void* _t42;
				struct HINSTANCE__* _t43;
				struct HINSTANCE__* _t44;
				struct HINSTANCE__* _t45;
				void* _t49;

				_t49 = __eflags;
				_t12 = E01341195(); // executed
				_v12 = _t12;
				_t13 =  *0x134f0a4; // 0x1351254
				_v8 =  *((intOrPtr*)(_t13 + 0xc))(_t42, _t33, _t33) + 0x10;
				_t43 = E01341473(0x134f0a4, __edi, _t49, _a4, _v12,  &_v8);
				if(_t43 >= 0) {
					_t31 = _v8;
					_t18 = E0134137F(_t37, _t31, _v12); // executed
					__eflags = _t18;
					if(_t18 >= 0) {
						_t19 = LoadLibraryExW(_t31, 0, 0); // executed
						_t44 = _t19;
						__eflags = _t44;
						if(_t44 != 0) {
							_push(__edi);
							_t39 = GetProcAddress(_t44, "DllEntry");
							__eflags = _t39;
							if(_t39 == 0) {
								_t40 = 0x80004005;
							} else {
								_t26 = _t39->i(GetCommandLineW(), _a16); // executed
								_t40 = _t26;
							}
							FreeLibrary(_t44);
							_t45 = _t40;
							L5:
							E013410B5(_t31 - 0x10, _t37);
							_t24 = _t45;
							L2:
							return _t24;
						}
						_t18 = E013410CD();
					}
					_t45 = _t18;
					goto L5;
				}
				E013410B5( &(_v8[0xfffffffffffffff8]), _t37);
				_t24 = _t43;
				goto L2;
			}

0x013415d8
0x013415de
0x013415e3
0x013415e6
0x013415f6
0x01341608
0x0134160f
0x01341627
0x0134162b
0x01341632
0x01341634
0x0134164a
0x01341650
0x01341652
0x01341654
0x0134165d
0x0134166a
0x0134166c
0x0134166e
0x01341680
0x01341670
0x0134167a
0x0134167c
0x0134167c
0x01341686
0x0134168c
0x01341638
0x0134163b
0x01341640
0x0134161e
0x01341620
0x01341620
0x01341656
0x01341656
0x01341636
0x00000000
0x01341636
0x01341617
0x0134161c
0x00000000

APIs

Part of subcall function 01341195: GetModuleHandleW.KERNEL32(00000000), ref: 013411A0

Part of subcall function 01341473: _memset.LIBCMT ref: 01341494
Part of subcall function 01341473: _memset.LIBCMT ref: 013414AB
Part of subcall function 01341473: GetModuleFileNameW.KERNEL32(?,?,00000104), ref: 013414C3

LoadLibraryExW.KERNELBASE(?,00000000,00000000), ref: 0134164A
GetProcAddress.KERNEL32(00000000,DllEntry), ref: 01341664
GetCommandLineW.KERNEL32(?), ref: 01341673
FreeLibrary.KERNEL32(00000000), ref: 01341686

Strings

DllEntry, xrefs: 0134165E

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: LibraryModule_memset$AddressCommandFileFreeHandleLineLoadNameProc
String ID: DllEntry
API String ID: 3825151250-3608657831
Opcode ID: 6f92ce391af2c2c6a2594fd388fef131d5f10878e5dbfd9b8c57f94e4110f82e
Instruction ID: fb5a614b1c0b9a16253955bac12a42131b1e8449efbad662ece231f34a60ab62
Opcode Fuzzy Hash: 6f92ce391af2c2c6a2594fd388fef131d5f10878e5dbfd9b8c57f94e4110f82e
Instruction Fuzzy Hash: 2C110336A00A09ABC7216BA8DC04B9F76EC9F40278F190151ED01A7351EE78FD808BA5

Uniqueness

Uniqueness Score: -1.00%

Function 01341FA1 Relevance: 4.6, APIs: 3, Instructions: 68
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 18%

			E01341FA1(intOrPtr _a4, intOrPtr _a8) {
				char _v8;
				char _v12;
				char _v16;
				char _v20;
				void* __ebx;
				void* __edi;
				void* _t17;
				void* _t23;
				void* _t24;
				void* _t27;
				void* _t28;
				void* _t29;
				intOrPtr _t30;
				intOrPtr* _t32;

				_t30 = 0;
				if(_a4 != 0 && _a8 != 0) {
					_v20 = 0;
					_v16 = 0;
					_v12 = 0;
					_v8 = 0;
					_t17 =  *0x134eff0(1, _a4, 0x400, 0xe, 0,  &_v20,  &_v16,  &_v12,  &_v8, 0, 0); // executed
					if(_t17 == 0) {
						L10:
						if(_v8 != _t30) {
							return  *0x134effc(_v8, _t30);
						}
					} else {
						if(_v8 != 0) {
							_t32 =  *0x134eff8;
							_push(0);
							while(1) {
								_t17 =  *_t32(_v8);
								_t27 = _t17;
								if(_t27 == _t30) {
									goto L10;
								}
								_t23 = E01344BFB(_t27, _t29, _t30, __eflags);
								_t28 = 0x20;
								__eflags = _t23 - _t30;
								if(__eflags == 0) {
									_t24 = 0;
									__eflags = 0;
								} else {
									_t24 = E01341D35(_t28, _t23, __eflags, _t27);
									_t30 = 0;
								}
								E01341CD8(_a8, _t24);
								_push(_t27);
							}
							goto L10;
						}
					}
				}
				return _t17;
			}

0x01341faa
0x01341faf
0x01341fdb
0x01341fe0
0x01341fe3
0x01341fe6
0x01341fe9
0x01341ff1
0x01342030
0x01342033
0x00000000
0x01342039
0x01341ff3
0x01341ff6
0x01341ff8
0x01341ffe
0x01342025
0x01342028
0x0134202a
0x0134202e
0x00000000
0x00000000
0x01342003
0x01342008
0x01342009
0x0134200b
0x01342019
0x01342019
0x0134200d
0x01342010
0x01342015
0x01342015
0x0134201f
0x01342024
0x01342024
0x00000000
0x01342025
0x01341ff6
0x01341ff1
0x01342043

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,0000000E,00000000,?,?,?,?,00000000,00000000), ref: 01341FE9
CertEnumCertificatesInStore.CRYPT32(?,00000000), ref: 01342028
CertCloseStore.CRYPT32(?,00000000), ref: 01342039

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: CertStore$CertificatesCloseCryptEnumObjectQuery
String ID:
API String ID: 3699336955-0
Opcode ID: 1abfc729159008b62a7877faa711ef0bb9b56e37d13123ecb82bde3faeb74d03
Instruction ID: 62d610fb80b2bff197a57b93eb5b5cd6fa9297fb413f3ee6ae06383517ab8058
Opcode Fuzzy Hash: 1abfc729159008b62a7877faa711ef0bb9b56e37d13123ecb82bde3faeb74d03
Instruction Fuzzy Hash: B9116071900208FBDB219A999C44DAFBBFDFB84744F204166F601B2045EA71AA40DB60

Uniqueness

Uniqueness Score: -1.00%

Function 01341195 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 160
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 92%

			E01341195() {
				struct HINSTANCE__* _v8;
				char _v12;
				char _v13;
				char _v20;
				signed int _v24;
				WCHAR* _v28;
				signed int _v32;
				char _v550;
				char _v552;
				void* __ebx;
				void* __edi;
				void* __esi;
				struct HINSTANCE__* _t50;
				intOrPtr _t51;
				WCHAR* _t54;
				signed int _t58;
				void* _t63;
				void* _t74;
				WCHAR* _t79;
				signed int _t80;
				void* _t95;
				void* _t104;
				void* _t108;
				void* _t120;
				intOrPtr* _t124;
				intOrPtr _t126;
				void* _t127;
				struct HINSTANCE__* _t131;
				intOrPtr* _t132;
				signed int _t134;
				signed int _t135;

				_t50 = GetModuleHandleW(0);
				_v8 = _t50;
				if(_t50 != 0) {
					_t51 =  *0x134f0a4; // 0x1351254
					_v12 =  *((intOrPtr*)(_t51 + 0xc))(_t120, _t127, _t108) + 0x10;
					_t54 = E01341762( &_v12, 0x104);
					_t109 = _v12;
					if( *((intOrPtr*)(_t109 - 8)) < 0x104) {
						_t54 = E01341000(0x80070057);
					}
					 *(_t109 - 0xc) = 0x104;
					 *((short*)(_t109 + 0x208)) = 0;
					if(GetModuleFileNameW(_v8, _t54, 0x104) == 0) {
						L14:
						E013410B5(_t109 - 0x10, _t119);
						_t58 = 0;
					} else {
						E013416A6(_t119, _t109,  &_v8);
						PathRemoveFileSpecW(E01341762( &_v8,  *((intOrPtr*)(_v8 - 0xc))));
						_t131 = _v8;
						_t63 = E013447B5(_t131,  *((intOrPtr*)(_t131 - 8)));
						_pop(_t117);
						_t119 =  &_v8;
						E01341788(_t63,  &_v8);
						_v8 = _t131 - 0x10;
						_t18 = E01341897(_t131 - 0x10, _t109) + 0x10 - 0x10; // -32
						_t124 = _t18;
						_t132 = _t109 - 0x10;
						if(_t124 != _t132) {
							if( *((intOrPtr*)(_t132 + 0xc)) < 0) {
								L9:
								E01341821( &_v12,  *((intOrPtr*)(_t67 - 0xc)), _t117, _t67);
								_t109 = _v12;
							} else {
								_t117 =  *_t124;
								if( *_t124 !=  *_t132) {
									goto L9;
								} else {
									_t104 = E01341897(_t124, _t109);
									E013410B5(_t132,  &_v8);
									_t109 = _t104 + 0x10;
									_v12 = _t104 + 0x10;
								}
							}
						}
						E013410B5(_t124, _t119);
						_v552 = 0;
						E01344AE0(_t124,  &_v550, 0, 0x206);
						_t74 =  *0x134f004(0, 0x26, 0, 0,  &_v552); // executed
						if(_t74 < 0) {
							L13:
							E013410B5(_v8, _t119);
							goto L14;
						} else {
							_t134 =  &_v20;
							E013416A6(_t119,  &_v552, _t134);
							_v24 = _v24 | 0xffffffff;
							_v32 = _t134;
							_t79 = E01341762(_t134, 0x104);
							_v28 = _t79;
							_t80 = PathAppendW(_t79, L"Dropbox\\Update");
							asm("sbb al, al");
							_t118 =  &_v32;
							_v13 =  ~_t80 + 1;
							E0134173D( &_v32);
							if(_v13 == 0) {
								E01341703( &_v20,  &_v32);
								E01341703( &_v12,  &_v32);
								_t111 = _v20;
								_t126 = _v12;
								if(_v20 == 0 ||  *((intOrPtr*)(_t126 - 0xc)) < 0) {
									L18:
									_t135 = _t134 | 0xffffffff;
								} else {
									_t95 = E01341AA1(_t111, _t118, _t126);
									if(_t95 != 0) {
										_t135 = _t95 - _t126 >> 1;
									} else {
										goto L18;
									}
								}
								E013410B5(_v20 + 0xfffffff0, _t119);
								E013410B5(_v8, _t119);
								_t58 = E013410B5(_t126 - 0x10, _t119) & 0xffffff00 | _t135 == 0x00000000;
							} else {
								E013410B5(_v20 + 0xfffffff0, _t119);
								goto L13;
							}
						}
					}
					return _t58;
				} else {
					return 0;
				}
			}

0x013411a0
0x013411a6
0x013411ab
0x013411b1
0x013411cd
0x013411d0
0x013411d5
0x013411db
0x013411e2
0x013411e2
0x013411ee
0x013411f1
0x01341200
0x0134131a
0x0134131d
0x01341322
0x01341206
0x0134120b
0x0134121c
0x01341222
0x01341229
0x0134122f
0x01341230
0x01341233
0x0134123b
0x01341246
0x01341246
0x01341249
0x0134124e
0x01341254
0x01341274
0x0134127b
0x01341280
0x01341256
0x01341256
0x0134125a
0x00000000
0x0134125c
0x0134125e
0x01341267
0x0134126c
0x0134126f
0x0134126f
0x0134125a
0x01341254
0x01341285
0x01341291
0x013412a2
0x013412b6
0x013412be
0x01341312
0x01341315
0x00000000
0x013412c0
0x013412c6
0x013412c9
0x013412ce
0x013412d9
0x013412dc
0x013412e7
0x013412ea
0x013412f2
0x013412f6
0x013412f9
0x013412fc
0x01341305
0x01341329
0x01341331
0x01341336
0x01341339
0x0134133e
0x0134134f
0x0134134f
0x01341346
0x01341346
0x0134134d
0x01341358
0x00000000
0x00000000
0x00000000
0x0134134d
0x01341360
0x01341368
0x01341377
0x01341307
0x0134130d
0x00000000
0x0134130d
0x01341305
0x013412be
0x0134137e
0x013411ad
0x013411b0
0x013411b0

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 013411A0
GetModuleFileNameW.KERNEL32(?,00000000,00000104,00000104), ref: 013411F8
PathRemoveFileSpecW.SHLWAPI(00000000,?), ref: 0134121C
_memset.LIBCMT ref: 013412A2
SHGetFolderPathW.SHELL32(00000000,00000026,00000000,00000000,?), ref: 013412B6
PathAppendW.SHLWAPI(00000000,Dropbox\Update,00000104), ref: 013412EA

Strings

Dropbox\Update, xrefs: 013412E1

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: Path$FileModule$AppendFolderHandleNameRemoveSpec_memset
String ID: Dropbox\Update
API String ID: 4256937048-346123099
Opcode ID: 34a55eedbe9646cea30bf85b98cba8d0bae5e775368708d609cfef286d30a4b1
Instruction ID: 2250f6886ed9ca90b097531b77ff0ad99a64fc32663848b91b3239d8cedcb398
Opcode Fuzzy Hash: 34a55eedbe9646cea30bf85b98cba8d0bae5e775368708d609cfef286d30a4b1
Instruction Fuzzy Hash: C1519375E00616ABDF10EBECD988A9FBBF8EF14318F1405A5D510E7290DB30BA85CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0134210E Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 56
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 77%

			E0134210E(void* __eflags, char _a4) {
				char _v9;
				char _v10;
				char _v11;
				char _v12;
				char _v13;
				char _v14;
				char _v15;
				char _v16;
				short _v18;
				short _v20;
				char _v24;
				char _v36;
				char _v40;
				intOrPtr _v48;
				char* _v64;
				intOrPtr _v68;
				signed int _v72;
				intOrPtr _v76;
				char _v88;
				void* __edi;
				signed int _t35;
				signed int _t43;

				_v20 = 0xcd44;
				_v18 = 0x11d0;
				asm("stosd");
				asm("stosd");
				asm("stosd");
				_v36 = _a4;
				_v24 = 0xaac56b;
				_v16 = 0x8c;
				_v15 = 0xc2;
				_v14 = 0;
				_v13 = 0xc0;
				_v12 = 0x4f;
				_v11 = 0xc2;
				_v10 = 0x95;
				_v9 = 0xee;
				_v40 = 0x10;
				E01344AE0( &_v36,  &_v88, 0, 0x30);
				_v72 = _v72 & 0x00000000;
				_v64 =  &_v40;
				_push( &_v88);
				_t35 =  &_v24;
				_push(_t35);
				_push(0xffffffff);
				_v88 = 0x30;
				_v76 = 2;
				_v48 = 0x1080;
				_v68 = 1;
				L01342D1C(); // executed
				_t43 = _t35;
				if(_t43 == 0) {
					return 0;
				}
				if(_t43 >= 0 && _t35 > 0) {
					return _t35 & 0x0000ffff | 0x80070000;
				}
				return _t35;
			}

0x0134211a
0x01342123
0x0134212c
0x0134212d
0x0134212e
0x01342134
0x0134213d
0x01342144
0x01342148
0x0134214c
0x01342150
0x01342154
0x01342158
0x0134215c
0x01342160
0x01342164
0x0134216b
0x01342170
0x0134217a
0x01342180
0x01342181
0x01342184
0x01342185
0x01342187
0x0134218e
0x01342195
0x0134219c
0x013421a3
0x013421a8
0x013421aa
0x00000000
0x013421be
0x013421ac
0x00000000
0x013421b7
0x013421c2

APIs

_memset.LIBCMT ref: 0134216B

Strings

O, xrefs: 01342154
0, xrefs: 01342187

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: _memset
String ID: 0$O
API String ID: 2102423945-3433136421
Opcode ID: f9f826327ef82343d67a8cf6768c9f29559377f148c4b9c192d3a94c88f7dbe3
Instruction ID: 0391ef2820586b3dc782d53425265e63ffc9195afda4aeb9c68a8aa578bb929c
Opcode Fuzzy Hash: f9f826327ef82343d67a8cf6768c9f29559377f148c4b9c192d3a94c88f7dbe3
Instruction Fuzzy Hash: E8219075D04289AEEB11CBECD8047DEBBF4AF15324F104366E1A0FA2D1D3B49609C7A6

Uniqueness

Uniqueness Score: -1.00%

Function 01346F1C Relevance: 4.5, APIs: 3, Instructions: 45
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E01346F1C() {
				void* __ebx;
				void* __edi;
				void* __esi;
				WCHAR* _t1;
				void* _t5;
				void* _t18;
				WCHAR* _t20;

				_t1 = GetEnvironmentStringsW();
				_t20 = _t1;
				if(_t20 != 0) {
					if( *_t20 != 0) {
						goto L3;
						do {
							do {
								L3:
								_t1 =  &(_t1[1]);
							} while ( *_t1 != 0);
							_t1 =  &(_t1[1]);
						} while ( *_t1 != 0);
					}
					_t13 = _t1 - _t20 + 2;
					_t5 = E013484BB(_t1 - _t20 + 2); // executed
					_t18 = _t5;
					if(_t18 != 0) {
						E013455C0(_t13, _t18, _t20, _t18, _t20, _t13);
					}
					FreeEnvironmentStringsW(_t20);
					return _t18;
				} else {
					return 0;
				}
			}

0x01346f1f
0x01346f25
0x01346f2b
0x01346f34
0x00000000
0x01346f36
0x01346f36
0x01346f36
0x01346f37
0x01346f38
0x01346f3e
0x01346f3f
0x01346f36
0x01346f49
0x01346f4d
0x01346f52
0x01346f57
0x01346f69
0x01346f6e
0x01346f5a
0x01346f65
0x01346f2d
0x01346f30
0x01346f30

APIs

GetEnvironmentStringsW.KERNEL32(00000000,01344D42), ref: 01346F1F
__malloc_crt.LIBCMT ref: 01346F4D
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 01346F5A

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: EnvironmentStrings$Free__malloc_crt
String ID:
API String ID: 237123855-0
Opcode ID: 0403825423f35f048122f00e54b20e0488dbd5bc942fb3445afed97eb994bf1f
Instruction ID: cfb1d046e086a7ba3f7194157003ff12c2cb94504f1f96228dd76b68b2b5e0e5
Opcode Fuzzy Hash: 0403825423f35f048122f00e54b20e0488dbd5bc942fb3445afed97eb994bf1f
Instruction Fuzzy Hash: 36F0E2B6A142619FCB327E3D2C4987A16ACDBC722D3120469F4D3C3501F9205D8B43A0

Uniqueness

Uniqueness Score: -1.00%

Function 0134137F Relevance: 1.5, APIs: 1, Instructions: 29
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 59%

			E0134137F(void* __edx, intOrPtr _a4, char _a8) {
				void* _t6;
				void* _t7;
				signed char _t8;

				if(_a8 != 0 || E01341123(__edx) == 0) {
					L5:
					__eflags = 0;
					return 0;
				}
				_t6 =  *0x134f008();
				_t20 = _t6;
				if(_t6 == 0) {
					goto L5;
				}
				_t7 = E0134210E(_t20, _a4); // executed
				if(_t7 >= 0) {
					_t8 = E01342044(__edx, _a4); // executed
					asm("sbb eax, eax");
					return ( ~(_t8 & 0x000000ff) & 0x7ffbf4ff) + 0x80040b01;
				}
				return _t7;
			}

0x01341389
0x013413c7
0x013413c7
0x00000000
0x013413c7
0x01341394
0x0134139a
0x0134139c
0x00000000
0x00000000
0x013413a1
0x013413a9
0x013413ae
0x013413b8
0x00000000
0x013413c0
0x013413cc

APIs

Part of subcall function 01341123: _memset.LIBCMT ref: 01341143
Part of subcall function 01341123: VerSetConditionMask.KERNEL32(00000000,00000000,00000002,00000003), ref: 01341167
Part of subcall function 01341123: VerifyVersionInfoW.KERNEL32(0000011C,00000002,00000000), ref: 01341178

IsUserAnAdmin.SHELL32 ref: 01341394

Part of subcall function 0134210E: _memset.LIBCMT ref: 0134216B

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: _memset$AdminConditionInfoMaskUserVerifyVersion
String ID:
API String ID: 3088395943-0
Opcode ID: bed857b8417766d65e513ce223e3ab96521abd0544c85d877d644151b63776c8
Instruction ID: a76ae43a8a0a1822e16507c70c568ded29b2257e2a24b9e858dfb0318891d351
Opcode Fuzzy Hash: bed857b8417766d65e513ce223e3ab96521abd0544c85d877d644151b63776c8
Instruction Fuzzy Hash: 43E09223250D0B97EB206E7DEC023653BC84B0216CF189265AD58E59D0FE29F0D08695

Uniqueness

Uniqueness Score: -1.00%

Function 01347219 Relevance: 1.5, APIs: 1, Instructions: 20
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E01347219(intOrPtr _a4) {
				void* _t6;

				_t6 = HeapCreate(0 | _a4 == 0x00000000, 0x1000, 0); // executed
				 *0x134f704 = _t6;
				if(_t6 != 0) {
					 *0x1350c9c = 1;
					return 1;
				} else {
					return _t6;
				}
			}

0x0134722e
0x01347234
0x0134723b
0x01347242
0x01347248
0x0134723e
0x0134723e
0x0134723e

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000), ref: 0134722E

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: e68dc05776cfbc1b8927b97f44d043cdc53ae6ba3aed292c796d8616df6951cd
Instruction ID: 7c4c259dcf0aa810cbacf2fc59fb754470d06a6fcf85bba7e957524a71b733ae
Opcode Fuzzy Hash: e68dc05776cfbc1b8927b97f44d043cdc53ae6ba3aed292c796d8616df6951cd
Instruction Fuzzy Hash: 76D05E366903449FDB209EB5B8097223BDCD784BA5F048836B90DC7144EA75E5408B40

Uniqueness

Uniqueness Score: -1.00%

Function 01342CF7 Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E01342CF7() {

				E01342A48(0x1353774, 0x134f010); // executed
				goto __eax;
			}

0x01342ce4
0x01342ceb

APIs

___delayLoadHelper2@8.DELAYIMP ref: 01342CE4

Part of subcall function 01342A48: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 01342AC1

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: d4a76ac7b5aad880fabe25f95405cbb310564e75ef61bc985a4356300cab1e0f
Instruction ID: 091c0f8ea103505006169774f25e84566cae4701f8a0bfea0c78cc6e812e34cd
Opcode Fuzzy Hash: d4a76ac7b5aad880fabe25f95405cbb310564e75ef61bc985a4356300cab1e0f
Instruction Fuzzy Hash: F2B012C56E80066FF554A24D3D01E3741CCE4C0E1C320450EF840D0140D8407C440132

Uniqueness

Uniqueness Score: -1.00%

Function 01342D06 Relevance: 1.5, APIs: 1, Instructions: 9
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___delayLoadHelper2@8.DELAYIMP ref: 01342D13

Part of subcall function 01342A48: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 01342AC1

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: ccfb30c3d5d803d92a097824721c5041b2c4137b06df98f76749236c93190541
Instruction ID: 6fdf7b6c1a13e2057db544d30e82f3249d7ce148f2d4b41cafd7c78bb8042f46
Opcode Fuzzy Hash: ccfb30c3d5d803d92a097824721c5041b2c4137b06df98f76749236c93190541
Instruction Fuzzy Hash: 1BA011EAAA800A3EB228A2023C0AC3B02ACC8C0E2C3208A0EF800A0020A88028000032

Uniqueness

Uniqueness Score: -1.00%

Function 01342CF2 Relevance: 1.5, APIs: 1, Instructions: 9
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___delayLoadHelper2@8.DELAYIMP ref: 01342CE4

Part of subcall function 01342A48: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 01342AC1

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: da96b398d6b677dcf577028946368416efd1602d57fd04cd3dde29eef376a79a
Instruction ID: a76917df4f5bf235016ceb1ff7aeee1e1b885fc6caf1fc9d2ac73bab4ce7587f
Opcode Fuzzy Hash: da96b398d6b677dcf577028946368416efd1602d57fd04cd3dde29eef376a79a
Instruction Fuzzy Hash: 90A022C2AFC00BBEFA08A2823C02C3B828CC8C0FAC3308A0EFC02E0000AC803C800032

Uniqueness

Uniqueness Score: -1.00%

Function 01342CD7 Relevance: 1.5, APIs: 1, Instructions: 9
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___delayLoadHelper2@8.DELAYIMP ref: 01342CE4

Part of subcall function 01342A48: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 01342AC1

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 99d9d3082630281948dd14abe51fcbf70e51f0fc0fdf3780d9f7479d695ce0f1
Instruction ID: dad86766316d02ce55caa73e52b6b2239c83e527f344fb2e7697d3e60590d79a
Opcode Fuzzy Hash: 99d9d3082630281948dd14abe51fcbf70e51f0fc0fdf3780d9f7479d695ce0f1
Instruction Fuzzy Hash: 17A022C2AF800B3EFA08B2823E02C3B8A8CC8C0F2C330820EFC00F0800AC803C820032

Uniqueness

Uniqueness Score: -1.00%

Function 01342A28 Relevance: 1.5, APIs: 1, Instructions: 9
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___delayLoadHelper2@8.DELAYIMP ref: 01342A1A

Part of subcall function 01342A48: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 01342AC1

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: a766a342744e0fe4b00e1605c51e0c43727a49747fc3332376200f961ec40e4d
Instruction ID: 754be052e671e3859e46f609f05734de8f8ca7b5870e9033dc5412f6577db933
Opcode Fuzzy Hash: a766a342744e0fe4b00e1605c51e0c43727a49747fc3332376200f961ec40e4d
Instruction Fuzzy Hash: 14A011C2AA800BBEF228A2023C02C3B02ACC0E0EAC320882EFC02A8000AC80A8000032

Uniqueness

Uniqueness Score: -1.00%

Function 01342A0D Relevance: 1.5, APIs: 1, Instructions: 9
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___delayLoadHelper2@8.DELAYIMP ref: 01342A1A

Part of subcall function 01342A48: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 01342AC1

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 0a3e80f7b4d9370d4d8f18af7f988e92fb675340b2695855b57b48774f41fefb
Instruction ID: dd32bcfefa6cacd798fb59a410eee0725b67fe05c995693fe7f1f558c5ea118d
Opcode Fuzzy Hash: 0a3e80f7b4d9370d4d8f18af7f988e92fb675340b2695855b57b48774f41fefb
Instruction Fuzzy Hash: EEA011C2AA800A3EF228A2023E02C3B02ACC0E0F2C3A0802EFC00B8800AC80AC000032

Uniqueness

Uniqueness Score: -1.00%

Function 01345B5B Relevance: 1.5, APIs: 1, Instructions: 4
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E01345B5B() {
				void* _t1;

				_t1 = E01345AE9(0); // executed
				return _t1;
			}

0x01345b5d
0x01345b63

APIs

__encode_pointer.LIBCMT ref: 01345B5D

Part of subcall function 01345AE9: TlsGetValue.KERNEL32(00000000,?,01345B62,00000000,01349832,0134F1E0,00000000,00000314,?,01346A23,0134F1E0,Microsoft Visual C++ Runtime Library,00012010), ref: 01345AFB
Part of subcall function 01345AE9: TlsGetValue.KERNEL32(00000005,?,01345B62,00000000,01349832,0134F1E0,00000000,00000314,?,01346A23,0134F1E0,Microsoft Visual C++ Runtime Library,00012010), ref: 01345B12
Part of subcall function 01345AE9: RtlEncodePointer.NTDLL(00000000,?,01345B62,00000000,01349832,0134F1E0,00000000,00000314,?,01346A23,0134F1E0,Microsoft Visual C++ Runtime Library,00012010), ref: 01345B50

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: Value$EncodePointer__encode_pointer
String ID:
API String ID: 2585649348-0
Opcode ID: 803f2493e596d8626ad6034a517419c6540d4f0b379f743306c7ae298ba2cf5e
Instruction ID: 3e94a34069b2a18a3f9d68d6ed13a6be51acf66d14b2d79e0804095aba173062
Opcode Fuzzy Hash: 803f2493e596d8626ad6034a517419c6540d4f0b379f743306c7ae298ba2cf5e
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 01345ADA Relevance: 7.6, APIs: 5, Instructions: 58
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 85%

			E01345ADA(intOrPtr __eax, intOrPtr __ebx, intOrPtr __ecx, intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, char _a4) {
				intOrPtr _v0;
				void* _v804;
				intOrPtr _v808;
				intOrPtr _v812;
				intOrPtr _t6;
				intOrPtr _t11;
				intOrPtr _t12;
				intOrPtr _t13;
				long _t17;
				intOrPtr _t21;
				intOrPtr _t22;
				intOrPtr _t25;
				intOrPtr _t26;
				intOrPtr _t27;
				intOrPtr* _t31;
				void* _t34;

				_t27 = __esi;
				_t26 = __edi;
				_t25 = __edx;
				_t22 = __ecx;
				_t21 = __ebx;
				_t6 = __eax;
				_t34 = _t22 -  *0x134e2d0; // 0xb06ccdd2
				if(_t34 == 0) {
					asm("repe ret");
				}
				 *0x134f968 = _t6;
				 *0x134f964 = _t22;
				 *0x134f960 = _t25;
				 *0x134f95c = _t21;
				 *0x134f958 = _t27;
				 *0x134f954 = _t26;
				 *0x134f980 = ss;
				 *0x134f974 = cs;
				 *0x134f950 = ds;
				 *0x134f94c = es;
				 *0x134f948 = fs;
				 *0x134f944 = gs;
				asm("pushfd");
				_pop( *0x134f978);
				 *0x134f96c =  *_t31;
				 *0x134f970 = _v0;
				 *0x134f97c =  &_a4;
				 *0x134f8b8 = 0x10001;
				_t11 =  *0x134f970; // 0x0
				 *0x134f86c = _t11;
				 *0x134f860 = 0xc0000409;
				 *0x134f864 = 1;
				_t12 =  *0x134e2d0; // 0xb06ccdd2
				_v812 = _t12;
				_t13 =  *0x134e2d4; // 0x4f93322d
				_v808 = _t13;
				 *0x134f8b0 = IsDebuggerPresent();
				_push(1);
				E01345AD2(_t14);
				SetUnhandledExceptionFilter(0);
				_t17 = UnhandledExceptionFilter(0x13519d0);
				if( *0x134f8b0 == 0) {
					_push(1);
					E01345AD2(_t17);
				}
				return TerminateProcess(GetCurrentProcess(), 0xc0000409);
			}

0x01345ada
0x01345ada
0x01345ada
0x01345ada
0x01345ada
0x01345ada
0x01345ada
0x01345ae0
0x01345ae2
0x01345ae2
0x013488d3
0x013488d8
0x013488de
0x013488e4
0x013488ea
0x013488f0
0x013488f6
0x013488fd
0x01348904
0x0134890b
0x01348912
0x01348919
0x01348920
0x01348921
0x0134892a
0x01348932
0x0134893a
0x01348945
0x0134894f
0x01348954
0x01348959
0x01348963
0x0134896d
0x01348972
0x01348978
0x0134897d
0x01348989
0x0134898e
0x01348990
0x01348998
0x013489a3
0x013489b0
0x013489b2
0x013489b4
0x013489b9
0x013489cd

APIs

IsDebuggerPresent.KERNEL32 ref: 01348983
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 01348998
UnhandledExceptionFilter.KERNEL32(013519D0), ref: 013489A3
GetCurrentProcess.KERNEL32(C0000409), ref: 013489BF
TerminateProcess.KERNEL32(00000000), ref: 013489C6

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: e3229ad85cdff64545d8186076945f4f1575a61f8829849a081c875ab3892d01
Instruction ID: 602681edc8cec5894709e3ec8cf540d6709cccb40bd19806ced5f4d314dbd3ae
Opcode Fuzzy Hash: e3229ad85cdff64545d8186076945f4f1575a61f8829849a081c875ab3892d01
Instruction Fuzzy Hash: 6921CDBD902348EFE761EF6DF144A643BFCBB08714F18401AE50897268EBB06480CB05

Uniqueness

Uniqueness Score: -1.00%

Function 01345C50 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 57
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 92%

			E01345C50(void* __ebx, void* __edi, void* __esi, void* __eflags) {
				struct HINSTANCE__* _t23;
				intOrPtr _t28;
				intOrPtr _t32;
				intOrPtr _t45;
				void* _t46;

				_t35 = __ebx;
				_push(0xc);
				_push(0x1353138);
				E01344EA0(__ebx, __edi, __esi);
				_t44 = L"KERNEL32.DLL";
				_t23 = GetModuleHandleW(L"KERNEL32.DLL");
				if(_t23 == 0) {
					_t23 = E0134657C(_t44);
				}
				 *(_t46 - 0x1c) = _t23;
				_t45 =  *((intOrPtr*)(_t46 + 8));
				 *((intOrPtr*)(_t45 + 0x5c)) = 0x1351958;
				 *((intOrPtr*)(_t45 + 0x14)) = 1;
				if(_t23 != 0) {
					_t35 = GetProcAddress;
					 *((intOrPtr*)(_t45 + 0x1f8)) = GetProcAddress(_t23, "EncodePointer");
					 *((intOrPtr*)(_t45 + 0x1fc)) = GetProcAddress( *(_t46 - 0x1c), "DecodePointer");
				}
				 *((intOrPtr*)(_t45 + 0x70)) = 1;
				 *((char*)(_t45 + 0xc8)) = 0x43;
				 *((char*)(_t45 + 0x14b)) = 0x43;
				 *(_t45 + 0x68) = 0x134e638;
				E0134745B(_t35, 0xd);
				 *(_t46 - 4) =  *(_t46 - 4) & 0x00000000;
				InterlockedIncrement( *(_t45 + 0x68));
				 *(_t46 - 4) = 0xfffffffe;
				E01345D25();
				E0134745B(_t35, 0xc);
				 *(_t46 - 4) = 1;
				_t28 =  *((intOrPtr*)(_t46 + 0xc));
				 *((intOrPtr*)(_t45 + 0x6c)) = _t28;
				if(_t28 == 0) {
					_t32 =  *0x134e628; // 0x134e550
					 *((intOrPtr*)(_t45 + 0x6c)) = _t32;
				}
				E01348B17( *((intOrPtr*)(_t45 + 0x6c)));
				 *(_t46 - 4) = 0xfffffffe;
				return E01344EE5(E01345D2E());
			}

0x01345c50
0x01345c50
0x01345c52
0x01345c57
0x01345c5c
0x01345c62
0x01345c6a
0x01345c6d
0x01345c72
0x01345c73
0x01345c76
0x01345c79
0x01345c83
0x01345c88
0x01345c90
0x01345c98
0x01345ca8
0x01345ca8
0x01345cae
0x01345cb1
0x01345cb8
0x01345cbf
0x01345cc8
0x01345cce
0x01345cd5
0x01345cdb
0x01345ce2
0x01345ce9
0x01345cef
0x01345cf2
0x01345cf5
0x01345cfa
0x01345cfc
0x01345d01
0x01345d01
0x01345d07
0x01345d0d
0x01345d1e

APIs

GetModuleHandleW.KERNEL32(KERNEL32.DLL,01353138,0000000C,01345D8B,00000000,00000000), ref: 01345C62
__crt_waiting_on_module_handle.LIBCMT ref: 01345C6D

Part of subcall function 0134657C: Sleep.KERNEL32(000003E8,00000000,?,01345BB3,KERNEL32.DLL,?,01345BFF), ref: 01346588
Part of subcall function 0134657C: GetModuleHandleW.KERNEL32(?,?,01345BB3,KERNEL32.DLL,?,01345BFF), ref: 01346591

GetProcAddress.KERNEL32(00000000,EncodePointer), ref: 01345C96
GetProcAddress.KERNEL32(?,DecodePointer), ref: 01345CA6
__lock.LIBCMT ref: 01345CC8
InterlockedIncrement.KERNEL32(0134E638), ref: 01345CD5
__lock.LIBCMT ref: 01345CE9
___addlocaleref.LIBCMT ref: 01345D07

Strings

EncodePointer, xrefs: 01345C8A
KERNEL32.DLL, xrefs: 01345C5C, 01345C61, 01345C6C
DecodePointer, xrefs: 01345C9E

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: AddressHandleModuleProc__lock$IncrementInterlockedSleep___addlocaleref__crt_waiting_on_module_handle
String ID: DecodePointer$EncodePointer$KERNEL32.DLL
API String ID: 1028249917-2843748187
Opcode ID: d9bf07f730085de1e1a7c086af8206239e617832a04a7f61df7952b389374252
Instruction ID: fbe19f745950b996d3b3d81aad3098124149add0ae62ab1c44b37110b5f8712d
Opcode Fuzzy Hash: d9bf07f730085de1e1a7c086af8206239e617832a04a7f61df7952b389374252
Instruction Fuzzy Hash: D211AFB1900702EFD760EF79D804B9ABBF4AF14728F10451DE899E7290CB74AA41CF54

Uniqueness

Uniqueness Score: -1.00%

Function 01341473 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116
COMMON

Download Yara Rule

C-Code - Quality: 96%

			E01341473(void* __ecx, void* __edi, void* __eflags, struct HINSTANCE__* _a4, intOrPtr _a8, intOrPtr _a12) {
				WCHAR* _v8;
				char _v526;
				short _v528;
				char _v1046;
				short _v1048;
				intOrPtr _t46;
				void* _t50;
				void* _t58;
				WCHAR* _t66;
				void* _t72;
				void* _t77;

				_t72 = __edi;
				_v1048 = 0;
				E01344AE0(__edi,  &_v1046, 0, 0x206);
				_v528 = 0;
				E01344AE0(_t72,  &_v526, 0, 0x206);
				if(GetModuleFileNameW(_a4,  &_v1048, 0x104) != 0) {
					_push(_t72);
					PathRemoveFileSpecW( &_v1048);
					E0134486B( &_v528, 0x104,  &_v1048);
					_t66 = L"goopdate.dll";
					if(PathAppendW( &_v528, _t66) != 0) {
						_t71 =  &_v528;
						if(E013410EA( &_v528) == 0) {
							E0134486B( &_v528, 0x104,  &_v1048);
							_t46 =  *0x134f0a4; // 0x1351254
							_v8 =  *((intOrPtr*)(_t46 + 0xc))() + 0x10;
							_t50 = E013413CD( &_v8, 0x134f0a4, _a8);
							if(_t50 >= 0) {
								if(PathAppendW( &_v528, _v8) != 0) {
									if(PathAppendW( &_v528, _t66) == 0) {
										goto L12;
									}
									_t71 =  &_v528;
									if(E013410EA( &_v528) != 0) {
										E013416DA( &_v528, _a12,  &_v528);
										_t77 = 0;
									} else {
										_t77 = 0x80040b00;
									}
									L10:
									E013410B5( &(_v8[0xfffffffffffffff8]), _t71);
									_t58 = _t77;
									L4:
									return _t58;
								}
								L12:
								_t50 = E013410CD();
							}
							_t77 = _t50;
							goto L10;
						}
						E013416DA( &_v528, _a12,  &_v528);
						_t58 = 0;
						goto L4;
					}
					_t58 = E013410CD();
					goto L4;
				}
				return E013410CD();
			}

0x01341473
0x01341486
0x01341494
0x0134149d
0x013414ab
0x013414cb
0x013414d5
0x013414dd
0x013414f2
0x01341500
0x01341511
0x0134151d
0x0134152a
0x0134154e
0x01341553
0x01341569
0x0134156f
0x01341577
0x01341598
0x013415ad
0x00000000
0x00000000
0x013415af
0x013415bc
0x013415cf
0x013415d4
0x013415be
0x013415be
0x013415be
0x0134157b
0x01341581
0x01341586
0x01341518
0x00000000
0x01341519
0x0134159a
0x0134159a
0x0134159a
0x01341579
0x00000000
0x01341579
0x01341536
0x0134153b
0x00000000
0x0134153b
0x01341513
0x00000000
0x01341513
0x00000000

APIs

_memset.LIBCMT ref: 01341494
_memset.LIBCMT ref: 013414AB
GetModuleFileNameW.KERNEL32(?,?,00000104), ref: 013414C3
PathRemoveFileSpecW.SHLWAPI(?), ref: 013414DD
PathAppendW.SHLWAPI(?,?), ref: 01341594
PathAppendW.SHLWAPI(?,goopdate.dll), ref: 0134150D

Part of subcall function 013410CD: GetLastError.KERNEL32(0134159F), ref: 013410CD

Part of subcall function 013410EA: GetFileAttributesExW.KERNEL32(?,00000000,00000000), ref: 01341110

PathAppendW.SHLWAPI(?,goopdate.dll), ref: 013415A9

Strings

goopdate.dll, xrefs: 01341500, 01341505, 013415A1

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: Path$AppendFile$_memset$AttributesErrorLastModuleNameRemoveSpec
String ID: goopdate.dll
API String ID: 94394913-235033069
Opcode ID: 61a9f5b0aa5df0ebeb39f652703426852c1d7bec1402fb8fb337a63941481b2c
Instruction ID: df1fa81e2d4c9e53bb31a183d226af22085f713bef88f318cf20204a458ee7d5
Opcode Fuzzy Hash: 61a9f5b0aa5df0ebeb39f652703426852c1d7bec1402fb8fb337a63941481b2c
Instruction Fuzzy Hash: A04164B6D0061DEBDB21ABA8DC44EDB77EC9F54258F1441F1E519E3102E630BA848FE5

Uniqueness

Uniqueness Score: -1.00%

Function 0134C87C Relevance: 9.0, APIs: 6, Instructions: 49
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 90%

			E0134C87C(void* __ebx, intOrPtr __ecx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				intOrPtr _t48;
				intOrPtr _t57;
				void* _t58;
				void* _t61;

				_t61 = __eflags;
				_t53 = __edx;
				_push(0x2c);
				_push(0x13535f8);
				E01344EA0(__ebx, __edi, __esi);
				_t48 = __ecx;
				_t55 =  *((intOrPtr*)(_t58 + 0xc));
				_t57 =  *((intOrPtr*)(_t58 + 8));
				 *((intOrPtr*)(_t58 - 0x1c)) = __ecx;
				 *(_t58 - 0x34) =  *(_t58 - 0x34) & 0x00000000;
				 *((intOrPtr*)(_t58 - 0x24)) =  *((intOrPtr*)( *((intOrPtr*)(_t58 + 0xc)) - 4));
				 *((intOrPtr*)(_t58 - 0x28)) = E0134B7A7(_t58 - 0x3c,  *((intOrPtr*)(_t57 + 0x18)));
				 *((intOrPtr*)(_t58 - 0x2c)) =  *((intOrPtr*)(E01345DB0(__ecx, __edx, _t55, _t61) + 0x88));
				 *((intOrPtr*)(_t58 - 0x30)) =  *((intOrPtr*)(E01345DB0(_t48, __edx, _t55, _t61) + 0x8c));
				 *((intOrPtr*)(E01345DB0(_t48, _t53, _t55, _t61) + 0x88)) = _t57;
				 *((intOrPtr*)(E01345DB0(_t48, _t53, _t55, _t61) + 0x8c)) =  *((intOrPtr*)(_t58 + 0x10));
				 *(_t58 - 4) =  *(_t58 - 4) & 0x00000000;
				 *((intOrPtr*)(_t58 + 0x10)) = 1;
				 *(_t58 - 4) = 1;
				 *((intOrPtr*)(_t58 - 0x1c)) = E0134B84C(_t55,  *((intOrPtr*)(_t58 + 0x14)), _t48,  *((intOrPtr*)(_t58 + 0x18)),  *((intOrPtr*)(_t58 + 0x1c)));
				 *(_t58 - 4) =  *(_t58 - 4) & 0x00000000;
				 *(_t58 - 4) = 0xfffffffe;
				 *((intOrPtr*)(_t58 + 0x10)) = 0;
				E0134C9A2(_t48, _t53, _t55, _t57, _t61);
				return E01344EE5( *((intOrPtr*)(_t58 - 0x1c)));
			}

0x0134c87c
0x0134c87c
0x0134c87c
0x0134c87e
0x0134c883
0x0134c888
0x0134c88a
0x0134c88d
0x0134c890
0x0134c893
0x0134c89a
0x0134c8ab
0x0134c8b9
0x0134c8c7
0x0134c8cf
0x0134c8dd
0x0134c8e3
0x0134c8ea
0x0134c8ed
0x0134c903
0x0134c906
0x0134c97b
0x0134c982
0x0134c989
0x0134c996

APIs

__CreateFrameInfo.LIBCMT ref: 0134C8A4

Part of subcall function 0134B7A7: __getptd.LIBCMT ref: 0134B7B5
Part of subcall function 0134B7A7: __getptd.LIBCMT ref: 0134B7C3

__getptd.LIBCMT ref: 0134C8AE

Part of subcall function 01345DB0: __getptd_noexit.LIBCMT ref: 01345DB3
Part of subcall function 01345DB0: __amsg_exit.LIBCMT ref: 01345DC0

__getptd.LIBCMT ref: 0134C8BC
__getptd.LIBCMT ref: 0134C8CA
__getptd.LIBCMT ref: 0134C8D5
_CallCatchBlock2.LIBCMT ref: 0134C8FB

Part of subcall function 0134B84C: __CallSettingFrame@12.LIBCMT ref: 0134B898

Part of subcall function 0134C9A2: __getptd.LIBCMT ref: 0134C9B1
Part of subcall function 0134C9A2: __getptd.LIBCMT ref: 0134C9BF

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: __getptd$Call$Block2CatchCreateFrameFrame@12InfoSetting__amsg_exit__getptd_noexit
String ID:
API String ID: 1602911419-0
Opcode ID: 79cb00b51be3a436e80f2dd3506b682f82d46b0803a59c3b81b5fb1d3c989b91
Instruction ID: 0bc1fabcf584c2320b047ca525166587ae54b826df134cf76de85e1cdfd0f510
Opcode Fuzzy Hash: 79cb00b51be3a436e80f2dd3506b682f82d46b0803a59c3b81b5fb1d3c989b91
Instruction Fuzzy Hash: 6F11C9B1D0120ADFDF00EFA8C545AEEBBF1FF14318F508069E854A7250DB38A9559F90

Uniqueness

Uniqueness Score: -1.00%

Function 0134C5CB Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 22
COMMON

Download Yara Rule

C-Code - Quality: 74%

			E0134C5CB(void* __edx, void* __esi, intOrPtr* _a4) {
				signed int _v8;
				void* __ebp;
				intOrPtr* _t15;
				intOrPtr* _t18;
				void* _t22;
				void* _t24;

				_t25 = __esi;
				_t23 = __edx;
				_t30 =  *((intOrPtr*)( *_a4)) - 0xe0434f4d;
				if( *((intOrPtr*)( *_a4)) == 0xe0434f4d) {
					__eflags =  *((intOrPtr*)(E01345DB0(_t22, __edx, _t24, __eflags) + 0x90));
					if(__eflags > 0) {
						_t15 = E01345DB0(_t22, __edx, _t24, __eflags) + 0x90;
						 *_t15 =  *_t15 - 1;
						__eflags =  *_t15;
					}
					goto L9;
				} else {
					__eflags = __eax - 0xe06d7363;
					if(__eflags != 0) {
						L9:
						__eflags = 0;
						return 0;
					} else {
						 *(E01345DB0(__ebx, __edx, __edi, __eflags) + 0x90) =  *(__eax + 0x90) & 0x00000000;
						_push(8);
						_push(0x1353308);
						E01344EA0(_t22, _t24, __esi);
						_t18 =  *((intOrPtr*)(E01345DB0(_t22, __edx, _t24, _t30) + 0x78));
						if(_t18 != 0) {
							_v8 = _v8 & 0x00000000;
							 *_t18();
							_v8 = 0xfffffffe;
						}
						return E01344EE5(E0134A800(_t22, _t23, _t24, _t25));
					}
				}
			}

0x0134c5cb
0x0134c5cb
0x0134c5d7
0x0134c5dc
0x0134c5fb
0x0134c602
0x0134c609
0x0134c60e
0x0134c60e
0x0134c60e
0x00000000
0x0134c5de
0x0134c5de
0x0134c5e3
0x0134c610
0x0134c610
0x0134c613
0x0134c5e5
0x0134c5ea
0x013494cd
0x013494cf
0x013494d4
0x013494de
0x013494e3
0x013494e5
0x013494e9
0x013494f4
0x013494f4
0x01349505
0x01349505
0x0134c5e3

APIs

__getptd.LIBCMT ref: 0134C5E5

Part of subcall function 01345DB0: __getptd_noexit.LIBCMT ref: 01345DB3
Part of subcall function 01345DB0: __amsg_exit.LIBCMT ref: 01345DC0

__getptd.LIBCMT ref: 0134C5F6
__getptd.LIBCMT ref: 0134C604

Strings

MOC, xrefs: 0134C5D7
csm, xrefs: 0134C5DE

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: __getptd$__amsg_exit__getptd_noexit
String ID: MOC$csm
API String ID: 803148776-1389381023
Opcode ID: cd8104661248082a1ba45bb89a12638cd25ef095e5e6bfc86ec7947d6acd843f
Instruction ID: 21d280c17e46ca7641fadc4613976bb35fe4a47adbc659bcfa55eaafda93070e
Opcode Fuzzy Hash: cd8104661248082a1ba45bb89a12638cd25ef095e5e6bfc86ec7947d6acd843f
Instruction Fuzzy Hash: 50E0BF355121048FDB10EB6CD049B6937E5FF5922DF5954A1D44CC7323DB38F4519A52

Uniqueness

Uniqueness Score: -1.00%

Function 01348F19 Relevance: 7.5, APIs: 5, Instructions: 47
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 89%

			E01348F19(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				signed int _t15;
				LONG* _t21;
				long _t23;
				void* _t31;
				LONG* _t33;
				void* _t34;
				void* _t35;

				_t35 = __eflags;
				_t29 = __edx;
				_t25 = __ebx;
				_push(0xc);
				_push(0x13532a8);
				E01344EA0(__ebx, __edi, __esi);
				_t31 = E01345DB0(__ebx, __edx, __edi, _t35);
				_t15 =  *0x134eb9c; // 0xfffffffe
				if(( *(_t31 + 0x70) & _t15) == 0 ||  *((intOrPtr*)(_t31 + 0x6c)) == 0) {
					E0134745B(_t25, 0xd);
					 *(_t34 - 4) =  *(_t34 - 4) & 0x00000000;
					_t33 =  *(_t31 + 0x68);
					 *(_t34 - 0x1c) = _t33;
					__eflags = _t33 -  *0x134ea60; // 0x2dd1058
					if(__eflags != 0) {
						__eflags = _t33;
						if(_t33 != 0) {
							_t23 = InterlockedDecrement(_t33);
							__eflags = _t23;
							if(_t23 == 0) {
								__eflags = _t33 - 0x134e638;
								if(__eflags != 0) {
									_push(_t33);
									E01344E10(_t25, _t31, _t33, __eflags);
								}
							}
						}
						_t21 =  *0x134ea60; // 0x2dd1058
						 *(_t31 + 0x68) = _t21;
						_t33 =  *0x134ea60; // 0x2dd1058
						 *(_t34 - 0x1c) = _t33;
						InterlockedIncrement(_t33);
					}
					 *(_t34 - 4) = 0xfffffffe;
					E01348FB4();
				} else {
					_t33 =  *(_t31 + 0x68);
				}
				if(_t33 == 0) {
					E013465AC(_t29, _t31, 0x20);
				}
				return E01344EE5(_t33);
			}

0x01348f19
0x01348f19
0x01348f19
0x01348f19
0x01348f1b
0x01348f20
0x01348f2a
0x01348f2c
0x01348f34
0x01348f55
0x01348f5b
0x01348f5f
0x01348f62
0x01348f65
0x01348f6b
0x01348f6d
0x01348f6f
0x01348f72
0x01348f78
0x01348f7a
0x01348f7c
0x01348f82
0x01348f84
0x01348f85
0x01348f8a
0x01348f82
0x01348f7a
0x01348f8b
0x01348f90
0x01348f93
0x01348f99
0x01348f9d
0x01348f9d
0x01348fa3
0x01348faa
0x01348f3c
0x01348f3c
0x01348f3c
0x01348f41
0x01348f45
0x01348f4a
0x01348f52

APIs

__getptd.LIBCMT ref: 01348F25

Part of subcall function 01345DB0: __getptd_noexit.LIBCMT ref: 01345DB3
Part of subcall function 01345DB0: __amsg_exit.LIBCMT ref: 01345DC0

__amsg_exit.LIBCMT ref: 01348F45
__lock.LIBCMT ref: 01348F55
InterlockedDecrement.KERNEL32(?), ref: 01348F72
InterlockedIncrement.KERNEL32(02DD1058), ref: 01348F9D

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
String ID:
API String ID: 4271482742-0
Opcode ID: 7899d96b8e4d2b89a122398075fffb93e8e70fb4d666be48e5454466923c4ada
Instruction ID: 36033c603e1640fae19a10d499f4c6c303633565bf0cd4a630387f3a9a73d293
Opcode Fuzzy Hash: 7899d96b8e4d2b89a122398075fffb93e8e70fb4d666be48e5454466923c4ada
Instruction Fuzzy Hash: 8D01F935D05712E7EB31AFACA44475D7BE1BF01B18F044595EA0463680CB387595CFD1

Uniqueness

Uniqueness Score: -1.00%

Function 01344E10 Relevance: 7.5, APIs: 5, Instructions: 44
memoryCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 41%

			E01344E10(void* __ebx, void* __edi, void* __esi, void* __eflags) {
				intOrPtr* _t10;
				intOrPtr _t13;
				intOrPtr _t23;
				void* _t25;

				_push(0xc);
				_push(0x13530f8);
				_t8 = E01344EA0(__ebx, __edi, __esi);
				_t23 =  *((intOrPtr*)(_t25 + 8));
				if(_t23 == 0) {
					L9:
					return E01344EE5(_t8);
				}
				if( *0x1350c9c != 3) {
					_push(_t23);
					L7:
					_t8 = HeapFree( *0x134f704, 0, ??);
					_t31 = _t8;
					if(_t8 == 0) {
						_t10 = E01345577(_t31);
						 *_t10 = E01345535(GetLastError());
					}
					goto L9;
				}
				E0134745B(__ebx, 4);
				 *(_t25 - 4) =  *(_t25 - 4) & 0x00000000;
				_t13 = E0134748E(_t23);
				 *((intOrPtr*)(_t25 - 0x1c)) = _t13;
				if(_t13 != 0) {
					_push(_t23);
					_push(_t13);
					E013474BE();
				}
				 *(_t25 - 4) = 0xfffffffe;
				_t8 = E01344E66();
				if( *((intOrPtr*)(_t25 - 0x1c)) != 0) {
					goto L9;
				} else {
					_push( *((intOrPtr*)(_t25 + 8)));
					goto L7;
				}
			}

0x01344e10
0x01344e12
0x01344e17
0x01344e1c
0x01344e21
0x01344e98
0x01344e9d
0x01344e9d
0x01344e2a
0x01344e6f
0x01344e70
0x01344e78
0x01344e7e
0x01344e80
0x01344e82
0x01344e95
0x01344e97
0x00000000
0x01344e80
0x01344e2e
0x01344e34
0x01344e39
0x01344e3f
0x01344e44
0x01344e46
0x01344e47
0x01344e48
0x01344e4e
0x01344e4f
0x01344e56
0x01344e5f
0x00000000
0x01344e61
0x01344e61
0x00000000
0x01344e61

APIs

__lock.LIBCMT ref: 01344E2E

Part of subcall function 0134745B: __mtinitlocknum.LIBCMT ref: 01347471
Part of subcall function 0134745B: __amsg_exit.LIBCMT ref: 0134747D
Part of subcall function 0134745B: EnterCriticalSection.KERNEL32(01345D53,01345D53,?,01349C04,00000004,01353388,0000000C,01348516,00000001,01345D62,00000000,00000000,00000000,?,01345D62,00000001), ref: 01347485

___sbh_find_block.LIBCMT ref: 01344E39
___sbh_free_block.LIBCMT ref: 01344E48
HeapFree.KERNEL32(00000000,00000001,013530F8,0000000C,0134743C,00000000,01353208,0000000C,01347476,00000001,01345D53,?,01349C04,00000004,01353388,0000000C), ref: 01344E78
GetLastError.KERNEL32(?,01349C04,00000004,01353388,0000000C,01348516,00000001,01345D62,00000000,00000000,00000000,?,01345D62,00000001,00000214), ref: 01344E89

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2714421763-0
Opcode ID: f5fd4ccc3b79cf3daa9899bc3eb85e238fa3a18a73dca0e253699166eab4696d
Instruction ID: 51e1a9b4480de7be33b2d29e332246bd77ebc0dca30aabb8ffc364197a25c1d0
Opcode Fuzzy Hash: f5fd4ccc3b79cf3daa9899bc3eb85e238fa3a18a73dca0e253699166eab4696d
Instruction Fuzzy Hash: 0A016732904316EBDB316FB9A90575E3BE4AF50769F104525E509AB190CB34F5C18F54

Uniqueness

Uniqueness Score: -1.00%

Function 0134CC29 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 42
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 28%

			E0134CC29(void* __ebx, void* __ecx, void* __edx, intOrPtr* __edi, void* __esi, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28) {
				void* __ebp;
				void* _t20;
				void* _t22;
				void* _t23;
				void* _t25;
				intOrPtr* _t26;
				void* _t27;
				void* _t28;

				_t27 = __esi;
				_t26 = __edi;
				_t25 = __edx;
				_t23 = __ecx;
				_t22 = __ebx;
				_t30 = _a20;
				if(_a20 != 0) {
					_push(_a20);
					_push(__ebx);
					_push(__esi);
					_push(_a4);
					E0134CB97(__ebx, __edi, __esi, _t30);
					_t28 = _t28 + 0x10;
				}
				_t31 = _a28;
				_push(_a4);
				if(_a28 != 0) {
					_push(_a28);
				} else {
					_push(_t27);
				}
				E0134B4FF(_t23);
				_push( *_t26);
				_push(_a16);
				_push(_a12);
				_push(_t27);
				E0134C614(_t22, _t25, _t26, _t27, _t31);
				_push(0x100);
				_push(_a24);
				_push(_a16);
				 *((intOrPtr*)(_t27 + 8)) =  *((intOrPtr*)(_t26 + 4)) + 1;
				_push(_a8);
				_push(_t27);
				_push(_a4);
				_t20 = E0134C87C(_t22,  *((intOrPtr*)(_t22 + 0xc)), _t25, _t26, _t27, _t31);
				if(_t20 != 0) {
					E0134B4C6(_t20, _t27);
					return _t20;
				}
				return _t20;
			}

0x0134cc29
0x0134cc29
0x0134cc29
0x0134cc29
0x0134cc29
0x0134cc2e
0x0134cc32
0x0134cc34
0x0134cc37
0x0134cc38
0x0134cc39
0x0134cc3c
0x0134cc41
0x0134cc41
0x0134cc44
0x0134cc48
0x0134cc4b
0x0134cc50
0x0134cc4d
0x0134cc4d
0x0134cc4d
0x0134cc53
0x0134cc58
0x0134cc5a
0x0134cc5d
0x0134cc60
0x0134cc61
0x0134cc69
0x0134cc6e
0x0134cc72
0x0134cc75
0x0134cc78
0x0134cc7e
0x0134cc7f
0x0134cc82
0x0134cc8c
0x0134cc90
0x00000000
0x0134cc90
0x0134cc96

APIs

___BuildCatchObject.LIBCMT ref: 0134CC3C

Part of subcall function 0134CB97: ___BuildCatchObjectHelper.LIBCMT ref: 0134CBCD

_UnwindNestedFrames.LIBCMT ref: 0134CC53
___FrameUnwindToState.LIBCMT ref: 0134CC61

Strings

csm, xrefs: 0134CC38, 0134CC4D, 0134CC60, 0134CC7E, 0134CC8E

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: BuildCatchObjectUnwind$FrameFramesHelperNestedState
String ID: csm
API String ID: 2163707966-1018135373
Opcode ID: 62ba4ca7d0d020e836c442b27ad6fd2c54e46cc7d3c2671a468b6ffbd1c83ab9
Instruction ID: 16be7dee0e2b062e41fe780dcf0357e0f7650da248d2d5847435d797bb8882dd
Opcode Fuzzy Hash: 62ba4ca7d0d020e836c442b27ad6fd2c54e46cc7d3c2671a468b6ffbd1c83ab9
Instruction Fuzzy Hash: 15011D7100211ABBDF125F55CD44EEA7FAAEF18358F049010FD1825120D736E9B2DBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0134AF6A Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 16
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 79%

			E0134AF6A(void* __ebx, void* __edi, void* __esi, void* __eflags) {
				intOrPtr* _t27;
				intOrPtr* _t33;
				void* _t34;
				void* _t35;

				_t35 = __eflags;
				_push(0x44);
				E0134B8AC(E0134DC88, __ebx, __edi, __esi);
				E0134281B(__ebx, _t34 - 0x28, _t35, "invalid string position");
				 *(_t34 - 4) =  *(_t34 - 4) & 0x00000000;
				_t27 = _t34 - 0x50;
				E0134AEE3(_t27, _t34 - 0x28);
				E013464E0(_t34 - 0x50, 0x1353428);
				asm("int3");
				_push(4);
				E0134B8AC(E0134DCAB, __ebx, __edi, __esi);
				_t33 = _t27;
				 *((intOrPtr*)(_t34 - 0x10)) = _t33;
				E0134629E(_t27,  *((intOrPtr*)(_t34 + 8)));
				 *(_t34 - 4) =  *(_t34 - 4) & 0x00000000;
				 *_t33 = 0x1352b34;
				E013421C3(_t33 + 0xc,  *((intOrPtr*)(_t34 + 8)) + 0xc);
				return E0134B915(_t33);
			}

0x0134af6a
0x0134af6a
0x0134af71
0x0134af7e
0x0134af83
0x0134af8b
0x0134af8e
0x0134af9c
0x0134afa1
0x0134afa2
0x0134afa9
0x0134afae
0x0134afb0
0x0134afb7
0x0134afbc
0x0134afc7
0x0134afcd
0x0134afd9

APIs

__EH_prolog3.LIBCMT ref: 0134AF71
std::bad_exception::bad_exception.LIBCMT ref: 0134AF8E
__CxxThrowException@8.LIBCMT ref: 0134AF9C

Part of subcall function 013464E0: RaiseException.KERNEL32(?,?,01344C5F,?,?,?,?,?,01344C5F,?,0135307C,0134F0C4), ref: 01346522

Strings

invalid string position, xrefs: 0134AF76

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: ExceptionException@8H_prolog3RaiseThrowstd::bad_exception::bad_exception
String ID: invalid string position
API String ID: 3715482749-1799206989
Opcode ID: 5c0f9c9c13cd3e577489974311962bdca1118fefe2f6f45020f89458517c3184
Instruction ID: cd40d9641b73b2fdc4d729e4c77295642cb7076c771f214ea2e17a8198e84a7f
Opcode Fuzzy Hash: 5c0f9c9c13cd3e577489974311962bdca1118fefe2f6f45020f89458517c3184
Instruction Fuzzy Hash: 11D012719401099BDF04EAD4DC41EDE77B8AF24708F040014F11176140DAB4B6088624

Uniqueness

Uniqueness Score: -1.00%

Function 0134B9F9 Relevance: 6.1, APIs: 4, Instructions: 137
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 91%

			E0134B9F9(signed int __edx, signed int _a4, signed int _a8, signed int _a12, intOrPtr* _a16) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t59;
				intOrPtr* _t61;
				signed int _t63;
				void* _t68;
				signed int _t69;
				signed int _t72;
				signed int _t74;
				signed int _t75;
				signed int _t77;
				signed int _t78;
				signed int _t81;
				signed int _t82;
				signed int _t84;
				signed int _t88;
				signed int _t97;
				signed int _t98;
				signed int _t99;
				intOrPtr* _t100;
				void* _t101;

				_t90 = __edx;
				if(_a8 == 0 || _a12 == 0) {
					L4:
					return 0;
				} else {
					_t100 = _a16;
					_t105 = _t100;
					if(_t100 != 0) {
						_t82 = _a4;
						__eflags = _t82;
						if(__eflags == 0) {
							goto L3;
						}
						_t63 = _t59 | 0xffffffff;
						_t90 = _t63 % _a8;
						__eflags = _a12 - _t63 / _a8;
						if(__eflags > 0) {
							goto L3;
						}
						_t97 = _a8 * _a12;
						__eflags =  *(_t100 + 0xc) & 0x0000010c;
						_v8 = _t82;
						_v16 = _t97;
						_t81 = _t97;
						if(( *(_t100 + 0xc) & 0x0000010c) == 0) {
							_v12 = 0x1000;
						} else {
							_v12 =  *(_t100 + 0x18);
						}
						__eflags = _t97;
						if(_t97 == 0) {
							L32:
							return _a12;
						} else {
							do {
								_t84 =  *(_t100 + 0xc) & 0x00000108;
								__eflags = _t84;
								if(_t84 == 0) {
									L18:
									__eflags = _t81 - _v12;
									if(_t81 < _v12) {
										_t68 = E0134D290(_t90, _t97,  *_v8, _t100);
										__eflags = _t68 - 0xffffffff;
										if(_t68 == 0xffffffff) {
											L34:
											_t69 = _t97;
											L35:
											return (_t69 - _t81) / _a8;
										}
										_v8 = _v8 + 1;
										_t72 =  *(_t100 + 0x18);
										_t81 = _t81 - 1;
										_v12 = _t72;
										__eflags = _t72;
										if(_t72 <= 0) {
											_v12 = 1;
										}
										goto L31;
									}
									__eflags = _t84;
									if(_t84 == 0) {
										L21:
										__eflags = _v12;
										_t98 = _t81;
										if(_v12 != 0) {
											_t75 = _t81;
											_t90 = _t75 % _v12;
											_t98 = _t98 - _t75 % _v12;
											__eflags = _t98;
										}
										_push(_t98);
										_push(_v8);
										_push(E0134BB5B(_t90, _t98, _t100));
										_t74 = E0134C35F(_t81, _t90, _t98, _t100, __eflags);
										_t101 = _t101 + 0xc;
										__eflags = _t74 - 0xffffffff;
										if(_t74 == 0xffffffff) {
											L36:
											 *(_t100 + 0xc) =  *(_t100 + 0xc) | 0x00000020;
											_t69 = _v16;
											goto L35;
										} else {
											_t88 = _t98;
											__eflags = _t74 - _t98;
											if(_t74 <= _t98) {
												_t88 = _t74;
											}
											_v8 = _v8 + _t88;
											_t81 = _t81 - _t88;
											__eflags = _t74 - _t98;
											if(_t74 < _t98) {
												goto L36;
											} else {
												L27:
												_t97 = _v16;
												goto L31;
											}
										}
									}
									_t77 = E0134B2E0(_t100);
									__eflags = _t77;
									if(_t77 != 0) {
										goto L34;
									}
									goto L21;
								}
								_t78 =  *(_t100 + 4);
								__eflags = _t78;
								if(__eflags == 0) {
									goto L18;
								}
								if(__eflags < 0) {
									_t48 = _t100 + 0xc;
									 *_t48 =  *(_t100 + 0xc) | 0x00000020;
									__eflags =  *_t48;
									goto L34;
								}
								_t99 = _t81;
								__eflags = _t81 - _t78;
								if(_t81 >= _t78) {
									_t99 = _t78;
								}
								E013455C0(_t81, _t99, _t100,  *_t100, _v8, _t99);
								 *(_t100 + 4) =  *(_t100 + 4) - _t99;
								 *_t100 =  *_t100 + _t99;
								_t101 = _t101 + 0xc;
								_t81 = _t81 - _t99;
								_v8 = _v8 + _t99;
								goto L27;
								L31:
								__eflags = _t81;
							} while (_t81 != 0);
							goto L32;
						}
					}
					L3:
					_t61 = E01345577(_t105);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					 *_t61 = 0x16;
					E01344AA2(_t90, 0, _t100);
					goto L4;
				}
			}

0x0134b9f9
0x0134ba09
0x0134ba2f
0x00000000
0x0134ba10
0x0134ba10
0x0134ba13
0x0134ba15
0x0134ba36
0x0134ba39
0x0134ba3b
0x00000000
0x00000000
0x0134ba3d
0x0134ba42
0x0134ba45
0x0134ba48
0x00000000
0x00000000
0x0134ba4d
0x0134ba51
0x0134ba58
0x0134ba5b
0x0134ba5e
0x0134ba60
0x0134ba6a
0x0134ba62
0x0134ba65
0x0134ba65
0x0134ba71
0x0134ba73
0x0134bb38
0x00000000
0x0134ba79
0x0134ba79
0x0134ba7c
0x0134ba7c
0x0134ba82
0x0134bab3
0x0134bab3
0x0134bab6
0x0134bb0f
0x0134bb16
0x0134bb19
0x0134bb44
0x0134bb44
0x0134bb46
0x00000000
0x0134bb4a
0x0134bb1b
0x0134bb1e
0x0134bb21
0x0134bb22
0x0134bb25
0x0134bb27
0x0134bb29
0x0134bb29
0x00000000
0x0134bb27
0x0134bab8
0x0134baba
0x0134bac7
0x0134bac7
0x0134bacb
0x0134bacd
0x0134bad1
0x0134bad3
0x0134bad6
0x0134bad6
0x0134bad6
0x0134bad8
0x0134bad9
0x0134bae3
0x0134bae4
0x0134bae9
0x0134baec
0x0134baef
0x0134bb52
0x0134bb52
0x0134bb56
0x00000000
0x0134baf1
0x0134baf1
0x0134baf3
0x0134baf5
0x0134baf7
0x0134baf7
0x0134baf9
0x0134bafc
0x0134bafe
0x0134bb00
0x00000000
0x0134bb02
0x0134bb02
0x0134bb02
0x00000000
0x0134bb02
0x0134bb00
0x0134baef
0x0134babd
0x0134bac3
0x0134bac5
0x00000000
0x00000000
0x00000000
0x0134bac5
0x0134ba84
0x0134ba87
0x0134ba89
0x00000000
0x00000000
0x0134ba8b
0x0134bb40
0x0134bb40
0x0134bb40
0x00000000
0x0134bb40
0x0134ba91
0x0134ba93
0x0134ba95
0x0134ba97
0x0134ba97
0x0134ba9f
0x0134baa4
0x0134baa7
0x0134baa9
0x0134baac
0x0134baae
0x00000000
0x0134bb30
0x0134bb30
0x0134bb30
0x00000000
0x0134ba79
0x0134ba73
0x0134ba17
0x0134ba17
0x0134ba1c
0x0134ba1d
0x0134ba1e
0x0134ba1f
0x0134ba20
0x0134ba21
0x0134ba27
0x00000000
0x0134ba2c

APIs

__flush.LIBCMT ref: 0134BABD
__fileno.LIBCMT ref: 0134BADD
__locking.LIBCMT ref: 0134BAE4
__flsbuf.LIBCMT ref: 0134BB0F

Part of subcall function 01345577: __getptd_noexit.LIBCMT ref: 01345577

Part of subcall function 01344AA2: __decode_pointer.LIBCMT ref: 01344AAD

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: __decode_pointer__fileno__flsbuf__flush__getptd_noexit__locking
String ID:
API String ID: 3240763771-0
Opcode ID: 31c33063a9891cc21bec5d2f73d5dbaa019425493cb3a834fd605f4d9c9b93d4
Instruction ID: c0dfef89cd55a6af334deecb699c893d2f944b37e5b2dd43c01d0eab7d55587b
Opcode Fuzzy Hash: 31c33063a9891cc21bec5d2f73d5dbaa019425493cb3a834fd605f4d9c9b93d4
Instruction Fuzzy Hash: E841F431A00609EFEB24CFADC8845AEFBF6EF80369F288129D55597148D770FA51CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0134D5AC Relevance: 6.1, APIs: 4, Instructions: 103
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E0134D5AC(short* _a4, char* _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v8;
				signed int _v12;
				char _v20;
				char _t43;
				char _t46;
				signed int _t53;
				signed int _t54;
				intOrPtr _t56;
				int _t57;
				int _t58;
				signed short* _t59;
				short* _t60;
				int _t65;
				char* _t72;

				_t72 = _a8;
				if(_t72 == 0 || _a12 == 0) {
					L5:
					return 0;
				} else {
					if( *_t72 != 0) {
						E01348FBD( &_v20, _a16);
						_t43 = _v20;
						__eflags =  *(_t43 + 0x14);
						if( *(_t43 + 0x14) != 0) {
							_t46 = E0134ACAC( *_t72 & 0x000000ff,  &_v20);
							__eflags = _t46;
							if(_t46 == 0) {
								__eflags = _a4;
								__eflags = MultiByteToWideChar( *(_v20 + 4), 9, _t72, 1, _a4, 0 | _a4 != 0x00000000);
								if(__eflags != 0) {
									L10:
									__eflags = _v8;
									if(_v8 != 0) {
										_t53 = _v12;
										_t11 = _t53 + 0x70;
										 *_t11 =  *(_t53 + 0x70) & 0xfffffffd;
										__eflags =  *_t11;
									}
									return 1;
								}
								L21:
								_t54 = E01345577(__eflags);
								 *_t54 = 0x2a;
								__eflags = _v8;
								if(_v8 != 0) {
									_t54 = _v12;
									_t33 = _t54 + 0x70;
									 *_t33 =  *(_t54 + 0x70) & 0xfffffffd;
									__eflags =  *_t33;
								}
								return _t54 | 0xffffffff;
							}
							_t56 = _v20;
							_t65 =  *(_t56 + 0xac);
							__eflags = _t65 - 1;
							if(_t65 <= 1) {
								L17:
								__eflags = _a12 -  *(_t56 + 0xac);
								if(__eflags < 0) {
									goto L21;
								}
								__eflags = _t72[1];
								if(__eflags == 0) {
									goto L21;
								}
								L19:
								_t57 =  *(_t56 + 0xac);
								__eflags = _v8;
								if(_v8 == 0) {
									return _t57;
								}
								 *((intOrPtr*)(_v12 + 0x70)) =  *(_v12 + 0x70) & 0xfffffffd;
								return _t57;
							}
							__eflags = _a12 - _t65;
							if(_a12 < _t65) {
								goto L17;
							}
							__eflags = _a4;
							_t58 = MultiByteToWideChar( *(_t56 + 4), 9, _t72, _t65, _a4, 0 | _a4 != 0x00000000);
							__eflags = _t58;
							_t56 = _v20;
							if(_t58 != 0) {
								goto L19;
							}
							goto L17;
						}
						_t59 = _a4;
						__eflags = _t59;
						if(_t59 != 0) {
							 *_t59 =  *_t72 & 0x000000ff;
						}
						goto L10;
					} else {
						_t60 = _a4;
						if(_t60 != 0) {
							 *_t60 = 0;
						}
						goto L5;
					}
				}
			}

0x0134d5b6
0x0134d5bd
0x0134d5d4
0x00000000
0x0134d5c4
0x0134d5c6
0x0134d5e0
0x0134d5e5
0x0134d5e8
0x0134d5eb
0x0134d614
0x0134d61b
0x0134d61d
0x0134d69e
0x0134d6b9
0x0134d6bb
0x0134d5fb
0x0134d5fb
0x0134d5fe
0x0134d600
0x0134d603
0x0134d603
0x0134d603
0x0134d603
0x00000000
0x0134d609
0x0134d67d
0x0134d67d
0x0134d682
0x0134d688
0x0134d68b
0x0134d68d
0x0134d690
0x0134d690
0x0134d690
0x0134d690
0x00000000
0x0134d694
0x0134d61f
0x0134d622
0x0134d628
0x0134d62b
0x0134d652
0x0134d655
0x0134d65b
0x00000000
0x00000000
0x0134d65d
0x0134d660
0x00000000
0x00000000
0x0134d662
0x0134d662
0x0134d668
0x0134d66b
0x0134d5d9
0x0134d5d9
0x0134d674
0x00000000
0x0134d674
0x0134d62d
0x0134d630
0x00000000
0x00000000
0x0134d634
0x0134d645
0x0134d64b
0x0134d64d
0x0134d650
0x00000000
0x00000000
0x00000000
0x0134d650
0x0134d5ed
0x0134d5f0
0x0134d5f2
0x0134d5f8
0x0134d5f8
0x00000000
0x0134d5c8
0x0134d5c8
0x0134d5cd
0x0134d5d1
0x0134d5d1
0x00000000
0x0134d5cd
0x0134d5c6

APIs

_LocaleUpdate::_LocaleUpdate.LIBCMT ref: 0134D5E0
__isleadbyte_l.LIBCMT ref: 0134D614
MultiByteToWideChar.KERNEL32(00000080,00000009,?,?,01352D90,00000000,?,?,?,?,?), ref: 0134D645
MultiByteToWideChar.KERNEL32(00000080,00000009,?,00000001,01352D90,00000000,?,?,?,?,?), ref: 0134D6B3

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: ByteCharLocaleMultiWide$UpdateUpdate::___isleadbyte_l
String ID:
API String ID: 3058430110-0
Opcode ID: 38309c495d2658c04754f14757b4605e760e5908dd68833fb5d36510b3ad40a3
Instruction ID: c02709090b12db9aa6cc662b00c61f8db8fecbde69856863a981e4acd24507b1
Opcode Fuzzy Hash: 38309c495d2658c04754f14757b4605e760e5908dd68833fb5d36510b3ad40a3
Instruction Fuzzy Hash: 6B31C371A0024AEFDF21DFA8C8809BE7FE5FF11229F0585A9E5658B195DB30E940CB90

Uniqueness

Uniqueness Score: -1.00%

Function 01344BFB Relevance: 6.0, APIs: 4, Instructions: 34
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 95%

			E01344BFB(void* __ebx, void* __edx, void* __edi, void* __eflags, intOrPtr _a4) {
				intOrPtr _v0;
				char _v16;
				void* _t8;
				signed int _t9;
				void* _t13;
				void* _t17;
				void* _t25;
				void* _t26;

				_t26 = __edi;
				_t25 = __edx;
				_t17 = __ebx;
				while(1) {
					_t8 = E013463DF(_t17, _t25, _t26, _a4);
					if(_t8 != 0) {
						break;
					}
					_t9 = E013464B8(_a4);
					__eflags = _t9;
					if(_t9 == 0) {
						__eflags =  *0x134f0d0 & 0x00000001;
						if(( *0x134f0d0 & 0x00000001) == 0) {
							 *0x134f0d0 =  *0x134f0d0 | 0x00000001;
							__eflags =  *0x134f0d0;
							E01344B91(0x134f0c4);
							E013451B3( *0x134f0d0, 0x134dd59);
						}
						E01344BDE( &_v16, 0x134f0c4);
						E013464E0( &_v16, 0x135307c);
						asm("int3");
						__eflags =  *0x134f0dc - 1;
						if( *0x134f0dc == 1) {
							E01346A5F(_t26);
						}
						_t13 = E013468B4(_t25, _v0);
						E01346600(0xff);
						return _t13;
					} else {
						continue;
					}
					L10:
				}
				return _t8;
				goto L10;
			}

0x01344bfb
0x01344bfb
0x01344bfb
0x01344c12
0x01344c15
0x01344c1d
0x00000000
0x00000000
0x01344c08
0x01344c0e
0x01344c10
0x01344c21
0x01344c2d
0x01344c2f
0x01344c2f
0x01344c38
0x01344c42
0x01344c47
0x01344c4c
0x01344c5a
0x01344c5f
0x01344c65
0x01344c6c
0x01344c6e
0x01344c6e
0x01344c76
0x01344c80
0x01344c88
0x00000000
0x00000000
0x00000000
0x00000000
0x01344c10
0x01344c20
0x00000000

APIs

_malloc.LIBCMT ref: 01344C15

Part of subcall function 013463DF: __FF_MSGBANNER.LIBCMT ref: 01346402
Part of subcall function 013463DF: __NMSG_WRITE.LIBCMT ref: 01346409
Part of subcall function 013463DF: RtlAllocateHeap.NTDLL(00000000,-0000000E,00000001,00000000,00000000,?,013484CC,00000001,00000001,00000001,?,013473E5,00000018,01353208,0000000C,01347476), ref: 01346456

std::bad_alloc::bad_alloc.LIBCMT ref: 01344C38

Part of subcall function 01344B91: std::exception::exception.LIBCMT ref: 01344B9D

std::bad_exception::bad_exception.LIBCMT ref: 01344C4C
__CxxThrowException@8.LIBCMT ref: 01344C5A

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: AllocateException@8HeapThrow_mallocstd::bad_alloc::bad_allocstd::bad_exception::bad_exceptionstd::exception::exception
String ID:
API String ID: 1411284514-0
Opcode ID: aec0f8d763f738c891126a5f00c6cb60ef0fe9ca5eb0633a220da0f87e232005
Instruction ID: 33d23bbd22e87f98601e6783366c24f0fc92b5f9a410674f9c8e3c1d3c9cb455
Opcode Fuzzy Hash: aec0f8d763f738c891126a5f00c6cb60ef0fe9ca5eb0633a220da0f87e232005
Instruction Fuzzy Hash: 3BF0272890020A37DF14B76CEC02B4D3BDD9F5272CF084038DD0262594CF60FD008690

Uniqueness

Uniqueness Score: -1.00%

Function 01348C7D Relevance: 6.0, APIs: 4, Instructions: 31
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 90%

			E01348C7D(void* __ebx, void* __edx, intOrPtr __edi, void* __esi, void* __eflags) {
				signed int _t13;
				intOrPtr _t28;
				void* _t29;
				void* _t30;

				_t30 = __eflags;
				_t26 = __edi;
				_t25 = __edx;
				_t22 = __ebx;
				_push(0xc);
				_push(0x1353288);
				E01344EA0(__ebx, __edi, __esi);
				_t28 = E01345DB0(__ebx, __edx, __edi, _t30);
				_t13 =  *0x134eb9c; // 0xfffffffe
				if(( *(_t28 + 0x70) & _t13) == 0) {
					L6:
					E0134745B(_t22, 0xc);
					 *(_t29 - 4) =  *(_t29 - 4) & 0x00000000;
					_t8 = _t28 + 0x6c; // 0x6c
					_t26 =  *0x134e628; // 0x134e550
					 *((intOrPtr*)(_t29 - 0x1c)) = E01348C3F(_t8, _t26);
					 *(_t29 - 4) = 0xfffffffe;
					E01348CE7();
				} else {
					_t32 =  *((intOrPtr*)(_t28 + 0x6c));
					if( *((intOrPtr*)(_t28 + 0x6c)) == 0) {
						goto L6;
					} else {
						_t28 =  *((intOrPtr*)(E01345DB0(_t22, __edx, _t26, _t32) + 0x6c));
					}
				}
				if(_t28 == 0) {
					E013465AC(_t25, _t26, 0x20);
				}
				return E01344EE5(_t28);
			}

0x01348c7d
0x01348c7d
0x01348c7d
0x01348c7d
0x01348c7d
0x01348c7f
0x01348c84
0x01348c8e
0x01348c90
0x01348c98
0x01348cbc
0x01348cbe
0x01348cc4
0x01348cc8
0x01348ccb
0x01348cd6
0x01348cd9
0x01348ce0
0x01348c9a
0x01348c9a
0x01348c9e
0x00000000
0x01348ca0
0x01348ca5
0x01348ca5
0x01348c9e
0x01348caa
0x01348cae
0x01348cb3
0x01348cbb

APIs

__getptd.LIBCMT ref: 01348C89

Part of subcall function 01345DB0: __getptd_noexit.LIBCMT ref: 01345DB3
Part of subcall function 01345DB0: __amsg_exit.LIBCMT ref: 01345DC0

__getptd.LIBCMT ref: 01348CA0
__amsg_exit.LIBCMT ref: 01348CAE
__lock.LIBCMT ref: 01348CBE

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: 947455ed107afa6eb8252919d7573dfc858dea64b79dc39f00a0b14cb616b005
Instruction ID: 9251393ac746947940464014e7a05ecb3fa67b88ae905dad2f4e0e22c5e09107
Opcode Fuzzy Hash: 947455ed107afa6eb8252919d7573dfc858dea64b79dc39f00a0b14cb616b005
Instruction Fuzzy Hash: 90F09032942701DBEB61FFBC9805759B6E0AF10728F504199D944A7280CF787D41CB95

Uniqueness

Uniqueness Score: -1.00%

Function 0134C9A2 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 89%

			E0134C9A2(void* __ebx, void* __edx, void* __edi, intOrPtr* __esi, void* __eflags) {
				intOrPtr _t17;
				intOrPtr* _t28;
				void* _t29;

				_t30 = __eflags;
				_t28 = __esi;
				_t27 = __edi;
				_t26 = __edx;
				_t19 = __ebx;
				 *((intOrPtr*)(__edi - 4)) =  *((intOrPtr*)(_t29 - 0x24));
				E0134B7FA(__ebx, __edx, __edi, __eflags,  *((intOrPtr*)(_t29 - 0x28)));
				 *((intOrPtr*)(E01345DB0(__ebx, __edx, __edi, __eflags) + 0x88)) =  *((intOrPtr*)(_t29 - 0x2c));
				_t17 = E01345DB0(_t19, _t26, _t27, _t30);
				 *((intOrPtr*)(_t17 + 0x8c)) =  *((intOrPtr*)(_t29 - 0x30));
				if( *__esi == 0xe06d7363 &&  *((intOrPtr*)(__esi + 0x10)) == 3) {
					_t17 =  *((intOrPtr*)(__esi + 0x14));
					if(_t17 == 0x19930520 || _t17 == 0x19930521 || _t17 == 0x19930522) {
						if( *((intOrPtr*)(_t29 - 0x34)) == 0) {
							_t37 =  *((intOrPtr*)(_t29 - 0x1c));
							if( *((intOrPtr*)(_t29 - 0x1c)) != 0) {
								_t17 = E0134B7D3(_t37,  *((intOrPtr*)(_t28 + 0x18)));
								_t38 = _t17;
								if(_t17 != 0) {
									_push( *((intOrPtr*)(_t29 + 0x10)));
									_push(_t28);
									return E0134C73A(_t38);
								}
							}
						}
					}
				}
				return _t17;
			}

0x0134c9a2
0x0134c9a2
0x0134c9a2
0x0134c9a2
0x0134c9a2
0x0134c9a5
0x0134c9ab
0x0134c9b9
0x0134c9bf
0x0134c9c7
0x0134c9d3
0x0134c9db
0x0134c9e3
0x0134c9f7
0x0134c9f9
0x0134c9fd
0x0134ca02
0x0134ca08
0x0134ca0a
0x0134ca0c
0x0134ca0f
0x00000000
0x0134ca16
0x0134ca0a
0x0134c9fd
0x0134c9f7
0x0134c9e3
0x0134ca17

APIs

Part of subcall function 0134B7FA: __getptd.LIBCMT ref: 0134B800
Part of subcall function 0134B7FA: __getptd.LIBCMT ref: 0134B810

__getptd.LIBCMT ref: 0134C9B1

Part of subcall function 01345DB0: __getptd_noexit.LIBCMT ref: 01345DB3
Part of subcall function 01345DB0: __amsg_exit.LIBCMT ref: 01345DC0

__getptd.LIBCMT ref: 0134C9BF

Strings

csm, xrefs: 0134C9CD

Memory Dump Source

Source File: 0000002B.00000002.532256036.0000000001341000.00000020.00000001.01000000.00000006.sdmp, Offset: 01340000, based on PE: true

Associated: 0000002B.00000002.532189223.0000000001340000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532362020.000000000134E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532451175.0000000001351000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000002B.00000002.532701792.0000000001361000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_43_2_1340000_DropboxUpdate.jbxd

Similarity

API ID: __getptd$__amsg_exit__getptd_noexit
String ID: csm
API String ID: 803148776-1018135373
Opcode ID: b09ef202e9df23b19ea62c5d1af60ce089f47341fad3cfb4424f47b2f88d3e7a
Instruction ID: f46a2061f1c36e89dc823a1c9d150c64905aed2a7d254bca0d36ebf7b120fddb
Opcode Fuzzy Hash: b09ef202e9df23b19ea62c5d1af60ce089f47341fad3cfb4424f47b2f88d3e7a
Instruction Fuzzy Hash: EE016D348022059BEF35DF6CC4446ADBBF5BF10259F54642DD081A6651CF34E985CB51

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Joe Sandbox Signatures

Cryptography

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Dropbox\Update\1.3.541.1\DropboxUpdate.exe

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

C:\Users\user\AppData\Local\Google\Chrome\User Data\22425499-ab09-4fb3-a093-70eb4a853927.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\26920145-1d84-4d96-b09c-9b7cd6b38769.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\350346af-c6f4-4134-a5db-a374fbb70df0.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\37cf7758-b7ec-4082-b14a-77ab87beec42.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\3bf99f51-d396-4ac8-9210-0741faccf0ba.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\60216e20-a499-4cee-9b1b-5317638571f1.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\6d24d896-99bd-41ce-a97a-1bb1b074cdeb.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\000001.dbtmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\000002.dbtmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\06f4a26a-8f04-4ed0-9690-6f1747457442.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0a05326a-ee22-4f37-bbca-c4f550011321.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0fb85146-b940-4b72-88f5-f8cd8c97785e.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2fcee894-aa6e-49ea-af7b-fcabd6c461ec.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\530dc9fa-564f-4f57-9ab0-5711d8430d14.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\838149bb-36c8-4ca2-a66b-f4e8f9b41bf8.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8ee8b2c3-1896-40a8-b024-1c92f7e220b0.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8fc76a96-7398-4890-a158-b2e7c15a5773.tmp

Windows Analysis Report
https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading