Just my opinion but I don't think ATM sales are done in large blocks normally. Not that they couldn't but it seems counter to the idea of ATM. Most ATM sales should be indistinguishable from the normal tape so as not to move the market. imo
I'm leaning toward the large late trades being ATM transactions, too.
It makes a lot of sense to think the trading was due to rebalancing, but I think that should have been done last quarter. And since then, I don't think funds would have exited today from recently-acquired positions.