Play interactive tour

Edit tour

Analysis Report https://welsfargo.com-onlinebanking.com/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl?cid=829803269

Overview

General Information

Sample URL:	https://welsfargo.com-onlinebanking.com/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl?cid=829803269
Analysis ID:	385171
Infos:
Most interesting Screenshot:

Detection

HTMLPhisher

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Phishing site detected (based on logo template match)

HTML body contains low number of good links

No HTML title found

Classification

Startup

System is w10x64

iexplore.exe (PID: 5780 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 5248 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5780 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\J87Y3MCZ.htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

Phishing:

Yara detected HtmlPhish10

Show sources

Source: Yara match	File source: 468325.pages.csv, type: HTML
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\J87Y3MCZ.htm, type: DROPPED

Phishing site detected (based on logo template match)

Show sources

Source: https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl

Matcher: Template: microsoft matched

Source: https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl	HTTP Parser: Number of links: 0
Source: https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl	HTTP Parser: Number of links: 0

Source: https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl	HTTP Parser: HTML title missing
Source: https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl	HTTP Parser: HTML title missing

Source: https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl	HTTP Parser: No <meta name="author".. found
Source: https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl	HTTP Parser: No <meta name="author".. found

Source: https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl	HTTP Parser: No <meta name="copyright".. found
Source: https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 54.175.141.245:443 -> 192.168.2.3:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.175.141.245:443 -> 192.168.2.3:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.22.122.101:443 -> 192.168.2.3:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.22.122.101:443 -> 192.168.2.3:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.131.254.50:443 -> 192.168.2.3:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.131.254.50:443 -> 192.168.2.3:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.221.185:443 -> 192.168.2.3:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.221.185:443 -> 192.168.2.3:49720 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: welsfargo.com-onlinebanking.com

Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://24ways.org/2010/calculating-color-contrast
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jquery.com/jQuery.ajax/)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://blog.jquery.com/2012/08/09/jquery-1-8-released/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/8235
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9917
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/9446
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://codereview.stackexchange.com/q/13338
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://datatables.net).
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://datatables.net/license
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://datatables.net/license/mit
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://datatables.net/manual/styling/bootstrap
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://datatables.net/tn/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://dev.w3.org/csswg/css-color/#hwb-to-rgb
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://eligrey.com
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://fa2png.io/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://flightschool.acylt.com/devnotes/caret-position-woes/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://github.com/jrburke/almond
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://jquery.com/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://jquery.org/license
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://jqueryui.com
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://jsfiddle.net/dbs4c8h0/1/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://jsperf.com/1-vs-infinity
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://jsperf.com/diacritics/18
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://jsperf.com/html-decode
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://jsperf.com/tostring-v-check
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://pdfmake.org
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://scaledinnovation.com/analytics/splines/aboutSplines.html
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://semver.org/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/a/21336448/937891
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/a/26707753
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/a/32954565/96342
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/a/384380/937891
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/questions/8898412
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://there4.io/2012/05/02/google-chart-color-list/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://www.datatables.net
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://www.datatables.net/extensions/select
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://www.macromedia.com/go/getflashplayer
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://www.robertpenner.com/easing/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://www.sprymedia.co.uk/dataTables/lang.txt
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: http://www.whatwg.org/specs/web-apps/current-work/multipage/timers.html#dom-windowtimers-settimeout:
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://blog.alexmaccaw.com/css-transitions
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://caniuse.com/download
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://chartjs.gitbooks.io/proposals/content/Platform.html
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#altinput
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#dateformat
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#disable
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#inline-calendar
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: J87Y3MCZ.htm.2.dr	String found in binary or memory: https://ctsciencecenter.org/wp-content/uploads/2017/08/Microsoft-Logo-PNG.png
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://datatables.net/tn/11
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://davidwalsh.name/detect-node-insertion
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.apple.com/library/safari/documentation/Tools/Conceptual/SafariExtensionGuide/Worki
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Using_Firefox_1.5_caching
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/EventTarget/addEventListener
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/EventTarget/addEventListener#Safely_detecting_optio
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/EventTarget/removeEventListener
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/CSS/font
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/CSS/line-height
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/CSS/used_value
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Events
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://developer.snapappointments.com/bootstrap-select)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://dl.dropboxusercontent.com/u/34601363/toomuchscience.gif
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://dl.dropboxusercontent.com/u/34601363/yeahscience.gif
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://fullcalendar.io/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#affix
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#alerts
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#buttons
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#carousel
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#collapse
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#dropdowns
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#modals
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#popovers
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#scrollspy
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tabs
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tooltip
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#transitions
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://gist.github.com/nnnick/696cc9c55f4b0beb8fe9
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://gist.github.com/paulirish/5d52fb081b3570c81e3a#box-metrics
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://gist.github.com/shawnbot/4166283
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/Do/iso8601.js
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/DoersGuild/jQuery.print/issues/18#issuecomment-96451589
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/angular/angular/blob/7.2.4/packages/core/src/sanitization/url_sanitizer.ts
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/ankane/chartkick.js
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/bassjobsen/Bootstrap-3-Typeahead
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/compare/v2.8.0...v2.9.0
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/2210
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/2435#issuecomment-216718158
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/2441
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/2538
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/2807
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/3575
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/3781
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/3887
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/4102
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/4152
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/4287
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/4737
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/5111#issuecomment-355934167
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/5208
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/5597
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/5763
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/5858
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/5902
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/issues/6104
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/pull/2640
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/pull/4507
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/pull/4556
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/pull/4591#issuecomment-319575939
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/cujojs/when/issues/410
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/davidstutz/bootstrap-multiselect)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/eligrey/classList.js/issues/36
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/imulus/retinajs/issues/8
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/imulus/retinajs/pull/45)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/jdewit/bootstrap-timepicker/graphs/contributors
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.0/ui/core.js#L51
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/2.2.4/src/core.js#L448
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/kkapsner/CanvasBlocker
Source: modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f[1].js.2.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/madrobby/zepto/blob/master/src/zepto.js
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/marcj/css-element-queries
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/rails/jquery-ujs
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/rails/jquery-ujs/issues/357
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/sass/libsass/blob/0e6b4a2850092356aa3ece07c6b249f0221caced/functions.cpp#L209
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/snapappointments/bootstrap-select/blob/master/LICENSE)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/14093
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/20280
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/uxsolutions/bootstrap-datepicker)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/w3c/IntersectionObserver/issues/211
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://github.com/w3c/IntersectionObserver/pull/205
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://groups.google.com/forum/#
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: ~DFABA5B5234A7FE127.TMP.1.dr, J87Y3MCZ.htm.2.dr	String found in binary or memory: https://https.protected-forms.com/pages/c3955b1c48a
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://itsjavi.com/bootstrap-colorpicker/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://jsperf.com/childnodes-array-slice-vs-loop
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://jsperf.com/object-keys-vs-for-in-with-closure/3
Source: J87Y3MCZ.htm.2.dr	String found in binary or memory: https://logincdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://modernizr.com/)
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://momentjs.com/docs/#/get-set/iso-weekday/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://momentjs.com/docs/#/parsing/string-format/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: ~DFABA5B5234A7FE127.TMP.1.dr, ~DFA1630E5320976778.TMP.1.dr	String found in binary or memory: https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMF
Source: {72DC8A81-9B94-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://secured-login.onlinebanking.com/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGp
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://select2.github.io
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://stackoverflow.com/a/14853974
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://stackoverflow.com/a/27757708/1177228
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://stackoverflow.com/q/181348
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://stackoverflow.com/q/3922139
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://stackoverflow.com/questions/10149963/adding-event-listener-cross-browser
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://stackoverflow.com/questions/30464750/chartjs-line-chart-set-background-color
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://stackoverflow.com/questions/5623838/rgb-to-hex-and-hex-to-rgb
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://stackoverflow.com/questions/8506881/nice-label-algorithm-for-charts-with-minimum-ticks
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.findIndex
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://w3c.github.io/IntersectionObserver/#calculate-intersection-rect-algo
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://w3c.github.io/IntersectionObserver/#intersection-observer-entry
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://w3c.github.io/IntersectionObserver/#intersection-observer-interface
Source: ~DFABA5B5234A7FE127.TMP.1.dr, {72DC8A81-9B94-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://welsfargo.com-onlinebanking.com/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGp
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://www.anujgakhar.com/2014/03/01/binary-search-in-javascript/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://www.chartjs.org
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://www.chromestatus.com/features/5093566007214080
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://www.html5canvastutorials.com/advanced/html5-canvas-mouse-coordinates/
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://www.nathanaeljones.com/blog/2013/reading-max-width-cross-browser
Source: application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	String found in binary or memory: https://www.paulirish.com/2011/requestanimationframe-for-smart-animating/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712

Source: unknown	HTTPS traffic detected: 54.175.141.245:443 -> 192.168.2.3:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.175.141.245:443 -> 192.168.2.3:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.22.122.101:443 -> 192.168.2.3:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.22.122.101:443 -> 192.168.2.3:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.131.254.50:443 -> 192.168.2.3:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.131.254.50:443 -> 192.168.2.3:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.221.185:443 -> 192.168.2.3:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.221.185:443 -> 192.168.2.3:49720 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@3/15@5/4

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF46A2DCC3BAE2745C.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5780 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5780 CREDAT:17410 /prefetch:2	Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: Next
Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://welsfargo.com-onlinebanking.com/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl?cid=829803269	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Link
cs1227.wpc.alphacdn.net	0%	Virustotal	Browse
secured-login.net	1%	Virustotal	Browse
logincdn.msauth.net	1%	Virustotal	Browse
welsfargo.com-onlinebanking.com	1%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	0%	Avira URL Cloud	safe
https://w3c.github.io/IntersectionObserver/#intersection-observer-interface	0%	Avira URL Cloud	safe
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	0%	Avira URL Cloud	safe
https://www.nathanaeljones.com/blog/2013/reading-max-width-cross-browser	0%	Avira URL Cloud	safe
https://secured-login.onlinebanking.com/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGp	0%	Avira URL Cloud	safe
https://www.anujgakhar.com/2014/03/01/binary-search-in-javascript/	0%	Avira URL Cloud	safe
http://www.robertpenner.com/easing/	0%	URL Reputation	safe
http://www.robertpenner.com/easing/	0%	URL Reputation	safe
http://www.robertpenner.com/easing/	0%	URL Reputation	safe
https://w3c.github.io/IntersectionObserver/#calculate-intersection-rect-algo	0%	Avira URL Cloud	safe
http://flightschool.acylt.com/devnotes/caret-position-woes/	0%	Avira URL Cloud	safe
http://www.robertpenner.com/easing)	0%	URL Reputation	safe
http://www.robertpenner.com/easing)	0%	URL Reputation	safe
http://www.robertpenner.com/easing)	0%	URL Reputation	safe
https://w3c.github.io/IntersectionObserver/#intersection-observer-entry	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cs1227.wpc.alphacdn.net	192.229.221.185	true	false	0%, Virustotal, Browse	unknown
secured-login.net	52.22.122.101	true	false	1%, Virustotal, Browse	unknown
ctsciencecenter.org	104.131.254.50	true	false		high
landing.training.knowbe4.com	54.175.141.245	true	false		high
logincdn.msauth.net	unknown	unknown	false	1%, Virustotal, Browse	unknown
welsfargo.com-onlinebanking.com	unknown	unknown	false	1%, Virustotal, Browse	unknown
favicon.ico	unknown	unknown	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://api.jqueryui.com/slide-effect/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/moment/moment/issues/1423	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/chartjs/Chart.js/pull/4507	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/a/32954565/96342	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/madrobby/zepto/blob/master/src/zepto.js	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://stackoverflow.com/questions/30464750/chartjs-line-chart-set-background-color	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/chartjs/Chart.js/issues/5597	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://stackoverflow.com/a/26707753	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://jsfiddle.net/dbs4c8h0/1/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/jquery/jquery-color	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/select2/select2/blob/master/LICENSE.md	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://api.jqueryui.com/jQuery.widget/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://blog.jquery.com/2012/08/09/jquery-1-8-released/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://codereview.stackexchange.com/q/13338	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://pdfmake.org	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://caniuse.com/download	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/chartjs/Chart.js/issues/2538	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://dev.w3.org/csswg/css-color/#hwb-to-rgb	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0)	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js	modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f[1].js.2.dr	false		high
http://api.jqueryui.com/button/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://blog.alexmaccaw.com/css-transitions	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://www.datatables.net	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/bassjobsen/Bootstrap-3-Typeahead	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#transitions	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/chartjs/Chart.js/issues/4152	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://bugs.jquery.com/ticket/9917	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://api.jqueryui.com/size-effect/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/Do/iso8601.js	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/EventTarget/addEventListener#Safely_detecting_optio	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://momentjs.com/guides/#/warnings/zone/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://bugs.jquery.com/ticket/12359	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/EventTarget/removeEventListener	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://w3c.github.io/IntersectionObserver/#intersection-observer-interface	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://creativecommons.org/licenses/by/3.0/)	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://www.nathanaeljones.com/blog/2013/reading-max-width-cross-browser	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#tooltip	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/chartjs/Chart.js/issues/6104	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://jsperf.com/diacritics/18	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://api.jqueryui.com/category/ui-core/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/twbs/bootstrap/issues/20280	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/chartjs/Chart.js/issues/4287	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#modals	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/chartjs/Chart.js/issues/2435#issuecomment-216718158	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://jsperf.com/object-keys-vs-for-in-with-closure/3	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://stackoverflow.com/q/181348	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#collapse	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://secured-login.onlinebanking.com/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGp	{72DC8A81-9B94-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://www.macromedia.com/go/getflashplayer	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://www.anujgakhar.com/2014/03/01/binary-search-in-javascript/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/chartjs/Chart.js/issues/4737	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/kkapsner/CanvasBlocker	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://www.robertpenner.com/easing/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://w3c.github.io/IntersectionObserver/#calculate-intersection-rect-algo	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/chartjs/Chart.js/issues/3887	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#scrollspy	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/w3c/IntersectionObserver/issues/211	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://flightschool.acylt.com/devnotes/caret-position-woes/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/transfer-effect/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/rails/jquery-ujs	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://stackoverflow.com/questions/8506881/nice-label-algorithm-for-charts-with-minimum-ticks	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/marcj/css-element-queries	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://www.robertpenner.com/easing)	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://momentjs.com/guides/#/warnings/min-max/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://npms.io/search?q=ponyfill.	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/chartjs/Chart.js/issues/4102	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://stackoverflow.com/q/3922139	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://api.jqueryui.com/drop-effect/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://datatables.net/license	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#buttons	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/jquery/jquery/pull/557)	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://www.html5canvastutorials.com/advanced/html5-canvas-mouse-coordinates/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://api.jqueryui.com/menu/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#alerts	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/chartjs/Chart.js/issues/5208	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://api.jqueryui.com/category/effects-core/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://bugs.jquery.com/ticket/8235	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://chartjs.gitbooks.io/proposals/content/Platform.html	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://api.jqueryui.com/dialog/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://w3c.github.io/IntersectionObserver/#intersection-observer-entry	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/shake-effect/	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://stackoverflow.com/questions/10149963/adding-event-listener-cross-browser	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/imulus/retinajs/issues/8	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
http://jsperf.com/1-vs-infinity	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/cujojs/when/issues/410	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://getbootstrap.com/)	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://github.com/ankane/chartkick.js	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high
https://modernizr.com/)	application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js.2.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
104.131.254.50	ctsciencecenter.org	United States	14061	DIGITALOCEAN-ASNUS	false
54.175.141.245	landing.training.knowbe4.com	United States	14618	AMAZON-AESUS	false
192.229.221.185	cs1227.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
52.22.122.101	secured-login.net	United States	14618	AMAZON-AESUS	false

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	385171
Start date:	12.04.2021
Start time:	06:38:23
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 2m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://welsfargo.com-onlinebanking.com/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl?cid=829803269
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@3/15@5/4
Cookbook Comments:	Adjust boot time Enable AMSI
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, audiodg.exe, ielowutil.exe, backgroundTaskHost.exe, svchost.exe Excluded IPs from analysis (whitelisted): 104.43.139.144, 204.79.197.200, 13.107.21.200, 13.88.21.125, 88.221.62.148, 104.43.193.48, 20.50.102.62 Excluded domains from analysis (whitelisted): www.bing.com, arc.msn.com.nsatc.net, dual-a-0001.a-msedge.net, lgincdnvzeuno.ec.azureedge.net, skypedataprdcolcus16.cloudapp.net, arc.msn.com, skypedataprdcolcus15.cloudapp.net, lgincdnvzeuno.azureedge.net, e11290.dspg.akamaiedge.net, go.microsoft.com, a-0001.a-afdentry.net.trafficmanager.net, lgincdn.trafficmanager.net, blobcollector.events.data.trafficmanager.net, www-bing-com.dual-a-0001.a-msedge.net, go.microsoft.com.edgekey.net, arc.trafficmanager.net, watson.telemetry.microsoft.com, skypedataprdcolwus15.cloudapp.net

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\7XIC6Q2O\secured-login[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aK1r0aKb:JFK1rFKb
MD5:	132294CA22370B52822C17DCB5BE3AF6
SHA1:	DD26B82638AD38AD471F7621A9EB79FED448A71C
SHA-256:	451ABBE0AEFC000F49967DABF8D42344D146429F03C8C8D4AE5E33FF9963CF77
SHA-512:	6D5808CAD199A785C82763C68F0AE1F4938C304B46B70529EA26B3D300EF9430AD496C688D95D01588576B3A577001D62245D98137FD5CD825AD62E17D36F15C
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{72DC8A7F-9B94-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	33368
Entropy (8bit):	1.8811120288972754
Encrypted:	false
SSDEEP:	96:rPZAZK2NW4+NHt4+NQf4+NwNM4+yF4+g94+gOf4+gDMr4+6:rPZAZK2NWVHtVQfVwNM6F494Of4DMrS
MD5:	637A409A933B6C24F67CAC151CBAD607
SHA1:	257AD5F47581F5A1A6D606EB7459EACB3F766AEE
SHA-256:	FA0FFCC3187F1EAD2E508DE15F3D98EB40FCFD91BF16A02F05A6646867DCC203
SHA-512:	2313687F57B3788C40A8D1A6846EA7155597A7D5E5A8843418394BA45F26D75561E72B54D204992FC37E5327D17E748D106A8B6BF0F301C5CD1FDA2A54763089
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{72DC8A81-9B94-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	38698
Entropy (8bit):	2.669013176048952
Encrypted:	false
SSDEEP:	192:r9ZmQS64kCjJ2dWeMRa02bgf/QYbgDubgZbgI8bgxbgvbgKbgpbgrbgsbg6g:rTz9F8Y03Rb2iQYzo/8c6vke5G
MD5:	3707FA64B763B322216771E2853779A8
SHA1:	6E4D06DC1BCE1476170ECF2C257CF68F027C58BB
SHA-256:	54010F5E147129E1071A68E46FA9084B16CC190EEEF65178F5F8F528477F514D
SHA-512:	429244781CA275FB6C630300609468552A9A366C1AFFA4FF8ADB921D7261EC7BB4AD1754F1DA49DD4CB6DD049DE4CE5B797CBBE5EFB9DBB046099929F72BAC77
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{797E165A-9B94-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.56594732250189
Encrypted:	false
SSDEEP:	48:IwPGcpriGwpagG4pQ8hGrapbSPGQpKtWG7HpRnTGIpG:rFZKQA68xBSZAtBTVA
MD5:	DF74F24EF82A2522870467E5388B8192
SHA1:	AAA822FBD51C29E465B95C75FE132FD260BA2A6D
SHA-256:	311A0771BD1AE8FB05637D35B1F5FAD76616539604DB7EF202F6F96729CAB184
SHA-512:	D8D766E741E6A9BD16C5302F02D628F748094D4BE95EA1684F4A5A8EAB51C9D6349D7A867BB90AE51BA589437258C1203C4B07D315DCAC01EF89E391335D6048
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	51364
Entropy (8bit):	4.630626843010533
Encrypted:	false
SSDEEP:	1536:TRCJJ/KpVsnpxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277ts:TS/FpzarzCT71Pts
MD5:	BF2F96E6233DE3D8C0346085AC28248A
SHA1:	4DB267704D7E3FB2489CF96E82862A2245CD9311
SHA-256:	EE94DDA0AF1FC5C5045741B39E54136015365EEDCA34095F1D3C666998BB442D
SHA-512:	D4DB54380D135D9F5AAA03727CC88037B014C1057A3061C3D173EB8D4CEC7E4A2F71CFCA1478E8E15C093D510EEE80668C2038691EAEB21958942089F0DD9C6C
Malicious:	false
Reputation:	low
IE Cache URL:	https://secured-login.net/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js
Preview:	/!. Modernizr v2.7.1. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. /../. * Modernizr tests which native CSS3 and HTML5 features are available in. * the current UA and makes the results available to you in two ways:. * as properties on a global Modernizr object, and as classes on the. * <html> element. This information allows you to progressively enhance. * your pages with a granular level of control over the experience.. . Modernizr has an optional (not included) conditional resource loader. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com).. * To get a build that includes Modernizr.load(), as well as choosing. * which tests to include, go to www.modernizr.com/download/. . Authors Faruk Ates, Paul Irish, Alex Sexton. * Contributors Ryan Seddon, Ben Alman. */..window.Modernizr = (function( window, document, undefined ) {.. var version = '2.7.1',..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\2_bc3d32a696895f78c19df6c717586a5d[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
IE Cache URL:	https://logincdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\J87Y3MCZ.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	8554
Entropy (8bit):	5.652272148631601
Encrypted:	false
SSDEEP:	96:O4/A7CuP7Og5/FLyeA3/AtG3O/6mSFtO3DUnfZKSFCAd73O/ZuujFtOrIPkP9NeV:OHPL5/AVOQnOzW5O7nOv2Qgw2lyBc
MD5:	0C5787917D3BBD0EB3C22A8457F5E045
SHA1:	479FE22C82B6CB126E27C0681CEFEDC88DD6DE4F
SHA-256:	48670236D2BFCB1A0D7B722592EDEFC055AB1BDCCC99ABDF252EDCF98921EA3F
SHA-512:	4C4E7707A4F531813F526E53C5938E80A6B5E7961028999AEEE0A4B2AFEF7383792F2B23698725793527F9B56DD16D3ED5ECBE31F6E4406C207EA2FE35663957
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\J87Y3MCZ.htm, Author: Joe Security
Reputation:	low
IE Cache URL:	https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">. <meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers." />. <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com." />. <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"/>. <meta name="robots" content="noindex, nofollow" />.. <head>. <script src="/assets/application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b.js"></script>. <script src="/packs/js/vendor-f9f57d7be17e331a1955.js"></script>. <script src="/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js"></script>.. <script>.//<![CDATA[.window.gon={};gon.locale="en";.// .</script>.. <link rel="stylesheet" media="all" href="/assets/landing-watermark-8487e36eef1bec74f06631f19

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	4.754611179426391
Encrypted:	false
SSDEEP:	24:y40r8CQo40agx40mC400XLaR404hZYmx40vGk40vG/I40vGhH40VhZ40UrCmn:xdDgCFEiBZgnTOHTn
MD5:	15E89F9684B18EC43EE51F8D62A787C3
SHA1:	9CBAAACEAE96845ECD3497F41EE3B02588ABEC11
SHA-256:	16F13E16A7EF02FB6F94250AA1931DED83DBEE5D9FAD278E33DD5792D085194F
SHA-512:	79E0110A045F28437D192290AC9789270CB0D4E676A985564746DB439992D867BA89639D7738E2A7F7D83BBF37D9A02CAA2AE1DC4E0EE2519797E5840A47FABE
Malicious:	false
Reputation:	low
IE Cache URL:	https://secured-login.net/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css
Preview:	/* line 1, app/assets/stylesheets/landing-watermark.scss /..watermark {. -webkit-writing-mode: vertical-rl;. -ms-writing-mode: tb-rl;. writing-mode: vertical-rl;. text-orientation: sideways;.}../ line 4, app/assets/stylesheets/landing-watermark.scss /..watermark.left {. left: 0;.}../ line 7, app/assets/stylesheets/landing-watermark.scss /..watermark.right {. right: 0;.}../ line 10, app/assets/stylesheets/landing-watermark.scss /..watermark.top {. text-align: center;. -webkit-writing-mode: horizontal-tb;. -ms-writing-mode: lr-tb;. writing-mode: horizontal-tb;. top: -38px;.}../ line 15, app/assets/stylesheets/landing-watermark.scss /..watermark h1 {. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-size: 15px;. color: #fdfdfa;. font-weight: bold;.}../ line 24, app/assets/stylesheets/landing-watermark.scss /.#template_sei .watermark.left {. margin-left: -10px;.}../ li

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\F0EPYP4W.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	557
Entropy (8bit):	5.7510763426202445
Encrypted:	false
SSDEEP:	12:3R+xn/Qfkqb0DXbGUDHGG05HDUr2+KigatEZxhW+j8I4C/4AEdeIQL:3EIfRb4vI5K23irtgW+AnC/NEkj
MD5:	445A799C5E8E7A34617B3955187F4483
SHA1:	FEC9BB8AE4028F8AC3F911BB59F84DA096D556C1
SHA-256:	A936B7C39E680DE8CFD7E8D522CE3C62AD4F823CCB6147D206BCAEC26A8FE5FC
SHA-512:	7FB17CB74CE72647405A63A6E0D8CDDE0FB64680FAE49C8C381A149AF41D3553258BD21BB336EE685F8ECFA3C1069B1923BF4A36CB8E7C01FD09E06D6E607248
Malicious:	false
Reputation:	low
IE Cache URL:	https://welsfargo.com-onlinebanking.com/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl?cid=829803269
Preview:	<html>. <head>. <script>window.location.href = 'https://secured-login.net/pages/10ab5b62ac22/XTlU1aGJteE9NRk5DU0ZCUVNucGlTRkJCZDJGTVZXTlRjR29yZUdrMFZrdGpURFI2ZURJMUwzbzVWV3hyY21sT1pHNXdRVVYwTkhkWmFVOVBUalpaTDBwUVZESk1abTkyZFRscE0za3lSRWt3ZEUxU1ZHWnJURzVXZFhONksySkJRVmxKVFVWVWRtMVJaekZCY2xWWVJWRTNWbE14WmpoV2QxZGxRa280VlZaUldrUjNZbWR6T1dod1dUQndSRkpJT1ZocFZ6VnJLekIwVGtKU1luZzVWMWxYY21wQ1luVjJRa28wUFMwdFZ5ODJka0pTTVdkcFFURk5hSEExVWtaTmRIWnFkejA5LS1mNTY3M2RlODQzYTFhY2IwZTFjOTZiNGQ1YjI3MTU0NDk0YTgzNDVl';</script>. </head>. <body>. </body>.</html>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\Microsoft-Logo-PNG[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1870 x 690, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11903
Entropy (8bit):	7.570735023271992
Encrypted:	false
SSDEEP:	192:SU1111111f1111ba8SwLOMuhKM+2K5en7OhLFuZYdWR9jPws0IUyuFm9Q2v1111J:SH8SnYZ2K5en7OJFsiu9jb0IFOm9Q2h
MD5:	9A33A3A3F48640338BEBF18657DEAA2D
SHA1:	3E66B927D14625DA739CA160FE32B30E603D786B
SHA-256:	B89BE8A1426FB07A01CC6F865B33F447BA12BB09A02EE1535AB9FFFDB3DADC66
SHA-512:	998FCA3F2FDF8ACF802CCA64369938F40EE41D3BE0E29D0C523A42F3C5B265C8AF2378DCDF968084D43DF0F50EDFB3F6554BEC479E0F8227E9C2F811A9F1158E
Malicious:	false
Reputation:	low
IE Cache URL:	https://ctsciencecenter.org/wp-content/uploads/2017/08/Microsoft-Logo-PNG.png
Preview:	.PNG........IHDR...N.........e......ZPLTE......ppppppuuutttsssrrrtttttt...sss....P"...sssrrr...ttt....P#...sssssssss...sss....P".....K.....tRNS... 0@P`p................WBX...-.IDATx...Q.....Q..1!.^v.&N...f.{..v.T.BH .s.....c>$.>.7.`..M..r..r..r...)..)..)..). .. .. .. ...............r..r..r..r...)..)..)..). .. .. .. ...............r..r..r..r...)..)..)..). .. .. .. ...............r..r..r..r...)..)..)..). .. .. .. ...............r..r..r..r...)..)..)..). .. .. .. ...............r..r..r..r...)..)..)..). .. .. .. ...............r..r..r..r...)..)..)..). .. .. .. ...............r..r..r..r...)..)..)..). .. .. .. ...............r..r..r...)..)..)..). .. .. .. ...............r..r..r..r...)..)..)..). .. .. .. ...............r..r..r..r...)..)..)..). .. .. .. ...............r..r..r..r...)..)..)..). .. .. .. ...............r..r..r..r...)..)..)..). .. .. .. ...............r..r..r.....{..q...s..n...S9.S..TN..S9.@N.TN..TN...9.S..TN..S9.S.9.S9.@N...9.S..TN..@N.TN..S9.@N...9.S9..S9.S..TN..S9.@N.TN..TN...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	4008497
Entropy (8bit):	5.095997159612487
Encrypted:	false
SSDEEP:	49152:Aw4mDiTFyA6TVfMAeuljHmcIkp5W5FHAzJ7CjhB0ZyA9At+zORaseqlyT7cZdTA8:8Z
MD5:	EA43F2BF3329E6FECFCE657D8788AFC6
SHA1:	D9C95A9DA90AEFB0D27D54001FC495A4B8040942
SHA-256:	3F9643CF23457F5E352C895A1B9B7D12BFCDA608697713C0AADDA634B1EDD7E6
SHA-512:	1D63BBB463ED835C353ADCD39D3227093115B7F7E5A4BE8B35442C8644091FD9E9B054C55ADAA4B2889856C9939F367667182E64BAD849BAE8D094BD39700885
Malicious:	false
Reputation:	low
IE Cache URL:	https://secured-login.net/assets/application-90929fee9f5daac0eca637129a780171565a15cebe060e2d86c95ffac685fd7b.js
Preview:	// Array.fill.if (!Array.prototype.fill) {. Object.defineProperty(Array.prototype, 'fill', {. value: function(value) {.. // Steps 1-2.. if (this == null) {. throw new TypeError('this is null or not defined');. }.. var O = Object(this);.. // Steps 3-5.. var len = O.length >>> 0;.. // Steps 6-7.. var start = arguments[1];. var relativeStart = start >> 0;.. // Step 8.. var k = relativeStart < 0 ?. Math.max(len + relativeStart, 0) :. Math.min(relativeStart, len);.. // Steps 9-10.. var end = arguments[2];. var relativeEnd = end === undefined ?. len : end >> 0;.. // Step 11.. var final = relativeEnd < 0 ?. Math.max(len + relativeEnd, 0) :. Math.min(relativeEnd, len);.. // Step 12.. while (k < final) {. O[k] = value;. k++;. }.. // Step 13.. return O;. }. });.}..// Object.values.Object.values = Object.values ? Object.values : f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\vendor-f9f57d7be17e331a1955[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	372931
Entropy (8bit):	5.29856229717366
Encrypted:	false
SSDEEP:	6144:bczjVEg2HsGtNjvZBHPg96/6FTHL6jcYyTIU0:PsGzLkHLWJ
MD5:	0D3DDEEF42E7DD5336F27DAADB55AC92
SHA1:	7397C6CE00E6370069D944DAB49F226AA76609D2
SHA-256:	15BFAB10A07CA0B82FACA5584E364AA700D9BDB8D739FBBD4890E0782F894924
SHA-512:	F803B85D256D5B89FE4B3B9AD6967C9653E36BD95A1081898B00965C0B0079FFD343C2A07FA68CD5A380B0ED5E49E2FA6A67690547C1EC7813A6561B5F6E8436
Malicious:	false
Reputation:	low
IE Cache URL:	https://secured-login.net/packs/js/vendor-f9f57d7be17e331a1955.js
Preview:	!function(t){var e={};function i(n){if(e[n])return e[n].exports;var r=e[n]={i:n,l:!1,exports:{}};return t[n].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=t,i.c=e,i.d=function(t,e,n){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)i.d(n,r,function(e){return t[e]}.bind(null,r));return n},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},i.p="/packs/",i(i.s=973)}([,,,,,,function(t,e,i){function n(t,e,i){var c,u,p,d,f=t&n.F,g=t&n.G,m=t&n.P,v=t

C:\Users\user\AppData\Local\Temp\~DF46A2DCC3BAE2745C.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13077
Entropy (8bit):	0.5117719476712306
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9loCF9lo+9lWfuOmyugLB:kBqoIJffNmyugLB
MD5:	DC6B2C492092375D9AB1C9877B2DE650
SHA1:	01023BC04D6E4BB4CE613A89B2E34E315A4D0DFE
SHA-256:	A0A7CCAC646EC7513CB01FBEDFE302E171311FEC03A31816B74B7BBC1EA4DD5A
SHA-512:	B88A3B0C612140A610221CB26CD6F19A46EE8FE46F463251CFFA0E50A55D43AD12DFD5B7C52A7F0BDE4D8F0563EF12DFD9CD90B13A21A3C02F2B87B80360CFC0
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFA1630E5320976778.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.8214419358848888
Encrypted:	false
SSDEEP:	48:kBqoxxJhHWSVSEab2W966ZLchcYwQ3YH3eaAT/cYwQ3YH3aPa7/ck:kBqoxDhHWSVSE+1Gh5tgK/5tgaw/P
MD5:	637F8165FFF71A41EB0D8526482BD81E
SHA1:	AA2DB01EBCB22C27970770F30EE808A5AF604AC0
SHA-256:	413526EF7900B553342426386B11200F471EC584FDFAA1939C6C14DAA9C1762A
SHA-512:	43C1AB0CF432EE8A41EEB82E42156A21D6F0279F6824490F06B6B1889D3D2174EF98ABBBD23E0875AEE305D168D6DEFC7D4B38EAA6F4992A6D42658427524AF7
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFABA5B5234A7FE127.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	48188
Entropy (8bit):	1.6606221597570698
Encrypted:	false
SSDEEP:	192:kBqoxKAuqR+357yZJ2bg7abgi/EbgZbgI8bgxbgvbgKbgpbgrbgsbg:kBqoxKAuqR+357yZJ2KaLEo/8c6vke5
MD5:	E9B37BDF34BBDC70BC009281C961C9B8
SHA1:	5033074313789C4DB078485760304A6E3EB199D9
SHA-256:	B7E46DA54E6E28A51586EF260BFA668D8DC7C1AA951D49EBBB4C87D6B02D8A64
SHA-512:	388826824C2E3BBA54B4E97900A2C9E2C8BFFB7ECFA7B798C8C78BF92C22A85F2A5E13B990967221A17A8486D33266CD09E1CB2852C85EB7024C59475880D056
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 12, 2021 06:39:07.323807001 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.324609041 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.451096058 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.451245070 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.452281952 CEST	443	49712	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.452425003 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.456522942 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.457740068 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.586416006 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.587306023 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.587336063 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.587359905 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.587385893 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.587389946 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.587404966 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.587414980 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.587420940 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.587445021 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.587472916 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.587968111 CEST	443	49712	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.588891029 CEST	443	49712	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.588927984 CEST	443	49712	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.588958025 CEST	443	49712	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.588985920 CEST	443	49712	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.589004040 CEST	443	49712	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.589085102 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.589126110 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.589133024 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.589137077 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.618062019 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.618217945 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.624375105 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.624655962 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.624695063 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.745379925 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.745455980 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.745492935 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.745569944 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.745960951 CEST	443	49712	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.745992899 CEST	443	49712	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.746083975 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.746144056 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.746943951 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.747157097 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.751274109 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.751449108 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.752005100 CEST	443	49712	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.752161980 CEST	49712	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.792959929 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.835413933 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.835442066 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.835602999 CEST	49711	443	192.168.2.3	54.175.141.245
Apr 12, 2021 06:39:07.874079943 CEST	443	49711	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:07.918175936 CEST	443	49712	54.175.141.245	192.168.2.3
Apr 12, 2021 06:39:08.068048954 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.068048954 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.195337057 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.195511103 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.196176052 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.196253061 CEST	443	49714	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.196355104 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.197128057 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.325287104 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.326076984 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.326117992 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.326157093 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.326195002 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.326195955 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.326224089 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.326256037 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.326261997 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.326293945 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.326297998 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.326308012 CEST	443	49714	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.327338934 CEST	443	49714	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.327382088 CEST	443	49714	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.327419996 CEST	443	49714	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.327429056 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.327457905 CEST	443	49714	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.327461958 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.327475071 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.327486992 CEST	443	49714	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.327527046 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.327549934 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.352266073 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.352683067 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.352883101 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.355171919 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.355607986 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.481504917 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.481553078 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.481621027 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.481662035 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.481662989 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.481739044 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.482883930 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.484683037 CEST	443	49714	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.484714031 CEST	443	49714	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.484837055 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.484882116 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.485323906 CEST	49714	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.524000883 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.610253096 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.630444050 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.630506039 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.630542994 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.630580902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.630628109 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.630644083 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.630670071 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.630673885 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.630680084 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.630685091 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.630688906 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.630708933 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.630728006 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.630770922 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.656009912 CEST	443	49714	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.686125040 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.686273098 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.686449051 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.686602116 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.798371077 CEST	49716	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:08.799223900 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:08.813687086 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.813733101 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816097021 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816152096 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816190958 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816229105 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816241026 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.816267967 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816270113 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.816276073 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.816281080 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.816308022 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816355944 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816378117 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.816387892 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.816399097 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816416979 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.816437960 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816463947 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.816481113 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816497087 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.816520929 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816539049 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.816561937 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.816577911 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.816621065 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.817759991 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.817790985 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.817832947 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.817862034 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.924958944 CEST	443	49716	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:08.925080061 CEST	49716	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:08.925303936 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:08.925443888 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:08.925996065 CEST	49716	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:08.926208019 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:08.943511009 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.943556070 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.943593979 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.943643093 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.943672895 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.943689108 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.943711996 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.943717957 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.943722963 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.943737030 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.943751097 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.943779945 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.943804026 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.943820000 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.943845987 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.943856955 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.943881989 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.943897963 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.943923950 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.943936110 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.943967104 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.943984032 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944005013 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944026947 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944052935 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944062948 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944092989 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944103003 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944120884 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944142103 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944159985 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944180965 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944205999 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944220066 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944236994 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944257975 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944281101 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944304943 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944320917 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944348097 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944365025 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944385052 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944423914 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944442034 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944457054 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944462061 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944485903 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944518089 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944710970 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944751024 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944772959 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944787025 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944825888 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944834948 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:08.944863081 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:08.944905043 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.052264929 CEST	443	49716	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.052314043 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.056552887 CEST	443	49716	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.056608915 CEST	443	49716	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.056638002 CEST	443	49716	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.056741953 CEST	49716	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.056796074 CEST	49716	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.056802034 CEST	49716	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.057583094 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.057625055 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.057653904 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.057729959 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.057781935 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.057790041 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.071438074 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071489096 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071528912 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071566105 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071599960 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071604967 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071635008 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071640968 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071645021 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071646929 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071666002 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071683884 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071717024 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071723938 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071733952 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071762085 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071779966 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071810961 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071820021 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071852922 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071871042 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071893930 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071913004 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071932077 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071958065 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.071974039 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.071989059 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072012901 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072037935 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072051048 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072077990 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072089911 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072107077 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072138071 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072146893 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072181940 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072196007 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072220087 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072251081 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072257042 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072268009 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072297096 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072310925 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072335005 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072357893 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072374105 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072388887 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072412014 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072428942 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072462082 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072478056 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072504044 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072519064 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072541952 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072557926 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072581053 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072594881 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072619915 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072635889 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072659016 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072698116 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072698116 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072714090 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072734118 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072752953 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072781086 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072786093 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072823048 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072839022 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072860003 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072879076 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072900057 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072925091 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072937965 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072963953 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.072974920 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.072997093 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073013067 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073035955 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073052883 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073071003 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073101044 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073118925 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073148012 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073168039 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073185921 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073209047 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073223114 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073229074 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073262930 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073287010 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073298931 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073329926 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073338985 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073350906 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073376894 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073402882 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073434114 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073453903 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073494911 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073520899 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073532104 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073553085 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073570013 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073595047 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073607922 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073621988 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073647022 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073671103 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073694944 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.073700905 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.073760986 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.127123117 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.127388000 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.131162882 CEST	49716	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.202306986 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202379942 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202439070 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202488899 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.202497005 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202518940 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.202524900 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.202548981 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202554941 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.202603102 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202610970 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.202656031 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202675104 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.202709913 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202718019 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.202764988 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202775002 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.202825069 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202841997 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.202883005 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202883005 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.202938080 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202953100 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.202989101 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.202994108 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203041077 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203048944 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203093052 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203095913 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203145027 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203150034 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203197002 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203203917 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203247070 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203252077 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203304052 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203309059 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203357935 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203361988 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203409910 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203437090 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203473091 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203479052 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203524113 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203530073 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203573942 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203583956 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203625917 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203635931 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203680038 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203687906 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203737020 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203737020 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203793049 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203799009 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203844070 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203851938 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203893900 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203902960 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203944921 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.203953028 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.203996897 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204003096 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204049110 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204052925 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204101086 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204108000 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204158068 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204158068 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204210043 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204219103 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204260111 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204268932 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204312086 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204314947 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204361916 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204366922 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204411983 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204417944 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204463959 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204473019 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204514980 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204521894 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204571009 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204571009 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204623938 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204628944 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204674959 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204682112 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204725981 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204734087 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204777956 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204787016 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204828024 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204833984 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204880953 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204885960 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204931974 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.204937935 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204986095 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.204988003 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205039978 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205049038 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205090046 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205097914 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205140114 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205146074 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205189943 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205197096 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205240011 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205245018 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205291033 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205301046 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205341101 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205348969 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205414057 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205431938 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205492973 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205497026 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205545902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205550909 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205595970 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205616951 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205647945 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205657959 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205699921 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205703974 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205749989 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205759048 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205801010 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205806017 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205851078 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205858946 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205907106 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205908060 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.205960035 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.205965042 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206010103 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206017971 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206060886 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206064939 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206110954 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206116915 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206160069 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206166029 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206209898 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206217051 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206260920 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206269026 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206315994 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206316948 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206370115 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206377029 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206418991 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206427097 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206469059 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206474066 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206521034 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206528902 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206569910 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206578970 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206623077 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206628084 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206674099 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206682920 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206729889 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206731081 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206784964 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206794024 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206834078 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206840038 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206886053 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206892014 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206935883 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206943989 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.206984997 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.206993103 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207035065 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207045078 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207084894 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207093954 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207142115 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207143068 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207194090 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207200050 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207242966 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207247972 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207293034 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207299948 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207343102 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207350969 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207391024 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207401037 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207442045 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207448959 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207492113 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207498074 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207566023 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207566977 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207617998 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207623005 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207668066 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207684994 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207724094 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207748890 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207777023 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207777977 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207827091 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207840919 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207885981 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207896948 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.207954884 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.207989931 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.208041906 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.208058119 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.208091021 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.208098888 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.208141088 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.208148956 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.208190918 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.208195925 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.208240032 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.208249092 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.208298922 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.255650997 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.255933046 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.256087065 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.256834030 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.256894112 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.256943941 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.256992102 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.256994009 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.257013083 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.257045984 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.257055998 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.257095098 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.257108927 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.257145882 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.257153034 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.257195950 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.257210016 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.257251978 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.259578943 CEST	443	49716	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.259680033 CEST	49716	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.335216999 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335284948 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335335016 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335386992 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335426092 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335438013 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335460901 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335467100 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335496902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335520029 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335526943 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335550070 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335572958 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335604906 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335622072 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335661888 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335671902 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335717916 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335740089 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335767031 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335788012 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335818052 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335833073 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335870028 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335886955 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335921049 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335941076 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.335973024 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.335988998 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336026907 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336035967 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336086035 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336096048 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336141109 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336158037 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336190939 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336210012 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336241961 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336261034 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336293936 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336308956 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336344957 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336359024 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336396933 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336416006 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336450100 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336464882 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336507082 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336512089 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336566925 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336581945 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336622953 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336632013 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336673975 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336694002 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336729050 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336746931 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336777925 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336796045 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336829901 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336846113 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336882114 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336893082 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336939096 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.336946011 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.336992979 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337007999 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337043047 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337060928 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337097883 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337107897 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337150097 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337167978 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337201118 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337215900 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337250948 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337268114 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337302923 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337317944 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337359905 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337372065 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337461948 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337462902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337519884 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337534904 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337570906 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337593079 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337626934 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337634087 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337681055 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337708950 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337732077 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337750912 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337783098 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337799072 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337835073 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337852001 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337891102 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337908983 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337945938 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.337963104 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.337997913 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338021040 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338048935 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338068008 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338102102 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338119984 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338155031 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338170052 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338210106 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338227034 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338263035 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338284969 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338319063 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338323116 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338371992 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338386059 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338421106 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338438034 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338471889 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338486910 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338522911 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338538885 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338573933 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338588953 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338629007 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338643074 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338679075 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338735104 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338769913 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338778019 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338788033 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338793993 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338836908 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338867903 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338891983 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338901997 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338943005 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338958025 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.338992119 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.338999987 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339042902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339050055 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339092970 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339102030 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339153051 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339154005 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339211941 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339220047 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339261055 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339268923 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339314938 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339318991 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339365959 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339370012 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339415073 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339422941 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339467049 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339473963 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339517117 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339533091 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339575052 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339575052 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339627028 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339631081 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339675903 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339684963 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339726925 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339732885 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339780092 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339787006 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339831114 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339839935 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339880943 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339885950 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339930058 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.339937925 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339986086 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.339986086 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340039968 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340049028 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340087891 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340097904 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340138912 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340143919 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340193987 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340195894 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340243101 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340250969 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340292931 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340298891 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340342045 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340353012 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340395927 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340398073 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340450048 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340456009 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340497971 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340512037 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340554953 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340559006 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340605021 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340614080 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340665102 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340666056 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340715885 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340723038 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340764999 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340770960 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340812922 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340820074 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340867996 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340869904 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340917110 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.340925932 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340972900 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.340971947 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341025114 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341031075 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341073036 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341078997 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341123104 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341128111 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341172934 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341181993 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341222048 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341228008 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341273069 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341279030 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341322899 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341327906 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341377974 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341378927 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341469049 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341471910 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341521025 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341526031 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341569901 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341583967 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341619968 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341626883 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341670036 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341677904 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341718912 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341727018 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341768980 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341778994 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341820002 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341830015 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341876030 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341881990 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341928959 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341934919 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.341979027 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.341986895 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.342029095 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.342035055 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.342078924 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.342088938 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.342128038 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.342134953 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.342178106 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.342185020 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.342226982 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.342233896 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.342281103 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.342282057 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.342334032 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.342343092 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.342381001 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.342390060 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.342431068 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.342437983 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.342488050 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.382201910 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.382250071 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:09.382292986 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.382348061 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:09.470366955 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470426083 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470457077 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470494986 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470531940 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470571041 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470607996 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470614910 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470645905 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470652103 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470668077 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470668077 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470715046 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470722914 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470753908 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470768929 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470802069 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470805883 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470814943 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470844984 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470868111 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470882893 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470910072 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470922947 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470944881 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470959902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.470983982 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.470999956 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471021891 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471038103 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471066952 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471076012 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471098900 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471123934 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471138954 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471167088 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471184969 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471204996 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471235037 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471244097 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471256971 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471282959 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471302986 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471319914 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471333027 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471358061 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471368074 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471396923 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471411943 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471445084 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471455097 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471487999 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471502066 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471527100 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471554995 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471564054 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471580029 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471604109 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471627951 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471641064 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471663952 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471683025 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471699953 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471721888 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471751928 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471771002 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471792936 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471812963 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471831083 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471852064 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471868992 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471889973 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471904993 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471929073 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471952915 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.471966028 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.471983910 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472004890 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472024918 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472043037 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472074032 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472090960 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472106934 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472136021 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472151041 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472173929 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472187996 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472212076 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472225904 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472250938 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472265959 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472289085 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472304106 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472326994 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472337008 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472364902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472378969 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472412109 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472414970 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472454071 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472460985 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472491026 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472510099 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472529888 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472543955 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472568035 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472582102 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472604990 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472620010 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472644091 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472657919 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472682953 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472700119 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472732067 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472740889 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472774982 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472793102 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472814083 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472829103 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472852945 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472866058 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472897053 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472904921 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472934008 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472954035 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.472971916 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.472997904 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473010063 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473052025 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473056078 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473094940 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473098993 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473117113 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473136902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473157883 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473175049 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473196030 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473212957 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473228931 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473249912 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473263979 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473287106 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473323107 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473324060 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473351955 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473371029 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473404884 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473453045 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473509073 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473550081 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473571062 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473587990 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473606110 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473627090 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473640919 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473665953 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473680973 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473705053 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473715067 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473746061 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473756075 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473783970 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473809958 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473831892 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473834038 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473875046 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473890066 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473912954 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473927021 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473952055 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.473964930 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.473990917 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474005938 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474028111 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474041939 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474066973 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474081039 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474104881 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474119902 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474153042 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474153996 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474195957 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474208117 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474234104 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474248886 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474273920 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474280119 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474312067 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474324942 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474349022 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474363089 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474386930 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474400043 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474425077 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474440098 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474472046 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474472046 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474514961 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474524975 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474550962 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474564075 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474590063 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474602938 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474627972 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474644899 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474663973 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474699020 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474704027 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474713087 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474741936 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474757910 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474788904 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474791050 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474831104 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474839926 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474868059 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.474884033 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.474915028 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.601979017 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602035999 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602075100 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602108002 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602123022 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602143049 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602169037 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602169037 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602179050 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602207899 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602250099 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602277040 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602287054 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602324009 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602325916 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602333069 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602348089 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602365971 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602397919 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602405071 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602432966 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602452993 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602469921 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602495909 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602523088 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602534056 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602576971 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602580070 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602616072 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602617025 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602653027 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602654934 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602693081 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602694035 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602734089 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602760077 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602782011 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602811098 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602823973 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602847099 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602861881 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602883101 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602901936 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602915049 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.602941036 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602977991 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.602983952 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603015900 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603017092 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603043079 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603054047 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603075027 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603104115 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603118896 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603147030 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603164911 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603184938 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603210926 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603224039 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603256941 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603266001 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603295088 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603305101 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603338003 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603343010 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603374958 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603383064 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603425980 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603430986 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603449106 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603475094 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603501081 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603513002 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603553057 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603590012 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603626013 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603662968 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603692055 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603702068 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603749037 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603758097 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603790998 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603817940 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603828907 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603853941 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603868961 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603889942 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603910923 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603943110 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603950024 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.603962898 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.603990078 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604006052 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604029894 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604043961 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604077101 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604079008 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604119062 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604134083 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604156971 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604176044 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604197025 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604211092 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604234934 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604250908 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604271889 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604285955 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604310989 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604324102 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604348898 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604367018 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604396105 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604413033 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604439020 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604454041 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604477882 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604491949 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604517937 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604532957 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604557037 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604583979 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604593992 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604609966 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604635000 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604648113 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604672909 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604690075 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604722023 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.604752064 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.604790926 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.731813908 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.731869936 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.731899977 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.731937885 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.731976986 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.732188940 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.732249975 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.732254982 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.732300043 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.732340097 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.732409000 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.732732058 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.732770920 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.732810020 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.732847929 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.732847929 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.732896090 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.732911110 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.732939005 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.732978106 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.732994080 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733017921 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733057022 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733057022 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733095884 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733108997 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733134031 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733172894 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733191967 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733220100 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733261108 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733268023 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733299017 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733335018 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733338118 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733375072 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733448029 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733515024 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733560085 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733608007 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733650923 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733689070 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733695984 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733730078 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733767986 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733783007 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733805895 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733844995 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733855963 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733884096 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733916998 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733932018 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.733969927 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.733973980 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734014034 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734055042 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734060049 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734092951 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734129906 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734144926 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734169006 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734195948 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734215975 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734245062 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734280109 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734286070 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734292984 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734323978 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734361887 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734364033 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734402895 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734416962 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734441042 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734479904 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734498978 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734519005 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734565973 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734586000 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734611034 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734647036 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734685898 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734688044 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734724998 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734745026 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734761953 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734800100 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734802961 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734839916 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734853029 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734888077 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734930038 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.734934092 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.734966993 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735006094 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735023975 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735044003 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735079050 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735080004 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735119104 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735136986 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735157967 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735218048 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735220909 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735271931 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735310078 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735312939 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735351086 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735354900 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735389948 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735426903 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735430002 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735464096 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735502958 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735511065 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735539913 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735583067 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735586882 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735630989 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735655069 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735667944 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735706091 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735716105 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735744953 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735781908 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735797882 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735821009 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735857964 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735888958 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735904932 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735946894 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.735946894 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.735985041 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736022949 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736033916 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736061096 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736097097 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736119032 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736135006 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736172915 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736181974 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736221075 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736259937 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736262083 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736301899 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736339092 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736346960 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736377954 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736408949 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736413956 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736455917 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736469984 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736494064 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736541033 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736557007 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736583948 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736620903 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736634970 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736659050 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736696005 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736704111 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736735106 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736768961 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736773014 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736812115 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736857891 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736860037 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736901045 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736917019 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.736938953 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.736977100 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737004995 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737014055 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737051010 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737087965 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737102985 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737126112 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737173080 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737202883 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737215042 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737253904 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737257004 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737293005 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737313032 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737330914 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737366915 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737425089 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737463951 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737463951 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737478971 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737499952 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737546921 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737552881 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737588882 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737605095 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737627029 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737664938 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737690926 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737703085 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737755060 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737780094 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737790108 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737823963 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737838030 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737868071 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737905979 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737916946 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.737941980 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737977028 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.737999916 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738010883 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738044977 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738069057 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738080978 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738116980 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738121033 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738159895 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738198996 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738209963 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738226891 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738234043 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738267899 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738302946 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738302946 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738338947 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738358021 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738375902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738419056 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738424063 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738457918 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738485098 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738492012 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738528013 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738569975 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738569975 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738610029 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738626003 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738646984 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738682985 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738719940 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738728046 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738754034 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738789082 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738823891 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738826036 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738867044 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738882065 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738907099 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738940954 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.738959074 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.738976002 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.739012003 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.739026070 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.739077091 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.859774113 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.859838009 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.859869003 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.860069990 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.860133886 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.867712975 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.867779016 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.867816925 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.867863894 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.867904902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.867923021 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.867943048 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.867953062 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.867959023 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.867964029 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.867983103 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.867995977 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.868025064 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.868041992 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.868063927 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.868081093 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.868104935 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.868119955 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.868144035 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.868159056 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.868192911 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.868196964 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.868269920 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987241030 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987298012 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987337112 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987375975 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987399101 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987415075 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987427950 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987433910 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987438917 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987463951 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987469912 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987509012 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987515926 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987549067 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987565041 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987588882 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987602949 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987628937 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987637043 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987669945 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987701893 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987709045 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987725019 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987752914 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987761021 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987801075 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987802982 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987844944 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987854958 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987884045 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987898111 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987925053 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987931967 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.987963915 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.987978935 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988003969 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988018990 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988044977 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988054037 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988084078 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988102913 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988132000 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988132000 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988177061 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988189936 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988215923 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988255978 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988281012 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988295078 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988325119 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988332987 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988358974 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988373041 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988411903 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988414049 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988428116 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988460064 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988461018 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988504887 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988513947 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988543034 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988558054 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988583088 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988593102 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988622904 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988630056 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988661051 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988673925 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988701105 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988717079 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988742113 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988756895 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988790035 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988794088 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988833904 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988843918 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988873005 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988888025 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988912106 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988925934 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988951921 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.988969088 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.988991022 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989008904 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989031076 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989044905 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989068985 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989083052 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989118099 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989120007 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989161968 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989171982 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989200115 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989214897 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989239931 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989248991 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989279032 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989288092 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989319086 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989332914 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989358902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989372015 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989411116 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989439964 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989480972 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989495993 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989530087 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989535093 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989572048 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989609003 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989646912 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989660978 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989686012 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989691973 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989722967 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989742041 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989764929 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989779949 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989804029 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989840984 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989850998 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989859104 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989895105 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989908934 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989933968 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989962101 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.989974022 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.989983082 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990011930 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990026951 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990048885 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990065098 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990088940 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990102053 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990128040 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990140915 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990176916 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990200996 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990219116 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990257978 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990257978 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990271091 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990293980 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990313053 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990333080 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990360975 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990369081 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990384102 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990410089 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990447998 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990468979 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990494013 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990497112 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990537882 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990551949 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990576029 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990592957 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990614891 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990631104 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990652084 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990688086 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990735054 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990741968 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990772963 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990789890 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990811110 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990828037 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990849972 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990863085 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990886927 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990933895 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.990933895 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990978003 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.990991116 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991015911 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991029978 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991055012 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991069078 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991092920 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991131067 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991170883 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991208076 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991209984 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991246939 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991255045 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991276026 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991298914 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991317987 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991338968 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991358042 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991378069 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991415977 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991451025 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991473913 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991487980 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991503954 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991527081 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991540909 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991575956 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991604090 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991619110 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991625071 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991657972 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991672039 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991698027 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991714001 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991739035 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991775990 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991813898 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991816998 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991851091 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991852045 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991871119 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991898060 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991899967 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991940975 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991955042 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.991980076 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.991987944 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.992018938 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.992032051 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.992057085 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.992089987 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.992093086 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.992109060 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.992132902 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.992170095 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.992208958 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.992212057 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:09.992240906 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.992270947 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:09.996772051 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:10.122261047 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:10.122287989 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:10.122304916 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:10.122416973 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:10.122463942 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:10.167845011 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:11.472872972 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.473308086 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.514415979 CEST	443	49720	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.514548063 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.514830112 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.514956951 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.516432047 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.516549110 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.558811903 CEST	443	49720	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.558862925 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.559834003 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.559875965 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.559951067 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.559986115 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.560003042 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.560009956 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.560043097 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.560106039 CEST	443	49720	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.560146093 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.560147047 CEST	443	49720	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.560194969 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.560235023 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.560235977 CEST	443	49720	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.560265064 CEST	443	49720	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.560307980 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.560329914 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.560340881 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.560374975 CEST	443	49720	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.560431004 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.560507059 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.577403069 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.577435017 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.578476906 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.578665972 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.579102993 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.619851112 CEST	443	49720	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.619905949 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.619944096 CEST	443	49720	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.619966030 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.619982958 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.620004892 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.620028973 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.620060921 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.620529890 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.620695114 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.621248960 CEST	443	49720	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.621357918 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.624248028 CEST	49720	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.624351978 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.624593973 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.628035069 CEST	49719	443	192.168.2.3	192.229.221.185
Apr 12, 2021 06:39:11.703485012 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:11.709436893 CEST	443	49720	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.711503983 CEST	443	49719	192.229.221.185	192.168.2.3
Apr 12, 2021 06:39:11.831060886 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:11.836030006 CEST	443	49715	52.22.122.101	192.168.2.3
Apr 12, 2021 06:39:11.836149931 CEST	49715	443	192.168.2.3	52.22.122.101
Apr 12, 2021 06:39:14.257838011 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:14.257888079 CEST	443	49717	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:14.258178949 CEST	49717	443	192.168.2.3	104.131.254.50
Apr 12, 2021 06:39:29.265485048 CEST	443	49716	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:29.265542030 CEST	443	49716	104.131.254.50	192.168.2.3
Apr 12, 2021 06:39:29.265846968 CEST	49716	443	192.168.2.3	104.131.254.50

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 12, 2021 06:38:59.589272976 CEST	60152	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:38:59.638350964 CEST	53	60152	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:00.290273905 CEST	57544	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:00.356091022 CEST	53	57544	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:00.481626034 CEST	55984	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:00.530488968 CEST	53	55984	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:03.454173088 CEST	64185	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:03.514287949 CEST	53	64185	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:04.850531101 CEST	65110	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:04.907778978 CEST	53	65110	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:06.221604109 CEST	58361	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:06.281521082 CEST	53	58361	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:06.446650028 CEST	63492	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:06.495563030 CEST	53	63492	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:07.226530075 CEST	60831	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:07.305871964 CEST	53	60831	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:07.596357107 CEST	60100	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:07.649008989 CEST	53	60100	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:08.008636951 CEST	53195	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:08.066035032 CEST	53	53195	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:08.703433037 CEST	50141	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:08.796890974 CEST	53	50141	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:08.811830997 CEST	53023	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:08.860543966 CEST	53	53023	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:11.389027119 CEST	49563	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:11.468978882 CEST	53	49563	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:12.757299900 CEST	51352	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:12.810218096 CEST	53	51352	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:22.722981930 CEST	59349	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:22.780509949 CEST	53	59349	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:23.455302954 CEST	57084	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:23.514905930 CEST	53	57084	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:23.923723936 CEST	58823	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:23.973083019 CEST	53	58823	8.8.8.8	192.168.2.3
Apr 12, 2021 06:39:32.871584892 CEST	57568	53	192.168.2.3	8.8.8.8
Apr 12, 2021 06:39:33.120466948 CEST	53	57568	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Apr 12, 2021 06:39:07.226530075 CEST	192.168.2.3	8.8.8.8	0x2320	Standard query (0)	welsfargo.com-onlinebanking.com	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:08.008636951 CEST	192.168.2.3	8.8.8.8	0x486d	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:08.703433037 CEST	192.168.2.3	8.8.8.8	0x2e7f	Standard query (0)	ctsciencecenter.org	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:11.389027119 CEST	192.168.2.3	8.8.8.8	0xa4b6	Standard query (0)	logincdn.msauth.net	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:23.455302954 CEST	192.168.2.3	8.8.8.8	0xe981	Standard query (0)	favicon.ico	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Apr 12, 2021 06:39:07.305871964 CEST	8.8.8.8	192.168.2.3	0x2320	No error (0)	welsfargo.com-onlinebanking.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 06:39:07.305871964 CEST	8.8.8.8	192.168.2.3	0x2320	No error (0)	landing.training.knowbe4.com		54.175.141.245	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:07.305871964 CEST	8.8.8.8	192.168.2.3	0x2320	No error (0)	landing.training.knowbe4.com		54.174.93.80	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:07.305871964 CEST	8.8.8.8	192.168.2.3	0x2320	No error (0)	landing.training.knowbe4.com		3.229.61.65	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:07.305871964 CEST	8.8.8.8	192.168.2.3	0x2320	No error (0)	landing.training.knowbe4.com		54.166.42.17	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:07.305871964 CEST	8.8.8.8	192.168.2.3	0x2320	No error (0)	landing.training.knowbe4.com		52.44.64.207	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:07.305871964 CEST	8.8.8.8	192.168.2.3	0x2320	No error (0)	landing.training.knowbe4.com		52.22.122.101	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:08.066035032 CEST	8.8.8.8	192.168.2.3	0x486d	No error (0)	secured-login.net		52.22.122.101	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:08.066035032 CEST	8.8.8.8	192.168.2.3	0x486d	No error (0)	secured-login.net		3.229.61.65	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:08.066035032 CEST	8.8.8.8	192.168.2.3	0x486d	No error (0)	secured-login.net		54.175.141.245	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:08.066035032 CEST	8.8.8.8	192.168.2.3	0x486d	No error (0)	secured-login.net		52.44.64.207	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:08.066035032 CEST	8.8.8.8	192.168.2.3	0x486d	No error (0)	secured-login.net		54.166.42.17	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:08.066035032 CEST	8.8.8.8	192.168.2.3	0x486d	No error (0)	secured-login.net		54.174.93.80	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:08.796890974 CEST	8.8.8.8	192.168.2.3	0x2e7f	No error (0)	ctsciencecenter.org		104.131.254.50	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:11.468978882 CEST	8.8.8.8	192.168.2.3	0xa4b6	No error (0)	logincdn.msauth.net	lgincdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 06:39:11.468978882 CEST	8.8.8.8	192.168.2.3	0xa4b6	No error (0)	cs1227.wpc.alphacdn.net		192.229.221.185	A (IP address)	IN (0x0001)
Apr 12, 2021 06:39:23.514905930 CEST	8.8.8.8	192.168.2.3	0xe981	Name error (3)	favicon.ico	none	none	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 12, 2021 06:39:07.587385893 CEST	54.175.141.245	443	192.168.2.3	49711	CN=secured-login.net CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Sat Oct 24 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Wed Nov 24 00:59:59 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Apr 12, 2021 06:39:07.588985920 CEST	54.175.141.245	443	192.168.2.3	49712	CN=secured-login.net CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Sat Oct 24 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Wed Nov 24 00:59:59 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Apr 12, 2021 06:39:08.326195002 CEST	52.22.122.101	443	192.168.2.3	49715	CN=secured-login.net CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Sat Oct 24 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Wed Nov 24 00:59:59 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Apr 12, 2021 06:39:08.327457905 CEST	52.22.122.101	443	192.168.2.3	49714	CN=secured-login.net CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Sat Oct 24 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Wed Nov 24 00:59:59 CET 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Apr 12, 2021 06:39:09.056608915 CEST	104.131.254.50	443	192.168.2.3	49716	CN=ctsciencecenter.org CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Mon Mar 22 16:55:48 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Sun Jun 20 17:55:48 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 06:39:09.056608915 CEST	104.131.254.50	443	192.168.2.3	49716	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 06:39:09.057625055 CEST	104.131.254.50	443	192.168.2.3	49717	CN=ctsciencecenter.org CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Mon Mar 22 16:55:48 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Sun Jun 20 17:55:48 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 06:39:09.057625055 CEST	104.131.254.50	443	192.168.2.3	49717	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 06:39:11.560009956 CEST	192.229.221.185	443	192.168.2.3	49719	CN=identitycdn.msauth.net, O=Microsoft Corporation, L=Redmond, ST=Washington, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Jul 20 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Tue Jul 20 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Apr 12, 2021 06:39:11.560265064 CEST	192.229.221.185	443	192.168.2.3	49720	CN=identitycdn.msauth.net, O=Microsoft Corporation, L=Redmond, ST=Washington, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Jul 20 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Tue Jul 20 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 5780 Parent PID: 792

General

Start time:	06:39:05
Start date:	12/04/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff76f7a0000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: iexplore.exe PID: 5248 Parent PID: 5780

General

Start time:	06:39:06
Start date:	12/04/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5780 CREDAT:17410 /prefetch:2
Imagebase:	0x210000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Dropped Files

Sigma Overview

Signature Overview

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 5780 Parent PID: 792

General

Chronological Activities

Analysis Process: iexplore.exe PID: 5248 Parent PID: 5780

General

Chronological Activities

Disassembly