Play interactive tour

Edit tour

Analysis Report https://ccaeperu.com/?real-estate-agent2938423

Overview

General Information

Sample URL:	https://ccaeperu.com/?real-estate-agent2938423
Analysis ID:	384636
Infos:
Most interesting Screenshot:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected HtmlPhish10

HTML title does not match URL

Classification

Startup

System is w10x64

iexplore.exe (PID: 4828 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 1576 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4828 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\VBLSBCBU.htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\B0LQ5SBH.htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\9HQ2AZB5.htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\6LTWT96P.htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\G1MK1W1S.htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\3GXKZCM3.htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\HTQSVEM0.htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\RUFPPAMX.htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\A5FVZRWT.htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon[1].htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Z4A97TMF.htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\RqQo1U5NOq1[1].htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\O7nelmd9XSI[1].htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon[1].htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\r[1].htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 10 entries

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus / Scanner detection for submitted sample

Show sources

Source: https://ccaeperu.com/?real-estate-agent2938423

SlashNext: detection malicious, Label: Fake Login Page type: Phishing & Social Engineering

Antivirus detection for URL or domain

Show sources

Source: https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://ccaeperu.com/r.php?locale=en_US	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://ccaeperu.com/r.php?locale=en_US	UrlScan: Label: phishing brand: facebook	Perma Link
Source: https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	UrlScan: Label: phishing brand: facebook	Perma Link
Source: https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	UrlScan: Label: phishing brand: facebook	Perma Link
Source: https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	UrlScan: Label: phishing brand: facebook	Perma Link
Source: https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	UrlScan: Label: phishing brand: facebook	Perma Link
Source: https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	UrlScan: Label: phishing brand: facebook	Perma Link
Source: https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	UrlScan: Label: phishing brand: facebook	Perma Link
Source: https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	UrlScan: Label: phishing brand: facebook	Perma Link

Phishing:

Yara detected HtmlPhish10

Show sources

Source: Yara match	File source: 562258.9.links.csv, type: HTML
Source: Yara match	File source: 562258.1.links.csv, type: HTML
Source: Yara match	File source: 562258.7.links.csv, type: HTML
Source: Yara match	File source: 562258.pages.csv, type: HTML
Source: Yara match	File source: 562258.5.links.csv, type: HTML
Source: Yara match	File source: 562258.8.links.csv, type: HTML
Source: Yara match	File source: 562258.6.links.csv, type: HTML
Source: Yara match	File source: 562258.4.links.csv, type: HTML
Source: Yara match	File source: 562258.3.links.csv, type: HTML
Source: Yara match	File source: 562258.2.links.csv, type: HTML
Source: Yara match	File source: 562258.10.links.csv, type: HTML
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\VBLSBCBU.htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\B0LQ5SBH.htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\9HQ2AZB5.htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\6LTWT96P.htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\G1MK1W1S.htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\3GXKZCM3.htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\HTQSVEM0.htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\RUFPPAMX.htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\A5FVZRWT.htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon[1].htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Z4A97TMF.htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\RqQo1U5NOq1[1].htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\O7nelmd9XSI[1].htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon[1].htm, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\r[1].htm, type: DROPPED

Source: https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/r.php?locale=en_US	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/r.php?locale=en_US	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?real-estate-agent2938423	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?real-estate-agent2938423	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	HTTP Parser: Title: Log in does not match URL
Source: https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	HTTP Parser: Title: Log in does not match URL

Source: https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/r.php?locale=en_US	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/r.php?locale=en_US	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?real-estate-agent2938423	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?real-estate-agent2938423	HTTP Parser: No <meta name="author".. found
Source: https://m.facebook.com/	HTTP Parser: No <meta name="author".. found
Source: https://m.facebook.com/	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	HTTP Parser: No <meta name="author".. found
Source: https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	HTTP Parser: No <meta name="author".. found

Source: https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/r.php?locale=en_US	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/r.php?locale=en_US	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?real-estate-agent2938423	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?real-estate-agent2938423	HTTP Parser: No <meta name="copyright".. found
Source: https://m.facebook.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://m.facebook.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	HTTP Parser: No <meta name="copyright".. found
Source: https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 68.66.226.79:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 68.66.226.79:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.4:49759 version: TLS 1.2

Source: VEs5hzVWt5B[1].js.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/09P_rcHKL4D/ equals www.facebook.com (Facebook)
Source: BwjU4B_qfpp[1].js.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/HAC-_9WTKIm/ equals www.facebook.com (Facebook)
Source: GonuXiY4BzC[1].js.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: GonuXiY4BzC[1].js.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: fzkbB_w4sxK[1].js.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: VEs5hzVWt5B[1].js.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/ZtTipMAcpq9/ equals www.facebook.com (Facebook)
Source: GonuXiY4BzC[1].js.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/e1uPfGqT9n9/ equals www.facebook.com (Facebook)
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.facebook.c equals www.facebook.com (Facebook)
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://www.facebook.com/-estate-agent2938423 equals www.facebook.com (Facebook)
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.facebook.creal-estate-agent2938423~ equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: ccaeperu.com

Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423.php?locale=en_USRoot
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423//-estate-agent2938423Root
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423Root
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423cmd=9tyym8t91xbt8b81mt81smbbm1s.
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423cmd=bnvtbtxmsbx1vy11snsm8nx8smbb
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423cmd=m9xvsybnvn1sv.bsnmnsyx119yb8
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423cmd=snstmsbsvtx.s1.smysttx.sv11m
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423cmd=stmn8bymn1v1.18svn81tv1ymtxt
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423cmd=svnv9tsbx9tbsttsnxbtbnt.mynx
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423cmd=vt9n.n11981t1t8b1t1xm1msm.s9
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423cmd=xbsmyynyy.8y18y8tvmsstm1ntys
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423om/-estate-agent2938423Root
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/?real-estate-agent2938423~
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ccaeperu.com/r
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/r.php?locale=en_US
Source: ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/r.php?locale=en_US938423
Source: ~DF77662EBE27437295.TMP.1.dr	String found in binary or memory: https://ccaeperu.com/r.php?locale=en_USB
Source: 9HQ2AZB5.htm.2.dr, VBLSBCBU.htm.2.dr, O7nelmd9XSI[1].htm.2.dr, RUFPPAMX.htm.2.dr, r[1].htm.2.dr, RqQo1U5NOq1[1].htm.2.dr, B0LQ5SBH.htm.2.dr, 6LTWT96P.htm.2.dr, G1MK1W1S.htm.2.dr, favicon[1].htm.2.dr, 3GXKZCM3.htm.2.dr, HTQSVEM0.htm.2.dr, favicon[1].htm0.2.dr, A5FVZRWT.htm.2.dr, Z4A97TMF.htm.2.dr	String found in binary or memory: https://developers.fb.com/?ref=pf
Source: 9HQ2AZB5.htm.2.dr	String found in binary or memory: https://fb.com/
Source: RpTFjVvO4D0[1].js.2.dr	String found in binary or memory: https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png
Source: B9RXHZ5I.htm.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/y5/l/0
Source: B9RXHZ5I.htm.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/y6/l/0
Source: B9RXHZ5I.htm.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/y7/r/qMrE4RFJBoQ.js?_nc_x=Ij3Wp8lg5Kz
Source: B9RXHZ5I.htm.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0
Source: B9RXHZ5I.htm.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yR/r/kPkP7qOaPwj.js?_nc_x=Ij3Wp8lg5Kz
Source: B9RXHZ5I.htm.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yT/l/0
Source: B9RXHZ5I.htm.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yU/r/fzkbB_w4sxK.js?_nc_x=Ij3Wp8lg5Kz
Source: B9RXHZ5I.htm.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yb/l/0
Source: B9RXHZ5I.htm.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yj/l/0
Source: imagestore.dat.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yj/r/gB76kJXPYJV.png
Source: B9RXHZ5I.htm.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yr/r/vdzjXL4eT5D.js?_nc_x=Ij3Wp8lg5Kz
Source: B9RXHZ5I.htm.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3iK-b4/yR/l/en_US/W5StuHxENhR.js?_nc_x=Ij3Wp8lg5Kz
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.facebook.c
Source: {6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.facebook.creal-estate-agent2938423~
Source: 9HQ2AZB5.htm.2.dr	String found in binary or memory: https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico
Source: VEs5hzVWt5B[1].js.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 68.66.226.79:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 68.66.226.79:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.219.13:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.4:49759 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@3/61@12/4

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{6767ACED-9935-11EB-90EB-ECF4BBEA1588}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF0C626AC06D5E2361.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4828 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4828 CREDAT:17410 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://ccaeperu.com/?real-estate-agent2938423	0%	Avira URL Cloud	safe
https://ccaeperu.com/?real-estate-agent2938423	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
https://ccaeperu.com/r.php?locale=en_US	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
https://ccaeperu.com/r.php?locale=en_US	100%	UrlScan	phishing brand: facebook	Browse
https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	100%	UrlScan	phishing brand: facebook	Browse
https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	100%	UrlScan	phishing brand: facebook	Browse
https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	100%	UrlScan	phishing brand: facebook	Browse
https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	100%	UrlScan	phishing brand: facebook	Browse
https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	100%	UrlScan	phishing brand: facebook	Browse
https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	100%	UrlScan	phishing brand: facebook	Browse
https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	100%	UrlScan	phishing brand: facebook	Browse
https://ccaeperu.com/?real-estate-agent2938423//-estate-agent2938423Root	0%	Avira URL Cloud	safe
https://ccaeperu.com/?real-estate-agent2938423om/-estate-agent2938423Root	0%	Avira URL Cloud	safe
https://ccaeperu.com/?	0%	Avira URL Cloud	safe
https://ccaeperu.com/?real-estate-agent2938423cmd=9tyym8t91xbt8b81mt81smbbm1s.	0%	Avira URL Cloud	safe
https://ccaeperu.com/?real-estate-agent2938423cmd=bnvtbtxmsbx1vy11snsm8nx8smbb	0%	Avira URL Cloud	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://ccaeperu.com/?real-estate-agent2938423cmd=m9xvsybnvn1sv.bsnmnsyx119yb8	0%	Avira URL Cloud	safe
https://ccaeperu.com/?real-estate-agent2938423cmd=vt9n.n11981t1t8b1t1xm1msm.s9	0%	Avira URL Cloud	safe
https://ccaeperu.com/?real-estate-agent2938423cmd=stmn8bymn1v1.18svn81tv1ymtxt	0%	Avira URL Cloud	safe
https://ccaeperu.com/?real-estate-agent2938423~	0%	Avira URL Cloud	safe
https://www.facebook.creal-estate-agent2938423~	0%	Avira URL Cloud	safe
https://ccaeperu.com/r	0%	Avira URL Cloud	safe
https://ccaeperu.com/?real-estate-agent2938423Root	0%	Avira URL Cloud	safe
https://ccaeperu.com/?real-estate-agent2938423cmd=svnv9tsbx9tbsttsnxbtbnt.mynx	0%	Avira URL Cloud	safe
https://ccaeperu.com/?real-estate-agent2938423cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n	0%	Avira URL Cloud	safe
https://www.facebook.c	0%	URL Reputation	safe
https://www.facebook.c	0%	URL Reputation	safe
https://www.facebook.c	0%	URL Reputation	safe
https://ccaeperu.com/?real-estate-agent2938423cmd=xbsmyynyy.8y18y8tvmsstm1ntys	0%	Avira URL Cloud	safe
https://ccaeperu.com/?real-estate-agent2938423cmd=snstmsbsvtx.s1.smysttx.sv11m	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.17.35	true	false	high
fbsbx.com	157.240.17.35	true	false	high
scontent.xx.fbcdn.net	157.240.219.13	true	false	high
fb.com	157.240.17.35	true	false	high
facebook.com	157.240.17.35	true	false	high
fbcdn.net	157.240.17.35	true	false	high
ccaeperu.com	68.66.226.79	true	false	unknown
www.fb.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
m.facebook.com	unknown	unknown	false	high
static.xx.fbcdn.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s	true	SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://m.facebook.com/	false		high
https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv	true	SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?real-estate-agent2938423	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ccaeperu.com/?real-estate-agent2938423	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true		unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yR/r/kPkP7qOaPwj.js?_nc_x=Ij3Wp8lg5Kz	B9RXHZ5I.htm.2.dr	false		high
https://ccaeperu.com/?real-estate-agent2938423//-estate-agent2938423Root	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yT/l/0	B9RXHZ5I.htm.2.dr	false		high
https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	true	SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?real-estate-agent2938423om/-estate-agent2938423Root	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://ccaeperu.com/?	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico	9HQ2AZB5.htm.2.dr	false		high
https://ccaeperu.com/?real-estate-agent2938423cmd=9tyym8t91xbt8b81mt81smbbm1s.	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?real-estate-agent2938423cmd=bnvtbtxmsbx1vy11snsm8nx8smbb	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	true	SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://www.internalfb.com/intern/invariant/	VEs5hzVWt5B[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yj/l/0	B9RXHZ5I.htm.2.dr	false		high
https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/y5/l/0	B9RXHZ5I.htm.2.dr	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yU/r/fzkbB_w4sxK.js?_nc_x=Ij3Wp8lg5Kz	B9RXHZ5I.htm.2.dr	false		high
https://ccaeperu.com/?real-estate-agent2938423cmd=m9xvsybnvn1sv.bsnmnsyx119yb8	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/y6/l/0	B9RXHZ5I.htm.2.dr	false		high
https://fb.com/	9HQ2AZB5.htm.2.dr	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/y7/r/qMrE4RFJBoQ.js?_nc_x=Ij3Wp8lg5Kz	B9RXHZ5I.htm.2.dr	false		high
https://developers.fb.com/?ref=pf	9HQ2AZB5.htm.2.dr, VBLSBCBU.htm.2.dr, O7nelmd9XSI[1].htm.2.dr, RUFPPAMX.htm.2.dr, r[1].htm.2.dr, RqQo1U5NOq1[1].htm.2.dr, B0LQ5SBH.htm.2.dr, 6LTWT96P.htm.2.dr, G1MK1W1S.htm.2.dr, favicon[1].htm.2.dr, 3GXKZCM3.htm.2.dr, HTQSVEM0.htm.2.dr, favicon[1].htm0.2.dr, A5FVZRWT.htm.2.dr, Z4A97TMF.htm.2.dr	false		high
https://static.xx.fbcdn.net/rsrc.php/v3iK-b4/yR/l/en_US/W5StuHxENhR.js?_nc_x=Ij3Wp8lg5Kz	B9RXHZ5I.htm.2.dr	false		high
https://ccaeperu.com/?real-estate-agent2938423cmd=vt9n.n11981t1t8b1t1xm1msm.s9	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0	B9RXHZ5I.htm.2.dr	false		high
https://ccaeperu.com/?real-estate-agent2938423cmd=stmn8bymn1v1.18svn81tv1ymtxt	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://ccaeperu.com/?real-estate-agent2938423~	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://www.facebook.creal-estate-agent2938423~	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false	Avira URL Cloud: safe	low
https://ccaeperu.com/r	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://ccaeperu.com/?real-estate-agent2938423Root	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://ccaeperu.com/?real-estate-agent2938423cmd=svnv9tsbx9tbsttsnxbtbnt.mynx	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yb/l/0	B9RXHZ5I.htm.2.dr	false		high
https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?real-estate-agent2938423cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://www.facebook.c	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://ccaeperu.com/?real-estate-agent2938423cmd=xbsmyynyy.8y18y8tvmsstm1ntys	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://ccaeperu.com/?real-estate-agent2938423cmd=snstmsbsvtx.s1.smysttx.sv11m	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr	true	Avira URL Cloud: safe	unknown
https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png	RpTFjVvO4D0[1].js.2.dr	false		high
https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yr/r/vdzjXL4eT5D.js?_nc_x=Ij3Wp8lg5Kz	B9RXHZ5I.htm.2.dr	false		high
https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t	{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF77662EBE27437295.TMP.1.dr	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
157.240.17.15	unknown	United States	32934	FACEBOOKUS	false
68.66.226.79	ccaeperu.com	United States	55293	A2HOSTINGUS	false
157.240.219.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
157.240.17.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	384636
Start date:	09.04.2021
Start time:	15:12:58
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ccaeperu.com/?real-estate-agent2938423
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@3/61@12/4
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://fb.com/ Browsing link: https://ccaeperu.com/r.php?locale=en_US Browsing link: https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8 Browsing link: https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1 Browsing link: https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms Browsing link: https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b Browsing link: https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t Browsing link: https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv Browsing link: https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8 Browsing link: https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s Browsing link: https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny
Warnings:	Show All Exclude process from analysis (whitelisted): BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe Excluded IPs from analysis (whitelisted): 104.42.151.234, 13.88.21.125, 52.147.198.201, 2.18.101.230, 104.43.139.144, 20.50.102.62, 23.10.249.26, 23.10.249.43, 152.199.19.161 Excluded domains from analysis (whitelisted): arc.msn.com.nsatc.net, ie9comview.vo.msecnd.net, skypedataprdcolcus16.cloudapp.net, a1449.dscg2.akamai.net, arc.msn.com, skypedataprdcoleus16.cloudapp.net, e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, go.microsoft.com, blobcollector.events.data.trafficmanager.net, go.microsoft.com.edgekey.net, arc.trafficmanager.net, watson.telemetry.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, skypedataprdcolwus16.cloudapp.net, skypedataprdcolwus15.cloudapp.net, cs9.wpc.v0cdn.net Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\m.facebook[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aKb:JFKb
MD5:	C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1:	35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966
SHA-256:	B71E4D17274636B97179BA2D97C742735B6510EB54F22893D3A2DAFF2CEB28DB
SHA-512:	6BE8CEC7C862AFAE5B37AA32DC5BB45912881A3276606DA41BF808A4EF92C318B355E616BF45A257B995520D72B7C08752C0BE445DCEADE5CF79F73480910FED
Malicious:	false
Reputation:	low
Preview:	<root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{6767ACED-9935-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.8499028416788235
Encrypted:	false
SSDEEP:	192:rZZeZz2jWntNifFRlbzMAzBzQZDKsf6lCjX:rPKKatS2QYZ3
MD5:	0072F634E27348C1ED32B25CF30C8A59
SHA1:	8C9127D6C8D20F9FCCB1B12CAD9CDCC2E5CDFFC4
SHA-256:	F0381FB3A528916666693066C76E78E6FF5AFEC8286E3FD082D0811F3D796C0A
SHA-512:	B9203BAB3D758171A74222A1628512FE34364A11F297070211100A0C33D3BA76713539CDA734AD270A7210345F262A824C9461310E55CF0200EC1F3D64657AA0
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{6767ACEF-9935-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	186352
Entropy (8bit):	2.6488975297394957
Encrypted:	false
SSDEEP:	384:rqCAAXgcPQXgRdUS7e5VxBliMXYd1I2bVLOyacTPtOvVOKfFB35CiZcA2h8VCcQn:sdM1IWVLOGT9A335CimETPZiY0qJZaZ
MD5:	522FDB7AAB9213ED0C92C61A0A20ED02
SHA1:	1C0C9F33B4A2CD3F57CE0E298152777BD7C9F899
SHA-256:	1EEF4E71EFE467AB09996BC8094FBCAB2652BD2BF1B01175953264B5F3B49FE8
SHA-512:	9B6E738E2236B79C21040647E3F3EE428B15209211E666C466117FBFDD422A17B12BA474FB10A3C841C34B977E8933D6DED251863FE5DAB2A98814C43075B169
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{6767ACF0-9935-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5646421266261221
Encrypted:	false
SSDEEP:	48:IwkGcpr5GwpavG4pQnGrapbShGQpKMG7HpRbcTGIpG:r4ZzQh67BSbAnTbIA
MD5:	7403594A64A8C0C933D26332B0DF38F7
SHA1:	6BFD9F5EAECCFEB51243142CC27F65FFBAEB81B0
SHA-256:	4CB098360BB76BB0CD5EE49E5EAE1E9DDAEE0E24E597E2ABC9C7558CCB5410A2
SHA-512:	5A5FABBE104C36A77B9A7524C8A6B71E8FA6FEB57F91E312600461B900C9B4B5C4C923B2398A5ADB315315E4A919B7E5644A76F027F7B4D1A9DA202F4594C226
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	6848
Entropy (8bit):	7.920804979967896
Encrypted:	false
SSDEEP:	96:0UGIjjQlCsaKgulmtF/Wh4X9805lvjnJ3NrN72pxB6sCjcXNGjD91+mPrTRB70n0:0bujQCKguMnNz5ZN7gB6sWjr+Iv1
MD5:	B45F114C08F7D3AC943080A577EEE859
SHA1:	F45802E218840F07C2319E3EBC3D4F6E61B9E09E
SHA-256:	DA10756673AF83C195C4B73C4B9AA54A90F82C4C9FA2295DBDBAB47304ACA2C7
SHA-512:	FC48AEFC22F2F7DD0B351D812BE99A04B180834559AE0C876BEC31635EC538FCA8D2423F2A9A034A5C966B8EB9D76961883F530001DCFF40C181F8F1C32D022A
Malicious:	false
Reputation:	low
Preview:	<.h.t.t.p.s.:././.s.t.a.t.i.c...x.x...f.b.c.d.n...n.e.t./.r.s.r.c...p.h.p./.v.3./.y.j./.r./.g.B.7.6.k.J.X.P.Y.J.V...p.n.g."....PNG........IHDR..............x~Y....PLTE.......g.....e........i...........c..d..b........f..l..s..q.....h..t.....m..n........p........y...........o........u...........v...........r.......................k..j........w...........x...................................c..f..~.....d.....m..h...........o....................x..}........w..z..v.....\|..z..{.....z..}..r........\|....................p..k.....~........y..u..y..n.....k.....v....=...............w........j....................]........................x..._.q...a..t.......y.}..s..s......e..o........f..k..c.......q..r...q..............j.r...l...........p... ..F.........n.......1......s. .......~.................c.....t............x.i........W........... ...\|................5..................z.8..2.....Q.....v..\..=.............g........>.jB....IDATx..W{..ey~.......L...x....T.@..b.2PA.."I8..$<....j..6.Z..`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\3GXKZCM3.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.316155290356013
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/YwqPusfq9tPzzuVgP4E55lTgH1MSCdqxaxU8FB7goXBqU5Q7hFDlC:iFUxhqPusC9tPzzuVgKQFdUcUE
MD5:	0FA61F48FCD95C41B86B0588F2413E0C
SHA1:	91154692B3D9E62E0BF8E5EE34364033AC293377
SHA-256:	5BD1094305CC24100F7A9AE7FC112E89B3301E5FD3FDB404F5D46A5258A95BCB
SHA-512:	8A7EC789FD8B66AC49E5224ECEAA8417F2413A20D1D89804EE588A64DC76631A8146386338453E825BC6ADC50C52C5E29C022457942A0F5066B9687DDF2455D1
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\3GXKZCM3.htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/?cmd=stmn8bymn1v1.18svn81tv1ymtxtxy1ymns8y1vt81b.9nty9s8
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\G1MK1W1S.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.311987145178721
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/YwqelAsYqTK9T3TQpgP4WBxgTH17/nnxP6x9lFB7goXB1xMtTDwnz:iFUxhqelAsPTK9TjQpgybOFd78E
MD5:	EF28B9AF4F55651692A7CEAE181CEE66
SHA1:	CCA27393E23A51424031BFA1F1A98868E0AB03FB
SHA-256:	8E4A0DC19A03D5A9A9783E1DD9776DABDA062DA7A80AA1672845D6905592BCEF
SHA-512:	8160FB3EEC52DB2C1298518E0934075C47FC8C56B1B70E87D1E7333283A2B65F9E33C010E3019F3D65243C1716006702D3611154E05E3E6660532F2D1D2FFF0B
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\G1MK1W1S.htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/?cmd=9tyym8t91xbt8b81mt81smbbm1s.9vtn8ytms1v9vvy8198118b
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\GonuXiY4BzC[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	109735
Entropy (8bit):	5.695358139977212
Encrypted:	false
SSDEEP:	1536:G5qAUw5hvigC1EUXiT2y54w4f2sZ4wV1hBjc7OpC3JfbhsXiFKXoAfo3s9:GUAUIYWoC2y54w4klHs4S
MD5:	F6BE46592D787A4E2D6B8F47470A92D9
SHA1:	3E4CC97625D2B22D34A097DDE0646A203B1A4333
SHA-256:	5320C68A11331DCE100F37C976E9149E91DDAD5B4FC8A4F2B4415D8372A85247
SHA-512:	2A7384C6AC304C3ABBF95FC92313AE67A2BBEA73F0B9BEC46A57CFECDDBB4A7C88CC1D4F54FAAE065A2CF90FDEB136E29C4A4AEB5AFBEB340835270EF4A1C2F9
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3ih-D4/yJ/l/en_US/GonuXiY4BzC.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["c1jQsCE"]); }..__d("MSeoDirectoryLinks",["cx","CSS","MVisibilityToggle"],(function(a,b,c,d,e,f,g){"use strict";f.initLinks=a;function a(a){var c=a.visible,d=a.toggleButton;b("MVisibilityToggle").setupOnClick({visible:c,toggleButton:d,toggledElement:a.linksContainer,onToggle:function(a){a?b("CSS").addClass(d,"_97hz"):b("CSS").removeClass(d,"_97hz")}})}}),null);.__d("LoggedOutLocaleEventsClientLogger",["Banzai","BanzaiLogger"],(function(a,b,c,d,e,f){"use strict";a=function(){function a(a,b){this.regInstance=b}var c=a.prototype;c.logLocaleEvent=function(a,c,d){a=a.getNode("change_language");if(a instanceof HTMLElement){a=a.dataset.locale;b("BanzaiLogger").create(b("Banzai").VITAL).log("LoggedOutLocaleEventsLoggerConfig",{event:"change_language_acquired",reg_instance:this.regInstance,surface:d,switch_info:{endLocale:a,step:c}})}};c.logMoreLanguage=function(a,c){b("BanzaiLogger").create(b("Banzai").VITAL).log("LoggedOutLocaleEventsLoggerCon

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\HTQSVEM0.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.315918310354368
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/YwqzMsj8q0FlDOmzOYgP4Tl6moH1idYA5WIQxIpFB7goXBYTur6DI:iFUxhqzMsjr0FNOmzTgR4TFdhyRE
MD5:	6286B4F1462506B5F00A31FB92825163
SHA1:	4133D5403B0968AF3CAA9BCE6736497F995B64DC
SHA-256:	3249F1C5A088AB929405754A6A63F88A5F892572D24B338FB6FBD48AF2C33B81
SHA-512:	303DAB88B9E12BD4A28CA006CC097F6B905719829A17E3B989C8C9B165B027BF8F8613D8C514DB2487399322F8690B19C37BE45C66D4DC22A20185F3E31F866C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\HTQSVEM0.htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/?real-estate-agent2938423
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\MNiY97WzXPw[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	C source, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	13160
Entropy (8bit):	5.3070910755237035
Encrypted:	false
SSDEEP:	384:Y4wu7KaL5boqM38Y5Gyf28Ykwg7ZAsBhv:Y07PL5boqM38Y5Gyf28Wg7ZFBhv
MD5:	32725573142525786F658FBEEB46EE50
SHA1:	27535B2678FE89C958AAB3D4B3E21739615712D8
SHA-256:	5C81B60060ADAE5945A11F94D02AC2FF7C7CE4DBC8CD69000C359CA08F1CAA57
SHA-512:	4364EABD97A0A08D0A98C01DD0400F5AD30E3EFAB4096B4E60BA7806946BEF540F81A181ACC909C2DF165A1636C3B8CBC341EEA203FFB330282C9FC2951F64B2
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yB/r/MNiY97WzXPw.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["zTlK8ig"]); }..__d("CometLruCache",["recoverableViolation"],(function(a,b,c,d,e,f){"use strict";f.create=a;var g=function(){function a(a){this.$1=a,a<=0&&b("recoverableViolation")("CometLruCache: Unable to create instance of cache with zero or negative capacity.","CometLruCache"),this.$2=new Map()}var c=a.prototype;c.set=function(a,b){this.$2["delete"](a);this.$2.set(a,b);if(this.$2.size>this.$1){a=this.$2.keys().next();a.done\|\|this.$2["delete"](a.value)}};c.get=function(a){var b=this.$2.get(a);b!=null&&(this.$2["delete"](a),this.$2.set(a,b));return b};c.has=function(a){return this.$2.has(a)};c["delete"]=function(a){this.$2["delete"](a)};c.size=function(){return this.$2.size};c.capacity=function(){return this.$1-this.$2.size};c.clear=function(){this.$2.clear()};return a}();function a(a){return new g(a)}}),null);.__d("ConstUriUtils",["CometLruCache","FBLogger","PHPQuerySerializer","PHPQuerySerializerNoEncoding","URIRFC3986","URISchemes"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\RqQo1U5NOq1[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.311589921665687
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/YwqBN6s3GqeBPNzIse7gP4e8MOm2IH1TC0PY0uxmF3FB7goXBWeLg:iFUxhqBMsteBVzIse7gRESBFdxqqzLE
MD5:	19ECE2E22F1A74AF578795E2CE42889B
SHA1:	A86644AB62A4D727442FC479F04A8D7C34F21F90
SHA-256:	978C6DAFEE34473356E240B4367FEB9D19CB008175DAE8240154C6A924E2B9C0
SHA-512:	CB7A1E5EF9F128E77CD72D552D3DB1A8F5164C2D874DA3D459766D04CFAB4C7C9267778563F953DE10BBBC6A18B9678FAC140652D53AACD5B5F2893CE7CDFD3E
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\RqQo1U5NOq1[1].htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/rsrc.php/v3/yb/r/RqQo1U5NOq1.png
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\SWQSh8s8jr2[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	6642
Entropy (8bit):	5.320922344122721
Encrypted:	false
SSDEEP:	96:BOP5JedAUYk5JY5J0505JO5J0Anmq5J0a5J0xk1SnB7w/nA7nWG+kueqoetKDZ+z:BQernWAC0zDxSpIo+Ks
MD5:	56F1012F9038610D4323E60F0336AC92
SHA1:	0B88B14D347366B714CD6555D437E2E6FB4ED9A7
SHA-256:	9B49292E18BA707E5B84526E5F35CADF7A7246AA847087B7C20137B21BF6B4A2
SHA-512:	06F74E6524499A0201F00943F6E412910398BF41CBC0919A915426CB1BE9BDAE9F70EC2019FFB5CB520D29FC699F0249BA03CD51D41C89B81F7DF82E2FC68BAD
Malicious:	false
Reputation:	low
Preview:	@media not print{._9ngh._9ngi{height:0;overflow:hidden;padding-bottom:0}}._9ngh{padding-bottom:16px}@media print{._9ngh._9ngi{width:100%}._9ngh{overflow:visible}._9ngj{display:block !important}}._9ngk{cursor:pointer;height:44px;padding:0;text-align:left}._9ngl{background-color:transparent;border:none;width:100%}._9ngl:focus{outline:none}._9ngj{display:flex}._9ngk ._9ngm{margin:0 0 0 0;width:100%}._9ngn{float:right;transform:rotate(90deg)}.._9fyr ._5m_s::after{border-image:none}._9fyr ._5m_u{margin:0 60px}._9fyr ._5m_s{border-radius:12px}._9fys{padding:10px 0 0 0}._9fyt{font-size:large;line-height:normal;padding:2px 30px;text-align:center}._9fyu{padding:5px 15px 20px 15px;text-align:center}._9fyv{border-color:#ccc;border-top-style:solid;border-width:.5px;padding:10px 0;text-align:center}.touch a._9gt6{color:#1c1e21;font-weight:bold}._9fyx{font-family:SFProDisplay-Regular, Helvetica, Arial, sans-serif;font-size:16px;letter-spacing:-0.32px;line-height:20px;width:100%}#accept-cookie-banner

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\VEs5hzVWt5B[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	241335
Entropy (8bit):	5.402172305621012
Encrypted:	false
SSDEEP:	3072:I0IqCFsrR9hHPlNhNLRxdx3JV/Cuvw4Im+gSUQBQAP2Td+/OaG7d:vIFsABQAPGd+WZJ
MD5:	346028FD22C2848201627CACD87E7E44
SHA1:	13C2B4E0E4C4423F0D3FF62C4BAA75E6C338499F
SHA-256:	C91668125CE2BF6CF670222B82CCEED766B58341111704D5026C739A0902F0CF
SHA-512:	B276B2E35273546B6CBDAC67446A5AC3CB20EDD4121E6CA1AB8E2597DD8E1DF91B0FC515C3B85811C1548CEB2316435A6379D27128FE6171029032B395F2E8DB
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y2/r/VEs5hzVWt5B.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["WrA3agz"]); }..Array.from\|\|(Array.from=function(a){if(a==null)throw new TypeError("Object is null or undefined");var b=arguments[1],c=arguments[2],d=this,e=Object(a),f=typeof Symbol==="function"?typeof Symbol==="function"?Symbol.iterator:"@@iterator":"@@iterator",g=typeof b==="function",h=typeof e[f]==="function",i=0,j,k;if(h){j=typeof d==="function"?new d():[];var l=e[f](),m;while(!(m=l.next()).done)k=m.value,g&&(k=b.call(c,k,i)),j[i]=k,i+=1;j.length=i;return j}var n=e.length;(isNaN(n)\|\|n<0)&&(n=0);j=typeof d==="function"?new d(n):new Array(n);while(i<n)k=e[i],g&&(k=b.call(c,k,i)),j[i]=k,i+=1;j.length=i;return j});.Array.isArray\|\|(Array.isArray=function(a){return Object.prototype.toString.call(a)=="[object Array]"});.(function(){var a=Object.prototype.toString,b=Object("a"),c=b[0]!="a";function d(a){a=+a;a!==a?a=0:a!==0&&a!==1/0&&a!==-(1/0)&&(a=(a>0\|\|-1)*Math.floor(Math.abs(a)));return a}Array.prototype.map\|\|(Array.prototype.map=funct

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Z4A97TMF.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.312329126904888
Encrypted:	false
SSDEEP:	384:iFUxhq3yqsvx7OuvbJxXgXu5MFdG3TzoE:zxhq3yuqfjT
MD5:	89EA7E50F3FFFA5B61C5748E9365F028
SHA1:	182A4DDFB7A04717D564808C8729EB96C8D56320
SHA-256:	90C799C4F26600200AB43D1F68C4CF85B127264E102FA32C529A9A44C8F70C54
SHA-512:	677A4A6F80F8224D9962BC012ED87D3BC7C087ACA9F5E3E3E1DCD6F8C80B0DC0F272EBF2E823D2B28D01A7B779A88DBC43B2925F09E8DFCFFE6648A885CEAC2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Z4A97TMF.htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/?cmd=xbsmyynyy.8y18y8tvmsstm1ntysyxmx.ty.1xtxsm9bs8s88n8
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	dropped
Size (bytes):	12440
Entropy (8bit):	5.320371041658793
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/YwqmLsMqsO66nAPjegP4atAhxvpvH1PoGI1o9xH5FB7goXB4dzqAM:iFUxhqmLs7sr6nAPjegSPN4+Fd0f33E
MD5:	94DE0293BBF1D6835E4DCC5DC4347CF2
SHA1:	8595B0AEF14CB94E06417ACD87076AC48007B978
SHA-256:	A4DAF526FDF6517104DFA2529621A75FE6D06D69999F59B198235DC062A11C75
SHA-512:	D42EBB879668742A39E6947DE92D4381B6464EE06524106B175101E659E03410A264ADEE412A4B92F2DD92E8CC98EFFC4073277A74CE7E7323D3B380D96C37D4
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon[1].htm, Author: Joe Security Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon[1].htm, Author: Joe Security
Reputation:	low
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\gB76kJXPYJV[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 196 x 196, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6690
Entropy (8bit):	7.942833893486368
Encrypted:	false
SSDEEP:	96:iGIjjQlCsaKgulmtF/Wh4X9805lvjnJ3NrN72pxB6sCjcXNGjD91+mPrTRB70nL:BujQCKguMnNz5ZN7gB6sWjr+IvO
MD5:	389DFA18BE34D8CF767E06FD5CDE4EC6
SHA1:	47B751CFFAB47D076816C63CE08D3E84600376EE
SHA-256:	3C45CE612F41B1E7936E7CF5B235047344FD3146D1630E342F186D1D1E8E00D5
SHA-512:	C4DB18F636AD85E87F93A208FB4B02B528659BA367E51CFA6D7826AC1159F445A85FBCA8D12AC67556E8FB5208DAE24AE309E783D50FEB088EF0E9F47AC19430
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yj/r/gB76kJXPYJV.png
Preview:	.PNG........IHDR..............x~Y....PLTE.......g.....e........i...........c..d..b........f..l..s..q.....h..t.....m..n........p........y...........o........u...........v...........r.......................k..j........w...........x...................................c..f..~.....d.....m..h...........o....................x..}........w..z..v.....\|..z..{.....z..}..r........\|....................p..k.....~........y..u..y..n.....k.....v....=...............w........j....................]........................x..._.q...a..t.......y.}..s..s......e..o........f..k..c.......q..r...q..............j.r...l...........p... ..F.........n.......1......s. .......~.................c.....t............x.i........W........... ...\|................5..................z.8..2.....Q.....v..\..=.............g........>.jB....IDATx..W{..ey~.......L...x....T.@..b.2PA.."I8..$<....j..6.Z..`.BAS...Y9.\|.......}.\.\|x......>...}.....C....;...........T.Y.u..L....TJ._..j*U.....#.,..9......2C.VL...4.{Ie(?7.B/...>I&F.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\r[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.317306675735031
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/Ywqf9AsMqHcxCo2OrgP4oToyOJ1H1SlhUcwr7hnuYxF3FB7goXBnn:iFUxhqf9As7HcxB2Orgynz7EmFdePZ3E
MD5:	5F765609AE5CA78BB8AB72D384A6B249
SHA1:	056B5237448F26AB246BCF3F1ADDC98BA976C565
SHA-256:	ECB55D76491AF70B3A48A983E1EABD71A4D0F7CB1A13B9D2450BEDAFB3B6D0D3
SHA-512:	73AB629DD30A50832CED92F195A9CBADD3030C5F5978AAD1301A38A16C6089890DE0327B26090B44E2081B1320CB49AB51A59E3CA9B564229B45CA75F6529D99
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\r[1].htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/r.php?locale=en_US
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\sO8pFbm5AdZ[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 124 x 279, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8601
Entropy (8bit):	7.955860235104234
Encrypted:	false
SSDEEP:	192:NgauVCBV1rtpIBLs7FMOPNMcfbTPj11pQwbWF/1j4nCfUep:NiCZrtpHBMOPLPKwyrE4bp
MD5:	C0ACD687DA43DABDE2DE3B7C72C5D0F6
SHA1:	140C33E1836ABCAD4142608A7E77A9A099820EB6
SHA-256:	E91CBEE69B8C4EBEE53B0DB95AB385E9F6EA4BEA7FBC1B08B3961F5B87101221
SHA-512:	3078AFA29DDAD51A94B2CABC22028959FC1A654FC1C62804C3654DEAC7F4515F6B516A43CD372E2AF0D64152F5835B124BBB2CE234B7DEC3BD62FC3AA309B391
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y_/r/sO8pFbm5AdZ.png
Preview:	.PNG........IHDR...\|.........X......PLTELiq.................................Yo................w............................KOV...V\e..................KOV.GV..4...........KOVTX_..............dOSZ...TX^ahu..:....#=.b....%...N.......cho.:RWZcJMR...X..V[ePVbp..W....N...`fp..P..^..P........:..._....__eoKOV..........m..........Ia.N:..KA.........Gb...`gqW...u.......V...2!.....+'...l..C_....n.;........X..D}..q...]P..V....<.s.......p...8..........)A.......3"...(....X.B_**........a....9.l...Wm........;.o.+...a.K\|.....#m..O...=........X..KOV....B^jq...[..T...`fq..bXWV..j...........h..G........@...bixO..q......p./...o....gn}._..}...Ge-.+..........OQ%... .9..V.Md......l..../.Aa.........)UZk.lO...a........v%.+A......HBC.LQ....cX2..3..<.h:?_...yqT.JsI!.5..a..C..W.U..R.G3...8..N<......tRNS..............[.....l3..{J=....:.!........H.;p...Q......_...B.....aw..+....Tk..N...{.h..:.......L&..........k.Y.QE.1.............T..j.......n+.U..........~7q....IDATx^.... .....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\22KpFFJQuZn[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	46629
Entropy (8bit):	5.362213181152228
Encrypted:	false
SSDEEP:	384:P30RuIuXY1uGL6R3iFdz04VenDvXGecCOUlwAdmkqoYAWqNfBJx6NhFL:P0RuIuo1uGa3iFdOfJwOY9qNfBJx6NhF
MD5:	A62D62FD8007344163F69A268E7E918A
SHA1:	8C0A433D5E0BB8AE23C6AE5B302D51E77B0D195B
SHA-256:	D05D03A47182FD8C95735DAF2F65F2B80B8A8545DD6C0E271CFE3FDCCBF81246
SHA-512:	CAE9940226753129348F40D3D46D08519DA2F73F74EB36592D4B6BFBCF56BAD339BA71466B5D24B6E8F0A63B673B7926CFCDB193B2645C72E5F19386E80C45E0
Malicious:	false
Reputation:	low
Preview:	._2g0e{margin-left:10px}._1-gi{display:inline-block;line-height:16px;margin-right:4px}._1-gi.invisible_elem{visibility:hidden}._1e_c{border-radius:2px;vertical-align:middle}._jvo._jvo{vertical-align:middle}._ru1{padding:12px 0;text-align:center}._ru0:first-child{border-top:none}._ru0{border-top:1px solid #e5e5e5;line-height:32px;padding:8px}._3nv2{float:right;padding:12px;padding-left:4px}..fbEmuTracking{position:absolute;visibility:hidden}.._513c #viewport{margin:0 auto;max-width:600px}.._7hj_{visibility:hidden}._6ykc{padding-left:5px}._6ykd{padding-right:5px}._7gvg{font-weight:bold;margin-left:-50px}._6-xu{height:30px;width:100%}.._3eqx{text-align:center}._ov_{margin:0 10px 15px}._6_f8{background:#fff;height:121px;margin:9px 0;position:relative}._6_f9{background:#ebedf0;border-radius:50%;height:48px;left:10px;position:absolute;top:14px;width:48px}._6_fa{background:#ebedf0;height:8px;left:70px;position:absolute;top:34px;width:150px}..touch ._b7l{margin:10px}.touch ._69aj{background:#f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\2b4ptAQoeCF[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	12443
Entropy (8bit):	5.312840203916209
Encrypted:	false
SSDEEP:	96:7jPnFRWmLa+C4WtIR5vsXgxiOmf5eoqzICNJAATklEEk3A4slegOWWT2NdLzIsy0:ntgpNCmeoqjEkrs5IsOmSUDX89m
MD5:	BFEE33A16601268523152A0F32A72380
SHA1:	F87C42234BC8715AA6D6AEFE80D722E2B94F2221
SHA-256:	F7808EC7FF2FFE1C0F9D01EF87BDB7A9DB00DB99D65A2750FCD2AFE082ACC873
SHA-512:	C06B5D38138B755D0EE7200D70AA62497347EBDB762911FF9A6351D5DA6194BFAAE8E979443B591F54D3DAF762EAB28E27F637F3EC9D404841A2F0D1D9A3D960
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3ijfq4/y5/l/en_US/2b4ptAQoeCF.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["Br8yI3P"]); }..__d("MUFISocialSentence",["cx","fbt","Bootloader","CSS","DOM","MLiveData","Stratcom","SubscriptionsHandler"],(function(a,b,c,d,e,f,g,h){a=function(){"use strict";function a(a,c,d,e,f,g){if(!g&&!d)return;this.$1=a;this.$2=b("MLiveData").get(c);this.$3=e;this.$4=f;this.$5=g;this.$6=d;this.$7=new(b("SubscriptionsHandler"))();this.$7.addSubscriptions(this.$2.listen("change",this.onChange.bind(this)),b("Stratcom").listen("m:page:unload",null,this.onUnload.bind(this)))}var c=a.prototype;c.onChange=function(){var a=this.$2.getData();if(a.request_id===this.$4)return;b("CSS").removeClass(this.$1,"like_opt");var c=this.$5&&a.like_count?a[this.$3][0]:null,d=this.$6&&a.comment_count?a.comment_count:null;if(c&&c.text){this.$8={text:c,ftid:a.ft_ent_identifier};c=c.text;this.$6\|\|b("Bootloader").loadModules(["MReactComponentRenderer","MUFISocialSentenceTextWithEntities.react"],function(a,b){a(b,this.$1,this.$8)}.bind(this),"MUFISocialSe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\BwjU4B_qfpp[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	10637
Entropy (8bit):	5.352070441529548
Encrypted:	false
SSDEEP:	96:Ue8ByumvNOJ6pVgqJTw08d54zAlKF/yAuR7RDghD:6ByumvYMH+4zAlVDR7RD6
MD5:	AA319BB3DC5CA571817088C857306945
SHA1:	D89ED924EE578B70C99317DA2AA480D95A6FCFE8
SHA-256:	9F737A9DDC6C4ED27D748F1571A6041EECDA3DFD7C391898CC35B01F0E6C435D
SHA-512:	E214D64F349C92D8BE67A2AC0F7E7662BCA8440C376DB1B3B55839D22B66FD90BD30AA67DB4A862DD402DD9CCF89A2CE38415CCF0A8C4764F809B36A424A57AB
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yC/r/BwjU4B_qfpp.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["KQ+loWk"]); }../*. License: https://www.facebook.com/legal/license/HAC-_9WTKIm/. /.__d("flatbuffers",[],(function(a,b,c,d,e,f){var g={};g.Offset;g.Table;g.SIZEOF_SHORT=2;g.SIZEOF_INT=4;g.FILE_IDENTIFIER_LENGTH=4;g.Encoding={UTF8_BYTES:1,UTF16_STRING:2};g.int32=new Int32Array(2);g.float32=new Float32Array(g.int32.buffer);g.float64=new Float64Array(g.int32.buffer);g.isLittleEndian=new Uint16Array(new Uint8Array([1,0]).buffer)[0]===1;g.Long=function(a,b){this.low=a\|0,this.high=b\|0};g.Long.create=function(a,b){return a==0&&b==0?g.Long.ZERO:new g.Long(a,b)};g.Long.prototype.toFloat64=function(){return(this.low>>>0)+this.high4294967296};g.Long.prototype.equals=function(a){return this.low==a.low&&this.high==a.high};g.Long.ZERO=new g.Long(0,0);g.Builder=function(a){if(!a)var b=1024;else var b=a;this.bb=g.ByteBuffer.allocate(b);this.space=b;this.minalign=1;this.vtable=null;this.vtable_in_use=0;this.isNested=!1;this.object_start=0;this.vtab

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\IxxDAbiZepi[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	5735
Entropy (8bit):	5.1317810811557365
Encrypted:	false
SSDEEP:	96:w1JMgRcPl4aWkSlLC+HDqebXHmpYXgrLzGm7tEDJsumLf1z6NBUEE7mWThQS47/X:Megql7WLqebXHmmXgrLz97tED+umL9+z
MD5:	3B0814188433956AF3D73648D0DB00B7
SHA1:	49BB4B80E746AA2296DDB987BA8D49F911D4E4B4
SHA-256:	28FC8DA452C6C21D1AEDA674F2F6B8864504FBE8A1823EEBB6CE1814836AF08E
SHA-512:	699B548F8381698783D9733E522755B1FA22DDD0B3BB651FF2433ED16D49AFDFEB89061FAE52BFF1B69D7F36DCA9A90F5D8B0C59003773C3BD9AE5C922B5C005
Malicious:	false
Reputation:	low
Preview:	.touch ._5m_x{height:0;position:absolute;width:100%;z-index:13}.touch ._3wo2 ._5m_x{z-index:25}._4sc_,._5m_v,._7teu{box-sizing:border-box;overflow:hidden;pointer-events:none;position:absolute;width:100%;z-index:0}._5m_v{padding-bottom:28px}._7teu{align-content:center;display:flex;height:100vh;justify-content:center}._5m_u{border-radius:3px;margin:auto 0;pointer-events:auto;position:relative;text-align:left}._7e0o ._5m_u{background:transparent;border-radius:2.7px;display:block;height:auto !important;margin:0 auto 0 auto;width:83vw}._5m_w{background:rgba(0, 0, 0, .5);bottom:0;left:0;pointer-events:auto;position:fixed;top:-600px;width:100%;z-index:-2}._7e0o ._5m_w{background:rgba(0, 0, 0, .6)}._7e0o ._5m_v{top:50vh;transform:translateY(-50%)}._5m_t>:first-child{border-top-left-radius:3px;border-top-right-radius:3px}._5m_t>:last-child{border-bottom-left-radius:3px;border-bottom-right-radius:3px}._5m_s{background:#fff;border-radius:3px;bottom:0;left:0;position:absolute;right:0;top:0;z-index

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\JopZtdti8dq[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	7272
Entropy (8bit):	5.199912003117227
Encrypted:	false
SSDEEP:	192:YQ7ppcEf3k4TXlM49kfhTvp7J2X3eBCvqK:Yaf3kUM44vp70X3B
MD5:	3D275AC87B7225FAE26690F31A3110F1
SHA1:	D72083AD2A31CBC8BEA643676F2B214F2028A26A
SHA-256:	95D95840165EA5FC374A27F1CFFE88A1B3D033562916EF1071393C9C8ADBFE86
SHA-512:	DA97C4808DA40A3F564637CA26206477BB818EF9EA3B7361DF83D81DF146E46EA895E90D117FDF9F309447A5B0B2DE3618B9B08DA7882AAF0DF91383564FC1AA
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y_/r/JopZtdti8dq.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["FEt5GzN"]); }..__d("CavalryLoggerImpl",["Arbiter","Bootloader","ISB","ImageTimingHelper","KillabyteProfilerConfig","NavigationTimingHelper","PageEvents","PageletEventConstsJS","PageletEventsHelper","PerfXLogger","ResourceTimingBootloaderHelper","ScriptPath","performance","performanceAbsoluteNow"],(function(a,b,c,d,e,f){var g,h,i=b("KillabyteProfilerConfig").htmlProfilerModule,j=b("KillabyteProfilerConfig").profilerModule,k=["t_start","t_paint","t_cstart"],l=window.CavalryLogger;Object.assign(l.prototype,{initializeInstrumentation:function(){if(this.instrumentation_started)return;var a=this;b("Arbiter").subscribe("BigPipe/init",function(b,c){c.lid==a.lid&&c.arbiter&&(a._recordTTIEvent(c.arbiter,"tti_bigpipe"),a._recordDisplayedEvent(c.arbiter,"all_pagelets_displayed"),a._recordLoadedEvent(c.arbiter,"all_pagelets_loaded"),a._recordPageletEventsTime(c.arbiter))});b("Arbiter").subscribe("MRenderingScheduler/init",function(b,c){c.lid==a.lid

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\NOmsNpPjqKN[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	10016
Entropy (8bit):	5.275912293066321
Encrypted:	false
SSDEEP:	192:kStlsoB9o6N7xAGy2SjAv+IZ7OAX5BVE1WOWnnF96ZKtttz/z7wovQZ4O39/lRRM:dcT0+lZ6DBkW
MD5:	BD36C07720E78ECA14E40F732B0DEA96
SHA1:	9400166538F6F65A89E1C102CCA07DAE82C4FF34
SHA-256:	404CBEFB1D9A3B2CD4F723C8553D714EA257E78B3691BC1BB37BF1F78A192AD6
SHA-512:	11D012B54B44880E3894DDB7D2E816AA6D39FA5F9CF0CA2DC371939D50B654CE3153FB59DB7894218AE9A57858747F2B561D29A062AB15C85C4FC3A2E86A1404
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yJ/r/NOmsNpPjqKN.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["Xjm9V55"]); }..__d("BrowserPushMessageRedirectUtil",[],(function(a,b,c,d,e,f){e.exports=a;function a(a){return!0}}),null);.__d("BrowserPushCommands",[],(function(a,b,c,d,e,f){a="browser_push_ack";b="browser_push_redirect";c="browser_push_window_visible";d={ACK:a,REDIRECT:b,WINDOW_VISIBLE:c};e.exports=d}),null);.__d("BrowserPushMessageHandler",["BrowserPushCommands","BrowserPushMessageRedirectUtil","EventListener","URI","URISchemes","isFacebookURI"],(function(a,b,c,d,e,f){var g,h;function i(a){if(a.data.command&&a.data.command===b("BrowserPushCommands").REDIRECT){if(typeof window.onbeforeunload==="function"&&window.onbeforeunload()===void 0)a.ports[0].postMessage({command:b("BrowserPushCommands").ACK,success:!0});else{a.ports[0].postMessage({command:b("BrowserPushCommands").ACK,success:!1});return}a=a.data.uri;if(/^([^.:/?#]+):/.test(a)&&!(g\|\|(g=b("URISchemes"))).isAllowed(/^([^.:/?#]+):/.exec(a)[1])\|\|!b("isFacebookURI")(new(h\|\|(h=b("UR

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\QrKwBeCiZyv[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5747
Entropy (8bit):	5.116735868721678
Encrypted:	false
SSDEEP:	96:VRMNVDpweF7C/5YDJdM77IjgEdf9pQ9Qmz85Nt2o:VRU1w6740dacpQ9QX3
MD5:	B2FB748287798413178D4E1A1476E5C2
SHA1:	2517605D2727663377491224AACFA365209C6721
SHA-256:	9D427CB90E448F435ACBF1BD66AC37C7CEC6E8B8AFA5BF8D691FC80C51F62DE2
SHA-512:	6D8BE2E43EAABF10F713000EE04247F68B03DDF92B7CEC9ABBF99A71C3813DEEFDD1F02DF7542A70FDC79E196DB7DB963FF3B54A4BA52A63E22DD13626547644
Malicious:	false
Reputation:	low
IE Cache URL:	https://ccaeperu.com/ico/QrKwBeCiZyv.css
Preview:	html,body{border:0}body.booklet{margin:0;padding:0;overflow:visible}#booklet{margin:0;padding:0}#booklet #content{border:0 solid white;float:none;margin:0;padding:0;width:auto}#booklet #pageheader{background:#365899;color:#fff}#booklet #pageheader #homelink{background:url(/rsrc.php/v3/yR/r/teE39sffXW8.png) no-repeat 10px 50%;color:#fff;margin:0;padding:8px 10px 8px 30px}#booklet #fbpageheader{background-color:#365899;border-bottom:1px solid #1a3878;height:34px}#booklet #fbpageheader #logo{float:left;background-image:url(/rsrc.php/v3/yQ/r/Tx1-fA__anj.png);background-repeat:no-repeat;background-size:auto;background-position:4px -2px;height:34px;width:96px}#booklet #fbpageheader a{color:#fff;display:inline-block;float:right;font-weight:bold;margin-top:6px}#booklet #fbpageheader a:hover,#booklet #fbpageheader a:focus,#booklet #fbpageheader a:active{background-color:#4267b2;outline:none;text-decoration:none}#booklet #dialog_buttons{padding:8px 10px}#booklet #dialog_buttons input{margin:2px}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\RUFPPAMX.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.318989777584086
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/YwqE3dsAqgQ74ClnJdeW3gP4hFH8r6H1fh5z+XkYx/oh1FB7goXBv:iFUxhqEts3P7FlnTt3ggT1/Fd4BE
MD5:	AC309C3BBE172ED5CBC37060FCD0B5CC
SHA1:	BCDAA6B0997F4B82EF90C360950B2AB3B485D931
SHA-256:	24EFD34CFDA269AE64A495DEEFEADA684AB3F3CE990363FA869BAC8AF47B6B7F
SHA-512:	FC99B26B7989B25DB9F7122A97466356E0527652FA896A4AD630E21C5FE41755F7E961AE671CAF659B435DC18D0C3621CEEAE228F02E9A71B6A1F530CEF45981
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\RUFPPAMX.htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/?cmd=snstmsbsvtx.s1.smysttx.sv11m9ss9xbtb1mvmmytn9t1tyny
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\RpTFjVvO4D0[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3685
Entropy (8bit):	5.621453320033895
Encrypted:	false
SSDEEP:	96:1IjyBqrIeHQs1a6ZuM5J74DAPTTvbPr/0fJ:CWBqrIeH51RiA73rch
MD5:	5120667A686AB2528C050D156D27B811
SHA1:	C69B77AF43F14EFB4951367CF6A4EEEA661F6219
SHA-256:	5147F2B0C3A7E731F599FDB80503F7D445BFAFB8736B512166A166906E926759
SHA-512:	3AE4897A61B7DF751C85C1965659D2811CD716F5C3E93BC681D5EE2B94FBAE1A7BB6FE6B1C986F69A2E28FFEBD2A47F81388A8CDD1D98DCCFC9F062C20AA7662
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3ikP64/yA/l/en_US/RpTFjVvO4D0.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["lo0QsWE"]); }..__d("MStoriesUIConstants",["fbt"],(function(a,b,c,d,e,f,g){"use strict";a={DEFAULT_TIMER_DURATION_IN_SEC:6,STORY_UPDATE_TICK_IN_SEC:.1};f.PROGRESS_BAR=a;b=20;f.REDIRECT_DELAY_IN_MS=b;c=10601e3;f.REFRESH_TIMEOUT_IN_MS=c;d=1e3;f.SEC_TO_MS=d;e=80;f.SWIPE_DISTANCE=e;a=150;f.SWIPE_DOWN_DISTANCE=a;b=10601e3;f.CACHE_EXPIRATION_IN_MS=b;c=["/stories/view_tray","/stories/preview/"];f.HIDE_HEADER_URLS=c;d=g._("Story Added");f.UPLOAD_SUCCESSFUL=d;e=g._("Unable to Add Story");f.UPLOAD_FAILED=e;a=g._("Unable to load effects");f.EFFECTS_LIST_FAILED=a;b=g._("Unable to apply effect");f.EFFECT_APPLY_FAILED=b}),null);.__d("GHLTestElement",["csx","invariant","ODS","Parent","URI","containsNode","getElementPosition","gkx"],(function(a,b,c,d,e,f,g,h){"use strict";var i;a=function(a,c){var d=Array.from(a.querySelectorAll("img"));if(b("gkx")("1059877")){var e=(i\|\|(i=b("URI"))).getRequestURI();e=e!=null?e.getPath():"";var f="images"+c,g="leng

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\TAH3WlPZB8H[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	15872
Entropy (8bit):	5.277764274871931
Encrypted:	false
SSDEEP:	384:P8o1gULKLQcHcdVvdUaVkghPlYO8g9ZUR2kv:P8o1gULKLQc8dVvdUaVVhPlYvg9Ghv
MD5:	29EBFF3A7ACAB502296B5C2FD1283962
SHA1:	2C443237A07210D4FD5E1073D2AB1263F2AAE6FF
SHA-256:	7FCF2EA5DCBBE5ED06D0740A3E2A22C2B474C2ED4F6F7BA87EB8F9DDEE7EC0F3
SHA-512:	45C73651626B50249671B69CC6C5E31EDB67B9C0A85F778FC14E9D3F5C84D82EB9C9CF4BECA1308779AA2CCF2EF19CC3C7F15748ACE9BC639A02D604A9CADA96
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yd/r/TAH3WlPZB8H.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["FpeIRVs"]); }..__d("Animation",["BrowserSupport","CSS","DOM","DataStore","Style","clearInterval","clearTimeout","getVendorPrefixedName","requestAnimationFrame","setIntervalAcrossTransitions","setTimeoutAcrossTransitions","shield"],(function(a,b,c,d,e,f){var g=b("requestAnimationFrame"),h=[],i;function j(b){if(a==this)return new j(b);else this.obj=b,this._reset_state(),this.queue=[],this.last_attr=null,this.unit="px",this.behaviorOverrides={ignoreUserScroll:!1}}function k(a){if(b("BrowserSupport").hasCSS3DTransforms())return n(a);else return m(a)}function l(a){return a.toFixed(8)}function m(a){a=[a[0],a[4],a[1],a[5],a[12],a[13]];return"matrix("+a.map(l).join(",")+")"}function n(a){return"matrix3d("+a.map(l).join(",")+")"}function o(a,b){a\|\|(a=[1,0,0,0,0,1,0,0,0,0,1,0,0,0,0,1]);var c=[];for(var d=0;d<4;d++)for(var e=0;e<4;e++){var f=0;for(var g=0;g<4;g++)f+=a[d4+g]b[g4+e];c[d4+e]=f}return c}var p=0;j.prototype._reset_state=function()

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\h3jijAStzKK[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	38475
Entropy (8bit):	5.497208573087439
Encrypted:	false
SSDEEP:	384:jywzIoAcMI6sIN+p2fNkvtTyZJWCkqogynHPEdav6EfolV25qhDTtUqgdobI1CpA:mwzxHMiIcWddxfEsLixxcwTig
MD5:	2546EA47AA7749C9BA01D2EDEF9C87F2
SHA1:	67E90018EDFD011A95692EF3549BD2C420A1126C
SHA-256:	17359A995DE7DEF07EA79A016F3506C1ED56B3C8C9AFC8F9A1C76F7ABB9636A4
SHA-512:	F31C7B75CF31031E9A1209EE2E22CC0D701C501AF74639D4ABD3B3E5C4FFE5E6A00052206B3A5C3647A4D5E5D26052F9267CA5BAF3559CA0A784605A8C403582
Malicious:	false
Reputation:	low
Preview:	.wp.touch._fzu .storyStream>.carded,.wp.touch._fzu .storyStream>article>.carded,.wp.touch._fzu .storyStream>div>.carded,.android.touch._fzu .storyStream>.carded,.android.touch._fzu .storyStream>article>.carded,.android.touch._fzu .storyStream>div>.carded,.wp.touch._fzu .groupChromeView.feedRevamp .carded,.android.touch._fzu .groupChromeView.feedRevamp .carded{border:1px solid #bdbebf;border-image:none}.touch._fzu .storyStream>.carded,.touch._fzu .storyStream>.carded:first-child,.touch._fzu .storyStream>article>.carded,.touch._fzu .storyStream>div>.carded,.touch._fzu .groupChromeView.feedRevamp .carded{border-image:url(/rsrc.php/v3/yN/r/QmGuax92JQa.png) 4 4 6 repeat;border-width:4px 4px 6px;margin:0 8px 9px}.touch._fzu .storyStream>.carded._29d0{border:0 none;margin:0 0 8px;overflow:hidden;padding:16px}.touch._fzu .storyStream>.carded._29d0._122m{padding:10px 10px 0}.touch._fzu .groupChromeView.feedRevamp .carded.groupHeader{margin:10px 8px}.x2.touch._fzu .storyStream>.carded,.x2.touch.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\n4bGLjGRWrl[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	11208
Entropy (8bit):	5.394612582577508
Encrypted:	false
SSDEEP:	192:gTw8C7Ls5EBwb70Oc39dSWEfpIH0Wupmxm6VHTT:gTwbL3VoROgYVHTT
MD5:	4E068352658B4E168C79AA686F611FA8
SHA1:	EAF91AFAA2AB1F6C0D16A284B51284BC5158C42F
SHA-256:	5E75640FA4EAA50080551EE539B16841EC479343BB40891F91D7092B5C7FF901
SHA-512:	1A91F85F138583F4D9561A63765E91E26CB9317A037BA337A3B0CD745EA2F5A208C13EB982C6261EF6251434904E8D3892475D47229E890F3D239C65A9FFDE10
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3i8594/yf/l/en_US/n4bGLjGRWrl.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["i\/49c5Q"]); }..__d("MSideNavMarauderLogger",["MLegacyDataStore","MTouchClick","MarauderLogger","Stratcom"],(function(a,b,c,d,e,f){var g="";function a(a){b("MarauderLogger").toggleModule("sidebar_menu",!0)}function c(a){b("MarauderLogger").toggleModule("sidebar_menu",!1)}function d(a){var c=a.getNode("tag:a");a=a.getNode("tag:div");b("MarauderLogger").log("open_application","sidebar_menu",{application_link_type:"local_module",display_name:a?a.innerText:"unknown",url:c&&c.href});b("MarauderLogger").setNavigationModule("sidebar_menu")}function f(){j("session_start")}function h(a){a=a.getData();if(a.node.rel<=0)return;var c=0,d="",e=b("MLegacyDataStore").get(a.node);e&&(c=e.bootstrap?1:0,d=e.type);e=0;var f=null;for(var g=0;g<a.results.length;g++){var h=a.results[g];if(h.rel>0){if(h.rel==a.node.rel){f=e;break}e++}}j("click",{query:a.query,is_bootstrapped:c,display_position:f},d,a.node.rel)}function i(a){g!==a&&j("search_keystroke",{prev_q

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\vjVEyrdqGK6[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	28268
Entropy (8bit):	5.373256065673994
Encrypted:	false
SSDEEP:	384:4WqvA9umvNBihfTGN8itN519iefQcft+Mi3MGJj6rvHHewvp2+j:Bsa11i3MXp2+j
MD5:	E431EF5BA54E86632644507C1625DBE0
SHA1:	368235C186B92B7ED6BED000CA718EB432F21864
SHA-256:	15DF2A9AEC645B1DC61F7688529859C0DC4C58DDF9DA3798E9951D9DAB185D36
SHA-512:	2D9E069D6887CD28999E3CD92DF742A1913E9EE5DFBD55BB3BFF6099A204AA3E6EEB97CABFC305132BA21C9A965C6FC5828F4448573257EF24E70EBF91391AD0
Malicious:	false
Reputation:	low
IE Cache URL:	https://ccaeperu.com/ico/vjVEyrdqGK6.css
Preview:	._4-{display:none}.child_was_focused ._4-{display:block}._55d0{background-color:#fff}._119 .textInput::-ms-clear{height:0;width:0}.._wbs a{color:#fff;text-decoration:underline}.._3quh{background:transparent;border:0;color:#0084ff;cursor:pointer;font-family:inherit;font-size:14px;line-height:inherit;margin:0;padding:0}._2t_{font-weight:500}._2u0{font-weight:400}._3quh._3ay_{color:#f03d25}._3quh:active{opacity:.2}._4zab{cursor:default;opacity:.4}._4zab:active{opacity:.4}.._39r5{display:block;font-weight:normal}._39r6{color:#1d2129;font-size:14px}._39r7{color:rgba(0, 0, 0, .40);font-size:13px}._39r8{font-size:13px}.__0d{display:inline}.._4eby{-webkit-animation-duration:.15s;-webkit-animation-name:popIn;background:#fff;border:0;border-radius:6px;box-shadow:0 2px 8px 0 rgba(0, 0, 0, .20);box-sizing:border-box;-webkit-font-smoothing:antialiased;position:relative}._2c9g{padding:24px}._2c9g ._4ebz{font-size:16px;font-weight:500;margin-bottom:16px}._2c9i ._4ebz{border-bottom:1px solid rgba(0, 0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\1487645_6012475414660_1439393861_n[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.71696959175789
Encrypted:	false
SSDEEP:	3:yionv//thPlH1tnt/tAhHGZscm1olkqCwbp:6v/lhP6hHDcZCYp
MD5:	8DC258A49B60FAE051E9A7CE11AD05CF
SHA1:	DAFEF280663F4205FC7F0E47799E9945E6A68D6D
SHA-256:	C8CAED93847AFFC154CB3D424E34FC146E7340BB29ABEBD5EBA7063E3DCA0604
SHA-512:	5F11ED60D79A80EF7CCEFFA907CD55F31D8DB19BD2A7F4C2650C62A355C5071C5FB61DA1EB0A2071CE22ECDC35C0D12F51E4D13AAC3B0FDB95ED4629815B5AFB
Malicious:	false
Reputation:	low
IE Cache URL:	https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png
Preview:	.PNG........IHDR..............PX.....IDAT.Wc...0a.!..)....A,....Zl....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\6LTWT96P.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.319604500502523
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/Ywq7byzsMqMnVVn3G9gP4qv7cixHnH1Di/kgdxdG+FB7goXBhXJuM:iFUxhq78s7MnVVn3G9gFFv+FdiflE
MD5:	3EFD2F3A4034940DC005B22CF17C2A2C
SHA1:	C4204FE95E7C3189B65DD33AEC0438D941CF3935
SHA-256:	4121DB577DE5FAECEB0BB546C53CFF8A71642F56D7AF4B493EE6932F19EB126A
SHA-512:	0775DFA2238E2093D6AFFAF51A07B910E901D8D52EBD51770AC904FB8B4D92026CEF21E0A82F51783C1607586E7836F0E05B093F8511B9FB17C05DA2230476E2
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\6LTWT96P.htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/?cmd=vt9n.n11981t1t8b1t1xm1msm.s9tsxxssy9tstt1t8nsb.y1ms
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\6jPqzzsJS-8[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 25 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	535
Entropy (8bit):	6.452383492099363
Encrypted:	false
SSDEEP:	12:6v/73gRkgSBSUsl2I8HCRBFave8uzaMWSJw:moqkB0CRBFaW8Gy
MD5:	49BC583875987E80421183496C664F95
SHA1:	A1D9900FDECED487CC9B2F8FD626DCCBD79F6C6C
SHA-256:	8A31B173A18165F976983AC2F0FACF472378ECB9523FA1B87580755448ED0F7C
SHA-512:	38F10798226E8C2699E59AAEE9A9C886E71EB3E0CB5F86B30AC15D71F46F4BF4F4258BB6E57F9F85E7CA15C5A940A4EC2EC58D11D2F10AB5CCAC93776D7CAAED
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y0/r/6jPqzzsJS-8.png
Preview:	.PNG........IHDR.......2......\......PLTELiq.w..w..w.egk.w..w.egkegkegk.w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w.egkegkegkegk.w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w.egk.sH....7tRNS.......8..jL..l...R...f....x...p..6Z@d.N..`"..tn ...(.S7if....IDATx^..Go.!.@........{/....".0..\r...6.4#$....R.}.J:s._..H.T.....aArE....[ZN}><N...A..Ex..`1d..[c.q9x...o.q.P.L.E.....T...9..3.yO..a.. 3x.b......R...^05@......rm.h...UO.XS/K. ..a....t........h.t.?{ib.g....".......~.w.L.g>......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\A5FVZRWT.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.316349035211146
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/Ywq1Wsoq5tKR96uE+1gP4PS9Hp6ZGH1T2ZKOiVxnsxH/5FB7goXBN:iFUxhq1Wsf5tq96uD1gHcGFWFdnqE
MD5:	C62C76D4225B37F3A18B8D189398348C
SHA1:	D24E12A2222283BB46396F21FFA46B03B40BCC32
SHA-256:	67518687B5587DBC89A222E15381BDF2DF5857C2F118986498EC6A38081345F5
SHA-512:	6B23BC18314BB211EA54020EB11CD79E0035C34B478ABDDE22624FAB8074BAF44A2268CF03001C6B548A828E4E90500DA58ED2C4B7A9D15564A456CA572E7B74
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\A5FVZRWT.htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/?cmd=bnvtbtxmsbx1vy11snsm8nx8smbbmy8x8snns.8tm99yn88xtvv
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\B0LQ5SBH.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.315806904690772
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/YwqctsdUqz4RK6QtgP4oxE/xITH1M/XJMHxw0xTkFB7goXBMlRn26:iFUxhqctsdjz4RK6QtgKk6FdxRE
MD5:	F286B16912453EE003BE85434993A4DF
SHA1:	10D1CCB31E70AB691321FD40B3FC917E60A9C8AC
SHA-256:	57230F4234A78BFF4A5599F2B424BEEE41A253F9F85D2FB8996116C3E451C914
SHA-512:	442FA7E09EC4D8446A679D4D1BEFB9FB6ADA2BB090D555F25B879C510CFF28DBD682C344BF0834EF7139195D075A8F361FD4F0C03B9E713A718902A878A51667
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\B0LQ5SBH.htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/?cmd=t8ntyxt9mnn.9.t9t1ns9tnb11.n9tttbstxsmt91bmnsb8xts1
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\B9RXHZ5I.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	178412
Entropy (8bit):	5.54086068208462
Encrypted:	false
SSDEEP:	3072:+I8cQQQbQxE7wXW1s9/50t+0THAlsc0TSK2JwTvd+b+ZS3KlwNO3IBiNyw/aJ8bZ:+4Ny7I50t+0THAlsc0TSK2JwTvd+b+ZT
MD5:	F70CAEBF3F5310D809952C71719333E6
SHA1:	C322BD913A0950801807CF09546C26ECC338576A
SHA-256:	C5AA40C15EC8C30A9375126860CDA2039423D612E975BFD4D5C534AEB4A5CE2F
SHA-512:	A1977E532A5017C76FC9870B8008972ABEE07E98B3248C50DD34E4D7C32A1CC644DA1F0F243B3FE0F6E5AFF002922DF395B0FD69751C65099D882D9F3959E072
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en"><head><title>Facebook - Log In or Sign Up</title><meta name="viewport" content="user-scalable=no,initial-scale=1,maximum-scale=1" /><link href="https://static.xx.fbcdn.net/rsrc.php/v3/yj/r/gB76kJXPYJV.png" rel="shortcut icon" sizes="196x196" /><meta name="referrer" content="default" id="meta_referrer" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/Z2s1olWKEnZ.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="eG3x5X4" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yb/l/0,cross/ahNSxu_HONL.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="uuaG0vm" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/y6/l/0,cross/h3jijAStzKK.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="HdeRwoL" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yj/l/0,cross/22KpFFJQuZn.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="nxH+hR3" />

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\O7nelmd9XSI[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.314707595844606
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/YwqoNskq7jCzs1+gP4lLnYomH1LHapNzYxThFB7goXBbuw9xR9Dyc:iFUxhqoNsz7jCzs1+g9HDFd6KW/E
MD5:	17E700BFBAB3EBF99E42ABD15B1E0CED
SHA1:	648FA128A1999BE6C084F759863E2D27B345EA32
SHA-256:	A75E1B10E2B21B657C7DF9B46FE7F5B40A2064C3A2C907C05653E852BD38E1EC
SHA-512:	1E139540A0537CA50B42333FA24CBECB9BB608DB417CC45E530F476FFA3F3D4290AFC69A9136BEF431A9D7644BAB91BDCB261BCE4C7CECA7BE3C8E127BFFB092
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\O7nelmd9XSI[1].htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/rsrc.php/v3/yU/r/O7nelmd9XSI.png
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\TRX669RO.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	996
Entropy (8bit):	5.374284295152728
Encrypted:	false
SSDEEP:	24:kWBfUm8XIUTbh+FolB2OJFnlDVosf/PWpVhyMxtv:ffyl/h+gB2IFj/E/xB
MD5:	7B81ED1A40E222900D10C6B6880509CB
SHA1:	26B6273003550AB1A37713318266ED3928B6D967
SHA-256:	70CD41F31AA8D8E560B362A36A404F3FCD5D9BB9C25E20B179F08B0C3BEAC0D2
SHA-512:	18652093BA24E4E766773B2C6635DDE15D267A5C9C5FB5100E04DB07210B3A04CEEBEA9E4CA74E19908FB6C94BECED4A93CC6409B4F10116FCE7D441E90AD274
Malicious:	false
Reputation:	low
Preview:	<html><head><title>Redirecting...</title><script type="text/javascript" nonce="qsxo7cnc">/<![CDATA[/(function(){function si_cj(m){setTimeout(function(){new Image().src="https:\/\/error.facebook.com\/common\/scribe_endpoint.php?c=si_clickjacking&t=1966"+"&m="+m;},5000);}if(top!=self){try{if(parent!=top){throw 1;}var si_cj_d=["apps.facebook.com","apps.beta.facebook.com"];var href=top.location.href.toLowerCase();for(var i=0;i<si_cj_d.length;i++){if (href.indexOf(si_cj_d[i])>=0){throw 1;}}si_cj("3 ");}catch(e){si_cj("1 \t");window.document.write("\u003Cstyle nonce=\"qsxo7cnc\">body * {display:none !important;}\u003C\/style>\u003Ca href=\"#\" onclick=\"top.location.href=window.location.href\" style=\"display:block !important;padding:10px\">Go to Facebook.com\u003C\/a>");/dWe5vYjm/}}}())/* */</script><script nonce="qsxo7cnc">window.location.replace("https:\/\/m.facebook.com\/");</script><meta http-equiv="refresh" content="0;url=https://m.facebook.com/" /></head><body></body></html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\Z2s1olWKEnZ[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	8295
Entropy (8bit):	5.368079913652552
Encrypted:	false
SSDEEP:	192:buIR9orWcpRDXQBy1Mh/YCXTRC89Fx2aP:lz
MD5:	D01072DED8F324BC7AA58945B67ED06E
SHA1:	56DEE4A8631FEDB03AF1D18A2A7DEF90171CA166
SHA-256:	4D1335258BC3B6BAC34C46278F0BFE34C7B6F42BF7B71FA1A7EC6251A6710A7D
SHA-512:	F65DF6D39B0143330E508330E03F4EC03273D96241F36CB1616D2FBFA808D96B3CD0DFD2F30B5678262CA05AAE25DD45EEEFE4494A10FAE0893622664D804D7D
Malicious:	false
Reputation:	low
Preview:	._2sp{height:12px;width:12px}._2sq{height:20px;width:20px}._2so{display:inline-block}._50cg._2ss{background-image:url(/rsrc.php/v3/y_/r/sO8pFbm5AdZ.png);background-repeat:no-repeat;background-size:auto;background-position:0 -189px}._50cg._2st{background-image:url(/rsrc.php/v3/y_/r/sO8pFbm5AdZ.png);background-repeat:no-repeat;background-size:auto;background-position:-84px -168px}._50ch._2so{overflow:hidden}._50ch ._2sr{height:110%;left:-5%;position:relative;top:-5%;width:110%}._50ch._2ss ._2sr{background-color:rgba(0,0,0,.5)}._50ch._2st ._2sr{background-color:rgba(255,255,255,.7)}._2su{background-image:none;margin:6px 8px;position:relative}.touch ._2su,.touch ._2su::after,.touch ._2su::before{border:1px solid transparent;height:5px;width:2px}._2su::after{content:"";position:absolute;right:-7px;top:-1px}._2su::before{content:"";left:-7px;position:absolute;top:-1px}._2su.frame2::before,._2su.frame3,._2su.frame4::after{height:9px}._2su.frame3::before,._2su.frame4,._2su.frame5::after{height

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\ahNSxu_HONL[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	17098
Entropy (8bit):	5.284834479841437
Encrypted:	false
SSDEEP:	384:1eB9Vg7/ELuB3+guBusPV4wTBcjlBXhLqcwkNE+Pb/Fb:1mVg7/MuB3+guAsPVNlcjlBX9xN1PTFb
MD5:	461EB8488518B615E35A46E9FCD9D153
SHA1:	2061F911C22E64533D4F9FE84858911BFA30499B
SHA-256:	C4AC11AA7BF4ED601CFA3D9F43BF8889ACDC51B4334C96AC0F50E0652344E95E
SHA-512:	8D26517C195A19673B95F457A0E7ECCBB5C1BAFD9C6AFCA5A7B7A421C50A39E0B813F4116D1452785F7414710A760067EA8B7124E4897287EEA9CEA275382B9B
Malicious:	false
Reputation:	low
Preview:	.touch ._5ui2 ._5dpw{text-align:center}.touch ._5ui3{padding:6px}.touch ._44ii b,.touch ._44ii .sec{font-size:14px}..touch ._8x0i{border:none;border-radius:6px;box-sizing:border-box;display:block;font-size:15px;font-weight:bold;line-height:20px;min-height:36px;padding:8px 12px;position:relative;text-align:center;width:100%}.touch ._8x0i._8xqj{width:auto}.touch ._8x0i._9oix{width:100%}.touch ._8x0j{background-color:#1877f2;color:#fff}.touch ._8x0j:active{background-color:#216fdb;color:#ccd0d5}.touch ._8x0k{background-color:#e4e6eb;color:#050505}.touch ._8x0k:active{background-color:#cdced3;color:#050505}.touch ._9004{background-color:#e7f3ff;color:#1877f2}.touch ._9004:active{background-color:#cde5ff;color:#1877f2}.touch ._8x0i._8x0j:disabled,.touch ._8x0i._9004:disabled,.touch ._8x0i._8x0k:disabled,.touch ._8x0i._8x0j[disabled],.touch ._8x0i._9004[disabled],.touch ._8x0i._8x0k[disabled]{background-color:#e4e6eb;color:#bcc0c4}.touch ._9adg._8x0i._8x0j:disabled,.touch ._9adg._8x0i._8x0j[

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\favicon[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	dropped
Size (bytes):	12440
Entropy (8bit):	5.317964214513503
Encrypted:	false
SSDEEP:	384:iFUxhqRYAsc+Vgmka/a+2gu+zAJFdjasxE:zxhqRYFWAjZ
MD5:	CBCD7E47C1D933F744D7F063864C0CAC
SHA1:	5DD83D065BFDAD3CE3057AF4E9EB0764105C1B54
SHA-256:	18F9C171FB1D422A38DEB4211983FC25F6E318BACC3941FD3BBC1ADCC96A3CFD
SHA-512:	050779D1679C97788D2F5CFD8B035E93D760FF959200E07187B9568FD3A17FAECB0AF1550ED286A4C1F28CDB2740A9067FCFF3D7DFC1C5C5D98B273A8533CA37
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\fzkbB_w4sxK[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	122678
Entropy (8bit):	5.471523495913572
Encrypted:	false
SSDEEP:	3072:HpvuKN69tFT6SZxbWrX+hhPGMZH3NbbWo:JmgK6SZxbWr8hPGMZH3x
MD5:	491EC01003B04E45EAD30DC74FBEE0D4
SHA1:	39010359BC432B9968BDFC527C06DF0A1AA83359
SHA-256:	0A1465669DD7D447C8D681757A7F8B1716D9A3C1377E9F07AF9C7400A8CD9625
SHA-512:	D0013D5CA3BAC75E568C2C2358D729A5C6C44DF852102D632C47EEF0E9A32DA72FE2152A9F7C66826540B93DB80728842EB5BF46B96735A4EE9ABBC76779DA56
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yU/r/fzkbB_w4sxK.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["tqu3zQe"]); }..__d("GenderConst",[],(function(a,b,c,d,e,f){e.exports={NOT_A_PERSON:0,FEMALE_SINGULAR:1,MALE_SINGULAR:2,FEMALE_SINGULAR_GUESS:3,MALE_SINGULAR_GUESS:4,MIXED_UNKNOWN:5,NEUTER_SINGULAR:6,UNKNOWN_SINGULAR:7,FEMALE_PLURAL:8,MALE_PLURAL:9,NEUTER_PLURAL:10,UNKNOWN_PLURAL:11}}),null);.__d("IntlVariations",[],(function(a,b,c,d,e,f){e.exports={BITMASK_NUMBER:28,BITMASK_GENDER:3,NUMBER_ZERO:16,NUMBER_ONE:4,NUMBER_TWO:8,NUMBER_FEW:20,NUMBER_MANY:12,NUMBER_OTHER:24,GENDER_MALE:1,GENDER_FEMALE:2,GENDER_UNKNOWN:3}}),null);.__d("MAjaxSafety",[],(function(a,b,c,d,e,f){f.getSafeForAjaxURL=a;f.isURLSafeForAjax=b;f.browserEncodeURI=k;function g(a){return h.test(a)&&location.protocol!="file:"&&location.protocol!="data:"&&location.protocol!="javascript:"}var h=new RegExp("^"+location.protocol+"//"+location.host.replace(/[-[\]{}()*+?.,\\^$\|#\s]/g,"\\$&")+"/");function i(a){if(a===null\|\|a===void 0)return location.toString();a=a.toString();if(g(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\kPkP7qOaPwj[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5416
Entropy (8bit):	5.431884812448545
Encrypted:	false
SSDEEP:	96:sjo4OftAkECfU+38PHMhOQOe7UyGkt38J0x8ak38bGvUmOhsfermAUvLetRZ/nuP:V4OfuWUpH9beQyGkXx84GvUmCGermLvx
MD5:	B68DF8E0C602CBBE2DE69A972434E9E5
SHA1:	2D922F3BC1B1200163913C1EBD330C315E6CD00A
SHA-256:	AA38C0FACA53151E1B91B3D9BE06F8300A624E16335F9EEC803F5EB9E62B8504
SHA-512:	4D7E4CBDB2BD841D92E8535274BCA98DD2478ACEECC31BC299DBA528CC09305FAC7D869934D3E25AA24B5299740268F10B558DE4880965094691B124F0B74CCF
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yR/r/kPkP7qOaPwj.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["9hlJZ9f"]); }..__d("MHybridWebLiteController",["MJSEnvironment","qex"],(function(a,b,c,d,e,f){"use strict";a={shouldTriggerFullPageNavigation:function(a){return b("MJSEnvironment").IS_ANDROID&&!b("MJSEnvironment").IS_TABLET&&a.getPath().indexOf("/marketplace")===0?b("qex")._("1907780")\|\|b("qex")._("1907781"):!1}};c=a;e.exports=c}),null);.__d("findTag",["$","fb-error-lite"],(function(a,b,c,d,e,f){var g=b("fb-error-lite").err,h=b("fb-error-lite").TAALOpcode;a=function(a,c){var d=b("$")(a);if(!c){if(d instanceof HTMLElement)return d;var e=g('Element with ID "%s" is not an HTMLElement',a);e.taalOpcodes=[h.PREVIOUS_FILE];throw e}e=d.tagName.toLowerCase();if(e!==c){a=g('Expected $("%s") to be of type "%s" but got "%s" instead.',a,c,e);a.taalOpcodes=a.taalOpcodes\|\|[];a.taalOpcodes=[h.PREVIOUS_FILE];throw a}return d};c=a;e.exports=c}),null);.__d("ForgetPasswordAutoSearch",["Event","findTag"],(function(a,b,c,d,e,f){f.addListenerForgetPasswordAu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\qMrE4RFJBoQ[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	56255
Entropy (8bit):	5.393201064944786
Encrypted:	false
SSDEEP:	1536:9VR01kRxaXay20cWLWKnzVa/EfFwOnmRrpXubA:9sCRo320cWLWKnzVacfF/k
MD5:	24A19D20FA5E0D65E7BD4F2DE56B99CD
SHA1:	6F5DF27C52FAD92577BDFA16D32474FA8F5348FC
SHA-256:	0A1BBC175701C580963EDE7ED4A9123501F799093E9C8EC937079AF9122448A7
SHA-512:	E21254422EDF0127096698D65AB693471C0535CEB2FD81D774BC274EC8CF6E055DA0FEF03E993A314E4893FB63BF1E2D5B017DEBB2D2DD3F91E964F9520ED319
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y7/r/qMrE4RFJBoQ.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["hY9fl6i"]); }..__d("CookieConsentBlacklistedHrefs",[],(function(a,b,c,d,e,f){e.exports={hrefs:["/about/basics","/privacy/explanation","/ads/settings","/help/111814505650678","/help/1561485474074139","/help/568137493302217","/help/769828729705201","/help/cookies","/policies/cookies","/policy/cookies"]}}),null);.__d("FourOhFourJSTypedLogger",["Banzai","GeneratedLoggerUtils","nullthrows"],(function(a,b,c,d,e,f){"use strict";a=function(){function a(){this.$1={}}var c=a.prototype;c.log=function(a){b("GeneratedLoggerUtils").log("logger:FourOhFourJSLoggerConfig",this.$1,b("Banzai").BASIC,a)};c.logVital=function(a){b("GeneratedLoggerUtils").log("logger:FourOhFourJSLoggerConfig",this.$1,b("Banzai").VITAL,a)};c.logImmediately=function(a){b("GeneratedLoggerUtils").log("logger:FourOhFourJSLoggerConfig",this.$1,{signal:!0},a)};c.clear=function(){this.$1={};return this};c.getData=function(){return babelHelpers["extends"]({},this.$1)};c.updateData=fu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\vdzjXL4eT5D[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	64646
Entropy (8bit):	5.460521341588006
Encrypted:	false
SSDEEP:	768:LCs5eTZN01lO/00s26kHF4QQ8neSyADh8VJqeu8Cx:goyikHFNzdyik5m
MD5:	4EFF4044F57721F7EA0160601470AD0A
SHA1:	8CE1513DB599D66AFA74A41553F5BBE1CA5E79AA
SHA-256:	02884C499F49E11926E5D61894DEC87E86071159D2E536833174C16A068F45B5
SHA-512:	C08B1A7326AC737039D4A1DC6B0208C065DF947BD148AA04FCF0CB3F787CA5D0E6F166584DA90088D6E5664F0FC837F63B2AAD3E98F26579233789171339B7A3
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yr/r/vdzjXL4eT5D.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["9io9Bh5"]); }..__d("ChannelEventType",[],(function(a,b,c,d,e,f){a="jewel_requests_add";f.FRIEND_REQUESTS_ADD=a;b="mobile_requests_count";f.FRIEND_REQUESTS_COUNT=b;c="jewel_requests_remove_old";f.FRIEND_REQUESTS_REMOVE=c;d="friend_requests_seen";f.FRIEND_REQUESTS_SEEN=d;e="inbox";f.INBOX=e;a="messaging";f.MESSAGE=a;b="pages_messaging";f.PAGES_MESSAGE=b;c="typ";f.TYPING=c;d="change_page_thread_flag";f.PAGE_THREAD_FLAG_CHANGED=d;e="m_notification";f.NOTIFICATIONS_NEW=e;a="notifications_read";f.NOTIFICATIONS_READ=a;b="notifications_seen";f.NOTIFICATIONS_SEEN=b;c="graphql";f.GRAPHQL_SUBSCRIPTIONS=c;d="rti_session";f.RTI_SESSION=d;e="rti_session_request";f.GET_RTI_SESSION_REQUEST=e;a="skywalker_message";f.SKYWALKER_MESSAGE=a;b="delta";f.DELTA=b}),null);.__d("FlowMigrationUtilsForLegacyFiles",["FBLogger"],(function(a,b,c,d,e,f){"use strict";f.invariantViolation=a;f.isFalsy=c;var g="flow_typing_for_legacy_code";function a(a){b("FBLogger")(g).b

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\4MFjarAmouj[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	26165
Entropy (8bit):	5.3401093321298125
Encrypted:	false
SSDEEP:	768:4yqMLoUB7JoLON2zA1q7hycm4rb0vDogPoDvN8f:HPL+9rbuThf
MD5:	686DA670633C5DC513BFE8D3F6478821
SHA1:	815A9D3C3A698B6EB9A8CBEFC48282D6465E6146
SHA-256:	BB0752526B51AF28DE2E97E39E78D4D57FC5C88924A003F65357BF6FFBFCB83F
SHA-512:	C8B38D98674E141698A9D0E582243FBE5CA1C02E2FAA89EF2F1F09A9BAE591C6E577FFA1153BAFC8FB359DCCE9A14F0140DE5A9C0977DBFCB0A85B29F33694E4
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3iLQG4/y1/l/en_US/4MFjarAmouj.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["x8N2HL2"]); }..__d("KaiOSSendMessageUtil",["Event"],(function(a,b,c,d,e,f){"use strict";f.postMessage=a;c=function(){function a(){this.$1=!1,this.$2=null,this.$3()}var c=a.prototype;c.$3=function(){var a=this;this.$2=b("Event").listen(window,"beforeunload",function(){a.$1=!0,a.$2&&(a.$2.remove(),a.$2=null)})};c.postMessage=function(a,b,c,d){if(a&&b&&!this.$1){var e=new Map();e.set(g,b);c&&e.set(h,c);d!=null&&e.set(i,d);a.postMessage(e,"*")}};return a}();d=Object.freeze({HANDLE_BACK:"handle_back",MESSAGE_RECEIVED:"received",OPEN_URL:"open_url",REGISTER_PUSH:"register_push",SCREEN_ORIENTATION_LOCK:"screen_orientation_lock",UNREGISTER_PUSH:"unregister_push",CHECK_FOR_PUSH_UPDATE:"check_for_push_update",PUSH_UPDATE_COMPLETED:"push_update_completed",SET_VOLUME:"set_volume",FBT_STRINGS:"fbt_strings",CONFIG_RESPONSE:"config_response",FETCH_MSISDN:"fetch_msisdn",GET_CONTACTS:"get_contacts",TOGGLE_SPATIAL_NAV:"toggle_spatial_nav",LITE_MIGRATION

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\9HQ2AZB5.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.3145906402916605
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/YwqS/esNq61BYWtWgP4hp+Y+HH18b5F08QxpYJuFB7goXBJZHeOr8:iFUxhqgesY61BYWtWgfe01Fd5znE
MD5:	DE299BB362A6A0563F51CCB48A75A3EC
SHA1:	8A92837F2507D69A772F83E9C949BE62D998BDF9
SHA-256:	BB2FCEA23F63EE668E66E89E043FF29C9A962B06ED2AA21371DF3E072516BBBD
SHA-512:	9EAADA7EC80A3ECA1E1C2969563600FA2777B7F458CB0E908BE79CE0C8A653F51B7A174682C8EBB90B190DEE699FE53A563DAF791AB66E46413EDF0B1CC820D6
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\9HQ2AZB5.htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/?cmd=svnv9tsbx9tbsttsnxbtbnt.mynxy1vytby81nv1mb1v.b1ms9s
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\Af0wuS8syLV[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	48646
Entropy (8bit):	5.388780632618317
Encrypted:	false
SSDEEP:	768:HBR0WIopIVSPXeW9LhRfUjl9wWBuqVYsblCwLCpmjCfH9a8rdIqDb5AwdUknrYZk:HBR9u8rdIKdUBL/Q
MD5:	337646DFB423F1EBF4BD0BFFFA8D713B
SHA1:	FD67500FF260D3C557AFFADFA229B7FB90B200C7
SHA-256:	FCF3940491CDF8A242E9E29B4482FDA62BAFF8783AF14BBF268625BFFFAE7215
SHA-512:	4213408927F249AC5487B1450E85C1194895D2E3C06BE1F12F679931151F0EEE4224518035F0C6AB2760C29E37919209133039A50EF9B5FF9F32C44CF0F6FB36
Malicious:	false
Reputation:	low
IE Cache URL:	https://ccaeperu.com/ico/Af0wuS8syLV.css
Preview:	._6vg{border-radius:1px}._2wk7{width:16px}.._4vhx{border-bottom:1px solid #dddfe2}._2246{background-color:#f6f7f9}._1wcv{margin-left:4px;position:relative}._1nme{background-color:#fafafa;border:1px solid rgba(216,216,216,.40);border-width:1px 0;color:#4c4c4c;font-family:Helvetica, Arial, sans-serif;font-size:9px;font-weight:bold;overflow:hidden;padding:1px 10px;text-overflow:ellipsis;text-transform:uppercase;white-space:nowrap}._2sl3:not(:last-child){border-bottom:1px solid #dddfe2}._2sl3{cursor:pointer;padding:15px}._alf:hover{background-color:#3b5998;color:#fff}._2z3h:hover{background-color:#f2f2f2}._2sl3._alg{border-bottom:none}._2sl4{color:#4b4f56;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}._2246 ._2sl4{font-weight:bold;padding-right:32px}._alf:hover ._2sl4,._alf:hover ._4c70{color:#fff}._4c71{line-height:1em;padding:8px 0}._4c70,._uyb{color:#90949c;overflow:hidden;padding-right:16px;text-overflow:ellipsis;white-space:nowrap}._uyb{font-weight:normal}._1nmd{border-bot

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\U3QfFrS_cgV[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	assembler source, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8066
Entropy (8bit):	5.231294431102074
Encrypted:	false
SSDEEP:	192:ArGC9WW+xwBETkzMX7T8aUm324qG9mspi8ki:4WbLTkoXMfydpi8ki
MD5:	6EB997D7F3650E5F4201F92E6430E2B7
SHA1:	D2923FB96389B08B51C996DF090EE1C563095227
SHA-256:	088BE894F81B5817E320204DA06BB3E07C98049081D8407D7D5127553C3C0010
SHA-512:	A3AD49D68DDE2939543A3E350AB3E46B3DC788E3D566B289A0E4F1A4A58BB87918E72DBCC81C1AA0FAFA67A951B363B0B8F63A4F7C25FE436DE644413F1487F8
Malicious:	false
Reputation:	low
IE Cache URL:	https://ccaeperu.com/ico/U3QfFrS_cgV.css
Preview:	form{margin:0;padding:0}label{cursor:pointer;color:#666;font-weight:bold;vertical-align:middle}label input{font-weight:normal}textarea,.inputtext,.inputpassword{border:1px solid #bdc7d8;margin:0;padding:3px;-webkit-appearance:none;-webkit-border-radius:0}textarea{max-width:100%}select{border:1px solid #bdc7d8;padding:2px}.inputtext,.inputpassword{padding-bottom:4px}.inputtext:invalid,.inputpassword:invalid{box-shadow:none}.inputradio{padding:0;margin:0 5px 0 0;vertical-align:middle}.inputcheckbox{border:0;vertical-align:middle}.inputbutton,.inputsubmit{border-style:solid;border-width:1px;border-color:#dddfe2 #0e1f5b #0e1f5b #d9dfea;background-color:#3b5998;color:#fff;padding:2px 15px 3px 15px;text-align:center}.inputsubmit_disabled{background-color:#999;border-bottom:1px solid #000;border-right:1px solid #666;color:#fff}.inputaux{background:#e9ebee;border-color:#e9ebee #666 #666 #e7e7e7;color:#000}.inputaux_disabled{color:#999}.inputsearch{background:#ffffff url(/rsrc.php/v3/yL/r/unHwF

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\VBLSBCBU.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	12440
Entropy (8bit):	5.318362065902853
Encrypted:	false
SSDEEP:	192:irfhzUQHFY/Ywqw5sLqq6GXkKfWgP49VqXkH1eGF7p4YdCx3nFB7goXB6dTB7xPL:iFUxhqw5s2q6GUKfWgkCoKFd+hYDE
MD5:	612A91716213B3EB19A74E6188EC3230
SHA1:	6B221133BD9BF2B9ABC49BAB6EB1F24B1A97797B
SHA-256:	482B3C1DEBE2361A0307A909D28ED952CD505661CF2AF9773B29C02CF1B478D7
SHA-512:	2FCF3E4352E34D7838FA09BE4BD76F7B58F05D944321F922DD7F724C6D2BCB0EF0FE0F635806D45EF398D4171F84F4CBCF4F1A5A6A2ADDA46AE829062F0E952F
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\VBLSBCBU.htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://ccaeperu.com/?cmd=m9xvsybnvn1sv.bsnmnsyx119yb8mx1yv88sst1s8sxsv11nt.t
Preview:	..<!DOCTYPE html>..<head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />.<style></style><noscript><meta http-equiv="refresh" content="0; URL=/" /></noscript>.<title id="pageTitle">Log in</title><meta property="og:site_name" content="0" />.<meta property="og:url" content="/" />.<meta property="og:locale" content="en_US" /><link rel="search" type="application/opensearchdescription+xml" href="/osd.xml" title="0" />.<meta name="description" content="Log in to start sharing and connecting with your friends, family, and people you know." />.<meta name="robots" content="noodp,noydir" /><link rel="shortcut icon" href="https://www.fb.com/rsrc.php/yl/r/H3nktOa7ZMg.ico" />.<link type="text/css" rel="stylesheet" href="ico/U3QfFrS_cgV.css" data-bootloader-hash="lF8eW" data-permanent="1" crossorigin="anonymous" />.<link type="text/css" rel="stylesheet" href="ico/Af0wuS8syLV.css" data-bootloader-hash="JfgCu" data-permanent="1" crossorigin="anony

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\W5StuHxENhR[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	170034
Entropy (8bit):	5.438969251882532
Encrypted:	false
SSDEEP:	3072:hw8UXxPirVUA4Oj7cFKVTmvk25hDQkaBmXwvb/Lmnh/:hw8YxPirVUAbt9mc25hDUmAvbjE/
MD5:	0F4740226BAF73E52FC24C2A10D28E27
SHA1:	94602A1E910B1E7C65DCA86EAF3F51C9F0A6B4B2
SHA-256:	2DE5743B1B4E18A3ABE6FD6333157278AB60B82109F6741CB6795D41ACC8E6B8
SHA-512:	C384D8D987AB391CE4A0E77186564FE77B21C0ECFDB944FB2E02C71F553B72C465E3249FD27DF1A5015A18E391E91F592E7493070196543CE7C46588F401B89C
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3iK-b4/yR/l/en_US/W5StuHxENhR.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["ibIpI5r"]); }..__d("FacebookAppIDs",[],(function(a,b,c,d,e,f){e.exports={FACEBOOK_FOR_ANDROID:74769995908,FACEBOOK_FOR_ANDROID2:350685531728,FACEBOOK_FOR_EMERGING_MARKET_ANDROID:275254692598279,TURDUCKEN:400954310366822,FACEBOOK_MEDIA_EFFECTS:1779302845618373,MOST_RECENT_FEED:608920319153834,SAVED_FOR_LATER:586254444758776,TRANSLATIONS:4329892722,MESSENGERDOTCOM:772021112871879,MESSENGER_DESKTOP:195376314393036,WWW:256281040558,WWW_COMET:2220391788200892,FBPAGES:2530096808,ADS_PAYMENT:123097351040126,ADS_AMI_ONBOARDING:2806896492660535,EVENTS:2344061033,BUSINESS_ACCOUNTS:436761779744620,ADS_EVENTS_MANAGER:2094176354154603,WORKPLACE_BILLING:1350397358363828,WORKPLACE_FOR_EVERY_PHONE:1263749867021676,WORKPLACE_DESKTOP:267999183646265,CHATPROXY_WEB:229895473858072,MARKETPLACE:1606854132932955,WHATSAPP_BUSINESS_ACCOUNT_MANAGER:225181538219344,LIFT_STUDY_VIEW:1501349520163380,LIFT_STUDY_CREATION:367378623468359,INTERN_ADS_PREVIEW_GENERATION

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\c2cKQyepvf-[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	133101
Entropy (8bit):	5.294785804737888
Encrypted:	false
SSDEEP:	3072:DXp7y18E3KUYz6yUa1q7SV0B1SxgnaMo+2l:01x3d9r2l
MD5:	26A8659038AEBEFD8BB9056F4D9AD5EE
SHA1:	0C054E9EC2F83DF56E248CE855D598AF7359E65B
SHA-256:	3C4B923A05D7523D05190C3B17FE6C509C51A91B4CD9D44A997BE71D037CC350
SHA-512:	121C793F5AADF06287F5F80C993BD0291911C0748BCDB90D6D033B0B9EABD2EAB5C062332F104CA68D2341C6EDDD14E1FAE73446773A166C38398E3AA5C86325
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yM/r/c2cKQyepvf-.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["CnrHNsN"]); }..__d("MAudioExperimentUtil",["qex"],(function(a,b,c,d,e,f){"use strict";f.userInRegAutoplayExperimentGroup=a;f.userInLoginAutoplayOnErrorExperimentGroup=c;f.userInARAutoplayExperimentGroup=d;f.userInLoginHighlightExperimentGroup=e;f.userInAnimateButtonExperimentGroup=g;f.userInExitDialogExperimentGroup=h;f.userInAdditionalAudioExperimentGroup=i;f.additionalAudioDelay=j;f.isInAdditionalAudioExperiment=k;f.userInConfOtpExperiment=l;f.userInRegLazyLoadOnView=m;f.userInRegLazyLoadOnClick=n;f.userInRegAdditionalMotivationalContent=o;f.motivationalContentVersion=p;function a(){var a;return(a=b("qex")._("1462897"))!=null?a:!0}function c(){var a;return(a=b("qex")._("1941961"))!=null?a:!1}function d(){var a;return(a=b("qex")._("1955561"))!=null?a:!1}function e(){var a;return(a=b("qex")._("1941385"))!=null?a:!1}function g(){var a;return(a=b("qex")._("1723547"))!=null?a:!1}function h(){var a;return(a=b("qex")._("1797277"))!=null?a:!

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\dF5SId3UHWd[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2385
Entropy (8bit):	4.556036774993824
Encrypted:	false
SSDEEP:	48:07t6n8MnrFQiEC2o9M64cdImBl5cDiLgq4:6uraboGGI62iMB
MD5:	EBD8798BC32C86494851A07770E04E63
SHA1:	B5461DC8F5F5F848033441D506EE05D48742438B
SHA-256:	9531E96099E973B3D1C291F3E60419D8FE4730F46DE8A492FCCD2B4C962C96CE
SHA-512:	FB376AADA13675B405EBBF55C332665B5A89B7A905323D227EDFEE7729246E37A1B6B338554FFF4A0E2BB38DFBEAED59BE278BBF6F6BDFDFB4300AA6E54743E7
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/y8/r/dF5SId3UHWd.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1022.51 360"><defs><style>.cls-1{fill:#1877F2;}</style></defs><title>FBWordmark_Hex-RGB-1024</title><path class="cls-1" d="M166.43,126.68c-9.65,0-12.44,4.28-12.44,13.72v15.66h25.74l-2.58,25.3H154v76.78H123.11V181.36H102.3v-25.3h20.81V140.83c0-25.52,10.29-39,39-39a146.17,146.17,0,0,1,18,1.07v23.81Z"/><path class="cls-1" d="M181.87,203.88c0-28.52,13.51-50,41.82-50,15.44,0,24.87,7.94,29.38,17.8V156.06h29.59V258.14H253.07V242.7c-4.29,9.87-13.94,17.59-29.38,17.59-28.31,0-41.82-21.45-41.82-50Zm30.88,6.87c0,15.22,5.57,25.3,19.94,25.3,12.66,0,19.09-9.22,19.09-23.8V202c0-14.58-6.43-23.8-19.09-23.8-14.37,0-19.94,10.08-19.94,25.3Z"/><path class="cls-1" d="M347,153.91c12,0,23.37,2.58,29.59,6.86l-6.86,21.88a48.6,48.6,0,0,0-20.59-4.72c-16.73,0-24,9.65-24,26.17v6c0,16.52,7.29,26.17,24,26.17a48.6,48.6,0,0,0,20.59-4.72l6.86,21.87c-6.22,4.29-17.58,6.87-29.59,6.87-36.25,0-52.76-19.52-52.76-50.83v-4.72C294.24,173.43,310.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\hsts-pixel[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
IE Cache URL:	https://fbsbx.com/security/hsts-pixel.gif
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\mnwJrbabqoh[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1658
Entropy (8bit):	5.2294194137169905
Encrypted:	false
SSDEEP:	24:bJCfNFfCavgKE4hZFJ9HE899jIAvcwgFJ91xEorA899jIikh60CX3cCtrXwDf:bkF4avgKEMZ/pBXvcF/nxfvBFmnCzZAT
MD5:	0BE984614DCDE8F80776ADDEA6B69C97
SHA1:	1E62D2CA26092425AADC5B6D9B3598911C9DE278
SHA-256:	883C8C239FB17336986443FA0EEF05C9C8C3911151BE4080A0471FC6912A82A0
SHA-512:	C6B53D6F23768F3092621E6D809E56B365500FAFDADE6F29916272635A0FCC7B1FD8AB5FB4D9E8D2F3E1C0327B9DC3445F3C1FE5AAD67848715EAF6A82E624E1
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yW/r/mnwJrbabqoh.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["LAw4+oR"]); }..__d("isStringNullOrEmpty",[],(function(a,b,c,d,e,f){"use strict";e.exports=a;function a(a){return a==null\|\|a===""}}),null);.__d("$InternalEnum",[],(function(a,b,c,d,e,f){"use strict";var g=Object.prototype.hasOwnProperty,h=typeof WeakMap==="function"?new WeakMap():new Map();function i(a){var b=h.get(a);if(b!==void 0)return b;b=Object.getOwnPropertyNames(a);b=new Set(b.map(function(b){return a[b]}));h.set(a,b);return b}var j=Object.preventExtensions(Object.defineProperties(Object.create(null),{isValid:{value:function(a){return i(this).has(a)}},cast:{value:function(a){return this.isValid(a)?a:void 0}},members:{value:function(){return i(this).values()}}}));function a(a){var b=Object.create(j);for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&Object.defineProperty(b,c,{value:a[c]});Object.preventExtensions(b);return b}var k=Object.preventExtensions(Object.defineProperties(Object.create(null),{isValid:{value:function(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\rBNJvj38u9T[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	30628
Entropy (8bit):	5.6493287227642455
Encrypted:	false
SSDEEP:	768:5ogA0aTwqOpdWiXy4/LQKIZhxYyitdOrAHmuViT:Or0EwqOpdWi7QKIZ5iRz4T
MD5:	7F82068076F2D3AB8B35AB42D1C9A237
SHA1:	074FA8AD79D84172E2E3E6961E0EA251931048F9
SHA-256:	A91C374DA35B477F8A0E76CFC6D8A5230C3BA694933605F43E7BAF6E0ED105CF
SHA-512:	3CF9DDB035E03E3465A9C2062E7B48909DF14CF2E96E6C4B7764519CC582887CB376DA79DFD19098B40BDAF58E0599DB1B6284E9AF3E3E275460E6A19E55BDDE
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/ys/r/rBNJvj38u9T.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["sgpdgc2"]); }..__d("MAudioFlowsUtil",["DOM","Event","ge"],(function(a,b,c,d,e,f){"use strict";f.stopAudio=g;f.stopAudioOnOtherButtonClick=a;f.stopAudioOnExit=c;f.stopAudioOnOtherIdClick=d;function g(a){a=a!=null?a:b("ge")("root");a=b("DOM").scry(a,"div","audio_stop_button");a.length>0&&a.forEach(function(a){return a.click()})}function a(a,c){b("Event").listen(a,"click",function(){return g(c)})}function c(a){b("Event").listen(window,"visibilitychange",function(){return g(a)})}function d(a,c){var d=c!=null?c:b("ge")("root");d=b("DOM").scry(d,"*",a)[0];b("Event").listen(d,"click",function(){return g(c)})}}),null);.__d("Typeahead",["CSS","DOM","MParent","MViewport","Vector","createDeprecatedProperties","eventsMixinDeprecated","setTimeoutAcrossTransitions","uniqueID"],(function(a,b,c,d,e,f){a=function(){function a(c,d){var e=this;this.showResults=function(a){e.invoke("render_start");var c={show:a};c=e.invoke("show",c);if(e._typeObjects&&e._

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\toipMWCRTEo[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	24370
Entropy (8bit):	5.746303448631723
Encrypted:	false
SSDEEP:	384:qdHX+zKQ8WzlaMB6hVefhexo+rD/Cjrx0AyctxcivazDSe/D6xDrJuGkZ+oU0v:qdHX+zKQTzlaMB6hVeJDxXxbyct1vau+
MD5:	E9ACD860107BF7BA4DBE71EFE88BE749
SHA1:	65F2693E41A18DD73FB7DDE0BB289A9674C4E3BC
SHA-256:	A6E7427AE5061BBAB3308B62E04299A84C7AB3CAA2FFE0A0CA68101B12202D49
SHA-512:	CF366B92E53C8EBBA23298ECA95E5B7750CFACE547AF6F0BB3FF0BE8B56BCD6ADA76CAA78D5F624C8F32056E51A69CD99530D81E88F8ABA9A7274B3BA8C6AE64
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yD/r/toipMWCRTEo.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["gC4Hvk2"]); }..__d("MFriendingState",[],(function(a,b,c,d,e,f){a="m:friending-state:request-sent";f.REQUEST_SENT=a;b="m:friending-state:request-canceled";f.REQUEST_CANCELED=b;c="m:friending-state:unfriended";f.UNFRIENDED=c}),null);.__d("XMessengerMSiteShareDialogController",["XController"],(function(a,b,c,d,e,f){e.exports=b("XController").create("/share/diode/",{feedback_referrer:{type:"String"},feedback_source:{type:"Int"},internal_preview_image_id:{type:"Int"},key_link:{type:"String"},key_mode:{type:"String"},messaging_entry_point:{type:"Enum",enumType:1},post_fbid:{type:"Int",required:!0},redirector_fbid:{type:"Int"}})}),null);.__d("QPLE2ESessionMarkers",["$InternalEnum"],(function(a,b,c,d,e,f){a=b("$InternalEnum")({NONE:"none",START:"start",END:"end"});c=a;e.exports=c}),null);.__d("PerfFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f){"use strict";a=b("getFalcoLogPolicy_DO_NOT_USE")("1744178"

C:\Users\user\AppData\Local\Temp\~DF0C626AC06D5E2361.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13029
Entropy (8bit):	0.47547457065742055
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9loD9loD9lWY8xCAo:kBqoIkai
MD5:	3EFBE678B4DB43A805ED8AA7F5D4A5F9
SHA1:	1594089E41B7C3FC34EE70D9C13D4D13ABF4112E
SHA-256:	193987FDF8F4634115089E099820157419F83F9AAF5032CD22B6D38B3BC303A0
SHA-512:	FCD70717FA6CE1A0B5B11D6D3E90E7C37296519401773A681A46CB86670DEF7F1EC42DF9A0DD0D4C21C5D5E1245FCA3C47603E361953E8F43F2E14C02EF2DFD7
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF77662EBE27437295.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	155733
Entropy (8bit):	1.1050503674943752
Encrypted:	false
SSDEEP:	384:kBqoxKAuqR+mg6Tg7QI80YYONdcUY2bVLOacSyiT5FB35CijSSnzd1TAsmm47E9j:ASFWVLO3r65335CiZVi6Y0qJW
MD5:	7243C9233A5458A744856C0E1D16E76F
SHA1:	C63E5D8B270560D38C58C82167254BFA906BF254
SHA-256:	B766ADCCC45E202C2E6038AF2B8F4DE612806A0C57D93804592F789B5F8007E8
SHA-512:	300908EF31E17C7A19CAA5EE905D6817580497A6327C59CFA51566E159DEF7E495645DA82A5A327F57994BDFE17A5A17847F87A57282AA0826E99D313072956B
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFA111B94D5E8C7290.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.2954946661253283
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lRx/9lRJ9lTb9lTb9lSSU9lSSU9laAa/9laA1:kBqoxxJhHWSVSEab
MD5:	7DC903F6114D7CEAC73E7F749ED594A2
SHA1:	AE1D4D5829C887261B85E5730F1DBD3045FD983E
SHA-256:	CE8C56703DCC439C57D62418EFC1019BA445045C9F8DE916A4C423747C29FE2A
SHA-512:	604741C5E8A074BDB58F7BF866CB38DC550BC56A94F4C2AE6E65FC2C0D7B403AC7497971ED112606413FEBAB6A5128F2249EF192AFC011969EE0C0656A35B45D
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 9, 2021 15:13:43.949397087 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:43.950340033 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.108830929 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.109098911 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.112854958 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.113004923 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.120120049 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.120548010 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.278448105 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.278810978 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.278852940 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.278930902 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.278949976 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.278970003 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.278975964 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.279059887 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.279140949 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.281075001 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.281199932 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.281416893 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.281543016 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.281583071 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.281620026 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.281635046 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.281645060 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.281681061 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.281752110 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.284800053 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.284904957 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.353776932 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.353806973 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.361135960 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.516942978 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.517069101 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.517103910 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:44.517235041 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:44.563528061 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.289683104 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.289783001 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.289822102 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.289855003 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.289875984 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.289880991 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.289906979 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.289911032 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.289918900 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.289952993 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.400120020 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.400758982 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.402240992 CEST	49730	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.403203964 CEST	49731	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.560916901 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.563296080 CEST	443	49731	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.563340902 CEST	443	49730	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.563440084 CEST	49731	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.563488007 CEST	49730	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.564109087 CEST	49731	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.564651012 CEST	49730	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.570822001 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.570863008 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.570909977 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.570951939 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.570988894 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.571026087 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.571034908 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.571069002 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.571069956 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.571075916 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.571079969 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.571091890 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.571105957 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.571137905 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.571175098 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.571208000 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.571221113 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.571235895 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.571242094 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.571257114 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.571259022 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.571301937 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.571306944 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.577349901 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.580987930 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.723190069 CEST	443	49731	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.724591017 CEST	443	49731	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.724734068 CEST	49731	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.724919081 CEST	443	49730	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.728657961 CEST	443	49730	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.728748083 CEST	49730	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.744338989 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.744379997 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.744410992 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.744513035 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.744525909 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.744570017 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.744618893 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.744682074 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.744714022 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.744745016 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.744776964 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.744781971 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.744802952 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.744818926 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.744874954 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.748821020 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.770041943 CEST	49730	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.771989107 CEST	49731	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:45.969425917 CEST	443	49731	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:45.970365047 CEST	443	49730	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:46.506467104 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:46.570144892 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:46.684088945 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:46.684144974 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:46.684184074 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:46.684190035 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:46.684210062 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:46.684215069 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:46.684242010 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:46.684259892 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:46.684272051 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:46.684298038 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:46.748615026 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:46.748657942 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:46.748693943 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:46.748733997 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:46.748764992 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:46.748774052 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:46.748821020 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:46.748904943 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:46.865498066 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.866735935 CEST	49733	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.877418995 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.877547979 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.878206015 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.878694057 CEST	443	49733	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.878774881 CEST	49733	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.879425049 CEST	49733	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.889981985 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.891220093 CEST	443	49733	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.891278982 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.891319036 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.891350985 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.891444921 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.891527891 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.892836094 CEST	443	49733	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.892874956 CEST	443	49733	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.892906904 CEST	443	49733	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.892951965 CEST	49733	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.893037081 CEST	49733	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.903230906 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.903784990 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.904434919 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.906339884 CEST	49733	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.907402992 CEST	49733	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.915391922 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.915421963 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.915469885 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.915539980 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.915637016 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.915674925 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.915699959 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.915725946 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.916295052 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.916467905 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.916645050 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.916719913 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.918783903 CEST	443	49733	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.918901920 CEST	443	49733	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.918931007 CEST	443	49733	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.918970108 CEST	49733	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.918998003 CEST	49733	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.919300079 CEST	443	49733	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.919327974 CEST	443	49733	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.919392109 CEST	49733	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.919661045 CEST	49733	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.933291912 CEST	443	49733	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.951158047 CEST	443	49732	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:46.951256037 CEST	49732	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.985887051 CEST	49734	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:46.986848116 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.000106096 CEST	443	49734	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.000246048 CEST	49734	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.001568079 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.001692057 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.001904011 CEST	49734	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.003382921 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.015908003 CEST	443	49734	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.016650915 CEST	443	49734	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.016690969 CEST	443	49734	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.016721010 CEST	443	49734	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.016793966 CEST	49734	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.016868114 CEST	49734	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.017632008 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.018265963 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.018307924 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.018336058 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.018363953 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.018413067 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.037327051 CEST	49734	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.037683010 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.038064003 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.038336039 CEST	49734	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.038393974 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.050847054 CEST	443	49734	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.051017046 CEST	443	49734	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.051131964 CEST	49734	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.051143885 CEST	443	49734	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.051181078 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.051229000 CEST	49734	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.051466942 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.051532030 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.051552057 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.051601887 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.051736116 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.051767111 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.051817894 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.052053928 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.052081108 CEST	443	49734	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.052208900 CEST	49734	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.052243948 CEST	443	49734	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.052273989 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.052325964 CEST	49734	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.052354097 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.052587032 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.068463087 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.082865000 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.082990885 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:13:47.091727972 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:47.106779099 CEST	443	49734	157.240.17.35	192.168.2.4
Apr 9, 2021 15:13:47.272331953 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:47.272386074 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:47.272423029 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:47.272447109 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:47.272464991 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:47.272496939 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:47.272497892 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:47.272591114 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:49.684124947 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:49.684235096 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:49.684245110 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:49.684300900 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:50.272439003 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:50.272464037 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:50.272645950 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:55.939510107 CEST	443	49731	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:55.939539909 CEST	443	49731	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:55.939634085 CEST	49731	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:55.939687967 CEST	49731	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:55.940392017 CEST	443	49730	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:55.940437078 CEST	443	49730	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:55.940470934 CEST	49730	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:55.940509081 CEST	49730	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:13:57.939706087 CEST	443	49731	68.66.226.79	192.168.2.4
Apr 9, 2021 15:13:57.940362930 CEST	443	49730	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:00.186394930 CEST	49737	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:00.198966026 CEST	443	49737	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:00.199049950 CEST	49737	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:00.201123953 CEST	49737	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:00.213823080 CEST	443	49737	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:00.214673996 CEST	443	49737	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:00.214718103 CEST	443	49737	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:00.214726925 CEST	49737	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:00.214747906 CEST	443	49737	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:00.214766026 CEST	49737	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:00.214791059 CEST	49737	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:00.222512960 CEST	49737	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:00.234617949 CEST	443	49737	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:00.234731913 CEST	443	49737	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:00.234802961 CEST	49737	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:00.237435102 CEST	49737	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:00.249463081 CEST	443	49737	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:00.277571917 CEST	443	49737	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:00.277637959 CEST	49737	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.691535950 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.692536116 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.703490019 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.703632116 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.704325914 CEST	443	49742	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.704452991 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.705341101 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.705768108 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.718028069 CEST	443	49742	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.718074083 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.718791962 CEST	443	49742	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.718833923 CEST	443	49742	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.718868971 CEST	443	49742	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.718990088 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.719028950 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.719033957 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.719182968 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.719222069 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.719248056 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.719264030 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.719264984 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.719320059 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.722635031 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.722978115 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.723041058 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.723248959 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.723501921 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.734608889 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.734652996 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.734683990 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.734725952 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.734761000 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.734801054 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.734828949 CEST	443	49742	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.734853983 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.734905958 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.735044003 CEST	443	49742	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.735106945 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.735147953 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.735218048 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.735244989 CEST	443	49742	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.735272884 CEST	443	49742	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.735275984 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.735299110 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.735380888 CEST	443	49742	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.735428095 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.735646963 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.735821962 CEST	49742	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.747605085 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.747652054 CEST	443	49742	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.770509958 CEST	443	49741	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.770610094 CEST	49741	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.772680998 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.787053108 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.787178040 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.821679115 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.821788073 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.920360088 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.925115108 CEST	49745	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.934107065 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.934353113 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.934896946 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.938958883 CEST	443	49745	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.939064026 CEST	49745	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.939846992 CEST	49745	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.946751118 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.947217941 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.947237968 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.947247982 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.947407961 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.951597929 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.951685905 CEST	443	49745	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.951989889 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.952109098 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.953587055 CEST	443	49745	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.953617096 CEST	443	49745	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.953632116 CEST	443	49745	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.953685999 CEST	49745	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.953722000 CEST	49745	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.957971096 CEST	49745	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.958348989 CEST	49745	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.963705063 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.963784933 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.963802099 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.963814020 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.963846922 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.963859081 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.963886023 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.963912010 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.963934898 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.964277029 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.964364052 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.964652061 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.970124006 CEST	443	49745	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.970145941 CEST	443	49745	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.970163107 CEST	443	49745	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.970172882 CEST	443	49745	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.970182896 CEST	443	49745	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:02.970242023 CEST	49745	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.970271111 CEST	49745	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.970875978 CEST	49745	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:02.976584911 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.023540974 CEST	443	49745	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.072216034 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.072235107 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.072251081 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.072329998 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.072384119 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.072628975 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.072650909 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.072720051 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.072741985 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.073771000 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.073788881 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.073858023 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.075094938 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.075114012 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.075180054 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.075206995 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.076363087 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.076447010 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.084939003 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.084959030 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.085025072 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.085050106 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.085445881 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.085464954 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.085541010 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.086308956 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.086472034 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.086493969 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.086540937 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.086565018 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.087189913 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.087213993 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.087265015 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.087291956 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.087925911 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.087948084 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.087999105 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.088017941 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.088835001 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.088857889 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.088900089 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.088922024 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.089410067 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.089431047 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.089452028 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.089482069 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.089502096 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.090382099 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.090409994 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.090471029 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.090491056 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.090493917 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.090554953 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.091114044 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.091137886 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.091218948 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.091239929 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.360604048 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.360868931 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.360985994 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.361016989 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.361041069 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.361356020 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.376245975 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.376291990 CEST	443	49747	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.376347065 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.376401901 CEST	443	49749	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.376420975 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.376435041 CEST	443	49750	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.376465082 CEST	443	49748	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.376473904 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.376507044 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.376601934 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.376846075 CEST	443	49751	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.376938105 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.377511978 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.377964020 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.378154039 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.378170967 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.378483057 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.378736019 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.384392977 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.384496927 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.392930031 CEST	443	49747	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.393292904 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.393423080 CEST	443	49749	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.393455029 CEST	443	49750	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.393965006 CEST	443	49748	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394161940 CEST	443	49749	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394201040 CEST	443	49749	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394229889 CEST	443	49749	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394263029 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394268036 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394288063 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394293070 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394306898 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394326925 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394340038 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394352913 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394380093 CEST	443	49750	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394391060 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394432068 CEST	443	49750	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394434929 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394465923 CEST	443	49750	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394483089 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394504070 CEST	443	49747	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394532919 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394543886 CEST	443	49747	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394572020 CEST	443	49747	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394593000 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394598961 CEST	443	49751	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394609928 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394625902 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394637108 CEST	443	49748	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394676924 CEST	443	49748	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394716024 CEST	443	49748	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394752979 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394783974 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394789934 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.394937038 CEST	443	49751	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.394979954 CEST	443	49751	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.395004988 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.395009995 CEST	443	49751	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.395029068 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.395072937 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.396342993 CEST	443	49753	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.396373034 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.396424055 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.396466017 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.398346901 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.398817062 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.399064064 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.399673939 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.400167942 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.401767015 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.402549028 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.402801991 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.403134108 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.403235912 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.403497934 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.403700113 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.404141903 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.404290915 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.404506922 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.404745102 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.404967070 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.407063007 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.407202005 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.407285929 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.407732964 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.410957098 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.411371946 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.414139986 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.414166927 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.414542913 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.414624929 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.415091038 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.415170908 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.415251970 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.415277958 CEST	443	49750	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.415298939 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.415306091 CEST	443	49750	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.415312052 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.415332079 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.415358067 CEST	443	49750	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.415380955 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.415383101 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.415405989 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.416306019 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.416352034 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.416356087 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.416379929 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.416409969 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.416452885 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.416459084 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.416476965 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.416493893 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.416532993 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.417047024 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.417076111 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.417100906 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.417114973 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.417126894 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.417130947 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.417164087 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.417177916 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.417181969 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.417207003 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.418378115 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.418467045 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.419301987 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.419332027 CEST	443	49753	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.419418097 CEST	443	49747	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.419446945 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.419472933 CEST	443	49747	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.419498920 CEST	443	49747	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.419532061 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.419548988 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.419593096 CEST	443	49753	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.419646025 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.419661045 CEST	443	49753	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.419704914 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.419888020 CEST	443	49753	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.419940948 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.420069933 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.420111895 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.420130968 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.420171976 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.420172930 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.420224905 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.420470953 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.420581102 CEST	443	49747	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.420609951 CEST	443	49747	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.420634985 CEST	443	49748	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.420658112 CEST	443	49750	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.420665026 CEST	49747	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.420764923 CEST	443	49750	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.420799971 CEST	443	49748	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.420821905 CEST	49750	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.421101093 CEST	443	49748	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.421164989 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.421214104 CEST	443	49748	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.421240091 CEST	443	49748	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.421283960 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.421298027 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.422946930 CEST	443	49751	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.423144102 CEST	443	49751	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.423206091 CEST	443	49751	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.423244953 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.423279047 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.423428059 CEST	49748	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.423618078 CEST	443	49751	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.423645020 CEST	443	49751	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.423755884 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.423970938 CEST	49751	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.425091982 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.425446987 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.425887108 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.426297903 CEST	443	49749	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.426580906 CEST	443	49749	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.426631927 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.426934958 CEST	443	49749	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.426960945 CEST	443	49749	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.426987886 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.426995993 CEST	443	49749	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.427038908 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.427292109 CEST	49749	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.427577019 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.427979946 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.430179119 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.430207968 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.430237055 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.430258989 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.430639029 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.430699110 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.430900097 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.430941105 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.430958033 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.430982113 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.432013035 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.432061911 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.432077885 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.432106972 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.432924032 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.432965994 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.432984114 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.433011055 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.434088945 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.434144020 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.434499979 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.434525967 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.434556961 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.434585094 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.434914112 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.434978962 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.435067892 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.435129881 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.435177088 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.435204029 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.435225964 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.435265064 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.435672045 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.435719967 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.435755014 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.435794115 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.435827017 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.435837030 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.436830997 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.436872959 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.436903000 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.436924934 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.436925888 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.437192917 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.437222958 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.437247992 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.437258959 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.437273026 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.437274933 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.437330961 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.437741995 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.437783957 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.437819958 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.437839031 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.437861919 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.438754082 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.438824892 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.438843966 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.438872099 CEST	443	49748	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.438894987 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.439167976 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.439205885 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.439219952 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.439249992 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.439469099 CEST	443	49753	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.439790964 CEST	443	49753	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.439819098 CEST	443	49751	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.439846039 CEST	443	49753	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.439896107 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.439980984 CEST	443	49753	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.440006018 CEST	443	49753	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.440031052 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.440052986 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.441808939 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.442920923 CEST	443	49749	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.444175005 CEST	49753	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.446415901 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.446480036 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.446748018 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.446811914 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.447618961 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.447649956 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.447696924 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.447732925 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.448606968 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.448659897 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.448818922 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.448858976 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.448894024 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.448894978 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.448921919 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.448935986 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.448949099 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.448992014 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.450678110 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.450720072 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.450753927 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.450758934 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.450773954 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.450795889 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.450812101 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.450841904 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.450855017 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.450885057 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.450918913 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.450922012 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.450958967 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.450959921 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.450989008 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.451005936 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.451153994 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.451205969 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.451220036 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.451268911 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.451854944 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.451894999 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.451913118 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.451961994 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.452172041 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.452227116 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.452259064 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.452409029 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.452893019 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.452933073 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.452964067 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.453022957 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.453567982 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.453608990 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.453635931 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.453666925 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.454417944 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.454468966 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.454490900 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.454524040 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.455025911 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.455069065 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.455099106 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.455113888 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.455682993 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.455733061 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.455775976 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.455777884 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.455806971 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.455823898 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.456631899 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.456670046 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.456712961 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.456718922 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.456738949 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.456798077 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.457031965 CEST	443	49753	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.457453012 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.457492113 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.457530022 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.457537889 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.457567930 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.457581043 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.458266973 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.458308935 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.458348036 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.458363056 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.458389044 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.458429098 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.459258080 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.459348917 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.459419012 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.459462881 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.459491968 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.459588051 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.460117102 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.460158110 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.460196018 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.460210085 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.460261106 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.460263968 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.460936069 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.460974932 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.461018085 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.461023092 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.461035967 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.461082935 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.462058067 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.462136984 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.462306976 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.462346077 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.462384939 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.462398052 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.462423086 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.462436914 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.463334084 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.463365078 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.463397980 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.463413000 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.463434935 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.463463068 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.463465929 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.463495970 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.464235067 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.464333057 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.464405060 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.464447021 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.464498043 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.464525938 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.464539051 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.464590073 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.464593887 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.464690924 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.465116978 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.465156078 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.465190887 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.465204000 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.465210915 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.465254068 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.465317965 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.465368032 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.467585087 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.467623949 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.467669964 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.467672110 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.467700005 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.467714071 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.467725039 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.467761040 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.467781067 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.467839003 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.467843056 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.467894077 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.467904091 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.467951059 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.467958927 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.468003035 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.468043089 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.468080997 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.468112946 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.468117952 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.468143940 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.468157053 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.468162060 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.468204975 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.468255043 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.468313932 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.468548059 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.468589067 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.468605042 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.468627930 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.468646049 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.468664885 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.468676090 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.468715906 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.468786955 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.468842030 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.469505072 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.469546080 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.469583988 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.469584942 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.469604969 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.469628096 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.469656944 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.469697952 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.469705105 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.469743013 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.470463991 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.470504999 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.470530987 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.470551968 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.470594883 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.470643997 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.470774889 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.470814943 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.470827103 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.470861912 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.471111059 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.471163034 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.471523046 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.471549988 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.471580029 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.471600056 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.473450899 CEST	443	49750	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.474942923 CEST	443	49752	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.475068092 CEST	49752	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.476967096 CEST	443	49747	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.515940905 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.516779900 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.528003931 CEST	443	49754	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.528143883 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.528583050 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.528712988 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.529009104 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.529617071 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.540931940 CEST	443	49754	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.541425943 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.542623043 CEST	443	49754	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.542678118 CEST	443	49754	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.542714119 CEST	443	49754	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.542733908 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.542793036 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.542800903 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.542856932 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.542907000 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.542946100 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.543035030 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.543095112 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.543107986 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.545209885 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.549220085 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.553592920 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.553802013 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.554023027 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.554209948 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.554352045 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.554673910 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.555244923 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.561078072 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.561151028 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.561254978 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.561310053 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.561326981 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.561362982 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.561379910 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.561465025 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.561479092 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.561508894 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.561512947 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.561547995 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.561595917 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.561609983 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.561640978 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.561708927 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.561779022 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.561964989 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.562007904 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.562027931 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.562043905 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.562057972 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.562112093 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.562122107 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.562160969 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.562191963 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.562199116 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.562218904 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.562264919 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.562295914 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.562345028 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.562381029 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.562407970 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.562429905 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.562459946 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.565071106 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.565160990 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.565316916 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.565360069 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.565376043 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.565409899 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.565466881 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.565505028 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.565515995 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.565542936 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.565553904 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.565587044 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.565665960 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.565706968 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.565711975 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.565745115 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.565749884 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.565769911 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.565797091 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.565851927 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.565881968 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.565905094 CEST	443	49754	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.565913916 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.566004992 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.566031933 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.566055059 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.566076040 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.566077948 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566159010 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566168070 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566195965 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566203117 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566241980 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566243887 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566284895 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566287994 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566310883 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.566328049 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566339970 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.566382885 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.566492081 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566534996 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566545963 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566572905 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566581011 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566612959 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566616058 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566651106 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566657066 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566674948 CEST	443	49754	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.566698074 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566713095 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566751003 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.566761017 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566788912 CEST	443	49754	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.566800117 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.566848993 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.566961050 CEST	443	49754	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.567023039 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.567095995 CEST	443	49754	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.567137003 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.567153931 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.567173958 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.567188025 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.567213058 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.567219973 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.567251921 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.567266941 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.567287922 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.567298889 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.567326069 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.567331076 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.567364931 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.567374945 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.567405939 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.567411900 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.567450047 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.567753077 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.567779064 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.567815065 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.567838907 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.567998886 CEST	49754	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.569214106 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.569289923 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.569858074 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.569902897 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.569925070 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.569952011 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.569996119 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.570027113 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.570043087 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.570072889 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.570995092 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.571089029 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.571151018 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.571193933 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.571218014 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.571233988 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.571244001 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.571270943 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.571281910 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.571321964 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.571325064 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.571365118 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.571377993 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.571419954 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.571432114 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.571470022 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.571492910 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.571547985 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.571913958 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.571953058 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.571984053 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.571990967 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.572005033 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.572030067 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.572060108 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.572063923 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.572082996 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.572115898 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.572185040 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.572212934 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.572240114 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.572262049 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.579763889 CEST	443	49754	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.581109047 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.593048096 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.600403070 CEST	443	49755	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.600517988 CEST	49755	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.631685972 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.632750034 CEST	49757	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.643966913 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.644067049 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.644575119 CEST	443	49757	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.644577026 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.644644976 CEST	49757	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.645136118 CEST	49757	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.656703949 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.656981945 CEST	443	49757	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.658410072 CEST	443	49757	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.658432007 CEST	443	49757	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.658444881 CEST	443	49757	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.658473969 CEST	49757	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.658500910 CEST	49757	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.658591986 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.658610106 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.658622026 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.658644915 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.658674002 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.668253899 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.673657894 CEST	49757	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.680026054 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.680267096 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.680279970 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.680341959 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.681353092 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.681602955 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.681680918 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.685369015 CEST	443	49757	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.685548067 CEST	443	49757	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.685559988 CEST	443	49757	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.685609102 CEST	49757	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.685621977 CEST	49757	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.686310053 CEST	49757	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.686490059 CEST	49757	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.693207979 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.693223953 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.693448067 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.693622112 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.693927050 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.693970919 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.698229074 CEST	443	49757	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.698242903 CEST	443	49757	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.698570967 CEST	49757	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.705924988 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.708511114 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.709398985 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.710230112 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.710961103 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.711843014 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.712483883 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.716228008 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.716240883 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.716243982 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.716245890 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.716546059 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.717233896 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.720562935 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.720774889 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.722203016 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.722290039 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.723496914 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.723558903 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.723565102 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.723601103 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.723635912 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.723653078 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.723676920 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.723676920 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.723694086 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.723711967 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.723762989 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725092888 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725157976 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725286961 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725317001 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725341082 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725343943 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725373030 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725409031 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725442886 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725487947 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725534916 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725562096 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725581884 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725584984 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725609064 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725609064 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725640059 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725656986 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725667000 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725682020 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725697994 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725708008 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725720882 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725733042 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725749016 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725755930 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725778103 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725805998 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.725960970 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.725985050 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726007938 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726012945 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.726032019 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726052046 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.726054907 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726077080 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726105928 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.726135969 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.726226091 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726274967 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.726716995 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726747990 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726771116 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726778984 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.726788044 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726816893 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.726839066 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726855040 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726862907 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.726872921 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.726906061 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.726943970 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.727003098 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.727027893 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.727049112 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.727054119 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.727081060 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.727081060 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.727102995 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.727118969 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.727127075 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.727145910 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.727150917 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.727183104 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.727195978 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.727217913 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.727241039 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.727296114 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.727300882 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.727346897 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.727376938 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.727423906 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.728713036 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.728748083 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.728770971 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.728794098 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.728796959 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.728817940 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.728837013 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.728882074 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.728907108 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.728961945 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729012012 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729032993 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729055882 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729058027 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729074955 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729084969 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729091883 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729111910 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729115009 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729131937 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729150057 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729156017 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729167938 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729193926 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729203939 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729218006 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729240894 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729240894 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729269028 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729284048 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729305029 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729319096 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729346037 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729469061 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729486942 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729502916 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729520082 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729520082 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729543924 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729553938 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729568958 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729584932 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729624033 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729628086 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729671001 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729711056 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729734898 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.729758024 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729784966 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.729958057 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.730017900 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.730037928 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.730056047 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.730076075 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.730087042 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.730099916 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.730118990 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.730144024 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.730148077 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.730185986 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.730190039 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.730226040 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.730235100 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.730249882 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.730272055 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.730288982 CEST	443	49756	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.730297089 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.730351925 CEST	49756	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.730413914 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.730432987 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.730463982 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.730499029 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.733112097 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.733140945 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.733238935 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.733360052 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.733406067 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.733514071 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.733563900 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.733943939 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734002113 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.734591007 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734616995 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734651089 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734658957 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.734675884 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734692097 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734700918 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.734750986 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.734782934 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734807968 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734829903 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734831095 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.734847069 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734864950 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.734869003 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734888077 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734900951 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.734905958 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.734947920 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.734971046 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735013008 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735057116 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735102892 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735119104 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735152006 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735176086 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735202074 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735240936 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735244036 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735285044 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735342026 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735361099 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735390902 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735423088 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735431910 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735449076 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735466003 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735474110 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735511065 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735551119 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735585928 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735599995 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735601902 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735621929 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735639095 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735641956 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735661983 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735687971 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735690117 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735704899 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735727072 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735743046 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.735747099 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.735796928 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.736346960 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.736366987 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.736414909 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.736454964 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.736491919 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.736536980 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.736613035 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.736660004 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.736686945 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.736715078 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.736741066 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.736766100 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.736788988 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.736833096 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.736846924 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.736896992 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.736984015 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.737035990 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.737124920 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.737144947 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.737162113 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.737180948 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.737181902 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.737221956 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.737246037 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.737262011 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.737279892 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.737319946 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.737349987 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.739031076 CEST	443	49757	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.864005089 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.876092911 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.876303911 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.876374006 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.882689953 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.884228945 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.887892962 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.894629955 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.896071911 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.900815010 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.900840998 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.900924921 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.906349897 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.907162905 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.918401957 CEST	443	49758	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.918533087 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.919095993 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.919106960 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.919186115 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.919894934 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.932373047 CEST	443	49758	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.932560921 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.932833910 CEST	443	49758	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.932863951 CEST	443	49758	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.932907104 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.932909966 CEST	443	49758	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.932935953 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.932954073 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.933227062 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.933252096 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.933270931 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.933311939 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.933340073 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.933923960 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.934016943 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.937218904 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.937319040 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.939284086 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.939728975 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.939941883 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.943100929 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.943418026 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.951137066 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.951214075 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.951283932 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.951294899 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.951339960 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.951395988 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.951658964 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.951725960 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.951785088 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.952099085 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.952122927 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.952169895 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.952198982 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.952306986 CEST	49759	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.954986095 CEST	443	49758	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.955171108 CEST	443	49758	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.955193043 CEST	443	49758	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.955265999 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.955290079 CEST	443	49758	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.955310106 CEST	443	49758	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.955352068 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.955950975 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.955964088 CEST	49758	443	192.168.2.4	157.240.17.15
Apr 9, 2021 15:14:03.964251041 CEST	443	49759	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.967679024 CEST	443	49758	157.240.17.15	192.168.2.4
Apr 9, 2021 15:14:03.973638058 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.974358082 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.985523939 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.986314058 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.986834049 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:03.986932039 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:03.989289045 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.989321947 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.989348888 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.989378929 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.989406109 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.989583969 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.989649057 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.989650011 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.989671946 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.989705086 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.989747047 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.989803076 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.989844084 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.989854097 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.989860058 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:03.989886045 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.989907980 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:03.990509987 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:04.001311064 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:04.001343966 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:04.001369953 CEST	443	49746	157.240.219.13	192.168.2.4
Apr 9, 2021 15:14:04.001425028 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:04.001442909 CEST	49746	443	192.168.2.4	157.240.219.13
Apr 9, 2021 15:14:04.002103090 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:04.054728031 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:04.054856062 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:04.716840029 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:04.716875076 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:04.722706079 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:04.722762108 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:04.730329990 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:04.730556011 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:04.730943918 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:04.734041929 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:04.734041929 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:04.744434118 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:04.744471073 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:04.744498014 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:04.744563103 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:04.785604954 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:04.785648108 CEST	443	49744	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:04.785722017 CEST	49744	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:04.877425909 CEST	443	49728	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:04.877583027 CEST	49728	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:04.880420923 CEST	443	49729	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:04.880511045 CEST	49729	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:04.893933058 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:04.894038916 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:04.895476103 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:04.896704912 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:04.896847010 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:04.898449898 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.055293083 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.056041956 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.056134939 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.056565046 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.058734894 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.061152935 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.061460972 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.061543941 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.061943054 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.220181942 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.238280058 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.238369942 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.238421917 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.238477945 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.238478899 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.238514900 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.238528013 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.238579035 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.238619089 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.265330076 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.473232031 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:05.486035109 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:05.486176968 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:05.521184921 CEST	443	49735	157.240.17.35	192.168.2.4
Apr 9, 2021 15:14:05.521305084 CEST	49735	443	192.168.2.4	157.240.17.35
Apr 9, 2021 15:14:05.532655001 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.708898067 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.708931923 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.708951950 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.708971024 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.708981991 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:05.709011078 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:05.709038019 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:06.577498913 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:06.757232904 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:06.757273912 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:06.757303953 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:06.757318020 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:06.757329941 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:06.757352114 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:06.757358074 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:06.757373095 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:06.757373095 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:06.757421970 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:07.680461884 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:07.860001087 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:07.860044956 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:07.860080957 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:07.860112906 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:07.860117912 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:07.860137939 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:07.860142946 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:07.860191107 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:08.754077911 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:08.931715012 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:08.931740046 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:08.931751966 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:08.931761980 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:08.931776047 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:08.931840897 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:08.931878090 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:09.253252983 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:09.253274918 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:09.253335953 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:09.253370047 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:09.741415977 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:09.741513014 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:09.743424892 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:09.934356928 CEST	443	49762	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:09.934583902 CEST	49762	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:09.936894894 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:09.953092098 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:09.953109980 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:09.953193903 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:09.953207970 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:09.953212023 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:09.953268051 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:09.953291893 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:09.953661919 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:09.953727007 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:10.954559088 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:11.137933969 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:11.137958050 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:11.137974977 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:11.137989998 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:11.137996912 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:11.138041973 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:11.138084888 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:11.235466003 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:11.235481977 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:11.235589981 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:11.235641003 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.272146940 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.272181034 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.273232937 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.274122000 CEST	49770	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.431900024 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.432022095 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.436997890 CEST	443	49761	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.437099934 CEST	49761	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.438914061 CEST	443	49770	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.439048052 CEST	49770	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.607199907 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.607486010 CEST	49770	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.764170885 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.764725924 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.764806032 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.765439034 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.768194914 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.771869898 CEST	443	49770	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.771918058 CEST	443	49770	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.771982908 CEST	49770	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.772581100 CEST	49770	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.927222013 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.943839073 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.943880081 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.943963051 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.943973064 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.943981886 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.943994045 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.943995953 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:12.944031000 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:12.974107027 CEST	443	49770	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:13.969955921 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:14.141830921 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:14.141884089 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:14.141928911 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:14.141952991 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:14.141971111 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:14.141999006 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:14.142002106 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:14.142035007 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:14.142055035 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:15.075952053 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:15.250938892 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:15.250966072 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:15.250979900 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:15.250993013 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:15.251003981 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:15.251118898 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:15.251177073 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:16.260059118 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:16.436660051 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:16.436772108 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:16.436798096 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:16.436841011 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:16.436871052 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:16.436888933 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:16.436907053 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:16.436979055 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:19.436968088 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:19.437001944 CEST	443	49769	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:19.437149048 CEST	49769	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:22.944516897 CEST	443	49770	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:22.944545984 CEST	443	49770	68.66.226.79	192.168.2.4
Apr 9, 2021 15:14:22.944720984 CEST	49770	443	192.168.2.4	68.66.226.79
Apr 9, 2021 15:14:24.944734097 CEST	443	49770	68.66.226.79	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 9, 2021 15:13:35.809252024 CEST	49714	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:13:35.822364092 CEST	53	49714	8.8.8.8	192.168.2.4
Apr 9, 2021 15:13:36.796447039 CEST	58028	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:13:36.809465885 CEST	53	58028	8.8.8.8	192.168.2.4
Apr 9, 2021 15:13:37.730284929 CEST	53097	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:13:37.745733023 CEST	53	53097	8.8.8.8	192.168.2.4
Apr 9, 2021 15:13:42.840388060 CEST	49257	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:13:42.858829975 CEST	53	49257	8.8.8.8	192.168.2.4
Apr 9, 2021 15:13:43.899254084 CEST	62389	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:13:43.940500021 CEST	53	62389	8.8.8.8	192.168.2.4
Apr 9, 2021 15:13:46.840745926 CEST	49910	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:13:46.860234976 CEST	53	49910	8.8.8.8	192.168.2.4
Apr 9, 2021 15:13:46.961879015 CEST	55854	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:13:46.981856108 CEST	53	55854	8.8.8.8	192.168.2.4
Apr 9, 2021 15:13:51.919203997 CEST	64549	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:13:51.937542915 CEST	53	64549	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:00.169914007 CEST	63153	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:00.183959007 CEST	53	63153	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:00.282635927 CEST	52991	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:00.298199892 CEST	53	52991	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:00.777241945 CEST	53700	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:00.788989067 CEST	53	53700	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:01.814739943 CEST	51726	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:01.827725887 CEST	53	51726	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:02.666541100 CEST	56794	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:02.686582088 CEST	53	56794	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:02.787815094 CEST	56534	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:02.801040888 CEST	53	56534	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:02.898664951 CEST	56627	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:02.918692112 CEST	53	56627	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:03.084330082 CEST	56621	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:03.097534895 CEST	53	56621	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:03.364403963 CEST	63116	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:03.382565022 CEST	53	63116	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:03.494726896 CEST	64078	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:03.514326096 CEST	53	64078	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:03.608470917 CEST	64801	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:03.630227089 CEST	53	64801	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:03.886394024 CEST	61721	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:03.904738903 CEST	53	61721	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:04.078870058 CEST	51255	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:04.092190981 CEST	53	51255	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:04.847964048 CEST	61522	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:04.862776041 CEST	53	61522	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:05.039053917 CEST	52337	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:05.052608013 CEST	53	52337	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:06.486057043 CEST	55046	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:06.498788118 CEST	53	55046	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:08.338743925 CEST	49612	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:08.351497889 CEST	53	49612	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:08.791908026 CEST	49285	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:08.810162067 CEST	53	49285	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:13.077369928 CEST	50601	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:13.090023041 CEST	53	50601	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:13.484268904 CEST	60875	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:13.496530056 CEST	53	60875	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:14.114515066 CEST	50601	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:14.128160954 CEST	53	50601	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:14.481949091 CEST	60875	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:14.493684053 CEST	53	60875	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:15.153446913 CEST	50601	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:15.167814970 CEST	53	50601	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:15.520209074 CEST	60875	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:15.535259962 CEST	53	60875	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:17.164745092 CEST	50601	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:17.177172899 CEST	53	50601	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:17.586494923 CEST	60875	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:17.601308107 CEST	53	60875	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:21.164587975 CEST	50601	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:21.178982019 CEST	53	50601	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:21.602242947 CEST	60875	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:21.614741087 CEST	53	60875	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:23.153465986 CEST	56448	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:23.166445971 CEST	53	56448	8.8.8.8	192.168.2.4
Apr 9, 2021 15:14:24.318532944 CEST	59172	53	192.168.2.4	8.8.8.8
Apr 9, 2021 15:14:24.331228018 CEST	53	59172	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Apr 9, 2021 15:13:43.899254084 CEST	192.168.2.4	8.8.8.8	0xdda4	Standard query (0)	ccaeperu.com	A (IP address)	IN (0x0001)
Apr 9, 2021 15:13:46.840745926 CEST	192.168.2.4	8.8.8.8	0x1cfb	Standard query (0)	www.fb.com	A (IP address)	IN (0x0001)
Apr 9, 2021 15:13:46.961879015 CEST	192.168.2.4	8.8.8.8	0xb128	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:00.169914007 CEST	192.168.2.4	8.8.8.8	0xe56	Standard query (0)	www.fb.com	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:00.282635927 CEST	192.168.2.4	8.8.8.8	0x6d07	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:02.666541100 CEST	192.168.2.4	8.8.8.8	0x5a00	Standard query (0)	fb.com	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:02.898664951 CEST	192.168.2.4	8.8.8.8	0x384c	Standard query (0)	m.facebook.com	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:03.084330082 CEST	192.168.2.4	8.8.8.8	0xc443	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:03.364403963 CEST	192.168.2.4	8.8.8.8	0x71d5	Standard query (0)	facebook.com	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:03.494726896 CEST	192.168.2.4	8.8.8.8	0x8b03	Standard query (0)	fbcdn.net	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:03.608470917 CEST	192.168.2.4	8.8.8.8	0xf1b	Standard query (0)	fbsbx.com	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:03.886394024 CEST	192.168.2.4	8.8.8.8	0xf8d5	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Apr 9, 2021 15:13:43.940500021 CEST	8.8.8.8	192.168.2.4	0xdda4	No error (0)	ccaeperu.com		68.66.226.79	A (IP address)	IN (0x0001)
Apr 9, 2021 15:13:46.860234976 CEST	8.8.8.8	192.168.2.4	0x1cfb	No error (0)	www.fb.com	www.facebook.com		CNAME (Canonical name)	IN (0x0001)
Apr 9, 2021 15:13:46.860234976 CEST	8.8.8.8	192.168.2.4	0x1cfb	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Apr 9, 2021 15:13:46.860234976 CEST	8.8.8.8	192.168.2.4	0x1cfb	No error (0)	star-mini.c10r.facebook.com		157.240.17.35	A (IP address)	IN (0x0001)
Apr 9, 2021 15:13:46.981856108 CEST	8.8.8.8	192.168.2.4	0xb128	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Apr 9, 2021 15:13:46.981856108 CEST	8.8.8.8	192.168.2.4	0xb128	No error (0)	star-mini.c10r.facebook.com		157.240.17.35	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:00.183959007 CEST	8.8.8.8	192.168.2.4	0xe56	No error (0)	www.fb.com	www.facebook.com		CNAME (Canonical name)	IN (0x0001)
Apr 9, 2021 15:14:00.183959007 CEST	8.8.8.8	192.168.2.4	0xe56	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Apr 9, 2021 15:14:00.183959007 CEST	8.8.8.8	192.168.2.4	0xe56	No error (0)	star-mini.c10r.facebook.com		157.240.17.35	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:00.298199892 CEST	8.8.8.8	192.168.2.4	0x6d07	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Apr 9, 2021 15:14:00.298199892 CEST	8.8.8.8	192.168.2.4	0x6d07	No error (0)	star-mini.c10r.facebook.com		157.240.219.35	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:02.686582088 CEST	8.8.8.8	192.168.2.4	0x5a00	No error (0)	fb.com		157.240.17.35	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:02.918692112 CEST	8.8.8.8	192.168.2.4	0x384c	No error (0)	m.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Apr 9, 2021 15:14:02.918692112 CEST	8.8.8.8	192.168.2.4	0x384c	No error (0)	star-mini.c10r.facebook.com		157.240.17.35	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:03.097534895 CEST	8.8.8.8	192.168.2.4	0xc443	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Apr 9, 2021 15:14:03.097534895 CEST	8.8.8.8	192.168.2.4	0xc443	No error (0)	scontent.xx.fbcdn.net		157.240.219.13	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:03.382565022 CEST	8.8.8.8	192.168.2.4	0x71d5	No error (0)	facebook.com		157.240.17.35	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:03.514326096 CEST	8.8.8.8	192.168.2.4	0x8b03	No error (0)	fbcdn.net		157.240.17.35	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:03.630227089 CEST	8.8.8.8	192.168.2.4	0xf1b	No error (0)	fbsbx.com		157.240.17.35	A (IP address)	IN (0x0001)
Apr 9, 2021 15:14:03.904738903 CEST	8.8.8.8	192.168.2.4	0xf8d5	No error (0)	scontent.xx.fbcdn.net		157.240.17.15	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 9, 2021 15:13:44.281075001 CEST	68.66.226.79	443	192.168.2.4	49729	CN=ccaeperu.com CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Sun Mar 28 01:00:00 CET 2021 Mon May 18 02:00:00 CEST 2015 Thu Jan 01 01:00:00 CET 2004	Sun Jun 27 01:59:59 CEST 2021 Sun May 18 01:59:59 CEST 2025 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon May 18 02:00:00 CEST 2015	Sun May 18 01:59:59 CEST 2025
					CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 9, 2021 15:13:44.284800053 CEST	68.66.226.79	443	192.168.2.4	49728	CN=ccaeperu.com CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Sun Mar 28 01:00:00 CET 2021 Mon May 18 02:00:00 CEST 2015 Thu Jan 01 01:00:00 CET 2004	Sun Jun 27 01:59:59 CEST 2021 Sun May 18 01:59:59 CEST 2025 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon May 18 02:00:00 CEST 2015	Sun May 18 01:59:59 CEST 2025
					CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 9, 2021 15:13:46.891350985 CEST	157.240.17.35	443	192.168.2.4	49732	CN=*.fb.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Feb 23 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Mon May 24 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:13:46.891350985 CEST	157.240.17.35	443	192.168.2.4	49732	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:13:46.892906904 CEST	157.240.17.35	443	192.168.2.4	49733	CN=*.fb.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Feb 23 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Mon May 24 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:13:46.892906904 CEST	157.240.17.35	443	192.168.2.4	49733	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:13:47.016721010 CEST	157.240.17.35	443	192.168.2.4	49734	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:13:47.016721010 CEST	157.240.17.35	443	192.168.2.4	49734	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:13:47.018336058 CEST	157.240.17.35	443	192.168.2.4	49735	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:13:47.018336058 CEST	157.240.17.35	443	192.168.2.4	49735	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:00.214747906 CEST	157.240.17.35	443	192.168.2.4	49737	CN=*.fb.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Feb 23 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Mon May 24 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
Apr 9, 2021 15:14:00.214747906 CEST	157.240.17.35	443	192.168.2.4	49737	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		37f463bf4616ecd445d4a1937da06e19
Apr 9, 2021 15:14:02.718868971 CEST	157.240.17.35	443	192.168.2.4	49742	CN=*.fb.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Feb 23 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Mon May 24 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:02.718868971 CEST	157.240.17.35	443	192.168.2.4	49742	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:02.719264984 CEST	157.240.17.35	443	192.168.2.4	49741	CN=*.fb.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Feb 23 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Mon May 24 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:02.719264984 CEST	157.240.17.35	443	192.168.2.4	49741	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:02.947247982 CEST	157.240.17.35	443	192.168.2.4	49744	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:02.947247982 CEST	157.240.17.35	443	192.168.2.4	49744	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:02.953632116 CEST	157.240.17.35	443	192.168.2.4	49745	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:02.953632116 CEST	157.240.17.35	443	192.168.2.4	49745	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.394229889 CEST	157.240.219.13	443	192.168.2.4	49749	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.394229889 CEST	157.240.219.13	443	192.168.2.4	49749	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.394340038 CEST	157.240.219.13	443	192.168.2.4	49746	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.394340038 CEST	157.240.219.13	443	192.168.2.4	49746	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.394465923 CEST	157.240.219.13	443	192.168.2.4	49750	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.394465923 CEST	157.240.219.13	443	192.168.2.4	49750	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.394572020 CEST	157.240.219.13	443	192.168.2.4	49747	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.394572020 CEST	157.240.219.13	443	192.168.2.4	49747	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.394716024 CEST	157.240.219.13	443	192.168.2.4	49748	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.394716024 CEST	157.240.219.13	443	192.168.2.4	49748	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.395009995 CEST	157.240.219.13	443	192.168.2.4	49751	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.395009995 CEST	157.240.219.13	443	192.168.2.4	49751	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.419888020 CEST	157.240.17.35	443	192.168.2.4	49753	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.419888020 CEST	157.240.17.35	443	192.168.2.4	49753	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.420172930 CEST	157.240.17.35	443	192.168.2.4	49752	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.420172930 CEST	157.240.17.35	443	192.168.2.4	49752	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.542714119 CEST	157.240.17.35	443	192.168.2.4	49754	CN=fbcdn.net, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sun Feb 07 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Sat May 08 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.542714119 CEST	157.240.17.35	443	192.168.2.4	49754	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.542946100 CEST	157.240.17.35	443	192.168.2.4	49755	CN=fbcdn.net, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sun Feb 07 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Sat May 08 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.542946100 CEST	157.240.17.35	443	192.168.2.4	49755	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.658444881 CEST	157.240.17.35	443	192.168.2.4	49757	CN=fbcdn.net, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sun Feb 07 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Sat May 08 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Apr 9, 2021 15:14:03.658444881 CEST	157.240.17.35	443	192.168.2.4	49757	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		3faf2df7ab96c36419c31725cb1fa7d6
Apr 9, 2021 15:14:03.658622026 CEST	157.240.17.35	443	192.168.2.4	49756	CN=fbcdn.net, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sun Feb 07 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Sat May 08 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Apr 9, 2021 15:14:03.658622026 CEST	157.240.17.35	443	192.168.2.4	49756	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		3faf2df7ab96c36419c31725cb1fa7d6
Apr 9, 2021 15:14:03.932909966 CEST	157.240.17.15	443	192.168.2.4	49758	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.932909966 CEST	157.240.17.15	443	192.168.2.4	49758	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.933270931 CEST	157.240.17.15	443	192.168.2.4	49759	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 9, 2021 15:14:03.933270931 CEST	157.240.17.15	443	192.168.2.4	49759	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 4828 Parent PID: 800

General

Start time:	15:13:41
Start date:	09/04/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff765300000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: iexplore.exe PID: 1576 Parent PID: 4828

General

Start time:	15:13:42
Start date:	09/04/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4828 CREDAT:17410 /prefetch:2
Imagebase:	0x2d0000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report https://ccaeperu.com/?real-estate-agent2938423

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Dropped Files

Sigma Overview

Signature Overview

AV Detection:

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 4828 Parent PID: 800

General

Chronological Activities

Analysis Process: iexplore.exe PID: 1576 Parent PID: 4828

General

Chronological Activities

Disassembly