Edit tour

Windows Analysis Report
Remittance advice.HTM

Overview

General Information

Sample Name:	Remittance advice.HTM
Analysis ID:	737385
MD5:	9756b5b36e4ad6292f7d66a2b057a464
SHA1:	cd8f0cbbe0bc3451b6cbd0cdf73b60a438cdfc74
SHA256:	02768ea1c862cdaf71cd58a8309d2d34313726a825b750b41823676283c3d0f8
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Multi AV Scanner detection for submitted file

HTML document with suspicious title

HTML document with suspicious name

HTML body contains low number of good links

Suspicious form URL found

IP address seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2888 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 2008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=1720,i,3077636488585137432,12682884879542634454,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 5304 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\Remittance advice.HTM MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
30138.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

System Summary

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM

Tab title: Remittance advice.HTM

HTML document with suspicious name

Source: Name includes: Remittance advice.HTM

Initial sample: advice

Source: Remittance advice.HTM

Virustotal: Detection: 11%

Source: classification engine

Classification label: mal64.phis.winHTM@28/0@6/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=1720,i,3077636488585137432,12682884879542634454,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\Remittance advice.HTM
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=1720,i,3077636488585137432,12682884879542634454,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Remittance advice.HTM	12%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://bailbondscharleston.com/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
gyazo.com	35.186.213.112	true	false	high
accounts.google.com	142.251.143.141	true	false	high
i.gyazo.com	104.18.36.4	true	false	high
www.google.com	142.251.143.164	true	false	high
clients.l.google.com	142.251.143.174	true	false	high
clients2.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
file:///C:/Users/user/Desktop/Remittance%20advice.HTM	true	low
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false	high
https://i.gyazo.com/8afd3a3cc52ffe121729f2f37188cc59.png	false	high
https://gyazo.com/8afd3a3cc52ffe121729f2f37188cc59.png	false	high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bailbondscharleston.com/	Remittance advice.HTM	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.186.213.112	gyazo.com	United States	15169	GOOGLEUS	false
142.251.143.132	unknown	United States	15169	GOOGLEUS	false
142.251.143.164	www.google.com	United States	15169	GOOGLEUS	false
142.251.143.174	clients.l.google.com	United States	15169	GOOGLEUS	false
142.251.143.141	accounts.google.com	United States	15169	GOOGLEUS	false
104.18.36.4	i.gyazo.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.1
192.168.2.3
127.0.0.1

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	737385
Start date and time:	2022-11-03 20:14:31 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	Remittance advice.HTM
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.winHTM@28/0@6/10
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .HTM

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 142.251.143.163, 34.104.35.123
Excluded domains from analysis (whitelisted): edgedl.me.gvt1.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtWriteVirtualMemory calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
239.255.255.250	https://www.prattlawllc.online	Get hash	malicious	Browse
	Remittance_Inv.htm	Get hash	malicious	Browse
	Payment Confirmation Slip.htm	Get hash	malicious	Browse
	http://keepas.org	Get hash	malicious	Browse
	Contract4364.html	Get hash	malicious	Browse
	Remittance.htm	Get hash	malicious	Browse
	http://hf.b8enr.acconsultoriace.com.br./#.aHR0cHM6Ly93d3cuaW50ZXJjb25zdWx0YW50cy1jby5jb20vZnYvb2ZmaWNlLyNkb24ueW91bmdAcnRkLWRlbnZlci5jb20=	Get hash	malicious	Browse
	http://iaula.edu	Get hash	malicious	Browse
	https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.google.com%2Furl%3Fq%3Dhttps%253A%252F%252Fgiftofeyesight.org%252FBold%252F3%252Findex.php%26sa%3DD%26sntz%3D1%26usg%3DAOvVaw1FGc7ABi5DezLswTZvHmUq	Get hash	malicious	Browse
	https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=FOcJU_yUAUaQ-S6E5IQrTF5qHKvYgnBDk7gGfP5lLGNUQU1HWFBMQzIxT0RNRjJQTEFXT05FSFVaMi4u	Get hash	malicious	Browse
	KKrjQcSj5J.exe	Get hash	malicious	Browse
	https://daihatsubanjarmasin.co.id/deom/cogiweb	Get hash	malicious	Browse
	https://files.catbox.moe/gkg6lt.img	Get hash	malicious	Browse
	https://files.catbox.moe/gkg6lt.img	Get hash	malicious	Browse
	http://grupoupc.net/n/	Get hash	malicious	Browse
	https://storageapi.fleek.co/4020b71f-3c66-4ac6-8388-80dcb2809c0b-bucket/dri/auth.html#cmlza21hbmFnZW1lbnRncm91cEBhY3Rpb25jYXJ0aW5nLmNvbQ0=	Get hash	malicious	Browse
	Contract6425.html	Get hash	malicious	Browse
	http://www.dci.co.uk	Get hash	malicious	Browse
	https://u.to/N7Rfha	Get hash	malicious	Browse
	https://docs.google.com/forms/d/e/1FAIpQLSfjEBuoSpu7BnNHQoeoNbjEZ_m6Qgi_tEsolALb3HFX3IwCBg/viewform	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
i.gyazo.com	https://onedrive.live.com/view.aspx?resid=F861D26FB6A6ED!20630&authkey=!AP5DEQuh80sw6JM&e=a39aa7eb&h=c0318ec7&f=y&p=n	Get hash	malicious	Browse	104.18.36.4
	DHL_Tracking_slip.html	Get hash	malicious	Browse	104.18.36.4
	https://www.newameircanfunding.com/&d=DwMGaQ	Get hash	malicious	Browse	104.18.36.4
	Loera Customs Account Statement.html	Get hash	malicious	Browse	104.18.36.4
	https://l.facebook.com/l.php?u=https%3A%2F%2Fcutt.ly%2FYBn3c9y%3Ffbclid%3DIwAR2PHCiRHrbXtHZ1rnYVQACIi99KpFW9KwBdAcw5Ie1BKy-wirpqoKgLTKo&h=AT1A5FeSltT1aaF40Zu0EB6m_wBw50ZWaeQSs1pXr0cL3lC7vOh1NQGT8AC4a04pLN8a5iC5pQOrlm_EEA4ALD0xdxqVOInfw1S1Kk5AxlymYfzZwqW31YW7wUd4x_N2d2Tp&__tn__=-UK-R&c%5B0%5D=AT05OhFkDWWqE11G3K3S-UfKDLWjkQUX2Mt_9-hSIUHBMgNWCmWQPg9OFPsiaol7ghx48Ww2nELQMJwLUhMZnwiimlvF_HIyR9YHWIhVs7h-iGIXWLqy5TbUDIktNVFAYHyxYaUSLMSHbLqyC96ySu2brWUkbjGEd8LDawRDOSyqhy_nf32mtw	Get hash	malicious	Browse	104.18.36.4
	https://docsend.com/view/sewy7xn7f9h76rpe	Get hash	malicious	Browse	172.64.151.252
	https://app.box.com/notes/1046177326765?s=r8vectbv0s4mntmp5mma9tpd31y0xiq7	Get hash	malicious	Browse	172.64.151.252
	invoice.html	Get hash	malicious	Browse	172.64.151.252
	https://www.evernote.com/shard/s641/client/snv?noteGuid=aae16bb5-2f54-45c7-ac7f-ecb3c662fcbb&noteKey=43b0ab6bf1aa626736d8801f94852f26&sn=https%3A%2F%2Fwww.evernote.com%2Fshard%2Fs641%2Fsh%2Faae16bb5-2f54-45c7-ac7f-ecb3c662fcbb%2F43b0ab6bf1aa626736d8801f94852f26&title=Helpuhear%2BCredit%2BInvoice%2BRequest	Get hash	malicious	Browse	172.64.151.252
	invoice.html	Get hash	malicious	Browse	104.18.36.4
	https://linkvend.com/08987_87545.html	Get hash	malicious	Browse	104.18.36.4
	INV- B-L & AirBill=PDF.htm	Get hash	malicious	Browse	172.64.151.252
	PO#0920.html	Get hash	malicious	Browse	172.64.151.252
	PO#0920.html	Get hash	malicious	Browse	104.18.36.4
	9c79505.html	Get hash	malicious	Browse	104.18.36.4
	michelle.canada@neweratech.com.html	Get hash	malicious	Browse	104.18.36.4
	Proof Of Payment.html	Get hash	malicious	Browse	104.18.36.4
	Proof Of Payment.html	Get hash	malicious	Browse	104.18.36.4
	Proof Of Payment.html	Get hash	malicious	Browse	172.64.151.252
	Ach_deposit.pdf.html	Get hash	malicious	Browse	172.64.151.252

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CLOUDFLARENETUS	Remittance_Inv.htm	Get hash	malicious	Browse	104.18.6.145
	unkemptly.exe	Get hash	malicious	Browse	104.21.48.6
	http://keepas.org	Get hash	malicious	Browse	104.21.20.107
	Specification 5678.exe	Get hash	malicious	Browse	188.114.97.3
	Remittance.htm	Get hash	malicious	Browse	104.18.10.207
	bittorrent_installer.exe	Get hash	malicious	Browse	104.18.87.101
	n4YA0lbCk3.elf	Get hash	malicious	Browse	104.18.206.86
	http://grupoupc.net/n/	Get hash	malicious	Browse	104.17.25.14
	https://storageapi.fleek.co/4020b71f-3c66-4ac6-8388-80dcb2809c0b-bucket/dri/auth.html#cmlza21hbmFnZW1lbnRncm91cEBhY3Rpb25jYXJ0aW5nLmNvbQ0=	Get hash	malicious	Browse	104.18.6.145
	Portfunktionen.exe	Get hash	malicious	Browse	188.114.96.3
	https://onedrive.live.com/view.aspx?resid=F861D26FB6A6ED!20630&authkey=!AP5DEQuh80sw6JM&e=a39aa7eb&h=c0318ec7&f=y&p=n	Get hash	malicious	Browse	104.18.36.4
	https://ncv.microsoft.com/EV9S91HYJ0	Get hash	malicious	Browse	104.17.25.14
	https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f1drv.ms%3a443%2fo%2fs%21BMzxR3xmWW83gnG7IYkke23yU41G%3fe%3dW6mH7fjQu0Cf7KFSgaYEJA%26at%3d9&c=E,1,jTMfj687b19s5rqqRcw81HKgrMiGv_8ohdBtf9u1m0cjDmTXx8tOx7OEXIFoB6rBnhpEhNAXull-rDi55JlYqhaO_MH1SvWmf8MIIBqc5ZAdhOY_OGYmO8isHW0,&typo=1	Get hash	malicious	Browse	104.17.25.14
	https://wowobau-my.sharepoint.com/:o:/g/personal/dominic_scheugenpflug_wowobau_onmicrosoft_com/EqWhyrv2POhKmCDNto_SqEkB2kBJLqXz1OxldnLYKCfiMQ?e=Voc6PP	Get hash	malicious	Browse	172.66.44.188
	https://wowobau-my.sharepoint.com/:o:/g/personal/dominic_scheugenpflug_wowobau_onmicrosoft_com/EqWhyrv2POhKmCDNto_SqEkB2kBJLqXz1OxldnLYKCfiMQ?e=Voc6PP	Get hash	malicious	Browse	172.66.44.188
	https://3e5g09rg-f0hwe8icvnbw-0r8ibvg-0wdnjcvh-089wf.obs.sa-brazil-1.myhuaweicloud.com/vert5gf-w0rfgwr-g9fjw-098rhnf-9ewnmf-9ejfe.html?AWSAccessKeyId=PSCXOHIDEMH06PBK3RL6&Expires=1669969254&Signature=czHGn7nUnHSxTE/NxNt86gVjtOw%3D#Z2NAdmlydHVhbGludGVsbGlnZW5jZWJyaWVmaW5nLmNvbQ==	Get hash	malicious	Browse	104.18.11.207
	Outstanding Invoice 799853 paid.html	Get hash	malicious	Browse	104.18.11.207
	https://fra1.digitaloceanspaces.com/fax-78/12543.html?YXNzYWZAaXJvbnNyYy5jb20=	Get hash	malicious	Browse	104.17.25.14
	Myfile.html	Get hash	malicious	Browse	104.17.25.14
	http://track.employedusa.com/?xtl=20yq56k69gr0wz9tqddp838m89v3affggqjsuiiiovd7q3pz6plrhtqlydiv2drxqzn3yewovkzbnzy9qfet10fz&ei=8147320749@elm.com&originalclickurlb=aHR0cHM6Ly9jYXItYWdlLnRvcD9lPVltOWlMbWhoYldsc2RHOXVRR055WVMxaGNtTXVaMk11WTJFPQ==	Get hash	malicious	Browse	104.16.169.131

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (557), with CRLF line terminators
Entropy (8bit):	5.762908229947297
TrID:	HyperText Markup Language (12001/1) 34.29% HyperText Markup Language (12001/1) 34.29% HyperText Markup Language (11001/1) 31.43%
File name:	Remittance advice.HTM
File size:	6812
MD5:	9756b5b36e4ad6292f7d66a2b057a464
SHA1:	cd8f0cbbe0bc3451b6cbd0cdf73b60a438cdfc74
SHA256:	02768ea1c862cdaf71cd58a8309d2d34313726a825b750b41823676283c3d0f8
SHA512:	0ab7f2f631246bc246b798afb58a42e5a05b6c81e966ae14450d603ab7894990d70eebd050fe91791b8fbe2c14fdd0a3e24983d7b2875b56d1eef29db7953ed4
SSDEEP:	192:ygH3RBQGuTfLZ5PHa6YyBPtnnAaLBPtnnAyTmdxuEmGo/:yyaTrPHaYP2cP2ouk/
TLSH:	78E153A887014E522210A2F4676F5BCD31304323AB555AB4FBF5B646EF1DE7008A2FF8
File Content Preview:	<script language="JavaScript">..</script>..<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">....<HTML><HEAD>..<META name=GENERATOR content="MSHTML 11.00.10570.1001">.... <style type="text/css">.. body{

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 3, 2022 20:15:29.784240007 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:29.784328938 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:29.784430027 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:29.787841082 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:29.787879944 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:29.787957907 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:29.789014101 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:29.789062023 CET	443	49697	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:29.789139986 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:29.789577007 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:29.789597034 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:29.789664984 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:29.790616035 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:29.790652990 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:29.791107893 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:29.791171074 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:29.791950941 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:29.791977882 CET	443	49697	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:29.792154074 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:29.792187929 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:29.878000021 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:29.895917892 CET	443	49697	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:29.919065952 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:29.920819044 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:30.067291021 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:30.082901955 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:30.083055973 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:30.102910995 CET	443	49697	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:30.103168964 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:30.110374928 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:30.257209063 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:30.257226944 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:30.257550955 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:30.257596016 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:30.257837057 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:30.257853985 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:30.257905006 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:30.258043051 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:30.258068085 CET	443	49697	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:30.258186102 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:30.258200884 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:30.258276939 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:30.258348942 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:30.258366108 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:30.259021997 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:30.259040117 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:30.259099007 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:30.259107113 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:30.259145021 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:30.259351969 CET	443	49697	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:30.259447098 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:30.260591030 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:30.260698080 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:30.367336035 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:31.340950012 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:31.340969086 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:31.341015100 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:31.341042995 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:31.341341972 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:31.341382980 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:31.341445923 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:31.341470957 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:31.341574907 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:31.341604948 CET	443	49697	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:31.341717005 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:31.341722965 CET	443	49697	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:31.341744900 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:31.341758966 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:31.341867924 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:31.341886997 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:31.396930933 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:31.397011042 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:31.397027969 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:31.397286892 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:31.397375107 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:31.400017977 CET	49695	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:31.400043011 CET	443	49695	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:31.407392979 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:31.407423019 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:15:31.407465935 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:31.407474995 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:31.407505035 CET	443	49697	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:31.425932884 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:31.426088095 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:31.426116943 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:31.426256895 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:31.426316977 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:31.507385015 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:15:31.507392883 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:31.590140104 CET	49696	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:15:31.590178013 CET	443	49696	142.251.143.141	192.168.2.5
Nov 3, 2022 20:15:31.963954926 CET	49700	443	192.168.2.5	35.186.213.112
Nov 3, 2022 20:15:31.964020014 CET	443	49700	35.186.213.112	192.168.2.5
Nov 3, 2022 20:15:31.964160919 CET	49700	443	192.168.2.5	35.186.213.112
Nov 3, 2022 20:15:31.965837002 CET	49700	443	192.168.2.5	35.186.213.112
Nov 3, 2022 20:15:31.965864897 CET	443	49700	35.186.213.112	192.168.2.5
Nov 3, 2022 20:15:32.019815922 CET	443	49700	35.186.213.112	192.168.2.5
Nov 3, 2022 20:15:32.020288944 CET	49700	443	192.168.2.5	35.186.213.112
Nov 3, 2022 20:15:32.020318031 CET	443	49700	35.186.213.112	192.168.2.5
Nov 3, 2022 20:15:32.022089005 CET	443	49700	35.186.213.112	192.168.2.5
Nov 3, 2022 20:15:32.022180080 CET	49700	443	192.168.2.5	35.186.213.112
Nov 3, 2022 20:15:32.034748077 CET	49700	443	192.168.2.5	35.186.213.112
Nov 3, 2022 20:15:32.034778118 CET	443	49700	35.186.213.112	192.168.2.5
Nov 3, 2022 20:15:32.034972906 CET	49700	443	192.168.2.5	35.186.213.112
Nov 3, 2022 20:15:32.034984112 CET	443	49700	35.186.213.112	192.168.2.5
Nov 3, 2022 20:15:32.035075903 CET	443	49700	35.186.213.112	192.168.2.5
Nov 3, 2022 20:15:32.120796919 CET	49702	443	192.168.2.5	142.251.143.164
Nov 3, 2022 20:15:32.120878935 CET	443	49702	142.251.143.164	192.168.2.5
Nov 3, 2022 20:15:32.120968103 CET	49702	443	192.168.2.5	142.251.143.164
Nov 3, 2022 20:15:32.121275902 CET	49702	443	192.168.2.5	142.251.143.164
Nov 3, 2022 20:15:32.121299982 CET	443	49702	142.251.143.164	192.168.2.5
Nov 3, 2022 20:15:32.167448044 CET	49700	443	192.168.2.5	35.186.213.112
Nov 3, 2022 20:15:32.167495012 CET	443	49700	35.186.213.112	192.168.2.5
Nov 3, 2022 20:15:32.168349981 CET	443	49700	35.186.213.112	192.168.2.5
Nov 3, 2022 20:15:32.168442011 CET	49700	443	192.168.2.5	35.186.213.112
Nov 3, 2022 20:15:32.178457022 CET	49700	443	192.168.2.5	35.186.213.112
Nov 3, 2022 20:15:32.178515911 CET	443	49700	35.186.213.112	192.168.2.5
Nov 3, 2022 20:15:32.206854105 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.206973076 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.207066059 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.207492113 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.207540035 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.223922968 CET	443	49702	142.251.143.164	192.168.2.5
Nov 3, 2022 20:15:32.224391937 CET	49702	443	192.168.2.5	142.251.143.164
Nov 3, 2022 20:15:32.224462032 CET	443	49702	142.251.143.164	192.168.2.5
Nov 3, 2022 20:15:32.225754023 CET	443	49702	142.251.143.164	192.168.2.5
Nov 3, 2022 20:15:32.225835085 CET	49702	443	192.168.2.5	142.251.143.164
Nov 3, 2022 20:15:32.228079081 CET	49702	443	192.168.2.5	142.251.143.164
Nov 3, 2022 20:15:32.228095055 CET	443	49702	142.251.143.164	192.168.2.5
Nov 3, 2022 20:15:32.228208065 CET	443	49702	142.251.143.164	192.168.2.5
Nov 3, 2022 20:15:32.283122063 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.283654928 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.283685923 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.285970926 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.286072969 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.288953066 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.288980961 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.289205074 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.289220095 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.289232969 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.367434025 CET	49702	443	192.168.2.5	142.251.143.164
Nov 3, 2022 20:15:32.367481947 CET	443	49702	142.251.143.164	192.168.2.5
Nov 3, 2022 20:15:32.367505074 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.367527962 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.378458977 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.378516912 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.378632069 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.378701925 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.378748894 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.378774881 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.378787994 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.378817081 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.378850937 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.378947020 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.379038095 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.379082918 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.379092932 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.379633904 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.379698038 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.379709959 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.379719973 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.379756927 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.379776955 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.380405903 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.380455017 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.380475044 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.380485058 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.380517006 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.380533934 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.381210089 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.381262064 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.381294012 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.381305933 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.381347895 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.381958008 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.382083893 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.382127047 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.382164955 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.382177114 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.382217884 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.395447969 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.395560980 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.395598888 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.395636082 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.395644903 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.395658970 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.395701885 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.395709991 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.395757914 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.396155119 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.396228075 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.396284103 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.396291018 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.396996021 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.397066116 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.397073984 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.397396088 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.397434950 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.397448063 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.397454977 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.397511959 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.397519112 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.398230076 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.398302078 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.398309946 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.399014950 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.399118900 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.399130106 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.399178028 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.399821043 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.399869919 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.399955034 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.399965048 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.400010109 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.400607109 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.400697947 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.401390076 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.401480913 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.402208090 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.402287960 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.403023005 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.403069973 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.403132915 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.403143883 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.403162003 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.403883934 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.403983116 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.404000044 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.404047012 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.412532091 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.412710905 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.413160086 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.413279057 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.413872004 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.413938999 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.413961887 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.413995981 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.414020061 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.414048910 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.415092945 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.415189981 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.415858030 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.415925026 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.415931940 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.415961027 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.415982008 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.416357040 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.416419029 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.416431904 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.416450977 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.416491032 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.416516066 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.417275906 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.417366028 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.418103933 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.418190956 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.418806076 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.418870926 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.418915987 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.418950081 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.418970108 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.419002056 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.419775963 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.419859886 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.420521975 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.420588970 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.420629978 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.420659065 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.420675993 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.421389103 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.421477079 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.421483994 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.421504974 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.421550989 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.422347069 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.422458887 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.422483921 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.422538042 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.423011065 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.423090935 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.423846960 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.423907042 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.423949003 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.423980951 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.423998117 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.424705029 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.424771070 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.424784899 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.424812078 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.424829960 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.425537109 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.425610065 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.425614119 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.425637960 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.425673962 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.426964998 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.427047014 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.427078962 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.427110910 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.427129030 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.427773952 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.427836895 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.427875042 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.427902937 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.427921057 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.429657936 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.429724932 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.429758072 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.429783106 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.429797888 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.431590080 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.431637049 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.431715965 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.431744099 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.431760073 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.432534933 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.432564974 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.432627916 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.432651997 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.432667971 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.439762115 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.439805031 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.439940929 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.439979076 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.440943003 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.440974951 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.441102028 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.441128016 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.441167116 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.441884995 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.441921949 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.442071915 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.442115068 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.442162037 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.443566084 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.443598032 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.443720102 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.443720102 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.443756104 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.444485903 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.444525957 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.444601059 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.444624901 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.444643021 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.445440054 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.445470095 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.445542097 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.445561886 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.445619106 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.447077036 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.447112083 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.447182894 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.447233915 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.447253942 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.448127031 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.448153973 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.448235035 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.448259115 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.448276997 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.449156046 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.449188948 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.449270964 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.449297905 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.449315071 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.449481010 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.450115919 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.450146914 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.450225115 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.450248003 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.450262070 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.450645924 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.450711966 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.450769901 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.450790882 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.450819016 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.450844049 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.450896025 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.452369928 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.453433990 CET	49703	443	192.168.2.5	104.18.36.4
Nov 3, 2022 20:15:32.453464985 CET	443	49703	104.18.36.4	192.168.2.5
Nov 3, 2022 20:15:32.467478991 CET	49702	443	192.168.2.5	142.251.143.164
Nov 3, 2022 20:15:42.185374975 CET	443	49702	142.251.143.164	192.168.2.5
Nov 3, 2022 20:15:42.185529947 CET	443	49702	142.251.143.164	192.168.2.5
Nov 3, 2022 20:15:42.185775042 CET	49702	443	192.168.2.5	142.251.143.164
Nov 3, 2022 20:15:45.104479074 CET	49702	443	192.168.2.5	142.251.143.164
Nov 3, 2022 20:15:45.104527950 CET	443	49702	142.251.143.164	192.168.2.5
Nov 3, 2022 20:16:16.411684036 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:16:16.411727905 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:16:16.411803961 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:16:16.411844015 CET	443	49697	142.251.143.141	192.168.2.5
Nov 3, 2022 20:16:32.733525038 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:16:32.733742952 CET	443	49697	142.251.143.141	192.168.2.5
Nov 3, 2022 20:16:32.733815908 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:16:32.733961105 CET	49697	443	192.168.2.5	142.251.143.141
Nov 3, 2022 20:16:32.734071016 CET	443	49698	142.251.143.174	192.168.2.5
Nov 3, 2022 20:16:32.734170914 CET	49698	443	192.168.2.5	142.251.143.174
Nov 3, 2022 20:16:33.035226107 CET	49745	443	192.168.2.5	142.251.143.132
Nov 3, 2022 20:16:33.035304070 CET	443	49745	142.251.143.132	192.168.2.5
Nov 3, 2022 20:16:33.035409927 CET	49745	443	192.168.2.5	142.251.143.132
Nov 3, 2022 20:16:33.035718918 CET	49745	443	192.168.2.5	142.251.143.132
Nov 3, 2022 20:16:33.035756111 CET	443	49745	142.251.143.132	192.168.2.5
Nov 3, 2022 20:16:33.117314100 CET	443	49745	142.251.143.132	192.168.2.5
Nov 3, 2022 20:16:33.144140959 CET	49745	443	192.168.2.5	142.251.143.132
Nov 3, 2022 20:16:33.144221067 CET	443	49745	142.251.143.132	192.168.2.5
Nov 3, 2022 20:16:33.145919085 CET	443	49745	142.251.143.132	192.168.2.5
Nov 3, 2022 20:16:33.146476984 CET	49745	443	192.168.2.5	142.251.143.132
Nov 3, 2022 20:16:33.146509886 CET	443	49745	142.251.143.132	192.168.2.5
Nov 3, 2022 20:16:33.146699905 CET	443	49745	142.251.143.132	192.168.2.5
Nov 3, 2022 20:16:33.194892883 CET	49745	443	192.168.2.5	142.251.143.132
Nov 3, 2022 20:16:43.102264881 CET	443	49745	142.251.143.132	192.168.2.5
Nov 3, 2022 20:16:43.102416992 CET	443	49745	142.251.143.132	192.168.2.5
Nov 3, 2022 20:16:43.102624893 CET	49745	443	192.168.2.5	142.251.143.132
Nov 3, 2022 20:17:28.115210056 CET	49745	443	192.168.2.5	142.251.143.132
Nov 3, 2022 20:17:28.115245104 CET	443	49745	142.251.143.132	192.168.2.5
Nov 3, 2022 20:18:13.124062061 CET	49745	443	192.168.2.5	142.251.143.132
Nov 3, 2022 20:18:13.124104977 CET	443	49745	142.251.143.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 3, 2022 20:15:28.790319920 CET	50295	53	192.168.2.5	8.8.8.8
Nov 3, 2022 20:15:28.791981936 CET	60841	53	192.168.2.5	8.8.8.8
Nov 3, 2022 20:15:28.809617043 CET	53	60841	8.8.8.8	192.168.2.5
Nov 3, 2022 20:15:28.809839010 CET	53	50295	8.8.8.8	192.168.2.5
Nov 3, 2022 20:15:31.811510086 CET	49177	53	192.168.2.5	8.8.8.8
Nov 3, 2022 20:15:31.831089973 CET	53	49177	8.8.8.8	192.168.2.5
Nov 3, 2022 20:15:32.097313881 CET	61452	53	192.168.2.5	8.8.8.8
Nov 3, 2022 20:15:32.119220018 CET	53	61452	8.8.8.8	192.168.2.5
Nov 3, 2022 20:15:32.182951927 CET	65323	53	192.168.2.5	8.8.8.8
Nov 3, 2022 20:15:32.205398083 CET	53	65323	8.8.8.8	192.168.2.5
Nov 3, 2022 20:16:32.645003080 CET	60019	53	192.168.2.5	8.8.8.8
Nov 3, 2022 20:16:32.662322044 CET	53	60019	8.8.8.8	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 3, 2022 20:15:28.790319920 CET	192.168.2.5	8.8.8.8	0x7fee	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Nov 3, 2022 20:15:28.791981936 CET	192.168.2.5	8.8.8.8	0xf0f8	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Nov 3, 2022 20:15:31.811510086 CET	192.168.2.5	8.8.8.8	0x8e8e	Standard query (0)	gyazo.com	A (IP address)	IN (0x0001)	false
Nov 3, 2022 20:15:32.097313881 CET	192.168.2.5	8.8.8.8	0x8030	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 3, 2022 20:15:32.182951927 CET	192.168.2.5	8.8.8.8	0x99e4	Standard query (0)	i.gyazo.com	A (IP address)	IN (0x0001)	false
Nov 3, 2022 20:16:32.645003080 CET	192.168.2.5	8.8.8.8	0xab9a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 3, 2022 20:15:28.809617043 CET	8.8.8.8	192.168.2.5	0xf0f8	No error (0)	accounts.google.com		142.251.143.141	A (IP address)	IN (0x0001)	false
Nov 3, 2022 20:15:28.809839010 CET	8.8.8.8	192.168.2.5	0x7fee	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 3, 2022 20:15:28.809839010 CET	8.8.8.8	192.168.2.5	0x7fee	No error (0)	clients.l.google.com		142.251.143.174	A (IP address)	IN (0x0001)	false
Nov 3, 2022 20:15:31.831089973 CET	8.8.8.8	192.168.2.5	0x8e8e	No error (0)	gyazo.com		35.186.213.112	A (IP address)	IN (0x0001)	false
Nov 3, 2022 20:15:32.119220018 CET	8.8.8.8	192.168.2.5	0x8030	No error (0)	www.google.com		142.251.143.164	A (IP address)	IN (0x0001)	false
Nov 3, 2022 20:15:32.205398083 CET	8.8.8.8	192.168.2.5	0x99e4	No error (0)	i.gyazo.com		104.18.36.4	A (IP address)	IN (0x0001)	false
Nov 3, 2022 20:15:32.205398083 CET	8.8.8.8	192.168.2.5	0x99e4	No error (0)	i.gyazo.com		172.64.151.252	A (IP address)	IN (0x0001)	false
Nov 3, 2022 20:16:32.662322044 CET	8.8.8.8	192.168.2.5	0xab9a	No error (0)	www.google.com		142.251.143.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

clients2.google.com

accounts.google.com

gyazo.com

i.gyazo.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49695	142.251.143.174	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-03 19:15:31 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-104.0.5112.81 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-03 19:15:31 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-mPe6pwjeMkuj8M6jrgyWQg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 03 Nov 2022 19:15:31 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5785 X-Daystart: 44131 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-03 19:15:31 UTC	2	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 37 38 35 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 34 34 31 33 31 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5785" elapsed_seconds="44131"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2022-11-03 19:15:31 UTC	2	IN	Data Raw: 6d 78 76 59 6e 4d 76 4e 7a 49 30 51 55 46 58 4e 56 39 7a 54 32 52 76 64 55 77 79 4d 45 52 45 53 45 5a 47 56 6d 4a 6e 51 51 2f 31 2e 30 2e 30 2e 36 5f 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 2e 63 72 78 22 20 66 70 3d 22 31 2e 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 Data Ascii: mxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx" fp="1.81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" si
2022-11-03 19:15:31 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.5	49696	142.251.143.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-03 19:15:31 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-03 19:15:31 UTC	1	OUT	Data Raw: 20 Data Ascii:
2022-11-03 19:15:31 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 03 Nov 2022 19:15:31 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-platform=, ch-ua-platform-version= Content-Security-Policy: script-src 'report-sample' 'nonce-vlJiPmeISG9ESCHZ4cOyCg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-03 19:15:31 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2022-11-03 19:15:31 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.5	49700	35.186.213.112	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-03 19:15:32 UTC	4	OUT	GET /8afd3a3cc52ffe121729f2f37188cc59.png HTTP/1.1 Host: gyazo.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-03 19:15:32 UTC	4	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.17.8 Date: Thu, 03 Nov 2022 19:15:32 GMT Content-Type: text/html Content-Length: 169 Location: https://i.gyazo.com/8afd3a3cc52ffe121729f2f37188cc59.png Via: 1.1 google Set-Cookie: GCLB=CMn07_KimYnMTw; path=/; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2022-11-03 19:15:32 UTC	5	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 37 2e 38 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.17.8</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.5	49703	104.18.36.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-03 19:15:32 UTC	5	OUT	GET /8afd3a3cc52ffe121729f2f37188cc59.png HTTP/1.1 Host: i.gyazo.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-03 19:15:32 UTC	6	IN	HTTP/1.1 200 OK Date: Thu, 03 Nov 2022 19:15:32 GMT Content-Type: image/png Content-Length: 434519 Connection: close CF-Ray: 7647706f1f19bba7-FRA Accept-Ranges: bytes Access-Control-Allow-Origin: https://gyazo.com Age: 283332 Cache-Control: public, max-age=31536000 ETag: "8afd" Expires: Fri, 03 Nov 2023 19:15:32 GMT Set-Cookie: Gyazo_cfwoker=i; Secure; HttpOnly; SameSite=None; Expires=Tue, 01 Jan 2030 00:00:00 GMT Vary: Accept-Encoding Via: 1.1 google CF-Cache-Status: HIT Access-Control-Allow-Credentials: true Content-Dpr: 1.0 X-Cache-Level: ZS Server: cloudflare
2022-11-03 19:15:32 UTC	6	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 1e 00 00 02 e0 08 06 00 00 00 f2 60 6b a0 00 00 00 56 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 92 86 00 07 00 00 00 12 00 00 00 44 a0 02 00 04 00 00 00 01 00 00 05 1e a0 03 00 04 00 00 00 01 00 00 02 e0 00 00 00 00 41 53 43 49 49 00 00 00 53 63 72 65 65 6e 73 68 6f 74 48 49 6a 1e 00 00 02 09 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 36 2e 30 2e 30 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 Data Ascii: PNGIHDR`kVeXIfMM*iDASCIIScreenshotHIjiTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://ww
2022-11-03 19:15:32 UTC	7	IN	Data Raw: 25 9e 3d 8b 3e 14 2a 69 40 ad f7 4c a7 06 54 c8 89 76 08 38 04 1c 02 0e 01 87 80 43 c0 21 e0 10 70 08 38 04 1c 02 0e 01 87 80 43 c0 21 e0 10 d8 87 11 08 79 f6 5e 39 d1 64 75 95 b3 87 d4 da de 2b 5b 0b 09 9e f6 ed db 87 86 fe 6e 39 84 8d e8 36 72 81 20 27 58 2b 17 e5 0b 61 c7 0e 0f 6e bc b8 08 7d 3b 95 20 b7 c0 03 6f 6d 03 d7 2a 06 e7 c9 21 e0 10 70 08 ec 9f 08 84 42 21 78 3c 1e 0e b0 04 31 7b e1 6a f4 eb 7d b0 39 d7 3d e7 1c 02 0e 01 87 80 43 c0 21 e0 10 70 08 38 04 1c 02 0e 81 5f 07 02 b6 5f 10 08 04 c8 97 78 4d 1f 41 29 77 fd 82 fa 7d ff 16 e7 92 92 b0 91 9a b0 de 33 9c 43 e4 c5 c8 6d f1 af 7e ec d5 19 be ac 2a 6d d5 d7 4b 4e 4a e6 cb 24 9f 16 54 b8 10 fc c1 00 36 e5 6d c7 8a ec 2d d8 92 b3 0d cb 72 37 e1 d3 0d 8b 31 65 f5 0c 20 6b 3d c5 44 91 78 63 00 Data Ascii: %=>i@LTv8C!p8C!y^9du+[n96r 'X+an}; om!pB!x<1{j}9=C!p8__xMA)w}3Cm~*mKNJ$T6m-r71e k=Dxc
2022-11-03 19:15:32 UTC	8	IN	Data Raw: d4 70 59 67 1a 0b 4d ea a2 bc 58 a6 6f 7d 68 23 f9 94 a3 8d b3 69 01 1a 45 d9 4a b1 23 1e eb 03 5b 27 c3 21 e0 10 f8 45 10 b0 15 89 8e 1a c1 d4 f4 87 9a 9c 2a 7b ad c5 a2 ca de 86 ad c9 ff be fc 4c fa 3f f9 c4 e3 88 65 c5 7a cf 7d f7 9b 69 1e fb 7b 9a f6 65 bc 9d 6e 0e 01 87 80 43 c0 21 e0 10 70 08 38 04 1c 02 fb 2f 02 6a 27 5b c2 4f c7 20 fb 04 25 a5 cb 16 99 be 01 a7 9d 46 79 02 c8 cf 2a 42 90 9b 84 c4 fa b8 f5 86 08 94 08 9e 48 fe 8c 5f ca d2 ee c0 5a ee 28 36 36 b6 ec 5e 75 e8 28 6e fd 82 25 22 1e 6b 5e 0f b2 3a 19 ee fe ee 11 d0 86 29 ea eb 35 6d d6 cc bc 13 bb 06 e7 ee 43 1e f8 3e 94 6f e5 7c 9a 5e 2d ab 47 af 7e d5 59 3c 8a 3c d4 b4 71 06 60 be 85 a7 e6 3e b6 11 ac 3f 0a 63 02 f1 60 c2 95 7f 73 8c cd 39 87 80 43 c0 21 b0 7f 22 60 0b 50 69 9f 99 99 Data Ascii: pYgMXo}h#iEJ#['!E{L?ez}i{enC!p8/j'[O %FyBH_Z(66^u(n%"k^:)5mC>o\|^-G~Y<<q`>?c`s9C!"`Pi
2022-11-03 19:15:32 UTC	10	IN	Data Raw: 97 94 86 a6 4d d3 90 c0 29 46 ba 36 6d ee 7a 4c a2 35 8a a8 47 91 4e d4 81 8c 80 08 3c 93 39 ab 26 f2 76 49 ba fc d6 e0 6c fe 0b a8 6f 0c ad 1f 56 d1 d9 e7 ec 51 23 d7 5f c0 87 8a 57 32 d9 af a6 ec 22 f6 49 cd c6 34 15 83 99 be 67 80 7d 50 2f 7f d9 22 2b 8d 1e 0a 5b 51 6f 5f 75 eb a1 55 92 e7 2e 1d 02 0e 01 87 c0 3e 89 80 2d 24 75 d4 4f 44 5d 65 a7 7b d6 9f 9e 45 9e 57 f6 1b be d6 08 27 c9 3d 16 ba a1 fc 2d 24 1d 1b 9b 73 0f 47 88 42 05 5c b7 a2 80 9b d8 90 d8 0c 99 ad ee aa 96 50 5f 77 45 9a 16 15 f9 31 6a d4 68 1c 76 d8 e1 a5 85 b9 0e 1e 8c 79 ed 55 b3 c6 e5 3f fe 71 3b 34 d2 a4 7b 4c 1c 9a 35 6b 8e 82 42 bf 21 5c eb 4b 0f 27 c7 21 e0 10 70 08 38 04 1c 02 0e 01 87 80 43 c0 21 70 20 22 10 6e 43 6b f6 14 07 f1 99 40 73 5d cf 09 95 4c db 5f a9 67 d1 4e dc Data Ascii: M)F6mzL5GN<9&vIloVQ#_W2"I4g}P/"+[Qo_uU.>-$uOD]e{EW'=-$sGB\P_wE1jhvyU?q;4{L5kB!\K'!p8C!p "nCk@s]L_gN
2022-11-03 19:15:32 UTC	11	IN	Data Raw: c5 16 61 fb b2 35 08 b2 2f 11 1d e5 e5 d2 4b 4c 4a a9 c7 8a 6d ed f2 d0 a6 af 20 a2 a8 06 a7 76 bb 7e 32 fa b2 b3 92 6a f0 ee 1e 1d 28 08 28 5f 68 7a 75 51 2e a7 45 a7 62 f1 e8 bb 11 1b 17 6f d6 43 f4 f0 7e a2 2c 04 77 6e c4 80 8f ee 24 f9 f8 03 0d 5c 9a b0 c3 4a 2b 48 f5 33 35 9d da 17 8f 27 fb 9d 8d 21 ad 38 db ae 92 7b 6c fa eb 5c 16 8c d6 8f 9a aa 6d e2 a9 b9 6f aa 0d 60 e4 de d8 bc 14 98 3b 1e 5b a2 49 7e 4a 37 85 35 d9 99 7f 74 2e d2 50 d6 8e d4 97 d6 3c b4 d2 dc 89 a9 73 c6 19 9d b8 d3 41 25 27 ff 0a 1c c2 7a c9 8f 4b 61 18 ca 35 72 2a 7a f5 55 fc 80 2a 3e 74 57 0e 01 87 80 43 60 5f 46 40 15 b8 ad ec 35 d5 58 96 8e ab 57 af c6 0f 3f fc 60 c8 46 3d 5b be 7c 39 7a f7 ee 8d e6 cd 9b 9b 1d a0 75 cf 86 d1 b1 2a 27 b9 72 d6 1f 02 85 65 de 18 63 f9 fd 52 Data Ascii: a5/KLJm v~2j((_hzuQ.EboC~,wn$\J+H35'!8{l\mo`;[I~J75t.P<sA%'zKa5rzU>tWC`_F@5XW?`F=[\|9zu*'recR
2022-11-03 19:15:32 UTC	12	IN	Data Raw: af 79 d9 a5 56 8e 86 90 15 40 b5 20 1f 03 25 1e a4 a5 05 f1 d0 7f 63 71 eb 25 45 e8 dc 26 88 02 1a e0 c8 64 d3 39 87 80 43 c0 21 f0 73 22 60 2b 70 7b ac 2a ee 9a 9e 55 e5 bf be ee a9 40 b6 bf fa 92 e9 e4 38 04 1c 02 0e 01 87 80 43 c0 21 e0 10 70 08 38 04 1c 02 75 45 20 dc 2e af ca 50 a1 2e 92 2c 01 a9 36 be 9c 3d d6 24 43 7d 91 c8 3e 41 6d c2 d4 24 cf 3d 6b 28 04 98 47 28 da fc 25 b5 a5 f7 b4 47 fd 48 cd 22 b6 24 9c 38 b2 58 4e 41 5e 35 07 77 ce 79 07 0f 1c fe 5b 5a 3d 06 b8 9c 62 d8 ea f1 8e 6e 27 e2 84 1f bf e6 2e d2 ab b9 fb 75 27 9c db e9 18 13 a7 d6 12 95 93 71 e0 03 d3 df 00 36 2f 03 d2 5b 95 13 83 ca 7f f5 cc bf 19 95 0d 27 68 a2 ae f5 1f da 33 1a 4d 09 d8 2e 61 cc 54 eb e8 68 29 4b 26 b3 c4 4b 26 93 cb 4e 9a c4 99 50 bb 04 a8 7c 23 44 ea b2 b8 c8 Data Ascii: yV@ %cq%E&d9C!s"`+p{*U@8C!p8uE .P.,6=$C}>Am$=k(G(%GH"$8XNA^5wy[Z=bn'.u'q6/['h3M.aTh)K&K&NP\|#D
2022-11-03 19:15:32 UTC	14	IN	Data Raw: 48 76 10 c2 b0 7a d2 4d 3f 1f ef 27 34 e6 b4 ee 14 c6 bb 0a c3 9f 3b 87 8f 49 28 86 55 32 72 c2 17 f4 ab 9b 3a 80 f2 e3 52 f9 a3 8e c6 63 05 cf 14 c9 c8 32 52 49 1a 92 d1 4d 88 d3 4e 39 24 21 79 ae 69 d3 75 75 02 c7 32 a6 75 0d eb fc 3b 04 1c 02 0e 81 03 09 01 5b 16 86 2b ac 70 41 7f 20 a5 cf a5 c5 21 e0 10 70 08 38 04 1c 02 0e 01 87 80 43 c0 21 e0 10 70 08 1c c8 08 d4 1b c7 25 42 cf 90 86 5a eb 31 89 9b c8 ac c2 23 f3 27 e0 14 5a 39 6a 83 19 4d e7 6e 91 90 81 6b 7a 8d 30 70 aa 0f 29 1b c5 42 ee 7a 7d f3 67 4f 87 67 b9 c9 9a 50 72 44 ec d5 91 78 b4 fe 9b c5 a7 e1 87 46 2d c9 68 72 87 6a 11 8f c6 72 52 dc 1f e5 1a 1d 65 c6 ca 1f 97 09 33 04 27 77 dc 46 52 7b 80 7a 58 19 46 c1 32 c6 d2 b0 8e 94 47 59 dc 75 db ac 3d 69 74 2b bd 1f f6 1c de d5 ba 71 0a c9 46 Data Ascii: HvzM?'4;I(U2r:Rc2RIMN9$!yiuu2u;[+pA !p8C!p%BZ1#'Z9jMnkz0p)Bz}gOgPrDxF-hrjrRe3'wFR{zXF2GYu=it+qF
2022-11-03 19:15:32 UTC	15	IN	Data Raw: b1 5a ff 82 1b 60 55 1a 44 a9 5a 40 43 dc 55 59 c9 5f 80 6b 5e 14 04 0b 4d a5 ab 0a 57 24 a4 d5 b7 21 a2 75 32 1d 02 0e 01 87 80 43 e0 d7 8b 80 ea 17 75 02 42 ec 74 45 7f f2 29 3c ff 7b 0f c1 15 6b 80 b4 64 44 1d 39 10 f8 c3 85 08 35 6d 6a ea 21 57 17 fd 7a f3 89 4b b9 43 c0 21 e0 10 68 28 04 6c dd a2 a3 38 a4 b8 b8 38 c4 72 c7 e3 42 5a dd 67 66 6e 45 7e 7e 3e fc bc 6f c8 47 f5 97 f6 c6 b1 ab 67 ea 3d ca 88 89 8e 46 52 52 12 9a 34 6e 04 1f cf 0b 0a 0a e0 f7 fb b9 89 b2 6c f7 c2 fe c2 84 e7 de 44 28 1e ac bc 2f 67 fa 9f 24 d1 ea 43 6e 99 56 22 da 44 cc a9 1f ab b5 13 69 21 f8 bb 3e 23 d1 bf 71 3b 43 ec 45 f3 3a a7 a8 00 5b 0a b3 d1 32 31 1d f1 be 18 14 71 27 e9 93 5a f5 06 3a 1f 09 ac 98 0e f0 5e d8 5a 52 72 76 b5 5a 2c 8b ab 8a 13 9b 96 48 72 b3 0a 6f e6 Data Ascii: Z`UDZ@CUY_k^MW$!u2CuBtE)<{kdD95mj!WzKC!h(l88rBZgfnE~~>oGg=FRR4nlD(/g$CnV"Di!>#q;CE:[21q'Z:^ZRrvZ,Hro
2022-11-03 19:15:32 UTC	16	IN	Data Raw: e8 7e 03 38 db 36 d2 51 ed 2a cd e0 91 15 88 75 6a db a9 83 a6 76 aa 7e d6 bf 7d 5e fd 51 24 a6 da 50 41 04 fd ac 57 7d 5a b2 84 83 ca 01 76 fc 34 f0 cd ba 9d dd 30 3e 97 04 f9 0d d7 a9 21 76 9c d4 af f1 68 70 99 fd 95 fa 9f a5 55 31 2e ad 2b 66 3b 66 da cc c7 4b ec 65 7b 53 63 bc 54 36 a4 f6 21 8f 6a 0b 73 b2 1e 3b ea a5 33 22 74 bf 7a 50 f6 cf 27 36 bd 7c 37 7e c2 a5 b4 da f6 ba 6b 23 ef 9f af d4 69 ed 10 b0 08 d8 32 dd 90 8e 2c bc 02 c5 01 bc fe ce 5b dc 13 a5 04 87 0d ec 8f 5e bd 7a 9a 3a c1 ae c3 18 ee 97 a9 94 db db fe 59 58 86 2d fb 45 76 aa 42 c8 ce ce c6 9c b9 f3 31 9b 96 96 5b 69 69 79 f2 a8 93 cc ba c7 d2 af 6e 75 90 4d 61 f9 31 b2 dc da 5b 59 e5 52 05 45 04 16 22 fb 76 ac 02 5a f6 c0 1d 7d ce 40 61 a0 18 3e 92 7c 31 34 6c c9 2d ce c3 fb 5b 7e Data Ascii: ~86Q*ujv~}^Q$PAW}Zv40>!vhpU1.+f;fKe{ScT6!js;3"tzP'6\|7~k#i2,[^z:YX-EvB1[iiynuMa1[YRE"vZ}@a>\|14l-[~
2022-11-03 19:15:32 UTC	18	IN	Data Raw: e5 ea 79 62 62 a2 31 b9 96 ac 37 de 78 03 b7 dc 72 8b 09 a3 67 72 56 c7 72 c9 55 9f 45 ea 68 7d 08 37 61 26 ec e5 e4 c7 7e 1f 36 5d bb 93 af 30 d6 8f 74 52 de d1 4f 4e d7 d6 e2 d4 fa 31 0f f8 a7 f2 b5 bd ff 4b 1c a5 4b 90 15 15 df 26 d7 96 c8 c4 1d 2b 5e c3 94 9c b5 1c 6d 11 69 cd 3c aa 02 96 7e ca 5c e4 79 d9 cd 06 3a a9 1c 97 f9 66 68 81 e9 a3 e5 07 cb a6 3f ad 7c 1b 6d 12 9a 62 48 a3 81 06 d3 c8 f7 d1 40 1a 39 b1 0e 01 87 80 43 c0 21 f0 2b 41 40 bb 59 73 f4 18 25 dd bb c1 f3 c7 3f c0 fb e6 ff 10 5c b4 14 a1 8c 54 44 5d 70 06 8a 47 8f e2 b2 51 1c d0 67 7d 5f 5f f5 ba 6d af a8 0d a1 ce 9e 06 7c d5 4e d2 f4 b3 b4 b4 34 d3 ae f8 e8 a3 8f d0 b3 67 4f 9c 77 de 79 9c 6a d7 cc b4 01 cb c8 47 be 9b 30 49 c7 dd 48 39 b3 2c 96 33 6e 92 cb aa f0 62 e4 64 73 e6 48 Data Ascii: ybb17xrgrVrUEh}7a&~6]0tRON1KK&+^mi<~\y:fh?\|mbH@9C!+A@Ys%?\TD]pGQg}__m\|N4gOwyjG0IH9,3nbdsH
2022-11-03 19:15:32 UTC	19	IN	Data Raw: 42 b9 ac ea ca 13 d5 25 21 f3 7d b3 f3 31 e8 48 78 3b b6 87 77 c7 4e 63 e5 e8 6f dd 0a 1e 4e 7f 56 58 b9 da d7 3b 35 c3 22 39 6a 43 68 6a f5 3b ef bc 63 da a2 6a 3f 1e 79 e4 91 a6 5d a1 67 6b d7 ae 35 ed b2 67 9e 79 06 37 de 78 a3 21 28 6d fb 42 39 99 12 d8 6e 8a 41 5a 7a 09 96 bc f9 34 c6 cd 5a 83 7c f6 47 b6 b7 3f 03 f7 9d d9 1b f1 b1 d9 f8 69 ea 32 b4 f8 c3 d1 38 38 6b 29 be fb 64 31 8a 4e 3d 0d 7d 63 f5 1d 1a 01 fc 23 7c 28 8b 79 ba 28 73 19 96 2f a5 25 e1 20 96 77 1e ad f5 ad 3a 3f d2 85 fb 06 fa 06 62 52 92 10 e3 cf 47 be e6 ff 52 13 26 67 b7 4e 53 b9 4b 62 12 91 ba f6 6b bc 34 63 0d 7c dd 46 e3 98 6e 01 7c fc df cf e0 cf e8 86 3e dd 89 75 b0 d8 7c 63 d5 ca d3 3b 67 5b c4 1b ca 45 e6 ca 25 98 eb 6d 8f b3 c5 8e b2 4f 23 75 6b a1 c6 6e f5 dc a7 3c 30 Data Ascii: B%!}1Hx;wNcoNVX;5"9jChj;cj?y]gk5gy7x!(mB9nAZz4Z\|G?i288k)d1N=}c#\|(y(s/% w:?bRGR&gNSKbk4c\|Fn\|>u\|c;g[E%mO#ukn<0
2022-11-03 19:15:32 UTC	20	IN	Data Raw: 83 21 1b bd 45 ac fb d8 6e 31 f1 58 8c eb a1 0c b0 6d 8a 15 2b 56 98 59 2b 67 9c 71 06 4e 3b ed 34 d3 c6 b3 6d 87 f6 ed db 9b 81 60 cd 92 d1 c0 f0 9f fe f4 a7 b2 f6 93 c8 e4 22 4f 3c 32 3c 4b f1 de b3 cf 63 72 ee d1 b4 86 1b 8c 8c 84 00 62 36 7d 87 67 be 4a c6 45 c7 47 23 29 3d 1e 3e 12 85 68 7d 22 fe 7c df 60 24 24 fb 11 50 fb 9d b9 c2 b4 f3 f9 05 04 59 ae 99 56 3c a7 72 c5 d3 b2 c6 cc 80 26 cc 22 0a d9 8a 61 13 40 18 86 f3 97 c1 2a 3a 0f f3 5f 7c 0c 4b 7a 5e 8a 11 dd 38 dd 39 8a 25 40 69 1f 41 65 81 5c b8 8f c0 f7 c3 ba 43 75 ad da 1a 6a 6e 78 63 a2 b0 73 f9 02 6c 0d a5 e2 d8 a1 43 d1 b3 e5 36 a4 dc d2 16 25 19 cd 11 1f e0 2c 1a 43 32 ab 13 46 cf fc af b5 1f 15 bf 2e 14 b7 19 fc a0 56 6c 26 b1 7e 88 43 12 07 68 4c 4d 57 f6 4e e4 af 34 ff a8 6f a2 78 a5 Data Ascii: !En1Xm+VY+gqN;4m`"O<2<Kcrb6}gJEG#)=>h}"\|`$$PYV<r&"a@*:_\|Kz^89%@iAe\CujnxcslC6%,C2F.Vl&~ChLMWN4ox
2022-11-03 19:15:32 UTC	22	IN	Data Raw: 7f f7 2e 3e 7e 2b 17 3d ef bb 0c 47 07 72 90 4f 2b 2e 21 5a ff 78 0a 6d e5 13 0e d2 a5 ef c4 dc 17 1f c1 ab 6f 7f 8f b5 69 89 88 ce dd 86 d0 90 1b 71 df 85 83 d0 2e 89 9b 3d a8 5e 93 f7 d2 34 84 09 37 26 92 1d 65 d3 ee 60 9a 04 ad 2c 52 e4 4c 5a f5 49 08 17 6a af 0d 14 cc 73 be 1f 7d 87 5a 9b 2c 8c bd ea 4b d6 b1 b1 73 31 e6 a2 0f e1 f9 c7 4d 38 ad 05 c5 6a 4a a3 04 19 b9 e1 f0 fa 5e c2 1d d2 f0 bb 33 9b 32 98 f7 26 59 f5 ed 2c 2e db 31 e3 df f7 61 cc 47 f3 b0 31 29 01 71 85 b9 d8 30 e0 1a bc 73 d5 20 a4 45 93 8c 93 e5 13 75 b0 56 85 1e a6 c5 97 58 82 6d 3f bc 87 0f 9e 5c 8b 0e 0f 5d 85 e3 c0 7c a9 06 22 b1 a0 57 26 49 e9 57 de d4 f7 a5 eb fa d6 de ea be 19 53 1f f9 0f de f8 62 31 32 93 e3 11 64 f9 79 e8 95 ff 87 6b 8e 48 27 25 47 12 91 44 45 88 a3 cd 66 Data Ascii: .>~+=GrO+.!Zxmoiq.=^47&e`,RLZIjs}Z,Ks1M8jJ^32&Y,.1aG1)q0s EuVXm?\]\|"W&IWSb12dykH'%GDEf
2022-11-03 19:15:32 UTC	23	IN	Data Raw: c2 f1 fb ef bf c7 1d 77 dc 61 48 41 c5 57 d9 49 8e e4 3e fd f4 d3 66 2d 1f 3d b7 f1 57 f6 ab 6b c5 27 39 5a 7f 51 24 97 1a aa 63 c6 8c 41 d3 a6 4d 71 fd f5 d7 e3 b9 e7 9e 33 18 89 50 13 f9 28 59 22 a5 d4 58 95 f5 9f 95 5d 9d de ba 2f 3f 3a 4a 37 bd 07 e1 a2 78 ac d3 73 e9 2c 02 4f b2 45 ae c9 af 7e 36 bc f5 5b d3 d1 ea a0 38 24 ef 9b 6f be 31 6b 6c 8a 00 96 85 a5 e2 91 95 a3 a6 ba 8b e4 3c eb ac b3 8c fc 9a 64 46 3e 53 78 11 84 22 8a 45 dc b5 6b d7 0e e7 9f 7f be 21 f2 2c 79 2c dc b4 36 e6 ad b7 de 6a a6 c7 ab c1 5f 93 93 4c a5 53 e1 65 35 ab e9 e2 7a 17 ba 96 13 4e ba a7 b4 29 5f 89 20 56 da 14 ae ae 4e 61 14 56 f9 5d 4b 02 08 6b c5 6d 9d 9e 2b 3e 55 06 91 f7 ed f3 9a 8e 46 36 0b e0 05 39 3f b1 f0 65 8f 8a e7 54 52 19 ac 62 30 dd e3 f7 9a 12 d3 1a 5d 12 Data Ascii: waHAWI>f-=Wk'9ZQ$cAMq3P(Y"X]/?:J7xs,OE~6[8$o1kl<dF>Sx"Ek!,y,6j_LSe5zN)_ VNaV]Kkm+>UF69?eTRb0]
2022-11-03 19:15:32 UTC	24	IN	Data Raw: 10 64 7d ba 09 c9 c7 0d c3 71 7d 0a f1 d9 6d 13 10 7b 58 12 26 4c 5e c0 76 56 14 5a 9f fa 37 fc 75 40 22 fc b4 6c 2c ca 9e 81 b1 d7 bc 8e d9 b4 f2 4f 2a 29 c4 f6 a2 74 74 1a a2 9a 9d 75 91 de 91 29 47 58 4f 14 89 94 cd c5 ac ff 7b 1a ef cd 5c 8b 5c 0e 8c c4 1e 71 29 ae 39 f1 10 34 6b b4 12 9f dc f2 1f 7c 9e cb 3a 8f e5 73 62 f2 d1 38 f7 de 53 d1 ad 28 07 9b 7e 9a 82 ef c7 ad 46 cc b0 46 f8 fe 5f 6f 23 fb 98 df e2 aa d3 06 62 eb b8 fb f0 f4 17 9b d1 f8 88 d3 70 2e fb 2c bd db ae c3 d7 0f 4f 40 61 df d6 d8 3c 67 1e 16 fe b8 06 6d 2f 7e 18 d7 a4 bd 8f bf bf f0 0d b2 02 31 68 77 ca 75 f8 cb c0 14 be cf 00 72 7f 7a 17 8f 3c fe 35 b6 c4 b0 8d 7a 50 3f 8c 3a ff 12 1c d3 72 23 e6 7d 3c 15 9b 97 66 62 6d e3 02 cc fd 6c 01 e2 07 9d 8f df 9f 72 34 3a c7 73 c6 44 ca Data Ascii: d}q}m{X&L^vVZ7u@"l,O*)ttu)GXO{\\q)94k\|:sb8S(~FF_o#bp.,O@a<gm/~1hwurz<5zP?:r#}<fbmlr4:sD
2022-11-03 19:15:32 UTC	26	IN	Data Raw: b3 24 d8 68 02 52 b0 92 4b 40 dc f2 4f 7c 98 45 4b 97 d6 47 e0 fc 3b ee c2 c8 85 f7 e0 89 e9 89 e8 45 0b ed 51 7e ae 4d 73 d7 12 34 3a ee 5c 5c 71 9c 17 13 ff 7a 15 5e 9e bf 06 3b 3d ed 30 ea e1 fb 71 51 57 76 cc 82 df e1 c5 d3 de 47 cc a3 f7 e2 b7 07 f9 89 f3 a7 78 e7 de b9 48 ba b6 1f 56 5e fd 1a be 49 8d c6 d4 3f e4 63 cd 15 7f c7 25 bd 4a b0 b3 90 04 a9 21 2f f7 06 bf aa c2 86 1b 0b aa 2d 3d dc 01 36 a3 4d 77 1c da a9 23 9a cb 2b 3b b9 79 39 2c ff d3 56 e2 9d 0b 6e c7 d8 4d b9 08 c4 76 c5 d9 4f 3d 80 73 5a fa b1 23 f3 2b bc 73 d6 fb 58 7b 44 22 36 c7 0f c3 b5 23 0a f1 e5 4d 9f 61 5d f7 0d f8 7e e7 09 b8 74 78 1b 14 bc 73 15 ee 0a fd 05 8f 5d 7d 09 46 f7 db 8e 8f fe fa 24 96 0d 38 1b a7 9f de 0f ad e3 e6 61 ec 79 ff c5 8e 2b 6e c4 79 47 c5 21 4e 53 65 Data Ascii: $hRK@O\|EKG;EQ~Ms4:\\qz^;=0qQWvGxHV^I?c%J!/-=6Mw#+;y9,VnMvO=sZ#+sX{D"6#Ma]~txs]}F$8ay+nyG!NSe
2022-11-03 19:15:32 UTC	27	IN	Data Raw: 6c 7f 14 4e bf ec 48 9c 97 b1 03 93 1f 79 1f d3 66 75 44 8b 83 b8 d9 ed b6 d9 f8 2e e9 0c 5c 7a 55 2f b4 4e 59 8e f7 af 9f 86 b4 3f dc 88 3b 9b 14 22 67 c1 44 8c f9 2a 0b 7f 3f 82 9b da 70 a0 5c 33 33 54 07 49 9f c4 04 ce 62 25 19 97 95 9d 63 78 85 10 07 ae f6 09 a7 3a 54 f5 a0 9f 95 13 ad d2 2f 1b 70 3a 96 64 6f 64 ff 27 07 29 5c a2 2b 25 3a 86 03 e2 e9 78 63 f9 14 36 c0 76 00 c9 07 b3 2d 4f bf 72 ea 07 cb ea 71 f1 17 58 7c c4 85 38 aa 55 2f 93 5e 5b 95 1c da a4 23 da f4 3b 19 6b 17 7f c9 1d ae d9 0b b0 9b cd 84 43 57 f9 d7 d6 e9 99 05 d9 34 62 e1 c0 28 f1 d3 cf bc 47 1d d9 7f 56 d9 9c c8 9d b4 f3 64 bc 44 23 0b 73 c3 47 a3 05 e6 83 25 3b 37 72 20 94 95 79 25 a7 70 01 d6 6d 2d b8 c9 90 ba 63 61 c3 a1 4a 9e 78 69 76 b5 de f5 76 ed ee a8 f1 21 6b a7 0b 2f Data Ascii: lNHyfuD.\zU/NY?;"gD*?p\33TIb%cx:T/p:dod')\+%:xc6v-OrqX\|8U/^[#;kCW4b(GVdD#sG%;7r y%pm-caJxivv!k/
2022-11-03 19:15:32 UTC	28	IN	Data Raw: ab d1 f5 a1 db 71 5a 02 cb 15 cf 48 5c f9 e4 70 fc 2d 63 2b be 7d 64 3c 56 7c 38 05 6b ff 3a 18 4d d8 58 93 55 53 ed 4b b5 da bf 7f 93 63 f9 e1 07 8b 0b 49 cf d0 4d 1a 8b 89 2d 9b e0 72 0e 16 c6 d1 c2 7b de e3 b7 61 dd 5f 5e c5 4b dd 96 62 c2 83 ff c5 fb 43 ae 42 db 66 b9 78 ea bb cd f8 f3 d0 8d 98 bf 6c 1e 32 2e fe 23 12 e6 4d c4 c6 0d 2d b8 38 39 49 fc 8f 9e c4 57 24 5f cf fd e4 73 5c f4 d8 cd f8 72 06 37 f1 48 6d 82 a5 73 d6 19 cb e9 e8 b9 93 31 3b 61 13 36 4e cb c4 b9 ad d2 30 f7 9b 0f 91 d0 ee 1c 7e 43 cc 61 a6 10 aa df 17 65 8a 74 92 6e c5 81 74 d6 6d 6d d1 ae d3 8b f8 f2 a7 0b d1 3b 63 09 66 d3 62 71 5d ef 81 24 d1 b9 8c 00 eb be ed b1 59 1c 38 e0 37 ff fa 9d f8 b6 f5 a9 b8 f6 a3 bb b1 e9 d6 9b 31 6e d1 11 38 95 ed bb 39 8b d7 93 d4 3a 18 09 b3 48 Data Ascii: qZH\p-c+}d<V\|8k:MXUSKcIM-r{a_^KbCBfxl2.#M-89IW$_s\r7Hms1;a6N0~Caetntmm;cfbq]$Y871n89:H
2022-11-03 19:15:32 UTC	30	IN	Data Raw: e9 d4 7a 43 b2 a8 bc f8 e2 8b cd 22 b2 c2 cd 3e b7 72 64 b1 29 6b d0 ba 3a 8b 85 64 ca 6a 4f 53 a9 ef b8 e3 0e 43 10 6a 1a b7 c8 bd 29 53 a6 98 85 d6 af b8 e2 0a 23 de c6 ad 63 4d 4e 64 ab ac 12 2f bf fc 72 b3 ab bb 30 b1 f1 49 ae cd 4b ba a7 46 be 48 5c 35 f8 85 99 f4 a9 ce 29 5e c9 92 a5 a3 7e 22 2c 35 d5 5a 58 49 a6 e2 3d ec 30 ae 05 51 ea e4 5f 3f 1b 9f bd 5f db a3 c2 aa 83 a1 75 2f 65 6d 2b 3d 65 b9 29 d2 51 bb dc cb 92 56 df 77 5d 9d 47 85 16 2b b2 26 3e 6e 5f af a9 58 ea 40 28 6b 32 be 5d 1d f3 39 7b d6 51 d8 84 49 0b 6f c5 c9 1b b2 e0 a3 19 fe 9b fd ae c1 71 24 24 5b c6 b2 41 9f ea c5 c6 b5 1c fd cf da 0c 7f ce 74 7c 9f 7f 14 46 b7 ee 01 ac a2 85 1c cb e8 9c ac 1f f0 05 3b 0b 67 e4 85 70 78 68 0d a6 15 6d 67 07 86 11 7a db a0 2f 37 28 89 4b 68 c4 Data Ascii: zC">rd)k:djOSCj)S#cMNd/r0IKFH\5)^~",5ZXI=0Q_?_u/em+=e)QVw]G+&>n_X@(k2]9{QIoq$$[At\|F;gpxhmgz/7(Kh
2022-11-03 19:15:32 UTC	31	IN	Data Raw: 7e c0 a4 32 54 7d c4 52 12 19 c4 f8 3e cb a6 2e d6 c2 cf fc a9 36 a0 7a 75 29 1c 99 13 30 9e 95 9c 0a ad 88 f2 90 55 a1 5c 24 d4 84 89 13 27 8e 6b f2 a4 5f 9d 2c 35 f2 b3 35 16 c5 95 80 64 9a 8e 4c b0 62 f5 f3 dd 8b 13 65 46 0e d0 8c f5 46 b5 c6 4e f8 a9 c4 2b 4b c3 5c 2d e0 87 e5 22 b2 30 3f 57 7b a7 c4 1b b2 c8 16 4e b5 02 18 7c 09 eb 60 3b dc 55 54 6b 41 2f 3f 4c 06 5d f8 34 90 87 2c 85 56 c1 af d5 38 22 57 2e 4f 70 c7 5f 2d df 64 d5 9a b4 75 51 db a8 d5 18 28 1f 57 20 92 a7 c4 ad 91 6c 2a cc ed 6b 85 bd 44 c3 0c d5 2d 6d d1 53 37 2e 3c 38 20 2e cf ba ea 21 b8 72 15 1c dc 59 30 fc d0 7f f1 40 f2 59 6e 0d 32 b5 40 a4 99 8a 64 37 71 13 78 87 45 23 25 ca 12 af 2a 3e bd c7 ae fc f3 14 eb 7b d0 ff d8 d5 bf 2d b1 0f 1e 78 c4 9e fe 44 0a 58 38 8a 8c c7 4a 5d Data Ascii: ~2T}R>.6zu)0U\$'k_,55dLbeFFN+K\-"0?W{N\|`;UTkA/?L]4,V8"W.Op_-duQ(W lkD-mS7.<8 .!rY0@Yn2@d7qxE#%>{-xDX8J]
2022-11-03 19:15:32 UTC	32	IN	Data Raw: f1 57 3f 0e 8d 61 0b 30 4f aa 3d 2a 4f c0 07 6a c5 e7 3c 6d 03 2c 7d fa 4a db ff 91 8d ed ee c7 ce 95 d2 eb 0e bb 79 f2 8c e0 ca a6 68 a3 13 ec fa 1b d7 b5 5b ce 39 c1 8e 7c ed 44 bb f0 57 b2 e0 97 6f de 4a b6 6c 04 f8 e4 d1 96 a1 01 28 75 47 6d 59 ff 65 31 d7 c5 72 bf 7d c0 fe fb ee 78 5b eb d4 9e d6 f7 fd cb 6c c7 bf 0c b2 df ca da 7e e0 bc 47 ec da 83 9f 0b 0a 83 3a 29 21 19 7b d4 88 ce ec 92 f7 ec be 9b ef b3 07 73 7f 61 2f 3c 39 d4 9e bd e4 62 fb cf 5c b9 69 11 3c 91 1b e4 45 60 4d 5b a2 1e 60 49 fd b0 20 df 36 fc a9 da c9 71 1b d9 17 e7 ec 66 b7 fd 67 23 3b 73 bf b5 75 2a b0 c6 32 55 ab d9 ae f2 89 7c fc 48 06 fd 92 73 b2 e6 5a f8 c9 fa b6 c9 a2 3b ed ee 77 b6 91 65 e7 04 3b c1 96 d8 db f2 db 48 b9 d2 6a 2a e6 67 da 98 3d cf b2 03 ce df d3 d6 ae 2c Data Ascii: W?a0O=Oj<m,}Jyh[9\|DWoJl(uGmYe1r}x[l~G:)!{sa/<9b\i<E`M[`I 6qfg#;su2U\|HsZ;we;Hj*g=,
2022-11-03 19:15:32 UTC	34	IN	Data Raw: 3d 57 94 55 a4 21 f0 ce ef 3d 6e f2 95 81 19 87 d7 b0 d5 f6 ad b7 de 0a 0a bb 0d 36 d8 20 28 18 f1 41 39 69 d2 a4 a0 a8 0e 83 52 c1 05 9e e3 9d 0c 2b fa 0c ae 58 0a c2 fb bb ee ba 4b 5b 01 2f 0c fe 35 89 03 8e 51 a5 1a f0 80 0f 2e 77 dc 71 47 50 42 a2 90 e3 5d aa 00 0e fc 9c 3e e2 39 5f 1c 2e db 9d b1 cc e4 c7 bb 7d f6 d9 27 d0 82 45 ea 1f fe f0 07 fb d9 cf 7e 16 b6 64 93 67 53 f9 90 b7 e7 03 8e a9 02 74 a2 74 44 b9 7a fa e9 a7 db 90 21 43 d2 e2 0f f8 12 80 0f 0c b6 6c bf f3 ce 3b 81 8e 11 23 46 84 ab f3 d9 e9 24 be df 7b 7a de b5 14 9c 06 e7 31 ca 4d 94 8f 57 5f 7d b5 9d 7c f2 c9 41 e9 d8 12 1f 9a ca 83 a1 71 a5 ac 99 37 ef b9 ae ad f6 cd 7f ec 8b 4a 09 ae 60 aa a4 3a d8 40 63 48 2b 3a d1 0e 65 ca 37 96 6a af 7e 08 41 95 af 56 db 39 67 a6 20 2b df 66 54 Data Ascii: =WU!=n6 (A9iR+XK[/5Q.wqGPB]>9_.}'E~dgSttDz!Cl;#F${z1MW_}\|Aq7J`:@cH+:e7j~AV9g +fT
2022-11-03 19:15:32 UTC	35	IN	Data Raw: f8 79 37 ab 79 4a db a8 bb 66 4a 99 58 6c 13 7f f6 2b cb bd fb 36 bb f3 e8 17 6d ed 4b 4f b0 bd d6 d7 f6 e9 52 fc 56 89 ff 3a d4 65 cd f1 6b e9 a4 ed 4b ed fc 57 76 b3 33 cf de d6 0e f8 4d a6 fd e3 8c cb ec 9c 27 34 e6 2d cd b6 be da 45 70 f4 59 1b 58 f6 42 2d 5c ca aa 8f da ee e3 22 39 26 d6 89 d6 c2 4b fc ae 57 61 14 68 81 27 87 95 3f 4d 42 f2 74 aa 75 ae da 29 ae 9a 84 b4 0e 00 d2 62 b7 e4 48 f7 ee e3 6d ef fd 3f b3 5f 5e 77 aa bd 9d 99 6f c3 34 86 eb b9 d5 78 d5 0b b6 e2 27 60 13 3f 43 7d 70 e9 a2 9e b6 e5 89 47 da 9c eb ee b5 3f 9d 77 b7 dc 54 af 61 3b 5c 7a 98 c6 e4 c5 b6 cb 6f 4e b4 ba 33 ff 6c 97 bc a2 3e 4e 0b a4 85 05 5b d8 51 57 ca 1f 78 75 99 14 9c 79 61 b1 09 7e 21 f1 b2 a4 00 ce d7 e9 db 4c f1 94 83 b6 aa d3 27 b2 bc a7 7b 1d ca 94 87 45 25 Data Ascii: y7yJfJXl+6mKORV:ekKWv3M'4-EpYXB-\"9&KWah'?MBtu)bHm?_^wo4x'`?C}pG?wTa;\zoN3l>N[QWxuya~!L'{E%
2022-11-03 19:15:32 UTC	36	IN	Data Raw: f7 a7 de 67 55 25 1b d9 01 77 9e 6e fb 0e 2b 96 af ae 84 eb 88 0c 29 7d 0b fb ce b3 a7 fe f7 08 7b 38 a3 97 0d 3c f8 1c bb 71 f3 75 6d c3 3d 4f b2 5d a7 ad 67 6b e7 ab 1f e9 99 23 ff 57 62 e1 88 41 f6 c5 d4 5a 59 d6 64 d8 ea 63 a4 ec 9c bf d8 fa 1f 7c 9e ed 7b a6 14 02 27 fd dd ae c8 e0 70 99 93 6c 1d f9 d9 d2 7e 41 db e3 b0 5d ec f6 cb 8e b0 03 ef d2 56 8e 75 36 b6 23 7a 49 d1 a7 ad ec 03 46 6d 61 ab 0f 3d c2 ae 3f 33 cf aa 4e 3d db 7e ba 76 4d c3 e1 32 2b cc c0 14 00 12 f5 84 45 ba fc ee 3d 35 10 d4 49 c6 d4 0d d5 47 14 f1 f5 25 3a 0d f7 f8 4b 6d b7 c3 2e b0 5f 1e 7b 6d 38 5c e6 f0 6b f7 b4 61 1a 2c 2c d4 61 34 c5 fd 7b 58 21 4d 45 da 9f 2c 9d 38 5b dc 57 27 eb 2a 97 9c 22 f9 34 eb 55 18 56 9c 73 05 b7 bb b6 ef 95 6a 24 b1 e1 fe 87 59 8f 2b ef b6 4b 0f Data Ascii: gU%wn+)}{8<qum=O]gk#WbAZYdc\|{'pl~A]Vu6#zIFma=?3N=~vM2+E=5IG%:Km._{m8\ka,,a4{X!ME,8[W'*"4UVsj$Y+K
2022-11-03 19:15:32 UTC	37	IN	Data Raw: d2 de db da 2f ce db 31 0c 89 94 50 32 a7 ce 76 de 9e ab f2 d4 81 3a eb 1c 73 a3 fd 21 b0 42 7d 94 fa a0 d2 0a 29 0a 24 6f 7c d8 d4 51 75 38 ce 27 e6 40 cc 81 e5 e3 00 63 1e e6 c2 61 81 69 e2 04 7b f4 b1 27 6c ec 98 d1 f2 e5 3b 40 f3 e1 84 ab b6 cc 9a 35 6d 9f df 6b e7 4b c8 42 92 43 f3 38 b9 d7 b6 be 63 76 b0 43 2f 72 59 55 68 23 b7 3d c0 46 4b 3e a0 df a9 df e2 40 3b 6d e2 21 92 bb 9a a7 2b 5d b0 22 97 cc 9a 30 f9 d4 46 19 c5 d4 ae ae e7 44 3b e5 9a 6d 35 b2 23 00 5b fa 23 b6 5a 4b 56 61 fd c8 0e c7 b7 df 79 37 9c 66 bd e7 1e bb 36 ea 4d bc df 0a c9 56 e6 1f f1 2f 84 86 4b 18 55 35 de 27 21 d6 18 d7 d3 24 5d 45 7f 48 cf 25 dc 47 d2 93 36 0d c1 0a 5f 12 81 ab f8 e9 8f fe b6 e1 05 23 dd 45 da 99 82 1b 93 30 df 95 71 03 69 43 df 90 9c 08 48 7a 57 a3 be 86 Data Ascii: /1P2v:s!B})$o\|Qu8'@cai{'l;@5mkKBC8cvC/rYUh#=FK>@;m!+]"0FD;m5#[#ZKVay7f6MV/KU5'!$]EH%G6_#E0qiCHzW
2022-11-03 19:15:32 UTC	39	IN	Data Raw: 68 c5 4d 44 76 63 bb 94 b5 b5 34 f5 19 ea 0f 2a 83 dc 57 0d 16 8f 96 e9 0a 1b a0 75 c4 c5 fb 3e 75 95 89 00 00 40 00 49 44 41 54 7a c6 47 3e 86 67 4c c1 58 83 05 70 26 a7 58 3d b2 e8 79 da 69 a7 85 5d 2a 3e ce 0c 1c 00 f1 c6 40 19 25 ca 29 71 92 66 a2 be 05 da 18 ff d3 1f 28 3a 79 26 82 de a1 a0 43 29 a6 57 df 1b e7 53 77 80 a7 8f a4 00 76 62 92 44 6a 4f 0b 4c 87 b7 f4 7d 48 43 5a bd f2 b1 4c 22 ad de f1 5e 75 29 28 10 c3 3d 28 04 04 96 e6 17 10 42 e1 49 de e4 01 ec 86 a0 34 04 9f b7 2c c5 91 fc 12 f8 78 f4 30 7e 0a 78 e8 3d fd 5a 03 08 c7 3f ca 93 a5 f4 83 b3 62 38 cf bc 3f 24 db 28 9e e4 15 79 26 51 82 56 e4 a2 00 f0 dc 98 1f 37 c2 af 91 df 89 7b c7 97 6f 4e 47 e2 30 c0 44 42 48 4d cc e5 be 4f 1b f1 9d 07 81 ce 65 f2 8a 1f 62 0e c4 1c e8 8c 1c 70 79 c9 Data Ascii: hMDvc4Wu>u@IDATzG>gLXp&X=yi]>@%)qf(:y&C)WSwvbDjOL}HCZL"^u)(=(BI4,x0~x=Z?b8?$(y&QV7{oNG0DBHMOebpy
2022-11-03 19:15:32 UTC	40	IN	Data Raw: 4c 93 91 88 9f db 9f 03 14 34 0d 85 2b 03 34 2f f8 96 72 26 8d 0f e6 3c 4d aa 06 17 85 8f a2 d2 e3 b6 04 9f ef 0e 9f 7b 87 c3 7d aa 40 de fc 50 54 6e bd f5 d6 b6 c3 0e 3b 84 68 ac 86 23 98 12 42 6b f9 c5 92 e7 0f 9c 96 4e ac 4e 17 6f f0 75 b8 5c d9 6a cd b5 b9 00 6c 7e 1e fc de e1 f8 fb 74 ae 5e 5e a4 45 e9 1c 85 11 bd 4f 07 16 71 9c 1e 70 22 bd e3 e6 f9 a4 0b 27 dd 78 0e d7 af 8e 43 ba e9 a3 f1 1a 71 97 30 5c 52 53 6e bb f5 9e 28 45 47 86 fd 66 da 03 f6 a2 2c 20 c3 8c 1b 27 ba 28 9f 54 6e a1 87 0b 45 a5 b2 f0 6a 15 9e f9 a6 38 84 65 8a 72 69 99 25 de 37 3c 37 a6 69 00 12 9e 1b d2 3b 0c 3e 09 17 b5 08 5d 35 29 96 05 4a b8 e6 14 da a5 03 b7 b6 e3 87 ef ab 2d ac 05 41 e9 e8 74 44 79 02 98 e6 83 4f 92 99 80 37 e0 a1 04 28 02 96 06 be 2d 7d ce 90 85 66 84 22 Data Ascii: L4+4/r&<M{}@PTn;h#BkNNou\jl~t^^EOqp"'xCq0\RSn(EGf, '(TnEj8eri%7<7i;>]5)J-AtDyO7(-}f"
2022-11-03 19:15:32 UTC	41	IN	Data Raw: ba a3 e3 8f fd a9 7d f0 e1 c7 72 ad f6 82 bd ff fe 87 52 3c 76 93 bb 0d 1d 86 c9 ce 20 d7 3d ad 00 c5 41 47 c6 a0 5f b0 12 8a c7 ca b0 2b b1 5f bf be 76 c0 01 3f b1 91 23 86 85 dd 8f de cf b4 45 1f e3 74 b2 88 e6 07 f7 fe 90 fa 2d 94 87 84 eb 3f 7d ca 1e 98 f1 7a 83 12 11 b7 3d 09 97 2e 1c 61 50 a7 09 6f 91 fc 80 4f d7 01 62 c1 6a 35 57 be 1a 17 cf b1 63 5f b8 d1 de 2d 9d a7 79 2f 76 8b 2a 94 c6 19 59 c2 a8 83 77 3d 73 0a ec e3 59 9f 68 c2 8c 1f 48 e2 f0 5b 1a a4 94 8e 4c bc 96 be 8f ef da 88 03 de 08 d8 6a cc 3d c1 df b5 51 16 31 98 98 03 3f 38 0e b8 90 a7 ad e4 48 c0 55 e3 78 5f 27 3d 8e 29 1a 6e eb 74 5b 5d 56 6a ea 89 56 4c 03 b5 fc 3c 6b 90 a3 35 f2 ed 58 5e 57 61 8b 75 5a 24 0a 2c 54 62 71 db 5e 7e b6 c6 29 63 0e c4 1c 88 39 10 73 60 d5 e6 80 4f da Data Ascii: }rR<v =AG_+_v?#Et-?}z=.aPoObj5Wc_-y/v*Yw=sYhH[Lj=Q1?8HUx_'=)nt[]VjVL<k5X^WauZ$,Tbq^~)c9s`O
2022-11-03 19:15:32 UTC	43	IN	Data Raw: 55 f0 71 3e cb 70 c0 3b 7d 77 48 cb 47 7f c7 bd 0f 16 38 25 2b b6 ca 85 23 ab 76 f0 f2 5c b5 a9 58 3e ec a1 9d 05 1e 4e 63 73 3e f8 75 f9 20 ae 9a a9 bc 7d 37 d5 e6 db 83 aa 28 9f fd 1e a7 d4 e0 e2 f8 2c 4f be c0 f2 32 75 38 0e 7f 79 e0 c5 69 62 0e fc d0 38 e0 ed a2 a9 f6 ee ed 85 ef 1e f7 87 c6 83 98 9e f4 38 40 5d 88 f6 8f d1 fa c0 3d 3f e4 6d f4 7d 7a 90 e3 58 3f 76 0e 50 67 a8 5f 2e 87 5c ee fc d8 f9 12 d3 1f 73 20 e6 40 db 71 20 57 7e 12 2b aa 2a ec 6f bb 4f b6 b2 8a 12 ab 97 dc 41 e1 58 cf 36 63 ee 15 ea c3 25 71 df 76 39 a7 07 29 f4 a3 d5 95 36 a8 a8 97 f5 a8 cf 0f a7 90 0f 2e e8 6b 43 ba 0e 10 62 e9 c1 58 a1 58 92 c1 e5 e5 e5 a1 0f 8f 7d 3c ae 10 27 e3 c4 cb cb 01 ef fc 4b 4b 4b ad 4b 97 2e a1 32 f2 ce 03 8d 84 53 c0 67 cf 9e 1d 2a 6b 3c e8 74 ce Data Ascii: Uq>p;}wHG8%+#v\X>Ncs>u }7(,O2u8yib88@]=?m}zX?vPg_.\s @q W~+oOAX6c%qv9)6.kCbXX}<'KKKK.2Sgk<t
2022-11-03 19:15:32 UTC	44	IN	Data Raw: 76 1e 2f f9 9a 2a ee aa f8 ce e9 02 f7 28 1f a2 6d cc 65 20 f5 39 1d 25 ba c3 21 1d 8a 04 14 5c 58 ec 31 39 f7 fc f8 c6 ef 67 8f df 60 57 4e 3a 2a dc fb 44 cf d3 37 c7 4f c7 29 39 8e a7 4d f5 9d 6f bc f7 38 c9 69 db ea d9 f3 81 6e f7 eb d5 1a d8 15 15 15 8d 78 3a be 5c e1 7d 0e 27 bb 35 84 e5 a1 23 39 0d 70 51 a0 38 ce 0e bb a3 ae 9e 2f f5 84 ad aa e0 93 4e 20 1d f5 29 2a 5f 53 a5 5b 11 f8 f0 9b 7a 0b 8c ce 10 9c 16 da 09 ca ae b6 c4 cb db a7 d7 b7 8e a4 97 3c a1 09 7e df 7d f7 dd 76 cb 2d b7 84 ba 80 a2 fd 17 bf f8 85 1d 7a e8 a1 c1 ba 30 5a f7 53 e1 07 1c da 1c e9 f6 d9 67 1f 2b 2b 2b 0b 75 64 9d 75 d6 b1 b3 cf 3e bb 51 b9 4e 5e 2b 12 bc 1c 80 41 fb f6 c5 28 de b7 65 99 ac 08 8e 71 da 15 e7 40 b4 3c 93 cb 35 da 4e 18 ef f1 a3 2e 60 41 ce b7 38 c4 1c 88 Data Ascii: v/(me 9%!\X19g`WN:D7O)9Mo8inx:\}'5#9pQ8/N )*_S[z<~}v-z0ZSg+++udu>QN^+A(eq@<5N.`A8
2022-11-03 19:15:32 UTC	45	IN	Data Raw: c7 4f 8e db 16 cf c0 76 5e f9 78 a7 2d e0 02 23 3a ee 68 4f 1a 5a 8b 2f b8 80 5b 2a fe 3b 3f 92 61 3a fe f0 2a 1a bc 2d 3a 0f fd 1a 8d d3 19 ef 1d 4f a7 c7 e9 4e a6 33 fa be b9 34 c9 df 5a a2 b9 4d 0f 97 a1 20 a9 bc 6f bd f5 96 5d 71 c5 15 41 b1 85 60 41 91 c8 a0 dd 91 73 62 88 cf 8a fc 5f fe f2 97 a0 9c bc ee ba eb c2 44 08 05 e4 d1 47 1f 1d be 91 9e c2 5d d1 40 5e c0 f1 89 16 5b d3 a8 7c 8e 13 57 02 57 68 20 3e 93 72 2c 48 3c ed 8a e2 d0 59 d2 c3 53 f8 8e 25 03 b4 fd e7 3f ff 69 44 0d 2b 10 94 c0 4c 36 d6 5b 6f bd c0 03 af 8c 8d 91 da f1 26 9a 17 f7 5e 57 da 31 cb 18 74 87 70 80 49 1b 19 a9 4c 35 b5 64 02 97 99 c5 f9 5a 1a 7c d5 6a 11 80 b2 56 04 de 67 65 6b 20 aa 7a 59 5f a7 67 de 77 08 7e ed 93 89 cb 95 68 3d 8e d6 f1 68 ae c4 e5 e7 ca 1e 94 81 58 8d Data Ascii: Ov^x-#:hOZ/[;?a:-:ON34ZM o]qA`Asb_DG]@^[\|WWh >r,H<YS%?iD+L6[o&^W1tpIL5dZ\|jVgek zY_gw~h=hX
2022-11-03 19:15:32 UTC	47	IN	Data Raw: 2d a9 32 ad 76 a8 80 b2 2c bf b8 c8 0a 72 64 2d 16 e2 44 b0 08 89 53 8f 53 12 f8 26 c6 63 91 14 89 fc 52 27 89 44 83 d6 6a 2b 5f 24 1c c4 83 bc 4c 1f c7 45 a2 c4 b7 69 71 c0 eb 0e d7 55 25 d0 ef 20 bf fe f4 a7 3f 85 76 85 bb 01 82 d3 12 bd 47 1e dc 7f ff fd 76 d0 41 07 05 d9 90 dc 4e 3c 0d 32 84 09 f9 7d f7 dd 17 e6 39 cc 2d 52 4d 74 43 46 9d e8 0f f4 c1 8b 7b ee b9 27 e0 fb dc 73 cf 35 ca 87 28 ad d0 09 3d c4 63 d7 14 e3 0c a7 dd c9 89 3e a3 f0 c0 f0 e4 e2 8b 2f 0e fd f7 aa c0 0b a7 a3 35 57 78 04 dd f0 e3 67 3f fb 59 a8 03 bb ec b2 4b d8 45 e0 7d 4e 94 8f 51 d8 a4 e3 87 5c c6 9d 06 ca b5 6f bf fd d6 46 8c 18 11 dc 68 44 e3 ae 0a f7 d0 c2 d8 83 85 6e 14 8f f4 59 be 00 da 14 0f 9a a2 0b de f1 a3 ef 43 a1 ff d5 57 5f 59 9f 3e 7d 56 8a e2 11 1c c1 df 8d 9b Data Ascii: -2v,rd-DSS&cR'Dj+_$LEiqU% ?vGvAN<2}9-RMtCF{'s5(=c>/5Wxg?YKE}NQ\oFhDnYCW_Y>}V
2022-11-03 19:15:32 UTC	48	IN	Data Raw: 1c ed b0 c3 0e 0b 07 f8 b9 ab c0 ce 42 6f 73 bc a1 2f 42 f7 b5 ff fe fb 07 f9 b3 c3 0e 3b 84 39 91 cf 7f a0 99 85 01 76 1e 7b 7d e4 8a 92 1a 8b d1 77 df 7d 37 d0 ed fd 21 df 0a 0a f2 ed 83 0f a7 d8 8c af be 51 5f 89 52 b2 69 0c da d4 e2 91 86 e3 3f 10 e1 c7 84 06 ab c1 a6 04 aa a3 46 03 c0 02 87 8e 99 42 75 38 de 18 3d de f2 5e c9 1f 7c 18 8c a3 74 c4 e2 11 cd 37 57 0a c0 1b 3e db 8f b1 76 c4 e9 be fb 39 5a 8a 83 3a 47 68 14 7e 75 1a e8 e6 65 d7 5a d9 fc 2f 6d ea fc 4a cb 42 b1 58 d0 c3 fa f4 2c b6 2e 59 b2 8c 08 03 d4 86 c1 34 83 5f a5 b3 fa 72 5b 34 53 15 bd 47 77 2b cc 6e 50 56 a2 b2 e4 5b 07 05 78 4b e0 1a e5 b3 67 ef 7c f7 78 1e b7 23 71 74 5c e2 6b e7 e7 00 f5 84 b6 c5 aa 4f 54 e0 22 9c bd 2d 37 52 a1 aa 97 ad f6 b7 f8 f5 3b ed 8f 77 df 67 ef 4f 5b Data Ascii: Bos/B;9v{}w}7!Q_Ri?FBu8=^\|t7W>v9Z:Gh~ueZ/mJBX,.Y4_r[4SGw+nPV[xKg\|x#qt\kOT"-7R;wgO[
2022-11-03 19:15:32 UTC	49	IN	Data Raw: 0c e2 70 c8 06 f2 10 98 3c 13 d2 81 df 12 8d cb fb 1d dc 18 60 72 ba 37 db aa 93 b7 5a df 78 e3 8d 41 31 cb 60 6d 79 02 f0 59 75 7e 46 87 6c c1 7b 57 ba 3a fd 0c 90 9d 47 cb c3 07 da 00 1d f5 17 5f 7c 11 2c 56 5d ee 82 2b f7 ec 0e e0 3b bc 6e 2d fc 5a 14 8f b9 79 f6 f4 8c f7 ec 13 29 07 ab a6 bf 63 4f cf fc d0 6a 19 ec 0a e6 ef b7 3b 4e db a2 0b 42 5f 16 cd 97 bc bd 6c b9 6f 2a 54 4b 31 57 98 df c5 1e f8 e4 25 7b f2 cb f7 b5 a8 26 37 09 52 44 2e d0 21 43 ff fc fc 75 db 59 56 8f 79 b2 14 84 c6 28 7c e7 5d 53 70 57 c6 7b 70 aa ab 92 7f e3 63 26 da c5 af 3f a0 9d 0a 28 b0 a9 db f0 42 ab de 2a 8b ec c2 6c 7b e6 89 9b bf 57 0e f0 0a e5 64 7d 45 bd dd f9 c4 1b 8d df 49 c7 09 f3 0b f7 5f df f2 7b 48 01 29 eb bb 8e 0e 5e 67 b8 fa 7d 14 07 2f 67 bf 46 bf a5 ba 4f Data Ascii: p<`r7ZxA1`myYu~Fl{W:G_\|,V]+;n-Zy)cOj;NB_loTK1W%{&7RD.!CuYVy(\|]SpW{pc&?(Bl{Wd}EI_{H)^g}/gFO
2022-11-03 19:15:32 UTC	51	IN	Data Raw: ec b1 8f ac ff b5 7f b2 df 3d 72 b1 dd f9 ec c3 f6 e1 ee 27 d8 90 6e b3 ec eb 81 07 da 35 7f f8 89 8d 15 62 f5 c7 5e 68 fd 26 cd b6 b2 ac 0f ed 81 fd ff cf 9e 38 6e 03 fb 49 3f 8d 01 bd ac 9b 44 3e fe d0 12 07 a8 8b c8 9f 89 13 27 06 f9 87 f2 11 f9 70 f0 c1 07 87 71 29 df d2 ad a3 2d e5 d5 d6 df c1 dd 2d 82 50 1c d0 2f 7a f0 36 82 bc e3 9e f1 0f f7 a9 da 0d 72 10 99 0b 0c 26 eb ab 62 80 17 c8 13 0e dc 99 3f 7f 7e 90 15 51 3a e0 01 71 b8 32 b6 f0 fb 64 7e d0 d7 31 b7 00 06 fc 24 3e bf 1f 72 80 07 d0 e8 57 78 30 49 7e 09 b9 5e 72 c9 25 81 74 94 8f c8 5f ea 0a 7c f1 b8 d1 6b b4 9d 38 bc 55 89 6f 8e 33 74 af b9 e6 9a c1 08 08 b7 67 04 e4 01 ed 87 1f 74 7a dc e8 95 6f 8c a7 5e 78 e1 85 60 e9 78 d4 51 47 19 fe 32 dd 4a 30 ca ab 95 cd 17 f0 66 9c 89 82 91 32 65 Data Ascii: =r'n5b^h&8nI?D>'pq)--P/z6r&b?~Q:q2d~1$>rWx0I~^r%t_\|k8Uo3tgtzo^x`xQG2J0f2e
2022-11-03 19:15:32 UTC	52	IN	Data Raw: 2c 91 ec 4b 8c 1f d9 cd 49 39 4c 97 2c 40 8f 80 21 04 75 98 40 7a dc 37 f1 4c 1e 9e 8f d3 b6 b2 af 94 c3 27 9f 7c 12 f8 ce d8 97 c0 3b 68 66 47 15 fe f5 b9 f7 3a 04 fe f0 86 ba 88 91 86 bf e7 ca 8f 5d 6d c3 87 0f 5f 26 cd ca a6 31 dd fc a1 0b a5 2a f4 fb 5c d3 d3 d2 d6 e0 45 34 c0 03 c6 f6 fc 68 83 f0 06 e5 23 ee 7c c2 2e e1 16 74 7c 0e 2b 31 a3 f2 a7 76 b8 82 18 85 c3 29 a9 f9 79 2d ac f2 65 eb f4 45 29 25 72 6b 32 ac 28 43 a7 04 e9 be 67 97 62 39 08 af 91 93 7c 7d 53 f0 42 4f 17 55 cf df af 30 f8 f5 d7 5f 0f 9d 3f 03 1f 34 f3 54 1a 2c 1e d1 f8 d3 98 28 08 04 19 13 27 06 e1 34 a0 90 af 0a a2 4e 5b cd b2 2b bf b2 6f e4 5f a8 b4 68 b4 0d ab 93 d3 d1 9c 7c 6d 37 93 81 49 1d 93 15 f9 07 ea d1 dd ba 16 48 b1 12 c6 f1 d9 d6 a5 9f 26 26 d5 6b db 7e 97 f5 b6 da Data Ascii: ,KI9L,@!u@z7L'\|;hfG:]m_&1*\E4h#\|.t\|+1v)y-eE)%rk2(Cgb9\|}SBOU0_?4T,('4N[+o_h\|m7IH&&k~
2022-11-03 19:15:32 UTC	53	IN	Data Raw: c4 87 f7 b5 56 3e 6f 51 38 a9 54 62 30 f1 9e 6b 80 d8 b9 ff a4 e2 83 bf 6b 0e 73 da 29 01 fe e1 c3 91 6d ce 38 1d 4f 15 e0 2f a7 a7 d1 49 22 a3 1c 7e 6a 5e 2f 0b 81 7c f0 8b 33 7d fa f4 30 01 64 85 8a 4e 18 4b 42 f2 46 5e a1 58 c3 e7 20 a7 96 31 18 22 a4 03 7b d9 9c 3a f7 13 93 3f 14 62 9c 2e c9 29 91 ce ff 74 b0 a6 a3 e5 b0 9f e6 78 02 3c be 13 37 f4 01 92 a9 c8 61 7c 7f 3e a3 6d 1c 2c fe 78 60 22 be b5 94 c8 e0 e4 93 70 ee 1d 86 c7 6b ea ea f9 b8 15 3f f1 8a f4 2f dd d0 1c 1d c0 70 f8 0c 2c a3 a1 b0 a0 ab 6c d3 5a 0e 2d c1 6f 19 42 c7 c4 c8 92 55 67 b9 b6 4a e3 2b 93 05 c3 2c 29 a5 a6 2e 98 6d df 95 97 da a6 83 47 59 ad 7c 43 56 d4 55 5b ff a2 1e 36 b2 c7 40 e3 50 a7 55 41 28 51 8f a8 83 ad 09 de 1e b8 e2 f7 b2 48 db f7 eb e5 bb b2 54 96 88 ee 53 b6 35 Data Ascii: V>oQ8Tb0kks)m8O/I"~j^/\|3}0dNKBF^X 1"{:?b.)tx<7a\|>m,x`"pk?/p,lZ-oBUgJ+,).mGY\|CVU[6@PUA(QHTS5
2022-11-03 19:15:32 UTC	55	IN	Data Raw: 54 28 9c 00 00 40 00 49 44 41 54 da f0 03 cc 86 67 8f b4 f1 47 ee 68 5d 0a 70 99 a0 0d db bd d6 b6 2d 0e ed 67 fd e5 47 38 73 d4 76 76 d0 11 ea 63 fe f6 8c bd f5 7a 7f 5b bb f7 06 ea 7f 7a d9 f0 89 db 5b 55 9f a1 d6 b3 5a 56 47 fd 27 da 09 6b 7d 69 ff 78 e7 75 7b 7a d8 f6 f6 8b 43 57 b7 ac 3e f8 77 1c 6c 9b 1e b9 93 e5 16 29 bd 38 a2 aa 12 87 15 e0 80 cb b5 54 f2 c6 eb c2 0a 80 5f 69 49 e9 4f 98 c8 42 17 74 f8 04 ce 11 e2 5d af ae 3a 94 40 8a 6b ac db f8 4e df d3 99 e5 a2 e3 be a2 57 ca dc cb 1b ab fc 6c da b9 e8 7f f9 9b 8f e4 c2 a3 cc b6 18 b2 a6 15 c8 98 83 b9 5d 32 df 56 34 ef ce 9c 1e be 78 5d 41 6e a3 7c 64 51 19 1e 5c 23 77 5d 2c 2c 73 68 8a c7 f3 b6 d3 99 69 6a 0d 6e c9 74 31 4e c0 9d 17 87 f9 61 fd 48 70 cb 47 c6 38 ec 18 c1 35 1a 3c c2 da d1 c7 Data Ascii: T(@IDATgGh]p-gG8svvcz[z[UZVG'k}ixu{zCW>wl)8T_iIOBt]:@kNWl]2V4x]An\|dQ\#w],,shijnt1NaHpG85<
2022-11-03 19:15:32 UTC	56	IN	Data Raw: 92 4b d5 56 65 74 a5 67 f1 9e da 2a 47 3b bc 39 6d 0e ce ea 7e 24 ae 1f fd 13 14 e4 72 2b 71 c5 d8 af 3e 2e 3a 3a 16 67 bd fe 47 77 fc ce 71 63 8f df 8b 3d 75 ee e3 f3 cf 3f bf 57 d8 c1 f2 22 7e 51 3d 48 56 52 b9 cd a9 9e 0e d7 76 66 65 f4 fa 2a ab f8 4d 67 ed 4a ae f7 2a c4 15 4f ba 32 2f 7d 2c 6d c7 8e 1d dd 7c 43 69 ec e2 53 c1 d2 56 6b f1 75 30 ae d1 2d 1e 85 10 17 a0 11 c3 81 97 aa 05 6c ca e2 81 c4 41 0a ae ba 2d b3 53 62 6b ae 86 71 e2 46 05 44 7d 1a a1 75 4e 6a 50 52 2a ea ac 2b 59 30 4a 23 2f d3 76 4d c2 d5 e0 d5 d8 e4 5f 75 d5 55 ce d4 5d 96 90 9a 68 69 75 a5 72 12 c8 03 e6 a9 0e e5 76 6b 5a 2b 46 76 c4 c8 d3 2e 46 4c c2 fb f8 6c 75 1a 4a f2 5a a3 df e8 54 b4 69 51 8e a4 e1 17 63 42 ee 4c 2c 5f 97 8e 1d 2d 8f c6 15 57 0e 40 48 7b 9a e2 96 74 c6 Data Ascii: KVetgG;9m~$r+q>.::gGwqc=u?W"~Q=HVRvfeMgJO2/},m\|CiSVku0-lA-SbkqFD}uNjPR+Y0J#/vM_uU]hiurvkZ+Fv.FLluJZTiQcBL,_-W@H{t
2022-11-03 19:15:32 UTC	57	IN	Data Raw: a2 5f 5d 9d ea 5f b8 06 e3 54 37 8a 2b 41 cf 78 2c 98 74 8a a3 74 c2 b5 a6 fa 6d 6c f8 c1 e2 ba 7f e3 b9 11 db f5 47 ea 95 44 83 83 d9 a9 de 35 59 90 a0 38 69 d2 24 77 cb a7 78 48 13 00 4d 76 c4 8b d5 39 6d 7d d4 b6 71 29 16 b3 0a aa 8e 1d 70 fc c7 62 ab ec 39 9c 64 28 1e 99 bc 3a 30 75 0a b7 76 a3 44 b6 a8 6b 34 d6 37 e7 b8 1d 53 0a c5 80 8e 13 9d f0 08 ff f6 41 39 2f d2 c2 58 6b 2c 13 d7 b3 2a 9c 94 8d 52 1c db bb cf 77 4a c9 ca 20 a6 97 d2 b2 f2 dd 1e fc e0 36 0c 09 0c f8 ff 5b 5f f5 6d 7c 60 63 98 3f 2f 1c 4c c4 51 1f 2f 05 a3 7e ea 33 cd a9 1c d6 87 e6 e7 d1 20 81 32 fe 5f 67 bd e9 2c fb 7c bd 08 95 6d e1 91 ce d2 71 71 da 66 9e 05 5f 82 55 f4 8b 38 d1 3f bd e7 08 5e 56 75 84 bb a4 2b d8 fe de f2 3d 50 be ca 6b e3 86 d1 c3 8b 8b 7d 57 98 be ab 8e c3 Data Ascii: _]_T7+Ax,ttmlGD5Y8i$wxHMv9m}q)pb9d(:0uvDk47SA9/Xk,*RwJ 6[_m\|`c?/LQ/~3 2_g,\|mqqf_U8?^Vu+=Pk}W
2022-11-03 19:15:32 UTC	59	IN	Data Raw: 96 29 58 67 f5 41 ea 07 9b 64 9f e3 a9 73 d6 2d aa 1b 36 6c 70 b4 96 f2 b1 3e 13 f8 7d 46 a4 09 40 40 0a 88 27 fc 85 ef 80 11 2b 02 55 9f 6a 67 36 10 e9 f9 70 70 c1 d2 41 02 d4 a6 4d 9b 9c 22 5d e7 f7 54 f6 8d 9e b6 29 7a 58 7f 64 b4 a9 ec 67 2a 02 ec 5d be d1 52 9f 2c dc d2 35 f9 55 14 50 1d 89 de e2 41 29 38 36 6f de 5c 69 89 51 1f ba 59 1a c1 95 00 23 b8 ba b1 d0 84 62 e5 6c 71 d4 46 ea d2 4e aa b0 ae 82 e1 0d 6b 7a 6e 00 0a 48 a7 c8 7f b2 ae d1 2a af 2c 6d ac be 0c ba ea 36 87 02 f5 b0 76 dd d1 3d b9 3d 2f 81 e3 82 00 c7 3f c9 22 fe 4e 5b 92 e4 0c 46 39 77 04 ec 6f a7 bc 2d 7f 2d a6 8a e7 da b6 6d 5b 89 86 b6 4d 7b fb 5c c5 95 e2 55 f1 d2 0b 72 f0 d4 dc f7 f0 ce da f9 b8 76 c8 69 08 89 e4 a2 a4 8c 00 24 e2 b0 9b ce dd 53 80 18 c5 67 f9 b5 00 2c da ec Data Ascii: )XgAds-6lp>}F@@'+Ujg6ppAM"]T)zXdg]R,5UPA)86o\iQY#blqFNkznH,m6v==/?"N[F9wo--m[M{\Urvi$Sg,
2022-11-03 19:15:32 UTC	60	IN	Data Raw: 2f 51 2e 3a a9 59 25 53 ea dd 2a 5f cf fe 4e 16 08 6a 6c 1b 33 77 e0 c3 d5 df 71 ab 53 31 16 f0 1c 90 28 2a 1f f7 c5 09 2f 39 f3 0d 96 f7 dd 9e cd 0f 14 c7 c2 0e 76 bf b2 f1 54 34 36 e1 5b 19 56 0f e4 2d ed fe 30 e8 50 5e ea 08 64 49 24 4b 08 09 38 0a f3 af 97 7a 14 a3 29 49 03 51 c0 f8 21 18 70 aa 37 29 f2 d5 b1 1f 8e 75 58 1b 2d c4 cb 12 28 f5 93 c0 2e 1a 1c 8e 74 08 86 17 f6 77 1c a3 b3 ea 48 3c a8 9b da 92 92 92 9c 50 54 9f 3e c5 d2 08 ae 56 76 65 9d d0 54 a7 fb bb 56 eb 97 9f ea 4c bb 28 ae e4 a5 06 7f 9c fe aa 84 01 27 7c 69 83 53 20 27 e1 5f e3 9d f1 50 a0 38 04 81 12 1e ca 7d 5a ea 10 24 45 37 83 0e 5d 37 1e 09 14 bf 31 c2 84 9f c6 48 8d 97 3a 33 4a 07 82 cb a9 bf d5 64 c2 7f d1 4e ab dd 49 31 09 78 e0 eb d7 f0 f8 ca d9 68 17 11 cd 33 ab 0b f1 a7 Data Ascii: /Q.:Y%S_Njl3wqS1(/9vT46[V-0P^dI$K8z)IQ!p7)uX-(.twH<PT>VveTVL('\|iS '_P8}Z$E7]71H:3JdNI1xh3
2022-11-03 19:15:32 UTC	64	IN	Data Raw: 0e b4 33 5a a9 5c 66 11 aa b3 f7 d4 9e d4 f7 1d ac 65 34 bc e5 0b 4f fd ea e2 5c b9 28 76 29 bd ce 55 96 6b cc 7a 35 3a 9a 5f 17 5c eb 12 b7 b1 e1 d7 05 97 a6 b8 3e 0a 58 9d 98 bf af 74 31 38 e6 0b 9e b5 07 93 8d f4 cd c2 c2 f5 d0 58 ce 90 30 7f 5f f2 69 08 18 ca df 0a 2e 5f 67 65 d4 d4 39 28 4f 29 73 bc e9 dc cb 41 fe c7 68 65 7e 43 a3 db 58 70 6b c2 d3 cb a7 1a 8c fc eb 4d 38 e9 27 a5 92 9c c5 af 2f ae 12 a2 75 fb ed 3d f7 dc 83 f7 df 7f df 99 c1 4b 40 d7 36 87 d7 5e 7b 0d 2d 5a b4 08 a8 5c ab ae 0c 06 4f b7 bd eb 7c 9c cb 2f bf dc 6d fb f4 9a d7 0b 67 29 46 74 73 e0 bf fe f5 2f 27 9c 57 07 cf 3f 5c f4 50 d9 85 eb d1 47 1f ed 14 89 b2 c4 52 f9 d5 f0 a5 5c bc e6 9a 6b 70 df 7d f7 b9 6d 1a a6 18 54 79 e6 cc 99 83 17 5f 7c 11 a7 9c 72 8a 6b 13 2a 67 7d 9c Data Ascii: 3Z\fe4O\(v)Ukz5:_\>Xt18X0_i._ge9(O)sAhe~CXpkM8'/u=K@6^{-Z\O\|/mg)Fts/'W?\PGR\kp}mTy_\|rk*g}
2022-11-03 19:15:32 UTC	68	IN	Data Raw: 04 5a 1d 9c ad ed 32 12 96 74 50 b9 b6 78 4a 78 d2 24 57 be e5 a3 34 de c9 dc 5e 8d d3 d3 d9 70 f3 26 05 8d 68 c4 44 54 4c 8c 4b 8b b8 4d 94 83 29 27 35 15 ed 41 a0 1a c9 f9 98 01 61 05 48 5f bf 11 69 39 f9 b4 46 51 56 21 88 6a 95 8a 94 e6 b4 26 e3 bb 55 be fb c2 d5 ef aa 81 d3 45 76 65 56 ef 20 de f5 39 ab 1f 97 c2 7d 77 69 54 af 95 51 58 77 b4 d6 28 ce cb c4 9e cd c5 88 68 d7 92 b7 f7 55 7d df 8b 5e 96 a6 01 fc ea e0 4a 98 95 52 6b c0 80 01 6e 0b bd 26 e4 0a db 17 67 74 13 1c 29 85 4e 3c f1 c4 4a c5 a3 be 79 f9 23 98 7c 0c 9e 7c e3 33 7b 56 7a 85 29 2f ef b7 60 e0 fa c7 11 0c 4d 94 84 9f ce c9 93 2f fe 17 8f 0b b6 da 81 26 4e 5e a7 76 60 f8 29 dc 70 d0 44 4a 3f a3 a5 60 69 fb ad e0 29 4e 20 67 69 a5 e0 f7 5a 3c 0a a7 b4 b4 34 d7 f6 f4 4d bc d4 8a 66 d7 Data Ascii: Z2tPxJx$W4^p&hDTLKM)'5AaH_i9FQV!j&UEveV 9}wiTQXw(hU}^JRkn&gt)N<Jy#\|\|3{Vz)/`M/&N^v`)pDJ?`i)N giZ<4Mf
2022-11-03 19:15:32 UTC	69	IN	Data Raw: 29 b3 4e 9f 39 c3 95 45 96 9d 5a 8c f8 e1 87 1f dc 39 8c 82 2d 4b cf da f2 92 6c 20 bc d4 c7 e9 f2 18 f5 bd 1a 57 de 7e fb 6d ac 5c b9 d2 95 51 e5 4b 25 ef 89 66 5f 7d f5 95 eb 97 b5 a5 bb 36 d8 b5 95 2f f0 77 96 5a 7c c1 3e a9 24 34 1a 89 21 7b b0 72 d9 0e e4 14 89 66 40 44 72 0a 52 93 7d 16 e8 c2 cb 5c 48 00 b9 d8 f7 8d b0 04 cf 91 9b b0 d9 ee 25 53 87 84 53 e6 5e b7 1d a5 ec 2b 12 e3 f3 b0 7d 7e 06 c2 7a b6 45 62 69 2e 76 6e 62 bb 69 db 0a 89 91 b4 2c cf d9 89 ed 5b 39 f7 e8 d9 06 71 5c 75 28 ab 50 5a ed 0d db 07 57 61 1e 8c 2a f2 f5 7d ab 0c 27 22 a1 a1 1c bf 0b 33 90 b6 b9 10 91 ed 5b 81 a7 fb ea fa 9a 0a 1c 7d 90 6b fe 4b 98 52 88 85 e6 21 6d cd 7a a4 e7 17 70 de a0 42 85 21 86 f3 86 ce 49 da 9a af 38 06 c5 68 e0 0b 33 ba 39 1e 54 3c 8b e6 70 b0 74 Data Ascii: )N9EZ9-Kl W~m\QK%f_}6/wZ\|>$4!{rf@DrR}\H%SS^+}~zEbi.vnbi,[9q\u(PZWa*}'"3[}kKR!mzpB!I8h39T<pt
2022-11-03 19:15:32 UTC	74	IN	Data Raw: 62 28 b6 b4 bb 14 cf fd eb 06 6c 7c f3 41 fc e9 df 6f 60 f1 98 9f a3 1f 77 39 14 50 46 a9 10 6d 6a 47 34 c8 18 d6 9e c4 37 7a 16 cf e9 cc 5f 5d 8c d2 9a 47 6f 5c d4 f7 78 a4 e7 bd 87 39 db 57 a3 59 54 2c 4e 4c 1d 42 45 0d 65 26 4d 9e 18 5f 63 82 2c 14 65 a9 27 a7 f6 ad 3e 54 37 60 ab 1d 8a 17 d5 16 75 9c 84 e2 a8 cf 0a d4 76 94 4e ca 32 f1 bf 14 8f b2 de 1b 3c 78 b0 b3 9c 57 3f 30 71 e2 44 07 5b 47 50 e8 52 18 59 67 2a be 16 26 35 21 d4 b3 ea a6 ba be c1 c2 65 61 38 69 d2 24 87 ab f0 14 6e 47 d1 ca f3 fd f7 de 77 61 c2 59 e5 d2 38 2a c5 9d 9c c2 e4 84 63 30 4e 79 19 5d f5 5c cc 71 be 90 7d 66 2c c7 0e f5 ed ea d3 44 6f c1 d3 fb 6f 7e f3 1b f7 13 6c 95 55 69 0c 5f ff fc 0c ae f0 ce c8 e4 36 73 2a e4 64 05 7d 16 c7 43 fd e4 84 af c9 16 5a ec d7 4f ae 36 d8 Data Ascii: b(l\|Ao`w9PFmjG47z_]Go\x9WYT,NLBEe&M_c,e'>T7`uvN2<xW?0qD[GPRYg&5!ea8i$nGwaY8c0Ny]\q}f,Doo~lUi_6s*d}CZO6
2022-11-03 19:15:32 UTC	78	IN	Data Raw: 6d 32 e2 98 47 74 2c cf 6c fe ec 4b ec 48 1d 8d fe ed a8 9c de 31 03 1f ce cd a0 02 fb 08 0c 38 a9 33 95 af cd a8 38 e5 a2 e8 ea 85 f8 78 c1 1a 84 74 e9 85 be dd d9 1f d3 b2 56 8b 23 5e 49 c1 64 04 ef 3c c3 c2 ea 3d 3b 54 06 5a 5d 2c 62 e5 8b 86 21 9c a4 c6 b1 43 6b c7 2d d8 db 96 2d c4 ca ad 3c 7f 21 7c 17 be 9d 47 93 cf df 0f 47 c2 ae d5 f8 ee f9 b7 f0 09 87 eb 23 76 87 f2 cc a1 50 ac 5d b0 01 db b9 4d 20 f7 fb 25 e8 d5 6e 00 ba a4 cf c4 ec 69 5f 63 d5 b6 62 ac 5f b8 03 d1 a1 67 e2 c4 21 ed 68 2e ca 73 c5 28 bc 48 50 b3 49 99 26 36 b6 72 5a 57 41 8c e8 3a a7 74 fa c9 19 0c ef bb 3d bb 08 be 48 24 2e b7 21 44 50 e9 46 6d 79 76 97 d1 f8 05 95 8e 05 bb 78 8e 4c 04 57 41 25 de 84 71 85 6e d7 47 78 f3 95 cf b0 ae 24 01 71 05 3b f0 29 2d 22 6f 3b bd 2f 07 88 Data Ascii: m2Gt,lKH1838xtV#^Id<=;TZ],b!Ck--<!\|GG#vP]M %ni_cb_g!h.s(HPI&6rZWA:t=H$.!DPFmyvxLWA%qnGx$q;)-"o;/
2022-11-03 19:15:32 UTC	82	IN	Data Raw: ba f6 43 09 2c c4 44 15 b3 54 7b ab ac 30 a4 21 2a ad 4e f9 7b 94 85 81 2c 32 d4 cf ba 70 91 ca 93 d0 ac 88 91 90 df 5b f7 8d a5 9d 19 48 da d8 c9 7d eb 81 45 d4 80 67 d3 87 b7 e8 62 d5 39 7b f6 6c 0b fe 2f be f8 62 bd ca 6e 74 9f 05 47 d1 58 a1 91 88 cc da 64 99 eb 92 37 48 ad 60 99 37 d2 47 60 34 35 a3 b2 36 30 fe 52 17 6a 65 72 8d 96 e4 a1 a0 59 0b f4 ce dc 40 b6 bb 1d 7d ca fc d0 32 21 15 9d 92 78 e0 64 39 91 34 17 6e 96 c9 03 27 fd 28 ee da 1b 89 96 bd 62 69 56 59 82 3c 6a 4f f7 0b 08 a6 76 23 7d 1d 72 4d 55 55 d0 e5 01 03 2f 15 d0 df 7d 09 cf 2a 79 7b 8b 51 da 42 b4 85 7c 21 4a e7 08 38 c0 fd c5 96 d7 1e 6d 02 88 9f 2a 83 d1 8a a6 d7 fb d2 a9 9d 8c 36 d4 de 0e c3 c0 5e ad 10 c4 72 ca 02 a2 d0 2e 8a ca 1b d9 9c 7f 19 eb 31 7f 16 dd d1 ec 2d a5 36 0a Data Ascii: C,DT{0!N{,2p[H}Egb9{l/bntGXd7H`7G`4560RjerY@}2!xd94n'(biVY<jOv#}rMUU/}y{QB\|!J8m*6^r.1-6
2022-11-03 19:15:32 UTC	86	IN	Data Raw: fb 4e e8 4b b5 f7 a7 9f 5c 88 e2 f2 7d c8 cc 75 23 9f 8e 6b 83 43 9b 23 c8 f5 0c 5e 7f 31 11 15 43 e8 7f a2 05 89 08 fa 78 54 14 b1 93 9d 04 7f 8d 83 54 b4 65 9e 2c b3 20 6d 9e 7a 6e 10 b4 b4 1a fa f4 e9 63 49 d5 75 68 d0 b8 9a f1 ae 4f 7b 94 57 87 1f 1d 2c 84 18 e5 f3 ad 7b f7 ee 96 36 85 ea 52 3d 8d 49 2a 57 6d 09 25 01 1c 16 ca ad 40 c5 10 44 13 c6 9d 6a fd 1d 51 26 a7 62 60 04 cd 49 98 8c 46 db 11 ef 8f f2 c3 c0 40 ed 54 df 25 d9 ac cd 50 d7 6f c1 cf 9b 81 a4 e2 74 00 39 82 c1 5e 5d 87 81 9d 77 7e f3 ac 76 33 54 bf f2 e9 80 77 c5 cd d7 62 f3 a9 1b 49 3c 1f 99 eb 50 69 1e 1d f3 ae c5 38 32 1e 6d 74 6e 2b 17 bb a1 3c 3c 9a a4 6f 55 be 37 9c 4d 7d 1a 0f 93 cc 33 f3 bb ae ab e0 2d ad c6 f5 6b f7 23 b6 c5 1c 4c 9c f4 b5 b5 09 d7 95 b7 ae 67 5f 7e 4d 27 bd Data Ascii: NK\}u#kC#^1CxTTe, mzncIuhO{W,{6R=I*Wm%@DjQ&b`IF@T%Pot9^]w~v3TwbI<Pi82mtn+<<oU7M}3-k#Lg_~M'
2022-11-03 19:15:32 UTC	90	IN	Data Raw: 2a 42 28 a8 61 80 93 c2 72 32 1b 9d c9 08 0b 7c 0d 33 9f 68 8a e2 53 c6 63 54 eb 13 55 4c d2 7a 67 fb c9 9b 08 8a ec 8e 51 d3 93 10 1e 42 0d e3 b2 00 44 75 1a 88 b3 2e 09 c2 a6 2a 0a 70 e3 7b 63 f4 d8 0a 84 2f 5c 8d dd 48 c3 f9 c3 86 d2 b5 86 d3 da d7 02 12 87 63 fc 65 84 6f cb 38 2a 82 51 a1 a3 ed 44 8c 3f 93 41 4d 3b 52 23 9f 6b 84 44 1f 82 78 f6 0e a5 70 24 a9 2f 83 d1 51 73 38 8f 4a 5d 76 0a b3 4b 03 9b 33 f0 da 10 d8 72 7e c0 86 60 5a b1 4c ed 8e d8 f8 04 ba de 23 df 64 f2 44 c4 25 c6 d1 72 85 38 5c 3c 99 e9 17 a0 3c 81 5a a1 34 c9 6e 77 da ef 70 69 e5 b7 d8 44 d7 08 d1 03 2e c0 e9 9d 88 b7 fd f9 d7 20 41 33 57 b0 c6 83 74 5e 99 a3 23 86 b4 fc 3b fe f0 43 1a 6e bf 41 bc 31 27 7d 89 33 00 20 85 39 9f 85 df 8b 67 e2 e8 ce 23 2f 00 71 dd fa a2 eb f6 d5 Data Ascii: B(ar2\|3hScTULzgQBDu.p{c/\Hceo8*QD?AM;R#kDxp$/Qs8J]vK3r~`ZL#dD%r8\<<Z4nwpiD. A3Wt^#;CnA1'}3 9g#/q
2022-11-03 19:15:32 UTC	94	IN	Data Raw: d2 3d 19 21 34 b3 ae 71 34 7f cc 4e b3 7c 8b 88 e0 62 a0 09 89 39 3b a9 2d 76 12 98 da e0 0f 4f 6c 93 b7 ba 6d cc 63 b5 4b 6d 3c 02 b6 5e f9 58 a6 c7 24 cd d3 a7 93 83 0c 3d 50 15 0c b5 28 1b 72 28 39 da 78 9c ac e7 a6 4d 9e 39 78 18 9a 2a 5f f3 47 ed 35 79 1a 52 a7 f9 46 cc 47 21 09 43 9c 1c af 0c 3b d7 4d 7d 93 a9 43 57 b5 5f d7 86 24 cd 5d fd 99 72 1a f2 ad f2 7a 7f 57 17 fc 8e 57 9e 60 6b ad 9f 46 c2 f8 58 e5 cb d7 63 00 4d 08 d9 ca 63 65 f3 7a 47 49 25 37 97 52 79 3d 3f 91 a4 31 a8 ee 0f 07 c5 13 71 b3 be e5 69 2c aa e7 5c 7d 3f a9 6f 3e ef b9 51 df b9 a2 f1 d1 1a f0 1e e7 fa d6 67 f2 99 6f 7f c9 35 af 3a 35 af 84 fb 15 78 4a 87 58 93 4c 7b cc ef fa 5c 6b 7f a3 df 8a 9a 9b 92 92 62 95 ad ba 7c e9 bf 01 81 ea bd 8e c1 21 4a fd 22 d1 c4 b6 0a b3 5e fd Data Ascii: =!4q4N\|b9;-vOlmcKm<^X$=P(r(9xM9x*_G5yRFG!C;M}CW_$]rzWW`kFXcMcezGI%7Ry=?1qi,\}?o>Qgo5:5xJXL{\kb\|!J"^
2022-11-03 19:15:32 UTC	98	IN	Data Raw: fa da 06 ec 0e 1f 86 96 a9 51 58 91 93 80 96 6d 9b 21 12 fb b0 64 d5 7e ac 9c fd 1d 96 6d 58 09 c7 a6 65 b0 c7 9e 89 51 20 51 ea 48 40 97 01 fd d0 ab 53 2c 03 10 30 1a 34 b5 87 b4 01 4a 6b a7 55 ab 56 96 b6 ad b4 7a a4 69 2b e9 f6 c9 9f 2b a2 05 04 3b 11 e7 92 ca 7b 24 ed 32 31 a2 22 24 bd bf ef c3 a6 1f d2 b1 ea db 95 58 b9 6e 11 ec 9b 97 c3 91 72 1e 4e e9 7f 3a 2e 3c e3 36 dc 75 d3 22 f8 f7 b9 19 7f 4d 6d 0e 17 83 9b 44 bb b7 23 a6 63 1b b4 f4 cf 43 be 15 89 b2 91 e3 e2 fb cc 07 81 5f 04 02 1e 5a 58 73 df 6e 0f 45 42 97 3e 18 dc b5 99 c5 e4 02 5d 2a 14 95 52 83 30 70 33 de b9 8c 74 2d 03 37 86 36 e9 89 f3 ee be 1e 43 23 b3 b1 77 cd 7c 2c 78 7e 01 b6 b4 8a 86 b3 cd 20 8c 8f 3e 80 15 1f ad c2 f6 90 9d d8 16 7a 31 a6 77 4e c7 ea 4f df c0 07 31 57 e1 c9 a9 Data Ascii: QXm!d~mXeQ QH@S,04JkUVzi++;{$21"$XnrN:.<6u"MmD#cC_ZXsnEB>]*R0p3t-76C#w\|,x~ >z1wNO1W
2022-11-03 19:15:32 UTC	101	IN	Data Raw: 00 02 12 a0 5a b8 81 38 2f 20 2e 0a 71 5b 97 62 51 ee 68 9c e1 a0 35 87 30 0d 5d c2 48 80 2c 7c 2b 8e 84 70 ab 30 90 98 89 36 32 33 84 ab 6a 68 32 e6 54 59 24 96 ac b8 1f fa d2 ca 6e 3d 57 3e b9 aa 21 dd 44 57 1a 01 62 6e f0 39 d9 1b 2c c1 93 cf 4d cd 48 e1 ef c3 7c 13 e6 53 fe f2 10 f4 b9 fb 65 fc 63 ce 83 f8 c3 e4 15 18 f7 e2 35 18 13 44 64 6e f9 91 e4 d7 16 2e 27 8e 64 1f 7e 39 61 b4 da ff eb 4a fe ff 9d 60 2b bf 2e 20 fc 76 5b a3 c5 c3 c3 0e 67 bf 98 7e 76 fa 10 08 09 71 58 cf c0 e8 7d 95 5c 09 25 94 be 06 db 72 91 bd 79 23 56 38 7a 62 9c 16 a6 22 34 51 e5 58 87 13 2b 02 93 89 a0 c7 27 da fc b5 c0 b4 74 6d 36 9a 59 94 d0 71 36 b5 22 43 fd 9a a3 69 eb dd f8 66 45 06 26 8e 8b e2 02 f3 d4 2b ed 10 17 eb b2 d6 15 17 95 16 96 98 8f be e4 83 80 0f 02 3e 08 Data Ascii: Z8/ .q[bQh50]H,\|+p0623jh2TY$n=W>!DWbn9,MH\|Sec5Ddn.'d~9aJ`+. v[g~vqX}\%ry#V8zb"4QX+'tm6Yq6"CifE&+>
2022-11-03 19:15:32 UTC	106	IN	Data Raw: d0 43 ed cc 99 33 ed 9e 7b ee 69 b7 dc 72 4b 3b 7c f8 f0 c6 0f 09 da 7d 2d ec aa 3e 0b 81 42 a0 10 28 04 0a 81 42 a0 10 28 04 0a 81 42 a0 10 28 04 0a 81 42 60 ff 22 60 8c e4 dc b9 73 8d c5 8b 1f f9 c8 47 5a 7f c6 e3 66 2e d3 60 71 71 b1 07 31 58 e9 f8 f8 c7 3f be 07 33 0c c8 10 c4 a8 40 c6 66 e8 1d 1c be 73 80 40 f4 b1 63 c7 da 7d f7 dd d7 83 5d 0f 3c f0 40 3b 7a f4 68 df d6 d6 d6 76 fd 5c c9 f3 da 3c f3 1f bf f4 91 e0 2a be 58 0f 9f bc f5 97 3b ea 63 3d b9 fd e5 e8 44 0f b6 b2 9f 12 fc bd ff fe fb db cd 37 df 7c 91 9d 97 a3 2f db 51 f9 42 a0 10 28 04 0a 81 42 a0 10 28 04 0a 81 42 a0 10 28 04 0a 81 42 a0 10 28 04 2e 85 80 71 87 e5 e5 e5 be 10 ea c6 1b 6f 6c fd 56 eb cd 1a d2 80 6d 65 65 a5 07 8f 58 ed 48 80 83 8d 60 0c 89 bc 8a 37 d3 53 fc fd 8d 80 73 80 Data Ascii: C3{irK;\|}->B(B(B(B`"`sGZf.`qq1X?3@fs@c}]<@;zhv\<*X;c=D7\|/QB(B(B(B(.qolVmeeXH`7Ss
2022-11-03 19:15:32 UTC	110	IN	Data Raw: 04 0e 32 02 4b 06 24 00 81 83 19 81 8b 7c 2b 35 3c eb c8 53 67 1b a9 07 c1 2e b8 8f 3e f4 0b 6a 7e ec 9e 7c b0 30 3f 96 d9 8f 65 7d 85 6e b6 e1 37 75 24 e7 95 73 a6 33 77 c9 07 36 91 c6 b6 c9 b7 6e ec 33 3e c9 b3 ad 6d 2c 77 c5 93 0f eb e4 d1 d6 40 a1 7a ec 4b d9 31 b5 1e 6a fb bc bf ba 7f aa 4f 3b a4 f2 69 5f a9 10 28 04 0a 81 42 a0 10 28 04 0a 81 42 a0 10 28 04 f6 06 02 5e c7 7b ed bf 37 ac 2e 2b 0b 81 42 e0 a0 21 60 0c 23 fb dd 03 8f 1e c4 10 30 8f 10 65 0e 6c 39 6f 00 43 de b8 4d 17 de a7 1f 60 33 2d 6d c6 9f 26 bb 9f 78 ce 15 a8 1b fe 89 07 73 83 34 9e 23 b6 eb 95 bb e0 43 7b b4 7b 9a cd d9 07 f3 b6 43 de 7c f6 59 b9 4c 75 37 f3 c6 6d b2 be 6c 13 fc 71 3b fb cd 75 b6 b1 8e 36 b9 1d b2 95 0a 81 42 a0 10 28 04 0a 81 42 a0 10 28 04 0a 81 42 60 ef 20 90 Data Ascii: 2K$\|+5<Sg.>j~\|0?e}n7u$s3w6n3>m,w@zK1jO;i_(B(B(^{7.+B!`#0el9oCM`3-m&xs4#C{{C\|YLu7mlq;u6B(B(B`
2022-11-03 19:15:32 UTC	114	IN	Data Raw: f1 c9 d4 fd de 7d df 71 a2 0d 72 1c b3 b3 bc f5 50 f5 66 3c 72 fd 4e e4 e9 3b 1f db 2c d3 77 b6 9b bc 75 e4 e7 3d 27 59 d9 b8 b4 be d0 56 17 22 9e 12 2f 90 59 88 e0 22 91 15 fa e6 79 8f bc 54 c6 bf 6e eb 46 89 fd 2e b0 0d bf a8 0f 15 f1 92 99 01 6b 74 12 a0 9c 47 02 c3 71 ca e3 4a 3e 97 c7 b2 f3 28 3b 4e d9 36 78 6c a4 9c b7 7f 79 da aa dd f0 e5 29 3b 0f 6a 1f d9 0e 6d 98 47 7f 59 27 7d ba 4f da 7f a6 ee eb e3 05 5d c8 f0 83 b0 b2 e8 d0 0f f4 c3 87 07 9d 96 90 b5 ce 76 52 c7 ce 7a 29 7a 90 61 43 66 66 81 47 3a 40 a9 1d 41 d9 e8 44 00 38 d8 79 c0 53 1e 07 d9 48 50 4f 6e 94 d5 07 dd 2c d9 0f 6d e9 c7 b2 79 28 c0 db 2f 7a ec 8f 3c ba dd 68 2b 4f fb 28 cb 57 f7 98 97 ed b4 9d 6d 94 dd ca 07 64 0e 42 12 27 7c 15 4b 29 e3 94 37 f1 c8 3c c6 8d 2d 63 ab ce 83 8e Data Ascii: }qrPf<rN;,wu='YV"/Y"yTnF.ktGqJ>(;N6xly);jmGY'}O]vRz)zaCffG:@AD8ySHPOn,my(/z<h+O(WmdB'\|K)7<-c
2022-11-03 19:15:32 UTC	118	IN	Data Raw: af ed c4 41 99 6b 49 f3 d8 62 2b b6 91 f4 d5 7a f8 6e d4 b9 59 7f 2d 7d b0 ef fe cc c1 f8 ce bf 1a b7 31 47 a4 b1 c7 09 58 d5 88 8d 04 d2 58 51 c8 1f c1 be b5 43 6b 6d 35 16 32 ad c6 2a c8 43 c8 a6 31 53 df 2c 28 a1 cf fe c6 ea 1e 9e 8b c0 05 ff d8 13 7f dc 7a 8d 0d dd 9e b0 89 c0 e3 fa 62 d8 12 7f e7 d7 b0 39 64 63 eb 72 51 47 94 83 ba 43 f1 90 47 66 18 b1 8e ae bf 97 66 61 6d d2 41 b8 25 6c e4 45 be dc 55 ba 74 28 56 37 72 cc 8b 3e b1 e7 50 04 6c 17 62 ae af 2f 62 d3 e0 17 ad 99 23 e3 7d 20 69 bd ec ac f3 50 bd 1d 3b c7 74 0a 75 5e 4e a3 b4 35 e5 bc bc ab a1 d3 ec 84 97 fb 19 e3 62 1d be 91 c6 f5 57 63 cf b4 b6 f4 87 4d 24 fa e4 87 44 92 58 99 a7 ce 2d d7 75 e1 f4 81 3e e4 b0 5b 5f 72 1f d9 1f f2 26 65 2d 4f a3 4b 28 b6 03 28 0a e0 8d 93 ca a0 e6 05 9e Data Ascii: AkIb+znY-}1GXXQCkm52*C1S,(zb9dcrQGCGffamA%lEUt(V7r>Plb/b#} iP;tu^N5bWcM$DX-u>[_r&e-OK((
2022-11-03 19:15:32 UTC	122	IN	Data Raw: d2 71 79 b9 d3 c3 f1 dc 01 2e 58 01 86 a0 23 3b 84 af 86 cf fa 2b 5f 08 14 02 85 40 21 50 08 14 02 97 8f 40 3e 7f 9b bf 7c 2d 97 d7 c2 7e 76 ea 62 52 eb b8 16 b1 6f 79 fb 89 ea 1b 7e 82 2d f4 dc f9 d5 ee e2 f9 78 20 7f 5b 7b 6f 6b 77 5c df 3e 7a f6 3f b6 8f 3e 74 be bd 99 f7 fa ad 0c 5f 48 e2 ca 2c fe 8f b6 b6 7a a4 b5 a3 37 b6 16 c1 c9 b6 7e a4 dd be 74 ac 7d f6 e1 5b da 93 8f 3f ae dd 12 01 c8 bb 23 40 79 f7 0d b7 b5 9b 8f de d0 6e 39 76 43 ac a0 bc ae dd 7e e3 6d 11 a8 bc 39 7e 34 5e 6e d7 2d 5f c7 b7 9a be 2a 45 6c 57 d7 56 fb 0f c9 da 27 7f bf 50 af 71 a5 f8 95 f3 bb d1 4f ed 83 fa e5 43 9e f6 3a 5e d0 4a 85 c0 5e 41 80 d9 ca 4f 24 93 98 4b 64 7a a4 85 25 2e ec 98 51 e3 7c ee df 2a 7b a9 b7 89 3a 64 ba 08 a2 38 1c 85 be 5f 4c be 90 93 1f ef 27 88 55 Data Ascii: qy.X#;+_@!P@>\|-~vbRoy~-x [{okw\>z?>t_H,z7~t}[?#@yn9vC~m9~4^n-_ElWV'PqOC:^J^AO$Kdz%.Q\|{:d8_L'U
2022-11-03 19:15:32 UTC	126	IN	Data Raw: b0 a3 1c 7c 24 b0 28 3f 77 4a 7e ac c7 7a 29 21 8a fe 37 31 5a 3d ea d7 99 ce e7 72 b1 3b 8a de c1 61 7c ce 7d e4 bc ba 42 22 64 ba 31 bd 3d 32 9d 31 d1 35 9c c2 d0 87 25 c8 69 dd 40 d1 63 9b c1 d6 a1 cf 71 5f 96 d1 37 f4 8d a2 8b 07 a6 db 3f 19 1c 6a 6d 83 3c 89 2a ec e8 f9 c9 ed e5 dc b6 c4 c5 7e 37 7b 03 83 38 d1 22 84 0f c1 3b 1f ab 11 d0 a5 3e 9c 38 74 68 f8 e5 af db 12 27 d5 61 75 db 70 02 c5 0f da 13 10 e2 21 c9 fc ca 07 55 47 44 b3 30 3d f4 86 7e da 06 65 1b fc ea 15 f4 3e 04 8e 09 22 45 1d 6d 49 83 0d e8 1b 78 51 15 f9 5e b5 f9 47 c8 e0 9a fd 77 1a f3 aa 53 fa a5 e5 44 91 7d 49 e1 bb 5a af cb a1 2a 78 f1 1d 29 aa f0 9b 00 64 b2 bd 8f c9 60 d0 86 0e da 80 05 dd 74 4c 22 9f fa c3 82 0e 09 7a 42 e6 42 a2 d4 0d 8f 4f 7c be 78 0b 6d 1b a2 f6 25 dd a8 Data Ascii: \|$(?wJ~z)!71Z=r;a\|}B"d1=215%i@cq_7?jm<~7{8";>8th'aup!UGD0=~e>"EmIxQ^GwSD}IZx)d`tL"zBBO\|xm%
2022-11-03 19:15:32 UTC	130	IN	Data Raw: 62 9f a5 ab e9 43 b1 21 0e 3a fd a1 7e 74 ca dd b4 d6 b2 d3 99 ef 0f 75 19 74 d3 77 ff 25 90 5d 5c 82 5b 8e b2 ce d9 66 f8 cc 8f 7d e7 44 20 ed 4b 77 bc f7 7e 5a cb 67 ae 86 17 04 14 24 f4 ea c7 6f c7 6b 5a 2d 6a e1 28 d8 38 9e 56 8d 65 0d c7 b4 70 b4 bf 3b 86 b5 23 e3 96 51 01 47 d7 73 74 ac 97 61 a1 65 3f de 38 1a be ac fe 7d fe d0 37 75 16 96 7d fd 36 f1 67 bf 5f 1e 92 8f e2 1f ce 67 db 85 74 9f 66 a6 d8 20 ef a4 47 3f 7f 10 d0 32 97 8a 82 9c e9 ad 23 63 52 93 74 f2 ea 38 a0 3e e3 a7 ca 88 10 77 3a a4 6f 3d 4b 39 34 57 69 56 ff 5e 3d 8c 4a 49 15 40 f3 de d1 ce 80 dd 9f ae 04 ba 12 e8 4a e0 6e 24 90 ed 5b d3 fe 55 2f d9 1e d1 06 55 cc cf ab 67 75 af fd 82 0a 38 76 d2 b8 5f 16 8f 95 80 84 bd af 47 75 af d7 ea 7e 8f 57 1a 5f 5b d0 39 52 34 9d 2a 18 cf 04 Data Ascii: bC!:~tutw%]\[f}D Kw~Zg$okZ-j(8Vep;#QGstae?8}7u}6g_gtf G?2#cRt8>w:o=K94WiV^=JI@Jn$[U/Ugu8v_Gu~W_[9R4*
2022-11-03 19:15:32 UTC	133	IN	Data Raw: 32 cd 6e 69 5a 5f 4e b3 e6 91 53 60 c7 04 41 51 aa aa 41 d7 38 04 7d 8c 61 2c 2c 05 0e 5b 93 80 5d c0 7b c1 ba 4a 63 d0 db b9 03 10 71 3b 72 d0 1a 14 10 aa 7f 60 28 26 b1 c4 44 8f a6 fc 94 f6 e0 80 89 14 38 13 84 45 16 00 a1 a3 82 47 2c ba ee 2e 8d 01 98 a7 d5 e3 e0 70 03 bc 82 74 a6 f2 cc 74 34 0a d8 fc 40 26 ca 45 4b bf fc 32 08 90 68 5e 38 e5 7d 5c cb 39 64 8c 2d 27 f2 19 61 33 15 41 39 d3 d5 1f 93 49 07 85 4c fc 5a 4b 0a c6 4e f0 75 b2 02 75 5e 13 78 44 be 5a e8 f5 69 f1 48 fa a7 14 24 cf c6 39 ed 97 47 00 5d d7 79 14 a0 72 6a 7a 01 1e 05 6d b1 5a 24 ef eb 94 6e 88 a5 bc 27 00 1d 77 5a 46 b0 f0 dc ce 99 65 45 b0 cc 0e c5 00 a0 60 8b 2b 3c 0e 42 3f 01 65 0b 03 52 77 ed 17 41 be 9c 8a ac 55 2d 80 65 01 83 c9 53 4b 11 20 b0 56 af c3 18 54 f8 6c bc 30 57 Data Ascii: 2niZ_NS`AQA8}a,,[]{Jcq;r`(&D8EG,.ptt4@&EK2h^8}\9d-'a3A9ILZKNuu^xDZiH$9G]yrjzmZ$n'wZFeE`+<B?eRwAU-eSK VTl0W
2022-11-03 19:15:32 UTC	137	IN	Data Raw: 5c 07 a8 17 45 a3 1f 2d 07 0d eb 22 c6 24 3a d3 6d da 13 4c 04 3c aa f7 a9 74 71 9f 81 a6 26 ff b0 9d b2 55 f9 64 38 d3 85 62 eb 3c 05 62 9d fa 3a 83 02 d6 02 6d 60 00 b0 8d 0d 42 86 5c 83 12 a5 e7 97 fe b4 28 34 8f a0 67 aa 5c d4 d8 ac 9b 4d 6b 79 68 9e 1b 77 d3 ef c9 5f 1f 61 ed 28 54 30 b1 b7 b1 9a f3 2b 5b a6 4d fc 0d 45 ee 54 5d 65 91 c0 1e e9 cf dd c3 c5 ec a0 93 55 d6 7c 68 c0 47 d3 90 d6 96 3c 67 fa f1 a1 4a 67 42 74 2e e2 6c 99 12 6c 9e 84 8e 1d fe e4 05 3e dd 3c 48 eb d6 21 be 82 da 09 50 f0 c9 3e 96 84 5a 2c e6 a6 3e ae 3f c9 94 6b d7 44 74 f3 20 ad 4b a7 59 0f 91 6c c1 2f f9 e5 f4 e7 b4 78 c4 52 12 e0 71 50 e0 91 5e d2 8c d3 88 01 14 89 22 d3 9d 56 9a f2 a9 6c 73 a3 95 12 be 37 2d 07 cb 14 ef 04 ff 08 9f b2 cc 3c b5 ac 92 b7 a8 fb 81 5c 07 d3 Data Ascii: \E-"$:mL<tq&Ud8b<b:m`B\(4g\Mkyhw_a(T0+[MET]eU\|hG<gJgBt.ll><H!P>Z,>?kDt KYl/xRqP^"Vls7-<\
2022-11-03 19:15:32 UTC	141	IN	Data Raw: fa c8 23 2d 2e 95 19 f9 95 5f 0c f1 97 60 61 b3 3e e1 a0 3b 56 03 48 b3 2f 0e 1d 0a c1 60 e3 b7 23 d4 00 74 d9 39 c2 42 35 99 2f 65 5f e0 d2 32 e2 94 6e d7 7f 6c 0d 00 e2 41 d7 c1 91 eb a9 28 08 01 cb 42 83 67 f3 27 f9 24 0e c2 66 de 32 06 73 1d 4c f3 49 ee cb 8e d7 58 ef 62 8d 6a 77 6d 9a e9 17 e3 1d 72 ce 7c a7 f3 30 40 c7 64 80 05 20 fd 0a 4a 92 9a f2 5b f8 ca 7a 45 aa 0b c8 cd d5 72 c4 e9 91 1d 14 f9 d0 b2 12 d0 71 42 70 93 d4 16 ab 46 3c 18 17 f5 4a 40 bf 76 5c cc 0b 93 9d 74 b9 9a 85 99 8d c8 de 17 38 c1 29 e5 23 ef 0c 9f ce 19 4c 27 3b 70 7c bd c0 2b be 48 bf 79 e5 cb 6c 07 b2 7c ba 21 10 e9 a1 7e ba 89 8f 3b ce 0f d8 51 22 61 65 99 02 79 34 88 f1 39 30 b4 bc 0b 4a f2 d8 3d ba 12 e8 4a a0 2b 81 ae 04 fe db 25 60 7b 9e 3a 82 ab 7d 22 c1 c7 d3 1f 7e Data Ascii: #-._`a>;VH/`#t9B5/e_2nlA(Bg'$f2sLIXbjwmr\|0@d J[zErqBpF<J@v\t8)#L';p\|+Hyl\|!~;Q"aey490J=J+%`{:}"~
2022-11-03 19:15:32 UTC	145	IN	Data Raw: f3 41 37 cb 1d fe ed 08 08 e0 b1 9a 14 a2 29 83 27 cb 44 c9 ab 52 be 2a c0 9d b2 37 3d 58 2b e6 e6 38 dc 9b ce 36 3d 99 fc 9a aa 5c 27 07 d3 72 d7 b5 70 ec e0 e4 ba 91 c8 5c 0b 4a cb 93 80 e8 10 00 26 f3 c5 78 87 1b b2 cd a9 1a c8 59 18 53 13 4d 2d 1a 1d af 65 7e e1 9e 65 3c f3 cf 0e 12 7c 93 86 ac 3b e4 c9 d0 10 c0 3b 90 3e b5 24 7a a5 cd 80 6b 90 32 9e e5 ca bc 96 0f fc 6b 2d 6c 79 1c 1a 9a 4c 5e fb 28 cf 14 e8 5c 07 53 30 51 40 d6 32 94 16 8c e6 3b 69 b1 7c 68 f1 b8 78 31 27 c0 a3 c0 bf 96 c4 a5 93 a5 df 52 6f 8c 43 9e 6d 06 ba 47 57 02 5d 09 74 25 d0 95 c0 03 53 02 d9 66 37 3a 41 2b 7b 34 44 fc c5 53 fe 30 d6 ef bc 23 3e fe 8d 77 45 9c 46 23 be 6c 18 c0 11 fd a0 12 45 0f f0 e5 36 62 fb cd f1 e1 89 ed 71 f8 a2 fd e3 18 ac 1f 27 f9 68 a7 fe 47 0b d0 77 Data Ascii: A7)'DR*7=X+86=\'rp\J&xYSM-e~e<\|;;>$zk2k-lyL^(\S0Q@2;i\|hx1'RoCmGW]t%Sf7:A+{4DS0#>wEF#lE6bq'hGw
2022-11-03 19:15:32 UTC	149	IN	Data Raw: 1a 2b 60 12 b2 33 3e a7 07 15 8b 3f ac f3 d2 2a 4f f0 95 01 b0 72 ae a7 3c a3 e1 32 0d 8d 1c 4d 80 fc 3b d5 dc f0 5a 55 ba 3b b4 c0 51 c9 3b 82 a8 5e 53 49 eb 57 3e 04 e8 44 85 91 1d e1 7b 01 c1 9c 36 9d e5 c6 e7 06 40 eb 4f f3 7f f8 4c c5 ee 97 4b 78 04 88 12 58 13 c8 ab f2 d6 3a 88 ff 2c 07 59 56 1a 7e cb 9a 95 4d fa 9a bc c9 7c 4c 9e 71 6f 40 64 a7 42 d7 2f 7e b3 8a d7 b2 44 c4 f2 6b b9 2a 40 25 03 96 81 02 4a a7 8c a5 49 ea 8a 7c 94 2b e9 ca 74 a3 c0 95 77 c3 87 85 27 81 5a 2d 1f 05 e7 90 6b 01 6e 9b f2 98 ac 4b a7 09 a3 8c ea 69 a7 42 09 42 c3 f4 3b d5 7a 10 59 cd 82 8e 80 77 75 b1 6d b3 c7 34 e5 d4 6e 01 55 f3 22 cb 14 fc 40 c7 32 40 82 f0 c3 f3 80 3b be 97 3a 61 59 34 0d 99 5f b3 f1 36 79 c5 b3 60 61 02 dc 5a 05 fb 8c df 3e a7 be 64 67 c5 72 64 ba Data Ascii: +`3>?Or<2M;ZU;Q;^SIW>D{6@OLKxX:,YV~M\|Lqo@dB/~Dk@%JI\|+tw'Z-knKiBB;zYwum4nU"@2@;:aY4_6y`aZ>dgrd
2022-11-03 19:15:32 UTC	153	IN	Data Raw: 7f ba f9 3b 7b a7 03 47 71 97 94 0d 52 93 6e e9 a2 b4 f2 2f e3 48 af f9 23 ab ba 9b a6 94 13 ca b1 2f 41 38 5c 9b 74 dc 39 5d ba e3 1f c7 7a 35 56 9f e5 a6 23 e9 73 91 34 31 55 7a 35 dc 1c 8d 12 b7 81 f5 93 54 b8 49 7e e4 af 09 98 f4 d3 8f 3e 9a d4 c3 b7 9d 0d 7b 00 f2 e9 29 3f 35 4c 5e 09 6f 27 a1 d0 55 2e 52 d2 2f d7 1a 36 3b 10 05 78 54 c1 4f 33 b0 cf f8 9b b8 93 4e f6 7c a4 6d 7a 8d df 08 95 1d 75 86 7c d2 4a d6 fa 92 a7 f2 90 b6 71 53 f6 73 3a 3b ef cb d4 71 41 60 e3 97 13 3b 50 c9 7d 03 30 17 de f3 1d 3f 95 7f fd 97 18 1b be 4c 81 ff bc e0 52 78 21 9e 1a ae c8 36 19 90 09 39 2d 7e f5 af a7 86 01 d3 e0 bb fc c1 dd 57 76 94 8a 63 a1 ad df 02 76 1a 13 41 ad d7 79 a3 d7 86 ab b4 2e a9 bc 37 7c a7 ef ee 4f 57 02 3f 7d 09 68 c5 90 b5 a7 6f 38 f6 58 ca 34 Data Ascii: ;{GqRn/H#/A8\t9]z5V#s41Uz5TI~>{)?5L^o'U.R/6;xTO3N\|mzu\|JqSs:;qA`;P}0?LRx!69-~WvcvAy.7\|OW?}ho8X4
2022-11-03 19:15:32 UTC	157	IN	Data Raw: ab bc 8a 3f ea 98 7d a3 6d 1d 76 2d 1a 50 f1 a7 72 10 14 f1 d8 16 1a 96 ad 21 7e ba 41 e9 27 8d 88 a3 cd 63 b8 75 b3 9e f8 90 4f 80 69 d3 08 07 97 b8 23 1e fe 20 c2 37 d2 d8 cf a8 e0 d4 98 44 a7 29 cb 6d 24 f1 f9 01 4c 85 a2 bc 44 74 7e d2 3f 9b b9 31 94 9f 2a 25 03 97 69 70 cb 67 e8 0d 69 d3 6b 8b f5 14 ab 1d 67 b9 38 66 76 ca 73 1d 5d e9 88 d2 31 1e 14 8e 6c b1 76 b5 a3 5b ac 63 95 3f 89 a3 c5 04 d1 5a 5b 26 0d 41 ee 29 f1 33 68 7f 91 65 c8 be 63 3e cb 54 37 a7 32 bf ba 70 ed 53 cd 14 cf 25 03 f9 2f bf 23 c9 cf 38 43 19 ae 95 9b 92 59 c9 a4 e4 d3 f7 2f 59 ea d7 37 25 f7 92 79 3f ec 64 72 f7 e9 d4 5d ef f2 b5 91 b7 8d ef c7 cb 07 77 65 64 63 7a bc 09 8c d7 27 c6 f4 f5 ae 5d e1 a5 28 2c bf 08 38 c2 8f a9 fc d2 53 4c 54 83 e9 bb e9 cb 36 79 1f 6e c5 3f 02 Data Ascii: ?}mv-Pr!~A'cuOi# 7D)m$LDt~?1*%ipgikg8fvs]1lv[c?Z[&A)3hec>T72pS%/#8CY/Y7%y?dr]wedcz'](,8SLT6yn?
2022-11-03 19:15:32 UTC	162	IN	Data Raw: 63 3b 3b f2 30 ff 4c 1a 63 29 e0 78 4e 9a 8a 69 a1 ab 58 b5 0c c7 8a 98 a0 4f df 35 29 25 fc a4 49 dc 8f 96 87 1a b3 d5 56 e6 3f bf ed af db cb bd cd fa 12 56 35 3e f7 82 f6 da cb af 69 bf f4 c0 a7 d9 06 ce 6a c7 2b 38 3e e0 76 b6 7c df c0 8a cc e7 ba 45 1d 7a 28 bb 69 43 84 ca 48 33 b9 f3 db c7 52 44 45 bf b8 b4 27 57 38 c9 af 4f 8a 2e b6 39 1e 8a 25 90 78 52 de bd b9 fe 37 3e 7b 4b fb 8e 8b b9 9d fb e5 8f b4 df fa a3 5f 6d d7 9c f7 e4 f6 7d cf fb 56 b3 3d 8c 17 4e cc 71 11 d4 e2 ae bf a4 5c a6 fc 84 27 50 6d ef f6 d9 8b bf 8a f7 d5 c9 2b da d2 16 14 8d 33 17 b7 1d 5b b7 b5 51 ce 5b dd b2 e5 c2 36 b5 f5 b4 b6 ef fe 4b db fc c1 0b 48 44 4c f2 c2 7c 18 9a a1 04 4e 45 09 50 fb a2 bd d2 b6 8d a7 3a 50 97 68 7b a2 71 ca 55 8f 13 7c 04 73 cb f5 2c ab 1e 17 96 Data Ascii: c;;0Lc)xNiXO5)%IV?V5>ij+8>v\|Ez(iCH3RDE'W8O.9%xR7>{K_m}V=Nq\'Pm+3[Q[6KHDL\|NEP:Ph{qU\|s,
2022-11-03 19:15:32 UTC	165	IN	Data Raw: 42 1b b2 36 81 3b 3e 09 0e 63 0d 25 f0 f8 97 40 56 f9 9c 63 5a 81 5c f9 e8 47 08 95 7d b1 cd 98 36 60 d6 ad cf 53 ac 76 c4 8e 33 1f a9 57 4b b4 0f 6e c1 5e 74 d5 a3 4a 7e fe 5d 39 b8 1c 0a 37 e5 d6 cd 25 f1 f3 12 98 98 56 f2 a3 4a 10 c0 5c ee e6 4a 43 a2 45 9d 75 55 24 2b 2c c5 4d b8 0a c4 50 db 01 d7 36 2c fa 04 6d 1e 93 a7 52 cf a8 42 13 27 1f 38 f0 37 c8 5f 3f 3f 84 a2 12 e0 2a 11 f9 2a 11 4d 9b 70 a4 cf 6d d0 82 0a 5a 43 5b 99 ca c8 92 85 ab 17 27 f8 08 e3 b9 8e ae 6e f4 02 99 2d 6e ad 8e a7 53 3a ba c5 3a b6 57 a3 78 04 56 cc ab 83 02 5f a0 5b da 74 06 4d 8f ef 9f 6a 73 b5 fb 8f 5c f7 df fb f1 2a 4c 7b 90 c7 be 9c c2 a6 2f 9f be dc 14 89 ef 47 33 a7 ba 0c 1f ad ec 4a 6e 95 fe 68 32 3e 59 c2 aa 2c 48 7b 29 f9 f5 db f8 18 fe 68 4c ac 78 34 61 01 54 b1 Data Ascii: B6;>c%@VcZ\G}6`Sv3WKn^tJ~]97%VJ\JCEuU$+,MP6,mRB'87_??*MpmZC['n-nS::WxV_[tMjs\L{/G3Jnh2>Y,H{)hLx4aT
2022-11-03 19:15:32 UTC	169	IN	Data Raw: 7e 18 71 a6 77 84 45 9d 31 a6 ff 1d e2 75 75 29 78 ec 68 24 dc 1c f4 d0 70 c5 12 b7 89 06 5e 21 4a 3b 9e e1 0a 2b f1 14 cc 0e 6f d0 dd f9 65 ac a3 fd 06 92 12 39 11 2d 77 9d 3c 2d 43 03 3e c5 ab dc aa 5c 1a 26 5c d3 77 ee 08 33 8f f4 52 3a d8 be 20 33 3d 4d 5b 8a 7a c5 3a 90 45 c0 b5 7e d8 3e 09 b3 67 82 3c 61 09 d4 34 9d bb 17 25 9c 12 53 05 cf 88 46 ef e8 af 8f 15 c2 8e bc 47 de 22 1a ab 72 c0 6b b2 01 1f 38 6d ab ca 44 de 75 ef b6 2b c1 17 76 f0 62 e4 2a 1e 1d bf d9 ce 59 46 44 91 6d 57 30 25 4e 4c ca 00 6e 82 de f4 8b 80 ee a7 ef 7d 58 3e f6 02 45 1d 64 e3 17 79 84 2d 6c 5e e0 41 39 07 4b e9 47 5c e3 68 aa ee f8 16 31 99 a5 04 8f 9d 5c 0d 0f 18 01 57 a7 a5 31 8d 79 20 8e d5 90 9f 2b 38 38 c6 44 44 62 c4 ce c7 34 1d 2d 5d ba 63 59 92 56 59 37 92 82 8b Data Ascii: ~qwE1uu)xh$p^!J;+oe9-w<-C>\&\w3R: 3=M[z:E~>g<a4%SFG"rk8mDu+vb*YFDmW0%NLn}X>Edy-l^A9KG\h1\W1y +88DDb4-]cYVY7
2022-11-03 19:15:32 UTC	173	IN	Data Raw: 2e 1e 93 8b 43 03 54 fa 64 e6 2e ac 74 74 2b b5 ab 1c 77 ce 4e b5 1d 5c 28 b3 83 b3 1d 67 5d ed 38 35 ca 1c cc 8f ff ce 1f 89 cf 13 7d 2b e9 85 e5 bb e0 84 3d 34 47 96 40 e5 6b f5 fd c6 2c b7 e3 88 be 09 f9 9e 82 02 55 46 f2 ae 71 cc da 7f 3f 92 fc 86 32 ec 97 9c 2c 53 25 bf 92 e5 d1 64 57 65 ad e2 d6 fb 7a a8 27 d7 9b fc 68 a4 b5 ca 48 f1 58 ef c5 47 cc 7d 1e 45 5d 5a d3 3a 6e c2 7b 11 60 50 1f b1 6e 11 56 e1 ad 30 e3 95 80 2b 6d 4d 22 ca df 38 9a 0a 2f 77 4e 32 a8 14 32 4d 2b ee 54 84 b9 5f 9c d1 63 a7 54 93 f7 5a ad 66 e7 10 13 2d 26 5b 4e ce 4c 27 3d 2a df 7c 9c 18 26 8d d9 5d c4 e4 dc 38 08 49 a5 49 28 2f 62 62 43 c7 c0 0c 7b 72 72 32 68 52 f9 08 b0 c0 1f 9d 1b 70 dc 5e 33 df 29 f5 92 0e 2b 70 f4 58 31 e1 cb 89 72 4e 94 9c 48 a7 72 4c e5 63 4e fe 9c Data Ascii: .CTd.tt+wN\(g]85}+=4G@k,UFq?2,S%dWez'hHXG}E]Z:n{`PnV0+mM"8/wN22M+T_cTZf-&[NL'=*\|&]8II(/bbC{rr2hRp^3)+pX1rNHrLcN
2022-11-03 19:15:32 UTC	177	IN	Data Raw: 8a 52 57 10 31 b1 8a d5 65 4e 0e 53 04 41 1b 14 25 7d c9 7e 9c 3f 62 67 28 7d 29 bb ae f1 c4 2f 56 03 91 38 14 6d d8 31 89 95 d3 68 53 ed 20 a1 4f ba e9 94 53 61 42 e7 6c 2f 2b 5d 8b e3 4c 28 72 f5 d2 c4 fc 44 9b 43 51 e0 aa 26 0f 37 76 52 99 2b c6 3a 5a 59 fd 14 17 d1 d0 49 aa 2c 35 bf 62 a5 12 1d 35 64 41 9b b8 72 65 6a e4 a9 0a 39 70 2c 2d f9 74 ca 13 f8 b7 c3 af 55 9f 2a 06 52 d1 8c 3f 1d b8 bc c5 e4 9d 41 7c 28 41 42 39 d1 ad 9c 93 7b e0 e5 79 7d 9d 9c a1 25 95 51 99 af 86 2b 63 9f 90 79 28 5a 94 55 27 0f 64 21 6d f5 a4 e2 c0 3c 4d 5e 9c f8 3a 00 58 84 3f 69 54 16 a1 18 06 40 c2 d0 26 6e c4 07 0e 32 0d 18 c8 b0 06 24 a1 38 eb 68 88 15 85 e4 b3 13 69 1f 57 ef 04 cf 96 ea 4e 79 13 db a0 2d d3 28 59 55 b4 5a be 62 32 8d 5c e5 47 bc c6 4d 25 74 e6 61 28 Data Ascii: RW1eNSA%}~?bg(})/V8m1hS OSaBl/+]L(rDCQ&7vR+:ZYI,5b5dArej9p,-tU*R?A\|(AB9{y}%Q+cy(ZU'd!m<M^:X?iT@&n2$8hiWNy-(YUZb2\GM%ta(
2022-11-03 19:15:32 UTC	181	IN	Data Raw: 58 61 8a 8f 18 ac 41 ff 88 b3 2e 60 af 08 8b 74 a9 04 cb fa ac fe 20 e8 11 2f f0 54 5e a6 d2 29 57 c8 29 c3 a0 09 79 46 19 03 8e 40 cc 5f 95 f4 23 51 de 8a 06 70 20 cb 38 12 41 b9 1a 4f b9 20 93 50 2e 49 03 84 8e 84 72 42 7c 2a 60 3b 79 a9 e4 52 49 4b 1b 60 3b 60 bb e0 ca 34 95 8e b9 62 ce cb 3f ba 0c 0e a2 83 61 f2 16 e5 45 e0 92 98 2c 33 49 6f 5f f1 68 7e a4 22 43 b9 02 14 98 c9 7f e6 7d b6 65 91 ae 93 67 f0 6d c9 f0 dc 51 d3 d0 8e 8c 8c 2f b5 f1 65 94 9f ac 7e b4 fd 50 e8 a5 40 32 0f 62 c5 1f 7c 28 bf f5 8a 47 65 a1 ec 19 2c 13 36 8a 8c 97 50 ba c8 e3 18 2b 36 2d b7 e8 92 29 13 29 7f 57 7b 06 ff ca 00 99 c4 2d d1 d2 e0 30 39 e0 20 33 5b 1e f8 4d c5 72 d6 85 50 c0 51 3e 6c 03 15 ab f1 53 e1 8b 2c 92 e0 c0 11 1f 0b e4 0d 58 2a 3f 63 80 6c 3a 72 14 49 44 Data Ascii: XaA.`t /T^)W)yF@_#Qp 8AO P.IrB\|`;yRIK`;`4b?aE,3Io_h~"C}egmQ/e~P@2b\|(Ge,6P+6-))W{-09 3[MrPQ>lS,X?cl:rID
2022-11-03 19:15:32 UTC	185	IN	Data Raw: 1d c9 ca 9c 83 f9 30 0a df d8 9e 6b 8a b6 b0 4d bc 36 e3 ff 92 15 4d 66 b9 2d df be e6 98 a5 1d ca d1 df 79 c7 29 be d9 e4 bd 9f 82 d6 fe 13 28 c7 71 79 b1 bc e3 ec e9 c0 23 f4 f4 c3 da d5 6f 7b 74 9b b4 fc 8a f5 93 4e 53 f7 f4 59 d2 ea 93 40 5e fb 5d 9d d6 78 bd c3 dc f3 e3 ab 03 eb 64 c7 9f 3d 5c 00 bf 78 16 a8 e8 c0 6b ad f2 a3 3c cd 09 6f f9 7b d8 ae fc 0b 98 47 ba 5e 61 52 fd be c6 ff 59 d7 f4 31 af 63 ed 01 dc c2 96 13 80 25 77 81 c7 e7 ca c0 d7 5b 7e c4 8c f9 66 cb f9 35 fd 9f f6 4a 9f 2b 9b 9c ff 72 5d 53 e6 98 ea d8 e7 07 b2 50 46 25 51 c9 eb 9e 78 b6 c3 be 55 3f d6 78 6d fb 23 91 d7 48 ed 78 b4 fd 7b 0c 87 c1 33 1b f4 bf 6d ea 8e 5f fb e1 3f 7f f5 8b d3 77 fd 77 7f 10 64 f8 17 f9 90 0c a0 e3 67 3e 35 fd 87 df f8 99 e9 af fc e3 bf 37 4d 00 6f bc Data Ascii: 0kM6Mf-y)(qy#o{tNSY@^]xd=\xk<o{G^aRY1c%w[~f5J+r]SPF%QxU?xm#Hx{3m_?wwdg>57Mo
2022-11-03 19:15:32 UTC	189	IN	Data Raw: d2 e7 f1 b3 8f 51 e7 1a 72 0e 26 5f 49 c7 4c 36 a1 41 f7 43 af 31 c7 81 8c 57 4a e6 1f 74 86 f8 9e 73 14 f0 bf 8e a8 7c 6e 14 dd 8d 1b 7f 92 d7 7e 8d 7f 42 f1 ec fd a9 3e 72 32 bd 72 fb d7 a6 df fb 37 7e 78 fa 27 3f fd bf 4c d3 6f 7d 7e 9a 3e fe fc f4 ef 7f fe 37 4f 7f f9 4b ff 7c 9a 7e fa 0b a0 bd ec f2 a3 bd 1e 08 e9 88 38 58 f7 fa 03 67 7e a0 b5 8f 38 91 d7 d8 d3 be b7 39 92 4e 83 cc e9 6a 96 aa 6f 3f 69 7e 61 28 0d 79 f4 d5 ff 7e fb da f4 83 3b bf 36 7d 12 d4 79 1f b6 f7 ee df e0 6b e6 37 78 5c 11 60 01 95 d6 19 8c 16 6c b9 8e a7 93 fb d3 d6 73 bf 69 ba 7a bc 3b bd f2 f3 3f 41 77 fd af a7 8f fe 8e ff 6c da dc fb 4e 54 fb e6 69 fd e0 e7 e8 2b f4 79 76 29 02 21 90 77 34 dd 79 f3 d5 e9 e6 4d 40 4a 44 de bc 7d 77 fa c8 09 20 ab bd 7b 9d 2f e5 de 7c 6b ba Data Ascii: Qr&_IL6AC1WJts\|n~B>r2r7~x'?Lo}~>7OK\|~8Xg~89Njo?i~a(y~;6}yk7x\`lsiz;?AwlNTi+yv)!w4yM@JD}w {/\|k
2022-11-03 19:15:32 UTC	194	IN	Data Raw: 25 f4 75 d3 d7 91 3e e9 f4 87 c5 c6 77 63 c7 e8 0b 9f ce c8 98 48 5f ec eb 2d 7d 08 01 ed b7 8e ad d7 e3 77 a7 d5 63 ac d7 69 f3 47 5a cf 0d d6 73 7c 37 58 de eb 03 f3 3d 3a 7f 3c 37 2f 7c a9 97 d8 73 e9 e7 76 6d da 8e 47 1d 4c 2b a3 65 b5 4e f2 5c a5 6f 5a f3 c7 f2 91 6e 35 6d 1d c3 28 f3 81 ba 9c f8 c4 c1 22 af ae 7e 6f 1d 99 df 36 a6 dd 9d e3 e9 e2 89 4f 65 f0 ba 26 2f 63 e9 61 99 0f c9 40 eb cf 16 27 c7 07 d3 3d c6 9f ac 8b 21 3a 62 9e d9 95 86 b9 5d 10 d2 f7 32 fa 7a 1d b4 60 18 f3 47 53 46 1c c6 b9 ac 8d 2d 67 2e dd 63 73 81 5f b2 be cc 2e cb 7c c9 1a c0 f1 12 3b 1d 77 7d 4f b1 eb fe cc a5 35 97 61 8c ea 26 b4 7d 7d 7e 1e bf 33 0f b4 1f bb 6f c9 65 4c 7b 2e cd 6a ff 32 ff 59 0c fa 61 f4 87 3e 68 df 8c 65 ab be 19 eb 74 7a 95 e6 c3 7e ee 18 a7 ed 06 Data Ascii: %u>wcH_-}wciGZs\|7X=:<7/\|svmGL+eN\oZn5m("~o6Oe&/ca@'=!:b]2z`GSF-g.cs_.\|;w}O5a&}}~3oeL{.j2Ya>hetz~
2022-11-03 19:15:32 UTC	197	IN	Data Raw: ec bb 9e b0 80 9d 95 d7 05 67 e9 d5 f9 92 8e e9 b9 ea 1c 0d 72 c8 91 9f 41 f1 b3 0a 8b ba 7d 5e 14 0f f9 3b 33 91 95 ad a3 84 00 a8 7c b8 85 3b 29 f8 01 04 70 f3 c5 30 56 bc 61 2c c8 e2 0b f0 8d d5 75 3c 1e 22 29 74 5d 5e 73 4b eb 1d a9 d1 20 7a c0 b3 e3 a6 37 6e bf 18 57 ff 2e 7f 8c 65 95 0e 71 fc 33 d6 19 e9 3a df bc d3 42 97 9f 26 eb 34 fa 0f 43 5e fb b4 6f d0 db 76 db df f0 ba 8f 1c ff 02 8f 15 7f 99 23 8f 49 db 29 00 12 77 79 07 22 e0 20 cf 34 73 5c 9c be 8d 5d 88 1f d9 65 07 e2 d6 95 e9 1b 2e 3e c7 4e c4 6b d3 0b bb 57 a7 17 d8 75 f8 12 60 e2 45 00 c3 3d be 36 7d 61 07 10 11 20 4e 00 6e 6b 63 9b af bd ee 4e bb 9c 3f 69 50 3f 75 f7 c7 3d 66 db e9 ea b7 fc fe e9 e0 7b ff dc 74 ff ef ff f0 74 f3 ad 9f 9b de bc fc 4d d3 8b 57 3e 36 6d 5f fc 34 ef 7d fc Data Ascii: grA}^;3\|;)p0Va,u<")t]^sK z7nW.eq3:B&4C^ov#I)wy" 4s\]e.>NkWu`E=6}a NnkcN?iP?u=f{ttMW>6m_4}
2022-11-03 19:15:32 UTC	201	IN	Data Raw: ed 8d 3b fd de 49 d2 4f ed f7 e6 da fd d4 b8 cb 2d 1b f3 df 55 1b b5 a0 67 26 ee 76 5b 6d c3 ce 7f 66 1c f1 84 86 b6 7f 46 bf 75 9e ac c6 f4 69 ac bb 7c ac df 74 5d d6 e7 4f 53 dc 63 63 5d 7f 35 16 9d a2 df 5c 10 4b c6 f4 29 a4 0f 66 b5 ed ab 7e e9 fc 07 a9 9f b6 b3 1e 87 46 bd be d6 e3 d1 b8 0e 6a d9 e6 f5 3a ac c7 d4 1e 43 57 e3 2e 1f 6d 58 4d 77 1d 69 7b fd 25 4d e7 af d2 f7 b9 e5 4f 43 50 8f b2 53 6d 7a 7d ba 36 bd fc c9 ef 9f 4e b6 7f 74 fa f2 8f ff e7 d3 9d af fc 3f d3 73 57 5e 9e 36 2e bd 34 6d 5d fa 06 3e b4 fd 29 96 58 af 82 3d de 66 27 e4 0d de d1 78 c0 ae bc fb 7c 34 e2 ce b4 b7 fb d2 74 f0 d2 37 f2 68 e5 8d 69 e3 c6 0d 80 01 77 7e 96 0c fd f3 da 1b 5f 9a 0e d6 ae 4e df f8 5b fe ec f4 91 6f fd 81 f9 f1 ed e5 fa f4 71 7d ae b6 a3 0f c7 b4 65 4f Data Ascii: ;IO-Ug&v[mfFui\|t]OScc]5\K)f~Fj:CW.mXMwi{%MOCPSmz}6Nt?sW^6.4m]>)X=f'x\|4t7hiw~_N[oq}eO
2022-11-03 19:15:32 UTC	205	IN	Data Raw: 5b 00 77 dd dd 9e 02 b7 f8 40 3f ae e3 83 63 40 52 01 5c c1 5d 77 83 1e f3 ce c5 63 77 83 02 98 d6 da 99 ba b6 5d da 6f d6 1b 9d d7 d2 8e c8 30 a6 0c af c4 d6 6c 38 a1 fe 3a 32 22 d3 75 37 76 d5 a3 e0 02 da 50 e2 1f 75 12 f4 3e 09 e8 bb 3d ed e1 43 b8 4f f7 03 3e 6e 4e 07 17 d0 8f 7a 7b e8 75 80 0d ce 09 7e 5c e6 da 85 dd 02 3a 29 f3 1d a4 f2 31 cc 4b 4c 9b 2e 79 b9 26 c8 b4 ff 7e 10 42 8f 6f 1d 3f ed 3a ab a7 47 fb b9 cf 5b ff f1 bc f3 6c 43 83 75 3a 8c e9 ce 7b 16 e2 b6 bb 7d d3 fe 1a f3 c7 b4 3e f1 bc f3 3a ee fc 67 c1 67 a7 d9 d8 7e 33 6e 9f ac a6 bb de b8 ae fc a0 fa ad 6d 34 3e cd f6 b6 f5 71 63 66 83 65 18 99 2f 73 6b 22 6f 81 9d df c2 3d ef 74 0f b6 63 03 34 7d f3 b6 ec b4 e0 98 50 45 55 2e af 00 1b fe ba c9 90 ee b9 87 88 eb 22 3d cf b3 b4 7c 26 Data Ascii: [w@?c@R\]wcw]o0l8:2"u7vPu>=CO>nNz{u~\:)1KL.y&~Bo?:G[lCu:{}>:gg~3nm4>qcfe/sk"o=tc4}PEU."=\|&
2022-11-03 19:15:32 UTC	209	IN	Data Raw: e7 08 f8 22 4f 16 11 c7 82 8c 01 c5 04 1e 05 c6 56 80 47 6a 94 4c e4 0a 84 cc a0 a2 75 b2 cb 0c 00 4a f0 44 e0 4e de ea 2a cd 21 8b 0d 77 6c 09 3e 6a 83 fa 07 b8 73 67 1a 0b 22 81 2d 41 23 f3 9c 7c da be bc 0f 31 aa 33 e1 65 01 0b c8 c1 c4 57 8f f6 02 40 ba a0 62 82 13 34 cd ee 41 80 3c 77 13 d6 8e b0 02 d8 dc 91 55 93 98 26 97 bd 47 bc 34 5b 1a 41 1c 1f 15 c9 a3 d0 94 69 9b 13 5d c0 44 26 bf c8 f1 1d 96 a4 17 a0 9f 60 0b 40 d7 06 c0 0b 55 a8 eb 8e 32 26 5f e4 08 b8 e5 4b 82 69 bf b8 58 0f d7 3f 88 05 8c d4 af 77 3a b6 8f 7d 74 b8 75 48 cb c8 58 db c2 a7 da d8 76 14 3c d2 66 7d d0 bb ec d6 59 88 b9 5b af ea 2f fb 46 f3 b3 9d 65 17 60 49 9e 2c 8e f0 72 d9 aa 08 0a cb df ed 07 81 2d b3 e7 7c fa c5 a1 e0 23 6d d7 c0 a3 65 32 12 68 16 70 de 3a 10 74 16 7c ae Data Ascii: "OVGjLuJDN*!wl>jsg"-A#\|13eW@b4A<wU&G4[Ai]D&`@U2&_KiX?w:}tuHXv<f}Y[/Fe`I,r-\|#me2hp:t\|
2022-11-03 19:15:32 UTC	213	IN	Data Raw: ed d9 e7 54 08 3d f5 e0 5f 74 a5 6e fa 8e 13 65 f3 38 3d aa 8a fb fb 27 80 cd c3 7e d0 d6 5b 51 02 17 6c 1b ee 48 40 bb ea 13 aa a4 6e e9 71 0e 08 29 5f 3d 05 6d 67 70 b8 0e 43 57 2c 59 68 eb f1 28 28 da 36 cf 75 41 63 75 71 6c 27 66 91 6c 79 40 c1 51 77 7d bd 74 5b 62 65 c9 d6 e6 80 b2 8e f7 c3 b4 13 58 8d de d2 4b 19 63 1d 71 b4 99 a0 a3 ed 62 07 68 90 05 5f ae 9d 51 4f fe 01 87 a5 31 6c e1 62 cd f1 b5 c7 fb 74 f6 11 4a af ca b6 8f bd e1 2f da f1 5c 56 37 81 e8 fd 5a 40 d4 78 28 5b 52 2b b2 15 78 ea 28 d2 0e f2 4a 01 50 7a 14 2a d9 f8 a5 5a f0 9d de e2 87 83 43 3c 4a f1 d0 3c 39 cc 75 dd 20 b7 f6 a9 00 9d fc ca e1 d8 d8 d8 7f 14 2e d1 62 81 c5 02 8b 05 16 0b 2c 16 58 2c f0 ac 16 c8 62 06 e4 47 80 48 b0 8d b5 41 b6 02 37 28 34 d3 01 73 5a bd 0a f8 b4 07 Data Ascii: T=_tne8='~[QlH@nq)_=mgpCW,Yh((6uAcuql'fly@Qw}t[beXKcqbh_QO1lbtJ/\V7Z@x([R+x(JPz*ZC<J<9u .b,X,bGHA7(4sZ
2022-11-03 19:15:32 UTC	217	IN	Data Raw: 0d eb 64 16 5a 05 66 09 a2 de 46 c7 e3 4f 8a 56 bc 3a d1 b3 3d 1a dd 6a 2c e8 c5 7b a9 f3 91 15 01 43 f3 04 60 95 23 de 91 a4 af 0a be 8b 52 80 2f 5e 8f d4 cd fb 21 c9 73 1d 94 0f b4 40 67 f6 7a f4 bd 94 ca eb fb 98 5e 81 af 5b 9c 03 92 1a 73 9e 75 2b fd e8 73 48 3c 14 69 ff 05 ca ce 00 ae f2 ec 63 2f d6 5e f9 12 76 80 44 0c 2c 68 68 ba b7 5a 3b 12 ed c7 bc d3 73 94 d9 26 1f 74 c9 08 2a cd 10 37 fd f5 9a 1e 88 8c 81 7c 9c 86 72 65 0b 58 4b bf 4a 87 35 ea a5 e3 cb 75 fe bb 3f dc f4 ed 7b 3f 28 60 59 ef da 80 8f 8e 35 e8 67 6b 3d 7d f6 06 60 a9 1f c3 11 18 ce c7 8e f8 91 9c eb c0 35 3e 17 11 c3 b9 7e d4 51 c0 ed 6b 61 9e 2b 2c f7 fc 65 9a 43 94 f9 65 0b 3d 3f 19 77 fa b2 39 fe 65 d3 6d 91 77 b1 c0 4d b2 c0 95 c0 63 4f a6 5e dc f3 c4 6b 5a c0 c2 72 cb 04 33 Data Ascii: dZfFOV:=j,{C`#R/^!s@gz^[su+sH<ic/^vD,hhZ;s&t*7\|reXKJ5u?{?(`Y5gk=}`5>~Qka+,eCe=?w9emwMcO^kZr3
2022-11-03 19:15:32 UTC	229	IN	Data Raw: 03 2f da 66 b0 1d 4b ac f3 b6 09 9b df 86 ec 78 ae df ed ba 9e 65 0e dc e6 d7 e5 db 6d cc 7f da 31 b7 31 bd 84 c5 02 8b 05 16 0b 2c 16 58 2c f0 fc 16 70 91 ea bd cc 7b dd a6 f5 7c 4f 7b a2 70 53 6d 49 2d 16 78 61 16 98 d7 44 4d d4 bc 1e 8b f3 ba 68 2e 37 bd ab 6d d7 b9 69 71 db a2 d7 9a ea af 0d db 8e c6 86 b6 a7 e7 ae 4d 3b 74 fb 8e 3b ff bb 8c 67 59 e6 f4 d3 64 5a d7 65 1c ed e1 f5 78 01 96 72 ad bd 83 40 b7 31 ee f4 8e 6a 69 cb 86 c6 9a 37 67 42 5b b8 d0 85 b6 1f fc 84 53 2a b8 25 5a d0 4a 4f 42 81 b4 5b e4 f9 0e 40 f3 da c3 f0 c3 df 5e ad 7e 04 50 35 07 bd db 7e f0 7e 6d af d6 d3 f1 6d 8e 00 8f 00 63 79 4f 24 74 f5 fc b3 8f fd 92 f3 31 80 98 ef 95 fc cd e1 05 a8 c7 de 81 e0 a3 96 a0 cf fd e0 89 ef 7b 74 9b 71 00 33 14 b1 9d 20 9a db ac 05 3e 3f fe a8 Data Ascii: /fKxem11,X,p{\|O{pSmI-xaDMh.7miqM;t;gYdZexr@1ji7gB[S*%ZJOB[@^~P5~~mmcyO$t1{tq3 >?
2022-11-03 19:15:32 UTC	245	IN	Data Raw: b1 81 2d a6 be a0 ce 71 0f 7e f3 66 7c 5e 8b 74 62 e4 ea 96 13 10 40 23 97 12 7e 4e 7d 77 16 ab 45 df c7 b7 63 15 ee d7 ab cf b8 48 9f 7b a1 f6 ca 43 54 4e b6 72 5c 04 8f f8 48 38 41 70 01 e9 a4 c3 6b c8 cc 8f 69 2e 63 64 3a 61 00 4e 58 26 37 be ab cb 0b 5f 2a 18 99 06 c2 c5 93 7c bb 8b c8 58 e7 a7 bb 31 43 09 34 06 d3 09 61 3e 25 55 1f 1c 82 b4 0e a4 55 8f 92 c9 a3 35 da b0 92 84 af 38 17 c9 b3 61 9c 03 9c 67 92 01 3d 16 63 be 93 0d 68 72 2b 98 a6 46 9f 26 6e a7 a3 32 17 01 60 d4 a5 a7 64 f6 64 a4 16 d0 82 14 7f 99 6f 00 14 38 70 1a 4b da 04 d3 82 a8 c4 b4 59 06 2f fe 87 3e 30 f0 80 2b 8b ce 70 25 67 ea cb 36 d7 21 a6 6c 61 2a 93 c0 e8 1c 3c a1 23 3e ea aa 8f 02 01 37 3c 67 f1 2f 4c e7 07 9a 7c 26 19 71 1c 52 36 b7 ab 95 9d 1c b9 53 cd 9d 97 a5 73 db 4b Data Ascii: -q~f\|^tb@#~N}wEcH{CTNr\H8Apki.cd:aNX&7_\|X1C4a>%UU58ag=chr+F&n2`ddo8pKY/>0+p%g6!la<#>7<g/L\|&qR6SsK
2022-11-03 19:15:32 UTC	261	IN	Data Raw: 97 3a 77 0f 98 3b 1d b3 eb 51 af 63 fe df bf ee 10 fd 41 b0 6f 3d 16 ba ac fb 62 c7 c2 9b ee be fc 58 fd d7 96 df f2 34 ff 73 ac 2c 1e 3f 1a 9e 74 3c ee 11 ab 6b 3b 1e 84 b8 04 eb 1a dc c7 ee 4a 3c 1b 1d 31 7d d8 a7 b6 81 f7 31 69 3b 6b 98 1f 71 d8 cc cf 81 5d f1 d9 b9 0d f5 58 75 e1 f6 63 33 dd 70 1d 4b a6 b7 fb 5a af fe ab ee 01 e3 4a 2d 0d 2c 0d bc 56 0d c4 86 0c e3 5d 4e b8 e6 54 c3 50 5b bb 67 98 2e 7d 2c 6e 58 6d 44 e1 2b 3c 8d bb cb ad df e9 de e5 dd 76 c5 73 83 e7 73 59 8c 1e 3c b5 73 54 b6 2b 5d 0b 91 c6 f7 10 ae 6e aa 88 f1 0c 26 ea 4b c8 9c c0 96 77 0a b5 71 fe 29 6b f3 c8 c9 83 d0 37 7c 1e f2 52 20 4d b3 54 58 7c c8 b7 c8 a4 b5 ac e1 03 55 ae 93 a5 81 37 a3 81 8c e3 c1 6d db a6 ce 9b cf 3b 2d 68 97 bf 19 21 7f 01 a3 4f e9 a4 cb 5a 87 db f3 a5 Data Ascii: :w;QcAo=bX4s,?t<k;J<1}1i;kq]Xuc3pKZJ-,V]NTP[g.},nXmD+<vssY<sT+]n&Kwq)k7\|R MTX\|U7m;-h!OZ
2022-11-03 19:15:32 UTC	277	IN	Data Raw: 02 6e fe f6 b9 82 21 1b 88 ea 1b ad 01 d3 f7 ee f1 7d 97 6f 72 7c 3d d5 77 d4 7c 5e 41 cf 35 24 e2 28 3e e3 2f e5 65 4c d2 0e 1e db 98 a3 61 a4 b4 45 c7 a9 e3 86 7d 5c cb b0 97 72 f7 0b 5f 7a 5a d6 7b df a1 b2 7f e3 31 83 93 33 a0 83 93 32 fd 29 23 43 3d 07 75 52 ea e4 a9 f7 3c 4e d0 46 d9 bb ea a8 28 11 c6 0e fc 6d 3c 57 a1 74 42 4a 69 3e 01 e2 db 41 4d 90 c8 1e 76 6b 49 8f c9 28 11 90 dc ba eb 5b a7 35 b4 6e 47 85 90 81 1c c3 1e 35 8a a0 b2 0f 03 54 3e 96 b2 13 d1 b7 ab ea ea 64 59 b5 3d 4a a7 c2 4d 23 8a 88 da fa 2d 82 cd f3 c1 81 e1 3f 26 fa 1c 55 d9 d2 b2 8f b1 7c e0 35 49 58 f3 79 67 9b 6e 49 c5 5f 76 17 d6 6f 56 32 98 60 95 6f 8c c6 4e fd 4a ee ad 76 35 fa 4d 8c 9d 63 48 60 b3 68 47 cf 2b bd f8 ca ee c3 0a 8c 0a 0e 66 37 51 65 72 53 fe e8 8f 7f 8c Data Ascii: n!}or\|=w\|^A5$(>/eLaE}\r_zZ{132)#C=uR<NF(m<WtBJi>AMvkI([5nG5T>dY=JM#-?&U\|5IXygnI_voV2`oNJv5McH`hG+f7QerS
2022-11-03 19:15:32 UTC	293	IN	Data Raw: 9e 36 f2 c8 23 93 be b4 a5 9e dc c2 7a 49 3d 63 d2 fe bb 72 e6 09 51 ba 6f ce b4 c7 36 f2 a4 b4 45 26 ed 33 9f 08 7c 15 02 ef 89 51 e6 4a 2c a6 9c 9c f6 19 9f a0 31 d3 b5 23 70 ec b9 34 af f5 d7 1e 31 9f f7 7f c6 dc e7 31 ec 1a 3e 82 e7 3c 8f 3b 82 97 5d 9e f1 71 d9 eb fb 51 ef 12 17 e4 fd 7a b0 d4 47 5f 3f d2 9f b6 b7 c6 47 7e e6 c7 21 90 f5 61 d4 21 8c b3 0e c9 91 4f f9 d0 38 e4 2e 39 05 bf b7 30 08 56 c9 83 49 ea 6f 8d 8f fc 25 e5 c1 0e 9f 0e f9 1f 8c 7a ce 18 ea 3d 77 e5 44 5f e2 2b 79 6c ee fe 2c cb 1f 71 63 c3 c3 5b 92 02 68 26 a4 9d 72 da 97 44 23 ed b4 45 26 72 21 ea 30 30 84 63 74 f5 7a e6 45 8e b1 a4 38 15 9d d4 97 ed d1 91 f9 2c f0 1b 5e d0 1f 5f f0 33 b6 c4 e7 5e ef 36 61 4a c6 45 07 b2 bf db de df 00 c1 54 79 e2 08 24 be 30 f3 98 18 9d f1 79 Data Ascii: 6#zI=crQo6E&3\|QJ,1#p411><;]qQzG_?G~!a!O8.90VIo%z=wD_+yl,qc[h&rD#E&r!00ctzE8,^_3^6aJETy$0y
2022-11-03 19:15:32 UTC	309	IN	Data Raw: f8 27 43 23 ac 70 fe 24 ec 65 85 58 d9 58 e1 2c 9b 54 09 c2 15 77 95 df 3e 7c e2 16 01 5e e7 2c 02 16 e4 37 f7 7c 6c 68 93 b9 45 0b cc 21 39 e6 00 6d 39 a8 34 c5 99 4f cf eb b9 64 7f 1c 40 20 f6 8f cf 5c 59 ce a5 ac fd e0 79 68 2e d5 c9 d5 3a f9 18 59 07 9a f9 d0 a4 d7 db c5 3a 6c 16 b2 0b ec 92 30 6b 27 7e e5 2d 15 c4 ba 0e e6 0c fb b2 b1 2a 5c b6 f8 bc b6 45 ea c3 ff f0 75 ed aa a9 7d 5e 54 c6 e9 45 98 71 d2 99 3f 5c 84 d1 cf 71 ea 28 c8 a3 95 2b 85 4f 39 a5 6b 20 2a ec e8 48 df a5 50 a4 ec bf fa 46 fb fb ef 00 d2 18 47 c6 b3 da 13 59 4a 60 d4 99 c4 7c 58 70 d6 0f 5d 62 77 21 1e f1 a3 23 eb 34 e5 0f 5d 28 48 7a bb 42 20 58 04 2b 52 13 9e f3 8e e1 95 32 c7 f2 3b fd 6b 23 90 f1 8d 4d d0 9b 84 e7 bc 63 bd 4c 99 63 f9 9d fe 35 11 c8 b8 ce 3e e1 5c f4 2a 79 Data Ascii: 'C#p$eXX,Tw>\|^,7\|lhE!9m94Od@ \Yyh.:Y:l0k'~-\Eu}^TEq?\q(+O9k HPFGYJ`\|Xp]bw!#4](HzB X+R2;k#McLc5>\*y
2022-11-03 19:15:32 UTC	325	IN	Data Raw: 4c 2e 15 c3 f4 fb 92 6c 2f 7d 3e df 5a 5e ae b9 86 a0 79 c9 b1 78 a2 44 fc 97 ca 9e 92 97 0e c5 a7 0e e1 f9 84 4e da a3 cd 63 17 f5 c8 3b d5 a5 ec 2c fb 14 19 a9 97 b2 d4 9f 65 1c d2 ef 58 99 c8 38 55 e7 4f 5d 4e 44 1e 2f b0 e0 b0 56 1c b7 57 3f ad 78 09 87 c8 47 7e ff eb e2 39 79 9b 95 4e 3a 8a 88 bc d5 1b ad b7 0f bc f5 9a 97 c0 90 29 2c 5d 79 4f 3c fa 76 69 91 8f 3a ae e8 97 c0 04 cb 7a b9 4c d5 73 2d 55 d4 79 c6 b2 1b d9 f0 4a e4 23 27 1f 7f 40 40 8a e4 5c 73 ea 92 db b0 65 23 7e 59 06 24 8d 08 9b 3a 20 86 5d 45 eb af ef c7 46 f1 83 d7 d2 2e e9 e5 9c 76 a8 5c ca 7c 7d 44 de b1 07 c3 50 76 84 1d 38 72 25 5d fe 3e 4c bb 65 58 23 9b 84 a3 8e 31 c8 98 50 68 27 87 b9 21 01 cc 8d 21 cd 32 d4 92 53 90 2d 6a de 69 3b ef 99 1e 23 8f d2 51 24 32 29 37 a5 47 87 Data Ascii: L.l/}>Z^yxDNc;,eX8UO]ND/VW?xG~9yN:),]yO<vi:zLs-UyJ#'@@\se#~Y$: ]EF.v\\|}DPv8r%]>LeX#1Ph'!!2S-ji;#Q$2)7G
2022-11-03 19:15:32 UTC	341	IN	Data Raw: 3f 4a 86 8e e4 d9 ad 4a 7b 6c 38 45 ef 49 b2 1a 43 8b b2 ae 89 63 bc 8c 1b 7b 62 83 63 95 d8 39 69 80 9f 2f bc f5 7f 31 d7 d4 ef 3b e6 78 98 db 41 22 ba 7e 3e 2a ed c1 57 22 90 38 21 7f 2d 9e d2 46 9e 44 79 ee 97 fa 4b cd c1 22 ff 71 0e 06 f9 cf e3 63 f1 00 4f ae c9 b3 9e 19 ef 63 f5 b4 dc f7 44 60 9e 57 2c ec f8 f8 9e f3 f4 5f 58 95 75 9e fc 14 1b fa ba 71 0a 5a a7 cb 7e 64 dd f6 dc 14 de 89 eb e4 a7 cc c2 25 63 f8 91 d8 03 63 fa cf 3a de 83 ff 29 73 f5 51 d9 cc f5 a9 ff 36 9e 32 ee 51 c4 23 0a 01 8e 84 51 01 d2 15 e3 23 ed c9 e7 36 ca 01 7b d9 9e f3 b4 e7 4b 1f e7 f3 71 48 9f eb b1 0d bb 18 07 42 94 2f 8f 29 2b 5f de 3c 33 e6 3c 5e c6 99 eb d1 1b 99 b4 93 23 13 b9 b9 7e 2e 2f 65 d0 95 84 1c 29 84 43 ea 77 79 ed e0 2b 37 8a dc a5 fc 5a 8a 3d c8 cc 7a 97 Data Ascii: ?JJ{l8EICc{bc9i/1;xA"~>*W"8!-FDyK"qcOcD`W,_XuqZ~d%cc:)sQ62Q#Q#6{KqHB/)+_<3<^#~./e)Cwy+7Z=z
2022-11-03 19:15:32 UTC	357	IN	Data Raw: 6f f9 5e 7c 7d 9f 1c 08 44 d7 f7 45 e3 3c cb ab df 76 6c fb 88 3c 44 17 3e e1 01 89 ee ab 84 d2 f2 33 fb a4 fd 52 7e 3b 5d 0b 98 08 3b e2 6e 4e cb 9e 21 87 76 fb ae 9c d0 7a 74 9e f1 c0 ea d8 00 3d c9 0b 6b 8a 74 44 17 cf 13 e0 3a 5a 7a ab 79 11 9f 32 51 1e 6f 5d e8 e3 05 31 09 9c 47 77 c9 0f df d7 5c 40 ef 4c 24 22 c7 3f 0c aa 7d e4 ea d8 e9 40 eb a8 9f 06 7e 68 5c 18 d4 58 d0 ff 1d 06 3b 5c 82 0f f1 21 19 23 a6 f2 0e 8d c0 5b 08 1c e3 73 e8 88 af 11 27 c4 3f 53 96 fc 4b 8d c1 72 fe 7e 9a ef ad c7 e2 01 8e f9 2e 1a 3d 33 de c7 ea 69 b9 af 89 40 fb c7 d7 1c 97 af 60 55 e6 79 e2 53 6c ea eb c6 29 68 9d 2e fb 9e 79 db 63 53 78 c7 af 13 9f 32 0a 97 8c e1 7b 7c 0f 8c a9 3f eb 38 07 ff 53 c6 ea bd b2 19 eb 53 bf 3b 9d d2 ae 1e 6f a8 05 ee 22 00 12 21 31 86 cc Data Ascii: o^\|}DE<vl<D>3R~;];nN!vzt=ktD:Zzy2Qo]1Gw\@L$"?}@~h\X;\!#[s'?SKr~.=3i@`UySl)h.ycSx2{\|?8SS;o"!1
2022-11-03 19:15:32 UTC	373	IN	Data Raw: a7 cd 02 1f b2 b3 26 ed 34 18 25 32 65 9c 90 1c 7e b0 f5 5f 55 9d db c6 a6 f9 1c cd ef 69 ee 04 cb be 8c e8 dc ff 7d 73 84 f2 f9 38 24 63 ec 06 de 5f a6 73 6d c8 97 44 e0 18 9f c3 f0 f8 1a 71 02 69 ea a7 2c f9 97 1a 83 05 77 d1 e4 fb c7 7c 67 ce 31 98 80 63 be 8b 46 cf 8c f7 31 3a 5a e6 eb 22 d0 fe f1 75 c7 e6 6f 5b 96 79 9e f8 14 7b fa ba 71 0a 5a a7 cb be 67 de f6 d8 14 de f1 eb c4 a7 8c c2 25 63 f8 1e df 03 63 ea cf 3a ce c1 ff 94 b1 7a af 6c c6 fa d4 ef 4e a7 b4 bb 77 c7 23 20 11 12 cf e9 18 65 81 23 3f a8 13 f0 e7 fa b3 7e f2 09 f9 d2 c7 f9 7c 2c 9b 8a fc 32 7f 77 5e fa 86 da 5d f6 6f a9 59 8e 36 77 02 69 63 b6 63 ee c7 9c 3f a7 97 32 5b 8d f4 09 6c 0d 2f b1 1c 52 85 03 ee ad d8 b9 09 6c 08 a6 b3 4e 08 aa 34 e2 a6 cf 6d 40 f5 66 7c 46 47 7e d3 16 1b Data Ascii: &4%2e~_Ui}s8$c_smDqi,w\|g1cF1:Z"uo[y{qZg%cc:zlNw# e#?~\|,2w^]oY6wicc?2[l/RlN4m@f\|FG~
2022-11-03 19:15:32 UTC	389	IN	Data Raw: cd ee 49 e2 be 12 e5 6a 87 87 94 bc da cf e3 33 63 26 e7 98 d7 48 e8 f1 cf 29 9e b4 9f 87 d7 d6 28 7f c5 03 c4 10 29 b1 75 2a e6 7a ac c1 d3 f9 29 b3 7e 49 b4 9d 73 8a 9f ba 7f 3a f8 18 3a 3e a2 4c 8a cf a8 e7 3c 18 3a b4 b4 9b 79 7d 7c 6a 0f 64 3e c9 53 5e f1 f1 a9 a7 f4 b7 1a 9f b5 de 63 82 0e 12 2f 29 93 87 97 b6 75 de c0 23 7f 2e 65 ad 66 1e f0 7d 9f a3 d0 b1 80 32 09 1e ca 6b 6e ec 8e 83 4f 28 e0 bb f8 89 fa 29 ff a5 ed 9c 7d 88 6f 12 4b 29 bf 26 f6 f0 1d 29 7e 8e 0e f2 8f 9e 32 ce d8 99 78 81 9e f1 a4 ed 3d b9 df 6a 9d 4e b6 14 6e 39 eb 2d 8e 8b 7c fa c0 c8 f4 93 3c 34 78 3b 3f ed 39 e6 c1 75 d9 63 1b 8b 89 93 0d 27 1d fa 19 2d 63 a2 33 dd c9 3b 23 cf 69 83 9d b6 88 a5 8f d8 f0 de 3c f6 45 5f ea 1f 33 c7 e7 58 76 f4 bd eb f8 10 a0 c2 47 01 90 f7 bc Data Ascii: Ij3c&H)()u*z)~Is::>L<:y}\|jd>S^c/)u#.ef}2knO()}oK)&)~2x=jNn9-\|<4x;?9uc'-c3;#i<E_3XvG
2022-11-03 19:15:32 UTC	405	IN	Data Raw: 82 e8 ca 4c 77 b9 6c 64 4e ae b5 0b 8d e7 71 62 af 4e 93 96 cf 6d d3 e5 6b 04 5f 97 3c fe c1 9a 72 f2 d7 69 38 cd 55 a3 3c dd 8e 2f e8 cb 3e f1 68 ef 5c 07 40 83 9e 43 ce 2d 5f 4c aa ba 7c e9 98 18 ce a8 2a 77 11 2a 8e 21 72 36 01 72 8b b2 a3 4c 99 7d a9 b8 21 7e f2 c7 d5 b9 ff 69 a1 d8 23 96 98 0b 64 38 07 29 76 d1 89 3c 79 95 a9 57 3f d9 a5 e8 3e f9 40 4e ba 00 20 fd 7c 48 d5 fd 8f 87 d1 1f 4b c7 73 34 74 d9 1e 6b ab 0f 2f af 51 e7 25 4c ac 49 db a7 8e 6d 86 da d8 6d c9 42 ca b3 60 d1 e7 83 35 60 e0 53 7d d8 74 c6 81 4d e7 93 12 ff f8 35 e5 d7 8e 1e fe ac 35 fb d3 f3 f9 5a e9 c5 77 ae 1e 48 9c 25 7e de ea 87 c8 ad 98 2b cf b1 06 73 f1 03 e5 e9 f7 44 ce c1 75 26 0c 4f ea f1 3b 7e ec df 31 29 43 5b e9 6b 78 60 c5 c7 d7 98 c7 3f 31 8a ac f3 e4 bd 8f 9c 27 Data Ascii: LwldNqbNmk_<ri8U</>h\@C-_L\|w!r6rL}!~i#d8)v<yW?>@N \|HKs4tk/Q%LImmB`5`S}tM55ZwH%~+sDu&O;~1)C[kx`?1'
2022-11-03 19:15:32 UTC	421	IN	Data Raw: e0 e1 5b bd ac 51 fa 93 46 8e ae 38 69 7c ea 07 9c 73 73 69 86 f5 e2 1c 9d 1c c6 11 e3 87 1c c5 f0 5d 87 3e c4 fa be 0f c6 16 48 1f d0 e6 8e 0c 1a 20 07 f5 1b 63 e1 49 af e1 de 2f 3e 80 e4 af d9 0d de 87 5d 01 f6 89 fb 8e 4a f4 7b 32 ab e3 5e cd fd 29 ed 7e 4b fd f7 4d f7 e7 c8 fb 8e 77 57 ff 6b e7 dc 1a ef ae fe 7a bd 7b dd f1 d8 17 89 b9 3c 0e 28 6f 72 82 7c e7 1e 54 f8 d2 62 75 06 7e b7 0a 58 47 70 d6 f7 dd bc 3d 3e 2b d7 6f e6 ce ad 87 fc a7 88 d7 d6 28 cf 3a 3c c5 75 8f 35 8d 0a 8c 0a 8c 0a 8c 0a 8c 0a 8c 0a 8c 0a 8c 0a 3c 9e 0a 70 8d c2 e0 9a d1 41 43 0f 1e c0 e7 d6 36 ea 37 e7 c1 17 dc e9 b8 5c db 5c ee 97 4e f5 b6 98 ef d7 d7 a1 1a 2e 56 fa c4 17 8d 46 1a 8f 27 27 27 0d db 78 34 8e fa 60 7d 83 9b bf ba 8e e5 eb d4 0c 1a 8f 47 47 47 8d af 0c 9b bc Data Ascii: [QF8i\|ssi]>H cI/>]J{2^)~KMwWkz{<(or\|Tbu~XGp=>+o(:<u5<pAC67\\N.VF'''x4`}GGG

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2888, Parent PID: 4356

General

Target ID:	0
Start time:	20:15:25
Start date:	03/11/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff7d31b0000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2008, Parent PID: 2888

General

Target ID:	1
Start time:	20:15:26
Start date:	03/11/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=1720,i,3077636488585137432,12682884879542634454,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d31b0000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5304, Parent PID: 4356

General

Target ID:	2
Start time:	20:15:27
Start date:	03/11/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\Remittance advice.HTM
Imagebase:	0x7ff7d31b0000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8afd3a3cc52ffe121729f2f37188cc59.png HTTP/1.1Host: gyazo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8afd3a3cc52ffe121729f2f37188cc59.png HTTP/1.1Host: i.gyazo.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: Number of links: 0
Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: Form action: https://bailbondscharleston.com/@366/safe.php
Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: Form action: https://bailbondscharleston.com/@366/safe.php

Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: Has password / email / username input fields
Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: HTML title missing
Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: HTML title missing

Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Remittance%20advice.HTM	HTTP Parser: No <meta name="copyright".. found

Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: Remittance advice.HTM	String found in binary or memory: https://bailbondscharleston.com/
Source: Remittance advice.HTM	String found in binary or memory: https://gyazo.com/8afd3a3cc52ffe121729f2f37188cc59.png

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Remittance advice.HTM

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: chrome.exePID: 2888, Parent PID: 4356

General

Chronological Activities

Analysis Process: chrome.exePID: 2008, Parent PID: 2888

General

Chronological Activities

Analysis Process: chrome.exePID: 5304, Parent PID: 4356

General

Chronological Activities

Disassembly

Windows Analysis Report
Remittance advice.HTM